@intentius/chant-lexicon-aws 0.13.1 → 0.15.0

package/dist/components/__tests__/mock-cloud-executor.d.ts

@@ -0,0 +1,106 @@
+/**
+ * `MockCloudExecutor` — an in-memory fake of `CloudExecutor` (../cloud-executor.ts)
+ * for tests. No live AWS, no live docker: every method records its call and
+ * returns/derives a canned result, with enough state (a fake stack registry, a
+ * fake deployment registry, a fake cluster registry) to exercise realistic
+ * scenarios — a changeset that proposes a replacement, a stack that takes a
+ * few polls to go terminal, a CodeDeploy deployment that fails then rolls back,
+ * a cluster that becomes healthy after enough members join.
+ *
+ * Every capability factory in `../*.ts` accepts a `CloudExecutor`, so a test
+ * builds one `MockCloudExecutor` and passes it to every `create*Capability`
+ * under test — never touching the real, `child_process`/`net`-backed
+ * executor in `../cloud-executor.ts`.
+ */
+import type { CfnChange, CloudExecutor, EcsServiceState } from "../cloud-executor.js";
+import type { Neo4jClusterClient } from "@intentius/chant/components/verbs/cloud-executor";
+/** The mock's executor is a superset of the aws `CloudExecutor` plus the agnostic Neo4j client, so it satisfies both aws-leaf and core-agnostic capability factories in the e2e suites. */
+type MockExecutor = CloudExecutor & {
+    neo4j: Neo4jClusterClient;
+};
+export interface RecordedCall {
+    client: string;
+    method: string;
+    args: unknown;
+}
+/** Scripted behavior for one fake CloudFormation stack. */
+export interface FakeStackConfig {
+    /** Changes CloudFormation would propose for the next changeset created against this stack. Default: no changes (no-op update). */
+    changes?: CfnChange[];
+    /** Outputs the stack reports once terminal. */
+    outputs?: Record<string, string>;
+    /** Terminal status reported after `executeChangeSet` (or from the start, if the stack pre-exists). Default: "UPDATE_COMPLETE". */
+    terminalStatus?: string;
+    /** True if this is a brand-new stack (no prior stack) — affects `isCreate`. Default: false. */
+    isCreate?: boolean;
+}
+export interface FakeDeploymentConfig {
+    /** Terminal status CodeDeploy reports for this deployment. Default: "Succeeded". */
+    terminalStatus?: "Succeeded" | "Failed" | "Stopped";
+}
+export interface FakeClusterConfig {
+    /** Number of bolt endpoints (out of however many `cluster` lists) that report healthy. Default: all of them. */
+    healthyCount?: number;
+}
+export interface FakeLambdaConfig {
+    /** Alias -> version this function's alias currently resolves to, before any deploy in the test runs. */
+    aliasVersions?: Record<string, string>;
+    /** Force `waitForUpdate` to report a failed code update (simulates a bad image). */
+    failUpdate?: boolean;
+}
+/** Scripted behavior for one fake EMR job run. */
+export interface FakeJobRunConfig {
+    /** Terminal state reported once the run "completes". Default: "COMPLETED". */
+    terminalState?: "COMPLETED" | "FAILED" | "CANCELLED";
+}
+export interface MockCloudExecutorOptions {
+    stacks?: Record<string, FakeStackConfig>;
+    deployments?: Record<string, FakeDeploymentConfig>;
+    clusters?: Record<string, FakeClusterConfig>;
+    /** ECS service states keyed by `cluster/service`, evolved by `updateService`/`rollbackService` calls. */
+    ecsServices?: Record<string, EcsServiceState>;
+    /** Force every docker/ecr call to fail (simulates a build/push failure). */
+    failDocker?: boolean;
+    /** Force every `host` (registry-less `load-image-on-host`) call to fail (simulates an unreachable host). */
+    failHost?: boolean;
+    /** Lambda functions keyed by function name. */
+    lambdas?: Record<string, FakeLambdaConfig>;
+    /** Scripted job runs keyed by the run id the test expects (see `MockCloudExecutor.setJobRun` for post-construction control, e.g. before the run id is known). */
+    jobRuns?: Record<string, FakeJobRunConfig>;
+    /** Object counts `s3.sync` reports (uploaded always; deleted only when the call passes `delete: true`). */
+    s3Sync?: {
+        uploaded?: number;
+        deleted?: number;
+    };
+    /** Canned stdout `host.exec` returns (e.g. a byte count for `copy-to-host`, or command output for `remote-exec`). */
+    hostExecStdout?: string;
+    /** Result `ecs.waitForTask` reports for a one-off `run-task` (e.g. a migration task). Default: clean exit (`STOPPED`, exit 0). */
+    ecsTask?: {
+        lastStatus?: string;
+        exitCode?: number;
+        stoppedReason?: string;
+    };
+    /** Result `lambda.invoke` returns. Default: `{ statusCode: 200, payload: "" }`. */
+    lambdaInvoke?: {
+        statusCode?: number;
+        payload?: string;
+        functionError?: string;
+    };
+}
+/** An injected `CloudExecutor` plus the call log and stack-status controls tests use to script scenarios and assert on I/O. */
+export interface MockCloudExecutor {
+    executor: MockExecutor;
+    calls: RecordedCall[];
+    /** Change a stack's terminal status/outputs/changes after construction (e.g. to simulate a later poll succeeding). */
+    setStack(name: string, config: FakeStackConfig): void;
+    /** Change a deployment's terminal status after construction. */
+    setDeployment(id: string, config: FakeDeploymentConfig): void;
+    /** Change how many cluster members report healthy after construction (simulates a follower catching up). */
+    setClusterHealth(cluster: string, healthyCount: number): void;
+    /** Change a job run's terminal state after construction (e.g. once its runId is known from a prior `startJobRun` call). */
+    setJobRun(runId: string, config: FakeJobRunConfig): void;
+}
+/** Build a fresh mock `CloudExecutor`. Every method is deterministic and synchronous-fast — no real polling delay. */
+export declare function createMockCloudExecutor(options?: MockCloudExecutorOptions): MockCloudExecutor;
+export {};
+//# sourceMappingURL=mock-cloud-executor.d.ts.map

package/dist/components/__tests__/mock-cloud-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-cloud-executor.d.ts","sourceRoot":"","sources":["../../../src/components/__tests__/mock-cloud-executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EACV,SAAS,EAIT,aAAa,EAKb,eAAe,EAWhB,MAAM,mBAAmB,CAAC;AAK3B,OAAO,KAAK,EAMV,kBAAkB,EAEnB,MAAM,kDAAkD,CAAC;AAE1D,2LAA2L;AAC3L,KAAK,YAAY,GAAG,aAAa,GAAG;IAAE,KAAK,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAElE,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;CACf;AAED,2DAA2D;AAC3D,MAAM,WAAW,eAAe;IAC9B,kIAAkI;IAClI,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC;IACtB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,kIAAkI;IAClI,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,+FAA+F;IAC/F,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,oFAAoF;IACpF,cAAc,CAAC,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;CACrD;AAED,MAAM,WAAW,iBAAiB;IAChC,gHAAgH;IAChH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,wGAAwG;IACxG,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,oFAAoF;IACpF,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,kDAAkD;AAClD,MAAM,WAAW,gBAAgB;IAC/B,8EAA8E;IAC9E,aAAa,CAAC,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;CACtD;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACzC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC7C,yGAAyG;IACzG,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC9C,4EAA4E;IAC5E,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,4GAA4G;IAC5G,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3C,iKAAiK;IACjK,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3C,2GAA2G;IAC3G,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD,qHAAqH;IACrH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kIAAkI;IAClI,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7E,mFAAmF;IACnF,YAAY,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAClF;AAED,+HAA+H;AAC/H,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,YAAY,CAAC;IACvB,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,sHAAsH;IACtH,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC;IACtD,gEAAgE;IAChE,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC9D,4GAA4G;IAC5G,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9D,2HAA2H;IAC3H,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;CAC1D;AAED,sHAAsH;AACtH,wBAAgB,uBAAuB,CAAC,OAAO,GAAE,wBAA6B,GAAG,iBAAiB,CAwRjG"}

package/dist/components/apply.d.ts

@@ -0,0 +1,242 @@
+/**
+ * apply family — the most cloud-shaped family (see docs/components/cloud-boundary).
+ * AWS leaves for this starter set: cfn-deploy, ecs-update-service,
+ * lambda-deploy, s3-sync, cdn-invalidate, run-migration.
+ *
+ * `cfn-deploy` carries declarative safety options (changeset preview,
+ * `onReplace`, `stageGsi`) — sticky per-resource knowledge (a DynamoDB GSI
+ * updates one at a time; a key-schema change forces replacement) lives inside
+ * the capability, configured by options, never scripted per component. See
+ * docs/components/capabilities.mdx#stickiness-lives-in-the-capability.
+ *
+ * `cfn-deploy` and `ecs-update-service` are real implementations (#557, epic
+ * #551) over the injectable `CloudExecutor` (./cloud-executor.ts).
+ * `lambda-deploy` gained a real implementation in #558 (epic #551) — the one
+ * new capability the fourth, genuinely different validation component
+ * (image-processor-lambda) needed; see ../SPRAWL-VALIDATION.md. `s3-sync`,
+ * `cdn-invalidate`, and `run-migration` are also real over the same executor —
+ * `run-migration` dispatches on its target transport (ECS one-off task, Lambda
+ * invoke, or SSM host command).
+ */
+import type { Capability } from "@intentius/chant/components/capability";
+import { type CfnChange, type CloudExecutor } from "./cloud-executor.js";
+/**
+ * How `cfn-deploy` handles a changeset that requires resource replacement.
+ * - `block`: refuse to apply; surface the changeset for human review.
+ * - `allow`: apply the replacement as CloudFormation proposes it.
+ * - `snapshot-first`: take a `snapshot-before` capture, then allow the replacement.
+ */
+export type CfnReplacePolicy = "block" | "allow" | "snapshot-first";
+export interface CfnDeployInput {
+    /**
+     * Stack name. Optional because an `infra`-archetype component with a single
+     * stack per component (e.g. the DynamoDB pilot) may omit it and let it
+     * default to `ctx.component` — the component name doubles as the stack
+     * name, the same identifier the sibling `wait-for-stack` step in that
+     * pilot's Verify phase references explicitly.
+     */
+    stack?: string;
+    /** Path to the template, or an archive-relative reference (`archive:search.template.json`). */
+    template: string;
+    /** Template parameters, including wired references (e.g. `imageRef: "@Publish.digest"`). */
+    inputs?: Record<string, string>;
+    /** Image reference wired from a `docker-build`/`publish-image` step (e.g. `"@Publish.digest"`, already resolved by the driver). Passed through as the `ImageRef` template parameter. */
+    imageRef?: string;
+    /** Preview the changeset before applying. Default: true. */
+    previewChangeset?: boolean;
+    /** Replacement safety policy. Default: "block". */
+    onReplace?: CfnReplacePolicy;
+    /** Stage DynamoDB GSI changes (add-then-backfill-then-remove) instead of an in-place replace. Default: false. */
+    stageGsi?: boolean;
+}
+export interface CfnDeployOutput {
+    /** Final stack status (`CREATE_COMPLETE`, `UPDATE_COMPLETE`, ...). */
+    stackStatus: string;
+    /** Stack outputs, available to downstream steps/components. */
+    outputs: Record<string, string>;
+    /** Snapshot id captured before an `onReplace: "snapshot-first"` replacement, if one was taken. */
+    snapshotId?: string;
+}
+/**
+ * Thrown when a changeset proposes a resource replacement and `onReplace` is
+ * `"block"` (the default) — refusing to apply rather than silently destroying
+ * and recreating a resource, which for a stateful resource (a DynamoDB table,
+ * an RDS instance) means data loss. Carries the specific resources CloudFormation
+ * proposed replacing, so the caller/human reviewing the changeset knows exactly
+ * what was refused.
+ */
+export declare class CfnReplacementBlockedError extends Error {
+    readonly stack: string;
+    readonly replacements: CfnChange[];
+    constructor(stack: string, replacements: CfnChange[]);
+}
+/**
+ * Deploy a CloudFormation stack: create a changeset, apply the declarative
+ * safety policy against its proposed changes, then execute (or refuse) it and
+ * wait for the stack to reach a terminal status.
+ *
+ * - `onReplace: "block"` (default) — `CfnReplacementBlockedError` if any
+ *   change requires replacement; the changeset is left/deleted unexecuted.
+ * - `onReplace: "allow"` — executes regardless of replacement.
+ * - `onReplace: "snapshot-first"` — takes a `snapshot-before`-style capture
+ *   (via `executor.cloudformation`'s DynamoDB/RDS-aware snapshot, when the
+ *   replaced resource is a stateful type) before executing.
+ * - `stageGsi` records intent only in this phase (the real add→backfill→remove
+ *   staging is DynamoDB-specific choreography layered on top of the plain
+ *   changeset apply; Phase 1 surfaces the option and passes it through
+ *   uninterpreted rather than half-implementing GSI staging, since staging
+ *   requires a second follow-up deploy the single-step `cfn-deploy` capability
+ *   does not orchestrate on its own).
+ *
+ * Rollback: trigger CloudFormation's native `rollback-stack` — the stack's own
+ * automatic-rollback mechanism restores the last known-good state.
+ */
+export declare function createCfnDeployCapability(executor?: CloudExecutor): Capability<CfnDeployInput, CfnDeployOutput>;
+/** Default `cfn-deploy` capability, backed by the real `CloudExecutor`. */
+export declare const cfnDeployCapability: Capability<CfnDeployInput, CfnDeployOutput>;
+export interface EcsUpdateServiceInput {
+    /** ECS cluster name or ARN. */
+    cluster: string;
+    /** ECS service name. */
+    service: string;
+    /** Task definition/image reference to roll out (e.g. `"@Publish.digest"`). */
+    imageRef?: string;
+    /** Desired task count. Omit to leave unchanged. */
+    desiredCount?: number;
+    /** Force a new deployment even if the task definition is unchanged. Default: false. */
+    forceNewDeployment?: boolean;
+}
+export interface EcsUpdateServiceOutput {
+    /** ARN of the new/updated service deployment. */
+    deploymentId: string;
+}
+/**
+ * Roll a new task definition/image out to an ECS service via `UpdateService`.
+ * Rollback re-invokes `updateService` with the same input — a best-effort
+ * capability-level compensation for the common case (recorded here so the
+ * capability is never rollback-silent); a component whose service swap needs
+ * a specific prior task definition/count restored (rather than a re-apply of
+ * the same input) supplies its own explicit rollback phase instead, as the
+ * ALB/ECS pilot does with `rollback-previous`.
+ */
+export declare function createEcsUpdateServiceCapability(executor?: CloudExecutor): Capability<EcsUpdateServiceInput, EcsUpdateServiceOutput>;
+/** Default `ecs-update-service` capability, backed by the real `CloudExecutor`. */
+export declare const ecsUpdateServiceCapability: Capability<EcsUpdateServiceInput, EcsUpdateServiceOutput>;
+export interface LambdaDeployInput {
+    /** Function name or ARN. */
+    functionName: string;
+    /** Reference to the packaged code — an image URI (e.g. `"@Publish.uri"` from `publish-image`) for a container-image function. */
+    codeRef: string;
+    /** Publish a new immutable version after updating code. Default: true. */
+    publish?: boolean;
+    /** Alias to repoint at the new version (e.g. "live"). */
+    alias?: string;
+}
+export interface LambdaDeployOutput {
+    /** Published function version. */
+    version: string;
+    /** Function ARN (version-qualified if `publish` was true). */
+    functionArn: string;
+}
+/**
+ * Update a Lambda function's code to a new container image, wait for the
+ * update to apply, and (by default) publish an immutable version and repoint
+ * `alias` at it — the same digest-promotion invariant every other apply verb
+ * follows (`imageRef`/`codeRef` is a resolved `publish-image` digest, never a
+ * rebuild). Rollback restores whatever version `alias` pointed at before this
+ * step ran (captured up front), repointing the alias back — mirroring
+ * `ecs-update-service`'s best-effort re-apply style rather than a native
+ * automatic rollback (Lambda has none for code updates).
+ */
+export declare function createLambdaDeployCapability(executor?: CloudExecutor): Capability<LambdaDeployInput, LambdaDeployOutput>;
+/** Default `lambda-deploy` capability, backed by the real `CloudExecutor`. */
+export declare const lambdaDeployCapability: Capability<LambdaDeployInput, LambdaDeployOutput>;
+export interface S3SyncInput {
+    /** Local path or archive-relative path to sync from. */
+    from: string;
+    /** Destination S3 URI (e.g. `s3://bucket/prefix`). */
+    to: string;
+    /** Delete destination keys not present in the source. Default: false. */
+    delete?: boolean;
+}
+export interface S3SyncOutput {
+    /** Number of objects uploaded. */
+    uploaded: number;
+    /** Number of objects deleted (when `delete: true`). */
+    deleted: number;
+}
+/** Sync a directory of static assets to an S3 bucket via `aws s3 sync` (endpoint-aware through the `CloudExecutor`). */
+export declare function createS3SyncCapability(executor?: CloudExecutor): Capability<S3SyncInput, S3SyncOutput>;
+/** Default `s3-sync` capability, backed by the real `CloudExecutor`. */
+export declare const s3SyncCapability: Capability<S3SyncInput, S3SyncOutput>;
+export interface CdnInvalidateInput {
+    /** CloudFront distribution id. */
+    distributionId: string;
+    /** Path patterns to invalidate. Default: `["/*"]`. */
+    paths?: string[];
+}
+export interface CdnInvalidateOutput {
+    /** Invalidation batch id, for polling completion. */
+    invalidationId: string;
+}
+/** Invalidate CDN cache paths after a content update (e.g. following `s3-sync`), via `aws cloudfront create-invalidation`. */
+export declare function createCdnInvalidateCapability(executor?: CloudExecutor): Capability<CdnInvalidateInput, CdnInvalidateOutput>;
+/** Default `cdn-invalidate` capability, backed by the real `CloudExecutor`. */
+export declare const cdnInvalidateCapability: Capability<CdnInvalidateInput, CdnInvalidateOutput>;
+/**
+ * Where a migration runs. Discriminated on `via` so the composition grammar
+ * stays honest about the transport (each is a different AWS surface), while the
+ * verb reports a single `{applied, version}` regardless.
+ * - `ecs-task`: run the migration image as a one-off ECS/Fargate task (the most
+ *   common DB-migration transport — a Rails/Django/Flyway `migrate` container).
+ * - `lambda`: synchronously invoke a migration function.
+ * - `host`: run a migration command on an SSM-managed host (reuses the same
+ *   transport as `remote-exec`).
+ */
+export type MigrationTarget = {
+    via: "ecs-task";
+    cluster: string;
+    taskDefinition: string;
+    /** Container to override the command on; defaults to the task def's single container. */
+    container?: string;
+    /** Command (argv) the migration runs; omit to use the task def's own command. */
+    command?: string[];
+    launchType?: "FARGATE" | "EC2";
+    subnets?: string[];
+    securityGroups?: string[];
+    assignPublicIp?: boolean;
+} | {
+    via: "lambda";
+    function: string;
+    payload?: string;
+} | {
+    via: "host";
+    host: string;
+    command: string;
+    cwd?: string;
+};
+export interface RunMigrationInput {
+    /** Migration tool/runner identifier (e.g. "flyway", "prisma", "custom"). Informational — recorded for provenance, does not change the transport. */
+    tool: string;
+    /** Where the migration runs. */
+    target: MigrationTarget;
+    /** Reference to the migration artifact (e.g. `"@Publish.digest"` for a migration image). Informational. */
+    artifactRef?: string;
+}
+export interface RunMigrationOutput {
+    /** True if any migrations were applied (false if already up to date, when the runner reports it). */
+    applied: boolean;
+    /** Migration version/checksum reached, when the runner reports one (empty string otherwise). */
+    version: string;
+}
+/**
+ * Run a database/schema migration against a target as a deploy step, dispatching
+ * on the target transport (ECS one-off task, Lambda invoke, or SSM host command)
+ * through the injectable `CloudExecutor`. A non-clean outcome (non-zero exit, a
+ * Lambda `FunctionError`) throws so the phase fails rather than proceeding on an
+ * unmigrated schema.
+ */
+export declare function createRunMigrationCapability(executor?: CloudExecutor): Capability<RunMigrationInput, RunMigrationOutput>;
+/** Default `run-migration` capability, backed by the real `CloudExecutor`. */
+export declare const runMigrationCapability: Capability<RunMigrationInput, RunMigrationOutput>;
+//# sourceMappingURL=apply.d.ts.map

package/dist/components/apply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../src/components/apply.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wCAAwC,CAAC;AACzE,OAAO,EAAwB,KAAK,SAAS,EAAE,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAI5F;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,OAAO,GAAG,gBAAgB,CAAC;AAEpE,MAAM,WAAW,cAAc;IAC7B;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+FAA+F;IAC/F,QAAQ,EAAE,MAAM,CAAC;IACjB,4FAA4F;IAC5F,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,wLAAwL;IACxL,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,mDAAmD;IACnD,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,iHAAiH;IACjH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,sEAAsE;IACtE,WAAW,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,kGAAkG;IAClG,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;aAEjC,KAAK,EAAE,MAAM;aACb,YAAY,EAAE,SAAS,EAAE;gBADzB,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,SAAS,EAAE;CAS5C;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,GAAE,aAAsC,GAC/C,UAAU,CAAC,cAAc,EAAE,eAAe,CAAC,CAuD7C;AAYD,2EAA2E;AAC3E,eAAO,MAAM,mBAAmB,EAAE,UAAU,CAAC,cAAc,EAAE,eAAe,CAA+B,CAAC;AAI5G,MAAM,WAAW,qBAAqB;IACpC,+BAA+B;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,wBAAwB;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uFAAuF;IACvF,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,sBAAsB;IACrC,iDAAiD;IACjD,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;GAQG;AACH,wBAAgB,gCAAgC,CAC9C,QAAQ,GAAE,aAAsC,GAC/C,UAAU,CAAC,qBAAqB,EAAE,sBAAsB,CAAC,CAsB3D;AAED,mFAAmF;AACnF,eAAO,MAAM,0BAA0B,EAAE,UAAU,CAAC,qBAAqB,EAAE,sBAAsB,CAC7D,CAAC;AAIrC,MAAM,WAAW,iBAAiB;IAChC,4BAA4B;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,iIAAiI;IACjI,OAAO,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,GAAE,aAAsC,GAC/C,UAAU,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CAqCnD;AAED,8EAA8E;AAC9E,eAAO,MAAM,sBAAsB,EAAE,UAAU,CAAC,iBAAiB,EAAE,kBAAkB,CAAkC,CAAC;AAIxH,MAAM,WAAW,WAAW;IAC1B,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,sDAAsD;IACtD,EAAE,EAAE,MAAM,CAAC;IACX,yEAAyE;IACzE,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wHAAwH;AACxH,wBAAgB,sBAAsB,CAAC,QAAQ,GAAE,aAAsC,GAAG,UAAU,CAAC,WAAW,EAAE,YAAY,CAAC,CAQ9H;AAED,wEAAwE;AACxE,eAAO,MAAM,gBAAgB,EAAE,UAAU,CAAC,WAAW,EAAE,YAAY,CAA4B,CAAC;AAIhG,MAAM,WAAW,kBAAkB;IACjC,kCAAkC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,sDAAsD;IACtD,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,qDAAqD;IACrD,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,8HAA8H;AAC9H,wBAAgB,6BAA6B,CAAC,QAAQ,GAAE,aAAsC,GAAG,UAAU,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,CAWnJ;AAED,+EAA+E;AAC/E,eAAO,MAAM,uBAAuB,EAAE,UAAU,CAAC,kBAAkB,EAAE,mBAAmB,CAAmC,CAAC;AAI5H;;;;;;;;;GASG;AACH,MAAM,MAAM,eAAe,GACvB;IACE,GAAG,EAAE,UAAU,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,yFAAyF;IACzF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC;IAC/B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,GACD;IAAE,GAAG,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjE,MAAM,WAAW,iBAAiB;IAChC,oJAAoJ;IACpJ,IAAI,EAAE,MAAM,CAAC;IACb,gCAAgC;IAChC,MAAM,EAAE,eAAe,CAAC;IACxB,2GAA2G;IAC3G,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,qGAAqG;IACrG,OAAO,EAAE,OAAO,CAAC;IACjB,gGAAgG;IAChG,OAAO,EAAE,MAAM,CAAC;CACjB;AAyBD;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAAC,QAAQ,GAAE,aAAsC,GAAG,UAAU,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CA2ChJ;AAED,8EAA8E;AAC9E,eAAO,MAAM,sBAAsB,EAAE,UAAU,CAAC,iBAAiB,EAAE,kBAAkB,CAAkC,CAAC"}

package/dist/components/builders.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Typed step-builders for the aws lexicon's verbs — the same ergonomic sugar
+ * core offers for its agnostic verbs (#658), reusing the exported `step`
+ * projection from `@intentius/chant/components`. `cfnDeploy({ template })` is
+ * exactly `{ kind: "cfn-deploy", template }`, but with per-verb argument
+ * checking from each capability's own `Input` type.
+ */
+import type { ExtractConfigBomInput } from "./config-bom.js";
+import type { PublishImageInput, PublishArtifactInput } from "./publish.js";
+import type { CfnDeployInput, EcsUpdateServiceInput, LambdaDeployInput, S3SyncInput, CdnInvalidateInput, RunMigrationInput } from "./apply.js";
+import type { EmrStartJobRunInput, EmrSubmitStepInput } from "./job-submission.js";
+import type { CodeDeployInput, CopyToHostInput, RemoteExecInput } from "./host-delivery.js";
+import type { WaitForStackInput, WaitSteadyStateInput, WaitJobInput } from "./wait-aws.js";
+import type { SnapshotBeforeInput, RollbackPreviousInput } from "./safety.js";
+export declare const extractConfigBom: (input: ExtractConfigBomInput) => import("@intentius/chant/components").Step;
+export declare const publishImage: (input: PublishImageInput) => import("@intentius/chant/components").Step;
+export declare const loadImageOnHost: (input: PublishImageInput) => import("@intentius/chant/components").Step;
+export declare const publishArtifact: (input: PublishArtifactInput) => import("@intentius/chant/components").Step;
+/** Alias for {@link publishArtifact} — the docs/epic use both names for the same verb. */
+export declare const publishAsset: (input: PublishArtifactInput) => import("@intentius/chant/components").Step;
+export declare const cfnDeploy: (input: CfnDeployInput) => import("@intentius/chant/components").Step;
+export declare const ecsUpdateService: (input: EcsUpdateServiceInput) => import("@intentius/chant/components").Step;
+export declare const lambdaDeploy: (input: LambdaDeployInput) => import("@intentius/chant/components").Step;
+export declare const s3Sync: (input: S3SyncInput) => import("@intentius/chant/components").Step;
+export declare const cdnInvalidate: (input: CdnInvalidateInput) => import("@intentius/chant/components").Step;
+export declare const runMigration: (input: RunMigrationInput) => import("@intentius/chant/components").Step;
+export declare const emrStartJobRun: (input: EmrStartJobRunInput) => import("@intentius/chant/components").Step;
+export declare const emrSubmitStep: (input: EmrSubmitStepInput) => import("@intentius/chant/components").Step;
+export declare const codeDeploy: (input: CodeDeployInput) => import("@intentius/chant/components").Step;
+export declare const copyToHost: (input: CopyToHostInput) => import("@intentius/chant/components").Step;
+export declare const remoteExec: (input: RemoteExecInput) => import("@intentius/chant/components").Step;
+export declare const waitForStack: (input: WaitForStackInput) => import("@intentius/chant/components").Step;
+export declare const waitSteadyState: (input: WaitSteadyStateInput) => import("@intentius/chant/components").Step;
+export declare const waitJob: (input: WaitJobInput) => import("@intentius/chant/components").Step;
+export declare const snapshotBefore: (input: SnapshotBeforeInput) => import("@intentius/chant/components").Step;
+export declare const rollbackPrevious: (input: RollbackPreviousInput) => import("@intentius/chant/components").Step;
+//# sourceMappingURL=builders.d.ts.map

package/dist/components/builders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builders.d.ts","sourceRoot":"","sources":["../../src/components/builders.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACzE,OAAO,KAAK,EACV,cAAc,EACd,qBAAqB,EACrB,iBAAiB,EACjB,WAAW,EACX,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACzF,OAAO,KAAK,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACxF,OAAO,KAAK,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AAG3E,eAAO,MAAM,gBAAgB,8EAAoD,CAAC;AAGlF,eAAO,MAAM,YAAY,0EAA2C,CAAC;AACrE,eAAO,MAAM,eAAe,0EAAgD,CAAC;AAC7E,eAAO,MAAM,eAAe,6EAAiD,CAAC;AAC9E,0FAA0F;AAC1F,eAAO,MAAM,YAAY,6EAAkB,CAAC;AAG5C,eAAO,MAAM,SAAS,uEAAqC,CAAC;AAC5D,eAAO,MAAM,gBAAgB,8EAAoD,CAAC;AAClF,eAAO,MAAM,YAAY,0EAA2C,CAAC;AACrE,eAAO,MAAM,MAAM,oEAA+B,CAAC;AACnD,eAAO,MAAM,aAAa,2EAA6C,CAAC;AACxE,eAAO,MAAM,YAAY,0EAA2C,CAAC;AAGrE,eAAO,MAAM,cAAc,4EAAiD,CAAC;AAC7E,eAAO,MAAM,aAAa,2EAA8C,CAAC;AAGzE,eAAO,MAAM,UAAU,wEAAuC,CAAC;AAC/D,eAAO,MAAM,UAAU,wEAAwC,CAAC;AAChE,eAAO,MAAM,UAAU,wEAAuC,CAAC;AAG/D,eAAO,MAAM,YAAY,0EAA4C,CAAC;AACtE,eAAO,MAAM,eAAe,6EAAkD,CAAC;AAC/E,eAAO,MAAM,OAAO,qEAAiC,CAAC;AAGtD,eAAO,MAAM,cAAc,4EAA+C,CAAC;AAC3E,eAAO,MAAM,gBAAgB,8EAAmD,CAAC"}

package/dist/components/capability-plugin.d.ts

@@ -0,0 +1,23 @@
+/**
+ * `awsCapabilityPlugin` — the aws lexicon's capability plugin. It contributes
+ * every AWS operational leaf (apply, job-submission, host-delivery, safety, the
+ * cloud-specific waits, and publish) through core's `CapabilityPlugin` contract
+ * (`@intentius/chant/components/capability-plugin`), so a project declaring
+ * `lexicons: ["aws"]` gets these verbs registered automatically when it runs
+ * components — the seam docs/components/cloud-boundary describes. Core's starter
+ * set carries only the agnostic verbs; the cloud leaves live here.
+ */
+import type { CapabilityPlugin } from "@intentius/chant/components/capability-plugin";
+/** The AWS verb families this plugin contributes, grouped for `families()` — mirrors core's `STARTER_VERB_FAMILIES` shape. */
+export declare const AWS_VERB_FAMILIES: {
+    readonly sbom: readonly ["extract-config-bom"];
+    readonly publish: readonly ["publish-image", "load-image-on-host", "publish-artifact"];
+    readonly apply: readonly ["cfn-deploy", "ecs-update-service", "lambda-deploy", "s3-sync", "cdn-invalidate", "run-migration"];
+    readonly jobSubmission: readonly ["emr-start-job-run", "emr-submit-step"];
+    readonly hostDelivery: readonly ["code-deploy", "copy-to-host", "remote-exec"];
+    readonly waitVerify: readonly ["wait-for-stack", "wait-steady-state", "wait-job"];
+    readonly safety: readonly ["snapshot-before", "rollback-previous"];
+};
+/** The aws lexicon's capability plugin — loaded by core when a project's `chant.config.ts` lists `lexicons: ["aws"]`. */
+export declare const awsCapabilityPlugin: CapabilityPlugin;
+//# sourceMappingURL=capability-plugin.d.ts.map

package/dist/components/capability-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-plugin.d.ts","sourceRoot":"","sources":["../../src/components/capability-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+CAA+C,CAAC;AAiBtF,8HAA8H;AAC9H,eAAO,MAAM,iBAAiB;;;;;;;;CASpB,CAAC;AA4BX,yHAAyH;AACzH,eAAO,MAAM,mBAAmB,EAAE,gBAKjC,CAAC"}