@intentius/chant-lexicon-aws 0.14.0 → 0.15.0

package/dist/import/live-export.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"live-export.d.ts","sourceRoot":"","sources":["../../src/import/live-export.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAInF;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,OAAO,EACrB,QAAQ,CAAC,EAAE,gBAAgB,EAC3B,KAAK,CAAC,EAAE,OAAO,GACd,gBAAgB,CAoBlB"}
+{"version":3,"file":"live-export.d.ts","sourceRoot":"","sources":["../../src/import/live-export.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAKnF;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,OAAO,EACrB,QAAQ,CAAC,EAAE,gBAAgB,EAC3B,KAAK,CAAC,EAAE,OAAO,GACd,gBAAgB,CAoBlB"}

package/dist/index.d.ts

@@ -24,4 +24,5 @@ export type { LambdaFunctionProps, LambdaApiProps, ScheduledLambdaProps, LambdaS
 export { generate, writeGeneratedFiles } from "./codegen/generate.js";
 export { packageLexicon } from "./codegen/package.js";
 export type { PackageOptions, PackageResult } from "./codegen/package.js";
+export { awsCapabilityPlugin } from "./components/capability-plugin.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGxC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACjF,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG5D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACvI,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAG9E,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtF,YAAY,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAChG,YAAY,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAC1E,YAAY,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAGrE,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAGrC,OAAO,EACL,GAAG,EACH,GAAG,EACH,MAAM,EACN,EAAE,EACF,IAAI,EACJ,MAAM,EACN,KAAK,EACL,MAAM,EACN,MAAM,EACN,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,WAAW,EACX,aAAa,EACb,eAAe,EACf,cAAc,EACd,eAAe,EACf,eAAe,GAChB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,GAAG,EACH,SAAS,EACT,MAAM,EACN,SAAS,EACT,OAAO,EACP,SAAS,EACT,OAAO,EACP,gBAAgB,EAChB,SAAS,GACV,MAAM,UAAU,CAAC;AAIlB,cAAc,mBAAmB,CAAC;AAGlC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC5E,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,kBAAkB,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAG5J,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAGrJ,OAAO,EACL,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAClE,SAAS,EACT,eAAe,EAAE,eAAe,EAChC,SAAS,EAAE,iBAAiB,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EACjE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAC3E,kBAAkB,EAClB,eAAe,EAAE,UAAU,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,mBAAmB,EAAE,cAAc,EAAE,oBAAoB,EACzD,cAAc,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,aAAa,EAAE,cAAc,EAC1F,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,gBAAgB,EACzG,uBAAuB,EACvB,oBAAoB,EAAE,eAAe,GACtC,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGxC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACjF,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG5D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACvI,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAG9E,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtF,YAAY,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAChG,YAAY,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAC1E,YAAY,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAGrE,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAGrC,OAAO,EACL,GAAG,EACH,GAAG,EACH,MAAM,EACN,EAAE,EACF,IAAI,EACJ,MAAM,EACN,KAAK,EACL,MAAM,EACN,MAAM,EACN,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,WAAW,EACX,aAAa,EACb,eAAe,EACf,cAAc,EACd,eAAe,EACf,eAAe,GAChB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,GAAG,EACH,SAAS,EACT,MAAM,EACN,SAAS,EACT,OAAO,EACP,SAAS,EACT,OAAO,EACP,gBAAgB,EAChB,SAAS,GACV,MAAM,UAAU,CAAC;AAIlB,cAAc,mBAAmB,CAAC;AAGlC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC5E,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,kBAAkB,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAG5J,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAGrJ,OAAO,EACL,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAClE,SAAS,EACT,eAAe,EAAE,eAAe,EAChC,SAAS,EAAE,iBAAiB,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EACjE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAC3E,kBAAkB,EAClB,eAAe,EAAE,UAAU,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,mBAAmB,EAAE,cAAc,EAAE,oBAAoB,EACzD,cAAc,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,aAAa,EAAE,cAAc,EAC1F,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,gBAAgB,EACzG,uBAAuB,EACvB,oBAAoB,EAAE,eAAe,GACtC,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAKvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC"}

package/dist/integrity.json

@@ -1,9 +1,9 @@
 {
   "algorithm": "sha256",
   "artifacts": {
-    "manifest.json": "5d769024217113718eed2ede3a222b523586c669950149224748ee35ddf8d12b",
-    "meta.json": "79d532800fe04d13dbf5204affc9208f18ef0649c11a29db3eb4a7871dfbdee0",
-    "types/index.d.ts": "e6da083ad242d998cd4ea462eb99bccc7d4def879f93c46382fab8c8d2a69f11",
+    "manifest.json": "c978f049afab757ed0030d2d1393db1ef1d55538d199157ef580fa576944f266",
+    "meta.json": "511f57814cc8d99a30cbcef2830f21ec374f2919f1d4cffcdc40986b0bf754da",
+    "types/index.d.ts": "096157407bc4a48fe332cd67cc5b3832d513e63995a5b199b89dc34914ba348d",
     "rules/hardcoded-region.ts": "5a0eaf7ab391231fe6cd51426ece29539cb4b36f31c8dd060956638fed55722a",
     "rules/iam-wildcard.ts": "135d7217d278fef50939e605c5da32603ba35674b8c4b5c4d66a06c77903e945",
     "rules/s3-encryption.ts": "c4f9f8aa8dc382ed98c7b04e820a600590cc75335a8db2e087cbfbfe4003d09e",
@@ -40,5 +40,5 @@
     "skills/chant-aws.md": "4d65eb160e001f2af42eb7c622a5b498c2fd1f5afbd6c8155615c010fb265c63",
     "skills/chant-aws-eks.md": "8789255709ff004ad0a875fd5999edcdc66fc6e33d710db058d9f42703bcfdfe"
   },
-  "composite": "d50b5b9d1af856a6fb41e476fac8164445f8ab40c2a5f9ea575df7df15fca39a"
+  "composite": "3ceaeddab6c160eb4382d84fe9ab8be46e4fb1824778120be4d37973041c0a9a"
 }

package/dist/lint/audit-catalog.d.ts

@@ -0,0 +1,10 @@
+/**
+ * The aws lexicon's `chant audit` catalog — metadata (title/tier/fix/authority/
+ * category) for the WAW* CloudFormation post-synth rules this lexicon ships.
+ * Contributed to core's aggregate via `awsPlugin.auditCatalog()` (#687, epic
+ * #350); core keeps only the generic catalog machinery + cross-cutting ids.
+ */
+import { type RuleMeta } from "@intentius/chant/audit/catalog";
+/** Every WAW* audit rule's catalog entry. */
+export declare const awsAuditCatalog: Record<string, RuleMeta>;
+//# sourceMappingURL=audit-catalog.d.ts.map

package/dist/lint/audit-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-catalog.d.ts","sourceRoot":"","sources":["../../src/lint/audit-catalog.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAa,KAAK,QAAQ,EAAkB,MAAM,gCAAgC,CAAC;AAQ1F,6CAA6C;AAC7C,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CA4BpD,CAAC"}

package/dist/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "aws",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "chantVersion": ">=0.1.0",
   "namespace": "AWS",
   "intrinsics": [

package/dist/meta.json

@@ -1015,15 +1015,24 @@
     "resourceType": "AWS::ServiceCatalog::AcceptedPortfolioShare",
     "kind": "resource",
     "lexicon": "aws",
-    "attrs": {
-      "Id": "Id"
+    "propertyConstraints": {
+      "AcceptLanguage": {
+        "pattern": "^(en|jp|zh)$"
+      },
+      "PortfolioId": {
+        "minLength": 1,
+        "maxLength": 100
+      }
     },
     "createOnly": [
-      "PortfolioId",
+      "AcceptLanguage",
+      "PortfolioId"
+    ],
+    "writeOnly": [
       "AcceptLanguage"
     ],
     "primaryIdentifier": [
-      "Id"
+      "PortfolioId"
     ]
   },
   "AccessConfig": {
@@ -3789,6 +3798,7 @@
         "maxLength": 1024
       },
       "Arn": {
+        "pattern": "^arn:[^:]+:access-analyzer(-beta|-gamma)?:[^:]*:[^:]*:analyzer/.+$",
         "minLength": 1,
         "maxLength": 1600
       },
@@ -8657,6 +8667,11 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "AzureConnectorConfiguration": {
+    "resourceType": "AWS::Config::Connector.AzureConnectorConfiguration",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "B2BICapability": {
     "resourceType": "AWS::B2BI::Capability",
     "kind": "resource",
@@ -14540,24 +14555,36 @@
     "kind": "resource",
     "lexicon": "aws",
     "attrs": {
-      "ProvisioningArtifactIds": "ProvisioningArtifactIds",
       "Id": "Id",
+      "ProvisioningArtifactIds": "ProvisioningArtifactIds",
       "ProvisioningArtifactNames": "ProvisioningArtifactNames",
       "ProductName": "ProductName"
     },
+    "propertyConstraints": {
+      "ProductType": {
+        "enum": [
+          "CLOUD_FORMATION_TEMPLATE",
+          "MARKETPLACE_AMI",
+          "MARKETPLACE_CAR",
+          "TERRAFORM_OPEN_SOURCE",
+          "TERRAFORM_CLOUD",
+          "EXTERNAL"
+        ]
+      }
+    },
+    "writeOnly": [
+      "AcceptLanguage",
+      "ReplaceProvisioningArtifacts",
+      "ProvisioningArtifactParameters/*/DisableTemplateValidation"
+    ],
     "primaryIdentifier": [
       "Id"
-    ]
-  },
-  "CloudFormationProduct_CodeStarParameters": {
-    "resourceType": "AWS::ServiceCatalog::CloudFormationProduct.CodeStarParameters",
-    "kind": "property",
-    "lexicon": "aws"
-  },
-  "CloudFormationProduct_ConnectionParameters": {
-    "resourceType": "AWS::ServiceCatalog::CloudFormationProduct.ConnectionParameters",
-    "kind": "property",
-    "lexicon": "aws"
+    ],
+    "tagging": {
+      "taggable": true,
+      "tagOnCreate": true,
+      "tagUpdatable": true
+    }
   },
   "CloudFormationProduct_ProvisioningArtifactProperties": {
     "resourceType": "AWS::ServiceCatalog::CloudFormationProduct.ProvisioningArtifactProperties",
@@ -16285,11 +16312,6 @@
     "kind": "property",
     "lexicon": "aws"
   },
-  "CodeStarParameters": {
-    "resourceType": "AWS::ServiceCatalog::CloudFormationProduct.CodeStarParameters",
-    "kind": "property",
-    "lexicon": "aws"
-  },
   "CognitoIdentityProvider": {
     "resourceType": "AWS::Cognito::IdentityPool.CognitoIdentityProvider",
     "kind": "property",
@@ -17227,6 +17249,49 @@
       "tagUpdatable": true
     }
   },
+  "ConfigConnector": {
+    "resourceType": "AWS::Config::Connector",
+    "kind": "resource",
+    "lexicon": "aws",
+    "attrs": {
+      "Arn": "Arn",
+      "Name": "Name",
+      "CreatedTime": "CreatedTime"
+    },
+    "propertyConstraints": {
+      "Name": {
+        "minLength": 1,
+        "maxLength": 256
+      }
+    },
+    "createOnly": [
+      "ConnectorConfiguration"
+    ],
+    "primaryIdentifier": [
+      "Arn"
+    ],
+    "replacementStrategy": "delete_then_create",
+    "tagging": {
+      "taggable": true,
+      "tagOnCreate": true,
+      "tagUpdatable": true
+    }
+  },
+  "ConfigConnector_AzureConnectorConfiguration": {
+    "resourceType": "AWS::Config::Connector.AzureConnectorConfiguration",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "ConfigConnector_ConnectorConfiguration": {
+    "resourceType": "AWS::Config::Connector.ConnectorConfiguration",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "ConfigConnector_Tag": {
+    "resourceType": "AWS::Config::Connector.Tag",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "ConfigData": {
     "resourceType": "AWS::GroundStation::Config.ConfigData",
     "kind": "property",
@@ -19388,11 +19453,6 @@
     "kind": "property",
     "lexicon": "aws"
   },
-  "ConnectionParameters": {
-    "resourceType": "AWS::ServiceCatalog::CloudFormationProduct.ConnectionParameters",
-    "kind": "property",
-    "lexicon": "aws"
-  },
   "ConnectionPasswordEncryption": {
     "resourceType": "AWS::Glue::DataCatalogEncryptionSettings.ConnectionPasswordEncryption",
     "kind": "property",
@@ -19428,6 +19488,11 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "ConnectorConfiguration": {
+    "resourceType": "AWS::Config::Connector.ConnectorConfiguration",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "ConnectorDefinition": {
     "resourceType": "AWS::Greengrass::ConnectorDefinition",
     "kind": "resource",
@@ -31704,6 +31769,29 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "DomainObjectType": {
+    "resourceType": "AWS::CustomerProfiles::DomainObjectType",
+    "kind": "resource",
+    "lexicon": "aws",
+    "attrs": {
+      "CreatedAt": "CreatedAt",
+      "LastUpdatedAt": "LastUpdatedAt"
+    },
+    "createOnly": [
+      "DomainName",
+      "ObjectTypeName",
+      "Fields"
+    ],
+    "primaryIdentifier": [
+      "DomainName",
+      "ObjectTypeName"
+    ],
+    "tagging": {
+      "taggable": true,
+      "tagOnCreate": true,
+      "tagUpdatable": true
+    }
+  },
   "DomainResult": {
     "resourceType": "AWS::CloudFront::DistributionTenant.DomainResult",
     "kind": "property",
@@ -33046,7 +33134,8 @@
       "FailureReason": "FailureReason",
       "CreatedAt": "CreatedAt",
       "SecurityGroup": "SecurityGroup",
-      "CertificateAuthority": "CertificateAuthority"
+      "CertificateAuthority": "CertificateAuthority",
+      "AuthProxyUrl": "AuthProxyUrl"
     },
     "propertyConstraints": {
       "Name": {
@@ -33058,6 +33147,10 @@
         "pattern": "[A-Za-z0-9._/-]+",
         "minLength": 1,
         "maxLength": 64
+      },
+      "SessionIdleTimeoutInMinutes": {
+        "minimum": 1,
+        "maximum": 1440
       }
     },
     "createOnly": [
@@ -33066,7 +33159,11 @@
       "Type",
       "ReleaseLabel",
       "ExecutionRoleArn",
-      "ConfigurationOverrides"
+      "ConfigurationOverrides",
+      "SessionIdleTimeoutInMinutes"
+    ],
+    "writeOnly": [
+      "SessionIdleTimeoutInMinutes"
     ],
     "primaryIdentifier": [
       "Arn"
@@ -46882,7 +46979,8 @@
       "BlockDeviceMappings",
       "WorkingDirectory",
       "AdditionalInstanceConfiguration",
-      "AmiTags"
+      "AmiTags",
+      "AmiWatermarks"
     ],
     "primaryIdentifier": [
       "Arn"
@@ -51978,6 +52076,10 @@
     "createOnly": [
       "KeyspaceName"
     ],
+    "writeOnly": [
+      "ClientSideTimestampsEnabled",
+      "ReplicationSpecification/RegionList"
+    ],
     "primaryIdentifier": [
       "KeyspaceName"
     ],
@@ -82379,6 +82481,7 @@
     "lexicon": "aws",
     "attrs": {
       "Arn": "Arn",
+      "ContentQualityAnalysisType": "ContentQualityAnalysisType",
       "CreatedAt": "CreatedAt",
       "Id": "Id",
       "InputType": "InputType",
@@ -91344,6 +91447,9 @@
     "resourceType": "AWS::SSM::Parameter",
     "kind": "resource",
     "lexicon": "aws",
+    "attrs": {
+      "Arn": "Arn"
+    },
     "propertyConstraints": {
       "Type": {
         "enum": [
@@ -91366,6 +91472,9 @@
       },
       "Name": {
         "pattern": "^((?![aA][wW][sS]|[sS]{2}[mM])[\\w.-]+|\\/(?![aA][wW][sS]|[sS]{2}[mM])[\\w.-]+(\\/[\\w.-]+)+)$"
+      },
+      "Arn": {
+        "pattern": "arn:aws(-[a-z0-9-]+)*:ssm:[a-z0-9-]+:[0-9]{12}:parameter/.+"
       }
     },
     "createOnly": [
@@ -101103,7 +101212,9 @@
     },
     "createOnly": [
       "ContainerProvider",
-      "Name"
+      "Name",
+      "SecurityConfigurationId",
+      "SessionEnabled"
     ],
     "primaryIdentifier": [
       "Id"

package/dist/op/activities/floci.d.ts

@@ -0,0 +1,54 @@
+export interface FlociUpArgs {
+    /** Container name. Default: `chant-floci`. */
+    name?: string;
+    /** Host port mapped to the emulator's `:4566`. Default: `4566`. */
+    port?: number;
+    /** Floci image. Default: `floci/floci:latest`. */
+    image?: string;
+    /** Mount the docker socket — Floci needs it for the ECR backing registry. Default: `false`. */
+    dockerSocket?: boolean;
+    /** `AWS_REGION` exported for subsequent steps. Default: `us-east-1`. */
+    region?: string;
+    /** Service to wait for in `/_localstack/health`. Default: `cloudformation`. */
+    readyService?: string;
+    /** Readiness timeout in ms. Default: `60000`. */
+    timeoutMs?: number;
+    /** Health poll interval in ms. Default: `2000`. */
+    intervalMs?: number;
+}
+export interface FlociDownArgs {
+    /** Container name to remove. Default: `chant-floci`. */
+    name?: string;
+}
+/** `docker ps -q -f name=<name>` — non-empty stdout means the container is running. */
+export declare function flociExistsCommand(name: string): string;
+/** Build the `docker run` command that boots Floci. */
+export declare function flociRunCommand(args: FlociUpArgs): string;
+/** Build the `docker rm -f` command. */
+export declare function flociRmCommand(name: string): string;
+/** The Floci health endpoint URL for a host port. */
+export declare function flociHealthUrl(port: number): string;
+/** The AWS env vars that point the `aws` CLI / SDK at a local Floci endpoint. */
+export declare function flociEnv(port: number, region: string): Record<string, string>;
+/** True once the health body reports the required service (e.g. `"cloudformation"`). */
+export declare function isFlociReady(healthBody: string, service: string): boolean;
+/**
+ * Boot a local Floci AWS emulator in Docker and point subsequent steps at it.
+ *
+ * Idempotent: reuses a running container of the same name. Waits for the health
+ * endpoint to report `readyService`, then sets `AWS_ENDPOINT_URL` + test creds in
+ * the process environment so a following `nativeApply`/`cfn-deploy` targets the
+ * emulator. Env injection assumes the in-process **local executor**; under a
+ * distributed Temporal worker, pass the endpoint explicitly instead.
+ *
+ * Uses longInfra profile — 20m timeout, heartbeat every poll (the image may pull).
+ */
+export declare function flociUp(args: FlociUpArgs, signal?: AbortSignal): Promise<{
+    endpoint: string;
+}>;
+/**
+ * Stop and remove the local Floci emulator container. A no-op success when the
+ * container is already gone. Uses fastIdempotent profile — 5m timeout.
+ */
+export declare function flociDown(args: FlociDownArgs, signal?: AbortSignal): Promise<void>;
+//# sourceMappingURL=floci.d.ts.map

package/dist/op/activities/floci.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"floci.d.ts","sourceRoot":"","sources":["../../../src/op/activities/floci.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,WAAW;IAC1B,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+FAA+F;IAC/F,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,wEAAwE;IACxE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,wDAAwD;IACxD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,uFAAuF;AACvF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,uDAAuD;AACvD,wBAAgB,eAAe,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAQzD;AAED,wCAAwC;AACxC,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,qDAAqD;AACrD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,iFAAiF;AACjF,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAO7E;AAED,wFAAwF;AACxF,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAEzE;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CA+CpG;AAED;;;GAGG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAOxF"}

package/dist/op/activities/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * AWS Op activities — resolved by the core activity registry when a project's
+ * `chant.config.ts` lists the `aws` lexicon. Contributes the local Floci AWS
+ * emulator lifecycle (`flociUp`/`flociDown`).
+ */
+export { flociUp, flociDown, flociRunCommand, flociRmCommand, flociExistsCommand, flociHealthUrl, flociEnv, isFlociReady, } from "./floci.js";
+export type { FlociUpArgs, FlociDownArgs } from "./floci.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/op/activities/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/op/activities/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,OAAO,EACP,SAAS,EACT,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,QAAQ,EACR,YAAY,GACb,MAAM,SAAS,CAAC;AACjB,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC"}

package/dist/ownership.d.ts

@@ -0,0 +1,10 @@
+/**
+ * The aws lexicon's ownership tag convention. AWS tag keys allow `:`, so
+ * chant's markers use the `chant:<name>` form (distinct from the label-based
+ * convention core keeps for k8s/gcp). Core owns the generic stamp/detect logic
+ * (@intentius/chant/ownership); this is the aws-specific key naming it stamps.
+ */
+import type { ChannelKeys } from "@intentius/chant/ownership";
+/** AWS tag keys for chant's ownership markers. */
+export declare const AWS_TAG_OWNERSHIP_KEYS: ChannelKeys;
+//# sourceMappingURL=ownership.d.ts.map

package/dist/ownership.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownership.d.ts","sourceRoot":"","sources":["../src/ownership.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAE9D,kDAAkD;AAClD,eAAO,MAAM,sBAAsB,EAAE,WAIpC,CAAC"}

package/dist/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAuF,MAAM,0BAA0B,CAAC;AAmBnJ;;;;;GAKG;AACH,eAAO,MAAM,SAAS,EAAE,aA2pBvB,CAAC"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAuF,MAAM,0BAA0B,CAAC;AAoBnJ;;;;;GAKG;AACH,eAAO,MAAM,SAAS,EAAE,aA6pBvB,CAAC"}

package/dist/serializer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serializer.d.ts","sourceRoot":"","sources":["../src/serializer.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAsC,MAAM,6BAA6B,CAAC;AAqUlG;;GAEG;AACH,eAAO,MAAM,aAAa,EAAE,UAoE3B,CAAC"}
+{"version":3,"file":"serializer.d.ts","sourceRoot":"","sources":["../src/serializer.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAsC,MAAM,6BAA6B,CAAC;AAsUlG;;GAEG;AACH,eAAO,MAAM,aAAa,EAAE,UAoE3B,CAAC"}