@intentius/chant-lexicon-aws 0.18.37 → 0.19.0

package/src/generated/index.ts

@@ -1053,7 +1053,7 @@ export const PinpointEventStream = createResource("AWS::Pinpoint::EventStream",
 export const PinpointSegment = createResource("AWS::Pinpoint::Segment", "aws", {"SegmentId":"SegmentId","Arn":"Arn"});
 export const Pipe = createResource("AWS::Pipes::Pipe", "aws", {"Arn":"Arn","CreationTime":"CreationTime","CurrentState":"CurrentState","LastModifiedTime":"LastModifiedTime","StateReason":"StateReason"});
 export const PlaceIndex = createResource("AWS::Location::PlaceIndex", "aws", {"CreateTime":"CreateTime","Arn":"Arn","IndexArn":"IndexArn","UpdateTime":"UpdateTime"});
-export const PlacementGroup = createResource("AWS::EC2::PlacementGroup", "aws", {"GroupName":"GroupName"});
+export const PlacementGroup = createResource("AWS::EC2::PlacementGroup", "aws", {"GroupName":"GroupName","GroupId":"GroupId"});
 export const PlaybackConfiguration = createResource("AWS::MediaTailor::PlaybackConfiguration", "aws", {"SessionInitializationEndpointPrefix":"SessionInitializationEndpointPrefix","HlsConfiguration_ManifestEndpointPrefix":"HlsConfiguration.ManifestEndpointPrefix","DashConfiguration_ManifestEndpointPrefix":"DashConfiguration.ManifestEndpointPrefix","PlaybackConfigurationArn":"PlaybackConfigurationArn","PlaybackEndpointPrefix":"PlaybackEndpointPrefix"});
 export const PlaybackKeyPair = createResource("AWS::IVS::PlaybackKeyPair", "aws", {"Arn":"Arn","Fingerprint":"Fingerprint"});
 export const PlaybackRestrictionPolicy = createResource("AWS::IVS::PlaybackRestrictionPolicy", "aws", {"Arn":"Arn"});
@@ -1137,7 +1137,7 @@ export const RateBasedRule = createResource("AWS::WAFRegional::RateBasedRule", "
 export const RbinRule = createResource("AWS::Rbin::Rule", "aws", {"Arn":"Arn","Identifier":"Identifier","LockState":"LockState"});
 export const RDSDBClusterParameterGroup = createResource("AWS::RDS::DBClusterParameterGroup", "aws", {});
 export const RDSDBParameterGroup = createResource("AWS::RDS::DBParameterGroup", "aws", {});
-export const RDSDBSubnetGroup = createResource("AWS::RDS::DBSubnetGroup", "aws", {});
+export const RDSDBSubnetGroup = createResource("AWS::RDS::DBSubnetGroup", "aws", {"DBSubnetGroupArn":"DBSubnetGroupArn"});
 export const RDSEventSubscription = createResource("AWS::RDS::EventSubscription", "aws", {});
 export const RDSGlobalCluster = createResource("AWS::RDS::GlobalCluster", "aws", {"GlobalEndpoint":"GlobalEndpoint"});
 export const RDSIntegration = createResource("AWS::RDS::Integration", "aws", {"IntegrationArn":"IntegrationArn","CreateTime":"CreateTime"});
@@ -3183,6 +3183,9 @@ export const ComputeEnvironmentOrder = createProperty("AWS::Batch::JobQueue.Comp
 export const ComputeLimits = createProperty("AWS::EMR::Cluster.ComputeLimits", "aws");
 export const ComputeNodeGroup_ErrorInfo = createProperty("AWS::PCS::ComputeNodeGroup.ErrorInfo", "aws");
 export const ComputeNodeGroup_InstanceConfig = createProperty("AWS::PCS::ComputeNodeGroup.InstanceConfig", "aws");
+export const ComputeNodeGroup_NodeLifecycleActions = createProperty("AWS::PCS::ComputeNodeGroup.NodeLifecycleActions", "aws");
+export const ComputeNodeGroup_NodeLifecycleScript = createProperty("AWS::PCS::ComputeNodeGroup.NodeLifecycleScript", "aws");
+export const ComputeNodeGroup_NodeLifecycleStages = createProperty("AWS::PCS::ComputeNodeGroup.NodeLifecycleStages", "aws");
 export const ComputeNodeGroupConfiguration = createProperty("AWS::PCS::Queue.ComputeNodeGroupConfiguration", "aws");
 export const ComputeOptimizerAutomationRule_Criteria = createProperty("AWS::ComputeOptimizer::AutomationRule.Criteria", "aws");
 export const ComputeOptimizerAutomationRule_OrganizationConfiguration = createProperty("AWS::ComputeOptimizer::AutomationRule.OrganizationConfiguration", "aws");
@@ -7398,6 +7401,9 @@ export const Nodegroup_UpdateConfig = createProperty("AWS::EKS::Nodegroup.Update
 export const Nodegroup_WarmPoolConfig = createProperty("AWS::EKS::Nodegroup.WarmPoolConfig", "aws");
 export const NodeGroupConfiguration = createProperty("AWS::ElastiCache::ReplicationGroup.NodeGroupConfiguration", "aws");
 export const NodeInterfaceMapping = createProperty("AWS::MediaLive::Node.NodeInterfaceMapping", "aws");
+export const NodeLifecycleActions = createProperty("AWS::PCS::ComputeNodeGroup.NodeLifecycleActions", "aws");
+export const NodeLifecycleScript = createProperty("AWS::PCS::ComputeNodeGroup.NodeLifecycleScript", "aws");
+export const NodeLifecycleStages = createProperty("AWS::PCS::ComputeNodeGroup.NodeLifecycleStages", "aws");
 export const NodeOption = createProperty("AWS::OpenSearchService::Domain.NodeOption", "aws");
 export const NodeProperties = createProperty("AWS::Batch::JobDefinition.NodeProperties", "aws");
 export const NodeRangeProperty = createProperty("AWS::Batch::JobDefinition.NodeRangeProperty", "aws");

package/src/generated/lexicon-aws.json

@@ -17336,6 +17336,21 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "ComputeNodeGroup_NodeLifecycleActions": {
+    "resourceType": "AWS::PCS::ComputeNodeGroup.NodeLifecycleActions",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "ComputeNodeGroup_NodeLifecycleScript": {
+    "resourceType": "AWS::PCS::ComputeNodeGroup.NodeLifecycleScript",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "ComputeNodeGroup_NodeLifecycleStages": {
+    "resourceType": "AWS::PCS::ComputeNodeGroup.NodeLifecycleStages",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "ComputeOptimizerAutomationRule": {
     "resourceType": "AWS::ComputeOptimizer::AutomationRule",
     "kind": "resource",
@@ -30411,13 +30426,10 @@
     "createOnly": [
       "ServiceType",
       "ServiceDetails/Dynatrace",
-      "ServiceDetails/MCPServer",
       "ServiceDetails/MCPServerSplunk",
-      "ServiceDetails/MCPServerNewRelic",
       "ServiceDetails/ServiceNow",
       "ServiceDetails/PagerDuty",
       "ServiceDetails/AzureIdentity",
-      "ServiceDetails/MCPServerGrafana",
       "KmsKeyArn"
     ],
     "writeOnly": [
@@ -65631,6 +65643,21 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "NodeLifecycleActions": {
+    "resourceType": "AWS::PCS::ComputeNodeGroup.NodeLifecycleActions",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "NodeLifecycleScript": {
+    "resourceType": "AWS::PCS::ComputeNodeGroup.NodeLifecycleScript",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "NodeLifecycleStages": {
+    "resourceType": "AWS::PCS::ComputeNodeGroup.NodeLifecycleStages",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "NodeOption": {
     "resourceType": "AWS::OpenSearchService::Domain.NodeOption",
     "kind": "property",
@@ -71810,7 +71837,8 @@
     "kind": "resource",
     "lexicon": "aws",
     "attrs": {
-      "GroupName": "GroupName"
+      "GroupName": "GroupName",
+      "GroupId": "GroupId"
     },
     "createOnly": [
       "Tags",
@@ -77039,6 +77067,9 @@
     "resourceType": "AWS::RDS::DBSubnetGroup",
     "kind": "resource",
     "lexicon": "aws",
+    "attrs": {
+      "DBSubnetGroupArn": "DBSubnetGroupArn"
+    },
     "createOnly": [
       "DBSubnetGroupName"
     ],

package/src/plugin.ts

@@ -461,6 +461,44 @@ aws cloudformation wait stack-update-complete --stack-name my-app-prod`,
         },
       ],
     },
+    {
+      file: "chant-aws-carve-terraform.md",
+      name: "chant-aws-carve-terraform",
+      description: "Demo carving a resource out of Terraform into native chant — advise, emit, bridge, apply — fully offline",
+      triggers: [
+        { type: "context", value: "terraform" },
+        { type: "context", value: "carve" },
+        { type: "context", value: "migrate" },
+        { type: "file-pattern", value: "**/*.tf" },
+        { type: "file-pattern", value: "**/terraform.tfstate" },
+      ],
+      preConditions: [
+        "chant CLI is installed (chant --version succeeds)",
+        "@cdktf/hcl2json is installed (npm install -D @cdktf/hcl2json)",
+      ],
+      parameters: [
+        {
+          name: "address",
+          description: "Terraform address to carve, e.g. aws_s3_bucket.assets",
+          type: "string",
+          required: false,
+        },
+      ],
+      examples: [
+        {
+          title: "Run the offline demo",
+          description: "Demo the full advise → emit → bridge → apply loop with no cloud",
+          input: "Show me how chant carves a resource out of Terraform",
+          output: "cd examples/terraform-carve-out && ./demo.sh",
+        },
+        {
+          title: "Adopt a resource from state",
+          description: "Emit native chant source for a Terraform-managed resource, offline",
+          input: "Adopt aws_s3_bucket.assets into chant",
+          output: "chant carve emit --from ./terraform --select aws_s3_bucket.assets --state ./terraform/terraform.tfstate",
+        },
+      ],
+    },
   ]),
 
   completionProvider(ctx: CompletionContext): CompletionItem[] {

package/src/skills/chant-aws-carve-terraform.md

@@ -0,0 +1,102 @@
+---
+skill: chant-aws-carve-terraform
+description: Demo carving a resource out of Terraform into native chant — advise, emit, bridge, apply — fully offline
+user-invocable: true
+---
+
+# Carve a resource out of Terraform (demo)
+
+Use this skill to cleanly demonstrate chant's Terraform carve-out flow for
+someone. The whole demo runs **offline** — no cloud account, no Terraform
+binary, no state backend. It carves an AWS S3 bucket out of a small Terraform
+estate into native chant source, patches the survivors, and plans the
+graduation.
+
+## When to use
+
+- Someone asks "how does chant move things off Terraform?"
+- You want to show the advise → emit → bridge → apply loop end to end.
+- You are evaluating whether a Terraform estate is worth carving.
+
+## Preconditions
+
+- `chant --version` succeeds.
+- `@cdktf/hcl2json` is installed (the HCL parser). If a command reports it is
+  missing, run `npm install -D @cdktf/hcl2json` once.
+
+## The fastest path: run the bundled demo
+
+The `examples/terraform-carve-out` example ships a runnable estate + state and a
+script that runs all four steps with commentary:
+
+```bash
+cd examples/terraform-carve-out
+./demo.sh
+```
+
+Walk the person through the output. That is the whole demo.
+
+## Driving it step by step (to explain each stage)
+
+From `examples/terraform-carve-out`, with `TF=./terraform`:
+
+1. **Advise — what is cheap to carve.**
+   ```bash
+   chant carve advise --from ./terraform
+   ```
+   Point out the three bands: clean leaves (carve now), carvable with edits,
+   and leave-in-Terraform. `aws_s3_bucket.assets` is a clean leaf held back one
+   notch by the Lambda that reads it; `random_pet` has no native mapping.
+
+2. **Emit — adopt the bucket into chant source, offline, from state.**
+   ```bash
+   chant carve emit --from ./terraform --select aws_s3_bucket.assets \
+     --state ./terraform/terraform.tfstate --output ./carveout
+   ```
+   Show `./carveout/assets.ts` — a real `new Bucket({ BucketName, Tags })` with
+   CloudFormation-style properties mapped from the Terraform state attributes.
+   Explain: a Terraform-managed resource is not in any CloudFormation stack, so
+   the correct source of its live shape is the state file, not a cloud read.
+
+3. **Lint the inherited resource — optional, offer it.**
+   ```bash
+   chant lint ./carveout --lexicon aws
+   ```
+   After emit, offer to lint the carved source. chant audits the resource you
+   inherited from Terraform against the AWS lexicon's rules. Findings have a
+   severity: `error` (must fix before `chant build` will emit — e.g. an S3
+   bucket with no public-access block) and `warning`/`info` (advisory — e.g.
+   DynamoDB point-in-time recovery). This is a feature of carving: chant
+   immediately tells the person what is wrong with what they adopted. Whether to
+   fix an advisory finding is their call; errors block the build until resolved.
+
+4. **Bridge — patch the surviving Terraform.**
+   ```bash
+   chant carve bridge --from ./terraform --select aws_s3_bucket.assets --output ./carveout
+   ```
+   Show the generated `data "aws_s3_bucket" "assets"` and the rewired survivor.
+   Emphasize it is dry-run: nothing in `./terraform` changed. `--apply-rewrites`
+   would edit it in place.
+
+5. **Apply — graduation plan.**
+   ```bash
+   chant carve apply --from ./terraform --select aws_s3_bucket.assets --env prod --stack assets
+   ```
+   Show the ownership marker (`chant:managed-by/stack/env`) and the finalized
+   runbook. Stress this makes no cloud call — the apply is the person's own
+   lifecycle; chant just plans it.
+
+## Key points to land
+
+- Nothing is destroyed or applied; every step before graduation is reversible
+  with `terraform import`.
+- You carve one resource at a time. The gnarly long tail stays in Terraform.
+- `advise` and `bridge` work against **any** Terraform tree — offer to point
+  them at the person's own estate.
+
+## Going live (only if asked)
+
+The real handoff adds three Terraform commands between bridge and apply:
+`terraform state rm <addr>` (stops managing it, does not destroy), then
+`terraform plan && terraform apply` to land the survivor patch. See the
+generated runbook in `./carveout/<addr>-runbook.md`.