@intentius/chant-lexicon-aws 0.7.0 → 0.8.0

package/dist/validate-cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env tsx
+export {};
+//# sourceMappingURL=validate-cli.d.ts.map

package/dist/validate-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-cli.d.ts","sourceRoot":"","sources":["../src/validate-cli.ts"],"names":[],"mappings":""}

package/dist/validate.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Validate generated lexicon-aws artifacts.
+ *
+ * Thin wrapper around the core validation framework
+ * with AWS-specific configuration.
+ */
+import { type ValidateResult } from "@intentius/chant/codegen/validate";
+export type { ValidateCheck, ValidateResult } from "@intentius/chant/codegen/validate";
+/**
+ * Validate the generated lexicon-aws artifacts.
+ *
+ * @param opts.basePath - Override the package directory (defaults to lexicon-aws package root)
+ */
+export declare function validate(opts?: {
+    basePath?: string;
+}): Promise<ValidateResult>;
+//# sourceMappingURL=validate.d.ts.map

package/dist/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAA4B,KAAK,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAElG,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAIvF;;;;GAIG;AACH,wBAAsB,QAAQ,CAAC,IAAI,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAapF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-aws",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "AWS CloudFormation lexicon for chant — declarative IaC in TypeScript",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",
@@ -29,8 +29,26 @@
     "access": "public"
   },
   "exports": {
-    ".": "./src/index.ts",
-    "./*": "./src/*.ts",
+    ".": {
+      "development": "./src/index.ts",
+      "types": "./dist/index.d.ts",
+      "default": "./src/index.ts"
+    },
+    "./*": {
+      "development": "./src/*.ts",
+      "types": "./dist/*.d.ts",
+      "default": "./src/*.ts"
+    },
+    "./detect": {
+      "development": "./src/detect.ts",
+      "types": "./dist/detect.d.ts",
+      "default": "./src/detect.ts"
+    },
+    "./lint/post-synth": {
+      "development": "./src/lint/post-synth/index.ts",
+      "types": "./dist/lint/post-synth/index.d.ts",
+      "default": "./src/lint/post-synth/index.ts"
+    },
     "./manifest": "./dist/manifest.json",
     "./meta": "./dist/meta.json",
     "./types": "./dist/types/index.d.ts"
@@ -40,7 +58,8 @@
     "bundle": "tsx src/package-cli.ts",
     "validate": "tsx src/validate-cli.ts",
     "docs": "tsx src/codegen/docs-cli.ts",
-    "prepack": "npm run generate && npm run bundle && npm run validate"
+    "prepack": "npm run generate && npm run bundle && npm run validate && npm run build",
+    "build": "tsc -p tsconfig.build.json && tsc-alias -p tsconfig.build.json && find dist -type f \\( -name \"*.js\" -o -name \"*.js.map\" \\) -delete"
   },
   "dependencies": {
     "fflate": "^0.8.2",
@@ -51,6 +70,6 @@
     "typescript": "^5.9.3"
   },
   "peerDependencies": {
-    "@intentius/chant": "^0.1.0"
+    "@intentius/chant": "^0.8.0"
   }
 }

package/src/codegen/__snapshots__/snapshot.test.ts.snap

@@ -158,7 +158,6 @@ exports[`snapshot tests > generated resource names 1`] = `
   "EventSource",
   "Function",
   "Function_Code",
-  "Function_Tag",
   "GraphQLApi",
   "HttpApi",
   "HttpApi_CorsConfiguration",

package/src/codegen/fallback.ts

@@ -26,6 +26,8 @@ function fallbackLogGroup(): SchemaParseResult {
       createOnly: [],
       writeOnly: [],
       primaryIdentifier: [],
+      deprecatedProperties: [],
+      conditionalCreateOnly: [],
     },
     propertyTypes: [],
     enums: [],

package/src/codegen/package.ts

@@ -43,7 +43,7 @@ export async function packageLexicon(opts: PackageOptions = {}): Promise<Package
       buildManifest: (_genResult) => {
         // Lazy-import to avoid circular dependency
         const intrinsics: IntrinsicDef[] = (awsPlugin.intrinsics?.() ?? []).map(
-          (i: { name: string; description: string }) => ({
+          (i: IntrinsicDef) => ({
             name: i.name,
             description: i.description,
             outputKey: intrinsicOutputKey(i.name),

package/src/codegen/sam.ts

@@ -58,6 +58,8 @@ function samFunction(): SchemaParseResult {
       createOnly: [],
       writeOnly: [],
       primaryIdentifier: [],
+      deprecatedProperties: [],
+      conditionalCreateOnly: [],
     },
     propertyTypes: [
       {
@@ -144,6 +146,8 @@ function samApi(): SchemaParseResult {
       createOnly: [],
       writeOnly: [],
       primaryIdentifier: [],
+      deprecatedProperties: [],
+      conditionalCreateOnly: [],
     },
     propertyTypes: [
       {
@@ -195,6 +199,8 @@ function samHttpApi(): SchemaParseResult {
       createOnly: [],
       writeOnly: [],
       primaryIdentifier: [],
+      deprecatedProperties: [],
+      conditionalCreateOnly: [],
     },
     propertyTypes: [
       {
@@ -229,6 +235,8 @@ function samSimpleTable(): SchemaParseResult {
       createOnly: [],
       writeOnly: [],
       primaryIdentifier: [],
+      deprecatedProperties: [],
+      conditionalCreateOnly: [],
     },
     propertyTypes: [
       {
@@ -264,6 +272,8 @@ function samLayerVersion(): SchemaParseResult {
       createOnly: [],
       writeOnly: [],
       primaryIdentifier: [],
+      deprecatedProperties: [],
+      conditionalCreateOnly: [],
     },
     propertyTypes: [],
     enums: [],
@@ -295,6 +305,8 @@ function samStateMachine(): SchemaParseResult {
       createOnly: [],
       writeOnly: [],
       primaryIdentifier: [],
+      deprecatedProperties: [],
+      conditionalCreateOnly: [],
     },
     propertyTypes: [
       {
@@ -326,6 +338,8 @@ function samApplication(): SchemaParseResult {
       createOnly: [],
       writeOnly: [],
       primaryIdentifier: [],
+      deprecatedProperties: [],
+      conditionalCreateOnly: [],
     },
     propertyTypes: [],
     enums: [],
@@ -345,6 +359,8 @@ function samConnector(): SchemaParseResult {
       createOnly: [],
       writeOnly: [],
       primaryIdentifier: [],
+      deprecatedProperties: [],
+      conditionalCreateOnly: [],
     },
     propertyTypes: [],
     enums: [],
@@ -380,6 +396,8 @@ function samGraphQLApi(): SchemaParseResult {
       createOnly: [],
       writeOnly: [],
       primaryIdentifier: [],
+      deprecatedProperties: [],
+      conditionalCreateOnly: [],
     },
     propertyTypes: [],
     enums: [],

package/src/composites/efs-with-access-point.ts

@@ -29,7 +29,7 @@ export interface EfsWithAccessPointProps {
 }
 
 export const EfsWithAccessPoint = Composite<EfsWithAccessPointProps>((props) => {
-  const ingressRules: SecurityGroup_Ingress[] = [];
+  const ingressRules: InstanceType<typeof SecurityGroup_Ingress>[] = [];
   if (props.sourceSecurityGroupId) {
     ingressRules.push(new SecurityGroup_Ingress({
       IpProtocol: "tcp",

package/src/composites/fargate-service.ts

@@ -61,7 +61,7 @@ export interface FargateServiceProps {
   };
   environment?: Record<string, string>;
   command?: string[];
-  mountPoints?: TaskDefinition_MountPoint[];
+  mountPoints?: InstanceType<typeof TaskDefinition_MountPoint>[];
   efsMounts?: Array<{
     fileSystemId: string;
     accessPointId?: string;

package/src/composites/lambda-api.ts

@@ -1,6 +1,6 @@
 import { Composite, mergeDefaults } from "@intentius/chant";
 import { Permission } from "../generated";
-import { LambdaFunction, type LambdaFunctionProps } from "./lambda-function";
+import { LambdaFunction, type LambdaFunctionProps, type LambdaFunctionResult } from "./lambda-function";
 
 export interface LambdaApiProps extends LambdaFunctionProps {
   sourceArn?: string;
@@ -9,7 +9,11 @@ export interface LambdaApiProps extends LambdaFunctionProps {
   };
 }
 
-export const LambdaApi = Composite<LambdaApiProps>((props) => {
+export type LambdaApiResult = LambdaFunctionResult & {
+  permission: InstanceType<typeof Permission>;
+};
+
+export const LambdaApi = Composite<LambdaApiProps, LambdaApiResult>((props) => {
   const { defaults } = props;
   const { role, func } = LambdaFunction(props);
 

package/src/composites/lambda-function.ts

@@ -35,7 +35,12 @@ export interface LambdaFunctionProps {
   };
 }
 
-export const LambdaFunction = Composite<LambdaFunctionProps>((props) => {
+export type LambdaFunctionResult = {
+  role: InstanceType<typeof Role>;
+  func: InstanceType<typeof Function>;
+};
+
+export const LambdaFunction = Composite<LambdaFunctionProps, LambdaFunctionResult>((props) => {
   const { defaults } = props;
   const managedPolicies = [BASIC_EXECUTION_ARN];
   if (props.VpcConfig) {

package/src/composites/lambda-s3.ts

@@ -12,7 +12,7 @@ import {
 } from "../generated";
 import { Sub, Join } from "../intrinsics";
 import { S3Actions } from "../actions/s3";
-import { LambdaFunction, type LambdaFunctionProps } from "./lambda-function";
+import { LambdaFunction, type LambdaFunctionProps, type LambdaFunctionResult } from "./lambda-function";
 
 export interface LambdaS3Props extends LambdaFunctionProps {
   bucketName?: string;
@@ -27,7 +27,12 @@ export interface LambdaS3Props extends LambdaFunctionProps {
   };
 }
 
-export const LambdaS3 = Composite<LambdaS3Props>((props) => {
+export type LambdaS3Result = LambdaFunctionResult & {
+  bucket: InstanceType<typeof Bucket>;
+  permission: InstanceType<typeof Permission>;
+};
+
+export const LambdaS3 = Composite<LambdaS3Props, LambdaFunctionResult & { bucket: InstanceType<typeof Bucket>; permission?: InstanceType<typeof Permission> }>((props) => {
   const encryptionDefault = new Bucket_ServerSideEncryptionByDefault({ SSEAlgorithm: "AES256" });
   const encryptionRule = new Bucket_ServerSideEncryptionRule({
     ServerSideEncryptionByDefault: encryptionDefault,

package/src/composites/vpc-default.ts

@@ -36,7 +36,31 @@ export interface VpcDefaultProps {
   };
 }
 
-export const VpcDefault = Composite<VpcDefaultProps>((props) => {
+export type VpcDefaultResult = {
+  vpc: InstanceType<typeof Vpc>;
+  igw: InstanceType<typeof InternetGateway>;
+  igwAttachment: InstanceType<typeof VPCGatewayAttachment>;
+  publicSubnet1: InstanceType<typeof Subnet>;
+  publicSubnet2: InstanceType<typeof Subnet>;
+  privateSubnet1: InstanceType<typeof Subnet>;
+  privateSubnet2: InstanceType<typeof Subnet>;
+  publicRouteTable: InstanceType<typeof RouteTable>;
+  publicRoute: InstanceType<typeof EC2Route>;
+  publicRta1: InstanceType<typeof SubnetRouteTableAssociation>;
+  publicRta2: InstanceType<typeof SubnetRouteTableAssociation>;
+  privateRouteTable: InstanceType<typeof RouteTable>;
+  privateRoute: InstanceType<typeof EC2Route>;
+  privateRta1: InstanceType<typeof SubnetRouteTableAssociation>;
+  privateRta2: InstanceType<typeof SubnetRouteTableAssociation>;
+  natEip: InstanceType<typeof EIP>;
+  natGateway: InstanceType<typeof NatGateway>;
+  publicSubnet3?: InstanceType<typeof Subnet>;
+  privateSubnet3?: InstanceType<typeof Subnet>;
+  publicRta3?: InstanceType<typeof SubnetRouteTableAssociation>;
+  privateRta3?: InstanceType<typeof SubnetRouteTableAssociation>;
+};
+
+export const VpcDefault = Composite<VpcDefaultProps, VpcDefaultResult>((props) => {
   const { defaults: defs } = props;
   const cidr = props.cidr ?? "10.0.0.0/16";
   const azCount = props.azCount ?? 2;

package/src/detect.ts

@@ -0,0 +1,19 @@
+/** Edge-safe template detection for aws (CloudFormation) — see #426. */
+export function detectTemplate(data: unknown): boolean {
+  if (typeof data !== "object" || data === null) return false;
+  const obj = data as Record<string, unknown>;
+  // CloudFormation has AWSTemplateFormatVersion
+  if (obj.AWSTemplateFormatVersion !== undefined) return true;
+  // Or Resources with AWS::* types
+  if (typeof obj.Resources === "object" && obj.Resources !== null) {
+    for (const resource of Object.values(obj.Resources as Record<string, unknown>)) {
+      if (typeof resource === "object" && resource !== null) {
+        const type = (resource as Record<string, unknown>).Type;
+        if (typeof type === "string" && type.startsWith("AWS::")) {
+          return true;
+        }
+      }
+    }
+  }
+  return false;
+}