@intentius/chant-lexicon-aws 0.7.0 → 0.8.0

package/dist/generated/runtime.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Runtime factory constructors — re-exported from core.
+ */
+export { createResource, createProperty } from "@intentius/chant/runtime";
+//# sourceMappingURL=runtime.d.ts.map

package/dist/generated/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/generated/runtime.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/import/generator.d.ts

@@ -0,0 +1,72 @@
+import type { TemplateIR } from "@intentius/chant/import/parser";
+import type { TypeScriptGenerator, GeneratedFile } from "@intentius/chant/import/generator";
+/**
+ * TypeScript code generator for CloudFormation templates
+ */
+export declare class CFGenerator implements TypeScriptGenerator {
+    private typeToClass;
+    private allClassNames;
+    constructor();
+    /**
+     * Generate TypeScript files from intermediate representation
+     */
+    generate(ir: TemplateIR): GeneratedFile[];
+    /**
+     * Collect the set of symbols that will be imported (class names, intrinsics, etc.)
+     */
+    private collectImportedSymbols;
+    /**
+     * Resolve a logical ID to a safe variable name, suffixing with _ if it conflicts with an imported symbol
+     */
+    private safeVarName;
+    /**
+     * Generate import statements
+     */
+    private generateImports;
+    /**
+     * Parse AWS resource type into service and class names.
+     * Returns null for unknown/unsupported types (Custom::*, third-party, etc.)
+     */
+    private parseResourceType;
+    /**
+     * Check if AWS pseudo-parameters are used
+     */
+    private needsAWSPseudo;
+    /**
+     * Recursively check for AWS pseudo-parameter references
+     */
+    private hasAWSPseudo;
+    /**
+     * Sort resources by dependencies
+     */
+    private sortByDependencies;
+    /**
+     * Generate a parameter declaration
+     */
+    private generateParameter;
+    /**
+     * Generate a resource declaration, or a comment if the type is unknown
+     */
+    private generateResource;
+    /**
+     * Generate property object as TypeScript
+     */
+    private generateProps;
+    /**
+     * Generate a value as TypeScript
+     */
+    private generateValue;
+    /**
+     * Generate Sub intrinsic as tagged template literal
+     */
+    private generateSubIntrinsic;
+    /**
+     * Convert AWS pseudo-parameter name to TypeScript
+     */
+    private pseudoParamName;
+    /**
+     * Property names use spec-native casing (PascalCase for CloudFormation).
+     */
+    private toPropName;
+}
+//# sourceMappingURL=generator.d.ts.map

package/dist/import/generator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generator.d.ts","sourceRoot":"","sources":["../../src/import/generator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAA2B,MAAM,gCAAgC,CAAC;AAE1F,OAAO,KAAK,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAK5F;;GAEG;AACH,qBAAa,WAAY,YAAW,mBAAmB;IACrD,OAAO,CAAC,WAAW,CAAsB;IACzC,OAAO,CAAC,aAAa,CAAc;;IAiBnC;;OAEG;IACH,QAAQ,CAAC,EAAE,EAAE,UAAU,GAAG,aAAa,EAAE;IAiCzC;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAe9B;;OAEG;IACH,OAAO,CAAC,WAAW;IAInB;;OAEG;IACH,OAAO,CAAC,eAAe;IAmDvB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAUzB;;OAEG;IACH,OAAO,CAAC,cAAc;IAStB;;OAEG;IACH,OAAO,CAAC,YAAY;IAyBpB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAoC1B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAWzB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAiBxB;;OAEG;IACH,OAAO,CAAC,aAAa;IAcrB;;OAEG;IACH,OAAO,CAAC,aAAa;IAoGrB;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAuD5B;;OAEG;IACH,OAAO,CAAC,eAAe;IAKvB;;OAEG;IACH,OAAO,CAAC,UAAU;CAGnB"}

package/dist/import/live-export.d.ts

@@ -0,0 +1,12 @@
+import type { ExportedTemplate, ResourceSelector } from "@intentius/chant/lexicon";
+/**
+ * Map a live CloudFormation template body to full-fidelity export IR.
+ *
+ * `aws cloudformation get-template` returns the template body as a JSON object
+ * (for JSON templates) or a string (for YAML). `CFParser` already turns either
+ * into `TemplateIR` — the same IR the import path uses — so the result feeds
+ * `templateGenerator()` (CFGenerator) unchanged. Pure: all I/O stays in the
+ * caller.
+ */
+export declare function parseStackTemplate(templateBody: unknown, selector?: ResourceSelector, owned?: boolean): ExportedTemplate;
+//# sourceMappingURL=live-export.d.ts.map

package/dist/import/live-export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-export.d.ts","sourceRoot":"","sources":["../../src/import/live-export.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAInF;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,OAAO,EACrB,QAAQ,CAAC,EAAE,gBAAgB,EAC3B,KAAK,CAAC,EAAE,OAAO,GACd,gBAAgB,CAoBlB"}

package/dist/import/parser.d.ts

@@ -0,0 +1,30 @@
+import type { TemplateParser, TemplateIR } from "@intentius/chant/import/parser";
+import { BaseValueParser } from "@intentius/chant/import/base-parser";
+/**
+ * Parser for CloudFormation JSON templates.
+ * Extends BaseValueParser for generic recursive value walking;
+ * overrides dispatchIntrinsic with the CFN-specific dispatch table.
+ */
+export declare class CFParser extends BaseValueParser implements TemplateParser {
+    /**
+     * Parse CF JSON content into intermediate representation
+     */
+    parse(content: string): TemplateIR;
+    /**
+     * Parse parameters section
+     */
+    private parseParameters;
+    /**
+     * Parse resources section
+     */
+    private parseResources;
+    /**
+     * Parse resource properties, handling intrinsic functions
+     */
+    private parseProperties;
+    /**
+     * CFN-specific intrinsic dispatch table.
+     */
+    protected dispatchIntrinsic(key: string, value: unknown, _obj: Record<string, unknown>): unknown | null;
+}
+//# sourceMappingURL=parser.d.ts.map

package/dist/import/parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../../src/import/parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,UAAU,EAGX,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAqItE;;;;GAIG;AACH,qBAAa,QAAS,SAAQ,eAAgB,YAAW,cAAc;IACrE;;OAEG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU;IAsBlC;;OAEG;IACH,OAAO,CAAC,eAAe;IAUvB;;OAEG;IACH,OAAO,CAAC,cAAc;IAWtB;;OAEG;IACH,OAAO,CAAC,eAAe;IAUvB;;OAEG;IACH,SAAS,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,IAAI;CAwIxG"}

package/dist/index.d.ts

@@ -0,0 +1,27 @@
+export { Parameter } from "./parameter.js";
+export { defaultTags, isDefaultTags, DEFAULT_TAGS_MARKER } from "./default-tags.js";
+export type { DefaultTags, TagEntry } from "./default-tags.js";
+export { awsSerializer } from "./serializer.js";
+export { nestedStack, isNestedStackInstance, NestedStackOutputRef, isNestedStackOutputRef, NESTED_STACK_MARKER } from "./nested-stack.js";
+export type { NestedStackOptions, NestedStackInstance } from "./nested-stack.js";
+export { isChildProject, CHILD_PROJECT_MARKER } from "@intentius/chant/child-project";
+export type { ChildProjectInstance } from "@intentius/chant/child-project";
+export { stackOutput, isStackOutput, STACK_OUTPUT_MARKER } from "@intentius/chant/stack-output";
+export type { StackOutput } from "@intentius/chant/stack-output";
+export { output, isLexiconOutput } from "@intentius/chant/lexicon-output";
+export type { LexiconOutput } from "@intentius/chant/lexicon-output";
+export { awsPlugin } from "./plugin.js";
+export { Sub, Ref, GetAtt, If, Join, Select, Split, Base64, GetAZs, SubIntrinsic, RefIntrinsic, GetAttIntrinsic, IfIntrinsic, JoinIntrinsic, SelectIntrinsic, SplitIntrinsic, Base64Intrinsic, GetAZsIntrinsic, } from "./intrinsics.js";
+export { AWS, StackName, Region, AccountId, StackId, URLSuffix, NoValue, NotificationARNs, Partition, } from "./pseudo.js";
+export * from "./generated/index.js";
+export { fetchSchemaZip } from "./spec/fetch.js";
+export type { CFNSchema, SchemaProperty, SchemaDefinition } from "./spec/fetch.js";
+export { parseCFNSchema, cfnShortName, cfnServiceName } from "./spec/parse.js";
+export type { SchemaParseResult, ParsedResource, ParsedProperty, ParsedAttribute, ParsedPropertyType, ParsedEnum, PropertyConstraints } from "./spec/parse.js";
+export { S3Actions, LambdaActions, DynamoDBActions, SQSActions, SNSActions, IAMActions, ECRActions, LogsActions, ECSActions } from "./actions/index.js";
+export { LambdaFunction, LambdaNode, LambdaPython, NodeLambda, PythonLambda, LambdaApi, LambdaScheduled, ScheduledLambda, LambdaSqs, LambdaEventBridge, LambdaDynamoDB, LambdaS3, LambdaSns, VpcDefault, FargateAlb, AlbShared, FargateService, RdsInstance, RdsPostgres, EfsWithAccessPoint, Ec2InstanceRole, MinimalVpc, } from "./composites/index.js";
+export type { LambdaFunctionProps, LambdaApiProps, ScheduledLambdaProps, LambdaSqsProps, LambdaEventBridgeProps, LambdaDynamoDBProps, LambdaS3Props, LambdaSnsProps, VpcDefaultProps, FargateAlbProps, AlbSharedProps, FargateServiceProps, RdsInstanceProps, RdsPostgresProps, EfsWithAccessPointProps, Ec2InstanceRoleProps, MinimalVpcProps, } from "./composites/index.js";
+export { generate, writeGeneratedFiles } from "./codegen/generate.js";
+export { packageLexicon } from "./codegen/package.js";
+export type { PackageOptions, PackageResult } from "./codegen/package.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGxC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACjF,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG5D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACvI,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAG9E,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtF,YAAY,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAChG,YAAY,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAC1E,YAAY,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAGrE,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAGrC,OAAO,EACL,GAAG,EACH,GAAG,EACH,MAAM,EACN,EAAE,EACF,IAAI,EACJ,MAAM,EACN,KAAK,EACL,MAAM,EACN,MAAM,EACN,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,WAAW,EACX,aAAa,EACb,eAAe,EACf,cAAc,EACd,eAAe,EACf,eAAe,GAChB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,GAAG,EACH,SAAS,EACT,MAAM,EACN,SAAS,EACT,OAAO,EACP,SAAS,EACT,OAAO,EACP,gBAAgB,EAChB,SAAS,GACV,MAAM,UAAU,CAAC;AAIlB,cAAc,mBAAmB,CAAC;AAGlC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC5E,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,kBAAkB,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAG5J,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAGrJ,OAAO,EACL,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAClE,SAAS,EACT,eAAe,EAAE,eAAe,EAChC,SAAS,EAAE,iBAAiB,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EACjE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAC3E,kBAAkB,EAClB,eAAe,EAAE,UAAU,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,mBAAmB,EAAE,cAAc,EAAE,oBAAoB,EACzD,cAAc,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,aAAa,EAAE,cAAc,EAC1F,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,gBAAgB,EACzG,uBAAuB,EACvB,oBAAoB,EAAE,eAAe,GACtC,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/integrity.json

@@ -1,9 +1,9 @@
 {
   "algorithm": "sha256",
   "artifacts": {
-    "manifest.json": "08ac87c56cd9db79cc11db07dce055af97295dae06f0dd89adc1092833c369c7",
-    "meta.json": "84c5b55c16bdf6a38e70fbc4be690cda5b4d17fce36f25dfc8e361f859acb929",
-    "types/index.d.ts": "0e98eff3df451dd41520406cb9de1fdaeec906e86354d5a2698153e25bdd6938",
+    "manifest.json": "952df85c49379cb7b10d9866055bb2372399f1be02eccb3b9178af1c0b197fd7",
+    "meta.json": "a3d3b5d5b061a94bc16391bcc6a159971f8db272f534dbb5dffac298b7fd28c2",
+    "types/index.d.ts": "1140e4598eb52866f19e5b6afeee6ab0f4e3f6a268e5bcd774ce977d53bb543a",
     "rules/hardcoded-region.ts": "5a0eaf7ab391231fe6cd51426ece29539cb4b36f31c8dd060956638fed55722a",
     "rules/iam-wildcard.ts": "135d7217d278fef50939e605c5da32603ba35674b8c4b5c4d66a06c77903e945",
     "rules/s3-encryption.ts": "c4f9f8aa8dc382ed98c7b04e820a600590cc75335a8db2e087cbfbfe4003d09e",
@@ -40,5 +40,5 @@
     "skills/chant-aws.md": "4d65eb160e001f2af42eb7c622a5b498c2fd1f5afbd6c8155615c010fb265c63",
     "skills/chant-aws-eks.md": "8789255709ff004ad0a875fd5999edcdc66fc6e33d710db058d9f42703bcfdfe"
   },
-  "composite": "ce1b9c381bb089c07181b3f5da5550c0bd08ba4bbb58e14a6ae5257759797e37"
+  "composite": "066d92b351ca7ed1f0ff0631670601f4377d1759458aa8c10077ad1ca46e8aae"
 }

package/dist/intrinsics.d.ts

@@ -0,0 +1,158 @@
+import { INTRINSIC_MARKER, type Intrinsic } from "@intentius/chant/intrinsic";
+import { type Declarable } from "@intentius/chant/declarable";
+/**
+ * Fn::Sub intrinsic function implementation
+ * Supports template string interpolation with AttrRefs, Declarables, and pseudo-parameters
+ */
+export declare class SubIntrinsic implements Intrinsic {
+    readonly [INTRINSIC_MARKER]: true;
+    private templateParts;
+    private values;
+    constructor(templateParts: string[], values: unknown[]);
+    toJSON(): {
+        "Fn::Sub": string;
+    };
+}
+/**
+ * Tagged template function for creating Fn::Sub intrinsics
+ * Usage: Sub`${AWS.StackName}-bucket` or Sub`${bucket.arn}`
+ */
+export declare function Sub(templateParts: TemplateStringsArray, ...values: unknown[]): SubIntrinsic;
+/**
+ * Ref intrinsic function
+ * References a parameter or resource by logical name.
+ * Accepts either a string name or a Declarable entity (e.g. Parameter).
+ * When given a Declarable, the logical name is resolved at serialization time.
+ */
+export declare class RefIntrinsic implements Intrinsic {
+    readonly [INTRINSIC_MARKER]: true;
+    private target;
+    constructor(target: string | Declarable);
+    toJSON(): {
+        Ref: string;
+    };
+}
+/**
+ * Create a Ref intrinsic.
+ * Pass a string for direct parameter/resource names, or a Declarable (e.g. Parameter) for type-safe references.
+ */
+export declare function Ref(target: string | Declarable): RefIntrinsic;
+/**
+ * Fn::GetAtt intrinsic function
+ * Gets an attribute from a resource
+ */
+export declare class GetAttIntrinsic implements Intrinsic {
+    readonly [INTRINSIC_MARKER]: true;
+    private logicalName;
+    private attribute;
+    constructor(logicalName: string, attribute: string);
+    toJSON(): {
+        "Fn::GetAtt": [string, string];
+    };
+}
+/**
+ * Create a GetAtt intrinsic
+ */
+export declare function GetAtt(logicalName: string, attribute: string): GetAttIntrinsic;
+/**
+ * Fn::If intrinsic function
+ * Conditional value based on a condition
+ */
+export declare class IfIntrinsic implements Intrinsic {
+    readonly [INTRINSIC_MARKER]: true;
+    private conditionName;
+    private valueIfTrue;
+    private valueIfFalse;
+    constructor(conditionName: string, valueIfTrue: unknown, valueIfFalse: unknown);
+    toJSON(): {
+        "Fn::If": [string, unknown, unknown];
+    };
+}
+/**
+ * Create an If intrinsic
+ */
+export declare function If(conditionName: string, valueIfTrue: unknown, valueIfFalse: unknown): IfIntrinsic;
+/**
+ * Fn::Join intrinsic function
+ * Joins values with a delimiter
+ */
+export declare class JoinIntrinsic implements Intrinsic {
+    readonly [INTRINSIC_MARKER]: true;
+    private delimiter;
+    private values;
+    constructor(delimiter: string, values: unknown[]);
+    toJSON(): {
+        "Fn::Join": [string, unknown[]];
+    };
+}
+/**
+ * Create a Join intrinsic
+ */
+export declare function Join(delimiter: string, values: unknown[]): JoinIntrinsic;
+/**
+ * Fn::Select intrinsic function
+ * Selects a value from a list by index
+ */
+export declare class SelectIntrinsic implements Intrinsic {
+    readonly [INTRINSIC_MARKER]: true;
+    private index;
+    private values;
+    constructor(index: number, values: unknown[] | Intrinsic);
+    toJSON(): {
+        "Fn::Select": [string, unknown];
+    };
+}
+/**
+ * Create a Select intrinsic
+ */
+export declare function Select(index: number, values: unknown[] | Intrinsic): SelectIntrinsic;
+/**
+ * Fn::Split intrinsic function
+ * Splits a string by delimiter
+ */
+export declare class SplitIntrinsic implements Intrinsic {
+    readonly [INTRINSIC_MARKER]: true;
+    private delimiter;
+    private source;
+    constructor(delimiter: string, source: string | Intrinsic);
+    toJSON(): {
+        "Fn::Split": [string, unknown];
+    };
+}
+/**
+ * Create a Split intrinsic
+ */
+export declare function Split(delimiter: string, source: string | Intrinsic): SplitIntrinsic;
+/**
+ * Fn::Base64 intrinsic function
+ * Encodes a string to Base64
+ */
+export declare class Base64Intrinsic implements Intrinsic {
+    readonly [INTRINSIC_MARKER]: true;
+    private value;
+    constructor(value: string | Intrinsic);
+    toJSON(): {
+        "Fn::Base64": unknown;
+    };
+}
+/**
+ * Create a Base64 intrinsic
+ */
+export declare function Base64(value: string | Intrinsic): Base64Intrinsic;
+/**
+ * Fn::GetAZs intrinsic function
+ * Returns a list of Availability Zones for a region
+ */
+export declare class GetAZsIntrinsic implements Intrinsic {
+    readonly [INTRINSIC_MARKER]: true;
+    private region;
+    constructor(region?: string | Intrinsic);
+    toJSON(): {
+        "Fn::GetAZs": unknown;
+    };
+}
+/**
+ * Create a GetAZs intrinsic
+ */
+export declare function GetAZs(region?: string | Intrinsic): GetAZsIntrinsic;
+//# sourceMappingURL=intrinsics.d.ts.map

package/dist/intrinsics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intrinsics.d.ts","sourceRoot":"","sources":["../src/intrinsics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAyB,KAAK,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAErG,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAG9D;;;GAGG;AACH,qBAAa,YAAa,YAAW,SAAS;IAC5C,QAAQ,CAAC,CAAC,gBAAgB,CAAC,EAAG,IAAI,CAAU;IAC5C,OAAO,CAAC,aAAa,CAAW;IAChC,OAAO,CAAC,MAAM,CAAY;gBAEd,aAAa,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;IAKtD,MAAM,IAAI;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE;CAOhC;AAED;;;GAGG;AACH,wBAAgB,GAAG,CACjB,aAAa,EAAE,oBAAoB,EACnC,GAAG,MAAM,EAAE,OAAO,EAAE,GACnB,YAAY,CAEd;AAED;;;;;GAKG;AACH,qBAAa,YAAa,YAAW,SAAS;IAC5C,QAAQ,CAAC,CAAC,gBAAgB,CAAC,EAAG,IAAI,CAAU;IAC5C,OAAO,CAAC,MAAM,CAAsB;gBAExB,MAAM,EAAE,MAAM,GAAG,UAAU;IAIvC,MAAM,IAAI;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE;CAM1B;AAED;;;GAGG;AACH,wBAAgB,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,YAAY,CAE7D;AAED;;;GAGG;AACH,qBAAa,eAAgB,YAAW,SAAS;IAC/C,QAAQ,CAAC,CAAC,gBAAgB,CAAC,EAAG,IAAI,CAAU;IAC5C,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,SAAS,CAAS;gBAEd,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;IAKlD,MAAM,IAAI;QAAE,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE;CAG7C;AAED;;GAEG;AACH,wBAAgB,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,eAAe,CAE9E;AAED;;;GAGG;AACH,qBAAa,WAAY,YAAW,SAAS;IAC3C,QAAQ,CAAC,CAAC,gBAAgB,CAAC,EAAG,IAAI,CAAU;IAC5C,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,WAAW,CAAU;IAC7B,OAAO,CAAC,YAAY,CAAU;gBAElB,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO;IAM9E,MAAM,IAAI;QAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;KAAE;CAGnD;AAGD;;GAEG;AACH,wBAAgB,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,GAAG,WAAW,CAElG;AAED;;;GAGG;AACH,qBAAa,aAAc,YAAW,SAAS;IAC7C,QAAQ,CAAC,CAAC,gBAAgB,CAAC,EAAG,IAAI,CAAU;IAC5C,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,MAAM,CAAY;gBAEd,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;IAKhD,MAAM,IAAI;QAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;KAAE;CAG9C;AAED;;GAEG;AACH,wBAAgB,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,aAAa,CAExE;AAED;;;GAGG;AACH,qBAAa,eAAgB,YAAW,SAAS;IAC/C,QAAQ,CAAC,CAAC,gBAAgB,CAAC,EAAG,IAAI,CAAU;IAC5C,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,MAAM,CAAwB;gBAE1B,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS;IAKxD,MAAM,IAAI;QAAE,YAAY,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE;CAM9C;AAED;;GAEG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,GAAG,eAAe,CAEpF;AAED;;;GAGG;AACH,qBAAa,cAAe,YAAW,SAAS;IAC9C,QAAQ,CAAC,CAAC,gBAAgB,CAAC,EAAG,IAAI,CAAU;IAC5C,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,MAAM,CAAqB;gBAEvB,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS;IAKzD,MAAM,IAAI;QAAE,WAAW,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE;CAM7C;AAED;;GAEG;AACH,wBAAgB,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,cAAc,CAEnF;AAED;;;GAGG;AACH,qBAAa,eAAgB,YAAW,SAAS;IAC/C,QAAQ,CAAC,CAAC,gBAAgB,CAAC,EAAG,IAAI,CAAU;IAC5C,OAAO,CAAC,KAAK,CAAqB;gBAEtB,KAAK,EAAE,MAAM,GAAG,SAAS;IAIrC,MAAM,IAAI;QAAE,YAAY,EAAE,OAAO,CAAA;KAAE;CAMpC;AAED;;GAEG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,eAAe,CAEjE;AAED;;;GAGG;AACH,qBAAa,eAAgB,YAAW,SAAS;IAC/C,QAAQ,CAAC,CAAC,gBAAgB,CAAC,EAAG,IAAI,CAAU;IAC5C,OAAO,CAAC,MAAM,CAAqB;gBAEvB,MAAM,GAAE,MAAM,GAAG,SAAc;IAI3C,MAAM,IAAI;QAAE,YAAY,EAAE,OAAO,CAAA;KAAE;CAMpC;AAED;;GAEG;AACH,wBAAgB,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,eAAe,CAEnE"}

package/dist/lint/post-synth/cf-refs.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Shared utility for extracting CloudFormation resource references
+ * from template properties.
+ *
+ * Used by WAW010 (redundant DependsOn) and COR020 (circular deps).
+ */
+/**
+ * Parsed CloudFormation template structure.
+ */
+export interface CFTemplate {
+    AWSTemplateFormatVersion?: string;
+    Resources?: Record<string, CFResource>;
+    [key: string]: unknown;
+}
+export interface CFResource {
+    Type: string;
+    Properties?: Record<string, unknown>;
+    DependsOn?: string | string[];
+    [key: string]: unknown;
+}
+/**
+ * Parse a serialized CloudFormation template from build output.
+ * Accepts either a raw string or a SerializerResult (extracts primary).
+ */
+export declare function parseCFTemplate(output: string | {
+    primary: string;
+}): CFTemplate | null;
+/**
+ * Recursively walk a CloudFormation property value and extract all logical IDs
+ * referenced via Ref and Fn::GetAtt.
+ *
+ * Skips pseudo-parameters (those starting with "AWS::").
+ */
+export declare function findResourceRefs(value: unknown): Set<string>;
+/**
+ * Check if a value is a CloudFormation intrinsic function (Ref, Fn::*, etc.)
+ * that cannot be statically evaluated.
+ */
+export declare function isIntrinsic(value: unknown): boolean;
+/**
+ * Walk IAM policy statements from a resource's properties.
+ * Handles IAM::Policy, IAM::Role, and IAM::ManagedPolicy layouts.
+ */
+export declare function walkPolicyStatements(resource: CFResource): Array<Record<string, unknown>>;
+/**
+ * Normalize security group ingress rules from inline SecurityGroupIngress
+ * property and standalone SecurityGroupIngress resources.
+ */
+export declare function getSecurityGroupIngress(resource: CFResource): Array<Record<string, unknown>>;
+/**
+ * Check if a port range [fromPort, toPort] contains any of the sensitive ports.
+ */
+export declare function portRangeContainsSensitive(fromPort: unknown, toPort: unknown, sensitivePorts: number[]): boolean;
+//# sourceMappingURL=cf-refs.d.ts.map

package/dist/lint/post-synth/cf-refs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cf-refs.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/cf-refs.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACvC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,UAAU,GAAG,IAAI,CAWvF;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAI5D;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAInD;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,UAAU,GACnB,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAoBhC;AAiBD;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,UAAU,GACnB,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAahC;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,OAAO,EACjB,MAAM,EAAE,OAAO,EACf,cAAc,EAAE,MAAM,EAAE,GACvB,OAAO,CAgBT"}

package/dist/lint/post-synth/cor020.d.ts

@@ -0,0 +1,10 @@
+/**
+ * COR020: Circular Resource Dependencies
+ *
+ * Builds a directed dependency graph from Ref, Fn::GetAtt, and DependsOn
+ * entries in the synthesized CloudFormation template. Detects cycles using
+ * DFS with three-color marking (white/gray/black).
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const cor020: PostSynthCheck;
+//# sourceMappingURL=cor020.d.ts.map

package/dist/lint/post-synth/cor020.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cor020.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/cor020.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAI9G,eAAO,MAAM,MAAM,EAAE,cA2DpB,CAAC"}

package/dist/lint/post-synth/ext001.d.ts

@@ -0,0 +1,25 @@
+/**
+ * EXT001: Extension Constraint Violation
+ *
+ * Validates CloudFormation resource properties against cross-property
+ * constraints from cfn-lint extension schemas.
+ *
+ * Constraint types:
+ * - if_then: if condition properties match, then requirement must hold
+ * - dependent_excluded: if property A exists, property B must not
+ * - required_or: at least one of the listed properties must exist
+ * - required_xor: exactly one of the listed properties must exist
+ */
+import type { PostSynthCheck, PostSynthContext, PostSynthDiagnostic } from "@intentius/chant/lint/post-synth";
+export interface ExtensionConstraint {
+    name: string;
+    type: "if_then" | "dependent_excluded" | "required_or" | "required_xor";
+    condition?: unknown;
+    requirement?: unknown;
+}
+/**
+ * Core detection logic — exported for direct testing with synthetic data.
+ */
+export declare function checkExtensionConstraints(ctx: PostSynthContext, constraintMap: Map<string, ExtensionConstraint[]>): PostSynthDiagnostic[];
+export declare const ext001: PostSynthCheck;
+//# sourceMappingURL=ext001.d.ts.map

package/dist/lint/post-synth/ext001.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ext001.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/ext001.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAG9G,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,GAAG,oBAAoB,GAAG,aAAa,GAAG,cAAc,CAAC;IACxE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAgLD;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,gBAAgB,EACrB,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,EAAE,CAAC,GAChD,mBAAmB,EAAE,CAkBvB;AAED,eAAO,MAAM,MAAM,EAAE,cAOpB,CAAC"}

package/dist/lint/post-synth/index.d.ts

@@ -0,0 +1,3 @@
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const postSynthChecks: PostSynthCheck[];
+//# sourceMappingURL=index.d.ts.map

package/dist/lint/post-synth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AA+BvE,eAAO,MAAM,eAAe,EAAE,cAAc,EA8B3C,CAAC"}

package/dist/lint/post-synth/waw010.d.ts

@@ -0,0 +1,10 @@
+/**
+ * WAW010: Redundant DependsOn
+ *
+ * Detects DependsOn entries that are already implied by Ref or Fn::GetAtt
+ * references in the resource's Properties. CloudFormation automatically
+ * creates dependencies for these references, making explicit DependsOn redundant.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const waw010: PostSynthCheck;
+//# sourceMappingURL=waw010.d.ts.map

package/dist/lint/post-synth/waw010.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"waw010.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/waw010.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cAqCpB,CAAC"}

package/dist/lint/post-synth/waw011.d.ts

@@ -0,0 +1,9 @@
+/**
+ * WAW011: Deprecated Lambda Runtime
+ *
+ * Checks Lambda function resources for deprecated or approaching-EOL runtimes.
+ * Emits error for "deprecated" runtimes and warning for "approaching_eol".
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const waw011: PostSynthCheck;
+//# sourceMappingURL=waw011.d.ts.map

package/dist/lint/post-synth/waw011.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"waw011.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/waw011.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAK9G,eAAO,MAAM,MAAM,EAAE,cAoCpB,CAAC"}

package/dist/lint/post-synth/waw013.d.ts

@@ -0,0 +1,10 @@
+/**
+ * WAW013: Child project has no stackOutput() exports
+ *
+ * When a parent uses nestedStack() to reference a child project, the child
+ * must declare at least one stackOutput() — otherwise the parent can't
+ * reference any of its values.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const waw013: PostSynthCheck;
+//# sourceMappingURL=waw013.d.ts.map

package/dist/lint/post-synth/waw013.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"waw013.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/waw013.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAI9G,eAAO,MAAM,MAAM,EAAE,cAgCpB,CAAC"}

package/dist/lint/post-synth/waw014.d.ts

@@ -0,0 +1,9 @@
+/**
+ * WAW014: Nested stack outputs never referenced from parent
+ *
+ * Warns when a nestedStack() is declared but none of its outputs are
+ * referenced from the parent template. Could just be a separate build.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const waw014: PostSynthCheck;
+//# sourceMappingURL=waw014.d.ts.map

package/dist/lint/post-synth/waw014.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"waw014.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/waw014.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAI9G,eAAO,MAAM,MAAM,EAAE,cAsCpB,CAAC"}

package/dist/lint/post-synth/waw015.d.ts

@@ -0,0 +1,13 @@
+/**
+ * WAW015: Circular project references
+ *
+ * Detects when child projects form circular references through
+ * nestedStack() declarations. A → B → A would cause infinite recursion
+ * at build time.
+ *
+ * Note: The core build pipeline also detects this and emits a BuildError,
+ * but this lint check provides a clearer diagnostic message.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const waw015: PostSynthCheck;
+//# sourceMappingURL=waw015.d.ts.map

package/dist/lint/post-synth/waw015.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"waw015.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/waw015.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cAqFpB,CAAC"}

package/dist/lint/post-synth/waw016.d.ts

@@ -0,0 +1,13 @@
+/**
+ * WAW016: Deprecated Property Usage
+ *
+ * Flags properties marked as deprecated in the CloudFormation Registry.
+ * Sources: explicit `deprecatedProperties` array + description text mining.
+ */
+import type { PostSynthCheck, PostSynthContext, PostSynthDiagnostic } from "@intentius/chant/lint/post-synth";
+/**
+ * Core detection logic — exported for direct testing with synthetic data.
+ */
+export declare function checkDeprecatedProperties(ctx: PostSynthContext, deprecated: Map<string, Set<string>>): PostSynthDiagnostic[];
+export declare const waw016: PostSynthCheck;
+//# sourceMappingURL=waw016.d.ts.map

package/dist/lint/post-synth/waw016.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"waw016.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/waw016.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAgC9G;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,gBAAgB,EACrB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,GACnC,mBAAmB,EAAE,CA6BvB;AAED,eAAO,MAAM,MAAM,EAAE,cAOpB,CAAC"}

package/dist/lint/post-synth/waw017.d.ts

@@ -0,0 +1,13 @@
+/**
+ * WAW017: Missing Tags on Taggable Resource
+ *
+ * Flags taggable resources that have no Tags property set.
+ * Encourages adding tags for cost allocation and compliance.
+ */
+import type { PostSynthCheck, PostSynthContext, PostSynthDiagnostic } from "@intentius/chant/lint/post-synth";
+/**
+ * Core detection logic — exported for direct testing with synthetic data.
+ */
+export declare function checkMissingTags(ctx: PostSynthContext, taggable: Set<string>): PostSynthDiagnostic[];
+export declare const waw017: PostSynthCheck;
+//# sourceMappingURL=waw017.d.ts.map

package/dist/lint/post-synth/waw017.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"waw017.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/waw017.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAI9G;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,gBAAgB,EACrB,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,GACpB,mBAAmB,EAAE,CA0BvB;AAED,eAAO,MAAM,MAAM,EAAE,cAOpB,CAAC"}

package/dist/lint/post-synth/waw018.d.ts

@@ -0,0 +1,9 @@
+/**
+ * WAW018: S3 Public Access Not Blocked
+ *
+ * Flags S3 buckets missing PublicAccessBlockConfiguration or with any flag set to false.
+ */
+import type { PostSynthCheck, PostSynthContext, PostSynthDiagnostic } from "@intentius/chant/lint/post-synth";
+export declare function checkS3PublicAccess(ctx: PostSynthContext): PostSynthDiagnostic[];
+export declare const waw018: PostSynthCheck;
+//# sourceMappingURL=waw018.d.ts.map

package/dist/lint/post-synth/waw018.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"waw018.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/waw018.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAU9G,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,GAAG,mBAAmB,EAAE,CA6ChF;AAED,eAAO,MAAM,MAAM,EAAE,cAOpB,CAAC"}

package/dist/lint/post-synth/waw019.d.ts

@@ -0,0 +1,10 @@
+/**
+ * WAW019: Security Group Unrestricted Ingress
+ *
+ * Flags security groups with 0.0.0.0/0 or ::/0 ingress on sensitive ports
+ * (SSH 22, RDP 3389, MySQL 3306, PostgreSQL 5432).
+ */
+import type { PostSynthCheck, PostSynthContext, PostSynthDiagnostic } from "@intentius/chant/lint/post-synth";
+export declare function checkUnrestrictedIngress(ctx: PostSynthContext): PostSynthDiagnostic[];
+export declare const waw019: PostSynthCheck;
+//# sourceMappingURL=waw019.d.ts.map

package/dist/lint/post-synth/waw019.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"waw019.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/waw019.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAsC9G,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,gBAAgB,GAAG,mBAAmB,EAAE,CA2BrF;AAED,eAAO,MAAM,MAAM,EAAE,cAOpB,CAAC"}

package/dist/lint/post-synth/waw020.d.ts

@@ -0,0 +1,10 @@
+/**
+ * WAW020: IAM Wildcard Action
+ *
+ * Flags IAM policies with Action: "*" in any statement.
+ * Checks IAM::Policy, IAM::Role, and IAM::ManagedPolicy resource types.
+ */
+import type { PostSynthCheck, PostSynthContext, PostSynthDiagnostic } from "@intentius/chant/lint/post-synth";
+export declare function checkIamWildcardAction(ctx: PostSynthContext): PostSynthDiagnostic[];
+export declare const waw020: PostSynthCheck;
+//# sourceMappingURL=waw020.d.ts.map

package/dist/lint/post-synth/waw020.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"waw020.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/waw020.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAkB9G,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,gBAAgB,GAAG,mBAAmB,EAAE,CA6BnF;AAED,eAAO,MAAM,MAAM,EAAE,cAOpB,CAAC"}