@intentius/chant 0.18.37 → 0.19.0

package/dist/cli/commands/carve-apply.d.ts

@@ -0,0 +1,30 @@
+/**
+ * `chant carve apply` — apply graduation for the strangler-fig carve (#197).
+ *
+ * The dial-turn from observe to apply: resolve the ownership marker that makes
+ * the carved resource chant-owned and finalize the ordered apply runbook.
+ *
+ * BYOL-honest: it does not call the cloud. It computes the marker + graduation
+ * plan and (with `--write`) emits a graduation doc. The apply is whatever
+ * lifecycle you brought.
+ */
+import { type GraduationPlan } from "../../terraform/graduate.js";
+export interface CarveApplyOptions {
+    from?: string;
+    select?: string;
+    env?: string;
+    stack?: string;
+    statePath?: string;
+    output?: string;
+    /** Write the graduation doc to the output dir. */
+    write?: boolean;
+}
+export interface CarveApplyResult {
+    ok: boolean;
+    error?: string;
+    plan?: GraduationPlan;
+    written?: string;
+}
+export declare function carveApply(opts: CarveApplyOptions): Promise<CarveApplyResult>;
+export declare function formatCarveApply(result: CarveApplyResult): string;
+//# sourceMappingURL=carve-apply.d.ts.map

package/dist/cli/commands/carve-apply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"carve-apply.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/carve-apply.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,OAAO,EAAkB,KAAK,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE/E,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA4BnF;AAqBD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAqBjE"}

package/dist/cli/commands/carve-bridge.d.ts

@@ -0,0 +1,32 @@
+/**
+ * `chant carve bridge` — the boundary-bridging step of the strangler-fig carve
+ * (#197). Generates the edits to the surviving Terraform (data sources +
+ * rewired references), records the deferred deploy-time inputs, and writes a
+ * reversible handoff runbook.
+ *
+ * Safe by default: writes proposed files to an output directory for review.
+ * `--apply-rewrites` writes the rewritten survivor `.tf` back in place — an
+ * opt-in mutation of your Terraform, never the default.
+ */
+import { type BridgePlan } from "../../terraform/bridge.js";
+export interface CarveBridgeOptions {
+    from?: string;
+    select?: string;
+    statePath?: string;
+    /** Output directory for proposed files (default `<from>/carveout`). */
+    output?: string;
+    /** Write rewritten survivor `.tf` back in place instead of to the output dir. */
+    applyRewrites?: boolean;
+}
+export interface CarveBridgeResult {
+    ok: boolean;
+    error?: string;
+    plan?: BridgePlan;
+    /** Absolute paths written. */
+    written?: string[];
+    /** True if survivor files were edited in place. */
+    appliedInPlace?: boolean;
+}
+export declare function carveBridge(opts: CarveBridgeOptions): Promise<CarveBridgeResult>;
+export declare function formatCarveBridge(result: CarveBridgeResult): string;
+//# sourceMappingURL=carve-bridge.d.ts.map

package/dist/cli/commands/carve-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"carve-bridge.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/carve-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,OAAO,EAAkB,KAAK,UAAU,EAAuB,MAAM,wBAAwB,CAAC;AAG9F,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,8BAA8B;IAC9B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,mDAAmD;IACnD,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AASD,wBAAsB,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA2DtF;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CA2BnE"}

package/dist/cli/commands/carve-emit.d.ts

@@ -0,0 +1,58 @@
+/**
+ * `chant carve emit` — the first strangler-fig emit step (#197).
+ *
+ * Given a resource selected from a Terraform estate, it:
+ *  1. classifies the boundary (which edges the carve cuts),
+ *  2. adopts the live resource into typed chant source via live import
+ *     (`chant import --from <env>` machinery — cloud→code, read-only export),
+ *  3. writes a boundary report.
+ *
+ * It does not patch the surviving Terraform or apply anything — that is the
+ * boundary-bridging and apply-graduation work (later PRs). This lands the
+ * resource at the observe position: emitted, reversible, nothing mutated.
+ */
+import { type CarveReport } from "../../terraform/carve.js";
+import type { LexiconPlugin, ResourceSelector } from "../../lexicon.js";
+import type { ImportResult, LiveImportOptions } from "./import.js";
+export interface CarveEmitOptions {
+    /** Terraform estate directory (`--from`). */
+    from?: string;
+    /** Terraform address to carve, e.g. `aws_s3_bucket.assets` (`--select`). */
+    select?: string;
+    /** Live environment to adopt from (`--env`). */
+    env?: string;
+    /**
+     * CloudFormation logical ID to adopt on the live path (`--live-name`). The
+     * live import filters a stack's template by logical ID, which is not the
+     * Terraform physical name — so the live selector is by native type by
+     * default, and this narrows it when a stack has several of that type.
+     */
+    liveName?: string;
+    /** Opt-in `.tfstate` for instance counts (`--state`). */
+    statePath?: string;
+    /** Output directory for the emitted source (`--output`). */
+    output?: string;
+    /** Write the boundary report JSON here (`--report`). */
+    reportFile?: string;
+}
+/** Injected so tests exercise emit without cloud calls. */
+export interface CarveEmitDeps {
+    plugins: LexiconPlugin[];
+    liveImport: (plugins: LexiconPlugin[], options: LiveImportOptions) => Promise<ImportResult>;
+}
+export interface CarveEmitResult {
+    ok: boolean;
+    error?: string;
+    report?: CarveReport;
+    emit?: ImportResult;
+    /** The selector used for the live adoption, for transparency (cloud path). */
+    selector?: ResourceSelector;
+    /** How the resource was adopted. */
+    source?: "tfstate" | "live";
+    /** Emitted file path(s). */
+    emittedFiles?: string[];
+}
+export declare function carveEmit(opts: CarveEmitOptions, deps: CarveEmitDeps): Promise<CarveEmitResult>;
+/** Human-readable emit summary: what was adopted and what boundary work remains. */
+export declare function formatCarveEmit(result: CarveEmitResult): string;
+//# sourceMappingURL=carve-emit.d.ts.map

package/dist/cli/commands/carve-emit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"carve-emit.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/carve-emit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAIzE,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAEhE,MAAM,WAAW,gBAAgB;IAC/B,6CAA6C;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,2DAA2D;AAC3D,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,UAAU,EAAE,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;CAC7F;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,oCAAoC;IACpC,MAAM,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IAC5B,4BAA4B;IAC5B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,CA8ErG;AAED,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAkC/D"}

package/dist/cli/commands/carve.d.ts

@@ -0,0 +1,29 @@
+/**
+ * `chant carve advise` — the read-only Terraform peelability advisor (#214).
+ *
+ * Points at a Terraform estate and reports which resources/modules are cheap to
+ * carve into native chant later and which should stay in Terraform. It emits
+ * nothing, patches nothing, and touches no live resource — pure analysis. The
+ * emit/boundary/apply phases stay in #197, gated on demand.
+ */
+import { type Peelability } from "../../terraform/score.js";
+export interface CarveAdviseOptions {
+    /** Terraform estate directory (from `--from`). */
+    from?: string;
+    /** Opt-in `.tfstate` path (from `--state`): accurate fan-out instance counts. */
+    statePath?: string;
+    /** Write the full JSON report to this path (from `--report <path>`). */
+    reportFile?: string;
+}
+export interface CarveAdviseResult {
+    ok: boolean;
+    error?: string;
+    from?: string;
+    results?: Peelability[];
+}
+export declare function carveAdvise(opts: CarveAdviseOptions): Promise<CarveAdviseResult>;
+/** The `--json` / `--report` payload. */
+export declare function carveJson(result: CarveAdviseResult): unknown;
+/** Human-readable banded, ranked summary. */
+export declare function formatCarveReport(result: CarveAdviseResult): string;
+//# sourceMappingURL=carve.d.ts.map

package/dist/cli/commands/carve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"carve.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/carve.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAe,KAAK,WAAW,EAAwB,MAAM,uBAAuB,CAAC;AAE5F,MAAM,WAAW,kBAAkB;IACjC,kDAAkD;IAClD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC;CACzB;AAID,wBAAsB,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAwBtF;AAED,yCAAyC;AACzC,wBAAgB,SAAS,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAY5D;AAED,6CAA6C;AAC7C,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAyBnE"}

package/dist/cli/handlers/carve-apply.d.ts

@@ -0,0 +1,9 @@
+import type { CommandContext } from "../registry.js";
+/**
+ * `chant carve apply --from <tf-dir> --select <address> --env <env> [--stack <name>] [--write]`
+ *
+ * Resolves the ownership marker + graduation runbook. BYOL-honest: no cloud
+ * calls. `--write` saves the graduation doc. No lexicon plugins needed.
+ */
+export declare function runCarveApply(ctx: CommandContext): Promise<number>;
+//# sourceMappingURL=carve-apply.d.ts.map

package/dist/cli/handlers/carve-apply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"carve-apply.d.ts","sourceRoot":"","sources":["../../../src/cli/handlers/carve-apply.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAuBxE"}

package/dist/cli/handlers/carve-bridge.d.ts

@@ -0,0 +1,10 @@
+import type { CommandContext } from "../registry.js";
+/**
+ * `chant carve bridge --from <tf-dir> --select <address> [--output <dir>] [--apply-rewrites]`
+ *
+ * Read-only by default: writes proposed survivor patches + a runbook to an
+ * output dir. `--apply-rewrites` edits the surviving `.tf` in place. Loads no
+ * lexicon plugins — pure Terraform-side analysis.
+ */
+export declare function runCarveBridge(ctx: CommandContext): Promise<number>;
+//# sourceMappingURL=carve-bridge.d.ts.map

package/dist/cli/handlers/carve-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"carve-bridge.d.ts","sourceRoot":"","sources":["../../../src/cli/handlers/carve-bridge.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAqBzE"}

package/dist/cli/handlers/carve-emit.d.ts

@@ -0,0 +1,11 @@
+import type { CommandContext } from "../registry.js";
+/**
+ * `chant carve emit --from <tf-dir> --select <address> (--state <tfstate> | --env <env>)`
+ *
+ * Adopts the selected Terraform resource into typed chant source. `--state`
+ * adopts offline from the tfstate (no plugins); `--env` adopts via the live
+ * cloud import path, for which the target lexicon is loaded lazily here — so a
+ * state-only carve never pays the plugin-load cost.
+ */
+export declare function runCarveEmit(ctx: CommandContext): Promise<number>;
+//# sourceMappingURL=carve-emit.d.ts.map

package/dist/cli/handlers/carve-emit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"carve-emit.d.ts","sourceRoot":"","sources":["../../../src/cli/handlers/carve-emit.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAoCvE"}

package/dist/cli/handlers/carve.d.ts

@@ -0,0 +1,12 @@
+import type { CommandContext } from "../registry.js";
+/**
+ * `chant carve advise --from <terraform-dir> [--json] [--report <path>]`
+ *
+ * Read-only. Reuses `--from` (shared with migrate/import) for the estate dir.
+ * Loads no chant project and no lexicon plugins — pure analysis of a foreign
+ * Terraform tree.
+ */
+export declare function runCarveAdvise(ctx: CommandContext): Promise<number>;
+/** Fallback for `chant carve` with no/unknown subcommand. */
+export declare function runCarveUnknown(_ctx: CommandContext): Promise<number>;
+//# sourceMappingURL=carve.d.ts.map

package/dist/cli/handlers/carve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"carve.d.ts","sourceRoot":"","sources":["../../../src/cli/handlers/carve.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAuBzE;AAED,6DAA6D;AAC7D,wBAAsB,eAAe,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAM3E"}

package/dist/cli/main.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":";AAMA,OAAO,EAAmC,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAkB9E;;GAEG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CA6LpD;AA2VD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB5E"}
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":";AAMA,OAAO,EAAmC,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAsB9E;;GAEG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAyMpD;AA2XD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB5E"}

package/dist/cli/registry.d.ts

@@ -30,6 +30,18 @@ export interface ParsedArgs {
     live: boolean;
     /** `chant migrate --from <name>` (default "github") */
     migrateFrom?: string;
+    /** `chant carve advise --state <path>` — opt-in .tfstate for accurate instance counts */
+    statePath?: string;
+    /** `chant carve emit --select <tf-address>` — the Terraform resource to carve */
+    selectAddress?: string;
+    /** `chant carve emit --live-name <logicalId>` — CFN logical ID for live adoption */
+    liveName?: string;
+    /** `chant carve bridge --apply-rewrites` — write rewritten survivor .tf in place */
+    applyRewrites?: boolean;
+    /** `chant carve apply --stack <name>` — ownership-marker stack for graduation */
+    carveStack?: string;
+    /** `chant carve apply --write` — save the graduation doc */
+    write?: boolean;
     /** `chant migrate --to <name>` (default "gitlab") */
     migrateTo?: string;
     /** `chant migrate --emit yaml|ts` */

package/dist/cli/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/cli/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEhD;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,GAAG,EAAE,OAAO,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,uEAAuE;IACvE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,uEAAuE;IACvE,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,qaAAqa;IACra,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,EAAE,OAAO,CAAC;IACd,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oEAAoE;IACpE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,iDAAiD;IACjD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,+DAA+D;IAC/D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,wFAAwF;IACxF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4CAA4C;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,mFAAmF;IACnF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;mFAC+E;IAC/E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;8DAC0D;IAC1D,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;oFACgF;IAChF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;2EAGuE;IACvE,aAAa,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;IAClC;iFAC6E;IAC7E,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;6DAEyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0EAA0E;IAC1E,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,+EAA+E;IAC/E,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;uFACmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oFAAoF;IACpF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qFAAqF;IACrF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iFAAiF;IACjF,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,4CAA4C;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gGAAgG;IAChG,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,mFAAmF;IACnF,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,kHAAkH;IAClH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sJAAsJ;IACtJ,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,uKAAuK;IACvK,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,0HAA0H;IAC1H,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oJAAoJ;IACpJ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uGAAuG;IACvG,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+FAA+F;IAC/F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+FAA+F;IAC/F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oJAAoJ;IACpJ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8RAA8R;IAC9R,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,8NAA8N;IAC9N,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uTAAuT;IACvT,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,0CAA0C;IAC1C,OAAO,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACnD;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,WAAW,EAAE,UAAU,EAAE,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,UAAU,CAAC;IAChB,4FAA4F;IAC5F,QAAQ,EAAE,OAAO,CAAC;CACnB;AAWD,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,eAAe,GAAG,IAAI,CAiB/F"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/cli/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEhD;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,GAAG,EAAE,OAAO,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,uEAAuE;IACvE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,uEAAuE;IACvE,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,qaAAqa;IACra,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,EAAE,OAAO,CAAC;IACd,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yFAAyF;IACzF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oFAAoF;IACpF,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,iFAAiF;IACjF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4DAA4D;IAC5D,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oEAAoE;IACpE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,iDAAiD;IACjD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,+DAA+D;IAC/D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,wFAAwF;IACxF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4CAA4C;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,mFAAmF;IACnF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;mFAC+E;IAC/E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;8DAC0D;IAC1D,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;oFACgF;IAChF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;2EAGuE;IACvE,aAAa,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;IAClC;iFAC6E;IAC7E,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;6DAEyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0EAA0E;IAC1E,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,+EAA+E;IAC/E,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;uFACmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oFAAoF;IACpF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qFAAqF;IACrF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iFAAiF;IACjF,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,4CAA4C;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gGAAgG;IAChG,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,mFAAmF;IACnF,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,kHAAkH;IAClH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sJAAsJ;IACtJ,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,uKAAuK;IACvK,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,0HAA0H;IAC1H,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oJAAoJ;IACpJ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uGAAuG;IACvG,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+FAA+F;IAC/F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+FAA+F;IAC/F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oJAAoJ;IACpJ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8RAA8R;IAC9R,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,8NAA8N;IAC9N,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uTAAuT;IACvT,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,0CAA0C;IAC1C,OAAO,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACnD;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,WAAW,EAAE,UAAU,EAAE,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,UAAU,CAAC;IAChB,4FAA4F;IAC5F,QAAQ,EAAE,OAAO,CAAC;CACnB;AAWD,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,eAAe,GAAG,IAAI,CAiB/F"}

package/dist/terraform/adopt-state.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Adopt a Terraform-managed resource into chant source from its `.tfstate`
+ * (#1009). This is the correct adoption source for carving OUT of Terraform:
+ * a TF resource is created through the provider API, not CloudFormation, so it
+ * is not in any CFN stack — but its resolved attributes ARE in the state file.
+ *
+ * chant AWS constructors take CloudFormation PascalCase properties (e.g.
+ * `new Bucket({ BucketName })`), while Terraform state uses the provider's
+ * snake_case attributes (`bucket`, `tags`). The mapping is driven by the single
+ * AWS carve-out table (`aws-resources.ts`) — the same table the advisor's tier
+ * map derives from, so every AWS type advise ranks can be emitted. Attributes
+ * without a mapping are preserved in a reference comment, never dropped.
+ */
+import type { StateResource } from "./state.js";
+export interface AdoptedSource {
+    fileName: string;
+    content: string;
+    /** True when at least one attribute was mapped to a native prop. */
+    mapped: boolean;
+    nativeType: string;
+}
+/** Is this Terraform type adoptable from state (has a native constructor)? */
+export declare function canAdoptFromState(tfType: string): boolean;
+/** Terraform types that can currently be adopted from state, for user-facing hints. */
+export declare function supportedStateAdoptionTypes(): string[];
+/**
+ * Render chant source for a state-adopted resource. Emits the native
+ * constructor with mapped properties, plus a reference comment listing the
+ * Terraform attributes that were not mapped so nothing is silently dropped.
+ */
+export declare function adoptFromState(resource: StateResource): AdoptedSource | null;
+//# sourceMappingURL=adopt-state.d.ts.map

package/dist/terraform/adopt-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adopt-state.d.ts","sourceRoot":"","sources":["../../src/terraform/adopt-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,8EAA8E;AAC9E,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED,uFAAuF;AACvF,wBAAgB,2BAA2B,IAAI,MAAM,EAAE,CAEtD;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,aAAa,GAAG,aAAa,GAAG,IAAI,CA6B5E"}

package/dist/terraform/aws-resources.d.ts

@@ -0,0 +1,49 @@
+/**
+ * The AWS carve-out resource table — the single source of truth for which AWS
+ * Terraform types chant can carve, and how.
+ *
+ * Both the advisor (tier map / scoring) and `carve emit --state` derive from
+ * this one list, so advise and emit cover exactly the same AWS types: advise
+ * never ranks a resource emit cannot produce, and emit never claims a type
+ * advise did not score. Adding a type here lights it up for both at once.
+ *
+ * Each entry maps the common, high-confidence Terraform attributes to their
+ * CloudFormation property names (chant AWS constructors take CFN PascalCase
+ * props). Attributes without a mapping here are preserved in a reference
+ * comment on emit, never dropped — a curated seed, not a full TF↔CFN transform.
+ */
+/** A Terraform attribute → CloudFormation property mapping. */
+type FieldSpec = string | {
+    prop: string;
+    transform: (v: unknown) => unknown;
+};
+export interface AwsCarveType {
+    /** Terraform resource type, e.g. `aws_s3_bucket`. */
+    tfType: string;
+    /** Native-spec map tier: 1 clean 1:1, 2 some reshaping, 3 heavy composite. */
+    tier: 1 | 2 | 3;
+    /** CloudFormation type, e.g. `AWS::S3::Bucket`. */
+    nativeType: string;
+    /** chant AWS lexicon constructor, e.g. `Bucket` (verified against generated exports). */
+    ctor: string;
+    /** The HCL attribute carrying the physical name (for the live-import hint / graph identity). */
+    identityAttr?: string;
+    /** Terraform attribute → CFN property mappings. */
+    fields: Record<string, FieldSpec>;
+    /** Map the Terraform `tags` map to CloudFormation `Tags` list. */
+    tags?: boolean;
+}
+export declare const AWS_LEXICON_IMPORT = "@intentius/chant-lexicon-aws";
+export declare const AWS_CARVE_TYPES: AwsCarveType[];
+export declare function awsCarveType(tfType: string): AwsCarveType | undefined;
+/**
+ * Apply an entry's field mappings to a resource's Terraform attributes, yielding
+ * CloudFormation properties and the set of attribute keys that were consumed
+ * (so the caller can report the rest as unmapped).
+ */
+export declare function applyAwsMapper(entry: AwsCarveType, attrs: Record<string, unknown>): {
+    props: Record<string, unknown>;
+    mappedKeys: string[];
+};
+export {};
+//# sourceMappingURL=aws-resources.d.ts.map

package/dist/terraform/aws-resources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws-resources.d.ts","sourceRoot":"","sources":["../../src/terraform/aws-resources.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,+DAA+D;AAC/D,KAAK,SAAS,GAAG,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,CAAA;CAAE,CAAC;AAE/E,MAAM,WAAW,YAAY;IAC3B,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,mDAAmD;IACnD,UAAU,EAAE,MAAM,CAAC;IACnB,yFAAyF;IACzF,IAAI,EAAE,MAAM,CAAC;IACb,gGAAgG;IAChG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAClC,kEAAkE;IAClE,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,eAAO,MAAM,kBAAkB,iCAAiC,CAAC;AAajE,eAAO,MAAM,eAAe,EAAE,YAAY,EA8DzC,CAAC;AAIF,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAErE;AASD;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B;IAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,CAoB1D"}

package/dist/terraform/bridge.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Boundary bridging for the strangler-fig carve (#197) — the centerpiece.
+ *
+ * Carving a resource cuts edges. This generates the edits to the Terraform you
+ * LEAVE BEHIND so its plan stays valid once the resource is chant-owned:
+ *
+ *  - inbound edge  → the survivor loses its reference to the carved resource.
+ *    Bridge: add a `data` source for the (now chant-managed) resource and
+ *    rewrite the survivor's `type.name.attr` references to `data.type.name.attr`.
+ *    Required immediately, or `terraform plan` errors on the dangling ref.
+ *
+ *  - outbound edge → the carved resource read a value from a survivor. That
+ *    value must enter chant from outside synthesis, as a deploy-time input.
+ *    Deferred until apply; here we only record the provenance.
+ *
+ * Pure text transform over the original `.tf` content — no wasm, no shell, no
+ * mutation. The command layer writes the results and (optionally) diffs them
+ * into a git-applyable patch. A carve never destroys or recreates; the runbook
+ * is reversible via `terraform import`.
+ */
+import type { CarveReport } from "./carve.js";
+export interface CarvedIdentity {
+    /** The HCL identity attribute, e.g. `bucket` or `name`. */
+    attr?: string;
+    /** Its literal value, e.g. `myapp-assets-prod`. */
+    value?: string;
+}
+export interface DataSourceBlock {
+    /** Carved resource address the data source stands in for. */
+    address: string;
+    type: string;
+    name: string;
+    hcl: string;
+}
+export interface FileRewrite {
+    path: string;
+    original: string;
+    rewritten: string;
+    changed: boolean;
+}
+export interface DeferredInput {
+    survivor: string;
+    carved: string;
+    attrs: string[];
+    note: string;
+}
+export interface BridgePlan {
+    target: string;
+    dataSources: DataSourceBlock[];
+    rewrites: FileRewrite[];
+    deferredInputs: DeferredInput[];
+    runbook: string;
+}
+/**
+ * Build the bridge plan for a carve.
+ *
+ * @param report    the boundary report (from `boundaryReport`)
+ * @param files     every `.tf` file in the estate, as { path, content }
+ * @param identities physical identity per carved address, for the data sources
+ */
+export declare function generateBridge(report: CarveReport, files: Array<{
+    path: string;
+    content: string;
+}>, identities: Map<string, CarvedIdentity>): BridgePlan;
+//# sourceMappingURL=bridge.d.ts.map

package/dist/terraform/bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../src/terraform/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,MAAM,WAAW,cAAc;IAC7B,2DAA2D;IAC3D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,eAAe,EAAE,CAAC;IAC/B,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;CACjB;AAiBD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,WAAW,EACnB,KAAK,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,EAC/C,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,GACtC,UAAU,CAsCZ"}

package/dist/terraform/carve.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Carve-out boundary analysis for the strangler-fig emit path (#197).
+ *
+ * The advisor (#214) ranks *what* is cheap to carve. This is the next step:
+ * given a chosen resource, work out the boundary — every dependency edge the
+ * carve would cut — so the surviving Terraform can be patched and the resource
+ * handed off without destroying it.
+ *
+ * Pure analysis over the graph, like the scorer. Emitting the chant source
+ * (via live import) and generating the TF patches live in the command/bridge
+ * layers; this module just classifies the boundary.
+ */
+import type { TfGraph } from "./types.js";
+/** One resource in the carve set (the selected node plus its folded sub-resources). */
+export interface CarveMember {
+    address: string;
+    type?: string;
+    /** Set when this member is a sub-resource inlined into the selected parent. */
+    foldedInto?: string;
+}
+export type BoundaryDirection = "inbound" | "outbound";
+/**
+ * A dependency edge the carve cuts.
+ *  - inbound  → a survivor depends on the carve set. Bridge: rewrite that
+ *    reference to a Terraform `data` source. Required immediately, or the
+ *    surviving plan breaks.
+ *  - outbound → the carve set depends on a survivor. Bridge: the value enters
+ *    chant as a deploy-time input. Deferred until apply; only provenance is
+ *    recorded at the observe position.
+ */
+export interface BoundaryEdge {
+    direction: BoundaryDirection;
+    /** The survivor side of the edge. */
+    survivor: string;
+    /** The carve-set side of the edge. */
+    carved: string;
+    attrs: string[];
+    bridge: "tf-data-source" | "deferred-input";
+    required: "immediately" | "at-apply";
+}
+export interface CarveReport {
+    /** The selected resource address. */
+    target: string;
+    carveSet: CarveMember[];
+    /** Peelability of the selected resource (from the #214 scorer). */
+    peelability: number;
+    inbound: BoundaryEdge[];
+    outbound: BoundaryEdge[];
+    /** A carve never destroys/recreates; it is reversible via `terraform import`. */
+    reversible: true;
+    diagnostics: string[];
+}
+/**
+ * The carve set for a selected address: the node itself plus any sub-resources
+ * that fold into it (same name, a `FOLDS_INTO` child type whose parent is the
+ * selection). Those are carried along and inlined, not left behind.
+ */
+export declare function resolveCarveSet(graph: TfGraph, target: string): CarveMember[];
+/**
+ * Classify the boundary of carving `target`: the inbound edges that need an
+ * immediate data-source patch, and the outbound edges that become deferred
+ * deploy-time inputs. Edges internal to the carve set (e.g. a folded
+ * sub-resource pointing at its parent) are not boundary work.
+ */
+export declare function boundaryReport(graph: TfGraph, target: string): CarveReport | null;
+//# sourceMappingURL=carve.d.ts.map

package/dist/terraform/carve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"carve.d.ts","sourceRoot":"","sources":["../../src/terraform/carve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,uFAAuF;AACvF,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,UAAU,CAAC;AAEvD;;;;;;;;GAQG;AACH,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,iBAAiB,CAAC;IAC7B,qCAAqC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,EAAE,gBAAgB,GAAG,gBAAgB,CAAC;IAC5C,QAAQ,EAAE,aAAa,GAAG,UAAU,CAAC;CACtC;AAED,MAAM,WAAW,WAAW;IAC1B,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,iFAAiF;IACjF,UAAU,EAAE,IAAI,CAAC;IACjB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,EAAE,CAgB7E;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAgDjF"}

package/dist/terraform/graduate.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Apply graduation for the strangler-fig carve (#197) — the last step.
+ *
+ * After a resource is emitted (`carve emit`) and the survivors are bridged
+ * (`carve bridge`), it sits at the observe position: chant has the source, but
+ * the live resource is an orphan carrying no chant ownership. Graduation is the
+ * dial-turn to apply: mark the resource chant-owned so `chant carve` / status
+ * recognize it, and finalize the ordered apply runbook.
+ *
+ * This is BYOL-honest: it does NOT call the cloud. It resolves the ownership
+ * marker (reusing core's `ownershipEntries`) and produces the graduation
+ * artifacts + runbook. The apply itself is whatever lifecycle you brought —
+ * the native CLI, a CI pipeline, an ApplyOp — and it stamps the marker the
+ * emitted source now carries.
+ */
+import { type ChannelKeys, type OwnershipMarker } from "../ownership.js";
+import type { CarveReport } from "./carve.js";
+/**
+ * Default tag channel, mirroring the AWS lexicon's `AWS_TAG_OWNERSHIP_KEYS`
+ * (`lexicons/aws/src/ownership.ts`). Core cannot import a lexicon, so the
+ * convention is duplicated here; the values match so the graduation plan shows
+ * the tags the AWS apply path will actually stamp.
+ */
+export declare const DEFAULT_TAG_OWNERSHIP_KEYS: ChannelKeys;
+export interface GraduationPlan {
+    target: string;
+    marker: OwnershipMarker;
+    /** The ownership tags the emitted resource must carry to be chant-owned. */
+    ownershipTags: Record<string, string>;
+    /** The finalized, ordered apply runbook. */
+    steps: string[];
+    warnings: string[];
+}
+export interface GraduationOptions {
+    /** Chant stack name for the ownership marker (defaults to the resource name). */
+    stack?: string;
+    /** Environment identity for the marker. */
+    env?: string;
+    /** Override the tag channel (e.g. for a non-AWS lexicon). */
+    channel?: ChannelKeys;
+}
+export declare function graduationPlan(report: CarveReport, opts?: GraduationOptions): GraduationPlan;
+//# sourceMappingURL=graduate.d.ts.map

package/dist/terraform/graduate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graduate.d.ts","sourceRoot":"","sources":["../../src/terraform/graduate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAoB,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AACxF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,EAAE,WAIxC,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,eAAe,CAAC;IACxB,4EAA4E;IAC5E,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,4CAA4C;IAC5C,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,GAAE,iBAAsB,GAAG,cAAc,CA2BhG"}

package/dist/terraform/graph.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Pure Terraform dependency-graph builder for the carve-out advisor (#214 T1).
+ *
+ * Input is the JSON tree `@cdktf/hcl2json` produces (`Hcl2JsonTree`). No wasm,
+ * no filesystem — so the graph and its edge classification are unit-testable
+ * on hand-written fixtures. `parse.ts` is the thin glue that loads the wasm
+ * parser and feeds this.
+ */
+import type { Hcl2JsonTree, TfEdge, TfGraph } from "./types.js";
+/**
+ * Build the dependency graph from a merged hcl2json tree.
+ *
+ * `resource` and `module` blocks become nodes. `data` sources are NOT nodes
+ * (they are not carvable infrastructure), but a reference *to* a data source
+ * marks the referring node dynamic. An edge is recorded only when its target
+ * resolves to a known resource/module node — references to `var`/`local`/data
+ * are dropped.
+ */
+export declare function buildGraph(tree: Hcl2JsonTree): TfGraph;
+/** Edges where other nodes depend on `address` (each → a surviving-TF data-source patch). */
+export declare function inboundEdges(graph: TfGraph, address: string): TfEdge[];
+/** Edges where `address` depends on other nodes (each → a deferred deploy-time input). */
+export declare function outboundEdges(graph: TfGraph, address: string): TfEdge[];
+//# sourceMappingURL=graph.d.ts.map

package/dist/terraform/graph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph.d.ts","sourceRoot":"","sources":["../../src/terraform/graph.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAU,MAAM,SAAS,CAAC;AA4ErE;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAsEtD;AAED,6FAA6F;AAC7F,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAEtE;AAED,0FAA0F;AAC1F,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAEvE"}

package/dist/terraform/parse.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Thin wasm glue for the carve-out advisor (#214 T1): read a Terraform estate's
+ * `.tf` files, run them through `@cdktf/hcl2json`, merge into one tree, and hand
+ * off to the pure `buildGraph`.
+ *
+ * `@cdktf/hcl2json` is NOT a chant dependency — it carries a ~1.8 MB wasm blob
+ * and only carve-out users need it. It is lazy-loaded here and, if absent, the
+ * advisor fails with a one-line install hint.
+ */
+import type { Hcl2JsonTree, TfGraph } from "./types.js";
+/** Minimal shape of the parser export we depend on. */
+type Hcl2JsonParse = (filename: string, hcl: string) => Promise<Hcl2JsonTree>;
+export declare class Hcl2JsonNotInstalled extends Error {
+    constructor(cause: unknown);
+}
+/**
+ * Lazy-load the optional HCL parser. Throws `Hcl2JsonNotInstalled` with an
+ * install hint when the package is missing, rather than a raw MODULE_NOT_FOUND.
+ */
+export declare function loadHcl2json(): Promise<Hcl2JsonParse>;
+export interface ParseTerraformOptions {
+    /** Opt-in `.tfstate` path (#214 T2): overlays state-expanded instance counts. */
+    statePath?: string;
+}
+/**
+ * Parse a Terraform directory into a dependency graph. Reads only `.tf` unless
+ * `statePath` is given. Pure `.tf` estates parse fully; `count`/`for_each`
+ * blocks report a single instance and are flagged `hasDynamic`. With state, the
+ * instance counts become accurate (see `state.ts`).
+ */
+export declare function parseTerraformDir(dir: string, opts?: ParseTerraformOptions): Promise<TfGraph>;
+export {};
+//# sourceMappingURL=parse.d.ts.map

package/dist/terraform/parse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.d.ts","sourceRoot":"","sources":["../../src/terraform/parse.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAErD,uDAAuD;AACvD,KAAK,aAAa,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;AAE9E,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,KAAK,EAAE,OAAO;CAQ3B;AAED;;;GAGG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,aAAa,CAAC,CAO3D;AAuBD,MAAM,WAAW,qBAAqB;IACpC,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,qBAA0B,GAAG,OAAO,CAAC,OAAO,CAAC,CAWvG"}