@intentius/chant 0.41.20 → 0.42.1

package/dist/lifecycle/snapshot.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"snapshot.d.ts","sourceRoot":"","sources":["../../src/lifecycle/snapshot.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAsC,MAAM,YAAY,CAAC;AACzF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C,OAAO,KAAK,EAAE,iBAAiB,EAAoB,MAAM,SAAS,CAAC;AAgEnE,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,kBAAkB,EAAE,EAC7B,WAAW,EAAE,WAAW,EACxB,IAAI,CAAC,EAAE;IACL,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;qEACiE;IACjE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB,GACA,OAAO,CAAC,kBAAkB,CAAC,CAmN7B"}
+{"version":3,"file":"snapshot.d.ts","sourceRoot":"","sources":["../../src/lifecycle/snapshot.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAsC,MAAM,YAAY,CAAC;AACzF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C,OAAO,KAAK,EAAE,iBAAiB,EAAoB,MAAM,SAAS,CAAC;AAiEnE,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,kBAAkB,EAAE,EAC7B,WAAW,EAAE,WAAW,EACxB,IAAI,CAAC,EAAE;IACL,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;qEACiE;IACjE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB,GACA,OAAO,CAAC,kBAAkB,CAAC,CAmN7B"}

package/dist/okf.d.ts

@@ -0,0 +1,57 @@
+import type { Declarable } from "./declarable.js";
+/**
+ * OKF bundle emitter (#1058, epic #1057) — projects a discovered entity graph
+ * into an Open Knowledge Format v0.2 bundle: a directory of markdown files
+ * with YAML frontmatter, per the spec at
+ * https://github.com/GoogleCloudPlatform/knowledge-catalog/blob/main/okf/SPEC.md
+ *
+ * One concept document per entity, `type` carrying the entity's resource type
+ * string, dependency edges as bundle-relative markdown links (the form the
+ * spec recommends for stability), and a root `index.md` grouping concepts into
+ * per-lexicon sections. Emit-only: OKF as project *input* is #1059.
+ */
+export declare const OKF_VERSION = "0.2";
+/** One file of an OKF bundle: a bundle-relative path and its full content. */
+export interface OkfFile {
+    /** Bundle-relative path, e.g. "aws/myBucket.md" or "index.md". */
+    path: string;
+    content: string;
+}
+/** The subset of a discovery result the emitter reads. */
+export interface OkfBundleInput {
+    entities: Map<string, Declarable>;
+    dependencies: Map<string, Set<string>>;
+}
+/** Make an entity or lexicon name safe as a single path segment. */
+export declare function slug(name: string): string;
+/**
+ * Render a flat frontmatter mapping as a YAML block. Keys with undefined
+ * values are dropped; scalar quoting is `emitYAML`'s.
+ */
+export declare function frontmatter(fields: Record<string, string | undefined>): string;
+/**
+ * Split a concept document into its frontmatter block and body. Returns
+ * undefined when the document does not start with a `---` delimited block.
+ * Exported for the conformance tests (and any future OKF consumer, #1059).
+ */
+export declare function splitFrontmatter(content: string): {
+    frontmatter: string;
+    body: string;
+} | undefined;
+/**
+ * Check a bundle against the OKF v0.2 conformance criteria (spec §11) and
+ * return every violation found: parseable frontmatter on every non-reserved
+ * `.md`, a non-empty `type` everywhere, a well-formed root `index.md`, and
+ * generated cross-link entries that are bundle-absolute (or external URLs).
+ * Empty result means conformant. Shared by the project-bundle tests (#1058)
+ * and every lexicon's bundle tests (#1060).
+ */
+export declare function okfConformanceProblems(files: OkfFile[]): string[];
+/**
+ * Build the OKF bundle for a discovered graph. Pure and deterministic: the
+ * same entities yield byte-identical files, so bundles are diffable and
+ * snapshot-testable. `projectPath` relativizes source-file paths so the
+ * bundle is portable.
+ */
+export declare function buildOkfBundle(input: OkfBundleInput, projectPath?: string): OkfFile[];
+//# sourceMappingURL=okf.d.ts.map

package/dist/okf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"okf.d.ts","sourceRoot":"","sources":["../src/okf.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAM/C;;;;;;;;;;GAUG;AAEH,eAAO,MAAM,WAAW,QAAQ,CAAC;AAEjC,8EAA8E;AAC9E,MAAM,WAAW,OAAO;IACtB,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,0DAA0D;AAC1D,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;CACxC;AAED,oEAAoE;AACpE,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGzC;AAWD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM,CAQ9E;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CASnG;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,CAoEjE;AA+BD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,cAAc,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,EAAE,CAwFrF"}

package/dist/terraform/__fixtures__/build-graph.d.ts

@@ -0,0 +1,13 @@
+import { type ExpressionRefs } from "../graph.js";
+import type { Hcl2JsonTree, TfGraph } from "../types.js";
+/**
+ * Test-only stand-in for the hcl2json expression AST (`parse.ts`'s
+ * `resolveExpressionRefs`). Fixture expressions are simple `${<accessor>}`
+ * templates, so each one's accessor list is just its interpolation bodies.
+ * Production never takes this path — `parseTerraformDir` resolves every
+ * expression through `getReferencesInExpression`.
+ */
+export declare function fixtureExprRefs(tree: Hcl2JsonTree): ExpressionRefs;
+/** `buildGraph` over a hand-written fixture tree, accessors derived per {@link fixtureExprRefs}. */
+export declare function buildFixtureGraph(tree: Hcl2JsonTree): TfGraph;
+//# sourceMappingURL=build-graph.d.ts.map

package/dist/terraform/__fixtures__/build-graph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-graph.d.ts","sourceRoot":"","sources":["../../../src/terraform/__fixtures__/build-graph.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkC,KAAK,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/E,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAEtD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,YAAY,GAAG,cAAc,CASlE;AAED,oGAAoG;AACpG,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAE7D"}

package/dist/terraform/adopt-state.d.ts

@@ -10,14 +10,42 @@
  * AWS carve-out table (`aws-resources.ts`) — the same table the advisor's tier
  * map derives from, so every AWS type advise ranks can be emitted. Attributes
  * without a mapping are preserved in a reference comment, never dropped.
+ *
+ * Deferred outbound inputs (#998): an attribute whose value the Terraform
+ * source read from a survivor (`vpc_id = aws_vpc.main.id`) is not a fact of
+ * the carved resource — it is a deploy-time input. Those props are emitted as
+ * `params.<name>` references instead of frozen literals, with the state's
+ * resolved value as the declared default (see `carve-emit.ts`'s scaffold).
  */
 import type { StateResource } from "./state.js";
+/** The core subpath the emitted source reads build parameters from. */
+export declare const PARAMS_IMPORT = "@intentius/chant/params";
+/**
+ * One deferred outbound input turned into a build parameter (#998). Derived
+ * from the boundary report's outbound edges + the state's resolved attributes
+ * in `carve-emit.ts`; consumed here (source substitution) and by the scaffold
+ * (`chant.config.ts` `buildParams` declaration).
+ */
+export interface DeferredParam {
+    /** Build-parameter name, source-referenceable (`params.<name>`). */
+    name: string;
+    /** The carved resource's own Terraform attribute the value enters through. */
+    tfAttr: string;
+    /** The survivor the Terraform source read, e.g. `aws_vpc.main`. */
+    survivor: string;
+    /** Survivor attribute(s) read, e.g. `["id"]`. */
+    attrs: string[];
+    /** The state-resolved value — the parameter's declared default. */
+    default?: string | number | boolean;
+}
 export interface AdoptedSource {
     fileName: string;
     content: string;
     /** True when at least one attribute was mapped to a native prop. */
     mapped: boolean;
     nativeType: string;
+    /** Deferred params actually substituted into the emitted props (#998). */
+    parameterized: string[];
 }
 /** Is this Terraform type adoptable from state (has a native constructor)? */
 export declare function canAdoptFromState(tfType: string): boolean;
@@ -27,6 +55,10 @@ export declare function supportedStateAdoptionTypes(): string[];
  * Render chant source for a state-adopted resource. Emits the native
  * constructor with mapped properties, plus a reference comment listing the
  * Terraform attributes that were not mapped so nothing is silently dropped.
+ *
+ * A mapped attribute named by a `DeferredParam` renders as a `params.<name>`
+ * reference (a real chant build parameter) instead of the state literal —
+ * the value came from a survivor, so it stays overridable per build.
  */
-export declare function adoptFromState(resource: StateResource): AdoptedSource | null;
+export declare function adoptFromState(resource: StateResource, params?: DeferredParam[]): AdoptedSource | null;
 //# sourceMappingURL=adopt-state.d.ts.map

package/dist/terraform/adopt-state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adopt-state.d.ts","sourceRoot":"","sources":["../../src/terraform/adopt-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,8EAA8E;AAC9E,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED,uFAAuF;AACvF,wBAAgB,2BAA2B,IAAI,MAAM,EAAE,CAEtD;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,aAAa,GAAG,aAAa,GAAG,IAAI,CA6B5E"}
+{"version":3,"file":"adopt-state.d.ts","sourceRoot":"","sources":["../../src/terraform/adopt-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,uEAAuE;AACvE,eAAO,MAAM,aAAa,4BAA4B,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,MAAM,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;CACrC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,8EAA8E;AAC9E,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED,uFAAuF;AACvF,wBAAgB,2BAA2B,IAAI,MAAM,EAAE,CAEtD;AAUD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,GAAE,aAAa,EAAO,GAAG,aAAa,GAAG,IAAI,CA+C1G"}

package/dist/terraform/bridge.d.ts

@@ -18,7 +18,7 @@
  * into a git-applyable patch. A carve never destroys or recreates; the runbook
  * is reversible via `terraform import`.
  */
-import type { CarveReport } from "./carve.js";
+import { type CarveReport } from "./carve.js";
 export interface CarvedIdentity {
     /** The HCL identity attribute, e.g. `bucket` or `name`. */
     attr?: string;
@@ -37,11 +37,15 @@ export interface FileRewrite {
     original: string;
     rewritten: string;
     changed: boolean;
+    /** Carved addresses whose own `resource` block was removed from this file (#998). */
+    excised: string[];
 }
 export interface DeferredInput {
     survivor: string;
     carved: string;
     attrs: string[];
+    /** Build-parameter name(s) the input becomes in the emitted project (#998). */
+    params: string[];
     note: string;
 }
 export interface BridgePlan {
@@ -49,6 +53,8 @@ export interface BridgePlan {
     dataSources: DataSourceBlock[];
     rewrites: FileRewrite[];
     deferredInputs: DeferredInput[];
+    /** Every carved address whose own block the rewrites remove, across files. */
+    excised: string[];
     runbook: string;
 }
 /**

package/dist/terraform/bridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../src/terraform/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,MAAM,WAAW,cAAc;IAC7B,2DAA2D;IAC3D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,eAAe,EAAE,CAAC;IAC/B,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;CACjB;AAiBD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,WAAW,EACnB,KAAK,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,EAC/C,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,GACtC,UAAU,CAsCZ"}
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../src/terraform/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,SAAS,CAAC;AAG9D,MAAM,WAAW,cAAc;IAC7B,2DAA2D;IAC3D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,qFAAqF;IACrF,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,+EAA+E;IAC/E,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,eAAe,EAAE,CAAC;IAC/B,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,8EAA8E;IAC9E,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAiBD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,WAAW,EACnB,KAAK,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,EAC/C,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,GACtC,UAAU,CAwDZ"}

package/dist/terraform/carve.d.ts

@@ -35,6 +35,13 @@ export interface BoundaryEdge {
     /** The carve-set side of the edge. */
     carved: string;
     attrs: string[];
+    /**
+     * The referring block's own top-level attribute(s) the reference sits in
+     * (#998). For an outbound edge this names the carved resource's attribute
+     * that reads the survivor — what the deferred input's build parameter is
+     * named after on emit.
+     */
+    via: string[];
     bridge: "tf-data-source" | "deferred-input";
     required: "immediately" | "at-apply";
 }
@@ -63,4 +70,9 @@ export declare function resolveCarveSet(graph: TfGraph, target: string): CarveMe
  * sub-resource pointing at its parent) are not boundary work.
  */
 export declare function boundaryReport(graph: TfGraph, target: string): CarveReport | null;
+/**
+ * The build-parameter name a deferred input's carrying attribute becomes on
+ * emit (#998) — shared so bridge notes and emitted `buildParams` agree.
+ */
+export declare function deferredParamName(tfAttr: string): string;
 //# sourceMappingURL=carve.d.ts.map

package/dist/terraform/carve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"carve.d.ts","sourceRoot":"","sources":["../../src/terraform/carve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,uFAAuF;AACvF,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,UAAU,CAAC;AAEvD;;;;;;;;GAQG;AACH,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,iBAAiB,CAAC;IAC7B,qCAAqC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,EAAE,gBAAgB,GAAG,gBAAgB,CAAC;IAC5C,QAAQ,EAAE,aAAa,GAAG,UAAU,CAAC;CACtC;AAED,MAAM,WAAW,WAAW;IAC1B,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,iFAAiF;IACjF,UAAU,EAAE,IAAI,CAAC;IACjB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,EAAE,CAgB7E;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAgDjF"}
+{"version":3,"file":"carve.d.ts","sourceRoot":"","sources":["../../src/terraform/carve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,uFAAuF;AACvF,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,UAAU,CAAC;AAEvD;;;;;;;;GAQG;AACH,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,iBAAiB,CAAC;IAC7B,qCAAqC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB;;;;;OAKG;IACH,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,MAAM,EAAE,gBAAgB,GAAG,gBAAgB,CAAC;IAC5C,QAAQ,EAAE,aAAa,GAAG,UAAU,CAAC;CACtC;AAED,MAAM,WAAW,WAAW;IAC1B,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,iFAAiF;IACjF,UAAU,EAAE,IAAI,CAAC;IACjB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,EAAE,CAgB7E;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAkDjF;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAExD"}

package/dist/terraform/excise.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Excision of a carved resource's own `resource "<type>" "<name>"` block from
+ * the surviving Terraform source (#998 — closes the "auto-excise" limitation).
+ *
+ * After `terraform state rm`, the block left behind would re-CREATE the
+ * resource on the next apply — the one edit the bridge previously left to
+ * hand-work. This removes the carve set's own blocks as part of the survivor
+ * rewrite, so the one bridge `.patch` (#1589) carries the whole handoff edit.
+ *
+ * Pure text transform. The scanner tracks brace depth outside of strings,
+ * comments, template interpolations, and heredocs — enough for real `.tf`
+ * files without pulling in the wasm parser for what is a subtractive edit.
+ */
+export interface ExciseTarget {
+    /** Terraform address, e.g. `aws_s3_bucket.assets`. */
+    address: string;
+    type: string;
+    name: string;
+}
+export interface ExciseResult {
+    content: string;
+    /** Addresses whose block was found and removed, in file order. */
+    excised: string[];
+}
+/**
+ * Remove the targets' own `resource` blocks from one `.tf` file's text. A
+ * comment line directly above a removed block stays (it may describe more
+ * than the block); the blank line the removal leaves behind is collapsed.
+ */
+export declare function exciseResourceBlocks(content: string, targets: ExciseTarget[]): ExciseResult;
+//# sourceMappingURL=excise.d.ts.map

package/dist/terraform/excise.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"excise.d.ts","sourceRoot":"","sources":["../../src/terraform/excise.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,YAAY;IAC3B,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAID;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,YAAY,CA+B3F"}

package/dist/terraform/graduate.d.ts

@@ -40,4 +40,16 @@ export interface GraduationOptions {
     channel?: ChannelKeys;
 }
 export declare function graduationPlan(report: CarveReport, opts?: GraduationOptions): GraduationPlan;
+/**
+ * Stamp the ownership tags into an emitted chant source file (`carve apply
+ * --write-source`). The emitted source is machine-generated (`adoptFromState`),
+ * so its shape is known: one prop per line, `Tags` as a single-line JSON array.
+ * Merges into an existing `Tags` prop (replacing stale chant keys) or inserts
+ * one into the constructor's props object. Returns null when the file has no
+ * recognizable constructor to stamp.
+ */
+export declare function stampOwnershipIntoSource(content: string, tags: Record<string, string>): {
+    content: string;
+    changed: boolean;
+} | null;
 //# sourceMappingURL=graduate.d.ts.map

package/dist/terraform/graduate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"graduate.d.ts","sourceRoot":"","sources":["../../src/terraform/graduate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAoB,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AACxF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,EAAE,WAIxC,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,eAAe,CAAC;IACxB,4EAA4E;IAC5E,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,4CAA4C;IAC5C,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,GAAE,iBAAsB,GAAG,cAAc,CA2BhG"}
+{"version":3,"file":"graduate.d.ts","sourceRoot":"","sources":["../../src/terraform/graduate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAoB,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AACxF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,EAAE,WAIxC,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,eAAe,CAAC;IACxB,4EAA4E;IAC5E,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,4CAA4C;IAC5C,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,GAAE,iBAAsB,GAAG,cAAc,CA2BhG;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC3B;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAoC9C"}

package/dist/terraform/graph.d.ts

@@ -1,12 +1,41 @@
 /**
  * Pure Terraform dependency-graph builder for the carve-out advisor (#214 T1).
  *
- * Input is the JSON tree `@cdktf/hcl2json` produces (`Hcl2JsonTree`). No wasm,
- * no filesystem — so the graph and its edge classification are unit-testable
- * on hand-written fixtures. `parse.ts` is the thin glue that loads the wasm
- * parser and feeds this.
+ * Input is the JSON tree `@cdktf/hcl2json` produces (`Hcl2JsonTree`) plus the
+ * traversal accessors its expression AST found per interpolated string
+ * (`ExpressionRefs`, resolved in `parse.ts` — #998). Tokenizing `${...}`
+ * expression bodies is the AST's job — a quoted address inside an expression
+ * (`var.m["aws_s3_bucket.assets.arn"]`) or an escaped `$${...}` literal is not
+ * a reference, which the regex scan this replaced could not tell. This module
+ * only classifies the accessors the AST produced: no wasm, no filesystem, so
+ * graph building stays unit-testable on hand-written fixtures.
  */
 import type { Hcl2JsonTree, TfEdge, TfGraph } from "./types.js";
+/**
+ * Traversal accessors per interpolated string, as the hcl2json expression AST
+ * reports them (`getReferencesInExpression`): `"${aws_s3_bucket.assets.arn}"`
+ * maps to `["aws_s3_bucket.assets.arn"]`. Keys are the raw hcl2json string
+ * values; a missing key means the expression yielded no references.
+ */
+export type ExpressionRefs = ReadonlyMap<string, readonly string[]>;
+interface RawRef {
+    address: string;
+    attr?: string;
+    /** The referring block's top-level attribute the reference sits in (#998). */
+    via?: string;
+}
+/**
+ * Classify one AST traversal accessor into a resource/module/data reference.
+ * `var.*`/`local.*`/`each.*`-headed accessors are not references; quoted map
+ * keys and numeric indexes never become the attribute.
+ */
+export declare function refFromAccessor(accessor: string): RawRef | null;
+/**
+ * Every string value carrying an interpolation across the tree's resource and
+ * module blocks — exactly the expressions `parse.ts` must resolve through the
+ * AST before `buildGraph` can classify them.
+ */
+export declare function collectExpressions(tree: Hcl2JsonTree): string[];
 /**
  * Build the dependency graph from a merged hcl2json tree.
  *
@@ -16,9 +45,10 @@ import type { Hcl2JsonTree, TfEdge, TfGraph } from "./types.js";
  * resolves to a known resource/module node — references to `var`/`local`/data
  * are dropped.
  */
-export declare function buildGraph(tree: Hcl2JsonTree): TfGraph;
+export declare function buildGraph(tree: Hcl2JsonTree, exprRefs: ExpressionRefs): TfGraph;
 /** Edges where other nodes depend on `address` (each → a surviving-TF data-source patch). */
 export declare function inboundEdges(graph: TfGraph, address: string): TfEdge[];
 /** Edges where `address` depends on other nodes (each → a deferred deploy-time input). */
 export declare function outboundEdges(graph: TfGraph, address: string): TfEdge[];
+export {};
 //# sourceMappingURL=graph.d.ts.map

package/dist/terraform/graph.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"graph.d.ts","sourceRoot":"","sources":["../../src/terraform/graph.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAU,MAAM,SAAS,CAAC;AA4ErE;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAsEtD;AAED,6FAA6F;AAC7F,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAEtE;AAED,0FAA0F;AAC1F,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAEvE"}
+{"version":3,"file":"graph.d.ts","sourceRoot":"","sources":["../../src/terraform/graph.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAU,MAAM,SAAS,CAAC;AAErE;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG,WAAW,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;AAKpE,UAAU,MAAM;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AA4BD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAe/D;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,EAAE,CAc/D;AAkDD;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAwEhF;AAED,6FAA6F;AAC7F,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAEtE;AAED,0FAA0F;AAC1F,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAEvE"}

package/dist/terraform/manifest.d.ts

@@ -0,0 +1,89 @@
+/**
+ * The carve state manifest (#998) — what makes emit → bridge → apply compose.
+ *
+ * `carve emit` persists the boundary report and adoption selector next to the
+ * emitted source as `<target>.carve.json`. The later steps read it back from
+ * their output dir, so `carve bridge` and `carve apply` no longer need the
+ * target re-specified by hand, and each step records what it did for the next.
+ * Plain JSON on disk — reviewable, diffable, nothing proprietary.
+ */
+import type { CarveReport } from "./carve.js";
+import type { OwnershipMarker } from "../ownership.js";
+export declare const CARVE_MANIFEST_SUFFIX = ".carve.json";
+export interface CarveManifest {
+    version: 1;
+    /** Terraform address of the carved resource, e.g. `aws_s3_bucket.assets`. */
+    target: string;
+    /** Terraform resource type, when known. */
+    tfType?: string;
+    /** Absolute path of the Terraform estate the carve came from. */
+    from: string;
+    /** Absolute path of the tfstate used for adoption (offline path). */
+    statePath?: string;
+    /** Boundary classification persisted when the manifest was written. */
+    boundary: CarveReport;
+    /** Recorded by `carve emit`. */
+    emit?: {
+        source: "tfstate" | "live";
+        /** Emitted chant source file path(s). */
+        files: string[];
+        /**
+         * Deferred outbound inputs declared as build parameters in the emitted
+         * project (#998), keyed by parameter name.
+         */
+        params?: Record<string, {
+            /** The carved resource's own Terraform attribute the value enters through. */
+            tfAttr: string;
+            /** The survivor the Terraform source read, e.g. `aws_vpc.main`. */
+            survivor: string;
+            /** Survivor attribute(s) read. */
+            attrs: string[];
+            /** State-resolved default, when scalar. */
+            default?: string | number | boolean;
+        }>;
+        at: string;
+    };
+    /** Recorded by `carve bridge`. */
+    bridge?: {
+        written: string[];
+        appliedInPlace: boolean;
+        /** The git-applyable `.patch` carrying the whole survivor edit. */
+        patch?: string;
+        /** Carved addresses whose own `.tf` block the rewrites remove (#998). */
+        excised?: string[];
+        at: string;
+    };
+    /** Recorded by `carve apply`. */
+    apply?: {
+        marker: OwnershipMarker;
+        ownershipTags: Record<string, string>;
+        /** Emitted files the marker was stamped into (`--write-source`). */
+        stampedFiles?: string[];
+        at: string;
+    };
+}
+/** Filesystem-safe slug for a Terraform address (shared file-naming convention). */
+export declare function carveSlug(target: string): string;
+/** Where the manifest for `target` lives inside an output dir. */
+export declare function carveManifestPath(outDir: string, target: string): string;
+/** Write (or overwrite) a manifest into the output dir. Returns the path. */
+export declare function writeCarveManifest(outDir: string, manifest: CarveManifest): string;
+/** Read a manifest, or null when absent/unreadable/not a v1 manifest. */
+export declare function readCarveManifest(path: string): CarveManifest | null;
+/** All carve manifest paths in an output dir. */
+export declare function listCarveManifests(outDir: string): string[];
+export interface ResolvedManifest {
+    manifest?: CarveManifest;
+    path?: string;
+    error?: string;
+}
+/**
+ * Resolve the manifest a later carve step composes with. With a selected
+ * target, that target's manifest (absent is fine — the step just runs
+ * standalone). Without one, the single manifest in the output dir; none or
+ * several is an error naming what is (or is not) there.
+ */
+export declare function resolveCarveManifest(outDir: string, select?: string): ResolvedManifest;
+/** Read-modify-write a section of an existing manifest. No-op when absent. */
+export declare function updateCarveManifest(outDir: string, target: string, patch: Partial<Pick<CarveManifest, "boundary" | "emit" | "bridge" | "apply">>): string | undefined;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/terraform/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/terraform/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEpD,eAAO,MAAM,qBAAqB,gBAAgB,CAAC;AAEnD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,CAAC,CAAC;IACX,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,QAAQ,EAAE,WAAW,CAAC;IACtB,gCAAgC;IAChC,IAAI,CAAC,EAAE;QACL,MAAM,EAAE,SAAS,GAAG,MAAM,CAAC;QAC3B,yCAAyC;QACzC,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB;;;WAGG;QACH,MAAM,CAAC,EAAE,MAAM,CACb,MAAM,EACN;YACE,8EAA8E;YAC9E,MAAM,EAAE,MAAM,CAAC;YACf,mEAAmE;YACnE,QAAQ,EAAE,MAAM,CAAC;YACjB,kCAAkC;YAClC,KAAK,EAAE,MAAM,EAAE,CAAC;YAChB,2CAA2C;YAC3C,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;SACrC,CACF,CAAC;QACF,EAAE,EAAE,MAAM,CAAC;KACZ,CAAC;IACF,kCAAkC;IAClC,MAAM,CAAC,EAAE;QACP,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,cAAc,EAAE,OAAO,CAAC;QACxB,mEAAmE;QACnE,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,yEAAyE;QACzE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QACnB,EAAE,EAAE,MAAM,CAAC;KACZ,CAAC;IACF,iCAAiC;IACjC,KAAK,CAAC,EAAE;QACN,MAAM,EAAE,eAAe,CAAC;QACxB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACtC,oEAAoE;QACpE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,EAAE,EAAE,MAAM,CAAC;KACZ,CAAC;CACH;AAED,oFAAoF;AACpF,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,kEAAkE;AAClE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAExE;AAED,6EAA6E;AAC7E,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,GAAG,MAAM,CAKlF;AAED,yEAAyE;AACzE,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAUpE;AAED,iDAAiD;AACjD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAM3D;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAsBtF;AAED,8EAA8E;AAC9E,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC,CAAC,GAC5E,MAAM,GAAG,SAAS,CAOpB"}

package/dist/terraform/parse.d.ts

@@ -8,8 +8,14 @@
  * advisor fails with a one-line install hint.
  */
 import type { Hcl2JsonTree, TfGraph } from "./types.js";
-/** Minimal shape of the parser export we depend on. */
-type Hcl2JsonParse = (filename: string, hcl: string) => Promise<Hcl2JsonTree>;
+/** Minimal shape of the parser exports we depend on. */
+export interface Hcl2Json {
+    parse: (filename: string, hcl: string) => Promise<Hcl2JsonTree>;
+    /** Expression-AST reference extraction (#998) — one traversal accessor per reference. */
+    getReferencesInExpression: (filename: string, expression: string) => Promise<Array<{
+        value: string;
+    }>>;
+}
 export declare class Hcl2JsonNotInstalled extends Error {
     constructor(cause: unknown);
 }
@@ -17,7 +23,7 @@ export declare class Hcl2JsonNotInstalled extends Error {
  * Lazy-load the optional HCL parser. Throws `Hcl2JsonNotInstalled` with an
  * install hint when the package is missing, rather than a raw MODULE_NOT_FOUND.
  */
-export declare function loadHcl2json(): Promise<Hcl2JsonParse>;
+export declare function loadHcl2json(): Promise<Hcl2Json>;
 export interface ParseTerraformOptions {
     /** Opt-in `.tfstate` path (#214 T2): overlays state-expanded instance counts. */
     statePath?: string;
@@ -29,5 +35,4 @@ export interface ParseTerraformOptions {
  * instance counts become accurate (see `state.ts`).
  */
 export declare function parseTerraformDir(dir: string, opts?: ParseTerraformOptions): Promise<TfGraph>;
-export {};
 //# sourceMappingURL=parse.d.ts.map

package/dist/terraform/parse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parse.d.ts","sourceRoot":"","sources":["../../src/terraform/parse.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAErD,uDAAuD;AACvD,KAAK,aAAa,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;AAE9E,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,KAAK,EAAE,OAAO;CAQ3B;AAED;;;GAGG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,aAAa,CAAC,CAO3D;AAuBD,MAAM,WAAW,qBAAqB;IACpC,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,qBAA0B,GAAG,OAAO,CAAC,OAAO,CAAC,CAWvG"}
+{"version":3,"file":"parse.d.ts","sourceRoot":"","sources":["../../src/terraform/parse.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAErD,wDAAwD;AACxD,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAChE,yFAAyF;IACzF,yBAAyB,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;CACxG;AAED,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,KAAK,EAAE,OAAO;CAQ3B;AAED;;;GAGG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,QAAQ,CAAC,CAMtD;AA+CD,MAAM,WAAW,qBAAqB;IACpC,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,qBAA0B,GAAG,OAAO,CAAC,OAAO,CAAC,CAWvG"}

package/dist/terraform/types.d.ts

@@ -46,6 +46,13 @@ export interface TfEdge {
     to: string;
     /** The attribute path(s) referenced, e.g. `["id", "arn"]`. */
     attrs: string[];
+    /**
+     * The referring block's own top-level attribute(s) the reference sits in,
+     * e.g. `["vpc_id"]` for a subnet reading its VPC (#998). This is what a
+     * deferred outbound input is named after when emit turns it into a build
+     * parameter. Empty when the reference came from a non-object block shape.
+     */
+    via: string[];
 }
 export interface TfGraph {
     nodes: TfNode[];

package/dist/terraform/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/terraform/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,+EAA+E;AAC/E,MAAM,WAAW,MAAM;IACrB,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,UAAU,GAAG,QAAQ,CAAC;IAC5B,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,uFAAuF;IACvF,UAAU,EAAE,OAAO,CAAC;IACpB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,8DAA8D;IAC9D,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/terraform/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,+EAA+E;AAC/E,MAAM,WAAW,MAAM;IACrB,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,UAAU,GAAG,QAAQ,CAAC;IAC5B,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,uFAAuF;IACvF,UAAU,EAAE,OAAO,CAAC;IACpB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,8DAA8D;IAC9D,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB;;;;;OAKG;IACH,GAAG,EAAE,MAAM,EAAE,CAAC;CACf;AAED,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB"}

package/dist/terraform/unified-diff.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Minimal unified-diff generator for the carve bridge patch (#998). Emits
+ * git-applyable hunks (`git apply`, or plain `patch -p1`) so the whole survivor
+ * edit — data sources plus rewired references — lands in one reviewable file.
+ * LCS-based; bridge inputs are hand-sized `.tf` files, so O(n·m) is fine.
+ */
+/** One file's diff, `a/<path>` → `b/<path>`, with git headers. Empty when unchanged. */
+export declare function unifiedDiff(path: string, oldText: string, newText: string, context?: number): string;
+/** A new-file diff (`/dev/null` → `b/<path>`), git-applyable. */
+export declare function newFileDiff(path: string, text: string): string;
+//# sourceMappingURL=unified-diff.d.ts.map

package/dist/terraform/unified-diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unified-diff.d.ts","sourceRoot":"","sources":["../../src/terraform/unified-diff.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,wFAAwF;AACxF,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,SAAI,GAAG,MAAM,CA0B/F;AAED,iEAAiE;AACjE,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAa9D"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant",
-  "version": "0.41.20",
+  "version": "0.42.1",
   "description": "Declarative infrastructure-as-code toolkit — TypeScript on Node.js",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",