@intentius/chant 0.52.1 → 0.53.0

package/dist/terraform/carve-provider.d.ts

@@ -0,0 +1,142 @@
+/**
+ * The carve provider seam (#2016).
+ *
+ * `carve advise|emit|bridge` used to reach into the AWS carve table directly:
+ * the tier map derived from it, the emit gate was `awsCarveType(t) !== undefined`,
+ * the adopter called `applyAwsMapper`, and the emitted project's lexicon was a
+ * constant. A second provider — Kubernetes emit (#999), GCP (#2017) — had
+ * nowhere to land except a parallel path beside the AWS one.
+ *
+ * A provider owns one or more Terraform type prefixes and answers everything
+ * the carve commands ask about the types under them: how each ranks against a
+ * native spec, which HCL attribute carries the physical name, which
+ * sub-resources fold into a parent, which types emit can produce source for,
+ * and how to adopt one from `.tfstate`.
+ *
+ * ── Why the registry lives in core, not behind a `LexiconPlugin` capability ──
+ *
+ * `carve advise` runs against a Terraform directory that is not a chant project:
+ * there is no `chant.config.ts` naming lexicons, so there is nothing to load
+ * plugins from, and `carve emit --state` is deliberately offline (see the
+ * handler). Behind a plugin capability both would have to load plugins to learn
+ * that a type ranks tier 1. Providers are also Terraform-provider knowledge
+ * (`terraform-provider-aws` attribute names), which belongs beside the HCL
+ * parser rather than inside a lexicon.
+ *
+ * `registerCarveProvider` is exported, so a plugin that wants to contribute a
+ * provider at runtime still can — the seam does not foreclose it, it just does
+ * not require plugin loading for the paths that run without one.
+ */
+import type { StateResource } from "./state.js";
+export interface TierInfo {
+    tier: 1 | 2 | 3;
+    /** The native spec type a carve would target, for the report. */
+    mapsTo: string;
+}
+/**
+ * One deferred outbound input turned into a build parameter (#998). Derived
+ * from the boundary report's outbound edges + the state's resolved attributes
+ * in `carve-emit.ts`; consumed by a provider's `adopt` (source substitution)
+ * and by the scaffold (`chant.config.ts` `buildParams` declaration).
+ */
+export interface DeferredParam {
+    /** Build-parameter name, source-referenceable (`params.<name>`). */
+    name: string;
+    /** The carved resource's own Terraform attribute the value enters through. */
+    tfAttr: string;
+    /** The survivor the Terraform source read, e.g. `aws_vpc.main`. */
+    survivor: string;
+    /** Survivor attribute(s) read, e.g. `["id"]`. */
+    attrs: string[];
+    /** The state-resolved value — the parameter's declared default. */
+    default?: string | number | boolean;
+}
+/** What one folded sub-resource contributed to the parent's emitted props (#1637). */
+export interface FoldedContribution {
+    /** The sub-resource's Terraform address, e.g. `aws_s3_bucket_versioning.assets`. */
+    address: string;
+    /** Native properties it added to the parent, e.g. `["VersioningConfiguration"]`. */
+    props: string[];
+}
+export interface AdoptedSource {
+    fileName: string;
+    content: string;
+    /** True when at least one attribute was mapped to a native prop. */
+    mapped: boolean;
+    nativeType: string;
+    /** Deferred params actually substituted into the emitted props (#998). */
+    parameterized: string[];
+    /** Folded sub-resources and the props each one joined into the parent (#1637). */
+    folded: FoldedContribution[];
+}
+export interface CarveProvider {
+    /** Registry id, unique. Registering a second provider under it replaces the first. */
+    readonly name: string;
+    /**
+     * Terraform type prefixes this provider owns, e.g. `["aws_"]`. Resolution
+     * takes the longest match, so a narrower provider can claim a subset of a
+     * wider one's prefix.
+     */
+    readonly tfTypePrefixes: readonly string[];
+    /**
+     * The chant lexicon emitted source targets — the scaffolded project's
+     * dependency and `--lexicon` flag, and the lexicon the live import runs
+     * against.
+     */
+    readonly lexicon: string;
+    /** Terraform type → native tier, contributed to the advisor's tier map. */
+    readonly tiers: Readonly<Record<string, TierInfo>>;
+    /**
+     * Terraform type → the HCL attribute carrying the physical name. A dotted
+     * entry is a path into nested blocks (`manifest.metadata.name`); the bridge
+     * refuses those, since a data-source body is flat `attr = value`.
+     */
+    readonly identityAttrs?: Readonly<Record<string, string>>;
+    /**
+     * Sub-resource Terraform type → parent type, for types Terraform splits out
+     * of the resource the native spec keeps them in.
+     */
+    readonly foldsInto?: Readonly<Record<string, string>>;
+    /**
+     * Terraform types `carve emit` can produce chant source for — narrower than
+     * `tiers`, which advise also ranks types no emit path can adopt. Absent or
+     * empty means advise-only. Declaring types here obliges the provider to
+     * implement {@link adopt}: both emit paths gate on the same list (#2015), so
+     * a type the live path accepts must be adoptable from state too.
+     */
+    readonly emitTypes?: readonly string[];
+    /** Adopt a resource from Terraform state into chant source. */
+    adopt?(resource: StateResource, params: DeferredParam[], folded: StateResource[]): AdoptedSource | null;
+    /**
+     * The native selector type the live (cloud→code) import filters on, e.g.
+     * `AWS::S3::Bucket`. Undefined when this type has no live adoption path —
+     * `carve emit --env` refuses it rather than importing the wrong thing.
+     */
+    liveSelectorType?(tfType: string): string | undefined;
+}
+/**
+ * Register a carve provider. Returns a function that removes it again, so a
+ * test (or a plugin unloading) leaves the registry as it found it.
+ */
+export declare function registerCarveProvider(provider: CarveProvider): () => void;
+/** Every registered provider, in registration order. */
+export declare function carveProviders(): readonly CarveProvider[];
+/** The provider owning this Terraform type, by longest prefix match. */
+export declare function resolveCarveProvider(tfType: string): CarveProvider | undefined;
+/**
+ * The provider that can emit chant source for this Terraform type. Narrower
+ * than {@link resolveCarveProvider}: a provider owns every type under its
+ * prefix for advise, and only the ones on its `emitTypes` list for emit.
+ */
+export declare function resolveEmitProvider(tfType: string): CarveProvider | undefined;
+/** Every Terraform type any registered provider can emit, sorted, for user-facing hints. */
+export declare function carveEmitTypes(): string[];
+/** The lexicons emit can adopt into, sorted — what the CLI loads plugins for. */
+export declare function carveEmitLexicons(): string[];
+/** Terraform resource type → native tier, merged over every provider. Read-only: it is the cached index. */
+export declare function carveTierMap(): Readonly<Record<string, TierInfo>>;
+/** The HCL attribute carrying this type's physical name, if its provider declares one. */
+export declare function carveIdentityAttr(tfType: string): string | undefined;
+/** The parent Terraform type this sub-resource folds into, if any. */
+export declare function carveFoldParent(tfType: string): string | undefined;
+//# sourceMappingURL=carve-provider.d.ts.map

package/dist/terraform/carve-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"carve-provider.d.ts","sourceRoot":"","sources":["../../src/terraform/carve-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,iEAAiE;IACjE,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,MAAM,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;CACrC;AAED,sFAAsF;AACtF,MAAM,WAAW,kBAAkB;IACjC,oFAAoF;IACpF,OAAO,EAAE,MAAM,CAAC;IAChB,oFAAoF;IACpF,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,kFAAkF;IAClF,MAAM,EAAE,kBAAkB,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,sFAAsF;IACtF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnD;;;;OAIG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1D;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,+DAA+D;IAC/D,KAAK,CAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,aAAa,GAAG,IAAI,CAAC;IACxG;;;;OAIG;IACH,gBAAgB,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACvD;AAqBD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,IAAI,CAYzE;AAED,wDAAwD;AACxD,wBAAgB,cAAc,IAAI,SAAS,aAAa,EAAE,CAEzD;AAmCD,wEAAwE;AACxE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAE9E;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAE7E;AAED,4FAA4F;AAC5F,wBAAgB,cAAc,IAAI,MAAM,EAAE,CAEzC;AAED,iFAAiF;AACjF,wBAAgB,iBAAiB,IAAI,MAAM,EAAE,CAE5C;AAED,4GAA4G;AAC5G,wBAAgB,YAAY,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAEjE;AAED,0FAA0F;AAC1F,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEpE;AAED,sEAAsE;AACtE,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAElE"}

package/dist/terraform/carve.d.ts

@@ -10,6 +10,7 @@
  * (via live import) and generating the TF patches live in the command/bridge
  * layers; this module just classifies the boundary.
  */
+import { type ScoreOptions } from "./score.js";
 import type { TfGraph } from "./types.js";
 /** One resource in the carve set (the selected node plus its folded sub-resources). */
 export interface CarveMember {
@@ -47,8 +48,17 @@ export interface BoundaryEdge {
      * named after on emit. For an output edge it is `["value"]`.
      */
     via: string[];
-    bridge: "tf-data-source" | "tf-output-rewrite" | "deferred-input";
+    /**
+     * The patch that bridges the cut, in the surviving source's own vocabulary.
+     * Terraform: a `data` source, an `output` expression rewrite, or a deferred
+     * deploy-time input. CDK (#1056): `cdk-import` — the surviving app reimports
+     * the carved resource by ARN/name — or a `Outputs` rewrite. Open-ended: a
+     * reader must tolerate a value it does not know.
+     */
+    bridge: "tf-data-source" | "tf-output-rewrite" | "cdk-import" | "cfn-output-rewrite" | "deferred-input";
     required: "immediately" | "at-apply";
+    /** The two ends live in different CloudFormation templates (#1056). */
+    crossStack?: boolean;
 }
 export interface CarveReport {
     /** The selected resource address. */
@@ -64,20 +74,43 @@ export interface CarveReport {
 }
 /**
  * The carve set for a selected address: the node itself plus any sub-resources
- * that fold into it (same name, a `FOLDS_INTO` child type whose parent is the
+ * that fold into it (same name, a `foldParentOf` child type whose parent is the
  * selection). Those are carried along and inlined, not left behind.
  */
 export declare function resolveCarveSet(graph: TfGraph, target: string): CarveMember[];
+/**
+ * Which source the graph came from, and so which vocabulary its bridge patches
+ * are named in. Terraform is the default; `cdk` is the read-only cloud-assembly
+ * advisor (#1056), where the surviving app reimports rather than adding a
+ * `data` source.
+ */
+export type CarveDialect = "terraform" | "cdk";
+export interface BoundaryOptions {
+    dialect?: CarveDialect;
+    /** Scoring hooks, so `peelability` is the same number the ranking reported. */
+    score?: ScoreOptions;
+}
 /**
  * Classify the boundary of carving `target`: the inbound edges that need an
  * immediate data-source patch, and the outbound edges that become deferred
  * deploy-time inputs. Edges internal to the carve set (e.g. a folded
  * sub-resource pointing at its parent) are not boundary work.
  */
-export declare function boundaryReport(graph: TfGraph, target: string): CarveReport | null;
+export declare function boundaryReport(graph: TfGraph, target: string, opts?: BoundaryOptions): CarveReport | null;
 /**
  * The build-parameter name a deferred input's carrying attribute becomes on
  * emit (#998) — shared so bridge notes and emitted `buildParams` agree.
  */
 export declare function deferredParamName(tfAttr: string): string;
+/**
+ * Collapse duplicate edges (same survivor/carved pair), merging attrs.
+ *
+ * The map key below joins the two addresses with U+001F (unit separator).
+ * A Terraform address is built from HCL identifiers plus `.`, `[`, `]`, `"`
+ * and `-`; it cannot contain a C0 control character, so U+001F can never
+ * collide with an address component. Keep it that way — this key is never
+ * serialized, so a plain, non-printing separator is fine, but it must stay
+ * a character no address can produce.
+ */
+export declare function dedupeEdges(edges: BoundaryEdge[]): BoundaryEdge[];
 //# sourceMappingURL=carve.d.ts.map

package/dist/terraform/carve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"carve.d.ts","sourceRoot":"","sources":["../../src/terraform/carve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,uFAAuF;AACvF,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,UAAU,CAAC;AAEvD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,iBAAiB,CAAC;IAC7B,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB;;;;;OAKG;IACH,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,MAAM,EAAE,gBAAgB,GAAG,mBAAmB,GAAG,gBAAgB,CAAC;IAClE,QAAQ,EAAE,aAAa,GAAG,UAAU,CAAC;CACtC;AAED,MAAM,WAAW,WAAW;IAC1B,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,iFAAiF;IACjF,UAAU,EAAE,IAAI,CAAC;IACjB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,EAAE,CAgB7E;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAkDjF;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAExD"}
+{"version":3,"file":"carve.d.ts","sourceRoot":"","sources":["../../src/terraform/carve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,uFAAuF;AACvF,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,UAAU,CAAC;AAEvD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,iBAAiB,CAAC;IAC7B,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB;;;;;OAKG;IACH,GAAG,EAAE,MAAM,EAAE,CAAC;IACd;;;;;;OAMG;IACH,MAAM,EAAE,gBAAgB,GAAG,mBAAmB,GAAG,YAAY,GAAG,oBAAoB,GAAG,gBAAgB,CAAC;IACxG,QAAQ,EAAE,aAAa,GAAG,UAAU,CAAC;IACrC,uEAAuE;IACvE,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,iFAAiF;IACjF,UAAU,EAAE,IAAI,CAAC;IACjB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,EAAE,CAgB7E;AAED;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,KAAK,CAAC;AAE/C,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAQD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,eAAoB,GAAG,WAAW,GAAG,IAAI,CA0D7G;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAExD;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,CAajE"}

package/dist/terraform/emit-source.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Source rendering shared by constructor-shaped carve providers (#2016).
+ *
+ * A provider that adopts into a typed chant constructor call — aws today, gcp
+ * next (#2017) — renders the same literal: an import, an exported `new Ctor({
+ * ...props })`, and a reference comment carrying whatever the mapping could not
+ * place. Only the lexicon import path and the property mapping differ, so the
+ * rendering lives here rather than being copied per provider.
+ *
+ * A provider whose native shape is not a constructor call (a Kubernetes
+ * manifest, #999) renders its own source and does not use this.
+ */
+/** The core subpath the emitted source reads build parameters from. */
+export declare const PARAMS_IMPORT = "@intentius/chant/params";
+/** Marker for a prop whose value is a `params.<name>` reference, not a literal. */
+export declare class ParamRef {
+    readonly name: string;
+    readonly type: "string" | "number" | "boolean";
+    constructor(name: string, type: "string" | "number" | "boolean");
+}
+/** Render a JS object literal with stable key order and given indent. */
+export declare function renderObject(obj: Record<string, unknown>, indent: number): string;
+/** A prop value: a `params.<name>` reference (cast keeps the project tsc-clean) or a literal. */
+export declare function renderValue(value: unknown): string;
+//# sourceMappingURL=emit-source.d.ts.map

package/dist/terraform/emit-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emit-source.d.ts","sourceRoot":"","sources":["../../src/terraform/emit-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,uEAAuE;AACvE,eAAO,MAAM,aAAa,4BAA4B,CAAC;AAEvD,mFAAmF;AACnF,qBAAa,QAAQ;IAEjB,QAAQ,CAAC,IAAI,EAAE,MAAM;IACrB,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS;gBADrC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS;CAEjD;AAED,yEAAyE;AACzE,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAQjF;AAED,iGAAiG;AACjG,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAElD"}

package/dist/terraform/graduate.d.ts

@@ -25,8 +25,10 @@ export declare const DEFAULT_TAG_OWNERSHIP_KEYS: ChannelKeys;
 export interface GraduationPlan {
     target: string;
     marker: OwnershipMarker;
-    /** The ownership tags the emitted resource must carry to be chant-owned. */
+    /** The ownership entries the emitted resource must carry to be chant-owned. */
     ownershipTags: Record<string, string>;
+    /** What that channel is called on this target: `tags`, or `labels` for k8s. */
+    markerKind: string;
     /** The finalized, ordered apply runbook. */
     steps: string[];
     warnings: string[];
@@ -38,6 +40,14 @@ export interface GraduationOptions {
     env?: string;
     /** Override the tag channel (e.g. for a non-AWS lexicon). */
     channel?: ChannelKeys;
+    /**
+     * The lexicon the emitted source targets, from the carve provider that
+     * adopted the type. It decides how the build and the apply are spelled: a
+     * CloudFormation template and `aws cloudformation deploy` for aws, a manifest
+     * and `kubectl apply` for k8s (#999). Unknown falls back to the aws wording,
+     * which is what every carve was before there was a second provider.
+     */
+    lexicon?: string;
 }
 export declare function graduationPlan(report: CarveReport, opts?: GraduationOptions): GraduationPlan;
 /**

package/dist/terraform/graduate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"graduate.d.ts","sourceRoot":"","sources":["../../src/terraform/graduate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAoB,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AACxF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,EAAE,WAIxC,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,eAAe,CAAC;IACxB,4EAA4E;IAC5E,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,4CAA4C;IAC5C,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,GAAE,iBAAsB,GAAG,cAAc,CA2BhG;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC3B;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAoC9C"}
+{"version":3,"file":"graduate.d.ts","sourceRoot":"","sources":["../../src/terraform/graduate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAA0C,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AAC9G,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,EAAE,WAIxC,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,eAAe,CAAC;IACxB,+EAA+E;IAC/E,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,+EAA+E;IAC/E,UAAU,EAAE,MAAM,CAAC;IACnB,4CAA4C;IAC5C,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA6BD,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,GAAE,iBAAsB,GAAG,cAAc,CA4BhG;AAWD;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC3B;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAqC9C"}

package/dist/terraform/providers/aws.d.ts

@@ -0,0 +1,19 @@
+/**
+ * The AWS carve provider (#2016) — the seam's implementation over the AWS
+ * carve-out table (`../aws-resources.ts`), which stays the single source of
+ * truth for which AWS Terraform types chant can carve and how.
+ *
+ * chant AWS constructors take CloudFormation PascalCase properties (e.g.
+ * `new Bucket({ BucketName })`), while Terraform state uses the provider's
+ * snake_case attributes (`bucket`, `tags`). Attributes without a mapping are
+ * preserved in a reference comment, never dropped.
+ *
+ * Deferred outbound inputs (#998): an attribute whose value the Terraform
+ * source read from a survivor (`vpc_id = aws_vpc.main.id`) is not a fact of
+ * the carved resource — it is a deploy-time input. Those props are emitted as
+ * `params.<name>` references instead of frozen literals, with the state's
+ * resolved value as the declared default (see `carve-emit.ts`'s scaffold).
+ */
+import type { CarveProvider } from "../carve-provider.js";
+export declare const awsCarveProvider: CarveProvider;
+//# sourceMappingURL=aws.d.ts.map

package/dist/terraform/providers/aws.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws.d.ts","sourceRoot":"","sources":["../../../src/terraform/providers/aws.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAWH,OAAO,KAAK,EAAiB,aAAa,EAA+C,MAAM,mBAAmB,CAAC;AAgInH,eAAO,MAAM,gBAAgB,EAAE,aAc9B,CAAC"}

package/dist/terraform/providers/gcp.d.ts

@@ -0,0 +1,41 @@
+/**
+ * The GCP carve provider (#2017) — advise-only.
+ *
+ * `mapsTo` names a Config Connector type as the gcp lexicon spells it
+ * (`GCP::Storage::Bucket`), not a Terraform type and not a raw CNRM kind. Every
+ * value here is checked against `lexicons/gcp/dist/meta.json` by
+ * `gcp.test.ts`, so an entry pointing at a type the lexicon does not define
+ * fails the suite rather than shipping a report that promises a resource chant
+ * cannot build.
+ *
+ * The google Terraform provider and Config Connector wrap the same GCP API, so
+ * resource granularity matches almost everywhere. That is why `foldsInto` is
+ * empty: unlike S3, where Terraform splits versioning, ACLs and encryption out
+ * of the bucket CloudFormation keeps together, GCP has no family where several
+ * `google_*` resources collapse into one CNRM resource.
+ *
+ * Tiers follow the reshaping the constructor demands, not the API's size:
+ *
+ *   1 — flat rename, `google_pubsub_topic` to `GCP::Pubsub::Topic`.
+ *   2 — a cross-resource reference becomes a `*Ref` object, or a Terraform
+ *       block list becomes a CNRM object. Most of the table.
+ *   3 — the native shape is a re-modelling. `google_container_cluster` inlines
+ *       node pools Terraform also declares separately, `google_sql_database_
+ *       instance` carries everything under `settings`, and the IAM membership
+ *       resources map onto one generic `GCP::Iam::PolicyMember` per binding.
+ *
+ * No `emitTypes` and no `adopt`, so `carve emit` refuses these types on both
+ * paths with the same message (#2015). Emit is a larger piece of work than the
+ * per-attribute rename the tier map implies: CNRM addresses a sibling through
+ * a `*Ref` object rather than the id or self-link Terraform state holds, and
+ * the resource's own name lives in `metadata.name` with `resourceID` as the
+ * override, so a faithful adopter has to resolve both per type. Declaring emit
+ * before that exists would put back the advise/emit cliff #2015 closed.
+ */
+import type { CarveProvider, TierInfo } from "../carve-provider.js";
+/** Terraform type → tier, the shape the registry merges into the tier map. */
+export declare const GCP_TIERS: Readonly<Record<string, TierInfo>>;
+/** Terraform type → the HCL attribute carrying its physical name. */
+export declare const GCP_IDENTITY_ATTRS: Readonly<Record<string, string>>;
+export declare const gcpCarveProvider: CarveProvider;
+//# sourceMappingURL=gcp.d.ts.map

package/dist/terraform/providers/gcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gcp.d.ts","sourceRoot":"","sources":["../../../src/terraform/providers/gcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAiRjE,8EAA8E;AAC9E,eAAO,MAAM,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAExD,CAAC;AAEF,qEAAqE;AACrE,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAI/D,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,aAQ9B,CAAC"}

package/dist/terraform/providers/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * The carve providers core ships with (#2016). Adding a provider is a file
+ * here plus a line in this list — no edit to `adopt-state.ts` or
+ * `carve-emit.ts`, which resolve everything through the registry.
+ *
+ * This module holds no runtime dependency on `../carve-provider`, so the
+ * registry can import the list without an import cycle.
+ */
+import { awsCarveProvider } from "./aws.js";
+import { gcpCarveProvider } from "./gcp.js";
+import { kubernetesCarveProvider } from "./kubernetes.js";
+import type { CarveProvider } from "../carve-provider.js";
+export declare const BUILTIN_CARVE_PROVIDERS: readonly CarveProvider[];
+export { awsCarveProvider, gcpCarveProvider, kubernetesCarveProvider };
+//# sourceMappingURL=index.d.ts.map

package/dist/terraform/providers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/terraform/providers/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,OAAO,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,OAAO,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD,eAAO,MAAM,uBAAuB,EAAE,SAAS,aAAa,EAI3D,CAAC;AAEF,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,CAAC"}

package/dist/terraform/providers/kubernetes.d.ts

@@ -0,0 +1,29 @@
+/**
+ * The Kubernetes carve provider (#2016 seam, #999 emit).
+ *
+ * `kubernetes_manifest` IS the manifest (tier 1) and is the type emit adopts.
+ * The typed provider resources (`kubernetes_deployment`, ...) reshape their HCL
+ * schema back into a manifest, so they rank tier 2; the common `_v1` aliases
+ * share their base type's entry. They are advise-only: recovering a manifest
+ * from the provider's own schema is a per-type reshaping (`container` blocks to
+ * `containers`, `metadata` blocks unwrapped from their single-element state
+ * arrays), not something the generic path below can do honestly, so emit
+ * refuses them on both paths with the same message (#2015).
+ *
+ * ── Two things `kubernetes_manifest` does not share with an AWS type ──
+ *
+ * It has no fixed entity type. The target kind lives INSIDE the resource: the
+ * `manifest` attribute is the body, and its `apiVersion`/`kind` are what say
+ * whether this block is a ConfigMap or a cert-manager Certificate. So `mapsTo`
+ * can only name the family, and `adopt` reads the body to learn the rest —
+ * which is also why one rule here covers every CRD.
+ *
+ * It has no live adoption path. `carve emit --env` filters a live export by a
+ * native type, and there is no type to filter by until the body is read; state
+ * is where the body is. `liveSelectorType` therefore returns undefined and
+ * `--env` refuses with "adopts it from state only", rather than importing
+ * something else.
+ */
+import type { CarveProvider } from "../carve-provider.js";
+export declare const kubernetesCarveProvider: CarveProvider;
+//# sourceMappingURL=kubernetes.d.ts.map

package/dist/terraform/providers/kubernetes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubernetes.d.ts","sourceRoot":"","sources":["../../../src/terraform/providers/kubernetes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAiB,aAAa,EAA2B,MAAM,mBAAmB,CAAC;AAuL/F,eAAO,MAAM,uBAAuB,EAAE,aAarC,CAAC"}

package/dist/terraform/score.d.ts

@@ -18,11 +18,19 @@
  * expression in a block that manages no infrastructure, the same order of work
  * as recording an outbound deferred input. Hence 4, not 12.
  *
- * Sub-resources that inline into a parent (see `FOLDS_INTO`) are folded into the
+ * Sub-resources that inline into a parent (see `foldParentOf`) are folded into the
  * parent's carve set: they are removed from the ranking and their edge to the
  * parent is not counted as inbound — inlining them is free, not boundary work.
+ *
+ * The model itself is not Terraform-specific — the CDK cloud-assembly advisor
+ * (#1056) scores construct units with the same arithmetic. What differs per
+ * source is the type→tier lookup and the extra signals that source can see, so
+ * both are injectable via `ScoreOptions` rather than forked into a second
+ * scorer. Everything else — the six penalty terms, the clamp, the bands — is
+ * shared verbatim.
  */
-import type { TfGraph } from "./types.js";
+import { type TierInfo } from "./tier-map.js";
+import type { TfGraph, TfNode } from "./types.js";
 export type PeelabilityBand = "clean leaf" | "carvable w/ edits" | "leave in Terraform";
 export interface PeelabilityBreakdown {
     /** Inbound edges from resource/module blocks — a data-source patch each. */
@@ -33,7 +41,12 @@ export interface PeelabilityBreakdown {
     tier: 1 | 2 | 3 | null;
     hasDynamic: boolean;
     instances: number;
-    /** Signed penalty contributions, for report transparency. */
+    /**
+     * Signed penalty contributions, for report transparency. The six shared terms
+     * are always present; a source-specific scorer may add its own keys (the CDK
+     * advisor's `asset`, say). A reader that sums the values reproduces the score;
+     * a reader that only knows the six named terms still reads those correctly.
+     */
     penalties: {
         inbound: number;
         outbound: number;
@@ -41,8 +54,26 @@ export interface PeelabilityBreakdown {
         tier: number;
         dynamic: number;
         instances: number;
+        [term: string]: number;
     };
 }
+/**
+ * One unit of source a scored node stands for, when the node is a fold of
+ * several (#1056). A CDK construct emits 1..n CloudFormation resources and
+ * ranks once; this names the resources that carve with it. Absent on the
+ * Terraform path, where a fold is expressed by the child's absence from the
+ * ranking instead.
+ */
+export interface CarveUnitMember {
+    /** Identifier within its template/estate — a CFN logical ID. */
+    id: string;
+    /** Resource type, e.g. `AWS::IAM::Role`. */
+    type: string;
+    /** The template/stack the member lives in. */
+    stack?: string;
+    /** The member's own source path, e.g. a CDK construct path. */
+    path?: string;
+}
 export interface Peelability {
     address: string;
     kind: "resource" | "module";
@@ -51,11 +82,46 @@ export interface Peelability {
     /** Native spec type a carve would target; undefined for modules/unsupported. */
     mapsTo?: string;
     breakdown: PeelabilityBreakdown;
+    /**
+     * Source-specific facts about this node that the six penalty terms do not
+     * carry — why it was disqualified, what folded into it, what it is. Plain
+     * prose, for the report's benefit; nothing keys on it.
+     */
+    notes?: string[];
+    /** The source units folded into this node (#1056). */
+    members?: CarveUnitMember[];
+}
+/**
+ * Source-specific scoring input for one node, layered on the shared model.
+ * Everything here is optional: with no signals a node scores exactly as the
+ * Terraform path scores it.
+ */
+export interface ScoreSignals {
+    /** Extra penalty terms, merged into `breakdown.penalties` and the total. */
+    penalties?: Record<string, number>;
+    notes?: string[];
+    members?: CarveUnitMember[];
+    /**
+     * When set, the node scores 0 and this is the stated reason. For claims the
+     * arithmetic cannot express — a CDK assembly synthesized from dummy lookup
+     * values is not a faithful picture of anything, so no score it produces is
+     * worth reading.
+     */
+    disqualified?: string;
+}
+export interface ScoreOptions {
+    /**
+     * Resource type → native tier. Defaults to the Terraform tier map; the CDK
+     * advisor passes a CloudFormation-keyed one. Modules keep the built-in
+     * {@link MODULE_TIER} treatment either way.
+     */
+    tierOf?: (type: string) => TierInfo | null;
+    signalsFor?: (node: TfNode) => ScoreSignals;
 }
 export declare function bandFor(score: number): PeelabilityBand;
 /**
  * Score every carvable node in the estate, ranked most-peelable first. Folded
  * sub-resources are omitted (they carve with their parent, not on their own).
  */
-export declare function scoreEstate(graph: TfGraph): Peelability[];
+export declare function scoreEstate(graph: TfGraph, opts?: ScoreOptions): Peelability[];
 //# sourceMappingURL=score.d.ts.map

package/dist/terraform/score.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"score.d.ts","sourceRoot":"","sources":["../../src/terraform/score.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAU,MAAM,SAAS,CAAC;AAE/C,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,mBAAmB,GAAG,oBAAoB,CAAC;AAExF,MAAM,WAAW,oBAAoB;IACnC,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,SAAS,EAAE;QACT,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,UAAU,GAAG,QAAQ,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,eAAe,CAAC;IACtB,gFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,oBAAoB,CAAC;CACjC;AAID,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAItD;AA6FD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,EAAE,CAMzD"}
+{"version":3,"file":"score.d.ts","sourceRoot":"","sources":["../../src/terraform/score.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAGH,OAAO,EAA6B,KAAK,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAE/C,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,mBAAmB,GAAG,oBAAoB,CAAC;AAExF,MAAM,WAAW,oBAAoB;IACnC,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,SAAS,EAAE;QACT,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;KACxB,CAAC;CACH;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,gEAAgE;IAChE,EAAE,EAAE,MAAM,CAAC;IACX,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,UAAU,GAAG,QAAQ,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,eAAe,CAAC;IACtB,gFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,oBAAoB,CAAC;IAChC;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,sDAAsD;IACtD,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;IAC5B;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,QAAQ,GAAG,IAAI,CAAC;IAC3C,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,YAAY,CAAC;CAC7C;AAUD,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAItD;AAyGD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,GAAE,YAAiB,GAAG,WAAW,EAAE,CAMlF"}

package/dist/terraform/tier-map.d.ts

@@ -1,39 +1,51 @@
 /**
- * Terraform-type → native-spec tier map for the carve-out advisor (#214 T3).
+ * Terraform-type → native-spec ranking for the carve-out advisor (#214 T3),
+ * resolved through the carve provider registry (`carve-provider.ts`, #2016).
  *
- * The AWS entries are derived from the single AWS carve-out table
- * (`aws-resources.ts`), so the advisor ranks exactly the AWS types `carve emit`
- * can produce — no advise↔emit cliff. Non-AWS entries (e.g. `kubernetes_manifest`)
- * are listed here directly; emit for those is a separate target.
+ * Every entry comes from a registered provider: the AWS ones from the single
+ * AWS carve-out table (`providers/aws.ts` over `aws-resources.ts`), so the
+ * advisor ranks exactly the AWS types `carve emit` can produce — no advise↔emit
+ * cliff — and the Kubernetes ones from `providers/kubernetes.ts`, which emits
+ * `kubernetes_manifest` and ranks the typed provider resources it does not.
  *
  *   tier 1 — a clean 1:1 native resource
  *   tier 2 — maps, but with reshaping
  *   tier 3 — a hard/partial map
  *   null   — no known native mapping (unsupported provider/type) → score 0
- */
-export interface TierInfo {
-    tier: 1 | 2 | 3;
-    /** The native spec type a carve would target, for the report. */
-    mapsTo: string;
-}
-/** TF resource type → native tier. Absent = unsupported (score 0). */
-export declare const TIER_MAP: Record<string, TierInfo>;
-/**
- * TF "sub-resource" types that inline into a parent resource rather than
- * standing alone (TF splits config the native spec keeps in one resource).
- * A sub-resource that shares its parent's name is folded into the parent's
- * carve set: it is not ranked on its own, and its edge to the parent does not
- * count as inbound boundary work — inlining it is free.
  *
- * Maps sub-resource TF type → parent TF type.
+ * These are functions, not frozen constants: the registry is open, so a
+ * provider registered after module load has to be visible here.
  */
-export declare const FOLDS_INTO: Record<string, string>;
+import { type TierInfo } from "./carve-provider.js";
+export { carveEmitTypes, type TierInfo } from "./carve-provider.js";
+/** TF resource type → native tier, over every registered provider. Absent = unsupported (score 0). */
+export declare function tierMap(): Readonly<Record<string, TierInfo>>;
+export declare function resolveTier(tfType: string): TierInfo | null;
 /**
- * The HCL attribute carrying a resource's physical name, per type — AWS entries
- * derived from the carve-out table, non-AWS listed directly. A dotted entry is
- * a path into nested blocks (`manifest.metadata.name`). Used for the graph's
+ * The HCL attribute carrying a resource's physical name. A dotted entry is a
+ * path into nested blocks (`manifest.metadata.name`). Used for the graph's
  * identity and the live-import hint. Absent → fall back to the TF logical name.
  */
-export declare const IDENTITY_ATTR: Record<string, string>;
-export declare function resolveTier(tfType: string): TierInfo | null;
+export declare function identityAttrOf(tfType: string): string | undefined;
+/**
+ * The parent Terraform type a sub-resource folds into, if any. Terraform splits
+ * configuration the native spec keeps in one resource; a sub-resource sharing
+ * its parent's name carves with the parent rather than being ranked on its own.
+ */
+export declare function foldParentOf(tfType: string): string | undefined;
+/**
+ * Can `chant carve emit` produce chant source for this type? Narrower than
+ * `resolveTier`: providers also rank types no emit path can adopt (the typed
+ * `kubernetes_*` resources, whose manifest only the provider schema knows how
+ * to reassemble). Both emit paths — `--state` and `--env` — gate on this, so a
+ * type either command refuses is refused by the other with the same message.
+ */
+export declare function canCarveEmit(tfType: string): boolean;
+/**
+ * Can `chant carve bridge` render a Terraform `data` source for this type? A
+ * dotted identity attribute is a path into nested blocks, and a data source
+ * body is flat `attr = value` — `manifest.metadata.name = "x"` is not valid
+ * HCL. An absent entry is fine: the bridge writes a TODO comment instead.
+ */
+export declare function canBridge(tfType: string): boolean;
 //# sourceMappingURL=tier-map.d.ts.map

package/dist/terraform/tier-map.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tier-map.d.ts","sourceRoot":"","sources":["../../src/terraform/tier-map.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,iEAAiE;IACjE,MAAM,EAAE,MAAM,CAAC;CAChB;AA0CD,sEAAsE;AACtE,eAAO,MAAM,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAK7C,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAiB7C,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAGhD,CAAC;AAEF,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAE3D"}
+{"version":3,"file":"tier-map.d.ts","sourceRoot":"","sources":["../../src/terraform/tier-map.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAKL,KAAK,QAAQ,EACd,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,cAAc,EAAE,KAAK,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEjE,sGAAsG;AACtG,wBAAgB,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAE5D;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAE3D;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEjE;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE/D;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAGjD"}