@intentius/chant 0.52.2 → 0.53.0

package/dist/cdk/advise.d.ts

@@ -0,0 +1,29 @@
+/**
+ * The CDK half of `chant carve advise` (#1056): read a cloud assembly, rank its
+ * constructs with the same model the Terraform advisor uses.
+ *
+ * Read-only, like the Terraform path — it emits nothing, patches nothing, and
+ * touches no live resource. `carve emit`, `carve bridge` and `carve apply` are
+ * deliberately Terraform-only: bridging a CDK carve means rewriting the
+ * surviving app's source, which does not generalize across jsii languages.
+ */
+import type { CarveDialect } from "../terraform/carve.js";
+import type { Peelability, ScoreOptions } from "../terraform/score.js";
+import type { TfGraph } from "../terraform/types.js";
+export interface CdkAdvice {
+    graph: TfGraph;
+    results: Peelability[];
+    /** The hooks that produced `results`, so the boundary pass agrees with it. */
+    scoreOptions: ScoreOptions;
+    diagnostics: string[];
+}
+/** The bridge vocabulary a CDK report's boundary edges are named in. */
+export declare const CDK_DIALECT: CarveDialect;
+/**
+ * Rank a cloud assembly. The scoring model, the bands and the report shape are
+ * the Terraform path's, verbatim; what changes is the tier lookup (already in
+ * CloudFormation type space, so no translation) and the signals only a CDK
+ * reader can see — assets, nested stacks, L3 subtrees, a dummy-value assembly.
+ */
+export declare function adviseCloudAssembly(dir: string): CdkAdvice;
+//# sourceMappingURL=advise.d.ts.map

package/dist/cdk/advise.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"advise.d.ts","sourceRoot":"","sources":["../../src/cdk/advise.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEpE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,8EAA8E;IAC9E,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,wEAAwE;AACxE,eAAO,MAAM,WAAW,EAAE,YAAoB,CAAC;AAE/C;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAQ1D"}

package/dist/cdk/assembly.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Read a CDK cloud assembly off disk (#1056).
+ *
+ * The only filesystem layer the CDK advisor needs. Detection is by content, not
+ * a flag: a directory holding `manifest.json` plus at least one
+ * `*.template.json` is a cloud assembly, so `chant carve advise --from ./cdk.out`
+ * routes itself.
+ *
+ * A malformed or truncated assembly degrades rather than throws — a stack whose
+ * template will not parse is dropped with a diagnostic, and the rest is still
+ * ranked. The advisor is read-only, so a partial read costs nothing but a
+ * shorter report.
+ */
+import type { CdkTreeNode, CloudAssembly } from "./types.js";
+/**
+ * Is `dir` a CDK cloud assembly? `manifest.json` plus at least one synthesized
+ * template. Both are required: `manifest.json` alone is far too common a
+ * filename to claim on sight.
+ */
+export declare function isCloudAssembly(dir: string): boolean;
+/**
+ * Why a Terraform-only carve phase refuses a cloud assembly (#1056).
+ *
+ * Advise is the only phase that reads CDK. Bridging a carve means rewriting the
+ * surviving app's source so it reimports what was taken, and CDK source is
+ * TypeScript, Python, Java or C# depending on who wrote it — nothing that
+ * generalizes the way patching HCL does. Better to say so than to parse the
+ * assembly's `.tf` files, find none, and report an empty estate.
+ */
+export declare function cdkNotSupported(dir: string, phase: "emit" | "bridge" | "apply"): string;
+/** Index `tree.json` by construct path, so a resource's path resolves in one lookup. */
+export declare function indexTree(root: CdkTreeNode | undefined): Map<string, CdkTreeNode>;
+/**
+ * Read the assembly at `dir`. Throws only when the directory is not an assembly
+ * at all — everything past that point is a diagnostic.
+ */
+export declare function readCloudAssembly(dir: string): CloudAssembly;
+//# sourceMappingURL=assembly.d.ts.map

package/dist/cdk/assembly.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assembly.d.ts","sourceRoot":"","sources":["../../src/cdk/assembly.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,KAAK,EAAsC,WAAW,EAAe,aAAa,EAAE,MAAM,SAAS,CAAC;AAS3G;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAQpD;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,CAKvF;AAmBD,wFAAwF;AACxF,wBAAgB,SAAS,CAAC,IAAI,EAAE,WAAW,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAQjF;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,CA4C5D"}

package/dist/cdk/graph.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Turn a CDK cloud assembly into the same dependency graph the Terraform
+ * advisor scores (#1056).
+ *
+ * Two jobs, both exact rather than heuristic:
+ *
+ * **Grouping.** CloudFormation resources are the wrong unit to rank. One L2
+ * construct emits several of them — a `Function` emits a role, a policy and the
+ * function — and they carve together or not at all. Every resource carries its
+ * emitting construct in `Metadata["aws:cdk:path"]`, and `tree.json` says which
+ * ancestor of that path is the construct a person actually wrote. So resources
+ * fold up to the shallowest L2 (or L3) ancestor and that construct ranks once.
+ * This is the CDK analogue of Terraform sub-resources folding into their parent.
+ *
+ * **Edges.** `Ref`, `Fn::GetAtt` and `Fn::Sub` are intra-stack; `Fn::ImportValue`
+ * resolves through the exporting stack's `Outputs` to the construct that
+ * actually produces the value, so a cross-stack dependency lands as a real edge
+ * between two constructs in both directions rather than a dangling name. There
+ * is no expression AST to consult and no regex over HCL: the template is JSON,
+ * and an intrinsic is a JSON object with a known key.
+ *
+ * Pure — no filesystem, no CDK CLI. `assembly.ts` does the reading.
+ */
+import type { CloudAssembly } from "./types.js";
+import type { ScoreSignals } from "../terraform/score.js";
+import type { TfGraph } from "../terraform/types.js";
+/**
+ * What a construct is, from its jsii class name.
+ *
+ *  - `l1`        — a `Cfn*` class: one construct, one CloudFormation resource.
+ *  - `l2`        — a curated service construct (`aws-cdk-lib.aws_s3.Bucket`).
+ *  - `l3`        — a pattern or a hand-written grouping construct. A Composite
+ *                  candidate (#1000), ranked whole instead of leaf by leaf.
+ *  - `nested`    — a `NestedStack`: a template of its own.
+ *  - `container` — App/Stage/Stack. Never a scoring unit; the ranking lives
+ *                  inside it.
+ *  - `unknown`   — no tree metadata to go on.
+ *
+ * A user's own construct class is not jsii-compiled, so tree metadata reports
+ * its nearest jsii ancestor: `constructs.Construct` for a grouping construct,
+ * `aws-cdk-lib.Stack` for a stack subclass. That is why stacks are recognized
+ * by their manifest artifact rather than by fqn — the fqn alone cannot tell a
+ * user's stack from a user's L3.
+ */
+export type ConstructLevel = "l1" | "l2" | "l3" | "nested" | "container" | "unknown";
+export declare function constructLevel(fqn: string | undefined): ConstructLevel;
+/** The assembly's dependency graph, plus the signals only a CDK reader can see. */
+export interface CdkCarveGraph {
+    graph: TfGraph;
+    /** Per-node scoring signals, keyed by construct path. */
+    signals: Map<string, ScoreSignals>;
+    diagnostics: string[];
+}
+/**
+ * Is the assembly a faithful picture of an account, or a guess? Either the
+ * manifest admits an unresolved context query, or a template still carries the
+ * placeholder that query would have replaced.
+ */
+export declare function dummyAssemblyReason(assembly: CloudAssembly): string | undefined;
+/**
+ * Build the graph and the per-construct signals from a read assembly.
+ *
+ * Every resource folds into a construct, every construct becomes one node, and
+ * every intrinsic becomes an edge between two nodes. Nothing is inferred: a
+ * reference with no resolvable target is dropped rather than drawn.
+ */
+export declare function buildCdkGraph(assembly: CloudAssembly): CdkCarveGraph;
+//# sourceMappingURL=graph.d.ts.map

package/dist/cdk/graph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph.d.ts","sourceRoot":"","sources":["../../src/cdk/graph.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,OAAO,KAAK,EAAsC,aAAa,EAAE,MAAM,SAAS,CAAC;AACjF,OAAO,KAAK,EAAmB,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,KAAK,EAAU,OAAO,EAAU,MAAM,oBAAoB,CAAC;AAElE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,cAAc,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC;AAiBrF,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,cAAc,CAQtE;AAuLD,mFAAmF;AACnF,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,OAAO,CAAC;IACf,yDAAyD;IACzD,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACnC,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAQD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,GAAG,SAAS,CAqB/E;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,aAAa,GAAG,aAAa,CA2NpE"}

package/dist/cdk/tier-map.d.ts

@@ -0,0 +1,44 @@
+/**
+ * CloudFormation-type → native-spec tier for the CDK carve advisor (#1056).
+ *
+ * The Terraform path's hardest layer — translating `aws_s3_bucket` into
+ * `AWS::S3::Bucket` and a tier — does not exist here: a synthesized template is
+ * already in CloudFormation type space, which is the space
+ * `AWS_CARVE_TYPES.nativeType` is written in. So this is the same table read
+ * from the other end, not a second table to keep in step. Adding an AWS type to
+ * the carve-out table lights it up for both advisors at once.
+ *
+ * `mapsTo` is the CloudFormation type itself, because that identity is the
+ * point: chant's AWS lexicon constructors take CloudFormation PascalCase props,
+ * so a CDK resource needs no translation to become one.
+ */
+import type { TierInfo } from "../terraform/tier-map.js";
+/**
+ * CloudFormation type → tier. Two Terraform types can name one CloudFormation
+ * type (`aws_lb` and `aws_alb` are the same load balancer); the first entry
+ * wins, and since aliases share a tier by construction there is nothing to
+ * reconcile.
+ */
+export declare const CFN_TIER_MAP: Record<string, TierInfo>;
+/** The chant AWS lexicon constructor a CloudFormation type would carve into. */
+export declare const CFN_CTOR: Record<string, string>;
+export declare function resolveCfnTier(cfnType: string): TierInfo | null;
+/**
+ * A nested stack is an assembly of its own: its resources live in a separate
+ * template that this advisor does not descend into, so carving the
+ * `AWS::CloudFormation::Stack` resource means carving everything under it.
+ */
+export declare const NESTED_STACK_TYPE = "AWS::CloudFormation::Stack";
+/**
+ * CloudFormation resources CDK synthesizes for its own bookkeeping. They
+ * describe the synthesis, not the infrastructure, so they never appear in the
+ * ranking.
+ */
+export declare const SCAFFOLDING_TYPES: Set<string>;
+/**
+ * Template parameters CDK adds for bootstrap and asset plumbing. A reference to
+ * one is not a sign the resource is parameterized by its author — it is the
+ * synthesizer talking to itself — so these do not mark a construct dynamic.
+ */
+export declare function isScaffoldingParameter(name: string): boolean;
+//# sourceMappingURL=tier-map.d.ts.map

package/dist/cdk/tier-map.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tier-map.d.ts","sourceRoot":"","sources":["../../src/cdk/tier-map.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEtD;;;;;GAKG;AACH,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAO9C,CAAC;AAEL,gFAAgF;AAChF,eAAO,MAAM,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAIxC,CAAC;AAEL,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAE/D;AAED;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,+BAA+B,CAAC;AAE9D;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,aAAkC,CAAC;AAEjE;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAO5D"}

package/dist/cdk/types.d.ts

@@ -0,0 +1,114 @@
+/**
+ * The parts of a CDK cloud assembly the carve advisor reads (#1056).
+ *
+ * A cloud assembly is already JSON, so there is no parser to install and no
+ * expression AST to resolve — the Terraform path's two hardest layers do not
+ * exist here. Three files carry everything the advisor needs:
+ *
+ *  - `manifest.json` — which artifacts are stacks, which template file each
+ *    one synthesized to, and (crucially) whether any context lookup went
+ *    unresolved.
+ *  - `tree.json` — the construct tree, so CloudFormation resources can be
+ *    grouped back under the construct that emitted them. Optional: CDK can be
+ *    told not to write it, and the advisor degrades to a coarser grouping.
+ *  - `*.template.json` — the CloudFormation templates themselves, already in
+ *    `AWS::*` type space, which is exactly what the AWS tier map keys on.
+ *
+ * Everything here is post-jsii, so a Python or Java CDK app reads through the
+ * same code path as a TypeScript one. Nothing in this module reads CDK source.
+ *
+ * The declarations are deliberately loose — every field optional, unknown keys
+ * tolerated — because the assembly schema is not chant's to own and gains
+ * fields between CDK releases.
+ */
+/** A CloudFormation resource as it appears in a synthesized template. */
+export interface CfnResource {
+    Type?: string;
+    Properties?: Record<string, unknown>;
+    /** `aws:cdk:path` names the emitting construct; `aws:asset:*` marks an asset. */
+    Metadata?: Record<string, unknown>;
+    DependsOn?: string | string[];
+    /** Names a template `Condition` — the CloudFormation analogue of `count`. */
+    Condition?: string;
+    [k: string]: unknown;
+}
+/** A CloudFormation `Outputs` entry. */
+export interface CfnOutput {
+    Value?: unknown;
+    Export?: {
+        Name?: unknown;
+    };
+    [k: string]: unknown;
+}
+export interface CfnTemplate {
+    Parameters?: Record<string, Record<string, unknown>>;
+    Conditions?: Record<string, unknown>;
+    Resources?: Record<string, CfnResource>;
+    Outputs?: Record<string, CfnOutput>;
+    [k: string]: unknown;
+}
+/** One artifact in `manifest.json`. */
+export interface CdkArtifact {
+    type?: string;
+    properties?: {
+        templateFile?: string;
+        [k: string]: unknown;
+    };
+    displayName?: string;
+    dependencies?: string[];
+    environment?: string;
+    [k: string]: unknown;
+}
+/** One unresolved context lookup, as `cdk synth` records it. */
+export interface CdkMissingContext {
+    key?: string;
+    provider?: string;
+    props?: Record<string, unknown>;
+}
+export interface CdkManifest {
+    version?: string;
+    artifacts?: Record<string, CdkArtifact>;
+    /**
+     * Context queries synthesis could not answer. Non-empty means the templates
+     * hold placeholder values rather than the real account's, so nothing
+     * synthesized from them describes real infrastructure.
+     */
+    missing?: CdkMissingContext[];
+    [k: string]: unknown;
+}
+/** A node of `tree.json`. Children are keyed by construct id. */
+export interface CdkTreeNode {
+    id?: string;
+    path?: string;
+    children?: Record<string, CdkTreeNode>;
+    /** `fqn` is the construct class — the L1/L2/L3 signal. */
+    constructInfo?: {
+        fqn?: string;
+        version?: string;
+    };
+    attributes?: Record<string, unknown>;
+}
+export interface CdkTreeFile {
+    version?: string;
+    tree?: CdkTreeNode;
+}
+/** One CloudFormation stack artifact, with its template read. */
+export interface CdkStack {
+    /** Artifact id in `manifest.json`, e.g. `Stage-AppStack`. */
+    id: string;
+    /** Construct path of the stack, e.g. `Stage/AppStack`. */
+    path: string;
+    templateFile: string;
+    template: CfnTemplate;
+}
+/** A read cloud assembly: the manifest, the construct tree, the stacks. */
+export interface CloudAssembly {
+    dir: string;
+    manifest: CdkManifest;
+    /** Absent when the app was synthesized without tree metadata. */
+    tree?: CdkTreeNode;
+    stacks: CdkStack[];
+    /** Everything that went wrong or is worth saying about the read itself. */
+    diagnostics: string[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/cdk/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/cdk/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,yEAAyE;AACzE,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC9B,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,wCAAwC;AACxC,MAAM,WAAW,SAAS;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC5B,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACrD,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,uCAAuC;AACvC,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,gEAAgE;AAChE,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACxC;;;;OAIG;IACH,OAAO,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC9B,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,iEAAiE;AACjE,MAAM,WAAW,WAAW;IAC1B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACvC,0DAA0D;IAC1D,aAAa,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,WAAW,CAAC;CACpB;AAED,iEAAiE;AACjE,MAAM,WAAW,QAAQ;IACvB,6DAA6D;IAC7D,EAAE,EAAE,MAAM,CAAC;IACX,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,WAAW,CAAC;CACvB;AAED,2EAA2E;AAC3E,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,WAAW,CAAC;IACtB,iEAAiE;IACjE,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,MAAM,EAAE,QAAQ,EAAE,CAAC;IACnB,2EAA2E;IAC3E,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB"}

package/dist/cli/commands/carve-apply.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"carve-apply.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/carve-apply.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,OAAO,EAA4C,KAAK,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAGzG,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,gEAAgE;IAChE,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA+DnF;AAqBD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CA2BjE"}
+{"version":3,"file":"carve-apply.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/carve-apply.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH,OAAO,EAA4C,KAAK,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAIzG,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,gEAAgE;IAChE,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA6EnF;AAqBD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CA2BjE"}

package/dist/cli/commands/carve-bridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"carve-bridge.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/carve-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,OAAO,EAAkB,KAAK,UAAU,EAAuB,MAAM,wBAAwB,CAAC;AAK9F,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,8BAA8B;IAC9B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,mDAAmD;IACnD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AASD,wBAAsB,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAiItF;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAqCnE"}
+{"version":3,"file":"carve-bridge.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/carve-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH,OAAO,EAAkB,KAAK,UAAU,EAAuB,MAAM,wBAAwB,CAAC;AAK9F,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,8BAA8B;IAC9B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,mDAAmD;IACnD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AASD,wBAAsB,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAoItF;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAqCnE"}

package/dist/cli/commands/carve-emit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"carve-emit.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/carve-emit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,EAAqC,KAAK,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAI5F,OAAO,EAAkB,KAAK,aAAa,EAAE,KAAK,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAE1G,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAUhE,MAAM,WAAW,gBAAgB;IAC/B,6CAA6C;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,2DAA2D;AAC3D,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,UAAU,EAAE,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;CAC7F;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,oCAAoC;IACpC,MAAM,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IAC5B,4BAA4B;IAC5B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,iFAAiF;IACjF,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,2FAA2F;IAC3F,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;IACzB,sFAAsF;IACtF,MAAM,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC9B,oEAAoE;IACpE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,CA8HrG;AAiJD,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAwD/D"}
+{"version":3,"file":"carve-emit.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/carve-emit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,OAAO,EAAqC,KAAK,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAK5F,OAAO,EAAkB,KAAK,aAAa,EAAE,KAAK,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAE1G,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAEhE,MAAM,WAAW,gBAAgB;IAC/B,6CAA6C;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,2DAA2D;AAC3D,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,UAAU,EAAE,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;CAC7F;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,oCAAoC;IACpC,MAAM,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IAC5B,4BAA4B;IAC5B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,iFAAiF;IACjF,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,2FAA2F;IAC3F,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;IACzB,sFAAsF;IACtF,MAAM,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC9B,oEAAoE;IACpE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,CAwIrG;AAiJD,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAwD/D"}

package/dist/cli/commands/carve.d.ts

@@ -1,26 +1,41 @@
 /**
- * `chant carve advise` — the read-only Terraform peelability advisor (#214).
+ * `chant carve advise` — the read-only peelability advisor (#214, #1056).
  *
- * Points at a Terraform estate and reports which resources/modules are cheap to
- * carve into native chant later and which should stay in Terraform. It emits
+ * Points at foreign infrastructure and reports which pieces are cheap to carve
+ * into native chant later and which should stay where they are. It emits
  * nothing, patches nothing, and touches no live resource — pure analysis. The
- * emit/boundary/apply phases stay in #197, gated on demand.
+ * emit/boundary/apply phases (`carve emit|bridge|apply`, #197) read Terraform
+ * only, and refuse a cloud assembly by name.
+ *
+ * Two sources, one report. A Terraform estate is parsed from `.tf`; a CDK cloud
+ * assembly is read from `cdk.out` (#1056). Which one is in `--from` is decided
+ * by looking, not by a second flag: a directory holding `manifest.json` plus a
+ * synthesized `*.template.json` is an assembly. Both produce the same bands,
+ * the same score arithmetic, and the same JSON shape.
  */
-import { type Peelability } from "../../terraform/score.js";
+import { type Peelability, type ScoreOptions } from "../../terraform/score.js";
 import { type BoundaryEdge } from "../../terraform/carve.js";
 import type { TfGraph } from "../../terraform/types.js";
 export interface CarveAdviseOptions {
-    /** Terraform estate directory (from `--from`). */
+    /** Terraform estate directory or CDK cloud assembly (from `--from`). */
     from?: string;
     /** Opt-in `.tfstate` path (from `--state`): accurate fan-out instance counts. */
     statePath?: string;
     /** Write the full JSON report to this path (from `--report <path>`). */
     reportFile?: string;
 }
+/**
+ * Which source the ranking came from. Terraform addresses and CDK construct
+ * paths are different namespaces, and the bridge patches have different names,
+ * so a report says which it is rather than leaving a reader to guess from the
+ * shape of an address.
+ */
+export type CarveSource = "terraform" | "cdk";
 export interface CarveAdviseResult {
     ok: boolean;
     error?: string;
     from?: string;
+    source?: CarveSource;
     results?: Peelability[];
     /**
      * The parsed dependency graph the scores came from. Kept so the JSON report
@@ -28,6 +43,10 @@ export interface CarveAdviseResult {
      * Not part of the JSON payload — `carveJson` derives from it.
      */
     graph?: TfGraph;
+    /** The hooks the scores were produced with, so the boundary pass agrees. */
+    scoreOptions?: ScoreOptions;
+    /** Anything about the read itself worth saying out loud. */
+    diagnostics?: string[];
 }
 export declare function carveAdvise(opts: CarveAdviseOptions): Promise<CarveAdviseResult>;
 /**
@@ -45,6 +64,16 @@ export declare function carveAdvise(opts: CarveAdviseOptions): Promise<CarveAdvi
  *    not).
  *  - A reader that does not know the version it is handed should refuse the
  *    report rather than half-read it.
+ *
+ * The CDK source (#1056) stays inside that promise and does not bump the
+ * version. Every field an existing reader keys on keeps its type and meaning:
+ * `address` is still an opaque string identifier (a construct path instead of a
+ * Terraform address), `kind` is still `"resource"` or `"module"` (an L3
+ * construct subtree is a Composite candidate, which is what `module` already
+ * means), `score`/`band`/`breakdown` are the same arithmetic. What is new is
+ * additive and ignorable: the top-level `source` discriminator, per-resource
+ * `notes` and `members`, and two more `bridge` values in a list that was
+ * already declared open-ended.
  */
 export declare const CARVE_REPORT_VERSION = 1;
 /** One ranked resource in the JSON report: its score, plus the boundary its carve would cut. */
@@ -78,10 +107,23 @@ export interface CarveJsonResource extends Peelability {
 export interface CarveJsonReport {
     version: number;
     from?: string;
+    /**
+     * Which source was read (#1056). `terraform` — addresses are Terraform
+     * addresses, bridges are `data` sources. `cdk` — addresses are construct
+     * paths and bridges are reimports. Absent on a chant that predates the CDK
+     * advisor, which a reader should take as `terraform`.
+     */
+    source: CarveSource;
     advisory: string;
     count: number;
     /** Band name -> how many resources landed in it. */
     bands: Record<string, number>;
+    /**
+     * Anything about the read the scores alone do not say — a missing `tree.json`,
+     * an assembly synthesized from unresolved context lookups. Present only when
+     * there is something to report.
+     */
+    diagnostics?: string[];
     resources: CarveJsonResource[];
 }
 /** Build the `--json` / `--report` payload. */

package/dist/cli/commands/carve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"carve.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/carve.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAe,KAAK,WAAW,EAAwB,MAAM,uBAAuB,CAAC;AAC5F,OAAO,EAAkB,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAErD,MAAM,WAAW,kBAAkB;IACjC,kDAAkD;IAClD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC;IACxB;;;;OAIG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAID,wBAAsB,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA2BtF;AAED;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAEtC,gGAAgG;AAChG,MAAM,WAAW,iBAAkB,SAAQ,WAAW;IACpD;;;;;;;;;;;;;;;;;;;OAmBG;IACH,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,YAAY,EAAE,CAAC;QAAC,QAAQ,EAAE,YAAY,EAAE,CAAA;KAAE,CAAC;CAClE;AAED,yGAAyG;AACzG,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,SAAS,EAAE,iBAAiB,EAAE,CAAC;CAChC;AAED,+CAA+C;AAC/C,wBAAgB,SAAS,CAAC,MAAM,EAAE,iBAAiB,GAAG,eAAe,CAapE;AAUD,6CAA6C;AAC7C,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAyBnE"}
+{"version":3,"file":"carve.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/carve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,OAAO,EAAe,KAAK,WAAW,EAAwB,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC/G,OAAO,EAAkB,KAAK,YAAY,EAAqB,MAAM,uBAAuB,CAAC;AAC7F,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAErD,MAAM,WAAW,kBAAkB;IACjC,wEAAwE;IACxE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,KAAK,CAAC;AAE9C,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC;IACxB;;;;OAIG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,4EAA4E;IAC5E,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,4DAA4D;IAC5D,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAID,wBAAsB,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAatF;AA4CD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAEtC,gGAAgG;AAChG,MAAM,WAAW,iBAAkB,SAAQ,WAAW;IACpD;;;;;;;;;;;;;;;;;;;OAmBG;IACH,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,YAAY,EAAE,CAAC;QAAC,QAAQ,EAAE,YAAY,EAAE,CAAA;KAAE,CAAC;CAClE;AAED,yGAAyG;AACzG,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,EAAE,iBAAiB,EAAE,CAAC;CAChC;AAED,+CAA+C;AAC/C,wBAAgB,SAAS,CAAC,MAAM,EAAE,iBAAiB,GAAG,eAAe,CAiBpE;AAeD,6CAA6C;AAC7C,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAqCnE"}

package/dist/cli/handlers/carve-emit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"carve-emit.d.ts","sourceRoot":"","sources":["../../../src/cli/handlers/carve-emit.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAsCvE"}
+{"version":3,"file":"carve-emit.d.ts","sourceRoot":"","sources":["../../../src/cli/handlers/carve-emit.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CA0CvE"}

package/dist/cli/handlers/carve.d.ts

@@ -1,10 +1,11 @@
 import type { CommandContext } from "../registry.js";
 /**
- * `chant carve advise --from <terraform-dir> [--json] [--report <path>]`
+ * `chant carve advise --from <terraform-dir | cdk.out> [--json] [--report <path>]`
  *
- * Read-only. Reuses `--from` (shared with migrate/import) for the estate dir.
- * Loads no chant project and no lexicon plugins — pure analysis of a foreign
- * Terraform tree.
+ * Read-only. Reuses `--from` (shared with migrate/import) for the source dir,
+ * and works out which source it is by looking at the directory (#1056) rather
+ * than adding a second flag. Loads no chant project and no lexicon plugins —
+ * pure analysis of a foreign tree.
  */
 export declare function runCarveAdvise(ctx: CommandContext): Promise<number>;
 /** Fallback for `chant carve` with no/unknown subcommand. */

package/dist/cli/handlers/carve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"carve.d.ts","sourceRoot":"","sources":["../../../src/cli/handlers/carve.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAuBzE;AAED,6DAA6D;AAC7D,wBAAsB,eAAe,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAM3E"}
+{"version":3,"file":"carve.d.ts","sourceRoot":"","sources":["../../../src/cli/handlers/carve.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAuBzE;AAED,6DAA6D;AAC7D,wBAAsB,eAAe,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAM3E"}

package/dist/cli/handlers/lifecycle.d.ts

@@ -58,6 +58,16 @@ export declare function runLifecycleTeardown(ctx: CommandContext): Promise<numbe
  * chant lifecycle log [environment]
  */
 export declare function runLifecycleLog(ctx: CommandContext): Promise<number>;
+/**
+ * chant lifecycle whoami <environment> [lexicon] [--json] [--strict]
+ *
+ * Read-only pre-flight (#1982): who chant would act as in each configured
+ * lexicon, and what that principal is scoped to, before it acts. Never
+ * mutates, never gates — `--strict` is the only way this exits non-zero on an
+ * unresolved row, and a lexicon that answers for nothing is reported as such
+ * rather than as an empty identity.
+ */
+export declare function runLifecycleWhoami(ctx: CommandContext): Promise<number>;
 /**
  * Fallback for unknown state subcommands.
  */

package/dist/cli/handlers/lifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../../src/cli/handlers/lifecycle.ts"],"names":[],"mappings":"AA2CA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAKlD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,GAAG,MAAM,CAE9E;AAmCD;;GAEG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAyH/E;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CA4C3E;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CA8B/E;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAmL3E;AAslBD;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAgP3E;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CA2L/E;AAsBD;;GAEG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAiB1E;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAM9E;AAkBD;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CA+C/E"}
+{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../../src/cli/handlers/lifecycle.ts"],"names":[],"mappings":"AA4CA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAKlD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,GAAG,MAAM,CAE9E;AAmCD;;GAEG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAyH/E;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CA4C3E;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CA8B/E;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAmL3E;AAslBD;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAgP3E;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CA2L/E;AAsBD;;GAEG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAiB1E;AAgBD;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAmE7E;AAiCD;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAM9E;AAkBD;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CA+C/E"}

package/dist/cli/main.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":";AAMA,OAAO,EAAmC,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAsF9E;;GAEG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAmUpD;AAinBD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB5E"}
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":";AAMA,OAAO,EAAmC,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAsF9E;;GAEG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAmUpD;AAwnBD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB5E"}