@intentius/chant 0.52.2 → 0.53.1

package/dist/terraform/score.d.ts

@@ -18,11 +18,19 @@
  * expression in a block that manages no infrastructure, the same order of work
  * as recording an outbound deferred input. Hence 4, not 12.
  *
- * Sub-resources that inline into a parent (see `FOLDS_INTO`) are folded into the
+ * Sub-resources that inline into a parent (see `foldParentOf`) are folded into the
  * parent's carve set: they are removed from the ranking and their edge to the
  * parent is not counted as inbound — inlining them is free, not boundary work.
+ *
+ * The model itself is not Terraform-specific — the CDK cloud-assembly advisor
+ * (#1056) scores construct units with the same arithmetic. What differs per
+ * source is the type→tier lookup and the extra signals that source can see, so
+ * both are injectable via `ScoreOptions` rather than forked into a second
+ * scorer. Everything else — the six penalty terms, the clamp, the bands — is
+ * shared verbatim.
  */
-import type { TfGraph } from "./types.js";
+import { type TierInfo } from "./tier-map.js";
+import type { TfGraph, TfNode } from "./types.js";
 export type PeelabilityBand = "clean leaf" | "carvable w/ edits" | "leave in Terraform";
 export interface PeelabilityBreakdown {
     /** Inbound edges from resource/module blocks — a data-source patch each. */
@@ -33,7 +41,12 @@ export interface PeelabilityBreakdown {
     tier: 1 | 2 | 3 | null;
     hasDynamic: boolean;
     instances: number;
-    /** Signed penalty contributions, for report transparency. */
+    /**
+     * Signed penalty contributions, for report transparency. The six shared terms
+     * are always present; a source-specific scorer may add its own keys (the CDK
+     * advisor's `asset`, say). A reader that sums the values reproduces the score;
+     * a reader that only knows the six named terms still reads those correctly.
+     */
     penalties: {
         inbound: number;
         outbound: number;
@@ -41,8 +54,26 @@ export interface PeelabilityBreakdown {
         tier: number;
         dynamic: number;
         instances: number;
+        [term: string]: number;
     };
 }
+/**
+ * One unit of source a scored node stands for, when the node is a fold of
+ * several (#1056). A CDK construct emits 1..n CloudFormation resources and
+ * ranks once; this names the resources that carve with it. Absent on the
+ * Terraform path, where a fold is expressed by the child's absence from the
+ * ranking instead.
+ */
+export interface CarveUnitMember {
+    /** Identifier within its template/estate — a CFN logical ID. */
+    id: string;
+    /** Resource type, e.g. `AWS::IAM::Role`. */
+    type: string;
+    /** The template/stack the member lives in. */
+    stack?: string;
+    /** The member's own source path, e.g. a CDK construct path. */
+    path?: string;
+}
 export interface Peelability {
     address: string;
     kind: "resource" | "module";
@@ -51,11 +82,46 @@ export interface Peelability {
     /** Native spec type a carve would target; undefined for modules/unsupported. */
     mapsTo?: string;
     breakdown: PeelabilityBreakdown;
+    /**
+     * Source-specific facts about this node that the six penalty terms do not
+     * carry — why it was disqualified, what folded into it, what it is. Plain
+     * prose, for the report's benefit; nothing keys on it.
+     */
+    notes?: string[];
+    /** The source units folded into this node (#1056). */
+    members?: CarveUnitMember[];
+}
+/**
+ * Source-specific scoring input for one node, layered on the shared model.
+ * Everything here is optional: with no signals a node scores exactly as the
+ * Terraform path scores it.
+ */
+export interface ScoreSignals {
+    /** Extra penalty terms, merged into `breakdown.penalties` and the total. */
+    penalties?: Record<string, number>;
+    notes?: string[];
+    members?: CarveUnitMember[];
+    /**
+     * When set, the node scores 0 and this is the stated reason. For claims the
+     * arithmetic cannot express — a CDK assembly synthesized from dummy lookup
+     * values is not a faithful picture of anything, so no score it produces is
+     * worth reading.
+     */
+    disqualified?: string;
+}
+export interface ScoreOptions {
+    /**
+     * Resource type → native tier. Defaults to the Terraform tier map; the CDK
+     * advisor passes a CloudFormation-keyed one. Modules keep the built-in
+     * {@link MODULE_TIER} treatment either way.
+     */
+    tierOf?: (type: string) => TierInfo | null;
+    signalsFor?: (node: TfNode) => ScoreSignals;
 }
 export declare function bandFor(score: number): PeelabilityBand;
 /**
  * Score every carvable node in the estate, ranked most-peelable first. Folded
  * sub-resources are omitted (they carve with their parent, not on their own).
  */
-export declare function scoreEstate(graph: TfGraph): Peelability[];
+export declare function scoreEstate(graph: TfGraph, opts?: ScoreOptions): Peelability[];
 //# sourceMappingURL=score.d.ts.map

package/dist/terraform/score.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"score.d.ts","sourceRoot":"","sources":["../../src/terraform/score.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAU,MAAM,SAAS,CAAC;AAE/C,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,mBAAmB,GAAG,oBAAoB,CAAC;AAExF,MAAM,WAAW,oBAAoB;IACnC,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,SAAS,EAAE;QACT,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,UAAU,GAAG,QAAQ,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,eAAe,CAAC;IACtB,gFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,oBAAoB,CAAC;CACjC;AAID,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAItD;AA6FD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,EAAE,CAMzD"}
+{"version":3,"file":"score.d.ts","sourceRoot":"","sources":["../../src/terraform/score.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAGH,OAAO,EAA6B,KAAK,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAE/C,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,mBAAmB,GAAG,oBAAoB,CAAC;AAExF,MAAM,WAAW,oBAAoB;IACnC,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,SAAS,EAAE;QACT,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;KACxB,CAAC;CACH;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,gEAAgE;IAChE,EAAE,EAAE,MAAM,CAAC;IACX,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,UAAU,GAAG,QAAQ,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,eAAe,CAAC;IACtB,gFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,oBAAoB,CAAC;IAChC;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,sDAAsD;IACtD,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;IAC5B;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,QAAQ,GAAG,IAAI,CAAC;IAC3C,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,YAAY,CAAC;CAC7C;AAUD,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAItD;AAyGD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,GAAE,YAAiB,GAAG,WAAW,EAAE,CAMlF"}

package/dist/terraform/tier-map.d.ts

@@ -1,56 +1,51 @@
 /**
- * Terraform-type → native-spec tier map for the carve-out advisor (#214 T3).
+ * Terraform-type → native-spec ranking for the carve-out advisor (#214 T3),
+ * resolved through the carve provider registry (`carve-provider.ts`, #2016).
  *
- * The AWS entries are derived from the single AWS carve-out table
- * (`aws-resources.ts`), so the advisor ranks exactly the AWS types `carve emit`
- * can produce — no advise↔emit cliff. Non-AWS entries (e.g. `kubernetes_manifest`)
- * are listed here directly; emit for those is a separate target.
+ * Every entry comes from a registered provider: the AWS ones from the single
+ * AWS carve-out table (`providers/aws.ts` over `aws-resources.ts`), so the
+ * advisor ranks exactly the AWS types `carve emit` can produce — no advise↔emit
+ * cliff — and the Kubernetes ones from `providers/kubernetes.ts`, which emits
+ * `kubernetes_manifest` and ranks the typed provider resources it does not.
  *
  *   tier 1 — a clean 1:1 native resource
  *   tier 2 — maps, but with reshaping
  *   tier 3 — a hard/partial map
  *   null   — no known native mapping (unsupported provider/type) → score 0
- */
-export interface TierInfo {
-    tier: 1 | 2 | 3;
-    /** The native spec type a carve would target, for the report. */
-    mapsTo: string;
-}
-/** TF resource type → native tier. Absent = unsupported (score 0). */
-export declare const TIER_MAP: Record<string, TierInfo>;
-/**
- * TF "sub-resource" types that inline into a parent resource rather than
- * standing alone (TF splits config the native spec keeps in one resource).
- * A sub-resource that shares its parent's name is folded into the parent's
- * carve set: it is not ranked on its own, and its edge to the parent does not
- * count as inbound boundary work — inlining it is free.
  *
- * Maps sub-resource TF type → parent TF type.
+ * These are functions, not frozen constants: the registry is open, so a
+ * provider registered after module load has to be visible here.
  */
-export declare const FOLDS_INTO: Record<string, string>;
+import { type TierInfo } from "./carve-provider.js";
+export { carveEmitTypes, type TierInfo } from "./carve-provider.js";
+/** TF resource type → native tier, over every registered provider. Absent = unsupported (score 0). */
+export declare function tierMap(): Readonly<Record<string, TierInfo>>;
+export declare function resolveTier(tfType: string): TierInfo | null;
 /**
- * The HCL attribute carrying a resource's physical name, per type — AWS entries
- * derived from the carve-out table, non-AWS listed directly. A dotted entry is
- * a path into nested blocks (`manifest.metadata.name`). Used for the graph's
+ * The HCL attribute carrying a resource's physical name. A dotted entry is a
+ * path into nested blocks (`manifest.metadata.name`). Used for the graph's
  * identity and the live-import hint. Absent → fall back to the TF logical name.
  */
-export declare const IDENTITY_ATTR: Record<string, string>;
-export declare function resolveTier(tfType: string): TierInfo | null;
+export declare function identityAttrOf(tfType: string): string | undefined;
+/**
+ * The parent Terraform type a sub-resource folds into, if any. Terraform splits
+ * configuration the native spec keeps in one resource; a sub-resource sharing
+ * its parent's name carves with the parent rather than being ranked on its own.
+ */
+export declare function foldParentOf(tfType: string): string | undefined;
 /**
  * Can `chant carve emit` produce chant source for this type? Narrower than
- * `resolveTier`: the tier map also ranks the kubernetes types, which advise
- * bands but no emit path can adopt (#999, blocked on the provider seam #2016).
- * Both emit paths — `--state` and `--env` — gate on this, so a type either
- * command refuses is refused by the other with the same message.
+ * `resolveTier`: providers also rank types no emit path can adopt (the typed
+ * `kubernetes_*` resources, whose manifest only the provider schema knows how
+ * to reassemble). Both emit paths — `--state` and `--env` — gate on this, so a
+ * type either command refuses is refused by the other with the same message.
  */
 export declare function canCarveEmit(tfType: string): boolean;
-/** The types `canCarveEmit` accepts, sorted, for user-facing hints. */
-export declare function carveEmitTypes(): string[];
 /**
  * Can `chant carve bridge` render a Terraform `data` source for this type? A
- * dotted `IDENTITY_ATTR` is a path into nested blocks, and a data source body
- * is flat `attr = value` — `manifest.metadata.name = "x"` is not valid HCL.
- * An absent entry is fine: the bridge writes a TODO comment for the identity.
+ * dotted identity attribute is a path into nested blocks, and a data source
+ * body is flat `attr = value` — `manifest.metadata.name = "x"` is not valid
+ * HCL. An absent entry is fine: the bridge writes a TODO comment instead.
  */
 export declare function canBridge(tfType: string): boolean;
 //# sourceMappingURL=tier-map.d.ts.map

package/dist/terraform/tier-map.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tier-map.d.ts","sourceRoot":"","sources":["../../src/terraform/tier-map.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,iEAAiE;IACjE,MAAM,EAAE,MAAM,CAAC;CAChB;AA0CD,sEAAsE;AACtE,eAAO,MAAM,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAK7C,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAiB7C,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAGhD,CAAC;AAEF,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAE3D;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED,uEAAuE;AACvE,wBAAgB,cAAc,IAAI,MAAM,EAAE,CAEzC;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAGjD"}
+{"version":3,"file":"tier-map.d.ts","sourceRoot":"","sources":["../../src/terraform/tier-map.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAKL,KAAK,QAAQ,EACd,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,cAAc,EAAE,KAAK,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEjE,sGAAsG;AACtG,wBAAgB,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAE5D;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAE3D;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEjE;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE/D;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAGjD"}

package/dist/terraform/types.d.ts

@@ -62,6 +62,12 @@ export interface TfEdge {
      * parameter. Empty when the reference came from a non-object block shape.
      */
     via: string[];
+    /**
+     * The two ends live in different templates — a CloudFormation
+     * `Fn::ImportValue` resolved through the exporting stack's `Outputs` (#1056).
+     * Never set on the Terraform path, where a single estate is one namespace.
+     */
+    crossStack?: boolean;
 }
 export interface TfGraph {
     nodes: TfNode[];

package/dist/terraform/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/terraform/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,+EAA+E;AAC/E,MAAM,WAAW,MAAM;IACrB,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,UAAU,GAAG,QAAQ,CAAC;IAC5B,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,uFAAuF;IACvF,UAAU,EAAE,OAAO,CAAC;IACpB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,8DAA8D;IAC9D,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB;;;;;OAKG;IACH,GAAG,EAAE,MAAM,EAAE,CAAC;CACf;AAED,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IACjD,8FAA8F;IAC9F,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACnC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/terraform/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,+EAA+E;AAC/E,MAAM,WAAW,MAAM;IACrB,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,UAAU,GAAG,QAAQ,CAAC;IAC5B,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,uFAAuF;IACvF,UAAU,EAAE,OAAO,CAAC;IACpB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,8DAA8D;IAC9D,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB;;;;;OAKG;IACH,GAAG,EAAE,MAAM,EAAE,CAAC;IACd;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IACjD,8FAA8F;IAC9F,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACnC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant",
-  "version": "0.52.2",
+  "version": "0.53.1",
   "description": "Declarative infrastructure-as-code toolkit — TypeScript on Node.js",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",

package/src/cdk/__fixtures__/cdk.out/AppStack.template.json

@@ -0,0 +1,171 @@
+{
+  "Parameters": {
+    "EnvName": {
+      "Type": "String",
+      "Default": "dev"
+    },
+    "BootstrapVersion": {
+      "Type": "AWS::SSM::Parameter::Value<String>",
+      "Default": "/cdk-bootstrap/hnb659fds/version",
+      "Description": "Version of the CDK Bootstrap resources in this environment"
+    }
+  },
+  "Conditions": {
+    "IsProd": { "Fn::Equals": [{ "Ref": "EnvName" }, "prod"] }
+  },
+  "Resources": {
+    "ApiQueue4A6E9832": {
+      "Type": "AWS::SQS::Queue",
+      "Properties": {
+        "VisibilityTimeout": 300
+      },
+      "UpdateReplacePolicy": "Delete",
+      "DeletionPolicy": "Delete",
+      "Metadata": {
+        "aws:cdk:path": "AppStack/Api/Queue/Resource"
+      }
+    },
+    "ApiTopic1B2C3D4E": {
+      "Type": "AWS::SNS::Topic",
+      "Properties": {
+        "DisplayName": "api-events"
+      },
+      "Metadata": {
+        "aws:cdk:path": "AppStack/Api/Topic/Resource"
+      }
+    },
+    "ApiTopicQueueSubscriptionAA11BB22": {
+      "Type": "AWS::SNS::Subscription",
+      "Properties": {
+        "Protocol": "sqs",
+        "TopicArn": { "Ref": "ApiTopic1B2C3D4E" },
+        "Endpoint": { "Fn::GetAtt": ["ApiQueue4A6E9832", "Arn"] }
+      },
+      "Metadata": {
+        "aws:cdk:path": "AppStack/Api/Topic/QueueSubscription/Resource"
+      }
+    },
+    "HandlerServiceRoleFCDC14AE": {
+      "Type": "AWS::IAM::Role",
+      "Properties": {
+        "AssumeRolePolicyDocument": {
+          "Statement": [
+            {
+              "Action": "sts:AssumeRole",
+              "Effect": "Allow",
+              "Principal": { "Service": "lambda.amazonaws.com" }
+            }
+          ],
+          "Version": "2012-10-17"
+        }
+      },
+      "Metadata": {
+        "aws:cdk:path": "AppStack/Handler/ServiceRole/Resource"
+      }
+    },
+    "HandlerServiceRoleDefaultPolicy4C43A1F9": {
+      "Type": "AWS::IAM::Policy",
+      "Properties": {
+        "PolicyDocument": {
+          "Statement": [
+            {
+              "Action": ["s3:GetObject", "s3:PutObject"],
+              "Effect": "Allow",
+              "Resource": {
+                "Fn::Join": [
+                  "",
+                  [
+                    { "Fn::ImportValue": "DataStack:ExportsOutputFnGetAttAssets675B7A57ArnE0B2A4A8" },
+                    "/*"
+                  ]
+                ]
+              }
+            }
+          ],
+          "Version": "2012-10-17"
+        },
+        "PolicyName": "HandlerServiceRoleDefaultPolicy4C43A1F9",
+        "Roles": [{ "Ref": "HandlerServiceRoleFCDC14AE" }]
+      },
+      "Metadata": {
+        "aws:cdk:path": "AppStack/Handler/ServiceRole/DefaultPolicy/Resource"
+      }
+    },
+    "Handler886CB40B": {
+      "Type": "AWS::Lambda::Function",
+      "Properties": {
+        "Code": {
+          "S3Bucket": { "Fn::Sub": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}" },
+          "S3Key": "9f8e7d6c5b4a39281706f5e4d3c2b1a09f8e7d6c5b4a39281706f5e4d3c2b1a0.zip"
+        },
+        "Environment": {
+          "Variables": {
+            "QUEUE_URL": { "Ref": "ApiQueue4A6E9832" }
+          }
+        },
+        "Handler": "index.handler",
+        "Role": { "Fn::GetAtt": ["HandlerServiceRoleFCDC14AE", "Arn"] },
+        "Runtime": "nodejs20.x"
+      },
+      "DependsOn": ["HandlerServiceRoleDefaultPolicy4C43A1F9", "HandlerServiceRoleFCDC14AE"],
+      "Metadata": {
+        "aws:cdk:path": "AppStack/Handler/Resource",
+        "aws:asset:path": "asset.9f8e7d6c5b4a39281706f5e4d3c2b1a0",
+        "aws:asset:is-bundled": false,
+        "aws:asset:property": "Code"
+      }
+    },
+    "LegacyBucket": {
+      "Type": "AWS::S3::Bucket",
+      "Condition": "IsProd",
+      "Properties": {
+        "BucketName": { "Fn::Sub": "legacy-${EnvName}-archive" }
+      },
+      "UpdateReplacePolicy": "Retain",
+      "DeletionPolicy": "Retain",
+      "Metadata": {
+        "aws:cdk:path": "AppStack/Legacy"
+      }
+    },
+    "ReportsNestedStackReportsNestedStackResource7B21D4C6": {
+      "Type": "AWS::CloudFormation::Stack",
+      "Properties": {
+        "TemplateURL": {
+          "Fn::Join": [
+            "",
+            [
+              "https://s3.",
+              { "Ref": "AWS::Region" },
+              ".",
+              { "Ref": "AWS::URLSuffix" },
+              "/cdk-hnb659fds-assets-",
+              { "Ref": "AWS::AccountId" },
+              "-",
+              { "Ref": "AWS::Region" },
+              "/1a2b3c4d5e6f70819a2b3c4d5e6f70819a2b3c4d5e6f70819a2b3c4d5e6f7081.json"
+            ]
+          ]
+        }
+      },
+      "UpdateReplacePolicy": "Delete",
+      "DeletionPolicy": "Delete",
+      "Metadata": {
+        "aws:cdk:path": "AppStack/Reports.NestedStack/Reports.NestedStackResource"
+      }
+    },
+    "CDKMetadata": {
+      "Type": "AWS::CDK::Metadata",
+      "Properties": {
+        "Analytics": "v2:deflate64:H4sIAAAAAAAA/y2K0QqAIAwAv8V3XVEE9V4fEEQfIGtJmDrYVoT4740ed3fY4wr7BgtCvIYuBl+w7gLuoIm2y9lgAWJv6TylOUYVXpLK5x0Ipp98yRz5Uqz+MvzQZlvibDpsMK1SUteYWvwNyxu2AlgAAAA="
+      },
+      "Metadata": {
+        "aws:cdk:path": "AppStack/CDKMetadata/Default"
+      }
+    }
+  },
+  "Outputs": {
+    "QueueUrl": {
+      "Value": { "Ref": "ApiQueue4A6E9832" }
+    }
+  }
+}

package/src/cdk/__fixtures__/cdk.out/DataStack.template.json

@@ -0,0 +1,90 @@
+{
+  "Parameters": {
+    "BootstrapVersion": {
+      "Type": "AWS::SSM::Parameter::Value<String>",
+      "Default": "/cdk-bootstrap/hnb659fds/version",
+      "Description": "Version of the CDK Bootstrap resources in this environment"
+    }
+  },
+  "Resources": {
+    "Assets675B7A57": {
+      "Type": "AWS::S3::Bucket",
+      "Properties": {
+        "BucketName": "myapp-assets-prod",
+        "VersioningConfiguration": { "Status": "Enabled" }
+      },
+      "UpdateReplacePolicy": "Retain",
+      "DeletionPolicy": "Retain",
+      "Metadata": {
+        "aws:cdk:path": "DataStack/Assets/Resource"
+      }
+    },
+    "AssetsPolicyE8B0F1C2": {
+      "Type": "AWS::S3::BucketPolicy",
+      "Properties": {
+        "Bucket": { "Ref": "Assets675B7A57" },
+        "PolicyDocument": {
+          "Statement": [
+            {
+              "Action": "s3:*",
+              "Condition": { "Bool": { "aws:SecureTransport": "false" } },
+              "Effect": "Deny",
+              "Principal": { "AWS": "*" },
+              "Resource": [
+                { "Fn::GetAtt": ["Assets675B7A57", "Arn"] },
+                { "Fn::Join": ["", [{ "Fn::GetAtt": ["Assets675B7A57", "Arn"] }, "/*"]] }
+              ]
+            }
+          ],
+          "Version": "2012-10-17"
+        }
+      },
+      "Metadata": {
+        "aws:cdk:path": "DataStack/Assets/Policy/Resource"
+      }
+    },
+    "Table778B6D2C": {
+      "Type": "AWS::DynamoDB::Table",
+      "Properties": {
+        "AttributeDefinitions": [{ "AttributeName": "pk", "AttributeType": "S" }],
+        "BillingMode": "PAY_PER_REQUEST",
+        "KeySchema": [{ "AttributeName": "pk", "KeyType": "HASH" }]
+      },
+      "UpdateReplacePolicy": "Delete",
+      "DeletionPolicy": "Delete",
+      "Metadata": {
+        "aws:cdk:path": "DataStack/Table/Resource"
+      }
+    },
+    "CDKMetadata": {
+      "Type": "AWS::CDK::Metadata",
+      "Properties": {
+        "Analytics": "v2:deflate64:H4sIAAAAAAAA/y2K0QqAIAwAv8V3XVEE9V4fEEQfIGtJmDrYVoT4740ed3fY4wr7BgtCvIYuBl+w7gLuoIm2y9lgAWJv6TylOUYVXpLK5x0Ipp98yRz5Uqz+MvzQZlvibDpsMK1SUteYWvwNyxu2AlgAAAA="
+      },
+      "Metadata": {
+        "aws:cdk:path": "DataStack/CDKMetadata/Default"
+      }
+    }
+  },
+  "Outputs": {
+    "ExportsOutputFnGetAttAssets675B7A57ArnE0B2A4A8": {
+      "Value": { "Fn::GetAtt": ["Assets675B7A57", "Arn"] },
+      "Export": { "Name": "DataStack:ExportsOutputFnGetAttAssets675B7A57ArnE0B2A4A8" }
+    },
+    "TableName": {
+      "Value": { "Ref": "Table778B6D2C" }
+    }
+  },
+  "Rules": {
+    "CheckBootstrapVersion": {
+      "Assertions": [
+        {
+          "Assert": {
+            "Fn::Not": [{ "Fn::Contains": [["1", "2", "3", "4", "5"], { "Ref": "BootstrapVersion" }] }]
+          },
+          "AssertDescription": "CDK bootstrap stack version 6 required."
+        }
+      ]
+    }
+  }
+}

package/src/cdk/__fixtures__/cdk.out/cdk.out

@@ -0,0 +1 @@
+{"version":"36.0.0"}

package/src/cdk/__fixtures__/cdk.out/manifest.json

@@ -0,0 +1,30 @@
+{
+  "version": "36.0.0",
+  "artifacts": {
+    "DataStack": {
+      "type": "aws:cloudformation:stack",
+      "environment": "aws://unknown-account/unknown-region",
+      "properties": {
+        "templateFile": "DataStack.template.json",
+        "validateOnSynth": false
+      },
+      "displayName": "DataStack"
+    },
+    "AppStack": {
+      "type": "aws:cloudformation:stack",
+      "environment": "aws://unknown-account/unknown-region",
+      "properties": {
+        "templateFile": "AppStack.template.json",
+        "validateOnSynth": false
+      },
+      "dependencies": ["DataStack"],
+      "displayName": "AppStack"
+    },
+    "Tree": {
+      "type": "cdk:tree",
+      "properties": {
+        "file": "tree.json"
+      }
+    }
+  }
+}