@intentius/behold 0.17.0 → 0.19.0

package/THIRD_PARTY.md

@@ -0,0 +1,75 @@
+# Third-party bundled data
+
+## Color themes (`web/themes.js`)
+
+The full corpus of color schemes vendored in [`web/themes.js`](./web/themes.js) is generated
+from **[iTerm2-Color-Schemes](https://github.com/mbadolato/iTerm2-Color-Schemes)** (MIT) — the
+collection bundled by the [Ghostty](https://ghostty.org) terminal — at a pinned commit (see the
+header of `web/themes.js` for the exact revision and source URL).
+
+The bundled license is retained verbatim at
+[`licenses/iTerm2-Color-Schemes-LICENSE`](./licenses/iTerm2-Color-Schemes-LICENSE).
+
+Individual theme families — **Catppuccin, Dracula, Nord, Gruvbox, Tokyo Night, Solarized,
+Rosé Pine**, and many others — are the work of their respective authors and carry their own
+licenses; iTerm2-Color-Schemes aggregates them with attribution. Nothing here is modified: the
+palettes are used as published.
+
+## Kubernetes resource icons (`web/icons/k8s/`)
+
+The 30 SVGs in [`web/icons/k8s/`](./web/icons/k8s) are the unlabeled resource set from
+**[kubernetes/community](https://github.com/kubernetes/community)**, taken from
+`icons/svg/resources/unlabeled/` at pinned revision
+[`920f1d89`](https://github.com/kubernetes/community/tree/920f1d89cb3d0a7ff0591ef9223864c552f9e589/icons/svg/resources/unlabeled).
+The set is dual-licensed **Apache-2.0 OR CC-BY-4.0**; behold uses it under **Apache-2.0**.
+The bundled license is retained verbatim at
+[`licenses/kubernetes-icons-LICENSE`](./licenses/kubernetes-icons-LICENSE).
+
+The Kubernetes logo and name are trademarks of The Linux Foundation, used here only to
+identify Kubernetes resources. behold is not affiliated with, sponsored by, or endorsed by
+the Kubernetes project or The Linux Foundation.
+
+What is modified: lightly minified, otherwise as published. The XML prolog, comments and
+Inkscape editor state (`<metadata>`, `<sodipodi:namedview>`) are dropped, inter-tag whitespace
+is collapsed, and `id`/`class` names are namespaced per file so several icon bodies inlined
+into one document cannot collide. No geometry is touched; every path is byte-identical to
+upstream. [`scripts/vendor-icons.mjs`](./scripts/vendor-icons.mjs) re-fetches the corpus at
+the pinned revision, and `--check` asserts the working tree still matches it.
+
+At render time one further step happens to the copy in memory, never to the file on disk:
+[`src/icon-packs.ts`](./src/icon-packs.ts) splices each body into the graph SVG without its
+root `<svg>`, so the remaining `inkscape:`/`sodipodi:` attributes — which that root declared
+the namespaces for — are dropped and `xlink:href` becomes the plain SVG 2 `href`. Editor
+state only; nothing that paints.
+
+## Flux, Argo and Helm project marks (`web/icons/cncf/`)
+
+The three marks in [`web/icons/cncf/`](./web/icons/cncf) are the color icon variants from
+**[cncf/artwork](https://github.com/cncf/artwork)** at pinned revision
+[`bad6b7fd`](https://github.com/cncf/artwork/tree/bad6b7fd04344be33d79b4ad60d9ea83321d690c),
+taken from `projects/flux/icon/color/`, `projects/argo/icon/color/` and
+`projects/helm/icon/color/`.
+
+cncf/artwork makes its artwork available under the **Linux Foundation trademark usage
+guidelines**, retained verbatim at
+[`licenses/cncf-artwork-LICENSE.md`](./licenses/cncf-artwork-LICENSE.md). behold's use is
+nominative: each mark appears only on the graph node for a resource of that project, to say
+which project the resource belongs to. Flux, Argo and Helm are trademarks of The Linux
+Foundation, and their appearance here implies no affiliation with, sponsorship by, or
+endorsement from those projects, the CNCF, or The Linux Foundation.
+
+What is modified: the same light minification and per-file namespacing as the Kubernetes set,
+described above. No geometry, no color and no proportion is altered, which is what the usage
+guidelines require.
+
+At render time the Helm mark alone is given a background, never the file on disk (#246). The
+`icon/color` variants are drawn for a light ground, and the Helm one is the only mark in the
+set that is line art on transparent rather than a filled badge — so at the 22px card slot it
+would read against whatever the graph card happens to be, which on a dark theme is near-black.
+[`src/icon-packs.ts`](./src/icon-packs.ts) therefore paints an opaque white square behind it
+and scales the mark uniformly to sit inside, with clear space on all four sides. The mark's
+geometry, its color and its proportions are untouched; it is placed on the ground it was
+drawn for.
+
+See [`CREDITS.md`](./CREDITS.md) for prior-art acknowledgements, including the theme engine this
+one is adopted from.

package/demos.json

@@ -5,26 +5,49 @@
       "description": "One S3 bucket + policy on a local Floci emulator — blue to green in five minutes. The default.",
       "source": "bundled",
       "dir": "example-writes",
-      "requires": ["docker"],
-      "serve": { "local": true, "env": "prod" }
+      "requires": [
+        "docker"
+      ],
+      "serve": {
+        "local": true,
+        "env": "prod"
+      }
     },
     {
       "name": "k8s",
       "description": "An nginx Deployment + Service on a throwaway k3d cluster — runtime children (Pods), field ownership, honest unobserved. Cluster persists across runs; scripts/local/local-down.sh removes it.",
       "source": "bundled",
       "dir": "example-k8s",
-      "requires": ["docker", "k3d", "kubectl"],
+      "requires": [
+        "docker",
+        "k3d",
+        "kubectl"
+      ],
       "setup": "bash scripts/local/local-up.sh",
-      "serve": { "local": true, "env": "local" }
+      "serve": {
+        "local": true,
+        "env": "local"
+      }
     },
     {
       "name": "flux-estate",
       "description": "A GitOps estate: a Flux control plane (GitRepository + Kustomizations) plus two app projects, served as one composed estate — cross-stack sourceRef edges, estate-wide drift, and the namespace join that reads app-b where the control plane's targetNamespace puts it. k3d + Flux, no cloud. scripts/estate-down.sh removes the cluster.",
       "source": "bundled",
       "dir": "example-flux-estate",
-      "requires": ["docker", "k3d", "kubectl"],
+      "requires": [
+        "docker",
+        "k3d",
+        "kubectl"
+      ],
       "setup": "bash scripts/estate-up.sh",
-      "serve": { "env": "local", "dirs": ["control-plane", "app-a", "app-b"] }
+      "serve": {
+        "env": "local",
+        "dirs": [
+          "control-plane",
+          "app-a",
+          "app-b"
+        ]
+      }
     },
     {
       "name": "argo-estate",
@@ -32,7 +55,21 @@
       "source": "bundled",
       "dir": "example-argo-estate",
       "requires": [],
-      "serve": { "dirs": ["control-plane", "app-a", "app-b"] }
+      "serve": {
+        "dirs": [
+          "control-plane",
+          "app-a",
+          "app-b"
+        ]
+      }
+    },
+    {
+      "name": "terraform-estate",
+      "description": "A multi-root Terraform estate, declared only: two roots applied separately (envs/prod and platform) plus the shared module both are built on — 37 cards boxed by root, module calls expanded into their own contents, and the two look-alike versions.tf files told apart. Shows what behold does NOT infer as clearly as what it draws: platform declares the KMS key and prod reads it back by alias, and no edge is drawn between them, because both ends carry the same unresolved interpolation (#381). Needs chant's terraform lexicon beside behold, which behold does not install: npm install --no-save @intentius/chant-lexicon-terraform @cdktf/hcl2json (the refusal names the exact line). No cloud, no Docker, no terraform binary.",
+      "source": "bundled",
+      "dir": "example-terraform-estate",
+      "requires": [],
+      "serve": {}
     },
     {
       "name": "carve",
@@ -50,14 +87,48 @@
         }
       }
     },
+    {
+      "name": "choudoufu-estate",
+      "description": "A tag-owned estate: four choudoufu estates (an OpenTofu fork whose ownership is two AWS tags) served composed — the terralith applied to a scratch floci, three team estates whose declared resources are the monolith's (every card `owned by` it, dashed to its card), a cross-estate data-source edge, and a move plan whose `live-mv` lines you run by hand while behold previews with -dry-run and reads the receipt. A card's colour is ownership, not \"nothing changed\": attribute drift is a separate plan read, opt-in through ⌘K → \"Re-check live with plan\". Docker + choudoufu (0.16.0+, or a build from main) on PATH; provider download on first init. scripts/choudoufu-down.sh removes the container.",
+      "source": "bundled",
+      "dir": "example-choudoufu-estate",
+      "requires": [
+        "docker",
+        "choudoufu"
+      ],
+      "setup": "bash scripts/choudoufu-up.sh",
+      "serve": {
+        "env": "live",
+        "dirs": [
+          "monolith",
+          "team-a",
+          "team-b",
+          "team-c"
+        ],
+        "spawnEnv": {
+          "AWS_ENDPOINT_URL": "http://127.0.0.1:4650",
+          "AWS_ACCESS_KEY_ID": "test",
+          "AWS_SECRET_ACCESS_KEY": "test",
+          "AWS_REGION": "us-east-1"
+        }
+      }
+    },
     {
       "name": "fountain",
       "description": "The mature estate: self-hosted fountain (a real app) on a throwaway k3d cluster — tiers (try the ha tier picker), seams, drift, runtime Pods. Clones INTENTIUS/fountain-ops; ~5 minutes, mostly image pulls. `just down` in the clone removes the cluster.",
       "source": "git",
       "repo": "https://github.com/INTENTIUS/fountain-ops",
-      "requires": ["docker", "k3d", "kubectl", "jq", "just"],
+      "requires": [
+        "docker",
+        "k3d",
+        "kubectl",
+        "jq",
+        "just"
+      ],
       "setup": "just up",
-      "serve": { "env": "local" }
+      "serve": {
+        "env": "local"
+      }
     }
   ]
 }