@intentius/behold 0.8.0 → 0.9.1

package/example-flux-estate/app-a/src/app.ts

@@ -1,7 +1,8 @@
 // App A: one small web workload, namespace declared EXPLICITLY on every
 // object. Contrast app-b, which leaves namespace to the control plane's
 // targetNamespace — the two apps together show both halves of the Flux
-// namespace story (behold#192).
+// namespace story: behold#192's note when app-b is served alone, behold#221's
+// estate join when the three projects are served composed.
 import { Deployment, Service } from "@intentius/chant-lexicon-k8s";
 
 const labels = { app: "app-a" };

package/example-flux-estate/app-b/chant.config.ts

@@ -4,9 +4,10 @@ import type { K8sChantConfig } from "@intentius/chant-lexicon-k8s";
 // App project B — the targetNamespace half of the estate: its objects declare
 // no metadata.namespace (see src/app.ts), so the control plane's
 // Kustomization stamps `app-b` at apply time. That is idiomatic Flux, AND it
-// means a plain live read scopes to `default` and finds nothing — behold's
-// namespace-mismatch note (behold#192) names exactly this, on purpose, in
-// this demo.
+// means a live read of THIS PROJECT ALONE scopes to `default` and finds
+// nothing — behold's namespace-mismatch note (behold#192) names exactly this,
+// on purpose, in this demo. Composed with the control plane, behold joins the
+// binding and reads `app-b` instead (behold#221).
 export default {
   lexicons: ["k8s"],
   sourceDir: "src",

package/example-flux-estate/app-b/package.json

@@ -7,7 +7,7 @@
     "build": "chant build src -o manifests/app.yaml --format yaml"
   },
   "dependencies": {
-    "@intentius/chant": "^0.44.3",
-    "@intentius/chant-lexicon-k8s": "^0.44.3"
+    "@intentius/chant": "^0.44.7",
+    "@intentius/chant-lexicon-k8s": "^0.44.7"
   }
 }

package/example-flux-estate/app-b/src/app.ts

@@ -1,9 +1,11 @@
 // App B: same small workload as app-a, with NO metadata.namespace anywhere —
 // the control plane's Kustomization stamps targetNamespace: app-b at apply
 // time. Idiomatic Flux (that's what the field is for), and the deliberate
-// exhibit of behold's namespace-mismatch note (behold#192): a plain live read
-// scopes to `default`, finds nothing, and behold explains the all-pending
-// paint instead of letting it read as "not deployed".
+// exhibit of behold's estate namespace join (behold#221): served ALONE this
+// project's live read scopes to `default`, finds nothing, and behold explains
+// the all-pending paint with its namespace-mismatch note (behold#192) rather
+// than letting it read as "not deployed". Served COMPOSED, the estate reads
+// the binding off ../../control-plane and scopes the read to `app-b`.
 import { Deployment, Service } from "@intentius/chant-lexicon-k8s";
 
 const labels = { app: "app-b" };

package/example-flux-estate/control-plane/package.json

@@ -7,7 +7,7 @@
     "build": "chant build src -o dist/control-plane.yaml --format yaml"
   },
   "dependencies": {
-    "@intentius/chant": "^0.44.3",
-    "@intentius/chant-lexicon-k8s": "^0.44.3"
+    "@intentius/chant": "^0.44.7",
+    "@intentius/chant-lexicon-k8s": "^0.44.7"
   }
 }

package/example-flux-estate/control-plane/src/flux.ts

@@ -3,8 +3,10 @@
 // Kustomization applies one app project's committed manifests into that app's
 // namespace via targetNamespace — which is why app-b's objects declare no
 // metadata.namespace (see ../../app-b/src/app.ts): Flux stamps it at apply
-// time. That is the normal Flux estate shape, and exactly the shape behold's
-// namespace-mismatch note (behold#192) exists to explain.
+// time. That is the normal Flux estate shape — the one behold#192's note
+// explains for a project served alone, and the one behold#221's estate join
+// resolves outright by reading `targetNamespace` off the Kustomizations
+// below and scoping app-b's live read to it.
 //
 // scripts/estate-up.sh applies the BUILT form of this project (chant build →
 // dist/control-plane.yaml) once, after installing Flux; from then on the

package/example-flux-estate/package-lock.json

@@ -14,22 +14,22 @@
     "app-a": {
       "name": "behold-example-flux-app-a",
       "dependencies": {
-        "@intentius/chant": "^0.44.3",
-        "@intentius/chant-lexicon-k8s": "^0.44.3"
+        "@intentius/chant": "^0.44.7",
+        "@intentius/chant-lexicon-k8s": "^0.44.7"
       }
     },
     "app-b": {
       "name": "behold-example-flux-app-b",
       "dependencies": {
-        "@intentius/chant": "^0.44.3",
-        "@intentius/chant-lexicon-k8s": "^0.44.3"
+        "@intentius/chant": "^0.44.7",
+        "@intentius/chant-lexicon-k8s": "^0.44.7"
       }
     },
     "control-plane": {
       "name": "behold-example-flux-control-plane",
       "dependencies": {
-        "@intentius/chant": "^0.44.3",
-        "@intentius/chant-lexicon-k8s": "^0.44.3"
+        "@intentius/chant": "^0.44.7",
+        "@intentius/chant-lexicon-k8s": "^0.44.7"
       }
     },
     "node_modules/@dagrejs/dagre": {
@@ -464,9 +464,9 @@
       }
     },
     "node_modules/@intentius/chant": {
-      "version": "0.44.3",
-      "resolved": "https://registry.npmjs.org/@intentius/chant/-/chant-0.44.3.tgz",
-      "integrity": "sha512-OVqkUberFaCGn0yrHQn5afzs9i6kRbArZU/AA68pfhh2O8gEfVkVqRO2z4pcF/1W+Lolp1o5aaxj51vqa6yrXA==",
+      "version": "0.44.7",
+      "resolved": "https://registry.npmjs.org/@intentius/chant/-/chant-0.44.7.tgz",
+      "integrity": "sha512-etCchkfbWFHJ+XnTYVVn9GT4/gZi/O8SVphDXHeuPOfK5VvRxo0unveIUEsuRoHGHgzN9Y+aj0Jk15xhIE7Gzg==",
       "license": "Apache-2.0",
       "dependencies": {
         "@dagrejs/dagre": "^3.0.0",
@@ -482,9 +482,9 @@
       }
     },
     "node_modules/@intentius/chant-k8s-client": {
-      "version": "0.44.3",
-      "resolved": "https://registry.npmjs.org/@intentius/chant-k8s-client/-/chant-k8s-client-0.44.3.tgz",
-      "integrity": "sha512-BWNatONqGzPDnZIlBk/5Dze9ANk8NgynvLYcjPJMuBg5EfyUZETt17fq3PsKP2IiOR/fm+ZWHb2mZ3+qEEkfgA==",
+      "version": "0.44.7",
+      "resolved": "https://registry.npmjs.org/@intentius/chant-k8s-client/-/chant-k8s-client-0.44.7.tgz",
+      "integrity": "sha512-G9VVki/qHZ+hbKrxDDnVVhfeZWoHgozLA7tjcY/lsa/fDIwI0xMJnAN/DJNcQLBpRscXm3y3Ki/PNQ9SxshmLA==",
       "license": "Apache-2.0",
       "optional": true,
       "dependencies": {
@@ -492,19 +492,19 @@
       }
     },
     "node_modules/@intentius/chant-lexicon-k8s": {
-      "version": "0.44.3",
-      "resolved": "https://registry.npmjs.org/@intentius/chant-lexicon-k8s/-/chant-lexicon-k8s-0.44.3.tgz",
-      "integrity": "sha512-7JNg5Hlrqr3vl0iEhQcwUopandy1g4FCkGipFikbDp1KoXyp8QOJaovOOR0nUQ/wRhiRXYJX5Cg13cs0FsNbjQ==",
+      "version": "0.44.7",
+      "resolved": "https://registry.npmjs.org/@intentius/chant-lexicon-k8s/-/chant-lexicon-k8s-0.44.7.tgz",
+      "integrity": "sha512-h8QXOYoxjsAeA1w8koLQlZqOuSQcvWpEHKmwlf0AKPgwuVRiapwJI+UtuoBwL/AOrBKDh6Z5pW3zbo6vDltGvA==",
       "license": "Apache-2.0",
       "dependencies": {
         "@types/js-yaml": "^4.0.9",
         "js-yaml": "^4.1.1"
       },
       "optionalDependencies": {
-        "@intentius/chant-k8s-client": "^0.44.3"
+        "@intentius/chant-k8s-client": "^0.44.7"
       },
       "peerDependencies": {
-        "@intentius/chant": "^0.44.3",
+        "@intentius/chant": "^0.44.7",
         "typescript": "^5.9.3",
         "zod": "^4.3.6"
       }
@@ -1071,9 +1071,9 @@
       }
     },
     "node_modules/ip-address": {
-      "version": "10.4.0",
-      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.4.0.tgz",
-      "integrity": "sha512-oSK96Grm3aP6OrS263xVxbNDGVL7rzBtYdpGqlDG8iQdoenDoTs/nkki+DflYbAEE8Xl6o5YxhxlrKvI3nqKXQ==",
+      "version": "10.5.0",
+      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.5.0.tgz",
+      "integrity": "sha512-R5SnVLJmgYYvf2F2ZgwSBnelz5G4q5AxIC277GDfUaNbrZKNANcBC7RHqYYePlszf4kBolVkJauG0ZjHHFh55g==",
       "license": "MIT",
       "optional": true,
       "engines": {

package/example-k8s/package-lock.json

@@ -6,9 +6,9 @@
     "": {
       "name": "behold-example-k8s",
       "dependencies": {
-        "@intentius/chant": "^0.44.3",
-        "@intentius/chant-lexicon-k8s": "^0.44.3",
-        "@intentius/chant-lexicon-temporal": "^0.44.3"
+        "@intentius/chant": "^0.44.7",
+        "@intentius/chant-lexicon-k8s": "^0.44.7",
+        "@intentius/chant-lexicon-temporal": "^0.44.7"
       }
     },
     "node_modules/@dagrejs/dagre": {
@@ -443,9 +443,9 @@
       }
     },
     "node_modules/@intentius/chant": {
-      "version": "0.44.3",
-      "resolved": "https://registry.npmjs.org/@intentius/chant/-/chant-0.44.3.tgz",
-      "integrity": "sha512-OVqkUberFaCGn0yrHQn5afzs9i6kRbArZU/AA68pfhh2O8gEfVkVqRO2z4pcF/1W+Lolp1o5aaxj51vqa6yrXA==",
+      "version": "0.44.7",
+      "resolved": "https://registry.npmjs.org/@intentius/chant/-/chant-0.44.7.tgz",
+      "integrity": "sha512-etCchkfbWFHJ+XnTYVVn9GT4/gZi/O8SVphDXHeuPOfK5VvRxo0unveIUEsuRoHGHgzN9Y+aj0Jk15xhIE7Gzg==",
       "license": "Apache-2.0",
       "dependencies": {
         "@dagrejs/dagre": "^3.0.0",
@@ -461,9 +461,9 @@
       }
     },
     "node_modules/@intentius/chant-k8s-client": {
-      "version": "0.44.3",
-      "resolved": "https://registry.npmjs.org/@intentius/chant-k8s-client/-/chant-k8s-client-0.44.3.tgz",
-      "integrity": "sha512-BWNatONqGzPDnZIlBk/5Dze9ANk8NgynvLYcjPJMuBg5EfyUZETt17fq3PsKP2IiOR/fm+ZWHb2mZ3+qEEkfgA==",
+      "version": "0.44.7",
+      "resolved": "https://registry.npmjs.org/@intentius/chant-k8s-client/-/chant-k8s-client-0.44.7.tgz",
+      "integrity": "sha512-G9VVki/qHZ+hbKrxDDnVVhfeZWoHgozLA7tjcY/lsa/fDIwI0xMJnAN/DJNcQLBpRscXm3y3Ki/PNQ9SxshmLA==",
       "license": "Apache-2.0",
       "optional": true,
       "dependencies": {
@@ -471,34 +471,34 @@
       }
     },
     "node_modules/@intentius/chant-lexicon-k8s": {
-      "version": "0.44.3",
-      "resolved": "https://registry.npmjs.org/@intentius/chant-lexicon-k8s/-/chant-lexicon-k8s-0.44.3.tgz",
-      "integrity": "sha512-7JNg5Hlrqr3vl0iEhQcwUopandy1g4FCkGipFikbDp1KoXyp8QOJaovOOR0nUQ/wRhiRXYJX5Cg13cs0FsNbjQ==",
+      "version": "0.44.7",
+      "resolved": "https://registry.npmjs.org/@intentius/chant-lexicon-k8s/-/chant-lexicon-k8s-0.44.7.tgz",
+      "integrity": "sha512-h8QXOYoxjsAeA1w8koLQlZqOuSQcvWpEHKmwlf0AKPgwuVRiapwJI+UtuoBwL/AOrBKDh6Z5pW3zbo6vDltGvA==",
       "license": "Apache-2.0",
       "dependencies": {
         "@types/js-yaml": "^4.0.9",
         "js-yaml": "^4.1.1"
       },
       "optionalDependencies": {
-        "@intentius/chant-k8s-client": "^0.44.3"
+        "@intentius/chant-k8s-client": "^0.44.7"
       },
       "peerDependencies": {
-        "@intentius/chant": "^0.44.3",
+        "@intentius/chant": "^0.44.7",
         "typescript": "^5.9.3",
         "zod": "^4.3.6"
       }
     },
     "node_modules/@intentius/chant-lexicon-temporal": {
-      "version": "0.44.3",
-      "resolved": "https://registry.npmjs.org/@intentius/chant-lexicon-temporal/-/chant-lexicon-temporal-0.44.3.tgz",
-      "integrity": "sha512-nGoqEeJu70OH3WlQZXz5P+sz6eW6hcy/gpZYHtxxn1hoPVEpG8yCI+Z//mjeGDWfbfoDBsIj4AekDY/QPzefJw==",
+      "version": "0.44.7",
+      "resolved": "https://registry.npmjs.org/@intentius/chant-lexicon-temporal/-/chant-lexicon-temporal-0.44.7.tgz",
+      "integrity": "sha512-tA7DaXGG9dsHwbMO7SNQhdVnpgsdTtZNyRexS9MdVgS4xuWHIV9N76oISEd2hK76vwPXBD/d/e+2OT6amlse1A==",
       "license": "Apache-2.0",
       "dependencies": {
         "@temporalio/common": "^1.17.2",
         "js-yaml": "^4.1.1"
       },
       "peerDependencies": {
-        "@intentius/chant": "^0.44.3",
+        "@intentius/chant": "^0.44.7",
         "typescript": "^5.9.3",
         "zod": "^4.3.6"
       }
@@ -1145,9 +1145,9 @@
       }
     },
     "node_modules/ip-address": {
-      "version": "10.4.0",
-      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.4.0.tgz",
-      "integrity": "sha512-oSK96Grm3aP6OrS263xVxbNDGVL7rzBtYdpGqlDG8iQdoenDoTs/nkki+DflYbAEE8Xl6o5YxhxlrKvI3nqKXQ==",
+      "version": "10.5.0",
+      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.5.0.tgz",
+      "integrity": "sha512-R5SnVLJmgYYvf2F2ZgwSBnelz5G4q5AxIC277GDfUaNbrZKNANcBC7RHqYYePlszf4kBolVkJauG0ZjHHFh55g==",
       "license": "MIT",
       "optional": true,
       "engines": {

package/example-k8s/package.json

@@ -7,8 +7,8 @@
     "build": "./node_modules/.bin/chant build src --lexicon k8s -o app.yaml"
   },
   "dependencies": {
-    "@intentius/chant": "^0.44.3",
-    "@intentius/chant-lexicon-k8s": "^0.44.3",
-    "@intentius/chant-lexicon-temporal": "^0.44.3"
+    "@intentius/chant": "^0.44.7",
+    "@intentius/chant-lexicon-k8s": "^0.44.7",
+    "@intentius/chant-lexicon-temporal": "^0.44.7"
   }
 }

package/example-writes/package-lock.json

@@ -6,9 +6,9 @@
     "": {
       "name": "behold-example-writes",
       "dependencies": {
-        "@intentius/chant": "^0.44.3",
-        "@intentius/chant-lexicon-aws": "^0.44.3",
-        "@intentius/chant-lexicon-temporal": "^0.44.3"
+        "@intentius/chant": "^0.44.7",
+        "@intentius/chant-lexicon-aws": "^0.44.7",
+        "@intentius/chant-lexicon-temporal": "^0.44.7"
       }
     },
     "node_modules/@dagrejs/dagre": {
@@ -443,9 +443,9 @@
       }
     },
     "node_modules/@intentius/chant": {
-      "version": "0.44.3",
-      "resolved": "https://registry.npmjs.org/@intentius/chant/-/chant-0.44.3.tgz",
-      "integrity": "sha512-OVqkUberFaCGn0yrHQn5afzs9i6kRbArZU/AA68pfhh2O8gEfVkVqRO2z4pcF/1W+Lolp1o5aaxj51vqa6yrXA==",
+      "version": "0.44.7",
+      "resolved": "https://registry.npmjs.org/@intentius/chant/-/chant-0.44.7.tgz",
+      "integrity": "sha512-etCchkfbWFHJ+XnTYVVn9GT4/gZi/O8SVphDXHeuPOfK5VvRxo0unveIUEsuRoHGHgzN9Y+aj0Jk15xhIE7Gzg==",
       "license": "Apache-2.0",
       "dependencies": {
         "@dagrejs/dagre": "^3.0.0",
@@ -461,30 +461,30 @@
       }
     },
     "node_modules/@intentius/chant-lexicon-aws": {
-      "version": "0.44.3",
-      "resolved": "https://registry.npmjs.org/@intentius/chant-lexicon-aws/-/chant-lexicon-aws-0.44.3.tgz",
-      "integrity": "sha512-XTszLZNGHfsP3HnU65b1cEJ7NA1tjOvWMgqOCQptCelAo9uycct47IKkK1CHaP+0H/WQg0fKLZEXCLycp5l1sQ==",
+      "version": "0.44.7",
+      "resolved": "https://registry.npmjs.org/@intentius/chant-lexicon-aws/-/chant-lexicon-aws-0.44.7.tgz",
+      "integrity": "sha512-tlwcUv0zN5rTupRdJHdcYSsKbodiVjYaBAwG/omK4hYPtys3dZMjLVOt8bszBeTKp+h8boIEjhwpgQKpDAGmcQ==",
       "license": "Apache-2.0",
       "dependencies": {
         "fflate": "^0.8.2",
         "js-yaml": "^4.1.0"
       },
       "peerDependencies": {
-        "@intentius/chant": "^0.44.3",
+        "@intentius/chant": "^0.44.7",
         "typescript": "^5.9.3"
       }
     },
     "node_modules/@intentius/chant-lexicon-temporal": {
-      "version": "0.44.3",
-      "resolved": "https://registry.npmjs.org/@intentius/chant-lexicon-temporal/-/chant-lexicon-temporal-0.44.3.tgz",
-      "integrity": "sha512-nGoqEeJu70OH3WlQZXz5P+sz6eW6hcy/gpZYHtxxn1hoPVEpG8yCI+Z//mjeGDWfbfoDBsIj4AekDY/QPzefJw==",
+      "version": "0.44.7",
+      "resolved": "https://registry.npmjs.org/@intentius/chant-lexicon-temporal/-/chant-lexicon-temporal-0.44.7.tgz",
+      "integrity": "sha512-tA7DaXGG9dsHwbMO7SNQhdVnpgsdTtZNyRexS9MdVgS4xuWHIV9N76oISEd2hK76vwPXBD/d/e+2OT6amlse1A==",
       "license": "Apache-2.0",
       "dependencies": {
         "@temporalio/common": "^1.17.2",
         "js-yaml": "^4.1.1"
       },
       "peerDependencies": {
-        "@intentius/chant": "^0.44.3",
+        "@intentius/chant": "^0.44.7",
         "typescript": "^5.9.3",
         "zod": "^4.3.6"
       }

package/example-writes/package.json

@@ -7,8 +7,8 @@
     "build": "./node_modules/.bin/chant build src --lexicon aws -o template.json"
   },
   "dependencies": {
-    "@intentius/chant": "^0.44.3",
-    "@intentius/chant-lexicon-aws": "^0.44.3",
-    "@intentius/chant-lexicon-temporal": "^0.44.3"
+    "@intentius/chant": "^0.44.7",
+    "@intentius/chant-lexicon-aws": "^0.44.7",
+    "@intentius/chant-lexicon-temporal": "^0.44.7"
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/behold",
-  "version": "0.8.0",
+  "version": "0.9.1",
   "type": "module",
   "description": "behold — a live control plane on chant. See your whole estate (every substrate in one graph), coloured by drift; act through delegated, gated Ops.",
   "bin": {
@@ -14,6 +14,7 @@
     "example-k8s",
     "example-flux-estate",
     "example-argo-estate",
+    "example-carve",
     "demos.json",
     "AGENTS.md"
   ],
@@ -25,18 +26,19 @@
     "dev": "tsx src/cli.ts",
     "demo": "npm --prefix example-writes install && tsx src/cli.ts serve example-writes --local --env prod",
     "demo:k8s": "bash example-k8s/scripts/local/local-up.sh; npm --prefix example-k8s install && tsx src/cli.ts serve example-k8s --local --env local; bash example-k8s/scripts/local/local-down.sh",
-    "smoke:ui": "node smoke/ui-smoke.mjs",
+    "smoke:ui": "tsx smoke/ui-smoke.mjs",
     "tsc": "tsc --noEmit",
     "test": "vitest run",
-    "build": "esbuild src/cli.ts --bundle --platform=node --format=esm --external:hono --external:@hono/node-server --external:@intentius/pinhole --outfile=dist/cli.js && chmod +x dist/cli.js",
+    "build": "esbuild src/cli.ts --bundle --platform=node --format=esm --external:hono --external:@hono/node-server --external:@intentius/pinhole --external:@kubernetes/client-node --outfile=dist/cli.js && chmod +x dist/cli.js",
     "prepare": "npm run build",
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "@hono/node-server": "^1.13.0",
+    "@hono/node-server": "^2.0.5",
     "@intentius/chant": "^0.38.0",
-    "@intentius/pinhole": "^0.3.1",
-    "hono": "^4.6.0"
+    "@intentius/chant-k8s-client": "^0.44.5",
+    "@intentius/pinhole": "^0.3.3",
+    "hono": "^4.12.34"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",