@intentius/behold 0.9.0 → 0.10.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (23) hide show
  1. package/README.md +5 -4
  2. package/dist/cli.js +463 -137
  3. package/example-argo-estate/app-a/package.json +2 -2
  4. package/example-argo-estate/app-b/package.json +2 -2
  5. package/example-argo-estate/control-plane/package.json +2 -2
  6. package/example-argo-estate/package-lock.json +20 -20
  7. package/example-carve/README.md +89 -55
  8. package/example-carve/app/package-lock.json +9 -9
  9. package/example-carve/app/package.json +2 -2
  10. package/example-carve/carve-report.json +140 -50
  11. package/example-carve/legacy-tf/outputs.tf +9 -4
  12. package/example-flux-estate/app-a/package.json +2 -2
  13. package/example-flux-estate/app-b/package.json +2 -2
  14. package/example-flux-estate/control-plane/package.json +2 -2
  15. package/example-flux-estate/package-lock.json +20 -20
  16. package/example-k8s/package-lock.json +21 -21
  17. package/example-k8s/package.json +3 -3
  18. package/example-writes/package-lock.json +14 -14
  19. package/example-writes/package.json +3 -3
  20. package/package.json +2 -2
  21. package/web/app.js +26 -0
  22. package/web/carve-steps.js +65 -7
  23. package/web/carve-steps.test.js +15 -0
package/README.md CHANGED
@@ -317,10 +317,11 @@ stepper on the panel's **Carve** tab:
317
317
  6. **Done** — the card is marked chant-owned at the observe position;
318
318
  `terraform import` reverses all of it.
319
319
 
320
- The Emit step reports `chant lint`, not `chant build`: chant#1637 means `build`
321
- fails on the emitted bucket even though the advisor scored it 88, and the panel
322
- links the reason. `example-carve/README.md` has the estate's full story, the
323
- band table, and the offline/`--live` split.
320
+ The Emit step reports `chant lint`, not `chant build`: `build` fails on the
321
+ emitted bucket (scored 84 by the advisor) on one rule — WAW042, a TLS-deny
322
+ bucket policy the source Terraform never declared — and the panel links the
323
+ reason. `example-carve/README.md` has the estate's full story, the band table,
324
+ and the offline/`--live` split.
324
325
 
325
326
  behold writes only into the demo copy it made — `app/carveout/`, and nothing
326
327
  else. Your Terraform is never edited; see AGENTS.md, "Invariant".