@intentius/chant-lexicon-cpln 0.53.0

package/dist/okf/index.md

@@ -0,0 +1,39 @@
+---
+okf_version: '0.2'
+---
+
+# Resource types
+
+* [Domain](/types/Domain.md) - Cpln::Core::Domain
+* [Gvc](/types/Gvc.md) - Cpln::Core::Gvc
+* [Identity](/types/Identity.md) - Cpln::Core::Identity
+* [IpSet](/types/IpSet.md) - Cpln::Core::IpSet
+* [Policy](/types/Policy.md) - Cpln::Core::Policy
+* [Secret](/types/Secret.md) - Cpln::Core::Secret
+* [VolumeSet](/types/VolumeSet.md) - Cpln::Core::VolumeSet
+* [Workload](/types/Workload.md) - Cpln::Core::Workload
+
+# Rules
+
+* [CPL001](/rules/CPL001.md) - no literal credential material in a cpln declaration.
+* [CPL002](/rules/CPL002.md) - prefer a resource reference over a hand-written link.
+* [CPL010](/rules/CPL010.md) - Workloads should not allow outbound traffic to every address
+* [CPL011](/rules/CPL011.md) - Internal firewall should not be opened to the entire org
+* [CPL012](/rules/CPL012.md) - Credential-shaped environment variables must reference a secret, not a literal
+* [CPL013](/rules/CPL013.md) - Policy bindings must name identities by their GVC-qualified link
+* [CPL014](/rules/CPL014.md) - Secret references in environment variables must name a field
+* [CPL020](/rules/CPL020.md) - Serverless workloads must expose exactly one HTTP port
+* [CPL021](/rules/CPL021.md) - Cron workloads must declare a schedule and expose no ports
+* [CPL022](/rules/CPL022.md) - Container ports must not mix `port` and `ports`, and must be unique across containers
+* [CPL023](/rules/CPL023.md) - Container CPU and memory must clear the platform floors and the memory-to-CPU ratio
+* [CPL024](/rules/CPL024.md) - Each health-check probe must set exactly one of exec, grpc, tcpSocket, httpGet
+* [CPL025](/rules/CPL025.md) - Autoscaling `metric`, `multi` and `target` must form a valid combination
+* [CPL026](/rules/CPL026.md) - minScale 0 must pair with a strategy that can actually scale to zero
+* [CPL027](/rules/CPL027.md) - Capacity AI conflicts with CPU-utilization autoscaling, multi-metric autoscaling and GPUs
+* [CPL028](/rules/CPL028.md) - Volume set capacity, filesystem binding, and workload mount rules
+* [CPL029](/rules/CPL029.md) - Control Plane links must resolve to a declared resource of the right kind and GVC
+* [CPL030](/rules/CPL030.md) - Domain DNS mode, certificate challenge, and routing target must be a valid combination
+* [CPL040](/rules/CPL040.md) - Container images should be pinned to a specific tag or digest
+* [CPL041](/rules/CPL041.md) - Image references must not use docker.io/ or the registry hostname form
+* [CPL042](/rules/CPL042.md) - A GVC must declare where its workloads run
+* [CPL043](/rules/CPL043.md) - Policy target kind, scope and origin must be well formed

package/dist/okf/rules/CPL001.md

@@ -0,0 +1,22 @@
+---
+type: lint-rule
+title: CPL001
+description: no literal credential material in a cpln declaration.
+id: CPL001
+severity: error
+category: security
+lexicon: cpln
+docs: https://intentius.io/chant/lexicons/cpln/rules/
+---
+no literal credential material in a cpln declaration.
+
+## Applies to
+
+- [Domain](/types/Domain.md)
+- [Gvc](/types/Gvc.md)
+- [Identity](/types/Identity.md)
+- [IpSet](/types/IpSet.md)
+- [Policy](/types/Policy.md)
+- [Secret](/types/Secret.md)
+- [VolumeSet](/types/VolumeSet.md)
+- [Workload](/types/Workload.md)

package/dist/okf/rules/CPL002.md

@@ -0,0 +1,22 @@
+---
+type: lint-rule
+title: CPL002
+description: prefer a resource reference over a hand-written link.
+id: CPL002
+severity: info
+category: style
+lexicon: cpln
+docs: https://intentius.io/chant/lexicons/cpln/rules/
+---
+prefer a resource reference over a hand-written link.
+
+## Applies to
+
+- [Domain](/types/Domain.md)
+- [Gvc](/types/Gvc.md)
+- [Identity](/types/Identity.md)
+- [IpSet](/types/IpSet.md)
+- [Policy](/types/Policy.md)
+- [Secret](/types/Secret.md)
+- [VolumeSet](/types/VolumeSet.md)
+- [Workload](/types/Workload.md)

package/dist/okf/rules/CPL010.md

@@ -0,0 +1,15 @@
+---
+type: post-synth-check
+title: CPL010
+description: Workloads should not allow outbound traffic to every address
+id: CPL010
+severity: error
+category: post-synth
+lexicon: cpln
+docs: https://intentius.io/chant/lexicons/cpln/rules/
+---
+Workloads should not allow outbound traffic to every address
+
+## Applies to
+
+- [Workload](/types/Workload.md)

package/dist/okf/rules/CPL011.md

@@ -0,0 +1,15 @@
+---
+type: post-synth-check
+title: CPL011
+description: Internal firewall should not be opened to the entire org
+id: CPL011
+severity: error
+category: post-synth
+lexicon: cpln
+docs: https://intentius.io/chant/lexicons/cpln/rules/
+---
+Internal firewall should not be opened to the entire org
+
+## Applies to
+
+- [Workload](/types/Workload.md)

package/dist/okf/rules/CPL012.md

@@ -0,0 +1,15 @@
+---
+type: post-synth-check
+title: CPL012
+description: Credential-shaped environment variables must reference a secret, not a literal
+id: CPL012
+severity: error
+category: post-synth
+lexicon: cpln
+docs: https://intentius.io/chant/lexicons/cpln/rules/
+---
+Credential-shaped environment variables must reference a secret, not a literal
+
+## Applies to
+
+- [Workload](/types/Workload.md)

package/dist/okf/rules/CPL013.md

@@ -0,0 +1,15 @@
+---
+type: post-synth-check
+title: CPL013
+description: Policy bindings must name identities by their GVC-qualified link
+id: CPL013
+severity: error
+category: post-synth
+lexicon: cpln
+docs: https://intentius.io/chant/lexicons/cpln/rules/
+---
+Policy bindings must name identities by their GVC-qualified link
+
+## Applies to
+
+- [Policy](/types/Policy.md)

package/dist/okf/rules/CPL014.md

@@ -0,0 +1,16 @@
+---
+type: post-synth-check
+title: CPL014
+description: Secret references in environment variables must name a field
+id: CPL014
+severity: error
+category: post-synth
+lexicon: cpln
+docs: https://intentius.io/chant/lexicons/cpln/rules/
+---
+Secret references in environment variables must name a field
+
+## Applies to
+
+- [Secret](/types/Secret.md)
+- [Workload](/types/Workload.md)

package/dist/okf/rules/CPL020.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: CPL020
+description: Serverless workloads must expose exactly one HTTP port
+id: CPL020
+severity: error
+category: post-synth
+lexicon: cpln
+docs: https://intentius.io/chant/lexicons/cpln/rules/
+---
+Serverless workloads must expose exactly one HTTP port

package/dist/okf/rules/CPL021.md

@@ -0,0 +1,15 @@
+---
+type: post-synth-check
+title: CPL021
+description: Cron workloads must declare a schedule and expose no ports
+id: CPL021
+severity: error
+category: post-synth
+lexicon: cpln
+docs: https://intentius.io/chant/lexicons/cpln/rules/
+---
+Cron workloads must declare a schedule and expose no ports
+
+## Applies to
+
+- [Workload](/types/Workload.md)

package/dist/okf/rules/CPL022.md

@@ -0,0 +1,15 @@
+---
+type: post-synth-check
+title: CPL022
+description: Container ports must not mix `port` and `ports`, and must be unique across containers
+id: CPL022
+severity: error
+category: post-synth
+lexicon: cpln
+docs: https://intentius.io/chant/lexicons/cpln/rules/
+---
+Container ports must not mix `port` and `ports`, and must be unique across containers
+
+## Applies to
+
+- [Workload](/types/Workload.md)

package/dist/okf/rules/CPL023.md

@@ -0,0 +1,15 @@
+---
+type: post-synth-check
+title: CPL023
+description: Container CPU and memory must clear the platform floors and the memory-to-CPU ratio
+id: CPL023
+severity: error
+category: post-synth
+lexicon: cpln
+docs: https://intentius.io/chant/lexicons/cpln/rules/
+---
+Container CPU and memory must clear the platform floors and the memory-to-CPU ratio
+
+## Applies to
+
+- [Workload](/types/Workload.md)

package/dist/okf/rules/CPL024.md

@@ -0,0 +1,15 @@
+---
+type: post-synth-check
+title: CPL024
+description: Each health-check probe must set exactly one of exec, grpc, tcpSocket, httpGet
+id: CPL024
+severity: error
+category: post-synth
+lexicon: cpln
+docs: https://intentius.io/chant/lexicons/cpln/rules/
+---
+Each health-check probe must set exactly one of exec, grpc, tcpSocket, httpGet
+
+## Applies to
+
+- [Workload](/types/Workload.md)

package/dist/okf/rules/CPL025.md

@@ -0,0 +1,15 @@
+---
+type: post-synth-check
+title: CPL025
+description: Autoscaling `metric`, `multi` and `target` must form a valid combination
+id: CPL025
+severity: error
+category: post-synth
+lexicon: cpln
+docs: https://intentius.io/chant/lexicons/cpln/rules/
+---
+Autoscaling `metric`, `multi` and `target` must form a valid combination
+
+## Applies to
+
+- [Workload](/types/Workload.md)

package/dist/okf/rules/CPL026.md

@@ -0,0 +1,15 @@
+---
+type: post-synth-check
+title: CPL026
+description: minScale 0 must pair with a strategy that can actually scale to zero
+id: CPL026
+severity: error
+category: post-synth
+lexicon: cpln
+docs: https://intentius.io/chant/lexicons/cpln/rules/
+---
+minScale 0 must pair with a strategy that can actually scale to zero
+
+## Applies to
+
+- [Workload](/types/Workload.md)

package/dist/okf/rules/CPL027.md

@@ -0,0 +1,15 @@
+---
+type: post-synth-check
+title: CPL027
+description: Capacity AI conflicts with CPU-utilization autoscaling, multi-metric autoscaling and GPUs
+id: CPL027
+severity: error
+category: post-synth
+lexicon: cpln
+docs: https://intentius.io/chant/lexicons/cpln/rules/
+---
+Capacity AI conflicts with CPU-utilization autoscaling, multi-metric autoscaling and GPUs
+
+## Applies to
+
+- [Workload](/types/Workload.md)

package/dist/okf/rules/CPL028.md

@@ -0,0 +1,15 @@
+---
+type: post-synth-check
+title: CPL028
+description: Volume set capacity, filesystem binding, and workload mount rules
+id: CPL028
+severity: error
+category: post-synth
+lexicon: cpln
+docs: https://intentius.io/chant/lexicons/cpln/rules/
+---
+Volume set capacity, filesystem binding, and workload mount rules
+
+## Applies to
+
+- [Workload](/types/Workload.md)

package/dist/okf/rules/CPL029.md

@@ -0,0 +1,15 @@
+---
+type: post-synth-check
+title: CPL029
+description: Control Plane links must resolve to a declared resource of the right kind and GVC
+id: CPL029
+severity: error
+category: post-synth
+lexicon: cpln
+docs: https://intentius.io/chant/lexicons/cpln/rules/
+---
+Control Plane links must resolve to a declared resource of the right kind and GVC
+
+## Applies to
+
+- [Workload](/types/Workload.md)

package/dist/okf/rules/CPL030.md

@@ -0,0 +1,16 @@
+---
+type: post-synth-check
+title: CPL030
+description: Domain DNS mode, certificate challenge, and routing target must be a valid combination
+id: CPL030
+severity: error
+category: post-synth
+lexicon: cpln
+docs: https://intentius.io/chant/lexicons/cpln/rules/
+---
+Domain DNS mode, certificate challenge, and routing target must be a valid combination
+
+## Applies to
+
+- [Domain](/types/Domain.md)
+- [Workload](/types/Workload.md)

package/dist/okf/rules/CPL040.md

@@ -0,0 +1,15 @@
+---
+type: post-synth-check
+title: CPL040
+description: Container images should be pinned to a specific tag or digest
+id: CPL040
+severity: error
+category: post-synth
+lexicon: cpln
+docs: https://intentius.io/chant/lexicons/cpln/rules/
+---
+Container images should be pinned to a specific tag or digest
+
+## Applies to
+
+- [Workload](/types/Workload.md)

package/dist/okf/rules/CPL041.md

@@ -0,0 +1,15 @@
+---
+type: post-synth-check
+title: CPL041
+description: Image references must not use docker.io/ or the registry hostname form
+id: CPL041
+severity: error
+category: post-synth
+lexicon: cpln
+docs: https://intentius.io/chant/lexicons/cpln/rules/
+---
+Image references must not use docker.io/ or the registry hostname form
+
+## Applies to
+
+- [Workload](/types/Workload.md)

package/dist/okf/rules/CPL042.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: CPL042
+description: A GVC must declare where its workloads run
+id: CPL042
+severity: error
+category: post-synth
+lexicon: cpln
+docs: https://intentius.io/chant/lexicons/cpln/rules/
+---
+A GVC must declare where its workloads run

package/dist/okf/rules/CPL043.md

@@ -0,0 +1,15 @@
+---
+type: post-synth-check
+title: CPL043
+description: Policy target kind, scope and origin must be well formed
+id: CPL043
+severity: error
+category: post-synth
+lexicon: cpln
+docs: https://intentius.io/chant/lexicons/cpln/rules/
+---
+Policy target kind, scope and origin must be well formed
+
+## Applies to
+
+- [Policy](/types/Policy.md)

package/dist/okf/types/Domain.md

@@ -0,0 +1,22 @@
+---
+type: resource-type
+title: Domain
+description: cpln resource type Cpln::Core::Domain
+name: Domain
+lexicon: cpln
+resource_type: Cpln::Core::Domain
+---
+`Cpln::Core::Domain`, a resource type of the cpln lexicon.
+
+## Properties
+
+- `name` (`string`, required)
+- `description` (`string`, optional)
+- `spec` (`DomainSpec`, optional)
+- `tags` (`Record<string, string>`, optional)
+
+## Governed by
+
+- [CPL001](/rules/CPL001.md): no literal credential material in a cpln declaration.
+- [CPL002](/rules/CPL002.md): prefer a resource reference over a hand-written link.
+- [CPL030](/rules/CPL030.md): Domain DNS mode, certificate challenge, and routing target must be a valid combination

package/dist/okf/types/Gvc.md

@@ -0,0 +1,21 @@
+---
+type: resource-type
+title: Gvc
+description: cpln resource type Cpln::Core::Gvc
+name: Gvc
+lexicon: cpln
+resource_type: Cpln::Core::Gvc
+---
+`Cpln::Core::Gvc`, a resource type of the cpln lexicon.
+
+## Properties
+
+- `name` (`string`, required)
+- `description` (`string`, optional)
+- `spec` (`GvcSpec`, optional)
+- `tags` (`Record<string, string>`, optional)
+
+## Governed by
+
+- [CPL001](/rules/CPL001.md): no literal credential material in a cpln declaration.
+- [CPL002](/rules/CPL002.md): prefer a resource reference over a hand-written link.

package/dist/okf/types/Identity.md

@@ -0,0 +1,29 @@
+---
+type: resource-type
+title: Identity
+description: cpln resource type Cpln::Core::Identity
+name: Identity
+lexicon: cpln
+resource_type: Cpln::Core::Identity
+---
+`Cpln::Core::Identity`, a resource type of the cpln lexicon.
+
+## Properties
+
+- `gvc` (`string`, required): Name of the GVC this resource belongs to.
+- `name` (`string`, required)
+- `aws` (`IdentityAws`, optional)
+- `azure` (`IdentityAzure`, optional)
+- `description` (`string`, optional)
+- `gcp` (`IdentityGcp`, optional)
+- `memcacheAccess` (`IdentityMemcacheAccess[]`, optional)
+- `nativeNetworkResources` (`IdentityNativeNetworkResources[]`, optional)
+- `networkResources` (`NetworkResource[]`, optional)
+- `ngs` (`IdentityNgs`, optional)
+- `spicedbAccess` (`IdentitySpicedbAccess[]`, optional)
+- `tags` (`Record<string, string>`, optional)
+
+## Governed by
+
+- [CPL001](/rules/CPL001.md): no literal credential material in a cpln declaration.
+- [CPL002](/rules/CPL002.md): prefer a resource reference over a hand-written link.

package/dist/okf/types/IpSet.md

@@ -0,0 +1,21 @@
+---
+type: resource-type
+title: IpSet
+description: cpln resource type Cpln::Core::IpSet
+name: IpSet
+lexicon: cpln
+resource_type: Cpln::Core::IpSet
+---
+`Cpln::Core::IpSet`, a resource type of the cpln lexicon.
+
+## Properties
+
+- `name` (`string`, required)
+- `description` (`string`, optional)
+- `spec` (`IpSetSpec`, optional)
+- `tags` (`Record<string, string>`, optional)
+
+## Governed by
+
+- [CPL001](/rules/CPL001.md): no literal credential material in a cpln declaration.
+- [CPL002](/rules/CPL002.md): prefer a resource reference over a hand-written link.

package/dist/okf/types/Policy.md

@@ -0,0 +1,28 @@
+---
+type: resource-type
+title: Policy
+description: cpln resource type Cpln::Core::Policy
+name: Policy
+lexicon: cpln
+resource_type: Cpln::Core::Policy
+---
+`Cpln::Core::Policy`, a resource type of the cpln lexicon.
+
+## Properties
+
+- `name` (`string`, required)
+- `targetKind` (`"accessreport" | "agent" | "auditctx" | "cloudaccount" | "command" | "dbcluster" | "deployment" | "domain" | "event" | "group" | "gvc" | "identity" | "image" | "imagesummary" | "ipset" | "location" | "memcachecluster" | "mk8s" | "org" | "permissions" | "policy" | "policymembership" | "quota" | "resource" | "resourcepolicy" | "secret" | "serviceaccount" | "spicedbcluster" | "task" | "tenant" | "user" | "volumeset" | "workload"`, required)
+- `bindings` (`PolicyBinding[]`, optional)
+- `description` (`string`, optional)
+- `origin` (`"builtin" | "default"`, optional)
+- `tags` (`Record<string, string>`, optional)
+- `target` (`"all"`, optional)
+- `targetLinks` (`string[]`, optional)
+- `targetQuery` (`Query`, optional)
+
+## Governed by
+
+- [CPL001](/rules/CPL001.md): no literal credential material in a cpln declaration.
+- [CPL002](/rules/CPL002.md): prefer a resource reference over a hand-written link.
+- [CPL013](/rules/CPL013.md): Policy bindings must name identities by their GVC-qualified link
+- [CPL043](/rules/CPL043.md): Policy target kind, scope and origin must be well formed

package/dist/okf/types/Secret.md

@@ -0,0 +1,23 @@
+---
+type: resource-type
+title: Secret
+description: cpln resource type Cpln::Core::Secret
+name: Secret
+lexicon: cpln
+resource_type: Cpln::Core::Secret
+---
+`Cpln::Core::Secret`, a resource type of the cpln lexicon.
+
+## Properties
+
+- `name` (`string`, required)
+- `type` (`"aws" | "azure-connector" | "azure-sdk" | "dictionary" | "docker" | "ecr" | "gcp" | "keypair" | "nats-account" | "opaque" | "tls" | "userpass"`, required)
+- `data` (`SecretOpaque | SecretTls | string | SecretAwskey | Record<string, unknown> | SecretUserpass | SecretKeypair`, optional)
+- `description` (`string`, optional)
+- `tags` (`Record<string, string>`, optional)
+
+## Governed by
+
+- [CPL001](/rules/CPL001.md): no literal credential material in a cpln declaration.
+- [CPL002](/rules/CPL002.md): prefer a resource reference over a hand-written link.
+- [CPL014](/rules/CPL014.md): Secret references in environment variables must name a field

package/dist/okf/types/VolumeSet.md

@@ -0,0 +1,22 @@
+---
+type: resource-type
+title: VolumeSet
+description: cpln resource type Cpln::Core::VolumeSet
+name: VolumeSet
+lexicon: cpln
+resource_type: Cpln::Core::VolumeSet
+---
+`Cpln::Core::VolumeSet`, a resource type of the cpln lexicon.
+
+## Properties
+
+- `gvc` (`string`, required): Name of the GVC this resource belongs to.
+- `name` (`string`, required)
+- `description` (`string`, optional)
+- `spec` (`VolumeSetSpec`, optional)
+- `tags` (`Record<string, string>`, optional)
+
+## Governed by
+
+- [CPL001](/rules/CPL001.md): no literal credential material in a cpln declaration.
+- [CPL002](/rules/CPL002.md): prefer a resource reference over a hand-written link.

package/dist/okf/types/Workload.md

@@ -0,0 +1,38 @@
+---
+type: resource-type
+title: Workload
+description: cpln resource type Cpln::Core::Workload
+name: Workload
+lexicon: cpln
+resource_type: Cpln::Core::Workload
+---
+`Cpln::Core::Workload`, a resource type of the cpln lexicon.
+
+## Properties
+
+- `gvc` (`string`, required): Name of the GVC this resource belongs to.
+- `name` (`string`, required): Name of the workload (max 49 characters)
+- `description` (`string`, optional)
+- `spec` (`WorkloadSpec`, optional): Workload specification
+- `tags` (`Record<string, string>`, optional)
+
+## Governed by
+
+- [CPL001](/rules/CPL001.md): no literal credential material in a cpln declaration.
+- [CPL002](/rules/CPL002.md): prefer a resource reference over a hand-written link.
+- [CPL010](/rules/CPL010.md): Workloads should not allow outbound traffic to every address
+- [CPL011](/rules/CPL011.md): Internal firewall should not be opened to the entire org
+- [CPL012](/rules/CPL012.md): Credential-shaped environment variables must reference a secret, not a literal
+- [CPL014](/rules/CPL014.md): Secret references in environment variables must name a field
+- [CPL021](/rules/CPL021.md): Cron workloads must declare a schedule and expose no ports
+- [CPL022](/rules/CPL022.md): Container ports must not mix `port` and `ports`, and must be unique across containers
+- [CPL023](/rules/CPL023.md): Container CPU and memory must clear the platform floors and the memory-to-CPU ratio
+- [CPL024](/rules/CPL024.md): Each health-check probe must set exactly one of exec, grpc, tcpSocket, httpGet
+- [CPL025](/rules/CPL025.md): Autoscaling `metric`, `multi` and `target` must form a valid combination
+- [CPL026](/rules/CPL026.md): minScale 0 must pair with a strategy that can actually scale to zero
+- [CPL027](/rules/CPL027.md): Capacity AI conflicts with CPU-utilization autoscaling, multi-metric autoscaling and GPUs
+- [CPL028](/rules/CPL028.md): Volume set capacity, filesystem binding, and workload mount rules
+- [CPL029](/rules/CPL029.md): Control Plane links must resolve to a declared resource of the right kind and GVC
+- [CPL030](/rules/CPL030.md): Domain DNS mode, certificate challenge, and routing target must be a valid combination
+- [CPL040](/rules/CPL040.md): Container images should be pinned to a specific tag or digest
+- [CPL041](/rules/CPL041.md): Image references must not use docker.io/ or the registry hostname form

package/dist/ownership.d.ts

@@ -0,0 +1,23 @@
+/**
+ * The cpln lexicon's ownership convention.
+ *
+ * Declared here rather than in core — the same seam aws (`chant:managed-by`),
+ * azure and fly sit on. Core owns the generic stamp/detect logic; each lexicon
+ * owns key names its provider will actually accept.
+ *
+ * Control Plane gives every kind a free-form `tags` map, which makes this the
+ * cleanest ownership channel of any target chant supports: one uniform place on
+ * all eight kinds, readable straight off a plain `GET`, with no per-kind
+ * special case of the sort fly needs for volumes and certificates.
+ *
+ * Key naming. Tag keys accept a `/`, which Control Plane uses itself for its
+ * reserved `cpln/…` keys (`cpln/relaxMemoryToCpuRatio`). A prefixed key is
+ * therefore both idiomatic and safely namespaced against a future reserved key,
+ * so these follow the same `chant.intentius.io/…` convention as the shared
+ * label channel rather than inventing a flat spelling. The `cpln/` prefix is
+ * Control Plane's own and is never written here.
+ */
+import type { ChannelKeys } from "@intentius/chant/ownership";
+/** Tag keys carrying chant's ownership marker on every cpln resource. */
+export declare const CPLN_TAG_OWNERSHIP_KEYS: ChannelKeys;
+//# sourceMappingURL=ownership.d.ts.map

package/dist/ownership.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownership.d.ts","sourceRoot":"","sources":["../src/ownership.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAE9D,yEAAyE;AACzE,eAAO,MAAM,uBAAuB,EAAE,WAIrC,CAAC"}

package/dist/package-cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env tsx
+export {};
+//# sourceMappingURL=package-cli.d.ts.map

package/dist/package-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-cli.d.ts","sourceRoot":"","sources":["../src/package-cli.ts"],"names":[],"mappings":""}