@intentius/chant-lexicon-github 0.6.0 → 0.8.0

package/dist/composites/setup-go.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-go.d.ts","sourceRoot":"","sources":["../../src/composites/setup-go.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAE/C,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE;QACT,IAAI,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACvD,CAAC;CACH;AAED,eAAO,MAAM,OAAO,2GAgBP,CAAC"}

package/dist/composites/setup-node.d.ts

@@ -0,0 +1,12 @@
+import type { Step } from "../generated/index.js";
+export interface SetupNodeProps {
+    nodeVersion?: string;
+    registryUrl?: string;
+    cache?: string;
+    cacheFilePath?: string;
+    defaults?: {
+        step?: Partial<ConstructorParameters<typeof Step>[0]>;
+    };
+}
+export declare const SetupNode: import("@intentius/chant").CompositeDefinition<SetupNodeProps, import("@intentius/chant").CompositeMembers>;
+//# sourceMappingURL=setup-node.d.ts.map

package/dist/composites/setup-node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-node.d.ts","sourceRoot":"","sources":["../../src/composites/setup-node.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAE/C,MAAM,WAAW,cAAc;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE;QACT,IAAI,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACvD,CAAC;CACH;AAED,eAAO,MAAM,SAAS,6GAiBP,CAAC"}

package/dist/composites/setup-python.d.ts

@@ -0,0 +1,11 @@
+import type { Step } from "../generated/index.js";
+export interface SetupPythonProps {
+    pythonVersion?: string;
+    cache?: string;
+    architecture?: string;
+    defaults?: {
+        step?: Partial<ConstructorParameters<typeof Step>[0]>;
+    };
+}
+export declare const SetupPython: import("@intentius/chant").CompositeDefinition<SetupPythonProps, import("@intentius/chant").CompositeMembers>;
+//# sourceMappingURL=setup-python.d.ts.map

package/dist/composites/setup-python.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-python.d.ts","sourceRoot":"","sources":["../../src/composites/setup-python.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAE/C,MAAM,WAAW,gBAAgB;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE;QACT,IAAI,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACvD,CAAC;CACH;AAED,eAAO,MAAM,WAAW,+GAgBP,CAAC"}

package/dist/composites/upload-artifact.d.ts

@@ -0,0 +1,12 @@
+import type { Step } from "../generated/index.js";
+export interface UploadArtifactProps {
+    name: string;
+    path: string;
+    retentionDays?: number;
+    compressionLevel?: number;
+    defaults?: {
+        step?: Partial<ConstructorParameters<typeof Step>[0]>;
+    };
+}
+export declare const UploadArtifact: import("@intentius/chant").CompositeDefinition<UploadArtifactProps, import("@intentius/chant").CompositeMembers>;
+//# sourceMappingURL=upload-artifact.d.ts.map

package/dist/composites/upload-artifact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload-artifact.d.ts","sourceRoot":"","sources":["../../src/composites/upload-artifact.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAE/C,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE;QACT,IAAI,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACvD,CAAC;CACH;AAED,eAAO,MAAM,cAAc,kHAkBP,CAAC"}

package/dist/coverage.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Coverage analysis for GitHub Actions lexicon.
+ */
+import { computeCoverage, overallPct, formatSummary, formatVerbose, checkThresholds, type CoverageReport, type CoverageThresholds } from "@intentius/chant/codegen/coverage";
+export type { CoverageReport, CoverageThresholds };
+export { computeCoverage, overallPct, formatSummary, formatVerbose, checkThresholds };
+/**
+ * Run coverage analysis for the GitHub Actions lexicon.
+ */
+export declare function analyzeGitHubCoverage(opts?: {
+    basePath?: string;
+    verbose?: boolean;
+    minOverall?: number;
+}): Promise<CoverageReport>;
+//# sourceMappingURL=coverage.d.ts.map

package/dist/coverage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coverage.d.ts","sourceRoot":"","sources":["../src/coverage.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,EACL,eAAe,EACf,UAAU,EACV,aAAa,EACb,aAAa,EACb,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACxB,MAAM,mCAAmC,CAAC;AAE3C,YAAY,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC;AAEtF;;GAEG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,CAAC,EAAE;IACjD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,cAAc,CAAC,CAqB1B"}

package/dist/expression.d.ts

@@ -0,0 +1,107 @@
+/**
+ * GitHub Actions expression system.
+ *
+ * Provides a typed Expression class and context accessors for building
+ * ${{ }} expressions in GitHub Actions workflows.
+ */
+import { INTRINSIC_MARKER, type Intrinsic } from "@intentius/chant/intrinsic";
+/**
+ * A GitHub Actions expression that serializes to `${{ raw }}`.
+ */
+export declare class Expression implements Intrinsic {
+    readonly [INTRINSIC_MARKER]: true;
+    private readonly _raw;
+    constructor(raw: string);
+    /** The raw expression string without ${{ }} wrapper. */
+    raw(): string;
+    /** Returns the expression wrapped in ${{ }}. */
+    toString(): string;
+    toJSON(): string;
+    /** YAML serialization — plain string with ${{ }}. */
+    toYAML(): string;
+    /** Logical AND with another expression. */
+    and(other: Expression): Expression;
+    /** Logical OR with another expression. */
+    or(other: Expression): Expression;
+    /** Logical NOT of this expression. */
+    not(): Expression;
+    /** Equality comparison. */
+    eq(value: string | Expression): Expression;
+    /** Inequality comparison. */
+    ne(value: string | Expression): Expression;
+}
+/** GitHub context — github.* properties. */
+export declare const github: {
+    readonly ref: Expression;
+    readonly sha: Expression;
+    readonly actor: Expression;
+    readonly repository: Expression;
+    readonly repositoryOwner: Expression;
+    readonly event: Expression;
+    readonly eventName: Expression;
+    readonly runId: Expression;
+    readonly runNumber: Expression;
+    readonly workflow: Expression;
+    readonly workspace: Expression;
+    readonly token: Expression;
+    readonly job: Expression;
+    readonly refName: Expression;
+    readonly refType: Expression;
+    readonly headRef: Expression;
+    readonly baseRef: Expression;
+    readonly serverUrl: Expression;
+    readonly apiUrl: Expression;
+    readonly graphqlUrl: Expression;
+    readonly action: Expression;
+    readonly actionPath: Expression;
+    readonly triggeringActor: Expression;
+};
+/** Runner context — runner.* properties. */
+export declare const runner: {
+    readonly os: Expression;
+    readonly arch: Expression;
+    readonly temp: Expression;
+    readonly toolCache: Expression;
+    readonly name: Expression;
+};
+/** Access a secret by name. */
+export declare function secrets(name: string): Expression;
+/** Access a matrix value by key. */
+export declare function matrix(key: string): Expression;
+/** Access a step output. */
+export declare function steps(id: string): {
+    outputs(name: string): Expression;
+};
+/** Access a job output from a needed job. */
+export declare function needs(job: string): {
+    outputs(name: string): Expression;
+};
+/** Access a workflow input. */
+export declare function inputs(name: string): Expression;
+/** Access a configuration variable. */
+export declare function vars(name: string): Expression;
+/** Access an environment variable. */
+export declare function env(name: string): Expression;
+/** Always run, regardless of status. */
+export declare function always(): Expression;
+/** Run only if a previous step has failed. */
+export declare function failure(): Expression;
+/** Run only if all previous steps succeeded (default). */
+export declare function success(): Expression;
+/** Run only if the workflow was cancelled. */
+export declare function cancelled(): Expression;
+/** Check if a string contains a substring. */
+export declare function contains(haystack: Expression | string, needle: Expression | string): Expression;
+/** Check if a string starts with a prefix. */
+export declare function startsWith(value: Expression | string, prefix: Expression | string): Expression;
+/** Convert a value to JSON. */
+export declare function toJSON(value: Expression): Expression;
+/** Parse a JSON string. */
+export declare function fromJSON(json: Expression | string): Expression;
+/** Format a string with placeholders. */
+export declare function format(template: string, ...args: Expression[]): Expression;
+/** Check if the ref matches a branch name. */
+export declare function branch(name: string): Expression;
+/** Check if the ref matches a tag prefix. */
+export declare function tag(name: string): Expression;
+//# sourceMappingURL=expression.d.ts.map

package/dist/expression.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"expression.d.ts","sourceRoot":"","sources":["../src/expression.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,gBAAgB,EAAE,KAAK,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAE9E;;GAEG;AACH,qBAAa,UAAW,YAAW,SAAS;IAC1C,QAAQ,CAAC,CAAC,gBAAgB,CAAC,EAAG,IAAI,CAAU;IAC5C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;gBAElB,GAAG,EAAE,MAAM;IAIvB,wDAAwD;IACxD,GAAG,IAAI,MAAM;IAIb,gDAAgD;IAChD,QAAQ,IAAI,MAAM;IAIlB,MAAM,IAAI,MAAM;IAIhB,qDAAqD;IACrD,MAAM,IAAI,MAAM;IAIhB,2CAA2C;IAC3C,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU;IAIlC,0CAA0C;IAC1C,EAAE,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU;IAIjC,sCAAsC;IACtC,GAAG,IAAI,UAAU;IAIjB,2BAA2B;IAC3B,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU;IAK1C,6BAA6B;IAC7B,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU;CAI3C;AAID,4CAA4C;AAC5C,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;CAwBT,CAAC;AAEX,4CAA4C;AAC5C,eAAO,MAAM,MAAM;;;;;;CAMT,CAAC;AAEX,+BAA+B;AAC/B,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAEhD;AAED,oCAAoC;AACpC,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAE9C;AAED,4BAA4B;AAC5B,wBAAgB,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG;IAAE,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAAA;CAAE,CAMvE;AAED,6CAA6C;AAC7C,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAAA;CAAE,CAMxE;AAED,+BAA+B;AAC/B,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAE/C;AAED,uCAAuC;AACvC,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAE7C;AAED,sCAAsC;AACtC,wBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAE5C;AAID,wCAAwC;AACxC,wBAAgB,MAAM,IAAI,UAAU,CAEnC;AAED,8CAA8C;AAC9C,wBAAgB,OAAO,IAAI,UAAU,CAEpC;AAED,0DAA0D;AAC1D,wBAAgB,OAAO,IAAI,UAAU,CAEpC;AAED,8CAA8C;AAC9C,wBAAgB,SAAS,IAAI,UAAU,CAEtC;AAID,8CAA8C;AAC9C,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,UAAU,GAAG,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,UAAU,CAI/F;AAED,8CAA8C;AAC9C,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,UAAU,CAI9F;AAED,+BAA+B;AAC/B,wBAAgB,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,CAEpD;AAED,2BAA2B;AAC3B,wBAAgB,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,UAAU,CAG9D;AAED,yCAAyC;AACzC,wBAAgB,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,GAAG,UAAU,CAG1E;AAID,8CAA8C;AAC9C,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAE/C;AAED,6CAA6C;AAC7C,wBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAE5C"}

package/dist/generated/index.d.ts

@@ -0,0 +1,24 @@
+export declare const Job: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const ReusableWorkflowCallJob: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const Workflow: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const Concurrency: new (props: Record<string, unknown>) => Record<string, unknown>;
+export declare const Container: new (props: Record<string, unknown>) => Record<string, unknown>;
+export declare const Defaults: new (props: Record<string, unknown>) => Record<string, unknown>;
+export declare const Environment: new (props: Record<string, unknown>) => Record<string, unknown>;
+export declare const Permissions: new (props: Record<string, unknown>) => Record<string, unknown>;
+export declare const PullRequestTargetTrigger: new (props: Record<string, unknown>) => Record<string, unknown>;
+export declare const PullRequestTrigger: new (props: Record<string, unknown>) => Record<string, unknown>;
+export declare const PushTrigger: new (props: Record<string, unknown>) => Record<string, unknown>;
+export declare const RepositoryDispatchTrigger: new (props: Record<string, unknown>) => Record<string, unknown>;
+export declare const ScheduleTrigger: new (props: Record<string, unknown>) => Record<string, unknown>;
+export declare const Service: new (props: Record<string, unknown>) => Record<string, unknown>;
+export declare const Step: new (props: Record<string, unknown>) => Record<string, unknown>;
+export declare const Strategy: new (props: Record<string, unknown>) => Record<string, unknown>;
+export declare const WorkflowCallTrigger: new (props: Record<string, unknown>) => Record<string, unknown>;
+export declare const WorkflowDispatchTrigger: new (props: Record<string, unknown>) => Record<string, unknown>;
+export declare const WorkflowInput: new (props: Record<string, unknown>) => Record<string, unknown>;
+export declare const WorkflowOutput: new (props: Record<string, unknown>) => Record<string, unknown>;
+export declare const WorkflowRunTrigger: new (props: Record<string, unknown>) => Record<string, unknown>;
+export declare const WorkflowSecret: new (props: Record<string, unknown>) => Record<string, unknown>;
+export { GitHub, Runner } from "../variables.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/generated/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/generated/index.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,GAAG,+IAAuD,CAAC;AACxE,eAAO,MAAM,uBAAuB,+IAA2E,CAAC;AAChH,eAAO,MAAM,QAAQ,+IAA4D,CAAC;AAElF,eAAO,MAAM,WAAW,iEAA2D,CAAC;AACpF,eAAO,MAAM,SAAS,iEAAyD,CAAC;AAChF,eAAO,MAAM,QAAQ,iEAAwD,CAAC;AAC9E,eAAO,MAAM,WAAW,iEAA2D,CAAC;AACpF,eAAO,MAAM,WAAW,iEAA2D,CAAC;AACpF,eAAO,MAAM,wBAAwB,iEAAwE,CAAC;AAC9G,eAAO,MAAM,kBAAkB,iEAAkE,CAAC;AAClG,eAAO,MAAM,WAAW,iEAA2D,CAAC;AACpF,eAAO,MAAM,yBAAyB,iEAAyE,CAAC;AAChH,eAAO,MAAM,eAAe,iEAA+D,CAAC;AAC5F,eAAO,MAAM,OAAO,iEAAuD,CAAC;AAC5E,eAAO,MAAM,IAAI,iEAAoD,CAAC;AACtE,eAAO,MAAM,QAAQ,iEAAwD,CAAC;AAC9E,eAAO,MAAM,mBAAmB,iEAAmE,CAAC;AACpG,eAAO,MAAM,uBAAuB,iEAAuE,CAAC;AAC5G,eAAO,MAAM,aAAa,iEAA6D,CAAC;AACxF,eAAO,MAAM,cAAc,iEAA8D,CAAC;AAC1F,eAAO,MAAM,kBAAkB,iEAAkE,CAAC;AAClG,eAAO,MAAM,cAAc,iEAA8D,CAAC;AAG1F,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC"}

package/dist/generated/runtime.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Runtime factory constructors — re-exported from core.
+ */
+export { createResource, createProperty } from "@intentius/chant/runtime";
+//# sourceMappingURL=runtime.d.ts.map

package/dist/generated/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/generated/runtime.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/import/generator.d.ts

@@ -0,0 +1,19 @@
+/**
+ * TypeScript code generator for GitHub Actions import.
+ *
+ * Converts a TemplateIR into TypeScript source code using
+ * the @intentius/chant-lexicon-github constructors.
+ */
+import type { TypeScriptGenerator, GeneratedFile } from "@intentius/chant/import/generator";
+import type { TemplateIR } from "@intentius/chant/import/parser";
+/**
+ * Generate TypeScript source code from a GitHub Actions IR.
+ */
+export declare class GitHubActionsGenerator implements TypeScriptGenerator {
+    generate(ir: TemplateIR): GeneratedFile[];
+    private collectNestedConstructors;
+    private emitProps;
+    private emitValue;
+    private emitLiteral;
+}
+//# sourceMappingURL=generator.d.ts.map

package/dist/import/generator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generator.d.ts","sourceRoot":"","sources":["../../src/import/generator.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAC5F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAiBjE;;GAEG;AACH,qBAAa,sBAAuB,YAAW,mBAAmB;IAChE,QAAQ,CAAC,EAAE,EAAE,UAAU,GAAG,aAAa,EAAE;IA2BzC,OAAO,CAAC,yBAAyB;IASjC,OAAO,CAAC,SAAS;IAejB,OAAO,CAAC,SAAS;IAYjB,OAAO,CAAC,WAAW;CA0BpB"}

package/dist/import/parser.d.ts

@@ -0,0 +1,13 @@
+/**
+ * GitHub Actions YAML parser for `chant import`.
+ *
+ * Parses existing .github/workflows/*.yml files into TemplateIR.
+ */
+import type { TemplateParser, TemplateIR } from "@intentius/chant/import/parser";
+/**
+ * GitHub Actions YAML parser implementation.
+ */
+export declare class GitHubActionsParser implements TemplateParser {
+    parse(content: string): TemplateIR;
+}
+//# sourceMappingURL=parser.d.ts.map

package/dist/import/parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../../src/import/parser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAc,MAAM,gCAAgC,CAAC;AAW7F;;GAEG;AACH,qBAAa,mBAAoB,YAAW,cAAc;IACxD,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU;CAmDnC"}

package/dist/index.d.ts

@@ -0,0 +1,14 @@
+export { githubSerializer } from "./serializer.js";
+export { githubPlugin } from "./plugin.js";
+export { Expression, github, runner, secrets, matrix, steps, needs, inputs, vars, env, always, failure, success, cancelled, contains, startsWith, toJSON, fromJSON, format, branch, tag, } from "./expression.js";
+export { GitHub, Runner } from "./variables.js";
+export * from "./generated/index.js";
+export { Checkout, SetupNode, SetupGo, SetupPython, CacheAction, UploadArtifact, DownloadArtifact, NodeCI, NodePipeline, BunPipeline, PnpmPipeline, YarnPipeline, PythonCI, DockerBuild, DeployEnvironment, GoCI, Dependabot, DependabotConfig, } from "./composites/index.js";
+export type { CheckoutProps, SetupNodeProps, SetupGoProps, SetupPythonProps, CacheActionProps, UploadArtifactProps, DownloadArtifactProps, NodeCIProps, NodePipelineProps, PythonCIProps, DockerBuildProps, DeployEnvironmentProps, GoCIProps, DependabotProps, DependabotConfigProps, DependabotUpdate, DependabotEcosystem, } from "./composites/index.js";
+export { fetchWorkflowSchema, fetchSchemas } from "./spec/fetch.js";
+export { parseWorkflowSchema, githubShortName, githubServiceName } from "./codegen/parse.js";
+export type { GitHubParseResult, ParsedResource, ParsedProperty, ParsedPropertyType, ParsedEnum } from "./codegen/parse.js";
+export { generate, writeGeneratedFiles } from "./codegen/generate.js";
+export { packageLexicon } from "./codegen/package.js";
+export type { PackageOptions, PackageResult } from "./codegen/package.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGhD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAGxC,OAAO,EACL,UAAU,EACV,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAChE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EACnC,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAC9C,MAAM,EAAE,GAAG,GACZ,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAI7C,cAAc,mBAAmB,CAAC;AAGlC,OAAO,EACL,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EACzC,WAAW,EAAE,cAAc,EAAE,gBAAgB,EAC7C,MAAM,EACN,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EACrD,QAAQ,EACR,WAAW,EACX,iBAAiB,EACjB,IAAI,EACJ,UAAU,EAAE,gBAAgB,GAC7B,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,aAAa,EAAE,cAAc,EAAE,YAAY,EAAE,gBAAgB,EAC7D,gBAAgB,EAAE,mBAAmB,EAAE,qBAAqB,EAC5D,WAAW,EACX,iBAAiB,EACjB,aAAa,EACb,gBAAgB,EAChB,sBAAsB,EACtB,SAAS,EACT,eAAe,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,mBAAmB,GAC9E,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAC1F,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,cAAc,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAGzH,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/integrity.json

@@ -1,7 +1,7 @@
 {
   "algorithm": "sha256",
   "artifacts": {
-    "manifest.json": "85e0a642e2b07b9f68c5722e64a0bd04d777c2e4995cb672a6f5cf82f44eb88f",
+    "manifest.json": "10771b6add0980cd49b4089f1113219b8e9be97a449361cebcdc0a2982ba3647",
     "meta.json": "798c5f5f37b0174756d2451299acfdc95c014f11d06d32b9153bbdfa9f3a580c",
     "types/index.d.ts": "39c0791f0e58025bcef82e0f7a92240508f899fc2771d5dd51b2369b4d330f13",
     "rules/deprecated-action-version.ts": "d41e6e532ab7f623af1bee4ac5279fcb2baada7defa1c5d022a5bc71983e8797",
@@ -67,5 +67,5 @@
     "skills/chant-github-patterns.md": "bb3abef289a8fdfcf07d6bb2d7289dcb2f38bc0cb0321ea320b78b45a6f548c0",
     "skills/chant-github-security.md": "aab111cb0871cad30281ce48d7da23663689619351029219e2be019a1a61e394"
   },
-  "composite": "30253c030baa3042b1eb50cb53d0d1e86d2549e9808cd2476ab4b4ddf966c831"
+  "composite": "3fd009c480fc8a3c927d5131bfc0c0ce6d93c562db6bd66405230d98b3a35106"
 }

package/dist/lint/post-synth/gha006.d.ts

@@ -0,0 +1,8 @@
+/**
+ * GHA006: Duplicate Workflow Name
+ *
+ * Detects multiple workflows sharing the same `name:` value.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const gha006: PostSynthCheck;
+//# sourceMappingURL=gha006.d.ts.map

package/dist/lint/post-synth/gha006.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gha006.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/gha006.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAI9G,eAAO,MAAM,MAAM,EAAE,cA+CpB,CAAC"}

package/dist/lint/post-synth/gha009.d.ts

@@ -0,0 +1,8 @@
+/**
+ * GHA009: Empty Matrix Dimension
+ *
+ * Detects matrix dimensions with empty values arrays.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const gha009: PostSynthCheck;
+//# sourceMappingURL=gha009.d.ts.map

package/dist/lint/post-synth/gha009.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gha009.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/gha009.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cAgCpB,CAAC"}

package/dist/lint/post-synth/gha011.d.ts

@@ -0,0 +1,8 @@
+/**
+ * GHA011: Invalid Needs Reference
+ *
+ * Detects `needs:` references to non-existent job IDs.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const gha011: PostSynthCheck;
+//# sourceMappingURL=gha011.d.ts.map

package/dist/lint/post-synth/gha011.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gha011.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/gha011.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cA8BpB,CAAC"}

package/dist/lint/post-synth/gha013.d.ts

@@ -0,0 +1,9 @@
+/**
+ * GHA013: Missing Job-Level Permissions for Sensitive Triggers
+ *
+ * Flags jobs without explicit `permissions:` when the workflow uses
+ * `pull_request_target` or `workflow_dispatch` triggers.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const gha013: PostSynthCheck;
+//# sourceMappingURL=gha013.d.ts.map

package/dist/lint/post-synth/gha013.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gha013.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/gha013.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cA6BpB,CAAC"}

package/dist/lint/post-synth/gha017.d.ts

@@ -0,0 +1,8 @@
+/**
+ * GHA017: Missing Permissions
+ *
+ * Flags workflows without an explicit `permissions:` block.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const gha017: PostSynthCheck;
+//# sourceMappingURL=gha017.d.ts.map

package/dist/lint/post-synth/gha017.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gha017.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/gha017.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cAsBpB,CAAC"}

package/dist/lint/post-synth/gha018.d.ts

@@ -0,0 +1,9 @@
+/**
+ * GHA018: Pull Request Target + Checkout Security Risk
+ *
+ * Flags workflows using `pull_request_target` trigger with a checkout action
+ * in steps — this is a known security anti-pattern.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const gha018: PostSynthCheck;
+//# sourceMappingURL=gha018.d.ts.map

package/dist/lint/post-synth/gha018.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gha018.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/gha018.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cA6BpB,CAAC"}

package/dist/lint/post-synth/gha019.d.ts

@@ -0,0 +1,9 @@
+/**
+ * GHA019: Circular Needs Chain
+ *
+ * DFS-based cycle detection on the job `needs:` dependency graph.
+ */
+import type { PostSynthCheck, PostSynthContext, PostSynthDiagnostic } from "@intentius/chant/lint/post-synth";
+export declare function checkCircularNeeds(ctx: PostSynthContext): PostSynthDiagnostic[];
+export declare const gha019: PostSynthCheck;
+//# sourceMappingURL=gha019.d.ts.map

package/dist/lint/post-synth/gha019.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gha019.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/gha019.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAG9G,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,gBAAgB,GAAG,mBAAmB,EAAE,CAqD/E;AAED,eAAO,MAAM,MAAM,EAAE,cAOpB,CAAC"}

package/dist/lint/post-synth/gha021.d.ts

@@ -0,0 +1,9 @@
+/**
+ * GHA021: Checkout Action Without Pinned SHA
+ *
+ * Flags `actions/checkout` usage that references a tag (e.g. v4) instead of
+ * a pinned commit SHA.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const gha021: PostSynthCheck;
+//# sourceMappingURL=gha021.d.ts.map

package/dist/lint/post-synth/gha021.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gha021.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/gha021.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cAqCpB,CAAC"}

package/dist/lint/post-synth/gha022.d.ts

@@ -0,0 +1,9 @@
+/**
+ * GHA022: Job Without timeout-minutes
+ *
+ * Flags jobs that do not specify `timeout-minutes`, which can lead to
+ * hung workflows consuming runner minutes.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const gha022: PostSynthCheck;
+//# sourceMappingURL=gha022.d.ts.map

package/dist/lint/post-synth/gha022.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gha022.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/gha022.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cA0CpB,CAAC"}

package/dist/lint/post-synth/gha023.d.ts

@@ -0,0 +1,9 @@
+/**
+ * GHA023: Deprecated set-output Command
+ *
+ * Flags usage of `::set-output` in run steps, which has been deprecated
+ * in favor of `$GITHUB_OUTPUT`.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const gha023: PostSynthCheck;
+//# sourceMappingURL=gha023.d.ts.map

package/dist/lint/post-synth/gha023.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gha023.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/gha023.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cAiCpB,CAAC"}

package/dist/lint/post-synth/gha024.d.ts

@@ -0,0 +1,9 @@
+/**
+ * GHA024: Missing Concurrency for Deploy Workflows
+ *
+ * Flags deploy workflows that lack a `concurrency:` block, which risks
+ * overlapping deployments.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const gha024: PostSynthCheck;
+//# sourceMappingURL=gha024.d.ts.map

package/dist/lint/post-synth/gha024.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gha024.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/gha024.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cA+BpB,CAAC"}

package/dist/lint/post-synth/gha025.d.ts

@@ -0,0 +1,9 @@
+/**
+ * GHA025: Using `pull_request_target` Without Restrictions
+ *
+ * Flags workflows that use `pull_request_target` without a `types:` filter,
+ * which can expose secrets to untrusted fork PRs.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const gha025: PostSynthCheck;
+//# sourceMappingURL=gha025.d.ts.map

package/dist/lint/post-synth/gha025.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gha025.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/gha025.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cA+BpB,CAAC"}

package/dist/lint/post-synth/gha026.d.ts

@@ -0,0 +1,10 @@
+/**
+ * GHA026: Secret Passed to Action Without `environment` Protection
+ *
+ * Flags workflows that reference `secrets.` in steps but have no
+ * `environment:` key in any job, meaning secrets lack deployment
+ * protection rules.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const gha026: PostSynthCheck;
+//# sourceMappingURL=gha026.d.ts.map

package/dist/lint/post-synth/gha026.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gha026.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/gha026.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cA4BpB,CAAC"}

package/dist/lint/post-synth/gha027.d.ts

@@ -0,0 +1,10 @@
+/**
+ * GHA027: Missing `if: always()` on Cleanup Steps
+ *
+ * Flags steps whose name contains "cleanup", "teardown", or "clean up"
+ * (case-insensitive) that lack an `if:` condition. Cleanup steps should
+ * typically run with `if: always()` so they execute even when prior steps fail.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const gha027: PostSynthCheck;
+//# sourceMappingURL=gha027.d.ts.map

package/dist/lint/post-synth/gha027.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gha027.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/gha027.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAK9G,eAAO,MAAM,MAAM,EAAE,cA2CpB,CAAC"}

package/dist/lint/post-synth/gha028.d.ts

@@ -0,0 +1,9 @@
+/**
+ * GHA028: Workflow With No `on` Triggers
+ *
+ * Flags workflow files that lack a top-level `on:` key, which means
+ * the workflow will never be triggered.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const gha028: PostSynthCheck;
+//# sourceMappingURL=gha028.d.ts.map

package/dist/lint/post-synth/gha028.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gha028.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/gha028.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cA0BpB,CAAC"}

package/dist/lint/post-synth/gha029.d.ts

@@ -0,0 +1,25 @@
+/**
+ * GHA029: Unpinned Action or Reusable-Workflow Reference
+ *
+ * Flags any `uses:` (step action or job-level reusable workflow) that is pinned
+ * to a mutable tag or branch instead of a full 40-character commit SHA. A tag
+ * can be repointed to malicious code after review, so every external reference
+ * is a supply-chain trust decision.
+ *
+ * `actions/checkout` is intentionally left to the more specific GHA021. Local
+ * references (`./`, `../`) and `docker://` images (GHA030) are out of scope.
+ * Owners in the trusted allowlist are exempt.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export interface UnpinnedRef {
+    job: string;
+    ref: string;
+    slug: string;
+}
+/**
+ * Find every action/reusable-workflow `uses:` that is not pinned to a commit
+ * SHA. Exposed as a pure function so the allowlist behaviour is testable.
+ */
+export declare function findUnpinnedActions(yaml: string, trustedOwners?: ReadonlySet<string>): UnpinnedRef[];
+export declare const gha029: PostSynthCheck;
+//# sourceMappingURL=gha029.d.ts.map

package/dist/lint/post-synth/gha029.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gha029.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/gha029.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAM9G,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,aAAa,GAAE,WAAW,CAAC,MAAM,CAAyB,GACzD,WAAW,EAAE,CAWf;AAED,eAAO,MAAM,MAAM,EAAE,cAsBpB,CAAC"}

package/dist/lint/post-synth/gha030.d.ts

@@ -0,0 +1,10 @@
+/**
+ * GHA030: Container Image Without an Immutable Digest
+ *
+ * Flags job `container:` images, `services:` images, and `docker://` step
+ * references that are not pinned to an immutable `@sha256:` digest. A mutable
+ * tag (`:latest`, `:20`) can be repointed to a different image after review.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const gha030: PostSynthCheck;
+//# sourceMappingURL=gha030.d.ts.map

package/dist/lint/post-synth/gha030.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gha030.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/gha030.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAS9G,eAAO,MAAM,MAAM,EAAE,cAuBpB,CAAC"}

package/dist/lint/post-synth/gha031.d.ts

@@ -0,0 +1,15 @@
+/**
+ * GHA031: Action Reference Resembling a Well-Known Action
+ *
+ * Flags a `uses:` slug that is a near-miss (edit distance 1–2) of a popular
+ * action but not an exact match — a likely typo or a deliberate impersonation
+ * of the well-known action under different ownership. Advisory only; backed by
+ * a vendored reference list.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+/** Levenshtein edit distance, capped: returns early once it exceeds `max`. */
+export declare function editDistance(a: string, b: string, max: number): number;
+/** Find the nearest known slug within edit distance 1–2 of `slug`, if any. */
+export declare function nearestLookAlike(slug: string): string | undefined;
+export declare const gha031: PostSynthCheck;
+//# sourceMappingURL=gha031.d.ts.map

package/dist/lint/post-synth/gha031.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gha031.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/gha031.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAM9G,8EAA8E;AAC9E,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAiBtE;AAED,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAYjE;AAED,eAAO,MAAM,MAAM,EAAE,cA0BpB,CAAC"}

package/dist/lint/post-synth/gha032.d.ts

@@ -0,0 +1,10 @@
+/**
+ * GHA032: Reference to an Archived or Compromised Action
+ *
+ * Flags a `uses:` slug that a vendored snapshot marks as archived/abandoned or
+ * carrying a disclosed security issue. Advisory only — the dataset is
+ * necessarily incomplete and may lag upstream changes.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const gha032: PostSynthCheck;
+//# sourceMappingURL=gha032.d.ts.map

package/dist/lint/post-synth/gha032.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gha032.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/gha032.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAI9G,eAAO,MAAM,MAAM,EAAE,cA0BpB,CAAC"}