@intentius/chant-lexicon-helm 0.7.0 → 0.8.0

package/dist/intrinsics.d.ts

@@ -0,0 +1,260 @@
+/**
+ * Helm template intrinsics.
+ *
+ * All intrinsics implement INTRINSIC_MARKER and produce `toJSON()` output
+ * containing `__helm_tpl` markers that the serializer detects and emits
+ * as raw Go template expressions instead of YAML-quoting them.
+ */
+import { INTRINSIC_MARKER, type Intrinsic } from "@intentius/chant/intrinsic";
+/** JSON marker key used by the serializer to detect Helm template expressions. */
+export declare const HELM_TPL_KEY = "__helm_tpl";
+/** JSON marker key for conditional resource wrappers. */
+export declare const HELM_IF_KEY = "__helm_if";
+/** JSON marker key for range loops. */
+export declare const HELM_RANGE_KEY = "__helm_range";
+/** JSON marker key for with scopes. */
+export declare const HELM_WITH_KEY = "__helm_with";
+/**
+ * Base class for all Helm template expressions.
+ *
+ * `toJSON()` returns `{ __helm_tpl: "{{ expr }}" }` which the serializer
+ * detects and emits as a raw Go template directive.
+ */
+export declare class HelmTpl implements Intrinsic {
+    readonly [INTRINSIC_MARKER]: true;
+    readonly expr: string;
+    constructor(expr: string);
+    toJSON(): {
+        __helm_tpl: string;
+    };
+    /**
+     * Pipe this expression through a Go template function.
+     * `values.x.pipe("upper").pipe("quote")` → `{{ .Values.x | upper | quote }}`
+     */
+    pipe(fn: string): HelmTpl;
+    toString(): string;
+}
+/**
+ * Values proxy — the primary way to reference Helm values in templates.
+ *
+ * ```ts
+ * values.replicas        // → {{ .Values.replicas }}
+ * values.image.tag       // → {{ .Values.image.tag }}
+ * values.x.pipe("quote") // → {{ .Values.x | quote }}
+ * ```
+ */
+export declare const values: Record<string, any>;
+/**
+ * Release built-in object.
+ *
+ * `Release.Name` → `{{ .Release.Name }}`
+ */
+export declare const Release: Record<string, HelmTpl>;
+/**
+ * ChartRef built-in object (named ChartRef to avoid conflict with Chart resource).
+ *
+ * `ChartRef.Name` → `{{ .Chart.Name }}`
+ */
+export declare const ChartRef: Record<string, HelmTpl>;
+/**
+ * Capabilities built-in object — supports arbitrarily nested property access.
+ *
+ * `Capabilities.KubeVersion.Version` → `{{ .Capabilities.KubeVersion.Version }}`
+ * `Capabilities.APIVersions` → `{{ .Capabilities.APIVersions }}`
+ * `Capabilities.HelmVersion.Version` → `{{ .Capabilities.HelmVersion.Version }}`
+ */
+export declare const Capabilities: Record<string, any>;
+/**
+ * Template built-in object.
+ *
+ * `Template.Name` → `{{ .Template.Name }}`
+ * `Template.BasePath` → `{{ .Template.BasePath }}`
+ */
+export declare const Template: Record<string, HelmTpl>;
+/**
+ * `.Files.Get` — Read a file from the chart directory.
+ *
+ * `filesGet("config.ini")` → `{{ .Files.Get "config.ini" }}`
+ */
+export declare function filesGet(path: string): HelmTpl;
+/**
+ * `.Files.Glob` — Match files by glob pattern.
+ *
+ * `filesGlob("conf/*")` → `{{ .Files.Glob "conf/*" }}`
+ */
+export declare function filesGlob(pattern: string): HelmTpl;
+/**
+ * `.Files.Glob.AsConfig` — Render matched files as ConfigMap data.
+ *
+ * `filesAsConfig("conf/*")` → `{{ (.Files.Glob "conf/*").AsConfig }}`
+ */
+export declare function filesAsConfig(pattern: string): HelmTpl;
+/**
+ * `.Files.Glob.AsSecrets` — Render matched files as Secret data.
+ *
+ * `filesAsSecrets("conf/*")` → `{{ (.Files.Glob "conf/*").AsSecrets }}`
+ */
+export declare function filesAsSecrets(pattern: string): HelmTpl;
+/**
+ * `include` — Include a named template.
+ *
+ * `include("my-app.fullname")` → `{{ include "my-app.fullname" . }}`
+ */
+export declare function include(name: string, ctx?: string): HelmTpl;
+/**
+ * `required` — Require a value to be set.
+ *
+ * `required("msg", values.x)` → `{{ required "msg" .Values.x }}`
+ */
+export declare function required(msg: string, val: HelmTpl): HelmTpl;
+/**
+ * `helmDefault` — Provide a default value.
+ *
+ * `helmDefault("nginx", values.image.repository)` → `{{ default "nginx" .Values.image.repository }}`
+ */
+export declare function helmDefault(def: string | number | boolean, val: HelmTpl): HelmTpl;
+/**
+ * `toYaml` — Convert a value to YAML.
+ *
+ * `toYaml(values.resources)` → `{{ toYaml .Values.resources | nindent 12 }}`
+ */
+export declare function toYaml(val: HelmTpl, indent?: number): HelmTpl;
+/**
+ * `quote` — Quote a value.
+ *
+ * `quote(values.x)` → `{{ quote .Values.x }}`
+ */
+export declare function quote(val: HelmTpl): HelmTpl;
+/**
+ * `printf` — Format a string.
+ *
+ * `printf("%s:%s", values.image.repository, values.image.tag)`
+ * → `{{ printf "%s:%s" .Values.image.repository .Values.image.tag }}`
+ */
+export declare function printf(fmt: string, ...args: (HelmTpl | string)[]): HelmTpl;
+/**
+ * `tpl` — Evaluate a string as a template.
+ *
+ * `tpl(values.someTemplate)` → `{{ tpl .Values.someTemplate . }}`
+ */
+export declare function tpl(template: HelmTpl, ctx?: string): HelmTpl;
+/**
+ * `lookup` — Look up a resource at deploy time.
+ *
+ * `lookup("v1", "Secret", "ns", "name")` → `{{ lookup "v1" "Secret" "ns" "name" }}`
+ */
+export declare function lookup(apiVersion: string, kind: string, namespace: string, name: string): HelmTpl;
+/**
+ * Marker interface for conditional resource wrappers.
+ */
+export interface HelmConditional extends Intrinsic {
+    readonly condition: string;
+    readonly body: unknown;
+    readonly elseBody?: unknown;
+}
+/**
+ * `If` — Conditional resource or value.
+ *
+ * When used at the resource level (wrapping a Declarable), the serializer
+ * wraps the entire YAML document in `{{- if }}` / `{{- end }}`.
+ *
+ * When used at the value level, it emits inline conditionals.
+ *
+ * ```ts
+ * If(values.ingress.enabled, new Ingress({ ... }))
+ * ```
+ */
+export declare function If(condition: HelmTpl | string, then: unknown, elseBody?: unknown): HelmConditional & {
+    toJSON(): unknown;
+};
+/**
+ * `ElseIf` — Chained else-if condition for use inside an `If` else body.
+ *
+ * The serializer detects when an else body contains a `__helm_if` marker
+ * and emits `{{- else if <cond> }}` instead of a nested `{{- else }}\n{{- if }}`.
+ *
+ * ```ts
+ * If(values.tier, "gold",
+ *   ElseIf(values.backup, "silver", "bronze"))
+ * ```
+ * → `{{- if .Values.tier }}gold{{- else if .Values.backup }}silver{{- else }}bronze{{- end }}`
+ */
+export declare function ElseIf(condition: HelmTpl | string, then: unknown, elseBody?: unknown): {
+    toJSON(): unknown;
+};
+/**
+ * `Range` — Iterate over a list at deploy time.
+ *
+ * ```ts
+ * Range(values.hosts, (item) => ({ host: item }))
+ * ```
+ */
+export declare function Range(list: HelmTpl, body: unknown): Intrinsic;
+/**
+ * `With` — Scope into a value at deploy time.
+ *
+ * ```ts
+ * With(values.nodeSelector, (ctx) => ctx)
+ * ```
+ */
+export declare function With(scope: HelmTpl, body: unknown): Intrinsic;
+/**
+ * Helm hook annotations for resource ordering.
+ *
+ * Returns an annotation map for pre-install/pre-upgrade hooks
+ * with a numeric weight for ordering.
+ *
+ * Usage: `metadata: { annotations: { ...withOrder(1) } }`
+ */
+export declare function withOrder(weight: number): Record<string, string>;
+/**
+ * Argo CD sync wave annotation.
+ *
+ * Returns an annotation map with the Argo CD sync wave number.
+ *
+ * Usage: `metadata: { annotations: { ...argoWave(2) } }`
+ */
+export declare function argoWave(wave: number): Record<string, string>;
+/**
+ * JSON marker key used by the serializer to detect runtime slot placeholders.
+ * Distinguished from HelmTpl: RuntimeSlot appears in values.yaml as '' AND
+ * is collected into values-runtime-slots.yaml with its description as a comment.
+ */
+export declare const RUNTIME_SLOT_KEY: "__runtime_slot";
+/**
+ * A deploy-time value placeholder in a Values object.
+ *
+ * Marks fields that cannot be known at build time (DB IP, bucket name, etc.)
+ * and must be supplied via a `-f` override file when running `helm upgrade`.
+ *
+ * Two outputs are generated:
+ * - `values.yaml` — the field emits `''` (empty placeholder)
+ * - `values-runtime-slots.yaml` — lists only the RuntimeSlot fields with
+ *   their descriptions as YAML comments, for use as a deploy-time checklist
+ *
+ * ```ts
+ * new Values({
+ *   global: {
+ *     psql: { host: runtimeSlot("Cloud SQL private IP") },
+ *   }
+ * })
+ * ```
+ */
+export declare class RuntimeSlot implements Intrinsic {
+    readonly [INTRINSIC_MARKER]: true;
+    readonly description: string;
+    constructor(description?: string);
+    toJSON(): {
+        [RUNTIME_SLOT_KEY]: string;
+    };
+}
+/**
+ * Mark a Values field as a deploy-time runtime slot.
+ *
+ * Emits `''` in values.yaml and generates an entry in values-runtime-slots.yaml.
+ *
+ * @param description Human-readable description of what to provide.
+ *   Emitted as a YAML comment in values-runtime-slots.yaml.
+ */
+export declare function runtimeSlot(description?: string): RuntimeSlot;
+//# sourceMappingURL=intrinsics.d.ts.map

package/dist/intrinsics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intrinsics.d.ts","sourceRoot":"","sources":["../src/intrinsics.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,gBAAgB,EAAE,KAAK,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAI9E,kFAAkF;AAClF,eAAO,MAAM,YAAY,eAAe,CAAC;AAEzC,yDAAyD;AACzD,eAAO,MAAM,WAAW,cAAc,CAAC;AAEvC,uCAAuC;AACvC,eAAO,MAAM,cAAc,iBAAiB,CAAC;AAE7C,uCAAuC;AACvC,eAAO,MAAM,aAAa,gBAAgB,CAAC;AAI3C;;;;;GAKG;AACH,qBAAa,OAAQ,YAAW,SAAS;IACvC,QAAQ,CAAC,CAAC,gBAAgB,CAAC,EAAG,IAAI,CAAU;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,IAAI,EAAE,MAAM;IAIxB,MAAM,IAAI;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE;IAIhC;;;OAGG;IACH,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAMzB,QAAQ,IAAI,MAAM;CAGnB;AA+DD;;;;;;;;GAQG;AACH,eAAO,MAAM,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAuB,CAAC;AAY/D;;;;GAIG;AACH,eAAO,MAAM,OAAO,yBAElB,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,QAAQ,yBAInB,CAAC;AAmCH;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAA6C,CAAC;AAE3F;;;;;GAKG;AACH,eAAO,MAAM,QAAQ,yBAAyD,CAAC;AAI/E;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE9C;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAElD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEvD;AAID;;;;GAIG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,GAAE,MAAY,GAAG,OAAO,CAEhE;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAG3D;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAIjF;AAED;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAM7D;AAED;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAG3C;AAED;;;;;GAKG;AACH,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC,OAAO,GAAG,MAAM,CAAC,EAAE,GAAG,OAAO,CAK1E;AAED;;;;GAIG;AACH,wBAAgB,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,GAAE,MAAY,GAAG,OAAO,CAGjE;AAED;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAEjG;AAID;;GAEG;AACH,MAAM,WAAW,eAAgB,SAAQ,SAAS;IAChD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,EAAE,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,eAAe,GAAG;IAAE,MAAM,IAAI,OAAO,CAAA;CAAE,CAmB1H;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,MAAM,CACpB,SAAS,EAAE,OAAO,GAAG,MAAM,EAC3B,IAAI,EAAE,OAAO,EACb,QAAQ,CAAC,EAAE,OAAO,GACjB;IAAE,MAAM,IAAI,OAAO,CAAA;CAAE,CAWvB;AAED;;;;;;GAMG;AACH,wBAAgB,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,GAAG,SAAS,CAW7D;AAED;;;;;;GAMG;AACH,wBAAgB,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,GAAG,SAAS,CAW7D;AAID;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAKhE;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAE7D;AAID;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,EAAG,gBAAyB,CAAC;AAE1D;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,WAAY,YAAW,SAAS;IAC3C,QAAQ,CAAC,CAAC,gBAAgB,CAAC,EAAG,IAAI,CAAU;IAC5C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;gBAEjB,WAAW,SAAK;IAI5B,MAAM,IAAI;QAAE,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAAE;CAGzC;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,WAAW,SAAK,GAAG,WAAW,CAEzD"}

package/dist/lint/post-synth/helm-helpers.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Shared helpers for Helm post-synth checks.
+ *
+ * Provides utilities to extract and parse the Helm chart files
+ * from the serializer's SerializerResult output.
+ */
+import type { SerializerResult } from "@intentius/chant/serializer";
+/**
+ * Extract the files map from a serializer output.
+ * Returns empty object if output is a plain string.
+ */
+export declare function getChartFiles(output: string | SerializerResult): Record<string, string>;
+/**
+ * Parse Chart.yaml content into key-value pairs.
+ * Lightweight parser — not a full YAML parser.
+ */
+export declare function parseChartYaml(content: string): Record<string, string>;
+/**
+ * Check if a string contains balanced Go template braces.
+ */
+export declare function hasBalancedBraces(content: string): boolean;
+/**
+ * Extract all Go template expressions from content.
+ */
+export declare function extractTemplateExpressions(content: string): string[];
+//# sourceMappingURL=helm-helpers.d.ts.map

package/dist/lint/post-synth/helm-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm-helpers.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/helm-helpers.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAGpE;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAGvF;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAStE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAa1D;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAQpE"}

package/dist/lint/post-synth/index.d.ts

@@ -0,0 +1,3 @@
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const postSynthChecks: PostSynthCheck[];
+//# sourceMappingURL=index.d.ts.map

package/dist/lint/post-synth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAuBvE,eAAO,MAAM,eAAe,EAAE,cAAc,EAsB3C,CAAC"}

package/dist/lint/post-synth/whm005-no-empty-wrapper.d.ts

@@ -0,0 +1,14 @@
+/**
+ * WHM005: Chart Has Sub-chart Dependencies But Generates No Templates
+ *
+ * A chart with HelmDependency entries but no templates/*.yaml files generates
+ * an empty templates/ directory. Deploying it requires `helm dependency build`
+ * as a non-obvious prerequisite.
+ *
+ * If you only need value overrides for an upstream chart, deploy it directly:
+ *   helm upgrade upstream-chart -f values-override.yaml
+ * and use ValuesOverride to generate the override file.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const whm005: PostSynthCheck;
+//# sourceMappingURL=whm005-no-empty-wrapper.d.ts.map

package/dist/lint/post-synth/whm005-no-empty-wrapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whm005-no-empty-wrapper.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/whm005-no-empty-wrapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cAsCpB,CAAC"}

package/dist/lint/post-synth/whm101.d.ts

@@ -0,0 +1,6 @@
+/**
+ * WHM101: Chart.yaml has required fields and valid apiVersion (v2).
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const whm101: PostSynthCheck;
+//# sourceMappingURL=whm101.d.ts.map

package/dist/lint/post-synth/whm101.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whm101.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/whm101.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cAsCpB,CAAC"}

package/dist/lint/post-synth/whm102.d.ts

@@ -0,0 +1,6 @@
+/**
+ * WHM102: values.schema.json present when Values type is used.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const whm102: PostSynthCheck;
+//# sourceMappingURL=whm102.d.ts.map

package/dist/lint/post-synth/whm102.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whm102.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/whm102.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cAyBpB,CAAC"}

package/dist/lint/post-synth/whm103.d.ts

@@ -0,0 +1,6 @@
+/**
+ * WHM103: Go template syntax valid (balanced braces, valid function names).
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const whm103: PostSynthCheck;
+//# sourceMappingURL=whm103.d.ts.map

package/dist/lint/post-synth/whm103.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whm103.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/whm103.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AA2B9G,eAAO,MAAM,MAAM,EAAE,cA2BpB,CAAC"}

package/dist/lint/post-synth/whm104.d.ts

@@ -0,0 +1,6 @@
+/**
+ * WHM104: NOTES.txt exists for application charts.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const whm104: PostSynthCheck;
+//# sourceMappingURL=whm104.d.ts.map

package/dist/lint/post-synth/whm104.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whm104.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/whm104.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cA2BpB,CAAC"}

package/dist/lint/post-synth/whm105.d.ts

@@ -0,0 +1,6 @@
+/**
+ * WHM105: _helpers.tpl exists.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const whm105: PostSynthCheck;
+//# sourceMappingURL=whm105.d.ts.map

package/dist/lint/post-synth/whm105.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whm105.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/whm105.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cAsBpB,CAAC"}

package/dist/lint/post-synth/whm201.d.ts

@@ -0,0 +1,6 @@
+/**
+ * WHM201: Resources should have standard Helm labels.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const whm201: PostSynthCheck;
+//# sourceMappingURL=whm201.d.ts.map

package/dist/lint/post-synth/whm201.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whm201.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/whm201.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cA4BpB,CAAC"}

package/dist/lint/post-synth/whm202.d.ts

@@ -0,0 +1,6 @@
+/**
+ * WHM202: Hook weights should be defined for multi-hook charts.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const whm202: PostSynthCheck;
+//# sourceMappingURL=whm202.d.ts.map

package/dist/lint/post-synth/whm202.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whm202.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/whm202.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cA0CpB,CAAC"}

package/dist/lint/post-synth/whm203.d.ts

@@ -0,0 +1,10 @@
+/**
+ * WHM203: Values entries should be documented.
+ *
+ * Checks that values.yaml has YAML comments or that values.schema.json
+ * provides descriptions. Since Chant generates values.yaml from code,
+ * this check looks for values.schema.json as the documentation source.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const whm203: PostSynthCheck;
+//# sourceMappingURL=whm203.d.ts.map

package/dist/lint/post-synth/whm203.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whm203.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/whm203.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cA2BpB,CAAC"}

package/dist/lint/post-synth/whm204.d.ts

@@ -0,0 +1,6 @@
+/**
+ * WHM204: Dependencies should use semver ranges.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const whm204: PostSynthCheck;
+//# sourceMappingURL=whm204.d.ts.map

package/dist/lint/post-synth/whm204.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whm204.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/whm204.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAK9G,eAAO,MAAM,MAAM,EAAE,cAkDpB,CAAC"}

package/dist/lint/post-synth/whm301.d.ts

@@ -0,0 +1,6 @@
+/**
+ * WHM301: At least one test should be defined for application charts.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const whm301: PostSynthCheck;
+//# sourceMappingURL=whm301.d.ts.map

package/dist/lint/post-synth/whm301.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whm301.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/whm301.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cAiCpB,CAAC"}

package/dist/lint/post-synth/whm302.d.ts

@@ -0,0 +1,6 @@
+/**
+ * WHM302: Resource limits should be set (via values or defaults).
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const whm302: PostSynthCheck;
+//# sourceMappingURL=whm302.d.ts.map

package/dist/lint/post-synth/whm302.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whm302.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/whm302.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cAgCpB,CAAC"}

package/dist/lint/post-synth/whm401.d.ts

@@ -0,0 +1,9 @@
+/**
+ * WHM401: Image uses `:latest` tag or no tag.
+ *
+ * Scans template `image:` lines for literal values (not `.Values` refs)
+ * ending in `:latest` or missing `:`.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const whm401: PostSynthCheck;
+//# sourceMappingURL=whm401.d.ts.map

package/dist/lint/post-synth/whm401.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whm401.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/whm401.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cA8CpB,CAAC"}

package/dist/lint/post-synth/whm402.d.ts

@@ -0,0 +1,9 @@
+/**
+ * WHM402: No `runAsNonRoot` security context.
+ *
+ * For files with `containers:`, checks for `runAsNonRoot: true` or
+ * a `.Values.securityContext` reference.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const whm402: PostSynthCheck;
+//# sourceMappingURL=whm402.d.ts.map

package/dist/lint/post-synth/whm402.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whm402.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/whm402.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cAkCpB,CAAC"}

package/dist/lint/post-synth/whm403.d.ts

@@ -0,0 +1,9 @@
+/**
+ * WHM403: No `readOnlyRootFilesystem` security context.
+ *
+ * For files with `containers:`, checks for `readOnlyRootFilesystem: true`
+ * or a `.Values.securityContext` reference.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const whm403: PostSynthCheck;
+//# sourceMappingURL=whm403.d.ts.map

package/dist/lint/post-synth/whm403.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whm403.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/whm403.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cAkCpB,CAAC"}

package/dist/lint/post-synth/whm404.d.ts

@@ -0,0 +1,6 @@
+/**
+ * WHM404: `privileged: true` found — security risk.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const whm404: PostSynthCheck;
+//# sourceMappingURL=whm404.d.ts.map

package/dist/lint/post-synth/whm404.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whm404.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/whm404.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cA4BpB,CAAC"}

package/dist/lint/post-synth/whm405.d.ts

@@ -0,0 +1,9 @@
+/**
+ * WHM405: Resource spec missing `cpu`/`memory` in `limits`/`requests`.
+ *
+ * When `resources:` is present (not via `.Values`), validates that
+ * sub-keys `limits` and `requests` with `cpu`/`memory` exist.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const whm405: PostSynthCheck;
+//# sourceMappingURL=whm405.d.ts.map

package/dist/lint/post-synth/whm405.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whm405.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/whm405.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cA0CpB,CAAC"}

package/dist/lint/post-synth/whm406.d.ts

@@ -0,0 +1,8 @@
+/**
+ * WHM406: Chart uses `crds/` directory — warn that Helm never upgrades/deletes CRDs.
+ *
+ * Suggests using `HelmCRDLifecycle` composite for managed CRD lifecycle.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const whm406: PostSynthCheck;
+//# sourceMappingURL=whm406.d.ts.map

package/dist/lint/post-synth/whm406.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whm406.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/whm406.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cAwBpB,CAAC"}

package/dist/lint/post-synth/whm407.d.ts

@@ -0,0 +1,9 @@
+/**
+ * WHM407: `kind: Secret` with inline `data:` values and no ExternalSecret/SealedSecret.
+ *
+ * Warns when secrets contain inline data values (not `.Values` refs) and the chart
+ * does not use ExternalSecret or SealedSecret resources.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const whm407: PostSynthCheck;
+//# sourceMappingURL=whm407.d.ts.map

package/dist/lint/post-synth/whm407.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whm407.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/whm407.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cAwEpB,CAAC"}

package/dist/lint/post-synth/whm501.d.ts

@@ -0,0 +1,10 @@
+/**
+ * WHM501: Unused values keys.
+ *
+ * Parses values.yaml key paths and scans all template files for
+ * `.Values.` references. Keys defined but never referenced produce
+ * an info diagnostic.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const whm501: PostSynthCheck;
+//# sourceMappingURL=whm501.d.ts.map

package/dist/lint/post-synth/whm501.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whm501.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/whm501.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAuC9G,eAAO,MAAM,MAAM,EAAE,cAuDpB,CAAC"}

package/dist/lint/post-synth/whm502.d.ts

@@ -0,0 +1,9 @@
+/**
+ * WHM502: K8s API version/kind validation.
+ *
+ * Checks for deprecated or invalid Kubernetes API versions in templates
+ * and suggests replacements.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const whm502: PostSynthCheck;
+//# sourceMappingURL=whm502.d.ts.map

package/dist/lint/post-synth/whm502.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whm502.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/whm502.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAiD9G,eAAO,MAAM,MAAM,EAAE,cAqCpB,CAAC"}

package/dist/lint/rules/chart-metadata.d.ts

@@ -0,0 +1,11 @@
+/**
+ * WHM001: Chart Metadata Required
+ *
+ * Detects Chart constructors missing required fields: name, version, apiVersion.
+ *
+ * Bad:  new Chart({})
+ * Good: new Chart({ apiVersion: "v2", name: "my-app", version: "0.1.0" })
+ */
+import type { LintRule } from "@intentius/chant/lint/rule";
+export declare const chartMetadataRule: LintRule;
+//# sourceMappingURL=chart-metadata.d.ts.map

package/dist/lint/rules/chart-metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chart-metadata.d.ts","sourceRoot":"","sources":["../../../src/lint/rules/chart-metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAA+B,MAAM,4BAA4B,CAAC;AAKxF,eAAO,MAAM,iBAAiB,EAAE,QAiD/B,CAAC"}

package/dist/lint/rules/no-hardcoded-image.d.ts

@@ -0,0 +1,14 @@
+/**
+ * WHM003: Container Images Should Use Values References
+ *
+ * Detects container image strings that are hardcoded in K8s resource
+ * constructors instead of using values references. In Helm charts, images
+ * should be parameterized via values.yaml so they can be overridden at
+ * install time.
+ *
+ * Bad:  image: "nginx:1.19"
+ * Good: image: printf("%s:%s", values.image.repository, values.image.tag)
+ */
+import type { LintRule } from "@intentius/chant/lint/rule";
+export declare const noHardcodedImageRule: LintRule;
+//# sourceMappingURL=no-hardcoded-image.d.ts.map

package/dist/lint/rules/no-hardcoded-image.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-hardcoded-image.d.ts","sourceRoot":"","sources":["../../../src/lint/rules/no-hardcoded-image.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAA+B,MAAM,4BAA4B,CAAC;AASxF,eAAO,MAAM,oBAAoB,EAAE,QAwClC,CAAC"}

package/dist/lint/rules/values-no-helm-tpl.d.ts

@@ -0,0 +1,13 @@
+/**
+ * WHM004: HelmTpl Expression Has No Effect in Values Constructor
+ *
+ * Detects Values constructor props that use `v.xxx` (the `values` proxy)
+ * or any HelmTpl-like expression. values.yaml is static YAML — it is NOT
+ * processed as a Go template by Helm. These expressions silently become ''.
+ *
+ * Bad:  new Values({ host: v.pgHost })
+ * Good: new Values({ host: runtimeSlot("Cloud SQL private IP") })
+ */
+import type { LintRule } from "@intentius/chant/lint/rule";
+export declare const valuesNoHelmTplRule: LintRule;
+//# sourceMappingURL=values-no-helm-tpl.d.ts.map