@intentius/chant-lexicon-helm 0.7.0 → 0.8.0

package/dist/lint/rules/values-no-helm-tpl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"values-no-helm-tpl.d.ts","sourceRoot":"","sources":["../../../src/lint/rules/values-no-helm-tpl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAA+B,MAAM,4BAA4B,CAAC;AAGxF,eAAO,MAAM,mBAAmB,EAAE,QA8BjC,CAAC"}

package/dist/lint/rules/values-no-secrets.d.ts

@@ -0,0 +1,13 @@
+/**
+ * WHM002: Values Should Not Contain Bare Secrets
+ *
+ * Detects Values constructor props that contain keys suggesting sensitive
+ * data (password, token, key, secret, apiKey) without an `existingSecret`
+ * pattern — hardcoded secrets in values.yaml are a security anti-pattern.
+ *
+ * Bad:  new Values({ dbPassword: "hunter2" })
+ * Good: new Values({ existingSecret: "", dbPasswordKey: "password" })
+ */
+import type { LintRule } from "@intentius/chant/lint/rule";
+export declare const valuesNoSecretsRule: LintRule;
+//# sourceMappingURL=values-no-secrets.d.ts.map

package/dist/lint/rules/values-no-secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"values-no-secrets.d.ts","sourceRoot":"","sources":["../../../src/lint/rules/values-no-secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAA+B,MAAM,4BAA4B,CAAC;AAMxF,eAAO,MAAM,mBAAmB,EAAE,QA+BjC,CAAC"}

package/dist/list-artifacts.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Live introspection of Helm releases via `helm list -A -o json`.
+ *
+ * The Helm lexicon's chant entities describe chart-authoring primitives
+ * (Chart.yaml, templates/, values.yaml). The runtime concept — a Helm
+ * release installed in a kubeconfig context — is created by `helm install`
+ * outside chant's entity model. This implementation reports those releases
+ * as artifacts so `state diff --live` / `WatchOp` can detect manual
+ * installs/upgrades/rollbacks that slip past CI.
+ *
+ * Helm-not-installed (binary missing) → returns `{}` cleanly so other
+ * lexicons' snapshots aren't blocked.
+ */
+import type { ArtifactMetadata } from "@intentius/chant/lexicon";
+export declare function listArtifacts(_options: {
+    environment: string;
+    entities: Map<string, {
+        entityType: string;
+        props: Record<string, unknown>;
+    }>;
+}): Promise<Record<string, ArtifactMetadata>>;
+//# sourceMappingURL=list-artifacts.d.ts.map

package/dist/list-artifacts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-artifacts.d.ts","sourceRoot":"","sources":["../src/list-artifacts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAsBjE,wBAAsB,aAAa,CAAC,QAAQ,EAAE;IAC5C,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;CAC/E,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAqC5C"}

package/dist/lsp/completions.d.ts

@@ -0,0 +1,6 @@
+import type { CompletionContext, CompletionItem } from "@intentius/chant/lsp/types";
+/**
+ * Provide Helm resource completions based on context.
+ */
+export declare function helmCompletions(ctx: CompletionContext): CompletionItem[];
+//# sourceMappingURL=completions.d.ts.map

package/dist/lsp/completions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"completions.d.ts","sourceRoot":"","sources":["../../src/lsp/completions.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAapF;;GAEG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,iBAAiB,GAAG,cAAc,EAAE,CAExE"}

package/dist/lsp/hover.d.ts

@@ -0,0 +1,6 @@
+import type { HoverContext, HoverInfo } from "@intentius/chant/lsp/types";
+/**
+ * Provide hover information for Helm resource types.
+ */
+export declare function helmHover(ctx: HoverContext): HoverInfo | undefined;
+//# sourceMappingURL=hover.d.ts.map

package/dist/lsp/hover.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hover.d.ts","sourceRoot":"","sources":["../../src/lsp/hover.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAa1E;;GAEG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,YAAY,GAAG,SAAS,GAAG,SAAS,CAElE"}

package/dist/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "helm",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "chantVersion": ">=0.1.0",
   "namespace": "Helm",
   "intrinsics": [

package/dist/package-cli.d.ts

@@ -0,0 +1,6 @@
+#!/usr/bin/env tsx
+/**
+ * CLI entry point for Helm lexicon packaging.
+ */
+export {};
+//# sourceMappingURL=package-cli.d.ts.map

package/dist/package-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-cli.d.ts","sourceRoot":"","sources":["../src/package-cli.ts"],"names":[],"mappings":";AACA;;GAEG"}

package/dist/plugin.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Helm lexicon plugin.
+ *
+ * Implements the LexiconPlugin interface with the Helm chart serializer,
+ * Helm-specific intrinsics, lint rules, and post-synth checks.
+ */
+import type { LexiconPlugin } from "@intentius/chant/lexicon";
+export declare const helmPlugin: LexiconPlugin;
+//# sourceMappingURL=plugin.d.ts.map

package/dist/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAiC,MAAM,0BAA0B,CAAC;AAS7F,eAAO,MAAM,UAAU,EAAE,aAsWxB,CAAC"}

package/dist/render.d.ts

@@ -0,0 +1,55 @@
+/**
+ * HelmRender — render an upstream Helm chart at chant build time.
+ *
+ * Most chant projects that want to install third-party operators (ESO,
+ * cert-manager, ingress-nginx, etc.) ran `helm template` or `helm install`
+ * as a separate deploy phase. That meant the chant build output was
+ * incomplete — `kubectl apply -f dist/...yaml` didn't carry those operators.
+ *
+ * `HelmRender({ repo, chart, version, values })` resolves at synth time:
+ *   1. Shells out to `helm template` (requires the `helm` binary in PATH).
+ *   2. Parses the resulting multi-document YAML.
+ *   3. Emits each rendered K8s manifest as a Declarable in the build output.
+ *   4. Caches the rendered output under `~/.chant/helm-renders/<hash>/`
+ *      keyed by (repo, chart, version, values) so subsequent builds skip
+ *      network access.
+ *
+ * The lexicon must include both `helm` and `k8s` (since rendered manifests
+ * are k8s resources).
+ *
+ * @example
+ * import { HelmRender } from "@intentius/chant-lexicon-helm";
+ *
+ * export const eso = HelmRender({
+ *   name: "external-secrets",
+ *   repo: "https://charts.external-secrets.io",
+ *   chart: "external-secrets",
+ *   version: "0.10.4",
+ *   namespace: "external-secrets",
+ *   createNamespace: true,
+ *   values: { installCRDs: true },
+ * });
+ */
+export interface HelmRenderProps {
+    /** Logical name for the render (used in cache key + composite name). */
+    name: string;
+    /** Chart repo URL, e.g. https://charts.external-secrets.io */
+    repo: string;
+    /** Chart name, e.g. "external-secrets" */
+    chart: string;
+    /** Pinned chart version, e.g. "0.10.4" */
+    version: string;
+    /** Target namespace passed to `helm template --namespace`. */
+    namespace?: string;
+    /** Also emit a Namespace manifest. Default: false. */
+    createNamespace?: boolean;
+    /** Helm values overrides (written to a values.yaml then passed via -f). */
+    values?: Record<string, unknown>;
+    /**
+     * Skip the on-disk cache. Default: false. Tests pass `true` to force a
+     * fresh render.
+     */
+    noCache?: boolean;
+}
+export declare const HelmRender: import("@intentius/chant").CompositeDefinition<HelmRenderProps, import("@intentius/chant").CompositeMembers>;
+//# sourceMappingURL=render.d.ts.map

package/dist/render.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../src/render.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAeH,MAAM,WAAW,eAAe;IAC9B,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,0CAA0C;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,0CAA0C;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAoHD,eAAO,MAAM,UAAU,8GA8BP,CAAC"}

package/dist/resources.d.ts

@@ -0,0 +1,102 @@
+/**
+ * Helm-specific resource and property types.
+ *
+ * Created via createResource/createProperty from @intentius/chant/runtime.
+ * These are static types (no upstream schema to fetch).
+ */
+/**
+ * Helm::Chart — Chart.yaml metadata.
+ *
+ * Defines the chart's identity: apiVersion, name, version, appVersion,
+ * description, type (application|library), keywords, maintainers, dependencies.
+ */
+export declare const Chart: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+/**
+ * Helm::Values — Typed values definition.
+ *
+ * The props passed to the constructor become the default values emitted
+ * in values.yaml. The serializer also generates values.schema.json from
+ * the value types.
+ */
+export declare const Values: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+/**
+ * Helm::Test — Helm test pod.
+ *
+ * Annotated with `helm.sh/hook: test` in the serialized output.
+ * Props should contain a K8s Pod spec.
+ */
+export declare const HelmTest: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+/**
+ * Helm::Notes — NOTES.txt template content.
+ *
+ * The `content` prop is emitted as templates/NOTES.txt.
+ */
+export declare const HelmNotes: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+/**
+ * Helm::Hook — Lifecycle hook annotation.
+ *
+ * Wraps a K8s resource with helm.sh/hook annotations.
+ * Props: { hook: string, weight?: number, deletePolicy?: string, resource: Declarable }
+ */
+export declare const HelmHook: new (props: Record<string, unknown>) => Record<string, unknown>;
+/**
+ * Helm::Dependency — Chart dependency entry.
+ *
+ * Props: { name, version, repository, condition?, tags?, enabled?, importValues?, alias? }
+ */
+export declare const HelmDependency: new (props: Record<string, unknown>) => Record<string, unknown>;
+/**
+ * Helm::Maintainer — Chart maintainer entry.
+ *
+ * Props: { name, email?, url? }
+ */
+export declare const HelmMaintainer: new (props: Record<string, unknown>) => Record<string, unknown>;
+/**
+ * Helm::ValuesOverride — Generate a named YAML override file.
+ *
+ * Emits a standalone YAML file inside the chart directory, intended to be
+ * passed as `helm upgrade -f chart-dir/values-base.yaml`. Use this for
+ * static configuration shared across all deployments (disabled bundled
+ * services, shared secret references, etc.).
+ *
+ * Props: { filename: string, values: Record<string, unknown> }
+ *
+ * ```ts
+ * new ValuesOverride({
+ *   filename: "values-base",
+ *   values: { postgresql: { install: false }, redis: { install: false } },
+ * })
+ * // → generates chart-dir/values-base.yaml
+ * ```
+ */
+export declare const ValuesOverride: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+/**
+ * Helm::CRD — Custom Resource Definition placed in the crds/ directory.
+ *
+ * Props: { content: string, filename?: string }
+ */
+export declare const HelmCRD: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const Deployment: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const StatefulSet: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const DaemonSet: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const Service: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const ServiceAccount: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const ConfigMap: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const Namespace: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const Job: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const CronJob: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const Ingress: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const NetworkPolicy: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const HPA: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const PDB: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const ResourceQuota: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const LimitRange: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const ClusterRole: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const ClusterRoleBinding: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const Role: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const RoleBinding: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const ExternalSecret: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const ServiceMonitor: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const PrometheusRule: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const Certificate: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+//# sourceMappingURL=resources.d.ts.map

package/dist/resources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../src/resources.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH;;;;;GAKG;AACH,eAAO,MAAM,KAAK,+IAA6C,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,MAAM,+IAA8C,CAAC;AAElE;;;;;GAKG;AACH,eAAO,MAAM,QAAQ,+IAA4C,CAAC;AAElE;;;;GAIG;AACH,eAAO,MAAM,SAAS,+IAA6C,CAAC;AAIpE;;;;;GAKG;AACH,eAAO,MAAM,QAAQ,iEAAwC,CAAC;AAE9D;;;;GAIG;AACH,eAAO,MAAM,cAAc,iEAA8C,CAAC;AAE1E;;;;GAIG;AACH,eAAO,MAAM,cAAc,iEAA8C,CAAC;AAE1E;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,cAAc,+IAAsD,CAAC;AAIlF;;;;GAIG;AACH,eAAO,MAAM,OAAO,+IAA2C,CAAC;AAOhE,eAAO,MAAM,UAAU,+IAAmD,CAAC;AAC3E,eAAO,MAAM,WAAW,+IAAoD,CAAC;AAC7E,eAAO,MAAM,SAAS,+IAAkD,CAAC;AACzE,eAAO,MAAM,OAAO,+IAAgD,CAAC;AACrE,eAAO,MAAM,cAAc,+IAAuD,CAAC;AACnF,eAAO,MAAM,SAAS,+IAAkD,CAAC;AACzE,eAAO,MAAM,SAAS,+IAAkD,CAAC;AACzE,eAAO,MAAM,GAAG,+IAA6C,CAAC;AAC9D,eAAO,MAAM,OAAO,+IAAiD,CAAC;AACtE,eAAO,MAAM,OAAO,+IAAsD,CAAC;AAC3E,eAAO,MAAM,aAAa,+IAA4D,CAAC;AACvF,eAAO,MAAM,GAAG,+IAAuE,CAAC;AACxF,eAAO,MAAM,GAAG,+IAA8D,CAAC;AAC/E,eAAO,MAAM,aAAa,+IAAsD,CAAC;AACjF,eAAO,MAAM,UAAU,+IAAmD,CAAC;AAC3E,eAAO,MAAM,WAAW,+IAAoD,CAAC;AAC7E,eAAO,MAAM,kBAAkB,+IAA2D,CAAC;AAC3F,eAAO,MAAM,IAAI,+IAA6C,CAAC;AAC/D,eAAO,MAAM,WAAW,+IAAoD,CAAC;AAC7E,eAAO,MAAM,cAAc,+IAAkE,CAAC;AAC9F,eAAO,MAAM,cAAc,+IAA6D,CAAC;AACzF,eAAO,MAAM,cAAc,+IAA6D,CAAC;AACzF,eAAO,MAAM,WAAW,+IAA2D,CAAC"}

package/dist/serializer.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Helm chart serializer.
+ *
+ * Converts Chant declarables into a complete Helm chart directory structure
+ * returned as a SerializerResult with a files map:
+ *
+ *   Chart.yaml, values.yaml, values.schema.json, .helmignore,
+ *   templates/_helpers.tpl, templates/<resource>.yaml, templates/NOTES.txt,
+ *   templates/tests/test-connection.yaml
+ *
+ * The serializer detects `__helm_tpl` markers in walked values and emits
+ * raw Go template expressions instead of YAML-quoting them. It also
+ * detects `__helm_if` markers to wrap entire resources in conditionals.
+ */
+import type { Serializer } from "@intentius/chant/serializer";
+/**
+ * Helm chart serializer implementation.
+ */
+export declare const helmSerializer: Serializer;
+//# sourceMappingURL=serializer.d.ts.map

package/dist/serializer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serializer.d.ts","sourceRoot":"","sources":["../src/serializer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,OAAO,KAAK,EAAE,UAAU,EAAoB,MAAM,6BAA6B,CAAC;AAitBhF;;GAEG;AACH,eAAO,MAAM,cAAc,EAAE,UAoO5B,CAAC"}

package/dist/validate-cli.d.ts

@@ -0,0 +1,6 @@
+#!/usr/bin/env tsx
+/**
+ * CLI entry point for Helm lexicon validation.
+ */
+export {};
+//# sourceMappingURL=validate-cli.d.ts.map

package/dist/validate-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-cli.d.ts","sourceRoot":"","sources":["../src/validate-cli.ts"],"names":[],"mappings":";AACA;;GAEG"}

package/dist/validate.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Validate generated lexicon-helm artifacts.
+ *
+ * Thin wrapper around the core validation framework
+ * with Helm-specific configuration.
+ */
+import { type ValidateResult } from "@intentius/chant/codegen/validate";
+export type { ValidateCheck, ValidateResult } from "@intentius/chant/codegen/validate";
+/**
+ * Validate the generated lexicon-helm artifacts.
+ */
+export declare function validate(opts?: {
+    basePath?: string;
+}): Promise<ValidateResult>;
+//# sourceMappingURL=validate.d.ts.map

package/dist/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAA4B,KAAK,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAElG,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAavF;;GAEG;AACH,wBAAsB,QAAQ,CAAC,IAAI,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAQpF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-helm",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "Helm chart lexicon for chant — declarative IaC in TypeScript",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",
@@ -29,8 +29,26 @@
     "access": "public"
   },
   "exports": {
-    ".": "./src/index.ts",
-    "./*": "./src/*.ts",
+    ".": {
+      "development": "./src/index.ts",
+      "types": "./dist/index.d.ts",
+      "default": "./src/index.ts"
+    },
+    "./*": {
+      "development": "./src/*.ts",
+      "types": "./dist/*.d.ts",
+      "default": "./src/*.ts"
+    },
+    "./detect": {
+      "development": "./src/detect.ts",
+      "types": "./dist/detect.d.ts",
+      "default": "./src/detect.ts"
+    },
+    "./lint/post-synth": {
+      "development": "./src/lint/post-synth/index.ts",
+      "types": "./dist/lint/post-synth/index.d.ts",
+      "default": "./src/lint/post-synth/index.ts"
+    },
     "./manifest": "./dist/manifest.json",
     "./meta": "./dist/meta.json",
     "./types": "./dist/types/index.d.ts"
@@ -40,7 +58,8 @@
     "bundle": "tsx src/package-cli.ts",
     "validate": "tsx src/validate-cli.ts",
     "docs": "tsx src/codegen/docs-cli.ts",
-    "prepack": "npm run generate && npm run bundle && npm run validate"
+    "prepack": "npm run generate && npm run bundle && npm run validate && npm run build",
+    "build": "tsc -p tsconfig.build.json && tsc-alias -p tsconfig.build.json && find dist -type f \\( -name \"*.js\" -o -name \"*.js.map\" \\) -delete"
   },
   "dependencies": {
     "@intentius/chant-lexicon-k8s": "*"
@@ -50,6 +69,6 @@
     "typescript": "^5.9.3"
   },
   "peerDependencies": {
-    "@intentius/chant": "^0.1.0"
+    "@intentius/chant": "^0.8.0"
   }
 }

package/src/detect.ts

@@ -0,0 +1,10 @@
+/** Edge-safe template detection for helm (Chart.yaml) — see #426. */
+export function detectTemplate(data: unknown): boolean {
+  if (typeof data !== "object" || data === null) return false;
+  const obj = data as Record<string, unknown>;
+  // Helm charts have apiVersion: v2 in Chart.yaml
+  if (obj.apiVersion === "v2" && typeof obj.name === "string" && typeof obj.version === "string") {
+    return true;
+  }
+  return false;
+}

package/src/lint/post-synth/index.ts

@@ -0,0 +1,47 @@
+// Code generated by chant generate. DO NOT EDIT.
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+import { whm005 } from "./whm005-no-empty-wrapper";
+import { whm101 } from "./whm101";
+import { whm102 } from "./whm102";
+import { whm103 } from "./whm103";
+import { whm104 } from "./whm104";
+import { whm105 } from "./whm105";
+import { whm201 } from "./whm201";
+import { whm202 } from "./whm202";
+import { whm203 } from "./whm203";
+import { whm204 } from "./whm204";
+import { whm301 } from "./whm301";
+import { whm302 } from "./whm302";
+import { whm401 } from "./whm401";
+import { whm402 } from "./whm402";
+import { whm403 } from "./whm403";
+import { whm404 } from "./whm404";
+import { whm405 } from "./whm405";
+import { whm406 } from "./whm406";
+import { whm407 } from "./whm407";
+import { whm501 } from "./whm501";
+import { whm502 } from "./whm502";
+
+export const postSynthChecks: PostSynthCheck[] = [
+  whm005,
+  whm101,
+  whm102,
+  whm103,
+  whm104,
+  whm105,
+  whm201,
+  whm202,
+  whm203,
+  whm204,
+  whm301,
+  whm302,
+  whm401,
+  whm402,
+  whm403,
+  whm404,
+  whm405,
+  whm406,
+  whm407,
+  whm501,
+  whm502,
+];

package/src/plugin.ts

@@ -6,7 +6,9 @@
  */
 
 import type { LexiconPlugin, IntrinsicDef, InitTemplateSet } from "@intentius/chant/lexicon";
-import { discoverLintRules, discoverPostSynthChecks } from "@intentius/chant/lint/discover";
+import { detectTemplate } from "./detect";
+import { discoverLintRules } from "@intentius/chant/lint/discover";
+import { postSynthChecks as postSynthCheckList } from "./lint/post-synth";
 import { createSkillsLoader, createDiffTool } from "@intentius/chant/lexicon-plugin-helpers";
 import { join, dirname } from "path";
 import { fileURLToPath } from "url";
@@ -22,8 +24,7 @@ export const helmPlugin: LexiconPlugin = {
   },
 
   postSynthChecks() {
-    const postSynthDir = join(dirname(fileURLToPath(import.meta.url)), "lint", "post-synth");
-    return discoverPostSynthChecks(postSynthDir, import.meta.url);
+    return postSynthCheckList;
   },
 
   intrinsics(): IntrinsicDef[] {
@@ -54,15 +55,7 @@ export const helmPlugin: LexiconPlugin = {
     ];
   },
 
-  detectTemplate(data: unknown): boolean {
-    if (typeof data !== "object" || data === null) return false;
-    const obj = data as Record<string, unknown>;
-    // Helm charts have apiVersion: v2 in Chart.yaml
-    if (obj.apiVersion === "v2" && typeof obj.name === "string" && typeof obj.version === "string") {
-      return true;
-    }
-    return false;
-  },
+  detectTemplate,
 
   mcpTools() {
     return [createDiffTool(helmSerializer, "Compare current Helm chart build output against previous output", "helm")];