@intentius/chant-lexicon-k8s 0.121.1 → 0.123.0

package/dist/integrity.json

@@ -1,14 +1,14 @@
 {
   "algorithm": "sha256",
   "artifacts": {
-    "manifest.json": "f847aa3ee4e16d52b1c680dcb73b10a71f2426b0e018528b082731e7c392aa80",
+    "manifest.json": "56813d7035054bfab4ce70fba22c1455d77903dc35b22ead041b6e759c37dc4b",
     "meta.json": "c1831ac15083f5e0e45b29698d7b77f1c01646240fe6de5d6320753188594f69",
     "types/index.d.ts": "5c5340046d090ae9db5553039d923cf92a8b2eb57aa4dc941273ed5bcfb5bc9d",
     "rules/argo-appset-single-project.ts": "afa9f310753aa2d475f35012b13135b2dfaebed2a35d44edbe185ebc07673674",
     "rules/argo-ast.ts": "f57b7d84fef9c9cd326a7cad0dff290914e01299415d64bdab48e2f6eb4181c3",
     "rules/argo-automated-prune.ts": "176ac5441c3ccb7106a194abab3abe22fd8a29f976716761c66c243b72d57b14",
     "rules/flux-source-ref-pin.ts": "f25038eaba7f33ea679b59087d7557f3ffd2d798ea02db6f9f6929e36d470c6e",
-    "rules/hardcoded-namespace.ts": "ba3f43f2adbffdd87db20a2c45839354ceecda1b9f04f29ae31c4c077dddc7ec",
+    "rules/hardcoded-namespace.ts": "8dd82b6be3197285b82f5b92dfe0e25deb8048e16f90e8e5c28ee0d04804e384",
     "rules/latest-image-tag.ts": "9dd961b791b4f424fc4edcdbdce69ad30476dc1cd03f66b8c8e19cb5f8a4082d",
     "rules/missing-resource-limits.ts": "d64b5ed1c7c87d60e38eecfdad7668620222bbaf6ff6f4860adf54e816265bb2",
     "rules/argo-helpers.ts": "ac68a33978b03c0fde7a6e4fa0c9a8907c21d11012d9408b6db64c66cb7ec635",
@@ -78,5 +78,5 @@
     "skills/chant-k8s-argo.md": "24c9a85b78a2fc5c6657424baac9cc6d6caff6f47605b8146b2c0082133181cf",
     "skills/chant-k8s-flux.md": "9670efc2e9854bd14686b5adeb707396b9030a4dcaee6529b30abf56efe2c50c"
   },
-  "composite": "ba0c961b2480111a60c6390d098b375b818a20003e14d046c97878e638738a3f"
+  "composite": "b16450e1fd1ae50df6b81d3b0784e631cc4f68ad441d1f354bfb0f669b98f589"
 }

package/dist/lint/rules/hardcoded-namespace.d.ts

@@ -1,13 +1,3 @@
 import type { LintRule } from "@intentius/chant/lint/rule";
-/**
- * WK8001: Hardcoded Namespace
- *
- * Detects hardcoded namespace strings in Kubernetes resource constructors.
- * Namespaces should be parameterized or derived from configuration, not
- * hardcoded as string literals.
- *
- * Bad:  new Deployment({ metadata: { namespace: "production" } })
- * Good: new Deployment({ metadata: { namespace: config.namespace } })
- */
 export declare const hardcodedNamespaceRule: LintRule;
 //# sourceMappingURL=hardcoded-namespace.d.ts.map

package/dist/lint/rules/hardcoded-namespace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hardcoded-namespace.d.ts","sourceRoot":"","sources":["../../../src/lint/rules/hardcoded-namespace.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAA+B,MAAM,4BAA4B,CAAC;AAGxF;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,EAAE,QA0CpC,CAAC"}
+{"version":3,"file":"hardcoded-namespace.d.ts","sourceRoot":"","sources":["../../../src/lint/rules/hardcoded-namespace.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAA+B,MAAM,4BAA4B,CAAC;AA2BxF,eAAO,MAAM,sBAAsB,EAAE,QA2CpC,CAAC"}

package/dist/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "k8s",
-  "version": "0.121.1",
+  "version": "0.123.0",
   "chantVersion": ">=0.1.0",
   "namespace": "K8s",
   "intrinsics": [],

package/dist/rules/hardcoded-namespace.ts

@@ -4,13 +4,27 @@ import * as ts from "typescript";
 /**
  * WK8001: Hardcoded Namespace
  *
- * Detects hardcoded namespace strings in Kubernetes resource constructors.
+ * Detects hardcoded namespace strings in a Kubernetes resource's `metadata`.
  * Namespaces should be parameterized or derived from configuration, not
  * hardcoded as string literals.
  *
  * Bad:  new Deployment({ metadata: { namespace: "production" } })
  * Good: new Deployment({ metadata: { namespace: config.namespace } })
  */
+/**
+ * Only `metadata: { namespace }` is a Kubernetes namespace. Other `namespace`
+ * keys are another tool's setting (an OpenTelemetry connector's metric prefix,
+ * for one) and a k8s rule has no business flagging them.
+ */
+function isMetadataEntry(node: ts.PropertyAssignment): boolean {
+  const owner = node.parent.parent;
+  return (
+    ts.isPropertyAssignment(owner) &&
+    ts.isIdentifier(owner.name) &&
+    owner.name.text === "metadata"
+  );
+}
+
 export const hardcodedNamespaceRule: LintRule = {
   id: "WK8001",
   severity: "warning",
@@ -28,7 +42,8 @@ export const hardcodedNamespaceRule: LintRule = {
         ts.isPropertyAssignment(node) &&
         ts.isIdentifier(node.name) &&
         node.name.text === "namespace" &&
-        ts.isStringLiteral(node.initializer)
+        ts.isStringLiteral(node.initializer) &&
+        isMetadataEntry(node)
       ) {
         const value = node.initializer.text;
         // Skip empty strings — those are likely intentional placeholders

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-k8s",
-  "version": "0.121.1",
+  "version": "0.123.0",
   "description": "Kubernetes lexicon for chant — declarative IaC in TypeScript",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",
@@ -78,7 +78,7 @@
     "@types/js-yaml": "^4.0.9"
   },
   "optionalDependencies": {
-    "@intentius/chant-k8s-client": "^0.121.1"
+    "@intentius/chant-k8s-client": "^0.123.0"
   },
   "devDependencies": {
     "@intentius/chant": "*",
@@ -86,7 +86,7 @@
   },
   "peerDependencies": {
     "zod": "^4.3.6",
-    "@intentius/chant": "^0.121.1",
+    "@intentius/chant": "^0.123.0",
     "typescript": "^5.9.3"
   }
 }

package/src/lint/rules/hardcoded-namespace.ts

@@ -4,13 +4,27 @@ import * as ts from "typescript";
 /**
  * WK8001: Hardcoded Namespace
  *
- * Detects hardcoded namespace strings in Kubernetes resource constructors.
+ * Detects hardcoded namespace strings in a Kubernetes resource's `metadata`.
  * Namespaces should be parameterized or derived from configuration, not
  * hardcoded as string literals.
  *
  * Bad:  new Deployment({ metadata: { namespace: "production" } })
  * Good: new Deployment({ metadata: { namespace: config.namespace } })
  */
+/**
+ * Only `metadata: { namespace }` is a Kubernetes namespace. Other `namespace`
+ * keys are another tool's setting (an OpenTelemetry connector's metric prefix,
+ * for one) and a k8s rule has no business flagging them.
+ */
+function isMetadataEntry(node: ts.PropertyAssignment): boolean {
+  const owner = node.parent.parent;
+  return (
+    ts.isPropertyAssignment(owner) &&
+    ts.isIdentifier(owner.name) &&
+    owner.name.text === "metadata"
+  );
+}
+
 export const hardcodedNamespaceRule: LintRule = {
   id: "WK8001",
   severity: "warning",
@@ -28,7 +42,8 @@ export const hardcodedNamespaceRule: LintRule = {
         ts.isPropertyAssignment(node) &&
         ts.isIdentifier(node.name) &&
         node.name.text === "namespace" &&
-        ts.isStringLiteral(node.initializer)
+        ts.isStringLiteral(node.initializer) &&
+        isMetadataEntry(node)
       ) {
         const value = node.initializer.text;
         // Skip empty strings — those are likely intentional placeholders