@intentius/chant-lexicon-k8s 0.41.19 → 0.42.1

package/dist/components/builders.d.ts

@@ -11,7 +11,11 @@
  * instead of a raw object literal.
  */
 import type { KubectlApplyInput } from "./kubectl-apply.js";
+import type { KustomizeApplyInput } from "./kustomize-apply.js";
 export declare const kubectlApply: (input: KubectlApplyInput & {
     noRollback?: string;
 }) => import("@intentius/chant/components").Step;
+export declare const kustomizeApply: (input: KustomizeApplyInput & {
+    noRollback?: string;
+}) => import("@intentius/chant/components").Step;
 //# sourceMappingURL=builders.d.ts.map

package/dist/components/builders.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"builders.d.ts","sourceRoot":"","sources":["../../src/components/builders.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,eAAO,MAAM,YAAY;iBAA2C,MAAM;gDAAoB,CAAC"}
+{"version":3,"file":"builders.d.ts","sourceRoot":"","sources":["../../src/components/builders.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE7D,eAAO,MAAM,YAAY;iBAA2C,MAAM;gDAAoB,CAAC;AAI/F,eAAO,MAAM,cAAc;iBAA6C,MAAM;gDAAsB,CAAC"}

package/dist/components/capability-plugin.d.ts

@@ -1,6 +1,6 @@
 import { type CapabilityPlugin } from "@intentius/chant/components/capability-plugin";
 export declare const K8S_VERB_FAMILIES: {
-    readonly apply: readonly ["kubectl-apply"];
+    readonly apply: readonly ["kubectl-apply", "kustomize-apply"];
 };
 export declare const k8sCapabilityPlugin: CapabilityPlugin;
 //# sourceMappingURL=capability-plugin.d.ts.map

package/dist/components/capability-plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capability-plugin.d.ts","sourceRoot":"","sources":["../../src/components/capability-plugin.ts"],"names":[],"mappings":"AAWA,OAAO,EAAqB,KAAK,gBAAgB,EAAE,MAAM,+CAA+C,CAAC;AAGzG,eAAO,MAAM,iBAAiB;;CAEpB,CAAC;AAEX,eAAO,MAAM,mBAAmB,EAAE,gBAWjC,CAAC"}
+{"version":3,"file":"capability-plugin.d.ts","sourceRoot":"","sources":["../../src/components/capability-plugin.ts"],"names":[],"mappings":"AAWA,OAAO,EAAqB,KAAK,gBAAgB,EAAE,MAAM,+CAA+C,CAAC;AAIzG,eAAO,MAAM,iBAAiB;;CAEpB,CAAC;AAEX,eAAO,MAAM,mBAAmB,EAAE,gBAWjC,CAAC"}

package/dist/components/index.d.ts

@@ -13,4 +13,5 @@
 export { k8sCapabilityPlugin, K8S_VERB_FAMILIES } from "./capability-plugin.js";
 export * from "./builders.js";
 export { kubectlApplyCapability, createKubectlApplyCapability, type KubectlApplyInput, type KubectlApplyOutcome, } from "./kubectl-apply.js";
+export { kustomizeApplyCapability, createKustomizeApplyCapability, renderCommand, type KustomizeApplyInput, type KustomizeApplyOutcome, } from "./kustomize-apply.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/components/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/components/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7E,cAAc,YAAY,CAAC;AAC3B,OAAO,EACL,sBAAsB,EACtB,4BAA4B,EAC5B,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,GACzB,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/components/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7E,cAAc,YAAY,CAAC;AAC3B,OAAO,EACL,sBAAsB,EACtB,4BAA4B,EAC5B,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,wBAAwB,EACxB,8BAA8B,EAC9B,aAAa,EACb,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,GAC3B,MAAM,mBAAmB,CAAC"}

package/dist/components/kustomize-apply.d.ts

@@ -0,0 +1,48 @@
+import type { Capability } from "@intentius/chant/components/capability";
+/** Injectable shell runner — the helm-upgrade seam, same buffer bound. */
+export type KustomizeRunner = (command: string) => Promise<{
+    stdout: string;
+}>;
+/** Structural mirrors of the activity module's shapes (see the module doc). */
+interface AppliedRef {
+    apiVersion: string;
+    kind: string;
+    name: string;
+    namespace?: string;
+}
+export interface KustomizeApplyOutcome {
+    fieldManager: string;
+    applied: AppliedRef[];
+    pruned: AppliedRef[];
+}
+interface ApplierArgs {
+    manifest: string;
+    documents?: Array<Record<string, unknown>>;
+    environment?: string;
+    stack?: string;
+    context?: string;
+    deleteMode?: "never" | "owned-only" | "gated";
+}
+type Applier = (args: ApplierArgs) => Promise<KustomizeApplyOutcome>;
+export interface KustomizeApplyInput {
+    /** The kustomization directory (holds `kustomization.yaml`) — an overlay or a base. */
+    dir: string;
+    /**
+     * The deploy unit / ownership stack — same double duty as kubectl-apply's.
+     * Omitted derives from the project's `ownership.stack`, but then the unit is
+     * invisible to `components status --live`. Name it.
+     */
+    stack?: string;
+    /** kubectl context. Omitted resolves `k8s.profiles.<ctx.env>.context`. */
+    context?: string;
+    /** Same delete vocabulary as kubectl-apply; default `never`. */
+    delete?: "never" | "owned-only";
+}
+/** The exact render command, standalone binary first. Pure; exported for tests. */
+export declare function renderCommand(dir: string, tool?: "kustomize" | "kubectl"): string;
+/** Factory with injectable renderer + applier, so tests assert the render
+ * command and the exact applier delegation without kustomize or a cluster. */
+export declare function createKustomizeApplyCapability(run?: KustomizeRunner, apply?: Applier): Capability<KustomizeApplyInput, KustomizeApplyOutcome>;
+export declare const kustomizeApplyCapability: Capability<KustomizeApplyInput, KustomizeApplyOutcome>;
+export {};
+//# sourceMappingURL=kustomize-apply.d.ts.map

package/dist/components/kustomize-apply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kustomize-apply.d.ts","sourceRoot":"","sources":["../../src/components/kustomize-apply.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAAE,UAAU,EAAiB,MAAM,wCAAwC,CAAC;AAIxF,0EAA0E;AAC1E,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAQ/E,+EAA+E;AAC/E,UAAU,UAAU;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,MAAM,EAAE,UAAU,EAAE,CAAC;CACtB;AAED,UAAU,WAAW;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,GAAG,YAAY,GAAG,OAAO,CAAC;CAC/C;AAED,KAAK,OAAO,GAAG,CAAC,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAErE,MAAM,WAAW,mBAAmB;IAClC,uFAAuF;IACvF,GAAG,EAAE,MAAM,CAAC;IACZ;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,MAAM,CAAC,EAAE,OAAO,GAAG,YAAY,CAAC;CACjC;AAED,mFAAmF;AACnF,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,WAAW,GAAG,SAAuB,GAAG,MAAM,CAE9F;AAoBD;8EAC8E;AAC9E,wBAAgB,8BAA8B,CAC5C,GAAG,GAAE,eAA+B,EACpC,KAAK,CAAC,EAAE,OAAO,GACd,UAAU,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAmBxD;AAED,eAAO,MAAM,wBAAwB,wDAAmC,CAAC"}

package/dist/deep-observe-hooks.d.ts

@@ -65,6 +65,14 @@ import type { DeepArrayElement, DeepNormalizationHooks } from "@intentius/chant/
  * under it is exactly at its default.
  */
 export declare const K8S_SERVICE_DEFAULTS: Record<string, Record<string, unknown>>;
+/**
+ * Server-ASSIGNED fields — populated by the API server with a value that
+ * varies per object (an allocated ClusterIP, the resolved IP family list), so
+ * unlike {@link K8S_SERVICE_DEFAULTS} there is no fixed value to compare
+ * against. Counterpart-gated like the defaults table: a declared `clusterIP`
+ * is still compared, only the purely server-filled appearance is noise.
+ */
+export declare const K8S_SERVER_ASSIGNED_PATTERNS: Record<string, ReadonlySet<string>>;
 /**
  * Order an associative list's element by the identity the SPEC declares for it
  * (chant #1441), falling back to `@intentius/chant/managed-fields`'s hand-written

package/dist/deep-observe-hooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deep-observe-hooks.d.ts","sourceRoot":"","sources":["../src/deep-observe-hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAY,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAYnG;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAcxE,CAAC;AA+EF;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,GAAG,SAAS,CAYnF;AAMD,eAAO,MAAM,yBAAyB,EAAE,sBAWvC,CAAC"}
+{"version":3,"file":"deep-observe-hooks.d.ts","sourceRoot":"","sources":["../src/deep-observe-hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAY,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAanG;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAoCxE,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAE5E,CAAC;AAiGF;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,GAAG,SAAS,CAYnF;AAMD,eAAO,MAAM,yBAAyB,EAAE,sBAmBvC,CAAC"}

package/dist/describe-resources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"describe-resources.d.ts","sourceRoot":"","sources":["../src/describe-resources.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAsC,MAAM,0BAA0B,CAAC;AAGtG,OAAO,KAAK,EAAa,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAuB,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAmBvE;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CA0BvD;AAgED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,EAAE,GAAG,SAAS,CAetE;AAQD,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IAC9E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,sFAAsF;IACtF,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,wBAAwB,EACjC,OAAO,GAAE,YAAkC,GAC1C,OAAO,CAAC,iBAAiB,CAAC,CAmI5B"}
+{"version":3,"file":"describe-resources.d.ts","sourceRoot":"","sources":["../src/describe-resources.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAsC,MAAM,0BAA0B,CAAC;AAGtG,OAAO,KAAK,EAAa,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAuB,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAmBvE;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CA2CvD;AA4FD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,EAAE,GAAG,SAAS,CAetE;AAQD,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IAC9E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,sFAAsF;IACtF,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,wBAAwB,EACjC,OAAO,GAAE,YAAkC,GAC1C,OAAO,CAAC,iBAAiB,CAAC,CAmI5B"}

package/dist/index.d.ts

@@ -2,6 +2,7 @@ export { k8sSerializer } from "./serializer.js";
 export { k8sPlugin } from "./plugin.js";
 export { k8sCapabilityPlugin, K8S_VERB_FAMILIES } from "./components/capability-plugin.js";
 export { kubectlApplyCapability, createKubectlApplyCapability, type KubectlApplyInput } from "./components/kubectl-apply.js";
+export { kustomizeApplyCapability, createKustomizeApplyCapability, type KustomizeApplyInput } from "./components/kustomize-apply.js";
 export { defaultLabels, defaultAnnotations, isDefaultLabels, isDefaultAnnotations } from "./default-labels.js";
 export { DEFAULT_LABELS_MARKER, DEFAULT_ANNOTATIONS_MARKER } from "./default-labels.js";
 export { K8sLabels, K8sAnnotations } from "./variables.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAKrC,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACxF,OAAO,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,KAAK,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAG1H,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAC5G,OAAO,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAGrF,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAGxD,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAI/D,cAAc,mBAAmB,CAAC;AAGlC,OAAO,EACL,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EACzF,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,gBAAgB,EAAE,kBAAkB,EACxF,kBAAkB,EAAE,UAAU,EAAE,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,gBAAgB,EAAE,aAAa,EACjH,aAAa,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,UAAU,EAAE,sBAAsB,EAC3H,UAAU,EAAE,kBAAkB,EAAE,sBAAsB,EACtD,UAAU,EAAE,MAAM,EAAE,UAAU,EAC9B,UAAU,EAAE,oBAAoB,EAAE,mBAAmB,EACrD,WAAW,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,qBAAqB,EAChF,iCAAiC,EACjC,iBAAiB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,mBAAmB,GAC9E,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,WAAW,EAAE,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,kBAAkB,EACrG,sBAAsB,EAAE,uBAAuB,EAAE,eAAe,EAAE,gBAAgB,EAClF,iBAAiB,EAAE,kBAAkB,EAAE,cAAc,EAAE,eAAe,EACtE,aAAa,EAAE,cAAc,EAAE,kBAAkB,EAAE,mBAAmB,EACtE,kBAAkB,EAAE,mBAAmB,EAAE,eAAe,EAAE,gBAAgB,EAC1E,qBAAqB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,wBAAwB,EAChG,uBAAuB,EAAE,wBAAwB,EAAE,eAAe,EAAE,gBAAgB,EACpF,oBAAoB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,qBAAqB,EACxF,mBAAmB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,sBAAsB,EACxF,kBAAkB,EAAE,mBAAmB,EACvC,kBAAkB,EAAE,mBAAmB,EACvC,mCAAmC,EAAE,oCAAoC,EACzE,sBAAsB,EAAE,uBAAuB,EAC/C,0BAA0B,EAAE,2BAA2B,EACvD,eAAe,EAAE,gBAAgB,EACjC,2BAA2B,EAAE,4BAA4B,EACzD,eAAe,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,wBAAwB,EACpF,4BAA4B,EAAE,gCAAgC,EAAE,0BAA0B,EAC1F,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAC/F,WAAW,EAAE,YAAY,EACzB,eAAe,EAAE,gBAAgB,EACjC,eAAe,EAAE,cAAc,EAC/B,iBAAiB,EAAE,gBAAgB,EACnC,gBAAgB,EAAE,2BAA2B,EAAE,0BAA0B,EACzE,0BAA0B,EAAE,yBAAyB,EACrD,gBAAgB,EAAE,iBAAiB,EACnC,0BAA0B,EAAE,2BAA2B,EACvD,0BAA0B,EAAE,2BAA2B,EACvD,0BAA0B,EAAE,2BAA2B,EACvD,sCAAsC,EAAE,uCAAuC,EAC/E,sBAAsB,EAAE,uBAAuB,EAC/C,qBAAqB,EAAE,sBAAsB,EAC7C,wBAAwB,EAAE,yBAAyB,EACnD,wBAAwB,EAAE,yBAAyB,GACpD,MAAM,oBAAoB,CAAC;AAG5B,cAAc,iBAAiB,CAAC;AAGhC,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC7G,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,kBAAkB,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGrI,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGvE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAG1D,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAKrC,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACxF,OAAO,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,KAAK,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC1H,OAAO,EAAE,wBAAwB,EAAE,8BAA8B,EAAE,KAAK,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAGlI,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAC5G,OAAO,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAGrF,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAGxD,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAI/D,cAAc,mBAAmB,CAAC;AAGlC,OAAO,EACL,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EACzF,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,gBAAgB,EAAE,kBAAkB,EACxF,kBAAkB,EAAE,UAAU,EAAE,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,gBAAgB,EAAE,aAAa,EACjH,aAAa,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,UAAU,EAAE,sBAAsB,EAC3H,UAAU,EAAE,kBAAkB,EAAE,sBAAsB,EACtD,UAAU,EAAE,MAAM,EAAE,UAAU,EAC9B,UAAU,EAAE,oBAAoB,EAAE,mBAAmB,EACrD,WAAW,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,qBAAqB,EAChF,iCAAiC,EACjC,iBAAiB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,mBAAmB,GAC9E,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,WAAW,EAAE,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,kBAAkB,EACrG,sBAAsB,EAAE,uBAAuB,EAAE,eAAe,EAAE,gBAAgB,EAClF,iBAAiB,EAAE,kBAAkB,EAAE,cAAc,EAAE,eAAe,EACtE,aAAa,EAAE,cAAc,EAAE,kBAAkB,EAAE,mBAAmB,EACtE,kBAAkB,EAAE,mBAAmB,EAAE,eAAe,EAAE,gBAAgB,EAC1E,qBAAqB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,wBAAwB,EAChG,uBAAuB,EAAE,wBAAwB,EAAE,eAAe,EAAE,gBAAgB,EACpF,oBAAoB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,qBAAqB,EACxF,mBAAmB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,sBAAsB,EACxF,kBAAkB,EAAE,mBAAmB,EACvC,kBAAkB,EAAE,mBAAmB,EACvC,mCAAmC,EAAE,oCAAoC,EACzE,sBAAsB,EAAE,uBAAuB,EAC/C,0BAA0B,EAAE,2BAA2B,EACvD,eAAe,EAAE,gBAAgB,EACjC,2BAA2B,EAAE,4BAA4B,EACzD,eAAe,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,wBAAwB,EACpF,4BAA4B,EAAE,gCAAgC,EAAE,0BAA0B,EAC1F,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAC/F,WAAW,EAAE,YAAY,EACzB,eAAe,EAAE,gBAAgB,EACjC,eAAe,EAAE,cAAc,EAC/B,iBAAiB,EAAE,gBAAgB,EACnC,gBAAgB,EAAE,2BAA2B,EAAE,0BAA0B,EACzE,0BAA0B,EAAE,yBAAyB,EACrD,gBAAgB,EAAE,iBAAiB,EACnC,0BAA0B,EAAE,2BAA2B,EACvD,0BAA0B,EAAE,2BAA2B,EACvD,0BAA0B,EAAE,2BAA2B,EACvD,sCAAsC,EAAE,uCAAuC,EAC/E,sBAAsB,EAAE,uBAAuB,EAC/C,qBAAqB,EAAE,sBAAsB,EAC7C,wBAAwB,EAAE,yBAAyB,EACnD,wBAAwB,EAAE,yBAAyB,GACpD,MAAM,oBAAoB,CAAC;AAG5B,cAAc,iBAAiB,CAAC;AAGhC,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC7G,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,kBAAkB,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGrI,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGvE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAG1D,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC"}

package/dist/integrity.json

@@ -1,7 +1,7 @@
 {
   "algorithm": "sha256",
   "artifacts": {
-    "manifest.json": "33f334c5e62c1afb85d92d215862e87c92e454a204b6cb979978c99806da3a3e",
+    "manifest.json": "9a86742dc7d08b1d32dd3ae73ae9a62febf09f0a83f2cfaaeeee5c26efdaba05",
     "meta.json": "c0b141b882c51483c1d1aead748a0eb171aceca7432edd2a0404b062bf6d7831",
     "types/index.d.ts": "3be2af7494aca94adfa16269cb9c4e7a155529872207a3d70b0c4d39914f9eec",
     "rules/argo-appset-single-project.ts": "afa9f310753aa2d475f35012b13135b2dfaebed2a35d44edbe185ebc07673674",
@@ -50,5 +50,5 @@
     "skills/chant-k8s-aks.md": "e18f0e2b055f72cd7a37deaf258d7027c2d4d3e286e8fd4975b27a1f981a3ad9",
     "skills/chant-k8s-argo.md": "b1a0b826559d8c5033a479c5781efaf650320f0aee4419d8841170bd3393cea5"
   },
-  "composite": "f6735e62a85a052fe7dffe5c38147933df2bcd8254009f5d747a6a1410409f5f"
+  "composite": "cb6e9c99fe95c9c11ad9440c2ae9082e36c26ca90574b636904fcf25775b0250"
 }

package/dist/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "k8s",
-  "version": "0.41.19",
+  "version": "0.42.1",
   "chantVersion": ">=0.1.0",
   "namespace": "K8s",
   "intrinsics": [],

package/dist/okf/index.md

@@ -0,0 +1,250 @@
+---
+okf_version: '0.2'
+---
+
+# Resource types
+
+* [Alert](/types/Alert.md) - K8s::Flux::Alert
+* [APIGroup](/types/APIGroup.md) - K8s::Core::APIGroup
+* [APIGroupList](/types/APIGroupList.md) - K8s::Core::APIGroupList
+* [APIResourceList](/types/APIResourceList.md) - K8s::Core::APIResourceList
+* [APIService](/types/APIService.md) - K8s::Apiregistration::APIService
+* [APIServiceList](/types/APIServiceList.md) - K8s::Apiregistration::APIServiceList
+* [APIVersions](/types/APIVersions.md) - K8s::Core::APIVersions
+* [Application](/types/Application.md) - K8s::Argo::Application
+* [ApplicationSet](/types/ApplicationSet.md) - K8s::Argo::ApplicationSet
+* [AppProject](/types/AppProject.md) - K8s::Argo::AppProject
+* [Backup](/types/Backup.md) - K8s::Cnpg::Backup
+* [BatchJob](/types/BatchJob.md) - K8s::Batch::Job
+* [Binding](/types/Binding.md) - K8s::Core::Binding
+* [Bucket](/types/Bucket.md) - K8s::Flux::Bucket
+* [Certificate](/types/Certificate.md) - K8s::CertManager::Certificate
+* [CertificateRequest](/types/CertificateRequest.md) - K8s::CertManager::CertificateRequest
+* [CertificateSigningRequest](/types/CertificateSigningRequest.md) - K8s::Certificates::CertificateSigningRequest
+* [CertificateSigningRequestList](/types/CertificateSigningRequestList.md) - K8s::Certificates::CertificateSigningRequestList
+* [Challenge](/types/Challenge.md) - K8s::Acme::Challenge
+* [Cluster](/types/Cluster.md) - K8s::Cnpg::Cluster
+* [ClusterIssuer](/types/ClusterIssuer.md) - K8s::CertManager::ClusterIssuer
+* [ClusterRole](/types/ClusterRole.md) - K8s::Rbac::ClusterRole
+* [ClusterRoleBinding](/types/ClusterRoleBinding.md) - K8s::Rbac::ClusterRoleBinding
+* [ClusterRoleBindingList](/types/ClusterRoleBindingList.md) - K8s::Rbac::ClusterRoleBindingList
+* [ClusterRoleList](/types/ClusterRoleList.md) - K8s::Rbac::ClusterRoleList
+* [ClusterTrustBundle](/types/ClusterTrustBundle.md) - K8s::Certificates::ClusterTrustBundle
+* [ClusterTrustBundleList](/types/ClusterTrustBundleList.md) - K8s::Certificates::ClusterTrustBundleList
+* [CM](/types/CM.md) - K8s::Core::ConfigMap
+* [ComponentStatus](/types/ComponentStatus.md) - K8s::Core::ComponentStatus
+* [ComponentStatusList](/types/ComponentStatusList.md) - K8s::Core::ComponentStatusList
+* [ConfigMapList](/types/ConfigMapList.md) - K8s::Core::ConfigMapList
+* [ControllerRevision](/types/ControllerRevision.md) - K8s::Apps::ControllerRevision
+* [ControllerRevisionList](/types/ControllerRevisionList.md) - K8s::Apps::ControllerRevisionList
+* [CoreEventList](/types/CoreEventList.md) - K8s::Core::EventList
+* [CrdbCluster](/types/CrdbCluster.md) - K8s::Crdb::CrdbCluster
+* [CronJob](/types/CronJob.md) - K8s::Batch::CronJob
+* [CronJobList](/types/CronJobList.md) - K8s::Batch::CronJobList
+* [CSIDriver](/types/CSIDriver.md) - K8s::Storage::CSIDriver
+* [CSIDriverList](/types/CSIDriverList.md) - K8s::Storage::CSIDriverList
+* [CSINode](/types/CSINode.md) - K8s::Storage::CSINode
+* [CSINodeList](/types/CSINodeList.md) - K8s::Storage::CSINodeList
+* [CSIStorageCapacity](/types/CSIStorageCapacity.md) - K8s::Storage::CSIStorageCapacity
+* [CSIStorageCapacityList](/types/CSIStorageCapacityList.md) - K8s::Storage::CSIStorageCapacityList
+* [CustomResourceDefinition](/types/CustomResourceDefinition.md) - K8s::Apiextensions::CustomResourceDefinition
+* [CustomResourceDefinitionList](/types/CustomResourceDefinitionList.md) - K8s::Apiextensions::CustomResourceDefinitionList
+* [DaemonSet](/types/DaemonSet.md) - K8s::Apps::DaemonSet
+* [DaemonSetList](/types/DaemonSetList.md) - K8s::Apps::DaemonSetList
+* [DeleteOptions](/types/DeleteOptions.md) - K8s::Core::DeleteOptions
+* [Deploy](/types/Deploy.md) - K8s::Apps::Deployment
+* [DeploymentList](/types/DeploymentList.md) - K8s::Apps::DeploymentList
+* [DeviceClass](/types/DeviceClass.md) - K8s::Resource::DeviceClass
+* [DeviceClassList](/types/DeviceClassList.md) - K8s::Resource::DeviceClassList
+* [DeviceTaintRule](/types/DeviceTaintRule.md) - K8s::Resource::DeviceTaintRule
+* [DeviceTaintRuleList](/types/DeviceTaintRuleList.md) - K8s::Resource::DeviceTaintRuleList
+* [Endpoints](/types/Endpoints.md) - K8s::Core::Endpoints
+* [EndpointSlice](/types/EndpointSlice.md) - K8s::Discovery::EndpointSlice
+* [EndpointSliceList](/types/EndpointSliceList.md) - K8s::Discovery::EndpointSliceList
+* [EndpointsList](/types/EndpointsList.md) - K8s::Core::EndpointsList
+* [Event](/types/Event.md) - K8s::Core::Event
+* [EventsEvent](/types/EventsEvent.md) - K8s::Events::Event
+* [EventsEventList](/types/EventsEventList.md) - K8s::Events::EventList
+* [Eviction](/types/Eviction.md) - K8s::Policy::Eviction
+* [FlowSchema](/types/FlowSchema.md) - K8s::Flowcontrol::FlowSchema
+* [FlowSchemaList](/types/FlowSchemaList.md) - K8s::Flowcontrol::FlowSchemaList
+* [FluxInstance](/types/FluxInstance.md) - K8s::Flux::FluxInstance
+* [FluxReport](/types/FluxReport.md) - K8s::Flux::FluxReport
+* [Gateway](/types/Gateway.md) - K8s::Gateway::Gateway
+* [GatewayClass](/types/GatewayClass.md) - K8s::Gateway::GatewayClass
+* [GitRepository](/types/GitRepository.md) - K8s::Flux::GitRepository
+* [GRPCRoute](/types/GRPCRoute.md) - K8s::Gateway::GRPCRoute
+* [HelmChart](/types/HelmChart.md) - K8s::Flux::HelmChart
+* [HelmRelease](/types/HelmRelease.md) - K8s::Flux::HelmRelease
+* [HelmRepository](/types/HelmRepository.md) - K8s::Flux::HelmRepository
+* [HorizontalPodAutoscaler](/types/HorizontalPodAutoscaler.md) - K8s::Autoscaling::HorizontalPodAutoscaler
+* [HorizontalPodAutoscalerList](/types/HorizontalPodAutoscalerList.md) - K8s::Autoscaling::HorizontalPodAutoscalerList
+* [HTTPRoute](/types/HTTPRoute.md) - K8s::Gateway::HTTPRoute
+* [ImagePolicy](/types/ImagePolicy.md) - K8s::Flux::ImagePolicy
+* [ImageRepository](/types/ImageRepository.md) - K8s::Flux::ImageRepository
+* [ImageUpdateAutomation](/types/ImageUpdateAutomation.md) - K8s::Flux::ImageUpdateAutomation
+* [InfisicalDynamicSecret](/types/InfisicalDynamicSecret.md) - K8s::Infisical::InfisicalDynamicSecret
+* [InfisicalPushSecret](/types/InfisicalPushSecret.md) - K8s::Infisical::InfisicalPushSecret
+* [InfisicalSecret](/types/InfisicalSecret.md) - K8s::Infisical::InfisicalSecret
+* [Ing](/types/Ing.md) - K8s::Networking::Ingress
+* [IngressClass](/types/IngressClass.md) - K8s::Networking::IngressClass
+* [IngressClassList](/types/IngressClassList.md) - K8s::Networking::IngressClassList
+* [IngressList](/types/IngressList.md) - K8s::Networking::IngressList
+* [IngressRoute](/types/IngressRoute.md) - K8s::Traefik::IngressRoute
+* [IngressRouteTCP](/types/IngressRouteTCP.md) - K8s::Traefik::IngressRouteTCP
+* [IngressRouteUDP](/types/IngressRouteUDP.md) - K8s::Traefik::IngressRouteUDP
+* [IPAddress](/types/IPAddress.md) - K8s::Networking::IPAddress
+* [IPAddressList](/types/IPAddressList.md) - K8s::Networking::IPAddressList
+* [Issuer](/types/Issuer.md) - K8s::CertManager::Issuer
+* [JobList](/types/JobList.md) - K8s::Batch::JobList
+* [Kustomization](/types/Kustomization.md) - K8s::Flux::Kustomization
+* [Lease](/types/Lease.md) - K8s::Coordination::Lease
+* [LeaseCandidate](/types/LeaseCandidate.md) - K8s::Coordination::LeaseCandidate
+* [LeaseCandidateList](/types/LeaseCandidateList.md) - K8s::Coordination::LeaseCandidateList
+* [LeaseList](/types/LeaseList.md) - K8s::Coordination::LeaseList
+* [LimitRange](/types/LimitRange.md) - K8s::Core::LimitRange
+* [LimitRangeList](/types/LimitRangeList.md) - K8s::Core::LimitRangeList
+* [LocalSubjectAccessReview](/types/LocalSubjectAccessReview.md) - K8s::Authorization::LocalSubjectAccessReview
+* [MicroVM](/types/MicroVM.md) - K8s::KubeMicroVM::MicroVM
+* [MicroVMClass](/types/MicroVMClass.md) - K8s::KubeMicroVM::MicroVMClass
+* [MicroVMImage](/types/MicroVMImage.md) - K8s::KubeMicroVM::MicroVMImage
+* [MicroVMNetwork](/types/MicroVMNetwork.md) - K8s::KubeMicroVM::MicroVMNetwork
+* [MicroVMReplicaSet](/types/MicroVMReplicaSet.md) - K8s::KubeMicroVM::MicroVMReplicaSet
+* [Middleware](/types/Middleware.md) - K8s::Traefik::Middleware
+* [MiddlewareTCP](/types/MiddlewareTCP.md) - K8s::Traefik::MiddlewareTCP
+* [MutatingAdmissionPolicy](/types/MutatingAdmissionPolicy.md) - K8s::Admissionregistration::MutatingAdmissionPolicy
+* [MutatingAdmissionPolicyBinding](/types/MutatingAdmissionPolicyBinding.md) - K8s::Admissionregistration::MutatingAdmissionPolicyBinding
+* [MutatingAdmissionPolicyBindingList](/types/MutatingAdmissionPolicyBindingList.md) - K8s::Admissionregistration::MutatingAdmissionPolicyBindingList
+* [MutatingAdmissionPolicyList](/types/MutatingAdmissionPolicyList.md) - K8s::Admissionregistration::MutatingAdmissionPolicyList
+* [MutatingWebhookConfiguration](/types/MutatingWebhookConfiguration.md) - K8s::Admissionregistration::MutatingWebhookConfiguration
+* [MutatingWebhookConfigurationList](/types/MutatingWebhookConfigurationList.md) - K8s::Admissionregistration::MutatingWebhookConfigurationList
+* [Namespace](/types/Namespace.md) - K8s::Core::Namespace
+* [NamespaceList](/types/NamespaceList.md) - K8s::Core::NamespaceList
+* [NetPol](/types/NetPol.md) - K8s::Networking::NetworkPolicy
+* [NetworkPolicyList](/types/NetworkPolicyList.md) - K8s::Networking::NetworkPolicyList
+* [Node](/types/Node.md) - K8s::Core::Node
+* [NodeList](/types/NodeList.md) - K8s::Core::NodeList
+* [ObjectStore](/types/ObjectStore.md) - K8s::Cnpg::ObjectStore
+* [OCIRepository](/types/OCIRepository.md) - K8s::Flux::OCIRepository
+* [Order](/types/Order.md) - K8s::Acme::Order
+* [PDB](/types/PDB.md) - K8s::Policy::PodDisruptionBudget
+* [PersistentVolume](/types/PersistentVolume.md) - K8s::Core::PersistentVolume
+* [PersistentVolumeClaim](/types/PersistentVolumeClaim.md) - K8s::Core::PersistentVolumeClaim
+* [PersistentVolumeClaimList](/types/PersistentVolumeClaimList.md) - K8s::Core::PersistentVolumeClaimList
+* [PersistentVolumeList](/types/PersistentVolumeList.md) - K8s::Core::PersistentVolumeList
+* [Pod](/types/Pod.md) - K8s::Core::Pod
+* [PodCertificateRequest](/types/PodCertificateRequest.md) - K8s::Certificates::PodCertificateRequest
+* [PodCertificateRequestList](/types/PodCertificateRequestList.md) - K8s::Certificates::PodCertificateRequestList
+* [PodDisruptionBudgetList](/types/PodDisruptionBudgetList.md) - K8s::Policy::PodDisruptionBudgetList
+* [PodList](/types/PodList.md) - K8s::Core::PodList
+* [PodTemplate](/types/PodTemplate.md) - K8s::Core::PodTemplate
+* [PodTemplateList](/types/PodTemplateList.md) - K8s::Core::PodTemplateList
+* [Pooler](/types/Pooler.md) - K8s::Cnpg::Pooler
+* [PriorityClass](/types/PriorityClass.md) - K8s::Scheduling::PriorityClass
+* [PriorityClassList](/types/PriorityClassList.md) - K8s::Scheduling::PriorityClassList
+* [PriorityLevelConfiguration](/types/PriorityLevelConfiguration.md) - K8s::Flowcontrol::PriorityLevelConfiguration
+* [PriorityLevelConfigurationList](/types/PriorityLevelConfigurationList.md) - K8s::Flowcontrol::PriorityLevelConfigurationList
+* [PrometheusRule](/types/PrometheusRule.md) - K8s::Monitoring::PrometheusRule
+* [Provider](/types/Provider.md) - K8s::Flux::Provider
+* [RayCluster](/types/RayCluster.md) - K8s::Ray::RayCluster
+* [RayJob](/types/RayJob.md) - K8s::Ray::RayJob
+* [RayService](/types/RayService.md) - K8s::Ray::RayService
+* [Receiver](/types/Receiver.md) - K8s::Flux::Receiver
+* [ReferenceGrant](/types/ReferenceGrant.md) - K8s::Gateway::ReferenceGrant
+* [ReplicaSet](/types/ReplicaSet.md) - K8s::Apps::ReplicaSet
+* [ReplicaSetList](/types/ReplicaSetList.md) - K8s::Apps::ReplicaSetList
+* [ReplicationController](/types/ReplicationController.md) - K8s::Core::ReplicationController
+* [ReplicationControllerList](/types/ReplicationControllerList.md) - K8s::Core::ReplicationControllerList
+* [ResourceClaim](/types/ResourceClaim.md) - K8s::Resource::ResourceClaim
+* [ResourceClaimList](/types/ResourceClaimList.md) - K8s::Resource::ResourceClaimList
+* [ResourceClaimTemplate](/types/ResourceClaimTemplate.md) - K8s::Resource::ResourceClaimTemplate
+* [ResourceClaimTemplateList](/types/ResourceClaimTemplateList.md) - K8s::Resource::ResourceClaimTemplateList
+* [ResourceQuota](/types/ResourceQuota.md) - K8s::Core::ResourceQuota
+* [ResourceQuotaList](/types/ResourceQuotaList.md) - K8s::Core::ResourceQuotaList
+* [ResourceSet](/types/ResourceSet.md) - K8s::Flux::ResourceSet
+* [ResourceSetInputProvider](/types/ResourceSetInputProvider.md) - K8s::Flux::ResourceSetInputProvider
+* [ResourceSlice](/types/ResourceSlice.md) - K8s::Resource::ResourceSlice
+* [ResourceSliceList](/types/ResourceSliceList.md) - K8s::Resource::ResourceSliceList
+* [Role](/types/Role.md) - K8s::Rbac::Role
+* [RoleBinding](/types/RoleBinding.md) - K8s::Rbac::RoleBinding
+* [RoleBindingList](/types/RoleBindingList.md) - K8s::Rbac::RoleBindingList
+* [RoleList](/types/RoleList.md) - K8s::Rbac::RoleList
+* [RuntimeClass](/types/RuntimeClass.md) - K8s::Node::RuntimeClass
+* [RuntimeClassList](/types/RuntimeClassList.md) - K8s::Node::RuntimeClassList
+* [SA](/types/SA.md) - K8s::Core::ServiceAccount
+* [Scale](/types/Scale.md) - K8s::Autoscaling::Scale
+* [ScheduledBackup](/types/ScheduledBackup.md) - K8s::Cnpg::ScheduledBackup
+* [Sec](/types/Sec.md) - K8s::Core::Secret
+* [SecretList](/types/SecretList.md) - K8s::Core::SecretList
+* [SelfSubjectAccessReview](/types/SelfSubjectAccessReview.md) - K8s::Authorization::SelfSubjectAccessReview
+* [SelfSubjectReview](/types/SelfSubjectReview.md) - K8s::Authentication::SelfSubjectReview
+* [SelfSubjectRulesReview](/types/SelfSubjectRulesReview.md) - K8s::Authorization::SelfSubjectRulesReview
+* [ServersTransport](/types/ServersTransport.md) - K8s::Traefik::ServersTransport
+* [ServersTransportTCP](/types/ServersTransportTCP.md) - K8s::Traefik::ServersTransportTCP
+* [Service](/types/Service.md) - K8s::Core::Service
+* [ServiceAccountList](/types/ServiceAccountList.md) - K8s::Core::ServiceAccountList
+* [ServiceCIDR](/types/ServiceCIDR.md) - K8s::Networking::ServiceCIDR
+* [ServiceCIDRList](/types/ServiceCIDRList.md) - K8s::Networking::ServiceCIDRList
+* [ServiceList](/types/ServiceList.md) - K8s::Core::ServiceList
+* [ServiceMonitor](/types/ServiceMonitor.md) - K8s::Monitoring::ServiceMonitor
+* [StatefulSet](/types/StatefulSet.md) - K8s::Apps::StatefulSet
+* [StatefulSetList](/types/StatefulSetList.md) - K8s::Apps::StatefulSetList
+* [Status](/types/Status.md) - K8s::Core::Status
+* [StorageClass](/types/StorageClass.md) - K8s::Storage::StorageClass
+* [StorageClassList](/types/StorageClassList.md) - K8s::Storage::StorageClassList
+* [StorageVersionMigration](/types/StorageVersionMigration.md) - K8s::Storagemigration::StorageVersionMigration
+* [StorageVersionMigrationList](/types/StorageVersionMigrationList.md) - K8s::Storagemigration::StorageVersionMigrationList
+* [SubjectAccessReview](/types/SubjectAccessReview.md) - K8s::Authorization::SubjectAccessReview
+* [TLSOption](/types/TLSOption.md) - K8s::Traefik::TLSOption
+* [TLSStore](/types/TLSStore.md) - K8s::Traefik::TLSStore
+* [TokenRequest](/types/TokenRequest.md) - K8s::Authentication::TokenRequest
+* [TokenReview](/types/TokenReview.md) - K8s::Authentication::TokenReview
+* [TraefikService](/types/TraefikService.md) - K8s::Traefik::TraefikService
+* [ValidatingAdmissionPolicy](/types/ValidatingAdmissionPolicy.md) - K8s::Admissionregistration::ValidatingAdmissionPolicy
+* [ValidatingAdmissionPolicyBinding](/types/ValidatingAdmissionPolicyBinding.md) - K8s::Admissionregistration::ValidatingAdmissionPolicyBinding
+* [ValidatingAdmissionPolicyBindingList](/types/ValidatingAdmissionPolicyBindingList.md) - K8s::Admissionregistration::ValidatingAdmissionPolicyBindingList
+* [ValidatingAdmissionPolicyList](/types/ValidatingAdmissionPolicyList.md) - K8s::Admissionregistration::ValidatingAdmissionPolicyList
+* [ValidatingWebhookConfiguration](/types/ValidatingWebhookConfiguration.md) - K8s::Admissionregistration::ValidatingWebhookConfiguration
+* [ValidatingWebhookConfigurationList](/types/ValidatingWebhookConfigurationList.md) - K8s::Admissionregistration::ValidatingWebhookConfigurationList
+* [VolumeAttachment](/types/VolumeAttachment.md) - K8s::Storage::VolumeAttachment
+* [VolumeAttachmentList](/types/VolumeAttachmentList.md) - K8s::Storage::VolumeAttachmentList
+* [VolumeAttributesClass](/types/VolumeAttributesClass.md) - K8s::Storage::VolumeAttributesClass
+* [VolumeAttributesClassList](/types/VolumeAttributesClassList.md) - K8s::Storage::VolumeAttributesClassList
+* [WatchEvent](/types/WatchEvent.md) - K8s::Core::WatchEvent
+
+# Rules
+
+* [ARGO001](/rules/ARGO001.md) - Production Application must not enable automated prune
+* [ARGO002](/rules/ARGO002.md) - Application.spec.project must reference a declared AppProject (or the built-in default)
+* [ARGO003](/rules/ARGO003.md) - Application.spec.destination must reference a registered cluster or the in-cluster target
+* [ARGO004](/rules/ARGO004.md) - ApplicationSet template must scope to a single AppProject
+* [ARGO005](/rules/ARGO005.md) - Application source.path should resolve to an existing directory under the build root
+* [WK8001](/rules/WK8001.md) - Hardcoded Namespace
+* [WK8002](/rules/WK8002.md) - Latest Image Tag
+* [WK8003](/rules/WK8003.md) - Missing Resource Limits
+* [WK8005](/rules/WK8005.md) - Hardcoded secrets in env vars — sensitive environment variables should use secretKeyRef
+* [WK8006](/rules/WK8006.md) - No :latest or untagged images — container images should use explicit version tags
+* [WK8041](/rules/WK8041.md) - Hardcoded API keys — detects well-known API key patterns in env var values
+* [WK8042](/rules/WK8042.md) - Private keys in ConfigMap — private keys should be stored in Secrets, not ConfigMaps
+* [WK8101](/rules/WK8101.md) - Deployment selector must match template labels — mismatched selectors cause runtime failures
+* [WK8102](/rules/WK8102.md) - Resources should have metadata labels — labels enable filtering and operational tooling
+* [WK8103](/rules/WK8103.md) - Containers must have name — the name field is required by the Kubernetes API
+* [WK8104](/rules/WK8104.md) - Ports should be named — named ports improve Service and NetworkPolicy configuration
+* [WK8105](/rules/WK8105.md) - ImagePullPolicy should be explicit — avoids surprising default behavior
+* [WK8201](/rules/WK8201.md) - Resource limits required — containers should have CPU and memory limits
+* [WK8202](/rules/WK8202.md) - No privileged containers — privileged mode grants full host access
+* [WK8203](/rules/WK8203.md) - ReadOnlyRootFilesystem recommended — prevents runtime modification of the container image
+* [WK8204](/rules/WK8204.md) - RunAsNonRoot recommended — running as root increases container breakout risk
+* [WK8205](/rules/WK8205.md) - Drop ALL capabilities — containers should drop all capabilities and add only what is needed
+* [WK8207](/rules/WK8207.md) - No hostNetwork — using host network bypasses network isolation
+* [WK8208](/rules/WK8208.md) - No hostPID — sharing host PID namespace allows visibility into all host processes
+* [WK8209](/rules/WK8209.md) - No hostIPC — sharing host IPC namespace can expose shared memory segments
+* [WK8301](/rules/WK8301.md) - Probes required — containers should have livenessProbe and readinessProbe
+* [WK8302](/rules/WK8302.md) - Replicas >= 2 recommended — single-replica Deployments have no high availability
+* [WK8303](/rules/WK8303.md) - PDB recommended for HA Deployments — ensures availability during voluntary disruptions
+* [WK8304](/rules/WK8304.md) - SSL redirect without certificate — ssl-redirect annotation requires a valid certificate-arn and HTTPS listen-ports
+* [WK8305](/rules/WK8305.md) - Ingress port not matching Service — backend port must match a declared Service port
+* [WK8306](/rules/WK8306.md) - Container command starts with flag — first element should be a binary, not a flag
+* [WK8401](/rules/WK8401.md) - shmSize must not exceed the container memory limit — pod will not schedule if it does
+* [WK8402](/rules/WK8402.md) - RayCluster should set spec.rayVersion so KubeRay selects the correct autoscaler image
+* [WK8403](/rules/WK8403.md) - spec.rayVersion should match the Ray version in the head container image tag

package/dist/okf/rules/ARGO001.md

@@ -0,0 +1,16 @@
+---
+type: lint-rule
+title: ARGO001
+description: Production Application must not enable automated prune
+id: ARGO001
+severity: warning
+category: correctness
+lexicon: k8s
+docs: https://intentius.io/chant/lexicons/k8s/rules/
+---
+Production Application must not enable automated prune
+
+## Applies to
+
+- [Application](/types/Application.md)
+- [Node](/types/Node.md)

package/dist/okf/rules/ARGO002.md

@@ -0,0 +1,16 @@
+---
+type: post-synth-check
+title: ARGO002
+description: Application.spec.project must reference a declared AppProject (or the built-in default)
+id: ARGO002
+severity: error
+category: post-synth
+lexicon: k8s
+docs: https://intentius.io/chant/lexicons/k8s/rules/
+---
+Application.spec.project must reference a declared AppProject (or the built-in default)
+
+## Applies to
+
+- [Application](/types/Application.md)
+- [AppProject](/types/AppProject.md)

package/dist/okf/rules/ARGO003.md

@@ -0,0 +1,15 @@
+---
+type: post-synth-check
+title: ARGO003
+description: Application.spec.destination must reference a registered cluster or the in-cluster target
+id: ARGO003
+severity: error
+category: post-synth
+lexicon: k8s
+docs: https://intentius.io/chant/lexicons/k8s/rules/
+---
+Application.spec.destination must reference a registered cluster or the in-cluster target
+
+## Applies to
+
+- [Application](/types/Application.md)

package/dist/okf/rules/ARGO004.md

@@ -0,0 +1,17 @@
+---
+type: lint-rule
+title: ARGO004
+description: ApplicationSet template must scope to a single AppProject
+id: ARGO004
+severity: warning
+category: correctness
+lexicon: k8s
+docs: https://intentius.io/chant/lexicons/k8s/rules/
+---
+ApplicationSet template must scope to a single AppProject
+
+## Applies to
+
+- [Application](/types/Application.md)
+- [ApplicationSet](/types/ApplicationSet.md)
+- [AppProject](/types/AppProject.md)

package/dist/okf/rules/ARGO005.md

@@ -0,0 +1,15 @@
+---
+type: post-synth-check
+title: ARGO005
+description: Application source.path should resolve to an existing directory under the build root
+id: ARGO005
+severity: error
+category: post-synth
+lexicon: k8s
+docs: https://intentius.io/chant/lexicons/k8s/rules/
+---
+Application source.path should resolve to an existing directory under the build root
+
+## Applies to
+
+- [Application](/types/Application.md)

package/dist/okf/rules/WK8001.md

@@ -0,0 +1,16 @@
+---
+type: lint-rule
+title: WK8001
+description: Hardcoded Namespace
+id: WK8001
+severity: warning
+category: correctness
+lexicon: k8s
+docs: https://intentius.io/chant/lexicons/k8s/rules/
+---
+Hardcoded Namespace
+
+## Applies to
+
+- [Namespace](/types/Namespace.md)
+- [Node](/types/Node.md)

package/dist/okf/rules/WK8002.md

@@ -0,0 +1,20 @@
+---
+type: lint-rule
+title: WK8002
+description: Latest Image Tag
+id: WK8002
+severity: warning
+category: security
+lexicon: k8s
+docs: https://intentius.io/chant/lexicons/k8s/rules/
+---
+Latest Image Tag
+
+## Applies to
+
+- [CronJob](/types/CronJob.md)
+- [DaemonSet](/types/DaemonSet.md)
+- [Node](/types/Node.md)
+- [Pod](/types/Pod.md)
+- [ReplicaSet](/types/ReplicaSet.md)
+- [StatefulSet](/types/StatefulSet.md)

package/dist/okf/rules/WK8003.md

@@ -0,0 +1,19 @@
+---
+type: lint-rule
+title: WK8003
+description: Missing Resource Limits
+id: WK8003
+severity: warning
+category: correctness
+lexicon: k8s
+docs: https://intentius.io/chant/lexicons/k8s/rules/
+---
+Missing Resource Limits
+
+## Applies to
+
+- [CronJob](/types/CronJob.md)
+- [DaemonSet](/types/DaemonSet.md)
+- [Node](/types/Node.md)
+- [ReplicaSet](/types/ReplicaSet.md)
+- [StatefulSet](/types/StatefulSet.md)

package/dist/okf/rules/WK8005.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: WK8005
+description: Hardcoded secrets in env vars — sensitive environment variables should use secretKeyRef
+id: WK8005
+severity: error
+category: post-synth
+lexicon: k8s
+docs: https://intentius.io/chant/lexicons/k8s/rules/
+---
+Hardcoded secrets in env vars — sensitive environment variables should use secretKeyRef

package/dist/okf/rules/WK8006.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: WK8006
+description: No :latest or untagged images — container images should use explicit version tags
+id: WK8006
+severity: error
+category: post-synth
+lexicon: k8s
+docs: https://intentius.io/chant/lexicons/k8s/rules/
+---
+No :latest or untagged images — container images should use explicit version tags

package/dist/okf/rules/WK8041.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: WK8041
+description: Hardcoded API keys — detects well-known API key patterns in env var values
+id: WK8041
+severity: error
+category: post-synth
+lexicon: k8s
+docs: https://intentius.io/chant/lexicons/k8s/rules/
+---
+Hardcoded API keys — detects well-known API key patterns in env var values