@intentius/chant-lexicon-render 0.53.0

package/dist/integrity.json

@@ -0,0 +1,18 @@
+{
+  "algorithm": "sha256",
+  "artifacts": {
+    "manifest.json": "beff2a7ad5d6957297ab909076c1888b50b15ccc7bb1c6fe6f52d001ef59398e",
+    "meta.json": "8fd79c487cc536d111b04449a792869becc8a6b14c17a19dc8fc958701057f6a",
+    "types/index.d.ts": "f560fbbf162c4f485b97046d56bfc0ab33771405d5adac51d45d171be7d98f0b",
+    "rules/no-secret-literals.ts": "56477155256fa55696168df5ad781defdaaeb6623ae79dbf8f753f6a713a0092",
+    "rules/valid-cron-schedule.ts": "3a6a898b7a096999485e97909ba889bd164e1779dcd92dffaef1d0ade5aa0512",
+    "rules/valid-region.ts": "271deb69fe0a151341db34b26e232523a40bb32c47f9901b190fd1ebd9cc4e75",
+    "rules/ren010-native-runtime-requires-commands.ts": "70274840a5ed7921f59998333a21a10ad361e3dc7568d97e01d6c24e84da6f00",
+    "rules/ren011-service-requires-source.ts": "ba1886079d76079a2abcb18835b7411d4b009678f9faa8c5112c8226da27955a",
+    "rules/ren012-free-plan-cannot-scale.ts": "f88ad2e233cf06b5637d06a16fb7dd7bdba5e42523241639d51c227352df2e35",
+    "rules/render-helpers.ts": "4e54c71d3f2205480afa72c731ef61641d848cd2e366058423008ed087ec1cac",
+    "skills/chant-render.md": "1a6743636165d86851cf102686a0c8ac3601c1d322dc97eff0ff64bd8e494abd",
+    "skills/chant-render-patterns.md": "3a7e395bcd478c8253ae2f45b0a09d3b45d08075a49781aa07e8bb7f0ac7ef8d"
+  },
+  "composite": "a5e2a90e2e42700752c2d8a436c381d7d64e9340373bc6368d4ce28427436605"
+}

package/dist/lint/audit-catalog.d.ts

@@ -0,0 +1,13 @@
+/**
+ * The render lexicon's chant audit catalog — metadata for the REN post-synth
+ * checks, contributed via `renderPlugin.auditCatalog()`.
+ *
+ * All entries carry `yamlBased: false`: each check reads the chant model
+ * (`ctx.entities`) rather than the emitted plan, because what they need — the
+ * runtime, the plan tier, whether a source was named — lives in the typed
+ * graph. So they fire on `chant build` and cannot fire on an audit of a
+ * standalone Render config.
+ */
+import type { RuleMeta } from "@intentius/chant/audit/catalog";
+export declare const renderAuditCatalog: Record<string, RuleMeta>;
+//# sourceMappingURL=audit-catalog.d.ts.map

package/dist/lint/audit-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-catalog.d.ts","sourceRoot":"","sources":["../../src/lint/audit-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAa/D,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAsBvD,CAAC"}

package/dist/lint/post-synth/index.d.ts

@@ -0,0 +1,3 @@
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const postSynthChecks: PostSynthCheck[];
+//# sourceMappingURL=index.d.ts.map

package/dist/lint/post-synth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAKvE,eAAO,MAAM,eAAe,EAAE,cAAc,EAI3C,CAAC"}

package/dist/lint/post-synth/ren010-native-runtime-requires-commands.d.ts

@@ -0,0 +1,12 @@
+/**
+ * REN010: A native-runtime service must say how to build and start.
+ *
+ * Render's native runtimes (node, python, ruby, go, rust, elixir) need a
+ * `buildCommand` and a `startCommand` in `envSpecificDetails`; without them the
+ * API rejects the create (or, on some paths, accepts it and the first deploy
+ * fails). `docker` reads a Dockerfile and `image` pulls a prebuilt image, so
+ * neither needs commands. Static sites have no runtime.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const ren010: PostSynthCheck;
+//# sourceMappingURL=ren010-native-runtime-requires-commands.d.ts.map

package/dist/lint/post-synth/ren010-native-runtime-requires-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ren010-native-runtime-requires-commands.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/ren010-native-runtime-requires-commands.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAM9G,eAAO,MAAM,MAAM,EAAE,cA8BpB,CAAC"}

package/dist/lint/post-synth/ren011-service-requires-source.d.ts

@@ -0,0 +1,12 @@
+/**
+ * REN011: A service needs a source — a repo or an image.
+ *
+ * Every Render service is either git-backed (`repo`, built on Render) or
+ * image-backed (`image.imagePath`, pulled from a registry). One that names
+ * neither has nothing to deploy and is rejected at create time; one that uses
+ * the `image` runtime without an `image` is the same mistake spelled
+ * differently. Static sites are always git-backed.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const ren011: PostSynthCheck;
+//# sourceMappingURL=ren011-service-requires-source.d.ts.map

package/dist/lint/post-synth/ren011-service-requires-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ren011-service-requires-source.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/ren011-service-requires-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cAoCpB,CAAC"}

package/dist/lint/post-synth/ren012-free-plan-cannot-scale.d.ts

@@ -0,0 +1,11 @@
+/**
+ * REN012: The free instance type cannot scale.
+ *
+ * Render's `free` plan runs a single instance and cannot autoscale; a
+ * `numInstances > 1` or an enabled `autoscaling` block on a free service is
+ * rejected at create/patch time. Persistent disks are also unavailable on
+ * free. Catch all three at synth time with a message that says which.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const ren012: PostSynthCheck;
+//# sourceMappingURL=ren012-free-plan-cannot-scale.d.ts.map

package/dist/lint/post-synth/ren012-free-plan-cannot-scale.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ren012-free-plan-cannot-scale.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/ren012-free-plan-cannot-scale.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cA8BpB,CAAC"}

package/dist/lint/post-synth/render-helpers.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Shared helpers for the render post-synth checks. Not a check itself, so the
+ * generated barrel skips it (the scanner only picks up exported PostSynthChecks).
+ */
+/**
+ * Read an entity or property's constructor props. Nested Declarables
+ * (WebServiceDetails, Image, ServiceDisk) stash their args under a
+ * non-enumerable `props`; a plain inline object carries them directly. Handle
+ * both so a check behaves the same whether the user authored
+ * `serviceDetails: { runtime }` or `serviceDetails: new WebServiceDetails({ runtime })`.
+ */
+export declare function readProps(value: unknown): Record<string, unknown>;
+/** The entityType of a declarable, or undefined. */
+export declare function entityTypeOf(value: unknown): string | undefined;
+/** True when the entity is one of the five service kinds. */
+export declare function isService(value: unknown): boolean;
+/** The short kind (`WebService`) from an entity type, for messages. */
+export declare function kindOf(value: unknown): string;
+//# sourceMappingURL=render-helpers.d.ts.map

package/dist/lint/post-synth/render-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render-helpers.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/render-helpers.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAOjE;AAED,oDAAoD;AACpD,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAE/D;AAED,6DAA6D;AAC7D,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAEjD;AAED,uEAAuE;AACvE,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAG7C"}

package/dist/lint/rules/index.d.ts

@@ -0,0 +1,7 @@
+import type { LintRule } from "@intentius/chant/lint/rule";
+export { validRegionRule } from "./valid-region.js";
+export { noSecretLiteralsRule } from "./no-secret-literals.js";
+export { validCronScheduleRule, isValidCronSchedule } from "./valid-cron-schedule.js";
+/** All lint rules provided by the render lexicon. */
+export declare const rules: LintRule[];
+//# sourceMappingURL=index.d.ts.map

package/dist/lint/rules/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lint/rules/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAK3D,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAEnF,qDAAqD;AACrD,eAAO,MAAM,KAAK,EAAE,QAAQ,EAAmE,CAAC"}

package/dist/lint/rules/no-secret-literals.d.ts

@@ -0,0 +1,13 @@
+import type { LintRule } from "@intentius/chant/lint/rule";
+/**
+ * REN002: No secret literals in env vars
+ *
+ * Flags an `envVars` (or `secretFiles`) entry whose `key` looks like a
+ * credential and whose `value` is a plain string literal. Render can generate
+ * the value (`generateValue: true`), it can come from an EnvGroup or from
+ * another resource's attribute (`db.internalConnectionString`), or from the
+ * process environment at build time — anything but a literal in source that
+ * ends up in git and in the build output.
+ */
+export declare const noSecretLiteralsRule: LintRule;
+//# sourceMappingURL=no-secret-literals.d.ts.map

package/dist/lint/rules/no-secret-literals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-secret-literals.d.ts","sourceRoot":"","sources":["../../../src/lint/rules/no-secret-literals.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAA+B,MAAM,4BAA4B,CAAC;AAexF;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB,EAAE,QA+ClC,CAAC"}

package/dist/lint/rules/valid-cron-schedule.d.ts

@@ -0,0 +1,12 @@
+import type { LintRule } from "@intentius/chant/lint/rule";
+/** True for a standard five-field cron expression (Render accepts no seconds field or macros). */
+export declare function isValidCronSchedule(s: string): boolean;
+/**
+ * REN003: Valid cron schedule
+ *
+ * A CronJob's `schedule` must be a standard five-field cron expression
+ * (`minute hour day-of-month month day-of-week`). Render rejects `@hourly`-style
+ * macros and six-field (seconds) expressions at create time; catch them at build.
+ */
+export declare const validCronScheduleRule: LintRule;
+//# sourceMappingURL=valid-cron-schedule.d.ts.map

package/dist/lint/rules/valid-cron-schedule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"valid-cron-schedule.d.ts","sourceRoot":"","sources":["../../../src/lint/rules/valid-cron-schedule.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAA+B,MAAM,4BAA4B,CAAC;AAOxF,kGAAkG;AAClG,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,EAAE,QA+BnC,CAAC"}

package/dist/lint/rules/valid-region.d.ts

@@ -0,0 +1,16 @@
+import type { LintRule } from "@intentius/chant/lint/rule";
+/**
+ * Render's regions, per the `region` enum in the Public API spec. The generated
+ * types already narrow `region` to this union, so a typo is a compile error in
+ * a typed project; this rule gives the same answer with a clearer message, and
+ * fires in contexts the type checker does not reach (a `.js` stack, a value
+ * that has been widened to `string`).
+ */
+export declare const KNOWN_REGIONS: Set<string>;
+/**
+ * REN001: Valid Render region
+ *
+ * A service, datastore, or Key Value `region` must be a Render region.
+ */
+export declare const validRegionRule: LintRule;
+//# sourceMappingURL=valid-region.d.ts.map

package/dist/lint/rules/valid-region.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"valid-region.d.ts","sourceRoot":"","sources":["../../../src/lint/rules/valid-region.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAA+B,MAAM,4BAA4B,CAAC;AAGxF;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,aAA4E,CAAC;AAEvG;;;;GAIG;AACH,eAAO,MAAM,eAAe,EAAE,QA+B7B,CAAC"}

package/dist/lsp/completions.d.ts

@@ -0,0 +1,8 @@
+import type { CompletionContext, CompletionItem } from "@intentius/chant/lsp/types";
+/**
+ * Provide render completions based on context — the resource classes
+ * (WebService, Postgres, EnvGroup, ...) and their property entities, from the
+ * generated registry.
+ */
+export declare function completions(ctx: CompletionContext): CompletionItem[];
+//# sourceMappingURL=completions.d.ts.map

package/dist/lsp/completions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"completions.d.ts","sourceRoot":"","sources":["../../src/lsp/completions.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAapF;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,iBAAiB,GAAG,cAAc,EAAE,CAEpE"}

package/dist/lsp/hover.d.ts

@@ -0,0 +1,6 @@
+import type { HoverContext, HoverInfo } from "@intentius/chant/lsp/types";
+/**
+ * Provide hover information for render entity types.
+ */
+export declare function hover(ctx: HoverContext): HoverInfo | undefined;
+//# sourceMappingURL=hover.d.ts.map

package/dist/lsp/hover.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hover.d.ts","sourceRoot":"","sources":["../../src/lsp/hover.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAc1E;;GAEG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,YAAY,GAAG,SAAS,GAAG,SAAS,CAE9D"}

package/dist/manifest.json

@@ -0,0 +1,6 @@
+{
+  "name": "render",
+  "version": "0.53.0",
+  "chantVersion": ">=0.1.0",
+  "namespace": "Render"
+}

package/dist/meta.json

@@ -0,0 +1,304 @@
+{
+  "Autoscaling": {
+    "resourceType": "Render::Services::Autoscaling",
+    "kind": "property",
+    "lexicon": "render",
+    "constraints": {
+      "enabled": {
+        "default": false
+      }
+    }
+  },
+  "AutoscalingCriteria": {
+    "resourceType": "Render::Services::AutoscalingCriteria",
+    "kind": "property",
+    "lexicon": "render"
+  },
+  "AutoscalingCriterion": {
+    "resourceType": "Render::Services::AutoscalingCriterion",
+    "kind": "property",
+    "lexicon": "render",
+    "constraints": {
+      "enabled": {
+        "default": false
+      }
+    }
+  },
+  "BackgroundWorker": {
+    "resourceType": "Render::Services::BackgroundWorker",
+    "kind": "resource",
+    "lexicon": "render"
+  },
+  "BackgroundWorkerDetails": {
+    "resourceType": "Render::Services::BackgroundWorkerDetails",
+    "kind": "property",
+    "lexicon": "render",
+    "constraints": {
+      "numInstances": {
+        "minimum": 1,
+        "default": 1
+      }
+    }
+  },
+  "BuildFilter": {
+    "resourceType": "Render::Services::BuildFilter",
+    "kind": "property",
+    "lexicon": "render"
+  },
+  "CidrBlockAndDescription": {
+    "resourceType": "Render::Services::CidrBlockAndDescription",
+    "kind": "property",
+    "lexicon": "render"
+  },
+  "CronJob": {
+    "resourceType": "Render::Services::CronJob",
+    "kind": "resource",
+    "lexicon": "render"
+  },
+  "CronJobDetails": {
+    "resourceType": "Render::Services::CronJobDetails",
+    "kind": "property",
+    "lexicon": "render"
+  },
+  "CustomDomain": {
+    "resourceType": "Render::Services::CustomDomain",
+    "kind": "resource",
+    "lexicon": "render"
+  },
+  "Disk": {
+    "resourceType": "Render::Services::Disk",
+    "kind": "resource",
+    "lexicon": "render"
+  },
+  "DockerDetails": {
+    "resourceType": "Render::Services::DockerDetails",
+    "kind": "property",
+    "lexicon": "render"
+  },
+  "EnvGroup": {
+    "resourceType": "Render::Config::EnvGroup",
+    "kind": "resource",
+    "lexicon": "render"
+  },
+  "EnvVar": {
+    "resourceType": "Render::Services::EnvVar",
+    "kind": "property",
+    "lexicon": "render"
+  },
+  "Environment": {
+    "resourceType": "Render::Projects::Environment",
+    "kind": "resource",
+    "lexicon": "render"
+  },
+  "GeneratedEnvVar": {
+    "resourceType": "Render::Services::GeneratedEnvVar",
+    "kind": "property",
+    "lexicon": "render"
+  },
+  "Header": {
+    "resourceType": "Render::Services::Header",
+    "kind": "property",
+    "lexicon": "render"
+  },
+  "Image": {
+    "resourceType": "Render::Services::Image",
+    "kind": "property",
+    "lexicon": "render"
+  },
+  "KeyValue": {
+    "resourceType": "Render::Datastores::KeyValue",
+    "kind": "resource",
+    "lexicon": "render"
+  },
+  "MaintenanceMode": {
+    "resourceType": "Render::Services::MaintenanceMode",
+    "kind": "property",
+    "lexicon": "render"
+  },
+  "NativeEnvironmentDetails": {
+    "resourceType": "Render::Services::NativeEnvironmentDetails",
+    "kind": "property",
+    "lexicon": "render"
+  },
+  "Postgres": {
+    "resourceType": "Render::Datastores::Postgres",
+    "kind": "resource",
+    "lexicon": "render",
+    "constraints": {
+      "databaseName": {
+        "default": "randomly generated"
+      },
+      "databaseUser": {
+        "default": "randomly generated"
+      },
+      "enableHighAvailability": {
+        "default": false
+      },
+      "plan": {
+        "enum": [
+          "free",
+          "starter",
+          "standard",
+          "pro",
+          "pro_plus",
+          "custom",
+          "basic_256mb",
+          "basic_1gb",
+          "basic_4gb",
+          "pro_4gb",
+          "pro_8gb",
+          "pro_16gb",
+          "pro_32gb",
+          "pro_64gb",
+          "pro_128gb",
+          "pro_192gb",
+          "pro_256gb",
+          "pro_384gb",
+          "pro_512gb",
+          "accelerated_16gb",
+          "accelerated_32gb",
+          "accelerated_64gb",
+          "accelerated_128gb",
+          "accelerated_256gb",
+          "accelerated_384gb",
+          "accelerated_512gb",
+          "accelerated_768gb",
+          "accelerated_1024gb",
+          "0.1c-256mb",
+          "0.5c-1g",
+          "1c-2g",
+          "1c-4g",
+          "2c-4g",
+          "2c-8g",
+          "2c-16g",
+          "4c-16g",
+          "4c-32g",
+          "8c-32g",
+          "8c-64g",
+          "16c-64g",
+          "16c-128g",
+          "32c-128g",
+          "32c-256g",
+          "48c-192g",
+          "48c-384g",
+          "64c-256g",
+          "64c-512g",
+          "96c-384g",
+          "96c-768g",
+          "128c-512g",
+          "128c-1024g"
+        ]
+      },
+      "enableDiskAutoscaling": {
+        "default": false
+      },
+      "connectionPool": {
+        "default": "none"
+      }
+    }
+  },
+  "Previews": {
+    "resourceType": "Render::Services::Previews",
+    "kind": "property",
+    "lexicon": "render",
+    "constraints": {
+      "generation": {
+        "default": "off",
+        "enum": [
+          "off",
+          "manual",
+          "automatic"
+        ]
+      }
+    }
+  },
+  "PrivateService": {
+    "resourceType": "Render::Services::PrivateService",
+    "kind": "resource",
+    "lexicon": "render"
+  },
+  "PrivateServiceDetails": {
+    "resourceType": "Render::Services::PrivateServiceDetails",
+    "kind": "property",
+    "lexicon": "render",
+    "constraints": {
+      "numInstances": {
+        "minimum": 1,
+        "default": 1
+      }
+    }
+  },
+  "Project": {
+    "resourceType": "Render::Projects::Project",
+    "kind": "resource",
+    "lexicon": "render"
+  },
+  "ProjectEnvironment": {
+    "resourceType": "Render::Services::ProjectEnvironment",
+    "kind": "property",
+    "lexicon": "render"
+  },
+  "ReadReplica": {
+    "resourceType": "Render::Services::ReadReplica",
+    "kind": "property",
+    "lexicon": "render"
+  },
+  "RegistryCredential": {
+    "resourceType": "Render::Config::RegistryCredential",
+    "kind": "resource",
+    "lexicon": "render"
+  },
+  "Route": {
+    "resourceType": "Render::Services::Route",
+    "kind": "property",
+    "lexicon": "render"
+  },
+  "SecretFile": {
+    "resourceType": "Render::Services::SecretFile",
+    "kind": "property",
+    "lexicon": "render"
+  },
+  "ServiceDisk": {
+    "resourceType": "Render::Services::ServiceDisk",
+    "kind": "property",
+    "lexicon": "render",
+    "constraints": {
+      "sizeGB": {
+        "minimum": 1
+      }
+    }
+  },
+  "StaticSite": {
+    "resourceType": "Render::Services::StaticSite",
+    "kind": "resource",
+    "lexicon": "render"
+  },
+  "StaticSiteDetails": {
+    "resourceType": "Render::Services::StaticSiteDetails",
+    "kind": "property",
+    "lexicon": "render"
+  },
+  "WebService": {
+    "resourceType": "Render::Services::WebService",
+    "kind": "resource",
+    "lexicon": "render"
+  },
+  "WebServiceDetails": {
+    "resourceType": "Render::Services::WebServiceDetails",
+    "kind": "property",
+    "lexicon": "render",
+    "constraints": {
+      "numInstances": {
+        "minimum": 1
+      },
+      "plan": {
+        "default": "0.5c-512mb"
+      }
+    }
+  },
+  "Webhook": {
+    "resourceType": "Render::Config::Webhook",
+    "kind": "resource",
+    "lexicon": "render"
+  }
+}

package/dist/okf/index.md

@@ -0,0 +1,29 @@
+---
+okf_version: '0.2'
+---
+
+# Resource types
+
+* [BackgroundWorker](/types/BackgroundWorker.md) - Render::Services::BackgroundWorker
+* [CronJob](/types/CronJob.md) - Render::Services::CronJob
+* [CustomDomain](/types/CustomDomain.md) - Render::Services::CustomDomain
+* [Disk](/types/Disk.md) - Render::Services::Disk
+* [EnvGroup](/types/EnvGroup.md) - Render::Config::EnvGroup
+* [Environment](/types/Environment.md) - Render::Projects::Environment
+* [KeyValue](/types/KeyValue.md) - Render::Datastores::KeyValue
+* [Postgres](/types/Postgres.md) - Render::Datastores::Postgres
+* [PrivateService](/types/PrivateService.md) - Render::Services::PrivateService
+* [Project](/types/Project.md) - Render::Projects::Project
+* [RegistryCredential](/types/RegistryCredential.md) - Render::Config::RegistryCredential
+* [StaticSite](/types/StaticSite.md) - Render::Services::StaticSite
+* [Webhook](/types/Webhook.md) - Render::Config::Webhook
+* [WebService](/types/WebService.md) - Render::Services::WebService
+
+# Rules
+
+* [REN001](/rules/REN001.md) - Valid Render region
+* [REN002](/rules/REN002.md) - No secret literals in env vars
+* [REN003](/rules/REN003.md) - Valid cron schedule
+* [REN010](/rules/REN010.md) - A native-runtime service must set envSpecificDetails.buildCommand and startCommand
+* [REN011](/rules/REN011.md) - A service must have a repo (git-backed) or an image (image-backed)
+* [REN012](/rules/REN012.md) - A free-plan service cannot set numInstances > 1, autoscaling, or a disk

package/dist/okf/rules/REN001.md

@@ -0,0 +1,11 @@
+---
+type: lint-rule
+title: REN001
+description: Valid Render region
+id: REN001
+severity: error
+category: correctness
+lexicon: render
+docs: https://intentius.io/chant/lexicons/render/rules/
+---
+Valid Render region

package/dist/okf/rules/REN002.md

@@ -0,0 +1,15 @@
+---
+type: lint-rule
+title: REN002
+description: No secret literals in env vars
+id: REN002
+severity: warning
+category: security
+lexicon: render
+docs: https://intentius.io/chant/lexicons/render/rules/
+---
+No secret literals in env vars
+
+## Applies to
+
+- [EnvGroup](/types/EnvGroup.md)

package/dist/okf/rules/REN003.md

@@ -0,0 +1,15 @@
+---
+type: lint-rule
+title: REN003
+description: Valid cron schedule
+id: REN003
+severity: error
+category: correctness
+lexicon: render
+docs: https://intentius.io/chant/lexicons/render/rules/
+---
+Valid cron schedule
+
+## Applies to
+
+- [CronJob](/types/CronJob.md)

package/dist/okf/rules/REN010.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: REN010
+description: A native-runtime service must set envSpecificDetails.buildCommand and startCommand
+id: REN010
+severity: error
+category: post-synth
+lexicon: render
+docs: https://intentius.io/chant/lexicons/render/rules/
+---
+A native-runtime service must set envSpecificDetails.buildCommand and startCommand

package/dist/okf/rules/REN011.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: REN011
+description: A service must have a repo (git-backed) or an image (image-backed)
+id: REN011
+severity: error
+category: post-synth
+lexicon: render
+docs: https://intentius.io/chant/lexicons/render/rules/
+---
+A service must have a repo (git-backed) or an image (image-backed)

package/dist/okf/rules/REN012.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: REN012
+description: A free-plan service cannot set numInstances > 1, autoscaling, or a disk
+id: REN012
+severity: error
+category: post-synth
+lexicon: render
+docs: https://intentius.io/chant/lexicons/render/rules/
+---
+A free-plan service cannot set numInstances > 1, autoscaling, or a disk