@intentius/chant 0.101.0 → 0.104.0

package/dist/workspace/write-lock.d.ts

@@ -0,0 +1,152 @@
+/**
+ * The working tree's write lock and write journal (#3173, ws-089).
+ *
+ * The repo is the database (ws-074), and one working tree is written by
+ * several principals at once: people through hud, the coding agent, the
+ * steward and builders. chant's working-tree writes (records new, amend,
+ * review and close, points ask and answer, box listing set) each read the
+ * records, build the file they write, validate it and write it. Two of them
+ * running at once could each read the same record and the second write would
+ * drop the first's change, or two `records new` could hand out the same id.
+ * So every such write holds this lock from its first read to its last write:
+ * writes to one working tree are serialised, and each one reads what the one
+ * before it wrote.
+ *
+ * The lock is a directory, `chant-write.lock`, in the working tree's git
+ * directory (`.git`, or `.git/worktrees/<name>` for a linked worktree, so two
+ * worktrees of one repository never wait on each other), made with `mkdir`,
+ * which either creates it or fails. `owner.json` inside it says who holds it.
+ * Outside git it lives in the system's temporary directory, keyed by the
+ * working directory's real path, so nothing is added to the files a person
+ * reviews. A holder that died leaves its lock behind: one whose process is
+ * gone on this host, or whose `expiresAt` has passed, is broken by the next
+ * writer. A writer waits for the lock up to `CHANT_WRITE_LOCK_WAIT_MS`
+ * (default {@link DEFAULT_WAIT_MS}) and is then refused with
+ * `write-lock-timeout`, naming the holder.
+ *
+ * A caller can hold the lock across several chant calls, for a batch of
+ * writes nobody else interleaves with (`chant workspace lock acquire`, hud#819):
+ * each call of the batch runs with `CHANT_WRITE_LOCK=<token>` in its
+ * environment, and goes ahead without waiting while the lock is held under
+ * that token. A token that no longer holds the lock (released, or broken
+ * after it expired) is refused with `write-lock-not-held`, so a batch never
+ * runs on unlocked.
+ *
+ * The journal, `chant-writes.json` beside the lock, notes the last chant
+ * write of each record file: the verb, who it named and when, keyed by the
+ * file's SHA-256 after the write. The read contract reports it as a record's
+ * `lastWrite` while the file still has those bytes, and a conflict refusal
+ * names it. It is a cache in the git directory (ws-074's exceptions), never
+ * a fact: lost, every record's `lastWrite` is null, and nothing else changes.
+ */
+/** The environment variable that names a lock token a batch holds across chant calls. */
+export declare const WRITE_LOCK_ENV = "CHANT_WRITE_LOCK";
+/** The environment variable that sets how long a write waits for the lock, in milliseconds. */
+export declare const WRITE_LOCK_WAIT_ENV = "CHANT_WRITE_LOCK_WAIT_MS";
+/** How long a write waits for the lock by default. */
+export declare const DEFAULT_WAIT_MS = 15000;
+/** How long one command's lock is good for, should its process be unable to say it died. */
+export declare const COMMAND_TTL_MS: number;
+/** The longest a batch may hold the lock with `lock acquire --ttl`. */
+export declare const MAX_BATCH_TTL_MS: number;
+/** The default `--ttl` of `lock acquire`. */
+export declare const DEFAULT_BATCH_TTL_MS = 60000;
+/** The lock directory's name in the git directory. */
+export declare const WRITE_LOCK_NAME = "chant-write.lock";
+/** The journal's name in the git directory. */
+export declare const WRITE_JOURNAL_NAME = "chant-writes.json";
+export declare const WRITE_LOCK_CODES: readonly ["write-lock-timeout", "write-lock-not-held"];
+export type WriteLockCode = (typeof WRITE_LOCK_CODES)[number];
+/** Who holds the lock, as `owner.json` holds it. */
+export interface WriteLockHolder {
+    token: string;
+    /** The process holding it, or null for a batch held across calls by `lock acquire`. */
+    pid: number | null;
+    host: string;
+    /** What holds it: a write verb, such as `records amend`, or `batch`. */
+    verb: string;
+    by: string | null;
+    agent: string | null;
+    acquiredAt: string;
+    expiresAt: string;
+}
+/** Who is writing: the verb, and the principal and agent session the write names. */
+export interface WriteLockWho {
+    verb: string;
+    by?: string | null;
+    agent?: string | null;
+}
+export declare class WriteLockError extends Error {
+    readonly code: WriteLockCode;
+    readonly holder: WriteLockHolder | null;
+    constructor(code: WriteLockCode, message: string, holder: WriteLockHolder | null);
+}
+/**
+ * The git directory of the working tree `start` is in: `.git`, or the
+ * directory a linked worktree's `.git` file names. Null outside git.
+ */
+export declare function gitDirOf(start: string): string | null;
+/** The lock directory for the working tree `start` is in. */
+export declare function writeLockPath(start: string): string;
+/** The journal for the working tree `start` is in, or null outside git. */
+export declare function writeJournalPath(start: string): string | null;
+/** Remove the lock at `lock` when `token` holds it. Returns whether it did. */
+export declare function releaseLock(lock: string, token: string): boolean;
+/**
+ * Run `fn` holding the working tree's write lock, taken for this one write
+ * and released when `fn` settles. With `dryRun`, without it, since a dry run
+ * writes nothing. Throws a {@link WriteLockError} when the lock can't be had.
+ */
+export declare function withWriteLock<T>(start: string, who: WriteLockWho, dryRun: boolean | undefined, fn: () => Promise<T>): Promise<T>;
+/**
+ * {@link withWriteLock} for a write that is synchronous throughout: it
+ * blocks while it waits. When another write in this same process holds the
+ * lock, blocking would keep that write from ever finishing, so it is refused
+ * with write-lock-timeout at once.
+ */
+export declare function withWriteLockSync<T>(start: string, who: WriteLockWho, dryRun: boolean | undefined, fn: () => T): T;
+/**
+ * Take the lock for a batch held across chant calls (`lock acquire`): no
+ * process holds it, so it lasts until it is released or `ttlMs` passes.
+ * Waits like a write does.
+ */
+export declare function acquireBatchLock(start: string, who: WriteLockWho, ttlMs: number): Promise<{
+    path: string;
+    holder: WriteLockHolder;
+}>;
+/** Who holds the working tree's write lock now, or null when nobody does (a stale lock counts as nobody). */
+export declare function writeLockHolder(start: string): {
+    path: string;
+    holder: WriteLockHolder | null;
+};
+/** Write `text` to `file` through a sibling temporary file, so a reader never sees half of it. */
+export declare function writeFileAtomic(file: string, text: string): void;
+/** The last chant write of a record file, as the read contract reports it. */
+export interface LastWrite {
+    /** The write command, such as `records amend` or `points answer`. */
+    verb: string;
+    /** The principal the write named (--by, or the channel's author), or null when it named none. */
+    by: string | null;
+    /** The agent session it was made in (CHANT_AGENT), or null. */
+    agent: string | null;
+    /** When, as an ISO 8601 time. */
+    at: string;
+}
+export declare function sha256Text(text: string): string;
+/**
+ * Note in the journal that `who` wrote each file, with the text it now
+ * holds. Called holding the lock, after the write. Best effort: a journal
+ * that can't be written never fails the write it notes.
+ */
+export declare function noteWrites(start: string, writes: readonly {
+    path: string;
+    text: string;
+}[], who: WriteLockWho): void;
+/**
+ * A reader of the journal for the working tree `start` is in: the last chant
+ * write of a record file, while the file still holds the text that write
+ * left, and null otherwise (written by something else since, or never by
+ * chant here).
+ */
+export declare function lastWriteReader(start: string): (path: string, text: string | null) => LastWrite | null;
+//# sourceMappingURL=write-lock.d.ts.map

package/dist/workspace/write-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-lock.d.ts","sourceRoot":"","sources":["../../src/workspace/write-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAQH,yFAAyF;AACzF,eAAO,MAAM,cAAc,qBAAqB,CAAC;AACjD,+FAA+F;AAC/F,eAAO,MAAM,mBAAmB,6BAA6B,CAAC;AAC9D,sDAAsD;AACtD,eAAO,MAAM,eAAe,QAAS,CAAC;AACtC,4FAA4F;AAC5F,eAAO,MAAM,cAAc,QAAa,CAAC;AACzC,uEAAuE;AACvE,eAAO,MAAM,gBAAgB,QAAc,CAAC;AAC5C,6CAA6C;AAC7C,eAAO,MAAM,oBAAoB,QAAS,CAAC;AAE3C,sDAAsD;AACtD,eAAO,MAAM,eAAe,qBAAqB,CAAC;AAClD,+CAA+C;AAC/C,eAAO,MAAM,kBAAkB,sBAAsB,CAAC;AAEtD,eAAO,MAAM,gBAAgB,YAAI,oBAAoB,EAAE,qBAAqB,CAAU,CAAC;AACvF,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D,oDAAoD;AACpD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,uFAAuF;IACvF,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qFAAqF;AACrF,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,qBAAa,cAAe,SAAQ,KAAK;IAErC,QAAQ,CAAC,IAAI,EAAE,aAAa;IAE5B,QAAQ,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI;IAHzC,YACW,IAAI,EAAE,aAAa,EAC5B,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,eAAe,GAAG,IAAI,EAIxC;CACF;AAID;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAkBrD;AAUD,6DAA6D;AAC7D,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAInD;AAED,2EAA2E;AAC3E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG7D;AAsID,+EAA+E;AAC/E,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAUhE;AAwBD;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,GAAG,SAAS,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAatI;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,GAAG,SAAS,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAsBlH;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE,CAAC,CAK1I;AAED,6GAA6G;AAC7G,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAAA;CAAE,CAK/F;AAID,kGAAkG;AAClG,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAShE;AAID,8EAA8E;AAC9E,MAAM,WAAW,SAAS;IACxB,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,iGAAiG;IACjG,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,+DAA+D;IAC/D,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,iCAAiC;IACjC,EAAE,EAAE,MAAM,CAAC;CACZ;AAWD,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/C;AAYD;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,EAAE,GAAG,EAAE,YAAY,GAAG,IAAI,CAgBpH;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,KAAK,SAAS,GAAG,IAAI,CAQtG"}

package/dist/workspace/write-scope.d.ts

@@ -25,27 +25,40 @@
  *   detection only (ws-002).
  *
  * A principal's class comes from the role grants in the trust policy at base,
- * through {@link principalClass} alone (the agent, runner and service roles),
+ * through {@link principalClass} alone (the agent, runner and service roles,
+ * then the role each domain class a pinned package supplies names, #3080),
  * or from naming an agent session. Claiming a session only ever narrows what
  * a writer may do, so an unverified `CHANT_AGENT` or trailer is safe to honour.
+ *
+ * A writeScope key no pinned package supplies fails closed: a writer judged
+ * `human` might be in that class, so it is refused with
+ * `write-scope-class-unknown` until the plugin is installed at the pinned
+ * version or the entry is removed.
  */
-import { type AgentDeclaration, type ClassScope, type Declaration, type PrincipalClass, type WriteVerb } from "./declaration.js";
+import { type AgentDeclaration, type ClassScope, type Declaration, type PrincipalClass, type ProtectedPath, type WriteVerb } from "./declaration.js";
+import { classesOf, roleGrants, type ClassRegistry } from "./principal-classes.js";
 import { type TrustPolicy } from "./trust/policy.js";
+import { AGENT_TRAILER } from "./trailers.js";
 /** The environment variable naming the agent session a write is made in. */
 export declare const AGENT_ENV = "CHANT_AGENT";
-/** The commit trailer naming the agent session a commit was made in. */
-export declare const AGENT_TRAILER = "Chant-Agent";
+/** The commit trailer naming the agent session a commit was made in, one of chant's trailers (`trailers.ts`). */
+export { AGENT_TRAILER };
 /** Why a write is outside its writer's scope. Closed. */
-export declare const WRITE_SCOPE_CODES: readonly ["write-scope-member", "write-scope-kind", "agent-unknown"];
+export declare const WRITE_SCOPE_CODES: readonly ["write-scope-member", "write-scope-kind", "write-scope-class-unknown", "agent-unknown"];
 export type WriteScopeCode = (typeof WRITE_SCOPE_CODES)[number];
 /**
- * The role grants a class is read from. Every read of roles for write scope
- * goes through here, so where the grants live (`.chant/trust.json` today,
- * possibly the declaration, #2547) is decided in one place: the policy.
+ * What `check --changes` reports a path with: the record-write codes, and a
+ * write to a protected path (#3146), which a record write never is. Closed.
+ */
+export declare const SCOPE_FINDING_CODES: readonly ["write-scope-member", "write-scope-kind", "write-scope-class-unknown", "agent-unknown", "write-scope-protected"];
+export type ScopeFindingCode = (typeof SCOPE_FINDING_CODES)[number];
+export { classesOf, roleGrants };
+/**
+ * The class a principal is in: the first of agent, runner and service whose
+ * role it holds at base, then the first domain class in `classes` whose role
+ * it holds (#3080), or human.
  */
-export declare function roleGrants(policy: TrustPolicy): Record<string, string[]>;
-/** The class a principal is in: the first of agent, runner and service whose role it holds at base, or human. */
-export declare function principalClass(policy: TrustPolicy, principal: string | null): PrincipalClass;
+export declare function principalClass(policy: TrustPolicy, principal: string | null, classes?: ClassRegistry): PrincipalClass;
 /** Who is writing, as the scope judges it. */
 export interface Writer {
     /** The principal named, or null when none is. */
@@ -66,11 +79,32 @@ export declare class WriteScopeError extends Error {
 export declare function resolveWriter(declaration: Declaration | null, policy: TrustPolicy, given: {
     agent?: string | null;
     principal?: string | null;
-}): Writer;
+}, classes?: ClassRegistry): Writer;
+/**
+ * Refuse `writer` when the declaration's writeScope names a class `classes`
+ * doesn't know and the writer is judged human (#3080): nothing says which
+ * role puts a principal in the unknown class, so this writer may be in it.
+ * A writer in another class is judged by that class, which comes first.
+ */
+export declare function unknownClassVerdict(declaration: Declaration | null, writer: Writer, classes: ClassRegistry): {
+    ok: true;
+} | {
+    ok: false;
+    code: "write-scope-class-unknown";
+    message: string;
+};
 /** The scope that applies to `writer`, or null when its class is not restricted. An agent is always restricted to its member. */
 export declare function scopeOf(declaration: Declaration | null, writer: Writer): ClassScope | null;
 export type ScopeVerdict = {
     ok: true;
+} | {
+    ok: false;
+    code: Exclude<ScopeFindingCode, "agent-unknown">;
+    message: string;
+};
+/** A record write's verdict: never write-scope-protected, since protected paths judge files that aren't records. */
+export type RecordVerdict = {
+    ok: true;
 } | {
     ok: false;
     code: Exclude<WriteScopeCode, "agent-unknown">;
@@ -88,9 +122,34 @@ export interface ScopedKind {
     declared: boolean;
 }
 /** Whether `writer` may write a record of `kind` with `verb`. A delete is never in a restricted scope. */
-export declare function judgeRecord(declaration: Declaration | null, writer: Writer, kind: ScopedKind, verb: WriteVerb | "delete"): ScopeVerdict;
-/** Whether `writer` may write the file at `path`, from the workspace root. */
-export declare function judgePath(declaration: Declaration | null, writer: Writer, path: string): ScopeVerdict;
+export declare function judgeRecord(declaration: Declaration | null, writer: Writer, kind: ScopedKind, verb: WriteVerb | "delete"): RecordVerdict;
+/**
+ * The protected entry of `entries` that covers `path` (#3146, ws-077): one
+ * whose glob matches the path or a directory above it. Null when none does.
+ */
+export declare function protectedEntry(entries: readonly ProtectedPath[], path: string): ProtectedPath | null;
+/**
+ * Whether JSON text `before` and `after` differ only in what `except`
+ * allows: a top-level key, or, for an entry starting with `/`, the values a
+ * JSON Pointer matches, where a `*` token matches every key or array index
+ * at its level (`/members/*\/box/listing`, #3308). Comments and trailing
+ * commas are read, so a `.jsonc` declaration is judged too. False when either
+ * is missing or isn't a JSON object.
+ */
+export declare function onlyKeysChanged(before: string | null, after: string | null, except: readonly string[]): boolean;
+/** A file's text before and after a write, read only when a protected entry with `except` needs it. */
+export interface PathChange {
+    before(): string | null;
+    after(): string | null;
+}
+/**
+ * Whether `writer` may write the file at `path`, from the workspace root:
+ * the path is in a member the writer may write, and no protected entry of
+ * its scope covers it, unless the entry's `except` allows the change (#3146).
+ * Without `change`, a write to a path an `except` entry covers is judged as a
+ * change outside the allowed keys.
+ */
+export declare function judgePath(declaration: Declaration | null, writer: Writer, path: string, change?: PathChange): ScopeVerdict;
 /** The declaration and policy a write on this machine is judged by. */
 export interface ScopeSource {
     declaration: Declaration | null;
@@ -101,6 +160,8 @@ export interface ScopeSource {
     /** The workspace root from the git root, "." for the git root, or null without a declaration. */
     root: string | null;
     policy: TrustPolicy;
+    /** The principal classes: the core four and those the declaration's pins supply, path pins read where the declaration was (#3080). */
+    classes: ClassRegistry;
 }
 /**
  * The scope for a write from `cwd`: the declaration and the trust policy at
@@ -119,6 +180,7 @@ export declare function scopedKind(source: ScopeSource, kindName: string, kindFi
  * Refuse a record write outside the writer's scope (#2548): throws a
  * {@link WriteScopeError}. `agent` is the session the write names
  * (`CHANT_AGENT`), and `principal` who the write names as its author.
+ * Returns what it read at base, for the identity rule (#3163).
  */
 export declare function refuseRecordWrite(cwd: string, write: {
     kindName: string;
@@ -127,7 +189,7 @@ export declare function refuseRecordWrite(cwd: string, write: {
     verb: WriteVerb;
     agent?: string | null;
     principal?: string | null;
-}): void;
+}): ScopeSource;
 /** A commit as the scope check judged it. */
 export interface ScopeCommit {
     commit: string;
@@ -143,9 +205,9 @@ export interface ScopeCommit {
     paths: number;
 }
 export interface ScopeFinding {
-    /** `finding:<code>:<commit>:<path>`, or `finding:agent-unknown:<commit>`. */
+    /** `finding:<code>:<commit>:<path>`, or `finding:<code>:<commit>` for agent-unknown and write-scope-class-unknown, which judge the whole commit. */
     id: string;
-    code: WriteScopeCode;
+    code: ScopeFindingCode;
     commit: string;
     /** From the workspace root, or null for a finding on the whole commit. */
     path: string | null;
@@ -159,7 +221,7 @@ export interface ScopeFinding {
 export interface ScopeReport {
     /** The commit the declaration and the trust policy were read at. */
     base: string;
-    /** The classes with a writeScope entry, and agent when any session is declared. */
+    /** The classes with a writeScope entry, and agent when any session is declared: core first, then domain classes in pin order, then any no pinned package supplies. */
     restricted: PrincipalClass[];
     agents: string[];
     commits: ScopeCommit[];
@@ -195,5 +257,7 @@ export declare function checkWriteScope(q: {
     prefix: string;
     declaration: Declaration;
     kinds: CheckKind[];
+    /** The principal classes the declaration's pins supply at base (#3080). Without it, the core four. */
+    classes?: ClassRegistry;
 }): Promise<ScopeReport | null>;
 //# sourceMappingURL=write-scope.d.ts.map

package/dist/workspace/write-scope.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"write-scope.d.ts","sourceRoot":"","sources":["../../src/workspace/write-scope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAIH,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,SAAS,EACf,MAAM,eAAe,CAAC;AAKvB,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAI/D,4EAA4E;AAC5E,eAAO,MAAM,SAAS,gBAAgB,CAAC;AAEvC,wEAAwE;AACxE,eAAO,MAAM,aAAa,gBAAgB,CAAC;AAE3C,yDAAyD;AACzD,eAAO,MAAM,iBAAiB,sEAAuG,CAAC;AACtI,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAKhE;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAExE;AAED,iHAAiH;AACjH,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,cAAc,CAK5F;AAED,8CAA8C;AAC9C,MAAM,WAAW,MAAM;IACrB,iDAAiD;IACjD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,cAAc,CAAC;IACtB,yDAAyD;IACzD,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAAC;CAChC;AAED,qBAAa,eAAgB,SAAQ,KAAK;IAEtC,QAAQ,CAAC,IAAI,EAAE,cAAc;gBAApB,IAAI,EAAE,cAAc,EAC7B,OAAO,EAAE,MAAM;CAKlB;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,MAAM,CAsBvJ;AAED,iIAAiI;AACjI,wBAAgB,OAAO,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAI1F;AAED,MAAM,MAAM,YAAY,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAgBzH,8DAA8D;AAC9D,MAAM,WAAW,UAAU;IACzB,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,kDAAkD;IAClD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gFAAgF;IAChF,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,8GAA8G;IAC9G,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,0GAA0G;AAC1G,wBAAgB,WAAW,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,GAAG,QAAQ,GAAG,YAAY,CA4BvI;AAED,8EAA8E;AAC9E,wBAAgB,SAAS,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,YAAY,CAWrG;AAID,uEAAuE;AACvE,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IAChC,4HAA4H;IAC5H,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAAC;IACrC,iEAAiE;IACjE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iGAAiG;IACjG,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;CACrB;AAYD;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAUpD;AAID;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,UAAU,CAQlH;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,EACX,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACnI,IAAI,CAMN;AAID,6CAA6C;AAC7C,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,qFAAqF;IACrF,SAAS,EAAE,MAAM,CAAC;IAClB,0GAA0G;IAC1G,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,cAAc,CAAC;IACtB,iFAAiF;IACjF,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,6EAA6E;IAC7E,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,cAAc,CAAC;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,yFAAyF;IACzF,IAAI,EAAE,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,mFAAmF;IACnF,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,QAAQ,EAAE,YAAY,EAAE,CAAC;CAC1B;AAED,8EAA8E;AAC9E,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,UAAU,CAAC;IACnB,uDAAuD;IACvD,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,sFAAsF;IACtF,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,gFAAgF;IAChF,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1E,MAAM,EAAE,MAAM,CAAC;CAChB;AAkCD;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,CAAC,EAAE;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,WAAW,CAAC;IACzB,KAAK,EAAE,SAAS,EAAE,CAAC;CACpB,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CA6D9B"}
+{"version":3,"file":"write-scope.d.ts","sourceRoot":"","sources":["../../src/workspace/write-scope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAOH,OAAO,EAGL,KAAK,gBAAgB,EACrB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,SAAS,EACf,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,SAAS,EAIT,UAAU,EAEV,KAAK,aAAa,EACnB,MAAM,qBAAqB,CAAC;AAO7B,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE/D,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAG3C,4EAA4E;AAC5E,eAAO,MAAM,SAAS,gBAAgB,CAAC;AAEvC,iHAAiH;AACjH,OAAO,EAAE,aAAa,EAAE,CAAC;AAEzB,yDAAyD;AACzD,eAAO,MAAM,iBAAiB,mGAAoI,CAAC;AACnK,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE;;;GAGG;AACH,eAAO,MAAM,mBAAmB,4HAA2F,CAAC;AAC5H,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AAEjC;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,GAAE,aAAmC,GAAG,cAAc,CAE1I;AAED,8CAA8C;AAC9C,MAAM,WAAW,MAAM;IACrB,iDAAiD;IACjD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,cAAc,CAAC;IACtB,yDAAyD;IACzD,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAAC;CAChC;AAED,qBAAa,eAAgB,SAAQ,KAAK;IAEtC,QAAQ,CAAC,IAAI,EAAE,cAAc;IAD/B,YACW,IAAI,EAAE,cAAc,EAC7B,OAAO,EAAE,MAAM,EAIhB;CACF;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,WAAW,EAAE,WAAW,GAAG,IAAI,EAC/B,MAAM,EAAE,WAAW,EACnB,KAAK,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,EAC3D,OAAO,GAAE,aAAmC,GAC3C,MAAM,CAsBR;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,2BAA2B,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAU7L;AAED,iIAAiI;AACjI,wBAAgB,OAAO,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAI1F;AAED,MAAM,MAAM,YAAY,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3H,oHAAoH;AACpH,MAAM,MAAM,aAAa,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAgB1H,8DAA8D;AAC9D,MAAM,WAAW,UAAU;IACzB,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,kDAAkD;IAClD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gFAAgF;IAChF,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,8GAA8G;IAC9G,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,0GAA0G;AAC1G,wBAAgB,WAAW,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,GAAG,QAAQ,GAAG,aAAa,CA4BxI;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CASpG;AAkBD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAiB/G;AAED,uGAAuG;AACvG,MAAM,WAAW,UAAU;IACzB,MAAM,IAAI,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,IAAI,MAAM,GAAG,IAAI,CAAC;CACxB;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,UAAU,GAAG,YAAY,CAqB1H;AAID,uEAAuE;AACvE,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IAChC,4HAA4H;IAC5H,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAAC;IACrC,iEAAiE;IACjE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iGAAiG;IACjG,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;IACpB,sIAAsI;IACtI,OAAO,EAAE,aAAa,CAAC;CACxB;AAYD;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAcpD;AAID;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,UAAU,CAQlH;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,EACX,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACnI,WAAW,CASb;AAID,6CAA6C;AAC7C,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,qFAAqF;IACrF,SAAS,EAAE,MAAM,CAAC;IAClB,0GAA0G;IAC1G,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,cAAc,CAAC;IACtB,iFAAiF;IACjF,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,oJAAoJ;IACpJ,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,cAAc,CAAC;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,yFAAyF;IACzF,IAAI,EAAE,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,sKAAsK;IACtK,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,QAAQ,EAAE,YAAY,EAAE,CAAC;CAC1B;AAED,8EAA8E;AAC9E,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,UAAU,CAAC;IACnB,uDAAuD;IACvD,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,sFAAsF;IACtF,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,gFAAgF;IAChF,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1E,MAAM,EAAE,MAAM,CAAC;CAChB;AAkCD;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,CAAC,EAAE;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,WAAW,CAAC;IACzB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,sGAAsG;IACtG,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAuE9B"}

package/dist/yaml.d.ts

@@ -1,24 +1,23 @@
 /**
- * Lightweight YAML emitter and parser.
+ * YAML emitter and parser.
  *
- * Covers the subset of YAML used by Chant lexicons (scalars, block arrays,
- * nested objects, block scalars, tagged values, anchors, aliases and merge
- * keys). Not a full YAML implementation: flow collections are read only when
- * they are JSON. `splitYAMLDocuments` splits a multi-document stream. The
- * parser throws a `YAMLParseError` on a line it cannot place instead of
- * dropping it (#2991).
+ * The emitter writes the block-style YAML chant's serializers produce. The
+ * parser is js-yaml with chant's schema (#3006): YAML 1.2 core types,
+ * merge keys, `yes`/`no` booleans, and local tags such as `!reference` read
+ * as strings. `splitYAMLDocuments` splits a multi-document stream. Input the
+ * parser cannot read throws a `YAMLParseError` naming the line.
  */
 export declare function emitYAML(value: unknown, indent: number): string;
-/** Result of parsing a YAML block. */
-export interface ParseResult {
-    value: unknown;
-    endIndex: number;
-}
 /**
- * Input the parser cannot place (#2991). The parser used to skip such a line,
- * or read it as a key of whatever mapping was open at the top level, so a
- * mis-indented or unsupported construct came back as a quietly different
- * document. Now it is an error naming the line.
+ * `key: value` at column `indent * 2`, for a serializer that writes a
+ * document key by key. A block value follows the colon on the next line; an
+ * inline one (a scalar, `{}`, `[]`) needs a space after the colon, or
+ * `jobs:{}` is the plain scalar "jobs:{}" rather than a key (#3006).
+ */
+export declare function emitYAMLEntry(key: string, value: unknown, indent?: number): string;
+/**
+ * A document the parser cannot read. Its message and `line` name the line,
+ * so `chant import` can report "YAML line N: ..." instead of a stack trace.
  */
 export declare class YAMLParseError extends Error {
     /** 1-based line number within the text handed to the parser. */
@@ -28,17 +27,16 @@ export declare class YAMLParseError extends Error {
 /**
  * Parse a YAML document (or JSON document) into a plain object.
  *
- * Tries `JSON.parse` first; falls back to a line-based YAML parser that
- * handles the subset of YAML commonly found in CI configuration files. Throws
- * {@link YAMLParseError} on a line it cannot place rather than dropping it.
+ * Tries `JSON.parse` first, then js-yaml (#3006). A top-level sequence reads
+ * as `{}`, since callers rely on getting a mapping back; use
+ * {@link parseYAMLDocument} for the list. Throws {@link YAMLParseError} with
+ * the line number on input it cannot read.
  */
 export declare function parseYAML(content: string): Record<string, unknown>;
 /**
  * Parse one YAML (or JSON) document whose top level may be a sequence
- * (#2965). {@link parseYAML} reads only a top-level mapping and returns `{}`
- * for a file like `- a\n- b`; its callers rely on getting a mapping back, so
- * it keeps doing that. This returns the list instead, and otherwise defers to
- * `parseYAML`.
+ * (#2965). {@link parseYAML} returns `{}` for a file like `- a\n- b`; this
+ * returns the list.
  */
 export declare function parseYAMLDocument(content: string): unknown;
 /**
@@ -49,22 +47,6 @@ export declare function parseYAMLDocument(content: string): unknown;
  * normalized to `\n`.
  */
 export declare function splitYAMLDocuments(content: string): string[];
-/**
- * Parse indentation-based YAML lines into a key-value object: the mapping
- * whose keys sit at column `baseIndent`, starting at `startIndex`.
- *
- * It ends at the first line that is not one of its keys: a line at another
- * column, a sequence entry, or text that is not `key:`. That line goes back
- * to the caller in `endIndex`; if no caller owns it, `parseYAML` reports it
- * (#2991). This function never skips a content line.
- */
-export declare function parseYAMLLines(lines: string[], startIndex: number, baseIndent: number): ParseResult;
-/**
- * Parse a block array: the `- ` entries at column `baseIndent`, starting at
- * `startIndex`. Like {@link parseYAMLLines} it ends at the first line that is
- * not one of its entries and hands that line back in `endIndex`.
- */
-export declare function parseYAMLArray(lines: string[], startIndex: number, baseIndent: number): ParseResult;
 /**
  * Coerce a scalar string to a typed value.
  */

package/dist/yaml.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"yaml.d.ts","sourceRoot":"","sources":["../src/yaml.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AA0BH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAgH/D;AAMD,sCAAsC;AACtC,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;GAKG;AACH,qBAAa,cAAe,SAAQ,KAAK;IACvC,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAK1C;AAmJD;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAalE;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAW1D;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAc5D;AAiFD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,EAAE,EACf,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,WAAW,CAqBb;AA+MD;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,EAAE,EACf,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,WAAW,CA4Db;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAwBlD"}
+{"version":3,"file":"yaml.d.ts","sourceRoot":"","sources":["../src/yaml.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA4BH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAsH/D;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,SAAI,GAAG,MAAM,CAG7E;AAMD;;;GAGG;AACH,qBAAa,cAAe,SAAQ,KAAK;IACvC,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,YAAY,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAIxC;CACF;AAkID;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQlE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAO1D;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAc5D;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAwBlD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant",
-  "version": "0.101.0",
+  "version": "0.104.0",
   "description": "Declarative infrastructure-as-code toolkit — TypeScript on Node.js",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",
@@ -50,6 +50,11 @@
       "default": "./src/cli/index.ts"
     },
     "./workspace/*.schema.json": "./src/workspace/*.schema.json",
+    "./workspace/factory-rules": {
+      "development": "./src/workspace/factory-rules.ts",
+      "types": "./dist/workspace/factory-rules.d.ts",
+      "default": "./src/workspace/factory-rules.ts"
+    },
     "./workspace/conformance": {
       "development": "./src/workspace/conformance/index.ts",
       "types": "./dist/workspace/conformance/index.d.ts",
@@ -97,7 +102,7 @@
     }
   },
   "scripts": {
-    "build": "tsc -p tsconfig.build.json && tsc-alias -p tsconfig.build.json && find dist -type f \\( -name \"*.js\" -o -name \"*.js.map\" \\) -delete",
+    "build": "../../scripts/tsc7.sh -p tsconfig.build.json && tsc-alias -p tsconfig.build.json && find dist -type f \\( -name \"*.js\" -o -name \"*.js.map\" \\) -delete",
     "prepack": "npm run build"
   },
   "dependencies": {

package/src/__fixtures__/change-set/lifecycle-plan.floci.json

@@ -0,0 +1,59 @@
+{
+  "env": "dev",
+  "entries": [
+    {
+      "name": "alerts",
+      "type": "AWS::SNS::Topic",
+      "lexicon": "aws",
+      "physicalId": "arn:aws:sns:us-east-1:000000000000:cs-alerts",
+      "action": "noop",
+      "evidence": {
+        "declared": false,
+        "inSnapshot": true,
+        "live": false,
+        "observed": true
+      },
+      "ownership": "unknown"
+    },
+    {
+      "name": "dlq",
+      "lexicon": "aws",
+      "action": "create",
+      "evidence": {
+        "declared": true,
+        "inSnapshot": false,
+        "live": false,
+        "observed": true
+      },
+      "ownership": "unknown"
+    },
+    {
+      "name": "events",
+      "type": "AWS::SQS::Queue",
+      "lexicon": "aws",
+      "physicalId": "http://localhost:4566/000000000000/cs-events",
+      "action": "noop",
+      "evidence": {
+        "declared": true,
+        "inSnapshot": true,
+        "live": true,
+        "observed": true
+      },
+      "ownership": "foreign"
+    },
+    {
+      "name": "jobs",
+      "type": "AWS::SQS::Queue",
+      "lexicon": "aws",
+      "physicalId": "http://localhost:4566/000000000000/cs-jobs",
+      "action": "noop",
+      "evidence": {
+        "declared": true,
+        "inSnapshot": true,
+        "live": true,
+        "observed": true
+      },
+      "ownership": "foreign"
+    }
+  ]
+}

package/src/__fixtures__/change-set/lifecycle-v1.ts.txt

@@ -0,0 +1,4 @@
+import { Queue, Topic } from "@intentius/chant-lexicon-aws";
+export const jobs = new Queue({ QueueName: "cs-jobs", VisibilityTimeout: 30 });
+export const events = new Queue({ QueueName: "cs-events", VisibilityTimeout: 30 });
+export const alerts = new Topic({ TopicName: "cs-alerts" });

package/src/__fixtures__/change-set/lifecycle-v2.ts.txt

@@ -0,0 +1,4 @@
+import { Queue } from "@intentius/chant-lexicon-aws";
+export const jobs = new Queue({ QueueName: "cs-jobs", VisibilityTimeout: 60 });
+export const events = new Queue({ QueueName: "cs-events-v2", VisibilityTimeout: 30 });
+export const dlq = new Queue({ QueueName: "cs-dlq" });