@intentius/chant 0.124.16 → 0.124.18

package/src/__golden__/wave-loop/op-wide.json

@@ -0,0 +1,440 @@
+{
+  "jobs": [
+    {
+      "label": "decide, approved and spent",
+      "job": {
+        "wave": 3,
+        "decide": true
+      },
+      "result": {
+        "exitCode": 0,
+        "applied": [],
+        "failed": [],
+        "moved": [],
+        "hooks": [],
+        "decision": {
+          "wave": 3,
+          "name": "prod",
+          "op": "migrations",
+          "gate": "migrations-wave-3",
+          "policy": "always",
+          "approval": "ledger",
+          "policySource": "base",
+          "base": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+          "digest": "jcs1-sha256:106d25f35ee6bc02e9aa253d0b2633a764396833c82e0c5ec5a4ad83a2a85b4e",
+          "members": [
+            {
+              "member": "t3",
+              "planDigest": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
+              "op": "migrate"
+            },
+            {
+              "member": "t1",
+              "planDigest": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+              "op": "migrate"
+            },
+            {
+              "member": "t2",
+              "planDigest": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
+              "op": "migrate"
+            }
+          ],
+          "status": "approved",
+          "spend": "base",
+          "via": "ledger",
+          "approvedBy": "alice",
+          "approvedAt": "2026-10-10T00:00:00Z",
+          "spentAt": "2026-10-11T00:00:00.000Z"
+        }
+      },
+      "ledger": {
+        "appended": [],
+        "resolved": [],
+        "applied": [
+          {
+            "version": 1,
+            "kind": "applied",
+            "op": "migrations",
+            "gate": "migrations-wave-3",
+            "planDigest": "jcs1-sha256:106d25f35ee6bc02e9aa253d0b2633a764396833c82e0c5ec5a4ad83a2a85b4e",
+            "approvedAt": "2026-10-10T00:00:00Z",
+            "approvedBy": "alice",
+            "timestamp": "2026-10-11T00:00:00.000Z",
+            "wave": {
+              "number": 3,
+              "name": "prod"
+            }
+          }
+        ]
+      },
+      "calls": 3,
+      "logs": 2
+    },
+    {
+      "label": "share 2",
+      "job": {
+        "wave": 3,
+        "share": 2
+      },
+      "result": {
+        "exitCode": 0,
+        "applied": [
+          "t3"
+        ],
+        "failed": [],
+        "moved": [],
+        "hooks": [],
+        "decision": {
+          "wave": 3,
+          "name": "prod",
+          "op": "migrations",
+          "gate": "migrations-wave-3",
+          "policy": "always",
+          "approval": "ledger",
+          "policySource": "base",
+          "base": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+          "digest": "jcs1-sha256:106d25f35ee6bc02e9aa253d0b2633a764396833c82e0c5ec5a4ad83a2a85b4e",
+          "members": [
+            {
+              "member": "t3",
+              "planDigest": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
+              "op": "migrate"
+            },
+            {
+              "member": "t1",
+              "planDigest": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+              "op": "migrate"
+            },
+            {
+              "member": "t2",
+              "planDigest": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
+              "op": "migrate"
+            }
+          ],
+          "status": "approved",
+          "spend": "base",
+          "via": "ledger",
+          "approvedBy": "alice",
+          "approvedAt": "2026-10-10T00:00:00Z",
+          "spentAt": "2026-10-11T00:00:00.000Z"
+        }
+      },
+      "ledger": {
+        "appended": [],
+        "resolved": [],
+        "applied": [
+          {
+            "version": 1,
+            "kind": "applied",
+            "op": "migrations",
+            "gate": "migrations-wave-3",
+            "planDigest": "jcs1-sha256:106d25f35ee6bc02e9aa253d0b2633a764396833c82e0c5ec5a4ad83a2a85b4e",
+            "approvedAt": "2026-10-10T00:00:00Z",
+            "approvedBy": "alice",
+            "timestamp": "2026-10-11T00:00:00.000Z",
+            "wave": {
+              "number": 3,
+              "name": "prod"
+            }
+          }
+        ]
+      },
+      "calls": 2,
+      "logs": 0
+    },
+    {
+      "label": "share 1, t2 moved",
+      "job": {
+        "wave": 3,
+        "share": 1
+      },
+      "result": {
+        "exitCode": 4,
+        "applied": [
+          "t1"
+        ],
+        "failed": [],
+        "moved": [
+          "t2"
+        ],
+        "hooks": [],
+        "decision": {
+          "wave": 3,
+          "name": "prod",
+          "op": "migrations",
+          "gate": "migrations-wave-3",
+          "policy": "always",
+          "approval": "ledger",
+          "policySource": "base",
+          "base": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+          "digest": "jcs1-sha256:106d25f35ee6bc02e9aa253d0b2633a764396833c82e0c5ec5a4ad83a2a85b4e",
+          "members": [
+            {
+              "member": "t3",
+              "planDigest": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
+              "op": "migrate"
+            },
+            {
+              "member": "t1",
+              "planDigest": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+              "op": "migrate"
+            },
+            {
+              "member": "t2",
+              "planDigest": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
+              "op": "migrate"
+            }
+          ],
+          "status": "approved",
+          "spend": "base",
+          "via": "ledger",
+          "approvedBy": "alice",
+          "approvedAt": "2026-10-10T00:00:00Z",
+          "spentAt": "2026-10-11T00:00:00.000Z"
+        }
+      },
+      "ledger": {
+        "appended": [],
+        "resolved": [],
+        "applied": [
+          {
+            "version": 1,
+            "kind": "applied",
+            "op": "migrations",
+            "gate": "migrations-wave-3",
+            "planDigest": "jcs1-sha256:106d25f35ee6bc02e9aa253d0b2633a764396833c82e0c5ec5a4ad83a2a85b4e",
+            "approvedAt": "2026-10-10T00:00:00Z",
+            "approvedBy": "alice",
+            "timestamp": "2026-10-11T00:00:00.000Z",
+            "wave": {
+              "number": 3,
+              "name": "prod"
+            }
+          }
+        ]
+      },
+      "calls": 3,
+      "logs": 1
+    }
+  ],
+  "calls": [
+    {
+      "argv": [
+        "tool",
+        "plan",
+        "t3",
+        "--out",
+        ".chant/op-waves/migrations/wave-3/t3.plan.json"
+      ]
+    },
+    {
+      "argv": [
+        "tool",
+        "plan",
+        "t1",
+        "--out",
+        ".chant/op-waves/migrations/wave-3/t1.plan.json"
+      ]
+    },
+    {
+      "argv": [
+        "tool",
+        "plan",
+        "t2",
+        "--out",
+        ".chant/op-waves/migrations/wave-3/t2.plan.json"
+      ]
+    },
+    {
+      "argv": [
+        "tool",
+        "plan",
+        "t3",
+        "--out",
+        ".chant/op-waves/migrations/wave-3/t3.plan.json"
+      ]
+    },
+    {
+      "argv": [
+        "tool",
+        "apply",
+        "t3",
+        "--plan",
+        ".chant/op-waves/migrations/wave-3/t3.plan.json"
+      ],
+      "env": {
+        "CHANT_HOOKS": ".chant/op-waves/migrations/wave-3/t3.hooks.json",
+        "CHANT_APPLY_OUTCOME": ".chant/op-waves/migrations/wave-3/t3.hooks-outcome.json"
+      },
+      "read": {
+        "CHANT_HOOKS": {
+          "version": 1,
+          "opWaves": "migrations",
+          "op": "migrate",
+          "wave": "prod",
+          "number": 3,
+          "base": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+          "digest": "jcs1-sha256:106d25f35ee6bc02e9aa253d0b2633a764396833c82e0c5ec5a4ad83a2a85b4e",
+          "approved": true,
+          "runBy": "chant",
+          "runs": [
+            {
+              "target": "t3",
+              "op": "migrate",
+              "plan": ".chant/op-waves/migrations/wave-3/t3.plan.json"
+            }
+          ],
+          "runsFile": ".chant/op-waves/migrations/wave-3/runs.json",
+          "hooks": {},
+          "outcomes": []
+        }
+      }
+    },
+    {
+      "argv": [
+        "tool",
+        "plan",
+        "t1",
+        "--out",
+        ".chant/op-waves/migrations/wave-3/t1.plan.json"
+      ]
+    },
+    {
+      "argv": [
+        "tool",
+        "plan",
+        "t2",
+        "--out",
+        ".chant/op-waves/migrations/wave-3/t2.plan.json"
+      ]
+    },
+    {
+      "argv": [
+        "tool",
+        "apply",
+        "t1",
+        "--plan",
+        ".chant/op-waves/migrations/wave-3/t1.plan.json"
+      ],
+      "env": {
+        "CHANT_HOOKS": ".chant/op-waves/migrations/wave-3/t1.hooks.json",
+        "CHANT_APPLY_OUTCOME": ".chant/op-waves/migrations/wave-3/t1.hooks-outcome.json"
+      },
+      "read": {
+        "CHANT_HOOKS": {
+          "version": 1,
+          "opWaves": "migrations",
+          "op": "migrate",
+          "wave": "prod",
+          "number": 3,
+          "base": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+          "digest": "jcs1-sha256:106d25f35ee6bc02e9aa253d0b2633a764396833c82e0c5ec5a4ad83a2a85b4e",
+          "approved": true,
+          "runBy": "chant",
+          "runs": [
+            {
+              "target": "t1",
+              "op": "migrate",
+              "plan": ".chant/op-waves/migrations/wave-3/t1.plan.json"
+            }
+          ],
+          "runsFile": ".chant/op-waves/migrations/wave-3/runs.json",
+          "hooks": {},
+          "outcomes": []
+        }
+      }
+    }
+  ],
+  "logs": [
+    "wave 3 (prod): gate always (read at bbbbbbbbbbbb), digest jcs1-sha256:106d25f35ee6bc02e9aa253d0b2633a764396833c82e0c5ec5a4ad83a2a85b4e: approved by alice",
+    "wave 3 (prod) applies under the approval by alice at 2026-10-10T00:00:00Z, which is now spent",
+    "t2: its plan moved since wave 3 was decided, so it was not applied. decided: sha256:2222222222222222222222222222222222222222222222222222222222222222; planned now: sha256:9999999999999999999999999999999999999999999999999999999999999999"
+  ],
+  "files": {
+    ".chant/op-waves/migrations/wave-3/t1.hooks.json": {
+      "version": 1,
+      "opWaves": "migrations",
+      "op": "migrate",
+      "wave": "prod",
+      "number": 3,
+      "base": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "digest": "jcs1-sha256:106d25f35ee6bc02e9aa253d0b2633a764396833c82e0c5ec5a4ad83a2a85b4e",
+      "approved": true,
+      "runBy": "chant",
+      "runs": [
+        {
+          "target": "t1",
+          "op": "migrate",
+          "plan": ".chant/op-waves/migrations/wave-3/t1.plan.json"
+        }
+      ],
+      "runsFile": ".chant/op-waves/migrations/wave-3/runs.json",
+      "hooks": {},
+      "outcomes": []
+    },
+    ".chant/op-waves/migrations/wave-3/t1.plan.json": {
+      "planDigest": "sha256:1111111111111111111111111111111111111111111111111111111111111111"
+    },
+    ".chant/op-waves/migrations/wave-3/t2.plan.json": {
+      "planDigest": "sha256:9999999999999999999999999999999999999999999999999999999999999999"
+    },
+    ".chant/op-waves/migrations/wave-3/t3.hooks.json": {
+      "version": 1,
+      "opWaves": "migrations",
+      "op": "migrate",
+      "wave": "prod",
+      "number": 3,
+      "base": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "digest": "jcs1-sha256:106d25f35ee6bc02e9aa253d0b2633a764396833c82e0c5ec5a4ad83a2a85b4e",
+      "approved": true,
+      "runBy": "chant",
+      "runs": [
+        {
+          "target": "t3",
+          "op": "migrate",
+          "plan": ".chant/op-waves/migrations/wave-3/t3.plan.json"
+        }
+      ],
+      "runsFile": ".chant/op-waves/migrations/wave-3/runs.json",
+      "hooks": {},
+      "outcomes": []
+    },
+    ".chant/op-waves/migrations/wave-3/t3.plan.json": {
+      "planDigest": "sha256:3333333333333333333333333333333333333333333333333333333333333333"
+    },
+    ".chant/op-waves/migrations/wave-3.json": {
+      "wave": 3,
+      "name": "prod",
+      "op": "migrations",
+      "gate": "migrations-wave-3",
+      "policy": "always",
+      "approval": "ledger",
+      "policySource": "base",
+      "base": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "digest": "jcs1-sha256:106d25f35ee6bc02e9aa253d0b2633a764396833c82e0c5ec5a4ad83a2a85b4e",
+      "members": [
+        {
+          "member": "t3",
+          "planDigest": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
+          "op": "migrate"
+        },
+        {
+          "member": "t1",
+          "planDigest": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+          "op": "migrate"
+        },
+        {
+          "member": "t2",
+          "planDigest": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
+          "op": "migrate"
+        }
+      ],
+      "status": "approved",
+      "spend": "base",
+      "via": "ledger",
+      "approvedBy": "alice",
+      "approvedAt": "2026-10-10T00:00:00Z",
+      "spentAt": "2026-10-11T00:00:00.000Z"
+    }
+  }
+}

package/src/cli/commands/check-lexicon-plugin.ts

@@ -24,6 +24,7 @@ import { isAbsolute, join, resolve } from "path";
 import { pathToFileURL } from "url";
 import { isLexiconPlugin, type LexiconPlugin } from "../../lexicon";
 import { ensureTypeScriptLoader } from "../../ts-loader";
+import { esModuleNamespace } from "../../module-interop";
 
 export interface LoadedLexicon {
   /** The plugin, when the package exported one. */
@@ -78,7 +79,7 @@ export async function loadLexiconFromDir(dir: string): Promise<LoadedLexicon> {
   let mod: Record<string, unknown>;
   try {
     ensureTypeScriptLoader();
-    mod = (await import(pathToFileURL(entry).href)) as Record<string, unknown>;
+    mod = esModuleNamespace((await import(pathToFileURL(entry).href)) as Record<string, unknown>);
   } catch (error) {
     return { entry, error: `import failed: ${error instanceof Error ? error.message : String(error)}` };
   }

package/src/cli/commands/lint.ts

@@ -34,6 +34,7 @@ import { getProvenance } from "../../provenance";
 import { runLexiconPostSynthChecks } from "./build";
 import { armSandboxPolicyExecution, runProjectPolicies } from "../../lint/policy-sandbox";
 import { ensureTypeScriptLoader } from "../../ts-loader";
+import { esModuleNamespace } from "../../module-interop";
 
 // Import config loader
 import { loadConfig, resolveRulesForFile, resolveConfiguredSeverity, findProjectRoot } from "../../lint/config";
@@ -92,7 +93,7 @@ export async function loadPluginRules(
     let mod: Record<string, unknown>;
     try {
       ensureTypeScriptLoader();
-      mod = await import(resolved);
+      mod = esModuleNamespace(await import(resolved));
     } catch (err) {
       throw new Error(
         `Failed to load plugin "${pluginPath}": ${err instanceof Error ? err.message : String(err)}`,
@@ -595,7 +596,7 @@ async function runOpCheckDiagnostics(
   for (const filePath of opFiles) {
     try {
       ensureTypeScriptLoader();
-      const mod: unknown = await import(filePath);
+      const mod: unknown = esModuleNamespace(await import(filePath));
       const entity = (mod as { default?: unknown }).default;
       if (!entity || typeof entity !== "object") continue;
       const opConfig = (entity as { props?: unknown }).props as { name?: unknown; phases?: unknown } | undefined;

package/src/cli/compiled-cli.e2e.test.ts

@@ -13,7 +13,7 @@
  */
 
 import { execFileSync, spawnSync } from "node:child_process";
-import { mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { mkdirSync, mkdtempSync, readFileSync, rmSync, symlinkSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join, resolve } from "node:path";
 import { afterAll, beforeAll, describe, expect, test } from "vitest";
@@ -24,6 +24,7 @@ const version = (JSON.parse(readFileSync(join(coreRoot, "package.json"), "utf-8"
 
 let scratch: string;
 let project: string;
+let cjsProject: string;
 let waves: string;
 let chant: string;
 let tracer: string;
@@ -87,6 +88,22 @@ beforeAll(() => {
   );
   chant = join(project, "node_modules", ".bin", "chant");
 
+  // The same project with no package.json at all, so nothing above the config
+  // says "type": "module" and tsx compiles chant.config.ts as CommonJS (#3897).
+  cjsProject = join(scratch, "cjs-project");
+  mkdirSync(join(cjsProject, "src"), { recursive: true });
+  symlinkSync(join(project, "node_modules"), join(cjsProject, "node_modules"), "dir");
+  writeFileSync(join(cjsProject, "chant.config.ts"), readFileSync(join(project, "chant.config.ts"), "utf-8"));
+  // The source reaches the lexicon through a module outside src/, so the
+  // fallback scan of src/ imports finds no lexicon: only the config names it.
+  mkdirSync(join(cjsProject, "lib"));
+  writeFileSync(join(cjsProject, "lib", "render.ts"), `export * from "@intentius/chant-lexicon-render";\n`);
+  writeFileSync(
+    join(cjsProject, "src", "infra.ts"),
+    `import { Postgres, Render } from "../lib/render";\n` +
+      `export const db = new Postgres({ name: "e2e-db", plan: "free", version: "16", region: Render.Region });\n`,
+  );
+
   // A waves spec whose plan writes a fixed digest and whose apply does nothing,
   // in a repository with the history `run wave` reads its gate policy from.
   waves = join(scratch, "waves");
@@ -162,4 +179,28 @@ describe("the installed chant CLI (#3878)", () => {
       rmSync(join(project, "src", "made.ts"));
     }
   });
+
+  describe("a chant.config.ts tsx compiles as CommonJS (#3897)", () => {
+    test("build reads the config's lexicons", () => {
+      const r = run(cjsProject, ["build", "src", "-o", "out/render.json"]);
+      expect(r.status, r.stderr).toBe(0);
+      const built = JSON.parse(readFileSync(join(cjsProject, "out", "render.json"), "utf-8")) as Record<string, { body?: { name?: string } }>;
+      expect(built.db?.body?.name).toBe("e2e-db");
+    });
+
+    test("build --sandbox reads the config's lexicons in the child", () => {
+      const r = run(cjsProject, ["build", "src", "--sandbox", "-o", "out/sandbox.json"]);
+      expect(r.status, r.stderr).toBe(0);
+      const built = JSON.parse(readFileSync(join(cjsProject, "out", "sandbox.json"), "utf-8")) as Record<string, { body?: { name?: string } }>;
+      expect(built.db?.body?.name).toBe("e2e-db");
+    });
+
+    test("graph --format ir finds the lexicon's entities", () => {
+      const r = run(cjsProject, ["graph", "src", "--format", "ir"]);
+      expect(r.status, r.stderr).toBe(0);
+      expect(r.stderr).not.toMatch(/could not load the project's lexicons/);
+      const ir = JSON.parse(r.stdout) as { nodes: Array<Record<string, unknown>> };
+      expect(ir.nodes.length).toBeGreaterThan(0);
+    });
+  });
 });

package/src/components/discover.ts

@@ -51,6 +51,7 @@ import { hasDiscoveryMarkerSync } from "../discovery/files";
 import { resolveDiscoveryGlobs } from "../config";
 import { walkDiscovery, workspaceMemberDirs } from "../discovery/walk";
 import { ensureTypeScriptLoader } from "../ts-loader";
+import { esModuleNamespace } from "../module-interop";
 
 /** One discovered component, paired with the file it was exported from. */
 export interface DiscoveredComponent {
@@ -214,7 +215,7 @@ async function importAndCollectComponents(
       // a bare "." path) would otherwise be treated by `import()` as a bare
       // package specifier and fail with "Cannot find package 'x.component.ts'".
       ensureTypeScriptLoader();
-      const exports = await import(pathToFileURL(resolve(filePath)).href);
+      const exports = esModuleNamespace(await import(pathToFileURL(resolve(filePath)).href));
       modules.push({ file: filePath, exports });
     } catch (err) {
       importErrors.push(new DiscoveryError(filePath, err instanceof Error ? err.message : String(err), "import"));