@intentius/chant 0.124.51 → 0.124.54

package/dist/workspace/search-contract.d.ts

@@ -19,7 +19,7 @@ export declare const SEARCH_OUTPUT_SCHEMA_ID = "https://intentius.io/chant/schem
  * Why `chant search` printed no answer. A member's own refusal under
  * `chant workspace search` carries the same code as its reason.
  */
-export declare const SEARCH_ERROR_CODES: readonly ["query-invalid", "usage-invalid", "environment-unknown", "snapshot-unavailable", "build-failed"];
+export declare const SEARCH_ERROR_CODES: readonly ["query-invalid", "usage-invalid", "environment-unknown", "snapshot-unavailable", "build-failed", "index-unavailable"];
 export type SearchErrorCode = (typeof SEARCH_ERROR_CODES)[number];
 /**
  * Why `chant workspace search` printed no answer: the declaration's codes and
@@ -29,13 +29,13 @@ export type SearchErrorCode = (typeof SEARCH_ERROR_CODES)[number];
 export declare const WORKSPACE_SEARCH_ERROR_CODES: readonly ["declaration-missing", "declaration-ambiguous", "declaration-unparseable", "declaration-invalid", "placement-invalid", "reader-too-old", "root-chant-required", "not-a-git-repository", "revision-unknown", "live-at-revision", "snapshot-at-revision", "query-invalid", "usage-invalid"];
 export type WorkspaceSearchErrorCode = (typeof WORKSPACE_SEARCH_ERROR_CODES)[number];
 /** Every `error.code` a `search` document can carry, in either form. */
-export declare const SEARCH_DOCUMENT_ERROR_CODES: ("agent-unknown" | "amend-id-immutable" | "amend-supersede-instead" | "answer-field-unsupported" | "answer-in-steward-turn" | "answer-never-over-mcp" | "answer-not-answered" | "answer-not-candidate" | "answer-point-changed" | "answer-point-unknown" | "answer-points-unreadable" | "asset-drift" | "asset-missing" | "asset-stale" | "box-capability-unbrokered" | "box-credential-declared" | "box-fountain-callback-undeclared" | "box-intent-unconstrained" | "box-intent-unknown" | "box-isolation-collision" | "box-isolation-literal" | "box-none" | "box-several" | "build-failed" | "capability-not-derivable" | "change-out-of-scope" | "change-uncovered" | "chant-config-left" | "chant-dependency" | "chant-in-ci" | "choudoufu-steps-missing" | "ci-branch-route-differs" | "ci-branch-unknown" | "ci-green-undeclared" | "ci-workflow-apply-in-green" | "ci-workflow-green-undeclared" | "ci-workflow-no-components" | "ci-workflow-no-environments" | "ci-workflow-no-pre-merge" | "ci-workflow-pipeline-differs" | "ci-workflow-pipeline-missing" | "ci-workflow-publish-missing" | "ci-workflow-ungated-env" | "command-failed" | "commit-unlinked" | "commit-wrongly-linked" | "composites-no-chant-member" | "composites-no-component" | "composites-none-declared" | "declaration-ambiguous" | "declaration-invalid" | "declaration-missing" | "declaration-not-other" | "declaration-unparseable" | "diagram-render-drift" | "diagram-render-missing" | "diagram-source-missing" | "dir-missing" | "envelope-invalid" | "envelope-unreadable" | "envelope-untrusted" | "environment-invalid" | "environment-unknown" | "environments-component-undeclared" | "environments-ledger-undeclared" | "environments-ledger-unreadable" | "environments-none-declared" | "evidence-payload-type" | "evidence-runner-mismatch" | "evidence-statement-invalid" | "executor-config-unreadable" | "executor-none-declared" | "exit-failed" | "factory-box-missing" | "factory-member-unknown" | "filter-invalid" | "flag-stale" | "flag-work-unknown" | "gate-approval-unbased" | "gates-ledger-unreadable" | "gates-no-gate-ledger" | "gates-no-ledger" | "intent-artifact-unpinned" | "intent-commit-bare" | "intent-commit-join-conflict" | "intent-commit-undecided" | "intent-constraint-coarse" | "intent-constraint-lost" | "intent-decision-contested" | "intent-decision-provisional" | "intent-decision-superseded-live" | "intent-decision-unimplemented" | "intent-evidence-unpinned" | "intent-history-shallow" | "intent-pin-drifted" | "intent-pin-missing" | "intent-pin-stale" | "intent-plugin-failed" | "intent-record-unknown" | "intent-region-invalid" | "intent-region-unconstrained" | "intent-symbol-ambiguous" | "intent-symbol-unknown" | "intent-symbol-unsupported" | "intent-trailer-unverified" | "intent-why-no-decision" | "intent-why-no-run" | "intent-why-run-ambiguous" | "intent-why-uncommitted" | "intent-work-blocked" | "intent-work-open-decided-code" | "ir-version-unsupported" | "kind-invalid" | "kind-not-run" | "kind-probe-failed" | "kind-unreadable" | "lease-held" | "lease-not-held" | "lease-push-rejected" | "lease-race" | "lease-token-mismatch" | "ledger-malformed" | "ledger-unreadable" | "lexicon-has-no-mapping" | "lexicon-not-loaded" | "lexicon-unsupported" | "listing-box-missing" | "listing-cover-invalid" | "listing-member-unknown" | "live-at-revision" | "location-missing" | "lock-invalid" | "manual-step-open" | "member-chant-too-old" | "member-exists" | "member-unknown" | "missing-dir" | "native-missing" | "native-unreadable" | "no-deploy-command" | "no-lexicon" | "no-matches" | "not-a-git-repository" | "output-unreadable" | "patch-path-invalid" | "placement-invalid" | "point-candidates-invalid" | "point-decider-failed" | "point-inputs-invalid" | "point-unknown" | "points-invalid" | "points-undeclared" | "principal-unidentified" | "publish-answer-invalid" | "publish-failed" | "publish-member-unknown" | "publish-none" | "publish-refused" | "publish-unrecorded" | "query-invalid" | "quorum-not-met" | "ratify-quorum-not-met" | "reader-too-old" | "record-closed" | "record-conflict" | "record-id-duplicate" | "record-id-taken" | "record-id-unallocatable" | "record-no-evidence" | "record-not-found" | "record-path-unmatched" | "record-ratified-below-quorum" | "record-remediates-not-closed" | "record-remediates-unknown" | "record-schema-invalid" | "record-seal-mismatch" | "record-sign-failed" | "record-state-not-initial" | "record-supersedes-conflict" | "record-supersedes-pending" | "record-supersedes-unknown" | "record-unattested" | "record-unparseable" | "review-agent" | "review-decider" | "review-duplicate" | "review-note-required" | "review-older-digest" | "review-sign-failed" | "review-unattested" | "review-undigested" | "review-unsupported" | "revision-unknown" | "root-chant-required" | "rotation-first-version" | "rotation-invalid" | "rotation-missing" | "rotation-previous-mismatch" | "rotation-threshold-not-met" | "rotation-threshold-unsatisfiable" | "rotation-unparseable" | "rotation-version-skew" | "run-ended" | "run-exists" | "run-not-ended" | "run-statement-invalid" | "run-statement-mismatch" | "run-statement-signer-mismatch" | "run-unknown" | "runner-exists" | "runner-key-invalid" | "runner-key-is-signer" | "runner-key-unlisted" | "runner-unknown" | "runs-ledger-malformed" | "runs-no-ledger" | "runtimes-config-unreadable" | "runtimes-lexicon-unreadable" | "schema-id-mismatch" | "schema-invalid" | "schema-unreadable" | "seal-missing" | "seal-signature-invalid" | "seal-signer-unlisted" | "seal-unverifiable" | "security-attribution-any" | "security-component-no-sbom" | "security-component-no-verify" | "security-gate-unsigned" | "security-publish-allows-unsigned" | "security-publish-no-provenance" | "security-release-gate-missing" | "security-review-not-required" | "security-runner-start-no-key" | "security-runner-start-no-role" | "security-runner-untrusted" | "security-sbom-disabled" | "security-sbom-unsourced" | "security-signed-since-unset" | "security-signers-missing" | "security-tick-no-key" | "security-trust-unreadable" | "session-not-open" | "session-seal-mismatch" | "session-unknown" | "session-verdict-unknown-record" | "signers-file-missing" | "signers-removed" | "since-rev-unknown" | "since-session-open" | "since-session-unknown" | "snapshot-at-revision" | "snapshot-unavailable" | "source-harvest-not-proposed" | "source-transcript-drift" | "squash-unfollowed" | "steward-runs-unreadable" | "stewards-conflict" | "stewards-unreadable" | "table-unknown" | "trust-config-invalid" | "trust-conflict" | "trust-policy-unreadable" | "unknown-kind" | "usage-invalid" | "wip-branch-other" | "wip-no-branch" | "wip-none" | "wip-policy-none" | "wip-race" | "wip-remote-unknown" | "wip-snapshot-unknown" | "work-acceptance-self-verified" | "work-acceptance-unmet" | "work-closed-without-date" | "work-contract-undecided" | "work-contract-unknown" | "work-criterion-unknown" | "work-done-gap-open" | "work-done-unpinned" | "work-evidence-ops-mismatch" | "work-evidence-ops-missing" | "work-evidence-ops-unfinished" | "work-implements-undecided" | "work-implements-unknown" | "work-item-closed" | "work-item-unknown" | "work-kind-ambiguous" | "work-kind-missing" | "work-needs-cycle" | "work-needs-unknown" | "work-tier-unknown" | "write-input-invalid" | "write-lock-not-held" | "write-lock-timeout" | "write-scope-class-unknown" | "write-scope-kind" | "write-scope-member" | "write-scope-protected" | "write-usage-invalid")[];
+export declare const SEARCH_DOCUMENT_ERROR_CODES: ("agent-unknown" | "amend-id-immutable" | "amend-supersede-instead" | "answer-field-unsupported" | "answer-in-steward-turn" | "answer-never-over-mcp" | "answer-not-answered" | "answer-not-candidate" | "answer-point-changed" | "answer-point-unknown" | "answer-points-unreadable" | "asset-drift" | "asset-missing" | "asset-stale" | "box-capability-unbrokered" | "box-credential-declared" | "box-fountain-callback-undeclared" | "box-intent-unconstrained" | "box-intent-unknown" | "box-isolation-collision" | "box-isolation-literal" | "box-none" | "box-several" | "build-failed" | "capability-not-derivable" | "change-out-of-scope" | "change-uncovered" | "chant-config-left" | "chant-dependency" | "chant-in-ci" | "choudoufu-steps-missing" | "ci-branch-route-differs" | "ci-branch-unknown" | "ci-green-undeclared" | "ci-workflow-apply-in-green" | "ci-workflow-green-undeclared" | "ci-workflow-no-components" | "ci-workflow-no-environments" | "ci-workflow-no-pre-merge" | "ci-workflow-pipeline-differs" | "ci-workflow-pipeline-missing" | "ci-workflow-publish-missing" | "ci-workflow-ungated-env" | "command-failed" | "commit-unlinked" | "commit-wrongly-linked" | "composites-no-chant-member" | "composites-no-component" | "composites-none-declared" | "declaration-ambiguous" | "declaration-invalid" | "declaration-missing" | "declaration-not-other" | "declaration-unparseable" | "diagram-render-drift" | "diagram-render-missing" | "diagram-source-missing" | "dir-missing" | "env-required" | "envelope-invalid" | "envelope-unreadable" | "envelope-untrusted" | "environment-invalid" | "environment-unknown" | "environments-component-undeclared" | "environments-ledger-undeclared" | "environments-ledger-unreadable" | "environments-none-declared" | "evidence-payload-type" | "evidence-runner-mismatch" | "evidence-statement-invalid" | "executor-config-unreadable" | "executor-none-declared" | "exit-failed" | "factory-box-missing" | "factory-member-unknown" | "filter-invalid" | "flag-stale" | "flag-work-unknown" | "gate-approval-unbased" | "gates-ledger-unreadable" | "gates-no-gate-ledger" | "gates-no-ledger" | "index-unavailable" | "instances-each-value" | "instances-form-unread" | "instances-merge" | "instances-module-uncounted" | "instances-over-limit" | "instances-value-unknown" | "intent-artifact-unpinned" | "intent-commit-bare" | "intent-commit-join-conflict" | "intent-commit-undecided" | "intent-constraint-coarse" | "intent-constraint-lost" | "intent-decision-contested" | "intent-decision-provisional" | "intent-decision-superseded-live" | "intent-decision-unimplemented" | "intent-evidence-unpinned" | "intent-history-shallow" | "intent-pin-drifted" | "intent-pin-missing" | "intent-pin-stale" | "intent-plugin-failed" | "intent-record-unknown" | "intent-region-invalid" | "intent-region-unconstrained" | "intent-symbol-ambiguous" | "intent-symbol-unknown" | "intent-symbol-unsupported" | "intent-trailer-unverified" | "intent-why-no-decision" | "intent-why-no-run" | "intent-why-run-ambiguous" | "intent-why-uncommitted" | "intent-work-blocked" | "intent-work-open-decided-code" | "ir-version-unsupported" | "kind-invalid" | "kind-not-run" | "kind-probe-failed" | "kind-unreadable" | "lease-held" | "lease-not-held" | "lease-push-rejected" | "lease-race" | "lease-token-mismatch" | "ledger-malformed" | "ledger-unreadable" | "lexicon-has-no-mapping" | "lexicon-not-loaded" | "lexicon-unsupported" | "listing-box-missing" | "listing-cover-invalid" | "listing-member-unknown" | "live-at-revision" | "location-missing" | "lock-invalid" | "manual-step-open" | "member-chant-too-old" | "member-exists" | "member-required" | "member-unknown" | "missing-dir" | "native-missing" | "native-unreadable" | "no-deploy-command" | "no-drift-read" | "no-lexicon" | "no-matches" | "not-a-git-repository" | "output-unreadable" | "patch-path-invalid" | "placement-invalid" | "point-candidates-invalid" | "point-decider-failed" | "point-inputs-invalid" | "point-unknown" | "points-invalid" | "points-undeclared" | "principal-unidentified" | "publish-answer-invalid" | "publish-failed" | "publish-member-unknown" | "publish-none" | "publish-refused" | "publish-unrecorded" | "query-invalid" | "quorum-not-met" | "ratify-quorum-not-met" | "read-unsupported" | "reader-too-old" | "record-closed" | "record-conflict" | "record-id-duplicate" | "record-id-taken" | "record-id-unallocatable" | "record-no-evidence" | "record-not-found" | "record-path-unmatched" | "record-ratified-below-quorum" | "record-remediates-not-closed" | "record-remediates-unknown" | "record-schema-invalid" | "record-seal-mismatch" | "record-sign-failed" | "record-state-not-initial" | "record-supersedes-conflict" | "record-supersedes-pending" | "record-supersedes-unknown" | "record-unattested" | "record-unparseable" | "resource-unsupported" | "review-agent" | "review-decider" | "review-duplicate" | "review-note-required" | "review-older-digest" | "review-sign-failed" | "review-unattested" | "review-undigested" | "review-unsupported" | "revision-unknown" | "root-chant-required" | "rotation-first-version" | "rotation-invalid" | "rotation-missing" | "rotation-previous-mismatch" | "rotation-threshold-not-met" | "rotation-threshold-unsatisfiable" | "rotation-unparseable" | "rotation-version-skew" | "run-ended" | "run-exists" | "run-not-ended" | "run-statement-invalid" | "run-statement-mismatch" | "run-statement-signer-mismatch" | "run-unknown" | "runner-exists" | "runner-key-invalid" | "runner-key-is-signer" | "runner-key-unlisted" | "runner-unknown" | "runs-ledger-malformed" | "runs-no-ledger" | "runtimes-config-unreadable" | "runtimes-lexicon-unreadable" | "schema-id-mismatch" | "schema-invalid" | "schema-unreadable" | "seal-missing" | "seal-signature-invalid" | "seal-signer-unlisted" | "seal-unverifiable" | "security-attribution-any" | "security-component-no-sbom" | "security-component-no-verify" | "security-gate-unsigned" | "security-publish-allows-unsigned" | "security-publish-no-provenance" | "security-release-gate-missing" | "security-review-not-required" | "security-runner-start-no-key" | "security-runner-start-no-role" | "security-runner-untrusted" | "security-sbom-disabled" | "security-sbom-unsourced" | "security-signed-since-unset" | "security-signers-missing" | "security-tick-no-key" | "security-trust-unreadable" | "session-not-open" | "session-seal-mismatch" | "session-unknown" | "session-verdict-unknown-record" | "signers-file-missing" | "signers-removed" | "since-rev-unknown" | "since-session-open" | "since-session-unknown" | "snapshot-at-revision" | "snapshot-unavailable" | "source-harvest-not-proposed" | "source-transcript-drift" | "squash-unfollowed" | "steward-runs-unreadable" | "stewards-conflict" | "stewards-unreadable" | "table-unknown" | "trust-config-invalid" | "trust-conflict" | "trust-policy-unreadable" | "unknown-kind" | "usage-invalid" | "wip-branch-other" | "wip-no-branch" | "wip-none" | "wip-policy-none" | "wip-race" | "wip-remote-unknown" | "wip-snapshot-unknown" | "work-acceptance-self-verified" | "work-acceptance-unmet" | "work-closed-without-date" | "work-contract-undecided" | "work-contract-unknown" | "work-criterion-unknown" | "work-done-gap-open" | "work-done-unpinned" | "work-evidence-ops-mismatch" | "work-evidence-ops-missing" | "work-evidence-ops-unfinished" | "work-implements-undecided" | "work-implements-unknown" | "work-item-closed" | "work-item-unknown" | "work-kind-ambiguous" | "work-kind-missing" | "work-needs-cycle" | "work-needs-unknown" | "work-tier-unknown" | "write-input-invalid" | "write-lock-not-held" | "write-lock-timeout" | "write-scope-class-unknown" | "write-scope-kind" | "write-scope-member" | "write-scope-protected" | "write-usage-invalid")[];
 /**
  * Why a member of `chant workspace search` has no answer. A member that ran
  * and refused carries its own {@link SEARCH_ERROR_CODES} code; the rest are
  * the per-member codes `workspace graph` uses, and `member-chant-too-old`.
  */
-export declare const SEARCH_MEMBER_REASON_CODES: readonly ["kind-not-run", "dir-missing", "unknown-kind", "kind-probe-failed", "command-failed", "output-unreadable", "member-chant-too-old", "query-invalid", "usage-invalid", "environment-unknown", "snapshot-unavailable", "build-failed"];
+export declare const SEARCH_MEMBER_REASON_CODES: readonly ["kind-not-run", "dir-missing", "unknown-kind", "kind-probe-failed", "command-failed", "output-unreadable", "member-chant-too-old", "query-invalid", "usage-invalid", "environment-unknown", "snapshot-unavailable", "build-failed", "index-unavailable"];
 export type SearchMemberReasonCode = (typeof SEARCH_MEMBER_REASON_CODES)[number];
 /** The head every `search` document opens with. */
 export interface SearchHead {

package/dist/workspace/search-contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search-contract.d.ts","sourceRoot":"","sources":["../../src/workspace/search-contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,8DAA8D;AAC9D,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC,2EAA2E;AAC3E,eAAO,MAAM,uBAAuB,8EAA8E,CAAC;AAEnH;;;GAGG;AACH,eAAO,MAAM,kBAAkB,4GAWW,CAAC;AAC3C,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,qSAcC,CAAC;AAC3C,MAAM,MAAM,wBAAwB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAErF,wEAAwE;AACxE,eAAO,MAAM,2BAA2B,mxOAAqF,CAAC;AAE9H;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,+OASG,CAAC;AAC3C,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjF,mDAAmD;AACnD,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,uBAAuB,CAAC;IACxC,QAAQ,EAAE,OAAO,uBAAuB,CAAC;IACzC,yCAAyC;IACzC,KAAK,EAAE,MAAM,CAAC;CACf;AAED,yGAAyG;AACzG,MAAM,WAAW,aAAc,SAAQ,UAAU;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACzD"}
+{"version":3,"file":"search-contract.d.ts","sourceRoot":"","sources":["../../src/workspace/search-contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,8DAA8D;AAC9D,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC,2EAA2E;AAC3E,eAAO,MAAM,uBAAuB,8EAA8E,CAAC;AAEnH;;;GAGG;AACH,eAAO,MAAM,kBAAkB,iIAaW,CAAC;AAC3C,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,qSAcC,CAAC;AAC3C,MAAM,MAAM,wBAAwB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAErF,wEAAwE;AACxE,eAAO,MAAM,2BAA2B,yiPAAqF,CAAC;AAE9H;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,oQASG,CAAC;AAC3C,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjF,mDAAmD;AACnD,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,uBAAuB,CAAC;IACxC,QAAQ,EAAE,OAAO,uBAAuB,CAAC;IACzC,yCAAyC;IACzC,KAAK,EAAE,MAAM,CAAC;CACf;AAED,yGAAyG;AACzG,MAAM,WAAW,aAAc,SAAQ,UAAU;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACzD"}

package/dist/workspace/search-contract.js

@@ -30,6 +30,8 @@ export const SEARCH_ERROR_CODES = [
     "snapshot-unavailable",
     /** The build, or a build root, failed: the graph would be incomplete. */
     "build-failed",
+    /** --index names no index version the store holds, or one stamped for another scope (#4525). */
+    "index-unavailable",
 ];
 /**
  * Why `chant workspace search` printed no answer: the declaration's codes and

package/dist/workspace/search.schema.json

@@ -112,7 +112,8 @@
                 "enum": [
                   "declared",
                   "live",
-                  "snapshot"
+                  "snapshot",
+                  "index"
                 ]
               },
               "notEvaluated": {
@@ -253,7 +254,8 @@
                 "usage-invalid",
                 "environment-unknown",
                 "snapshot-unavailable",
-                "build-failed"
+                "build-failed",
+                "index-unavailable"
               ]
             },
             "message": {
@@ -289,7 +291,7 @@
       }
     },
     "source": {
-      "description": "Which observation answered. `declared` is the source graph; `live` reads the account now; `snapshot` replays a recorded lifecycle snapshot. In the workspace form the top-level source names the axis asked for, and each member's source names the snapshot commit it replayed.",
+      "description": "Which observation answered. `declared` is the source graph; `live` reads the account now; `snapshot` replays a recorded lifecycle snapshot; `index` answers from an index version in the store (`--index`, #4525). In the workspace form the top-level source names the axis asked for, and each member's source names the snapshot commit it replayed.",
       "type": "object",
       "required": [
         "kind"
@@ -299,9 +301,42 @@
           "enum": [
             "declared",
             "live",
-            "snapshot"
+            "snapshot",
+            "index"
           ]
         },
+        "index": {
+          "type": "string",
+          "description": "`index` only: the index version answered from, as `<scope key>@<version>`."
+        },
+        "scopeKey": {
+          "type": "string",
+          "description": "`index` only: the index's `stamp.scopeKey`, the store path of its source and scope."
+        },
+        "version": {
+          "type": "string",
+          "description": "`index` only: the version name, `<observedAt>-<digest12>`."
+        },
+        "observedAt": {
+          "type": "string",
+          "description": "`index` only: when the read that wrote the index started, ISO UTC."
+        },
+        "completedAt": {
+          "type": "string",
+          "description": "`index` only: when that read's last call returned, when the index records it."
+        },
+        "digest": {
+          "type": "string",
+          "description": "`index` only: the index document's digest."
+        },
+        "by": {
+          "type": "string",
+          "description": "`index` only: the source that wrote the index, with its version when it has one, such as `behold-lister 0.4.0`."
+        },
+        "project": {
+          "type": "boolean",
+          "description": "`index` only: false when there was no project, so every row is an indexed node; true when the rows are declared and each carries a `join`."
+        },
         "env": {
           "type": "string",
           "description": "The environment, for `live` and `snapshot`."
@@ -389,6 +424,68 @@
             "$ref": "#/$defs/path"
           },
           "description": "One per positive edge term and cap: term the node matched through. Empty when the query has none."
+        },
+        "join": {
+          "$ref": "#/$defs/indexJoin"
+        }
+      }
+    },
+    "indexJoin": {
+      "description": "`--index` with a project (#4525): how the declared row joined to the index version, through its lexicon's index match. `bound` names the indexed node; `absent` means the index listed the type and location and holds no such resource; `not-observed` means the index did not look, with the reason; `no-binding` means the declaration spells no identity to match by; `ambiguous` names every candidate and binds none.",
+      "type": "object",
+      "required": [
+        "verdict"
+      ],
+      "properties": {
+        "verdict": {
+          "enum": [
+            "bound",
+            "absent",
+            "not-observed",
+            "no-binding",
+            "ambiguous"
+          ]
+        },
+        "listedType": {
+          "type": "string",
+          "description": "The inventory type the declaration's identity belongs to."
+        },
+        "identifier": {
+          "type": "string",
+          "description": "The identifier the declaration spells, as the index's nativeId spells it."
+        },
+        "location": {
+          "type": "string",
+          "description": "The location the identity was looked for in."
+        },
+        "node": {
+          "type": "string",
+          "description": "`bound`: the indexed node's id."
+        },
+        "nativeId": {
+          "type": "string",
+          "description": "`bound`: the indexed node's native id."
+        },
+        "reason": {
+          "enum": [
+            "read-failed",
+            "no-credentials",
+            "no-binding",
+            "unsupported-kind",
+            "filtered",
+            "not-reached"
+          ],
+          "description": "`not-observed`: why the index has no verdict for the row."
+        },
+        "candidates": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "`ambiguous`: every indexed node carrying the identity."
+        },
+        "detail": {
+          "type": "string"
         }
       }
     },
@@ -750,7 +847,8 @@
                     "usage-invalid",
                     "environment-unknown",
                     "snapshot-unavailable",
-                    "build-failed"
+                    "build-failed",
+                    "index-unavailable"
                   ],
                   "description": "A member that ran and refused carries its own search refusal code. `member-chant-too-old` is a member whose chant prints no search document of the contract, or, for a query with a capability term, no capability view (#4378)."
                 },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant",
-  "version": "0.124.51",
+  "version": "0.124.54",
   "description": "Declarative infrastructure-as-code toolkit — TypeScript on Node.js",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",
@@ -51,6 +51,7 @@
       "default": "./src/cli/index.ts"
     },
     "./workspace/*.schema.json": "./src/workspace/*.schema.json",
+    "./capabilities/templates.json": "./src/capabilities/templates.json",
     "./notify.schema.json": "./src/notify.schema.json",
     "./health.schema.json": "./src/health.schema.json",
     "./workspace/factory-rules": {
@@ -142,9 +143,21 @@
     "@cdktn/hcl2json": "^0.24.0"
   },
   "peerDependencies": {
+    "@aws-sdk/credential-providers": "^3.0.0",
+    "@azure/identity": "^4.0.0",
+    "google-auth-library": "^9.0.0 || ^10.0.0",
     "vitest": ">=2"
   },
   "peerDependenciesMeta": {
+    "@aws-sdk/credential-providers": {
+      "optional": true
+    },
+    "@azure/identity": {
+      "optional": true
+    },
+    "google-auth-library": {
+      "optional": true
+    },
     "vitest": {
       "optional": true
     }

package/src/__fixtures__/drift-record/README.md

@@ -0,0 +1,58 @@
+# Drift-record adapter fixtures (#4451)
+
+Every fixture here is recorded from a run (#4475, 2026-10-26). None is hand-written.
+
+## The chant reads
+
+Recorded on the floci emulator (`ghcr.io/lex00/floci@sha256:5ec92ae8046445d62c0009590dd09f04560886e5a5ef31248cb3fcc09b2961ec`) with chant 0.124.34 from INTENTIUS/chant `integration/engine-ship` at
+9ae806b69 plus this change, running from source. The project is a small chant AWS project (a bucket and its policy,
+a queue, an IAM role tagged `api-token-owner`, two security groups and three topics) deployed with
+`chant run --components` (cfn-deploy) into stack `recy`, plus four one-resource components (`api`, `jobs`, `edge`,
+`docs`) on their own stacks. The sequence:
+
+1. deploy `demo-infra`, `api` and `jobs` with release records, `edge` with `--no-release-record`, `docs` never;
+2. `chant lifecycle snapshot recy --deep`;
+3. add the two security groups and `alertsTopic` and deploy `demo-infra` again;
+4. out of band through floci's API: delete stack `recy-jobs`, retag the role, delete the queue;
+5. change the source without deploying: drop `strayTopic`, add `cacheTopic`, change `webSg`'s description;
+6. read.
+
+- `lifecycle-diff-live.json`: `chant lifecycle diff recy --live --json`, the whole document as `chant workspace
+  drift` reads it. The one edit: the scratch project's absolute path in `reconcile[].sourceFile` is `<project>/`.
+- `live-diff.json`: that document's `lexicons.aws.resources` (a `LiveDiffResult`), unchanged.
+- `deep-diff.json`: its `lexicons.aws.deep` (a `DeepDiffResult`), unchanged.
+- `component-status.json`: `chant components status recy --live --json`.
+- `component-status-ledger.json`: `chant components status recy --json` (no `--live`).
+
+What the recording showed beside the earlier hand-written files:
+
+- `components status --json` prints a bare array of rows, not `{ env, rows, malformedLedgerLines }`.
+  `chant workspace drift` already read it as an array; the test now does too.
+- `LiveDiffResult` also carries `queried` and `definitions`.
+- A redeploy since the snapshot shows as thin drift on `lastUpdated`, `status` and, for a bucket policy,
+  `physicalId`. An entity dropped from the source while its stack still holds it reads as `disappeared`, not
+  `orphan`: the stack carries no chant ownership marker, so the read looks only at declared names.
+- floci's Cloud Control `GetResource` returns identity properties only, so most declared deep properties read
+  `absent` (declared value, no live value). A source change after deploy gives a `changed` property
+  (`webSg`'s `GroupDescription`). The deep read also lists the security groups under `unclaimed`.
+- The deep read addresses keyed array elements by key (`Tags[#api-token-owner].Value`). The drift record did not
+  read that form as a key, so a tag named like a token kept its value. `attributePathKeys` now reads `[#key]` as a
+  key, and those paths redact.
+- A queue deleted through SQS still reads as present: the read lists the stack's resources, and the stack still
+  names it.
+
+What floci cannot produce, kept as constructed inputs inside `drift-record.test.ts` (not as files): a runtime
+child, an orphan, an unchanged thin entity, a thin attribute change beyond timestamps, a failed deep read, a deep
+unchanged entity, a component whose live digest differs from its record, and missing credentials.
+
+## The choudoufu stream
+
+`choudoufu-resource.ndjson` and `choudoufu-cone.ndjson` are recorded (#4475, 2026-10-26): choudoufu
+v0.31.1-local.c4f468a235, a build of INTENTIUS/choudoufu `integration/engine-ship` at c4f468a235, ran
+choudoufu's own `live/e2e/estate-block` fixture (estate renamed `rec4475-block`) on the floci emulator
+(`ghcr.io/lex00/floci@sha256:5ec92ae8046445d62c0009590dd09f04560886e5a5ef31248cb3fcc09b2961ec`) after an apply.
+`choudoufu-resource.ndjson` is `live-plan -resource=aws_cloudwatch_log_group.app` after the log group's retention
+was changed through floci's API; `choudoufu-cone.ndjson` is `live-plan -resource=aws_subnet.app`, whose cone holds
+the VPC. What the recording showed beside the earlier hand-written stream: records carry no `resourceType`, a
+drifted record names its paths with no values, neither the start nor the settle line has an `at`, and the settle's
+`reads` adds `tagIndexCalls`.

package/src/__fixtures__/drift-record/choudoufu-cone.ndjson

@@ -0,0 +1,4 @@
+{"type":"drift-start","drift":"v1","member":"rec4475-block","engine":"choudoufu","read":"plan","resource":"aws_subnet.app","expected":["aws_subnet.app","aws_vpc.main"]}
+{"type":"drift-record","member":"rec4475-block","engine":"choudoufu","address":"aws_vpc.main","node":null,"observedAt":"2026-10-26T05:42:52Z","read":"plan","status":"in-sync","ownership":{"verdict":"owned","by":"marker"},"evidence":{"tool":"choudoufu","version":"v0.31.1-local.c4f468a235","command":"live-plan -resource=aws_subnet.app","engineCode":"noop"}}
+{"type":"drift-record","member":"rec4475-block","engine":"choudoufu","address":"aws_subnet.app","node":null,"observedAt":"2026-10-26T05:42:52Z","read":"plan","status":"in-sync","ownership":{"verdict":"owned","by":"marker"},"evidence":{"tool":"choudoufu","version":"v0.31.1-local.c4f468a235","command":"live-plan -resource=aws_subnet.app","engineCode":"noop"}}
+{"type":"drift-settle","drift":"v1","member":"rec4475-block","engine":"choudoufu","read":"plan","counts":{"in-sync":2},"reads":{"recordsRead":18,"recordKeys":2,"recordListCalls":0,"sweepCalls":0,"scanTypes":[],"scanListCalls":0,"tagIndexCalls":0}}

package/src/__fixtures__/drift-record/choudoufu-resource.ndjson

@@ -0,0 +1,3 @@
+{"type":"drift-start","drift":"v1","member":"rec4475-block","engine":"choudoufu","read":"plan","resource":"aws_cloudwatch_log_group.app","expected":["aws_cloudwatch_log_group.app"]}
+{"type":"drift-record","member":"rec4475-block","engine":"choudoufu","address":"aws_cloudwatch_log_group.app","node":null,"observedAt":"2026-10-26T05:42:45Z","read":"plan","status":"drifted","attributes":[{"path":"retention_in_days"}],"ownership":{"verdict":"owned","by":"derived"},"evidence":{"tool":"choudoufu","version":"v0.31.1-local.c4f468a235","command":"live-plan -resource=aws_cloudwatch_log_group.app","engineCode":"update"}}
+{"type":"drift-settle","drift":"v1","member":"rec4475-block","engine":"choudoufu","read":"plan","counts":{"drifted":1},"reads":{"recordsRead":6,"recordKeys":1,"recordListCalls":0,"sweepCalls":0,"scanTypes":[],"scanListCalls":0,"tagIndexCalls":0}}

package/src/__fixtures__/drift-record/component-status-ledger.json

@@ -0,0 +1,65 @@
+[
+  {
+    "component": "api",
+    "env": "recy",
+    "recorded": {
+      "digest": "jcs1-sha256:7a8b3f47cd6c729c15efb2324f7b9ebc26037752155832e60ca2b5770f78c835",
+      "gitSha": "baaa6bb09bc4ff7fe22e559af62e1d32256b7392",
+      "runId": "local-1792996303605",
+      "timestamp": "2026-10-26T06:31:45.462Z",
+      "actor": "alex"
+    },
+    "build": null,
+    "componentBom": null,
+    "reconciliation": "unknown",
+    "detail": "recorded; live status not queried (pass --live to reconcile)"
+  },
+  {
+    "component": "demo-infra",
+    "env": "recy",
+    "recorded": {
+      "digest": "jcs1-sha256:32a05af0532a86b9ec5b8693f6c7a5b5e1ff8c41c65fb1cc1a9bf5d3064a2a98",
+      "gitSha": "e2014e95f134d2273a2b5b7c56bf085b36ddae6a",
+      "runId": "local-1792996318960",
+      "timestamp": "2026-10-26T06:32:00.401Z",
+      "actor": "alex"
+    },
+    "build": null,
+    "componentBom": null,
+    "reconciliation": "unknown",
+    "detail": "recorded; live status not queried (pass --live to reconcile)"
+  },
+  {
+    "component": "docs",
+    "env": "recy",
+    "recorded": null,
+    "build": null,
+    "componentBom": null,
+    "reconciliation": "unrecorded",
+    "detail": "no release record found"
+  },
+  {
+    "component": "edge",
+    "env": "recy",
+    "recorded": null,
+    "build": null,
+    "componentBom": null,
+    "reconciliation": "unrecorded",
+    "detail": "no release record found"
+  },
+  {
+    "component": "jobs",
+    "env": "recy",
+    "recorded": {
+      "digest": "jcs1-sha256:829ac8939f9b487e82c1488dc31f5d1fe832ba7d292f28bfad1ca48a60e0c4dd",
+      "gitSha": "baaa6bb09bc4ff7fe22e559af62e1d32256b7392",
+      "runId": "local-1792996303605",
+      "timestamp": "2026-10-26T06:31:45.723Z",
+      "actor": "alex"
+    },
+    "build": null,
+    "componentBom": null,
+    "reconciliation": "unknown",
+    "detail": "recorded; live status not queried (pass --live to reconcile)"
+  }
+]

package/src/__fixtures__/drift-record/component-status.json

@@ -0,0 +1,91 @@
+[
+  {
+    "component": "api",
+    "env": "recy",
+    "recorded": {
+      "digest": "jcs1-sha256:7a8b3f47cd6c729c15efb2324f7b9ebc26037752155832e60ca2b5770f78c835",
+      "gitSha": "baaa6bb09bc4ff7fe22e559af62e1d32256b7392",
+      "runId": "local-1792996303605",
+      "timestamp": "2026-10-26T06:31:45.462Z",
+      "actor": "alex"
+    },
+    "build": null,
+    "componentBom": null,
+    "reconciliation": "reconciled",
+    "detail": "recorded 2026-10-26T06:31:45.462Z (digest jcs1-sha256:7a8b3f47cd6c729c15efb2324f7b9ebc26037752155832e60ca2b5770f78c835), live and consistent",
+    "live": true,
+    "stack": {
+      "name": "recy-api",
+      "status": "CREATE_COMPLETE",
+      "healthy": true
+    }
+  },
+  {
+    "component": "demo-infra",
+    "env": "recy",
+    "recorded": {
+      "digest": "jcs1-sha256:32a05af0532a86b9ec5b8693f6c7a5b5e1ff8c41c65fb1cc1a9bf5d3064a2a98",
+      "gitSha": "e2014e95f134d2273a2b5b7c56bf085b36ddae6a",
+      "runId": "local-1792996318960",
+      "timestamp": "2026-10-26T06:32:00.401Z",
+      "actor": "alex"
+    },
+    "build": null,
+    "componentBom": null,
+    "reconciliation": "reconciled",
+    "detail": "recorded 2026-10-26T06:32:00.401Z (digest jcs1-sha256:32a05af0532a86b9ec5b8693f6c7a5b5e1ff8c41c65fb1cc1a9bf5d3064a2a98), live and consistent",
+    "live": true,
+    "stack": {
+      "name": "recy",
+      "status": "UPDATE_COMPLETE",
+      "healthy": true
+    }
+  },
+  {
+    "component": "docs",
+    "env": "recy",
+    "recorded": null,
+    "build": null,
+    "componentBom": null,
+    "reconciliation": "unrecorded",
+    "detail": "no release record and nothing observed live",
+    "live": false,
+    "stack": {
+      "name": "recy-docs"
+    }
+  },
+  {
+    "component": "edge",
+    "env": "recy",
+    "recorded": null,
+    "build": null,
+    "componentBom": null,
+    "reconciliation": "unrecorded",
+    "detail": "live and chant-owned, but no release record exists \u2014 deployed outside the recorded path",
+    "live": true,
+    "stack": {
+      "name": "recy-edge",
+      "status": "CREATE_COMPLETE",
+      "healthy": true
+    }
+  },
+  {
+    "component": "jobs",
+    "env": "recy",
+    "recorded": {
+      "digest": "jcs1-sha256:829ac8939f9b487e82c1488dc31f5d1fe832ba7d292f28bfad1ca48a60e0c4dd",
+      "gitSha": "baaa6bb09bc4ff7fe22e559af62e1d32256b7392",
+      "runId": "local-1792996303605",
+      "timestamp": "2026-10-26T06:31:45.723Z",
+      "actor": "alex"
+    },
+    "build": null,
+    "componentBom": null,
+    "reconciliation": "stale",
+    "detail": "recorded 2026-10-26T06:31:45.723Z (digest jcs1-sha256:829ac8939f9b487e82c1488dc31f5d1fe832ba7d292f28bfad1ca48a60e0c4dd), but nothing observed live now",
+    "live": false,
+    "stack": {
+      "name": "recy-jobs"
+    }
+  }
+]