@intentius/chant 0.13.1 → 0.15.1

package/dist/lifecycle/release-ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-ledger.d.ts","sourceRoot":"","sources":["../../src/lifecycle/release-ledger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAKH;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,4FAA4F;IAC5F,OAAO,EAAE,CAAC,CAAC;IACX,6FAA6F;IAC7F,SAAS,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;;;OAOG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,iJAAiJ;IACjJ,KAAK,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,KAAK,EAAE,MAAM,CAAC;IACd,gOAAgO;IAChO,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAaD,4KAA4K;AAC5K,qBAAa,yBAA0B,SAAQ,KAAK;aACtB,OAAO,EAAE,MAAM,EAAE;gBAAjB,OAAO,EAAE,MAAM,EAAE;CAI9C;AAED,yFAAyF;AACzF,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,MAAM,EAAE,CAO9E;AAED,gIAAgI;AAChI,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;AAEhE;;;;;;;;;GASG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,kBAAkB,EACzB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,CAAC,CAQpD;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC;IAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAiB1D;AAED,4EAA4E;AAC5E,wBAAsB,uBAAuB,CAAC,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAExF;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CASvF;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,aAAa,EAAE,CAE1F"}

package/dist/lifecycle/status.d.ts

@@ -0,0 +1,150 @@
+/**
+ * Status surface — reconciles the release ledger against live truth (#568,
+ * epic #551 "Build & deploy observability").
+ *
+ * Two ledgers, joined by one key. What's been built lives in the
+ * content-addressed `BuildArchive` (../components/verbs/build-archive.ts,
+ * ./build-ledger.ts). What we *recorded* deploying lives in the release
+ * ledger (./release-ledger.ts). What's *actually running* is live truth:
+ * ownership markers (../ownership.ts) plus `lifecycle diff --live`
+ * (./live-diff.ts). This module is the join: for each component/env, line up
+ * the latest recorded release against whatever live evidence is available,
+ * and flag the four things that matter —
+ *
+ *  - **unrecorded** — something is live/owned but no release record exists
+ *    for it. Someone (or some pipeline) deployed outside the recorded path.
+ *  - **stale** — a release record exists but nothing live corresponds to it
+ *    anymore (the component disappeared from observation).
+ *  - **drifted** — the environment's live/owned resources don't confirm the
+ *    recorded digest one way or the other from this join alone (recorded,
+ *    but live identity can't be read back to a digest) — surfaced as a
+ *    lower-confidence signal rather than silently treated as "reconciled".
+ *  - **reconciled** — a release record exists and live evidence (via
+ *    ownership) confirms the component is present and owned by chant.
+ *
+ * This is deliberately a light-touch reconciliation: chant's lexicons report
+ * resource-level status (`ResourceMetadata`), not "the digest currently
+ * running" (most lexicons have no notion of image digest at all — a
+ * CloudFormation stack doesn't expose "the ECS task's image digest" through
+ * `describeResources`). So the live axis here is presence/ownership, not a
+ * digest re-derivation; digest-level truth is what the *release ledger*
+ * itself provides, and cross-environment digest comparison
+ * (`buildIsInBothEnvs`) is the query the epic actually asks for ("which
+ * build is in prod, and is it the one tested in staging").
+ */
+import type { ChangeSet, ChangeAction } from "./change-set.js";
+import { type ReleaseRecord } from "./release-ledger.js";
+import type { BuildLedgerEntry, ComponentBomSummary } from "./build-ledger.js";
+/** One row of `chant components status [env]` — the per-component join of recorded vs live. */
+export interface ComponentStatusRow {
+    component: string;
+    env: string;
+    /** The latest recorded release for this component/env, if any. */
+    recorded?: ReleaseRecord;
+    /** Build-ledger detail for the recorded digest, when discoverable (referrers, manifest digest, this artifact's own reproducibility — #614). */
+    build?: BuildLedgerEntry;
+    /**
+     * Component-level BOM aggregation summary (#614,
+     * ../components/verbs/component-bom.ts), when the recorded digest's build
+     * archive manifest is available (`opts.componentBomByDigest`). Reports
+     * every leaf BOM (software SBOM + IaC config-BOM) the component's archive
+     * carries and whether they compose 1:1 or as a real multi-artifact
+     * assembly — independent of `build`/`buildsByDigest` (which stays scoped
+     * to image entries), since a config-only/infra component with no image
+     * still has a component BOM to report.
+     */
+    componentBom?: ComponentBomSummary;
+    /** Live reconciliation verdict for this row. */
+    reconciliation: "reconciled" | "unrecorded" | "stale" | "drifted" | "unknown";
+    /** Human-readable detail backing the verdict. */
+    detail: string;
+}
+export interface ComponentStatusResult {
+    env: string;
+    rows: ComponentStatusRow[];
+    /** Count of malformed ledger lines skipped (surfaced so a corrupted ledger is never silently invisible). */
+    malformedLedgerLines: number;
+}
+/**
+ * Live evidence for one component, distilled from a `ChangeSet` entry
+ * (./change-set.ts) — the same read-only classification `lifecycle plan`
+ * already computes from ownership + `diffLive`. `chant components status`
+ * doesn't recompute live/ownership logic; it reuses `buildChangeSet`'s
+ * output, so "unrecorded deploy" and "drift" both key off the one
+ * ownership-aware classification chant already trusts.
+ */
+export interface LiveComponentEvidence {
+    /** True if this component name was observed live at all (declared+live, or orphan+live). */
+    live: boolean;
+    /** The `ChangeSet` action chant's existing plan logic assigned, when the component maps to a tracked entity/resource name. */
+    action?: ChangeAction;
+    /** Ownership verdict, when known. */
+    ownership?: "owned" | "foreign" | "unknown";
+}
+/**
+ * Component -> live entity/resource name(s) it owns (#598). Mirrors
+ * `Component.liveNames` (../components/component.ts) without importing it —
+ * this module stays decoupled from the typed authoring form, since a
+ * hand-written JSON component or a future non-chant frontend can supply the
+ * same mapping without going through `Component` at all. A component absent
+ * from this map, or mapped to `undefined`/an empty array, falls back to its
+ * own name as the sole live name — the original name == entity join.
+ */
+export type LiveNameMapping = Map<string, string[] | undefined>;
+/** Resolve the live entity/resource name(s) a component owns: its explicit mapping, or `[component]` when none is given. */
+export declare function resolveLiveNames(component: string, mapping?: LiveNameMapping): string[];
+/**
+ * Build a `component -> live evidence` map from a `ChangeSet`. Components and
+ * chant entities are different namespaces (a component's `name` need not
+ * equal any single lexicon entity name), so callers that want live
+ * reconciliation for a component whose live name(s) differ from its own name
+ * pass `nameMapping` (typically projected from `Component.liveNames`, see
+ * ../components/component.ts) — e.g. `new Map([["search-svc",
+ * ["search-service-v2"]]])`. Without a mapping (or for a component with no
+ * entry in it), the component's own name is used as its sole live name — the
+ * identity-keyed join that was this function's only behavior before #598,
+ * preserved here as the fallback so existing callers see no change.
+ */
+export declare function liveEvidenceFromChangeSet(cs: ChangeSet, nameMapping?: LiveNameMapping): Map<string, LiveComponentEvidence>;
+/**
+ * Reconcile the release ledger against live evidence for one environment.
+ * Pure — no I/O. Callers assemble `records` (./release-ledger.ts's
+ * `readReleaseLedger`), `liveEvidence` (from a `ChangeSet` via
+ * `liveEvidenceFromChangeSet`, or `undefined` when `--live` wasn't
+ * requested), `builds` (a `component -> BuildLedgerEntry` lookup keyed by
+ * digest, from ./build-ledger.ts), and `componentBomByDigest` (#614, a
+ * `digest -> ComponentBomSummary` lookup, also from ./build-ledger.ts) ahead
+ * of time.
+ */
+export declare function reconcileStatus(env: string, records: ReleaseRecord[], opts?: {
+    liveEvidence?: Map<string, LiveComponentEvidence>;
+    /** Build-ledger detail keyed by digest, when available. */
+    buildsByDigest?: Map<string, BuildLedgerEntry>;
+    /** Component-level BOM aggregation summary keyed by digest, when available (#614). Independent of `buildsByDigest` — a config-only/infra component with no image entry still has a component BOM to report. */
+    componentBomByDigest?: Map<string, ComponentBomSummary>;
+    /** Component names known to exist (from `discoverComponents`) but with no release record at all — still reported as `unrecorded` when live evidence says they're running. */
+    allComponents?: string[];
+}): ComponentStatusRow[];
+/**
+ * Answer "which build is in `envA`, and is it the one tested in `envB`" —
+ * the single-query comparison the epic names explicitly — for one component
+ * across two environments' release ledgers.
+ */
+export interface CrossEnvComparison {
+    component: string;
+    envA: string;
+    envB: string;
+    digestA?: string;
+    digestB?: string;
+    /** True only when both envs have a recorded digest and they match. */
+    same: boolean;
+}
+/** Compare the latest recorded digest for `component` between two environments' release records. */
+export declare function compareAcrossEnvironments(component: string, envA: {
+    name: string;
+    records: ReleaseRecord[];
+}, envB: {
+    name: string;
+    records: ReleaseRecord[];
+}): CrossEnvComparison;
+//# sourceMappingURL=status.d.ts.map

package/dist/lifecycle/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/lifecycle/status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE5E,+FAA+F;AAC/F,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,kEAAkE;IAClE,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,+IAA+I;IAC/I,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,gDAAgD;IAChD,cAAc,EAAE,YAAY,GAAG,YAAY,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;IAC9E,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,kBAAkB,EAAE,CAAC;IAC3B,4GAA4G;IAC5G,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,qBAAqB;IACpC,4FAA4F;IAC5F,IAAI,EAAE,OAAO,CAAC;IACd,8HAA8H;IAC9H,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,qCAAqC;IACrC,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;CAC7C;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,eAAe,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;AAEhE,4HAA4H;AAC5H,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,MAAM,EAAE,CAGvF;AA2BD;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CACvC,EAAE,EAAE,SAAS,EACb,WAAW,CAAC,EAAE,eAAe,GAC5B,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,CA+BpC;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,aAAa,EAAE,EACxB,IAAI,CAAC,EAAE;IACL,YAAY,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IAClD,2DAA2D;IAC3D,cAAc,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC/C,+MAA+M;IAC/M,oBAAoB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACxD,6KAA6K;IAC7K,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B,GACA,kBAAkB,EAAE,CA4CtB;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,IAAI,EAAE,OAAO,CAAC;CACf;AAED,oGAAoG;AACpG,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,aAAa,EAAE,CAAA;CAAE,EAChD,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,aAAa,EAAE,CAAA;CAAE,GAC/C,kBAAkB,CAWpB"}

package/dist/lint/component-checks.d.ts

@@ -0,0 +1,95 @@
+/**
+ * Component composition checks — the COMP* rule family (#562, epic #551).
+ *
+ * COR/EVL rules (./rule.ts, ./engine.ts) check one `ts.SourceFile`'s AST in
+ * isolation, synchronously — no execution, no cross-file knowledge. A COMP*
+ * rule cannot work that way: "publishes but never applies", "`imageRef`
+ * points at a nonexistent phase", and "identical composition repeated across
+ * components" are all properties of the *discovered component graph*, which
+ * only exists after `*.component.ts` files are actually imported (mirroring
+ * `../components/discover.ts`'s `discoverComponents`, itself async for the
+ * same reason `../discovery/index.ts`'s `discover()` is).
+ *
+ * Rather than stretch `LintRule.check(context)` (sync, single-file, AST-only)
+ * to cover this, COMP* rules follow the precedent chant already has for
+ * "check something that needs real, resolved, whole-project data":
+ * `./post-synth.ts`'s `PostSynthCheck`/`PostSynthContext`/`runPostSynthChecks`,
+ * which wraps a real (async) build result for a sync `check(ctx)` call. This
+ * module is that same shape, one layer earlier in the pipeline — over the
+ * discovered `Component` graph instead of serialized resource output — so
+ * `chant lint` (not just `chant build`) can run it. See
+ * ../components/discover.ts's own docstring for why `Component` gets a
+ * parallel, purpose-built convention rather than reusing `Declarable`'s.
+ */
+import type { Component } from "../components/component.js";
+import type { DiscoveredComponent } from "../components/discover.js";
+import type { RollbackPolicy } from "../components/capability.js";
+import type { Severity } from "./rule.js";
+/** One discovered component, keyed by its declared name, with the file it came from. */
+export interface ComponentCheckEntry {
+    component: Component;
+    filePath: string;
+}
+/** Context handed to a `ComponentCheck` — the whole discovered component graph for one project. */
+export interface ComponentCheckContext {
+    /** Every discovered component, keyed by `component.name`. */
+    components: Map<string, ComponentCheckEntry>;
+    /**
+     * Every capability `kind` registered for this project — core's starter set
+     * plus whatever the active lexicons contribute (e.g. `cfn-deploy` when
+     * `lexicons: ["aws"]`). Supplied by the `chant lint` CLI, which builds the
+     * registry from the project's config; undefined when a check runs without a
+     * resolved registry (e.g. a direct unit test), in which case a rule should
+     * fall back to core's starter set. Rules that key off "is this a known verb"
+     * (e.g. COMP005) read this rather than hard-coding a verb list.
+     */
+    knownKinds?: ReadonlySet<string>;
+    /**
+     * Each registered verb's rollback disposition (`native`/`none-by-design`/
+     * `needs-opt-out`), derived from the project's capability registry the same
+     * way `knownKinds` is. Read by COMP003 instead of a hard-coded verb list;
+     * undefined when no registry was resolved (a check then treats every kind as
+     * `none-by-design`, i.e. flags nothing).
+     */
+    rollbackPolicies?: ReadonlyMap<string, RollbackPolicy>;
+}
+/** A diagnostic from a component composition check. Shaped like `PostSynthDiagnostic`, plus a `file` so it can be merged into `LintDiagnostic`s and reported per-file like every other lint diagnostic. */
+export interface ComponentCheckDiagnostic {
+    /** ID of the check that produced this diagnostic (e.g. "COMP001"). */
+    checkId: string;
+    severity: Severity;
+    message: string;
+    /** File the discovered component was declared in — where the diagnostic is reported. */
+    file: string;
+    /** The component name this diagnostic concerns. */
+    component: string;
+}
+/** A composition-level lint check over the whole discovered component graph. */
+export interface ComponentCheck {
+    /** Unique identifier, e.g. "COMP001". */
+    id: string;
+    description: string;
+    severity: Severity;
+    category: "correctness" | "style" | "performance" | "security";
+    /** Execute the check and return diagnostics. */
+    check(ctx: ComponentCheckContext): ComponentCheckDiagnostic[];
+}
+/**
+ * Discover every component under `path` and run every `ComponentCheck`
+ * against the resulting graph. Mirrors `runPostSynthChecks`'s shape
+ * (async discovery/build once, then every check runs sync over the result),
+ * except the input is `discoverComponents`'s result rather than a build's
+ * serialized output.
+ *
+ * Discovery errors (e.g. a duplicate component name, a `*.component.ts` file
+ * that throws on import) are surfaced as a single synthetic diagnostic per
+ * error under the pseudo-check id "COMP000" rather than silently dropped —
+ * matching how `discoverComponents`'s caller (`../components/cli-support.ts`)
+ * always surfaces `result.errors` rather than ignoring them.
+ */
+export declare function runComponentChecks(path: string, checks: ComponentCheck[], registryContext?: Pick<ComponentCheckContext, "knownKinds" | "rollbackPolicies">): Promise<ComponentCheckDiagnostic[]>;
+/** Structural type guard, mirroring `isPostSynthCheck` — used by rule discovery/registry code. */
+export declare function isComponentCheck(value: unknown): value is ComponentCheck;
+/** Re-exported for rule modules that need the discovered shape without importing `../components/discover` directly. */
+export type { DiscoveredComponent };
+//# sourceMappingURL=component-checks.d.ts.map

package/dist/lint/component-checks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"component-checks.d.ts","sourceRoot":"","sources":["../../src/lint/component-checks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAElE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAEvC,wFAAwF;AACxF,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,mGAAmG;AACnG,MAAM,WAAW,qBAAqB;IACpC,6DAA6D;IAC7D,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC7C;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CACxD;AAED,2MAA2M;AAC3M,MAAM,WAAW,wBAAwB;IACvC,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,wFAAwF;IACxF,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,gFAAgF;AAChF,MAAM,WAAW,cAAc;IAC7B,yCAAyC;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,aAAa,GAAG,OAAO,GAAG,aAAa,GAAG,UAAU,CAAC;IAC/D,gDAAgD;IAChD,KAAK,CAAC,GAAG,EAAE,qBAAqB,GAAG,wBAAwB,EAAE,CAAC;CAC/D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,cAAc,EAAE,EACxB,eAAe,CAAC,EAAE,IAAI,CAAC,qBAAqB,EAAE,YAAY,GAAG,kBAAkB,CAAC,GAC/E,OAAO,CAAC,wBAAwB,EAAE,CAAC,CA+BrC;AAED,kGAAkG;AAClG,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAUxE;AAED,uHAAuH;AACvH,YAAY,EAAE,mBAAmB,EAAE,CAAC"}

package/dist/lint/engine.d.ts

@@ -10,6 +10,29 @@ export interface LintRunResult {
         reason?: string;
     }>;
 }
+/**
+ * Represents a disable directive found in source code comments
+ */
+export interface DisableDirective {
+    /** Line number where the directive appears (1-based) */
+    line: number;
+    /** Type of directive */
+    type: "file" | "line" | "next-line";
+    /** Specific rule IDs to disable, or undefined for all rules */
+    ruleIds?: string[];
+    /** Optional reason for the suppression (text after ` -- `) */
+    reason?: string;
+}
+/**
+ * Parse `chant-disable`/`chant-disable-line`/`chant-disable-next-line`
+ * comments out of raw file content. Exported (in addition to being used
+ * internally by `runLint`) so other diagnostic sources that are not plain
+ * per-file AST `LintRule`s — e.g. ../lint/rules/comp's component composition
+ * checks, which produce whole-component diagnostics rather than
+ * exact-line ones — can still honor at least the file-level directive form
+ * without duplicating this parsing.
+ */
+export declare function parseDisableComments(content: string): DisableDirective[];
 /**
  * Execute lint rules on a set of files
  * @param files - Array of file paths to lint

package/dist/lint/engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/lint/engine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAe,MAAM,QAAQ,CAAC;AAIpE;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,iEAAiE;IACjE,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,mFAAmF;IACnF,UAAU,EAAE,KAAK,CAAC,cAAc,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACzD;AAyKD;;;;;;GAMG;AACH,wBAAsB,OAAO,CAC3B,KAAK,EAAE,MAAM,EAAE,EACf,KAAK,EAAE,QAAQ,EAAE,EACjB,WAAW,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACjD,OAAO,CAAC,aAAa,CAAC,CAqDxB"}
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/lint/engine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAe,MAAM,QAAQ,CAAC;AAIpE;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,iEAAiE;IACjE,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,mFAAmF;IACnF,UAAU,EAAE,KAAK,CAAC,cAAc,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACzD;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,wBAAwB;IACxB,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,WAAW,CAAC;IACpC,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAkED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAyCxE;AAgDD;;;;;;GAMG;AACH,wBAAsB,OAAO,CAC3B,KAAK,EAAE,MAAM,EAAE,EACf,KAAK,EAAE,QAAQ,EAAE,EACjB,WAAW,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACjD,OAAO,CAAC,aAAa,CAAC,CAqDxB"}

package/dist/lint/presets/strict.json

@@ -14,6 +14,13 @@
         "COR012": "warning",
         "COR013": "info",
         "COR014": "warning",
-        "COR015": "warning"
+        "COR015": "warning",
+        "COMP001": "error",
+        "COMP002": "error",
+        "COMP003": "error",
+        "COMP004": "error",
+        "COMP005": "error",
+        "COMP006": "error",
+        "COMP007": "warning"
     }
 }

package/dist/lint/rules/__fixtures__/comp/comp000-discovery-error/broken-a.component.d.ts

@@ -0,0 +1,4 @@
+import type { Component } from "../../../../../components/component.js";
+/** Duplicate component name (see broken-b.component.ts) — exercises the COMP000 discovery-error surfacing path in component-checks.ts. */
+export declare const dup: Component;
+//# sourceMappingURL=broken-a.component.d.ts.map

package/dist/lint/rules/__fixtures__/comp/comp000-discovery-error/broken-a.component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"broken-a.component.d.ts","sourceRoot":"","sources":["../../../../../../src/lint/rules/__fixtures__/comp/comp000-discovery-error/broken-a.component.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAC;AAGrE,0IAA0I;AAC1I,eAAO,MAAM,GAAG,EAAE,SAIjB,CAAC"}

package/dist/lint/rules/__fixtures__/comp/comp000-discovery-error/broken-b.component.d.ts

@@ -0,0 +1,4 @@
+import type { Component } from "../../../../../components/component.js";
+/** Duplicate component name (see broken-a.component.ts) — exercises the COMP000 discovery-error surfacing path in component-checks.ts. */
+export declare const dup: Component;
+//# sourceMappingURL=broken-b.component.d.ts.map

package/dist/lint/rules/__fixtures__/comp/comp000-discovery-error/broken-b.component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"broken-b.component.d.ts","sourceRoot":"","sources":["../../../../../../src/lint/rules/__fixtures__/comp/comp000-discovery-error/broken-b.component.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAC;AAGrE,0IAA0I;AAC1I,eAAO,MAAM,GAAG,EAAE,SAIjB,CAAC"}

package/dist/lint/rules/__fixtures__/comp/comp001/fail/orphan-lib.component.d.ts

@@ -0,0 +1,4 @@
+import type { Component } from "../../../../../../components/component.js";
+/** COMP001 fail case: publishes an artifact nothing ever consumes — no other component references it, and no later step in this component references the Publish phase's output. */
+export declare const orphanLib: Component;
+//# sourceMappingURL=orphan-lib.component.d.ts.map

package/dist/lint/rules/__fixtures__/comp/comp001/fail/orphan-lib.component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orphan-lib.component.d.ts","sourceRoot":"","sources":["../../../../../../../src/lint/rules/__fixtures__/comp/comp001/fail/orphan-lib.component.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAGxE,oLAAoL;AACpL,eAAO,MAAM,SAAS,EAAE,SAMvB,CAAC"}

package/dist/lint/rules/__fixtures__/comp/comp001/pass/emr-job.component.d.ts

@@ -0,0 +1,4 @@
+import type { Component } from "../../../../../../components/component.js";
+/** Consumer that references jar-lib's published artifact — makes jar-lib's publish step "consumed" for COMP001. */
+export declare const emrJob: Component;
+//# sourceMappingURL=emr-job.component.d.ts.map

package/dist/lint/rules/__fixtures__/comp/comp001/pass/emr-job.component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emr-job.component.d.ts","sourceRoot":"","sources":["../../../../../../../src/lint/rules/__fixtures__/comp/comp001/pass/emr-job.component.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAGxE,mHAAmH;AACnH,eAAO,MAAM,MAAM,EAAE,SAQpB,CAAC"}

package/dist/lint/rules/__fixtures__/comp/comp001/pass/jar-lib.component.d.ts

@@ -0,0 +1,4 @@
+import type { Component } from "../../../../../../components/component.js";
+/** Producer whose published artifact IS consumed downstream (by emr-job.component.ts) — COMP001 must not flag this. */
+export declare const jarLib: Component;
+//# sourceMappingURL=jar-lib.component.d.ts.map

package/dist/lint/rules/__fixtures__/comp/comp001/pass/jar-lib.component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jar-lib.component.d.ts","sourceRoot":"","sources":["../../../../../../../src/lint/rules/__fixtures__/comp/comp001/pass/jar-lib.component.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAGxE,uHAAuH;AACvH,eAAO,MAAM,MAAM,EAAE,SAMpB,CAAC"}

package/dist/lint/rules/__fixtures__/comp/comp002/fail/search-service.component.d.ts

@@ -0,0 +1,10 @@
+import type { Component } from "../../../../../../components/component.js";
+/**
+ * COMP002 fail case: two dangling wiring references.
+ *  - "@Build.digest" names a phase ("Build") that does not exist in this
+ *    component's deploy (the actual phase is named "Publish").
+ *  - "@missing-lib.publish.uri" names a component that was never discovered
+ *    at all in this fixture directory.
+ */
+export declare const searchService: Component;
+//# sourceMappingURL=search-service.component.d.ts.map

package/dist/lint/rules/__fixtures__/comp/comp002/fail/search-service.component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-service.component.d.ts","sourceRoot":"","sources":["../../../../../../../src/lint/rules/__fixtures__/comp/comp002/fail/search-service.component.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAGxE;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,EAAE,SAgB3B,CAAC"}

package/dist/lint/rules/__fixtures__/comp/comp002/pass/jar-lib.component.d.ts

@@ -0,0 +1,3 @@
+import type { Component } from "../../../../../../components/component.js";
+export declare const jarLib: Component;
+//# sourceMappingURL=jar-lib.component.d.ts.map

package/dist/lint/rules/__fixtures__/comp/comp002/pass/jar-lib.component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jar-lib.component.d.ts","sourceRoot":"","sources":["../../../../../../../src/lint/rules/__fixtures__/comp/comp002/pass/jar-lib.component.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAGxE,eAAO,MAAM,MAAM,EAAE,SAMpB,CAAC"}

package/dist/lint/rules/__fixtures__/comp/comp002/pass/search-service.component.d.ts

@@ -0,0 +1,4 @@
+import type { Component } from "../../../../../../components/component.js";
+/** COMP002 pass case: every wiring reference resolves — "@Publish.digest" points at this component's own "Publish" phase, and "@jar-lib.publish.uri" points at a discovered component listed in dependsOn. */
+export declare const searchService: Component;
+//# sourceMappingURL=search-service.component.d.ts.map

package/dist/lint/rules/__fixtures__/comp/comp002/pass/search-service.component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-service.component.d.ts","sourceRoot":"","sources":["../../../../../../../src/lint/rules/__fixtures__/comp/comp002/pass/search-service.component.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAGxE,8MAA8M;AAC9M,eAAO,MAAM,aAAa,EAAE,SAkB3B,CAAC"}

package/dist/lint/rules/__fixtures__/comp/comp003/fail/migrator.component.d.ts

@@ -0,0 +1,4 @@
+import type { Component } from "../../../../../../components/component.js";
+/** COMP003 fail case: "run-migration" has no native rollback, no noRollback opt-out, no component-level rollback, and no compensation sibling step. */
+export declare const migrator: Component;
+//# sourceMappingURL=migrator.component.d.ts.map

package/dist/lint/rules/__fixtures__/comp/comp003/fail/migrator.component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrator.component.d.ts","sourceRoot":"","sources":["../../../../../../../src/lint/rules/__fixtures__/comp/comp003/fail/migrator.component.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAGxE,uJAAuJ;AACvJ,eAAO,MAAM,QAAQ,EAAE,SAKtB,CAAC"}

package/dist/lint/rules/__fixtures__/comp/comp003/pass/migrator.component.d.ts

@@ -0,0 +1,4 @@
+import type { Component } from "../../../../../../components/component.js";
+/** COMP003 pass case: "run-migration" is a needs-opt-out kind, but declares an explicit noRollback reason. */
+export declare const migrator: Component;
+//# sourceMappingURL=migrator.component.d.ts.map

package/dist/lint/rules/__fixtures__/comp/comp003/pass/migrator.component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrator.component.d.ts","sourceRoot":"","sources":["../../../../../../../src/lint/rules/__fixtures__/comp/comp003/pass/migrator.component.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAGxE,8GAA8G;AAC9G,eAAO,MAAM,QAAQ,EAAE,SActB,CAAC"}

package/dist/lint/rules/__fixtures__/comp/comp003/pass/orders-table.component.d.ts

@@ -0,0 +1,4 @@
+import type { Component } from "../../../../../../components/component.js";
+/** COMP003 pass case: cfn-deploy has a known native rollback, so no opt-out is required. */
+export declare const ordersTable: Component;
+//# sourceMappingURL=orders-table.component.d.ts.map

package/dist/lint/rules/__fixtures__/comp/comp003/pass/orders-table.component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orders-table.component.d.ts","sourceRoot":"","sources":["../../../../../../../src/lint/rules/__fixtures__/comp/comp003/pass/orders-table.component.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAGxE,4FAA4F;AAC5F,eAAO,MAAM,WAAW,EAAE,SAKzB,CAAC"}

package/dist/lint/rules/__fixtures__/comp/comp004/fail/neo4j-cluster.component.d.ts

@@ -0,0 +1,4 @@
+import type { Component } from "../../../../../../components/component.js";
+/** COMP004 fail case: a gate step with no disable directive — flagged, since the local executor cannot run it. */
+export declare const neo4jCluster: Component;
+//# sourceMappingURL=neo4j-cluster.component.d.ts.map

package/dist/lint/rules/__fixtures__/comp/comp004/fail/neo4j-cluster.component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"neo4j-cluster.component.d.ts","sourceRoot":"","sources":["../../../../../../../src/lint/rules/__fixtures__/comp/comp004/fail/neo4j-cluster.component.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAGxE,kHAAkH;AAClH,eAAO,MAAM,YAAY,EAAE,SAe1B,CAAC"}

package/dist/lint/rules/__fixtures__/comp/comp004/pass/neo4j-cluster.component.d.ts

@@ -0,0 +1,4 @@
+import type { Component } from "../../../../../../components/component.js";
+/** COMP004 pass case: a genuine gate, opted out via a file-level disable directive with a documented reason — the intended path for a component that graduates to the Temporal backend. */
+export declare const neo4jCluster: Component;
+//# sourceMappingURL=neo4j-cluster.component.d.ts.map

package/dist/lint/rules/__fixtures__/comp/comp004/pass/neo4j-cluster.component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"neo4j-cluster.component.d.ts","sourceRoot":"","sources":["../../../../../../../src/lint/rules/__fixtures__/comp/comp004/pass/neo4j-cluster.component.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAGxE,2LAA2L;AAC3L,eAAO,MAAM,YAAY,EAAE,SAiB1B,CAAC"}

package/dist/lint/rules/__fixtures__/comp/comp004/pass/orders-table.component.d.ts

@@ -0,0 +1,4 @@
+import type { Component } from "../../../../../../components/component.js";
+/** COMP004 pass case: no gate step anywhere — nothing requires the durable backend. */
+export declare const ordersTable: Component;
+//# sourceMappingURL=orders-table.component.d.ts.map

package/dist/lint/rules/__fixtures__/comp/comp004/pass/orders-table.component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orders-table.component.d.ts","sourceRoot":"","sources":["../../../../../../../src/lint/rules/__fixtures__/comp/comp004/pass/orders-table.component.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAGxE,uFAAuF;AACvF,eAAO,MAAM,WAAW,EAAE,SAKzB,CAAC"}

package/dist/lint/rules/__fixtures__/comp/comp005/fail/search-service.component.d.ts

@@ -0,0 +1,4 @@
+import type { Component } from "../../../../../../components/component.js";
+/** COMP005 fail case: the Apply step's kind is named after this very component ("deploy-search-service") — a noun, not an operation. */
+export declare const searchService: Component;
+//# sourceMappingURL=search-service.component.d.ts.map

package/dist/lint/rules/__fixtures__/comp/comp005/fail/search-service.component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-service.component.d.ts","sourceRoot":"","sources":["../../../../../../../src/lint/rules/__fixtures__/comp/comp005/fail/search-service.component.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAGxE,wIAAwI;AACxI,eAAO,MAAM,aAAa,EAAE,SAS3B,CAAC"}

package/dist/lint/rules/__fixtures__/comp/comp005/pass/search-service.component.d.ts

@@ -0,0 +1,4 @@
+import type { Component } from "../../../../../../components/component.js";
+/** COMP005 pass case: every step kind is a verb (an operation), never the component's own name. */
+export declare const searchService: Component;
+//# sourceMappingURL=search-service.component.d.ts.map

package/dist/lint/rules/__fixtures__/comp/comp005/pass/search-service.component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-service.component.d.ts","sourceRoot":"","sources":["../../../../../../../src/lint/rules/__fixtures__/comp/comp005/pass/search-service.component.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAGxE,mGAAmG;AACnG,eAAO,MAAM,aAAa,EAAE,SAa3B,CAAC"}

package/dist/lint/rules/__fixtures__/comp/comp006/fail/legacy-tool.component.d.ts

@@ -0,0 +1,4 @@
+import type { Component } from "../../../../../../components/component.js";
+/** COMP006 fail case: a raw "shell" step with no "reason" at all. */
+export declare const legacyTool: Component;
+//# sourceMappingURL=legacy-tool.component.d.ts.map

package/dist/lint/rules/__fixtures__/comp/comp006/fail/legacy-tool.component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-tool.component.d.ts","sourceRoot":"","sources":["../../../../../../../src/lint/rules/__fixtures__/comp/comp006/fail/legacy-tool.component.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAGxE,qEAAqE;AACrE,eAAO,MAAM,UAAU,EAAE,SAKxB,CAAC"}

package/dist/lint/rules/__fixtures__/comp/comp006/pass/legacy-tool.component.d.ts

@@ -0,0 +1,4 @@
+import type { Component } from "../../../../../../components/component.js";
+/** COMP006 pass case: the "shell" escape hatch declares a non-empty reason. */
+export declare const legacyTool: Component;
+//# sourceMappingURL=legacy-tool.component.d.ts.map

package/dist/lint/rules/__fixtures__/comp/comp006/pass/legacy-tool.component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-tool.component.d.ts","sourceRoot":"","sources":["../../../../../../../src/lint/rules/__fixtures__/comp/comp006/pass/legacy-tool.component.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAGxE,+EAA+E;AAC/E,eAAO,MAAM,UAAU,EAAE,SASxB,CAAC"}

package/dist/lint/rules/__fixtures__/comp/comp007/fail/inventory-table.component.d.ts

@@ -0,0 +1,4 @@
+import type { Component } from "../../../../../../components/component.js";
+/** COMP007 fail case: identical phase/step-kind shape to orders-table.component.ts. */
+export declare const inventoryTable: Component;
+//# sourceMappingURL=inventory-table.component.d.ts.map

package/dist/lint/rules/__fixtures__/comp/comp007/fail/inventory-table.component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory-table.component.d.ts","sourceRoot":"","sources":["../../../../../../../src/lint/rules/__fixtures__/comp/comp007/fail/inventory-table.component.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAGxE,uFAAuF;AACvF,eAAO,MAAM,cAAc,EAAE,SAQ5B,CAAC"}

package/dist/lint/rules/__fixtures__/comp/comp007/fail/orders-table.component.d.ts

@@ -0,0 +1,4 @@
+import type { Component } from "../../../../../../components/component.js";
+/** COMP007 fail case: identical phase/step-kind shape to inventory-table.component.ts — a declaration-sprawl hint (should reach for a preset). */
+export declare const ordersTable: Component;
+//# sourceMappingURL=orders-table.component.d.ts.map

package/dist/lint/rules/__fixtures__/comp/comp007/fail/orders-table.component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orders-table.component.d.ts","sourceRoot":"","sources":["../../../../../../../src/lint/rules/__fixtures__/comp/comp007/fail/orders-table.component.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAGxE,kJAAkJ;AAClJ,eAAO,MAAM,WAAW,EAAE,SAQzB,CAAC"}

package/dist/lint/rules/__fixtures__/comp/comp007/pass/orders-table.component.d.ts

@@ -0,0 +1,3 @@
+import type { Component } from "../../../../../../components/component.js";
+export declare const ordersTable: Component;
+//# sourceMappingURL=orders-table.component.d.ts.map

package/dist/lint/rules/__fixtures__/comp/comp007/pass/orders-table.component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orders-table.component.d.ts","sourceRoot":"","sources":["../../../../../../../src/lint/rules/__fixtures__/comp/comp007/pass/orders-table.component.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAGxE,eAAO,MAAM,WAAW,EAAE,SAQzB,CAAC"}

package/dist/lint/rules/__fixtures__/comp/comp007/pass/search-service.component.d.ts

@@ -0,0 +1,4 @@
+import type { Component } from "../../../../../../components/component.js";
+/** COMP007 pass case: structurally distinct from orders-table.component.ts (service: build+publish+apply+verify vs. infra: apply+verify only) — no sprawl hint expected. */
+export declare const searchService: Component;
+//# sourceMappingURL=search-service.component.d.ts.map

package/dist/lint/rules/__fixtures__/comp/comp007/pass/search-service.component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-service.component.d.ts","sourceRoot":"","sources":["../../../../../../../src/lint/rules/__fixtures__/comp/comp007/pass/search-service.component.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAGxE,4KAA4K;AAC5K,eAAO,MAAM,aAAa,EAAE,SAa3B,CAAC"}

package/dist/lint/rules/comp/comp001-publishes-never-applies.d.ts

@@ -0,0 +1,20 @@
+/**
+ * COMP001: publishes-but-never-applies
+ *
+ * Flags a component that publishes an image/artifact (a `publish-image`,
+ * `publish-artifact`, or `load-image-on-host` step) that nothing ever
+ * consumes: neither an apply/submit step later in the same component (via a
+ * `@Phase.field` prior-step reference into the publish phase) nor any other
+ * component (via `@<this-component>.publish.uri|digest|key`). A publish step
+ * with no consumer either belongs to a producer/library component another
+ * component should depend on, or is dead composition — see epic #551 §7
+ * ("What chant adds") and §"Failure modes" (renamed/orphaned sprawl).
+ *
+ * Triggers on: a `service`-shaped component whose `publish-image` output is
+ * never referenced by its own Apply phase or by any sibling component.
+ * OK: the publish output is referenced via `@Publish.digest` (same
+ * component) or `@<name>.publish.uri` (a consumer component).
+ */
+import type { ComponentCheck } from "../../component-checks.js";
+export declare const comp001PublishesNeverAppliesRule: ComponentCheck;
+//# sourceMappingURL=comp001-publishes-never-applies.d.ts.map

package/dist/lint/rules/comp/comp001-publishes-never-applies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"comp001-publishes-never-applies.d.ts","sourceRoot":"","sources":["../../../../src/lint/rules/comp/comp001-publishes-never-applies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAmD,MAAM,wBAAwB,CAAC;AAK9G,eAAO,MAAM,gCAAgC,EAAE,cAsD9C,CAAC"}

package/dist/lint/rules/comp/comp002-dangling-wiring-ref.d.ts

@@ -0,0 +1,28 @@
+/**
+ * COMP002: dangling-wiring-ref
+ *
+ * Flags a wiring reference (`@Phase.field` or `@<component>.publish.*`,
+ * carried in a step's `imageRef`/`jar`/`revision`/`inputs`/any other
+ * capability-specific field — see ../../../components/component.ts's
+ * `Wiring`) that points at a phase or component that does not exist:
+ *
+ *  - `@Phase.field` naming a phase not declared anywhere in this component's
+ *    own `deploy` (top-level phase names only — a nested fan-out phase's
+ *    name is addressed by its own name, never a parent's, matching how
+ *    ../../../components/driver.ts's `resolveWiring` keys `phaseOutputs` by
+ *    the phase the step ran directly under).
+ *  - `@<component>.publish.<field>` naming a component that either is not
+ *    discovered at all, or is discovered but not listed in this component's
+ *    `dependsOn` — the graph only resolves an artifact reference for a
+ *    declared dependency (composition-and-wiring.mdx#cross-component-outputs).
+ *
+ * Triggers on: `imageRef: "@Build.digest"` when no phase named "Build"
+ * exists, or `jar: "@some-lib.publish.uri"` when "some-lib" is undiscovered
+ * or missing from `dependsOn`.
+ * OK: `imageRef: "@Publish.digest"` when a "Publish" phase exists in the same
+ * component, or `jar: "@jar-lib.publish.uri"` when "jar-lib" is discovered
+ * and listed in `dependsOn`.
+ */
+import type { ComponentCheck } from "../../component-checks.js";
+export declare const comp002DanglingWiringRefRule: ComponentCheck;
+//# sourceMappingURL=comp002-dangling-wiring-ref.d.ts.map