@intentius/chant 0.18.27 → 0.18.29

package/dist/cli/handlers/components.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"components.d.ts","sourceRoot":"","sources":["../../../src/cli/handlers/components.ts"],"names":[],"mappings":"AA6CA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAIlD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAuErF;AA2GD,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAqN9E;AAED,kEAAkE;AAClE,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAM/E"}
+{"version":3,"file":"components.d.ts","sourceRoot":"","sources":["../../../src/cli/handlers/components.ts"],"names":[],"mappings":"AA6CA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAIlD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAuErF;AAqHD,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAuN9E;AAED,kEAAkE;AAClE,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAM/E"}

package/dist/cli/main.d.ts

@@ -4,4 +4,14 @@ import { type ParsedArgs } from "./registry.js";
  * Parse command line arguments
  */
 export declare function parseArgs(args: string[]): ParsedArgs;
+/**
+ * Wait until a writable stream has flushed its buffer. `process.exit()` discards
+ * data still buffered for an async sink (a pipe or file), truncating large output
+ * at the ~64 KB pipe buffer — so `chant graph --format ir` piped into a consumer
+ * loses everything past 64 KB and its JSON won't parse. A TTY writes
+ * synchronously (`writableLength` stays 0), so this is a no-op there. Resolves on
+ * `error`/`close` too, so a reader that closes early (EPIPE) can't hang exit.
+ * Exported for testing.
+ */
+export declare function waitForStreamDrain(stream: NodeJS.WriteStream): Promise<void>;
 //# sourceMappingURL=main.d.ts.map

package/dist/cli/main.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":";AAMA,OAAO,EAAmC,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAkB9E;;GAEG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CA2LpD"}
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":";AAMA,OAAO,EAAmC,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAkB9E;;GAEG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CA2LpD;AAsVD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB5E"}

package/dist/lifecycle/status.d.ts

@@ -58,6 +58,28 @@ export interface ComponentStatusRow {
     reconciliation: "reconciled" | "unrecorded" | "stale" | "drifted" | "unknown";
     /** Human-readable detail backing the verdict. */
     detail: string;
+    /**
+     * Machine-readable "observed live", when live evidence was gathered (`--live`).
+     * A consumer joining this row onto a graph node should read this rather than
+     * string-matching `detail`. Absent when `--live` was not requested.
+     */
+    live?: boolean;
+    /**
+     * The owning deploy unit's raw status, when a lexicon reported it (AWS: the
+     * component's own CFN stack via `describeStackStatus`). Lets a renderer paint a
+     * richer palette than the reconciliation verdict — `healthy` green,
+     * present-but-not-healthy amber (mid-deploy) / red (rollback/failed).
+     */
+    stack?: LiveStackInfo;
+}
+/** A component's owning deploy unit and its provider-native status. */
+export interface LiveStackInfo {
+    /** The deploy-unit name (e.g. the CloudFormation stack name). */
+    name: string;
+    /** Provider-native status string, e.g. "CREATE_COMPLETE". */
+    status?: string;
+    /** True when `status` is a terminal success state. */
+    healthy?: boolean;
 }
 export interface ComponentStatusResult {
     env: string;
@@ -80,6 +102,9 @@ export interface LiveComponentEvidence {
     action?: ChangeAction;
     /** Ownership verdict, when known. */
     ownership?: "owned" | "foreign" | "unknown";
+    /** The owning deploy unit's raw status, when observed (AWS: the component's own
+     * CFN stack). Surfaced onto `ComponentStatusRow.stack` for a richer palette. */
+    stack?: LiveStackInfo;
 }
 /**
  * Overlay per-component stack-presence evidence onto change-set evidence.

package/dist/lifecycle/status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/lifecycle/status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE5E,+FAA+F;AAC/F,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,kEAAkE;IAClE,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,+IAA+I;IAC/I,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,gDAAgD;IAChD,cAAc,EAAE,YAAY,GAAG,YAAY,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;IAC9E,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,kBAAkB,EAAE,CAAC;IAC3B,4GAA4G;IAC5G,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,qBAAqB;IACpC,4FAA4F;IAC5F,IAAI,EAAE,OAAO,CAAC;IACd,8HAA8H;IAC9H,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,qCAAqC;IACrC,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;CAC7C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,GAAG,SAAS,EACpD,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,GAC7C,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAWpC;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,eAAe,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;AAEhE,4HAA4H;AAC5H,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,MAAM,EAAE,CAGvF;AA2BD;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CACvC,EAAE,EAAE,SAAS,EACb,WAAW,CAAC,EAAE,eAAe,GAC5B,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,CA+BpC;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,aAAa,EAAE,EACxB,IAAI,CAAC,EAAE;IACL,YAAY,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IAClD,2DAA2D;IAC3D,cAAc,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC/C,+MAA+M;IAC/M,oBAAoB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACxD,6KAA6K;IAC7K,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B,GACA,kBAAkB,EAAE,CA4CtB;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,IAAI,EAAE,OAAO,CAAC;CACf;AAED,oGAAoG;AACpG,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,aAAa,EAAE,CAAA;CAAE,EAChD,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,aAAa,EAAE,CAAA;CAAE,GAC/C,kBAAkB,CAWpB"}
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/lifecycle/status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE5E,+FAA+F;AAC/F,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,kEAAkE;IAClE,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,+IAA+I;IAC/I,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,gDAAgD;IAChD,cAAc,EAAE,YAAY,GAAG,YAAY,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;IAC9E,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;;;OAKG;IACH,KAAK,CAAC,EAAE,aAAa,CAAC;CACvB;AAED,uEAAuE;AACvE,MAAM,WAAW,aAAa;IAC5B,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,kBAAkB,EAAE,CAAC;IAC3B,4GAA4G;IAC5G,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,qBAAqB;IACpC,4FAA4F;IAC5F,IAAI,EAAE,OAAO,CAAC;IACd,8HAA8H;IAC9H,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,qCAAqC;IACrC,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;IAC5C;oFACgF;IAChF,KAAK,CAAC,EAAE,aAAa,CAAC;CACvB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,GAAG,SAAS,EACpD,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,GAC7C,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAYpC;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,eAAe,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;AAEhE,4HAA4H;AAC5H,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,MAAM,EAAE,CAGvF;AA2BD;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CACvC,EAAE,EAAE,SAAS,EACb,WAAW,CAAC,EAAE,eAAe,GAC5B,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,CA+BpC;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,aAAa,EAAE,EACxB,IAAI,CAAC,EAAE;IACL,YAAY,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IAClD,2DAA2D;IAC3D,cAAc,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC/C,+MAA+M;IAC/M,oBAAoB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACxD,6KAA6K;IAC7K,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B,GACA,kBAAkB,EAAE,CAsDtB;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,IAAI,EAAE,OAAO,CAAC;CACf;AAED,oGAAoG;AACpG,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,aAAa,EAAE,CAAA;CAAE,EAChD,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,aAAa,EAAE,CAAA;CAAE,GAC/C,kBAAkB,CAWpB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant",
-  "version": "0.18.27",
+  "version": "0.18.29",
   "description": "Declarative infrastructure-as-code toolkit \u2014 TypeScript on Node.js",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",

package/src/cli/handlers/components.ts

@@ -172,6 +172,8 @@ interface StatusJsonRow {
   } | null;
   reconciliation: string;
   detail: string;
+  live?: boolean;
+  stack?: { name: string; status?: string; healthy?: boolean };
 }
 
 /**
@@ -237,7 +239,15 @@ async function observeComponentStacks(
     const determinate = observed.filter((o): o is NonNullable<typeof o> => o !== null);
     if (determinate.length === 0) continue;
     const present = determinate.every((o) => o.present);
-    evidence.set(name, { live: present, ownership: present ? "owned" : undefined });
+    // Surface the (first present, else first) stack's raw status for a richer
+    // palette than the reconciliation verdict. One cfn-deploy stack per component
+    // is the norm; a multi-stack component reports its representative unit.
+    const repr = determinate.find((o) => o.present) ?? determinate[0];
+    evidence.set(name, {
+      live: present,
+      ownership: present ? "owned" : undefined,
+      stack: { name: repr.stack, status: repr.status, healthy: repr.healthy },
+    });
   }
   return evidence;
 }
@@ -396,6 +406,8 @@ export async function runComponentsStatus(ctx: CommandContext): Promise<number>
           : null,
         reconciliation: row.reconciliation,
         detail: row.detail,
+        ...(row.live !== undefined ? { live: row.live } : {}),
+        ...(row.stack ? { stack: row.stack } : {}),
       });
     }
   }

package/src/cli/main.test.ts

@@ -1,5 +1,6 @@
 import { describe, test, expect } from "vitest";
-import { parseArgs } from "./main";
+import { EventEmitter } from "node:events";
+import { parseArgs, waitForStreamDrain } from "./main";
 import { resolveCommand, type CommandDef, type ParsedArgs } from "./registry";
 
 describe("parseArgs", () => {
@@ -416,3 +417,50 @@ describe("parseArgs — run flags", () => {
     expect(result.extraPositional2).toBe("gate-dns");
   });
 });
+
+describe("waitForStreamDrain", () => {
+  // Minimal writable stub — just the surface waitForStreamDrain reads.
+  function fakeStream(len: number): NodeJS.WriteStream & { writableLength: number } {
+    const s = new EventEmitter() as unknown as NodeJS.WriteStream & { writableLength: number };
+    s.writableLength = len;
+    (s as { writableEnded: boolean }).writableEnded = false;
+    (s as { destroyed: boolean }).destroyed = false;
+    return s;
+  }
+
+  test("resolves immediately when nothing is buffered (e.g. a TTY)", async () => {
+    await expect(waitForStreamDrain(fakeStream(0))).resolves.toBeUndefined();
+  });
+
+  test("waits through drains until the buffer is actually empty", async () => {
+    const s = fakeStream(1000);
+    let done = false;
+    const p = waitForStreamDrain(s).then(() => (done = true));
+    await Promise.resolve();
+    expect(done).toBe(false);
+    // A drain while still buffered must NOT resolve (large one-shot write, kernel
+    // took a slice, more remains) — it re-arms.
+    s.emit("drain");
+    await Promise.resolve();
+    expect(done).toBe(false);
+    // Fully flushed now.
+    s.writableLength = 0;
+    s.emit("drain");
+    await p;
+    expect(done).toBe(true);
+  });
+
+  test("resolves on error so a reader that closed early (EPIPE) can't hang exit", async () => {
+    const s = fakeStream(500);
+    const p = waitForStreamDrain(s);
+    s.emit("error", new Error("EPIPE"));
+    await expect(p).resolves.toBeUndefined();
+  });
+
+  test("resolves on close as well", async () => {
+    const s = fakeStream(500);
+    const p = waitForStreamDrain(s);
+    s.emit("close");
+    await expect(p).resolves.toBeUndefined();
+  });
+});

package/src/cli/main.ts

@@ -551,7 +551,48 @@ async function main(): Promise<void> {
   const serializers = plugins.map((p) => p.serializer);
   const ctx = { args, plugins, serializers };
 
-  process.exit(await match.def.handler(ctx));
+  await flushAndExit(await match.def.handler(ctx));
+}
+
+/**
+ * Wait until a writable stream has flushed its buffer. `process.exit()` discards
+ * data still buffered for an async sink (a pipe or file), truncating large output
+ * at the ~64 KB pipe buffer — so `chant graph --format ir` piped into a consumer
+ * loses everything past 64 KB and its JSON won't parse. A TTY writes
+ * synchronously (`writableLength` stays 0), so this is a no-op there. Resolves on
+ * `error`/`close` too, so a reader that closes early (EPIPE) can't hang exit.
+ * Exported for testing.
+ */
+export function waitForStreamDrain(stream: NodeJS.WriteStream): Promise<void> {
+  return new Promise((resolve) => {
+    const tick = (): void => {
+      if (stream.writableLength === 0 || stream.writableEnded || stream.destroyed) {
+        cleanup();
+        resolve();
+        return;
+      }
+      stream.once("drain", tick);
+    };
+    const stop = (): void => {
+      cleanup();
+      resolve();
+    };
+    const cleanup = (): void => {
+      stream.off("drain", tick);
+      stream.off("error", stop);
+      stream.off("close", stop);
+    };
+    stream.once("error", stop);
+    stream.once("close", stop);
+    tick();
+  });
+}
+
+/** Flush stdout+stderr, then exit — so a large piped payload isn't truncated. */
+async function flushAndExit(code: number): Promise<never> {
+  await waitForStreamDrain(process.stdout);
+  await waitForStreamDrain(process.stderr);
+  process.exit(code);
 }
 
 // Only run main when executed directly, not when imported. Robust to symlinked
@@ -559,13 +600,13 @@ async function main(): Promise<void> {
 // whole CLI through the npm .bin shim / a symlinked checkout).
 const isMain = isEntryPoint(process.argv[1], import.meta.url);
 if (isMain) {
-  main().catch((err) => {
+  main().catch(async (err) => {
     const verbose = process.argv.includes("--verbose") || process.argv.includes("-v");
     if (verbose && err instanceof Error && err.stack) {
       console.error(err.stack);
     } else {
       console.error(formatError({ message: err instanceof Error ? err.message : String(err) }));
     }
-    process.exit(1);
+    await flushAndExit(1);
   });
 }

package/src/lifecycle/status.test.ts

@@ -135,6 +135,29 @@ describe("status", () => {
       expect(rows[0].reconciliation).toBe("drifted");
     });
 
+    test("surfaces machine-readable live + stack status when observed (#57 hardening)", () => {
+      const liveEvidence = new Map<string, LiveComponentEvidence>([
+        ["search-service", { live: true, ownership: "owned", stack: { name: "app-prod-search", status: "CREATE_COMPLETE", healthy: true } }],
+      ]);
+      const rows = reconcileStatus("prod", [record()], { liveEvidence });
+      expect(rows[0].live).toBe(true);
+      expect(rows[0].stack).toEqual({ name: "app-prod-search", status: "CREATE_COMPLETE", healthy: true });
+    });
+
+    test("live is false (never undefined) under --live when a component's stack is absent", () => {
+      const liveEvidence = new Map<string, LiveComponentEvidence>([
+        ["search-service", { live: false }],
+      ]);
+      const rows = reconcileStatus("prod", [record()], { liveEvidence });
+      expect(rows[0].live).toBe(false);
+    });
+
+    test("live is absent (not queried) when no liveEvidence is passed", () => {
+      const rows = reconcileStatus("prod", [record()]);
+      expect(rows[0].live).toBeUndefined();
+      expect(rows[0].stack).toBeUndefined();
+    });
+
     test("recorded but nothing live -> stale", () => {
       const liveEvidence = new Map<string, LiveComponentEvidence>();
       const rows = reconcileStatus("prod", [record()], { liveEvidence });

package/src/lifecycle/status.ts

@@ -60,6 +60,29 @@ export interface ComponentStatusRow {
   reconciliation: "reconciled" | "unrecorded" | "stale" | "drifted" | "unknown";
   /** Human-readable detail backing the verdict. */
   detail: string;
+  /**
+   * Machine-readable "observed live", when live evidence was gathered (`--live`).
+   * A consumer joining this row onto a graph node should read this rather than
+   * string-matching `detail`. Absent when `--live` was not requested.
+   */
+  live?: boolean;
+  /**
+   * The owning deploy unit's raw status, when a lexicon reported it (AWS: the
+   * component's own CFN stack via `describeStackStatus`). Lets a renderer paint a
+   * richer palette than the reconciliation verdict — `healthy` green,
+   * present-but-not-healthy amber (mid-deploy) / red (rollback/failed).
+   */
+  stack?: LiveStackInfo;
+}
+
+/** A component's owning deploy unit and its provider-native status. */
+export interface LiveStackInfo {
+  /** The deploy-unit name (e.g. the CloudFormation stack name). */
+  name: string;
+  /** Provider-native status string, e.g. "CREATE_COMPLETE". */
+  status?: string;
+  /** True when `status` is a terminal success state. */
+  healthy?: boolean;
 }
 
 export interface ComponentStatusResult {
@@ -84,6 +107,9 @@ export interface LiveComponentEvidence {
   action?: ChangeAction;
   /** Ownership verdict, when known. */
   ownership?: "owned" | "foreign" | "unknown";
+  /** The owning deploy unit's raw status, when observed (AWS: the component's own
+   * CFN stack). Surfaced onto `ComponentStatusRow.stack` for a richer palette. */
+  stack?: LiveStackInfo;
 }
 
 /**
@@ -108,6 +134,7 @@ export function mergeLiveEvidence(
       live: sup.live,
       ownership: sup.ownership ?? b?.ownership,
       action: b?.action,
+      stack: sup.stack ?? b?.stack,
     });
   }
   return merged;
@@ -265,7 +292,17 @@ export function reconcileStatus(
       detail = `recorded ${recorded!.timestamp} (digest ${recorded!.digest}), live and consistent`;
     }
 
-    rows.push({ component, env, recorded, build, componentBom, reconciliation, detail });
+    rows.push({
+      component,
+      env,
+      recorded,
+      build,
+      componentBom,
+      reconciliation,
+      detail,
+      ...(liveEvidence ? { live: !!evidence?.live } : {}),
+      ...(evidence?.stack ? { stack: evidence.stack } : {}),
+    });
   }
 
   return rows;