@intentius/chant 0.41.1 → 0.41.3

package/dist/components/capability-plugin.d.ts

@@ -82,4 +82,20 @@ export interface CapabilityPlugin {
  * descriptive error rather than registered half-working.
  */
 export declare function isCapabilityPlugin(value: unknown): value is CapabilityPlugin;
+/**
+ * The calling module's own package version, read from the nearest
+ * `package.json` above it (chant #1505).
+ *
+ * `CapabilityPlugin.version` documents itself as the plugin package's semver,
+ * but chant's packages release in lockstep, so a hardcoded literal goes stale
+ * on every `just release` — the aws plugin shipped `"1.0.0"` from the day it
+ * was extracted from the starter set (#681), and the k8s plugin's authoring-
+ * time `"0.41.0"` was stale one release later. Walking up from the module's
+ * own URL survives both the `src/` (development condition) and `dist/`
+ * layouts, and an npm install, without any build-time stamping.
+ *
+ * Returns `"0.0.0"` when no versioned `package.json` is found — a visible
+ * sentinel rather than a guess; nothing gates on the field.
+ */
+export declare function ownPackageVersion(moduleUrl: string): string;
 //# sourceMappingURL=capability-plugin.d.ts.map

package/dist/components/capability-plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capability-plugin.d.ts","sourceRoot":"","sources":["../../src/components/capability-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,gKAAgK;IAChK,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yIAAyI;IACzI,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,gBAAgB;IAE/B,uFAAuF;IACvF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,mGAAmG;IACnG,YAAY,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAGlD,qIAAqI;IACrI,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAE/B,gLAAgL;IAChL,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;IAE/C,2FAA2F;IAC3F,IAAI,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/B;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAa5E"}
+{"version":3,"file":"capability-plugin.d.ts","sourceRoot":"","sources":["../../src/components/capability-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAKH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,gKAAgK;IAChK,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yIAAyI;IACzI,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,gBAAgB;IAE/B,uFAAuF;IACvF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,mGAAmG;IACnG,YAAY,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAGlD,qIAAqI;IACrI,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAE/B,gLAAgL;IAChL,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;IAE/C,2FAA2F;IAC3F,IAAI,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/B;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAa5E;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAa3D"}

package/dist/components/cli-support.d.ts

@@ -72,6 +72,11 @@ export interface ComponentGraphResult {
      * so a renderer can deep-link a component node to source (`chant graph
      * --components --format ir` sets `sourceLoc` from this). */
     files?: Record<string, string>;
+    /** Component name → the live resource names it owns (#1491): the declared
+     * `liveNames`, or `[name]` when undeclared — the identity-join fallback the
+     * `Component` contract already specifies. This is what lets a consumer join
+     * the component DAG to the resource graph without guessing at kinds. */
+    liveNames?: Record<string, string[]>;
     error?: string;
 }
 /** Compute the components' dependency graph under `path`, for `chant graph --components`. */

package/dist/components/cli-support.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-support.d.ts","sourceRoot":"","sources":["../../src/components/cli-support.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAiB,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAQL,KAAK,eAAe,EAEpB,KAAK,eAAe,EACrB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAuC,KAAK,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAChG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAGvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEvD,OAAO,EAAmB,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AAE9D,yDAAyD;AACzD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,qFAAqF;AACrF,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAqBnG;AAED,+FAA+F;AAC/F,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,0FAA0F;IAC1F,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,sFAAsF;AACtF,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAuBvH;AAED,4GAA4G;AAC5G,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3C;;gEAE4D;IAC5D,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,6FAA6F;AAC7F,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA+B1G;AAED,iJAAiJ;AACjJ,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC;AAErC,iEAAiE;AACjE,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qDAAqD;IACrD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,0EAA0E;IAC1E,IAAI,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACrF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+MAA+M;IAC/M,WAAW,CAAC,EAAE,oBAAoB,EAAE,CAAC;CACtC;AAqBD;;;;;;;;;GASG;AACH,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,eAAe,EACxB,OAAO,CAAC,EAAE,wBAAwB,EAClC,OAAO,CAAC,EAAE,OAAO;AACjB;;;;;;;GAOG;AACH,WAAW,CAAC,EAAE,oBAAoB,EAAE,GACnC,OAAO,CAAC,wBAAwB,CAAC,CA6BnC;AAcD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,eAAe,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAkBhG;AAED,6FAA6F;AAC7F,MAAM,WAAW,oBAAoB;IACnC,wGAAwG;IACxG,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,6HAA6H;IAC7H,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D;;;;;;;;;;OAUG;IACH,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,CAAC;IAC/C;;;;;;;;;;;;;OAaG;IACH,WAAW,CAAC,EAAE,oBAAoB,EAAE,CAAC;CACtC;AAED,qDAAqD;AACrD,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,6FAA6F;IAC7F,GAAG,CAAC,EAAE,eAAe,CAAC;IACtB,uEAAuE;IACvE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gIAAgI;IAChI,eAAe,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D,wSAAwS;IACxS,WAAW,CAAC,EAAE,oBAAoB,EAAE,CAAC;CACtC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,0KAA0K;AAC1K,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,OAAO;AACjB,4RAA4R;AAC5R,WAAW,CAAC,EAAE,oBAAoB,EAAE,GACnC,OAAO,CAAC,wBAAwB,CAAC,CAsBnC;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,mBAAmB,CAAC,CAuG9B"}
+{"version":3,"file":"cli-support.d.ts","sourceRoot":"","sources":["../../src/components/cli-support.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAiB,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAQL,KAAK,eAAe,EAEpB,KAAK,eAAe,EACrB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAuC,KAAK,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAChG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAGvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEvD,OAAO,EAAmB,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AAE9D,yDAAyD;AACzD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,qFAAqF;AACrF,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAqBnG;AAED,+FAA+F;AAC/F,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,0FAA0F;IAC1F,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,sFAAsF;AACtF,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAuBvH;AAED,4GAA4G;AAC5G,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3C;;gEAE4D;IAC5D,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B;;;4EAGwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,6FAA6F;AAC7F,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAoC1G;AAED,iJAAiJ;AACjJ,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC;AAErC,iEAAiE;AACjE,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qDAAqD;IACrD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,0EAA0E;IAC1E,IAAI,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACrF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+MAA+M;IAC/M,WAAW,CAAC,EAAE,oBAAoB,EAAE,CAAC;CACtC;AAqBD;;;;;;;;;GASG;AACH,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,eAAe,EACxB,OAAO,CAAC,EAAE,wBAAwB,EAClC,OAAO,CAAC,EAAE,OAAO;AACjB;;;;;;;GAOG;AACH,WAAW,CAAC,EAAE,oBAAoB,EAAE,GACnC,OAAO,CAAC,wBAAwB,CAAC,CA6BnC;AAcD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,eAAe,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAkBhG;AAED,6FAA6F;AAC7F,MAAM,WAAW,oBAAoB;IACnC,wGAAwG;IACxG,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,6HAA6H;IAC7H,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D;;;;;;;;;;OAUG;IACH,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,CAAC;IAC/C;;;;;;;;;;;;;OAaG;IACH,WAAW,CAAC,EAAE,oBAAoB,EAAE,CAAC;CACtC;AAED,qDAAqD;AACrD,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,6FAA6F;IAC7F,GAAG,CAAC,EAAE,eAAe,CAAC;IACtB,uEAAuE;IACvE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gIAAgI;IAChI,eAAe,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D,wSAAwS;IACxS,WAAW,CAAC,EAAE,oBAAoB,EAAE,CAAC;CACtC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,0KAA0K;AAC1K,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,OAAO;AACjB,4RAA4R;AAC5R,WAAW,CAAC,EAAE,oBAAoB,EAAE,GACnC,OAAO,CAAC,wBAAwB,CAAC,CAsBnC;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,mBAAmB,CAAC,CAuG9B"}

package/dist/components/starter-plugin.d.ts

@@ -25,7 +25,7 @@
  *    from verb modules, so neither needed to change for this migration —
  *    the compatibility guarantee #559 asks for.
  */
-import type { CapabilityPlugin } from "./capability-plugin.js";
+import { type CapabilityPlugin } from "./capability-plugin.js";
 /**
  * Every `kind` in the starter verb set, grouped by family, per epic #551 and
  * docs/components/capabilities.mdx. Source of truth (moved here from

package/dist/components/starter-plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"starter-plugin.d.ts","sourceRoot":"","sources":["../../src/components/starter-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAkBH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE5D;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB;;;;;;;CAaxB,CAAC;AA2BX;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,gBAKrC,CAAC"}
+{"version":3,"file":"starter-plugin.d.ts","sourceRoot":"","sources":["../../src/components/starter-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAkBH,OAAO,EAAqB,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE/E;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB;;;;;;;CAaxB,CAAC;AA2BX;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,gBAOrC,CAAC"}

package/dist/graph-detail.d.ts

@@ -18,4 +18,20 @@ export declare const DETAIL: {
 };
 /** Apply a detail tier to the base (declarable-level) IR. */
 export declare function applyDetail(ir: GraphIR, level: DetailLevel): GraphIR;
+/**
+ * chant #1489 — the message to print when `--detail 3` changed nothing.
+ *
+ * T3's only addition over T2 is the producer attribute on `$ref`-derived
+ * edges. A graph whose resources link by name or label convention instead of
+ * attribute references (the k8s lexicon end to end) has nothing to annotate,
+ * so levels 2 and 3 come out byte-identical — which reads as a broken dial
+ * from any consumer stepping through the levels (behold#131 was filed over
+ * exactly this). Accepting a value that changes nothing without saying so is
+ * the bug; this names it.
+ *
+ * Returns the warning text, or undefined when detail 3 did add something.
+ * Callers print it through their own sink; the compare is over the two IRs
+ * the caller already holds, so this stays a pure function.
+ */
+export declare function detailInertNotice(base: GraphIR, detailed: GraphIR): string | undefined;
 //# sourceMappingURL=graph-detail.d.ts.map

package/dist/graph-detail.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"graph-detail.d.ts","sourceRoot":"","sources":["../src/graph-detail.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAkB,MAAM,YAAY,CAAC;AAE1D;;;;;;;;;GASG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAExC,eAAO,MAAM,MAAM;;;;;CAKT,CAAC;AAEX,6DAA6D;AAC7D,wBAAgB,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAYpE"}
+{"version":3,"file":"graph-detail.d.ts","sourceRoot":"","sources":["../src/graph-detail.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAkB,MAAM,YAAY,CAAC;AAE1D;;;;;;;;;GASG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAExC,eAAO,MAAM,MAAM;;;;;CAKT,CAAC;AAEX,6DAA6D;AAC7D,wBAAgB,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAYpE;AA+HD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAWtF"}

package/dist/kubectl-context.d.ts

@@ -30,11 +30,13 @@ export interface K8sConfigShape {
     profiles?: Record<string, K8sClusterProfile>;
 }
 /**
- * Thrown when an environment declares a cluster binding but the ambient
- * kubectl context disagrees with it. Refusing here — instead of silently
- * observing whichever cluster is ambient — is the fix for #1100: a
- * wrong-cluster read reports every declared resource as missing, which #1089
- * then classifies as a confident (and wrong) list of `create` actions.
+ * Historically thrown when an environment declared a cluster binding but the
+ * ambient kubectl context disagreed with it (#1100/#1155). As of #1488 the
+ * resolver no longer polices ambient at all — a declared binding is USED, not
+ * checked — so {@link resolveClusterTarget} never throws this anymore. The
+ * class stays exported because the k8s lexicon's read/write paths still catch
+ * it (converting a refusal into NOT-OBSERVED), and a custom connector may
+ * still throw it to get that classification.
  */
 export declare class ClusterBindingMismatchError extends Error {
     readonly environment: string;
@@ -57,8 +59,11 @@ export interface ResolvedClusterTarget {
  * `kubectl config current-context`; the k8s lexicon's typed API client
  * (chant #1074) supplies one that reads the parsed kubeconfig instead, so a
  * client that never needs the `kubectl` binary does not acquire a dependency
- * on it just to check the binding. Both answer the same question, so the
- * refusal semantics below are identical either way.
+ * on it just to check the binding.
+ *
+ * As of #1488 the resolver itself no longer reads ambient (a declared binding
+ * is used directly), so this hook only matters to callers that surface the
+ * ambient context in their own messages.
  */
 export type AmbientContextReader = () => Promise<string | undefined>;
 /** Options for {@link resolveClusterTarget}. */
@@ -79,13 +84,16 @@ export interface ResolveClusterTargetOptions {
  * - No binding declared: returns `{ source: "ambient" }` — unchanged
  *   behavior — but logs a visible warning identifying the caller and
  *   environment, so the fallback is never silent (#1100 acceptance).
- * - Binding declared and the ambient context agrees (or ambient can't be
- *   determined): returns `{ context: bound, source: "bound" }`. Callers
- *   should pass this context explicitly on every kubectl invocation rather
- *   than relying on it also being ambient.
- * - Binding declared and the ambient context disagrees: throws
- *   {@link ClusterBindingMismatchError} — a loud refusal instead of quietly
- *   reading the wrong cluster.
+ * - Binding declared: returns `{ context: bound, source: "bound" }`,
+ *   regardless of what is ambient (#1488). The declared binding is the
+ *   selection, not a check: callers pass this context explicitly on every
+ *   read and write, so whichever cluster `kubectl` happens to be pointed at
+ *   is irrelevant. Any k3d cluster another project creates mid-session used
+ *   to steal the ambient context and turn a healthy estate grey with
+ *   `read-failed` as the only explanation; now it cannot. A bound context
+ *   that is absent from the kubeconfig fails downstream in the typed client
+ *   with an error naming the context and the `k8s.profiles.<env>.context`
+ *   binding — never by falling back to ambient.
  */
 export declare function resolveClusterTarget(config: Record<string, unknown>, environment: string, lexiconName: string, options?: ResolveClusterTargetOptions): Promise<ResolvedClusterTarget>;
 /**

package/dist/kubectl-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kubectl-context.d.ts","sourceRoot":"","sources":["../src/kubectl-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAItD,wFAAwF;AACxF,MAAM,WAAW,iBAAiB;IAChC,yDAAyD;IACzD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wFAAwF;AACxF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;CAC9C;AAED;;;;;;GAMG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;aAElC,WAAW,EAAE,MAAM;aACnB,eAAe,EAAE,MAAM;aACvB,cAAc,EAAE,MAAM;gBAFtB,WAAW,EAAE,MAAM,EACnB,eAAe,EAAE,MAAM,EACvB,cAAc,EAAE,MAAM;CAWzC;AAED,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kCAAkC;IAClC,MAAM,EAAE,OAAO,GAAG,SAAS,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;AAarE,gDAAgD;AAChD,MAAM,WAAW,2BAA2B;IAC1C;;;OAGG;IACH,cAAc,CAAC,EAAE,oBAAoB,CAAC;CACvC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,2BAAgC,GACxC,OAAO,CAAC,qBAAqB,CAAC,CAsBhC;AAID;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB;AAC5B,kFAAkF;AAChF;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE;AACpB,4DAA4D;GAC1D;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAmBrE;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,kBAAkB,CAuCvE"}
+{"version":3,"file":"kubectl-context.d.ts","sourceRoot":"","sources":["../src/kubectl-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAItD,wFAAwF;AACxF,MAAM,WAAW,iBAAiB;IAChC,yDAAyD;IACzD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wFAAwF;AACxF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;CAC9C;AAED;;;;;;;;GAQG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;aAElC,WAAW,EAAE,MAAM;aACnB,eAAe,EAAE,MAAM;aACvB,cAAc,EAAE,MAAM;gBAFtB,WAAW,EAAE,MAAM,EACnB,eAAe,EAAE,MAAM,EACvB,cAAc,EAAE,MAAM;CAWzC;AAED,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kCAAkC;IAClC,MAAM,EAAE,OAAO,GAAG,SAAS,CAAC;CAC7B;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;AAarE,gDAAgD;AAChD,MAAM,WAAW,2BAA2B;IAC1C;;;OAGG;IACH,cAAc,CAAC,EAAE,oBAAoB,CAAC;CACvC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,2BAAgC,GACxC,OAAO,CAAC,qBAAqB,CAAC,CAiBhC;AAID;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB;AAC5B,kFAAkF;AAChF;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE;AACpB,4DAA4D;GAC1D;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAmBrE;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,kBAAkB,CAuCvE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant",
-  "version": "0.41.1",
+  "version": "0.41.3",
   "description": "Declarative infrastructure-as-code toolkit — TypeScript on Node.js",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",

package/src/cli/handlers/graph.ts

@@ -9,7 +9,7 @@ import { observeResources } from "../../lifecycle/observe";
 import { replaySnapshots, hasSnapshot } from "../../lifecycle/replay";
 import { loadChantConfig, environmentNames, loadChantConfigUpward, type ChantConfig } from "../../config";
 import { applyLiveEndpoint } from "../../live-endpoint";
-import { applyDetail, type DetailLevel } from "../../graph-detail";
+import { applyDetail, detailInertNotice, type DetailLevel } from "../../graph-detail";
 import { applyLens, parseLens } from "../../graph-lens";
 import { toMermaid } from "../../graph-mermaid";
 import { toDot } from "../../graph-dot";
@@ -343,7 +343,16 @@ async function runGraphLive(
       return 1;
     }
   }
-  ir = applyDetail(ir, (args.detail ?? 2) as DetailLevel);
+  {
+    const base = ir;
+    ir = applyDetail(ir, (args.detail ?? 2) as DetailLevel);
+    // #1489 — a --detail 3 that changed nothing says so instead of silently
+    // emitting the same bytes as --detail 2.
+    if (args.detail === 3) {
+      const notice = detailInertNotice(base, ir);
+      if (notice) console.error(formatWarning({ message: notice }));
+    }
+  }
 
   // Containment grouping (#779) → boundary boxes. Built after lens/detail and
   // filtered to surviving nodes, so a lens can't leave dangling group refs.
@@ -452,7 +461,10 @@ async function runComponentGraphView(
       id: name,
       kind: "Component",
       lexicon: "chant",
-      attrs: { wave: waveOf.get(name) ?? null },
+      // `liveNames` (#1491): the resources this component owns — declared, or
+      // the contract's `[name]` identity fallback — so a consumer can join
+      // the component DAG to the resource graph instead of guessing at kinds.
+      attrs: { wave: waveOf.get(name) ?? null, liveNames: graph.liveNames?.[name] ?? [name] },
       // Deep-link the node to its `*.component.ts` (behold's inspect panel).
       ...(graph.files?.[name] ? { sourceLoc: { file: graph.files[name] } } : {}),
     })),
@@ -558,7 +570,15 @@ async function runGraphView(
       return 1;
     }
   }
-  ir = applyDetail(ir, level as DetailLevel);
+  {
+    const base = ir;
+    ir = applyDetail(ir, level as DetailLevel);
+    // #1489 — same say-so as the live path: an inert --detail 3 names itself.
+    if (level === 3) {
+      const notice = detailInertNotice(base, ir);
+      if (notice) console.error(formatWarning({ message: notice }));
+    }
+  }
   return emitIr(ir, ctx, format);
 }
 

package/src/components/capability-plugin.test.ts

@@ -233,3 +233,24 @@ describe("MalformedCapabilityPluginError", () => {
     expect(err.name).toBe("MalformedCapabilityPluginError");
   });
 });
+
+// #1505 — plugin versions track the lockstep release instead of a literal that
+// goes stale on every `just release` (aws shipped "1.0.0" from its extraction;
+// the k8s plugin's authoring-time literal was stale one release later).
+describe("ownPackageVersion (#1505)", () => {
+  test("resolves this module's own package version — core's package.json, exactly", async () => {
+    const { ownPackageVersion } = await import("./capability-plugin");
+    const { readFileSync } = await import("node:fs");
+    const { version } = JSON.parse(
+      readFileSync(new URL("../../package.json", import.meta.url), "utf-8"),
+    ) as { version: string };
+    expect(ownPackageVersion(import.meta.url)).toBe(version);
+  });
+
+  test("the starter plugin reports that version, not a literal", async () => {
+    const { starterCapabilityPlugin } = await import("./starter-plugin");
+    const { ownPackageVersion } = await import("./capability-plugin");
+    expect(starterCapabilityPlugin.version).toBe(ownPackageVersion(import.meta.url));
+    expect(starterCapabilityPlugin.version).not.toBe("1.0.0");
+  });
+});

package/src/components/capability-plugin.ts

@@ -28,6 +28,9 @@
  * migration path and the "no behavior change" guarantee.
  */
 
+import { readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
 import type { Capability } from "./capability";
 
 /**
@@ -106,3 +109,33 @@ export function isCapabilityPlugin(value: unknown): value is CapabilityPlugin {
   const obj = value as Record<string, unknown>;
   return typeof obj.capabilities === "function";
 }
+
+/**
+ * The calling module's own package version, read from the nearest
+ * `package.json` above it (chant #1505).
+ *
+ * `CapabilityPlugin.version` documents itself as the plugin package's semver,
+ * but chant's packages release in lockstep, so a hardcoded literal goes stale
+ * on every `just release` — the aws plugin shipped `"1.0.0"` from the day it
+ * was extracted from the starter set (#681), and the k8s plugin's authoring-
+ * time `"0.41.0"` was stale one release later. Walking up from the module's
+ * own URL survives both the `src/` (development condition) and `dist/`
+ * layouts, and an npm install, without any build-time stamping.
+ *
+ * Returns `"0.0.0"` when no versioned `package.json` is found — a visible
+ * sentinel rather than a guess; nothing gates on the field.
+ */
+export function ownPackageVersion(moduleUrl: string): string {
+  let dir = dirname(fileURLToPath(moduleUrl));
+  for (;;) {
+    try {
+      const pkg = JSON.parse(readFileSync(join(dir, "package.json"), "utf-8")) as { version?: unknown };
+      if (typeof pkg.version === "string") return pkg.version;
+    } catch {
+      // No package.json here (or unreadable) — keep walking up.
+    }
+    const parent = dirname(dir);
+    if (parent === dir) return "0.0.0";
+    dir = parent;
+  }
+}

package/src/components/cli-support.test.ts

@@ -275,6 +275,23 @@ describe("computeComponentGraph", () => {
     expect(result.success).toBe(false);
     expect(result.error).toMatch(/unknown component|ghost/i);
   });
+
+  test("carries each component's liveNames, with the [name] identity fallback (#1491)", async () => {
+    await writeFile(
+      join(testDir, "pg.component.ts"),
+      `export const pg = { name: "postgres", liveNames: ["pgDeployment", "pgService", "pgClaim"], dependsOn: [], deploy: [{ phase: "Apply", steps: [{ kind: "shell", reason: "test" }] }] };`,
+    );
+    await writeFile(
+      join(testDir, "plain.component.ts"),
+      `export const plain = { name: "plain", dependsOn: [], deploy: [{ phase: "Apply", steps: [{ kind: "shell", reason: "test" }] }] };`,
+    );
+
+    const result = await computeComponentGraph(testDir);
+
+    expect(result.success).toBe(true);
+    expect(result.liveNames?.postgres).toEqual(["pgDeployment", "pgService", "pgClaim"]);
+    expect(result.liveNames?.plain).toEqual(["plain"]);
+  });
 });
 
 // ── runComponents (#585) ─────────────────────────────────────────────────────

package/src/components/cli-support.ts

@@ -136,6 +136,11 @@ export interface ComponentGraphResult {
    * so a renderer can deep-link a component node to source (`chant graph
    * --components --format ir` sets `sourceLoc` from this). */
   files?: Record<string, string>;
+  /** Component name → the live resource names it owns (#1491): the declared
+   * `liveNames`, or `[name]` when undeclared — the identity-join fallback the
+   * `Component` contract already specifies. This is what lets a consumer join
+   * the component DAG to the resource graph without guessing at kinds. */
+  liveNames?: Record<string, string[]>;
   error?: string;
 }
 
@@ -154,8 +159,13 @@ export async function computeComponentGraph(path: string, sandbox?: boolean): Pr
 
   // component name → its declaring file, relative to `path`, for node deep-links.
   const files: Record<string, string> = {};
+  // component name → owned live resource names (#1491), declared or the
+  // contract's identity fallback.
+  const liveNames: Record<string, string[]> = {};
   for (const [name, discovered] of result.components) {
     files[name] = relative(path, discovered.filePath);
+    const declared = discovered.component.liveNames;
+    liveNames[name] = declared && declared.length > 0 ? [...declared] : [name];
   }
 
   try {
@@ -164,7 +174,7 @@ export async function computeComponentGraph(path: string, sandbox?: boolean): Pr
     for (const c of driverComponents) {
       for (const dep of c.dependsOn ?? []) edges.push({ from: c.name, to: dep });
     }
-    return { success: true, order, waves, edges, files };
+    return { success: true, order, waves, edges, files, liveNames };
   } catch (err) {
     if (err instanceof UnknownDependencyError || err instanceof DependencyCycleError) {
       return { success: false, order: [], waves: [], edges: [], error: err.message };

package/src/components/starter-plugin.ts

@@ -42,7 +42,7 @@ import {
   healthGateCapability,
   shellCapability,
 } from "./verbs/index";
-import type { CapabilityPlugin } from "./capability-plugin";
+import { ownPackageVersion, type CapabilityPlugin } from "./capability-plugin";
 
 /**
  * Every `kind` in the starter verb set, grouped by family, per epic #551 and
@@ -99,7 +99,9 @@ function starterCapabilities(): Array<Capability<never, unknown>> {
  */
 export const starterCapabilityPlugin: CapabilityPlugin = {
   name: "starter",
-  version: "1.0.0",
+  // The core package's own version (#1505) — lockstep releases bump it, so a
+  // literal here would go stale every `just release`.
+  version: ownPackageVersion(import.meta.url),
   capabilities: starterCapabilities,
   families: () => STARTER_VERB_FAMILIES,
 };

package/src/graph-detail.test.ts

@@ -1,5 +1,5 @@
 import { describe, test, expect } from "vitest";
-import { applyDetail, DETAIL } from "./graph-detail";
+import { applyDetail, DETAIL, detailInertNotice } from "./graph-detail";
 import type { GraphIR } from "./graph-ir";
 
 // A small graph: a gcp vpc/subnet pair plus a k8s namespace and deployment that
@@ -90,3 +90,39 @@ describe("applyDetail", () => {
     });
   });
 });
+
+// #1489 — an inert --detail 3 names itself instead of silently emitting the
+// same bytes as --detail 2 (the k8s lexicon links by name/label convention, so
+// its graphs never have a producer attribute to annotate).
+describe("detailInertNotice (#1489)", () => {
+  test("detail 3 that added toAttr annotations: no notice", () => {
+    const detailed = applyDetail(base, DETAIL.ATTRIBUTES);
+    expect(detailInertNotice(base, detailed)).toBeUndefined();
+  });
+
+  test("edges without producer attributes: notice names the convention-linking cause", () => {
+    const labelLinked: GraphIR = {
+      nodes: [
+        { id: "svc", kind: "Service", lexicon: "k8s", attrs: { spec: { selector: { app: "web" } } } },
+        { id: "web", kind: "Deployment", lexicon: "k8s", attrs: { metadata: { labels: { app: "web" } } } },
+      ],
+      edges: [{ from: "svc", to: "web", kind: "ref", viaAttr: "spec.selector" }],
+      groups: {},
+    };
+    const detailed = applyDetail(labelLinked, DETAIL.ATTRIBUTES);
+    const notice = detailInertNotice(labelLinked, detailed);
+    expect(notice).toContain("--detail 3");
+    expect(notice).toContain("1 edge(s)");
+    expect(notice).toContain("identical to --detail 2");
+  });
+
+  test("no edges at all: notice says so", () => {
+    const edgeless: GraphIR = {
+      nodes: [{ id: "ns", kind: "Namespace", lexicon: "k8s", attrs: {} }],
+      edges: [],
+      groups: {},
+    };
+    const detailed = applyDetail(edgeless, DETAIL.ATTRIBUTES);
+    expect(detailInertNotice(edgeless, detailed)).toContain("no edges at all");
+  });
+});

package/src/graph-detail.ts

@@ -158,3 +158,31 @@ function findRefAttr(attrs: Record<string, unknown>, producer: string): string |
   visit(attrs);
   return found;
 }
+
+/**
+ * chant #1489 — the message to print when `--detail 3` changed nothing.
+ *
+ * T3's only addition over T2 is the producer attribute on `$ref`-derived
+ * edges. A graph whose resources link by name or label convention instead of
+ * attribute references (the k8s lexicon end to end) has nothing to annotate,
+ * so levels 2 and 3 come out byte-identical — which reads as a broken dial
+ * from any consumer stepping through the levels (behold#131 was filed over
+ * exactly this). Accepting a value that changes nothing without saying so is
+ * the bug; this names it.
+ *
+ * Returns the warning text, or undefined when detail 3 did add something.
+ * Callers print it through their own sink; the compare is over the two IRs
+ * the caller already holds, so this stays a pure function.
+ */
+export function detailInertNotice(base: GraphIR, detailed: GraphIR): string | undefined {
+  if (JSON.stringify(detailed) !== JSON.stringify(base)) return undefined;
+  const edges = base.edges.length;
+  const why =
+    edges === 0
+      ? "this graph has no edges at all"
+      : `none of this graph's ${edges} edge(s) reference a producer attribute — they link by name or label convention`;
+  return (
+    `--detail 3 adds the producer attribute to reference edges, but ${why}, ` +
+    `so the output is identical to --detail 2.`
+  );
+}

package/src/kubectl-context.test.ts

@@ -16,7 +16,7 @@ vi.mock("node:child_process", async () => {
 
 const { resolveClusterTarget, ClusterBindingMismatchError } = await import("./kubectl-context");
 
-describe("resolveClusterTarget (chant #1100)", () => {
+describe("resolveClusterTarget (chant #1100, #1488)", () => {
   beforeEach(() => {
     execMock.mockReset();
   });
@@ -34,9 +34,7 @@ describe("resolveClusterTarget (chant #1100)", () => {
     warnSpy.mockRestore();
   });
 
-  test("bound and ambient context matches: returns the bound context", async () => {
-    execMock.mockResolvedValue({ stdout: "prod-eks\n", stderr: "" });
-
+  test("bound: returns the bound context without ever probing the ambient one (#1488)", async () => {
     const target = await resolveClusterTarget(
       { k8s: { profiles: { prod: { context: "prod-eks" } } } },
       "prod",
@@ -44,11 +42,14 @@ describe("resolveClusterTarget (chant #1100)", () => {
     );
 
     expect(target).toEqual({ context: "prod-eks", source: "bound" });
-    expect(execMock).toHaveBeenCalledWith(expect.stringContaining("current-context"));
+    expect(execMock).not.toHaveBeenCalled();
   });
 
-  test("bound and ambient context cannot be determined: proceeds with the bound context anyway", async () => {
-    execMock.mockRejectedValue(new Error("no kubeconfig"));
+  test("bound while a different context is ambient: the binding wins, no refusal (#1488)", async () => {
+    // Ambient says staging-eks; the declared binding must be used regardless.
+    // Before #1488 this threw ClusterBindingMismatchError, which turned a
+    // healthy estate grey the moment any other project switched the context.
+    execMock.mockResolvedValue({ stdout: "staging-eks\n", stderr: "" });
 
     const target = await resolveClusterTarget(
       { k8s: { profiles: { prod: { context: "prod-eks" } } } },
@@ -59,23 +60,14 @@ describe("resolveClusterTarget (chant #1100)", () => {
     expect(target).toEqual({ context: "prod-eks", source: "bound" });
   });
 
-  test("bound and ambient context mismatches: refuses loudly, naming env/expected/ambient", async () => {
-    execMock.mockResolvedValue({ stdout: "staging-eks\n", stderr: "" });
-
-    const err: unknown = await resolveClusterTarget(
-      { k8s: { profiles: { prod: { context: "prod-eks" } } } },
-      "prod",
-      "k8s",
-    ).catch((e: unknown) => e);
-
-    expect(err).toBeInstanceOf(ClusterBindingMismatchError);
-    const mismatch = err as InstanceType<typeof ClusterBindingMismatchError>;
-    expect(mismatch.environment).toBe("prod");
-    expect(mismatch.expectedContext).toBe("prod-eks");
-    expect(mismatch.ambientContext).toBe("staging-eks");
-    expect(mismatch.message).toContain('environment "prod"');
-    expect(mismatch.message).toContain('"prod-eks"');
-    expect(mismatch.message).toContain('"staging-eks"');
+  test("ClusterBindingMismatchError still constructs and names all three parts (catchers rely on it)", () => {
+    const err = new ClusterBindingMismatchError("prod", "prod-eks", "staging-eks");
+    expect(err.environment).toBe("prod");
+    expect(err.expectedContext).toBe("prod-eks");
+    expect(err.ambientContext).toBe("staging-eks");
+    expect(err.message).toContain('environment "prod"');
+    expect(err.message).toContain('"prod-eks"');
+    expect(err.message).toContain('"staging-eks"');
   });
 
   test("bound for a different environment than the one requested: treated as unbound for this environment", async () => {

package/src/kubectl-context.ts

@@ -38,11 +38,13 @@ export interface K8sConfigShape {
 }
 
 /**
- * Thrown when an environment declares a cluster binding but the ambient
- * kubectl context disagrees with it. Refusing here — instead of silently
- * observing whichever cluster is ambient — is the fix for #1100: a
- * wrong-cluster read reports every declared resource as missing, which #1089
- * then classifies as a confident (and wrong) list of `create` actions.
+ * Historically thrown when an environment declared a cluster binding but the
+ * ambient kubectl context disagreed with it (#1100/#1155). As of #1488 the
+ * resolver no longer polices ambient at all — a declared binding is USED, not
+ * checked — so {@link resolveClusterTarget} never throws this anymore. The
+ * class stays exported because the k8s lexicon's read/write paths still catch
+ * it (converting a refusal into NOT-OBSERVED), and a custom connector may
+ * still throw it to get that classification.
  */
 export class ClusterBindingMismatchError extends Error {
   constructor(
@@ -77,8 +79,11 @@ export interface ResolvedClusterTarget {
  * `kubectl config current-context`; the k8s lexicon's typed API client
  * (chant #1074) supplies one that reads the parsed kubeconfig instead, so a
  * client that never needs the `kubectl` binary does not acquire a dependency
- * on it just to check the binding. Both answer the same question, so the
- * refusal semantics below are identical either way.
+ * on it just to check the binding.
+ *
+ * As of #1488 the resolver itself no longer reads ambient (a declared binding
+ * is used directly), so this hook only matters to callers that surface the
+ * ambient context in their own messages.
  */
 export type AmbientContextReader = () => Promise<string | undefined>;
 
@@ -112,13 +117,16 @@ export interface ResolveClusterTargetOptions {
  * - No binding declared: returns `{ source: "ambient" }` — unchanged
  *   behavior — but logs a visible warning identifying the caller and
  *   environment, so the fallback is never silent (#1100 acceptance).
- * - Binding declared and the ambient context agrees (or ambient can't be
- *   determined): returns `{ context: bound, source: "bound" }`. Callers
- *   should pass this context explicitly on every kubectl invocation rather
- *   than relying on it also being ambient.
- * - Binding declared and the ambient context disagrees: throws
- *   {@link ClusterBindingMismatchError} — a loud refusal instead of quietly
- *   reading the wrong cluster.
+ * - Binding declared: returns `{ context: bound, source: "bound" }`,
+ *   regardless of what is ambient (#1488). The declared binding is the
+ *   selection, not a check: callers pass this context explicitly on every
+ *   read and write, so whichever cluster `kubectl` happens to be pointed at
+ *   is irrelevant. Any k3d cluster another project creates mid-session used
+ *   to steal the ambient context and turn a healthy estate grey with
+ *   `read-failed` as the only explanation; now it cannot. A bound context
+ *   that is absent from the kubeconfig fails downstream in the typed client
+ *   with an error naming the context and the `k8s.profiles.<env>.context`
+ *   binding — never by falling back to ambient.
  */
 export async function resolveClusterTarget(
   config: Record<string, unknown>,
@@ -141,11 +149,6 @@ export async function resolveClusterTarget(
     return { source: "ambient" };
   }
 
-  const ambient = await (options.ambientContext ?? currentAmbientContext)();
-  if (ambient && ambient !== bound) {
-    throw new ClusterBindingMismatchError(environment, bound, ambient);
-  }
-
   return { context: bound, source: "bound" };
 }