@intentius/chant 0.52.1 → 0.52.2

package/dist/agents/checks.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Checks over discovered agent configuration (the `AGT` rule family).
+ *
+ * The threat model these encode is specific, and worth stating because it is
+ * not the same as the CI threat model the rest of `chant audit` covers.
+ *
+ * An agent config is *executable surface that runs with the user's own
+ * credentials on the user's own machine, usually with no review step*. An MCP
+ * server entry is a command line that runs at session start; a skill is
+ * instructions the model will follow; a permission allowlist decides what runs
+ * without anyone being asked. All three are commonly installed with one
+ * command, are rarely re-read after the day they were added, and — for the
+ * remote-sourced ones — can change upstream without any local edit.
+ *
+ * So the checks concentrate on three questions:
+ *   1. **What executes, and is it pinned?** (AGT001, AGT004)
+ *   2. **What can read secrets or reach the network in the clear?** (AGT002, AGT003)
+ *   3. **What runs without asking, and over how many projects?** (AGT005, AGT006)
+ * Plus AGT007, which flags config that is silently shadowed — where what the
+ * user reads is not what the agent runs.
+ *
+ * Every check is read-only and pure over a scan result, so a caller can run
+ * them against a fixture tree with no machine access.
+ */
+import type { AgentFinding, AgentScanResult } from "./types.js";
+/** Rule ids in this family, in report order. Kept in sync with `audit/catalog.ts` by a drift test. */
+export declare const AGENT_RULE_IDS: readonly ["AGT001", "AGT002", "AGT003", "AGT004", "AGT005", "AGT006", "AGT007", "AGT008"];
+/**
+ * Run every agent-config check over a scan result.
+ *
+ * Findings are ordered by severity, then site, then rule — so the report leads
+ * with what executes unreviewed rather than with instruction-file hygiene.
+ */
+export declare function checkAgentConfigs(scan: AgentScanResult): AgentFinding[];
+//# sourceMappingURL=checks.d.ts.map

package/dist/agents/checks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checks.d.ts","sourceRoot":"","sources":["../../src/agents/checks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAmB,YAAY,EAAE,eAAe,EAAiB,MAAM,SAAS,CAAC;AAE7F,sGAAsG;AACtG,eAAO,MAAM,cAAc,2FASjB,CAAC;AA8WX;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,YAAY,EAAE,CAmBvE"}

package/dist/agents/discover.d.ts

@@ -0,0 +1,86 @@
+/**
+ * Find every agent configuration on this machine and normalize it.
+ *
+ * The scan is location-driven, not walk-driven. Agent config does not hide in
+ * arbitrary places: each harness publishes a small, fixed set of paths it
+ * reads, so this module probes that list rather than crawling the filesystem.
+ * That keeps a full three-scope scan to a few dozen `stat` calls, and — more
+ * importantly — makes "we looked and it wasn't there" a fact the report can
+ * state (`AgentScanResult.probed`) instead of an absence of evidence.
+ *
+ * Two shapes recur across harnesses and are handled once here:
+ *
+ *   - **A config is many files.** Claude Code merges `settings.json`,
+ *     `settings.local.json`, `mcp.json`, and `~/.claude.json` into one
+ *     effective configuration; codex puts the equivalent in one TOML file.
+ *     Both land as a single {@link AgentConfigSite} with `sources` listing
+ *     every file that contributed.
+ *   - **MCP servers are declared in more than one place per scope.** Claude
+ *     Code alone accepts them in `~/.claude/mcp.json`, `~/.claude.json`'s
+ *     top-level `mcpServers`, and per-project entries under `~/.claude.json`'s
+ *     `projects` map. `mergeMcp` collects all of them and keeps the *first*
+ *     declaration of a name, matching the harness's own precedence.
+ *
+ * Nothing here judges what it finds — `checks.ts` owns that. Discovery's only
+ * editorial act is dropping sites with no content at all, so an empty
+ * `~/.gemini` directory doesn't become a resource.
+ */
+import type { AgentRuntime, AgentScanResult, AgentScope, McpServerDecl } from "./types.js";
+export interface ScanOptions {
+    /** Scopes to probe. Defaults to all three. */
+    scopes?: readonly AgentScope[];
+    /** Harnesses to probe. Defaults to all five. */
+    runtimes?: readonly AgentRuntime[];
+    /** Home directory. Injectable so tests can scan a fixture tree instead of the real machine. */
+    home?: string;
+    /** Platform, which decides where system-scope policy lives. Injectable for the same reason. */
+    platform?: NodeJS.Platform;
+    /** Directories to treat as project scope. Defaults to `[process.cwd()]`. */
+    projectRoots?: string[];
+}
+/**
+ * Machine-wide policy locations, by platform. Claude Code is the only harness
+ * of the five that defines a system scope today; the others are user-scoped
+ * only, which is itself worth reporting.
+ */
+export declare function systemSettingsPaths(platform: NodeJS.Platform): string[];
+/** Parse a markdown file's `---` YAML frontmatter. Returns `{}` when there is none. */
+export declare function frontmatter(markdown: string): Record<string, unknown>;
+/**
+ * Normalize one harness's `mcpServers` / `mcp_servers` map.
+ *
+ * Both dialects agree on the substance — a name mapping to either a `command`
+ * + `args` (stdio) or a `url` (http/sse) — so one normalizer serves Claude
+ * Code's JSON and codex's TOML. Keys this model names are lifted out; whatever
+ * remains is preserved in `extra` so a check can read a header or timeout
+ * without this function having to know about it.
+ */
+export declare function normalizeMcpServers(raw: unknown, source: string): McpServerDecl[];
+/**
+ * Scan the machine and return every agent configuration found.
+ *
+ * Sites are ordered system → user → project, matching the order the harnesses
+ * merge them, so a reader scanning the report sees broad policy before the
+ * narrow overrides that modify it.
+ */
+export declare function scanAgentConfigs(opts?: ScanOptions): AgentScanResult;
+/**
+ * Every project root the harness has registered on this machine, from
+ * `~/.claude.json`'s `projects` map.
+ *
+ * This is what makes `--all-projects` possible without crawling the disk: the
+ * harness already keeps the list of every project it has been opened in.
+ *
+ * Roots whose directory no longer exists are dropped. A deleted project is not
+ * something a user can act on, and counting it would make the "N projects not
+ * scanned" note overstate the gap — on a machine with 77 registered projects,
+ * 12 of them were stale.
+ */
+export declare function registeredProjectRoots(home: string): string[];
+/**
+ * Count registered project roots this scan did not visit. A user with dozens of
+ * registered projects should be told that a cwd-scoped scan saw one of them,
+ * rather than being left to assume it saw all.
+ */
+export declare function unscannedProjectCount(home: string, scannedRoots: string[]): number;
+//# sourceMappingURL=discover.d.ts.map

package/dist/agents/discover.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover.d.ts","sourceRoot":"","sources":["../../src/agents/discover.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAOH,OAAO,KAAK,EAEV,YAAY,EACZ,eAAe,EACf,UAAU,EAGV,aAAa,EAOd,MAAM,SAAS,CAAC;AAUjB,MAAM,WAAW,WAAW;IAC1B,8CAA8C;IAC9C,MAAM,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IAC/B,gDAAgD;IAChD,QAAQ,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IACnC,+FAA+F;IAC/F,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+FAA+F;IAC/F,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,EAAE,CAIvE;AA6ID,uFAAuF;AACvF,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAWrE;AAQD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,aAAa,EAAE,CAqCjF;AAmjBD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,GAAE,WAAgB,GAAG,eAAe,CAsCxE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAoB7D;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM,CAGlF"}

package/dist/agents/importer.d.ts

@@ -0,0 +1,46 @@
+/**
+ * The seam between neutral agent-config discovery and a lexicon's vocabulary.
+ *
+ * `discover.ts` deliberately knows nothing about chant resources — it reads
+ * five harnesses' config dialects and stops. Turning an {@link AgentConfigSite}
+ * into resources is a statement about a *target* (fountain's `Agent` and
+ * `Environment`, today), and that judgement belongs to the lexicon that owns
+ * those types, exactly as `templateParser()` puts CloudFormation's JSON
+ * vocabulary in the aws lexicon rather than in core.
+ *
+ * So a lexicon that can express local agent configuration implements
+ * {@link AgentConfigImporter} and returns it from
+ * `LexiconPlugin.agentConfigImporter()`. `chant import --agents` loads the
+ * plugin, hands it the scan, and pipes the resulting IR through the same
+ * `templateGenerator()` every other import path uses.
+ */
+import type { TemplateIR } from "../import/parser.js";
+import type { AgentConfigSite } from "./types.js";
+/** A site the importer could not express, and why. */
+export interface SkippedSite {
+    siteId: string;
+    reason: string;
+}
+/**
+ * The result of re-expressing a scan.
+ *
+ * The three report arrays exist because this conversion is lossy in ways the
+ * user must be told about: a site that couldn't be mapped, a required property
+ * that had to be defaulted, and a secret that was rewritten rather than copied
+ * are all things a reader would otherwise discover only by diffing the output
+ * against their own config.
+ */
+export interface AgentImportOutcome {
+    ir: TemplateIR;
+    /** Sites that could not be re-expressed in this lexicon's vocabulary. */
+    skipped: SkippedSite[];
+    /** Site ids where a required property was filled with a default rather than a discovered value. */
+    unmappedModel: string[];
+    /** Site ids where a literal credential was replaced with an environment reference. */
+    redactedSecrets: string[];
+}
+/** Converts discovered agent configuration into a lexicon's resource IR. */
+export interface AgentConfigImporter {
+    toTemplateIR(sites: AgentConfigSite[]): AgentImportOutcome;
+}
+//# sourceMappingURL=importer.d.ts.map

package/dist/agents/importer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"importer.d.ts","sourceRoot":"","sources":["../../src/agents/importer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE/C,sDAAsD;AACtD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,UAAU,CAAC;IACf,yEAAyE;IACzE,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,mGAAmG;IACnG,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,sFAAsF;IACtF,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,4EAA4E;AAC5E,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,kBAAkB,CAAC;CAC5D"}

package/dist/agents/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Agent-configuration discovery and checks.
+ *
+ * Finds the agent configs on a machine (`discover.ts`), judges them
+ * (`checks.ts`), and normalizes both onto one vendor-neutral model
+ * (`types.ts`). The two consumers are `chant audit --agents`, which reports on
+ * what it finds, and `chant import --agents`, which re-expresses it as chant
+ * code via a lexicon's IR mapper.
+ */
+export type { AgentConfigSite, AgentFinding, AgentRuntime, AgentScanResult, AgentScope, CommandDecl, InstructionFile, McpServerDecl, McpTransport, PermissionConfig, PluginDecl, SkillDecl, SkillOrigin, SubagentDecl, } from "./types.js";
+export { AGENT_RUNTIMES, AGENT_SCOPES } from "./types.js";
+export { scanAgentConfigs, normalizeMcpServers, frontmatter, systemSettingsPaths, unscannedProjectCount, type ScanOptions } from "./discover.js";
+export { checkAgentConfigs, AGENT_RULE_IDS } from "./checks.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/agents/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/agents/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,YAAY,EACV,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,UAAU,EACV,WAAW,EACX,eAAe,EACf,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,SAAS,EACT,WAAW,EACX,YAAY,GACb,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,WAAW,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9I,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC"}

package/dist/agents/types.d.ts

@@ -0,0 +1,196 @@
+/**
+ * The normalized model for an agent configuration found on a machine.
+ *
+ * Five harnesses (claude, codex, gemini, opencode, cursor) each spell the same
+ * four ideas differently — standing instructions, tool servers, reusable
+ * skills, and ambient settings. `discover.ts` reads each harness's own dialect
+ * and lands here; everything downstream (`checks.ts`, the report, the fountain
+ * IR mapping) reads only this shape and never a vendor file format again.
+ *
+ * The `AgentConfigSite` boundary is deliberately "one config that governs one
+ * root, for one runtime" rather than "one file". A single Claude Code site is
+ * assembled from `CLAUDE.md` + `settings.json` + `settings.local.json` +
+ * `mcp.json` + `~/.claude.json` + a `skills/` tree — six files that are only
+ * meaningful together, and that the agent itself experiences as one merged
+ * configuration. `sources` keeps the receipts so a finding can point at the
+ * actual file the reader has to edit.
+ */
+/**
+ * Which agent harness a config belongs to. The first four are exactly
+ * fountain's `Agent.runtime` enum, so they re-express losslessly; `cursor` is
+ * discovered and reported but has no fountain runtime to map onto (see
+ * `MAPPABLE_RUNTIMES` in the fountain import mapper).
+ */
+export type AgentRuntime = "claude" | "codex" | "gemini" | "opencode" | "cursor";
+/**
+ * Blast radius of a config, in the order harnesses merge them (later wins).
+ *
+ * - `system` — machine-wide policy, typically administrator-installed and not
+ *   user-editable (Claude Code's `managed-settings.json`).
+ * - `user` — the home directory. Applies to *every* project the user opens,
+ *   which is what makes it the highest-leverage scope to audit.
+ * - `project` — checked into (or sitting beside) a repo. Narrowest scope, but
+ *   the one most likely to arrive from someone else.
+ */
+export type AgentScope = "system" | "user" | "project";
+export declare const AGENT_SCOPES: readonly AgentScope[];
+export declare const AGENT_RUNTIMES: readonly AgentRuntime[];
+/** A standing-instructions file (CLAUDE.md, AGENTS.md, GEMINI.md, .cursorrules). */
+export interface InstructionFile {
+    /** Absolute path on disk. */
+    path: string;
+    /** File contents. Read in full — these become fountain's `Agent.system`. */
+    content: string;
+    bytes: number;
+}
+/** How an MCP server is reached. `unknown` when the declaration has neither a command nor a URL. */
+export type McpTransport = "stdio" | "http" | "sse" | "unknown";
+/** One MCP server declaration, normalized across the several files that can declare one. */
+export interface McpServerDecl {
+    name: string;
+    transport: McpTransport;
+    /** The file this declaration was read from. */
+    source: string;
+    /** stdio: the executable. */
+    command?: string;
+    /** stdio: argv after the executable. */
+    args?: string[];
+    /** http/sse: the endpoint. */
+    url?: string;
+    /** Environment handed to the server process. Values are kept verbatim — `checks.ts` is what decides whether one looks like a literal credential. */
+    env?: Record<string, string>;
+    /** Extra keys the harness accepted that this model doesn't name (headers, timeouts, …). */
+    extra?: Record<string, unknown>;
+}
+/**
+ * Where a skill came from. This distinction is the whole point of the skill
+ * checks: a `local` skill is text the user can read in their own filesystem,
+ * while `plugin`/`marketplace` skills are fetched from a remote and can change
+ * under the user without any edit to their machine.
+ */
+export type SkillOrigin = "local" | "plugin" | "marketplace";
+/** One skill available to the agent. */
+export interface SkillDecl {
+    name: string;
+    origin: SkillOrigin;
+    /** Absolute path to the skill directory or SKILL.md, when it exists on disk. */
+    path?: string;
+    /** Remote source (`owner/repo`, a URL) for plugin/marketplace skills. */
+    source?: string;
+    /** Version pin on `source`: a tag, branch, or sha. Absence is what AGT004 flags. */
+    ref?: string;
+    /** SKILL.md body, when read. Becomes fountain's inline `{name, content}` skill form. */
+    content?: string;
+    /** The skill's own frontmatter `description`, used for the fountain `description`. */
+    description?: string;
+}
+/** A subagent / custom agent definition (`.claude/agents/*.md`). */
+export interface SubagentDecl {
+    name: string;
+    path: string;
+    description?: string;
+    /** Tool allowlist declared in frontmatter, if any. */
+    tools?: string;
+    model?: string;
+}
+/** A slash command definition (`.claude/commands/*.md`, `~/.codex/prompts`). */
+export interface CommandDecl {
+    name: string;
+    path: string;
+    description?: string;
+}
+/** An installed plugin — a bundle that can inject skills, commands, and MCP servers at once. */
+export interface PluginDecl {
+    name: string;
+    /** Marketplace or repo the plugin was installed from. */
+    marketplace?: string;
+    /** Version pin, when the install recorded one. */
+    ref?: string;
+    enabled: boolean;
+    /**
+     * True when the plugin tracks a remote the user does not control.
+     *
+     * The pinning checks turn on this: a plugin vendored from a local directory
+     * cannot change underneath the user, so "pin it" is not advice that applies.
+     * Harnesses ship bundled plugins from local paths (codex's
+     * `source_type = "local"`), and reporting those as unpinned supply chain is
+     * noise that trains the reader to skip the rule.
+     */
+    remote: boolean;
+}
+/** Tool-permission configuration, normalized from a harness's own settings shape. */
+export interface PermissionConfig {
+    allow?: string[];
+    deny?: string[];
+    ask?: string[];
+    defaultMode?: string;
+    /** True when the config disables a confirmation prompt outright. */
+    bypassesPrompts?: boolean;
+}
+/**
+ * One complete agent configuration governing one root, for one runtime.
+ *
+ * Assembled from every file at that scope the harness would merge together —
+ * see the module docstring for why the file is not the unit.
+ */
+export interface AgentConfigSite {
+    /** Stable slug, unique within a scan: `user-claude`, `project-claude-chant`. Becomes the fountain resource name. */
+    id: string;
+    scope: AgentScope;
+    runtime: AgentRuntime;
+    /** Directory this configuration governs. For `user` scope, the home directory. */
+    root: string;
+    /** Every file that contributed, absolute. A site with no sources is never emitted. */
+    sources: string[];
+    instructions: InstructionFile[];
+    mcpServers: McpServerDecl[];
+    skills: SkillDecl[];
+    subagents: SubagentDecl[];
+    commands: CommandDecl[];
+    plugins: PluginDecl[];
+    /** Environment variables the harness injects into every session. */
+    env: Record<string, string>;
+    permissions?: PermissionConfig;
+    /** Default model pinned by the config, when set. */
+    model?: string;
+    /**
+     * Raw merged settings, kept so a check can interrogate a key this model
+     * doesn't name without a schema change. Not used for codegen.
+     */
+    settings: Record<string, unknown>;
+}
+/** Everything one scan found, plus what it couldn't read. */
+export interface AgentScanResult {
+    sites: AgentConfigSite[];
+    /** Locations probed and found absent — useful for "is it really not configured, or did I not look?" */
+    probed: string[];
+    /** Paths that existed but could not be read or parsed, with the reason. */
+    unreadable: Array<{
+        path: string;
+        reason: string;
+    }>;
+    /**
+     * Every MCP declaration each site saw, keyed by site id — including names
+     * that lost the first-wins merge and so do not appear in
+     * `AgentConfigSite.mcpServers`. Diagnostic data for the shadowing check
+     * (AGT007), kept beside the sites rather than on them because it describes
+     * the *discovery*, not the configuration being re-expressed.
+     */
+    declarations: Record<string, McpServerDecl[]>;
+}
+/** A finding raised by an agent-config check against a discovered site. */
+export interface AgentFinding {
+    /** Catalog id, e.g. `AGT001`. */
+    checkId: string;
+    severity: "error" | "warning" | "info";
+    message: string;
+    /** The specific file a reader has to open to fix this. */
+    file: string;
+    /** The site the finding belongs to. */
+    siteId: string;
+    scope: AgentScope;
+    runtime: AgentRuntime;
+    /** The named thing within the site (an MCP server name, a skill name). */
+    entity?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/agents/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/agents/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEjF;;;;;;;;;GASG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAC;AAEvD,eAAO,MAAM,YAAY,EAAE,SAAS,UAAU,EAA2C,CAAC;AAC1F,eAAO,MAAM,cAAc,EAAE,SAAS,YAAY,EAAiE,CAAC;AAEpH,oFAAoF;AACpF,MAAM,WAAW,eAAe;IAC9B,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,oGAAoG;AACpG,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC;AAEhE,4FAA4F;AAC5F,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,YAAY,CAAC;IACxB,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,6BAA6B;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,8BAA8B;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oJAAoJ;IACpJ,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,2FAA2F;IAC3F,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,QAAQ,GAAG,aAAa,CAAC;AAE7D,wCAAwC;AACxC,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,WAAW,CAAC;IACpB,gFAAgF;IAChF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oFAAoF;IACpF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wFAAwF;IACxF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,oEAAoE;AACpE,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sDAAsD;IACtD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,gFAAgF;AAChF,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,gGAAgG;AAChG,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kDAAkD;IAClD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB;;;;;;;;OAQG;IACH,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,qFAAqF;AACrF,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,oHAAoH;IACpH,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,YAAY,CAAC;IACtB,kFAAkF;IAClF,IAAI,EAAE,MAAM,CAAC;IACb,sFAAsF;IACtF,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,oEAAoE;IACpE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,6DAA6D;AAC7D,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,uGAAuG;IACvG,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,2EAA2E;IAC3E,UAAU,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD;;;;;;OAMG;IACH,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;CAC/C;AAED,2EAA2E;AAC3E,MAAM,WAAW,YAAY;IAC3B,iCAAiC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,uCAAuC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,YAAY,CAAC;IACtB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}

package/dist/audit/catalog.d.ts

@@ -69,6 +69,8 @@ export declare const CF_SECRETS: Authority;
 export declare const CF_ROUTES: Authority;
 export declare const CF_ENVIRONMENTS: Authority;
 export declare const CF_STATIC_ASSETS: Authority;
+export declare const CWE_HARDCODED_CREDS: Authority;
+export declare const CWE_CLEARTEXT: Authority;
 /**
  * Finding category per rule (#415). Curated: security rules are those that
  * cite an authority or guard an exposure; correctness rules flag structural
@@ -81,7 +83,8 @@ export declare const RULE_CATEGORY: Record<string, Category>;
  * CloudFormation ids (COR/EXT) that aren't owned by a single lexicon. Every
  * per-provider block moved to its lexicon's `auditCatalog()` (#687): WAW→aws,
  * WGC→gcp, AZR→azure, DKRD→docker, WK8/ARGO→k8s, WHM→helm, GHA→github,
- * WGL→gitlab, WFJ→forgejo. `resolveAuditCatalog` merges those over this map.
+ * WGL→gitlab, WFJ→forgejo. `resolveAuditCatalog` merges those over this map,
+ * alongside the lexicon-independent SEC/WRG/AGT families core owns outright.
  */
 export declare const RULE_CATALOG: Record<string, RuleMeta>;
 /**

package/dist/audit/catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../src/audit/catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,MAAM,IAAI,GAAG,cAAc,GAAG,aAAa,CAAC;AAElD,wFAAwF;AACxF,MAAM,MAAM,OAAO,GAAG,eAAe,GAAG,UAAU,CAAC;AAEnD;;;;;;;;;GASG;AACH,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,aAAa,GAAG,eAAe,GAAG,YAAY,CAAC;AAEnF,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,IAAI,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;IACjB,6EAA6E;IAC7E,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;IACxB,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,SAAS,EAAE,OAAO,CAAC;CACpB;AAGD,eAAO,MAAM,eAAe,EAAE,SAG7B,CAAC;AACF,eAAO,MAAM,QAAQ,EAAE,SAGtB,CAAC;AACF,eAAO,MAAM,gBAAgB,EAAE,SAG9B,CAAC;AACF,eAAO,MAAM,cAAc,EAAE,SAG5B,CAAC;AACF,eAAO,MAAM,YAAY,EAAE,SAG1B,CAAC;AACF,eAAO,MAAM,MAAM,EAAE,SAGpB,CAAC;AACF,eAAO,MAAM,UAAU,EAAE,SAGxB,CAAC;AACF,eAAO,MAAM,OAAO,EAAE,SAGrB,CAAC;AACF,eAAO,MAAM,OAAO,EAAE,SAGrB,CAAC;AACF,eAAO,MAAM,WAAW,EAAE,SAGzB,CAAC;AACF,eAAO,MAAM,kBAAkB,EAAE,SAGhC,CAAC;AACF,eAAO,MAAM,cAAc,EAAE,SAG5B,CAAC;AACF,eAAO,MAAM,cAAc,EAAE,SAG5B,CAAC;AACF,eAAO,MAAM,UAAU,EAAE,SAGxB,CAAC;AACF,eAAO,MAAM,SAAS,EAAE,SAGvB,CAAC;AACF,eAAO,MAAM,eAAe,EAAE,SAG7B,CAAC;AACF,eAAO,MAAM,gBAAgB,EAAE,SAG9B,CAAC;AAuBF;;;;;GAKG;AACH,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAmBlD,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CA4BjD,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,SAAS,CACvB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,QAAQ,CAAA;CAAE,GACtD,QAAQ,CAGV;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAqB/F;AAED,yDAAyD;AACzD,wBAAgB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAEzD;AAED,wEAAwE;AACxE,eAAO,MAAM,cAAc,mCAAmC,CAAC;AAE/D,mEAAmE;AACnE,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAE7C"}
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../src/audit/catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,MAAM,IAAI,GAAG,cAAc,GAAG,aAAa,CAAC;AAElD,wFAAwF;AACxF,MAAM,MAAM,OAAO,GAAG,eAAe,GAAG,UAAU,CAAC;AAEnD;;;;;;;;;GASG;AACH,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,aAAa,GAAG,eAAe,GAAG,YAAY,CAAC;AAEnF,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,IAAI,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;IACjB,6EAA6E;IAC7E,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;IACxB,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,SAAS,EAAE,OAAO,CAAC;CACpB;AAGD,eAAO,MAAM,eAAe,EAAE,SAG7B,CAAC;AACF,eAAO,MAAM,QAAQ,EAAE,SAGtB,CAAC;AACF,eAAO,MAAM,gBAAgB,EAAE,SAG9B,CAAC;AACF,eAAO,MAAM,cAAc,EAAE,SAG5B,CAAC;AACF,eAAO,MAAM,YAAY,EAAE,SAG1B,CAAC;AACF,eAAO,MAAM,MAAM,EAAE,SAGpB,CAAC;AACF,eAAO,MAAM,UAAU,EAAE,SAGxB,CAAC;AACF,eAAO,MAAM,OAAO,EAAE,SAGrB,CAAC;AACF,eAAO,MAAM,OAAO,EAAE,SAGrB,CAAC;AACF,eAAO,MAAM,WAAW,EAAE,SAGzB,CAAC;AACF,eAAO,MAAM,kBAAkB,EAAE,SAGhC,CAAC;AACF,eAAO,MAAM,cAAc,EAAE,SAG5B,CAAC;AACF,eAAO,MAAM,cAAc,EAAE,SAG5B,CAAC;AACF,eAAO,MAAM,UAAU,EAAE,SAGxB,CAAC;AACF,eAAO,MAAM,SAAS,EAAE,SAGvB,CAAC;AACF,eAAO,MAAM,eAAe,EAAE,SAG7B,CAAC;AACF,eAAO,MAAM,gBAAgB,EAAE,SAG9B,CAAC;AACF,eAAO,MAAM,mBAAmB,EAAE,SAGjC,CAAC;AACF,eAAO,MAAM,aAAa,EAAE,SAG3B,CAAC;AAsCF;;;;;GAKG;AACH,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CA8BlD,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAkFjD,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,SAAS,CACvB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,QAAQ,CAAA;CAAE,GACtD,QAAQ,CAGV;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAqB/F;AAED,yDAAyD;AACzD,wBAAgB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAEzD;AAED,wEAAwE;AACxE,eAAO,MAAM,cAAc,mCAAmC,CAAC;AAE/D,mEAAmE;AACnE,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAE7C"}

package/dist/audit/report.d.ts

@@ -28,6 +28,14 @@ export interface RenderOptions {
     notes?: string[];
     /** Resolved audit catalog (core static + active lexicons' contributions, #687). Defaults to core's static catalog. */
     catalog?: Record<string, RuleMeta>;
+    /**
+     * Markdown heading text and level for the report's own title. `chant audit
+     * --agents` embeds this report under its inventory, so it renders as a
+     * level-2 "Findings" section rather than a second `# chant audit` H1 in a
+     * document that already has one.
+     */
+    title?: string;
+    headingLevel?: 1 | 2;
 }
 /** Render an audit report as Markdown. */
 export declare function renderMarkdown(findings: AuditFinding[], opts?: RenderOptions): string;

package/dist/audit/report.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../src/audit/report.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,EAAc,KAAK,QAAQ,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAc5C,MAAM,WAAW,aAAa;IAC5B,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,iEAAiE;IACjE,UAAU,CAAC,EAAE,YAAY,CAAC,YAAY,CAAC,CAAC;IACxC,8EAA8E;IAC9E,aAAa,CAAC,EAAE,YAAY,CAAC,eAAe,CAAC,CAAC;IAC9C,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,sHAAsH;IACtH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;CACpC;AAoDD,0CAA0C;AAC1C,wBAAgB,cAAc,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,IAAI,GAAE,aAAkB,GAAG,MAAM,CAqCzF"}
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../src/audit/report.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,EAAc,KAAK,QAAQ,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAc5C,MAAM,WAAW,aAAa;IAC5B,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,iEAAiE;IACjE,UAAU,CAAC,EAAE,YAAY,CAAC,YAAY,CAAC,CAAC;IACxC,8EAA8E;IAC9E,aAAa,CAAC,EAAE,YAAY,CAAC,eAAe,CAAC,CAAC;IAC9C,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,sHAAsH;IACtH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACnC;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;CACtB;AAoDD,0CAA0C;AAC1C,wBAAgB,cAAc,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,IAAI,GAAE,aAAkB,GAAG,MAAM,CAqCzF"}

package/dist/audit/rules-doc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rules-doc.d.ts","sourceRoot":"","sources":["../../src/audit/rules-doc.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAqCH;;;;;;GAMG;AACH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,MAAM,CAAC,CAqB5D"}
+{"version":3,"file":"rules-doc.d.ts","sourceRoot":"","sources":["../../src/audit/rules-doc.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA2CH;;;;;;GAMG;AACH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,MAAM,CAAC,CAqB5D"}

package/dist/cli/commands/audit-agents.d.ts

@@ -0,0 +1,83 @@
+/**
+ * `chant audit --agents` — audit the agent configuration on this machine.
+ *
+ * This is a different *subject* from the rest of `chant audit` (a machine, not
+ * a repo) but deliberately the same *product*: the same tiering, the same
+ * five output formats, the same rule-catalog links. A reader who already knows
+ * how to read a chant audit report can read this one, and the HTML/SARIF/JSON
+ * consumers downstream need no changes.
+ *
+ * The bridge is {@link toAuditFindings}: an `AgentFinding` is projected onto
+ * the `AuditFinding` shape the renderers already take, with the site id in
+ * `entity` so a reader can tell which configuration a finding came from.
+ *
+ * Two things this command adds that a repo audit has no need for:
+ *
+ *  - **An inventory.** "What is configured on this machine" is the primary
+ *    question here; findings are secondary. A clean scan should still print
+ *    the sites it found, because most users have never seen the full list.
+ *  - **Coverage honesty.** The scan probes a fixed set of locations, so it can
+ *    state what it looked for and didn't find, what it couldn't parse, and how
+ *    many registered projects it did not visit. An inventory that quietly
+ *    omits half the machine is worse than no inventory.
+ */
+import type { AgentConfigSite, AgentFinding, AgentRuntime, AgentScanResult, AgentScope } from "../../agents/types.js";
+import type { AuditFinding } from "../../audit/core.js";
+import { type ReportTheme } from "../../audit/report-html.js";
+import type { AuditFailOn, AuditFormat, AuditTier } from "./audit.js";
+export interface AuditAgentsOptions {
+    format?: AuditFormat;
+    tier?: AuditTier;
+    failOn?: AuditFailOn;
+    /** Scopes to scan. Defaults to all three. */
+    scopes?: readonly AgentScope[];
+    /** Harnesses to scan. Defaults to all five. */
+    runtimes?: readonly AgentRuntime[];
+    /** Project roots to scan at project scope. Defaults to `[cwd]`. */
+    projectRoots?: string[];
+    /** Home directory override — injectable so tests scan a fixture tree. */
+    home?: string;
+    platform?: NodeJS.Platform;
+    /** Write the report here instead of returning it for stdout. */
+    output?: string;
+    theme?: ReportTheme;
+    template?: string;
+    now?: string;
+    toolVersion?: string;
+}
+export interface AuditAgentsResult {
+    success: boolean;
+    output: string;
+    findings: AgentFinding[];
+    scan: AgentScanResult;
+    exitCode: number;
+    wroteTo?: string;
+    error?: string;
+}
+/**
+ * Project an agent finding onto the audit renderers' finding shape.
+ *
+ * `lexicon` is set to `"agents"` — the renderers only use it as a grouping
+ * label, and calling this family what it is keeps a mixed report readable.
+ */
+export declare function toAuditFindings(findings: AgentFinding[]): AuditFinding[];
+/** One-line summary of what a site carries, e.g. `3 MCP servers · 11 skills`. */
+export declare function siteSummary(site: AgentConfigSite): string;
+/**
+ * Coverage caveats. Stated even when empty-ish, because the value of an
+ * inventory depends entirely on the reader knowing its edges.
+ */
+export declare function agentCoverageNotes(scan: AgentScanResult, opts: {
+    home: string;
+    projectRoots: string[];
+    scopes: readonly AgentScope[];
+}): string[];
+/**
+ * Scan the machine's agent configuration and render a report.
+ *
+ * Pure with respect to the filesystem apart from the scan itself and an
+ * optional `--output` write, so it can be driven from tests against a fixture
+ * home directory.
+ */
+export declare function auditAgentsCommand(opts?: AuditAgentsOptions): AuditAgentsResult;
+//# sourceMappingURL=audit-agents.d.ts.map

package/dist/cli/commands/audit-agents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-agents.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/audit-agents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEnH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAGrD,OAAO,EAAc,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEvE,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEnE,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,6CAA6C;IAC7C,MAAM,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IAC/B,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IACnC,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,yEAAyE;IACzE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,IAAI,EAAE,eAAe,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,CASxE;AAYD,iFAAiF;AACjF,wBAAgB,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,MAAM,CAazD;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,SAAS,UAAU,EAAE,CAAA;CAAE,GAAG,MAAM,EAAE,CAiCjJ;AAyJD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,GAAE,kBAAuB,GAAG,iBAAiB,CA6EnF"}

package/dist/cli/commands/carve-bridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"carve-bridge.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/carve-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,OAAO,EAAkB,KAAK,UAAU,EAAuB,MAAM,wBAAwB,CAAC;AAK9F,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,8BAA8B;IAC9B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,mDAAmD;IACnD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AASD,wBAAsB,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA+GtF;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAqCnE"}
+{"version":3,"file":"carve-bridge.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/carve-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,OAAO,EAAkB,KAAK,UAAU,EAAuB,MAAM,wBAAwB,CAAC;AAK9F,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,8BAA8B;IAC9B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,mDAAmD;IACnD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AASD,wBAAsB,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAiItF;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAqCnE"}

package/dist/cli/commands/carve-emit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"carve-emit.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/carve-emit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,EAAqC,KAAK,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAI5F,OAAO,EAIL,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACxB,MAAM,6BAA6B,CAAC;AAErC,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAEhE,MAAM,WAAW,gBAAgB;IAC/B,6CAA6C;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,2DAA2D;AAC3D,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,UAAU,EAAE,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;CAC7F;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,oCAAoC;IACpC,MAAM,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IAC5B,4BAA4B;IAC5B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,iFAAiF;IACjF,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,2FAA2F;IAC3F,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;IACzB,sFAAsF;IACtF,MAAM,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC9B,oEAAoE;IACpE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,CAyGrG;AAiJD,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAwD/D"}
+{"version":3,"file":"carve-emit.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/carve-emit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,EAAqC,KAAK,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAI5F,OAAO,EAAkB,KAAK,aAAa,EAAE,KAAK,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAE1G,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAUhE,MAAM,WAAW,gBAAgB;IAC/B,6CAA6C;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,2DAA2D;AAC3D,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,UAAU,EAAE,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;CAC7F;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,oCAAoC;IACpC,MAAM,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IAC5B,4BAA4B;IAC5B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,iFAAiF;IACjF,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,2FAA2F;IAC3F,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;IACzB,sFAAsF;IACtF,MAAM,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC9B,oEAAoE;IACpE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,CA8HrG;AAiJD,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAwD/D"}

package/dist/cli/commands/import-agents.d.ts

@@ -0,0 +1,64 @@
+/**
+ * `chant import --agents` — re-express this machine's agent configuration as
+ * chant code.
+ *
+ * Shares its front half with `chant audit --agents` (the same scan, the same
+ * normalized sites) and its back half with every other import path (a lexicon's
+ * `templateGenerator()` turning IR into TypeScript). The only new step is the
+ * middle: `LexiconPlugin.agentConfigImporter()`, which maps sites onto the
+ * lexicon's own resource types.
+ *
+ * The command is loud about what it changed. Re-expression here is lossy in
+ * three specific ways — a skipped runtime, a defaulted model, a redacted
+ * secret — and each one is something the user would otherwise find only by
+ * diffing the generated code against their real config. Printing them is not
+ * politeness; it is the difference between generated code you can trust and
+ * generated code you have to re-verify by hand.
+ */
+import type { AgentRuntime, AgentScope } from "../../agents/types.js";
+import type { AgentImportOutcome } from "../../agents/importer.js";
+import type { LexiconPlugin } from "../../lexicon.js";
+/** The lexicon used when `--lexicon` isn't given: the one that models agent workloads. */
+export declare const DEFAULT_AGENT_LEXICON = "fountain";
+/**
+ * Loads the lexicon plugin. Injectable so this command can be unit-tested
+ * without a built lexicon package on disk — the same seam `audit.ts` uses for
+ * its `ChecksProvider`.
+ */
+export type PluginLoader = (name: string) => Promise<LexiconPlugin>;
+export interface ImportAgentsOptions {
+    /** Lexicon to re-express into. Defaults to {@link DEFAULT_AGENT_LEXICON}. */
+    lexicon?: string;
+    /** Injectable plugin loader (testing). Defaults to the real one. */
+    pluginLoader?: PluginLoader;
+    /** Output directory. Defaults to `./infra/agents`. */
+    output?: string;
+    force?: boolean;
+    scopes?: readonly AgentScope[];
+    runtimes?: readonly AgentRuntime[];
+    projectRoots?: string[];
+    home?: string;
+    platform?: NodeJS.Platform;
+}
+export interface ImportAgentsResult {
+    success: boolean;
+    generatedFiles: string[];
+    /** Sites found, mapped, and deliberately not mapped. */
+    summary: {
+        discovered: number;
+        mapped: number;
+    };
+    outcome?: AgentImportOutcome;
+    warnings: string[];
+    error?: string;
+}
+/**
+ * Scan, re-express, and write.
+ *
+ * Refuses to overwrite existing files without `--force`, matching `chant
+ * import` — generated agent code is likely to be edited by hand after the
+ * first run, and silently reverting those edits would be the worst possible
+ * behavior for a command whose whole purpose is capturing hand-tuned config.
+ */
+export declare function importAgentsCommand(opts?: ImportAgentsOptions): Promise<ImportAgentsResult>;
+//# sourceMappingURL=import-agents.d.ts.map

package/dist/cli/commands/import-agents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-agents.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/import-agents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAMH,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAGnD,0FAA0F;AAC1F,eAAO,MAAM,qBAAqB,aAAa,CAAC;AAEhD;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;AAEpE,MAAM,WAAW,mBAAmB;IAClC,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IAC/B,QAAQ,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IACnC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,wDAAwD;IACxD,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC7B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,GAAE,mBAAwB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA6HrG"}