@intentius/chant 0.52.1 → 0.53.0

package/dist/agents/checks.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Checks over discovered agent configuration (the `AGT` rule family).
+ *
+ * The threat model these encode is specific, and worth stating because it is
+ * not the same as the CI threat model the rest of `chant audit` covers.
+ *
+ * An agent config is *executable surface that runs with the user's own
+ * credentials on the user's own machine, usually with no review step*. An MCP
+ * server entry is a command line that runs at session start; a skill is
+ * instructions the model will follow; a permission allowlist decides what runs
+ * without anyone being asked. All three are commonly installed with one
+ * command, are rarely re-read after the day they were added, and — for the
+ * remote-sourced ones — can change upstream without any local edit.
+ *
+ * So the checks concentrate on three questions:
+ *   1. **What executes, and is it pinned?** (AGT001, AGT004)
+ *   2. **What can read secrets or reach the network in the clear?** (AGT002, AGT003)
+ *   3. **What runs without asking, and over how many projects?** (AGT005, AGT006)
+ * Plus AGT007, which flags config that is silently shadowed — where what the
+ * user reads is not what the agent runs.
+ *
+ * Every check is read-only and pure over a scan result, so a caller can run
+ * them against a fixture tree with no machine access.
+ */
+import type { AgentFinding, AgentScanResult } from "./types.js";
+/** Rule ids in this family, in report order. Kept in sync with `audit/catalog.ts` by a drift test. */
+export declare const AGENT_RULE_IDS: readonly ["AGT001", "AGT002", "AGT003", "AGT004", "AGT005", "AGT006", "AGT007", "AGT008"];
+/**
+ * Run every agent-config check over a scan result.
+ *
+ * Findings are ordered by severity, then site, then rule — so the report leads
+ * with what executes unreviewed rather than with instruction-file hygiene.
+ */
+export declare function checkAgentConfigs(scan: AgentScanResult): AgentFinding[];
+//# sourceMappingURL=checks.d.ts.map

package/dist/agents/checks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checks.d.ts","sourceRoot":"","sources":["../../src/agents/checks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAmB,YAAY,EAAE,eAAe,EAAiB,MAAM,SAAS,CAAC;AAE7F,sGAAsG;AACtG,eAAO,MAAM,cAAc,2FASjB,CAAC;AA8WX;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,YAAY,EAAE,CAmBvE"}

package/dist/agents/discover.d.ts

@@ -0,0 +1,86 @@
+/**
+ * Find every agent configuration on this machine and normalize it.
+ *
+ * The scan is location-driven, not walk-driven. Agent config does not hide in
+ * arbitrary places: each harness publishes a small, fixed set of paths it
+ * reads, so this module probes that list rather than crawling the filesystem.
+ * That keeps a full three-scope scan to a few dozen `stat` calls, and — more
+ * importantly — makes "we looked and it wasn't there" a fact the report can
+ * state (`AgentScanResult.probed`) instead of an absence of evidence.
+ *
+ * Two shapes recur across harnesses and are handled once here:
+ *
+ *   - **A config is many files.** Claude Code merges `settings.json`,
+ *     `settings.local.json`, `mcp.json`, and `~/.claude.json` into one
+ *     effective configuration; codex puts the equivalent in one TOML file.
+ *     Both land as a single {@link AgentConfigSite} with `sources` listing
+ *     every file that contributed.
+ *   - **MCP servers are declared in more than one place per scope.** Claude
+ *     Code alone accepts them in `~/.claude/mcp.json`, `~/.claude.json`'s
+ *     top-level `mcpServers`, and per-project entries under `~/.claude.json`'s
+ *     `projects` map. `mergeMcp` collects all of them and keeps the *first*
+ *     declaration of a name, matching the harness's own precedence.
+ *
+ * Nothing here judges what it finds — `checks.ts` owns that. Discovery's only
+ * editorial act is dropping sites with no content at all, so an empty
+ * `~/.gemini` directory doesn't become a resource.
+ */
+import type { AgentRuntime, AgentScanResult, AgentScope, McpServerDecl } from "./types.js";
+export interface ScanOptions {
+    /** Scopes to probe. Defaults to all three. */
+    scopes?: readonly AgentScope[];
+    /** Harnesses to probe. Defaults to all five. */
+    runtimes?: readonly AgentRuntime[];
+    /** Home directory. Injectable so tests can scan a fixture tree instead of the real machine. */
+    home?: string;
+    /** Platform, which decides where system-scope policy lives. Injectable for the same reason. */
+    platform?: NodeJS.Platform;
+    /** Directories to treat as project scope. Defaults to `[process.cwd()]`. */
+    projectRoots?: string[];
+}
+/**
+ * Machine-wide policy locations, by platform. Claude Code is the only harness
+ * of the five that defines a system scope today; the others are user-scoped
+ * only, which is itself worth reporting.
+ */
+export declare function systemSettingsPaths(platform: NodeJS.Platform): string[];
+/** Parse a markdown file's `---` YAML frontmatter. Returns `{}` when there is none. */
+export declare function frontmatter(markdown: string): Record<string, unknown>;
+/**
+ * Normalize one harness's `mcpServers` / `mcp_servers` map.
+ *
+ * Both dialects agree on the substance — a name mapping to either a `command`
+ * + `args` (stdio) or a `url` (http/sse) — so one normalizer serves Claude
+ * Code's JSON and codex's TOML. Keys this model names are lifted out; whatever
+ * remains is preserved in `extra` so a check can read a header or timeout
+ * without this function having to know about it.
+ */
+export declare function normalizeMcpServers(raw: unknown, source: string): McpServerDecl[];
+/**
+ * Scan the machine and return every agent configuration found.
+ *
+ * Sites are ordered system → user → project, matching the order the harnesses
+ * merge them, so a reader scanning the report sees broad policy before the
+ * narrow overrides that modify it.
+ */
+export declare function scanAgentConfigs(opts?: ScanOptions): AgentScanResult;
+/**
+ * Every project root the harness has registered on this machine, from
+ * `~/.claude.json`'s `projects` map.
+ *
+ * This is what makes `--all-projects` possible without crawling the disk: the
+ * harness already keeps the list of every project it has been opened in.
+ *
+ * Roots whose directory no longer exists are dropped. A deleted project is not
+ * something a user can act on, and counting it would make the "N projects not
+ * scanned" note overstate the gap — on a machine with 77 registered projects,
+ * 12 of them were stale.
+ */
+export declare function registeredProjectRoots(home: string): string[];
+/**
+ * Count registered project roots this scan did not visit. A user with dozens of
+ * registered projects should be told that a cwd-scoped scan saw one of them,
+ * rather than being left to assume it saw all.
+ */
+export declare function unscannedProjectCount(home: string, scannedRoots: string[]): number;
+//# sourceMappingURL=discover.d.ts.map

package/dist/agents/discover.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover.d.ts","sourceRoot":"","sources":["../../src/agents/discover.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAOH,OAAO,KAAK,EAEV,YAAY,EACZ,eAAe,EACf,UAAU,EAGV,aAAa,EAOd,MAAM,SAAS,CAAC;AAUjB,MAAM,WAAW,WAAW;IAC1B,8CAA8C;IAC9C,MAAM,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IAC/B,gDAAgD;IAChD,QAAQ,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IACnC,+FAA+F;IAC/F,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+FAA+F;IAC/F,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,EAAE,CAIvE;AA6ID,uFAAuF;AACvF,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAWrE;AAQD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,aAAa,EAAE,CAqCjF;AAmjBD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,GAAE,WAAgB,GAAG,eAAe,CAsCxE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAoB7D;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM,CAGlF"}

package/dist/agents/importer.d.ts

@@ -0,0 +1,46 @@
+/**
+ * The seam between neutral agent-config discovery and a lexicon's vocabulary.
+ *
+ * `discover.ts` deliberately knows nothing about chant resources — it reads
+ * five harnesses' config dialects and stops. Turning an {@link AgentConfigSite}
+ * into resources is a statement about a *target* (fountain's `Agent` and
+ * `Environment`, today), and that judgement belongs to the lexicon that owns
+ * those types, exactly as `templateParser()` puts CloudFormation's JSON
+ * vocabulary in the aws lexicon rather than in core.
+ *
+ * So a lexicon that can express local agent configuration implements
+ * {@link AgentConfigImporter} and returns it from
+ * `LexiconPlugin.agentConfigImporter()`. `chant import --agents` loads the
+ * plugin, hands it the scan, and pipes the resulting IR through the same
+ * `templateGenerator()` every other import path uses.
+ */
+import type { TemplateIR } from "../import/parser.js";
+import type { AgentConfigSite } from "./types.js";
+/** A site the importer could not express, and why. */
+export interface SkippedSite {
+    siteId: string;
+    reason: string;
+}
+/**
+ * The result of re-expressing a scan.
+ *
+ * The three report arrays exist because this conversion is lossy in ways the
+ * user must be told about: a site that couldn't be mapped, a required property
+ * that had to be defaulted, and a secret that was rewritten rather than copied
+ * are all things a reader would otherwise discover only by diffing the output
+ * against their own config.
+ */
+export interface AgentImportOutcome {
+    ir: TemplateIR;
+    /** Sites that could not be re-expressed in this lexicon's vocabulary. */
+    skipped: SkippedSite[];
+    /** Site ids where a required property was filled with a default rather than a discovered value. */
+    unmappedModel: string[];
+    /** Site ids where a literal credential was replaced with an environment reference. */
+    redactedSecrets: string[];
+}
+/** Converts discovered agent configuration into a lexicon's resource IR. */
+export interface AgentConfigImporter {
+    toTemplateIR(sites: AgentConfigSite[]): AgentImportOutcome;
+}
+//# sourceMappingURL=importer.d.ts.map

package/dist/agents/importer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"importer.d.ts","sourceRoot":"","sources":["../../src/agents/importer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE/C,sDAAsD;AACtD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,UAAU,CAAC;IACf,yEAAyE;IACzE,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,mGAAmG;IACnG,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,sFAAsF;IACtF,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,4EAA4E;AAC5E,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,kBAAkB,CAAC;CAC5D"}

package/dist/agents/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Agent-configuration discovery and checks.
+ *
+ * Finds the agent configs on a machine (`discover.ts`), judges them
+ * (`checks.ts`), and normalizes both onto one vendor-neutral model
+ * (`types.ts`). The two consumers are `chant audit --agents`, which reports on
+ * what it finds, and `chant import --agents`, which re-expresses it as chant
+ * code via a lexicon's IR mapper.
+ */
+export type { AgentConfigSite, AgentFinding, AgentRuntime, AgentScanResult, AgentScope, CommandDecl, InstructionFile, McpServerDecl, McpTransport, PermissionConfig, PluginDecl, SkillDecl, SkillOrigin, SubagentDecl, } from "./types.js";
+export { AGENT_RUNTIMES, AGENT_SCOPES } from "./types.js";
+export { scanAgentConfigs, normalizeMcpServers, frontmatter, systemSettingsPaths, unscannedProjectCount, type ScanOptions } from "./discover.js";
+export { checkAgentConfigs, AGENT_RULE_IDS } from "./checks.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/agents/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/agents/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,YAAY,EACV,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,UAAU,EACV,WAAW,EACX,eAAe,EACf,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,SAAS,EACT,WAAW,EACX,YAAY,GACb,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,WAAW,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9I,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC"}

package/dist/agents/types.d.ts

@@ -0,0 +1,196 @@
+/**
+ * The normalized model for an agent configuration found on a machine.
+ *
+ * Five harnesses (claude, codex, gemini, opencode, cursor) each spell the same
+ * four ideas differently — standing instructions, tool servers, reusable
+ * skills, and ambient settings. `discover.ts` reads each harness's own dialect
+ * and lands here; everything downstream (`checks.ts`, the report, the fountain
+ * IR mapping) reads only this shape and never a vendor file format again.
+ *
+ * The `AgentConfigSite` boundary is deliberately "one config that governs one
+ * root, for one runtime" rather than "one file". A single Claude Code site is
+ * assembled from `CLAUDE.md` + `settings.json` + `settings.local.json` +
+ * `mcp.json` + `~/.claude.json` + a `skills/` tree — six files that are only
+ * meaningful together, and that the agent itself experiences as one merged
+ * configuration. `sources` keeps the receipts so a finding can point at the
+ * actual file the reader has to edit.
+ */
+/**
+ * Which agent harness a config belongs to. The first four are exactly
+ * fountain's `Agent.runtime` enum, so they re-express losslessly; `cursor` is
+ * discovered and reported but has no fountain runtime to map onto (see
+ * `MAPPABLE_RUNTIMES` in the fountain import mapper).
+ */
+export type AgentRuntime = "claude" | "codex" | "gemini" | "opencode" | "cursor";
+/**
+ * Blast radius of a config, in the order harnesses merge them (later wins).
+ *
+ * - `system` — machine-wide policy, typically administrator-installed and not
+ *   user-editable (Claude Code's `managed-settings.json`).
+ * - `user` — the home directory. Applies to *every* project the user opens,
+ *   which is what makes it the highest-leverage scope to audit.
+ * - `project` — checked into (or sitting beside) a repo. Narrowest scope, but
+ *   the one most likely to arrive from someone else.
+ */
+export type AgentScope = "system" | "user" | "project";
+export declare const AGENT_SCOPES: readonly AgentScope[];
+export declare const AGENT_RUNTIMES: readonly AgentRuntime[];
+/** A standing-instructions file (CLAUDE.md, AGENTS.md, GEMINI.md, .cursorrules). */
+export interface InstructionFile {
+    /** Absolute path on disk. */
+    path: string;
+    /** File contents. Read in full — these become fountain's `Agent.system`. */
+    content: string;
+    bytes: number;
+}
+/** How an MCP server is reached. `unknown` when the declaration has neither a command nor a URL. */
+export type McpTransport = "stdio" | "http" | "sse" | "unknown";
+/** One MCP server declaration, normalized across the several files that can declare one. */
+export interface McpServerDecl {
+    name: string;
+    transport: McpTransport;
+    /** The file this declaration was read from. */
+    source: string;
+    /** stdio: the executable. */
+    command?: string;
+    /** stdio: argv after the executable. */
+    args?: string[];
+    /** http/sse: the endpoint. */
+    url?: string;
+    /** Environment handed to the server process. Values are kept verbatim — `checks.ts` is what decides whether one looks like a literal credential. */
+    env?: Record<string, string>;
+    /** Extra keys the harness accepted that this model doesn't name (headers, timeouts, …). */
+    extra?: Record<string, unknown>;
+}
+/**
+ * Where a skill came from. This distinction is the whole point of the skill
+ * checks: a `local` skill is text the user can read in their own filesystem,
+ * while `plugin`/`marketplace` skills are fetched from a remote and can change
+ * under the user without any edit to their machine.
+ */
+export type SkillOrigin = "local" | "plugin" | "marketplace";
+/** One skill available to the agent. */
+export interface SkillDecl {
+    name: string;
+    origin: SkillOrigin;
+    /** Absolute path to the skill directory or SKILL.md, when it exists on disk. */
+    path?: string;
+    /** Remote source (`owner/repo`, a URL) for plugin/marketplace skills. */
+    source?: string;
+    /** Version pin on `source`: a tag, branch, or sha. Absence is what AGT004 flags. */
+    ref?: string;
+    /** SKILL.md body, when read. Becomes fountain's inline `{name, content}` skill form. */
+    content?: string;
+    /** The skill's own frontmatter `description`, used for the fountain `description`. */
+    description?: string;
+}
+/** A subagent / custom agent definition (`.claude/agents/*.md`). */
+export interface SubagentDecl {
+    name: string;
+    path: string;
+    description?: string;
+    /** Tool allowlist declared in frontmatter, if any. */
+    tools?: string;
+    model?: string;
+}
+/** A slash command definition (`.claude/commands/*.md`, `~/.codex/prompts`). */
+export interface CommandDecl {
+    name: string;
+    path: string;
+    description?: string;
+}
+/** An installed plugin — a bundle that can inject skills, commands, and MCP servers at once. */
+export interface PluginDecl {
+    name: string;
+    /** Marketplace or repo the plugin was installed from. */
+    marketplace?: string;
+    /** Version pin, when the install recorded one. */
+    ref?: string;
+    enabled: boolean;
+    /**
+     * True when the plugin tracks a remote the user does not control.
+     *
+     * The pinning checks turn on this: a plugin vendored from a local directory
+     * cannot change underneath the user, so "pin it" is not advice that applies.
+     * Harnesses ship bundled plugins from local paths (codex's
+     * `source_type = "local"`), and reporting those as unpinned supply chain is
+     * noise that trains the reader to skip the rule.
+     */
+    remote: boolean;
+}
+/** Tool-permission configuration, normalized from a harness's own settings shape. */
+export interface PermissionConfig {
+    allow?: string[];
+    deny?: string[];
+    ask?: string[];
+    defaultMode?: string;
+    /** True when the config disables a confirmation prompt outright. */
+    bypassesPrompts?: boolean;
+}
+/**
+ * One complete agent configuration governing one root, for one runtime.
+ *
+ * Assembled from every file at that scope the harness would merge together —
+ * see the module docstring for why the file is not the unit.
+ */
+export interface AgentConfigSite {
+    /** Stable slug, unique within a scan: `user-claude`, `project-claude-chant`. Becomes the fountain resource name. */
+    id: string;
+    scope: AgentScope;
+    runtime: AgentRuntime;
+    /** Directory this configuration governs. For `user` scope, the home directory. */
+    root: string;
+    /** Every file that contributed, absolute. A site with no sources is never emitted. */
+    sources: string[];
+    instructions: InstructionFile[];
+    mcpServers: McpServerDecl[];
+    skills: SkillDecl[];
+    subagents: SubagentDecl[];
+    commands: CommandDecl[];
+    plugins: PluginDecl[];
+    /** Environment variables the harness injects into every session. */
+    env: Record<string, string>;
+    permissions?: PermissionConfig;
+    /** Default model pinned by the config, when set. */
+    model?: string;
+    /**
+     * Raw merged settings, kept so a check can interrogate a key this model
+     * doesn't name without a schema change. Not used for codegen.
+     */
+    settings: Record<string, unknown>;
+}
+/** Everything one scan found, plus what it couldn't read. */
+export interface AgentScanResult {
+    sites: AgentConfigSite[];
+    /** Locations probed and found absent — useful for "is it really not configured, or did I not look?" */
+    probed: string[];
+    /** Paths that existed but could not be read or parsed, with the reason. */
+    unreadable: Array<{
+        path: string;
+        reason: string;
+    }>;
+    /**
+     * Every MCP declaration each site saw, keyed by site id — including names
+     * that lost the first-wins merge and so do not appear in
+     * `AgentConfigSite.mcpServers`. Diagnostic data for the shadowing check
+     * (AGT007), kept beside the sites rather than on them because it describes
+     * the *discovery*, not the configuration being re-expressed.
+     */
+    declarations: Record<string, McpServerDecl[]>;
+}
+/** A finding raised by an agent-config check against a discovered site. */
+export interface AgentFinding {
+    /** Catalog id, e.g. `AGT001`. */
+    checkId: string;
+    severity: "error" | "warning" | "info";
+    message: string;
+    /** The specific file a reader has to open to fix this. */
+    file: string;
+    /** The site the finding belongs to. */
+    siteId: string;
+    scope: AgentScope;
+    runtime: AgentRuntime;
+    /** The named thing within the site (an MCP server name, a skill name). */
+    entity?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/agents/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/agents/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEjF;;;;;;;;;GASG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAC;AAEvD,eAAO,MAAM,YAAY,EAAE,SAAS,UAAU,EAA2C,CAAC;AAC1F,eAAO,MAAM,cAAc,EAAE,SAAS,YAAY,EAAiE,CAAC;AAEpH,oFAAoF;AACpF,MAAM,WAAW,eAAe;IAC9B,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,oGAAoG;AACpG,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC;AAEhE,4FAA4F;AAC5F,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,YAAY,CAAC;IACxB,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,6BAA6B;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,8BAA8B;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oJAAoJ;IACpJ,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,2FAA2F;IAC3F,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,QAAQ,GAAG,aAAa,CAAC;AAE7D,wCAAwC;AACxC,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,WAAW,CAAC;IACpB,gFAAgF;IAChF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oFAAoF;IACpF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wFAAwF;IACxF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,oEAAoE;AACpE,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sDAAsD;IACtD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,gFAAgF;AAChF,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,gGAAgG;AAChG,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kDAAkD;IAClD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB;;;;;;;;OAQG;IACH,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,qFAAqF;AACrF,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,oHAAoH;IACpH,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,YAAY,CAAC;IACtB,kFAAkF;IAClF,IAAI,EAAE,MAAM,CAAC;IACb,sFAAsF;IACtF,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,oEAAoE;IACpE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,6DAA6D;AAC7D,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,uGAAuG;IACvG,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,2EAA2E;IAC3E,UAAU,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD;;;;;;OAMG;IACH,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;CAC/C;AAED,2EAA2E;AAC3E,MAAM,WAAW,YAAY;IAC3B,iCAAiC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,uCAAuC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,YAAY,CAAC;IACtB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}

package/dist/audit/catalog.d.ts

@@ -69,6 +69,8 @@ export declare const CF_SECRETS: Authority;
 export declare const CF_ROUTES: Authority;
 export declare const CF_ENVIRONMENTS: Authority;
 export declare const CF_STATIC_ASSETS: Authority;
+export declare const CWE_HARDCODED_CREDS: Authority;
+export declare const CWE_CLEARTEXT: Authority;
 /**
  * Finding category per rule (#415). Curated: security rules are those that
  * cite an authority or guard an exposure; correctness rules flag structural
@@ -81,7 +83,8 @@ export declare const RULE_CATEGORY: Record<string, Category>;
  * CloudFormation ids (COR/EXT) that aren't owned by a single lexicon. Every
  * per-provider block moved to its lexicon's `auditCatalog()` (#687): WAW→aws,
  * WGC→gcp, AZR→azure, DKRD→docker, WK8/ARGO→k8s, WHM→helm, GHA→github,
- * WGL→gitlab, WFJ→forgejo. `resolveAuditCatalog` merges those over this map.
+ * WGL→gitlab, WFJ→forgejo. `resolveAuditCatalog` merges those over this map,
+ * alongside the lexicon-independent SEC/WRG/AGT families core owns outright.
  */
 export declare const RULE_CATALOG: Record<string, RuleMeta>;
 /**

package/dist/audit/catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../src/audit/catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,MAAM,IAAI,GAAG,cAAc,GAAG,aAAa,CAAC;AAElD,wFAAwF;AACxF,MAAM,MAAM,OAAO,GAAG,eAAe,GAAG,UAAU,CAAC;AAEnD;;;;;;;;;GASG;AACH,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,aAAa,GAAG,eAAe,GAAG,YAAY,CAAC;AAEnF,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,IAAI,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;IACjB,6EAA6E;IAC7E,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;IACxB,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,SAAS,EAAE,OAAO,CAAC;CACpB;AAGD,eAAO,MAAM,eAAe,EAAE,SAG7B,CAAC;AACF,eAAO,MAAM,QAAQ,EAAE,SAGtB,CAAC;AACF,eAAO,MAAM,gBAAgB,EAAE,SAG9B,CAAC;AACF,eAAO,MAAM,cAAc,EAAE,SAG5B,CAAC;AACF,eAAO,MAAM,YAAY,EAAE,SAG1B,CAAC;AACF,eAAO,MAAM,MAAM,EAAE,SAGpB,CAAC;AACF,eAAO,MAAM,UAAU,EAAE,SAGxB,CAAC;AACF,eAAO,MAAM,OAAO,EAAE,SAGrB,CAAC;AACF,eAAO,MAAM,OAAO,EAAE,SAGrB,CAAC;AACF,eAAO,MAAM,WAAW,EAAE,SAGzB,CAAC;AACF,eAAO,MAAM,kBAAkB,EAAE,SAGhC,CAAC;AACF,eAAO,MAAM,cAAc,EAAE,SAG5B,CAAC;AACF,eAAO,MAAM,cAAc,EAAE,SAG5B,CAAC;AACF,eAAO,MAAM,UAAU,EAAE,SAGxB,CAAC;AACF,eAAO,MAAM,SAAS,EAAE,SAGvB,CAAC;AACF,eAAO,MAAM,eAAe,EAAE,SAG7B,CAAC;AACF,eAAO,MAAM,gBAAgB,EAAE,SAG9B,CAAC;AAuBF;;;;;GAKG;AACH,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAmBlD,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CA4BjD,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,SAAS,CACvB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,QAAQ,CAAA;CAAE,GACtD,QAAQ,CAGV;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAqB/F;AAED,yDAAyD;AACzD,wBAAgB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAEzD;AAED,wEAAwE;AACxE,eAAO,MAAM,cAAc,mCAAmC,CAAC;AAE/D,mEAAmE;AACnE,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAE7C"}
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../src/audit/catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,MAAM,IAAI,GAAG,cAAc,GAAG,aAAa,CAAC;AAElD,wFAAwF;AACxF,MAAM,MAAM,OAAO,GAAG,eAAe,GAAG,UAAU,CAAC;AAEnD;;;;;;;;;GASG;AACH,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,aAAa,GAAG,eAAe,GAAG,YAAY,CAAC;AAEnF,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,IAAI,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;IACjB,6EAA6E;IAC7E,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;IACxB,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,SAAS,EAAE,OAAO,CAAC;CACpB;AAGD,eAAO,MAAM,eAAe,EAAE,SAG7B,CAAC;AACF,eAAO,MAAM,QAAQ,EAAE,SAGtB,CAAC;AACF,eAAO,MAAM,gBAAgB,EAAE,SAG9B,CAAC;AACF,eAAO,MAAM,cAAc,EAAE,SAG5B,CAAC;AACF,eAAO,MAAM,YAAY,EAAE,SAG1B,CAAC;AACF,eAAO,MAAM,MAAM,EAAE,SAGpB,CAAC;AACF,eAAO,MAAM,UAAU,EAAE,SAGxB,CAAC;AACF,eAAO,MAAM,OAAO,EAAE,SAGrB,CAAC;AACF,eAAO,MAAM,OAAO,EAAE,SAGrB,CAAC;AACF,eAAO,MAAM,WAAW,EAAE,SAGzB,CAAC;AACF,eAAO,MAAM,kBAAkB,EAAE,SAGhC,CAAC;AACF,eAAO,MAAM,cAAc,EAAE,SAG5B,CAAC;AACF,eAAO,MAAM,cAAc,EAAE,SAG5B,CAAC;AACF,eAAO,MAAM,UAAU,EAAE,SAGxB,CAAC;AACF,eAAO,MAAM,SAAS,EAAE,SAGvB,CAAC;AACF,eAAO,MAAM,eAAe,EAAE,SAG7B,CAAC;AACF,eAAO,MAAM,gBAAgB,EAAE,SAG9B,CAAC;AACF,eAAO,MAAM,mBAAmB,EAAE,SAGjC,CAAC;AACF,eAAO,MAAM,aAAa,EAAE,SAG3B,CAAC;AAsCF;;;;;GAKG;AACH,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CA8BlD,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAkFjD,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,SAAS,CACvB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,QAAQ,CAAA;CAAE,GACtD,QAAQ,CAGV;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAqB/F;AAED,yDAAyD;AACzD,wBAAgB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAEzD;AAED,wEAAwE;AACxE,eAAO,MAAM,cAAc,mCAAmC,CAAC;AAE/D,mEAAmE;AACnE,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAE7C"}

package/dist/audit/report.d.ts

@@ -28,6 +28,14 @@ export interface RenderOptions {
     notes?: string[];
     /** Resolved audit catalog (core static + active lexicons' contributions, #687). Defaults to core's static catalog. */
     catalog?: Record<string, RuleMeta>;
+    /**
+     * Markdown heading text and level for the report's own title. `chant audit
+     * --agents` embeds this report under its inventory, so it renders as a
+     * level-2 "Findings" section rather than a second `# chant audit` H1 in a
+     * document that already has one.
+     */
+    title?: string;
+    headingLevel?: 1 | 2;
 }
 /** Render an audit report as Markdown. */
 export declare function renderMarkdown(findings: AuditFinding[], opts?: RenderOptions): string;

package/dist/audit/report.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../src/audit/report.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,EAAc,KAAK,QAAQ,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAc5C,MAAM,WAAW,aAAa;IAC5B,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,iEAAiE;IACjE,UAAU,CAAC,EAAE,YAAY,CAAC,YAAY,CAAC,CAAC;IACxC,8EAA8E;IAC9E,aAAa,CAAC,EAAE,YAAY,CAAC,eAAe,CAAC,CAAC;IAC9C,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,sHAAsH;IACtH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;CACpC;AAoDD,0CAA0C;AAC1C,wBAAgB,cAAc,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,IAAI,GAAE,aAAkB,GAAG,MAAM,CAqCzF"}
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../src/audit/report.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,EAAc,KAAK,QAAQ,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAc5C,MAAM,WAAW,aAAa;IAC5B,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,iEAAiE;IACjE,UAAU,CAAC,EAAE,YAAY,CAAC,YAAY,CAAC,CAAC;IACxC,8EAA8E;IAC9E,aAAa,CAAC,EAAE,YAAY,CAAC,eAAe,CAAC,CAAC;IAC9C,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,sHAAsH;IACtH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACnC;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;CACtB;AAoDD,0CAA0C;AAC1C,wBAAgB,cAAc,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,IAAI,GAAE,aAAkB,GAAG,MAAM,CAqCzF"}

package/dist/audit/rules-doc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rules-doc.d.ts","sourceRoot":"","sources":["../../src/audit/rules-doc.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAqCH;;;;;;GAMG;AACH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,MAAM,CAAC,CAqB5D"}
+{"version":3,"file":"rules-doc.d.ts","sourceRoot":"","sources":["../../src/audit/rules-doc.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA2CH;;;;;;GAMG;AACH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,MAAM,CAAC,CAqB5D"}

package/dist/cdk/advise.d.ts

@@ -0,0 +1,29 @@
+/**
+ * The CDK half of `chant carve advise` (#1056): read a cloud assembly, rank its
+ * constructs with the same model the Terraform advisor uses.
+ *
+ * Read-only, like the Terraform path — it emits nothing, patches nothing, and
+ * touches no live resource. `carve emit`, `carve bridge` and `carve apply` are
+ * deliberately Terraform-only: bridging a CDK carve means rewriting the
+ * surviving app's source, which does not generalize across jsii languages.
+ */
+import type { CarveDialect } from "../terraform/carve.js";
+import type { Peelability, ScoreOptions } from "../terraform/score.js";
+import type { TfGraph } from "../terraform/types.js";
+export interface CdkAdvice {
+    graph: TfGraph;
+    results: Peelability[];
+    /** The hooks that produced `results`, so the boundary pass agrees with it. */
+    scoreOptions: ScoreOptions;
+    diagnostics: string[];
+}
+/** The bridge vocabulary a CDK report's boundary edges are named in. */
+export declare const CDK_DIALECT: CarveDialect;
+/**
+ * Rank a cloud assembly. The scoring model, the bands and the report shape are
+ * the Terraform path's, verbatim; what changes is the tier lookup (already in
+ * CloudFormation type space, so no translation) and the signals only a CDK
+ * reader can see — assets, nested stacks, L3 subtrees, a dummy-value assembly.
+ */
+export declare function adviseCloudAssembly(dir: string): CdkAdvice;
+//# sourceMappingURL=advise.d.ts.map

package/dist/cdk/advise.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"advise.d.ts","sourceRoot":"","sources":["../../src/cdk/advise.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEpE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,8EAA8E;IAC9E,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,wEAAwE;AACxE,eAAO,MAAM,WAAW,EAAE,YAAoB,CAAC;AAE/C;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAQ1D"}

package/dist/cdk/assembly.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Read a CDK cloud assembly off disk (#1056).
+ *
+ * The only filesystem layer the CDK advisor needs. Detection is by content, not
+ * a flag: a directory holding `manifest.json` plus at least one
+ * `*.template.json` is a cloud assembly, so `chant carve advise --from ./cdk.out`
+ * routes itself.
+ *
+ * A malformed or truncated assembly degrades rather than throws — a stack whose
+ * template will not parse is dropped with a diagnostic, and the rest is still
+ * ranked. The advisor is read-only, so a partial read costs nothing but a
+ * shorter report.
+ */
+import type { CdkTreeNode, CloudAssembly } from "./types.js";
+/**
+ * Is `dir` a CDK cloud assembly? `manifest.json` plus at least one synthesized
+ * template. Both are required: `manifest.json` alone is far too common a
+ * filename to claim on sight.
+ */
+export declare function isCloudAssembly(dir: string): boolean;
+/**
+ * Why a Terraform-only carve phase refuses a cloud assembly (#1056).
+ *
+ * Advise is the only phase that reads CDK. Bridging a carve means rewriting the
+ * surviving app's source so it reimports what was taken, and CDK source is
+ * TypeScript, Python, Java or C# depending on who wrote it — nothing that
+ * generalizes the way patching HCL does. Better to say so than to parse the
+ * assembly's `.tf` files, find none, and report an empty estate.
+ */
+export declare function cdkNotSupported(dir: string, phase: "emit" | "bridge" | "apply"): string;
+/** Index `tree.json` by construct path, so a resource's path resolves in one lookup. */
+export declare function indexTree(root: CdkTreeNode | undefined): Map<string, CdkTreeNode>;
+/**
+ * Read the assembly at `dir`. Throws only when the directory is not an assembly
+ * at all — everything past that point is a diagnostic.
+ */
+export declare function readCloudAssembly(dir: string): CloudAssembly;
+//# sourceMappingURL=assembly.d.ts.map

package/dist/cdk/assembly.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assembly.d.ts","sourceRoot":"","sources":["../../src/cdk/assembly.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,KAAK,EAAsC,WAAW,EAAe,aAAa,EAAE,MAAM,SAAS,CAAC;AAS3G;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAQpD;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,CAKvF;AAmBD,wFAAwF;AACxF,wBAAgB,SAAS,CAAC,IAAI,EAAE,WAAW,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAQjF;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,CA4C5D"}

package/dist/cdk/graph.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Turn a CDK cloud assembly into the same dependency graph the Terraform
+ * advisor scores (#1056).
+ *
+ * Two jobs, both exact rather than heuristic:
+ *
+ * **Grouping.** CloudFormation resources are the wrong unit to rank. One L2
+ * construct emits several of them — a `Function` emits a role, a policy and the
+ * function — and they carve together or not at all. Every resource carries its
+ * emitting construct in `Metadata["aws:cdk:path"]`, and `tree.json` says which
+ * ancestor of that path is the construct a person actually wrote. So resources
+ * fold up to the shallowest L2 (or L3) ancestor and that construct ranks once.
+ * This is the CDK analogue of Terraform sub-resources folding into their parent.
+ *
+ * **Edges.** `Ref`, `Fn::GetAtt` and `Fn::Sub` are intra-stack; `Fn::ImportValue`
+ * resolves through the exporting stack's `Outputs` to the construct that
+ * actually produces the value, so a cross-stack dependency lands as a real edge
+ * between two constructs in both directions rather than a dangling name. There
+ * is no expression AST to consult and no regex over HCL: the template is JSON,
+ * and an intrinsic is a JSON object with a known key.
+ *
+ * Pure — no filesystem, no CDK CLI. `assembly.ts` does the reading.
+ */
+import type { CloudAssembly } from "./types.js";
+import type { ScoreSignals } from "../terraform/score.js";
+import type { TfGraph } from "../terraform/types.js";
+/**
+ * What a construct is, from its jsii class name.
+ *
+ *  - `l1`        — a `Cfn*` class: one construct, one CloudFormation resource.
+ *  - `l2`        — a curated service construct (`aws-cdk-lib.aws_s3.Bucket`).
+ *  - `l3`        — a pattern or a hand-written grouping construct. A Composite
+ *                  candidate (#1000), ranked whole instead of leaf by leaf.
+ *  - `nested`    — a `NestedStack`: a template of its own.
+ *  - `container` — App/Stage/Stack. Never a scoring unit; the ranking lives
+ *                  inside it.
+ *  - `unknown`   — no tree metadata to go on.
+ *
+ * A user's own construct class is not jsii-compiled, so tree metadata reports
+ * its nearest jsii ancestor: `constructs.Construct` for a grouping construct,
+ * `aws-cdk-lib.Stack` for a stack subclass. That is why stacks are recognized
+ * by their manifest artifact rather than by fqn — the fqn alone cannot tell a
+ * user's stack from a user's L3.
+ */
+export type ConstructLevel = "l1" | "l2" | "l3" | "nested" | "container" | "unknown";
+export declare function constructLevel(fqn: string | undefined): ConstructLevel;
+/** The assembly's dependency graph, plus the signals only a CDK reader can see. */
+export interface CdkCarveGraph {
+    graph: TfGraph;
+    /** Per-node scoring signals, keyed by construct path. */
+    signals: Map<string, ScoreSignals>;
+    diagnostics: string[];
+}
+/**
+ * Is the assembly a faithful picture of an account, or a guess? Either the
+ * manifest admits an unresolved context query, or a template still carries the
+ * placeholder that query would have replaced.
+ */
+export declare function dummyAssemblyReason(assembly: CloudAssembly): string | undefined;
+/**
+ * Build the graph and the per-construct signals from a read assembly.
+ *
+ * Every resource folds into a construct, every construct becomes one node, and
+ * every intrinsic becomes an edge between two nodes. Nothing is inferred: a
+ * reference with no resolvable target is dropped rather than drawn.
+ */
+export declare function buildCdkGraph(assembly: CloudAssembly): CdkCarveGraph;
+//# sourceMappingURL=graph.d.ts.map

package/dist/cdk/graph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph.d.ts","sourceRoot":"","sources":["../../src/cdk/graph.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,OAAO,KAAK,EAAsC,aAAa,EAAE,MAAM,SAAS,CAAC;AACjF,OAAO,KAAK,EAAmB,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,KAAK,EAAU,OAAO,EAAU,MAAM,oBAAoB,CAAC;AAElE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,cAAc,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC;AAiBrF,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,cAAc,CAQtE;AAuLD,mFAAmF;AACnF,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,OAAO,CAAC;IACf,yDAAyD;IACzD,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACnC,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAQD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,GAAG,SAAS,CAqB/E;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,aAAa,GAAG,aAAa,CA2NpE"}