@agent-relay/factory 0.1.49 → 0.1.51

package/dist/environments/kubernetes-environment.js

@@ -0,0 +1,333 @@
+import { spawn } from 'node:child_process';
+import { readFile } from 'node:fs/promises';
+import { parseAllDocuments } from 'yaml';
+import { DEFAULT_MANAGED_FIDELITY_CAVEAT, KubernetesGuardrailDefaultsSchema, } from './connection-registry.js';
+import { createKubernetesGuardrailResources } from './kubernetes-provider.js';
+export const FACTORY_ENVIRONMENT_MANAGED_LABEL = 'factory.agent-relay.dev/managed';
+export const FACTORY_ENVIRONMENT_ID_LABEL = 'factory.agent-relay.dev/environment';
+export const FACTORY_ENVIRONMENT_EXPIRES_ANNOTATION = 'factory.agent-relay.dev/expires-at';
+export const FACTORY_ENVIRONMENT_REPOSITORY_ANNOTATION = 'factory.agent-relay.dev/repository';
+const MAX_OUTPUT_BYTES = 1024 * 1024;
+export function defaultKubectlEnvironmentRunner(executable = 'kubectl') {
+    return async (args, options = {}) => await new Promise((resolve, reject) => {
+        const child = spawn(executable, args, { stdio: ['pipe', 'pipe', 'pipe'] });
+        let stdout = '';
+        let stderr = '';
+        let settled = false;
+        let forceTimer;
+        const finish = (error) => {
+            if (settled)
+                return;
+            settled = true;
+            options.signal?.removeEventListener('abort', abort);
+            if (!error && forceTimer)
+                clearTimeout(forceTimer);
+            if (error)
+                reject(error);
+            else
+                resolve({ stdout, stderr });
+        };
+        const stop = () => {
+            if (child.exitCode !== null)
+                return;
+            child.kill('SIGTERM');
+            forceTimer = setTimeout(() => child.kill('SIGKILL'), 2_000);
+            forceTimer.unref();
+        };
+        const abort = () => {
+            stop();
+            finish(new VerificationEnvironmentAbortError());
+        };
+        options.signal?.addEventListener('abort', abort, { once: true });
+        if (options.signal?.aborted)
+            return abort();
+        child.stdout.setEncoding('utf8');
+        child.stderr.setEncoding('utf8');
+        child.stdout.on('data', (chunk) => { stdout = boundedAppend(stdout, chunk); });
+        child.stderr.on('data', (chunk) => { stderr = boundedAppend(stderr, chunk); });
+        child.once('error', (error) => finish(error));
+        child.once('close', (code) => {
+            if (forceTimer)
+                clearTimeout(forceTimer);
+            if (code === 0)
+                finish();
+            else
+                finish(new Error(`${executable} ${args.join(' ')} exited with ${code ?? 'no status'}: ${stderr.trim().slice(-4_000) || 'no stderr'}`));
+        });
+        if (!options.signal?.aborted)
+            child.stdin.end(options.input);
+    });
+}
+export class VerificationEnvironmentAbortError extends Error {
+    constructor() {
+        super('verification environment operation aborted');
+        this.name = 'VerificationEnvironmentAbortError';
+    }
+}
+export class KubectlEnvironmentProvider {
+    #executable;
+    #run;
+    #portForwards = new Map();
+    constructor(options = {}) {
+        this.#executable = options.executable ?? 'kubectl';
+        this.#run = options.runner ?? defaultKubectlEnvironmentRunner(this.#executable);
+    }
+    async provision(input) {
+        const context = contextArgs(input.kubeContext);
+        const listed = await this.#run([
+            ...context,
+            'get', 'namespaces',
+            '--selector', `${FACTORY_ENVIRONMENT_MANAGED_LABEL}=true`,
+            '--output', 'json',
+        ], { signal: input.signal });
+        const active = activeNamespaceCount(listed.stdout);
+        if (active >= input.maxActiveEnvironments) {
+            throw new Error(`verification environment concurrency cap reached (${active}/${input.maxActiveEnvironments})`);
+        }
+        const id = dnsLabel(`${input.namespacePrefix}-${input.runId}`).slice(0, 63);
+        const expiresAt = new Date(Date.now() + input.ttlMs).toISOString();
+        const namespace = {
+            apiVersion: 'v1',
+            kind: 'Namespace',
+            metadata: {
+                name: id,
+                labels: {
+                    [FACTORY_ENVIRONMENT_MANAGED_LABEL]: 'true',
+                    [FACTORY_ENVIRONMENT_ID_LABEL]: dnsLabel(input.runId).slice(0, 63),
+                    'pod-security.kubernetes.io/enforce': 'restricted',
+                    'pod-security.kubernetes.io/enforce-version': 'latest',
+                    'pod-security.kubernetes.io/audit': 'restricted',
+                    'pod-security.kubernetes.io/warn': 'restricted',
+                },
+                annotations: {
+                    [FACTORY_ENVIRONMENT_EXPIRES_ANNOTATION]: expiresAt,
+                    [FACTORY_ENVIRONMENT_REPOSITORY_ANNOTATION]: input.repository,
+                },
+            },
+        };
+        try {
+            // A collision must fail; applying here could adopt and relabel an
+            // unrelated namespace selected by a caller-controlled run id.
+            await this.#run([...context, 'create', '--filename', '-'], {
+                input: JSON.stringify(namespace),
+                signal: input.signal,
+            });
+            const connection = verificationKubernetesConnection({
+                context: input.kubeContext,
+                repository: input.repository,
+            });
+            const guardrails = createKubernetesGuardrailResources(id, connection, KubernetesGuardrailDefaultsSchema.parse({}));
+            await this.#run([
+                ...context,
+                '--namespace', id,
+                'apply', '--filename', '-',
+            ], {
+                input: JSON.stringify({ apiVersion: 'v1', kind: 'List', items: guardrails }),
+                signal: input.signal,
+            });
+        }
+        catch (error) {
+            await this.#run([
+                ...context,
+                'delete', 'namespace', id,
+                '--ignore-not-found=true',
+                '--wait=false',
+            ]).catch(() => undefined);
+            throw error;
+        }
+        return {
+            id,
+            namespace: id,
+            endpoints: {},
+            internalEndpoints: {},
+            ...(input.kubeContext ? { kubeContext: input.kubeContext } : {}),
+            expiresAt,
+        };
+    }
+    async deploy(environment, input) {
+        const resources = (await Promise.all(input.manifests.map(async ({ path }) => resourcesFromManifest(path, environment.namespace)))).flat();
+        await this.#run([
+            ...contextArgs(environment.kubeContext),
+            '--namespace', environment.namespace,
+            'apply', '--filename', '-',
+        ], {
+            input: JSON.stringify({ apiVersion: 'v1', kind: 'List', items: resources }),
+            signal: input.signal,
+        });
+        for (const check of input.readiness) {
+            await this.#run([
+                ...contextArgs(environment.kubeContext),
+                '--namespace', environment.namespace,
+                'wait', check.resource,
+                `--for=condition=${check.condition}`,
+                `--timeout=${Math.max(1, Math.ceil(check.timeoutMs / 1_000))}s`,
+            ], { signal: input.signal });
+        }
+        const endpoints = {};
+        const internalEndpoints = {};
+        for (const [name, endpoint] of Object.entries(input.endpoints)) {
+            const suffix = normalizeEndpointPath(endpoint.path);
+            internalEndpoints[name] = `${endpoint.scheme}://${endpoint.service}.${environment.namespace}.svc.cluster.local:${endpoint.port}${suffix}`;
+            endpoints[name] = endpoint.portForward
+                ? `${endpoint.scheme}://127.0.0.1:${await this.#startPortForward(environment, endpoint.service, endpoint.port, input.signal)}${suffix}`
+                : internalEndpoints[name];
+        }
+        return { ...environment, endpoints, internalEndpoints };
+    }
+    async teardown(environment, options = {}) {
+        this.#stopPortForwards(environment.id);
+        await this.#run([
+            ...contextArgs(environment.kubeContext),
+            'delete', 'namespace', environment.namespace,
+            '--ignore-not-found=true',
+            '--wait=true',
+        ], { signal: options.signal });
+    }
+    async #startPortForward(environment, service, port, signal) {
+        return await new Promise((resolve, reject) => {
+            const child = spawn(this.#executable, [
+                ...contextArgs(environment.kubeContext),
+                '--namespace', environment.namespace,
+                'port-forward', `service/${service}`, `:${port}`,
+                '--address', '127.0.0.1',
+            ], { stdio: ['pipe', 'pipe', 'pipe'] });
+            const forwards = this.#portForwards.get(environment.id) ?? [];
+            forwards.push(child);
+            this.#portForwards.set(environment.id, forwards);
+            let output = '';
+            let settled = false;
+            const timeout = setTimeout(() => finish(new Error(`timed out starting port-forward for service/${service}`)), 30_000);
+            const abort = () => finish(new VerificationEnvironmentAbortError());
+            const finish = (error, localPort) => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(timeout);
+                signal?.removeEventListener('abort', abort);
+                if (error) {
+                    stopChildProcess(child);
+                    reject(error);
+                }
+                else {
+                    resolve(localPort);
+                }
+            };
+            const inspect = (chunk) => {
+                if (settled)
+                    return;
+                output = boundedAppend(output, chunk.toString());
+                const match = /Forwarding from 127\.0\.0\.1:(\d+)\s+->/u.exec(output);
+                if (match) {
+                    output = '';
+                    finish(undefined, Number(match[1]));
+                }
+            };
+            child.stdout.on('data', inspect);
+            child.stderr.on('data', inspect);
+            child.once('error', (error) => finish(error));
+            child.once('close', (code) => {
+                if (!settled)
+                    finish(new Error(`port-forward for service/${service} exited with ${code ?? 'no status'}: ${output.trim().slice(-4_000)}`));
+            });
+            signal?.addEventListener('abort', abort, { once: true });
+            if (signal?.aborted)
+                abort();
+        });
+    }
+    #stopPortForwards(environmentId) {
+        for (const child of this.#portForwards.get(environmentId) ?? []) {
+            stopChildProcess(child);
+        }
+        this.#portForwards.delete(environmentId);
+    }
+}
+export function verificationKubernetesConnection(input) {
+    return {
+        id: 'factory-verification-gate',
+        target: 'managed',
+        customers: ['*'],
+        repositories: [input.repository],
+        credentialKind: 'kubeconfig',
+        kubeconfigPath: input.kubeconfig ?? '',
+        ...(input.context ? { context: input.context } : {}),
+        protectedNamespaces: ['default', 'prod', 'production'],
+        allowClusterScopedResources: false,
+        allowedClusterScopedKinds: [],
+        nodeSelector: {},
+        tolerations: [],
+        fidelityCaveat: DEFAULT_MANAGED_FIDELITY_CAVEAT,
+    };
+}
+function stopChildProcess(child) {
+    if (child.exitCode !== null)
+        return;
+    child.kill('SIGTERM');
+    const force = setTimeout(() => child.kill('SIGKILL'), 2_000);
+    force.unref();
+    child.once('close', () => clearTimeout(force));
+}
+async function resourcesFromManifest(path, namespace) {
+    const documents = parseAllDocuments(await readFile(path, 'utf8'));
+    const resources = [];
+    for (const document of documents) {
+        if (document.errors.length > 0) {
+            throw new Error(`Invalid Kubernetes manifest ${path}: ${document.errors.map((error) => error.message).join('; ')}`);
+        }
+        const value = document.toJSON();
+        if (value === null || value === undefined)
+            continue;
+        for (const resource of flattenResource(value)) {
+            const kind = typeof resource.kind === 'string' ? resource.kind : '';
+            if (!kind || typeof resource.apiVersion !== 'string') {
+                throw new Error(`Kubernetes manifest ${path} contains a resource without apiVersion/kind`);
+            }
+            if (CLUSTER_SCOPED_KINDS.has(kind)) {
+                throw new Error(`Verification manifests may not create cluster-scoped ${kind} resources`);
+            }
+            const metadata = asRecord(resource.metadata);
+            resource.metadata = { ...metadata, namespace };
+            resources.push(resource);
+        }
+    }
+    return resources;
+}
+function flattenResource(value) {
+    const resource = asRecord(value);
+    if (resource.kind === 'List' && Array.isArray(resource.items)) {
+        return resource.items.flatMap(flattenResource);
+    }
+    return [resource];
+}
+const CLUSTER_SCOPED_KINDS = new Set([
+    'APIService',
+    'ClusterRole',
+    'ClusterRoleBinding',
+    'CustomResourceDefinition',
+    'MutatingWebhookConfiguration',
+    'Namespace',
+    'Node',
+    'PersistentVolume',
+    'PriorityClass',
+    'StorageClass',
+    'ValidatingWebhookConfiguration',
+]);
+function activeNamespaceCount(stdout) {
+    try {
+        const value = JSON.parse(stdout);
+        return (value.items ?? []).filter((item) => !item.metadata?.deletionTimestamp).length;
+    }
+    catch (error) {
+        throw new Error(`kubectl returned invalid namespace inventory: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+const contextArgs = (context) => context ? ['--context', context] : [];
+const normalizeEndpointPath = (path) => !path ? '' : path.startsWith('/') ? path : `/${path}`;
+const dnsLabel = (value) => value
+    .toLowerCase()
+    .replace(/[^a-z0-9-]+/gu, '-')
+    .replace(/^-+|-+$/gu, '') || 'verification';
+const boundedAppend = (current, chunk) => `${current}${chunk}`.slice(-MAX_OUTPUT_BYTES);
+const asRecord = (value) => value !== null && typeof value === 'object' && !Array.isArray(value)
+    ? value
+    : {};
+//# sourceMappingURL=kubernetes-environment.js.map

package/dist/environments/kubernetes-environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubernetes-environment.js","sourceRoot":"","sources":["../../src/environments/kubernetes-environment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAuC,MAAM,oBAAoB,CAAA;AAC/E,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAE3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAA;AAExC,OAAO,EACL,+BAA+B,EAC/B,iCAAiC,GAElC,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,kCAAkC,EAAE,MAAM,0BAA0B,CAAA;AAQ7E,MAAM,CAAC,MAAM,iCAAiC,GAAG,iCAAiC,CAAA;AAClF,MAAM,CAAC,MAAM,4BAA4B,GAAG,qCAAqC,CAAA;AACjF,MAAM,CAAC,MAAM,sCAAsC,GAAG,oCAAoC,CAAA;AAC1F,MAAM,CAAC,MAAM,yCAAyC,GAAG,oCAAoC,CAAA;AAE7F,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAA;AAsBpC,MAAM,UAAU,+BAA+B,CAC7C,UAAU,GAAG,SAAS;IAEtB,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,GAAG,EAAE,EAAE,EAAE,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACzE,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;QAC1E,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,IAAI,UAAqD,CAAA;QAEzD,MAAM,MAAM,GAAG,CAAC,KAAa,EAAQ,EAAE;YACrC,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;YACnD,IAAI,CAAC,KAAK,IAAI,UAAU;gBAAE,YAAY,CAAC,UAAU,CAAC,CAAA;YAClD,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAA;;gBACnB,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QAClC,CAAC,CAAA;QACD,MAAM,IAAI,GAAG,GAAS,EAAE;YACtB,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;gBAAE,OAAM;YACnC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACrB,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAA;YAC3D,UAAU,CAAC,KAAK,EAAE,CAAA;QACpB,CAAC,CAAA;QACD,MAAM,KAAK,GAAG,GAAS,EAAE;YACvB,IAAI,EAAE,CAAA;YACN,MAAM,CAAC,IAAI,iCAAiC,EAAE,CAAC,CAAA;QACjD,CAAC,CAAA;QACD,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QAChE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,KAAK,EAAE,CAAA;QAE3C,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;QAChC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;QAChC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;QACrF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;QACrF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QAC7C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAC3B,IAAI,UAAU;gBAAE,YAAY,CAAC,UAAU,CAAC,CAAA;YACxC,IAAI,IAAI,KAAK,CAAC;gBAAE,MAAM,EAAE,CAAA;;gBACnB,MAAM,CAAC,IAAI,KAAK,CACnB,GAAG,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,WAAW,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CACpH,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,OAAO,iCAAkC,SAAQ,KAAK;IAC1D;QACE,KAAK,CAAC,4CAA4C,CAAC,CAAA;QACnD,IAAI,CAAC,IAAI,GAAG,mCAAmC,CAAA;IACjD,CAAC;CACF;AAED,MAAM,OAAO,0BAA0B;IAC5B,WAAW,CAAQ;IACnB,IAAI,CAAiC;IACrC,aAAa,GAAG,IAAI,GAAG,EAA4C,CAAA;IAE5E,YAAY,UAA6C,EAAE;QACzD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,IAAI,SAAS,CAAA;QAClD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,IAAI,+BAA+B,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACjF,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAgC;QAC9C,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC;YAC7B,GAAG,OAAO;YACV,KAAK,EAAE,YAAY;YACnB,YAAY,EAAE,GAAG,iCAAiC,OAAO;YACzD,UAAU,EAAE,MAAM;SACnB,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;QAC5B,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAClD,IAAI,MAAM,IAAI,KAAK,CAAC,qBAAqB,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CACb,qDAAqD,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,CAC9F,CAAA;QACH,CAAC;QAED,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC3E,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;QAClE,MAAM,SAAS,GAAG;YAChB,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE;gBACR,IAAI,EAAE,EAAE;gBACR,MAAM,EAAE;oBACN,CAAC,iCAAiC,CAAC,EAAE,MAAM;oBAC3C,CAAC,4BAA4B,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;oBAClE,oCAAoC,EAAE,YAAY;oBAClD,4CAA4C,EAAE,QAAQ;oBACtD,kCAAkC,EAAE,YAAY;oBAChD,iCAAiC,EAAE,YAAY;iBAChD;gBACD,WAAW,EAAE;oBACX,CAAC,sCAAsC,CAAC,EAAE,SAAS;oBACnD,CAAC,yCAAyC,CAAC,EAAE,KAAK,CAAC,UAAU;iBAC9D;aACF;SACF,CAAA;QACD,IAAI,CAAC;YACH,kEAAkE;YAClE,8DAA8D;YAC9D,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,CAAC,EAAE;gBACzD,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;gBAChC,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAA;YACF,MAAM,UAAU,GAAG,gCAAgC,CAAC;gBAClD,OAAO,EAAE,KAAK,CAAC,WAAW;gBAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,CAAC,CAAA;YACF,MAAM,UAAU,GAAG,kCAAkC,CACnD,EAAE,EACF,UAAU,EACV,iCAAiC,CAAC,KAAK,CAAC,EAAE,CAAC,CAC5C,CAAA;YACD,MAAM,IAAI,CAAC,IAAI,CAAC;gBACd,GAAG,OAAO;gBACV,aAAa,EAAE,EAAE;gBACjB,OAAO,EAAE,YAAY,EAAE,GAAG;aAC3B,EAAE;gBACD,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;gBAC5E,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,IAAI,CAAC;gBACd,GAAG,OAAO;gBACV,QAAQ,EAAE,WAAW,EAAE,EAAE;gBACzB,yBAAyB;gBACzB,cAAc;aACf,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACzB,MAAM,KAAK,CAAA;QACb,CAAC;QACD,OAAO;YACL,EAAE;YACF,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,EAAE;YACb,iBAAiB,EAAE,EAAE;YACrB,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,SAAS;SACV,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CACV,WAAoC,EACpC,KAA6B;QAE7B,MAAM,SAAS,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAC1E,qBAAqB,CAAC,IAAI,EAAE,WAAW,CAAC,SAAS,CAAC,CACnD,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACV,MAAM,IAAI,CAAC,IAAI,CAAC;YACd,GAAG,WAAW,CAAC,WAAW,CAAC,WAAW,CAAC;YACvC,aAAa,EAAE,WAAW,CAAC,SAAS;YACpC,OAAO,EAAE,YAAY,EAAE,GAAG;SAC3B,EAAE;YACD,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;YAC3E,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAA;QAEF,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,IAAI,CAAC;gBACd,GAAG,WAAW,CAAC,WAAW,CAAC,WAAW,CAAC;gBACvC,aAAa,EAAE,WAAW,CAAC,SAAS;gBACpC,MAAM,EAAE,KAAK,CAAC,QAAQ;gBACtB,mBAAmB,KAAK,CAAC,SAAS,EAAE;gBACpC,aAAa,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,GAAG;aAChE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;QAC9B,CAAC;QAED,MAAM,SAAS,GAA2B,EAAE,CAAA;QAC5C,MAAM,iBAAiB,GAA2B,EAAE,CAAA;QACpD,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/D,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;YACnD,iBAAiB,CAAC,IAAI,CAAC,GAAG,GAAG,QAAQ,CAAC,MAAM,MAAM,QAAQ,CAAC,OAAO,IAAI,WAAW,CAAC,SAAS,sBAAsB,QAAQ,CAAC,IAAI,GAAG,MAAM,EAAE,CAAA;YACzI,SAAS,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,WAAW;gBACpC,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,gBAAgB,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE;gBACvI,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;QAC7B,CAAC;QACD,OAAO,EAAE,GAAG,WAAW,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAA;IACzD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,WAAoC,EAAE,UAAoC,EAAE;QACzF,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;QACtC,MAAM,IAAI,CAAC,IAAI,CAAC;YACd,GAAG,WAAW,CAAC,WAAW,CAAC,WAAW,CAAC;YACvC,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,SAAS;YAC5C,yBAAyB;YACzB,aAAa;SACd,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAChC,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,WAAoC,EACpC,OAAe,EACf,IAAY,EACZ,MAAoB;QAEpB,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE;gBACpC,GAAG,WAAW,CAAC,WAAW,CAAC,WAAW,CAAC;gBACvC,aAAa,EAAE,WAAW,CAAC,SAAS;gBACpC,cAAc,EAAE,WAAW,OAAO,EAAE,EAAE,IAAI,IAAI,EAAE;gBAChD,WAAW,EAAE,WAAW;aACzB,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;YACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,CAAA;YAC7D,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACpB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;YAChD,IAAI,MAAM,GAAG,EAAE,CAAA;YACf,IAAI,OAAO,GAAG,KAAK,CAAA;YACnB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,+CAA+C,OAAO,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;YACrH,MAAM,KAAK,GAAG,GAAS,EAAE,CAAC,MAAM,CAAC,IAAI,iCAAiC,EAAE,CAAC,CAAA;YACzE,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,SAAkB,EAAQ,EAAE;gBACzD,IAAI,OAAO;oBAAE,OAAM;gBACnB,OAAO,GAAG,IAAI,CAAA;gBACd,YAAY,CAAC,OAAO,CAAC,CAAA;gBACrB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;gBAC3C,IAAI,KAAK,EAAE,CAAC;oBACV,gBAAgB,CAAC,KAAK,CAAC,CAAA;oBACvB,MAAM,CAAC,KAAK,CAAC,CAAA;gBACf,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,SAAU,CAAC,CAAA;gBACrB,CAAC;YACH,CAAC,CAAA;YACD,MAAM,OAAO,GAAG,CAAC,KAAsB,EAAQ,EAAE;gBAC/C,IAAI,OAAO;oBAAE,OAAM;gBACnB,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAA;gBAChD,MAAM,KAAK,GAAG,0CAA0C,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;gBACrE,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,GAAG,EAAE,CAAA;oBACX,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;gBACrC,CAAC;YACH,CAAC,CAAA;YACD,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;YAChC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;YAChC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;YAC7C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC3B,IAAI,CAAC,OAAO;oBAAE,MAAM,CAAC,IAAI,KAAK,CAC5B,4BAA4B,OAAO,gBAAgB,IAAI,IAAI,WAAW,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CACzG,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;YACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YACxD,IAAI,MAAM,EAAE,OAAO;gBAAE,KAAK,EAAE,CAAA;QAC9B,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,iBAAiB,CAAC,aAAqB;QACrC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC;YAChE,gBAAgB,CAAC,KAAK,CAAC,CAAA;QACzB,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IAC1C,CAAC;CACF;AAED,MAAM,UAAU,gCAAgC,CAAC,KAIhD;IACC,OAAO;QACL,EAAE,EAAE,2BAA2B;QAC/B,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,CAAC,GAAG,CAAC;QAChB,YAAY,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;QAChC,cAAc,EAAE,YAAY;QAC5B,cAAc,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE;QACtC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC;QACtD,2BAA2B,EAAE,KAAK;QAClC,yBAAyB,EAAE,EAAE;QAC7B,YAAY,EAAE,EAAE;QAChB,WAAW,EAAE,EAAE;QACf,cAAc,EAAE,+BAA+B;KAChD,CAAA;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAqC;IAC7D,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAM;IACnC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACrB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAA;IAC5D,KAAK,CAAC,KAAK,EAAE,CAAA;IACb,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;AAChD,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,IAAY,EAAE,SAAiB;IAClE,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;IACjE,MAAM,SAAS,GAAmC,EAAE,CAAA;IACpD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,KAAK,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACrH,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAA;QAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;YAAE,SAAQ;QACnD,KAAK,MAAM,QAAQ,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;YACnE,IAAI,CAAC,IAAI,IAAI,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,8CAA8C,CAAC,CAAA;YAC5F,CAAC;YACD,IAAI,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,wDAAwD,IAAI,YAAY,CAAC,CAAA;YAC3F,CAAC;YACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;YAC5C,QAAQ,CAAC,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAA;YAC9C,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAChC,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9D,OAAO,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;IAChD,CAAC;IACD,OAAO,CAAC,QAAQ,CAAC,CAAA;AACnB,CAAC;AAED,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,YAAY;IACZ,aAAa;IACb,oBAAoB;IACpB,0BAA0B;IAC1B,8BAA8B;IAC9B,WAAW;IACX,MAAM;IACN,kBAAkB;IAClB,eAAe;IACf,cAAc;IACd,gCAAgC;CACjC,CAAC,CAAA;AAEF,SAAS,oBAAoB,CAAC,MAAc;IAC1C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAqE,CAAA;QACpG,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,MAAM,CAAA;IACvF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,iDAAiD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAC5H,CAAC;AACH,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,OAA2B,EAAY,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AAEpG,MAAM,qBAAqB,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAA;AAE7G,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK;KAC9C,WAAW,EAAE;KACb,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;KAC7B,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,cAAc,CAAA;AAE7C,MAAM,aAAa,GAAG,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAC/D,GAAG,OAAO,GAAG,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,CAAA;AAE/C,MAAM,QAAQ,GAAG,CAAC,KAAc,EAA2B,EAAE,CAC3D,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;IAClE,CAAC,CAAC,KAAgC;IAClC,CAAC,CAAC,EAAE,CAAA"}

package/dist/environments/kubernetes-provider.d.ts

@@ -0,0 +1,83 @@
+import type { Environment, EnvironmentProvider, EnvironmentStatus, ProvisionEnvironmentSpec } from '../ports/environment.js';
+import type { Logger } from '../ports/system.js';
+import { KubernetesConnectionRegistry, type KubernetesGuardrailDefaults, type ResolvedKubernetesConnection } from './connection-registry.js';
+import { type KubernetesClient, type KubernetesResource } from './kubernetes-client.js';
+import { type KubernetesStackDescriptorInput } from './stack-descriptor.js';
+export declare const KUBERNETES_MANAGED_BY_LABEL = "app.kubernetes.io/managed-by";
+export declare const KUBERNETES_ENVIRONMENT_ID_LABEL = "factory.agentworkforce.dev/environment-id";
+export declare const KUBERNETES_OWNER_ID_LABEL = "factory.agentworkforce.dev/owner-id";
+export declare const KUBERNETES_EXPIRES_AT_LABEL = "factory.agentworkforce.dev/expires-at";
+export declare const KUBERNETES_OWNER_ID_ANNOTATION = "factory.agentworkforce.dev/owner-id";
+export declare const KUBERNETES_CUSTOMER_ID_ANNOTATION = "factory.agentworkforce.dev/customer-id";
+export declare const KUBERNETES_REPOSITORY_ANNOTATION = "factory.agentworkforce.dev/repository";
+export declare const KUBERNETES_CONNECTION_ID_ANNOTATION = "factory.agentworkforce.dev/connection-id";
+export declare const KUBERNETES_TARGET_ANNOTATION = "factory.agentworkforce.dev/target";
+export declare const KUBERNETES_CREATED_AT_ANNOTATION = "factory.agentworkforce.dev/created-at";
+export declare const KUBERNETES_ENDPOINTS_ANNOTATION = "factory.agentworkforce.dev/endpoints";
+export declare const KUBERNETES_CLUSTER_RESOURCES_ANNOTATION = "factory.agentworkforce.dev/cluster-resources";
+export interface KubernetesStackProvisionInput {
+    descriptor: KubernetesStackDescriptorInput;
+    repoRoot: string;
+}
+export interface KubernetesProvisionSpec extends Omit<ProvisionEnvironmentSpec, 'stack'> {
+    target?: 'byoc' | 'managed';
+    stack: KubernetesStackProvisionInput;
+}
+export interface KubernetesStackSecretResolver {
+    resolve(reference: string): Promise<string>;
+}
+export declare class EnvironmentKubernetesStackSecretResolver implements KubernetesStackSecretResolver {
+    #private;
+    constructor(env?: NodeJS.ProcessEnv);
+    resolve(reference: string): Promise<string>;
+}
+export interface KubernetesEnvironmentProviderOptions {
+    registry: KubernetesConnectionRegistry;
+    client?: KubernetesClient;
+    secretResolver?: KubernetesStackSecretResolver;
+    defaults?: Partial<KubernetesGuardrailDefaults>;
+    now?: () => Date;
+    randomId?: () => string;
+    logger?: Logger;
+    ownerIsAlive?: (ownerId: string) => Promise<boolean | undefined>;
+}
+export interface KubernetesReapReport {
+    reaped: Array<{
+        id: string;
+        connectionId: string;
+        reason: 'ttl-expired' | 'owner-gone';
+    }>;
+    skipped: Array<{
+        id?: string;
+        connectionId: string;
+        reason: string;
+    }>;
+}
+/** Namespace-isolated Kubernetes provider for customer EKS and managed fallback clusters. */
+export declare class KubernetesEnvironmentProvider implements EnvironmentProvider {
+    #private;
+    constructor(options: KubernetesEnvironmentProviderOptions);
+    provision(spec: KubernetesProvisionSpec): Promise<Environment>;
+    status(id: string): Promise<EnvironmentStatus>;
+    endpoints(id: string): Promise<Record<string, string>>;
+    destroy(id: string): Promise<void>;
+    reap(): Promise<KubernetesReapReport>;
+}
+export declare class KubernetesEnvironmentReaper {
+    #private;
+    constructor(provider: KubernetesEnvironmentProvider, options?: {
+        intervalMs?: number;
+    });
+    start(): void;
+    stop(): Promise<void>;
+}
+interface GuardrailResourceOptions {
+    namespace: string;
+    environmentId: string;
+    connection: ResolvedKubernetesConnection;
+    descriptorAllowsClusterScope: boolean;
+}
+export declare function enforceKubernetesResourceSafety(input: KubernetesResource[], options: GuardrailResourceOptions): KubernetesResource[];
+export declare function createKubernetesGuardrailResources(namespace: string, connection: ResolvedKubernetesConnection, defaultsInput: KubernetesGuardrailDefaults): KubernetesResource[];
+export {};
+//# sourceMappingURL=kubernetes-provider.d.ts.map

package/dist/environments/kubernetes-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubernetes-provider.d.ts","sourceRoot":"","sources":["../../src/environments/kubernetes-provider.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,yBAAyB,CAAA;AAChC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EACL,4BAA4B,EAE5B,KAAK,2BAA2B,EAChC,KAAK,4BAA4B,EAClC,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAEL,KAAK,gBAAgB,EAErB,KAAK,kBAAkB,EACxB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAIL,KAAK,8BAA8B,EAEpC,MAAM,uBAAuB,CAAA;AAE9B,eAAO,MAAM,2BAA2B,iCAAiC,CAAA;AACzE,eAAO,MAAM,+BAA+B,8CAA8C,CAAA;AAC1F,eAAO,MAAM,yBAAyB,wCAAwC,CAAA;AAC9E,eAAO,MAAM,2BAA2B,0CAA0C,CAAA;AAClF,eAAO,MAAM,8BAA8B,wCAAwC,CAAA;AACnF,eAAO,MAAM,iCAAiC,2CAA2C,CAAA;AACzF,eAAO,MAAM,gCAAgC,0CAA0C,CAAA;AACvF,eAAO,MAAM,mCAAmC,6CAA6C,CAAA;AAC7F,eAAO,MAAM,4BAA4B,sCAAsC,CAAA;AAC/E,eAAO,MAAM,gCAAgC,0CAA0C,CAAA;AACvF,eAAO,MAAM,+BAA+B,yCAAyC,CAAA;AACrF,eAAO,MAAM,uCAAuC,iDAAiD,CAAA;AAOrG,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,8BAA8B,CAAA;IAC1C,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,uBAAwB,SAAQ,IAAI,CAAC,wBAAwB,EAAE,OAAO,CAAC;IACtF,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,KAAK,EAAE,6BAA6B,CAAA;CACrC;AAED,MAAM,WAAW,6BAA6B;IAC5C,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CAC5C;AAED,qBAAa,wCAAyC,YAAW,6BAA6B;;gBAGhF,GAAG,GAAE,MAAM,CAAC,UAAwB;IAI1C,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAUlD;AAUD,MAAM,WAAW,oCAAoC;IACnD,QAAQ,EAAE,4BAA4B,CAAA;IACtC,MAAM,CAAC,EAAE,gBAAgB,CAAA;IACzB,cAAc,CAAC,EAAE,6BAA6B,CAAA;IAC9C,QAAQ,CAAC,EAAE,OAAO,CAAC,2BAA2B,CAAC,CAAA;IAC/C,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,MAAM,CAAA;IACvB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAA;CACjE;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,aAAa,GAAG,YAAY,CAAA;KAAE,CAAC,CAAA;IACzF,OAAO,EAAE,KAAK,CAAC;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACtE;AAED,6FAA6F;AAC7F,qBAAa,6BAA8B,YAAW,mBAAmB;;gBAW3D,OAAO,EAAE,oCAAoC;IAkBnD,SAAS,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,WAAW,CAAC;IAsI9D,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAgB9C,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IA0BtD,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BlC,IAAI,IAAI,OAAO,CAAC,oBAAoB,CAAC;CAyM5C;AAED,qBAAa,2BAA2B;;gBAO1B,QAAQ,EAAE,6BAA6B,EAAE,OAAO,GAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAO;IAK1F,KAAK,IAAI,IAAI;IAKP,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAuB5B;AAED,UAAU,wBAAwB;IAChC,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,4BAA4B,CAAA;IACxC,4BAA4B,EAAE,OAAO,CAAA;CACtC;AAyBD,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,kBAAkB,EAAE,EAC3B,OAAO,EAAE,wBAAwB,GAChC,kBAAkB,EAAE,CAwDtB;AAED,wBAAgB,kCAAkC,CAChD,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,4BAA4B,EACxC,aAAa,EAAE,2BAA2B,GACzC,kBAAkB,EAAE,CAyItB"}