@agent-relay/factory 0.1.50 → 0.1.52

package/dist/environments/connection-registry.d.ts

@@ -0,0 +1,617 @@
+import { z } from 'zod';
+export declare const DEFAULT_MANAGED_FIDELITY_CAVEAT = "Managed verification runs on Factory infrastructure; Kubernetes version, CNI, IAM/IRSA, ingress, add-ons, and node types may differ from the customer cluster.";
+export declare const KubernetesCredentialReferenceSchema: z.ZodObject<{
+    kind: z.ZodEnum<["kubeconfig", "irsa"]>;
+    secretRef: z.ZodEffects<z.ZodString, string, string>;
+}, "strict", z.ZodTypeAny, {
+    kind: "kubeconfig" | "irsa";
+    secretRef: string;
+}, {
+    kind: "kubeconfig" | "irsa";
+    secretRef: string;
+}>;
+export declare const KubernetesConnectionSchema: z.ZodEffects<z.ZodEffects<z.ZodObject<{
+    id: z.ZodString;
+    target: z.ZodDefault<z.ZodEnum<["byoc", "managed"]>>;
+    customers: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    repositories: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    credential: z.ZodObject<{
+        kind: z.ZodEnum<["kubeconfig", "irsa"]>;
+        secretRef: z.ZodEffects<z.ZodString, string, string>;
+    }, "strict", z.ZodTypeAny, {
+        kind: "kubeconfig" | "irsa";
+        secretRef: string;
+    }, {
+        kind: "kubeconfig" | "irsa";
+        secretRef: string;
+    }>;
+    context: z.ZodOptional<z.ZodString>;
+    protectedNamespaces: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    allowClusterScopedResources: z.ZodDefault<z.ZodBoolean>;
+    allowedClusterScopedKinds: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    nodeSelector: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    tolerations: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        key: z.ZodOptional<z.ZodString>;
+        operator: z.ZodOptional<z.ZodEnum<["Exists", "Equal"]>>;
+        value: z.ZodOptional<z.ZodString>;
+        effect: z.ZodOptional<z.ZodEnum<["NoSchedule", "PreferNoSchedule", "NoExecute"]>>;
+        tolerationSeconds: z.ZodOptional<z.ZodNumber>;
+    }, "strict", z.ZodTypeAny, {
+        key?: string | undefined;
+        operator?: "Exists" | "Equal" | undefined;
+        value?: string | undefined;
+        effect?: "NoSchedule" | "PreferNoSchedule" | "NoExecute" | undefined;
+        tolerationSeconds?: number | undefined;
+    }, {
+        key?: string | undefined;
+        operator?: "Exists" | "Equal" | undefined;
+        value?: string | undefined;
+        effect?: "NoSchedule" | "PreferNoSchedule" | "NoExecute" | undefined;
+        tolerationSeconds?: number | undefined;
+    }>, "many">>;
+    fidelityCaveat: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    id: string;
+    target: "byoc" | "managed";
+    customers: string[];
+    repositories: string[];
+    credential: {
+        kind: "kubeconfig" | "irsa";
+        secretRef: string;
+    };
+    protectedNamespaces: string[];
+    allowClusterScopedResources: boolean;
+    allowedClusterScopedKinds: string[];
+    nodeSelector: Record<string, string>;
+    tolerations: {
+        key?: string | undefined;
+        operator?: "Exists" | "Equal" | undefined;
+        value?: string | undefined;
+        effect?: "NoSchedule" | "PreferNoSchedule" | "NoExecute" | undefined;
+        tolerationSeconds?: number | undefined;
+    }[];
+    context?: string | undefined;
+    fidelityCaveat?: string | undefined;
+}, {
+    id: string;
+    credential: {
+        kind: "kubeconfig" | "irsa";
+        secretRef: string;
+    };
+    target?: "byoc" | "managed" | undefined;
+    customers?: string[] | undefined;
+    repositories?: string[] | undefined;
+    context?: string | undefined;
+    protectedNamespaces?: string[] | undefined;
+    allowClusterScopedResources?: boolean | undefined;
+    allowedClusterScopedKinds?: string[] | undefined;
+    nodeSelector?: Record<string, string> | undefined;
+    tolerations?: {
+        key?: string | undefined;
+        operator?: "Exists" | "Equal" | undefined;
+        value?: string | undefined;
+        effect?: "NoSchedule" | "PreferNoSchedule" | "NoExecute" | undefined;
+        tolerationSeconds?: number | undefined;
+    }[] | undefined;
+    fidelityCaveat?: string | undefined;
+}>, {
+    id: string;
+    target: "byoc" | "managed";
+    customers: string[];
+    repositories: string[];
+    credential: {
+        kind: "kubeconfig" | "irsa";
+        secretRef: string;
+    };
+    protectedNamespaces: string[];
+    allowClusterScopedResources: boolean;
+    allowedClusterScopedKinds: string[];
+    nodeSelector: Record<string, string>;
+    tolerations: {
+        key?: string | undefined;
+        operator?: "Exists" | "Equal" | undefined;
+        value?: string | undefined;
+        effect?: "NoSchedule" | "PreferNoSchedule" | "NoExecute" | undefined;
+        tolerationSeconds?: number | undefined;
+    }[];
+    context?: string | undefined;
+    fidelityCaveat?: string | undefined;
+}, {
+    id: string;
+    credential: {
+        kind: "kubeconfig" | "irsa";
+        secretRef: string;
+    };
+    target?: "byoc" | "managed" | undefined;
+    customers?: string[] | undefined;
+    repositories?: string[] | undefined;
+    context?: string | undefined;
+    protectedNamespaces?: string[] | undefined;
+    allowClusterScopedResources?: boolean | undefined;
+    allowedClusterScopedKinds?: string[] | undefined;
+    nodeSelector?: Record<string, string> | undefined;
+    tolerations?: {
+        key?: string | undefined;
+        operator?: "Exists" | "Equal" | undefined;
+        value?: string | undefined;
+        effect?: "NoSchedule" | "PreferNoSchedule" | "NoExecute" | undefined;
+        tolerationSeconds?: number | undefined;
+    }[] | undefined;
+    fidelityCaveat?: string | undefined;
+}>, {
+    id: string;
+    target: "byoc" | "managed";
+    customers: string[];
+    repositories: string[];
+    credential: {
+        kind: "kubeconfig" | "irsa";
+        secretRef: string;
+    };
+    protectedNamespaces: string[];
+    allowClusterScopedResources: boolean;
+    allowedClusterScopedKinds: string[];
+    nodeSelector: Record<string, string>;
+    tolerations: {
+        key?: string | undefined;
+        operator?: "Exists" | "Equal" | undefined;
+        value?: string | undefined;
+        effect?: "NoSchedule" | "PreferNoSchedule" | "NoExecute" | undefined;
+        tolerationSeconds?: number | undefined;
+    }[];
+    context?: string | undefined;
+    fidelityCaveat?: string | undefined;
+}, {
+    id: string;
+    credential: {
+        kind: "kubeconfig" | "irsa";
+        secretRef: string;
+    };
+    target?: "byoc" | "managed" | undefined;
+    customers?: string[] | undefined;
+    repositories?: string[] | undefined;
+    context?: string | undefined;
+    protectedNamespaces?: string[] | undefined;
+    allowClusterScopedResources?: boolean | undefined;
+    allowedClusterScopedKinds?: string[] | undefined;
+    nodeSelector?: Record<string, string> | undefined;
+    tolerations?: {
+        key?: string | undefined;
+        operator?: "Exists" | "Equal" | undefined;
+        value?: string | undefined;
+        effect?: "NoSchedule" | "PreferNoSchedule" | "NoExecute" | undefined;
+        tolerationSeconds?: number | undefined;
+    }[] | undefined;
+    fidelityCaveat?: string | undefined;
+}>;
+export declare const KubernetesGuardrailDefaultsSchema: z.ZodDefault<z.ZodObject<{
+    ttlMs: z.ZodDefault<z.ZodNumber>;
+    readinessTimeoutMs: z.ZodDefault<z.ZodNumber>;
+    resourceQuota: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    limitRange: z.ZodDefault<z.ZodObject<{
+        default: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        defaultRequest: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        max: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        default: Record<string, string>;
+        max: Record<string, string>;
+        defaultRequest: Record<string, string>;
+    }, {
+        default?: Record<string, string> | undefined;
+        max?: Record<string, string> | undefined;
+        defaultRequest?: Record<string, string> | undefined;
+    }>>;
+}, "strict", z.ZodTypeAny, {
+    ttlMs: number;
+    readinessTimeoutMs: number;
+    resourceQuota: Record<string, string>;
+    limitRange: {
+        default: Record<string, string>;
+        max: Record<string, string>;
+        defaultRequest: Record<string, string>;
+    };
+}, {
+    ttlMs?: number | undefined;
+    readinessTimeoutMs?: number | undefined;
+    resourceQuota?: Record<string, string> | undefined;
+    limitRange?: {
+        default?: Record<string, string> | undefined;
+        max?: Record<string, string> | undefined;
+        defaultRequest?: Record<string, string> | undefined;
+    } | undefined;
+}>>;
+export declare const KubernetesEnvironmentConfigSchema: z.ZodDefault<z.ZodEffects<z.ZodObject<{
+    connections: z.ZodDefault<z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodObject<{
+        id: z.ZodString;
+        target: z.ZodDefault<z.ZodEnum<["byoc", "managed"]>>;
+        customers: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        repositories: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        credential: z.ZodObject<{
+            kind: z.ZodEnum<["kubeconfig", "irsa"]>;
+            secretRef: z.ZodEffects<z.ZodString, string, string>;
+        }, "strict", z.ZodTypeAny, {
+            kind: "kubeconfig" | "irsa";
+            secretRef: string;
+        }, {
+            kind: "kubeconfig" | "irsa";
+            secretRef: string;
+        }>;
+        context: z.ZodOptional<z.ZodString>;
+        protectedNamespaces: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        allowClusterScopedResources: z.ZodDefault<z.ZodBoolean>;
+        allowedClusterScopedKinds: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        nodeSelector: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        tolerations: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            key: z.ZodOptional<z.ZodString>;
+            operator: z.ZodOptional<z.ZodEnum<["Exists", "Equal"]>>;
+            value: z.ZodOptional<z.ZodString>;
+            effect: z.ZodOptional<z.ZodEnum<["NoSchedule", "PreferNoSchedule", "NoExecute"]>>;
+            tolerationSeconds: z.ZodOptional<z.ZodNumber>;
+        }, "strict", z.ZodTypeAny, {
+            key?: string | undefined;
+            operator?: "Exists" | "Equal" | undefined;
+            value?: string | undefined;
+            effect?: "NoSchedule" | "PreferNoSchedule" | "NoExecute" | undefined;
+            tolerationSeconds?: number | undefined;
+        }, {
+            key?: string | undefined;
+            operator?: "Exists" | "Equal" | undefined;
+            value?: string | undefined;
+            effect?: "NoSchedule" | "PreferNoSchedule" | "NoExecute" | undefined;
+            tolerationSeconds?: number | undefined;
+        }>, "many">>;
+        fidelityCaveat: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        id: string;
+        target: "byoc" | "managed";
+        customers: string[];
+        repositories: string[];
+        credential: {
+            kind: "kubeconfig" | "irsa";
+            secretRef: string;
+        };
+        protectedNamespaces: string[];
+        allowClusterScopedResources: boolean;
+        allowedClusterScopedKinds: string[];
+        nodeSelector: Record<string, string>;
+        tolerations: {
+            key?: string | undefined;
+            operator?: "Exists" | "Equal" | undefined;
+            value?: string | undefined;
+            effect?: "NoSchedule" | "PreferNoSchedule" | "NoExecute" | undefined;
+            tolerationSeconds?: number | undefined;
+        }[];
+        context?: string | undefined;
+        fidelityCaveat?: string | undefined;
+    }, {
+        id: string;
+        credential: {
+            kind: "kubeconfig" | "irsa";
+            secretRef: string;
+        };
+        target?: "byoc" | "managed" | undefined;
+        customers?: string[] | undefined;
+        repositories?: string[] | undefined;
+        context?: string | undefined;
+        protectedNamespaces?: string[] | undefined;
+        allowClusterScopedResources?: boolean | undefined;
+        allowedClusterScopedKinds?: string[] | undefined;
+        nodeSelector?: Record<string, string> | undefined;
+        tolerations?: {
+            key?: string | undefined;
+            operator?: "Exists" | "Equal" | undefined;
+            value?: string | undefined;
+            effect?: "NoSchedule" | "PreferNoSchedule" | "NoExecute" | undefined;
+            tolerationSeconds?: number | undefined;
+        }[] | undefined;
+        fidelityCaveat?: string | undefined;
+    }>, {
+        id: string;
+        target: "byoc" | "managed";
+        customers: string[];
+        repositories: string[];
+        credential: {
+            kind: "kubeconfig" | "irsa";
+            secretRef: string;
+        };
+        protectedNamespaces: string[];
+        allowClusterScopedResources: boolean;
+        allowedClusterScopedKinds: string[];
+        nodeSelector: Record<string, string>;
+        tolerations: {
+            key?: string | undefined;
+            operator?: "Exists" | "Equal" | undefined;
+            value?: string | undefined;
+            effect?: "NoSchedule" | "PreferNoSchedule" | "NoExecute" | undefined;
+            tolerationSeconds?: number | undefined;
+        }[];
+        context?: string | undefined;
+        fidelityCaveat?: string | undefined;
+    }, {
+        id: string;
+        credential: {
+            kind: "kubeconfig" | "irsa";
+            secretRef: string;
+        };
+        target?: "byoc" | "managed" | undefined;
+        customers?: string[] | undefined;
+        repositories?: string[] | undefined;
+        context?: string | undefined;
+        protectedNamespaces?: string[] | undefined;
+        allowClusterScopedResources?: boolean | undefined;
+        allowedClusterScopedKinds?: string[] | undefined;
+        nodeSelector?: Record<string, string> | undefined;
+        tolerations?: {
+            key?: string | undefined;
+            operator?: "Exists" | "Equal" | undefined;
+            value?: string | undefined;
+            effect?: "NoSchedule" | "PreferNoSchedule" | "NoExecute" | undefined;
+            tolerationSeconds?: number | undefined;
+        }[] | undefined;
+        fidelityCaveat?: string | undefined;
+    }>, {
+        id: string;
+        target: "byoc" | "managed";
+        customers: string[];
+        repositories: string[];
+        credential: {
+            kind: "kubeconfig" | "irsa";
+            secretRef: string;
+        };
+        protectedNamespaces: string[];
+        allowClusterScopedResources: boolean;
+        allowedClusterScopedKinds: string[];
+        nodeSelector: Record<string, string>;
+        tolerations: {
+            key?: string | undefined;
+            operator?: "Exists" | "Equal" | undefined;
+            value?: string | undefined;
+            effect?: "NoSchedule" | "PreferNoSchedule" | "NoExecute" | undefined;
+            tolerationSeconds?: number | undefined;
+        }[];
+        context?: string | undefined;
+        fidelityCaveat?: string | undefined;
+    }, {
+        id: string;
+        credential: {
+            kind: "kubeconfig" | "irsa";
+            secretRef: string;
+        };
+        target?: "byoc" | "managed" | undefined;
+        customers?: string[] | undefined;
+        repositories?: string[] | undefined;
+        context?: string | undefined;
+        protectedNamespaces?: string[] | undefined;
+        allowClusterScopedResources?: boolean | undefined;
+        allowedClusterScopedKinds?: string[] | undefined;
+        nodeSelector?: Record<string, string> | undefined;
+        tolerations?: {
+            key?: string | undefined;
+            operator?: "Exists" | "Equal" | undefined;
+            value?: string | undefined;
+            effect?: "NoSchedule" | "PreferNoSchedule" | "NoExecute" | undefined;
+            tolerationSeconds?: number | undefined;
+        }[] | undefined;
+        fidelityCaveat?: string | undefined;
+    }>, "many">>;
+    defaults: z.ZodDefault<z.ZodObject<{
+        ttlMs: z.ZodDefault<z.ZodNumber>;
+        readinessTimeoutMs: z.ZodDefault<z.ZodNumber>;
+        resourceQuota: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        limitRange: z.ZodDefault<z.ZodObject<{
+            default: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+            defaultRequest: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+            max: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        }, "strip", z.ZodTypeAny, {
+            default: Record<string, string>;
+            max: Record<string, string>;
+            defaultRequest: Record<string, string>;
+        }, {
+            default?: Record<string, string> | undefined;
+            max?: Record<string, string> | undefined;
+            defaultRequest?: Record<string, string> | undefined;
+        }>>;
+    }, "strict", z.ZodTypeAny, {
+        ttlMs: number;
+        readinessTimeoutMs: number;
+        resourceQuota: Record<string, string>;
+        limitRange: {
+            default: Record<string, string>;
+            max: Record<string, string>;
+            defaultRequest: Record<string, string>;
+        };
+    }, {
+        ttlMs?: number | undefined;
+        readinessTimeoutMs?: number | undefined;
+        resourceQuota?: Record<string, string> | undefined;
+        limitRange?: {
+            default?: Record<string, string> | undefined;
+            max?: Record<string, string> | undefined;
+            defaultRequest?: Record<string, string> | undefined;
+        } | undefined;
+    }>>;
+}, "strict", z.ZodTypeAny, {
+    connections: {
+        id: string;
+        target: "byoc" | "managed";
+        customers: string[];
+        repositories: string[];
+        credential: {
+            kind: "kubeconfig" | "irsa";
+            secretRef: string;
+        };
+        protectedNamespaces: string[];
+        allowClusterScopedResources: boolean;
+        allowedClusterScopedKinds: string[];
+        nodeSelector: Record<string, string>;
+        tolerations: {
+            key?: string | undefined;
+            operator?: "Exists" | "Equal" | undefined;
+            value?: string | undefined;
+            effect?: "NoSchedule" | "PreferNoSchedule" | "NoExecute" | undefined;
+            tolerationSeconds?: number | undefined;
+        }[];
+        context?: string | undefined;
+        fidelityCaveat?: string | undefined;
+    }[];
+    defaults: {
+        ttlMs: number;
+        readinessTimeoutMs: number;
+        resourceQuota: Record<string, string>;
+        limitRange: {
+            default: Record<string, string>;
+            max: Record<string, string>;
+            defaultRequest: Record<string, string>;
+        };
+    };
+}, {
+    connections?: {
+        id: string;
+        credential: {
+            kind: "kubeconfig" | "irsa";
+            secretRef: string;
+        };
+        target?: "byoc" | "managed" | undefined;
+        customers?: string[] | undefined;
+        repositories?: string[] | undefined;
+        context?: string | undefined;
+        protectedNamespaces?: string[] | undefined;
+        allowClusterScopedResources?: boolean | undefined;
+        allowedClusterScopedKinds?: string[] | undefined;
+        nodeSelector?: Record<string, string> | undefined;
+        tolerations?: {
+            key?: string | undefined;
+            operator?: "Exists" | "Equal" | undefined;
+            value?: string | undefined;
+            effect?: "NoSchedule" | "PreferNoSchedule" | "NoExecute" | undefined;
+            tolerationSeconds?: number | undefined;
+        }[] | undefined;
+        fidelityCaveat?: string | undefined;
+    }[] | undefined;
+    defaults?: {
+        ttlMs?: number | undefined;
+        readinessTimeoutMs?: number | undefined;
+        resourceQuota?: Record<string, string> | undefined;
+        limitRange?: {
+            default?: Record<string, string> | undefined;
+            max?: Record<string, string> | undefined;
+            defaultRequest?: Record<string, string> | undefined;
+        } | undefined;
+    } | undefined;
+}>, {
+    connections: {
+        id: string;
+        target: "byoc" | "managed";
+        customers: string[];
+        repositories: string[];
+        credential: {
+            kind: "kubeconfig" | "irsa";
+            secretRef: string;
+        };
+        protectedNamespaces: string[];
+        allowClusterScopedResources: boolean;
+        allowedClusterScopedKinds: string[];
+        nodeSelector: Record<string, string>;
+        tolerations: {
+            key?: string | undefined;
+            operator?: "Exists" | "Equal" | undefined;
+            value?: string | undefined;
+            effect?: "NoSchedule" | "PreferNoSchedule" | "NoExecute" | undefined;
+            tolerationSeconds?: number | undefined;
+        }[];
+        context?: string | undefined;
+        fidelityCaveat?: string | undefined;
+    }[];
+    defaults: {
+        ttlMs: number;
+        readinessTimeoutMs: number;
+        resourceQuota: Record<string, string>;
+        limitRange: {
+            default: Record<string, string>;
+            max: Record<string, string>;
+            defaultRequest: Record<string, string>;
+        };
+    };
+}, {
+    connections?: {
+        id: string;
+        credential: {
+            kind: "kubeconfig" | "irsa";
+            secretRef: string;
+        };
+        target?: "byoc" | "managed" | undefined;
+        customers?: string[] | undefined;
+        repositories?: string[] | undefined;
+        context?: string | undefined;
+        protectedNamespaces?: string[] | undefined;
+        allowClusterScopedResources?: boolean | undefined;
+        allowedClusterScopedKinds?: string[] | undefined;
+        nodeSelector?: Record<string, string> | undefined;
+        tolerations?: {
+            key?: string | undefined;
+            operator?: "Exists" | "Equal" | undefined;
+            value?: string | undefined;
+            effect?: "NoSchedule" | "PreferNoSchedule" | "NoExecute" | undefined;
+            tolerationSeconds?: number | undefined;
+        }[] | undefined;
+        fidelityCaveat?: string | undefined;
+    }[] | undefined;
+    defaults?: {
+        ttlMs?: number | undefined;
+        readinessTimeoutMs?: number | undefined;
+        resourceQuota?: Record<string, string> | undefined;
+        limitRange?: {
+            default?: Record<string, string> | undefined;
+            max?: Record<string, string> | undefined;
+            defaultRequest?: Record<string, string> | undefined;
+        } | undefined;
+    } | undefined;
+}>>;
+export type KubernetesConnection = z.output<typeof KubernetesConnectionSchema>;
+export type KubernetesConnectionInput = z.input<typeof KubernetesConnectionSchema>;
+export type KubernetesEnvironmentConfig = z.output<typeof KubernetesEnvironmentConfigSchema>;
+export type KubernetesGuardrailDefaults = z.output<typeof KubernetesGuardrailDefaultsSchema>;
+export interface ResolvedKubernetesCredential {
+    /** Path to a short-lived/scoped kubeconfig. The credential itself never enters config. */
+    kubeconfigPath: string;
+    /** Optional hermetic process environment for an exec-based kubeconfig (for example AWS IRSA). */
+    environment?: NodeJS.ProcessEnv;
+}
+export interface KubernetesCredentialResolver {
+    resolve(reference: string, kind: KubernetesConnection['credential']['kind']): Promise<ResolvedKubernetesCredential>;
+}
+export interface ResolvedKubernetesConnection extends Omit<KubernetesConnection, 'credential'> {
+    credentialKind: KubernetesConnection['credential']['kind'];
+    kubeconfigPath: string;
+    environment?: NodeJS.ProcessEnv;
+}
+export interface ResolveKubernetesConnectionInput {
+    customerId: string;
+    repository: string;
+    target?: KubernetesConnection['target'];
+}
+export type KubernetesConnectionResolution = {
+    id: string;
+    connection: ResolvedKubernetesConnection;
+    error?: never;
+} | {
+    id: string;
+    connection?: never;
+    error: unknown;
+};
+/** Resolve a kubeconfig path stored in an environment-backed CI secret reference. */
+export declare class EnvironmentKubernetesCredentialResolver implements KubernetesCredentialResolver {
+    #private;
+    constructor(env?: NodeJS.ProcessEnv);
+    resolve(reference: string): Promise<ResolvedKubernetesCredential>;
+}
+/** Customer/repository-aware registry for BYOC and managed cluster connections. */
+export declare class KubernetesConnectionRegistry {
+    #private;
+    readonly config: KubernetesEnvironmentConfig;
+    constructor(config: KubernetesEnvironmentConfig | z.input<typeof KubernetesEnvironmentConfigSchema>, resolver?: KubernetesCredentialResolver);
+    resolve(input: ResolveKubernetesConnectionInput): Promise<ResolvedKubernetesConnection>;
+    all(): Promise<ResolvedKubernetesConnection[]>;
+    /** Resolve every configured connection without letting one unavailable secret hide the others. */
+    resolveAll(): Promise<KubernetesConnectionResolution[]>;
+}
+//# sourceMappingURL=connection-registry.d.ts.map

package/dist/environments/connection-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-registry.d.ts","sourceRoot":"","sources":["../../src/environments/connection-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,eAAO,MAAM,+BAA+B,mKACsH,CAAA;AAyBlK,eAAO,MAAM,mCAAmC;;;;;;;;;EAGrC,CAAA;AAEX,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwBrC,CAAA;AAEF,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoBvB,CAAA;AAEvB,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAehC,CAAA;AAEd,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAA;AAC9E,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAA;AAClF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,iCAAiC,CAAC,CAAA;AAC5F,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,iCAAiC,CAAC,CAAA;AAE5F,MAAM,WAAW,4BAA4B;IAC3C,0FAA0F;IAC1F,cAAc,EAAE,MAAM,CAAA;IACtB,iGAAiG;IACjG,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAChC;AAED,MAAM,WAAW,4BAA4B;IAC3C,OAAO,CACL,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,oBAAoB,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,GAC/C,OAAO,CAAC,4BAA4B,CAAC,CAAA;CACzC;AAED,MAAM,WAAW,4BAA6B,SAAQ,IAAI,CAAC,oBAAoB,EAAE,YAAY,CAAC;IAC5F,cAAc,EAAE,oBAAoB,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAA;IAC1D,cAAc,EAAE,MAAM,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAChC;AAED,MAAM,WAAW,gCAAgC;IAC/C,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAA;CACxC;AAED,MAAM,MAAM,8BAA8B,GACtC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,4BAA4B,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CAAE,GACvE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAA;AAEtD,qFAAqF;AACrF,qBAAa,uCAAwC,YAAW,4BAA4B;;gBAG9E,GAAG,GAAE,MAAM,CAAC,UAAwB;IAI1C,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,4BAA4B,CAAC;CAiBxE;AAED,mFAAmF;AACnF,qBAAa,4BAA4B;;IACvC,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAA;gBAI1C,MAAM,EAAE,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,EACvF,QAAQ,GAAE,4BAA4E;IAMlF,OAAO,CAAC,KAAK,EAAE,gCAAgC,GAAG,OAAO,CAAC,4BAA4B,CAAC;IA2BvF,GAAG,IAAI,OAAO,CAAC,4BAA4B,EAAE,CAAC;IAIpD,kGAAkG;IAC5F,UAAU,IAAI,OAAO,CAAC,8BAA8B,EAAE,CAAC;CAuB9D"}