@agent-relay/factory 0.1.50 → 0.1.52
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +93 -11
- package/dist/cli/fleet.d.ts +4 -1
- package/dist/cli/fleet.d.ts.map +1 -1
- package/dist/cli/fleet.js +87 -42
- package/dist/cli/fleet.js.map +1 -1
- package/dist/config/schema.d.ts +1671 -10
- package/dist/config/schema.d.ts.map +1 -1
- package/dist/config/schema.js +83 -0
- package/dist/config/schema.js.map +1 -1
- package/dist/dispatch/templates.d.ts +6 -0
- package/dist/dispatch/templates.d.ts.map +1 -1
- package/dist/dispatch/templates.js +16 -0
- package/dist/dispatch/templates.js.map +1 -1
- package/dist/environments/connection-registry.d.ts +617 -0
- package/dist/environments/connection-registry.d.ts.map +1 -0
- package/dist/environments/connection-registry.js +174 -0
- package/dist/environments/connection-registry.js.map +1 -0
- package/dist/environments/index.d.ts +21 -0
- package/dist/environments/index.d.ts.map +1 -0
- package/dist/environments/index.js +11 -0
- package/dist/environments/index.js.map +1 -0
- package/dist/environments/k6-job.d.ts +64 -0
- package/dist/environments/k6-job.d.ts.map +1 -0
- package/dist/environments/k6-job.js +376 -0
- package/dist/environments/k6-job.js.map +1 -0
- package/dist/environments/kubernetes-client.d.ts +72 -0
- package/dist/environments/kubernetes-client.d.ts.map +1 -0
- package/dist/environments/kubernetes-client.js +337 -0
- package/dist/environments/kubernetes-client.js.map +1 -0
- package/dist/environments/kubernetes-command.d.ts +30 -0
- package/dist/environments/kubernetes-command.d.ts.map +1 -0
- package/dist/environments/kubernetes-command.js +108 -0
- package/dist/environments/kubernetes-command.js.map +1 -0
- package/dist/environments/kubernetes-environment.d.ts +38 -0
- package/dist/environments/kubernetes-environment.d.ts.map +1 -0
- package/dist/environments/kubernetes-environment.js +333 -0
- package/dist/environments/kubernetes-environment.js.map +1 -0
- package/dist/environments/kubernetes-provider.d.ts +83 -0
- package/dist/environments/kubernetes-provider.d.ts.map +1 -0
- package/dist/environments/kubernetes-provider.js +956 -0
- package/dist/environments/kubernetes-provider.js.map +1 -0
- package/dist/environments/load-harness.d.ts +199 -0
- package/dist/environments/load-harness.d.ts.map +1 -0
- package/dist/environments/load-harness.js +259 -0
- package/dist/environments/load-harness.js.map +1 -0
- package/dist/environments/load-profile.d.ts +294 -0
- package/dist/environments/load-profile.d.ts.map +1 -0
- package/dist/environments/load-profile.js +125 -0
- package/dist/environments/load-profile.js.map +1 -0
- package/dist/environments/stack-deployer.d.ts +22 -0
- package/dist/environments/stack-deployer.d.ts.map +1 -0
- package/dist/environments/stack-deployer.js +27 -0
- package/dist/environments/stack-deployer.js.map +1 -0
- package/dist/environments/stack-descriptor.d.ts +243 -0
- package/dist/environments/stack-descriptor.d.ts.map +1 -0
- package/dist/environments/stack-descriptor.js +88 -0
- package/dist/environments/stack-descriptor.js.map +1 -0
- package/dist/environments/verification-pipeline.d.ts +117 -0
- package/dist/environments/verification-pipeline.d.ts.map +1 -0
- package/dist/environments/verification-pipeline.js +643 -0
- package/dist/environments/verification-pipeline.js.map +1 -0
- package/dist/environments/verification-stack-deployer.d.ts +73 -0
- package/dist/environments/verification-stack-deployer.d.ts.map +1 -0
- package/dist/environments/verification-stack-deployer.js +484 -0
- package/dist/environments/verification-stack-deployer.js.map +1 -0
- package/dist/environments/verification-stack-descriptor.d.ts +1134 -0
- package/dist/environments/verification-stack-descriptor.d.ts.map +1 -0
- package/dist/environments/verification-stack-descriptor.js +275 -0
- package/dist/environments/verification-stack-descriptor.js.map +1 -0
- package/dist/environments/verification-stack.d.ts +29 -0
- package/dist/environments/verification-stack.d.ts.map +1 -0
- package/dist/environments/verification-stack.js +43 -0
- package/dist/environments/verification-stack.js.map +1 -0
- package/dist/featuremap/generate.d.ts +72 -0
- package/dist/featuremap/generate.d.ts.map +1 -0
- package/dist/featuremap/generate.js +854 -0
- package/dist/featuremap/generate.js.map +1 -0
- package/dist/featuremap/index.d.ts +2 -0
- package/dist/featuremap/index.d.ts.map +1 -1
- package/dist/featuremap/index.js +1 -0
- package/dist/featuremap/index.js.map +1 -1
- package/dist/featuremap/validate.d.ts +6 -0
- package/dist/featuremap/validate.d.ts.map +1 -1
- package/dist/featuremap/validate.js +95 -13
- package/dist/featuremap/validate.js.map +1 -1
- package/dist/fleet/create-fleet.d.ts +2 -0
- package/dist/fleet/create-fleet.d.ts.map +1 -1
- package/dist/fleet/create-fleet.js +1 -0
- package/dist/fleet/create-fleet.js.map +1 -1
- package/dist/fleet/internal-fleet-client.d.ts +8 -1
- package/dist/fleet/internal-fleet-client.d.ts.map +1 -1
- package/dist/fleet/internal-fleet-client.js +31 -6
- package/dist/fleet/internal-fleet-client.js.map +1 -1
- package/dist/fleet/relay-fleet-client.d.ts +4 -1
- package/dist/fleet/relay-fleet-client.d.ts.map +1 -1
- package/dist/fleet/relay-fleet-client.js +142 -1
- package/dist/fleet/relay-fleet-client.js.map +1 -1
- package/dist/git/agent-worktree.d.ts +4 -1
- package/dist/git/agent-worktree.d.ts.map +1 -1
- package/dist/git/agent-worktree.js +151 -8
- package/dist/git/agent-worktree.js.map +1 -1
- package/dist/index.d.ts +32 -8
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +15 -3
- package/dist/index.js.map +1 -1
- package/dist/mount/local-mount-preflight.d.ts.map +1 -1
- package/dist/mount/local-mount-preflight.js +6 -2
- package/dist/mount/local-mount-preflight.js.map +1 -1
- package/dist/mount/relayfile-cloud-mount-client.d.ts +8 -2
- package/dist/mount/relayfile-cloud-mount-client.d.ts.map +1 -1
- package/dist/mount/relayfile-cloud-mount-client.js +11 -1
- package/dist/mount/relayfile-cloud-mount-client.js.map +1 -1
- package/dist/node/factory-node.d.ts +2 -0
- package/dist/node/factory-node.d.ts.map +1 -1
- package/dist/node/factory-node.js +107 -2
- package/dist/node/factory-node.js.map +1 -1
- package/dist/node/preview-process.d.ts +65 -0
- package/dist/node/preview-process.d.ts.map +1 -0
- package/dist/node/preview-process.js +431 -0
- package/dist/node/preview-process.js.map +1 -0
- package/dist/node/tailscale-preview.d.ts +45 -0
- package/dist/node/tailscale-preview.d.ts.map +1 -0
- package/dist/node/tailscale-preview.js +748 -0
- package/dist/node/tailscale-preview.js.map +1 -0
- package/dist/observability/events.d.ts +1838 -28
- package/dist/observability/events.d.ts.map +1 -1
- package/dist/observability/events.js +52 -0
- package/dist/observability/events.js.map +1 -1
- package/dist/orchestrator/factory.d.ts.map +1 -1
- package/dist/orchestrator/factory.js +1362 -65
- package/dist/orchestrator/factory.js.map +1 -1
- package/dist/orchestrator/failure-classifier.d.ts +13 -0
- package/dist/orchestrator/failure-classifier.d.ts.map +1 -0
- package/dist/orchestrator/failure-classifier.js +14 -0
- package/dist/orchestrator/failure-classifier.js.map +1 -0
- package/dist/orchestrator/index.d.ts +2 -1
- package/dist/orchestrator/index.d.ts.map +1 -1
- package/dist/orchestrator/index.js +1 -1
- package/dist/orchestrator/index.js.map +1 -1
- package/dist/orchestrator/reaper.d.ts +24 -0
- package/dist/orchestrator/reaper.d.ts.map +1 -1
- package/dist/orchestrator/reaper.js +117 -0
- package/dist/orchestrator/reaper.js.map +1 -1
- package/dist/ports/environment.d.ts +83 -0
- package/dist/ports/environment.d.ts.map +1 -0
- package/dist/ports/environment.js +2 -0
- package/dist/ports/environment.js.map +1 -0
- package/dist/ports/fleet.d.ts +68 -1
- package/dist/ports/fleet.d.ts.map +1 -1
- package/dist/ports/index.d.ts +3 -2
- package/dist/ports/index.d.ts.map +1 -1
- package/dist/ports/mount.d.ts +9 -0
- package/dist/ports/mount.d.ts.map +1 -1
- package/dist/ports/state.d.ts +17 -1
- package/dist/ports/state.d.ts.map +1 -1
- package/dist/ports/worktree.d.ts +14 -0
- package/dist/ports/worktree.d.ts.map +1 -1
- package/dist/state/file-state-store.js +28 -1
- package/dist/state/file-state-store.js.map +1 -1
- package/dist/subscriptions/index.d.ts +2 -0
- package/dist/subscriptions/index.d.ts.map +1 -1
- package/dist/subscriptions/index.js +1 -0
- package/dist/subscriptions/index.js.map +1 -1
- package/dist/subscriptions/resource-subscriptions.d.ts +77 -0
- package/dist/subscriptions/resource-subscriptions.d.ts.map +1 -0
- package/dist/subscriptions/resource-subscriptions.js +91 -0
- package/dist/subscriptions/resource-subscriptions.js.map +1 -0
- package/dist/testing/fakes.d.ts +9 -1
- package/dist/testing/fakes.d.ts.map +1 -1
- package/dist/testing/fakes.js +40 -0
- package/dist/testing/fakes.js.map +1 -1
- package/dist/triage/schema.d.ts +32 -32
- package/dist/types.d.ts +4 -1
- package/dist/types.d.ts.map +1 -1
- package/package.json +18 -4
- package/schemas/kubernetes-environment-stack.schema.json +86 -0
- package/schemas/verification-stack.schema.json +292 -0
|
@@ -0,0 +1,174 @@
|
|
|
1
|
+
import { z } from 'zod';
|
|
2
|
+
export const DEFAULT_MANAGED_FIDELITY_CAVEAT = 'Managed verification runs on Factory infrastructure; Kubernetes version, CNI, IAM/IRSA, ingress, add-ons, and node types may differ from the customer cluster.';
|
|
3
|
+
const secretReferenceSchema = z.string().trim().min(1).max(512).superRefine((value, context) => {
|
|
4
|
+
if (!/^[a-z][a-z0-9+.-]*:\S+$/iu.test(value)) {
|
|
5
|
+
context.addIssue({
|
|
6
|
+
code: z.ZodIssueCode.custom,
|
|
7
|
+
message: 'must be an opaque scheme-prefixed secret-manager reference',
|
|
8
|
+
});
|
|
9
|
+
}
|
|
10
|
+
if (/-----BEGIN|apiVersion\s*:|current-context\s*:|\{\s*"/iu.test(value)) {
|
|
11
|
+
context.addIssue({
|
|
12
|
+
code: z.ZodIssueCode.custom,
|
|
13
|
+
message: 'must be an opaque secret-manager reference, never inline kubeconfig or credential data',
|
|
14
|
+
});
|
|
15
|
+
}
|
|
16
|
+
});
|
|
17
|
+
const tolerationSchema = z.object({
|
|
18
|
+
key: z.string().min(1).optional(),
|
|
19
|
+
operator: z.enum(['Exists', 'Equal']).optional(),
|
|
20
|
+
value: z.string().optional(),
|
|
21
|
+
effect: z.enum(['NoSchedule', 'PreferNoSchedule', 'NoExecute']).optional(),
|
|
22
|
+
tolerationSeconds: z.number().int().nonnegative().optional(),
|
|
23
|
+
}).strict();
|
|
24
|
+
export const KubernetesCredentialReferenceSchema = z.object({
|
|
25
|
+
kind: z.enum(['kubeconfig', 'irsa']),
|
|
26
|
+
secretRef: secretReferenceSchema,
|
|
27
|
+
}).strict();
|
|
28
|
+
export const KubernetesConnectionSchema = z.object({
|
|
29
|
+
id: z.string().trim().min(1).max(63).regex(/^[a-z0-9](?:[a-z0-9.-]*[a-z0-9])?$/u),
|
|
30
|
+
target: z.enum(['byoc', 'managed']).default('byoc'),
|
|
31
|
+
customers: z.array(z.string().trim().min(1)).min(1).default(['*']),
|
|
32
|
+
repositories: z.array(z.string().trim().min(1)).min(1).default(['*']),
|
|
33
|
+
credential: KubernetesCredentialReferenceSchema,
|
|
34
|
+
context: z.string().trim().min(1).optional(),
|
|
35
|
+
protectedNamespaces: z.array(z.string().trim().min(1)).default(['default', 'prod', 'production']),
|
|
36
|
+
allowClusterScopedResources: z.boolean().default(false),
|
|
37
|
+
allowedClusterScopedKinds: z.array(z.string().trim().min(1)).default([]),
|
|
38
|
+
nodeSelector: z.record(z.string(), z.string()).default({}),
|
|
39
|
+
tolerations: z.array(tolerationSchema).default([]),
|
|
40
|
+
fidelityCaveat: z.string().trim().min(1).optional(),
|
|
41
|
+
}).strict().superRefine((connection, context) => {
|
|
42
|
+
if (!connection.allowClusterScopedResources && connection.allowedClusterScopedKinds.length > 0) {
|
|
43
|
+
context.addIssue({
|
|
44
|
+
code: z.ZodIssueCode.custom,
|
|
45
|
+
path: ['allowedClusterScopedKinds'],
|
|
46
|
+
message: 'requires allowClusterScopedResources=true',
|
|
47
|
+
});
|
|
48
|
+
}
|
|
49
|
+
}).transform((connection) => {
|
|
50
|
+
if (connection.target !== 'managed' || connection.fidelityCaveat)
|
|
51
|
+
return connection;
|
|
52
|
+
return { ...connection, fidelityCaveat: DEFAULT_MANAGED_FIDELITY_CAVEAT };
|
|
53
|
+
});
|
|
54
|
+
export const KubernetesGuardrailDefaultsSchema = z.object({
|
|
55
|
+
ttlMs: z.number().int().min(60_000).max(7 * 24 * 60 * 60_000).default(60 * 60_000),
|
|
56
|
+
readinessTimeoutMs: z.number().int().min(1_000).max(60 * 60_000).default(10 * 60_000),
|
|
57
|
+
resourceQuota: z.record(z.string(), z.string()).default({
|
|
58
|
+
'requests.cpu': '2',
|
|
59
|
+
'requests.memory': '4Gi',
|
|
60
|
+
'limits.cpu': '4',
|
|
61
|
+
'limits.memory': '8Gi',
|
|
62
|
+
pods: '20',
|
|
63
|
+
'count/services': '20',
|
|
64
|
+
'count/persistentvolumeclaims': '10',
|
|
65
|
+
'requests.storage': '20Gi',
|
|
66
|
+
'services.loadbalancers': '0',
|
|
67
|
+
'services.nodeports': '0',
|
|
68
|
+
}),
|
|
69
|
+
limitRange: z.object({
|
|
70
|
+
default: z.record(z.string(), z.string()).default({ cpu: '500m', memory: '512Mi' }),
|
|
71
|
+
defaultRequest: z.record(z.string(), z.string()).default({ cpu: '50m', memory: '64Mi' }),
|
|
72
|
+
max: z.record(z.string(), z.string()).default({ cpu: '2', memory: '2Gi' }),
|
|
73
|
+
}).default({}),
|
|
74
|
+
}).strict().default({});
|
|
75
|
+
export const KubernetesEnvironmentConfigSchema = z.object({
|
|
76
|
+
connections: z.array(KubernetesConnectionSchema).default([]),
|
|
77
|
+
defaults: KubernetesGuardrailDefaultsSchema,
|
|
78
|
+
}).strict().superRefine((config, context) => {
|
|
79
|
+
const seen = new Set();
|
|
80
|
+
for (const [index, connection] of config.connections.entries()) {
|
|
81
|
+
if (seen.has(connection.id)) {
|
|
82
|
+
context.addIssue({
|
|
83
|
+
code: z.ZodIssueCode.custom,
|
|
84
|
+
path: ['connections', index, 'id'],
|
|
85
|
+
message: `duplicate Kubernetes connection id ${connection.id}`,
|
|
86
|
+
});
|
|
87
|
+
}
|
|
88
|
+
seen.add(connection.id);
|
|
89
|
+
}
|
|
90
|
+
}).default({});
|
|
91
|
+
/** Resolve a kubeconfig path stored in an environment-backed CI secret reference. */
|
|
92
|
+
export class EnvironmentKubernetesCredentialResolver {
|
|
93
|
+
#env;
|
|
94
|
+
constructor(env = process.env) {
|
|
95
|
+
this.#env = env;
|
|
96
|
+
}
|
|
97
|
+
async resolve(reference) {
|
|
98
|
+
if (!reference.startsWith('env:')) {
|
|
99
|
+
throw new Error(`Unsupported Kubernetes secret reference ${reference}; configure a secret resolver for this scheme`);
|
|
100
|
+
}
|
|
101
|
+
const variable = reference.slice('env:'.length);
|
|
102
|
+
if (!/^[A-Z_][A-Z0-9_]*$/u.test(variable)) {
|
|
103
|
+
throw new Error(`Invalid environment secret reference ${reference}`);
|
|
104
|
+
}
|
|
105
|
+
const kubeconfigPath = this.#env[variable];
|
|
106
|
+
if (!kubeconfigPath) {
|
|
107
|
+
throw new Error(`Kubernetes credential reference ${reference} is unavailable`);
|
|
108
|
+
}
|
|
109
|
+
// The command client already inherits process.env. Returning the entire
|
|
110
|
+
// environment here would also expose unrelated process secrets to callers
|
|
111
|
+
// of the public registry API.
|
|
112
|
+
return { kubeconfigPath };
|
|
113
|
+
}
|
|
114
|
+
}
|
|
115
|
+
/** Customer/repository-aware registry for BYOC and managed cluster connections. */
|
|
116
|
+
export class KubernetesConnectionRegistry {
|
|
117
|
+
config;
|
|
118
|
+
#resolver;
|
|
119
|
+
constructor(config, resolver = new EnvironmentKubernetesCredentialResolver()) {
|
|
120
|
+
this.config = KubernetesEnvironmentConfigSchema.parse(config);
|
|
121
|
+
this.#resolver = resolver;
|
|
122
|
+
}
|
|
123
|
+
async resolve(input) {
|
|
124
|
+
const target = input.target ?? 'byoc';
|
|
125
|
+
const matches = this.config.connections
|
|
126
|
+
.filter((connection) => connection.target === target)
|
|
127
|
+
.filter((connection) => matchesScope(connection.customers, input.customerId))
|
|
128
|
+
.filter((connection) => matchesScope(connection.repositories, input.repository))
|
|
129
|
+
.map((connection) => ({
|
|
130
|
+
connection,
|
|
131
|
+
specificity: scopeSpecificity(connection.customers, input.customerId) +
|
|
132
|
+
scopeSpecificity(connection.repositories, input.repository),
|
|
133
|
+
}))
|
|
134
|
+
.sort((left, right) => right.specificity - left.specificity || left.connection.id.localeCompare(right.connection.id));
|
|
135
|
+
if (matches.length === 0) {
|
|
136
|
+
throw new Error(`No ${target} Kubernetes connection is configured for customer ${input.customerId} and repository ${input.repository}`);
|
|
137
|
+
}
|
|
138
|
+
if (matches.length > 1 && matches[0].specificity === matches[1].specificity) {
|
|
139
|
+
throw new Error(`Ambiguous ${target} Kubernetes connections for customer ${input.customerId} and repository ${input.repository}: ` +
|
|
140
|
+
matches.filter((entry) => entry.specificity === matches[0].specificity).map((entry) => entry.connection.id).join(', '));
|
|
141
|
+
}
|
|
142
|
+
return await this.#resolveCredential(matches[0].connection);
|
|
143
|
+
}
|
|
144
|
+
async all() {
|
|
145
|
+
return await Promise.all(this.config.connections.map(async (connection) => await this.#resolveCredential(connection)));
|
|
146
|
+
}
|
|
147
|
+
/** Resolve every configured connection without letting one unavailable secret hide the others. */
|
|
148
|
+
async resolveAll() {
|
|
149
|
+
return await Promise.all(this.config.connections.map(async (connection) => {
|
|
150
|
+
try {
|
|
151
|
+
return { id: connection.id, connection: await this.#resolveCredential(connection) };
|
|
152
|
+
}
|
|
153
|
+
catch (error) {
|
|
154
|
+
return { id: connection.id, error };
|
|
155
|
+
}
|
|
156
|
+
}));
|
|
157
|
+
}
|
|
158
|
+
async #resolveCredential(connection) {
|
|
159
|
+
const credential = await this.#resolver.resolve(connection.credential.secretRef, connection.credential.kind);
|
|
160
|
+
if (!credential.kubeconfigPath) {
|
|
161
|
+
throw new Error(`Kubernetes credential resolver returned no kubeconfig path for ${connection.id}`);
|
|
162
|
+
}
|
|
163
|
+
const { credential: reference, ...rest } = connection;
|
|
164
|
+
return {
|
|
165
|
+
...rest,
|
|
166
|
+
credentialKind: reference.kind,
|
|
167
|
+
kubeconfigPath: credential.kubeconfigPath,
|
|
168
|
+
...(credential.environment ? { environment: credential.environment } : {}),
|
|
169
|
+
};
|
|
170
|
+
}
|
|
171
|
+
}
|
|
172
|
+
const matchesScope = (values, candidate) => values.includes('*') || values.includes(candidate);
|
|
173
|
+
const scopeSpecificity = (values, candidate) => values.includes(candidate) ? 1 : 0;
|
|
174
|
+
//# sourceMappingURL=connection-registry.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"connection-registry.js","sourceRoot":"","sources":["../../src/environments/connection-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,MAAM,CAAC,MAAM,+BAA+B,GAC1C,gKAAgK,CAAA;AAElK,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC7F,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,4DAA4D;SACtE,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,wDAAwD,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,wFAAwF;SAClG,CAAC,CAAA;IACJ,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,kBAAkB,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1E,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CAC7D,CAAC,CAAC,MAAM,EAAE,CAAA;AAEX,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACpC,SAAS,EAAE,qBAAqB;CACjC,CAAC,CAAC,MAAM,EAAE,CAAA;AAEX,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,qCAAqC,CAAC;IACjF,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACnD,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC;IAClE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC;IACrE,UAAU,EAAE,mCAAmC;IAC/C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IACjG,2BAA2B,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvD,yBAAyB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxE,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1D,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAClD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE;IAC9C,IAAI,CAAC,UAAU,CAAC,2BAA2B,IAAI,UAAU,CAAC,yBAAyB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/F,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,2BAA2B,CAAC;YACnC,OAAO,EAAE,2CAA2C;SACrD,CAAC,CAAA;IACJ,CAAC;AACH,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,EAAE;IAC1B,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,IAAI,UAAU,CAAC,cAAc;QAAE,OAAO,UAAU,CAAA;IACnF,OAAO,EAAE,GAAG,UAAU,EAAE,cAAc,EAAE,+BAA+B,EAAE,CAAA;AAC3E,CAAC,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC;IAClF,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC;IACrF,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;QACtD,cAAc,EAAE,GAAG;QACnB,iBAAiB,EAAE,KAAK;QACxB,YAAY,EAAE,GAAG;QACjB,eAAe,EAAE,KAAK;QACtB,IAAI,EAAE,IAAI;QACV,gBAAgB,EAAE,IAAI;QACtB,8BAA8B,EAAE,IAAI;QACpC,kBAAkB,EAAE,MAAM;QAC1B,wBAAwB,EAAE,GAAG;QAC7B,oBAAoB,EAAE,GAAG;KAC1B,CAAC;IACF,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACnF,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACxF,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;KAC3E,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACf,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;AAEvB,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5D,QAAQ,EAAE,iCAAiC;CAC5C,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;IAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/D,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC;gBAClC,OAAO,EAAE,sCAAsC,UAAU,CAAC,EAAE,EAAE;aAC/D,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;IACzB,CAAC;AACH,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;AAqCd,qFAAqF;AACrF,MAAM,OAAO,uCAAuC;IACzC,IAAI,CAAmB;IAEhC,YAAY,MAAyB,OAAO,CAAC,GAAG;QAC9C,IAAI,CAAC,IAAI,GAAG,GAAG,CAAA;IACjB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB;QAC7B,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,2CAA2C,SAAS,+CAA+C,CAAC,CAAA;QACtH,CAAC;QACD,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC/C,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,wCAAwC,SAAS,EAAE,CAAC,CAAA;QACtE,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC1C,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,mCAAmC,SAAS,iBAAiB,CAAC,CAAA;QAChF,CAAC;QACD,wEAAwE;QACxE,0EAA0E;QAC1E,8BAA8B;QAC9B,OAAO,EAAE,cAAc,EAAE,CAAA;IAC3B,CAAC;CACF;AAED,mFAAmF;AACnF,MAAM,OAAO,4BAA4B;IAC9B,MAAM,CAA6B;IACnC,SAAS,CAA8B;IAEhD,YACE,MAAuF,EACvF,WAAyC,IAAI,uCAAuC,EAAE;QAEtF,IAAI,CAAC,MAAM,GAAG,iCAAiC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC7D,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAA;IAC3B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAuC;QACnD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,MAAM,CAAA;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW;aACpC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,KAAK,MAAM,CAAC;aACpD,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;aAC5E,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;aAC/E,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACpB,UAAU;YACV,WAAW,EAAE,gBAAgB,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC;gBACnE,gBAAgB,CAAC,UAAU,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC;SAC9D,CAAC,CAAC;aACF,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;QAEvH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,MAAM,MAAM,qDAAqD,KAAK,CAAC,UAAU,mBAAmB,KAAK,CAAC,UAAU,EAAE,CACvH,CAAA;QACH,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAC5E,MAAM,IAAI,KAAK,CACb,aAAa,MAAM,wCAAwC,KAAK,CAAC,UAAU,mBAAmB,KAAK,CAAC,UAAU,IAAI;gBAClH,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACvH,CAAA;QACH,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;IAC7D,CAAC;IAED,KAAK,CAAC,GAAG;QACP,OAAO,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;IACxH,CAAC;IAED,kGAAkG;IAClG,KAAK,CAAC,UAAU;QACd,OAAO,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;YACxE,IAAI,CAAC;gBACH,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAA;YACrF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,CAAA;YACrC,CAAC;QACH,CAAC,CAAC,CAAC,CAAA;IACL,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,UAAgC;QACvD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QAC5G,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,kEAAkE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAA;QACpG,CAAC;QACD,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,UAAU,CAAA;QACrD,OAAO;YACL,GAAG,IAAI;YACP,cAAc,EAAE,SAAS,CAAC,IAAI;YAC9B,cAAc,EAAE,UAAU,CAAC,cAAc;YACzC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3E,CAAA;IACH,CAAC;CACF;AAED,MAAM,YAAY,GAAG,CAAC,MAAgB,EAAE,SAAiB,EAAW,EAAE,CACpE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;AAEpD,MAAM,gBAAgB,GAAG,CAAC,MAAgB,EAAE,SAAiB,EAAU,EAAE,CACvE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA"}
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
export { DEFAULT_MANAGED_FIDELITY_CAVEAT, EnvironmentKubernetesCredentialResolver, KubernetesConnectionRegistry, KubernetesConnectionSchema, KubernetesCredentialReferenceSchema, KubernetesEnvironmentConfigSchema, KubernetesGuardrailDefaultsSchema, } from './connection-registry.js';
|
|
2
|
+
export type { KubernetesConnection, KubernetesConnectionInput, KubernetesConnectionResolution, KubernetesCredentialResolver, KubernetesEnvironmentConfig, KubernetesGuardrailDefaults, ResolveKubernetesConnectionInput, ResolvedKubernetesConnection, ResolvedKubernetesCredential, } from './connection-registry.js';
|
|
3
|
+
export { defaultKubernetesCommandRunner, KubernetesCommandError, KubectlKubernetesClient, parseKubernetesResources, } from './kubernetes-client.js';
|
|
4
|
+
export type { CommandOptions, CommandResult, KubernetesClient, KubernetesCommandRunner, KubernetesPortForward, KubernetesResource, KubectlKubernetesClientOptions, } from './kubernetes-client.js';
|
|
5
|
+
export { createKubernetesGuardrailResources, enforceKubernetesResourceSafety, EnvironmentKubernetesStackSecretResolver, KUBERNETES_CONNECTION_ID_ANNOTATION, KUBERNETES_CLUSTER_RESOURCES_ANNOTATION, KUBERNETES_CREATED_AT_ANNOTATION, KUBERNETES_CUSTOMER_ID_ANNOTATION, KUBERNETES_ENDPOINTS_ANNOTATION, KUBERNETES_ENVIRONMENT_ID_LABEL, KUBERNETES_EXPIRES_AT_LABEL, KUBERNETES_MANAGED_BY_LABEL, KUBERNETES_OWNER_ID_ANNOTATION, KUBERNETES_OWNER_ID_LABEL, KUBERNETES_REPOSITORY_ANNOTATION, KUBERNETES_TARGET_ANNOTATION, KubernetesEnvironmentProvider, KubernetesEnvironmentReaper, } from './kubernetes-provider.js';
|
|
6
|
+
export type { KubernetesEnvironmentProviderOptions, KubernetesProvisionSpec, KubernetesReapReport, KubernetesStackProvisionInput, KubernetesStackSecretResolver, } from './kubernetes-provider.js';
|
|
7
|
+
export { KubernetesDeploymentSchema, KubernetesEndpointSchema, KubernetesStackDescriptorSchema, loadKubernetesStackDescriptor, ReferencedKubernetesSecretSchema, } from './stack-descriptor.js';
|
|
8
|
+
export type { KubernetesDeployment, KubernetesEndpoint, KubernetesStackDescriptor, KubernetesStackDescriptorInput, ReferencedKubernetesSecret, } from './stack-descriptor.js';
|
|
9
|
+
export { StackDeployer } from './stack-deployer.js';
|
|
10
|
+
export type { DeployKubernetesStackInput } from './stack-deployer.js';
|
|
11
|
+
export { DEFAULT_VERIFICATION_E2E_IMAGE, DEFAULT_VERIFICATION_STACK_PATH, VERIFICATION_STACK_API_VERSION, VERIFICATION_STACK_JSON_SCHEMA_URL, VERIFICATION_STACK_KIND, VerificationProbeSchema, VerificationStackDescriptorError, VerificationStackDescriptorSchema, VerificationStackSourceSchema, loadVerificationStack, loadVerificationStackFile, parseVerificationStack, resolveVerificationStackAsset, resolveVerificationStackDescriptor, } from './verification-stack-descriptor.js';
|
|
12
|
+
export type { LoadedVerificationStack, ResolveVerificationStackOptions, VerificationGateDescriptor, VerificationProbe, VerificationStackDescriptor, VerificationStackEndpoint, VerificationStackReferenceGroup, VerificationStackSeed, VerificationStackService, VerificationStackSource, } from './verification-stack-descriptor.js';
|
|
13
|
+
export { KubectlPortForwarder, StackDeploymentError, VerificationStackDeployer, deployVerificationStack, } from './verification-stack-deployer.js';
|
|
14
|
+
export type { ManagedPortForward, PortForwarder, ReferenceResolutionContext, StackDeployOptions, StackDeployerOptions, StackDeployment, VerificationStackReferenceResolver, } from './verification-stack-deployer.js';
|
|
15
|
+
export { DEFAULT_VERIFICATION_DESCRIPTOR, VERIFICATION_EVIDENCE_CONTRACT, VerificationPipeline, VerificationTimeoutError, resolveGitHeadRevision, runE2eCommand, } from './verification-pipeline.js';
|
|
16
|
+
export type { E2eCommandInput, E2eCommandResult, E2eCommandRunner, VerificationEvidence, VerificationGate, VerificationGateInput, VerificationLeaseProvider, VerificationLoadResult, VerificationLoadRunner, VerificationPipelineOptions, VerificationRevisionResolver, VerificationStackDeployRunner, VerificationStageEvidence, VerificationStageStatus, VerificationVerdict, } from './verification-pipeline.js';
|
|
17
|
+
export { loadVerificationGateStack } from './verification-stack.js';
|
|
18
|
+
export type { ResolvedVerificationStack } from './verification-stack.js';
|
|
19
|
+
export { FACTORY_ENVIRONMENT_EXPIRES_ANNOTATION, FACTORY_ENVIRONMENT_ID_LABEL, FACTORY_ENVIRONMENT_MANAGED_LABEL, FACTORY_ENVIRONMENT_REPOSITORY_ANNOTATION, KubectlEnvironmentProvider, VerificationEnvironmentAbortError, defaultKubectlEnvironmentRunner, } from './kubernetes-environment.js';
|
|
20
|
+
export type { KubectlEnvironmentCommandOptions, KubectlEnvironmentCommandResult, KubectlEnvironmentCommandRunner, KubectlEnvironmentProviderOptions, } from './kubernetes-environment.js';
|
|
21
|
+
//# sourceMappingURL=index.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/environments/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAC/B,uCAAuC,EACvC,4BAA4B,EAC5B,0BAA0B,EAC1B,mCAAmC,EACnC,iCAAiC,EACjC,iCAAiC,GAClC,MAAM,0BAA0B,CAAA;AACjC,YAAY,EACV,oBAAoB,EACpB,yBAAyB,EACzB,8BAA8B,EAC9B,4BAA4B,EAC5B,2BAA2B,EAC3B,2BAA2B,EAC3B,gCAAgC,EAChC,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EACL,8BAA8B,EAC9B,sBAAsB,EACtB,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,wBAAwB,CAAA;AAC/B,YAAY,EACV,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,uBAAuB,EACvB,qBAAqB,EACrB,kBAAkB,EAClB,8BAA8B,GAC/B,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,kCAAkC,EAClC,+BAA+B,EAC/B,wCAAwC,EACxC,mCAAmC,EACnC,uCAAuC,EACvC,gCAAgC,EAChC,iCAAiC,EACjC,+BAA+B,EAC/B,+BAA+B,EAC/B,2BAA2B,EAC3B,2BAA2B,EAC3B,8BAA8B,EAC9B,yBAAyB,EACzB,gCAAgC,EAChC,4BAA4B,EAC5B,6BAA6B,EAC7B,2BAA2B,GAC5B,MAAM,0BAA0B,CAAA;AACjC,YAAY,EACV,oCAAoC,EACpC,uBAAuB,EACvB,oBAAoB,EACpB,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,+BAA+B,EAC/B,6BAA6B,EAC7B,gCAAgC,GACjC,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EACV,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,EACzB,8BAA8B,EAC9B,0BAA0B,GAC3B,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,YAAY,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAA;AACrE,OAAO,EACL,8BAA8B,EAC9B,+BAA+B,EAC/B,8BAA8B,EAC9B,kCAAkC,EAClC,uBAAuB,EACvB,uBAAuB,EACvB,gCAAgC,EAChC,iCAAiC,EACjC,6BAA6B,EAC7B,qBAAqB,EACrB,yBAAyB,EACzB,sBAAsB,EACtB,6BAA6B,EAC7B,kCAAkC,GACnC,MAAM,oCAAoC,CAAA;AAC3C,YAAY,EACV,uBAAuB,EACvB,+BAA+B,EAC/B,0BAA0B,EAC1B,iBAAiB,EACjB,2BAA2B,EAC3B,yBAAyB,EACzB,+BAA+B,EAC/B,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,oCAAoC,CAAA;AAC3C,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,kCAAkC,CAAA;AACzC,YAAY,EACV,kBAAkB,EAClB,aAAa,EACb,0BAA0B,EAC1B,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,kCAAkC,GACnC,MAAM,kCAAkC,CAAA;AACzC,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,EAC9B,oBAAoB,EACpB,wBAAwB,EACxB,sBAAsB,EACtB,aAAa,GACd,MAAM,4BAA4B,CAAA;AACnC,YAAY,EACV,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,qBAAqB,EACrB,yBAAyB,EACzB,sBAAsB,EACtB,sBAAsB,EACtB,2BAA2B,EAC3B,4BAA4B,EAC5B,6BAA6B,EAC7B,yBAAyB,EACzB,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AACnE,YAAY,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AACxE,OAAO,EACL,sCAAsC,EACtC,4BAA4B,EAC5B,iCAAiC,EACjC,yCAAyC,EACzC,0BAA0B,EAC1B,iCAAiC,EACjC,+BAA+B,GAChC,MAAM,6BAA6B,CAAA;AACpC,YAAY,EACV,gCAAgC,EAChC,+BAA+B,EAC/B,+BAA+B,EAC/B,iCAAiC,GAClC,MAAM,6BAA6B,CAAA"}
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
export { DEFAULT_MANAGED_FIDELITY_CAVEAT, EnvironmentKubernetesCredentialResolver, KubernetesConnectionRegistry, KubernetesConnectionSchema, KubernetesCredentialReferenceSchema, KubernetesEnvironmentConfigSchema, KubernetesGuardrailDefaultsSchema, } from './connection-registry.js';
|
|
2
|
+
export { defaultKubernetesCommandRunner, KubernetesCommandError, KubectlKubernetesClient, parseKubernetesResources, } from './kubernetes-client.js';
|
|
3
|
+
export { createKubernetesGuardrailResources, enforceKubernetesResourceSafety, EnvironmentKubernetesStackSecretResolver, KUBERNETES_CONNECTION_ID_ANNOTATION, KUBERNETES_CLUSTER_RESOURCES_ANNOTATION, KUBERNETES_CREATED_AT_ANNOTATION, KUBERNETES_CUSTOMER_ID_ANNOTATION, KUBERNETES_ENDPOINTS_ANNOTATION, KUBERNETES_ENVIRONMENT_ID_LABEL, KUBERNETES_EXPIRES_AT_LABEL, KUBERNETES_MANAGED_BY_LABEL, KUBERNETES_OWNER_ID_ANNOTATION, KUBERNETES_OWNER_ID_LABEL, KUBERNETES_REPOSITORY_ANNOTATION, KUBERNETES_TARGET_ANNOTATION, KubernetesEnvironmentProvider, KubernetesEnvironmentReaper, } from './kubernetes-provider.js';
|
|
4
|
+
export { KubernetesDeploymentSchema, KubernetesEndpointSchema, KubernetesStackDescriptorSchema, loadKubernetesStackDescriptor, ReferencedKubernetesSecretSchema, } from './stack-descriptor.js';
|
|
5
|
+
export { StackDeployer } from './stack-deployer.js';
|
|
6
|
+
export { DEFAULT_VERIFICATION_E2E_IMAGE, DEFAULT_VERIFICATION_STACK_PATH, VERIFICATION_STACK_API_VERSION, VERIFICATION_STACK_JSON_SCHEMA_URL, VERIFICATION_STACK_KIND, VerificationProbeSchema, VerificationStackDescriptorError, VerificationStackDescriptorSchema, VerificationStackSourceSchema, loadVerificationStack, loadVerificationStackFile, parseVerificationStack, resolveVerificationStackAsset, resolveVerificationStackDescriptor, } from './verification-stack-descriptor.js';
|
|
7
|
+
export { KubectlPortForwarder, StackDeploymentError, VerificationStackDeployer, deployVerificationStack, } from './verification-stack-deployer.js';
|
|
8
|
+
export { DEFAULT_VERIFICATION_DESCRIPTOR, VERIFICATION_EVIDENCE_CONTRACT, VerificationPipeline, VerificationTimeoutError, resolveGitHeadRevision, runE2eCommand, } from './verification-pipeline.js';
|
|
9
|
+
export { loadVerificationGateStack } from './verification-stack.js';
|
|
10
|
+
export { FACTORY_ENVIRONMENT_EXPIRES_ANNOTATION, FACTORY_ENVIRONMENT_ID_LABEL, FACTORY_ENVIRONMENT_MANAGED_LABEL, FACTORY_ENVIRONMENT_REPOSITORY_ANNOTATION, KubectlEnvironmentProvider, VerificationEnvironmentAbortError, defaultKubectlEnvironmentRunner, } from './kubernetes-environment.js';
|
|
11
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/environments/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAC/B,uCAAuC,EACvC,4BAA4B,EAC5B,0BAA0B,EAC1B,mCAAmC,EACnC,iCAAiC,EACjC,iCAAiC,GAClC,MAAM,0BAA0B,CAAA;AAYjC,OAAO,EACL,8BAA8B,EAC9B,sBAAsB,EACtB,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,wBAAwB,CAAA;AAU/B,OAAO,EACL,kCAAkC,EAClC,+BAA+B,EAC/B,wCAAwC,EACxC,mCAAmC,EACnC,uCAAuC,EACvC,gCAAgC,EAChC,iCAAiC,EACjC,+BAA+B,EAC/B,+BAA+B,EAC/B,2BAA2B,EAC3B,2BAA2B,EAC3B,8BAA8B,EAC9B,yBAAyB,EACzB,gCAAgC,EAChC,4BAA4B,EAC5B,6BAA6B,EAC7B,2BAA2B,GAC5B,MAAM,0BAA0B,CAAA;AAQjC,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,+BAA+B,EAC/B,6BAA6B,EAC7B,gCAAgC,GACjC,MAAM,uBAAuB,CAAA;AAQ9B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAEnD,OAAO,EACL,8BAA8B,EAC9B,+BAA+B,EAC/B,8BAA8B,EAC9B,kCAAkC,EAClC,uBAAuB,EACvB,uBAAuB,EACvB,gCAAgC,EAChC,iCAAiC,EACjC,6BAA6B,EAC7B,qBAAqB,EACrB,yBAAyB,EACzB,sBAAsB,EACtB,6BAA6B,EAC7B,kCAAkC,GACnC,MAAM,oCAAoC,CAAA;AAa3C,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,kCAAkC,CAAA;AAUzC,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,EAC9B,oBAAoB,EACpB,wBAAwB,EACxB,sBAAsB,EACtB,aAAa,GACd,MAAM,4BAA4B,CAAA;AAkBnC,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AAEnE,OAAO,EACL,sCAAsC,EACtC,4BAA4B,EAC5B,iCAAiC,EACjC,yCAAyC,EACzC,0BAA0B,EAC1B,iCAAiC,EACjC,+BAA+B,GAChC,MAAM,6BAA6B,CAAA"}
|
|
@@ -0,0 +1,64 @@
|
|
|
1
|
+
import type { ResolvedLoadProfile, ResolvedLoadTargetProfile } from './load-profile.js';
|
|
2
|
+
export declare const DEFAULT_K6_IMAGE = "grafana/k6:1.7.1@sha256:4fd3a694926b064d3491d9b02b01cde886583c4931f1223816e3d9a7bdfa7e0f";
|
|
3
|
+
export declare const K6_EVIDENCE_PREFIX = "FACTORY_LOAD_EVIDENCE_JSON=";
|
|
4
|
+
export interface LoadEnvironment {
|
|
5
|
+
id: string;
|
|
6
|
+
endpoints: Record<string, string>;
|
|
7
|
+
namespace?: string;
|
|
8
|
+
kubeContext?: string;
|
|
9
|
+
}
|
|
10
|
+
export interface ResolvedLoadTarget {
|
|
11
|
+
name: string;
|
|
12
|
+
url: string;
|
|
13
|
+
method: ResolvedLoadTargetProfile['method'];
|
|
14
|
+
headers: Record<string, string>;
|
|
15
|
+
body: string | null;
|
|
16
|
+
expectedStatuses: number[] | null;
|
|
17
|
+
weight: number;
|
|
18
|
+
}
|
|
19
|
+
export interface K6LoadJobResources {
|
|
20
|
+
jobName: string;
|
|
21
|
+
configMapName: string;
|
|
22
|
+
namespace: string;
|
|
23
|
+
timeoutMs: number;
|
|
24
|
+
resources: Array<Record<string, unknown>>;
|
|
25
|
+
}
|
|
26
|
+
export interface KubernetesLoadJobClient {
|
|
27
|
+
apply(resources: Array<Record<string, unknown>>, namespace: string, signal?: AbortSignal): Promise<void>;
|
|
28
|
+
waitForCompletion(jobName: string, namespace: string, timeoutMs: number, signal?: AbortSignal): Promise<void>;
|
|
29
|
+
logs(jobName: string, namespace: string, signal?: AbortSignal): Promise<string>;
|
|
30
|
+
delete(jobName: string, configMapName: string, namespace: string, signal?: AbortSignal): Promise<void>;
|
|
31
|
+
}
|
|
32
|
+
export interface KubectlCommandResult {
|
|
33
|
+
stdout: string;
|
|
34
|
+
stderr: string;
|
|
35
|
+
}
|
|
36
|
+
export type KubectlCommandRunner = (args: string[], input?: string, signal?: AbortSignal) => Promise<KubectlCommandResult>;
|
|
37
|
+
export interface KubectlLoadJobClientOptions {
|
|
38
|
+
context?: string;
|
|
39
|
+
executable?: string;
|
|
40
|
+
pollIntervalMs?: number;
|
|
41
|
+
runner?: KubectlCommandRunner;
|
|
42
|
+
}
|
|
43
|
+
export declare const defaultKubectlCommandRunner: (executable?: string) => KubectlCommandRunner;
|
|
44
|
+
export declare class KubectlLoadJobClient implements KubernetesLoadJobClient {
|
|
45
|
+
private readonly contextArgs;
|
|
46
|
+
private readonly pollIntervalMs;
|
|
47
|
+
private readonly runner;
|
|
48
|
+
constructor(options?: KubectlLoadJobClientOptions);
|
|
49
|
+
apply(resources: Array<Record<string, unknown>>, namespace: string, signal?: AbortSignal): Promise<void>;
|
|
50
|
+
waitForCompletion(jobName: string, namespace: string, timeoutMs: number, signal?: AbortSignal): Promise<void>;
|
|
51
|
+
logs(jobName: string, namespace: string, signal?: AbortSignal): Promise<string>;
|
|
52
|
+
delete(jobName: string, configMapName: string, namespace: string, signal?: AbortSignal): Promise<void>;
|
|
53
|
+
}
|
|
54
|
+
export declare function resolveLoadTargets(environment: LoadEnvironment, profile: ResolvedLoadProfile): ResolvedLoadTarget[];
|
|
55
|
+
export declare function k6ScenarioFor(profile: ResolvedLoadProfile): Record<string, unknown>;
|
|
56
|
+
export declare function renderK6Script(environment: LoadEnvironment, profile: ResolvedLoadProfile): string;
|
|
57
|
+
export interface CreateK6LoadJobOptions {
|
|
58
|
+
jobName: string;
|
|
59
|
+
namespace: string;
|
|
60
|
+
image?: string;
|
|
61
|
+
timeoutMs?: number;
|
|
62
|
+
}
|
|
63
|
+
export declare function createK6LoadJobResources(environment: LoadEnvironment, profile: ResolvedLoadProfile, options: CreateK6LoadJobOptions): K6LoadJobResources;
|
|
64
|
+
//# sourceMappingURL=k6-job.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"k6-job.d.ts","sourceRoot":"","sources":["../../src/environments/k6-job.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAA;AAKvF,eAAO,MAAM,gBAAgB,6FAA6F,CAAA;AAC1H,eAAO,MAAM,kBAAkB,gCAAgC,CAAA;AAE/D,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,yBAAyB,CAAC,QAAQ,CAAC,CAAA;IAC3C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,gBAAgB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;IACjC,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAA;IACf,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAC1C;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACxG,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7G,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC/E,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACvG;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,MAAM,oBAAoB,GAAG,CACjC,IAAI,EAAE,MAAM,EAAE,EACd,KAAK,CAAC,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC,oBAAoB,CAAC,CAAA;AAElC,MAAM,WAAW,2BAA2B;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,MAAM,CAAC,EAAE,oBAAoB,CAAA;CAC9B;AAWD,eAAO,MAAM,2BAA2B,GACtC,mBAAsB,KACrB,oBA+CD,CAAA;AAEF,qBAAa,oBAAqB,YAAW,uBAAuB;IAClE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAU;IACtC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAQ;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsB;gBAEjC,OAAO,GAAE,2BAAgC;IAM/C,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAQxG,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAgC7G,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;IAU/E,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAW7G;AAED,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,eAAe,EAC5B,OAAO,EAAE,mBAAmB,GAC3B,kBAAkB,EAAE,CA8CtB;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiDnF;AAED,wBAAgB,cAAc,CAC5B,WAAW,EAAE,eAAe,EAC5B,OAAO,EAAE,mBAAmB,GAC3B,MAAM,CAkFR;AAUD,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,eAAe,EAC5B,OAAO,EAAE,mBAAmB,EAC5B,OAAO,EAAE,sBAAsB,GAC9B,kBAAkB,CAuEpB"}
|