@ankhorage/kubernetes 0.1.0 → 0.2.0

package/README.md

@@ -3,7 +3,7 @@
 
 # @ankhorage/kubernetes
 
-![license: MIT](././paradox/badges/license.svg) ![npm: v0.0.0](././paradox/badges/npm.svg) ![runtime: bun](././paradox/badges/runtime.svg) ![typescript: strict](././paradox/badges/typescript.svg) ![eslint: checked](././paradox/badges/eslint.svg) ![prettier: checked](././paradox/badges/prettier.svg) ![build: checked](././paradox/badges/build.svg) ![tests: checked](././paradox/badges/tests.svg) ![docs: paradox](././paradox/badges/docs.svg)
+![license: MIT](././paradox/badges/license.svg) ![npm: v0.1.0](././paradox/badges/npm.svg) ![runtime: bun](././paradox/badges/runtime.svg) ![typescript: strict](././paradox/badges/typescript.svg) ![eslint: checked](././paradox/badges/eslint.svg) ![prettier: checked](././paradox/badges/prettier.svg) ![build: checked](././paradox/badges/build.svg) ![tests: checked](././paradox/badges/tests.svg) ![docs: paradox](././paradox/badges/docs.svg)
 
 Shared Kubernetes workload driver for provider-neutral Ankhorage infrastructure.
 
@@ -24,17 +24,17 @@ Shared Kubernetes workload driver for provider-neutral Ankhorage infrastructure.
 <summary>createKubernetesDriver</summary>
 
 ```ts
-createKubernetesDriver() => KubernetesDriver
+createKubernetesDriver(options: KubernetesDriverOptions) => KubernetesDriver
 ```
 
 Create the shared Kubernetes workload driver entrypoint.
 
 Kubernetes is an implementation dependency for runtime adapters, not a selectable Infra
-provider. Workload projection and reconciliation operations are added at this boundary in the
-driver implementation phase.
+provider. The supplied API port is already authenticated cluster access; the driver adds only
+standard Kubernetes workload projection and lifecycle semantics.
 
 Module: `src/features/workload-reconciliation/composition/createKubernetesDriver.ts`
-Source: `src/features/workload-reconciliation/composition/createKubernetesDriver.ts:12:1`
-Related symbols: `KubernetesDriver`
+Source: `src/features/workload-reconciliation/composition/createKubernetesDriver.ts:19:1`
+Related symbols: `KubernetesDriver`, `KubernetesDriverOptions`
 
 </details>

package/dist/features/workload-reconciliation/application/use-cases/createKubernetesController.d.ts

@@ -0,0 +1,13 @@
+import type { InfraResourceIdentity, InfraWorkloadSpec } from '@ankhorage/contracts/infra';
+import type { KubernetesDriverRequest } from '../../../../types/kubernetesDriver';
+import type { KubernetesDesiredResource, KubernetesResolvedWorkloadValues } from '../../../../types/kubernetesResources';
+/*** Create the standard Kubernetes workload controller and pod template. */
+export declare function createKubernetesController(request: KubernetesDriverRequest, input: CreateKubernetesControllerInput): KubernetesDesiredResource;
+export interface CreateKubernetesControllerInput {
+    readonly namespace: string;
+    readonly workloadName: string;
+    readonly workload: InfraWorkloadSpec;
+    readonly values: KubernetesResolvedWorkloadValues;
+    readonly dependsOn: readonly InfraResourceIdentity[];
+}
+//# sourceMappingURL=createKubernetesController.d.ts.map

package/dist/features/workload-reconciliation/application/use-cases/createKubernetesController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createKubernetesController.d.ts","sourceRoot":"","sources":["../../../../../src/features/workload-reconciliation/application/use-cases/createKubernetesController.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,qBAAqB,EAErB,iBAAiB,EAClB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,KAAK,EACV,yBAAyB,EACzB,gCAAgC,EAEjC,MAAM,uCAAuC,CAAC;AAI/C,4EAA4E;AAC5E,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,uBAAuB,EAChC,KAAK,EAAE,+BAA+B,GACrC,yBAAyB,CA2B3B;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,gCAAgC,CAAC;IAClD,QAAQ,CAAC,SAAS,EAAE,SAAS,qBAAqB,EAAE,CAAC;CACtD"}

package/dist/features/workload-reconciliation/application/use-cases/createKubernetesController.js

@@ -0,0 +1,130 @@
+import { createKubernetesDesiredResource } from '../../utils/createKubernetesDesiredResource';
+import { toKubernetesName } from '../../utils/toKubernetesName';
+/*** Create the standard Kubernetes workload controller and pod template. */
+export function createKubernetesController(request, input) {
+    const labels = { 'app.kubernetes.io/name': input.workloadName };
+    return createKubernetesDesiredResource(request, {
+        resourceId: `workload:${input.workload.id}`,
+        dependsOn: input.dependsOn,
+        resource: {
+            apiVersion: 'apps/v1',
+            kind: 'Deployment',
+            metadata: {
+                name: input.workloadName,
+                namespace: input.namespace,
+                labels,
+                annotations: {},
+            },
+            spec: {
+                replicas: input.workload.replicas ?? 1,
+                selector: { matchLabels: labels },
+                template: {
+                    metadata: { labels },
+                    spec: {
+                        containers: [createContainer(input.workloadName, input.workload, input.values)],
+                        volumes: createVolumes(input.workloadName, input.workload, input.values),
+                    },
+                },
+            },
+        },
+    });
+}
+/*** Create the portable container projection. */
+function createContainer(name, workload, values) {
+    const { resources, health } = workload;
+    return {
+        name,
+        image: workload.artifact.image,
+        ...(workload.command === undefined ? {} : { command: workload.command }),
+        ...(workload.args === undefined ? {} : { args: workload.args }),
+        env: createEnvironment(name, values),
+        ports: (workload.ports ?? []).map((port) => ({
+            name: toKubernetesName(port.name),
+            containerPort: port.port,
+            protocol: (port.protocol ?? 'tcp').toUpperCase(),
+        })),
+        volumeMounts: createVolumeMounts(workload, values),
+        ...(resources === undefined ? {} : { resources: createResources(resources) }),
+        ...(health === undefined
+            ? {}
+            : { readinessProbe: createProbe(health), livenessProbe: createProbe(health) }),
+    };
+}
+/*** Create literal and secret-backed environment entries. */
+function createEnvironment(name, values) {
+    return [
+        ...Object.entries(values.environment).map(([key, value]) => ({ name: key, value })),
+        ...values.secrets.filter(isEnvironmentSecret).map((secret) => ({
+            name: secret.target.name,
+            valueFrom: { secretKeyRef: { name: `${name}-secrets`, key: secret.key } },
+        })),
+    ];
+}
+/*** Create Kubernetes request quantities from portable workload resources. */
+function createResources(resources) {
+    return {
+        requests: {
+            ...(resources.cpuMillis === undefined ? {} : { cpu: `${resources.cpuMillis}m` }),
+            ...(resources.memoryMiB === undefined ? {} : { memory: `${resources.memoryMiB}Mi` }),
+        },
+    };
+}
+/*** Project portable health intent into Kubernetes probe fields. */
+function createProbe(health) {
+    const timing = {
+        ...(health.intervalSeconds === undefined ? {} : { periodSeconds: health.intervalSeconds }),
+        ...(health.timeoutSeconds === undefined ? {} : { timeoutSeconds: health.timeoutSeconds }),
+        ...(health.failureThreshold === undefined ? {} : { failureThreshold: health.failureThreshold }),
+    };
+    if (health.kind === 'http') {
+        return { ...timing, httpGet: { port: health.port, path: health.path } };
+    }
+    if (health.kind === 'tcp')
+        return { ...timing, tcpSocket: { port: health.port } };
+    return { ...timing, exec: { command: health.command } };
+}
+/*** Create pod volumes for files and persistence. */
+function createVolumes(name, workload, values) {
+    return [
+        ...(Object.keys(values.files).length === 0
+            ? []
+            : [{ name: 'config-files', configMap: { name: `${name}-config` } }]),
+        ...(values.secrets.some((secret) => secret.target.kind === 'file')
+            ? [{ name: 'secret-files', secret: { secretName: `${name}-secrets` } }]
+            : []),
+        ...(workload.persistence ?? []).map((volume) => ({
+            name: `volume-${toKubernetesName(volume.id)}`,
+            persistentVolumeClaim: { claimName: `${name}-${toKubernetesName(volume.id)}` },
+        })),
+    ];
+}
+/*** Create exact file and persistence mount points. */
+function createVolumeMounts(workload, values) {
+    return [
+        ...Object.keys(values.files).map((path, index) => ({
+            name: 'config-files',
+            mountPath: path,
+            subPath: `file-${index}`,
+            readOnly: true,
+        })),
+        ...values.secrets.filter(isFileSecret).map((secret) => ({
+            name: 'secret-files',
+            mountPath: secret.target.path,
+            subPath: secret.key,
+            readOnly: true,
+        })),
+        ...(workload.persistence ?? []).map((volume) => ({
+            name: `volume-${toKubernetesName(volume.id)}`,
+            mountPath: volume.mountPath,
+        })),
+    ];
+}
+/*** Narrow a secret target to an environment entry. */
+function isEnvironmentSecret(secret) {
+    return secret.target.kind === 'environment';
+}
+/*** Narrow a secret target to a mounted file. */
+function isFileSecret(secret) {
+    return secret.target.kind === 'file';
+}
+//# sourceMappingURL=createKubernetesController.js.map

package/dist/features/workload-reconciliation/application/use-cases/createKubernetesController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createKubernetesController.js","sourceRoot":"","sources":["../../../../../src/features/workload-reconciliation/application/use-cases/createKubernetesController.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,+BAA+B,EAAE,MAAM,6CAA6C,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAEhE,4EAA4E;AAC5E,MAAM,UAAU,0BAA0B,CACxC,OAAgC,EAChC,KAAsC;IAEtC,MAAM,MAAM,GAAG,EAAE,wBAAwB,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;IAChE,OAAO,+BAA+B,CAAC,OAAO,EAAE;QAC9C,UAAU,EAAE,YAAY,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE;QAC3C,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE;YACR,UAAU,EAAE,SAAS;YACrB,IAAI,EAAE,YAAY;YAClB,QAAQ,EAAE;gBACR,IAAI,EAAE,KAAK,CAAC,YAAY;gBACxB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM;gBACN,WAAW,EAAE,EAAE;aAChB;YACD,IAAI,EAAE;gBACJ,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC;gBACtC,QAAQ,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE;gBACjC,QAAQ,EAAE;oBACR,QAAQ,EAAE,EAAE,MAAM,EAAE;oBACpB,IAAI,EAAE;wBACJ,UAAU,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;wBAC/E,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;qBACzE;iBACF;aACF;SACF;KACF,CAAC,CAAC;AACL,CAAC;AAUD,iDAAiD;AACjD,SAAS,eAAe,CACtB,IAAY,EACZ,QAA2B,EAC3B,MAAwC;IAExC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;IACvC,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK;QAC9B,GAAG,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACxE,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/D,GAAG,EAAE,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC;QACpC,KAAK,EAAE,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC3C,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;YACjC,aAAa,EAAE,IAAI,CAAC,IAAI;YACxB,QAAQ,EAAE,CAAC,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE;SACjD,CAAC,CAAC;QACH,YAAY,EAAE,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC;QAClD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,MAAM,KAAK,SAAS;YACtB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;KACjF,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,SAAS,iBAAiB,CACxB,IAAY,EACZ,MAAwC;IAExC,OAAO;QACL,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QACnF,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC7D,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;YACxB,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,EAAE;SAC1E,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,SAAS,eAAe,CACtB,SAAsD;IAEtD,OAAO;QACL,QAAQ,EAAE;YACR,GAAG,CAAC,SAAS,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC,SAAS,GAAG,EAAE,CAAC;YAChF,GAAG,CAAC,SAAS,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC;SACrF;KACF,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,SAAS,WAAW,CAAC,MAA+B;IAClD,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC;QAC1F,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC;QACzF,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC;KAChG,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IAClF,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;AAC1D,CAAC;AAED,qDAAqD;AACrD,SAAS,aAAa,CACpB,IAAY,EACZ,QAA2B,EAC3B,MAAwC;IAExC,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;YACxC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,SAAS,EAAE,EAAE,CAAC,CAAC;QACtE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC;YAChE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,GAAG,IAAI,UAAU,EAAE,EAAE,CAAC;YACvE,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC/C,IAAI,EAAE,UAAU,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;YAC7C,qBAAqB,EAAE,EAAE,SAAS,EAAE,GAAG,IAAI,IAAI,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE;SAC/E,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,uDAAuD;AACvD,SAAS,kBAAkB,CACzB,QAA2B,EAC3B,MAAwC;IAExC,OAAO;QACL,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACjD,IAAI,EAAE,cAAc;YACpB,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,QAAQ,KAAK,EAAE;YACxB,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QACH,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACtD,IAAI,EAAE,cAAc;YACpB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;YAC7B,OAAO,EAAE,MAAM,CAAC,GAAG;YACnB,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC/C,IAAI,EAAE,UAAU,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;YAC7C,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,uDAAuD;AACvD,SAAS,mBAAmB,CAAC,MAA8B;IAGzD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,aAAa,CAAC;AAC9C,CAAC;AAED,iDAAiD;AACjD,SAAS,YAAY,CAAC,MAA8B;IAGlD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC;AACvC,CAAC","sourcesContent":["import type {\n  InfraResourceIdentity,\n  InfraWorkloadHealthSpec,\n  InfraWorkloadSpec,\n} from '@ankhorage/contracts/infra';\n\nimport type { KubernetesDriverRequest } from '../../../../types/kubernetesDriver';\nimport type {\n  KubernetesDesiredResource,\n  KubernetesResolvedWorkloadValues,\n  KubernetesSecretTarget,\n} from '../../../../types/kubernetesResources';\nimport { createKubernetesDesiredResource } from '../../utils/createKubernetesDesiredResource';\nimport { toKubernetesName } from '../../utils/toKubernetesName';\n\n/*** Create the standard Kubernetes workload controller and pod template. */\nexport function createKubernetesController(\n  request: KubernetesDriverRequest,\n  input: CreateKubernetesControllerInput,\n): KubernetesDesiredResource {\n  const labels = { 'app.kubernetes.io/name': input.workloadName };\n  return createKubernetesDesiredResource(request, {\n    resourceId: `workload:${input.workload.id}`,\n    dependsOn: input.dependsOn,\n    resource: {\n      apiVersion: 'apps/v1',\n      kind: 'Deployment',\n      metadata: {\n        name: input.workloadName,\n        namespace: input.namespace,\n        labels,\n        annotations: {},\n      },\n      spec: {\n        replicas: input.workload.replicas ?? 1,\n        selector: { matchLabels: labels },\n        template: {\n          metadata: { labels },\n          spec: {\n            containers: [createContainer(input.workloadName, input.workload, input.values)],\n            volumes: createVolumes(input.workloadName, input.workload, input.values),\n          },\n        },\n      },\n    },\n  });\n}\n\nexport interface CreateKubernetesControllerInput {\n  readonly namespace: string;\n  readonly workloadName: string;\n  readonly workload: InfraWorkloadSpec;\n  readonly values: KubernetesResolvedWorkloadValues;\n  readonly dependsOn: readonly InfraResourceIdentity[];\n}\n\n/*** Create the portable container projection. */\nfunction createContainer(\n  name: string,\n  workload: InfraWorkloadSpec,\n  values: KubernetesResolvedWorkloadValues,\n): Readonly<Record<string, unknown>> {\n  const { resources, health } = workload;\n  return {\n    name,\n    image: workload.artifact.image,\n    ...(workload.command === undefined ? {} : { command: workload.command }),\n    ...(workload.args === undefined ? {} : { args: workload.args }),\n    env: createEnvironment(name, values),\n    ports: (workload.ports ?? []).map((port) => ({\n      name: toKubernetesName(port.name),\n      containerPort: port.port,\n      protocol: (port.protocol ?? 'tcp').toUpperCase(),\n    })),\n    volumeMounts: createVolumeMounts(workload, values),\n    ...(resources === undefined ? {} : { resources: createResources(resources) }),\n    ...(health === undefined\n      ? {}\n      : { readinessProbe: createProbe(health), livenessProbe: createProbe(health) }),\n  };\n}\n\n/*** Create literal and secret-backed environment entries. */\nfunction createEnvironment(\n  name: string,\n  values: KubernetesResolvedWorkloadValues,\n): readonly Readonly<Record<string, unknown>>[] {\n  return [\n    ...Object.entries(values.environment).map(([key, value]) => ({ name: key, value })),\n    ...values.secrets.filter(isEnvironmentSecret).map((secret) => ({\n      name: secret.target.name,\n      valueFrom: { secretKeyRef: { name: `${name}-secrets`, key: secret.key } },\n    })),\n  ];\n}\n\n/*** Create Kubernetes request quantities from portable workload resources. */\nfunction createResources(\n  resources: NonNullable<InfraWorkloadSpec['resources']>,\n): Readonly<Record<string, unknown>> {\n  return {\n    requests: {\n      ...(resources.cpuMillis === undefined ? {} : { cpu: `${resources.cpuMillis}m` }),\n      ...(resources.memoryMiB === undefined ? {} : { memory: `${resources.memoryMiB}Mi` }),\n    },\n  };\n}\n\n/*** Project portable health intent into Kubernetes probe fields. */\nfunction createProbe(health: InfraWorkloadHealthSpec): Readonly<Record<string, unknown>> {\n  const timing = {\n    ...(health.intervalSeconds === undefined ? {} : { periodSeconds: health.intervalSeconds }),\n    ...(health.timeoutSeconds === undefined ? {} : { timeoutSeconds: health.timeoutSeconds }),\n    ...(health.failureThreshold === undefined ? {} : { failureThreshold: health.failureThreshold }),\n  };\n  if (health.kind === 'http') {\n    return { ...timing, httpGet: { port: health.port, path: health.path } };\n  }\n  if (health.kind === 'tcp') return { ...timing, tcpSocket: { port: health.port } };\n  return { ...timing, exec: { command: health.command } };\n}\n\n/*** Create pod volumes for files and persistence. */\nfunction createVolumes(\n  name: string,\n  workload: InfraWorkloadSpec,\n  values: KubernetesResolvedWorkloadValues,\n): readonly Readonly<Record<string, unknown>>[] {\n  return [\n    ...(Object.keys(values.files).length === 0\n      ? []\n      : [{ name: 'config-files', configMap: { name: `${name}-config` } }]),\n    ...(values.secrets.some((secret) => secret.target.kind === 'file')\n      ? [{ name: 'secret-files', secret: { secretName: `${name}-secrets` } }]\n      : []),\n    ...(workload.persistence ?? []).map((volume) => ({\n      name: `volume-${toKubernetesName(volume.id)}`,\n      persistentVolumeClaim: { claimName: `${name}-${toKubernetesName(volume.id)}` },\n    })),\n  ];\n}\n\n/*** Create exact file and persistence mount points. */\nfunction createVolumeMounts(\n  workload: InfraWorkloadSpec,\n  values: KubernetesResolvedWorkloadValues,\n): readonly Readonly<Record<string, unknown>>[] {\n  return [\n    ...Object.keys(values.files).map((path, index) => ({\n      name: 'config-files',\n      mountPath: path,\n      subPath: `file-${index}`,\n      readOnly: true,\n    })),\n    ...values.secrets.filter(isFileSecret).map((secret) => ({\n      name: 'secret-files',\n      mountPath: secret.target.path,\n      subPath: secret.key,\n      readOnly: true,\n    })),\n    ...(workload.persistence ?? []).map((volume) => ({\n      name: `volume-${toKubernetesName(volume.id)}`,\n      mountPath: volume.mountPath,\n    })),\n  ];\n}\n\n/*** Narrow a secret target to an environment entry. */\nfunction isEnvironmentSecret(secret: KubernetesSecretTarget): secret is KubernetesSecretTarget & {\n  readonly target: { readonly kind: 'environment'; readonly name: string };\n} {\n  return secret.target.kind === 'environment';\n}\n\n/*** Narrow a secret target to a mounted file. */\nfunction isFileSecret(secret: KubernetesSecretTarget): secret is KubernetesSecretTarget & {\n  readonly target: { readonly kind: 'file'; readonly path: string };\n} {\n  return secret.target.kind === 'file';\n}\n"]}

package/dist/features/workload-reconciliation/application/use-cases/createKubernetesExposure.d.ts

@@ -0,0 +1,12 @@
+import type { InfraResourceIdentity, InfraWorkloadSpec } from '@ankhorage/contracts/infra';
+import type { KubernetesDriverRequest } from '../../../../types/kubernetesDriver';
+import type { KubernetesDesiredResource } from '../../../../types/kubernetesResources';
+/*** Create Services and optional Ingress from portable port and exposure intent. */
+export declare function createKubernetesExposure(request: KubernetesDriverRequest, input: CreateKubernetesExposureInput): readonly KubernetesDesiredResource[];
+export interface CreateKubernetesExposureInput {
+    readonly namespace: string;
+    readonly workloadName: string;
+    readonly workload: InfraWorkloadSpec;
+    readonly controller: InfraResourceIdentity;
+}
+//# sourceMappingURL=createKubernetesExposure.d.ts.map

package/dist/features/workload-reconciliation/application/use-cases/createKubernetesExposure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createKubernetesExposure.d.ts","sourceRoot":"","sources":["../../../../../src/features/workload-reconciliation/application/use-cases/createKubernetesExposure.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,qBAAqB,EAErB,iBAAiB,EAClB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,uCAAuC,CAAC;AAIvF,oFAAoF;AACpF,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,uBAAuB,EAChC,KAAK,EAAE,6BAA6B,GACnC,SAAS,yBAAyB,EAAE,CAKtC;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;CAC5C"}

package/dist/features/workload-reconciliation/application/use-cases/createKubernetesExposure.js

@@ -0,0 +1,89 @@
+import { createKubernetesDesiredResource } from '../../utils/createKubernetesDesiredResource';
+import { toKubernetesName } from '../../utils/toKubernetesName';
+/*** Create Services and optional Ingress from portable port and exposure intent. */
+export function createKubernetesExposure(request, input) {
+    const service = createService(request, input);
+    if (service === undefined)
+        return [];
+    const ingress = createIngress(request, input, service.owner.identity);
+    return ingress === undefined ? [service] : [service, ingress];
+}
+/*** Create the stable service boundary for declared workload ports. */
+function createService(request, input) {
+    const ports = input.workload.ports ?? [];
+    if (ports.length === 0)
+        return undefined;
+    const hasIngress = input.workload.exposure === 'public' && request.context.desired.networking?.domain;
+    return createKubernetesDesiredResource(request, {
+        resourceId: `service:${input.workload.id}`,
+        dependsOn: [input.controller],
+        resource: {
+            apiVersion: 'v1',
+            kind: 'Service',
+            metadata: {
+                name: input.workloadName,
+                namespace: input.namespace,
+                labels: {},
+                annotations: {},
+            },
+            spec: {
+                type: input.workload.exposure === 'public' && !hasIngress ? 'LoadBalancer' : 'ClusterIP',
+                selector: { 'app.kubernetes.io/name': input.workloadName },
+                ports: ports.map(createServicePort),
+            },
+        },
+    });
+}
+/*** Project one generic port into a Service port. */
+function createServicePort(port) {
+    return {
+        name: toKubernetesName(port.name),
+        port: port.port,
+        targetPort: toKubernetesName(port.name),
+        protocol: (port.protocol ?? 'tcp').toUpperCase(),
+    };
+}
+/*** Create ingress only when public hostname intent and a TCP port both exist. */
+function createIngress(request, input, service) {
+    const domain = request.context.desired.networking?.domain;
+    const port = (input.workload.ports ?? []).find((candidate) => (candidate.protocol ?? 'tcp') === 'tcp');
+    if (input.workload.exposure !== 'public' || domain === undefined || port === undefined) {
+        return undefined;
+    }
+    return createKubernetesDesiredResource(request, {
+        resourceId: `ingress:${input.workload.id}`,
+        dependsOn: [service],
+        resource: {
+            apiVersion: 'networking.k8s.io/v1',
+            kind: 'Ingress',
+            metadata: {
+                name: input.workloadName,
+                namespace: input.namespace,
+                labels: {},
+                annotations: {},
+            },
+            spec: {
+                rules: [
+                    {
+                        host: domain,
+                        http: {
+                            paths: [
+                                {
+                                    path: '/',
+                                    pathType: 'Prefix',
+                                    backend: {
+                                        service: {
+                                            name: input.workloadName,
+                                            port: { name: toKubernetesName(port.name) },
+                                        },
+                                    },
+                                },
+                            ],
+                        },
+                    },
+                ],
+            },
+        },
+    });
+}
+//# sourceMappingURL=createKubernetesExposure.js.map

package/dist/features/workload-reconciliation/application/use-cases/createKubernetesExposure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createKubernetesExposure.js","sourceRoot":"","sources":["../../../../../src/features/workload-reconciliation/application/use-cases/createKubernetesExposure.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,+BAA+B,EAAE,MAAM,6CAA6C,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAEhE,oFAAoF;AACpF,MAAM,UAAU,wBAAwB,CACtC,OAAgC,EAChC,KAAoC;IAEpC,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtE,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAChE,CAAC;AASD,uEAAuE;AACvE,SAAS,aAAa,CACpB,OAAgC,EAChC,KAAoC;IAEpC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;IACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,UAAU,GACd,KAAK,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC;IACrF,OAAO,+BAA+B,CAAC,OAAO,EAAE;QAC9C,UAAU,EAAE,WAAW,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE;QAC1C,SAAS,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;QAC7B,QAAQ,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE;gBACR,IAAI,EAAE,KAAK,CAAC,YAAY;gBACxB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,EAAE;gBACV,WAAW,EAAE,EAAE;aAChB;YACD,IAAI,EAAE;gBACJ,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW;gBACxF,QAAQ,EAAE,EAAE,wBAAwB,EAAE,KAAK,CAAC,YAAY,EAAE;gBAC1D,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC;aACpC;SACF;KACF,CAAC,CAAC;AACL,CAAC;AAED,qDAAqD;AACrD,SAAS,iBAAiB,CAAC,IAAuB;IAChD,OAAO;QACL,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QACjC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QACvC,QAAQ,EAAE,CAAC,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE;KACjD,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,SAAS,aAAa,CACpB,OAAgC,EAChC,KAAoC,EACpC,OAA8B;IAE9B,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC;IAC1D,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAC5C,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,CACvD,CAAC;IACF,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,+BAA+B,CAAC,OAAO,EAAE;QAC9C,UAAU,EAAE,WAAW,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE;QAC1C,SAAS,EAAE,CAAC,OAAO,CAAC;QACpB,QAAQ,EAAE;YACR,UAAU,EAAE,sBAAsB;YAClC,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE;gBACR,IAAI,EAAE,KAAK,CAAC,YAAY;gBACxB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,EAAE;gBACV,WAAW,EAAE,EAAE;aAChB;YACD,IAAI,EAAE;gBACJ,KAAK,EAAE;oBACL;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE;4BACJ,KAAK,EAAE;gCACL;oCACE,IAAI,EAAE,GAAG;oCACT,QAAQ,EAAE,QAAQ;oCAClB,OAAO,EAAE;wCACP,OAAO,EAAE;4CACP,IAAI,EAAE,KAAK,CAAC,YAAY;4CACxB,IAAI,EAAE,EAAE,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;yCAC5C;qCACF;iCACF;6BACF;yBACF;qBACF;iBACF;aACF;SACF;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type {\n  InfraResourceIdentity,\n  InfraWorkloadPort,\n  InfraWorkloadSpec,\n} from '@ankhorage/contracts/infra';\n\nimport type { KubernetesDriverRequest } from '../../../../types/kubernetesDriver';\nimport type { KubernetesDesiredResource } from '../../../../types/kubernetesResources';\nimport { createKubernetesDesiredResource } from '../../utils/createKubernetesDesiredResource';\nimport { toKubernetesName } from '../../utils/toKubernetesName';\n\n/*** Create Services and optional Ingress from portable port and exposure intent. */\nexport function createKubernetesExposure(\n  request: KubernetesDriverRequest,\n  input: CreateKubernetesExposureInput,\n): readonly KubernetesDesiredResource[] {\n  const service = createService(request, input);\n  if (service === undefined) return [];\n  const ingress = createIngress(request, input, service.owner.identity);\n  return ingress === undefined ? [service] : [service, ingress];\n}\n\nexport interface CreateKubernetesExposureInput {\n  readonly namespace: string;\n  readonly workloadName: string;\n  readonly workload: InfraWorkloadSpec;\n  readonly controller: InfraResourceIdentity;\n}\n\n/*** Create the stable service boundary for declared workload ports. */\nfunction createService(\n  request: KubernetesDriverRequest,\n  input: CreateKubernetesExposureInput,\n): KubernetesDesiredResource | undefined {\n  const ports = input.workload.ports ?? [];\n  if (ports.length === 0) return undefined;\n  const hasIngress =\n    input.workload.exposure === 'public' && request.context.desired.networking?.domain;\n  return createKubernetesDesiredResource(request, {\n    resourceId: `service:${input.workload.id}`,\n    dependsOn: [input.controller],\n    resource: {\n      apiVersion: 'v1',\n      kind: 'Service',\n      metadata: {\n        name: input.workloadName,\n        namespace: input.namespace,\n        labels: {},\n        annotations: {},\n      },\n      spec: {\n        type: input.workload.exposure === 'public' && !hasIngress ? 'LoadBalancer' : 'ClusterIP',\n        selector: { 'app.kubernetes.io/name': input.workloadName },\n        ports: ports.map(createServicePort),\n      },\n    },\n  });\n}\n\n/*** Project one generic port into a Service port. */\nfunction createServicePort(port: InfraWorkloadPort): Readonly<Record<string, unknown>> {\n  return {\n    name: toKubernetesName(port.name),\n    port: port.port,\n    targetPort: toKubernetesName(port.name),\n    protocol: (port.protocol ?? 'tcp').toUpperCase(),\n  };\n}\n\n/*** Create ingress only when public hostname intent and a TCP port both exist. */\nfunction createIngress(\n  request: KubernetesDriverRequest,\n  input: CreateKubernetesExposureInput,\n  service: InfraResourceIdentity,\n): KubernetesDesiredResource | undefined {\n  const domain = request.context.desired.networking?.domain;\n  const port = (input.workload.ports ?? []).find(\n    (candidate) => (candidate.protocol ?? 'tcp') === 'tcp',\n  );\n  if (input.workload.exposure !== 'public' || domain === undefined || port === undefined) {\n    return undefined;\n  }\n  return createKubernetesDesiredResource(request, {\n    resourceId: `ingress:${input.workload.id}`,\n    dependsOn: [service],\n    resource: {\n      apiVersion: 'networking.k8s.io/v1',\n      kind: 'Ingress',\n      metadata: {\n        name: input.workloadName,\n        namespace: input.namespace,\n        labels: {},\n        annotations: {},\n      },\n      spec: {\n        rules: [\n          {\n            host: domain,\n            http: {\n              paths: [\n                {\n                  path: '/',\n                  pathType: 'Prefix',\n                  backend: {\n                    service: {\n                      name: input.workloadName,\n                      port: { name: toKubernetesName(port.name) },\n                    },\n                  },\n                },\n              ],\n            },\n          },\n        ],\n      },\n    },\n  });\n}\n"]}

package/dist/features/workload-reconciliation/application/use-cases/createKubernetesPrerequisites.d.ts

@@ -0,0 +1,18 @@
+import type { InfraResourceIdentity, InfraWorkloadSpec } from '@ankhorage/contracts/infra';
+import type { KubernetesDriverRequest } from '../../../../types/kubernetesDriver';
+import type { KubernetesDesiredResource, KubernetesResolvedWorkloadValues, KubernetesSecretBinding } from '../../../../types/kubernetesResources';
+/*** Create config, secret and persistent-volume prerequisites in dependency order. */
+export declare function createKubernetesPrerequisites(request: KubernetesDriverRequest, input: CreateKubernetesPrerequisitesInput): KubernetesPrerequisites;
+export interface CreateKubernetesPrerequisitesInput {
+    readonly namespace: string;
+    readonly namespaceOwner: InfraResourceIdentity;
+    readonly workloadName: string;
+    readonly workload: InfraWorkloadSpec;
+    readonly values: KubernetesResolvedWorkloadValues;
+}
+export interface KubernetesPrerequisites {
+    readonly resources: readonly KubernetesDesiredResource[];
+    readonly owners: readonly InfraResourceIdentity[];
+    readonly secretBindings: readonly KubernetesSecretBinding[];
+}
+//# sourceMappingURL=createKubernetesPrerequisites.d.ts.map

package/dist/features/workload-reconciliation/application/use-cases/createKubernetesPrerequisites.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createKubernetesPrerequisites.d.ts","sourceRoot":"","sources":["../../../../../src/features/workload-reconciliation/application/use-cases/createKubernetesPrerequisites.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAE3F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,KAAK,EACV,yBAAyB,EACzB,gCAAgC,EAChC,uBAAuB,EACxB,MAAM,uCAAuC,CAAC;AAK/C,sFAAsF;AACtF,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,uBAAuB,EAChC,KAAK,EAAE,kCAAkC,GACxC,uBAAuB,CAmBzB;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,qBAAqB,CAAC;IAC/C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,gCAAgC,CAAC;CACnD;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,SAAS,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACzD,QAAQ,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAClD,QAAQ,CAAC,cAAc,EAAE,SAAS,uBAAuB,EAAE,CAAC;CAC7D"}

package/dist/features/workload-reconciliation/application/use-cases/createKubernetesPrerequisites.js

@@ -0,0 +1,98 @@
+import { createKubernetesDesiredResource } from '../../utils/createKubernetesDesiredResource';
+import { getKubernetesResourceReference } from '../../utils/getKubernetesResourceReference';
+import { toKubernetesName } from '../../utils/toKubernetesName';
+/*** Create config, secret and persistent-volume prerequisites in dependency order. */
+export function createKubernetesPrerequisites(request, input) {
+    const resources = [];
+    const owners = [input.namespaceOwner];
+    const configMap = createConfigMap(request, input);
+    if (configMap !== undefined) {
+        resources.push(configMap);
+        owners.push(configMap.owner.identity);
+    }
+    const secret = createSecret(request, input);
+    if (secret !== undefined) {
+        resources.push(secret.resource);
+        owners.push(secret.resource.owner.identity);
+    }
+    for (const volume of input.workload.persistence ?? []) {
+        const claim = createPersistentVolumeClaim(request, input, volume);
+        resources.push(claim);
+        owners.push(claim.owner.identity);
+    }
+    return { resources, owners, secretBindings: secret?.bindings ?? [] };
+}
+/*** Create portable file configuration without secret content. */
+function createConfigMap(request, input) {
+    if (Object.keys(input.values.files).length === 0)
+        return undefined;
+    const data = Object.fromEntries(Object.values(input.values.files).map((value, index) => [`file-${index}`, value]));
+    return createKubernetesDesiredResource(request, {
+        resourceId: `config:${input.workloadName}`,
+        dependsOn: [input.namespaceOwner],
+        resource: {
+            apiVersion: 'v1',
+            kind: 'ConfigMap',
+            metadata: {
+                name: `${input.workloadName}-config`,
+                namespace: input.namespace,
+                labels: {},
+                annotations: {},
+            },
+            data,
+        },
+    });
+}
+/*** Create a value-free Secret skeleton plus runtime-only materialization bindings. */
+function createSecret(request, input) {
+    if (input.values.secrets.length === 0)
+        return undefined;
+    const resource = createKubernetesDesiredResource(request, {
+        resourceId: `secret:${input.workloadName}`,
+        dependsOn: [input.namespaceOwner],
+        resource: {
+            apiVersion: 'v1',
+            kind: 'Secret',
+            metadata: {
+                name: `${input.workloadName}-secrets`,
+                namespace: input.namespace,
+                labels: {},
+                annotations: {},
+            },
+        },
+    });
+    const reference = getKubernetesResourceReference(resource.resource);
+    return {
+        resource,
+        bindings: input.values.secrets.map((secret) => ({
+            resource: reference,
+            key: secret.key,
+            reference: secret.reference,
+        })),
+    };
+}
+/*** Create one persistent volume claim from portable capacity and retention intent. */
+function createPersistentVolumeClaim(request, input, volume) {
+    const volumeName = toKubernetesName(volume.id);
+    return createKubernetesDesiredResource(request, {
+        resourceId: `volume:${input.workloadName}:${volume.id}`,
+        persistent: true,
+        retention: volume.retention,
+        dependsOn: [input.namespaceOwner],
+        resource: {
+            apiVersion: 'v1',
+            kind: 'PersistentVolumeClaim',
+            metadata: {
+                name: `${input.workloadName}-${volumeName}`,
+                namespace: input.namespace,
+                labels: {},
+                annotations: {},
+            },
+            spec: {
+                accessModes: ['ReadWriteOnce'],
+                resources: { requests: { storage: `${volume.sizeGiB}Gi` } },
+            },
+        },
+    });
+}
+//# sourceMappingURL=createKubernetesPrerequisites.js.map

package/dist/features/workload-reconciliation/application/use-cases/createKubernetesPrerequisites.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createKubernetesPrerequisites.js","sourceRoot":"","sources":["../../../../../src/features/workload-reconciliation/application/use-cases/createKubernetesPrerequisites.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,+BAA+B,EAAE,MAAM,6CAA6C,CAAC;AAC9F,OAAO,EAAE,8BAA8B,EAAE,MAAM,4CAA4C,CAAC;AAC5F,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAEhE,sFAAsF;AACtF,MAAM,UAAU,6BAA6B,CAC3C,OAAgC,EAChC,KAAyC;IAEzC,MAAM,SAAS,GAAgC,EAAE,CAAC;IAClD,MAAM,MAAM,GAA4B,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAClD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,2BAA2B,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAClE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;AACvE,CAAC;AAgBD,kEAAkE;AAClE,SAAS,eAAe,CACtB,OAAgC,EAChC,KAAyC;IAEzC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACnE,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAC7B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC,CAClF,CAAC;IACF,OAAO,+BAA+B,CAAC,OAAO,EAAE;QAC9C,UAAU,EAAE,UAAU,KAAK,CAAC,YAAY,EAAE;QAC1C,SAAS,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;QACjC,QAAQ,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE;gBACR,IAAI,EAAE,GAAG,KAAK,CAAC,YAAY,SAAS;gBACpC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,EAAE;gBACV,WAAW,EAAE,EAAE;aAChB;YACD,IAAI;SACL;KACF,CAAC,CAAC;AACL,CAAC;AAED,uFAAuF;AACvF,SAAS,YAAY,CACnB,OAAgC,EAChC,KAAyC;IAOzC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxD,MAAM,QAAQ,GAAG,+BAA+B,CAAC,OAAO,EAAE;QACxD,UAAU,EAAE,UAAU,KAAK,CAAC,YAAY,EAAE;QAC1C,SAAS,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;QACjC,QAAQ,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE;gBACR,IAAI,EAAE,GAAG,KAAK,CAAC,YAAY,UAAU;gBACrC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,EAAE;gBACV,WAAW,EAAE,EAAE;aAChB;SACF;KACF,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,8BAA8B,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpE,OAAO;QACL,QAAQ;QACR,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC9C,QAAQ,EAAE,SAAS;YACnB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,SAAS,2BAA2B,CAClC,OAAgC,EAChC,KAAyC,EACzC,MAA6D;IAE7D,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/C,OAAO,+BAA+B,CAAC,OAAO,EAAE;QAC9C,UAAU,EAAE,UAAU,KAAK,CAAC,YAAY,IAAI,MAAM,CAAC,EAAE,EAAE;QACvD,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;QACjC,QAAQ,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE;gBACR,IAAI,EAAE,GAAG,KAAK,CAAC,YAAY,IAAI,UAAU,EAAE;gBAC3C,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,EAAE;gBACV,WAAW,EAAE,EAAE;aAChB;YACD,IAAI,EAAE;gBACJ,WAAW,EAAE,CAAC,eAAe,CAAC;gBAC9B,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE;aAC5D;SACF;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { InfraResourceIdentity, InfraWorkloadSpec } from '@ankhorage/contracts/infra';\n\nimport type { KubernetesDriverRequest } from '../../../../types/kubernetesDriver';\nimport type {\n  KubernetesDesiredResource,\n  KubernetesResolvedWorkloadValues,\n  KubernetesSecretBinding,\n} from '../../../../types/kubernetesResources';\nimport { createKubernetesDesiredResource } from '../../utils/createKubernetesDesiredResource';\nimport { getKubernetesResourceReference } from '../../utils/getKubernetesResourceReference';\nimport { toKubernetesName } from '../../utils/toKubernetesName';\n\n/*** Create config, secret and persistent-volume prerequisites in dependency order. */\nexport function createKubernetesPrerequisites(\n  request: KubernetesDriverRequest,\n  input: CreateKubernetesPrerequisitesInput,\n): KubernetesPrerequisites {\n  const resources: KubernetesDesiredResource[] = [];\n  const owners: InfraResourceIdentity[] = [input.namespaceOwner];\n  const configMap = createConfigMap(request, input);\n  if (configMap !== undefined) {\n    resources.push(configMap);\n    owners.push(configMap.owner.identity);\n  }\n  const secret = createSecret(request, input);\n  if (secret !== undefined) {\n    resources.push(secret.resource);\n    owners.push(secret.resource.owner.identity);\n  }\n  for (const volume of input.workload.persistence ?? []) {\n    const claim = createPersistentVolumeClaim(request, input, volume);\n    resources.push(claim);\n    owners.push(claim.owner.identity);\n  }\n  return { resources, owners, secretBindings: secret?.bindings ?? [] };\n}\n\nexport interface CreateKubernetesPrerequisitesInput {\n  readonly namespace: string;\n  readonly namespaceOwner: InfraResourceIdentity;\n  readonly workloadName: string;\n  readonly workload: InfraWorkloadSpec;\n  readonly values: KubernetesResolvedWorkloadValues;\n}\n\nexport interface KubernetesPrerequisites {\n  readonly resources: readonly KubernetesDesiredResource[];\n  readonly owners: readonly InfraResourceIdentity[];\n  readonly secretBindings: readonly KubernetesSecretBinding[];\n}\n\n/*** Create portable file configuration without secret content. */\nfunction createConfigMap(\n  request: KubernetesDriverRequest,\n  input: CreateKubernetesPrerequisitesInput,\n): KubernetesDesiredResource | undefined {\n  if (Object.keys(input.values.files).length === 0) return undefined;\n  const data = Object.fromEntries(\n    Object.values(input.values.files).map((value, index) => [`file-${index}`, value]),\n  );\n  return createKubernetesDesiredResource(request, {\n    resourceId: `config:${input.workloadName}`,\n    dependsOn: [input.namespaceOwner],\n    resource: {\n      apiVersion: 'v1',\n      kind: 'ConfigMap',\n      metadata: {\n        name: `${input.workloadName}-config`,\n        namespace: input.namespace,\n        labels: {},\n        annotations: {},\n      },\n      data,\n    },\n  });\n}\n\n/*** Create a value-free Secret skeleton plus runtime-only materialization bindings. */\nfunction createSecret(\n  request: KubernetesDriverRequest,\n  input: CreateKubernetesPrerequisitesInput,\n):\n  | {\n      readonly resource: KubernetesDesiredResource;\n      readonly bindings: readonly KubernetesSecretBinding[];\n    }\n  | undefined {\n  if (input.values.secrets.length === 0) return undefined;\n  const resource = createKubernetesDesiredResource(request, {\n    resourceId: `secret:${input.workloadName}`,\n    dependsOn: [input.namespaceOwner],\n    resource: {\n      apiVersion: 'v1',\n      kind: 'Secret',\n      metadata: {\n        name: `${input.workloadName}-secrets`,\n        namespace: input.namespace,\n        labels: {},\n        annotations: {},\n      },\n    },\n  });\n  const reference = getKubernetesResourceReference(resource.resource);\n  return {\n    resource,\n    bindings: input.values.secrets.map((secret) => ({\n      resource: reference,\n      key: secret.key,\n      reference: secret.reference,\n    })),\n  };\n}\n\n/*** Create one persistent volume claim from portable capacity and retention intent. */\nfunction createPersistentVolumeClaim(\n  request: KubernetesDriverRequest,\n  input: CreateKubernetesPrerequisitesInput,\n  volume: NonNullable<InfraWorkloadSpec['persistence']>[number],\n): KubernetesDesiredResource {\n  const volumeName = toKubernetesName(volume.id);\n  return createKubernetesDesiredResource(request, {\n    resourceId: `volume:${input.workloadName}:${volume.id}`,\n    persistent: true,\n    retention: volume.retention,\n    dependsOn: [input.namespaceOwner],\n    resource: {\n      apiVersion: 'v1',\n      kind: 'PersistentVolumeClaim',\n      metadata: {\n        name: `${input.workloadName}-${volumeName}`,\n        namespace: input.namespace,\n        labels: {},\n        annotations: {},\n      },\n      spec: {\n        accessModes: ['ReadWriteOnce'],\n        resources: { requests: { storage: `${volume.sizeGiB}Gi` } },\n      },\n    },\n  });\n}\n"]}

package/dist/features/workload-reconciliation/application/use-cases/getKubernetesOutputsAsync.d.ts

@@ -0,0 +1,5 @@
+import type { InfraOutput, InfraResult } from '@ankhorage/contracts/infra';
+import type { KubernetesDriverOptions, KubernetesDriverRequest } from '../../../../types/kubernetesDriver';
+/*** Read safe public outputs exposed by Infra-owned Kubernetes resources. */
+export declare function getKubernetesOutputsAsync(options: KubernetesDriverOptions, request: KubernetesDriverRequest): Promise<InfraResult<readonly InfraOutput[]>>;
+//# sourceMappingURL=getKubernetesOutputsAsync.d.ts.map

package/dist/features/workload-reconciliation/application/use-cases/getKubernetesOutputsAsync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getKubernetesOutputsAsync.d.ts","sourceRoot":"","sources":["../../../../../src/features/workload-reconciliation/application/use-cases/getKubernetesOutputsAsync.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAE3E,OAAO,KAAK,EACV,uBAAuB,EACvB,uBAAuB,EACxB,MAAM,oCAAoC,CAAC;AAK5C,6EAA6E;AAC7E,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,uBAAuB,EAChC,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,WAAW,CAAC,SAAS,WAAW,EAAE,CAAC,CAAC,CA8B9C"}

package/dist/features/workload-reconciliation/application/use-cases/getKubernetesOutputsAsync.js

@@ -0,0 +1,33 @@
+import { getKubernetesOwnershipQuery } from '../../utils/getKubernetesOwnershipQuery';
+import { getKubernetesResourceReference } from '../../utils/getKubernetesResourceReference';
+import { readKubernetesOwnedResource } from '../../utils/readKubernetesOwnedResource';
+/*** Read safe public outputs exposed by Infra-owned Kubernetes resources. */
+export async function getKubernetesOutputsAsync(options, request) {
+    try {
+        const resources = await options.api.listOwnedAsync(getKubernetesOwnershipQuery(request));
+        const outputs = [];
+        for (const resource of resources) {
+            const owner = readKubernetesOwnedResource(resource, request);
+            if (owner === undefined)
+                continue;
+            const observation = await options.api.observeAsync(getKubernetesResourceReference(resource), request.context.signal);
+            for (const [name, value] of Object.entries(observation.publicOutputs ?? {}).sort(([a], [b]) => a.localeCompare(b))) {
+                outputs.push({ owner: owner.identity, name, visibility: 'public', value });
+            }
+        }
+        return { ok: true, value: outputs, diagnostics: [] };
+    }
+    catch {
+        return {
+            ok: false,
+            diagnostics: [
+                {
+                    severity: 'error',
+                    code: 'kubernetes-outputs-failed',
+                    message: 'Kubernetes public outputs could not be read.',
+                },
+            ],
+        };
+    }
+}
+//# sourceMappingURL=getKubernetesOutputsAsync.js.map

package/dist/features/workload-reconciliation/application/use-cases/getKubernetesOutputsAsync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getKubernetesOutputsAsync.js","sourceRoot":"","sources":["../../../../../src/features/workload-reconciliation/application/use-cases/getKubernetesOutputsAsync.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EAAE,8BAA8B,EAAE,MAAM,4CAA4C,CAAC;AAC5F,OAAO,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AAEtF,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAgC,EAChC,OAAgC;IAEhC,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC,CAAC;QACzF,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,2BAA2B,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC7D,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAChD,8BAA8B,CAAC,QAAQ,CAAC,EACxC,OAAO,CAAC,OAAO,CAAC,MAAM,CACvB,CAAC;YACF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5F,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CACnB,EAAE,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAK;YACT,WAAW,EAAE;gBACX;oBACE,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,2BAA2B;oBACjC,OAAO,EAAE,8CAA8C;iBACxD;aACF;SACF,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["import type { InfraOutput, InfraResult } from '@ankhorage/contracts/infra';\n\nimport type {\n  KubernetesDriverOptions,\n  KubernetesDriverRequest,\n} from '../../../../types/kubernetesDriver';\nimport { getKubernetesOwnershipQuery } from '../../utils/getKubernetesOwnershipQuery';\nimport { getKubernetesResourceReference } from '../../utils/getKubernetesResourceReference';\nimport { readKubernetesOwnedResource } from '../../utils/readKubernetesOwnedResource';\n\n/*** Read safe public outputs exposed by Infra-owned Kubernetes resources. */\nexport async function getKubernetesOutputsAsync(\n  options: KubernetesDriverOptions,\n  request: KubernetesDriverRequest,\n): Promise<InfraResult<readonly InfraOutput[]>> {\n  try {\n    const resources = await options.api.listOwnedAsync(getKubernetesOwnershipQuery(request));\n    const outputs: InfraOutput[] = [];\n    for (const resource of resources) {\n      const owner = readKubernetesOwnedResource(resource, request);\n      if (owner === undefined) continue;\n      const observation = await options.api.observeAsync(\n        getKubernetesResourceReference(resource),\n        request.context.signal,\n      );\n      for (const [name, value] of Object.entries(observation.publicOutputs ?? {}).sort(([a], [b]) =>\n        a.localeCompare(b),\n      )) {\n        outputs.push({ owner: owner.identity, name, visibility: 'public', value });\n      }\n    }\n    return { ok: true, value: outputs, diagnostics: [] };\n  } catch {\n    return {\n      ok: false,\n      diagnostics: [\n        {\n          severity: 'error',\n          code: 'kubernetes-outputs-failed',\n          message: 'Kubernetes public outputs could not be read.',\n        },\n      ],\n    };\n  }\n}\n"]}

package/dist/features/workload-reconciliation/application/use-cases/getKubernetesStatusAsync.d.ts

@@ -0,0 +1,5 @@
+import type { InfraResourceStatus, InfraResult } from '@ankhorage/contracts/infra';
+import type { KubernetesDriverOptions, KubernetesDriverRequest } from '../../../../types/kubernetesDriver';
+/*** Read provider-neutral status for every safely identified Infra-owned resource. */
+export declare function getKubernetesStatusAsync(options: KubernetesDriverOptions, request: KubernetesDriverRequest): Promise<InfraResult<readonly InfraResourceStatus[]>>;
+//# sourceMappingURL=getKubernetesStatusAsync.d.ts.map

package/dist/features/workload-reconciliation/application/use-cases/getKubernetesStatusAsync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getKubernetesStatusAsync.d.ts","sourceRoot":"","sources":["../../../../../src/features/workload-reconciliation/application/use-cases/getKubernetesStatusAsync.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAEnF,OAAO,KAAK,EACV,uBAAuB,EACvB,uBAAuB,EACxB,MAAM,oCAAoC,CAAC;AAK5C,sFAAsF;AACtF,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,uBAAuB,EAChC,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,WAAW,CAAC,SAAS,mBAAmB,EAAE,CAAC,CAAC,CA8BtD"}

package/dist/features/workload-reconciliation/application/use-cases/getKubernetesStatusAsync.js

@@ -0,0 +1,35 @@
+import { getKubernetesOwnershipQuery } from '../../utils/getKubernetesOwnershipQuery';
+import { getKubernetesResourceReference } from '../../utils/getKubernetesResourceReference';
+import { readKubernetesOwnedResource } from '../../utils/readKubernetesOwnedResource';
+/*** Read provider-neutral status for every safely identified Infra-owned resource. */
+export async function getKubernetesStatusAsync(options, request) {
+    try {
+        const resources = await options.api.listOwnedAsync(getKubernetesOwnershipQuery(request));
+        const statuses = [];
+        for (const resource of resources) {
+            const owner = readKubernetesOwnedResource(resource, request);
+            if (owner === undefined)
+                continue;
+            const observation = await options.api.observeAsync(getKubernetesResourceReference(resource), request.context.signal);
+            statuses.push({
+                owner: owner.identity,
+                state: observation.state,
+                ...(observation.detail === undefined ? {} : { detail: observation.detail }),
+            });
+        }
+        return { ok: true, value: statuses, diagnostics: [] };
+    }
+    catch {
+        return {
+            ok: false,
+            diagnostics: [
+                {
+                    severity: 'error',
+                    code: 'kubernetes-status-failed',
+                    message: 'Kubernetes resource status could not be read.',
+                },
+            ],
+        };
+    }
+}
+//# sourceMappingURL=getKubernetesStatusAsync.js.map

package/dist/features/workload-reconciliation/application/use-cases/getKubernetesStatusAsync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getKubernetesStatusAsync.js","sourceRoot":"","sources":["../../../../../src/features/workload-reconciliation/application/use-cases/getKubernetesStatusAsync.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EAAE,8BAA8B,EAAE,MAAM,4CAA4C,CAAC;AAC5F,OAAO,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AAEtF,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAgC,EAChC,OAAgC;IAEhC,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC,CAAC;QACzF,MAAM,QAAQ,GAA0B,EAAE,CAAC;QAC3C,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,2BAA2B,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC7D,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAChD,8BAA8B,CAAC,QAAQ,CAAC,EACxC,OAAO,CAAC,OAAO,CAAC,MAAM,CACvB,CAAC;YACF,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,KAAK,CAAC,QAAQ;gBACrB,KAAK,EAAE,WAAW,CAAC,KAAK;gBACxB,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC;aAC5E,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAK;YACT,WAAW,EAAE;gBACX;oBACE,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,0BAA0B;oBAChC,OAAO,EAAE,+CAA+C;iBACzD;aACF;SACF,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["import type { InfraResourceStatus, InfraResult } from '@ankhorage/contracts/infra';\n\nimport type {\n  KubernetesDriverOptions,\n  KubernetesDriverRequest,\n} from '../../../../types/kubernetesDriver';\nimport { getKubernetesOwnershipQuery } from '../../utils/getKubernetesOwnershipQuery';\nimport { getKubernetesResourceReference } from '../../utils/getKubernetesResourceReference';\nimport { readKubernetesOwnedResource } from '../../utils/readKubernetesOwnedResource';\n\n/*** Read provider-neutral status for every safely identified Infra-owned resource. */\nexport async function getKubernetesStatusAsync(\n  options: KubernetesDriverOptions,\n  request: KubernetesDriverRequest,\n): Promise<InfraResult<readonly InfraResourceStatus[]>> {\n  try {\n    const resources = await options.api.listOwnedAsync(getKubernetesOwnershipQuery(request));\n    const statuses: InfraResourceStatus[] = [];\n    for (const resource of resources) {\n      const owner = readKubernetesOwnedResource(resource, request);\n      if (owner === undefined) continue;\n      const observation = await options.api.observeAsync(\n        getKubernetesResourceReference(resource),\n        request.context.signal,\n      );\n      statuses.push({\n        owner: owner.identity,\n        state: observation.state,\n        ...(observation.detail === undefined ? {} : { detail: observation.detail }),\n      });\n    }\n    return { ok: true, value: statuses, diagnostics: [] };\n  } catch {\n    return {\n      ok: false,\n      diagnostics: [\n        {\n          severity: 'error',\n          code: 'kubernetes-status-failed',\n          message: 'Kubernetes resource status could not be read.',\n        },\n      ],\n    };\n  }\n}\n"]}

package/dist/features/workload-reconciliation/application/use-cases/materializeKubernetesSecretsAsync.d.ts

@@ -0,0 +1,6 @@
+import type { InfraResult } from '@ankhorage/contracts/infra';
+import type { KubernetesDriverRequest } from '../../../../types/kubernetesDriver';
+import type { KubernetesDesiredResource, KubernetesProjection } from '../../../../types/kubernetesResources';
+/*** Resolve referenced secrets into ephemeral Kubernetes apply resources. */
+export declare function materializeKubernetesSecretsAsync(request: KubernetesDriverRequest, projection: KubernetesProjection): Promise<InfraResult<readonly KubernetesDesiredResource[]>>;
+//# sourceMappingURL=materializeKubernetesSecretsAsync.d.ts.map

package/dist/features/workload-reconciliation/application/use-cases/materializeKubernetesSecretsAsync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"materializeKubernetesSecretsAsync.d.ts","sourceRoot":"","sources":["../../../../../src/features/workload-reconciliation/application/use-cases/materializeKubernetesSecretsAsync.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAmB,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAE/E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,KAAK,EACV,yBAAyB,EACzB,oBAAoB,EACrB,MAAM,uCAAuC,CAAC;AAG/C,6EAA6E;AAC7E,wBAAsB,iCAAiC,CACrD,OAAO,EAAE,uBAAuB,EAChC,UAAU,EAAE,oBAAoB,GAC/B,OAAO,CAAC,WAAW,CAAC,SAAS,yBAAyB,EAAE,CAAC,CAAC,CA6B5D"}