@ankhorage/kubernetes 0.1.0 → 0.2.0

package/dist/features/workload-reconciliation/utils/sortKubernetesResourcesForRemoval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sortKubernetesResourcesForRemoval.js","sourceRoot":"","sources":["../../../../src/features/workload-reconciliation/utils/sortKubernetesResourcesForRemoval.ts"],"names":[],"mappings":"AASA,yFAAyF;AACzF,MAAM,UAAU,iCAAiC,CAC/C,SAA6C;IAE7C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,OAAO,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;aACnC,MAAM,CACL,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CACZ,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,CACrD,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,UAAU,KAAK,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CACvF,CACJ;aACA,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACzF,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM;QAClC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvB,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,qEAAqE;AACrE,SAAS,mBAAmB,CAC1B,IAA6B,EAC7B,KAA8B;IAE9B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;AACnF,CAAC","sourcesContent":["import type { InfraOwnedResource } from '@ankhorage/contracts/infra';\n\nimport type { KubernetesResource } from '../../../types/kubernetesResources';\n\nexport interface OwnedKubernetesResource {\n  readonly resource: KubernetesResource;\n  readonly owner: InfraOwnedResource;\n}\n\n/*** Sort owned resources deterministically with dependents before their dependencies. */\nexport function sortKubernetesResourcesForRemoval(\n  resources: readonly OwnedKubernetesResource[],\n): readonly OwnedKubernetesResource[] {\n  const remaining = new Map(resources.map((item) => [item.owner.identity.resourceId, item]));\n  const ordered: OwnedKubernetesResource[] = [];\n  while (remaining.size > 0) {\n    const leaves = [...remaining.values()]\n      .filter(\n        ({ owner }) =>\n          ![...remaining.values()].some(({ owner: candidate }) =>\n            candidate.dependsOn.some(({ resourceId }) => resourceId === owner.identity.resourceId),\n          ),\n      )\n      .sort(compareResourceKeys);\n    const selected = leaves.at(0) ?? [...remaining.values()].sort(compareResourceKeys).at(0);\n    if (selected === undefined) break;\n    ordered.push(selected);\n    remaining.delete(selected.owner.identity.resourceId);\n  }\n  return ordered;\n}\n\n/*** Compare owned resources by stable external resource identity. */\nfunction compareResourceKeys(\n  left: OwnedKubernetesResource,\n  right: OwnedKubernetesResource,\n): number {\n  return (left.owner.externalId ?? '').localeCompare(right.owner.externalId ?? '');\n}\n"]}

package/dist/features/workload-reconciliation/utils/toKubernetesName.d.ts

@@ -0,0 +1,3 @@
+/*** Convert an arbitrary stable identifier into a deterministic Kubernetes DNS label. */
+export declare function toKubernetesName(value: string): string;
+//# sourceMappingURL=toKubernetesName.d.ts.map

package/dist/features/workload-reconciliation/utils/toKubernetesName.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toKubernetesName.d.ts","sourceRoot":"","sources":["../../../../src/features/workload-reconciliation/utils/toKubernetesName.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAWtD"}

package/dist/features/workload-reconciliation/utils/toKubernetesName.js

@@ -0,0 +1,21 @@
+/*** Convert an arbitrary stable identifier into a deterministic Kubernetes DNS label. */
+export function toKubernetesName(value) {
+    const normalized = value
+        .toLowerCase()
+        .replace(/[^a-z0-9-]+/g, '-')
+        .replace(/^-+|-+$/g, '') || 'resource';
+    if (normalized.length <= 63)
+        return normalized;
+    const suffix = hash(value).toString(36).padStart(7, '0').slice(-7);
+    return `${normalized.slice(0, 55).replace(/-+$/g, '')}-${suffix}`;
+}
+/*** Produce a stable non-cryptographic suffix used only for Kubernetes name uniqueness. */
+function hash(value) {
+    let result = 2_166_136_261;
+    for (const character of value) {
+        result ^= character.codePointAt(0) ?? 0;
+        result = Math.imul(result, 16_777_619);
+    }
+    return result >>> 0;
+}
+//# sourceMappingURL=toKubernetesName.js.map

package/dist/features/workload-reconciliation/utils/toKubernetesName.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toKubernetesName.js","sourceRoot":"","sources":["../../../../src/features/workload-reconciliation/utils/toKubernetesName.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,MAAM,UAAU,GACd,KAAK;SACF,WAAW,EAAE;SACb,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC;SAC5B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC;IAE3C,IAAI,UAAU,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,UAAU,CAAC;IAE/C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC;AACpE,CAAC;AAED,2FAA2F;AAC3F,SAAS,IAAI,CAAC,KAAa;IACzB,IAAI,MAAM,GAAG,aAAa,CAAC;IAC3B,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,IAAI,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,MAAM,KAAK,CAAC,CAAC;AACtB,CAAC","sourcesContent":["/*** Convert an arbitrary stable identifier into a deterministic Kubernetes DNS label. */\nexport function toKubernetesName(value: string): string {\n  const normalized =\n    value\n      .toLowerCase()\n      .replace(/[^a-z0-9-]+/g, '-')\n      .replace(/^-+|-+$/g, '') || 'resource';\n\n  if (normalized.length <= 63) return normalized;\n\n  const suffix = hash(value).toString(36).padStart(7, '0').slice(-7);\n  return `${normalized.slice(0, 55).replace(/-+$/g, '')}-${suffix}`;\n}\n\n/*** Produce a stable non-cryptographic suffix used only for Kubernetes name uniqueness. */\nfunction hash(value: string): number {\n  let result = 2_166_136_261;\n  for (const character of value) {\n    result ^= character.codePointAt(0) ?? 0;\n    result = Math.imul(result, 16_777_619);\n  }\n  return result >>> 0;\n}\n"]}

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 /** Public shared Kubernetes workload-driver boundary. */
 export { createKubernetesDriver } from './features/workload-reconciliation/composition/createKubernetesDriver';
-export type { KubernetesDriver } from './types/kubernetesDriver';
+export type { KubernetesDriver, KubernetesDriverOptions, KubernetesDriverRequest, } from './types/kubernetesDriver';
+export type { KubernetesApi, KubernetesDesiredResource, KubernetesOwnershipQuery, KubernetesProjection, KubernetesResource, KubernetesResourceMetadata, KubernetesResourceObservation, KubernetesResourceReference, KubernetesSecretBinding, } from './types/kubernetesResources';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uEAAuE,CAAC;AAC/G,YAAY,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uEAAuE,CAAC;AAC/G,YAAY,EACV,gBAAgB,EAChB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,aAAa,EACb,yBAAyB,EACzB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,0BAA0B,EAC1B,6BAA6B,EAC7B,2BAA2B,EAC3B,uBAAuB,GACxB,MAAM,6BAA6B,CAAC"}

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uEAAuE,CAAC","sourcesContent":["/** Public shared Kubernetes workload-driver boundary. */\nexport { createKubernetesDriver } from './features/workload-reconciliation/composition/createKubernetesDriver';\nexport type { KubernetesDriver } from './types/kubernetesDriver';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uEAAuE,CAAC","sourcesContent":["/** Public shared Kubernetes workload-driver boundary. */\nexport { createKubernetesDriver } from './features/workload-reconciliation/composition/createKubernetesDriver';\nexport type {\n  KubernetesDriver,\n  KubernetesDriverOptions,\n  KubernetesDriverRequest,\n} from './types/kubernetesDriver';\nexport type {\n  KubernetesApi,\n  KubernetesDesiredResource,\n  KubernetesOwnershipQuery,\n  KubernetesProjection,\n  KubernetesResource,\n  KubernetesResourceMetadata,\n  KubernetesResourceObservation,\n  KubernetesResourceReference,\n  KubernetesSecretBinding,\n} from './types/kubernetesResources';\n"]}

package/dist/types/kubernetesDriver.d.ts

@@ -1,5 +1,25 @@
-/** Public non-provider driver boundary composed by Kubernetes runtime adapters. */
+import type { InfraAdapterId, InfraDestroyRequest, InfraExecutionContext, InfraOutput, InfraPlanAction, InfraReconcileResult, InfraResourceStatus, InfraResult, InfraWorkloadSpec } from '@ankhorage/contracts/infra';
+import type { KubernetesApi, KubernetesProjection } from './kubernetesResources';
+export interface KubernetesDriverOptions {
+    readonly api: KubernetesApi;
+    readonly defaultReadinessTimeoutSeconds?: number;
+}
+export interface KubernetesDriverRequest {
+    readonly context: InfraExecutionContext;
+    /** The composing runtime adapter remains the canonical Infra resource owner. */
+    readonly ownerAdapter: InfraAdapterId;
+    readonly workloads: readonly InfraWorkloadSpec[];
+    readonly availableOutputs?: readonly InfraOutput[];
+    readonly namespace?: string;
+}
 export interface KubernetesDriver {
     readonly kind: 'kubernetes';
+    projectAsync(request: KubernetesDriverRequest): Promise<InfraResult<KubernetesProjection>>;
+    planAsync(request: KubernetesDriverRequest): Promise<InfraResult<readonly InfraPlanAction[]>>;
+    reconcileAsync(request: KubernetesDriverRequest): Promise<InfraResult<InfraReconcileResult>>;
+    removeAsync(request: KubernetesDriverRequest, destroy: InfraDestroyRequest): Promise<InfraResult<InfraReconcileResult>>;
+    statusAsync(request: KubernetesDriverRequest): Promise<InfraResult<readonly InfraResourceStatus[]>>;
+    waitUntilReadyAsync(request: KubernetesDriverRequest): Promise<InfraResult<readonly InfraResourceStatus[]>>;
+    outputsAsync(request: KubernetesDriverRequest): Promise<InfraResult<readonly InfraOutput[]>>;
 }
 //# sourceMappingURL=kubernetesDriver.d.ts.map

package/dist/types/kubernetesDriver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kubernetesDriver.d.ts","sourceRoot":"","sources":["../../src/types/kubernetesDriver.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;CAC7B"}
+{"version":3,"file":"kubernetesDriver.d.ts","sourceRoot":"","sources":["../../src/types/kubernetesDriver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,mBAAmB,EACnB,qBAAqB,EACrB,WAAW,EACX,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,WAAW,EACX,iBAAiB,EAClB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAEjF,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC;IAC5B,QAAQ,CAAC,8BAA8B,CAAC,EAAE,MAAM,CAAC;CAClD;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,gFAAgF;IAChF,QAAQ,CAAC,YAAY,EAAE,cAAc,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACjD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;IACnD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,YAAY,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAC3F,SAAS,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,WAAW,CAAC,SAAS,eAAe,EAAE,CAAC,CAAC,CAAC;IAC9F,cAAc,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAC7F,WAAW,CACT,OAAO,EAAE,uBAAuB,EAChC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAC9C,WAAW,CACT,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,WAAW,CAAC,SAAS,mBAAmB,EAAE,CAAC,CAAC,CAAC;IACxD,mBAAmB,CACjB,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,WAAW,CAAC,SAAS,mBAAmB,EAAE,CAAC,CAAC,CAAC;IACxD,YAAY,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,WAAW,CAAC,SAAS,WAAW,EAAE,CAAC,CAAC,CAAC;CAC9F"}

package/dist/types/kubernetesDriver.js.map

@@ -1 +1 @@
-{"version":3,"file":"kubernetesDriver.js","sourceRoot":"","sources":["../../src/types/kubernetesDriver.ts"],"names":[],"mappings":"","sourcesContent":["/** Public non-provider driver boundary composed by Kubernetes runtime adapters. */\nexport interface KubernetesDriver {\n  readonly kind: 'kubernetes';\n}\n"]}
+{"version":3,"file":"kubernetesDriver.js","sourceRoot":"","sources":["../../src/types/kubernetesDriver.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  InfraAdapterId,\n  InfraDestroyRequest,\n  InfraExecutionContext,\n  InfraOutput,\n  InfraPlanAction,\n  InfraReconcileResult,\n  InfraResourceStatus,\n  InfraResult,\n  InfraWorkloadSpec,\n} from '@ankhorage/contracts/infra';\n\nimport type { KubernetesApi, KubernetesProjection } from './kubernetesResources';\n\nexport interface KubernetesDriverOptions {\n  readonly api: KubernetesApi;\n  readonly defaultReadinessTimeoutSeconds?: number;\n}\n\nexport interface KubernetesDriverRequest {\n  readonly context: InfraExecutionContext;\n  /** The composing runtime adapter remains the canonical Infra resource owner. */\n  readonly ownerAdapter: InfraAdapterId;\n  readonly workloads: readonly InfraWorkloadSpec[];\n  readonly availableOutputs?: readonly InfraOutput[];\n  readonly namespace?: string;\n}\n\nexport interface KubernetesDriver {\n  readonly kind: 'kubernetes';\n  projectAsync(request: KubernetesDriverRequest): Promise<InfraResult<KubernetesProjection>>;\n  planAsync(request: KubernetesDriverRequest): Promise<InfraResult<readonly InfraPlanAction[]>>;\n  reconcileAsync(request: KubernetesDriverRequest): Promise<InfraResult<InfraReconcileResult>>;\n  removeAsync(\n    request: KubernetesDriverRequest,\n    destroy: InfraDestroyRequest,\n  ): Promise<InfraResult<InfraReconcileResult>>;\n  statusAsync(\n    request: KubernetesDriverRequest,\n  ): Promise<InfraResult<readonly InfraResourceStatus[]>>;\n  waitUntilReadyAsync(\n    request: KubernetesDriverRequest,\n  ): Promise<InfraResult<readonly InfraResourceStatus[]>>;\n  outputsAsync(request: KubernetesDriverRequest): Promise<InfraResult<readonly InfraOutput[]>>;\n}\n"]}

package/dist/types/kubernetesResources.d.ts

@@ -0,0 +1,87 @@
+import type { InfraOwnedResource, InfraPlanAction, InfraResourceStatus, InfraSecretReference } from '@ankhorage/contracts/infra';
+export interface KubernetesResourceMetadata {
+    readonly name: string;
+    readonly namespace?: string;
+    readonly labels: Readonly<Record<string, string>>;
+    readonly annotations: Readonly<Record<string, string>>;
+}
+export interface KubernetesResource {
+    readonly apiVersion: string;
+    readonly kind: string;
+    readonly metadata: KubernetesResourceMetadata;
+    readonly data?: Readonly<Record<string, string>>;
+    readonly stringData?: Readonly<Record<string, string>>;
+    readonly spec?: Readonly<Record<string, unknown>>;
+}
+export interface KubernetesResourceReference {
+    readonly apiVersion: string;
+    readonly kind: string;
+    readonly name: string;
+    readonly namespace?: string;
+}
+export interface KubernetesOwnershipQuery {
+    readonly namespace: string;
+    readonly labels: Readonly<Record<string, string>>;
+    readonly signal?: AbortSignal;
+}
+export interface KubernetesResourceObservation {
+    readonly state: InfraResourceStatus['state'];
+    readonly detail?: string;
+    /** Values that are explicitly safe to expose through Infra public outputs. */
+    readonly publicOutputs?: Readonly<Record<string, string | number | boolean>>;
+}
+/** Generic Kubernetes API boundary implemented from already authenticated cluster access. */
+export interface KubernetesApi {
+    listOwnedAsync(query: KubernetesOwnershipQuery): Promise<readonly KubernetesResource[]>;
+    applyAsync(resource: KubernetesResource, signal?: AbortSignal): Promise<void>;
+    deleteAsync(resource: KubernetesResourceReference, signal?: AbortSignal): Promise<void>;
+    observeAsync(resource: KubernetesResourceReference, signal?: AbortSignal): Promise<KubernetesResourceObservation>;
+    waitUntilReadyAsync(resource: KubernetesResourceReference, options: {
+        readonly timeoutSeconds: number;
+        readonly signal?: AbortSignal;
+    }): Promise<KubernetesResourceObservation>;
+}
+export interface KubernetesSecretBinding {
+    readonly resource: KubernetesResourceReference;
+    readonly key: string;
+    readonly reference: InfraSecretReference;
+}
+export interface KubernetesDesiredResource {
+    readonly resource: KubernetesResource;
+    readonly owner: InfraOwnedResource;
+}
+/** Serializable desired resources contain references, never resolved secret values. */
+export interface KubernetesProjection {
+    readonly resources: readonly KubernetesDesiredResource[];
+    readonly secretBindings: readonly KubernetesSecretBinding[];
+}
+export interface KubernetesPreparedChange {
+    readonly action: InfraPlanAction;
+    readonly desired?: KubernetesDesiredResource;
+    readonly actual?: KubernetesResource;
+}
+export interface KubernetesResolvedWorkloadValues {
+    readonly environment: Readonly<Record<string, string>>;
+    readonly files: Readonly<Record<string, string>>;
+    readonly secrets: readonly KubernetesSecretTarget[];
+}
+export interface KubernetesSecretTarget {
+    readonly key: string;
+    readonly reference: InfraSecretReference;
+    readonly target: {
+        readonly kind: 'environment';
+        readonly name: string;
+    } | {
+        readonly kind: 'file';
+        readonly path: string;
+    };
+}
+export interface KubernetesWorkloadProjection {
+    readonly resources: readonly KubernetesDesiredResource[];
+    readonly secretBindings: readonly KubernetesSecretBinding[];
+}
+export interface KubernetesPreparedChanges {
+    readonly changes: readonly KubernetesPreparedChange[];
+    readonly projection: KubernetesProjection;
+}
+//# sourceMappingURL=kubernetesResources.d.ts.map

package/dist/types/kubernetesResources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubernetesResources.d.ts","sourceRoot":"","sources":["../../src/types/kubernetesResources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACrB,MAAM,4BAA4B,CAAC;AAEpC,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACjD,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,8EAA8E;IAC9E,QAAQ,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;CAC9E;AAED,6FAA6F;AAC7F,MAAM,WAAW,aAAa;IAC5B,cAAc,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAAC;IACxF,UAAU,CAAC,QAAQ,EAAE,kBAAkB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,WAAW,CAAC,QAAQ,EAAE,2BAA2B,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxF,YAAY,CACV,QAAQ,EAAE,2BAA2B,EACrC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAC1C,mBAAmB,CACjB,QAAQ,EAAE,2BAA2B,EACrC,OAAO,EAAE;QAAE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAC1E,OAAO,CAAC,6BAA6B,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC;IAC/C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;CAC1C;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;CACpC;AAED,uFAAuF;AACvF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACzD,QAAQ,CAAC,cAAc,EAAE,SAAS,uBAAuB,EAAE,CAAC;CAC7D;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,yBAAyB,CAAC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;CACtC;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACjD,QAAQ,CAAC,OAAO,EAAE,SAAS,sBAAsB,EAAE,CAAC;CACrD;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,MAAM,EACX;QAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GACvD;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACtD;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,SAAS,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACzD,QAAQ,CAAC,cAAc,EAAE,SAAS,uBAAuB,EAAE,CAAC;CAC7D;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACtD,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;CAC3C"}

package/dist/types/kubernetesResources.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=kubernetesResources.js.map

package/dist/types/kubernetesResources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubernetesResources.js","sourceRoot":"","sources":["../../src/types/kubernetesResources.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  InfraOwnedResource,\n  InfraPlanAction,\n  InfraResourceStatus,\n  InfraSecretReference,\n} from '@ankhorage/contracts/infra';\n\nexport interface KubernetesResourceMetadata {\n  readonly name: string;\n  readonly namespace?: string;\n  readonly labels: Readonly<Record<string, string>>;\n  readonly annotations: Readonly<Record<string, string>>;\n}\n\nexport interface KubernetesResource {\n  readonly apiVersion: string;\n  readonly kind: string;\n  readonly metadata: KubernetesResourceMetadata;\n  readonly data?: Readonly<Record<string, string>>;\n  readonly stringData?: Readonly<Record<string, string>>;\n  readonly spec?: Readonly<Record<string, unknown>>;\n}\n\nexport interface KubernetesResourceReference {\n  readonly apiVersion: string;\n  readonly kind: string;\n  readonly name: string;\n  readonly namespace?: string;\n}\n\nexport interface KubernetesOwnershipQuery {\n  readonly namespace: string;\n  readonly labels: Readonly<Record<string, string>>;\n  readonly signal?: AbortSignal;\n}\n\nexport interface KubernetesResourceObservation {\n  readonly state: InfraResourceStatus['state'];\n  readonly detail?: string;\n  /** Values that are explicitly safe to expose through Infra public outputs. */\n  readonly publicOutputs?: Readonly<Record<string, string | number | boolean>>;\n}\n\n/** Generic Kubernetes API boundary implemented from already authenticated cluster access. */\nexport interface KubernetesApi {\n  listOwnedAsync(query: KubernetesOwnershipQuery): Promise<readonly KubernetesResource[]>;\n  applyAsync(resource: KubernetesResource, signal?: AbortSignal): Promise<void>;\n  deleteAsync(resource: KubernetesResourceReference, signal?: AbortSignal): Promise<void>;\n  observeAsync(\n    resource: KubernetesResourceReference,\n    signal?: AbortSignal,\n  ): Promise<KubernetesResourceObservation>;\n  waitUntilReadyAsync(\n    resource: KubernetesResourceReference,\n    options: { readonly timeoutSeconds: number; readonly signal?: AbortSignal },\n  ): Promise<KubernetesResourceObservation>;\n}\n\nexport interface KubernetesSecretBinding {\n  readonly resource: KubernetesResourceReference;\n  readonly key: string;\n  readonly reference: InfraSecretReference;\n}\n\nexport interface KubernetesDesiredResource {\n  readonly resource: KubernetesResource;\n  readonly owner: InfraOwnedResource;\n}\n\n/** Serializable desired resources contain references, never resolved secret values. */\nexport interface KubernetesProjection {\n  readonly resources: readonly KubernetesDesiredResource[];\n  readonly secretBindings: readonly KubernetesSecretBinding[];\n}\n\nexport interface KubernetesPreparedChange {\n  readonly action: InfraPlanAction;\n  readonly desired?: KubernetesDesiredResource;\n  readonly actual?: KubernetesResource;\n}\n\nexport interface KubernetesResolvedWorkloadValues {\n  readonly environment: Readonly<Record<string, string>>;\n  readonly files: Readonly<Record<string, string>>;\n  readonly secrets: readonly KubernetesSecretTarget[];\n}\n\nexport interface KubernetesSecretTarget {\n  readonly key: string;\n  readonly reference: InfraSecretReference;\n  readonly target:\n    | { readonly kind: 'environment'; readonly name: string }\n    | { readonly kind: 'file'; readonly path: string };\n}\n\nexport interface KubernetesWorkloadProjection {\n  readonly resources: readonly KubernetesDesiredResource[];\n  readonly secretBindings: readonly KubernetesSecretBinding[];\n}\n\nexport interface KubernetesPreparedChanges {\n  readonly changes: readonly KubernetesPreparedChange[];\n  readonly projection: KubernetesProjection;\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ankhorage/kubernetes",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Shared Kubernetes workload driver for provider-neutral Ankhorage infrastructure.",
   "type": "module",
   "main": "./dist/index.js",