@azure/provisioning-core 0.1.0-alpha.20261014.1

package/dist/constructs/resource/resource-registry.d.ts

@@ -0,0 +1,99 @@
+/**
+ * Global registry mapping a resource class's registry key to its
+ * constructor.
+ *
+ * Populated at module load by each class's `static {}` initializer
+ * (via {@link Resource.register}). The deserializer reads this
+ * registry to construct the correct class instance — preserving
+ * identity, prototype methods, and constructor-initialized child
+ * collections — instead of materialising a base `Resource`.
+ *
+ * Each `type@apiVersion` entry is either one flat constructor or a flat list
+ * of concrete constructors paired with ordered variant selectors. A selector
+ * can contain singleton `name`, model discriminators such as `kind`, and
+ * nested discriminator segments.
+ *
+ * Resolution has two modes:
+ *
+ * - **Best-effort (default).** Exact `(type, apiVersion)` first, then
+ *   falls back to the highest registered `apiVersion` for the same
+ *   selector. Enables
+ *   deserializing older JSON against a newer package version without
+ *   losing typed handles.
+ * - **Strict** (opt-in via `{ strict: true }`). Exact match only;
+ *   returns `undefined` for any apiVersion the package doesn't ship.
+ *
+ * The shared registry tracks the highest `apiVersion` per `(type, selector)`.
+ * Best-effort lookups consult it in O(1); no scanning is needed.
+ *
+ * Keyed on a process-global symbol so multiple copies of `@azure/provisioning-core`
+ * in the same realm share one registry, mirroring the cross-realm
+ * strategy used by {@link isResource}'s brand symbol.
+ */
+import type { Resource } from "./resource.js";
+import { type FlatVariantSelector } from "./resource-type-registry.js";
+/**
+ * A `Resource` class that's eligible to live in the registry.
+ *
+ * - The construct signature uses `any` for both `context` and `props`
+ *   because concrete classes narrow these (child resources require a
+ *   specific parent class as context; each resource has its own `Props`
+ *   shape). TypeScript's parameter contravariance would reject any
+ *   concrete parameter types here. The deserializer is the sole caller
+ *   of resolved constructors and forwards already-correct values it
+ *   built from the wire document.
+ * - The two static fields `resourceType` and `apiVersion` form the
+ *   registry key and are always present on emitter-generated classes
+ *   (and on the hand-maintained `ResourceGroup`).
+ * - The generic `T` propagates the instance type — used by the query
+ *   API (`stack.getResources(KeyVault)` → `KeyVault[]`) to narrow
+ *   return types without needing a separate descriptor object.
+ */
+export type ResourceCtor<T extends Resource = Resource> = {
+    new (context: any, props: any, options?: any): T;
+    readonly resourceType: string;
+    readonly apiVersion: string;
+};
+/**
+ * Options controlling how {@link resolveResource} handles
+ * apiVersion mismatches.
+ */
+export interface ResolveOptions {
+    /**
+     * When `true`, only an exact `(resourceType, apiVersion)` match is
+     * returned; the best-effort fallback to the highest registered
+     * version for the type is skipped. Defaults to `false`.
+     */
+    readonly strict?: boolean;
+}
+/**
+ * Register `ctor` as the canonical class for its
+ * `(resourceType, apiVersion[, variantSelector])` key.
+ *
+ * Pass an ordered selector for variants; omit it for ordinary resources.
+ * Re-registering the same constructor for the
+ * same key is a silent no-op so module-graph re-entry (test
+ * harnesses, dual-format builds) is safe. Registering a *different*
+ * constructor for an existing key throws — that's a genuine conflict
+ * (e.g. two packages claiming the same ARM type).
+ *
+ * A `(resourceType, apiVersion)` pair is either entirely flat or entirely
+ * variant-based. Attempting to mix both modes throws,
+ * preserving the invariant the deserializer relies on.
+ */
+export declare function registerResource(ctor: ResourceCtor, variantSelector?: FlatVariantSelector): void;
+/**
+ * Resolve the registered class for a wire resource.
+ *
+ * Default is best-effort:
+ *  1. Try the exact `(type, apiVersion)` entry and match its selectors
+ *     against ARM-side keys in `state`.
+ *  2. On miss, retry with the highest registered version of each selector.
+ *
+ * Pass `{ strict: true }` to skip step 2 and require an exact match.
+ *
+ * Returns `undefined` when nothing matches — callers (notably the
+ * deserializer) then fall back to constructing a base `Resource`.
+ */
+export declare function resolveResource(type: string, apiVersion: string, state?: Record<string, unknown>, options?: ResolveOptions): ResourceCtor | undefined;
+//# sourceMappingURL=resource-registry.d.ts.map

package/dist/constructs/resource/resource-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-registry.d.ts","sourceRoot":"","sources":["../../../src/constructs/resource/resource-registry.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,6BAA6B,CAAC;AAErC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,QAAQ,GAAG,QAAQ,IAAI;IACxD,KAAK,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC;IACjD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAkBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,YAAY,EAClB,eAAe,CAAC,EAAE,mBAAmB,GACpC,IAAI,CAON;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,OAAO,CAAC,EAAE,cAAc,GACvB,YAAY,GAAG,SAAS,CAK1B"}

package/dist/constructs/resource/resource-registry.js

@@ -0,0 +1,51 @@
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+import { ResourceTypeRegistry, } from "./resource-type-registry.js";
+const REGISTRY_SYMBOL = Symbol.for("@azure/provisioning-core.resourceRegistry");
+function getRegistry() {
+    const host = globalThis;
+    let registry = host[REGISTRY_SYMBOL];
+    if (registry === undefined) {
+        registry = new ResourceTypeRegistry();
+        host[REGISTRY_SYMBOL] = registry;
+    }
+    return registry;
+}
+/**
+ * Register `ctor` as the canonical class for its
+ * `(resourceType, apiVersion[, variantSelector])` key.
+ *
+ * Pass an ordered selector for variants; omit it for ordinary resources.
+ * Re-registering the same constructor for the
+ * same key is a silent no-op so module-graph re-entry (test
+ * harnesses, dual-format builds) is safe. Registering a *different*
+ * constructor for an existing key throws — that's a genuine conflict
+ * (e.g. two packages claiming the same ARM type).
+ *
+ * A `(resourceType, apiVersion)` pair is either entirely flat or entirely
+ * variant-based. Attempting to mix both modes throws,
+ * preserving the invariant the deserializer relies on.
+ */
+export function registerResource(ctor, variantSelector) {
+    getRegistry().register(ctor.resourceType, ctor.apiVersion, ctor, variantSelector);
+}
+/**
+ * Resolve the registered class for a wire resource.
+ *
+ * Default is best-effort:
+ *  1. Try the exact `(type, apiVersion)` entry and match its selectors
+ *     against ARM-side keys in `state`.
+ *  2. On miss, retry with the highest registered version of each selector.
+ *
+ * Pass `{ strict: true }` to skip step 2 and require an exact match.
+ *
+ * Returns `undefined` when nothing matches — callers (notably the
+ * deserializer) then fall back to constructing a base `Resource`.
+ */
+export function resolveResource(type, apiVersion, state, options) {
+    return getRegistry().resolve(type, apiVersion, state ?? {}, {
+        strict: options?.strict ?? false,
+        valueKeyedBy: "arm",
+    });
+}
+//# sourceMappingURL=resource-registry.js.map

package/dist/constructs/resource/resource-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-registry.js","sourceRoot":"","sources":["../../../src/constructs/resource/resource-registry.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAoClC,OAAO,EACL,oBAAoB,GAErB,MAAM,6BAA6B,CAAC;AAsCrC,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;AAMhF,SAAS,WAAW;IAClB,MAAM,IAAI,GAAG,UAAqC,CAAC;IACnD,IAAI,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC;IACrC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,QAAQ,GAAG,IAAI,oBAAoB,EAAgB,CAAC;QACpD,IAAI,CAAC,eAAe,CAAC,GAAG,QAAQ,CAAC;IACnC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAkB,EAClB,eAAqC;IAErC,WAAW,EAAE,CAAC,QAAQ,CACpB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,UAAU,EACf,IAAI,EACJ,eAAe,CAChB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,UAAkB,EAClB,KAA+B,EAC/B,OAAwB;IAExB,OAAO,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE,EAAE;QAC1D,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,KAAK;QAChC,YAAY,EAAE,KAAK;KACpB,CAAC,CAAC;AACL,CAAC"}

package/dist/constructs/resource/resource-type-registry.d.ts

@@ -0,0 +1,46 @@
+import type { DiscriminatorNames } from "../../shape/shape.js";
+/** One discriminator pinned to a fixed value by a concrete flat variant. */
+export interface FlatVariantPin {
+    readonly discriminator: DiscriminatorNames;
+    readonly value: string;
+}
+/** Pins selecting one concrete flat variant. */
+export type FlatVariantSelector = readonly FlatVariantPin[];
+/** One concrete variant together with a selector that chooses it. */
+export interface FlatVariantSelection<T> {
+    readonly variant: T;
+    readonly selector: FlatVariantSelector;
+}
+/** One selector-to-target record stored in a variant registry bucket. */
+export interface FlatVariantRegistryEntry<T> {
+    readonly selector: FlatVariantSelector;
+    readonly target: T;
+}
+/** One `(resourceType, apiVersion)` registry bucket. */
+export type ResourceTypeRegistryEntry<T> = {
+    readonly kind: "flat";
+    readonly target: T;
+} | {
+    readonly kind: "variants";
+    readonly variants: FlatVariantRegistryEntry<T>[];
+};
+export interface ResourceTypeRegistryResolveOptions {
+    readonly strict: boolean;
+    readonly valueKeyedBy: "js" | "arm";
+}
+/** Registry for versioned resource-type targets with optional variants. */
+export declare class ResourceTypeRegistry<T> {
+    #private;
+    register(resourceType: string, apiVersion: string, target: T, variantSelector?: FlatVariantSelector): void;
+    resolve(resourceType: string, apiVersion: string, state: Record<string, unknown>, options: ResourceTypeRegistryResolveOptions): T | undefined;
+}
+/**
+ * Stable identity for duplicate detection and version indexes.
+ * Pins are sorted in the key because the matched state is flat and selector
+ * matching is a conjunction of discriminator/value pairs, independent of
+ * hierarchy order. The selector itself is not mutated.
+ */
+export declare function flatVariantSelectorKey(selector: FlatVariantSelector): string;
+/** Resolve the first registered selector exactly matched by `state`. */
+export declare function resolveFlatVariant<T>(entries: readonly FlatVariantRegistryEntry<T>[], state: Record<string, unknown> | undefined, valueKeyedBy: "js" | "arm"): T | undefined;
+//# sourceMappingURL=resource-type-registry.d.ts.map

package/dist/constructs/resource/resource-type-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-type-registry.d.ts","sourceRoot":"","sources":["../../../src/constructs/resource/resource-type-registry.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,4EAA4E;AAC5E,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,gDAAgD;AAChD,MAAM,MAAM,mBAAmB,GAAG,SAAS,cAAc,EAAE,CAAC;AAE5D,qEAAqE;AACrE,MAAM,WAAW,oBAAoB,CAAC,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;CACxC;AAED,yEAAyE;AACzE,MAAM,WAAW,wBAAwB,CAAC,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;CACpB;AAED,wDAAwD;AACxD,MAAM,MAAM,yBAAyB,CAAC,CAAC,IACnC;IACE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;CACpB,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC,CAAC,EAAE,CAAC;CAClD,CAAC;AAEN,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,IAAI,GAAG,KAAK,CAAC;CACrC;AAOD,2EAA2E;AAC3E,qBAAa,oBAAoB,CAAC,CAAC;;IAOjC,QAAQ,CACN,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,CAAC,EACT,eAAe,CAAC,EAAE,mBAAmB,GACpC,IAAI;IAYP,OAAO,CACL,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,OAAO,EAAE,kCAAkC,GAC1C,CAAC,GAAG,SAAS;CAiEjB;AAuFD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,mBAAmB,GAAG,MAAM,CAO5E;AAaD,wEAAwE;AACxE,wBAAgB,kBAAkB,CAAC,CAAC,EAClC,OAAO,EAAE,SAAS,wBAAwB,CAAC,CAAC,CAAC,EAAE,EAC/C,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC1C,YAAY,EAAE,IAAI,GAAG,KAAK,GACzB,CAAC,GAAG,SAAS,CASf"}

package/dist/constructs/resource/resource-type-registry.js

@@ -0,0 +1,156 @@
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+/** Registry for versioned resource-type targets with optional variants. */
+export class ResourceTypeRegistry {
+    #exact = new Map();
+    #highest = new Map();
+    register(resourceType, apiVersion, target, variantSelector) {
+        const selector = variantSelector?.length ? variantSelector : undefined;
+        const exactKey = resourceTypeVersionKey(resourceType, apiVersion);
+        const exactEntry = this.#exact.get(exactKey);
+        const highestEntry = this.#highest.get(resourceType);
+        assertMode(exactEntry, selector, exactKey);
+        assertMode(highestEntry, selector, resourceType);
+        registerExact(this.#exact, exactKey, target, selector);
+        this.#updateHighest(resourceType, apiVersion, target, selector);
+    }
+    resolve(resourceType, apiVersion, state, options) {
+        const exact = resolveEntry(this.#exact.get(resourceTypeVersionKey(resourceType, apiVersion)), state, options.valueKeyedBy);
+        if (exact !== undefined || options.strict)
+            return exact;
+        const fallback = resolveEntry(this.#highest.get(resourceType), state, options.valueKeyedBy);
+        return fallback?.target;
+    }
+    #updateHighest(resourceType, apiVersion, target, selector) {
+        const entry = this.#highest.get(resourceType);
+        const versionedTarget = { apiVersion, target };
+        if (!entry) {
+            this.#highest.set(resourceType, selector
+                ? {
+                    kind: "variants",
+                    variants: [{ selector: [...selector], target: versionedTarget }],
+                }
+                : { kind: "flat", target: versionedTarget });
+            return;
+        }
+        if (entry.kind === "flat") {
+            if (apiVersionCompare(apiVersion, entry.target.apiVersion) > 0) {
+                this.#highest.set(resourceType, {
+                    kind: "flat",
+                    target: versionedTarget,
+                });
+            }
+            return;
+        }
+        const selectorKey = flatVariantSelectorKey(selector);
+        const priorIndex = entry.variants.findIndex((variant) => flatVariantSelectorKey(variant.selector) === selectorKey);
+        const prior = entry.variants[priorIndex];
+        if (!prior) {
+            entry.variants.push({
+                selector: [...selector],
+                target: versionedTarget,
+            });
+        }
+        else if (apiVersionCompare(apiVersion, prior.target.apiVersion) > 0) {
+            entry.variants[priorIndex] = {
+                selector: [...selector],
+                target: versionedTarget,
+            };
+        }
+    }
+}
+function assertMode(entry, selector, key) {
+    if (!entry)
+        return;
+    if (!selector && entry.kind === "variants") {
+        throw new Error(`Cannot register flat target for ${key}: variants are already registered.`);
+    }
+    if (selector && entry.kind === "flat") {
+        throw new Error(`Cannot register variant target for ${key}: a flat target is already registered.`);
+    }
+}
+function registerExact(entries, key, target, selector) {
+    const entry = entries.get(key);
+    if (!entry) {
+        entries.set(key, selector
+            ? {
+                kind: "variants",
+                variants: [{ selector: [...selector], target }],
+            }
+            : { kind: "flat", target });
+        return;
+    }
+    if (entry.kind === "flat") {
+        if (entry.target !== target) {
+            throw new Error(`Conflicting flat target registration for ${key}.`);
+        }
+        return;
+    }
+    const selectorKey = flatVariantSelectorKey(selector);
+    const existing = entry.variants.find((variant) => flatVariantSelectorKey(variant.selector) === selectorKey);
+    if (existing) {
+        if (existing.target !== target) {
+            throw new Error(`Conflicting variant target registration for ${key}@${selectorKey}.`);
+        }
+        return;
+    }
+    entry.variants.push({ selector: [...selector], target });
+}
+function resolveEntry(entry, state, valueKeyedBy) {
+    if (!entry)
+        return undefined;
+    if (entry.kind === "flat")
+        return entry.target;
+    return resolveFlatVariant(entry.variants, state, valueKeyedBy);
+}
+function resourceTypeVersionKey(resourceType, apiVersion) {
+    return `${resourceType}@${apiVersion}`;
+}
+/** Compare ARM API versions for best-effort fallback selection. */
+function apiVersionCompare(left, right) {
+    if (left === right)
+        return 0;
+    if (right.startsWith(`${left}-`))
+        return 1;
+    if (left.startsWith(`${right}-`))
+        return -1;
+    return left < right ? -1 : 1;
+}
+/**
+ * Stable identity for duplicate detection and version indexes.
+ * Pins are sorted in the key because the matched state is flat and selector
+ * matching is a conjunction of discriminator/value pairs, independent of
+ * hierarchy order. The selector itself is not mutated.
+ */
+export function flatVariantSelectorKey(selector) {
+    const pins = selector.map(({ discriminator, value }) => [discriminator.jsName, discriminator.armName, value]);
+    pins.sort(comparePinTuples);
+    return JSON.stringify(pins);
+}
+function comparePinTuples(left, right) {
+    for (let index = 0; index < left.length; index++) {
+        if (left[index] < right[index])
+            return -1;
+        if (left[index] > right[index])
+            return 1;
+    }
+    return 0;
+}
+/** Resolve the first registered selector exactly matched by `state`. */
+export function resolveFlatVariant(entries, state, valueKeyedBy) {
+    if (!state)
+        return undefined;
+    for (const entry of entries) {
+        if (matchesSelector(entry.selector, state, valueKeyedBy)) {
+            return entry.target;
+        }
+    }
+    return undefined;
+}
+function matchesSelector(selector, state, valueKeyedBy) {
+    return selector.every(({ discriminator, value }) => {
+        const key = valueKeyedBy === "js" ? discriminator.jsName : discriminator.armName;
+        return state[key] === value;
+    });
+}
+//# sourceMappingURL=resource-type-registry.js.map

package/dist/constructs/resource/resource-type-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-type-registry.js","sourceRoot":"","sources":["../../../src/constructs/resource/resource-type-registry.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AA8ClC,2EAA2E;AAC3E,MAAM,OAAO,oBAAoB;IACtB,MAAM,GAAG,IAAI,GAAG,EAAwC,CAAC;IACzD,QAAQ,GAAG,IAAI,GAAG,EAGxB,CAAC;IAEJ,QAAQ,CACN,YAAoB,EACpB,UAAkB,EAClB,MAAS,EACT,eAAqC;QAErC,MAAM,QAAQ,GAAG,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;QACvE,MAAM,QAAQ,GAAG,sBAAsB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAErD,UAAU,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC3C,UAAU,CAAC,YAAY,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QACjD,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACvD,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,CACL,YAAoB,EACpB,UAAkB,EAClB,KAA8B,EAC9B,OAA2C;QAE3C,MAAM,KAAK,GAAG,YAAY,CACxB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,EACjE,KAAK,EACL,OAAO,CAAC,YAAY,CACrB,CAAC;QACF,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAExD,MAAM,QAAQ,GAAG,YAAY,CAC3B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,EAC/B,KAAK,EACL,OAAO,CAAC,YAAY,CACrB,CAAC;QACF,OAAO,QAAQ,EAAE,MAAM,CAAC;IAC1B,CAAC;IAED,cAAc,CACZ,YAAoB,EACpB,UAAkB,EAClB,MAAS,EACT,QAAyC;QAEzC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC9C,MAAM,eAAe,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;QAE/C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,QAAQ,CAAC,GAAG,CACf,YAAY,EACZ,QAAQ;gBACN,CAAC,CAAC;oBACE,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;iBACjE;gBACH,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,CAC9C,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1B,IAAI,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE;oBAC9B,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,eAAe;iBACxB,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,sBAAsB,CAAC,QAAS,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CACzC,CAAC,OAAO,EAAE,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,WAAW,CACtE,CAAC;QACF,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAClB,QAAQ,EAAE,CAAC,GAAG,QAAS,CAAC;gBACxB,MAAM,EAAE,eAAe;aACxB,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtE,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG;gBAC3B,QAAQ,EAAE,CAAC,GAAG,QAAS,CAAC;gBACxB,MAAM,EAAE,eAAe;aACxB,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,SAAS,UAAU,CACjB,KAA+C,EAC/C,QAAyC,EACzC,GAAW;IAEX,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,mCAAmC,GAAG,oCAAoC,CAC3E,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,sCAAsC,GAAG,wCAAwC,CAClF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,OAAkD,EAClD,GAAW,EACX,MAAS,EACT,QAAyC;IAEzC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CACT,GAAG,EACH,QAAQ;YACN,CAAC,CAAC;gBACE,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;aAChD;YACH,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAC7B,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1B,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,4CAA4C,GAAG,GAAG,CAAC,CAAC;QACtE,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,sBAAsB,CAAC,QAAS,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAClC,CAAC,OAAO,EAAE,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,WAAW,CACtE,CAAC;IACF,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,+CAA+C,GAAG,IAAI,WAAW,GAAG,CACrE,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,YAAY,CACnB,KAA+C,EAC/C,KAA8B,EAC9B,YAA0B;IAE1B,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC;IAC/C,OAAO,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,sBAAsB,CAC7B,YAAoB,EACpB,UAAkB;IAElB,OAAO,GAAG,YAAY,IAAI,UAAU,EAAE,CAAC;AACzC,CAAC;AAED,mEAAmE;AACnE,SAAS,iBAAiB,CAAC,IAAY,EAAE,KAAa;IACpD,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC;IAC5C,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAA6B;IAClE,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CACvB,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,CAC3B,CAAC,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,OAAO,EAAE,KAAK,CAAU,CAChE,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC5B,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,gBAAgB,CACvB,IAAuC,EACvC,KAAwC;IAExC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,IAAI,IAAI,CAAC,KAAK,CAAE,GAAG,KAAK,CAAC,KAAK,CAAE;YAAE,OAAO,CAAC,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,KAAK,CAAE,GAAG,KAAK,CAAC,KAAK,CAAE;YAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,kBAAkB,CAChC,OAA+C,EAC/C,KAA0C,EAC1C,YAA0B;IAE1B,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAE7B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC;YACzD,OAAO,KAAK,CAAC,MAAM,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CACtB,QAA6B,EAC7B,KAA8B,EAC9B,YAA0B;IAE1B,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE;QACjD,MAAM,GAAG,GACP,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC;QACvE,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/constructs/resource/resource-utils.d.ts

@@ -0,0 +1,60 @@
+import type { Resource, ResourceDeclaration, LoopedResource } from "./resource.js";
+import type { ResourceCtor } from "./resource-registry.js";
+/**
+ * Cross-realm-safe brand guards for resource declarations.
+ *
+ * These live in a standalone module — importing only the brand **symbols**
+ * (from `resource-proxy.ts`) and `resource.ts` **types** — so tree-walking
+ * utilities (e.g. the query layer, `ProvisioningComponent`) can identify resources
+ * WITHOUT a runtime import of `resource.ts`, which `extends ProvisioningComponent` and
+ * would otherwise create an eval-time import cycle
+ * (`ProvisioningComponent` → `query` → `resource` → `ProvisioningComponent`).
+ *
+ * The public guard API is these standalone functions (`isResource`,
+ * `isResourceDeclaration`, `isLoopedResource`, `isResourceOf`,
+ * `isLoopedResourceOf`) — there are no class-static guards, so a subclass
+ * like `Secret` never inherits a misleading `Secret.isResource(...)`.
+ */
+/** Is `x` a scalar {@link Resource} (not a looped declaration)? */
+export declare function isResource(x: unknown): x is Resource;
+/**
+ * Is `x` a Bicep resource declaration — either a scalar {@link Resource} or
+ * a {@link LoopedResource}?
+ */
+export declare function isResourceDeclaration(x: unknown): x is ResourceDeclaration;
+/** Is `x` a {@link LoopedResource} (`Ctor.fromLoop(...)`)? */
+export declare function isLoopedResource(x: unknown): x is LoopedResource<Resource>;
+/**
+ * Type guard: is `x` an instance of the resource class `ctor`?
+ * Narrows `x` to the class's instance type, so callers can access
+ * subclass-specific accessors (e.g. `kv.secrets`) inside the guarded
+ * block.
+ *
+ * Accepts any value (`unknown`), like the other brand guards. A
+ * `LoopedResource<T>` is not a `Resource`, so `instanceof ctor` returns
+ * `false` for it — the narrowing is safe. `instanceof` alone is sufficient
+ * (and stricter than a brand + ARM-type-string check: a base-`Resource`
+ * impostor carrying the same `type`/`apiVersion` is correctly rejected), so
+ * no `isResource` pre-check is needed.
+ *
+ * Matches scalar resource **declarations** (from a constructor / query /
+ * collection). It does NOT match a `parent.at(i)` element reference of a
+ * looped declaration: that proxy intentionally keeps `LoopedResource`'s
+ * prototype (no `getPrototypeOf` trap), so `instanceof` is `false` for it
+ * even though its ARM reads work. If we ever need cross-realm subclass
+ * matching (per-subclass `Symbol.for` brands, mirroring the base
+ * `RESOURCE_BRAND`), this is the one place to swap.
+ */
+export declare function isResourceOf<T extends Resource>(x: unknown, ctor: ResourceCtor<T>): x is T;
+/**
+ * Type guard: is `x` a {@link LoopedResource} whose wrapped resource class is
+ * `ctor` (i.e. a `LoopedResource<T>` produced by `T.fromLoop(...)`)? Narrows
+ * `x` to `LoopedResource<T>`, the looped analogue of {@link isResourceOf}.
+ *
+ * Matches on the declaration's `wrappedCtor` identity — the concrete subclass
+ * passed to `fromLoop` — so `isLoopedResourceOf(x, StorageAccount)`
+ * replaces the `x.wrappedCtor === StorageAccount` checks scattered across the
+ * query / collection layers.
+ */
+export declare function isLoopedResourceOf<T extends Resource>(x: unknown, ctor: ResourceCtor<T>): x is LoopedResource<T>;
+//# sourceMappingURL=resource-utils.d.ts.map

package/dist/constructs/resource/resource-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-utils.d.ts","sourceRoot":"","sources":["../../../src/constructs/resource/resource-utils.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,QAAQ,EACR,mBAAmB,EACnB,cAAc,EACf,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE3D;;;;;;;;;;;;;;GAcG;AAEH,mEAAmE;AACnE,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,QAAQ,CAMpD;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,mBAAmB,CAM1E;AAED,8DAA8D;AAC9D,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,cAAc,CAAC,QAAQ,CAAC,CAM1E;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,YAAY,CAAC,CAAC,SAAS,QAAQ,EAC7C,CAAC,EAAE,OAAO,EACV,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,GACpB,CAAC,IAAI,CAAC,CAER;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,QAAQ,EACnD,CAAC,EAAE,OAAO,EACV,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,GACpB,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,CAExB"}

package/dist/constructs/resource/resource-utils.js

@@ -0,0 +1,77 @@
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+import { RESOURCE_BRAND, RESOURCE_DECLARATION_BRAND, LOOPED_RESOURCE_BRAND, } from "./resource-proxy.js";
+/**
+ * Cross-realm-safe brand guards for resource declarations.
+ *
+ * These live in a standalone module — importing only the brand **symbols**
+ * (from `resource-proxy.ts`) and `resource.ts` **types** — so tree-walking
+ * utilities (e.g. the query layer, `ProvisioningComponent`) can identify resources
+ * WITHOUT a runtime import of `resource.ts`, which `extends ProvisioningComponent` and
+ * would otherwise create an eval-time import cycle
+ * (`ProvisioningComponent` → `query` → `resource` → `ProvisioningComponent`).
+ *
+ * The public guard API is these standalone functions (`isResource`,
+ * `isResourceDeclaration`, `isLoopedResource`, `isResourceOf`,
+ * `isLoopedResourceOf`) — there are no class-static guards, so a subclass
+ * like `Secret` never inherits a misleading `Secret.isResource(...)`.
+ */
+/** Is `x` a scalar {@link Resource} (not a looped declaration)? */
+export function isResource(x) {
+    return (typeof x === "object" &&
+        x !== null &&
+        x[RESOURCE_BRAND] === true);
+}
+/**
+ * Is `x` a Bicep resource declaration — either a scalar {@link Resource} or
+ * a {@link LoopedResource}?
+ */
+export function isResourceDeclaration(x) {
+    return (typeof x === "object" &&
+        x !== null &&
+        x[RESOURCE_DECLARATION_BRAND] === true);
+}
+/** Is `x` a {@link LoopedResource} (`Ctor.fromLoop(...)`)? */
+export function isLoopedResource(x) {
+    return (typeof x === "object" &&
+        x !== null &&
+        x[LOOPED_RESOURCE_BRAND] === true);
+}
+/**
+ * Type guard: is `x` an instance of the resource class `ctor`?
+ * Narrows `x` to the class's instance type, so callers can access
+ * subclass-specific accessors (e.g. `kv.secrets`) inside the guarded
+ * block.
+ *
+ * Accepts any value (`unknown`), like the other brand guards. A
+ * `LoopedResource<T>` is not a `Resource`, so `instanceof ctor` returns
+ * `false` for it — the narrowing is safe. `instanceof` alone is sufficient
+ * (and stricter than a brand + ARM-type-string check: a base-`Resource`
+ * impostor carrying the same `type`/`apiVersion` is correctly rejected), so
+ * no `isResource` pre-check is needed.
+ *
+ * Matches scalar resource **declarations** (from a constructor / query /
+ * collection). It does NOT match a `parent.at(i)` element reference of a
+ * looped declaration: that proxy intentionally keeps `LoopedResource`'s
+ * prototype (no `getPrototypeOf` trap), so `instanceof` is `false` for it
+ * even though its ARM reads work. If we ever need cross-realm subclass
+ * matching (per-subclass `Symbol.for` brands, mirroring the base
+ * `RESOURCE_BRAND`), this is the one place to swap.
+ */
+export function isResourceOf(x, ctor) {
+    return x instanceof ctor;
+}
+/**
+ * Type guard: is `x` a {@link LoopedResource} whose wrapped resource class is
+ * `ctor` (i.e. a `LoopedResource<T>` produced by `T.fromLoop(...)`)? Narrows
+ * `x` to `LoopedResource<T>`, the looped analogue of {@link isResourceOf}.
+ *
+ * Matches on the declaration's `wrappedCtor` identity — the concrete subclass
+ * passed to `fromLoop` — so `isLoopedResourceOf(x, StorageAccount)`
+ * replaces the `x.wrappedCtor === StorageAccount` checks scattered across the
+ * query / collection layers.
+ */
+export function isLoopedResourceOf(x, ctor) {
+    return isLoopedResource(x) && x.wrappedCtor === ctor;
+}
+//# sourceMappingURL=resource-utils.js.map

package/dist/constructs/resource/resource-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-utils.js","sourceRoot":"","sources":["../../../src/constructs/resource/resource-utils.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAElC,OAAO,EACL,cAAc,EACd,0BAA0B,EAC1B,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAQ7B;;;;;;;;;;;;;;GAcG;AAEH,mEAAmE;AACnE,MAAM,UAAU,UAAU,CAAC,CAAU;IACnC,OAAO,CACL,OAAO,CAAC,KAAK,QAAQ;QACrB,CAAC,KAAK,IAAI;QACT,CAA6B,CAAC,cAAc,CAAC,KAAK,IAAI,CACxD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,CAAU;IAC9C,OAAO,CACL,OAAO,CAAC,KAAK,QAAQ;QACrB,CAAC,KAAK,IAAI;QACT,CAA6B,CAAC,0BAA0B,CAAC,KAAK,IAAI,CACpE,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,gBAAgB,CAAC,CAAU;IACzC,OAAO,CACL,OAAO,CAAC,KAAK,QAAQ;QACrB,CAAC,KAAK,IAAI;QACT,CAA6B,CAAC,qBAAqB,CAAC,KAAK,IAAI,CAC/D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,YAAY,CAC1B,CAAU,EACV,IAAqB;IAErB,OAAO,CAAC,YAAY,IAAI,CAAC;AAC3B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,CAAU,EACV,IAAqB;IAErB,OAAO,gBAAgB,CAAC,CAAC,CAAC,IAAK,CAAC,CAAC,WAAuB,KAAK,IAAI,CAAC;AACpE,CAAC"}