@backthread/extractor 0.1.0

package/dist/infra/infra-step.js

@@ -0,0 +1,57 @@
+// The infra extraction step: the assemble-join seam.
+//
+// Sequence (mirrors the externals step):
+//
+//   registerBuiltinInfraAdapters()           — CF / Supabase / Terraform / …
+//     → runInfraAdapters(repoDir)            — detect + extract + merge
+//       → classifyResourceTypes(refs)?       — OPTIONAL, injected: label open-ended IaC
+//         → patch each node's kind in place  — declared → llm-classified
+//
+// The deterministic adapters (CF, Supabase) emit no `classificationsNeeded`, so
+// the injected classifier only fires when an IaC repo carried an unrecognised
+// `resource "x" "y"` block. When no classifier is injected (the default, e.g.
+// local / offline extraction) the classification-pending nodes keep their
+// adapter-emitted placeholder kind. The result feeds the host's assemble step as
+// a MergedInfraGraph alongside the code graph + externals.
+//
+// Dependency inversion: the LLM classifier lives in the host application (it
+// needs network + a model). This package stays pure — the host injects a
+// `classifyResourceTypes` callback (which owns its own token accounting).
+import { runInfraAdapters } from './registry.js';
+import { registerBuiltinInfraAdapters } from './register.js';
+export async function extractInfra(args) {
+    registerBuiltinInfraAdapters();
+    const graph = await runInfraAdapters(args.repoDir);
+    let classified = 0;
+    if (args.classifyResourceTypes && graph.classificationsNeeded.length > 0) {
+        // Dedupe to unique (provider, resourceType) pairs — a single label can fan
+        // out to many forNodeIds.
+        const key = (p, rt) => `${p}\x1f${rt}`;
+        const uniqueRefs = new Map();
+        for (const c of graph.classificationsNeeded) {
+            uniqueRefs.set(key(c.provider, c.resourceType), {
+                provider: c.provider,
+                resourceType: c.resourceType,
+            });
+        }
+        const refs = [...uniqueRefs.values()];
+        const results = await args.classifyResourceTypes(refs);
+        const byKey = new Map();
+        results.forEach((r) => byKey.set(key(r.provider, r.resourceType), r));
+        const nodeById = new Map(graph.nodes.map((n) => [n.id, n]));
+        for (const c of graph.classificationsNeeded) {
+            const r = byKey.get(key(c.provider, c.resourceType));
+            const node = nodeById.get(c.forNodeId);
+            if (!r || !node)
+                continue;
+            node.kind = r.nodeKind;
+            node.provenance = 'llm-classified';
+            classified++;
+        }
+    }
+    return {
+        graph,
+        counts: { nodes: graph.nodes.length, edges: graph.edges.length, classified },
+    };
+}
+//# sourceMappingURL=infra-step.js.map

package/dist/infra/infra-step.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra-step.js","sourceRoot":"","sources":["../../src/infra/infra-step.ts"],"names":[],"mappings":"AAAA,qDAAqD;AACrD,EAAE;AACF,yCAAyC;AACzC,EAAE;AACF,6EAA6E;AAC7E,wEAAwE;AACxE,wFAAwF;AACxF,yEAAyE;AACzE,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,8EAA8E;AAC9E,0EAA0E;AAC1E,iFAAiF;AACjF,2DAA2D;AAC3D,EAAE;AACF,6EAA6E;AAC7E,yEAAyE;AACzE,0EAA0E;AAE1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAgC7D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IASlC;IACC,4BAA4B,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAEnD,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,IAAI,CAAC,qBAAqB,IAAI,KAAK,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzE,2EAA2E;QAC3E,0BAA0B;QAC1B,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAU,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QACvD,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;QACtD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,EAAE,CAAC;YAC5C,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE;gBAC9C,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,YAAY,EAAE,CAAC,CAAC,YAAY;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;QACpD,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAEtE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,EAAE,CAAC;YAC5C,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;YACrD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI;gBAAE,SAAS;YAC1B,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC;YACvB,IAAI,CAAC,UAAU,GAAG,gBAAgB,CAAC;YACnC,UAAU,EAAE,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK;QACL,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE;KAC7E,CAAC;AACJ,CAAC"}

package/dist/infra/k8s/index.d.ts

@@ -0,0 +1,78 @@
+import { type DockerfileIndex } from '../image-resolve.js';
+/**
+ * Workload kinds — every adapter models these as `container` InfraModuleKind
+ * nodes. Note GCP's v0 scope omits DaemonSet while Azure includes it; each
+ * adapter decides its own workload set, so this is the documented SUPERSET and
+ * adapters intersect it with what they support rather than relying on it.
+ */
+export declare const K8S_WORKLOAD_KINDS: readonly ["Deployment", "StatefulSet", "DaemonSet", "Job", "CronJob"];
+/**
+ * Routing kinds — NEVER a node-with-a-module-kind. A Service/Ingress is modelled
+ * as edges (and, for an external entrypoint, a `cdn` node). Centralised here so
+ * the "no bogus module kind for routing" rule has one home.
+ */
+export declare const K8S_ROUTING_KINDS: readonly ["Service", "Ingress"];
+export type K8sWorkloadKind = (typeof K8S_WORKLOAD_KINDS)[number];
+export type K8sRoutingKind = (typeof K8S_ROUTING_KINDS)[number];
+export type K8sKind = K8sWorkloadKind | K8sRoutingKind | string;
+/**
+ * Recognise a standard Kubernetes `apiVersion`. Mirrors the prefix set the GCP
+ * adapter has always used: core `v1`, plus the `apps/`, `batch/`,
+ * `networking.k8s.io/`, and `extensions/` groups.
+ */
+export declare function isK8sApiVersion(apiVersion: string | undefined): boolean;
+export interface K8sManifest {
+    kind: K8sKind;
+    apiVersion?: string;
+    name: string;
+    namespace?: string;
+    /** For Service: spec.selector labels (for matching Deployments). */
+    selector?: Record<string, string>;
+    /** For Ingress: list of backend service names extracted from rules. */
+    ingressBackends?: string[];
+    rawObj: Record<string, unknown>;
+}
+/**
+ * Detect a Kubernetes manifest: must have 'apiVersion' and 'kind' and
+ * 'metadata' at the top level. Guards against firing on arbitrary YAML.
+ */
+export declare function isK8sManifest(doc: unknown): doc is Record<string, unknown>;
+/**
+ * Extract selector labels from a manifest `spec`. Handles both shapes:
+ *   * `spec.selector.matchLabels` (Deployment / StatefulSet style)
+ *   * `spec.selector` as a plain label map (Service style)
+ * Returns the raw label map (cast, NOT filtered — preserving Azure's original
+ * behavior verbatim), or `undefined` when there is no selector. (Azure keeps
+ * the `undefined` to gate selector-less Services out of routing; GCP wraps this
+ * with its own string-filter + `?? {}` for its overlap matcher — see
+ * gcp.ts selectorLabels.) Deliberately NOT string-filtered here so the shared
+ * primitive is a no-behavior-change drop-in for the old per-adapter code.
+ */
+export declare function extractSelector(spec: unknown): Record<string, string> | undefined;
+/**
+ * Extract the backend Service names an Ingress routes to, across both backend
+ * encodings: k8s 1.19+ (`backend.service.name`) and legacy
+ * extensions/v1beta1 (`backend.serviceName`). Deduplicated, source order.
+ */
+export declare function extractIngressBackends(spec: unknown): string[];
+/** True when two selector label maps share at least one identical key/value pair. */
+export declare function labelsOverlap(a: Record<string, string>, b: Record<string, string>): boolean;
+/**
+ * Every container image ref a workload manifest declares (containers +
+ * initContainers, across the workload nesting variants). Deduped, source order.
+ */
+export declare function extractWorkloadImages(raw: Record<string, unknown>): string[];
+/**
+ * The repo-relative source roots a k8s workload deploys: each container image
+ * resolved via the  image→source resolver, unioned. Returns [] when no
+ * image resolves to an in-repo Dockerfile (honest "Other"). Deterministic.
+ */
+export declare function workloadSourceRoots(raw: Record<string, unknown>, index: DockerfileIndex): string[];
+/**
+ * Parse a YAML file potentially containing multiple Kubernetes manifest
+ * documents into normalized {@link K8sManifest} descriptors. Returns `[]` on any
+ * parse error; non-k8s documents within a multi-doc file are silently skipped.
+ * Selector labels are populated for Services and backend names for Ingresses.
+ */
+export declare function parseK8sManifests(text: string): K8sManifest[];
+//# sourceMappingURL=index.d.ts.map

package/dist/infra/k8s/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/infra/k8s/index.ts"],"names":[],"mappings":"AAuBA,OAAO,EAA6B,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAKtF;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,uEAAwE,CAAC;AAExG;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,iCAAkC,CAAC;AAEjE,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAClE,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAChE,MAAM,MAAM,OAAO,GAAG,eAAe,GAAG,cAAc,GAAG,MAAM,CAAC;AAEhE;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CASvE;AAKD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,OAAO,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,uEAAuE;IACvE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAS1E;AAKD;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CASjF;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,EAAE,CA6B9D;AAED,qFAAqF;AACrF,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAK3F;AAoCD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CAa5E;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,eAAe,GAAG,MAAM,EAAE,CAMlG;AAKD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,EAAE,CA+B7D"}

package/dist/infra/k8s/index.js

@@ -0,0 +1,251 @@
+// shared Kubernetes manifest parsing for the cloud adapters.
+//
+// GCP (GKE), Azure (AKS) — and any future EKS-style adapter — all read the same
+// Kubernetes manifest YAML: Deployment / StatefulSet / Job / CronJob workloads,
+// plus Service / Ingress routing objects. Before this module each adapter shipped
+// its own copy of the manifest-parsing primitives (multi-doc YAML parse, the
+// apiVersion/kind recognisers, selector-label extraction with matchLabels
+// fallback, and ingress-backend resolution across the 1.19+/legacy backend
+// shapes). This is that one copy.
+//
+// SCOPE — parsing primitives ONLY. The two adapters deliberately model the
+// *graph* differently and their tests lock those differences in:
+//   * GCP keys workloads `k8s:workload:<name>` and emits Service/Ingress as
+//     `cdn` nodes (earn-a-box routing layer), matching via label OVERLAP.
+//   * Azure keys workloads `k8s:deployment:<name>`, never emits a routing node,
+//     matches via a name heuristic, and treats DaemonSet as a workload.
+// Those divergences are graph-assembly policy, not parsing, so they stay in the
+// adapters. What's centralised here is the genuinely-identical parse layer plus
+// the one convention that must never drift: a k8s Service/Ingress is ROUTING —
+// it becomes edges (and, where an entrypoint must earn a box, a `cdn` node),
+// never a bogus InfraModuleKind. See K8S_ROUTING_KINDS below.
+import { parseAllDocuments } from 'yaml';
+import { resolveImageToSourceRoots } from '../image-resolve.js';
+// ---------------------------------------------------------------------------
+// Kind taxonomy.
+/**
+ * Workload kinds — every adapter models these as `container` InfraModuleKind
+ * nodes. Note GCP's v0 scope omits DaemonSet while Azure includes it; each
+ * adapter decides its own workload set, so this is the documented SUPERSET and
+ * adapters intersect it with what they support rather than relying on it.
+ */
+export const K8S_WORKLOAD_KINDS = ['Deployment', 'StatefulSet', 'DaemonSet', 'Job', 'CronJob'];
+/**
+ * Routing kinds — NEVER a node-with-a-module-kind. A Service/Ingress is modelled
+ * as edges (and, for an external entrypoint, a `cdn` node). Centralised here so
+ * the "no bogus module kind for routing" rule has one home.
+ */
+export const K8S_ROUTING_KINDS = ['Service', 'Ingress'];
+/**
+ * Recognise a standard Kubernetes `apiVersion`. Mirrors the prefix set the GCP
+ * adapter has always used: core `v1`, plus the `apps/`, `batch/`,
+ * `networking.k8s.io/`, and `extensions/` groups.
+ */
+export function isK8sApiVersion(apiVersion) {
+    if (!apiVersion)
+        return false;
+    return (apiVersion === 'v1' ||
+        apiVersion.startsWith('apps/') ||
+        apiVersion.startsWith('batch/') ||
+        apiVersion.startsWith('networking.k8s.io/') ||
+        apiVersion.startsWith('extensions/'));
+}
+/**
+ * Detect a Kubernetes manifest: must have 'apiVersion' and 'kind' and
+ * 'metadata' at the top level. Guards against firing on arbitrary YAML.
+ */
+export function isK8sManifest(doc) {
+    if (typeof doc !== 'object' || doc === null)
+        return false;
+    const obj = doc;
+    return (typeof obj['apiVersion'] === 'string' &&
+        typeof obj['kind'] === 'string' &&
+        typeof obj['metadata'] === 'object' &&
+        obj['metadata'] !== null);
+}
+// ---------------------------------------------------------------------------
+// Selector & routing primitives.
+/**
+ * Extract selector labels from a manifest `spec`. Handles both shapes:
+ *   * `spec.selector.matchLabels` (Deployment / StatefulSet style)
+ *   * `spec.selector` as a plain label map (Service style)
+ * Returns the raw label map (cast, NOT filtered — preserving Azure's original
+ * behavior verbatim), or `undefined` when there is no selector. (Azure keeps
+ * the `undefined` to gate selector-less Services out of routing; GCP wraps this
+ * with its own string-filter + `?? {}` for its overlap matcher — see
+ * gcp.ts selectorLabels.) Deliberately NOT string-filtered here so the shared
+ * primitive is a no-behavior-change drop-in for the old per-adapter code.
+ */
+export function extractSelector(spec) {
+    if (typeof spec !== 'object' || spec === null)
+        return undefined;
+    const sel = spec['selector'];
+    if (typeof sel !== 'object' || sel === null)
+        return undefined;
+    const ml = sel['matchLabels'];
+    if (typeof ml === 'object' && ml !== null) {
+        return ml;
+    }
+    return sel;
+}
+/**
+ * Extract the backend Service names an Ingress routes to, across both backend
+ * encodings: k8s 1.19+ (`backend.service.name`) and legacy
+ * extensions/v1beta1 (`backend.serviceName`). Deduplicated, source order.
+ */
+export function extractIngressBackends(spec) {
+    if (typeof spec !== 'object' || spec === null)
+        return [];
+    const rules = Array.isArray(spec['rules'])
+        ? spec['rules']
+        : [];
+    const names = [];
+    for (const rule of rules) {
+        if (typeof rule !== 'object' || rule === null)
+            continue;
+        const http = rule['http'];
+        if (typeof http !== 'object' || http === null)
+            continue;
+        const paths = Array.isArray(http['paths'])
+            ? http['paths']
+            : [];
+        for (const p of paths) {
+            if (typeof p !== 'object' || p === null)
+                continue;
+            const backend = p['backend'];
+            if (typeof backend !== 'object' || backend === null)
+                continue;
+            // k8s 1.19+ networking.k8s.io style:
+            const svc = backend['service'];
+            if (typeof svc === 'object' && svc !== null) {
+                const svcName = svc['name'];
+                if (typeof svcName === 'string')
+                    names.push(svcName);
+            }
+            // Legacy extensions/v1beta1 style:
+            const legacySvcName = backend['serviceName'];
+            if (typeof legacySvcName === 'string')
+                names.push(legacySvcName);
+        }
+    }
+    return [...new Set(names)];
+}
+/** True when two selector label maps share at least one identical key/value pair. */
+export function labelsOverlap(a, b) {
+    for (const [k, v] of Object.entries(a)) {
+        if (b[k] === v)
+            return true;
+    }
+    return false;
+}
+// ---------------------------------------------------------------------------
+// Workload image → source-root resolution.
+//
+// k8s references PRE-BUILT images (`image: ghcr.io/acme/api:1.2`), never source
+// dirs — so a workload's code can only attribute to a deployment unit by mapping
+// its container image(s) back to the in-repo Dockerfile that builds them. That's
+// the  resolver. These helpers find a workload's images and union the
+// resolved roots; the GCP (GKE) + Azure (AKS) adapters call them on their
+// `container` workload nodes.
+function asRecord(v) {
+    return v && typeof v === 'object' && !Array.isArray(v) ? v : undefined;
+}
+/**
+ * The Pod spec inside a workload manifest, across the nesting variants:
+ *   * Deployment / StatefulSet / DaemonSet / Job → `spec.template.spec`
+ *   * CronJob                                    → `spec.jobTemplate.spec.template.spec`
+ *   * bare Pod                                   → `spec`
+ */
+function podSpecOf(raw) {
+    const spec = asRecord(raw['spec']);
+    if (!spec)
+        return undefined;
+    const jobTemplate = asRecord(spec['jobTemplate']); // CronJob
+    if (jobTemplate) {
+        const jspec = asRecord(jobTemplate['spec']);
+        const tmpl = asRecord(jspec?.['template']);
+        return asRecord(tmpl?.['spec']);
+    }
+    const tmpl = asRecord(spec['template']); // Deployment/StatefulSet/DaemonSet/Job
+    if (tmpl)
+        return asRecord(tmpl['spec']);
+    return spec; // bare Pod
+}
+/**
+ * Every container image ref a workload manifest declares (containers +
+ * initContainers, across the workload nesting variants). Deduped, source order.
+ */
+export function extractWorkloadImages(raw) {
+    const podSpec = podSpecOf(raw);
+    if (!podSpec)
+        return [];
+    const images = [];
+    for (const key of ['initContainers', 'containers']) {
+        const list = podSpec[key];
+        if (!Array.isArray(list))
+            continue;
+        for (const c of list) {
+            const image = asRecord(c)?.['image'];
+            if (typeof image === 'string' && image)
+                images.push(image);
+        }
+    }
+    return [...new Set(images)];
+}
+/**
+ * The repo-relative source roots a k8s workload deploys: each container image
+ * resolved via the  image→source resolver, unioned. Returns [] when no
+ * image resolves to an in-repo Dockerfile (honest "Other"). Deterministic.
+ */
+export function workloadSourceRoots(raw, index) {
+    const roots = new Set();
+    for (const image of extractWorkloadImages(raw)) {
+        for (const r of resolveImageToSourceRoots(image, index))
+            roots.add(r);
+    }
+    return [...roots].sort();
+}
+// ---------------------------------------------------------------------------
+// Multi-document parse.
+/**
+ * Parse a YAML file potentially containing multiple Kubernetes manifest
+ * documents into normalized {@link K8sManifest} descriptors. Returns `[]` on any
+ * parse error; non-k8s documents within a multi-doc file are silently skipped.
+ * Selector labels are populated for Services and backend names for Ingresses.
+ */
+export function parseK8sManifests(text) {
+    try {
+        const docs = parseAllDocuments(text);
+        const results = [];
+        for (const doc of docs) {
+            if (doc.errors && doc.errors.length > 0)
+                continue; // skip bad doc
+            const obj = doc.toJS();
+            if (!isK8sManifest(obj))
+                continue;
+            const meta = obj['metadata'];
+            const name = typeof meta['name'] === 'string' ? meta['name'] : '';
+            const namespace = typeof meta['namespace'] === 'string' ? meta['namespace'] : undefined;
+            const kind = obj['kind'];
+            const manifest = {
+                kind,
+                apiVersion: typeof obj['apiVersion'] === 'string' ? obj['apiVersion'] : undefined,
+                name,
+                namespace,
+                rawObj: obj,
+            };
+            if (kind === 'Service') {
+                manifest.selector = extractSelector(obj['spec']);
+            }
+            if (kind === 'Ingress') {
+                manifest.ingressBackends = extractIngressBackends(obj['spec']);
+            }
+            results.push(manifest);
+        }
+        return results;
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/infra/k8s/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/infra/k8s/index.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,kFAAkF;AAClF,6EAA6E;AAC7E,0EAA0E;AAC1E,2EAA2E;AAC3E,kCAAkC;AAClC,EAAE;AACF,2EAA2E;AAC3E,iEAAiE;AACjE,4EAA4E;AAC5E,0EAA0E;AAC1E,gFAAgF;AAChF,wEAAwE;AACxE,gFAAgF;AAChF,gFAAgF;AAChF,+EAA+E;AAC/E,6EAA6E;AAC7E,8DAA8D;AAE9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AACzC,OAAO,EAAE,yBAAyB,EAAwB,MAAM,qBAAqB,CAAC;AAEtF,8EAA8E;AAC9E,iBAAiB;AAEjB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,CAAU,CAAC;AAExG;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,SAAS,EAAE,SAAS,CAAU,CAAC;AAMjE;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,UAA8B;IAC5D,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,OAAO,CACL,UAAU,KAAK,IAAI;QACnB,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC;QAC9B,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC/B,UAAU,CAAC,UAAU,CAAC,oBAAoB,CAAC;QAC3C,UAAU,CAAC,UAAU,CAAC,aAAa,CAAC,CACrC,CAAC;AACJ,CAAC;AAiBD;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,GAAG,GAAG,GAA8B,CAAC;IAC3C,OAAO,CACL,OAAO,GAAG,CAAC,YAAY,CAAC,KAAK,QAAQ;QACrC,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ;QAC/B,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,QAAQ;QACnC,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,CACzB,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,iCAAiC;AAEjC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,IAAa;IAC3C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAChE,MAAM,GAAG,GAAI,IAAgC,CAAC,UAAU,CAAC,CAAC;IAC1D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,EAAE,GAAI,GAA+B,CAAC,aAAa,CAAC,CAAC;IAC3D,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,EAA4B,CAAC;IACtC,CAAC;IACD,OAAO,GAA6B,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAa;IAClD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACzD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAE,IAAgC,CAAC,OAAO,CAAC,CAAC;QACrE,CAAC,CAAG,IAAgC,CAAC,OAAO,CAAe;QAC3D,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS;QACxD,MAAM,IAAI,GAAI,IAAgC,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS;QACxD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAE,IAAgC,CAAC,OAAO,CAAC,CAAC;YACrE,CAAC,CAAG,IAAgC,CAAC,OAAO,CAAe;YAC3D,CAAC,CAAC,EAAE,CAAC;QACP,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;gBAAE,SAAS;YAClD,MAAM,OAAO,GAAI,CAA6B,CAAC,SAAS,CAAC,CAAC;YAC1D,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;gBAAE,SAAS;YAC9D,qCAAqC;YACrC,MAAM,GAAG,GAAI,OAAmC,CAAC,SAAS,CAAC,CAAC;YAC5D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBAC5C,MAAM,OAAO,GAAI,GAA+B,CAAC,MAAM,CAAC,CAAC;gBACzD,IAAI,OAAO,OAAO,KAAK,QAAQ;oBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvD,CAAC;YACD,mCAAmC;YACnC,MAAM,aAAa,GAAI,OAAmC,CAAC,aAAa,CAAC,CAAC;YAC1E,IAAI,OAAO,aAAa,KAAK,QAAQ;gBAAE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7B,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,aAAa,CAAC,CAAyB,EAAE,CAAyB;IAChF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IAC9B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,2CAA2C;AAC3C,EAAE;AACF,gFAAgF;AAChF,iFAAiF;AACjF,iFAAiF;AACjF,sEAAsE;AACtE,0EAA0E;AAC1E,8BAA8B;AAE9B,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAA6B,CAAC,CAAC,CAAC,SAAS,CAAC;AACtG,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAAC,GAA4B;IAC7C,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,UAAU;IAC7D,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QAC3C,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,uCAAuC;IAChF,IAAI,IAAI;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC,CAAC,WAAW;AAC1B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAA4B;IAChE,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAE,YAAY,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK;gBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAA4B,EAAE,KAAsB;IACtF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,KAAK,MAAM,CAAC,IAAI,yBAAyB,CAAC,KAAK,EAAE,KAAK,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AAExB;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS,CAAC,eAAe;YAClE,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAa,CAAC;YAClC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;gBAAE,SAAS;YAClC,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAA4B,CAAC;YACxD,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAW,CAAC;YACnC,MAAM,QAAQ,GAAgB;gBAC5B,IAAI;gBACJ,UAAU,EAAE,OAAO,GAAG,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;gBACjF,IAAI;gBACJ,SAAS;gBACT,MAAM,EAAE,GAA8B;aACvC,CAAC;YACF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,QAAQ,CAAC,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,QAAQ,CAAC,eAAe,GAAG,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YACjE,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/infra/kamal/kamal-parse.d.ts

@@ -0,0 +1,23 @@
+export interface KamalBuilder {
+    /** `builder.context` — the build context dir (the app's source). */
+    context?: string;
+    /** `builder.dockerfile` — path to the Dockerfile (its dir is the source). */
+    dockerfile?: string;
+}
+export interface KamalAccessory {
+    name: string;
+    /** The accessory's image ref (`postgres:16`, `redis:7`) — classified by role. */
+    image?: string;
+}
+export interface KamalConfig {
+    /** `service:` — the app name. */
+    service?: string;
+    /** `image:` — the app image ref Kamal builds + deploys. */
+    image?: string;
+    /** `builder:` — direct build-source signals, when present. */
+    builder?: KamalBuilder;
+    /** `accessories:` — the side services, in declaration order. */
+    accessories: KamalAccessory[];
+}
+export declare function parseKamalConfig(yamlText: string): KamalConfig;
+//# sourceMappingURL=kamal-parse.d.ts.map

package/dist/infra/kamal/kamal-parse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kamal-parse.d.ts","sourceRoot":"","sources":["../../../src/infra/kamal/kamal-parse.ts"],"names":[],"mappings":"AAoBA,MAAM,WAAW,YAAY;IAC3B,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,iCAAiC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,gEAAgE;IAChE,WAAW,EAAE,cAAc,EAAE,CAAC;CAC/B;AAiBD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,CAoC9D"}

package/dist/infra/kamal/kamal-parse.js

@@ -0,0 +1,66 @@
+// Kamal config parser + typed shape extractor.
+//
+// Kamal (Basecamp/DHH) deploys a Docker image to one or more VPS hosts. Its
+// config is `config/deploy.yml` (YAML) — so this reuses the `yaml` package and
+// mirrors the render-parse.ts ↔ render.ts parse/builder split.
+//
+// Covered top-level keys:
+//   service     — the app's name (the app container's label/id)
+//   image       — the app image ref (`myorg/app`) — resolved to a build context
+//   builder     — { context, dockerfile } — a DIRECT source signal when present
+//   accessories — name → { image } — the side services (db/redis/…), classified
+//                 from their image by role (the compose image-role token map)
+//
+// Kamal reference: https://kamal-deploy.org/docs/configuration/
+import { parse as parseYaml } from 'yaml';
+// ---------------------------------------------------------------------------
+// Helpers
+function str(v) {
+    return typeof v === 'string' && v ? v : undefined;
+}
+function obj(v) {
+    return v && typeof v === 'object' && !Array.isArray(v) ? v : undefined;
+}
+// ---------------------------------------------------------------------------
+// Main parse function: raw YAML string → KamalConfig.
+// Throws on YAML syntax errors (caller wraps in try/catch + warns).
+export function parseKamalConfig(yamlText) {
+    const raw = parseYaml(yamlText, { logLevel: 'silent' });
+    if (raw === null || typeof raw !== 'object' || Array.isArray(raw)) {
+        throw new Error('kamal deploy.yml: top-level value must be a mapping');
+    }
+    const tree = raw;
+    const config = { accessories: [] };
+    const service = str(tree.service);
+    if (service)
+        config.service = service;
+    const image = str(tree.image);
+    if (image)
+        config.image = image;
+    const builderRaw = obj(tree.builder);
+    if (builderRaw) {
+        const builder = {};
+        const context = str(builderRaw.context);
+        if (context)
+            builder.context = context;
+        const dockerfile = str(builderRaw.dockerfile);
+        if (dockerfile)
+            builder.dockerfile = dockerfile;
+        config.builder = builder;
+    }
+    const accessoriesRaw = obj(tree.accessories);
+    if (accessoriesRaw) {
+        for (const [name, value] of Object.entries(accessoriesRaw)) {
+            const accRaw = obj(value);
+            if (!name || !accRaw)
+                continue; // skip nameless / non-mapping entries
+            const accessory = { name };
+            const accImage = str(accRaw.image);
+            if (accImage)
+                accessory.image = accImage;
+            config.accessories.push(accessory);
+        }
+    }
+    return config;
+}
+//# sourceMappingURL=kamal-parse.js.map

package/dist/infra/kamal/kamal-parse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kamal-parse.js","sourceRoot":"","sources":["../../../src/infra/kamal/kamal-parse.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,EAAE;AACF,4EAA4E;AAC5E,+EAA+E;AAC/E,+DAA+D;AAC/D,EAAE;AACF,0BAA0B;AAC1B,gEAAgE;AAChE,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAChF,8EAA8E;AAC9E,EAAE;AACF,gEAAgE;AAEhE,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AA6B1C,8EAA8E;AAC9E,UAAU;AAEV,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAED,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAA6B,CAAC,CAAC,CAAC,SAAS,CAAC;AACtG,CAAC;AAED,8EAA8E;AAC9E,sDAAsD;AACtD,oEAAoE;AAEpE,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACxD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,IAAI,GAAG,GAA8B,CAAC;IAC5C,MAAM,MAAM,GAAgB,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAEhD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,OAAO;QAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IACtC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,KAAK;QAAE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;IAEhC,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,OAAO,GAAiB,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,OAAO;YAAE,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;QACvC,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,UAAU;YAAE,OAAO,CAAC,UAAU,GAAG,UAAU,CAAC;QAChD,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IAC3B,CAAC;IAED,MAAM,cAAc,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC7C,IAAI,cAAc,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YAC3D,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM;gBAAE,SAAS,CAAC,sCAAsC;YACtE,MAAM,SAAS,GAAmB,EAAE,IAAI,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,QAAQ;gBAAE,SAAS,CAAC,KAAK,GAAG,QAAQ,CAAC;YACzC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/infra/kamal/kamal.d.ts

@@ -0,0 +1,17 @@
+import type { InfraAdapter, InfraGraph } from '../types.js';
+import { type DockerfileIndex } from '../image-resolve.js';
+import { type KamalConfig } from './kamal-parse.js';
+/**
+ * The repo-relative source roots the Kamal app deploys. builder.context /
+ * builder.dockerfile are DIRECT signals (preferred); else the image ref is run
+ * through the  resolver. Repo-root resolutions are dropped (never a
+ * catch-all). Pure (the resolver index is injected). Deterministic + sorted.
+ */
+export declare function kamalAppSourceRoots(config: KamalConfig, dockerfileIndex?: DockerfileIndex): string[];
+export declare function buildKamalGraph(args: {
+    config: KamalConfig;
+    configFile: string;
+    dockerfileIndex?: DockerfileIndex;
+}, root: string): InfraGraph;
+export declare const kamalAdapter: InfraAdapter;
+//# sourceMappingURL=kamal.d.ts.map

package/dist/infra/kamal/kamal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kamal.d.ts","sourceRoot":"","sources":["../../../src/infra/kamal/kamal.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAE,YAAY,EAAa,UAAU,EAAa,MAAM,aAAa,CAAC;AAGlF,OAAO,EAAmD,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC5G,OAAO,EAAoB,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AA6BtE;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,WAAW,EAAE,eAAe,CAAC,EAAE,eAAe,GAAG,MAAM,EAAE,CAgBpG;AAaD,wBAAgB,eAAe,CAC7B,IAAI,EAAE;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,eAAe,CAAA;CAAE,EACpF,IAAI,EAAE,MAAM,GACX,UAAU,CAiCZ;AAgBD,eAAO,MAAM,YAAY,EAAE,YA+B1B,CAAC"}