@digifi/k8s-grpc-js-resolver 0.1.0

package/dist/resolve-grpc-target-address.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveGrpcTargetAddress = exports.registerK8sResolver = void 0;
+const grpc_js_1 = require("@grpc/grpc-js");
+const k8s_resolver_1 = require("./k8s-resolver");
+const resolver_constants_1 = require("./resolver.constants");
+const rewrite_grpc_address_1 = require("./rewrite-grpc-address");
+let registered = false;
+/** Registers the `k8s://` resolver with the process-wide grpc-js resolver registry. */
+const registerK8sResolver = () => {
+    if (registered) {
+        return;
+    }
+    grpc_js_1.experimental.registerResolver(resolver_constants_1.K8S_RESOLVER_SCHEME, k8s_resolver_1.K8sResolver);
+    registered = true;
+};
+exports.registerK8sResolver = registerK8sResolver;
+/**
+ * Turns an in-cluster `host:port` address into a Kubernetes-backed gRPC target when
+ * `GRPC_K8S_RESOLVER_ENABLED` is enabled. Explicit `k8s://` targets work without the flag.
+ */
+const resolveGrpcTargetAddress = (address) => {
+    if (address.startsWith(`${resolver_constants_1.K8S_RESOLVER_SCHEME}://`)) {
+        (0, exports.registerK8sResolver)();
+        return address;
+    }
+    if (!(0, rewrite_grpc_address_1.isK8sResolverEnabled)()) {
+        return address;
+    }
+    (0, exports.registerK8sResolver)();
+    return (0, rewrite_grpc_address_1.rewriteGrpcAddressIfEnabled)(address);
+};
+exports.resolveGrpcTargetAddress = resolveGrpcTargetAddress;
+//# sourceMappingURL=resolve-grpc-target-address.js.map

package/dist/resolve-grpc-target-address.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-grpc-target-address.js","sourceRoot":"","sources":["../src/resolve-grpc-target-address.ts"],"names":[],"mappings":";;;AAAA,2CAA6C;AAC7C,iDAA6C;AAC7C,6DAA2D;AAC3D,iEAA2F;AAE3F,IAAI,UAAU,GAAG,KAAK,CAAC;AAEvB,uFAAuF;AAChF,MAAM,mBAAmB,GAAG,GAAS,EAAE;IAC5C,IAAI,UAAU,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IAED,sBAAY,CAAC,gBAAgB,CAAC,wCAAmB,EAAE,0BAAW,CAAC,CAAC;IAChE,UAAU,GAAG,IAAI,CAAC;AACpB,CAAC,CAAC;AAPW,QAAA,mBAAmB,uBAO9B;AAEF;;;GAGG;AACI,MAAM,wBAAwB,GAAG,CAAC,OAAe,EAAU,EAAE;IAClE,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,wCAAmB,KAAK,CAAC,EAAE,CAAC;QACpD,IAAA,2BAAmB,GAAE,CAAC;QAEtB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,CAAC,IAAA,2CAAoB,GAAE,EAAE,CAAC;QAC5B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAA,2BAAmB,GAAE,CAAC;IAEtB,OAAO,IAAA,kDAA2B,EAAC,OAAO,CAAC,CAAC;AAC9C,CAAC,CAAC;AAdW,QAAA,wBAAwB,4BAcnC"}

package/dist/resolver-logger.d.ts

@@ -0,0 +1,13 @@
+interface IResolverLogger {
+    info(message: string): void;
+    warn(message: string): void;
+    error(message: string): void;
+}
+/**
+ * The resolver runs before (and outside of) the Nest DI container, so it owns a standalone logger
+ * the same way the application bootstrap and CLI entry points do.
+ */
+export declare const getResolverLogger: () => IResolverLogger;
+export declare const toErrorMessage: (error: unknown) => string;
+export {};
+//# sourceMappingURL=resolver-logger.d.ts.map

package/dist/resolver-logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver-logger.d.ts","sourceRoot":"","sources":["../src/resolver-logger.ts"],"names":[],"mappings":"AAYA,UAAU,eAAe;IACvB,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAoBD;;;GAGG;AACH,eAAO,MAAM,iBAAiB,QAAO,eAAyB,CAAC;AAE/D,eAAO,MAAM,cAAc,GAAI,OAAO,OAAO,KAAG,MAM/C,CAAC"}

package/dist/resolver-logger.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toErrorMessage = exports.getResolverLogger = void 0;
+const LOG_LEVEL_ENV = 'LogLevel';
+const DEFAULT_LOG_LEVEL = 'info';
+/** Mirrors the level ordering WinstonLogger is configured with. */
+const LOG_LEVEL_PRIORITY = {
+    error: 0,
+    warn: 1,
+    info: 2,
+    verbose: 3,
+    debug: 4,
+    trace: 5,
+};
+const write = (level, message) => {
+    const configuredLevel = process.env[LOG_LEVEL_ENV] ?? DEFAULT_LOG_LEVEL;
+    const configuredPriority = LOG_LEVEL_PRIORITY[configuredLevel] ?? LOG_LEVEL_PRIORITY[DEFAULT_LOG_LEVEL];
+    if (LOG_LEVEL_PRIORITY[level] > configuredPriority) {
+        return;
+    }
+    process.stdout.write(`${new Date().toISOString()} ${level}: ${message}\n`);
+};
+const logger = {
+    info: (message) => write('info', message),
+    warn: (message) => write('warn', message),
+    error: (message) => write('error', message),
+};
+/**
+ * The resolver runs before (and outside of) the Nest DI container, so it owns a standalone logger
+ * the same way the application bootstrap and CLI entry points do.
+ */
+const getResolverLogger = () => logger;
+exports.getResolverLogger = getResolverLogger;
+const toErrorMessage = (error) => {
+    if (error instanceof Error) {
+        return error.message;
+    }
+    return String(error);
+};
+exports.toErrorMessage = toErrorMessage;
+//# sourceMappingURL=resolver-logger.js.map

package/dist/resolver-logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver-logger.js","sourceRoot":"","sources":["../src/resolver-logger.ts"],"names":[],"mappings":";;;AAAA,MAAM,aAAa,GAAG,UAAU,CAAC;AACjC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,mEAAmE;AACnE,MAAM,kBAAkB,GAA2B;IACjD,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,OAAO,EAAE,CAAC;IACV,KAAK,EAAE,CAAC;IACR,KAAK,EAAE,CAAC;CACT,CAAC;AAQF,MAAM,KAAK,GAAG,CAAC,KAAgC,EAAE,OAAe,EAAQ,EAAE;IACxE,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,iBAAiB,CAAC;IACxE,MAAM,kBAAkB,GACtB,kBAAkB,CAAC,eAAe,CAAC,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;IAE/E,IAAI,kBAAkB,CAAC,KAAK,CAAC,GAAG,kBAAkB,EAAE,CAAC;QACnD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,KAAK,KAAK,OAAO,IAAI,CAAC,CAAC;AAC7E,CAAC,CAAC;AAEF,MAAM,MAAM,GAAoB;IAC9B,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC;IACzC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC;IACzC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC;CAC5C,CAAC;AAEF;;;GAGG;AACI,MAAM,iBAAiB,GAAG,GAAoB,EAAE,CAAC,MAAM,CAAC;AAAlD,QAAA,iBAAiB,qBAAiC;AAExD,MAAM,cAAc,GAAG,CAAC,KAAc,EAAU,EAAE;IACvD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC,CAAC;AANW,QAAA,cAAc,kBAMzB"}

package/dist/resolver.constants.d.ts

@@ -0,0 +1,7 @@
+/** Kept separate from the resolver and rewriting modules so neither has to import the other. */
+export declare const K8S_RESOLVER_SCHEME = "k8s";
+export declare const GRPC_K8S_RESOLVER_ENABLED_ENV = "GRPC_K8S_RESOLVER_ENABLED";
+/** When true, fall back to headless service DNS if EndpointSlice discovery fails or returns no ready pods. */
+export declare const GRPC_K8S_RESOLVER_DNS_FALLBACK_ENV = "GRPC_K8S_RESOLVER_DNS_FALLBACK";
+export declare const isDnsFallbackEnabled: () => boolean;
+//# sourceMappingURL=resolver.constants.d.ts.map

package/dist/resolver.constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.constants.d.ts","sourceRoot":"","sources":["../src/resolver.constants.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,eAAO,MAAM,mBAAmB,QAAQ,CAAC;AAEzC,eAAO,MAAM,6BAA6B,8BAA8B,CAAC;AAEzE,8GAA8G;AAC9G,eAAO,MAAM,kCAAkC,mCAAmC,CAAC;AAEnF,eAAO,MAAM,oBAAoB,QAAO,OAQvC,CAAC"}

package/dist/resolver.constants.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isDnsFallbackEnabled = exports.GRPC_K8S_RESOLVER_DNS_FALLBACK_ENV = exports.GRPC_K8S_RESOLVER_ENABLED_ENV = exports.K8S_RESOLVER_SCHEME = void 0;
+/** Kept separate from the resolver and rewriting modules so neither has to import the other. */
+exports.K8S_RESOLVER_SCHEME = 'k8s';
+exports.GRPC_K8S_RESOLVER_ENABLED_ENV = 'GRPC_K8S_RESOLVER_ENABLED';
+/** When true, fall back to headless service DNS if EndpointSlice discovery fails or returns no ready pods. */
+exports.GRPC_K8S_RESOLVER_DNS_FALLBACK_ENV = 'GRPC_K8S_RESOLVER_DNS_FALLBACK';
+const isDnsFallbackEnabled = () => {
+    const value = process.env[exports.GRPC_K8S_RESOLVER_DNS_FALLBACK_ENV];
+    if (value === undefined) {
+        return true;
+    }
+    return value === 'true' || value === '1';
+};
+exports.isDnsFallbackEnabled = isDnsFallbackEnabled;
+//# sourceMappingURL=resolver.constants.js.map

package/dist/resolver.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.constants.js","sourceRoot":"","sources":["../src/resolver.constants.ts"],"names":[],"mappings":";;;AAAA,gGAAgG;AACnF,QAAA,mBAAmB,GAAG,KAAK,CAAC;AAE5B,QAAA,6BAA6B,GAAG,2BAA2B,CAAC;AAEzE,8GAA8G;AACjG,QAAA,kCAAkC,GAAG,gCAAgC,CAAC;AAE5E,MAAM,oBAAoB,GAAG,GAAY,EAAE;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,0CAAkC,CAAC,CAAC;IAE9D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG,CAAC;AAC3C,CAAC,CAAC;AARW,QAAA,oBAAoB,wBAQ/B"}

package/dist/rewrite-grpc-address.d.ts

@@ -0,0 +1,32 @@
+export interface IHostPort {
+    host: string;
+    port: string;
+}
+export interface IServiceCoordinates {
+    serviceName: string;
+    namespace: string;
+}
+export declare const isK8sResolverEnabled: () => boolean;
+export declare const readPodNamespace: () => string | null;
+/**
+ * Parses the plain `host:port` form the gRPC URL secrets store today. Anything carrying a scheme,
+ * an IPv6 literal or extra colons is rejected outright rather than guessed at.
+ */
+export declare const parseHostPortAddress: (address: string) => IHostPort | null;
+/**
+ * Recognises only the in-cluster service DNS forms, so external hostnames, IP literals and
+ * loopback addresses keep flowing to the stock DNS resolver instead of being rewritten into a
+ * `k8s://` target that could never resolve. Accepted:
+ *   - `<service>` (namespace taken from the pod)
+ *   - `<service>.<namespace>` (only when the namespace is the pod's own)
+ *   - `<service>.<namespace>.svc[.<cluster-domain>]`
+ */
+export declare const extractServiceAndNamespace: (host: string, podNamespace: string | null) => IServiceCoordinates | null;
+export declare const toK8sResolverAddress: (serviceName: string, namespace: string, port: string) => string;
+/**
+ * When `GRPC_K8S_RESOLVER_ENABLED` is set, rewrite in-cluster service DNS `host:port` to
+ * `k8s://<namespace>/<service>:<port>`. Any address that is not recognisably an in-cluster
+ * service is returned untouched.
+ */
+export declare const rewriteGrpcAddressIfEnabled: (address: string) => string;
+//# sourceMappingURL=rewrite-grpc-address.d.ts.map

package/dist/rewrite-grpc-address.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rewrite-grpc-address.d.ts","sourceRoot":"","sources":["../src/rewrite-grpc-address.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,eAAO,MAAM,oBAAoB,QAAO,OAIvC,CAAC;AAEF,eAAO,MAAM,gBAAgB,QAAO,MAAM,GAAG,IAE5C,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,oBAAoB,GAAI,SAAS,MAAM,KAAG,SAAS,GAAG,IAmBlE,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B,GACrC,MAAM,MAAM,EACZ,cAAc,MAAM,GAAG,IAAI,KAC1B,mBAAmB,GAAG,IA6BxB,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAC/B,aAAa,MAAM,EACnB,WAAW,MAAM,EACjB,MAAM,MAAM,KACX,MAAwE,CAAC;AAE5E;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,GAAI,SAAS,MAAM,KAAG,MAkB7D,CAAC"}

package/dist/rewrite-grpc-address.js

@@ -0,0 +1,96 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rewriteGrpcAddressIfEnabled = exports.toK8sResolverAddress = exports.extractServiceAndNamespace = exports.parseHostPortAddress = exports.readPodNamespace = exports.isK8sResolverEnabled = void 0;
+const resolver_constants_1 = require("./resolver.constants");
+const k8s_api_client_1 = require("./k8s-api-client");
+const DNS_LABEL_PATTERN = /^[a-z0-9]([-a-z0-9]*[a-z0-9])?$/;
+const IPV4_PATTERN = /^\d{1,3}(\.\d{1,3}){3}$/;
+const NUMERIC_PATTERN = /^\d+$/;
+const PORT_PATTERN = /^\d+$/;
+const SERVICE_LABEL_MARKER = 'svc';
+const LOOPBACK_HOSTS = new Set(['localhost', 'localhost.localdomain']);
+const MIN_PORT = 1;
+const MAX_PORT = 65_535;
+const isK8sResolverEnabled = () => {
+    const value = process.env[resolver_constants_1.GRPC_K8S_RESOLVER_ENABLED_ENV];
+    return value === 'true' || value === '1';
+};
+exports.isK8sResolverEnabled = isK8sResolverEnabled;
+const readPodNamespace = () => {
+    return process.env.POD_NAMESPACE || (0, k8s_api_client_1.readServiceAccountNamespace)();
+};
+exports.readPodNamespace = readPodNamespace;
+/**
+ * Parses the plain `host:port` form the gRPC URL secrets store today. Anything carrying a scheme,
+ * an IPv6 literal or extra colons is rejected outright rather than guessed at.
+ */
+const parseHostPortAddress = (address) => {
+    if (!address || address.includes('://') || address.includes('[') || address.includes(']')) {
+        return null;
+    }
+    const separatorIndex = address.indexOf(':');
+    if (separatorIndex <= 0 || separatorIndex !== address.lastIndexOf(':')) {
+        return null;
+    }
+    const host = address.slice(0, separatorIndex);
+    const port = address.slice(separatorIndex + 1);
+    if (!PORT_PATTERN.test(port) || Number(port) < MIN_PORT || Number(port) > MAX_PORT) {
+        return null;
+    }
+    return { host, port };
+};
+exports.parseHostPortAddress = parseHostPortAddress;
+/**
+ * Recognises only the in-cluster service DNS forms, so external hostnames, IP literals and
+ * loopback addresses keep flowing to the stock DNS resolver instead of being rewritten into a
+ * `k8s://` target that could never resolve. Accepted:
+ *   - `<service>` (namespace taken from the pod)
+ *   - `<service>.<namespace>` (only when the namespace is the pod's own)
+ *   - `<service>.<namespace>.svc[.<cluster-domain>]`
+ */
+const extractServiceAndNamespace = (host, podNamespace) => {
+    if (!host ||
+        host.includes('/') ||
+        LOOPBACK_HOSTS.has(host.toLowerCase()) ||
+        IPV4_PATTERN.test(host)) {
+        return null;
+    }
+    const labels = host.toLowerCase().split('.');
+    if (labels.some((label) => !DNS_LABEL_PATTERN.test(label)) || NUMERIC_PATTERN.test(labels[0])) {
+        return null;
+    }
+    if (labels.length === 1) {
+        return podNamespace ? { serviceName: labels[0], namespace: podNamespace } : null;
+    }
+    if (labels.length === 2) {
+        return labels[1] === podNamespace ? { serviceName: labels[0], namespace: labels[1] } : null;
+    }
+    if (labels[2] !== SERVICE_LABEL_MARKER) {
+        return null;
+    }
+    return { serviceName: labels[0], namespace: labels[1] };
+};
+exports.extractServiceAndNamespace = extractServiceAndNamespace;
+const toK8sResolverAddress = (serviceName, namespace, port) => `${resolver_constants_1.K8S_RESOLVER_SCHEME}://${namespace}/${serviceName}:${port}`;
+exports.toK8sResolverAddress = toK8sResolverAddress;
+/**
+ * When `GRPC_K8S_RESOLVER_ENABLED` is set, rewrite in-cluster service DNS `host:port` to
+ * `k8s://<namespace>/<service>:<port>`. Any address that is not recognisably an in-cluster
+ * service is returned untouched.
+ */
+const rewriteGrpcAddressIfEnabled = (address) => {
+    if (!(0, exports.isK8sResolverEnabled)() || address.startsWith(`${resolver_constants_1.K8S_RESOLVER_SCHEME}://`)) {
+        return address;
+    }
+    const hostPort = (0, exports.parseHostPortAddress)(address);
+    if (!hostPort) {
+        return address;
+    }
+    const coordinates = (0, exports.extractServiceAndNamespace)(hostPort.host, (0, exports.readPodNamespace)());
+    if (!coordinates) {
+        return address;
+    }
+    return (0, exports.toK8sResolverAddress)(coordinates.serviceName, coordinates.namespace, hostPort.port);
+};
+exports.rewriteGrpcAddressIfEnabled = rewriteGrpcAddressIfEnabled;
+//# sourceMappingURL=rewrite-grpc-address.js.map

package/dist/rewrite-grpc-address.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rewrite-grpc-address.js","sourceRoot":"","sources":["../src/rewrite-grpc-address.ts"],"names":[],"mappings":";;;AAAA,6DAA0F;AAC1F,qDAA+D;AAE/D,MAAM,iBAAiB,GAAG,iCAAiC,CAAC;AAC5D,MAAM,YAAY,GAAG,yBAAyB,CAAC;AAC/C,MAAM,eAAe,GAAG,OAAO,CAAC;AAChC,MAAM,YAAY,GAAG,OAAO,CAAC;AAC7B,MAAM,oBAAoB,GAAG,KAAK,CAAC;AACnC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC,CAAC;AACvE,MAAM,QAAQ,GAAG,CAAC,CAAC;AACnB,MAAM,QAAQ,GAAG,MAAM,CAAC;AAYjB,MAAM,oBAAoB,GAAG,GAAY,EAAE;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,kDAA6B,CAAC,CAAC;IAEzD,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG,CAAC;AAC3C,CAAC,CAAC;AAJW,QAAA,oBAAoB,wBAI/B;AAEK,MAAM,gBAAgB,GAAG,GAAkB,EAAE;IAClD,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAA,4CAA2B,GAAE,CAAC;AACpE,CAAC,CAAC;AAFW,QAAA,gBAAgB,oBAE3B;AAEF;;;GAGG;AACI,MAAM,oBAAoB,GAAG,CAAC,OAAe,EAAoB,EAAE;IACxE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1F,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAE5C,IAAI,cAAc,IAAI,CAAC,IAAI,cAAc,KAAK,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC;IAE/C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,EAAE,CAAC;QACnF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC,CAAC;AAnBW,QAAA,oBAAoB,wBAmB/B;AAEF;;;;;;;GAOG;AACI,MAAM,0BAA0B,GAAG,CACxC,IAAY,EACZ,YAA2B,EACC,EAAE;IAC9B,IACE,CAAC,IAAI;QACL,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAClB,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACtC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EACvB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE7C,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,YAAY,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACnF,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9F,CAAC;IAED,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,oBAAoB,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC,CAAC;AAhCW,QAAA,0BAA0B,8BAgCrC;AAEK,MAAM,oBAAoB,GAAG,CAClC,WAAmB,EACnB,SAAiB,EACjB,IAAY,EACJ,EAAE,CAAC,GAAG,wCAAmB,MAAM,SAAS,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;AAJ/D,QAAA,oBAAoB,wBAI2C;AAE5E;;;;GAIG;AACI,MAAM,2BAA2B,GAAG,CAAC,OAAe,EAAU,EAAE;IACrE,IAAI,CAAC,IAAA,4BAAoB,GAAE,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,wCAAmB,KAAK,CAAC,EAAE,CAAC;QAC/E,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,4BAAoB,EAAC,OAAO,CAAC,CAAC;IAE/C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,WAAW,GAAG,IAAA,kCAA0B,EAAC,QAAQ,CAAC,IAAI,EAAE,IAAA,wBAAgB,GAAE,CAAC,CAAC;IAElF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,OAAO,IAAA,4BAAoB,EAAC,WAAW,CAAC,WAAW,EAAE,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC7F,CAAC,CAAC;AAlBW,QAAA,2BAA2B,+BAkBtC"}

package/dist/watch-stream-parser.d.ts

@@ -0,0 +1,23 @@
+import { IRawEndpointSlice } from './endpoint-slice-store';
+export interface IWatchEvent {
+    type: string;
+    object: IRawEndpointSlice & {
+        reason?: string;
+        code?: number;
+    };
+}
+/**
+ * The Kubernetes watch endpoint streams newline-delimited JSON. Events are split across arbitrary
+ * chunk boundaries, so the trailing partial line has to be carried over to the next chunk.
+ */
+export declare class WatchStreamParser {
+    private buffer;
+    push(chunk: string): IWatchEvent[];
+    private parseLine;
+}
+/**
+ * `410 Gone` means the resource version is too old to resume from and a full relist is required.
+ * The API server reports it either as an HTTP status or as an inline `ERROR` event.
+ */
+export declare const isExpiredResourceVersionEvent: (event: IWatchEvent) => boolean;
+//# sourceMappingURL=watch-stream-parser.d.ts.map

package/dist/watch-stream-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"watch-stream-parser.d.ts","sourceRoot":"","sources":["../src/watch-stream-parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,iBAAiB,GAAG;QAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED;;;GAGG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAAM;IAEb,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,EAAE;IAoBzC,OAAO,CAAC,SAAS;CAkBlB;AAID;;;GAGG;AACH,eAAO,MAAM,6BAA6B,GAAI,OAAO,WAAW,KAAG,OAKlE,CAAC"}

package/dist/watch-stream-parser.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isExpiredResourceVersionEvent = exports.WatchStreamParser = void 0;
+/**
+ * The Kubernetes watch endpoint streams newline-delimited JSON. Events are split across arbitrary
+ * chunk boundaries, so the trailing partial line has to be carried over to the next chunk.
+ */
+class WatchStreamParser {
+    buffer = '';
+    push(chunk) {
+        this.buffer += chunk;
+        const lines = this.buffer.split('\n');
+        this.buffer = lines.pop() ?? '';
+        const events = [];
+        for (const line of lines) {
+            const event = this.parseLine(line);
+            if (event) {
+                events.push(event);
+            }
+        }
+        return events;
+    }
+    parseLine(line) {
+        if (!line.trim()) {
+            return undefined;
+        }
+        try {
+            const parsed = JSON.parse(line);
+            if (!parsed.type || !parsed.object) {
+                return undefined;
+            }
+            return { type: parsed.type, object: parsed.object };
+        }
+        catch {
+            // A malformed line cannot be recovered from; the watch driver relists on stream failure.
+            return undefined;
+        }
+    }
+}
+exports.WatchStreamParser = WatchStreamParser;
+const EXPIRED_RESOURCE_VERSION_REASON = 'Expired';
+/**
+ * `410 Gone` means the resource version is too old to resume from and a full relist is required.
+ * The API server reports it either as an HTTP status or as an inline `ERROR` event.
+ */
+const isExpiredResourceVersionEvent = (event) => {
+    return (event.type === 'ERROR' &&
+        (event.object.reason === EXPIRED_RESOURCE_VERSION_REASON || event.object.code === 410));
+};
+exports.isExpiredResourceVersionEvent = isExpiredResourceVersionEvent;
+//# sourceMappingURL=watch-stream-parser.js.map

package/dist/watch-stream-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"watch-stream-parser.js","sourceRoot":"","sources":["../src/watch-stream-parser.ts"],"names":[],"mappings":";;;AAUA;;;GAGG;AACH,MAAa,iBAAiB;IACpB,MAAM,GAAG,EAAE,CAAC;IAEb,IAAI,CAAC,KAAa;QACvB,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;QAErB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEtC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QAEhC,MAAM,MAAM,GAAkB,EAAE,CAAC;QAEjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAEnC,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,SAAS,CAAC,IAAY;QAC5B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACjB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAyB,CAAC;YAExD,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACnC,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,yFAAyF;YACzF,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;CACF;AAzCD,8CAyCC;AAED,MAAM,+BAA+B,GAAG,SAAS,CAAC;AAElD;;;GAGG;AACI,MAAM,6BAA6B,GAAG,CAAC,KAAkB,EAAW,EAAE;IAC3E,OAAO,CACL,KAAK,CAAC,IAAI,KAAK,OAAO;QACtB,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,+BAA+B,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,CAAC,CACvF,CAAC;AACJ,CAAC,CAAC;AALW,QAAA,6BAA6B,iCAKxC"}

package/package.json

@@ -0,0 +1,55 @@
+{
+  "name": "@digifi/k8s-grpc-js-resolver",
+  "version": "0.1.0",
+  "description": "A grpc-js resolver that watches Kubernetes EndpointSlices for push-based service discovery.",
+  "license": "ISC",
+  "author": "DigiFi Team",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "require": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist/**/*",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/digifi-io/k8s-grpc-js-resolver.git"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "scripts": {
+    "clean": "node -e \"require('node:fs').rmSync('dist', { recursive: true, force: true })\"",
+    "build": "npm run clean && tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "jest --runInBand",
+    "format": "prettier --write \"src/**/*.ts\" README.md package.json \"tsconfig*.json\" jest.config.cjs \".github/workflows/*.yml\"",
+    "format:check": "prettier --check \"src/**/*.ts\" README.md package.json \"tsconfig*.json\" jest.config.cjs \".github/workflows/*.yml\"",
+    "check": "npm run format:check && npm run typecheck && npm test && npm run build",
+    "prepack": "npm run check"
+  },
+  "peerDependencies": {
+    "@grpc/grpc-js": "~1.14.0"
+  },
+  "devDependencies": {
+    "@grpc/grpc-js": "1.14.5",
+    "@swc/core": "1.16.2",
+    "@swc/jest": "0.2.39",
+    "@types/jest": "30.0.0",
+    "@types/node": "24.13.5",
+    "jest": "30.5.1",
+    "prettier": "3.9.8",
+    "typescript": "5.9.3"
+  }
+}