@intentius/chant-lexicon-gcp 0.124.32 → 0.124.34

package/dist/op/activities/index.d.ts

@@ -4,7 +4,7 @@
  * (`gcpApply`), which maps CNRM resources to GCP REST calls since GCP has no
  * native deployment service to shell out to.
  */
-export { gcpApply, gcpDelete, applyResource, deleteResource, waitForOperation, longRunningOperation, bucketInsertBody, pubSubTopicBody, pubSubSubscriptionBody, cloudRunServiceBody, secretBody, serviceAccountBody, storageBucketMapper, pubSubTopicMapper, pubSubSubscriptionMapper, cloudRunServiceMapper, secretManagerSecretMapper, gcpServiceAccountMapper, MAPPERS, referencedNames, orderByReferences, pruneOrphans, toApplyResult, type GcpNotAttempted, type GcpNotPrunable, chantOwnershipLabels, isChantOwned, resolveGcpEndpoint, resolveGcpProject, parseManifest, } from "./gcp-apply.js";
+export { gcpApply, gcpDelete, applyResource, deleteResource, waitForOperation, longRunningOperation, bucketInsertBody, pubSubTopicBody, pubSubSubscriptionBody, cloudRunServiceBody, secretBody, serviceAccountBody, storageBucketMapper, pubSubTopicMapper, pubSubSubscriptionMapper, cloudRunServiceMapper, secretManagerSecretMapper, gcpServiceAccountMapper, MAPPERS, referencedNames, orderByReferences, pruneOrphans, toApplyResult, type GcpNotAttempted, type GcpNotPrunable, chantOwnershipLabels, isChantOwned, resolveGcpEndpoint, resolveGcpProject, projectRefProject, parseManifest, } from "./gcp-apply.js";
 export type { GcpApplyArgs, GcpResource, CnrmStorageBucket, BucketInsertBody, PubSubTopicBody, ResourceMapper, OperationSpec, ListSpec, ApplyPlan, GcpHttp, } from "./gcp-apply.js";
 export { flociGcpUp, flociGcpDown, flociGcpRunCommand, flociGcpRmCommand, flociGcpExistsCommand, flociGcpHealthUrl, flociGcpEndpoint, } from "./floci-gcp.js";
 export type { FlociGcpUpArgs, FlociGcpDownArgs } from "./floci-gcp.js";

package/dist/op/activities/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/op/activities/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,QAAQ,EACR,SAAS,EACT,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,sBAAsB,EACtB,mBAAmB,EACnB,UAAU,EACV,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,wBAAwB,EACxB,qBAAqB,EACrB,yBAAyB,EACzB,uBAAuB,EACvB,OAAO,EACP,eAAe,EACf,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,oBAAoB,EACpB,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,YAAY,EACZ,WAAW,EACX,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,aAAa,EACb,QAAQ,EACR,SAAS,EACT,OAAO,GACR,MAAM,aAAa,CAAC;AAIrB,OAAO,EACL,UAAU,EACV,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/op/activities/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,QAAQ,EACR,SAAS,EACT,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,sBAAsB,EACtB,mBAAmB,EACnB,UAAU,EACV,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,wBAAwB,EACxB,qBAAqB,EACrB,yBAAyB,EACzB,uBAAuB,EACvB,OAAO,EACP,eAAe,EACf,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,oBAAoB,EACpB,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,YAAY,EACZ,WAAW,EACX,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,aAAa,EACb,QAAQ,EACR,SAAS,EACT,OAAO,GACR,MAAM,aAAa,CAAC;AAIrB,OAAO,EACL,UAAU,EACV,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC"}

package/dist/op/activities/index.js

@@ -4,7 +4,7 @@
  * (`gcpApply`), which maps CNRM resources to GCP REST calls since GCP has no
  * native deployment service to shell out to.
  */
-export { gcpApply, gcpDelete, applyResource, deleteResource, waitForOperation, longRunningOperation, bucketInsertBody, pubSubTopicBody, pubSubSubscriptionBody, cloudRunServiceBody, secretBody, serviceAccountBody, storageBucketMapper, pubSubTopicMapper, pubSubSubscriptionMapper, cloudRunServiceMapper, secretManagerSecretMapper, gcpServiceAccountMapper, MAPPERS, referencedNames, orderByReferences, pruneOrphans, toApplyResult, chantOwnershipLabels, isChantOwned, resolveGcpEndpoint, resolveGcpProject, parseManifest, } from "./gcp-apply.js";
+export { gcpApply, gcpDelete, applyResource, deleteResource, waitForOperation, longRunningOperation, bucketInsertBody, pubSubTopicBody, pubSubSubscriptionBody, cloudRunServiceBody, secretBody, serviceAccountBody, storageBucketMapper, pubSubTopicMapper, pubSubSubscriptionMapper, cloudRunServiceMapper, secretManagerSecretMapper, gcpServiceAccountMapper, MAPPERS, referencedNames, orderByReferences, pruneOrphans, toApplyResult, chantOwnershipLabels, isChantOwned, resolveGcpEndpoint, resolveGcpProject, projectRefProject, parseManifest, } from "./gcp-apply.js";
 // floci-gcp (GCP emulator) lifecycle — the typed twin of aws's flociUp/Down, so
 // the trio's GCP op boots/tears down the emulator as a modeled step, not a shell.
 export { flociGcpUp, flociGcpDown, flociGcpRunCommand, flociGcpRmCommand, flociGcpExistsCommand, flociGcpHealthUrl, flociGcpEndpoint, } from "./floci-gcp.js";

package/dist/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAqC,MAAM,0BAA0B,CAAC;AAuBjG,eAAO,MAAM,SAAS,EAAE,aA6XvB,CAAC"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAqC,MAAM,0BAA0B,CAAC;AAuBjG,eAAO,MAAM,SAAS,EAAE,aAqYvB,CAAC"}

package/dist/plugin.js

@@ -368,4 +368,10 @@ export const bucket = new StorageBucket({
         return observeResourcesDeepGcp(options);
     },
     deepNormalizationHooks: gcpDeepNormalizationHooks,
+    /** Runtime health (#4177): Cloud Run services. Implementation in ./health.ts. */
+    healthTypes: ["GCP::Run::Service"],
+    async observeHealth(options) {
+        const { observeHealthGcp } = await import("./health.js");
+        return observeHealthGcp(options);
+    },
 };

package/dist/serializer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serializer.d.ts","sourceRoot":"","sources":["../src/serializer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,KAAK,EAAE,UAAU,EAAsC,MAAM,6BAA6B,CAAC;AAiClG;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAW1F;AAuDD;;GAEG;AACH,eAAO,MAAM,aAAa,EAAE,UA2F3B,CAAC"}
+{"version":3,"file":"serializer.d.ts","sourceRoot":"","sources":["../src/serializer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,KAAK,EAAE,UAAU,EAAsC,MAAM,6BAA6B,CAAC;AAiClG;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAW1F;AAsED;;GAEG;AACH,eAAO,MAAM,aAAa,EAAE,UAiG3B,CAAC"}

package/dist/serializer.js

@@ -92,13 +92,25 @@ function gcpVisitor(entityNames) {
 function toYAMLValue(value, entityNames) {
     return walkValue(value, entityNames, gcpVisitor(entityNames));
 }
+/**
+ * A warning for each output of a gcp resource (#4181). Config Connector YAML
+ * has no outputs section, and a field such as `status.uri` exists only once
+ * the resource is applied, so the build cannot write the value anywhere. An
+ * output with no source lexicon (a literal or an intrinsic) is passed to
+ * every lexicon and is left to one that writes outputs.
+ */
+function unwritableOutputWarnings(outputs) {
+    return (outputs ?? [])
+        .filter((o) => o.sourceLexicon === "gcp")
+        .map((o) => `gcp: output "${o.outputName}" (${o.sourceEntity || "?"}.${o.sourceAttribute}) is not written: Config Connector YAML has no outputs, so the value exists only after apply. Read it from the live resource instead.`);
+}
 /**
  * GCP Config Connector YAML serializer implementation.
  */
 export const gcpSerializer = {
     name: "gcp",
     rulePrefix: "WGC",
-    serialize(entities, _outputs, context) {
+    serialize(entities, outputs, context) {
         // Build reverse map: entity → name
         const entityNames = new Map();
         for (const [name, entity] of entities) {
@@ -119,6 +131,7 @@ export const gcpSerializer = {
             }
         }
         const documents = [];
+        const unresolved = [];
         for (const [name, entity] of entities) {
             if (isPropertyDeclarable(entity))
                 continue;
@@ -128,7 +141,7 @@ export const gcpSerializer = {
             const gvk = resolveGVK(entityType);
             if (!gvk)
                 continue;
-            const props = toYAMLValue(isResourceDeclarable(entity) ? entity.props : undefined, entityNames);
+            const props = resolvePseudoParameters(toYAMLValue(isResourceDeclarable(entity) ? entity.props : undefined, entityNames), name, unresolved);
             if (!props)
                 continue;
             // Build the Config Connector manifest structure
@@ -169,7 +182,11 @@ export const gcpSerializer = {
             const yamlDoc = emitK8sManifest(manifest);
             documents.push(yamlDoc);
         }
-        return documents.join("\n---\n");
+        if (unresolved.length > 0)
+            throw new Error(unresolvedMessage(unresolved));
+        const primary = documents.join("\n---\n");
+        const warnings = unwritableOutputWarnings(outputs);
+        return warnings.length > 0 ? { primary, warnings } : primary;
     },
 };
 /**
@@ -182,6 +199,38 @@ const PSEUDO_ENV_MAP = {
     "GCP::Region": { envVar: "GCP_REGION", fallback: "us-central1" },
     "GCP::Zone": { envVar: "GCP_ZONE", fallback: "us-central1-a" },
 };
+/**
+ * Replace each GCP pseudo-parameter (`{ Ref: "GCP::Region" }`) in a
+ * serialized resource with its environment variable's value (#4200).
+ * Config Connector has no parameters, so a `Ref` left in the YAML reaches
+ * the API as an object. A variable that isn't set is recorded, and the
+ * build refuses with every one named.
+ */
+function resolvePseudoParameters(value, entity, unresolved) {
+    if (Array.isArray(value))
+        return value.map((v) => resolvePseudoParameters(v, entity, unresolved));
+    if (value === null || typeof value !== "object")
+        return value;
+    const obj = value;
+    const keys = Object.keys(obj);
+    if (keys.length === 1 && keys[0] === "Ref" && typeof obj.Ref === "string" && obj.Ref in PSEUDO_ENV_MAP) {
+        const { envVar } = PSEUDO_ENV_MAP[obj.Ref];
+        const resolved = process.env[envVar];
+        if (resolved)
+            return resolved;
+        unresolved.push({ entity, ref: obj.Ref, envVar });
+        return value;
+    }
+    const out = {};
+    for (const [k, v] of Object.entries(obj))
+        out[k] = resolvePseudoParameters(v, entity, unresolved);
+    return out;
+}
+function unresolvedMessage(unresolved) {
+    const vars = [...new Set(unresolved.map((u) => u.envVar))];
+    const lines = unresolved.map((u) => `  ${u.entity}: ${u.ref} needs ${u.envVar}`);
+    return `gcp: ${vars.join(", ")} ${vars.length === 1 ? "is" : "are"} not set, and Config Connector YAML can't carry a pseudo-parameter. Set ${vars.length === 1 ? "it" : "them"} at build, or pass the value explicitly:\n${lines.join("\n")}`;
+}
 /**
  * Resolve an annotation value to a plain string.
  * PseudoParameter intrinsics are resolved from environment variables;

package/dist/spec/parse.d.ts

@@ -4,7 +4,7 @@
  * Adapts the K8s CRD parser pattern for GCP-specific concerns:
  * - Type naming: GCP::{Service}::{Kind}
  * - resourceRef detection
- * - Status field skipping
+ * - Status fields skipped as props; scalar ones become attributes
  */
 import type { PropertyConstraints } from "@intentius/chant/codegen/json-schema";
 export interface ParsedProperty {

package/dist/spec/parse.js

@@ -4,7 +4,7 @@
  * Adapts the K8s CRD parser pattern for GCP-specific concerns:
  * - Type naming: GCP::{Service}::{Kind}
  * - resourceRef detection
- * - Status field skipping
+ * - Status fields skipped as props; scalar ones become attributes
  */
 import yaml from "js-yaml";
 // ── Naming helpers ──────────────────────────────────────────────────
@@ -114,6 +114,7 @@ function parseCRDSpec(spec) {
                 { name: "name", tsType: "string" },
                 { name: "namespace", tsType: "string" },
                 { name: "uid", tsType: "string" },
+                ...statusAttributes(schema?.properties?.status),
             ],
             deprecatedProperties: [],
         },
@@ -123,6 +124,21 @@ function parseCRDSpec(spec) {
     });
     return results;
 }
+/**
+ * The scalar top-level fields of a CRD's `status`, such as RunService's
+ * `status.uri` (#4179), as dotted attribute names. Config Connector fills them
+ * once the resource is ready, so they can't appear in the resource's own
+ * YAML, but another lexicon or an output can reference them.
+ */
+function statusAttributes(statusSchema) {
+    const out = [];
+    for (const [name, prop] of Object.entries(statusSchema?.properties ?? {})) {
+        if (prop.type !== "string" && prop.type !== "integer" && prop.type !== "number" && prop.type !== "boolean")
+            continue;
+        out.push({ name: `status.${name}`, tsType: resolveSchemaType(prop) });
+    }
+    return out;
+}
 // ── Property extraction ─────────────────────────────────────────────
 /**
  * Extract properties from the spec sub-object of a CRD schema.