@intentius/chant-lexicon-k8s 0.7.0 → 0.8.1

package/dist/composites/agic-ingress.d.ts

@@ -0,0 +1,73 @@
+/**
+ * AgicIngress composite — Ingress with Azure Application Gateway Ingress Controller annotations.
+ *
+ * @aks Full `appgw.ingress.kubernetes.io/*` annotation set including SSL redirect,
+ * WAF policy, backend path prefix, and cookie-based affinity.
+ */
+import { Ingress } from "../generated/index.js";
+export interface AgicIngressHost {
+    /** Hostname (e.g., "api.example.com"). */
+    hostname: string;
+    /** Path rules for this host. */
+    paths: Array<{
+        path: string;
+        pathType?: string;
+        serviceName: string;
+        servicePort: number;
+    }>;
+}
+export interface AgicIngressProps {
+    /** Ingress name — used in metadata and labels. */
+    name: string;
+    /** Host definitions with paths. */
+    hosts: AgicIngressHost[];
+    /** Azure Key Vault certificate URI or secret name for TLS. */
+    certificateArn?: string;
+    /** WAF policy resource ID. */
+    wafPolicyId?: string;
+    /** Health check path for backend. */
+    healthCheckPath?: string;
+    /** Enable HTTP->HTTPS redirect (default: true when certificateArn set). */
+    sslRedirect?: boolean;
+    /** Backend path prefix override. */
+    backendPathPrefix?: string;
+    /** Enable cookie-based affinity (default: false). */
+    cookieAffinity?: boolean;
+    /** Additional annotations on the Ingress. */
+    annotations?: Record<string, string>;
+    /** Additional labels to apply to all resources. */
+    labels?: Record<string, string>;
+    /** Namespace for all resources. */
+    namespace?: string;
+    /** Per-member defaults for fine-grained overrides. */
+    defaults?: {
+        ingress?: Partial<Record<string, unknown>>;
+    };
+}
+export interface AgicIngressResult {
+    ingress: InstanceType<typeof Ingress>;
+}
+/**
+ * Create an AgicIngress composite — returns prop objects for
+ * an Ingress with Azure Application Gateway Ingress Controller annotations.
+ *
+ * @aks
+ * @example
+ * ```ts
+ * import { AgicIngress } from "@intentius/chant-lexicon-k8s";
+ *
+ * const { ingress } = AgicIngress({
+ *   name: "api-ingress",
+ *   hosts: [
+ *     {
+ *       hostname: "api.example.com",
+ *       paths: [{ path: "/", serviceName: "api", servicePort: 80 }],
+ *     },
+ *   ],
+ *   certificateArn: "keyvault-secret-name",
+ *   wafPolicyId: "/subscriptions/.../Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies/my-waf",
+ * });
+ * ```
+ */
+export declare const AgicIngress: import("@intentius/chant").CompositeDefinition<AgicIngressProps, import("@intentius/chant").CompositeMembers>;
+//# sourceMappingURL=agic-ingress.d.ts.map

package/dist/composites/agic-ingress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agic-ingress.d.ts","sourceRoot":"","sources":["../../src/composites/agic-ingress.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,MAAM,WAAW,eAAe;IAC9B,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,KAAK,EAAE,KAAK,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,gBAAgB;IAC/B,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,mCAAmC;IACnC,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,8DAA8D;IAC9D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,8BAA8B;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qCAAqC;IACrC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,2EAA2E;IAC3E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,oCAAoC;IACpC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qDAAqD;IACrD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,6CAA6C;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,mCAAmC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,QAAQ,CAAC,EAAE;QACT,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KAC5C,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,YAAY,CAAC,OAAO,OAAO,CAAC,CAAC;CACvC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,WAAW,+GA8EP,CAAC"}

package/dist/composites/aks-external-dns-agent.d.ts

@@ -0,0 +1,65 @@
+/**
+ * AksExternalDnsAgent composite — Deployment + ServiceAccount + ClusterRole + ClusterRoleBinding.
+ *
+ * @aks Like ExternalDnsAgent but uses --provider=azure and AKS Workload Identity
+ * instead of IRSA for Azure DNS management.
+ */
+import { Deployment, ServiceAccount, ClusterRole, ClusterRoleBinding } from "../generated/index.js";
+export interface AksExternalDnsAgentProps {
+    /** Azure managed identity client ID for Workload Identity. */
+    clientId: string;
+    /** Azure resource group containing the DNS zone. */
+    resourceGroup: string;
+    /** Azure subscription ID. */
+    subscriptionId: string;
+    /** Azure tenant ID. */
+    tenantId: string;
+    /** Domain filters — only manage DNS records for these domains. */
+    domainFilters: string[];
+    /** TXT record owner ID for identifying managed records. */
+    txtOwnerId?: string;
+    /** Source of DNS records (default: "ingress"). */
+    source?: string;
+    /** Agent name (default: "external-dns"). */
+    name?: string;
+    /** Container image (default: "registry.k8s.io/external-dns/external-dns:v0.14.0"). */
+    image?: string;
+    /** Namespace (default: "kube-system"). */
+    namespace?: string;
+    /** Additional labels. */
+    labels?: Record<string, string>;
+    /** Per-member defaults for fine-grained overrides. */
+    defaults?: {
+        deployment?: Partial<Record<string, unknown>>;
+        serviceAccount?: Partial<Record<string, unknown>>;
+        clusterRole?: Partial<Record<string, unknown>>;
+        clusterRoleBinding?: Partial<Record<string, unknown>>;
+    };
+}
+export interface AksExternalDnsAgentResult {
+    deployment: InstanceType<typeof Deployment>;
+    serviceAccount: InstanceType<typeof ServiceAccount>;
+    clusterRole: InstanceType<typeof ClusterRole>;
+    clusterRoleBinding: InstanceType<typeof ClusterRoleBinding>;
+}
+/**
+ * Create an AksExternalDnsAgent composite — returns prop objects for
+ * a Deployment, ServiceAccount (with AKS Workload Identity), ClusterRole, and ClusterRoleBinding.
+ *
+ * @aks
+ * @example
+ * ```ts
+ * import { AksExternalDnsAgent } from "@intentius/chant-lexicon-k8s";
+ *
+ * const { deployment, serviceAccount, clusterRole, clusterRoleBinding } = AksExternalDnsAgent({
+ *   clientId: "00000000-0000-0000-0000-000000000000",
+ *   resourceGroup: "my-rg",
+ *   subscriptionId: "00000000-0000-0000-0000-000000000000",
+ *   tenantId: "00000000-0000-0000-0000-000000000000",
+ *   domainFilters: ["example.com"],
+ *   txtOwnerId: "my-cluster",
+ * });
+ * ```
+ */
+export declare const AksExternalDnsAgent: import("@intentius/chant").CompositeDefinition<AksExternalDnsAgentProps, import("@intentius/chant").CompositeMembers>;
+//# sourceMappingURL=aks-external-dns-agent.d.ts.map

package/dist/composites/aks-external-dns-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aks-external-dns-agent.d.ts","sourceRoot":"","sources":["../../src/composites/aks-external-dns-agent.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAE3F,MAAM,WAAW,wBAAwB;IACvC,8DAA8D;IAC9D,QAAQ,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,aAAa,EAAE,MAAM,CAAC;IACtB,6BAA6B;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,uBAAuB;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,2DAA2D;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sFAAsF;IACtF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yBAAyB;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,sDAAsD;IACtD,QAAQ,CAAC,EAAE;QACT,UAAU,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC9C,cAAc,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAClD,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/C,kBAAkB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KACvD,CAAC;CACH;AAED,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,YAAY,CAAC,OAAO,UAAU,CAAC,CAAC;IAC5C,cAAc,EAAE,YAAY,CAAC,OAAO,cAAc,CAAC,CAAC;IACpD,WAAW,EAAE,YAAY,CAAC,OAAO,WAAW,CAAC,CAAC;IAC9C,kBAAkB,EAAE,YAAY,CAAC,OAAO,kBAAkB,CAAC,CAAC;CAC7D;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,mBAAmB,uHA6IP,CAAC"}

package/dist/composites/alb-ingress.d.ts

@@ -0,0 +1,77 @@
+/**
+ * AlbIngress composite — Ingress with AWS Load Balancer Controller annotations.
+ *
+ * @eks Full `alb.ingress.kubernetes.io/*` annotation set including group name
+ * (shared ALB), SSL redirect, subnets, security groups.
+ */
+import { Ingress } from "../generated/index.js";
+export interface AlbIngressHost {
+    /** Hostname (e.g., "api.example.com"). */
+    hostname: string;
+    /** Path rules for this host. */
+    paths: Array<{
+        path: string;
+        pathType?: string;
+        serviceName: string;
+        /** Port on the Kubernetes Service (not the container port). */
+        servicePort: number;
+    }>;
+}
+export interface AlbIngressProps {
+    /** Ingress name — used in metadata and labels. */
+    name: string;
+    /** Host definitions with paths. */
+    hosts: AlbIngressHost[];
+    /** ALB scheme (default: "internet-facing"). */
+    scheme?: "internet-facing" | "internal";
+    /** Target type (default: "ip"). */
+    targetType?: "ip" | "instance";
+    /** ACM certificate ARN for TLS. */
+    certificateArn?: string;
+    /** WAF Web ACL ARN. */
+    wafAclArn?: string;
+    /** Health check path for target group. */
+    healthCheckPath?: string;
+    /** Ingress group name for shared ALB. */
+    groupName?: string;
+    /** Enable HTTP→HTTPS redirect (default: true when certificateArn set). */
+    sslRedirect?: boolean;
+    /** Additional annotations on the Ingress. */
+    annotations?: Record<string, string>;
+    /** Additional labels to apply to all resources. */
+    labels?: Record<string, string>;
+    /** Namespace for all resources. */
+    namespace?: string;
+    /** Per-member defaults for fine-grained overrides. */
+    defaults?: {
+        ingress?: Partial<Record<string, unknown>>;
+    };
+}
+export interface AlbIngressResult {
+    ingress: InstanceType<typeof Ingress>;
+}
+/**
+ * Create an AlbIngress composite — returns prop objects for
+ * an Ingress with AWS ALB Controller annotations.
+ *
+ * @eks
+ * @example
+ * ```ts
+ * import { AlbIngress } from "@intentius/chant-lexicon-k8s";
+ *
+ * const { ingress } = AlbIngress({
+ *   name: "api-ingress",
+ *   hosts: [
+ *     {
+ *       hostname: "api.example.com",
+ *       paths: [{ path: "/", serviceName: "api", servicePort: 80 }],
+ *     },
+ *   ],
+ *   scheme: "internet-facing",
+ *   certificateArn: "arn:aws:acm:us-east-1:123456789012:certificate/abc-123",
+ *   groupName: "shared-alb",
+ * });
+ * ```
+ */
+export declare const AlbIngress: import("@intentius/chant").CompositeDefinition<AlbIngressProps, import("@intentius/chant").CompositeMembers>;
+//# sourceMappingURL=alb-ingress.d.ts.map

package/dist/composites/alb-ingress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alb-ingress.d.ts","sourceRoot":"","sources":["../../src/composites/alb-ingress.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,MAAM,WAAW,cAAc;IAC7B,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,KAAK,EAAE,KAAK,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,+DAA+D;QAC/D,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,eAAe;IAC9B,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,mCAAmC;IACnC,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,+CAA+C;IAC/C,MAAM,CAAC,EAAE,iBAAiB,GAAG,UAAU,CAAC;IACxC,mCAAmC;IACnC,UAAU,CAAC,EAAE,IAAI,GAAG,UAAU,CAAC;IAC/B,mCAAmC;IACnC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uBAAuB;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,6CAA6C;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,mCAAmC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,QAAQ,CAAC,EAAE;QACT,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KAC5C,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,YAAY,CAAC,OAAO,OAAO,CAAC,CAAC;CACvC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,UAAU,8GA8EP,CAAC"}

package/dist/composites/argo-app.d.ts

@@ -0,0 +1,168 @@
+/**
+ * Argo CD composites — turn Chant build targets into Argo `Application`s.
+ *
+ * The k8s lexicon stays runtime-agnostic: it only emits manifests. These
+ * composites are the opt-in bridge to Argo CD's reconciliation layer. Authoring
+ * an `Application` by hand is ~30 lines of nested YAML; `ArgoAppFor` collapses
+ * it to one call with production-friendly defaults.
+ *
+ * - ArgoAppFor(target, opts)         → a single K8s::Argo::Application
+ * - ArgoAppSetForRegions(regions, …) → one ApplicationSet, fanned out per region
+ * - registerArgoCluster(opts)        → the cluster-registration Secret
+ */
+import { Application as ApplicationResource, ApplicationSet as ApplicationSetResource, Secret as SecretResource } from "../generated/index.js";
+/** Where Argo deploys the synced manifests. `server` and `name` are exclusive. */
+export interface ArgoDestination {
+    /** Target cluster API server URL (e.g. https://kubernetes.default.svc). */
+    server?: string;
+    /** Registered cluster name (alternative to server). */
+    name?: string;
+    /** Namespace the synced resources land in. */
+    namespace: string;
+}
+/** Argo sync policy. Omit `automated` for manual sync. */
+export interface ArgoSyncPolicy {
+    automated?: {
+        /** Delete resources that disappear from git. Default false (and required
+         * false on prod Applications — see ARGO001). */
+        prune?: boolean;
+        /** Revert out-of-band changes back to git state. */
+        selfHeal?: boolean;
+    };
+    /** e.g. ["CreateNamespace=true", "ServerSideApply=true"]. */
+    syncOptions?: string[];
+}
+export interface ArgoAppForOptions {
+    /** Git repository URL the Application syncs from. */
+    repo: string;
+    /** Path within the repo holding the manifests. */
+    path: string;
+    /** Where Argo deploys. Defaults to the in-cluster target if omitted. */
+    destination?: ArgoDestination;
+    /** Git revision to track (default "HEAD"). */
+    targetRevision?: string;
+    /** AppProject the Application belongs to (default "default"). */
+    project?: string;
+    /** Namespace the Application object itself lives in (default "argocd"). */
+    argoNamespace?: string;
+    /** Sync policy. Omit for the safe automated default; pass `{}` for manual. */
+    syncPolicy?: ArgoSyncPolicy;
+    /** Extra labels applied to the Application. */
+    labels?: Record<string, string>;
+    defaults?: {
+        application?: Partial<Record<string, unknown>>;
+    };
+}
+export type ArgoAppForResult = {
+    application: InstanceType<typeof ApplicationResource>;
+};
+/**
+ * Turn a Chant build target into an Argo CD `Application` in one call.
+ *
+ * @example
+ * ```ts
+ * import { ArgoAppFor } from "@intentius/chant-lexicon-k8s";
+ *
+ * export const api = ArgoAppFor("api", {
+ *   repo: "https://github.com/acme/infra",
+ *   path: "dist/api",
+ *   destination: { server: "https://kubernetes.default.svc", namespace: "api" },
+ * });
+ * ```
+ */
+export declare function ArgoAppFor(target: string, options: ArgoAppForOptions): ArgoAppForResult;
+/** Per-region values resolved by the caller's mapper. */
+export interface ArgoRegionTarget {
+    /** Target cluster API server URL for this region. */
+    server?: string;
+    /** Registered cluster name for this region (alternative to server). */
+    name?: string;
+    /** Namespace the synced resources land in. */
+    namespace: string;
+    /** Per-region repo path (overrides the set-level path). */
+    path?: string;
+    /** Per-region git revision (overrides the set-level revision). */
+    targetRevision?: string;
+}
+export interface ArgoAppSetForRegionsOptions {
+    /** Base name; generated Applications are `<region>-<name>`. */
+    name: string;
+    /** Git repository URL the generated Applications sync from. */
+    repo: string;
+    /** Set-level repo path (per-region mapper may override). */
+    path?: string;
+    /** Single static AppProject for every generated Application (see ARGO004). */
+    project?: string;
+    /** Namespace the ApplicationSet object lives in (default "argocd"). */
+    argoNamespace?: string;
+    /** Set-level git revision (default "HEAD"). */
+    targetRevision?: string;
+    /** Sync policy applied to the template. Omit for the safe automated default. */
+    syncPolicy?: ArgoSyncPolicy;
+    /** Extra labels applied to the ApplicationSet. */
+    labels?: Record<string, string>;
+    defaults?: {
+        applicationSet?: Partial<Record<string, unknown>>;
+    };
+}
+export type ArgoAppSetForRegionsResult = {
+    applicationSet: InstanceType<typeof ApplicationSetResource>;
+};
+/**
+ * Emit one `ApplicationSet` that fans out across regions via a list generator —
+ * one synced Application per region, all scoped to a single AppProject.
+ *
+ * @example
+ * ```ts
+ * import { ArgoAppSetForRegions } from "@intentius/chant-lexicon-k8s";
+ *
+ * export const crdb = ArgoAppSetForRegions(
+ *   ["east", "central", "west"],
+ *   (region) => ({
+ *     server: clusterServers[region],
+ *     namespace: `crdb-${region}`,
+ *     path: `dist/${region}`,
+ *   }),
+ *   { name: "crdb", repo: "https://github.com/acme/infra", project: "crdb" },
+ * );
+ * ```
+ */
+export declare function ArgoAppSetForRegions(regions: string[], fn: (region: string) => ArgoRegionTarget, options: ArgoAppSetForRegionsOptions): ArgoAppSetForRegionsResult;
+export interface RegisterArgoClusterOptions {
+    /** Cluster name as Argo will know it (referenced by Application destinations). */
+    name: string;
+    /** Cluster API server URL. */
+    server: string;
+    /**
+     * Argo cluster connection config (TLS, bearer token, exec auth). Serialized
+     * into the Secret's `config` field. See the Argo CD cluster Secret format.
+     */
+    config?: Record<string, unknown> | string;
+    /** Namespace Argo CD runs in (default "argocd"). */
+    argoNamespace?: string;
+    /** Extra labels (merged with the required secret-type label). */
+    labels?: Record<string, string>;
+    defaults?: {
+        secret?: Partial<Record<string, unknown>>;
+    };
+}
+export type RegisterArgoClusterResult = {
+    secret: InstanceType<typeof SecretResource>;
+};
+/**
+ * Register an external cluster with Argo CD — emits the cluster Secret labelled
+ * `argocd.argoproj.io/secret-type: cluster` that ARGO003 looks for.
+ *
+ * @example
+ * ```ts
+ * import { registerArgoCluster } from "@intentius/chant-lexicon-k8s";
+ *
+ * export const east = registerArgoCluster({
+ *   name: "east",
+ *   server: "https://east.example.com",
+ *   config: { tlsClientConfig: { insecure: false } },
+ * });
+ * ```
+ */
+export declare function registerArgoCluster(options: RegisterArgoClusterOptions): RegisterArgoClusterResult;
+//# sourceMappingURL=argo-app.d.ts.map

package/dist/composites/argo-app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"argo-app.d.ts","sourceRoot":"","sources":["../../src/composites/argo-app.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EACL,WAAW,IAAI,mBAAmB,EAClC,cAAc,IAAI,sBAAsB,EACxC,MAAM,IAAI,cAAc,EACzB,MAAM,cAAc,CAAC;AAItB,kFAAkF;AAClF,MAAM,WAAW,eAAe;IAC9B,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,0DAA0D;AAC1D,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,EAAE;QACV;wDACgD;QAChD,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,oDAAoD;QACpD,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC;IACF,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAoCD,MAAM,WAAW,iBAAiB;IAChC,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,8CAA8C;IAC9C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,8EAA8E;IAC9E,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,+CAA+C;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,QAAQ,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;KAAE,CAAC;CAC/D;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,WAAW,EAAE,YAAY,CAAC,OAAO,mBAAmB,CAAC,CAAC;CACvD,CAAA;AA2CD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,gBAAgB,CAEvF;AAID,yDAAyD;AACzD,MAAM,WAAW,gBAAgB;IAC/B,qDAAqD;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,2BAA2B;IAC1C,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gFAAgF;IAChF,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,kDAAkD;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,QAAQ,CAAC,EAAE;QAAE,cAAc,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;KAAE,CAAC;CAClE;AAED,MAAM,MAAM,0BAA0B,GAAG;IACvC,cAAc,EAAE,YAAY,CAAC,OAAO,sBAAsB,CAAC,CAAC;CAC7D,CAAA;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EAAE,EACjB,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,gBAAgB,EACxC,OAAO,EAAE,2BAA2B,GACnC,0BAA0B,CAE5B;AAkFD,MAAM,WAAW,0BAA0B;IACzC,kFAAkF;IAClF,IAAI,EAAE,MAAM,CAAC;IACb,8BAA8B;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC;IAC1C,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,QAAQ,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;KAAE,CAAC;CAC1D;AAED,MAAM,MAAM,yBAAyB,GAAG;IACtC,MAAM,EAAE,YAAY,CAAC,OAAO,cAAc,CAAC,CAAC;CAC7C,CAAA;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,0BAA0B,GAAG,yBAAyB,CAElG"}

package/dist/composites/autoscaled-service.d.ts

@@ -0,0 +1,106 @@
+/**
+ * AutoscaledService composite — Deployment + Service + HPA + PDB.
+ *
+ * A higher-level construct for production HTTP services with autoscaling
+ * and disruption budget. Enforces that HPA targets match the Deployment,
+ * PDB selectors match pod labels, and resource requests are set.
+ */
+import { Deployment, Service, HorizontalPodAutoscaler, PodDisruptionBudget } from "../generated/index.js";
+import type { ContainerSecurityContext } from "./security-context.js";
+export interface AutoscaledServiceProps {
+    /** Application name — used in metadata and labels. */
+    name: string;
+    /** Container image (e.g., "nginx:1.25"). */
+    image: string;
+    /** Container port (default: 80). */
+    port?: number;
+    /** Minimum replicas for HPA (default: 2). */
+    minReplicas?: number;
+    /** Maximum replicas for HPA (required). */
+    maxReplicas: number;
+    /** Target CPU utilization percentage (default: 70). */
+    targetCPUPercent?: number;
+    /** Target memory utilization percentage — if set, adds memory metric. */
+    targetMemoryPercent?: number;
+    /** PDB minAvailable (default: 1). */
+    minAvailable?: number | string;
+    /** CPU request (required — HPA needs resource requests). */
+    cpuRequest: string;
+    /** Memory request (required). */
+    memoryRequest: string;
+    /** CPU limit (optional — left unset if not provided). */
+    cpuLimit?: string;
+    /** Memory limit (optional — left unset if not provided). */
+    memoryLimit?: string;
+    /** Topology spread constraints (default: false). true → zone spreading, object → custom. */
+    topologySpread?: boolean | {
+        maxSkew?: number;
+        topologyKey?: string;
+    };
+    /** Liveness probe path (default: "/healthz"). */
+    livenessPath?: string;
+    /** Readiness probe path (default: "/readyz"). */
+    readinessPath?: string;
+    /** Init containers (e.g., migrations, cert setup). */
+    initContainers?: Array<{
+        name: string;
+        image: string;
+        command?: string[];
+        args?: string[];
+    }>;
+    /** Container security context (supports PSS restricted fields). */
+    securityContext?: ContainerSecurityContext;
+    /** Termination grace period in seconds. */
+    terminationGracePeriodSeconds?: number;
+    /** Priority class name for pod scheduling. */
+    priorityClassName?: string;
+    /** Additional labels to apply to all resources. */
+    labels?: Record<string, string>;
+    /** Namespace for all resources. */
+    namespace?: string;
+    /** Environment variables for the container. */
+    env?: Array<{
+        name: string;
+        value: string;
+    }>;
+    /** Service account name for the pod. */
+    serviceAccountName?: string;
+    /** Volumes to attach to the pod. */
+    volumes?: Array<Record<string, unknown>>;
+    /** Volume mounts for the primary container. */
+    volumeMounts?: Array<Record<string, unknown>>;
+    /** Convenience: auto-generate emptyDir volumes + mounts for writable temp dirs (e.g. ["/tmp", "/var/cache/nginx"]). */
+    tmpDirs?: string[];
+    /** Per-member defaults for fine-grained overrides. */
+    defaults?: {
+        deployment?: Partial<Record<string, unknown>>;
+        service?: Partial<Record<string, unknown>>;
+        hpa?: Partial<Record<string, unknown>>;
+        pdb?: Partial<Record<string, unknown>>;
+    };
+}
+export interface AutoscaledServiceResult {
+    deployment: InstanceType<typeof Deployment>;
+    service: InstanceType<typeof Service>;
+    hpa: InstanceType<typeof HorizontalPodAutoscaler>;
+    pdb: InstanceType<typeof PodDisruptionBudget>;
+}
+/**
+ * Create an AutoscaledService composite — returns prop objects for
+ * a Deployment, Service, HorizontalPodAutoscaler, and PodDisruptionBudget.
+ *
+ * @example
+ * ```ts
+ * import { AutoscaledService } from "@intentius/chant-lexicon-k8s";
+ *
+ * const { deployment, service, hpa, pdb } = AutoscaledService({
+ *   name: "api",
+ *   image: "api:1.0",
+ *   maxReplicas: 10,
+ *   cpuRequest: "100m",
+ *   memoryRequest: "128Mi",
+ * });
+ * ```
+ */
+export declare const AutoscaledService: import("@intentius/chant").CompositeDefinition<AutoscaledServiceProps, import("@intentius/chant").CompositeMembers>;
+//# sourceMappingURL=autoscaled-service.d.ts.map

package/dist/composites/autoscaled-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"autoscaled-service.d.ts","sourceRoot":"","sources":["../../src/composites/autoscaled-service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACjG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAEnE,MAAM,WAAW,sBAAsB;IACrC,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,4CAA4C;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,oCAAoC;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2CAA2C;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yEAAyE;IACzE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,qCAAqC;IACrC,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,4DAA4D;IAC5D,UAAU,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4FAA4F;IAC5F,cAAc,CAAC,EAAE,OAAO,GAAG;QACzB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,iDAAiD;IACjD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iDAAiD;IACjD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sDAAsD;IACtD,cAAc,CAAC,EAAE,KAAK,CAAC;QACrB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QACnB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC,CAAC;IACH,mEAAmE;IACnE,eAAe,CAAC,EAAE,wBAAwB,CAAC;IAC3C,2CAA2C;IAC3C,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,8CAA8C;IAC9C,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,mCAAmC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+CAA+C;IAC/C,GAAG,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7C,wCAAwC;IACxC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oCAAoC;IACpC,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACzC,+CAA+C;IAC/C,YAAY,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9C,uHAAuH;IACvH,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,sDAAsD;IACtD,QAAQ,CAAC,EAAE;QACT,UAAU,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC9C,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3C,GAAG,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACvC,GAAG,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KACxC,CAAC;CACH;AAED,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,YAAY,CAAC,OAAO,UAAU,CAAC,CAAC;IAC5C,OAAO,EAAE,YAAY,CAAC,OAAO,OAAO,CAAC,CAAC;IACtC,GAAG,EAAE,YAAY,CAAC,OAAO,uBAAuB,CAAC,CAAC;IAClD,GAAG,EAAE,YAAY,CAAC,OAAO,mBAAmB,CAAC,CAAC;CAC/C;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,iBAAiB,qHAyLP,CAAC"}

package/dist/composites/azure-disk-storage-class.d.ts

@@ -0,0 +1,48 @@
+/**
+ * AzureDiskStorageClass composite — StorageClass for Azure Disk CSI driver.
+ *
+ * @aks Creates a StorageClass with the `disk.csi.azure.com` provisioner.
+ */
+import { StorageClass } from "../generated/index.js";
+export interface AzureDiskStorageClassProps {
+    /** StorageClass name. */
+    name: string;
+    /** Azure Disk SKU name (default: "Premium_LRS"). */
+    skuName?: string;
+    /** OS disk caching mode (default: "ReadOnly"). */
+    cachingMode?: string;
+    /** Network access policy (default: "AllowAll"). */
+    networkAccessPolicy?: string;
+    /** Reclaim policy (default: "Delete"). */
+    reclaimPolicy?: string;
+    /** Volume binding mode (default: "WaitForFirstConsumer"). */
+    volumeBindingMode?: string;
+    /** Allow volume expansion (default: true). */
+    allowVolumeExpansion?: boolean;
+    /** Additional labels. */
+    labels?: Record<string, string>;
+    /** Per-member defaults for fine-grained overrides. */
+    defaults?: {
+        storageClass?: Partial<Record<string, unknown>>;
+    };
+}
+export interface AzureDiskStorageClassResult {
+    storageClass: InstanceType<typeof StorageClass>;
+}
+/**
+ * Create an AzureDiskStorageClass composite — returns prop objects for
+ * a StorageClass with the Azure Disk CSI provisioner.
+ *
+ * @aks
+ * @example
+ * ```ts
+ * import { AzureDiskStorageClass } from "@intentius/chant-lexicon-k8s";
+ *
+ * const { storageClass } = AzureDiskStorageClass({
+ *   name: "premium-disk",
+ *   skuName: "Premium_LRS",
+ * });
+ * ```
+ */
+export declare const AzureDiskStorageClass: import("@intentius/chant").CompositeDefinition<AzureDiskStorageClassProps, import("@intentius/chant").CompositeMembers>;
+//# sourceMappingURL=azure-disk-storage-class.d.ts.map

package/dist/composites/azure-disk-storage-class.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"azure-disk-storage-class.d.ts","sourceRoot":"","sources":["../../src/composites/azure-disk-storage-class.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,WAAW,0BAA0B;IACzC,yBAAyB;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kDAAkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,0CAA0C;IAC1C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,8CAA8C;IAC9C,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,yBAAyB;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,sDAAsD;IACtD,QAAQ,CAAC,EAAE;QACT,YAAY,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KACjD,CAAC;CACH;AAED,MAAM,WAAW,2BAA2B;IAC1C,YAAY,EAAE,YAAY,CAAC,OAAO,YAAY,CAAC,CAAC;CACjD;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,qBAAqB,yHAsCP,CAAC"}

package/dist/composites/azure-file-storage-class.d.ts

@@ -0,0 +1,46 @@
+/**
+ * AzureFileStorageClass composite — StorageClass for Azure Files CSI driver.
+ *
+ * @aks Creates a StorageClass with the `file.csi.azure.com` provisioner.
+ * Azure Files provides ReadWriteMany access mode (shared across pods/nodes).
+ */
+import { StorageClass } from "../generated/index.js";
+export interface AzureFileStorageClassProps {
+    /** StorageClass name. */
+    name: string;
+    /** Azure Files SKU name (default: "Premium_LRS"). */
+    skuName?: string;
+    /** Protocol for Azure Files (default: "smb"). */
+    protocol?: string;
+    /** Specific Azure file share name (optional; dynamically provisioned if omitted). */
+    shareName?: string;
+    /** Reclaim policy (default: "Delete"). */
+    reclaimPolicy?: string;
+    /** Additional labels. */
+    labels?: Record<string, string>;
+    /** Per-member defaults for fine-grained overrides. */
+    defaults?: {
+        storageClass?: Partial<Record<string, unknown>>;
+    };
+}
+export interface AzureFileStorageClassResult {
+    storageClass: InstanceType<typeof StorageClass>;
+}
+/**
+ * Create an AzureFileStorageClass composite — returns prop objects for
+ * a StorageClass with the Azure Files CSI provisioner.
+ *
+ * @aks
+ * @example
+ * ```ts
+ * import { AzureFileStorageClass } from "@intentius/chant-lexicon-k8s";
+ *
+ * const { storageClass } = AzureFileStorageClass({
+ *   name: "azure-files-shared",
+ *   skuName: "Premium_LRS",
+ *   protocol: "nfs",
+ * });
+ * ```
+ */
+export declare const AzureFileStorageClass: import("@intentius/chant").CompositeDefinition<AzureFileStorageClassProps, import("@intentius/chant").CompositeMembers>;
+//# sourceMappingURL=azure-file-storage-class.d.ts.map

package/dist/composites/azure-file-storage-class.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"azure-file-storage-class.d.ts","sourceRoot":"","sources":["../../src/composites/azure-file-storage-class.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,WAAW,0BAA0B;IACzC,yBAAyB;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qFAAqF;IACrF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yBAAyB;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,sDAAsD;IACtD,QAAQ,CAAC,EAAE;QACT,YAAY,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KACjD,CAAC;CACH;AAED,MAAM,WAAW,2BAA2B;IAC1C,YAAY,EAAE,YAAY,CAAC,OAAO,YAAY,CAAC,CAAC;CACjD;AAED;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,qBAAqB,yHAmCP,CAAC"}