@konfig.ts/k8s 0.0.1

package/dist/identity.d.ts

@@ -0,0 +1,58 @@
+import type { ConfigMapRef, SecretRef, ServiceAccountRef } from "@konfig.ts/core";
+import { Manifest } from "@konfig.ts/core";
+import type { ConfigMap as K8sConfigMap, Namespace as K8sNamespace, Secret as K8sSecret, ServiceAccount as K8sServiceAccount } from "./.generated/k8s-types";
+type CommonMeta = {
+    readonly labels?: Readonly<Record<string, string>>;
+    readonly annotations?: Readonly<Record<string, string>>;
+};
+export interface NamespaceInput<N extends string> extends CommonMeta {
+    readonly name: N;
+}
+export interface NamespaceManifest<N extends string> extends Manifest.Manifest<K8sNamespace> {
+    readonly ref: N;
+}
+export declare const Namespace: {
+    make: <N extends string>(input: NamespaceInput<N>) => NamespaceManifest<N>;
+};
+export interface ServiceAccountInput<N extends string> extends CommonMeta {
+    readonly name: N;
+    readonly namespace: string;
+    readonly automountServiceAccountToken?: boolean;
+    readonly imagePullSecrets?: ReadonlyArray<{
+        readonly name: SecretRef<string>;
+    }>;
+}
+export interface ServiceAccountManifest<N extends string> extends Manifest.Manifest<K8sServiceAccount> {
+    readonly ref: ServiceAccountRef<N>;
+}
+export declare const ServiceAccount: {
+    make: <N extends string>(input: ServiceAccountInput<N>) => ServiceAccountManifest<N>;
+};
+export interface ConfigMapInput<N extends string, K extends string = string> extends CommonMeta {
+    readonly name: N;
+    readonly namespace: string;
+    readonly data?: Readonly<Record<K, string>>;
+    readonly binaryData?: Readonly<Record<K, string>>;
+    readonly immutable?: boolean;
+}
+export interface ConfigMapManifest<N extends string, K extends string = string> extends Manifest.Manifest<K8sConfigMap> {
+    readonly ref: ConfigMapRef<N, K>;
+}
+export declare const ConfigMap: {
+    make: <const N extends string, const K extends string = string>(input: ConfigMapInput<N, K>) => ConfigMapManifest<N, K>;
+};
+export interface SecretInput<N extends string, Ns extends string = string, K extends string = string> extends CommonMeta {
+    readonly name: N;
+    readonly namespace: Ns;
+    readonly type?: string;
+    readonly data?: Readonly<Record<K, string>>;
+    readonly stringData?: Readonly<Record<K, string>>;
+    readonly immutable?: boolean;
+}
+export interface SecretManifest<N extends string, Ns extends string = string, K extends string = string> extends Manifest.Manifest<K8sSecret> {
+    readonly ref: SecretRef<N, K, Ns>;
+}
+export declare const Secret: {
+    make: <const N extends string, const Ns extends string = string, const K extends string = string>(input: SecretInput<N, Ns, K>) => SecretManifest<N, Ns, K>;
+};
+export {};

package/dist/index.d.ts

@@ -0,0 +1,48 @@
+export * as K8s from "./.generated/k8s-types";
+export { Container, type ContainerInput, type ContainerSpec, type DefineContainerInput, type DefinedPod, type DefinePodInput, Pod, type PodSpecInput, } from "./container";
+export { type ContainerPort, type ContainerProtocol, type ExecAction, type GrpcAction, type HttpGetAction, type HttpHeader, type NamesOf, Port, type PortInput, type PortName, type ProbeTarget, type ServicePortSpec, type TcpSocketAction, } from "./ports";
+export { type ConfigMapEnvInput, EnvVar, type EnvVarSource, type RawEnvInput, type SecretEnvForPodInput, type SecretEnvInput, type ValueEnvInput, } from "./env";
+export { ConfigMap, type ConfigMapInput, type ConfigMapManifest, Namespace, type NamespaceInput, type NamespaceManifest, type SecretInput, type SecretManifest, ServiceAccount, type ServiceAccountInput, type ServiceAccountManifest, } from "./identity";
+import { Environment as _EnvironmentContract } from "@konfig.ts/env";
+/**
+ * `Secret` value namespace — merges the env-contracts side (`define`)
+ * with the K8s side (`make`, `bind`, identity helpers). Importing
+ * `Secret` from `@konfig.ts/k8s` gives you the full surface:
+ *
+ *   Secret.define({ name, namespace, env })  — env contract (from @konfig.ts/env)
+ *   Secret.make({ name, namespace, stringData })  — K8s Secret manifest
+ *   Secret.bind({ secret, backend, source })  — env-to-manifest binder
+ */
+export declare const Secret: {
+    bind: <N extends string, K extends string, E extends Readonly<Record<K, string>>, const Ns extends string = string>(input: import("./secretBind").BindSecretInput<N, K, E, Ns>) => import("./secretBind").DeclaredSecret<N, K, Ns>;
+    make: <const N extends string, const Ns extends string = string, const K extends string = string>(input: import("./identity").SecretInput<N, Ns, K>) => import("./identity").SecretManifest<N, Ns, K>;
+    define: <const N extends string, const E extends Readonly<Record<string, string>>>(input: import("@konfig.ts/env").DefineSecretInput<N, E>) => import("@konfig.ts/env").SecretEntry<N, keyof E & string, E>;
+};
+/**
+ * `Environment` value namespace — merges `define` (env-contracts) with
+ * `bind` + `runtime` (K8s). The same `Environment` symbol carries the
+ * declaration, the manifest binder, and the runtime decoder.
+ */
+export declare const Environment: {
+    bind: <const M extends Readonly<Record<string, import("@konfig.ts/env").EnvMember>>, const Ns extends string = string>(input: import("./environmentBind").BindEnvironmentInput<M, Ns>) => import("./environmentBind").DeclaredEnvironment<M, Ns>;
+    runtime: <M extends Readonly<Record<string, import("@konfig.ts/env").EnvMember>>>(env: _EnvironmentContract<M>) => import("effect/Effect").Effect<import("@konfig.ts/env").EnvironmentShape<M>, import("effect/Config").ConfigError>;
+    define: <const M extends Readonly<Record<string, import("@konfig.ts/env").EnvMember>>>(members: M & ([{ [K in keyof M]: Extract<M[K] extends infer T ? T extends M[K] ? T extends import("@konfig.ts/env").SecretEntry<infer _N extends string, infer _K extends string, infer Envs extends Readonly<Record<infer _K extends string, string>>> ? Envs extends Readonly<Record<string, infer V extends string>> ? V : never : T extends import("@konfig.ts/env").LiteralEntry<infer EnvName extends string, infer _T> ? EnvName : T extends import("@konfig.ts/env").DownwardEntry<infer EnvName_1 extends string> ? EnvName_1 : never : never : never, { [Other in keyof M]: Other extends K ? never : M[Other] extends infer T_1 ? T_1 extends M[Other] ? T_1 extends import("@konfig.ts/env").SecretEntry<infer _N extends string, infer _K extends string, infer Envs extends Readonly<Record<infer _K extends string, string>>> ? Envs extends Readonly<Record<string, infer V extends string>> ? V : never : T_1 extends import("@konfig.ts/env").LiteralEntry<infer EnvName extends string, infer _T> ? EnvName : T_1 extends import("@konfig.ts/env").DownwardEntry<infer EnvName_1 extends string> ? EnvName_1 : never : never : never; }[keyof M]>; }[keyof M]] extends [never] ? M : {
+        readonly _konfig_error: `Environment: envName "${Extract<{ [K in keyof M]: Extract<M[K] extends infer T ? T extends M[K] ? T extends import("@konfig.ts/env").SecretEntry<infer _N extends string, infer _K extends string, infer Envs extends Readonly<Record<infer _K extends string, string>>> ? Envs extends Readonly<Record<string, infer V extends string>> ? V : never : T extends import("@konfig.ts/env").LiteralEntry<infer EnvName extends string, infer _T> ? EnvName : T extends import("@konfig.ts/env").DownwardEntry<infer EnvName_1 extends string> ? EnvName_1 : never : never : never, { [Other in keyof M]: Other extends K ? never : M[Other] extends infer T_1 ? T_1 extends M[Other] ? T_1 extends import("@konfig.ts/env").SecretEntry<infer _N extends string, infer _K extends string, infer Envs extends Readonly<Record<infer _K extends string, string>>> ? Envs extends Readonly<Record<string, infer V extends string>> ? V : never : T_1 extends import("@konfig.ts/env").LiteralEntry<infer EnvName extends string, infer _T> ? EnvName : T_1 extends import("@konfig.ts/env").DownwardEntry<infer EnvName_1 extends string> ? EnvName_1 : never : never : never; }[keyof M]>; }[keyof M], string>}" is claimed by multiple members`;
+    })) => _EnvironmentContract<M>;
+};
+export type { BindSecretInput, DeclaredSecret, } from "./secretBind";
+export type { BindEnvironmentInput, DeclaredDownward, DeclaredEnvironment, DeclaredLiteral, DeclaredMember, HasSecrets, SecretMemberOptions, SecretMemberOptionsFor, SecretMembersOpts, } from "./environmentBind";
+export { type BackendEmitInput, BackendSourceMissing, type BackendTag, type SecretBackend, } from "./backend";
+export { NativeSecret, type NativeSecretOptions } from "./nativeSecret";
+export { hashSecretValues, type HashSecretValuesInput } from "./podHash";
+export { Ingress, type IngressInput, type IngressTLSInput, Service, type ServiceFromContainerInput, type ServiceFromPodSetInput, type ServiceInput, } from "./network";
+export { ClusterRole, ClusterRoleBinding, type ClusterRoleBindingInput, type ClusterRoleInput, NetworkPolicy, type NetworkPolicyEgressRule, type NetworkPolicyFromPodSetInput, type NetworkPolicyIngressRule, type NetworkPolicyInput, type NetworkPolicyPeer, PersistentVolume, PersistentVolumeClaim, type PersistentVolumeClaimInput, type PersistentVolumeInput, Role, RoleBinding, type RoleBindingInput, type RoleInput, } from "./policy";
+export type { ConfigMapRefName, PvcRefName, SecretRefName } from "./refs";
+export { ConfigMapRef, PvcRef, SecretRef, ServiceAccountRef } from "./refs";
+export { Volume } from "./volume";
+export type { EmptyVolumeInput, VolumeFromConfigMapInput, VolumeFromPvcInput, VolumeFromSecretInput, VolumeMount, VolumeName, VolumeNamesOf, } from "./volume";
+export { CronJob, type CronJobInput, Deployment, type DeploymentFromPodSetInput, type DeploymentInput, Job, type JobInput, StatefulSet, type StatefulSetInput, } from "./workload";
+export * as Workload from "./workloadHelpers";
+export { Selector } from "./selector";
+export type { SelectorLabels } from "./selector";
+export { type DefinePodSetInput, PodSet } from "./podSet";