@microagi/alchemy-gcp 0.8.0 → 0.9.0

package/lib/Kubernetes/Helm.d.ts

@@ -0,0 +1,132 @@
+import { Credentials } from "@distilled.cloud/gcp";
+import { Resource } from "alchemy";
+import * as Provider from "alchemy/Provider";
+import * as FileSystem from "effect/FileSystem";
+import * as Path from "effect/Path";
+import type * as GCP from "../Providers.ts";
+/**
+ * Install or upgrade a **Helm release** in a GKE cluster.
+ *
+ * Shells out to the `helm` CLI (v3.8+, required for OCI chart support) with a
+ * temporary kubeconfig minted from the GKE cluster's endpoint + CA + an ADC
+ * bearer token. The release is branded with alchemy-internal labels
+ * (`alchemy_app` / `alchemy_stage` / `alchemy_id`) via `--labels`, so adoption
+ * gating works the same as labelled GCP resources and K8s manifests — a
+ * release created out of band reads back as {@link Unowned} until adopted.
+ *
+ * **Reconcile** runs `helm upgrade --install` (idempotent for both first
+ * install and subsequent upgrades). **Delete** runs `helm uninstall`. **Read**
+ * runs `helm status -o json` and checks the release's labels for ownership.
+ *
+ * Both OCI charts (`oci://…`) and repository charts (`repo/chart` with an
+ * optional `repoUrl`) are supported. Inline `values` are serialized to a
+ * temporary JSON file and passed via `--values`.
+ *
+ * @section Installing a chart
+ * @example OCI chart with inline values
+ * ```typescript
+ * yield* GCP.HelmRelease("ArchilCsi", {
+ *   endpoint: cluster.endpoint,
+ *   caCertificate: cluster.clusterCaCertificate,
+ *   name: "archil-csi-driver",
+ *   namespace: "archil-system",
+ *   chart: "oci://registry-1.docker.io/archildata/csi-driver-chart",
+ *   createNamespace: true,
+ *   values: {
+ *     tolerations: [
+ *       { key: "nvidia.com/gpu", operator: "Equal", value: "present", effect: "NoSchedule" },
+ *     ],
+ *   },
+ * });
+ * ```
+ */
+export type HelmReleaseProps = {
+    /**
+     * GKE control-plane endpoint (IP or hostname, no scheme) — typically
+     * `cluster.endpoint`. A change points at a different cluster → replace.
+     */
+    endpoint: string;
+    /**
+     * Base64-encoded cluster CA certificate (PEM) — typically
+     * `cluster.clusterCaCertificate`. Mutable (can rotate on the same cluster).
+     */
+    caCertificate: string;
+    /** Release name (helm `--name`). Immutable — replace if changed. */
+    name: string;
+    /** Target namespace. Immutable — replace if changed. */
+    namespace: string;
+    /**
+     * Chart reference as you'd pass to `helm install`: an OCI URL
+     * (`oci://registry…/chart`), a `repo/chart` pair, or a local path.
+     * Immutable — replace if changed.
+     */
+    chart: string;
+    /**
+     * Chart version to pin. Mutable (upgrading the chart version is an
+     * in-place `helm upgrade`).
+     */
+    version?: string;
+    /**
+     * Inline Helm values (serialized to a temp JSON file and passed via
+     * `--values`). Mutable.
+     */
+    values?: Record<string, unknown>;
+    /**
+     * Create the namespace if it doesn't exist (`--create-namespace`).
+     * @default false
+     */
+    createNamespace?: boolean;
+    /**
+     * Helm repository URL to add before install (`helm repo add`). Only used
+     * when `chart` is a `repo/chart` reference (not OCI). The repo name is
+     * derived from the first segment of `chart`.
+     */
+    repoUrl?: string;
+    /**
+     * Wait for all Kubernetes resources to be ready before returning
+     * (`--wait --atomic`). Rolls back on failure.
+     * @default false
+     */
+    wait?: boolean;
+    /**
+     * Timeout for `--wait` (Helm duration format, e.g. `"5m"`, `"300s"`).
+     * @default "5m"
+     */
+    timeout?: string;
+    /** Extra labels (alchemy ownership labels merge on top). Mutable. */
+    labels?: Record<string, string>;
+};
+export type HelmReleaseAttributes = {
+    /** Release name. */
+    name: string;
+    /** Namespace. */
+    namespace: string;
+    /** Chart reference (as declared). */
+    chart: string;
+    /** Resolved chart version (from `helm status`). */
+    version: string | undefined;
+    /** Release status (`"deployed"`, `"failed"`, `"pending-rollout"`, …). */
+    status: string | undefined;
+    /** Release revision number (increments on each upgrade). */
+    revision: number | undefined;
+    /** Control-plane endpoint, threaded through for delete/read. */
+    endpoint: string;
+    /** Cluster CA certificate, threaded through for delete/read. */
+    caCertificate: string;
+};
+export type HelmRelease = Resource<"GCP.HelmRelease", HelmReleaseProps, HelmReleaseAttributes, never, GCP.Providers>;
+export declare const HelmRelease: import("alchemy").ResourceClass<HelmRelease>;
+declare const HelmError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "HelmError";
+} & Readonly<A>;
+/** Error from a `helm` CLI invocation. */
+export declare class HelmError extends HelmError_base<{
+    command: string;
+    exitCode: number;
+    stderr: string;
+    stdout: string;
+}> {
+}
+export declare const HelmReleaseProvider: () => import("effect/Layer").Layer<Provider.Provider<HelmRelease>, never, import("alchemy").Stack | import("alchemy").Stage | Credentials | FileSystem.FileSystem | Path.Path | import("effect/unstable/process/ChildProcessSpawner").ChildProcessSpawner>;
+export {};
+//# sourceMappingURL=Helm.d.ts.map

package/lib/Kubernetes/Helm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Helm.d.ts","sourceRoot":"","sources":["../../src/Kubernetes/Helm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAGnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAG7C,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AAIpC,OAAO,KAAK,KAAK,GAAG,MAAM,iBAAiB,CAAC;AAG5C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC;;;OAGG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,qCAAqC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,yEAAyE;IACzE,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,gEAAgE;IAChE,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,QAAQ,CAChC,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,EACrB,KAAK,EACL,GAAG,CAAC,SAAS,CACd,CAAC;AACF,eAAO,MAAM,WAAW,8CAEvB,CAAC;;;;AAEF,0CAA0C;AAC1C,qBAAa,SAAU,SAAQ,eAA8B;IAC3D,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;CAAG;AAsDL,eAAO,MAAM,mBAAmB,4PAiV7B,CAAC"}

package/lib/Kubernetes/Helm.js

@@ -0,0 +1,314 @@
+import { Credentials } from "@distilled.cloud/gcp";
+import { Resource } from "alchemy";
+import { Unowned } from "alchemy/AdoptPolicy";
+import { isResolved, somePropsAreDifferent } from "alchemy/Diff";
+import * as Provider from "alchemy/Provider";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import * as FileSystem from "effect/FileSystem";
+import * as Path from "effect/Path";
+import * as Redacted from "effect/Redacted";
+import * as Stream from "effect/Stream";
+import { ChildProcess } from "effect/unstable/process";
+import { gcpInternalLabels, hasAlchemyLabels } from "../Tags.js";
+export const HelmRelease = Resource("GCP.HelmRelease");
+/** Error from a `helm` CLI invocation. */
+export class HelmError extends Data.TaggedError("HelmError") {
+}
+const toAttributes = (status, parent) => ({
+    name: status?.name ?? parent.name,
+    namespace: status?.namespace ?? parent.namespace,
+    chart: parent.chart,
+    version: status?.chart?.metadata?.version,
+    status: status?.info?.status,
+    revision: status?.revision,
+    endpoint: parent.endpoint,
+    caCertificate: parent.caCertificate,
+});
+/** Mint a fresh GKE connection (bearer token) from props + ADC credentials. */
+const connect = Effect.fn("helm.connect")(function* (props) {
+    const { accessToken } = yield* yield* Credentials;
+    return {
+        endpoint: props.endpoint,
+        caCertificate: props.caCertificate,
+        token: Redacted.value(accessToken),
+    };
+});
+export const HelmReleaseProvider = () => Provider.effect(HelmRelease, Effect.gen(function* () {
+    const fs = yield* FileSystem.FileSystem;
+    const path = yield* Path.Path;
+    /**
+     * Write a temp kubeconfig (and optional values file) to a temp dir,
+     * returning the paths. The temp dir is tied to a Scope via
+     * `acquireRelease` — if any step after `makeTempDirectory` fails, the
+     * dir (which contains the sensitive kubeconfig with an ADC bearer
+     * token) is removed immediately. Callers wrap their body in
+     * `Effect.scoped` so the dir also cleans up on success/interruption.
+     */
+    const prepare = (props) => Effect.acquireRelease(Effect.gen(function* () {
+        const connection = yield* connect(props);
+        const dir = yield* fs.makeTempDirectory({
+            prefix: "helm-alchemy-",
+        });
+        const kubeconfigPath = path.join(dir, "kubeconfig.json");
+        const valuesPath = props.values
+            ? path.join(dir, "values.json")
+            : undefined;
+        // Kubeconfig with the cluster's CA + the ADC bearer token. The CA
+        // is already base64-encoded (as GKE returns it), so it goes
+        // straight into `certificate-authority-data`.
+        const kubeconfig = JSON.stringify({
+            apiVersion: "v1",
+            kind: "Config",
+            clusters: [
+                {
+                    name: "gke",
+                    cluster: {
+                        "certificate-authority-data": props.caCertificate,
+                        server: `https://${props.endpoint}`,
+                    },
+                },
+            ],
+            contexts: [
+                {
+                    name: "gke",
+                    context: { cluster: "gke", user: "gke-user" },
+                },
+            ],
+            "current-context": "gke",
+            users: [
+                {
+                    name: "gke-user",
+                    user: { token: connection.token },
+                },
+            ],
+        });
+        yield* fs.writeFileString(kubeconfigPath, kubeconfig);
+        if (valuesPath && props.values) {
+            // JSON is valid YAML — helm accepts it for --values.
+            yield* fs.writeFileString(valuesPath, JSON.stringify(props.values));
+        }
+        return { dir, kubeconfigPath, valuesPath, connection };
+    }), 
+    // Release: always remove the temp dir, even on success.
+    ({ dir }) => fs.remove(dir, { recursive: true }).pipe(Effect.ignore));
+    /**
+     * Run a `helm` command with `KUBECONFIG` pointing at the temp file and
+     * `HELM_CONFIG_HOME`/`HELM_CACHE_HOME` isolated to the temp dir so
+     * `helm repo add`/`helm repo update` don't mutate the user's global
+     * Helm config. Returns stdout/stderr/exitCode. Scoped so the child
+     * process is cleaned up even on interruption.
+     */
+    const runHelm = Effect.fn("helm.run")(function* (args) {
+        const cmd = ChildProcess.make("helm", args.helmArgs, {
+            shell: false,
+            env: {
+                ...process.env,
+                KUBECONFIG: args.kubeconfigPath,
+                // Isolate helm config/cache to the temp dir so parallel
+                // reconciles or CI jobs don't race on the shared repository
+                // index (~/.config/helm/repositories.yaml).
+                HELM_CONFIG_HOME: args.dir,
+                HELM_CACHE_HOME: args.dir,
+            },
+        });
+        const handle = yield* cmd;
+        const [exitCode, stdout, stderr] = yield* Effect.all([
+            handle.exitCode,
+            Stream.mkString(Stream.decodeText(handle.stdout)),
+            Stream.mkString(Stream.decodeText(handle.stderr)),
+        ], { concurrency: 3 });
+        return { exitCode, stdout, stderr };
+    });
+    /** Run a helm command, mapping a non-zero exit to a HelmError. */
+    const runHelmOrFail = Effect.fn("helm.runOrFail")(function* (args) {
+        const result = yield* runHelm(args);
+        if (result.exitCode !== 0) {
+            return yield* Effect.fail(new HelmError({
+                command: `helm ${args.helmArgs.join(" ")}`,
+                exitCode: result.exitCode,
+                stderr: result.stderr,
+                stdout: result.stdout,
+            }));
+        }
+        return result;
+    });
+    return {
+        // Identity (name/namespace/chart) and endpoint are unchanged by an
+        // in-place upgrade. revision increments on every upgrade — it is NOT
+        // stable (an update must persist the new revision).
+        stables: ["name", "namespace", "chart", "endpoint"],
+        diff: Effect.fn(function* ({ news, olds = {} }) {
+            if (!isResolved(news))
+                return undefined;
+            const o = olds;
+            // endpoint points at a specific cluster, and name/namespace/chart
+            // are the release's identity — any change orphans the old release.
+            if (somePropsAreDifferent(o, news, [
+                "name",
+                "namespace",
+                "chart",
+                "endpoint",
+            ])) {
+                return { action: "replace" };
+            }
+            return undefined;
+        }),
+        reconcile: Effect.fn(function* ({ id, news, session }) {
+            return yield* Effect.scoped(Effect.gen(function* () {
+                const { dir, kubeconfigPath, valuesPath } = yield* prepare(news);
+                // Add helm repo if needed (non-OCI charts with repoUrl).
+                if (news.repoUrl && !news.chart.startsWith("oci://")) {
+                    const repoName = news.chart.split("/")[0];
+                    yield* session.note(`Adding helm repo: ${repoName}`);
+                    yield* runHelmOrFail({
+                        dir,
+                        kubeconfigPath,
+                        helmArgs: [
+                            "repo",
+                            "add",
+                            repoName,
+                            news.repoUrl,
+                            "--force-update",
+                        ],
+                    });
+                    yield* runHelmOrFail({
+                        dir,
+                        kubeconfigPath,
+                        helmArgs: ["repo", "update"],
+                    });
+                }
+                // Build alchemy ownership labels.
+                const labels = {
+                    ...(news.labels ?? {}),
+                    ...(yield* gcpInternalLabels(id)),
+                };
+                const labelsFlag = Object.entries(labels)
+                    .map(([k, v]) => `${k}=${v}`)
+                    .join(",");
+                // helm upgrade --install is idempotent for both first install
+                // and subsequent upgrades. --reset-values makes the declared
+                // `values` authoritative: if a key is removed from `values`,
+                // the next upgrade reverts it to the chart default rather than
+                // silently retaining the prior release's value.
+                const helmArgs = [
+                    "upgrade",
+                    "--install",
+                    "--reset-values",
+                    news.name,
+                    news.chart,
+                    "--namespace",
+                    news.namespace,
+                    ...(news.createNamespace ? ["--create-namespace"] : []),
+                    ...(news.version ? ["--version", news.version] : []),
+                    ...(valuesPath ? ["--values", valuesPath] : []),
+                    ...(labelsFlag ? ["--labels", labelsFlag] : []),
+                    ...(news.wait
+                        ? ["--wait", "--atomic", "--timeout", news.timeout ?? "5m"]
+                        : []),
+                ];
+                yield* session.note(`Running helm upgrade --install ${news.name} ${news.chart}`);
+                yield* runHelmOrFail({ dir, kubeconfigPath, helmArgs });
+                // Read the release status to return fresh attributes.
+                const statusResult = yield* runHelmOrFail({
+                    dir,
+                    kubeconfigPath,
+                    helmArgs: [
+                        "status",
+                        news.name,
+                        "--namespace",
+                        news.namespace,
+                        "-o",
+                        "json",
+                    ],
+                });
+                const status = JSON.parse(statusResult.stdout);
+                return toAttributes(status, {
+                    name: news.name,
+                    namespace: news.namespace,
+                    chart: news.chart,
+                    endpoint: news.endpoint,
+                    caCertificate: news.caCertificate,
+                });
+            }));
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* Effect.scoped(Effect.gen(function* () {
+                const { dir, kubeconfigPath } = yield* prepare(output);
+                const result = yield* runHelm({
+                    dir,
+                    kubeconfigPath,
+                    helmArgs: [
+                        "uninstall",
+                        output.name,
+                        "--namespace",
+                        output.namespace,
+                    ],
+                });
+                // "release: not found" is success (idempotent teardown).
+                if (result.exitCode !== 0 &&
+                    !/not found/i.test(result.stderr)) {
+                    return yield* Effect.fail(new HelmError({
+                        command: `helm uninstall ${output.name}`,
+                        exitCode: result.exitCode,
+                        stderr: result.stderr,
+                        stdout: result.stdout,
+                    }));
+                }
+            }));
+        }),
+        read: Effect.fn(function* ({ id, output, olds }) {
+            const endpoint = output?.endpoint ?? olds?.endpoint;
+            const caCertificate = output?.caCertificate ?? olds?.caCertificate;
+            const name = output?.name ?? olds?.name;
+            const namespace = output?.namespace ?? olds?.namespace;
+            const chart = output?.chart ?? olds?.chart;
+            if (!endpoint || !caCertificate || !name || !namespace || !chart) {
+                return undefined;
+            }
+            return yield* Effect.scoped(Effect.gen(function* () {
+                const { dir, kubeconfigPath } = yield* prepare({
+                    endpoint,
+                    caCertificate,
+                });
+                const result = yield* runHelm({
+                    dir,
+                    kubeconfigPath,
+                    helmArgs: [
+                        "status",
+                        name,
+                        "--namespace",
+                        namespace,
+                        "-o",
+                        "json",
+                    ],
+                });
+                // Release not found → absent.
+                if (result.exitCode !== 0 &&
+                    /not found/i.test(result.stderr)) {
+                    return undefined;
+                }
+                if (result.exitCode !== 0) {
+                    return yield* Effect.fail(new HelmError({
+                        command: `helm status ${name}`,
+                        exitCode: result.exitCode,
+                        stderr: result.stderr,
+                        stdout: result.stdout,
+                    }));
+                }
+                const status = JSON.parse(result.stdout);
+                const attrs = toAttributes(status, {
+                    name,
+                    namespace,
+                    chart,
+                    endpoint,
+                    caCertificate,
+                });
+                return (yield* hasAlchemyLabels(id, status.labels))
+                    ? attrs
+                    : Unowned(attrs);
+            }));
+        }),
+    };
+}));
+//# sourceMappingURL=Helm.js.map

package/lib/Kubernetes/Helm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Helm.js","sourceRoot":"","sources":["../../src/Kubernetes/Helm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAyHjE,MAAM,CAAC,MAAM,WAAW,GAAG,QAAQ,CACjC,iBAAiB,CAClB,CAAC;AAEF,0CAA0C;AAC1C,MAAM,OAAO,SAAU,SAAQ,IAAI,CAAC,WAAW,CAAC,WAAW,CAKzD;CAAG;AAqBL,MAAM,YAAY,GAAG,CACnB,MAAqC,EACrC,MAMC,EACsB,EAAE,CAAC,CAAC;IAC3B,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,MAAM,CAAC,IAAI;IACjC,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,MAAM,CAAC,SAAS;IAChD,KAAK,EAAE,MAAM,CAAC,KAAK;IACnB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO;IACzC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;IAC5B,QAAQ,EAAE,MAAM,EAAE,QAAQ;IAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;IACzB,aAAa,EAAE,MAAM,CAAC,aAAa;CACpC,CAAC,CAAC;AAEH,+EAA+E;AAC/E,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,EAAE,KAGpD;IACC,MAAM,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC;IAClD,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;KACnC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,EAAE,CACtC,QAAQ,CAAC,MAAM,CACb,WAAW,EACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IAE9B;;;;;;;OAOG;IACH,MAAM,OAAO,GAAG,CAAC,KAIhB,EAAE,EAAE,CACH,MAAM,CAAC,cAAc,CACnB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC;YACtC,MAAM,EAAE,eAAe;SACxB,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM;YAC7B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC;YAC/B,CAAC,CAAC,SAAS,CAAC;QAEd,kEAAkE;QAClE,4DAA4D;QAC5D,8CAA8C;QAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;YAChC,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,KAAK;oBACX,OAAO,EAAE;wBACP,4BAA4B,EAAE,KAAK,CAAC,aAAa;wBACjD,MAAM,EAAE,WAAW,KAAK,CAAC,QAAQ,EAAE;qBACpC;iBACF;aACF;YACD,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,KAAK;oBACX,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE;iBAC9C;aACF;YACD,iBAAiB,EAAE,KAAK;YACxB,KAAK,EAAE;gBACL;oBACE,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE;iBAClC;aACF;SACF,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QAEtD,IAAI,UAAU,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YAC/B,qDAAqD;YACrD,KAAK,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACtE,CAAC;QAED,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IACzD,CAAC,CAAC;IACF,wDAAwD;IACxD,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CACrE,CAAC;IAEJ;;;;;;OAMG;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,EAAE,IAIhD;QACC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE;YACnD,KAAK,EAAE,KAAK;YACZ,GAAG,EAAE;gBACH,GAAG,OAAO,CAAC,GAAG;gBACd,UAAU,EAAE,IAAI,CAAC,cAAc;gBAC/B,wDAAwD;gBACxD,4DAA4D;gBAC5D,4CAA4C;gBAC5C,gBAAgB,EAAE,IAAI,CAAC,GAAG;gBAC1B,eAAe,EAAE,IAAI,CAAC,GAAG;aAC1B;SACF,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC;QAC1B,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAClD;YACE,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACjD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;SACzC,EACV,EAAE,WAAW,EAAE,CAAC,EAAE,CACnB,CAAC;QACF,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAClE,MAAM,aAAa,GAAG,MAAM,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,QAAQ,CAAC,EAAE,IAI5D;QACC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,SAAS,CAAC;gBACZ,OAAO,EAAE,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAC1C,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,mEAAmE;QACnE,qEAAqE;QACrE,oDAAoD;QACpD,OAAO,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,CAAC;QACnD,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE;YAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,MAAM,CAAC,GAAG,IAAwB,CAAC;YACnC,kEAAkE;YAClE,mEAAmE;YACnE,IACE,qBAAqB,CAAC,CAAC,EAAE,IAAI,EAAE;gBAC7B,MAAM;gBACN,WAAW;gBACX,OAAO;gBACP,UAAU;aACX,CAAC,EACF,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YACnD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CACzB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAClB,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAEjE,yDAAyD;gBACzD,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC1C,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;oBACrD,KAAK,CAAC,CAAC,aAAa,CAAC;wBACnB,GAAG;wBACH,cAAc;wBACd,QAAQ,EAAE;4BACR,MAAM;4BACN,KAAK;4BACL,QAAQ;4BACR,IAAI,CAAC,OAAO;4BACZ,gBAAgB;yBACjB;qBACF,CAAC,CAAC;oBACH,KAAK,CAAC,CAAC,aAAa,CAAC;wBACnB,GAAG;wBACH,cAAc;wBACd,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;qBAC7B,CAAC,CAAC;gBACL,CAAC;gBAED,kCAAkC;gBAClC,MAAM,MAAM,GAAG;oBACb,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;oBACtB,GAAG,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;iBAClC,CAAC;gBACF,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;qBACtC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;qBAC5B,IAAI,CAAC,GAAG,CAAC,CAAC;gBAEb,8DAA8D;gBAC9D,6DAA6D;gBAC7D,6DAA6D;gBAC7D,+DAA+D;gBAC/D,gDAAgD;gBAChD,MAAM,QAAQ,GAAG;oBACf,SAAS;oBACT,WAAW;oBACX,gBAAgB;oBAChB,IAAI,CAAC,IAAI;oBACT,IAAI,CAAC,KAAK;oBACV,aAAa;oBACb,IAAI,CAAC,SAAS;oBACd,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/C,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/C,GAAG,CAAC,IAAI,CAAC,IAAI;wBACX,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;wBAC3D,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC;gBAEF,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,kCAAkC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAC5D,CAAC;gBACF,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAExD,sDAAsD;gBACtD,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;oBACxC,GAAG;oBACH,cAAc;oBACd,QAAQ,EAAE;wBACR,QAAQ;wBACR,IAAI,CAAC,IAAI;wBACT,aAAa;wBACb,IAAI,CAAC,SAAS;wBACd,IAAI;wBACJ,MAAM;qBACP;iBACF,CAAC,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,YAAY,CAAC,MAAM,CACC,CAAC;gBAEvB,OAAO,YAAY,CAAC,MAAM,EAAE;oBAC1B,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,aAAa,EAAE,IAAI,CAAC,aAAa;iBAClC,CAAC,CAAC;YACL,CAAC,CAAC,CACH,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAClB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAClB,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAEvD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC;oBAC5B,GAAG;oBACH,cAAc;oBACd,QAAQ,EAAE;wBACR,WAAW;wBACX,MAAM,CAAC,IAAI;wBACX,aAAa;wBACb,MAAM,CAAC,SAAS;qBACjB;iBACF,CAAC,CAAC;gBACH,yDAAyD;gBACzD,IACE,MAAM,CAAC,QAAQ,KAAK,CAAC;oBACrB,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EACjC,CAAC;oBACD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,SAAS,CAAC;wBACZ,OAAO,EAAE,kBAAkB,MAAM,CAAC,IAAI,EAAE;wBACxC,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;qBACtB,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,CACH,CAAC;QACJ,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;YAC7C,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,IAAI,EAAE,QAAQ,CAAC;YACpD,MAAM,aAAa,GAAG,MAAM,EAAE,aAAa,IAAI,IAAI,EAAE,aAAa,CAAC;YACnE,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,CAAC;YACxC,MAAM,SAAS,GAAG,MAAM,EAAE,SAAS,IAAI,IAAI,EAAE,SAAS,CAAC;YACvD,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,CAAC;YAC3C,IAAI,CAAC,QAAQ,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC;gBACjE,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CACzB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAClB,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC;oBAC7C,QAAQ;oBACR,aAAa;iBACd,CAAC,CAAC;gBAEH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC;oBAC5B,GAAG;oBACH,cAAc;oBACd,QAAQ,EAAE;wBACR,QAAQ;wBACR,IAAI;wBACJ,aAAa;wBACb,SAAS;wBACT,IAAI;wBACJ,MAAM;qBACP;iBACF,CAAC,CAAC;gBAEH,8BAA8B;gBAC9B,IACE,MAAM,CAAC,QAAQ,KAAK,CAAC;oBACrB,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAChC,CAAC;oBACD,OAAO,SAAS,CAAC;gBACnB,CAAC;gBACD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;oBAC1B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,SAAS,CAAC;wBACZ,OAAO,EAAE,eAAe,IAAI,EAAE;wBAC9B,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;qBACtB,CAAC,CACH,CAAC;gBACJ,CAAC;gBAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAsB,CAAC;gBAC9D,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,EAAE;oBACjC,IAAI;oBACJ,SAAS;oBACT,KAAK;oBACL,QAAQ;oBACR,aAAa;iBACd,CAAC,CAAC;gBACH,OAAO,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;oBACjD,CAAC,CAAC,KAAK;oBACP,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC,CAAC,CACH,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/Kubernetes/index.d.ts

@@ -1,3 +1,4 @@
+export * from "./Helm.ts";
 export * from "./KubernetesManifest.ts";
 export * from "./Secret.ts";
 //# sourceMappingURL=index.d.ts.map

package/lib/Kubernetes/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/Kubernetes/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC;AACxC,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/Kubernetes/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,yBAAyB,CAAC;AACxC,cAAc,aAAa,CAAC"}

package/lib/Kubernetes/index.js

@@ -1,3 +1,4 @@
+export * from "./Helm.js";
 export * from "./KubernetesManifest.js";
 export * from "./Secret.js";
 //# sourceMappingURL=index.js.map

package/lib/Kubernetes/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/Kubernetes/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC;AACxC,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/Kubernetes/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,yBAAyB,CAAC;AACxC,cAAc,aAAa,CAAC"}

package/lib/Providers.d.ts

@@ -19,6 +19,6 @@ export type ProviderRequirements = Layer.Services<ReturnType<typeof providers>>;
  * re-provide it here, mirroring `AWS/Providers.ts` and
  * `Cloudflare/Providers.ts`.
  */
-export declare const providers: () => Layer.Layer<import("@distilled.cloud/gcp").Credentials | Providers, never, import("alchemy").Stack | import("alchemy").Stage | import("effect/unstable/http/HttpClient").HttpClient | import("alchemy").AuthProviders | import("alchemy/Auth/Profile").AlchemyProfile>;
+export declare const providers: () => Layer.Layer<import("@distilled.cloud/gcp").Credentials | Providers, never, import("alchemy").Stack | import("alchemy").Stage | import("effect/unstable/http/HttpClient").HttpClient | import("effect/FileSystem").FileSystem | import("effect/Path").Path | import("effect/unstable/process/ChildProcessSpawner").ChildProcessSpawner | import("alchemy").AuthProviders | import("alchemy/Auth/Profile").AlchemyProfile>;
 export {};
 //# sourceMappingURL=Providers.d.ts.map

package/lib/Providers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Providers.d.ts","sourceRoot":"","sources":["../src/Providers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;;AAmDtC,qBAAa,SAAU,SAAQ,cAA+C;CAAG;AAEjF,MAAM,MAAM,oBAAoB,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC;AAEhF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,SAAS,8QA+DnB,CAAC"}
+{"version":3,"file":"Providers.d.ts","sourceRoot":"","sources":["../src/Providers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;;AA+DtC,qBAAa,SAAU,SAAQ,cAA+C;CAAG;AAEjF,MAAM,MAAM,oBAAoB,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC;AAEhF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,SAAS,gaAqEnB,CAAC"}

package/lib/Providers.js

@@ -15,12 +15,15 @@ import { Subnetwork, SubnetworkProvider } from "./Compute/Subnetwork.js";
 import { Cluster, ClusterProvider } from "./Container/Cluster.js";
 import { NodePool, NodePoolProvider } from "./Container/NodePool.js";
 import { ServiceAccount, ServiceAccountProvider, } from "./Iam/ServiceAccount.js";
+import { ServiceAccountKey, ServiceAccountKeyProvider, } from "./Iam/ServiceAccountKey.js";
+import { HelmRelease, HelmReleaseProvider, } from "./Kubernetes/Helm.js";
 import { KubernetesManifest, KubernetesManifestProvider, } from "./Kubernetes/KubernetesManifest.js";
 import { KubernetesSecret, KubernetesSecretProvider, } from "./Kubernetes/Secret.js";
 import { ManagedLustreInstance, ManagedLustreInstanceProvider, } from "./ManagedLustre/Instance.js";
 import { Job, JobProvider } from "./Run/Job.js";
 import { Service, ServiceProvider } from "./Run/Service.js";
 import { PsaConnection, PsaConnectionProvider, } from "./ServiceNetworking/PsaConnection.js";
+import { StorageBucket, StorageBucketProvider, } from "./Storage/Bucket.js";
 import { ApiEnable, ApiEnableProvider } from "./ServiceUsage/ApiEnable.js";
 import { SqlDatabase, SqlDatabaseProvider } from "./Sqladmin/Database.js";
 import { SqlInstance, SqlInstanceProvider } from "./Sqladmin/Instance.js";
@@ -57,6 +60,7 @@ export const providers = () => Layer.effect(Providers, Provider.collection([
     SharedVpcServiceProject,
     PsaConnection,
     ManagedLustreInstance,
+    StorageBucket,
     Service,
     Job,
     SqlInstance,
@@ -64,9 +68,11 @@ export const providers = () => Layer.effect(Providers, Provider.collection([
     SqlUser,
     ArtifactRegistryRepository,
     ServiceAccount,
+    ServiceAccountKey,
     KubernetesSecret,
     KubernetesManifest,
-])).pipe(Layer.provide(Layer.mergeAll(ProjectProvider(), ClusterProvider(), NodePoolProvider(), ApiEnableProvider(), NetworkProvider(), SubnetworkProvider(), FirewallProvider(), AddressProvider(), ForwardingRuleProvider(), GlobalAddressProvider(), SharedVpcHostProvider(), SharedVpcServiceProjectProvider(), PsaConnectionProvider(), ManagedLustreInstanceProvider(), ServiceProvider(), JobProvider(), SqlInstanceProvider(), SqlDatabaseProvider(), SqlUserProvider(), ArtifactRegistryRepositoryProvider(), ServiceAccountProvider(), KubernetesSecretProvider(), KubernetesManifestProvider())), Layer.provideMerge(fromAuthProvider()), Layer.provideMerge(GCPAuth), 
+    HelmRelease,
+])).pipe(Layer.provide(Layer.mergeAll(ProjectProvider(), ClusterProvider(), NodePoolProvider(), ApiEnableProvider(), NetworkProvider(), SubnetworkProvider(), FirewallProvider(), AddressProvider(), ForwardingRuleProvider(), GlobalAddressProvider(), SharedVpcHostProvider(), SharedVpcServiceProjectProvider(), PsaConnectionProvider(), ManagedLustreInstanceProvider(), StorageBucketProvider(), ServiceProvider(), JobProvider(), SqlInstanceProvider(), SqlDatabaseProvider(), SqlUserProvider(), ArtifactRegistryRepositoryProvider(), ServiceAccountProvider(), ServiceAccountKeyProvider(), KubernetesSecretProvider(), KubernetesManifestProvider(), HelmReleaseProvider())), Layer.provideMerge(fromAuthProvider()), Layer.provideMerge(GCPAuth), 
 // Auth/config failures (missing ADC, malformed profile) become
 // unrecoverable defects rather than typed errors — mirrors
 // `AWS/Providers.ts` and `Cloudflare/Providers.ts`. Resource lifecycle

package/lib/Providers.js.map

@@ -1 +1 @@
-{"version":3,"file":"Providers.js","sourceRoot":"","sources":["../src/Providers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EACL,0BAA0B,EAC1B,kCAAkC,GACnC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EACL,cAAc,EACd,sBAAsB,GACvB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,EACL,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EACL,cAAc,EACd,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,kBAAkB,EAClB,0BAA0B,GAC3B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,qBAAqB,EACrB,6BAA6B,GAC9B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EACL,aAAa,EACb,qBAAqB,GACtB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAE9D,MAAM,OAAO,SAAU,SAAQ,QAAQ,CAAC,kBAAkB,EAAa,CAAC,KAAK,CAAC;CAAG;AAIjF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,GAAG,EAAE,CAC5B,KAAK,CAAC,MAAM,CACV,SAAS,EACT,QAAQ,CAAC,UAAU,CAAC;IAClB,OAAO;IACP,OAAO;IACP,QAAQ;IACR,SAAS;IACT,OAAO;IACP,UAAU;IACV,QAAQ;IACR,OAAO;IACP,cAAc;IACd,aAAa;IACb,aAAa;IACb,uBAAuB;IACvB,aAAa;IACb,qBAAqB;IACrB,OAAO;IACP,GAAG;IACH,WAAW;IACX,WAAW;IACX,OAAO;IACP,0BAA0B;IAC1B,cAAc;IACd,gBAAgB;IAChB,kBAAkB;CACnB,CAAC,CACH,CAAC,IAAI,CACJ,KAAK,CAAC,OAAO,CACX,KAAK,CAAC,QAAQ,CACZ,eAAe,EAAE,EACjB,eAAe,EAAE,EACjB,gBAAgB,EAAE,EAClB,iBAAiB,EAAE,EACnB,eAAe,EAAE,EACjB,kBAAkB,EAAE,EACpB,gBAAgB,EAAE,EAClB,eAAe,EAAE,EACjB,sBAAsB,EAAE,EACxB,qBAAqB,EAAE,EACvB,qBAAqB,EAAE,EACvB,+BAA+B,EAAE,EACjC,qBAAqB,EAAE,EACvB,6BAA6B,EAAE,EAC/B,eAAe,EAAE,EACjB,WAAW,EAAE,EACb,mBAAmB,EAAE,EACrB,mBAAmB,EAAE,EACrB,eAAe,EAAE,EACjB,kCAAkC,EAAE,EACpC,sBAAsB,EAAE,EACxB,wBAAwB,EAAE,EAC1B,0BAA0B,EAAE,CAC7B,CACF,EACD,KAAK,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC,EACtC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC;AAC3B,+DAA+D;AAC/D,2DAA2D;AAC3D,uEAAuE;AACvE,0DAA0D;AAC1D,KAAK,CAAC,KAAK,CACZ,CAAC"}
+{"version":3,"file":"Providers.js","sourceRoot":"","sources":["../src/Providers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EACL,0BAA0B,EAC1B,kCAAkC,GACnC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EACL,cAAc,EACd,sBAAsB,GACvB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,EACL,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EACL,cAAc,EACd,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,WAAW,EACX,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,kBAAkB,EAClB,0BAA0B,GAC3B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,qBAAqB,EACrB,6BAA6B,GAC9B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EACL,aAAa,EACb,qBAAqB,GACtB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,aAAa,EACb,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAE9D,MAAM,OAAO,SAAU,SAAQ,QAAQ,CAAC,kBAAkB,EAAa,CAAC,KAAK,CAAC;CAAG;AAIjF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,GAAG,EAAE,CAC5B,KAAK,CAAC,MAAM,CACV,SAAS,EACT,QAAQ,CAAC,UAAU,CAAC;IAClB,OAAO;IACP,OAAO;IACP,QAAQ;IACR,SAAS;IACT,OAAO;IACP,UAAU;IACV,QAAQ;IACR,OAAO;IACP,cAAc;IACd,aAAa;IACb,aAAa;IACb,uBAAuB;IACvB,aAAa;IACb,qBAAqB;IACrB,aAAa;IACb,OAAO;IACP,GAAG;IACH,WAAW;IACX,WAAW;IACX,OAAO;IACP,0BAA0B;IAC1B,cAAc;IACd,iBAAiB;IACjB,gBAAgB;IAChB,kBAAkB;IAClB,WAAW;CACZ,CAAC,CACH,CAAC,IAAI,CACJ,KAAK,CAAC,OAAO,CACX,KAAK,CAAC,QAAQ,CACZ,eAAe,EAAE,EACjB,eAAe,EAAE,EACjB,gBAAgB,EAAE,EAClB,iBAAiB,EAAE,EACnB,eAAe,EAAE,EACjB,kBAAkB,EAAE,EACpB,gBAAgB,EAAE,EAClB,eAAe,EAAE,EACjB,sBAAsB,EAAE,EACxB,qBAAqB,EAAE,EACvB,qBAAqB,EAAE,EACvB,+BAA+B,EAAE,EACjC,qBAAqB,EAAE,EACvB,6BAA6B,EAAE,EAC/B,qBAAqB,EAAE,EACvB,eAAe,EAAE,EACjB,WAAW,EAAE,EACb,mBAAmB,EAAE,EACrB,mBAAmB,EAAE,EACrB,eAAe,EAAE,EACjB,kCAAkC,EAAE,EACpC,sBAAsB,EAAE,EACxB,yBAAyB,EAAE,EAC3B,wBAAwB,EAAE,EAC1B,0BAA0B,EAAE,EAC5B,mBAAmB,EAAE,CACtB,CACF,EACD,KAAK,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC,EACtC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC;AAC3B,+DAA+D;AAC/D,2DAA2D;AAC3D,uEAAuE;AACvE,0DAA0D;AAC1D,KAAK,CAAC,KAAK,CACZ,CAAC"}