@reyemtech/nimbus 0.1.0 → 1.0.0

package/dist/esm/factories/dns.js

@@ -9,8 +9,6 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createDns = createDns;
 const types_1 = require("../types");
-const aws_1 = require("../aws");
-const azure_1 = require("../azure");
 const types_2 = require("./types");
 /**
  * Create a DNS zone for one or more cloud providers.
@@ -18,34 +16,38 @@ const types_2 = require("./types");
  * @param name - Resource name prefix
  * @param config - DNS configuration with cloud target and optional providerOptions
  * @returns Single IDns for a single cloud target, array for multi-cloud
+ * @throws {UnsupportedFeatureError} If the cloud provider is not supported or Azure options are missing
  *
  * @example
  * ```typescript
- * const dns = createDns("prod", {
+ * const dns = await createDns("prod", {
  *   cloud: "aws",
  *   zoneName: "example.com",
  * });
  * ```
  */
-function createDns(name, config) {
+async function createDns(name, config) {
     if (!(0, types_2.isMultiCloud)(config.cloud)) {
         const target = (0, types_1.resolveCloudTarget)(config.cloud);
         return dispatchDns(name, config, target, config.providerOptions);
     }
     const targets = (0, types_1.resolveCloudTarget)(config.cloud);
-    return targets.map((target) => dispatchDns(`${name}-${target.provider}`, config, target, config.providerOptions));
+    return Promise.all(targets.map((target) => dispatchDns(`${name}-${target.provider}`, config, target, config.providerOptions)));
 }
-function dispatchDns(name, config, target, opts) {
+async function dispatchDns(name, config, target, opts) {
     const targetConfig = { ...config, cloud: { provider: target.provider, region: target.region } };
     switch (target.provider) {
-        case "aws":
-            return (0, aws_1.createRoute53Dns)(name, targetConfig);
+        case "aws": {
+            const { createRoute53Dns } = await import("../aws/index.js");
+            return createRoute53Dns(name, targetConfig);
+        }
         case "azure": {
             const azureOpts = opts?.azure;
             if (!azureOpts) {
                 throw new types_1.UnsupportedFeatureError("Azure requires providerOptions.azure.resourceGroupName", "azure");
             }
-            return (0, azure_1.createAzureDns)(name, targetConfig, {
+            const { createAzureDns } = await import("../azure/index.js");
+            return createAzureDns(name, targetConfig, {
                 resourceGroupName: azureOpts.resourceGroupName,
             });
         }

package/dist/esm/factories/dns.js.map

@@ -1 +1 @@
-{"version":3,"file":"dns.js","sourceRoot":"","sources":["../../../src/factories/dns.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AA8BH,8BAUC;AArCD,oCAAuE;AAEvE,gCAA0C;AAC1C,oCAA0C;AAE1C,mCAAuC;AAOvC;;;;;;;;;;;;;;GAcG;AACH,SAAgB,SAAS,CAAC,IAAY,EAAE,MAAwB;IAC9D,IAAI,CAAC,IAAA,oBAAY,EAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,IAAA,0BAAkB,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChD,OAAO,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,OAAO,GAAG,IAAA,0BAAkB,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAC5B,WAAW,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,CAClF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,IAAY,EACZ,MAAkB,EAClB,MAA2B,EAC3B,IAAuB;IAEvB,MAAM,YAAY,GAAG,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;IAEhG,QAAQ,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxB,KAAK,KAAK;YACR,OAAO,IAAA,sBAAgB,EAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAC9C,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,SAAS,GAAG,IAAI,EAAE,KAAK,CAAC;YAC9B,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,+BAAuB,CAC/B,wDAAwD,EACxD,OAAO,CACR,CAAC;YACJ,CAAC;YACD,OAAO,IAAA,sBAAc,EAAC,IAAI,EAAE,YAAY,EAAE;gBACxC,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;aAC/C,CAAC,CAAC;QACL,CAAC;QACD;YACE,MAAM,IAAI,+BAAuB,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC"}
+{"version":3,"file":"dns.js","sourceRoot":"","sources":["../../../src/factories/dns.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AA6BH,8BAYC;AAtCD,oCAAuE;AAGvE,mCAAuC;AAOvC;;;;;;;;;;;;;;;GAeG;AACI,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,MAAwB;IACpE,IAAI,CAAC,IAAA,oBAAY,EAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,IAAA,0BAAkB,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChD,OAAO,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,OAAO,GAAG,IAAA,0BAAkB,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjD,OAAO,OAAO,CAAC,GAAG,CAChB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACrB,WAAW,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,CAClF,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,IAAY,EACZ,MAAkB,EAClB,MAA2B,EAC3B,IAAuB;IAEvB,MAAM,YAAY,GAAG,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;IAEhG,QAAQ,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxB,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAC7D,OAAO,gBAAgB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAC9C,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,SAAS,GAAG,IAAI,EAAE,KAAK,CAAC;YAC9B,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,+BAAuB,CAC/B,wDAAwD,EACxD,OAAO,CACR,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;YAC7D,OAAO,cAAc,CAAC,IAAI,EAAE,YAAY,EAAE;gBACxC,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;aAC/C,CAAC,CAAC;QACL,CAAC;QACD;YACE,MAAM,IAAI,+BAAuB,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC"}

package/dist/esm/factories/index.d.ts

@@ -12,4 +12,5 @@ export { createNetwork, type ICreateNetworkConfig } from "./network";
 export { createCluster, type ICreateClusterConfig } from "./cluster";
 export { createDns, type ICreateDnsConfig } from "./dns";
 export { createSecrets, type ICreateSecretsConfig } from "./secrets";
+export { createStateBackend, type ICreateStateBackendConfig } from "./state";
 //# sourceMappingURL=index.d.ts.map

package/dist/esm/factories/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/factories/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,YAAY,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAC5F,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAExD,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,OAAO,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/factories/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,YAAY,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAC5F,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAExD,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,OAAO,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,KAAK,yBAAyB,EAAE,MAAM,SAAS,CAAC"}

package/dist/esm/factories/index.js

@@ -8,7 +8,7 @@
  * @module factories
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createSecrets = exports.createDns = exports.createCluster = exports.createNetwork = exports.isMultiCloud = exports.extractProvider = void 0;
+exports.createStateBackend = exports.createSecrets = exports.createDns = exports.createCluster = exports.createNetwork = exports.isMultiCloud = exports.extractProvider = void 0;
 var types_1 = require("./types");
 Object.defineProperty(exports, "extractProvider", { enumerable: true, get: function () { return types_1.extractProvider; } });
 Object.defineProperty(exports, "isMultiCloud", { enumerable: true, get: function () { return types_1.isMultiCloud; } });
@@ -20,4 +20,6 @@ var dns_1 = require("./dns");
 Object.defineProperty(exports, "createDns", { enumerable: true, get: function () { return dns_1.createDns; } });
 var secrets_1 = require("./secrets");
 Object.defineProperty(exports, "createSecrets", { enumerable: true, get: function () { return secrets_1.createSecrets; } });
+var state_1 = require("./state");
+Object.defineProperty(exports, "createStateBackend", { enumerable: true, get: function () { return state_1.createStateBackend; } });
 //# sourceMappingURL=index.js.map

package/dist/esm/factories/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/factories/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAGH,iCAAwD;AAA/C,wGAAA,eAAe,OAAA;AAAE,qGAAA,YAAY,OAAA;AAEtC,qCAAqE;AAA5D,wGAAA,aAAa,OAAA;AACtB,qCAAqE;AAA5D,wGAAA,aAAa,OAAA;AACtB,6BAAyD;AAAhD,gGAAA,SAAS,OAAA;AAClB,qCAAqE;AAA5D,wGAAA,aAAa,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/factories/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAGH,iCAAwD;AAA/C,wGAAA,eAAe,OAAA;AAAE,qGAAA,YAAY,OAAA;AAEtC,qCAAqE;AAA5D,wGAAA,aAAa,OAAA;AACtB,qCAAqE;AAA5D,wGAAA,aAAa,OAAA;AACtB,6BAAyD;AAAhD,gGAAA,SAAS,OAAA;AAClB,qCAAqE;AAA5D,wGAAA,aAAa,OAAA;AACtB,iCAA6E;AAApE,2GAAA,kBAAkB,OAAA"}

package/dist/esm/factories/network.d.ts

@@ -18,23 +18,24 @@ export type ICreateNetworkConfig = INetworkConfig & {
  * @param name - Resource name prefix
  * @param config - Network configuration with cloud target and optional providerOptions
  * @returns Single INetwork for a single cloud target, array for multi-cloud
+ * @throws {UnsupportedFeatureError} If the cloud provider is not supported or Azure options are missing
  *
  * @example
  * ```typescript
  * // Single cloud
- * const network = createNetwork("prod", {
+ * const network = await createNetwork("prod", {
  *   cloud: "aws",
  *   cidr: "10.0.0.0/16",
  *   natStrategy: "fck-nat",
  * });
  *
  * // Multi-cloud
- * const networks = createNetwork("prod", {
+ * const networks = await createNetwork("prod", {
  *   cloud: ["aws", "azure"],
  *   cidr: "10.0.0.0/16",
  *   providerOptions: { azure: { resourceGroupName: "my-rg" } },
  * });
  * ```
  */
-export declare function createNetwork(name: string, config: ICreateNetworkConfig): INetwork | INetwork[];
+export declare function createNetwork(name: string, config: ICreateNetworkConfig): Promise<INetwork | INetwork[]>;
 //# sourceMappingURL=network.d.ts.map

package/dist/esm/factories/network.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"network.d.ts","sourceRoot":"","sources":["../../../src/factories/network.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAM3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAGhD,4CAA4C;AAC5C,MAAM,MAAM,oBAAoB,GAAG,cAAc,GAAG;IAClD,QAAQ,CAAC,eAAe,CAAC,EAAE,gBAAgB,CAAC;CAC7C,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,QAAQ,GAAG,QAAQ,EAAE,CAkB/F"}
+{"version":3,"file":"network.d.ts","sourceRoot":"","sources":["../../../src/factories/network.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAI3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAGhD,4CAA4C;AAC5C,MAAM,MAAM,oBAAoB,GAAG,cAAc,GAAG;IAClD,QAAQ,CAAC,eAAe,CAAC,EAAE,gBAAgB,CAAC;CAC7C,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,oBAAoB,GAC3B,OAAO,CAAC,QAAQ,GAAG,QAAQ,EAAE,CAAC,CAoBhC"}

package/dist/esm/factories/network.js

@@ -11,8 +11,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.createNetwork = createNetwork;
 const network_1 = require("../network");
 const types_1 = require("../types");
-const aws_1 = require("../aws");
-const azure_1 = require("../azure");
 const types_2 = require("./types");
 /**
  * Create a network (VPC/VNet) for one or more cloud providers.
@@ -20,47 +18,51 @@ const types_2 = require("./types");
  * @param name - Resource name prefix
  * @param config - Network configuration with cloud target and optional providerOptions
  * @returns Single INetwork for a single cloud target, array for multi-cloud
+ * @throws {UnsupportedFeatureError} If the cloud provider is not supported or Azure options are missing
  *
  * @example
  * ```typescript
  * // Single cloud
- * const network = createNetwork("prod", {
+ * const network = await createNetwork("prod", {
  *   cloud: "aws",
  *   cidr: "10.0.0.0/16",
  *   natStrategy: "fck-nat",
  * });
  *
  * // Multi-cloud
- * const networks = createNetwork("prod", {
+ * const networks = await createNetwork("prod", {
  *   cloud: ["aws", "azure"],
  *   cidr: "10.0.0.0/16",
  *   providerOptions: { azure: { resourceGroupName: "my-rg" } },
  * });
  * ```
  */
-function createNetwork(name, config) {
+async function createNetwork(name, config) {
     if (!(0, types_2.isMultiCloud)(config.cloud)) {
         const target = (0, types_1.resolveCloudTarget)(config.cloud);
         return dispatchNetwork(name, config, target, config.providerOptions);
     }
     const targets = (0, types_1.resolveCloudTarget)(config.cloud);
     const cidrs = resolveMultiCloudCidrs(config.cidr, targets.length);
-    return targets.map((target, i) => {
+    return Promise.all(targets.map((target, i) => {
         const perTargetConfig = { ...config, cloud: config.cloud, cidr: cidrs[i] };
         return dispatchNetwork(`${name}-${target.provider}`, perTargetConfig, target, config.providerOptions);
-    });
+    }));
 }
-function dispatchNetwork(name, config, target, opts) {
+async function dispatchNetwork(name, config, target, opts) {
     const targetConfig = { ...config, cloud: { provider: target.provider, region: target.region } };
     switch (target.provider) {
-        case "aws":
-            return (0, aws_1.createAwsNetwork)(name, targetConfig, opts?.aws);
+        case "aws": {
+            const { createAwsNetwork } = await import("../aws/index.js");
+            return createAwsNetwork(name, targetConfig, opts?.aws);
+        }
         case "azure": {
             const azureOpts = opts?.azure;
             if (!azureOpts) {
                 throw new types_1.UnsupportedFeatureError("Azure requires providerOptions.azure.resourceGroupName", "azure");
             }
-            return (0, azure_1.createAzureNetwork)(name, targetConfig, {
+            const { createAzureNetwork } = await import("../azure/index.js");
+            return createAzureNetwork(name, targetConfig, {
                 resourceGroupName: azureOpts.resourceGroupName,
                 subnetCount: azureOpts.subnetCount,
             });

package/dist/esm/factories/network.js.map

@@ -1 +1 @@
-{"version":3,"file":"network.js","sourceRoot":"","sources":["../../../src/factories/network.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;AAwCH,sCAkBC;AAvDD,wCAAwD;AACxD,oCAAuE;AAEvE,gCAA0C;AAC1C,oCAA8C;AAE9C,mCAAuC;AAOvC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAgB,aAAa,CAAC,IAAY,EAAE,MAA4B;IACtE,IAAI,CAAC,IAAA,oBAAY,EAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,IAAA,0BAAkB,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChD,OAAO,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,OAAO,GAAG,IAAA,0BAAkB,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAElE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QAC/B,MAAM,eAAe,GAAG,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,OAAO,eAAe,CACpB,GAAG,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,EAC5B,eAAe,EACf,MAAM,EACN,MAAM,CAAC,eAAe,CACvB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CACtB,IAAY,EACZ,MAAsB,EACtB,MAA2B,EAC3B,IAAuB;IAEvB,MAAM,YAAY,GAAG,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;IAEhG,QAAQ,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxB,KAAK,KAAK;YACR,OAAO,IAAA,sBAAgB,EAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACzD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,SAAS,GAAG,IAAI,EAAE,KAAK,CAAC;YAC9B,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,+BAAuB,CAC/B,wDAAwD,EACxD,OAAO,CACR,CAAC;YACJ,CAAC;YACD,OAAO,IAAA,0BAAkB,EAAC,IAAI,EAAE,YAAY,EAAE;gBAC5C,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;gBAC9C,WAAW,EAAE,SAAS,CAAC,WAAW;aACnC,CAAC,CAAC;QACL,CAAC;QACD;YACE,MAAM,IAAI,+BAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAAC,IAAwB,EAAE,KAAa;IACrE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,IAAA,yBAAe,EAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,mBAAS,EAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,WAAW,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;IACjD,OAAO,IAAA,yBAAe,EAAC,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;AACvD,CAAC"}
+{"version":3,"file":"network.js","sourceRoot":"","sources":["../../../src/factories/network.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;AAuCH,sCAuBC;AA3DD,wCAAwD;AACxD,oCAAuE;AAGvE,mCAAuC;AAOvC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACI,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,MAA4B;IAE5B,IAAI,CAAC,IAAA,oBAAY,EAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,IAAA,0BAAkB,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChD,OAAO,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,OAAO,GAAG,IAAA,0BAAkB,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAElE,OAAO,OAAO,CAAC,GAAG,CAChB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACxB,MAAM,eAAe,GAAG,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,OAAO,eAAe,CACpB,GAAG,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,EAC5B,eAAe,EACf,MAAM,EACN,MAAM,CAAC,eAAe,CACvB,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,IAAY,EACZ,MAAsB,EACtB,MAA2B,EAC3B,IAAuB;IAEvB,MAAM,YAAY,GAAG,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;IAEhG,QAAQ,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxB,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAC7D,OAAO,gBAAgB,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,SAAS,GAAG,IAAI,EAAE,KAAK,CAAC;YAC9B,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,+BAAuB,CAC/B,wDAAwD,EACxD,OAAO,CACR,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACjE,OAAO,kBAAkB,CAAC,IAAI,EAAE,YAAY,EAAE;gBAC5C,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;gBAC9C,WAAW,EAAE,SAAS,CAAC,WAAW;aACnC,CAAC,CAAC;QACL,CAAC;QACD;YACE,MAAM,IAAI,+BAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAAC,IAAwB,EAAE,KAAa;IACrE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,IAAA,yBAAe,EAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,mBAAS,EAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,WAAW,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;IACjD,OAAO,IAAA,yBAAe,EAAC,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;AACvD,CAAC"}

package/dist/esm/factories/secrets.d.ts

@@ -17,15 +17,16 @@ export type ICreateSecretsConfig = ISecretsConfig & {
  * @param name - Resource name prefix
  * @param config - Secrets configuration with cloud target and optional providerOptions
  * @returns Single ISecrets for a single cloud target, array for multi-cloud
+ * @throws {UnsupportedFeatureError} If the cloud provider is not supported or Azure options are missing
  *
  * @example
  * ```typescript
- * const secrets = createSecrets("prod", {
+ * const secrets = await createSecrets("prod", {
  *   cloud: "aws",
  *   backend: "aws-secrets-manager",
  * });
  *
- * const secrets = createSecrets("prod", {
+ * const secrets = await createSecrets("prod", {
  *   cloud: "azure",
  *   backend: "azure-key-vault",
  *   providerOptions: {
@@ -34,5 +35,5 @@ export type ICreateSecretsConfig = ISecretsConfig & {
  * });
  * ```
  */
-export declare function createSecrets(name: string, config: ICreateSecretsConfig): ISecrets | ISecrets[];
+export declare function createSecrets(name: string, config: ICreateSecretsConfig): Promise<ISecrets | ISecrets[]>;
 //# sourceMappingURL=secrets.d.ts.map

package/dist/esm/factories/secrets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../../src/factories/secrets.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAK3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAGhD,4CAA4C;AAC5C,MAAM,MAAM,oBAAoB,GAAG,cAAc,GAAG;IAClD,QAAQ,CAAC,eAAe,CAAC,EAAE,gBAAgB,CAAC;CAC7C,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,QAAQ,GAAG,QAAQ,EAAE,CAU/F"}
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../../src/factories/secrets.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAG3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAGhD,4CAA4C;AAC5C,MAAM,MAAM,oBAAoB,GAAG,cAAc,GAAG;IAClD,QAAQ,CAAC,eAAe,CAAC,EAAE,gBAAgB,CAAC;CAC7C,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,oBAAoB,GAC3B,OAAO,CAAC,QAAQ,GAAG,QAAQ,EAAE,CAAC,CAYhC"}

package/dist/esm/factories/secrets.js

@@ -9,8 +9,6 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createSecrets = createSecrets;
 const types_1 = require("../types");
-const aws_1 = require("../aws");
-const azure_1 = require("../azure");
 const types_2 = require("./types");
 /**
  * Create a secrets store for one or more cloud providers.
@@ -18,15 +16,16 @@ const types_2 = require("./types");
  * @param name - Resource name prefix
  * @param config - Secrets configuration with cloud target and optional providerOptions
  * @returns Single ISecrets for a single cloud target, array for multi-cloud
+ * @throws {UnsupportedFeatureError} If the cloud provider is not supported or Azure options are missing
  *
  * @example
  * ```typescript
- * const secrets = createSecrets("prod", {
+ * const secrets = await createSecrets("prod", {
  *   cloud: "aws",
  *   backend: "aws-secrets-manager",
  * });
  *
- * const secrets = createSecrets("prod", {
+ * const secrets = await createSecrets("prod", {
  *   cloud: "azure",
  *   backend: "azure-key-vault",
  *   providerOptions: {
@@ -35,25 +34,28 @@ const types_2 = require("./types");
  * });
  * ```
  */
-function createSecrets(name, config) {
+async function createSecrets(name, config) {
     if (!(0, types_2.isMultiCloud)(config.cloud)) {
         const target = (0, types_1.resolveCloudTarget)(config.cloud);
         return dispatchSecrets(name, config, target, config.providerOptions);
     }
     const targets = (0, types_1.resolveCloudTarget)(config.cloud);
-    return targets.map((target) => dispatchSecrets(`${name}-${target.provider}`, config, target, config.providerOptions));
+    return Promise.all(targets.map((target) => dispatchSecrets(`${name}-${target.provider}`, config, target, config.providerOptions)));
 }
-function dispatchSecrets(name, config, target, opts) {
+async function dispatchSecrets(name, config, target, opts) {
     const targetConfig = { ...config, cloud: { provider: target.provider, region: target.region } };
     switch (target.provider) {
-        case "aws":
-            return (0, aws_1.createAwsSecrets)(name, targetConfig);
+        case "aws": {
+            const { createAwsSecrets } = await import("../aws/index.js");
+            return createAwsSecrets(name, targetConfig);
+        }
         case "azure": {
             const azureOpts = opts?.azure;
             if (!azureOpts?.tenantId) {
                 throw new types_1.UnsupportedFeatureError("Azure requires providerOptions.azure with resourceGroupName and tenantId", "azure");
             }
-            return (0, azure_1.createAzureSecrets)(name, targetConfig, {
+            const { createAzureSecrets } = await import("../azure/index.js");
+            return createAzureSecrets(name, targetConfig, {
                 resourceGroupName: azureOpts.resourceGroupName,
                 tenantId: azureOpts.tenantId,
                 objectId: azureOpts.objectId,

package/dist/esm/factories/secrets.js.map

@@ -1 +1 @@
-{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../../src/factories/secrets.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AAsCH,sCAUC;AA7CD,oCAAuE;AAEvE,gCAA0C;AAC1C,oCAA8C;AAE9C,mCAAuC;AAOvC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAgB,aAAa,CAAC,IAAY,EAAE,MAA4B;IACtE,IAAI,CAAC,IAAA,oBAAY,EAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,IAAA,0BAAkB,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChD,OAAO,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,OAAO,GAAG,IAAA,0BAAkB,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAC5B,eAAe,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,CACtF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,IAAY,EACZ,MAAsB,EACtB,MAA2B,EAC3B,IAAuB;IAEvB,MAAM,YAAY,GAAG,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;IAEhG,QAAQ,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxB,KAAK,KAAK;YACR,OAAO,IAAA,sBAAgB,EAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAC9C,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,SAAS,GAAG,IAAI,EAAE,KAAK,CAAC;YAC9B,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC;gBACzB,MAAM,IAAI,+BAAuB,CAC/B,0EAA0E,EAC1E,OAAO,CACR,CAAC;YACJ,CAAC;YACD,OAAO,IAAA,0BAAkB,EAAC,IAAI,EAAE,YAAY,EAAE;gBAC5C,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;gBAC9C,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,GAAG,EAAE,SAAS,CAAC,GAAG;aACnB,CAAC,CAAC;QACL,CAAC;QACD;YACE,MAAM,IAAI,+BAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClE,CAAC;AACH,CAAC"}
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../../src/factories/secrets.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AAqCH,sCAeC;AAjDD,oCAAuE;AAGvE,mCAAuC;AAOvC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACI,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,MAA4B;IAE5B,IAAI,CAAC,IAAA,oBAAY,EAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,IAAA,0BAAkB,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChD,OAAO,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,OAAO,GAAG,IAAA,0BAAkB,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjD,OAAO,OAAO,CAAC,GAAG,CAChB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACrB,eAAe,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,CACtF,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,IAAY,EACZ,MAAsB,EACtB,MAA2B,EAC3B,IAAuB;IAEvB,MAAM,YAAY,GAAG,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;IAEhG,QAAQ,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxB,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAC7D,OAAO,gBAAgB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAC9C,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,SAAS,GAAG,IAAI,EAAE,KAAK,CAAC;YAC9B,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC;gBACzB,MAAM,IAAI,+BAAuB,CAC/B,0EAA0E,EAC1E,OAAO,CACR,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACjE,OAAO,kBAAkB,CAAC,IAAI,EAAE,YAAY,EAAE;gBAC5C,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;gBAC9C,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,GAAG,EAAE,SAAS,CAAC,GAAG;aACnB,CAAC,CAAC;QACL,CAAC;QACD;YACE,MAAM,IAAI,+BAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClE,CAAC;AACH,CAAC"}

package/dist/esm/factories/state.d.ts

@@ -0,0 +1,33 @@
+/**
+ * State backend factory — creates S3/Azure Blob state storage via a single cloud-agnostic function.
+ *
+ * Dispatches to AWS or Azure based on the `cloud` parameter.
+ *
+ * @module factories/state
+ */
+import type { IStateBackend, IStateBackendConfig } from "../state";
+import type { IProviderOptions } from "./types";
+/** Config for the createStateBackend factory. */
+export type ICreateStateBackendConfig = IStateBackendConfig & {
+    readonly providerOptions?: IProviderOptions;
+};
+/**
+ * Create a state backend (S3/Azure Blob) for one or more cloud providers.
+ *
+ * @param name - Resource name prefix
+ * @param config - State backend configuration with cloud target and optional providerOptions
+ * @returns Single IStateBackend for a single cloud target, array for multi-cloud
+ * @throws {UnsupportedFeatureError} If the cloud provider is not supported or Azure options are missing
+ *
+ * @example
+ * ```typescript
+ * const state = await createStateBackend("prod", {
+ *   cloud: "aws",
+ *   versioning: true,
+ *   encryption: true,
+ *   locking: { enabled: true },
+ * });
+ * ```
+ */
+export declare function createStateBackend(name: string, config: ICreateStateBackendConfig): Promise<IStateBackend | IStateBackend[]>;
+//# sourceMappingURL=state.d.ts.map

package/dist/esm/factories/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../src/factories/state.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAGnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAGhD,iDAAiD;AACjD,MAAM,MAAM,yBAAyB,GAAG,mBAAmB,GAAG;IAC5D,QAAQ,CAAC,eAAe,CAAC,EAAE,gBAAgB,CAAC;CAC7C,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,aAAa,GAAG,aAAa,EAAE,CAAC,CAY1C"}

package/dist/esm/factories/state.js

@@ -0,0 +1,63 @@
+"use strict";
+/**
+ * State backend factory — creates S3/Azure Blob state storage via a single cloud-agnostic function.
+ *
+ * Dispatches to AWS or Azure based on the `cloud` parameter.
+ *
+ * @module factories/state
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createStateBackend = createStateBackend;
+const types_1 = require("../types");
+const types_2 = require("./types");
+/**
+ * Create a state backend (S3/Azure Blob) for one or more cloud providers.
+ *
+ * @param name - Resource name prefix
+ * @param config - State backend configuration with cloud target and optional providerOptions
+ * @returns Single IStateBackend for a single cloud target, array for multi-cloud
+ * @throws {UnsupportedFeatureError} If the cloud provider is not supported or Azure options are missing
+ *
+ * @example
+ * ```typescript
+ * const state = await createStateBackend("prod", {
+ *   cloud: "aws",
+ *   versioning: true,
+ *   encryption: true,
+ *   locking: { enabled: true },
+ * });
+ * ```
+ */
+async function createStateBackend(name, config) {
+    if (!(0, types_2.isMultiCloud)(config.cloud)) {
+        const target = (0, types_1.resolveCloudTarget)(config.cloud);
+        return dispatchStateBackend(name, config, target, config.providerOptions);
+    }
+    const targets = (0, types_1.resolveCloudTarget)(config.cloud);
+    return Promise.all(targets.map((target) => dispatchStateBackend(`${name}-${target.provider}`, config, target, config.providerOptions)));
+}
+async function dispatchStateBackend(name, config, target, opts) {
+    const targetConfig = { ...config, cloud: { provider: target.provider, region: target.region } };
+    switch (target.provider) {
+        case "aws": {
+            const { createAwsStateBackend } = await import("../aws/index.js");
+            return createAwsStateBackend(name, targetConfig, {
+                kmsKeyArn: opts?.aws?.stateKmsKeyArn,
+                forceDestroy: opts?.aws?.stateForceDestroy,
+            });
+        }
+        case "azure": {
+            const azureOpts = opts?.azure;
+            if (!azureOpts) {
+                throw new types_1.UnsupportedFeatureError("Azure requires providerOptions.azure.resourceGroupName", "azure");
+            }
+            const { createAzureStateBackend } = await import("../azure/index.js");
+            return createAzureStateBackend(name, targetConfig, {
+                resourceGroupName: azureOpts.resourceGroupName,
+            });
+        }
+        default:
+            throw new types_1.UnsupportedFeatureError("state-backend", target.provider);
+    }
+}
+//# sourceMappingURL=state.js.map

package/dist/esm/factories/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../../src/factories/state.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AA+BH,gDAeC;AA3CD,oCAAuE;AAGvE,mCAAuC;AAOvC;;;;;;;;;;;;;;;;;GAiBG;AACI,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,MAAiC;IAEjC,IAAI,CAAC,IAAA,oBAAY,EAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,IAAA,0BAAkB,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChD,OAAO,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,OAAO,GAAG,IAAA,0BAAkB,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjD,OAAO,OAAO,CAAC,GAAG,CAChB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACrB,oBAAoB,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,CAC3F,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,IAAY,EACZ,MAA2B,EAC3B,MAA2B,EAC3B,IAAuB;IAEvB,MAAM,YAAY,GAAG,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;IAEhG,QAAQ,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxB,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAClE,OAAO,qBAAqB,CAAC,IAAI,EAAE,YAAY,EAAE;gBAC/C,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,cAAc;gBACpC,YAAY,EAAE,IAAI,EAAE,GAAG,EAAE,iBAAiB;aAC3C,CAAC,CAAC;QACL,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,SAAS,GAAG,IAAI,EAAE,KAAK,CAAC;YAC9B,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,+BAAuB,CAC/B,wDAAwD,EACxD,OAAO,CACR,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACtE,OAAO,uBAAuB,CAAC,IAAI,EAAE,YAAY,EAAE;gBACjD,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;aAC/C,CAAC,CAAC;QACL,CAAC;QACD;YACE,MAAM,IAAI,+BAAuB,CAAC,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxE,CAAC;AACH,CAAC"}

package/dist/esm/factories/types.d.ts

@@ -20,6 +20,10 @@ export interface IAwsProviderOptions {
     readonly addons?: ReadonlyArray<string>;
     /** Endpoint access: "public", "private", or "both". Default: "both". */
     readonly endpointAccess?: "public" | "private" | "both";
+    /** KMS key ARN for state backend encryption. Uses AES256 if not provided. */
+    readonly stateKmsKeyArn?: string;
+    /** Allow Pulumi to destroy the state bucket (for dev/test). Default: false. */
+    readonly stateForceDestroy?: boolean;
 }
 /** Azure-specific options passed through factory functions. */
 export interface IAzureProviderOptions {
@@ -66,10 +70,28 @@ export interface IProviderOptions {
 /**
  * Extract the provider string from a CloudArg for single-target dispatch.
  * For arrays, returns the first element's provider.
+ *
+ * @param cloud - A cloud provider string or CloudTarget object
+ * @returns The cloud provider identifier
+ *
+ * @example
+ * ```typescript
+ * extractProvider("aws"); // "aws"
+ * extractProvider({ provider: "azure", region: "eastus" }); // "azure"
+ * ```
  */
 export declare function extractProvider(cloud: CloudProvider | CloudTarget): CloudProvider;
 /**
  * Check if a CloudArg is a multi-cloud array.
+ *
+ * @param cloud - The cloud argument to check
+ * @returns True if the argument is an array of cloud targets
+ *
+ * @example
+ * ```typescript
+ * isMultiCloud("aws"); // false
+ * isMultiCloud(["aws", "azure"]); // true
+ * ```
  */
 export declare function isMultiCloud(cloud: CloudArg): cloud is ReadonlyArray<CloudProvider | CloudTarget>;
 //# sourceMappingURL=types.d.ts.map

package/dist/esm/factories/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/factories/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAErE,6DAA6D;AAC7D,MAAM,WAAW,mBAAmB;IAClC,kDAAkD;IAClD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,wCAAwC;IACxC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC,4CAA4C;IAC5C,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACxC,wEAAwE;IACxE,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;CACzD;AAED,+DAA+D;AAC/D,MAAM,WAAW,qBAAqB;IACpC,+CAA+C;IAC/C,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjD,0CAA0C;IAC1C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,kDAAkD;IAClD,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,iDAAiD;IACjD,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,+CAA+C;IAC/C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,8DAA8D;IAC9D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,sCAAsC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,0CAA0C;IAC1C,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CACvC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,qBAAqB,CAAC;CACxC;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,aAAa,GAAG,WAAW,GAAG,aAAa,CAGjF;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,QAAQ,GAAG,KAAK,IAAI,aAAa,CAAC,aAAa,GAAG,WAAW,CAAC,CAEjG"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/factories/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAErE,6DAA6D;AAC7D,MAAM,WAAW,mBAAmB;IAClC,kDAAkD;IAClD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,wCAAwC;IACxC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC,4CAA4C;IAC5C,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACxC,wEAAwE;IACxE,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IACxD,6EAA6E;IAC7E,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,+EAA+E;IAC/E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CACtC;AAED,+DAA+D;AAC/D,MAAM,WAAW,qBAAqB;IACpC,+CAA+C;IAC/C,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjD,0CAA0C;IAC1C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,kDAAkD;IAClD,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,iDAAiD;IACjD,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,+CAA+C;IAC/C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,8DAA8D;IAC9D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,sCAAsC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,0CAA0C;IAC1C,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CACvC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,qBAAqB,CAAC;CACxC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,aAAa,GAAG,WAAW,GAAG,aAAa,CAGjF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,QAAQ,GAAG,KAAK,IAAI,aAAa,CAAC,aAAa,GAAG,WAAW,CAAC,CAEjG"}

package/dist/esm/factories/types.js

@@ -13,6 +13,15 @@ exports.isMultiCloud = isMultiCloud;
 /**
  * Extract the provider string from a CloudArg for single-target dispatch.
  * For arrays, returns the first element's provider.
+ *
+ * @param cloud - A cloud provider string or CloudTarget object
+ * @returns The cloud provider identifier
+ *
+ * @example
+ * ```typescript
+ * extractProvider("aws"); // "aws"
+ * extractProvider({ provider: "azure", region: "eastus" }); // "azure"
+ * ```
  */
 function extractProvider(cloud) {
     if (typeof cloud === "string")
@@ -21,6 +30,15 @@ function extractProvider(cloud) {
 }
 /**
  * Check if a CloudArg is a multi-cloud array.
+ *
+ * @param cloud - The cloud argument to check
+ * @returns True if the argument is an array of cloud targets
+ *
+ * @example
+ * ```typescript
+ * isMultiCloud("aws"); // false
+ * isMultiCloud(["aws", "azure"]); // true
+ * ```
  */
 function isMultiCloud(cloud) {
     return Array.isArray(cloud);

package/dist/esm/factories/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/factories/types.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;AAmEH,0CAGC;AAKD,oCAEC;AAdD;;;GAGG;AACH,SAAgB,eAAe,CAAC,KAAkC;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,KAAK,CAAC,QAAQ,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,SAAgB,YAAY,CAAC,KAAe;IAC1C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/factories/types.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;AAgFH,0CAGC;AAcD,oCAEC;AAhCD;;;;;;;;;;;;GAYG;AACH,SAAgB,eAAe,CAAC,KAAkC;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,KAAK,CAAC,QAAQ,CAAC;AACxB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,YAAY,CAAC,KAAe;IAC1C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC"}

package/dist/esm/global-lb/glb.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"glb.d.ts","sourceRoot":"","sources":["../../../src/global-lb/glb.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAE1B,MAAM,cAAc,CAAC;AAEtB;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,yBAAyB,GAChC,mBAAmB,CASrB"}
+{"version":3,"file":"glb.d.ts","sourceRoot":"","sources":["../../../src/global-lb/glb.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAE1B,MAAM,cAAc,CAAC;AAkBtB;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,yBAAyB,GAChC,mBAAmB,CAWrB"}

package/dist/esm/global-lb/glb.js

@@ -45,6 +45,17 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.createGlobalLoadBalancer = createGlobalLoadBalancer;
 const aws = __importStar(require("@pulumi/aws"));
 const pulumi = __importStar(require("@pulumi/pulumi"));
+const types_1 = require("../types");
+/** Default health check interval in seconds. */
+const DEFAULT_HEALTH_CHECK_INTERVAL_SECONDS = 30;
+/** Default health check failure threshold. */
+const DEFAULT_FAILURE_THRESHOLD = 3;
+/** Equal weight for active-active routing (each endpoint gets the same weight). */
+const EQUAL_ROUTING_WEIGHT = 100;
+/** DNS record TTL in seconds for GLB records. */
+const GLB_DNS_TTL_SECONDS = 60;
+/** Geographic continent codes for geo-routing. */
+const GEO_CONTINENTS = ["NA", "EU", "AP", "SA", "AF", "OC"];
 /**
  * Create a Global Load Balancer across multiple clusters.
  *
@@ -70,6 +81,8 @@ function createGlobalLoadBalancer(name, config) {
         case "azure-traffic-manager":
             // Placeholder for future providers
             return createRoute53Glb(name, config);
+        default:
+            (0, types_1.assertNever)(config.dnsProvider);
     }
 }
 function createRoute53Glb(name, config) {
@@ -84,8 +97,8 @@ function createRoute53Glb(name, config) {
             type: hc.protocol === "TCP" ? "TCP" : `${hc.protocol}_STR_MATCH`,
             resourcePath: hc.protocol !== "TCP" ? hc.path : undefined,
             port: hc.port,
-            requestInterval: hc.intervalSeconds ?? 30,
-            failureThreshold: hc.unhealthyThreshold ?? 3,
+            requestInterval: hc.intervalSeconds ?? DEFAULT_HEALTH_CHECK_INTERVAL_SECONDS,
+            failureThreshold: hc.unhealthyThreshold ?? DEFAULT_FAILURE_THRESHOLD,
             fqdn: cluster.endpoint.apply((ep) => {
                 try {
                     return new URL(ep).hostname;
@@ -108,9 +121,9 @@ function createRoute53Glb(name, config) {
                     zoneId: zone.zoneId,
                     name: config.domain,
                     type: "CNAME",
-                    ttl: 60,
+                    ttl: GLB_DNS_TTL_SECONDS,
                     setIdentifier: `${name}-${entry.cluster.name}`,
-                    weightedRoutingPolicies: [{ weight: 100 }],
+                    weightedRoutingPolicies: [{ weight: EQUAL_ROUTING_WEIGHT }],
                     healthCheckId: entry.healthCheck.id,
                     records: [
                         entry.cluster.endpoint.apply((ep) => {
@@ -133,7 +146,7 @@ function createRoute53Glb(name, config) {
                     zoneId: zone.zoneId,
                     name: config.domain,
                     type: "CNAME",
-                    ttl: 60,
+                    ttl: GLB_DNS_TTL_SECONDS,
                     setIdentifier: `${name}-${entry.cluster.name}`,
                     failoverRoutingPolicies: [{ type: i === 0 ? "PRIMARY" : "SECONDARY" }],
                     healthCheckId: entry.healthCheck.id,
@@ -153,16 +166,15 @@ function createRoute53Glb(name, config) {
         }
         case "geo": {
             // Geolocation routing — defaults to continent-based
-            const continents = ["NA", "EU", "AP", "SA", "AF", "OC"];
             for (const [i, entry] of healthChecks.entries()) {
                 new aws.route53.Record(`${name}-record-${i}`, {
                     zoneId: zone.zoneId,
                     name: config.domain,
                     type: "CNAME",
-                    ttl: 60,
+                    ttl: GLB_DNS_TTL_SECONDS,
                     setIdentifier: `${name}-${entry.cluster.name}`,
                     geolocationRoutingPolicies: [
-                        i < continents.length ? { continent: continents[i] } : { country: "*" },
+                        i < GEO_CONTINENTS.length ? { continent: GEO_CONTINENTS[i] } : { country: "*" },
                     ],
                     healthCheckId: entry.healthCheck.id,
                     records: [
@@ -185,7 +197,7 @@ function createRoute53Glb(name, config) {
                         zoneId: zone.zoneId,
                         name: config.domain,
                         type: "CNAME",
-                        ttl: 60,
+                        ttl: GLB_DNS_TTL_SECONDS,
                         setIdentifier: `${name}-default`,
                         geolocationRoutingPolicies: [{ country: "*" }],
                         healthCheckId: fallback.healthCheck.id,
@@ -204,6 +216,8 @@ function createRoute53Glb(name, config) {
             }
             break;
         }
+        default:
+            (0, types_1.assertNever)(config.strategy);
     }
     // Health status output
     const healthStatus = pulumi.all(healthChecks.map((entry) => pulumi.all([pulumi.output(entry.cluster.name), entry.healthCheck.id]).apply(([clusterName]) => ({