@reyemtech/nimbus 0.1.0

package/dist/cjs/azure/secrets.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Azure Key Vault implementation.
+ *
+ * @module azure/secrets
+ */
+import * as pulumi from "@pulumi/pulumi";
+import type { ISecrets, ISecretsConfig } from "../secrets";
+/** Azure-specific secrets options. */
+export interface IAzureSecretsOptions {
+    /** Resource group name. Required for Azure. */
+    readonly resourceGroupName: pulumi.Input<string>;
+    /** Azure AD tenant ID. Required for Key Vault access policies. */
+    readonly tenantId: pulumi.Input<string>;
+    /** Object ID of the principal that should have access to secrets. */
+    readonly objectId?: pulumi.Input<string>;
+    /** Key Vault SKU. Default: "standard". */
+    readonly sku?: "standard" | "premium";
+}
+/**
+ * Create an Azure Key Vault for secret management.
+ *
+ * @example
+ * ```typescript
+ * const secrets = createAzureSecrets("prod", {
+ *   cloud: "azure",
+ *   backend: "azure-key-vault",
+ * }, {
+ *   resourceGroupName: "my-rg",
+ *   tenantId: "00000000-0000-0000-0000-000000000000",
+ * });
+ *
+ * secrets.putSecret("database", { host: "db.example.com", password: dbPassword });
+ * const pw = secrets.getSecretRef({ path: "database", key: "password" });
+ * ```
+ */
+export declare function createAzureSecrets(name: string, config: ISecretsConfig, options: IAzureSecretsOptions): ISecrets;
+//# sourceMappingURL=secrets.d.ts.map

package/dist/cjs/azure/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../../src/azure/secrets.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,EAAc,QAAQ,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGvE,sCAAsC;AACtC,MAAM,WAAW,oBAAoB;IACnC,+CAA+C;IAC/C,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjD,kEAAkE;IAClE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxC,qEAAqE;IACrE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,0CAA0C;IAC1C,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CACvC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,oBAAoB,GAC5B,QAAQ,CAqGV"}

package/dist/cjs/azure/secrets.js

@@ -0,0 +1,150 @@
+"use strict";
+/**
+ * Azure Key Vault implementation.
+ *
+ * @module azure/secrets
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAzureSecrets = createAzureSecrets;
+const azure = __importStar(require("@pulumi/azure-native"));
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const types_1 = require("../types");
+/**
+ * Create an Azure Key Vault for secret management.
+ *
+ * @example
+ * ```typescript
+ * const secrets = createAzureSecrets("prod", {
+ *   cloud: "azure",
+ *   backend: "azure-key-vault",
+ * }, {
+ *   resourceGroupName: "my-rg",
+ *   tenantId: "00000000-0000-0000-0000-000000000000",
+ * });
+ *
+ * secrets.putSecret("database", { host: "db.example.com", password: dbPassword });
+ * const pw = secrets.getSecretRef({ path: "database", key: "password" });
+ * ```
+ */
+function createAzureSecrets(name, config, options) {
+    const cloud = Array.isArray(config.cloud) ? (config.cloud[0] ?? "azure") : config.cloud;
+    const target = (0, types_1.resolveCloudTarget)(cloud);
+    const tags = config.tags ?? {};
+    const rgName = options.resourceGroupName;
+    // Key Vault names must be 3-24 chars, alphanumeric + hyphens
+    const vaultName = name.replace(/[^a-zA-Z0-9-]/g, "-").substring(0, 24);
+    const accessPolicies = [];
+    if (options.objectId) {
+        accessPolicies.push({
+            tenantId: options.tenantId,
+            objectId: options.objectId,
+            permissions: {
+                secrets: ["Get", "List", "Set", "Delete"],
+            },
+        });
+    }
+    const vault = new azure.keyvault.Vault(`${name}-kv`, {
+        vaultName,
+        resourceGroupName: rgName,
+        properties: {
+            tenantId: options.tenantId,
+            sku: {
+                family: "A",
+                name: options.sku === "premium"
+                    ? azure.keyvault.SkuName.Premium
+                    : azure.keyvault.SkuName.Standard,
+            },
+            enableSoftDelete: true,
+            softDeleteRetentionInDays: 90,
+            enableRbacAuthorization: true,
+            accessPolicies,
+        },
+        tags: { ...tags, Name: `${name}-kv` },
+    });
+    // Track created secrets for getSecretRef lookups
+    const secretResources = new Map();
+    return {
+        name,
+        cloud: target,
+        backend: "azure-key-vault",
+        nativeResource: vault,
+        putSecret(path, data) {
+            // Azure Key Vault stores one value per secret, so we JSON-encode multi-key data
+            const secretValue = pulumi.all(data).apply((resolved) => JSON.stringify(resolved));
+            // Key Vault secret names: alphanumeric + hyphens
+            const secretName = path.replace(/[^a-zA-Z0-9-]/g, "-");
+            const secret = new azure.keyvault.Secret(`${name}-${secretName}`, {
+                secretName,
+                vaultName: vault.name,
+                resourceGroupName: rgName,
+                properties: {
+                    value: secretValue,
+                    contentType: "application/json",
+                },
+                tags: { ...tags, path },
+            });
+            secretResources.set(path, secret);
+        },
+        getSecretRef(ref) {
+            const secret = secretResources.get(ref.path);
+            const { key } = ref;
+            if (!secret) {
+                // Lookup existing secret by name convention
+                const secretName = ref.path.replace(/[^a-zA-Z0-9-]/g, "-");
+                const lookup = azure.keyvault.getSecretOutput({
+                    secretName,
+                    vaultName: vault.name,
+                    resourceGroupName: rgName,
+                });
+                if (key) {
+                    return lookup.properties.apply((props) => {
+                        const parsed = JSON.parse(props.value ?? "{}");
+                        return parsed[key] ?? "";
+                    });
+                }
+                return lookup.properties.apply((props) => props.value ?? "");
+            }
+            if (key) {
+                return secret.properties.apply((props) => {
+                    const parsed = JSON.parse(props.value ?? "{}");
+                    return parsed[key] ?? "";
+                });
+            }
+            return secret.properties.apply((props) => props.value ?? "");
+        },
+    };
+}
+//# sourceMappingURL=secrets.js.map

package/dist/cjs/azure/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../../src/azure/secrets.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCH,gDAyGC;AA3ID,4DAA8C;AAC9C,uDAAyC;AAEzC,oCAA8C;AAc9C;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,kBAAkB,CAChC,IAAY,EACZ,MAAsB,EACtB,OAA6B;IAE7B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;IACxF,MAAM,MAAM,GAAG,IAAA,0BAAkB,EAAC,KAAK,CAAC,CAAC;IAEzC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAEzC,6DAA6D;IAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEvE,MAAM,cAAc,GAAuD,EAAE,CAAC;IAC9E,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,cAAc,CAAC,IAAI,CAAC;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,WAAW,EAAE;gBACX,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC;aAC1C;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,IAAI,KAAK,EAAE;QACnD,SAAS;QACT,iBAAiB,EAAE,MAAM;QACzB,UAAU,EAAE;YACV,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,GAAG,EAAE;gBACH,MAAM,EAAE,GAAG;gBACX,IAAI,EACF,OAAO,CAAC,GAAG,KAAK,SAAS;oBACvB,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO;oBAChC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ;aACtC;YACD,gBAAgB,EAAE,IAAI;YACtB,yBAAyB,EAAE,EAAE;YAC7B,uBAAuB,EAAE,IAAI;YAC7B,cAAc;SACf;QACD,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,KAAK,EAAE;KACtC,CAAC,CAAC;IAEH,iDAAiD;IACjD,MAAM,eAAe,GAAG,IAAI,GAAG,EAAiC,CAAC;IAEjE,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,iBAAiB;QAC1B,cAAc,EAAE,KAAK;QAErB,SAAS,CAAC,IAAY,EAAE,IAA0C;YAChE,gFAAgF;YAChF,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;YACnF,iDAAiD;YACjD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;YAEvD,MAAM,MAAM,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,UAAU,EAAE,EAAE;gBAChE,UAAU;gBACV,SAAS,EAAE,KAAK,CAAC,IAAI;gBACrB,iBAAiB,EAAE,MAAM;gBACzB,UAAU,EAAE;oBACV,KAAK,EAAE,WAAW;oBAClB,WAAW,EAAE,kBAAkB;iBAChC;gBACD,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE;aACxB,CAAC,CAAC;YAEH,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;QAED,YAAY,CAAC,GAAe;YAC1B,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;YAEpB,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,4CAA4C;gBAC5C,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;gBAC3D,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC;oBAC5C,UAAU;oBACV,SAAS,EAAE,KAAK,CAAC,IAAI;oBACrB,iBAAiB,EAAE,MAAM;iBAC1B,CAAC,CAAC;gBAEH,IAAI,GAAG,EAAE,CAAC;oBACR,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;wBACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAA2B,CAAC;wBACzE,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;oBAC3B,CAAC,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC/D,CAAC;YAED,IAAI,GAAG,EAAE,CAAC;gBACR,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;oBACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAA2B,CAAC;oBACzE,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC3B,CAAC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC/D,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/cjs/cache/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Cache module — Redis/Memcached/Valkey provisioning abstraction.
+ *
+ * @module cache
+ */
+export type { CacheEngine, CacheMode, CacheArchitecture, ICacheConfig, ICache } from "./interfaces";
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/cache/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cache/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC"}

package/dist/cjs/cache/index.js

@@ -0,0 +1,8 @@
+"use strict";
+/**
+ * Cache module — Redis/Memcached/Valkey provisioning abstraction.
+ *
+ * @module cache
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=index.js.map

package/dist/cjs/cache/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/cache/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG"}

package/dist/cjs/cache/interfaces.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Cache interfaces for @reyemtech/nimbus.
+ *
+ * Abstracts Redis/Memcached/Valkey provisioning — managed services
+ * (ElastiCache, Azure Cache, Memorystore) or Helm-based (Bitnami Redis).
+ *
+ * @module cache/interfaces
+ */
+import type * as pulumi from "@pulumi/pulumi";
+import type { CloudArg, ResolvedCloudTarget } from "../types";
+import type { ISecretRef } from "../secrets";
+/** Supported cache engines. */
+export type CacheEngine = "redis" | "memcached" | "valkey";
+/** Cache deployment mode. */
+export type CacheMode = "managed" | "helm";
+/** Cache architecture. */
+export type CacheArchitecture = "standalone" | "replication" | "cluster";
+/**
+ * Cache configuration input.
+ *
+ * @example
+ * ```typescript
+ * // Bitnami Redis (ReyemTech pattern)
+ * const config: ICacheConfig = {
+ *   cloud: "aws",
+ *   engine: "redis",
+ *   mode: "helm",
+ *   architecture: "replication",
+ *   replicas: 2,
+ *   storageGb: 5,
+ *   metrics: true,
+ * };
+ * ```
+ */
+export interface ICacheConfig {
+    readonly cloud: CloudArg;
+    readonly engine: CacheEngine;
+    readonly mode?: CacheMode;
+    readonly architecture?: CacheArchitecture;
+    readonly replicas?: number;
+    /** Instance class for managed caches. */
+    readonly instanceClass?: string;
+    /** Persistent storage size in GB (for Helm-based). */
+    readonly storageGb?: number;
+    /** Enable Prometheus metrics exporter. */
+    readonly metrics?: boolean;
+    readonly tags?: Readonly<Record<string, string>>;
+}
+/** Cache output — the created cache resource. */
+export interface ICache {
+    readonly name: string;
+    readonly cloud: ResolvedCloudTarget;
+    readonly engine: CacheEngine;
+    readonly endpoint: pulumi.Output<string>;
+    readonly port: pulumi.Output<number>;
+    readonly secretRef?: ISecretRef;
+    /** Escape hatch: cloud-native or Helm release resource. */
+    readonly nativeResource: pulumi.Resource;
+}
+//# sourceMappingURL=interfaces.d.ts.map

package/dist/cjs/cache/interfaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interfaces.d.ts","sourceRoot":"","sources":["../../../src/cache/interfaces.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,+BAA+B;AAC/B,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE3D,6BAA6B;AAC7B,MAAM,MAAM,SAAS,GACjB,SAAS,GACT,MAAM,CAAC;AAEX,0BAA0B;AAC1B,MAAM,MAAM,iBAAiB,GACzB,YAAY,GACZ,aAAa,GACb,SAAS,CAAC;AAEd;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,iBAAiB,CAAC;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,yCAAyC;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,sDAAsD;IACtD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,0CAA0C;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAClD;AAED,iDAAiD;AACjD,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;IAEhC,2DAA2D;IAC3D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC1C"}

package/dist/cjs/cache/interfaces.js

@@ -0,0 +1,11 @@
+"use strict";
+/**
+ * Cache interfaces for @reyemtech/nimbus.
+ *
+ * Abstracts Redis/Memcached/Valkey provisioning — managed services
+ * (ElastiCache, Azure Cache, Memorystore) or Helm-based (Bitnami Redis).
+ *
+ * @module cache/interfaces
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=interfaces.js.map

package/dist/cjs/cache/interfaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interfaces.js","sourceRoot":"","sources":["../../../src/cache/interfaces.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG"}

package/dist/cjs/cluster/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Cluster module — Kubernetes cluster provisioning abstraction.
+ *
+ * @module cluster
+ */
+export type { INodeTaint, INodePool, IClusterConfig, ICluster, IEksClusterExtensions, IAksClusterExtensions, IGkeClusterExtensions, ProviderClusterExtensions, } from "./interfaces";
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/cluster/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cluster/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,YAAY,EACV,UAAU,EACV,SAAS,EACT,cAAc,EACd,QAAQ,EACR,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,cAAc,CAAC"}

package/dist/cjs/cluster/index.js

@@ -0,0 +1,8 @@
+"use strict";
+/**
+ * Cluster module — Kubernetes cluster provisioning abstraction.
+ *
+ * @module cluster
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=index.js.map

package/dist/cjs/cluster/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/cluster/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG"}

package/dist/cjs/cluster/interfaces.d.ts

@@ -0,0 +1,120 @@
+/**
+ * Cluster interfaces for @reyemtech/nimbus.
+ *
+ * Abstracts Kubernetes cluster provisioning across EKS, AKS, and GKE.
+ * Supports EKS Auto Mode, AKS virtual nodes, spot instances, and
+ * multiple node pool configurations.
+ *
+ * @module cluster/interfaces
+ */
+import type * as pulumi from "@pulumi/pulumi";
+import type * as k8s from "@pulumi/kubernetes";
+import type { CloudArg, ResolvedCloudTarget } from "../types";
+/** Kubernetes node taint. */
+export interface INodeTaint {
+    readonly key: string;
+    readonly value: string;
+    readonly effect: "NoSchedule" | "PreferNoSchedule" | "NoExecute";
+}
+/**
+ * Node pool configuration.
+ *
+ * @example
+ * ```typescript
+ * const pool: INodePool = {
+ *   name: "workers",
+ *   instanceType: "c6a.large",
+ *   minNodes: 2,
+ *   maxNodes: 8,
+ *   spot: true,
+ *   labels: { "workload-type": "general" },
+ * };
+ * ```
+ */
+export interface INodePool {
+    readonly name: string;
+    readonly instanceType: string;
+    readonly minNodes: number;
+    readonly maxNodes: number;
+    readonly desiredNodes?: number;
+    readonly spot?: boolean;
+    readonly labels?: Readonly<Record<string, string>>;
+    readonly taints?: ReadonlyArray<INodeTaint>;
+    /** Node pool mode (AKS concept: "system" vs "user"). Maps to labels on other providers. */
+    readonly mode?: "system" | "user";
+}
+/**
+ * Cluster configuration input.
+ *
+ * @example
+ * ```typescript
+ * const config: IClusterConfig = {
+ *   cloud: "aws",
+ *   version: "1.32",
+ *   nodePools: [
+ *     { name: "system", instanceType: "t3.medium", minNodes: 2, maxNodes: 4 },
+ *     { name: "workers", instanceType: "c6a.large", minNodes: 2, maxNodes: 8, spot: true },
+ *   ],
+ * };
+ * ```
+ */
+export interface IClusterConfig {
+    readonly cloud: CloudArg;
+    readonly version?: string;
+    readonly nodePools: ReadonlyArray<INodePool>;
+    /** EKS Auto Mode: no explicit node groups, AWS manages node selection. */
+    readonly autoMode?: boolean;
+    /** AKS: enable Azure Container Instances virtual node. */
+    readonly virtualNodes?: boolean;
+    /** Optional: attach to an existing network. */
+    readonly networkId?: pulumi.Input<string>;
+    readonly tags?: Readonly<Record<string, string>>;
+}
+/**
+ * Cluster output — the created Kubernetes cluster resource.
+ *
+ * Provides a unified interface regardless of the underlying cloud provider.
+ * Use `nativeResource` for cloud-specific operations via escape hatch.
+ */
+export interface ICluster {
+    readonly name: string;
+    readonly cloud: ResolvedCloudTarget;
+    readonly endpoint: pulumi.Output<string>;
+    readonly kubeconfig: pulumi.Output<string>;
+    readonly version: pulumi.Output<string>;
+    readonly nodePools: ReadonlyArray<INodePool>;
+    /**
+     * Escape hatch: access the cloud-native cluster resource.
+     *
+     * @example
+     * ```typescript
+     * const eksCluster = cluster.nativeResource as aws.eks.Cluster;
+     * eksCluster.arn.apply(arn => console.log("EKS ARN:", arn));
+     * ```
+     */
+    readonly nativeResource: pulumi.Resource;
+    /** Pulumi K8s provider for deploying workloads to this cluster. */
+    readonly provider: k8s.Provider;
+}
+/** AWS-specific cluster extensions for EKS. */
+export interface IEksClusterExtensions {
+    readonly provider: "aws";
+    readonly autoMode?: boolean;
+}
+/** Azure-specific cluster extensions for AKS. */
+export interface IAksClusterExtensions {
+    readonly provider: "azure";
+    readonly virtualNodes?: boolean;
+    readonly azureCni?: boolean;
+}
+/** GCP-specific cluster extensions for GKE. */
+export interface IGkeClusterExtensions {
+    readonly provider: "gcp";
+    readonly autopilot?: boolean;
+}
+/**
+ * Discriminated union of provider-specific cluster extensions.
+ * Use `provider` field to narrow the type in a switch/case.
+ */
+export type ProviderClusterExtensions = IEksClusterExtensions | IAksClusterExtensions | IGkeClusterExtensions;
+//# sourceMappingURL=interfaces.d.ts.map

package/dist/cjs/cluster/interfaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interfaces.d.ts","sourceRoot":"","sources":["../../../src/cluster/interfaces.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAC/C,OAAO,KAAK,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAE9D,6BAA6B;AAC7B,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,kBAAkB,GAAG,WAAW,CAAC;CAClE;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;IAC5C,2FAA2F;IAC3F,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;CACnC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IAC7C,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,+CAA+C;IAC/C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAClD;AAED;;;;;GAKG;AACH,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IAE7C;;;;;;;;OAQG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC;IAEzC,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC;CACjC;AAED,+CAA+C;AAC/C,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,iDAAiD;AACjD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,+CAA+C;AAC/C,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GACjC,qBAAqB,GACrB,qBAAqB,GACrB,qBAAqB,CAAC"}

package/dist/cjs/cluster/interfaces.js

@@ -0,0 +1,12 @@
+"use strict";
+/**
+ * Cluster interfaces for @reyemtech/nimbus.
+ *
+ * Abstracts Kubernetes cluster provisioning across EKS, AKS, and GKE.
+ * Supports EKS Auto Mode, AKS virtual nodes, spot instances, and
+ * multiple node pool configurations.
+ *
+ * @module cluster/interfaces
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=interfaces.js.map

package/dist/cjs/cluster/interfaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interfaces.js","sourceRoot":"","sources":["../../../src/cluster/interfaces.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG"}

package/dist/cjs/database/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Database module — database provisioning abstraction.
+ *
+ * @module database
+ */
+export type { DatabaseEngine, DatabaseMode, DatabaseOperator, IDatabaseBackupConfig, IDatabaseConfig, IDatabase, } from "./interfaces";
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/database/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/database/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,YAAY,EACV,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,eAAe,EACf,SAAS,GACV,MAAM,cAAc,CAAC"}

package/dist/cjs/database/index.js

@@ -0,0 +1,8 @@
+"use strict";
+/**
+ * Database module — database provisioning abstraction.
+ *
+ * @module database
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=index.js.map

package/dist/cjs/database/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/database/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG"}

package/dist/cjs/database/interfaces.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Database interfaces for @reyemtech/nimbus.
+ *
+ * Abstracts database provisioning — managed services (RDS/Aurora,
+ * Azure Database, Cloud SQL) or Kubernetes operators (PXC, CloudNativePG,
+ * MariaDB Operator, MongoDB Operator).
+ *
+ * @module database/interfaces
+ */
+import type * as pulumi from "@pulumi/pulumi";
+import type { CloudArg, ResolvedCloudTarget } from "../types";
+import type { ISecretRef } from "../secrets";
+/** Supported database engines. */
+export type DatabaseEngine = "mysql" | "mariadb" | "postgresql" | "mongodb";
+/** Database deployment mode. */
+export type DatabaseMode = "managed" | "operator";
+/** Available database operators for in-cluster mode. */
+export type DatabaseOperator = "pxc" | "mariadb-operator" | "cloudnative-pg" | "mongodb-operator";
+/** Database backup configuration. */
+export interface IDatabaseBackupConfig {
+    readonly enabled: boolean;
+    /** Cron schedule (e.g., "0 3 * * *" for daily at 03:00 UTC). */
+    readonly schedule?: string;
+    readonly retentionDays?: number;
+    /** Backup destination (S3 bucket, Azure Blob container, etc.). */
+    readonly storageTarget?: string;
+    /** Enable point-in-time recovery (PXC: binlog collector, RDS: native PITR). */
+    readonly pitr?: boolean;
+    /** PITR upload interval in seconds (PXC-specific). Default: 300. */
+    readonly pitrIntervalSeconds?: number;
+}
+/**
+ * Database configuration input.
+ *
+ * @example
+ * ```typescript
+ * // Managed Aurora MySQL (DoNotCarry pattern)
+ * const config: IDatabaseConfig = {
+ *   cloud: "aws",
+ *   engine: "mysql",
+ *   mode: "managed",
+ *   instanceClass: "db.t3.medium",
+ *   replicas: 2,
+ *   highAvailability: true,
+ * };
+ *
+ * // PXC Operator (ReyemTech pattern)
+ * const config: IDatabaseConfig = {
+ *   cloud: "aws",
+ *   engine: "mysql",
+ *   mode: "operator",
+ *   operator: "pxc",
+ *   replicas: 3,
+ *   storageGb: 10,
+ *   backup: { enabled: true, schedule: "0 3 * * *", retentionDays: 7, pitr: true },
+ * };
+ * ```
+ */
+export interface IDatabaseConfig {
+    readonly cloud: CloudArg;
+    readonly engine: DatabaseEngine;
+    readonly mode: DatabaseMode;
+    /** Required when mode is "operator". */
+    readonly operator?: DatabaseOperator;
+    readonly version?: string;
+    /** Instance class for managed databases (e.g., "db.t3.medium"). */
+    readonly instanceClass?: string;
+    /** Number of replicas. Default: 1 (managed), 3 (operator). */
+    readonly replicas?: number;
+    /** Storage size in GB. */
+    readonly storageGb?: number;
+    readonly highAvailability?: boolean;
+    readonly backup?: IDatabaseBackupConfig;
+    readonly tags?: Readonly<Record<string, string>>;
+}
+/**
+ * Database output — the created database resource.
+ *
+ * Provides a unified connection interface regardless of deployment mode.
+ */
+export interface IDatabase {
+    readonly name: string;
+    readonly cloud: ResolvedCloudTarget;
+    readonly engine: DatabaseEngine;
+    readonly mode: DatabaseMode;
+    readonly endpoint: pulumi.Output<string>;
+    readonly port: pulumi.Output<number>;
+    /** Reference to database credentials in the secrets backend. */
+    readonly secretRef: ISecretRef;
+    /** Escape hatch: cloud-native or operator CRD resource. */
+    readonly nativeResource: pulumi.Resource;
+}
+//# sourceMappingURL=interfaces.d.ts.map

package/dist/cjs/database/interfaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interfaces.d.ts","sourceRoot":"","sources":["../../../src/database/interfaces.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,kCAAkC;AAClC,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,SAAS,GAAG,YAAY,GAAG,SAAS,CAAC;AAE5E,gCAAgC;AAChC,MAAM,MAAM,YAAY,GACpB,SAAS,GACT,UAAU,CAAC;AAEf,wDAAwD;AACxD,MAAM,MAAM,gBAAgB,GACxB,KAAK,GACL,kBAAkB,GAClB,gBAAgB,GAChB,kBAAkB,CAAC;AAEvB,qCAAqC;AACrC,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,kEAAkE;IAClE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,oEAAoE;IACpE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;CACvC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,wCAAwC;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,0BAA0B;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAClD;AAED;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrC,gEAAgE;IAChE,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAE/B,2DAA2D;IAC3D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC1C"}

package/dist/cjs/database/interfaces.js

@@ -0,0 +1,12 @@
+"use strict";
+/**
+ * Database interfaces for @reyemtech/nimbus.
+ *
+ * Abstracts database provisioning — managed services (RDS/Aurora,
+ * Azure Database, Cloud SQL) or Kubernetes operators (PXC, CloudNativePG,
+ * MariaDB Operator, MongoDB Operator).
+ *
+ * @module database/interfaces
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=interfaces.js.map

package/dist/cjs/database/interfaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interfaces.js","sourceRoot":"","sources":["../../../src/database/interfaces.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG"}

package/dist/cjs/dns/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * DNS module — DNS zone management abstraction.
+ *
+ * @module dns
+ */
+export type { DnsRecordType, IDnsRecord, IDnsConfig, IDns } from "./interfaces";
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/dns/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/dns/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC"}

package/dist/cjs/dns/index.js

@@ -0,0 +1,8 @@
+"use strict";
+/**
+ * DNS module — DNS zone management abstraction.
+ *
+ * @module dns
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=index.js.map

package/dist/cjs/dns/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/dns/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG"}