@reyemtech/nimbus 1.2.0 → 2.0.1

package/dist/cjs/network/interfaces.js

@@ -9,4 +9,11 @@
  * @module network/interfaces
  */
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.NAT_STRATEGIES = void 0;
+/** Typed constant map for NatStrategy string literals. */
+exports.NAT_STRATEGIES = {
+    MANAGED: "managed",
+    FCK_NAT: "fck-nat",
+    NONE: "none",
+};
 //# sourceMappingURL=interfaces.js.map

package/dist/cjs/network/interfaces.js.map

@@ -1 +1 @@
-{"version":3,"file":"interfaces.js","sourceRoot":"","sources":["../../../src/network/interfaces.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG"}
+{"version":3,"file":"interfaces.js","sourceRoot":"","sources":["../../../src/network/interfaces.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAWH,0DAA0D;AAC7C,QAAA,cAAc,GAAG;IAC5B,OAAO,EAAE,SAAkB;IAC3B,OAAO,EAAE,SAAkB;IAC3B,IAAI,EAAE,MAAe;CACgB,CAAC"}

package/dist/cjs/nimbus/index.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Nimbus global singleton — central config + resource registry.
+ *
+ * @module nimbus
+ */
+import type { INimbusConfig, INimbusResource, INimbusResourceRef, INotificationsConfig } from "./interfaces";
+export type { INimbusConfig, INimbusResource, INimbusResourceRef, INotificationsConfig, INotificationEmailConfig, INotificationSlackConfig, NimbusResourceType, } from "./interfaces";
+declare class Nimbus {
+    private readonly registry;
+    private config;
+    /** Configure nimbus-wide settings (notifications, etc.). Call once at project top. */
+    configure(config: INimbusConfig): void;
+    /** Get notification config (read by Alertmanager, ArgoCD Notifications, etc.). */
+    get notifications(): INotificationsConfig | undefined;
+    /** Register a resource for cross-module discovery. */
+    register(name: string, resource: INimbusResource): void;
+    /** Look up a registered resource by name. */
+    lookup(name: string): INimbusResourceRef;
+    /** All registered caches. */
+    caches(): ReadonlyArray<INimbusResourceRef>;
+    /** All registered databases. */
+    databases(): ReadonlyArray<INimbusResourceRef>;
+    /** All registered resources. */
+    all(): ReadonlyArray<INimbusResourceRef>;
+}
+/** Global nimbus singleton. */
+export declare const nimbus: Nimbus;
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/nimbus/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/nimbus/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACrB,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAEtB,cAAM,MAAM;IACV,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwB;IACjD,OAAO,CAAC,MAAM,CAAqB;IAEnC,sFAAsF;IACtF,SAAS,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI;IAItC,kFAAkF;IAClF,IAAI,aAAa,IAAI,oBAAoB,GAAG,SAAS,CAEpD;IAED,sDAAsD;IACtD,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,GAAG,IAAI;IAIvD,6CAA6C;IAC7C,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB;IAIxC,6BAA6B;IAC7B,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC;IAI3C,gCAAgC;IAChC,SAAS,IAAI,aAAa,CAAC,kBAAkB,CAAC;IAI9C,gCAAgC;IAChC,GAAG,IAAI,aAAa,CAAC,kBAAkB,CAAC;CAGzC;AAED,+BAA+B;AAC/B,eAAO,MAAM,MAAM,QAAe,CAAC"}

package/dist/cjs/nimbus/index.js

@@ -0,0 +1,44 @@
+"use strict";
+/**
+ * Nimbus global singleton — central config + resource registry.
+ *
+ * @module nimbus
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.nimbus = void 0;
+const registry_1 = require("./registry");
+class Nimbus {
+    registry = new registry_1.NimbusRegistry();
+    config = {};
+    /** Configure nimbus-wide settings (notifications, etc.). Call once at project top. */
+    configure(config) {
+        this.config = { ...this.config, ...config };
+    }
+    /** Get notification config (read by Alertmanager, ArgoCD Notifications, etc.). */
+    get notifications() {
+        return this.config.notifications;
+    }
+    /** Register a resource for cross-module discovery. */
+    register(name, resource) {
+        this.registry.register(name, resource);
+    }
+    /** Look up a registered resource by name. */
+    lookup(name) {
+        return this.registry.lookup(name);
+    }
+    /** All registered caches. */
+    caches() {
+        return this.registry.caches();
+    }
+    /** All registered databases. */
+    databases() {
+        return this.registry.databases();
+    }
+    /** All registered resources. */
+    all() {
+        return this.registry.all();
+    }
+}
+/** Global nimbus singleton. */
+exports.nimbus = new Nimbus();
+//# sourceMappingURL=index.js.map

package/dist/cjs/nimbus/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/nimbus/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAQH,yCAA4C;AAY5C,MAAM,MAAM;IACO,QAAQ,GAAG,IAAI,yBAAc,EAAE,CAAC;IACzC,MAAM,GAAkB,EAAE,CAAC;IAEnC,sFAAsF;IACtF,SAAS,CAAC,MAAqB;QAC7B,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;IAC9C,CAAC;IAED,kFAAkF;IAClF,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;IACnC,CAAC;IAED,sDAAsD;IACtD,QAAQ,CAAC,IAAY,EAAE,QAAyB;QAC9C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED,6CAA6C;IAC7C,MAAM,CAAC,IAAY;QACjB,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,6BAA6B;IAC7B,MAAM;QACJ,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;IAChC,CAAC;IAED,gCAAgC;IAChC,SAAS;QACP,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;IACnC,CAAC;IAED,gCAAgC;IAChC,GAAG;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;IAC7B,CAAC;CACF;AAED,+BAA+B;AAClB,QAAA,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC"}

package/dist/cjs/nimbus/interfaces.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Nimbus global singleton interfaces.
+ *
+ * Central config, resource registry, and notifications.
+ *
+ * @module nimbus/interfaces
+ */
+import type * as pulumi from "@pulumi/pulumi";
+import type { IEmailTransport } from "../email/interfaces";
+/** Email notification config — reused by Alertmanager, ArgoCD Notifications, etc. */
+export interface INotificationEmailConfig {
+    readonly transport: IEmailTransport;
+    readonly to: string | string[];
+}
+/** Slack notification config (future). */
+export interface INotificationSlackConfig {
+    readonly webhookUrl: pulumi.Input<string>;
+    readonly channel: string;
+    readonly username?: string;
+}
+/** Nimbus-wide notification configuration. */
+export interface INotificationsConfig {
+    readonly email?: INotificationEmailConfig;
+    readonly slack?: INotificationSlackConfig;
+}
+/** Top-level nimbus configuration. */
+export interface INimbusConfig {
+    readonly notifications?: INotificationsConfig;
+}
+/** Resource types that can be registered. */
+export type NimbusResourceType = "cache" | "database" | "object-storage" | "operator" | "platform" | "observability" | "access";
+/** Base registered resource. */
+export interface INimbusResource {
+    readonly name: string;
+    readonly type: NimbusResourceType;
+    readonly namespace: string;
+    readonly endpoint: string | pulumi.Output<string>;
+    readonly port?: number;
+    readonly secretRef?: {
+        readonly name: string | pulumi.Output<string>;
+        readonly keys: Record<string, string>;
+    };
+    readonly nativeResource: pulumi.Resource;
+}
+/** Lookup result with helpers. */
+export interface INimbusResourceRef {
+    readonly name: string;
+    readonly type: NimbusResourceType;
+    readonly namespace: string;
+    readonly endpoint: string | pulumi.Output<string>;
+    readonly port?: number;
+    /** Returns { existingSecret: name, existingSecretPasswordKey: defaultKey }. */
+    secret(): Record<string, string | pulumi.Output<string>>;
+    /** Returns { secretKeyRef: { name, key } }. */
+    secretRef(key?: string): {
+        secretKeyRef: {
+            name: string | pulumi.Output<string>;
+            key: string;
+        };
+    };
+    /** Returns a connection string (e.g., redis://..., postgresql://...). */
+    connectionString(): pulumi.Output<string>;
+}
+//# sourceMappingURL=interfaces.d.ts.map

package/dist/cjs/nimbus/interfaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interfaces.d.ts","sourceRoot":"","sources":["../../../src/nimbus/interfaces.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAM3D,qFAAqF;AACrF,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAChC;AAED,0CAA0C;AAC1C,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,8CAA8C;AAC9C,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,wBAAwB,CAAC;CAC3C;AAED,sCAAsC;AACtC,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,oBAAoB,CAAC;CAC/C;AAMD,6CAA6C;AAC7C,MAAM,MAAM,kBAAkB,GAC1B,OAAO,GACP,UAAU,GACV,gBAAgB,GAChB,UAAU,GACV,UAAU,GACV,eAAe,GACf,QAAQ,CAAC;AAEb,gCAAgC;AAChC,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE;QACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KACvC,CAAC;IACF,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC1C;AAED,kCAAkC;AAClC,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,+CAA+C;IAC/C,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG;QAAE,YAAY,EAAE;YAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAAC,GAAG,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IACjG,yEAAyE;IACzE,gBAAgB,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;CAC3C"}

package/dist/cjs/nimbus/interfaces.js

@@ -0,0 +1,10 @@
+"use strict";
+/**
+ * Nimbus global singleton interfaces.
+ *
+ * Central config, resource registry, and notifications.
+ *
+ * @module nimbus/interfaces
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=interfaces.js.map

package/dist/cjs/nimbus/interfaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interfaces.js","sourceRoot":"","sources":["../../../src/nimbus/interfaces.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG"}

package/dist/cjs/nimbus/registry.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Nimbus resource registry — global Map for cross-module discovery.
+ *
+ * @module nimbus/registry
+ */
+import type { INimbusResource, INimbusResourceRef } from "./interfaces";
+/**
+ * Resource registry — simple Map with typed queries.
+ */
+export declare class NimbusRegistry {
+    private readonly resources;
+    register(name: string, resource: INimbusResource): void;
+    lookup(name: string): INimbusResourceRef;
+    caches(): ReadonlyArray<INimbusResourceRef>;
+    databases(): ReadonlyArray<INimbusResourceRef>;
+    all(): ReadonlyArray<INimbusResourceRef>;
+    private byType;
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/cjs/nimbus/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/nimbus/registry.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAsB,MAAM,cAAc,CAAC;AAuD5F;;GAEG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAsC;IAEhE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,GAAG,IAAI;IAOvD,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB;IAUxC,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC;IAI3C,SAAS,IAAI,aAAa,CAAC,kBAAkB,CAAC;IAI9C,GAAG,IAAI,aAAa,CAAC,kBAAkB,CAAC;IAIxC,OAAO,CAAC,MAAM;CAGf"}

package/dist/cjs/nimbus/registry.js

@@ -0,0 +1,123 @@
+"use strict";
+/**
+ * Nimbus resource registry — global Map for cross-module discovery.
+ *
+ * @module nimbus/registry
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NimbusRegistry = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+/**
+ * Wrap a registered resource with helper methods.
+ */
+function wrapResource(resource) {
+    return {
+        name: resource.name,
+        type: resource.type,
+        namespace: resource.namespace,
+        endpoint: resource.endpoint,
+        port: resource.port,
+        secret() {
+            if (!resource.secretRef) {
+                throw new Error(`Resource "${resource.name}" has no secret reference`);
+            }
+            const defaultKey = Object.values(resource.secretRef.keys)[0] ?? "password";
+            return {
+                existingSecret: resource.secretRef.name,
+                existingSecretPasswordKey: defaultKey,
+            };
+        },
+        secretRef(key) {
+            if (!resource.secretRef) {
+                throw new Error(`Resource "${resource.name}" has no secret reference`);
+            }
+            const resolvedKey = key
+                ? (resource.secretRef.keys[key] ?? key)
+                : (Object.values(resource.secretRef.keys)[0] ?? "password");
+            return {
+                secretKeyRef: {
+                    name: resource.secretRef.name,
+                    key: resolvedKey,
+                },
+            };
+        },
+        connectionString() {
+            const ep = pulumi.output(resource.endpoint);
+            const port = resource.port;
+            switch (resource.type) {
+                case "cache":
+                    return ep.apply((e) => `redis://${e}${port ? `:${port}` : ""}`);
+                case "database":
+                    return ep.apply((e) => `postgresql://${e}${port ? `:${port}` : ""}`);
+                default:
+                    return ep.apply((e) => `${e}${port ? `:${port}` : ""}`);
+            }
+        },
+    };
+}
+/**
+ * Resource registry — simple Map with typed queries.
+ */
+class NimbusRegistry {
+    resources = new Map();
+    register(name, resource) {
+        if (this.resources.has(name)) {
+            throw new Error(`Resource "${name}" is already registered`);
+        }
+        this.resources.set(name, resource);
+    }
+    lookup(name) {
+        const resource = this.resources.get(name);
+        if (!resource) {
+            throw new Error(`Resource "${name}" not found. Registered: ${[...this.resources.keys()].join(", ") || "(none)"}`);
+        }
+        return wrapResource(resource);
+    }
+    caches() {
+        return this.byType("cache");
+    }
+    databases() {
+        return this.byType("database");
+    }
+    all() {
+        return [...this.resources.values()].map(wrapResource);
+    }
+    byType(type) {
+        return [...this.resources.values()].filter((r) => r.type === type).map(wrapResource);
+    }
+}
+exports.NimbusRegistry = NimbusRegistry;
+//# sourceMappingURL=registry.js.map

package/dist/cjs/nimbus/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/nimbus/registry.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uDAAyC;AAGzC;;GAEG;AACH,SAAS,YAAY,CAAC,QAAyB;IAC7C,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;QAEnB,MAAM;YACJ,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,aAAa,QAAQ,CAAC,IAAI,2BAA2B,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC;YAC3E,OAAO;gBACL,cAAc,EAAE,QAAQ,CAAC,SAAS,CAAC,IAAI;gBACvC,yBAAyB,EAAE,UAAU;aACtC,CAAC;QACJ,CAAC;QAED,SAAS,CAAC,GAAY;YACpB,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,aAAa,QAAQ,CAAC,IAAI,2BAA2B,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,WAAW,GAAG,GAAG;gBACrB,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;gBACvC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC;YAC9D,OAAO;gBACL,YAAY,EAAE;oBACZ,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,IAAI;oBAC7B,GAAG,EAAE,WAAW;iBACjB;aACF,CAAC;QACJ,CAAC;QAED,gBAAgB;YACd,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;YAE3B,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACtB,KAAK,OAAO;oBACV,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClE,KAAK,UAAU;oBACb,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvE;oBACE,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAa,cAAc;IACR,SAAS,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEhE,QAAQ,CAAC,IAAY,EAAE,QAAyB;QAC9C,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,yBAAyB,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,CAAC,IAAY;QACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,4BAA4B,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,CACjG,CAAC;QACJ,CAAC;QACD,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACjC,CAAC;IAED,GAAG;QACD,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACxD,CAAC;IAEO,MAAM,CAAC,IAAwB;QACrC,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACvF,CAAC;CACF;AAnCD,wCAmCC"}

package/dist/cjs/observability/alerts.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Alerting module — PrometheusRule CRD helpers, Alertmanager config builder,
+ * and global alert rules for cross-cutting concerns (PVC, certs).
+ *
+ * Per-instance alerts (CNPG, MariaDB, Neo4j, MinIO, Redis, Traefik) are
+ * created by their respective module factories, not here.
+ *
+ * @module observability/alerts
+ */
+import * as k8s from "@pulumi/kubernetes";
+import type * as pulumi from "@pulumi/pulumi";
+import type { IAlertConfig } from "./interfaces";
+/** A single Prometheus alert rule. */
+export interface IPrometheusAlertRule {
+    readonly alert: string;
+    readonly expr: string;
+    readonly for: string;
+    readonly labels: Record<string, string>;
+    readonly annotations: Record<string, string>;
+}
+/** A group of Prometheus alert rules. */
+export interface IPrometheusRuleGroup {
+    readonly name: string;
+    readonly interval?: string;
+    readonly rules: IPrometheusAlertRule[];
+}
+/**
+ * Parse a human-readable duration to seconds for PromQL expressions.
+ * Supports: "30s", "5m", "2h", "14d".
+ */
+export declare function parseDurationToSeconds(duration: string): number;
+/**
+ * Create a PrometheusRule CRD with the given alert groups.
+ *
+ * Used by both global rules (this module) and per-instance rules
+ * (operator modules, cache, platform).
+ */
+export declare function createPrometheusRule(name: string, namespace: string, groups: IPrometheusRuleGroup[], provider: k8s.Provider, dependsOn: pulumi.Resource[]): void;
+/**
+ * Create global PrometheusRule for cross-cutting alerts.
+ * Called from createObservabilityStack() when alerts are configured.
+ */
+export declare function createGlobalAlertRules(name: string, namespace: string, provider: k8s.Provider, dependsOn: pulumi.Resource[]): void;
+/**
+ * Build Alertmanager Helm values for receivers and routes.
+ *
+ * Returns values to deep-merge into the kube-prometheus-stack
+ * alertmanager section.
+ */
+export declare function buildAlertmanagerConfig(alertConfig: IAlertConfig): Record<string, unknown>;
+//# sourceMappingURL=alerts.d.ts.map

package/dist/cjs/observability/alerts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerts.d.ts","sourceRoot":"","sources":["../../../src/observability/alerts.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAC1C,OAAO,KAAK,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAMjD,sCAAsC;AACtC,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9C;AAED,yCAAyC;AACzC,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,oBAAoB,EAAE,CAAC;CACxC;AAMD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAgB/D;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,oBAAoB,EAAE,EAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ,EACtB,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,GAC3B,IAAI,CAoBN;AAMD;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,GAAG,CAAC,QAAQ,EACtB,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,GAC3B,IAAI,CAuDN;AAMD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAkI1F"}