@vibesdotdev/integrations-kubernetes 0.0.0-stage → 1.0.0-rc.0

package/dist/k8s-pod-health.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Kubernetes Pod Health Resource Provider
+ * Monitors specific pods by label selector and reports health status
+ *
+ * Use this to create dependencies between port-forwards and their backend pods.
+ * When the pod becomes unhealthy, dependent processes can be restarted.
+ *
+ * Example:
+ * ```typescript
+ * const postgresPod = defineResource('k8s/pod-health', 'postgres-pod')
+ *   .set('labelSelector', 'app=postgres')
+ *   .set('namespace', 'vibes-local')
+ *   .set('context', 'kind-vibes-local')
+ *   .build();
+ *
+ * // Port-forward depends on pod being healthy
+ * const postgresForward = defineProcess('postgres-forward')
+ *   .dependsOn('postgres-pod')
+ *   .build();
+ * ```
+ */
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import type { ResourceProvider } from '@vibesdotdev/pm/resources/provider';
+import { type K8sPodHealthConfig, type KubectlSemaphore } from './schemas/k8s-pod-health.ts';
+/** The kubectl semaphore of `runtime`'s root, resolved through the `runtime/client` the resource-providers plugin registers (exported for the two-views test). */
+export declare function kubectlSemaphore(runtime: RuntimeRef): Promise<KubectlSemaphore>;
+/** Run `fn` when one of the root's kubectl slots opens; refuse typed when none opens within `timeoutMs` (exported for the budget test). */
+export declare function withKubectlSemaphore<T>(runtime: RuntimeRef, fn: () => Promise<T>, timeoutMs?: number): Promise<T>;
+interface PodStatus {
+    name: string;
+    ready: boolean;
+    phase: string;
+    conditions: Array<{
+        type: string;
+        status: string;
+    }>;
+    containerStatuses: Array<{
+        name: string;
+        ready: boolean;
+        restartCount: number;
+        state?: {
+            waiting?: {
+                reason?: string;
+                message?: string;
+            };
+        };
+    }>;
+}
+/**
+ * Get pod status from kubectl (exported for the typed-refusal test: the
+ * providers report a refusal as text, so the reason is read here).
+ */
+export declare function getPodStatus(runtime: RuntimeRef, config: K8sPodHealthConfig): Promise<PodStatus[]>;
+/**
+ * Kubernetes Pod Health Provider
+ * Monitors pod health by label selector
+ */
+export declare const k8sPodHealthProvider: ResourceProvider<K8sPodHealthConfig>;
+export {};
+//# sourceMappingURL=k8s-pod-health.d.ts.map

package/dist/k8s-pod-health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"k8s-pod-health.d.ts","sourceRoot":"","sources":["../src/k8s-pod-health.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAmB,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGvE,OAAO,KAAK,EACX,gBAAgB,EAKhB,MAAM,oCAAoC,CAAC;AAI5C,OAAO,EAA4B,KAAK,kBAAkB,EAAE,KAAK,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAavH,kKAAkK;AAClK,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAGrF;AAED,2IAA2I;AAC3I,wBAAsB,oBAAoB,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,SAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CA+CtH;AAMD,UAAU,SAAS;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,iBAAiB,EAAE,KAAK,CAAC;QACxB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,OAAO,CAAC;QACf,YAAY,EAAE,MAAM,CAAC;QACrB,KAAK,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE;gBAAE,MAAM,CAAC,EAAE,MAAM,CAAC;gBAAC,OAAO,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC;KAC5D,CAAC,CAAC;CACH;AAqCD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAyDlG;AA4HD;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,gBAAgB,CAAC,kBAAkB,CA2GrE,CAAC"}

package/dist/k8s-pod-health.js

@@ -0,0 +1,376 @@
+/**
+ * Kubernetes Pod Health Resource Provider
+ * Monitors specific pods by label selector and reports health status
+ *
+ * Use this to create dependencies between port-forwards and their backend pods.
+ * When the pod becomes unhealthy, dependent processes can be restarted.
+ *
+ * Example:
+ * ```typescript
+ * const postgresPod = defineResource('k8s/pod-health', 'postgres-pod')
+ *   .set('labelSelector', 'app=postgres')
+ *   .set('namespace', 'vibes-local')
+ *   .set('context', 'kind-vibes-local')
+ *   .build();
+ *
+ * // Port-forward depends on pod being healthy
+ * const postgresForward = defineProcess('postgres-forward')
+ *   .dependsOn('postgres-pod')
+ *   .build();
+ * ```
+ */
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { getVibesClient } from '@vibesdotdev/kernel/client';
+import * as z from 'zod/v4';
+import { providerFailureText, setupErrorResult, toolFailure } from '@vibesdotdev/pm/resources/tool-env';
+import { runKubeCapture } from "./tool-env.js";
+import { KUBECTL_BUDGET_CLIENT_ID, requireRootIdentity } from "./kubectl-budget.client.js";
+import { K8sPodHealthConfigSchema } from "./schemas/k8s-pod-health.js";
+import { attempt, attemptSync } from '@vibesdotdev/pm/utils/attempt';
+// FD Safety: a semaphore for kubectl spawns, to prevent FD exhaustion. It is
+// the handed runtime's ROOT's (`rootIdentityOf`): a plugin view or a reload
+// generation of the same root shares one budget instead of doubling kubectl
+// concurrency, and it is never a module-wide counter shared by every root in
+// the process. A runtime the kernel did not construct names no root and is
+// refused typed.
+const KUBECTL_SEMAPHORE_MAX = 3;
+const KUBECTL_REQUEST_TIMEOUT = '5s';
+/** The kubectl semaphore of `runtime`'s root, resolved through the `runtime/client` the resource-providers plugin registers (exported for the two-views test). */
+export async function kubectlSemaphore(runtime) {
+    requireRootIdentity(runtime);
+    return (await getVibesClient(KUBECTL_BUDGET_CLIENT_ID, runtime)).semaphore;
+}
+/** Run `fn` when one of the root's kubectl slots opens; refuse typed when none opens within `timeoutMs` (exported for the budget test). */
+export async function withKubectlSemaphore(runtime, fn, timeoutMs = 10000) {
+    const semaphore = await kubectlSemaphore(runtime);
+    return new Promise((resolve, reject) => {
+        let started = false;
+        let queueEntry = null;
+        // The queue deadline is a lifecycle one-shot (RC07), cancelled when the slot opens.
+        const cancelTimeout = runtime.lifecycle.timeout(() => {
+            if (started)
+                return;
+            if (queueEntry) {
+                const index = semaphore.queue.indexOf(queueEntry);
+                if (index >= 0) {
+                    semaphore.queue.splice(index, 1);
+                }
+            }
+            reject(new CapabilityError(`kubectl spawn timeout after ${timeoutMs}ms`, 'TIMEOUT', {
+                reason: 'pm-kubectl-slot-timeout',
+                retryable: true,
+                details: { timeoutMs }
+            }));
+        }, timeoutMs);
+        const run = async () => {
+            if (started)
+                return;
+            started = true;
+            cancelTimeout();
+            semaphore.active++;
+            try {
+                const result = await fn();
+                resolve(result);
+            }
+            catch (err) {
+                reject(err);
+            }
+            finally {
+                semaphore.active--;
+                const next = semaphore.queue.shift();
+                if (next)
+                    next();
+            }
+        };
+        if (semaphore.active < KUBECTL_SEMAPHORE_MAX) {
+            void run();
+        }
+        else {
+            queueEntry = () => void run();
+            semaphore.queue.push(queueEntry);
+        }
+    });
+}
+function validateConfig(config) {
+    return K8sPodHealthConfigSchema.parse(config);
+}
+/** The parts of `kubectl get pods -o json` this provider reads; a pod missing a part reads as its defaults. */
+const KubernetesPodListSchema = z.object({
+    items: z
+        .array(z.object({
+        metadata: z.object({ name: z.string().optional() }).nullish(),
+        status: z
+            .object({
+            phase: z.string().optional(),
+            conditions: z
+                .array(z.object({ type: z.string().optional(), status: z.string().optional() }))
+                .nullish(),
+            containerStatuses: z
+                .array(z.object({
+                name: z.string().optional(),
+                ready: z.boolean().optional(),
+                restartCount: z.number().optional(),
+                state: z
+                    .object({
+                    waiting: z
+                        .object({ reason: z.string().optional(), message: z.string().optional() })
+                        .optional()
+                })
+                    .optional()
+            }))
+                .nullish()
+        })
+            .nullish()
+    }))
+        .catch([])
+});
+/**
+ * Get pod status from kubectl (exported for the typed-refusal test: the
+ * providers report a refusal as text, so the reason is read here).
+ */
+export function getPodStatus(runtime, config) {
+    return withKubectlSemaphore(runtime, async () => {
+        const cmd = [
+            'kubectl',
+            'get',
+            'pods',
+            '--selector',
+            config.labelSelector,
+            '--namespace',
+            config.namespace,
+            '--request-timeout',
+            KUBECTL_REQUEST_TIMEOUT,
+            '--output',
+            'json'
+        ];
+        if (config.context) {
+            cmd.push('--context', config.context);
+        }
+        const { exitCode, stdout: output, stderr } = await runKubeCapture(runtime, cmd[0], cmd.slice(1));
+        if (exitCode !== 0) {
+            throw toolFailure({ tool: 'kubectl', action: 'get pods', outcome: { exitCode, stderr } });
+        }
+        const parsed = attemptSync(() => KubernetesPodListSchema.parse(JSON.parse(output)));
+        if (!parsed.ok) {
+            throw new CapabilityError('kubectl get pods answered an unreadable pod list', 'UNAVAILABLE', {
+                reason: 'pm-kubectl-pods-unreadable',
+                retryable: true,
+                cause: parsed.failure
+            });
+        }
+        return parsed.value.items.map((pod) => {
+            const conditions = pod.status?.conditions ?? [];
+            const readyCondition = conditions.find((c) => c.type === 'Ready');
+            const containerStatuses = pod.status?.containerStatuses ?? [];
+            return {
+                name: pod.metadata?.name || 'unknown',
+                ready: readyCondition?.status === 'True',
+                phase: pod.status?.phase || 'Unknown',
+                conditions: conditions.map((c) => ({
+                    type: c.type ?? 'Unknown',
+                    status: c.status ?? 'Unknown'
+                })),
+                containerStatuses: containerStatuses.map((cs) => ({
+                    name: cs.name ?? 'unknown',
+                    ready: cs.ready ?? false,
+                    restartCount: cs.restartCount || 0,
+                    state: cs.state
+                }))
+            };
+        });
+    });
+}
+/**
+ * Get recent logs from a failing pod to help diagnose issues
+ */
+function getPodLogs(runtime, podName, namespace, context, tailLines = 10) {
+    return withKubectlSemaphore(runtime, async () => {
+        const cmd = [
+            'kubectl',
+            'logs',
+            podName,
+            '--namespace',
+            namespace,
+            '--request-timeout',
+            KUBECTL_REQUEST_TIMEOUT,
+            '--tail',
+            String(tailLines)
+        ];
+        if (context) {
+            cmd.push('--context', context);
+        }
+        const run = await runKubeCapture(runtime, cmd[0], cmd.slice(1));
+        const output = run.stdout;
+        if (run.exitCode !== 0) {
+            const prevCmd = [...cmd, '--previous'];
+            const prevRun = await runKubeCapture(runtime, prevCmd[0], prevCmd.slice(1));
+            if (prevRun.exitCode === 0 && prevRun.stdout.trim()) {
+                return prevRun.stdout.trim();
+            }
+            return null;
+        }
+        return output.trim() || null;
+    });
+}
+/**
+ * Extract ERROR lines from logs for concise display
+ */
+function extractErrorLines(logs) {
+    const lines = logs.split('\n');
+    const errorLines = lines.filter((line) => line.includes('ERROR') ||
+        line.includes('Error') ||
+        line.includes('error:') ||
+        line.includes('FATAL') ||
+        line.includes('panic'));
+    return errorLines.length > 0 ? errorLines.slice(-3).join(' | ') : null;
+}
+/**
+ * Check if pods are healthy based on config requirements
+ */
+function checkPodsHealthy(pods, config) {
+    if (pods.length === 0) {
+        return {
+            healthy: false,
+            message: `No pods found matching selector '${config.labelSelector}'`,
+            readyCount: 0
+        };
+    }
+    let readyCount = 0;
+    const unhealthyPods = [];
+    for (const pod of pods) {
+        let podHealthy = pod.ready && pod.phase === 'Running';
+        // Check container readiness if required
+        if (podHealthy && config.requireAllContainersReady && pod.containerStatuses.length > 0) {
+            const allContainersReady = pod.containerStatuses.every((cs) => cs.ready);
+            if (!allContainersReady) {
+                podHealthy = false;
+            }
+        }
+        if (podHealthy) {
+            readyCount++;
+        }
+        else {
+            const containerInfo = pod.containerStatuses
+                .filter((cs) => !cs.ready)
+                .map((cs) => {
+                const waitReason = cs.state?.waiting?.reason;
+                const waitMsg = cs.state?.waiting?.message;
+                let info = `${cs.name}(restarts:${cs.restartCount}`;
+                if (waitReason)
+                    info += `, ${waitReason}`;
+                if (waitMsg)
+                    info += `: ${waitMsg.substring(0, 100)}`;
+                return `${info})`;
+            })
+                .join(', ');
+            unhealthyPods.push(`${pod.name}: phase=${pod.phase}, ready=${pod.ready}${containerInfo ? `, containers=[${containerInfo}]` : ''}`);
+        }
+    }
+    const minReady = config.minReady || 1;
+    const healthy = readyCount >= minReady;
+    const message = healthy
+        ? `${readyCount}/${pods.length} pod(s) ready (min: ${minReady})`
+        : `Only ${readyCount}/${pods.length} pod(s) ready (need ${minReady}). Unhealthy: ${unhealthyPods.join('; ')}`;
+    return { healthy, message, readyCount };
+}
+/**
+ * Kubernetes Pod Health Provider
+ * Monitors pod health by label selector
+ */
+export const k8sPodHealthProvider = {
+    type: 'k8s/pod-health',
+    async setup(config, { runtime }) {
+        const podConfig = validateConfig(config.config);
+        const checked = await attempt(async () => {
+            const pods = await getPodStatus(runtime, podConfig);
+            return { pods, healthCheck: checkPodsHealthy(pods, podConfig) };
+        });
+        if (!checked.ok)
+            return setupErrorResult(config, checked.failure);
+        const { pods, healthCheck } = checked.value;
+        return {
+            state: {
+                id: config.id,
+                type: config.type,
+                status: healthCheck.healthy ? 'ready' : 'creating',
+                createdAt: new Date(),
+                lastChecked: new Date(),
+                metadata: {
+                    labelSelector: podConfig.labelSelector,
+                    namespace: podConfig.namespace,
+                    podCount: pods.length,
+                    readyCount: healthCheck.readyCount,
+                    healthMessage: healthCheck.message
+                }
+            },
+            metadata: { output: healthCheck.message }
+        };
+    },
+    async teardown(_id, _state) {
+    },
+    async status(id, { runtime, config: providerConfig }) {
+        const config = providerConfig;
+        if (!config) {
+            return { status: 'missing' };
+        }
+        const podConfig = validateConfig(config.config);
+        const checked = await attempt(async () => {
+            const pods = await getPodStatus(runtime, podConfig);
+            return { pods, healthCheck: checkPodsHealthy(pods, podConfig) };
+        });
+        if (!checked.ok)
+            return { status: 'error', error: providerFailureText(checked.failure) };
+        const { pods, healthCheck } = checked.value;
+        return {
+            status: healthCheck.healthy ? 'ready' : 'error',
+            metadata: {
+                podCount: pods.length,
+                readyCount: healthCheck.readyCount,
+                message: healthCheck.message,
+                pods: pods.map((p) => ({ name: p.name, ready: p.ready, phase: p.phase }))
+            }
+        };
+    },
+    async checkReady(config, _state, { runtime }) {
+        const podConfig = validateConfig(config.config);
+        const checked = await attempt(async () => {
+            const pods = await getPodStatus(runtime, podConfig);
+            return { pods, healthCheck: checkPodsHealthy(pods, podConfig) };
+        });
+        if (!checked.ok) {
+            return { ready: false, reason: providerFailureText(checked.failure), retryAfter: 5000 };
+        }
+        const { pods, healthCheck } = checked.value;
+        if (healthCheck.healthy) {
+            return { ready: true };
+        }
+        // For failing pods, try to get logs to show the actual error
+        let reason = healthCheck.message;
+        const failingPods = pods.filter((p) => !p.ready || p.phase !== 'Running');
+        for (const pod of failingPods.slice(0, 2)) {
+            // Limit to first 2 pods
+            // Logs enrich the failure reason; logs that cannot be read are said
+            // in the reason (a reported outcome), never dropped.
+            const fetched = await attempt(() => getPodLogs(runtime, pod.name, podConfig.namespace, podConfig.context, 15));
+            if (!fetched.ok) {
+                reason += ` | ${pod.name} logs unavailable: ${providerFailureText(fetched.failure)}`;
+                continue;
+            }
+            if (fetched.value) {
+                const errorLines = extractErrorLines(fetched.value);
+                if (errorLines) {
+                    reason += ` | ${pod.name} logs: ${errorLines}`;
+                }
+            }
+        }
+        return {
+            ready: false,
+            reason,
+            retryAfter: podConfig.healthCheckInterval || 10000
+        };
+    },
+    validateConfig(config) {
+        return validateConfig(config);
+    }
+};
+//# sourceMappingURL=k8s-pod-health.js.map

package/dist/k8s-pod-health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"k8s-pod-health.js","sourceRoot":"","sources":["../src/k8s-pod-health.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,eAAe,EAAmB,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAQ5B,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AACxG,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAA4B,MAAM,4BAA4B,CAAC;AACrH,OAAO,EAAE,wBAAwB,EAAkD,MAAM,6BAA6B,CAAC;AAEvH,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAErE,6EAA6E;AAC7E,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,2EAA2E;AAC3E,iBAAiB;AACjB,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAErC,kKAAkK;AAClK,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAmB;IACzD,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,CAAC,MAAM,cAAc,CAAsB,wBAAwB,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACjG,CAAC;AAED,2IAA2I;AAC3I,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAI,OAAmB,EAAE,EAAoB,EAAE,SAAS,GAAG,KAAK;IACzG,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAClD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,UAAU,GAAwB,IAAI,CAAC;QAC3C,oFAAoF;QACpF,MAAM,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;YACpD,IAAI,OAAO;gBAAE,OAAO;YACpB,IAAI,UAAU,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBAClD,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;oBAChB,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBAClC,CAAC;YACF,CAAC;YACD,MAAM,CACL,IAAI,eAAe,CAAC,+BAA+B,SAAS,IAAI,EAAE,SAAS,EAAE;gBAC5E,MAAM,EAAE,yBAAyB;gBACjC,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,EAAE,SAAS,EAAE;aACtB,CAAC,CACF,CAAC;QACH,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,GAAG,GAAG,KAAK,IAAI,EAAE;YACtB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,aAAa,EAAE,CAAC;YAChB,SAAS,CAAC,MAAM,EAAE,CAAC;YACnB,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;gBAC1B,OAAO,CAAC,MAAM,CAAC,CAAC;YACjB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,MAAM,CAAC,GAAG,CAAC,CAAC;YACb,CAAC;oBAAS,CAAC;gBACV,SAAS,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACrC,IAAI,IAAI;oBAAE,IAAI,EAAE,CAAC;YAClB,CAAC;QACF,CAAC,CAAC;QAEF,IAAI,SAAS,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;YAC9C,KAAK,GAAG,EAAE,CAAC;QACZ,CAAC;aAAM,CAAC;YACP,UAAU,GAAG,GAAG,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;YAC9B,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,CAAC;IACF,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,MAAuB;IAC9C,OAAO,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC/C,CAAC;AAeD,+GAA+G;AAC/G,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,KAAK,EAAE,CAAC;SACN,KAAK,CACL,CAAC,CAAC,MAAM,CAAC;QACR,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;QAC7D,MAAM,EAAE,CAAC;aACP,MAAM,CAAC;YACP,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC5B,UAAU,EAAE,CAAC;iBACX,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;iBAC/E,OAAO,EAAE;YACX,iBAAiB,EAAE,CAAC;iBAClB,KAAK,CACL,CAAC,CAAC,MAAM,CAAC;gBACR,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;gBAC3B,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;gBAC7B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;gBACnC,KAAK,EAAE,CAAC;qBACN,MAAM,CAAC;oBACP,OAAO,EAAE,CAAC;yBACR,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;yBACzE,QAAQ,EAAE;iBACZ,CAAC;qBACD,QAAQ,EAAE;aACZ,CAAC,CACF;iBACA,OAAO,EAAE;SACX,CAAC;aACD,OAAO,EAAE;KACX,CAAC,CACF;SACA,KAAK,CAAC,EAAE,CAAC;CACX,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,OAAmB,EAAE,MAA0B;IAC3E,OAAO,oBAAoB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,GAAG,GAAG;YACX,SAAS;YACT,KAAK;YACL,MAAM;YACN,YAAY;YACZ,MAAM,CAAC,aAAa;YACpB,aAAa;YACb,MAAM,CAAC,SAAS;YAChB,mBAAmB;YACnB,uBAAuB;YACvB,UAAU;YACV,MAAM;SACN,CAAC;QAEF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAElG,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;YACpB,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,eAAe,CAAC,kDAAkD,EAAE,aAAa,EAAE;gBAC5F,MAAM,EAAE,4BAA4B;gBACpC,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,MAAM,CAAC,OAAO;aACrB,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAa,EAAE;YAChD,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,EAAE,UAAU,IAAI,EAAE,CAAC;YAChD,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;YAClE,MAAM,iBAAiB,GAAG,GAAG,CAAC,MAAM,EAAE,iBAAiB,IAAI,EAAE,CAAC;YAE9D,OAAO;gBACN,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,SAAS;gBACrC,KAAK,EAAE,cAAc,EAAE,MAAM,KAAK,MAAM;gBACxC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,SAAS;gBACrC,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAClC,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,SAAS;oBACzB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,SAAS;iBAC7B,CAAC,CAAC;gBACH,iBAAiB,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;oBACjD,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,SAAS;oBAC1B,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,KAAK;oBACxB,YAAY,EAAE,EAAE,CAAC,YAAY,IAAI,CAAC;oBAClC,KAAK,EAAE,EAAE,CAAC,KAAK;iBACf,CAAC,CAAC;aACH,CAAC;QACH,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAClB,OAAmB,EACnB,OAAe,EACf,SAAiB,EACjB,OAAgB,EAChB,YAAoB,EAAE;IAEtB,OAAO,oBAAoB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,GAAG,GAAG;YACX,SAAS;YACT,MAAM;YACN,OAAO;YACP,aAAa;YACb,SAAS;YACT,mBAAmB;YACnB,uBAAuB;YACvB,QAAQ;YACR,MAAM,CAAC,SAAS,CAAC;SACjB,CAAC;QAEF,IAAI,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAChC,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAE1B,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,CAAC,GAAG,GAAG,EAAE,YAAY,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7E,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBACrD,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,CAAC;YACD,OAAO,IAAI,CAAC;QACb,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAC9B,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,IAAY;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAC9B,CAAC,IAAI,EAAE,EAAE,CACR,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QACtB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QACtB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QACtB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CACvB,CAAC;IACF,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACxE,CAAC;AASD;;GAEG;AACH,SAAS,gBAAgB,CAAC,IAAiB,EAAE,MAA0B;IACtE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;YACN,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,oCAAoC,MAAM,CAAC,aAAa,GAAG;YACpE,UAAU,EAAE,CAAC;SACb,CAAC;IACH,CAAC;IAED,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,UAAU,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC;QAEtD,wCAAwC;QACxC,IAAI,UAAU,IAAI,MAAM,CAAC,yBAAyB,IAAI,GAAG,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxF,MAAM,kBAAkB,GAAG,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YACzE,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACzB,UAAU,GAAG,KAAK,CAAC;YACpB,CAAC;QACF,CAAC;QAED,IAAI,UAAU,EAAE,CAAC;YAChB,UAAU,EAAE,CAAC;QACd,CAAC;aAAM,CAAC;YACP,MAAM,aAAa,GAAG,GAAG,CAAC,iBAAiB;iBACzC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC;iBACzB,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;gBACX,MAAM,UAAU,GAAG,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC;gBAC7C,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC;gBAC3C,IAAI,IAAI,GAAG,GAAG,EAAE,CAAC,IAAI,aAAa,EAAE,CAAC,YAAY,EAAE,CAAC;gBACpD,IAAI,UAAU;oBAAE,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC1C,IAAI,OAAO;oBAAE,IAAI,IAAI,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;gBACtD,OAAO,GAAG,IAAI,GAAG,CAAC;YACnB,CAAC,CAAC;iBACD,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,aAAa,CAAC,IAAI,CACjB,GAAG,GAAG,CAAC,IAAI,WAAW,GAAG,CAAC,KAAK,WAAW,GAAG,CAAC,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,iBAAiB,aAAa,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9G,CAAC;QACH,CAAC;IACF,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,UAAU,IAAI,QAAQ,CAAC;IAEvC,MAAM,OAAO,GAAG,OAAO;QACtB,CAAC,CAAC,GAAG,UAAU,IAAI,IAAI,CAAC,MAAM,uBAAuB,QAAQ,GAAG;QAChE,CAAC,CAAC,QAAQ,UAAU,IAAI,IAAI,CAAC,MAAM,uBAAuB,QAAQ,iBAAiB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAE/G,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAyC;IACzE,IAAI,EAAE,gBAAgB;IAEtB,KAAK,CAAC,KAAK,CAAC,MAAsB,EAAE,EAAE,OAAO,EAA2B;QACvE,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEhD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,IAAI,EAAE;YACxC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACpD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QACjE,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;QAE5C,OAAO;YACN,KAAK,EAAE;gBACN,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;gBAClD,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,WAAW,EAAE,IAAI,IAAI,EAAE;gBACvB,QAAQ,EAAE;oBACT,aAAa,EAAE,SAAS,CAAC,aAAa;oBACtC,SAAS,EAAE,SAAS,CAAC,SAAS;oBAC9B,QAAQ,EAAE,IAAI,CAAC,MAAM;oBACrB,UAAU,EAAE,WAAW,CAAC,UAAU;oBAClC,aAAa,EAAE,WAAW,CAAC,OAAO;iBAClC;aACD;YACD,QAAQ,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,EAAE;SACzC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAW,EAAE,MAAsB;IAClD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAA2B;QACpF,MAAM,MAAM,GAAG,cAAc,CAAC;QAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC9B,CAAC;QAED,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEhD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,IAAI,EAAE;YACxC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACpD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QACjE,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACzF,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;QAE5C,OAAO;YACN,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;YAC/C,QAAQ,EAAE;gBACT,QAAQ,EAAE,IAAI,CAAC,MAAM;gBACrB,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;aACzE;SACD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAsB,EAAE,MAAqB,EAAE,EAAE,OAAO,EAA2B;QACnG,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEhD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,IAAI,EAAE;YACxC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACpD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QACjE,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACzF,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;QAE5C,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACxB,CAAC;QAED,6DAA6D;QAC7D,IAAI,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC;QACjC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;QAC1E,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAC3C,wBAAwB;YACxB,oEAAoE;YACpE,qDAAqD;YACrD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;YAC/G,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,sBAAsB,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrF,SAAS;YACV,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBACnB,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACpD,IAAI,UAAU,EAAE,CAAC;oBAChB,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,UAAU,UAAU,EAAE,CAAC;gBAChD,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO;YACN,KAAK,EAAE,KAAK;YACZ,MAAM;YACN,UAAU,EAAE,SAAS,CAAC,mBAAmB,IAAI,KAAK;SAClD,CAAC;IACH,CAAC;IAED,cAAc,CAAC,MAAuB;QACrC,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;CACD,CAAC"}

package/dist/k8s-secret.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Kubernetes Secret Resource Providers
+ *
+ * Three providers in one file (they share kubectl plumbing):
+ *   - `k8s/secret`                  — Opaque secret from key/value pairs
+ *   - `k8s/secret-tls`              — kubernetes.io/tls secret from cert+key files
+ *   - `k8s/secret-docker-registry`  — kubernetes.io/dockerconfigjson secret
+ *
+ * Each replaces a slice of the prior bash-script `k8s/secret-setup` provider,
+ * which had a single readiness check ("any secret exists in namespace") that
+ * could not detect a silently-skipped TLS secret. These typed providers each
+ * verify their own secret by name (and by type, where it matters), so a
+ * partial failure surfaces at the resource that owns it.
+ */
+import * as z from 'zod/v4';
+import type { ResourceProvider } from '@vibesdotdev/pm/resources/provider';
+/**
+ * A Secret manifest built in-process and handed to `kubectl apply -f -` on
+ * stdin. Secret values never go on a command line, where every process on the
+ * host can read them (pm.md R2); kubectl's own `create --dry-run` generator
+ * takes them only as argv, so it is not used for literal values.
+ */
+export declare function buildSecretManifest(name: string, namespace: string, type: 'Opaque' | 'kubernetes.io/dockerconfigjson', stringData: Record<string, string>): string;
+/** The `.dockerconfigjson` payload `kubectl create secret docker-registry` writes. */
+export declare function dockerConfigJson(server: string, username: string, password: string, email: string): string;
+declare const SecretConfigSchema: z.ZodObject<{
+    name: z.ZodString;
+    namespace: z.ZodString;
+    context: z.ZodOptional<z.ZodString>;
+    data: z.ZodRecord<z.ZodString, z.ZodString>;
+}, z.core.$strip>;
+type SecretConfig = z.infer<typeof SecretConfigSchema>;
+export declare const k8sSecretProvider: ResourceProvider<SecretConfig>;
+declare const TlsSecretConfigSchema: z.ZodObject<{
+    name: z.ZodString;
+    namespace: z.ZodString;
+    context: z.ZodOptional<z.ZodString>;
+    certPath: z.ZodString;
+    keyPath: z.ZodString;
+}, z.core.$strip>;
+type TlsSecretConfig = z.infer<typeof TlsSecretConfigSchema>;
+export declare const k8sSecretTlsProvider: ResourceProvider<TlsSecretConfig>;
+declare const DockerRegistryConfigSchema: z.ZodObject<{
+    name: z.ZodString;
+    namespace: z.ZodString;
+    context: z.ZodOptional<z.ZodString>;
+    server: z.ZodString;
+    username: z.ZodString;
+    password: z.ZodString;
+    email: z.ZodString;
+}, z.core.$strip>;
+type DockerRegistryConfig = z.infer<typeof DockerRegistryConfigSchema>;
+export declare const k8sSecretDockerRegistryProvider: ResourceProvider<DockerRegistryConfig>;
+export {};
+//# sourceMappingURL=k8s-secret.d.ts.map

package/dist/k8s-secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"k8s-secret.d.ts","sourceRoot":"","sources":["../src/k8s-secret.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,KAAK,EACX,gBAAgB,EAKhB,MAAM,oCAAoC,CAAC;AAoE5C;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAClC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,QAAQ,GAAG,gCAAgC,EACjD,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAChC,MAAM,CAKR;AAED,sFAAsF;AACtF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAG1G;AA4DD,QAAA,MAAM,kBAAkB;;;;;iBAOtB,CAAC;AAEH,KAAK,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AA8BvD,eAAO,MAAM,iBAAiB,EAAE,gBAAgB,CAAC,YAAY,CAuD5D,CAAC;AAMF,QAAA,MAAM,qBAAqB;;;;;;iBAMzB,CAAC;AAEH,KAAK,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AA0C7D,eAAO,MAAM,oBAAoB,EAAE,gBAAgB,CAAC,eAAe,CAuDlE,CAAC;AAMF,QAAA,MAAM,0BAA0B;;;;;;;;iBAQ9B,CAAC;AAEH,KAAK,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAkCvE,eAAO,MAAM,+BAA+B,EAAE,gBAAgB,CAAC,oBAAoB,CAoDlF,CAAC"}