@vibesdotdev/pm 0.0.0-stage → 1.0.0-rc.3

package/dist/resources/providers/builtin.assets.js

@@ -0,0 +1,26 @@
+/**
+ * PM's builtin resource providers as `pm/resource-provider` assets (id = the
+ * resource type), registered by the pm plugin. Each implementation loads
+ * lazily, on the first resource of its type. Only generic providers live
+ * here: vendor providers (k8s, helm, kind, acp) register their own
+ * `pm/resource-provider` descriptors through their integrations'
+ * consumer plugins.
+ */
+import { createRuntimeAsset, loader } from '@vibesdotdev/kernel';
+import { RESOURCE_PROVIDER_KIND } from "../provider.js";
+const KIND = { kind: RESOURCE_PROVIDER_KIND };
+function providerDescriptor(type, name, description) {
+    return createRuntimeAsset({ kind: RESOURCE_PROVIDER_KIND, id: type, name, description });
+}
+function providerLoader(type, load) {
+    return loader(type, KIND, async () => ({ impl: await load() }));
+}
+export const builtinResourceProviderDescriptors = [
+    providerDescriptor('shell/setup', 'Shell setup', 'Local setup tasks such as directory creation.'),
+    providerDescriptor('local/mkcert', 'Local mkcert certificates', 'Per-machine TLS certificates through mkcert.')
+];
+export const builtinResourceProviderLoaders = [
+    providerLoader('shell/setup', async () => (await import("./shell-setup.js")).shellSetupProvider),
+    providerLoader('local/mkcert', async () => (await import("./local-mkcert.js")).mkcertProvider)
+];
+//# sourceMappingURL=builtin.assets.js.map

package/dist/resources/providers/builtin.assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtin.assets.js","sourceRoot":"","sources":["../../../src/resources/providers/builtin.assets.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAyB,MAAM,gBAAgB,CAAC;AAE/E,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,sBAAsB,EAAW,CAAC;AAEvD,SAAS,kBAAkB,CAAC,IAAY,EAAE,IAAY,EAAE,WAAmB;IAC1E,OAAO,kBAAkB,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,IAA8C;IACnF,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,MAAM,kCAAkC,GAAG;IACjD,kBAAkB,CAAC,aAAa,EAAE,aAAa,EAAE,+CAA+C,CAAC;IACjG,kBAAkB,CAAC,cAAc,EAAE,2BAA2B,EAAE,8CAA8C,CAAC;CAC/G,CAAC;AAEF,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC7C,cAAc,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,CAAC;IAChG,cAAc,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,cAAc,CAAC;CAC9F,CAAC"}

package/dist/resources/providers/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Resource Providers
+ * PM's generic provider implementations, registered as `pm/resource-provider`
+ * assets by the pm plugin (./builtin.assets.ts). Vendor providers (k8s, helm,
+ * kind, acp) live in their integrations packages and register through their
+ * own consumer plugins.
+ */
+import { shellSetupProvider } from './shell-setup.ts';
+import { mkcertProvider } from './local-mkcert.ts';
+/**
+ * Export all provider classes for direct usage
+ */
+export { shellSetupProvider, mkcertProvider };
+//# sourceMappingURL=index.d.ts.map

package/dist/resources/providers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/resources/providers/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD;;GAEG;AACH,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,CAAC"}

package/dist/resources/providers/index.js

@@ -0,0 +1,14 @@
+/**
+ * Resource Providers
+ * PM's generic provider implementations, registered as `pm/resource-provider`
+ * assets by the pm plugin (./builtin.assets.ts). Vendor providers (k8s, helm,
+ * kind, acp) live in their integrations packages and register through their
+ * own consumer plugins.
+ */
+import { shellSetupProvider } from "./shell-setup.js";
+import { mkcertProvider } from "./local-mkcert.js";
+/**
+ * Export all provider classes for direct usage
+ */
+export { shellSetupProvider, mkcertProvider };
+//# sourceMappingURL=index.js.map

package/dist/resources/providers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/resources/providers/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD;;GAEG;AACH,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,CAAC"}

package/dist/resources/providers/local-mkcert.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Local mkcert Resource Provider
+ *
+ * Generates per-machine TLS certs for local development domains using mkcert.
+ * Certs live in a configurable directory (typically `~/.vibes/certs/`) — they
+ * are a per-developer-machine asset, not a code asset, so they sit outside
+ * any worktree and survive across repos.
+ *
+ * Setup is idempotent and **hard-fails** when:
+ *   - the `mkcert` binary is not on PATH
+ *   - the local CA isn't installed (user must run `mkcert -install` once)
+ *   - cert generation fails for any reason
+ *
+ * The hard-fail is deliberate: prior shell-script behavior silently warned
+ * and continued, which let downstream consumers (nginx) hit a generic
+ * MountVolume timeout 2+ minutes later. Failing here surfaces the real
+ * cause at the resource that owns it.
+ */
+import * as z from 'zod/v4';
+import type { ResourceProvider } from '../provider.ts';
+declare const MkcertConfigSchema: z.ZodObject<{
+    certDir: z.ZodString;
+    certFile: z.ZodString;
+    keyFile: z.ZodString;
+    domains: z.ZodArray<z.ZodString>;
+    keyMode: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+type MkcertConfig = z.infer<typeof MkcertConfigSchema>;
+export declare const mkcertProvider: ResourceProvider<MkcertConfig>;
+export {};
+//# sourceMappingURL=local-mkcert.d.ts.map

package/dist/resources/providers/local-mkcert.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-mkcert.d.ts","sourceRoot":"","sources":["../../../src/resources/providers/local-mkcert.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,KAAK,EACX,gBAAgB,EAKhB,MAAM,gBAAgB,CAAC;AAcxB,QAAA,MAAM,kBAAkB;;;;;;iBAMtB,CAAC;AAEH,KAAK,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAkHvD,eAAO,MAAM,cAAc,EAAE,gBAAgB,CAAC,YAAY,CAoDzD,CAAC"}

package/dist/resources/providers/local-mkcert.js

@@ -0,0 +1,169 @@
+/**
+ * Local mkcert Resource Provider
+ *
+ * Generates per-machine TLS certs for local development domains using mkcert.
+ * Certs live in a configurable directory (typically `~/.vibes/certs/`) — they
+ * are a per-developer-machine asset, not a code asset, so they sit outside
+ * any worktree and survive across repos.
+ *
+ * Setup is idempotent and **hard-fails** when:
+ *   - the `mkcert` binary is not on PATH
+ *   - the local CA isn't installed (user must run `mkcert -install` once)
+ *   - cert generation fails for any reason
+ *
+ * The hard-fail is deliberate: prior shell-script behavior silently warned
+ * and continued, which let downstream consumers (nginx) hit a generic
+ * MountVolume timeout 2+ minutes later. Failing here surfaces the real
+ * cause at the resource that owns it.
+ */
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { chmodChecked } from '@vibesdotdev/filesystem/core';
+import * as z from 'zod/v4';
+import { runCapture } from "../../utils/exec.js";
+import { setupErrorResult, toolFailure } from "./tool-env.js";
+/** mkcert: its CA root and the trust stores it installs into. */
+const MKCERT_TOOL_INHERIT_ENV = ['CAROOT', 'TRUST_STORES', 'JAVA_HOME'];
+import { commandExists } from "../../utils/command-exists.js";
+import { attempt } from "../../utils/attempt.js";
+import { resolvePMToolEnv } from "../../helpers/process-env.js";
+import { pmFileSystem } from "../../helpers/runtime-files.js";
+const DEFAULT_KEY_MODE = 0o600;
+const MkcertConfigSchema = z.object({
+    certDir: z.string().min(1),
+    certFile: z.string().min(1),
+    keyFile: z.string().min(1),
+    domains: z.array(z.string().min(1)).min(1),
+    keyMode: z.number().int().min(0).max(0o777).optional()
+});
+function validateConfig(config) {
+    return MkcertConfigSchema.parse(config);
+}
+function certPath(files, c) {
+    return files.join(c.certDir, c.certFile);
+}
+function keyPath(files, c) {
+    return files.join(c.certDir, c.keyFile);
+}
+async function bothFilesExist(files, c) {
+    return (await files.exists(certPath(files, c))) && (await files.exists(keyPath(files, c)));
+}
+async function readMkcertCARoot(runtime) {
+    const { exitCode, stdout } = await runCapture(runtime, 'mkcert', ['-CAROOT'], { inheritEnv: MKCERT_TOOL_INHERIT_ENV });
+    if (exitCode !== 0)
+        return null;
+    const trimmed = stdout.trim();
+    return trimmed.length > 0 ? trimmed : null;
+}
+async function caInstalled(files, caRoot) {
+    return (await files.exists(files.join(caRoot, 'rootCA.pem'))) && (await files.exists(files.join(caRoot, 'rootCA-key.pem')));
+}
+/**
+ * Pin the key file's mode to `mode` through the filesystem kind's `chmod`
+ * (exact, and the key is never rewritten or copied). A host without POSIX
+ * modes (Windows) has none to pin.
+ */
+async function pinKeyMode(runtime, files, c) {
+    if (runtime.localEnvironment.getPlatform?.() === 'win32')
+        return;
+    await chmodChecked(files, keyPath(files, c), c.keyMode ?? DEFAULT_KEY_MODE);
+}
+async function generateCerts(runtime, files, c) {
+    await files.mkdir(c.certDir, { recursive: true });
+    const outcome = await runCapture(runtime, 'mkcert', [
+        '-cert-file',
+        certPath(files, c),
+        '-key-file',
+        keyPath(files, c),
+        ...c.domains
+    ], { inheritEnv: MKCERT_TOOL_INHERIT_ENV });
+    if (outcome.exitCode !== 0) {
+        throw toolFailure({ tool: 'mkcert', action: 'generate certificates', outcome });
+    }
+    // mkcert defaults vary by platform; pin the key mode to user-only.
+    await pinKeyMode(runtime, files, c);
+}
+/** The ready state of the cert files, and whether they already existed. */
+function certsReady(config, files, cfg, reused) {
+    return {
+        state: {
+            id: config.id,
+            type: config.type,
+            status: 'ready',
+            createdAt: new Date(),
+            lastChecked: new Date(),
+            metadata: {
+                certPath: certPath(files, cfg),
+                keyPath: keyPath(files, cfg),
+                domains: cfg.domains,
+                reused
+            }
+        }
+    };
+}
+/** Reuse the cert files when both exist (re-pinning the key's mode), else generate them with mkcert. */
+async function ensureCerts(runtime, config, cfg) {
+    const files = await pmFileSystem(runtime);
+    // Look on the PATH mkcert will run with (the handed runtime's, repaired), not the ambient one.
+    const toolEnv = await resolvePMToolEnv(runtime, { inheritEnv: MKCERT_TOOL_INHERIT_ENV });
+    const pathEntry = Object.entries(toolEnv).find(([name]) => name.toUpperCase() === 'PATH');
+    if (!(await commandExists(runtime, 'mkcert', pathEntry?.[1]))) {
+        throw new CapabilityError('mkcert is not on PATH. Install it (macOS: `brew install mkcert nss`) and re-run.', 'UNAVAILABLE', { reason: 'pm-mkcert-missing', retryable: false });
+    }
+    if (await bothFilesExist(files, cfg)) {
+        // Re-pin permissions; previous runs may have left them looser.
+        // The key's mode is a security property: a re-pin that fails
+        // propagates rather than leaving a looser key in place.
+        await pinKeyMode(runtime, files, cfg);
+        return certsReady(config, files, cfg, true);
+    }
+    const caRoot = await readMkcertCARoot(runtime);
+    if (!caRoot || !(await caInstalled(files, caRoot))) {
+        throw new CapabilityError('mkcert local CA is not installed. Run `mkcert -install` once to set up the system trust store, then re-run.', 'UNAVAILABLE', { reason: 'pm-mkcert-ca-missing', retryable: false });
+    }
+    await generateCerts(runtime, files, cfg);
+    return certsReady(config, files, cfg, false);
+}
+export const mkcertProvider = {
+    type: 'local/mkcert',
+    async setup(config, { runtime }) {
+        const cfg = validateConfig(config.config);
+        const ensured = await attempt(() => ensureCerts(runtime, config, cfg));
+        return ensured.ok ? ensured.value : setupErrorResult(config, ensured.failure);
+    },
+    async teardown(_id) {
+        // Certs are a per-machine asset shared across repos; never delete on teardown.
+    },
+    async status(_id, { runtime, config }) {
+        if (!config) {
+            return { status: 'missing' };
+        }
+        const cfg = validateConfig(config.config);
+        const files = await pmFileSystem(runtime);
+        if (!(await bothFilesExist(files, cfg))) {
+            return { status: 'missing' };
+        }
+        return {
+            status: 'ready',
+            metadata: { certPath: certPath(files, cfg), keyPath: keyPath(files, cfg) }
+        };
+    },
+    async checkReady(config, _state, { runtime }) {
+        const cfg = validateConfig(config.config);
+        const files = await pmFileSystem(runtime);
+        if (await bothFilesExist(files, cfg)) {
+            return { ready: true };
+        }
+        return {
+            ready: false,
+            reason: `Cert files missing: ${certPath(files, cfg)} / ${keyPath(files, cfg)}`
+        };
+    },
+    validateConfig(config) {
+        return validateConfig(config);
+    },
+    describe(config) {
+        const cfg = validateConfig(config.config);
+        return `mkcert certs at ${cfg.certDir} for [${cfg.domains.join(', ')}]`;
+    }
+};
+//# sourceMappingURL=local-mkcert.js.map

package/dist/resources/providers/local-mkcert.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-mkcert.js","sourceRoot":"","sources":["../../../src/resources/providers/local-mkcert.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,eAAe,EAAmB,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAQ5B,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE9D,iEAAiE;AACjE,MAAM,uBAAuB,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE,WAAW,CAAU,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAE9D,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAqB,MAAM,gCAAgC,CAAC;AAEjF,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAE/B,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC;AAIH,SAAS,cAAc,CAAC,MAAuB;IAC9C,OAAO,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAmB,EAAE,CAAe;IACrD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,OAAO,CAAC,KAAmB,EAAE,CAAe;IACpD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,KAAmB,EAAE,CAAe;IACjE,OAAO,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,OAAmB;IAClD,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,EAAE,uBAAuB,EAAE,CAAC,CAAC;IACvH,IAAI,QAAQ,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,KAAmB,EAAE,MAAc;IAC7D,OAAO,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;AAC7H,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,UAAU,CAAC,OAAmB,EAAE,KAAmB,EAAE,CAAe;IAClF,IAAI,OAAO,CAAC,gBAAgB,CAAC,WAAW,EAAE,EAAE,KAAK,OAAO;QAAE,OAAO;IACjE,MAAM,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,OAAmB,EAAE,KAAmB,EAAE,CAAe;IACrF,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE;QACnD,YAAY;QACZ,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QAClB,WAAW;QACX,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACjB,GAAG,CAAC,CAAC,OAAO;KACZ,EAAE,EAAE,UAAU,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAC5C,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,uBAAuB,EAAE,OAAO,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,mEAAmE;IACnE,MAAM,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,2EAA2E;AAC3E,SAAS,UAAU,CAClB,MAAsB,EACtB,KAAmB,EACnB,GAAiB,EACjB,MAAe;IAEf,OAAO;QACN,KAAK,EAAE;YACN,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,WAAW,EAAE,IAAI,IAAI,EAAE;YACvB,QAAQ,EAAE;gBACT,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC;gBAC9B,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;gBAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,MAAM;aACN;SACD;KACD,CAAC;AACH,CAAC;AAED,wGAAwG;AACxG,KAAK,UAAU,WAAW,CAAC,OAAmB,EAAE,MAAsB,EAAE,GAAiB;IACxF,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;IAC1C,+FAA+F;IAC/F,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,uBAAuB,EAAE,CAAC,CAAC;IACzF,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC;IAC1F,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,eAAe,CACxB,kFAAkF,EAClF,aAAa,EACb,EAAE,MAAM,EAAE,mBAAmB,EAAE,SAAS,EAAE,KAAK,EAAE,CACjD,CAAC;IACH,CAAC;IAED,IAAI,MAAM,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;QACtC,+DAA+D;QAC/D,6DAA6D;QAC7D,wDAAwD;QACxD,MAAM,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACtC,OAAO,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,eAAe,CACxB,6GAA6G,EAC7G,aAAa,EACb,EAAE,MAAM,EAAE,sBAAsB,EAAE,SAAS,EAAE,KAAK,EAAE,CACpD,CAAC;IACH,CAAC;IAED,MAAM,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IACzC,OAAO,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAmC;IAC7D,IAAI,EAAE,cAAc;IAEpB,KAAK,CAAC,KAAK,CAAC,MAAsB,EAAE,EAAE,OAAO,EAA2B;QACvE,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QACvE,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAW;QACzB,+EAA+E;IAChF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,EAAE,OAAO,EAAE,MAAM,EAA2B;QACrE,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC9B,CAAC;QACD,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YACzC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC9B,CAAC;QACD,OAAO;YACN,MAAM,EAAE,OAAO;YACf,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE;SAC1E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CACf,MAAsB,EACtB,MAAqB,EACrB,EAAE,OAAO,EAA2B;QAEpC,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,MAAM,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACxB,CAAC;QACD,OAAO;YACN,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,uBAAuB,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE;SAC9E,CAAC;IACH,CAAC;IAED,cAAc,CAAC,MAAuB;QACrC,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,QAAQ,CAAC,MAAsB;QAC9B,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1C,OAAO,mBAAmB,GAAG,CAAC,OAAO,SAAS,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IACzE,CAAC;CACD,CAAC"}

package/dist/resources/providers/shell-setup.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Shell Setup Resource Provider
+ *
+ * Lightweight provider for local shell-based resources (e.g., directory creation).
+ * The actual work is done via the resource's onCreate hook — this provider
+ * just marks the resource as ready after setup.
+ */
+import type { ResourceProvider } from '../provider.ts';
+import * as z from 'zod/v4';
+/** A shell setup resource's own config: only a text description, anything else is no description. */
+declare const ShellSetupConfigSchema: z.ZodObject<{
+    description: z.ZodCatch<z.ZodOptional<z.ZodString>>;
+}, z.core.$strip>;
+type ShellSetupConfig = z.infer<typeof ShellSetupConfigSchema>;
+export declare const shellSetupProvider: ResourceProvider<ShellSetupConfig>;
+export {};
+//# sourceMappingURL=shell-setup.d.ts.map

package/dist/resources/providers/shell-setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-setup.d.ts","sourceRoot":"","sources":["../../../src/resources/providers/shell-setup.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EACX,gBAAgB,EAIhB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,qGAAqG;AACrG,QAAA,MAAM,sBAAsB;;iBAAoE,CAAC;AACjG,KAAK,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE/D,eAAO,MAAM,kBAAkB,EAAE,gBAAgB,CAAC,gBAAgB,CAqCjE,CAAC"}

package/dist/resources/providers/shell-setup.js

@@ -0,0 +1,41 @@
+/**
+ * Shell Setup Resource Provider
+ *
+ * Lightweight provider for local shell-based resources (e.g., directory creation).
+ * The actual work is done via the resource's onCreate hook — this provider
+ * just marks the resource as ready after setup.
+ */
+import * as z from 'zod/v4';
+/** A shell setup resource's own config: only a text description, anything else is no description. */
+const ShellSetupConfigSchema = z.object({ description: z.string().optional().catch(undefined) });
+export const shellSetupProvider = {
+    type: 'shell',
+    subType: 'setup',
+    validateConfig(config) {
+        return ShellSetupConfigSchema.parse(config);
+    },
+    async setup(config) {
+        // The actual shell work is handled by the resource manager's onCreate hook.
+        // This provider just validates and marks the resource as ready.
+        return {
+            state: {
+                id: config.id,
+                type: config.type,
+                status: 'ready',
+                lastChecked: new Date()
+            }
+        };
+    },
+    async teardown(_id, _state) {
+        // Shell setup resources are typically idempotent directories/files —
+        // teardown is a no-op (we don't delete user data).
+    },
+    async status(_id) {
+        // Shell setup resources are stateless — if we ran setup, they're ready.
+        return { status: 'ready' };
+    },
+    async checkReady(_config, _state) {
+        return { ready: true };
+    }
+};
+//# sourceMappingURL=shell-setup.js.map

package/dist/resources/providers/shell-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-setup.js","sourceRoot":"","sources":["../../../src/resources/providers/shell-setup.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,qGAAqG;AACrG,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AAGjG,MAAM,CAAC,MAAM,kBAAkB,GAAuC;IACrE,IAAI,EAAE,OAAO;IACb,OAAO,EAAE,OAAO;IAEhB,cAAc,CAAC,MAAuB;QACrC,OAAO,sBAAsB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAsB;QACjC,4EAA4E;QAC5E,gEAAgE;QAChE,OAAO;YACN,KAAK,EAAE;gBACN,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,OAAO;gBACf,WAAW,EAAE,IAAI,IAAI,EAAE;aACvB;SACD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAW,EAAE,MAAsB;QACjD,qEAAqE;QACrE,mDAAmD;IACpD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACvB,wEAAwE;QACxE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,UAAU,CACf,OAAuB,EACvB,MAAsB;QAEtB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;CACD,CAAC"}

package/dist/resources/providers/tool-env.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Generic helpers for resource providers that shell out to a host tool: a
+ * bounded redacted failure excerpt (`toolFailure`, `toolOutputExcerpt`), the
+ * failed-setup result (`setupErrorResult`), and small parsing helpers. Each
+ * provider names the host variables its own tool reads on its own descriptor
+ * or implementation; vendor inherit-env lists live with their integrations
+ * package (kubectl/helm/docker/kind in `@vibesdotdev/integrations-kubernetes`,
+ * mkcert in `./local-mkcert.ts`). Credentials are never named here; they reach
+ * a child only as a lease in its declaration.
+ */
+import * as z from 'zod/v4';
+import { CapabilityError, type CaughtFailure } from '@vibesdotdev/kernel';
+import type { ResourceSetupResult } from '../provider.ts';
+import type { ResourceConfig } from '../../schemas/resource.ts';
+/** The most characters of a tool's output a failure or status keeps. */
+export declare const TOOL_OUTPUT_EXCERPT_CHARS = 400;
+/** What a vendor tool run answered: its exit and its captured text. */
+export interface ToolRunOutcome {
+    exitCode: number | null;
+    stdout?: string;
+    stderr?: string;
+}
+/**
+ * The values a tool's output must never repeat: each one as given and as
+ * base64 (a Kubernetes Secret manifest carries its values base64-encoded, and
+ * kubectl echoes the object it rejected).
+ */
+export declare function toolOutputSecrets(values: readonly string[]): string[];
+/**
+ * A tool's output as a bounded, redacted excerpt: control characters removed,
+ * credential shapes and every `secrets` value (as given and base64) replaced,
+ * at most {@link TOOL_OUTPUT_EXCERPT_CHARS} characters. The single place a
+ * resource provider turns raw tool output into text that may reach an error,
+ * a status, the daemon log or persisted resource state.
+ */
+export declare function toolOutputExcerpt(text: string, secrets?: readonly string[]): string;
+/**
+ * The typed failure of a vendor tool run: `UNAVAILABLE pm-resource-tool-failed`
+ * naming the tool, the action and the exit code, with only a bounded redacted
+ * excerpt of its output. Raw tool output never reaches a thrown error.
+ */
+export declare function toolFailure(input: {
+    tool: string;
+    action: string;
+    outcome: ToolRunOutcome;
+    /** Values the output must not repeat; `'value-free'` keeps no output at all (the input held values PM never saw). */
+    secrets?: readonly string[] | 'value-free';
+}): CapabilityError;
+/**
+ * The text a failed provider call reports in a resource's `error`: the message
+ * of the failure it captured (a typed refusal's message is already bounded and
+ * redacted), or the description of a non-Error throw.
+ */
+export declare function providerFailureText(failure: CaughtFailure): string;
+/** A setup that failed: the resource's `error` state, carrying the captured failure's text. */
+export declare function setupErrorResult(config: ResourceConfig, failure: CaughtFailure): ResourceSetupResult;
+/**
+ * `text` read as JSON through `schema`: the parsed object, or `undefined` when
+ * the text is not JSON or not the object the schema describes (a typed absence
+ * the caller reports); any other failure propagates.
+ */
+export declare function readJsonObject<T>(schema: z.ZodType<T>, text: string): T | undefined;
+//# sourceMappingURL=tool-env.d.ts.map

package/dist/resources/providers/tool-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-env.d.ts","sourceRoot":"","sources":["../../../src/resources/providers/tool-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE1E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAIhE,wEAAwE;AACxE,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAE7C,uEAAuE;AACvE,MAAM,WAAW,cAAc;IAC3B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AASD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAOrE;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,SAAS,MAAM,EAAO,GAAG,MAAM,CAEvF;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,cAAc,CAAC;IACxB,qHAAqH;IACrH,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,YAAY,CAAC;CAC9C,GAAG,eAAe,CAalB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAElE;AAED,+FAA+F;AAC/F,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,GAAG,mBAAmB,CAUpG;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS,CAQnF"}

package/dist/resources/providers/tool-env.js

@@ -0,0 +1,99 @@
+/**
+ * Generic helpers for resource providers that shell out to a host tool: a
+ * bounded redacted failure excerpt (`toolFailure`, `toolOutputExcerpt`), the
+ * failed-setup result (`setupErrorResult`), and small parsing helpers. Each
+ * provider names the host variables its own tool reads on its own descriptor
+ * or implementation; vendor inherit-env lists live with their integrations
+ * package (kubectl/helm/docker/kind in `@vibesdotdev/integrations-kubernetes`,
+ * mkcert in `./local-mkcert.ts`). Credentials are never named here; they reach
+ * a child only as a lease in its declaration.
+ */
+import * as z from 'zod/v4';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { redactedExcerpt } from '@vibesdotdev/shared/utils';
+import { attemptSync } from "../../utils/attempt.js";
+import { rethrowFailure } from "../../helpers/failure.js";
+/** The most characters of a tool's output a failure or status keeps. */
+export const TOOL_OUTPUT_EXCERPT_CHARS = 400;
+/** `value`'s UTF-8 bytes as base64, the spelling a Secret manifest's `data` carries. */
+function base64Utf8(value) {
+    let binary = '';
+    for (const byte of new TextEncoder().encode(value))
+        binary += String.fromCharCode(byte);
+    return btoa(binary);
+}
+/**
+ * The values a tool's output must never repeat: each one as given and as
+ * base64 (a Kubernetes Secret manifest carries its values base64-encoded, and
+ * kubectl echoes the object it rejected).
+ */
+export function toolOutputSecrets(values) {
+    const spellings = [];
+    for (const value of values) {
+        if (value.length === 0)
+            continue;
+        spellings.push(value, base64Utf8(value));
+    }
+    return spellings;
+}
+/**
+ * A tool's output as a bounded, redacted excerpt: control characters removed,
+ * credential shapes and every `secrets` value (as given and base64) replaced,
+ * at most {@link TOOL_OUTPUT_EXCERPT_CHARS} characters. The single place a
+ * resource provider turns raw tool output into text that may reach an error,
+ * a status, the daemon log or persisted resource state.
+ */
+export function toolOutputExcerpt(text, secrets = []) {
+    return redactedExcerpt(text.trim(), { maxChars: TOOL_OUTPUT_EXCERPT_CHARS, secrets: toolOutputSecrets(secrets) });
+}
+/**
+ * The typed failure of a vendor tool run: `UNAVAILABLE pm-resource-tool-failed`
+ * naming the tool, the action and the exit code, with only a bounded redacted
+ * excerpt of its output. Raw tool output never reaches a thrown error.
+ */
+export function toolFailure(input) {
+    const raw = input.outcome.stderr?.trim() || input.outcome.stdout?.trim() || '';
+    const excerpt = input.secrets === 'value-free' ? '' : toolOutputExcerpt(raw, input.secrets ?? []);
+    const exit = input.outcome.exitCode === null ? 'no exit code' : `exit ${input.outcome.exitCode}`;
+    return new CapabilityError(`${input.tool} ${input.action} failed (${exit})${excerpt ? `: ${excerpt}` : ''}`, 'UNAVAILABLE', {
+        reason: 'pm-resource-tool-failed',
+        retryable: true,
+        details: { tool: input.tool, action: input.action, exitCode: input.outcome.exitCode }
+    });
+}
+/**
+ * The text a failed provider call reports in a resource's `error`: the message
+ * of the failure it captured (a typed refusal's message is already bounded and
+ * redacted), or the description of a non-Error throw.
+ */
+export function providerFailureText(failure) {
+    return failure instanceof Error ? failure.message : failure.description;
+}
+/** A setup that failed: the resource's `error` state, carrying the captured failure's text. */
+export function setupErrorResult(config, failure) {
+    return {
+        state: {
+            id: config.id,
+            type: config.type,
+            status: 'error',
+            lastChecked: new Date(),
+            error: providerFailureText(failure)
+        }
+    };
+}
+/**
+ * `text` read as JSON through `schema`: the parsed object, or `undefined` when
+ * the text is not JSON or not the object the schema describes (a typed absence
+ * the caller reports); any other failure propagates.
+ */
+export function readJsonObject(schema, text) {
+    const json = attemptSync(() => JSON.parse(text));
+    if (!json.ok) {
+        if (json.failure instanceof SyntaxError)
+            return undefined;
+        return rethrowFailure(json.failure);
+    }
+    const parsed = schema.safeParse(json.value);
+    return parsed.success ? parsed.data : undefined;
+}
+//# sourceMappingURL=tool-env.js.map

package/dist/resources/providers/tool-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-env.js","sourceRoot":"","sources":["../../../src/resources/providers/tool-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAsB,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAG5D,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,wEAAwE;AACxE,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAS7C,wFAAwF;AACxF,SAAS,UAAU,CAAC,KAAa;IAC7B,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACxF,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAyB;IACvD,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACjC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,UAA6B,EAAE;IAC3E,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,yBAAyB,EAAE,OAAO,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AACtH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAM3B;IACG,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC/E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAClG,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;IACjG,OAAO,IAAI,eAAe,CACtB,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,YAAY,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAChF,aAAa,EACb;QACI,MAAM,EAAE,yBAAyB;QACjC,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE;KACxF,CACJ,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAsB;IACtD,OAAO,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;AAC5E,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,gBAAgB,CAAC,MAAsB,EAAE,OAAsB;IAC3E,OAAO;QACH,KAAK,EAAE;YACH,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,OAAO;YACf,WAAW,EAAE,IAAI,IAAI,EAAE;YACvB,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC;SACtC;KACJ,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAI,MAAoB,EAAE,IAAY;IAChE,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACX,IAAI,IAAI,CAAC,OAAO,YAAY,WAAW;YAAE,OAAO,SAAS,CAAC;QAC1D,OAAO,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC"}

package/dist/resources/resource-state-summary.d.ts

@@ -0,0 +1,3 @@
+import { type ResourceState } from '../schemas/resource.ts';
+export declare function summarizeResourceState(state: ResourceState): ResourceState;
+//# sourceMappingURL=resource-state-summary.d.ts.map

package/dist/resources/resource-state-summary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-state-summary.d.ts","sourceRoot":"","sources":["../../src/resources/resource-state-summary.ts"],"names":[],"mappings":"AACA,OAAO,EAA+C,KAAK,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAyFzG,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,aAAa,GAAG,aAAa,CAM1E"}

package/dist/resources/resource-state-summary.js

@@ -0,0 +1,82 @@
+import * as z from 'zod/v4';
+import { ProviderPayloadSchema } from "../schemas/resource.js";
+const RESOURCE_SUMMARY_TEXT_LIMIT = 160;
+/** A non-empty text, cut to the summary limit; anything else is no text. */
+const SummaryTextSchema = z
+    .string()
+    .min(1)
+    .transform((value) => value.length > RESOURCE_SUMMARY_TEXT_LIMIT ? `${value.slice(0, RESOURCE_SUMMARY_TEXT_LIMIT - 3)}...` : value);
+const SummaryScalarSchema = z.union([z.number(), z.boolean()]);
+/** A list of provider records; an entry that is not a record summarizes as an empty one. */
+const RecordListSchema = z.array(ProviderPayloadSchema.catch({}));
+/** A list of key names; an entry that is not a name is dropped. */
+const KeyNamesSchema = z.array(z.string().nullable().catch(null));
+/** One listed record's summary: the short text fields it carries. */
+const RecordSummarySchema = z.record(z.string(), z.string());
+/** A resource's metadata summary: short texts, flags and counts, summarized lists, and key names. */
+const MetadataSummarySchema = z.record(z.string(), z.union([z.string(), z.number(), z.boolean(), z.array(z.string()), z.array(RecordSummarySchema)]));
+const RECORD_TEXT_KEYS = [
+    'id',
+    'appId',
+    'environment',
+    'branch',
+    'status',
+    'provider',
+    'ownerDev',
+    'livenessProfile',
+    'healthEndpoint'
+];
+const METADATA_TEXT_KEYS = [
+    'description',
+    'phase',
+    'source',
+    'sourceNote',
+    'livenessProfile',
+    'action',
+    'clusterName',
+    'namespace',
+    'context',
+    'release',
+    'chart'
+];
+function summarizeResourceRecord(record) {
+    const summary = {};
+    for (const key of RECORD_TEXT_KEYS) {
+        const text = SummaryTextSchema.safeParse(record[key]);
+        if (text.success)
+            summary[key] = text.data;
+    }
+    return summary;
+}
+function summarizeResourceMetadata(metadata) {
+    if (!metadata)
+        return undefined;
+    const summary = {};
+    for (const key of METADATA_TEXT_KEYS) {
+        const text = SummaryTextSchema.safeParse(metadata[key]);
+        if (text.success)
+            summary[key] = text.data;
+    }
+    for (const key of ['count', 'immutable', 'reused']) {
+        const scalar = SummaryScalarSchema.safeParse(metadata[key]);
+        if (scalar.success)
+            summary[key] = scalar.data;
+    }
+    for (const key of ['records', 'slices', 'previews']) {
+        const list = RecordListSchema.safeParse(metadata[key]);
+        if (list.success)
+            summary[key] = list.data.map((entry) => summarizeResourceRecord(entry));
+    }
+    const keys = KeyNamesSchema.safeParse(metadata.keys);
+    if (keys.success)
+        summary.keys = keys.data.filter((name) => name !== null);
+    return Object.keys(summary).length > 0 ? summary : undefined;
+}
+export function summarizeResourceState(state) {
+    const metadata = summarizeResourceMetadata(state.metadata);
+    return {
+        ...state,
+        metadata
+    };
+}
+//# sourceMappingURL=resource-state-summary.js.map

package/dist/resources/resource-state-summary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-state-summary.js","sourceRoot":"","sources":["../../src/resources/resource-state-summary.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAA4C,MAAM,wBAAwB,CAAC;AAEzG,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAExC,4EAA4E;AAC5E,MAAM,iBAAiB,GAAG,CAAC;KACzB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CACpB,KAAK,CAAC,MAAM,GAAG,2BAA2B,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAC5G,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AAC/D,4FAA4F;AAC5F,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AAClE,mEAAmE;AACnE,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;AAElE,qEAAqE;AACrE,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAG7D,qGAAqG;AACrG,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CACrC,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,CACjG,CAAC;AAGF,MAAM,gBAAgB,GAAG;IACxB,IAAI;IACJ,OAAO;IACP,aAAa;IACb,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,UAAU;IACV,iBAAiB;IACjB,gBAAgB;CACP,CAAC;AAEX,MAAM,kBAAkB,GAAG;IAC1B,aAAa;IACb,OAAO;IACP,QAAQ;IACR,YAAY;IACZ,iBAAiB;IACjB,QAAQ;IACR,aAAa;IACb,WAAW;IACX,SAAS;IACT,SAAS;IACT,OAAO;CACE,CAAC;AAEX,SAAS,uBAAuB,CAAC,MAAuB;IACvD,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;IAC5C,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,yBAAyB,CAAC,QAAmC;IACrE,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,OAAO,GAAoB,EAAE,CAAC;IAEpC,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;IAC5C,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;IAChD,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,gBAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,IAAI,GAAG,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAE3E,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAoB;IAC1D,MAAM,QAAQ,GAAG,yBAAyB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC3D,OAAO;QACN,GAAG,KAAK;QACR,QAAQ;KACR,CAAC;AACH,CAAC"}

package/dist/resources/status-options.d.ts

@@ -0,0 +1,4 @@
+import type { ResourceStatusOptions } from './provider.ts';
+export declare const BROAD_RESOURCE_STATUS_TIMEOUT_MS = 2500;
+export declare const BROAD_RESOURCE_STATUS_OPTIONS: ResourceStatusOptions;
+//# sourceMappingURL=status-options.d.ts.map

package/dist/resources/status-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-options.d.ts","sourceRoot":"","sources":["../../src/resources/status-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAE3D,eAAO,MAAM,gCAAgC,OAAQ,CAAC;AAEtD,eAAO,MAAM,6BAA6B,EAAE,qBAG1C,CAAC"}