kustodian 1.0.0

package/dist/plugins/substitution-providers.d.ts

@@ -0,0 +1,48 @@
+import type { z } from 'zod';
+import type { KustodianErrorType, ResultType } from '../core/index.js';
+import type { ClusterType, TemplateType } from '../schema/index.js';
+/**
+ * Context provided to substitution providers during resolution.
+ */
+export interface SubstitutionContextType {
+    /** Cluster configuration */
+    cluster: ClusterType;
+    /** All templates being processed */
+    templates: TemplateType[];
+    /** Plugin-specific configuration (optional) */
+    config?: Record<string, unknown> | undefined;
+}
+/**
+ * Substitution provider interface.
+ * Plugins implement this to provide custom substitution types (e.g., SOPS, Vault, AWS Secrets Manager).
+ */
+export interface SubstitutionProviderType {
+    /**
+     * Unique type identifier for this provider (e.g., 'sops', 'vault', 'aws-secrets').
+     * This must match the 'type' field in substitution objects.
+     */
+    readonly type: string;
+    /**
+     * Zod schema for validating substitutions of this type.
+     * The schema should validate the structure of substitution objects with this provider's type.
+     */
+    readonly schema: z.ZodType<unknown>;
+    /**
+     * Resolves substitutions to key-value pairs.
+     *
+     * @param substitutions - Array of substitution objects to resolve (all of this provider's type)
+     * @param context - Context information including cluster config and templates
+     * @returns Result containing a map of substitution names to their resolved values
+     *
+     * @example
+     * ```typescript
+     * // Input substitutions:
+     * // [{ type: 'sops', name: 'db_password', file: 'secrets.enc.yaml', key: 'database.password' }]
+     * //
+     * // Returns:
+     * // { db_password: 'actual-secret-value' }
+     * ```
+     */
+    resolve(substitutions: unknown[], context: SubstitutionContextType): Promise<ResultType<Record<string, string>, KustodianErrorType>>;
+}
+//# sourceMappingURL=substitution-providers.d.ts.map

package/dist/plugins/substitution-providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"substitution-providers.d.ts","sourceRoot":"","sources":["../../src/plugins/substitution-providers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEpE;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,4BAA4B;IAC5B,OAAO,EAAE,WAAW,CAAC;IACrB,oCAAoC;IACpC,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,+CAA+C;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;CAC9C;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpC;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CACL,aAAa,EAAE,OAAO,EAAE,EACxB,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC;CACpE"}

package/dist/plugins/substitution-providers.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=substitution-providers.js.map

package/dist/plugins/substitution-providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"substitution-providers.js","sourceRoot":"","sources":["../../src/plugins/substitution-providers.ts"],"names":[],"mappings":""}

package/dist/plugins/types.d.ts

@@ -0,0 +1,288 @@
+import type { KustodianErrorType, ResultType } from '../core/index.js';
+import type { NodeListType } from '../nodes/index.js';
+import type { ClusterType, TemplateType } from '../schema/index.js';
+import type { PluginGeneratorType } from './generators.js';
+import type { PluginHookContributionType } from './hooks.js';
+import type { PluginObjectTypeType } from './object-types.js';
+import type { SubstitutionProviderType } from './substitution-providers.js';
+/**
+ * Bootstrap options for cluster provisioning.
+ */
+export interface BootstrapOptionsType {
+    dry_run?: boolean;
+    timeout?: number;
+}
+/**
+ * Reset options for cluster teardown.
+ */
+export interface ResetOptionsType {
+    force?: boolean;
+    dry_run?: boolean;
+}
+/**
+ * Cluster provider interface.
+ * Implementations handle specific cluster technologies (k0s, Talos, etc.).
+ */
+export interface ClusterProviderType {
+    /**
+     * Provider name (e.g., "k0s", "talos").
+     */
+    readonly name: string;
+    /**
+     * Validates the cluster configuration.
+     */
+    validate(node_list: NodeListType): ResultType<void, KustodianErrorType>;
+    /**
+     * Installs the cluster.
+     */
+    install(node_list: NodeListType, options: BootstrapOptionsType): Promise<ResultType<void, KustodianErrorType>>;
+    /**
+     * Gets the kubeconfig for the cluster.
+     */
+    get_kubeconfig(node_list: NodeListType): Promise<ResultType<string, KustodianErrorType>>;
+    /**
+     * Resets/destroys the cluster.
+     */
+    reset(node_list: NodeListType, options: ResetOptionsType): Promise<ResultType<void, KustodianErrorType>>;
+}
+/**
+ * Service identifier type (compatible with CLI container).
+ */
+export type ServiceIdType<T> = symbol & {
+    __type?: T;
+};
+/**
+ * Factory function type for creating services.
+ */
+export type FactoryType<T> = (container: ContainerType) => T;
+/**
+ * Container interface for dependency injection (compatible with CLI container).
+ */
+export interface ContainerType {
+    register_singleton<T>(id: ServiceIdType<T>, factory: FactoryType<T>): void;
+    register_transient<T>(id: ServiceIdType<T>, factory: FactoryType<T>): void;
+    register_instance<T>(id: ServiceIdType<T>, instance: T): void;
+    resolve<T>(id: ServiceIdType<T>): T;
+    has<T>(id: ServiceIdType<T>): boolean;
+}
+/**
+ * CLI option type (compatible with CLI command options).
+ */
+export interface OptionType {
+    name: string;
+    short?: string;
+    description: string;
+    required?: boolean;
+    default_value?: unknown;
+    type?: 'string' | 'boolean' | 'number';
+}
+/**
+ * CLI argument type (compatible with CLI command arguments).
+ */
+export interface ArgumentType {
+    name: string;
+    description: string;
+    required?: boolean;
+    variadic?: boolean;
+}
+/**
+ * CLI command type (compatible with CLI commands).
+ */
+export interface CommandType {
+    name: string;
+    description: string;
+    options?: OptionType[];
+    arguments?: ArgumentType[];
+    subcommands?: CommandType[];
+    handler?: (ctx: {
+        args: string[];
+        options: Record<string, unknown>;
+        data: Record<string, unknown>;
+    }, container: ContainerType) => Promise<ResultType<void, KustodianErrorType>>;
+}
+/**
+ * Plugin capabilities indicating what a plugin can provide.
+ */
+export type PluginCapabilityType = 'commands' | 'hooks' | 'generators' | 'object-types';
+/**
+ * Plugin manifest with metadata.
+ */
+export interface PluginManifestType {
+    /** Unique plugin identifier (e.g., "@kustodian/plugin-helm") */
+    name: string;
+    /** Semantic version */
+    version: string;
+    /** Human-readable description */
+    description?: string;
+    /** Capabilities this plugin provides */
+    capabilities: PluginCapabilityType[];
+    /** Minimum kustodian version required */
+    kustodian_version?: string;
+}
+/**
+ * Plugin activation context with runtime information.
+ */
+export interface PluginActivationContextType {
+    /** DI container for service registration */
+    container: ContainerType;
+    /** Plugin configuration from cluster.spec.plugins */
+    config: Record<string, unknown>;
+    /** Current working directory */
+    cwd: string;
+}
+/**
+ * Command contribution from a plugin.
+ */
+export interface PluginCommandContributionType {
+    /** Command definition */
+    command: CommandType;
+}
+/**
+ * Main plugin interface.
+ * Plugins implement this interface and provide contributions via getter methods.
+ */
+export interface KustodianPluginType {
+    /** Plugin manifest with metadata */
+    readonly manifest: PluginManifestType;
+    /**
+     * Called when the plugin is activated.
+     * Use this to initialize resources and register services.
+     */
+    activate?(ctx: PluginActivationContextType): Promise<ResultType<void, KustodianErrorType>>;
+    /**
+     * Called when the plugin is deactivated.
+     * Use this to clean up resources.
+     */
+    deactivate?(): Promise<ResultType<void, KustodianErrorType>>;
+    /**
+     * Returns commands contributed by this plugin.
+     */
+    get_commands?(): PluginCommandContributionType[];
+    /**
+     * Returns hooks contributed by this plugin.
+     */
+    get_hooks?(): PluginHookContributionType[];
+    /**
+     * Returns generators contributed by this plugin.
+     */
+    get_generators?(): PluginGeneratorType[];
+    /**
+     * Returns object types contributed by this plugin.
+     */
+    get_object_types?(): PluginObjectTypeType[];
+    /**
+     * Returns substitution providers contributed by this plugin.
+     * Substitution providers allow plugins to define custom substitution types
+     * (e.g., 'sops', 'vault', 'aws-secrets') that can resolve values during generation.
+     */
+    get_substitution_providers?(): SubstitutionProviderType[];
+}
+/**
+ * Generated Kubernetes resource.
+ */
+export interface GeneratedResourceType {
+    api_version: string;
+    kind: string;
+    metadata: {
+        name: string;
+        namespace?: string;
+        labels?: Record<string, string>;
+        annotations?: Record<string, string>;
+    };
+    spec?: Record<string, unknown>;
+    data?: Record<string, unknown>;
+    string_data?: Record<string, string>;
+}
+/**
+ * Context provided to plugins during generation.
+ */
+export interface PluginContextType {
+    cluster: ClusterType;
+    template?: TemplateType;
+    config?: Record<string, unknown>;
+}
+/**
+ * Plugin source types for discovery.
+ */
+export type PluginSourceType = 'npm' | 'local';
+/**
+ * Information about a discovered plugin location.
+ */
+export interface PluginLocationInfoType {
+    source: PluginSourceType;
+    /** Module path or npm package name */
+    module_path: string;
+    /** Resolved absolute path */
+    resolved_path: string;
+}
+/**
+ * Loaded plugin with location metadata.
+ */
+export interface LoadedPluginType {
+    plugin: KustodianPluginType;
+    location: PluginLocationInfoType;
+}
+/**
+ * @deprecated Use PluginCapabilityType instead
+ */
+export type PluginTypeType = 'secret-provider' | 'resource-generator' | 'validator' | 'transformer';
+/**
+ * @deprecated Use PluginManifestType instead
+ */
+export interface LegacyPluginManifestType {
+    name: string;
+    version: string;
+    type: PluginTypeType;
+    description?: string;
+}
+/**
+ * @deprecated Secret provider plugin interface.
+ */
+export interface SecretProviderPluginType {
+    readonly manifest: LegacyPluginManifestType;
+    readonly scheme: string;
+    parse_ref(ref: string): ResultType<Record<string, string>, KustodianErrorType>;
+    generate(ref: Record<string, string>, ctx: PluginContextType): ResultType<GeneratedResourceType, KustodianErrorType>;
+}
+/**
+ * @deprecated Resource generator plugin interface.
+ */
+export interface ResourceGeneratorPluginType {
+    readonly manifest: LegacyPluginManifestType;
+    generate(ctx: PluginContextType): ResultType<GeneratedResourceType[], KustodianErrorType>;
+}
+/**
+ * @deprecated Validator plugin interface.
+ */
+export interface ValidatorPluginType {
+    readonly manifest: LegacyPluginManifestType;
+    validate(ctx: PluginContextType): ResultType<void, KustodianErrorType>;
+}
+/**
+ * @deprecated Transformer plugin interface.
+ */
+export interface TransformerPluginType {
+    readonly manifest: LegacyPluginManifestType;
+    transform(resource: GeneratedResourceType, ctx: PluginContextType): ResultType<GeneratedResourceType, KustodianErrorType>;
+}
+/**
+ * @deprecated Union type of legacy plugin types.
+ */
+export type LegacyPluginType = SecretProviderPluginType | ResourceGeneratorPluginType | ValidatorPluginType | TransformerPluginType;
+/**
+ * @deprecated Type guard for secret provider plugins.
+ */
+export declare function is_secret_provider(plugin: LegacyPluginType): plugin is SecretProviderPluginType;
+/**
+ * @deprecated Type guard for resource generator plugins.
+ */
+export declare function is_resource_generator(plugin: LegacyPluginType): plugin is ResourceGeneratorPluginType;
+/**
+ * @deprecated Type guard for validator plugins.
+ */
+export declare function is_validator(plugin: LegacyPluginType): plugin is ValidatorPluginType;
+/**
+ * @deprecated Type guard for transformer plugins.
+ */
+export declare function is_transformer(plugin: LegacyPluginType): plugin is TransformerPluginType;
+//# sourceMappingURL=types.d.ts.map

package/dist/plugins/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/plugins/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAM5E;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,YAAY,GAAG,UAAU,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IAExE;;OAEG;IACH,OAAO,CACL,SAAS,EAAE,YAAY,EACvB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAEjD;;OAEG;IACH,cAAc,CAAC,SAAS,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAEzF;;OAEG;IACH,KAAK,CACH,SAAS,EAAE,YAAY,EACvB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAAC;CAClD;AAMD;;GAEG;AACH,MAAM,MAAM,aAAa,CAAC,CAAC,IAAI,MAAM,GAAG;IAAE,MAAM,CAAC,EAAE,CAAC,CAAA;CAAE,CAAC;AAEvD;;GAEG;AACH,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,KAAK,CAAC,CAAC;AAE7D;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,kBAAkB,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAC3E,kBAAkB,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAC3E,iBAAiB,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC;IAC9D,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACpC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,IAAI,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;CACxC;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC;IACvB,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;IAC3B,WAAW,CAAC,EAAE,WAAW,EAAE,CAAC;IAC5B,OAAO,CAAC,EAAE,CACR,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,EACxF,SAAS,EAAE,aAAa,KACrB,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAAC;CACpD;AAED;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG,UAAU,GAAG,OAAO,GAAG,YAAY,GAAG,cAAc,CAAC;AAExF;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wCAAwC;IACxC,YAAY,EAAE,oBAAoB,EAAE,CAAC;IACrC,yCAAyC;IACzC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,4CAA4C;IAC5C,SAAS,EAAE,aAAa,CAAC;IACzB,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,gCAAgC;IAChC,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,yBAAyB;IACzB,OAAO,EAAE,WAAW,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,oCAAoC;IACpC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IAEtC;;;OAGG;IACH,QAAQ,CAAC,CAAC,GAAG,EAAE,2BAA2B,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAE3F;;;OAGG;IACH,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAE7D;;OAEG;IACH,YAAY,CAAC,IAAI,6BAA6B,EAAE,CAAC;IAEjD;;OAEG;IACH,SAAS,CAAC,IAAI,0BAA0B,EAAE,CAAC;IAE3C;;OAEG;IACH,cAAc,CAAC,IAAI,mBAAmB,EAAE,CAAC;IAEzC;;OAEG;IACH,gBAAgB,CAAC,IAAI,oBAAoB,EAAE,CAAC;IAE5C;;;;OAIG;IACH,0BAA0B,CAAC,IAAI,wBAAwB,EAAE,CAAC;CAC3D;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KACtC,CAAC;IACF,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,OAAO,CAAC;AAE/C;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,gBAAgB,CAAC;IACzB,sCAAsC;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,6BAA6B;IAC7B,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,QAAQ,EAAE,sBAAsB,CAAC;CAClC;AAMD;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,iBAAiB,GAAG,oBAAoB,GAAG,WAAW,GAAG,aAAa,CAAC;AAEpG;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,cAAc,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAC/E,QAAQ,CACN,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,GAAG,EAAE,iBAAiB,GACrB,UAAU,CAAC,qBAAqB,EAAE,kBAAkB,CAAC,CAAC;CAC1D;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAC;IAC5C,QAAQ,CAAC,GAAG,EAAE,iBAAiB,GAAG,UAAU,CAAC,qBAAqB,EAAE,EAAE,kBAAkB,CAAC,CAAC;CAC3F;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAC;IAC5C,QAAQ,CAAC,GAAG,EAAE,iBAAiB,GAAG,UAAU,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;CACxE;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAC;IAC5C,SAAS,CACP,QAAQ,EAAE,qBAAqB,EAC/B,GAAG,EAAE,iBAAiB,GACrB,UAAU,CAAC,qBAAqB,EAAE,kBAAkB,CAAC,CAAC;CAC1D;AAED;;GAEG;AACH,MAAM,MAAM,gBAAgB,GACxB,wBAAwB,GACxB,2BAA2B,GAC3B,mBAAmB,GACnB,qBAAqB,CAAC;AAE1B;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,IAAI,wBAAwB,CAE/F;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,gBAAgB,GACvB,MAAM,IAAI,2BAA2B,CAEvC;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,IAAI,mBAAmB,CAEpF;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,IAAI,qBAAqB,CAExF"}

package/dist/plugins/types.js

@@ -0,0 +1,25 @@
+/**
+ * @deprecated Type guard for secret provider plugins.
+ */
+export function is_secret_provider(plugin) {
+    return plugin.manifest.type === 'secret-provider';
+}
+/**
+ * @deprecated Type guard for resource generator plugins.
+ */
+export function is_resource_generator(plugin) {
+    return plugin.manifest.type === 'resource-generator';
+}
+/**
+ * @deprecated Type guard for validator plugins.
+ */
+export function is_validator(plugin) {
+    return plugin.manifest.type === 'validator';
+}
+/**
+ * @deprecated Type guard for transformer plugins.
+ */
+export function is_transformer(plugin) {
+    return plugin.manifest.type === 'transformer';
+}
+//# sourceMappingURL=types.js.map

package/dist/plugins/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/plugins/types.ts"],"names":[],"mappings":"AA+UA;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAwB;IACzD,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,iBAAiB,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAwB;IAExB,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,oBAAoB,CAAC;AACvD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,MAAwB;IACnD,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,WAAW,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,MAAwB;IACrD,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,aAAa,CAAC;AAChD,CAAC"}

package/dist/registry/auth.d.ts

@@ -0,0 +1,14 @@
+import type { RegistryAuthType } from './types.js';
+/**
+ * Gets authentication for Docker Hub from environment variables.
+ */
+export declare function get_dockerhub_auth(): RegistryAuthType | undefined;
+/**
+ * Gets authentication for GHCR from environment variables.
+ */
+export declare function get_ghcr_auth(): RegistryAuthType | undefined;
+/**
+ * Gets authentication for a registry based on hostname.
+ */
+export declare function get_auth_for_registry(registry: string): RegistryAuthType | undefined;
+//# sourceMappingURL=auth.d.ts.map

package/dist/registry/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/registry/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,gBAAgB,GAAG,SAAS,CASjE;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,gBAAgB,GAAG,SAAS,CAQ5D;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAkBpF"}

package/dist/registry/auth.js

@@ -0,0 +1,40 @@
+/**
+ * Gets authentication for Docker Hub from environment variables.
+ */
+export function get_dockerhub_auth() {
+    const username = process.env['DOCKER_USERNAME'];
+    const password = process.env['DOCKER_PASSWORD'];
+    if (username && password) {
+        return { username, password };
+    }
+    return undefined;
+}
+/**
+ * Gets authentication for GHCR from environment variables.
+ */
+export function get_ghcr_auth() {
+    const token = process.env['GITHUB_TOKEN'] || process.env['GH_TOKEN'];
+    if (token) {
+        return { token };
+    }
+    return undefined;
+}
+/**
+ * Gets authentication for a registry based on hostname.
+ */
+export function get_auth_for_registry(registry) {
+    if (registry === 'docker.io' || registry === 'registry.hub.docker.com') {
+        return get_dockerhub_auth();
+    }
+    if (registry === 'ghcr.io') {
+        return get_ghcr_auth();
+    }
+    // Generic fallback
+    const username = process.env['REGISTRY_USERNAME'];
+    const password = process.env['REGISTRY_PASSWORD'];
+    if (username && password) {
+        return { username, password };
+    }
+    return undefined;
+}
+//# sourceMappingURL=auth.js.map

package/dist/registry/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/registry/auth.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAEhD,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;QACzB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAChC,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAErE,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,yBAAyB,EAAE,CAAC;QACvE,OAAO,kBAAkB,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,aAAa,EAAE,CAAC;IACzB,CAAC;IAED,mBAAmB;IACnB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAElD,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;QACzB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAChC,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/registry/client.d.ts

@@ -0,0 +1,24 @@
+import type { ImageReferenceType, RegistryClientConfigType, RegistryClientType } from './types.js';
+/**
+ * Parses an image string into its components.
+ *
+ * Supports various formats:
+ * - nginx -> docker.io/library/nginx
+ * - prom/prometheus -> docker.io/prom/prometheus
+ * - ghcr.io/org/image -> ghcr.io/org/image
+ * - ghcr.io/org/image:tag -> ghcr.io/org/image:tag
+ */
+export declare function parse_image_reference(image: string): ImageReferenceType;
+/**
+ * Detects the registry type from an image reference.
+ */
+export declare function detect_registry_type(image: ImageReferenceType): 'dockerhub' | 'ghcr';
+/**
+ * Creates a registry client for the given registry type.
+ */
+export declare function create_registry_client(registry_type: 'dockerhub' | 'ghcr', config?: RegistryClientConfigType): RegistryClientType;
+/**
+ * Creates a registry client with auto-detected type and authentication.
+ */
+export declare function create_client_for_image(image: ImageReferenceType): RegistryClientType;
+//# sourceMappingURL=client.d.ts.map

package/dist/registry/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/registry/client.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEnG;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,kBAAkB,CA2CvE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,kBAAkB,GAAG,WAAW,GAAG,MAAM,CAOpF;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,aAAa,EAAE,WAAW,GAAG,MAAM,EACnC,MAAM,CAAC,EAAE,wBAAwB,GAChC,kBAAkB,CAOpB;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,kBAAkB,GAAG,kBAAkB,CAKrF"}

package/dist/registry/client.js

@@ -0,0 +1,85 @@
+import { get_auth_for_registry } from './auth.js';
+import { create_dockerhub_client } from './dockerhub.js';
+import { create_ghcr_client } from './ghcr.js';
+/**
+ * Parses an image string into its components.
+ *
+ * Supports various formats:
+ * - nginx -> docker.io/library/nginx
+ * - prom/prometheus -> docker.io/prom/prometheus
+ * - ghcr.io/org/image -> ghcr.io/org/image
+ * - ghcr.io/org/image:tag -> ghcr.io/org/image:tag
+ */
+export function parse_image_reference(image) {
+    let registry = 'docker.io';
+    let namespace = 'library';
+    let repository;
+    let tag;
+    // Split tag if present
+    const colonIndex = image.lastIndexOf(':');
+    let imagePart = image;
+    // Only treat as tag if there's no slash after the colon (to handle ports)
+    if (colonIndex > 0 && !image.slice(colonIndex).includes('/')) {
+        imagePart = image.slice(0, colonIndex);
+        tag = image.slice(colonIndex + 1);
+    }
+    const parts = imagePart.split('/');
+    if (parts.length === 1 && parts[0]) {
+        // Simple image name: nginx -> docker.io/library/nginx
+        repository = parts[0];
+    }
+    else if (parts.length === 2 && parts[0] && parts[1]) {
+        if (parts[0].includes('.') || parts[0].includes(':')) {
+            // Custom registry without namespace: registry.io/image
+            registry = parts[0];
+            namespace = 'library';
+            repository = parts[1];
+        }
+        else {
+            // Docker Hub with namespace: prom/prometheus
+            namespace = parts[0];
+            repository = parts[1];
+        }
+    }
+    else if (parts.length >= 3 && parts[0] && parts[1]) {
+        // Full path: ghcr.io/org/image
+        registry = parts[0];
+        namespace = parts[1];
+        repository = parts.slice(2).join('/');
+    }
+    else {
+        // Fallback - should not happen with valid input
+        repository = imagePart;
+    }
+    return { registry, namespace, repository, tag };
+}
+/**
+ * Detects the registry type from an image reference.
+ */
+export function detect_registry_type(image) {
+    if (image.registry === 'ghcr.io') {
+        return 'ghcr';
+    }
+    // Default to Docker Hub
+    return 'dockerhub';
+}
+/**
+ * Creates a registry client for the given registry type.
+ */
+export function create_registry_client(registry_type, config) {
+    switch (registry_type) {
+        case 'ghcr':
+            return create_ghcr_client(config);
+        default:
+            return create_dockerhub_client(config);
+    }
+}
+/**
+ * Creates a registry client with auto-detected type and authentication.
+ */
+export function create_client_for_image(image) {
+    const registry_type = detect_registry_type(image);
+    const auth = get_auth_for_registry(image.registry);
+    return create_registry_client(registry_type, { auth });
+}
+//# sourceMappingURL=client.js.map

package/dist/registry/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/registry/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAG/C;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,IAAI,QAAQ,GAAG,WAAW,CAAC;IAC3B,IAAI,SAAS,GAAG,SAAS,CAAC;IAC1B,IAAI,UAAkB,CAAC;IACvB,IAAI,GAAuB,CAAC;IAE5B,uBAAuB;IACvB,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,0EAA0E;IAC1E,IAAI,UAAU,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7D,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QACvC,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,sDAAsD;QACtD,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACrD,uDAAuD;YACvD,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACpB,SAAS,GAAG,SAAS,CAAC;YACtB,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,6CAA6C;YAC7C,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACrB,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,+BAA+B;QAC/B,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACpB,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;SAAM,CAAC;QACN,gDAAgD;QAChD,UAAU,GAAG,SAAS,CAAC;IACzB,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAyB;IAC5D,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,wBAAwB;IACxB,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CACpC,aAAmC,EACnC,MAAiC;IAEjC,QAAQ,aAAa,EAAE,CAAC;QACtB,KAAK,MAAM;YACT,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACpC;YACE,OAAO,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAyB;IAC/D,MAAM,aAAa,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAEnD,OAAO,sBAAsB,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AACzD,CAAC"}

package/dist/registry/dockerhub.d.ts

@@ -0,0 +1,6 @@
+import type { RegistryClientConfigType, RegistryClientType } from './types.js';
+/**
+ * Creates a Docker Hub registry client.
+ */
+export declare function create_dockerhub_client(config?: RegistryClientConfigType): RegistryClientType;
+//# sourceMappingURL=dockerhub.d.ts.map

package/dist/registry/dockerhub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dockerhub.d.ts","sourceRoot":"","sources":["../../src/registry/dockerhub.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAEV,wBAAwB,EACxB,kBAAkB,EAEnB,MAAM,YAAY,CAAC;AA6EpB;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,CAAC,EAAE,wBAAwB,GAAG,kBAAkB,CA0C7F"}