typekro 0.12.0 → 0.13.0

package/dist/core/constants/brands.d.ts

@@ -5,5 +5,5 @@
  * New code within `src/utils/` should import directly from `../../shared/brands.js`
  * to maintain the clean dependency direction: `shared/ <-- utils/ <-- core/`.
  */
-export { CALLABLE_COMPOSITION_BRAND, CEL_EXPRESSION_BRAND, KUBERNETES_REF_BRAND, KUBERNETES_REF_MARKER_FIELD_PATH_SOURCE, KUBERNETES_REF_MARKER_PATTERN, KUBERNETES_REF_MARKER_RESOURCE_ID_SOURCE, KUBERNETES_REF_MARKER_SOURCE, KUBERNETES_REF_SCHEMA_MARKER_SOURCE, MIXED_TEMPLATE_BRAND, NESTED_COMPOSITION_BRAND, SINGLETON_HANDLE_BRAND, } from '../../shared/brands.js';
+export { CALLABLE_COMPOSITION_BRAND, CEL_EXPRESSION_BRAND, CONTAINER_IMAGE_REF_BRAND, KUBERNETES_REF_BRAND, KUBERNETES_REF_MARKER_FIELD_PATH_SOURCE, KUBERNETES_REF_MARKER_PATTERN, KUBERNETES_REF_MARKER_RESOURCE_ID_SOURCE, KUBERNETES_REF_MARKER_SOURCE, KUBERNETES_REF_SCHEMA_MARKER_SOURCE, MIXED_TEMPLATE_BRAND, NESTED_COMPOSITION_BRAND, SINGLETON_HANDLE_BRAND, } from '../../shared/brands.js';
 //# sourceMappingURL=brands.d.ts.map

package/dist/core/constants/brands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"brands.d.ts","sourceRoot":"","sources":["../../../src/core/constants/brands.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,oBAAoB,EACpB,uCAAuC,EACvC,6BAA6B,EAC7B,wCAAwC,EACxC,4BAA4B,EAC5B,mCAAmC,EACnC,oBAAoB,EACpB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"brands.d.ts","sourceRoot":"","sources":["../../../src/core/constants/brands.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,yBAAyB,EACzB,oBAAoB,EACpB,uCAAuC,EACvC,6BAA6B,EAC7B,wCAAwC,EACxC,4BAA4B,EAC5B,mCAAmC,EACnC,oBAAoB,EACpB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC"}

package/dist/core/constants/brands.js

@@ -5,5 +5,5 @@
  * New code within `src/utils/` should import directly from `../../shared/brands.js`
  * to maintain the clean dependency direction: `shared/ <-- utils/ <-- core/`.
  */
-export { CALLABLE_COMPOSITION_BRAND, CEL_EXPRESSION_BRAND, KUBERNETES_REF_BRAND, KUBERNETES_REF_MARKER_FIELD_PATH_SOURCE, KUBERNETES_REF_MARKER_PATTERN, KUBERNETES_REF_MARKER_RESOURCE_ID_SOURCE, KUBERNETES_REF_MARKER_SOURCE, KUBERNETES_REF_SCHEMA_MARKER_SOURCE, MIXED_TEMPLATE_BRAND, NESTED_COMPOSITION_BRAND, SINGLETON_HANDLE_BRAND, } from '../../shared/brands.js';
+export { CALLABLE_COMPOSITION_BRAND, CEL_EXPRESSION_BRAND, CONTAINER_IMAGE_REF_BRAND, KUBERNETES_REF_BRAND, KUBERNETES_REF_MARKER_FIELD_PATH_SOURCE, KUBERNETES_REF_MARKER_PATTERN, KUBERNETES_REF_MARKER_RESOURCE_ID_SOURCE, KUBERNETES_REF_MARKER_SOURCE, KUBERNETES_REF_SCHEMA_MARKER_SOURCE, MIXED_TEMPLATE_BRAND, NESTED_COMPOSITION_BRAND, SINGLETON_HANDLE_BRAND, } from '../../shared/brands.js';
 //# sourceMappingURL=brands.js.map

package/dist/core/constants/brands.js.map

@@ -1 +1 @@
-{"version":3,"file":"brands.js","sourceRoot":"","sources":["../../../src/core/constants/brands.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,oBAAoB,EACpB,uCAAuC,EACvC,6BAA6B,EAC7B,wCAAwC,EACxC,4BAA4B,EAC5B,mCAAmC,EACnC,oBAAoB,EACpB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"brands.js","sourceRoot":"","sources":["../../../src/core/constants/brands.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,yBAAyB,EACzB,oBAAoB,EACpB,uCAAuC,EACvC,6BAA6B,EAC7B,wCAAwC,EACxC,4BAA4B,EAC5B,mCAAmC,EACnC,oBAAoB,EACpB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC"}

package/dist/core/containers/image.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Container Image Utility
+ *
+ * `container()` declares a container image built from source and pushed to a registry, as a
+ * FIRST-CLASS typekro utility. It is defined at program scope — OUTSIDE a `kubernetesComposition` —
+ * because an image is a build-time artifact with no dependency on cluster state; it should never be a
+ * node in the cluster resource graph. Resources WITHIN a composition reference its `.imageUri`.
+ *
+ * `.imageUri` is a `ContainerImageRef` (a distinct brand, NOT a `KubernetesRef`): typekro resolves it
+ * CLIENT-SIDE to a literal image URI before apply (direct mode) / RGD serialization (kro mode), by
+ * delegating to the existing {@link buildContainer} — once per container identity. Kro never sees a
+ * build, only a literal image string.
+ *
+ * @example
+ * ```typescript
+ * import { container } from 'typekro/containers';
+ *
+ * // Defined OUTSIDE the composition:
+ * const appImage = container({ context: './app', imageName: 'app', registry: { type: 'ecr' } });
+ *
+ * // Referenced WITHIN one:
+ * kubernetesComposition(def, () => {
+ *   Deployment({ name: 'app', image: appImage.imageUri, ports: [{ containerPort: 3000 }] });
+ * });
+ * ```
+ */
+import { CONTAINER_IMAGE_REF_BRAND } from '../constants/brands.js';
+import type { ContainerBuildOptions } from './registries/types.js';
+/**
+ * A reference to a container image's URI. Resolved client-side to a literal string (the built +
+ * pushed image URI) before apply / RGD serialization — distinct from a `KubernetesRef`, which is a
+ * cluster-state reference serialized to CEL.
+ */
+export interface ContainerImageRef<T extends string = string> {
+    readonly [CONTAINER_IMAGE_REF_BRAND]: true;
+    /** Stable identity — multiple references to the same container build the image only ONCE. */
+    readonly containerId: string;
+    /** The build spec, carried inline so the resolver is self-contained (delegates to `buildContainer`). */
+    readonly buildOptions: ContainerBuildOptions;
+    readonly _type?: T;
+}
+/** A first-class container image: defined outside a composition, referenced within one. */
+export interface ContainerImage {
+    /**
+     * The image-URI reference — assign to any resource image field (e.g. a container's `image`). Typed
+     * as `string` so it's assignable to plain string fields, exactly like typekro's schema/resource
+     * refs; at RUNTIME it is a branded {@link ContainerImageRef} that the resolver substitutes with the
+     * built image URI at deploy time. Use {@link isContainerImageRef} to detect it.
+     */
+    readonly imageUri: string;
+}
+/** Options for {@link container}: the {@link ContainerBuildOptions} plus an optional stable identity. */
+export interface ContainerOptions extends ContainerBuildOptions {
+    /** Stable identity for dedup across references; defaults to `imageName`. Set when two containers share one. */
+    id?: string;
+}
+/**
+ * Declare a container image as a first-class typekro utility (see the module doc). Returns a handle
+ * whose `.imageUri` is referenced from resources; the build (via {@link buildContainer}) happens once
+ * at deploy time and the literal URI is substituted before apply / serialization.
+ */
+export declare function container(options: ContainerOptions): ContainerImage;
+/** Type guard: is `value` a {@link ContainerImageRef} (the `.imageUri` of a `container()`)? */
+export declare function isContainerImageRef(value: unknown): value is ContainerImageRef;
+//# sourceMappingURL=image.d.ts.map

package/dist/core/containers/image.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"image.d.ts","sourceRoot":"","sources":["../../../src/core/containers/image.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAEnE;;;;GAIG;AACH,MAAM,WAAW,iBAAiB,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM;IAC1D,QAAQ,CAAC,CAAC,yBAAyB,CAAC,EAAE,IAAI,CAAC;IAC3C,6FAA6F;IAC7F,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,wGAAwG;IACxG,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC;IAC7C,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;CACpB;AAED,2FAA2F;AAC3F,MAAM,WAAW,cAAc;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,yGAAyG;AACzG,MAAM,WAAW,gBAAiB,SAAQ,qBAAqB;IAC7D,+GAA+G;IAC/G,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,cAAc,CAWnE;AAED,+FAA+F;AAC/F,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAM9E"}

package/dist/core/containers/image.js

@@ -0,0 +1,51 @@
+/**
+ * Container Image Utility
+ *
+ * `container()` declares a container image built from source and pushed to a registry, as a
+ * FIRST-CLASS typekro utility. It is defined at program scope — OUTSIDE a `kubernetesComposition` —
+ * because an image is a build-time artifact with no dependency on cluster state; it should never be a
+ * node in the cluster resource graph. Resources WITHIN a composition reference its `.imageUri`.
+ *
+ * `.imageUri` is a `ContainerImageRef` (a distinct brand, NOT a `KubernetesRef`): typekro resolves it
+ * CLIENT-SIDE to a literal image URI before apply (direct mode) / RGD serialization (kro mode), by
+ * delegating to the existing {@link buildContainer} — once per container identity. Kro never sees a
+ * build, only a literal image string.
+ *
+ * @example
+ * ```typescript
+ * import { container } from 'typekro/containers';
+ *
+ * // Defined OUTSIDE the composition:
+ * const appImage = container({ context: './app', imageName: 'app', registry: { type: 'ecr' } });
+ *
+ * // Referenced WITHIN one:
+ * kubernetesComposition(def, () => {
+ *   Deployment({ name: 'app', image: appImage.imageUri, ports: [{ containerPort: 3000 }] });
+ * });
+ * ```
+ */
+import { CONTAINER_IMAGE_REF_BRAND } from '../constants/brands.js';
+/**
+ * Declare a container image as a first-class typekro utility (see the module doc). Returns a handle
+ * whose `.imageUri` is referenced from resources; the build (via {@link buildContainer}) happens once
+ * at deploy time and the literal URI is substituted before apply / serialization.
+ */
+export function container(options) {
+    const { id, ...buildOptions } = options;
+    const containerId = id ?? buildOptions.imageName;
+    const ref = {
+        [CONTAINER_IMAGE_REF_BRAND]: true,
+        containerId,
+        buildOptions,
+    };
+    // Typed as `string` (assignable to any image field) but a branded ref at runtime — mirrors how
+    // typekro's schema/resource refs present as their underlying type while carrying runtime markers.
+    return { imageUri: ref };
+}
+/** Type guard: is `value` a {@link ContainerImageRef} (the `.imageUri` of a `container()`)? */
+export function isContainerImageRef(value) {
+    return (typeof value === 'object' &&
+        value !== null &&
+        value[CONTAINER_IMAGE_REF_BRAND] === true);
+}
+//# sourceMappingURL=image.js.map

package/dist/core/containers/image.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"image.js","sourceRoot":"","sources":["../../../src/core/containers/image.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAkCnE;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,OAAyB;IACjD,MAAM,EAAE,EAAE,EAAE,GAAG,YAAY,EAAE,GAAG,OAAO,CAAC;IACxC,MAAM,WAAW,GAAG,EAAE,IAAI,YAAY,CAAC,SAAS,CAAC;IACjD,MAAM,GAAG,GAA8B;QACrC,CAAC,yBAAyB,CAAC,EAAE,IAAI;QACjC,WAAW;QACX,YAAY;KACb,CAAC;IACF,+FAA+F;IAC/F,kGAAkG;IAClG,OAAO,EAAE,QAAQ,EAAE,GAAwB,EAAE,CAAC;AAChD,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACb,KAAiC,CAAC,yBAAyB,CAAC,KAAK,IAAI,CACvE,CAAC;AACJ,CAAC"}

package/dist/core/containers/index.d.ts

@@ -4,18 +4,26 @@
  * Build Docker images and push them to container registries.
  * Returns image URIs for use in TypeKro compositions.
  *
+ * The low-level `buildContainer` builds + pushes imperatively and returns a URI. The higher-level
+ * `container()` utility wraps it declaratively: define an image once at program scope and reference
+ * its `.imageUri` from resources inside a composition — typekro builds it (via `buildContainer`) and
+ * substitutes the literal URI at deploy time.
+ *
  * @example
  * ```typescript
- * import { buildContainer } from 'typekro/containers';
+ * import { buildContainer, container } from 'typekro/containers';
+ *
+ * // Imperative (build now, get a URI):
+ * const { imageUri } = await buildContainer({ context: './app', imageName: 'app', registry: { type: 'orbstack' } });
  *
- * const { imageUri } = await buildContainer({
- *   context: './apps/my-app',
- *   imageName: 'my-app',
- *   registry: { type: 'orbstack' },
- * });
+ * // Declarative (defined outside a composition, referenced within):
+ * const appImage = container({ context: './app', imageName: 'app', registry: { type: 'ecr' } });
+ * // … later, inside a composition: Deployment({ image: appImage.imageUri, … })
  * ```
  */
 export { buildContainer } from './build.js';
 export { ContainerBuildError } from './errors.js';
+export { container, type ContainerImage, type ContainerImageRef, type ContainerOptions, isContainerImageRef } from './image.js';
+export { hasContainerImageRefs, resolveContainerImages } from './resolve.js';
 export type { ContainerBuildOptions, ContainerBuildResult, EcrRegistryConfig, OrbstackRegistryConfig, RegistryConfig, } from './registries/types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/core/containers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/containers/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,YAAY,EACV,qBAAqB,EACrB,oBAAoB,EACpB,iBAAiB,EACjB,sBAAsB,EACtB,cAAc,GACf,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/containers/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,KAAK,cAAc,EAAE,KAAK,iBAAiB,EAAE,KAAK,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAChI,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAC7E,YAAY,EACV,qBAAqB,EACrB,oBAAoB,EACpB,iBAAiB,EACjB,sBAAsB,EACtB,cAAc,GACf,MAAM,uBAAuB,CAAC"}

package/dist/core/containers/index.js

@@ -4,17 +4,25 @@
  * Build Docker images and push them to container registries.
  * Returns image URIs for use in TypeKro compositions.
  *
+ * The low-level `buildContainer` builds + pushes imperatively and returns a URI. The higher-level
+ * `container()` utility wraps it declaratively: define an image once at program scope and reference
+ * its `.imageUri` from resources inside a composition — typekro builds it (via `buildContainer`) and
+ * substitutes the literal URI at deploy time.
+ *
  * @example
  * ```typescript
- * import { buildContainer } from 'typekro/containers';
+ * import { buildContainer, container } from 'typekro/containers';
+ *
+ * // Imperative (build now, get a URI):
+ * const { imageUri } = await buildContainer({ context: './app', imageName: 'app', registry: { type: 'orbstack' } });
  *
- * const { imageUri } = await buildContainer({
- *   context: './apps/my-app',
- *   imageName: 'my-app',
- *   registry: { type: 'orbstack' },
- * });
+ * // Declarative (defined outside a composition, referenced within):
+ * const appImage = container({ context: './app', imageName: 'app', registry: { type: 'ecr' } });
+ * // … later, inside a composition: Deployment({ image: appImage.imageUri, … })
  * ```
  */
 export { buildContainer } from './build.js';
 export { ContainerBuildError } from './errors.js';
+export { container, isContainerImageRef } from './image.js';
+export { hasContainerImageRefs, resolveContainerImages } from './resolve.js';
 //# sourceMappingURL=index.js.map

package/dist/core/containers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/containers/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/containers/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,SAAS,EAAsE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAChI,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC"}

package/dist/core/containers/resolve.d.ts

@@ -0,0 +1,14 @@
+import { type ContainerImageRef } from './image.js';
+/**
+ * Build + substitute every container image referenced by `resources`. Returns the resolved
+ * `containerId → imageUri` map (also useful for logging/diagnostics). Mutates the resources in place.
+ *
+ * `build` defaults to the real {@link buildContainer}; it is injectable purely so tests can resolve
+ * without a Docker daemon (avoids globally mocking the build module, which would leak across files).
+ */
+export declare function resolveContainerImages(resources: readonly unknown[], build?: (options: ContainerImageRef['buildOptions']) => Promise<{
+    imageUri: string;
+}>): Promise<Map<string, string>>;
+/** Whether any resource in the set references a container image (cheap pre-check to skip resolution). */
+export declare function hasContainerImageRefs(resources: readonly unknown[]): boolean;
+//# sourceMappingURL=resolve.d.ts.map

package/dist/core/containers/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../../src/core/containers/resolve.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,KAAK,iBAAiB,EAAuB,MAAM,YAAY,CAAC;AAgCzE;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,SAAS,OAAO,EAAE,EAC7B,KAAK,GAAE,CACL,OAAO,EAAE,iBAAiB,CAAC,cAAc,CAAC,KACvC,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAkB,GAClD,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CA+B9B;AAED,yGAAyG;AACzG,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,CAS5E"}

package/dist/core/containers/resolve.js

@@ -0,0 +1,88 @@
+/**
+ * Container Image Resolution
+ *
+ * Resolves every {@link ContainerImageRef} reachable from a set of resources to its literal image URI,
+ * building each distinct container ONCE by delegating to the existing {@link buildContainer} (this
+ * module adds NO build/push logic of its own). The refs are replaced in place with the URI string.
+ *
+ * Runs CLIENT-SIDE before apply (direct mode) / RGD serialization (kro mode), so a container image is
+ * never a CEL expression and Kro only ever sees a literal image string.
+ */
+import { getComponentLogger } from '../logging/index.js';
+import { buildContainer } from './build.js';
+import { isContainerImageRef } from './image.js';
+const logger = getComponentLogger('container-resolve');
+/** Deep-walk a value, invoking `onRef` for every ContainerImageRef found (cycle-safe). */
+function walk(value, seen, onRef, parent, key) {
+    if (isContainerImageRef(value)) {
+        if (parent !== undefined && key !== undefined)
+            onRef(value, parent, key);
+        return; // never descend into a ref's internals
+    }
+    if (value === null || typeof value !== 'object')
+        return;
+    if (seen.has(value))
+        return;
+    seen.add(value);
+    if (Array.isArray(value)) {
+        value.forEach((item, i) => walk(item, seen, onRef, value, i));
+    }
+    else {
+        for (const k of Object.keys(value)) {
+            walk(value[k], seen, onRef, value, k);
+        }
+    }
+}
+/**
+ * Build + substitute every container image referenced by `resources`. Returns the resolved
+ * `containerId → imageUri` map (also useful for logging/diagnostics). Mutates the resources in place.
+ *
+ * `build` defaults to the real {@link buildContainer}; it is injectable purely so tests can resolve
+ * without a Docker daemon (avoids globally mocking the build module, which would leak across files).
+ */
+export async function resolveContainerImages(resources, build = buildContainer) {
+    // 1. Collect the distinct containers referenced anywhere in the resource set.
+    const byId = new Map();
+    for (const resource of resources) {
+        walk(resource, new Set(), (ref) => {
+            if (!byId.has(ref.containerId))
+                byId.set(ref.containerId, ref);
+        });
+    }
+    if (byId.size === 0)
+        return new Map();
+    // 2. Build each distinct container ONCE (delegating to buildContainer — the existing push mechanics).
+    const uriByContainer = new Map();
+    for (const [containerId, ref] of byId) {
+        logger.info('Building container image for reference', {
+            containerId,
+            imageName: ref.buildOptions.imageName,
+        });
+        const { imageUri } = await build(ref.buildOptions);
+        uriByContainer.set(containerId, imageUri);
+        logger.info('Resolved container image', { containerId, imageUri });
+    }
+    // 3. Substitute every ref with its resolved literal URI, in place.
+    for (const resource of resources) {
+        walk(resource, new Set(), (ref, parent, key) => {
+            const uri = uriByContainer.get(ref.containerId);
+            if (uri === undefined)
+                return;
+            parent[key] = uri;
+        });
+    }
+    return uriByContainer;
+}
+/** Whether any resource in the set references a container image (cheap pre-check to skip resolution). */
+export function hasContainerImageRefs(resources) {
+    let found = false;
+    for (const resource of resources) {
+        walk(resource, new Set(), () => {
+            found = true;
+        });
+        if (found)
+            break;
+    }
+    return found;
+}
+//# sourceMappingURL=resolve.js.map

package/dist/core/containers/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../../src/core/containers/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAA0B,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEzE,MAAM,MAAM,GAAG,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;AAEvD,0FAA0F;AAC1F,SAAS,IAAI,CACX,KAAc,EACd,IAAiB,EACjB,KAIS,EACT,MAA4C,EAC5C,GAAqB;IAErB,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,IAAI,MAAM,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QACzE,OAAO,CAAC,uCAAuC;IACjD,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO;IACxD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC;QAAE,OAAO;IACtC,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC,CAAC;IAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,EAAE,CAAC;YAC9D,IAAI,CAAE,KAAiC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAgC,EAAE,CAAC,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,SAA6B,EAC7B,QAEqC,cAAc;IAEnD,8EAA8E;IAC9E,MAAM,IAAI,GAAG,IAAI,GAAG,EAA6B,CAAC;IAClD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;YAChC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAEtC,sGAAsG;IACtG,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjD,KAAK,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;YACpD,WAAW;YACX,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,SAAS;SACtC,CAAC,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACnD,cAAc,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,mEAAmE;IACnE,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YAC7C,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAChD,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO;YAC7B,MAA2C,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,qBAAqB,CAAC,SAA6B;IACjE,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,GAAG,EAAE;YAC7B,KAAK,GAAG,IAAI,CAAC;QACf,CAAC,CAAC,CAAC;QACH,IAAI,KAAK;YAAE,MAAM;IACnB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/core/deployment/direct-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"direct-factory.d.ts","sourceRoot":"","sources":["../../../src/core/deployment/direct-factory.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA8BH,OAAO,KAAK,EACV,iBAAiB,EACjB,eAAe,EACf,uBAAuB,EACvB,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACd,aAAa,EAEb,cAAc,EAEf,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAyB,QAAQ,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAElG,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAEhB,aAAa,EACd,MAAM,2BAA2B,CAAC;AAmBnC;;;;;GAKG;AACH,qBAAa,yBAAyB,CACpC,KAAK,SAAS,iBAAiB,EAC/B,OAAO,SAAS,iBAAiB,CACjC,YAAW,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC;IAEhD,QAAQ,CAAC,IAAI,EAAG,QAAQ,CAAU;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IAEnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqC;IAC/D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoC;IAC7D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAmC;IAEpE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAiD;IAC/E,OAAO,CAAC,gBAAgB,CAAqC;IAC7D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA8B;IACnE,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAA8C;IACrF,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoD;IACtF,OAAO,CAAC,gCAAgC,CAAiD;IACzF,OAAO,CAAC,6BAA6B,CAAgD;IACrF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAC/D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA0B;gBAGtD,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAC7C,gBAAgB,EAAE,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,EAElD,aAAa,CAAC,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAClD,OAAO,GAAE,cAAmB;IAe9B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,aAAa;IAWf,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAc9B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA0B3B;;OAEG;IACG,MAAM,CACV,IAAI,EAAE,KAAK,EACX,IAAI,CAAC,EAAE;QACL,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,wBAAwB,CAAC,EAAE,MAAM,CAAC;KACnC,GACA,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAqCpC;;OAEG;IACH,OAAO,CAAC,qBAAqB;IA8B7B;;;;;;;OAOG;IACG,YAAY,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;IAIzD;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACG,cAAc,CAClB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,wBAAwB,CAAC,EAAE,OAAO,CAAA;KAAE,GAC/D,OAAO,CAAC,IAAI,CAAC;IA+FhB,OAAO,CAAC,cAAc;YAgBR,yBAAyB;IAiDvC;;;;;OAKG;YACW,wBAAwB;IA8CtC;;;;;;OAMG;IACG,SAAS,IAAI,OAAO,CAAC,aAAa,CAAC;IAqBzC;;OAEG;YACW,kBAAkB;IAyGhC;;;OAGG;IACG,gBAAgB,IAAI,OAAO,CAAC;QAChC,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;QAC1C,cAAc,EAAE;YACd,OAAO,EAAE,MAAM,CAAC;YAChB,QAAQ,EAAE,MAAM,CAAC;YACjB,MAAM,EAAE,MAAM,CAAC;YACf,KAAK,EAAE,MAAM,CAAC;SACf,CAAC;QACF,MAAM,EAAE,eAAe,EAAE,CAAC;KAC3B,CAAC;IAoGF;;;;;;OAMG;IACG,QAAQ,IAAI,OAAO,CAAC,cAAc,CAAC;IA+DzC;;OAEG;IACG,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAkBtD;;;;;;;;;OASG;IACH,MAAM,CAAC,IAAI,EAAE,KAAK,GAAG,MAAM;IA8E3B;;OAEG;IACI,8BAA8B,CACnC,IAAI,EAAE,KAAK,EACX,oBAAoB,CAAC,EAAE,MAAM,GAC5B,uBAAuB;IA6E1B;;;OAGG;IACH,OAAO,CAAC,gBAAgB,CAAwB;IAEhD,OAAO,CAAC,uBAAuB;IA8D/B;;;OAGG;IACH,OAAO,CAAC,oCAAoC;IA2E5C;;;OAGG;IACI,mBAAmB,IAAI,OAAO,GAAG,IAAI;IAIrC,2BAA2B,IAAI,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,GAAG,SAAS;IAI7E,wBAAwB,IAAI,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC;IAIpE,OAAO,CAAC,wBAAwB;IA+BhC;;;;;;;;;;;OAWG;IACI,uBAAuB,CAC5B,IAAI,EAAE,KAAK,EACX,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAClD,OAAO,GAAG,IAAI;IAuGjB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,yBAAyB;IA6CjC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,qCAAqC;IAqC7C;;;OAGG;IACH,OAAO,CAAC,YAAY;IAuBpB,OAAO,CAAC,oBAAoB;IAS5B,OAAO,CAAC,yBAAyB;IAOjC;;;OAGG;IACH,OAAO,CAAC,+BAA+B;IAyJvC;;OAEG;IACH,OAAO,CAAC,oBAAoB;YAKd,qBAAqB;YAkGrB,qBAAqB;IAqInC,OAAO,CAAC,+CAA+C;IAiCvD,OAAO,CAAC,kCAAkC;IAkC1C,OAAO,CAAC,yBAAyB;IA8CjC,OAAO,CAAC,8BAA8B;IAsBtC,OAAO,CAAC,kBAAkB;CAI3B;AAwED;;GAEG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,SAAS,iBAAiB,EAC/B,OAAO,SAAS,iBAAiB,EAEjC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAC7C,gBAAgB,EAAE,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,EAElD,aAAa,CAAC,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAClD,OAAO,GAAE,cAAmB,GAC3B,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,CAQvC"}
+{"version":3,"file":"direct-factory.d.ts","sourceRoot":"","sources":["../../../src/core/deployment/direct-factory.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA+BH,OAAO,KAAK,EACV,iBAAiB,EACjB,eAAe,EACf,uBAAuB,EACvB,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACd,aAAa,EAEb,cAAc,EAEf,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAyB,QAAQ,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAElG,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAEhB,aAAa,EACd,MAAM,2BAA2B,CAAC;AAmBnC;;;;;GAKG;AACH,qBAAa,yBAAyB,CACpC,KAAK,SAAS,iBAAiB,EAC/B,OAAO,SAAS,iBAAiB,CACjC,YAAW,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC;IAEhD,QAAQ,CAAC,IAAI,EAAG,QAAQ,CAAU;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IAEnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqC;IAC/D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoC;IAC7D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAmC;IAEpE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAiD;IAC/E,OAAO,CAAC,gBAAgB,CAAqC;IAC7D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA8B;IACnE,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAA8C;IACrF,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoD;IACtF,OAAO,CAAC,gCAAgC,CAAiD;IACzF,OAAO,CAAC,6BAA6B,CAAgD;IACrF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAC/D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA0B;gBAGtD,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAC7C,gBAAgB,EAAE,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,EAElD,aAAa,CAAC,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAClD,OAAO,GAAE,cAAmB;IAe9B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,aAAa;IAWf,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAc9B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA0B3B;;OAEG;IACG,MAAM,CACV,IAAI,EAAE,KAAK,EACX,IAAI,CAAC,EAAE;QACL,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,wBAAwB,CAAC,EAAE,MAAM,CAAC;KACnC,GACA,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IA4CpC;;OAEG;IACH,OAAO,CAAC,qBAAqB;IA8B7B;;;;;;;OAOG;IACG,YAAY,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;IAIzD;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACG,cAAc,CAClB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,wBAAwB,CAAC,EAAE,OAAO,CAAA;KAAE,GAC/D,OAAO,CAAC,IAAI,CAAC;IA+FhB,OAAO,CAAC,cAAc;YAgBR,yBAAyB;IAiDvC;;;;;OAKG;YACW,wBAAwB;IA8CtC;;;;;;OAMG;IACG,SAAS,IAAI,OAAO,CAAC,aAAa,CAAC;IAqBzC;;OAEG;YACW,kBAAkB;IAyGhC;;;OAGG;IACG,gBAAgB,IAAI,OAAO,CAAC;QAChC,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;QAC1C,cAAc,EAAE;YACd,OAAO,EAAE,MAAM,CAAC;YAChB,QAAQ,EAAE,MAAM,CAAC;YACjB,MAAM,EAAE,MAAM,CAAC;YACf,KAAK,EAAE,MAAM,CAAC;SACf,CAAC;QACF,MAAM,EAAE,eAAe,EAAE,CAAC;KAC3B,CAAC;IAoGF;;;;;;OAMG;IACG,QAAQ,IAAI,OAAO,CAAC,cAAc,CAAC;IA+DzC;;OAEG;IACG,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAkBtD;;;;;;;;;OASG;IACH,MAAM,CAAC,IAAI,EAAE,KAAK,GAAG,MAAM;IA8E3B;;OAEG;IACI,8BAA8B,CACnC,IAAI,EAAE,KAAK,EACX,oBAAoB,CAAC,EAAE,MAAM,GAC5B,uBAAuB;IA6E1B;;;OAGG;IACH,OAAO,CAAC,gBAAgB,CAAwB;IAEhD,OAAO,CAAC,uBAAuB;IA8D/B;;;OAGG;IACH,OAAO,CAAC,oCAAoC;IA2E5C;;;OAGG;IACI,mBAAmB,IAAI,OAAO,GAAG,IAAI;IAIrC,2BAA2B,IAAI,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,GAAG,SAAS;IAI7E,wBAAwB,IAAI,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC;IAIpE,OAAO,CAAC,wBAAwB;IA+BhC;;;;;;;;;;;OAWG;IACI,uBAAuB,CAC5B,IAAI,EAAE,KAAK,EACX,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAClD,OAAO,GAAG,IAAI;IAuGjB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,yBAAyB;IA6CjC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,qCAAqC;IAqC7C;;;OAGG;IACH,OAAO,CAAC,YAAY;IAuBpB,OAAO,CAAC,oBAAoB;IAS5B,OAAO,CAAC,yBAAyB;IAOjC;;;OAGG;IACH,OAAO,CAAC,+BAA+B;IAyJvC;;OAEG;IACH,OAAO,CAAC,oBAAoB;YAKd,qBAAqB;YAkGrB,qBAAqB;IAqInC,OAAO,CAAC,+CAA+C;IAiCvD,OAAO,CAAC,kCAAkC;IAkC1C,OAAO,CAAC,yBAAyB;IA8CjC,OAAO,CAAC,8BAA8B;IAsBtC,OAAO,CAAC,kBAAkB;CAI3B;AAwED;;GAEG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,SAAS,iBAAiB,EAC/B,OAAO,SAAS,iBAAiB,EAEjC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAC7C,gBAAgB,EAAE,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,EAElD,aAAa,CAAC,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAClD,OAAO,GAAE,cAAmB,GAC3B,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,CAQvC"}

package/dist/core/deployment/direct-factory.js

@@ -10,6 +10,7 @@ import { isCelExpression, isKubernetesRef } from '../../utils/type-guards.js';
 import { applyAspects } from '../aspects/apply.js';
 import { createCompositionContext, runWithCompositionContext } from '../composition/context.js';
 import { buildNestedCompositionAliasTargets } from '../composition/nested-status-cel.js';
+import { hasContainerImageRefs, resolveContainerImages } from '../containers/index.js';
 import { DEFAULT_DELETE_TIMEOUT, DEFAULT_FAST_POLL_INTERVAL, DEFAULT_MAX_RECURSION_DEPTH, } from '../config/defaults.js';
 import { KUBERNETES_REF_SCHEMA_MARKER_SOURCE } from '../constants/brands.js';
 import { DependencyResolver } from '../dependencies/index.js';
@@ -127,6 +128,12 @@ export class DirectResourceFactoryImpl {
             kind: this.schemaDefinition.kind,
             name: this.name,
         });
+        // Build + substitute any container() image refs to literal URIs (via buildContainer) before any
+        // resource is applied — images are client-side artifacts, never cluster references.
+        const resourceList = Object.values(this.resources);
+        if (hasContainerImageRefs(resourceList)) {
+            await resolveContainerImages(resourceList);
+        }
         // Use the consolidated deployment strategy
         const strategy = this.getDeploymentStrategy();
         this.logger.debug('Got deployment strategy', {