typekro 0.14.0 → 0.15.1

package/dist/alchemy/types.d.ts

@@ -4,9 +4,8 @@
  * This module provides type definitions for alchemy integration
  * with TypeKro resources.
  */
-import type { Resource as AlchemyResource } from 'alchemy';
 import type { KubernetesClientConfig } from '../core/kubernetes/client-provider.js';
-import type { DeploymentOptions } from '../core/types/deployment.js';
+import type { DeployedResource, DeploymentOptions } from '../core/types/deployment.js';
 import type { Enhanced } from '../core/types/kubernetes.js';
 import type { KroDeletionOptions } from './kro-delete.js';
 /**
@@ -14,9 +13,11 @@ import type { KroDeletionOptions } from './kro-delete.js';
  */
 export interface TypeKroDeployer {
     /**
-     * Deploy a TypeKro resource to Kubernetes
+     * Deploy a TypeKro resource to Kubernetes. `seedResources` (direct mode) supplies the live state
+     * of resources deployed elsewhere (e.g. sibling alchemy resources) so this resource's
+     * cross-resource references/CEL resolve without redeploying them.
      */
-    deploy<T extends Enhanced<any, any>>(resource: T, options: DeploymentOptions): Promise<T>;
+    deploy<T extends Enhanced<any, any>>(resource: T, options: DeploymentOptions, seedResources?: DeployedResource[]): Promise<T>;
     /**
      * Delete a TypeKro resource from Kubernetes
      */
@@ -46,18 +47,67 @@ export interface TypeKroResourceProps<T extends Enhanced<any, any>> {
      */
     deploymentStrategy: 'direct' | 'kro';
     /**
-     * Serializable kubeConfig options
+     * The resource's logical id within its composition graph (e.g. `webappDeployment`) — the id
+     * sibling resources' `KubernetesRef`s point at. Surfaced on the output so dependents can seed
+     * reference resolution against this resource's live state. Set by `toAlchemyResources`.
+     */
+    resourceId?: string;
+    /**
+     * Serializable kubeConfig options used to reach the cluster (and to reconnect on a rehydrated
+     * delete). Echoed onto the output so a state-driven delete works.
+     *
+     * ⚠️ SECURITY: alchemy persists props + output to its state store, so these options are written
+     * to state. If they carry static secrets — `user.token` / `user.certData` / `user.keyData` — those
+     * land in state (e.g. plaintext for the local/HTTP stores). Prefer re-derived auth (`user.exec`
+     * such as `aws eks get-token`, or `authProvider`), which is a command spec rather than a secret,
+     * and use a secured state backend. See {@link extractSerializableKubeConfigOptions}.
      */
     kubeConfigOptions?: SerializableKubeConfigOptions;
     /** Optional preconfigured deployer. Runtime-only; do not rely on this surviving Alchemy rehydration. */
     deployer?: TypeKroDeployer;
     /** Serializable metadata used to preserve finalizer-safe KRO teardown after Alchemy rehydration. */
     kroDeletion?: KroDeletionOptions;
+    /**
+     * Resolved outputs of the resources this one depends on. Two jobs:
+     *
+     *  1. **Ordering** — because each entry traces back (via an alchemy `Output`) to another
+     *     resource, alchemy deploys those first. KRO uses this so the CR instance waits for its
+     *     RGD's CRD; direct mode uses it to honor the composition's dependency graph.
+     *  2. **Reference resolution (direct mode)** — each entry's `deployedResource` is the live
+     *     dependency, so the reconcile can resolve this resource's cross-resource `KubernetesRef`s
+     *     against already-deployed siblings before applying the (now concrete) single manifest.
+     *
+     * Populated by {@link AlchemyResourceDeclaration} + the `materializeAlchemyResources` helper,
+     * not by hand. By the time `reconcile` runs, alchemy has resolved these to concrete values.
+     */
+    dependencies?: TypeKroResource<Enhanced<unknown, unknown>>[];
     /**
      * Optional deployment options
      */
     options?: Partial<Omit<DeploymentOptions, 'mode' | 'namespace'>>;
 }
+/**
+ * A single declarative alchemy v2 resource to instantiate: a stable `id` plus the
+ * `props` to pass to `KroResource`. Produced by a factory's `toAlchemyResources(spec)`
+ * (the v2 analog of the removed imperative `deployWithAlchemy`) so callers can fan a
+ * KRO factory out into its independent state entries (the RGD + each CR instance):
+ *
+ * ```ts
+ * for (const { id, props } of await factory.toAlchemyResources(spec)) {
+ *   yield* KroResource(id, props);
+ * }
+ * ```
+ */
+export interface AlchemyResourceDeclaration {
+    readonly id: string;
+    readonly props: TypeKroResourceProps<Enhanced<unknown, unknown>>;
+    /**
+     * Ids of the other declarations (in the same array) this one must deploy after. The
+     * declarations are returned topologically sorted, and `materializeAlchemyResources` turns
+     * these into alchemy `Output` dependencies (ordering + direct-mode reference resolution).
+     */
+    readonly dependsOn: readonly string[];
+}
 /**
  * Alchemy resource state structure
  */
@@ -68,18 +118,36 @@ export interface AlchemyResourceState {
     [key: string]: unknown;
 }
 /**
- * Output returned after TypeKro resource deployment through alchemy
- * Following alchemy pattern: interface name matches exported resource name
+ * Output returned after TypeKro resource deployment through alchemy.
+ *
+ * Under alchemy v2 a resource's output is a plain, serializable shape (the value
+ * `reconcile` returns and alchemy persists to state) — not an extension of a
+ * framework `Resource` type as it was under v1.
  */
-export interface TypeKroResource<T extends Enhanced<any, any>> extends AlchemyResource<string> {
+export interface TypeKroResource<T extends Enhanced<any, any>> {
     /**
      * The original TypeKro resource
      */
     resource: T;
+    /**
+     * The resource's logical composition-graph id (mirrors {@link TypeKroResourceProps.resourceId}).
+     * Lets a dependent reconcile match this resource against its `KubernetesRef`s when seeding
+     * direct-mode reference resolution. Undefined for resources not produced via `toAlchemyResources`.
+     */
+    resourceId?: string;
     /**
      * The namespace the resource was deployed to
      */
     namespace: string;
+    /**
+     * Persisted delete-time metadata: how the resource was deployed + how to reach/tear it down.
+     * Echoed from the props so a state-driven `delete` (no live `news`) can reconstruct them.
+     * ⚠️ SECURITY: `kubeConfigOptions` is persisted to alchemy state — see the note on
+     * {@link TypeKroResourceProps.kubeConfigOptions}.
+     */
+    deploymentStrategy?: 'direct' | 'kro';
+    kubeConfigOptions?: SerializableKubeConfigOptions;
+    kroDeletion?: KroDeletionOptions;
     /**
      * The deployed resource with live status from the cluster
      */

package/dist/alchemy/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/alchemy/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,QAAQ,IAAI,eAAe,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AACpF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAE1D;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,MAAM,CAAC,CAAC,SAAS,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAE1F;;OAEG;IACH,MAAM,CAAC,CAAC,SAAS,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7F,6DAA6D;IAC7D,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,MAAM,6BAA6B,GAAG,sBAAsB,CAAC;AAEnE;;GAEG;AACH,MAAM,WAAW,oBAAoB,CAAC,CAAC,SAAS,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAChE;;OAEG;IACH,QAAQ,EAAE,CAAC,CAAC;IAEZ;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,kBAAkB,EAAE,QAAQ,GAAG,KAAK,CAAC;IAErC;;OAEG;IACH,iBAAiB,CAAC,EAAE,6BAA6B,CAAC;IAElD,wGAAwG;IACxG,QAAQ,CAAC,EAAE,eAAe,CAAC;IAE3B,oGAAoG;IACpG,WAAW,CAAC,EAAE,kBAAkB,CAAC;IAEjC;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC;CAClE;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAClD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe,CAAC,CAAC,SAAS,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAE,SAAQ,eAAe,CAAC,MAAM,CAAC;IAC5F;;OAEG;IACH,QAAQ,EAAE,CAAC,CAAC;IAEZ;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,gBAAgB,EAAE,CAAC,CAAC;IAEpB;;OAEG;IACH,KAAK,EAAE,OAAO,CAAC;IAEf;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/alchemy/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AACpF,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AACvF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAE1D;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,MAAM,CAAC,CAAC,SAAS,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,EACjC,QAAQ,EAAE,CAAC,EACX,OAAO,EAAE,iBAAiB,EAC1B,aAAa,CAAC,EAAE,gBAAgB,EAAE,GACjC,OAAO,CAAC,CAAC,CAAC,CAAC;IAEd;;OAEG;IACH,MAAM,CAAC,CAAC,SAAS,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7F,6DAA6D;IAC7D,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,MAAM,6BAA6B,GAAG,sBAAsB,CAAC;AAEnE;;GAEG;AACH,MAAM,WAAW,oBAAoB,CAAC,CAAC,SAAS,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAChE;;OAEG;IACH,QAAQ,EAAE,CAAC,CAAC;IAEZ;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,kBAAkB,EAAE,QAAQ,GAAG,KAAK,CAAC;IAErC;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;;;;;;OASG;IACH,iBAAiB,CAAC,EAAE,6BAA6B,CAAC;IAElD,wGAAwG;IACxG,QAAQ,CAAC,EAAE,eAAe,CAAC;IAE3B,oGAAoG;IACpG,WAAW,CAAC,EAAE,kBAAkB,CAAC;IAEjC;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,EAAE,eAAe,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;IAE7D;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC;CAClE;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACjE;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAClD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe,CAAC,CAAC,SAAS,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAC3D;;OAEG;IACH,QAAQ,EAAE,CAAC,CAAC;IAEZ;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,QAAQ,GAAG,KAAK,CAAC;IACtC,iBAAiB,CAAC,EAAE,6BAA6B,CAAC;IAClD,WAAW,CAAC,EAAE,kBAAkB,CAAC;IAEjC;;OAEG;IACH,gBAAgB,EAAE,CAAC,CAAC;IAEpB;;OAEG;IACH,KAAK,EAAE,OAAO,CAAC;IAEf;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB"}

package/dist/alchemy/wrapper.d.ts

@@ -1,16 +1,7 @@
 /**
  * Alchemy Integration Utilities
- *
- * This file contains utility functions that align with the dynamic registration approach.
- * Static resource registration functions have been removed to avoid conflicts.
  */
 import { generateDeterministicResourceId as _generateDeterministicResourceId } from '../core/resources/id.js';
-/**
- * Utility to check if a factory is alchemy-managed
- */
-export declare function isAlchemyWrapped(factory: unknown): factory is {
-    isAlchemyManaged: true;
-};
 /**
  * Re-export utility function for deterministic resource ID generation
  */

package/dist/alchemy/wrapper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrapper.d.ts","sourceRoot":"","sources":["../../src/alchemy/wrapper.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,+BAA+B,IAAI,gCAAgC,EAAE,MAAM,yBAAyB,CAAC;AAE9G;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,IAAI;IAAE,gBAAgB,EAAE,IAAI,CAAA;CAAE,CAQxF;AAED;;GAEG;AACH,eAAO,MAAM,+BAA+B,yCAAmC,CAAC"}
+{"version":3,"file":"wrapper.d.ts","sourceRoot":"","sources":["../../src/alchemy/wrapper.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,+BAA+B,IAAI,gCAAgC,EAAE,MAAM,yBAAyB,CAAC;AAE9G;;GAEG;AACH,eAAO,MAAM,+BAA+B,yCAAmC,CAAC"}

package/dist/alchemy/wrapper.js

@@ -1,24 +1,9 @@
 /**
  * Alchemy Integration Utilities
- *
- * This file contains utility functions that align with the dynamic registration approach.
- * Static resource registration functions have been removed to avoid conflicts.
  */
 import { generateDeterministicResourceId as _generateDeterministicResourceId } from '../core/resources/id.js';
-/**
- * Utility to check if a factory is alchemy-managed
- */
-export function isAlchemyWrapped(factory) {
-    return (factory !== null &&
-        factory !== undefined &&
-        typeof factory === 'object' &&
-        'isAlchemyManaged' in factory &&
-        factory.isAlchemyManaged === true);
-}
 /**
  * Re-export utility function for deterministic resource ID generation
  */
 export const generateDeterministicResourceId = _generateDeterministicResourceId;
-// All static resource registration functions have been removed to align with
-// the dynamic registration approach using ensureResourceTypeRegistered()
 //# sourceMappingURL=wrapper.js.map

package/dist/alchemy/wrapper.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrapper.js","sourceRoot":"","sources":["../../src/alchemy/wrapper.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,+BAA+B,IAAI,gCAAgC,EAAE,MAAM,yBAAyB,CAAC;AAE9G;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,OAAO,CACL,OAAO,KAAK,IAAI;QAChB,OAAO,KAAK,SAAS;QACrB,OAAO,OAAO,KAAK,QAAQ;QAC3B,kBAAkB,IAAI,OAAO;QAC7B,OAAO,CAAC,gBAAgB,KAAK,IAAI,CAClC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,gCAAgC,CAAC;AAEhF,6EAA6E;AAC7E,yEAAyE"}
+{"version":3,"file":"wrapper.js","sourceRoot":"","sources":["../../src/alchemy/wrapper.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,+BAA+B,IAAI,gCAAgC,EAAE,MAAM,yBAAyB,CAAC;AAE9G;;GAEG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,gCAAgC,CAAC"}

package/dist/core/deployment/direct-factory.d.ts

@@ -7,6 +7,7 @@
 import type { DeploymentClosure, DeploymentError, DeploymentResourceGraph, DeploymentResult, DirectResourceFactory, FactoryOptions, FactoryStatus, RollbackResult } from '../types/deployment.js';
 import type { Enhanced, KubernetesResource } from '../types/kubernetes.js';
 import type { KroCompatibleType, SchemaDefinition, StatusBuilder } from '../types/serialization.js';
+import type { AlchemyResourceDeclaration } from '../../alchemy/types.js';
 /**
  * DirectResourceFactory implementation
  *
@@ -17,13 +18,11 @@ export declare class DirectResourceFactoryImpl<TSpec extends KroCompatibleType,
     readonly mode: "direct";
     readonly name: string;
     readonly namespace: string;
-    readonly isAlchemyManaged: boolean;
     private readonly resources;
     private readonly closures;
     private readonly schemaDefinition;
     private readonly statusBuilder;
     private deploymentEngine;
-    private readonly alchemyScope;
     private readonly factoryOptions;
     private readonly singletonDefinitions;
     private readonly singletonOwnerStatuses;
@@ -156,6 +155,19 @@ export declare class DirectResourceFactoryImpl<TSpec extends KroCompatibleType,
      * Create a resource graph for a specific instance
      */
     createResourceGraphForInstance(spec: TSpec, instanceNameOverride?: string): DeploymentResourceGraph;
+    /**
+     * Emit this composition's resolved resources as declarative alchemy **v2** resources — one
+     * {@link AlchemyResourceDeclaration} per Kubernetes resource (matching the v1 integration's
+     * per-resource state granularity), topologically ordered with `dependsOn` wired from the
+     * composition's dependency graph. The v2 analog of the removed imperative direct-mode alchemy
+     * deploy. Instantiate them with `materializeAlchemyResources(KroResource, …)`, which turns
+     * `dependsOn` into alchemy `Output` edges so (a) each resource deploys only after the resources
+     * it references and (b) each reconcile resolves its cross-resource `KubernetesRef`s against those
+     * dependencies' live state before applying.
+     */
+    toAlchemyResources(spec: TSpec, opts?: {
+        instanceNameOverride?: string;
+    }): Promise<AlchemyResourceDeclaration[]>;
     /**
      * Resolve resources for a specific spec
      * This uses composition re-execution when available, or falls back to reference resolution

package/dist/core/deployment/direct-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"direct-factory.d.ts","sourceRoot":"","sources":["../../../src/core/deployment/direct-factory.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA8BH,OAAO,KAAK,EACV,iBAAiB,EACjB,eAAe,EACf,uBAAuB,EACvB,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACd,aAAa,EAEb,cAAc,EAEf,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAyB,QAAQ,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAElG,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAEhB,aAAa,EACd,MAAM,2BAA2B,CAAC;AAmBnC;;;;;GAKG;AACH,qBAAa,yBAAyB,CACpC,KAAK,SAAS,iBAAiB,EAC/B,OAAO,SAAS,iBAAiB,CACjC,YAAW,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC;IAEhD,QAAQ,CAAC,IAAI,EAAG,QAAQ,CAAU;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IAEnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqC;IAC/D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoC;IAC7D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAmC;IAEpE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAiD;IAC/E,OAAO,CAAC,gBAAgB,CAAqC;IAC7D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA8B;IACnE,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAA8C;IACrF,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoD;IACtF,OAAO,CAAC,gCAAgC,CAAiD;IACzF,OAAO,CAAC,6BAA6B,CAAgD;IACrF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAC/D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA0B;gBAGtD,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAC7C,gBAAgB,EAAE,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,EAElD,aAAa,CAAC,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAClD,OAAO,GAAE,cAAmB;IAe9B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,aAAa;IAWf,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAc9B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA0B3B;;OAEG;IACG,MAAM,CACV,IAAI,EAAE,KAAK,EACX,IAAI,CAAC,EAAE;QACL,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,wBAAwB,CAAC,EAAE,MAAM,CAAC;KACnC,GACA,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAqCpC;;OAEG;IACH,OAAO,CAAC,qBAAqB;IA8B7B;;;;;;;OAOG;IACG,YAAY,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;IAIzD;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACG,cAAc,CAClB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,wBAAwB,CAAC,EAAE,OAAO,CAAA;KAAE,GAC/D,OAAO,CAAC,IAAI,CAAC;IA+FhB,OAAO,CAAC,cAAc;YAgBR,yBAAyB;IAiDvC;;;;;OAKG;YACW,wBAAwB;IA8CtC;;;;;;OAMG;IACG,SAAS,IAAI,OAAO,CAAC,aAAa,CAAC;IAqBzC;;OAEG;YACW,kBAAkB;IAyGhC;;;OAGG;IACG,gBAAgB,IAAI,OAAO,CAAC;QAChC,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;QAC1C,cAAc,EAAE;YACd,OAAO,EAAE,MAAM,CAAC;YAChB,QAAQ,EAAE,MAAM,CAAC;YACjB,MAAM,EAAE,MAAM,CAAC;YACf,KAAK,EAAE,MAAM,CAAC;SACf,CAAC;QACF,MAAM,EAAE,eAAe,EAAE,CAAC;KAC3B,CAAC;IAoGF;;;;;;OAMG;IACG,QAAQ,IAAI,OAAO,CAAC,cAAc,CAAC;IA+DzC;;OAEG;IACG,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAkBtD;;;;;;;;;OASG;IACH,MAAM,CAAC,IAAI,EAAE,KAAK,GAAG,MAAM;IA8E3B;;OAEG;IACI,8BAA8B,CACnC,IAAI,EAAE,KAAK,EACX,oBAAoB,CAAC,EAAE,MAAM,GAC5B,uBAAuB;IA6E1B;;;OAGG;IACH,OAAO,CAAC,gBAAgB,CAAwB;IAEhD,OAAO,CAAC,uBAAuB;IA8D/B;;;OAGG;IACH,OAAO,CAAC,oCAAoC;IA2E5C;;;OAGG;IACI,mBAAmB,IAAI,OAAO,GAAG,IAAI;IAIrC,2BAA2B,IAAI,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,GAAG,SAAS;IAI7E,wBAAwB,IAAI,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC;IAIpE,OAAO,CAAC,wBAAwB;IA+BhC;;;;;;;;;;;OAWG;IACI,uBAAuB,CAC5B,IAAI,EAAE,KAAK,EACX,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAClD,OAAO,GAAG,IAAI;IAuGjB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,yBAAyB;IA6CjC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,qCAAqC;IAqC7C;;;OAGG;IACH,OAAO,CAAC,YAAY;IAuBpB,OAAO,CAAC,oBAAoB;IAS5B,OAAO,CAAC,yBAAyB;IAOjC;;;OAGG;IACH,OAAO,CAAC,+BAA+B;IAyJvC;;OAEG;IACH,OAAO,CAAC,oBAAoB;YAKd,qBAAqB;YAkGrB,qBAAqB;IAqInC,OAAO,CAAC,+CAA+C;IAiCvD,OAAO,CAAC,kCAAkC;IAkC1C,OAAO,CAAC,yBAAyB;IA8CjC,OAAO,CAAC,8BAA8B;IAsBtC,OAAO,CAAC,kBAAkB;CAI3B;AAwED;;GAEG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,SAAS,iBAAiB,EAC/B,OAAO,SAAS,iBAAiB,EAEjC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAC7C,gBAAgB,EAAE,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,EAElD,aAAa,CAAC,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAClD,OAAO,GAAE,cAAmB,GAC3B,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,CAQvC"}
+{"version":3,"file":"direct-factory.d.ts","sourceRoot":"","sources":["../../../src/core/deployment/direct-factory.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA8BH,OAAO,KAAK,EACV,iBAAiB,EACjB,eAAe,EACf,uBAAuB,EACvB,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACd,aAAa,EAEb,cAAc,EAEf,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAyB,QAAQ,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAClG,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EACd,MAAM,2BAA2B,CAAC;AAUnC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAczE;;;;;GAKG;AACH,qBAAa,yBAAyB,CACpC,KAAK,SAAS,iBAAiB,EAC/B,OAAO,SAAS,iBAAiB,CACjC,YAAW,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC;IAEhD,QAAQ,CAAC,IAAI,EAAG,QAAQ,CAAU;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqC;IAC/D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoC;IAC7D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAmC;IAEpE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAiD;IAC/E,OAAO,CAAC,gBAAgB,CAAqC;IAC7D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA8B;IACnE,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAA8C;IACrF,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoD;IACtF,OAAO,CAAC,gCAAgC,CAAiD;IACzF,OAAO,CAAC,6BAA6B,CAAgD;IACrF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAC/D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA0B;gBAGtD,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAC7C,gBAAgB,EAAE,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,EAElD,aAAa,CAAC,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAClD,OAAO,GAAE,cAAmB;IAa9B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,aAAa;IAWf,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAc9B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA0B3B;;OAEG;IACG,MAAM,CACV,IAAI,EAAE,KAAK,EACX,IAAI,CAAC,EAAE;QACL,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,wBAAwB,CAAC,EAAE,MAAM,CAAC;KACnC,GACA,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAqCpC;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAa7B;;;;;;;OAOG;IACG,YAAY,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;IAIzD;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACG,cAAc,CAClB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,wBAAwB,CAAC,EAAE,OAAO,CAAA;KAAE,GAC/D,OAAO,CAAC,IAAI,CAAC;IA+FhB,OAAO,CAAC,cAAc;YAgBR,yBAAyB;IAiDvC;;;;;OAKG;YACW,wBAAwB;IA8CtC;;;;;;OAMG;IACG,SAAS,IAAI,OAAO,CAAC,aAAa,CAAC;IAoBzC;;OAEG;YACW,kBAAkB;IAyGhC;;;OAGG;IACG,gBAAgB,IAAI,OAAO,CAAC;QAChC,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;QAC1C,cAAc,EAAE;YACd,OAAO,EAAE,MAAM,CAAC;YAChB,QAAQ,EAAE,MAAM,CAAC;YACjB,MAAM,EAAE,MAAM,CAAC;YACf,KAAK,EAAE,MAAM,CAAC;SACf,CAAC;QACF,MAAM,EAAE,eAAe,EAAE,CAAC;KAC3B,CAAC;IAoGF;;;;;;OAMG;IACG,QAAQ,IAAI,OAAO,CAAC,cAAc,CAAC;IA+DzC;;OAEG;IACG,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAkBtD;;;;;;;;;OASG;IACH,MAAM,CAAC,IAAI,EAAE,KAAK,GAAG,MAAM;IA8E3B;;OAEG;IACI,8BAA8B,CACnC,IAAI,EAAE,KAAK,EACX,oBAAoB,CAAC,EAAE,MAAM,GAC5B,uBAAuB;IA6E1B;;;;;;;;;OASG;IACG,kBAAkB,CACtB,IAAI,EAAE,KAAK,EACX,IAAI,CAAC,EAAE;QAAE,oBAAoB,CAAC,EAAE,MAAM,CAAA;KAAE,GACvC,OAAO,CAAC,0BAA0B,EAAE,CAAC;IA+ExC;;;OAGG;IACH,OAAO,CAAC,gBAAgB,CAAwB;IAEhD,OAAO,CAAC,uBAAuB;IA8D/B;;;OAGG;IACH,OAAO,CAAC,oCAAoC;IA2E5C;;;OAGG;IACI,mBAAmB,IAAI,OAAO,GAAG,IAAI;IAIrC,2BAA2B,IAAI,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,GAAG,SAAS;IAI7E,wBAAwB,IAAI,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC;IAIpE,OAAO,CAAC,wBAAwB;IA+BhC;;;;;;;;;;;OAWG;IACI,uBAAuB,CAC5B,IAAI,EAAE,KAAK,EACX,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAClD,OAAO,GAAG,IAAI;IAuGjB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,yBAAyB;IA6CjC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,qCAAqC;IAqC7C;;;OAGG;IACH,OAAO,CAAC,YAAY;IAuBpB,OAAO,CAAC,oBAAoB;IAS5B,OAAO,CAAC,yBAAyB;IAOjC;;;OAGG;IACH,OAAO,CAAC,+BAA+B;IAyJvC;;OAEG;IACH,OAAO,CAAC,oBAAoB;YAKd,qBAAqB;YAkGrB,qBAAqB;IAqInC,OAAO,CAAC,+CAA+C;IAiCvD,OAAO,CAAC,kCAAkC;IAkC1C,OAAO,CAAC,yBAAyB;IA8CjC,OAAO,CAAC,8BAA8B;IAsBtC,OAAO,CAAC,kBAAkB;CAI3B;AA4GD;;GAEG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,SAAS,iBAAiB,EAC/B,OAAO,SAAS,iBAAiB,EAEjC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAC7C,gBAAgB,EAAE,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,EAElD,aAAa,CAAC,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAClD,OAAO,GAAE,cAAmB,GAC3B,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,CAQvC"}

package/dist/core/deployment/direct-factory.js

@@ -23,9 +23,12 @@ import { DirectDeploymentEngine } from './engine.js';
 import { logHandleSnapshot } from './handle-tracing.js';
 import { synthesizeNestedCompositionStatus } from './nested-composition-status.js';
 import { ResourceReadinessChecker } from './readiness.js';
-import { generateInstanceName, getSingletonInstanceName, validateSpec, } from './shared-utilities.js';
+import { ensureReadinessEvaluator } from '../readiness/evaluator.js';
+import { extractResourceReferencesFromExpression } from '../expressions/analysis/scope-resolver.js';
+import { createAlchemyResourceId } from '../../alchemy/utilities.js';
+import { extractSerializableKubeConfigOptions, generateInstanceName, getSingletonInstanceName, validateSpec, } from './shared-utilities.js';
 import { assertNoDeployedSingletonSpecDrift, assertNoDiscoveredSingletonSpecDrift, singletonSpecFingerprintAnnotationValue, } from './singleton-owner-drift.js';
-import { AlchemyDeploymentStrategy, DirectDeploymentStrategy } from './strategies/index.js';
+import { DirectDeploymentStrategy } from './strategies/index.js';
 /**
  * DirectResourceFactory implementation
  *
@@ -36,14 +39,12 @@ export class DirectResourceFactoryImpl {
     mode = 'direct';
     name;
     namespace;
-    isAlchemyManaged;
     resources;
     closures;
     schemaDefinition;
     // biome-ignore lint/suspicious/noExplicitAny: status builders accept composition-specific resource maps that cannot be expressed more tightly here.
     statusBuilder;
     deploymentEngine;
-    alchemyScope;
     factoryOptions;
     singletonDefinitions;
     singletonOwnerStatuses = new Map();
@@ -57,8 +58,6 @@ export class DirectResourceFactoryImpl {
     statusBuilder, options = {}) {
         this.name = name;
         this.namespace = options.namespace || 'default';
-        this.alchemyScope = options.alchemyScope;
-        this.isAlchemyManaged = !!options.alchemyScope;
         this.resources = resources;
         this.closures = options.closures || {};
         this.schemaDefinition = schemaDefinition;
@@ -149,14 +148,8 @@ export class DirectResourceFactoryImpl {
      * Get the appropriate deployment strategy based on configuration
      */
     getDeploymentStrategy() {
-        // Create base strategy
-        const baseStrategy = new DirectDeploymentStrategy(this.name, this.namespace, this.schemaDefinition, this.statusBuilder, this.resources, this.factoryOptions, this.getDeploymentEngine(), this // This factory acts as the resource resolver
+        return new DirectDeploymentStrategy(this.name, this.namespace, this.schemaDefinition, this.statusBuilder, this.resources, this.factoryOptions, this.getDeploymentEngine(), this // This factory acts as the resource resolver
         );
-        // Wrap with alchemy if needed
-        if (this.isAlchemyManaged && this.alchemyScope) {
-            return new AlchemyDeploymentStrategy(this.name, this.namespace, this.schemaDefinition, this.statusBuilder, this.resources, this.factoryOptions, this.alchemyScope, baseStrategy);
-        }
-        return baseStrategy;
     }
     /**
      * Get all deployed instances
@@ -398,7 +391,6 @@ export class DirectResourceFactoryImpl {
         return {
             name: this.name,
             mode: this.mode,
-            isAlchemyManaged: this.isAlchemyManaged,
             namespace: this.namespace,
             instanceCount: instances.length,
             health,
@@ -819,6 +811,78 @@ export class DirectResourceFactoryImpl {
             dependencyGraph,
         };
     }
+    /**
+     * Emit this composition's resolved resources as declarative alchemy **v2** resources — one
+     * {@link AlchemyResourceDeclaration} per Kubernetes resource (matching the v1 integration's
+     * per-resource state granularity), topologically ordered with `dependsOn` wired from the
+     * composition's dependency graph. The v2 analog of the removed imperative direct-mode alchemy
+     * deploy. Instantiate them with `materializeAlchemyResources(KroResource, …)`, which turns
+     * `dependsOn` into alchemy `Output` edges so (a) each resource deploys only after the resources
+     * it references and (b) each reconcile resolves its cross-resource `KubernetesRef`s against those
+     * dependencies' live state before applying.
+     */
+    async toAlchemyResources(spec, opts) {
+        const graph = this.createResourceGraphForInstance(spec, opts?.instanceNameOverride);
+        const kubeConfigOptions = extractSerializableKubeConfigOptions(this.getClientProvider().getKubeConfig(), this.factoryOptions.skipTLSVerify === true ? true : undefined);
+        const byGraphId = new Map();
+        for (const { id: graphId, manifest } of graph.resources) {
+            const resource = ensureReadinessEvaluator(manifest);
+            byGraphId.set(graphId, {
+                resource,
+                alchemyId: createAlchemyResourceId(resource, this.namespace),
+                logicalId: getResourceId(manifest) ?? graphId,
+                serialized: JSON.stringify(manifest),
+            });
+        }
+        const nodeByLogicalId = new Map(Array.from(byGraphId.values(), (n) => [n.logicalId, n]));
+        const logicalIds = new Set(nodeByLogicalId.keys());
+        const alchemyIdByLogicalId = new Map(Array.from(byGraphId.values(), (n) => [n.logicalId, n.alchemyId]));
+        // Compute each node's dependency logical-ids. The dependency graph captures `KubernetesRef`
+        // OBJECT references, but by the time the instance is resolved most cross-resource references
+        // have been serialized to CEL strings (`${otherResource.status.field}`) that the graph no
+        // longer sees — so we ALSO scan each manifest's serialized form for references to sibling
+        // logical ids. Union of both is the complete dependency set.
+        const depsByLogicalId = new Map();
+        for (const [graphId, node] of byGraphId) {
+            const deps = new Set();
+            for (const depGraphId of graph.dependencyGraph.getDependencies(graphId)) {
+                const dep = byGraphId.get(depGraphId);
+                if (dep)
+                    deps.add(dep.logicalId);
+            }
+            for (const ref of extractResourceReferencesFromExpression(node.serialized)) {
+                const head = ref.split(/[.[]/, 1)[0];
+                if (head && head !== node.logicalId && logicalIds.has(head))
+                    deps.add(head);
+            }
+            depsByLogicalId.set(node.logicalId, deps);
+        }
+        const waitForReady = this.factoryOptions.waitForReady ?? false;
+        const timeout = this.factoryOptions.timeout;
+        // Topologically sort by the COMPLETE dependency set (Kahn) so each declaration precedes its
+        // dependents — `getTopologicalOrder` alone would miss the CEL-string edges recovered above.
+        const ordered = topoSortLogicalIds(logicalIds, depsByLogicalId);
+        return ordered.flatMap((logicalId) => {
+            const node = nodeByLogicalId.get(logicalId);
+            if (!node)
+                return [];
+            const dependsOn = Array.from(depsByLogicalId.get(logicalId) ?? [])
+                .map((depLogicalId) => alchemyIdByLogicalId.get(depLogicalId))
+                .filter((id) => id !== undefined);
+            return {
+                id: node.alchemyId,
+                dependsOn,
+                props: {
+                    resource: node.resource,
+                    resourceId: node.logicalId,
+                    namespace: this.namespace,
+                    deploymentStrategy: 'direct',
+                    kubeConfigOptions,
+                    options: { waitForReady, ...(timeout !== undefined && { timeout }) },
+                },
+            };
+        });
+    }
     /**
      * Resolve resources for a specific spec
      * This uses composition re-execution when available, or falls back to reference resolution
@@ -1590,6 +1654,45 @@ export class DirectResourceFactoryImpl {
         return `${kind}/${namespace ?? ''}/${name}`;
     }
 }
+/**
+ * Kahn topological sort of `ids` by their dependency set (`deps`: id → set of ids it depends on),
+ * returning dependencies-first order. Edges to ids outside the set are ignored; if a cycle leaves
+ * nodes unprocessed they're appended in stable order (best effort) rather than throwing.
+ */
+function topoSortLogicalIds(ids, deps) {
+    const inDegree = new Map();
+    const dependents = new Map();
+    for (const id of ids) {
+        inDegree.set(id, 0);
+        dependents.set(id, []);
+    }
+    for (const id of ids) {
+        for (const dep of deps.get(id) ?? []) {
+            if (!ids.has(dep))
+                continue;
+            inDegree.set(id, (inDegree.get(id) ?? 0) + 1);
+            dependents.get(dep)?.push(id);
+        }
+    }
+    const queue = Array.from(ids).filter((id) => (inDegree.get(id) ?? 0) === 0);
+    const result = [];
+    while (queue.length > 0) {
+        const id = queue.shift();
+        result.push(id);
+        for (const dependent of dependents.get(id) ?? []) {
+            const next = (inDegree.get(dependent) ?? 0) - 1;
+            inDegree.set(dependent, next);
+            if (next === 0)
+                queue.push(dependent);
+        }
+    }
+    if (result.length < ids.size) {
+        for (const id of ids)
+            if (!result.includes(id))
+                result.push(id);
+    }
+    return result;
+}
 /**
  * Recursively walk a resolved resource tree and collect any remaining
  * KubernetesRef or CelExpression objects.  These cannot be serialized