typekro 0.15.5 → 0.16.1

package/dist/factories/caddy/compositions/caddy-ingress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"caddy-ingress.js","sourceRoot":"","sources":["../../../../src/factories/caddy/compositions/caddy-ingress.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,SAAS,EAAE,MAAM,uCAAuC,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,wCAAwC,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qDAAqD,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAE,MAAM,0CAA0C,CAAC;AACtE,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAEjF,0GAA0G;AAC1G,MAAM,CAAC,MAAM,qBAAqB,GAAG,QAAQ,CAAC;AAC9C;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,qBAAqB,EAAE,CAAC;AACpE,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAAC;AACtD,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAC1C,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAC5C,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAE5C,MAAM,CAAC,MAAM,YAAY,GAAG,qBAAqB,CAC/C;IACE,IAAI,EAAE,eAAe;IACrB,IAAI,EAAE,cAAc;IACpB,IAAI,EAAE,wBAAwB;IAC9B,MAAM,EAAE,wBAAwB;CACjC,EACD,CAAC,IAAI,EAAE,EAAE;IACP,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,uBAAuB,CAAC;IACrD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,mBAAmB,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,qBAAqB,CAAC;IACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,uBAAuB,CAAC;IAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,wBAAwB,CAAC;IAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC;IACpD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,sBAAsB,CAAC;IAEjE,MAAM,MAAM,GAAG;QACb,wBAAwB,EAAE,OAAO;QACjC,4BAA4B,EAAE,IAAI;QAClC,2BAA2B,EAAE,OAAO;QACpC,8BAA8B,EAAE,SAAS;KAC1C,CAAC;IACF,MAAM,QAAQ,GAAG,EAAE,wBAAwB,EAAE,OAAO,EAAE,4BAA4B,EAAE,IAAI,EAAE,CAAC;IAC3F,MAAM,aAAa,GAAG,GAAG,IAAI,YAAY,CAAC;IAC1C,MAAM,OAAO,GAAG,GAAG,IAAI,OAAO,CAAC;IAE/B,uGAAuG;IACvG,2FAA2F;IAC3F,SAAS,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAEpE,SAAS,CAAC;QACR,QAAQ,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE;QACxD,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE;QACnC,EAAE,EAAE,aAAa;KAClB,CAAC,CAAC;IAEH,kGAAkG;IAClG,qBAAqB,CAAC;QACpB,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE;QAClD,IAAI,EAAE;YACJ,WAAW,EAAE,CAAC,eAAe,CAAC;YAC9B,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;YAC7C,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY;gBAChC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE;gBACrD,CAAC,CAAC,EAAE,CAAC;SACR;QACD,EAAE,EAAE,WAAW;KAChB,CAAC,CAAC;IAEH,MAAM,OAAO,GAAe;QAC1B,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE;QACzD,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE;KAChE,CAAC;IAEF,MAAM,eAAe,GAAG,UAAU,CAAC;QACjC,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE;QACzC,IAAI,EAAE;YACJ,4FAA4F;YAC5F,6FAA6F;YAC7F,0FAA0F;YAC1F,uFAAuF;YACvF,QAAQ,EAAE,CAAC;YACX,6FAA6F;YAC7F,4FAA4F;YAC5F,+DAA+D;YAC/D,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;YAC9B,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE;YACnC,QAAQ,EAAE;gBACR,QAAQ,EAAE,EAAE,MAAM,EAAE;gBACpB,IAAI,EAAE;oBACJ,UAAU,EAAE;wBACV;4BACE,IAAI,EAAE,OAAO;4BACb,KAAK;4BACL,0FAA0F;4BAC1F,iFAAiF;4BACjF,OAAO,EAAE;gCACP,OAAO;gCACP,KAAK;gCACL,UAAU;gCACV,sBAAsB;gCACtB,WAAW;gCACX,WAAW;6BACZ;4BACD,KAAK,EAAE;gCACL,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE;gCACzC,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE;6BAC5C;4BACD,YAAY,EAAE;gCACZ,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE;gCAC9D,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE;6BACrC;4BACD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BACxD,cAAc,EAAE;gCACd,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;gCAC9B,mBAAmB,EAAE,CAAC;gCACtB,aAAa,EAAE,EAAE;6BAClB;yBACF;qBACF;oBACD,OAAO;iBACR;aACF;SACF;QACD,EAAE,EAAE,iBAAiB;KACtB,CAAC,CAAC;IAEH,OAAO,CAAC;QACN,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE;QACzC,IAAI,EAAE;YACJ,IAAI,EAAE,WAAW;YACjB,QAAQ;YACR,KAAK,EAAE;gBACL,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE;gBACtD,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE;aAC1D;SACF;QACD,EAAE,EAAE,cAAc;KACnB,CAAC,CAAC;IAEH,oGAAoG;IACpG,qGAAqG;IACrG,iGAAiG;IACjG,kGAAkG;IAClG,6FAA6F;IAC7F,mGAAmG;IACnG,6CAA6C;IAC7C,OAAO;QACL,KAAK,EAAE,eAAe,CAAC,MAAM,CAAC,aAAa,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ;QAC5E,OAAO;KACR,CAAC;AACJ,CAAC,CACF,CAAC"}

package/dist/factories/caddy/compositions/index.d.ts

@@ -0,0 +1,2 @@
+export { caddyIngress, DEFAULT_CADDY_HTTP_PORT, DEFAULT_CADDY_HTTPS_PORT, DEFAULT_CADDY_IMAGE, DEFAULT_CADDY_NAMESPACE, DEFAULT_CADDY_PVC_SIZE, DEFAULT_CADDY_VERSION, } from './caddy-ingress.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/factories/caddy/compositions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/factories/caddy/compositions/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,uBAAuB,EACvB,wBAAwB,EACxB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,oBAAoB,CAAC"}

package/dist/factories/caddy/compositions/index.js

@@ -0,0 +1,2 @@
+export { caddyIngress, DEFAULT_CADDY_HTTP_PORT, DEFAULT_CADDY_HTTPS_PORT, DEFAULT_CADDY_IMAGE, DEFAULT_CADDY_NAMESPACE, DEFAULT_CADDY_PVC_SIZE, DEFAULT_CADDY_VERSION, } from './caddy-ingress.js';
+//# sourceMappingURL=index.js.map

package/dist/factories/caddy/compositions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/factories/caddy/compositions/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,uBAAuB,EACvB,wBAAwB,EACxB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,oBAAoB,CAAC"}

package/dist/factories/caddy/index.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Caddy Integration for TypeKro.
+ *
+ * A CONFIG-DRIVEN Caddy reverse proxy (official `caddy` image + a supplied Caddyfile) — not the Caddy
+ * ingress-controller and not a Helm bootstrap. Emits ConfigMap (Caddyfile) + Deployment + Service + PVC.
+ * Caddy's `tls internal` issues certs from a built-in local CA (no cert-manager); the PVC persists `/data`
+ * so the CA root is stable.
+ *
+ * ## Compositions
+ * - `caddyIngress` — runs Caddy with a supplied Caddyfile (kro + direct modes).
+ *
+ * ## Helpers
+ * - `renderCaddyfile(routes, opts)` — build the Caddyfile string from concrete host→upstream routes.
+ *
+ * @example
+ * ```typescript
+ * import { caddyIngress, renderCaddyfile } from 'typekro/caddy';
+ *
+ * const caddyfile = renderCaddyfile([
+ *   { host: 'dagster-dev.acme.internal', upstream: 'dagster.dagster-platform-dev.svc:80' },
+ * ]);
+ * const factory = caddyIngress.factory('direct', { namespace: 'caddy-system' });
+ * await factory.deploy({ name: 'caddy', caddyfile });
+ * ```
+ *
+ * @see https://caddyserver.com/docs/caddyfile/directives/tls
+ * @module
+ */
+export * from './compositions/index.js';
+export * from './types.js';
+export * from './utils/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/factories/caddy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/factories/caddy/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,cAAc,yBAAyB,CAAC;AACxC,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC"}

package/dist/factories/caddy/index.js

@@ -0,0 +1,32 @@
+/**
+ * Caddy Integration for TypeKro.
+ *
+ * A CONFIG-DRIVEN Caddy reverse proxy (official `caddy` image + a supplied Caddyfile) — not the Caddy
+ * ingress-controller and not a Helm bootstrap. Emits ConfigMap (Caddyfile) + Deployment + Service + PVC.
+ * Caddy's `tls internal` issues certs from a built-in local CA (no cert-manager); the PVC persists `/data`
+ * so the CA root is stable.
+ *
+ * ## Compositions
+ * - `caddyIngress` — runs Caddy with a supplied Caddyfile (kro + direct modes).
+ *
+ * ## Helpers
+ * - `renderCaddyfile(routes, opts)` — build the Caddyfile string from concrete host→upstream routes.
+ *
+ * @example
+ * ```typescript
+ * import { caddyIngress, renderCaddyfile } from 'typekro/caddy';
+ *
+ * const caddyfile = renderCaddyfile([
+ *   { host: 'dagster-dev.acme.internal', upstream: 'dagster.dagster-platform-dev.svc:80' },
+ * ]);
+ * const factory = caddyIngress.factory('direct', { namespace: 'caddy-system' });
+ * await factory.deploy({ name: 'caddy', caddyfile });
+ * ```
+ *
+ * @see https://caddyserver.com/docs/caddyfile/directives/tls
+ * @module
+ */
+export * from './compositions/index.js';
+export * from './types.js';
+export * from './utils/index.js';
+//# sourceMappingURL=index.js.map

package/dist/factories/caddy/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/factories/caddy/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,cAAc,yBAAyB,CAAC;AACxC,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC"}

package/dist/factories/caddy/types.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Caddy Ingress Types
+ *
+ * Caddy here is a CONFIG-DRIVEN reverse proxy (not the Caddy ingress-controller, and not a Helm
+ * bootstrap): the composition runs the official `caddy` image with a Caddyfile we supply, and emits a
+ * ConfigMap (Caddyfile) + Deployment + Service + PVC. Caddy's built-in `tls internal` issues certs from a
+ * local CA (no cert-manager), so the PVC persists `/data` (the CA root) across restarts.
+ *
+ * KRO-safety note: the Caddyfile is supplied as a STRING (`caddyfile`), not derived from a structured
+ * `routes` array inside the composition. A `routes` array would be a graph proxy in KRO mode and cannot be
+ * `.map()`-ed into a string (see integration-skill rules 32/48). Use the exported `renderCaddyfile()`
+ * helper to build the string from routes in concrete (consumer/direct) contexts, then pass it here.
+ */
+/**
+ * Caddy ingress config. `caddyfile` is the raw Caddyfile content (the routing + TLS config), supplied as
+ * a string so it passes through unchanged in both direct and KRO modes.
+ *
+ * Undeclared keys are REJECTED (`'+': 'reject'`) so misconfig fails loudly rather than being silently
+ * dropped — notably `replicaCount`: this composition is single-replica by design (the `tls internal` CA
+ * lives in a RWO PVC one pod owns), so a replica knob would invite a broken multi-pod-shares-RWO setup.
+ */
+export declare const CaddyIngressConfigSchema: import("arktype/internal/variants/object.ts").ObjectType<{
+    name: string;
+    caddyfile: string;
+    namespace?: string;
+    image?: string;
+    version?: string;
+    httpPort?: number;
+    httpsPort?: number;
+    serviceType?: "ClusterIP" | "NodePort" | "LoadBalancer";
+    persistence?: {
+        size?: string;
+        storageClass?: string;
+    };
+    resources?: {
+        requests?: {
+            cpu?: string;
+            memory?: string;
+        };
+        limits?: {
+            cpu?: string;
+            memory?: string;
+        };
+    };
+}, {}>;
+export type CaddyIngressConfig = typeof CaddyIngressConfigSchema.infer;
+/**
+ * Caddy ingress status. `ready` is a direct Deployment-proxy comparison (multi-resource non-Helm
+ * composition → no `Cel.expr`/conditions array): `status.readyReplicas >= spec.replicas`. The Deployment
+ * is pinned to a single replica (see the composition), so this reads as "the one desired pod is ready" —
+ * it cannot report ready before that pod exists. It resolves in BOTH kro CEL and direct-mode hydration
+ * (spec refs hydrate via the LIVE_SPEC_KEY core change). `version` is the deploy-time version label
+ * (static). No `phase` field: a `ready ? 'Ready' : 'Installing'` ternary referencing a resource ref
+ * currently serializes to a malformed CEL (`caddyDeployment.schema.spec.replicas`) — a typekro analyzer
+ * bug to fix separately; `ready` carries the signal anyway.
+ */
+export declare const CaddyIngressStatusSchema: import("arktype/internal/variants/object.ts").ObjectType<{
+    ready: boolean;
+    version?: string;
+}, {}>;
+export type CaddyIngressStatus = typeof CaddyIngressStatusSchema.infer;
+/** A single host→upstream route, for the `renderCaddyfile()` helper (NOT a composition spec field). */
+export interface CaddyRoute {
+    /** The hostname Caddy serves, e.g. `dagster-dev.acme.internal`. */
+    host: string;
+    /** The upstream `host:port` Caddy reverse-proxies to, e.g. `dagster.dagster-platform-dev.svc:80`. */
+    upstream: string;
+}
+/** Options for `renderCaddyfile()`. */
+export interface RenderCaddyfileOptions {
+    /** TLS mode per site. `internal` (default) uses Caddy's local CA; `off` serves plain HTTP. */
+    tls?: 'internal' | 'off';
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/factories/caddy/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/factories/caddy/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAoBH;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;MAsBnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,OAAO,wBAAwB,CAAC,KAAK,CAAC;AAEvE;;;;;;;;;GASG;AACH,eAAO,MAAM,wBAAwB;;;MAGnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,OAAO,wBAAwB,CAAC,KAAK,CAAC;AAEvE,uGAAuG;AACvG,MAAM,WAAW,UAAU;IACzB,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,qGAAqG;IACrG,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,uCAAuC;AACvC,MAAM,WAAW,sBAAsB;IACrC,8FAA8F;IAC9F,GAAG,CAAC,EAAE,UAAU,GAAG,KAAK,CAAC;CAC1B"}

package/dist/factories/caddy/types.js

@@ -0,0 +1,74 @@
+/**
+ * Caddy Ingress Types
+ *
+ * Caddy here is a CONFIG-DRIVEN reverse proxy (not the Caddy ingress-controller, and not a Helm
+ * bootstrap): the composition runs the official `caddy` image with a Caddyfile we supply, and emits a
+ * ConfigMap (Caddyfile) + Deployment + Service + PVC. Caddy's built-in `tls internal` issues certs from a
+ * local CA (no cert-manager), so the PVC persists `/data` (the CA root) across restarts.
+ *
+ * KRO-safety note: the Caddyfile is supplied as a STRING (`caddyfile`), not derived from a structured
+ * `routes` array inside the composition. A `routes` array would be a graph proxy in KRO mode and cannot be
+ * `.map()`-ed into a string (see integration-skill rules 32/48). Use the exported `renderCaddyfile()`
+ * helper to build the string from routes in concrete (consumer/direct) contexts, then pass it here.
+ */
+import { type } from 'arktype';
+/** Container resource requests/limits — shared shape. */
+const resourceRequirementsSchemaShape = {
+    'requests?': { 'cpu?': 'string', 'memory?': 'string' },
+    'limits?': { 'cpu?': 'string', 'memory?': 'string' },
+};
+/**
+ * Sizing for the PVC backing Caddy's `/data` (the `tls internal` CA root + issued certs). The PVC is
+ * always created — persisting the CA root is required so it's stable across restarts; an ephemeral/emptyDir
+ * mode isn't offered because a conditional volume can't be expressed safely in KRO (compound includeWhen).
+ */
+const persistenceSchemaShape = {
+    'size?': 'string',
+    'storageClass?': 'string',
+};
+/**
+ * Caddy ingress config. `caddyfile` is the raw Caddyfile content (the routing + TLS config), supplied as
+ * a string so it passes through unchanged in both direct and KRO modes.
+ *
+ * Undeclared keys are REJECTED (`'+': 'reject'`) so misconfig fails loudly rather than being silently
+ * dropped — notably `replicaCount`: this composition is single-replica by design (the `tls internal` CA
+ * lives in a RWO PVC one pod owns), so a replica knob would invite a broken multi-pod-shares-RWO setup.
+ */
+export const CaddyIngressConfigSchema = type({
+    '+': 'reject',
+    name: 'string',
+    'namespace?': 'string',
+    /** Full Caddyfile content. Build it from routes via `renderCaddyfile()` when you have concrete routes. */
+    caddyfile: 'string',
+    /** Full container image ref INCLUDING the tag (default `caddy:2.11.2`). */
+    'image?': 'string',
+    /**
+     * Version label/status hint — surfaced as `app.kubernetes.io/version` + `status.version` (default
+     * `2.11.2`). Cosmetic only; the running tag comes from `image`. Set it to match your `image` tag.
+     */
+    'version?': 'string',
+    /** HTTP listener port on the Service + container (default 80). */
+    'httpPort?': 'number',
+    /** HTTPS listener port on the Service + container (default 443). */
+    'httpsPort?': 'number',
+    /** Service type (default ClusterIP — reached via the access tunnel; no public LB). */
+    'serviceType?': '"ClusterIP" | "NodePort" | "LoadBalancer"',
+    /** Sizing for the always-created `/data` PVC that holds the `tls internal` CA root (default 1Gi). */
+    'persistence?': persistenceSchemaShape,
+    'resources?': resourceRequirementsSchemaShape,
+});
+/**
+ * Caddy ingress status. `ready` is a direct Deployment-proxy comparison (multi-resource non-Helm
+ * composition → no `Cel.expr`/conditions array): `status.readyReplicas >= spec.replicas`. The Deployment
+ * is pinned to a single replica (see the composition), so this reads as "the one desired pod is ready" —
+ * it cannot report ready before that pod exists. It resolves in BOTH kro CEL and direct-mode hydration
+ * (spec refs hydrate via the LIVE_SPEC_KEY core change). `version` is the deploy-time version label
+ * (static). No `phase` field: a `ready ? 'Ready' : 'Installing'` ternary referencing a resource ref
+ * currently serializes to a malformed CEL (`caddyDeployment.schema.spec.replicas`) — a typekro analyzer
+ * bug to fix separately; `ready` carries the signal anyway.
+ */
+export const CaddyIngressStatusSchema = type({
+    ready: 'boolean',
+    'version?': 'string',
+});
+//# sourceMappingURL=types.js.map

package/dist/factories/caddy/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/factories/caddy/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAE/B,yDAAyD;AACzD,MAAM,+BAA+B,GAAG;IACtC,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE;IACtD,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE;CAC5C,CAAC;AAEX;;;;GAIG;AACH,MAAM,sBAAsB,GAAG;IAC7B,OAAO,EAAE,QAAQ;IACjB,eAAe,EAAE,QAAQ;CACjB,CAAC;AAEX;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC;IAC3C,GAAG,EAAE,QAAQ;IACb,IAAI,EAAE,QAAQ;IACd,YAAY,EAAE,QAAQ;IACtB,0GAA0G;IAC1G,SAAS,EAAE,QAAQ;IACnB,2EAA2E;IAC3E,QAAQ,EAAE,QAAQ;IAClB;;;OAGG;IACH,UAAU,EAAE,QAAQ;IACpB,kEAAkE;IAClE,WAAW,EAAE,QAAQ;IACrB,oEAAoE;IACpE,YAAY,EAAE,QAAQ;IACtB,sFAAsF;IACtF,cAAc,EAAE,2CAA2C;IAC3D,qGAAqG;IACrG,cAAc,EAAE,sBAAsB;IACtC,YAAY,EAAE,+BAA+B;CAC9C,CAAC,CAAC;AAGH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC;IAC3C,KAAK,EAAE,SAAS;IAChB,UAAU,EAAE,QAAQ;CACrB,CAAC,CAAC"}

package/dist/factories/caddy/utils/caddyfile.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Caddyfile rendering helper.
+ *
+ * Pure function: given concrete routes, produce a Caddyfile string. Kept OUT of the composition so the
+ * composition stays a string passthrough (KRO-safe). Consumers with a concrete route list (e.g. a
+ * generator that knows its services) call this, then pass the result as `caddyfile`.
+ */
+import type { CaddyRoute, RenderCaddyfileOptions } from '../types.js';
+/**
+ * Render a Caddyfile from host→upstream routes.
+ *
+ * - `tls: 'internal'` (default): each site uses Caddy's built-in local CA (`tls internal`) — valid certs
+ *   for any name (incl. private TLDs like `.internal`), no ACME/cert-manager. Trust the root once.
+ * - `tls: 'off'`: sites are addressed as `http://<host>` so Caddy serves plain HTTP (no auto-HTTPS).
+ *
+ * @example
+ * renderCaddyfile([{ host: 'dagster-dev.acme.internal', upstream: 'dagster.dagster-platform-dev.svc:80' }])
+ */
+export declare function renderCaddyfile(routes: readonly CaddyRoute[], options?: RenderCaddyfileOptions): string;
+//# sourceMappingURL=caddyfile.d.ts.map

package/dist/factories/caddy/utils/caddyfile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"caddyfile.d.ts","sourceRoot":"","sources":["../../../../src/factories/caddy/utils/caddyfile.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAEtE;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,SAAS,UAAU,EAAE,EAC7B,OAAO,GAAE,sBAA2B,GACnC,MAAM,CAWR"}

package/dist/factories/caddy/utils/caddyfile.js

@@ -0,0 +1,31 @@
+/**
+ * Caddyfile rendering helper.
+ *
+ * Pure function: given concrete routes, produce a Caddyfile string. Kept OUT of the composition so the
+ * composition stays a string passthrough (KRO-safe). Consumers with a concrete route list (e.g. a
+ * generator that knows its services) call this, then pass the result as `caddyfile`.
+ */
+/**
+ * Render a Caddyfile from host→upstream routes.
+ *
+ * - `tls: 'internal'` (default): each site uses Caddy's built-in local CA (`tls internal`) — valid certs
+ *   for any name (incl. private TLDs like `.internal`), no ACME/cert-manager. Trust the root once.
+ * - `tls: 'off'`: sites are addressed as `http://<host>` so Caddy serves plain HTTP (no auto-HTTPS).
+ *
+ * @example
+ * renderCaddyfile([{ host: 'dagster-dev.acme.internal', upstream: 'dagster.dagster-platform-dev.svc:80' }])
+ */
+export function renderCaddyfile(routes, options = {}) {
+    const tls = options.tls ?? 'internal';
+    const blocks = routes.map((route) => {
+        const address = tls === 'off' ? `http://${route.host}` : route.host;
+        const lines = [`${address} {`];
+        if (tls === 'internal')
+            lines.push('\ttls internal');
+        lines.push(`\treverse_proxy ${route.upstream}`, '}');
+        return lines.join('\n');
+    });
+    // Trailing newline keeps the file POSIX-clean and diff-friendly.
+    return `${blocks.join('\n\n')}\n`;
+}
+//# sourceMappingURL=caddyfile.js.map

package/dist/factories/caddy/utils/caddyfile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"caddyfile.js","sourceRoot":"","sources":["../../../../src/factories/caddy/utils/caddyfile.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAC7B,MAA6B,EAC7B,UAAkC,EAAE;IAEpC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAClC,MAAM,OAAO,GAAG,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACpE,MAAM,KAAK,GAAG,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;QAC/B,IAAI,GAAG,KAAK,UAAU;YAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,mBAAmB,KAAK,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;QACrD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IACH,iEAAiE;IACjE,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;AACpC,CAAC"}

package/dist/factories/caddy/utils/index.d.ts

@@ -0,0 +1,2 @@
+export { renderCaddyfile } from './caddyfile.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/factories/caddy/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/factories/caddy/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/factories/caddy/utils/index.js

@@ -0,0 +1,2 @@
+export { renderCaddyfile } from './caddyfile.js';
+//# sourceMappingURL=index.js.map

package/dist/factories/caddy/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/factories/caddy/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "typekro",
-  "version": "0.15.5",
+  "version": "0.16.1",
   "description": "A control plane aware framework for orchestrating kubernetes resources like a programmer.",
   "type": "module",
   "repository": {
@@ -66,6 +66,10 @@
       "import": "./dist/factories/dagster/index.js",
       "types": "./dist/factories/dagster/index.d.ts"
     },
+    "./caddy": {
+      "import": "./dist/factories/caddy/index.js",
+      "types": "./dist/factories/caddy/index.d.ts"
+    },
     "./pebble": {
       "import": "./dist/factories/pebble/index.js",
       "types": "./dist/factories/pebble/index.d.ts"