typekro 0.28.0 → 0.29.0

package/dist/core/planning/direct-runtime-adapter.d.ts

@@ -0,0 +1,39 @@
+import { TypeKroError } from '../errors.js';
+import type { DeploymentResourceGraph } from '../types/deployment.js';
+import type { KubernetesResource, ReadinessEvaluator } from '../types/kubernetes.js';
+import type { DirectKubernetesArtifactPlan, DirectKubernetesArtifactResource } from './artifacts.js';
+import { type PlanMaterializationBindings } from './materialization.js';
+export interface DirectArtifactRuntimeAdapterOptions extends PlanMaterializationBindings {
+    readonly instanceName: string;
+    /** Compatibility name used by the established direct deployment graph. */
+    readonly graphName?: string;
+    /**
+     * Runtime graph-node aliases keyed by canonical artifact id. These preserve
+     * existing deployment-state identities while artifact ids remain the
+     * host-independent semantic authority.
+     */
+    readonly graphIdsByArtifactId?: Readonly<Record<string, string>>;
+    /** Include compiler-generated prerequisite/singleton operations in this graph. */
+    readonly includeSupportingArtifacts?: boolean;
+    /**
+     * Optional same-process resources keyed by semantic node id. Their function-valued
+     * readiness metadata is copied while factories migrate to serializable strategies.
+     */
+    readonly runtimeResources?: Readonly<Record<string, KubernetesResource>>;
+    /** Named runtime evaluator bindings required by non-portable readiness strategies. */
+    readonly readinessEvaluators?: Readonly<Record<string, ReadinessEvaluator<unknown>>>;
+    /** Resolve a registered portable readiness strategy by its stable identity. */
+    readonly resolveReadinessStrategy?: (strategy: Extract<NonNullable<DirectKubernetesArtifactResource['readiness']['strategy']>, {
+        kind: 'registered';
+    }>) => ReadinessEvaluator<unknown> | undefined;
+}
+export declare class DirectArtifactRuntimeAdapterError extends TypeKroError {
+    constructor(message: string, details?: Record<string, unknown>);
+}
+export declare function materializeDirectArtifactManifest(artifact: DirectKubernetesArtifactResource, options: DirectArtifactRuntimeAdapterOptions, deployedId: string, logicalId?: string): KubernetesResource;
+/**
+ * Adapt a host-independent direct artifact plan into the graph consumed by the
+ * established direct deployment engine. No Kubernetes calls occur here.
+ */
+export declare function directArtifactPlanToResourceGraph(plan: DirectKubernetesArtifactPlan, options: DirectArtifactRuntimeAdapterOptions): DeploymentResourceGraph;
+//# sourceMappingURL=direct-runtime-adapter.d.ts.map

package/dist/core/planning/direct-runtime-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"direct-runtime-adapter.d.ts","sourceRoot":"","sources":["../../../src/core/planning/direct-runtime-adapter.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAO5C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,KAAK,EAGV,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EACV,4BAA4B,EAC5B,gCAAgC,EACjC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAGL,KAAK,2BAA2B,EACjC,MAAM,sBAAsB,CAAC;AAE9B,MAAM,WAAW,mCAAoC,SAAQ,2BAA2B;IACtF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACjE,kFAAkF;IAClF,QAAQ,CAAC,0BAA0B,CAAC,EAAE,OAAO,CAAC;IAC9C;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACzE,sFAAsF;IACtF,QAAQ,CAAC,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACrF,+EAA+E;IAC/E,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAClC,QAAQ,EAAE,OAAO,CACf,WAAW,CAAC,gCAAgC,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,CAAC,EACtE;QAAE,IAAI,EAAE,YAAY,CAAA;KAAE,CACvB,KACE,kBAAkB,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC;CAC9C;AAED,qBAAa,iCAAkC,SAAQ,YAAY;gBACrD,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;CAInE;AA8ED,wBAAgB,iCAAiC,CAC/C,QAAQ,EAAE,gCAAgC,EAC1C,OAAO,EAAE,mCAAmC,EAC5C,UAAU,EAAE,MAAM,EAClB,SAAS,SAAuC,GAC/C,kBAAkB,CA4GpB;AAED;;;GAGG;AACH,wBAAgB,iCAAiC,CAC/C,IAAI,EAAE,4BAA4B,EAClC,OAAO,EAAE,mCAAmC,GAC3C,uBAAuB,CAqKzB"}

package/dist/core/planning/direct-runtime-adapter.js

@@ -0,0 +1,238 @@
+import { toCamelCase } from '../../utils/string.js';
+import { DependencyGraph } from '../dependencies/graph.js';
+import { TypeKroError } from '../errors.js';
+import { copyResourceMetadata, setMetadataField, setReadinessEvaluator, setResourceId, } from '../metadata/index.js';
+import { evaluatePlanActivation, materializePlanValue, } from './materialization.js';
+export class DirectArtifactRuntimeAdapterError extends TypeKroError {
+    constructor(message, details = {}) {
+        super(message, 'DIRECT_ARTIFACT_ADAPTER_FAILED', details);
+        this.name = 'DirectArtifactRuntimeAdapterError';
+    }
+}
+function isAppliedArtifact(artifact) {
+    return (artifact.role === 'application-resource' ||
+        artifact.role === 'singleton-owner' ||
+        artifact.role === 'direct-prerequisite');
+}
+function isArtifactActive(artifact, options) {
+    return artifact.readiness.activation.every((condition, index) => {
+        const active = evaluatePlanActivation(condition, options, `$.resources.${artifact.id}.readiness.activation[${index}]`);
+        return active !== false;
+    });
+}
+function expandArtifactBindings(artifact, options) {
+    let expanded = [{ bindings: options, coordinates: {} }];
+    for (const [dimensionIndex, dimension] of (artifact.iteration ?? []).entries()) {
+        expanded = expanded.flatMap((state) => {
+            const collection = materializePlanValue(dimension.collection, state.bindings, `$.resources.${artifact.id}.iteration[${dimensionIndex}].collection`);
+            if (!Array.isArray(collection)) {
+                throw new DirectArtifactRuntimeAdapterError(`Iteration ${dimension.variable} on ${artifact.id} did not materialize to an array.`, {
+                    artifactId: artifact.id,
+                    dimension: dimension.variable,
+                    resultType: collection === null ? 'null' : typeof collection,
+                });
+            }
+            return collection.map((item, itemIndex) => ({
+                bindings: {
+                    ...state.bindings,
+                    locals: { ...(state.bindings.locals ?? {}), [dimension.variable]: item },
+                    iterationItems: {
+                        ...(state.bindings.iterationItems ?? {}),
+                        [dimension.itemPath]: item,
+                    },
+                },
+                coordinates: { ...state.coordinates, [dimension.itemPath]: itemIndex },
+            }));
+        });
+    }
+    return expanded;
+}
+export function materializeDirectArtifactManifest(artifact, options, deployedId, logicalId = artifact.sourceNodeId ?? artifact.id) {
+    if (!artifact.desired) {
+        throw new DirectArtifactRuntimeAdapterError(`Applied artifact ${artifact.id} has no desired Kubernetes manifest.`, { artifactId: artifact.id, role: artifact.role });
+    }
+    const value = materializePlanValue(artifact.desired, options, `$.resources.${artifact.id}.desired`);
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw new DirectArtifactRuntimeAdapterError(`Applied artifact ${artifact.id} did not materialize to a Kubernetes object.`, { artifactId: artifact.id });
+    }
+    const manifest = { ...value, id: deployedId };
+    // Template overrides compensate for JavaScript branches that must remain
+    // symbolic in a KRO template. Direct planning executes with a concrete spec,
+    // so `desired` already contains the selected branch and is authoritative.
+    if (typeof manifest.apiVersion !== 'string' ||
+        typeof manifest.kind !== 'string' ||
+        !manifest.metadata ||
+        typeof manifest.metadata.name !== 'string') {
+        throw new DirectArtifactRuntimeAdapterError(`Applied artifact ${artifact.id} is missing Kubernetes identity fields.`, { artifactId: artifact.id });
+    }
+    const runtimeResource = options.runtimeResources?.[artifact.sourceNodeId ?? artifact.id];
+    if (runtimeResource) {
+        copyResourceMetadata(runtimeResource, manifest, {
+            exclude: ['readinessEvaluator', 'includeWhen', 'readyWhen', 'forEach', 'templateOverrides'],
+        });
+    }
+    setResourceId(manifest, logicalId);
+    if (artifact.identity?.scope)
+        setMetadataField(manifest, 'scope', artifact.identity.scope);
+    if (isAppliedArtifact(artifact))
+        setMetadataField(manifest, 'applyPolicy', artifact.apply);
+    const readinessStrategy = artifact.readiness.strategy;
+    if (readinessStrategy?.kind === 'runtime-binding') {
+        const evaluator = options.readinessEvaluators?.[readinessStrategy.binding];
+        if (!evaluator) {
+            throw new DirectArtifactRuntimeAdapterError(`Readiness binding ${readinessStrategy.binding} is not materialized.`, { artifactId: artifact.id, binding: readinessStrategy.binding });
+        }
+        setReadinessEvaluator(manifest, evaluator);
+    }
+    else if (readinessStrategy?.kind === 'registered') {
+        const evaluator = options.resolveReadinessStrategy?.(readinessStrategy);
+        if (!evaluator) {
+            throw new DirectArtifactRuntimeAdapterError(`Registered readiness strategy ${readinessStrategy.id}@${readinessStrategy.revision} is unavailable.`, { artifactId: artifact.id, strategy: readinessStrategy.id });
+        }
+        setReadinessEvaluator(manifest, evaluator);
+    }
+    if (artifact.readiness.activation.length > 0) {
+        const runtimeActivation = artifact.readiness.activation.flatMap((condition, index) => {
+            const active = evaluatePlanActivation(condition, options, `$.resources.${artifact.id}.readiness.activation[${index}]`);
+            return active === undefined
+                ? [
+                    materializePlanValue(condition, options, `$.resources.${artifact.id}.readiness.activation[${index}]`),
+                ]
+                : [];
+        });
+        if (runtimeActivation.length > 0) {
+            setMetadataField(manifest, 'includeWhen', runtimeActivation);
+        }
+    }
+    if (artifact.readiness.readyWhen.length > 0) {
+        setMetadataField(manifest, 'readyWhen', artifact.readiness.readyWhen.map((condition, index) => materializePlanValue(condition, options, `$.resources.${artifact.id}.readiness.readyWhen[${index}]`)));
+    }
+    if (artifact.lifecycle.instancing.kind === 'per-scope') {
+        const scopeKey = materializePlanValue(artifact.lifecycle.instancing.key, options, `$.resources.${artifact.id}.lifecycle.instancing.key`);
+        if (typeof scopeKey === 'string' && scopeKey.length > 0) {
+            setMetadataField(manifest, 'scopes', scopeKey.split('|').filter(Boolean));
+        }
+    }
+    return manifest;
+}
+/**
+ * Adapt a host-independent direct artifact plan into the graph consumed by the
+ * established direct deployment engine. No Kubernetes calls occur here.
+ */
+export function directArtifactPlanToResourceGraph(plan, options) {
+    if (plan.target !== 'direct') {
+        throw new DirectArtifactRuntimeAdapterError(`Expected a direct artifact plan.`, {
+            target: Reflect.get(plan, 'target'),
+        });
+    }
+    if (plan.diagnostics.some((diagnostic) => diagnostic.severity === 'error')) {
+        throw new DirectArtifactRuntimeAdapterError(`Direct artifact plan contains compilation errors.`, { diagnostics: plan.diagnostics });
+    }
+    const dependencyGraph = new DependencyGraph();
+    const resources = [];
+    const externalReferences = [];
+    const instancesByArtifactId = new Map();
+    const includedArtifacts = plan.resources.filter((artifact) => (isAppliedArtifact(artifact) || artifact.role === 'external-reference') &&
+        (options.includeSupportingArtifacts !== false ||
+            artifact.role === 'application-resource' ||
+            artifact.role === 'external-reference'));
+    for (const artifact of includedArtifacts) {
+        const baseLogicalId = artifact.sourceNodeId ?? artifact.id;
+        const expanded = expandArtifactBindings(artifact, options)
+            .filter((state) => isArtifactActive(artifact, state.bindings))
+            .map((state, ordinal) => {
+            const suffix = ordinal === 0 ? '' : `-${ordinal}`;
+            const logicalId = `${baseLogicalId}${suffix}`;
+            const configuredGraphId = ordinal === 0 ? options.graphIdsByArtifactId?.[artifact.id] : undefined;
+            const graphId = configuredGraphId ??
+                toCamelCase(`${options.instanceName}-${artifact.role === 'external-reference' ? 'external' : 'resource'}-${artifact.id}${suffix}`);
+            return { ...state, artifact, graphId, logicalId };
+        });
+        if (instancesByArtifactId.has(artifact.id)) {
+            throw new DirectArtifactRuntimeAdapterError(`Duplicate artifact id ${artifact.id}.`, {
+                artifactId: artifact.id,
+            });
+        }
+        instancesByArtifactId.set(artifact.id, expanded);
+    }
+    const matchingProducer = (consumer, producers) => {
+        if (producers.length === 1)
+            return producers[0];
+        const matches = producers.filter((producer) => {
+            const commonPaths = Object.keys(producer.coordinates).filter((path) => Object.hasOwn(consumer.coordinates, path));
+            return (commonPaths.length > 0 &&
+                commonPaths.every((path) => producer.coordinates[path] === consumer.coordinates[path]));
+        });
+        return matches.length === 1 ? matches[0] : undefined;
+    };
+    const bindingsFor = (instance) => ({
+        ...instance.bindings,
+        resourceIds: Object.fromEntries([...instancesByArtifactId.entries()].flatMap(([artifactId, producers]) => {
+            const producer = matchingProducer(instance, producers);
+            return producer ? [[artifactId, producer.logicalId]] : [];
+        })),
+    });
+    for (const instance of [...instancesByArtifactId.values()].flat()) {
+        const { artifact, graphId, logicalId } = instance;
+        if (!isAppliedArtifact(artifact))
+            continue;
+        const manifest = materializeDirectArtifactManifest(artifact, bindingsFor(instance), graphId, logicalId);
+        const deployable = manifest;
+        dependencyGraph.addNode(graphId, deployable);
+        resources.push({ id: graphId, manifest: deployable });
+    }
+    for (const instance of [...instancesByArtifactId.values()].flat()) {
+        const { artifact, graphId, logicalId } = instance;
+        if (artifact.role !== 'external-reference')
+            continue;
+        const manifest = materializeDirectArtifactManifest(artifact, bindingsFor(instance), graphId, logicalId);
+        externalReferences.push({
+            id: logicalId,
+            manifest: manifest,
+        });
+    }
+    const pairedInstances = (prerequisites, dependents) => {
+        const pairs = [];
+        for (const dependent of dependents) {
+            const commonPaths = new Set(prerequisites.flatMap((prerequisite) => Object.keys(prerequisite.coordinates).filter((path) => Object.hasOwn(dependent.coordinates, path))));
+            const matches = commonPaths.size === 0
+                ? prerequisites
+                : prerequisites.filter((prerequisite) => [...commonPaths].every((path) => prerequisite.coordinates[path] === dependent.coordinates[path]));
+            for (const prerequisite of matches)
+                pairs.push([prerequisite, dependent]);
+        }
+        return pairs;
+    };
+    for (const edge of plan.edges) {
+        let prerequisiteArtifactId;
+        let dependentArtifactId;
+        if (edge.kind === 'output') {
+            prerequisiteArtifactId = edge.producer;
+            dependentArtifactId = edge.consumer;
+        }
+        else if (edge.kind === 'existence' || edge.kind === 'ready') {
+            prerequisiteArtifactId = edge.prerequisite;
+            dependentArtifactId = edge.dependent;
+        }
+        else if (edge.kind === 'ownership') {
+            prerequisiteArtifactId = edge.owner;
+            dependentArtifactId = edge.child;
+        }
+        if (!prerequisiteArtifactId || !dependentArtifactId)
+            continue;
+        const prerequisites = (instancesByArtifactId.get(prerequisiteArtifactId) ?? []).filter((instance) => isAppliedArtifact(instance.artifact));
+        const dependents = (instancesByArtifactId.get(dependentArtifactId) ?? []).filter((instance) => isAppliedArtifact(instance.artifact));
+        for (const [prerequisite, dependent] of pairedInstances(prerequisites, dependents)) {
+            if (prerequisite.graphId !== dependent.graphId) {
+                dependencyGraph.addEdge(dependent.graphId, prerequisite.graphId);
+            }
+        }
+    }
+    return {
+        name: options.graphName ?? `${options.instanceName}-direct-artifacts`,
+        resources,
+        ...(externalReferences.length > 0 ? { externalReferences } : {}),
+        dependencyGraph,
+    };
+}
+//# sourceMappingURL=direct-runtime-adapter.js.map

package/dist/core/planning/direct-runtime-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"direct-runtime-adapter.js","sourceRoot":"","sources":["../../../src/core/planning/direct-runtime-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,qBAAqB,EACrB,aAAa,GACd,MAAM,sBAAsB,CAAC;AAa9B,OAAO,EACL,sBAAsB,EACtB,oBAAoB,GAErB,MAAM,sBAAsB,CAAC;AA8B9B,MAAM,OAAO,iCAAkC,SAAQ,YAAY;IACjE,YAAY,OAAe,EAAE,UAAmC,EAAE;QAChE,KAAK,CAAC,OAAO,EAAE,gCAAgC,EAAE,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,GAAG,mCAAmC,CAAC;IAClD,CAAC;CACF;AAED,SAAS,iBAAiB,CACxB,QAA0C;IAK1C,OAAO,CACL,QAAQ,CAAC,IAAI,KAAK,sBAAsB;QACxC,QAAQ,CAAC,IAAI,KAAK,iBAAiB;QACnC,QAAQ,CAAC,IAAI,KAAK,qBAAqB,CACxC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,QAA0C,EAC1C,OAA4C;IAE5C,OAAO,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;QAC9D,MAAM,MAAM,GAAG,sBAAsB,CACnC,SAAS,EACT,OAAO,EACP,eAAe,QAAQ,CAAC,EAAE,yBAAyB,KAAK,GAAG,CAC5D,CAAC;QACF,OAAO,MAAM,KAAK,KAAK,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAaD,SAAS,sBAAsB,CAC7B,QAA0C,EAC1C,OAA4C;IAE5C,IAAI,QAAQ,GAA8B,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;IACnF,KAAK,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/E,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;YACpC,MAAM,UAAU,GAAG,oBAAoB,CACrC,SAAS,CAAC,UAAU,EACpB,KAAK,CAAC,QAAQ,EACd,eAAe,QAAQ,CAAC,EAAE,cAAc,cAAc,cAAc,CACrE,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,iCAAiC,CACzC,aAAa,SAAS,CAAC,QAAQ,OAAO,QAAQ,CAAC,EAAE,mCAAmC,EACpF;oBACE,UAAU,EAAE,QAAQ,CAAC,EAAE;oBACvB,SAAS,EAAE,SAAS,CAAC,QAAQ;oBAC7B,UAAU,EAAE,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,UAAU;iBAC7D,CACF,CAAC;YACJ,CAAC;YACD,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;gBAC1C,QAAQ,EAAE;oBACR,GAAG,KAAK,CAAC,QAAQ;oBACjB,MAAM,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE;oBACxE,cAAc,EAAE;wBACd,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,IAAI,EAAE,CAAC;wBACxC,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI;qBAC3B;iBACF;gBACD,WAAW,EAAE,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE;aACvE,CAAC,CAAC,CAAC;QACN,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,QAA0C,EAC1C,OAA4C,EAC5C,UAAkB,EAClB,SAAS,GAAG,QAAQ,CAAC,YAAY,IAAI,QAAQ,CAAC,EAAE;IAEhD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,IAAI,iCAAiC,CACzC,oBAAoB,QAAQ,CAAC,EAAE,sCAAsC,EACrE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CACjD,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,oBAAoB,CAChC,QAAQ,CAAC,OAAO,EAChB,OAAO,EACP,eAAe,QAAQ,CAAC,EAAE,UAAU,CACrC,CAAC;IACF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,iCAAiC,CACzC,oBAAoB,QAAQ,CAAC,EAAE,8CAA8C,EAC7E,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,CAC5B,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,EAAE,GAAI,KAA4B,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC;IACtE,yEAAyE;IACzE,6EAA6E;IAC7E,0EAA0E;IAC1E,IACE,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ;QACvC,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;QACjC,CAAC,QAAQ,CAAC,QAAQ;QAClB,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAC1C,CAAC;QACD,MAAM,IAAI,iCAAiC,CACzC,oBAAoB,QAAQ,CAAC,EAAE,yCAAyC,EACxE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,CAC5B,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,QAAQ,CAAC,YAAY,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAC;IACzF,IAAI,eAAe,EAAE,CAAC;QACpB,oBAAoB,CAAC,eAAe,EAAE,QAAQ,EAAE;YAC9C,OAAO,EAAE,CAAC,oBAAoB,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE,mBAAmB,CAAC;SAC5F,CAAC,CAAC;IACL,CAAC;IACD,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACnC,IAAI,QAAQ,CAAC,QAAQ,EAAE,KAAK;QAAE,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC3F,IAAI,iBAAiB,CAAC,QAAQ,CAAC;QAAE,gBAAgB,CAAC,QAAQ,EAAE,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC3F,MAAM,iBAAiB,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC;IACtD,IAAI,iBAAiB,EAAE,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAClD,MAAM,SAAS,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC3E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,iCAAiC,CACzC,qBAAqB,iBAAiB,CAAC,OAAO,uBAAuB,EACrE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,iBAAiB,CAAC,OAAO,EAAE,CAChE,CAAC;QACJ,CAAC;QACD,qBAAqB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC7C,CAAC;SAAM,IAAI,iBAAiB,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;QACpD,MAAM,SAAS,GAAG,OAAO,CAAC,wBAAwB,EAAE,CAAC,iBAAiB,CAAC,CAAC;QACxE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,iCAAiC,CACzC,iCAAiC,iBAAiB,CAAC,EAAE,IAAI,iBAAiB,CAAC,QAAQ,kBAAkB,EACrG,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAC5D,CAAC;QACJ,CAAC;QACD,qBAAqB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7C,MAAM,iBAAiB,GAAG,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;YACnF,MAAM,MAAM,GAAG,sBAAsB,CACnC,SAAS,EACT,OAAO,EACP,eAAe,QAAQ,CAAC,EAAE,yBAAyB,KAAK,GAAG,CAC5D,CAAC;YACF,OAAO,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAC;oBACE,oBAAoB,CAClB,SAAS,EACT,OAAO,EACP,eAAe,QAAQ,CAAC,EAAE,yBAAyB,KAAK,GAAG,CAC5D;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;QACH,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,gBAAgB,CAAC,QAAQ,EAAE,aAAa,EAAE,iBAAiB,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,gBAAgB,CACd,QAAQ,EACR,WAAW,EACX,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CACpD,oBAAoB,CAClB,SAAS,EACT,OAAO,EACP,eAAe,QAAQ,CAAC,EAAE,wBAAwB,KAAK,GAAG,CAC3D,CACF,CACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACvD,MAAM,QAAQ,GAAG,oBAAoB,CACnC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,EACjC,OAAO,EACP,eAAe,QAAQ,CAAC,EAAE,2BAA2B,CACtD,CAAC;QACF,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxD,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iCAAiC,CAC/C,IAAkC,EAClC,OAA4C;IAE5C,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,iCAAiC,CAAC,kCAAkC,EAAE;YAC9E,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,KAAK,OAAO,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,iCAAiC,CACzC,mDAAmD,EACnD,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAClC,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IAC9C,MAAM,SAAS,GAAyC,EAAE,CAAC;IAC3D,MAAM,kBAAkB,GAA+D,EAAE,CAAC;IAC1F,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAsC,CAAC;IAC5E,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAC7C,CAAC,QAAQ,EAAE,EAAE,CACX,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,KAAK,oBAAoB,CAAC;QACvE,CAAC,OAAO,CAAC,0BAA0B,KAAK,KAAK;YAC3C,QAAQ,CAAC,IAAI,KAAK,sBAAsB;YACxC,QAAQ,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAC5C,CAAC;IACF,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,aAAa,GAAG,QAAQ,CAAC,YAAY,IAAI,QAAQ,CAAC,EAAE,CAAC;QAC3D,MAAM,QAAQ,GAAG,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC;aACvD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;aAC7D,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,EAA4B,EAAE;YAChD,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;YAClD,MAAM,SAAS,GAAG,GAAG,aAAa,GAAG,MAAM,EAAE,CAAC;YAC9C,MAAM,iBAAiB,GACrB,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,MAAM,OAAO,GACX,iBAAiB;gBACjB,WAAW,CACT,GAAG,OAAO,CAAC,YAAY,IAAI,QAAQ,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,IAAI,QAAQ,CAAC,EAAE,GAAG,MAAM,EAAE,CACtH,CAAC;YACJ,OAAO,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QACpD,CAAC,CAAC,CAAC;QACL,IAAI,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,iCAAiC,CAAC,yBAAyB,QAAQ,CAAC,EAAE,GAAG,EAAE;gBACnF,UAAU,EAAE,QAAQ,CAAC,EAAE;aACxB,CAAC,CAAC;QACL,CAAC;QACD,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,gBAAgB,GAAG,CACvB,QAAkC,EAClC,SAA8C,EACR,EAAE;QACxC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC5C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACpE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,CAC1C,CAAC;YACF,OAAO,CACL,WAAW,CAAC,MAAM,GAAG,CAAC;gBACtB,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CACvF,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,CAClB,QAAkC,EACG,EAAE,CAAC,CAAC;QACzC,GAAG,QAAQ,CAAC,QAAQ;QACpB,WAAW,EAAE,MAAM,CAAC,WAAW,CAC7B,CAAC,GAAG,qBAAqB,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,EAAE;YACvE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACvD,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,CAAC,CAAC,CACH;KACF,CAAC,CAAC;IAEH,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,qBAAqB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAClE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;QAClD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC;YAAE,SAAS;QAC3C,MAAM,QAAQ,GAAG,iCAAiC,CAChD,QAAQ,EACR,WAAW,CAAC,QAAQ,CAAC,EACrB,OAAO,EACP,SAAS,CACV,CAAC;QACF,MAAM,UAAU,GAAG,QAA6D,CAAC;QACjF,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC7C,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,qBAAqB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAClE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;QAClD,IAAI,QAAQ,CAAC,IAAI,KAAK,oBAAoB;YAAE,SAAS;QACrD,MAAM,QAAQ,GAAG,iCAAiC,CAChD,QAAQ,EACR,WAAW,CAAC,QAAQ,CAAC,EACrB,OAAO,EACP,SAAS,CACV,CAAC;QACF,kBAAkB,CAAC,IAAI,CAAC;YACtB,EAAE,EAAE,SAAS;YACb,QAAQ,EAAE,QAA6D;SACxE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,eAAe,GAAG,CACtB,aAAkD,EAClD,UAA+C,EAC+B,EAAE;QAChF,MAAM,KAAK,GAAyE,EAAE,CAAC;QACvF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,aAAa,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE,CACrC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACpD,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,CAC3C,CACF,CACF,CAAC;YACF,MAAM,OAAO,GACX,WAAW,CAAC,IAAI,KAAK,CAAC;gBACpB,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,EAAE,CACpC,CAAC,GAAG,WAAW,CAAC,CAAC,KAAK,CACpB,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CACzE,CACF,CAAC;YACR,KAAK,MAAM,YAAY,IAAI,OAAO;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,sBAA0C,CAAC;QAC/C,IAAI,mBAAuC,CAAC;QAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3B,sBAAsB,GAAG,IAAI,CAAC,QAAQ,CAAC;YACvC,mBAAmB,GAAG,IAAI,CAAC,QAAQ,CAAC;QACtC,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9D,sBAAsB,GAAG,IAAI,CAAC,YAAY,CAAC;YAC3C,mBAAmB,GAAG,IAAI,CAAC,SAAS,CAAC;QACvC,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACrC,sBAAsB,GAAG,IAAI,CAAC,KAAK,CAAC;YACpC,mBAAmB,GAAG,IAAI,CAAC,KAAK,CAAC;QACnC,CAAC;QACD,IAAI,CAAC,sBAAsB,IAAI,CAAC,mBAAmB;YAAE,SAAS;QAC9D,MAAM,aAAa,GAAG,CAAC,qBAAqB,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CACpF,CAAC,QAAQ,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CACnD,CAAC;QACF,MAAM,UAAU,GAAG,CAAC,qBAAqB,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC5F,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CACrC,CAAC;QACF,KAAK,MAAM,CAAC,YAAY,EAAE,SAAS,CAAC,IAAI,eAAe,CAAC,aAAa,EAAE,UAAU,CAAC,EAAE,CAAC;YACnF,IAAI,YAAY,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC;gBAC/C,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,SAAS,IAAI,GAAG,OAAO,CAAC,YAAY,mBAAmB;QACrE,SAAS;QACT,GAAG,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,eAAe;KAChB,CAAC;AACJ,CAAC"}

package/dist/core/planning/execution-record.d.ts

@@ -0,0 +1,21 @@
+import { TypeKroError } from '../errors.js';
+import { type DirectArtifactExecutionRecord, type DirectKubernetesArtifactPlan } from './artifacts.js';
+import { type PlanMaterializationBindings } from './materialization.js';
+export interface DirectArtifactExecutionMaterialization {
+    readonly record: DirectArtifactExecutionRecord;
+    /** Ephemeral values keyed by the binding identities stored in record. */
+    readonly sensitiveBindings: Readonly<Record<string, unknown>>;
+}
+export declare class DirectArtifactExecutionRecordError extends TypeKroError {
+    constructor(message: string, path?: string, details?: Record<string, unknown>);
+}
+/** Select and concretize one direct operation for a fan-out execution host. */
+export declare function createDirectArtifactExecutionRecord(plan: DirectKubernetesArtifactPlan, artifactId: string, bindings?: PlanMaterializationBindings): DirectArtifactExecutionRecord;
+/**
+ * Build a durable execution record plus its deliberately non-serialized secret envelope.
+ * Host adapters must map the envelope to their native sensitive-input mechanism.
+ */
+export declare function createDirectArtifactExecutionMaterialization(plan: DirectKubernetesArtifactPlan, artifactId: string, bindings?: PlanMaterializationBindings): DirectArtifactExecutionMaterialization;
+export declare function encodeDirectArtifactExecutionRecord(record: DirectArtifactExecutionRecord): string;
+export declare function decodeDirectArtifactExecutionRecord(encoded: string): DirectArtifactExecutionRecord;
+//# sourceMappingURL=execution-record.d.ts.map

package/dist/core/planning/execution-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-record.d.ts","sourceRoot":"","sources":["../../../src/core/planning/execution-record.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAG5C,OAAO,EAEL,KAAK,6BAA6B,EAClC,KAAK,4BAA4B,EAElC,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAwB,KAAK,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAM9F,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,yEAAyE;IACzE,QAAQ,CAAC,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC/D;AAED,qBAAa,kCAAmC,SAAQ,YAAY;gBACtD,OAAO,EAAE,MAAM,EAAE,IAAI,SAAM,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;CAI/E;AA4UD,+EAA+E;AAC/E,wBAAgB,mCAAmC,CACjD,IAAI,EAAE,4BAA4B,EAClC,UAAU,EAAE,MAAM,EAClB,QAAQ,GAAE,2BAAgC,GACzC,6BAA6B,CAE/B;AAED;;;GAGG;AACH,wBAAgB,4CAA4C,CAC1D,IAAI,EAAE,4BAA4B,EAClC,UAAU,EAAE,MAAM,EAClB,QAAQ,GAAE,2BAAgC,GACzC,sCAAsC,CAsBxC;AAED,wBAAgB,mCAAmC,CAAC,MAAM,EAAE,6BAA6B,GAAG,MAAM,CAEjG;AAED,wBAAgB,mCAAmC,CACjD,OAAO,EAAE,MAAM,GACd,6BAA6B,CAuE/B"}

package/dist/core/planning/execution-record.js

@@ -0,0 +1,304 @@
+import { TypeKroError } from '../errors.js';
+import { decodeDirectArtifactResource } from './artifact-codec.js';
+import { DIRECT_ARTIFACT_EXECUTION_RECORD_VERSION, } from './artifacts.js';
+import { canonicalDigest, canonicalStringify } from './canonical.js';
+import { materializePlanValue } from './materialization.js';
+import { lowerPlanValue } from './values.js';
+export class DirectArtifactExecutionRecordError extends TypeKroError {
+    constructor(message, path = '$', details = {}) {
+        super(message, 'DIRECT_ARTIFACT_EXECUTION_RECORD_INVALID', { path, ...details });
+        this.name = 'DirectArtifactExecutionRecordError';
+    }
+}
+function concretePlanValue(value, bindings, path, sensitiveBindings) {
+    if (value.kind === 'array') {
+        return {
+            ...value,
+            items: value.items.map((item, index) => concretePlanValue(item, bindings, `${path}[${index}]`, sensitiveBindings)),
+        };
+    }
+    if (value.kind === 'object') {
+        return {
+            ...value,
+            entries: value.entries.map((entry) => ({
+                ...entry,
+                value: concretePlanValue(entry.value, bindings, `${path}.${entry.key}`, sensitiveBindings),
+            })),
+        };
+    }
+    // Durable execution records preserve tainted symbolic structure. Resolving
+    // this wrapper here would place secret bytes in Alchemy state and in the
+    // execution digest. The host must supply the value through an explicit
+    // sensitive/spec binding when the operation is materialized.
+    if (value.kind === 'sensitive-value') {
+        return {
+            kind: 'sensitive-value',
+            value: concreteSensitiveSource(value.value, bindings, `${path}.value`, sensitiveBindings),
+        };
+    }
+    if (value.kind === 'sensitive-binding') {
+        if (Object.hasOwn(bindings.sensitive ?? {}, value.binding)) {
+            sensitiveBindings[value.binding] = bindings.sensitive?.[value.binding];
+        }
+        return value;
+    }
+    // Cross-provider outputs are resolved by the execution host. Keep them symbolic in the
+    // durable record when the caller is only constructing Alchemy declarations.
+    if (value.kind === 'artifact-output' &&
+        !Object.hasOwn(bindings.artifactOutputs?.[value.requirementId] ?? {}, value.output)) {
+        return value;
+    }
+    const materialized = materializePlanValue(value, bindings, path);
+    const lowered = lowerPlanValue(materialized);
+    const errors = lowered.diagnostics.filter((diagnostic) => diagnostic.severity === 'error');
+    if (errors.length > 0) {
+        throw new DirectArtifactExecutionRecordError(`Materialized artifact value could not be lowered canonically.`, path, { diagnostics: errors });
+    }
+    return lowered.value;
+}
+function concreteSensitiveSource(value, bindings, path, sensitiveBindings) {
+    switch (value.kind) {
+        case 'array':
+            return {
+                ...value,
+                items: value.items.map((item, index) => concreteSensitiveSource(item, bindings, `${path}[${index}]`, sensitiveBindings)),
+            };
+        case 'object':
+            return {
+                ...value,
+                entries: value.entries.map((entry) => ({
+                    ...entry,
+                    value: concreteSensitiveSource(entry.value, bindings, `${path}.${entry.key}`, sensitiveBindings),
+                })),
+            };
+        case 'sensitive-value':
+            return {
+                ...value,
+                value: concreteSensitiveSource(value.value, bindings, `${path}.value`, sensitiveBindings),
+            };
+        case 'reference':
+            if (value.source === 'resource' || bindings.spec === undefined)
+                return value;
+            break;
+        case 'expression':
+            if (value.expression.references.some((reference) => reference.source === 'resource') ||
+                (value.expression.references.length > 0 && bindings.spec === undefined)) {
+                return value;
+            }
+            break;
+        case 'template':
+            if (value.segments.some((segment) => (segment.kind === 'reference' && segment.source === 'resource') ||
+                (segment.kind === 'expression' &&
+                    segment.expression.references.some((reference) => reference.source === 'resource'))) ||
+                (value.segments.some((segment) => (segment.kind === 'reference' && segment.source === 'spec') ||
+                    (segment.kind === 'expression' &&
+                        segment.expression.references.some((reference) => reference.source === 'spec'))) &&
+                    bindings.spec === undefined)) {
+                return value;
+            }
+            break;
+        case 'sensitive-binding':
+            if (!Object.hasOwn(bindings.sensitive ?? {}, value.binding))
+                return value;
+            sensitiveBindings[value.binding] = bindings.sensitive?.[value.binding];
+            return value;
+        case 'external-input':
+            if (!Object.hasOwn(bindings.externalInputs ?? {}, value.name))
+                return value;
+            break;
+        case 'artifact-output':
+            if (!Object.hasOwn(bindings.artifactOutputs?.[value.requirementId] ?? {}, value.output)) {
+                return value;
+            }
+            break;
+        case 'omitted':
+            return value;
+        case 'literal':
+            throw new DirectArtifactExecutionRecordError('Sensitive source unexpectedly contained a plaintext literal.', path);
+    }
+    const binding = `artifact/${encodeURIComponent(path)}`;
+    sensitiveBindings[binding] = materializePlanValue(value, bindings, path);
+    return { kind: 'sensitive-binding', binding };
+}
+function concreteLifecycle(lifecycle, bindings, path, sensitiveBindings) {
+    return {
+        ...lifecycle,
+        instancing: lifecycle.instancing.kind === 'per-scope'
+            ? {
+                kind: 'per-scope',
+                key: concretePlanValue(lifecycle.instancing.key, bindings, `${path}.instancing.key`, sensitiveBindings),
+            }
+            : lifecycle.instancing,
+        ...(lifecycle.unusedEvidence
+            ? {
+                unusedEvidence: {
+                    ...lifecycle.unusedEvidence,
+                    inputs: concretePlanValue(lifecycle.unusedEvidence.inputs, bindings, `${path}.unusedEvidence.inputs`, sensitiveBindings),
+                },
+            }
+            : {}),
+    };
+}
+function concreteReadinessStrategy(strategy, bindings, path, sensitiveBindings) {
+    if (!strategy || strategy.kind === 'runtime-binding' || !strategy.configuration) {
+        return strategy;
+    }
+    return {
+        ...strategy,
+        configuration: concretePlanValue(strategy.configuration, bindings, `${path}.configuration`, sensitiveBindings),
+    };
+}
+function concreteArtifact(artifact, bindings, sensitiveBindings) {
+    const path = `$.artifact`;
+    const readinessStrategy = concreteReadinessStrategy(artifact.readiness.strategy, bindings, `${path}.readiness.strategy`, sensitiveBindings);
+    return {
+        ...artifact,
+        ...(artifact.identity
+            ? {
+                identity: {
+                    ...artifact.identity,
+                    name: concretePlanValue(artifact.identity.name, bindings, `${path}.identity.name`, sensitiveBindings),
+                    ...(artifact.identity.namespace
+                        ? {
+                            namespace: concretePlanValue(artifact.identity.namespace, bindings, `${path}.identity.namespace`, sensitiveBindings),
+                        }
+                        : {}),
+                },
+            }
+            : {}),
+        ...(artifact.desired
+            ? {
+                desired: concretePlanValue(artifact.desired, bindings, `${path}.desired`, sensitiveBindings),
+            }
+            : {}),
+        lifecycle: concreteLifecycle(artifact.lifecycle, bindings, `${path}.lifecycle`, sensitiveBindings),
+        readiness: {
+            activation: artifact.readiness.activation.map((value, index) => concretePlanValue(value, bindings, `${path}.readiness.activation[${index}]`, sensitiveBindings)),
+            readyWhen: artifact.readiness.readyWhen.map((value, index) => concretePlanValue(value, bindings, `${path}.readiness.readyWhen[${index}]`, sensitiveBindings)),
+            ...(readinessStrategy ? { strategy: readinessStrategy } : {}),
+        },
+        ...(artifact.iteration
+            ? {
+                iteration: artifact.iteration.map((dimension, index) => ({
+                    ...dimension,
+                    collection: concretePlanValue(dimension.collection, bindings, `${path}.iteration[${index}].collection`, sensitiveBindings),
+                })),
+            }
+            : {}),
+        ...(artifact.templateOverrides
+            ? {
+                templateOverrides: artifact.templateOverrides.map((override, index) => ({
+                    ...override,
+                    value: concretePlanValue(override.value, bindings, `${path}.templateOverrides[${index}].value`, sensitiveBindings),
+                })),
+            }
+            : {}),
+    };
+}
+function incomingDependencies(plan, artifactId) {
+    const emittedArtifactIds = new Set(plan.resources
+        .filter((artifact) => artifact.role === 'application-resource')
+        .map((artifact) => artifact.id));
+    const dependencies = new Set();
+    for (const edge of plan.edges) {
+        if (edge.kind === 'output' && edge.consumer === artifactId)
+            dependencies.add(edge.producer);
+        if ((edge.kind === 'existence' || edge.kind === 'ready') && edge.dependent === artifactId) {
+            dependencies.add(edge.prerequisite);
+        }
+        if (edge.kind === 'ownership' && edge.child === artifactId)
+            dependencies.add(edge.owner);
+    }
+    dependencies.delete(artifactId);
+    return [...dependencies].filter((dependency) => emittedArtifactIds.has(dependency)).sort();
+}
+function executionDigest(record) {
+    return canonicalDigest(record);
+}
+/** Select and concretize one direct operation for a fan-out execution host. */
+export function createDirectArtifactExecutionRecord(plan, artifactId, bindings = {}) {
+    return createDirectArtifactExecutionMaterialization(plan, artifactId, bindings).record;
+}
+/**
+ * Build a durable execution record plus its deliberately non-serialized secret envelope.
+ * Host adapters must map the envelope to their native sensitive-input mechanism.
+ */
+export function createDirectArtifactExecutionMaterialization(plan, artifactId, bindings = {}) {
+    const artifact = plan.resources.find((candidate) => candidate.id === artifactId);
+    if (!artifact) {
+        throw new DirectArtifactExecutionRecordError(`Direct artifact ${artifactId} does not exist in the compiled plan.`, '$.artifactId', { artifactId });
+    }
+    const sensitiveBindings = {};
+    const unsigned = {
+        version: DIRECT_ARTIFACT_EXECUTION_RECORD_VERSION,
+        target: 'direct',
+        planIdentityDigest: plan.planIdentityDigest,
+        compiledArtifactDigest: plan.compiledArtifactDigest,
+        artifact: concreteArtifact(artifact, bindings, sensitiveBindings),
+        dependencies: incomingDependencies(plan, artifactId),
+    };
+    return {
+        record: { ...unsigned, executionDigest: executionDigest(unsigned) },
+        sensitiveBindings,
+    };
+}
+export function encodeDirectArtifactExecutionRecord(record) {
+    return canonicalStringify(record);
+}
+export function decodeDirectArtifactExecutionRecord(encoded) {
+    let parsed;
+    try {
+        parsed = JSON.parse(encoded);
+    }
+    catch (error) {
+        throw new DirectArtifactExecutionRecordError(`Direct artifact execution record is not valid JSON: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+        throw new DirectArtifactExecutionRecordError(`Expected an execution-record object.`);
+    }
+    const record = parsed;
+    if (record.version !== DIRECT_ARTIFACT_EXECUTION_RECORD_VERSION || record.target !== 'direct') {
+        throw new DirectArtifactExecutionRecordError(`Unsupported direct artifact execution-record identity.`);
+    }
+    for (const key of ['planIdentityDigest', 'compiledArtifactDigest', 'executionDigest']) {
+        if (typeof record[key] !== 'string' || record[key].length === 0) {
+            throw new DirectArtifactExecutionRecordError(`Expected a non-empty ${key}.`, `$.${key}`);
+        }
+    }
+    const artifact = decodeDirectArtifactResource(canonicalStringify(record.artifact));
+    if (!Array.isArray(record.dependencies)) {
+        throw new DirectArtifactExecutionRecordError(`Expected a dependency array.`, '$.dependencies');
+    }
+    const dependencies = record.dependencies.map((dependency, index) => {
+        if (typeof dependency !== 'string' || dependency.length === 0) {
+            throw new DirectArtifactExecutionRecordError(`Expected a non-empty dependency id.`, `$.dependencies[${index}]`);
+        }
+        return dependency;
+    });
+    if (new Set(dependencies).size !== dependencies.length ||
+        dependencies.some((dependency) => dependency === artifact.id)) {
+        throw new DirectArtifactExecutionRecordError(`Dependencies must be unique and must not contain the selected artifact.`, '$.dependencies');
+    }
+    const decoded = {
+        version: DIRECT_ARTIFACT_EXECUTION_RECORD_VERSION,
+        target: 'direct',
+        planIdentityDigest: record.planIdentityDigest,
+        compiledArtifactDigest: record.compiledArtifactDigest,
+        artifact,
+        dependencies,
+        executionDigest: record.executionDigest,
+    };
+    const expected = executionDigest({
+        version: decoded.version,
+        target: decoded.target,
+        planIdentityDigest: decoded.planIdentityDigest,
+        compiledArtifactDigest: decoded.compiledArtifactDigest,
+        artifact: decoded.artifact,
+        dependencies: decoded.dependencies,
+    });
+    if (expected !== decoded.executionDigest) {
+        throw new DirectArtifactExecutionRecordError(`Execution-record digest does not match its canonical content.`, '$.executionDigest');
+    }
+    return decoded;
+}
+//# sourceMappingURL=execution-record.js.map