typekro 0.28.0 → 0.29.0

package/dist/core/planning/kro-runtime-adapter.js

@@ -0,0 +1,211 @@
+import { getMetadataField, setForEach, setIncludeWhen, setMetadataField, setReadinessEvaluator, setReadyWhen, setResourceId, setTemplateOverrides, } from '../metadata/index.js';
+import { CEL_EXPRESSION_BRAND } from '../constants/brands.js';
+import { materializePlanValue, materializePlanValueForKro, } from './materialization.js';
+/** Error raised when a KRO artifact cannot be adapted to the established serializer. */
+export class KroArtifactRuntimeAdapterError extends Error {
+    context;
+    code = 'KRO_ARTIFACT_ADAPTER_FAILED';
+    constructor(message, context = {}) {
+        super(message);
+        this.context = context;
+        this.name = 'KroArtifactRuntimeAdapterError';
+    }
+}
+function templateOverrideExpression(value, artifactId, index) {
+    if (typeof value === 'string')
+        return value;
+    if (value &&
+        typeof value === 'object' &&
+        Reflect.get(value, CEL_EXPRESSION_BRAND) === true &&
+        typeof Reflect.get(value, 'expression') === 'string') {
+        return Reflect.get(value, 'expression');
+    }
+    throw new KroArtifactRuntimeAdapterError(`KRO template override ${index} on ${artifactId} did not materialize to a CEL expression.`, { artifactId, index });
+}
+function asResource(child) {
+    if (!child.desired) {
+        throw new KroArtifactRuntimeAdapterError(`KRO graph child ${child.id} has no desired resource template.`, { artifactId: child.id, role: child.role });
+    }
+    const desired = materializePlanValueForKro(child.desired, `$.resources.${child.id}.desired`);
+    if (!desired || typeof desired !== 'object' || Array.isArray(desired)) {
+        throw new KroArtifactRuntimeAdapterError(`KRO graph child ${child.id} did not materialize to a Kubernetes resource.`, { artifactId: child.id });
+    }
+    const resource = desired;
+    if (typeof resource.apiVersion !== 'string' ||
+        typeof resource.kind !== 'string' ||
+        !resource.metadata ||
+        !Object.hasOwn(resource.metadata, 'name')) {
+        throw new KroArtifactRuntimeAdapterError(`KRO graph child ${child.id} is missing Kubernetes identity fields.`, { artifactId: child.id });
+    }
+    Reflect.set(resource, 'id', child.sourceNodeId ?? child.id);
+    setResourceId(resource, child.id);
+    if (child.identity?.scope)
+        setMetadataField(resource, 'scope', child.identity.scope);
+    if (child.role === 'kro-external-reference') {
+        Object.defineProperty(resource, '__externalRef', { value: true, enumerable: false });
+    }
+    if (child.readiness.activation.length > 0) {
+        setIncludeWhen(resource, child.readiness.activation.map((condition, index) => materializePlanValueForKro(condition, `$.resources.${child.id}.readiness.activation[${index}]`)));
+    }
+    if (child.readiness.readyWhen.length > 0) {
+        setReadyWhen(resource, child.readiness.readyWhen.map((condition, index) => materializePlanValueForKro(condition, `$.resources.${child.id}.readiness.readyWhen[${index}]`)));
+    }
+    if (child.iteration && child.iteration.length > 0) {
+        const dimensions = child.iteration.map((dimension, index) => {
+            if (dimension.collection.kind !== 'expression' ||
+                dimension.collection.expression.language !== 'portable-cel') {
+                throw new KroArtifactRuntimeAdapterError(`KRO iteration ${index} on ${child.id} is not a portable collection expression.`, { artifactId: child.id, index });
+            }
+            return {
+                [dimension.variable]: `\${${dimension.collection.expression.expression}}`,
+            };
+        });
+        setForEach(resource, dimensions);
+    }
+    if (child.templateOverrides && child.templateOverrides.length > 0) {
+        setTemplateOverrides(resource, child.templateOverrides.map((override, index) => {
+            const value = materializePlanValueForKro(override.value, `$.resources.${child.id}.templateOverrides[${index}].value`);
+            return {
+                propertyPath: override.propertyPath,
+                celExpression: templateOverrideExpression(value, child.id, index),
+            };
+        }));
+    }
+    return resource;
+}
+/** Adapt the compiled KRO graph children to the established RGD serializer input. */
+export function kroArtifactPlanToGraphResources(artifacts) {
+    const rgd = artifacts.resources.find((resource) => resource.role === 'resource-graph-definition');
+    if (!rgd || rgd.role !== 'resource-graph-definition') {
+        throw new KroArtifactRuntimeAdapterError('KRO artifact plan has no graph definition artifact.');
+    }
+    const resources = Object.fromEntries(rgd.graph.children.map((child) => [child.id, asResource(child)]));
+    for (const edge of rgd.graph.edges) {
+        if (edge.kind !== 'ready')
+            continue;
+        const dependent = resources[edge.dependent];
+        if (!dependent || !resources[edge.prerequisite])
+            continue;
+        const existing = getMetadataField(dependent, 'dependsOn');
+        setMetadataField(dependent, 'dependsOn', [
+            ...(existing ?? []),
+            { resourceId: edge.prerequisite },
+        ]);
+    }
+    return resources;
+}
+function instanceArtifact(artifacts) {
+    const instance = artifacts.resources.find((resource) => resource.role === 'instance');
+    if (!instance) {
+        throw new KroArtifactRuntimeAdapterError('KRO artifact plan has no instance artifact.');
+    }
+    return instance;
+}
+/** Materialize the physical KRO custom-resource instance from canonical artifact data. */
+export function kroArtifactPlanToInstanceResource(artifacts, bindings = {}) {
+    const instance = instanceArtifact(artifacts);
+    const desired = materializePlanValue(instance.desired, bindings, `$.resources.${instance.id}.desired`);
+    if (!desired || typeof desired !== 'object' || Array.isArray(desired)) {
+        throw new KroArtifactRuntimeAdapterError(`KRO instance ${instance.id} did not materialize to a Kubernetes resource.`, { artifactId: instance.id });
+    }
+    const resource = desired;
+    if (typeof resource.apiVersion !== 'string' ||
+        typeof resource.kind !== 'string' ||
+        typeof resource.metadata?.name !== 'string') {
+        throw new KroArtifactRuntimeAdapterError(`KRO instance ${instance.id} is missing concrete Kubernetes identity fields.`, { artifactId: instance.id });
+    }
+    setResourceId(resource, instance.id);
+    setMetadataField(resource, 'scope', 'namespaced');
+    return resource;
+}
+function orderedSupportingArtifacts(artifacts) {
+    const supporting = artifacts.resources.filter((artifact) => artifact.role === 'kro-prerequisite' ||
+        artifact.role === 'hoisted-namespace' ||
+        artifact.role === 'singleton-owner');
+    const byId = new Map(supporting.map((artifact) => [artifact.id, artifact]));
+    const dependents = new Map();
+    const indegree = new Map(supporting.map((artifact) => [artifact.id, 0]));
+    for (const edge of artifacts.edges) {
+        if (edge.kind !== 'existence' && edge.kind !== 'ready')
+            continue;
+        if (!byId.has(edge.prerequisite) || !byId.has(edge.dependent))
+            continue;
+        const targets = dependents.get(edge.prerequisite) ?? new Set();
+        if (targets.has(edge.dependent))
+            continue;
+        targets.add(edge.dependent);
+        dependents.set(edge.prerequisite, targets);
+        indegree.set(edge.dependent, (indegree.get(edge.dependent) ?? 0) + 1);
+    }
+    const ready = [...supporting]
+        .filter((artifact) => indegree.get(artifact.id) === 0)
+        .sort((left, right) => left.id.localeCompare(right.id));
+    const ordered = [];
+    while (ready.length > 0) {
+        const current = ready.shift();
+        if (current === undefined)
+            break;
+        ordered.push(current);
+        for (const dependent of [...(dependents.get(current.id) ?? [])].sort()) {
+            const nextIndegree = (indegree.get(dependent) ?? 0) - 1;
+            indegree.set(dependent, nextIndegree);
+            if (nextIndegree === 0) {
+                const dependentArtifact = byId.get(dependent);
+                if (!dependentArtifact) {
+                    throw new KroArtifactRuntimeAdapterError(`KRO supporting artifact ${dependent} is missing from the artifact index.`, { artifactId: dependent });
+                }
+                ready.push(dependentArtifact);
+                ready.sort((left, right) => left.id.localeCompare(right.id));
+            }
+        }
+    }
+    if (ordered.length !== supporting.length) {
+        throw new KroArtifactRuntimeAdapterError('KRO supporting artifact dependency graph contains a cycle.');
+    }
+    return ordered;
+}
+/** Materialize prerequisites, hoisted namespaces, and singleton owners from canonical data. */
+export function kroArtifactPlanToSupportingResources(artifacts, options = {}) {
+    return orderedSupportingArtifacts(artifacts).map((artifact) => {
+        if (!artifact.desired) {
+            throw new KroArtifactRuntimeAdapterError(`KRO supporting artifact ${artifact.id} has no desired resource.`, { artifactId: artifact.id, role: artifact.role });
+        }
+        const desired = materializePlanValue(artifact.desired, options, `$.resources.${artifact.id}.desired`);
+        if (!desired || typeof desired !== 'object' || Array.isArray(desired)) {
+            throw new KroArtifactRuntimeAdapterError(`KRO supporting artifact ${artifact.id} did not materialize to a Kubernetes resource.`, { artifactId: artifact.id, role: artifact.role });
+        }
+        const resource = desired;
+        if (typeof resource.apiVersion !== 'string' ||
+            typeof resource.kind !== 'string' ||
+            typeof resource.metadata?.name !== 'string') {
+            throw new KroArtifactRuntimeAdapterError(`KRO supporting artifact ${artifact.id} is missing concrete Kubernetes identity fields.`, { artifactId: artifact.id, role: artifact.role });
+        }
+        Object.defineProperty(resource, 'id', {
+            value: artifact.id,
+            configurable: true,
+            enumerable: false,
+        });
+        setResourceId(resource, artifact.id);
+        if (artifact.identity?.scope) {
+            setMetadataField(resource, 'scope', artifact.identity.scope);
+        }
+        setMetadataField(resource, 'applyPolicy', artifact.apply);
+        const strategy = artifact.readiness.strategy;
+        if (strategy?.kind === 'runtime-binding') {
+            const evaluator = options.readinessEvaluators?.[strategy.binding];
+            if (!evaluator) {
+                throw new KroArtifactRuntimeAdapterError(`Readiness binding ${strategy.binding} is not materialized.`, { artifactId: artifact.id, binding: strategy.binding });
+            }
+            setReadinessEvaluator(resource, evaluator);
+        }
+        else if (strategy?.kind === 'registered') {
+            const evaluator = options.resolveReadinessStrategy?.(strategy);
+            if (!evaluator) {
+                throw new KroArtifactRuntimeAdapterError(`Registered readiness strategy ${strategy.id}@${strategy.revision} is unavailable.`, { artifactId: artifact.id, strategy: strategy.id });
+            }
+            setReadinessEvaluator(resource, evaluator);
+        }
+        return { artifact, resource };
+    });
+}
+//# sourceMappingURL=kro-runtime-adapter.js.map

package/dist/core/planning/kro-runtime-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kro-runtime-adapter.js","sourceRoot":"","sources":["../../../src/core/planning/kro-runtime-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,YAAY,EACZ,aAAa,EACb,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAS9D,OAAO,EACL,oBAAoB,EACpB,0BAA0B,GAE3B,MAAM,sBAAsB,CAAC;AAG9B,wFAAwF;AACxF,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IAK5C;IAJF,IAAI,GAAG,6BAA6B,CAAC;IAE9C,YACE,OAAe,EACN,UAA6C,EAAE;QAExD,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,YAAO,GAAP,OAAO,CAAwC;QAGxD,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;IAC/C,CAAC;CACF;AAED,SAAS,0BAA0B,CACjC,KAAc,EACd,UAAkB,EAClB,KAAa;IAEb,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IACE,KAAK;QACL,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,oBAAoB,CAAC,KAAK,IAAI;QACjD,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,QAAQ,EACpD,CAAC;QACD,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAW,CAAC;IACpD,CAAC;IACD,MAAM,IAAI,8BAA8B,CACtC,yBAAyB,KAAK,OAAO,UAAU,2CAA2C,EAC1F,EAAE,UAAU,EAAE,KAAK,EAAE,CACtB,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAA4B;IAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,IAAI,8BAA8B,CACtC,mBAAmB,KAAK,CAAC,EAAE,oCAAoC,EAC/D,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAC3C,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,0BAA0B,CAAC,KAAK,CAAC,OAAO,EAAE,eAAe,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC;IAC7F,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,8BAA8B,CACtC,mBAAmB,KAAK,CAAC,EAAE,gDAAgD,EAC3E,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,CACzB,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,OAA6B,CAAC;IAC/C,IACE,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ;QACvC,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;QACjC,CAAC,QAAQ,CAAC,QAAQ;QAClB,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,EACzC,CAAC;QACD,MAAM,IAAI,8BAA8B,CACtC,mBAAmB,KAAK,CAAC,EAAE,yCAAyC,EACpE,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,CACzB,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5D,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IAClC,IAAI,KAAK,CAAC,QAAQ,EAAE,KAAK;QAAE,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrF,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;QAC5C,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,cAAc,CACZ,QAAQ,EACR,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAClD,0BAA0B,CACxB,SAAS,EACT,eAAe,KAAK,CAAC,EAAE,yBAAyB,KAAK,GAAG,CACzD,CACF,CACF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,YAAY,CACV,QAAQ,EACR,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CACjD,0BAA0B,CACxB,SAAS,EACT,eAAe,KAAK,CAAC,EAAE,wBAAwB,KAAK,GAAG,CACxD,CACF,CACF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;YAC1D,IACE,SAAS,CAAC,UAAU,CAAC,IAAI,KAAK,YAAY;gBAC1C,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,KAAK,cAAc,EAC3D,CAAC;gBACD,MAAM,IAAI,8BAA8B,CACtC,iBAAiB,KAAK,OAAO,KAAK,CAAC,EAAE,2CAA2C,EAChF,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,CAChC,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,UAAU,GAAG;aAC1E,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClE,oBAAoB,CAClB,QAAQ,EACR,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;YAC9C,MAAM,KAAK,GAAG,0BAA0B,CACtC,QAAQ,CAAC,KAAK,EACd,eAAe,KAAK,CAAC,EAAE,sBAAsB,KAAK,SAAS,CAC5D,CAAC;YACF,OAAO;gBACL,YAAY,EAAE,QAAQ,CAAC,YAAY;gBACnC,aAAa,EAAE,0BAA0B,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC;aAClE,CAAC;QACJ,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,+BAA+B,CAC7C,SAA0B;IAE1B,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,2BAA2B,CAAC,CAAC;IAClG,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,2BAA2B,EAAE,CAAC;QACrD,MAAM,IAAI,8BAA8B,CAAC,qDAAqD,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAClC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC,KAAK,CAAC,CAAU,CAAC,CAC1E,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;YAAE,SAAS;QACpC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC;YAAE,SAAS;QAC1D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,EAAE,WAAW,CAE3C,CAAC;QACd,gBAAgB,CAAC,SAAS,EAAE,WAAW,EAAE;YACvC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;YACnB,EAAE,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE;SAClC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,SAA0B;IAClD,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,CAAC,IAAI,CACvC,CAAC,QAAQ,EAAmC,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,UAAU,CAC5E,CAAC;IACF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,8BAA8B,CAAC,6CAA6C,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,iCAAiC,CAC/C,SAA0B,EAC1B,WAAwC,EAAE;IAE1C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,oBAAoB,CAClC,QAAQ,CAAC,OAAO,EAChB,QAAQ,EACR,eAAe,QAAQ,CAAC,EAAE,UAAU,CACrC,CAAC;IACF,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,8BAA8B,CACtC,gBAAgB,QAAQ,CAAC,EAAE,gDAAgD,EAC3E,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,CAC5B,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,OAA6B,CAAC;IAC/C,IACE,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ;QACvC,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;QACjC,OAAO,QAAQ,CAAC,QAAQ,EAAE,IAAI,KAAK,QAAQ,EAC3C,CAAC;QACD,MAAM,IAAI,8BAA8B,CACtC,gBAAgB,QAAQ,CAAC,EAAE,kDAAkD,EAC7E,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,CAC5B,CAAC;IACJ,CAAC;IACD,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;IACrC,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;IAClD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAeD,SAAS,0BAA0B,CAAC,SAA0B;IAC5D,MAAM,UAAU,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,CAC3C,CAAC,QAAQ,EAAqC,EAAE,CAC9C,QAAQ,CAAC,IAAI,KAAK,kBAAkB;QACpC,QAAQ,CAAC,IAAI,KAAK,mBAAmB;QACrC,QAAQ,CAAC,IAAI,KAAK,iBAAiB,CACtC,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,IAAI,GAAG,EAAuB,CAAC;IAClD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;YAAE,SAAS;QACjE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,SAAS;QACxE,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QACvE,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,SAAS;QAC1C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5B,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAC3C,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,GAAG,UAAU,CAAC;SAC1B,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;SACrD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1D,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM;QACjC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACvE,MAAM,YAAY,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACxD,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YACtC,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC9C,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBACvB,MAAM,IAAI,8BAA8B,CACtC,2BAA2B,SAAS,sCAAsC,EAC1E,EAAE,UAAU,EAAE,SAAS,EAAE,CAC1B,CAAC;gBACJ,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBAC9B,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;QACzC,MAAM,IAAI,8BAA8B,CACtC,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,oCAAoC,CAClD,SAA0B,EAC1B,UAAuD,EAAE;IAEzD,OAAO,0BAA0B,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC5D,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,MAAM,IAAI,8BAA8B,CACtC,2BAA2B,QAAQ,CAAC,EAAE,2BAA2B,EACjE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CACjD,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,oBAAoB,CAClC,QAAQ,CAAC,OAAO,EAChB,OAAO,EACP,eAAe,QAAQ,CAAC,EAAE,UAAU,CACrC,CAAC;QACF,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,8BAA8B,CACtC,2BAA2B,QAAQ,CAAC,EAAE,gDAAgD,EACtF,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CACjD,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,OAA6B,CAAC;QAC/C,IACE,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ;YACvC,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;YACjC,OAAO,QAAQ,CAAC,QAAQ,EAAE,IAAI,KAAK,QAAQ,EAC3C,CAAC;YACD,MAAM,IAAI,8BAA8B,CACtC,2BAA2B,QAAQ,CAAC,EAAE,kDAAkD,EACxF,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CACjD,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE;YACpC,KAAK,EAAE,QAAQ,CAAC,EAAE;YAClB,YAAY,EAAE,IAAI;YAClB,UAAU,EAAE,KAAK;SAClB,CAAC,CAAC;QACH,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC;YAC7B,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/D,CAAC;QACD,gBAAgB,CAAC,QAAQ,EAAE,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC;QAC7C,IAAI,QAAQ,EAAE,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAClE,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,8BAA8B,CACtC,qBAAqB,QAAQ,CAAC,OAAO,uBAAuB,EAC5D,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CACvD,CAAC;YACJ,CAAC;YACD,qBAAqB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,QAAQ,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;YAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,wBAAwB,EAAE,CAAC,QAAQ,CAAC,CAAC;YAC/D,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,8BAA8B,CACtC,iCAAiC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,QAAQ,kBAAkB,EACnF,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,CACnD,CAAC;YACJ,CAAC;YACD,qBAAqB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/planning/materialization.d.ts

@@ -0,0 +1,54 @@
+import { TypeKroError } from '../errors.js';
+import type { PlanValue } from './types.js';
+/** Explicit bindings supplied after pure planning and before artifact execution. */
+export interface PlanMaterializationBindings {
+    readonly spec?: unknown;
+    readonly sensitive?: Readonly<Record<string, unknown>>;
+    readonly externalInputs?: Readonly<Record<string, unknown>>;
+    readonly artifactOutputs?: Readonly<Record<string, Readonly<Record<string, unknown>>>>;
+    /** Portable iterator variables available while expanding a direct artifact. */
+    readonly locals?: Readonly<Record<string, unknown>>;
+    /** Canonical schema `$item` paths bound by the current iteration coordinates. */
+    readonly iterationItems?: Readonly<Record<string, unknown>>;
+    /** Concrete producer ids selected for references from the current artifact instance. */
+    readonly resourceIds?: Readonly<Record<string, string>>;
+}
+/** Explicit policy and named values for plaintext static-YAML materialization. */
+export interface StaticYamlMaterializationOptions {
+    /** Acknowledges that returned YAML may contain plaintext sensitive values. */
+    readonly allowSensitiveMaterialization?: true;
+    /** Values for explicit `sensitiveValue(binding)` references. */
+    readonly sensitiveBindings?: Readonly<Record<string, unknown>>;
+}
+/**
+ * Prepare the plaintext-only binding map used by static YAML. Canonical plans
+ * and artifact records remain binding-only; this helper is called only at the
+ * final serialization boundary.
+ */
+export declare function resolveStaticYamlSensitiveBindings(requiredBindings: readonly string[], capturedBindings: Readonly<Record<string, unknown>>, options: StaticYamlMaterializationOptions | undefined, context: string, containsSensitiveValue?: boolean): Readonly<Record<string, unknown>>;
+/**
+ * Extract ephemeral values for sensitive binding identities already present in
+ * a canonical value. The returned envelope is deliberately separate from the
+ * PlanValue and must never be encoded into a plan or artifact bundle.
+ */
+export declare function collectPlanValueSensitiveBindings(value: PlanValue, concrete: unknown, path?: string): Readonly<Record<string, unknown>>;
+/** Return the stable sensitive binding identities referenced by a PlanValue. */
+export declare function planValueSensitiveBindingNames(value: PlanValue): readonly string[];
+/** Whether a canonical value contains tainted data that can be resolved from ordinary bindings. */
+export declare function planValueContainsSensitiveValue(value: PlanValue): boolean;
+/** Rewrite binding identities without resolving or exposing their values. */
+export declare function mapPlanValueSensitiveBindings(value: PlanValue, mapBinding: (binding: string) => string): PlanValue;
+export declare class PlanMaterializationError extends TypeKroError {
+    constructor(message: string, path: string, details?: Record<string, unknown>);
+}
+/** Convert a canonical PlanValue into the runtime value consumed by existing executors. */
+export declare function materializePlanValue(value: PlanValue, bindings?: PlanMaterializationBindings, path?: string): unknown;
+/**
+ * Resolve an activation condition when all of its inputs are available before
+ * deployment. `undefined` means the condition depends on runtime resource
+ * state and must remain attached to the artifact.
+ */
+export declare function evaluatePlanActivation(value: PlanValue, bindings?: PlanMaterializationBindings, path?: string): boolean | undefined;
+/** Rehydrate symbolic PlanValue records for the established KRO serializer. */
+export declare function materializePlanValueForKro(value: PlanValue, path?: string): unknown;
+//# sourceMappingURL=materialization.d.ts.map

package/dist/core/planning/materialization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"materialization.d.ts","sourceRoot":"","sources":["../../../src/core/planning/materialization.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,KAAK,EAAyB,SAAS,EAAE,MAAM,YAAY,CAAC;AAOnE,oFAAoF;AACpF,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACvD,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,QAAQ,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpD,iFAAiF;IACjF,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,wFAAwF;IACxF,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACzD;AAED,kFAAkF;AAClF,MAAM,WAAW,gCAAgC;IAC/C,8EAA8E;IAC9E,QAAQ,CAAC,6BAA6B,CAAC,EAAE,IAAI,CAAC;IAC9C,gEAAgE;IAChE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAChE;AAED;;;;GAIG;AACH,wBAAgB,kCAAkC,CAChD,gBAAgB,EAAE,SAAS,MAAM,EAAE,EACnC,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACnD,OAAO,EAAE,gCAAgC,GAAG,SAAS,EACrD,OAAO,EAAE,MAAM,EACf,sBAAsB,UAAQ,GAC7B,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA+BnC;AA8DD;;;;GAIG;AACH,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,SAAS,EAChB,QAAQ,EAAE,OAAO,EACjB,IAAI,SAAM,GACT,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAInC;AAED,gFAAgF;AAChF,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,MAAM,EAAE,CAsBlF;AAED,mGAAmG;AACnG,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAWzE;AAED,6EAA6E;AAC7E,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,SAAS,EAChB,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GACtC,SAAS,CAsBX;AAED,qBAAa,wBAAyB,SAAQ,YAAY;gBAC5C,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;CAIjF;AAsVD,2FAA2F;AAC3F,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,SAAS,EAChB,QAAQ,GAAE,2BAAgC,EAC1C,IAAI,SAAM,GACT,OAAO,CAGT;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,SAAS,EAChB,QAAQ,GAAE,2BAAgC,EAC1C,IAAI,SAAM,GACT,OAAO,GAAG,SAAS,CA6CrB;AAsED,+EAA+E;AAC/E,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,SAAM,GAAG,OAAO,CAGhF"}