typekro 0.28.0 → 0.29.0

package/dist/core/resources/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/resources/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,YAAY,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAEjE,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,WAAW,EACX,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,cAAc,EACd,iBAAiB,EACjB,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,+BAA+B,EAC/B,kBAAkB,EAClB,aAAa,GACd,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/resources/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,YAAY,EACV,4BAA4B,EAC5B,mBAAmB,EACnB,yBAAyB,EACzB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,6BAA6B,EAC7B,WAAW,EACX,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,cAAc,EACd,iBAAiB,EACjB,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,iCAAiC,EACjC,0BAA0B,EAC1B,mBAAmB,EACnB,oBAAoB,EACpB,KAAK,wBAAwB,EAC7B,KAAK,kBAAkB,EACvB,KAAK,2BAA2B,EAChC,KAAK,2BAA2B,EAChC,KAAK,yBAAyB,EAC9B,KAAK,+BAA+B,EACpC,KAAK,mCAAmC,GACzC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,+BAA+B,EAC/B,kBAAkB,EAClB,aAAa,GACd,MAAM,SAAS,CAAC"}

package/dist/core/resources/index.js

@@ -1,6 +1,7 @@
 /**
  * Resource Utilities
  */
-export { clearFactoryRegistry, getFactoryRegistration, getKindInfo, getRegisteredFactoryCount, getRegisteredFactoryNames, getSemanticCandidateKinds, isKnownFactory, registerFactories, registerFactory, } from './factory-registry.js';
+export { clearFactoryRegistry, getFactoryRegistration, getFactoryRegistrationsForGVK, getKindInfo, getRegisteredFactoryCount, getRegisteredFactoryNames, getSemanticCandidateKinds, isKnownFactory, registerFactories, registerFactory, } from './factory-registry.js';
+export { canonicalizeResourceForComparison, compareKubernetesResources, diffCanonicalValues, formatCanonicalDrift, } from './live-comparison.js';
 export { generateDeterministicResourceId, generateResourceId, getResourceId, } from './id.js';
 //# sourceMappingURL=index.js.map

package/dist/core/resources/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/resources/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,WAAW,EACX,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,cAAc,EACd,iBAAiB,EACjB,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,+BAA+B,EAC/B,kBAAkB,EAClB,aAAa,GACd,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/resources/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AASH,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,6BAA6B,EAC7B,WAAW,EACX,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,cAAc,EACd,iBAAiB,EACjB,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,iCAAiC,EACjC,0BAA0B,EAC1B,mBAAmB,EACnB,oBAAoB,GAQrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,+BAA+B,EAC/B,kBAAkB,EAClB,aAAa,GACd,MAAM,SAAS,CAAC"}

package/dist/core/resources/live-comparison.d.ts

@@ -0,0 +1,58 @@
+import type { KubernetesResource } from '../types/kubernetes.js';
+import { type ResourceComparisonSide } from './factory-registry.js';
+export interface ComparisonCanonicalizerEvidence {
+    readonly id: string;
+    readonly revision: string;
+    readonly stage: 'desired' | 'live-comparison';
+    readonly factoryName: string;
+}
+export type CanonicalDriftKind = 'missing-live-value' | 'unexpected-live-value' | 'type-mismatch' | 'value-mismatch';
+export interface CanonicalDriftValueEvidence {
+    readonly type: 'null' | 'array' | 'object' | 'string' | 'number' | 'boolean' | 'undefined';
+    readonly digest?: string;
+    readonly preview?: string;
+    readonly redacted?: true;
+}
+export interface CanonicalDriftDifference {
+    readonly path: string;
+    readonly kind: CanonicalDriftKind;
+    readonly desired?: CanonicalDriftValueEvidence;
+    readonly live?: CanonicalDriftValueEvidence;
+}
+export interface CanonicalValueDiffOptions {
+    /** Ignore object fields that exist only in the live value, as SSA-style ownership does. */
+    readonly ignoreAdditionalLiveFields?: boolean;
+    /** Include bounded JSON previews. Digests and types are always emitted for non-redacted values. */
+    readonly includeValues?: boolean;
+    /** Redact values at sensitive paths. Redacted values expose neither a preview nor a digest. */
+    readonly redact?: (path: string, side: ResourceComparisonSide, value: unknown) => boolean;
+    /** Bound diagnostic size while retaining deterministic traversal order. */
+    readonly maxDifferences?: number;
+}
+export interface KubernetesResourceComparisonOptions extends CanonicalValueDiffOptions {
+    /** Exact factory provenance when more than one factory can produce the desired GVK. */
+    readonly factoryName?: string;
+}
+export interface CanonicalResourceComparison {
+    readonly equal: boolean;
+    readonly identity: {
+        readonly apiVersion: string;
+        readonly kind: string;
+        readonly name?: string;
+        readonly namespace?: string;
+    };
+    readonly differences: readonly CanonicalDriftDifference[];
+    readonly canonicalizers: readonly ComparisonCanonicalizerEvidence[];
+}
+/** Canonicalize one resource for a desired/live comparison without changing semantic plan data. */
+export declare function canonicalizeResourceForComparison(resource: KubernetesResource, side: ResourceComparisonSide, options?: Pick<KubernetesResourceComparisonOptions, 'factoryName'>): {
+    readonly resource: KubernetesResource;
+    readonly canonicalizers: readonly ComparisonCanonicalizerEvidence[];
+};
+/** Produce deterministic exact-path differences between two canonical values. */
+export declare function diffCanonicalValues(desired: unknown, live: unknown, options?: CanonicalValueDiffOptions): readonly CanonicalDriftDifference[];
+/** Compare desired intent with live Kubernetes state after factory-owned normalization. */
+export declare function compareKubernetesResources(desired: KubernetesResource, live: KubernetesResource, options?: KubernetesResourceComparisonOptions): CanonicalResourceComparison;
+/** Format bounded, value-safe drift evidence for logs and domain errors. */
+export declare function formatCanonicalDrift(differences: readonly CanonicalDriftDifference[], maximum?: number): string;
+//# sourceMappingURL=live-comparison.d.ts.map

package/dist/core/resources/live-comparison.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-comparison.d.ts","sourceRoot":"","sources":["../../../src/core/resources/live-comparison.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAIL,KAAK,sBAAsB,EAC5B,MAAM,uBAAuB,CAAC;AAE/B,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,iBAAiB,CAAC;IAC9C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,MAAM,kBAAkB,GAC1B,oBAAoB,GACpB,uBAAuB,GACvB,eAAe,GACf,gBAAgB,CAAC;AAErB,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;IAC3F,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,2BAA2B,CAAC;IAC/C,QAAQ,CAAC,IAAI,CAAC,EAAE,2BAA2B,CAAC;CAC7C;AAED,MAAM,WAAW,yBAAyB;IACxC,2FAA2F;IAC3F,QAAQ,CAAC,0BAA0B,CAAC,EAAE,OAAO,CAAC;IAC9C,mGAAmG;IACnG,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,+FAA+F;IAC/F,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IAC1F,2EAA2E;IAC3E,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,mCAAoC,SAAQ,yBAAyB;IACpF,uFAAuF;IACvF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF,QAAQ,CAAC,WAAW,EAAE,SAAS,wBAAwB,EAAE,CAAC;IAC1D,QAAQ,CAAC,cAAc,EAAE,SAAS,+BAA+B,EAAE,CAAC;CACrE;AA6ID,mGAAmG;AACnG,wBAAgB,iCAAiC,CAC/C,QAAQ,EAAE,kBAAkB,EAC5B,IAAI,EAAE,sBAAsB,EAC5B,OAAO,GAAE,IAAI,CAAC,mCAAmC,EAAE,aAAa,CAAM,GACrE;IACD,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,cAAc,EAAE,SAAS,+BAA+B,EAAE,CAAC;CACrE,CAoCA;AAsCD,iFAAiF;AACjF,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,OAAO,EACb,OAAO,GAAE,yBAA8B,GACtC,SAAS,wBAAwB,EAAE,CA8ErC;AAaD,2FAA2F;AAC3F,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,kBAAkB,EAC3B,IAAI,EAAE,kBAAkB,EACxB,OAAO,GAAE,mCAAwC,GAChD,2BAA2B,CA6C7B;AAED,4EAA4E;AAC5E,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,SAAS,wBAAwB,EAAE,EAChD,OAAO,SAAI,GACV,MAAM,CAQR"}

package/dist/core/resources/live-comparison.js

@@ -0,0 +1,293 @@
+import { TypeKroError } from '../errors.js';
+import { getMetadataField } from '../metadata/index.js';
+import { canonicalDigest, canonicalStringify } from '../planning/canonical.js';
+import { getFactoryRegistration, getFactoryRegistrationsForGVK, } from './factory-registry.js';
+const METADATA_NOISE_FIELDS = [
+    'creationTimestamp',
+    'deletionGracePeriodSeconds',
+    'deletionTimestamp',
+    'generation',
+    'managedFields',
+    'resourceVersion',
+    'selfLink',
+    'uid',
+];
+function jsonClone(value, context) {
+    try {
+        return JSON.parse(JSON.stringify(value));
+    }
+    catch (error) {
+        throw new TypeKroError(`Unable to clone ${context} for canonical comparison.`, 'RESOURCE_COMPARISON_CLONE_FAILED', { context, cause: error instanceof Error ? error.message : String(error) });
+    }
+}
+function sameGvk(registration, resource) {
+    return (registration.apiVersion.toLowerCase() === resource.apiVersion.toLowerCase() &&
+        registration.kind.toLowerCase() === resource.kind.toLowerCase());
+}
+function comparisonRegistration(resource, explicitFactoryName) {
+    const factoryName = explicitFactoryName ?? getMetadataField(resource, 'factoryName');
+    if (factoryName) {
+        const registration = getFactoryRegistration(factoryName);
+        if (!registration) {
+            throw new TypeKroError(`Factory provenance ${factoryName} is not registered for canonical comparison.`, 'RESOURCE_COMPARISON_FACTORY_UNKNOWN', {
+                factoryName,
+                resourceApiVersion: resource.apiVersion,
+                resourceKind: resource.kind,
+            });
+        }
+        if (!sameGvk(registration, resource)) {
+            throw new TypeKroError(`Factory provenance ${factoryName} does not produce ${resource.apiVersion}/${resource.kind}.`, 'RESOURCE_COMPARISON_FACTORY_MISMATCH', {
+                factoryName,
+                resourceApiVersion: resource.apiVersion,
+                resourceKind: resource.kind,
+                factoryApiVersion: registration.apiVersion,
+                factoryKind: registration.kind,
+            });
+        }
+        return registration;
+    }
+    const registrations = getFactoryRegistrationsForGVK(resource.apiVersion, resource.kind);
+    if (registrations.length <= 1)
+        return registrations[0];
+    if (registrations.some((registration) => registration.desiredCanonicalizer !== undefined ||
+        registration.liveCanonicalizer !== undefined)) {
+        throw new TypeKroError(`Canonical comparison for ${resource.apiVersion}/${resource.kind} is ambiguous because multiple factories are registered.`, 'RESOURCE_COMPARISON_FACTORY_AMBIGUOUS', {
+            apiVersion: resource.apiVersion,
+            kind: resource.kind,
+            factories: registrations.map((registration) => registration.factoryName).sort(),
+        });
+    }
+    return undefined;
+}
+function applyDeterministicCanonicalizer(resource, context, canonicalize) {
+    const first = canonicalize(jsonClone(resource, `${context} input`));
+    const second = canonicalize(jsonClone(resource, `${context} input`));
+    if (canonicalStringify(first) !== canonicalStringify(second)) {
+        throw new TypeKroError(`${context} produced different outputs for identical inputs.`, 'RESOURCE_COMPARISON_CANONICALIZER_NONDETERMINISTIC', { context });
+    }
+    return first;
+}
+function stripOperationalMapEntries(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return undefined;
+    const entries = Object.entries(value).filter(([key]) => !key.startsWith('typekro.io/'));
+    return entries.length > 0 ? Object.fromEntries(entries) : undefined;
+}
+function stripKubernetesComparisonNoise(resource) {
+    const canonical = jsonClone(resource, 'Kubernetes resource');
+    delete canonical.id;
+    delete canonical.scope;
+    delete canonical.status;
+    if (canonical.metadata) {
+        const metadata = { ...canonical.metadata };
+        for (const field of METADATA_NOISE_FIELDS)
+            delete metadata[field];
+        const labels = stripOperationalMapEntries(metadata.labels);
+        const annotations = stripOperationalMapEntries(metadata.annotations);
+        if (labels)
+            metadata.labels = labels;
+        else
+            delete metadata.labels;
+        if (annotations)
+            metadata.annotations = annotations;
+        else
+            delete metadata.annotations;
+        if (Array.isArray(metadata.finalizers) && metadata.finalizers.length === 0) {
+            delete metadata.finalizers;
+        }
+        if (Array.isArray(metadata.ownerReferences) && metadata.ownerReferences.length === 0) {
+            delete metadata.ownerReferences;
+        }
+        canonical.metadata = metadata;
+    }
+    return canonical;
+}
+/** Canonicalize one resource for a desired/live comparison without changing semantic plan data. */
+export function canonicalizeResourceForComparison(resource, side, options = {}) {
+    const registration = comparisonRegistration(resource, options.factoryName);
+    const evidence = [];
+    let current = jsonClone(resource, `${side} resource`);
+    if (side === 'desired' && registration?.desiredCanonicalizer) {
+        const canonicalizer = registration.desiredCanonicalizer;
+        current = applyDeterministicCanonicalizer(current, `Desired canonicalizer ${canonicalizer.id}@${canonicalizer.revision}`, canonicalizer.canonicalize);
+        evidence.push({
+            id: canonicalizer.id,
+            revision: canonicalizer.revision,
+            stage: 'desired',
+            factoryName: registration.factoryName,
+        });
+    }
+    if (registration?.liveCanonicalizer) {
+        const canonicalizer = registration.liveCanonicalizer;
+        current = applyDeterministicCanonicalizer(current, `Live comparison canonicalizer ${canonicalizer.id}@${canonicalizer.revision} (${side})`, (input) => canonicalizer.canonicalize(input, side));
+        evidence.push({
+            id: canonicalizer.id,
+            revision: canonicalizer.revision,
+            stage: 'live-comparison',
+            factoryName: registration.factoryName,
+        });
+    }
+    return { resource: stripKubernetesComparisonNoise(current), canonicalizers: evidence };
+}
+function valueType(value) {
+    if (value === null)
+        return 'null';
+    if (Array.isArray(value))
+        return 'array';
+    return typeof value;
+}
+function boundedPreview(value) {
+    const encoded = canonicalStringify(value);
+    return encoded.length <= 240 ? encoded : `${encoded.slice(0, 237)}...`;
+}
+function valueEvidence(value, path, side, options) {
+    if (options.redact?.(path, side, value))
+        return { type: valueType(value), redacted: true };
+    if (value === undefined)
+        return { type: 'undefined' };
+    return {
+        type: valueType(value),
+        digest: canonicalDigest(value),
+        ...(options.includeValues ? { preview: boundedPreview(value) } : {}),
+    };
+}
+function childPath(path, key) {
+    return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(key)
+        ? `${path}.${key}`
+        : `${path}[${JSON.stringify(key)}]`;
+}
+function isRecord(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+/** Produce deterministic exact-path differences between two canonical values. */
+export function diffCanonicalValues(desired, live, options = {}) {
+    const differences = [];
+    const maximum = options.maxDifferences ?? 100;
+    const visit = (expected, actual, path) => {
+        if (differences.length >= maximum || Object.is(expected, actual))
+            return;
+        if (Array.isArray(expected) && Array.isArray(actual)) {
+            const commonLength = Math.min(expected.length, actual.length);
+            for (let index = 0; index < commonLength; index++) {
+                visit(expected[index], actual[index], `${path}[${index}]`);
+            }
+            for (let index = commonLength; index < expected.length && differences.length < maximum; index++) {
+                differences.push({
+                    path: `${path}[${index}]`,
+                    kind: 'missing-live-value',
+                    desired: valueEvidence(expected[index], `${path}[${index}]`, 'desired', options),
+                });
+            }
+            for (let index = commonLength; index < actual.length && differences.length < maximum; index++) {
+                differences.push({
+                    path: `${path}[${index}]`,
+                    kind: 'unexpected-live-value',
+                    live: valueEvidence(actual[index], `${path}[${index}]`, 'live', options),
+                });
+            }
+            return;
+        }
+        if (isRecord(expected) && isRecord(actual)) {
+            for (const key of Object.keys(expected).sort()) {
+                const nextPath = childPath(path, key);
+                if (!Object.hasOwn(actual, key)) {
+                    differences.push({
+                        path: nextPath,
+                        kind: 'missing-live-value',
+                        desired: valueEvidence(expected[key], nextPath, 'desired', options),
+                    });
+                }
+                else {
+                    visit(expected[key], actual[key], nextPath);
+                }
+                if (differences.length >= maximum)
+                    return;
+            }
+            if (!options.ignoreAdditionalLiveFields) {
+                for (const key of Object.keys(actual).sort()) {
+                    if (Object.hasOwn(expected, key))
+                        continue;
+                    const nextPath = childPath(path, key);
+                    differences.push({
+                        path: nextPath,
+                        kind: 'unexpected-live-value',
+                        live: valueEvidence(actual[key], nextPath, 'live', options),
+                    });
+                    if (differences.length >= maximum)
+                        return;
+                }
+            }
+            return;
+        }
+        const expectedType = valueType(expected);
+        const actualType = valueType(actual);
+        differences.push({
+            path,
+            kind: expectedType === actualType ? 'value-mismatch' : 'type-mismatch',
+            desired: valueEvidence(expected, path, 'desired', options),
+            live: valueEvidence(actual, path, 'live', options),
+        });
+    };
+    visit(desired, live, '$');
+    return differences;
+}
+function secretDataPath(path) {
+    return (path === '$.data' ||
+        path.startsWith('$.data.') ||
+        path.startsWith('$.data[') ||
+        path === '$.stringData' ||
+        path.startsWith('$.stringData.') ||
+        path.startsWith('$.stringData['));
+}
+/** Compare desired intent with live Kubernetes state after factory-owned normalization. */
+export function compareKubernetesResources(desired, live, options = {}) {
+    const desiredResult = canonicalizeResourceForComparison(desired, 'desired', options);
+    const factoryName = options.factoryName ?? getMetadataField(desired, 'factoryName');
+    // Kubernetes GET responses include GVK, but adapters and test doubles sometimes return only
+    // the object body. The request target already establishes this identity, so fill only missing
+    // envelope fields while preserving an explicit mismatch for comparison diagnostics.
+    const comparableLive = {
+        ...live,
+        apiVersion: live.apiVersion || desired.apiVersion,
+        kind: live.kind || desired.kind,
+    };
+    const liveResult = canonicalizeResourceForComparison(comparableLive, 'live', {
+        ...(factoryName ? { factoryName } : {}),
+    });
+    const redact = options.redact ??
+        (desired.kind === 'Secret' || comparableLive.kind === 'Secret'
+            ? (path) => secretDataPath(path)
+            : undefined);
+    const differences = diffCanonicalValues(desiredResult.resource, liveResult.resource, {
+        ...options,
+        ignoreAdditionalLiveFields: options.ignoreAdditionalLiveFields ?? true,
+        ...(redact ? { redact } : {}),
+    });
+    const canonicalizers = [...desiredResult.canonicalizers, ...liveResult.canonicalizers].filter((entry, index, all) => all.findIndex((candidate) => candidate.id === entry.id &&
+        candidate.revision === entry.revision &&
+        candidate.stage === entry.stage &&
+        candidate.factoryName === entry.factoryName) === index);
+    return {
+        equal: differences.length === 0,
+        identity: {
+            apiVersion: desired.apiVersion,
+            kind: desired.kind,
+            ...(desired.metadata?.name ? { name: desired.metadata.name } : {}),
+            ...(desired.metadata?.namespace ? { namespace: desired.metadata.namespace } : {}),
+        },
+        differences,
+        canonicalizers,
+    };
+}
+/** Format bounded, value-safe drift evidence for logs and domain errors. */
+export function formatCanonicalDrift(differences, maximum = 8) {
+    if (differences.length === 0)
+        return 'no drift';
+    const visible = differences
+        .slice(0, maximum)
+        .map((difference) => `${difference.path} (${difference.kind})`)
+        .join(', ');
+    const remaining = differences.length - Math.min(differences.length, maximum);
+    return remaining > 0 ? `${visible}, and ${remaining} more` : visible;
+}
+//# sourceMappingURL=live-comparison.js.map

package/dist/core/resources/live-comparison.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-comparison.js","sourceRoot":"","sources":["../../../src/core/resources/live-comparison.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE/E,OAAO,EACL,sBAAsB,EACtB,6BAA6B,GAG9B,MAAM,uBAAuB,CAAC;AAyD/B,MAAM,qBAAqB,GAAG;IAC5B,mBAAmB;IACnB,4BAA4B;IAC5B,mBAAmB;IACnB,YAAY;IACZ,eAAe;IACf,iBAAiB;IACjB,UAAU;IACV,KAAK;CACG,CAAC;AAEX,SAAS,SAAS,CAAI,KAAQ,EAAE,OAAe;IAC7C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAM,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,YAAY,CACpB,mBAAmB,OAAO,4BAA4B,EACtD,kCAAkC,EAClC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC3E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,YAAiC,EAAE,QAA4B;IAC9E,OAAO,CACL,YAAY,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,UAAU,CAAC,WAAW,EAAE;QAC3E,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAChE,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,QAA4B,EAC5B,mBAA4B;IAE5B,MAAM,WAAW,GAAG,mBAAmB,IAAI,gBAAgB,CAAC,QAAkB,EAAE,aAAa,CAAC,CAAC;IAC/F,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,YAAY,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;QACzD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,YAAY,CACpB,sBAAsB,WAAW,8CAA8C,EAC/E,qCAAqC,EACrC;gBACE,WAAW;gBACX,kBAAkB,EAAE,QAAQ,CAAC,UAAU;gBACvC,YAAY,EAAE,QAAQ,CAAC,IAAI;aAC5B,CACF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,YAAY,CACpB,sBAAsB,WAAW,qBAAqB,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,IAAI,GAAG,EAC7F,sCAAsC,EACtC;gBACE,WAAW;gBACX,kBAAkB,EAAE,QAAQ,CAAC,UAAU;gBACvC,YAAY,EAAE,QAAQ,CAAC,IAAI;gBAC3B,iBAAiB,EAAE,YAAY,CAAC,UAAU;gBAC1C,WAAW,EAAE,YAAY,CAAC,IAAI;aAC/B,CACF,CAAC;QACJ,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,aAAa,GAAG,6BAA6B,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxF,IAAI,aAAa,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC;IACvD,IACE,aAAa,CAAC,IAAI,CAChB,CAAC,YAAY,EAAE,EAAE,CACf,YAAY,CAAC,oBAAoB,KAAK,SAAS;QAC/C,YAAY,CAAC,iBAAiB,KAAK,SAAS,CAC/C,EACD,CAAC;QACD,MAAM,IAAI,YAAY,CACpB,4BAA4B,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,IAAI,0DAA0D,EAC1H,uCAAuC,EACvC;YACE,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE;SAChF,CACF,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,+BAA+B,CACtC,QAA4B,EAC5B,OAAe,EACf,YAA+D;IAE/D,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,OAAO,QAAQ,CAAC,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,OAAO,QAAQ,CAAC,CAAC,CAAC;IACrE,IAAI,kBAAkB,CAAC,KAAK,CAAC,KAAK,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,YAAY,CACpB,GAAG,OAAO,mDAAmD,EAC7D,oDAAoD,EACpD,EAAE,OAAO,EAAE,CACZ,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAc;IAChD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,MAAM,CACrE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAC1C,CAAC;IACF,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtE,CAAC;AAED,SAAS,8BAA8B,CAAC,QAA4B;IAClE,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IAC7D,OAAQ,SAAoE,CAAC,EAAE,CAAC;IAChF,OAAQ,SAAoE,CAAC,KAAK,CAAC;IACnF,OAAO,SAAS,CAAC,MAAM,CAAC;IAExB,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,EAAE,GAAG,SAAS,CAAC,QAAQ,EAA6B,CAAC;QACtE,KAAK,MAAM,KAAK,IAAI,qBAAqB;YAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;QAElE,MAAM,MAAM,GAAG,0BAA0B,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,WAAW,GAAG,0BAA0B,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACrE,IAAI,MAAM;YAAE,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC;;YAChC,OAAO,QAAQ,CAAC,MAAM,CAAC;QAC5B,IAAI,WAAW;YAAE,QAAQ,CAAC,WAAW,GAAG,WAAW,CAAC;;YAC/C,OAAO,QAAQ,CAAC,WAAW,CAAC;QACjC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3E,OAAO,QAAQ,CAAC,UAAU,CAAC;QAC7B,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,QAAQ,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrF,OAAO,QAAQ,CAAC,eAAe,CAAC;QAClC,CAAC;QACD,SAAS,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAChC,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,iCAAiC,CAC/C,QAA4B,EAC5B,IAA4B,EAC5B,UAAoE,EAAE;IAKtE,MAAM,YAAY,GAAG,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAsC,EAAE,CAAC;IACvD,IAAI,OAAO,GAAG,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC;IAEtD,IAAI,IAAI,KAAK,SAAS,IAAI,YAAY,EAAE,oBAAoB,EAAE,CAAC;QAC7D,MAAM,aAAa,GAAG,YAAY,CAAC,oBAAoB,CAAC;QACxD,OAAO,GAAG,+BAA+B,CACvC,OAAO,EACP,yBAAyB,aAAa,CAAC,EAAE,IAAI,aAAa,CAAC,QAAQ,EAAE,EACrE,aAAa,CAAC,YAAY,CAC3B,CAAC;QACF,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,aAAa,CAAC,EAAE;YACpB,QAAQ,EAAE,aAAa,CAAC,QAAQ;YAChC,KAAK,EAAE,SAAS;YAChB,WAAW,EAAE,YAAY,CAAC,WAAW;SACtC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,YAAY,EAAE,iBAAiB,EAAE,CAAC;QACpC,MAAM,aAAa,GAAG,YAAY,CAAC,iBAAiB,CAAC;QACrD,OAAO,GAAG,+BAA+B,CACvC,OAAO,EACP,iCAAiC,aAAa,CAAC,EAAE,IAAI,aAAa,CAAC,QAAQ,KAAK,IAAI,GAAG,EACvF,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CACnD,CAAC;QACF,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,aAAa,CAAC,EAAE;YACpB,QAAQ,EAAE,aAAa,CAAC,QAAQ;YAChC,KAAK,EAAE,iBAAiB;YACxB,WAAW,EAAE,YAAY,CAAC,WAAW;SACtC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,8BAA8B,CAAC,OAAO,CAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;AACzF,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACzC,OAAO,OAAO,KAA4C,CAAC;AAC7D,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC1C,OAAO,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC;AACzE,CAAC;AAED,SAAS,aAAa,CACpB,KAAc,EACd,IAAY,EACZ,IAA4B,EAC5B,OAAkC;IAElC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3F,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACtD,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC;QACtB,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC;QAC9B,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,GAAW;IAC1C,OAAO,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC;QAC3C,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE;QAClB,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;AACxC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,mBAAmB,CACjC,OAAgB,EAChB,IAAa,EACb,UAAqC,EAAE;IAEvC,MAAM,WAAW,GAA+B,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,IAAI,GAAG,CAAC;IAE9C,MAAM,KAAK,GAAG,CAAC,QAAiB,EAAE,MAAe,EAAE,IAAY,EAAQ,EAAE;QACvE,IAAI,WAAW,CAAC,MAAM,IAAI,OAAO,IAAI,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;YAAE,OAAO;QAEzE,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACrD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC9D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,YAAY,EAAE,KAAK,EAAE,EAAE,CAAC;gBAClD,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC;YAC7D,CAAC;YACD,KACE,IAAI,KAAK,GAAG,YAAY,EACxB,KAAK,GAAG,QAAQ,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM,GAAG,OAAO,EACvD,KAAK,EAAE,EACP,CAAC;gBACD,WAAW,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG;oBACzB,IAAI,EAAE,oBAAoB;oBAC1B,OAAO,EAAE,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC;iBACjF,CAAC,CAAC;YACL,CAAC;YACD,KACE,IAAI,KAAK,GAAG,YAAY,EACxB,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM,GAAG,OAAO,EACrD,KAAK,EAAE,EACP,CAAC;gBACD,WAAW,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG;oBACzB,IAAI,EAAE,uBAAuB;oBAC7B,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC;iBACzE,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC/C,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBACtC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;oBAChC,WAAW,CAAC,IAAI,CAAC;wBACf,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,oBAAoB;wBAC1B,OAAO,EAAE,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;qBACpE,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;gBAC9C,CAAC;gBACD,IAAI,WAAW,CAAC,MAAM,IAAI,OAAO;oBAAE,OAAO;YAC5C,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAC;gBACxC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC7C,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC;wBAAE,SAAS;oBAC3C,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;oBACtC,WAAW,CAAC,IAAI,CAAC;wBACf,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,uBAAuB;wBAC7B,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC;qBAC5D,CAAC,CAAC;oBACH,IAAI,WAAW,CAAC,MAAM,IAAI,OAAO;wBAAE,OAAO;gBAC5C,CAAC;YACH,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QACrC,WAAW,CAAC,IAAI,CAAC;YACf,IAAI;YACJ,IAAI,EAAE,YAAY,KAAK,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,eAAe;YACtE,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC;YAC1D,IAAI,EAAE,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC;SACnD,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1B,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,CACL,IAAI,KAAK,QAAQ;QACjB,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAC1B,IAAI,KAAK,cAAc;QACvB,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;QAChC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,CACjC,CAAC;AACJ,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,0BAA0B,CACxC,OAA2B,EAC3B,IAAwB,EACxB,UAA+C,EAAE;IAEjD,MAAM,aAAa,GAAG,iCAAiC,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACrF,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,gBAAgB,CAAC,OAAiB,EAAE,aAAa,CAAC,CAAC;IAC9F,4FAA4F;IAC5F,8FAA8F;IAC9F,oFAAoF;IACpF,MAAM,cAAc,GAAuB;QACzC,GAAG,IAAI;QACP,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU;QACjD,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI;KAChC,CAAC;IACF,MAAM,UAAU,GAAG,iCAAiC,CAAC,cAAc,EAAE,MAAM,EAAE;QAC3E,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC,CAAC;IACH,MAAM,MAAM,GACV,OAAO,CAAC,MAAM;QACd,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,KAAK,QAAQ;YAC5D,CAAC,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC;YACxC,CAAC,CAAC,SAAS,CAAC,CAAC;IACjB,MAAM,WAAW,GAAG,mBAAmB,CAAC,aAAa,CAAC,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE;QACnF,GAAG,OAAO;QACV,0BAA0B,EAAE,OAAO,CAAC,0BAA0B,IAAI,IAAI;QACtE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9B,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,CAAC,GAAG,aAAa,CAAC,cAAc,EAAE,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC,MAAM,CAC3F,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CACpB,GAAG,CAAC,SAAS,CACX,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE;QACzB,SAAS,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QACrC,SAAS,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QAC/B,SAAS,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CAC9C,KAAK,KAAK,CACd,CAAC;IACF,OAAO;QACL,KAAK,EAAE,WAAW,CAAC,MAAM,KAAK,CAAC;QAC/B,QAAQ,EAAE;YACR,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClF;QACD,WAAW;QACX,cAAc;KACf,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,oBAAoB,CAClC,WAAgD,EAChD,OAAO,GAAG,CAAC;IAEX,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC;IAChD,MAAM,OAAO,GAAG,WAAW;SACxB,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC;SACjB,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI,GAAG,CAAC;SAC9D,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7E,OAAO,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,SAAS,SAAS,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;AACvE,CAAC"}

package/dist/core/runtime/standalone-operation.d.ts

@@ -0,0 +1,12 @@
+interface StandaloneOperationOptions {
+    readonly abortSignals?: readonly (AbortSignal | undefined)[];
+}
+/**
+ * Run one standalone TypeKro operation in one lazily loaded Effect scope.
+ *
+ * The Promise facade preserves the original rejection value. Effect causes
+ * and FiberFailure wrappers never cross the public boundary.
+ */
+export declare function runStandaloneOperation<A>(operation: (abortSignal: AbortSignal) => Promise<A>, options?: StandaloneOperationOptions): Promise<A>;
+export {};
+//# sourceMappingURL=standalone-operation.d.ts.map

package/dist/core/runtime/standalone-operation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"standalone-operation.d.ts","sourceRoot":"","sources":["../../../src/core/runtime/standalone-operation.ts"],"names":[],"mappings":"AAAA,UAAU,0BAA0B;IAClC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,EAAE,CAAC;CAC9D;AAsCD;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,CAAC,EAC5C,SAAS,EAAE,CAAC,WAAW,EAAE,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,EACnD,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,CAAC,CAAC,CA+BZ"}

package/dist/core/runtime/standalone-operation.js

@@ -0,0 +1,62 @@
+function combineAbortSignals(signals) {
+    const active = signals.filter((signal) => signal !== undefined);
+    if (active.length === 0) {
+        return { signal: undefined, dispose: () => undefined };
+    }
+    if (active.length === 1) {
+        return { signal: active[0], dispose: () => undefined };
+    }
+    const controller = new AbortController();
+    const listeners = new Map();
+    for (const signal of active) {
+        const forward = () => controller.abort(signal.reason);
+        if (signal.aborted) {
+            forward();
+            break;
+        }
+        listeners.set(signal, forward);
+        signal.addEventListener('abort', forward, { once: true });
+    }
+    return {
+        signal: controller.signal,
+        dispose: () => {
+            for (const [signal, listener] of listeners) {
+                signal.removeEventListener('abort', listener);
+            }
+        },
+    };
+}
+/**
+ * Run one standalone TypeKro operation in one lazily loaded Effect scope.
+ *
+ * The Promise facade preserves the original rejection value. Effect causes
+ * and FiberFailure wrappers never cross the public boundary.
+ */
+export async function runStandaloneOperation(operation, options = {}) {
+    const combined = combineAbortSignals(options.abortSignals ?? []);
+    try {
+        if (combined.signal?.aborted) {
+            throw combined.signal.reason ?? new DOMException('The operation was aborted', 'AbortError');
+        }
+        const { Cause, Effect, Exit, Option } = await import('effect');
+        const program = Effect.scoped(Effect.tryPromise({
+            try: (abortSignal) => operation(abortSignal),
+            catch: (error) => error,
+        }));
+        const exit = await Effect.runPromiseExit(program, combined.signal ? { signal: combined.signal } : undefined);
+        if (Exit.isSuccess(exit))
+            return exit.value;
+        const failure = Exit.findErrorOption(exit);
+        if (Option.isSome(failure))
+            throw failure.value;
+        if (combined.signal?.aborted) {
+            throw combined.signal.reason ?? new DOMException('The operation was aborted', 'AbortError');
+        }
+        const rendered = Cause.prettyErrors(exit.cause);
+        throw rendered[0] ?? new Error(Cause.pretty(exit.cause));
+    }
+    finally {
+        combined.dispose();
+    }
+}
+//# sourceMappingURL=standalone-operation.js.map

package/dist/core/runtime/standalone-operation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"standalone-operation.js","sourceRoot":"","sources":["../../../src/core/runtime/standalone-operation.ts"],"names":[],"mappings":"AASA,SAAS,mBAAmB,CAAC,OAA6C;IACxE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAyB,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IACvF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,GAAG,EAA2B,CAAC;IACrD,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,EAAE,CAAC;YACV,MAAM;QACR,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC/B,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,OAAO,EAAE,GAAG,EAAE;YACZ,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC;gBAC3C,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,SAAmD,EACnD,UAAsC,EAAE;IAExC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC7B,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,YAAY,CAAC,2BAA2B,EAAE,YAAY,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAC3B,MAAM,CAAC,UAAU,CAAC;YAChB,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC;YAC5C,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;SACxB,CAAC,CACH,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,cAAc,CACtC,OAAO,EACP,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAC1D,CAAC;QACF,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAE5C,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,MAAM,OAAO,CAAC,KAAK,CAAC;QAEhD,IAAI,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC7B,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,YAAY,CAAC,2BAA2B,EAAE,YAAY,CAAC,CAAC;QAC9F,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3D,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/core/serialization/cel-references.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cel-references.d.ts","sourceRoot":"","sources":["../../../src/core/serialization/cel-references.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAQtE,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAmDhE;AAMD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,MAAM,CAGnE;AAwMD,qFAAqF;AACrF,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,MAAM,CAajG;AA4ED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,EACnD,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,GAC7B,OAAO,CAIT;AAmBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACvC,kBAAkB,GAAE,OAAc,GACjC,MAAM,GAAG,SAAS,CAyEpB;AAmDD,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,EACnD,WAAW,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAChC,MAAM,CAER;AA4HD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,EACnD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,MAAM,CAYR;AA8zBD,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,OAAO,EACZ,OAAO,CAAC,EAAE,oBAAoB,EAC9B,IAAI,SAAK,GACR,OAAO,CAgHT;AAMD;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACxC,WAAW,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EACzB,eAAe,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GAC5C,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,EAAE,CAAC,CA4K9D"}
+{"version":3,"file":"cel-references.d.ts","sourceRoot":"","sources":["../../../src/core/serialization/cel-references.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAQtE,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAmDhE;AAMD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,MAAM,CAGnE;AAwMD,qFAAqF;AACrF,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,MAAM,CAajG;AA4ED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,EACnD,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,GAC7B,OAAO,CAIT;AAmBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACvC,kBAAkB,GAAE,OAAc,GACjC,MAAM,GAAG,SAAS,CAyEpB;AAmDD,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,EACnD,WAAW,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAChC,MAAM,CAER;AAiID;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,EACnD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,MAAM,CAYR;AAw0BD,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,OAAO,EACZ,OAAO,CAAC,EAAE,oBAAoB,EAC9B,IAAI,SAAK,GACR,OAAO,CAgHT;AAMD;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACxC,WAAW,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EACzB,eAAe,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GAC5C,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,EAAE,CAAC,CA4K9D"}

package/dist/core/serialization/cel-references.js

@@ -584,6 +584,7 @@ function resolveNestedRefMarkers(str, nestedStatusCel, resourceIds, context) {
  * of the literal's natural CEL type.
  */
 const BARE_LITERAL_PATTERN = /^\s*(-?\d+(?:\.\d+)?|true|false|null)\s*$/;
+const WRAPPED_BARE_LITERAL_PATTERN = /^\$\{\s*(-?\d+(?:\.\d+)?|true|false|null)\s*\}$/;
 /**
  * Convert an inner composition's analyzed expression into a YAML-embeddable
  * segment. Recursively resolves nested references within the inner expression
@@ -610,6 +611,10 @@ function innerExprToYamlSegment(innerExpr, nestedStatusCel, context) {
         // Marker-laden — convert to mixed-template form.
         return convertKubernetesRefMarkersTocel(resolved, context);
     }
+    const wrappedLiteral = WRAPPED_BARE_LITERAL_PATTERN.exec(resolved)?.[1];
+    if (wrappedLiteral !== undefined) {
+        return `\${string(${wrappedLiteral})}`;
+    }
     if (resolved.includes('${')) {
         // Already a KRO template (from Cel.template) — pass through.
         return normalizeCelArrayIndexPaths(resolved);
@@ -1156,7 +1161,12 @@ function celValuesMergeExpression(base, overlays, context, path) {
     const normalizedOverlays = flattened.overlays;
     if (needsRuntimeMapMerge(base) ||
         normalizedOverlays.some((overlay) => needsRuntimeMapMerge(overlay))) {
-        return celRuntimeMapMergeExpression(base, normalizedOverlays, context, path || 'spec.values');
+        // json.unmarshal() is necessarily dynamically typed. Once map.merge() is applied, cel-go can
+        // infer the result as map(dyn, dyn), which KRO refuses to assign to structured object fields
+        // such as Flux HelmRelease spec.values (their keys must be statically known as strings).
+        // Erase only the final inferred type; the expression body still performs the same deep merge
+        // and KRO validates the resulting dynamic value against the destination's OpenAPI schema.
+        return `dyn(${celRuntimeMapMergeExpression(base, normalizedOverlays, context, path || 'spec.values')})`;
     }
     let merged = base;
     normalizedOverlays.forEach((overlay, index) => {