typekro 0.34.0 → 0.35.0

package/dist/alchemy/clickhouse-schema/types.js

@@ -0,0 +1,370 @@
+/**
+ * Types, validation schema and errors for the `ClickHouseSchema` alchemy resource.
+ *
+ * The configurable surface is ArkType-first: {@link ClickHouseSchemaConfigSchema} is the
+ * single source of truth and the config types are INFERRED from it, so a field cannot
+ * exist in the type without existing in the schema that validates it. Only the two
+ * fields ArkType cannot express usefully are declared separately on
+ * {@link ClickHouseSchemaProps}: `kubeConfig` (a structural TypeScript type owned by the
+ * client provider) and `executor` (a runtime-only injection point, deliberately not
+ * serializable — mirroring `TypeKroResourceProps.deployer`).
+ */
+import { type } from 'arktype';
+import { TypeKroError } from '../../core/errors.js';
+import { extractStatementSecrets, validateOnClusterStatement } from './sql.js';
+/**
+ * Accepted shape for a ClickHouse user or database name.
+ *
+ * Every value that reaches the container is embedded in a single-quoted `sh -c`
+ * word, so a value containing a quote could close that word. It cannot: names are
+ * restricted here to characters that are inert in both the shell and
+ * `clickhouse-client`'s own argument parsing, and the renderer single-quotes them
+ * anyway (defence in depth, the same pairing the S3 backup CronJob uses).
+ */
+const CLICKHOUSE_NAME_PATTERN = /^[A-Za-z0-9_][A-Za-z0-9_.-]*$/;
+/** POSIX environment variable name — what `--password "$VAR"` can expand. */
+const ENV_VAR_NAME_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
+/** `--<setting>=<value>` setting name, matching ClickHouse's own setting identifiers. */
+const SETTING_NAME_PATTERN = /^[a-z_][a-z0-9_]*$/;
+/** Setting value: scalars only. Anything needing quoting belongs in a statement. */
+const SETTING_VALUE_PATTERN = /^[A-Za-z0-9_.,:+-]+$/;
+/** Kubernetes label key: optional DNS-subdomain prefix plus a name segment. */
+const LABEL_KEY_PATTERN = /^(?:[a-z0-9](?:[a-z0-9.-]{0,251}[a-z0-9])?\/)?[A-Za-z0-9](?:[A-Za-z0-9_.-]{0,61}[A-Za-z0-9])?$/;
+/** Kubernetes label value: empty, or up to 63 alphanumeric-delimited characters. */
+const LABEL_VALUE_PATTERN = /^(?:[A-Za-z0-9](?:[A-Za-z0-9_.-]{0,61}[A-Za-z0-9])?)?$/;
+/**
+ * A plaintext credential must never be representable in props: it would be persisted
+ * verbatim into the alchemy state store. `client` therefore REJECTS undeclared keys, so
+ * `password` (and any near-miss spelling of it) fails validation instead of being
+ * silently dropped and leaving the author believing they configured authentication.
+ */
+export const ClickHouseSchemaClientSchema = type({
+    'user?': 'string > 0',
+    /**
+     * Name of the environment variable holding the password INSIDE the target container.
+     * The value is never read by TypeKro, never echoed, and never enters props or state.
+     */
+    'passwordEnv?': 'string > 0',
+    'database?': 'string > 0',
+    'port?': 'number.integer > 0',
+})
+    .onUndeclaredKey('reject')
+    .narrow((client, ctx) => {
+    if (client.user !== undefined && !CLICKHOUSE_NAME_PATTERN.test(client.user)) {
+        return ctx.mustBe('a ClickHouse user name matching [A-Za-z0-9_][A-Za-z0-9_.-]*');
+    }
+    if (client.database !== undefined && !CLICKHOUSE_NAME_PATTERN.test(client.database)) {
+        return ctx.mustBe('a ClickHouse database name matching [A-Za-z0-9_][A-Za-z0-9_.-]*');
+    }
+    if (client.passwordEnv !== undefined && !ENV_VAR_NAME_PATTERN.test(client.passwordEnv)) {
+        return ctx.mustBe('an environment variable name matching [A-Za-z_][A-Za-z0-9_]*');
+    }
+    if (client.port !== undefined && client.port > 65535) {
+        return ctx.mustBe('a TCP port <= 65535');
+    }
+    return true;
+});
+/** How to reach the ClickHouse server: a namespace, a label selector, and a container. */
+export const ClickHouseSchemaTargetSchema = type({
+    namespace: 'string > 0',
+    /**
+     * Label selector for the server pods — e.g. the Altinity CHI label
+     * `{ 'clickhouse.altinity.com/chi': 'orders' }`.
+     *
+     * Which of the matching pods are used is the execution model's business, not the
+     * selector's: `fanout` executes against every matching pod and requires all of them to
+     * be Ready, `onCluster` against the first Ready one. A selector that also matches
+     * non-server pods therefore fails a `fanout` converge rather than quietly skipping them
+     * — narrow it. See {@link ClickHouseSchemaExecutionSchema}.
+     */
+    podSelector: 'Record<string, string>',
+    /** Container to exec into. Defaults to the CHI server container, `clickhouse`. */
+    'container?': 'string > 0',
+}).narrow((target, ctx) => {
+    const entries = Object.entries(target.podSelector);
+    if (entries.length === 0) {
+        return ctx.mustBe('a non-empty pod label selector');
+    }
+    for (const [key, value] of entries) {
+        if (!LABEL_KEY_PATTERN.test(key)) {
+            return ctx.mustBe(`a valid Kubernetes label key (got '${key}')`);
+        }
+        if (!LABEL_VALUE_PATTERN.test(value)) {
+            return ctx.mustBe(`a valid Kubernetes label value for '${key}'`);
+        }
+    }
+    return true;
+});
+/** Bounded wait for a Ready server pod before the first exec. */
+export const ClickHouseSchemaWaitForPodSchema = type({
+    timeoutMs: 'number.integer > 0',
+});
+/** Bounded retry of TRANSIENT exec failures. A SQL error is never retried. */
+export const ClickHouseSchemaRetrySchema = type({
+    'maxAttempts?': 'number.integer > 0',
+    'backoffMs?': 'number.integer >= 0',
+});
+/**
+ * How the statements reach EVERY server, not just the one the exec landed on.
+ *
+ * ClickHouse DDL is server-local by default. `CREATE TABLE …` executed on one pod creates
+ * that table on that pod and nowhere else, so on a multi-replica or multi-shard
+ * deployment a converge that touches a single pod reports success while the rest of the
+ * cluster has no schema — and then never tries again, because the fingerprint says the
+ * work is done. Two mechanisms make DDL cluster-wide, and this resource requires one of
+ * them to be chosen explicitly:
+ *
+ * - `fanout` (the default) — TypeKro runs the ordered statement list against EVERY pod
+ *   matching the selector, in turn. It needs nothing from the cluster (no Keeper, no
+ *   `Replicated` database engine) and leans on exactly the idempotence the statements
+ *   already promise. It is ALL OR NOTHING: every matching pod that is not terminating or
+ *   finished must become Ready within `waitForPod.timeoutMs` and must carry the requested
+ *   container, or the converge fails — so a StatefulSet mid-rollout makes the resource
+ *   wait, and then fail, rather than fingerprint a half-applied schema. The pod set is
+ *   recorded in state, so a scale-out or a replaced pod re-applies even though the
+ *   statements did not change. A single-replica installation is a one-pod fanout — which
+ *   is why the default is also the correct setting there.
+ * - `onCluster` — the statements distribute themselves and TypeKro runs them ONCE, on the
+ *   first Ready pod; pods that are still rolling are Keeper's problem, not this converge's,
+ *   which is what makes this the right mode on a large cluster. That is only true if each
+ *   statement actually says so, so every statement is validated at construction; see
+ *   {@link ClickHouseSchemaConfigSchema}.
+ *
+ * @see https://clickhouse.com/docs/sql-reference/distributed-ddl
+ */
+export const ClickHouseSchemaExecutionSchema = type({ mode: "'fanout'" }).or({
+    mode: "'onCluster'",
+    /** The `ON CLUSTER` target — a CHI's `clusterName`, which defaults to `cluster`. */
+    cluster: 'string > 0',
+});
+/** Applied when an author declares no execution model. */
+export const DEFAULT_EXECUTION = { mode: 'fanout' };
+/**
+ * The configurable (serializable) surface of a `ClickHouseSchema` resource.
+ *
+ * IDEMPOTENCE IS THE AUTHOR'S CONTRACT. Every statement is re-run whenever the
+ * fingerprint changes, so each one must be safe to execute against a database where
+ * it has already been executed: `CREATE DATABASE IF NOT EXISTS`, `CREATE TABLE IF NOT
+ * EXISTS`, `CREATE OR REPLACE VIEW`, `ALTER TABLE ... ADD COLUMN IF NOT EXISTS`,
+ * `DROP ... IF EXISTS`. TypeKro cannot verify that property — it does not parse SQL —
+ * so a non-idempotent statement surfaces as a converge that fails the second time.
+ */
+export const ClickHouseSchemaConfigSchema = type({
+    target: ClickHouseSchemaTargetSchema,
+    'client?': ClickHouseSchemaClientSchema,
+    /** Ordered DDL. Executed in array order; each must be individually idempotent. */
+    statements: 'string[] > 0',
+    /** Passed to `clickhouse-client` as `--<setting>=<value>`. Identifiers validated. */
+    'settings?': 'Record<string, string | number>',
+    /**
+     * `retain` (the default) leaves every object in place on delete: a schema resource
+     * must never drop data because a stack was torn down. `run` executes
+     * {@link deleteStatements} instead, which is the only way to express a destructive
+     * teardown and requires spelling out exactly what gets dropped.
+     */
+    onDelete: "'retain' | 'run' = 'retain'",
+    'deleteStatements?': 'string[]',
+    'waitForPod?': ClickHouseSchemaWaitForPodSchema,
+    /**
+     * `fanout` only: how many times an apply re-lists and applies to pods that appeared
+     * while it was running, before failing rather than recording a partial apply.
+     *
+     * Defaults to 3. A settled cluster costs exactly one pass, so raising this only matters
+     * on a cluster whose topology is moving throughout the converge; the whole loop is also
+     * bounded by `waitForPod.timeoutMs`, spent across the passes rather than renewed by each
+     * one. Deliberately NOT part of the fingerprint: like `waitForPod`, `retry` and
+     * `statementTimeoutMs`, it says how the apply is driven, not what is applied, so changing
+     * it must not re-run DDL. Ignored under `onCluster`, which has no coverage to reconcile.
+     */
+    'maxReconcilePasses?': 'number.integer > 0',
+    /** Per-statement exec timeout. A long `CREATE MATERIALIZED VIEW ... POPULATE` may need more. */
+    'statementTimeoutMs?': 'number.integer > 0',
+    'retry?': ClickHouseSchemaRetrySchema,
+    /** How the DDL reaches every server. Defaults to `fanout`. */
+    execution: ClickHouseSchemaExecutionSchema.default(() => DEFAULT_EXECUTION),
+})
+    // Undeclared keys are REJECTED, for the same reason `client` rejects them: a
+    // misunderstood option that is silently dropped leaves the author believing they
+    // configured something. It is also what retires `replicatedDatabases` — an allow-list
+    // that used to accept clause-free `onCluster` statements, and did so by inspecting a
+    // statement's references rather than its DDL target — loudly rather than by ignoring it.
+    .onUndeclaredKey('reject')
+    .narrow((config, ctx) => {
+    const blank = config.statements.findIndex((statement) => statement.trim().length === 0);
+    if (blank !== -1) {
+        return ctx.mustBe(`non-empty statements (statement ${blank} is blank)`);
+    }
+    if (config.onDelete === 'run') {
+        if (config.deleteStatements === undefined || config.deleteStatements.length === 0) {
+            return ctx.mustBe("accompanied by a non-empty 'deleteStatements' when onDelete is 'run'");
+        }
+        const blankDelete = config.deleteStatements.findIndex((s) => s.trim().length === 0);
+        if (blankDelete !== -1) {
+            return ctx.mustBe(`non-empty deleteStatements (statement ${blankDelete} is blank)`);
+        }
+    }
+    else if (config.deleteStatements !== undefined) {
+        // Rejected rather than ignored: statements that can never run are a silent footgun,
+        // and the author who wrote them believes teardown is covered.
+        return ctx.mustBe("declared without 'deleteStatements' when onDelete is 'retain'");
+    }
+    for (const [name, value] of Object.entries(config.settings ?? {})) {
+        if (!SETTING_NAME_PATTERN.test(name)) {
+            return ctx.mustBe(`a ClickHouse setting name matching [a-z_][a-z0-9_]* (got '${name}')`);
+        }
+        if (!SETTING_VALUE_PATTERN.test(String(value))) {
+            return ctx.mustBe(`a scalar setting value for '${name}'`);
+        }
+    }
+    // `onCluster` is a PROMISE that one execution reaches every server, and the ONLY thing
+    // accepted as proof is an explicit `ON CLUSTER <cluster>` clause. It is checked here,
+    // at construction, rather than at converge time: a statement that cannot keep the
+    // promise would otherwise apply to one replica, record a fingerprint, and never be
+    // retried. TypeKro validates and refuses — it never edits the author's SQL to make the
+    // promise true, and it never infers cluster-wideness from a statement's shape.
+    if (config.execution.mode === 'onCluster') {
+        const cluster = config.execution.cluster;
+        const lists = [
+            ['statements', config.statements],
+            ['deleteStatements', config.deleteStatements ?? []],
+        ];
+        for (const [field, statements] of lists) {
+            for (const [index, statement] of statements.entries()) {
+                const reason = validateOnClusterStatement(statement, cluster);
+                if (reason !== undefined) {
+                    return ctx.mustBe(`cluster-wide under execution.mode 'onCluster' (${field} ${index} ${reason})`);
+                }
+            }
+        }
+    }
+    return true;
+});
+/**
+ * A statement failed, a pod never became Ready, or the transport gave up.
+ *
+ * SECURITY: the failing statement's TEXT is never carried on the error — only its
+ * INDEX. Statements should not contain credentials (bind them through the server's own
+ * configuration, as the S3 storage compiler does), but a `CREATE TABLE ... S3(...,
+ * aws_secret_access_key)` would, and ClickHouse echoes the offending fragment back in
+ * its own message. Every message that reaches this error is passed through
+ * {@link redactClickHouseText} first.
+ */
+export class ClickHouseSchemaError extends TypeKroError {
+    resourceId;
+    statementIndex;
+    clickHouseCode;
+    detail;
+    clickHouseException;
+    constructor(message, 
+    /** The alchemy resource `id` — the logical name the author gave THIS schema. */
+    resourceId, 
+    /** Index into `statements` (or `deleteStatements`), or `undefined` outside statement execution. */
+    statementIndex, 
+    /** ClickHouse's own error code, parsed from `Code: <n>.`, when the server produced one. */
+    clickHouseCode, 
+    /** Redacted, length-capped server output — see {@link redactClickHouseOutput}. */
+    detail, 
+    /** ClickHouse's exception class (`DB::Exception`, `DB::NetException`, …). */
+    clickHouseException, options) {
+        super(message, 'CLICKHOUSE_SCHEMA_ERROR', { resourceId, statementIndex, clickHouseCode, clickHouseException, detail }, options);
+        this.resourceId = resourceId;
+        this.statementIndex = statementIndex;
+        this.clickHouseCode = clickHouseCode;
+        this.detail = detail;
+        this.clickHouseException = clickHouseException;
+        this.name = 'ClickHouseSchemaError';
+    }
+}
+/**
+ * Patterns whose surroundings are redacted out of any text that leaves the container.
+ *
+ * Matched case-insensitively against a whole line, because ClickHouse reports a bad
+ * table definition by quoting the definition — which is precisely where a secret would
+ * be if one were ever written into a statement.
+ *
+ * This is the SECOND layer only. It cannot see a credential the server echoes without a
+ * nearby keyword, which is exactly what a positional table function produces:
+ * `S3('https://…', 'AKIA…', 'wJalr…', 'CSV')` has the secret in argument three and the
+ * word "secret" nowhere. {@link redactClickHouseOutput} is the first layer and does not
+ * rely on keywords at all.
+ */
+const SECRET_LINE_PATTERN = /password|secret|aws_secret|access_key|credential|token/i;
+/** Replace every line that could carry a credential with a marker. */
+export function redactClickHouseText(text) {
+    return text
+        .split('\n')
+        .map((line) => (SECRET_LINE_PATTERN.test(line) ? '[redacted]' : line))
+        .join('\n');
+}
+/**
+ * Ceiling on the server text retained on an error (~2 KiB).
+ *
+ * An echo is a diagnostic aid, not a log sink: a `DESCRIBE`-sized dump or a multi-megabyte
+ * parser trace carried into alchemy state and every log line is a liability of its own,
+ * independent of whether it contains a secret.
+ */
+export const MAX_RETAINED_DETAIL_CHARS = 2048;
+const TRUNCATION_MARKER = '… [truncated]';
+/**
+ * What survives from a failed exec's captured output.
+ *
+ * The contract is NOT "server output with credentials filtered out" — that framing is how
+ * the keyword-matching version came to leak. It is: keep what identifies the failure, and
+ * treat every value the SUBMITTED statement contained as a secret.
+ *
+ * In order:
+ *
+ * 1. The statement text itself is replaced wherever the server echoed it back, so a
+ *    definition quoted in full cannot smuggle its own literals through.
+ * 2. Every literal the statement contains — every single-quoted value, plus whatever
+ *    follows `PASSWORD` / `IDENTIFIED BY` / `access_key_id` / `secret_access_key` /
+ *    `aws_access_key_id` / `aws_secret_access_key` / `token` — is replaced with
+ *    `<redacted>` wherever it appears. This is positional, so it catches the arguments
+ *    keyword matching cannot name. Each literal is redacted in EVERY spelling it could be
+ *    echoed in, longest first: the decoded value, the raw source slice between the quotes,
+ *    and the value re-escaped both ways ClickHouse accepts (`\'` and `''`). A credential
+ *    containing a quote is one secret with several spellings, and the server frequently
+ *    quotes back the one it was given rather than the one it decoded.
+ * 3. The keyword line filter runs as a second layer, for text the statement did not
+ *    account for.
+ * 4. The result is capped at {@link MAX_RETAINED_DETAIL_CHARS}.
+ *
+ * ClickHouse's error CODE and exception class are parsed out BEFORE any of this and
+ * carried separately on the error, so redaction never costs the caller the one part of
+ * the message that says what went wrong.
+ */
+export function redactClickHouseOutput(output, statement) {
+    let text = output;
+    if (statement !== undefined) {
+        const trimmed = statement.trim();
+        if (trimmed.length >= 8)
+            text = text.split(trimmed).join('<redacted>');
+        for (const secret of extractStatementSecrets(statement)) {
+            text = text.split(secret).join('<redacted>');
+        }
+    }
+    text = redactClickHouseText(text);
+    return text.length <= MAX_RETAINED_DETAIL_CHARS
+        ? text
+        : `${text.slice(0, MAX_RETAINED_DETAIL_CHARS)}${TRUNCATION_MARKER}`;
+}
+/** Parse ClickHouse's `Code: 62. DB::Exception: …` prefix out of server output. */
+export function parseClickHouseErrorCode(text) {
+    const match = /Code:\s*(\d+)/.exec(text);
+    if (!match?.[1])
+        return undefined;
+    const code = Number.parseInt(match[1], 10);
+    return Number.isNaN(code) ? undefined : code;
+}
+/**
+ * Parse the exception CLASS (`DB::Exception`, `DB::NetException`, `Poco::Exception`) out
+ * of server output.
+ *
+ * Retained alongside the numeric code because the two say different things: the code
+ * names the condition, the class says which subsystem raised it — and neither can carry
+ * a credential, so both survive redaction intact.
+ */
+export function parseClickHouseExceptionName(text) {
+    return /\b([A-Za-z][A-Za-z0-9_]*(?:::[A-Za-z][A-Za-z0-9_]*)+)/.exec(text)?.[1];
+}
+//# sourceMappingURL=types.js.map

package/dist/alchemy/clickhouse-schema/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/alchemy/clickhouse-schema/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,OAAO,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,MAAM,UAAU,CAAC;AAE/E;;;;;;;;GAQG;AACH,MAAM,uBAAuB,GAAG,+BAA+B,CAAC;AAEhE,6EAA6E;AAC7E,MAAM,oBAAoB,GAAG,0BAA0B,CAAC;AAExD,yFAAyF;AACzF,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AAElD,oFAAoF;AACpF,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AAErD,+EAA+E;AAC/E,MAAM,iBAAiB,GACrB,gGAAgG,CAAC;AAEnG,oFAAoF;AACpF,MAAM,mBAAmB,GAAG,wDAAwD,CAAC;AAErF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;IAC/C,OAAO,EAAE,YAAY;IACrB;;;OAGG;IACH,cAAc,EAAE,YAAY;IAC5B,WAAW,EAAE,YAAY;IACzB,OAAO,EAAE,oBAAoB;CAC9B,CAAC;KACC,eAAe,CAAC,QAAQ,CAAC;KACzB,MAAM,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;IACtB,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5E,OAAO,GAAG,CAAC,MAAM,CAAC,6DAA6D,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpF,OAAO,GAAG,CAAC,MAAM,CAAC,iEAAiE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QACvF,OAAO,GAAG,CAAC,MAAM,CAAC,8DAA8D,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,GAAG,KAAK,EAAE,CAAC;QACrD,OAAO,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC,CAAC;AAEL,0FAA0F;AAC1F,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;IAC/C,SAAS,EAAE,YAAY;IACvB;;;;;;;;;OASG;IACH,WAAW,EAAE,wBAAwB;IACrC,kFAAkF;IAClF,YAAY,EAAE,YAAY;CAC3B,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;IACxB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACnD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAAC;IACtD,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,OAAO,GAAG,CAAC,MAAM,CAAC,sCAAsC,GAAG,IAAI,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,OAAO,GAAG,CAAC,MAAM,CAAC,uCAAuC,GAAG,GAAG,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC,CAAC;AAEH,iEAAiE;AACjE,MAAM,CAAC,MAAM,gCAAgC,GAAG,IAAI,CAAC;IACnD,SAAS,EAAE,oBAAoB;CAChC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC;IAC9C,cAAc,EAAE,oBAAoB;IACpC,YAAY,EAAE,qBAAqB;CACpC,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC;IAC3E,IAAI,EAAE,aAAa;IACnB,oFAAoF;IACpF,OAAO,EAAE,YAAY;CACtB,CAAC,CAAC;AAIH,0DAA0D;AAC1D,MAAM,CAAC,MAAM,iBAAiB,GAA8B,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAE/E;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;IAC/C,MAAM,EAAE,4BAA4B;IACpC,SAAS,EAAE,4BAA4B;IACvC,kFAAkF;IAClF,UAAU,EAAE,cAAc;IAC1B,qFAAqF;IACrF,WAAW,EAAE,iCAAiC;IAC9C;;;;;OAKG;IACH,QAAQ,EAAE,6BAA6B;IACvC,mBAAmB,EAAE,UAAU;IAC/B,aAAa,EAAE,gCAAgC;IAC/C;;;;;;;;;;OAUG;IACH,qBAAqB,EAAE,oBAAoB;IAC3C,gGAAgG;IAChG,qBAAqB,EAAE,oBAAoB;IAC3C,QAAQ,EAAE,2BAA2B;IACrC,8DAA8D;IAC9D,SAAS,EAAE,+BAA+B,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC;CAC5E,CAAC;IACA,6EAA6E;IAC7E,iFAAiF;IACjF,sFAAsF;IACtF,qFAAqF;IACrF,yFAAyF;KACxF,eAAe,CAAC,QAAQ,CAAC;KACzB,MAAM,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;IACtB,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;IACxF,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,OAAO,GAAG,CAAC,MAAM,CAAC,mCAAmC,KAAK,YAAY,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClF,OAAO,GAAG,CAAC,MAAM,CAAC,sEAAsE,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;QACpF,IAAI,WAAW,KAAK,CAAC,CAAC,EAAE,CAAC;YACvB,OAAO,GAAG,CAAC,MAAM,CAAC,yCAAyC,WAAW,YAAY,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;SAAM,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACjD,oFAAoF;QACpF,8DAA8D;QAC9D,OAAO,GAAG,CAAC,MAAM,CAAC,+DAA+D,CAAC,CAAC;IACrF,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,OAAO,GAAG,CAAC,MAAM,CAAC,6DAA6D,IAAI,IAAI,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC/C,OAAO,GAAG,CAAC,MAAM,CAAC,+BAA+B,IAAI,GAAG,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,uFAAuF;IACvF,sFAAsF;IACtF,kFAAkF;IAClF,mFAAmF;IACnF,uFAAuF;IACvF,+EAA+E;IAC/E,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;QACzC,MAAM,KAAK,GAAwD;YACjE,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC;YACjC,CAAC,kBAAkB,EAAE,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;SACpD,CAAC;QACF,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,KAAK,EAAE,CAAC;YACxC,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;gBACtD,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBAC9D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,OAAO,GAAG,CAAC,MAAM,CACf,kDAAkD,KAAK,IAAI,KAAK,IAAI,MAAM,GAAG,CAC9E,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC,CAAC;AA+ML;;;;;;;;;GASG;AACH,MAAM,OAAO,qBAAsB,SAAQ,YAAY;IAInC;IAEA;IAEA;IAEA;IAEA;IAXlB,YACE,OAAe;IACf,gFAAgF;IAChE,UAAkB;IAClC,mGAAmG;IACnF,cAAuB;IACvC,2FAA2F;IAC3E,cAAuB;IACvC,kFAAkF;IAClE,MAAe;IAC/B,6EAA6E;IAC7D,mBAA4B,EAC5C,OAAsB;QAEtB,KAAK,CACH,OAAO,EACP,yBAAyB,EACzB,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,EAAE,EAC3E,OAAO,CACR,CAAC;QAhBc,eAAU,GAAV,UAAU,CAAQ;QAElB,mBAAc,GAAd,cAAc,CAAS;QAEvB,mBAAc,GAAd,cAAc,CAAS;QAEvB,WAAM,GAAN,MAAM,CAAS;QAEf,wBAAmB,GAAnB,mBAAmB,CAAS;QAS5C,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,mBAAmB,GAAG,yDAAyD,CAAC;AAEtF,sEAAsE;AACtE,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,IAAI;SACR,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SACrE,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAE9C,MAAM,iBAAiB,GAAG,eAAe,CAAC;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc,EAAE,SAAkB;IACvE,IAAI,IAAI,GAAG,MAAM,CAAC;IAElB,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC;YAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvE,KAAK,MAAM,MAAM,IAAI,uBAAuB,CAAC,SAAS,CAAC,EAAE,CAAC;YACxD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAElC,OAAO,IAAI,CAAC,MAAM,IAAI,yBAAyB;QAC7C,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,yBAAyB,CAAC,GAAG,iBAAiB,EAAE,CAAC;AACxE,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAAC,IAAY;IACvD,OAAO,uDAAuD,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACjF,CAAC"}

package/dist/alchemy/index.d.ts

@@ -6,6 +6,7 @@
  *
  * Uses dynamic resource registration to avoid "Resource already exists" errors.
  */
+export { applyClickHouseSchema, CLICKHOUSE_SCHEMA_RESOURCE_TYPE, type ClickHouseExecCommand, type ClickHouseExecResult, type ClickHouseExecutor, type ClickHousePodSummary, ClickHouseSchema, type ClickHouseSchemaAppliedPod, type ClickHouseSchemaClient, ClickHouseSchemaClientSchema, type ClickHouseSchemaConfig, type ClickHouseSchemaConfigInput, ClickHouseSchemaConfigSchema, ClickHouseSchemaError, type ClickHouseSchemaExecution, ClickHouseSchemaExecutionSchema, type ClickHouseSchemaProps, type ClickHouseSchemaR, type ClickHouseSchemaResourceProps, type ClickHouseSchemaRunContext, type ClickHouseSchemaRuntimeDeps, type ClickHouseSchemaState, type ClickHouseSchemaTarget, ClickHouseSchemaTargetSchema, type ClickHouseSqlToken, clickHouseSchema, clickHouseSchemaProvider, computeFingerprint, DEFAULT_CLICKHOUSE_CONTAINER, DEFAULT_CLICKHOUSE_DATABASE, DEFAULT_CLICKHOUSE_PASSWORD_ENV, DEFAULT_CLICKHOUSE_PORT, DEFAULT_CLICKHOUSE_USER, DEFAULT_EXECUTION, DEFAULT_MAX_RECONCILE_PASSES, DEFAULT_STATEMENT_TIMEOUT_MS, DEFAULT_WAIT_FOR_POD_TIMEOUT_MS, deleteClickHouseSchema, escapeClickHouseString, extractStatementSecrets, KubeExecClickHouseExecutor, leadingKeyword, MAX_RETAINED_DETAIL_CHARS, needsApply, parseClickHouseErrorCode, parseClickHouseExceptionName, redactClickHouseOutput, redactClickHouseText, renderClickHouseCommand, runStatements, selectExecutionPods, statementTargetsCluster, tokenizeClickHouseSql, validateOnClusterStatement, } from './clickhouse-schema/index.js';
 export { DirectTypeKroDeployer, KroTypeKroDeployer } from './deployers.js';
 export type { AlchemyPromise, AlchemyResolutionContext, AlchemyResource } from './resolver.js';
 export { buildResourceGraphWithDeferredResolution, containsAlchemyPromises, createAlchemyReferenceResolver, createAlchemyResourceConfig, createAlchemyResourceConfigs, extractAlchemyPromises, hasMixedDependencies, isAlchemyPromise, isAlchemyResource, resolveAlchemyPromise, resolveAllReferences, resolveAllReferencesInAlchemyContext, resolveReferencesWithAlchemy, resolveTypeKroReferencesOnly, } from './resolver.js';

package/dist/alchemy/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/alchemy/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAC3E,YAAY,EAAE,cAAc,EAAE,wBAAwB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAG/F,OAAO,EACL,wCAAwC,EACxC,uBAAuB,EACvB,8BAA8B,EAC9B,2BAA2B,EAC3B,4BAA4B,EAC5B,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,oCAAoC,EACpC,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAG/D,OAAO,EACL,6BAA6B,EAC7B,iBAAiB,EACjB,WAAW,EACX,WAAW,EACX,2BAA2B,GAC5B,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,mCAAmC,EAAE,MAAM,qBAAqB,CAAC;AAE1E,YAAY,EACV,sBAAsB,EACtB,0BAA0B,EAC1B,oBAAoB,EACpB,kCAAkC,EAClC,6BAA6B,EAC7B,eAAe,EACf,eAAe,EACf,oBAAoB,GACrB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAGzD,OAAO,EAAE,+BAA+B,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/alchemy/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EACL,qBAAqB,EACrB,+BAA+B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,gBAAgB,EAChB,KAAK,0BAA0B,EAC/B,KAAK,sBAAsB,EAC3B,4BAA4B,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,2BAA2B,EAChC,4BAA4B,EAC5B,qBAAqB,EACrB,KAAK,yBAAyB,EAC9B,+BAA+B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,6BAA6B,EAClC,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAChC,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,4BAA4B,EAC5B,KAAK,kBAAkB,EACvB,gBAAgB,EAChB,wBAAwB,EACxB,kBAAkB,EAClB,4BAA4B,EAC5B,2BAA2B,EAC3B,+BAA+B,EAC/B,uBAAuB,EACvB,uBAAuB,EACvB,iBAAiB,EACjB,4BAA4B,EAC5B,4BAA4B,EAC5B,+BAA+B,EAC/B,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,0BAA0B,EAC1B,cAAc,EACd,yBAAyB,EACzB,UAAU,EACV,wBAAwB,EACxB,4BAA4B,EAC5B,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,aAAa,EACb,mBAAmB,EACnB,uBAAuB,EACvB,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAC3E,YAAY,EAAE,cAAc,EAAE,wBAAwB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAG/F,OAAO,EACL,wCAAwC,EACxC,uBAAuB,EACvB,8BAA8B,EAC9B,2BAA2B,EAC3B,4BAA4B,EAC5B,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,oCAAoC,EACpC,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAG/D,OAAO,EACL,6BAA6B,EAC7B,iBAAiB,EACjB,WAAW,EACX,WAAW,EACX,2BAA2B,GAC5B,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,mCAAmC,EAAE,MAAM,qBAAqB,CAAC;AAE1E,YAAY,EACV,sBAAsB,EACtB,0BAA0B,EAC1B,oBAAoB,EACpB,kCAAkC,EAClC,6BAA6B,EAC7B,eAAe,EACf,eAAe,EACf,oBAAoB,GACrB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAGzD,OAAO,EAAE,+BAA+B,EAAE,MAAM,cAAc,CAAC"}

package/dist/alchemy/index.js

@@ -6,6 +6,8 @@
  *
  * Uses dynamic resource registration to avoid "Resource already exists" errors.
  */
+// ClickHouse schema management: converge-time DDL applied through `pods/exec`.
+export { applyClickHouseSchema, CLICKHOUSE_SCHEMA_RESOURCE_TYPE, ClickHouseSchema, ClickHouseSchemaClientSchema, ClickHouseSchemaConfigSchema, ClickHouseSchemaError, ClickHouseSchemaExecutionSchema, ClickHouseSchemaTargetSchema, clickHouseSchema, clickHouseSchemaProvider, computeFingerprint, DEFAULT_CLICKHOUSE_CONTAINER, DEFAULT_CLICKHOUSE_DATABASE, DEFAULT_CLICKHOUSE_PASSWORD_ENV, DEFAULT_CLICKHOUSE_PORT, DEFAULT_CLICKHOUSE_USER, DEFAULT_EXECUTION, DEFAULT_MAX_RECONCILE_PASSES, DEFAULT_STATEMENT_TIMEOUT_MS, DEFAULT_WAIT_FOR_POD_TIMEOUT_MS, deleteClickHouseSchema, escapeClickHouseString, extractStatementSecrets, KubeExecClickHouseExecutor, leadingKeyword, MAX_RETAINED_DETAIL_CHARS, needsApply, parseClickHouseErrorCode, parseClickHouseExceptionName, redactClickHouseOutput, redactClickHouseText, renderClickHouseCommand, runStatements, selectExecutionPods, statementTargetsCluster, tokenizeClickHouseSql, validateOnClusterStatement, } from './clickhouse-schema/index.js';
 // Deployer implementations
 export { DirectTypeKroDeployer, KroTypeKroDeployer } from './deployers.js';
 // Reference resolution

package/dist/alchemy/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/alchemy/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,2BAA2B;AAC3B,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAG3E,uBAAuB;AACvB,OAAO,EACL,wCAAwC,EACxC,uBAAuB,EACvB,8BAA8B,EAC9B,2BAA2B,EAC3B,4BAA4B,EAC5B,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,oCAAoC,EACpC,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,eAAe,CAAC;AAEvB,wFAAwF;AACxF,uFAAuF;AACvF,OAAO,EACL,6BAA6B,EAC7B,iBAAiB,EACjB,WAAW,EACX,WAAW,EACX,2BAA2B,GAC5B,MAAM,4BAA4B,CAAC;AACpC,iBAAiB;AACjB,OAAO,EAAE,mCAAmC,EAAE,MAAM,qBAAqB,CAAC;AAa1E,oBAAoB;AACpB,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,oBAAoB;AACpB,OAAO,EAAE,+BAA+B,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/alchemy/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,+EAA+E;AAC/E,OAAO,EACL,qBAAqB,EACrB,+BAA+B,EAK/B,gBAAgB,EAGhB,4BAA4B,EAG5B,4BAA4B,EAC5B,qBAAqB,EAErB,+BAA+B,EAQ/B,4BAA4B,EAE5B,gBAAgB,EAChB,wBAAwB,EACxB,kBAAkB,EAClB,4BAA4B,EAC5B,2BAA2B,EAC3B,+BAA+B,EAC/B,uBAAuB,EACvB,uBAAuB,EACvB,iBAAiB,EACjB,4BAA4B,EAC5B,4BAA4B,EAC5B,+BAA+B,EAC/B,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,0BAA0B,EAC1B,cAAc,EACd,yBAAyB,EACzB,UAAU,EACV,wBAAwB,EACxB,4BAA4B,EAC5B,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,aAAa,EACb,mBAAmB,EACnB,uBAAuB,EACvB,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,8BAA8B,CAAC;AACtC,2BAA2B;AAC3B,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAG3E,uBAAuB;AACvB,OAAO,EACL,wCAAwC,EACxC,uBAAuB,EACvB,8BAA8B,EAC9B,2BAA2B,EAC3B,4BAA4B,EAC5B,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,oCAAoC,EACpC,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,eAAe,CAAC;AAEvB,wFAAwF;AACxF,uFAAuF;AACvF,OAAO,EACL,6BAA6B,EAC7B,iBAAiB,EACjB,WAAW,EACX,WAAW,EACX,2BAA2B,GAC5B,MAAM,4BAA4B,CAAC;AACpC,iBAAiB;AACjB,OAAO,EAAE,mCAAmC,EAAE,MAAM,qBAAqB,CAAC;AAa1E,oBAAoB;AACpB,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,oBAAoB;AACpB,OAAO,EAAE,+BAA+B,EAAE,MAAM,cAAc,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "typekro",
-  "version": "0.34.0",
+  "version": "0.35.0",
   "description": "A control plane aware framework for orchestrating kubernetes resources like a programmer.",
   "type": "module",
   "repository": {