typekro 0.4.0 → 0.7.0

package/dist/core/kubernetes/errors.js

@@ -24,7 +24,7 @@ const logger = getComponentLogger('kubernetes-errors');
  * ```typescript
  * try {
  *   await api.read(resource);
- * } catch (error) {
+ * } catch (error: unknown) {
  *   const statusCode = getErrorStatusCode(error);
  *   if (statusCode === 404) {
  *     // Handle not found
@@ -69,7 +69,7 @@ export function getErrorStatusCode(error) {
  * ```typescript
  * try {
  *   await api.read(resource);
- * } catch (error) {
+ * } catch (error: unknown) {
  *   if (isNotFoundError(error)) {
  *     console.log('Resource does not exist');
  *   }
@@ -93,7 +93,7 @@ export function isNotFoundError(error) {
  * ```typescript
  * try {
  *   await api.create(resource);
- * } catch (error) {
+ * } catch (error: unknown) {
  *   if (isConflictError(error)) {
  *     console.log('Resource already exists');
  *   }
@@ -131,7 +131,7 @@ const RETRYABLE_STATUS_CODES = [
  * ```typescript
  * try {
  *   await api.read(resource);
- * } catch (error) {
+ * } catch (error: unknown) {
  *   if (isRetryableError(error)) {
  *     // Retry the operation
  *   } else {
@@ -188,7 +188,7 @@ export function isRetryableError(error) {
  * ```typescript
  * try {
  *   await api.read(resource);
- * } catch (error) {
+ * } catch (error: unknown) {
  *   console.error(formatKubernetesError(error));
  *   // Output: "Kubernetes API error (404): Not Found - the resource does not exist"
  * }

package/dist/core/kubernetes/index.d.ts

@@ -7,13 +7,14 @@
  * - API utilities for common operations
  * - Error handling utilities for consistent error management
  */
-export { KubernetesClientProvider, createKubernetesClientProvider, createKubernetesClientProviderWithKubeConfig, getKubernetesClientProvider, getKubernetesApi, getKubeConfig, getCoreV1Api, getAppsV1Api, } from './client-provider.js';
-export type { KubernetesClientConfig, KubernetesApiConsumer, KubeConfigConsumer, RetryOptions, } from './client-provider.js';
 export { KubernetesApi } from './api.js';
-export { getErrorStatusCode, isNotFoundError, isConflictError, isRetryableError, formatKubernetesError, isUnauthorizedError, isForbiddenError, isBadRequestError, isValidationError, getErrorReason, getErrorDetails, } from './errors.js';
+export { createBunCompatibleApiClient, createBunCompatibleApiextensionsV1Api, createBunCompatibleAppsV1Api, createBunCompatibleBatchV1Api, createBunCompatibleCoreV1Api, createBunCompatibleCustomObjectsApi, createBunCompatibleKubernetesObjectApi, createBunCompatibleNetworkingV1Api, createBunCompatibleRbacAuthorizationV1Api, createBunCompatibleStorageV1Api, } from './bun-api-client.js';
+export type { HttpTimeoutConfig } from './bun-http-library.js';
+export { BunCompatibleHttpLibrary, getHttpLibraryForRuntime, isBunRuntime, } from './bun-http-library.js';
+export type { KubeConfigConsumer, KubernetesApiConsumer, KubernetesClientConfig, RetryOptions, } from './client-provider.js';
+export { createKubernetesClientProvider, createKubernetesClientProviderWithKubeConfig, getAppsV1Api, getCoreV1Api, getKubeConfig, getKubernetesApi, getKubernetesClientProvider, KubernetesClientProvider, } from './client-provider.js';
 export type { KubernetesApiError } from './errors.js';
-export { isKubernetesResponse, isKubernetesError, hasStatusCode, isKubernetesResource, hasBody, isKubernetesList, hasResourceVersion, } from './type-guards.js';
-export type { KubernetesResponse, KubernetesResourceShape, } from './type-guards.js';
-export { BunCompatibleHttpLibrary, isBunRuntime, getHttpLibraryForRuntime, } from './bun-http-library.js';
-export { createBunCompatibleApiClient, createBunCompatibleCoreV1Api, createBunCompatibleAppsV1Api, createBunCompatibleCustomObjectsApi, createBunCompatibleBatchV1Api, createBunCompatibleNetworkingV1Api, createBunCompatibleRbacAuthorizationV1Api, createBunCompatibleStorageV1Api, createBunCompatibleApiextensionsV1Api, createBunCompatibleKubernetesObjectApi, } from './bun-api-client.js';
+export { formatKubernetesError, getErrorDetails, getErrorReason, getErrorStatusCode, isBadRequestError, isConflictError, isForbiddenError, isNotFoundError, isRetryableError, isUnauthorizedError, isValidationError, } from './errors.js';
+export type { KubernetesResourceShape, KubernetesResponse, } from './type-guards.js';
+export { hasBody, hasResourceVersion, hasStatusCode, isKubernetesError, isKubernetesList, isKubernetesResource, isKubernetesResponse, } from './type-guards.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/core/kubernetes/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/kubernetes/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EACL,wBAAwB,EACxB,8BAA8B,EAC9B,4CAA4C,EAC5C,2BAA2B,EAC3B,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,YAAY,GACb,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EACV,sBAAsB,EACtB,qBAAqB,EACrB,kBAAkB,EAClB,YAAY,GACb,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,eAAe,GAChB,MAAM,aAAa,CAAC;AAErB,YAAY,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAGtD,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,aAAa,EACb,oBAAoB,EACpB,OAAO,EACP,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACV,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAK1B,OAAO,EACL,wBAAwB,EACxB,YAAY,EACZ,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,EAC5B,4BAA4B,EAC5B,mCAAmC,EACnC,6BAA6B,EAC7B,kCAAkC,EAClC,yCAAyC,EACzC,+BAA+B,EAC/B,qCAAqC,EACrC,sCAAsC,GACvC,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/kubernetes/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,4BAA4B,EAC5B,qCAAqC,EACrC,4BAA4B,EAC5B,6BAA6B,EAC7B,4BAA4B,EAC5B,mCAAmC,EACnC,sCAAsC,EACtC,kCAAkC,EAClC,yCAAyC,EACzC,+BAA+B,GAChC,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAI/D,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,YAAY,GACb,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,GACb,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,8BAA8B,EAC9B,4CAA4C,EAC5C,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,gBAAgB,EAChB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,OAAO,EACP,kBAAkB,EAClB,aAAa,EACb,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC"}

package/dist/core/kubernetes/index.js

@@ -7,17 +7,17 @@
  * - API utilities for common operations
  * - Error handling utilities for consistent error management
  */
-// Client provider and configuration
-export { KubernetesClientProvider, createKubernetesClientProvider, createKubernetesClientProviderWithKubeConfig, getKubernetesClientProvider, getKubernetesApi, getKubeConfig, getCoreV1Api, getAppsV1Api, } from './client-provider.js';
 // API utilities
 export { KubernetesApi } from './api.js';
-// Error handling utilities
-export { getErrorStatusCode, isNotFoundError, isConflictError, isRetryableError, formatKubernetesError, isUnauthorizedError, isForbiddenError, isBadRequestError, isValidationError, getErrorReason, getErrorDetails, } from './errors.js';
-// Type guards
-export { isKubernetesResponse, isKubernetesError, hasStatusCode, isKubernetesResource, hasBody, isKubernetesList, hasResourceVersion, } from './type-guards.js';
+export { createBunCompatibleApiClient, createBunCompatibleApiextensionsV1Api, createBunCompatibleAppsV1Api, createBunCompatibleBatchV1Api, createBunCompatibleCoreV1Api, createBunCompatibleCustomObjectsApi, createBunCompatibleKubernetesObjectApi, createBunCompatibleNetworkingV1Api, createBunCompatibleRbacAuthorizationV1Api, createBunCompatibleStorageV1Api, } from './bun-api-client.js';
 // Bun compatibility utilities
 // These provide workarounds for Bun's fetch TLS issues
 // See: https://github.com/oven-sh/bun/issues/10642
-export { BunCompatibleHttpLibrary, isBunRuntime, getHttpLibraryForRuntime, } from './bun-http-library.js';
-export { createBunCompatibleApiClient, createBunCompatibleCoreV1Api, createBunCompatibleAppsV1Api, createBunCompatibleCustomObjectsApi, createBunCompatibleBatchV1Api, createBunCompatibleNetworkingV1Api, createBunCompatibleRbacAuthorizationV1Api, createBunCompatibleStorageV1Api, createBunCompatibleApiextensionsV1Api, createBunCompatibleKubernetesObjectApi, } from './bun-api-client.js';
+export { BunCompatibleHttpLibrary, getHttpLibraryForRuntime, isBunRuntime, } from './bun-http-library.js';
+// Client provider and configuration
+export { createKubernetesClientProvider, createKubernetesClientProviderWithKubeConfig, getAppsV1Api, getCoreV1Api, getKubeConfig, getKubernetesApi, getKubernetesClientProvider, KubernetesClientProvider, } from './client-provider.js';
+// Error handling utilities
+export { formatKubernetesError, getErrorDetails, getErrorReason, getErrorStatusCode, isBadRequestError, isConflictError, isForbiddenError, isNotFoundError, isRetryableError, isUnauthorizedError, isValidationError, } from './errors.js';
+// Type guards
+export { hasBody, hasResourceVersion, hasStatusCode, isKubernetesError, isKubernetesList, isKubernetesResource, isKubernetesResponse, } from './type-guards.js';
 //# sourceMappingURL=index.js.map

package/dist/core/kubernetes/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/kubernetes/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,oCAAoC;AACpC,OAAO,EACL,wBAAwB,EACxB,8BAA8B,EAC9B,4CAA4C,EAC5C,2BAA2B,EAC3B,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,YAAY,GACb,MAAM,sBAAsB,CAAC;AAS9B,gBAAgB;AAChB,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,2BAA2B;AAC3B,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,eAAe,GAChB,MAAM,aAAa,CAAC;AAIrB,cAAc;AACd,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,aAAa,EACb,oBAAoB,EACpB,OAAO,EACP,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAO1B,8BAA8B;AAC9B,uDAAuD;AACvD,mDAAmD;AACnD,OAAO,EACL,wBAAwB,EACxB,YAAY,EACZ,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,EAC5B,4BAA4B,EAC5B,mCAAmC,EACnC,6BAA6B,EAC7B,kCAAkC,EAClC,yCAAyC,EACzC,+BAA+B,EAC/B,qCAAqC,EACrC,sCAAsC,GACvC,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/kubernetes/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,gBAAgB;AAChB,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,4BAA4B,EAC5B,qCAAqC,EACrC,4BAA4B,EAC5B,6BAA6B,EAC7B,4BAA4B,EAC5B,mCAAmC,EACnC,sCAAsC,EACtC,kCAAkC,EAClC,yCAAyC,EACzC,+BAA+B,GAChC,MAAM,qBAAqB,CAAC;AAE7B,8BAA8B;AAC9B,uDAAuD;AACvD,mDAAmD;AACnD,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,YAAY,GACb,MAAM,uBAAuB,CAAC;AAO/B,oCAAoC;AACpC,OAAO,EACL,8BAA8B,EAC9B,4CAA4C,EAC5C,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,gBAAgB,EAChB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAE9B,2BAA2B;AAC3B,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAKrB,cAAc;AACd,OAAO,EACL,OAAO,EACP,kBAAkB,EAClB,aAAa,EACb,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC"}

package/dist/core/kubernetes/type-guards.d.ts

@@ -60,7 +60,7 @@ export declare function isKubernetesResponse<T>(response: unknown): response is
  * ```typescript
  * try {
  *   await api.read(resource);
- * } catch (error) {
+ * } catch (error: unknown) {
  *   if (isKubernetesError(error)) {
  *     console.log('Status:', error.statusCode);
  *   }

package/dist/core/kubernetes/type-guards.js

@@ -34,7 +34,7 @@ export function isKubernetesResponse(response) {
  * ```typescript
  * try {
  *   await api.read(resource);
- * } catch (error) {
+ * } catch (error: unknown) {
  *   if (isKubernetesError(error)) {
  *     console.log('Status:', error.statusCode);
  *   }

package/dist/core/logging/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/core/logging/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C;;GAEG;AACH,eAAO,MAAM,qBAAqB,EAAE,YAQnC,CAAC;AAEF;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,YAAY,CAmCrD;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAW/D"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/core/logging/config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C;;GAEG;AACH,eAAO,MAAM,qBAAqB,EAAE,YAQnC,CAAC;AAEF;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,YAAY,CA4DrD;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAe/D"}

package/dist/core/logging/config.js

@@ -1,3 +1,4 @@
+import { TypeKroError } from '../errors.js';
 /**
  * Default logger configuration
  */
@@ -24,9 +25,22 @@ export function getLoggerConfigFromEnv() {
     if (process.env.NODE_ENV === 'development' || process.env.TYPEKRO_LOG_PRETTY === 'true') {
         config.pretty = true;
     }
-    // Set custom destination if specified
+    // Set custom destination if specified (validated against path traversal)
     if (process.env.TYPEKRO_LOG_DESTINATION) {
-        config.destination = process.env.TYPEKRO_LOG_DESTINATION;
+        const dest = process.env.TYPEKRO_LOG_DESTINATION;
+        // Reject path traversal sequences
+        if (dest.includes('..')) {
+            throw new TypeKroError('TYPEKRO_LOG_DESTINATION must not contain path traversal sequences (..)', 'INVALID_CONFIG', { destination: dest });
+        }
+        // Reject null bytes (can trick path resolution in some runtimes)
+        if (dest.includes('\0')) {
+            throw new TypeKroError('TYPEKRO_LOG_DESTINATION must not contain null bytes', 'INVALID_CONFIG', { destination: '<contains null byte>' });
+        }
+        // Reject absolute paths to prevent writing to arbitrary filesystem locations
+        if (dest.startsWith('/') || /^[a-zA-Z]:\\/.test(dest)) {
+            throw new TypeKroError('TYPEKRO_LOG_DESTINATION must be a relative path, not an absolute path', 'INVALID_CONFIG', { destination: dest });
+        }
+        config.destination = dest;
     }
     // Configure timestamp option
     if (process.env.TYPEKRO_LOG_TIMESTAMP === 'false') {
@@ -48,10 +62,12 @@ export function getLoggerConfigFromEnv() {
 export function validateLoggerConfig(config) {
     const validLevels = ['trace', 'debug', 'info', 'warn', 'error', 'fatal'];
     if (!validLevels.includes(config.level)) {
-        throw new Error(`Invalid log level: ${config.level}. Must be one of: ${validLevels.join(', ')}`);
+        throw new TypeKroError(`Invalid log level: ${config.level}. Must be one of: ${validLevels.join(', ')}`, 'INVALID_CONFIG', { level: config.level, validLevels });
     }
     if (config.destination && typeof config.destination !== 'string') {
-        throw new Error('Log destination must be a string');
+        throw new TypeKroError('Log destination must be a string', 'INVALID_CONFIG', {
+            destination: config.destination,
+        });
     }
 }
 //# sourceMappingURL=config.js.map

package/dist/core/logging/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/core/logging/config.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAiB;IACjD,KAAK,EAAE,MAAM;IACb,MAAM,EAAE,KAAK;IACb,OAAO,EAAE;QACP,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,GAAG,EAAE,IAAI;KACV;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,MAAM,GAAiB,EAAE,GAAG,qBAAqB,EAAE,CAAC;IAE1D,iCAAiC;IACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,WAAW,EAAE,CAAC;IAC9D,IAAI,QAAQ,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxF,MAAM,CAAC,KAAK,GAAG,QAAiC,CAAC;IACnD,CAAC;IAED,wCAAwC;IACxC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,MAAM,EAAE,CAAC;QACxF,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,sCAAsC;IACtC,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC;QACxC,MAAM,CAAC,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IAC3D,CAAC;IAED,6BAA6B;IAC7B,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,OAAO,EAAE,CAAC;QAClD,MAAM,CAAC,OAAO,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC3D,CAAC;IAED,4BAA4B;IAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,OAAO,EAAE,CAAC;QACjD,MAAM,CAAC,OAAO,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC1D,CAAC;IAED,uBAAuB;IACvB,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,OAAO,EAAE,CAAC;QAC5C,MAAM,CAAC,OAAO,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IACrD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAoB;IACvD,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACzE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,sBAAsB,MAAM,CAAC,KAAK,qBAAqB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChF,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,WAAW,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;AACH,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/core/logging/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAG5C;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAiB;IACjD,KAAK,EAAE,MAAM;IACb,MAAM,EAAE,KAAK;IACb,OAAO,EAAE;QACP,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,GAAG,EAAE,IAAI;KACV;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,MAAM,GAAiB,EAAE,GAAG,qBAAqB,EAAE,CAAC;IAE1D,iCAAiC;IACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,WAAW,EAAE,CAAC;IAC9D,IAAI,QAAQ,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxF,MAAM,CAAC,KAAK,GAAG,QAAiC,CAAC;IACnD,CAAC;IAED,wCAAwC;IACxC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,MAAM,EAAE,CAAC;QACxF,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,yEAAyE;IACzE,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;QACjD,kCAAkC;QAClC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,YAAY,CACpB,wEAAwE,EACxE,gBAAgB,EAChB,EAAE,WAAW,EAAE,IAAI,EAAE,CACtB,CAAC;QACJ,CAAC;QACD,iEAAiE;QACjE,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,YAAY,CACpB,qDAAqD,EACrD,gBAAgB,EAChB,EAAE,WAAW,EAAE,sBAAsB,EAAE,CACxC,CAAC;QACJ,CAAC;QACD,6EAA6E;QAC7E,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,YAAY,CACpB,uEAAuE,EACvE,gBAAgB,EAChB,EAAE,WAAW,EAAE,IAAI,EAAE,CACtB,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;IAC5B,CAAC;IAED,6BAA6B;IAC7B,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,OAAO,EAAE,CAAC;QAClD,MAAM,CAAC,OAAO,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC3D,CAAC;IAED,4BAA4B;IAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,OAAO,EAAE,CAAC;QACjD,MAAM,CAAC,OAAO,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC1D,CAAC;IAED,uBAAuB;IACvB,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,OAAO,EAAE,CAAC;QAC5C,MAAM,CAAC,OAAO,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IACrD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAoB;IACvD,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACzE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,YAAY,CACpB,sBAAsB,MAAM,CAAC,KAAK,qBAAqB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC/E,gBAAgB,EAChB,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,CACrC,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,WAAW,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QACjE,MAAM,IAAI,YAAY,CAAC,kCAAkC,EAAE,gBAAgB,EAAE;YAC3E,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/core/logging/logger.d.ts

@@ -14,13 +14,13 @@ export declare const logger: TypeKroLogger;
 /**
  * Create a component-specific logger
  */
-export declare function getComponentLogger(component: string, additionalContext?: Record<string, any>): TypeKroLogger;
+export declare function getComponentLogger(component: string, additionalContext?: Record<string, unknown>): TypeKroLogger;
 /**
  * Create a resource-specific logger
  */
-export declare function getResourceLogger(resourceId: string, additionalContext?: Record<string, any>): TypeKroLogger;
+export declare function getResourceLogger(resourceId: string, additionalContext?: Record<string, unknown>): TypeKroLogger;
 /**
  * Create a deployment-specific logger
  */
-export declare function getDeploymentLogger(deploymentId: string, namespace?: string, additionalContext?: Record<string, any>): TypeKroLogger;
+export declare function getDeploymentLogger(deploymentId: string, namespace?: string, additionalContext?: Record<string, unknown>): TypeKroLogger;
 //# sourceMappingURL=logger.d.ts.map

package/dist/core/logging/logger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../../src/core/logging/logger.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAiE7E;;GAEG;AACH,wBAAgB,YAAY,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,aAAa,CAoC1E;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,aAAa,EACtB,MAAM,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAC7B,aAAa,CAGf;AAED;;GAEG;AACH,eAAO,MAAM,MAAM,EAAE,aAA8B,CAAC;AAEpD;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GACtC,aAAa,CAEf;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,MAAM,EAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GACtC,aAAa,CAEf;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,YAAY,EAAE,MAAM,EACpB,SAAS,CAAC,EAAE,MAAM,EAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GACtC,aAAa,CAEf"}
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../../src/core/logging/logger.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAe,aAAa,EAAE,MAAM,YAAY,CAAC;AAsE1F;;GAEG;AACH,wBAAgB,YAAY,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,aAAa,CAoC1E;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,aAAa,EACtB,MAAM,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAC7B,aAAa,CAGf;AAED;;GAEG;AACH,eAAO,MAAM,MAAM,EAAE,aAA8B,CAAC;AAEpD;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC1C,aAAa,CAEf;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,MAAM,EAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC1C,aAAa,CAEf;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,YAAY,EAAE,MAAM,EACpB,SAAS,CAAC,EAAE,MAAM,EAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC1C,aAAa,CAEf"}

package/dist/core/logging/logger.js

@@ -21,34 +21,34 @@ class PinoLogger {
         this.pinoLogger.warn(meta, msg);
     }
     error(msg, error, meta) {
-        const logData = { ...meta };
-        if (error) {
-            const k8sError = error;
-            logData.error = {
-                name: error.name,
-                message: error.message,
-                stack: error.stack,
-                statusCode: k8sError.statusCode,
-                body: k8sError.body,
-                response: k8sError.response?.body,
-            };
-        }
-        this.pinoLogger.error(logData, msg);
+        this.pinoLogger.error(this.buildLogData(meta, error), msg);
     }
     fatal(msg, error, meta) {
+        this.pinoLogger.fatal(this.buildLogData(meta, error), msg);
+    }
+    /** Build log payload, extracting K8s-specific error fields when present.
+     * In production, stack traces and K8s API response bodies are stripped
+     * to prevent information disclosure (internal paths, cluster state). */
+    buildLogData(meta, error) {
         const logData = { ...meta };
         if (error) {
+            const isProduction = process.env.NODE_ENV === 'production';
             const k8sError = error;
             logData.error = {
                 name: error.name,
                 message: error.message,
-                stack: error.stack,
-                statusCode: k8sError.statusCode,
-                body: k8sError.body,
-                response: k8sError.response?.body,
+                // Only include stack traces and K8s response bodies in non-production
+                ...(isProduction
+                    ? {}
+                    : {
+                        stack: error.stack,
+                        body: k8sError.body,
+                        response: k8sError.response?.body,
+                    }),
+                statusCode: k8sError.statusCode ?? k8sError.response?.statusCode,
             };
         }
-        this.pinoLogger.fatal(logData, msg);
+        return logData;
     }
     child(bindings) {
         return new PinoLogger(this.pinoLogger.child(bindings));

package/dist/core/logging/logger.js.map

@@ -1 +1 @@
-{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../../src/core/logging/logger.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAG3E;;GAEG;AACH,MAAM,UAAU;IACN,UAAU,CAAc;IAEhC,YAAY,UAAuB;QACjC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,GAAW,EAAE,IAA0B;QAC3C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,GAAW,EAAE,IAA0B;QAC3C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,CAAC,GAAW,EAAE,IAA0B;QAC1C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,CAAC,GAAW,EAAE,IAA0B;QAC1C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,GAAW,EAAE,KAAa,EAAE,IAA0B;QAC1D,MAAM,OAAO,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QAC5B,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,QAAQ,GAAG,KAAY,CAAC;YAC9B,OAAO,CAAC,KAAK,GAAG;gBACd,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI;aAClC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,GAAW,EAAE,KAAa,EAAE,IAA0B;QAC1D,MAAM,OAAO,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QAC5B,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,QAAQ,GAAG,KAAY,CAAC;YAC9B,OAAO,CAAC,KAAK,GAAG;gBACd,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI;aAClC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,QAA6B;QACjC,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,MAA8B;IACzD,MAAM,WAAW,GAAG,EAAE,GAAG,sBAAsB,EAAE,EAAE,GAAG,MAAM,EAAE,CAAC;IAC/D,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAElC,MAAM,WAAW,GAAuB;QACtC,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,SAAS,EAAE,WAAW,CAAC,OAAO,EAAE,SAAS,KAAK,KAAK;QACnD,UAAU,EAAE;YACV,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;SACrC;KACF,CAAC;IAEF,gEAAgE;IAChE,IAAI,SAAkD,CAAC;IAEvD,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;QACvB,SAAS,GAAG;YACV,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE;gBACP,QAAQ,EAAE,IAAI;gBACd,aAAa,EAAE,cAAc;gBAC7B,MAAM,EAAE,cAAc;aACvB;SACF,CAAC;IACJ,CAAC;SAAM,IAAI,WAAW,CAAC,WAAW,IAAI,WAAW,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC3E,SAAS,GAAG;YACV,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE;gBACP,WAAW,EAAE,WAAW,CAAC,WAAW;aACrC;SACF,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAEhG,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAsB,EACtB,MAA8B;IAE9B,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,MAAM,GAAkB,YAAY,EAAE,CAAC;AAEpD;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAiB,EACjB,iBAAuC;IAEvC,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,GAAG,iBAAiB,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAAkB,EAClB,iBAAuC;IAEvC,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,GAAG,iBAAiB,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,YAAoB,EACpB,SAAkB,EAClB,iBAAuC;IAEvC,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,iBAAiB,EAAE,CAAC,CAAC;AACzE,CAAC"}
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../../src/core/logging/logger.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAG3E;;GAEG;AACH,MAAM,UAAU;IACN,UAAU,CAAc;IAEhC,YAAY,UAAuB;QACjC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,GAAW,EAAE,IAAkB;QACnC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,GAAW,EAAE,IAAkB;QACnC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,CAAC,GAAW,EAAE,IAAkB;QAClC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,CAAC,GAAW,EAAE,IAAkB;QAClC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,GAAW,EAAE,KAAa,EAAE,IAAkB;QAClD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,GAAW,EAAE,KAAa,EAAE,IAAkB;QAClD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7D,CAAC;IAED;;4EAEwE;IAChE,YAAY,CAAC,IAAkB,EAAE,KAAa;QACpD,MAAM,OAAO,GAA4B,EAAE,GAAG,IAAI,EAAE,CAAC;QACrD,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;YAC3D,MAAM,QAAQ,GAAG,KAIhB,CAAC;YACF,OAAO,CAAC,KAAK,GAAG;gBACd,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,sEAAsE;gBACtE,GAAG,CAAC,YAAY;oBACd,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC;wBACE,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,IAAI,EAAE,QAAQ,CAAC,IAAI;wBACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI;qBAClC,CAAC;gBACN,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,QAAQ,EAAE,UAAU;aACjE,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,QAAqB;QACzB,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,MAA8B;IACzD,MAAM,WAAW,GAAG,EAAE,GAAG,sBAAsB,EAAE,EAAE,GAAG,MAAM,EAAE,CAAC;IAC/D,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAElC,MAAM,WAAW,GAAuB;QACtC,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,SAAS,EAAE,WAAW,CAAC,OAAO,EAAE,SAAS,KAAK,KAAK;QACnD,UAAU,EAAE;YACV,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;SACrC;KACF,CAAC;IAEF,gEAAgE;IAChE,IAAI,SAAkD,CAAC;IAEvD,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;QACvB,SAAS,GAAG;YACV,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE;gBACP,QAAQ,EAAE,IAAI;gBACd,aAAa,EAAE,cAAc;gBAC7B,MAAM,EAAE,cAAc;aACvB;SACF,CAAC;IACJ,CAAC;SAAM,IAAI,WAAW,CAAC,WAAW,IAAI,WAAW,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC3E,SAAS,GAAG;YACV,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE;gBACP,WAAW,EAAE,WAAW,CAAC,WAAW;aACrC;SACF,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAEhG,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAsB,EACtB,MAA8B;IAE9B,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,MAAM,GAAkB,YAAY,EAAE,CAAC;AAEpD;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAiB,EACjB,iBAA2C;IAE3C,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,GAAG,iBAAiB,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAAkB,EAClB,iBAA2C;IAE3C,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,GAAG,iBAAiB,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,YAAoB,EACpB,SAAkB,EAClB,iBAA2C;IAE3C,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,iBAAiB,EAAE,CAAC,CAAC;AACzE,CAAC"}

package/dist/core/logging/types.d.ts

@@ -1,3 +1,8 @@
+/**
+ * Structured metadata for log entries.
+ * Values should be JSON-serializable primitives or nested records.
+ */
+export type LogMetadata = Record<string, unknown>;
 /**
  * TypeKro logger interface providing structured logging capabilities
  */
@@ -5,31 +10,31 @@ export interface TypeKroLogger {
     /**
      * Log trace level messages (most verbose)
      */
-    trace(msg: string, meta?: Record<string, any>): void;
+    trace(msg: string, meta?: LogMetadata): void;
     /**
      * Log debug level messages
      */
-    debug(msg: string, meta?: Record<string, any>): void;
+    debug(msg: string, meta?: LogMetadata): void;
     /**
      * Log informational messages
      */
-    info(msg: string, meta?: Record<string, any>): void;
+    info(msg: string, meta?: LogMetadata): void;
     /**
      * Log warning messages
      */
-    warn(msg: string, meta?: Record<string, any>): void;
+    warn(msg: string, meta?: LogMetadata): void;
     /**
      * Log error messages
      */
-    error(msg: string, error?: Error, meta?: Record<string, any>): void;
+    error(msg: string, error?: Error, meta?: LogMetadata): void;
     /**
      * Log fatal error messages (most severe)
      */
-    fatal(msg: string, error?: Error, meta?: Record<string, any>): void;
+    fatal(msg: string, error?: Error, meta?: LogMetadata): void;
     /**
      * Create a child logger with additional context bindings
      */
-    child(bindings: Record<string, any>): TypeKroLogger;
+    child(bindings: LogMetadata): TypeKroLogger;
 }
 /**
  * Configuration options for the TypeKro logger
@@ -88,6 +93,6 @@ export interface LoggerContext {
     /**
      * Additional context metadata
      */
-    [key: string]: any;
+    [key: string]: unknown;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/core/logging/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/logging/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IAErD;;OAEG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IAErD;;OAEG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IAEpD;;OAEG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IAEpD;;OAEG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IAEpE;;OAEG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IAEpE;;OAEG;IACH,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,aAAa,CAAC;CACrD;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,KAAK,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;IAE/D;;OAEG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,OAAO,CAAC,EAAE;QACR;;WAEG;QACH,SAAS,CAAC,EAAE,OAAO,CAAC;QAEpB;;WAEG;QACH,QAAQ,CAAC,EAAE,OAAO,CAAC;QAEnB;;WAEG;QACH,GAAG,CAAC,EAAE,OAAO,CAAC;KACf,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/logging/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAElD;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAE7C;;OAEG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAE7C;;OAEG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAE5C;;OAEG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAE5C;;OAEG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAE5D;;OAEG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAE5D;;OAEG;IACH,KAAK,CAAC,QAAQ,EAAE,WAAW,GAAG,aAAa,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,KAAK,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;IAE/D;;OAEG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,OAAO,CAAC,EAAE;QACR;;WAEG;QACH,SAAS,CAAC,EAAE,OAAO,CAAC;QAEpB;;WAEG;QACH,QAAQ,CAAC,EAAE,OAAO,CAAC;QAEnB;;WAEG;QACH,GAAG,CAAC,EAAE,OAAO,CAAC;KACf,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB"}

package/dist/core/metadata/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Resource Metadata Store
+ *
+ * Re-exports all public functions and types from the resource metadata module.
+ *
+ * @module
+ */
+export { clearResourceMetadata, copyResourceMetadata, getForEach, getIncludeWhen, getMetadataField, getReadinessEvaluator, getReadyWhen, getResourceId, getResourceMetadata, getTemplateOverrides, hasResourceMetadata, type ResourceMetadata, type ResourceMetadataKey, setForEach, setIncludeWhen, setMetadataField, setReadinessEvaluator, setReadyWhen, setResourceId, setResourceMetadata, setTemplateOverrides, } from './resource-metadata.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/metadata/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/metadata/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC"}

package/dist/core/metadata/index.js

@@ -0,0 +1,9 @@
+/**
+ * Resource Metadata Store
+ *
+ * Re-exports all public functions and types from the resource metadata module.
+ *
+ * @module
+ */
+export { clearResourceMetadata, copyResourceMetadata, getForEach, getIncludeWhen, getMetadataField, getReadinessEvaluator, getReadyWhen, getResourceId, getResourceMetadata, getTemplateOverrides, hasResourceMetadata, setForEach, setIncludeWhen, setMetadataField, setReadinessEvaluator, setReadyWhen, setResourceId, setResourceMetadata, setTemplateOverrides, } from './resource-metadata.js';
+//# sourceMappingURL=index.js.map

package/dist/core/metadata/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/metadata/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EAGnB,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC"}

package/dist/core/metadata/resource-metadata.d.ts

@@ -0,0 +1,120 @@
+/**
+ * Resource Metadata Store
+ *
+ * Central WeakMap-based metadata store for resource objects. Replaces the
+ * non-enumerable `Object.defineProperty` pattern that was prone to silent
+ * data loss during spread, `JSON.parse(JSON.stringify())`, and `structuredClone`.
+ *
+ * WeakMap is invisible to serialization by design — no data can leak into
+ * YAML, JSON, or `Object.keys()` output. Metadata is automatically garbage
+ * collected when the resource object is no longer referenced.
+ *
+ * @module
+ * @see ROADMAP.md Phase 2.6
+ */
+import type { ResourceStatus } from '../types/kubernetes.js';
+/**
+ * All metadata fields that can be associated with a resource object.
+ *
+ * Each field corresponds to a previously non-enumerable property:
+ * - `resourceId`         → was `__resourceId`
+ * - `readinessEvaluator` → was `readinessEvaluator`
+ * - `includeWhen`        → was `includeWhen`
+ * - `readyWhen`          → was `readyWhen`
+ * - `forEach`            → was `forEach`
+ * - `templateOverrides`  → was `__templateOverrides`
+ */
+export interface ResourceMetadata {
+    /** Original resource identifier for cross-resource references */
+    resourceId?: string;
+    /** Factory-provided function that evaluates whether a deployed resource is ready */
+    readinessEvaluator?: (resource: unknown) => ResourceStatus;
+    /** Conditional resource creation CEL expression array */
+    includeWhen?: unknown[];
+    /** Resource readiness conditions CEL expression array */
+    readyWhen?: unknown[];
+    /** Collection iteration dimensions for Kro forEach support */
+    forEach?: Record<string, string>[];
+    /** Ternary CEL expression overrides from AST analysis */
+    templateOverrides?: Array<{
+        propertyPath: string;
+        celExpression: string;
+    }>;
+    /** Kubernetes scope — 'cluster' for cluster-scoped resources (Namespace, ClusterRole, etc.) */
+    scope?: 'namespaced' | 'cluster';
+    /** Resource lifecycle — 'shared' resources survive instance deletion (e.g., HelmRepository in flux-system) */
+    lifecycle?: 'managed' | 'shared';
+}
+/** Keys of ResourceMetadata that are valid metadata field names */
+export type ResourceMetadataKey = keyof ResourceMetadata;
+/**
+ * Get the full metadata record for a resource, or `undefined` if none is set.
+ */
+export declare function getResourceMetadata(resource: WeakKey): ResourceMetadata | undefined;
+/**
+ * Get a single metadata field for a resource.
+ */
+export declare function getMetadataField<K extends ResourceMetadataKey>(resource: WeakKey, key: K): ResourceMetadata[K] | undefined;
+/**
+ * Set (merge) metadata fields on a resource. Creates the metadata record if
+ * it doesn't exist yet; otherwise merges the new fields into the existing record.
+ *
+ * @returns The merged metadata record.
+ */
+export declare function setResourceMetadata(resource: WeakKey, metadata: Partial<ResourceMetadata>): ResourceMetadata;
+/**
+ * Set a single metadata field on a resource.
+ */
+export declare function setMetadataField<K extends ResourceMetadataKey>(resource: WeakKey, key: K, value: ResourceMetadata[K]): void;
+/**
+ * Copy ALL metadata from one resource to another. This replaces the old
+ * `preserveNonEnumerableProperties` helper for resource-to-resource copies
+ * (e.g., after a `{...spread}` operation).
+ *
+ * Also migrates any legacy non-enumerable properties found on the source
+ * into the WeakMap store on the target.
+ *
+ * @returns `true` if metadata was copied, `false` if source had no metadata
+ *          and no legacy properties were found.
+ */
+export declare function copyResourceMetadata(source: WeakKey, target: WeakKey): boolean;
+/**
+ * Check if a resource has any metadata at all.
+ */
+export declare function hasResourceMetadata(resource: WeakKey): boolean;
+/**
+ * Delete all metadata for a resource. Rarely needed since WeakMap handles
+ * garbage collection automatically, but useful in tests.
+ */
+export declare function clearResourceMetadata(resource: WeakKey): boolean;
+/** Get the resource ID (previously `__resourceId`). */
+export declare function getResourceId(resource: WeakKey): string | undefined;
+/** Set the resource ID (previously `__resourceId`). */
+export declare function setResourceId(resource: WeakKey, id: string): void;
+/** Get the readiness evaluator function. */
+export declare function getReadinessEvaluator(resource: WeakKey): ((resource: unknown) => ResourceStatus) | undefined;
+/** Set the readiness evaluator function. */
+export declare function setReadinessEvaluator(resource: WeakKey, evaluator: (resource: unknown) => ResourceStatus): void;
+/** Get the includeWhen conditions. */
+export declare function getIncludeWhen(resource: WeakKey): unknown[] | undefined;
+/** Set (replace) the includeWhen conditions. */
+export declare function setIncludeWhen(resource: WeakKey, conditions: unknown[]): void;
+/** Get the readyWhen conditions. */
+export declare function getReadyWhen(resource: WeakKey): unknown[] | undefined;
+/** Set (replace) the readyWhen conditions. */
+export declare function setReadyWhen(resource: WeakKey, conditions: unknown[]): void;
+/** Get the forEach dimensions. */
+export declare function getForEach(resource: WeakKey): Record<string, string>[] | undefined;
+/** Set (replace) the forEach dimensions. */
+export declare function setForEach(resource: WeakKey, dimensions: Record<string, string>[]): void;
+/** Get the template overrides. */
+export declare function getTemplateOverrides(resource: WeakKey): Array<{
+    propertyPath: string;
+    celExpression: string;
+}> | undefined;
+/** Set (replace) the template overrides. */
+export declare function setTemplateOverrides(resource: WeakKey, overrides: Array<{
+    propertyPath: string;
+    celExpression: string;
+}>): void;
+//# sourceMappingURL=resource-metadata.d.ts.map

package/dist/core/metadata/resource-metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-metadata.d.ts","sourceRoot":"","sources":["../../../src/core/metadata/resource-metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAM7D;;;;;;;;;;GAUG;AACH,MAAM,WAAW,gBAAgB;IAC/B,iEAAiE;IACjE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oFAAoF;IACpF,kBAAkB,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,KAAK,cAAc,CAAC;IAC3D,yDAAyD;IACzD,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;IACxB,yDAAyD;IACzD,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;IACtB,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;IACnC,yDAAyD;IACzD,iBAAiB,CAAC,EAAE,KAAK,CAAC;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3E,+FAA+F;IAC/F,KAAK,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IACjC,8GAA8G;IAC9G,SAAS,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;CAClC;AAED,mEAAmE;AACnE,MAAM,MAAM,mBAAmB,GAAG,MAAM,gBAAgB,CAAC;AAkBzD;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,OAAO,GAAG,gBAAgB,GAAG,SAAS,CAEnF;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,mBAAmB,EAC5D,QAAQ,EAAE,OAAO,EACjB,GAAG,EAAE,CAAC,GACL,gBAAgB,CAAC,CAAC,CAAC,GAAG,SAAS,CAEjC;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAClC,gBAAgB,CAKlB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,mBAAmB,EAC5D,QAAQ,EAAE,OAAO,EACjB,GAAG,EAAE,CAAC,EACN,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC,GACzB,IAAI,CAIN;AA0BD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CA4B9E;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAE9D;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAEhE;AAMD,uDAAuD;AACvD,wBAAgB,aAAa,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAgBnE;AAED,uDAAuD;AACvD,wBAAgB,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAEjE;AAMD,4CAA4C;AAC5C,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,OAAO,GAChB,CAAC,CAAC,QAAQ,EAAE,OAAO,KAAK,cAAc,CAAC,GAAG,SAAS,CAiBrD;AAED,4CAA4C;AAC5C,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,KAAK,cAAc,GAC/C,IAAI,CAEN;AAMD,sCAAsC;AACtC,wBAAgB,cAAc,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,EAAE,GAAG,SAAS,CAEvE;AAED,gDAAgD;AAChD,wBAAgB,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,IAAI,CAE7E;AAED,oCAAoC;AACpC,wBAAgB,YAAY,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,EAAE,GAAG,SAAS,CAErE;AAED,8CAA8C;AAC9C,wBAAgB,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,IAAI,CAE3E;AAED,kCAAkC;AAClC,wBAAgB,UAAU,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,SAAS,CAElF;AAED,4CAA4C;AAC5C,wBAAgB,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,IAAI,CAExF;AAED,kCAAkC;AAClC,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,OAAO,GAChB,KAAK,CAAC;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,SAAS,CAEpE;AAED,4CAA4C;AAC5C,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,KAAK,CAAC;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC,GAChE,IAAI,CAEN"}