typekro 0.5.0 → 0.8.0

package/dist/core/constants/brands.js

@@ -5,5 +5,5 @@
  * New code within `src/utils/` should import directly from `../../shared/brands.js`
  * to maintain the clean dependency direction: `shared/ <-- utils/ <-- core/`.
  */
-export { CALLABLE_COMPOSITION_BRAND, CEL_EXPRESSION_BRAND, KUBERNETES_REF_BRAND, MIXED_TEMPLATE_BRAND, NESTED_COMPOSITION_BRAND, } from '../../shared/brands.js';
+export { CALLABLE_COMPOSITION_BRAND, CEL_EXPRESSION_BRAND, KUBERNETES_REF_BRAND, KUBERNETES_REF_MARKER_PATTERN, MIXED_TEMPLATE_BRAND, NESTED_COMPOSITION_BRAND, } from '../../shared/brands.js';
 //# sourceMappingURL=brands.js.map

package/dist/core/constants/brands.js.map

@@ -1 +1 @@
-{"version":3,"file":"brands.js","sourceRoot":"","sources":["../../../src/core/constants/brands.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"brands.js","sourceRoot":"","sources":["../../../src/core/constants/brands.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,oBAAoB,EACpB,6BAA6B,EAC7B,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,wBAAwB,CAAC"}

package/dist/core/containers/build.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Container Build Utility
+ *
+ * Builds a Docker image from a Dockerfile and optionally pushes it to a
+ * container registry. Returns the full image URI for use in K8s deployments.
+ *
+ * @example
+ * ```typescript
+ * import { buildContainer } from 'typekro/containers';
+ *
+ * // Local Orbstack (no push needed)
+ * const result = await buildContainer({
+ *   context: './apps/my-app',
+ *   imageName: 'my-app',
+ *   registry: { type: 'orbstack' },
+ * });
+ *
+ * // AWS ECR (auto-creates repo, pushes)
+ * const result = await buildContainer({
+ *   context: './apps/my-app',
+ *   imageName: 'my-app',
+ *   tag: 'content-hash',
+ *   platform: 'linux/amd64',
+ *   registry: { type: 'ecr', region: 'us-west-2' },
+ * });
+ *
+ * // Use the image URI in a TypeKro composition
+ * await factory.deploy({
+ *   app: { image: result.imageUri, port: 3000 },
+ * });
+ * ```
+ */
+import type { ContainerBuildOptions, ContainerBuildResult } from './registries/types.js';
+/**
+ * Build a Docker image and optionally push it to a container registry.
+ *
+ * Docker's own layer cache handles memoization — if nothing in the build
+ * context changed, the build returns near-instantly.
+ */
+export declare function buildContainer(options: ContainerBuildOptions): Promise<ContainerBuildResult>;
+/**
+ * Compute a content-based hash of the build context for deterministic tagging.
+ * Exported for direct unit testing without Docker.
+ *
+ * Hashes the Dockerfile content plus all file contents in the context,
+ * respecting .dockerignore if present. Files are streamed (not loaded into
+ * memory) and hashed in sorted order for determinism.
+ */
+export declare function computeContentHash(contextPath: string, dockerfilePath: string): Promise<string>;
+//# sourceMappingURL=build.d.ts.map

package/dist/core/containers/build.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../../src/core/containers/build.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAQH,OAAO,KAAK,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAIzF;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA6FlG;AAED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAwCrG"}

package/dist/core/containers/build.js

@@ -0,0 +1,146 @@
+/**
+ * Container Build Utility
+ *
+ * Builds a Docker image from a Dockerfile and optionally pushes it to a
+ * container registry. Returns the full image URI for use in K8s deployments.
+ *
+ * @example
+ * ```typescript
+ * import { buildContainer } from 'typekro/containers';
+ *
+ * // Local Orbstack (no push needed)
+ * const result = await buildContainer({
+ *   context: './apps/my-app',
+ *   imageName: 'my-app',
+ *   registry: { type: 'orbstack' },
+ * });
+ *
+ * // AWS ECR (auto-creates repo, pushes)
+ * const result = await buildContainer({
+ *   context: './apps/my-app',
+ *   imageName: 'my-app',
+ *   tag: 'content-hash',
+ *   platform: 'linux/amd64',
+ *   registry: { type: 'ecr', region: 'us-west-2' },
+ * });
+ *
+ * // Use the image URI in a TypeKro composition
+ * await factory.deploy({
+ *   app: { image: result.imageUri, port: 3000 },
+ * });
+ * ```
+ */
+import { existsSync } from 'node:fs';
+import { resolve, join } from 'node:path';
+import { getComponentLogger } from '../logging/index.js';
+import { ContainerBuildError } from './errors.js';
+import { checkDockerAvailable, execDocker, validateBuildArgs } from './exec.js';
+import { resolveRegistry } from './registries/index.js';
+const logger = getComponentLogger('container-build');
+/**
+ * Build a Docker image and optionally push it to a container registry.
+ *
+ * Docker's own layer cache handles memoization — if nothing in the build
+ * context changed, the build returns near-instantly.
+ */
+export async function buildContainer(options) {
+    const startTime = Date.now();
+    const { context, dockerfile = 'Dockerfile', imageName, platform, buildArgs, target, quiet = false, timeout = 300_000, extraDockerArgs = [], registry: registryConfig, } = options;
+    // Validate inputs
+    const contextPath = resolve(context);
+    if (!existsSync(contextPath)) {
+        throw new ContainerBuildError(`Build context directory not found: ${contextPath}`, 'INVALID_CONTEXT', ['Check the context path is correct.', `Directory: ${contextPath}`]);
+    }
+    const dockerfilePath = join(contextPath, dockerfile);
+    if (!existsSync(dockerfilePath)) {
+        throw new ContainerBuildError(`Dockerfile not found: ${dockerfilePath}`, 'INVALID_DOCKERFILE', [`Expected Dockerfile at: ${dockerfilePath}`, 'Set the dockerfile option if using a non-default name.']);
+    }
+    // Validate image name — must be a valid Docker/OCI image reference.
+    // Must start and end with alphanumeric, no trailing dots/slashes/hyphens.
+    if (!/^[a-z0-9]([a-z0-9._/-]*[a-z0-9])?$/.test(imageName)) {
+        throw new ContainerBuildError(`Invalid image name: "${imageName}". Must be lowercase alphanumeric, may contain dots/hyphens/underscores/slashes, must not start or end with a separator.`, 'INVALID_IMAGE_NAME', ['Image names must match: /^[a-z0-9]([a-z0-9._/-]*[a-z0-9])?$/']);
+    }
+    if (buildArgs) {
+        validateBuildArgs(buildArgs);
+    }
+    // Resolve tag
+    let tag = options.tag ?? 'latest';
+    if (tag === 'content-hash') {
+        tag = await computeContentHash(contextPath, dockerfilePath);
+    }
+    logger.info('Building container image', { imageName, tag, context: contextPath, registry: registryConfig.type });
+    // Check Docker availability
+    await checkDockerAvailable();
+    // Resolve registry handler
+    const registry = resolveRegistry(registryConfig);
+    // Resolve full image URI
+    const imageUri = await registry.resolveImageUri(imageName, tag);
+    // Authenticate with registry (no-op for local registries)
+    await registry.authenticate();
+    // Build the image
+    const buildArgFlags = buildArgs
+        ? Object.entries(buildArgs).flatMap(([k, v]) => ['--build-arg', `${k}=${v}`])
+        : [];
+    const dockerBuildArgs = [
+        'build',
+        '-t', imageUri,
+        '-f', dockerfilePath,
+        ...(platform ? ['--platform', platform] : []),
+        ...(target ? ['--target', target] : []),
+        ...buildArgFlags,
+        ...extraDockerArgs,
+        contextPath,
+    ];
+    await execDocker(dockerBuildArgs, { quiet, timeout });
+    // Push to registry — handler returns whether it actually pushed
+    const pushed = await registry.push(imageUri, imageName);
+    const duration = Date.now() - startTime;
+    logger.info('Container build complete', { imageUri, tag, duration, pushed });
+    return { imageUri, tag, duration, pushed };
+}
+/**
+ * Compute a content-based hash of the build context for deterministic tagging.
+ * Exported for direct unit testing without Docker.
+ *
+ * Hashes the Dockerfile content plus all file contents in the context,
+ * respecting .dockerignore if present. Files are streamed (not loaded into
+ * memory) and hashed in sorted order for determinism.
+ */
+export async function computeContentHash(contextPath, dockerfilePath) {
+    const hasher = new Bun.CryptoHasher('sha256');
+    // Hash the Dockerfile content (streamed for memory efficiency)
+    for await (const chunk of Bun.file(dockerfilePath).stream()) {
+        hasher.update(chunk);
+    }
+    // Parse .dockerignore if present — same format as .gitignore
+    const ignore = (await import('ignore')).default;
+    const ig = ignore();
+    // Always exclude .git and node_modules (Docker does this implicitly)
+    ig.add(['.git', 'node_modules']);
+    const dockerignorePath = join(contextPath, '.dockerignore');
+    if (existsSync(dockerignorePath)) {
+        const patterns = await Bun.file(dockerignorePath).text();
+        ig.add(patterns);
+    }
+    // Collect files, excluding .dockerignore matches
+    const glob = new Bun.Glob('**/*');
+    const files = [];
+    for await (const path of glob.scan({ cwd: contextPath, onlyFiles: true })) {
+        if (ig.ignores(path))
+            continue;
+        files.push(path);
+    }
+    files.sort();
+    for (const file of files) {
+        // Hash the file path (so renames change the hash)
+        hasher.update(file);
+        // Stream file contents through the hasher (binary-safe, memory-efficient)
+        const stream = Bun.file(join(contextPath, file)).stream();
+        for await (const chunk of stream) {
+            hasher.update(chunk);
+        }
+    }
+    const hash = hasher.digest('hex');
+    return `sha-${hash.slice(0, 12)}`;
+}
+//# sourceMappingURL=build.js.map

package/dist/core/containers/build.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.js","sourceRoot":"","sources":["../../../src/core/containers/build.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,MAAM,MAAM,GAAG,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;AAErD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAA8B;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,EACJ,OAAO,EACP,UAAU,GAAG,YAAY,EACzB,SAAS,EACT,QAAQ,EACR,SAAS,EACT,MAAM,EACN,KAAK,GAAG,KAAK,EACb,OAAO,GAAG,OAAO,EACjB,eAAe,GAAG,EAAE,EACpB,QAAQ,EAAE,cAAc,GACzB,GAAG,OAAO,CAAC;IAEZ,kBAAkB;IAClB,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,mBAAmB,CAC3B,sCAAsC,WAAW,EAAE,EACnD,iBAAiB,EACjB,CAAC,oCAAoC,EAAE,cAAc,WAAW,EAAE,CAAC,CACpE,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,mBAAmB,CAC3B,yBAAyB,cAAc,EAAE,EACzC,oBAAoB,EACpB,CAAC,2BAA2B,cAAc,EAAE,EAAE,wDAAwD,CAAC,CACxG,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,0EAA0E;IAC1E,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,mBAAmB,CAC3B,wBAAwB,SAAS,0HAA0H,EAC3J,oBAAoB,EACpB,CAAC,8DAA8D,CAAC,CACjE,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IAED,cAAc;IACd,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,QAAQ,CAAC;IAClC,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;QAC3B,GAAG,GAAG,MAAM,kBAAkB,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IAEjH,4BAA4B;IAC5B,MAAM,oBAAoB,EAAE,CAAC;IAE7B,2BAA2B;IAC3B,MAAM,QAAQ,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;IAEjD,yBAAyB;IACzB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAEhE,0DAA0D;IAC1D,MAAM,QAAQ,CAAC,YAAY,EAAE,CAAC;IAE9B,kBAAkB;IAClB,MAAM,aAAa,GAAG,SAAS;QAC7B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,eAAe,GAAG;QACtB,OAAO;QACP,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,cAAc;QACpB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,aAAa;QAChB,GAAG,eAAe;QAClB,WAAW;KACZ,CAAC;IAEF,MAAM,UAAU,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAEtD,gEAAgE;IAChE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAExD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAE7E,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC7C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,WAAmB,EAAE,cAAsB;IAClF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAE9C,+DAA+D;IAC/D,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAED,6DAA6D;IAC7D,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;IAChD,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;IACpB,qEAAqE;IACrE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;IACjC,MAAM,gBAAgB,GAAG,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;IAC5D,IAAI,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnB,CAAC;IAED,iDAAiD;IACjD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1E,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,SAAS;QAC/B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,KAAK,CAAC,IAAI,EAAE,CAAC;IAEb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,kDAAkD;QAClD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpB,0EAA0E;QAC1E,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1D,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACpC,CAAC"}

package/dist/core/containers/errors.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Container Build Errors
+ */
+import { TypeKroError } from '../errors.js';
+export declare class ContainerBuildError extends TypeKroError {
+    readonly suggestions: string[];
+    constructor(message: string, code: string, suggestions?: string[], cause?: Error);
+    static dockerNotAvailable(detail?: string): ContainerBuildError;
+    static buildFailed(exitCode: number, stderr: string): ContainerBuildError;
+    static pushFailed(imageUri: string, cause: Error): ContainerBuildError;
+    static ecrAuthFailed(cause: Error): ContainerBuildError;
+    static registryNotSupported(type: string): ContainerBuildError;
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/core/containers/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/core/containers/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,qBAAa,mBAAoB,SAAQ,YAAY;aAIjC,WAAW,EAAE,MAAM,EAAE;gBAFrC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACI,WAAW,GAAE,MAAM,EAAO,EAC1C,KAAK,CAAC,EAAE,KAAK;IAMf,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,mBAAmB;IAY/D,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,mBAAmB;IAYzE,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,mBAAmB;IAatE,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,GAAG,mBAAmB;IAcvD,MAAM,CAAC,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB;CAU/D"}

package/dist/core/containers/errors.js

@@ -0,0 +1,48 @@
+/**
+ * Container Build Errors
+ */
+import { TypeKroError } from '../errors.js';
+export class ContainerBuildError extends TypeKroError {
+    suggestions;
+    constructor(message, code, suggestions = [], cause) {
+        super(message, code, { suggestions }, cause ? { cause } : undefined);
+        this.suggestions = suggestions;
+        this.name = 'ContainerBuildError';
+    }
+    static dockerNotAvailable(detail) {
+        return new ContainerBuildError(`Docker is not available${detail ? `: ${detail}` : ''}`, 'DOCKER_NOT_AVAILABLE', [
+            'Is Docker or Orbstack running?',
+            "Run 'docker info' to check the Docker daemon status.",
+            'If using Orbstack, ensure the Docker engine is enabled in settings.',
+        ]);
+    }
+    static buildFailed(exitCode, stderr) {
+        return new ContainerBuildError(`Docker build failed with exit code ${exitCode}:\n${stderr.slice(0, 500)}`, 'BUILD_FAILED', [
+            'Check the Dockerfile for syntax errors.',
+            'Verify the build context contains all required files.',
+            "Run 'docker build' manually to see the full output.",
+        ]);
+    }
+    static pushFailed(imageUri, cause) {
+        return new ContainerBuildError(`Failed to push ${imageUri}: ${cause.message}`, 'PUSH_FAILED', [
+            'Verify registry credentials are valid.',
+            'Check that the repository exists (or enable createRepository).',
+            `Run 'docker push ${imageUri}' manually to diagnose.`,
+        ], cause);
+    }
+    static ecrAuthFailed(cause) {
+        return new ContainerBuildError(`ECR authentication failed: ${cause.message}`, 'ECR_AUTH_FAILED', [
+            'Verify AWS credentials: aws sts get-caller-identity',
+            'If using SSO: aws sso login --profile <your-profile>',
+            'Set AWS_REGION or pass region in the ECR config.',
+            'Check IAM permissions: ecr:GetAuthorizationToken is required.',
+        ], cause);
+    }
+    static registryNotSupported(type) {
+        return new ContainerBuildError(`Registry type '${type}' is not yet implemented.`, 'REGISTRY_NOT_SUPPORTED', [
+            'Supported registries: orbstack, ecr.',
+            'GCR and ACR support is planned — contributions welcome.',
+        ]);
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/core/containers/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/core/containers/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,OAAO,mBAAoB,SAAQ,YAAY;IAIjC;IAHlB,YACE,OAAe,EACf,IAAY,EACI,cAAwB,EAAE,EAC1C,KAAa;QAEb,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAHrD,gBAAW,GAAX,WAAW,CAAe;QAI1C,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;IAED,MAAM,CAAC,kBAAkB,CAAC,MAAe;QACvC,OAAO,IAAI,mBAAmB,CAC5B,0BAA0B,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EACvD,sBAAsB,EACtB;YACE,gCAAgC;YAChC,sDAAsD;YACtD,qEAAqE;SACtE,CACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,QAAgB,EAAE,MAAc;QACjD,OAAO,IAAI,mBAAmB,CAC5B,sCAAsC,QAAQ,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAC1E,cAAc,EACd;YACE,yCAAyC;YACzC,uDAAuD;YACvD,qDAAqD;SACtD,CACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,UAAU,CAAC,QAAgB,EAAE,KAAY;QAC9C,OAAO,IAAI,mBAAmB,CAC5B,kBAAkB,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,EAC9C,aAAa,EACb;YACE,wCAAwC;YACxC,gEAAgE;YAChE,oBAAoB,QAAQ,yBAAyB;SACtD,EACD,KAAK,CACN,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,aAAa,CAAC,KAAY;QAC/B,OAAO,IAAI,mBAAmB,CAC5B,8BAA8B,KAAK,CAAC,OAAO,EAAE,EAC7C,iBAAiB,EACjB;YACE,qDAAqD;YACrD,sDAAsD;YACtD,kDAAkD;YAClD,+DAA+D;SAChE,EACD,KAAK,CACN,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,oBAAoB,CAAC,IAAY;QACtC,OAAO,IAAI,mBAAmB,CAC5B,kBAAkB,IAAI,2BAA2B,EACjD,wBAAwB,EACxB;YACE,sCAAsC;YACtC,yDAAyD;SAC1D,CACF,CAAC;IACJ,CAAC;CACF"}

package/dist/core/containers/exec.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Docker CLI Execution Helper
+ *
+ * Wraps Bun.spawn for Docker commands with streaming output,
+ * timeout support, and actionable error messages.
+ */
+export interface ExecDockerOptions {
+    /** Pipe this string to stdin (used for docker login --password-stdin). */
+    stdin?: string;
+    /** Suppress stdout streaming (only log on error). */
+    quiet?: boolean;
+    /** Timeout in milliseconds. */
+    timeout?: number;
+}
+export interface ExecDockerResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+}
+/**
+ * Validate that build arg keys are safe Docker ARG names.
+ * Prevents flag injection via malicious keys like "--platform".
+ */
+export declare function validateBuildArgs(buildArgs: Record<string, string>): void;
+/**
+ * Execute a Docker CLI command.
+ *
+ * Streams output to the logger in real-time unless `quiet` is set.
+ * Throws ContainerBuildError on non-zero exit or timeout.
+ */
+export declare function execDocker(args: string[], options?: ExecDockerOptions): Promise<ExecDockerResult>;
+/**
+ * Check if Docker is available and the daemon is running.
+ */
+export declare function checkDockerAvailable(): Promise<void>;
+//# sourceMappingURL=exec.d.ts.map

package/dist/core/containers/exec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.d.ts","sourceRoot":"","sources":["../../../src/core/containers/exec.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAUH,MAAM,WAAW,iBAAiB;IAChC,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qDAAqD;IACrD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAiBzE;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,gBAAgB,CAAC,CAkE3B;AAED;;GAEG;AACH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC,CAuB1D"}

package/dist/core/containers/exec.js

@@ -0,0 +1,110 @@
+/**
+ * Docker CLI Execution Helper
+ *
+ * Wraps Bun.spawn for Docker commands with streaming output,
+ * timeout support, and actionable error messages.
+ */
+import { getComponentLogger } from '../logging/index.js';
+import { ContainerBuildError } from './errors.js';
+const logger = getComponentLogger('container-exec');
+/** Valid Docker build-arg key pattern. */
+const VALID_BUILD_ARG_KEY = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
+/**
+ * Validate that build arg keys are safe Docker ARG names.
+ * Prevents flag injection via malicious keys like "--platform".
+ */
+export function validateBuildArgs(buildArgs) {
+    for (const [key, value] of Object.entries(buildArgs)) {
+        if (!VALID_BUILD_ARG_KEY.test(key)) {
+            throw new ContainerBuildError(`Invalid build arg key: "${key}". Must match ${VALID_BUILD_ARG_KEY.source}`, 'INVALID_BUILD_ARG', ['Build arg keys must be valid Docker ARG names (alphanumeric + underscore, starting with letter/underscore).']);
+        }
+        if (typeof value === 'string' && value.includes('\n')) {
+            throw new ContainerBuildError(`Build arg value for "${key}" contains newlines, which may break Docker --build-arg parsing.`, 'INVALID_BUILD_ARG', ['Remove newlines from build arg values.']);
+        }
+    }
+}
+/**
+ * Execute a Docker CLI command.
+ *
+ * Streams output to the logger in real-time unless `quiet` is set.
+ * Throws ContainerBuildError on non-zero exit or timeout.
+ */
+export async function execDocker(args, options = {}) {
+    const { stdin, quiet = false, timeout = 300_000 } = options;
+    // Redact --build-arg values in logs to prevent secret leakage
+    const redactedArgs = args.map((arg, i) => args[i - 1] === '--build-arg' && arg.includes('=')
+        ? `${arg.split('=')[0]}=***`
+        : arg);
+    logger.debug('Executing docker command', { args: ['docker', ...redactedArgs] });
+    const proc = Bun.spawn(['docker', ...args], {
+        stdout: 'pipe',
+        stderr: 'pipe',
+        stdin: stdin ? 'pipe' : undefined,
+    });
+    if (stdin && proc.stdin) {
+        proc.stdin.write(stdin);
+        proc.stdin.end();
+    }
+    // Start reading streams immediately (before awaiting exit) to prevent
+    // resource leaks if the process is killed by timeout.
+    const stdoutPromise = new Response(proc.stdout).text().catch(() => '');
+    const stderrPromise = new Response(proc.stderr).text().catch(() => '');
+    // Race exit against timeout. The timeout promise has a .catch() no-op to
+    // prevent unhandled rejections if the timeout fires at the exact moment
+    // the process exits (race condition at the boundary).
+    let timeoutTimer;
+    const timeoutPromise = new Promise((_, reject) => {
+        timeoutTimer = setTimeout(() => {
+            proc.kill();
+            reject(new ContainerBuildError(`Docker command timed out after ${timeout}ms: docker ${redactedArgs.join(' ')}`, 'BUILD_TIMEOUT', ['Increase the timeout option.', 'Check network connectivity for pulls.']));
+        }, timeout);
+    });
+    timeoutPromise.catch(() => { });
+    const exitCode = await Promise.race([proc.exited, timeoutPromise]).finally(() => {
+        if (timeoutTimer !== undefined)
+            clearTimeout(timeoutTimer);
+    });
+    const stdout = await stdoutPromise;
+    const stderr = await stderrPromise;
+    if (!quiet && stdout.trim()) {
+        for (const line of stdout.trim().split('\n').slice(-20)) {
+            logger.info(line);
+        }
+    }
+    if (exitCode !== 0) {
+        if (!quiet) {
+            for (const line of stderr.trim().split('\n')) {
+                logger.error(line);
+            }
+        }
+        throw ContainerBuildError.buildFailed(exitCode, stderr);
+    }
+    return { exitCode, stdout, stderr };
+}
+/**
+ * Check if Docker is available and the daemon is running.
+ */
+export async function checkDockerAvailable() {
+    try {
+        const proc = Bun.spawn(['docker', 'version', '--format', '{{.Server.Version}}'], {
+            stdout: 'pipe',
+            stderr: 'pipe',
+        });
+        // Read both streams concurrently before awaiting exit
+        const stdoutPromise = new Response(proc.stdout).text().catch(() => '');
+        const stderrPromise = new Response(proc.stderr).text().catch(() => '');
+        const exitCode = await proc.exited;
+        const stdout = await stdoutPromise;
+        const stderr = await stderrPromise;
+        if (exitCode !== 0) {
+            throw ContainerBuildError.dockerNotAvailable(stderr.trim());
+        }
+        logger.debug('Docker available', { version: stdout.trim() });
+    }
+    catch (error) {
+        if (error instanceof ContainerBuildError)
+            throw error;
+        throw ContainerBuildError.dockerNotAvailable(error instanceof Error ? error.message : String(error));
+    }
+}
+//# sourceMappingURL=exec.js.map

package/dist/core/containers/exec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.js","sourceRoot":"","sources":["../../../src/core/containers/exec.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,MAAM,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;AAEpD,0CAA0C;AAC1C,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AAiBvD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAiC;IACjE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,mBAAmB,CAC3B,2BAA2B,GAAG,iBAAiB,mBAAmB,CAAC,MAAM,EAAE,EAC3E,mBAAmB,EACnB,CAAC,6GAA6G,CAAC,CAChH,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,mBAAmB,CAC3B,wBAAwB,GAAG,kEAAkE,EAC7F,mBAAmB,EACnB,CAAC,wCAAwC,CAAC,CAC3C,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAc,EACd,UAA6B,EAAE;IAE/B,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE,GAAG,OAAO,CAAC;IAE5D,8DAA8D;IAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CACvC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,aAAa,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;QAChD,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM;QAC5B,CAAC,CAAC,GAAG,CACR,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IAEhF,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,EAAE;QAC1C,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;KAClC,CAAC,CAAC;IAEH,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACnB,CAAC;IAED,sEAAsE;IACtE,sDAAsD;IACtD,MAAM,aAAa,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACvE,MAAM,aAAa,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAEvE,yEAAyE;IACzE,wEAAwE;IACxE,sDAAsD;IACtD,IAAI,YAAuD,CAAC;IAC5D,MAAM,cAAc,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QACtD,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;YAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,mBAAmB,CAC5B,kCAAkC,OAAO,cAAc,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAC/E,eAAe,EACf,CAAC,8BAA8B,EAAE,uCAAuC,CAAC,CAC1E,CAAC,CAAC;QACL,CAAC,EAAE,OAAO,CAAC,CAAC;IACd,CAAC,CAAC,CAAC;IACH,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,GAAsD,CAAC,CAAC,CAAC;IAEnF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;QAC9E,IAAI,YAAY,KAAK,SAAS;YAAE,YAAY,CAAC,YAAY,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;IAEnC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACxD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,MAAM,mBAAmB,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,qBAAqB,CAAC,EAAE;YAC/E,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QACH,sDAAsD;QACtD,MAAM,aAAa,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACvE,MAAM,aAAa,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;QAEnC,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;YACnB,MAAM,mBAAmB,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,mBAAmB;YAAE,MAAM,KAAK,CAAC;QACtD,MAAM,mBAAmB,CAAC,kBAAkB,CAC1C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/core/containers/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Container Build Utilities
+ *
+ * Build Docker images and push them to container registries.
+ * Returns image URIs for use in TypeKro compositions.
+ *
+ * @example
+ * ```typescript
+ * import { buildContainer } from 'typekro/containers';
+ *
+ * const { imageUri } = await buildContainer({
+ *   context: './apps/my-app',
+ *   imageName: 'my-app',
+ *   registry: { type: 'orbstack' },
+ * });
+ * ```
+ */
+export { buildContainer } from './build.js';
+export { ContainerBuildError } from './errors.js';
+export type { ContainerBuildOptions, ContainerBuildResult, EcrRegistryConfig, OrbstackRegistryConfig, RegistryConfig, } from './registries/types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/containers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/containers/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,YAAY,EACV,qBAAqB,EACrB,oBAAoB,EACpB,iBAAiB,EACjB,sBAAsB,EACtB,cAAc,GACf,MAAM,uBAAuB,CAAC"}

package/dist/core/containers/index.js

@@ -0,0 +1,20 @@
+/**
+ * Container Build Utilities
+ *
+ * Build Docker images and push them to container registries.
+ * Returns image URIs for use in TypeKro compositions.
+ *
+ * @example
+ * ```typescript
+ * import { buildContainer } from 'typekro/containers';
+ *
+ * const { imageUri } = await buildContainer({
+ *   context: './apps/my-app',
+ *   imageName: 'my-app',
+ *   registry: { type: 'orbstack' },
+ * });
+ * ```
+ */
+export { buildContainer } from './build.js';
+export { ContainerBuildError } from './errors.js';
+//# sourceMappingURL=index.js.map

package/dist/core/containers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/containers/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC"}

package/dist/core/containers/registries/ecr.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Amazon ECR Registry Handler
+ *
+ * Uses the AWS SDK's credential provider chain for all authentication.
+ * Supports env vars, profiles, SSO sessions, instance roles, and role
+ * assumption — all through the SDK's standard mechanisms.
+ */
+import type { EcrRegistryConfig, RegistryHandler } from './types.js';
+export declare class EcrRegistryHandler implements RegistryHandler {
+    private readonly config;
+    private resolvedAccountId;
+    private resolvedRegion;
+    private credentialProvider;
+    private ecrClient;
+    constructor(config: EcrRegistryConfig);
+    resolveImageUri(imageName: string, tag: string): Promise<string>;
+    authenticate(): Promise<void>;
+    push(imageUri: string, imageName: string): Promise<boolean>;
+    private getAccountId;
+    private ensureRepositoryExists;
+}
+//# sourceMappingURL=ecr.d.ts.map

package/dist/core/containers/registries/ecr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ecr.d.ts","sourceRoot":"","sources":["../../../../src/core/containers/registries/ecr.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAcH,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAIrE,qBAAa,kBAAmB,YAAW,eAAe;IAM5C,OAAO,CAAC,QAAQ,CAAC,MAAM;IALnC,OAAO,CAAC,iBAAiB,CAAqB;IAC9C,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,kBAAkB,CAAgC;IAC1D,OAAO,CAAC,SAAS,CAAY;gBAEA,MAAM,EAAE,iBAAiB;IAYhD,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKhE,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAgC7B,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;YAiBnD,YAAY;YAuBZ,sBAAsB;CAoBrC"}