typekro 0.8.0 → 0.10.0

package/dist/factories/webapp/types.d.ts

@@ -16,13 +16,28 @@
  * Deploys: App + CNPG PostgreSQL + Valkey cache + Inngest workflow engine.
  * All connection strings are automatically wired into the app's environment.
  */
-export declare const WebAppWithProcessingConfigSchema: import("arktype/internal/methods/object.ts").ObjectType<{
+export declare const WebAppWithProcessingConfigSchema: import("arktype/internal/variants/object.ts").ObjectType<{
     name: string;
     app: {
         image: string;
         port?: number;
         replicas?: number;
         env?: Record<string, string>;
+        envFrom?: ({
+            secretRef: {
+                name: string;
+                optional?: boolean;
+            };
+            prefix?: string;
+            configMapRef?: never;
+        } | {
+            configMapRef: {
+                name: string;
+                optional?: boolean;
+            };
+            prefix?: string;
+            secretRef?: never;
+        })[];
     };
     database: {
         storageSize: string;
@@ -36,6 +51,16 @@ export declare const WebAppWithProcessingConfigSchema: import("arktype/internal/
         signingKey: string;
         sdkUrl?: string[];
         replicas?: number;
+        resources?: {
+            requests?: {
+                cpu?: string;
+                memory?: string;
+            };
+            limits?: {
+                cpu?: string;
+                memory?: string;
+            };
+        };
     };
     namespace?: string;
     cache?: {
@@ -44,6 +69,35 @@ export declare const WebAppWithProcessingConfigSchema: import("arktype/internal/
         volumePermissions?: boolean;
         storageSize?: string;
     };
+    cnpgOperator?: {
+        name?: string;
+        namespace?: string;
+        version?: string;
+        installCRDs?: boolean;
+        replicaCount?: number;
+        monitoring?: {
+            enabled?: boolean;
+        };
+        resources?: {
+            requests?: {
+                cpu?: string;
+                memory?: string;
+            };
+            limits?: {
+                cpu?: string;
+                memory?: string;
+            };
+        };
+        customValues?: Record<string, unknown>;
+        shared?: boolean;
+    };
+    valkeyOperator?: {
+        name?: string;
+        namespace?: string;
+        version?: string;
+        customValues?: Record<string, unknown>;
+        shared?: boolean;
+    };
 }, {}>;
 /** Inferred config type — no separate interface needed. */
 export type WebAppWithProcessingConfig = typeof WebAppWithProcessingConfigSchema.infer;
@@ -51,10 +105,14 @@ export type WebAppWithProcessingConfig = typeof WebAppWithProcessingConfigSchema
  * Status schema for the full-stack web application deployment.
  * Exposes connection URLs and readiness for each component.
  */
-export declare const WebAppWithProcessingStatusSchema: import("arktype/internal/methods/object.ts").ObjectType<{
+export declare const WebAppWithProcessingStatusSchema: import("arktype/internal/variants/object.ts").ObjectType<{
     ready: boolean;
     databaseUrl: string;
+    databaseHost: string;
+    databasePort: number;
     cacheUrl: string;
+    cacheHost: string;
+    cachePort: number;
     inngestUrl: string;
     appUrl: string;
     components: {

package/dist/factories/webapp/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/factories/webapp/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAQH;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAmD3C,CAAC;AAEH,2DAA2D;AAC3D,MAAM,MAAM,0BAA0B,GAAG,OAAO,gCAAgC,CAAC,KAAK,CAAC;AAEvF;;;GAGG;AACH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;MAY3C,CAAC;AAEH,4BAA4B;AAC5B,MAAM,MAAM,0BAA0B,GAAG,OAAO,gCAAgC,CAAC,KAAK,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/factories/webapp/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAyBH;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MA6G3C,CAAC;AAEH,2DAA2D;AAC3D,MAAM,MAAM,0BAA0B,GAAG,OAAO,gCAAgC,CAAC,KAAK,CAAC;AAEvF;;;GAGG;AACH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;MAgB3C,CAAC;AAEH,4BAA4B;AAC5B,MAAM,MAAM,0BAA0B,GAAG,OAAO,gCAAgC,CAAC,KAAK,CAAC"}

package/dist/factories/webapp/types.js

@@ -11,6 +11,21 @@
  * @module
  */
 import { type } from 'arktype';
+import { CnpgBootstrapConfigSchema } from '../cnpg/types.js';
+import { ValkeyBootstrapConfigSchema } from '../valkey/types.js';
+const resourceRequirementsSchemaShape = {
+    'requests?': { 'cpu?': 'string', 'memory?': 'string' },
+    'limits?': { 'cpu?': 'string', 'memory?': 'string' },
+};
+const envFromSourceSchema = type({
+    'prefix?': 'string',
+    secretRef: { name: 'string', 'optional?': 'boolean' },
+    'configMapRef?': 'never',
+}).or({
+    'prefix?': 'string',
+    configMapRef: { name: 'string', 'optional?': 'boolean' },
+    'secretRef?': 'never',
+});
 // ============================================================================
 // Config Schemas (source of truth) + Inferred Types
 // ============================================================================
@@ -35,6 +50,23 @@ export const WebAppWithProcessingConfigSchema = type({
         'replicas?': 'number',
         /** Additional environment variables. */
         'env?': 'Record<string, string>',
+        /**
+         * Inject all keys from Secrets or ConfigMaps as env vars via
+         * the container's `envFrom` field.
+         *
+         * **Each entry must have exactly one of** `secretRef` or `configMapRef`
+         * (not both, not neither). `prefix` and source `optional` are supported
+         * to match Kubernetes `V1EnvFromSource` / `V1SecretEnvSource` /
+         * `V1ConfigMapEnvSource` behavior.
+         *
+         * Note: in direct deployments, the composition prepends an inngest
+         * credentials Secret to this array. If you provide your own Secret
+         * containing `INNGEST_EVENT_KEY` or `INNGEST_SIGNING_KEY`, it will take
+         * precedence (last-write-wins in K8s envFrom ordering). KRO deployments
+         * mount only the generated credentials Secret because typed list fields
+         * cannot be safely concatenated in ResourceGraphDefinition YAML.
+         */
+        'envFrom?': envFromSourceSchema.array(),
     },
     /** PostgreSQL database settings. */
     database: {
@@ -44,7 +76,7 @@ export const WebAppWithProcessingConfigSchema = type({
         storageSize: 'string',
         /** Storage class name (e.g. 'gp3', 'local-path'). */
         'storageClass?': 'string',
-        /** Database name to create (default: derived from app name). */
+        /** Database name to create (default: 'app'). */
         'database?': 'string',
         /** Database owner (default: 'app'). */
         'owner?': 'string',
@@ -62,15 +94,56 @@ export const WebAppWithProcessingConfigSchema = type({
     },
     /** Inngest background processing settings. */
     processing: {
-        /** Inngest event authentication key (hex string, required). */
+        /**
+         * Inngest event authentication key (hex string, required).
+         * In KRO mode this value is part of the custom resource spec before being
+         * copied into a generated Secret; restrict read access to webapp CRs.
+         */
         eventKey: 'string',
-        /** Inngest request signing key (hex string, required). */
+        /**
+         * Inngest request signing key (hex string, required).
+         * In KRO mode this value is part of the custom resource spec before being
+         * copied into a generated Secret; restrict read access to webapp CRs.
+         */
         signingKey: 'string',
         /** SDK URLs to auto-sync functions from. */
         'sdkUrl?': 'string[]',
         /** Number of Inngest server replicas (default: 1). */
         'replicas?': 'number',
+        /** Pod resource requirements for the Inngest server. */
+        'resources?': resourceRequirementsSchemaShape,
     },
+    /**
+     * CloudNativePG operator install settings. The composition uses
+     * `singleton(cnpgBootstrap, ...)` so app stacks consume a shared
+     * operator boundary instead of inlining operator bootstrap resources
+     * into every KRO graph.
+     *
+     * The schema embeds the full `CnpgBootstrapConfigSchema` made
+     * partial (every field optional) so every field the underlying
+     * bootstrap supports is available here without duplication:
+     * `name`, `namespace`, `version`, `installCRDs`, `replicaCount`,
+     * `monitoring`, `resources`, `customValues`, `shared`.
+     *
+     * Defaults applied by the composition when omitted:
+     *   name: 'cnpg-operator'
+     *   namespace: 'cnpg-system'
+     *   shared: true (singleton — survives instance deletion)
+     *
+     * The defaults make the operator a shared cluster-level singleton:
+     * multiple `webAppWithProcessing` instances converge on the same install.
+     * `name`/`namespace` customize the install target, but the singleton identity
+     * is fixed by this composition's `cnpg-operator` singleton id.
+     */
+    'cnpgOperator?': CnpgBootstrapConfigSchema.partial(),
+    /**
+     * Hyperspike Valkey operator install settings. Same singleton-consumption
+     * pattern and fixed composition singleton identity as `cnpgOperator`. Defaults:
+     *   name: 'valkey-operator'
+     *   namespace: 'valkey-operator-system'
+     *   shared: true
+     */
+    'valkeyOperator?': ValkeyBootstrapConfigSchema.partial(),
 });
 /**
  * Status schema for the full-stack web application deployment.
@@ -79,7 +152,11 @@ export const WebAppWithProcessingConfigSchema = type({
 export const WebAppWithProcessingStatusSchema = type({
     ready: 'boolean',
     databaseUrl: 'string',
+    databaseHost: 'string',
+    databasePort: 'number',
     cacheUrl: 'string',
+    cacheHost: 'string',
+    cachePort: 'number',
     inngestUrl: 'string',
     appUrl: 'string',
     components: {

package/dist/factories/webapp/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/factories/webapp/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAE/B,+EAA+E;AAC/E,oDAAoD;AACpD,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,IAAI,CAAC;IACnD,2DAA2D;IAC3D,IAAI,EAAE,QAAQ;IACd,wBAAwB;IACxB,YAAY,EAAE,QAAQ;IACtB,uCAAuC;IACvC,GAAG,EAAE;QACH,8CAA8C;QAC9C,KAAK,EAAE,QAAQ;QACf,sCAAsC;QACtC,OAAO,EAAE,QAAQ;QACjB,uCAAuC;QACvC,WAAW,EAAE,QAAQ;QACrB,wCAAwC;QACxC,MAAM,EAAE,wBAAwB;KACjC;IACD,oCAAoC;IACpC,QAAQ,EAAE;QACR,mDAAmD;QACnD,YAAY,EAAE,QAAQ;QACtB,2CAA2C;QAC3C,WAAW,EAAE,QAAQ;QACrB,qDAAqD;QACrD,eAAe,EAAE,QAAQ;QACzB,gEAAgE;QAChE,WAAW,EAAE,QAAQ;QACrB,uCAAuC;QACvC,QAAQ,EAAE,QAAQ;KACnB;IACD,4FAA4F;IAC5F,QAAQ,EAAE;QACR,4CAA4C;QAC5C,SAAS,EAAE,QAAQ;QACnB,uCAAuC;QACvC,WAAW,EAAE,QAAQ;QACrB,gDAAgD;QAChD,oBAAoB,EAAE,SAAS;QAC/B,+CAA+C;QAC/C,cAAc,EAAE,QAAQ;KACzB;IACD,8CAA8C;IAC9C,UAAU,EAAE;QACV,+DAA+D;QAC/D,QAAQ,EAAE,QAAQ;QAClB,0DAA0D;QAC1D,UAAU,EAAE,QAAQ;QACpB,4CAA4C;QAC5C,SAAS,EAAE,UAAU;QACrB,sDAAsD;QACtD,WAAW,EAAE,QAAQ;KACtB;CACF,CAAC,CAAC;AAKH;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,IAAI,CAAC;IACnD,KAAK,EAAE,SAAS;IAChB,WAAW,EAAE,QAAQ;IACrB,QAAQ,EAAE,QAAQ;IAClB,UAAU,EAAE,QAAQ;IACpB,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE;QACV,GAAG,EAAE,SAAS;QACd,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,SAAS;KACnB;CACF,CAAC,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/factories/webapp/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AAEjE,MAAM,+BAA+B,GAAG;IACtC,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE;IACtD,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE;CAC5C,CAAC;AAEX,MAAM,mBAAmB,GAAG,IAAI,CAAC;IAC/B,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE;IACrD,eAAe,EAAE,OAAO;CACzB,CAAC,CAAC,EAAE,CAAC;IACJ,SAAS,EAAE,QAAQ;IACnB,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE;IACxD,YAAY,EAAE,OAAO;CACtB,CAAC,CAAC;AAEH,+EAA+E;AAC/E,oDAAoD;AACpD,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,IAAI,CAAC;IACnD,2DAA2D;IAC3D,IAAI,EAAE,QAAQ;IACd,wBAAwB;IACxB,YAAY,EAAE,QAAQ;IACtB,uCAAuC;IACvC,GAAG,EAAE;QACH,8CAA8C;QAC9C,KAAK,EAAE,QAAQ;QACf,sCAAsC;QACtC,OAAO,EAAE,QAAQ;QACjB,uCAAuC;QACvC,WAAW,EAAE,QAAQ;QACrB,wCAAwC;QACxC,MAAM,EAAE,wBAAwB;QAChC;;;;;;;;;;;;;;;WAeG;QACH,UAAU,EAAE,mBAAmB,CAAC,KAAK,EAAE;KACxC;IACD,oCAAoC;IACpC,QAAQ,EAAE;QACR,mDAAmD;QACnD,YAAY,EAAE,QAAQ;QACtB,2CAA2C;QAC3C,WAAW,EAAE,QAAQ;QACrB,qDAAqD;QACrD,eAAe,EAAE,QAAQ;QACzB,gDAAgD;QAChD,WAAW,EAAE,QAAQ;QACrB,uCAAuC;QACvC,QAAQ,EAAE,QAAQ;KACnB;IACD,4FAA4F;IAC5F,QAAQ,EAAE;QACR,4CAA4C;QAC5C,SAAS,EAAE,QAAQ;QACnB,uCAAuC;QACvC,WAAW,EAAE,QAAQ;QACrB,gDAAgD;QAChD,oBAAoB,EAAE,SAAS;QAC/B,+CAA+C;QAC/C,cAAc,EAAE,QAAQ;KACzB;IACD,8CAA8C;IAC9C,UAAU,EAAE;QACV;;;;WAIG;QACH,QAAQ,EAAE,QAAQ;QAClB;;;;WAIG;QACH,UAAU,EAAE,QAAQ;QACpB,4CAA4C;QAC5C,SAAS,EAAE,UAAU;QACrB,sDAAsD;QACtD,WAAW,EAAE,QAAQ;QACrB,wDAAwD;QACxD,YAAY,EAAE,+BAA+B;KAC9C;IACD;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,eAAe,EAAE,yBAAyB,CAAC,OAAO,EAAE;IACpD;;;;;;OAMG;IACH,iBAAiB,EAAE,2BAA2B,CAAC,OAAO,EAAE;CACzD,CAAC,CAAC;AAKH;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,IAAI,CAAC;IACnD,KAAK,EAAE,SAAS;IAChB,WAAW,EAAE,QAAQ;IACrB,YAAY,EAAE,QAAQ;IACtB,YAAY,EAAE,QAAQ;IACtB,QAAQ,EAAE,QAAQ;IAClB,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,QAAQ;IACnB,UAAU,EAAE,QAAQ;IACpB,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE;QACV,GAAG,EAAE,SAAS;QACd,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,SAAS;KACnB;CACF,CAAC,CAAC"}

package/dist/index.d.ts

@@ -87,13 +87,17 @@
  *
  * @packageDocumentation
  */
+export { AspectApplicationError, AspectDefinitionError, allResources, append, aspect, hotReload, merge, metadata, override, replace, resources, slot, withAnnotations, withEnvFrom, withEnvVars, withHotReload, withImagePullPolicy, withLabels, withLocalWorkspace, withMetadata, withReplicas, withResourceDefaults, withServiceAccount, workloads, } from './core/aspects/index.js';
+export type { AnnotationMap, EnvVarMap, HotReloadAspectOptions, HotReloadContainer, HotReloadVolume, LabelMap, LocalWorkspaceAspectOptions, } from './core/aspects/index.js';
+export type { AppendOperation, ApplyAspectsOptions, AspectBuilder, AspectCardinality, AspectDefinition, AspectDiagnosticsPolicy, AspectFactoryTarget, AspectFactoryTargetBrand, AspectFactoryTargetFunction, AspectFieldPath, AspectMode, AspectOperation, AspectOperationKind, AspectOverridePatch, AspectOverrideSchemaForTarget, AspectPatchValue, AspectSafetyContext, AspectSelector, AspectSurface, AspectSurfaceForCommonKinds, AspectSurfaceForTarget, AspectSurfaceKind, AspectSurfaceKindForTarget, AspectTarget, AspectTargetGroup, AspectValidationPolicy, CommonAspectSchema, CommonAspectSchemaForTargets, CommonAspectSchemaKeys, CommonAspectSchemaValue, CommonAspectSurfaceForTargets, CommonAspectSurfaceKindForTargets, CompatibleAspectTargets, FactoryAspectTargetDescriptor, ImagePullPolicy, MergeOperation, MergeByNameOperation, MetadataAspectSurface, OverrideAspectSurface, PatchEachOperation, ReplaceOperation, ResourceAspectFactoryTarget, ResourceAspectMetadata, ResourceSpecOverrideSchema, ToYamlOptions, WorkloadPodTemplateAspectSchema, WorkloadAspectFactoryTarget, } from './core/aspects/types.js';
 export { kubernetesComposition } from './core/composition/imperative.js';
 export { createResource } from './core/proxy/create-resource.js';
 export { Cel, cel, externalRef } from './core/references/index.js';
 export type { ResourceBuilder, ResourceDependency, SchemaDefinition, SerializationContext, SerializationOptions, ValidationResult, } from './core/serialization/index.js';
 export { generateKroSchema, generateKroSchemaFromArktype, serializeResourceGraphToYaml, toResourceGraph, validateResourceGraph, } from './core/serialization/index.js';
 export { arktypeToKroSchema } from './core/serialization/schema.js';
-export type { ResolutionContext } from './core/types/deployment.js';
+export { singleton } from './core/singleton/singleton.js';
+export type { ResolutionContext, SingletonHandle, SingletonOwnedHandle, SingletonReferenceHandle, } from './core/types/deployment.js';
 export type * from './core/types/index.js';
 export type { CelEvaluationContext } from './core/types/references.js';
 export { CelEvaluationError } from './core/types/references.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwFG;AAOH,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAEzE,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAEjE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACnE,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,iBAAiB,EACjB,4BAA4B,EAC5B,4BAA4B,EAC5B,eAAe,EACf,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,YAAY,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAEpE,mBAAmB,uBAAuB,CAAC;AAC3C,YAAY,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEhE,cAAc,sBAAsB,CAAC;AAErC,mBAAmB,iCAAiC,CAAC;AAMrD,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,oBAAoB,EACzB,uBAAuB,GACxB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,YAAY,EAAE,mBAAmB,EAAE,MAAM,gDAAgD,CAAC;AAC1F,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAMlF,YAAY,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAC7F,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,wBAAwB,EACxB,6BAA6B,GAC9B,MAAM,4BAA4B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwFG;AAOH,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,YAAY,EACZ,MAAM,EACN,MAAM,EACN,SAAS,EACT,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,SAAS,EACT,IAAI,EACJ,eAAe,EACf,WAAW,EACX,WAAW,EACX,aAAa,EACb,mBAAmB,EACnB,UAAU,EACV,kBAAkB,EAClB,YAAY,EACZ,YAAY,EACZ,oBAAoB,EACpB,kBAAkB,EAClB,SAAS,GACV,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,aAAa,EACb,SAAS,EACT,sBAAsB,EACtB,kBAAkB,EAClB,eAAe,EACf,QAAQ,EACR,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,eAAe,EACf,mBAAmB,EACnB,aAAa,EACb,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,EACvB,mBAAmB,EACnB,wBAAwB,EACxB,2BAA2B,EAC3B,eAAe,EACf,UAAU,EACV,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,6BAA6B,EAC7B,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,EACd,aAAa,EACb,2BAA2B,EAC3B,sBAAsB,EACtB,iBAAiB,EACjB,0BAA0B,EAC1B,YAAY,EACZ,iBAAiB,EACjB,sBAAsB,EACtB,kBAAkB,EAClB,4BAA4B,EAC5B,sBAAsB,EACtB,uBAAuB,EACvB,6BAA6B,EAC7B,iCAAiC,EACjC,uBAAuB,EACvB,6BAA6B,EAC7B,eAAe,EACf,cAAc,EACd,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,EAChB,2BAA2B,EAC3B,sBAAsB,EACtB,0BAA0B,EAC1B,aAAa,EACb,+BAA+B,EAC/B,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAEzE,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAEjE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACnE,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,iBAAiB,EACjB,4BAA4B,EAC5B,4BAA4B,EAC5B,eAAe,EACf,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC1D,YAAY,EACV,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,4BAA4B,CAAC;AAEpC,mBAAmB,uBAAuB,CAAC;AAC3C,YAAY,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEhE,cAAc,sBAAsB,CAAC;AAErC,mBAAmB,iCAAiC,CAAC;AAMrD,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,oBAAoB,EACzB,uBAAuB,GACxB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,YAAY,EAAE,mBAAmB,EAAE,MAAM,gDAAgD,CAAC;AAC1F,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAMlF,YAAY,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAC7F,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,wBAAwB,EACxB,6BAA6B,GAC9B,MAAM,4BAA4B,CAAC"}

package/dist/index.js

@@ -90,6 +90,8 @@
 // =============================================================================
 // 1. ESSENTIAL — Core APIs every user needs
 // =============================================================================
+// Aspect helpers for typed resource customization
+export { AspectApplicationError, AspectDefinitionError, allResources, append, aspect, hotReload, merge, metadata, override, replace, resources, slot, withAnnotations, withEnvFrom, withEnvVars, withHotReload, withImagePullPolicy, withLabels, withLocalWorkspace, withMetadata, withReplicas, withResourceDefaults, withServiceAccount, workloads, } from './core/aspects/index.js';
 // Imperative composition (define compositions with native TypeScript)
 export { kubernetesComposition } from './core/composition/imperative.js';
 // Resource factory (used inside resource builders)
@@ -100,6 +102,7 @@ export { Cel, cel, externalRef } from './core/references/index.js';
 export { generateKroSchema, generateKroSchemaFromArktype, serializeResourceGraphToYaml, toResourceGraph, validateResourceGraph, } from './core/serialization/index.js';
 // Schema conversion
 export { arktypeToKroSchema } from './core/serialization/schema.js';
+export { singleton } from './core/singleton/singleton.js';
 export { CelEvaluationError } from './core/types/references.js';
 // Factory functions (all ecosystems)
 export * from './factories/index.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwFG;AAEH,gFAAgF;AAChF,4CAA4C;AAC5C,gFAAgF;AAEhF,sEAAsE;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,mDAAmD;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,mDAAmD;AACnD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AASnE,iDAAiD;AACjD,OAAO,EACL,iBAAiB,EACjB,4BAA4B,EAC5B,4BAA4B,EAC5B,eAAe,EACf,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AACvC,oBAAoB;AACpB,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAKpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,qCAAqC;AACrC,cAAc,sBAAsB,CAAC;AAIrC,gFAAgF;AAChF,gEAAgE;AAChE,gFAAgF;AAEhF,OAAO,EAGL,uBAAuB,GACxB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAErE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAOlF,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,wBAAwB,EACxB,6BAA6B,GAC9B,MAAM,4BAA4B,CAAC;AAEpC,gFAAgF;AAChF,oEAAoE;AACpE,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,yDAAyD;AACzD,EAAE;AACF,8EAA8E;AAC9E,qFAAqF;AACrF,qFAAqF"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwFG;AAEH,gFAAgF;AAChF,4CAA4C;AAC5C,gFAAgF;AAEhF,kDAAkD;AAClD,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,YAAY,EACZ,MAAM,EACN,MAAM,EACN,SAAS,EACT,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,SAAS,EACT,IAAI,EACJ,eAAe,EACf,WAAW,EACX,WAAW,EACX,aAAa,EACb,mBAAmB,EACnB,UAAU,EACV,kBAAkB,EAClB,YAAY,EACZ,YAAY,EACZ,oBAAoB,EACpB,kBAAkB,EAClB,SAAS,GACV,MAAM,yBAAyB,CAAC;AA2DjC,sEAAsE;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,mDAAmD;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,mDAAmD;AACnD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AASnE,iDAAiD;AACjD,OAAO,EACL,iBAAiB,EACjB,4BAA4B,EAC5B,4BAA4B,EAC5B,eAAe,EACf,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AACvC,oBAAoB;AACpB,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAU1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,qCAAqC;AACrC,cAAc,sBAAsB,CAAC;AAIrC,gFAAgF;AAChF,gEAAgE;AAChE,gFAAgF;AAEhF,OAAO,EAGL,uBAAuB,GACxB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAErE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAOlF,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,wBAAwB,EACxB,6BAA6B,GAC9B,MAAM,4BAA4B,CAAC;AAEpC,gFAAgF;AAChF,oEAAoE;AACpE,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,yDAAyD;AACzD,EAAE;AACF,8EAA8E;AAC9E,qFAAqF;AACrF,qFAAqF"}

package/dist/shared/brands.d.ts

@@ -29,20 +29,30 @@ export declare const NESTED_COMPOSITION_BRAND: unique symbol;
  * Brand symbol for CallableComposition objects
  */
 export declare const CALLABLE_COMPOSITION_BRAND: unique symbol;
+/**
+ * Brand symbol for singleton handles.
+ */
+export declare const SINGLETON_HANDLE_BRAND: unique symbol;
 /**
  * Regex pattern for matching __KUBERNETES_REF__ marker strings in values.
  *
  * Format: __KUBERNETES_REF_{resourceId}_{fieldPath}__
- * - resourceId: camelCase with optional hyphens/digits (e.g., 'database', 'inngestBootstrap1')
- *   Hyphens are allowed for backward compatibility with older ID formats, though
- *   current convention enforces camelCase (toCamelCase in executeNestedCompositionWithSpec).
- * - fieldPath: dot-separated path with optional $ for iteration (e.g., 'status.ready', 'spec.workers.$item.name')
+ * - resourceId: marker-safe resource id with optional single `_` segments.
+ *   This permits underscores in resource ids while preventing matches from
+ *   consuming across the `__` marker terminator.
+ * - fieldPath: dot-separated path with optional single `_` and `$` segments.
+ *   Optional resource access uses Kro's `.?field` segment form.
+ *   (e.g., 'status.ready', 'status.?loadBalancer', 'spec.workers.$item.name')
  * - Excludes __schema__ refs via negative lookahead
  *
- * This pattern is the single source of truth — all marker detection/resolution
- * code must use this constant to stay in sync. Callers must create their own
- * RegExp via `new RegExp(KUBERNETES_REF_MARKER_PATTERN.source, 'g')` to avoid
- * stateful lastIndex issues with the global flag.
+ * This grammar is the single source of truth — all marker detection/resolution
+ * code must use these constants to stay in sync. Callers must create their own
+ * RegExp via `new RegExp(..., 'g')` to avoid stateful lastIndex issues with
+ * the global flag.
  */
+export declare const KUBERNETES_REF_MARKER_RESOURCE_ID_SOURCE = "[a-zA-Z0-9$-]+(?:_[a-zA-Z0-9$-]+)*";
+export declare const KUBERNETES_REF_MARKER_FIELD_PATH_SOURCE = "(?:spec|status|metadata|data)(?:(?:[.$]|\\.\\?)[a-zA-Z0-9$-]+(?:_[a-zA-Z0-9$-]+)*)*";
+export declare const KUBERNETES_REF_MARKER_SOURCE = "__KUBERNETES_REF_(__schema__|[a-zA-Z0-9$-]+(?:_[a-zA-Z0-9$-]+)*)_((?:spec|status|metadata|data)(?:(?:[.$]|\\.\\?)[a-zA-Z0-9$-]+(?:_[a-zA-Z0-9$-]+)*)*)__";
+export declare const KUBERNETES_REF_SCHEMA_MARKER_SOURCE = "__KUBERNETES_REF___schema___((?:spec|status|metadata|data)(?:(?:[.$]|\\.\\?)[a-zA-Z0-9$-]+(?:_[a-zA-Z0-9$-]+)*)*)__";
 export declare const KUBERNETES_REF_MARKER_PATTERN: RegExp;
 //# sourceMappingURL=brands.d.ts.map

package/dist/shared/brands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"brands.d.ts","sourceRoot":"","sources":["../../src/shared/brands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;GAEG;AACH,eAAO,MAAM,oBAAoB,eAAsC,CAAC;AAExE;;GAEG;AACH,eAAO,MAAM,oBAAoB,eAAsC,CAAC;AAExE;;GAEG;AACH,eAAO,MAAM,oBAAoB,eAAsC,CAAC;AAExE;;GAEG;AACH,eAAO,MAAM,wBAAwB,eAA0C,CAAC;AAEhF;;GAEG;AACH,eAAO,MAAM,0BAA0B,eAA4C,CAAC;AAEpF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,6BAA6B,QAAyE,CAAC"}
+{"version":3,"file":"brands.d.ts","sourceRoot":"","sources":["../../src/shared/brands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;GAEG;AACH,eAAO,MAAM,oBAAoB,eAAsC,CAAC;AAExE;;GAEG;AACH,eAAO,MAAM,oBAAoB,eAAsC,CAAC;AAExE;;GAEG;AACH,eAAO,MAAM,oBAAoB,eAAsC,CAAC;AAExE;;GAEG;AACH,eAAO,MAAM,wBAAwB,eAA0C,CAAC;AAEhF;;GAEG;AACH,eAAO,MAAM,0BAA0B,eAA4C,CAAC;AAEpF;;GAEG;AACH,eAAO,MAAM,sBAAsB,eAAwC,CAAC;AAE5E;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,wCAAwC,uCAAuC,CAAC;AAC7F,eAAO,MAAM,uCAAuC,wFAAwF,CAAC;AAC7I,eAAO,MAAM,4BAA4B,6JAA6H,CAAC;AACvK,eAAO,MAAM,mCAAmC,wHAA+E,CAAC;AAChI,eAAO,MAAM,6BAA6B,QAEzC,CAAC"}

package/dist/shared/brands.js

@@ -29,20 +29,30 @@ export const NESTED_COMPOSITION_BRAND = Symbol.for('TypeKro.NestedComposition');
  * Brand symbol for CallableComposition objects
  */
 export const CALLABLE_COMPOSITION_BRAND = Symbol.for('TypeKro.CallableComposition');
+/**
+ * Brand symbol for singleton handles.
+ */
+export const SINGLETON_HANDLE_BRAND = Symbol.for('TypeKro.SingletonHandle');
 /**
  * Regex pattern for matching __KUBERNETES_REF__ marker strings in values.
  *
  * Format: __KUBERNETES_REF_{resourceId}_{fieldPath}__
- * - resourceId: camelCase with optional hyphens/digits (e.g., 'database', 'inngestBootstrap1')
- *   Hyphens are allowed for backward compatibility with older ID formats, though
- *   current convention enforces camelCase (toCamelCase in executeNestedCompositionWithSpec).
- * - fieldPath: dot-separated path with optional $ for iteration (e.g., 'status.ready', 'spec.workers.$item.name')
+ * - resourceId: marker-safe resource id with optional single `_` segments.
+ *   This permits underscores in resource ids while preventing matches from
+ *   consuming across the `__` marker terminator.
+ * - fieldPath: dot-separated path with optional single `_` and `$` segments.
+ *   Optional resource access uses Kro's `.?field` segment form.
+ *   (e.g., 'status.ready', 'status.?loadBalancer', 'spec.workers.$item.name')
  * - Excludes __schema__ refs via negative lookahead
  *
- * This pattern is the single source of truth — all marker detection/resolution
- * code must use this constant to stay in sync. Callers must create their own
- * RegExp via `new RegExp(KUBERNETES_REF_MARKER_PATTERN.source, 'g')` to avoid
- * stateful lastIndex issues with the global flag.
+ * This grammar is the single source of truth — all marker detection/resolution
+ * code must use these constants to stay in sync. Callers must create their own
+ * RegExp via `new RegExp(..., 'g')` to avoid stateful lastIndex issues with
+ * the global flag.
  */
-export const KUBERNETES_REF_MARKER_PATTERN = /(?:__KUBERNETES_REF_)(?!_schema__)([a-zA-Z0-9-]+)_([a-zA-Z0-9.$]+)__/;
+export const KUBERNETES_REF_MARKER_RESOURCE_ID_SOURCE = '[a-zA-Z0-9$-]+(?:_[a-zA-Z0-9$-]+)*';
+export const KUBERNETES_REF_MARKER_FIELD_PATH_SOURCE = '(?:spec|status|metadata|data)(?:(?:[.$]|\\.\\?)[a-zA-Z0-9$-]+(?:_[a-zA-Z0-9$-]+)*)*';
+export const KUBERNETES_REF_MARKER_SOURCE = `__KUBERNETES_REF_(__schema__|${KUBERNETES_REF_MARKER_RESOURCE_ID_SOURCE})_(${KUBERNETES_REF_MARKER_FIELD_PATH_SOURCE})__`;
+export const KUBERNETES_REF_SCHEMA_MARKER_SOURCE = `__KUBERNETES_REF___schema___(${KUBERNETES_REF_MARKER_FIELD_PATH_SOURCE})__`;
+export const KUBERNETES_REF_MARKER_PATTERN = new RegExp(`(?:__KUBERNETES_REF_)(?!__schema__)(${KUBERNETES_REF_MARKER_RESOURCE_ID_SOURCE})_(${KUBERNETES_REF_MARKER_FIELD_PATH_SOURCE})__`);
 //# sourceMappingURL=brands.js.map

package/dist/shared/brands.js.map

@@ -1 +1 @@
-{"version":3,"file":"brands.js","sourceRoot":"","sources":["../../src/shared/brands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;AAExE;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;AAExE;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;AAExE;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;AAEhF;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;AAEpF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,sEAAsE,CAAC"}
+{"version":3,"file":"brands.js","sourceRoot":"","sources":["../../src/shared/brands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;AAExE;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;AAExE;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;AAExE;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;AAEhF;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;AAEpF;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;AAE5E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAG,oCAAoC,CAAC;AAC7F,MAAM,CAAC,MAAM,uCAAuC,GAAG,qFAAqF,CAAC;AAC7I,MAAM,CAAC,MAAM,4BAA4B,GAAG,gCAAgC,wCAAwC,MAAM,uCAAuC,KAAK,CAAC;AACvK,MAAM,CAAC,MAAM,mCAAmC,GAAG,gCAAgC,uCAAuC,KAAK,CAAC;AAChI,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,MAAM,CACrD,uCAAuC,wCAAwC,MAAM,uCAAuC,KAAK,CAClI,CAAC"}

package/dist/utils/cel-escape.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Escape a string for safe embedding inside a CEL string literal.
+ *
+ * Handles backslash, double-quote, newline, carriage return, and tab.
+ * Must be used everywhere we embed literal text in CEL output.
+ *
+ * This is the **single source of truth** for CEL string escaping —
+ * all modules that need to produce CEL string literals should import
+ * from here rather than maintaining inline copies.
+ */
+export declare function escapeCelString(value: string): string;
+//# sourceMappingURL=cel-escape.d.ts.map

package/dist/utils/cel-escape.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cel-escape.d.ts","sourceRoot":"","sources":["../../src/utils/cel-escape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOrD"}

package/dist/utils/cel-escape.js

@@ -0,0 +1,19 @@
+/**
+ * Escape a string for safe embedding inside a CEL string literal.
+ *
+ * Handles backslash, double-quote, newline, carriage return, and tab.
+ * Must be used everywhere we embed literal text in CEL output.
+ *
+ * This is the **single source of truth** for CEL string escaping —
+ * all modules that need to produce CEL string literals should import
+ * from here rather than maintaining inline copies.
+ */
+export function escapeCelString(value) {
+    return value
+        .replace(/\\/g, '\\\\')
+        .replace(/"/g, '\\"')
+        .replace(/\n/g, '\\n')
+        .replace(/\r/g, '\\r')
+        .replace(/\t/g, '\\t');
+}
+//# sourceMappingURL=cel-escape.js.map

package/dist/utils/cel-escape.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cel-escape.js","sourceRoot":"","sources":["../../src/utils/cel-escape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,KAAK;SACT,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAC3B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "typekro",
-  "version": "0.8.0",
+  "version": "0.10.0",
   "description": "A control plane aware framework for orchestrating kubernetes resources like a programmer.",
   "type": "module",
   "repository": {
@@ -14,6 +14,10 @@
       "import": "./dist/index.js",
       "types": "./dist/index.d.ts"
     },
+    "./aspects": {
+      "import": "./dist/aspects.js",
+      "types": "./dist/aspects.d.ts"
+    },
     "./simple": {
       "import": "./dist/factories/simple/index.js",
       "types": "./dist/factories/simple/index.d.ts"
@@ -101,6 +105,7 @@
     "test:watch": "bun test --watch --timeout 10000 $(find test -name '*.test.ts' | grep -v integration)",
     "test:all": "bun run test && bun run test:integration:all",
     "test:integration": "./scripts/run-integration-tests.sh",
+    "test:integration:required": "REQUIRE_CLUSTER_TESTS=true ./scripts/run-integration-tests.sh",
     "test:integration:debug": "DEBUG_MODE=true ./scripts/run-integration-tests.sh",
     "typecheck": "bun run typecheck:lib && bun run typecheck:examples && bun run typecheck:tests",
     "typecheck:lib": "bun tsc --noEmit",
@@ -166,7 +171,7 @@
     "acorn": "8.15.0",
     "alchemy": "^0.62.3",
     "angular-expressions": "1.5.1",
-    "arktype": "^2.1.20",
+    "arktype": "^2.2.0",
     "cel-js": "^0.8.2",
     "estraverse": "^5.3.0",
     "ignore": "^7.0.5",