akua / concepts

Concepts

The "why is it like this?" docs. If you want to know how akua composes, what's enforced where, and what's deliberately not specified — start here.

Package format
Package.k authoring shape — imports, schemas, body, and the `resources` output.
akua.toml + akua.lock
Manifest + lockfile shape, vendor-tree integration, and the verify pipeline.
Security model
Wasmtime sandbox, capability-model preopens, replace-rejection in production, and the cosign + SLSA chain.
Embedded engines
How KCL, Helm, OPA, Regal, Kustomize, kro, and the Kyverno→Rego converter ship as wasip1 modules inside akua.
CLI contract
Universal verb invariants: `--json`, typed exit codes, structured errors, agent auto-detection.
TypeScript SDK
Same surface as the CLI, exposed as `@akua-dev/sdk` with the helm + kustomize wasm engines bundled.
Agent usage
Skill format, agent-context auto-detection, and the install paths for Claude Code / Cursor / Codex / Goose / 25+ others.
Debugging the render pipeline
Walking through a failing render with `--explain`, `RUST_LOG`, and `--dry-run`.