Kubernetes config that fails at tsc, not at argocd sync flux reconcile

const api = defineApi({
  name: "api",
  source: src("api"),
  replicas: 1,
  sopsBase: "infra/secrets"
})
const worker = defineWorker({
  name: "worker",
  source: src("worker"),
  replicas: 1,
  sopsBase: "infra/secrets"
})

export default AppOfApps.fromModules({error TS2345: Missing provider for Image "api", Image "worker" and Secret "ghcr-pull".
Add a module that provides them to AppOfApps.fromModules({ modules }), or check that providers come before consumers in the list.
  target: { repoURL: cluster.repositoryUrl, branch, rootPath },
  defaults: {},
  modules: [api, worker]
})

const missingJwt = Environment.bind({
  env: apiEnv,
  namespace: "app",
  secretserror TS2741: Property 'jwt' is missing in secrets.
Every secret member of apiEnv (db, s3, jwt) needs a backend.: {
    db: { backend: dbBackend },
    s3: { backend: s3Backend }
  }
})

const emptyDb = Environment.bind({
  env: apiEnv,
  namespace: "app",
  secrets: {
    db: {}error TS2322: Type '{}' is not assignable to SecretMemberOptions<"db-creds">.
A member needs at least a backend.,
    s3: { backend: s3Backend },
    jwt: { backend: jwtBackend }
  }
})

// `Sops.backend` requires a `source` at the type level.
const sopsBackend = Sops.backend({
  recipients: {
    age: ["age1demo000000000000000000000000000000000000000000000000000example"]
  }
})
const missingSource = Environment.bind({
  env: apiEnv,
  namespace: "app",
  secrets: {
    db: { backend: sopsBackend }error TS2322: Property 'source' is missing.
Sops.backend requires a source; its type says requiresSource: true.,
    s3: { backend: s3Backend },
    jwt: { backend: jwtBackend }
  }
})

const api = Container.define({
  name: "api",
  image: "ghcr.io/example/api:1.0.0",
  ports: [Port.make({ name: "http", containerPort: 8080 })],
  readinessProbe: {
    httpGet: { path: "/healthz", port: Port.ref("htp")error TS2322: Type 'PortName<"htp">' is not assignable to type 'number | PortName<"http">'.
The container declares only the port "http". }
  }
})

const wrongTarget = Workload.web({
  name: "api",
  namespace: "app",
  deployment: { containers: [api] },
  service: { ports: [{ port: 80, targetPort: Port.ref("metrics")error TS2322: Type 'PortName<"metrics">' is not assignable to type 'number | PortName<"http">'.
No container in this workload declares a port named "metrics". }] }
})

const data = Volume.fromPvc({ name: "data", claim: PvcRef.of("postgres-data") })

const typo = Pod.define({
  volumes: [data],
  containers: [
    Container.define({error TS2322: Type 'ContainerSpec<"pg", "dat">' is not assignable to type 'ContainerSpec<string, "data">'.
The pod declares only the volume "data"; the mount names "dat".
      name: "postgres",
      image: "postgres:16",
      ports: [Port.make({ name: "pg", containerPort: 5432 })],
      volumeMounts: [{ name: Volume.mountRef("dat"), mountPath: "/var/lib/postgresql/data" }]
    })
  ]
})

const rawClaim = Volume.fromPvc({
  name: "data",
  claim: "postgres-data"error TS2322: Type 'string' is not assignable to type 'PvcRef<string>'.
Use PvcRef.of("postgres-data") or a Dep.Pvc provider so the claim is tracked.
})

const secretLiteralDup = Environment.define({error TS2345: Property '_konfig_error' is missing but required in type _EnvNameCollisionError<"DATABASE_URL">.
Two members claim the env var DATABASE_URL.
  db: Secret.define({
    name: "db",
    namespace: "app",
    env: { url: "DATABASE_URL" }
  }),
  shadow: Literal.define({ envName: "DATABASE_URL", value: "x" })
})