@flightctl/ui-components 1.0.2 → 1.1.0-rc1

package/dist/ui-components/src/components/Repository/CreateRepository/utils.js

@@ -0,0 +1,804 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handlePromises = exports.getResourceSync = exports.getRepository = exports.repositorySchema = exports.singleResourceSyncSchema = exports.repoSyncSchema = exports.getResourceSyncEditPatch = exports.getRepositoryPatches = exports.getInitValues = exports.getRepoTypeLabel = exports.getRepoUrlOrRegistry = exports.httpConfigToFormValues = exports.hasCredentialsSettings = exports.isOciRepoSpec = exports.isGitRepoSpec = exports.isHttpRepoSpec = void 0;
+const tslib_1 = require("tslib");
+const Yup = tslib_1.__importStar(require("yup"));
+const types_1 = require("@flightctl/types");
+const constants_1 = require("../../../constants");
+const error_1 = require("../../../utils/error");
+const patch_1 = require("../../../utils/patch");
+const validations_1 = require("../../form/validations");
+const MAX_PATH_LENGTH = 2048;
+const gitRepoUrlRegex = new RegExp(/^((http|git|ssh|http(s)|file|\/?)|(git@[\w.]+))(:(\/\/)?)([\w.@:/\-~]+)(\.git)?(\/)?$/);
+const httpRepoUrlRegex = /^(http|https)/;
+const pathRegex = /\/.+/;
+const jwtTokenRegexp = /^[A-Za-z0-9-_]+\.[A-Za-z0-9-_]+\.[A-Za-z0-9-_]+$/;
+const isHttpRepoSpec = (repoSpec) => repoSpec.type === types_1.RepoSpecType.RepoSpecTypeHttp;
+exports.isHttpRepoSpec = isHttpRepoSpec;
+const isGitRepoSpec = (repoSpec) => repoSpec.type === types_1.RepoSpecType.RepoSpecTypeGit;
+exports.isGitRepoSpec = isGitRepoSpec;
+const isOciRepoSpec = (repoSpec) => repoSpec.type === types_1.RepoSpecType.RepoSpecTypeOci;
+exports.isOciRepoSpec = isOciRepoSpec;
+const hasCredentialsSettings = (repoSpec) => {
+    var _a, _b, _c, _d;
+    // The credentials settings can be in different fields depending on the repository type
+    if ('sshConfig' in repoSpec) {
+        return Boolean((_a = repoSpec.sshConfig) === null || _a === void 0 ? void 0 : _a.sshPrivateKey);
+    }
+    else if ('httpConfig' in repoSpec) {
+        return Boolean(((_b = repoSpec.httpConfig) === null || _b === void 0 ? void 0 : _b.password) || ((_c = repoSpec.httpConfig) === null || _c === void 0 ? void 0 : _c['tls.crt']) || ((_d = repoSpec.httpConfig) === null || _d === void 0 ? void 0 : _d['tls.key']));
+    }
+    else if ('ociAuth' in repoSpec) {
+        return Boolean(repoSpec.ociAuth);
+    }
+    return false;
+};
+exports.hasCredentialsSettings = hasCredentialsSettings;
+const addHttpConfigPatches = (patches, values, httpConfig) => {
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q, _r, _s, _t, _u, _v;
+    // If httpConfig doesn't exist, create it as a whole object
+    if (!httpConfig) {
+        const value = {
+            skipServerVerification: (_a = values.httpConfig) === null || _a === void 0 ? void 0 : _a.skipServerVerification,
+        };
+        if (((_b = values.httpConfig) === null || _b === void 0 ? void 0 : _b.caCrt) && !value.skipServerVerification) {
+            value['ca.crt'] = btoa(values.httpConfig.caCrt);
+        }
+        if ((_d = (_c = values.httpConfig) === null || _c === void 0 ? void 0 : _c.basicAuth) === null || _d === void 0 ? void 0 : _d.use) {
+            value.password = values.httpConfig.basicAuth.password;
+            value.username = values.httpConfig.basicAuth.username;
+        }
+        if ((_f = (_e = values.httpConfig) === null || _e === void 0 ? void 0 : _e.mTlsAuth) === null || _f === void 0 ? void 0 : _f.use) {
+            if (values.httpConfig.mTlsAuth.tlsCrt) {
+                value['tls.crt'] = btoa(values.httpConfig.mTlsAuth.tlsCrt);
+            }
+            if (values.httpConfig.mTlsAuth.tlsKey) {
+                value['tls.key'] = btoa(values.httpConfig.mTlsAuth.tlsKey);
+            }
+        }
+        if ((_g = values.httpConfig) === null || _g === void 0 ? void 0 : _g.token) {
+            value.token = values.httpConfig.token;
+        }
+        patches.push({
+            op: 'add',
+            path: '/spec/httpConfig',
+            value,
+        });
+        return;
+    }
+    // httpConfig exists, patch individual properties
+    (0, patch_1.appendJSONPatch)({
+        patches,
+        newValue: (_h = values.httpConfig) === null || _h === void 0 ? void 0 : _h.skipServerVerification,
+        originalValue: httpConfig === null || httpConfig === void 0 ? void 0 : httpConfig.skipServerVerification,
+        path: '/spec/httpConfig/skipServerVerification',
+    });
+    if ((_j = values.httpConfig) === null || _j === void 0 ? void 0 : _j.skipServerVerification) {
+        if (httpConfig === null || httpConfig === void 0 ? void 0 : httpConfig['ca.crt']) {
+            patches.push({
+                op: 'remove',
+                path: '/spec/httpConfig/ca.crt',
+            });
+        }
+    }
+    else {
+        const caCrt = (_k = values.httpConfig) === null || _k === void 0 ? void 0 : _k.caCrt;
+        (0, patch_1.appendJSONPatch)({
+            patches,
+            newValue: caCrt ? btoa(caCrt) : caCrt,
+            originalValue: httpConfig === null || httpConfig === void 0 ? void 0 : httpConfig['ca.crt'],
+            path: '/spec/httpConfig/ca.crt',
+        });
+    }
+    if (!((_m = (_l = values.httpConfig) === null || _l === void 0 ? void 0 : _l.basicAuth) === null || _m === void 0 ? void 0 : _m.use)) {
+        if (httpConfig === null || httpConfig === void 0 ? void 0 : httpConfig.password) {
+            patches.push({
+                op: 'remove',
+                path: '/spec/httpConfig/password',
+            });
+        }
+        if (httpConfig === null || httpConfig === void 0 ? void 0 : httpConfig.username) {
+            patches.push({
+                op: 'remove',
+                path: '/spec/httpConfig/username',
+            });
+        }
+    }
+    else {
+        (0, patch_1.appendJSONPatch)({
+            patches,
+            newValue: (_o = values.httpConfig) === null || _o === void 0 ? void 0 : _o.basicAuth.password,
+            originalValue: httpConfig === null || httpConfig === void 0 ? void 0 : httpConfig.password,
+            path: '/spec/httpConfig/password',
+        });
+        (0, patch_1.appendJSONPatch)({
+            patches,
+            newValue: (_p = values.httpConfig) === null || _p === void 0 ? void 0 : _p.basicAuth.username,
+            originalValue: httpConfig === null || httpConfig === void 0 ? void 0 : httpConfig.username,
+            path: '/spec/httpConfig/username',
+        });
+    }
+    if (!((_r = (_q = values.httpConfig) === null || _q === void 0 ? void 0 : _q.mTlsAuth) === null || _r === void 0 ? void 0 : _r.use)) {
+        if (httpConfig === null || httpConfig === void 0 ? void 0 : httpConfig['tls.crt']) {
+            patches.push({
+                op: 'remove',
+                path: '/spec/httpConfig/tls.crt',
+            });
+        }
+        if (httpConfig === null || httpConfig === void 0 ? void 0 : httpConfig['tls.key']) {
+            patches.push({
+                op: 'remove',
+                path: '/spec/httpConfig/tls.key',
+            });
+        }
+    }
+    else {
+        (0, patch_1.appendJSONPatch)({
+            patches,
+            newValue: (_s = values.httpConfig) === null || _s === void 0 ? void 0 : _s.mTlsAuth.tlsCrt,
+            originalValue: httpConfig === null || httpConfig === void 0 ? void 0 : httpConfig['tls.crt'],
+            path: '/spec/httpConfig/tls.crt',
+            encodeB64: true,
+        });
+        (0, patch_1.appendJSONPatch)({
+            patches,
+            newValue: (_t = values.httpConfig) === null || _t === void 0 ? void 0 : _t.mTlsAuth.tlsKey,
+            originalValue: httpConfig === null || httpConfig === void 0 ? void 0 : httpConfig['tls.key'],
+            path: '/spec/httpConfig/tls.key',
+            encodeB64: true,
+        });
+    }
+    if (!((_u = values.httpConfig) === null || _u === void 0 ? void 0 : _u.token)) {
+        if (httpConfig === null || httpConfig === void 0 ? void 0 : httpConfig.token) {
+            patches.push({
+                op: 'remove',
+                path: '/spec/httpConfig/token',
+            });
+        }
+    }
+    else {
+        (0, patch_1.appendJSONPatch)({
+            patches,
+            newValue: (_v = values.httpConfig) === null || _v === void 0 ? void 0 : _v.token,
+            originalValue: httpConfig === null || httpConfig === void 0 ? void 0 : httpConfig.token,
+            path: '/spec/httpConfig/token',
+        });
+    }
+};
+const getHttpRepositoryPatches = (values, repoSpec) => {
+    const patches = [];
+    (0, patch_1.appendJSONPatch)({
+        patches,
+        newValue: values.url,
+        originalValue: repoSpec.url,
+        path: '/spec/url',
+    });
+    if (!values.useAdvancedConfig) {
+        if (repoSpec.validationSuffix) {
+            patches.push({
+                op: 'remove',
+                path: '/spec/validationSuffix',
+            });
+        }
+        patches.push({
+            op: 'remove',
+            path: '/spec/httpConfig',
+        });
+        return patches;
+    }
+    // The rest of the fields are part of advanced settings
+    (0, patch_1.appendJSONPatch)({
+        patches,
+        newValue: values.validationSuffix,
+        originalValue: repoSpec.validationSuffix,
+        path: '/spec/validationSuffix',
+    });
+    addHttpConfigPatches(patches, values, repoSpec.httpConfig);
+    return patches;
+};
+const getOciRepositoryPatches = (values, repoSpec) => {
+    const formOciConfig = values.ociConfig;
+    if (!formOciConfig) {
+        return [];
+    }
+    const patches = [];
+    (0, patch_1.appendJSONPatch)({
+        patches,
+        newValue: formOciConfig.registry,
+        originalValue: repoSpec.registry,
+        path: '/spec/registry',
+    });
+    (0, patch_1.appendJSONPatch)({
+        patches,
+        newValue: formOciConfig.scheme || types_1.OciRepoSpec.scheme.HTTPS,
+        originalValue: repoSpec.scheme,
+        path: '/spec/scheme',
+    });
+    (0, patch_1.appendJSONPatch)({
+        patches,
+        newValue: formOciConfig.accessMode || types_1.OciRepoSpec.accessMode.READ,
+        originalValue: repoSpec.accessMode,
+        path: '/spec/accessMode',
+    });
+    if (!values.useAdvancedConfig) {
+        if (repoSpec.ociAuth) {
+            patches.push({ op: 'remove', path: '/spec/ociAuth' });
+        }
+        if (repoSpec['ca.crt']) {
+            patches.push({ op: 'remove', path: '/spec/ca.crt' });
+        }
+        if (repoSpec.skipServerVerification !== undefined) {
+            patches.push({ op: 'remove', path: '/spec/skipServerVerification' });
+        }
+        return patches;
+    }
+    (0, patch_1.appendJSONPatch)({
+        patches,
+        newValue: formOciConfig.skipServerVerification,
+        originalValue: repoSpec.skipServerVerification,
+        path: '/spec/skipServerVerification',
+    });
+    if (formOciConfig.skipServerVerification && repoSpec['ca.crt']) {
+        patches.push({ op: 'remove', path: '/spec/ca.crt' });
+    }
+    else {
+        const caCrt = formOciConfig.caCrt;
+        (0, patch_1.appendJSONPatch)({
+            patches,
+            newValue: caCrt ? btoa(caCrt) : caCrt,
+            originalValue: repoSpec['ca.crt'],
+            path: '/spec/ca.crt',
+        });
+    }
+    const ociAuth = formOciConfig.ociAuth;
+    if ((ociAuth === null || ociAuth === void 0 ? void 0 : ociAuth.use) && ociAuth.username && ociAuth.password) {
+        if (!repoSpec.ociAuth) {
+            const ociAuthValue = {
+                authType: types_1.OciAuthType.DOCKER,
+                username: ociAuth.username,
+                password: ociAuth.password,
+            };
+            patches.push({
+                op: 'add',
+                path: '/spec/ociAuth',
+                value: ociAuthValue,
+            });
+        }
+        else {
+            if (ociAuth.username !== repoSpec.ociAuth.username) {
+                (0, patch_1.appendJSONPatch)({
+                    patches,
+                    newValue: ociAuth.username,
+                    originalValue: repoSpec.ociAuth.username,
+                    path: '/spec/ociAuth/username',
+                });
+            }
+            if (ociAuth.password !== repoSpec.ociAuth.password) {
+                (0, patch_1.appendJSONPatch)({
+                    patches,
+                    newValue: ociAuth.password,
+                    originalValue: repoSpec.ociAuth.password,
+                    path: '/spec/ociAuth/password',
+                });
+            }
+        }
+    }
+    else if (repoSpec.ociAuth) {
+        patches.push({ op: 'remove', path: '/spec/ociAuth' });
+    }
+    return patches;
+};
+const getGitRepositoryPatches = (values, gitRepoSpec) => {
+    var _a, _b, _c, _d, _e, _f;
+    const patches = [];
+    (0, patch_1.appendJSONPatch)({
+        patches,
+        newValue: values.url,
+        originalValue: gitRepoSpec.url,
+        path: '/spec/url',
+    });
+    if (!values.useAdvancedConfig) {
+        if (gitRepoSpec.httpConfig) {
+            patches.push({
+                op: 'remove',
+                path: '/spec/httpConfig',
+            });
+        }
+        if (gitRepoSpec.sshConfig) {
+            patches.push({
+                op: 'remove',
+                path: '/spec/sshConfig',
+            });
+        }
+        return patches;
+    }
+    // Determine which config is being used based on form values (configType)
+    const usingHttpConfig = values.configType === 'http';
+    const usingSshConfig = values.configType === 'ssh';
+    if (usingHttpConfig) {
+        // Switching from SSH to HTTP or editing HTTP config
+        if (gitRepoSpec.sshConfig) {
+            patches.push({
+                op: 'remove',
+                path: '/spec/sshConfig',
+            });
+        }
+        addHttpConfigPatches(patches, values, gitRepoSpec.httpConfig);
+    }
+    else if (usingSshConfig) {
+        // Switching from HTTP to SSH or editing SSH config
+        if (gitRepoSpec.httpConfig) {
+            patches.push({
+                op: 'remove',
+                path: '/spec/httpConfig',
+            });
+        }
+        const sshConfig = gitRepoSpec.sshConfig;
+        // If sshConfig doesn't exist, create it as a whole object
+        if (!sshConfig) {
+            const value = {
+                privateKeyPassphrase: (_a = values.sshConfig) === null || _a === void 0 ? void 0 : _a.privateKeyPassphrase,
+                skipServerVerification: (_b = values.sshConfig) === null || _b === void 0 ? void 0 : _b.skipServerVerification,
+            };
+            if ((_c = values.sshConfig) === null || _c === void 0 ? void 0 : _c.sshPrivateKey) {
+                value.sshPrivateKey = btoa(values.sshConfig.sshPrivateKey);
+            }
+            patches.push({
+                op: 'add',
+                path: '/spec/sshConfig',
+                value,
+            });
+        }
+        else {
+            // sshConfig exists, patch individual properties
+            (0, patch_1.appendJSONPatch)({
+                patches,
+                newValue: (_d = values.sshConfig) === null || _d === void 0 ? void 0 : _d.privateKeyPassphrase,
+                originalValue: sshConfig === null || sshConfig === void 0 ? void 0 : sshConfig.privateKeyPassphrase,
+                path: '/spec/sshConfig/privateKeyPassphrase',
+            });
+            (0, patch_1.appendJSONPatch)({
+                patches,
+                newValue: (_e = values.sshConfig) === null || _e === void 0 ? void 0 : _e.skipServerVerification,
+                originalValue: sshConfig === null || sshConfig === void 0 ? void 0 : sshConfig.skipServerVerification,
+                path: '/spec/sshConfig/skipServerVerification',
+            });
+            (0, patch_1.appendJSONPatch)({
+                patches,
+                newValue: (_f = values.sshConfig) === null || _f === void 0 ? void 0 : _f.sshPrivateKey,
+                originalValue: sshConfig === null || sshConfig === void 0 ? void 0 : sshConfig.sshPrivateKey,
+                path: '/spec/sshConfig/sshPrivateKey',
+                encodeB64: true,
+            });
+        }
+    }
+    return patches;
+};
+/**
+ * Converts HttpConfig from the repository spec to form values format
+ */
+const httpConfigToFormValues = (httpConfig) => {
+    if (!httpConfig) {
+        return undefined;
+    }
+    return {
+        caCrt: httpConfig['ca.crt'] ? atob(httpConfig['ca.crt']) : undefined,
+        basicAuth: {
+            username: httpConfig.username,
+            password: httpConfig.password,
+            use: !!httpConfig.username || !!httpConfig.password,
+        },
+        mTlsAuth: {
+            tlsCrt: httpConfig['tls.crt'],
+            tlsKey: httpConfig['tls.key'],
+            use: !!httpConfig['tls.crt'] || !!httpConfig['tls.key'],
+        },
+        skipServerVerification: httpConfig.skipServerVerification,
+        token: httpConfig.token,
+    };
+};
+exports.httpConfigToFormValues = httpConfigToFormValues;
+const getRepoUrlOrRegistry = (repoSpec) => {
+    if (repoSpec.type === types_1.RepoSpecType.RepoSpecTypeOci) {
+        return repoSpec.registry || '';
+    }
+    return repoSpec.url || '';
+};
+exports.getRepoUrlOrRegistry = getRepoUrlOrRegistry;
+const getRepoTypeLabel = (t, repoType) => {
+    switch (repoType) {
+        case types_1.RepoSpecType.RepoSpecTypeHttp:
+            return t('HTTP service');
+        case types_1.RepoSpecType.RepoSpecTypeOci:
+            return t('OCI registry');
+        default:
+            return t('Git repository');
+    }
+};
+exports.getRepoTypeLabel = getRepoTypeLabel;
+const getInitValues = ({ repository, resourceSyncs, options, }) => {
+    var _a, _b, _c, _d;
+    const configAllowsResourceSyncs = (_a = options === null || options === void 0 ? void 0 : options.canUseResourceSyncs) !== null && _a !== void 0 ? _a : true;
+    if (!repository) {
+        const selectedRepoType = ((_b = options === null || options === void 0 ? void 0 : options.allowedRepoTypes) === null || _b === void 0 ? void 0 : _b.length) === 1 ? options.allowedRepoTypes[0] : types_1.RepoSpecType.RepoSpecTypeGit;
+        const canUseRSs = selectedRepoType === types_1.RepoSpecType.RepoSpecTypeGit && configAllowsResourceSyncs;
+        const initValues = {
+            exists: false,
+            repoType: selectedRepoType,
+            allowedRepoTypes: options === null || options === void 0 ? void 0 : options.allowedRepoTypes,
+            showRepoTypes: (_c = options === null || options === void 0 ? void 0 : options.showRepoTypes) !== null && _c !== void 0 ? _c : true,
+            name: '',
+            url: '',
+            useAdvancedConfig: false,
+            configType: 'http',
+            canUseResourceSyncs: canUseRSs,
+            useResourceSyncs: canUseRSs,
+            resourceSyncs: [
+                {
+                    name: '',
+                    path: '',
+                    targetRevision: '',
+                },
+            ],
+        };
+        if (selectedRepoType === types_1.RepoSpecType.RepoSpecTypeOci) {
+            initValues.ociConfig = {
+                registry: '',
+                scheme: types_1.OciRepoSpec.scheme.HTTPS,
+                accessMode: types_1.OciRepoSpec.accessMode.READ,
+            };
+        }
+        return initValues;
+    }
+    const canUseRSs = repository.spec.type === types_1.RepoSpecType.RepoSpecTypeGit && configAllowsResourceSyncs;
+    const formValues = {
+        exists: true,
+        name: repository.metadata.name || '',
+        url: repository.spec.type === types_1.RepoSpecType.RepoSpecTypeOci ? '' : repository.spec.url || '',
+        repoType: repository.spec.type,
+        validationSuffix: 'validationSuffix' in repository.spec ? repository.spec.validationSuffix : '',
+        allowedRepoTypes: options === null || options === void 0 ? void 0 : options.allowedRepoTypes,
+        showRepoTypes: (_d = options === null || options === void 0 ? void 0 : options.showRepoTypes) !== null && _d !== void 0 ? _d : true,
+        useAdvancedConfig: false,
+        configType: 'http',
+        canUseResourceSyncs: canUseRSs,
+        useResourceSyncs: canUseRSs && !!(resourceSyncs === null || resourceSyncs === void 0 ? void 0 : resourceSyncs.length),
+        resourceSyncs: (resourceSyncs === null || resourceSyncs === void 0 ? void 0 : resourceSyncs.length)
+            ? resourceSyncs
+                .filter((rs) => rs.spec.repository === repository.metadata.name)
+                .map((rs) => ({
+                name: rs.metadata.name || '',
+                path: rs.spec.path || '',
+                targetRevision: rs.spec.targetRevision || '',
+                exists: true,
+            }))
+            : [{ name: '', path: '', targetRevision: '' }],
+    };
+    if (repository.spec.type === types_1.RepoSpecType.RepoSpecTypeOci) {
+        formValues.useAdvancedConfig = !!(repository.spec.ociAuth ||
+            repository.spec['ca.crt'] ||
+            repository.spec.skipServerVerification);
+        formValues.ociConfig = {
+            registry: repository.spec.registry,
+            scheme: repository.spec.scheme || types_1.OciRepoSpec.scheme.HTTPS,
+            accessMode: repository.spec.accessMode || types_1.OciRepoSpec.accessMode.READ,
+            ociAuth: repository.spec.ociAuth
+                ? {
+                    use: true,
+                    username: repository.spec.ociAuth.username,
+                    password: repository.spec.ociAuth.password,
+                }
+                : undefined,
+            caCrt: repository.spec['ca.crt'] ? atob(repository.spec['ca.crt']) : undefined,
+            skipServerVerification: repository.spec.skipServerVerification,
+        };
+    }
+    else if (repository.spec.type === types_1.RepoSpecType.RepoSpecTypeHttp) {
+        formValues.configType = 'http';
+        formValues.validationSuffix = repository.spec.validationSuffix;
+        const valuesHttpConfig = (0, exports.httpConfigToFormValues)(repository.spec.httpConfig);
+        if (valuesHttpConfig) {
+            formValues.httpConfig = valuesHttpConfig;
+        }
+        formValues.useAdvancedConfig = !!formValues.httpConfig || !!formValues.validationSuffix;
+    }
+    else if (repository.spec.type === types_1.RepoSpecType.RepoSpecTypeGit) {
+        const gitRepoSpec = repository.spec;
+        if (gitRepoSpec.httpConfig) {
+            formValues.configType = 'http';
+            formValues.useAdvancedConfig = true;
+            formValues.httpConfig = (0, exports.httpConfigToFormValues)(gitRepoSpec.httpConfig);
+        }
+        else if (gitRepoSpec.sshConfig) {
+            formValues.configType = 'ssh';
+            formValues.useAdvancedConfig = true;
+            formValues.sshConfig = {
+                privateKeyPassphrase: gitRepoSpec.sshConfig.privateKeyPassphrase,
+                skipServerVerification: gitRepoSpec.sshConfig.skipServerVerification,
+                sshPrivateKey: gitRepoSpec.sshConfig.sshPrivateKey,
+            };
+        }
+    }
+    return formValues;
+};
+exports.getInitValues = getInitValues;
+const getRepositoryPatches = (values, repository) => {
+    // If repoType changes, replace the entire spec
+    if (values.repoType !== repository.spec.type) {
+        const newRepository = (0, exports.getRepository)(values);
+        return [
+            {
+                op: 'replace',
+                path: '/spec',
+                value: newRepository.spec,
+            },
+        ];
+    }
+    // Otherwise, we have the same type of repository, and we must patch only the fields that changed
+    if (values.repoType === types_1.RepoSpecType.RepoSpecTypeOci) {
+        return getOciRepositoryPatches(values, repository.spec);
+    }
+    if (values.repoType === types_1.RepoSpecType.RepoSpecTypeHttp) {
+        return getHttpRepositoryPatches(values, repository.spec);
+    }
+    if (values.repoType === types_1.RepoSpecType.RepoSpecTypeGit) {
+        return getGitRepositoryPatches(values, repository.spec);
+    }
+    return [];
+};
+exports.getRepositoryPatches = getRepositoryPatches;
+const getResourceSyncEditPatch = (rs) => {
+    // The patch is always an edition because adding / deleting RS can only be done via POST / DELETE api calls.
+    return [
+        {
+            op: 'replace',
+            path: '/spec/path',
+            value: rs.path,
+        },
+        {
+            op: 'replace',
+            path: '/spec/targetRevision',
+            value: rs.targetRevision,
+        },
+    ];
+};
+exports.getResourceSyncEditPatch = getResourceSyncEditPatch;
+const repoSyncSchema = (t, values) => {
+    return Yup.array()
+        .of(Yup.object().shape({
+        name: (0, validations_1.validKubernetesDnsSubdomain)(t, { isRequired: true }).test('unique name', (value, testContext) => {
+            const hasError = value && values.filter((v) => v.name === value).length !== 1;
+            return hasError
+                ? testContext.createError({
+                    message: {
+                        duplicateName: 'failed',
+                    },
+                })
+                : true;
+        }),
+        targetRevision: (0, validations_1.maxLengthString)(t, {
+            maxLength: validations_1.MAX_TARGET_REVISION_LENGTH,
+            fieldName: t('Target revision'),
+        }).defined(t('Target revision is required.')),
+        path: (0, validations_1.maxLengthString)(t, { maxLength: MAX_PATH_LENGTH, fieldName: t('Path') })
+            .matches(pathRegex, t('Must be an absolute path.'))
+            .defined(t('Path is required.')),
+    }))
+        .required();
+};
+exports.repoSyncSchema = repoSyncSchema;
+const singleResourceSyncSchema = (t, existingRSs) => {
+    return Yup.lazy((values) => {
+        // We combine the existing RSs with the one being created, to validate that the new name is unique
+        const combinedRSs = values.resourceSyncs.concat(existingRSs.map((rs) => ({
+            name: rs.metadata.name, // Only the name is relevant
+            path: '',
+            targetRevision: '',
+        })));
+        return Yup.object({
+            resourceSyncs: (0, exports.repoSyncSchema)(t, combinedRSs),
+        });
+    });
+};
+exports.singleResourceSyncSchema = singleResourceSyncSchema;
+// Regex for registry hostname: FQDN, IP address (IPv4 or IPv6), with optional port, matching as much as possible of the backend pattern
+const registryHostnameRegex = /^(([a-z0-9]([-a-z0-9]*[a-z0-9])?\.)*[a-z]([-a-z0-9]*[a-z0-9])?|[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}|\[[a-fA-F0-9:]+\])(:[0-9]{1,5})?$/;
+const repositorySchema = (t, repository) => (values) => {
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m;
+    const baseSchema = {
+        name: (0, validations_1.validKubernetesDnsSubdomain)(t, { isRequired: !repository }),
+        configType: values.useAdvancedConfig ? Yup.string().required(t('Repository type is required')) : Yup.string(),
+        httpConfig: Yup.object({
+            basicAuth: Yup.object({
+                username: ((_b = (_a = values.httpConfig) === null || _a === void 0 ? void 0 : _a.basicAuth) === null || _b === void 0 ? void 0 : _b.use) ? Yup.string().required(t('Username is required')) : Yup.string(),
+                password: ((_d = (_c = values.httpConfig) === null || _c === void 0 ? void 0 : _c.basicAuth) === null || _d === void 0 ? void 0 : _d.use) ? Yup.string().required(t('Password is required')) : Yup.string(),
+            }),
+            mTlsAuth: Yup.object({
+                tlsCrt: ((_f = (_e = values.httpConfig) === null || _e === void 0 ? void 0 : _e.mTlsAuth) === null || _f === void 0 ? void 0 : _f.use)
+                    ? Yup.string().required(t('Client TLS certificate is required'))
+                    : Yup.string(),
+                tlsKey: ((_h = (_g = values.httpConfig) === null || _g === void 0 ? void 0 : _g.mTlsAuth) === null || _h === void 0 ? void 0 : _h.use)
+                    ? Yup.string().required(t('Client TLS key is required'))
+                    : Yup.string(),
+            }),
+            token: Yup.string().matches(jwtTokenRegexp, t('Must be a valid JWT token')),
+        }),
+        useResourceSyncs: Yup.boolean(),
+        resourceSyncs: values.useResourceSyncs ? (0, exports.repoSyncSchema)(t, values.resourceSyncs) : Yup.array(),
+    };
+    if (values.repoType === types_1.RepoSpecType.RepoSpecTypeOci) {
+        return Yup.object(Object.assign(Object.assign({}, baseSchema), { url: Yup.string(), ociConfig: Yup.object({
+                registry: Yup.string()
+                    .matches(registryHostnameRegex, t('Enter a valid registry hostname (e.g., quay.io, registry.redhat.io, myregistry.com:5000)'))
+                    .required(t('Registry hostname is required')),
+                scheme: Yup.string().oneOf([types_1.OciRepoSpec.scheme.HTTP, types_1.OciRepoSpec.scheme.HTTPS]),
+                accessMode: Yup.string().oneOf([types_1.OciRepoSpec.accessMode.READ, types_1.OciRepoSpec.accessMode.READ_WRITE]),
+                ociAuth: Yup.object({
+                    use: Yup.boolean(),
+                    username: ((_k = (_j = values.ociConfig) === null || _j === void 0 ? void 0 : _j.ociAuth) === null || _k === void 0 ? void 0 : _k.use) ? Yup.string().required(t('Username is required')) : Yup.string(),
+                    password: ((_m = (_l = values.ociConfig) === null || _l === void 0 ? void 0 : _l.ociAuth) === null || _m === void 0 ? void 0 : _m.use) ? Yup.string().required(t('Password is required')) : Yup.string(),
+                }),
+                caCrt: Yup.string(),
+                skipServerVerification: Yup.boolean(),
+            }) }));
+    }
+    return Yup.object(Object.assign(Object.assign({}, baseSchema), { url: Yup.string().when('repoType', {
+            is: (repoType) => repoType === types_1.RepoSpecType.RepoSpecTypeGit,
+            then: () => Yup.string()
+                .matches(gitRepoUrlRegex, t('Enter a valid repository URL. Example: {{ demoRepositoryUrl }}', {
+                demoRepositoryUrl: 'https://github.com/flightctl/flightctl-demos',
+            }))
+                .defined(t('Repository URL is required')),
+            otherwise: () => Yup.string()
+                .matches(httpRepoUrlRegex, t('Enter a valid HTTP service URL. Example: https://my-service-url'))
+                .defined(t('HTTP service URL is required')),
+        }), ociConfig: Yup.object() }));
+};
+exports.repositorySchema = repositorySchema;
+const getRepository = (values) => {
+    var _a, _b, _c, _d, _e;
+    if (values.repoType === types_1.RepoSpecType.RepoSpecTypeOci && values.ociConfig) {
+        const ociRepoSpec = {
+            registry: values.ociConfig.registry,
+            type: types_1.RepoSpecType.RepoSpecTypeOci,
+            scheme: values.ociConfig.scheme || types_1.OciRepoSpec.scheme.HTTPS,
+            accessMode: values.ociConfig.accessMode || types_1.OciRepoSpec.accessMode.READ,
+        };
+        if (values.ociConfig.skipServerVerification) {
+            ociRepoSpec.skipServerVerification = true;
+        }
+        if (values.ociConfig.caCrt && !values.ociConfig.skipServerVerification) {
+            ociRepoSpec['ca.crt'] = btoa(values.ociConfig.caCrt);
+        }
+        if (((_a = values.ociConfig.ociAuth) === null || _a === void 0 ? void 0 : _a.use) && values.ociConfig.ociAuth.username && values.ociConfig.ociAuth.password) {
+            ociRepoSpec.ociAuth = {
+                authType: types_1.OciAuthType.DOCKER,
+                username: values.ociConfig.ociAuth.username,
+                password: values.ociConfig.ociAuth.password,
+            };
+        }
+        return {
+            apiVersion: constants_1.API_VERSION,
+            kind: 'Repository',
+            metadata: {
+                name: values.name,
+            },
+            spec: ociRepoSpec,
+        };
+    }
+    let spec;
+    if (values.repoType === types_1.RepoSpecType.RepoSpecTypeGit) {
+        spec = {
+            url: values.url,
+            type: types_1.RepoSpecType.RepoSpecTypeGit,
+        };
+    }
+    else {
+        spec = {
+            url: values.url,
+            type: types_1.RepoSpecType.RepoSpecTypeHttp,
+        };
+    }
+    // Handle config based on repository type
+    if (spec.type === types_1.RepoSpecType.RepoSpecTypeHttp) {
+        if (values.validationSuffix) {
+            spec.httpConfig = {
+                skipServerVerification: false,
+            };
+            spec.validationSuffix = values.validationSuffix;
+        }
+        if (values.httpConfig) {
+            spec.httpConfig = {
+                skipServerVerification: values.httpConfig.skipServerVerification,
+            };
+            const caCrt = values.httpConfig.caCrt;
+            if (caCrt && !values.httpConfig.skipServerVerification) {
+                spec.httpConfig['ca.crt'] = btoa(caCrt);
+            }
+            if ((_b = values.httpConfig.basicAuth) === null || _b === void 0 ? void 0 : _b.use) {
+                spec.httpConfig.username = values.httpConfig.basicAuth.username;
+                spec.httpConfig.password = values.httpConfig.basicAuth.password;
+            }
+            if ((_c = values.httpConfig.mTlsAuth) === null || _c === void 0 ? void 0 : _c.use) {
+                const tlsCrt = values.httpConfig.mTlsAuth.tlsCrt;
+                if (tlsCrt) {
+                    spec.httpConfig['tls.crt'] = btoa(tlsCrt);
+                }
+                const tlsKey = values.httpConfig.mTlsAuth.tlsKey;
+                if (tlsKey) {
+                    spec.httpConfig['tls.key'] = btoa(tlsKey);
+                }
+            }
+            if (values.httpConfig.token) {
+                spec.httpConfig.token = values.httpConfig.token;
+            }
+        }
+    }
+    else if (spec.type === types_1.RepoSpecType.RepoSpecTypeGit) {
+        if (values.configType === 'http' && values.httpConfig) {
+            spec.httpConfig = {
+                skipServerVerification: values.httpConfig.skipServerVerification,
+            };
+            const caCrt = values.httpConfig.caCrt;
+            if (caCrt && !values.httpConfig.skipServerVerification) {
+                spec.httpConfig['ca.crt'] = btoa(caCrt);
+            }
+            if ((_d = values.httpConfig.basicAuth) === null || _d === void 0 ? void 0 : _d.use) {
+                spec.httpConfig.username = values.httpConfig.basicAuth.username;
+                spec.httpConfig.password = values.httpConfig.basicAuth.password;
+            }
+            if ((_e = values.httpConfig.mTlsAuth) === null || _e === void 0 ? void 0 : _e.use) {
+                const tlsCrt = values.httpConfig.mTlsAuth.tlsCrt;
+                if (tlsCrt) {
+                    spec.httpConfig['tls.crt'] = btoa(tlsCrt);
+                }
+                const tlsKey = values.httpConfig.mTlsAuth.tlsKey;
+                if (tlsKey) {
+                    spec.httpConfig['tls.key'] = btoa(tlsKey);
+                }
+            }
+            // Note: GitRepoSpec doesn't support token
+        }
+        else if (values.configType === 'ssh' && values.sshConfig) {
+            spec.sshConfig = {
+                privateKeyPassphrase: values.sshConfig.privateKeyPassphrase,
+                skipServerVerification: values.sshConfig.skipServerVerification,
+            };
+            const sshPrivateKey = values.sshConfig.sshPrivateKey;
+            if (sshPrivateKey) {
+                spec.sshConfig.sshPrivateKey = btoa(sshPrivateKey);
+            }
+        }
+    }
+    return {
+        apiVersion: constants_1.API_VERSION,
+        kind: 'Repository',
+        metadata: {
+            name: values.name,
+        },
+        spec,
+    };
+};
+exports.getRepository = getRepository;
+const getResourceSync = (repositoryId, values) => {
+    return {
+        apiVersion: constants_1.API_VERSION,
+        kind: 'ResourceSync',
+        metadata: {
+            name: values.name,
+        },
+        spec: {
+            repository: repositoryId,
+            targetRevision: values.targetRevision,
+            path: values.path,
+        },
+    };
+};
+exports.getResourceSync = getResourceSync;
+const handlePromises = (promises) => tslib_1.__awaiter(void 0, void 0, void 0, function* () {
+    const results = yield Promise.allSettled(promises);
+    const failedPromises = results.filter((r) => r.status === 'rejected');
+    return failedPromises.map((fp) => (0, error_1.getErrorMessage)(fp.reason));
+});
+exports.handlePromises = handlePromises;
+//# sourceMappingURL=utils.js.map