@reyemtech/nimbus 1.3.0 → 2.0.1

package/dist/esm/argocd/app.d.ts

@@ -0,0 +1,31 @@
+/**
+ * ArgoCD Application management.
+ *
+ * @module argocd/app
+ */
+import * as k8s from "@pulumi/kubernetes";
+import type * as pulumi from "@pulumi/pulumi";
+import type { IArgoAppConfig, IArgoSecretsConfig, IArgoAppSecrets, IExternalSecretsConfig } from "./interfaces";
+import type { IExposedService } from "../types";
+import type { ICluster } from "../cluster";
+export declare class ArgoApp {
+    readonly name: string;
+    readonly namespace: string;
+    readonly project: string;
+    readonly resource: k8s.apiextensions.CustomResource;
+    private readonly cluster;
+    private exposedService?;
+    constructor(resourceName: string, name: string, config: IArgoAppConfig, cluster: ICluster, provider: k8s.Provider, dependsOn: pulumi.Resource[]);
+    /** Create K8s Secret with typed refs for Helm values. */
+    createSecrets(name: string, config: IArgoSecretsConfig): IArgoAppSecrets;
+    /** Create ExternalSecret CRD that ESO syncs from Vault to a K8s Secret. */
+    createExternalSecrets(name: string, config: IExternalSecretsConfig): IArgoAppSecrets;
+    /** Expose this app via the access gateway (Tailscale). */
+    expose(config: {
+        label: string;
+        port: number;
+    }): this;
+    /** Get the exposed service config (if expose() was called). */
+    getExposedService(): IExposedService | undefined;
+}
+//# sourceMappingURL=app.d.ts.map

package/dist/esm/argocd/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../../src/argocd/app.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAC1C,OAAO,KAAK,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,EACV,cAAc,EAId,kBAAkB,EAClB,eAAe,EAEf,sBAAsB,EACvB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AA6E3C,qBAAa,OAAO;IAClB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,aAAa,CAAC,cAAc,CAAC;IACpD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAW;IACnC,OAAO,CAAC,cAAc,CAAC,CAAkB;gBAGvC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,QAAQ,EACjB,QAAQ,EAAE,GAAG,CAAC,QAAQ,EACtB,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE;IAwD9B,yDAAyD;IACzD,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,GAAG,eAAe;IAQxE,2EAA2E;IAC3E,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,GAAG,eAAe;IAQpF,0DAA0D;IAC1D,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAUrD,+DAA+D;IAC/D,iBAAiB,IAAI,eAAe,GAAG,SAAS;CAGjD"}

package/dist/esm/argocd/app.js

@@ -0,0 +1,194 @@
+"use strict";
+/**
+ * ArgoCD Application management.
+ *
+ * @module argocd/app
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ArgoApp = void 0;
+const k8s = __importStar(require("@pulumi/kubernetes"));
+const secrets_1 = require("./secrets");
+const external_secrets_1 = require("./external-secrets");
+const argocd_app_1 = require("../observability/dashboards/argocd-app");
+const ARGOCD_NAMESPACE = "argocd";
+/**
+ * Build ArgoCD Application source spec from nimbus source config.
+ */
+function buildSourceSpec(source) {
+    if ("children" in source) {
+        throw new Error("Children source should be handled by the ArgoCD class, not buildSourceSpec");
+    }
+    let repoURL;
+    let isOci = false;
+    if ("repo" in source) {
+        const repo = source.repo;
+        repoURL = repo.url;
+        isOci = repo.type === "oci";
+    }
+    else {
+        repoURL = source.repoURL;
+    }
+    const spec = {
+        repoURL: isOci ? `oci://${repoURL}` : repoURL,
+    };
+    if (source.chart) {
+        spec["chart"] = source.chart;
+    }
+    if (source.version) {
+        spec["targetRevision"] = source.version;
+    }
+    else if (source.revision) {
+        spec["targetRevision"] = source.revision;
+    }
+    else {
+        spec["targetRevision"] = "HEAD";
+    }
+    if (source.path) {
+        spec["path"] = source.path;
+    }
+    if (source.values) {
+        spec["helm"] = {
+            valuesObject: source.values,
+            ...(source.releaseName ? { releaseName: source.releaseName } : {}),
+        };
+    }
+    else if (source.releaseName) {
+        spec["helm"] = { releaseName: source.releaseName };
+    }
+    return spec;
+}
+/**
+ * Build sync policy spec.
+ */
+function buildSyncPolicySpec(policy) {
+    if (!policy)
+        return undefined;
+    const spec = {};
+    if (policy.automated) {
+        spec["automated"] = {
+            prune: policy.prune ?? false,
+            selfHeal: policy.selfHeal ?? false,
+        };
+    }
+    if (policy.syncOptions) {
+        spec["syncOptions"] = policy.syncOptions;
+    }
+    return spec;
+}
+class ArgoApp {
+    name;
+    namespace;
+    project;
+    resource;
+    cluster;
+    exposedService;
+    constructor(resourceName, name, config, cluster, provider, dependsOn) {
+        this.name = name;
+        this.namespace = config.namespace;
+        this.project = config.project ?? "default";
+        this.cluster = cluster;
+        const source = buildSourceSpec(config.source);
+        const syncPolicy = buildSyncPolicySpec(config.syncPolicy);
+        const spec = {
+            project: this.project,
+            source,
+            destination: {
+                server: "https://kubernetes.default.svc",
+                namespace: config.namespace,
+            },
+        };
+        if (syncPolicy) {
+            spec["syncPolicy"] = syncPolicy;
+        }
+        // Notification annotations
+        const annotations = {};
+        if (config.notifications?.onSyncFailed !== false) {
+            annotations["notifications.argoproj.io/subscribe.on-sync-failed.email"] = "";
+        }
+        if (config.notifications?.onHealthDegraded !== false) {
+            annotations["notifications.argoproj.io/subscribe.on-health-degraded.email"] = "";
+        }
+        if (config.notifications?.onSyncSucceeded) {
+            annotations["notifications.argoproj.io/subscribe.on-sync-succeeded.email"] = "";
+        }
+        this.resource = new k8s.apiextensions.CustomResource(`${resourceName}-app-${name}`, {
+            apiVersion: "argoproj.io/v1alpha1",
+            kind: "Application",
+            metadata: {
+                name,
+                namespace: ARGOCD_NAMESPACE,
+                ...(Object.keys(annotations).length > 0 ? { annotations } : {}),
+            },
+            spec,
+        }, { provider, dependsOn });
+        // Auto-generate dashboard (default: true)
+        if (config.dashboard !== false) {
+            (0, argocd_app_1.createArgoAppDashboard)(name, provider);
+        }
+    }
+    /** Create K8s Secret with typed refs for Helm values. */
+    createSecrets(name, config) {
+        return (0, secrets_1.createAppSecrets)(name, {
+            namespace: this.namespace,
+            cluster: this.cluster,
+            secrets: config,
+        });
+    }
+    /** Create ExternalSecret CRD that ESO syncs from Vault to a K8s Secret. */
+    createExternalSecrets(name, config) {
+        return (0, external_secrets_1.createExternalSecrets)(name, {
+            namespace: this.namespace,
+            cluster: this.cluster,
+            secrets: config,
+        });
+    }
+    /** Expose this app via the access gateway (Tailscale). */
+    expose(config) {
+        this.exposedService = {
+            name: config.label,
+            namespace: this.namespace,
+            port: config.port,
+            label: config.label,
+        };
+        return this;
+    }
+    /** Get the exposed service config (if expose() was called). */
+    getExposedService() {
+        return this.exposedService;
+    }
+}
+exports.ArgoApp = ArgoApp;
+//# sourceMappingURL=app.js.map

package/dist/esm/argocd/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../../src/argocd/app.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,wDAA0C;AAc1C,uCAA6C;AAC7C,yDAA2D;AAC3D,uEAAgF;AAEhF,MAAM,gBAAgB,GAAG,QAAQ,CAAC;AAElC;;GAEG;AACH,SAAS,eAAe,CAAC,MAAsB;IAC7C,IAAI,UAAU,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,CAAC;IAED,IAAI,OAAe,CAAC;IACpB,IAAI,KAAK,GAAG,KAAK,CAAC;IAElB,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAoB,CAAC;QACzC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;QACnB,KAAK,GAAG,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC;IAC9B,CAAC;SAAM,CAAC;QACN,OAAO,GAAI,MAA4B,CAAC,OAAO,CAAC;IAClD,CAAC;IAED,MAAM,IAAI,GAA4B;QACpC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO;KAC9C,CAAC;IAEF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;IAC/B,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,IAAI,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;IAC1C,CAAC;SAAM,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC;IAClC,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,IAAI,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;IAC7B,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,IAAI,CAAC,MAAM,CAAC,GAAG;YACb,YAAY,EAAE,MAAM,CAAC,MAAM;YAC3B,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;IACrD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,MAAwB;IACnD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAE9B,MAAM,IAAI,GAA4B,EAAE,CAAC;IAEzC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,IAAI,CAAC,WAAW,CAAC,GAAG;YAClB,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK;YAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,KAAK;SACnC,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,IAAI,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC;IAC3C,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAa,OAAO;IACT,IAAI,CAAS;IACb,SAAS,CAAS;IAClB,OAAO,CAAS;IAChB,QAAQ,CAAmC;IACnC,OAAO,CAAW;IAC3B,cAAc,CAAmB;IAEzC,YACE,YAAoB,EACpB,IAAY,EACZ,MAAsB,EACtB,OAAiB,EACjB,QAAsB,EACtB,SAA4B;QAE5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,SAAS,CAAC;QAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAE1D,MAAM,IAAI,GAA4B;YACpC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM;YACN,WAAW,EAAE;gBACX,MAAM,EAAE,gCAAgC;gBACxC,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B;SACF,CAAC;QAEF,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,YAAY,CAAC,GAAG,UAAU,CAAC;QAClC,CAAC;QAED,2BAA2B;QAC3B,MAAM,WAAW,GAA2B,EAAE,CAAC;QAC/C,IAAI,MAAM,CAAC,aAAa,EAAE,YAAY,KAAK,KAAK,EAAE,CAAC;YACjD,WAAW,CAAC,0DAA0D,CAAC,GAAG,EAAE,CAAC;QAC/E,CAAC;QACD,IAAI,MAAM,CAAC,aAAa,EAAE,gBAAgB,KAAK,KAAK,EAAE,CAAC;YACrD,WAAW,CAAC,8DAA8D,CAAC,GAAG,EAAE,CAAC;QACnF,CAAC;QACD,IAAI,MAAM,CAAC,aAAa,EAAE,eAAe,EAAE,CAAC;YAC1C,WAAW,CAAC,6DAA6D,CAAC,GAAG,EAAE,CAAC;QAClF,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,cAAc,CAClD,GAAG,YAAY,QAAQ,IAAI,EAAE,EAC7B;YACE,UAAU,EAAE,sBAAsB;YAClC,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE;gBACR,IAAI;gBACJ,SAAS,EAAE,gBAAgB;gBAC3B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChE;YACD,IAAI;SACL,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,CACxB,CAAC;QAEF,0CAA0C;QAC1C,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;YAC/B,IAAA,mCAAsB,EAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,yDAAyD;IACzD,aAAa,CAAC,IAAY,EAAE,MAA0B;QACpD,OAAO,IAAA,0BAAgB,EAAC,IAAI,EAAE;YAC5B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAC3E,qBAAqB,CAAC,IAAY,EAAE,MAA8B;QAChE,OAAO,IAAA,wCAAqB,EAAC,IAAI,EAAE;YACjC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;IACL,CAAC;IAED,0DAA0D;IAC1D,MAAM,CAAC,MAAuC;QAC5C,IAAI,CAAC,cAAc,GAAG;YACpB,IAAI,EAAE,MAAM,CAAC,KAAK;YAClB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+DAA+D;IAC/D,iBAAiB;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;CACF;AAvGD,0BAuGC"}

package/dist/esm/argocd/argocd.d.ts

@@ -0,0 +1,33 @@
+/**
+ * ArgoCD class — main entry point for the ArgoCD module.
+ *
+ * Registry-backed: all projects, repos, and apps are queryable.
+ * Reads nimbus.notifications for ArgoCD Notifications config.
+ *
+ * @module argocd/argocd
+ */
+import type { IArgoCDConfig, IArgoRepoConfig, IArgoRepoRef, IArgoProjectConfig, IArgoAppConfig } from "./interfaces";
+import type { IExposedService } from "../types";
+import { ArgoProject } from "./project";
+import { ArgoApp } from "./app";
+export declare class ArgoCD {
+    readonly name: string;
+    private readonly cluster;
+    private readonly provider;
+    private readonly helmRelease;
+    private readonly repoRegistry;
+    private readonly projectRegistry;
+    private readonly appRegistry;
+    constructor(name: string, config: IArgoCDConfig);
+    addRepo(name: string, config: IArgoRepoConfig): IArgoRepoRef;
+    repo(name: string): IArgoRepoRef;
+    createProject(name: string, config?: IArgoProjectConfig): ArgoProject;
+    project(name: string): ArgoProject;
+    createApp(name: string, config: IArgoAppConfig): ArgoApp;
+    app(name: string): ArgoApp;
+    apps(): ReadonlyArray<ArgoApp>;
+    get exposedServices(): ReadonlyArray<IExposedService>;
+    private internalCreateApp;
+    private configureNotifications;
+}
+//# sourceMappingURL=argocd.d.ts.map

package/dist/esm/argocd/argocd.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"argocd.d.ts","sourceRoot":"","sources":["../../../src/argocd/argocd.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,KAAK,EACV,aAAa,EACb,eAAe,EACf,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACf,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAEhD,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAGhC,qBAAa,MAAM;IACjB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAW;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAe;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAsB;IAElD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAmC;IAChE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkC;IAClE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA8B;gBAE9C,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa;IAY/C,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,YAAY;IAU5D,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY;IAYhC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,GAAE,kBAAuB,GAAG,WAAW;IAiBzE,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW;IAYlC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO;IAQxD,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAU1B,IAAI,IAAI,aAAa,CAAC,OAAO,CAAC;IAM9B,IAAI,eAAe,IAAI,aAAa,CAAC,eAAe,CAAC,CAIpD;IAID,OAAO,CAAC,iBAAiB;IA8BzB,OAAO,CAAC,sBAAsB;CA4C/B"}

package/dist/esm/argocd/argocd.js

@@ -0,0 +1,182 @@
+"use strict";
+/**
+ * ArgoCD class — main entry point for the ArgoCD module.
+ *
+ * Registry-backed: all projects, repos, and apps are queryable.
+ * Reads nimbus.notifications for ArgoCD Notifications config.
+ *
+ * @module argocd/argocd
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ArgoCD = void 0;
+const k8s = __importStar(require("@pulumi/kubernetes"));
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const repo_1 = require("./repo");
+const project_1 = require("./project");
+const app_1 = require("./app");
+const nimbus_1 = require("../nimbus");
+class ArgoCD {
+    name;
+    cluster;
+    provider;
+    helmRelease;
+    repoRegistry = new Map();
+    projectRegistry = new Map();
+    appRegistry = new Map();
+    constructor(name, config) {
+        this.name = name;
+        this.cluster = config.cluster;
+        this.provider = config.cluster.provider;
+        this.helmRelease = config.helmRelease;
+        // Configure ArgoCD Notifications from nimbus singleton
+        this.configureNotifications();
+    }
+    // --- Repos ---
+    addRepo(name, config) {
+        if (this.repoRegistry.has(name)) {
+            // eslint-disable-next-line @typescript-eslint/no-non-null-assertion -- checked by has() above
+            return this.repoRegistry.get(name);
+        }
+        const ref = (0, repo_1.createArgoRepo)(this.name, name, config, this.provider, [this.helmRelease]);
+        this.repoRegistry.set(name, ref);
+        return ref;
+    }
+    repo(name) {
+        const ref = this.repoRegistry.get(name);
+        if (!ref) {
+            throw new Error(`Repo "${name}" not found. Registered: ${[...this.repoRegistry.keys()].join(", ") || "(none)"}`);
+        }
+        return ref;
+    }
+    // --- Projects ---
+    createProject(name, config = {}) {
+        if (this.projectRegistry.has(name)) {
+            // eslint-disable-next-line @typescript-eslint/no-non-null-assertion -- checked by has() above
+            return this.projectRegistry.get(name);
+        }
+        const project = new project_1.ArgoProject(this.name, name, config, this.provider, [this.helmRelease], (appName, appConfig, proj) => this.internalCreateApp(appName, appConfig, proj));
+        this.projectRegistry.set(name, project);
+        return project;
+    }
+    project(name) {
+        const project = this.projectRegistry.get(name);
+        if (!project) {
+            throw new Error(`Project "${name}" not found. Registered: ${[...this.projectRegistry.keys()].join(", ") || "(none)"}`);
+        }
+        return project;
+    }
+    // --- Apps ---
+    createApp(name, config) {
+        const projectName = config.project ?? "default";
+        if (!this.projectRegistry.has(projectName) && projectName !== "default") {
+            throw new Error(`Project "${projectName}" not found. Create it first with createProject().`);
+        }
+        return this.internalCreateApp(name, config);
+    }
+    app(name) {
+        const app = this.appRegistry.get(name);
+        if (!app) {
+            throw new Error(`App "${name}" not found. Registered: ${[...this.appRegistry.keys()].join(", ") || "(none)"}`);
+        }
+        return app;
+    }
+    apps() {
+        return [...this.appRegistry.values()];
+    }
+    // --- Exposed services ---
+    get exposedServices() {
+        return [...this.appRegistry.values()]
+            .map((app) => app.getExposedService())
+            .filter((s) => s !== undefined);
+    }
+    // --- Internal ---
+    internalCreateApp(name, config, project) {
+        if (this.appRegistry.has(name)) {
+            throw new Error(`App "${name}" already exists`);
+        }
+        // Handle inline children (App-of-Apps)
+        if ("children" in config.source) {
+            const children = config.source.children;
+            for (const child of children) {
+                const childConfig = {
+                    project: config.project,
+                    source: child.source,
+                    namespace: child.namespace,
+                    syncPolicy: child.syncPolicy ?? config.syncPolicy,
+                };
+                this.internalCreateApp(child.name, childConfig);
+            }
+        }
+        const dependsOn = [this.helmRelease];
+        if (project) {
+            dependsOn.push(project.resource);
+        }
+        const app = new app_1.ArgoApp(this.name, name, config, this.cluster, this.provider, dependsOn);
+        this.appRegistry.set(name, app);
+        return app;
+    }
+    configureNotifications() {
+        const notifications = nimbus_1.nimbus.notifications;
+        if (!notifications?.email)
+            return;
+        const transport = notifications.email.transport;
+        // ArgoCD Notifications ConfigMap — templates + triggers
+        new k8s.core.v1.ConfigMap(`${this.name}-argocd-notifications-cm`, {
+            metadata: { name: "argocd-notifications-cm", namespace: "argocd" },
+            data: {
+                "service.email": pulumi
+                    .all([transport.host, transport.port, transport.username])
+                    .apply(([host, port, username]) => `host: ${host}\nport: ${port}\nusername: ${username}\nfrom: ${transport.fromAddress}\n`),
+                "trigger.on-sync-failed": "- when: app.status.sync.status == 'OutOfSync' and app.status.operationState.phase == 'Failed'\n  send: [app-sync-failed]",
+                "trigger.on-health-degraded": "- when: app.status.health.status == 'Degraded'\n  send: [app-health-degraded]",
+                "trigger.on-sync-succeeded": "- when: app.status.operationState.phase == 'Succeeded'\n  send: [app-sync-succeeded]",
+                "template.app-sync-failed": `message: |\n  Application {{.app.metadata.name}} sync failed.\n  Sync Status: {{.app.status.sync.status}}\n  Health: {{.app.status.health.status}}`,
+                "template.app-health-degraded": `message: |\n  Application {{.app.metadata.name}} health degraded.\n  Health: {{.app.status.health.status}}`,
+                "template.app-sync-succeeded": `message: |\n  Application {{.app.metadata.name}} synced successfully.\n  Revision: {{.app.status.sync.revision}}`,
+                defaultTriggers: "- on-sync-failed\n- on-health-degraded",
+            },
+        }, { provider: this.provider, dependsOn: [this.helmRelease] });
+        // ArgoCD Notifications Secret — SMTP password
+        new k8s.core.v1.Secret(`${this.name}-argocd-notifications-secret`, {
+            metadata: { name: "argocd-notifications-secret", namespace: "argocd" },
+            stringData: {
+                "email-password": transport.password,
+            },
+        }, { provider: this.provider, dependsOn: [this.helmRelease] });
+    }
+}
+exports.ArgoCD = ArgoCD;
+//# sourceMappingURL=argocd.js.map

package/dist/esm/argocd/argocd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"argocd.js","sourceRoot":"","sources":["../../../src/argocd/argocd.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,wDAA0C;AAC1C,uDAAyC;AAUzC,iCAAwC;AACxC,uCAAwC;AACxC,+BAAgC;AAChC,sCAAmC;AAEnC,MAAa,MAAM;IACR,IAAI,CAAS;IACL,OAAO,CAAW;IAClB,QAAQ,CAAe;IACvB,WAAW,CAAsB;IAEjC,YAAY,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC/C,eAAe,GAAG,IAAI,GAAG,EAAuB,CAAC;IACjD,WAAW,GAAG,IAAI,GAAG,EAAmB,CAAC;IAE1D,YAAY,IAAY,EAAE,MAAqB;QAC7C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QAEtC,uDAAuD;QACvD,IAAI,CAAC,sBAAsB,EAAE,CAAC;IAChC,CAAC;IAED,gBAAgB;IAEhB,OAAO,CAAC,IAAY,EAAE,MAAuB;QAC3C,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,8FAA8F;YAC9F,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;QACtC,CAAC;QACD,MAAM,GAAG,GAAG,IAAA,qBAAc,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QACvF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACjC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,CAAC,IAAY;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CACb,SAAS,IAAI,4BAA4B,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,CAChG,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,mBAAmB;IAEnB,aAAa,CAAC,IAAY,EAAE,SAA6B,EAAE;QACzD,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,8FAA8F;YAC9F,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;QACzC,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,qBAAW,CAC7B,IAAI,CAAC,IAAI,EACT,IAAI,EACJ,MAAM,EACN,IAAI,CAAC,QAAQ,EACb,CAAC,IAAI,CAAC,WAAW,CAAC,EAClB,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,CAC/E,CAAC;QACF,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,OAAO,CAAC,IAAY;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,4BAA4B,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,CACtG,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,eAAe;IAEf,SAAS,CAAC,IAAY,EAAE,MAAsB;QAC5C,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,IAAI,SAAS,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,YAAY,WAAW,oDAAoD,CAAC,CAAC;QAC/F,CAAC;QACD,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED,GAAG,CAAC,IAAY;QACd,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CACb,QAAQ,IAAI,4BAA4B,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,CAC9F,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,2BAA2B;IAE3B,IAAI,eAAe;QACjB,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;aAClC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;aACrC,MAAM,CAAC,CAAC,CAAC,EAAwB,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAC1D,CAAC;IAED,mBAAmB;IAEX,iBAAiB,CAAC,IAAY,EAAE,MAAsB,EAAE,OAAqB;QACnF,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,kBAAkB,CAAC,CAAC;QAClD,CAAC;QAED,uCAAuC;QACvC,IAAI,UAAU,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;YACxC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;gBAC7B,MAAM,WAAW,GAAmB;oBAClC,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU;iBAClD,CAAC;gBACF,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAsB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxD,IAAI,OAAO,EAAE,CAAC;YACZ,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,aAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACzF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAEhC,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,sBAAsB;QAC5B,MAAM,aAAa,GAAG,eAAM,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,aAAa,EAAE,KAAK;YAAE,OAAO;QAElC,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC;QAChD,wDAAwD;QACxD,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CACvB,GAAG,IAAI,CAAC,IAAI,0BAA0B,EACtC;YACE,QAAQ,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE,SAAS,EAAE,QAAQ,EAAE;YAClE,IAAI,EAAE;gBACJ,eAAe,EAAE,MAAM;qBACpB,GAAG,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;qBACzD,KAAK,CACJ,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,CACzB,SAAS,IAAI,WAAW,IAAI,eAAe,QAAQ,WAAW,SAAS,CAAC,WAAW,IAAI,CAC1F;gBACH,wBAAwB,EACtB,0HAA0H;gBAC5H,4BAA4B,EAC1B,+EAA+E;gBACjF,2BAA2B,EACzB,sFAAsF;gBACxF,0BAA0B,EAAE,oJAAoJ;gBAChL,8BAA8B,EAAE,4GAA4G;gBAC5I,6BAA6B,EAAE,kHAAkH;gBACjJ,eAAe,EAAE,wCAAwC;aAC1D;SACF,EACD,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAC3D,CAAC;QAEF,8CAA8C;QAC9C,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CACpB,GAAG,IAAI,CAAC,IAAI,8BAA8B,EAC1C;YACE,QAAQ,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,SAAS,EAAE,QAAQ,EAAE;YACtE,UAAU,EAAE;gBACV,gBAAgB,EAAE,SAAS,CAAC,QAAQ;aACrC;SACF,EACD,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAC3D,CAAC;IACJ,CAAC;CACF;AAnLD,wBAmLC"}

package/dist/esm/argocd/external-secrets.d.ts

@@ -0,0 +1,23 @@
+/**
+ * ExternalSecret CRD creation — pulls secrets from Vault via ESO.
+ *
+ * Standalone utility + wrapper for ArgoApp.createExternalSecrets().
+ *
+ * @module argocd/external-secrets
+ */
+import type { IExternalSecretsConfig, IArgoAppSecrets } from "./interfaces";
+import type { ICluster } from "../cluster";
+/**
+ * Create an ExternalSecret CRD that ESO syncs to a K8s Secret.
+ *
+ * @param name - K8s Secret name (ExternalSecret creates a Secret with this name)
+ * @param config.namespace - Target namespace
+ * @param config.cluster - Cluster for the provider
+ * @param config.secrets - ExternalSecret config (data, dataFrom, store, refreshInterval)
+ */
+export declare function createExternalSecrets(name: string, config: {
+    namespace: string;
+    cluster: ICluster;
+    secrets: IExternalSecretsConfig;
+}): IArgoAppSecrets;
+//# sourceMappingURL=external-secrets.d.ts.map

package/dist/esm/argocd/external-secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-secrets.d.ts","sourceRoot":"","sources":["../../../src/argocd/external-secrets.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAK3C;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE;IACN,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,QAAQ,CAAC;IAClB,OAAO,EAAE,sBAAsB,CAAC;CACjC,GACA,eAAe,CA6EjB"}

package/dist/esm/argocd/external-secrets.js

@@ -0,0 +1,121 @@
+"use strict";
+/**
+ * ExternalSecret CRD creation — pulls secrets from Vault via ESO.
+ *
+ * Standalone utility + wrapper for ArgoApp.createExternalSecrets().
+ *
+ * @module argocd/external-secrets
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createExternalSecrets = createExternalSecrets;
+const k8s = __importStar(require("@pulumi/kubernetes"));
+const DEFAULT_STORE = "vault-backend";
+const DEFAULT_REFRESH = "1h";
+/**
+ * Create an ExternalSecret CRD that ESO syncs to a K8s Secret.
+ *
+ * @param name - K8s Secret name (ExternalSecret creates a Secret with this name)
+ * @param config.namespace - Target namespace
+ * @param config.cluster - Cluster for the provider
+ * @param config.secrets - ExternalSecret config (data, dataFrom, store, refreshInterval)
+ */
+function createExternalSecrets(name, config) {
+    const provider = config.cluster.provider;
+    const store = config.secrets.store ?? DEFAULT_STORE;
+    const refreshInterval = config.secrets.refreshInterval ?? DEFAULT_REFRESH;
+    if (!config.secrets.data && !config.secrets.dataFrom) {
+        throw new Error(`ExternalSecret "${name}" must have at least one of 'data' or 'dataFrom'`);
+    }
+    // Build spec.data — individual key mappings
+    const data = config.secrets.data
+        ? Object.entries(config.secrets.data).map(([secretKey, ref]) => ({
+            secretKey,
+            remoteRef: {
+                key: ref.key,
+                ...(ref.property ? { property: ref.property } : {}),
+            },
+        }))
+        : undefined;
+    // Build spec.dataFrom — bulk pull
+    const dataFrom = config.secrets.dataFrom
+        ? config.secrets.dataFrom.map((ref) => ({
+            extract: { key: ref.key },
+        }))
+        : undefined;
+    const spec = {
+        refreshInterval,
+        secretStoreRef: {
+            name: store,
+            kind: "ClusterSecretStore",
+        },
+        target: {
+            name,
+            creationPolicy: "Owner",
+        },
+    };
+    if (data)
+        spec["data"] = data;
+    if (dataFrom)
+        spec["dataFrom"] = dataFrom;
+    new k8s.apiextensions.CustomResource(`eso-${name}`, {
+        apiVersion: "external-secrets.io/v1",
+        kind: "ExternalSecret",
+        metadata: {
+            name,
+            namespace: config.namespace,
+            labels: { "app.kubernetes.io/managed-by": "nimbus" },
+        },
+        spec,
+    }, { provider });
+    // Collect all known keys for ref() validation
+    const knownKeys = new Set();
+    if (config.secrets.data) {
+        for (const key of Object.keys(config.secrets.data)) {
+            knownKeys.add(key);
+        }
+    }
+    return {
+        name,
+        ref(key) {
+            // For dataFrom, any key is valid (we can't know them at build time)
+            if (!config.secrets.dataFrom && knownKeys.size > 0 && !knownKeys.has(key)) {
+                throw new Error(`Secret key "${key}" not found in "${name}". Available: ${[...knownKeys].join(", ")}`);
+            }
+            return { secretKeyRef: { name, key } };
+        },
+    };
+}
+//# sourceMappingURL=external-secrets.js.map

package/dist/esm/argocd/external-secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-secrets.js","sourceRoot":"","sources":["../../../src/argocd/external-secrets.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiBH,sDAoFC;AAnGD,wDAA0C;AAI1C,MAAM,aAAa,GAAG,eAAe,CAAC;AACtC,MAAM,eAAe,GAAG,IAAI,CAAC;AAE7B;;;;;;;GAOG;AACH,SAAgB,qBAAqB,CACnC,IAAY,EACZ,MAIC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,aAAa,CAAC;IACpD,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,IAAI,eAAe,CAAC;IAE1E,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,kDAAkD,CAAC,CAAC;IAC7F,CAAC;IAED,4CAA4C;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI;QAC9B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7D,SAAS;YACT,SAAS,EAAE;gBACT,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpD;SACF,CAAC,CAAC;QACL,CAAC,CAAC,SAAS,CAAC;IAEd,kCAAkC;IAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ;QACtC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACpC,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE;SAC1B,CAAC,CAAC;QACL,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,IAAI,GAA4B;QACpC,eAAe;QACf,cAAc,EAAE;YACd,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,oBAAoB;SAC3B;QACD,MAAM,EAAE;YACN,IAAI;YACJ,cAAc,EAAE,OAAO;SACxB;KACF,CAAC;IAEF,IAAI,IAAI;QAAE,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IAC9B,IAAI,QAAQ;QAAE,IAAI,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC;IAE1C,IAAI,GAAG,CAAC,aAAa,CAAC,cAAc,CAClC,OAAO,IAAI,EAAE,EACb;QACE,UAAU,EAAE,wBAAwB;QACpC,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE;YACR,IAAI;YACJ,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,EAAE,8BAA8B,EAAE,QAAQ,EAAE;SACrD;QACD,IAAI;KACL,EACD,EAAE,QAAQ,EAAE,CACb,CAAC;IAEF,8CAA8C;IAC9C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI;QACJ,GAAG,CAAC,GAAW;YACb,oEAAoE;YACpE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1E,MAAM,IAAI,KAAK,CACb,eAAe,GAAG,mBAAmB,IAAI,iBAAiB,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtF,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;QACzC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/esm/argocd/index.d.ts

@@ -0,0 +1,18 @@
+/**
+ * ArgoCD module — fluent API for managing ArgoCD Applications.
+ *
+ * @module argocd
+ */
+import type { IArgoCDConfig } from "./interfaces";
+import { ArgoCD } from "./argocd";
+export { ArgoCD } from "./argocd";
+export { ArgoProject } from "./project";
+export { ArgoApp } from "./app";
+export { createAppSecrets } from "./secrets";
+export { createExternalSecrets } from "./external-secrets";
+export type { ArgoRepoType, IArgoRepoConfig, IArgoGitSshRepoConfig, IArgoGitHttpsRepoConfig, IArgoHelmRepoConfig, IArgoOciRepoConfig, IArgoRepoRef, IArgoAppSource, IArgoRepoSource, IArgoPublicSource, IArgoChildrenSource, IArgoSyncPolicy, IArgoProjectConfig, IArgoAppConfig, IArgoSecretsConfig, IArgoAppSecrets, IArgoCDConfig, IExternalSecretsConfig, IExternalSecretDataRef, IExternalSecretDataFromRef, } from "./interfaces";
+/**
+ * Create an ArgoCD management instance.
+ */
+export declare function createArgoCD(name: string, config: IArgoCDConfig): ArgoCD;
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/argocd/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/argocd/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,YAAY,EACV,YAAY,EACZ,eAAe,EACf,qBAAqB,EACrB,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,kBAAkB,EAClB,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,aAAa,EACb,sBAAsB,EACtB,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,cAAc,CAAC;AAEtB;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,CAExE"}