kustodian 1.0.0

package/dist/schema/profile.js

@@ -0,0 +1,61 @@
+import { z } from 'zod';
+import { api_version_schema } from './common.js';
+import { taint_schema } from './node-list.js';
+/**
+ * Node profile specification schema.
+ * Defines reusable configuration for labels, taints, and annotations.
+ */
+export const node_profile_spec_schema = z.object({
+    name: z.string().min(1).optional(),
+    description: z.string().optional(),
+    labels: z.record(z.union([z.string(), z.boolean(), z.number()])).optional(),
+    taints: z.array(taint_schema).optional(),
+    annotations: z.record(z.string()).optional(),
+});
+/**
+ * Node profile metadata schema.
+ */
+export const node_profile_metadata_schema = z.object({
+    name: z.string().min(1),
+});
+/**
+ * Standalone NodeProfile resource definition.
+ * Used for profile files at profiles/<profile-name>.yaml
+ */
+export const node_profile_resource_schema = z.object({
+    apiVersion: api_version_schema,
+    kind: z.literal('NodeProfile'),
+    metadata: node_profile_metadata_schema,
+    spec: node_profile_spec_schema,
+});
+/**
+ * Validates a NodeProfile resource and returns the result.
+ */
+export function validate_node_profile_resource(data) {
+    return node_profile_resource_schema.safeParse(data);
+}
+/**
+ * Converts a NodeProfile resource to a NodeProfileType for internal use.
+ */
+export function node_profile_resource_to_profile(resource) {
+    const profile = {
+        name: resource.metadata.name,
+    };
+    if (resource.spec.name !== undefined) {
+        profile.display_name = resource.spec.name;
+    }
+    if (resource.spec.description !== undefined) {
+        profile.description = resource.spec.description;
+    }
+    if (resource.spec.labels !== undefined) {
+        profile.labels = resource.spec.labels;
+    }
+    if (resource.spec.taints !== undefined) {
+        profile.taints = resource.spec.taints;
+    }
+    if (resource.spec.annotations !== undefined) {
+        profile.annotations = resource.spec.annotations;
+    }
+    return profile;
+}
+//# sourceMappingURL=profile.js.map

package/dist/schema/profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../../src/schema/profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3E,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC;AAIH;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACxB,CAAC,CAAC;AAIH;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,UAAU,EAAE,kBAAkB;IAC9B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAC9B,QAAQ,EAAE,4BAA4B;IACtC,IAAI,EAAE,wBAAwB;CAC/B,CAAC,CAAC;AAIH;;GAEG;AACH,MAAM,UAAU,8BAA8B,CAC5C,IAAa;IAEb,OAAO,4BAA4B,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AACtD,CAAC;AAcD;;GAEG;AACH,MAAM,UAAU,gCAAgC,CAC9C,QAAiC;IAEjC,MAAM,OAAO,GAAoB;QAC/B,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI;KAC7B,CAAC;IAEF,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACrC,OAAO,CAAC,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;IAC5C,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAC5C,OAAO,CAAC,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC;IAClD,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACvC,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;IACxC,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACvC,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;IACxC,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAC5C,OAAO,CAAC,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC;IAClD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/schema/project.d.ts

@@ -0,0 +1,168 @@
+import { z } from 'zod';
+/**
+ * Project-level defaults that apply to all clusters.
+ * Can be overridden per-cluster in cluster.yaml spec.defaults.
+ */
+export declare const project_defaults_schema: z.ZodObject<{
+    /** Flux system namespace where Flux controllers run */
+    flux_namespace: z.ZodOptional<z.ZodString>;
+    /** Flux OCIRepository resource name */
+    oci_repository_name: z.ZodOptional<z.ZodString>;
+    /** Secret name for OCI registry authentication */
+    oci_registry_secret_name: z.ZodOptional<z.ZodString>;
+    /** Default reconciliation interval for Flux resources */
+    flux_reconciliation_interval: z.ZodOptional<z.ZodString>;
+    /** Default timeout for Flux reconciliation */
+    flux_reconciliation_timeout: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    flux_namespace?: string | undefined;
+    oci_repository_name?: string | undefined;
+    oci_registry_secret_name?: string | undefined;
+    flux_reconciliation_interval?: string | undefined;
+    flux_reconciliation_timeout?: string | undefined;
+}, {
+    flux_namespace?: string | undefined;
+    oci_repository_name?: string | undefined;
+    oci_registry_secret_name?: string | undefined;
+    flux_reconciliation_interval?: string | undefined;
+    flux_reconciliation_timeout?: string | undefined;
+}>;
+export type ProjectDefaultsType = z.infer<typeof project_defaults_schema>;
+/**
+ * Project specification in kustodian.yaml.
+ */
+export declare const project_spec_schema: z.ZodObject<{
+    defaults: z.ZodOptional<z.ZodObject<{
+        /** Flux system namespace where Flux controllers run */
+        flux_namespace: z.ZodOptional<z.ZodString>;
+        /** Flux OCIRepository resource name */
+        oci_repository_name: z.ZodOptional<z.ZodString>;
+        /** Secret name for OCI registry authentication */
+        oci_registry_secret_name: z.ZodOptional<z.ZodString>;
+        /** Default reconciliation interval for Flux resources */
+        flux_reconciliation_interval: z.ZodOptional<z.ZodString>;
+        /** Default timeout for Flux reconciliation */
+        flux_reconciliation_timeout: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        flux_namespace?: string | undefined;
+        oci_repository_name?: string | undefined;
+        oci_registry_secret_name?: string | undefined;
+        flux_reconciliation_interval?: string | undefined;
+        flux_reconciliation_timeout?: string | undefined;
+    }, {
+        flux_namespace?: string | undefined;
+        oci_repository_name?: string | undefined;
+        oci_registry_secret_name?: string | undefined;
+        flux_reconciliation_interval?: string | undefined;
+        flux_reconciliation_timeout?: string | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    defaults?: {
+        flux_namespace?: string | undefined;
+        oci_repository_name?: string | undefined;
+        oci_registry_secret_name?: string | undefined;
+        flux_reconciliation_interval?: string | undefined;
+        flux_reconciliation_timeout?: string | undefined;
+    } | undefined;
+}, {
+    defaults?: {
+        flux_namespace?: string | undefined;
+        oci_repository_name?: string | undefined;
+        oci_registry_secret_name?: string | undefined;
+        flux_reconciliation_interval?: string | undefined;
+        flux_reconciliation_timeout?: string | undefined;
+    } | undefined;
+}>;
+export type ProjectSpecType = z.infer<typeof project_spec_schema>;
+/**
+ * Project resource schema (kustodian.yaml).
+ */
+export declare const project_schema: z.ZodObject<{
+    apiVersion: z.ZodLiteral<"kustodian.io/v1">;
+    kind: z.ZodLiteral<"Project">;
+    metadata: z.ZodObject<{
+        name: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+    }, {
+        name: string;
+    }>;
+    spec: z.ZodOptional<z.ZodObject<{
+        defaults: z.ZodOptional<z.ZodObject<{
+            /** Flux system namespace where Flux controllers run */
+            flux_namespace: z.ZodOptional<z.ZodString>;
+            /** Flux OCIRepository resource name */
+            oci_repository_name: z.ZodOptional<z.ZodString>;
+            /** Secret name for OCI registry authentication */
+            oci_registry_secret_name: z.ZodOptional<z.ZodString>;
+            /** Default reconciliation interval for Flux resources */
+            flux_reconciliation_interval: z.ZodOptional<z.ZodString>;
+            /** Default timeout for Flux reconciliation */
+            flux_reconciliation_timeout: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            flux_namespace?: string | undefined;
+            oci_repository_name?: string | undefined;
+            oci_registry_secret_name?: string | undefined;
+            flux_reconciliation_interval?: string | undefined;
+            flux_reconciliation_timeout?: string | undefined;
+        }, {
+            flux_namespace?: string | undefined;
+            oci_repository_name?: string | undefined;
+            oci_registry_secret_name?: string | undefined;
+            flux_reconciliation_interval?: string | undefined;
+            flux_reconciliation_timeout?: string | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        defaults?: {
+            flux_namespace?: string | undefined;
+            oci_repository_name?: string | undefined;
+            oci_registry_secret_name?: string | undefined;
+            flux_reconciliation_interval?: string | undefined;
+            flux_reconciliation_timeout?: string | undefined;
+        } | undefined;
+    }, {
+        defaults?: {
+            flux_namespace?: string | undefined;
+            oci_repository_name?: string | undefined;
+            oci_registry_secret_name?: string | undefined;
+            flux_reconciliation_interval?: string | undefined;
+            flux_reconciliation_timeout?: string | undefined;
+        } | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    kind: "Project";
+    apiVersion: "kustodian.io/v1";
+    metadata: {
+        name: string;
+    };
+    spec?: {
+        defaults?: {
+            flux_namespace?: string | undefined;
+            oci_repository_name?: string | undefined;
+            oci_registry_secret_name?: string | undefined;
+            flux_reconciliation_interval?: string | undefined;
+            flux_reconciliation_timeout?: string | undefined;
+        } | undefined;
+    } | undefined;
+}, {
+    kind: "Project";
+    apiVersion: "kustodian.io/v1";
+    metadata: {
+        name: string;
+    };
+    spec?: {
+        defaults?: {
+            flux_namespace?: string | undefined;
+            oci_repository_name?: string | undefined;
+            oci_registry_secret_name?: string | undefined;
+            flux_reconciliation_interval?: string | undefined;
+            flux_reconciliation_timeout?: string | undefined;
+        } | undefined;
+    } | undefined;
+}>;
+export type ProjectType = z.infer<typeof project_schema>;
+/**
+ * Validates a project configuration.
+ */
+export declare function validate_project(data: unknown): z.SafeParseReturnType<unknown, ProjectType>;
+//# sourceMappingURL=project.d.ts.map

package/dist/schema/project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../../src/schema/project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;GAGG;AACH,eAAO,MAAM,uBAAuB;IAClC,uDAAuD;;IAEvD,uCAAuC;;IAEvC,kDAAkD;;IAElD,yDAAyD;;IAEzD,8CAA8C;;;;;;;;;;;;;;EAE9C,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE1E;;GAEG;AACH,eAAO,MAAM,mBAAmB;;QAjB9B,uDAAuD;;QAEvD,uCAAuC;;QAEvC,kDAAkD;;QAElD,yDAAyD;;QAEzD,8CAA8C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAW9C,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAElE;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;YA1BzB,uDAAuD;;YAEvD,uCAAuC;;YAEvC,kDAAkD;;YAElD,yDAAyD;;YAEzD,8CAA8C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuB9C,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEzD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,CAAC,CAAC,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,CAE3F"}

package/dist/schema/project.js

@@ -0,0 +1,40 @@
+import { z } from 'zod';
+import { api_version_schema, metadata_schema } from './common.js';
+/**
+ * Project-level defaults that apply to all clusters.
+ * Can be overridden per-cluster in cluster.yaml spec.defaults.
+ */
+export const project_defaults_schema = z.object({
+    /** Flux system namespace where Flux controllers run */
+    flux_namespace: z.string().min(1).optional(),
+    /** Flux OCIRepository resource name */
+    oci_repository_name: z.string().min(1).optional(),
+    /** Secret name for OCI registry authentication */
+    oci_registry_secret_name: z.string().min(1).optional(),
+    /** Default reconciliation interval for Flux resources */
+    flux_reconciliation_interval: z.string().min(1).optional(),
+    /** Default timeout for Flux reconciliation */
+    flux_reconciliation_timeout: z.string().min(1).optional(),
+});
+/**
+ * Project specification in kustodian.yaml.
+ */
+export const project_spec_schema = z.object({
+    defaults: project_defaults_schema.optional(),
+});
+/**
+ * Project resource schema (kustodian.yaml).
+ */
+export const project_schema = z.object({
+    apiVersion: api_version_schema,
+    kind: z.literal('Project'),
+    metadata: metadata_schema,
+    spec: project_spec_schema.optional(),
+});
+/**
+ * Validates a project configuration.
+ */
+export function validate_project(data) {
+    return project_schema.safeParse(data);
+}
+//# sourceMappingURL=project.js.map

package/dist/schema/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../../src/schema/project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAElE;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,uDAAuD;IACvD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,uCAAuC;IACvC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,kDAAkD;IAClD,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtD,yDAAyD;IACzD,4BAA4B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,8CAA8C;IAC9C,2BAA2B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC1D,CAAC,CAAC;AAIH;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,QAAQ,EAAE,uBAAuB,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC;AAIH;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,UAAU,EAAE,kBAAkB;IAC9B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,QAAQ,EAAE,eAAe;IACzB,IAAI,EAAE,mBAAmB,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAIH;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAa;IAC5C,OAAO,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC"}

package/dist/schema/sources.d.ts

@@ -0,0 +1,338 @@
+import { z } from 'zod';
+/**
+ * Git reference - exactly one of branch, tag, or commit must be specified.
+ */
+export declare const git_ref_schema: z.ZodEffects<z.ZodObject<{
+    branch: z.ZodOptional<z.ZodString>;
+    tag: z.ZodOptional<z.ZodString>;
+    commit: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    branch?: string | undefined;
+    tag?: string | undefined;
+    commit?: string | undefined;
+}, {
+    branch?: string | undefined;
+    tag?: string | undefined;
+    commit?: string | undefined;
+}>, {
+    branch?: string | undefined;
+    tag?: string | undefined;
+    commit?: string | undefined;
+}, {
+    branch?: string | undefined;
+    tag?: string | undefined;
+    commit?: string | undefined;
+}>;
+export type GitRefType = z.infer<typeof git_ref_schema>;
+/**
+ * Git source configuration for fetching templates from a Git repository.
+ */
+export declare const git_source_schema: z.ZodObject<{
+    url: z.ZodString;
+    ref: z.ZodEffects<z.ZodObject<{
+        branch: z.ZodOptional<z.ZodString>;
+        tag: z.ZodOptional<z.ZodString>;
+        commit: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        branch?: string | undefined;
+        tag?: string | undefined;
+        commit?: string | undefined;
+    }, {
+        branch?: string | undefined;
+        tag?: string | undefined;
+        commit?: string | undefined;
+    }>, {
+        branch?: string | undefined;
+        tag?: string | undefined;
+        commit?: string | undefined;
+    }, {
+        branch?: string | undefined;
+        tag?: string | undefined;
+        commit?: string | undefined;
+    }>;
+    path: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    ref: {
+        branch?: string | undefined;
+        tag?: string | undefined;
+        commit?: string | undefined;
+    };
+    url: string;
+    path?: string | undefined;
+}, {
+    ref: {
+        branch?: string | undefined;
+        tag?: string | undefined;
+        commit?: string | undefined;
+    };
+    url: string;
+    path?: string | undefined;
+}>;
+export type GitSourceType = z.infer<typeof git_source_schema>;
+/**
+ * HTTP archive source configuration for fetching templates from URLs.
+ * Supports tar.gz and zip archives.
+ */
+export declare const http_source_schema: z.ZodObject<{
+    url: z.ZodString;
+    checksum: z.ZodOptional<z.ZodString>;
+    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, "strip", z.ZodTypeAny, {
+    url: string;
+    checksum?: string | undefined;
+    headers?: Record<string, string> | undefined;
+}, {
+    url: string;
+    checksum?: string | undefined;
+    headers?: Record<string, string> | undefined;
+}>;
+export type HttpSourceType = z.infer<typeof http_source_schema>;
+/**
+ * OCI artifact source configuration for pulling templates from OCI registries.
+ */
+export declare const oci_source_schema: z.ZodEffects<z.ZodObject<{
+    registry: z.ZodString;
+    repository: z.ZodString;
+    tag: z.ZodOptional<z.ZodString>;
+    digest: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    repository: string;
+    registry: string;
+    tag?: string | undefined;
+    digest?: string | undefined;
+}, {
+    repository: string;
+    registry: string;
+    tag?: string | undefined;
+    digest?: string | undefined;
+}>, {
+    repository: string;
+    registry: string;
+    tag?: string | undefined;
+    digest?: string | undefined;
+}, {
+    repository: string;
+    registry: string;
+    tag?: string | undefined;
+    digest?: string | undefined;
+}>;
+export type OciSourceType = z.infer<typeof oci_source_schema>;
+/**
+ * Duration format for TTL values.
+ * Examples: 30m, 1h, 24h, 7d
+ */
+export declare const duration_schema: z.ZodString;
+/**
+ * Template source configuration - union of all source types.
+ * Exactly one of git, http, or oci must be specified.
+ */
+export declare const template_source_schema: z.ZodEffects<z.ZodObject<{
+    name: z.ZodString;
+    git: z.ZodOptional<z.ZodObject<{
+        url: z.ZodString;
+        ref: z.ZodEffects<z.ZodObject<{
+            branch: z.ZodOptional<z.ZodString>;
+            tag: z.ZodOptional<z.ZodString>;
+            commit: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            branch?: string | undefined;
+            tag?: string | undefined;
+            commit?: string | undefined;
+        }, {
+            branch?: string | undefined;
+            tag?: string | undefined;
+            commit?: string | undefined;
+        }>, {
+            branch?: string | undefined;
+            tag?: string | undefined;
+            commit?: string | undefined;
+        }, {
+            branch?: string | undefined;
+            tag?: string | undefined;
+            commit?: string | undefined;
+        }>;
+        path: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        ref: {
+            branch?: string | undefined;
+            tag?: string | undefined;
+            commit?: string | undefined;
+        };
+        url: string;
+        path?: string | undefined;
+    }, {
+        ref: {
+            branch?: string | undefined;
+            tag?: string | undefined;
+            commit?: string | undefined;
+        };
+        url: string;
+        path?: string | undefined;
+    }>>;
+    http: z.ZodOptional<z.ZodObject<{
+        url: z.ZodString;
+        checksum: z.ZodOptional<z.ZodString>;
+        headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        url: string;
+        checksum?: string | undefined;
+        headers?: Record<string, string> | undefined;
+    }, {
+        url: string;
+        checksum?: string | undefined;
+        headers?: Record<string, string> | undefined;
+    }>>;
+    oci: z.ZodOptional<z.ZodEffects<z.ZodObject<{
+        registry: z.ZodString;
+        repository: z.ZodString;
+        tag: z.ZodOptional<z.ZodString>;
+        digest: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        repository: string;
+        registry: string;
+        tag?: string | undefined;
+        digest?: string | undefined;
+    }, {
+        repository: string;
+        registry: string;
+        tag?: string | undefined;
+        digest?: string | undefined;
+    }>, {
+        repository: string;
+        registry: string;
+        tag?: string | undefined;
+        digest?: string | undefined;
+    }, {
+        repository: string;
+        registry: string;
+        tag?: string | undefined;
+        digest?: string | undefined;
+    }>>;
+    ttl: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    oci?: {
+        repository: string;
+        registry: string;
+        tag?: string | undefined;
+        digest?: string | undefined;
+    } | undefined;
+    git?: {
+        ref: {
+            branch?: string | undefined;
+            tag?: string | undefined;
+            commit?: string | undefined;
+        };
+        url: string;
+        path?: string | undefined;
+    } | undefined;
+    http?: {
+        url: string;
+        checksum?: string | undefined;
+        headers?: Record<string, string> | undefined;
+    } | undefined;
+    ttl?: string | undefined;
+}, {
+    name: string;
+    oci?: {
+        repository: string;
+        registry: string;
+        tag?: string | undefined;
+        digest?: string | undefined;
+    } | undefined;
+    git?: {
+        ref: {
+            branch?: string | undefined;
+            tag?: string | undefined;
+            commit?: string | undefined;
+        };
+        url: string;
+        path?: string | undefined;
+    } | undefined;
+    http?: {
+        url: string;
+        checksum?: string | undefined;
+        headers?: Record<string, string> | undefined;
+    } | undefined;
+    ttl?: string | undefined;
+}>, {
+    name: string;
+    oci?: {
+        repository: string;
+        registry: string;
+        tag?: string | undefined;
+        digest?: string | undefined;
+    } | undefined;
+    git?: {
+        ref: {
+            branch?: string | undefined;
+            tag?: string | undefined;
+            commit?: string | undefined;
+        };
+        url: string;
+        path?: string | undefined;
+    } | undefined;
+    http?: {
+        url: string;
+        checksum?: string | undefined;
+        headers?: Record<string, string> | undefined;
+    } | undefined;
+    ttl?: string | undefined;
+}, {
+    name: string;
+    oci?: {
+        repository: string;
+        registry: string;
+        tag?: string | undefined;
+        digest?: string | undefined;
+    } | undefined;
+    git?: {
+        ref: {
+            branch?: string | undefined;
+            tag?: string | undefined;
+            commit?: string | undefined;
+        };
+        url: string;
+        path?: string | undefined;
+    } | undefined;
+    http?: {
+        url: string;
+        checksum?: string | undefined;
+        headers?: Record<string, string> | undefined;
+    } | undefined;
+    ttl?: string | undefined;
+}>;
+export type TemplateSourceType = z.infer<typeof template_source_schema>;
+/**
+ * Type guard for Git sources.
+ */
+export declare function is_git_source(source: TemplateSourceType): source is TemplateSourceType & {
+    git: GitSourceType;
+};
+/**
+ * Type guard for HTTP sources.
+ */
+export declare function is_http_source(source: TemplateSourceType): source is TemplateSourceType & {
+    http: HttpSourceType;
+};
+/**
+ * Type guard for OCI sources.
+ */
+export declare function is_oci_source(source: TemplateSourceType): source is TemplateSourceType & {
+    oci: OciSourceType;
+};
+/**
+ * Determines if a source reference is mutable (requires TTL-based refresh).
+ * - Git branches: mutable
+ * - Git tags/commits: immutable
+ * - HTTP with checksum: immutable
+ * - HTTP without checksum: mutable
+ * - OCI 'latest' tag: mutable
+ * - OCI other tags/digests: immutable
+ */
+export declare function is_mutable_source(source: TemplateSourceType): boolean;
+/**
+ * Validates a template source object and returns the result.
+ */
+export declare function validate_template_source(data: unknown): z.SafeParseReturnType<unknown, TemplateSourceType>;
+//# sourceMappingURL=sources.d.ts.map

package/dist/schema/sources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sources.d.ts","sourceRoot":"","sources":["../../src/schema/sources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;EAQvB,CAAC;AAEL,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAExD;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAI5B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE9D;;;GAGG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;EAI7B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEhE;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;EAS1B,CAAC;AAEL,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE9D;;;GAGG;AACH,eAAO,MAAM,eAAe,aAE1B,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAU/B,CAAC;AAEL,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAExE;;GAEG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,kBAAkB,GACzB,MAAM,IAAI,kBAAkB,GAAG;IAAE,GAAG,EAAE,aAAa,CAAA;CAAE,CAEvD;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,kBAAkB,GACzB,MAAM,IAAI,kBAAkB,GAAG;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,CAEzD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,kBAAkB,GACzB,MAAM,IAAI,kBAAkB,GAAG;IAAE,GAAG,EAAE,aAAa,CAAA;CAAE,CAEvD;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAcrE;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,OAAO,GACZ,CAAC,CAAC,mBAAmB,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAEpD"}