typekro 0.22.0 → 0.23.0

package/dist/factories/clickhouse/types.js

@@ -0,0 +1,295 @@
+/**
+ * ClickHouse (Altinity clickhouse-operator) Type Definitions
+ *
+ * ArkType schemas as the single source of truth for config shapes, with types
+ * inferred via `typeof Schema.infer`. Status types remain hand-written
+ * interfaces, mirroring the CNPG factory family.
+ *
+ * Wraps the OFFICIAL Altinity clickhouse-operator (Apache-2.0):
+ * - Operator chart: `altinity-clickhouse-operator` from https://helm.altinity.com
+ * - CHI CRD: `clickhouseinstallations.clickhouse.altinity.com/v1`
+ * - CHK CRD: `clickhousekeeperinstallations.clickhouse-keeper.altinity.com/v1`
+ *
+ * @see https://github.com/Altinity/clickhouse-operator
+ * @see https://docs.altinity.com/altinitykubernetesoperator/
+ */
+import { type } from 'arktype';
+// ============================================================================
+// Bootstrap Config (Helm Operator Install)
+// ============================================================================
+/**
+ * ArkType schema for ClickHouseOperatorBootstrapConfig.
+ *
+ * Configuration for installing the Altinity clickhouse-operator via Helm.
+ * Used by the `clickhouseOperatorBootstrap` composition to deploy the
+ * operator controller into the cluster.
+ *
+ * IMPORTANT: the operator is CLUSTER-SCOPED and owns the ClickHouse CRDs —
+ * install exactly ONE per cluster. Multiple installs fight over CRD ownership
+ * and watch the same resources. The bootstrap defaults to `shared: true`
+ * (cluster-scoped resource tagging) accordingly.
+ */
+export const ClickHouseOperatorBootstrapConfigSchema = type({
+    /** Release name for the Helm installation. */
+    name: 'string',
+    /** Namespace for the operator (default: 'clickhouse-system'). */
+    'namespace?': 'string',
+    /** Chart version (default: '0.27.1'). */
+    'version?': 'string',
+    /**
+     * Metrics exporter configuration. The chart enables the metrics exporter
+     * by default (`metrics.enabled: true`).
+     */
+    'metrics?': { 'enabled?': 'boolean' },
+    /**
+     * CRD installation via Helm hook (`crdHook.enabled`). NOTE: when deploying
+     * through Flux (as this composition does), helm-controller's CRD handling
+     * interacts with hook-installed CRDs — Flux only upgrades CRDs per its
+     * `install.crds`/`upgrade.crds` policy, so CRD upgrades across operator
+     * versions may need explicit attention. Leave unset to use chart defaults.
+     */
+    'crdHook?': { 'enabled?': 'boolean' },
+    /** Operator pod resources. */
+    'resources?': {
+        'requests?': { 'cpu?': 'string', 'memory?': 'string' },
+        'limits?': { 'cpu?': 'string', 'memory?': 'string' },
+    },
+    /**
+     * Additional Helm values for user overrides. Works in BOTH modes:
+     * a concrete object is deep-merged into the mapped values at build time,
+     * and a schema reference (`customValues: schema.spec.customValues` in an
+     * outer composition) is carried through the graph-aware runtime values
+     * merge, so the override lands in the KRO-serialized HelmRelease values.
+     */
+    'customValues?': 'Record<string, unknown>',
+    /**
+     * Whether the operator install should be treated as shared cluster
+     * infrastructure (default: `true`). When `true`, the Namespace and
+     * HelmRelease are tagged with `scopes: ['cluster']` so
+     * `factory.deleteInstance()` will NOT remove them — the operator is
+     * one-per-cluster infrastructure that every ClickHouseInstallation
+     * consumer depends on. Set to `false` only for dedicated throwaway
+     * environments (e.g. kind-cluster integration tests).
+     */
+    'shared?': 'boolean',
+});
+/** ArkType schema for ClickHouseOperatorBootstrapStatus. */
+export const ClickHouseOperatorBootstrapStatusSchema = type({
+    phase: '"Ready" | "Installing"',
+    ready: 'boolean',
+    'version?': 'string',
+});
+// ============================================================================
+// Shared HelmRepository Singleton
+// ============================================================================
+/** Spec accepted by the shared ClickHouse HelmRepository singleton. */
+export const ClickHouseHelmRepositorySingletonSpecSchema = type({
+    name: 'string',
+    namespace: 'string',
+    url: 'string',
+});
+/** Status surfaced by the shared ClickHouse HelmRepository singleton. */
+export const ClickHouseHelmRepositorySingletonStatusSchema = type({
+    ready: 'boolean',
+});
+// ============================================================================
+// Helm Integration Types
+// ============================================================================
+/**
+ * ArkType schema for ClickHouseHelmRepositoryConfig.
+ *
+ * Configuration for the Altinity Helm chart repository.
+ */
+export const ClickHouseHelmRepositoryConfigSchema = type({
+    /** Repository name (default: 'altinity'). */
+    'name?': 'string',
+    /** Namespace for the HelmRepository (default: flux-system). */
+    'namespace?': 'string',
+    /** Repository URL (default: 'https://helm.altinity.com'). */
+    'url?': 'string',
+    /** Sync interval (default: '5m'). */
+    'interval?': 'string',
+    /** Resource ID for composition references. */
+    'id?': 'string',
+});
+/**
+ * ArkType schema for ClickHouseOperatorHelmReleaseConfig.
+ *
+ * Configuration for the altinity-clickhouse-operator Helm release.
+ */
+export const ClickHouseOperatorHelmReleaseConfigSchema = type({
+    /** Release name. */
+    name: 'string',
+    /** Target namespace. */
+    'namespace?': 'string',
+    /** Chart version (default: '0.27.1'). */
+    'version?': 'string',
+    /** Helm values (plain object, or a graph-aware runtime values merge). */
+    'values?': 'object',
+    /** HelmRepository name to reference (default: 'altinity'). */
+    'repositoryName?': 'string',
+    /** Resource ID for composition references. */
+    'id?': 'string',
+});
+// ============================================================================
+// ClickHouseInstallation (CHI) Resource
+// ============================================================================
+/**
+ * ArkType schema for a single ClickHouse user entry.
+ *
+ * ARRAY shape (not a name-keyed map): user NAMES become CHI configuration
+ * PATH FRAGMENTS (`<user>/password_sha256_hex`), so they must be concrete
+ * strings at build time — a map keyed by schema proxies would serialize its
+ * keys as `__typekroSchemaKey/...` garbage. The array shape keeps names in a
+ * plain value position where the factory can validate them loudly, while
+ * `passwordSha256Hex`/`networksIp` are ordinary VALUES and may be schema
+ * references or CEL expressions.
+ */
+export const ClickHouseUserSchema = type({
+    /** User name — becomes a CHI config path fragment; MUST be concrete. */
+    name: 'string',
+    /** SHA256 hex digest of the user password (value position — refs OK). */
+    'passwordSha256Hex?': 'string',
+    /** Allowed source networks, e.g. ['::/0'] (value position — refs OK). */
+    'networksIp?': 'string[]',
+});
+/**
+ * ArkType schema for ClickHouseInstallationConfig.
+ *
+ * HIGH-LEVEL configuration compiled by `clickHouseInstallation()` into a
+ * `clickhouse.altinity.com/v1` ClickHouseInstallation (CHI) spec. This is
+ * deliberately not a 1:1 CRD mirror: the typed factory exists to compile the
+ * zone-pinning layout the operator cannot express natively (see
+ * `utils/zone-layout.ts`).
+ *
+ * BUILD-TIME vs RUNTIME: `shards`, `replicas`, `zones`, and user NAMES are
+ * BUILD-TIME fields — the compiler enumerates pod templates and per-replica
+ * layout entries from them, so they must be concrete JS values (the factory
+ * throws loudly if any receives a KubernetesRef/CEL expression). Everything
+ * else (name, namespace, version, storage sizes, credentials, keeper host,
+ * ...) sits in plain VALUE positions and may be schema references. For
+ * schema-driven topology use `makeClickHouseCluster()`, which fixes the
+ * topology at construction time and exposes only ref-safe runtime spec.
+ */
+export const ClickHouseInstallationConfigSchema = type({
+    /** Installation name. */
+    name: 'string',
+    /** Target namespace. */
+    'namespace?': 'string',
+    /** Resource ID for composition references. */
+    'id?': 'string',
+    /**
+     * Logical cluster name inside the CHI (default: 'cluster').
+     *
+     * SIGNOZ COMPATIBILITY: SigNoz's ClickHouse migrations hardcode the cluster
+     * name `cluster` — a SigNoz deployment pointed at this CHI only works when
+     * the default is kept. Override only for non-SigNoz consumers.
+     */
+    'clusterName?': 'string',
+    /**
+     * ClickHouse server image tag (e.g. '25.12.5'). Compiled into the pod
+     * template image `clickhouse/clickhouse-server:<version>` unless `image`
+     * overrides the full reference.
+     */
+    version: 'string',
+    /** Full image override (takes precedence over `version`). */
+    'image?': 'string',
+    /** Shard count (default: 1). */
+    'shards?': 'number',
+    /** Replicas per shard (default: 1). */
+    'replicas?': 'number',
+    /**
+     * Availability zones to pin replicas to (e.g. ['us-east-2a','us-east-2b']).
+     *
+     * When provided, the factory compiles a PER-REPLICA layout where each
+     * replica's pod template pins one zone via nodeAffinity on
+     * `topology.kubernetes.io/zone` (round-robin when replicas > zones).
+     * See `utils/zone-layout.ts` for why the operator's own `podDistribution`
+     * cannot do this (Altinity/clickhouse-operator#772).
+     */
+    'zones?': 'string[]',
+    /** Persistent storage for ClickHouse data. Required. */
+    storage: {
+        /** Volume size (e.g. '100Gi'). Required. */
+        size: 'string',
+        /**
+         * StorageClass name. On EKS this should be a WaitForFirstConsumer +
+         * `allowVolumeExpansion: true` gp3 class so the PVC binds in the zone the
+         * scheduler places the pod (and can grow in place).
+         */
+        'storageClassName?': 'string',
+    },
+    /**
+     * ClickHouse users (ARRAY shape), compiled to the operator's path-keyed
+     * `spec.configuration.users` format
+     * (`<user>/password_sha256_hex`, `<user>/networks/ip`).
+     *
+     * User NAMES become path fragments and must be concrete strings (the
+     * factory throws on refs); password/networks values may be refs.
+     */
+    'users?': ClickHouseUserSchema.array(),
+    /**
+     * (ClickHouse) Keeper coordination endpoint, wired into
+     * `spec.configuration.zookeeper.nodes` (the operator uses the zookeeper
+     * section for clickhouse-keeper too). Required for replicated tables
+     * when `replicas > 1`.
+     */
+    'keeper?': {
+        host: 'string',
+        /** Keeper client port (default: 2181). */
+        'port?': 'number',
+    },
+    /** ClickHouse server container resources. */
+    'podResources?': {
+        'requests?': { 'cpu?': 'string', 'memory?': 'string' },
+        'limits?': { 'cpu?': 'string', 'memory?': 'string' },
+    },
+});
+/** ArkType schema for {@link ClickHouseClusterStatus}. */
+export const ClickHouseClusterStatusSchema = type({
+    ready: 'boolean',
+    phase: '"Installing" | "Ready" | "Failed"',
+    clickhouse: {
+        host: 'string',
+        port: 'number',
+        nativeUrl: 'string',
+        httpUrl: 'string',
+        clusterName: 'string',
+        database: 'string',
+        'user?': 'string',
+    },
+    'keeper?': { host: 'string', port: 'number' },
+    installation: {
+        name: 'string',
+        namespace: 'string',
+        'endpoint?': 'string',
+        'hostsCount?': 'number',
+        'hostsCompletedCount?': 'number',
+    },
+});
+// ============================================================================
+// ClickHouseKeeperInstallation (CHK) Resource
+// ============================================================================
+/**
+ * ArkType schema for ClickHouseKeeperInstallationConfig.
+ *
+ * Minimal high-level configuration compiled by
+ * `clickHouseKeeperInstallation()` into a `clickhouse-keeper.altinity.com/v1`
+ * ClickHouseKeeperInstallation (CHK) spec.
+ */
+export const ClickHouseKeeperInstallationConfigSchema = type({
+    /** Keeper installation name. */
+    name: 'string',
+    /** Target namespace. */
+    'namespace?': 'string',
+    /** Resource ID for composition references. */
+    'id?': 'string',
+    /** Keeper replica count (default: 1; use an odd number for quorum). */
+    'replicas?': 'number',
+    /** Persistent storage for the keeper log/snapshot data. */
+    'storage?': {
+        size: 'string',
+        'storageClassName?': 'string',
+    },
+});
+//# sourceMappingURL=types.js.map

package/dist/factories/clickhouse/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/factories/clickhouse/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAG/B,+EAA+E;AAC/E,2CAA2C;AAC3C,+EAA+E;AAE/E;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAG,IAAI,CAAC;IAC1D,8CAA8C;IAC9C,IAAI,EAAE,QAAQ;IACd,iEAAiE;IACjE,YAAY,EAAE,QAAQ;IACtB,yCAAyC;IACzC,UAAU,EAAE,QAAQ;IACpB;;;OAGG;IACH,UAAU,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;IACrC;;;;;;OAMG;IACH,UAAU,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;IACrC,8BAA8B;IAC9B,YAAY,EAAE;QACZ,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE;QACtD,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE;KACrD;IACD;;;;;;OAMG;IACH,eAAe,EAAE,yBAAyB;IAC1C;;;;;;;;OAQG;IACH,SAAS,EAAE,SAAS;CACrB,CAAC,CAAC;AAkBH,4DAA4D;AAC5D,MAAM,CAAC,MAAM,uCAAuC,GAAG,IAAI,CAAC;IAC1D,KAAK,EAAE,wBAAwB;IAC/B,KAAK,EAAE,SAAS;IAChB,UAAU,EAAE,QAAQ;CACrB,CAAC,CAAC;AAEH,+EAA+E;AAC/E,kCAAkC;AAClC,+EAA+E;AAE/E,uEAAuE;AACvE,MAAM,CAAC,MAAM,2CAA2C,GAAG,IAAI,CAAC;IAC9D,IAAI,EAAE,QAAQ;IACd,SAAS,EAAE,QAAQ;IACnB,GAAG,EAAE,QAAQ;CACd,CAAC,CAAC;AAEH,yEAAyE;AACzE,MAAM,CAAC,MAAM,6CAA6C,GAAG,IAAI,CAAC;IAChE,KAAK,EAAE,SAAS;CACjB,CAAC,CAAC;AAEH,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,IAAI,CAAC;IACvD,6CAA6C;IAC7C,OAAO,EAAE,QAAQ;IACjB,+DAA+D;IAC/D,YAAY,EAAE,QAAQ;IACtB,6DAA6D;IAC7D,MAAM,EAAE,QAAQ;IAChB,qCAAqC;IACrC,WAAW,EAAE,QAAQ;IACrB,8CAA8C;IAC9C,KAAK,EAAE,QAAQ;CAChB,CAAC,CAAC;AAMH;;;;GAIG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAG,IAAI,CAAC;IAC5D,oBAAoB;IACpB,IAAI,EAAE,QAAQ;IACd,wBAAwB;IACxB,YAAY,EAAE,QAAQ;IACtB,yCAAyC;IACzC,UAAU,EAAE,QAAQ;IACpB,yEAAyE;IACzE,SAAS,EAAE,QAAQ;IACnB,8DAA8D;IAC9D,iBAAiB,EAAE,QAAQ;IAC3B,8CAA8C;IAC9C,KAAK,EAAE,QAAQ;CAChB,CAAC,CAAC;AAiBH,+EAA+E;AAC/E,wCAAwC;AACxC,+EAA+E;AAE/E;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;IACvC,wEAAwE;IACxE,IAAI,EAAE,QAAQ;IACd,yEAAyE;IACzE,oBAAoB,EAAE,QAAQ;IAC9B,yEAAyE;IACzE,aAAa,EAAE,UAAU;CAC1B,CAAC,CAAC;AAKH;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,IAAI,CAAC;IACrD,yBAAyB;IACzB,IAAI,EAAE,QAAQ;IACd,wBAAwB;IACxB,YAAY,EAAE,QAAQ;IACtB,8CAA8C;IAC9C,KAAK,EAAE,QAAQ;IACf;;;;;;OAMG;IACH,cAAc,EAAE,QAAQ;IACxB;;;;OAIG;IACH,OAAO,EAAE,QAAQ;IACjB,6DAA6D;IAC7D,QAAQ,EAAE,QAAQ;IAClB,gCAAgC;IAChC,SAAS,EAAE,QAAQ;IACnB,uCAAuC;IACvC,WAAW,EAAE,QAAQ;IACrB;;;;;;;;OAQG;IACH,QAAQ,EAAE,UAAU;IACpB,wDAAwD;IACxD,OAAO,EAAE;QACP,4CAA4C;QAC5C,IAAI,EAAE,QAAQ;QACd;;;;WAIG;QACH,mBAAmB,EAAE,QAAQ;KAC9B;IACD;;;;;;;OAOG;IACH,QAAQ,EAAE,oBAAoB,CAAC,KAAK,EAAE;IACtC;;;;;OAKG;IACH,SAAS,EAAE;QACT,IAAI,EAAE,QAAQ;QACd,0CAA0C;QAC1C,OAAO,EAAE,QAAQ;KAClB;IACD,6CAA6C;IAC7C,eAAe,EAAE;QACf,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE;QACtD,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE;KACrD;CACF,CAAC,CAAC;AA+QH,0DAA0D;AAC1D,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC;IAChD,KAAK,EAAE,SAAS;IAChB,KAAK,EAAE,mCAAmC;IAC1C,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,QAAQ;QACnB,OAAO,EAAE,QAAQ;QACjB,WAAW,EAAE,QAAQ;QACrB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,QAAQ;KAClB;IACD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC7C,YAAY,EAAE;QACZ,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,QAAQ;QACrB,aAAa,EAAE,QAAQ;QACvB,sBAAsB,EAAE,QAAQ;KACjC;CACF,CAAC,CAAC;AAEH,+EAA+E;AAC/E,8CAA8C;AAC9C,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAG,IAAI,CAAC;IAC3D,gCAAgC;IAChC,IAAI,EAAE,QAAQ;IACd,wBAAwB;IACxB,YAAY,EAAE,QAAQ;IACtB,8CAA8C;IAC9C,KAAK,EAAE,QAAQ;IACf,uEAAuE;IACvE,WAAW,EAAE,QAAQ;IACrB,2DAA2D;IAC3D,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,mBAAmB,EAAE,QAAQ;KAC9B;CACF,CAAC,CAAC"}

package/dist/factories/clickhouse/utils/helm-values-mapper.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Maps ClickHouseOperatorBootstrapConfig to altinity-clickhouse-operator
+ * Helm chart values.
+ *
+ * Chart: `altinity-clickhouse-operator` 0.27.x from https://helm.altinity.com
+ * (Apache-2.0). Values of note:
+ * - `metrics.enabled` — metrics exporter sidecar (chart default: true)
+ * - `crdHook.enabled` — CRDs installed via a Helm hook. CAVEAT: under Flux,
+ *   helm-controller applies its own CRD policy (`install.crds`/`upgrade.crds`),
+ *   so hook-managed CRD upgrades across operator versions deserve explicit
+ *   review rather than blind chart bumps.
+ * - `operator.resources` — controller pod resources
+ */
+import { type ValuesMergeExpression } from '../../../core/aspects/values-merge.js';
+import type { ClickHouseOperatorBootstrapConfig } from '../types.js';
+/** Chart values shape (subset we map; the chart accepts more via customValues). */
+export interface ClickHouseOperatorHelmValues {
+    metrics?: {
+        enabled?: boolean;
+    };
+    crdHook?: {
+        enabled?: boolean;
+    };
+    operator?: {
+        resources?: {
+            requests?: {
+                cpu?: string;
+                memory?: string;
+            };
+            limits?: {
+                cpu?: string;
+                memory?: string;
+            };
+        };
+    };
+    [key: string]: unknown;
+}
+/**
+ * Mapper result: plain values, or a graph-aware runtime merge when
+ * `customValues` arrives as a schema reference / CEL expression (KRO then
+ * merges the override map into the mapped values at reconcile time).
+ */
+export type ClickHouseOperatorMappedHelmValues = ClickHouseOperatorHelmValues | ValuesMergeExpression;
+/**
+ * Fields the mapper consumes. The bootstrap passes them EXPLICITLY (never a
+ * spread of the schema proxy — spreading enumerates proxy keys and leaks
+ * `__typekroSchemaKey` marker garbage into the rendered values).
+ */
+export type ClickHouseOperatorHelmValuesInput = {
+    [K in keyof Pick<ClickHouseOperatorBootstrapConfig, 'metrics' | 'crdHook' | 'resources' | 'customValues'>]: ClickHouseOperatorBootstrapConfig[K] | undefined;
+};
+/**
+ * Map bootstrap config to Helm chart values.
+ *
+ * Only explicitly-provided fields are emitted so chart defaults win
+ * everywhere else. `customValues` merges LAST so user overrides always win:
+ * - concrete object → deep-merged at build time (works in both modes);
+ * - schema reference / CEL expression → wrapped in the graph-aware runtime
+ *   values merge (`mergeValuesExpression`), which the serializer compiles to
+ *   a KRO runtime map-merge — the same path the Dagster factory uses. This is
+ *   what makes `customValues` WORK in kro mode instead of being silently
+ *   dropped from the serialized HelmRelease values.
+ */
+export declare function mapClickHouseOperatorConfigToHelmValues(config: ClickHouseOperatorHelmValuesInput): ClickHouseOperatorMappedHelmValues;
+//# sourceMappingURL=helm-values-mapper.d.ts.map

package/dist/factories/clickhouse/utils/helm-values-mapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm-values-mapper.d.ts","sourceRoot":"","sources":["../../../../src/factories/clickhouse/utils/helm-values-mapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAGL,KAAK,qBAAqB,EAC3B,MAAM,uCAAuC,CAAC;AAE/C,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,aAAa,CAAC;AAErE,mFAAmF;AACnF,MAAM,WAAW,4BAA4B;IAC3C,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAChC,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAChC,QAAQ,CAAC,EAAE;QACT,SAAS,CAAC,EAAE;YACV,QAAQ,CAAC,EAAE;gBAAE,GAAG,CAAC,EAAE,MAAM,CAAC;gBAAC,MAAM,CAAC,EAAE,MAAM,CAAA;aAAE,CAAC;YAC7C,MAAM,CAAC,EAAE;gBAAE,GAAG,CAAC,EAAE,MAAM,CAAC;gBAAC,MAAM,CAAC,EAAE,MAAM,CAAA;aAAE,CAAC;SAC5C,CAAC;KACH,CAAC;IACF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;GAIG;AACH,MAAM,MAAM,kCAAkC,GAC1C,4BAA4B,GAC5B,qBAAqB,CAAC;AAE1B;;;;GAIG;AACH,MAAM,MAAM,iCAAiC,GAAG;KAC7C,CAAC,IAAI,MAAM,IAAI,CACd,iCAAiC,EACjC,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,cAAc,CACrD,GAAG,iCAAiC,CAAC,CAAC,CAAC,GAAG,SAAS;CACrD,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,wBAAgB,uCAAuC,CACrD,MAAM,EAAE,iCAAiC,GACxC,kCAAkC,CAgBpC"}

package/dist/factories/clickhouse/utils/helm-values-mapper.js

@@ -0,0 +1,80 @@
+/**
+ * Maps ClickHouseOperatorBootstrapConfig to altinity-clickhouse-operator
+ * Helm chart values.
+ *
+ * Chart: `altinity-clickhouse-operator` 0.27.x from https://helm.altinity.com
+ * (Apache-2.0). Values of note:
+ * - `metrics.enabled` — metrics exporter sidecar (chart default: true)
+ * - `crdHook.enabled` — CRDs installed via a Helm hook. CAVEAT: under Flux,
+ *   helm-controller applies its own CRD policy (`install.crds`/`upgrade.crds`),
+ *   so hook-managed CRD upgrades across operator versions deserve explicit
+ *   review rather than blind chart bumps.
+ * - `operator.resources` — controller pod resources
+ */
+import { isValuesMergeExpression, mergeValuesExpression, } from '../../../core/aspects/values-merge.js';
+import { isCelExpression, isKubernetesRef } from '../../../utils/type-guards.js';
+/**
+ * Map bootstrap config to Helm chart values.
+ *
+ * Only explicitly-provided fields are emitted so chart defaults win
+ * everywhere else. `customValues` merges LAST so user overrides always win:
+ * - concrete object → deep-merged at build time (works in both modes);
+ * - schema reference / CEL expression → wrapped in the graph-aware runtime
+ *   values merge (`mergeValuesExpression`), which the serializer compiles to
+ *   a KRO runtime map-merge — the same path the Dagster factory uses. This is
+ *   what makes `customValues` WORK in kro mode instead of being silently
+ *   dropped from the serialized HelmRelease values.
+ */
+export function mapClickHouseOperatorConfigToHelmValues(config) {
+    const values = {};
+    if (config.metrics !== undefined) {
+        values.metrics = config.metrics;
+    }
+    if (config.crdHook !== undefined) {
+        values.crdHook = config.crdHook;
+    }
+    if (config.resources !== undefined) {
+        values.operator = { resources: config.resources };
+    }
+    return mergeCustomValuesLast(values, config.customValues);
+}
+/**
+ * Merge `customValues` last — build-time deep merge for concrete objects,
+ * graph-aware runtime merge for refs / CEL / merge expressions.
+ */
+function mergeCustomValuesLast(base, customValues) {
+    if (customValues === undefined)
+        return base;
+    if (isKubernetesRef(customValues) ||
+        isCelExpression(customValues) ||
+        isValuesMergeExpression(customValues)) {
+        return mergeValuesExpression(base, customValues);
+    }
+    if (isPlainObject(customValues)) {
+        deepMerge(base, customValues);
+    }
+    return base;
+}
+function isPlainObject(value) {
+    return (!!value &&
+        typeof value === 'object' &&
+        !Array.isArray(value) &&
+        !isKubernetesRef(value) &&
+        !isCelExpression(value) &&
+        !isValuesMergeExpression(value));
+}
+/** Minimal deep merge (objects only; arrays/scalars replace), proto-safe. */
+function deepMerge(target, source) {
+    for (const [key, sourceValue] of Object.entries(source)) {
+        if (key === '__proto__' || key === 'constructor' || key === 'prototype')
+            continue;
+        const targetValue = target[key];
+        if (isPlainObject(targetValue) && isPlainObject(sourceValue)) {
+            deepMerge(targetValue, sourceValue);
+        }
+        else {
+            target[key] = sourceValue;
+        }
+    }
+}
+//# sourceMappingURL=helm-values-mapper.js.map

package/dist/factories/clickhouse/utils/helm-values-mapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm-values-mapper.js","sourceRoot":"","sources":["../../../../src/factories/clickhouse/utils/helm-values-mapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,uBAAuB,EACvB,qBAAqB,GAEtB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAqCjF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,uCAAuC,CACrD,MAAyC;IAEzC,MAAM,MAAM,GAAiC,EAAE,CAAC;IAEhD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAClC,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAClC,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,CAAC,QAAQ,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IACpD,CAAC;IAED,OAAO,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAC5B,IAAkC,EAClC,YAAqB;IAErB,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5C,IACE,eAAe,CAAC,YAAY,CAAC;QAC7B,eAAe,CAAC,YAAY,CAAC;QAC7B,uBAAuB,CAAC,YAAY,CAAC,EACrC,CAAC;QACD,OAAO,qBAAqB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,SAAS,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,CACL,CAAC,CAAC,KAAK;QACP,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,CAAC,eAAe,CAAC,KAAK,CAAC;QACvB,CAAC,eAAe,CAAC,KAAK,CAAC;QACvB,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAChC,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,SAAS,SAAS,CAAC,MAA+B,EAAE,MAA+B;IACjF,KAAK,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACxD,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,WAAW;YAAE,SAAS;QAClF,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,aAAa,CAAC,WAAW,CAAC,IAAI,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7D,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC;QAC5B,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/factories/clickhouse/utils/index.d.ts

@@ -0,0 +1,4 @@
+export * from './helm-values-mapper.js';
+export * from './validation.js';
+export * from './zone-layout.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/factories/clickhouse/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/factories/clickhouse/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC"}

package/dist/factories/clickhouse/utils/index.js

@@ -0,0 +1,4 @@
+export * from './helm-values-mapper.js';
+export * from './validation.js';
+export * from './zone-layout.js';
+//# sourceMappingURL=index.js.map

package/dist/factories/clickhouse/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/factories/clickhouse/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC"}

package/dist/factories/clickhouse/utils/validation.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Shared build-time validation for ClickHouse topology counts.
+ *
+ * The Altinity operator rejects a CHI/CHK layout with `shardsCount: 0` /
+ * `replicasCount: 0` (and fractional or negative counts are never valid), so
+ * every entry point that compiles a layout — the plain homogeneous path, the
+ * zone-pinned path, the keeper compiler, and the `makeClickHouseCluster`
+ * constructor — validates counts here BEFORE emitting operator input.
+ */
+/**
+ * Assert that a topology count is a positive integer (>= 1).
+ *
+ * @param context - The entry point name for the error message
+ *   (e.g. `clickHouseInstallation`)
+ * @param field - The offending config field (e.g. `replicas`)
+ * @param value - The value received
+ * @throws Error naming the entry point, field, and received value when the
+ *   value is zero, negative, or not an integer
+ */
+export declare function assertPositiveIntegerCount(context: string, field: string, value: number): void;
+//# sourceMappingURL=validation.d.ts.map

package/dist/factories/clickhouse/utils/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../src/factories/clickhouse/utils/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,GACZ,IAAI,CAQN"}

package/dist/factories/clickhouse/utils/validation.js

@@ -0,0 +1,27 @@
+/**
+ * Shared build-time validation for ClickHouse topology counts.
+ *
+ * The Altinity operator rejects a CHI/CHK layout with `shardsCount: 0` /
+ * `replicasCount: 0` (and fractional or negative counts are never valid), so
+ * every entry point that compiles a layout — the plain homogeneous path, the
+ * zone-pinned path, the keeper compiler, and the `makeClickHouseCluster`
+ * constructor — validates counts here BEFORE emitting operator input.
+ */
+/**
+ * Assert that a topology count is a positive integer (>= 1).
+ *
+ * @param context - The entry point name for the error message
+ *   (e.g. `clickHouseInstallation`)
+ * @param field - The offending config field (e.g. `replicas`)
+ * @param value - The value received
+ * @throws Error naming the entry point, field, and received value when the
+ *   value is zero, negative, or not an integer
+ */
+export function assertPositiveIntegerCount(context, field, value) {
+    if (!Number.isInteger(value) || value < 1) {
+        throw new Error(`${context}: '${field}' must be a positive integer (got ${JSON.stringify(value)}). ` +
+            `The clickhouse-operator rejects a layout with a zero/invalid count — ` +
+            `use ${field} >= 1, or omit the field to use the default of 1.`);
+    }
+}
+//# sourceMappingURL=validation.js.map

package/dist/factories/clickhouse/utils/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../src/factories/clickhouse/utils/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAAe,EACf,KAAa,EACb,KAAa;IAEb,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,MAAM,KAAK,qCAAqC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK;YAClF,uEAAuE;YACvE,OAAO,KAAK,mDAAmD,CAClE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/factories/clickhouse/utils/zone-layout.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Zone-pinned CHI layout compilation.
+ *
+ * WHY THIS EXISTS: the clickhouse-operator's own `podDistribution` supports
+ * ONLY the `kubernetes.io/hostname` topologyKey (Altinity/clickhouse-operator
+ * issue #772), so per-ZONE spreading cannot be expressed operator-natively.
+ * On EKS this matters operationally: EBS volumes are ZONAL, so a replica pod
+ * rescheduled into another AZ strands its PVC and the pod wedges Pending
+ * (we hit exactly this in production). The fix the operator DOES support is a
+ * per-replica `layout.replicas:` list where each replica's pod template pins
+ * one zone via nodeAffinity on `topology.kubernetes.io/zone` — this module
+ * compiles that layout deterministically.
+ *
+ * These helpers are pure (no resource construction) and unit-tested directly.
+ */
+import type { ChiClusterLayoutReplica, ChiPodTemplate } from '../types.js';
+/** Standard Kubernetes zone topology label. */
+export declare const ZONE_TOPOLOGY_KEY = "topology.kubernetes.io/zone";
+/**
+ * Assign one zone per replica index, round-robin.
+ *
+ * When `replicaCount > zones.length`, zones repeat in order:
+ * replicas=5, zones=[a,b,c] → [a, b, c, a, b].
+ *
+ * @param replicaCount - Number of replicas per shard
+ * @param zones - Non-empty list of availability zones
+ * @returns Zone for each replica index (length === replicaCount)
+ */
+export declare function assignZonesRoundRobin(replicaCount: number, zones: readonly string[]): string[];
+/**
+ * Deterministic pod template name for a zone-pinned template.
+ *
+ * Zone names are DNS-safe label values, so embedding them keeps the template
+ * name valid and self-describing (e.g. `clickhouse-us-east-2a`).
+ */
+export declare function zonePodTemplateName(baseName: string, zone: string): string;
+/**
+ * Explicit required nodeAffinity pinning a pod to one zone.
+ *
+ * Emitted as a plain PodSpec affinity (rather than the operator's
+ * `podTemplate.zone` sugar) so the pinning is visible verbatim in the
+ * rendered CHI and doesn't depend on operator-side template expansion.
+ */
+export declare function zoneNodeAffinity(zone: string): Record<string, unknown>;
+/** Result of compiling a zone-pinned per-replica cluster layout. */
+export interface ZonePinnedLayout {
+    /**
+     * Replica-first layout entries — one per replica, each referencing its
+     * zone's pod template. Emitted INSTEAD of `replicasCount` (the replica
+     * list itself defines the replica count).
+     */
+    replicas: ChiClusterLayoutReplica[];
+    /**
+     * One pod template per DISTINCT assigned zone. Replicas sharing a zone
+     * (replicaCount > zones.length) share the template.
+     */
+    podTemplates: ChiPodTemplate[];
+}
+/**
+ * Compile the per-replica zone-pinned layout for a CHI cluster.
+ *
+ * @param options.replicaCount - Replicas per shard
+ * @param options.zones - Availability zones to round-robin replicas across
+ * @param options.podTemplateBaseName - Base name for generated pod templates
+ * @param options.podSpec - Shared PodSpec (containers etc.); the zone
+ *   nodeAffinity is merged in per template
+ */
+export declare function compileZonePinnedLayout(options: {
+    replicaCount: number;
+    zones: readonly string[];
+    podTemplateBaseName: string;
+    podSpec: Record<string, unknown>;
+}): ZonePinnedLayout;
+//# sourceMappingURL=zone-layout.d.ts.map

package/dist/factories/clickhouse/utils/zone-layout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zone-layout.d.ts","sourceRoot":"","sources":["../../../../src/factories/clickhouse/utils/zone-layout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE3E,+CAA+C;AAC/C,eAAO,MAAM,iBAAiB,gCAAgC,CAAC;AAE/D;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,SAAS,MAAM,EAAE,GACvB,MAAM,EAAE,CAiBV;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAE1E;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAkBtE;AAED,oEAAoE;AACpE,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,QAAQ,EAAE,uBAAuB,EAAE,CAAC;IACpC;;;OAGG;IACH,YAAY,EAAE,cAAc,EAAE,CAAC;CAChC;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE;IAC/C,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,GAAG,gBAAgB,CAkBnB"}