typekro 0.23.0 → 0.24.1

package/dist/factories/clickstack/compositions/clickstack-bootstrap.js

@@ -0,0 +1,257 @@
+/**
+ * ClickStack (HyperDX) Bootstrap Composition — EXTERNAL ClickHouse only.
+ *
+ * Deploys the OFFICIAL `clickstack` chart (3.0.x, MIT) from
+ * https://clickhouse.github.io/ClickStack-helm-charts via HelmRepository and
+ * HelmRelease resources. Build-around: we wrap the official chart — never
+ * hand-rolled manifests. NOT the archived hyperdxio/helm-charts repo, NOT the
+ * deprecated `hdx-oss-v2` chart, and NOT the `clickstack-operators`
+ * prerequisite chart (its ClickHouse operator CRDs would collide with the
+ * Altinity clickhouse-operator that manages our ClickHouseInstallation, and
+ * it drags in a MongoDB operator we don't want).
+ *
+ * BUILD-TIME vs RUNTIME: `makeClickstackBootstrap(options)` constructs a
+ * composition VARIANT. Options that decide WHICH resources exist (the Mongo
+ * mode + its storage shape) and the static raw chart values are build-time —
+ * plain JS may branch on them because they are always concrete. The runtime
+ * spec carries only proxy-safe values (names, namespaces, endpoints,
+ * versions, credentials); a user composing with `schema.spec.*` refs never
+ * hits a JS branch on a proxy.
+ *
+ * What gets deployed:
+ * 1. The target Namespace.
+ * 2. The shared ClickStack HelmRepository singleton.
+ * 3. Internal-Mongo variant only: a minimal single-replica Mongo
+ *    StatefulSet + Service (`mongo:7`, no operator/CRDs/auth — APP METADATA
+ *    ONLY, dev-first; see resources/mongo.ts for the loud caveats).
+ * 4. The clickstack HelmRelease: HyperDX (UI/API/OpAMP) + the OTel gateway
+ *    collector subchart, wired to the EXTERNAL ClickHouse
+ *    (`clickhouse.enabled: false` and `mongodb.enabled: false` are hard-pinned
+ *    by the values mapper and beat the build-time values passthrough).
+ *
+ * STATUS CONTRACT: beyond ready/phase, the status exposes `ui.url`,
+ * `gateway.otlpHttpEndpoint` / `gateway.otlpGrpcEndpoint`, and
+ * `app.host/appPort/apiPort` so downstream compositions (e.g.
+ * `clickstackK8sTelemetry`) consume connection details without reconstructing
+ * chart naming rules. The mapper pins `fullnameOverride` to the release name
+ * to make that naming deterministic; endpoints are derived from the owned
+ * HelmRelease resource's metadata (never `schema.spec.*` — KRO status CEL
+ * cannot reference the instance spec).
+ *
+ * SCHEMA / REPLICATION CAVEAT: on first start the gateway collector's goose
+ * migrations create `otel_logs` / `otel_traces` / `otel_metrics_*` /
+ * `hyperdx_sessions` in the external ClickHouse as plain single-node
+ * MergeTree tables. That matches a 1-replica CHI (our dev-first sizing);
+ * multi-replica / `ON CLUSTER` schemas are NOT supported by ClickStack's
+ * tooling — revisit (and see `CLICKSTACK_CLICKHOUSE_GUIDANCE`) before scaling
+ * the CHI. Version coupling is loose: chart vendors CH 25.7, seed schemas
+ * carry a <26.2 compat variant, and the optional JSON-typed schema
+ * (`HYPERDX_OTEL_EXPORTER_CLICKHOUSE_JSON_ENABLE`) wants CH 25.3+.
+ *
+ * @example Internal Mongo (default)
+ * ```typescript
+ * const factory = clickstackBootstrap.factory('kro', { namespace: 'clickstack' });
+ *
+ * await factory.deploy({
+ *   name: 'clickstack',
+ *   clickhouse: {
+ *     host: 'clickhouse-observability.clickhouse.svc.cluster.local',
+ *     username: 'otelcollector',
+ *     password: '…',
+ *   },
+ * });
+ * ```
+ *
+ * @example External Mongo (build-time variant)
+ * ```typescript
+ * const bootstrap = makeClickstackBootstrap({ mongo: { mode: 'external' } });
+ *
+ * await bootstrap.factory('kro').deploy({
+ *   name: 'clickstack',
+ *   clickhouse: { host: '…' },
+ *   mongoUri: 'mongodb://user:pass@mongo.example.com:27017/hyperdx',
+ * });
+ * ```
+ */
+import { kubernetesComposition } from '../../../core/composition/imperative.js';
+import { DEFAULT_FLUX_NAMESPACE } from '../../../core/config/defaults.js';
+import { Cel } from '../../../core/references/cel.js';
+import { singleton } from '../../../core/singleton/singleton.js';
+import { containsKubernetesRefs, isKubernetesRef } from '../../../utils/type-guards.js';
+import { namespace } from '../../kubernetes/core/namespace.js';
+import { CLICKSTACK_API_PORT, CLICKSTACK_APP_PORT, CLICKSTACK_GATEWAY_NAME_SUFFIX, CLICKSTACK_OTLP_GRPC_PORT, CLICKSTACK_OTLP_HTTP_PORT, clickstackHelmRelease, DEFAULT_CLICKSTACK_REPO_NAME, DEFAULT_CLICKSTACK_REPO_URL, DEFAULT_CLICKSTACK_VERSION, } from '../resources/helm.js';
+import { clickstackMongoService, clickstackMongoStatefulSet } from '../resources/mongo.js';
+import { ClickStackBootstrapConfigSchema, ClickStackBootstrapStatusSchema, ClickStackExternalMongoBootstrapConfigSchema, } from '../types.js';
+import { DEFAULT_CLICKSTACK_NAMESPACE, mapClickStackConfigToHelmValues, } from '../utils/helm-values-mapper.js';
+import { clickstackHelmRepositoryBootstrap } from './clickstack-helm-repository.js';
+/**
+ * Shared composition body. `build` is CONCRETE (construction-time), so every
+ * plain-JS branch below is on build config — never on the (possibly
+ * schema-proxy) runtime spec.
+ *
+ * NOTE: the variant builders pass INLINE delegating arrows
+ * (`(spec) => bootstrapBody(spec, build)`) to `kubernetesComposition` — a
+ * composition function that is itself a returned closure defeats the
+ * composition analyzer and mis-serializes mixed CEL templates (verified
+ * empirically: `Cel.template` values came out double-wrapped as
+ * `${tcp://${…}}`).
+ */
+function bootstrapBody(spec, build) {
+    {
+        const resolvedNamespace = isKubernetesRef(spec.namespace)
+            ? Cel.default(spec.namespace, DEFAULT_CLICKSTACK_NAMESPACE)
+            : (spec.namespace ?? DEFAULT_CLICKSTACK_NAMESPACE);
+        const resolvedVersion = isKubernetesRef(spec.version)
+            ? Cel.default(spec.version, DEFAULT_CLICKSTACK_VERSION)
+            : (spec.version ?? DEFAULT_CLICKSTACK_VERSION);
+        const helmValues = mapClickStackConfigToHelmValues(spec, {
+            mongoMode: build.mongoMode,
+            ...(build.values !== undefined && { values: build.values }),
+        });
+        const _clickstackNamespace = namespace({
+            metadata: {
+                name: resolvedNamespace,
+                labels: {
+                    'app.kubernetes.io/name': 'clickstack',
+                    'app.kubernetes.io/instance': spec.name,
+                    'app.kubernetes.io/managed-by': 'typekro',
+                },
+            },
+            id: 'clickstackNamespace',
+        });
+        // One cluster-level Flux source shared by every ClickStack instance —
+        // singleton(...) keeps it out of any single instance's KRO ApplySet
+        // (see clickstack-helm-repository.ts for the ownership rationale).
+        const _clickstackHelmRepository = singleton(clickstackHelmRepositoryBootstrap, {
+            id: 'clickstack-helm-repository',
+            spec: {
+                name: DEFAULT_CLICKSTACK_REPO_NAME,
+                namespace: DEFAULT_FLUX_NAMESPACE,
+                url: DEFAULT_CLICKSTACK_REPO_URL,
+            },
+        });
+        // ── Internal Mongo (build-time variant) ─────────────────────────────
+        if (build.mongoMode === 'internal') {
+            const _mongoStatefulSet = clickstackMongoStatefulSet({
+                name: spec.name,
+                namespace: resolvedNamespace,
+                ...(build.storage?.size !== undefined && { storageSize: build.storage.size }),
+                ...(build.storage?.storageClassName !== undefined && {
+                    storageClassName: build.storage.storageClassName,
+                }),
+                statefulSetId: 'clickstackMongoStatefulSet',
+            });
+            const _mongoService = clickstackMongoService({
+                name: spec.name,
+                namespace: resolvedNamespace,
+                serviceId: 'clickstackMongoService',
+            });
+        }
+        // ── ClickStack HelmRelease ───────────────────────────────────────────
+        //
+        // The HelmRelease does not set `disableWait`, so helm-controller waits
+        // for the chart's workloads (HyperDX app + gateway collector) before
+        // reporting Ready — readiness is workload-aware, mirroring the
+        // dagster/clickhouse bootstraps. The HyperDX pod's own waitForMongodb
+        // init container gates on Mongo reachability, so no explicit dependency
+        // on the internal Mongo is needed.
+        const _clickstackHelmRelease = clickstackHelmRelease({
+            name: spec.name,
+            namespace: resolvedNamespace,
+            version: resolvedVersion,
+            values: helmValues,
+            id: 'clickstackHelmRelease',
+        });
+        const helmReleaseReady = Cel.expr(_clickstackHelmRelease.status.conditions, '.exists(c, c.type == "Ready" && c.status == "True")');
+        // Status endpoints derive from the owned HelmRelease resource so they
+        // serialize as KRO status CEL and land on the live KRO CR's status
+        // (same reachability class as the PR #93 review finding). Naming is
+        // deterministic because the mapper pins `fullnameOverride` to the release
+        // name: HyperDX Service = `<name>`, gateway Service =
+        // `<name>-otel-collector`. Ports are chart defaults (see resources/helm.ts)
+        // and ride INSIDE the resource-derived URL strings.
+        //
+        // These use NATURAL proxy access inside JS template literals (typekro
+        // >= 0.24.0, with the #97 resource-metadata-proxy fix). In KRO mode the
+        // imperative analyzer converts them to status CEL and (#97)
+        // `clickstackHelmRelease.metadata.*` resolves resource-anchored instead
+        // of degrading to `schema.spec.name`; in direct mode they are plain JS,
+        // so live-status re-execution evaluates them to concrete strings — the
+        // bimodal win over the old raw `Cel.expr("...literal CEL...")` strings,
+        // which stayed opaque markers in direct mode. `ready`/`phase` below stay
+        // raw Cel.expr: they use the CEL `.exists()` macro over the HelmRelease
+        // conditions, which has no analyzer-convertible JS equivalent — so they are
+        // NOT natural template literals. They still resolve in BOTH modes, though:
+        // KRO status CEL in kro mode, and the cel-js reference resolver evaluates
+        // the `.exists()` macro against the live HelmRelease conditions in direct
+        // mode (proven concrete — ready===true / phase==="Ready" — in the hermetic
+        // final-pipeline test). Unchanged by this migration: raw Cel.expr before
+        // and after; only the metadata endpoint fields switched to template literals.
+        return {
+            ready: helmReleaseReady,
+            phase: Cel.expr('clickstackHelmRelease.status.conditions.exists(c, c.type == "Ready" && c.status == "False") ' +
+                '? "Failed" : clickstackHelmRelease.status.conditions.exists(c, c.type == "Ready" && ' +
+                'c.status == "True") ? "Ready" : "Installing"'),
+            version: resolvedVersion,
+            ui: {
+                url: `http://${_clickstackHelmRelease.metadata.name}.${_clickstackHelmRelease.metadata.namespace}.svc.cluster.local:${CLICKSTACK_APP_PORT}`,
+            },
+            gateway: {
+                otlpHttpEndpoint: `http://${_clickstackHelmRelease.metadata.name}${CLICKSTACK_GATEWAY_NAME_SUFFIX}.${_clickstackHelmRelease.metadata.namespace}.svc.cluster.local:${CLICKSTACK_OTLP_HTTP_PORT}`,
+                otlpGrpcEndpoint: `http://${_clickstackHelmRelease.metadata.name}${CLICKSTACK_GATEWAY_NAME_SUFFIX}.${_clickstackHelmRelease.metadata.namespace}.svc.cluster.local:${CLICKSTACK_OTLP_GRPC_PORT}`,
+            },
+            app: {
+                host: `${_clickstackHelmRelease.metadata.name}.${_clickstackHelmRelease.metadata.namespace}.svc.cluster.local`,
+                // Bare numeric constants — no resource anchor, so client-hydrated
+                // only; both ports are KRO-visible inside the URL fields above.
+                appPort: CLICKSTACK_APP_PORT,
+                apiPort: CLICKSTACK_API_PORT,
+            },
+        };
+    }
+}
+function buildInternalComposition(options) {
+    const build = {
+        mongoMode: 'internal',
+        ...(options.mongo?.storage !== undefined && { storage: options.mongo.storage }),
+        ...(options.values !== undefined && { values: options.values }),
+    };
+    return kubernetesComposition({
+        name: options.name ?? 'clickstack-bootstrap',
+        kind: options.kind ?? 'ClickStackBootstrap',
+        spec: ClickStackBootstrapConfigSchema,
+        status: ClickStackBootstrapStatusSchema,
+    }, (spec) => bootstrapBody(spec, build));
+}
+function buildExternalComposition(options) {
+    const build = {
+        mongoMode: 'external',
+        ...(options.values !== undefined && { values: options.values }),
+    };
+    return kubernetesComposition({
+        name: options.name ?? 'clickstack-bootstrap-external-mongo',
+        kind: options.kind ?? 'ClickStackExternalMongoBootstrap',
+        spec: ClickStackExternalMongoBootstrapConfigSchema,
+        status: ClickStackBootstrapStatusSchema,
+    }, (spec) => bootstrapBody(spec, build));
+}
+export function makeClickstackBootstrap(options = {}) {
+    // Build-time options must be CONCRETE: they select which resources exist and bake static chart
+    // values at construction — a schema ref here can never serialize (loud > silent mis-serialization).
+    if (containsKubernetesRefs(options)) {
+        throw new Error('makeClickstackBootstrap: build-time options contain a schema/resource reference. ' +
+            'Build-time options (mongo mode/storage, static chart values, name/kind) are fixed at ' +
+            'construction — move per-instance values into the runtime spec instead.');
+    }
+    if (options.mongo?.mode === 'external') {
+        return buildExternalComposition(options);
+    }
+    return buildInternalComposition(options);
+}
+/**
+ * The default ClickStack bootstrap: internal single-replica Mongo (dev-first),
+ * default RGD name/kind. Use `makeClickstackBootstrap(...)` for the
+ * external-Mongo variant, custom Mongo storage, or static raw chart values.
+ */
+export const clickstackBootstrap = makeClickstackBootstrap();
+//# sourceMappingURL=clickstack-bootstrap.js.map

package/dist/factories/clickstack/compositions/clickstack-bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clickstack-bootstrap.js","sourceRoot":"","sources":["../../../../src/factories/clickstack/compositions/clickstack-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0EG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,GAAG,EAAE,MAAM,iCAAiC,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,sCAAsC,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACxF,OAAO,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAC/D,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,8BAA8B,EAC9B,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,4BAA4B,EAC5B,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAC3F,OAAO,EAEL,+BAA+B,EAE/B,+BAA+B,EAG/B,4CAA4C,GAI7C,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,4BAA4B,EAC5B,+BAA+B,GAChC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,iCAAiC,EAAE,MAAM,iCAAiC,CAAC;AASpF;;;;;;;;;;;GAWG;AACH,SAAS,aAAa,CAAC,IAAsC,EAAE,KAA0B;IACvF,CAAC;QACC,MAAM,iBAAiB,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC;YACvD,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,4BAA4B,CAAC;YAC3D,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,4BAA4B,CAAC,CAAC;QACrD,MAAM,eAAe,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;YACnD,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,0BAA0B,CAAC;YACvD,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,0BAA0B,CAAC,CAAC;QAEjD,MAAM,UAAU,GAAG,+BAA+B,CAAC,IAAI,EAAE;YACvD,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;SAC5D,CAAC,CAAC;QAEH,MAAM,oBAAoB,GAAG,SAAS,CAAC;YACrC,QAAQ,EAAE;gBACR,IAAI,EAAE,iBAAiB;gBACvB,MAAM,EAAE;oBACN,wBAAwB,EAAE,YAAY;oBACtC,4BAA4B,EAAE,IAAI,CAAC,IAAI;oBACvC,8BAA8B,EAAE,SAAS;iBAC1C;aACF;YACD,EAAE,EAAE,qBAAqB;SAC1B,CAAC,CAAC;QAEH,sEAAsE;QACtE,oEAAoE;QACpE,mEAAmE;QACnE,MAAM,yBAAyB,GAAG,SAAS,CAAC,iCAAiC,EAAE;YAC7E,EAAE,EAAE,4BAA4B;YAChC,IAAI,EAAE;gBACJ,IAAI,EAAE,4BAA4B;gBAClC,SAAS,EAAE,sBAAsB;gBACjC,GAAG,EAAE,2BAA2B;aACjC;SACF,CAAC,CAAC;QAEH,uEAAuE;QACvE,IAAI,KAAK,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YACnC,MAAM,iBAAiB,GAAG,0BAA0B,CAAC;gBACnD,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,iBAA2B;gBACtC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAC7E,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,gBAAgB,KAAK,SAAS,IAAI;oBACnD,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC,gBAAgB;iBACjD,CAAC;gBACF,aAAa,EAAE,4BAA4B;aAC5C,CAAC,CAAC;YACH,MAAM,aAAa,GAAG,sBAAsB,CAAC;gBAC3C,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,iBAA2B;gBACtC,SAAS,EAAE,wBAAwB;aACpC,CAAC,CAAC;QACL,CAAC;QAED,wEAAwE;QACxE,EAAE;QACF,uEAAuE;QACvE,qEAAqE;QACrE,+DAA+D;QAC/D,sEAAsE;QACtE,wEAAwE;QACxE,mCAAmC;QACnC,MAAM,sBAAsB,GAAG,qBAAqB,CAAC;YACnD,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,iBAAiB;YAC5B,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,UAAU;YAClB,EAAE,EAAE,uBAAuB;SAC5B,CAAC,CAAC;QAEH,MAAM,gBAAgB,GAAG,GAAG,CAAC,IAAI,CAC/B,sBAAsB,CAAC,MAAM,CAAC,UAAU,EACxC,qDAAqD,CACtD,CAAC;QAEF,sEAAsE;QACtE,mEAAmE;QACnE,oEAAoE;QACpE,0EAA0E;QAC1E,sDAAsD;QACtD,4EAA4E;QAC5E,oDAAoD;QACpD,EAAE;QACF,sEAAsE;QACtE,wEAAwE;QACxE,4DAA4D;QAC5D,wEAAwE;QACxE,wEAAwE;QACxE,uEAAuE;QACvE,wEAAwE;QACxE,yEAAyE;QACzE,wEAAwE;QACxE,4EAA4E;QAC5E,2EAA2E;QAC3E,0EAA0E;QAC1E,0EAA0E;QAC1E,2EAA2E;QAC3E,yEAAyE;QACzE,8EAA8E;QAC9E,OAAO;YACL,KAAK,EAAE,gBAAgB;YACvB,KAAK,EAAE,GAAG,CAAC,IAAI,CACb,8FAA8F;gBAC5F,sFAAsF;gBACtF,8CAA8C,CACjD;YACD,OAAO,EAAE,eAAe;YACxB,EAAE,EAAE;gBACF,GAAG,EAAE,UAAU,sBAAsB,CAAC,QAAQ,CAAC,IAAI,IAAI,sBAAsB,CAAC,QAAQ,CAAC,SAAS,sBAAsB,mBAAmB,EAAE;aAC5I;YACD,OAAO,EAAE;gBACP,gBAAgB,EAAE,UAAU,sBAAsB,CAAC,QAAQ,CAAC,IAAI,GAAG,8BAA8B,IAAI,sBAAsB,CAAC,QAAQ,CAAC,SAAS,sBAAsB,yBAAyB,EAAE;gBAC/L,gBAAgB,EAAE,UAAU,sBAAsB,CAAC,QAAQ,CAAC,IAAI,GAAG,8BAA8B,IAAI,sBAAsB,CAAC,QAAQ,CAAC,SAAS,sBAAsB,yBAAyB,EAAE;aAChM;YACD,GAAG,EAAE;gBACH,IAAI,EAAE,GAAG,sBAAsB,CAAC,QAAQ,CAAC,IAAI,IAAI,sBAAsB,CAAC,QAAQ,CAAC,SAAS,oBAAoB;gBAC9G,kEAAkE;gBAClE,gEAAgE;gBAChE,OAAO,EAAE,mBAAmB;gBAC5B,OAAO,EAAE,mBAAmB;aAC7B;SACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,OAA4C;IAC5E,MAAM,KAAK,GAAwB;QACjC,SAAS,EAAE,UAAU;QACrB,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC/E,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;KAChE,CAAC;IACF,OAAO,qBAAqB,CAC1B;QACE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,sBAAsB;QAC5C,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,qBAAqB;QAC3C,IAAI,EAAE,+BAA+B;QACrC,MAAM,EAAE,+BAA+B;KACxC,EACD,CAAC,IAA+B,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAChE,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,OAA4C;IAC5E,MAAM,KAAK,GAAwB;QACjC,SAAS,EAAE,UAAU;QACrB,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;KAChE,CAAC;IACF,OAAO,qBAAqB,CAC1B;QACE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,qCAAqC;QAC3D,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,kCAAkC;QACxD,IAAI,EAAE,4CAA4C;QAClD,MAAM,EAAE,+BAA+B;KACxC,EACD,CAAC,IAA4C,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAC7E,CAAC;AACJ,CAAC;AAqBD,MAAM,UAAU,uBAAuB,CACrC,UAAkC,EAAE;IAEpC,+FAA+F;IAC/F,oGAAoG;IACpG,IAAI,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,mFAAmF;YACjF,uFAAuF;YACvF,wEAAwE,CAC3E,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;QACvC,OAAO,wBAAwB,CAAC,OAA8C,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,wBAAwB,CAAC,OAA8C,CAAC,CAAC;AAClF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,uBAAuB,EAAE,CAAC"}

package/dist/factories/clickstack/compositions/clickstack-helm-repository.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Shared ClickStack HelmRepository singleton.
+ *
+ * The official ClickStack chart repository
+ * (https://clickhouse.github.io/ClickStack-helm-charts) is a single
+ * cluster-level Flux source — the same URL serves every consumer. Deploying it
+ * inline in the `clickstackBootstrap` RGD would make each instance's KRO
+ * ApplySet try to *own* the HelmRepository exclusively, so a second instance
+ * of the RGD fails to reconcile ("resource belongs to a different ApplySet
+ * ... cannot reassign"). Modelling the repository as its own composition lets
+ * the bootstrap consume it via `singleton(...)`, so one shared HelmRepository
+ * is owned outside any single instance's ApplySet and every instance's
+ * HelmRelease references it by the same `sourceRef`. (Same pattern as the
+ * dagster/clickhouse bootstraps' shared repositories.)
+ */
+export declare const clickstackHelmRepositoryBootstrap: import("../../../index.js").CallableComposition<{
+    name: string;
+    namespace: string;
+    url: string;
+}, {
+    ready: boolean;
+}>;
+//# sourceMappingURL=clickstack-helm-repository.d.ts.map

package/dist/factories/clickstack/compositions/clickstack-helm-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clickstack-helm-repository.d.ts","sourceRoot":"","sources":["../../../../src/factories/clickstack/compositions/clickstack-helm-repository.ts"],"names":[],"mappings":"AAQA;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,iCAAiC;;;;;;EAsB7C,CAAC"}

package/dist/factories/clickstack/compositions/clickstack-helm-repository.js

@@ -0,0 +1,36 @@
+import { kubernetesComposition } from '../../../core/composition/imperative.js';
+import { Cel } from '../../../core/references/cel.js';
+import { clickstackHelmRepository } from '../resources/helm.js';
+import { ClickStackHelmRepositorySingletonSpecSchema, ClickStackHelmRepositorySingletonStatusSchema, } from '../types.js';
+/**
+ * Shared ClickStack HelmRepository singleton.
+ *
+ * The official ClickStack chart repository
+ * (https://clickhouse.github.io/ClickStack-helm-charts) is a single
+ * cluster-level Flux source — the same URL serves every consumer. Deploying it
+ * inline in the `clickstackBootstrap` RGD would make each instance's KRO
+ * ApplySet try to *own* the HelmRepository exclusively, so a second instance
+ * of the RGD fails to reconcile ("resource belongs to a different ApplySet
+ * ... cannot reassign"). Modelling the repository as its own composition lets
+ * the bootstrap consume it via `singleton(...)`, so one shared HelmRepository
+ * is owned outside any single instance's ApplySet and every instance's
+ * HelmRelease references it by the same `sourceRef`. (Same pattern as the
+ * dagster/clickhouse bootstraps' shared repositories.)
+ */
+export const clickstackHelmRepositoryBootstrap = kubernetesComposition({
+    name: 'clickstack-helm-repository',
+    kind: 'ClickStackHelmRepository',
+    spec: ClickStackHelmRepositorySingletonSpecSchema,
+    status: ClickStackHelmRepositorySingletonStatusSchema,
+}, (spec) => {
+    const repository = clickstackHelmRepository({
+        name: spec.name,
+        namespace: spec.namespace,
+        url: spec.url,
+        id: 'repository',
+    });
+    return {
+        ready: Cel.expr(repository.status.conditions, '.exists(c, c.type == "Ready" && c.status == "True")'),
+    };
+});
+//# sourceMappingURL=clickstack-helm-repository.js.map

package/dist/factories/clickstack/compositions/clickstack-helm-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clickstack-helm-repository.js","sourceRoot":"","sources":["../../../../src/factories/clickstack/compositions/clickstack-helm-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,GAAG,EAAE,MAAM,iCAAiC,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EACL,2CAA2C,EAC3C,6CAA6C,GAC9C,MAAM,aAAa,CAAC;AAErB;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,qBAAqB,CACpE;IACE,IAAI,EAAE,4BAA4B;IAClC,IAAI,EAAE,0BAA0B;IAChC,IAAI,EAAE,2CAA2C;IACjD,MAAM,EAAE,6CAA6C;CACtD,EACD,CAAC,IAAI,EAAE,EAAE;IACP,MAAM,UAAU,GAAG,wBAAwB,CAAC;QAC1C,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,EAAE,EAAE,YAAY;KACjB,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,IAAI,CACb,UAAU,CAAC,MAAM,CAAC,UAAU,EAC5B,qDAAqD,CACtD;KACF,CAAC;AACJ,CAAC,CACF,CAAC"}

package/dist/factories/clickstack/compositions/index.d.ts

@@ -0,0 +1,5 @@
+export * from './clickstack-bootstrap.js';
+export * from './clickstack-helm-repository.js';
+export * from './k8s-telemetry.js';
+export * from './otel-helm-repository.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/factories/clickstack/compositions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/factories/clickstack/compositions/index.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iCAAiC,CAAC;AAChD,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC"}

package/dist/factories/clickstack/compositions/index.js

@@ -0,0 +1,5 @@
+export * from './clickstack-bootstrap.js';
+export * from './clickstack-helm-repository.js';
+export * from './k8s-telemetry.js';
+export * from './otel-helm-repository.js';
+//# sourceMappingURL=index.js.map

package/dist/factories/clickstack/compositions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/factories/clickstack/compositions/index.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iCAAiC,CAAC;AAChD,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC"}

package/dist/factories/clickstack/compositions/k8s-telemetry.d.ts

@@ -0,0 +1,83 @@
+/**
+ * ClickStack Kubernetes Telemetry Composition.
+ *
+ * The documented ClickStack pattern for collecting cluster telemetry
+ * (https://clickhouse.com/docs/use-cases/observability/clickstack/ingesting-data/kubernetes):
+ * TWO instances of the STOCK `opentelemetry-collector` chart from
+ * https://open-telemetry.github.io/opentelemetry-helm-charts —
+ *
+ * 1. A DAEMONSET instance on every node: presets `logsCollection`,
+ *    `hostMetrics`, `kubernetesAttributes`, `kubeletMetrics` (+ the
+ *    docs-recommended kubeletstats utilization metrics).
+ * 2. A DEPLOYMENT instance (single replica): presets `kubernetesAttributes`,
+ *    `kubernetesEvents`, `clusterMetrics`.
+ *
+ * Both export `otlphttp` to the ClickStack gateway collector (default: the
+ * in-cluster `clickstack-otel-collector` Service on 4318 — prefer wiring
+ * `stack.status.gateway.otlpHttpEndpoint` from the bootstrap's status
+ * contract) authenticated with an `authorization: <HYPERDX_API_KEY>` header.
+ * The key is delivered via a `secretKeyRef` env var and referenced through
+ * OTel `${env:…}` config expansion, so the key value never lands in Helm
+ * values.
+ *
+ * BUILD-TIME vs RUNTIME: per-instance raw chart values are BUILD-TIME options
+ * on `makeClickstackK8sTelemetry(...)` (a free-form values tree cannot be
+ * represented per-instance in a KRO schema without silently dropping it);
+ * the runtime spec carries only proxy-safe values (name, namespace, version,
+ * endpoint, apiKeySecret coordinates).
+ *
+ * This is deliberately NOT the clickstack chart — the gateway collector ships
+ * with `clickstackBootstrap`; these are the per-cluster edge collectors.
+ *
+ * @example
+ * ```typescript
+ * const factory = clickstackK8sTelemetry.factory('kro', {
+ *   namespace: 'clickstack-telemetry',
+ * });
+ *
+ * await factory.deploy({
+ *   name: 'clickstack-telemetry',
+ *   apiKeySecret: { name: 'hyperdx-secret' },
+ *   endpoint: stack.status.gateway.otlpHttpEndpoint,
+ * });
+ * ```
+ */
+import { type ClickStackK8sTelemetryBuildOptions } from '../types.js';
+/**
+ * Construct a k8s telemetry composition. Build-time options bake static raw
+ * chart values per collector instance; everything per-instance stays in the
+ * runtime spec.
+ */
+export declare function makeClickstackK8sTelemetry(options?: ClickStackK8sTelemetryBuildOptions): import("../../../index.js").CallableComposition<{
+    name: string;
+    apiKeySecret: {
+        name: string;
+        key?: string;
+    };
+    namespace?: string;
+    version?: string;
+    endpoint?: string;
+}, {
+    ready: boolean;
+    phase: "Ready" | "Installing";
+}>;
+/** Composition type for the k8s telemetry pair. */
+export type ClickStackK8sTelemetryComposition = ReturnType<typeof makeClickstackK8sTelemetry>;
+/**
+ * The default k8s telemetry composition (no build-time value overrides).
+ * Use `makeClickstackK8sTelemetry(...)` to bake per-instance raw chart values.
+ */
+export declare const clickstackK8sTelemetry: import("../../../index.js").CallableComposition<{
+    name: string;
+    apiKeySecret: {
+        name: string;
+        key?: string;
+    };
+    namespace?: string;
+    version?: string;
+    endpoint?: string;
+}, {
+    ready: boolean;
+    phase: "Ready" | "Installing";
+}>;
+//# sourceMappingURL=k8s-telemetry.d.ts.map

package/dist/factories/clickstack/compositions/k8s-telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"k8s-telemetry.d.ts","sourceRoot":"","sources":["../../../../src/factories/clickstack/compositions/k8s-telemetry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAcH,OAAO,EACL,KAAK,kCAAkC,EAIxC,MAAM,aAAa,CAAC;AAOrB;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,GAAE,kCAAuC;;;;;;;;;;;;GAoF1F;AAED,mDAAmD;AACnD,MAAM,MAAM,iCAAiC,GAAG,UAAU,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9F;;;GAGG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;EAA+B,CAAC"}

package/dist/factories/clickstack/compositions/k8s-telemetry.js

@@ -0,0 +1,134 @@
+/**
+ * ClickStack Kubernetes Telemetry Composition.
+ *
+ * The documented ClickStack pattern for collecting cluster telemetry
+ * (https://clickhouse.com/docs/use-cases/observability/clickstack/ingesting-data/kubernetes):
+ * TWO instances of the STOCK `opentelemetry-collector` chart from
+ * https://open-telemetry.github.io/opentelemetry-helm-charts —
+ *
+ * 1. A DAEMONSET instance on every node: presets `logsCollection`,
+ *    `hostMetrics`, `kubernetesAttributes`, `kubeletMetrics` (+ the
+ *    docs-recommended kubeletstats utilization metrics).
+ * 2. A DEPLOYMENT instance (single replica): presets `kubernetesAttributes`,
+ *    `kubernetesEvents`, `clusterMetrics`.
+ *
+ * Both export `otlphttp` to the ClickStack gateway collector (default: the
+ * in-cluster `clickstack-otel-collector` Service on 4318 — prefer wiring
+ * `stack.status.gateway.otlpHttpEndpoint` from the bootstrap's status
+ * contract) authenticated with an `authorization: <HYPERDX_API_KEY>` header.
+ * The key is delivered via a `secretKeyRef` env var and referenced through
+ * OTel `${env:…}` config expansion, so the key value never lands in Helm
+ * values.
+ *
+ * BUILD-TIME vs RUNTIME: per-instance raw chart values are BUILD-TIME options
+ * on `makeClickstackK8sTelemetry(...)` (a free-form values tree cannot be
+ * represented per-instance in a KRO schema without silently dropping it);
+ * the runtime spec carries only proxy-safe values (name, namespace, version,
+ * endpoint, apiKeySecret coordinates).
+ *
+ * This is deliberately NOT the clickstack chart — the gateway collector ships
+ * with `clickstackBootstrap`; these are the per-cluster edge collectors.
+ *
+ * @example
+ * ```typescript
+ * const factory = clickstackK8sTelemetry.factory('kro', {
+ *   namespace: 'clickstack-telemetry',
+ * });
+ *
+ * await factory.deploy({
+ *   name: 'clickstack-telemetry',
+ *   apiKeySecret: { name: 'hyperdx-secret' },
+ *   endpoint: stack.status.gateway.otlpHttpEndpoint,
+ * });
+ * ```
+ */
+import { kubernetesComposition } from '../../../core/composition/imperative.js';
+import { DEFAULT_FLUX_NAMESPACE } from '../../../core/config/defaults.js';
+import { Cel } from '../../../core/references/cel.js';
+import { singleton } from '../../../core/singleton/singleton.js';
+import { containsKubernetesRefs, isKubernetesRef } from '../../../utils/type-guards.js';
+import { namespace } from '../../kubernetes/core/namespace.js';
+import { DEFAULT_OTEL_COLLECTOR_VERSION, DEFAULT_OTEL_REPO_NAME, DEFAULT_OTEL_REPO_URL, otelCollectorHelmRelease, } from '../resources/helm.js';
+import { ClickStackK8sTelemetryConfigSchema, ClickStackK8sTelemetryStatusSchema, } from '../types.js';
+import { DEFAULT_CLICKSTACK_TELEMETRY_NAMESPACE, mapK8sTelemetryConfigToHelmValues, } from '../utils/helm-values-mapper.js';
+import { otelHelmRepositoryBootstrap } from './otel-helm-repository.js';
+/**
+ * Construct a k8s telemetry composition. Build-time options bake static raw
+ * chart values per collector instance; everything per-instance stays in the
+ * runtime spec.
+ */
+export function makeClickstackK8sTelemetry(options = {}) {
+    // Build-time options must be CONCRETE (see makeClickstackBootstrap): per-instance values belong
+    // in the runtime spec.
+    if (containsKubernetesRefs(options)) {
+        throw new Error('makeClickstackK8sTelemetry: build-time options contain a schema/resource reference. ' +
+            'Move per-instance values into the runtime spec instead.');
+    }
+    return kubernetesComposition({
+        name: options.name ?? 'clickstack-k8s-telemetry',
+        kind: options.kind ?? 'ClickStackK8sTelemetry',
+        spec: ClickStackK8sTelemetryConfigSchema,
+        status: ClickStackK8sTelemetryStatusSchema,
+    }, (spec) => {
+        const resolvedNamespace = isKubernetesRef(spec.namespace)
+            ? Cel.default(spec.namespace, DEFAULT_CLICKSTACK_TELEMETRY_NAMESPACE)
+            : (spec.namespace ?? DEFAULT_CLICKSTACK_TELEMETRY_NAMESPACE);
+        const resolvedVersion = isKubernetesRef(spec.version)
+            ? Cel.default(spec.version, DEFAULT_OTEL_COLLECTOR_VERSION)
+            : (spec.version ?? DEFAULT_OTEL_COLLECTOR_VERSION);
+        const { daemonset: daemonsetValues, deployment: deploymentValues } = mapK8sTelemetryConfigToHelmValues(spec, {
+            ...(options.daemonset !== undefined && { daemonset: options.daemonset }),
+            ...(options.deployment !== undefined && { deployment: options.deployment }),
+        });
+        const _telemetryNamespace = namespace({
+            metadata: {
+                name: resolvedNamespace,
+                labels: {
+                    'app.kubernetes.io/name': 'clickstack-k8s-telemetry',
+                    'app.kubernetes.io/instance': spec.name,
+                    'app.kubernetes.io/managed-by': 'typekro',
+                },
+            },
+            id: 'clickstackTelemetryNamespace',
+        });
+        // Shared cluster-level OTel chart repository singleton (ApplySet
+        // ownership rationale documented on otelHelmRepositoryBootstrap).
+        const _otelHelmRepository = singleton(otelHelmRepositoryBootstrap, {
+            id: 'opentelemetry-helm-repository',
+            spec: {
+                name: DEFAULT_OTEL_REPO_NAME,
+                namespace: DEFAULT_FLUX_NAMESPACE,
+                url: DEFAULT_OTEL_REPO_URL,
+            },
+        });
+        // Template-literal names work in both modes: concrete strings in direct
+        // mode, marker tokens rewritten to CEL in KRO mode (searxng precedent).
+        const _daemonsetRelease = otelCollectorHelmRelease({
+            name: `${spec.name}-daemonset`,
+            namespace: resolvedNamespace,
+            version: resolvedVersion,
+            values: daemonsetValues,
+            id: 'clickstackTelemetryDaemonset',
+        });
+        const _deploymentRelease = otelCollectorHelmRelease({
+            name: `${spec.name}-deployment`,
+            namespace: resolvedNamespace,
+            version: resolvedVersion,
+            values: deploymentValues,
+            id: 'clickstackTelemetryDeployment',
+        });
+        return {
+            ready: Cel.expr('clickstackTelemetryDaemonset.status.conditions.exists(c, c.type == "Ready" && c.status == "True") && ' +
+                'clickstackTelemetryDeployment.status.conditions.exists(c, c.type == "Ready" && c.status == "True")'),
+            phase: Cel.expr('clickstackTelemetryDaemonset.status.conditions.exists(c, c.type == "Ready" && c.status == "True") && ' +
+                'clickstackTelemetryDeployment.status.conditions.exists(c, c.type == "Ready" && c.status == "True") ' +
+                '? "Ready" : "Installing"'),
+        };
+    });
+}
+/**
+ * The default k8s telemetry composition (no build-time value overrides).
+ * Use `makeClickstackK8sTelemetry(...)` to bake per-instance raw chart values.
+ */
+export const clickstackK8sTelemetry = makeClickstackK8sTelemetry();
+//# sourceMappingURL=k8s-telemetry.js.map

package/dist/factories/clickstack/compositions/k8s-telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"k8s-telemetry.js","sourceRoot":"","sources":["../../../../src/factories/clickstack/compositions/k8s-telemetry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,GAAG,EAAE,MAAM,iCAAiC,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,sCAAsC,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACxF,OAAO,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAC/D,OAAO,EACL,8BAA8B,EAC9B,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAGL,kCAAkC,EAClC,kCAAkC,GACnC,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,sCAAsC,EACtC,iCAAiC,GAClC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAExE;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,UAA8C,EAAE;IACzF,gGAAgG;IAChG,uBAAuB;IACvB,IAAI,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,sFAAsF;YACpF,yDAAyD,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO,qBAAqB,CAC1B;QACE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,0BAA0B;QAChD,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,wBAAwB;QAC9C,IAAI,EAAE,kCAAkC;QACxC,MAAM,EAAE,kCAAkC;KAC3C,EACD,CAAC,IAAkC,EAAE,EAAE;QACrC,MAAM,iBAAiB,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC;YACvD,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,sCAAsC,CAAC;YACrE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,sCAAsC,CAAC,CAAC;QAC/D,MAAM,eAAe,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;YACnD,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,8BAA8B,CAAC;YAC3D,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,8BAA8B,CAAC,CAAC;QAErD,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,UAAU,EAAE,gBAAgB,EAAE,GAChE,iCAAiC,CAAC,IAAI,EAAE;YACtC,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;YACxE,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;SAC5E,CAAC,CAAC;QAEL,MAAM,mBAAmB,GAAG,SAAS,CAAC;YACpC,QAAQ,EAAE;gBACR,IAAI,EAAE,iBAAiB;gBACvB,MAAM,EAAE;oBACN,wBAAwB,EAAE,0BAA0B;oBACpD,4BAA4B,EAAE,IAAI,CAAC,IAAI;oBACvC,8BAA8B,EAAE,SAAS;iBAC1C;aACF;YACD,EAAE,EAAE,8BAA8B;SACnC,CAAC,CAAC;QAEH,iEAAiE;QACjE,kEAAkE;QAClE,MAAM,mBAAmB,GAAG,SAAS,CAAC,2BAA2B,EAAE;YACjE,EAAE,EAAE,+BAA+B;YACnC,IAAI,EAAE;gBACJ,IAAI,EAAE,sBAAsB;gBAC5B,SAAS,EAAE,sBAAsB;gBACjC,GAAG,EAAE,qBAAqB;aAC3B;SACF,CAAC,CAAC;QAEH,wEAAwE;QACxE,wEAAwE;QACxE,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;YACjD,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,YAAY;YAC9B,SAAS,EAAE,iBAAiB;YAC5B,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,eAAe;YACvB,EAAE,EAAE,8BAA8B;SACnC,CAAC,CAAC;QAEH,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;YAClD,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,aAAa;YAC/B,SAAS,EAAE,iBAAiB;YAC5B,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,gBAAgB;YACxB,EAAE,EAAE,+BAA+B;SACpC,CAAC,CAAC;QAEH,OAAO;YACL,KAAK,EAAE,GAAG,CAAC,IAAI,CACb,uGAAuG;gBACrG,oGAAoG,CACvG;YACD,KAAK,EAAE,GAAG,CAAC,IAAI,CACb,uGAAuG;gBACrG,qGAAqG;gBACrG,0BAA0B,CAC7B;SACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC;AAKD;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,0BAA0B,EAAE,CAAC"}

package/dist/factories/clickstack/compositions/otel-helm-repository.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Shared OpenTelemetry HelmRepository singleton.
+ *
+ * The official OpenTelemetry chart repository
+ * (https://open-telemetry.github.io/opentelemetry-helm-charts) is a single
+ * cluster-level Flux source shared by every `clickstackK8sTelemetry` instance
+ * (and any other OTel chart consumer). Owned via `singleton(...)` for the
+ * same ApplySet-ownership reason documented on
+ * `clickstackHelmRepositoryBootstrap`.
+ */
+export declare const otelHelmRepositoryBootstrap: import("../../../index.js").CallableComposition<{
+    name: string;
+    namespace: string;
+    url: string;
+}, {
+    ready: boolean;
+}>;
+//# sourceMappingURL=otel-helm-repository.d.ts.map

package/dist/factories/clickstack/compositions/otel-helm-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otel-helm-repository.d.ts","sourceRoot":"","sources":["../../../../src/factories/clickstack/compositions/otel-helm-repository.ts"],"names":[],"mappings":"AAQA;;;;;;;;;GASG;AACH,eAAO,MAAM,2BAA2B;;;;;;EAsBvC,CAAC"}

package/dist/factories/clickstack/compositions/otel-helm-repository.js

@@ -0,0 +1,31 @@
+import { kubernetesComposition } from '../../../core/composition/imperative.js';
+import { Cel } from '../../../core/references/cel.js';
+import { otelHelmRepository } from '../resources/helm.js';
+import { OtelHelmRepositorySingletonSpecSchema, OtelHelmRepositorySingletonStatusSchema, } from '../types.js';
+/**
+ * Shared OpenTelemetry HelmRepository singleton.
+ *
+ * The official OpenTelemetry chart repository
+ * (https://open-telemetry.github.io/opentelemetry-helm-charts) is a single
+ * cluster-level Flux source shared by every `clickstackK8sTelemetry` instance
+ * (and any other OTel chart consumer). Owned via `singleton(...)` for the
+ * same ApplySet-ownership reason documented on
+ * `clickstackHelmRepositoryBootstrap`.
+ */
+export const otelHelmRepositoryBootstrap = kubernetesComposition({
+    name: 'opentelemetry-helm-repository',
+    kind: 'OpenTelemetryHelmRepository',
+    spec: OtelHelmRepositorySingletonSpecSchema,
+    status: OtelHelmRepositorySingletonStatusSchema,
+}, (spec) => {
+    const repository = otelHelmRepository({
+        name: spec.name,
+        namespace: spec.namespace,
+        url: spec.url,
+        id: 'repository',
+    });
+    return {
+        ready: Cel.expr(repository.status.conditions, '.exists(c, c.type == "Ready" && c.status == "True")'),
+    };
+});
+//# sourceMappingURL=otel-helm-repository.js.map