typekro 0.27.0 → 0.28.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (211) hide show
  1. package/dist/.tsbuildinfo +1 -1
  2. package/dist/core/containers/build.d.ts +2 -46
  3. package/dist/core/containers/build.d.ts.map +1 -1
  4. package/dist/core/containers/build.js +219 -134
  5. package/dist/core/containers/build.js.map +1 -1
  6. package/dist/core/containers/errors.d.ts +4 -0
  7. package/dist/core/containers/errors.d.ts.map +1 -1
  8. package/dist/core/containers/errors.js +14 -1
  9. package/dist/core/containers/errors.js.map +1 -1
  10. package/dist/core/containers/exec.d.ts +6 -23
  11. package/dist/core/containers/exec.d.ts.map +1 -1
  12. package/dist/core/containers/exec.js +94 -78
  13. package/dist/core/containers/exec.js.map +1 -1
  14. package/dist/core/containers/image.d.ts +11 -7
  15. package/dist/core/containers/image.d.ts.map +1 -1
  16. package/dist/core/containers/image.js +102 -13
  17. package/dist/core/containers/image.js.map +1 -1
  18. package/dist/core/containers/index.d.ts +5 -1
  19. package/dist/core/containers/index.d.ts.map +1 -1
  20. package/dist/core/containers/index.js +3 -0
  21. package/dist/core/containers/index.js.map +1 -1
  22. package/dist/core/containers/registries/credentials.d.ts +30 -0
  23. package/dist/core/containers/registries/credentials.d.ts.map +1 -0
  24. package/dist/core/containers/registries/credentials.js +87 -0
  25. package/dist/core/containers/registries/credentials.js.map +1 -0
  26. package/dist/core/containers/registries/docker-session.d.ts +14 -0
  27. package/dist/core/containers/registries/docker-session.d.ts.map +1 -0
  28. package/dist/core/containers/registries/docker-session.js +164 -0
  29. package/dist/core/containers/registries/docker-session.js.map +1 -0
  30. package/dist/core/containers/registries/ecr.d.ts +2 -3
  31. package/dist/core/containers/registries/ecr.d.ts.map +1 -1
  32. package/dist/core/containers/registries/ecr.js +13 -22
  33. package/dist/core/containers/registries/ecr.js.map +1 -1
  34. package/dist/core/containers/registries/harbor.d.ts +7 -0
  35. package/dist/core/containers/registries/harbor.d.ts.map +1 -0
  36. package/dist/core/containers/registries/harbor.js +9 -0
  37. package/dist/core/containers/registries/harbor.js.map +1 -0
  38. package/dist/core/containers/registries/index.d.ts.map +1 -1
  39. package/dist/core/containers/registries/index.js +5 -0
  40. package/dist/core/containers/registries/index.js.map +1 -1
  41. package/dist/core/containers/registries/oci.d.ts +13 -0
  42. package/dist/core/containers/registries/oci.d.ts.map +1 -0
  43. package/dist/core/containers/registries/oci.js +68 -0
  44. package/dist/core/containers/registries/oci.js.map +1 -0
  45. package/dist/core/containers/registries/orbstack.d.ts +2 -3
  46. package/dist/core/containers/registries/orbstack.d.ts.map +1 -1
  47. package/dist/core/containers/registries/orbstack.js +8 -8
  48. package/dist/core/containers/registries/orbstack.js.map +1 -1
  49. package/dist/core/containers/registries/types.d.ts +75 -49
  50. package/dist/core/containers/registries/types.d.ts.map +1 -1
  51. package/dist/core/containers/registries/types.js +1 -9
  52. package/dist/core/containers/registries/types.js.map +1 -1
  53. package/dist/core/deployment/direct-factory.d.ts.map +1 -1
  54. package/dist/core/deployment/direct-factory.js +15 -8
  55. package/dist/core/deployment/direct-factory.js.map +1 -1
  56. package/dist/core/deployment/engine.d.ts.map +1 -1
  57. package/dist/core/deployment/engine.js +46 -5
  58. package/dist/core/deployment/engine.js.map +1 -1
  59. package/dist/core/deployment/kro-factory.d.ts +7 -7
  60. package/dist/core/deployment/kro-factory.d.ts.map +1 -1
  61. package/dist/core/deployment/kro-factory.js +148 -60
  62. package/dist/core/deployment/kro-factory.js.map +1 -1
  63. package/dist/core/deployment/kro-instance-safety.d.ts +7 -0
  64. package/dist/core/deployment/kro-instance-safety.d.ts.map +1 -1
  65. package/dist/core/deployment/kro-instance-safety.js +15 -0
  66. package/dist/core/deployment/kro-instance-safety.js.map +1 -1
  67. package/dist/core/deployment/kro-namespace-teardown.d.ts +7 -5
  68. package/dist/core/deployment/kro-namespace-teardown.d.ts.map +1 -1
  69. package/dist/core/deployment/kro-namespace-teardown.js +29 -10
  70. package/dist/core/deployment/kro-namespace-teardown.js.map +1 -1
  71. package/dist/core/deployment/kro-readiness.d.ts +1 -0
  72. package/dist/core/deployment/kro-readiness.d.ts.map +1 -1
  73. package/dist/core/deployment/kro-readiness.js +22 -1
  74. package/dist/core/deployment/kro-readiness.js.map +1 -1
  75. package/dist/core/deployment/rollback-manager.d.ts +13 -0
  76. package/dist/core/deployment/rollback-manager.d.ts.map +1 -1
  77. package/dist/core/deployment/rollback-manager.js +8 -0
  78. package/dist/core/deployment/rollback-manager.js.map +1 -1
  79. package/dist/core/serialization/core.js +3 -1
  80. package/dist/core/serialization/core.js.map +1 -1
  81. package/dist/core/serialization/schema.d.ts +2 -2
  82. package/dist/core/serialization/schema.d.ts.map +1 -1
  83. package/dist/core/serialization/schema.js +57 -4
  84. package/dist/core/serialization/schema.js.map +1 -1
  85. package/dist/core/types/serialization.d.ts +9 -0
  86. package/dist/core/types/serialization.d.ts.map +1 -1
  87. package/dist/factories/apisix/types.js +11 -11
  88. package/dist/factories/apisix/types.js.map +1 -1
  89. package/dist/factories/caddy/types.js +2 -2
  90. package/dist/factories/caddy/types.js.map +1 -1
  91. package/dist/factories/cert-manager/types.js +6 -6
  92. package/dist/factories/cert-manager/types.js.map +1 -1
  93. package/dist/factories/cilium/compositions/cilium-bootstrap.js +6 -6
  94. package/dist/factories/cilium/compositions/cilium-bootstrap.js.map +1 -1
  95. package/dist/factories/clickhouse/compositions/clickhouse-cluster.js +1 -1
  96. package/dist/factories/clickhouse/compositions/clickhouse-cluster.js.map +1 -1
  97. package/dist/factories/clickhouse/types.js +8 -8
  98. package/dist/factories/clickhouse/types.js.map +1 -1
  99. package/dist/factories/clickstack/types.js +5 -5
  100. package/dist/factories/clickstack/types.js.map +1 -1
  101. package/dist/factories/cnpg/types.js +6 -6
  102. package/dist/factories/cnpg/types.js.map +1 -1
  103. package/dist/factories/dagster/types.js +14 -14
  104. package/dist/factories/dagster/types.js.map +1 -1
  105. package/dist/factories/external-dns/types.js +3 -3
  106. package/dist/factories/external-dns/types.js.map +1 -1
  107. package/dist/factories/harbor/compositions/harbor-installation.d.ts +610 -0
  108. package/dist/factories/harbor/compositions/harbor-installation.d.ts.map +1 -0
  109. package/dist/factories/harbor/compositions/harbor-installation.js +348 -0
  110. package/dist/factories/harbor/compositions/harbor-installation.js.map +1 -0
  111. package/dist/factories/harbor/compositions/index.d.ts +2 -0
  112. package/dist/factories/harbor/compositions/index.d.ts.map +1 -0
  113. package/dist/factories/harbor/compositions/index.js +2 -0
  114. package/dist/factories/harbor/compositions/index.js.map +1 -0
  115. package/dist/factories/harbor/index.d.ts +7 -0
  116. package/dist/factories/harbor/index.d.ts.map +1 -0
  117. package/dist/factories/harbor/index.js +7 -0
  118. package/dist/factories/harbor/index.js.map +1 -0
  119. package/dist/factories/harbor/provider/harbor-api.d.ts +123 -0
  120. package/dist/factories/harbor/provider/harbor-api.d.ts.map +1 -0
  121. package/dist/factories/harbor/provider/harbor-api.js +595 -0
  122. package/dist/factories/harbor/provider/harbor-api.js.map +1 -0
  123. package/dist/factories/harbor/provider/index.d.ts +4 -0
  124. package/dist/factories/harbor/provider/index.d.ts.map +1 -0
  125. package/dist/factories/harbor/provider/index.js +4 -0
  126. package/dist/factories/harbor/provider/index.js.map +1 -0
  127. package/dist/factories/harbor/provider/kubernetes-secret-store.d.ts +12 -0
  128. package/dist/factories/harbor/provider/kubernetes-secret-store.d.ts.map +1 -0
  129. package/dist/factories/harbor/provider/kubernetes-secret-store.js +81 -0
  130. package/dist/factories/harbor/provider/kubernetes-secret-store.js.map +1 -0
  131. package/dist/factories/harbor/provider/rook-s3-binding.d.ts +30 -0
  132. package/dist/factories/harbor/provider/rook-s3-binding.d.ts.map +1 -0
  133. package/dist/factories/harbor/provider/rook-s3-binding.js +74 -0
  134. package/dist/factories/harbor/provider/rook-s3-binding.js.map +1 -0
  135. package/dist/factories/harbor/resources/helm.d.ts +12 -0
  136. package/dist/factories/harbor/resources/helm.d.ts.map +1 -0
  137. package/dist/factories/harbor/resources/helm.js +46 -0
  138. package/dist/factories/harbor/resources/helm.js.map +1 -0
  139. package/dist/factories/harbor/resources/index.d.ts +2 -0
  140. package/dist/factories/harbor/resources/index.d.ts.map +1 -0
  141. package/dist/factories/harbor/resources/index.js +2 -0
  142. package/dist/factories/harbor/resources/index.js.map +1 -0
  143. package/dist/factories/harbor/types.d.ts +319 -0
  144. package/dist/factories/harbor/types.d.ts.map +1 -0
  145. package/dist/factories/harbor/types.js +252 -0
  146. package/dist/factories/harbor/types.js.map +1 -0
  147. package/dist/factories/harbor/utils/helm-values-mapper.d.ts +8 -0
  148. package/dist/factories/harbor/utils/helm-values-mapper.d.ts.map +1 -0
  149. package/dist/factories/harbor/utils/helm-values-mapper.js +322 -0
  150. package/dist/factories/harbor/utils/helm-values-mapper.js.map +1 -0
  151. package/dist/factories/harbor/utils/index.d.ts +2 -0
  152. package/dist/factories/harbor/utils/index.d.ts.map +1 -0
  153. package/dist/factories/harbor/utils/index.js +2 -0
  154. package/dist/factories/harbor/utils/index.js.map +1 -0
  155. package/dist/factories/helm/helm-release.d.ts +10 -0
  156. package/dist/factories/helm/helm-release.d.ts.map +1 -1
  157. package/dist/factories/helm/helm-release.js +30 -2
  158. package/dist/factories/helm/helm-release.js.map +1 -1
  159. package/dist/factories/helm/readiness-evaluators.d.ts.map +1 -1
  160. package/dist/factories/helm/readiness-evaluators.js +26 -1
  161. package/dist/factories/helm/readiness-evaluators.js.map +1 -1
  162. package/dist/factories/helm/types.d.ts +5 -0
  163. package/dist/factories/helm/types.d.ts.map +1 -1
  164. package/dist/factories/index.d.ts +1 -0
  165. package/dist/factories/index.d.ts.map +1 -1
  166. package/dist/factories/index.js +4 -0
  167. package/dist/factories/index.js.map +1 -1
  168. package/dist/factories/inngest/types.js +8 -8
  169. package/dist/factories/inngest/types.js.map +1 -1
  170. package/dist/factories/kubernetes/networking/network-policy.d.ts.map +1 -1
  171. package/dist/factories/kubernetes/networking/network-policy.js +34 -1
  172. package/dist/factories/kubernetes/networking/network-policy.js.map +1 -1
  173. package/dist/factories/ory/types.js +40 -40
  174. package/dist/factories/ory/types.js.map +1 -1
  175. package/dist/factories/rook/compositions/index.d.ts +1 -0
  176. package/dist/factories/rook/compositions/index.d.ts.map +1 -1
  177. package/dist/factories/rook/compositions/index.js +1 -0
  178. package/dist/factories/rook/compositions/index.js.map +1 -1
  179. package/dist/factories/rook/compositions/rook-ceph-operator-installation.d.ts +2 -0
  180. package/dist/factories/rook/compositions/rook-ceph-operator-installation.d.ts.map +1 -1
  181. package/dist/factories/rook/compositions/rook-ceph-operator-installation.js +17 -0
  182. package/dist/factories/rook/compositions/rook-ceph-operator-installation.js.map +1 -1
  183. package/dist/factories/rook/compositions/rook-ceph-platform.d.ts +181 -0
  184. package/dist/factories/rook/compositions/rook-ceph-platform.d.ts.map +1 -0
  185. package/dist/factories/rook/compositions/rook-ceph-platform.js +388 -0
  186. package/dist/factories/rook/compositions/rook-ceph-platform.js.map +1 -0
  187. package/dist/factories/rook/resources/bucket-storage-class.d.ts.map +1 -1
  188. package/dist/factories/rook/resources/bucket-storage-class.js +4 -1
  189. package/dist/factories/rook/resources/bucket-storage-class.js.map +1 -1
  190. package/dist/factories/rook/resources/ceph-object-store.d.ts.map +1 -1
  191. package/dist/factories/rook/resources/ceph-object-store.js +2 -0
  192. package/dist/factories/rook/resources/ceph-object-store.js.map +1 -1
  193. package/dist/factories/rook/resources/helm.d.ts +4 -0
  194. package/dist/factories/rook/resources/helm.d.ts.map +1 -1
  195. package/dist/factories/rook/resources/helm.js +22 -0
  196. package/dist/factories/rook/resources/helm.js.map +1 -1
  197. package/dist/factories/rook/types.d.ts +180 -1
  198. package/dist/factories/rook/types.d.ts.map +1 -1
  199. package/dist/factories/rook/types.js +100 -9
  200. package/dist/factories/rook/types.js.map +1 -1
  201. package/dist/factories/rook/utils/helm-values-mapper.d.ts +34 -1
  202. package/dist/factories/rook/utils/helm-values-mapper.d.ts.map +1 -1
  203. package/dist/factories/rook/utils/helm-values-mapper.js +207 -0
  204. package/dist/factories/rook/utils/helm-values-mapper.js.map +1 -1
  205. package/dist/factories/searxng/types.js +2 -2
  206. package/dist/factories/searxng/types.js.map +1 -1
  207. package/dist/factories/valkey/types.js +4 -4
  208. package/dist/factories/valkey/types.js.map +1 -1
  209. package/dist/factories/webapp/types.js +8 -8
  210. package/dist/factories/webapp/types.js.map +1 -1
  211. package/package.json +6 -1
@@ -0,0 +1,348 @@
1
+ import { kubernetesComposition } from '../../../core/composition/imperative.js';
2
+ import { Cel } from '../../../core/references/cel.js';
3
+ import { observedResource } from '../../../core/references/external-refs.js';
4
+ import { isKubernetesRef } from '../../../utils/type-guards.js';
5
+ import { certificate } from '../../cert-manager/resources/certificates.js';
6
+ import { configMap } from '../../kubernetes/config/config-map.js';
7
+ import { namespace } from '../../kubernetes/core/namespace.js';
8
+ import { networkPolicy } from '../../kubernetes/networking/network-policy.js';
9
+ import { DEFAULT_HARBOR_CHART_VERSION, DEFAULT_HARBOR_REPOSITORY_NAME, DEFAULT_HARBOR_REPOSITORY_URL, DEFAULT_HARBOR_VERSION, harborHelmRelease, harborHelmRepository, } from '../resources/helm.js';
10
+ import { HarborLocalInstallationConfigSchema, HarborProductionInstallationConfigSchema, HarborInstallationStatusSchema, } from '../types.js';
11
+ import { mapHarborLocalInstallationToHelmValues, mapHarborProductionInstallationToHelmValues, } from '../utils/helm-values-mapper.js';
12
+ const DEFAULT_HARBOR_NAMESPACE = 'harbor-system';
13
+ /** Install the official Harbor chart with a bounded, explicitly non-HA development profile. */
14
+ export const harborLocalInstallation = kubernetesComposition({
15
+ name: 'harbor-local-installation',
16
+ kind: 'HarborLocalInstallation',
17
+ spec: HarborLocalInstallationConfigSchema,
18
+ status: HarborInstallationStatusSchema,
19
+ }, (spec) => createHarborInstallation(spec, 'local-development'));
20
+ /** Install the official Harbor chart with external state and HA component requirements. */
21
+ export const harborProductionInstallation = kubernetesComposition({
22
+ name: 'harbor-production-installation',
23
+ kind: 'HarborProductionInstallation',
24
+ spec: HarborProductionInstallationConfigSchema,
25
+ status: HarborInstallationStatusSchema,
26
+ }, (spec) => createHarborInstallation(spec, 'production'), {
27
+ schemaFieldValidations: {
28
+ exposure: "self.tls.enabled && self.tls.source != 'none' && (self.type != 'ingress' || (has(self.ingress) && size(self.ingress.host) > 0)) && (self.tls.source != 'secret' || (has(self.tls.secretName) && size(self.tls.secretName) > 0))",
29
+ certificate: 'size(self.secretName) > 0',
30
+ storage: 'self.secure && !self.skipVerify',
31
+ networkPolicy: 'self.enabled && size(self.ingressNamespaceLabels) > 0 && (size(self.egressNamespaceLabels) > 0 || (has(self.egressCidrs) && size(self.egressCidrs) > 0))',
32
+ },
33
+ });
34
+ function createHarborInstallation(spec, profile) {
35
+ const graphMode = isKubernetesRef(spec.name);
36
+ const targetNamespace = graphMode
37
+ ? Cel.expr('has(schema.spec.namespace) ? schema.spec.namespace : "harbor-system"')
38
+ : (spec.namespace ?? DEFAULT_HARBOR_NAMESPACE);
39
+ const ownsTargetNamespace = graphMode
40
+ ? Cel.expr('!has(schema.spec.namespaceOwnership) || schema.spec.namespaceOwnership == "owned"')
41
+ : spec.namespaceOwnership !== 'external';
42
+ const repositoryName = graphMode
43
+ ? Cel.expr('has(schema.spec.repositoryName) ? schema.spec.repositoryName : "harbor"')
44
+ : (spec.repositoryName ?? DEFAULT_HARBOR_REPOSITORY_NAME);
45
+ const repositoryNamespace = graphMode
46
+ ? Cel.expr('has(schema.spec.repositoryNamespace) ? schema.spec.repositoryNamespace : (has(schema.spec.namespace) ? schema.spec.namespace : "harbor-system")')
47
+ : (spec.repositoryNamespace ?? targetNamespace);
48
+ const repositoryUrl = graphMode
49
+ ? Cel.expr('has(schema.spec.repositoryUrl) ? schema.spec.repositoryUrl : "https://helm.goharbor.io"')
50
+ : (spec.repositoryUrl ?? DEFAULT_HARBOR_REPOSITORY_URL);
51
+ const ownsRepositoryNamespace = graphMode
52
+ ? Cel.expr('!has(schema.spec.repositoryNamespaceOwnership) || schema.spec.repositoryNamespaceOwnership == "owned"')
53
+ : spec.repositoryNamespaceOwnership !== 'external';
54
+ const chartVersion = graphMode
55
+ ? Cel.expr('has(schema.spec.chartVersion) ? schema.spec.chartVersion : "1.19.1"')
56
+ : (spec.chartVersion ?? DEFAULT_HARBOR_CHART_VERSION);
57
+ const harborVersion = graphMode
58
+ ? Cel.expr('has(schema.spec.harborVersion) ? schema.spec.harborVersion : "v2.15.1"')
59
+ : (spec.harborVersion ?? DEFAULT_HARBOR_VERSION);
60
+ const policyEnabled = graphMode
61
+ ? Cel.expr('has(schema.spec.networkPolicy) && schema.spec.networkPolicy.enabled')
62
+ : (spec.networkPolicy?.enabled ?? false);
63
+ namespace({
64
+ id: 'harborNamespace',
65
+ metadata: {
66
+ name: targetNamespace,
67
+ labels: {
68
+ 'app.kubernetes.io/name': 'harbor',
69
+ 'app.kubernetes.io/instance': spec.name,
70
+ 'app.kubernetes.io/managed-by': 'typekro',
71
+ 'typekro.dev/profile': profile,
72
+ },
73
+ },
74
+ }).withIncludeWhen(ownsTargetNamespace);
75
+ namespace({
76
+ id: 'harborRepositoryNamespace',
77
+ metadata: {
78
+ name: repositoryNamespace,
79
+ labels: {
80
+ 'app.kubernetes.io/name': 'harbor-helm-source',
81
+ 'app.kubernetes.io/managed-by': 'typekro',
82
+ },
83
+ },
84
+ }).withIncludeWhen(graphMode
85
+ ? Cel.expr('(!has(schema.spec.repositoryNamespaceOwnership) || schema.spec.repositoryNamespaceOwnership == "owned") && (has(schema.spec.repositoryNamespace) && schema.spec.repositoryNamespace != (has(schema.spec.namespace) ? schema.spec.namespace : "harbor-system"))')
86
+ : ownsRepositoryNamespace && repositoryNamespace !== targetNamespace);
87
+ const repository = harborHelmRepository({
88
+ id: 'harborRepository',
89
+ name: repositoryName,
90
+ namespace: repositoryNamespace,
91
+ url: repositoryUrl,
92
+ });
93
+ configMap({
94
+ id: 'harborMetadata',
95
+ metadata: {
96
+ name: graphMode
97
+ ? Cel.expr('schema.spec.name + "-typekro-metadata"')
98
+ : `${spec.name}-typekro-metadata`,
99
+ namespace: targetNamespace,
100
+ labels: {
101
+ 'app.kubernetes.io/name': 'harbor',
102
+ 'app.kubernetes.io/managed-by': 'typekro',
103
+ },
104
+ annotations: {
105
+ 'typekro.dev/endpoint': spec.exposure.externalUrl,
106
+ 'typekro.dev/chart-version': chartVersion,
107
+ 'typekro.dev/harbor-version': harborVersion,
108
+ 'typekro.dev/profile': profile,
109
+ 'typekro.dev/tls-enabled': graphMode
110
+ ? Cel.expr(spec.exposure.tls.enabled, ' ? "true" : "false"')
111
+ : String(spec.exposure.tls.enabled),
112
+ 'typekro.dev/network-policy-enabled': graphMode
113
+ ? Cel.expr(policyEnabled, ' ? "true" : "false"')
114
+ : String(policyEnabled),
115
+ },
116
+ },
117
+ immutable: true,
118
+ data: {},
119
+ });
120
+ certificate({
121
+ id: 'harborCertificate',
122
+ name: graphMode
123
+ ? Cel.expr('schema.spec.certificate.secretName + "-certificate"')
124
+ : `${spec.certificate?.secretName ?? spec.name}-certificate`,
125
+ namespace: targetNamespace,
126
+ spec: {
127
+ secretName: graphMode
128
+ ? Cel.expr('schema.spec.certificate.secretName')
129
+ : (spec.certificate?.secretName ?? ''),
130
+ dnsNames: [
131
+ graphMode
132
+ ? Cel.expr('schema.spec.exposure.ingress.host')
133
+ : (spec.exposure.ingress?.host ?? ''),
134
+ ],
135
+ issuerRef: {
136
+ name: graphMode
137
+ ? Cel.expr('schema.spec.certificate.issuerRef.name')
138
+ : (spec.certificate?.issuerRef.name ?? ''),
139
+ kind: graphMode
140
+ ? Cel.expr('has(schema.spec.certificate.issuerRef.kind) ? schema.spec.certificate.issuerRef.kind : "ClusterIssuer"')
141
+ : (spec.certificate?.issuerRef.kind ?? 'ClusterIssuer'),
142
+ group: graphMode
143
+ ? Cel.expr('has(schema.spec.certificate.issuerRef.group) ? schema.spec.certificate.issuerRef.group : "cert-manager.io"')
144
+ : (spec.certificate?.issuerRef.group ?? 'cert-manager.io'),
145
+ },
146
+ duration: graphMode
147
+ ? Cel.expr('has(schema.spec.certificate.duration) ? schema.spec.certificate.duration : "2160h"')
148
+ : (spec.certificate?.duration ?? '2160h'),
149
+ renewBefore: graphMode
150
+ ? Cel.expr('has(schema.spec.certificate.renewBefore) ? schema.spec.certificate.renewBefore : "720h"')
151
+ : (spec.certificate?.renewBefore ?? '720h'),
152
+ },
153
+ }).withIncludeWhen(graphMode
154
+ ? Cel.expr('schema.spec.exposure.tls.source == "cert-manager"')
155
+ : spec.exposure.tls.source === 'cert-manager');
156
+ const values = profile === 'production'
157
+ ? mapHarborProductionInstallationToHelmValues(spec)
158
+ : mapHarborLocalInstallationToHelmValues(spec);
159
+ const storageCredentials = observedResource({
160
+ apiVersion: 'v1',
161
+ kind: 'Secret',
162
+ metadata: { name: spec.storage.existingSecret, namespace: targetNamespace },
163
+ id: 'harborStorageCredentials',
164
+ });
165
+ const adminCredentials = observeHarborSecret('harborAdminCredentials', spec.adminPasswordSecret.name, targetNamespace);
166
+ const encryptionKey = observeHarborSecret('harborEncryptionKey', spec.componentSecrets.encryptionKey, targetNamespace);
167
+ const coreCredentials = observeHarborSecret('harborCoreCredentials', spec.componentSecrets.core, targetNamespace);
168
+ const jobserviceCredentials = observeHarborSecret('harborJobserviceCredentials', spec.componentSecrets.jobservice, targetNamespace);
169
+ const registryCredentials = observeHarborSecret('harborRegistryCredentials', spec.componentSecrets.registry, targetNamespace);
170
+ const registryBasicAuth = observeHarborSecret('harborRegistryBasicAuth', spec.componentSecrets.registryCredentials, targetNamespace);
171
+ const databaseCredentials = profile === 'production'
172
+ ? observedResource({
173
+ apiVersion: 'v1',
174
+ kind: 'Secret',
175
+ metadata: {
176
+ name: spec.database.existingSecret,
177
+ namespace: targetNamespace,
178
+ },
179
+ id: 'harborDatabaseCredentials',
180
+ })
181
+ : undefined;
182
+ const cacheCredentials = profile === 'production'
183
+ ? observedResource({
184
+ apiVersion: 'v1',
185
+ kind: 'Secret',
186
+ metadata: {
187
+ name: spec.cache.existingSecret,
188
+ namespace: targetNamespace,
189
+ },
190
+ id: 'harborCacheCredentials',
191
+ })
192
+ : undefined;
193
+ const defaultPolicy = networkPolicy({
194
+ id: 'harborNetworkPolicy',
195
+ metadata: {
196
+ name: graphMode ? Cel.expr('schema.spec.name + "-network"') : `${spec.name}-network`,
197
+ namespace: targetNamespace,
198
+ labels: { 'app.kubernetes.io/name': 'harbor', 'app.kubernetes.io/managed-by': 'typekro' },
199
+ },
200
+ spec: {
201
+ podSelector: { matchLabels: { release: spec.name, app: 'harbor' } },
202
+ policyTypes: ['Ingress', 'Egress'],
203
+ ingress: [{ _from: [{ podSelector: {} }] }],
204
+ egress: harborEgressRules(spec, graphMode),
205
+ },
206
+ }).withIncludeWhen(policyEnabled);
207
+ const ingressPolicy = networkPolicy({
208
+ id: 'harborIngressNetworkPolicy',
209
+ metadata: {
210
+ name: graphMode ? Cel.expr('schema.spec.name + "-ingress"') : `${spec.name}-ingress`,
211
+ namespace: targetNamespace,
212
+ labels: { 'app.kubernetes.io/name': 'harbor', 'app.kubernetes.io/managed-by': 'typekro' },
213
+ },
214
+ spec: {
215
+ podSelector: { matchLabels: { release: spec.name, app: 'harbor' } },
216
+ policyTypes: ['Ingress'],
217
+ ingress: harborIngressRules(spec, graphMode),
218
+ },
219
+ }).withIncludeWhen(policyEnabled);
220
+ const release = harborHelmRelease({
221
+ id: 'harborRelease',
222
+ name: spec.name,
223
+ namespace: targetNamespace,
224
+ version: chartVersion,
225
+ repositoryName,
226
+ repositoryNamespace,
227
+ repositoryUrl,
228
+ values,
229
+ });
230
+ release.dependsOn(repository);
231
+ // KRO must model external Secret observations explicitly so its controller
232
+ // delays the HelmRelease until they exist. Direct mode has no deployable
233
+ // graph node for an external observation; its caller prepares those Secrets
234
+ // before deploy(), and Flux readiness remains the integration check.
235
+ if (graphMode) {
236
+ release.dependsOn(storageCredentials);
237
+ release.dependsOn(adminCredentials);
238
+ release.dependsOn(encryptionKey);
239
+ release.dependsOn(coreCredentials);
240
+ release.dependsOn(jobserviceCredentials);
241
+ release.dependsOn(registryCredentials);
242
+ release.dependsOn(registryBasicAuth);
243
+ if (databaseCredentials)
244
+ release.dependsOn(databaseCredentials);
245
+ if (cacheCredentials)
246
+ release.dependsOn(cacheCredentials);
247
+ }
248
+ // Production always requires the policies, so they are safe hard
249
+ // dependencies. The local profile permits policy omission; a dependency on
250
+ // a skipped KRO child would otherwise make the HelmRelease unreconcilable.
251
+ if (profile === 'production') {
252
+ release.dependsOn(defaultPolicy);
253
+ release.dependsOn(ingressPolicy);
254
+ }
255
+ const ready = Cel.expr(release.status.conditions, '.exists(c, c.type == "Ready" && c.status == "True")');
256
+ const readyExpression = 'harborRelease.status.conditions.exists(c, c.type == "Ready" && c.status == "True")';
257
+ const failed = Cel.expr(release.status.conditions, '.exists(c, c.type == "Ready" && c.status == "False")');
258
+ return {
259
+ ready,
260
+ failed,
261
+ phase: Cel.expr('harborRelease.status.conditions.exists(c, c.type == "Ready" && c.status == "False") ? "Failed" : (harborRelease.status.conditions.exists(c, c.type == "Ready" && c.status == "True") ? "Ready" : "Installing")'),
262
+ endpoint: Cel.expr('harborMetadata.metadata.annotations["typekro.dev/endpoint"]'),
263
+ chartVersion: Cel.expr('harborMetadata.metadata.annotations["typekro.dev/chart-version"]'),
264
+ harborVersion: Cel.expr('harborMetadata.metadata.annotations["typekro.dev/harbor-version"]'),
265
+ profile: Cel.expr('harborMetadata.metadata.annotations["typekro.dev/profile"]'),
266
+ observedGeneration: Cel.expr('has(harborRelease.status.observedGeneration) ? harborRelease.status.observedGeneration : 0'),
267
+ tlsEnabled: Cel.expr('harborMetadata.metadata.annotations["typekro.dev/tls-enabled"] == "true"'),
268
+ // These fields are installation-capability readiness, not merely
269
+ // credential-presence flags. An observed Secret is a prerequisite, but it
270
+ // is not evidence that Harbor has successfully connected to the provider.
271
+ // The HelmRelease Ready condition is the chart's bounded integration
272
+ // acknowledgement, so do not report a provider ready ahead of it.
273
+ storageReady: graphMode
274
+ ? Cel.expr(`${readyExpression} && harborStorageCredentials.metadata.name != ""`)
275
+ : ready,
276
+ databaseReady: databaseCredentials
277
+ ? graphMode
278
+ ? Cel.expr(`${readyExpression} && harborDatabaseCredentials.metadata.name != ""`)
279
+ : ready
280
+ : ready,
281
+ cacheReady: cacheCredentials
282
+ ? graphMode
283
+ ? Cel.expr(`${readyExpression} && harborCacheCredentials.metadata.name != ""`)
284
+ : ready
285
+ : ready,
286
+ networkPolicyReady: graphMode
287
+ ? Cel.expr('harborMetadata.metadata.annotations["typekro.dev/network-policy-enabled"] != "true" || (harborNetworkPolicy.metadata.name != "" && harborIngressNetworkPolicy.metadata.name != "")')
288
+ : policyEnabled
289
+ ? Cel.expr('harborNetworkPolicy.metadata.name != "" && harborIngressNetworkPolicy.metadata.name != ""')
290
+ : true,
291
+ conditions: release.status.conditions,
292
+ };
293
+ }
294
+ function observeHarborSecret(id, name, namespaceName) {
295
+ return observedResource({
296
+ apiVersion: 'v1',
297
+ kind: 'Secret',
298
+ metadata: { name, namespace: namespaceName },
299
+ id,
300
+ });
301
+ }
302
+ function harborIngressRules(spec, graphMode) {
303
+ if (graphMode) {
304
+ return Cel.expr('has(schema.spec.networkPolicy.ingressNamespaceLabels) ? [{"from":[{"namespaceSelector":{"matchLabels":schema.spec.networkPolicy.ingressNamespaceLabels}}],"ports":[{"protocol":"TCP","port":8080},{"protocol":"TCP","port":8443}]}] : []');
305
+ }
306
+ const labels = spec.networkPolicy?.ingressNamespaceLabels;
307
+ return labels
308
+ ? [
309
+ {
310
+ _from: [{ namespaceSelector: { matchLabels: labels } }],
311
+ ports: [
312
+ { protocol: 'TCP', port: 8080 },
313
+ { protocol: 'TCP', port: 8443 },
314
+ ],
315
+ },
316
+ ]
317
+ : [];
318
+ }
319
+ function harborEgressRules(spec, graphMode) {
320
+ if (graphMode) {
321
+ return Cel.expr('[{"to":[{"podSelector":{}}]},{"to":[{"namespaceSelector":{"matchLabels":{"kubernetes.io/metadata.name":"kube-system"}},"podSelector":{"matchLabels":{"k8s-app":"kube-dns"}}}],"ports":[{"protocol":"UDP","port":53},{"protocol":"TCP","port":53}]}] + (has(schema.spec.networkPolicy.egressNamespaceLabels) ? schema.spec.networkPolicy.egressNamespaceLabels : []).map(labels, {"to":[{"namespaceSelector":{"matchLabels":labels}}]}) + (has(schema.spec.networkPolicy.egressCidrs) ? schema.spec.networkPolicy.egressCidrs.map(cidr, {"to":[{"ipBlock":{"cidr":cidr}}]}) : [])');
322
+ }
323
+ return [
324
+ { to: [{ podSelector: {} }] },
325
+ {
326
+ to: [
327
+ {
328
+ namespaceSelector: { matchLabels: { 'kubernetes.io/metadata.name': 'kube-system' } },
329
+ podSelector: { matchLabels: { 'k8s-app': 'kube-dns' } },
330
+ },
331
+ ],
332
+ ports: [
333
+ { protocol: 'UDP', port: 53 },
334
+ { protocol: 'TCP', port: 53 },
335
+ ],
336
+ },
337
+ ...(spec.networkPolicy?.egressNamespaceLabels ?? []).map((matchLabels) => ({
338
+ to: [{ namespaceSelector: { matchLabels } }],
339
+ })),
340
+ ...(spec.networkPolicy?.egressCidrs ?? []).map((cidr) => ({
341
+ to: [{ ipBlock: { cidr } }],
342
+ })),
343
+ ];
344
+ }
345
+ /** Explicit shared-platform lifecycle names. */
346
+ export const harborLocalPlatform = harborLocalInstallation;
347
+ export const harborProductionPlatform = harborProductionInstallation;
348
+ //# sourceMappingURL=harbor-installation.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"harbor-installation.js","sourceRoot":"","sources":["../../../../src/factories/harbor/compositions/harbor-installation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,GAAG,EAAE,MAAM,iCAAiC,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAE,MAAM,uCAAuC,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,+CAA+C,CAAC;AAC9E,OAAO,EACL,4BAA4B,EAC5B,8BAA8B,EAC9B,6BAA6B,EAC7B,sBAAsB,EACtB,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,mCAAmC,EAEnC,wCAAwC,EACxC,8BAA8B,GAC/B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,sCAAsC,EACtC,2CAA2C,GAC5C,MAAM,gCAAgC,CAAC;AAExC,MAAM,wBAAwB,GAAG,eAAe,CAAC;AAEjD,+FAA+F;AAC/F,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAC1D;IACE,IAAI,EAAE,2BAA2B;IACjC,IAAI,EAAE,yBAAyB;IAC/B,IAAI,EAAE,mCAAmC;IACzC,MAAM,EAAE,8BAA8B;CACvC,EACD,CAAC,IAAmC,EAAE,EAAE,CAAC,wBAAwB,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAC7F,CAAC;AAEF,2FAA2F;AAC3F,MAAM,CAAC,MAAM,4BAA4B,GAAG,qBAAqB,CAC/D;IACE,IAAI,EAAE,gCAAgC;IACtC,IAAI,EAAE,8BAA8B;IACpC,IAAI,EAAE,wCAAwC;IAC9C,MAAM,EAAE,8BAA8B;CACvC,EACD,CAAC,IAAwC,EAAE,EAAE,CAAC,wBAAwB,CAAC,IAAI,EAAE,YAAY,CAAC,EAC1F;IACE,sBAAsB,EAAE;QACtB,QAAQ,EACN,iOAAiO;QACnO,WAAW,EAAE,2BAA2B;QACxC,OAAO,EAAE,iCAAiC;QAC1C,aAAa,EACX,0JAA0J;KAC7J;CACF,CACF,CAAC;AAEF,SAAS,wBAAwB,CAC/B,IAAwE,EACxE,OAA2C;IAE3C,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,eAAe,GAAG,SAAS;QAC/B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAS,sEAAsE,CAAC;QAC1F,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,wBAAwB,CAAC,CAAC;IACjD,MAAM,mBAAmB,GAAG,SAAS;QACnC,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,mFAAmF,CACpF;QACH,CAAC,CAAC,IAAI,CAAC,kBAAkB,KAAK,UAAU,CAAC;IAC3C,MAAM,cAAc,GAAG,SAAS;QAC9B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAS,yEAAyE,CAAC;QAC7F,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,IAAI,8BAA8B,CAAC,CAAC;IAC5D,MAAM,mBAAmB,GAAG,SAAS;QACnC,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,iJAAiJ,CAClJ;QACH,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,IAAI,eAAe,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,SAAS;QAC7B,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,yFAAyF,CAC1F;QACH,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,IAAI,6BAA6B,CAAC,CAAC;IAC1D,MAAM,uBAAuB,GAAG,SAAS;QACvC,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,uGAAuG,CACxG;QACH,CAAC,CAAC,IAAI,CAAC,4BAA4B,KAAK,UAAU,CAAC;IACrD,MAAM,YAAY,GAAG,SAAS;QAC5B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAS,qEAAqE,CAAC;QACzF,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,4BAA4B,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,SAAS;QAC7B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAS,wEAAwE,CAAC;QAC5F,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,IAAI,sBAAsB,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,SAAS;QAC7B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAU,qEAAqE,CAAC;QAC1F,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,IAAI,KAAK,CAAC,CAAC;IAE3C,SAAS,CAAC;QACR,EAAE,EAAE,iBAAiB;QACrB,QAAQ,EAAE;YACR,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE;gBACN,wBAAwB,EAAE,QAAQ;gBAClC,4BAA4B,EAAE,IAAI,CAAC,IAAI;gBACvC,8BAA8B,EAAE,SAAS;gBACzC,qBAAqB,EAAE,OAAO;aAC/B;SACF;KACF,CAAC,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAAC;IAExC,SAAS,CAAC;QACR,EAAE,EAAE,2BAA2B;QAC/B,QAAQ,EAAE;YACR,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE;gBACN,wBAAwB,EAAE,oBAAoB;gBAC9C,8BAA8B,EAAE,SAAS;aAC1C;SACF;KACF,CAAC,CAAC,eAAe,CAChB,SAAS;QACP,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,gQAAgQ,CACjQ;QACH,CAAC,CAAC,uBAAuB,IAAI,mBAAmB,KAAK,eAAe,CACvE,CAAC;IAEF,MAAM,UAAU,GAAG,oBAAoB,CAAC;QACtC,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,cAAc;QACpB,SAAS,EAAE,mBAAmB;QAC9B,GAAG,EAAE,aAAa;KACnB,CAAC,CAAC;IAEH,SAAS,CAAC;QACR,EAAE,EAAE,gBAAgB;QACpB,QAAQ,EAAE;YACR,IAAI,EAAE,SAAS;gBACb,CAAC,CAAC,GAAG,CAAC,IAAI,CAAS,wCAAwC,CAAC;gBAC5D,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,mBAAmB;YACnC,SAAS,EAAE,eAAe;YAC1B,MAAM,EAAE;gBACN,wBAAwB,EAAE,QAAQ;gBAClC,8BAA8B,EAAE,SAAS;aAC1C;YACD,WAAW,EAAE;gBACX,sBAAsB,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;gBACjD,2BAA2B,EAAE,YAAY;gBACzC,4BAA4B,EAAE,aAAa;gBAC3C,qBAAqB,EAAE,OAAO;gBAC9B,yBAAyB,EAAE,SAAS;oBAClC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAS,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,qBAAqB,CAAC;oBACpE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;gBACrC,oCAAoC,EAAE,SAAS;oBAC7C,CAAC,CAAC,GAAG,CAAC,IAAI,CAAS,aAAa,EAAE,qBAAqB,CAAC;oBACxD,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;aAC1B;SACF;QACD,SAAS,EAAE,IAAI;QACf,IAAI,EAAE,EAAE;KACT,CAAC,CAAC;IAEH,WAAW,CAAC;QACV,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,SAAS;YACb,CAAC,CAAC,GAAG,CAAC,IAAI,CAAS,qDAAqD,CAAC;YACzE,CAAC,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,IAAI,IAAI,CAAC,IAAI,cAAc;QAC9D,SAAS,EAAE,eAAe;QAC1B,IAAI,EAAE;YACJ,UAAU,EAAE,SAAS;gBACnB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAS,oCAAoC,CAAC;gBACxD,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,IAAI,EAAE,CAAC;YACxC,QAAQ,EAAE;gBACR,SAAS;oBACP,CAAC,CAAC,GAAG,CAAC,IAAI,CAAS,mCAAmC,CAAC;oBACvD,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC;aACxC;YACD,SAAS,EAAE;gBACT,IAAI,EAAE,SAAS;oBACb,CAAC,CAAC,GAAG,CAAC,IAAI,CAAS,wCAAwC,CAAC;oBAC5D,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC;gBAC5C,IAAI,EAAE,SAAS;oBACb,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,wGAAwG,CACzG;oBACH,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,IAAI,IAAI,eAAe,CAAC;gBACzD,KAAK,EAAE,SAAS;oBACd,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,4GAA4G,CAC7G;oBACH,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,KAAK,IAAI,iBAAiB,CAAC;aAC7D;YACD,QAAQ,EAAE,SAAS;gBACjB,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,oFAAoF,CACrF;gBACH,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,IAAI,OAAO,CAAC;YAC3C,WAAW,EAAE,SAAS;gBACpB,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,yFAAyF,CAC1F;gBACH,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,IAAI,MAAM,CAAC;SAC9C;KACF,CAAC,CAAC,eAAe,CAChB,SAAS;QACP,CAAC,CAAC,GAAG,CAAC,IAAI,CAAU,mDAAmD,CAAC;QACxE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,KAAK,cAAc,CAChD,CAAC;IAEF,MAAM,MAAM,GACV,OAAO,KAAK,YAAY;QACtB,CAAC,CAAC,2CAA2C,CAAC,IAA0C,CAAC;QACzF,CAAC,CAAC,sCAAsC,CAAC,IAAqC,CAAC,CAAC;IAEpF,MAAM,kBAAkB,GAAG,gBAAgB,CAA+C;QACxF,UAAU,EAAE,IAAI;QAChB,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,SAAS,EAAE,eAAe,EAAE;QAC3E,EAAE,EAAE,0BAA0B;KAC/B,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,mBAAmB,CAC1C,wBAAwB,EACxB,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAC7B,eAAe,CAChB,CAAC;IACF,MAAM,aAAa,GAAG,mBAAmB,CACvC,qBAAqB,EACrB,IAAI,CAAC,gBAAgB,CAAC,aAAa,EACnC,eAAe,CAChB,CAAC;IACF,MAAM,eAAe,GAAG,mBAAmB,CACzC,uBAAuB,EACvB,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAC1B,eAAe,CAChB,CAAC;IACF,MAAM,qBAAqB,GAAG,mBAAmB,CAC/C,6BAA6B,EAC7B,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAChC,eAAe,CAChB,CAAC;IACF,MAAM,mBAAmB,GAAG,mBAAmB,CAC7C,2BAA2B,EAC3B,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAC9B,eAAe,CAChB,CAAC;IACF,MAAM,iBAAiB,GAAG,mBAAmB,CAC3C,yBAAyB,EACzB,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,EACzC,eAAe,CAChB,CAAC;IACF,MAAM,mBAAmB,GACvB,OAAO,KAAK,YAAY;QACtB,CAAC,CAAC,gBAAgB,CAA+C;YAC7D,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE;gBACR,IAAI,EAAG,IAA2C,CAAC,QAAQ,CAAC,cAAc;gBAC1E,SAAS,EAAE,eAAe;aAC3B;YACD,EAAE,EAAE,2BAA2B;SAChC,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,gBAAgB,GACpB,OAAO,KAAK,YAAY;QACtB,CAAC,CAAC,gBAAgB,CAA+C;YAC7D,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE;gBACR,IAAI,EAAG,IAA2C,CAAC,KAAK,CAAC,cAAc;gBACvE,SAAS,EAAE,eAAe;aAC3B;YACD,EAAE,EAAE,wBAAwB;SAC7B,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,aAAa,GAAG,aAAa,CAAC;QAClC,EAAE,EAAE,qBAAqB;QACzB,QAAQ,EAAE;YACR,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAS,+BAA+B,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,UAAU;YAC5F,SAAS,EAAE,eAAe;YAC1B,MAAM,EAAE,EAAE,wBAAwB,EAAE,QAAQ,EAAE,8BAA8B,EAAE,SAAS,EAAE;SAC1F;QACD,IAAI,EAAE;YACJ,WAAW,EAAE,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;YACnE,WAAW,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;YAClC,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;YAC3C,MAAM,EAAE,iBAAiB,CAAC,IAAI,EAAE,SAAS,CAAC;SAC3C;KACF,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;IAClC,MAAM,aAAa,GAAG,aAAa,CAAC;QAClC,EAAE,EAAE,4BAA4B;QAChC,QAAQ,EAAE;YACR,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAS,+BAA+B,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,UAAU;YAC5F,SAAS,EAAE,eAAe;YAC1B,MAAM,EAAE,EAAE,wBAAwB,EAAE,QAAQ,EAAE,8BAA8B,EAAE,SAAS,EAAE;SAC1F;QACD,IAAI,EAAE;YACJ,WAAW,EAAE,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;YACnE,WAAW,EAAE,CAAC,SAAS,CAAC;YACxB,OAAO,EAAE,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC;SAC7C;KACF,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG,iBAAiB,CAAC;QAChC,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,eAAe;QAC1B,OAAO,EAAE,YAAY;QACrB,cAAc;QACd,mBAAmB;QACnB,aAAa;QACb,MAAM;KACP,CAAC,CAAC;IACH,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC9B,2EAA2E;IAC3E,yEAAyE;IACzE,4EAA4E;IAC5E,qEAAqE;IACrE,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACtC,OAAO,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACpC,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACjC,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACnC,OAAO,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QACzC,OAAO,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QACvC,OAAO,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QACrC,IAAI,mBAAmB;YAAE,OAAO,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAChE,IAAI,gBAAgB;YAAE,OAAO,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC5D,CAAC;IACD,iEAAiE;IACjE,2EAA2E;IAC3E,2EAA2E;IAC3E,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;QAC7B,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACjC,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CACpB,OAAO,CAAC,MAAM,CAAC,UAAU,EACzB,qDAAqD,CACtD,CAAC;IACF,MAAM,eAAe,GACnB,oFAAoF,CAAC;IACvF,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CACrB,OAAO,CAAC,MAAM,CAAC,UAAU,EACzB,sDAAsD,CACvD,CAAC;IACF,OAAO;QACL,KAAK;QACL,MAAM;QACN,KAAK,EAAE,GAAG,CAAC,IAAI,CACb,gNAAgN,CACjN;QACD,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAS,6DAA6D,CAAC;QACzF,YAAY,EAAE,GAAG,CAAC,IAAI,CACpB,kEAAkE,CACnE;QACD,aAAa,EAAE,GAAG,CAAC,IAAI,CACrB,mEAAmE,CACpE;QACD,OAAO,EAAE,GAAG,CAAC,IAAI,CACf,4DAA4D,CAC7D;QACD,kBAAkB,EAAE,GAAG,CAAC,IAAI,CAC1B,4FAA4F,CAC7F;QACD,UAAU,EAAE,GAAG,CAAC,IAAI,CAClB,0EAA0E,CAC3E;QACD,iEAAiE;QACjE,0EAA0E;QAC1E,0EAA0E;QAC1E,qEAAqE;QACrE,kEAAkE;QAClE,YAAY,EAAE,SAAS;YACrB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAU,GAAG,eAAe,kDAAkD,CAAC;YACzF,CAAC,CAAC,KAAK;QACT,aAAa,EAAE,mBAAmB;YAChC,CAAC,CAAC,SAAS;gBACT,CAAC,CAAC,GAAG,CAAC,IAAI,CAAU,GAAG,eAAe,mDAAmD,CAAC;gBAC1F,CAAC,CAAC,KAAK;YACT,CAAC,CAAC,KAAK;QACT,UAAU,EAAE,gBAAgB;YAC1B,CAAC,CAAC,SAAS;gBACT,CAAC,CAAC,GAAG,CAAC,IAAI,CAAU,GAAG,eAAe,gDAAgD,CAAC;gBACvF,CAAC,CAAC,KAAK;YACT,CAAC,CAAC,KAAK;QACT,kBAAkB,EAAE,SAAS;YAC3B,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,oLAAoL,CACrL;YACH,CAAC,CAAC,aAAa;gBACb,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,2FAA2F,CAC5F;gBACH,CAAC,CAAC,IAAI;QACV,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,EAAU,EAAE,IAAY,EAAE,aAAqB;IAC1E,OAAO,gBAAgB,CAA+C;QACpE,UAAU,EAAE,IAAI;QAChB,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE;QAC5C,EAAE;KACH,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CACzB,IAAwE,EACxE,SAAkB;IAElB,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,GAAG,CAAC,IAAI,CAGb,0OAA0O,CAC3O,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,sBAAsB,CAAC;IAC1D,OAAO,MAAM;QACX,CAAC,CAAC;YACE;gBACE,KAAK,EAAE,CAAC,EAAE,iBAAiB,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC;gBACvD,KAAK,EAAE;oBACL,EAAE,QAAQ,EAAE,KAAc,EAAE,IAAI,EAAE,IAAI,EAAE;oBACxC,EAAE,QAAQ,EAAE,KAAc,EAAE,IAAI,EAAE,IAAI,EAAE;iBACzC;aACF;SACF;QACH,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAwE,EACxE,SAAkB;IAElB,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,GAAG,CAAC,IAAI,CAGb,kjBAAkjB,CACnjB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,EAAE;QAC7B;YACE,EAAE,EAAE;gBACF;oBACE,iBAAiB,EAAE,EAAE,WAAW,EAAE,EAAE,6BAA6B,EAAE,aAAa,EAAE,EAAE;oBACpF,WAAW,EAAE,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE;iBACxD;aACF;YACD,KAAK,EAAE;gBACL,EAAE,QAAQ,EAAE,KAAc,EAAE,IAAI,EAAE,EAAE,EAAE;gBACtC,EAAE,QAAQ,EAAE,KAAc,EAAE,IAAI,EAAE,EAAE,EAAE;aACvC;SACF;QACD,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,qBAAqB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACzE,EAAE,EAAE,CAAC,EAAE,iBAAiB,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC;SAC7C,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxD,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;SAC5B,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,gDAAgD;AAChD,MAAM,CAAC,MAAM,mBAAmB,GAAG,uBAAuB,CAAC;AAC3D,MAAM,CAAC,MAAM,wBAAwB,GAAG,4BAA4B,CAAC"}
@@ -0,0 +1,2 @@
1
+ export * from './harbor-installation.js';
2
+ //# sourceMappingURL=index.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/factories/harbor/compositions/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC"}
@@ -0,0 +1,2 @@
1
+ export * from './harbor-installation.js';
2
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/factories/harbor/compositions/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC"}
@@ -0,0 +1,7 @@
1
+ /** Official Harbor registry platform and API resources. */
2
+ export * from './compositions/index.js';
3
+ export * from './provider/index.js';
4
+ export * from './resources/index.js';
5
+ export * from './types.js';
6
+ export * from './utils/index.js';
7
+ //# sourceMappingURL=index.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/factories/harbor/index.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC"}
@@ -0,0 +1,7 @@
1
+ /** Official Harbor registry platform and API resources. */
2
+ export * from './compositions/index.js';
3
+ export * from './provider/index.js';
4
+ export * from './resources/index.js';
5
+ export * from './types.js';
6
+ export * from './utils/index.js';
7
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/factories/harbor/index.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC"}
@@ -0,0 +1,123 @@
1
+ import { Buffer } from 'node:buffer';
2
+ import type { OciRegistryCredentialProvider } from '../../../core/containers/registries/types.js';
3
+ import type { KubernetesClientConfig } from '../../../core/kubernetes/client-provider.js';
4
+ import { type HarborKubernetesStore } from './kubernetes-secret-store.js';
5
+ export interface HarborApiTransportRequest {
6
+ method: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
7
+ path: string;
8
+ body?: unknown | undefined;
9
+ signal?: AbortSignal | undefined;
10
+ }
11
+ export interface HarborApiTransportResponse<T = unknown> {
12
+ status: number;
13
+ body?: T | undefined;
14
+ headers: Record<string, string | string[] | undefined>;
15
+ }
16
+ export interface HarborApiTransport {
17
+ request<T = unknown>(request: HarborApiTransportRequest): Promise<HarborApiTransportResponse<T>>;
18
+ }
19
+ export interface HarborApiClientOptions {
20
+ endpoint: string;
21
+ credentialProvider: OciRegistryCredentialProvider;
22
+ ca?: string | Buffer;
23
+ rejectUnauthorized?: boolean;
24
+ /** Permit Basic authentication over plain HTTP. Development loopback only. */
25
+ allowPlainHttp?: boolean;
26
+ timeoutMs?: number;
27
+ }
28
+ export interface HarborProjectPolicy {
29
+ name: string;
30
+ public?: boolean;
31
+ storageLimitBytes?: number;
32
+ autoScan?: boolean;
33
+ autoSbomGeneration?: boolean;
34
+ /** Existing Harbor registry endpoint registration used to create a proxy-cache project. */
35
+ proxyCacheRegistryId?: number;
36
+ /** Declaratively create/update the proxy-cache registry endpoint before the project. */
37
+ proxyCache?: HarborProxyCacheRegistryPolicy;
38
+ /** Existing scanner registration UUID assigned to the project. */
39
+ scannerUuid?: string;
40
+ immutableTags?: {
41
+ repositoryPattern?: string;
42
+ tagPattern?: string;
43
+ };
44
+ retention?: {
45
+ keepMostRecent: number;
46
+ scheduleCron?: string;
47
+ repositoryPattern?: string;
48
+ tagPattern?: string;
49
+ includeUntagged?: boolean;
50
+ };
51
+ }
52
+ export interface HarborProxyCacheRegistryPolicy {
53
+ name: string;
54
+ url: string;
55
+ /** Harbor adapter type such as docker-hub, harbor, aws-ecr, or github-ghcr. */
56
+ type: string;
57
+ description?: string;
58
+ insecure?: boolean;
59
+ caCertificate?: string;
60
+ credentialProvider?: OciRegistryCredentialProvider;
61
+ }
62
+ export interface HarborRobotPolicy {
63
+ name: string;
64
+ secretName: string;
65
+ access: 'pull' | 'push';
66
+ description?: string;
67
+ durationDays?: number;
68
+ }
69
+ export interface ReconcileHarborProjectOptions {
70
+ project: HarborProjectPolicy;
71
+ robots: HarborRobotPolicy[];
72
+ secretNamespace: string;
73
+ registry: string;
74
+ kubeConfig?: KubernetesClientConfig;
75
+ store?: HarborKubernetesStore;
76
+ signal?: AbortSignal;
77
+ }
78
+ export interface ReconciledHarborProject {
79
+ project: string;
80
+ projectId: number;
81
+ robots: Array<{
82
+ name: string;
83
+ id: number;
84
+ secretName: string;
85
+ access: 'pull' | 'push';
86
+ }>;
87
+ }
88
+ export interface DeleteHarborProjectOptions {
89
+ /** Destructive confirmation; must exactly match the project argument. */
90
+ confirmProjectName: string;
91
+ /**
92
+ * Delete every repository in the confirmed project before deleting it.
93
+ * Harbor rejects non-empty project deletion; this remains opt-in because
94
+ * repository deletion is irreversible.
95
+ */
96
+ purgeRepositories?: boolean;
97
+ /** Bounded repository/project deletion convergence window. @default 60000 */
98
+ timeoutMs?: number;
99
+ signal?: AbortSignal;
100
+ /** Namespace containing robot pull/push Secrets created for this project. */
101
+ secretNamespace?: string;
102
+ /** Explicit project-owned robot Secret names to remove after Harbor accepts deletion. */
103
+ robotSecretNames?: readonly string[];
104
+ kubeConfig?: KubernetesClientConfig;
105
+ store?: HarborKubernetesStore;
106
+ }
107
+ /** Error intentionally excludes response/request bodies because robot secrets can appear there. */
108
+ export declare class HarborApiError extends Error {
109
+ readonly status: number | undefined;
110
+ readonly path: string;
111
+ constructor(message: string, status: number | undefined, path: string);
112
+ }
113
+ /** Pinned Harbor v2 API client with bounded Node HTTP transport and custom CA support. */
114
+ export declare class HarborApiClient {
115
+ readonly transport: HarborApiTransport;
116
+ constructor(options: HarborApiClientOptions | HarborApiTransport);
117
+ request<T = unknown>(request: HarborApiTransportRequest, allowedStatuses?: number[]): Promise<HarborApiTransportResponse<T>>;
118
+ }
119
+ /** Reconcile one private project, its immutable-tag policy, and purpose-scoped robot Secrets. */
120
+ export declare function reconcileHarborProject(client: HarborApiClient, options: ReconcileHarborProjectOptions): Promise<ReconciledHarborProject>;
121
+ /** Project deletion is deliberately separate and requires an exact-name confirmation. */
122
+ export declare function deleteHarborProject(client: HarborApiClient, project: string, options: DeleteHarborProjectOptions): Promise<void>;
123
+ //# sourceMappingURL=harbor-api.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"harbor-api.d.ts","sourceRoot":"","sources":["../../../../src/factories/harbor/provider/harbor-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAMrC,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAClG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,8BAA8B,CAAC;AAEtC,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC3B,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,WAAW,0BAA0B,CAAC,CAAC,GAAG,OAAO;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAC;CAClG;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,6BAA6B,CAAC;IAClD,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,8EAA8E;IAC9E,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,2FAA2F;IAC3F,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,wFAAwF;IACxF,UAAU,CAAC,EAAE,8BAA8B,CAAC;IAC5C,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE;QACd,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,SAAS,CAAC,EAAE;QACV,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,eAAe,CAAC,EAAE,OAAO,CAAC;KAC3B,CAAC;CACH;AAED,MAAM,WAAW,8BAA8B;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,6BAA6B,CAAC;CACpD;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,mBAAmB,CAAC;IAC7B,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,sBAAsB,CAAC;IACpC,KAAK,CAAC,EAAE,qBAAqB,CAAC;IAC9B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC,CAAC;CAC1F;AAED,MAAM,WAAW,0BAA0B;IACzC,yEAAyE;IACzE,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,6EAA6E;IAC7E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,yFAAyF;IACzF,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,UAAU,CAAC,EAAE,sBAAsB,CAAC;IACpC,KAAK,CAAC,EAAE,qBAAqB,CAAC;CAC/B;AAmDD,mGAAmG;AACnG,qBAAa,cAAe,SAAQ,KAAK;IAGrC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAFrB,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,IAAI,EAAE,MAAM;CAKxB;AAED,0FAA0F;AAC1F,qBAAa,eAAe;IAC1B,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;gBAE3B,OAAO,EAAE,sBAAsB,GAAG,kBAAkB;IAI1D,OAAO,CAAC,CAAC,GAAG,OAAO,EACvB,OAAO,EAAE,yBAAyB,EAClC,eAAe,GAAE,MAAM,EAAU,GAChC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC;CAW1C;AAED,iGAAiG;AACjG,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,6BAA6B,GACrC,OAAO,CAAC,uBAAuB,CAAC,CAgElC;AAED,yFAAyF;AACzF,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,IAAI,CAAC,CAmCf"}