typekro 0.27.1 → 0.28.0

package/dist/factories/harbor/types.js

@@ -0,0 +1,252 @@
+import { type } from 'arktype';
+const secretRefShape = {
+    name: 'string',
+    'key?': 'string',
+};
+const resourceRequirementsShape = {
+    'requests?': { 'cpu?': 'string', 'memory?': 'string' },
+    'limits?': { 'cpu?': 'string', 'memory?': 'string' },
+};
+const exposureShape = {
+    type: '"ingress" | "clusterIP" | "nodePort" | "loadBalancer"',
+    externalUrl: 'string',
+    tls: {
+        enabled: 'boolean',
+        source: '"auto" | "secret" | "cert-manager" | "none"',
+        'secretName?': 'string',
+    },
+    'ingress?': {
+        host: 'string',
+        'className?': 'string',
+        'annotations?': 'Record<string, string>',
+    },
+    'nodePort?': {
+        'http?': '30000 <= number.integer <= 32767',
+        'https?': '30000 <= number.integer <= 32767',
+    },
+};
+const certificateShape = {
+    secretName: 'string',
+    issuerRef: {
+        name: 'string',
+        'kind?': '"Issuer" | "ClusterIssuer"',
+        'group?': 'string',
+    },
+    'duration?': 'string',
+    'renewBefore?': 'string',
+};
+const s3StorageShape = {
+    bucket: 'string',
+    region: 'string',
+    regionEndpoint: 'string',
+    existingSecret: 'string',
+    'rootDirectory?': 'string',
+    'secure?': 'boolean',
+    'skipVerify?': 'boolean',
+    'disableRedirect?': 'boolean',
+    'caBundleSecretName?': 'string',
+};
+const externalDatabaseShape = {
+    host: 'string',
+    'port?': '1 <= number.integer <= 65535',
+    username: 'string',
+    database: 'string',
+    existingSecret: 'string',
+    'sslMode?': '"disable" | "require" | "verify-ca" | "verify-full"',
+};
+const externalCacheShape = {
+    address: 'string',
+    existingSecret: 'string',
+    'username?': 'string',
+    'tls?': {
+        enabled: 'boolean',
+        'caBundleSecretName?': 'string',
+    },
+};
+const componentSecretsShape = {
+    encryptionKey: 'string',
+    core: 'string',
+    jobservice: 'string',
+    registry: 'string',
+    registryCredentials: 'string',
+    'xsrf?': 'string',
+};
+const internalTlsShape = {
+    enabled: 'boolean',
+    'certSource?': '"auto" | "secret"',
+    'caBundleSecretName?': 'string',
+    'coreSecretName?': 'string',
+    'jobserviceSecretName?': 'string',
+    'registrySecretName?': 'string',
+    'portalSecretName?': 'string',
+    'trivySecretName?': 'string',
+};
+const networkPolicyShape = {
+    enabled: 'boolean',
+    'ingressNamespaceLabels?': 'Record<string, string>',
+    'egressNamespaceLabels?': 'Record<string, string>[]',
+    'egressCidrs?': 'string[]',
+};
+const productionNetworkPolicyShape = {
+    enabled: 'true',
+    ingressNamespaceLabels: 'Record<string, string>',
+    egressNamespaceLabels: 'Record<string, string>[]',
+    'egressCidrs?': 'string[]',
+};
+const productionExposureShape = {
+    ...exposureShape,
+    tls: {
+        enabled: 'true',
+        source: '"auto" | "secret" | "cert-manager"',
+        'secretName?': 'string',
+    },
+};
+const { 'secure?': _optionalSecure, 'skipVerify?': _optionalSkipVerify, ...productionS3StorageBaseShape } = s3StorageShape;
+const productionS3StorageShape = {
+    ...productionS3StorageBaseShape,
+    secure: 'true',
+    skipVerify: 'false',
+};
+const harborCommonShape = {
+    name: 'string',
+    'namespace?': 'string',
+    'chartVersion?': 'string',
+    'harborVersion?': 'string',
+    'repositoryName?': 'string',
+    'repositoryNamespace?': 'string',
+    'repositoryNamespaceOwnership?': '"owned" | "external"',
+    'repositoryUrl?': 'string',
+    'namespaceOwnership?': '"owned" | "external"',
+    exposure: exposureShape,
+    'certificate?': certificateShape,
+    storage: s3StorageShape,
+    adminPasswordSecret: secretRefShape,
+    componentSecrets: componentSecretsShape,
+    'internalTls?': internalTlsShape,
+    'caBundleSecretName?': 'string',
+    'pvcStorageClassName?': 'string',
+    'trivyEnabled?': 'boolean',
+    'metricsEnabled?': 'boolean',
+    'values?': 'Record<string, unknown>',
+};
+/** Local Harbor profile. Internal DB/cache are explicit development conveniences. */
+export const HarborLocalInstallationConfigSchema = type({
+    ...harborCommonShape,
+    profile: '"local-development"',
+    'database?': externalDatabaseShape,
+    'cache?': externalCacheShape,
+    'networkPolicy?': networkPolicyShape,
+}).narrow((config, ctx) => {
+    const collision = findChartOwnedSecretCollision(config);
+    return collision === undefined
+        ? true
+        : ctx.mustBe(`external Secret names distinct from chart-owned Secret ${collision}`);
+});
+const { exposure: _commonExposure, storage: _commonStorage, 'certificate?': _optionalCertificate, ...harborProductionCommonShape } = harborCommonShape;
+/** Production Harbor profile requiring external durable database and cache providers. */
+export const HarborProductionInstallationConfigSchema = type({
+    ...harborProductionCommonShape,
+    profile: '"production"',
+    exposure: productionExposureShape,
+    certificate: certificateShape,
+    storage: productionS3StorageShape,
+    database: externalDatabaseShape,
+    cache: externalCacheShape,
+    networkPolicy: productionNetworkPolicyShape,
+    replicas: {
+        core: 'number.integer >= 2',
+        portal: 'number.integer >= 2',
+        registry: 'number.integer >= 2',
+        jobservice: 'number.integer >= 2',
+        exporter: 'number.integer >= 2',
+    },
+    resources: {
+        core: resourceRequirementsShape,
+        portal: resourceRequirementsShape,
+        registry: resourceRequirementsShape,
+        jobservice: resourceRequirementsShape,
+        exporter: resourceRequirementsShape,
+    },
+}).narrow((config, ctx) => {
+    const collision = findChartOwnedSecretCollision(config);
+    return collision === undefined
+        ? true
+        : ctx.mustBe(`external Secret names distinct from chart-owned Secret ${collision}`);
+});
+export const HarborInstallationStatusSchema = type({
+    ready: 'boolean',
+    failed: 'boolean',
+    phase: '"Installing" | "Ready" | "Failed"',
+    endpoint: 'string',
+    chartVersion: 'string',
+    harborVersion: 'string',
+    profile: '"local-development" | "production"',
+    /** Flux HelmRelease generation whose integration status is projected below. */
+    observedGeneration: 'number.integer >= 0',
+    tlsEnabled: 'boolean',
+    storageReady: 'boolean',
+    databaseReady: 'boolean',
+    cacheReady: 'boolean',
+    networkPolicyReady: 'boolean',
+    conditions: type({
+        type: 'string',
+        status: 'string',
+        'reason?': 'string',
+        'message?': 'string',
+        'observedGeneration?': 'number.integer >= 0',
+    }).array(),
+});
+export const HarborHelmRepositoryConfigSchema = type({
+    'name?': 'string',
+    'namespace?': 'string',
+    'url?': 'string',
+    'interval?': 'string',
+    'id?': 'string',
+});
+export const HarborHelmReleaseConfigSchema = type({
+    name: 'string',
+    'namespace?': 'string',
+    'version?': 'string',
+    'repositoryName?': 'string',
+    'repositoryNamespace?': 'string',
+    'repositoryUrl?': 'string',
+    'values?': 'Record<string, unknown>',
+    'id?': 'string',
+});
+function findChartOwnedSecretCollision(config) {
+    const chartOwned = new Set([
+        'core',
+        'database',
+        'exporter',
+        'ingress',
+        'jobservice',
+        'nginx',
+        'registry',
+        'registryctl',
+        'trivy',
+    ].map((suffix) => `${config.name}-${suffix}`));
+    const externalNames = [
+        config.storage.existingSecret,
+        config.storage.caBundleSecretName,
+        config.adminPasswordSecret.name,
+        config.componentSecrets.encryptionKey,
+        config.componentSecrets.core,
+        config.componentSecrets.jobservice,
+        config.componentSecrets.registry,
+        config.componentSecrets.registryCredentials,
+        config.componentSecrets.xsrf,
+        config.database?.existingSecret,
+        config.cache?.existingSecret,
+        config.cache?.tls?.caBundleSecretName,
+        config.certificate?.secretName,
+        config.caBundleSecretName,
+        config.internalTls?.caBundleSecretName,
+        config.internalTls?.coreSecretName,
+        config.internalTls?.jobserviceSecretName,
+        config.internalTls?.registrySecretName,
+        config.internalTls?.portalSecretName,
+        config.internalTls?.trivySecretName,
+    ];
+    return externalNames.find((name) => name !== undefined && chartOwned.has(name));
+}
+//# sourceMappingURL=types.js.map

package/dist/factories/harbor/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/factories/harbor/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAG/B,MAAM,cAAc,GAAG;IACrB,IAAI,EAAE,QAAQ;IACd,MAAM,EAAE,QAAQ;CACR,CAAC;AAEX,MAAM,yBAAyB,GAAG;IAChC,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE;IACtD,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE;CAC5C,CAAC;AAEX,MAAM,aAAa,GAAG;IACpB,IAAI,EAAE,uDAAuD;IAC7D,WAAW,EAAE,QAAQ;IACrB,GAAG,EAAE;QACH,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,6CAA6C;QACrD,aAAa,EAAE,QAAQ;KACxB;IACD,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,YAAY,EAAE,QAAQ;QACtB,cAAc,EAAE,wBAAwB;KACzC;IACD,WAAW,EAAE;QACX,OAAO,EAAE,kCAAkC;QAC3C,QAAQ,EAAE,kCAAkC;KAC7C;CACO,CAAC;AAEX,MAAM,gBAAgB,GAAG;IACvB,UAAU,EAAE,QAAQ;IACpB,SAAS,EAAE;QACT,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,QAAQ;KACnB;IACD,WAAW,EAAE,QAAQ;IACrB,cAAc,EAAE,QAAQ;CAChB,CAAC;AAEX,MAAM,cAAc,GAAG;IACrB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,cAAc,EAAE,QAAQ;IACxB,cAAc,EAAE,QAAQ;IACxB,gBAAgB,EAAE,QAAQ;IAC1B,SAAS,EAAE,SAAS;IACpB,aAAa,EAAE,SAAS;IACxB,kBAAkB,EAAE,SAAS;IAC7B,qBAAqB,EAAE,QAAQ;CACvB,CAAC;AAEX,MAAM,qBAAqB,GAAG;IAC5B,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,8BAA8B;IACvC,QAAQ,EAAE,QAAQ;IAClB,QAAQ,EAAE,QAAQ;IAClB,cAAc,EAAE,QAAQ;IACxB,UAAU,EAAE,qDAAqD;CACzD,CAAC;AAEX,MAAM,kBAAkB,GAAG;IACzB,OAAO,EAAE,QAAQ;IACjB,cAAc,EAAE,QAAQ;IACxB,WAAW,EAAE,QAAQ;IACrB,MAAM,EAAE;QACN,OAAO,EAAE,SAAS;QAClB,qBAAqB,EAAE,QAAQ;KAChC;CACO,CAAC;AAEX,MAAM,qBAAqB,GAAG;IAC5B,aAAa,EAAE,QAAQ;IACvB,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE,QAAQ;IACpB,QAAQ,EAAE,QAAQ;IAClB,mBAAmB,EAAE,QAAQ;IAC7B,OAAO,EAAE,QAAQ;CACT,CAAC;AAEX,MAAM,gBAAgB,GAAG;IACvB,OAAO,EAAE,SAAS;IAClB,aAAa,EAAE,mBAAmB;IAClC,qBAAqB,EAAE,QAAQ;IAC/B,iBAAiB,EAAE,QAAQ;IAC3B,uBAAuB,EAAE,QAAQ;IACjC,qBAAqB,EAAE,QAAQ;IAC/B,mBAAmB,EAAE,QAAQ;IAC7B,kBAAkB,EAAE,QAAQ;CACpB,CAAC;AAEX,MAAM,kBAAkB,GAAG;IACzB,OAAO,EAAE,SAAS;IAClB,yBAAyB,EAAE,wBAAwB;IACnD,wBAAwB,EAAE,0BAA0B;IACpD,cAAc,EAAE,UAAU;CAClB,CAAC;AAEX,MAAM,4BAA4B,GAAG;IACnC,OAAO,EAAE,MAAM;IACf,sBAAsB,EAAE,wBAAwB;IAChD,qBAAqB,EAAE,0BAA0B;IACjD,cAAc,EAAE,UAAU;CAClB,CAAC;AAEX,MAAM,uBAAuB,GAAG;IAC9B,GAAG,aAAa;IAChB,GAAG,EAAE;QACH,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,oCAAoC;QAC5C,aAAa,EAAE,QAAQ;KACxB;CACO,CAAC;AAEX,MAAM,EACJ,SAAS,EAAE,eAAe,EAC1B,aAAa,EAAE,mBAAmB,EAClC,GAAG,4BAA4B,EAChC,GAAG,cAAc,CAAC;AAEnB,MAAM,wBAAwB,GAAG;IAC/B,GAAG,4BAA4B;IAC/B,MAAM,EAAE,MAAM;IACd,UAAU,EAAE,OAAO;CACX,CAAC;AAEX,MAAM,iBAAiB,GAAG;IACxB,IAAI,EAAE,QAAQ;IACd,YAAY,EAAE,QAAQ;IACtB,eAAe,EAAE,QAAQ;IACzB,gBAAgB,EAAE,QAAQ;IAC1B,iBAAiB,EAAE,QAAQ;IAC3B,sBAAsB,EAAE,QAAQ;IAChC,+BAA+B,EAAE,sBAAsB;IACvD,gBAAgB,EAAE,QAAQ;IAC1B,qBAAqB,EAAE,sBAAsB;IAC7C,QAAQ,EAAE,aAAa;IACvB,cAAc,EAAE,gBAAgB;IAChC,OAAO,EAAE,cAAc;IACvB,mBAAmB,EAAE,cAAc;IACnC,gBAAgB,EAAE,qBAAqB;IACvC,cAAc,EAAE,gBAAgB;IAChC,qBAAqB,EAAE,QAAQ;IAC/B,sBAAsB,EAAE,QAAQ;IAChC,eAAe,EAAE,SAAS;IAC1B,iBAAiB,EAAE,SAAS;IAC5B,SAAS,EAAE,yBAAyB;CAC5B,CAAC;AAEX,qFAAqF;AACrF,MAAM,CAAC,MAAM,mCAAmC,GAAG,IAAI,CAAC;IACtD,GAAG,iBAAiB;IACpB,OAAO,EAAE,qBAAqB;IAC9B,WAAW,EAAE,qBAAqB;IAClC,QAAQ,EAAE,kBAAkB;IAC5B,gBAAgB,EAAE,kBAAkB;CACrC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;IACxB,MAAM,SAAS,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAC;IACxD,OAAO,SAAS,KAAK,SAAS;QAC5B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,0DAA0D,SAAS,EAAE,CAAC,CAAC;AACxF,CAAC,CAAC,CAAC;AAGH,MAAM,EACJ,QAAQ,EAAE,eAAe,EACzB,OAAO,EAAE,cAAc,EACvB,cAAc,EAAE,oBAAoB,EACpC,GAAG,2BAA2B,EAC/B,GAAG,iBAAiB,CAAC;AAEtB,yFAAyF;AACzF,MAAM,CAAC,MAAM,wCAAwC,GAAG,IAAI,CAAC;IAC3D,GAAG,2BAA2B;IAC9B,OAAO,EAAE,cAAc;IACvB,QAAQ,EAAE,uBAAuB;IACjC,WAAW,EAAE,gBAAgB;IAC7B,OAAO,EAAE,wBAAwB;IACjC,QAAQ,EAAE,qBAAqB;IAC/B,KAAK,EAAE,kBAAkB;IACzB,aAAa,EAAE,4BAA4B;IAC3C,QAAQ,EAAE;QACR,IAAI,EAAE,qBAAqB;QAC3B,MAAM,EAAE,qBAAqB;QAC7B,QAAQ,EAAE,qBAAqB;QAC/B,UAAU,EAAE,qBAAqB;QACjC,QAAQ,EAAE,qBAAqB;KAChC;IACD,SAAS,EAAE;QACT,IAAI,EAAE,yBAAyB;QAC/B,MAAM,EAAE,yBAAyB;QACjC,QAAQ,EAAE,yBAAyB;QACnC,UAAU,EAAE,yBAAyB;QACrC,QAAQ,EAAE,yBAAyB;KACpC;CACF,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;IACxB,MAAM,SAAS,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAC;IACxD,OAAO,SAAS,KAAK,SAAS;QAC5B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,0DAA0D,SAAS,EAAE,CAAC,CAAC;AACxF,CAAC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,CAAC;IACjD,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE,SAAS;IACjB,KAAK,EAAE,mCAAmC;IAC1C,QAAQ,EAAE,QAAQ;IAClB,YAAY,EAAE,QAAQ;IACtB,aAAa,EAAE,QAAQ;IACvB,OAAO,EAAE,oCAAoC;IAC7C,+EAA+E;IAC/E,kBAAkB,EAAE,qBAAqB;IACzC,UAAU,EAAE,SAAS;IACrB,YAAY,EAAE,SAAS;IACvB,aAAa,EAAE,SAAS;IACxB,UAAU,EAAE,SAAS;IACrB,kBAAkB,EAAE,SAAS;IAC7B,UAAU,EAAE,IAAI,CAAC;QACf,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,QAAQ;QAChB,SAAS,EAAE,QAAQ;QACnB,UAAU,EAAE,QAAQ;QACpB,qBAAqB,EAAE,qBAAqB;KAC7C,CAAC,CAAC,KAAK,EAAE;CACX,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,gCAAgC,GAAG,IAAI,CAAC;IACnD,OAAO,EAAE,QAAQ;IACjB,YAAY,EAAE,QAAQ;IACtB,MAAM,EAAE,QAAQ;IAChB,WAAW,EAAE,QAAQ;IACrB,KAAK,EAAE,QAAQ;CAChB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC;IAChD,IAAI,EAAE,QAAQ;IACd,YAAY,EAAE,QAAQ;IACtB,UAAU,EAAE,QAAQ;IACpB,iBAAiB,EAAE,QAAQ;IAC3B,sBAAsB,EAAE,QAAQ;IAChC,gBAAgB,EAAE,QAAQ;IAC1B,SAAS,EAAE,yBAAyB;IACpC,KAAK,EAAE,QAAQ;CAChB,CAAC,CAAC;AAwCH,SAAS,6BAA6B,CAAC,MAA8B;IACnE,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB;QACE,MAAM;QACN,UAAU;QACV,UAAU;QACV,SAAS;QACT,YAAY;QACZ,OAAO;QACP,UAAU;QACV,aAAa;QACb,OAAO;KACR,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,EAAE,CAAC,CAC9C,CAAC;IACF,MAAM,aAAa,GAAG;QACpB,MAAM,CAAC,OAAO,CAAC,cAAc;QAC7B,MAAM,CAAC,OAAO,CAAC,kBAAkB;QACjC,MAAM,CAAC,mBAAmB,CAAC,IAAI;QAC/B,MAAM,CAAC,gBAAgB,CAAC,aAAa;QACrC,MAAM,CAAC,gBAAgB,CAAC,IAAI;QAC5B,MAAM,CAAC,gBAAgB,CAAC,UAAU;QAClC,MAAM,CAAC,gBAAgB,CAAC,QAAQ;QAChC,MAAM,CAAC,gBAAgB,CAAC,mBAAmB;QAC3C,MAAM,CAAC,gBAAgB,CAAC,IAAI;QAC5B,MAAM,CAAC,QAAQ,EAAE,cAAc;QAC/B,MAAM,CAAC,KAAK,EAAE,cAAc;QAC5B,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,kBAAkB;QACrC,MAAM,CAAC,WAAW,EAAE,UAAU;QAC9B,MAAM,CAAC,kBAAkB;QACzB,MAAM,CAAC,WAAW,EAAE,kBAAkB;QACtC,MAAM,CAAC,WAAW,EAAE,cAAc;QAClC,MAAM,CAAC,WAAW,EAAE,oBAAoB;QACxC,MAAM,CAAC,WAAW,EAAE,kBAAkB;QACtC,MAAM,CAAC,WAAW,EAAE,gBAAgB;QACpC,MAAM,CAAC,WAAW,EAAE,eAAe;KACpC,CAAC;IACF,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAClG,CAAC"}

package/dist/factories/harbor/utils/helm-values-mapper.d.ts

@@ -0,0 +1,8 @@
+import { type ValuesMergeExpression } from '../../../core/aspects/values-merge.js';
+import type { HarborLocalInstallationConfig, HarborProductionInstallationConfig } from '../types.js';
+export type HarborMappedHelmValues = Record<string, unknown> | ValuesMergeExpression;
+/** Official Harbor chart values for the bounded development profile. */
+export declare function mapHarborLocalInstallationToHelmValues(config: HarborLocalInstallationConfig): HarborMappedHelmValues;
+/** Official Harbor chart values for the HA-oriented production profile. */
+export declare function mapHarborProductionInstallationToHelmValues(config: HarborProductionInstallationConfig): HarborMappedHelmValues;
+//# sourceMappingURL=helm-values-mapper.d.ts.map

package/dist/factories/harbor/utils/helm-values-mapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm-values-mapper.d.ts","sourceRoot":"","sources":["../../../../src/factories/harbor/utils/helm-values-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,qBAAqB,EAC3B,MAAM,uCAAuC,CAAC;AAG/C,OAAO,KAAK,EACV,6BAA6B,EAC7B,kCAAkC,EACnC,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,qBAAqB,CAAC;AAErF,wEAAwE;AACxE,wBAAgB,sCAAsC,CACpD,MAAM,EAAE,6BAA6B,GACpC,sBAAsB,CAExB;AAED,2EAA2E;AAC3E,wBAAgB,2CAA2C,CACzD,MAAM,EAAE,kCAAkC,GACzC,sBAAsB,CAgBxB"}

package/dist/factories/harbor/utils/helm-values-mapper.js

@@ -0,0 +1,322 @@
+import { isValuesMergeExpression, mergeValuesExpression, } from '../../../core/aspects/values-merge.js';
+import { Cel } from '../../../core/references/cel.js';
+import { isCelExpression, isKubernetesRef } from '../../../utils/type-guards.js';
+/** Official Harbor chart values for the bounded development profile. */
+export function mapHarborLocalInstallationToHelmValues(config) {
+    return mergeValuesLast(mapCommonValues(config, 'local-development'), config.values);
+}
+/** Official Harbor chart values for the HA-oriented production profile. */
+export function mapHarborProductionInstallationToHelmValues(config) {
+    const values = mapCommonValues(config, 'production');
+    values.database = mapExternalDatabase(config.database);
+    values.redis = mapExternalCache(config.cache);
+    const components = ['core', 'portal', 'registry', 'jobservice', 'exporter'];
+    for (const component of components) {
+        values[component] = {
+            ...asObject(values[component]),
+            replicas: config.replicas[component],
+            resources: config.resources[component],
+            podDisruptionBudget: { enabled: true, minAvailable: 1 },
+        };
+    }
+    return mergeProductionValues(values, config.values);
+}
+function mapCommonValues(config, profile) {
+    const graphMode = isKubernetesRef(config.name);
+    const exposureType = config.exposure.type;
+    const tlsSource = graphMode
+        ? Cel.expr('schema.spec.exposure.tls.source == "cert-manager" ? "secret" : schema.spec.exposure.tls.source')
+        : config.exposure.tls.source === 'cert-manager'
+            ? 'secret'
+            : config.exposure.tls.source;
+    const tlsSecretName = graphMode
+        ? Cel.expr('schema.spec.exposure.tls.source == "cert-manager" ? schema.spec.certificate.secretName : (has(schema.spec.exposure.tls.secretName) ? schema.spec.exposure.tls.secretName : "")')
+        : config.exposure.tls.source === 'cert-manager'
+            ? config.certificate?.secretName
+            : config.exposure.tls.secretName;
+    const storage = config.storage;
+    const storageSecure = graphMode
+        ? Cel.expr('has(schema.spec.storage.secure) ? schema.spec.storage.secure : true')
+        : (storage.secure ?? true);
+    const storageSkipVerify = graphMode
+        ? Cel.expr('has(schema.spec.storage.skipVerify) ? schema.spec.storage.skipVerify : false')
+        : (storage.skipVerify ?? false);
+    const disableRedirect = graphMode
+        ? Cel.expr('has(schema.spec.storage.disableRedirect) ? schema.spec.storage.disableRedirect : true')
+        : (storage.disableRedirect ?? true);
+    const trivyEnabled = graphMode
+        ? Cel.expr('has(schema.spec.trivyEnabled) ? schema.spec.trivyEnabled : true')
+        : (config.trivyEnabled ?? true);
+    const metricsEnabled = graphMode
+        ? Cel.expr('has(schema.spec.metricsEnabled) ? schema.spec.metricsEnabled : false')
+        : (config.metricsEnabled ?? false);
+    const pvcStorageClass = graphMode
+        ? Cel.expr('has(schema.spec.pvcStorageClassName) ? schema.spec.pvcStorageClassName : ""')
+        : (config.pvcStorageClassName ?? '');
+    validateHarborConfig(config, graphMode);
+    const values = {
+        expose: {
+            type: exposureType,
+            tls: {
+                enabled: config.exposure.tls.enabled,
+                certSource: tlsSource,
+                secret: { secretName: tlsSecretName ?? '' },
+            },
+            ingress: {
+                hosts: {
+                    core: graphMode
+                        ? Cel.expr('has(schema.spec.exposure.ingress) ? schema.spec.exposure.ingress.host : ""')
+                        : (config.exposure.ingress?.host ?? ''),
+                },
+                className: graphMode
+                    ? Cel.expr('has(schema.spec.exposure.ingress) && has(schema.spec.exposure.ingress.className) ? schema.spec.exposure.ingress.className : ""')
+                    : (config.exposure.ingress?.className ?? ''),
+                annotations: graphMode
+                    ? Cel.expr('has(schema.spec.exposure.ingress) && has(schema.spec.exposure.ingress.annotations) ? schema.spec.exposure.ingress.annotations : {}')
+                    : (config.exposure.ingress?.annotations ?? {}),
+            },
+            nodePort: {
+                ports: {
+                    http: {
+                        port: 80,
+                        nodePort: graphMode
+                            ? Cel.expr('has(schema.spec.exposure.nodePort) && has(schema.spec.exposure.nodePort.http) ? schema.spec.exposure.nodePort.http : 30002')
+                            : (config.exposure.nodePort?.http ?? 30002),
+                    },
+                    https: {
+                        port: 443,
+                        nodePort: graphMode
+                            ? Cel.expr('has(schema.spec.exposure.nodePort) && has(schema.spec.exposure.nodePort.https) ? schema.spec.exposure.nodePort.https : 30003')
+                            : (config.exposure.nodePort?.https ?? 30003),
+                    },
+                },
+            },
+        },
+        externalURL: config.exposure.externalUrl,
+        persistence: {
+            enabled: true,
+            resourcePolicy: 'keep',
+            persistentVolumeClaim: {
+                database: { storageClass: pvcStorageClass },
+                redis: { storageClass: pvcStorageClass },
+                trivy: { storageClass: pvcStorageClass },
+            },
+            imageChartStorage: {
+                type: 's3',
+                disableredirect: disableRedirect,
+                ...(storage.caBundleSecretName ? { caBundleSecretName: storage.caBundleSecretName } : {}),
+                s3: {
+                    existingSecret: storage.existingSecret,
+                    region: storage.region,
+                    regionendpoint: storage.regionEndpoint,
+                    bucket: storage.bucket,
+                    secure: storageSecure,
+                    skipverify: storageSkipVerify,
+                    v4auth: true,
+                    ...(storage.rootDirectory ? { rootdirectory: storage.rootDirectory } : {}),
+                },
+            },
+        },
+        existingSecretAdminPassword: config.adminPasswordSecret.name,
+        existingSecretAdminPasswordKey: graphMode
+            ? Cel.expr('has(schema.spec.adminPasswordSecret.key) ? schema.spec.adminPasswordSecret.key : "HARBOR_ADMIN_PASSWORD"')
+            : (config.adminPasswordSecret.key ?? 'HARBOR_ADMIN_PASSWORD'),
+        existingSecretSecretKey: config.componentSecrets.encryptionKey,
+        core: {
+            existingSecret: config.componentSecrets.core,
+            ...(config.componentSecrets.xsrf ? { existingXsrfSecret: config.componentSecrets.xsrf } : {}),
+        },
+        jobservice: {
+            existingSecret: config.componentSecrets.jobservice,
+            jobLoggers: ['database'],
+        },
+        registry: {
+            existingSecret: config.componentSecrets.registry,
+            credentials: { existingSecret: config.componentSecrets.registryCredentials },
+        },
+        trivy: { enabled: trivyEnabled },
+        metrics: { enabled: metricsEnabled },
+        ...(config.caBundleSecretName ? { caBundleSecretName: config.caBundleSecretName } : {}),
+        internalTLS: mapInternalTls(config, graphMode),
+    };
+    if (profile === 'local-development') {
+        values.database = graphMode
+            ? {
+                type: Cel.expr('has(schema.spec.database) ? "external" : "internal"'),
+                external: mapExternalDatabase(config.database, graphMode).external,
+            }
+            : config.database
+                ? mapExternalDatabase(config.database)
+                : { type: 'internal' };
+        values.redis = graphMode
+            ? {
+                type: Cel.expr('has(schema.spec.cache) ? "external" : "internal"'),
+                external: mapExternalCache(config.cache, graphMode).external,
+            }
+            : config.cache
+                ? mapExternalCache(config.cache)
+                : { type: 'internal' };
+    }
+    return values;
+}
+function mapExternalDatabase(database, graphMode = false) {
+    if (!database && !graphMode)
+        return { type: 'internal' };
+    return {
+        type: 'external',
+        external: {
+            host: database?.host,
+            port: graphMode
+                ? Cel.expr('string(has(schema.spec.database) && has(schema.spec.database.port) ? schema.spec.database.port : 5432)')
+                : String(database?.port ?? 5432),
+            username: database?.username,
+            coreDatabase: database?.database,
+            existingSecret: database?.existingSecret,
+            sslmode: graphMode
+                ? Cel.expr('has(schema.spec.database) && has(schema.spec.database.sslMode) ? schema.spec.database.sslMode : "require"')
+                : (database?.sslMode ?? 'require'),
+        },
+    };
+}
+function mapExternalCache(cache, graphMode = false) {
+    if (!cache && !graphMode)
+        return { type: 'internal' };
+    return {
+        type: 'external',
+        external: {
+            addr: cache?.address,
+            username: graphMode
+                ? Cel.expr('has(schema.spec.cache) && has(schema.spec.cache.username) ? schema.spec.cache.username : ""')
+                : (cache?.username ?? ''),
+            existingSecret: cache?.existingSecret,
+            coreDatabaseIndex: '0',
+            jobserviceDatabaseIndex: '1',
+            registryDatabaseIndex: '2',
+            trivyAdapterIndex: '5',
+            tlsOptions: {
+                enable: graphMode
+                    ? Cel.expr('has(schema.spec.cache) && has(schema.spec.cache.tls) ? schema.spec.cache.tls.enabled : false')
+                    : (cache?.tls?.enabled ?? false),
+                ...(cache?.tls?.caBundleSecretName
+                    ? { caBundleSecretName: cache.tls.caBundleSecretName }
+                    : {}),
+            },
+        },
+    };
+}
+function mapInternalTls(config, graphMode) {
+    const internal = config.internalTls;
+    return {
+        enabled: graphMode
+            ? Cel.expr('has(schema.spec.internalTls) ? schema.spec.internalTls.enabled : false')
+            : (internal?.enabled ?? false),
+        certSource: graphMode
+            ? Cel.expr('has(schema.spec.internalTls) && has(schema.spec.internalTls.certSource) ? schema.spec.internalTls.certSource : "auto"')
+            : (internal?.certSource ?? 'auto'),
+        ...(internal?.coreSecretName ? { core: { secretName: internal.coreSecretName } } : {}),
+        ...(internal?.jobserviceSecretName
+            ? { jobservice: { secretName: internal.jobserviceSecretName } }
+            : {}),
+        ...(internal?.registrySecretName
+            ? { registry: { secretName: internal.registrySecretName } }
+            : {}),
+        ...(internal?.portalSecretName ? { portal: { secretName: internal.portalSecretName } } : {}),
+        ...(internal?.trivySecretName ? { trivy: { secretName: internal.trivySecretName } } : {}),
+    };
+}
+function validateHarborConfig(config, graphMode) {
+    if (graphMode)
+        return;
+    if (config.exposure.type === 'ingress' && !config.exposure.ingress?.host) {
+        throw new Error('Harbor ingress exposure requires exposure.ingress.host.');
+    }
+    if ((config.exposure.tls.source === 'secret' && !config.exposure.tls.secretName) ||
+        (config.exposure.tls.source === 'cert-manager' && !config.certificate?.secretName)) {
+        throw new Error('Harbor TLS source secret/cert-manager requires the corresponding Secret name.');
+    }
+    if (config.exposure.tls.enabled && config.exposure.tls.source === 'none') {
+        throw new Error('Harbor TLS cannot be enabled while its certificate source is none.');
+    }
+    if (config.profile === 'production') {
+        if (!config.exposure.tls.enabled) {
+            throw new Error('Production Harbor requires TLS exposure.');
+        }
+        if (config.storage.skipVerify) {
+            throw new Error('Production Harbor cannot skip S3 certificate verification.');
+        }
+        if (!config.networkPolicy.enabled) {
+            throw new Error('Production Harbor requires an enabled NetworkPolicy contract.');
+        }
+        if (Object.keys(config.networkPolicy.ingressNamespaceLabels).length === 0) {
+            throw new Error('Production Harbor NetworkPolicy requires ingress controller namespace labels.');
+        }
+        if (config.networkPolicy.egressNamespaceLabels.length === 0 &&
+            !config.networkPolicy.egressCidrs?.length) {
+            throw new Error('Production Harbor NetworkPolicy must declare provider namespaces or explicit egress CIDRs.');
+        }
+    }
+}
+function mergeValuesLast(base, overrides) {
+    if (overrides === undefined)
+        return base;
+    if (isKubernetesRef(overrides) ||
+        isCelExpression(overrides) ||
+        isValuesMergeExpression(overrides)) {
+        return mergeValuesExpression(base, overrides);
+    }
+    if (isPlainObject(overrides))
+        deepMerge(base, overrides);
+    return base;
+}
+/**
+ * Preserve production escape-hatch additions without allowing them to weaken
+ * the typed availability, credential, TLS, storage, or network contract.
+ * Local development intentionally retains chart-values-last behavior.
+ */
+function mergeProductionValues(protectedValues, overrides) {
+    if (overrides === undefined)
+        return protectedValues;
+    if (isKubernetesRef(overrides) ||
+        isCelExpression(overrides) ||
+        isValuesMergeExpression(overrides)) {
+        return mergeValuesExpression(overrides, protectedValues);
+    }
+    if (!isPlainObject(overrides))
+        return protectedValues;
+    const merged = cloneValue(overrides);
+    deepMerge(merged, protectedValues);
+    return merged;
+}
+function asObject(value) {
+    return isPlainObject(value) ? value : {};
+}
+function isPlainObject(value) {
+    return (!!value &&
+        typeof value === 'object' &&
+        !Array.isArray(value) &&
+        !isKubernetesRef(value) &&
+        !isCelExpression(value) &&
+        !isValuesMergeExpression(value));
+}
+function cloneValue(value) {
+    if (Array.isArray(value))
+        return value.map(cloneValue);
+    if (isPlainObject(value)) {
+        return Object.fromEntries(Object.entries(value).map(([key, child]) => [key, cloneValue(child)]));
+    }
+    return value;
+}
+function deepMerge(target, source) {
+    for (const [key, sourceValue] of Object.entries(source)) {
+        if (key === '__proto__' || key === 'constructor' || key === 'prototype')
+            continue;
+        const targetValue = target[key];
+        if (isPlainObject(targetValue) && isPlainObject(sourceValue)) {
+            deepMerge(targetValue, sourceValue);
+        }
+        else {
+            target[key] = cloneValue(sourceValue);
+        }
+    }
+}
+//# sourceMappingURL=helm-values-mapper.js.map

package/dist/factories/harbor/utils/helm-values-mapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm-values-mapper.js","sourceRoot":"","sources":["../../../../src/factories/harbor/utils/helm-values-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,qBAAqB,GAEtB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,GAAG,EAAE,MAAM,iCAAiC,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAQjF,wEAAwE;AACxE,MAAM,UAAU,sCAAsC,CACpD,MAAqC;IAErC,OAAO,eAAe,CAAC,eAAe,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;AACtF,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,2CAA2C,CACzD,MAA0C;IAE1C,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACrD,MAAM,CAAC,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,CAAC,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE9C,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,CAAU,CAAC;IACrF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,CAAC,SAAS,CAAC,GAAG;YAClB,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC9B,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YACpC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;YACtC,mBAAmB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE;SACxD,CAAC;IACJ,CAAC;IAED,OAAO,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,eAAe,CACtB,MAA0E,EAC1E,OAA2C;IAE3C,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC1C,MAAM,SAAS,GAAG,SAAS;QACzB,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,gGAAgG,CACjG;QACH,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,KAAK,cAAc;YAC7C,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;IACjC,MAAM,aAAa,GAAG,SAAS;QAC7B,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,gLAAgL,CACjL;QACH,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,KAAK,cAAc;YAC7C,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU;YAChC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,MAAM,aAAa,GAAG,SAAS;QAC7B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAU,qEAAqE,CAAC;QAC1F,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC;IAC7B,MAAM,iBAAiB,GAAG,SAAS;QACjC,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,8EAA8E,CAC/E;QACH,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC;IAClC,MAAM,eAAe,GAAG,SAAS;QAC/B,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,uFAAuF,CACxF;QACH,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC,CAAC;IACtC,MAAM,YAAY,GAAG,SAAS;QAC5B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAU,iEAAiE,CAAC;QACtF,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC;IAClC,MAAM,cAAc,GAAG,SAAS;QAC9B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAU,sEAAsE,CAAC;QAC3F,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,IAAI,KAAK,CAAC,CAAC;IACrC,MAAM,eAAe,GAAG,SAAS;QAC/B,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,6EAA6E,CAC9E;QACH,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;IAEvC,oBAAoB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAExC,MAAM,MAAM,GAA4B;QACtC,MAAM,EAAE;YACN,IAAI,EAAE,YAAY;YAClB,GAAG,EAAE;gBACH,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO;gBACpC,UAAU,EAAE,SAAS;gBACrB,MAAM,EAAE,EAAE,UAAU,EAAE,aAAa,IAAI,EAAE,EAAE;aAC5C;YACD,OAAO,EAAE;gBACP,KAAK,EAAE;oBACL,IAAI,EAAE,SAAS;wBACb,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,4EAA4E,CAC7E;wBACH,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC;iBAC1C;gBACD,SAAS,EAAE,SAAS;oBAClB,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,gIAAgI,CACjI;oBACH,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC;gBAC9C,WAAW,EAAE,SAAS;oBACpB,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,oIAAoI,CACrI;oBACH,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,IAAI,EAAE,CAAC;aACjD;YACD,QAAQ,EAAE;gBACR,KAAK,EAAE;oBACL,IAAI,EAAE;wBACJ,IAAI,EAAE,EAAE;wBACR,QAAQ,EAAE,SAAS;4BACjB,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,4HAA4H,CAC7H;4BACH,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,IAAI,KAAK,CAAC;qBAC9C;oBACD,KAAK,EAAE;wBACL,IAAI,EAAE,GAAG;wBACT,QAAQ,EAAE,SAAS;4BACjB,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,8HAA8H,CAC/H;4BACH,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,IAAI,KAAK,CAAC;qBAC/C;iBACF;aACF;SACF;QACD,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;QACxC,WAAW,EAAE;YACX,OAAO,EAAE,IAAI;YACb,cAAc,EAAE,MAAM;YACtB,qBAAqB,EAAE;gBACrB,QAAQ,EAAE,EAAE,YAAY,EAAE,eAAe,EAAE;gBAC3C,KAAK,EAAE,EAAE,YAAY,EAAE,eAAe,EAAE;gBACxC,KAAK,EAAE,EAAE,YAAY,EAAE,eAAe,EAAE;aACzC;YACD,iBAAiB,EAAE;gBACjB,IAAI,EAAE,IAAI;gBACV,eAAe,EAAE,eAAe;gBAChC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzF,EAAE,EAAE;oBACF,cAAc,EAAE,OAAO,CAAC,cAAc;oBACtC,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,cAAc,EAAE,OAAO,CAAC,cAAc;oBACtC,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,MAAM,EAAE,aAAa;oBACrB,UAAU,EAAE,iBAAiB;oBAC7B,MAAM,EAAE,IAAI;oBACZ,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC3E;aACF;SACF;QACD,2BAA2B,EAAE,MAAM,CAAC,mBAAmB,CAAC,IAAI;QAC5D,8BAA8B,EAAE,SAAS;YACvC,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,0GAA0G,CAC3G;YACH,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,GAAG,IAAI,uBAAuB,CAAC;QAC/D,uBAAuB,EAAE,MAAM,CAAC,gBAAgB,CAAC,aAAa;QAC9D,IAAI,EAAE;YACJ,cAAc,EAAE,MAAM,CAAC,gBAAgB,CAAC,IAAI;YAC5C,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9F;QACD,UAAU,EAAE;YACV,cAAc,EAAE,MAAM,CAAC,gBAAgB,CAAC,UAAU;YAClD,UAAU,EAAE,CAAC,UAAU,CAAC;SACzB;QACD,QAAQ,EAAE;YACR,cAAc,EAAE,MAAM,CAAC,gBAAgB,CAAC,QAAQ;YAChD,WAAW,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,EAAE;SAC7E;QACD,KAAK,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE;QAChC,OAAO,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE;QACpC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,WAAW,EAAE,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC;KAC/C,CAAC;IAEF,IAAI,OAAO,KAAK,mBAAmB,EAAE,CAAC;QACpC,MAAM,CAAC,QAAQ,GAAG,SAAS;YACzB,CAAC,CAAC;gBACE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAS,qDAAqD,CAAC;gBAC7E,QAAQ,EAAE,mBAAmB,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ;aACnE;YACH,CAAC,CAAC,MAAM,CAAC,QAAQ;gBACf,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACtC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QAC3B,MAAM,CAAC,KAAK,GAAG,SAAS;YACtB,CAAC,CAAC;gBACE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAS,kDAAkD,CAAC;gBAC1E,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,QAAQ;aAC7D;YACH,CAAC,CAAC,MAAM,CAAC,KAAK;gBACZ,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC;gBAChC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC7B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAEkD,EAClD,SAAS,GAAG,KAAK;IAEjB,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACzD,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ,EAAE,IAAI;YACpB,IAAI,EAAE,SAAS;gBACb,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,wGAAwG,CACzG;gBACH,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,IAAI,IAAI,CAAC;YAClC,QAAQ,EAAE,QAAQ,EAAE,QAAQ;YAC5B,YAAY,EAAE,QAAQ,EAAE,QAAQ;YAChC,cAAc,EAAE,QAAQ,EAAE,cAAc;YACxC,OAAO,EAAE,SAAS;gBAChB,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,2GAA2G,CAC5G;gBACH,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,IAAI,SAAS,CAAC;SACrC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,KAA2F,EAC3F,SAAS,GAAG,KAAK;IAEjB,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACtD,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE;YACR,IAAI,EAAE,KAAK,EAAE,OAAO;YACpB,QAAQ,EAAE,SAAS;gBACjB,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,6FAA6F,CAC9F;gBACH,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,IAAI,EAAE,CAAC;YAC3B,cAAc,EAAE,KAAK,EAAE,cAAc;YACrC,iBAAiB,EAAE,GAAG;YACtB,uBAAuB,EAAE,GAAG;YAC5B,qBAAqB,EAAE,GAAG;YAC1B,iBAAiB,EAAE,GAAG;YACtB,UAAU,EAAE;gBACV,MAAM,EAAE,SAAS;oBACf,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,8FAA8F,CAC/F;oBACH,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,KAAK,CAAC;gBAClC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,kBAAkB;oBAChC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE;oBACtD,CAAC,CAAC,EAAE,CAAC;aACR;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,MAA0E,EAC1E,SAAkB;IAElB,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC;IACpC,OAAO;QACL,OAAO,EAAE,SAAS;YAChB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAU,wEAAwE,CAAC;YAC7F,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,IAAI,KAAK,CAAC;QAChC,UAAU,EAAE,SAAS;YACnB,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,uHAAuH,CACxH;YACH,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,IAAI,MAAM,CAAC;QACpC,GAAG,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,GAAG,CAAC,QAAQ,EAAE,oBAAoB;YAChC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,oBAAoB,EAAE,EAAE;YAC/D,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,QAAQ,EAAE,kBAAkB;YAC9B,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,kBAAkB,EAAE,EAAE;YAC3D,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,GAAG,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1F,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAA0E,EAC1E,SAAkB;IAElB,IAAI,SAAS;QAAE,OAAO;IACtB,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;QAC5E,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,KAAK,cAAc,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,EAClF,CAAC;QACD,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;QACJ,CAAC;QACD,IACE,MAAM,CAAC,aAAa,CAAC,qBAAqB,CAAC,MAAM,KAAK,CAAC;YACvD,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,EAAE,MAAM,EACzC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,4FAA4F,CAC7F,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,IAA6B,EAC7B,SAAkB;IAElB,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACzC,IACE,eAAe,CAAC,SAAS,CAAC;QAC1B,eAAe,CAAC,SAAS,CAAC;QAC1B,uBAAuB,CAAC,SAAS,CAAC,EAClC,CAAC;QACD,OAAO,qBAAqB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,aAAa,CAAC,SAAS,CAAC;QAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAC5B,eAAwC,EACxC,SAAkB;IAElB,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,eAAe,CAAC;IACpD,IACE,eAAe,CAAC,SAAS,CAAC;QAC1B,eAAe,CAAC,SAAS,CAAC;QAC1B,uBAAuB,CAAC,SAAS,CAAC,EAClC,CAAC;QACD,OAAO,qBAAqB,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;QAAE,OAAO,eAAe,CAAC;IACtD,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAA4B,CAAC;IAChE,SAAS,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,CACL,CAAC,CAAC,KAAK;QACP,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,CAAC,eAAe,CAAC,KAAK,CAAC;QACvB,CAAC,eAAe,CAAC,KAAK,CAAC;QACvB,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAChC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACvD,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CACtE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,MAA+B,EAAE,MAA+B;IACjF,KAAK,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACxD,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,WAAW;YAAE,SAAS;QAClF,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,aAAa,CAAC,WAAW,CAAC,IAAI,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7D,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/factories/harbor/utils/index.d.ts

@@ -0,0 +1,2 @@
+export * from './helm-values-mapper.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/factories/harbor/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/factories/harbor/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC"}

package/dist/factories/harbor/utils/index.js

@@ -0,0 +1,2 @@
+export * from './helm-values-mapper.js';
+//# sourceMappingURL=index.js.map

package/dist/factories/harbor/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/factories/harbor/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC"}

package/dist/factories/helm/helm-release.d.ts

@@ -28,6 +28,16 @@ export interface HelmReleaseConfig<TValues extends object = TypeKroValueTreeObje
      * mixed-template strings, arrays, and plain objects recursively.
      */
     values?: TypeKroChartValue<TValues>;
+    /**
+     * Flux install policy. The supplied fields override TypeKro's bounded retry
+     * defaults; nested remediation fields are merged rather than replaced.
+     */
+    install?: HelmReleaseSpec['install'];
+    /**
+     * Flux upgrade policy. Stateful charts can disable automatic remediation
+     * when rolling back across a database migration would be unsafe.
+     */
+    upgrade?: HelmReleaseSpec['upgrade'];
     driftDetection?: HelmReleaseSpec['driftDetection'];
     id?: string;
 }