typekro 0.3.0 → 0.4.0

package/dist/core/composition/typekro-runtime/typekro-runtime.js

@@ -2,6 +2,8 @@ import { helmRelease } from '../../../factories/helm/helm-release.js';
 import { helmRepository } from '../../../factories/helm/helm-repository.js';
 import { namespace } from '../../../factories/kubernetes/core/namespace.js';
 import { yamlFile } from '../../../factories/kubernetes/yaml/yaml-file.js';
+import { clusterRoleBinding } from '../../../factories/kubernetes/rbac/index.js';
+import { fixCRDSchemaForK8s133 } from '../../utils/crd-schema-fix.js';
 import { kubernetesComposition } from '../index.js';
 import { TypeKroRuntimeSpec, TypeKroRuntimeStatus } from './types.js';
 /**
@@ -33,36 +35,98 @@ import { TypeKroRuntimeSpec, TypeKroRuntimeStatus } from './types.js';
  * ```
  */
 export function typeKroRuntimeBootstrap(config = {}) {
-    const fluxVersion = config.fluxVersion || 'latest';
+    // Use a specific stable Flux version by default to avoid schema validation issues
+    // that can occur with 'latest' (e.g., 422 errors on CRD validation)
+    // v2.7.5 is the latest stable version with fixes for schema validation issues
+    const fluxVersion = config.fluxVersion || 'v2.7.5';
     const kroVersion = config.kroVersion || '0.3.0';
+    const targetNamespace = config.namespace || 'flux-system';
     return kubernetesComposition({
         name: 'typekro-runtime-bootstrap',
         apiVersion: 'typekro.dev/v1alpha1',
         kind: 'TypeKroRuntime',
         spec: TypeKroRuntimeSpec,
         status: TypeKroRuntimeStatus,
-    }, (spec) => {
+    }, (_spec) => {
         // System namespace for Flux
-        namespace({
+        const _systemNamespace = namespace({
             metadata: {
-                name: spec.namespace,
+                name: targetNamespace,
             },
             id: 'systemNamespace',
         });
-        // Kro system namespace
-        namespace({
+        // Kro system namespace - must be 'kro-system' to match the ClusterRoleBinding
+        // that the Kro Helm chart creates (it references namespace: kro-system)
+        const _kroNamespace = namespace({
             metadata: {
-                name: 'kro',
+                name: 'kro-system',
             },
             id: 'kroNamespace',
         });
         // Flux CD system using yamlFile (matches integration test pattern)
+        // Apply CRD schema fix for Kubernetes 1.33+ compatibility
+        // (Flux CRDs use x-kubernetes-preserve-unknown-fields without type, which K8s 1.33 rejects)
+        //
+        // IMPORTANT: Using 'serverSideApply' strategy to merge CRD schema fixes with existing CRDs.
+        // This is necessary because:
+        // 1. Kubernetes 1.33+ requires the x-kubernetes-preserve-unknown-fields annotation
+        // 2. CRDs may have stored versions that can't be removed until data is migrated
+        // 3. Server-side apply merges changes without requiring full replacement
         yamlFile({
             name: 'flux-system-install',
             path: fluxVersion === 'latest'
                 ? 'https://github.com/fluxcd/flux2/releases/latest/download/install.yaml'
                 : `https://github.com/fluxcd/flux2/releases/download/${fluxVersion}/install.yaml`,
-            deploymentStrategy: 'skipIfExists',
+            deploymentStrategy: 'serverSideApply',
+            fieldManager: 'typekro-bootstrap',
+            manifestTransform: fixCRDSchemaForK8s133,
+        });
+        // Fix incomplete RBAC from standard Flux install - add missing service accounts to cluster-reconciler
+        clusterRoleBinding({
+            metadata: {
+                name: 'cluster-reconciler',
+                labels: {
+                    'app.kubernetes.io/instance': 'flux-system',
+                    'app.kubernetes.io/part-of': 'flux',
+                },
+            },
+            roleRef: {
+                apiGroup: 'rbac.authorization.k8s.io',
+                kind: 'ClusterRole',
+                name: 'cluster-admin',
+            },
+            subjects: [
+                {
+                    kind: 'ServiceAccount',
+                    name: 'kustomize-controller',
+                    namespace: targetNamespace,
+                },
+                {
+                    kind: 'ServiceAccount',
+                    name: 'helm-controller',
+                    namespace: targetNamespace,
+                },
+                {
+                    kind: 'ServiceAccount',
+                    name: 'source-controller',
+                    namespace: targetNamespace,
+                },
+                {
+                    kind: 'ServiceAccount',
+                    name: 'notification-controller',
+                    namespace: targetNamespace,
+                },
+                {
+                    kind: 'ServiceAccount',
+                    name: 'image-reflector-controller',
+                    namespace: targetNamespace,
+                },
+                {
+                    kind: 'ServiceAccount',
+                    name: 'image-automation-controller',
+                    namespace: targetNamespace,
+                },
+            ],
         });
         // Helm Repository for Kro OCI charts
         helmRepository({
@@ -74,9 +138,11 @@ export function typeKroRuntimeBootstrap(config = {}) {
             id: 'kroHelmRepo',
         });
         // Kro using HelmRelease with OCI chart - Flux will manage the lifecycle
+        // IMPORTANT: Must deploy to 'kro-system' namespace to match the ClusterRoleBinding
+        // that the Kro Helm chart creates (it references namespace: kro-system for the service account)
         const kroHelmRelease = helmRelease({
             name: 'kro',
-            namespace: 'kro',
+            namespace: 'kro-system',
             chart: {
                 name: 'kro',
                 repository: `oci://ghcr.io/kro-run/kro`,
@@ -87,7 +153,7 @@ export function typeKroRuntimeBootstrap(config = {}) {
         });
         // ✨ JavaScript expressions - automatically converted to CEL
         return {
-            phase: kroHelmRelease.status.phase === 'Ready' ? 'Ready' : 'Installing',
+            phase: (kroHelmRelease.status.phase === 'Ready' ? 'Ready' : 'Installing'),
             components: {
                 fluxSystem: true,
                 // Kro system readiness based on HelmRelease status

package/dist/core/composition/typekro-runtime/typekro-runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"typekro-runtime.js","sourceRoot":"","sources":["../../../../src/core/composition/typekro-runtime/typekro-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,yCAAyC,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,4CAA4C,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,iDAAiD,CAAC;AAC5E,OAAO,EAAE,QAAQ,EAAE,MAAM,iDAAiD,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAA6B,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEjG;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAA+B,EAAE;IACvE,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC;IACnD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,OAAO,CAAC;IAEhD,OAAO,qBAAqB,CAC1B;QACE,IAAI,EAAE,2BAA2B;QACjC,UAAU,EAAE,sBAAsB;QAClC,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,oBAAoB;KAC7B,EACD,CAAC,IAAI,EAAE,EAAE;QACP,4BAA4B;QAC5B,SAAS,CAAC;YACR,QAAQ,EAAE;gBACR,IAAI,EAAE,IAAI,CAAC,SAAS;aACrB;YACD,EAAE,EAAE,iBAAiB;SACtB,CAAC,CAAC;QAEH,uBAAuB;QACvB,SAAS,CAAC;YACR,QAAQ,EAAE;gBACR,IAAI,EAAE,KAAK;aACZ;YACD,EAAE,EAAE,cAAc;SACnB,CAAC,CAAC;QAEH,mEAAmE;QACnE,QAAQ,CAAC;YACP,IAAI,EAAE,qBAAqB;YAC3B,IAAI,EACF,WAAW,KAAK,QAAQ;gBACtB,CAAC,CAAC,uEAAuE;gBACzE,CAAC,CAAC,qDAAqD,WAAW,eAAe;YACrF,kBAAkB,EAAE,cAAc;SACnC,CAAC,CAAC;QAEH,qCAAqC;QACrC,cAAc,CAAC;YACb,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,aAAa;YACxB,GAAG,EAAE,2BAA2B;YAChC,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,KAAK;YACX,EAAE,EAAE,aAAa;SAClB,CAAC,CAAC;QAEH,wEAAwE;QACxE,MAAM,cAAc,GAAG,WAAW,CAAC;YACjC,IAAI,EAAE,KAAK;YACX,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE;gBACL,IAAI,EAAE,KAAK;gBACX,UAAU,EAAE,2BAA2B;gBACvC,OAAO,EAAE,UAAU;aACpB;YACD,QAAQ,EAAE,IAAI;YACd,EAAE,EAAE,gBAAgB;SACrB,CAAC,CAAC;QAEH,4DAA4D;QAC5D,OAAO;YACL,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY;YACvE,UAAU,EAAE;gBACV,UAAU,EAAE,IAAI;gBAChB,mDAAmD;gBACnD,SAAS,EAAE,cAAc,CAAC,MAAM,CAAC,KAAK,KAAK,OAAO;aACnD;SACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"typekro-runtime.js","sourceRoot":"","sources":["../../../../src/core/composition/typekro-runtime/typekro-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,yCAAyC,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,4CAA4C,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,iDAAiD,CAAC;AAC5E,OAAO,EAAE,QAAQ,EAAE,MAAM,iDAAiD,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAA6B,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEjG;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAA+B,EAAE;IACvE,kFAAkF;IAClF,oEAAoE;IACpE,8EAA8E;IAC9E,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC;IACnD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,OAAO,CAAC;IAChD,MAAM,eAAe,GAAG,MAAM,CAAC,SAAS,IAAI,aAAa,CAAC;IAE1D,OAAO,qBAAqB,CAC1B;QACE,IAAI,EAAE,2BAA2B;QACjC,UAAU,EAAE,sBAAsB;QAClC,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,oBAAoB;KAC7B,EACD,CAAC,KAAK,EAAE,EAAE;QACR,4BAA4B;QAC5B,MAAM,gBAAgB,GAAG,SAAS,CAAC;YACjC,QAAQ,EAAE;gBACR,IAAI,EAAE,eAAe;aACtB;YACD,EAAE,EAAE,iBAAiB;SACtB,CAAC,CAAC;QAEH,8EAA8E;QAC9E,wEAAwE;QACxE,MAAM,aAAa,GAAG,SAAS,CAAC;YAC9B,QAAQ,EAAE;gBACR,IAAI,EAAE,YAAY;aACnB;YACD,EAAE,EAAE,cAAc;SACnB,CAAC,CAAC;QAEH,mEAAmE;QACnE,0DAA0D;QAC1D,4FAA4F;QAC5F,EAAE;QACF,4FAA4F;QAC5F,6BAA6B;QAC7B,mFAAmF;QACnF,gFAAgF;QAChF,yEAAyE;QACzE,QAAQ,CAAC;YACP,IAAI,EAAE,qBAAqB;YAC3B,IAAI,EACF,WAAW,KAAK,QAAQ;gBACtB,CAAC,CAAC,uEAAuE;gBACzE,CAAC,CAAC,qDAAqD,WAAW,eAAe;YACrF,kBAAkB,EAAE,iBAAiB;YACrC,YAAY,EAAE,mBAAmB;YACjC,iBAAiB,EAAE,qBAAqB;SACzC,CAAC,CAAC;QAEH,sGAAsG;QACtG,kBAAkB,CAAC;YACjB,QAAQ,EAAE;gBACR,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE;oBACN,4BAA4B,EAAE,aAAa;oBAC3C,2BAA2B,EAAE,MAAM;iBACpC;aACF;YACD,OAAO,EAAE;gBACP,QAAQ,EAAE,2BAA2B;gBACrC,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,eAAe;aACtB;YACD,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,gBAAgB;oBACtB,IAAI,EAAE,sBAAsB;oBAC5B,SAAS,EAAE,eAAe;iBAC3B;gBACD;oBACE,IAAI,EAAE,gBAAgB;oBACtB,IAAI,EAAE,iBAAiB;oBACvB,SAAS,EAAE,eAAe;iBAC3B;gBACD;oBACE,IAAI,EAAE,gBAAgB;oBACtB,IAAI,EAAE,mBAAmB;oBACzB,SAAS,EAAE,eAAe;iBAC3B;gBACD;oBACE,IAAI,EAAE,gBAAgB;oBACtB,IAAI,EAAE,yBAAyB;oBAC/B,SAAS,EAAE,eAAe;iBAC3B;gBACD;oBACE,IAAI,EAAE,gBAAgB;oBACtB,IAAI,EAAE,4BAA4B;oBAClC,SAAS,EAAE,eAAe;iBAC3B;gBACD;oBACE,IAAI,EAAE,gBAAgB;oBACtB,IAAI,EAAE,6BAA6B;oBACnC,SAAS,EAAE,eAAe;iBAC3B;aACF;SACF,CAAC,CAAC;QAEH,qCAAqC;QACrC,cAAc,CAAC;YACb,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,aAAa;YACxB,GAAG,EAAE,2BAA2B;YAChC,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,KAAK;YACX,EAAE,EAAE,aAAa;SAClB,CAAC,CAAC;QAEH,wEAAwE;QACxE,mFAAmF;QACnF,gGAAgG;QAChG,MAAM,cAAc,GAAG,WAAW,CAAC;YACjC,IAAI,EAAE,KAAK;YACX,SAAS,EAAE,YAAY;YACvB,KAAK,EAAE;gBACL,IAAI,EAAE,KAAK;gBACX,UAAU,EAAE,2BAA2B;gBACvC,OAAO,EAAE,UAAU;aACpB;YACD,QAAQ,EAAE,IAAI;YACd,EAAE,EAAE,gBAAgB;SACrB,CAAC,CAAC;QAEH,4DAA4D;QAC5D,OAAO;YACL,KAAK,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAKzD;YACf,UAAU,EAAE;gBACV,UAAU,EAAE,IAAI;gBAChB,mDAAmD;gBACnD,SAAS,EAAE,cAAc,CAAC,MAAM,CAAC,KAAK,KAAK,OAAO;aACnD;SACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/core/composition/typekro-runtime/types.d.ts

@@ -1,13 +1,16 @@
-export declare const TypeKroRuntimeSpec: import("arktype/internal/methods/object.ts").ObjectType<{
+import { type Type } from 'arktype';
+export interface TypeKroRuntimeSpecType {
     namespace: string;
-}, {}>;
-export declare const TypeKroRuntimeStatus: import("arktype/internal/methods/object.ts").ObjectType<{
-    phase: "Pending" | "Ready" | "Failed" | "Installing" | "Upgrading";
+}
+export interface TypeKroRuntimeStatusType {
+    phase: 'Pending' | 'Installing' | 'Ready' | 'Failed' | 'Upgrading';
     components: {
         fluxSystem: boolean;
         kroSystem: boolean;
     };
-}, {}>;
+}
+export declare const TypeKroRuntimeSpec: Type<TypeKroRuntimeSpecType>;
+export declare const TypeKroRuntimeStatus: Type<TypeKroRuntimeStatusType>;
 export interface TypeKroRuntimeConfig {
     namespace?: string;
     fluxVersion?: string;

package/dist/core/composition/typekro-runtime/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/composition/typekro-runtime/types.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,kBAAkB;;MAE7B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;MAM/B,CAAC;AAEH,MAAM,WAAW,oBAAoB;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/composition/typekro-runtime/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,IAAI,EAAE,MAAM,SAAS,CAAC;AAE1C,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,SAAS,GAAG,YAAY,GAAG,OAAO,GAAG,QAAQ,GAAG,WAAW,CAAC;IACnE,UAAU,EAAE;QACV,UAAU,EAAE,OAAO,CAAC;QACpB,SAAS,EAAE,OAAO,CAAC;KACpB,CAAC;CACH;AAED,eAAO,MAAM,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAE1D,CAAC;AAEH,eAAO,MAAM,oBAAoB,EAAE,IAAI,CAAC,wBAAwB,CAM9D,CAAC;AAEH,MAAM,WAAW,oBAAoB;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB"}

package/dist/core/composition/typekro-runtime/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/core/composition/typekro-runtime/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAE/B,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC;IACrC,SAAS,EAAE,QAAQ;CACpB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;IACvC,KAAK,EAAE,6DAA6D;IACpE,UAAU,EAAE;QACV,UAAU,EAAE,SAAS;QACrB,SAAS,EAAE,SAAS;KACrB;CACF,CAAC,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/core/composition/typekro-runtime/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAa,MAAM,SAAS,CAAC;AAc1C,MAAM,CAAC,MAAM,kBAAkB,GAAiC,IAAI,CAAC;IACnE,SAAS,EAAE,QAAQ;CACpB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAmC,IAAI,CAAC;IACvE,KAAK,EAAE,6DAA6D;IACpE,UAAU,EAAE;QACV,UAAU,EAAE,SAAS;QACrB,SAAS,EAAE,SAAS;KACrB;CACF,CAAC,CAAC"}

package/dist/core/constants/brands.d.ts

@@ -16,6 +16,14 @@ export declare const CEL_EXPRESSION_BRAND: unique symbol;
  * Brand symbol for MixedTemplate objects
  */
 export declare const MIXED_TEMPLATE_BRAND: unique symbol;
+/**
+ * Brand symbol for NestedCompositionResource objects
+ */
+export declare const NESTED_COMPOSITION_BRAND: unique symbol;
+/**
+ * Brand symbol for CallableComposition objects
+ */
+export declare const CALLABLE_COMPOSITION_BRAND: unique symbol;
 /**
  * Type-safe brand checking utilities
  */
@@ -38,5 +46,17 @@ export declare const BrandChecks: {
     isMixedTemplate(obj: unknown): obj is {
         [MIXED_TEMPLATE_BRAND]: true;
     };
+    /**
+     * Check if an object has the NestedComposition brand
+     */
+    isNestedComposition(obj: unknown): obj is {
+        [NESTED_COMPOSITION_BRAND]: true;
+    };
+    /**
+     * Check if an object is a CallableComposition
+     */
+    isCallableComposition(obj: unknown): obj is {
+        [CALLABLE_COMPOSITION_BRAND]: true;
+    };
 };
 //# sourceMappingURL=brands.d.ts.map

package/dist/core/constants/brands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"brands.d.ts","sourceRoot":"","sources":["../../../src/core/constants/brands.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,eAAO,MAAM,oBAAoB,eAAsC,CAAC;AAExE;;GAEG;AACH,eAAO,MAAM,oBAAoB,eAAsC,CAAC;AAExE;;GAEG;AACH,eAAO,MAAM,oBAAoB,eAAsC,CAAC;AAExE;;GAEG;AACH,eAAO,MAAM,WAAW;IACtB;;OAEG;yBACkB,OAAO,GAAG,GAAG,IAAI;QAAE,CAAC,oBAAoB,CAAC,EAAE,IAAI,CAAA;KAAE;IAStE;;OAEG;yBACkB,OAAO,GAAG,GAAG,IAAI;QAAE,CAAC,oBAAoB,CAAC,EAAE,IAAI,CAAA;KAAE;IAItE;;OAEG;yBACkB,OAAO,GAAG,GAAG,IAAI;QAAE,CAAC,oBAAoB,CAAC,EAAE,IAAI,CAAA;KAAE;CAGvE,CAAC"}
+{"version":3,"file":"brands.d.ts","sourceRoot":"","sources":["../../../src/core/constants/brands.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,eAAO,MAAM,oBAAoB,eAAsC,CAAC;AAExE;;GAEG;AACH,eAAO,MAAM,oBAAoB,eAAsC,CAAC;AAExE;;GAEG;AACH,eAAO,MAAM,oBAAoB,eAAsC,CAAC;AAExE;;GAEG;AACH,eAAO,MAAM,wBAAwB,eAA0C,CAAC;AAEhF;;GAEG;AACH,eAAO,MAAM,0BAA0B,eAA4C,CAAC;AAEpF;;GAEG;AACH,eAAO,MAAM,WAAW;IACtB;;OAEG;yBACkB,OAAO,GAAG,GAAG,IAAI;QAAE,CAAC,oBAAoB,CAAC,EAAE,IAAI,CAAA;KAAE;IAStE;;OAEG;yBACkB,OAAO,GAAG,GAAG,IAAI;QAAE,CAAC,oBAAoB,CAAC,EAAE,IAAI,CAAA;KAAE;IAItE;;OAEG;yBACkB,OAAO,GAAG,GAAG,IAAI;QAAE,CAAC,oBAAoB,CAAC,EAAE,IAAI,CAAA;KAAE;IAItE;;OAEG;6BACsB,OAAO,GAAG,GAAG,IAAI;QAAE,CAAC,wBAAwB,CAAC,EAAE,IAAI,CAAA;KAAE;IAM9E;;OAEG;+BACwB,OAAO,GAAG,GAAG,IAAI;QAAE,CAAC,0BAA0B,CAAC,EAAE,IAAI,CAAA;KAAE;CAGnF,CAAC"}

package/dist/core/constants/brands.js

@@ -16,6 +16,14 @@ export const CEL_EXPRESSION_BRAND = Symbol.for('TypeKro.CelExpression');
  * Brand symbol for MixedTemplate objects
  */
 export const MIXED_TEMPLATE_BRAND = Symbol.for('TypeKro.MixedTemplate');
+/**
+ * Brand symbol for NestedCompositionResource objects
+ */
+export const NESTED_COMPOSITION_BRAND = Symbol.for('TypeKro.NestedComposition');
+/**
+ * Brand symbol for CallableComposition objects
+ */
+export const CALLABLE_COMPOSITION_BRAND = Symbol.for('TypeKro.CallableComposition');
 /**
  * Type-safe brand checking utilities
  */
@@ -41,5 +49,17 @@ export const BrandChecks = {
     isMixedTemplate(obj) {
         return Boolean(obj && typeof obj === 'object' && obj !== null && MIXED_TEMPLATE_BRAND in obj);
     },
+    /**
+     * Check if an object has the NestedComposition brand
+     */
+    isNestedComposition(obj) {
+        return Boolean(obj && typeof obj === 'object' && obj !== null && NESTED_COMPOSITION_BRAND in obj);
+    },
+    /**
+     * Check if an object is a CallableComposition
+     */
+    isCallableComposition(obj) {
+        return Boolean(obj && typeof obj === 'function' && CALLABLE_COMPOSITION_BRAND in obj);
+    },
 };
 //# sourceMappingURL=brands.js.map

package/dist/core/constants/brands.js.map

@@ -1 +1 @@
-{"version":3,"file":"brands.js","sourceRoot":"","sources":["../../../src/core/constants/brands.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;AAExE;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;AAExE;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;AAExE;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB;;OAEG;IACH,eAAe,CAAC,GAAY;QAC1B,OAAO,OAAO,CACZ,GAAG;YACD,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,UAAU,CAAC;YACtD,GAAG,KAAK,IAAI;YACZ,oBAAoB,IAAI,GAAG,CAC9B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,GAAY;QAC1B,OAAO,OAAO,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,oBAAoB,IAAI,GAAG,CAAC,CAAC;IAChG,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,GAAY;QAC1B,OAAO,OAAO,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,oBAAoB,IAAI,GAAG,CAAC,CAAC;IAChG,CAAC;CACF,CAAC"}
+{"version":3,"file":"brands.js","sourceRoot":"","sources":["../../../src/core/constants/brands.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;AAExE;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;AAExE;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;AAExE;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;AAEhF;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;AAEpF;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB;;OAEG;IACH,eAAe,CAAC,GAAY;QAC1B,OAAO,OAAO,CACZ,GAAG;YACD,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,UAAU,CAAC;YACtD,GAAG,KAAK,IAAI;YACZ,oBAAoB,IAAI,GAAG,CAC9B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,GAAY;QAC1B,OAAO,OAAO,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,oBAAoB,IAAI,GAAG,CAAC,CAAC;IAChG,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,GAAY;QAC1B,OAAO,OAAO,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,oBAAoB,IAAI,GAAG,CAAC,CAAC;IAChG,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,GAAY;QAC9B,OAAO,OAAO,CACZ,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,wBAAwB,IAAI,GAAG,CAClF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,GAAY;QAChC,OAAO,OAAO,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,UAAU,IAAI,0BAA0B,IAAI,GAAG,CAAC,CAAC;IACxF,CAAC;CACF,CAAC"}

package/dist/core/deployment/direct-factory.d.ts

@@ -97,9 +97,44 @@ export declare class DirectResourceFactoryImpl<TSpec extends KroCompatibleType,
     createResourceGraphForInstance(spec: TSpec): ResourceGraph;
     /**
      * Resolve resources for a specific spec
-     * This uses the existing processResourceReferences system to handle schema references
+     * This uses composition re-execution when available, or falls back to reference resolution
      */
+    private reExecutedStatus;
     private resolveResourcesForSpec;
+    /**
+     * Re-execute the composition function with actual spec values
+     * This provides actual values instead of proxy functions to the composition
+     */
+    private reExecuteCompositionWithActualValues;
+    /**
+     * Get the re-executed status if available
+     * This is used by the deployment strategy to use computed status instead of calling status builder with proxy functions
+     */
+    getReExecutedStatus(): TStatus | null;
+    /**
+     * Deep resolve any KubernetesRef objects in a value to their string representation
+     * This is needed because when composition functions build objects with schema proxy values,
+     * those values are KubernetesRef objects that need to be converted to actual values or
+     * placeholder strings for serialization.
+     *
+     * For schema references (resourceId === '__schema__'), we return a placeholder that will
+     * be resolved later when actual spec values are available.
+     *
+     * For resource references, we return a CEL expression placeholder.
+     */
+    private deepResolveKubernetesRefs;
+    /**
+     * Extract the underlying Kubernetes resource from an Enhanced proxy
+     *
+     * IMPORTANT: This method preserves ALL enumerable properties from the Enhanced resource,
+     * not just standard Kubernetes fields. This is critical for resources like Secret (data),
+     * ConfigMap (data, binaryData), RBAC resources (rules, roleRef, subjects), etc.
+     *
+     * It also resolves any KubernetesRef objects in the resource properties to their
+     * string representations, which is critical for HelmRelease values that may contain
+     * schema proxy references.
+     */
+    private extractKubernetesResourceFromEnhanced;
     /**
      * Resolve schema references and CEL expressions to actual values for direct deployment.
      * This is the final, corrected version that handles both direct proxies and Cel.expr wrappers.

package/dist/core/deployment/direct-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"direct-factory.d.ts","sourceRoot":"","sources":["../../../src/core/deployment/direct-factory.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAYH,OAAO,KAAK,EAEV,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACd,aAAa,EACb,aAAa,EACb,cAAc,EACf,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAyB,QAAQ,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAElG,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAEhB,aAAa,EACd,MAAM,2BAA2B,CAAC;AAOnC;;;;;GAKG;AACH,qBAAa,yBAAyB,CACpC,KAAK,SAAS,iBAAiB,EAC/B,OAAO,SAAS,iBAAiB,CACjC,YAAW,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC;IAEhD,QAAQ,CAAC,IAAI,EAAG,QAAQ,CAAU;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IAEnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqC;IAC/D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoC;IAC7D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAmC;IACpE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAiD;IAC/E,OAAO,CAAC,gBAAgB,CAAC,CAAyB;IAClD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoD;IACtF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAC/D,OAAO,CAAC,cAAc,CAAC,CAA2B;gBAGhD,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAC7C,gBAAgB,EAAE,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,EAClD,aAAa,CAAC,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAClD,OAAO,GAAE,cAAmB;IAgB9B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAOzB;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAoB5B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAwB3B;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IA8B5D;;OAEG;IACH,OAAO,CAAC,qBAAqB;IA8B7B;;OAEG;IACG,YAAY,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;IAIzD;;OAEG;IACG,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBjD;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,aAAa,CAAC;IAqBzC;;OAEG;YACW,kBAAkB;IAyGhC;;;OAGG;IACG,gBAAgB,IAAI,OAAO,CAAC;QAChC,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;QAC1C,cAAc,EAAE;YACd,OAAO,EAAE,MAAM,CAAC;YAChB,QAAQ,EAAE,MAAM,CAAC;YACjB,MAAM,EAAE,MAAM,CAAC;YACf,KAAK,EAAE,MAAM,CAAC;SACf,CAAC;QACF,MAAM,EAAE,eAAe,EAAE,CAAC;KAC3B,CAAC;IAmGF;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,cAAc,CAAC;IAmCzC;;OAEG;IACG,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAkBtD;;OAEG;IACH,MAAM,CAAC,IAAI,EAAE,KAAK,GAAG,MAAM;IA8D3B;;OAEG;IACI,8BAA8B,CAAC,IAAI,EAAE,KAAK,GAAG,aAAa;IAgDjE;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAkB/B;;;OAGG;IACH,OAAO,CAAC,+BAA+B;IAoGvC;;OAEG;IACH,OAAO,CAAC,oBAAoB;CAI7B;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,SAAS,iBAAiB,EAC/B,OAAO,SAAS,iBAAiB,EAEjC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAC7C,gBAAgB,EAAE,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,EAClD,aAAa,CAAC,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAClD,OAAO,GAAE,cAAmB,GAC3B,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,CAQvC"}
+{"version":3,"file":"direct-factory.d.ts","sourceRoot":"","sources":["../../../src/core/deployment/direct-factory.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAYH,OAAO,KAAK,EAEV,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACd,aAAa,EACb,aAAa,EACb,cAAc,EACf,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAyB,QAAQ,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAElG,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAEhB,aAAa,EACd,MAAM,2BAA2B,CAAC;AAOnC;;;;;GAKG;AACH,qBAAa,yBAAyB,CACpC,KAAK,SAAS,iBAAiB,EAC/B,OAAO,SAAS,iBAAiB,CACjC,YAAW,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC;IAEhD,QAAQ,CAAC,IAAI,EAAG,QAAQ,CAAU;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IAEnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqC;IAC/D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoC;IAC7D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAmC;IACpE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAiD;IAC/E,OAAO,CAAC,gBAAgB,CAAC,CAAyB;IAClD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoD;IACtF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAC/D,OAAO,CAAC,cAAc,CAAC,CAA2B;gBAGhD,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAC7C,gBAAgB,EAAE,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,EAClD,aAAa,CAAC,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAClD,OAAO,GAAE,cAAmB;IAgB9B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAOzB;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAoB5B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAwB3B;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IA8B5D;;OAEG;IACH,OAAO,CAAC,qBAAqB;IA8B7B;;OAEG;IACG,YAAY,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;IAIzD;;OAEG;IACG,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA0BjD;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,aAAa,CAAC;IAqBzC;;OAEG;YACW,kBAAkB;IAyGhC;;;OAGG;IACG,gBAAgB,IAAI,OAAO,CAAC;QAChC,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;QAC1C,cAAc,EAAE;YACd,OAAO,EAAE,MAAM,CAAC;YAChB,QAAQ,EAAE,MAAM,CAAC;YACjB,MAAM,EAAE,MAAM,CAAC;YACf,KAAK,EAAE,MAAM,CAAC;SACf,CAAC;QACF,MAAM,EAAE,eAAe,EAAE,CAAC;KAC3B,CAAC;IAoGF;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,cAAc,CAAC;IAmCzC;;OAEG;IACG,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAkBtD;;OAEG;IACH,MAAM,CAAC,IAAI,EAAE,KAAK,GAAG,MAAM;IA8D3B;;OAEG;IACI,8BAA8B,CAAC,IAAI,EAAE,KAAK,GAAG,aAAa;IA6FjE;;;OAGG;IACH,OAAO,CAAC,gBAAgB,CAAwB;IAEhD,OAAO,CAAC,uBAAuB;IAsD/B;;;OAGG;IACH,OAAO,CAAC,oCAAoC;IAyD5C;;;OAGG;IACI,mBAAmB,IAAI,OAAO,GAAG,IAAI;IAI5C;;;;;;;;;;OAUG;IACH,OAAO,CAAC,yBAAyB;IA+CjC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,qCAAqC;IA+B7C;;;OAGG;IACH,OAAO,CAAC,+BAA+B;IAgLvC;;OAEG;IACH,OAAO,CAAC,oBAAoB;CAI7B;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,SAAS,iBAAiB,EAC/B,OAAO,SAAS,iBAAiB,EAEjC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAC7C,gBAAgB,EAAE,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,EAClD,aAAa,CAAC,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAClD,OAAO,GAAE,cAAmB,GAC3B,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,CAQvC"}