typekro 0.38.2 → 0.39.0

package/dist/factories/clickstack/types.js

@@ -39,6 +39,7 @@
  * @see https://github.com/ClickHouse/ClickStack-helm-charts
  * @see https://clickhouse.com/docs/use-cases/observability/clickstack
  */
+import { isIPv6 } from 'node:net';
 import { type } from 'arktype';
 import { CRONJOB_NAME_MAX_LENGTH, DNS_LABEL_MAX_LENGTH, DNS_SUBDOMAIN_MAX_LENGTH, deriveNameLengthLimit, HELM_RELEASE_NAME_MAX_LENGTH, validateDnsSubdomainName, validateSecretDataKey, } from '../../core/kubernetes/naming.js';
 import { CLICKSTACK_GATEWAY_NAME_SUFFIX } from './resources/helm.js';
@@ -110,6 +111,118 @@ export const DEFAULT_CLICKSTACK_INITIAL_USER_PASSWORD_KEY = 'HYPERDX_INITIAL_USE
  * with a future upstream field.
  */
 export const CLICKSTACK_BOOTSTRAP_MARKER_COLLECTION = 'typekro_bootstrap';
+/**
+ * The CEL rule the generated CRD carries on `spec.clickhouse.host`: a
+ * SYNTACTIC pre-check. A bracketed host may hold only hex digits, `.` and at
+ * least one `:`; any other host only ASCII letters, digits, `.`, `-` and `_`.
+ * That refuses every scheme, port, path, userinfo, whitespace, backslash,
+ * percent-encoding and non-ASCII host. It does not parse IPv6 or normalise
+ * IPv4 (Kubernetes' CEL IP library needs a newer API server than TypeKro
+ * requires), so `[:::]` and `127.1` pass admission.
+ * {@link validateClickStackClickhouseHost} (render time) and the seed's runtime
+ * check are the authoritative ones.
+ *
+ * KRO carries it into the CRD only when it creates the CRD fresh (see the KRO
+ * caveat in the docs).
+ */
+export const CLICKSTACK_CLICKHOUSE_HOST_VALIDATION_RULE = "self.startsWith('[') ? self.matches('^[[][0-9A-Fa-f.]*:[0-9A-Fa-f:.]*[]]$') : " +
+    "self.matches('^[A-Za-z0-9._-]+$')";
+/**
+ * Check a concrete `clickhouse.host` by what breaks the `http://` / `tcp://`
+ * URLs it is built into, with a reason a person can act on. Accepts a short
+ * name, an FQDN (with or without a trailing dot), an IPv4 address and a
+ * bracketed IPv6 address, in any case.
+ *
+ * A bracketed host must be an IPv6 address by `net.isIPv6`. Any other host
+ * must be ASCII letters, digits, `.`, `-` and `_` only (so no `\`, which URL
+ * parsers read as a path separator, no percent-encoding and no non-ASCII),
+ * and must survive WHATWG URL parsing unchanged
+ * (`new URL('http://<host>/').hostname` equals the host, lower-cased), which
+ * refuses shorthand IPv4 such as `127.1`. Each of those would make consumers
+ * reach a different host from the one checked.
+ * The seed runs the same checks at runtime ({@link CLICKSTACK_CLICKHOUSE_HOST_URL_CHECK_SOURCE}).
+ *
+ * @returns A reason the host is unusable, or `undefined` when it is valid
+ */
+export function validateClickStackClickhouseHost(host) {
+    if (typeof host !== 'string' || host.length === 0)
+        return 'must be a non-empty string';
+    if (host.includes('://'))
+        return 'must not include a scheme (drop the "http://" or "tcp://")';
+    if (/[\t\n\v\f\r /?#@\\]/.test(host)) {
+        return 'must not contain whitespace, "/", "\\", "?", "#" or "@" (no path, query or userinfo)';
+    }
+    if (host.startsWith('[')) {
+        return host.endsWith(']') && isIPv6(host.slice(1, -1))
+            ? undefined
+            : 'must be a valid IPv6 address when it is in brackets, e.g. "[fd00::1]"';
+    }
+    if (host.includes('[') || host.includes(']')) {
+        return 'must not contain "[" or "]" except around an IPv6 address';
+    }
+    if (host.includes(':')) {
+        return (host.match(/:/g) ?? []).length > 1
+            ? 'looks like an IPv6 address: write it in brackets, e.g. "[fd00::1]"'
+            : 'must not include a port (set clickhouse.httpPort / clickhouse.nativePort instead)';
+    }
+    if (!/^[A-Za-z0-9._-]+$/.test(host)) {
+        return 'must contain only ASCII letters, digits, ".", "-" and "_" (or be a bracketed IPv6 address)';
+    }
+    let parsed;
+    try {
+        parsed = new URL(`http://${host}/`).hostname;
+    }
+    catch {
+        return 'is not a valid URL host';
+    }
+    if (parsed !== host.toLowerCase()) {
+        return `is not a plain host name: URL parsing reads it as ${JSON.stringify(parsed)}`;
+    }
+    return undefined;
+}
+/**
+ * The seed's runtime host check, as mongosh source: given the connection URL
+ * the CronJob carries (`http://<host>:<port>`), the reason its host would
+ * break the connection, or `null`. The same checks as
+ * {@link validateClickStackClickhouseHost}, with mongosh's Node `net` and
+ * `URL` (a unit test holds the two to one sample set). It exists because KRO
+ * 0.9.2 never adds the CRD rule to a CRD it already created, and the CRD rule
+ * is only syntactic anyway.
+ */
+export const CLICKSTACK_CLICKHOUSE_HOST_URL_CHECK_SOURCE = String.raw `(url) => {
+  const match = /^http:\/\/(.*):([0-9]+)$/.exec(url);
+  if (match === null) return 'is not of the form http://<host>:<port>';
+  const host = match[1];
+  if (host.length === 0) return 'has an empty host';
+  if (/[\t\n\v\f\r /?#@\\]/.test(host)) return 'has whitespace, "/", "\\", "?", "#" or "@" in its host';
+  if (host.startsWith('[')) return host.endsWith(']') && require('net').isIPv6(host.slice(1, -1)) ? null : 'has a bracketed host that is not a valid IPv6 address';
+  if (host.includes('[') || host.includes(']') || host.includes(':')) return 'has a scheme, a port or an unbracketed IPv6 address in its host';
+  if (!/^[A-Za-z0-9._-]+$/.test(host)) return 'has characters other than ASCII letters, digits, ".", "-" and "_" in its host';
+  let parsed;
+  try {
+    parsed = new URL('http://' + host + '/').hostname;
+  } catch (error) {
+    return 'has a host that is not a valid URL host';
+  }
+  if (parsed !== host.toLowerCase()) return 'has a host that URL parsing reads as ' + JSON.stringify(parsed);
+  return null;
+}`;
+/** Name of the HyperDX Team the bootstrap creates when `teamName` is not set. */
+export const DEFAULT_CLICKSTACK_TEAM_NAME = 'ClickStack';
+/**
+ * Resolve the build-time `teamName`: `undefined` means "leave the name alone"
+ * (only with `initialUser`, where HyperDX's registration names the Team).
+ *
+ * @throws Error when the name is empty or longer than HyperDX accepts (100)
+ */
+export function resolveClickStackTeamName(context, teamName, hasInitialUser) {
+    if (teamName === undefined)
+        return hasInitialUser ? undefined : DEFAULT_CLICKSTACK_TEAM_NAME;
+    if (typeof teamName !== 'string' || teamName.trim().length === 0 || teamName.length > 100) {
+        throw new Error(`${context}: teamName must be a non-empty string of at most 100 characters (HyperDX's own limit for a Team name).`);
+    }
+    return teamName;
+}
 /** `_id` of the marker document recording that initial-user bootstrap is done. */
 export const CLICKSTACK_INITIAL_USER_MARKER_ID = 'initial-user';
 /**
@@ -244,6 +357,13 @@ export function resolveClickStackInitialUser(context, chartSecretName, options)
  * from {@link clickStackInitialUserVersionValidationRule}, so a consumer who
  * sets an unaudited version on the custom resource at apply time is rejected by
  * ADMISSION, where there is no build to fail.
+ *
+ * KRO CAVEAT. KRO 0.9.2 compares no `x-kubernetes-validations` when it
+ * reconciles a CRD, so it adds that rule only to a CRD it creates fresh (or
+ * patches for some other, compared change), never to one that predates the
+ * rule. The Team-defaults seed therefore re-checks the chart version at
+ * runtime (`CLICKSTACK_CHART_VERSION`); `initialUser` and `hyperdxOidc` have
+ * only the build-time and CRD halves.
  */
 export const CLICKSTACK_INITIAL_USER_VALIDATED_CHART_VERSIONS = ['3.2.0'];
 /** HyperDX appVersion the registration contract above was verified against. */
@@ -264,7 +384,9 @@ export function isClickStackInitialUserValidatedChartVersion(version) {
  * This is the KRO-mode half of the allowlist: the rule becomes an
  * `x-kubernetes-validations` entry on the field, so the API server refuses a CR
  * carrying an unaudited version instead of admitting it and leaving the
- * CronJob to patch `teams.apiKey` on a schema nobody has read.
+ * CronJob to patch `teams.apiKey` on a schema nobody has read. Only on CRDs KRO
+ * creates fresh: see the KRO caveat on
+ * {@link CLICKSTACK_INITIAL_USER_VALIDATED_CHART_VERSIONS}.
  *
  * @returns A CEL expression over `self`, the submitted `spec.version`
  */

package/dist/factories/clickstack/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/factories/clickstack/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAE/B,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,wBAAwB,EACxB,qBAAqB,EACrB,4BAA4B,EAC5B,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AAGzC,OAAO,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,+EAA+E;AAC/E,uCAAuC;AACvC,+EAA+E;AAE/E;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,kFAAkF;IAClF,8BAA8B,EAAE,MAAM;IACtC,sEAAsE;IACtE,+BAA+B,EAAE,MAAM;IACvC,0EAA0E;IAC1E,cAAc,EAAE,8CAA8C;IAC9D,4DAA4D;IAC5D,8BAA8B,EAAE,MAAM;IACtC;;;OAGG;IACH,oBAAoB,EAAE,IAAI;CAClB,CAAC;AAEX,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E,MAAM,yBAAyB,GAAG;IAChC,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE;IACtD,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE;CAC5C,CAAC;AAEX,MAAM,UAAU,GAAG;IACjB,aAAa,EAAE,QAAQ;IACvB,MAAM,EAAE,QAAQ;IAChB,aAAa,EAAE,qCAAqC;CAC5C,CAAC;AA+QX;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAG,+BAA+B,CAAC;AAE5F;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAG,mBAAmB,CAAC;AAE1E,kFAAkF;AAClF,MAAM,CAAC,MAAM,iCAAiC,GAAG,cAAc,CAAC;AAEhE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAG,sBAAsB,CAAC;AAE/E;;;;;;;;GAQG;AACH,MAAM,+BAA+B,GAAG,0BAA0B,CAAC;AA8GnE;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAC1C,OAAe,EACf,eAAuB,EACvB,OAAsC;IAEtC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAE5C,kEAAkE;IAClE,sCAAsC;IACtC,MAAM,KAAK,GAAG,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,+EAA+E;YACvF,oFAAoF,CACvF,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,kEAAkE;IAClE,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,iFAAiF;YACzF,uEAAuE,eAAe,GAAG;YACzF,oFAAoF;YACpF,0FAA0F;YAC1F,iDAAiD,CACpD,CAAC;IACJ,CAAC;IAED,MAAM,4BAA4B,GAAG,OAAO,CAAC,4BAA4B,KAAK,IAAI,CAAC;IAEnF,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC5C,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC;QAChD,0EAA0E;QAC1E,uEAAuE;QACvE,MAAM,WAAW,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,wCAAwC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,mBAAmB;gBACvF,oBAAoB,WAAW,GAAG,CACrC,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,uCAAuC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,mBAAmB;gBACrF,wBAAwB,UAAU,GAAG,CACxC,CAAC;QACJ,CAAC;QACD,OAAO;YACL,KAAK;YACL,kBAAkB,EAAE,IAAI;YACxB,iBAAiB,EAAE,GAAG;YACtB,sEAAsE;YACtE,qEAAqE;YACrE,kBAAkB,EAAE,4CAA4C;YAChE,4BAA4B;SAC7B,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GACrB,OAAO,CAAC,iBAAiB,IAAI,4CAA4C,CAAC;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,wEAAwE;IACxE,yEAAyE;IACzE,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,mCAAmC,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,YAAY;YACxF,8CAA8C,+BAA+B,CAAC,MAAM,IAAI;YACxF,qFAAqF;YACrF,0FAA0F;YAC1F,mCAAmC,CACtC,CAAC;IACJ,CAAC;IACD,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;IACpE,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,mCAAmC,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,YAAY;YACxF,+BAA+B,kBAAkB,GAAG,CACvD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK;QACL,kBAAkB,EAAE,eAAe;QACnC,iBAAiB;QACjB,kBAAkB,EAAE,iBAAiB;QACrC,4BAA4B;KAC7B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,CAAC,MAAM,gDAAgD,GAAG,CAAC,OAAO,CAAU,CAAC;AAEnF,+EAA+E;AAC/E,MAAM,CAAC,MAAM,6CAA6C,GAAG,QAAQ,CAAC;AAEtE;;;;;GAKG;AACH,MAAM,UAAU,4CAA4C,CAAC,OAAe;IAC1E,OAAQ,gDAAsE,CAAC,QAAQ,CACrF,OAAO,CAAC,IAAI,EAAE,CACf,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,0CAA0C;IACxD,MAAM,OAAO,GAAG,gDAAgD,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAC/E,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CACxB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO,YAAY,OAAO,GAAG,CAAC;AAChC,CAAC;AA6FD,+EAA+E;AAC/E,+CAA+C;AAC/C,+EAA+E;AAE/E,MAAM,6BAA6B,GAAG;IACpC,wEAAwE;IACxE,IAAI,EAAE,QAAQ;IACd,4FAA4F;IAC5F,aAAa,EAAE,gBAAgB;IAC/B,wEAAwE;IACxE,WAAW,EAAE,gBAAgB;IAC7B,sGAAsG;IACtG,WAAW,EAAE,QAAQ;IACrB,sIAAsI;IACtI,WAAW,EAAE,QAAQ;IACrB,8FAA8F;IAC9F,cAAc,EAAE,QAAQ;CAChB,CAAC;AAEX,kGAAkG;AAClG,MAAM,CAAC,MAAM,qCAAqC,GAAG,iBAAiB,CAAC;AAEvE,uGAAuG;AACvG,MAAM,CAAC,MAAM,gCAAgC,GAAG,iBAAiB,CAAC;AAElE;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,WAAW,CAAC;AAEhE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC;QACE,WAAW,EACT,gJAAgJ;QAClJ,MAAM,EAAE,qCAAqC;QAC7C,KAAK,EAAE,uBAAuB;KAC/B;IACD;QACE,WAAW,EAAE,+CAA+C;QAC5D,MAAM,EAAE,gCAAgC;QACxC,KAAK,EAAE,uBAAuB;KAC/B;IACD;QACE,WAAW,EACT,sJAAsJ;QACxJ,MAAM,EAAE,8BAA8B;QACtC,KAAK,EAAE,oBAAoB;KAC5B;IACD;QACE,WAAW,EAAE,qCAAqC;QAClD,KAAK,EAAE,4BAA4B;KACpC;IACD;QACE,WAAW,EAAE,mDAAmD;QAChE,KAAK,EAAE,oBAAoB;KAC5B;IACD;QACE,WAAW,EAAE,6DAA6D;QAC1E,MAAM,EAAE,4BAA4B;QACpC,KAAK,EAAE,oBAAoB;KAC5B;IACD;QACE,WAAW,EAAE,gEAAgE;QAC7E,MAAM,EAAE,uBAAuB;QAC/B,KAAK,EAAE,wBAAwB;KAChC;IACD;QACE,WAAW,EAAE,iDAAiD;QAC9D,MAAM,EAAE,oCAAoC;QAC5C,KAAK,EAAE,wBAAwB;KAChC;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,qBAAqB,CAAC,0BAA0B,CAAC,CAAC;AAEvF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,mCAAmC,CAAC;AAE3E;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAC1E,IAAI,CAAC,MAAM;KACR,YAAY,CAAC,qBAAqB,CAAC,SAAS,CAAC;KAC7C,SAAS,CAAC,EAAE,OAAO,EAAE,qBAAqB,CAAC,OAAO,EAAE,CAAC,CACzD,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAAY;IACtD,MAAM,MAAM,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,MAAM,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACnG,CAAC;AACH,CAAC;AAED,MAAM,kBAAkB,GAAG;IACzB;;;OAGG;IACH,IAAI,EAAE,2BAA2B;IACjC,uDAAuD;IACvD,YAAY,EAAE,QAAQ;IACtB,wCAAwC;IACxC,UAAU,EAAE,QAAQ;IACpB,0EAA0E;IAC1E,oGAAoG;IACpG,yEAAyE;IACzE,oEAAoE;IACpE,uEAAuE;IACvE,sEAAsE;IACtE,wEAAwE;IACxE,gEAAgE;IAChE,oEAAoE;IACpE,kEAAkE;IAClE,+DAA+D;IAC/D,8EAA8E;IAC9E,UAAU,EAAE;QACV,GAAG,6BAA6B;QAChC,yJAAyJ;QACzJ,WAAW,EAAE,QAAQ;QACrB,4JAA4J;QAC5J,cAAc,EAAE,QAAQ;KACzB;IACD,yCAAyC;IACzC,UAAU,EAAE;QACV,WAAW,EAAE,gBAAgB;QAC7B,YAAY,EAAE,yBAAyB;QACvC,QAAQ,EAAE,UAAU;QACpB,oEAAoE;QACpE,cAAc,EAAE,QAAQ;KACzB;IACD,uEAAuE;IACvE,uEAAuE;IACvE,wEAAwE;IACxE,yEAAyE;IACzE,uEAAuE;IACvE,iEAAiE;IACjE,uEAAuE;IACvE,mEAAmE;IACnE,yEAAyE;IACzE,iEAAiE;IACjE,sEAAsE;IACtE,yCAAyC;CACjC,CAAC;AAEX,MAAM,8BAA8B,GAAG;IACrC,GAAG,kBAAkB;IACrB,UAAU,EAAE,6BAA6B;CACjC,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,IAAI,CAAC;IAClD,GAAG,kBAAkB;IACrB,4GAA4G;IAC5G,MAAM,EAAE,YAAY;CACrB,CAAC,CAAC;AAKH,uEAAuE;AACvE,MAAM,CAAC,MAAM,2CAA2C,GAAG,IAAI,CAAC;IAC9D,GAAG,8BAA8B;IACjC,iBAAiB,EAAE;QACjB,IAAI,EAAE,YAAY;QAClB,YAAY,EAAE,YAAY;KAC3B;CACF,CAAC,CAAC;AAMH;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAG,IAAI,CAAC;IAC/D,GAAG,kBAAkB;IACrB,4GAA4G;IAC5G,MAAM,EAAE,YAAY;IACpB,2EAA2E;IAC3E,QAAQ,EAAE,QAAQ;CACnB,CAAC,CAAC;AAMH,uEAAuE;AACvE,MAAM,CAAC,MAAM,wDAAwD,GAAG,IAAI,CAAC;IAC3E,GAAG,8BAA8B;IACjC,iBAAiB,EAAE;QACjB,IAAI,EAAE,YAAY;QAClB,YAAY,EAAE,YAAY;KAC3B;IACD,QAAQ,EAAE,QAAQ;CACnB,CAAC,CAAC;AAyBH,+EAA+E;AAC/E,kEAAkE;AAClE,+EAA+E;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,IAAI,CAAC;IAClD,oEAAoE;IACpE,KAAK,EAAE,SAAS;IAChB,+DAA+D;IAC/D,KAAK,EAAE,mCAAmC;IAC1C,qDAAqD;IACrD,UAAU,EAAE,QAAQ;IACpB,kBAAkB;IAClB,EAAE,EAAE;QACF,wDAAwD;QACxD,GAAG,EAAE,QAAQ;KACd;IACD,uFAAuF;IACvF,OAAO,EAAE;QACP,oDAAoD;QACpD,gBAAgB,EAAE,QAAQ;QAC1B,oDAAoD;QACpD,gBAAgB,EAAE,QAAQ;KAC3B;IACD,uCAAuC;IACvC,GAAG,EAAE;QACH,sDAAsD;QACtD,IAAI,EAAE,QAAQ;QACd,eAAe;QACf,OAAO,EAAE,gBAAgB;QACzB,gBAAgB;QAChB,OAAO,EAAE,gBAAgB;KAC1B;IACD;;;;;;OAMG;IACH,OAAO,EAAE;QACP,qBAAqB;QACrB,IAAI,EAAE,cAAc;QACpB,2DAA2D;QAC3D,WAAW,EAAE,8BAA8B;QAC3C,uEAAuE;QACvE,aAAa,EAAE,QAAQ;QACvB,uEAAuE;QACvE,YAAY,EAAE;YACZ,OAAO,EAAE,QAAQ;YACjB,SAAS,EAAE,QAAQ;YACnB,UAAU,EAAE,QAAQ;SACrB;QACD,uEAAuE;QACvE,kBAAkB,EAAE,SAAS;KAC9B;CACF,CAAC,CAAC;AAwBH;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,IAAI,CAAC;IACrD,6FAA6F;IAC7F,IAAI,EAAE,QAAQ;IACd,sEAAsE;IACtE,YAAY,EAAE,QAAQ;IACtB,wEAAwE;IACxE,UAAU,EAAE,QAAQ;IACpB;;;;;OAKG;IACH,WAAW,EAAE,QAAQ;IACrB;;;;;OAKG;IACH,YAAY,EAAE;QACZ,IAAI,EAAE,QAAQ;QACd,0DAA0D;QAC1D,MAAM,EAAE,QAAQ;KACjB;CACF,CAAC,CAAC;AAKH,uDAAuD;AACvD,MAAM,CAAC,MAAM,kCAAkC,GAAG,IAAI,CAAC;IACrD,gDAAgD;IAChD,KAAK,EAAE,SAAS;IAChB,wDAAwD;IACxD,MAAM,EAAE,SAAS;IACjB,KAAK,EAAE,mCAAmC;CAC3C,CAAC,CAAC;AAEH,+EAA+E;AAC/E,mCAAmC;AACnC,+EAA+E;AAE/E,uEAAuE;AACvE,MAAM,CAAC,MAAM,2CAA2C,GAAG,IAAI,CAAC;IAC9D,IAAI,EAAE,QAAQ;IACd,SAAS,EAAE,QAAQ;IACnB,GAAG,EAAE,QAAQ;CACd,CAAC,CAAC;AAEH,yEAAyE;AACzE,MAAM,CAAC,MAAM,6CAA6C,GAAG,IAAI,CAAC;IAChE,KAAK,EAAE,SAAS;CACjB,CAAC,CAAC;AAEH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,qCAAqC,GAAG,IAAI,CAAC;IACxD,IAAI,EAAE,QAAQ;IACd,SAAS,EAAE,QAAQ;IACnB,GAAG,EAAE,QAAQ;CACd,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,uCAAuC,GAAG,IAAI,CAAC;IAC1D,KAAK,EAAE,SAAS;CACjB,CAAC,CAAC;AAEH,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E,qEAAqE;AACrE,MAAM,CAAC,MAAM,oCAAoC,GAAG,IAAI,CAAC;IACvD,OAAO,EAAE,QAAQ;IACjB,YAAY,EAAE,QAAQ;IACtB,MAAM,EAAE,QAAQ;IAChB,WAAW,EAAE,QAAQ;IACrB,KAAK,EAAE,QAAQ;CAChB,CAAC,CAAC;AAKH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAI,CAAC;IACpD,IAAI,EAAE,QAAQ;IACd,YAAY,EAAE,QAAQ;IACtB,UAAU,EAAE,QAAQ;IACpB,iBAAiB,EAAE,QAAQ;IAC3B,sBAAsB,EAAE,QAAQ;IAChC,qFAAqF;IACrF,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAA8B;IAC1D,8EAA8E;IAC9E,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,EAA+C;IACjF;;;;;OAKG;IACH,gBAAgB,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,EAA2C;IAChF,KAAK,EAAE,QAAQ;CAChB,CAAC,CAAC;AAKH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,IAAI,CAAC;IACvD,IAAI,EAAE,QAAQ;IACd,YAAY,EAAE,QAAQ;IACtB,UAAU,EAAE,QAAQ;IACpB,iBAAiB,EAAE,QAAQ;IAC3B,sBAAsB,EAAE,QAAQ;IAChC,+FAA+F;IAC/F,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAiC;IAC7D,KAAK,EAAE,QAAQ;CAChB,CAAC,CAAC;AAKH,+EAA+E;AAC/E,2BAA2B;AAC3B,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC;IAC9C,sEAAsE;IACtE,IAAI,EAAE,QAAQ;IACd,wBAAwB;IACxB,SAAS,EAAE,QAAQ;IACnB,4DAA4D;IAC5D,cAAc,EAAE,QAAQ;IACxB,oEAAoE;IACpE,mBAAmB,EAAE,QAAQ;IAC7B,wCAAwC;IACxC,QAAQ,EAAE,QAAQ;IAClB,uCAAuC;IACvC,gBAAgB,EAAE,QAAQ;IAC1B,mCAAmC;IACnC,YAAY,EAAE,QAAQ;CACvB,CAAC,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/factories/clickstack/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAE/B,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,wBAAwB,EACxB,qBAAqB,EACrB,4BAA4B,EAC5B,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AAGzC,OAAO,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,+EAA+E;AAC/E,uCAAuC;AACvC,+EAA+E;AAE/E;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,kFAAkF;IAClF,8BAA8B,EAAE,MAAM;IACtC,sEAAsE;IACtE,+BAA+B,EAAE,MAAM;IACvC,0EAA0E;IAC1E,cAAc,EAAE,8CAA8C;IAC9D,4DAA4D;IAC5D,8BAA8B,EAAE,MAAM;IACtC;;;OAGG;IACH,oBAAoB,EAAE,IAAI;CAClB,CAAC;AAEX,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E,MAAM,yBAAyB,GAAG;IAChC,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE;IACtD,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE;CAC5C,CAAC;AAEX,MAAM,UAAU,GAAG;IACjB,aAAa,EAAE,QAAQ;IACvB,MAAM,EAAE,QAAQ;IAChB,aAAa,EAAE,qCAAqC;CAC5C,CAAC;AA+QX;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAG,+BAA+B,CAAC;AAE5F;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAG,mBAAmB,CAAC;AAE1E;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0CAA0C,GACrD,gFAAgF;IAChF,mCAAmC,CAAC;AAEtC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gCAAgC,CAAC,IAAa;IAC5D,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,4BAA4B,CAAC;IACvF,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,4DAA4D,CAAC;IAC9F,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,OAAO,sFAAsF,CAAC;IAChG,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACpD,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,uEAAuE,CAAC;IAC9E,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,OAAO,2DAA2D,CAAC;IACrE,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;YACxC,CAAC,CAAC,oEAAoE;YACtE,CAAC,CAAC,mFAAmF,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,OAAO,4FAA4F,CAAC;IACtG,CAAC;IACD,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,yBAAyB,CAAC;IACnC,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QAClC,OAAO,qDAAqD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;IACvF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;EAiBnE,CAAC;AAEH,iFAAiF;AACjF,MAAM,CAAC,MAAM,4BAA4B,GAAG,YAAY,CAAC;AAEzD;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAAe,EACf,QAA4B,EAC5B,cAAuB;IAEvB,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,4BAA4B,CAAC;IAC7F,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC1F,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,wGAAwG,CACnH,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,MAAM,iCAAiC,GAAG,cAAc,CAAC;AAEhE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAG,sBAAsB,CAAC;AAE/E;;;;;;;;GAQG;AACH,MAAM,+BAA+B,GAAG,0BAA0B,CAAC;AA8GnE;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAC1C,OAAe,EACf,eAAuB,EACvB,OAAsC;IAEtC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAE5C,kEAAkE;IAClE,sCAAsC;IACtC,MAAM,KAAK,GAAG,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,+EAA+E;YACvF,oFAAoF,CACvF,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,kEAAkE;IAClE,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,iFAAiF;YACzF,uEAAuE,eAAe,GAAG;YACzF,oFAAoF;YACpF,0FAA0F;YAC1F,iDAAiD,CACpD,CAAC;IACJ,CAAC;IAED,MAAM,4BAA4B,GAAG,OAAO,CAAC,4BAA4B,KAAK,IAAI,CAAC;IAEnF,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC5C,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC;QAChD,0EAA0E;QAC1E,uEAAuE;QACvE,MAAM,WAAW,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,wCAAwC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,mBAAmB;gBACvF,oBAAoB,WAAW,GAAG,CACrC,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,uCAAuC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,mBAAmB;gBACrF,wBAAwB,UAAU,GAAG,CACxC,CAAC;QACJ,CAAC;QACD,OAAO;YACL,KAAK;YACL,kBAAkB,EAAE,IAAI;YACxB,iBAAiB,EAAE,GAAG;YACtB,sEAAsE;YACtE,qEAAqE;YACrE,kBAAkB,EAAE,4CAA4C;YAChE,4BAA4B;SAC7B,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GACrB,OAAO,CAAC,iBAAiB,IAAI,4CAA4C,CAAC;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,wEAAwE;IACxE,yEAAyE;IACzE,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,mCAAmC,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,YAAY;YACxF,8CAA8C,+BAA+B,CAAC,MAAM,IAAI;YACxF,qFAAqF;YACrF,0FAA0F;YAC1F,mCAAmC,CACtC,CAAC;IACJ,CAAC;IACD,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;IACpE,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,mCAAmC,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,YAAY;YACxF,+BAA+B,kBAAkB,GAAG,CACvD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK;QACL,kBAAkB,EAAE,eAAe;QACnC,iBAAiB;QACjB,kBAAkB,EAAE,iBAAiB;QACrC,4BAA4B;KAC7B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,CAAC,MAAM,gDAAgD,GAAG,CAAC,OAAO,CAAU,CAAC;AAEnF,+EAA+E;AAC/E,MAAM,CAAC,MAAM,6CAA6C,GAAG,QAAQ,CAAC;AAEtE;;;;;GAKG;AACH,MAAM,UAAU,4CAA4C,CAAC,OAAe;IAC1E,OAAQ,gDAAsE,CAAC,QAAQ,CACrF,OAAO,CAAC,IAAI,EAAE,CACf,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,0CAA0C;IACxD,MAAM,OAAO,GAAG,gDAAgD,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAC/E,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CACxB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO,YAAY,OAAO,GAAG,CAAC;AAChC,CAAC;AA0ID,+EAA+E;AAC/E,+CAA+C;AAC/C,+EAA+E;AAE/E,MAAM,6BAA6B,GAAG;IACpC,wEAAwE;IACxE,IAAI,EAAE,QAAQ;IACd,4FAA4F;IAC5F,aAAa,EAAE,gBAAgB;IAC/B,wEAAwE;IACxE,WAAW,EAAE,gBAAgB;IAC7B,sGAAsG;IACtG,WAAW,EAAE,QAAQ;IACrB,sIAAsI;IACtI,WAAW,EAAE,QAAQ;IACrB,8FAA8F;IAC9F,cAAc,EAAE,QAAQ;CAChB,CAAC;AAEX,kGAAkG;AAClG,MAAM,CAAC,MAAM,qCAAqC,GAAG,iBAAiB,CAAC;AAEvE,uGAAuG;AACvG,MAAM,CAAC,MAAM,gCAAgC,GAAG,iBAAiB,CAAC;AAElE;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,WAAW,CAAC;AAEhE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC;QACE,WAAW,EACT,gJAAgJ;QAClJ,MAAM,EAAE,qCAAqC;QAC7C,KAAK,EAAE,uBAAuB;KAC/B;IACD;QACE,WAAW,EAAE,+CAA+C;QAC5D,MAAM,EAAE,gCAAgC;QACxC,KAAK,EAAE,uBAAuB;KAC/B;IACD;QACE,WAAW,EACT,sJAAsJ;QACxJ,MAAM,EAAE,8BAA8B;QACtC,KAAK,EAAE,oBAAoB;KAC5B;IACD;QACE,WAAW,EAAE,qCAAqC;QAClD,KAAK,EAAE,4BAA4B;KACpC;IACD;QACE,WAAW,EAAE,mDAAmD;QAChE,KAAK,EAAE,oBAAoB;KAC5B;IACD;QACE,WAAW,EAAE,6DAA6D;QAC1E,MAAM,EAAE,4BAA4B;QACpC,KAAK,EAAE,oBAAoB;KAC5B;IACD;QACE,WAAW,EAAE,gEAAgE;QAC7E,MAAM,EAAE,uBAAuB;QAC/B,KAAK,EAAE,wBAAwB;KAChC;IACD;QACE,WAAW,EAAE,iDAAiD;QAC9D,MAAM,EAAE,oCAAoC;QAC5C,KAAK,EAAE,wBAAwB;KAChC;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,qBAAqB,CAAC,0BAA0B,CAAC,CAAC;AAEvF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,mCAAmC,CAAC;AAE3E;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAC1E,IAAI,CAAC,MAAM;KACR,YAAY,CAAC,qBAAqB,CAAC,SAAS,CAAC;KAC7C,SAAS,CAAC,EAAE,OAAO,EAAE,qBAAqB,CAAC,OAAO,EAAE,CAAC,CACzD,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAAY;IACtD,MAAM,MAAM,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,MAAM,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,OAAO,EAAE,CAChF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,kBAAkB,GAAG;IACzB;;;OAGG;IACH,IAAI,EAAE,2BAA2B;IACjC,uDAAuD;IACvD,YAAY,EAAE,QAAQ;IACtB,wCAAwC;IACxC,UAAU,EAAE,QAAQ;IACpB,0EAA0E;IAC1E,oGAAoG;IACpG,yEAAyE;IACzE,oEAAoE;IACpE,uEAAuE;IACvE,sEAAsE;IACtE,wEAAwE;IACxE,gEAAgE;IAChE,oEAAoE;IACpE,kEAAkE;IAClE,+DAA+D;IAC/D,8EAA8E;IAC9E,UAAU,EAAE;QACV,GAAG,6BAA6B;QAChC,yJAAyJ;QACzJ,WAAW,EAAE,QAAQ;QACrB,4JAA4J;QAC5J,cAAc,EAAE,QAAQ;KACzB;IACD,yCAAyC;IACzC,UAAU,EAAE;QACV,WAAW,EAAE,gBAAgB;QAC7B,YAAY,EAAE,yBAAyB;QACvC,QAAQ,EAAE,UAAU;QACpB,oEAAoE;QACpE,cAAc,EAAE,QAAQ;KACzB;IACD,uEAAuE;IACvE,uEAAuE;IACvE,wEAAwE;IACxE,yEAAyE;IACzE,uEAAuE;IACvE,iEAAiE;IACjE,uEAAuE;IACvE,mEAAmE;IACnE,yEAAyE;IACzE,iEAAiE;IACjE,sEAAsE;IACtE,yCAAyC;CACjC,CAAC;AAEX,MAAM,8BAA8B,GAAG;IACrC,GAAG,kBAAkB;IACrB,UAAU,EAAE,6BAA6B;CACjC,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,IAAI,CAAC;IAClD,GAAG,kBAAkB;IACrB,4GAA4G;IAC5G,MAAM,EAAE,YAAY;CACrB,CAAC,CAAC;AAKH,uEAAuE;AACvE,MAAM,CAAC,MAAM,2CAA2C,GAAG,IAAI,CAAC;IAC9D,GAAG,8BAA8B;IACjC,iBAAiB,EAAE;QACjB,IAAI,EAAE,YAAY;QAClB,YAAY,EAAE,YAAY;KAC3B;CACF,CAAC,CAAC;AAMH;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAG,IAAI,CAAC;IAC/D,GAAG,kBAAkB;IACrB,4GAA4G;IAC5G,MAAM,EAAE,YAAY;IACpB,2EAA2E;IAC3E,QAAQ,EAAE,QAAQ;CACnB,CAAC,CAAC;AAMH,uEAAuE;AACvE,MAAM,CAAC,MAAM,wDAAwD,GAAG,IAAI,CAAC;IAC3E,GAAG,8BAA8B;IACjC,iBAAiB,EAAE;QACjB,IAAI,EAAE,YAAY;QAClB,YAAY,EAAE,YAAY;KAC3B;IACD,QAAQ,EAAE,QAAQ;CACnB,CAAC,CAAC;AAyBH,+EAA+E;AAC/E,kEAAkE;AAClE,+EAA+E;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,IAAI,CAAC;IAClD,oEAAoE;IACpE,KAAK,EAAE,SAAS;IAChB,+DAA+D;IAC/D,KAAK,EAAE,mCAAmC;IAC1C,qDAAqD;IACrD,UAAU,EAAE,QAAQ;IACpB,kBAAkB;IAClB,EAAE,EAAE;QACF,wDAAwD;QACxD,GAAG,EAAE,QAAQ;KACd;IACD,uFAAuF;IACvF,OAAO,EAAE;QACP,oDAAoD;QACpD,gBAAgB,EAAE,QAAQ;QAC1B,oDAAoD;QACpD,gBAAgB,EAAE,QAAQ;KAC3B;IACD,uCAAuC;IACvC,GAAG,EAAE;QACH,sDAAsD;QACtD,IAAI,EAAE,QAAQ;QACd,eAAe;QACf,OAAO,EAAE,gBAAgB;QACzB,gBAAgB;QAChB,OAAO,EAAE,gBAAgB;KAC1B;IACD;;;;;;OAMG;IACH,OAAO,EAAE;QACP,qBAAqB;QACrB,IAAI,EAAE,cAAc;QACpB,2DAA2D;QAC3D,WAAW,EAAE,8BAA8B;QAC3C,uEAAuE;QACvE,aAAa,EAAE,QAAQ;QACvB,uEAAuE;QACvE,YAAY,EAAE;YACZ,OAAO,EAAE,QAAQ;YACjB,SAAS,EAAE,QAAQ;YACnB,UAAU,EAAE,QAAQ;SACrB;QACD,uEAAuE;QACvE,kBAAkB,EAAE,SAAS;KAC9B;CACF,CAAC,CAAC;AAwBH;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,IAAI,CAAC;IACrD,6FAA6F;IAC7F,IAAI,EAAE,QAAQ;IACd,sEAAsE;IACtE,YAAY,EAAE,QAAQ;IACtB,wEAAwE;IACxE,UAAU,EAAE,QAAQ;IACpB;;;;;OAKG;IACH,WAAW,EAAE,QAAQ;IACrB;;;;;OAKG;IACH,YAAY,EAAE;QACZ,IAAI,EAAE,QAAQ;QACd,0DAA0D;QAC1D,MAAM,EAAE,QAAQ;KACjB;CACF,CAAC,CAAC;AAKH,uDAAuD;AACvD,MAAM,CAAC,MAAM,kCAAkC,GAAG,IAAI,CAAC;IACrD,gDAAgD;IAChD,KAAK,EAAE,SAAS;IAChB,wDAAwD;IACxD,MAAM,EAAE,SAAS;IACjB,KAAK,EAAE,mCAAmC;CAC3C,CAAC,CAAC;AAEH,+EAA+E;AAC/E,mCAAmC;AACnC,+EAA+E;AAE/E,uEAAuE;AACvE,MAAM,CAAC,MAAM,2CAA2C,GAAG,IAAI,CAAC;IAC9D,IAAI,EAAE,QAAQ;IACd,SAAS,EAAE,QAAQ;IACnB,GAAG,EAAE,QAAQ;CACd,CAAC,CAAC;AAEH,yEAAyE;AACzE,MAAM,CAAC,MAAM,6CAA6C,GAAG,IAAI,CAAC;IAChE,KAAK,EAAE,SAAS;CACjB,CAAC,CAAC;AAEH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,qCAAqC,GAAG,IAAI,CAAC;IACxD,IAAI,EAAE,QAAQ;IACd,SAAS,EAAE,QAAQ;IACnB,GAAG,EAAE,QAAQ;CACd,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,uCAAuC,GAAG,IAAI,CAAC;IAC1D,KAAK,EAAE,SAAS;CACjB,CAAC,CAAC;AAEH,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E,qEAAqE;AACrE,MAAM,CAAC,MAAM,oCAAoC,GAAG,IAAI,CAAC;IACvD,OAAO,EAAE,QAAQ;IACjB,YAAY,EAAE,QAAQ;IACtB,MAAM,EAAE,QAAQ;IAChB,WAAW,EAAE,QAAQ;IACrB,KAAK,EAAE,QAAQ;CAChB,CAAC,CAAC;AAKH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAI,CAAC;IACpD,IAAI,EAAE,QAAQ;IACd,YAAY,EAAE,QAAQ;IACtB,UAAU,EAAE,QAAQ;IACpB,iBAAiB,EAAE,QAAQ;IAC3B,sBAAsB,EAAE,QAAQ;IAChC,qFAAqF;IACrF,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAA8B;IAC1D,8EAA8E;IAC9E,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,EAA+C;IACjF;;;;;OAKG;IACH,gBAAgB,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,EAA2C;IAChF,KAAK,EAAE,QAAQ;CAChB,CAAC,CAAC;AAKH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,IAAI,CAAC;IACvD,IAAI,EAAE,QAAQ;IACd,YAAY,EAAE,QAAQ;IACtB,UAAU,EAAE,QAAQ;IACpB,iBAAiB,EAAE,QAAQ;IAC3B,sBAAsB,EAAE,QAAQ;IAChC,+FAA+F;IAC/F,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAiC;IAC7D,KAAK,EAAE,QAAQ;CAChB,CAAC,CAAC;AAKH,+EAA+E;AAC/E,2BAA2B;AAC3B,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC;IAC9C,sEAAsE;IACtE,IAAI,EAAE,QAAQ;IACd,wBAAwB;IACxB,SAAS,EAAE,QAAQ;IACnB,4DAA4D;IAC5D,cAAc,EAAE,QAAQ;IACxB,oEAAoE;IACpE,mBAAmB,EAAE,QAAQ;IAC7B,wCAAwC;IACxC,QAAQ,EAAE,QAAQ;IAClB,uCAAuC;IACvC,gBAAgB,EAAE,QAAQ;IAC1B,mCAAmC;IACnC,YAAY,EAAE,QAAQ;CACvB,CAAC,CAAC"}

package/dist/factories/clickstack/utils/helm-values-mapper.d.ts

@@ -71,8 +71,7 @@ export declare const DEFAULT_CLICKSTACK_GATEWAY_ENDPOINT = "http://clickstack-ot
  * the contrib distribution (it carries the k8s receivers the presets enable).
  */
 export declare const DEFAULT_K8S_TELEMETRY_COLLECTOR_IMAGE = "otel/opentelemetry-collector-contrib";
-/** Name of the HyperDX connection emitted into `defaultConnections`/`defaultSources`. */
-export declare const CLICKSTACK_CONNECTION_NAME = "External ClickHouse";
+export { CLICKSTACK_CONNECTION_NAME } from './team-defaults.js';
 /**
  * The ClickStack image runs under the OpAMP supervisor. Its built-in remote
  * configuration declares the OTLP receiver but, without an overlay, does not
@@ -120,6 +119,76 @@ export interface ClickStackK8sTelemetryValues {
     daemonset: OtelCollectorMappedHelmValues;
     deployment: OtelCollectorMappedHelmValues;
 }
+/**
+ * With `clickhouse.enabled: false` the chart still renders its default
+ * `defaultConnections`/`defaultSources` pointing at the (nonexistent) bundled
+ * ClickHouse Service, so both must be overridden for external mode. The
+ * sources below mirror the chart defaults (values.yaml `defaultSources`,
+ * chart 3.2.0) with the connection renamed and the database a Helm template.
+ */
+/**
+ * The connection and database the Team bootstrap seeds, derived exactly as
+ * `defaultConnections` / `defaultSources` derive them: `http://<host>:<httpPort>`,
+ * the UI user (`appUsername`, else `username`, else `default`) and the OTel
+ * database. Concrete values in direct mode, CEL in KRO mode. The password is
+ * not here: the CronJob reads it from the chart-owned Secret.
+ */
+export declare function clickStackDefaultConnectionTarget(config: ClickStackBootstrapRuntimeConfig): {
+    host: string;
+    username: string;
+    database: string;
+};
+/**
+ * The chart value HyperDX's `DEFAULT_CONNECTIONS` password is read from in
+ * `secretValues` mode, as a Helm template. The chart runs `tpl` over
+ * `hyperdx.deployment.defaultConnections` with the release's merged values
+ * (its own default uses `{{ .Values.hyperdx.secrets.CLICKHOUSE_APP_PASSWORD }}`),
+ * so the caller's `valuesFrom` fragment supplies the password while TypeKro
+ * supplies the topology. `toJson` quotes and escapes it as a JSON string.
+ */
+export declare const CLICKSTACK_APP_PASSWORD_VALUE_TEMPLATE = "{{ .Values.hyperdx.secrets.CLICKHOUSE_APP_PASSWORD | toJson }}";
+/** Key of the values document in the `secretValues` default-connections ConfigMap. */
+export declare const CLICKSTACK_DEFAULT_CONNECTIONS_VALUES_KEY = "values.yaml";
+/**
+ * Where, in the HelmRelease's own `spec.values`, TypeKro puts the non-secret
+ * values HyperDX's default connection and sources are built from: host URL,
+ * port and user under `.defaultConnection`, the OTel database under
+ * `.defaultSources`. The chart ignores the key; the templates below read it.
+ */
+export declare const CLICKSTACK_DEFAULTS_VALUES_PATH = "typekro.clickstack";
+/** @deprecated Use {@link CLICKSTACK_DEFAULTS_VALUES_PATH}; kept for the `.defaultConnection` path. */
+export declare const CLICKSTACK_DEFAULT_CONNECTION_VALUES_PATH = "typekro.clickstack.defaultConnection";
+/**
+ * HyperDX's `defaultConnections`, in BOTH credential modes: a Helm template
+ * the chart runs `tpl` over (with the release's merged values) when it sets
+ * `DEFAULT_CONNECTIONS`. Every field is serialised by `toJson`: the host,
+ * port and user from {@link CLICKSTACK_DEFAULTS_VALUES_PATH}, the password
+ * from `hyperdx.secrets.CLICKHOUSE_APP_PASSWORD` (rendered by TypeKro inline,
+ * supplied by the values fragment with `secretValues`). Nothing user-supplied
+ * is ever interpolated into JSON by hand, so a quote, backslash or space in
+ * any field stays valid JSON, in direct and KRO mode alike.
+ */
+export declare const CLICKSTACK_DEFAULT_CONNECTIONS_TEMPLATE: string;
+/**
+ * HyperDX's `defaultSources`: {@link CLICKSTACK_DEFAULT_SOURCES} with every
+ * `databaseName` a `toJson` template of the OTel database, for the same
+ * reason as {@link CLICKSTACK_DEFAULT_CONNECTIONS_TEMPLATE}.
+ */
+export declare const CLICKSTACK_DEFAULT_SOURCES_TEMPLATE: string;
+/**
+ * The `secretValues`-mode values document that sets
+ * `hyperdx.deployment.defaultConnections` to
+ * {@link CLICKSTACK_DEFAULT_CONNECTIONS_TEMPLATE}.
+ *
+ * WHY A SEPARATE DOCUMENT. TypeKro renders no `defaultConnections` in
+ * `spec.values` in this mode, because Flux applies `spec.values` last and it
+ * would override a `defaultConnections` in the caller's fragment. Without one
+ * the chart falls back to its own "Local ClickHouse" at the bundled ClickHouse
+ * Service TypeKro disables, which HyperDX's registration (`initialUser`) would
+ * provision. The composition hands this document to Flux as a ConfigMap
+ * `valuesFrom` entry BEFORE the caller's Secret, so the fragment still wins.
+ */
+export declare const CLICKSTACK_SECRET_VALUES_DEFAULT_CONNECTIONS_DOCUMENT: string;
 /**
  * Map typed ClickStack runtime config + build options into official
  * clickstack chart values.

package/dist/factories/clickstack/utils/helm-values-mapper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helm-values-mapper.d.ts","sourceRoot":"","sources":["../../../../src/factories/clickstack/utils/helm-values-mapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAOH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAGxE,OAAO,EAAE,KAAK,uBAAuB,EAAyB,MAAM,uBAAuB,CAAC;AAC5F,OAAO,EACL,KAAK,yBAAyB,EAI/B,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAEV,gCAAgC,EAEhC,oBAAoB,EACpB,4BAA4B,EAC5B,0BAA0B,EAC1B,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,aAAa,CAAC;AAErB,kDAAkD;AAClD,eAAO,MAAM,4BAA4B,eAAe,CAAC;AAEzD,0DAA0D;AAC1D,eAAO,MAAM,sCAAsC,yBAAyB,CAAC;AAE7E;;;;;;;;GAQG;AACH,eAAO,MAAM,mCAAmC,uEACsB,CAAC;AAEvE;;;;GAIG;AACH,eAAO,MAAM,qCAAqC,yCAAyC,CAAC;AAE5F,yFAAyF;AACzF,eAAO,MAAM,0BAA0B,wBAAwB,CAAC;AAEhE;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,oCAAoC,EAAE,uBAQlD,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,kCAAkC,QAE7C,CAAC;AAEH,2EAA2E;AAC3E,MAAM,WAAW,6BAA6B;IAC5C,mEAAmE;IACnE,SAAS,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;IACpC,sFAAsF;IACtF,MAAM,CAAC,EAAE,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;IAClD,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,QAAQ,GAAG,cAAc,CAAC;IAC7C;;;;OAIG;IACH,OAAO,CAAC,EAAE,yBAAyB,CAAC;CACrC;AAED,yDAAyD;AACzD,MAAM,WAAW,4BAA4B;IAC3C,SAAS,EAAE,6BAA6B,CAAC;IACzC,UAAU,EAAE,6BAA6B,CAAC;CAC3C;AA2ND;;;;;;;GAOG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,gCAAgC,EACxC,OAAO,GAAE,6BAAkC,GAC1C,0BAA0B,CAyK5B;AAMD,2EAA2E;AAC3E,MAAM,WAAW,mCAAmC;IAClD,SAAS,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;KAAE,CAAC;IACrE,UAAU,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;KAAE,CAAC;CACvE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,4BAA4B,EACpC,OAAO,GAAE,mCAAwC,GAChD,4BAA4B,CAgH9B"}
+{"version":3,"file":"helm-values-mapper.d.ts","sourceRoot":"","sources":["../../../../src/factories/clickstack/utils/helm-values-mapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAOH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAGxE,OAAO,EAAE,KAAK,uBAAuB,EAAyB,MAAM,uBAAuB,CAAC;AAE5F,OAAO,EACL,KAAK,yBAAyB,EAI/B,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAEV,gCAAgC,EAEhC,oBAAoB,EACpB,4BAA4B,EAC5B,0BAA0B,EAC1B,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,aAAa,CAAC;AAErB,kDAAkD;AAClD,eAAO,MAAM,4BAA4B,eAAe,CAAC;AAEzD,0DAA0D;AAC1D,eAAO,MAAM,sCAAsC,yBAAyB,CAAC;AAE7E;;;;;;;;GAQG;AACH,eAAO,MAAM,mCAAmC,uEACsB,CAAC;AAEvE;;;;GAIG;AACH,eAAO,MAAM,qCAAqC,yCAAyC,CAAC;AAE5F,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAEhE;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,oCAAoC,EAAE,uBAQlD,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,kCAAkC,QAE7C,CAAC;AAEH,2EAA2E;AAC3E,MAAM,WAAW,6BAA6B;IAC5C,mEAAmE;IACnE,SAAS,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;IACpC,sFAAsF;IACtF,MAAM,CAAC,EAAE,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;IAClD,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,QAAQ,GAAG,cAAc,CAAC;IAC7C;;;;OAIG;IACH,OAAO,CAAC,EAAE,yBAAyB,CAAC;CACrC;AAED,yDAAyD;AACzD,MAAM,WAAW,4BAA4B;IAC3C,SAAS,EAAE,6BAA6B,CAAC;IACzC,UAAU,EAAE,6BAA6B,CAAC;CAC3C;AAmHD;;;;;;GAMG;AAGH;;;;;;GAMG;AACH,wBAAgB,iCAAiC,CAAC,MAAM,EAAE,gCAAgC,GAAG;IAC3F,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAoBA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,sCAAsC,mEACe,CAAC;AAEnE,sFAAsF;AACtF,eAAO,MAAM,yCAAyC,gBAAgB,CAAC;AAEvE;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B,uBAAuB,CAAC;AACpE,uGAAuG;AACvG,eAAO,MAAM,yCAAyC,yCAAyD,CAAC;AAKhH;;;;;;;;;GASG;AACH,eAAO,MAAM,uCAAuC,QAGhD,CAAC;AAEL;;;;GAIG;AACH,eAAO,MAAM,mCAAmC,QAEkD,CAAC;AAEnG;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,qDAAqD,QAMtD,CAAC;AA4Bb;;;;;;;GAOG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,gCAAgC,EACxC,OAAO,GAAE,6BAAkC,GAC1C,0BAA0B,CA6I5B;AAMD,2EAA2E;AAC3E,MAAM,WAAW,mCAAmC;IAClD,SAAS,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;KAAE,CAAC;IACrE,UAAU,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;KAAE,CAAC;CACvE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,4BAA4B,EACpC,OAAO,GAAE,mCAAwC,GAChD,4BAA4B,CAgH9B"}

package/dist/factories/clickstack/utils/helm-values-mapper.js

@@ -52,6 +52,7 @@ import { Cel } from '../../../core/references/cel.js';
 import { isCelExpression, isKubernetesRef } from '../../../utils/type-guards.js';
 import { CLICKSTACK_MONGO_NAME_SUFFIX, CLICKSTACK_MONGO_PORT } from '../resources/mongo.js';
 import { renderCollectorConfig } from './collector-config.js';
+import { CLICKSTACK_CONNECTION_NAME, CLICKSTACK_DEFAULT_SOURCES } from './team-defaults.js';
 import { clickStackQueueClaimName, persistentQueueConfigFragment, renderPersistentQueueValues, } from './storage.js';
 /** Default namespace for a ClickStack install. */
 export const DEFAULT_CLICKSTACK_NAMESPACE = 'clickstack';
@@ -73,8 +74,7 @@ export const DEFAULT_CLICKSTACK_GATEWAY_ENDPOINT = 'http://clickstack-otel-colle
  * the contrib distribution (it carries the k8s receivers the presets enable).
  */
 export const DEFAULT_K8S_TELEMETRY_COLLECTOR_IMAGE = 'otel/opentelemetry-collector-contrib';
-/** Name of the HyperDX connection emitted into `defaultConnections`/`defaultSources`. */
-export const CLICKSTACK_CONNECTION_NAME = 'External ClickHouse';
+export { CLICKSTACK_CONNECTION_NAME } from './team-defaults.js';
 /**
  * The ClickStack image runs under the OpAMP supervisor. Its built-in remote
  * configuration declares the OTLP receiver but, without an overlay, does not
@@ -213,98 +213,110 @@ function mergeOverridesWithPinsLast(base, overrides, pins) {
  * `defaultConnections`/`defaultSources` pointing at the (nonexistent) bundled
  * ClickHouse Service, so both must be overridden for external mode. The
  * sources below mirror the chart defaults (values.yaml `defaultSources`,
- * chart 3.2.0) with the connection renamed and the database parameterized
- * (`%s` slots filled per mode).
+ * chart 3.2.0) with the connection renamed and the database a Helm template.
  */
-const DEFAULT_SOURCES_FORMAT = JSON.stringify([
-    {
-        from: { databaseName: '%s', tableName: 'otel_logs' },
-        kind: 'log',
-        timestampValueExpression: 'Timestamp',
-        name: 'Logs',
-        displayedTimestampValueExpression: 'Timestamp',
-        implicitColumnExpression: 'Body',
-        serviceNameExpression: 'ServiceName',
-        bodyExpression: 'Body',
-        eventAttributesExpression: 'LogAttributes',
-        resourceAttributesExpression: 'ResourceAttributes',
-        defaultTableSelectExpression: 'Timestamp,ServiceName,SeverityText,Body',
-        severityTextExpression: 'SeverityText',
-        traceIdExpression: 'TraceId',
-        spanIdExpression: 'SpanId',
-        connection: CLICKSTACK_CONNECTION_NAME,
-        traceSourceId: 'Traces',
-        sessionSourceId: 'Sessions',
-        metricSourceId: 'Metrics',
-    },
-    {
-        from: { databaseName: '%s', tableName: 'otel_traces' },
-        kind: 'trace',
-        timestampValueExpression: 'Timestamp',
-        name: 'Traces',
-        displayedTimestampValueExpression: 'Timestamp',
-        implicitColumnExpression: 'SpanName',
-        serviceNameExpression: 'ServiceName',
-        bodyExpression: 'SpanName',
-        eventAttributesExpression: 'SpanAttributes',
-        resourceAttributesExpression: 'ResourceAttributes',
-        defaultTableSelectExpression: 'Timestamp,ServiceName,StatusCode,round(Duration/1e6),SpanName',
-        traceIdExpression: 'TraceId',
-        spanIdExpression: 'SpanId',
-        durationExpression: 'Duration',
-        durationPrecision: 9,
-        parentSpanIdExpression: 'ParentSpanId',
-        spanNameExpression: 'SpanName',
-        spanKindExpression: 'SpanKind',
-        statusCodeExpression: 'StatusCode',
-        statusMessageExpression: 'StatusMessage',
-        connection: CLICKSTACK_CONNECTION_NAME,
-        logSourceId: 'Logs',
-        sessionSourceId: 'Sessions',
-        metricSourceId: 'Metrics',
-    },
-    {
-        from: { databaseName: '%s', tableName: '' },
-        kind: 'metric',
-        timestampValueExpression: 'TimeUnix',
-        name: 'Metrics',
-        resourceAttributesExpression: 'ResourceAttributes',
-        metricTables: {
-            gauge: 'otel_metrics_gauge',
-            histogram: 'otel_metrics_histogram',
-            sum: 'otel_metrics_sum',
-            _id: '682586a8b1f81924e628e808',
-            id: '682586a8b1f81924e628e808',
-        },
-        connection: CLICKSTACK_CONNECTION_NAME,
-        logSourceId: 'Logs',
-        traceSourceId: 'Traces',
-        sessionSourceId: 'Sessions',
-    },
-    {
-        from: { databaseName: '%s', tableName: 'hyperdx_sessions' },
-        kind: 'session',
-        timestampValueExpression: 'TimestampTime',
-        name: 'Sessions',
-        displayedTimestampValueExpression: 'Timestamp',
-        implicitColumnExpression: 'Body',
-        serviceNameExpression: 'ServiceName',
-        bodyExpression: 'Body',
-        eventAttributesExpression: 'LogAttributes',
-        resourceAttributesExpression: 'ResourceAttributes',
-        defaultTableSelectExpression: 'Timestamp,ServiceName,SeverityText,Body',
-        severityTextExpression: 'SeverityText',
-        traceIdExpression: 'TraceId',
-        spanIdExpression: 'SpanId',
-        connection: CLICKSTACK_CONNECTION_NAME,
-        logSourceId: 'Logs',
-        traceSourceId: 'Traces',
-        metricSourceId: 'Metrics',
-    },
-]);
-/** `defaultConnections` JSON with %s slots: host, httpPort, httpPort, username, password. */
-const DEFAULT_CONNECTIONS_FORMAT = `[{"name":"${CLICKSTACK_CONNECTION_NAME}","host":"http://%s:%s","port":%s,` +
-    '"username":"%s","password":"%s"}]';
+// The JSON itself is a Helm template, built below (CLICKSTACK_DEFAULT_SOURCES_TEMPLATE).
+/**
+ * The connection and database the Team bootstrap seeds, derived exactly as
+ * `defaultConnections` / `defaultSources` derive them: `http://<host>:<httpPort>`,
+ * the UI user (`appUsername`, else `username`, else `default`) and the OTel
+ * database. Concrete values in direct mode, CEL in KRO mode. The password is
+ * not here: the CronJob reads it from the chart-owned Secret.
+ */
+export function clickStackDefaultConnectionTarget(config) {
+    const ch = config.clickhouse;
+    if (isKubernetesRef(config.name) || isKubernetesRef(ch)) {
+        const httpPortStr = Cel.expr(`string(${hasSchemaPath('schema.spec.clickhouse.httpPort')} ? schema.spec.clickhouse.httpPort : 8123)`);
+        return {
+            host: Cel.template('http://%s:%s', ch.host, httpPortStr),
+            username: Cel.expr(`${hasSchemaPath('schema.spec.clickhouse.appUsername')} ? schema.spec.clickhouse.appUsername : ` +
+                `(${hasSchemaPath('schema.spec.clickhouse.username')} ? schema.spec.clickhouse.username : "default")`),
+            database: resolve(ch.database, 'default'),
+        };
+    }
+    return {
+        host: `http://${ch.host}:${ch.httpPort ?? 8123}`,
+        username: ch.appUsername ?? ch.username ?? 'default',
+        database: ch.database ?? 'default',
+    };
+}
+/**
+ * The chart value HyperDX's `DEFAULT_CONNECTIONS` password is read from in
+ * `secretValues` mode, as a Helm template. The chart runs `tpl` over
+ * `hyperdx.deployment.defaultConnections` with the release's merged values
+ * (its own default uses `{{ .Values.hyperdx.secrets.CLICKHOUSE_APP_PASSWORD }}`),
+ * so the caller's `valuesFrom` fragment supplies the password while TypeKro
+ * supplies the topology. `toJson` quotes and escapes it as a JSON string.
+ */
+export const CLICKSTACK_APP_PASSWORD_VALUE_TEMPLATE = '{{ .Values.hyperdx.secrets.CLICKHOUSE_APP_PASSWORD | toJson }}';
+/** Key of the values document in the `secretValues` default-connections ConfigMap. */
+export const CLICKSTACK_DEFAULT_CONNECTIONS_VALUES_KEY = 'values.yaml';
+/**
+ * Where, in the HelmRelease's own `spec.values`, TypeKro puts the non-secret
+ * values HyperDX's default connection and sources are built from: host URL,
+ * port and user under `.defaultConnection`, the OTel database under
+ * `.defaultSources`. The chart ignores the key; the templates below read it.
+ */
+export const CLICKSTACK_DEFAULTS_VALUES_PATH = 'typekro.clickstack';
+/** @deprecated Use {@link CLICKSTACK_DEFAULTS_VALUES_PATH}; kept for the `.defaultConnection` path. */
+export const CLICKSTACK_DEFAULT_CONNECTION_VALUES_PATH = `${CLICKSTACK_DEFAULTS_VALUES_PATH}.defaultConnection`;
+/** A Helm template that serialises one chart value as JSON. */
+const toJsonTemplate = (path) => `{{ .Values.${path} | toJson }}`;
+/**
+ * HyperDX's `defaultConnections`, in BOTH credential modes: a Helm template
+ * the chart runs `tpl` over (with the release's merged values) when it sets
+ * `DEFAULT_CONNECTIONS`. Every field is serialised by `toJson`: the host,
+ * port and user from {@link CLICKSTACK_DEFAULTS_VALUES_PATH}, the password
+ * from `hyperdx.secrets.CLICKHOUSE_APP_PASSWORD` (rendered by TypeKro inline,
+ * supplied by the values fragment with `secretValues`). Nothing user-supplied
+ * is ever interpolated into JSON by hand, so a quote, backslash or space in
+ * any field stays valid JSON, in direct and KRO mode alike.
+ */
+export const CLICKSTACK_DEFAULT_CONNECTIONS_TEMPLATE = (() => {
+    const connection = `${CLICKSTACK_DEFAULTS_VALUES_PATH}.defaultConnection`;
+    return `[{"name":${JSON.stringify(CLICKSTACK_CONNECTION_NAME)},"host":${toJsonTemplate(`${connection}.host`)},"port":${toJsonTemplate(`${connection}.port`)},"username":${toJsonTemplate(`${connection}.username`)},"password":${CLICKSTACK_APP_PASSWORD_VALUE_TEMPLATE}}]`;
+})();
+/**
+ * HyperDX's `defaultSources`: {@link CLICKSTACK_DEFAULT_SOURCES} with every
+ * `databaseName` a `toJson` template of the OTel database, for the same
+ * reason as {@link CLICKSTACK_DEFAULT_CONNECTIONS_TEMPLATE}.
+ */
+export const CLICKSTACK_DEFAULT_SOURCES_TEMPLATE = JSON.stringify(CLICKSTACK_DEFAULT_SOURCES).replaceAll('"%s"', toJsonTemplate(`${CLICKSTACK_DEFAULTS_VALUES_PATH}.defaultSources.database`));
+/**
+ * The `secretValues`-mode values document that sets
+ * `hyperdx.deployment.defaultConnections` to
+ * {@link CLICKSTACK_DEFAULT_CONNECTIONS_TEMPLATE}.
+ *
+ * WHY A SEPARATE DOCUMENT. TypeKro renders no `defaultConnections` in
+ * `spec.values` in this mode, because Flux applies `spec.values` last and it
+ * would override a `defaultConnections` in the caller's fragment. Without one
+ * the chart falls back to its own "Local ClickHouse" at the bundled ClickHouse
+ * Service TypeKro disables, which HyperDX's registration (`initialUser`) would
+ * provision. The composition hands this document to Flux as a ConfigMap
+ * `valuesFrom` entry BEFORE the caller's Secret, so the fragment still wins.
+ */
+export const CLICKSTACK_SECRET_VALUES_DEFAULT_CONNECTIONS_DOCUMENT = [
+    'hyperdx:',
+    '  deployment:',
+    '    defaultConnections: |',
+    `      ${CLICKSTACK_DEFAULT_CONNECTIONS_TEMPLATE}`,
+    '',
+].join('\n');
+/**
+ * The typed values the templates read (see {@link CLICKSTACK_DEFAULTS_VALUES_PATH}):
+ * the same host, port, user and database the seed uses.
+ */
+function clickStackDefaultsValues(config) {
+    const target = clickStackDefaultConnectionTarget(config);
+    const ch = config.clickhouse;
+    const port = isKubernetesRef(config.name) || isKubernetesRef(ch)
+        ? Cel.expr(`${hasSchemaPath('schema.spec.clickhouse.httpPort')} ? schema.spec.clickhouse.httpPort : 8123`)
+        : (ch.httpPort ?? 8123);
+    return {
+        defaultConnection: { host: target.host, port, username: target.username },
+        defaultSources: { database: target.database },
+    };
+}
 // ============================================================================
 // clickstackBootstrap values
 // ============================================================================
@@ -328,7 +340,6 @@ export function mapClickStackConfigToHelmValues(config, options = {}) {
         // Ports as string()-wrapped CEL so they compose into mixed string
         // templates (KRO mixed templates want string-typed segments).
         const nativePortStr = Cel.expr(`string(${hasSchemaPath('schema.spec.clickhouse.nativePort')} ? schema.spec.clickhouse.nativePort : 9000)`);
-        const httpPortStr = Cel.expr(`string(${hasSchemaPath('schema.spec.clickhouse.httpPort')} ? schema.spec.clickhouse.httpPort : 8123)`);
         hyperdxConfig.CLICKHOUSE_ENDPOINT = Cel.template('tcp://%s:%s?dial_timeout=10s', ch.host, nativePortStr);
         hyperdxConfig.CLICKHOUSE_SERVER_ENDPOINT = Cel.template('%s:%s', ch.host, nativePortStr);
         hyperdxConfig.CLICKHOUSE_USER = resolve(ch.username, 'default');
@@ -341,24 +352,20 @@ export function mapClickStackConfigToHelmValues(config, options = {}) {
         if (credentialSource === 'inline') {
             const inlineConfig = config;
             const inlineClickhouse = inlineConfig.clickhouse;
-            const appUsername = Cel.expr(`${hasSchemaPath('schema.spec.clickhouse.appUsername')} ? schema.spec.clickhouse.appUsername : ` +
-                `(${hasSchemaPath('schema.spec.clickhouse.username')} ? schema.spec.clickhouse.username : "default")`);
             const appPassword = Cel.expr(`${hasSchemaPath('schema.spec.clickhouse.appPassword')} ? schema.spec.clickhouse.appPassword : ` +
                 `(${hasSchemaPath('schema.spec.clickhouse.password')} ? schema.spec.clickhouse.password : "")`);
             hyperdxSecrets.CLICKHOUSE_PASSWORD = resolve(inlineClickhouse.password, '');
             hyperdxSecrets.CLICKHOUSE_APP_PASSWORD = appPassword;
             hyperdxSecrets.HYPERDX_API_KEY = inlineConfig.apiKey;
-            hyperdxDeployment.defaultConnections = Cel.template(DEFAULT_CONNECTIONS_FORMAT, ch.host, httpPortStr, httpPortStr, appUsername, appPassword);
+            hyperdxDeployment.defaultConnections = CLICKSTACK_DEFAULT_CONNECTIONS_TEMPLATE;
         }
         hyperdxDeployment.replicas = graphOptional('schema.spec.hyperdx.replicas');
         hyperdxDeployment.resources = graphOptional('schema.spec.hyperdx.resources');
         hyperdxDeployment.image = graphOptional('schema.spec.hyperdx.image');
-        const database = resolve(ch.database, 'default');
-        hyperdxDeployment.defaultSources = Cel.template(DEFAULT_SOURCES_FORMAT, database, database, database, database);
+        hyperdxDeployment.defaultSources = CLICKSTACK_DEFAULT_SOURCES_TEMPLATE;
     }
     else {
         const nativePort = ch.nativePort ?? 9000;
-        const httpPort = ch.httpPort ?? 8123;
         const database = ch.database ?? 'default';
         const username = ch.username ?? 'default';
         hyperdxConfig.CLICKHOUSE_ENDPOINT = `tcp://${ch.host}:${nativePort}?dial_timeout=10s`;
@@ -374,25 +381,16 @@ export function mapClickStackConfigToHelmValues(config, options = {}) {
             const inlineConfig = config;
             const inlineClickhouse = inlineConfig.clickhouse;
             const password = inlineClickhouse.password ?? '';
-            const appUsername = inlineClickhouse.appUsername ?? username;
             const appPassword = inlineClickhouse.appPassword ?? password;
             hyperdxSecrets.CLICKHOUSE_PASSWORD = password;
             hyperdxSecrets.CLICKHOUSE_APP_PASSWORD = appPassword;
             hyperdxSecrets.HYPERDX_API_KEY = inlineConfig.apiKey;
-            hyperdxDeployment.defaultConnections = JSON.stringify([
-                {
-                    name: CLICKSTACK_CONNECTION_NAME,
-                    host: `http://${ch.host}:${httpPort}`,
-                    port: httpPort,
-                    username: appUsername,
-                    password: appPassword,
-                },
-            ]);
+            hyperdxDeployment.defaultConnections = CLICKSTACK_DEFAULT_CONNECTIONS_TEMPLATE;
         }
         setIfDefined(hyperdxDeployment, 'replicas', config.hyperdx?.replicas);
         setIfDefined(hyperdxDeployment, 'resources', config.hyperdx?.resources);
         setIfDefined(hyperdxDeployment, 'image', config.hyperdx?.image);
-        hyperdxDeployment.defaultSources = DEFAULT_SOURCES_FORMAT.replace(/%s/g, () => database);
+        hyperdxDeployment.defaultSources = CLICKSTACK_DEFAULT_SOURCES_TEMPLATE;
     }
     const values = {
         hyperdx: {
@@ -400,6 +398,9 @@ export function mapClickStackConfigToHelmValues(config, options = {}) {
             ...(credentialSource === 'inline' ? { secrets: hyperdxSecrets } : {}),
             deployment: hyperdxDeployment,
         },
+        // The non-secret values the defaultConnections / defaultSources templates
+        // read (both credential modes).
+        typekro: { clickstack: clickStackDefaultsValues(config) },
     };
     // Hard pins (see module doc): external-only build-around + the status
     // contract's naming anchor. Merged AFTER every passthrough so they always