typekro 0.4.0 → 0.5.0

package/dist/core/runtime-patches/crd-patcher.js

@@ -0,0 +1,124 @@
+/**
+ * CRD Patcher Utilities
+ *
+ * Provides utilities to patch existing CRDs in a Kubernetes cluster to fix
+ * schema validation issues that occur with newer Kubernetes versions (1.33+).
+ *
+ * This is useful when CRDs were installed before the schema fix was available,
+ * and you need to update them without deleting and recreating.
+ */
+import { ensureError } from '../errors.js';
+import { createBunCompatibleApiextensionsV1Api } from '../kubernetes/bun-api-client.js';
+import { getErrorStatusCode } from '../kubernetes/errors.js';
+import { getComponentLogger } from '../logging/index.js';
+import { generateSchemaFixPatches, schemaFieldNeedsFix } from './crd-schema-fix.js';
+const logger = getComponentLogger('crd-patcher');
+/**
+ * Check if a CRD needs the schema fix
+ */
+export function crdNeedsSchemaFix(crd) {
+    if (!crd || typeof crd !== 'object') {
+        return false;
+    }
+    const spec = crd.spec;
+    if (!spec || typeof spec !== 'object') {
+        return false;
+    }
+    const versions = spec.versions;
+    if (!Array.isArray(versions)) {
+        return false;
+    }
+    for (const version of versions) {
+        if (version &&
+            typeof version === 'object' &&
+            version.schema &&
+            typeof version.schema === 'object') {
+            const schema = version.schema;
+            if (schema.openAPIV3Schema &&
+                schemaFieldNeedsFix(schema.openAPIV3Schema)) {
+                return true;
+            }
+        }
+    }
+    return false;
+}
+/**
+ * Patch a CRD in the cluster to fix schema validation issues
+ *
+ * @param kubeConfig - Kubernetes configuration
+ * @param crdName - Name of the CRD to patch (e.g., 'helmreleases.helm.toolkit.fluxcd.io')
+ * @returns true if the CRD was patched, false if no patch was needed
+ */
+export async function patchCRDSchema(kubeConfig, crdName) {
+    const apiextensionsApi = createBunCompatibleApiextensionsV1Api(kubeConfig);
+    try {
+        // Read the current CRD
+        const crd = await apiextensionsApi.readCustomResourceDefinition({ name: crdName });
+        if (!crdNeedsSchemaFix(crd)) {
+            logger.debug(`CRD ${crdName} does not need schema fix`);
+            return false;
+        }
+        // Generate patches for each version
+        const patches = [];
+        const versions = crd.spec?.versions ?? [];
+        for (let i = 0; i < versions.length; i++) {
+            const version = versions[i];
+            const openAPIV3Schema = version?.schema?.openAPIV3Schema;
+            if (openAPIV3Schema) {
+                const basePath = `/spec/versions/${i}/schema/openAPIV3Schema`;
+                patches.push(...generateSchemaFixPatches(openAPIV3Schema, basePath));
+            }
+        }
+        if (patches.length === 0) {
+            logger.debug(`No patches needed for CRD ${crdName}`);
+            return false;
+        }
+        logger.warn(`Patching CRD ${crdName} schema with ${patches.length} patches for K8s 1.33+ compatibility`);
+        // Apply the patches using JSON Patch
+        await apiextensionsApi.patchCustomResourceDefinition({
+            name: crdName,
+            body: patches,
+        });
+        logger.warn(`CRD ${crdName} schema patched successfully`);
+        return true;
+    }
+    catch (error) {
+        // If CRD doesn't exist, that's fine
+        if (getErrorStatusCode(error) === 404) {
+            logger.debug(`CRD ${crdName} does not exist, skipping patch`);
+            return false;
+        }
+        throw error;
+    }
+}
+/**
+ * Patch all Flux CRDs that need the schema fix
+ *
+ * @param kubeConfig - Kubernetes configuration
+ * @returns Number of CRDs that were patched
+ */
+export async function patchFluxCRDSchemas(kubeConfig) {
+    const fluxCRDs = [
+        'helmreleases.helm.toolkit.fluxcd.io',
+        'helmrepositories.source.toolkit.fluxcd.io',
+        'helmcharts.source.toolkit.fluxcd.io',
+        'kustomizations.kustomize.toolkit.fluxcd.io',
+        'gitrepositories.source.toolkit.fluxcd.io',
+        'ocirepositories.source.toolkit.fluxcd.io',
+        'buckets.source.toolkit.fluxcd.io',
+    ];
+    let patchedCount = 0;
+    for (const crdName of fluxCRDs) {
+        try {
+            const patched = await patchCRDSchema(kubeConfig, crdName);
+            if (patched) {
+                patchedCount++;
+            }
+        }
+        catch (error) {
+            logger.warn(`Failed to patch CRD ${crdName}: ${ensureError(error).message}, continuing...`);
+        }
+    }
+    return patchedCount;
+}
+//# sourceMappingURL=crd-patcher.js.map

package/dist/core/runtime-patches/crd-patcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crd-patcher.js","sourceRoot":"","sources":["../../../src/core/runtime-patches/crd-patcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,qCAAqC,EAAE,MAAM,iCAAiC,CAAC;AACxF,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAEpF,MAAM,MAAM,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;AAEjD;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,IAAI,GAAI,GAA+B,CAAC,IAAI,CAAC;IACnD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAI,IAAgC,CAAC,QAAQ,CAAC;IAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IACE,OAAO;YACP,OAAO,OAAO,KAAK,QAAQ;YAC1B,OAAmC,CAAC,MAAM;YAC3C,OAAQ,OAAmC,CAAC,MAAM,KAAK,QAAQ,EAC/D,CAAC;YACD,MAAM,MAAM,GAAI,OAAmC,CAAC,MAAiC,CAAC;YACtF,IACE,MAAM,CAAC,eAAe;gBACtB,mBAAmB,CAAC,MAAM,CAAC,eAA0C,CAAC,EACtE,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAA0B,EAC1B,OAAe;IAEf,MAAM,gBAAgB,GAAG,qCAAqC,CAAC,UAAU,CAAC,CAAC;IAE3E,IAAI,CAAC;QACH,uBAAuB;QACvB,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,4BAA4B,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAEnF,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,KAAK,CAAC,OAAO,OAAO,2BAA2B,CAAC,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,oCAAoC;QACpC,MAAM,OAAO,GAAmD,EAAE,CAAC;QACnE,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC;QAE1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,eAAe,GAAG,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC;YACzD,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,yBAAyB,CAAC;gBAC9D,OAAO,CAAC,IAAI,CACV,GAAG,wBAAwB,CAAC,eAA0C,EAAE,QAAQ,CAAC,CAClF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,KAAK,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;YACrD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,CAAC,IAAI,CACT,gBAAgB,OAAO,gBAAgB,OAAO,CAAC,MAAM,sCAAsC,CAC5F,CAAC;QAEF,qCAAqC;QACrC,MAAM,gBAAgB,CAAC,6BAA6B,CAAC;YACnD,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,OAAO,OAAO,8BAA8B,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,oCAAoC;QACpC,IAAI,kBAAkB,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;YACtC,MAAM,CAAC,KAAK,CAAC,OAAO,OAAO,iCAAiC,CAAC,CAAC;YAC9D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,UAA0B;IAClE,MAAM,QAAQ,GAAG;QACf,qCAAqC;QACrC,2CAA2C;QAC3C,qCAAqC;QACrC,4CAA4C;QAC5C,0CAA0C;QAC1C,0CAA0C;QAC1C,kCAAkC;KACnC,CAAC;IAEF,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC1D,IAAI,OAAO,EAAE,CAAC;gBACZ,YAAY,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,uBAAuB,OAAO,KAAK,WAAW,CAAC,KAAK,CAAC,CAAC,OAAO,iBAAiB,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC"}

package/dist/core/{utils → runtime-patches}/crd-schema-fix.d.ts

@@ -19,7 +19,7 @@
  *
  * @example
  * ```typescript
- * import { fixCRDSchemaForK8s133 } from '../../../core/utils/crd-schema-fix.js';
+ * import { fixCRDSchemaForK8s133 } from '../../../core/runtime-patches/crd-schema-fix.js';
  *
  * // In a yamlFile transform or custom deployment logic:
  * const fixedManifests = manifests.map(m => fixCRDSchemaForK8s133(m));
@@ -33,7 +33,7 @@
  *
  * @example
  * ```typescript
- * import { needsCRDSchemaFix, fixCRDSchemaForK8s133 } from '../../../core/utils/crd-schema-fix.js';
+ * import { needsCRDSchemaFix, fixCRDSchemaForK8s133 } from '../../../core/runtime-patches/crd-schema-fix.js';
  *
  * // Only apply fix if needed
  * const transform = (manifest) => {
@@ -45,6 +45,18 @@
  * ```
  */
 import type { KubernetesResource } from '../types/kubernetes.js';
+/**
+ * Known field paths that need x-kubernetes-preserve-unknown-fields: true
+ * These are fields that accept arbitrary user-defined values (like Helm values)
+ */
+/**
+ * Known field paths that need x-kubernetes-preserve-unknown-fields: true
+ * These are fields that accept arbitrary user-defined values (like Helm values)
+ *
+ * Shared across crd-schema-fix.ts (manifest transform), crd-patcher.ts (live cluster patching),
+ * and yaml-file.ts (CRD JSON patching after deployment).
+ */
+export declare const FIELDS_NEEDING_PRESERVE_UNKNOWN: Set<string>;
 /**
  * Result of checking if a CRD needs schema fixes
  */
@@ -56,6 +68,31 @@ export interface CRDSchemaCheckResult {
     /** CRD name if available */
     crdName?: string;
 }
+/**
+ * Recursively check if a schema node needs the preserve-unknown-fields fix.
+ *
+ * Used by crd-patcher.ts for fast boolean checks before generating patches.
+ *
+ * @param obj - Schema node to check
+ * @param fieldName - Field name for known-field matching
+ * @returns true if this node or any descendant needs the fix
+ */
+export declare function schemaFieldNeedsFix(obj: any, fieldName?: string): boolean;
+/**
+ * Generate JSON patch operations to fix a CRD schema node.
+ *
+ * Used by crd-patcher.ts (live cluster patching) and yaml-file.ts (post-deployment CRD fixing).
+ *
+ * @param obj - Schema node to generate patches for
+ * @param basePath - JSON pointer base path (e.g., `/spec/versions/0/schema/openAPIV3Schema`)
+ * @param fieldName - Field name for known-field matching
+ * @returns Array of JSON patch operations
+ */
+export declare function generateSchemaFixPatches(obj: any, basePath: string, fieldName?: string): Array<{
+    op: string;
+    path: string;
+    value: unknown;
+}>;
 /**
  * Check if a CRD schema has issues that need fixing for Kubernetes 1.33+
  *

package/dist/core/runtime-patches/crd-schema-fix.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crd-schema-fix.d.ts","sourceRoot":"","sources":["../../../src/core/runtime-patches/crd-schema-fix.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAGH,OAAO,KAAK,EAAe,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAI9E;;;GAGG;AACH;;;;;;GAMG;AACH,eAAO,MAAM,+BAA+B,aAI1C,CAAC;AAEH;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,sCAAsC;IACtC,QAAQ,EAAE,OAAO,CAAC;IAClB,4CAA4C;IAC5C,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,4BAA4B;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CA0CzE;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,GACjB,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC,CAmDrD;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,oBAAoB,CAuEpF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,kBAAkB,CA0FtF;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,kBAAkB,EAAE,GAAG,kBAAkB,EAAE,CAE5F;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,kBAAkB,GAAG,kBAAkB,CAc3F;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,kBAAkB,EAAE,GAAG,kBAAkB,EAAE,CAEjG"}

package/dist/core/{utils → runtime-patches}/crd-schema-fix.js

@@ -19,7 +19,7 @@
  *
  * @example
  * ```typescript
- * import { fixCRDSchemaForK8s133 } from '../../../core/utils/crd-schema-fix.js';
+ * import { fixCRDSchemaForK8s133 } from '../../../core/runtime-patches/crd-schema-fix.js';
  *
  * // In a yamlFile transform or custom deployment logic:
  * const fixedManifests = manifests.map(m => fixCRDSchemaForK8s133(m));
@@ -33,7 +33,7 @@
  *
  * @example
  * ```typescript
- * import { needsCRDSchemaFix, fixCRDSchemaForK8s133 } from '../../../core/utils/crd-schema-fix.js';
+ * import { needsCRDSchemaFix, fixCRDSchemaForK8s133 } from '../../../core/runtime-patches/crd-schema-fix.js';
  *
  * // Only apply fix if needed
  * const transform = (manifest) => {
@@ -50,11 +50,113 @@ const logger = getComponentLogger('crd-schema-fix');
  * Known field paths that need x-kubernetes-preserve-unknown-fields: true
  * These are fields that accept arbitrary user-defined values (like Helm values)
  */
-const FIELDS_NEEDING_PRESERVE_UNKNOWN = new Set([
+/**
+ * Known field paths that need x-kubernetes-preserve-unknown-fields: true
+ * These are fields that accept arbitrary user-defined values (like Helm values)
+ *
+ * Shared across crd-schema-fix.ts (manifest transform), crd-patcher.ts (live cluster patching),
+ * and yaml-file.ts (CRD JSON patching after deployment).
+ */
+export const FIELDS_NEEDING_PRESERVE_UNKNOWN = new Set([
     'values', // HelmRelease spec.values
     'valuesFrom', // HelmRelease spec.valuesFrom items
     'postRenderers', // HelmRelease spec.postRenderers
 ]);
+/**
+ * Recursively check if a schema node needs the preserve-unknown-fields fix.
+ *
+ * Used by crd-patcher.ts for fast boolean checks before generating patches.
+ *
+ * @param obj - Schema node to check
+ * @param fieldName - Field name for known-field matching
+ * @returns true if this node or any descendant needs the fix
+ */
+export function schemaFieldNeedsFix(obj, fieldName) {
+    if (!obj || typeof obj !== 'object') {
+        return false;
+    }
+    // Check if this field needs the fix
+    if (fieldName &&
+        FIELDS_NEEDING_PRESERVE_UNKNOWN.has(fieldName) &&
+        obj.type === 'object' &&
+        !obj['x-kubernetes-preserve-unknown-fields']) {
+        return true;
+    }
+    // Check if x-kubernetes-preserve-unknown-fields is used without type
+    if (obj['x-kubernetes-preserve-unknown-fields'] === true && !obj.type) {
+        return true;
+    }
+    // Recursively check properties
+    if (obj.properties) {
+        for (const [propName, prop] of Object.entries(obj.properties)) {
+            if (schemaFieldNeedsFix(prop, propName)) {
+                return true;
+            }
+        }
+    }
+    // Check additionalProperties
+    if (obj.additionalProperties && typeof obj.additionalProperties === 'object') {
+        if (schemaFieldNeedsFix(obj.additionalProperties)) {
+            return true;
+        }
+    }
+    // Check items (for arrays)
+    if (obj.items && schemaFieldNeedsFix(obj.items)) {
+        return true;
+    }
+    return false;
+}
+/**
+ * Generate JSON patch operations to fix a CRD schema node.
+ *
+ * Used by crd-patcher.ts (live cluster patching) and yaml-file.ts (post-deployment CRD fixing).
+ *
+ * @param obj - Schema node to generate patches for
+ * @param basePath - JSON pointer base path (e.g., `/spec/versions/0/schema/openAPIV3Schema`)
+ * @param fieldName - Field name for known-field matching
+ * @returns Array of JSON patch operations
+ */
+export function generateSchemaFixPatches(obj, basePath, fieldName) {
+    const patches = [];
+    if (!obj || typeof obj !== 'object') {
+        return patches;
+    }
+    // Fix: Add x-kubernetes-preserve-unknown-fields to known fields that need it
+    if (fieldName &&
+        FIELDS_NEEDING_PRESERVE_UNKNOWN.has(fieldName) &&
+        obj.type === 'object' &&
+        !obj['x-kubernetes-preserve-unknown-fields']) {
+        patches.push({
+            op: 'add',
+            path: `${basePath}/x-kubernetes-preserve-unknown-fields`,
+            value: true,
+        });
+    }
+    // Fix: Add type: object when x-kubernetes-preserve-unknown-fields is used without type
+    if (obj['x-kubernetes-preserve-unknown-fields'] === true && !obj.type) {
+        patches.push({
+            op: 'add',
+            path: `${basePath}/type`,
+            value: 'object',
+        });
+    }
+    // Recursively process properties
+    if (obj.properties) {
+        for (const [propName, prop] of Object.entries(obj.properties)) {
+            const propPath = `${basePath}/properties/${propName}`;
+            patches.push(...generateSchemaFixPatches(prop, propPath, propName));
+        }
+    }
+    // Process additionalProperties
+    if (obj.additionalProperties && typeof obj.additionalProperties === 'object') {
+        patches.push(...generateSchemaFixPatches(obj.additionalProperties, `${basePath}/additionalProperties`));
+    }
+    // Process items (for arrays)
+    if (obj.items) {
+        patches.push(...generateSchemaFixPatches(obj.items, `${basePath}/items`));
+    }
+    return patches;
+}
 /**
  * Check if a CRD schema has issues that need fixing for Kubernetes 1.33+
  *
@@ -79,32 +181,33 @@ export function needsCRDSchemaFix(manifest) {
         if (!obj || typeof obj !== 'object') {
             return;
         }
+        const schema = obj;
         // Check if this object has x-kubernetes-preserve-unknown-fields but no type
-        if (obj['x-kubernetes-preserve-unknown-fields'] === true && !obj.type) {
+        if (schema['x-kubernetes-preserve-unknown-fields'] === true && !schema.type) {
             issues.push(`${fieldPath}: has x-kubernetes-preserve-unknown-fields without type`);
         }
         // Check if this is a known field that needs x-kubernetes-preserve-unknown-fields
         if (fieldName && FIELDS_NEEDING_PRESERVE_UNKNOWN.has(fieldName)) {
-            if (!obj.type) {
+            if (!schema.type) {
                 issues.push(`${fieldPath}: known field '${fieldName}' missing type`);
             }
-            if (!obj['x-kubernetes-preserve-unknown-fields']) {
+            if (!schema['x-kubernetes-preserve-unknown-fields']) {
                 issues.push(`${fieldPath}: known field '${fieldName}' missing x-kubernetes-preserve-unknown-fields`);
             }
         }
         // Recursively check all properties
-        if (obj.properties) {
-            for (const [propName, prop] of Object.entries(obj.properties)) {
+        if (schema.properties && typeof schema.properties === 'object') {
+            for (const [propName, prop] of Object.entries(schema.properties)) {
                 checkSchemaProperties(prop, `${fieldPath}.properties.${propName}`, propName);
             }
         }
         // Check additionalProperties
-        if (obj.additionalProperties && typeof obj.additionalProperties === 'object') {
-            checkSchemaProperties(obj.additionalProperties, `${fieldPath}.additionalProperties`);
+        if (schema.additionalProperties && typeof schema.additionalProperties === 'object') {
+            checkSchemaProperties(schema.additionalProperties, `${fieldPath}.additionalProperties`);
         }
         // Check items (for arrays)
-        if (obj.items) {
-            checkSchemaProperties(obj.items, `${fieldPath}.items`);
+        if (schema.items) {
+            checkSchemaProperties(schema.items, `${fieldPath}.items`);
         }
     }
     // Check each version's schema
@@ -139,7 +242,7 @@ export function fixCRDSchemaForK8s133(manifest) {
         return manifest;
     }
     // Deep clone to avoid mutating the original
-    const fixedCrd = JSON.parse(JSON.stringify(crd));
+    const fixedCrd = structuredClone(crd);
     const crdName = crd.metadata?.name || 'unknown';
     // Track what changes were made for logging
     const changes = [];
@@ -148,9 +251,10 @@ export function fixCRDSchemaForK8s133(manifest) {
         if (!obj || typeof obj !== 'object') {
             return;
         }
+        const schema = obj;
         // If this object has x-kubernetes-preserve-unknown-fields but no type, add type: object
-        if (obj['x-kubernetes-preserve-unknown-fields'] === true && !obj.type) {
-            obj.type = 'object';
+        if (schema['x-kubernetes-preserve-unknown-fields'] === true && !schema.type) {
+            schema.type = 'object';
             changes.push(`Added type: object to ${fieldPath} (had x-kubernetes-preserve-unknown-fields without type)`);
         }
         // If this is a known field that needs x-kubernetes-preserve-unknown-fields, add it
@@ -158,33 +262,33 @@ export function fixCRDSchemaForK8s133(manifest) {
         // The field may or may not have type: object already set
         if (fieldName && FIELDS_NEEDING_PRESERVE_UNKNOWN.has(fieldName)) {
             // Ensure type is set (required by K8s 1.33+)
-            if (!obj.type) {
-                obj.type = 'object';
+            if (!schema.type) {
+                schema.type = 'object';
                 changes.push(`Added type: object to ${fieldPath} (known field needing preserve-unknown-fields)`);
             }
             // Ensure x-kubernetes-preserve-unknown-fields is set
-            if (!obj['x-kubernetes-preserve-unknown-fields']) {
-                obj['x-kubernetes-preserve-unknown-fields'] = true;
+            if (!schema['x-kubernetes-preserve-unknown-fields']) {
+                schema['x-kubernetes-preserve-unknown-fields'] = true;
                 changes.push(`Added x-kubernetes-preserve-unknown-fields: true to ${fieldPath}`);
             }
         }
         // Recursively process all properties
-        if (obj.properties) {
-            for (const [propName, prop] of Object.entries(obj.properties)) {
+        if (schema.properties && typeof schema.properties === 'object') {
+            for (const [propName, prop] of Object.entries(schema.properties)) {
                 fixSchemaProperties(prop, `${fieldPath}.properties.${propName}`, propName);
             }
         }
         // Process additionalProperties
-        if (obj.additionalProperties && typeof obj.additionalProperties === 'object') {
-            fixSchemaProperties(obj.additionalProperties, `${fieldPath}.additionalProperties`);
+        if (schema.additionalProperties && typeof schema.additionalProperties === 'object') {
+            fixSchemaProperties(schema.additionalProperties, `${fieldPath}.additionalProperties`);
         }
         // Process items (for arrays)
-        if (obj.items) {
-            fixSchemaProperties(obj.items, `${fieldPath}.items`);
+        if (schema.items) {
+            fixSchemaProperties(schema.items, `${fieldPath}.items`);
         }
     }
     // Fix each version's schema
-    for (const version of fixedCrd.spec.versions) {
+    for (const version of fixedCrd.spec.versions ?? []) {
         if (version.schema?.openAPIV3Schema) {
             fixSchemaProperties(version.schema.openAPIV3Schema, `spec.versions[${version.name}].schema.openAPIV3Schema`);
         }

package/dist/core/runtime-patches/crd-schema-fix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crd-schema-fix.js","sourceRoot":"","sources":["../../../src/core/runtime-patches/crd-schema-fix.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAGzD,MAAM,MAAM,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;AAEpD;;;GAGG;AACH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,IAAI,GAAG,CAAC;IACrD,QAAQ,EAAE,0BAA0B;IACpC,YAAY,EAAE,oCAAoC;IAClD,eAAe,EAAE,iCAAiC;CACnD,CAAC,CAAC;AAcH;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAQ,EAAE,SAAkB;IAC9D,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,oCAAoC;IACpC,IACE,SAAS;QACT,+BAA+B,CAAC,GAAG,CAAC,SAAS,CAAC;QAC9C,GAAG,CAAC,IAAI,KAAK,QAAQ;QACrB,CAAC,GAAG,CAAC,sCAAsC,CAAC,EAC5C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qEAAqE;IACrE,IAAI,GAAG,CAAC,sCAAsC,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+BAA+B;IAC/B,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9D,IAAI,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACxC,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,6BAA6B;IAC7B,IAAI,GAAG,CAAC,oBAAoB,IAAI,OAAO,GAAG,CAAC,oBAAoB,KAAK,QAAQ,EAAE,CAAC;QAC7E,IAAI,mBAAmB,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,IAAI,GAAG,CAAC,KAAK,IAAI,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CACtC,GAAQ,EACR,QAAgB,EAChB,SAAkB;IAElB,MAAM,OAAO,GAAwD,EAAE,CAAC;IAExE,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,6EAA6E;IAC7E,IACE,SAAS;QACT,+BAA+B,CAAC,GAAG,CAAC,SAAS,CAAC;QAC9C,GAAG,CAAC,IAAI,KAAK,QAAQ;QACrB,CAAC,GAAG,CAAC,sCAAsC,CAAC,EAC5C,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,GAAG,QAAQ,uCAAuC;YACxD,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;IACL,CAAC;IAED,uFAAuF;IACvF,IAAI,GAAG,CAAC,sCAAsC,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,GAAG,QAAQ,OAAO;YACxB,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;IACL,CAAC;IAED,iCAAiC;IACjC,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9D,MAAM,QAAQ,GAAG,GAAG,QAAQ,eAAe,QAAQ,EAAE,CAAC;YACtD,OAAO,CAAC,IAAI,CAAC,GAAG,wBAAwB,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,IAAI,GAAG,CAAC,oBAAoB,IAAI,OAAO,GAAG,CAAC,oBAAoB,KAAK,QAAQ,EAAE,CAAC;QAC7E,OAAO,CAAC,IAAI,CACV,GAAG,wBAAwB,CAAC,GAAG,CAAC,oBAAoB,EAAE,GAAG,QAAQ,uBAAuB,CAAC,CAC1F,CAAC;IACJ,CAAC;IAED,6BAA6B;IAC7B,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,GAAG,wBAAwB,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,QAAQ,QAAQ,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAA4B;IAC5D,IAAI,QAAQ,CAAC,IAAI,KAAK,0BAA0B,EAAE,CAAC;QACjD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACzC,CAAC;IAED,MAAM,GAAG,GAAG,QAA4C,CAAC;IACzD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;QACxB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;IACtE,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,SAAS,CAAC;IAEhD,iDAAiD;IACjD,SAAS,qBAAqB,CAAC,GAAY,EAAE,SAAiB,EAAE,SAAkB;QAChF,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACpC,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,GAA8B,CAAC;QAE9C,4EAA4E;QAC5E,IAAI,MAAM,CAAC,sCAAsC,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5E,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,yDAAyD,CAAC,CAAC;QACrF,CAAC;QAED,iFAAiF;QACjF,IAAI,SAAS,IAAI,+BAA+B,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,kBAAkB,SAAS,gBAAgB,CAAC,CAAC;YACvE,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,sCAAsC,CAAC,EAAE,CAAC;gBACpD,MAAM,CAAC,IAAI,CACT,GAAG,SAAS,kBAAkB,SAAS,gDAAgD,CACxF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,mCAAmC;QACnC,IAAI,MAAM,CAAC,UAAU,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC/D,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAqC,CAAC,EAAE,CAAC;gBAC5F,qBAAqB,CAAC,IAAI,EAAE,GAAG,SAAS,eAAe,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,IAAI,MAAM,CAAC,oBAAoB,IAAI,OAAO,MAAM,CAAC,oBAAoB,KAAK,QAAQ,EAAE,CAAC;YACnF,qBAAqB,CAAC,MAAM,CAAC,oBAAoB,EAAE,GAAG,SAAS,uBAAuB,CAAC,CAAC;QAC1F,CAAC;QAED,2BAA2B;QAC3B,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,qBAAqB,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,SAAS,QAAQ,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC;YACpC,qBAAqB,CACnB,OAAO,CAAC,MAAM,CAAC,eAAe,EAC9B,iBAAiB,OAAO,CAAC,IAAI,0BAA0B,CACxD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC;QAC3B,MAAM;QACN,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAA4B;IAChE,IAAI,QAAQ,CAAC,IAAI,KAAK,0BAA0B,EAAE,CAAC;QACjD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,GAAG,GAAG,QAA4C,CAAC;IACzD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,4CAA4C;IAC5C,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,SAAS,CAAC;IAEhD,2CAA2C;IAC3C,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,oCAAoC;IACpC,SAAS,mBAAmB,CAAC,GAAY,EAAE,SAAiB,EAAE,SAAkB;QAC9E,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACpC,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,GAA8B,CAAC;QAE9C,wFAAwF;QACxF,IAAI,MAAM,CAAC,sCAAsC,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5E,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC;YACvB,OAAO,CAAC,IAAI,CACV,yBAAyB,SAAS,0DAA0D,CAC7F,CAAC;QACJ,CAAC;QAED,mFAAmF;QACnF,4FAA4F;QAC5F,yDAAyD;QACzD,IAAI,SAAS,IAAI,+BAA+B,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAChE,6CAA6C;YAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC;gBACvB,OAAO,CAAC,IAAI,CACV,yBAAyB,SAAS,gDAAgD,CACnF,CAAC;YACJ,CAAC;YACD,qDAAqD;YACrD,IAAI,CAAC,MAAM,CAAC,sCAAsC,CAAC,EAAE,CAAC;gBACpD,MAAM,CAAC,sCAAsC,CAAC,GAAG,IAAI,CAAC;gBACtD,OAAO,CAAC,IAAI,CAAC,uDAAuD,SAAS,EAAE,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;QAED,qCAAqC;QACrC,IAAI,MAAM,CAAC,UAAU,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC/D,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAqC,CAAC,EAAE,CAAC;gBAC5F,mBAAmB,CAAC,IAAI,EAAE,GAAG,SAAS,eAAe,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;QAED,+BAA+B;QAC/B,IAAI,MAAM,CAAC,oBAAoB,IAAI,OAAO,MAAM,CAAC,oBAAoB,KAAK,QAAQ,EAAE,CAAC;YACnF,mBAAmB,CAAC,MAAM,CAAC,oBAAoB,EAAE,GAAG,SAAS,uBAAuB,CAAC,CAAC;QACxF,CAAC;QAED,6BAA6B;QAC7B,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,mBAAmB,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,SAAS,QAAQ,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QACnD,IAAI,OAAO,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC;YACpC,mBAAmB,CACjB,OAAO,CAAC,MAAM,CAAC,eAAe,EAC9B,iBAAiB,OAAO,CAAC,IAAI,0BAA0B,CACxD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,wDAAwD,EAAE;YACpE,OAAO;YACP,YAAY,EAAE,OAAO,CAAC,MAAM;YAC5B,OAAO;YACP,IAAI,EAAE,gGAAgG;SACvG,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAA+B;IACpE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAA4B;IACrE,MAAM,WAAW,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAEhD,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;QAC1B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,yDAAyD,EAAE;QACrE,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM;QACtC,MAAM,EAAE,WAAW,CAAC,MAAM;KAC3B,CAAC,CAAC;IAEH,OAAO,qBAAqB,CAAC,QAAQ,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CAAC,SAA+B;IACzE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC"}

package/dist/core/runtime-patches/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Core Utilities
+ *
+ * Provides utility functions for CRD schema fixes and patching.
+ */
+export { crdNeedsSchemaFix, patchCRDSchema, patchFluxCRDSchemas } from './crd-patcher.js';
+export { fixCRDSchemaForK8s133, fixCRDSchemasForK8s133 } from './crd-schema-fix.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/runtime-patches/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/runtime-patches/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC1F,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/core/runtime-patches/index.js

@@ -0,0 +1,8 @@
+/**
+ * Core Utilities
+ *
+ * Provides utility functions for CRD schema fixes and patching.
+ */
+export { crdNeedsSchemaFix, patchCRDSchema, patchFluxCRDSchemas } from './crd-patcher.js';
+export { fixCRDSchemaForK8s133, fixCRDSchemasForK8s133 } from './crd-schema-fix.js';
+//# sourceMappingURL=index.js.map

package/dist/core/runtime-patches/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/runtime-patches/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC1F,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/core/{evaluation → serialization}/cel-optimizer.d.ts

@@ -41,8 +41,8 @@ export declare function optimizeCelExpression(expression: CelExpression<unknown>
  * - Optimizing CEL expressions where possible
  * - Preserving KubernetesRef objects for proper CEL string generation
  */
-export declare function optimizeStatusMappings(statusMappings: Record<string, any>, context: EvaluationContext): {
-    mappings: Record<string, any>;
+export declare function optimizeStatusMappings(statusMappings: Record<string, unknown>, context: EvaluationContext): {
+    mappings: Record<string, unknown>;
     optimizations: string[];
 };
 //# sourceMappingURL=cel-optimizer.d.ts.map

package/dist/core/serialization/cel-optimizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cel-optimizer.d.ts","sourceRoot":"","sources":["../../../src/core/serialization/cel-optimizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAiB,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAGpF,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAqED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,MAAM,EAC3C,OAAO,EAAE,iBAAiB,GACzB,gBAAgB,CAwClB;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,OAAO,EAAE,iBAAiB,GACzB;IAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAA;CAAE,CA6DhE"}

package/dist/core/{evaluation → serialization}/cel-optimizer.js

@@ -16,9 +16,9 @@
  * - For status mapping optimization before serialization
  * - When preparing CEL expressions for Kro operator consumption
  */
-import { getInnerCelPath } from '../../utils/helpers.js';
 import { isCelExpression, isKubernetesRef } from '../../utils/type-guards.js';
 import { CEL_EXPRESSION_BRAND } from '../constants/brands.js';
+import { getInnerCelPath } from './cel-references.js';
 /**
  * Attempts to resolve a resource reference to its actual value if known at compile time
  */
@@ -84,8 +84,6 @@ function resolveResourceReference(ref, context) {
  * compile-time optimizations by substituting known resource values.
  */
 export function optimizeCelExpression(expression, context) {
-    const optimizations = [];
-    const wasOptimized = false;
     if (typeof expression === 'string') {
         return {
             expression,
@@ -100,31 +98,21 @@ export function optimizeCelExpression(expression, context) {
             optimizations: [],
         };
     }
-    let optimizedExpression = expression.expression;
-    // Pattern 1: Simple string concatenation with known values
-    // Example: "http://" + resourceName where resourceName is known
-    // NOTE: We should NOT optimize resource references in CEL expressions because they need to be
-    // resolved at runtime by Kro, not at compile time. Resource references like deployment.metadata.name
-    // should remain as CEL expressions for Kro to evaluate against live Kubernetes resources.
-    // Skip this optimization for now - resource references should be resolved by Kro at runtime
-    // const concatPattern = /"([^"]*)" \+ ([a-zA-Z][a-zA-Z0-9]*\.metadata\.name)/g;
-    // ... optimization code removed ...
-    // Pattern 2: Conditional expressions with known boolean values
-    // Example: condition ? "value1" : "value2" where condition can be evaluated
-    const conditionalPattern = /([a-zA-Z][a-zA-Z0-9]*\.[a-zA-Z0-9.]*) ([><=!]+) (\d+) \? "([^"]*)" : "([^"]*)"/g;
-    optimizedExpression = optimizedExpression.replace(conditionalPattern, (match, leftSide, _operator, _rightSide, _trueValue, _falseValue) => {
-        // For now, we can't evaluate the condition at compile time without actual resource status
-        // But we can validate that the reference exists
-        const resourceId = leftSide.split('.')[0];
+    // Validate referenced resources exist (informational warnings only).
+    // Actual CEL optimization is not performed — resource references must remain
+    // as CEL expressions for Kro to evaluate against live Kubernetes resources.
+    const optimizations = [];
+    const conditionalPattern = /([a-zA-Z][a-zA-Z0-9]*\.[a-zA-Z0-9.]*) [><=!]+ \d+ \? "[^"]*" : "[^"]*"/g;
+    for (let match = conditionalPattern.exec(expression.expression); match !== null; match = conditionalPattern.exec(expression.expression)) {
+        const resourceId = match[1]?.split('.')[0];
         const resource = Object.values(context.resources).find((r) => r.id === resourceId);
         if (!resource) {
             optimizations.push(`Warning: Referenced resource '${resourceId}' not found`);
         }
-        return match; // Return unchanged for now
-    });
+    }
     return {
-        expression: optimizedExpression,
-        wasOptimized,
+        expression: expression.expression,
+        wasOptimized: false,
         optimizations,
     };
 }

package/dist/core/serialization/cel-optimizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cel-optimizer.js","sourceRoot":"","sources":["../../../src/core/serialization/cel-optimizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE9D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAatD;;GAEG;AACH,SAAS,wBAAwB,CAC/B,GAA2B,EAC3B,OAA0B;IAE1B,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC;IAEtC,2BAA2B;IAC3B,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;QAChC,mFAAmF;QACnF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,OAAO,GAAQ,OAAO,CAAC,MAAM,CAAC;YAElC,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;oBAC9D,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC1B,CAAC;qBAAM,CAAC;oBACN,kDAAkD;oBAClD,OAAO,UAAU,SAAS,EAAE,CAAC;gBAC/B,CAAC;YACH,CAAC;YAED,6DAA6D;YAC7D,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAChC,OAAO,IAAI,OAAO,GAAG,CAAC;YACxB,CAAC;iBAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,SAAS,EAAE,CAAC;gBACvE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,gDAAgD;QAChD,OAAO,UAAU,SAAS,EAAE,CAAC;IAC/B,CAAC;IAED,oBAAoB;IACpB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;IACnF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iDAAiD;IACjD,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,OAAO,GAAQ,QAAQ,CAAC;IAE5B,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;YAC9D,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,kDAAkD;YAClD,OAAO,GAAG,UAAU,IAAI,SAAS,EAAE,CAAC;QACtC,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,IAAI,OAAO,GAAG,CAAC;IACxB,CAAC;SAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,SAAS,EAAE,CAAC;QACvE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAED,sCAAsC;IACtC,OAAO,GAAG,UAAU,IAAI,SAAS,EAAE,CAAC;AACtC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAA2C,EAC3C,OAA0B;IAE1B,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QACnC,OAAO;YACL,UAAU;YACV,YAAY,EAAE,KAAK;YACnB,aAAa,EAAE,EAAE;SAClB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,OAAO;YACL,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;YAC9B,YAAY,EAAE,KAAK;YACnB,aAAa,EAAE,EAAE;SAClB,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,kBAAkB,GACtB,yEAAyE,CAAC;IAC5E,KACE,IAAI,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAC1D,KAAK,KAAK,IAAI,EACd,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EACtD,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;QACnF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,aAAa,CAAC,IAAI,CAAC,iCAAiC,UAAU,aAAa,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,OAAO;QACL,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,YAAY,EAAE,KAAK;QACnB,aAAa;KACd,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACpC,cAAuC,EACvC,OAA0B;IAE1B,MAAM,iBAAiB,GAA4B,EAAE,CAAC;IACtD,MAAM,gBAAgB,GAAa,EAAE,CAAC;IAEtC,SAAS,aAAa,CAAC,KAAU,EAAE,IAAY;QAC7C,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,wBAAwB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC1D,IAAI,QAAQ,EAAE,CAAC;gBACb,gBAAgB,CAAC,IAAI,CACnB,yBAAyB,IAAI,KAAK,eAAe,CAAC,KAAK,CAAC,OAAO,QAAQ,EAAE,CAC1E,CAAC;gBACF,kGAAkG;gBAClG,6GAA6G;gBAC7G,IAAI,QAAQ,KAAK,GAAG,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;oBAC1D,0FAA0F;oBAC1F,OAAO,KAAK,CAAC;gBACf,CAAC;qBAAM,CAAC;oBACN,wFAAwF;oBACxF,OAAO;wBACL,CAAC,oBAAoB,CAAC,EAAE,IAAI;wBAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ;qBAC9C,CAAC;gBAC9B,CAAC;YACH,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YACrD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBACxB,gBAAgB,CAAC,IAAI,CACnB,+BAA+B,IAAI,KAAK,KAAK,CAAC,UAAU,OAAO,MAAM,CAAC,UAAU,EAAE,CACnF,CAAC;gBACF,gBAAgB,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;YAC1E,CAAC;YACD,OAAO;gBACL,CAAC,oBAAoB,CAAC,EAAE,IAAI;gBAC5B,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;aACxB,CAAC;QAC9B,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzE,MAAM,eAAe,GAA4B,EAAE,CAAC;YACpD,KAAK,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvD,eAAe,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,WAAW,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;YACtE,CAAC;YACD,OAAO,eAAe,CAAC;QACzB,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QACrE,iBAAiB,CAAC,SAAS,CAAC,GAAG,aAAa,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACtE,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,iBAAiB;QAC3B,aAAa,EAAE,gBAAgB;KAChC,CAAC;AACJ,CAAC"}

package/dist/core/serialization/cel-references.d.ts

@@ -0,0 +1,36 @@
+/**
+ * CEL Reference Serialization
+ *
+ * Functions for converting KubernetesRef objects, CelExpression objects,
+ * and __KUBERNETES_REF__ marker strings into CEL expression strings
+ * suitable for Kro ResourceGraphDefinition YAML output.
+ *
+ * This module is the **single authority** for KubernetesRef → CEL string
+ * conversion.  No other module should duplicate this logic.
+ */
+import type { KubernetesRef } from '../types/common.js';
+import type { SerializationContext } from '../types/serialization.js';
+/**
+ * Compute the inner CEL path for a {@link KubernetesRef}.
+ *
+ * The special sentinel `__schema__` is normalised to `schema` so that
+ * the resulting path is valid Kro CEL (e.g. `schema.spec.name`).
+ *
+ * @remarks
+ * This is the authoritative implementation.
+ */
+export declare function getInnerCelPath(ref: KubernetesRef<unknown>): string;
+/**
+ * Recursively replace all {@link KubernetesRef} objects with CEL expressions
+ * for Kro YAML output.
+ *
+ * This is the **only** function that should perform this transformation.
+ */
+export declare function processResourceReferences(obj: unknown, context?: SerializationContext): unknown;
+/**
+ * Serialize user-defined status mappings to CEL expressions for Kro schema.
+ *
+ * Only processes dynamic fields that require Kro resolution.
+ */
+export declare function serializeStatusMappingsToCel(statusMappings: Record<string, unknown>): Record<string, string | Record<string, unknown>>;
+//# sourceMappingURL=cel-references.d.ts.map

package/dist/core/serialization/cel-references.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cel-references.d.ts","sourceRoot":"","sources":["../../../src/core/serialization/cel-references.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAMtE;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,MAAM,CAGnE;AAuFD;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAyC/F;AAMD;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACtC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA4ClD"}