{
  "contract": "clavenar.cluster-install/v1",
  "schemaVersion": 1,
  "release": "1.250.5",
  "scope": "existing-kubernetes-cluster",
  "bootstrap": {
    "url": "https://clavenar.ai/install.sh",
    "shell": "sh",
    "command": "curl -fsSL https://clavenar.ai/install.sh | sh"
  },
  "installer": {
    "version": "1.5.5",
    "url": "https://clavenar.ai/installers/clavenar-install-1.5.5.sh",
    "checksumUrl": "https://clavenar.ai/installers/clavenar-install-1.5.5.sh.sha256",
    "mirrorUrls": [
      "https://dev.clavenar.ai/installers/clavenar-install-1.5.5.sh"
    ],
    "checksumMirrorUrls": [
      "https://dev.clavenar.ai/installers/clavenar-install-1.5.5.sh.sha256"
    ],
    "sha256": "sha256:755c5d718400b1c6810c6ae633b417d378425b4a21be5d5ca2939cc3d352884a",
    "shell": "bash"
  },
  "uninstallBootstrap": {
    "url": "https://clavenar.ai/uninstall.sh",
    "shell": "sh",
    "command": "curl -fsSL https://clavenar.ai/uninstall.sh | sh"
  },
  "uninstaller": {
    "version": "1.1.10",
    "url": "https://clavenar.ai/installers/clavenar-uninstall-1.1.10.sh",
    "checksumUrl": "https://clavenar.ai/installers/clavenar-uninstall-1.1.10.sh.sha256",
    "mirrorUrls": [
      "https://dev.clavenar.ai/installers/clavenar-uninstall-1.1.10.sh"
    ],
    "checksumMirrorUrls": [
      "https://dev.clavenar.ai/installers/clavenar-uninstall-1.1.10.sh.sha256"
    ],
    "sha256": "sha256:bcfc771fd325e61c3c0127cd08267f416278778e0f6f0e566f85463611c76706",
    "shell": "bash"
  },
  "clusterAccess": {
    "clients": [
      "kubectl",
      "k3s-kubectl"
    ],
    "contextPolicy": "explicit-or-confirmed-current-context",
    "minimumKubernetesMinor": 30,
    "maximumKubernetesMinor": 36,
    "preflight": [
      "api-reachable",
      "context-confirmed",
      "version-supported",
      "nodes-ready",
      "default-storage-class",
      "permissions-complete",
      "release-collision-checked",
      "console-authentication-selected",
      "selected-model-credentials",
      "render-valid",
      "exact-digest-images"
    ]
  },
  "helmInstall": {
    "repository": "clavenar-charts",
    "version": "1.0.0",
    "registry": "oci://ghcr.io/clavenar/charts/clavenar",
    "releaseUrl": "https://github.com/clavenar/clavenar-charts/releases/tag/v1.0.0",
    "checksumAsset": "clavenar-1.0.0.tgz.sha256",
    "valuesAsset": "clavenar-images-1.250.5.yaml",
    "valuesSha256": "sha256:2f2c6f171f904f243065860d1ec9b83513f536378f6b052e16a28122f07f5f42",
    "packagedValues": "examples/values-bundled.yaml",
    "defaultNamespace": "clavenar",
    "defaultRelease": "clavenar",
    "timeout": "10m",
    "wait": true,
    "waitForJobs": true
  },
  "consoleAccess": {
    "defaultMode": "webauthn",
    "authSelectionFlag": "--console-auth",
    "authSelections": [
      "passkey",
      "mtls"
    ],
    "anonymousDemoDefault": false,
    "demoOptInProfile": "evaluation",
    "bootstrapPolicy": "one-time-admin-passkey",
    "bootstrapSecretNameTemplate": "{release}-shared-tokens",
    "bootstrapSecretKey": "hil-bootstrap-token",
    "bootstrapUrlTemplate": "http://localhost:8085/register#bootstrap={token}",
    "bootstrapTokenTransport": "url-fragment",
    "bootstrapRole": "admin",
    "bootstrapTokenInReceipt": false,
    "mtlsMode": "operator-mtls",
    "operatorTrustSecretNameTemplate": "{release}-operator-public-trust",
    "operatorTrustSecretKeys": [
      "ca.crt",
      "operators.json"
    ],
    "operatorTrustInputFlags": [
      "--operator-ca",
      "--operator-registry"
    ],
    "mtlsMissingTrustPolicy": "local-admin-bootstrap",
    "operatorBootstrapDirectoryFlag": "--operator-bootstrap-dir",
    "localBootstrapDefaultRoot": "$HOME/.clavenar/operator-bootstrap",
    "localBootstrapRole": "admin",
    "localBootstrapPrivateKeyProjection": false,
    "browserCredentialFormat": "PKCS#12",
    "requiredOperatorRole": "admin",
    "mutationOriginsDefault": [
      "http://localhost:8085"
    ]
  },
  "modelConfiguration": {
    "defaultGenerationProvider": "mock",
    "generationProviderFlag": "--brain-provider",
    "generationProviders": [
      "mock",
      "anthropic",
      "openai",
      "google",
      "ollama"
    ],
    "fastModelFlag": "--brain-fast-model",
    "deepModelFlag": "--brain-deep-model",
    "generationBaseUrlFlag": "--brain-base-url",
    "providerSecretNameFlag": "--brain-provider-secret",
    "providerSecretKeyFlag": "--brain-provider-secret-key",
    "hostedGenerationProviders": [
      "anthropic",
      "openai",
      "google"
    ],
    "defaultEmbeddingProvider": "disabled",
    "embeddingProviderFlag": "--embedding-provider",
    "embeddingProviders": [
      "disabled",
      "voyage",
      "openai",
      "ollama"
    ],
    "embeddingModelFlag": "--embedding-model",
    "embeddingDimensionsFlag": "--embedding-dimensions",
    "embeddingBaseUrlFlag": "--embedding-base-url",
    "embeddingSecretNameFlag": "--embedding-secret",
    "embeddingSecretKeyFlag": "--embedding-secret-key",
    "hostedEmbeddingProviders": [
      "voyage",
      "openai"
    ],
    "credentialPolicy": "existing-kubernetes-secret",
    "secretPreflight": "selected-providers-only",
    "inlineCredentialsAllowed": false,
    "receiptContainsSecretMaterial": false
  },
  "profiles": [
    {
      "name": "operator",
      "default": true,
      "values": "examples/values-bundled.yaml+installer-operator-overlay",
      "verification": [
        "workloads-ready",
        "exact-digest-images",
        "passkey-admin-bootstrap-ready",
        "anonymous-demo-disabled",
        "tools-list",
        "ledger-chain-advanced"
      ]
    },
    {
      "name": "evaluation",
      "default": false,
      "values": "examples/values-bundled.yaml",
      "verification": [
        "workloads-ready",
        "exact-digest-images",
        "tools-list",
        "ledger-chain-advanced"
      ]
    },
    {
      "name": "custom",
      "default": false,
      "values": "operator-supplied",
      "verification": [
        "workloads-ready",
        "exact-digest-images",
        "anonymous-demo-disabled"
      ]
    }
  ],
  "lifecycle": {
    "states": [
      "absent",
      "current",
      "upgrade",
      "failed",
      "foreign"
    ],
    "collisionPolicy": "fail-closed",
    "failurePolicy": "preserve-release-and-state",
    "adoptionPolicy": "explicit-exact-release-only",
    "receipt": {
      "kind": "ConfigMap",
      "nameTemplate": "{release}-cluster-install-receipt",
      "containsSecrets": false
    },
    "uninstall": {
      "defaultDataDisposition": "retain",
      "namespaceDisposition": "retain",
      "ownershipPolicy": "exact-release-or-explicit-adoption",
      "destructiveDataFlag": "--delete-data",
      "destructiveConfirmationFlag": "--confirm-data-deletion",
      "checkFlag": "--check",
      "retainedResources": [
        "persistent-volume-claims",
        "shared-authentication-secret",
        "operator-public-trust",
        "namespace"
      ],
      "removedResources": [
        "helm-release",
        "installer-receipt",
        "installer-smoke-resources"
      ]
    }
  },
  "outOfScope": [
    "cluster-provisioning",
    "node-configuration",
    "container-runtime-installation",
    "firewall-configuration",
    "storage-provisioner-installation",
    "cloud-infrastructure",
    "operator-key-rotation-after-bootstrap"
  ]
}