refactor: full-stack restructure with multi-tenancy, workspace management, and K8s diagnostics

- Add Workspace domain (entity, repository, service, handler, DTO)
- Add multi-tenant K8s client with tenant binding and quota management
- Add K8s diagnostics client (instance diagnostics)
- Add authorization middleware (authz package)
- Restructure frontend to feature-based architecture (features/)
- Add User Management page in configuration
- Add AccessDenied page and route guards
- Refactor shared components (form inputs, layout, UI)
- Update Tailwind config for new design system
- Add comprehensive documentation (docs/, tasks/, plans)
- Improve cluster service with better kubeconfig handling
- Add tests for crypto, config, helm client, tenant binding

backend/internal/adapter/input/http/rest/artifact_handler.go

@@ -29,14 +29,19 @@ func NewArtifactHandler(artifactService *service.ArtifactService) *ArtifactHandl
 // @Accept json
 // @Produce json
 // @Param registry_id path string true "Registry ID"
+// @Param artifact_type query string false "Artifact type filter (chart, all)" default(chart)
 // @Success 200 {object} dto.RepositoryListResponse
 // @Failure 500 {object} dto.ErrorResponse
 // @Router /registries/{registry_id}/repositories [get]
 func (h *ArtifactHandler) ListRepositories(w http.ResponseWriter, r *http.Request) {
 	vars := mux.Vars(r)
 	registryID := vars["registry_id"]
+	artifactType := r.URL.Query().Get("artifact_type")
+	if artifactType == "" {
+		artifactType = "chart"
+	}
 
-	repositories, err := h.artifactService.ListRepositories(r.Context(), registryID)
+	repositories, err := h.artifactService.ListRepositories(r.Context(), registryID, artifactType)
 	if err != nil {
 		respondError(w, http.StatusInternalServerError, "Failed to list repositories", err.Error())
 		return
@@ -50,13 +55,17 @@ func (h *ArtifactHandler) ListRepositories(w http.ResponseWriter, r *http.Reques
 	}
 
 	// Determine source and message based on repository count
-	source := "catalog"
+	source := "harbor-api"
 	catalogSupported := true
 	message := ""
 
 	if len(repositories) == 0 {
 		source = "unavailable"
-		message = "No repositories found in this registry"
+		if artifactType == "chart" {
+			message = "No chart repositories found in this registry"
+		} else {
+			message = "No repositories found in this registry"
+		}
 	}
 
 	response := &dto.RepositoryListResponse{
@@ -191,3 +200,37 @@ func (h *ArtifactHandler) GetArtifactValuesSchema(w http.ResponseWriter, r *http
 
 	respondJSON(w, http.StatusOK, response)
 }
+
+// GetArtifactValuesYAML 获取 Helm Chart 的默认 values.yaml
+// @Summary 获取 Helm Chart 默认 Values YAML
+// @Description 获取 Helm Chart 包内原始 values.yaml，用于高级覆盖编辑
+// @Tags Artifacts
+// @Accept json
+// @Produce json
+// @Param registry_id path string true "Registry ID"
+// @Param repository_name path string true "Repository Name (URL encoded)"
+// @Param reference path string true "Artifact Reference (tag or digest)"
+// @Success 200 {object} dto.ValuesYAMLResponse
+// @Failure 500 {object} dto.ErrorResponse
+// @Router /registries/{registry_id}/repositories/{repository_name}/artifacts/{reference}/values-yaml [get]
+func (h *ArtifactHandler) GetArtifactValuesYAML(w http.ResponseWriter, r *http.Request) {
+	vars := mux.Vars(r)
+	registryID := vars["registry_id"]
+	repositoryName := vars["repository_name"]
+	reference := vars["reference"]
+
+	valuesYAML, err := h.artifactService.GetValuesYAML(r.Context(), registryID, repositoryName, reference)
+	if err != nil {
+		switch {
+		case errors.Is(err, entity.ErrRegistryNotFound),
+			errors.Is(err, entity.ErrRepositoryNotFound),
+			errors.Is(err, entity.ErrArtifactNotFound):
+			respondError(w, http.StatusNotFound, "Values YAML not found", err.Error())
+		default:
+			respondError(w, http.StatusInternalServerError, "Failed to get values YAML", err.Error())
+		}
+		return
+	}
+
+	respondJSON(w, http.StatusOK, &dto.ValuesYAMLResponse{ValuesYAML: valuesYAML})
+}