@bevel-software/platform-core-backend 0.20.0 → 0.22.0

package/dist/modules/settings/repository-source.d.ts

@@ -0,0 +1,128 @@
+import { type GitCredentials } from '../../shared/git.contract.js';
+import type { ManagedRepository } from './managed-repository.js';
+/**
+ * The ways a deployment can be given the repository its knowledge base
+ * lives in, in the order the setup screen offers them.
+ *
+ *  - `managed`: the deployment keeps the repository itself.
+ *  - `github-app`: a repository on GitHub, reached through a GitHub App the
+ *    admin installed on it.
+ *  - `token`: any git host, by its address and an access token.
+ */
+export declare const GIT_MODES: readonly ["managed", "github-app", "token"];
+export type GitMode = (typeof GIT_MODES)[number];
+export declare function isGitMode(value: unknown): value is GitMode;
+/** Reads one setting as it is in effect, or as it would be after a save. */
+export type SettingReader = (key: string) => string;
+/**
+ * A repository reached through a GitHub App: which one, and the short-lived
+ * token the app is given for it. Implemented by the GitHub App module; the
+ * source only asks.
+ */
+export interface GitHubAppRepository {
+    /** `https://github.com/<owner>/<name>.git`, or empty while none is chosen. */
+    url(read: SettingReader): string;
+    /** The installation token in hand, or null when there is none to give. */
+    token(): string | null;
+    /**
+     * Make sure {@link token} answers with one that is still good. `asked`
+     * is for a caller waiting on the answer itself, who is told a failure.
+     */
+    prepare(opts?: {
+        asked?: boolean;
+    }): Promise<void>;
+    /** Whether the deployment may be pointed at this repository (`owner/name`). */
+    permits(repository: string, read: SettingReader): boolean;
+    /** Whether the app, its installation and a repository are all there. */
+    answered(read: SettingReader): boolean;
+}
+export interface RepositorySourceOptions {
+    /** The deployment's settings, as they are in effect. */
+    read: SettingReader;
+    /**
+     * What the environment gives the token mode beyond the settings
+     * catalogue: the legacy spellings of the token variable, and the username
+     * a deployment configured there.
+     */
+    fallback?: {
+        username?: string;
+        token?: string;
+    };
+    managed: ManagedRepository;
+    githubApp?: GitHubAppRepository;
+}
+/**
+ * WHERE THE KNOWLEDGE BASE'S REPOSITORY IS, AND WHAT GIT PRESENTS TO IT —
+ * the one place that knows there is more than one answer.
+ *
+ * Everything that runs git asks for two things: an address to clone from,
+ * and a credential. Both used to be read straight from two settings, which
+ * is one way of having a repository. With three ways, each reader deciding
+ * for itself would be three places to disagree, so they all ask here, and
+ * what they get back is the same two things as before.
+ *
+ * TWO MODES, AND THEY ARE NOT ALWAYS THE SAME ONE.
+ *
+ *  - The mode IN EFFECT is the one this process is running on. Its working
+ *    copies are clones of that mode's repository, and every address and
+ *    credential this class hands out is that mode's. It is taken when the
+ *    source is built and changes only in {@link takeEffect}.
+ *  - The mode CHOSEN is what the settings say. A save changes it at once.
+ *
+ * They differ between the save that moves a serving deployment and the
+ * restart that save owes. Reading the mode live would move the process the
+ * moment the setting was stored: the new mode's credential presented to the
+ * old mode's repository, which every working copy still points at, and new
+ * branches cloned from a repository the startup phase has not prepared. So
+ * the process stays where it is until it is started again, which is what
+ * the setup screen tells the admin.
+ *
+ * WITHIN a mode the values are read live, as they always were: a rotated
+ * token is the one the next push carries.
+ *
+ * THE MODE IS INFERRED WHEN NOBODY CHOSE ONE. A deployment configured before
+ * there was a choice has an address and a token and no mode; it is in
+ * `token` mode, because that is what it has. One with nothing configured has
+ * no mode, and the setup screen offers the first.
+ */
+export declare class RepositorySource {
+    private readonly opts;
+    /** What git authenticates with, read on every call. */
+    readonly credentials: GitCredentials;
+    private inEffect;
+    constructor(opts: RepositorySourceOptions);
+    /**
+     * Without a reader, the mode IN EFFECT. With one, the mode a save of that
+     * reader's values would CHOOSE: the answer validation wants, about values
+     * that are not stored yet. Null: nothing is configured.
+     */
+    mode(read?: SettingReader): GitMode | null;
+    /** The mode the settings say, which a restart would put in effect. */
+    chosen(read?: SettingReader): GitMode | null;
+    /**
+     * Put the mode chosen in effect. Called where nothing is using the mode
+     * that was: by a save made before the deployment was serving, which the
+     * startup phase follows. A process that is serving is never moved; it is
+     * restarted, and built on the mode chosen.
+     */
+    takeEffect(): void;
+    /** The address git clones from and pushes to. Empty while there is none. Asked as {@link mode} is. */
+    url(read?: SettingReader): string;
+    /**
+     * Whether the repository half of setup is answered: there is somewhere to
+     * clone from and, where one is needed, something to present. Asked as
+     * {@link mode} is.
+     */
+    answered(read?: SettingReader): boolean;
+    private username;
+    /**
+     * One mode's credential is never presented to another mode's repository:
+     * a deployment that moved to a managed repository still has its old
+     * token stored, and a path on its own disk has no use for it. The mode is
+     * the one IN EFFECT, because that is the repository git is talking to.
+     */
+    private token;
+    private prepare;
+    private tokenIn;
+}
+//# sourceMappingURL=repository-source.d.ts.map

package/dist/modules/settings/repository-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository-source.d.ts","sourceRoot":"","sources":["../../../src/modules/settings/repository-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACzF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE;;;;;;;;GAQG;AACH,eAAO,MAAM,SAAS,6CAA8C,CAAC;AACrE,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjD,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,OAAO,CAE1D;AAED,4EAA4E;AAC5E,MAAM,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;AAEpD;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,8EAA8E;IAC9E,GAAG,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,CAAC;IACjC,0EAA0E;IAC1E,KAAK,IAAI,MAAM,GAAG,IAAI,CAAC;IACvB;;;OAGG;IACH,OAAO,CAAC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,+EAA+E;IAC/E,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC;IAC1D,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC;CACxC;AAED,MAAM,WAAW,uBAAuB;IACtC,wDAAwD;IACxD,IAAI,EAAE,aAAa,CAAC;IACpB;;;;OAIG;IACH,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD,OAAO,EAAE,iBAAiB,CAAC;IAC3B,SAAS,CAAC,EAAE,mBAAmB,CAAC;CACjC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,qBAAa,gBAAgB;IAKf,OAAO,CAAC,QAAQ,CAAC,IAAI;IAJjC,uDAAuD;IACvD,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IACrC,OAAO,CAAC,QAAQ,CAAiB;gBAEJ,IAAI,EAAE,uBAAuB;IAS1D;;;;OAIG;IACH,IAAI,CAAC,IAAI,CAAC,EAAE,aAAa,GAAG,OAAO,GAAG,IAAI;IAI1C,sEAAsE;IACtE,MAAM,CAAC,IAAI,GAAE,aAA8B,GAAG,OAAO,GAAG,IAAI;IAM5D;;;;;OAKG;IACH,UAAU,IAAI,IAAI;IAIlB,sGAAsG;IACtG,GAAG,CAAC,IAAI,CAAC,EAAE,aAAa,GAAG,MAAM;IAcjC;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,GAAG,OAAO;IAcvC,OAAO,CAAC,QAAQ;IAMhB;;;;;OAKG;IACH,OAAO,CAAC,KAAK;YAWC,OAAO;IAIrB,OAAO,CAAC,OAAO;CAIhB"}

package/dist/modules/settings/repository-source.js

@@ -0,0 +1,150 @@
+import { DEFAULT_GIT_USERNAME } from '../../shared/git.contract.js';
+/**
+ * The ways a deployment can be given the repository its knowledge base
+ * lives in, in the order the setup screen offers them.
+ *
+ *  - `managed`: the deployment keeps the repository itself.
+ *  - `github-app`: a repository on GitHub, reached through a GitHub App the
+ *    admin installed on it.
+ *  - `token`: any git host, by its address and an access token.
+ */
+export const GIT_MODES = ['managed', 'github-app', 'token'];
+export function isGitMode(value) {
+    return typeof value === 'string' && GIT_MODES.includes(value);
+}
+/**
+ * WHERE THE KNOWLEDGE BASE'S REPOSITORY IS, AND WHAT GIT PRESENTS TO IT —
+ * the one place that knows there is more than one answer.
+ *
+ * Everything that runs git asks for two things: an address to clone from,
+ * and a credential. Both used to be read straight from two settings, which
+ * is one way of having a repository. With three ways, each reader deciding
+ * for itself would be three places to disagree, so they all ask here, and
+ * what they get back is the same two things as before.
+ *
+ * TWO MODES, AND THEY ARE NOT ALWAYS THE SAME ONE.
+ *
+ *  - The mode IN EFFECT is the one this process is running on. Its working
+ *    copies are clones of that mode's repository, and every address and
+ *    credential this class hands out is that mode's. It is taken when the
+ *    source is built and changes only in {@link takeEffect}.
+ *  - The mode CHOSEN is what the settings say. A save changes it at once.
+ *
+ * They differ between the save that moves a serving deployment and the
+ * restart that save owes. Reading the mode live would move the process the
+ * moment the setting was stored: the new mode's credential presented to the
+ * old mode's repository, which every working copy still points at, and new
+ * branches cloned from a repository the startup phase has not prepared. So
+ * the process stays where it is until it is started again, which is what
+ * the setup screen tells the admin.
+ *
+ * WITHIN a mode the values are read live, as they always were: a rotated
+ * token is the one the next push carries.
+ *
+ * THE MODE IS INFERRED WHEN NOBODY CHOSE ONE. A deployment configured before
+ * there was a choice has an address and a token and no mode; it is in
+ * `token` mode, because that is what it has. One with nothing configured has
+ * no mode, and the setup screen offers the first.
+ */
+export class RepositorySource {
+    opts;
+    /** What git authenticates with, read on every call. */
+    credentials;
+    inEffect;
+    constructor(opts) {
+        this.opts = opts;
+        this.inEffect = this.chosen();
+        this.credentials = {
+            username: () => this.username(),
+            token: () => this.token(),
+            prepare: () => this.prepare(),
+        };
+    }
+    /**
+     * Without a reader, the mode IN EFFECT. With one, the mode a save of that
+     * reader's values would CHOOSE: the answer validation wants, about values
+     * that are not stored yet. Null: nothing is configured.
+     */
+    mode(read) {
+        return read ? this.chosen(read) : this.inEffect;
+    }
+    /** The mode the settings say, which a restart would put in effect. */
+    chosen(read = this.opts.read) {
+        const named = read('gitMode').trim();
+        if (isGitMode(named))
+            return named;
+        return read('kbRepoUrl') || this.tokenIn(read) ? 'token' : null;
+    }
+    /**
+     * Put the mode chosen in effect. Called where nothing is using the mode
+     * that was: by a save made before the deployment was serving, which the
+     * startup phase follows. A process that is serving is never moved; it is
+     * restarted, and built on the mode chosen.
+     */
+    takeEffect() {
+        this.inEffect = this.chosen();
+    }
+    /** The address git clones from and pushes to. Empty while there is none. Asked as {@link mode} is. */
+    url(read) {
+        const from = read ?? this.opts.read;
+        switch (this.mode(read)) {
+            case 'managed':
+                return this.opts.managed.path;
+            case 'github-app':
+                return this.opts.githubApp?.url(from) ?? '';
+            case 'token':
+                return from('kbRepoUrl');
+            default:
+                return '';
+        }
+    }
+    /**
+     * Whether the repository half of setup is answered: there is somewhere to
+     * clone from and, where one is needed, something to present. Asked as
+     * {@link mode} is.
+     */
+    answered(read) {
+        const from = read ?? this.opts.read;
+        switch (this.mode(read)) {
+            case 'managed':
+                return true;
+            case 'github-app':
+                return this.opts.githubApp?.answered(from) ?? false;
+            case 'token':
+                return Boolean(from('kbRepoUrl') && this.tokenIn(from));
+            default:
+                return false;
+        }
+    }
+    username() {
+        // Only a host that was given a token is given a name to go with it.
+        if (this.inEffect !== 'token')
+            return DEFAULT_GIT_USERNAME;
+        return this.opts.read('gitUsername') || this.opts.fallback?.username || DEFAULT_GIT_USERNAME;
+    }
+    /**
+     * One mode's credential is never presented to another mode's repository:
+     * a deployment that moved to a managed repository still has its old
+     * token stored, and a path on its own disk has no use for it. The mode is
+     * the one IN EFFECT, because that is the repository git is talking to.
+     */
+    token() {
+        switch (this.inEffect) {
+            case 'token':
+                return this.tokenIn(this.opts.read) || null;
+            case 'github-app':
+                return this.opts.githubApp?.token() ?? null;
+            default:
+                return null;
+        }
+    }
+    async prepare() {
+        if (this.inEffect === 'github-app')
+            await this.opts.githubApp?.prepare();
+    }
+    tokenIn(read) {
+        // The fallback is the environment's, so it is in effect whatever a save brings.
+        return read('gitToken') || this.opts.fallback?.token || '';
+    }
+}
+//# sourceMappingURL=repository-source.js.map

package/dist/modules/settings/repository-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository-source.js","sourceRoot":"","sources":["../../../src/modules/settings/repository-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAuB,MAAM,8BAA8B,CAAC;AAGzF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAU,CAAC;AAGrE,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,SAA+B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACvF,CAAC;AAuCD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,OAAO,gBAAgB;IAKE;IAJ7B,uDAAuD;IAC9C,WAAW,CAAiB;IAC7B,QAAQ,CAAiB;IAEjC,YAA6B,IAA6B;QAA7B,SAAI,GAAJ,IAAI,CAAyB;QACxD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG;YACjB,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE;YAC/B,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE;YACzB,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE;SAC9B,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,IAAI,CAAC,IAAoB;QACvB,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;IAClD,CAAC;IAED,sEAAsE;IACtE,MAAM,CAAC,OAAsB,IAAI,CAAC,IAAI,CAAC,IAAI;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACnC,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,CAAC;IAED;;;;;OAKG;IACH,UAAU;QACR,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAChC,CAAC;IAED,sGAAsG;IACtG,GAAG,CAAC,IAAoB;QACtB,MAAM,IAAI,GAAG,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QACpC,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAChC,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9C,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC;YAC3B;gBACE,OAAO,EAAE,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,IAAoB;QAC3B,MAAM,IAAI,GAAG,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QACpC,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC;YACd,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC;YACtD,KAAK,OAAO;gBACV,OAAO,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1D;gBACE,OAAO,KAAK,CAAC;QACjB,CAAC;IACH,CAAC;IAEO,QAAQ;QACd,oEAAoE;QACpE,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,oBAAoB,CAAC;QAC3D,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,IAAI,oBAAoB,CAAC;IAC/F,CAAC;IAED;;;;;OAKG;IACK,KAAK;QACX,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;YAC9C,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC;YAC9C;gBACE,OAAO,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,IAAI,IAAI,CAAC,QAAQ,KAAK,YAAY;YAAE,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;IAC3E,CAAC;IAEO,OAAO,CAAC,IAAmB;QACjC,gFAAgF;QAChF,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC;IAC7D,CAAC;CACF"}

package/dist/modules/settings/setup.routes.d.ts

@@ -3,9 +3,26 @@ import type { IAdminAccessService } from '../admin/admin.interface.js';
 import { DeploymentSettingsService } from './deployment-settings.service.js';
 import { type IssuerCheck, type OidcCheck, type OidcConfiguration } from './oidc-check.js';
 import { type ConnectionCheck, type RepositoryConnection } from './connection-check.js';
+import type { KbContext } from '../../shared/kb-context.js';
 import { type GitFailure } from '../../shared/git-failure.js';
 import { listRootFolders } from './git-root-folders.js';
+import { type GitHubAppRepository, type RepositorySource } from './repository-source.js';
 import '../auth/auth.middleware.js';
+/**
+ * What setup needs of the ways a deployment can be given its repository:
+ * the source every reader of the repository asks, and the one thing a mode
+ * has to have DONE before a save that chooses it may go through.
+ */
+export interface RepositorySetup {
+    source: RepositorySource;
+    /** Create the repository the deployment keeps for itself, if it is not there. Never touches one that is. */
+    ensureManaged(initialBranch: string): Promise<void>;
+    /**
+     * The connection to GitHub through a GitHub App. Absent, that way is not
+     * offered, and a save that names it is refused.
+     */
+    githubApp?: Pick<GitHubAppRepository, 'url' | 'answered' | 'prepare' | 'token' | 'permits'>;
+}
 /**
  * The slice of a sync record the status endpoint publishes. Declared here
  * rather than imported from `kb-sync` so this module stays free of that one;
@@ -50,6 +67,12 @@ kbStartupRunner: {
     /** That failure classified, for the setup screen; absent, the message is read instead. */
     lastFailureKind?(): GitFailure | null;
 }, 
+/**
+ * The knowledge base's context as the running graph holds it: the save
+ * that completes setup applies the branch model and the layout to it, so
+ * every service reads the admin's answer without a restart.
+ */
+kb: KbContext, 
 /**
  * The remote-sync facts the Deployment page shows beside the sync secret:
  * the address a webhook or pipeline must call, and what the last call did.
@@ -78,7 +101,12 @@ oidcRedirectUri?: string,
 /** The single sign-on check. Injected so route tests can answer for the provider. */
 checkOidc?: (config: OidcConfiguration) => Promise<OidcCheck>, 
 /** The issuer-only half, for a test with no application id or secret yet. */
-checkIssuer?: (issuerUrl: string) => Promise<IssuerCheck>): express.Router;
+checkIssuer?: (issuerUrl: string) => Promise<IssuerCheck>, 
+/**
+ * The ways a deployment can be given its repository. Absent, there is the
+ * one there always was: an address and a token, read from the settings.
+ */
+repository?: RepositorySetup): express.Router;
 /**
  * Whether the STORED configuration answers everything the deployment needs.
  *
@@ -92,7 +120,9 @@ checkIssuer?: (issuerUrl: string) => Promise<IssuerCheck>): express.Router;
  * deployment signs in perfectly well without it, and gating on it would lock
  * an admin out of the screen where they would set it up.
  */
-export declare function settingsAnswered(settings: DeploymentSettingsService): boolean;
+export declare function settingsAnswered(settings: DeploymentSettingsService, 
+/** What answers for the repository. Absent: an address and a token, the one way there was. */
+source?: Pick<RepositorySource, 'answered'>): boolean;
 /**
  * Whether THIS PROCESS can actually serve — which is not the same question,
  * and conflating them opened the gate onto a broken app.
@@ -108,7 +138,7 @@ export declare function settingsAnswered(settings: DeploymentSettingsService): b
  * that puts it there. {@link awaitingRestart} is what tells the screen to ask
  * for one rather than claim a field is missing.
  */
-export declare function isComplete(settings: DeploymentSettingsService): boolean;
+export declare function isComplete(settings: DeploymentSettingsService, kb: Pick<KbContext, 'isBranchModelConfigured'>, source?: Pick<RepositorySource, 'answered'>): boolean;
 /** Answered, but not yet in effect: everything is stored, the process is stale. */
-export declare function awaitingRestart(settings: DeploymentSettingsService): boolean;
+export declare function awaitingRestart(settings: DeploymentSettingsService, kb: Pick<KbContext, 'isBranchModelConfigured'>, source?: Pick<RepositorySource, 'answered'>): boolean;
 //# sourceMappingURL=setup.routes.d.ts.map

package/dist/modules/settings/setup.routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup.routes.d.ts","sourceRoot":"","sources":["../../../src/modules/settings/setup.routes.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAIvE,OAAO,EACL,yBAAyB,EAI1B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAIL,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,iBAAiB,EACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,oBAAoB,EAC1B,MAAM,uBAAuB,CAAC;AAS/B,OAAO,EAAa,KAAK,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzE,OAAO,EAAE,eAAe,EAAqB,MAAM,uBAAuB,CAAC;AAC3E,OAAO,4BAA4B,CAAC;AA6BpC;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC7B,OAAO,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,yBAAyB,EACnC,WAAW,EAAE,mBAAmB;AAChC;;;;;GAKG;AACH,eAAe,EAAE;IACf,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB;;;;OAIG;IACH,WAAW,CAAC,IAAI,MAAM,GAAG,IAAI,CAAC;IAC9B,0FAA0F;IAC1F,eAAe,CAAC,IAAI,UAAU,GAAG,IAAI,CAAC;CACvC;AACD;;;;;GAKG;AACH,IAAI,CAAC,EAAE;IACL,wEAAwE;IACxE,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,IAAI,cAAc,GAAG,IAAI,CAAC;CACnC;AACD;;;;;GAKG;AACH,eAAe,GAAE,CAAC,UAAU,EAAE,oBAAoB,KAAK,OAAO,CAAC,eAAe,CAA6B;AAC3G,qFAAqF;AACrF,WAAW,GAAE,OAAO,eAAiC;AACrD;;;GAGG;AACH,eAAe,SAAK;AACpB,qFAAqF;AACrF,SAAS,GAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,OAAO,CAAC,SAAS,CAA0B;AACrF,6EAA6E;AAC7E,WAAW,GAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,CAAiC,GACvF,OAAO,CAAC,MAAM,CAkmBhB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,yBAAyB,GAAG,OAAO,CAQ7E;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,yBAAyB,GAAG,OAAO,CAEvE;AAED,mFAAmF;AACnF,wBAAgB,eAAe,CAAC,QAAQ,EAAE,yBAAyB,GAAG,OAAO,CAE5E"}
+{"version":3,"file":"setup.routes.d.ts","sourceRoot":"","sources":["../../../src/modules/settings/setup.routes.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAIvE,OAAO,EACL,yBAAyB,EAI1B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAIL,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,iBAAiB,EACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,oBAAoB,EAC1B,MAAM,uBAAuB,CAAC;AAM/B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAa,KAAK,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzE,OAAO,EAAE,eAAe,EAAqB,MAAM,uBAAuB,CAAC;AAE3E,OAAO,EAAa,KAAK,mBAAmB,EAAE,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACpG,OAAO,4BAA4B,CAAC;AAEpC;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,gBAAgB,CAAC;IACzB,4GAA4G;IAC5G,aAAa,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD;;;OAGG;IACH,SAAS,CAAC,EAAE,IAAI,CAAC,mBAAmB,EAAE,KAAK,GAAG,UAAU,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;CAC7F;AA6BD;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC7B,OAAO,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,yBAAyB,EACnC,WAAW,EAAE,mBAAmB;AAChC;;;;;GAKG;AACH,eAAe,EAAE;IACf,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB;;;;OAIG;IACH,WAAW,CAAC,IAAI,MAAM,GAAG,IAAI,CAAC;IAC9B,0FAA0F;IAC1F,eAAe,CAAC,IAAI,UAAU,GAAG,IAAI,CAAC;CACvC;AACD;;;;GAIG;AACH,EAAE,EAAE,SAAS;AACb;;;;;GAKG;AACH,IAAI,CAAC,EAAE;IACL,wEAAwE;IACxE,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,IAAI,cAAc,GAAG,IAAI,CAAC;CACnC;AACD;;;;;GAKG;AACH,eAAe,GAAE,CAAC,UAAU,EAAE,oBAAoB,KAAK,OAAO,CAAC,eAAe,CAA6B;AAC3G,qFAAqF;AACrF,WAAW,GAAE,OAAO,eAAiC;AACrD;;;GAGG;AACH,eAAe,SAAK;AACpB,qFAAqF;AACrF,SAAS,GAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,OAAO,CAAC,SAAS,CAA0B;AACrF,6EAA6E;AAC7E,WAAW,GAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,CAAiC;AACxF;;;GAGG;AACH,UAAU,CAAC,EAAE,eAAe,GAC3B,OAAO,CAAC,MAAM,CAixBhB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,yBAAyB;AACnC,8FAA8F;AAC9F,MAAM,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,GAC1C,OAAO,CAQT;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,UAAU,CACxB,QAAQ,EAAE,yBAAyB,EACnC,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC,EAC9C,MAAM,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,GAC1C,OAAO,CAET;AAED,mFAAmF;AACnF,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,yBAAyB,EACnC,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC,EAC9C,MAAM,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,GAC1C,OAAO,CAET"}