@caelo-cms/provisioning 0.10.46 → 0.10.48

package/dist/upgrader-job.js

@@ -0,0 +1,259 @@
+// SPDX-License-Identifier: MPL-2.0
+import { gcpNamePrefix, upgraderJobName } from "./gcp-names.js";
+import { executeAppRoll, planAppRoll, } from "./upgrade/app-roll.js";
+import { restoreCommand, takeSqlBackup } from "./upgrade/backup.js";
+import { findServingImageDigest, resolveGcpResourceName } from "./upgrade/gcp-lookup.js";
+import { releaseImageRef } from "./upgrade/release-images.js";
+import { assessUpgradeRequest } from "./upgrader-assess.js";
+import { eventReporter } from "./upgrader-reporter.js";
+const ROLLED_PHASES = new Set(["roll", "health"]);
+/** Attempts at recording a request's end state before the run fails. */
+const FINISH_ATTEMPTS = 3;
+const defaultSleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+/** Run the job once. Never throws; see the file comment for the sequence. */
+export async function runUpgraderJob(deps) {
+    const { queue, log } = deps;
+    let claimed;
+    try {
+        claimed = await queue.claim(deps.execution);
+    }
+    catch (e) {
+        log({ severity: "ERROR", message: `could not read update requests: ${errorText(e)}` });
+        return { exitCode: 1, requestId: null, status: null };
+    }
+    if (!claimed) {
+        log({ severity: "INFO", message: "no pending update request; nothing to do" });
+        return { exitCode: 0, requestId: null, status: null };
+    }
+    const request = claimed;
+    const r = eventReporter((phase, level, message) => queue.event(request.id, phase, level, message), log, request.id);
+    let releaseLock = null;
+    const finish = async (end) => {
+        r.phase("finish");
+        if (end.status === "succeeded")
+            r.success(`Caelo ${request.targetVersion} is installed.`);
+        else
+            r.error(end.reason ?? end.status);
+        await r.flush();
+        if (releaseLock) {
+            try {
+                releaseLock();
+            }
+            catch (e) {
+                r.warn(errorText(e));
+            }
+            releaseLock = null;
+        }
+        const recorded = await recordUpdateEnd(queue, request.id, end, log, deps.sleep);
+        const failed = end.status === "failed" || end.status === "rolled_back" || !recorded;
+        return { exitCode: failed ? 1 : 0, requestId: request.id, status: end.status };
+    };
+    const stopWith = (status, codes, reason) => finish({
+        status,
+        reason,
+        codes,
+        pauseAutoUpdates: request.trigger === "auto" && (status === "failed" || status === "rolled_back"),
+    });
+    try {
+        r.phase("start");
+        r.info(`Upgrader started${deps.execution ? ` (run ${deps.execution})` : ""}: installing Caelo ${request.targetVersion}.`);
+        // Exclusive against the installer's own state writers for the whole run.
+        try {
+            releaseLock = deps.lockState();
+        }
+        catch (e) {
+            return stopWith("failed", ["state-locked"], `Nothing was changed: another install operation is running on this site (${errorText(e)}). Try again when it has finished.`);
+        }
+        // 2. What the install runs — from its own state, never from the admin.
+        r.phase("verify");
+        const meta = deps.readInstall();
+        if (!meta || meta.projectId !== deps.projectId) {
+            return stopWith("needs_cloud_shell", ["install-state"], "The install's records (install.json) are not in its own cloud project yet, so the upgrader cannot tell what it runs. Run the upgrade once with Cloud Shell; it moves them there.");
+        }
+        if (meta.provider !== "gcp" && meta.provider !== "gcp-firebase") {
+            return stopWith("refused", ["provider"], `The upgrader job only upgrades Google Cloud installs; this one is ${meta.provider}.`);
+        }
+        // install.json must describe what actually serves: if a previous run
+        // rolled but could not record it, the recorded version is stale and
+        // the downgrade / minFromVersion checks would judge against it.
+        const serving = await servingDigests(deps);
+        if (!serving.ok) {
+            return stopWith("failed", ["lookup"], `Nothing was changed: ${serving.error}.`);
+        }
+        const recorded = meta.imageDigests;
+        if (!recorded ||
+            recorded.admin !== serving.digests.admin ||
+            recorded.gateway !== serving.digests.gateway) {
+            return stopWith("needs_cloud_shell", ["install-state-drift"], "The release that serves now is not the one the install's records (install.json) name, so the upgrader cannot tell safely what it runs. Run the upgrade once with Cloud Shell; it records the serving release again.");
+        }
+        // 3 + 4. The signed manifest decides.
+        const manifest = await deps.fetchManifest(request.targetVersion);
+        const decision = assessUpgradeRequest({
+            request,
+            manifest,
+            installed: {
+                version: meta.releaseVersion ?? null,
+                infraContractVersion: meta.infraContractVersion ?? 0,
+            },
+            policy: request.policy,
+            now: deps.now(),
+        });
+        const verified = decision.manifest;
+        if (verified) {
+            r.success(`Release information of ${verified.version} verified: signed by Caelo's release workflow.`);
+            await recordFacts(queue, request.id, verified, meta);
+        }
+        if (decision.kind === "stop") {
+            r.phase("assess");
+            return stopWith(decision.status, decision.codes, decision.reason);
+        }
+        r.phase("assess");
+        for (const w of decision.warnings)
+            r.warn(w);
+        r.info(`${meta.releaseVersion} → ${decision.manifest.version}: no cloud-setup change needed; installing.`);
+        const m = decision.manifest;
+        const images = {
+            admin: { digest: m.digests.admin, imageRef: releaseImageRef("admin", m.digests.admin) },
+            gateway: {
+                digest: m.digests.gateway,
+                imageRef: releaseImageRef("gateway", m.digests.gateway),
+            },
+        };
+        const planned = await planAppRoll({
+            provider: meta.provider,
+            projectId: deps.projectId,
+            region: deps.region,
+            env: deps.env,
+            domain: meta.domain,
+            stagingHost: meta.stagingDomain ?? `staging.${meta.domain}`,
+        }, images, deps.run);
+        if (!planned.ok) {
+            return stopWith("failed", ["plan"], `Nothing was changed: ${planned.error}.`);
+        }
+        for (const w of planned.plan.warnings)
+            r.warn(w);
+        // 5. No backup, no change.
+        r.phase("backup");
+        const sBak = r.step("Backing up the database before anything changes...");
+        const backup = await takeSqlBackup(deps.run, { projectId: deps.projectId, env: deps.env }, `pre-upgrade to ${m.version}`, deps.now);
+        if (!backup.ok) {
+            sBak.failed(`Backup failed: ${backup.error}`);
+            return stopWith("failed", ["backup"], `The pre-upgrade database backup failed, so nothing was changed (${backup.error}). Try again later.`);
+        }
+        sBak.done(`Backup ${backup.backup.backupId} taken.`);
+        await queue.record(request.id, { backupId: backup.backup.backupId });
+        const probe = await deps.healthProbe(planned.plan);
+        if (!probe.ok) {
+            return stopWith("failed", ["health-check"], `The health check could not be prepared, so nothing was changed: ${probe.error}`);
+        }
+        // 6 + 7. The roll; it rolls back by itself on failure.
+        const rolled = await executeAppRoll({
+            plan: planned.plan,
+            backup: backup.backup,
+            targetVersion: m.version,
+            migrationsContract: m.migrations.contract,
+        }, {}, {
+            run: deps.run,
+            ...(deps.sleep ? { sleep: deps.sleep } : {}),
+            reporter: r,
+            migrate: deps.migrate,
+            health: probe.probe,
+            recordDigests: async (digests) => {
+                r.phase("record");
+                try {
+                    const fresh = deps.readInstall() ?? meta;
+                    deps.writeInstall({ ...fresh, imageDigests: digests, releaseVersion: m.version });
+                    r.info(`Recorded ${m.version} as this install's release.`);
+                }
+                catch (e) {
+                    r.warn(`The new release serves, but install.json could not be updated (${errorText(e)}). The next update will stop and ask for one upgrade with Cloud Shell, which records it.`);
+                }
+            },
+        });
+        if (!rolled.ok) {
+            const restore = rolled.migrated
+                ? ` The database backup ${backup.backup.backupId} is there if you need it (${restoreCommand(backup.backup)}).`
+                : "";
+            if (ROLLED_PHASES.has(rolled.phase)) {
+                return stopWith("rolled_back", [rolled.phase], `Caelo ${m.version} did not pass its checks, so the previous release serves again.${restore}`);
+            }
+            return stopWith("failed", [rolled.phase], `Stopped during ${rolled.phase === "migrations" ? "the database migrations" : "the pre-check"}; the previous release keeps serving.${restore}`);
+        }
+        // 8. Self-update, last: the next run uses this release's upgrader.
+        r.phase("self-update");
+        const job = upgraderJobName(deps.env);
+        const self = await deps.run([
+            "run",
+            "jobs",
+            "update",
+            job,
+            `--image=${releaseImageRef("ops", m.digests.ops)}`,
+            `--region=${deps.region}`,
+            `--project=${deps.projectId}`,
+            "--quiet",
+        ]);
+        if (self.ok)
+            r.info(`The upgrader itself now runs ${m.version}.`);
+        else {
+            r.warn(`The upgrader could not update itself (${self.stderr.trim().slice(0, 300)}); the next update still works, with this run's upgrader.`);
+        }
+        return finish({ status: "succeeded", reason: null, codes: [], pauseAutoUpdates: false });
+    }
+    catch (e) {
+        return stopWith("failed", ["internal"], `The upgrader stopped unexpectedly: ${errorText(e)}. If the site misbehaves, check Settings → Updates and the job's log.`);
+    }
+}
+/**
+ * End request `requestId` as `end`, retrying a failed write: the end state
+ * is what unblocks the next update, so a transient database error must not
+ * leave the request "running" while the run reports success.
+ *
+ * @returns whether the end was written (false after the last attempt failed)
+ */
+export async function recordUpdateEnd(queue, requestId, end, log, sleep = defaultSleep) {
+    for (let attempt = 1; attempt <= FINISH_ATTEMPTS; attempt++) {
+        try {
+            await queue.finish(requestId, end);
+            return true;
+        }
+        catch (e) {
+            log({
+                severity: "ERROR",
+                message: `could not record the end of request ${requestId} (attempt ${attempt}/${FINISH_ATTEMPTS}): ${errorText(e)}`,
+            });
+            if (attempt < FINISH_ATTEMPTS)
+                await sleep(attempt * 5_000);
+        }
+    }
+    return false;
+}
+/** The digests the revisions serving traffic run, per service. */
+async function servingDigests(deps) {
+    const digests = {};
+    for (const slug of ["admin", "gateway"]) {
+        const prefix = `${gcpNamePrefix(deps.env)}-${slug}`;
+        const service = await resolveGcpResourceName(deps.run, "run-service", prefix, deps.projectId, deps.region);
+        const digest = service
+            ? await findServingImageDigest(deps.run, deps.projectId, deps.region, service)
+            : null;
+        if (!digest)
+            return { ok: false, error: `could not read which image the ${slug} serves` };
+        digests[slug] = digest;
+    }
+    return { ok: true, digests: digests };
+}
+async function recordFacts(queue, requestId, m, meta) {
+    await queue.record(requestId, {
+        manifestSecurity: m.security,
+        contractMigrations: m.migrations.contract,
+        infraContractRequired: m.infraContractVersion,
+        infraContractInstalled: meta.infraContractVersion ?? 0,
+        adminDigest: m.digests.admin,
+        gatewayDigest: m.digests.gateway,
+        opsDigest: m.digests.ops,
+    });
+}
+function errorText(e) {
+    return e instanceof Error ? e.message : String(e);
+}
+//# sourceMappingURL=upgrader-job.js.map

package/dist/upgrader-job.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrader-job.js","sourceRoot":"","sources":["../src/upgrader-job.ts"],"names":[],"mappings":"AAAA,mCAAmC;AAyCnC,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAGhE,OAAO,EAEL,cAAc,EACd,WAAW,GAGZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEzF,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAoB,MAAM,sBAAsB,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAe,MAAM,wBAAwB,CAAC;AAmGpE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAElD,wEAAwE;AACxE,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B,MAAM,YAAY,GAAU,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAEtF,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAqB;IACxD,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAC5B,IAAI,OAA6B,CAAC;IAClC,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,mCAAmC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvF,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACxD,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC,CAAC;QAC/E,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACxD,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC;IACxB,MAAM,CAAC,GAAG,aAAa,CACrB,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,EACzE,GAAG,EACH,OAAO,CAAC,EAAE,CACX,CAAC;IACF,IAAI,WAAW,GAAwB,IAAI,CAAC;IAC5C,MAAM,MAAM,GAAG,KAAK,EAAE,GAAc,EAA8B,EAAE;QAClE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClB,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW;YAAE,CAAC,CAAC,OAAO,CAAC,SAAS,OAAO,CAAC,aAAa,gBAAgB,CAAC,CAAC;;YACrF,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,WAAW,EAAE,CAAC;YAChB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YACvB,CAAC;YACD,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,aAAa,IAAI,CAAC,QAAQ,CAAC;QACpF,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IACjF,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,CACf,MAAuB,EACvB,KAAwC,EACxC,MAAc,EACd,EAAE,CACF,MAAM,CAAC;QACL,MAAM;QACN,MAAM;QACN,KAAK;QACL,gBAAgB,EACd,OAAO,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,aAAa,CAAC;KAClF,CAAC,CAAC;IAEL,IAAI,CAAC;QACH,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjB,CAAC,CAAC,IAAI,CACJ,mBAAmB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,sBAAsB,OAAO,CAAC,aAAa,GAAG,CAClH,CAAC;QAEF,yEAAyE;QACzE,IAAI,CAAC;YACH,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,QAAQ,CACb,QAAQ,EACR,CAAC,cAAc,CAAC,EAChB,2EAA2E,SAAS,CAAC,CAAC,CAAC,oCAAoC,CAC5H,CAAC;QACJ,CAAC;QAED,uEAAuE;QACvE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/C,OAAO,QAAQ,CACb,mBAAmB,EACnB,CAAC,eAAe,CAAC,EACjB,kLAAkL,CACnL,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;YAChE,OAAO,QAAQ,CACb,SAAS,EACT,CAAC,UAAU,CAAC,EACZ,qEAAqE,IAAI,CAAC,QAAQ,GAAG,CACtF,CAAC;QACJ,CAAC;QAED,qEAAqE;QACrE,oEAAoE;QACpE,gEAAgE;QAChE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,wBAAwB,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;QACnC,IACE,CAAC,QAAQ;YACT,QAAQ,CAAC,KAAK,KAAK,OAAO,CAAC,OAAO,CAAC,KAAK;YACxC,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,OAAO,EAC5C,CAAC;YACD,OAAO,QAAQ,CACb,mBAAmB,EACnB,CAAC,qBAAqB,CAAC,EACvB,qNAAqN,CACtN,CAAC;QACJ,CAAC;QAED,sCAAsC;QACtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,oBAAoB,CAAC;YACpC,OAAO;YACP,QAAQ;YACR,SAAS,EAAE;gBACT,OAAO,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI;gBACpC,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,IAAI,CAAC;aACrD;YACD,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;SAChB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;QACnC,IAAI,QAAQ,EAAE,CAAC;YACb,CAAC,CAAC,OAAO,CACP,0BAA0B,QAAQ,CAAC,OAAO,gDAAgD,CAC3F,CAAC;YACF,MAAM,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC7B,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAClB,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpE,CAAC;QACD,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClB,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ;YAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC,CAAC,IAAI,CACJ,GAAG,IAAI,CAAC,cAAc,MAAM,QAAQ,CAAC,QAAQ,CAAC,OAAO,6CAA6C,CACnG,CAAC;QAEF,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC;QAC5B,MAAM,MAAM,GAAmC;YAC7C,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;YACvF,OAAO,EAAE;gBACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO;gBACzB,QAAQ,EAAE,eAAe,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;aACxD;SACF,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,WAAW,CAC/B;YACE,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,IAAI,CAAC,aAAa,IAAI,WAAW,IAAI,CAAC,MAAM,EAAE;SAC5D,EACD,MAAM,EACN,IAAI,CAAC,GAAG,CACT,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,wBAAwB,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;QAChF,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ;YAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEjD,2BAA2B;QAC3B,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClB,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC,IAAI,CAAC,GAAG,EACR,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAC5C,kBAAkB,CAAC,CAAC,OAAO,EAAE,EAC7B,IAAI,CAAC,GAAG,CACT,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,kBAAkB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9C,OAAO,QAAQ,CACb,QAAQ,EACR,CAAC,QAAQ,CAAC,EACV,mEAAmE,MAAM,CAAC,KAAK,qBAAqB,CACrG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,MAAM,CAAC,QAAQ,SAAS,CAAC,CAAC;QACrD,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAErE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,QAAQ,CACb,QAAQ,EACR,CAAC,cAAc,CAAC,EAChB,mEAAmE,KAAK,CAAC,KAAK,EAAE,CACjF,CAAC;QACJ,CAAC;QAED,uDAAuD;QACvD,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC;YACE,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,aAAa,EAAE,CAAC,CAAC,OAAO;YACxB,kBAAkB,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ;SAC1C,EACD,EAAE,EACF;YACE,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,KAAK,CAAC,KAAK;YACnB,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;gBAC/B,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAClB,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC;oBACzC,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;oBAClF,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,6BAA6B,CAAC,CAAC;gBAC7D,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,CAAC,CAAC,IAAI,CACJ,kEAAkE,SAAS,CAAC,CAAC,CAAC,0FAA0F,CACzK,CAAC;gBACJ,CAAC;YACH,CAAC;SACF,CACF,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ;gBAC7B,CAAC,CAAC,wBAAwB,MAAM,CAAC,MAAM,CAAC,QAAQ,6BAA6B,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI;gBAC9G,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpC,OAAO,QAAQ,CACb,aAAa,EACb,CAAC,MAAM,CAAC,KAAK,CAAC,EACd,SAAS,CAAC,CAAC,OAAO,kEAAkE,OAAO,EAAE,CAC9F,CAAC;YACJ,CAAC;YACD,OAAO,QAAQ,CACb,QAAQ,EACR,CAAC,MAAM,CAAC,KAAK,CAAC,EACd,kBAAkB,MAAM,CAAC,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,eAAe,wCAAwC,OAAO,EAAE,CAC/I,CAAC;QACJ,CAAC;QAED,mEAAmE;QACnE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACvB,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC;YAC1B,KAAK;YACL,MAAM;YACN,QAAQ;YACR,GAAG;YACH,WAAW,eAAe,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;YAClD,YAAY,IAAI,CAAC,MAAM,EAAE;YACzB,aAAa,IAAI,CAAC,SAAS,EAAE;YAC7B,SAAS;SACV,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,EAAE;YAAE,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;aAC7D,CAAC;YACJ,CAAC,CAAC,IAAI,CACJ,yCAAyC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,2DAA2D,CACrI,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3F,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,QAAQ,CACb,QAAQ,EACR,CAAC,UAAU,CAAC,EACZ,sCAAsC,SAAS,CAAC,CAAC,CAAC,uEAAuE,CAC1H,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAkB,EAClB,SAAiB,EACjB,GAAc,EACd,GAAW,EACX,QAAe,YAAY;IAE3B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,eAAe,EAAE,OAAO,EAAE,EAAE,CAAC;QAC5D,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC;gBACF,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,uCAAuC,SAAS,aAAa,OAAO,IAAI,eAAe,MAAM,SAAS,CAAC,CAAC,CAAC,EAAE;aACrH,CAAC,CAAC;YACH,IAAI,OAAO,GAAG,eAAe;gBAAE,MAAM,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kEAAkE;AAClE,KAAK,UAAU,cAAc,CAC3B,IAAqB;IAErB,MAAM,OAAO,GAAsC,EAAE,CAAC;IACtD,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,SAAS,CAAU,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAC1C,IAAI,CAAC,GAAG,EACR,aAAa,EACb,MAAM,EACN,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,MAAM,CACZ,CAAC;QACF,MAAM,MAAM,GAAG,OAAO;YACpB,CAAC,CAAC,MAAM,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC;YAC9E,CAAC,CAAC,IAAI,CAAC;QACT,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,IAAI,SAAS,EAAE,CAAC;QAC1F,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;IACzB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAmC,EAAE,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,KAAkB,EAClB,SAAiB,EACjB,CAAkB,EAClB,IAAqB;IAErB,MAAM,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE;QAC5B,gBAAgB,EAAE,CAAC,CAAC,QAAQ;QAC5B,kBAAkB,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ;QACzC,qBAAqB,EAAE,CAAC,CAAC,oBAAoB;QAC7C,sBAAsB,EAAE,IAAI,CAAC,oBAAoB,IAAI,CAAC;QACtD,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK;QAC5B,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO;QAChC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG;KACzB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,CAAU;IAC3B,OAAO,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC"}

package/dist/upgrader-reporter.d.ts

@@ -0,0 +1,35 @@
+/**
+ * The upgrader job's {@link UpgradeReporter}: every line the app-roll
+ * (upgrade/app-roll.ts) reports becomes a `platform_update_events` row the
+ * admin renders as a live timeline, and a structured Cloud Logging entry.
+ *
+ * The reporter interface is synchronous (the CLI's spinners are), but each
+ * event is a database write, so writes are chained in order and the job
+ * awaits {@link EventReporter.flush} before it finishes. A failed event
+ * write never fails the upgrade — the roll matters more than its narration —
+ * but it lands in the job log.
+ */
+import { type PlatformUpdateEventLevel, type PlatformUpdatePhase } from "@caelo-cms/shared";
+import type { UpgradeReporter } from "./upgrade/reporter.js";
+/** Appends one timeline line (the job's database queue). */
+export type EventSink = (phase: PlatformUpdatePhase, level: PlatformUpdateEventLevel, message: string) => Promise<void>;
+/** One structured Cloud Logging line. */
+export type JobLog = (entry: {
+    readonly severity: "INFO" | "WARNING" | "ERROR";
+    readonly message: string;
+    readonly [field: string]: unknown;
+}) => void;
+export interface EventReporter extends UpgradeReporter {
+    /** Set the phase following lines belong to (the job's own stages). */
+    phase(phase: PlatformUpdatePhase): void;
+    /** Wait until every event so far is written. */
+    flush(): Promise<void>;
+}
+/**
+ * The phase an app-roll step belongs to, from its label (app-roll.ts names
+ * its steps). Unknown labels keep the current phase.
+ */
+export declare function phaseOfStep(label: string): PlatformUpdatePhase | null;
+/** Build the reporter for one request. */
+export declare function eventReporter(sink: EventSink, log: JobLog, requestId: string): EventReporter;
+//# sourceMappingURL=upgrader-reporter.d.ts.map

package/dist/upgrader-reporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrader-reporter.d.ts","sourceRoot":"","sources":["../src/upgrader-reporter.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AAEH,OAAO,EAEL,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAc,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAEzE,4DAA4D;AAC5D,MAAM,MAAM,SAAS,GAAG,CACtB,KAAK,EAAE,mBAAmB,EAC1B,KAAK,EAAE,wBAAwB,EAC/B,OAAO,EAAE,MAAM,KACZ,OAAO,CAAC,IAAI,CAAC,CAAC;AAEnB,yCAAyC;AACzC,MAAM,MAAM,MAAM,GAAG,CAAC,KAAK,EAAE;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CACnC,KAAK,IAAI,CAAC;AAEX,MAAM,WAAW,aAAc,SAAQ,eAAe;IACpD,sEAAsE;IACtE,KAAK,CAAC,KAAK,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACxC,gDAAgD;IAChD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAMrE;AASD,0CAA0C;AAC1C,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,aAAa,CA0C5F"}

package/dist/upgrader-reporter.js

@@ -0,0 +1,79 @@
+// SPDX-License-Identifier: MPL-2.0
+/**
+ * The upgrader job's {@link UpgradeReporter}: every line the app-roll
+ * (upgrade/app-roll.ts) reports becomes a `platform_update_events` row the
+ * admin renders as a live timeline, and a structured Cloud Logging entry.
+ *
+ * The reporter interface is synchronous (the CLI's spinners are), but each
+ * event is a database write, so writes are chained in order and the job
+ * awaits {@link EventReporter.flush} before it finishes. A failed event
+ * write never fails the upgrade — the roll matters more than its narration —
+ * but it lands in the job log.
+ */
+import { PLATFORM_UPDATE_EVENT_MAX, } from "@caelo-cms/shared";
+/**
+ * The phase an app-roll step belongs to, from its label (app-roll.ts names
+ * its steps). Unknown labels keep the current phase.
+ */
+export function phaseOfStep(label) {
+    if (label.startsWith("Checking the health check"))
+        return "health-baseline";
+    if (label.startsWith("Applying DB migrations"))
+        return "migrations";
+    if (label.startsWith("Rolling "))
+        return "roll";
+    if (label.startsWith("Deep health check"))
+        return "health";
+    return null;
+}
+const SEVERITY = {
+    info: "INFO",
+    success: "INFO",
+    warn: "WARNING",
+    error: "ERROR",
+};
+/** Build the reporter for one request. */
+export function eventReporter(sink, log, requestId) {
+    let current = "start";
+    let chain = Promise.resolve();
+    const emit = (level, message, phase = current) => {
+        const text = message.trim().slice(0, PLATFORM_UPDATE_EVENT_MAX) || "(no message)";
+        log({ severity: SEVERITY[level], message: text, requestId, phase });
+        chain = chain.then(() => sink(phase, level, text).catch((e) => {
+            log({
+                severity: "ERROR",
+                message: `could not record a timeline event: ${e instanceof Error ? e.message : String(e)}`,
+                requestId,
+            });
+        }));
+    };
+    return {
+        phase(p) {
+            current = p;
+        },
+        async flush() {
+            await chain;
+        },
+        step(label) {
+            const p = phaseOfStep(label);
+            if (p)
+                current = p;
+            emit("info", label);
+            return {
+                done: (m) => emit("success", m),
+                failed: (m) => emit("error", m),
+                warned: (m) => emit("warn", m),
+            };
+        },
+        info: (m) => emit("info", m),
+        warn: (m) => {
+            // app-roll announces a rollback with a warning before it starts.
+            if (m.startsWith("Rolling back"))
+                current = "rollback";
+            emit("warn", m);
+        },
+        error: (m) => emit("error", m),
+        success: (m) => emit("success", m),
+    };
+}
+//# sourceMappingURL=upgrader-reporter.js.map

package/dist/upgrader-reporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrader-reporter.js","sourceRoot":"","sources":["../src/upgrader-reporter.ts"],"names":[],"mappings":"AAAA,mCAAmC;AAEnC;;;;;;;;;;GAUG;AAEH,OAAO,EACL,yBAAyB,GAG1B,MAAM,mBAAmB,CAAC;AAwB3B;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,IAAI,KAAK,CAAC,UAAU,CAAC,2BAA2B,CAAC;QAAE,OAAO,iBAAiB,CAAC;IAC5E,IAAI,KAAK,CAAC,UAAU,CAAC,wBAAwB,CAAC;QAAE,OAAO,YAAY,CAAC;IACpE,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,MAAM,CAAC;IAChD,IAAI,KAAK,CAAC,UAAU,CAAC,mBAAmB,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC3D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,QAAQ,GAAmE;IAC/E,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,MAAM;IACf,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,OAAO;CACf,CAAC;AAEF,0CAA0C;AAC1C,MAAM,UAAU,aAAa,CAAC,IAAe,EAAE,GAAW,EAAE,SAAiB;IAC3E,IAAI,OAAO,GAAwB,OAAO,CAAC;IAC3C,IAAI,KAAK,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,KAA+B,EAAE,OAAe,EAAE,KAAK,GAAG,OAAO,EAAE,EAAE;QACjF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,yBAAyB,CAAC,IAAI,cAAc,CAAC;QAClF,GAAG,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CACtB,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;YAC5C,GAAG,CAAC;gBACF,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,sCAAsC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;gBAC3F,SAAS;aACV,CAAC,CAAC;QACL,CAAC,CAAC,CACH,CAAC;IACJ,CAAC,CAAC;IACF,OAAO;QACL,KAAK,CAAC,CAAC;YACL,OAAO,GAAG,CAAC,CAAC;QACd,CAAC;QACD,KAAK,CAAC,KAAK;YACT,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC,KAAK;YACR,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,CAAC;gBAAE,OAAO,GAAG,CAAC,CAAC;YACnB,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACpB,OAAO;gBACL,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;gBAC/B,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC/B,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;aAC/B,CAAC;QACJ,CAAC;QACD,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5B,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE;YACV,iEAAiE;YACjE,IAAI,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC;gBAAE,OAAO,GAAG,UAAU,CAAC;YACvD,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9B,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;KACnC,CAAC;AACJ,CAAC"}

package/dist/upgrader-setup.d.ts

@@ -0,0 +1,59 @@
+import { type GcloudRunner, type Sleep } from "./gcloud-retry.js";
+import { type CustomRoleSpec } from "./operator-access.js";
+/** Cloud SQL backups for the pre-upgrade backup — nothing else on the instance. */
+export declare const UPGRADER_SQL_BACKUP_ROLE: CustomRoleSpec;
+/** Project-level roles of the upgrader's service account. */
+export declare const UPGRADER_PROJECT_ROLES: readonly ["roles/run.developer", "roles/cloudsql.instanceUser", "roles/logging.logWriter"];
+/**
+ * Roles the upgrader must never hold anywhere — they would let it change
+ * IAM, manage service accounts or secrets, or touch compute/projects.
+ * Prefix matches (`roles/compute.` = every compute role).
+ */
+export declare const UPGRADER_FORBIDDEN_ROLES: readonly ["roles/owner", "roles/editor", "roles/run.admin", "roles/iam.serviceAccountAdmin", "roles/iam.serviceAccountKeyAdmin", "roles/iam.securityAdmin", "roles/iam.roleAdmin", "roles/resourcemanager.", "roles/secretmanager.admin", "roles/secretmanager.secretVersionAdder", "roles/compute.", "roles/cloudsql.admin", "roles/cloudsql.editor", "roles/storage.admin", "roles/storage.objectAdmin"];
+/** Database role migration 0267 creates for the job. */
+export declare const UPGRADER_DB_ROLE = "platform_updater";
+export interface UpgraderSetupTarget {
+    readonly projectId: string;
+    readonly region: string;
+    /** Pulumi stack name (`production`). */
+    readonly env: string;
+    /** The caelo-ops image to run, digest-pinned (`…/ops@sha256:…`). */
+    readonly opsImageRef: string;
+    /** VPC the admin uses to reach Cloud SQL's private IP. */
+    readonly network: string;
+    readonly subnet: string;
+}
+export type UpgraderSetupResult = {
+    readonly ok: true;
+    readonly done: string[];
+} | {
+    readonly ok: false;
+    readonly done: string[];
+    readonly error: string;
+};
+/** The ops bucket condition: install.json and progress.json, not the Pulumi state. */
+export declare function installStateCondition(bucket: string): string;
+/** Ensure the upgrader job and everything it needs. Never throws for a gcloud failure. */
+export declare function ensureUpgraderJob(target: UpgraderSetupTarget, deps?: {
+    run?: GcloudRunner;
+    sleep?: Sleep;
+}): Promise<UpgraderSetupResult>;
+/**
+ * {@link ensureUpgraderJob}'s target, with the VPC read from the deployed
+ * admin service (the job reaches Cloud SQL's private IP the same way).
+ */
+export declare function resolveUpgraderTarget(opts: {
+    readonly projectId: string;
+    readonly region: string;
+    readonly env: string;
+    readonly opsImageRef: string;
+}, deps?: {
+    run?: GcloudRunner;
+}): Promise<{
+    ok: true;
+    target: UpgraderSetupTarget;
+} | {
+    ok: false;
+    error: string;
+}>;
+//# sourceMappingURL=upgrader-setup.d.ts.map

package/dist/upgrader-setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrader-setup.d.ts","sourceRoot":"","sources":["../src/upgrader-setup.ts"],"names":[],"mappings":"AA6CA,OAAO,EAAE,KAAK,YAAY,EAA2B,KAAK,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAU3F,OAAO,EAAE,KAAK,cAAc,EAAoC,MAAM,sBAAsB,CAAC;AAG7F,mFAAmF;AACnF,eAAO,MAAM,wBAAwB,EAAE,cAYtC,CAAC;AAEF,6DAA6D;AAC7D,eAAO,MAAM,sBAAsB,4FAIzB,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,4YAgB3B,CAAC;AAEX,wDAAwD;AACxD,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAKnD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,wCAAwC;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,0DAA0D;IAC1D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,GAC9C;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5E,sFAAsF;AACtF,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,0FAA0F;AAC1F,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,mBAAmB,EAC3B,IAAI,GAAE;IAAE,GAAG,CAAC,EAAE,YAAY,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CAAO,GAC/C,OAAO,CAAC,mBAAmB,CAAC,CAoM9B;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE;IACJ,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B,EACD,IAAI,GAAE;IAAE,GAAG,CAAC,EAAE,YAAY,CAAA;CAAO,GAChC,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,mBAAmB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAUnF"}