@caelo-cms/provisioning 0.10.51 → 0.10.53

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (117) hide show
  1. package/caddy/Caddyfile.production +1 -1
  2. package/caddy/Caddyfile.staging +1 -1
  3. package/dist/agent/command.js +1 -0
  4. package/dist/agent/command.js.map +1 -1
  5. package/dist/agent/units.js +1 -1
  6. package/dist/agent/units.js.map +1 -1
  7. package/dist/agent-db.js +89 -45
  8. package/dist/aws-task-roles.d.ts +1 -1
  9. package/dist/aws-task-roles.d.ts.map +1 -1
  10. package/dist/aws-task-roles.js +0 -1
  11. package/dist/aws-task-roles.js.map +1 -1
  12. package/dist/cli-routing.d.ts +20 -0
  13. package/dist/cli-routing.d.ts.map +1 -1
  14. package/dist/cli-routing.js +106 -0
  15. package/dist/cli-routing.js.map +1 -1
  16. package/dist/cli.js +5 -6
  17. package/dist/cli.js.map +1 -1
  18. package/dist/compose.d.ts +4 -3
  19. package/dist/compose.d.ts.map +1 -1
  20. package/dist/compose.js +3 -2
  21. package/dist/compose.js.map +1 -1
  22. package/dist/gateway-credentials.d.ts +3 -5
  23. package/dist/gateway-credentials.d.ts.map +1 -1
  24. package/dist/gateway-credentials.js +8 -18
  25. package/dist/gateway-credentials.js.map +1 -1
  26. package/dist/infra-contract.d.ts +1 -1
  27. package/dist/infra-contract.d.ts.map +1 -1
  28. package/dist/infra-contract.js +14 -1
  29. package/dist/infra-contract.js.map +1 -1
  30. package/dist/ops-backend.js +1 -1
  31. package/dist/release-contract.d.ts.map +1 -1
  32. package/dist/release-contract.js +3 -0
  33. package/dist/release-contract.js.map +1 -1
  34. package/dist/runtime-secrets.d.ts +1 -3
  35. package/dist/runtime-secrets.d.ts.map +1 -1
  36. package/dist/runtime-secrets.js +2 -6
  37. package/dist/runtime-secrets.js.map +1 -1
  38. package/dist/self-hosted-roles.d.ts +9 -8
  39. package/dist/self-hosted-roles.d.ts.map +1 -1
  40. package/dist/self-hosted-roles.js +9 -9
  41. package/dist/self-hosted-roles.js.map +1 -1
  42. package/dist/self-hosted-upgrade.d.ts +7 -1
  43. package/dist/self-hosted-upgrade.d.ts.map +1 -1
  44. package/dist/self-hosted-upgrade.js +17 -4
  45. package/dist/self-hosted-upgrade.js.map +1 -1
  46. package/dist/stack-contract.d.ts +52 -3
  47. package/dist/stack-contract.d.ts.map +1 -1
  48. package/dist/stack-contract.js +36 -36
  49. package/dist/stack-contract.js.map +1 -1
  50. package/dist/state-store.d.ts +8 -0
  51. package/dist/state-store.d.ts.map +1 -1
  52. package/dist/state-store.js +10 -2
  53. package/dist/state-store.js.map +1 -1
  54. package/dist/upgrade/converge.d.ts.map +1 -1
  55. package/dist/upgrade/converge.js +5 -13
  56. package/dist/upgrade/converge.js.map +1 -1
  57. package/dist/upgrader-job.d.ts.map +1 -1
  58. package/dist/upgrader-job.js +7 -1
  59. package/dist/upgrader-job.js.map +1 -1
  60. package/dist/upgrader-setup.d.ts +5 -0
  61. package/dist/upgrader-setup.d.ts.map +1 -1
  62. package/dist/upgrader-setup.js +40 -6
  63. package/dist/upgrader-setup.js.map +1 -1
  64. package/dist/wizards/gcp.d.ts.map +1 -1
  65. package/dist/wizards/gcp.js +2 -31
  66. package/dist/wizards/gcp.js.map +1 -1
  67. package/package.json +7 -5
  68. package/src/admin-memory.test.ts +1 -1
  69. package/src/agent/command.ts +1 -0
  70. package/src/agent/units.ts +1 -1
  71. package/src/aws-task-roles.ts +0 -2
  72. package/src/caddy-redirects.docker.test.ts +8 -1
  73. package/src/caddy-redirects.test.ts +1 -1
  74. package/src/checkpoint-secrets.test.ts +0 -2
  75. package/src/cli-routing.test.ts +27 -1
  76. package/src/cli-routing.ts +131 -0
  77. package/src/cli.ts +5 -8
  78. package/src/compose.ts +13 -5
  79. package/src/error-pages-stacks.test.ts +38 -0
  80. package/src/gateway-credentials.test.ts +0 -29
  81. package/src/gateway-credentials.ts +11 -25
  82. package/src/gateway-env-isolation.test.ts +7 -2
  83. package/src/index.test.ts +7 -6
  84. package/src/infra-contract.test.ts +5 -3
  85. package/src/infra-contract.ts +14 -1
  86. package/src/ops-backend.ts +1 -1
  87. package/src/release-contract.ts +3 -0
  88. package/src/release-manifest.test.ts +1 -0
  89. package/src/runtime-secrets.test.ts +9 -81
  90. package/src/runtime-secrets.ts +2 -6
  91. package/src/self-hosted-compose.test.ts +1 -1
  92. package/src/self-hosted-roles.integration.test.ts +23 -38
  93. package/src/self-hosted-roles.test.ts +11 -7
  94. package/src/self-hosted-roles.ts +17 -16
  95. package/src/self-hosted-upgrade.test.ts +28 -1
  96. package/src/self-hosted-upgrade.ts +29 -4
  97. package/src/stack-contract.test.ts +15 -11
  98. package/src/stack-contract.ts +40 -5
  99. package/src/stack-converge-secrets.test.ts +2 -0
  100. package/src/stack-converge.test.ts +2 -0
  101. package/src/state-store.ts +11 -2
  102. package/src/upgrade/converge.ts +5 -19
  103. package/src/upgrader-job.test.ts +17 -1
  104. package/src/upgrader-job.ts +13 -3
  105. package/src/upgrader-setup.test.ts +12 -1
  106. package/src/upgrader-setup.ts +41 -5
  107. package/src/welcome-page.test.ts +40 -0
  108. package/src/wizards/gcp.ts +2 -32
  109. package/stacks/aws/README.md +3 -1
  110. package/stacks/aws/index.ts +8 -6
  111. package/stacks/azure/README.md +3 -1
  112. package/stacks/azure/index.ts +9 -6
  113. package/stacks/gcp/README.md +1 -1
  114. package/stacks/gcp/index.ts +1 -4
  115. package/stacks/gcp-firebase/index.ts +1 -4
  116. package/stacks/self-hosted/index.ts +4 -11
  117. package/static/welcome.html +93 -111
package/static/welcome.html CHANGED
@@ -5,151 +5,133 @@
5
5
  Uploaded by the provisioning wizard the first time it brings up the
6
6
  static bucket. Replaced the moment the operator publishes their
7
7
  first deploy via the admin app's "Publish" flow.
8
+
9
+ #781 — the first arrival screen: the Caelatum sky with the message on
10
+ a relief plate, matching the admin's sign-in screens. Fully
11
+ self-contained on purpose: inline CSS, inline SVG mark, no web fonts
12
+ and no other external requests (the page is served from a bucket that
13
+ has nothing else in it yet). Schibsted Grotesk is used when installed
14
+ locally; otherwise the fallback stack renders.
8
15
  -->
9
16
  <html lang="en">
10
17
  <head>
11
18
  <meta charset="utf-8">
12
19
  <meta name="viewport" content="width=device-width,initial-scale=1">
13
20
  <meta name="robots" content="noindex">
21
+ <meta name="color-scheme" content="light dark">
14
22
  <title>Caelo CMS — your install is ready</title>
15
23
  <style>
16
24
  *,*::before,*::after { box-sizing: border-box; margin: 0; padding: 0; }
17
25
  :root {
18
- --fg: #0c0d12;
19
- --muted: #4a4e5e;
20
- --accent: #4f46e5;
21
- --accent-glow: #818cf8;
22
- --card-bg: rgba(255,255,255,0.78);
23
- --card-border: rgba(255,255,255,0.55);
24
- --shadow: 0 30px 60px -20px rgba(15,17,40,0.18), 0 8px 18px -8px rgba(15,17,40,0.10);
26
+ --ink: #0e1a2e;
27
+ --muted: #4a576b;
28
+ --card: #ffffff;
29
+ --line: #e0e5ee;
30
+ --code-bg: #f2f5fa;
31
+ --sky-label: #1f5299;
32
+ --sky: linear-gradient(180deg, #c3dbf2 0%, #dce9f6 40%, #efe7ef 72%, #f8e6d8 100%);
33
+ --plate-ring: rgba(255, 255, 255, 0.55);
34
+ }
35
+ /* The sky is light-mode only; dark mode is the admin's night blue. */
36
+ @media (prefers-color-scheme: dark) {
37
+ :root {
38
+ --ink: #e6ecf5;
39
+ --muted: #9fb0c8;
40
+ --card: #111c2e;
41
+ --line: #22314a;
42
+ --code-bg: #16233a;
43
+ --sky-label: #7fb4ff;
44
+ --sky: none;
45
+ --plate-ring: rgba(255, 255, 255, 0.08);
46
+ }
25
47
  }
26
- html, body { height: 100%; }
48
+ html, body { min-height: 100%; }
27
49
  body {
28
- font: 16px/1.55 system-ui, -apple-system, "Segoe UI", Helvetica, Arial, sans-serif;
29
- color: var(--fg);
50
+ font: 16px/1.55 "Schibsted Grotesk", Arial, Helvetica, sans-serif;
51
+ color: var(--ink);
52
+ background: #f8f9fc var(--sky);
53
+ min-height: 100vh;
30
54
  display: grid;
31
55
  place-items: center;
32
- padding: 2rem;
33
- background: #f6f6fb;
34
- overflow: hidden;
35
- position: relative;
36
- }
37
- /* Animated mesh-gradient background. Three soft blobs orbiting at
38
- different speeds; backdrop-filter on the card softens them. */
39
- .blob {
40
- position: fixed;
41
- border-radius: 50%;
42
- filter: blur(80px);
43
- opacity: 0.55;
44
- pointer-events: none;
45
- animation: drift 22s ease-in-out infinite;
46
- will-change: transform;
56
+ padding: 3rem 1rem;
47
57
  }
48
- .blob.b1 { width: 520px; height: 520px; background: #818cf8; top: -120px; left: -160px; animation-delay: -3s; }
49
- .blob.b2 { width: 460px; height: 460px; background: #f0abfc; bottom: -180px; right: -140px; animation-delay: -8s; }
50
- .blob.b3 { width: 380px; height: 380px; background: #67e8f9; top: 40%; left: 55%; animation-delay: -14s; animation-duration: 27s; }
51
- @keyframes drift {
52
- 0%, 100% { transform: translate(0, 0) scale(1); }
53
- 33% { transform: translate(40px, -30px) scale(1.07); }
54
- 66% { transform: translate(-30px, 35px) scale(0.96); }
58
+ @media (prefers-color-scheme: dark) {
59
+ body { background: #0b1422; }
55
60
  }
56
- @media (prefers-reduced-motion: reduce) {
57
- .blob { animation: none; }
58
- }
59
-
60
- main {
61
- position: relative;
62
- z-index: 1;
63
- max-width: 36rem;
64
- width: 100%;
65
- background: var(--card-bg);
66
- border: 1px solid var(--card-border);
67
- border-radius: 22px;
68
- padding: 2.5rem;
69
- box-shadow: var(--shadow);
70
- backdrop-filter: blur(14px) saturate(140%);
71
- -webkit-backdrop-filter: blur(14px) saturate(140%);
72
- }
73
-
74
- .brand {
75
- display: flex;
76
- align-items: center;
77
- gap: 0.65rem;
61
+ .frame { width: 100%; max-width: 36rem; }
62
+ .kicker {
63
+ text-align: center;
64
+ font-size: 0.75rem;
78
65
  font-weight: 600;
79
- letter-spacing: -0.01em;
80
- color: var(--muted);
81
- font-size: 0.95rem;
82
- margin-bottom: 1.5rem;
66
+ letter-spacing: 0.14em;
67
+ text-transform: uppercase;
68
+ color: var(--sky-label);
69
+ margin-bottom: 1rem;
83
70
  }
84
- .brand .dot {
85
- width: 10px; height: 10px; border-radius: 50%;
86
- background: var(--accent);
87
- box-shadow: 0 0 0 0 var(--accent-glow);
88
- animation: pulse 1.8s ease-out infinite;
89
- }
90
- @keyframes pulse {
91
- 0% { box-shadow: 0 0 0 0 rgba(79,70,229,0.55); }
92
- 70% { box-shadow: 0 0 0 12px rgba(79,70,229,0); }
93
- 100% { box-shadow: 0 0 0 0 rgba(79,70,229,0); }
71
+ main {
72
+ background: var(--card);
73
+ border: 1px solid var(--line);
74
+ border-radius: 14px;
75
+ padding: 2.25rem 2.5rem;
76
+ box-shadow: 0 0 0 5px var(--plate-ring), 0 18px 40px -26px rgba(42, 64, 110, 0.45);
94
77
  }
95
- @media (prefers-reduced-motion: reduce) {
96
- .brand .dot { animation: none; }
78
+ @media (max-width: 480px) {
79
+ main { padding: 1.5rem 1.25rem; }
97
80
  }
98
-
99
81
  h1 {
100
- font-size: clamp(1.65rem, 1.2rem + 1.6vw, 2.25rem);
82
+ display: flex;
83
+ align-items: center;
84
+ gap: 0.75rem;
85
+ font-size: clamp(1.5rem, 1.2rem + 1.2vw, 2rem);
101
86
  letter-spacing: -0.02em;
102
87
  line-height: 1.15;
103
- margin-bottom: 0.65rem;
88
+ margin-bottom: 0.85rem;
104
89
  }
105
- p { color: var(--muted); margin-bottom: 1rem; }
106
- p:last-child { margin-bottom: 0; }
107
-
108
- .cta {
109
- display: inline-flex;
110
- align-items: center;
111
- gap: 0.5rem;
112
- margin-top: 1.5rem;
113
- padding: 0.75rem 1.1rem;
114
- background: var(--fg);
115
- color: #fff;
116
- text-decoration: none;
117
- border-radius: 12px;
118
- font-weight: 500;
119
- transition: transform 0.15s ease, box-shadow 0.15s ease;
120
- }
121
- .cta:hover { transform: translateY(-1px); box-shadow: 0 12px 24px -8px rgba(15,17,40,0.25); }
122
- .cta svg { width: 14px; height: 14px; }
123
-
90
+ h1 svg { flex-shrink: 0; width: 36px; height: 36px; }
91
+ p { color: var(--muted); }
124
92
  .hint {
125
- margin-top: 2rem;
126
- padding-top: 1.5rem;
127
- border-top: 1px solid rgba(15,17,40,0.08);
93
+ margin-top: 1.75rem;
94
+ padding-top: 1.25rem;
95
+ border-top: 1px solid var(--line);
128
96
  font-size: 0.875rem;
129
97
  color: var(--muted);
130
98
  }
131
99
  .hint code {
132
- font: 0.85em ui-monospace, "SF Mono", Menlo, Consolas, monospace;
133
- background: rgba(15,17,40,0.05);
100
+ font: 0.85em Menlo, Consolas, monospace;
101
+ color: var(--ink);
102
+ background: var(--code-bg);
134
103
  padding: 0.15em 0.45em;
135
104
  border-radius: 6px;
105
+ overflow-wrap: anywhere;
106
+ }
107
+ /* One entrance settle, only for people who have not asked for
108
+ reduced motion; no looping animation on this page. */
109
+ @media (prefers-reduced-motion: no-preference) {
110
+ main { animation: settle 0.5s ease-out both; }
111
+ @keyframes settle {
112
+ from { opacity: 0; transform: translateY(8px); }
113
+ to { opacity: 1; transform: none; }
114
+ }
136
115
  }
137
- .hint a { color: var(--accent); text-decoration: none; }
138
- .hint a:hover { text-decoration: underline; }
139
116
  </style>
140
117
  </head>
141
118
  <body>
142
- <div class="blob b1"></div>
143
- <div class="blob b2"></div>
144
- <div class="blob b3"></div>
145
-
146
- <main>
147
- <div class="brand"><span class="dot"></span>Caelo&nbsp;CMS</div>
148
- <h1>Your install is up. One more step.</h1>
149
- <p>This is the placeholder Caelo serves on a fresh deploy. The operator who provisioned this install has a one-time bootstrap link in their terminal output — opening it walks through Owner-account setup. After publish, this page disappears.</p>
150
- <div class="hint">
151
- Bootstrap link expires in 24h and rotates per <code>bunx @caelo-cms/provisioning</code> run. After Owner setup, the admin lives at <code>{{ADMIN_URL}}</code> behind <code>Sign in with Google</code> (IAP allowlist).
152
- </div>
153
- </main>
119
+ <div class="frame">
120
+ <p class="kicker">Caelo CMS</p>
121
+ <main>
122
+ <h1>
123
+ <svg viewBox="0 0 32 32" aria-hidden="true" focusable="false">
124
+ <path d="M23.07 7.57A11 11 0 1 0 23.07 24.43" fill="none" stroke="currentColor" stroke-width="3.4" stroke-linecap="round"/>
125
+ <path d="M20.5 10.64A7 7 0 1 0 20.5 21.36" fill="none" stroke="#c9952f" stroke-width="1.1" stroke-linecap="round"/>
126
+ <circle cx="25.2" cy="16" r="2.6" fill="#e8684a"/>
127
+ </svg>
128
+ Your install is up. One more step.
129
+ </h1>
130
+ <p>This is the placeholder Caelo serves on a fresh deploy. The operator who provisioned this install has a one-time bootstrap link in their terminal output — opening it walks through Owner-account setup. After publish, this page disappears.</p>
131
+ <div class="hint">
132
+ Bootstrap link expires in 24h and rotates per <code>bunx @caelo-cms/provisioning</code> run. After Owner setup, the admin lives at <code>{{ADMIN_URL}}</code> behind <code>Sign in with Google</code> (IAP allowlist).
133
+ </div>
134
+ </main>
135
+ </div>
154
136
  </body>
155
137
  </html>