@caelo-cms/provisioning 0.10.52 → 0.10.53

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (85) hide show
  1. package/dist/agent/command.js +1 -0
  2. package/dist/agent/command.js.map +1 -1
  3. package/dist/agent-db.js +9 -0
  4. package/dist/aws-task-roles.d.ts +1 -1
  5. package/dist/aws-task-roles.d.ts.map +1 -1
  6. package/dist/aws-task-roles.js +0 -1
  7. package/dist/aws-task-roles.js.map +1 -1
  8. package/dist/cli-routing.d.ts +20 -0
  9. package/dist/cli-routing.d.ts.map +1 -1
  10. package/dist/cli-routing.js +106 -0
  11. package/dist/cli-routing.js.map +1 -1
  12. package/dist/cli.js +5 -6
  13. package/dist/cli.js.map +1 -1
  14. package/dist/compose.d.ts +4 -3
  15. package/dist/compose.d.ts.map +1 -1
  16. package/dist/compose.js +3 -2
  17. package/dist/compose.js.map +1 -1
  18. package/dist/gateway-credentials.d.ts +3 -5
  19. package/dist/gateway-credentials.d.ts.map +1 -1
  20. package/dist/gateway-credentials.js +8 -18
  21. package/dist/gateway-credentials.js.map +1 -1
  22. package/dist/infra-contract.d.ts +1 -1
  23. package/dist/infra-contract.d.ts.map +1 -1
  24. package/dist/infra-contract.js +8 -1
  25. package/dist/infra-contract.js.map +1 -1
  26. package/dist/runtime-secrets.d.ts +1 -3
  27. package/dist/runtime-secrets.d.ts.map +1 -1
  28. package/dist/runtime-secrets.js +2 -6
  29. package/dist/runtime-secrets.js.map +1 -1
  30. package/dist/self-hosted-roles.d.ts +9 -8
  31. package/dist/self-hosted-roles.d.ts.map +1 -1
  32. package/dist/self-hosted-roles.js +9 -9
  33. package/dist/self-hosted-roles.js.map +1 -1
  34. package/dist/self-hosted-upgrade.d.ts +7 -1
  35. package/dist/self-hosted-upgrade.d.ts.map +1 -1
  36. package/dist/self-hosted-upgrade.js +17 -4
  37. package/dist/self-hosted-upgrade.js.map +1 -1
  38. package/dist/stack-contract.d.ts +52 -3
  39. package/dist/stack-contract.d.ts.map +1 -1
  40. package/dist/stack-contract.js +36 -36
  41. package/dist/stack-contract.js.map +1 -1
  42. package/dist/upgrade/converge.d.ts.map +1 -1
  43. package/dist/upgrade/converge.js +5 -13
  44. package/dist/upgrade/converge.js.map +1 -1
  45. package/dist/wizards/gcp.d.ts.map +1 -1
  46. package/dist/wizards/gcp.js +1 -30
  47. package/dist/wizards/gcp.js.map +1 -1
  48. package/package.json +2 -2
  49. package/src/admin-memory.test.ts +1 -1
  50. package/src/agent/command.ts +1 -0
  51. package/src/aws-task-roles.ts +0 -2
  52. package/src/caddy-redirects.test.ts +1 -1
  53. package/src/checkpoint-secrets.test.ts +0 -2
  54. package/src/cli-routing.test.ts +27 -1
  55. package/src/cli-routing.ts +131 -0
  56. package/src/cli.ts +5 -8
  57. package/src/compose.ts +13 -5
  58. package/src/gateway-credentials.test.ts +0 -29
  59. package/src/gateway-credentials.ts +11 -25
  60. package/src/gateway-env-isolation.test.ts +7 -2
  61. package/src/index.test.ts +7 -6
  62. package/src/infra-contract.test.ts +4 -3
  63. package/src/infra-contract.ts +8 -1
  64. package/src/runtime-secrets.test.ts +9 -81
  65. package/src/runtime-secrets.ts +2 -6
  66. package/src/self-hosted-compose.test.ts +1 -1
  67. package/src/self-hosted-roles.integration.test.ts +23 -38
  68. package/src/self-hosted-roles.test.ts +11 -7
  69. package/src/self-hosted-roles.ts +17 -16
  70. package/src/self-hosted-upgrade.test.ts +28 -1
  71. package/src/self-hosted-upgrade.ts +29 -4
  72. package/src/stack-contract.test.ts +15 -11
  73. package/src/stack-contract.ts +40 -5
  74. package/src/stack-converge-secrets.test.ts +2 -0
  75. package/src/stack-converge.test.ts +2 -0
  76. package/src/upgrade/converge.ts +5 -19
  77. package/src/wizards/gcp.ts +1 -31
  78. package/stacks/aws/README.md +1 -1
  79. package/stacks/aws/index.ts +1 -6
  80. package/stacks/azure/README.md +1 -1
  81. package/stacks/azure/index.ts +9 -6
  82. package/stacks/gcp/README.md +1 -1
  83. package/stacks/gcp/index.ts +1 -4
  84. package/stacks/gcp-firebase/index.ts +1 -4
  85. package/stacks/self-hosted/index.ts +4 -11
package/stacks/self-hosted/index.ts CHANGED
@@ -62,26 +62,19 @@ const tokenPath = resolve(caeloDir, "bootstrap", "pending-token.json");
62
62
  // is the operator's recovery path.
63
63
  const postgresPassword = pulumi.secret(randomHex(32));
64
64
  // #613 — one password per application role; the gateway gets only the
65
- // public_role and gateway_role ones.
65
+ // public_role one (#635: no cms_admin login).
66
66
  const adminRolePassword = pulumi.secret(randomHex(32));
67
67
  const publicRolePassword = pulumi.secret(randomHex(32));
68
- const gatewayRolePassword = pulumi.secret(randomHex(32));
69
68
  // P18 — the KEK that encrypts stored provider keys.
70
69
  const caeloSecretKek = pulumi.secret(randomHex(32));
71
70
 
72
71
  const composeYaml = pulumi
73
- .all([
74
- postgresPassword,
75
- adminRolePassword,
76
- publicRolePassword,
77
- gatewayRolePassword,
78
- caeloSecretKek,
79
- ])
80
- .apply(([pgPw, adminPw, publicPw, gatewayPw, kek]) =>
72
+ .all([postgresPassword, adminRolePassword, publicRolePassword, caeloSecretKek])
73
+ .apply(([pgPw, adminPw, publicPw, kek]) =>
81
74
  generateDockerCompose({
82
75
  domain,
83
76
  postgresPassword: pgPw,
84
- rolePasswords: { admin: adminPw, public: publicPw, gateway: gatewayPw },
77
+ rolePasswords: { admin: adminPw, public: publicPw },
85
78
  caeloSecretKek: kek,
86
79
  anthropicApiKey: process.env.ANTHROPIC_API_KEY,
87
80
  resendApiKey: process.env.RESEND_API_KEY,