@cat-factory/integrations 0.38.1 → 0.40.0

package/dist/modules/compose/compose-environment.logic.d.ts

@@ -0,0 +1,155 @@
+import type { EnvironmentManifest, EnvironmentStatus } from '@cat-factory/kernel';
+/** A single `docker compose` invocation result (exit code + captured output). */
+export interface ComposeExecResult {
+    code: number;
+    stdout: string;
+    stderr: string;
+}
+/**
+ * The host seam the provider drives. A facade (local mode) implements it over the docker CLI
+ * + a host temp dir; the integrations package stays free of `node:*` so it remains
+ * runtime-neutral. `compose(args)` runs `docker compose <args>`; `writeProjectFile` persists a
+ * scratch file (the repo's compose file + the generated override) somewhere the daemon reads.
+ */
+export interface ComposeRuntime {
+    /**
+     * Run `docker compose <args>`; resolves with the exit code + captured stdout/stderr. `timeoutMs`
+     * bounds the invocation (a wedged daemon must not hang provision/status/teardown forever); the
+     * facade kills the child + surfaces a non-zero result when it elapses.
+     */
+    compose(args: string[], opts?: {
+        env?: Record<string, string>;
+        timeoutMs?: number;
+    }): Promise<ComposeExecResult>;
+    /** Write a per-project scratch file; returns its absolute host path. */
+    writeProjectFile(project: string, fileName: string, content: string): Promise<string>;
+    /** Best-effort removal of a project's scratch dir after teardown. Optional. */
+    cleanupProject?(project: string): Promise<void>;
+}
+/** The flat per-workspace config, read off `manifest.providerConfig`. */
+export interface ComposeEnvironmentConfig {
+    label: string;
+    /** Path to the compose file (co-located in the PR repo by default). */
+    composePath: string;
+    /** Read the compose file from a SEPARATE `owner/repo` instead of the PR repo. */
+    composeRepo?: string;
+    /** Ref to read the separate repo at; absent ⇒ that repo's default branch. */
+    composeRef?: string;
+    /** The compose service whose port is published + probed for the preview URL. */
+    service: string;
+    /** The in-container port to publish + probe. */
+    port: number;
+    /** URL scheme (default `http`). */
+    scheme?: 'http' | 'https';
+    /** Project-name template (default derived from repo + PR number / block id). */
+    projectTemplate?: string;
+    /** Optional image ref made available to the compose file as `{{image}}`. */
+    imageTemplate?: string;
+    /** Optional extra env passed to compose (templated), for `${VAR}` interpolation. */
+    envTemplate?: Record<string, string>;
+    /** Fallback TTL (ms) after which the env is swept + torn down. */
+    defaultTtlMs?: number;
+}
+/**
+ * Read the flat Compose config off the stored manifest's `providerConfig`. Validates the two
+ * load-bearing fields (service + port); throws a clear error otherwise. The connect form wrote
+ * these as strings (the generic descriptor overlay), so `port` is coerced from its string form.
+ */
+export declare function parseComposeEnvConfig(manifest: EnvironmentManifest): ComposeEnvironmentConfig;
+/** Build the stored manifest that carries a Compose env config in its `providerConfig`. */
+export declare function composeConfigToManifest(config: ComposeEnvironmentConfig): EnvironmentManifest;
+/** Replace `{{ key }}` placeholders from `vars`; an unknown key resolves to ''. */
+export declare function renderTemplate(template: string, vars: Record<string, string>): string;
+/** Render every value of an env map through {@link renderTemplate}. */
+export declare function renderEnvMap(env: Record<string, string>, vars: Record<string, string>): Record<string, string>;
+/**
+ * Sanitize an arbitrary string into a valid Docker Compose project name: lower-case, only
+ * `[a-z0-9_-]`, must start with `[a-z0-9]`, bounded length. Mirrors the k8s namespace
+ * sanitize so two stacks can't collide on a malformed name.
+ */
+export declare function sanitizeProjectName(name: string): string;
+/** A short, stable, filesystem-safe digest (djb2 → base36) used to disambiguate project names. */
+export declare function shortHash(input: string): string;
+/**
+ * Resolve the per-PR project name. An explicit `projectTemplate` is rendered + sanitized; else
+ * the default qualifies the PR number with the repo (a workspace can have many repos that each
+ * open a PR with the SAME number — a bare `cf-env-<pr>` would collide on one project and the
+ * second PR's `up`/`down` would hit the first's stack) AND, when known, a short digest of the
+ * globally-unique block id (so two DIFFERENT workspaces sharing a repo name + PR number on the
+ * same host can't collide either). It falls back to the block id, then a bare PR number, for a
+ * manual provision.
+ */
+export declare function resolveProjectName(config: ComposeEnvironmentConfig, inputs: Record<string, string>): string;
+/** The `{{var}}` substitution map available to the compose text + env templates. */
+export declare function templateVars(inputs: Record<string, string>, project: string, image: string | undefined): Record<string, string>;
+type ComposeDoc = Record<string, unknown>;
+/**
+ * Rewrite a single `ports` entry to its container-only (ephemeral host port) form, dropping any
+ * host ip / published host port. `"127.0.0.1:8080:8080"` / `"8080:8080"` / `{ published, target }`
+ * all collapse to `"8080"`; a protocol suffix is preserved. Returns null for an unparsable entry.
+ */
+export declare function toEphemeralPortEntry(entry: unknown): string | null;
+/**
+ * Force every service's published host ports to ephemeral. Compose MERGES (`-f` overlays) and
+ * a base compose file usually pins the web service's host port (`"8080:8080"`) — leaving that in
+ * place makes concurrent per-PR stacks collide on one host port, defeating the project-name
+ * isolation. So instead of an additive override we rewrite the file: each service's host port is
+ * stripped, leaving the container port published to an ephemeral host port. Mutates + returns the doc.
+ */
+export declare function neutralizeHostPorts(doc: ComposeDoc): ComposeDoc;
+/** Guarantee the probed service publishes `port`, so `docker compose port` can read the host binding back. */
+export declare function ensureServicePublishes(doc: ComposeDoc, service: string, port: number): ComposeDoc;
+/**
+ * Collect references this backend cannot honor or must refuse, so a provision fails fast with a
+ * clear reason instead of silently mis-mounting / over-privileging. The compose file is read
+ * checkout-free (no repo on disk), so anything resolved against the repo working tree is broken,
+ * and the stack runs on the operator's shared host daemon, so host access is a safety concern:
+ *  - `build:` — needs the source tree (image-based stacks only).
+ *  - host bind mounts — resolve against an empty scratch dir; also expose the host filesystem.
+ *  - relative `env_file` — points into the absent repo tree.
+ *  - `privileged: true` — refused on the shared host daemon.
+ */
+export declare function collectUnsupportedComposeRefs(doc: ComposeDoc): string[];
+/** The outcome of preparing a repo compose file into a single isolation-safe project file. */
+export interface PreparedCompose {
+    /** The rewritten compose file to hand to `docker compose -f` (valid even when `issues` is non-empty). */
+    content: string;
+    /** Blocking reasons the stack can't be provisioned as-is; non-empty ⇒ the provider fails the provision. */
+    issues: string[];
+}
+/**
+ * Turn the (already `{{var}}`-rendered) repo compose text into ONE isolation-safe project file:
+ * validate it parses + contains the probed service, surface any unsupported references, force all
+ * host ports ephemeral, and guarantee the probed service publishes its port. Returning a single
+ * rewritten file (rather than a second `-f` overlay) is what lets us STRIP the base's pinned host
+ * ports — an overlay can only add, not remove.
+ */
+export declare function prepareComposeProject(renderedText: string, service: string, port: number): PreparedCompose;
+/**
+ * Parse the host port out of `docker compose port <svc> <port>` output (e.g. `0.0.0.0:49153`
+ * or `[::]:49153`). Returns null when the service publishes no host port for that target.
+ */
+export declare function parseHostPort(output: string): number | null;
+interface ComposePsRow {
+    State?: string;
+    Health?: string;
+    ExitCode?: number;
+}
+/** Parse `docker compose ps --format json` (a JSON array OR newline-delimited objects). */
+export declare function parseComposePsRows(output: string): ComposePsRow[];
+/**
+ * Reduce a `docker compose ps -a` snapshot (the `-a` includes stopped containers) into one
+ * lifecycle verdict:
+ *  - empty ⇒ `failed` (the project is gone / never came up);
+ *  - any `unhealthy` service, or a container `exited`/`dead` with a non-zero code ⇒ `failed`;
+ *  - a transient state (`created`/`restarting`/`paused`/`removing`) or a `running` service still
+ *    `starting` its healthcheck ⇒ `provisioning` (so a brief recreate doesn't flip a healthy env
+ *    to `failed`);
+ *  - a clean one-shot that `exited (0)` is treated as complete (neither pending nor failing);
+ *  - otherwise ⇒ `ready`.
+ */
+export declare function classifyComposePs(output: string): EnvironmentStatus;
+/** A short tail of command output, for a deterministic-failure `lastError`. */
+export declare function tailOutput(output: string, lines?: number): string;
+export {};
+//# sourceMappingURL=compose-environment.logic.d.ts.map

package/dist/modules/compose/compose-environment.logic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose-environment.logic.d.ts","sourceRoot":"","sources":["../../../src/modules/compose/compose-environment.logic.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAgBjF,iFAAiF;AACjF,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,OAAO,CACL,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1D,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAC7B,wEAAwE;IACxE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACrF,+EAA+E;IAC/E,cAAc,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAChD;AAED,yEAAyE;AACzE,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAA;IACb,uEAAuE;IACvE,WAAW,EAAE,MAAM,CAAA;IACnB,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,gFAAgF;IAChF,OAAO,EAAE,MAAM,CAAA;IACf,gDAAgD;IAChD,IAAI,EAAE,MAAM,CAAA;IACZ,mCAAmC;IACnC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;IACzB,gFAAgF;IAChF,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,4EAA4E;IAC5E,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,oFAAoF;IACpF,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACpC,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAUD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,mBAAmB,GAAG,wBAAwB,CAiC7F;AAkBD,2FAA2F;AAC3F,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,wBAAwB,GAAG,mBAAmB,CAc7F;AAED,mFAAmF;AACnF,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAErF;AAED,uEAAuE;AACvE,wBAAgB,YAAY,CAC1B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC3B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAExB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQxD;AAED,kGAAkG;AAClG,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAI/C;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,wBAAwB,EAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,MAAM,CASR;AAED,oFAAoF;AACpF,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAExB;AAED,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAoBzC;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAgBlE;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,UAAU,GAAG,UAAU,CAM/D;AAED,8GAA8G;AAC9G,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,CAMjG;AA0BD;;;;;;;;;GASG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,EAAE,CA+BvE;AAED,8FAA8F;AAC9F,MAAM,WAAW,eAAe;IAC9B,yGAAyG;IACzG,OAAO,EAAE,MAAM,CAAA;IACf,2GAA2G;IAC3G,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,GACX,eAAe,CAuBjB;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAW3D;AAED,UAAU,YAAY;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,2FAA2F;AAC3F,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,EAAE,CAqBjE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,CAmBnE;AAED,+EAA+E;AAC/E,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,MAAM,CAO7D"}

package/dist/modules/compose/compose-environment.logic.js

@@ -0,0 +1,376 @@
+import { parse, stringify } from 'yaml';
+const DEFAULT_COMPOSE_PATH = 'docker-compose.yml';
+function optionalString(value) {
+    if (typeof value !== 'string')
+        return undefined;
+    const trimmed = value.trim();
+    return trimmed.length > 0 ? trimmed : undefined;
+}
+/**
+ * Read the flat Compose config off the stored manifest's `providerConfig`. Validates the two
+ * load-bearing fields (service + port); throws a clear error otherwise. The connect form wrote
+ * these as strings (the generic descriptor overlay), so `port` is coerced from its string form.
+ */
+export function parseComposeEnvConfig(manifest) {
+    const raw = (manifest.providerConfig ?? {});
+    const service = optionalString(raw.service);
+    if (!service) {
+        throw new Error('Docker Compose environment is missing the web service name (service)');
+    }
+    const port = Number(raw.port);
+    if (!Number.isInteger(port) || port < 1 || port > 65535) {
+        throw new Error(`Docker Compose environment has an invalid container port: ${String(raw.port)}`);
+    }
+    const scheme = raw.scheme === 'https' ? 'https' : 'http';
+    const envTemplate = raw.envTemplate && typeof raw.envTemplate === 'object'
+        ? Object.fromEntries(Object.entries(raw.envTemplate).map(([k, val]) => [
+            k,
+            String(val),
+        ]))
+        : undefined;
+    return {
+        label: manifest.label,
+        composePath: optionalString(raw.composePath) ?? DEFAULT_COMPOSE_PATH,
+        composeRepo: optionalString(raw.composeRepo),
+        composeRef: optionalString(raw.composeRef),
+        service,
+        port,
+        scheme,
+        projectTemplate: optionalString(raw.projectTemplate),
+        imageTemplate: optionalString(raw.imageTemplate),
+        envTemplate,
+        defaultTtlMs: resolveTtlMs(raw.ttlMinutes, manifest.defaultTtlMs),
+    };
+}
+/**
+ * Resolve the env's auto-teardown TTL (ms). The connect form collects it as `ttlMinutes` (a
+ * string) so a leaked compose project is swept off the host instead of running forever; a present
+ * `0`/blank/invalid value is an explicit "never expire" (undefined), and an absent field falls
+ * back to the manifest's own `defaultTtlMs`.
+ */
+function resolveTtlMs(rawTtlMinutes, manifestDefaultTtlMs) {
+    const ttlMinutes = optionalString(rawTtlMinutes);
+    if (ttlMinutes === undefined)
+        return manifestDefaultTtlMs;
+    const minutes = Number(ttlMinutes);
+    return Number.isFinite(minutes) && minutes > 0 ? Math.round(minutes * 60_000) : undefined;
+}
+/** Build the stored manifest that carries a Compose env config in its `providerConfig`. */
+export function composeConfigToManifest(config) {
+    return {
+        providerId: 'compose',
+        label: config.label,
+        // Inert: the provider always returns a localhost URL, so baseUrl is never fetched and is
+        // not SSRF-checked. A placeholder keeps the manifest schema (which requires a non-empty
+        // baseUrl + provision + response) satisfied.
+        baseUrl: 'http://localhost',
+        auth: { type: 'none' },
+        provision: { method: 'POST', pathTemplate: '' },
+        response: {},
+        ...(config.defaultTtlMs ? { defaultTtlMs: config.defaultTtlMs } : {}),
+        providerConfig: { ...config },
+    };
+}
+/** Replace `{{ key }}` placeholders from `vars`; an unknown key resolves to ''. */
+export function renderTemplate(template, vars) {
+    return template.replace(/\{\{\s*([a-zA-Z0-9_.]+)\s*\}\}/g, (_m, key) => vars[key] ?? '');
+}
+/** Render every value of an env map through {@link renderTemplate}. */
+export function renderEnvMap(env, vars) {
+    return Object.fromEntries(Object.entries(env).map(([k, val]) => [k, renderTemplate(val, vars)]));
+}
+/**
+ * Sanitize an arbitrary string into a valid Docker Compose project name: lower-case, only
+ * `[a-z0-9_-]`, must start with `[a-z0-9]`, bounded length. Mirrors the k8s namespace
+ * sanitize so two stacks can't collide on a malformed name.
+ */
+export function sanitizeProjectName(name) {
+    const cleaned = name
+        .toLowerCase()
+        .replace(/[^a-z0-9_-]+/g, '-')
+        .replace(/^[^a-z0-9]+/, '')
+        .replace(/-+$/g, '')
+        .slice(0, 63);
+    return cleaned.length > 0 ? cleaned : 'cf-env';
+}
+/** A short, stable, filesystem-safe digest (djb2 → base36) used to disambiguate project names. */
+export function shortHash(input) {
+    let h = 5381;
+    for (let i = 0; i < input.length; i++)
+        h = ((h << 5) + h + input.charCodeAt(i)) >>> 0;
+    return h.toString(36).slice(0, 6);
+}
+/**
+ * Resolve the per-PR project name. An explicit `projectTemplate` is rendered + sanitized; else
+ * the default qualifies the PR number with the repo (a workspace can have many repos that each
+ * open a PR with the SAME number — a bare `cf-env-<pr>` would collide on one project and the
+ * second PR's `up`/`down` would hit the first's stack) AND, when known, a short digest of the
+ * globally-unique block id (so two DIFFERENT workspaces sharing a repo name + PR number on the
+ * same host can't collide either). It falls back to the block id, then a bare PR number, for a
+ * manual provision.
+ */
+export function resolveProjectName(config, inputs) {
+    if (config.projectTemplate) {
+        return sanitizeProjectName(renderTemplate(config.projectTemplate, inputs));
+    }
+    if (inputs.repoName && inputs.pullNumber) {
+        const base = `cf-env-${inputs.repoName}-${inputs.pullNumber}`;
+        return sanitizeProjectName(inputs.blockId ? `${base}-${shortHash(inputs.blockId)}` : base);
+    }
+    return sanitizeProjectName(`cf-env-${inputs.blockId || inputs.pullNumber || 'env'}`);
+}
+/** The `{{var}}` substitution map available to the compose text + env templates. */
+export function templateVars(inputs, project, image) {
+    return { ...inputs, project, ...(image !== undefined ? { image } : {}) };
+}
+function servicesOf(doc) {
+    const services = doc.services;
+    if (!services || typeof services !== 'object')
+        return {};
+    return services;
+}
+function asArray(value) {
+    if (Array.isArray(value))
+        return value;
+    if (value === undefined || value === null)
+        return [];
+    return [value];
+}
+/** The container-target of a normalized (host-stripped) short-form ports entry: `"8080/tcp"` → `8080`. */
+function portTarget(entry) {
+    return (entry.split('/')[0] ?? '').trim();
+}
+/**
+ * Rewrite a single `ports` entry to its container-only (ephemeral host port) form, dropping any
+ * host ip / published host port. `"127.0.0.1:8080:8080"` / `"8080:8080"` / `{ published, target }`
+ * all collapse to `"8080"`; a protocol suffix is preserved. Returns null for an unparsable entry.
+ */
+export function toEphemeralPortEntry(entry) {
+    if (typeof entry === 'number')
+        return String(entry);
+    if (typeof entry === 'string') {
+        const [mapping, proto] = entry.split('/');
+        const segments = (mapping ?? '').split(':');
+        const target = segments[segments.length - 1]?.trim();
+        if (!target)
+            return null;
+        return proto ? `${target}/${proto}` : target;
+    }
+    if (entry && typeof entry === 'object') {
+        const e = entry;
+        if (e.target === undefined || e.target === null)
+            return null;
+        const proto = typeof e.protocol === 'string' ? e.protocol : undefined;
+        return proto ? `${String(e.target)}/${proto}` : String(e.target);
+    }
+    return null;
+}
+/**
+ * Force every service's published host ports to ephemeral. Compose MERGES (`-f` overlays) and
+ * a base compose file usually pins the web service's host port (`"8080:8080"`) — leaving that in
+ * place makes concurrent per-PR stacks collide on one host port, defeating the project-name
+ * isolation. So instead of an additive override we rewrite the file: each service's host port is
+ * stripped, leaving the container port published to an ephemeral host port. Mutates + returns the doc.
+ */
+export function neutralizeHostPorts(doc) {
+    for (const service of Object.values(servicesOf(doc))) {
+        if (!service || typeof service !== 'object' || !Array.isArray(service.ports))
+            continue;
+        service.ports = service.ports.map(toEphemeralPortEntry).filter((p) => p !== null);
+    }
+    return doc;
+}
+/** Guarantee the probed service publishes `port`, so `docker compose port` can read the host binding back. */
+export function ensureServicePublishes(doc, service, port) {
+    const svc = servicesOf(doc)[service];
+    if (!svc || typeof svc !== 'object')
+        return doc;
+    const ports = Array.isArray(svc.ports) ? svc.ports.map(String) : [];
+    svc.ports = ports.some((p) => portTarget(p) === String(port)) ? ports : [...ports, String(port)];
+    return doc;
+}
+function isRelativePath(path) {
+    return !path.startsWith('/') && !/^[a-zA-Z]:[\\/]/.test(path);
+}
+function bindMountSource(volume) {
+    if (typeof volume === 'string') {
+        const segments = volume.split(':');
+        if (segments.length < 2)
+            return null; // anonymous volume (`/data`) — a container path, not a host bind
+        const source = segments[0] ?? '';
+        return source.startsWith('.') || source.startsWith('/') || source.startsWith('~')
+            ? source
+            : null;
+    }
+    if (volume && typeof volume === 'object') {
+        const v = volume;
+        if (v.type === 'bind')
+            return typeof v.source === 'string' ? v.source : 'bind';
+        if (v.type === undefined && typeof v.source === 'string') {
+            const s = v.source;
+            return s.startsWith('.') || s.startsWith('/') || s.startsWith('~') ? s : null;
+        }
+    }
+    return null;
+}
+/**
+ * Collect references this backend cannot honor or must refuse, so a provision fails fast with a
+ * clear reason instead of silently mis-mounting / over-privileging. The compose file is read
+ * checkout-free (no repo on disk), so anything resolved against the repo working tree is broken,
+ * and the stack runs on the operator's shared host daemon, so host access is a safety concern:
+ *  - `build:` — needs the source tree (image-based stacks only).
+ *  - host bind mounts — resolve against an empty scratch dir; also expose the host filesystem.
+ *  - relative `env_file` — points into the absent repo tree.
+ *  - `privileged: true` — refused on the shared host daemon.
+ */
+export function collectUnsupportedComposeRefs(doc) {
+    const issues = [];
+    for (const [name, service] of Object.entries(servicesOf(doc))) {
+        if (!service || typeof service !== 'object')
+            continue;
+        if (service.build !== undefined) {
+            issues.push(`service '${name}' uses build: — image-based stacks only (no repo is checked out)`);
+        }
+        if (service.privileged === true) {
+            issues.push(`service '${name}' requests privileged: true — refused on the shared host daemon`);
+        }
+        for (const volume of asArray(service.volumes)) {
+            const source = bindMountSource(volume);
+            if (source !== null) {
+                issues.push(`service '${name}' bind-mounts a host path ('${source}') — unsupported (no repo on disk; use a named volume)`);
+            }
+        }
+        for (const entry of asArray(service.env_file)) {
+            const path = typeof entry === 'string' ? entry : entry?.path;
+            if (typeof path === 'string' && isRelativePath(path)) {
+                issues.push(`service '${name}' reads a relative env_file ('${path}') — unsupported (no repo on disk)`);
+            }
+        }
+    }
+    return issues;
+}
+/**
+ * Turn the (already `{{var}}`-rendered) repo compose text into ONE isolation-safe project file:
+ * validate it parses + contains the probed service, surface any unsupported references, force all
+ * host ports ephemeral, and guarantee the probed service publishes its port. Returning a single
+ * rewritten file (rather than a second `-f` overlay) is what lets us STRIP the base's pinned host
+ * ports — an overlay can only add, not remove.
+ */
+export function prepareComposeProject(renderedText, service, port) {
+    let parsed;
+    try {
+        parsed = parse(renderedText);
+    }
+    catch (err) {
+        return {
+            content: renderedText,
+            issues: [
+                `compose file is not valid YAML: ${err instanceof Error ? err.message : String(err)}`,
+            ],
+        };
+    }
+    if (!parsed || typeof parsed !== 'object') {
+        return { content: renderedText, issues: ['compose file is empty or not a mapping'] };
+    }
+    const doc = parsed;
+    if (!servicesOf(doc)[service]) {
+        return { content: renderedText, issues: [`compose file has no service named '${service}'`] };
+    }
+    const issues = collectUnsupportedComposeRefs(doc);
+    neutralizeHostPorts(doc);
+    ensureServicePublishes(doc, service, port);
+    return { content: stringify(doc), issues };
+}
+/**
+ * Parse the host port out of `docker compose port <svc> <port>` output (e.g. `0.0.0.0:49153`
+ * or `[::]:49153`). Returns null when the service publishes no host port for that target.
+ */
+export function parseHostPort(output) {
+    const line = output
+        .split('\n')
+        .map((s) => s.trim())
+        .filter(Boolean)
+        .pop();
+    if (!line)
+        return null;
+    const match = line.match(/:(\d+)\s*$/);
+    if (!match)
+        return null;
+    const n = Number(match[1]);
+    return Number.isInteger(n) && n > 0 && n <= 65535 ? n : null;
+}
+/** Parse `docker compose ps --format json` (a JSON array OR newline-delimited objects). */
+export function parseComposePsRows(output) {
+    const trimmed = output.trim();
+    if (!trimmed)
+        return [];
+    try {
+        const parsed = JSON.parse(trimmed);
+        if (Array.isArray(parsed))
+            return parsed;
+        return [parsed];
+    }
+    catch {
+        // Newline-delimited JSON objects (older compose).
+        const rows = [];
+        for (const line of trimmed.split('\n')) {
+            const s = line.trim();
+            if (!s)
+                continue;
+            try {
+                rows.push(JSON.parse(s));
+            }
+            catch {
+                // ignore an unparsable line
+            }
+        }
+        return rows;
+    }
+}
+/**
+ * Reduce a `docker compose ps -a` snapshot (the `-a` includes stopped containers) into one
+ * lifecycle verdict:
+ *  - empty ⇒ `failed` (the project is gone / never came up);
+ *  - any `unhealthy` service, or a container `exited`/`dead` with a non-zero code ⇒ `failed`;
+ *  - a transient state (`created`/`restarting`/`paused`/`removing`) or a `running` service still
+ *    `starting` its healthcheck ⇒ `provisioning` (so a brief recreate doesn't flip a healthy env
+ *    to `failed`);
+ *  - a clean one-shot that `exited (0)` is treated as complete (neither pending nor failing);
+ *  - otherwise ⇒ `ready`.
+ */
+export function classifyComposePs(output) {
+    const rows = parseComposePsRows(output);
+    if (rows.length === 0)
+        return 'failed'; // nothing left ⇒ the stack is gone/crashed
+    let anyPending = false;
+    for (const row of rows) {
+        const state = (row.State ?? '').toLowerCase();
+        const health = (row.Health ?? '').toLowerCase();
+        if (health === 'unhealthy')
+            return 'failed';
+        if (state.startsWith('running')) {
+            if (health === 'starting')
+                anyPending = true;
+        }
+        else if (state.startsWith('exited') || state.startsWith('dead')) {
+            if ((row.ExitCode ?? 0) !== 0)
+                return 'failed'; // a real crash
+            // exit 0 ⇒ a completed one-shot (migration/seed); not pending, not a failure
+        }
+        else {
+            // created / restarting / paused / removing / … ⇒ still settling
+            anyPending = true;
+        }
+    }
+    return anyPending ? 'provisioning' : 'ready';
+}
+/** A short tail of command output, for a deterministic-failure `lastError`. */
+export function tailOutput(output, lines = 12) {
+    return output
+        .split('\n')
+        .map((s) => s.trimEnd())
+        .filter(Boolean)
+        .slice(-lines)
+        .join('\n');
+}
+//# sourceMappingURL=compose-environment.logic.js.map

package/dist/modules/compose/compose-environment.logic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose-environment.logic.js","sourceRoot":"","sources":["../../../src/modules/compose/compose-environment.logic.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,MAAM,CAAA;AAqEvC,MAAM,oBAAoB,GAAG,oBAAoB,CAAA;AAEjD,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC5B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAA6B;IACjE,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,cAAc,IAAI,EAAE,CAA4B,CAAA;IACtE,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAA;IACzF,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,6DAA6D,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAClG,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAA;IACxD,MAAM,WAAW,GACf,GAAG,CAAC,WAAW,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;QACpD,CAAC,CAAC,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,WAAsC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;YAC3E,CAAC;YACD,MAAM,CAAC,GAAG,CAAC;SACZ,CAAC,CACH;QACH,CAAC,CAAC,SAAS,CAAA;IACf,OAAO;QACL,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,WAAW,EAAE,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,oBAAoB;QACpE,WAAW,EAAE,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC;QAC5C,UAAU,EAAE,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC;QAC1C,OAAO;QACP,IAAI;QACJ,MAAM;QACN,eAAe,EAAE,cAAc,CAAC,GAAG,CAAC,eAAe,CAAC;QACpD,aAAa,EAAE,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC;QAChD,WAAW;QACX,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,YAAY,CAAC;KAClE,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CACnB,aAAsB,EACtB,oBAAwC;IAExC,MAAM,UAAU,GAAG,cAAc,CAAC,aAAa,CAAC,CAAA;IAChD,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,oBAAoB,CAAA;IACzD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAA;IAClC,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAC3F,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,uBAAuB,CAAC,MAAgC;IACtE,OAAO;QACL,UAAU,EAAE,SAAS;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,yFAAyF;QACzF,wFAAwF;QACxF,6CAA6C;QAC7C,OAAO,EAAE,kBAAkB;QAC3B,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACtB,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE;QAC/C,QAAQ,EAAE,EAAE;QACZ,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,cAAc,EAAE,EAAE,GAAG,MAAM,EAAwC;KACpE,CAAA;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,IAA4B;IAC3E,OAAO,QAAQ,CAAC,OAAO,CAAC,iCAAiC,EAAE,CAAC,EAAE,EAAE,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;AAClG,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,YAAY,CAC1B,GAA2B,EAC3B,IAA4B;IAE5B,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;AAClG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,OAAO,GAAG,IAAI;SACjB,WAAW,EAAE;SACb,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;SAC7B,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;SACnB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACf,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAA;AAChD,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,IAAI,CAAC,GAAG,IAAI,CAAA;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IACrF,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AACnC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAgC,EAChC,MAA8B;IAE9B,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QAC3B,OAAO,mBAAmB,CAAC,cAAc,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAA;IAC5E,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,UAAU,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,UAAU,EAAE,CAAA;QAC7D,OAAO,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAC5F,CAAC;IACD,OAAO,mBAAmB,CAAC,UAAU,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,UAAU,IAAI,KAAK,EAAE,CAAC,CAAA;AACtF,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,YAAY,CAC1B,MAA8B,EAC9B,OAAe,EACf,KAAyB;IAEzB,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;AAC1E,CAAC;AAKD,SAAS,UAAU,CAAC,GAAe;IACjC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAA;IAC7B,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAA;IACxD,OAAO,QAA0C,CAAA;AACnD,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACtC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IACpD,OAAO,CAAC,KAAK,CAAC,CAAA;AAChB,CAAC;AAED,0GAA0G;AAC1G,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACzC,MAAM,QAAQ,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;QACpD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAA;IAC9C,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,KAAgC,CAAA;QAC1C,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAA;QACrE,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IAClE,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAe;IACjD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,SAAQ;QACtF,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAA;IAChG,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,sBAAsB,CAAC,GAAe,EAAE,OAAe,EAAE,IAAY;IACnF,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAA;IACpC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAA;IAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,KAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAClF,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IAChG,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC/D,CAAC;AAED,SAAS,eAAe,CAAC,MAAe;IACtC,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAClC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA,CAAC,iEAAiE;QACtG,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAChC,OAAO,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;YAC/E,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,IAAI,CAAA;IACV,CAAC;IACD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,MAAiC,CAAA;QAC3C,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAA;QAC9E,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzD,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA;YAClB,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC/E,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,6BAA6B,CAAC,GAAe;IAC3D,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,SAAQ;QACrD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CACT,YAAY,IAAI,kEAAkE,CACnF,CAAA;QACH,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,iEAAiE,CAAC,CAAA;QAChG,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;YACtC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CACT,YAAY,IAAI,+BAA+B,MAAM,wDAAwD,CAC9G,CAAA;YACH,CAAC;QACH,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,GACR,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,KAAwC,EAAE,IAAI,CAAA;YACrF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrD,MAAM,CAAC,IAAI,CACT,YAAY,IAAI,iCAAiC,IAAI,oCAAoC,CAC1F,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAUD;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,YAAoB,EACpB,OAAe,EACf,IAAY;IAEZ,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,CAAA;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,MAAM,EAAE;gBACN,mCAAmC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aACtF;SACF,CAAA;IACH,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,wCAAwC,CAAC,EAAE,CAAA;IACtF,CAAC;IACD,MAAM,GAAG,GAAG,MAAoB,CAAA;IAChC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,sCAAsC,OAAO,GAAG,CAAC,EAAE,CAAA;IAC9F,CAAC;IACD,MAAM,MAAM,GAAG,6BAA6B,CAAC,GAAG,CAAC,CAAA;IACjD,mBAAmB,CAAC,GAAG,CAAC,CAAA;IACxB,sBAAsB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;IAC1C,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAA;AAC5C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,MAAM,IAAI,GAAG,MAAM;SAChB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,EAAE,CAAA;IACR,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAC9D,CAAC;AAQD,2FAA2F;AAC3F,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAA;IACvB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAClC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,MAAwB,CAAA;QAC1D,OAAO,CAAC,MAAsB,CAAC,CAAA;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;QAClD,MAAM,IAAI,GAAmB,EAAE,CAAA;QAC/B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;YACrB,IAAI,CAAC,CAAC;gBAAE,SAAQ;YAChB,IAAI,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAiB,CAAC,CAAA;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,4BAA4B;YAC9B,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACvC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAA,CAAC,2CAA2C;IAClF,IAAI,UAAU,GAAG,KAAK,CAAA;IACtB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;QAC7C,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;QAC/C,IAAI,MAAM,KAAK,WAAW;YAAE,OAAO,QAAQ,CAAA;QAC3C,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,IAAI,MAAM,KAAK,UAAU;gBAAE,UAAU,GAAG,IAAI,CAAA;QAC9C,CAAC;aAAM,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC;gBAAE,OAAO,QAAQ,CAAA,CAAC,eAAe;YAC9D,6EAA6E;QAC/E,CAAC;aAAM,CAAC;YACN,gEAAgE;YAChE,UAAU,GAAG,IAAI,CAAA;QACnB,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAA;AAC9C,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,KAAK,GAAG,EAAE;IACnD,OAAO,MAAM;SACV,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;SACvB,MAAM,CAAC,OAAO,CAAC;SACf,KAAK,CAAC,CAAC,KAAK,CAAC;SACb,IAAI,CAAC,IAAI,CAAC,CAAA;AACf,CAAC"}

package/dist/modules/environments/EnvironmentProvisioningService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"EnvironmentProvisioningService.d.ts","sourceRoot":"","sources":["../../../src/modules/environments/EnvironmentProvisioningService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAC7D,OAAO,KAAK,EAAqB,6BAA6B,EAAE,MAAM,qBAAqB,CAAA;AAC3F,OAAO,KAAK,EAGV,gBAAgB,EAEhB,qBAAqB,EACrB,cAAc,EAEd,eAAe,EAChB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,KAAK,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAErF,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAA;AAMrF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAA;AAO7F,MAAM,WAAW,0CAA0C;IACzD,iBAAiB,EAAE,4BAA4B,CAAA;IAC/C,6BAA6B,EAAE,6BAA6B,CAAA;IAC5D,YAAY,EAAE,YAAY,CAAA;IAC1B,WAAW,EAAE,WAAW,CAAA;IACxB,KAAK,EAAE,KAAK,CAAA;IACZ,wFAAwF;IACxF,SAAS,CAAC,EAAE,eAAe,CAAA;IAC3B,8EAA8E;IAC9E,eAAe,CAAC,EAAE,uBAAuB,CAAA;IACzC;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,qBAAqB,CAAA;IAC7C;;;;OAIG;IACH,4BAA4B,CAAC,EAAE,CAC7B,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAA;KAAE,KACpE,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAA;CACpC;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,qFAAqF;IACrF,OAAO,CAAC,EAAE,gBAAgB,CAAA;CAC3B;AAYD,2EAA2E;AAC3E,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,MAAM,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAA;IACnC,MAAM,EAAE,uBAAuB,GAAG,IAAI,CAAA;IACtC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,qBAAa,8BAA8B;IAC7B,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,0CAA0C,EAAI;IAEjF,OAAO,KAAK,SAAS,GAEpB;IAED,mFAAmF;IAC7E,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAgH/D;IAED;;;;;OAKG;YACW,qBAAqB;IAwCnC,+EAA+E;IACzE,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA8C/E;IAED,kDAAkD;IAC5C,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAGnE;IAED,uDAAuD;IACjD,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAGlF;IAED,wEAAwE;IAClE,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAI5F;IAED;;;OAGG;IACG,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAS/F;IAED;;;;;OAKG;IACG,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAG/F;IAED,OAAO,CAAC,aAAa;YAUP,aAAa;IAK3B;;;;;OAKG;IACH,OAAO,CAAC,sBAAsB;IAM9B,6FAA6F;YAC/E,yBAAyB;IAevC;;;;;;;;OAQG;YACW,wBAAwB;YA+CxB,aAAa;YAKb,aAAa;CAK5B"}
+{"version":3,"file":"EnvironmentProvisioningService.d.ts","sourceRoot":"","sources":["../../../src/modules/environments/EnvironmentProvisioningService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAC7D,OAAO,KAAK,EAAqB,6BAA6B,EAAE,MAAM,qBAAqB,CAAA;AAC3F,OAAO,KAAK,EAGV,gBAAgB,EAEhB,qBAAqB,EACrB,cAAc,EAEd,eAAe,EAChB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,KAAK,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAErF,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAA;AAMrF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAA;AAO7F,MAAM,WAAW,0CAA0C;IACzD,iBAAiB,EAAE,4BAA4B,CAAA;IAC/C,6BAA6B,EAAE,6BAA6B,CAAA;IAC5D,YAAY,EAAE,YAAY,CAAA;IAC1B,WAAW,EAAE,WAAW,CAAA;IACxB,KAAK,EAAE,KAAK,CAAA;IACZ,wFAAwF;IACxF,SAAS,CAAC,EAAE,eAAe,CAAA;IAC3B,8EAA8E;IAC9E,eAAe,CAAC,EAAE,uBAAuB,CAAA;IACzC;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,qBAAqB,CAAA;IAC7C;;;;OAIG;IACH,4BAA4B,CAAC,EAAE,CAC7B,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAA;KAAE,KACpE,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAA;CACpC;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,qFAAqF;IACrF,OAAO,CAAC,EAAE,gBAAgB,CAAA;CAC3B;AAYD,2EAA2E;AAC3E,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,MAAM,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAA;IACnC,MAAM,EAAE,uBAAuB,GAAG,IAAI,CAAA;IACtC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,qBAAa,8BAA8B;IAC7B,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,0CAA0C,EAAI;IAEjF,OAAO,KAAK,SAAS,GAEpB;IAED,mFAAmF;IAC7E,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAmH/D;IAED;;;;;OAKG;YACW,qBAAqB;IAwCnC,+EAA+E;IACzE,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA8C/E;IAED,kDAAkD;IAC5C,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAGnE;IAED,uDAAuD;IACjD,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAGlF;IAED,wEAAwE;IAClE,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAI5F;IAED;;;OAGG;IACG,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAS/F;IAED;;;;;OAKG;IACG,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAG/F;IAED,OAAO,CAAC,aAAa;YAUP,aAAa;IAK3B;;;;;OAKG;IACH,OAAO,CAAC,sBAAsB;IAM9B,6FAA6F;YAC/E,yBAAyB;IAevC;;;;;;;;OAQG;YACW,wBAAwB;YAiDxB,aAAa;YAKb,aAAa;CAK5B"}

package/dist/modules/environments/EnvironmentProvisioningService.js

@@ -108,6 +108,9 @@ export class EnvironmentProvisioningService {
             // deployer step's Environment panel shows the actual root cause; fall back only when the
             // provider gave none.
             lastError: provisioned.status === 'failed' ? provisioned.error?.trim() || 'Provisioning failed' : null,
+            // Recorded by the deployer step once per-service provision types land (slice 3).
+            provisionType: null,
+            engine: null,
         });
         await this.deps.environmentRegistryRepository.insert(record);
         // A provider that returns `status:'failed'` (rather than throwing) is still a
@@ -308,6 +311,8 @@ export class EnvironmentProvisioningService {
                 createdAt: this.deps.clock.now(),
                 expiresAt: null,
                 lastError,
+                provisionType: null,
+                engine: null,
             });
             await this.deps.environmentRegistryRepository.insert(record);
         }