@empire-builder-kit/nx 1.0.0-beta.9 → 1.0.0-rc.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (824) hide show
  1. package/NOTICE +6 -0
  2. package/README.md +113 -3
  3. package/executors.json +30 -0
  4. package/package.json +84 -6
  5. package/src/api-contract/baseline-update.d.ts +82 -0
  6. package/src/api-contract/baseline-update.js +225 -0
  7. package/src/api-contract/baseline-update.js.map +1 -0
  8. package/src/api-contract/compatibility.d.ts +30 -0
  9. package/src/api-contract/compatibility.js +643 -0
  10. package/src/api-contract/compatibility.js.map +1 -0
  11. package/src/api-contract/contract-graph.d.ts +35 -0
  12. package/src/api-contract/contract-graph.js +141 -0
  13. package/src/api-contract/contract-graph.js.map +1 -0
  14. package/src/api-contract/evidence.d.ts +23 -0
  15. package/src/api-contract/evidence.js +87 -0
  16. package/src/api-contract/evidence.js.map +1 -0
  17. package/src/api-contract/index.d.ts +6 -0
  18. package/src/api-contract/index.js +10 -0
  19. package/src/api-contract/index.js.map +1 -0
  20. package/src/api-contract/model.d.ts +144 -0
  21. package/src/api-contract/model.fixtures.d.ts +2 -0
  22. package/src/api-contract/model.fixtures.js +81 -0
  23. package/src/api-contract/model.fixtures.js.map +1 -0
  24. package/src/api-contract/model.js +993 -0
  25. package/src/api-contract/model.js.map +1 -0
  26. package/src/api-contract/rollout.d.ts +32 -0
  27. package/src/api-contract/rollout.js +88 -0
  28. package/src/api-contract/rollout.js.map +1 -0
  29. package/src/authorization/compatibility.d.ts +62 -0
  30. package/src/authorization/compatibility.js +175 -0
  31. package/src/authorization/compatibility.js.map +1 -0
  32. package/src/authorization/index.d.ts +1 -0
  33. package/src/authorization/index.js +5 -0
  34. package/src/authorization/index.js.map +1 -0
  35. package/src/blueprints/execution.d.ts +25 -1
  36. package/src/blueprints/execution.js +246 -83
  37. package/src/blueprints/execution.js.map +1 -1
  38. package/src/blueprints/external-sandbox.d.ts +53 -0
  39. package/src/blueprints/external-sandbox.js +1182 -0
  40. package/src/blueprints/external-sandbox.js.map +1 -0
  41. package/src/blueprints/manifest.d.ts +42 -2
  42. package/src/blueprints/manifest.js +82 -27
  43. package/src/blueprints/manifest.js.map +1 -1
  44. package/src/blueprints/resolver.d.ts +14 -5
  45. package/src/blueprints/resolver.js +228 -68
  46. package/src/blueprints/resolver.js.map +1 -1
  47. package/src/cli/agent-command.d.ts +30 -0
  48. package/src/cli/agent-command.js +204 -0
  49. package/src/cli/agent-command.js.map +1 -0
  50. package/src/cli/agent-runtime.d.ts +25 -0
  51. package/src/cli/agent-runtime.js +488 -0
  52. package/src/cli/agent-runtime.js.map +1 -0
  53. package/src/cli/blueprint-authority.d.ts +9 -0
  54. package/src/cli/blueprint-authority.js +43 -0
  55. package/src/cli/blueprint-authority.js.map +1 -0
  56. package/src/cli/blueprint-command.d.ts +24 -0
  57. package/src/cli/blueprint-command.js +63 -0
  58. package/src/cli/blueprint-command.js.map +1 -0
  59. package/src/cli/bootstrap.d.ts +31 -0
  60. package/src/cli/bootstrap.js +165 -0
  61. package/src/cli/bootstrap.js.map +1 -0
  62. package/src/cli/dev-command.d.ts +92 -0
  63. package/src/cli/dev-command.js +561 -0
  64. package/src/cli/dev-command.js.map +1 -0
  65. package/src/cli/main.d.ts +131 -0
  66. package/src/cli/main.js +1199 -0
  67. package/src/cli/main.js.map +1 -0
  68. package/src/cli/output.d.ts +19 -0
  69. package/src/cli/output.js +51 -0
  70. package/src/cli/output.js.map +1 -0
  71. package/src/cli/personal-secret-runtime.d.ts +81 -0
  72. package/src/cli/personal-secret-runtime.js +567 -0
  73. package/src/cli/personal-secret-runtime.js.map +1 -0
  74. package/src/cli/secret-terminal.d.ts +12 -0
  75. package/src/cli/secret-terminal.js +128 -0
  76. package/src/cli/secret-terminal.js.map +1 -0
  77. package/src/container-images.d.ts +1 -0
  78. package/src/container-images.js +5 -0
  79. package/src/container-images.js.map +1 -0
  80. package/src/data-lifecycle/index.d.ts +3 -0
  81. package/src/data-lifecycle/index.js +7 -0
  82. package/src/data-lifecycle/index.js.map +1 -0
  83. package/src/data-lifecycle/model.d.ts +172 -0
  84. package/src/data-lifecycle/model.fixtures.d.ts +2 -0
  85. package/src/data-lifecycle/model.fixtures.js +244 -0
  86. package/src/data-lifecycle/model.fixtures.js.map +1 -0
  87. package/src/data-lifecycle/model.js +95 -0
  88. package/src/data-lifecycle/model.js.map +1 -0
  89. package/src/data-lifecycle/sensitive-artifacts.d.ts +28 -0
  90. package/src/data-lifecycle/sensitive-artifacts.js +146 -0
  91. package/src/data-lifecycle/sensitive-artifacts.js.map +1 -0
  92. package/src/data-lifecycle/validation.d.ts +32 -0
  93. package/src/data-lifecycle/validation.js +837 -0
  94. package/src/data-lifecycle/validation.js.map +1 -0
  95. package/src/database-retirement/contract.d.ts +68 -0
  96. package/src/database-retirement/contract.js +166 -0
  97. package/src/database-retirement/contract.js.map +1 -0
  98. package/src/database-retirement/index.d.ts +1 -0
  99. package/src/database-retirement/index.js +5 -0
  100. package/src/database-retirement/index.js.map +1 -0
  101. package/src/deterministic-order.d.ts +2 -0
  102. package/src/deterministic-order.js +7 -0
  103. package/src/deterministic-order.js.map +1 -0
  104. package/src/developer-agent/context.d.ts +27 -0
  105. package/src/developer-agent/context.js +497 -0
  106. package/src/developer-agent/context.js.map +1 -0
  107. package/src/developer-agent/generator-planning.d.ts +34 -0
  108. package/src/developer-agent/generator-planning.js +645 -0
  109. package/src/developer-agent/generator-planning.js.map +1 -0
  110. package/src/developer-agent/generator-preview.d.ts +8 -0
  111. package/src/developer-agent/generator-preview.js +650 -0
  112. package/src/developer-agent/generator-preview.js.map +1 -0
  113. package/src/developer-agent/git-inspection.d.ts +108 -0
  114. package/src/developer-agent/git-inspection.js +815 -0
  115. package/src/developer-agent/git-inspection.js.map +1 -0
  116. package/src/developer-agent/handoff.d.ts +43 -0
  117. package/src/developer-agent/handoff.js +698 -0
  118. package/src/developer-agent/handoff.js.map +1 -0
  119. package/src/developer-agent/index.d.ts +10 -0
  120. package/src/developer-agent/index.js +14 -0
  121. package/src/developer-agent/index.js.map +1 -0
  122. package/src/developer-agent/model.d.ts +481 -0
  123. package/src/developer-agent/model.js +143 -0
  124. package/src/developer-agent/model.js.map +1 -0
  125. package/src/developer-agent/operation-registry.d.ts +45 -0
  126. package/src/developer-agent/operation-registry.js +1255 -0
  127. package/src/developer-agent/operation-registry.js.map +1 -0
  128. package/src/developer-agent/ordering.d.ts +9 -0
  129. package/src/developer-agent/ordering.js +15 -0
  130. package/src/developer-agent/ordering.js.map +1 -0
  131. package/src/developer-agent/planning.d.ts +18 -0
  132. package/src/developer-agent/planning.js +447 -0
  133. package/src/developer-agent/planning.js.map +1 -0
  134. package/src/developer-agent/preview-changes.d.ts +26 -0
  135. package/src/developer-agent/preview-changes.js +203 -0
  136. package/src/developer-agent/preview-changes.js.map +1 -0
  137. package/src/developer-agent/preview-source.d.ts +2 -0
  138. package/src/developer-agent/preview-source.js +16 -0
  139. package/src/developer-agent/preview-source.js.map +1 -0
  140. package/src/developer-agent/validation.d.ts +18 -0
  141. package/src/developer-agent/validation.js +2617 -0
  142. package/src/developer-agent/validation.js.map +1 -0
  143. package/src/developer-agent/workspace-inspection.d.ts +20 -0
  144. package/src/developer-agent/workspace-inspection.js +1134 -0
  145. package/src/developer-agent/workspace-inspection.js.map +1 -0
  146. package/src/developer-agent/workspace-path.d.ts +6 -0
  147. package/src/developer-agent/workspace-path.js +22 -0
  148. package/src/developer-agent/workspace-path.js.map +1 -0
  149. package/src/executors/blueprint-trust/blueprint-trust.d.ts +29 -0
  150. package/src/executors/blueprint-trust/blueprint-trust.js +115 -0
  151. package/src/executors/blueprint-trust/blueprint-trust.js.map +1 -0
  152. package/src/executors/blueprint-trust/schema.json +27 -0
  153. package/src/executors/blueprint-verification/blueprint-verification.d.ts +13 -0
  154. package/src/executors/blueprint-verification/blueprint-verification.js +110 -0
  155. package/src/executors/blueprint-verification/blueprint-verification.js.map +1 -0
  156. package/src/executors/blueprint-verification/schema.json +44 -0
  157. package/src/executors/deployment-plan/deployment-plan.js +1 -0
  158. package/src/executors/deployment-plan/deployment-plan.js.map +1 -1
  159. package/src/executors/dev-doctor/dev-doctor.d.ts +19 -5
  160. package/src/executors/dev-doctor/dev-doctor.js +186 -32
  161. package/src/executors/dev-doctor/dev-doctor.js.map +1 -1
  162. package/src/executors/dev-doctor/schema.json +1 -6
  163. package/src/executors/dev-setup/dev-setup.d.ts +7 -1
  164. package/src/executors/dev-setup/dev-setup.js +14 -3
  165. package/src/executors/dev-setup/dev-setup.js.map +1 -1
  166. package/src/executors/developer-context/developer-context.d.ts +38 -0
  167. package/src/executors/developer-context/developer-context.js +78 -0
  168. package/src/executors/developer-context/developer-context.js.map +1 -0
  169. package/src/executors/developer-context/schema.json +87 -0
  170. package/src/executors/fleet/fleet.d.ts +12 -43
  171. package/src/executors/fleet/fleet.js +120 -500
  172. package/src/executors/fleet/fleet.js.map +1 -1
  173. package/src/executors/fleet/schema.json +64 -14
  174. package/src/executors/github-bootstrap/github-bootstrap.d.ts +1 -0
  175. package/src/executors/github-bootstrap/github-bootstrap.js +1 -0
  176. package/src/executors/github-bootstrap/github-bootstrap.js.map +1 -1
  177. package/src/executors/github-bootstrap/schema.json +5 -0
  178. package/src/executors/infrastructure-plan/infrastructure-plan.d.ts +144 -0
  179. package/src/executors/infrastructure-plan/infrastructure-plan.js +3320 -0
  180. package/src/executors/infrastructure-plan/infrastructure-plan.js.map +1 -0
  181. package/src/executors/infrastructure-plan/schema.json +78 -0
  182. package/src/executors/secret-guardrails/schema.json +6 -0
  183. package/src/executors/secret-guardrails/secret-guardrails.d.ts +3 -0
  184. package/src/executors/secret-guardrails/secret-guardrails.js +44 -0
  185. package/src/executors/secret-guardrails/secret-guardrails.js.map +1 -0
  186. package/src/executors/secret-metadata/schema.json +31 -0
  187. package/src/executors/secret-metadata/secret-metadata.d.ts +32 -0
  188. package/src/executors/secret-metadata/secret-metadata.js +131 -0
  189. package/src/executors/secret-metadata/secret-metadata.js.map +1 -0
  190. package/src/executors/sst-lifecycle/logging-preflight.d.ts +17 -0
  191. package/src/executors/sst-lifecycle/logging-preflight.js +196 -0
  192. package/src/executors/sst-lifecycle/logging-preflight.js.map +1 -0
  193. package/src/executors/sst-lifecycle/run-sst-command.d.ts +23 -3
  194. package/src/executors/sst-lifecycle/run-sst-command.js +113 -10
  195. package/src/executors/sst-lifecycle/run-sst-command.js.map +1 -1
  196. package/src/executors/sst-lifecycle/schema.json +9 -5
  197. package/src/executors/sst-lifecycle/secret-preflight.d.ts +25 -0
  198. package/src/executors/sst-lifecycle/secret-preflight.js +119 -0
  199. package/src/executors/sst-lifecycle/secret-preflight.js.map +1 -0
  200. package/src/foundation/discovery.d.ts +17 -1
  201. package/src/foundation/discovery.js +16 -1
  202. package/src/foundation/discovery.js.map +1 -1
  203. package/src/foundation/index.d.ts +3 -0
  204. package/src/foundation/index.js +3 -0
  205. package/src/foundation/index.js.map +1 -1
  206. package/src/foundation/local-database-contract.d.ts +1 -0
  207. package/src/foundation/local-database-contract.js +3 -0
  208. package/src/foundation/local-database-contract.js.map +1 -1
  209. package/src/foundation/logging-preflight.d.ts +30 -0
  210. package/src/foundation/logging-preflight.js +138 -0
  211. package/src/foundation/logging-preflight.js.map +1 -0
  212. package/src/foundation/logging.d.ts +70 -0
  213. package/src/foundation/logging.js +133 -0
  214. package/src/foundation/logging.js.map +1 -0
  215. package/src/foundation/preflight.d.ts +9 -0
  216. package/src/foundation/preflight.js +58 -2
  217. package/src/foundation/preflight.js.map +1 -1
  218. package/src/foundation/provision-database-bindings.d.ts +9 -1
  219. package/src/foundation/provision-database-bindings.js +25 -5
  220. package/src/foundation/provision-database-bindings.js.map +1 -1
  221. package/src/foundation/provision-logical-database.d.ts +10 -2
  222. package/src/foundation/provision-logical-database.js +68 -113
  223. package/src/foundation/provision-logical-database.js.map +1 -1
  224. package/src/foundation/router-origin-proof.d.ts +2 -0
  225. package/src/foundation/router-origin-proof.js +25 -0
  226. package/src/foundation/router-origin-proof.js.map +1 -0
  227. package/src/foundation/stages.d.ts +1 -0
  228. package/src/foundation/stages.js +9 -1
  229. package/src/foundation/stages.js.map +1 -1
  230. package/src/frontend-security/index.d.ts +1 -0
  231. package/src/frontend-security/index.js +5 -0
  232. package/src/frontend-security/index.js.map +1 -0
  233. package/src/frontend-security/security-headers.d.ts +50 -0
  234. package/src/frontend-security/security-headers.js +418 -0
  235. package/src/frontend-security/security-headers.js.map +1 -0
  236. package/src/generators/feature-registry.d.ts +13 -0
  237. package/src/generators/feature-registry.js +73 -0
  238. package/src/generators/feature-registry.js.map +1 -0
  239. package/src/generators/function/function.d.ts +1 -1
  240. package/src/generators/function/function.js +51 -6
  241. package/src/generators/function/function.js.map +1 -1
  242. package/src/generators/function/schema.d.ts +1 -0
  243. package/src/generators/function/schema.json +6 -1
  244. package/src/generators/logging-registry.d.ts +13 -0
  245. package/src/generators/logging-registry.js +62 -0
  246. package/src/generators/logging-registry.js.map +1 -0
  247. package/src/generators/post-generation-install.d.ts +67 -0
  248. package/src/generators/post-generation-install.js +3308 -0
  249. package/src/generators/post-generation-install.js.map +1 -0
  250. package/src/generators/preset/generator.js +3 -0
  251. package/src/generators/preset/generator.js.map +1 -1
  252. package/src/generators/preset/tool-versions.d.ts +18 -0
  253. package/src/generators/preset/tool-versions.js +22 -0
  254. package/src/generators/preset/tool-versions.js.map +1 -0
  255. package/src/generators/preset/workspace-files-developer-agent.d.ts +14 -0
  256. package/src/generators/preset/workspace-files-developer-agent.js +511 -0
  257. package/src/generators/preset/workspace-files-developer-agent.js.map +1 -0
  258. package/src/generators/preset/workspace-files-foundation-workload-roles.d.ts +6 -0
  259. package/src/generators/preset/workspace-files-foundation-workload-roles.js +406 -0
  260. package/src/generators/preset/workspace-files-foundation-workload-roles.js.map +1 -0
  261. package/src/generators/preset/workspace-files-performance-cost.d.ts +66 -0
  262. package/src/generators/preset/workspace-files-performance-cost.js +866 -0
  263. package/src/generators/preset/workspace-files-performance-cost.js.map +1 -0
  264. package/src/generators/preset/workspace-files-performance-load.d.ts +73 -0
  265. package/src/generators/preset/workspace-files-performance-load.js +801 -0
  266. package/src/generators/preset/workspace-files-performance-load.js.map +1 -0
  267. package/src/generators/preset/workspace-files-workload-role-baseline.d.ts +9 -0
  268. package/src/generators/preset/workspace-files-workload-role-baseline.js +1102 -0
  269. package/src/generators/preset/workspace-files-workload-role-baseline.js.map +1 -0
  270. package/src/generators/preset/workspace-files.d.ts +14 -1
  271. package/src/generators/preset/workspace-files.js +8189 -245
  272. package/src/generators/preset/workspace-files.js.map +1 -1
  273. package/src/generators/repository-policy/repository-policy.js +3 -47
  274. package/src/generators/repository-policy/repository-policy.js.map +1 -1
  275. package/src/generators/slice/built-in-plan-api-contract-files.d.ts +2 -0
  276. package/src/generators/slice/built-in-plan-api-contract-files.js +2656 -0
  277. package/src/generators/slice/built-in-plan-api-contract-files.js.map +1 -0
  278. package/src/generators/slice/built-in-plan-api-files.d.ts +2 -0
  279. package/src/generators/slice/built-in-plan-api-files.js +1186 -0
  280. package/src/generators/slice/built-in-plan-api-files.js.map +1 -0
  281. package/src/generators/slice/built-in-plan-async-work-files.d.ts +2 -0
  282. package/src/generators/slice/built-in-plan-async-work-files.js +7903 -0
  283. package/src/generators/slice/built-in-plan-async-work-files.js.map +1 -0
  284. package/src/generators/slice/built-in-plan-authorization-files.d.ts +2 -0
  285. package/src/generators/slice/built-in-plan-authorization-files.js +2314 -0
  286. package/src/generators/slice/built-in-plan-authorization-files.js.map +1 -0
  287. package/src/generators/slice/built-in-plan-authorization-infrastructure-files.d.ts +2 -0
  288. package/src/generators/slice/built-in-plan-authorization-infrastructure-files.js +559 -0
  289. package/src/generators/slice/built-in-plan-authorization-infrastructure-files.js.map +1 -0
  290. package/src/generators/slice/built-in-plan-data-deletion-files.d.ts +2 -0
  291. package/src/generators/slice/built-in-plan-data-deletion-files.js +1101 -0
  292. package/src/generators/slice/built-in-plan-data-deletion-files.js.map +1 -0
  293. package/src/generators/slice/built-in-plan-data-export-infrastructure-files.d.ts +2 -0
  294. package/src/generators/slice/built-in-plan-data-export-infrastructure-files.js +249 -0
  295. package/src/generators/slice/built-in-plan-data-export-infrastructure-files.js.map +1 -0
  296. package/src/generators/slice/built-in-plan-data-files.d.ts +2 -0
  297. package/src/generators/slice/built-in-plan-data-files.js +1530 -0
  298. package/src/generators/slice/built-in-plan-data-files.js.map +1 -0
  299. package/src/generators/slice/built-in-plan-data-lifecycle-files.d.ts +2 -0
  300. package/src/generators/slice/built-in-plan-data-lifecycle-files.js +750 -0
  301. package/src/generators/slice/built-in-plan-data-lifecycle-files.js.map +1 -0
  302. package/src/generators/slice/built-in-plan-data-lifecycle-runtime-files.d.ts +2 -0
  303. package/src/generators/slice/built-in-plan-data-lifecycle-runtime-files.js +828 -0
  304. package/src/generators/slice/built-in-plan-data-lifecycle-runtime-files.js.map +1 -0
  305. package/src/generators/slice/built-in-plan-data-retention-job-files.d.ts +2 -0
  306. package/src/generators/slice/built-in-plan-data-retention-job-files.js +2604 -0
  307. package/src/generators/slice/built-in-plan-data-retention-job-files.js.map +1 -0
  308. package/src/generators/slice/built-in-plan-data-retention-launcher-files.d.ts +2 -0
  309. package/src/generators/slice/built-in-plan-data-retention-launcher-files.js +144 -0
  310. package/src/generators/slice/built-in-plan-data-retention-launcher-files.js.map +1 -0
  311. package/src/generators/slice/built-in-plan-data-rights-files.d.ts +2 -0
  312. package/src/generators/slice/built-in-plan-data-rights-files.js +4628 -0
  313. package/src/generators/slice/built-in-plan-data-rights-files.js.map +1 -0
  314. package/src/generators/slice/built-in-plan-database-lifecycle-files.d.ts +2 -0
  315. package/src/generators/slice/built-in-plan-database-lifecycle-files.js +1901 -0
  316. package/src/generators/slice/built-in-plan-database-lifecycle-files.js.map +1 -0
  317. package/src/generators/slice/built-in-plan-database-retirement-rehearsal-files.d.ts +2 -0
  318. package/src/generators/slice/built-in-plan-database-retirement-rehearsal-files.js +485 -0
  319. package/src/generators/slice/built-in-plan-database-retirement-rehearsal-files.js.map +1 -0
  320. package/src/generators/slice/built-in-plan-foundation-files.d.ts +2 -0
  321. package/src/generators/slice/built-in-plan-foundation-files.js +184 -0
  322. package/src/generators/slice/built-in-plan-foundation-files.js.map +1 -0
  323. package/src/generators/slice/built-in-plan-frontend-files.d.ts +2 -0
  324. package/src/generators/slice/built-in-plan-frontend-files.js +2233 -0
  325. package/src/generators/slice/built-in-plan-frontend-files.js.map +1 -0
  326. package/src/generators/slice/built-in-plan-infrastructure-files.d.ts +2 -0
  327. package/src/generators/slice/built-in-plan-infrastructure-files.js +3038 -0
  328. package/src/generators/slice/built-in-plan-infrastructure-files.js.map +1 -0
  329. package/src/generators/slice/built-in-plan-infrastructure-safety-files.d.ts +2 -0
  330. package/src/generators/slice/built-in-plan-infrastructure-safety-files.js +312 -0
  331. package/src/generators/slice/built-in-plan-infrastructure-safety-files.js.map +1 -0
  332. package/src/generators/slice/built-in-plan-metadata-files.d.ts +3 -0
  333. package/src/generators/slice/built-in-plan-metadata-files.js +219 -0
  334. package/src/generators/slice/built-in-plan-metadata-files.js.map +1 -0
  335. package/src/generators/slice/built-in-plan-operations-files.d.ts +2 -0
  336. package/src/generators/slice/built-in-plan-operations-files.js +630 -0
  337. package/src/generators/slice/built-in-plan-operations-files.js.map +1 -0
  338. package/src/generators/slice/built-in-plan-performance-files.d.ts +3 -0
  339. package/src/generators/slice/built-in-plan-performance-files.js +3293 -0
  340. package/src/generators/slice/built-in-plan-performance-files.js.map +1 -0
  341. package/src/generators/slice/built-in-plan-project-files.d.ts +3 -0
  342. package/src/generators/slice/built-in-plan-project-files.js +979 -0
  343. package/src/generators/slice/built-in-plan-project-files.js.map +1 -0
  344. package/src/generators/slice/built-in-plan-release-files.d.ts +2 -0
  345. package/src/generators/slice/built-in-plan-release-files.js +6387 -0
  346. package/src/generators/slice/built-in-plan-release-files.js.map +1 -0
  347. package/src/generators/slice/built-in-plan-reliability-files.d.ts +2 -0
  348. package/src/generators/slice/built-in-plan-reliability-files.js +4499 -0
  349. package/src/generators/slice/built-in-plan-reliability-files.js.map +1 -0
  350. package/src/generators/slice/built-in-plan-secret-runtime-files.d.ts +2 -0
  351. package/src/generators/slice/built-in-plan-secret-runtime-files.js +1004 -0
  352. package/src/generators/slice/built-in-plan-secret-runtime-files.js.map +1 -0
  353. package/src/generators/slice/built-in-plan-shared.d.ts +53 -0
  354. package/src/generators/slice/built-in-plan-shared.js +113 -0
  355. package/src/generators/slice/built-in-plan-shared.js.map +1 -0
  356. package/src/generators/slice/built-in-plan-testing-files.d.ts +2 -0
  357. package/src/generators/slice/built-in-plan-testing-files.js +2356 -0
  358. package/src/generators/slice/built-in-plan-testing-files.js.map +1 -0
  359. package/src/generators/slice/built-in-plan-verification-files.d.ts +2 -0
  360. package/src/generators/slice/built-in-plan-verification-files.js +358 -0
  361. package/src/generators/slice/built-in-plan-verification-files.js.map +1 -0
  362. package/src/generators/slice/built-in-plan-web-files.d.ts +2 -0
  363. package/src/generators/slice/built-in-plan-web-files.js +430 -0
  364. package/src/generators/slice/built-in-plan-web-files.js.map +1 -0
  365. package/src/generators/slice/built-in-plan-workload-role-files.d.ts +2 -0
  366. package/src/generators/slice/built-in-plan-workload-role-files.js +2356 -0
  367. package/src/generators/slice/built-in-plan-workload-role-files.js.map +1 -0
  368. package/src/generators/slice/built-in-plan.d.ts +8 -0
  369. package/src/generators/slice/built-in-plan.js +264 -0
  370. package/src/generators/slice/built-in-plan.js.map +1 -0
  371. package/src/generators/slice/schema.json +1 -1
  372. package/src/generators/slice/slice.d.ts +1 -22
  373. package/src/generators/slice/slice.js +185 -1510
  374. package/src/generators/slice/slice.js.map +1 -1
  375. package/src/generators/upgrade/schema.d.ts +2 -0
  376. package/src/generators/upgrade/schema.json +11 -1
  377. package/src/generators/upgrade/upgrade.d.ts +51 -1
  378. package/src/generators/upgrade/upgrade.js +820 -82
  379. package/src/generators/upgrade/upgrade.js.map +1 -1
  380. package/src/generators/workload/frozen-container.d.ts +8 -0
  381. package/src/generators/workload/frozen-container.js +36 -0
  382. package/src/generators/workload/frozen-container.js.map +1 -0
  383. package/src/generators/workload/performance-registration.d.ts +32 -0
  384. package/src/generators/workload/performance-registration.js +226 -0
  385. package/src/generators/workload/performance-registration.js.map +1 -0
  386. package/src/generators/workload/reliability-registration.d.ts +16 -0
  387. package/src/generators/workload/reliability-registration.js +150 -0
  388. package/src/generators/workload/reliability-registration.js.map +1 -0
  389. package/src/generators/workload/schema.d.ts +1 -0
  390. package/src/generators/workload/schema.json +6 -1
  391. package/src/generators/workload/service-performance-files.d.ts +4 -0
  392. package/src/generators/workload/service-performance-files.js +1846 -0
  393. package/src/generators/workload/service-performance-files.js.map +1 -0
  394. package/src/generators/workload/workload.d.ts +3 -2
  395. package/src/generators/workload/workload.js +1083 -18
  396. package/src/generators/workload/workload.js.map +1 -1
  397. package/src/git-policy/action-pins.d.ts +10 -0
  398. package/src/git-policy/action-pins.js +10 -0
  399. package/src/git-policy/action-pins.js.map +1 -1
  400. package/src/git-policy/github-bootstrap.d.ts +14 -1
  401. package/src/git-policy/github-bootstrap.js +274 -46
  402. package/src/git-policy/github-bootstrap.js.map +1 -1
  403. package/src/index.d.ts +2 -0
  404. package/src/index.js +2 -0
  405. package/src/index.js.map +1 -1
  406. package/src/infrastructure-change/convergence.d.ts +13 -0
  407. package/src/infrastructure-change/convergence.js +85 -0
  408. package/src/infrastructure-change/convergence.js.map +1 -0
  409. package/src/infrastructure-change/drift.d.ts +13 -0
  410. package/src/infrastructure-change/drift.js +112 -0
  411. package/src/infrastructure-change/drift.js.map +1 -0
  412. package/src/infrastructure-change/index.d.ts +7 -0
  413. package/src/infrastructure-change/index.js +11 -0
  414. package/src/infrastructure-change/index.js.map +1 -0
  415. package/src/infrastructure-change/model.d.ts +253 -0
  416. package/src/infrastructure-change/model.js +28 -0
  417. package/src/infrastructure-change/model.js.map +1 -0
  418. package/src/infrastructure-change/normalize.d.ts +12 -0
  419. package/src/infrastructure-change/normalize.js +245 -0
  420. package/src/infrastructure-change/normalize.js.map +1 -0
  421. package/src/infrastructure-change/plan.d.ts +40 -0
  422. package/src/infrastructure-change/plan.js +361 -0
  423. package/src/infrastructure-change/plan.js.map +1 -0
  424. package/src/infrastructure-change/risk.d.ts +7 -0
  425. package/src/infrastructure-change/risk.js +269 -0
  426. package/src/infrastructure-change/risk.js.map +1 -0
  427. package/src/infrastructure-change/summary.d.ts +20 -0
  428. package/src/infrastructure-change/summary.js +130 -0
  429. package/src/infrastructure-change/summary.js.map +1 -0
  430. package/src/local-dev/context-discovery.d.ts +2 -0
  431. package/src/local-dev/context-discovery.js +59 -0
  432. package/src/local-dev/context-discovery.js.map +1 -0
  433. package/src/local-dev/contract-validation.d.ts +15 -0
  434. package/src/local-dev/contract-validation.js +84 -0
  435. package/src/local-dev/contract-validation.js.map +1 -0
  436. package/src/local-dev/contracts.d.ts +10 -1
  437. package/src/local-dev/contracts.js +57 -5
  438. package/src/local-dev/contracts.js.map +1 -1
  439. package/src/local-dev/control-contract.d.ts +67 -0
  440. package/src/local-dev/control-contract.js +180 -0
  441. package/src/local-dev/control-contract.js.map +1 -0
  442. package/src/local-dev/dev-command-core.d.ts +60 -0
  443. package/src/local-dev/dev-command-core.js +89 -0
  444. package/src/local-dev/dev-command-core.js.map +1 -0
  445. package/src/local-dev/effects.d.ts +16 -0
  446. package/src/local-dev/effects.js +63 -0
  447. package/src/local-dev/effects.js.map +1 -0
  448. package/src/local-dev/environment-inspector.d.ts +125 -0
  449. package/src/local-dev/environment-inspector.js +687 -0
  450. package/src/local-dev/environment-inspector.js.map +1 -0
  451. package/src/local-dev/environment-state.d.ts +113 -0
  452. package/src/local-dev/environment-state.js +463 -0
  453. package/src/local-dev/environment-state.js.map +1 -0
  454. package/src/local-dev/errors.d.ts +6 -0
  455. package/src/local-dev/errors.js +41 -0
  456. package/src/local-dev/errors.js.map +1 -0
  457. package/src/local-dev/fleet-client.d.ts +33 -0
  458. package/src/local-dev/fleet-client.js +156 -0
  459. package/src/local-dev/fleet-client.js.map +1 -0
  460. package/src/local-dev/fleet-configuration.d.ts +13 -0
  461. package/src/local-dev/fleet-configuration.js +71 -0
  462. package/src/local-dev/fleet-configuration.js.map +1 -0
  463. package/src/local-dev/fleet-inventory.d.ts +56 -0
  464. package/src/local-dev/fleet-inventory.js +469 -0
  465. package/src/local-dev/fleet-inventory.js.map +1 -0
  466. package/src/local-dev/fleet-ipc.d.ts +28 -0
  467. package/src/local-dev/fleet-ipc.js +267 -0
  468. package/src/local-dev/fleet-ipc.js.map +1 -0
  469. package/src/local-dev/fleet-launcher.d.ts +53 -0
  470. package/src/local-dev/fleet-launcher.js +379 -0
  471. package/src/local-dev/fleet-launcher.js.map +1 -0
  472. package/src/local-dev/fleet-lock.d.ts +41 -0
  473. package/src/local-dev/fleet-lock.js +135 -0
  474. package/src/local-dev/fleet-lock.js.map +1 -0
  475. package/src/local-dev/fleet-logs.d.ts +66 -0
  476. package/src/local-dev/fleet-logs.js +542 -0
  477. package/src/local-dev/fleet-logs.js.map +1 -0
  478. package/src/local-dev/fleet-process.d.ts +50 -0
  479. package/src/local-dev/fleet-process.js +289 -0
  480. package/src/local-dev/fleet-process.js.map +1 -0
  481. package/src/local-dev/fleet-runtime.d.ts +22 -0
  482. package/src/local-dev/fleet-runtime.js +368 -0
  483. package/src/local-dev/fleet-runtime.js.map +1 -0
  484. package/src/local-dev/fleet-session.d.ts +70 -0
  485. package/src/local-dev/fleet-session.js +301 -0
  486. package/src/local-dev/fleet-session.js.map +1 -0
  487. package/src/local-dev/fleet-slice-runner-daemon.d.ts +1 -0
  488. package/src/local-dev/fleet-slice-runner-daemon.js +21 -0
  489. package/src/local-dev/fleet-slice-runner-daemon.js.map +1 -0
  490. package/src/local-dev/fleet-startup.d.ts +22 -0
  491. package/src/local-dev/fleet-startup.js +114 -0
  492. package/src/local-dev/fleet-startup.js.map +1 -0
  493. package/src/local-dev/fleet-state.d.ts +62 -0
  494. package/src/local-dev/fleet-state.js +297 -0
  495. package/src/local-dev/fleet-state.js.map +1 -0
  496. package/src/local-dev/fleet-supervisor-daemon.d.ts +1 -0
  497. package/src/local-dev/fleet-supervisor-daemon.js +41 -0
  498. package/src/local-dev/fleet-supervisor-daemon.js.map +1 -0
  499. package/src/local-dev/fleet-supervisor.d.ts +52 -0
  500. package/src/local-dev/fleet-supervisor.js +384 -0
  501. package/src/local-dev/fleet-supervisor.js.map +1 -0
  502. package/src/local-dev/gateway.js +1 -1
  503. package/src/local-dev/gateway.js.map +1 -1
  504. package/src/local-dev/identity.js +4 -6
  505. package/src/local-dev/identity.js.map +1 -1
  506. package/src/local-dev/index.d.ts +1 -0
  507. package/src/local-dev/index.js +1 -0
  508. package/src/local-dev/index.js.map +1 -1
  509. package/src/local-dev/local-context.d.ts +62 -0
  510. package/src/local-dev/local-context.js +299 -0
  511. package/src/local-dev/local-context.js.map +1 -0
  512. package/src/local-dev/nx-workspace.d.ts +45 -0
  513. package/src/local-dev/nx-workspace.js +228 -0
  514. package/src/local-dev/nx-workspace.js.map +1 -0
  515. package/src/local-dev/personal-secret-ledger.d.ts +75 -0
  516. package/src/local-dev/personal-secret-ledger.js +391 -0
  517. package/src/local-dev/personal-secret-ledger.js.map +1 -0
  518. package/src/local-dev/personal-stage.d.ts +18 -0
  519. package/src/local-dev/personal-stage.js +129 -0
  520. package/src/local-dev/personal-stage.js.map +1 -0
  521. package/src/local-dev/private-state.d.ts +17 -0
  522. package/src/local-dev/private-state.js +254 -0
  523. package/src/local-dev/private-state.js.map +1 -0
  524. package/src/local-dev/process-identity.d.ts +9 -0
  525. package/src/local-dev/process-identity.js +79 -0
  526. package/src/local-dev/process-identity.js.map +1 -0
  527. package/src/local-dev/runtime-paths.d.ts +17 -0
  528. package/src/local-dev/runtime-paths.js +33 -0
  529. package/src/local-dev/runtime-paths.js.map +1 -0
  530. package/src/local-dev/secret-slice-claim.d.ts +17 -0
  531. package/src/local-dev/secret-slice-claim.js +75 -0
  532. package/src/local-dev/secret-slice-claim.js.map +1 -0
  533. package/src/local-dev/slice-claim.d.ts +36 -0
  534. package/src/local-dev/slice-claim.js +199 -0
  535. package/src/local-dev/slice-claim.js.map +1 -0
  536. package/src/local-dev/slice-runner.d.ts +121 -0
  537. package/src/local-dev/slice-runner.js +715 -0
  538. package/src/local-dev/slice-runner.js.map +1 -0
  539. package/src/local-dev/tls.js +51 -17
  540. package/src/local-dev/tls.js.map +1 -1
  541. package/src/ownership/composition.d.ts +5 -2
  542. package/src/ownership/composition.js +26 -3
  543. package/src/ownership/composition.js.map +1 -1
  544. package/src/ownership/hash.d.ts +1 -1
  545. package/src/ownership/hash.js +3 -1
  546. package/src/ownership/hash.js.map +1 -1
  547. package/src/ownership/record.d.ts +32 -1
  548. package/src/ownership/record.js +139 -2
  549. package/src/ownership/record.js.map +1 -1
  550. package/src/performance/cost-collection.d.ts +225 -0
  551. package/src/performance/cost-collection.js +825 -0
  552. package/src/performance/cost-collection.js.map +1 -0
  553. package/src/performance/cost-controls.d.ts +131 -0
  554. package/src/performance/cost-controls.js +336 -0
  555. package/src/performance/cost-controls.js.map +1 -0
  556. package/src/performance/evidence.d.ts +140 -0
  557. package/src/performance/evidence.js +599 -0
  558. package/src/performance/evidence.js.map +1 -0
  559. package/src/performance/index.d.ts +10 -0
  560. package/src/performance/index.js +14 -0
  561. package/src/performance/index.js.map +1 -0
  562. package/src/performance/load-safety.d.ts +84 -0
  563. package/src/performance/load-safety.js +346 -0
  564. package/src/performance/load-safety.js.map +1 -0
  565. package/src/performance/model.d.ts +129 -0
  566. package/src/performance/model.js +452 -0
  567. package/src/performance/model.js.map +1 -0
  568. package/src/performance/pr-artifact-budget.d.ts +42 -0
  569. package/src/performance/pr-artifact-budget.js +151 -0
  570. package/src/performance/pr-artifact-budget.js.map +1 -0
  571. package/src/performance/runner.d.ts +75 -0
  572. package/src/performance/runner.js +227 -0
  573. package/src/performance/runner.js.map +1 -0
  574. package/src/performance/scenario-endpoint.d.ts +1 -0
  575. package/src/performance/scenario-endpoint.js +5 -0
  576. package/src/performance/scenario-endpoint.js.map +1 -0
  577. package/src/performance/scenario.d.ts +193 -0
  578. package/src/performance/scenario.js +736 -0
  579. package/src/performance/scenario.js.map +1 -0
  580. package/src/performance/test-fixtures.d.ts +7 -0
  581. package/src/performance/test-fixtures.js +169 -0
  582. package/src/performance/test-fixtures.js.map +1 -0
  583. package/src/performance/unit-cost.d.ts +105 -0
  584. package/src/performance/unit-cost.js +364 -0
  585. package/src/performance/unit-cost.js.map +1 -0
  586. package/src/release/index.d.ts +4 -0
  587. package/src/release/index.js +8 -0
  588. package/src/release/index.js.map +1 -0
  589. package/src/release/lifecycle.d.ts +132 -0
  590. package/src/release/lifecycle.js +411 -0
  591. package/src/release/lifecycle.js.map +1 -0
  592. package/src/release/manifest.d.ts +148 -0
  593. package/src/release/manifest.js +503 -0
  594. package/src/release/manifest.js.map +1 -0
  595. package/src/release/rollout.d.ts +170 -0
  596. package/src/release/rollout.js +578 -0
  597. package/src/release/rollout.js.map +1 -0
  598. package/src/release/source-authority.d.ts +19 -0
  599. package/src/release/source-authority.js +195 -0
  600. package/src/release/source-authority.js.map +1 -0
  601. package/src/repository-policy/deployment-plan.d.ts +2 -1
  602. package/src/repository-policy/deployment-plan.js +2 -0
  603. package/src/repository-policy/deployment-plan.js.map +1 -1
  604. package/src/repository-policy/policy.d.ts +1 -1
  605. package/src/repository-policy/policy.js +29 -25
  606. package/src/repository-policy/policy.js.map +1 -1
  607. package/src/schemas/aggregate-count-evidence-v1.json +135 -0
  608. package/src/schemas/api-contract-baseline-v1.json +674 -0
  609. package/src/schemas/api-contract-compatibility-report-v1.json +126 -0
  610. package/src/schemas/aws-billing-actual-evidence-v1.json +407 -0
  611. package/src/schemas/blueprint-v1.json +18 -1
  612. package/src/schemas/data-lifecycle-policy-v1.json +517 -0
  613. package/src/schemas/generated-ownership-v2.json +22 -0
  614. package/src/schemas/performance-policy-v1.json +335 -0
  615. package/src/schemas/repository-policy-v1.json +1 -0
  616. package/src/schemas/testing-evidence-quarantine-v1.json +168 -0
  617. package/src/schemas/testing-evidence-result-v1.json +319 -0
  618. package/src/secrets/adapters.d.ts +49 -0
  619. package/src/secrets/adapters.js +184 -0
  620. package/src/secrets/adapters.js.map +1 -0
  621. package/src/secrets/aws-control-plane.d.ts +20 -0
  622. package/src/secrets/aws-control-plane.js +255 -0
  623. package/src/secrets/aws-control-plane.js.map +1 -0
  624. package/src/secrets/declaration-verification.d.ts +11 -0
  625. package/src/secrets/declaration-verification.js +68 -0
  626. package/src/secrets/declaration-verification.js.map +1 -0
  627. package/src/secrets/guardrails.d.ts +26 -0
  628. package/src/secrets/guardrails.js +328 -0
  629. package/src/secrets/guardrails.js.map +1 -0
  630. package/src/secrets/index.d.ts +12 -0
  631. package/src/secrets/index.js +16 -0
  632. package/src/secrets/index.js.map +1 -0
  633. package/src/secrets/metadata.d.ts +48 -0
  634. package/src/secrets/metadata.js +171 -0
  635. package/src/secrets/metadata.js.map +1 -0
  636. package/src/secrets/model.d.ts +49 -0
  637. package/src/secrets/model.js +125 -0
  638. package/src/secrets/model.js.map +1 -0
  639. package/src/secrets/operator.d.ts +101 -0
  640. package/src/secrets/operator.js +229 -0
  641. package/src/secrets/operator.js.map +1 -0
  642. package/src/secrets/permissions.d.ts +34 -0
  643. package/src/secrets/permissions.js +86 -0
  644. package/src/secrets/permissions.js.map +1 -0
  645. package/src/secrets/personal-command.d.ts +83 -0
  646. package/src/secrets/personal-command.js +197 -0
  647. package/src/secrets/personal-command.js.map +1 -0
  648. package/src/secrets/personal-ledger.d.ts +21 -0
  649. package/src/secrets/personal-ledger.js +135 -0
  650. package/src/secrets/personal-ledger.js.map +1 -0
  651. package/src/secrets/registry.d.ts +9 -0
  652. package/src/secrets/registry.js +86 -0
  653. package/src/secrets/registry.js.map +1 -0
  654. package/src/secrets/verification.d.ts +18 -0
  655. package/src/secrets/verification.js +139 -0
  656. package/src/secrets/verification.js.map +1 -0
  657. package/src/secrets/workload-access.d.ts +46 -0
  658. package/src/secrets/workload-access.js +163 -0
  659. package/src/secrets/workload-access.js.map +1 -0
  660. package/src/supply-chain/action-pins.d.ts +26 -0
  661. package/src/supply-chain/action-pins.js +208 -0
  662. package/src/supply-chain/action-pins.js.map +1 -0
  663. package/src/supply-chain/blueprint-trust-git.d.ts +130 -0
  664. package/src/supply-chain/blueprint-trust-git.js +1581 -0
  665. package/src/supply-chain/blueprint-trust-git.js.map +1 -0
  666. package/src/supply-chain/blueprint-trust-process.d.ts +4 -0
  667. package/src/supply-chain/blueprint-trust-process.js +88 -0
  668. package/src/supply-chain/blueprint-trust-process.js.map +1 -0
  669. package/src/supply-chain/blueprint-trust.d.ts +354 -0
  670. package/src/supply-chain/blueprint-trust.js +1558 -0
  671. package/src/supply-chain/blueprint-trust.js.map +1 -0
  672. package/src/supply-chain/blueprint-verification-authority.d.ts +62 -0
  673. package/src/supply-chain/blueprint-verification-authority.js +588 -0
  674. package/src/supply-chain/blueprint-verification-authority.js.map +1 -0
  675. package/src/supply-chain/blueprint-verification-execution.d.ts +68 -0
  676. package/src/supply-chain/blueprint-verification-execution.js +624 -0
  677. package/src/supply-chain/blueprint-verification-execution.js.map +1 -0
  678. package/src/supply-chain/build-output.d.ts +35 -0
  679. package/src/supply-chain/build-output.js +398 -0
  680. package/src/supply-chain/build-output.js.map +1 -0
  681. package/src/supply-chain/common.d.ts +21 -0
  682. package/src/supply-chain/common.js +107 -0
  683. package/src/supply-chain/common.js.map +1 -0
  684. package/src/supply-chain/container-artifact-contract.d.ts +23 -0
  685. package/src/supply-chain/container-artifact-contract.js +208 -0
  686. package/src/supply-chain/container-artifact-contract.js.map +1 -0
  687. package/src/supply-chain/container-release.d.ts +119 -0
  688. package/src/supply-chain/container-release.js +496 -0
  689. package/src/supply-chain/container-release.js.map +1 -0
  690. package/src/supply-chain/ecr-applicability.d.ts +19 -0
  691. package/src/supply-chain/ecr-applicability.js +103 -0
  692. package/src/supply-chain/ecr-applicability.js.map +1 -0
  693. package/src/supply-chain/ecr-scanning.d.ts +83 -0
  694. package/src/supply-chain/ecr-scanning.js +321 -0
  695. package/src/supply-chain/ecr-scanning.js.map +1 -0
  696. package/src/supply-chain/ecs-deployed-image.d.ts +85 -0
  697. package/src/supply-chain/ecs-deployed-image.js +300 -0
  698. package/src/supply-chain/ecs-deployed-image.js.map +1 -0
  699. package/src/supply-chain/errors.d.ts +6 -0
  700. package/src/supply-chain/errors.js +15 -0
  701. package/src/supply-chain/errors.js.map +1 -0
  702. package/src/supply-chain/generated-blueprint-trust-command.d.ts +4 -0
  703. package/src/supply-chain/generated-blueprint-trust-command.js +1362 -0
  704. package/src/supply-chain/generated-blueprint-trust-command.js.map +1 -0
  705. package/src/supply-chain/generated-command.d.ts +1 -0
  706. package/src/supply-chain/generated-command.js +687 -0
  707. package/src/supply-chain/generated-command.js.map +1 -0
  708. package/src/supply-chain/generated-container-release-command.d.ts +16 -0
  709. package/src/supply-chain/generated-container-release-command.js +2087 -0
  710. package/src/supply-chain/generated-container-release-command.js.map +1 -0
  711. package/src/supply-chain/generated-ecr-collector-command.d.ts +21 -0
  712. package/src/supply-chain/generated-ecr-collector-command.js +1338 -0
  713. package/src/supply-chain/generated-ecr-collector-command.js.map +1 -0
  714. package/src/supply-chain/generated-files.d.ts +13 -0
  715. package/src/supply-chain/generated-files.js +401 -0
  716. package/src/supply-chain/generated-files.js.map +1 -0
  717. package/src/supply-chain/generated-scanner-command.d.ts +1 -0
  718. package/src/supply-chain/generated-scanner-command.js +718 -0
  719. package/src/supply-chain/generated-scanner-command.js.map +1 -0
  720. package/src/supply-chain/index.d.ts +28 -0
  721. package/src/supply-chain/index.js +35 -0
  722. package/src/supply-chain/index.js.map +1 -0
  723. package/src/supply-chain/inventory.d.ts +79 -0
  724. package/src/supply-chain/inventory.js +717 -0
  725. package/src/supply-chain/inventory.js.map +1 -0
  726. package/src/supply-chain/license-expression.d.ts +7 -0
  727. package/src/supply-chain/license-expression.js +128 -0
  728. package/src/supply-chain/license-expression.js.map +1 -0
  729. package/src/supply-chain/pnpm-toolchain-authority.d.ts +31 -0
  730. package/src/supply-chain/pnpm-toolchain-authority.js +316 -0
  731. package/src/supply-chain/pnpm-toolchain-authority.js.map +1 -0
  732. package/src/supply-chain/policy.d.ts +105 -0
  733. package/src/supply-chain/policy.js +301 -0
  734. package/src/supply-chain/policy.js.map +1 -0
  735. package/src/supply-chain/publication.d.ts +48 -0
  736. package/src/supply-chain/publication.js +85 -0
  737. package/src/supply-chain/publication.js.map +1 -0
  738. package/src/supply-chain/sbom.d.ts +228 -0
  739. package/src/supply-chain/sbom.js +826 -0
  740. package/src/supply-chain/sbom.js.map +1 -0
  741. package/src/supply-chain/scanner.d.ts +77 -0
  742. package/src/supply-chain/scanner.js +502 -0
  743. package/src/supply-chain/scanner.js.map +1 -0
  744. package/src/supply-chain/vendored-source.d.ts +95 -0
  745. package/src/supply-chain/vendored-source.js +315 -0
  746. package/src/supply-chain/vendored-source.js.map +1 -0
  747. package/src/testing-evidence/fixture-scope.d.ts +52 -0
  748. package/src/testing-evidence/fixture-scope.js +140 -0
  749. package/src/testing-evidence/fixture-scope.js.map +1 -0
  750. package/src/testing-evidence/index.d.ts +5 -0
  751. package/src/testing-evidence/index.js +9 -0
  752. package/src/testing-evidence/index.js.map +1 -0
  753. package/src/testing-evidence/quarantine.d.ts +48 -0
  754. package/src/testing-evidence/quarantine.js +253 -0
  755. package/src/testing-evidence/quarantine.js.map +1 -0
  756. package/src/testing-evidence/result.d.ts +108 -0
  757. package/src/testing-evidence/result.js +571 -0
  758. package/src/testing-evidence/result.js.map +1 -0
  759. package/src/testing-evidence/runner-adapter.d.ts +51 -0
  760. package/src/testing-evidence/runner-adapter.js +288 -0
  761. package/src/testing-evidence/runner-adapter.js.map +1 -0
  762. package/src/testing-evidence/sensitive-artifacts.d.ts +13 -0
  763. package/src/testing-evidence/sensitive-artifacts.js +93 -0
  764. package/src/testing-evidence/sensitive-artifacts.js.map +1 -0
  765. package/src/work-markers/work-markers.js +4 -3
  766. package/src/work-markers/work-markers.js.map +1 -1
  767. package/src/workload-roles/account-baseline.d.ts +132 -0
  768. package/src/workload-roles/account-baseline.js +743 -0
  769. package/src/workload-roles/account-baseline.js.map +1 -0
  770. package/src/workload-roles/authority.d.ts +38 -0
  771. package/src/workload-roles/authority.js +156 -0
  772. package/src/workload-roles/authority.js.map +1 -0
  773. package/src/workload-roles/aws-adapter.d.ts +99 -0
  774. package/src/workload-roles/aws-adapter.js +416 -0
  775. package/src/workload-roles/aws-adapter.js.map +1 -0
  776. package/src/workload-roles/aws-internal-handler.d.ts +27 -0
  777. package/src/workload-roles/aws-internal-handler.js +58 -0
  778. package/src/workload-roles/aws-internal-handler.js.map +1 -0
  779. package/src/workload-roles/aws-s3-state.d.ts +52 -0
  780. package/src/workload-roles/aws-s3-state.js +164 -0
  781. package/src/workload-roles/aws-s3-state.js.map +1 -0
  782. package/src/workload-roles/aws-sdk-control-plane.d.ts +12 -0
  783. package/src/workload-roles/aws-sdk-control-plane.js +291 -0
  784. package/src/workload-roles/aws-sdk-control-plane.js.map +1 -0
  785. package/src/workload-roles/boundary.d.ts +33 -0
  786. package/src/workload-roles/boundary.js +130 -0
  787. package/src/workload-roles/boundary.js.map +1 -0
  788. package/src/workload-roles/convergence.d.ts +66 -0
  789. package/src/workload-roles/convergence.js +186 -0
  790. package/src/workload-roles/convergence.js.map +1 -0
  791. package/src/workload-roles/effective-policy.d.ts +51 -0
  792. package/src/workload-roles/effective-policy.js +183 -0
  793. package/src/workload-roles/effective-policy.js.map +1 -0
  794. package/src/workload-roles/handler.d.ts +43 -0
  795. package/src/workload-roles/handler.js +130 -0
  796. package/src/workload-roles/handler.js.map +1 -0
  797. package/src/workload-roles/history.d.ts +47 -0
  798. package/src/workload-roles/history.js +324 -0
  799. package/src/workload-roles/history.js.map +1 -0
  800. package/src/workload-roles/index.d.ts +17 -0
  801. package/src/workload-roles/index.js +21 -0
  802. package/src/workload-roles/index.js.map +1 -0
  803. package/src/workload-roles/injection.d.ts +119 -0
  804. package/src/workload-roles/injection.js +495 -0
  805. package/src/workload-roles/injection.js.map +1 -0
  806. package/src/workload-roles/manifest.d.ts +54 -0
  807. package/src/workload-roles/manifest.js +343 -0
  808. package/src/workload-roles/manifest.js.map +1 -0
  809. package/src/workload-roles/provisioner.d.ts +70 -0
  810. package/src/workload-roles/provisioner.js +231 -0
  811. package/src/workload-roles/provisioner.js.map +1 -0
  812. package/src/workload-roles/registration.d.ts +101 -0
  813. package/src/workload-roles/registration.js +457 -0
  814. package/src/workload-roles/registration.js.map +1 -0
  815. package/src/workload-roles/stage-boundary.d.ts +31 -0
  816. package/src/workload-roles/stage-boundary.js +208 -0
  817. package/src/workload-roles/stage-boundary.js.map +1 -0
  818. package/src/workload-roles/standard-slice.d.ts +54 -0
  819. package/src/workload-roles/standard-slice.js +252 -0
  820. package/src/workload-roles/standard-slice.js.map +1 -0
  821. package/migrations/standard-pre-v1-to-v1.md +0 -11
  822. package/src/foundation/aurora-logical-database.d.ts +0 -76
  823. package/src/foundation/aurora-logical-database.js +0 -419
  824. package/src/foundation/aurora-logical-database.js.map +0 -1
@@ -1,529 +1,149 @@
1
1
  "use strict";
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.buildFleetPlan = buildFleetPlan;
4
- exports.probeGatewayTls = probeGatewayTls;
5
- exports.evaluatePortlessGateway = evaluatePortlessGateway;
6
- exports.fleetRestartDelay = fleetRestartDelay;
3
+ exports.fleetExecutorCommand = fleetExecutorCommand;
4
+ exports.fleetExecutorArguments = fleetExecutorArguments;
7
5
  const devkit_1 = require("@nx/devkit");
8
- const node_child_process_1 = require("node:child_process");
9
- const node_crypto_1 = require("node:crypto");
10
- const node_fs_1 = require("node:fs");
11
- const node_path_1 = require("node:path");
12
- const preflight_js_1 = require("../../foundation/preflight.js");
13
- const discovery_js_1 = require("../../foundation/discovery.js");
14
- const contracts_js_1 = require("../../local-dev/contracts.js");
15
- const gateway_js_1 = require("../../local-dev/gateway.js");
16
- const identity_js_1 = require("../../local-dev/identity.js");
17
- const ports_js_1 = require("../../local-dev/ports.js");
18
- const proxy_js_1 = require("../../local-dev/proxy.js");
6
+ const context_discovery_js_1 = require("../../local-dev/context-discovery.js");
7
+ const dev_command_core_js_1 = require("../../local-dev/dev-command-core.js");
8
+ const errors_js_1 = require("../../local-dev/errors.js");
9
+ const fleet_launcher_js_1 = require("../../local-dev/fleet-launcher.js");
10
+ const local_context_js_1 = require("../../local-dev/local-context.js");
11
+ const nx_workspace_js_1 = require("../../local-dev/nx-workspace.js");
12
+ const personal_stage_js_1 = require("../../local-dev/personal-stage.js");
19
13
  const tls_js_1 = require("../../local-dev/tls.js");
20
- const node_tls_1 = require("node:tls");
21
- const dev_doctor_js_1 = require("../dev-doctor/dev-doctor.js");
22
- function parseSelected(input) {
23
- const selected = input
24
- .split(',')
25
- .map((value) => value.trim())
14
+ function normalizedSlices(value) {
15
+ const raw = Array.isArray(value) ? value : value === undefined ? [] : [value];
16
+ const slices = raw
17
+ .flatMap((entry) => entry.split(','))
18
+ .map((entry) => entry.trim())
26
19
  .filter(Boolean);
27
- if (selected.length === 0) {
28
- throw new Error('Fleet --slices must select at least one Product Slice.');
20
+ if (new Set(slices).size !== slices.length) {
21
+ throw new errors_js_1.LocalDevContractError('invalid-input', 'Nx Fleet Slice selection must not contain duplicates.');
29
22
  }
30
- if (new Set(selected).size !== selected.length) {
31
- throw new Error('Fleet --slices must not contain duplicate names.');
23
+ const invalid = slices.find((slice) => !/^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/.test(slice));
24
+ if (invalid) {
25
+ throw new errors_js_1.LocalDevContractError('invalid-input', `Nx Fleet Slice selector ${invalid} is invalid.`);
32
26
  }
33
- return selected;
27
+ return slices;
34
28
  }
35
- function buildFleetPlan(options, context) {
36
- const stage = (0, identity_js_1.requirePersonalFleetStage)(options.stage);
37
- const projects = (context.projectsConfigurations?.projects ?? {});
38
- const selected = parseSelected(options.slices);
39
- for (const name of selected) {
40
- if (!projects[name]?.tags?.includes('type:slice')) {
41
- throw new Error(`Selected fleet project ${name} is not a Product Slice.`);
42
- }
43
- }
44
- const sliceEntries = Object.entries(projects)
45
- .filter(([, project]) => project.tags?.includes('type:slice'))
46
- .filter(([, project]) => project.metadata?.ebk?.localDev !== undefined)
47
- .flatMap(([name, project]) => {
48
- try {
49
- (0, contracts_js_1.validateLocalDevAdapter)(project.metadata?.ebk?.localDev);
50
- return [{ adapter: project.metadata?.ebk?.localDev, name }];
51
- }
52
- catch (error) {
53
- if (selected.includes(name)) {
54
- throw new Error(`Selected Product Slice ${name} has an invalid metadata.ebk.localDev adapter: ${error instanceof Error ? error.message : String(error)}`);
55
- }
56
- return [];
57
- }
58
- });
59
- const adapters = (0, contracts_js_1.validateFleetAdapters)(sliceEntries);
60
- for (const name of selected) {
61
- if (!adapters.has(name)) {
62
- throw new Error(`Selected Product Slice ${name} has no valid metadata.ebk.localDev adapter.`);
63
- }
64
- }
65
- const id = (0, identity_js_1.createFleetId)({
66
- checkoutPath: context.root,
67
- stage,
68
- workspaceName: context.projectName ?? 'workspace',
69
- });
70
- return {
71
- adapters,
72
- hostname: (0, identity_js_1.createFleetHostname)(id, options.hostSuffix),
73
- id,
74
- selected,
75
- stage,
76
- };
29
+ function timeoutMilliseconds(value) {
30
+ if (value === undefined)
31
+ return undefined;
32
+ const match = /^([1-9][0-9]*)(ms|s|m)$/.exec(value);
33
+ if (!match) {
34
+ throw new errors_js_1.LocalDevContractError('invalid-input', 'Nx Fleet timeout must use positive ms, s, or m units.');
35
+ }
36
+ const multiplier = { m: 60_000, ms: 1, s: 1_000 }[match[2]];
37
+ const result = Number(match[1]) * multiplier;
38
+ if (!Number.isSafeInteger(result) || result > 24 * 3_600_000) {
39
+ throw new errors_js_1.LocalDevContractError('invalid-input', 'Nx Fleet timeout is outside its supported range.');
40
+ }
41
+ return result;
77
42
  }
78
- async function developmentRouter(options) {
79
- if (options.developmentRouterUrl?.trim()) {
80
- const url = new URL(options.developmentRouterUrl.trim());
81
- if (url.protocol !== 'https:') {
82
- throw new Error('developmentRouterUrl must use HTTPS.');
83
- }
84
- return url;
85
- }
86
- const reader = (0, preflight_js_1.createFoundationParameterReader)({
87
- profile: options.profile,
88
- region: options.region,
89
- });
90
- const region = await reader.resolveRegion();
91
- const report = await (0, preflight_js_1.evaluateFoundationPreflight)({
92
- consumerStage: options.stage,
93
- foundationStage: 'development',
94
- readParameters: reader.read,
95
- region,
96
- requirement: discovery_js_1.STANDARD_FOUNDATION_REQUIREMENT,
97
- });
98
- if (!report.ok || !report.discovery) {
99
- throw new Error(`Development Foundation preflight failed: ${report.issues.join('; ') || 'discovery unavailable'}`);
43
+ function fleetExecutorCommand(options) {
44
+ const slices = normalizedSlices(options.slices);
45
+ if (options.all === true && slices.length > 0) {
46
+ throw new errors_js_1.LocalDevContractError('invalid-input', 'Nx Fleet execution accepts either all or explicit Slices, not both.');
100
47
  }
101
- const url = new URL(report.discovery.routerUrl);
102
- if (url.protocol !== 'https:') {
103
- throw new Error(`Development Foundation Router ${url.toString()} must use HTTPS.`);
48
+ const foreground = options.foreground !== false;
49
+ const sstMode = options.sstMode ?? 'mono';
50
+ if (sstMode === 'multiplexer' && !foreground) {
51
+ throw new errors_js_1.LocalDevContractError('invalid-input', 'Nx Fleet multiplexer mode requires foreground ownership.');
104
52
  }
105
- return url;
106
- }
107
- function packageVersion() {
108
- const manifest = require('../../../package.json');
109
- return manifest.version ?? '0.0.0';
110
- }
111
- function registrationRequest(options) {
53
+ const timeoutMs = timeoutMilliseconds(options.timeout);
112
54
  return {
113
- action: 'register',
114
- capability: options.capability,
115
- clientFrameworkVersion: packageVersion(),
116
- hostname: options.hostname,
117
- protocol: {
118
- maximum: contracts_js_1.GATEWAY_PROTOCOL_VERSION,
119
- minimum: contracts_js_1.GATEWAY_PROTOCOL_VERSION,
55
+ foreground,
56
+ noWait: options.noWait === true,
57
+ selector: {
58
+ all: options.all === true || slices.length === 0,
59
+ slices,
120
60
  },
121
- proxyPort: options.proxyPort,
122
- sessionId: options.sessionId,
123
- sessionManifestVersion: contracts_js_1.SESSION_MANIFEST_VERSION,
61
+ sstMode,
62
+ ...(timeoutMs === undefined ? {} : { timeoutMs }),
124
63
  };
125
64
  }
126
- async function waitForReadiness(route, signal, onStateChange, timeoutMs = 120_000) {
127
- if (!route.adapter || !route.upstream)
128
- return;
129
- const deadline = Date.now() + timeoutMs;
130
- const target = new URL(route.adapter.healthPath, route.upstream);
131
- while (Date.now() < deadline && !signal.aborted) {
132
- try {
133
- const response = await fetch(target, {
134
- redirect: 'manual',
135
- signal: AbortSignal.timeout(2_000),
136
- });
137
- if (response.ok) {
138
- route.state = 'ready';
139
- onStateChange?.();
140
- return;
141
- }
142
- }
143
- catch {
144
- // The supervised child may still be starting.
145
- }
146
- await new Promise((resolve) => setTimeout(resolve, 500));
147
- }
148
- route.state = 'unavailable';
149
- onStateChange?.();
150
- if (!signal.aborted) {
151
- throw new Error(`${route.name} did not become ready at ${target.toString()} within ${timeoutMs}ms.`);
152
- }
153
- }
154
- async function terminateChild(child) {
155
- if (child.exitCode !== null || child.signalCode !== null)
156
- return;
157
- const exited = new Promise((resolve) => child.once('exit', () => resolve()));
158
- if (process.platform === 'win32' && child.pid) {
159
- const killer = (0, node_child_process_1.spawn)('taskkill', ['/pid', String(child.pid), '/t', '/f'], {
160
- stdio: 'ignore',
161
- windowsHide: true,
162
- });
163
- await new Promise((resolve) => killer.once('exit', () => resolve()));
164
- await Promise.race([
165
- exited,
166
- new Promise((resolve) => setTimeout(resolve, 2_000)),
167
- ]);
168
- return;
169
- }
170
- if (child.pid) {
171
- try {
172
- process.kill(-child.pid, 'SIGTERM');
173
- }
174
- catch {
175
- child.kill('SIGTERM');
176
- }
177
- }
178
- const stopped = await Promise.race([
179
- exited.then(() => true),
180
- new Promise((resolve) => setTimeout(() => resolve(false), 5_000)),
181
- ]);
182
- if (!stopped && child.pid) {
183
- try {
184
- process.kill(-child.pid, 'SIGKILL');
185
- }
186
- catch {
187
- child.kill('SIGKILL');
188
- }
189
- await Promise.race([
190
- exited,
191
- new Promise((resolve) => setTimeout(resolve, 1_000)),
192
- ]);
193
- }
194
- }
195
- async function probeGatewayTls(options) {
196
- await new Promise((resolve, reject) => {
197
- const socket = (0, node_tls_1.connect)({
198
- ca: options.ca,
199
- host: '127.0.0.1',
200
- port: options.port ?? 443,
201
- rejectUnauthorized: true,
202
- servername: options.hostname,
203
- });
204
- let settled = false;
205
- const finish = (error) => {
206
- if (settled)
207
- return;
208
- settled = true;
209
- socket.destroy();
210
- if (error)
211
- reject(error);
212
- else
213
- resolve();
214
- };
215
- socket.setTimeout(options.timeoutMs ?? 2_000, () => finish(new Error('Gateway TLS probe timed out.')));
216
- socket.once('secureConnect', () => finish());
217
- socket.once('error', (error) => finish(error));
218
- });
219
- }
220
- async function evaluatePortlessGateway(options, dependencies = {}) {
221
- if (options.gatewayState?.portless !== true ||
222
- options.gatewayState.schemaVersion !== 1 ||
223
- options.gatewayState.hostSuffix !== options.hostSuffix) {
224
- return { portless: false };
225
- }
226
- const send = dependencies.send ?? gateway_js_1.sendGatewayCommand;
227
- let registered = false;
228
- try {
229
- const status = await send(options.gatewaySocket, { action: 'status', capability: options.capability });
230
- if (status.protocolVersion !== contracts_js_1.GATEWAY_PROTOCOL_VERSION) {
231
- return {
232
- portless: false,
233
- warning: `Machine gateway protocol ${status.protocolVersion} is incompatible with client protocol ${contracts_js_1.GATEWAY_PROTOCOL_VERSION}; using explicit-port HTTPS without replacing the gateway.`,
234
- };
235
- }
236
- await send(options.gatewaySocket, options.registration);
237
- registered = true;
238
- await (dependencies.probe ?? probeGatewayTls)({
239
- ca: options.rootCertificate,
240
- hostname: options.registration.hostname,
241
- });
242
- return { portless: true };
243
- }
244
- catch (error) {
245
- return {
246
- portless: false,
247
- warning: `Portless gateway preflight failed (${error instanceof Error ? error.message : String(error)}); using the explicit-port HTTPS fallback.`,
248
- };
249
- }
250
- finally {
251
- if (registered) {
252
- await send(options.gatewaySocket, {
253
- action: 'unregister',
254
- capability: options.capability,
255
- hostname: options.registration.hostname,
256
- sessionId: options.registration.sessionId,
257
- }).catch(() => undefined);
258
- }
259
- }
260
- }
261
- function fleetRestartDelay(attempt) {
262
- if (!Number.isInteger(attempt) || attempt < 0) {
263
- throw new Error('Fleet restart attempt must be a non-negative integer.');
264
- }
265
- return Math.min(1_000 * 2 ** Math.min(attempt, 5), 30_000);
266
- }
267
- function startSlice(name, adapter, port, origin, stage, context) {
268
- const executable = process.platform === 'win32' ? 'pnpm.cmd' : 'pnpm';
269
- return (0, node_child_process_1.spawn)(executable, [
270
- 'exec',
271
- 'nx',
272
- 'run',
273
- `${name}:${adapter.target}`,
274
- `--stage=${stage}`,
275
- '--foundationStage=development',
276
- ], {
277
- cwd: context.root,
278
- env: {
279
- ...process.env,
280
- [adapter.portEnvironment]: String(port),
281
- EBK_AUTH_CALLBACK_URLS: JSON.stringify(adapter.auth?.callbackPaths?.map((path) => new URL(path, origin).toString()) ?? []),
282
- EBK_AUTH_LOGOUT_URLS: JSON.stringify(adapter.auth?.logoutPaths?.map((path) => new URL(path, origin).toString()) ?? []),
283
- EBK_CONSUMER_STAGE: stage,
284
- EBK_FLEET_ORIGIN: origin.origin,
285
- EBK_FOUNDATION_STAGE: 'development',
286
- EBK_SECURE_COOKIES: 'true',
287
- },
288
- shell: false,
289
- stdio: 'inherit',
290
- windowsHide: true,
291
- ...(process.platform === 'win32' ? {} : { detached: true }),
292
- });
65
+ function fleetExecutorArguments(options) {
66
+ const command = fleetExecutorCommand(options);
67
+ const arguments_ = [
68
+ 'dev',
69
+ 'up',
70
+ ...(command.selector.all ? ['--all'] : command.selector.slices),
71
+ ];
72
+ if (command.foreground)
73
+ arguments_.push('--foreground');
74
+ if (command.noWait)
75
+ arguments_.push('--no-wait');
76
+ if (options.sstMode)
77
+ arguments_.push(`--sst-mode=${command.sstMode}`);
78
+ if (options.timeout)
79
+ arguments_.push(`--timeout=${options.timeout}`);
80
+ return arguments_;
293
81
  }
294
82
  const executor = async (options, context) => {
295
- const children = [];
296
- const controller = new AbortController();
297
- let proxy;
298
- let fallbackGateway;
299
- let heartbeat;
300
- let portless = false;
301
- let registered = false;
302
- let capability;
303
- let plan;
304
- let manifestPath;
305
- let fallbackIpcPath;
306
- const paths = (0, tls_js_1.localTlsPaths)(options.appData);
307
- const cleanup = async () => {
308
- controller.abort();
309
- if (heartbeat)
310
- clearInterval(heartbeat);
311
- if (registered && plan && capability) {
312
- await (0, gateway_js_1.sendGatewayCommand)(paths.gatewaySocket, {
313
- action: 'unregister',
314
- capability,
315
- hostname: plan.hostname,
316
- sessionId: plan.id,
317
- }).catch(() => undefined);
318
- }
319
- for (const child of [...children].reverse())
320
- await terminateChild(child);
321
- await fallbackGateway?.close().catch(() => undefined);
322
- if (fallbackIpcPath && process.platform !== 'win32')
323
- (0, node_fs_1.rmSync)(fallbackIpcPath, { force: true });
324
- await proxy?.close().catch(() => undefined);
325
- if (manifestPath)
326
- (0, node_fs_1.rmSync)(manifestPath, { force: true });
327
- };
83
+ const abort = new AbortController();
84
+ const onSignal = () => abort.abort();
85
+ process.once('SIGINT', onSignal);
86
+ process.once('SIGTERM', onSignal);
328
87
  try {
329
- plan = buildFleetPlan(options, context);
330
- const doctor = await (0, dev_doctor_js_1.inspectLocalDevelopment)({ appData: options.appData, hostname: plan.hostname, stage: plan.stage }, context);
331
- if (doctor.tls !== 'ready' || doctor.trust !== 'ready') {
332
- throw new Error('EBK local HTTPS trust is incomplete. Run dev-doctor, inspect the generated root, and explicitly run dev-setup --trust before fleet development.');
333
- }
334
- for (const required of [
335
- paths.capability,
336
- paths.leafCertificate,
337
- paths.leafKey,
338
- ]) {
339
- try {
340
- (0, node_fs_1.readFileSync)(required);
341
- }
342
- catch {
343
- throw new Error('EBK local TLS state is missing. Run the generated dev-setup target, inspect the root, and explicitly approve trust installation before fleet development.');
344
- }
345
- }
346
- const leaf = new node_crypto_1.X509Certificate((0, node_fs_1.readFileSync)(paths.leafCertificate));
347
- if (!leaf.checkHost(plan.hostname)) {
348
- throw new Error(`EBK local certificate does not cover ${plan.hostname}. Run dev-setup --upgrade --trust with --hostSuffix=${options.hostSuffix ?? 'ebk.localhost'}.`);
349
- }
350
- const remoteOrigin = await developmentRouter(options);
351
- const reserved = new Set();
352
- const proxyPort = await (0, ports_js_1.allocateFleetPort)(`${context.root}:${plan.id}:proxy`, {
353
- reserved,
354
- });
355
- reserved.add(proxyPort);
356
- capability = (0, node_fs_1.readFileSync)(paths.capability, 'utf8').trim();
357
- const registration = registrationRequest({
358
- capability,
359
- hostname: plan.hostname,
360
- proxyPort,
361
- sessionId: plan.id,
362
- });
363
- const gatewayState = (() => {
364
- try {
365
- return JSON.parse((0, node_fs_1.readFileSync)(paths.gatewayState, 'utf8'));
366
- }
367
- catch {
368
- return undefined;
369
- }
370
- })();
371
- const gatewayPreference = await evaluatePortlessGateway({
372
- capability,
373
- gatewaySocket: paths.gatewaySocket,
374
- gatewayState,
375
- hostSuffix: (0, identity_js_1.normalizeFleetHostSuffix)(options.hostSuffix),
376
- registration,
377
- rootCertificate: (0, node_fs_1.readFileSync)(paths.rootCertificate),
378
- });
379
- portless = gatewayPreference.portless;
380
- if (gatewayPreference.warning)
381
- devkit_1.logger.warn(gatewayPreference.warning);
382
- let gatewayPort;
383
- if (!portless) {
384
- gatewayPort = await (0, ports_js_1.allocateFleetPort)(`${context.root}:${plan.id}:gateway`, {
385
- reserved,
386
- });
387
- reserved.add(gatewayPort);
388
- }
389
- const origin = new URL(`https://${plan.hostname}${gatewayPort ? `:${gatewayPort}` : ''}`);
390
- const cache = (0, node_path_1.join)(context.root, '.ebk', 'cache');
391
- (0, node_fs_1.mkdirSync)(cache, { recursive: true });
392
- const routes = [...plan.adapters].map(([name, adapter]) => ({
393
- adapter,
394
- name,
395
- selected: plan?.selected.includes(name) ?? false,
396
- state: plan?.selected.includes(name) ? 'starting' : 'remote',
397
- }));
398
- for (const route of routes.filter(({ selected }) => selected)) {
399
- const port = await (0, ports_js_1.allocateFleetPort)(`${context.root}:${plan.id}:${route.name}`, { reserved });
400
- reserved.add(port);
401
- route.upstream = new URL(`http://127.0.0.1:${port}`);
402
- }
403
- proxy = new proxy_js_1.FleetSessionProxy({
404
- certificateExpires: doctor.certificateExpires ?? leaf.validTo,
405
- consumerStage: plan.stage,
406
- fleetOrigin: origin,
407
- foundationStage: 'development',
408
- remoteOrigin,
409
- routes,
410
- safeMethodFallback: options.safeMethodFallback,
411
- });
412
- await proxy.listen(proxyPort);
413
- if (portless) {
414
- await (0, gateway_js_1.sendGatewayCommand)(paths.gatewaySocket, registration);
415
- registered = true;
416
- proxy.setMode('gateway', 'registered');
417
- heartbeat = setInterval(() => {
418
- void (0, gateway_js_1.sendGatewayCommand)(paths.gatewaySocket, {
419
- action: 'heartbeat',
420
- capability,
421
- hostname: plan?.hostname,
422
- sessionId: plan?.id,
423
- }).catch((error) => devkit_1.logger.warn(`Gateway heartbeat failed: ${String(error)}`));
424
- }, 5_000);
425
- heartbeat.unref();
426
- }
427
- else {
428
- const registry = new gateway_js_1.GatewayRegistry(capability);
429
- registry.register(registration);
430
- fallbackGateway = new gateway_js_1.MachineGateway(registry, {
431
- cert: (0, node_fs_1.readFileSync)(paths.leafCertificate),
432
- key: (0, node_fs_1.readFileSync)(paths.leafKey),
433
- });
434
- fallbackIpcPath = (0, tls_js_1.createLocalIpcPath)((0, node_path_1.join)(context.root, '.ebk', 'cache'), plan.id);
435
- if (process.platform !== 'win32')
436
- (0, node_fs_1.rmSync)(fallbackIpcPath, { force: true });
437
- await fallbackGateway.listen(gatewayPort, fallbackIpcPath);
438
- proxy.setMode('explicit-port', 'standalone');
439
- heartbeat = setInterval(() => {
440
- try {
441
- registry.heartbeat(plan?.hostname ?? '', plan?.id ?? '');
442
- }
443
- catch (error) {
444
- devkit_1.logger.warn(`Explicit-port gateway heartbeat failed: ${String(error)}`);
88
+ const command = fleetExecutorCommand(options);
89
+ const plan = await (0, nx_workspace_js_1.loadWorkspaceFleetPlan)();
90
+ const identity = (0, personal_stage_js_1.createPersonalStageResolver)().resolve();
91
+ const gitCommonDirectory = (0, fleet_launcher_js_1.resolveGitCommonDirectory)(context.root);
92
+ const saved = (0, local_context_js_1.readSavedLocalDevContext)(gitCommonDirectory);
93
+ if (saved.kind === 'invalid') {
94
+ throw new errors_js_1.LocalDevContractError('local-context-invalid', saved.reason);
95
+ }
96
+ const explicit = {
97
+ ...(options.developmentRouterUrl
98
+ ? {
99
+ developmentRouterOverrideOrigin: options.developmentRouterUrl,
445
100
  }
446
- }, 5_000);
447
- heartbeat.unref();
448
- devkit_1.logger.warn(`Machine gateway unavailable; using the HTTPS explicit-port gateway fallback at ${origin.origin}. This does not remediate resolver failures.`);
449
- }
450
- manifestPath = (0, node_path_1.join)(cache, `${plan.id}.json`);
451
- const writeManifest = () => {
452
- if (!manifestPath || !plan)
453
- return;
454
- (0, node_fs_1.writeFileSync)(manifestPath, `${JSON.stringify({
455
- consumerStage: plan.stage,
456
- fleetOrigin: origin.origin,
457
- foundationStage: 'development',
458
- gatewayMode: portless ? 'portless' : 'explicit-port',
459
- hostname: plan.hostname,
460
- routes: routes.map(({ adapter, name, selected, state, upstream }) => ({
461
- name,
462
- routePrefix: adapter?.routePrefix,
463
- selected,
464
- state,
465
- upstream: upstream?.toString(),
466
- })),
467
- schemaVersion: contracts_js_1.SESSION_MANIFEST_VERSION,
468
- }, null, 2)}\n`, { mode: 0o600 });
469
- };
470
- writeManifest();
471
- const restartAttempts = new Map();
472
- const launch = (route) => {
473
- if (controller.signal.aborted)
474
- return;
475
- route.state = 'starting';
476
- writeManifest();
477
- const child = startSlice(route.name, route.adapter, Number(route.upstream?.port), origin, plan?.stage ?? options.stage, context);
478
- children.push(child);
479
- child.once('exit', () => {
480
- const childIndex = children.indexOf(child);
481
- if (childIndex >= 0)
482
- children.splice(childIndex, 1);
483
- if (controller.signal.aborted)
484
- return;
485
- route.state = 'unavailable';
486
- writeManifest();
487
- devkit_1.logger.warn(`${route.name} local process exited; mutating requests now fail closed while the supervisor restarts it.`);
488
- const attempt = restartAttempts.get(route.name) ?? 0;
489
- const delay = fleetRestartDelay(attempt);
490
- restartAttempts.set(route.name, attempt + 1);
491
- setTimeout(() => {
492
- if (controller.signal.aborted)
493
- return;
494
- launch(route);
495
- void waitForReadiness(route, controller.signal, writeManifest)
496
- .then(() => restartAttempts.set(route.name, 0))
497
- .catch((error) => {
498
- route.state = 'unavailable';
499
- writeManifest();
500
- devkit_1.logger.error(String(error));
501
- });
502
- }, delay).unref();
503
- });
101
+ : {}),
102
+ ...(options.hostSuffix ? { hostSuffix: options.hostSuffix } : {}),
103
+ ...(options.maxRestartAttempts === undefined
104
+ ? {}
105
+ : { maxRestartAttempts: options.maxRestartAttempts }),
106
+ ...(options.profile ? { profile: options.profile } : {}),
107
+ ...(options.region ? { region: options.region } : {}),
108
+ ...(options.safeMethodFallback === undefined
109
+ ? {}
110
+ : { safeMethodFallback: options.safeMethodFallback }),
504
111
  };
505
- for (const route of routes.filter(({ selected }) => selected))
506
- launch(route);
507
- await Promise.all(routes
508
- .filter(({ selected }) => selected)
509
- .map((route) => waitForReadiness(route, controller.signal, writeManifest).then(() => restartAttempts.set(route.name, 0))));
510
- devkit_1.logger.info(`EBK fleet ready at ${origin.origin}`);
511
- for (const route of routes) {
512
- devkit_1.logger.info(` ${route.adapter?.routePrefix ?? route.name}: ${route.state} (${route.selected ? route.upstream : remoteOrigin})`);
513
- }
514
- await new Promise((resolve) => {
515
- const stop = () => resolve();
516
- process.once('SIGINT', stop);
517
- process.once('SIGTERM', stop);
112
+ const resolved = saved.kind === 'ready'
113
+ ? (0, local_context_js_1.reconcileSavedLocalDevContext)(saved.resolution.context, explicit)
114
+ : (0, local_context_js_1.resolveInitialLocalDevContext)(explicit, await (0, context_discovery_js_1.discoverLocalDevContext)(explicit, process.env));
115
+ if (saved.kind === 'missing') {
116
+ (0, local_context_js_1.writeSavedLocalDevContext)(gitCommonDirectory, resolved.context);
117
+ }
118
+ const manifest = require('../../../package.json');
119
+ const result = await (0, dev_command_core_js_1.executeFleetUpCore)(command, {
120
+ appData: (0, tls_js_1.defaultLocalDevAppData)(),
121
+ context: resolved.context,
122
+ frameworkVersion: typeof manifest.version === 'string' ? manifest.version : '0.0.0',
123
+ identity,
124
+ plan,
125
+ signal: abort.signal,
126
+ workspaceRoot: context.root,
127
+ }, {
128
+ reportCleanupFailure: (message) => devkit_1.logger.error(message),
518
129
  });
519
- await cleanup();
130
+ devkit_1.logger.info(JSON.stringify({
131
+ attached: result.attached,
132
+ fleetId: result.fleetId,
133
+ operation: result.operation,
134
+ ...(result.slices ? { slices: result.slices } : {}),
135
+ }));
136
+ await result.afterWrite;
520
137
  return { success: true };
521
138
  }
522
139
  catch (error) {
523
- devkit_1.logger.error(`[fleet] ${error instanceof Error ? error.message : String(error)}`);
524
- await cleanup();
140
+ devkit_1.logger.error(error instanceof Error ? error.message : String(error));
525
141
  return { success: false };
526
142
  }
143
+ finally {
144
+ process.removeListener('SIGINT', onSignal);
145
+ process.removeListener('SIGTERM', onSignal);
146
+ }
527
147
  };
528
148
  exports.default = executor;
529
149
  //# sourceMappingURL=fleet.js.map