@fnndsc/stratus 0.0.0 → 0.2.0

package/dist/domain/teardown.js

@@ -0,0 +1,48 @@
+/** The CSI driver whose volumes are the cloud's block volumes. */
+export const OCI_BLOCK_DRIVER = 'blockvolume.csi.oraclecloud.com';
+/**
+ * The block volumes a cluster's claims hold, from its PersistentVolumes.
+ *
+ * @param kube - The cluster.
+ * @returns The volumes' ids.
+ */
+export async function clusterVolumes_read(kube) {
+    const answer = await kube.json_get('/api/v1/persistentvolumes');
+    return (answer.items ?? [])
+        .filter((volume) => volume.spec?.csi?.driver === OCI_BLOCK_DRIVER && typeof volume.spec.csi.volumeHandle === 'string')
+        .map((volume) => volume.spec?.csi?.volumeHandle);
+}
+/**
+ * The job that tears a domain down.
+ *
+ * @param store - The domains.
+ * @param builder - The cloud's build half.
+ * @param installer - The installer, or null when none is reachable.
+ * @param name - The domain.
+ * @param volumeIds - The cluster's own volumes, read before.
+ * @returns The job's work.
+ */
+export function teardownRun_make(store, builder, installer, name, volumeIds) {
+    return async (context) => {
+        const record = store.record_read(name);
+        if (record === null)
+            throw new Error(`${name}: no such domain`);
+        if (builder.teardown_run === undefined)
+            throw new Error(`${builder.id}: this cloud cannot tear a domain down`);
+        const gone = await builder.teardown_run({
+            domain: name, region: record.region, compartmentId: record.compartmentId ?? '', baseDomain: record.baseDomain, volumeIds,
+            ...(record.ids['stackRef'] !== undefined ? { stackRef: record.ids['stackRef'] } : {}),
+            ...(record.ids['isoObject'] !== undefined ? { isoObject: record.ids['isoObject'] } : {}),
+            ...(record.ids['isoLinkId'] !== undefined ? { isoLinkId: record.ids['isoLinkId'] } : {}),
+        }, { log: (line) => context.log_write(line), signal: context.signal });
+        if (context.signal.aborted)
+            return;
+        if (installer !== null && record.ids['clusterId'] !== undefined && record.ids['infraEnvId'] !== undefined) {
+            await installer.cluster_delete({ clusterId: record.ids['clusterId'], infraEnvId: record.ids['infraEnvId'] });
+            gone.push('the installer\'s cluster and infra-env');
+        }
+        store.record_update(name, (current) => { current.gone = new Date().toISOString(); });
+        context.log_write(`gone: ${gone.join('; ')}`);
+    };
+}
+//# sourceMappingURL=teardown.js.map

package/dist/domain/teardown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"teardown.js","sourceRoot":"","sources":["../../src/domain/teardown.ts"],"names":[],"mappings":"AAmBA,kEAAkE;AAClE,MAAM,CAAC,MAAM,gBAAgB,GAAW,iCAAiC,CAAC;AAE1E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAa;IACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,2BAA2B,CAAuF,CAAC;IACtJ,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;SACxB,MAAM,CAAC,CAAC,MAAM,EAAW,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,KAAK,gBAAgB,IAAI,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,KAAK,QAAQ,CAAC;SAC9H,GAAG,CAAC,CAAC,MAAM,EAAU,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,YAAsB,CAAC,CAAC;AACvE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAkB,EAAE,OAAqB,EAAE,SAA2B,EAAE,IAAY,EAAE,SAAgC;IACrJ,OAAO,KAAK,EAAE,OAAmB,EAAiB,EAAE;QAClD,MAAM,MAAM,GAAwB,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAI,MAAM,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,kBAAkB,CAAC,CAAC;QAChE,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,EAAE,wCAAwC,CAAC,CAAC;QAC/G,MAAM,IAAI,GAAa,MAAM,OAAO,CAAC,YAAY,CAAC;YAChD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS;YACxH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzF,EAAE,EAAE,GAAG,EAAE,CAAC,IAAY,EAAQ,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACrF,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QACnC,IAAI,SAAS,KAAK,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,SAAS,EAAE,CAAC;YAC1G,MAAM,SAAS,CAAC,cAAc,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YAC7G,IAAI,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QACtD,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,OAAqB,EAAQ,EAAE,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzG,OAAO,CAAC,SAAS,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC;AACJ,CAAC"}

package/dist/domain/verify.d.ts

@@ -0,0 +1,68 @@
+/**
+ * @file `verify`: a domain's cluster is healthy and does what ChRIS needs,
+ * by `harbor-oci`'s ten checks, through the Kubernetes API and DNS rather
+ * than `oc` and `dig` (docs/stratus.adoc, D3, D7).
+ *
+ * Nine checks only read. The block-volume probe writes (a namespace with a
+ * 50 GiB claim and a pod, deleted again), so it runs only under the `tasks`
+ * tier and, without it, says so by name instead (decided 2026-10-22). Each
+ * check is independent: a failure is a failed check, never the end of the
+ * rest.
+ *
+ * @module
+ */
+import type { KubeApi } from '../cluster/kube.js';
+/** The storage class ChRIS's claims use. */
+export declare const STORAGE_CLASS: string;
+/** The cores one ChRIS plugin job asks for. */
+export declare const PLUGIN_CPU_CORES: number;
+/** The namespace the volume probe makes and deletes. */
+export declare const PROBE_NAMESPACE: string;
+/** One check's answer. */
+export interface VerifyCheck {
+    readonly name: string;
+    /** True passed, false failed, null not run. */
+    readonly ok: boolean | null;
+    readonly detail: string;
+    /** Whether it only reads, or writes. */
+    readonly how: 'reads' | 'writes';
+}
+/** What every check reads. */
+export interface VerifyContext {
+    readonly kube: KubeApi;
+    /** The addresses a name has, from a public resolver. */
+    readonly resolve: (name: string) => Promise<string[]>;
+    /** The status a URL answers with, trusting a CA. */
+    readonly https_status: (url: string, ca: string | null) => Promise<number>;
+    /** The cluster's name and DNS zone. */
+    readonly domain: string;
+    readonly baseDomain: string;
+    /** The shape every node should be, or null when not known. */
+    readonly shape: string | null;
+    readonly expectedNodes: number;
+    /** The load balancers' addresses the build recorded. */
+    readonly addresses: {
+        readonly api?: string;
+        readonly apiInt?: string;
+        readonly apps?: string;
+    };
+    /** Whether the probe may write (the `tasks` tier). */
+    readonly probe: boolean;
+    readonly probeTimeoutMs: number;
+    readonly pollMs: number;
+    readonly signal?: AbortSignal;
+}
+/**
+ * A CPU quantity in cores: `500m` is a half, `2` is two.
+ *
+ * @param quantity - The quantity.
+ * @returns Cores.
+ */
+export declare function cpuQuantity_parse(quantity: string): number;
+/**
+ * Runs every check, in order.
+ *
+ * @param context - What they read.
+ * @returns Each check's answer.
+ */
+export declare function verify_run(context: VerifyContext): Promise<VerifyCheck[]>;

package/dist/domain/verify.js

@@ -0,0 +1,216 @@
+/** The storage class ChRIS's claims use. */
+export const STORAGE_CLASS = 'oci-bv';
+/** The annotation that makes a storage class the default. */
+const DEFAULT_CLASS_ANNOTATION = 'storageclass.kubernetes.io/is-default-class';
+/** The cores one ChRIS plugin job asks for. */
+export const PLUGIN_CPU_CORES = 2;
+/** The namespace the volume probe makes and deletes. */
+export const PROBE_NAMESPACE = 'stratus-verify';
+/** What the probe writes and reads back. */
+const PROBE_TEXT = 'stratus';
+/**
+ * A resource's conditions, by type.
+ *
+ * @param conditions - Its conditions.
+ * @returns Type to status.
+ */
+function conditions_of(conditions) {
+    return Object.fromEntries((conditions ?? []).map((condition) => [condition.type, condition.status]));
+}
+/**
+ * A CPU quantity in cores: `500m` is a half, `2` is two.
+ *
+ * @param quantity - The quantity.
+ * @returns Cores.
+ */
+export function cpuQuantity_parse(quantity) {
+    return quantity.endsWith('m') ? Number(quantity.slice(0, -1)) / 1000 : Number(quantity);
+}
+/**
+ * Waits, unless stopped.
+ *
+ * @param ms - How long.
+ * @param signal - Stops it.
+ */
+function wait(ms, signal) {
+    if (ms <= 0 || signal?.aborted === true)
+        return Promise.resolve();
+    return new Promise((resolve) => {
+        const timer = setTimeout(resolve, ms);
+        signal?.addEventListener('abort', () => { clearTimeout(timer); resolve(); }, { once: true });
+    });
+}
+/** The checks, in `harbor-oci`'s order. */
+const CHECKS = [
+    {
+        name: 'API', how: 'reads',
+        run: async (context) => {
+            const answer = (await context.kube.text_get('/readyz')).trim();
+            return { ok: answer === 'ok', detail: `/readyz ${answer}` };
+        },
+    },
+    {
+        name: 'cluster version', how: 'reads',
+        run: async (context) => {
+            const version = await context.kube.json_get('/apis/config.openshift.io/v1/clusterversions/version');
+            const conditions = conditions_of(version.status?.conditions);
+            return { ok: conditions['Available'] === 'True' && conditions['Failing'] !== 'True', detail: `${version.status?.desired?.version ?? '?'}, Available=${conditions['Available'] ?? '?'}` };
+        },
+    },
+    {
+        name: 'nodes', how: 'reads',
+        run: async (context) => {
+            const nodes = (await context.kube.json_get('/api/v1/nodes')).items ?? [];
+            const ready = nodes.filter((node) => conditions_of(node.status?.conditions)['Ready'] === 'True').length;
+            return { ok: nodes.length === context.expectedNodes && ready === context.expectedNodes, detail: `${ready}/${context.expectedNodes} Ready` };
+        },
+    },
+    {
+        name: 'OCI CCM', how: 'reads',
+        run: async (context) => {
+            const nodes = (await context.kube.json_get('/api/v1/nodes')).items ?? [];
+            const problems = [];
+            const zones = new Set();
+            for (const node of nodes) {
+                const labels = node.metadata.labels ?? {};
+                if (!(node.spec?.providerID ?? '').startsWith('oci://'))
+                    problems.push(`${node.metadata.name} has no oci:// providerID`);
+                if (context.shape !== null && labels['node.kubernetes.io/instance-type'] !== context.shape)
+                    problems.push(`${node.metadata.name} is ${labels['node.kubernetes.io/instance-type'] ?? '?'}`);
+                zones.add(labels['topology.kubernetes.io/zone'] ?? '?');
+            }
+            return { ok: problems.length === 0, detail: problems.length > 0 ? problems.join('; ') : `${nodes.length} nodes over ${zones.size} zones, providerIDs set` };
+        },
+    },
+    {
+        name: 'operators', how: 'reads',
+        run: async (context) => {
+            const operators = (await context.kube.json_get('/apis/config.openshift.io/v1/clusteroperators')).items ?? [];
+            const unhealthy = operators.filter((operator) => {
+                const conditions = conditions_of(operator.status?.conditions);
+                return conditions['Available'] !== 'True' || conditions['Progressing'] !== 'False' || conditions['Degraded'] !== 'False';
+            }).map((operator) => operator.metadata.name);
+            return { ok: unhealthy.length === 0, detail: `${operators.length} operators, ${unhealthy.length === 0 ? 'all available, none degraded' : `not settled: ${unhealthy.join(', ')}`}` };
+        },
+    },
+    {
+        name: 'storage class', how: 'reads',
+        run: async (context) => {
+            const classes = (await context.kube.json_get('/apis/storage.k8s.io/v1/storageclasses')).items ?? [];
+            const defaults = classes.filter((entry) => entry.metadata.annotations?.[DEFAULT_CLASS_ANNOTATION] === 'true').map((entry) => entry.metadata.name);
+            return { ok: defaults.length === 1 && defaults[0] === STORAGE_CLASS, detail: `default: ${defaults.join(', ') || 'none'}` };
+        },
+    },
+    {
+        name: 'DNS', how: 'reads',
+        run: async (context) => {
+            const cluster = `${context.domain}.${context.baseDomain}`;
+            const wanted = [
+                [`api.${cluster}`, `api.${cluster}`, context.addresses.api],
+                [`api-int.${cluster}`, `api-int.${cluster}`, context.addresses.apiInt],
+                [`*.apps.${cluster}`, `verify.apps.${cluster}`, context.addresses.apps],
+            ];
+            const problems = [];
+            for (const [label, name, address] of wanted) {
+                if (address === undefined) {
+                    problems.push(`${label}: no address recorded`);
+                    continue;
+                }
+                const answer = await context.resolve(name).catch(() => []);
+                if (!answer.includes(address))
+                    problems.push(`${label} -> ${answer.join(' ') || 'nothing'} (wanted ${address})`);
+            }
+            return { ok: problems.length === 0, detail: problems.join('; ') || '3 records answer from a public resolver' };
+        },
+    },
+    {
+        name: 'console', how: 'reads',
+        run: async (context) => {
+            const secret = await context.kube.json_get('/api/v1/namespaces/openshift-ingress-operator/secrets/router-ca');
+            const ca = secret.data?.['tls.crt'] === undefined ? null : Buffer.from(secret.data['tls.crt'], 'base64').toString('utf-8');
+            const url = `https://console-openshift-console.apps.${context.domain}.${context.baseDomain}/`;
+            const status = await context.https_status(url, ca);
+            return { ok: status === 200, detail: `${url} HTTP ${status}` };
+        },
+    },
+    {
+        name: 'CPU headroom', how: 'reads',
+        run: async (context) => {
+            const nodes = (await context.kube.json_get('/api/v1/nodes')).items ?? [];
+            const pods = (await context.kube.json_get('/api/v1/pods')).items ?? [];
+            const requested = new Map();
+            for (const pod of pods) {
+                if (pod.status?.phase === 'Succeeded' || pod.status?.phase === 'Failed' || pod.spec?.nodeName === undefined)
+                    continue;
+                for (const container of pod.spec.containers ?? []) {
+                    const cpu = container.resources?.requests?.cpu;
+                    if (cpu !== undefined)
+                        requested.set(pod.spec.nodeName, (requested.get(pod.spec.nodeName) ?? 0) + cpuQuantity_parse(cpu));
+                }
+            }
+            const free = nodes.map((node) => cpuQuantity_parse(node.status?.allocatable?.cpu ?? '0') - (requested.get(node.metadata.name) ?? 0));
+            return { ok: Math.max(0, ...free) >= PLUGIN_CPU_CORES, detail: `unrequested cores: ${free.map((cores) => cores.toFixed(1)).join(' / ')} (a plugin job asks ${PLUGIN_CPU_CORES})` };
+        },
+    },
+    {
+        name: 'block volume', how: 'writes',
+        run: async (context) => {
+            if (!context.probe)
+                return { ok: null, detail: `not run: it makes a 50 GiB ${STORAGE_CLASS} claim and a pod, which needs the tasks tier` };
+            const ns = `/api/v1/namespaces/${PROBE_NAMESPACE}`;
+            await context.kube.delete(ns).catch(() => undefined);
+            await context.kube.json_post('/api/v1/namespaces', { apiVersion: 'v1', kind: 'Namespace', metadata: { name: PROBE_NAMESPACE } });
+            const started = Date.now();
+            let phase = '';
+            let output = '';
+            try {
+                await context.kube.json_post(`${ns}/persistentvolumeclaims`, { apiVersion: 'v1', kind: 'PersistentVolumeClaim', metadata: { name: 'probe' }, spec: { accessModes: ['ReadWriteOnce'], resources: { requests: { storage: '50Gi' } } } });
+                await context.kube.json_post(`${ns}/pods`, {
+                    apiVersion: 'v1', kind: 'Pod', metadata: { name: 'probe' },
+                    spec: {
+                        restartPolicy: 'Never',
+                        containers: [{
+                                name: 'probe', image: 'registry.access.redhat.com/ubi9/ubi-minimal',
+                                command: ['sh', '-c', `echo ${PROBE_TEXT} > /data/probe && cat /data/probe`],
+                                volumeMounts: [{ name: 'data', mountPath: '/data' }],
+                                securityContext: { allowPrivilegeEscalation: false, capabilities: { drop: ['ALL'] }, runAsNonRoot: true, seccompProfile: { type: 'RuntimeDefault' } },
+                            }],
+                        volumes: [{ name: 'data', persistentVolumeClaim: { claimName: 'probe' } }],
+                    },
+                });
+                while (Date.now() - started < context.probeTimeoutMs && context.signal?.aborted !== true) {
+                    phase = (await context.kube.json_get(`${ns}/pods/probe`)).status?.phase ?? '';
+                    if (phase === 'Succeeded' || phase === 'Failed')
+                        break;
+                    await wait(context.pollMs, context.signal);
+                }
+                if (phase === 'Succeeded')
+                    output = (await context.kube.text_get(`${ns}/pods/probe/log`)).trim();
+            }
+            finally {
+                await context.kube.delete(ns).catch(() => undefined);
+            }
+            return { ok: phase === 'Succeeded' && output === PROBE_TEXT, detail: `50Gi ${STORAGE_CLASS} pod ${phase || 'timed out'}, read back '${output}', ${Math.round((Date.now() - started) / 1000)}s` };
+        },
+    },
+];
+/**
+ * Runs every check, in order.
+ *
+ * @param context - What they read.
+ * @returns Each check's answer.
+ */
+export async function verify_run(context) {
+    const results = [];
+    for (const check of CHECKS) {
+        try {
+            const answer = await check.run(context);
+            results.push({ name: check.name, how: check.how, ...answer });
+        }
+        catch (error) {
+            results.push({ name: check.name, how: check.how, ok: false, detail: error instanceof Error ? error.message : String(error) });
+        }
+    }
+    return results;
+}
+//# sourceMappingURL=verify.js.map

package/dist/domain/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/domain/verify.ts"],"names":[],"mappings":"AAeA,4CAA4C;AAC5C,MAAM,CAAC,MAAM,aAAa,GAAW,QAAQ,CAAC;AAE9C,6DAA6D;AAC7D,MAAM,wBAAwB,GAAW,6CAA6C,CAAC;AAEvF,+CAA+C;AAC/C,MAAM,CAAC,MAAM,gBAAgB,GAAW,CAAC,CAAC;AAE1C,wDAAwD;AACxD,MAAM,CAAC,MAAM,eAAe,GAAW,gBAAgB,CAAC;AAExD,4CAA4C;AAC5C,MAAM,UAAU,GAAW,SAAS,CAAC;AA+CrC;;;;;GAKG;AACH,SAAS,aAAa,CAAC,UAAmC;IACxD,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAoB,EAAoB,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACpI,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;GAKG;AACH,SAAS,IAAI,CAAC,EAAU,EAAE,MAAoB;IAC5C,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAClE,OAAO,IAAI,OAAO,CAAO,CAAC,OAAmB,EAAQ,EAAE;QACrD,MAAM,KAAK,GAAkC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACrE,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,GAAS,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2CAA2C;AAC3C,MAAM,MAAM,GAA+I;IACzJ;QACE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO;QACzB,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACrB,MAAM,MAAM,GAAW,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACvE,OAAO,EAAE,EAAE,EAAE,MAAM,KAAK,IAAI,EAAE,MAAM,EAAE,WAAW,MAAM,EAAE,EAAE,CAAC;QAC9D,CAAC;KACF;IACD;QACE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,OAAO;QACrC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACrB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,sDAAsD,CAA8E,CAAC;YACjL,MAAM,UAAU,GAA2B,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YACrF,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,WAAW,CAAC,KAAK,MAAM,IAAI,UAAU,CAAC,SAAS,CAAC,KAAK,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,IAAI,GAAG,eAAe,UAAU,CAAC,WAAW,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC;QAC3L,CAAC;KACF;IACD;QACE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO;QAC3B,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACrB,MAAM,KAAK,GAAe,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAwB,CAAA,CAAC,KAAK,IAAI,EAAE,CAAC;YAC3G,MAAM,KAAK,GAAW,KAAK,CAAC,MAAM,CAAC,CAAC,IAAc,EAAW,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;YACnI,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,aAAa,IAAI,KAAK,KAAK,OAAO,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,KAAK,IAAI,OAAO,CAAC,aAAa,QAAQ,EAAE,CAAC;QAC9I,CAAC;KACF;IACD;QACE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO;QAC7B,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACrB,MAAM,KAAK,GAAe,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAwB,CAAA,CAAC,KAAK,IAAI,EAAE,CAAC;YAC3G,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAgB,IAAI,GAAG,EAAE,CAAC;YACrC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,MAAM,GAA2B,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;gBAClE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,2BAA2B,CAAC,CAAC;gBACzH,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,kCAAkC,CAAC,KAAK,OAAO,CAAC,KAAK;oBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,OAAO,MAAM,CAAC,kCAAkC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;gBAC3L,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,6BAA6B,CAAC,IAAI,GAAG,CAAC,CAAC;YAC1D,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,eAAe,KAAK,CAAC,IAAI,yBAAyB,EAAE,CAAC;QAC9J,CAAC;KACF;IACD;QACE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO;QAC/B,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACrB,MAAM,SAAS,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,+CAA+C,CAAqF,CAAA,CAAC,KAAK,IAAI,EAAE,CAAC;YAChM,MAAM,SAAS,GAAa,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAW,EAAE;gBACjE,MAAM,UAAU,GAA2B,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;gBACtF,OAAO,UAAU,CAAC,WAAW,CAAC,KAAK,MAAM,IAAI,UAAU,CAAC,aAAa,CAAC,KAAK,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC;YAC3H,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAU,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACrD,OAAO,EAAE,EAAE,EAAE,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,eAAe,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,gBAAgB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;QACtL,CAAC;KACF;IACD;QACE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,OAAO;QACnC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACrB,MAAM,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,wCAAwC,CAAoF,CAAA,CAAC,KAAK,IAAI,EAAE,CAAC;YACtL,MAAM,QAAQ,GAAa,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAW,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,wBAAwB,CAAC,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAU,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC7K,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,aAAa,EAAE,MAAM,EAAE,YAAY,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE,EAAE,CAAC;QAC7H,CAAC;KACF;IACD;QACE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO;QACzB,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACrB,MAAM,OAAO,GAAW,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YAClE,MAAM,MAAM,GAAgD;gBAC1D,CAAC,OAAO,OAAO,EAAE,EAAE,OAAO,OAAO,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC;gBAC3D,CAAC,WAAW,OAAO,EAAE,EAAE,WAAW,OAAO,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC;gBACtE,CAAC,UAAU,OAAO,EAAE,EAAE,eAAe,OAAO,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC;aACxE,CAAC;YACF,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,EAAE,CAAC;gBAC5C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,uBAAuB,CAAC,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBACxF,MAAM,MAAM,GAAa,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAa,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC/E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,YAAY,OAAO,GAAG,CAAC,CAAC;YACnH,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,yCAAyC,EAAE,CAAC;QACjH,CAAC;KACF;IACD;QACE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO;QAC7B,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACrB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,iEAAiE,CAAsC,CAAC;YACnJ,MAAM,EAAE,GAAkB,MAAM,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC1I,MAAM,GAAG,GAAW,0CAA0C,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,UAAU,GAAG,CAAC;YACtG,MAAM,MAAM,GAAW,MAAM,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC3D,OAAO,EAAE,EAAE,EAAE,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,GAAG,GAAG,SAAS,MAAM,EAAE,EAAE,CAAC;QACjE,CAAC;KACF;IACD;QACE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,OAAO;QAClC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACrB,MAAM,KAAK,GAAe,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAwB,CAAA,CAAC,KAAK,IAAI,EAAE,CAAC;YAC3G,MAAM,IAAI,GAAc,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAuB,CAAA,CAAC,KAAK,IAAI,EAAE,CAAC;YACvG,MAAM,SAAS,GAAwB,IAAI,GAAG,EAAE,CAAC;YACjD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,GAAG,CAAC,MAAM,EAAE,KAAK,KAAK,WAAW,IAAI,GAAG,CAAC,MAAM,EAAE,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,QAAQ,KAAK,SAAS;oBAAE,SAAS;gBACtH,KAAK,MAAM,SAAS,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;oBAClD,MAAM,GAAG,GAAuB,SAAS,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC;oBACnE,IAAI,GAAG,KAAK,SAAS;wBAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC5H,CAAC;YACH,CAAC;YACD,MAAM,IAAI,GAAa,KAAK,CAAC,GAAG,CAAC,CAAC,IAAc,EAAU,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjK,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,gBAAgB,EAAE,MAAM,EAAE,sBAAsB,IAAI,CAAC,GAAG,CAAC,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,uBAAuB,gBAAgB,GAAG,EAAE,CAAC;QACrM,CAAC;KACF;IACD;QACE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,QAAQ;QACnC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACrB,IAAI,CAAC,OAAO,CAAC,KAAK;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,8BAA8B,aAAa,8CAA8C,EAAE,CAAC;YAC3I,MAAM,EAAE,GAAW,sBAAsB,eAAe,EAAE,CAAC;YAC3D,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAS,EAAE,CAAC,SAAS,CAAC,CAAC;YAC3D,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;YACjI,MAAM,OAAO,GAAW,IAAI,CAAC,GAAG,EAAE,CAAC;YACnC,IAAI,KAAK,GAAW,EAAE,CAAC;YACvB,IAAI,MAAM,GAAW,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,yBAAyB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC,eAAe,CAAC,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;gBACvO,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE;oBACzC,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;oBAC1D,IAAI,EAAE;wBACJ,aAAa,EAAE,OAAO;wBACtB,UAAU,EAAE,CAAC;gCACX,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,6CAA6C;gCACnE,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,UAAU,mCAAmC,CAAC;gCAC5E,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;gCACpD,eAAe,EAAE,EAAE,wBAAwB,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE;6BACtJ,CAAC;wBACF,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC;qBAC3E;iBACF,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;oBACzF,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAa,CAAA,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC;oBACzF,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,QAAQ;wBAAE,MAAM;oBACvD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC7C,CAAC;gBACD,IAAI,KAAK,KAAK,WAAW;oBAAE,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACnG,CAAC;oBAAS,CAAC;gBACT,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAS,EAAE,CAAC,SAAS,CAAC,CAAC;YAC7D,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,KAAK,KAAK,WAAW,IAAI,MAAM,KAAK,UAAU,EAAE,MAAM,EAAE,QAAQ,aAAa,QAAQ,KAAK,IAAI,WAAW,gBAAgB,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACnM,CAAC;KACF;CACF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAsB;IACrD,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChI,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/domain/view.d.ts

@@ -0,0 +1,24 @@
+/**
+ * @file A domain this daemon builds, seen as every domain is seen: the same
+ * shape the tree, `domain status` and the DOMAINS tile read for a domain
+ * read from a `harbor-oci` checkout, from its own state on the host.
+ *
+ * @module
+ */
+import type { HarborDomain, StepState } from '../domains/harborOci.js';
+import type { DomainRecord, DomainStore } from './state.js';
+/**
+ * A built domain's steps, numbered in build order.
+ *
+ * @param record - Its state.
+ * @returns Every step, with its state and what it rests on.
+ */
+export declare function builtSteps_of(record: DomainRecord): StepState[];
+/**
+ * A built domain, read now.
+ *
+ * @param store - The domains this daemon builds.
+ * @param name - The domain.
+ * @returns It, or null when none of that name is kept.
+ */
+export declare function builtDomain_read(store: DomainStore, name: string): HarborDomain | null;

package/dist/domain/view.js

@@ -0,0 +1,38 @@
+import { BUILD_STEPS, STEPS_WRITTEN } from './steps.js';
+/**
+ * A built domain's steps, numbered in build order.
+ *
+ * @param record - Its state.
+ * @returns Every step, with its state and what it rests on.
+ */
+export function builtSteps_of(record) {
+    return BUILD_STEPS.map((step, index) => {
+        const kept = record.steps[step];
+        const evidence = kept?.note ?? (STEPS_WRITTEN.includes(step) ? 'not run yet' : 'not a step this session has yet');
+        return { folder: `${String(index + 1).padStart(2, '0')}-${step}`, name: step, state: kept?.state ?? 'not done', evidence };
+    });
+}
+/**
+ * A built domain, read now.
+ *
+ * @param store - The domains this daemon builds.
+ * @param name - The domain.
+ * @returns It, or null when none of that name is kept.
+ */
+export function builtDomain_read(store, name) {
+    const record = store.record_read(name);
+    if (record === null)
+        return null;
+    return {
+        name,
+        root: store.folder_of(name),
+        spec: store.spec_read(name)?.text ?? null,
+        settings: { CLUSTER_NAME: name, BASE_DOMAIN: record.baseDomain, OCI_REGION: record.region, ...(record.compartmentId !== undefined ? { OCI_COMPARTMENT_OCID: record.compartmentId } : {}) },
+        state: { ...record },
+        steps: builtSteps_of(record),
+        secrets: store.secrets_list(name),
+        cluster: `${name}.${record.baseDomain}`,
+        origin: 'built',
+    };
+}
+//# sourceMappingURL=view.js.map

package/dist/domain/view.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"view.js","sourceRoot":"","sources":["../../src/domain/view.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAGxD;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,MAAoB;IAChD,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAY,EAAE,KAAa,EAAa,EAAE;QAChE,MAAM,IAAI,GAA2B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAW,IAAI,EAAE,IAAI,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC;QAC1H,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,UAAU,EAAE,QAAQ,EAAE,CAAC;IAC7H,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAkB,EAAE,IAAY;IAC/D,MAAM,MAAM,GAAwB,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3B,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI;QACzC,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QAC1L,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE;QACpB,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC;QAC5B,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC;QACjC,OAAO,EAAE,GAAG,IAAI,IAAI,MAAM,CAAC,UAAU,EAAE;QACvC,MAAM,EAAE,OAAO;KAChB,CAAC;AACJ,CAAC"}

package/dist/domains/harborOci.d.ts

@@ -0,0 +1,75 @@
+/** The build's steps, in the order `just install` runs them. */
+export declare const HARBOR_STEPS: ReadonlyArray<string>;
+/** Where one step stands. */
+export interface StepState {
+    /** Its folder name, numbered in build order (`05-infra-apply`). */
+    readonly folder: string;
+    readonly name: string;
+    /** `done`, `not done`, `expired`, or `unknown` when the host keeps nothing to tell. */
+    readonly state: string;
+    /** What the state rests on, in a line. */
+    readonly evidence: string;
+}
+/** A secret the domain holds on the host. */
+export interface DomainSecret {
+    readonly name: string;
+    /** Where it is on the host; the only thing about it a surface is told. */
+    readonly hostPath: string;
+}
+/** A domain read from a `harbor-oci` checkout. */
+export interface HarborDomain {
+    readonly name: string;
+    /** The checkout. */
+    readonly root: string;
+    /** `spec.yaml` as written, or null when there is none. */
+    readonly spec: string | null;
+    /** The shown settings, by key. */
+    readonly settings: Readonly<Record<string, string>>;
+    /** `state/harbor.json` with its secrets withheld, or null when there is none. */
+    readonly state: Readonly<Record<string, unknown>> | null;
+    /** Every step, in build order. */
+    readonly steps: ReadonlyArray<StepState>;
+    /** The credential files in `state/auth/`. */
+    readonly secrets: ReadonlyArray<DomainSecret>;
+    /** The cluster's DNS name, `<CLUSTER_NAME>.<BASE_DOMAIN>`, or null. */
+    readonly cluster: string | null;
+    /** Where it comes from: a `harbor-oci` checkout read, or built by this daemon (absent: a checkout). */
+    readonly origin?: 'checkout' | 'built';
+}
+/** Where a domain is read from: its name and its checkout. */
+export interface DomainSource {
+    readonly name: string;
+    readonly root: string;
+}
+/**
+ * Reads `KEY=value` lines; comments, blanks and quotes handled as a shell
+ * `.env` writes them.
+ *
+ * @param text - The file's text.
+ * @returns The values, by key.
+ */
+export declare function envFile_parse(text: string): Record<string, string>;
+/**
+ * Where each step stands, from the evidence the checkout keeps.
+ *
+ * @param root - The checkout.
+ * @param state - The state document as read (secrets withheld does not matter here).
+ * @param now - The clock.
+ * @returns One state per step, in build order.
+ */
+export declare function steps_read(root: string, state: Readonly<Record<string, unknown>> | null, now?: Date): StepState[];
+/**
+ * Reads a domain from its checkout.
+ *
+ * @param source - The domain's name and checkout.
+ * @param now - The clock, for the ISO link's expiry.
+ * @returns The domain.
+ */
+export declare function harborDomain_read(source: DomainSource, now?: Date): HarborDomain;
+/**
+ * The step a domain last finished, in build order; null when none is done.
+ *
+ * @param domain - The domain.
+ * @returns The step.
+ */
+export declare function lastDone_of(domain: HarborDomain): StepState | null;