@fnndsc/stratus 0.1.0 → 0.2.0

package/dist/commands/capacity.d.ts

@@ -0,0 +1,37 @@
+import { type CapacityRow, type CommandEnvelope } from '@fnndsc/menu';
+import type { CommandHelp } from '@fnndsc/brasa/core';
+import type { CloudDriver } from '../cloud/driver.js';
+import type { DomainTree } from '../vfs/domains.js';
+/** What `capacity` reads from the session. */
+export interface CapacityCommandContext {
+    readonly domains: DomainTree;
+    readonly driver: CloudDriver;
+    /** The session's region, or null when not connected. */
+    readonly region: () => string | null;
+}
+/**
+ * The shape family a spec names (`family: E5`), or null.
+ *
+ * @param spec - The spec's text.
+ * @returns The family.
+ */
+export declare function specFamily_of(spec: string | null): string | null;
+/**
+ * The capacity rows for families in a region.
+ *
+ * @param driver - The cloud.
+ * @param region - The region.
+ * @param families - The families.
+ * @returns One row per limit and zone, family by family.
+ */
+export declare function capacityRows_read(driver: CloudDriver, region: string, families: ReadonlyArray<string>): Promise<CapacityRow[]>;
+/**
+ * Runs `capacity`.
+ *
+ * @param context - The session.
+ * @param args - Families, or none for the domains' own.
+ * @returns The envelope, with the `stratus.capacity` model.
+ */
+export declare function capacity_run(context: CapacityCommandContext, args: ReadonlyArray<string>): Promise<CommandEnvelope>;
+/** `capacity`'s help. */
+export declare const CAPACITY_HELP: CommandHelp;

package/dist/commands/capacity.js

@@ -0,0 +1,93 @@
+/**
+ * @file `capacity`: how much of each limit a shape family draws on is free,
+ * per zone, in the session's region (docs/stratus.adoc, D7).
+ *
+ * The families are the ones named, else the ones the daemon's domains'
+ * specs name (`family:`). For each, the region's shapes of that family say
+ * which limits they draw on; each limit is read at every zone it is kept in,
+ * with what is used and left when the cloud says. The answer carries the
+ * `stratus.capacity` model the CAPACITY tile draws.
+ *
+ * @module
+ */
+import chalk from 'chalk';
+import { envelope_error, envelope_ok, STRATUS_CAPACITY_MODEL_KIND } from '@fnndsc/menu';
+/**
+ * The shape family a spec names (`family: E5`), or null.
+ *
+ * @param spec - The spec's text.
+ * @returns The family.
+ */
+export function specFamily_of(spec) {
+    const match = spec?.match(/^family:\s*([A-Za-z0-9.]+)/m) ?? null;
+    return match?.[1] ?? null;
+}
+/**
+ * The capacity rows for families in a region.
+ *
+ * @param driver - The cloud.
+ * @param region - The region.
+ * @param families - The families.
+ * @returns One row per limit and zone, family by family.
+ */
+export async function capacityRows_read(driver, region, families) {
+    const shapes = await driver.shapes_list(region);
+    const rows = [];
+    for (const family of families) {
+        const ofFamily = shapes.filter((shape) => shape.family.toLowerCase() === family.toLowerCase());
+        const quotas = new Map();
+        for (const shape of ofFamily)
+            for (const name of shape.quotaNames)
+                quotas.set(name, shape.limitService);
+        const byService = new Map();
+        for (const [name, service] of quotas) {
+            if (!byService.has(service))
+                byService.set(service, await driver.limits_list(region, service));
+            const limits = (byService.get(service) ?? []).filter((limit) => limit.name === name);
+            for (const limit of limits) {
+                const availability = await driver.limitAvailability_get(region, limit.service, limit.name, limit.zone);
+                rows.push({ family, limit: limit.name, zone: limit.zone ?? null, value: limit.value, used: availability?.used ?? null, available: availability?.available ?? null });
+            }
+        }
+    }
+    return rows;
+}
+/** One row as a line. */
+function row_line(row, limitWidth, zoneWidth) {
+    const free = row.available === null ? chalk.gray(`${row.value} permitted, use not reported`) : `${row.available} of ${row.value} free`;
+    return `${row.family.padEnd(4)}  ${row.limit.padEnd(limitWidth)}  ${(row.zone ?? 'region').padEnd(zoneWidth)}  ${free}`;
+}
+/**
+ * Runs `capacity`.
+ *
+ * @param context - The session.
+ * @param args - Families, or none for the domains' own.
+ * @returns The envelope, with the `stratus.capacity` model.
+ */
+export async function capacity_run(context, args) {
+    const region = context.region();
+    if (region === null)
+        return envelope_error('', undefined, 'capacity: not connected\n');
+    const families = args.length > 0
+        ? [...args]
+        : [...new Set(context.domains.domains_read().map((domain) => specFamily_of(domain.spec)).filter((family) => family !== null))];
+    if (families.length === 0)
+        return envelope_error('', undefined, 'capacity: name a shape family (capacity E5); no domain\'s spec names one\n');
+    const rows = await capacityRows_read(context.driver, region, families);
+    const model = { region, rows };
+    if (rows.length === 0)
+        return envelope_ok(`capacity in ${region}: no limits for ${families.join(', ')}\n`, { kind: STRATUS_CAPACITY_MODEL_KIND, data: model });
+    const limitWidth = Math.max(...rows.map((row) => row.limit.length));
+    const zoneWidth = Math.max(...rows.map((row) => (row.zone ?? 'region').length));
+    const text = [`capacity in ${region}`, ...rows.map((row) => row_line(row, limitWidth, zoneWidth))].join('\n');
+    return envelope_ok(`${text}\n`, { kind: STRATUS_CAPACITY_MODEL_KIND, data: model });
+}
+/** `capacity`'s help. */
+export const CAPACITY_HELP = {
+    usage: 'capacity [<family>…]',
+    summary: 'What the region has free for a shape family, per zone',
+    category: 'Resources',
+    description: 'For each shape family named (or, with none, each family a domain\'s spec names), the limits its shapes draw on in the session\'s region, at every zone they are kept in: what is permitted and, when the cloud says, how much is free. The same facts are under regions/<region>/limits.',
+    examples: ['capacity', 'capacity E5 A1'],
+};
+//# sourceMappingURL=capacity.js.map

package/dist/commands/capacity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capacity.js","sourceRoot":"","sources":["../../src/commands/capacity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,2BAA2B,EAA8D,MAAM,cAAc,CAAC;AAcpJ;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,IAAmB;IAC/C,MAAM,KAAK,GAA4B,IAAI,EAAE,KAAK,CAAC,6BAA6B,CAAC,IAAI,IAAI,CAAC;IAC1F,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC5B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAmB,EAAE,MAAc,EAAE,QAA+B;IAC1G,MAAM,MAAM,GAAiB,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAkB,EAAE,CAAC;IAC/B,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAiB,MAAM,CAAC,MAAM,CAAC,CAAC,KAAiB,EAAW,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QAClI,MAAM,MAAM,GAAwB,IAAI,GAAG,EAAE,CAAC;QAC9C,KAAK,MAAM,KAAK,IAAI,QAAQ;YAAE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,UAAU;gBAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QACxG,MAAM,SAAS,GAA8B,IAAI,GAAG,EAAE,CAAC;QACvD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,EAAE,CAAC;YACrC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;YAC/F,MAAM,MAAM,GAAiB,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAiB,EAAW,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YACxH,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,YAAY,GAA6B,MAAM,MAAM,CAAC,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjI,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,IAAI,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,IAAI,IAAI,EAAE,CAAC,CAAC;YACvK,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,yBAAyB;AACzB,SAAS,QAAQ,CAAC,GAAgB,EAAE,UAAkB,EAAE,SAAiB;IACvE,MAAM,IAAI,GAAW,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,8BAA8B,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,SAAS,OAAO,GAAG,CAAC,KAAK,OAAO,CAAC;IAC/I,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;AAC1H,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAA+B,EAAE,IAA2B;IAC7F,MAAM,MAAM,GAAkB,OAAO,CAAC,MAAM,EAAE,CAAC;IAC/C,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,2BAA2B,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAa,IAAI,CAAC,MAAM,GAAG,CAAC;QACxC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QACX,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,MAAoB,EAAiB,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAqB,EAAoB,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/L,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,4EAA4E,CAAC,CAAC;IAC9I,MAAM,IAAI,GAAkB,MAAM,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtF,MAAM,KAAK,GAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC,eAAe,MAAM,mBAAmB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/J,MAAM,UAAU,GAAW,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAgB,EAAU,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACjG,MAAM,SAAS,GAAW,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAgB,EAAU,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7G,MAAM,IAAI,GAAW,CAAC,eAAe,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAgB,EAAU,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3I,OAAO,WAAW,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACtF,CAAC;AAED,yBAAyB;AACzB,MAAM,CAAC,MAAM,aAAa,GAAgB;IACxC,KAAK,EAAE,sBAAsB;IAC7B,OAAO,EAAE,uDAAuD;IAChE,QAAQ,EAAE,WAAW;IACrB,WAAW,EAAE,0RAA0R;IACvS,QAAQ,EAAE,CAAC,UAAU,EAAE,gBAAgB,CAAC;CACzC,CAAC"}

package/dist/commands/domain.d.ts

@@ -0,0 +1,45 @@
+import { type CommandEnvelope, type DomainSummary } from '@fnndsc/menu';
+import type { CommandGroup, CommandHelp } from '@fnndsc/brasa/core';
+import type { CloudDriver } from '../cloud/driver.js';
+import type { HarborDomain } from '../domains/harborOci.js';
+import type { DomainTree } from '../vfs/domains.js';
+import { type BuildCommandContext } from './build.js';
+/** What `domain` reads from the session. */
+export interface DomainCommandContext {
+    readonly domains: DomainTree;
+    readonly driver: CloudDriver;
+    /** The session's region, or null when not connected. */
+    readonly region: () => string | null;
+    /** The folder the domains stand in (`/net/oci/<tenancy>/domains`). */
+    readonly domainsPath: () => string;
+    /** What the build verbs run over; absent, `new`, `plan` and `build` refuse. */
+    readonly build?: BuildCommandContext;
+}
+/**
+ * One domain's status: its lines, and its summary for the model.
+ *
+ * @param context - The session.
+ * @param domain - The domain.
+ * @returns The lines and the summary.
+ */
+export declare function domainStatus_read(context: DomainCommandContext, domain: HarborDomain): Promise<{
+    lines: string[];
+    summary: DomainSummary;
+}>;
+/**
+ * Runs `domain`.
+ *
+ * @param context - The session.
+ * @param args - The words after `domain`.
+ * @returns The envelope.
+ */
+export declare function domain_run(context: DomainCommandContext, args: ReadonlyArray<string>): Promise<CommandEnvelope>;
+/** `domain`'s help. */
+export declare const DOMAIN_HELP: CommandHelp;
+/**
+ * The stratus backend's commands: `domain` and `capacity`.
+ *
+ * @param context - The session.
+ * @returns The group to register as the backend's.
+ */
+export declare function stratusCommands_make(context: DomainCommandContext): CommandGroup;

package/dist/commands/domain.js

@@ -0,0 +1,150 @@
+/**
+ * @file `domain`: where each Trusted Domain's build stands (docs/stratus.adoc, D7).
+ *
+ * `domain status [<name>]` prints, per domain, its cluster, its checkout,
+ * each step with its state and the evidence for it, and how many live
+ * resources its compartment holds in the session's region. A bare `domain`
+ * is `domain status` for every domain. `new`, `plan`, `build` and `adopt`
+ * are in `build.ts`, `verify` in `verify.ts`; any other verb is refused by name.
+ *
+ * @module
+ */
+import chalk from 'chalk';
+import { envelope_error, envelope_ok, STRATUS_DOMAINS_MODEL_KIND } from '@fnndsc/menu';
+import { stateTone_paint } from '../vfs/look.js';
+import { lastDone_of } from '../domains/harborOci.js';
+import { capacity_run, CAPACITY_HELP } from './capacity.js';
+import { spend_line, spend_read } from '../domain/spend.js';
+import { spend_run, SPEND_HELP } from './spend.js';
+import { domainAdopt_run, domainBuild_run, domainNew_run, domainPlan_run } from './build.js';
+import { domainVerify_run, verifyReach_default } from './verify.js';
+import { domainTeardown_run } from './teardown.js';
+/** The order the counted kinds are said in. */
+const COUNT_ORDER = ['instances', 'networks', 'subnets', 'securitygroups', 'loadbalancers', 'volumes', 'buckets', 'dns'];
+/**
+ * A compartment's live resources, and the line that says them or why they
+ * could not be counted.
+ *
+ * @param context - The session.
+ * @param compartmentId - The compartment, from the domain's settings.
+ * @returns The counts (null when not counted) and the line.
+ */
+async function compartment_count(context, compartmentId) {
+    const region = context.region();
+    if (compartmentId === undefined)
+        return { counts: null, line: 'compartment  not in the domain\'s settings' };
+    if (region === null)
+        return { counts: null, line: 'compartment  not counted: not connected' };
+    try {
+        const counts = await context.driver.resources_search(compartmentId, region);
+        const said = COUNT_ORDER.filter((kind) => (counts[kind] ?? 0) > 0).map((kind) => `${counts[kind]} ${kind}`);
+        return { counts, line: `compartment  ${said.length > 0 ? said.join(', ') : 'nothing live'} (${region})` };
+    }
+    catch (error) {
+        return { counts: null, line: `compartment  not counted: ${error instanceof Error ? error.message : String(error)}` };
+    }
+}
+/**
+ * What a domain costs, and the line that says it or why it is not priced.
+ *
+ * @param context - The session.
+ * @param domain - The domain.
+ * @returns The spend (null when not priced) and the line.
+ */
+async function domainCost_read(context, domain) {
+    const compartmentId = domain.settings['OCI_COMPARTMENT_OCID'];
+    const region = domain.settings['OCI_REGION'] ?? context.region();
+    if (compartmentId === undefined || region === null)
+        return { spend: null, line: 'cost         not priced: no compartment known' };
+    try {
+        const spend = await spend_read(context.driver, compartmentId, region, new Date());
+        return { spend, line: `cost         ${spend_line(spend)}` };
+    }
+    catch (error) {
+        return { spend: null, line: `cost         not priced: ${error instanceof Error ? error.message : String(error)}` };
+    }
+}
+/**
+ * One domain's status: its lines, and its summary for the model.
+ *
+ * @param context - The session.
+ * @param domain - The domain.
+ * @returns The lines and the summary.
+ */
+export async function domainStatus_read(context, domain) {
+    const width = Math.max(...domain.steps.map((step) => step.folder.length));
+    const [compartment, cost] = await Promise.all([compartment_count(context, domain.settings['OCI_COMPARTMENT_OCID']), domainCost_read(context, domain)]);
+    const lines = [
+        `${chalk.bold(domain.name)}  ${domain.cluster ?? '(no cluster name in its settings)'}`,
+        `${domain.origin !== 'built' ? 'checkout   ' : domain.state?.adopted !== undefined ? 'adopted    ' : domain.state?.gone !== undefined ? 'torn down  ' : 'built here '}  ${domain.root}`,
+        ...domain.steps.map((step) => `  ${step.folder.padEnd(width)}  ${stateTone_paint(step.state, step.state.padEnd(8))}  ${chalk.gray(step.evidence)}`),
+        compartment.line,
+        cost.line,
+    ];
+    const summary = {
+        name: domain.name,
+        path: `${context.domainsPath()}/${domain.name}`,
+        cluster: domain.cluster,
+        lastDone: lastDone_of(domain)?.folder ?? null,
+        steps: domain.steps.map((step) => ({ folder: step.folder, state: step.state })),
+        resources: compartment.counts === null ? null : { ...compartment.counts },
+        cost: cost.spend === null ? null : { hourly: cost.spend.hourly, soFar: cost.spend.soFar, currency: cost.spend.currency },
+    };
+    return { lines, summary };
+}
+/**
+ * Runs `domain`.
+ *
+ * @param context - The session.
+ * @param args - The words after `domain`.
+ * @returns The envelope.
+ */
+export async function domain_run(context, args) {
+    const [verb = 'status', ...rest] = args;
+    const builds = { new: domainNew_run, plan: domainPlan_run, build: domainBuild_run, adopt: domainAdopt_run, teardown: domainTeardown_run, verify: (build, words) => domainVerify_run(build, build.verifyReach ?? verifyReach_default(), words) };
+    const build = builds[verb];
+    if (build !== undefined)
+        return context.build === undefined ? envelope_error('', undefined, `domain: ${verb}: this session builds no domains\n`) : build(context.build, rest);
+    if (verb !== 'status')
+        return envelope_error('', undefined, `domain: ${verb}: not a verb this session has yet (domain status, new, plan, build, adopt, verify, teardown)\n`);
+    const all = context.domains.domains_read();
+    if (all.length === 0)
+        return envelope_ok('no domains: domain new <name> makes one; stratus --domain <name>=<harbor-oci checkout> reads one\n', { kind: STRATUS_DOMAINS_MODEL_KIND, data: { domains: [] } });
+    const chosen = rest.length === 0 ? all : all.filter((domain) => rest.includes(domain.name));
+    const missing = rest.filter((name) => !all.some((domain) => domain.name === name));
+    if (missing.length > 0)
+        return envelope_error('', undefined, `domain: ${missing.join(', ')}: no such domain (${all.map((domain) => domain.name).join(', ')})\n`);
+    const blocks = [];
+    const model = { domains: [] };
+    for (const domain of chosen) {
+        const read = await domainStatus_read(context, domain);
+        blocks.push(read.lines.join('\n'));
+        model.domains.push(read.summary);
+    }
+    return envelope_ok(`${blocks.join('\n\n')}\n`, { kind: STRATUS_DOMAINS_MODEL_KIND, data: model });
+}
+/** `domain`'s help. */
+export const DOMAIN_HELP = {
+    usage: 'domain [status [<name>…]] | domain new <name> [options] | domain plan [<name>] | domain build [<name>] [--through <step>] | domain adopt <name> --from <checkout> | domain verify [<name>]',
+    summary: 'Make, plan, build, and see where each Trusted Domain stands',
+    category: 'Resources',
+    description: 'domain status prints each domain: those this daemon builds, and those read from a harbor-oci checkout (stratus --domain <name>=<checkout>), with its cluster, each build step with its state and the evidence for it, and its compartment\'s live resources in the session\'s region. A bare domain is domain status for every domain. domain new writes a domain\'s spec and nothing else (--family E5, --plane 3x8/24, --workers 2x8/32 as count x vCPU / GiB, --data, --database, --queue in GiB, --base-domain zone). domain plan reads only: whether the spec fits each availability domain, what it costs an hour, where the steps stand; the infrastructure plan needs the tasks tier. domain build runs the steps from the first not done as a task (/proc/steps/<name>-build) and follows it; before the first step that bills it asks, with the plan\'s counts and the cost. Ctrl-C stops following, not the build: wait <name>-build follows it again, kill <name>-build asks it to stop. domain adopt keeps a domain harbor-oci built and, with the tasks tier, takes its stack and state into the cloud\'s Resource Manager; an adopted domain is planned against, never built on. domain verify runs ten checks against the cluster through its kubeconfig, which stays on the host: nine read, and the block-volume probe, which makes a claim and a pod, runs only with the tasks tier. The domain\'s files are under ~ (domains/<name>/); its credentials stay on the host.',
+    examples: ['domain', 'domain new trial --workers 2x8/32 --data 100', 'domain plan trial', 'domain build trial --through infra-plan', 'domain build trial', 'domain adopt harbor --from ~/src/harbor-oci', 'domain verify harbor', 'cat ~/harbor/steps/05-infra-apply/evidence'],
+};
+/**
+ * The stratus backend's commands: `domain` and `capacity`.
+ *
+ * @param context - The session.
+ * @returns The group to register as the backend's.
+ */
+export function stratusCommands_make(context) {
+    return {
+        envelope: {
+            domain: (args) => domain_run(context, args),
+            capacity: (args) => capacity_run(context, args),
+            spend: (args) => spend_run(context, args),
+        },
+        help: { domain: DOMAIN_HELP, capacity: CAPACITY_HELP, spend: SPEND_HELP },
+    };
+}
+//# sourceMappingURL=domain.js.map

package/dist/commands/domain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain.js","sourceRoot":"","sources":["../../src/commands/domain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,0BAA0B,EAA+D,MAAM,cAAc,CAAC;AAKpJ,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAc,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc,EAA4B,MAAM,YAAY,CAAC;AACvH,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAcnD,+CAA+C;AAC/C,MAAM,WAAW,GAAwC,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;AAE9J;;;;;;;GAOG;AACH,KAAK,UAAU,iBAAiB,CAAC,OAA6B,EAAE,aAAiC;IAC/F,MAAM,MAAM,GAAkB,OAAO,CAAC,MAAM,EAAE,CAAC;IAC/C,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,4CAA4C,EAAE,CAAC;IAC7G,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,yCAAyC,EAAE,CAAC;IAC9F,IAAI,CAAC;QACH,MAAM,MAAM,GAAmB,MAAM,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAC5F,MAAM,IAAI,GAAa,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAW,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAU,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACvI,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,KAAK,MAAM,GAAG,EAAE,CAAC;IAC5G,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IACvH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,eAAe,CAAC,OAA6B,EAAE,MAAoB;IAChF,MAAM,aAAa,GAAuB,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IAClF,MAAM,MAAM,GAAkB,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAChF,IAAI,aAAa,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,+CAA+C,EAAE,CAAC;IAClI,IAAI,CAAC;QACH,MAAM,KAAK,GAAU,MAAM,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QACzF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,4BAA4B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IACrH,CAAC;AACH,CAAC;AAGD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAA6B,EAAE,MAAoB;IACzF,MAAM,KAAK,GAAW,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAe,EAAU,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACrG,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,EAAE,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACvJ,MAAM,KAAK,GAAa;QACtB,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,OAAO,IAAI,mCAAmC,EAAE;QACtF,GAAG,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAE,MAAM,CAAC,KAAsC,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAE,MAAM,CAAC,KAAmC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,KAAK,MAAM,CAAC,IAAI,EAAE;QACxP,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAe,EAAU,EAAE,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtK,WAAW,CAAC,IAAI;QAChB,IAAI,CAAC,IAAI;KACV,CAAC;IACF,MAAM,OAAO,GAAkB;QAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE;QAC/C,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,IAAI,IAAI;QAC7C,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAe,EAAqC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7H,SAAS,EAAE,WAAW,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,WAAW,CAAC,MAAM,EAAE;QACzE,IAAI,EAAE,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE;KACzH,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAA6B,EAAE,IAA2B;IACzF,MAAM,CAAC,IAAI,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACxC,MAAM,MAAM,GAAsH,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC,KAA0B,EAAE,KAA4B,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,IAAI,mBAAmB,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;IAC/Y,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,WAAW,IAAI,oCAAoC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC9K,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,WAAW,IAAI,gGAAgG,CAAC,CAAC;IAC7K,MAAM,GAAG,GAAmB,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;IAC3D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC,oGAAoG,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5M,MAAM,MAAM,GAAmB,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAoB,EAAW,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACnI,MAAM,OAAO,GAAa,IAAI,CAAC,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAoB,EAAW,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;IACrI,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,WAAW,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,GAAG,CAAC,GAAG,CAAC,CAAC,MAAoB,EAAU,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvL,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAiB,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC5C,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,WAAW,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACpG,CAAC;AAED,uBAAuB;AACvB,MAAM,CAAC,MAAM,WAAW,GAAgB;IACtC,KAAK,EAAE,4LAA4L;IACnM,OAAO,EAAE,6DAA6D;IACtE,QAAQ,EAAE,WAAW;IACrB,WAAW,EAAE,85CAA85C;IAC36C,QAAQ,EAAE,CAAC,QAAQ,EAAE,8CAA8C,EAAE,mBAAmB,EAAE,yCAAyC,EAAE,oBAAoB,EAAE,6CAA6C,EAAE,sBAAsB,EAAE,4CAA4C,CAAC;CAChR,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA6B;IAChE,OAAO;QACL,QAAQ,EAAE;YACR,MAAM,EAAE,CAAC,IAAc,EAA4B,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC;YAC/E,QAAQ,EAAE,CAAC,IAAc,EAA4B,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC;YACnF,KAAK,EAAE,CAAC,IAAc,EAA4B,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC;SAC9E;QACD,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE;KAC1E,CAAC;AACJ,CAAC"}

package/dist/commands/spend.d.ts

@@ -0,0 +1,22 @@
+import { type CommandEnvelope } from '@fnndsc/menu';
+import type { CommandHelp } from '@fnndsc/brasa/core';
+import { type Spend } from '../domain/spend.js';
+import type { DomainCommandContext } from './domain.js';
+/** `spend`'s help. */
+export declare const SPEND_HELP: CommandHelp;
+/**
+ * One domain's spend as lines.
+ *
+ * @param name - The domain.
+ * @param spend - Its spend.
+ * @returns The lines.
+ */
+export declare function spend_lines(name: string, spend: Spend): string[];
+/**
+ * Runs `spend`.
+ *
+ * @param context - The session.
+ * @param args - The domains' names.
+ * @returns The envelope.
+ */
+export declare function spend_run(context: DomainCommandContext, args: ReadonlyArray<string>): Promise<CommandEnvelope>;

package/dist/commands/spend.js

@@ -0,0 +1,65 @@
+/**
+ * @file `spend [<name>…]`: what each domain costs, resource by resource, at
+ * list price: an hour, and since each resource was made (docs/stratus.adoc,
+ * D7; `harbor-oci`'s `burn`).
+ *
+ * @module
+ */
+import chalk from 'chalk';
+import { envelope_error, envelope_ok } from '@fnndsc/menu';
+import { money_words, spend_line, spend_read } from '../domain/spend.js';
+/** `spend`'s help. */
+export const SPEND_HELP = {
+    usage: 'spend [<name>…]',
+    summary: 'What each Trusted Domain costs, an hour and so far',
+    category: 'Resources',
+    description: 'Prices every live resource in each domain\'s compartment at list price: machines by vCPU and memory while they run, volumes by size and performance, load balancers by the hour and their minimum bandwidth. Prints each with its rate an hour and what it has come to since it was made, then the domain\'s total. An estimate, not the bill: discounts, free tiers and traffic are not in it. Bare, every domain.',
+    examples: ['spend', 'spend harbor'],
+};
+/**
+ * One domain's spend as lines.
+ *
+ * @param name - The domain.
+ * @param spend - Its spend.
+ * @returns The lines.
+ */
+export function spend_lines(name, spend) {
+    const nameWidth = Math.max(4, ...spend.items.map((item) => item.name.length));
+    const rate = (amount, unit = '') => (amount === null ? 'not priced' : `${money_words(amount, spend.currency)}${unit}`);
+    return [
+        chalk.bold(name),
+        ...spend.items.map((item) => `  ${item.kind.padEnd(15)} ${item.name.padEnd(nameWidth)}  ${rate(item.hourly, '/h').padStart(10)}  ${rate(item.soFar, ' so far').padStart(17)}  ${chalk.gray(item.detail)}`),
+        `  ${chalk.yellow(spend_line(spend))}`,
+    ];
+}
+/**
+ * Runs `spend`.
+ *
+ * @param context - The session.
+ * @param args - The domains' names.
+ * @returns The envelope.
+ */
+export async function spend_run(context, args) {
+    const flag = args.find((word) => word.startsWith('-'));
+    if (flag !== undefined)
+        return envelope_error('', undefined, `spend: ${flag}: unknown option\n`);
+    const all = context.domains.domains_read();
+    const missing = args.filter((name) => !all.some((domain) => domain.name === name));
+    if (missing.length > 0)
+        return envelope_error('', undefined, `spend: ${missing.join(', ')}: no such domain\n`);
+    const chosen = args.length === 0 ? all : all.filter((domain) => args.includes(domain.name));
+    if (chosen.length === 0)
+        return envelope_ok('no domains\n');
+    const blocks = [];
+    for (const domain of chosen) {
+        const compartmentId = domain.settings['OCI_COMPARTMENT_OCID'];
+        const region = domain.settings['OCI_REGION'] ?? context.region();
+        if (compartmentId === undefined || region === null) {
+            blocks.push(`${chalk.bold(domain.name)}\n  ${chalk.gray('not priced: no compartment known')}`);
+            continue;
+        }
+        blocks.push(spend_lines(domain.name, await spend_read(context.driver, compartmentId, region, new Date())).join('\n'));
+    }
+    return envelope_ok(`${blocks.join('\n\n')}\n${chalk.gray('List prices: an estimate, not the bill.')}\n`);
+}
+//# sourceMappingURL=spend.js.map

package/dist/commands/spend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spend.js","sourceRoot":"","sources":["../../src/commands/spend.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,WAAW,EAAwB,MAAM,cAAc,CAAC;AAGjF,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAA8B,MAAM,oBAAoB,CAAC;AAGrG,sBAAsB;AACtB,MAAM,CAAC,MAAM,UAAU,GAAgB;IACrC,KAAK,EAAE,iBAAiB;IACxB,OAAO,EAAE,oDAAoD;IAC7D,QAAQ,EAAE,WAAW;IACrB,WAAW,EAAE,qZAAqZ;IACla,QAAQ,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC;CACpC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,KAAY;IACpD,MAAM,SAAS,GAAW,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAe,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACzG,MAAM,IAAI,GAAG,CAAC,MAAqB,EAAE,OAAe,EAAE,EAAU,EAAE,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IACtJ,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QAChB,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAe,EAAU,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7N,KAAK,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE;KACvC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAA6B,EAAE,IAA2B;IACxF,MAAM,IAAI,GAAuB,IAAI,CAAC,IAAI,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5F,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,UAAU,IAAI,oBAAoB,CAAC,CAAC;IACjG,MAAM,GAAG,GAAmB,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;IAC3D,MAAM,OAAO,GAAa,IAAI,CAAC,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAoB,EAAW,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;IACrI,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,UAAU,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC/G,MAAM,MAAM,GAAmB,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAoB,EAAW,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACnI,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC,cAAc,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,aAAa,GAAuB,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;QAClF,MAAM,MAAM,GAAkB,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAChF,IAAI,aAAa,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACjK,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxH,CAAC;IACD,OAAO,WAAW,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,yCAAyC,CAAC,IAAI,CAAC,CAAC;AAC3G,CAAC"}

package/dist/commands/teardown.d.ts

@@ -0,0 +1,10 @@
+import { type CommandEnvelope } from '@fnndsc/menu';
+import { type BuildCommandContext } from './build.js';
+/**
+ * `domain teardown <name>`.
+ *
+ * @param context - The session.
+ * @param args - The words after `teardown`.
+ * @returns The envelope.
+ */
+export declare function domainTeardown_run(context: BuildCommandContext, args: ReadonlyArray<string>): Promise<CommandEnvelope>;

package/dist/commands/teardown.js

@@ -0,0 +1,72 @@
+/**
+ * @file `domain teardown <name>`: removes what a domain built here, after
+ * showing what goes and asking for the domain's name (docs/stratus.adoc, D6).
+ *
+ * @module
+ */
+import { readFileSync } from 'node:fs';
+import chalk from 'chalk';
+import { envelope_error, envelope_ok } from '@fnndsc/menu';
+import { repl_question, sink_dataLine, surface_get } from '@fnndsc/brasa/core';
+import { clusterVolumes_read, teardownRun_make } from '../domain/teardown.js';
+import { job_runFollowed } from './build.js';
+import { verifyReach_default } from './verify.js';
+/**
+ * `domain teardown <name>`.
+ *
+ * @param context - The session.
+ * @param args - The words after `teardown`.
+ * @returns The envelope.
+ */
+export async function domainTeardown_run(context, args) {
+    if (args.length !== 1 || args[0].startsWith('-'))
+        return envelope_error('', undefined, 'domain teardown: usage: domain teardown <name>\n');
+    const name = args[0];
+    const domain = context.domains.domain_read(name);
+    const record = context.store.record_read(name);
+    if (domain === null)
+        return envelope_error('', undefined, `domain teardown: ${name}: no such domain\n`);
+    if (domain.origin !== 'built' || record === null)
+        return envelope_error('', undefined, `domain teardown: ${name}: Operation not permitted: read from a harbor-oci checkout, not built here\n`);
+    if (record.adopted !== undefined)
+        return envelope_error('', undefined, `domain teardown: ${name}: Operation not permitted: adopted, not built here\n`);
+    if (record.gone !== undefined)
+        return envelope_ok(`${name}: already torn down (${record.gone.slice(0, 16)})\n`);
+    const builder = context.builder;
+    if (builder === null || builder.teardown_run === undefined)
+        return envelope_error('', undefined, 'domain teardown: this cloud cannot tear a domain down yet\n');
+    if (surface_get().capabilities.tasks !== true)
+        return envelope_error('', undefined, `domain teardown: ${name}: Operation not permitted: tearing down needs the tasks tier\n`);
+    // The cluster names its own volumes; read before the destroy takes it away.
+    let volumeIds = [];
+    const kubeconfig = domain.secrets.find((secret) => secret.name === 'kubeconfig');
+    if (kubeconfig !== undefined) {
+        try {
+            volumeIds = await clusterVolumes_read((context.verifyReach ?? verifyReach_default()).kube_make(readFileSync(kubeconfig.hostPath, 'utf-8')));
+        }
+        catch (error) {
+            return envelope_error('', undefined, `domain teardown: ${name}: cannot read the cluster's volumes (${error instanceof Error ? error.message : String(error)}): refusing, they would be left billing\n`);
+        }
+    }
+    const stackRef = record.ids['stackRef'];
+    const inStack = stackRef !== undefined && builder.stackResources_count !== undefined ? await builder.stackResources_count({ region: record.region, stackRef }) : null;
+    const lines = [
+        `${chalk.bold(name)}  ${name}.${record.baseDomain}  teardown`,
+        `  ${chalk.red('−')} ${stackRef === undefined ? 'no stack: nothing was applied' : `the stack's ${inStack ?? '?'} resources, by a destroy job`}`,
+        `  ${chalk.red('−')} the DNS records api, api-int and *.apps`,
+        ...(record.ids['isoObject'] !== undefined ? [`  ${chalk.red('−')} the image ${record.ids['isoObject']} and its link`] : []),
+        `  ${chalk.red('−')} ${volumeIds.length} volume${volumeIds.length === 1 ? '' : 's'} the cluster made for its claims${kubeconfig === undefined ? ' (no cluster to ask)' : ''}`,
+        ...(record.ids['clusterId'] !== undefined ? [`  ${chalk.red('−')} the installer's cluster and infra-env`] : []),
+        chalk.gray('  Nothing else in the compartment is touched.'),
+    ];
+    for (const line of lines)
+        sink_dataLine(line);
+    const answer = (await repl_question(`Destroy what ${name} built? Its data goes with it; billing stops. Type the domain's name to go on:`)).trim();
+    if (answer !== name)
+        return envelope_ok(`${chalk.gray(`not torn down: '${answer}' is not ${name}`)}\n`);
+    const ran = await job_runFollowed(`${name}-teardown`, `teardown ${name}`, teardownRun_make(context.store, builder, context.deps?.installer ?? null, name, volumeIds));
+    if ('error' in ran)
+        return envelope_error('', undefined, `domain teardown: ${ran.error}\n`);
+    return envelope_ok(`${name}: torn down\n`);
+}
+//# sourceMappingURL=teardown.js.map

package/dist/commands/teardown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"teardown.js","sourceRoot":"","sources":["../../src/commands/teardown.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,WAAW,EAAwB,MAAM,cAAc,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAG/E,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9E,OAAO,EAAE,eAAe,EAA4B,MAAM,YAAY,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAA4B,EAAE,IAA2B;IAChG,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAK,IAAI,CAAC,CAAC,CAAY,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,kDAAkD,CAAC,CAAC;IACvJ,MAAM,IAAI,GAAW,IAAI,CAAC,CAAC,CAAW,CAAC;IACvC,MAAM,MAAM,GAAwB,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,MAAM,GAAwB,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACpE,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,oBAAoB,IAAI,oBAAoB,CAAC,CAAC;IACxG,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,oBAAoB,IAAI,8EAA8E,CAAC,CAAC;IAC/L,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,oBAAoB,IAAI,sDAAsD,CAAC,CAAC;IACvJ,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC,GAAG,IAAI,wBAAwB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IAChH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,6DAA6D,CAAC,CAAC;IAChK,IAAI,WAAW,EAAE,CAAC,YAAY,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,oBAAoB,IAAI,gEAAgE,CAAC,CAAC;IAC9K,4EAA4E;IAC5E,IAAI,SAAS,GAAa,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAW,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;IAC1F,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,mBAAmB,CAAC,CAAC,OAAO,CAAC,WAAW,IAAI,mBAAmB,EAAE,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAC9I,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,oBAAoB,IAAI,wCAAwC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC1M,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAuB,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAkB,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrL,MAAM,KAAK,GAAa;QACtB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,YAAY;QAC7D,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,eAAe,OAAO,IAAI,GAAG,8BAA8B,EAAE;QAC/I,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,0CAA0C;QAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3H,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,UAAU,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,mCAAmC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,EAAE;QAC7K,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/G,KAAK,CAAC,IAAI,CAAC,+CAA+C,CAAC;KAC5D,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,aAAa,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAW,CAAC,MAAM,aAAa,CAAC,gBAAgB,IAAI,gFAAgF,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1J,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,WAAW,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,YAAY,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;IACxG,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,GAAG,IAAI,WAAW,EAAE,YAAY,IAAI,EAAE,EAAE,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,IAAI,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IACtK,IAAI,OAAO,IAAI,GAAG;QAAE,OAAO,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,oBAAoB,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC;IAC5F,OAAO,WAAW,CAAC,GAAG,IAAI,eAAe,CAAC,CAAC;AAC7C,CAAC"}

package/dist/commands/verify.d.ts

@@ -0,0 +1,28 @@
+import { type CommandEnvelope } from '@fnndsc/menu';
+import { type KubeApi } from '../cluster/kube.js';
+import type { BuildCommandContext } from './build.js';
+/** The resolver `verify` asks, as `harbor-oci` did: one outside the tenancy. */
+export declare const PUBLIC_RESOLVER: string;
+/** What `verify` reaches the cluster and the world with; a test hands in its own. */
+export interface VerifyReach {
+    readonly kube_make: (kubeconfig: string) => KubeApi;
+    readonly resolve: (name: string) => Promise<string[]>;
+    readonly https_status: (url: string, ca: string | null) => Promise<number>;
+    readonly probeTimeoutMs: number;
+    readonly pollMs: number;
+}
+/**
+ * The reach over the network: the Kubernetes API, a public resolver, HTTPS.
+ *
+ * @returns The reach.
+ */
+export declare function verifyReach_default(): VerifyReach;
+/**
+ * `domain verify [<name>]`.
+ *
+ * @param context - The session.
+ * @param reach - How the checks reach the cluster.
+ * @param args - The words after `verify`.
+ * @returns The envelope: failed when a check failed.
+ */
+export declare function domainVerify_run(context: BuildCommandContext, reach: VerifyReach, args: ReadonlyArray<string>): Promise<CommandEnvelope>;