@fnndsc/stratus 0.1.0 → 0.2.0

package/dist/commands/verify.js

@@ -0,0 +1,98 @@
+/**
+ * @file `domain verify [<name>]`: the ten checks against a domain's cluster
+ * (docs/stratus.adoc, D7), through its kubeconfig on the host, which never
+ * leaves it. The result is kept as the domain's verify step, so `domain
+ * status` and the DOMAINS tile show it.
+ *
+ * @module
+ */
+import { promises as dns } from 'node:dns';
+import { readFileSync } from 'node:fs';
+import chalk from 'chalk';
+import { envelope_error, envelope_ok } from '@fnndsc/menu';
+import { commandCancellation_enable, commandCancellation_signalGet, surface_get } from '@fnndsc/brasa/core';
+import { kubeconfig_read } from '../cluster/kube.js';
+import { httpsStatus_get, kubeApi_make } from '../cluster/kubeHttp.js';
+import { familyShape_find } from '../domain/sizing.js';
+import { verify_run } from '../domain/verify.js';
+/** The resolver `verify` asks, as `harbor-oci` did: one outside the tenancy. */
+export const PUBLIC_RESOLVER = '8.8.8.8';
+/**
+ * The reach over the network: the Kubernetes API, a public resolver, HTTPS.
+ *
+ * @returns The reach.
+ */
+export function verifyReach_default() {
+    const resolver = new dns.Resolver();
+    resolver.setServers([PUBLIC_RESOLVER]);
+    return {
+        kube_make: (kubeconfig) => kubeApi_make(kubeconfig_read(kubeconfig)),
+        resolve: (name) => resolver.resolve4(name),
+        https_status: httpsStatus_get,
+        probeTimeoutMs: 300_000,
+        pollMs: 5_000,
+    };
+}
+/**
+ * A check as a line.
+ *
+ * @param check - The check.
+ * @returns The line.
+ */
+function check_line(check) {
+    const mark = check.ok === null ? chalk.gray('·') : check.ok ? chalk.cyan('✓') : chalk.red('✗');
+    return `  ${mark} ${check.name.padEnd(16)} ${check.ok === false ? chalk.red(check.detail) : check.detail}${check.how === 'writes' ? chalk.yellow('  (writes)') : ''}`;
+}
+/**
+ * `domain verify [<name>]`.
+ *
+ * @param context - The session.
+ * @param reach - How the checks reach the cluster.
+ * @param args - The words after `verify`.
+ * @returns The envelope: failed when a check failed.
+ */
+export async function domainVerify_run(context, reach, args) {
+    if (args.length > 1 || args.some((word) => word.startsWith('-')))
+        return envelope_error('', undefined, 'domain verify: usage: domain verify [<name>]\n');
+    const kept = context.store.names_list();
+    const name = args[0] ?? (kept.length === 1 ? kept[0] : undefined);
+    if (name === undefined)
+        return envelope_error('', undefined, `domain verify: which domain? (${kept.join(', ') || 'none kept here'})\n`);
+    const domain = context.domains.domain_read(name);
+    if (domain === null)
+        return envelope_error('', undefined, `domain verify: ${name}: no such domain\n`);
+    const record = context.store.record_read(name);
+    if (domain.origin !== 'built' || record === null)
+        return envelope_error('', undefined, `domain verify: ${name}: read from a harbor-oci checkout; domain adopt ${name} --from ${domain.root} keeps it here first\n`);
+    const kubeconfig = domain.secrets.find((secret) => secret.name === 'kubeconfig');
+    if (kubeconfig === undefined)
+        return envelope_error('', undefined, `domain verify: ${name}: no kubeconfig yet: its cluster is not installed\n`);
+    const spec = context.store.spec_read(name)?.spec ?? null;
+    const shapes = context.region() === null ? [] : await context.driver.shapes_list(record.region).catch(() => []);
+    commandCancellation_enable();
+    const checks = await verify_run({
+        kube: reach.kube_make(readFileSync(kubeconfig.hostPath, 'utf-8')),
+        resolve: reach.resolve,
+        https_status: reach.https_status,
+        domain: name,
+        baseDomain: record.baseDomain,
+        shape: spec === null ? null : familyShape_find(shapes, spec.family)?.name ?? null,
+        expectedNodes: spec === null ? 0 : spec.controlPlane.count + spec.workers.count,
+        addresses: { api: record.ids['apiIp'], apiInt: record.ids['apiIntIp'], apps: record.ids['appsIp'] },
+        probe: surface_get().capabilities.tasks === true,
+        probeTimeoutMs: reach.probeTimeoutMs,
+        pollMs: reach.pollMs,
+        ...(commandCancellation_signalGet() !== undefined ? { signal: commandCancellation_signalGet() } : {}),
+    });
+    const ran = checks.filter((check) => check.ok !== null);
+    const passed = ran.filter((check) => check.ok === true).length;
+    const failed = ran.length - passed;
+    const skipped = checks.length - ran.length;
+    const summary = `${passed} of ${checks.length} pass${failed > 0 ? `, ${failed} fail` : ''}${skipped > 0 ? `, ${skipped} not run (needs the tasks tier)` : ''}`;
+    context.store.record_update(name, (current) => {
+        current.steps['verify'] = { state: failed > 0 ? 'failed' : 'done', ended: new Date().toISOString(), note: summary };
+    });
+    const text = [`${chalk.bold(name)}  ${name}.${record.baseDomain}`, ...checks.map(check_line), `verify: ${summary}`].join('\n');
+    return failed > 0 ? { ...envelope_error(`${text}\n`), renderedErr: '' } : envelope_ok(`${text}\n`);
+}
+//# sourceMappingURL=verify.js.map

package/dist/commands/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/commands/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,QAAQ,IAAI,GAAG,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,WAAW,EAAwB,MAAM,cAAc,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,6BAA6B,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC5G,OAAO,EAAE,eAAe,EAAgB,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAGvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAoB,MAAM,qBAAqB,CAAC;AAGnE,gFAAgF;AAChF,MAAM,CAAC,MAAM,eAAe,GAAW,SAAS,CAAC;AAWjD;;;;GAIG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,QAAQ,GAAiB,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;IAClD,QAAQ,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;IACvC,OAAO;QACL,SAAS,EAAE,CAAC,UAAkB,EAAW,EAAE,CAAC,YAAY,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QACrF,OAAO,EAAE,CAAC,IAAY,EAAqB,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QACrE,YAAY,EAAE,eAAe;QAC7B,cAAc,EAAE,OAAO;QACvB,MAAM,EAAE,KAAK;KACd,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,KAAkB;IACpC,MAAM,IAAI,GAAW,KAAK,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvG,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACxK,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAA4B,EAAE,KAAkB,EAAE,IAA2B;IAClH,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,gDAAgD,CAAC,CAAC;IAC1K,MAAM,IAAI,GAAa,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;IAClD,MAAM,IAAI,GAAuB,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACtF,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,iCAAiC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,gBAAgB,KAAK,CAAC,CAAC;IACxI,MAAM,MAAM,GAAwB,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACtE,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,kBAAkB,IAAI,oBAAoB,CAAC,CAAC;IACtG,MAAM,MAAM,GAAwB,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,kBAAkB,IAAI,mDAAmD,IAAI,WAAW,MAAM,CAAC,IAAI,wBAAwB,CAAC,CAAC;IACpN,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAW,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;IAC1F,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,kBAAkB,IAAI,qDAAqD,CAAC,CAAC;IAChJ,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC;IACzD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAChH,0BAA0B,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAkB,MAAM,UAAU,CAAC;QAC7C,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjE,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,KAAK,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,IAAI,IAAI;QACjF,aAAa,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK;QAC/E,SAAS,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;QACnG,KAAK,EAAE,WAAW,EAAE,CAAC,YAAY,CAAC,KAAK,KAAK,IAAI;QAChD,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,6BAA6B,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,6BAA6B,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtG,CAAC,CAAC;IACH,MAAM,GAAG,GAAkB,MAAM,CAAC,MAAM,CAAC,CAAC,KAAkB,EAAW,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAW,GAAG,CAAC,MAAM,CAAC,CAAC,KAAkB,EAAW,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;IAC7F,MAAM,MAAM,GAAW,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;IAC3C,MAAM,OAAO,GAAW,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IACnD,MAAM,OAAO,GAAW,GAAG,MAAM,OAAO,MAAM,CAAC,MAAM,QAAQ,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,iCAAiC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACvK,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,OAAqB,EAAQ,EAAE;QAChE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACtH,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAW,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,WAAW,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvI,OAAO,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,cAAc,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;AACrG,CAAC"}

package/dist/domain/adopt.d.ts

@@ -0,0 +1,60 @@
+import type { JobRun } from '@fnndsc/brasa/core';
+import { type HarborDomain } from '../domains/harborOci.js';
+import type { CloudBuilder } from '../cloud/builder.js';
+import { type DomainSpec } from './spec.js';
+import type { DomainRecord, DomainStore } from './state.js';
+/** What adoption reads from a checkout. */
+export interface CheckoutRead {
+    readonly domain: HarborDomain;
+    readonly record: DomainRecord;
+    readonly spec: DomainSpec;
+    /** The stack's variables, each a string, as Resource Manager takes them. */
+    readonly variables: Record<string, string>;
+    /** Where the Terraform state is on the host. */
+    readonly stateFile: string;
+    /** The stack release the checkout pinned. */
+    readonly stackVersion: string;
+    /** The secrets to copy, by name and host path. */
+    readonly secrets: ReadonlyArray<{
+        name: string;
+        hostPath: string;
+    }>;
+}
+/**
+ * Terraform variables as Resource Manager takes them: every value a string.
+ *
+ * @param tfvars - The variables as `harbor-oci` wrote them.
+ * @returns The same, stringified.
+ */
+export declare function variables_stringify(tfvars: Readonly<Record<string, unknown>>): Record<string, string>;
+/**
+ * Reads what adoption needs from a `harbor-oci` checkout.
+ *
+ * @param name - The domain's name here.
+ * @param root - The checkout.
+ * @param now - The clock.
+ * @returns What it read, or why it cannot be adopted.
+ */
+export declare function checkout_read(name: string, root: string, now: Date): CheckoutRead | {
+    error: string;
+};
+/**
+ * Keeps an adopted domain here: its record, its spec, its secrets.
+ *
+ * @param store - The domains this daemon keeps.
+ * @param read - What was read from the checkout.
+ */
+export declare function adoption_keep(store: DomainStore, read: CheckoutRead): void;
+/**
+ * The job that puts an adopted domain's stack in Resource Manager.
+ *
+ * @param store - The domains.
+ * @param builder - The cloud's build half, one that can adopt.
+ * @param name - The domain.
+ * @param variables - The stack's variables.
+ * @param stateFile - Where the Terraform state is on the host.
+ * @param compartmentId - Where the stack goes.
+ * @param stackVersion - The stack release the domain was built with.
+ * @returns The job's work.
+ */
+export declare function adoptRun_make(store: DomainStore, builder: CloudBuilder, name: string, variables: Record<string, string>, stateFile: string, compartmentId: string, stackVersion: string): JobRun;

package/dist/domain/adopt.js

@@ -0,0 +1,143 @@
+/**
+ * @file Adopting a domain `harbor-oci` built (docs/stratus.adoc, D4, step 4b).
+ *
+ * Adoption has two halves. Read from the checkout, on the host: the ids the
+ * build recorded (the Assisted Installer's cluster and infra-env, the ISO
+ * object), the spec, the settings, the step evidence, and the secrets, copied
+ * into the domain's own `auth/` (mode 600, never served). Then, with the
+ * `tasks` tier: a Resource Manager stack of the pinned release with the
+ * domain's own variables, tagged with its name, and its Terraform state
+ * imported. From then on the domain's state is stratus's own and the
+ * checkout is no longer read.
+ *
+ * An adopted domain is planned against, never built on: its apply is refused
+ * until the operator allows it by name (decided 2026-10-22).
+ *
+ * @module
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { envFile_parse, harborDomain_read } from '../domains/harborOci.js';
+import { specYaml_parse, SPEC_DEFAULT } from './spec.js';
+import { STEPS_WRITTEN } from './steps.js';
+/** The secrets a domain keeps from its checkout. */
+const KEPT_SECRETS = ['kubeconfig', 'kubeadmin-password'];
+/**
+ * Terraform variables as Resource Manager takes them: every value a string.
+ *
+ * @param tfvars - The variables as `harbor-oci` wrote them.
+ * @returns The same, stringified.
+ */
+export function variables_stringify(tfvars) {
+    const variables = {};
+    for (const [key, value] of Object.entries(tfvars))
+        variables[key] = typeof value === 'string' ? value : JSON.stringify(value);
+    return variables;
+}
+/**
+ * Reads what adoption needs from a `harbor-oci` checkout.
+ *
+ * @param name - The domain's name here.
+ * @param root - The checkout.
+ * @param now - The clock.
+ * @returns What it read, or why it cannot be adopted.
+ */
+export function checkout_read(name, root, now) {
+    if (!existsSync(join(root, 'config.env')))
+        return { error: `${root}: not a harbor-oci checkout (no config.env)` };
+    const domain = harborDomain_read({ name, root }, now);
+    const harbor = domain.state;
+    if (harbor === null)
+        return { error: `${root}: no state/harbor.json: nothing was built from it` };
+    const settings = {
+        ...envFile_parse(existsSync(join(root, 'config.env')) ? readFileSync(join(root, 'config.env'), 'utf-8') : ''),
+        ...envFile_parse(existsSync(join(root, 'config.local.env')) ? readFileSync(join(root, 'config.local.env'), 'utf-8') : ''),
+    };
+    const stackDir = harbor['stackDir'];
+    if (typeof stackDir !== 'string')
+        return { error: `${root}: state/harbor.json names no stackDir: infra-plan was never run` };
+    const stackPath = stackDir.startsWith('/') ? stackDir : join(root, stackDir);
+    const tfvarsFile = join(stackPath, 'harbor.auto.tfvars.json');
+    const stateFile = join(stackPath, 'terraform.tfstate');
+    if (!existsSync(tfvarsFile))
+        return { error: `${tfvarsFile}: missing` };
+    if (!existsSync(stateFile))
+        return { error: `${stateFile}: missing: infra-apply was never run` };
+    const region = settings['OCI_REGION'];
+    const baseDomain = settings['BASE_DOMAIN'];
+    const compartmentId = settings['OCI_COMPARTMENT_OCID'];
+    if (region === undefined || baseDomain === undefined || compartmentId === undefined)
+        return { error: `${root}: its settings lack OCI_REGION, BASE_DOMAIN or OCI_COMPARTMENT_OCID` };
+    const parsed = domain.spec === null ? { spec: SPEC_DEFAULT } : specYaml_parse(domain.spec);
+    if ('error' in parsed)
+        return { error: `${root}/spec.yaml: ${parsed.error}` };
+    const steps = {};
+    for (const step of domain.steps) {
+        // The cluster runs, so every step through run happened, whatever the host kept to show it.
+        if (STEPS_WRITTEN.includes(step.name))
+            steps[step.name] = { state: 'done', note: `done before adoption (harbor-oci: ${step.state}, ${step.evidence})` };
+    }
+    const ids = {};
+    for (const [key, field] of [['clusterId', 'assistedClusterId'], ['infraEnvId', 'assistedInfraEnvId'], ['isoObject', 'isoObjectName']]) {
+        if (typeof harbor[field] === 'string')
+            ids[key] = harbor[field];
+    }
+    // The load balancers' addresses, from the state's outputs, for the DNS check.
+    const outputs = JSON.parse(readFileSync(stateFile, 'utf-8')).outputs ?? {};
+    for (const [key, output] of [['apiIp', 'open_shift_api_lb_addr'], ['apiIntIp', 'open_shift_api_int_lb_addr'], ['appsIp', 'open_shift_apps_lb_addr']]) {
+        if (typeof outputs[output]?.value === 'string')
+            ids[key] = outputs[output].value;
+    }
+    const record = {
+        name, created: now.toISOString(), region, baseDomain, steps, ids, compartmentId,
+        adopted: { from: root, at: now.toISOString() },
+    };
+    const secrets = domain.secrets.filter((secret) => KEPT_SECRETS.includes(secret.name));
+    return {
+        domain, record, spec: parsed.spec, stateFile, secrets,
+        variables: variables_stringify(JSON.parse(readFileSync(tfvarsFile, 'utf-8'))),
+        stackVersion: settings['OCI_STACK_VERSION'] ?? '',
+    };
+}
+/**
+ * Keeps an adopted domain here: its record, its spec, its secrets.
+ *
+ * @param store - The domains this daemon keeps.
+ * @param read - What was read from the checkout.
+ */
+export function adoption_keep(store, read) {
+    store.create(read.record, read.spec);
+    for (const secret of read.secrets)
+        store.secret_write(read.record.name, secret.name, readFileSync(secret.hostPath, 'utf-8'));
+}
+/**
+ * The job that puts an adopted domain's stack in Resource Manager.
+ *
+ * @param store - The domains.
+ * @param builder - The cloud's build half, one that can adopt.
+ * @param name - The domain.
+ * @param variables - The stack's variables.
+ * @param stateFile - Where the Terraform state is on the host.
+ * @param compartmentId - Where the stack goes.
+ * @param stackVersion - The stack release the domain was built with.
+ * @returns The job's work.
+ */
+export function adoptRun_make(store, builder, name, variables, stateFile, compartmentId, stackVersion) {
+    return async (context) => {
+        const record = store.record_read(name);
+        if (record === null)
+            throw new Error(`${name}: no such domain`);
+        if (record.ids['stackRef'] !== undefined) {
+            context.log_write(`already in Resource Manager: ${record.ids['stackRef']}`);
+            return;
+        }
+        if (builder.stack_adopt === undefined)
+            throw new Error(`${builder.id}: this cloud cannot adopt a stack`);
+        const stackRef = await builder.stack_adopt({ domain: name, region: record.region, compartmentId, variables, state: readFileSync(stateFile), stackVersion }, { log: (line) => context.log_write(line), signal: context.signal });
+        if (context.signal.aborted)
+            return;
+        store.record_update(name, (current) => { current.ids['stackRef'] = stackRef; });
+        context.log_write(`adopted: stack ${stackRef}`);
+    };
+}
+//# sourceMappingURL=adopt.js.map

package/dist/domain/adopt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adopt.js","sourceRoot":"","sources":["../../src/domain/adopt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAqB,MAAM,yBAAyB,CAAC;AAE9F,OAAO,EAAE,cAAc,EAAE,YAAY,EAAmB,MAAM,WAAW,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAkB3C,oDAAoD;AACpD,MAAM,YAAY,GAA0B,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;AAEjF;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAyC;IAC3E,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,SAAS,CAAC,GAAG,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9H,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,IAAY,EAAE,GAAS;IACjE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,6CAA6C,EAAE,CAAC;IAClH,MAAM,MAAM,GAAiB,iBAAiB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IACpE,MAAM,MAAM,GAAmC,MAAM,CAAC,KAAK,CAAC;IAC5D,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,mDAAmD,EAAE,CAAC;IAClG,MAAM,QAAQ,GAA2B;QACvC,GAAG,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7G,GAAG,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1H,CAAC;IACF,MAAM,QAAQ,GAAY,MAAM,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,iEAAiE,EAAE,CAAC;IAC7H,MAAM,SAAS,GAAW,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACrF,MAAM,UAAU,GAAW,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;IACtE,MAAM,SAAS,GAAW,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC/D,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,UAAU,WAAW,EAAE,CAAC;IACxE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,SAAS,sCAAsC,EAAE,CAAC;IACjG,MAAM,MAAM,GAAuB,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAuB,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC/D,MAAM,aAAa,GAAuB,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IAC3E,IAAI,MAAM,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,qEAAqE,EAAE,CAAC;IACpL,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3F,IAAI,OAAO,IAAI,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,eAAe,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;IAC9E,MAAM,KAAK,GAA+B,EAAE,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,2FAA2F;QAC3F,IAAI,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,qCAAqC,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;IAC1J,CAAC;IACD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,mBAAmB,CAAC,EAAE,CAAC,YAAY,EAAE,oBAAoB,CAAC,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC,CAAU,EAAE,CAAC;QAC/I,IAAI,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAW,CAAC;IAC5E,CAAC;IACD,8EAA8E;IAC9E,MAAM,OAAO,GAAyC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAuD,CAAC,OAAO,IAAI,EAAE,CAAC;IACvK,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,wBAAwB,CAAC,EAAE,CAAC,UAAU,EAAE,4BAA4B,CAAC,EAAE,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAU,EAAE,CAAC;QAC9J,IAAI,OAAO,OAAO,CAAC,MAAM,CAAC,EAAE,KAAK,KAAK,QAAQ;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,CAAE,CAAC,KAAe,CAAC;IAC9F,CAAC;IACD,MAAM,MAAM,GAAiB;QAC3B,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,aAAa;QAC/E,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE;KAC/C,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAW,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/F,OAAO;QACL,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO;QACrD,SAAS,EAAE,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA4B,CAAC;QACxG,YAAY,EAAE,QAAQ,CAAC,mBAAmB,CAAC,IAAI,EAAE;KAClD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,KAAkB,EAAE,IAAkB;IAClE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO;QAAE,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAC/H,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAAC,KAAkB,EAAE,OAAqB,EAAE,IAAY,EAAE,SAAiC,EAAE,SAAiB,EAAE,aAAqB,EAAE,YAAoB;IACtL,OAAO,KAAK,EAAE,OAAmB,EAAiB,EAAE;QAClD,MAAM,MAAM,GAAwB,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAI,MAAM,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,kBAAkB,CAAC,CAAC;QAChE,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,SAAS,EAAE,CAAC;YAAC,OAAO,CAAC,SAAS,CAAC,gCAAgC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAClI,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,EAAE,mCAAmC,CAAC,CAAC;QACzG,MAAM,QAAQ,GAAW,MAAM,OAAO,CAAC,WAAW,CAChD,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,EAC/G,EAAE,GAAG,EAAE,CAAC,IAAY,EAAQ,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CACjF,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QACnC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,OAAqB,EAAQ,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACpG,OAAO,CAAC,SAAS,CAAC,kBAAkB,QAAQ,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC;AACJ,CAAC"}

package/dist/domain/sizing.d.ts

@@ -0,0 +1,55 @@
+import type { CloudDriver, CloudPrice, CloudShape } from '../cloud/driver.js';
+import { type DomainSpec } from './spec.js';
+/** One availability domain's fit. */
+export interface ZoneFit {
+    zone: string;
+    /** The machines placed there. */
+    nodes: string[];
+    coresNeeded: number;
+    coresFree: number | null;
+    memoryNeeded: number;
+    memoryFree: number | null;
+    /** Null when the cloud did not say what is free. */
+    fits: boolean | null;
+}
+/** What a spec costs an hour. */
+export interface SpecCost {
+    hourly: number;
+    currency: string;
+    /** What the figure covers. */
+    covers: string;
+}
+/**
+ * The flexible shape a spec's family runs on.
+ *
+ * @param shapes - The region's shapes.
+ * @param family - The family.
+ * @returns The shape, or undefined.
+ */
+export declare function familyShape_find(shapes: ReadonlyArray<CloudShape>, family: string): CloudShape | undefined;
+/**
+ * What a spec costs an hour in compute and memory.
+ *
+ * @param spec - The spec.
+ * @param shape - Its family's shape.
+ * @param prices - The price list.
+ * @returns The cost, or null when the shape is not priced.
+ */
+export declare function specCost_of(spec: DomainSpec, shape: CloudShape | undefined, prices: ReadonlyArray<CloudPrice>): SpecCost | null;
+/**
+ * Money as the operator reads it.
+ *
+ * @param cost - The cost.
+ * @returns `$0.62 an hour (USD, compute and memory …)`.
+ */
+export declare function cost_words(cost: SpecCost): string;
+/**
+ * Whether a spec fits each availability domain, read from the limits.
+ *
+ * @param driver - The cloud.
+ * @param region - The region.
+ * @param domain - The domain's name, for its machines' names.
+ * @param spec - The spec.
+ * @returns One row per zone, in the region's order.
+ */
+export declare function specFit_read(driver: CloudDriver, region: string, domain: string, spec: DomainSpec): Promise<ZoneFit[]>;

package/dist/domain/sizing.js

@@ -0,0 +1,66 @@
+import { capacityRows_read } from '../commands/capacity.js';
+import { specNodes_of } from './spec.js';
+/**
+ * The flexible shape a spec's family runs on.
+ *
+ * @param shapes - The region's shapes.
+ * @param family - The family.
+ * @returns The shape, or undefined.
+ */
+export function familyShape_find(shapes, family) {
+    const ofFamily = shapes.filter((shape) => shape.family.toLowerCase() === family.toLowerCase());
+    return ofFamily.find((shape) => shape.flexible) ?? ofFamily[0];
+}
+/**
+ * What a spec costs an hour in compute and memory.
+ *
+ * @param spec - The spec.
+ * @param shape - Its family's shape.
+ * @param prices - The price list.
+ * @returns The cost, or null when the shape is not priced.
+ */
+export function specCost_of(spec, shape, prices) {
+    const price = shape === undefined ? undefined : prices.find((entry) => entry.shape === shape.name);
+    if (price === undefined)
+        return null;
+    const vcpu = spec.controlPlane.count * spec.controlPlane.vcpu + spec.workers.count * spec.workers.vcpu;
+    const gib = spec.controlPlane.count * spec.controlPlane.ramGib + spec.workers.count * spec.workers.ramGib;
+    return { hourly: vcpu * price.vcpuHour + gib * price.gibHour, currency: price.currency, covers: `compute and memory (${vcpu} vCPU, ${gib} GiB); volumes and load balancers are not priced yet` };
+}
+/**
+ * Money as the operator reads it.
+ *
+ * @param cost - The cost.
+ * @returns `$0.62 an hour (USD, compute and memory …)`.
+ */
+export function cost_words(cost) {
+    const symbol = cost.currency === 'USD' ? '$' : `${cost.currency} `;
+    return `${symbol}${cost.hourly.toFixed(2)} an hour (${cost.covers})`;
+}
+/**
+ * Whether a spec fits each availability domain, read from the limits.
+ *
+ * @param driver - The cloud.
+ * @param region - The region.
+ * @param domain - The domain's name, for its machines' names.
+ * @param spec - The spec.
+ * @returns One row per zone, in the region's order.
+ */
+export async function specFit_read(driver, region, domain, spec) {
+    const zones = await driver.zones_list(region);
+    const shape = familyShape_find(await driver.shapes_list(region), spec.family);
+    const perCore = shape?.vcpuPerCore ?? 2;
+    const rows = await capacityRows_read(driver, region, [spec.family]);
+    const nodes = specNodes_of(domain, spec, zones.length);
+    return zones.map((zone, index) => {
+        const here = nodes.filter((node) => node.zoneIndex === index);
+        const free = (word) => rows.find((row) => row.zone === zone.name && row.limit.includes(word))?.available ?? null;
+        const coresNeeded = here.reduce((sum, node) => sum + node.vcpu / perCore, 0);
+        const memoryNeeded = here.reduce((sum, node) => sum + node.ramGib, 0);
+        const coresFree = free('core');
+        const memoryFree = free('memory');
+        const fits = coresFree === null || memoryFree === null ? null : coresNeeded <= coresFree && memoryNeeded <= memoryFree;
+        return { zone: zone.name, nodes: here.map((node) => node.name), coresNeeded, coresFree, memoryNeeded, memoryFree, fits };
+    });
+}
+//# sourceMappingURL=sizing.js.map

package/dist/domain/sizing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sizing.js","sourceRoot":"","sources":["../../src/domain/sizing.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAkC,MAAM,WAAW,CAAC;AAuBzE;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAiC,EAAE,MAAc;IAChF,MAAM,QAAQ,GAAiB,MAAM,CAAC,MAAM,CAAC,CAAC,KAAiB,EAAW,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAClI,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAiB,EAAW,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC;AACtF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,IAAgB,EAAE,KAA6B,EAAE,MAAiC;IAC5G,MAAM,KAAK,GAA2B,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAiB,EAAW,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC;IAChJ,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,IAAI,GAAW,IAAI,CAAC,YAAY,CAAC,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC/G,MAAM,GAAG,GAAW,IAAI,CAAC,YAAY,CAAC,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAClH,OAAO,EAAE,MAAM,EAAE,IAAI,GAAG,KAAK,CAAC,QAAQ,GAAG,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,uBAAuB,IAAI,UAAU,GAAG,sDAAsD,EAAE,CAAC;AACnM,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAAc;IACvC,MAAM,MAAM,GAAW,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,GAAG,CAAC;IAC3E,OAAO,GAAG,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,MAAM,GAAG,CAAC;AACvE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAmB,EAAE,MAAc,EAAE,MAAc,EAAE,IAAgB;IACtG,MAAM,KAAK,GAAgB,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,KAAK,GAA2B,gBAAgB,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACtG,MAAM,OAAO,GAAW,KAAK,EAAE,WAAW,IAAI,CAAC,CAAC;IAChD,MAAM,IAAI,GAAkB,MAAM,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACnF,MAAM,KAAK,GAAe,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACnE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAe,EAAE,KAAa,EAAW,EAAE;QAC3D,MAAM,IAAI,GAAe,KAAK,CAAC,MAAM,CAAC,CAAC,IAAc,EAAW,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC;QAC7F,MAAM,IAAI,GAAG,CAAC,IAAY,EAAiB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAgB,EAAW,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,SAAS,IAAI,IAAI,CAAC;QAC9J,MAAM,WAAW,GAAW,IAAI,CAAC,MAAM,CAAC,CAAC,GAAW,EAAE,IAAc,EAAU,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC;QAC/G,MAAM,YAAY,GAAW,IAAI,CAAC,MAAM,CAAC,CAAC,GAAW,EAAE,IAAc,EAAU,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACxG,MAAM,SAAS,GAAkB,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAkB,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,GAAmB,SAAS,KAAK,IAAI,IAAI,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,SAAS,IAAI,YAAY,IAAI,UAAU,CAAC;QACvI,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,IAAc,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC7I,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/domain/spec.d.ts

@@ -0,0 +1,101 @@
+/**
+ * @file A domain's spec: the cluster and the ChRIS on it, in neutral units
+ * (vCPU and GiB), as `harbor-oci`'s `spec.yaml` holds them (docs/stratus.adoc,
+ * "Three layers, three tools, one spec").
+ *
+ * The file keeps `harbor-oci`'s shape, so a spec moves between the two: a
+ * family, then `controlPlane`, `workers` and `chris` sections of `key: value`
+ * lines. It is read and written here without a YAML library, because only
+ * that shape is ever read; anything else refuses by line.
+ *
+ * @module
+ */
+/** One pool of nodes. */
+export interface NodePool {
+    count: number;
+    vcpu: number;
+    ramGib: number;
+    bootGib: number;
+    bootTier: string;
+}
+/** What ChRIS is given on the cluster. */
+export interface ChrisSizing {
+    dataGib: number;
+    databaseGib: number;
+    queueGib: number;
+}
+/** A domain's spec. */
+export interface DomainSpec {
+    family: string;
+    controlPlane: NodePool;
+    workers: NodePool;
+    chris: ChrisSizing;
+}
+/** The spec a new domain starts from: `harbor-oci`'s compact cluster. */
+export declare const SPEC_DEFAULT: DomainSpec;
+/**
+ * A copy of a spec, nothing shared.
+ *
+ * @param spec - The spec.
+ * @returns The copy.
+ */
+export declare function spec_copy(spec: DomainSpec): DomainSpec;
+/**
+ * Writes a spec as `spec.yaml`.
+ *
+ * @param spec - The spec.
+ * @returns The file's text.
+ */
+export declare function specYaml_render(spec: DomainSpec): string;
+/**
+ * Reads `spec.yaml`.
+ *
+ * @param text - The file's text.
+ * @returns The spec, or the line it could not read.
+ */
+export declare function specYaml_parse(text: string): {
+    spec: DomainSpec;
+} | {
+    error: string;
+};
+/**
+ * Reads a pool written as `<count>x<vcpu>/<GiB>` (`3x8/24`).
+ *
+ * @param text - The words.
+ * @returns The count, vCPU and GiB, or null.
+ */
+export declare function poolArg_parse(text: string): {
+    count: number;
+    vcpu: number;
+    ramGib: number;
+} | null;
+/**
+ * Applies `domain new`'s sizing options to a spec.
+ *
+ * @param base - The spec to start from.
+ * @param options - `--family`, `--plane`, `--workers`, `--data`, `--database`, `--queue`, by name.
+ * @returns The spec, or what could not be read.
+ */
+export declare function specOptions_apply(base: DomainSpec, options: ReadonlyMap<string, string>): {
+    spec: DomainSpec;
+} | {
+    error: string;
+};
+/** One node a spec asks for. */
+export interface SpecNode {
+    name: string;
+    role: 'plane' | 'worker';
+    vcpu: number;
+    ramGib: number;
+    /** Which availability domain it is placed in, as an index into the region's zones. */
+    zoneIndex: number;
+}
+/**
+ * The nodes a spec asks for, placed one per zone in turn.
+ *
+ * @param domain - The domain's name, for the nodes' names.
+ * @param spec - The spec.
+ * @param zones - How many zones the region has.
+ * @returns The nodes.
+ */
+export declare function specNodes_of(domain: string, spec: DomainSpec, zones: number): SpecNode[];