@fnndsc/stratus 0.1.0 → 0.2.1

package/dist/domain/state.js

@@ -0,0 +1,182 @@
+/**
+ * @file A domain's own state, kept on the daemon's host (docs/stratus.adoc,
+ * D4): `$XDG_STATE_HOME/stratus/domains/<name>/` holds `spec.yaml`,
+ * `state.json` (the ids the build recorded and each step's history, written
+ * whole, mode 600) and `auth/` (the secrets the build fetched, mode 600,
+ * never served). The tree's `domains/<name>/` is a view of that folder.
+ *
+ * @module
+ */
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import { specYaml_parse, specYaml_render } from './spec.js';
+/**
+ * The folder a daemon keeps its domains in.
+ *
+ * @param env - The environment.
+ * @returns `$XDG_STATE_HOME/stratus/domains`, or `~/.local/state/stratus/domains`.
+ */
+export function domainsRoot_of(env = process.env) {
+    return path.join(env['XDG_STATE_HOME'] || path.join(os.homedir(), '.local', 'state'), 'stratus', 'domains');
+}
+/** A domain name is a DNS label: lower-case letters, digits and hyphens, at most 54. */
+export const DOMAIN_NAME = /^[a-z]([a-z0-9-]{0,52}[a-z0-9])?$/;
+/**
+ * Writes a file whole or not at all, readable by its owner only.
+ *
+ * @param file - Where.
+ * @param text - What.
+ */
+function file_writeAtomic(file, text) {
+    const temporary = `${file}.${process.pid}.tmp`;
+    fs.writeFileSync(temporary, text, { mode: 0o600 });
+    fs.renameSync(temporary, file);
+}
+/** The domains this daemon builds, on its host. */
+export class DomainStore {
+    root;
+    /**
+     * @param root - The folder the domains live in.
+     */
+    constructor(root) {
+        this.root = root;
+    }
+    /**
+     * A domain's folder.
+     *
+     * @param name - The domain.
+     * @returns Its folder.
+     */
+    folder_of(name) {
+        return path.join(this.root, name);
+    }
+    /** The names of the domains kept, sorted. */
+    names_list() {
+        if (!fs.existsSync(this.root))
+            return [];
+        return fs.readdirSync(this.root).filter((name) => fs.existsSync(path.join(this.root, name, 'state.json'))).sort();
+    }
+    /**
+     * Makes a domain.
+     *
+     * @param record - Its first state.
+     * @param spec - Its spec.
+     * @throws Error - When one of that name is already kept.
+     */
+    create(record, spec) {
+        const folder = this.folder_of(record.name);
+        if (fs.existsSync(path.join(folder, 'state.json')))
+            throw new Error(`${record.name}: a domain of that name is already kept (${folder})`);
+        fs.mkdirSync(path.join(folder, 'auth'), { recursive: true, mode: 0o700 });
+        file_writeAtomic(path.join(folder, 'spec.yaml'), specYaml_render(spec));
+        this.record_write(record);
+    }
+    /**
+     * A domain's state.
+     *
+     * @param name - The domain.
+     * @returns Its record, or null when none is kept.
+     */
+    record_read(name) {
+        const file = path.join(this.folder_of(name), 'state.json');
+        if (!fs.existsSync(file))
+            return null;
+        return JSON.parse(fs.readFileSync(file, 'utf-8'));
+    }
+    /**
+     * Saves a domain's state.
+     *
+     * @param record - Its record.
+     */
+    record_write(record) {
+        file_writeAtomic(path.join(this.folder_of(record.name), 'state.json'), `${JSON.stringify(record, null, 2)}\n`);
+    }
+    /**
+     * Changes a domain's state and saves it.
+     *
+     * @param name - The domain.
+     * @param change - What to change.
+     * @returns The record as saved.
+     * @throws Error - When none is kept.
+     */
+    record_update(name, change) {
+        const record = this.record_read(name);
+        if (record === null)
+            throw new Error(`${name}: no such domain`);
+        change(record);
+        this.record_write(record);
+        return record;
+    }
+    /**
+     * A domain's spec, as written and as read.
+     *
+     * @param name - The domain.
+     * @returns The text and the spec (or why it does not read), or null when there is no file.
+     */
+    spec_read(name) {
+        const file = path.join(this.folder_of(name), 'spec.yaml');
+        if (!fs.existsSync(file))
+            return null;
+        const text = fs.readFileSync(file, 'utf-8');
+        const parsed = specYaml_parse(text);
+        return 'spec' in parsed ? { text, spec: parsed.spec } : { text, spec: null, error: parsed.error };
+    }
+    /**
+     * Writes one of the domain's own files (`plan.json`), whole.
+     *
+     * @param name - The domain.
+     * @param file - The file's name in the domain's folder.
+     * @param text - Its content.
+     */
+    file_write(name, file, text) {
+        file_writeAtomic(path.join(this.folder_of(name), file), text);
+    }
+    /**
+     * Reads one of the domain's own files.
+     *
+     * @param name - The domain.
+     * @param file - The file's name in the domain's folder.
+     * @returns Its content, or null when it is not there.
+     */
+    file_read(name, file) {
+        const where = path.join(this.folder_of(name), file);
+        return fs.existsSync(where) ? fs.readFileSync(where, 'utf-8') : null;
+    }
+    /**
+     * Keeps a secret the build fetched.
+     *
+     * @param name - The domain.
+     * @param file - Its file name under `auth/`.
+     * @param text - Its content.
+     */
+    secret_write(name, file, text) {
+        const folder = path.join(this.folder_of(name), 'auth');
+        fs.mkdirSync(folder, { recursive: true, mode: 0o700 });
+        file_writeAtomic(path.join(folder, file), text);
+    }
+    /**
+     * Reads a secret the build kept, for the build's own next step; never served.
+     *
+     * @param name - The domain.
+     * @param file - Its file name under `auth/`.
+     * @returns Its content, or null.
+     */
+    secret_read(name, file) {
+        const where = path.join(this.folder_of(name), 'auth', file);
+        return fs.existsSync(where) ? fs.readFileSync(where, 'utf-8') : null;
+    }
+    /**
+     * The secrets kept, by name and host path; their content is never read here.
+     *
+     * @param name - The domain.
+     * @returns The files.
+     */
+    secrets_list(name) {
+        const folder = path.join(this.folder_of(name), 'auth');
+        if (!fs.existsSync(folder))
+            return [];
+        return fs.readdirSync(folder).sort().map((file) => ({ name: file, hostPath: path.join(folder, file) }));
+    }
+}
+//# sourceMappingURL=state.js.map

package/dist/domain/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../src/domain/state.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,eAAe,EAAmB,MAAM,WAAW,CAAC;AAyC7E;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,MAAyB,OAAO,CAAC,GAAG;IACjE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AAC9G,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,MAAM,WAAW,GAAW,mCAAmC,CAAC;AAEvE;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,IAAY,EAAE,IAAY;IAClD,MAAM,SAAS,GAAW,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACvD,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,mDAAmD;AACnD,MAAM,OAAO,WAAW;IAID;IAHrB;;OAEG;IACH,YAAqB,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAErC;;;;;OAKG;IACH,SAAS,CAAC,IAAY;QACpB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,6CAA6C;IAC7C,UAAU;QACR,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACzC,OAAO,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrI,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,MAAoB,EAAE,IAAgB;QAC3C,MAAM,MAAM,GAAW,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,CAAC,IAAI,4CAA4C,MAAM,GAAG,CAAC,CAAC;QACzI,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1E,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED;;;;;OAKG;IACH,WAAW,CAAC,IAAY;QACtB,MAAM,IAAI,GAAW,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC;QACnE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAiB,CAAC;IACpE,CAAC;IAED;;;;OAIG;IACH,YAAY,CAAC,MAAoB;QAC/B,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACjH,CAAC;IAED;;;;;;;OAOG;IACH,aAAa,CAAC,IAAY,EAAE,MAAsC;QAChE,MAAM,MAAM,GAAwB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,MAAM,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,kBAAkB,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,CAAC;QACf,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACH,SAAS,CAAC,IAAY;QACpB,MAAM,IAAI,GAAW,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC;QAClE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,IAAI,GAAW,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IACpG,CAAC;IAED;;;;;;OAMG;IACH,UAAU,CAAC,IAAY,EAAE,IAAY,EAAE,IAAY;QACjD,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;IAED;;;;;;OAMG;IACH,SAAS,CAAC,IAAY,EAAE,IAAY;QAClC,MAAM,KAAK,GAAW,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAC5D,OAAO,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,CAAC;IAED;;;;;;OAMG;IACH,YAAY,CAAC,IAAY,EAAE,IAAY,EAAE,IAAY;QACnD,MAAM,MAAM,GAAW,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/D,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IAED;;;;;;OAMG;IACH,WAAW,CAAC,IAAY,EAAE,IAAY;QACpC,MAAM,KAAK,GAAW,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACpE,OAAO,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,IAAY;QACvB,MAAM,MAAM,GAAW,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QACtC,OAAO,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAY,EAAsC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACtJ,CAAC;CACF"}

package/dist/domain/steps.d.ts

@@ -0,0 +1,82 @@
+/**
+ * @file A domain's build steps, written once over the three drivers
+ * (docs/stratus.adoc, D3): their names and order, what each asks of the
+ * cloud's builder and of the installer, and the run that takes a domain from
+ * its first step not done to where it was asked to stop.
+ *
+ * A run is one of the core runner's jobs (`/proc/steps/<domain>-build`): it
+ * outlives the command that started it and every surface. It stops on its
+ * own before the first step that bills until the operator has accepted the
+ * cost, which only the foreground `domain build` asks; and before a step
+ * this session does not have yet. Every step records what later ones need in
+ * the domain's state, so a run picked up after a restart starts from the
+ * first step not done and repeats nothing the cloud already holds.
+ *
+ * The order and the waits are `harbor-oci`'s, proven live once: the hosts
+ * have 45 minutes to register, the install 120.
+ *
+ * @module
+ */
+import type { JobRun } from '@fnndsc/brasa/core';
+import { type CloudBuilder } from '../cloud/builder.js';
+import type { Installer } from '../installer/installer.js';
+import type { DomainRecord, DomainStore } from './state.js';
+/** The build's steps, in order: the machine, then ChRIS on it. */
+export declare const BUILD_STEPS: ReadonlyArray<string>;
+/** The first step that bills: the run stops before it until the cost is accepted. */
+export declare const FIRST_BILLING_STEP: string;
+/** The steps this session has; the run stops before any other. */
+export declare const STEPS_WRITTEN: ReadonlyArray<string>;
+/** The task source the runs are kept in. */
+export declare const STEPS_SOURCE: string;
+/** What the steps run over. */
+export interface BuildDeps {
+    readonly store: DomainStore;
+    readonly builder: CloudBuilder;
+    readonly installer: Installer;
+    /** How many availability domains the region has. */
+    readonly zones: number;
+    /** The OpenShift version a cluster is made at. */
+    readonly version: string;
+    /** How often a wait asks again, in milliseconds. */
+    readonly pollMs: number;
+    /** How long the hosts have to register, in milliseconds. */
+    readonly hostsWaitMs: number;
+    /** How long the install has, in milliseconds. */
+    readonly installWaitMs: number;
+}
+/** The waits `harbor-oci` proved, polled each minute. */
+export declare const BUILD_WAITS: Pick<BuildDeps, 'pollMs' | 'hostsWaitMs' | 'installWaitMs'>;
+/**
+ * A run's job id.
+ *
+ * @param domain - The domain.
+ * @returns `<domain>-build`.
+ */
+export declare function buildJob_id(domain: string): string;
+/**
+ * The first step not done.
+ *
+ * @param record - The domain's state.
+ * @returns The step, or null when every step is done.
+ */
+export declare function stepNext_of(record: DomainRecord): string | null;
+/**
+ * The run that builds a domain from its first step not done.
+ *
+ * @param name - The domain.
+ * @param through - The last step to run; absent, as far as this session's steps go.
+ * @param deps - What the steps run over.
+ * @returns The job's work.
+ */
+export declare function buildRun_make(name: string, through: string | undefined, deps: BuildDeps): JobRun;
+/**
+ * The run that plans a domain against its stack and records the plan:
+ * an adopted domain's, or a built one's re-plan. It applies nothing.
+ *
+ * @param name - The domain.
+ * @param builder - The cloud's build half.
+ * @param store - The domains.
+ * @returns The job's work.
+ */
+export declare function planRun_make(name: string, builder: CloudBuilder, store: DomainStore): JobRun;

package/dist/domain/steps.js

@@ -0,0 +1,311 @@
+import { planCounts_alter, planCounts_of, planCounts_words } from '../cloud/builder.js';
+import { specNodes_of } from './spec.js';
+/** The build's steps, in order: the machine, then ChRIS on it. */
+export const BUILD_STEPS = ['preflight', 'cluster', 'iso', 'infra-plan', 'infra-apply', 'dns', 'manifests', 'hosts', 'run', 'postinstall', 'verify', 'chris-deploy', 'chris-seed', 'smoke'];
+/** The first step that bills: the run stops before it until the cost is accepted. */
+export const FIRST_BILLING_STEP = 'infra-apply';
+/** The steps this session has; the run stops before any other. */
+export const STEPS_WRITTEN = ['preflight', 'cluster', 'iso', 'infra-plan', 'infra-apply', 'dns', 'manifests', 'hosts', 'run'];
+/** The task source the runs are kept in. */
+export const STEPS_SOURCE = 'steps';
+/** The waits `harbor-oci` proved, polled each minute. */
+export const BUILD_WAITS = { pollMs: 60_000, hostsWaitMs: 45 * 60_000, installWaitMs: 120 * 60_000 };
+/**
+ * A run's job id.
+ *
+ * @param domain - The domain.
+ * @returns `<domain>-build`.
+ */
+export function buildJob_id(domain) {
+    return `${domain}-build`;
+}
+/**
+ * The first step not done.
+ *
+ * @param record - The domain's state.
+ * @returns The step, or null when every step is done.
+ */
+export function stepNext_of(record) {
+    return BUILD_STEPS.find((step) => record.steps[step]?.state !== 'done') ?? null;
+}
+/**
+ * Waits a poll, unless stopped.
+ *
+ * @param ms - How long.
+ * @param signal - Stops it.
+ */
+function poll_wait(ms, signal) {
+    if (ms <= 0 || signal.aborted)
+        return Promise.resolve();
+    return new Promise((resolve) => {
+        const timer = setTimeout(resolve, ms);
+        signal.addEventListener('abort', () => { clearTimeout(timer); resolve(); }, { once: true });
+    });
+}
+/**
+ * An id a later step needs, or why it is missing.
+ *
+ * @param record - The domain's state.
+ * @param key - The id.
+ * @param step - The step that records it.
+ * @returns The id.
+ * @throws Error - When it was never recorded.
+ */
+function id_need(record, key, step) {
+    const value = record.ids[key];
+    if (value === undefined)
+        throw new Error(`no ${key} recorded: ${step} has not been done`);
+    return value;
+}
+/**
+ * The installer's ids, or why they are missing.
+ *
+ * @param record - The domain's state.
+ * @returns The ids.
+ */
+function ids_need(record) {
+    return { clusterId: id_need(record, 'clusterId', 'cluster'), infraEnvId: id_need(record, 'infraEnvId', 'cluster') };
+}
+/** Each step's work. */
+const STEP_WORK = {
+    preflight: async (call) => {
+        const record = call.record();
+        const checks = await call.deps.builder.preflight({ domain: call.name, spec: call.spec, region: record.region, baseDomain: record.baseDomain, compartmentId: record.compartmentId ?? '' }, call);
+        const failed = checks.filter((check) => !check.ok);
+        if (failed.length > 0)
+            throw new Error(`preflight: ${failed.map((check) => `${check.name}: ${check.note}`).join('; ')}`);
+        return `${checks.length} checks pass`;
+    },
+    cluster: async (call) => {
+        const record = call.record();
+        if (record.ids['clusterId'] !== undefined)
+            return `already made: ${record.ids['clusterId']}`;
+        const made = await call.deps.installer.cluster_create({ name: call.name, baseDomain: record.baseDomain, version: call.deps.version, controlPlaneCount: call.spec.controlPlane.count });
+        call.remember({ clusterId: made.clusterId, infraEnvId: made.infraEnvId });
+        call.log(`installer: cluster ${made.clusterId}, infra-env ${made.infraEnvId}`);
+        return `cluster ${made.clusterId}`;
+    },
+    iso: async (call) => {
+        const record = call.record();
+        const image = await call.deps.installer.isoUrl_get(ids_need(record));
+        const stored = await call.deps.builder.iso_store({ domain: call.name, url: image.url, region: record.region, compartmentId: record.compartmentId ?? '' }, call);
+        call.remember({ isoObject: stored.object, isoExpires: stored.expires, isoLinkId: stored.linkId });
+        // The link opens the image to anyone holding it: a secret, kept on the host.
+        call.deps.store.secret_write(call.name, 'iso-link', stored.link);
+        return `${stored.object}, linked until ${stored.expires.slice(0, 10)}`;
+    },
+    'infra-plan': async (call) => {
+        const record = call.record();
+        const plan = await call.deps.builder.infra_plan({
+            domain: call.name, spec: call.spec, region: record.region, isoObject: id_need(record, 'isoObject', 'iso'),
+            baseDomain: record.baseDomain, isoLink: call.deps.store.secret_read(call.name, 'iso-link') ?? '',
+            ...(record.compartmentId !== undefined ? { compartmentId: record.compartmentId } : {}),
+            ...(record.ids['stackRef'] !== undefined ? { stackRef: record.ids['stackRef'] } : {}),
+        }, call);
+        const counts = planCounts_of(plan);
+        call.deps.store.file_write(call.name, 'plan.json', `${JSON.stringify(plan, null, 2)}\n`);
+        call.remember({ planRef: plan.ref, ...(plan.stackRef !== undefined ? { stackRef: plan.stackRef } : {}) });
+        if (planCounts_alter(counts))
+            throw new Error(`the plan touches what exists (${planCounts_words(counts)}): refused`);
+        return planCounts_words(counts);
+    },
+    'infra-apply': async (call) => {
+        const record = call.record();
+        if (record.ids['appliedAt'] !== undefined)
+            return `already applied: ${record.ids['stackRef'] ?? ''}`;
+        const text = call.deps.store.file_read(call.name, 'plan.json');
+        if (text === null)
+            throw new Error('no plan recorded: infra-plan has not been done');
+        const plan = JSON.parse(text);
+        const outputs = await call.deps.builder.infra_apply({ domain: call.name, plan, region: record.region, ...(record.ids['stackRef'] !== undefined ? { stackRef: record.ids['stackRef'] } : {}) }, call);
+        call.remember({ stackRef: outputs.stackRef, apiIp: outputs.apiIp, apiIntIp: outputs.apiIntIp, appsIp: outputs.appsIp, appliedAt: new Date().toISOString() });
+        // The manifests the stack made, for the manifests step, kept with the domain.
+        call.deps.store.file_write(call.name, 'manifests.json', `${JSON.stringify(outputs.manifests, null, 2)}\n`);
+        return `${planCounts_of(plan).create} created; billing since ${new Date().toISOString().slice(0, 16)}`;
+    },
+    dns: async (call) => {
+        const record = call.record();
+        const outputs = { stackRef: id_need(record, 'stackRef', 'infra-apply'), apiIp: id_need(record, 'apiIp', 'infra-apply'), apiIntIp: id_need(record, 'apiIntIp', 'infra-apply'), appsIp: id_need(record, 'appsIp', 'infra-apply'), manifests: [] };
+        const names = await call.deps.builder.dns_upsert({ domain: call.name, baseDomain: record.baseDomain, outputs, compartmentId: record.compartmentId ?? '', region: record.region }, call);
+        return `${names.length} records`;
+    },
+    manifests: async (call) => {
+        const text = call.deps.store.file_read(call.name, 'manifests.json');
+        if (text === null)
+            throw new Error('no manifests recorded: infra-apply has not been done');
+        const manifests = JSON.parse(text);
+        await call.deps.installer.manifests_upload(ids_need(call.record()), manifests);
+        call.log(`sent ${manifests.map((manifest) => manifest.name).join(', ')}`);
+        return `${manifests.length} platform manifests sent`;
+    },
+    hosts: async (call) => {
+        const ids = ids_need(call.record());
+        const nodes = specNodes_of(call.name, call.spec, call.deps.zones);
+        const deadline = Date.now() + call.deps.hostsWaitMs;
+        const assigned = new Set();
+        let seen = -1;
+        while (!call.signal.aborted) {
+            const hosts = await call.deps.installer.hosts_list(ids);
+            for (const host of hosts.filter((entry) => !assigned.has(entry.id))) {
+                const role = nodes.find((node) => node.name === host.name)?.role === 'worker' ? 'worker' : 'master';
+                if (host.role !== role)
+                    await call.deps.installer.role_set(ids, host, role);
+                assigned.add(host.id);
+                call.log(`${host.name} registered${host.zone !== '' ? ` in ${host.zone}` : ''} · role ${role}`);
+            }
+            const ready = hosts.filter((host) => host.ready).length;
+            if (ready !== seen) {
+                call.progress({ current: ready, total: nodes.length, unit: 'nodes' });
+                seen = ready;
+            }
+            // Every host registered and passing the installer's checks (Assisted: `known`).
+            if (hosts.length >= nodes.length && ready >= nodes.length)
+                return `${hosts.length} of ${nodes.length} hosts registered and ready`;
+            if (Date.now() >= deadline)
+                throw new Error(`${hosts.length} of ${nodes.length} hosts registered, ${ready} ready, after ${Math.round(call.deps.hostsWaitMs / 60_000)} minutes`);
+            await poll_wait(call.deps.pollMs, call.signal);
+        }
+        return 'stopped while waiting for hosts';
+    },
+    run: async (call) => {
+        const record = call.record();
+        const ids = ids_need(record);
+        const deadline = Date.now() + call.deps.installWaitMs;
+        let last = -1;
+        while (!call.signal.aborted) {
+            const status = await call.deps.installer.install_status(ids);
+            // The installer says when the cluster is ready; the install starts then, once.
+            if (status.state === 'ready' && call.record().ids['installStarted'] === undefined) {
+                await call.deps.installer.install_start(ids);
+                call.remember({ installStarted: new Date().toISOString() });
+                call.log('install started');
+                continue;
+            }
+            if (status.percent !== last) {
+                call.progress({ current: status.percent, total: 100 });
+                call.log(`install ${status.percent}% · ${status.note}`);
+                last = status.percent;
+            }
+            if (status.state === 'installed') {
+                call.deps.store.secret_write(call.name, 'kubeconfig', await call.deps.installer.kubeconfig_get(ids));
+                call.deps.store.secret_write(call.name, 'kubeadmin-password', `${(await call.deps.installer.credentials_get(ids)).password}\n`);
+                return 'installed; the kubeconfig and the administrator\'s password are on the host';
+            }
+            if (status.state === 'error')
+                throw new Error(`the install failed: ${status.note}`);
+            if (Date.now() >= deadline)
+                throw new Error(`the install was at ${status.percent}% after ${Math.round(call.deps.installWaitMs / 60_000)} minutes`);
+            await poll_wait(call.deps.pollMs, call.signal);
+        }
+        return 'stopped while installing';
+    },
+};
+/**
+ * Records a step's state.
+ *
+ * @param store - The domains.
+ * @param name - The domain.
+ * @param step - The step.
+ * @param change - What changed.
+ */
+function step_record(store, name, step, change) {
+    store.record_update(name, (record) => { record.steps[step] = { ...record.steps[step], ...change }; });
+}
+/**
+ * The run that builds a domain from its first step not done.
+ *
+ * @param name - The domain.
+ * @param through - The last step to run; absent, as far as this session's steps go.
+ * @param deps - What the steps run over.
+ * @returns The job's work.
+ */
+export function buildRun_make(name, through, deps) {
+    return async (context) => {
+        const spec = deps.store.spec_read(name)?.spec ?? null;
+        if (spec === null)
+            throw new Error(`${name}: its spec.yaml does not read`);
+        if (deps.store.record_read(name)?.adopted !== undefined)
+            throw new Error(`${name} was adopted: building on it is refused until it is allowed by name`);
+        if (deps.store.record_read(name)?.gone !== undefined)
+            throw new Error(`${name} was torn down: domain new makes another`);
+        for (;;) {
+            if (context.signal.aborted)
+                return;
+            const record = deps.store.record_read(name);
+            if (record === null)
+                throw new Error(`${name}: no such domain`);
+            const step = stepNext_of(record);
+            if (step === null) {
+                context.log_write('every step is done');
+                return;
+            }
+            if (!STEPS_WRITTEN.includes(step)) {
+                context.log_write(`stopping before ${step}: not a step this session has yet`);
+                context.data_set('stoppedBefore', step);
+                return;
+            }
+            if (step === FIRST_BILLING_STEP && record.billingAccepted === undefined) {
+                context.log_write(`stopping before ${step}: it starts billing, and waits on the operator's answer (domain build ${name})`);
+                context.data_set('stoppedBefore', step);
+                return;
+            }
+            context.data_set('step', step);
+            step_record(deps.store, name, step, { state: 'running', started: new Date().toISOString() });
+            context.log_write(`${step}: started`);
+            const call = {
+                name, spec, deps,
+                log: (line) => context.log_write(`${step}: ${line}`),
+                signal: context.signal,
+                record: () => deps.store.record_read(name),
+                remember: (ids) => { deps.store.record_update(name, (current) => { Object.assign(current.ids, ids); }); },
+                progress: (progress) => context.progress_set(progress),
+            };
+            let note;
+            try {
+                note = await STEP_WORK[step](call);
+            }
+            catch (error) {
+                const reason = error instanceof Error ? error.message : String(error);
+                step_record(deps.store, name, step, { state: 'failed', ended: new Date().toISOString(), note: reason });
+                throw new Error(`${step}: ${reason}`);
+            }
+            if (context.signal.aborted) {
+                step_record(deps.store, name, step, { state: 'not done', note: 'stopped when asked' });
+                return;
+            }
+            step_record(deps.store, name, step, { state: 'done', ended: new Date().toISOString(), note });
+            context.log_write(`${step}: done · ${note}`);
+            if (step === through) {
+                context.data_set('stoppedBefore', stepNext_of(deps.store.record_read(name)) ?? '');
+                return;
+            }
+        }
+    };
+}
+/**
+ * The run that plans a domain against its stack and records the plan:
+ * an adopted domain's, or a built one's re-plan. It applies nothing.
+ *
+ * @param name - The domain.
+ * @param builder - The cloud's build half.
+ * @param store - The domains.
+ * @returns The job's work.
+ */
+export function planRun_make(name, builder, store) {
+    return async (context) => {
+        const record = store.record_read(name);
+        const spec = store.spec_read(name)?.spec ?? null;
+        if (record === null || spec === null)
+            throw new Error(`${name}: no such domain, or its spec.yaml does not read`);
+        const stackRef = record.ids['stackRef'];
+        if (stackRef === undefined)
+            throw new Error(`${name}: no stack yet`);
+        const plan = await builder.infra_plan({ domain: name, spec, region: record.region, isoObject: record.ids['isoObject'] ?? '', stackRef }, { log: (line) => context.log_write(line), signal: context.signal });
+        if (context.signal.aborted)
+            return;
+        store.file_write(name, 'plan.json', `${JSON.stringify(plan, null, 2)}\n`);
+        const counts = planCounts_of(plan);
+        context.log_write(`plan: ${planCounts_words(counts)}`);
+    };
+}
+//# sourceMappingURL=steps.js.map

package/dist/domain/steps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"steps.js","sourceRoot":"","sources":["../../src/domain/steps.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,gBAAgB,EAA6F,MAAM,qBAAqB,CAAC;AAEnL,OAAO,EAAE,YAAY,EAAkC,MAAM,WAAW,CAAC;AAGzE,kEAAkE;AAClE,MAAM,CAAC,MAAM,WAAW,GAA0B,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;AAEnN,qFAAqF;AACrF,MAAM,CAAC,MAAM,kBAAkB,GAAW,aAAa,CAAC;AAExD,kEAAkE;AAClE,MAAM,CAAC,MAAM,aAAa,GAA0B,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;AAErJ,4CAA4C;AAC5C,MAAM,CAAC,MAAM,YAAY,GAAW,OAAO,CAAC;AAmB5C,yDAAyD;AACzD,MAAM,CAAC,MAAM,WAAW,GAAgE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,GAAG,GAAG,MAAM,EAAE,CAAC;AAElK;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,OAAO,GAAG,MAAM,QAAQ,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,MAAoB;IAC9C,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC;AACnG,CAAC;AAYD;;;;;GAKG;AACH,SAAS,SAAS,CAAC,EAAU,EAAE,MAAmB;IAChD,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IACxD,OAAO,IAAI,OAAO,CAAO,CAAC,OAAmB,EAAQ,EAAE;QACrD,MAAM,KAAK,GAAkC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAS,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACpG,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,OAAO,CAAC,MAAoB,EAAE,GAAW,EAAE,IAAY;IAC9D,MAAM,KAAK,GAAuB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc,IAAI,oBAAoB,CAAC,CAAC;IAC1F,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,MAAoB;IACpC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,CAAC;AACtH,CAAC;AAED,wBAAwB;AACxB,MAAM,SAAS,GAAkE;IAC/E,SAAS,EAAE,KAAK,EAAE,IAAc,EAAmB,EAAE;QACnD,MAAM,MAAM,GAAiB,IAAI,CAAC,MAAM,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAqB,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAClN,MAAM,MAAM,GAAqB,MAAM,CAAC,MAAM,CAAC,CAAC,KAAqB,EAAW,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9F,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,cAAc,MAAM,CAAC,GAAG,CAAC,CAAC,KAAqB,EAAU,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjJ,OAAO,GAAG,MAAM,CAAC,MAAM,cAAc,CAAC;IACxC,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAc,EAAmB,EAAE;QACjD,MAAM,MAAM,GAAiB,IAAI,CAAC,MAAM,EAAE,CAAC;QAC3C,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,SAAS;YAAE,OAAO,iBAAiB,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC;QACvL,IAAI,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,GAAG,CAAC,sBAAsB,IAAI,CAAC,SAAS,eAAe,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC/E,OAAO,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;IACrC,CAAC;IACD,GAAG,EAAE,KAAK,EAAE,IAAc,EAAmB,EAAE;QAC7C,MAAM,MAAM,GAAiB,IAAI,CAAC,MAAM,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAChK,IAAI,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAClG,6EAA6E;QAC7E,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACjE,OAAO,GAAG,MAAM,CAAC,MAAM,kBAAkB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACzE,CAAC;IACD,YAAY,EAAE,KAAK,EAAE,IAAc,EAAmB,EAAE;QACtD,MAAM,MAAM,GAAiB,IAAI,CAAC,MAAM,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAc,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;YACzD,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC;YACzG,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE;YAChG,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtF,EAAE,IAAI,CAAC,CAAC;QACT,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACzF,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1G,IAAI,gBAAgB,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,gBAAgB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACrH,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IACD,aAAa,EAAE,KAAK,EAAE,IAAc,EAAmB,EAAE;QACvD,MAAM,MAAM,GAAiB,IAAI,CAAC,MAAM,EAAE,CAAC;QAC3C,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,SAAS;YAAE,OAAO,oBAAoB,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QACrG,MAAM,IAAI,GAAkB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC9E,IAAI,IAAI,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACrF,MAAM,IAAI,GAAc,IAAI,CAAC,KAAK,CAAC,IAAI,CAAc,CAAC;QACtD,MAAM,OAAO,GAAiB,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACnN,IAAI,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC7J,8EAA8E;QAC9E,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3G,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,MAAM,2BAA2B,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACzG,CAAC;IACD,GAAG,EAAE,KAAK,EAAE,IAAc,EAAmB,EAAE;QAC7C,MAAM,MAAM,GAAiB,IAAI,CAAC,MAAM,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAiB,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC9P,MAAM,KAAK,GAAa,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;QAClM,OAAO,GAAG,KAAK,CAAC,MAAM,UAAU,CAAC;IACnC,CAAC;IACD,SAAS,EAAE,KAAK,EAAE,IAAc,EAAmB,EAAE;QACnD,MAAM,IAAI,GAAkB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QACnF,IAAI,IAAI,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC3F,MAAM,SAAS,GAAuB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuB,CAAC;QAC7E,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QAC/E,IAAI,CAAC,GAAG,CAAC,QAAQ,SAAS,CAAC,GAAG,CAAC,CAAC,QAA0B,EAAU,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpG,OAAO,GAAG,SAAS,CAAC,MAAM,0BAA0B,CAAC;IACvD,CAAC;IACD,KAAK,EAAE,KAAK,EAAE,IAAc,EAAmB,EAAE;QAC/C,MAAM,GAAG,GAAiB,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAClD,MAAM,KAAK,GAAe,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAW,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;QAC5D,MAAM,QAAQ,GAAgB,IAAI,GAAG,EAAE,CAAC;QACxC,IAAI,IAAI,GAAW,CAAC,CAAC,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAoB,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACzE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,KAAoB,EAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC5F,MAAM,IAAI,GAAwB,KAAK,CAAC,IAAI,CAAC,CAAC,IAAc,EAAW,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAC5I,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;oBAAE,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC5E,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACtB,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,cAAc,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;YAClG,CAAC;YACD,MAAM,KAAK,GAAW,KAAK,CAAC,MAAM,CAAC,CAAC,IAAmB,EAAW,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;YACxF,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;gBAAC,IAAI,GAAG,KAAK,CAAC;YAAC,CAAC;YAC5G,gFAAgF;YAChF,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM;gBAAE,OAAO,GAAG,KAAK,CAAC,MAAM,OAAO,KAAK,CAAC,MAAM,6BAA6B,CAAC;YAClI,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC,MAAM,OAAO,KAAK,CAAC,MAAM,sBAAsB,KAAK,iBAAiB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;YAChL,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,iCAAiC,CAAC;IAC3C,CAAC;IACD,GAAG,EAAE,KAAK,EAAE,IAAc,EAAmB,EAAE;QAC7C,MAAM,MAAM,GAAiB,IAAI,CAAC,MAAM,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAiB,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAW,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;QAC9D,IAAI,IAAI,GAAW,CAAC,CAAC,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAkB,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YAC5E,+EAA+E;YAC/E,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,SAAS,EAAE,CAAC;gBAClF,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;gBAC7C,IAAI,CAAC,QAAQ,CAAC,EAAE,cAAc,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;gBAC5D,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;gBAC5B,SAAS;YACX,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;gBAAC,IAAI,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,OAAO,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBAAC,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC;YAAC,CAAC;YACxK,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;gBACjC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;gBACrG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;gBAChI,OAAO,6EAA6E,CAAC;YACvF,CAAC;YACD,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACpF,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,CAAC,OAAO,WAAW,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;YACnJ,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,0BAA0B,CAAC;IACpC,CAAC;CACF,CAAC;AAEF;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,KAAkB,EAAE,IAAY,EAAE,IAAY,EAAE,MAAkB;IACrF,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,MAAoB,EAAQ,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5H,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,OAA2B,EAAE,IAAe;IACtF,OAAO,KAAK,EAAE,OAAmB,EAAiB,EAAE;QAClD,MAAM,IAAI,GAAsB,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC;QACzE,IAAI,IAAI,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,+BAA+B,CAAC,CAAC;QAC3E,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,qEAAqE,CAAC,CAAC;QACvJ,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,0CAA0C,CAAC,CAAC;QACzH,SAAS,CAAC;YACR,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO;YACnC,MAAM,MAAM,GAAwB,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACjE,IAAI,MAAM,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,kBAAkB,CAAC,CAAC;YAChE,MAAM,IAAI,GAAkB,WAAW,CAAC,MAAM,CAAC,CAAC;YAChD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAAC,OAAO,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACvE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAC,OAAO,CAAC,SAAS,CAAC,mBAAmB,IAAI,mCAAmC,CAAC,CAAC;gBAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACtK,IAAI,IAAI,KAAK,kBAAkB,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;gBACxE,OAAO,CAAC,SAAS,CAAC,mBAAmB,IAAI,yEAAyE,IAAI,GAAG,CAAC,CAAC;gBAC3H,OAAO,CAAC,QAAQ,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;gBACxC,OAAO;YACT,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC/B,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC7F,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC;YACtC,MAAM,IAAI,GAAa;gBACrB,IAAI,EAAE,IAAI,EAAE,IAAI;gBAChB,GAAG,EAAE,CAAC,IAAY,EAAQ,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClE,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,MAAM,EAAE,GAAiB,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAiB;gBACxE,QAAQ,EAAE,CAAC,GAA2B,EAAQ,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,OAAqB,EAAQ,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3J,QAAQ,EAAE,CAAC,QAAQ,EAAQ,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC;aAC7D,CAAC;YACF,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAO,SAAS,CAAC,IAAI,CAAyC,CAAC,IAAI,CAAC,CAAC;YAC9E,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAW,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC9E,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;gBACxG,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;YACxC,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC3B,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC;gBACvF,OAAO;YACT,CAAC;YACD,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9F,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,YAAY,IAAI,EAAE,CAAC,CAAC;YAC7C,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAiB,CAAC,IAAI,EAAE,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;QACvI,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,OAAqB,EAAE,KAAkB;IAClF,OAAO,KAAK,EAAE,OAAmB,EAAiB,EAAE;QAClD,MAAM,MAAM,GAAwB,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAsB,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC;QACpE,IAAI,MAAM,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,kDAAkD,CAAC,CAAC;QACjH,MAAM,QAAQ,GAAuB,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5D,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,gBAAgB,CAAC,CAAC;QACrE,MAAM,IAAI,GAAc,MAAM,OAAO,CAAC,UAAU,CAC9C,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EACjG,EAAE,GAAG,EAAE,CAAC,IAAY,EAAQ,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CACjF,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QACnC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,CAAC,SAAS,CAAC,SAAS,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC;AACJ,CAAC"}

package/dist/domain/teardown.d.ts

@@ -0,0 +1,38 @@
+/**
+ * @file A domain's teardown, its first form (docs/stratus.adoc, D6, decided
+ * 2026-10-22): what this daemon built, removed, and nothing else.
+ *
+ * The stack's own resources go by a destroy job; then the cluster's DNS
+ * records, the discovery image and its link, the volumes the cluster's CSI
+ * driver made for its claims (which the stack never knew), and the
+ * installer's records. The CSI volumes are named by the cluster itself, read
+ * from its PersistentVolumes before the destroy: OCI's attribution tag on them
+ * is the same for every cluster, so it cannot say whose they are.
+ *
+ * @module
+ */
+import type { JobRun } from '@fnndsc/brasa/core';
+import type { KubeApi } from '../cluster/kube.js';
+import type { CloudBuilder } from '../cloud/builder.js';
+import type { Installer } from '../installer/installer.js';
+import type { DomainStore } from './state.js';
+/** The CSI driver whose volumes are the cloud's block volumes. */
+export declare const OCI_BLOCK_DRIVER: string;
+/**
+ * The block volumes a cluster's claims hold, from its PersistentVolumes.
+ *
+ * @param kube - The cluster.
+ * @returns The volumes' ids.
+ */
+export declare function clusterVolumes_read(kube: KubeApi): Promise<string[]>;
+/**
+ * The job that tears a domain down.
+ *
+ * @param store - The domains.
+ * @param builder - The cloud's build half.
+ * @param installer - The installer, or null when none is reachable.
+ * @param name - The domain.
+ * @param volumeIds - The cluster's own volumes, read before.
+ * @returns The job's work.
+ */
+export declare function teardownRun_make(store: DomainStore, builder: CloudBuilder, installer: Installer | null, name: string, volumeIds: ReadonlyArray<string>): JobRun;