@fnndsc/stratus 0.1.0 → 0.2.1

package/dist/domains/harborOci.js

@@ -0,0 +1,165 @@
+/**
+ * @file A Trusted Domain as a `harbor-oci` checkout leaves it on the host.
+ *
+ * The first domain stratus reads is the one `harbor-oci` built
+ * (docs/stratus.adoc, "What exists"): its `spec.yaml`, its settings
+ * (`config.env` under `config.local.env`), its state document
+ * (`state/harbor.json`), the Terraform state in the staged stack, and the
+ * credentials in `state/auth/`. This module reads them and nothing else.
+ *
+ * `harbor-oci` records no history of its steps: each step records only what
+ * a later step needs. So a step's state is read from that evidence (`done`
+ * with what shows it), and a step whose result is kept nowhere on the host
+ * is `unknown`, never guessed. Secrets never leave this module as text: the
+ * ISO link's URL is withheld from `state.json`, the credential files are
+ * named with their host path only, and the Terraform state is counted, never
+ * shown.
+ *
+ * @module
+ */
+import { existsSync, readFileSync, readdirSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+/** The build's steps, in the order `just install` runs them. */
+export const HARBOR_STEPS = ['preflight', 'cluster', 'iso', 'infra-plan', 'infra-apply', 'dns', 'manifests', 'hosts', 'run', 'postinstall', 'verify'];
+/** The settings a domain shows; every other key (credentials among them) stays on the host. */
+const SHOWN_SETTINGS = ['CLUSTER_NAME', 'BASE_DOMAIN', 'OCI_REGION', 'OCI_COMPARTMENT_OCID', 'OCP_VERSION', 'OCI_STACK_VERSION'];
+/** The fields of `state/harbor.json` that are secrets. */
+const SECRET_STATE_FIELDS = ['parUrl'];
+/**
+ * Reads `KEY=value` lines; comments, blanks and quotes handled as a shell
+ * `.env` writes them.
+ *
+ * @param text - The file's text.
+ * @returns The values, by key.
+ */
+export function envFile_parse(text) {
+    const values = {};
+    for (const raw of text.split('\n')) {
+        const line = raw.trim();
+        if (line === '' || line.startsWith('#'))
+            continue;
+        const equals = line.indexOf('=');
+        if (equals <= 0)
+            continue;
+        const key = line.slice(0, equals).trim().replace(/^export\s+/, '');
+        let value = line.slice(equals + 1).trim();
+        if ((value.startsWith('"') && value.endsWith('"')) || (value.startsWith("'") && value.endsWith("'")))
+            value = value.slice(1, -1);
+        values[key] = value;
+    }
+    return values;
+}
+/** A file's text, or null when it is not there. */
+function text_read(path) {
+    return existsSync(path) ? readFileSync(path, 'utf-8') : null;
+}
+/** The shown settings: `config.env`, then `config.local.env` over it, only the keys a domain shows. */
+function settings_read(root) {
+    const merged = {
+        ...envFile_parse(text_read(join(root, 'config.env')) ?? ''),
+        ...envFile_parse(text_read(join(root, 'config.local.env')) ?? ''),
+    };
+    const shown = {};
+    for (const key of SHOWN_SETTINGS)
+        if (merged[key] !== undefined && merged[key] !== '')
+            shown[key] = merged[key];
+    return shown;
+}
+/** The state document with its secrets replaced by where they are. */
+function state_read(root) {
+    const path = join(root, 'state', 'harbor.json');
+    const text = text_read(path);
+    if (text === null)
+        return null;
+    const state = JSON.parse(text);
+    for (const field of SECRET_STATE_FIELDS) {
+        if (state[field] !== undefined)
+            state[field] = `withheld: a secret, on the host in ${path}`;
+    }
+    return state;
+}
+/** How many resources a Terraform state holds; null when there is no state. */
+function terraformResources_count(stackDir) {
+    const text = text_read(join(stackDir, 'terraform.tfstate'));
+    if (text === null)
+        return null;
+    const resources = JSON.parse(text).resources;
+    return Array.isArray(resources) ? resources.length : 0;
+}
+/**
+ * Where each step stands, from the evidence the checkout keeps.
+ *
+ * @param root - The checkout.
+ * @param state - The state document as read (secrets withheld does not matter here).
+ * @param now - The clock.
+ * @returns One state per step, in build order.
+ */
+export function steps_read(root, state, now = new Date()) {
+    const known = (name, done, evidence) => ({ name, state: done ? 'done' : 'not done', evidence });
+    const unknown = (name, why) => ({ name, state: 'unknown', evidence: why });
+    const field = (key) => (typeof state?.[key] === 'string' ? state[key] : null);
+    const stackDir = field('stackDir');
+    const resources = stackDir !== null ? terraformResources_count(stackDir) : null;
+    const kubeconfig = join(root, 'state', 'auth', 'kubeconfig');
+    const steps = {
+        preflight: unknown('preflight', 'its checks are run live and not kept'),
+        cluster: known('cluster', field('assistedClusterId') !== null && field('assistedInfraEnvId') !== null, field('assistedClusterId') !== null ? `Assisted Installer cluster ${field('assistedClusterId')}` : 'no Assisted Installer cluster in state'),
+        iso: (() => {
+            const expires = field('parExpiresAt');
+            if (field('parId') === null)
+                return known('iso', false, 'no ISO link in state');
+            if (expires !== null && new Date(expires).getTime() < now.getTime())
+                return { name: 'iso', state: 'expired', evidence: `${field('isoObjectName') ?? 'the ISO'}: its link expired ${expires}` };
+            return known('iso', true, `${field('isoObjectName') ?? 'the ISO'}: link valid until ${expires ?? 'unknown'}`);
+        })(),
+        'infra-plan': known('infra-plan', stackDir !== null && existsSync(join(stackDir, 'harbor.auto.tfvars.json')), stackDir !== null ? `stack staged at ${stackDir}` : 'no stack staged'),
+        'infra-apply': known('infra-apply', (resources ?? 0) > 0, resources === null ? 'no Terraform state' : `Terraform state holds ${resources} resources`),
+        dns: unknown('dns', 'its records are in the zone, not in state; see dns/ in the compartment'),
+        manifests: unknown('manifests', 'pushed to the Assisted Installer, not kept on the host'),
+        hosts: unknown('hosts', 'host registration is the Assisted Installer\'s, not kept on the host'),
+        run: known('run', existsSync(kubeconfig), existsSync(kubeconfig) ? `kubeconfig saved at ${kubeconfig}` : 'no kubeconfig saved'),
+        postinstall: known('postinstall', false, 'a placeholder in harbor-oci, never run'),
+        verify: unknown('verify', 'its checks are run live and not kept'),
+    };
+    return HARBOR_STEPS.map((name, index) => ({ folder: `${String(index + 1).padStart(2, '0')}-${name}`, ...steps[name] }));
+}
+/** The credential files in `state/auth/`, by name and host path. */
+function secrets_read(root) {
+    const auth = join(root, 'state', 'auth');
+    if (!existsSync(auth) || !statSync(auth).isDirectory())
+        return [];
+    return readdirSync(auth).sort().map((name) => ({ name, hostPath: join(auth, name) }));
+}
+/**
+ * Reads a domain from its checkout.
+ *
+ * @param source - The domain's name and checkout.
+ * @param now - The clock, for the ISO link's expiry.
+ * @returns The domain.
+ */
+export function harborDomain_read(source, now = new Date()) {
+    const settings = settings_read(source.root);
+    const state = state_read(source.root);
+    const cluster = settings['CLUSTER_NAME'] !== undefined && settings['BASE_DOMAIN'] !== undefined ? `${settings['CLUSTER_NAME']}.${settings['BASE_DOMAIN']}` : null;
+    return {
+        name: source.name,
+        root: source.root,
+        spec: text_read(join(source.root, 'spec.yaml')),
+        settings,
+        state,
+        steps: steps_read(source.root, state, now),
+        secrets: secrets_read(source.root),
+        cluster,
+    };
+}
+/**
+ * The step a domain last finished, in build order; null when none is done.
+ *
+ * @param domain - The domain.
+ * @returns The step.
+ */
+export function lastDone_of(domain) {
+    const done = domain.steps.filter((step) => step.state === 'done');
+    return done.length > 0 ? done[done.length - 1] : null;
+}
+//# sourceMappingURL=harborOci.js.map

package/dist/domains/harborOci.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harborOci.js","sourceRoot":"","sources":["../../src/domains/harborOci.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,gEAAgE;AAChE,MAAM,CAAC,MAAM,YAAY,GAA0B,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;AAE7K,+FAA+F;AAC/F,MAAM,cAAc,GAA0B,CAAC,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,sBAAsB,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;AAExJ,0DAA0D;AAC1D,MAAM,mBAAmB,GAA0B,CAAC,QAAQ,CAAC,CAAC;AA+C9D;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAW,GAAG,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,MAAM,GAAW,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,MAAM,IAAI,CAAC;YAAE,SAAS;QAC1B,MAAM,GAAG,GAAW,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAC3E,IAAI,KAAK,GAAW,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjI,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACtB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mDAAmD;AACnD,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/D,CAAC;AAED,uGAAuG;AACvG,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,MAAM,GAA2B;QACrC,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3D,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,IAAI,EAAE,CAAC;KAClE,CAAC;IACF,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,cAAc;QAAE,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAChH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,sEAAsE;AACtE,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,IAAI,GAAW,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;IACxD,MAAM,IAAI,GAAkB,SAAS,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,KAAK,GAA4B,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;IACnF,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,CAAC;QACxC,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,CAAC,GAAG,sCAAsC,IAAI,EAAE,CAAC;IAC9F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+EAA+E;AAC/E,SAAS,wBAAwB,CAAC,QAAgB;IAChD,MAAM,IAAI,GAAkB,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC3E,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,SAAS,GAAa,IAAI,CAAC,KAAK,CAAC,IAAI,CAA6B,CAAC,SAAS,CAAC;IACnF,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,KAA+C,EAAE,MAAY,IAAI,IAAI,EAAE;IAC9G,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,IAAa,EAAE,QAAgB,EAA6B,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpJ,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,GAAW,EAA6B,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IACtH,MAAM,KAAK,GAAG,CAAC,GAAW,EAAiB,EAAE,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAK,CAAC,GAAG,CAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACjH,MAAM,QAAQ,GAAkB,KAAK,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,SAAS,GAAkB,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/F,MAAM,UAAU,GAAW,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IACrE,MAAM,KAAK,GAA8C;QACvD,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,sCAAsC,CAAC;QACvE,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,mBAAmB,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,oBAAoB,CAAC,KAAK,IAAI,EAAE,KAAK,CAAC,mBAAmB,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,8BAA8B,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,wCAAwC,CAAC;QACnP,GAAG,EAAE,CAAC,GAA8B,EAAE;YACpC,MAAM,OAAO,GAAkB,KAAK,CAAC,cAAc,CAAC,CAAC;YACrD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,sBAAsB,CAAC,CAAC;YAChF,IAAI,OAAO,KAAK,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE;gBAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,eAAe,CAAC,IAAI,SAAS,sBAAsB,OAAO,EAAE,EAAE,CAAC;YAC/L,OAAO,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,eAAe,CAAC,IAAI,SAAS,sBAAsB,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC;QAChH,CAAC,CAAC,EAAE;QACJ,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,QAAQ,KAAK,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC;QACpL,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,yBAAyB,SAAS,YAAY,CAAC;QACrJ,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,wEAAwE,CAAC;QAC7F,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,wDAAwD,CAAC;QACzF,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,sEAAsE,CAAC;QAC/F,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,uBAAuB,UAAU,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC;QAC/H,WAAW,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,EAAE,wCAAwC,CAAC;QAClF,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,sCAAsC,CAAC;KAClE,CAAC;IACF,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,IAAY,EAAE,KAAa,EAAa,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,GAAI,KAAK,CAAC,IAAI,CAA+B,EAAE,CAAC,CAAC,CAAC;AACpL,CAAC;AAED,oEAAoE;AACpE,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,IAAI,GAAW,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;QAAE,OAAO,EAAE,CAAC;IAClE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAY,EAAgB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9G,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAoB,EAAE,MAAY,IAAI,IAAI,EAAE;IAC5E,MAAM,QAAQ,GAA2B,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpE,MAAM,KAAK,GAAmC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,OAAO,GAAkB,QAAQ,CAAC,cAAc,CAAC,KAAK,SAAS,IAAI,QAAQ,CAAC,aAAa,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,cAAc,CAAC,IAAI,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACjL,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC/C,QAAQ;QACR,KAAK;QACL,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC;QAC1C,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC;QAClC,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,MAAoB;IAC9C,MAAM,IAAI,GAAgB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAe,EAAW,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;IACnG,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAe,CAAC,CAAC,CAAC,IAAI,CAAC;AACvE,CAAC"}

package/dist/index.d.ts

@@ -14,6 +14,13 @@ export { TenancyProvider, TENANCY_RESERVED, CONTAINER_RESERVED, READ_ONLY_REASON
 export { stratusListingLook, stratusName_colorize, STRATUS_ITEM_KINDS, CONTAINER_TYPES } from './vfs/look.js';
 export { StratusSession, configDir_default, type StratusSessionOptions } from './session.js';
 export { stratusBackend_make, type StratusBackend, type StratusBackendOptions } from './backend.js';
+export { DomainStore, domainsRoot_of, DOMAIN_NAME, type DomainRecord, type StepRecord, type BuiltStepState } from './domain/state.js';
+export { SPEC_DEFAULT, specYaml_parse, specYaml_render, specOptions_apply, specNodes_of, type DomainSpec, type NodePool, type ChrisSizing, type SpecNode } from './domain/spec.js';
+export { BUILD_STEPS, STEPS_WRITTEN, FIRST_BILLING_STEP, STEPS_SOURCE, BUILD_WAITS, buildRun_make, buildJob_id, stepNext_of, type BuildDeps } from './domain/steps.js';
+export { planCounts_of, planCounts_alter, planCounts_words, type PlanCounts, type CloudBuilder, type InfraPlan, type PlanRow, type PreflightCheck, type InfraOutputs, type BuildCall } from './cloud/builder.js';
+export { FakeBuildWorld, FakeCloudBuilder, FakeInstaller } from './cloud/fake/builder.js';
+export type { Installer, InstallerHost, InstallStatus, PlatformManifest } from './installer/installer.js';
 export { AnswerCache } from './cache.js';
 export { segments_assign, segment_resolve, idSuffix_of, ambiguity_words, type Named, type Segment, type SegmentMatch } from './names.js';
 export { stratusArgs_parse, type StratusArgs } from './args.js';
+export { stratusSegments_build, domain_ofPath, STRATUS_SEGMENT_KEYS } from './prompt.js';

package/dist/index.js

@@ -14,7 +14,13 @@ export { TenancyProvider, TENANCY_RESERVED, CONTAINER_RESERVED, READ_ONLY_REASON
 export { stratusListingLook, stratusName_colorize, STRATUS_ITEM_KINDS, CONTAINER_TYPES } from './vfs/look.js';
 export { StratusSession, configDir_default } from './session.js';
 export { stratusBackend_make } from './backend.js';
+export { DomainStore, domainsRoot_of, DOMAIN_NAME } from './domain/state.js';
+export { SPEC_DEFAULT, specYaml_parse, specYaml_render, specOptions_apply, specNodes_of } from './domain/spec.js';
+export { BUILD_STEPS, STEPS_WRITTEN, FIRST_BILLING_STEP, STEPS_SOURCE, BUILD_WAITS, buildRun_make, buildJob_id, stepNext_of } from './domain/steps.js';
+export { planCounts_of, planCounts_alter, planCounts_words } from './cloud/builder.js';
+export { FakeBuildWorld, FakeCloudBuilder, FakeInstaller } from './cloud/fake/builder.js';
 export { AnswerCache } from './cache.js';
 export { segments_assign, segment_resolve, idSuffix_of, ambiguity_words } from './names.js';
 export { stratusArgs_parse } from './args.js';
+export { stratusSegments_build, domain_ofPath, STRATUS_SEGMENT_KEYS } from './prompt.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,cAAc,mBAAmB,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,oBAAoB,EAAkB,MAAM,wBAAwB,CAAC;AAC5G,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,cAAc,EAAyB,MAAM,uBAAuB,CAAC;AAC1G,OAAO,EAAE,WAAW,EAAoI,MAAM,oBAAoB,CAAC;AACnL,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,cAAc,EAAE,gBAAgB,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAmC,MAAM,uBAAuB,CAAC;AAC3L,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,gBAAgB,EAA+B,MAAM,kBAAkB,CAAC;AACxI,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAC9G,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAA8B,MAAM,cAAc,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAmD,MAAM,cAAc,CAAC;AACpG,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,WAAW,EAAE,eAAe,EAA+C,MAAM,YAAY,CAAC;AACzI,OAAO,EAAE,iBAAiB,EAAoB,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,cAAc,mBAAmB,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,oBAAoB,EAAkB,MAAM,wBAAwB,CAAC;AAC5G,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,cAAc,EAAyB,MAAM,uBAAuB,CAAC;AAC1G,OAAO,EAAE,WAAW,EAAoI,MAAM,oBAAoB,CAAC;AACnL,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,cAAc,EAAE,gBAAgB,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAmC,MAAM,uBAAuB,CAAC;AAC3L,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,gBAAgB,EAA+B,MAAM,kBAAkB,CAAC;AACxI,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAC9G,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAA8B,MAAM,cAAc,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAmD,MAAM,cAAc,CAAC;AACpG,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAA2D,MAAM,mBAAmB,CAAC;AACtI,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,iBAAiB,EAAE,YAAY,EAAmE,MAAM,kBAAkB,CAAC;AACnL,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,kBAAkB,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAkB,MAAM,mBAAmB,CAAC;AACvK,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,gBAAgB,EAA4H,MAAM,oBAAoB,CAAC;AACjN,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAE1F,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,WAAW,EAAE,eAAe,EAA+C,MAAM,YAAY,CAAC;AACzI,OAAO,EAAE,iBAAiB,EAAoB,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC"}

package/dist/installer/assisted.d.ts

@@ -0,0 +1,97 @@
+/**
+ * @file Red Hat's Assisted Installer, as `harbor-oci` drove it, over its REST
+ * API (docs/stratus.adoc, D3). The same on every cloud.
+ *
+ * A Red Hat service account's client credentials buy a 15-minute token; the
+ * exchange must not send a `scope`, or the installer answers 401. Clusters
+ * are visible only to the identity that made them, so one daemon keeps to one
+ * account. The pull secret is fetched by API each time a cluster is made and
+ * never written down. The cluster is an external-platform one (`oci`, its
+ * cloud controller external), user-managed networking, highly available;
+ * the image is the minimal ISO.
+ *
+ * @module
+ */
+import type { Installer, InstallerCredentials, InstallerHost, InstallerIds, InstallStatus, PlatformManifest } from './installer.js';
+/** Red Hat's token endpoint. */
+export declare const RED_HAT_SSO_URL: string;
+/** OpenShift Cluster Manager's API. */
+export declare const OCM_API: string;
+/** The Assisted Installer's API. */
+export declare const ASSISTED_API: string;
+/** A fetch, as the installer calls it; a test hands in its own. */
+export type InstallerFetch = (url: string, init?: {
+    method?: string;
+    headers?: Record<string, string>;
+    body?: string;
+}) => Promise<{
+    status: number;
+    text: () => Promise<string>;
+}>;
+/** How the installer is made. */
+export interface AssistedOptions {
+    /** The service account's client id and secret, read on the host. */
+    readonly account: () => {
+        clientId: string;
+        clientSecret: string;
+    };
+    /** The nodes' SSH public key, read on the host. */
+    readonly sshPublicKey: () => string;
+    readonly fetch?: InstallerFetch;
+}
+/** An installer answer that was not what was wanted. */
+export declare class InstallerError extends Error {
+    readonly status: number;
+    constructor(status: number, message: string);
+}
+/**
+ * Reads a service account file: `RH_CLIENT_ID=` and `RH_CLIENT_SECRET=` lines.
+ *
+ * @param text - The file.
+ * @returns The id and secret.
+ * @throws Error - When either is missing.
+ */
+export declare function serviceAccount_read(text: string): {
+    clientId: string;
+    clientSecret: string;
+};
+/** The Assisted Installer, as the build's steps call it. */
+export declare class AssistedInstaller implements Installer {
+    private readonly options;
+    readonly id: string;
+    private token;
+    private readonly fetchFn;
+    constructor(options: AssistedOptions);
+    /** A token good for at least another minute. */
+    private token_get;
+    /**
+     * One call to Red Hat, with the token.
+     *
+     * @param method - The method.
+     * @param url - The full address.
+     * @param ok - The statuses that are success.
+     * @param body - A JSON body.
+     * @returns The text.
+     */
+    private call;
+    /** The account's pull secret, fetched now and never kept. */
+    private pullSecret_get;
+    cluster_create(request: {
+        name: string;
+        baseDomain: string;
+        version: string;
+        controlPlaneCount: number;
+    }): Promise<InstallerIds>;
+    isoUrl_get(ids: InstallerIds): Promise<{
+        url: string;
+        expires: string;
+    }>;
+    manifests_upload(ids: InstallerIds, manifests: ReadonlyArray<PlatformManifest>): Promise<void>;
+    hosts_list(ids: InstallerIds): Promise<InstallerHost[]>;
+    role_set(ids: InstallerIds, host: InstallerHost, role: 'master' | 'worker'): Promise<void>;
+    install_start(ids: InstallerIds): Promise<void>;
+    install_status(ids: InstallerIds): Promise<InstallStatus>;
+    kubeconfig_get(ids: InstallerIds): Promise<string>;
+    credentials_get(ids: InstallerIds): Promise<InstallerCredentials>;
+    cluster_delete(ids: InstallerIds): Promise<void>;
+}

package/dist/installer/assisted.js

@@ -0,0 +1,171 @@
+/** Red Hat's token endpoint. */
+export const RED_HAT_SSO_URL = 'https://sso.redhat.com/auth/realms/redhat-external/protocol/openid-connect/token';
+/** OpenShift Cluster Manager's API. */
+export const OCM_API = 'https://api.openshift.com';
+/** The Assisted Installer's API. */
+export const ASSISTED_API = `${OCM_API}/api/assisted-install/v2`;
+/** How long before a token's end it is renewed, in milliseconds. */
+const TOKEN_MARGIN_MS = 60_000;
+/** An installer answer that was not what was wanted. */
+export class InstallerError extends Error {
+    status;
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+        this.name = 'InstallerError';
+    }
+}
+/**
+ * Reads a service account file: `RH_CLIENT_ID=` and `RH_CLIENT_SECRET=` lines.
+ *
+ * @param text - The file.
+ * @returns The id and secret.
+ * @throws Error - When either is missing.
+ */
+export function serviceAccount_read(text) {
+    const value = (key) => text.split('\n').map((line) => line.trim().replace(/^export\s+/, ''))
+        .find((line) => line.startsWith(`${key}=`))?.slice(key.length + 1).replace(/^["']|["']$/g, '');
+    const clientId = value('RH_CLIENT_ID');
+    const clientSecret = value('RH_CLIENT_SECRET');
+    if (clientId === undefined || clientSecret === undefined || clientId === '' || clientSecret === '')
+        throw new Error('the service account file lacks RH_CLIENT_ID or RH_CLIENT_SECRET');
+    return { clientId, clientSecret };
+}
+/** The Assisted Installer, as the build's steps call it. */
+export class AssistedInstaller {
+    options;
+    id = 'assisted';
+    token = null;
+    fetchFn;
+    constructor(options) {
+        this.options = options;
+        this.fetchFn = options.fetch ?? (async (url, init) => {
+            const response = await fetch(url, { ...init, signal: AbortSignal.timeout(60_000) });
+            return { status: response.status, text: () => response.text() };
+        });
+    }
+    /** A token good for at least another minute. */
+    async token_get() {
+        if (this.token !== null && this.token.until - Date.now() > TOKEN_MARGIN_MS)
+            return this.token.value;
+        const { clientId, clientSecret } = this.options.account();
+        // No `scope`: with one, the installer answers 401.
+        const body = new URLSearchParams({ grant_type: 'client_credentials', client_id: clientId, client_secret: clientSecret }).toString();
+        const answer = await this.fetchFn(RED_HAT_SSO_URL, { method: 'POST', headers: { 'content-type': 'application/x-www-form-urlencoded' }, body });
+        const text = await answer.text();
+        if (answer.status !== 200)
+            throw new InstallerError(answer.status, `Red Hat token: HTTP ${answer.status}`);
+        const json = JSON.parse(text);
+        this.token = { value: json.access_token, until: Date.now() + json.expires_in * 1000 };
+        return this.token.value;
+    }
+    /**
+     * One call to Red Hat, with the token.
+     *
+     * @param method - The method.
+     * @param url - The full address.
+     * @param ok - The statuses that are success.
+     * @param body - A JSON body.
+     * @returns The text.
+     */
+    async call(method, url, ok, body) {
+        const answer = await this.fetchFn(url, {
+            method,
+            headers: { authorization: `Bearer ${await this.token_get()}`, ...(body !== undefined ? { 'content-type': 'application/json' } : {}) },
+            ...(body !== undefined ? { body: JSON.stringify(body) } : {}),
+        });
+        const text = await answer.text();
+        if (!ok.includes(answer.status)) {
+            let reason = text.slice(0, 200);
+            try {
+                reason = JSON.parse(text).reason ?? reason;
+            }
+            catch { /* not JSON */ }
+            throw new InstallerError(answer.status, `${method} ${url.replace(ASSISTED_API, '')}: HTTP ${answer.status}: ${reason}`);
+        }
+        return text;
+    }
+    /** The account's pull secret, fetched now and never kept. */
+    async pullSecret_get() {
+        const text = await this.call('POST', `${OCM_API}/api/accounts_mgmt/v1/access_token`, [200], {});
+        const secret = JSON.parse(text);
+        if (secret.auths === undefined || Object.keys(secret.auths).length === 0)
+            throw new Error('Red Hat gave no pull secret for this account');
+        return text;
+    }
+    async cluster_create(request) {
+        const existing = JSON.parse(await this.call('GET', `${ASSISTED_API}/clusters`, [200]));
+        if (existing.some((cluster) => cluster.name === request.name && cluster.base_dns_domain === request.baseDomain)) {
+            throw new Error(`a cluster ${request.name}.${request.baseDomain} already exists at Red Hat that this domain did not record`);
+        }
+        const pullSecret = await this.pullSecret_get();
+        const sshPublicKey = this.options.sshPublicKey().trim();
+        const cluster = JSON.parse(await this.call('POST', `${ASSISTED_API}/clusters`, [201], {
+            name: request.name, base_dns_domain: request.baseDomain, openshift_version: request.version,
+            cpu_architecture: 'x86_64', high_availability_mode: 'Full', control_plane_count: request.controlPlaneCount, user_managed_networking: true,
+            platform: { type: 'external', external: { platform_name: 'oci', cloud_controller_manager: 'External' } },
+            pull_secret: pullSecret, ssh_public_key: sshPublicKey,
+        }));
+        const infraEnv = JSON.parse(await this.call('POST', `${ASSISTED_API}/infra-envs`, [201], {
+            name: `${request.name}-infra-env`, cluster_id: cluster.id, pull_secret: pullSecret, ssh_authorized_key: sshPublicKey,
+            image_type: 'minimal-iso', cpu_architecture: 'x86_64', openshift_version: request.version,
+        }));
+        return { clusterId: cluster.id, infraEnvId: infraEnv.id };
+    }
+    async isoUrl_get(ids) {
+        const image = JSON.parse(await this.call('GET', `${ASSISTED_API}/infra-envs/${ids.infraEnvId}/downloads/image-url`, [200]));
+        return { url: image.url, expires: image.expires_at };
+    }
+    async manifests_upload(ids, manifests) {
+        const existing = JSON.parse(await this.call('GET', `${ASSISTED_API}/clusters/${ids.clusterId}/manifests`, [200]));
+        for (const manifest of manifests) {
+            if (existing.some((entry) => entry.folder === 'manifests' && entry.file_name === manifest.name)) {
+                await this.call('DELETE', `${ASSISTED_API}/clusters/${ids.clusterId}/manifests?folder=manifests&file_name=${encodeURIComponent(manifest.name)}`, [200, 204, 404]);
+            }
+            await this.call('POST', `${ASSISTED_API}/clusters/${ids.clusterId}/manifests`, [201], { folder: 'manifests', file_name: manifest.name, content: Buffer.from(manifest.content, 'utf-8').toString('base64') });
+        }
+    }
+    async hosts_list(ids) {
+        const hosts = JSON.parse(await this.call('GET', `${ASSISTED_API}/infra-envs/${ids.infraEnvId}/hosts`, [200]));
+        return hosts.map((host) => ({
+            id: host.id,
+            name: (host.requested_hostname ?? host.id).split('.')[0],
+            zone: '',
+            role: host.role === 'master' || host.role === 'worker' ? host.role : 'auto',
+            registered: host.created_at ?? '',
+            ready: host.status === 'known',
+        })).sort((a, b) => a.name.localeCompare(b.name));
+    }
+    async role_set(ids, host, role) {
+        await this.call('PATCH', `${ASSISTED_API}/infra-envs/${ids.infraEnvId}/hosts/${host.id}`, [200, 201], { host_role: role });
+    }
+    async install_start(ids) {
+        await this.call('POST', `${ASSISTED_API}/clusters/${ids.clusterId}/actions/install`, [202]);
+    }
+    async install_status(ids) {
+        const cluster = JSON.parse(await this.call('GET', `${ASSISTED_API}/clusters/${ids.clusterId}`, [200]));
+        const percent = cluster.progress?.total_percentage ?? 0;
+        const note = cluster.status_info ?? cluster.status;
+        if (cluster.status === 'installed')
+            return { state: 'installed', percent: 100, note };
+        if (cluster.status === 'ready')
+            return { state: 'ready', percent, note };
+        if (cluster.status === 'error' || cluster.status === 'cancelled')
+            return { state: 'error', percent, note: `${cluster.status}: ${note}` };
+        if (['insufficient', 'pending-for-input', 'adding-hosts'].includes(cluster.status))
+            return { state: 'pending', percent, note: `${cluster.status}: ${note}` };
+        return { state: 'installing', percent, note };
+    }
+    async kubeconfig_get(ids) {
+        return this.call('GET', `${ASSISTED_API}/clusters/${ids.clusterId}/downloads/credentials?file_name=kubeconfig`, [200]);
+    }
+    async credentials_get(ids) {
+        const credentials = JSON.parse(await this.call('GET', `${ASSISTED_API}/clusters/${ids.clusterId}/credentials`, [200]));
+        return { username: credentials.username, password: credentials.password, consoleUrl: credentials.console_url };
+    }
+    async cluster_delete(ids) {
+        await this.call('DELETE', `${ASSISTED_API}/infra-envs/${ids.infraEnvId}`, [204, 404]);
+        await this.call('DELETE', `${ASSISTED_API}/clusters/${ids.clusterId}`, [204, 404]);
+    }
+}
+//# sourceMappingURL=assisted.js.map

package/dist/installer/assisted.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assisted.js","sourceRoot":"","sources":["../../src/installer/assisted.ts"],"names":[],"mappings":"AAgBA,gCAAgC;AAChC,MAAM,CAAC,MAAM,eAAe,GAAW,kFAAkF,CAAC;AAE1H,uCAAuC;AACvC,MAAM,CAAC,MAAM,OAAO,GAAW,2BAA2B,CAAC;AAE3D,oCAAoC;AACpC,MAAM,CAAC,MAAM,YAAY,GAAW,GAAG,OAAO,0BAA0B,CAAC;AAEzE,oEAAoE;AACpE,MAAM,eAAe,GAAW,MAAM,CAAC;AAcvC,wDAAwD;AACxD,MAAM,OAAO,cAAe,SAAQ,KAAK;IAClB;IAArB,YAAqB,MAAc,EAAE,OAAe;QAClD,KAAK,CAAC,OAAO,CAAC,CAAC;QADI,WAAM,GAAN,MAAM,CAAQ;QAEjC,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,KAAK,GAAG,CAAC,GAAW,EAAsB,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;SACrI,IAAI,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAClH,MAAM,QAAQ,GAAuB,KAAK,CAAC,cAAc,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAuB,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACnE,IAAI,QAAQ,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,IAAI,YAAY,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACvL,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACpC,CAAC;AAED,4DAA4D;AAC5D,MAAM,OAAO,iBAAiB;IAKC;IAJpB,EAAE,GAAW,UAAU,CAAC;IACzB,KAAK,GAA4C,IAAI,CAAC;IAC7C,OAAO,CAAiB;IAEzC,YAA6B,OAAwB;QAAxB,YAAO,GAAP,OAAO,CAAiB;QACnD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACnD,MAAM,QAAQ,GAAa,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC9F,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QAClE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,gDAAgD;IACxC,KAAK,CAAC,SAAS;QACrB,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QACpG,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1D,mDAAmD;QACnD,MAAM,IAAI,GAAW,IAAI,eAAe,CAAC,EAAE,UAAU,EAAE,oBAAoB,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5I,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/I,MAAM,IAAI,GAAW,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,uBAAuB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3G,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiD,CAAC;QAC9E,IAAI,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,EAAE,CAAC;QACtF,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;IAC1B,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,IAAI,CAAC,MAAc,EAAE,GAAW,EAAE,EAAyB,EAAE,IAAc;QACvF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;YACrC,MAAM;YACN,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YACrI,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAC;QACH,MAAM,IAAI,GAAW,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,IAAI,MAAM,GAAW,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACxC,IAAI,CAAC;gBAAC,MAAM,GAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAyB,CAAC,MAAM,IAAI,MAAM,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;YACrG,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,UAAU,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC,CAAC;QAC1H,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6DAA6D;IACrD,KAAK,CAAC,cAAc;QAC1B,MAAM,IAAI,GAAW,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,OAAO,oCAAoC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QACxG,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAwC,CAAC;QACvE,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC1I,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAyF;QAC5G,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,YAAY,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,CAAiE,CAAC;QACvJ,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAW,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,eAAe,KAAK,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACzH,MAAM,IAAI,KAAK,CAAC,aAAa,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,UAAU,4DAA4D,CAAC,CAAC;QAC/H,CAAC;QACD,MAAM,UAAU,GAAW,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QACvD,MAAM,YAAY,GAAW,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,CAAC;QAChE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,YAAY,WAAW,EAAE,CAAC,GAAG,CAAC,EAAE;YACpF,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,CAAC,UAAU,EAAE,iBAAiB,EAAE,OAAO,CAAC,OAAO;YAC3F,gBAAgB,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,CAAC,iBAAiB,EAAE,uBAAuB,EAAE,IAAI;YACzI,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,wBAAwB,EAAE,UAAU,EAAE,EAAE;YACxG,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY;SACtD,CAAC,CAAmB,CAAC;QACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,YAAY,aAAa,EAAE,CAAC,GAAG,CAAC,EAAE;YACvF,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,YAAY,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,kBAAkB,EAAE,YAAY;YACpH,UAAU,EAAE,aAAa,EAAE,gBAAgB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,OAAO,CAAC,OAAO;SAC1F,CAAC,CAAmB,CAAC;QACtB,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,GAAiB;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,YAAY,eAAe,GAAG,CAAC,UAAU,sBAAsB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAwC,CAAC;QACnK,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,GAAiB,EAAE,SAA0C;QAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,YAAY,aAAa,GAAG,CAAC,SAAS,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,CAAiD,CAAC;QAClK,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAW,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,YAAY,aAAa,GAAG,CAAC,SAAS,yCAAyC,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YACpK,CAAC;YACD,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,YAAY,aAAa,GAAG,CAAC,SAAS,YAAY,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC/M,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,GAAiB;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,YAAY,eAAe,GAAG,CAAC,UAAU,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,CAA2G,CAAC;QACxN,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAiB,EAAE,CAAC,CAAC;YACzC,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,CAAC,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAW;YAClE,IAAI,EAAE,EAAE;YACR,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;YAC3E,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;YACjC,KAAK,EAAE,IAAI,CAAC,MAAM,KAAK,OAAO;SAC/B,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAgB,EAAE,CAAgB,EAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACzF,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAiB,EAAE,IAAmB,EAAE,IAAyB;QAC9E,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,YAAY,eAAe,GAAG,CAAC,UAAU,UAAU,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7H,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,GAAiB;QACnC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,YAAY,aAAa,GAAG,CAAC,SAAS,kBAAkB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAiB;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,YAAY,aAAa,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAuF,CAAC;QAC7L,MAAM,OAAO,GAAW,OAAO,CAAC,QAAQ,EAAE,gBAAgB,IAAI,CAAC,CAAC;QAChE,MAAM,IAAI,GAAW,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;QAC3D,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;QACtF,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO;YAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACzE,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,EAAE,CAAC;QACzI,IAAI,CAAC,cAAc,EAAE,mBAAmB,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,EAAE,CAAC;QAC7J,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAiB;QACpC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,YAAY,aAAa,GAAG,CAAC,SAAS,6CAA6C,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzH,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,GAAiB;QACrC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,YAAY,aAAa,GAAG,CAAC,SAAS,cAAc,EAAE,CAAC,GAAG,CAAC,CAAC,CAAgE,CAAC;QACtL,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAC,WAAW,EAAE,CAAC;IACjH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAiB;QACpC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,YAAY,eAAe,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACtF,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,YAAY,aAAa,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACrF,CAAC;CACF"}

package/dist/installer/installer.d.ts

@@ -0,0 +1,86 @@
+/**
+ * @file The installer driver: what turns machines into a cluster, the same on
+ * every cloud (docs/stratus.adoc, D3). Red Hat's Assisted Installer is the
+ * first; a hub's Hive or a Cluster API provider would be another.
+ *
+ * The build's steps call it for the cluster record, the discovery image,
+ * the platform manifests, the hosts as they register, the install, and the
+ * kubeconfig at the end. Every call is a request and an answer; a wait is
+ * the step's own polling, so a step can be picked up again after a restart
+ * from the ids it recorded.
+ *
+ * @module
+ */
+/** The installer's handles on a domain's cluster. */
+export interface InstallerIds {
+    readonly clusterId: string;
+    /** The discovery image's environment, which the hosts register with. */
+    readonly infraEnvId: string;
+}
+/** One machine as the installer sees it. */
+export interface InstallerHost {
+    /** The installer's id for it. */
+    id: string;
+    /** Its name (the instance's). */
+    name: string;
+    /** The availability domain it runs in, when the installer says. */
+    zone: string;
+    /** Its role, once assigned. */
+    role: 'master' | 'worker' | 'auto';
+    /** When it registered, ISO 8601. */
+    registered: string;
+    /** Whether the installer's checks on it pass (Assisted: status `known`). */
+    ready: boolean;
+}
+/** How far the install has come. */
+export interface InstallStatus {
+    /** `ready` is waiting to be started; the rest as named. */
+    state: 'pending' | 'ready' | 'installing' | 'installed' | 'error';
+    percent: number;
+    /** The installer's own words on where it is. */
+    note: string;
+}
+/** A platform manifest the cloud asks the installer to apply (OCI: its cloud controller and CSI driver). */
+export interface PlatformManifest {
+    name: string;
+    content: string;
+}
+/** The cluster's administrator sign-in, kept on the host only. */
+export interface InstallerCredentials {
+    username: string;
+    password: string;
+    consoleUrl: string;
+}
+/** The installer, as the build's steps call it. */
+export interface Installer {
+    /** Its id (`assisted`, `fake`). */
+    readonly id: string;
+    /** Makes the cluster record and its infra-env. */
+    cluster_create(request: {
+        name: string;
+        baseDomain: string;
+        version: string;
+        controlPlaneCount: number;
+    }): Promise<InstallerIds>;
+    /** The discovery image's address and how long it holds. */
+    isoUrl_get(ids: InstallerIds): Promise<{
+        url: string;
+        expires: string;
+    }>;
+    /** Sends the platform's manifests, replacing any of the same name. */
+    manifests_upload(ids: InstallerIds, manifests: ReadonlyArray<PlatformManifest>): Promise<void>;
+    /** The hosts registered so far. */
+    hosts_list(ids: InstallerIds): Promise<InstallerHost[]>;
+    /** Gives a host its role. */
+    role_set(ids: InstallerIds, host: InstallerHost, role: 'master' | 'worker'): Promise<void>;
+    /** Starts the install. */
+    install_start(ids: InstallerIds): Promise<void>;
+    /** Where the install stands. */
+    install_status(ids: InstallerIds): Promise<InstallStatus>;
+    /** The cluster's kubeconfig, once installed. */
+    kubeconfig_get(ids: InstallerIds): Promise<string>;
+    /** The administrator's sign-in, once installed. */
+    credentials_get(ids: InstallerIds): Promise<InstallerCredentials>;
+    /** Removes the infra-env and the cluster record; one already gone is no error. */
+    cluster_delete(ids: InstallerIds): Promise<void>;
+}

package/dist/installer/installer.js

@@ -0,0 +1,15 @@
+/**
+ * @file The installer driver: what turns machines into a cluster, the same on
+ * every cloud (docs/stratus.adoc, D3). Red Hat's Assisted Installer is the
+ * first; a hub's Hive or a Cluster API provider would be another.
+ *
+ * The build's steps call it for the cluster record, the discovery image,
+ * the platform manifests, the hosts as they register, the install, and the
+ * kubeconfig at the end. Every call is a request and an answer; a wait is
+ * the step's own polling, so a step can be picked up again after a restart
+ * from the ids it recorded.
+ *
+ * @module
+ */
+export {};
+//# sourceMappingURL=installer.js.map

package/dist/installer/installer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.js","sourceRoot":"","sources":["../../src/installer/installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}

package/dist/prompt.d.ts

@@ -0,0 +1,33 @@
+/**
+ * @file The stratus prompt: where in the substrate a session stands, as
+ * backend-neutral segments (docs/stratus.adoc, D9).
+ *
+ * The leader names the cloud (`OCI`, or `OCI ✗` when the credential does not
+ * work); then the tenancy, the region, the user, the domain when the working
+ * directory is inside one, and the working directory. The user is the cloud's
+ * name for the identity in full, an e-mail address on a tenancy that names
+ * users so; a surface that is short of room truncates it from the left, as it
+ * does a path, so `whoami` and the prompt never disagree.
+ *
+ * @module
+ */
+import type { PromptSegment } from '@fnndsc/menu';
+import type { StratusSession } from './session.js';
+/** The segment keys a stratus prompt uses, in the order they are drawn. */
+export declare const STRATUS_SEGMENT_KEYS: readonly ["cloud", "tenancy", "region", "user", "domain", "cwd"];
+/**
+ * Names the domain a path is inside, when it is one.
+ *
+ * @param cwd - The working directory.
+ * @param tenancyPath - The tenancy's folder, `/net/oci/<tenancy>`.
+ * @returns The domain's name, or null when the path is not under `domains/<name>`.
+ */
+export declare function domain_ofPath(cwd: string, tenancyPath: string): string | null;
+/**
+ * Builds the prompt's segments from the session as it stands.
+ *
+ * @param session - The stratus session.
+ * @param cwd - The working directory the prompt shows.
+ * @returns The segments, leader first.
+ */
+export declare function stratusSegments_build(session: StratusSession, cwd: string): PromptSegment[];