@intentic/state-resolver 1.0.2

package/dist/resolvers/backing.js

@@ -0,0 +1,142 @@
+import { generated, makeRef } from "@intentic/graph";
+import { appSlug, backingPort, bindingId, bucketName, cacheUser, dbName, secretKey } from "../lib/ids.js";
+import { IMAGES } from "../lib/images.js";
+import { sshOf } from "../lib/ssh.js";
+import { exposeRoute, routeId } from "./route.js";
+const catalog = {
+    database: { type: "postgres", bindingType: "postgres-database", image: IMAGES.postgres, routes: false },
+    cache: { type: "valkey", bindingType: "valkey-namespace", image: IMAGES.valkey, routes: false },
+    auth: { type: "authentik", bindingType: "authentik-client", image: IMAGES.authentik, routes: true },
+    "object-storage": { type: "garage", bindingType: "garage-bucket", image: IMAGES.garage, routes: false },
+};
+const envContract = {
+    database: [["DATABASE_URL", "url"]],
+    cache: [
+        ["VALKEY_URL", "url"],
+        ["REDIS_URL", "url"],
+    ],
+    auth: [
+        ["OIDC_ISSUER", "issuer"],
+        ["OIDC_CLIENT_ID", "clientId"],
+        ["OIDC_CLIENT_SECRET", "clientSecret"],
+    ],
+    "object-storage": [
+        ["S3_ENDPOINT", "endpoint"],
+        ["S3_ACCESS_KEY", "accessKey"],
+        ["S3_SECRET_KEY", "secretKey"],
+        ["S3_BUCKET", "bucket"],
+    ],
+};
+const adminSecretKey = (capability, instanceId) => secretKey(capability === "database" ? "POSTGRES_ADMIN_PASSWORD" : "VALKEY_ADMIN_PASSWORD", instanceId);
+const authBootstrapTokenKey = (instanceId) => secretKey("AUTHENTIK_BOOTSTRAP_TOKEN", instanceId);
+const instanceExtra = (intent) => {
+    switch (intent.capability) {
+        case "database":
+        case "cache":
+            return { adminPassword: generated(adminSecretKey(intent.capability, intent.id)) };
+        case "auth":
+            return {
+                domain: intent.domain,
+                secretKey: generated(secretKey("AUTHENTIK_SECRET_KEY", intent.id)),
+                bootstrapToken: generated(authBootstrapTokenKey(intent.id)),
+                bootstrapPassword: generated(secretKey("AUTHENTIK_BOOTSTRAP_PASSWORD", intent.id)),
+                dbPassword: generated(secretKey("AUTHENTIK_DB_PASSWORD", intent.id)),
+                pgImage: IMAGES.postgres,
+                redisImage: IMAGES.valkey,
+            };
+        case "object-storage":
+            return {
+                region: "garage",
+                ...(intent.domain !== undefined ? { domain: intent.domain } : {}),
+            };
+    }
+};
+export const resolveBacking = (intent, host, apiToken) => {
+    const spec = catalog[intent.capability];
+    const node = {
+        id: intent.id,
+        type: spec.type,
+        inputs: {
+            server: makeRef(intent.on),
+            ...sshOf(host),
+            internalIp: makeRef(intent.on, "internalIp"),
+            publishPort: backingPort(intent.id),
+            image: spec.image,
+            ...instanceExtra(intent),
+        },
+        explicitDependsOn: [intent.on],
+    };
+    const nodes = [node];
+    const ingress = [];
+    if (spec.routes || intent.domain !== undefined) {
+        if (intent.domain === undefined || intent.expose === undefined) {
+            throw new Error(`backing "${intent.id}" (${intent.capability}) must be exposed with a domain; declare it with { expose, domain }`);
+        }
+        const exposure = exposeRoute(intent.expose, intent.on, intent.domain, backingPort(intent.id), apiToken);
+        nodes.push(exposure.route);
+        ingress.push(exposure.ingress);
+    }
+    return { nodes, ingress };
+};
+export const resolveBinding = (appId, intent, host, appDomains) => {
+    const spec = catalog[intent.capability];
+    const id = bindingId(appId, intent.id);
+    const shared = { ...sshOf(host), instance: intent.id };
+    const node = (inputs) => ({ id, type: spec.bindingType, inputs, explicitDependsOn: [intent.id] });
+    switch (intent.capability) {
+        case "database":
+            return node({
+                ...shared,
+                instanceHost: makeRef(intent.id, "internalHost"),
+                instancePort: makeRef(intent.id, "port"),
+                database: dbName(appId),
+                role: dbName(appId),
+                password: generated(secretKey("APP_DATABASE_PASSWORD", id)),
+            });
+        case "cache":
+            return node({
+                ...shared,
+                instanceHost: makeRef(intent.id, "internalHost"),
+                instancePort: makeRef(intent.id, "port"),
+                adminPassword: generated(adminSecretKey("cache", intent.id)),
+                username: cacheUser(appId),
+                password: generated(secretKey("APP_CACHE_PASSWORD", id)),
+                keyPrefix: cacheUser(appId),
+            });
+        case "auth": {
+            if (intent.domain === undefined || intent.expose === undefined) {
+                throw new Error(`auth backing "${intent.id}" must be exposed with a domain; declare it with i.want.auth({ expose, domain })`);
+            }
+            return {
+                id,
+                type: spec.bindingType,
+                inputs: {
+                    authentikUrl: `https://${intent.domain}`,
+                    bootstrapToken: generated(authBootstrapTokenKey(intent.id)),
+                    domain: intent.domain,
+                    slug: appSlug(appId),
+                    clientId: generated(secretKey("OIDC_CLIENT_ID", id)),
+                    clientSecret: generated(secretKey("OIDC_CLIENT_SECRET", id)),
+                    redirectDomains: appDomains,
+                },
+                explicitDependsOn: [intent.id, routeId(intent.expose, intent.domain)],
+            };
+        }
+        case "object-storage":
+            return node({
+                ...shared,
+                endpoint: makeRef(intent.id, "internalEndpoint"),
+                bucket: bucketName(appId),
+                keyName: bucketName(appId),
+            });
+    }
+};
+export const bindingEnv = (appId, intent) => {
+    const id = bindingId(appId, intent.id);
+    const env = {};
+    for (const [name, output] of envContract[intent.capability]) {
+        env[name] = makeRef(id, output);
+    }
+    return env;
+};
+//# sourceMappingURL=backing.js.map

package/dist/resolvers/backing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backing.js","sourceRoot":"","sources":["../../src/resolvers/backing.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAGrD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1G,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAEtC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAelD,MAAM,OAAO,GAAqD;IAC9D,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE;IACvG,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;IAG/F,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE;IACnG,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;CAC1G,CAAC;AAKF,MAAM,WAAW,GAAgF;IAC7F,QAAQ,EAAE,CAAC,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACnC,KAAK,EAAE;QACH,CAAC,YAAY,EAAE,KAAK,CAAC;QACrB,CAAC,WAAW,EAAE,KAAK,CAAC;KACvB;IACD,IAAI,EAAE;QACF,CAAC,aAAa,EAAE,QAAQ,CAAC;QACzB,CAAC,gBAAgB,EAAE,UAAU,CAAC;QAC9B,CAAC,oBAAoB,EAAE,cAAc,CAAC;KACzC;IACD,gBAAgB,EAAE;QACd,CAAC,aAAa,EAAE,UAAU,CAAC;QAC3B,CAAC,eAAe,EAAE,WAAW,CAAC;QAC9B,CAAC,eAAe,EAAE,WAAW,CAAC;QAC9B,CAAC,WAAW,EAAE,QAAQ,CAAC;KAC1B;CACJ,CAAC;AAMF,MAAM,cAAc,GAAG,CAAC,UAA6B,EAAE,UAAkB,EAAU,EAAE,CACjF,SAAS,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,uBAAuB,EAAE,UAAU,CAAC,CAAC;AAI3G,MAAM,qBAAqB,GAAG,CAAC,UAAkB,EAAU,EAAE,CAAC,SAAS,CAAC,2BAA2B,EAAE,UAAU,CAAC,CAAC;AAMjH,MAAM,aAAa,GAAG,CAAC,MAAqB,EAA2B,EAAE;IACrE,QAAQ,MAAM,CAAC,UAAU,EAAE,CAAC;QACxB,KAAK,UAAU,CAAC;QAChB,KAAK,OAAO;YACR,OAAO,EAAE,aAAa,EAAE,SAAS,CAAC,cAAc,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACtF,KAAK,MAAM;YACP,OAAO;gBACH,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,sBAAsB,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;gBAClE,cAAc,EAAE,SAAS,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC3D,iBAAiB,EAAE,SAAS,CAAC,SAAS,CAAC,8BAA8B,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;gBAClF,UAAU,EAAE,SAAS,CAAC,SAAS,CAAC,uBAAuB,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;gBACpE,OAAO,EAAE,MAAM,CAAC,QAAQ;gBACxB,UAAU,EAAE,MAAM,CAAC,MAAM;aAC5B,CAAC;QACN,KAAK,gBAAgB;YAIjB,OAAO;gBACH,MAAM,EAAE,QAAQ;gBAChB,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpE,CAAC;IACV,CAAC;AACL,CAAC,CAAC;AAMF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,MAAqB,EAAE,IAAe,EAAE,QAAmB,EAAqD,EAAE;IAC7I,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,IAAI,GAAiB;QACvB,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM,EAAE;YACJ,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,GAAG,KAAK,CAAC,IAAI,CAAC;YACd,UAAU,EAAE,OAAO,CAAS,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC;YAEpD,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,aAAa,CAAC,MAAM,CAAC;SAC3B;QACD,iBAAiB,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;KACjC,CAAC;IACF,MAAM,KAAK,GAAmB,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,YAAY,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC,UAAU,qEAAqE,CAAC,CAAC;QACvI,CAAC;QACD,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;QACxG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC,CAAC;AAOF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAa,EAAE,MAAqB,EAAE,IAAe,EAAE,UAA6B,EAAgB,EAAE;IACjI,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAGvC,MAAM,MAAM,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;IACvD,MAAM,IAAI,GAAG,CAAC,MAA+B,EAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACzI,QAAQ,MAAM,CAAC,UAAU,EAAE,CAAC;QACxB,KAAK,UAAU;YACX,OAAO,IAAI,CAAC;gBACR,GAAG,MAAM;gBACT,YAAY,EAAE,OAAO,CAAS,MAAM,CAAC,EAAE,EAAE,cAAc,CAAC;gBACxD,YAAY,EAAE,OAAO,CAAS,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC;gBAChD,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC;gBACvB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC;gBACnB,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC;aAC9D,CAAC,CAAC;QACP,KAAK,OAAO;YAGR,OAAO,IAAI,CAAC;gBACR,GAAG,MAAM;gBACT,YAAY,EAAE,OAAO,CAAS,MAAM,CAAC,EAAE,EAAE,cAAc,CAAC;gBACxD,YAAY,EAAE,OAAO,CAAS,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC;gBAChD,aAAa,EAAE,SAAS,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC5D,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC;gBAC1B,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;gBACxD,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC;aAC9B,CAAC,CAAC;QACP,KAAK,MAAM,CAAC,CAAC,CAAC;YAMV,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,iBAAiB,MAAM,CAAC,EAAE,kFAAkF,CAAC,CAAC;YAClI,CAAC;YACD,OAAO;gBACH,EAAE;gBACF,IAAI,EAAE,IAAI,CAAC,WAAW;gBACtB,MAAM,EAAE;oBACJ,YAAY,EAAE,WAAW,MAAM,CAAC,MAAM,EAAE;oBACxC,cAAc,EAAE,SAAS,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBAC3D,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC;oBACpB,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;oBACpD,YAAY,EAAE,SAAS,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;oBAC5D,eAAe,EAAE,UAAU;iBAC9B;gBACD,iBAAiB,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;aACxE,CAAC;QACN,CAAC;QACD,KAAK,gBAAgB;YAGjB,OAAO,IAAI,CAAC;gBACR,GAAG,MAAM;gBACT,QAAQ,EAAE,OAAO,CAAS,MAAM,CAAC,EAAE,EAAE,kBAAkB,CAAC;gBACxD,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC;gBACzB,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC;aAC7B,CAAC,CAAC;IACX,CAAC;AACL,CAAC,CAAC;AAIF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,MAAqB,EAA+B,EAAE;IAC5F,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACvC,MAAM,GAAG,GAAgC,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,CAAS,EAAE,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC,CAAC"}

package/dist/resolvers/backup.d.ts

@@ -0,0 +1,6 @@
+import type { BackupInput, HostInput } from "@intentic/need-resolver";
+import type { ResolvedNode } from "@intentic/resources";
+export declare const DEFAULT_BACKUP_REPO = "/repo";
+export declare const defaultBackupInput: () => BackupInput;
+export declare const resolveBackup: (hostId: string, host: HostInput, input: BackupInput, signozServiceId: string | undefined) => ResolvedNode;
+//# sourceMappingURL=backup.d.ts.map

package/dist/resolvers/backup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.d.ts","sourceRoot":"","sources":["../../src/resolvers/backup.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAUxD,eAAO,MAAM,mBAAmB,UAAU,CAAC;AAC3C,eAAO,MAAM,kBAAkB,QAAO,WAAsF,CAAC;AAQ7H,eAAO,MAAM,aAAa,GAAI,QAAQ,MAAM,EAAE,MAAM,SAAS,EAAE,OAAO,WAAW,EAAE,iBAAiB,MAAM,GAAG,SAAS,KAAG,YAkBxH,CAAC"}

package/dist/resolvers/backup.js

@@ -0,0 +1,26 @@
+import { generated } from "@intentic/graph";
+import { backupId, forgejoId, komodoId } from "../lib/ids.js";
+import { IMAGES } from "../lib/images.js";
+import { sshOf } from "../lib/ssh.js";
+export const DEFAULT_BACKUP_REPO = "/repo";
+export const defaultBackupInput = () => ({ repo: DEFAULT_BACKUP_REPO, password: generated("RESTIC_PASSWORD") });
+export const resolveBackup = (hostId, host, input, signozServiceId) => {
+    const ssh = sshOf(host);
+    const signoz = input.signoz === true && signozServiceId !== undefined;
+    return {
+        id: backupId(hostId),
+        type: "backup",
+        inputs: {
+            ...ssh,
+            repo: input.repo,
+            password: input.password,
+            signoz,
+            image: IMAGES.backup,
+            ...(input.credentials !== undefined ? { credentials: input.credentials } : {}),
+            ...(input.schedule !== undefined ? { schedule: input.schedule } : {}),
+            ...(input.retention !== undefined ? { retention: input.retention } : {}),
+        },
+        explicitDependsOn: [forgejoId(hostId), komodoId(hostId), ...(signoz ? [signozServiceId] : [])],
+    };
+};
+//# sourceMappingURL=backup.js.map

package/dist/resolvers/backup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.js","sourceRoot":"","sources":["../../src/resolvers/backup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAG5C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAOtC,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CAAC;AAC3C,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAgB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,SAAS,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;AAQ7H,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,IAAe,EAAE,KAAkB,EAAE,eAAmC,EAAgB,EAAE;IACpI,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,eAAe,KAAK,SAAS,CAAC;IACtE,OAAO;QACH,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE;YACJ,GAAG,GAAG;YACN,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM;YACN,KAAK,EAAE,MAAM,CAAC,MAAM;YACpB,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3E;QACD,iBAAiB,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;KACjG,CAAC;AACN,CAAC,CAAC"}

package/dist/resolvers/identity.d.ts

@@ -0,0 +1,5 @@
+import type { IntentSet } from "@intentic/need-resolver";
+import type { ResolvedNode } from "@intentic/resources";
+import type { PlatformRefs } from "./platform.js";
+export declare const resolveIdentities: (intent: IntentSet, platform: PlatformRefs, hostId: string) => ResolvedNode[];
+//# sourceMappingURL=identity.d.ts.map

package/dist/resolvers/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/resolvers/identity.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAe,SAAS,EAAc,MAAM,yBAAyB,CAAC;AAClF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAYxD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AA4BlD,eAAO,MAAM,iBAAiB,GAAI,QAAQ,SAAS,EAAE,UAAU,YAAY,EAAE,QAAQ,MAAM,KAAG,YAAY,EAuHzG,CAAC"}

package/dist/resolvers/identity.js

@@ -0,0 +1,112 @@
+import { generated, makeRef } from "@intentic/graph";
+import { adminUsername, deploymentId, forgejoOrgId, forgejoTeamId, forgejoUserId, komodoUserId, orgName, repoId, userPasswordKey, } from "../lib/ids.js";
+const TEAM_NAME = "members";
+const forgejoRoleRank = { read: 1, write: 2, admin: 3 };
+const strongerForgejoRole = (a, b) => (forgejoRoleRank[a] >= forgejoRoleRank[b] ? a : b);
+const komodoLevel = { read: "Read", execute: "Execute", admin: "Write" };
+const komodoLevelRank = { Read: 1, Execute: 2, Write: 3 };
+export const resolveIdentities = (intent, platform, hostId) => {
+    const forgejoUrl = makeRef(platform.forgejo, "url");
+    const komodoUrl = makeRef(platform.deploy, "url");
+    const forgejoAdmin = { adminUser: adminUsername, adminPassword: generated("FORGEJO_ADMIN_PASSWORD") };
+    const komodoAdmin = { adminUser: adminUsername, adminPassword: generated("KOMODO_ADMIN_PASSWORD") };
+    const userById = new Map(intent.users.map((user) => [user.id, user.input]));
+    const teamById = new Map(intent.teams.map((team) => [team.id, team.input]));
+    for (const team of intent.teams) {
+        for (const member of team.input.members) {
+            if (!userById.has(member)) {
+                throw new Error(`team "${team.id}" references unknown user "${member}"; declare it with i.want.user`);
+            }
+        }
+    }
+    for (const app of intent.apps) {
+        for (const grant of app.teams ?? []) {
+            if (!teamById.has(grant.team)) {
+                throw new Error(`app "${app.id}" grants unknown team "${grant.team}"; declare it with i.want.team`);
+            }
+        }
+    }
+    const teamPermission = new Map();
+    const teamRepos = new Map();
+    const userGrants = new Map();
+    const teamMembers = (teamId) => teamById.get(teamId)?.members ?? [];
+    for (const app of intent.apps) {
+        const grants = app.teams ?? [];
+        const ownerGrant = grants[0];
+        if (ownerGrant === undefined) {
+            continue;
+        }
+        const owner = orgName(ownerGrant.team);
+        const deployments = Object.keys(app.environments).map((environment) => deploymentId(app.id, environment));
+        for (const grant of grants) {
+            const current = teamPermission.get(grant.team);
+            teamPermission.set(grant.team, current === undefined ? grant.role : strongerForgejoRole(current, grant.role));
+            const repos = teamRepos.get(grant.team) ?? [];
+            repos.push({ owner, name: app.id });
+            teamRepos.set(grant.team, repos);
+            const level = komodoLevel[teamById.get(grant.team)?.komodo ?? "read"];
+            for (const member of teamMembers(grant.team)) {
+                const grantsForUser = userGrants.get(member) ?? new Map();
+                for (const deployment of deployments) {
+                    const existing = grantsForUser.get(deployment);
+                    if (existing === undefined || komodoLevelRank[level] > komodoLevelRank[existing]) {
+                        grantsForUser.set(deployment, level);
+                    }
+                }
+                userGrants.set(member, grantsForUser);
+            }
+        }
+    }
+    const nodes = [];
+    for (const user of intent.users) {
+        const grants = [...(userGrants.get(user.id) ?? new Map()).entries()].map(([deployment, level]) => ({ deployment, level }));
+        nodes.push({
+            id: forgejoUserId(hostId, user.id),
+            type: "forgejo-user",
+            inputs: {
+                forgejoUrl,
+                ...forgejoAdmin,
+                username: user.input.username,
+                email: user.input.email,
+                accountPassword: generated(userPasswordKey(user.id)),
+            },
+            explicitDependsOn: [platform.forgejo, platform.gitRoute],
+        });
+        nodes.push({
+            id: komodoUserId(hostId, user.id),
+            type: "komodo-user",
+            inputs: { komodoUrl, ...komodoAdmin, username: user.input.username, password: generated(userPasswordKey(user.id)), grants },
+            explicitDependsOn: [platform.deploy, platform.deployRoute, ...grants.map((grant) => grant.deployment)],
+        });
+    }
+    for (const team of intent.teams) {
+        const org = orgName(team.id);
+        const repos = teamRepos.get(team.id) ?? [];
+        nodes.push({
+            id: forgejoOrgId(hostId, team.id),
+            type: "forgejo-org",
+            inputs: { forgejoUrl, ...forgejoAdmin, org },
+            explicitDependsOn: [platform.forgejo, platform.gitRoute],
+        });
+        nodes.push({
+            id: forgejoTeamId(hostId, team.id),
+            type: "forgejo-team",
+            inputs: {
+                forgejoUrl,
+                ...forgejoAdmin,
+                org,
+                name: TEAM_NAME,
+                permission: teamPermission.get(team.id) ?? "read",
+                members: team.input.members.map((member) => userById.get(member)?.username ?? member),
+                repos,
+            },
+            explicitDependsOn: [
+                forgejoOrgId(hostId, team.id),
+                ...team.input.members.map((member) => forgejoUserId(hostId, member)),
+                ...repos.map((repo) => repoId(repo.name)),
+            ],
+        });
+    }
+    return nodes;
+};
+//# sourceMappingURL=identity.js.map

package/dist/resolvers/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/resolvers/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAGrD,OAAO,EACH,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,aAAa,EACb,YAAY,EACZ,OAAO,EACP,MAAM,EACN,eAAe,GAClB,MAAM,eAAe,CAAC;AAWvB,MAAM,SAAS,GAAG,SAAS,CAAC;AAK5B,MAAM,eAAe,GAA0C,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAC/F,MAAM,mBAAmB,GAAG,CAAC,CAAc,EAAE,CAAc,EAAe,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAIhI,MAAM,WAAW,GAA+D,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACrI,MAAM,eAAe,GAA2D,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAOlH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,MAAiB,EAAE,QAAsB,EAAE,MAAc,EAAkB,EAAE;IAC3G,MAAM,UAAU,GAAG,OAAO,CAAS,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,OAAO,CAAS,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,CAAC,wBAAwB,CAAC,EAAE,CAAC;IACtG,MAAM,WAAW,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,CAAC,uBAAuB,CAAC,EAAE,CAAC;IAEpG,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAI5E,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAC9B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACtC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,EAAE,8BAA8B,MAAM,gCAAgC,CAAC,CAAC;YAC1G,CAAC;QACL,CAAC;IACL,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5B,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YAClC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,0BAA0B,KAAK,CAAC,IAAI,gCAAgC,CAAC,CAAC;YACxG,CAAC;QACL,CAAC;IACL,CAAC;IAKD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAuB,CAAC;IACtD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IACjD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAqD,CAAC;IAChF,MAAM,WAAW,GAAG,CAAC,MAAc,EAAqB,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;IAE/F,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC3B,SAAS;QACb,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;QAC1G,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/C,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9G,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9C,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YACpC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAEjC,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,MAAM,CAAC,CAAC;YACtE,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3C,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,EAAwC,CAAC;gBAChG,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;oBACnC,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBAC/C,IAAI,QAAQ,KAAK,SAAS,IAAI,eAAe,CAAC,KAAK,CAAC,GAAG,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAC/E,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;oBACzC,CAAC;gBACL,CAAC;gBACD,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;YAC1C,CAAC;QACL,CAAC;IACL,CAAC;IAED,MAAM,KAAK,GAAmB,EAAE,CAAC;IAEjC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC3H,KAAK,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YAClC,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE;gBACJ,UAAU;gBACV,GAAG,YAAY;gBACf,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;gBAC7B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK;gBACvB,eAAe,EAAE,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;aACvD;YACD,iBAAiB,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC;SAC3D,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YACjC,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE;YAE3H,iBAAiB,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,WAAW,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;SACzG,CAAC,CAAC;IACP,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YACjC,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,EAAE,UAAU,EAAE,GAAG,YAAY,EAAE,GAAG,EAAE;YAC5C,iBAAiB,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC;SAC3D,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YAClC,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE;gBACJ,UAAU;gBACV,GAAG,YAAY;gBACf,GAAG;gBACH,IAAI,EAAE,SAAS;gBACf,UAAU,EAAE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,MAAM;gBACjD,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,QAAQ,IAAI,MAAM,CAAC;gBACrF,KAAK;aACR;YAED,iBAAiB,EAAE;gBACf,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC7B,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACpE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aAC5C;SACJ,CAAC,CAAC;IACP,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC,CAAC"}

package/dist/resolvers/platform.d.ts

@@ -0,0 +1,20 @@
+import type { SecretRef } from "@intentic/graph";
+import type { HostInput } from "@intentic/need-resolver";
+import type { ResolvedNode } from "@intentic/resources";
+import type { IngressPair } from "./route.js";
+export interface PlatformRefs {
+    readonly forgejo: string;
+    readonly deploy: string;
+    readonly gitRoute: string;
+    readonly deployRoute: string;
+}
+export interface GuardConfig {
+    readonly repo: string;
+    readonly resticImage: string;
+}
+export declare const resolvePlatform: (hostId: string, cloudflareId: string, zone: string, apiToken: SecretRef, host: HostInput, guard: GuardConfig | undefined) => {
+    nodes: ResolvedNode[];
+    refs: PlatformRefs;
+    ingress: IngressPair[];
+};
+//# sourceMappingURL=platform.d.ts.map

package/dist/resolvers/platform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../../src/resolvers/platform.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAIxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAG9C,MAAM,WAAW,YAAY;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAGxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAChC;AAcD,MAAM,WAAW,WAAW;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAChC;AAED,eAAO,MAAM,eAAe,GACxB,QAAQ,MAAM,EACd,cAAc,MAAM,EACpB,MAAM,MAAM,EACZ,UAAU,SAAS,EACnB,MAAM,SAAS,EACf,OAAO,WAAW,GAAG,SAAS,KAC/B;IAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IAAC,IAAI,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,WAAW,EAAE,CAAA;CA+ErE,CAAC"}

package/dist/resolvers/platform.js

@@ -0,0 +1,77 @@
+import { generated, httpOk, makeRef } from "@intentic/graph";
+import { adminUsername, deployDomain, forgejoId, gitDomain, komodoId, registryAuthority, runnerId } from "../lib/ids.js";
+import { IMAGES } from "../lib/images.js";
+import { sshOf } from "../lib/ssh.js";
+import { exposeRoute } from "./route.js";
+const FORGEJO_PORT = 3000;
+const KOMODO_PORT = 9120;
+export const resolvePlatform = (hostId, cloudflareId, zone, apiToken, host, guard) => {
+    const guarded = guard !== undefined ? { guardRepo: guard.repo, resticImage: guard.resticImage } : {};
+    const forgejo = forgejoId(hostId);
+    const deploy = komodoId(hostId);
+    const server = makeRef(hostId);
+    const ssh = sshOf(host);
+    const internalIp = makeRef(hostId, "internalIp");
+    const git = exposeRoute(cloudflareId, hostId, gitDomain(zone), FORGEJO_PORT, apiToken);
+    const komodo = exposeRoute(cloudflareId, hostId, deployDomain(zone), KOMODO_PORT, apiToken);
+    const nodes = [
+        {
+            id: forgejo,
+            type: "forgejo",
+            inputs: {
+                server,
+                ...ssh,
+                internalIp,
+                domain: gitDomain(zone),
+                adminUser: adminUsername,
+                adminPassword: generated("FORGEJO_ADMIN_PASSWORD"),
+                image: IMAGES.forgejo,
+                ...guarded,
+            },
+            explicitDependsOn: [],
+            readyWhen: httpOk(makeRef(forgejo, "internalUrl"), { timeout: "120s" }),
+        },
+        {
+            id: runnerId(hostId),
+            type: "forgejo-runner",
+            inputs: {
+                server,
+                ...ssh,
+                instanceUrl: makeRef(forgejo, "internalUrl"),
+                token: makeRef(forgejo, "runnerToken"),
+                image: IMAGES.forgejoRunner,
+                jobImage: IMAGES.forgejoRunnerJob,
+            },
+            explicitDependsOn: [],
+        },
+        {
+            id: deploy,
+            type: "komodo",
+            inputs: {
+                server,
+                ...ssh,
+                internalIp,
+                domain: deployDomain(zone),
+                forgejoUrl: makeRef(forgejo, "internalUrl"),
+                runnerToken: makeRef(forgejo, "runnerToken"),
+                adminUser: adminUsername,
+                adminPassword: generated("KOMODO_ADMIN_PASSWORD"),
+                gitAccount: adminUsername,
+                gitToken: makeRef(forgejo, "gitToken"),
+                registry: registryAuthority(zone),
+                packagesToken: makeRef(forgejo, "packagesToken"),
+                coreImage: IMAGES.komodoCore,
+                peripheryImage: IMAGES.komodoPeriphery,
+                ferretdbImage: IMAGES.ferretdb,
+                postgresImage: IMAGES.postgresDocumentdb,
+                ...guarded,
+            },
+            explicitDependsOn: [],
+            readyWhen: httpOk(makeRef(deploy, "internalUrl"), { timeout: "90s" }),
+        },
+        git.route,
+        komodo.route,
+    ];
+    return { nodes, refs: { forgejo, deploy, gitRoute: git.route.id, deployRoute: komodo.route.id }, ingress: [git.ingress, komodo.ingress] };
+};
+//# sourceMappingURL=platform.js.map

package/dist/resolvers/platform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.js","sourceRoot":"","sources":["../../src/resolvers/platform.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAG7D,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAEtC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAazC,MAAM,YAAY,GAAG,IAAI,CAAC;AAC1B,MAAM,WAAW,GAAG,IAAI,CAAC;AAczB,MAAM,CAAC,MAAM,eAAe,GAAG,CAC3B,MAAc,EACd,YAAoB,EACpB,IAAY,EACZ,QAAmB,EACnB,IAAe,EACf,KAA8B,EACuC,EAAE;IAEvE,MAAM,OAAO,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACrG,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAI/B,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,MAAM,UAAU,GAAG,OAAO,CAAS,MAAM,EAAE,YAAY,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAE5F,MAAM,KAAK,GAAmB;QAC1B;YACI,EAAE,EAAE,OAAO;YACX,IAAI,EAAE,SAAS;YACf,MAAM,EAAE;gBACJ,MAAM;gBACN,GAAG,GAAG;gBACN,UAAU;gBACV,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC;gBACvB,SAAS,EAAE,aAAa;gBACxB,aAAa,EAAE,SAAS,CAAC,wBAAwB,CAAC;gBAClD,KAAK,EAAE,MAAM,CAAC,OAAO;gBACrB,GAAG,OAAO;aACb;YACD,iBAAiB,EAAE,EAAE;YACrB,SAAS,EAAE,MAAM,CAAC,OAAO,CAAS,OAAO,EAAE,aAAa,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;SAClF;QACD;YACI,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,gBAAgB;YAGtB,MAAM,EAAE;gBACJ,MAAM;gBACN,GAAG,GAAG;gBACN,WAAW,EAAE,OAAO,CAAS,OAAO,EAAE,aAAa,CAAC;gBACpD,KAAK,EAAE,OAAO,CAAS,OAAO,EAAE,aAAa,CAAC;gBAC9C,KAAK,EAAE,MAAM,CAAC,aAAa;gBAC3B,QAAQ,EAAE,MAAM,CAAC,gBAAgB;aACpC;YACD,iBAAiB,EAAE,EAAE;SACxB;QACD;YACI,EAAE,EAAE,MAAM;YACV,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE;gBACJ,MAAM;gBACN,GAAG,GAAG;gBACN,UAAU;gBACV,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC;gBAC1B,UAAU,EAAE,OAAO,CAAS,OAAO,EAAE,aAAa,CAAC;gBACnD,WAAW,EAAE,OAAO,CAAS,OAAO,EAAE,aAAa,CAAC;gBACpD,SAAS,EAAE,aAAa;gBACxB,aAAa,EAAE,SAAS,CAAC,uBAAuB,CAAC;gBAGjD,UAAU,EAAE,aAAa;gBACzB,QAAQ,EAAE,OAAO,CAAS,OAAO,EAAE,UAAU,CAAC;gBAG9C,QAAQ,EAAE,iBAAiB,CAAC,IAAI,CAAC;gBACjC,aAAa,EAAE,OAAO,CAAS,OAAO,EAAE,eAAe,CAAC;gBACxD,SAAS,EAAE,MAAM,CAAC,UAAU;gBAC5B,cAAc,EAAE,MAAM,CAAC,eAAe;gBACtC,aAAa,EAAE,MAAM,CAAC,QAAQ;gBAC9B,aAAa,EAAE,MAAM,CAAC,kBAAkB;gBACxC,GAAG,OAAO;aACb;YACD,iBAAiB,EAAE,EAAE;YACrB,SAAS,EAAE,MAAM,CAAC,OAAO,CAAS,MAAM,EAAE,aAAa,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;SAChF;QACD,GAAG,CAAC,KAAK;QACT,MAAM,CAAC,KAAK;KACf,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;AAC9I,CAAC,CAAC"}

package/dist/resolvers/route.d.ts

@@ -0,0 +1,12 @@
+import type { SecretRef } from "@intentic/graph";
+import type { ResolvedNode } from "@intentic/resources";
+export declare const routeId: (cloudflareId: string, hostname: string) => string;
+export interface IngressPair {
+    readonly hostname: string;
+    readonly port: number;
+}
+export declare const exposeRoute: (cloudflareId: string, hostId: string, hostname: string, port: number, apiToken: SecretRef) => {
+    route: ResolvedNode;
+    ingress: IngressPair;
+};
+//# sourceMappingURL=route.d.ts.map

package/dist/resolvers/route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../src/resolvers/route.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAUxD,eAAO,MAAM,OAAO,GAAI,cAAc,MAAM,EAAE,UAAU,MAAM,KAAG,MAA6C,CAAC;AAK/G,MAAM,WAAW,WAAW;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACzB;AAKD,eAAO,MAAM,WAAW,GACpB,cAAc,MAAM,EACpB,QAAQ,MAAM,EACd,UAAU,MAAM,EAChB,MAAM,MAAM,EACZ,UAAU,SAAS,KACpB;IAAE,KAAK,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,WAAW,CAAA;CAQ5C,CAAC"}

package/dist/resolvers/route.js

@@ -0,0 +1,17 @@
+import { makeRef } from "@intentic/graph";
+import { tunnelId } from "../lib/ids.js";
+const slug = (hostname) => hostname
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, "-")
+    .replace(/^-+|-+$/g, "");
+export const routeId = (cloudflareId, hostname) => `${cloudflareId}-${slug(hostname)}`;
+export const exposeRoute = (cloudflareId, hostId, hostname, port, apiToken) => ({
+    route: {
+        id: routeId(cloudflareId, hostname),
+        type: "cf-route",
+        inputs: { hostname, zoneId: makeRef(cloudflareId, "zoneId"), apiToken, cname: makeRef(tunnelId(hostId), "cname") },
+        explicitDependsOn: [cloudflareId, tunnelId(hostId)],
+    },
+    ingress: { hostname, port },
+});
+//# sourceMappingURL=route.js.map

package/dist/resolvers/route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.js","sourceRoot":"","sources":["../../src/resolvers/route.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,MAAM,IAAI,GAAG,CAAC,QAAgB,EAAU,EAAE,CACtC,QAAQ;KACH,WAAW,EAAE;KACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;KAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAGjC,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,YAAoB,EAAE,QAAgB,EAAU,EAAE,CAAC,GAAG,YAAY,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;AAa/G,MAAM,CAAC,MAAM,WAAW,GAAG,CACvB,YAAoB,EACpB,MAAc,EACd,QAAgB,EAChB,IAAY,EACZ,QAAmB,EAC0B,EAAE,CAAC,CAAC;IACjD,KAAK,EAAE;QACH,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC;QACnC,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,EAAE;QAClH,iBAAiB,EAAE,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;KACtD;IACD,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;CAC9B,CAAC,CAAC"}

package/dist/resolvers/service.d.ts

@@ -0,0 +1,13 @@
+import type { SecretRef } from "@intentic/graph";
+import type { HostInput, ServiceIntent, ServiceKind } from "@intentic/need-resolver";
+import type { ResolvedNode } from "@intentic/resources";
+import type { IngressPair } from "./route.js";
+export declare const serviceMcp: (kind: ServiceKind) => {
+    readonly path: string;
+    readonly tokenSecret: string;
+} | undefined;
+export declare const resolveService: (intent: ServiceIntent, host: HostInput, zone: string, apiToken: SecretRef) => {
+    nodes: ResolvedNode[];
+    ingress: IngressPair[];
+};
+//# sourceMappingURL=service.d.ts.map

package/dist/resolvers/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/resolvers/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACrF,OAAO,KAAK,EAAE,YAAY,EAAgB,MAAM,qBAAqB,CAAC;AAGtE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAgF9C,eAAO,MAAM,UAAU,GAAI,MAAM,WAAW,KAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,SAA8B,CAAC;AAUxI,eAAO,MAAM,cAAc,GACvB,QAAQ,aAAa,EACrB,MAAM,SAAS,EACf,MAAM,MAAM,EACZ,UAAU,SAAS,KACpB;IAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IAAC,OAAO,EAAE,WAAW,EAAE,CAAA;CAuCjD,CAAC"}

package/dist/resolvers/service.js

@@ -0,0 +1,88 @@
+import { generated, httpOk, makeRef } from "@intentic/graph";
+import { IMAGES } from "../lib/images.js";
+import { sshOf } from "../lib/ssh.js";
+import { exposeRoute } from "./route.js";
+const catalog = {
+    signoz: {
+        type: "signoz",
+        port: 8080,
+        images: {
+            clickhouseImage: IMAGES.clickhouse,
+            signozImage: IMAGES.signoz,
+            otelImage: IMAGES.signozOtelCollector,
+            zookeeperImage: IMAGES.signozZookeeper,
+        },
+        mcp: { path: "/mcp", tokenSecret: "SIGNOZ_MCP_TOKEN" },
+    },
+    outline: {
+        type: "outline",
+        port: 3210,
+        authPort: 5556,
+        images: {
+            outlineImage: IMAGES.outline,
+            postgresImage: IMAGES.postgres,
+            valkeyImage: IMAGES.valkey,
+            dexImage: IMAGES.dex,
+        },
+    },
+    paperless: {
+        type: "paperless",
+        port: 8000,
+        images: { paperlessImage: IMAGES.paperless, valkeyImage: IMAGES.valkey },
+    },
+    openproject: {
+        type: "openproject",
+        port: 8082,
+        adminLogin: "admin",
+        readyTimeout: "600s",
+        images: { openprojectImage: IMAGES.openproject },
+    },
+    invoiceninja: {
+        type: "invoiceninja",
+        port: 8083,
+        readyTimeout: "600s",
+        images: { invoiceninjaImage: IMAGES.invoiceninja, mariadbImage: IMAGES.mariadb, valkeyImage: IMAGES.valkey },
+    },
+    infisical: {
+        type: "infisical",
+        port: 8084,
+        images: { infisicalImage: IMAGES.infisical, postgresImage: IMAGES.postgres, valkeyImage: IMAGES.valkey },
+    },
+};
+export const serviceMcp = (kind) => catalog[kind].mcp;
+const serviceAdminEmail = (zone) => `intentic@${zone}`;
+export const resolveService = (intent, host, zone, apiToken) => {
+    const spec = catalog[intent.kind];
+    const ssh = sshOf(host);
+    const exposure = exposeRoute(intent.expose, intent.on, intent.domain, spec.port, apiToken);
+    const authDomain = spec.authPort === undefined
+        ? undefined
+        : intent.domain === zone
+            ? `auth.${zone}`
+            : `${intent.domain.slice(0, -(zone.length + 1))}-auth.${zone}`;
+    const authExposure = spec.authPort === undefined || authDomain === undefined
+        ? undefined
+        : exposeRoute(intent.expose, intent.on, authDomain, spec.authPort, apiToken);
+    const nodes = [
+        {
+            id: intent.id,
+            type: spec.type,
+            inputs: {
+                server: makeRef(intent.on),
+                ...ssh,
+                internalIp: makeRef(intent.on, "internalIp"),
+                domain: intent.domain,
+                ...(authDomain === undefined ? {} : { authDomain }),
+                adminUser: spec.adminLogin ?? serviceAdminEmail(zone),
+                adminPassword: generated(`${intent.kind.toUpperCase()}_ADMIN_PASSWORD`),
+                ...spec.images,
+            },
+            explicitDependsOn: [],
+            readyWhen: httpOk(makeRef(intent.id, "internalUrl"), { timeout: spec.readyTimeout ?? "180s" }),
+        },
+        exposure.route,
+        ...(authExposure === undefined ? [] : [authExposure.route]),
+    ];
+    return { nodes, ingress: [exposure.ingress, ...(authExposure === undefined ? [] : [authExposure.ingress])] };
+};
+//# sourceMappingURL=service.js.map

package/dist/resolvers/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/resolvers/service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAG7D,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAEtC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AA0BzC,MAAM,OAAO,GAA+C;IACxD,MAAM,EAAE;QACJ,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,IAAI;QACV,MAAM,EAAE;YACJ,eAAe,EAAE,MAAM,CAAC,UAAU;YAClC,WAAW,EAAE,MAAM,CAAC,MAAM;YAC1B,SAAS,EAAE,MAAM,CAAC,mBAAmB;YACrC,cAAc,EAAE,MAAM,CAAC,eAAe;SACzC;QACD,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE;KACzD;IACD,OAAO,EAAE;QACL,IAAI,EAAE,SAAS;QAEf,IAAI,EAAE,IAAI;QACV,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE;YACJ,YAAY,EAAE,MAAM,CAAC,OAAO;YAC5B,aAAa,EAAE,MAAM,CAAC,QAAQ;YAC9B,WAAW,EAAE,MAAM,CAAC,MAAM;YAC1B,QAAQ,EAAE,MAAM,CAAC,GAAG;SACvB;KACJ;IACD,SAAS,EAAE;QACP,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE;KAC3E;IACD,WAAW,EAAE;QACT,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,OAAO;QACnB,YAAY,EAAE,MAAM;QACpB,MAAM,EAAE,EAAE,gBAAgB,EAAE,MAAM,CAAC,WAAW,EAAE;KACnD;IACD,YAAY,EAAE;QACV,IAAI,EAAE,cAAc;QAEpB,IAAI,EAAE,IAAI;QAEV,YAAY,EAAE,MAAM;QACpB,MAAM,EAAE,EAAE,iBAAiB,EAAE,MAAM,CAAC,YAAY,EAAE,YAAY,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE;KAC/G;IACD,SAAS,EAAE;QACP,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE;KAC3G;CACJ,CAAC;AAIF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAiB,EAAuE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;AAIxI,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,YAAY,IAAI,EAAE,CAAC;AAMvE,MAAM,CAAC,MAAM,cAAc,GAAG,CAC1B,MAAqB,EACrB,IAAe,EACf,IAAY,EACZ,QAAmB,EAC8B,EAAE;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAK3F,MAAM,UAAU,GACZ,IAAI,CAAC,QAAQ,KAAK,SAAS;QACvB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI;YACtB,CAAC,CAAC,QAAQ,IAAI,EAAE;YAChB,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC;IACzE,MAAM,YAAY,GACd,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS;QACnD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACrF,MAAM,KAAK,GAAmB;QAC1B;YACI,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE;gBACJ,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,GAAG,GAAG;gBACN,UAAU,EAAE,OAAO,CAAS,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC;gBACpD,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;gBACnD,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,iBAAiB,CAAC,IAAI,CAAC;gBACrD,aAAa,EAAE,SAAS,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC;gBACvE,GAAG,IAAI,CAAC,MAAM;aACjB;YACD,iBAAiB,EAAE,EAAE;YACrB,SAAS,EAAE,MAAM,CAAC,OAAO,CAAS,MAAM,CAAC,EAAE,EAAE,aAAa,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,IAAI,MAAM,EAAE,CAAC;SACzG;QACD,QAAQ,CAAC,KAAK;QACd,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;KAC9D,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AACjH,CAAC,CAAC"}

package/dist/resolvers/workspace.d.ts

@@ -0,0 +1,14 @@
+import type { SecretRef } from "@intentic/graph";
+import type { HostInput, ServiceKind, WorkspaceIntent } from "@intentic/need-resolver";
+import type { ResolvedNode } from "@intentic/resources";
+import type { IngressPair } from "./route.js";
+export interface WorkspaceTool {
+    readonly id: string;
+    readonly kind: ServiceKind;
+    readonly domain: string;
+}
+export declare const resolveWorkspace: (intent: WorkspaceIntent, host: HostInput, zone: string, apiToken: SecretRef, tools: readonly WorkspaceTool[]) => {
+    nodes: ResolvedNode[];
+    ingress: IngressPair[];
+};
+//# sourceMappingURL=workspace.d.ts.map

package/dist/resolvers/workspace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../../src/resolvers/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACvF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAIxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAM9C,MAAM,WAAW,aAAa;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CAC3B;AAgBD,eAAO,MAAM,gBAAgB,GACzB,QAAQ,eAAe,EACvB,MAAM,SAAS,EACf,MAAM,MAAM,EACZ,UAAU,SAAS,EACnB,OAAO,SAAS,aAAa,EAAE,KAChC;IAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IAAC,OAAO,EAAE,WAAW,EAAE,CAAA;CA4CjD,CAAC"}