@intentic/state-resolver 1.18.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Artur Kurowski
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,27 @@
+# @intentic/state-resolver
+
+The **state resolver**: turns an `IntentSet` into the desired state — a `DesiredStateGraph`. It assigns each need its catalog option and compiles the emitted nodes into one graph. Depends on [`@intentic/graph`](../graph), [`@intentic/need-resolver`](../need-resolver) (needs), and [`@intentic/resources`](../resources) (the vocabulary it emits); consumed by [`@intentic/sdk`](../sdk).
+
+## Responsibilities
+
+- Resolve needs to concrete catalog options (Forgejo for git+registry, Komodo for control, Cloudflare for domain, GitHub/GHCR as the alternative stack).
+- Emit the `ResolvedNode`s for each assignment and `compile` them into a single dependency-ordered graph (`resolveState`).
+- Derive the control-plane platform and the application-plane support stack (repos, CI, deployments, tunnel, routes, workspace runner).
+- It does **not** talk to infra or reconcile — it only produces the serializable artifact.
+
+## Key files
+
+- [src/state.ts](src/state.ts) — `resolveState`: intent → `DesiredStateGraph`.
+- [src/catalog.ts](src/catalog.ts) — `defaultCatalog`, `Catalog`/`Option` (what satisfies each capability).
+- [src/emit.ts](src/emit.ts) — `emit` + `Assignment` (build the nodes for one assignment); `emit-github.ts` for the GitHub stack.
+- [src/platform.ts](src/platform.ts) / [src/app.ts](src/app.ts) / [src/route.ts](src/route.ts) / [src/workspace.ts](src/workspace.ts) — per-area node derivation (control plane, app plane, DNS routes, dev workspace runner).
+- [src/ids.ts](src/ids.ts) / [src/identity.ts](src/identity.ts) — id helpers, `adminUsername`.
+
+## How it fits
+
+Stage 2 of the pipeline: `need-resolver` produces `Need`s, this maps each to an `Option` and emits `@intentic/resources` nodes, then `graph.compile` orders them. The `sdk`'s `defineStack` runs this end-to-end; `cli resolve` writes the result to `desired-state.json`.
+
+## Conventions & gotchas
+
+- Adding a resource kind means emitting it here **and** registering its type/outputs in `resources` and a provider in `providers`.
+- Emitter changes are snapshot-tested ([src/emit.test.ts](src/emit.test.ts), [src/state.test.ts](src/state.test.ts)) — update fixtures deliberately. See [ARCHITECTURE.md](../../ARCHITECTURE.md).

package/dist/app-github.d.ts

@@ -0,0 +1,9 @@
+import type { SecretRef } from "@intentic/graph";
+import type { AppIntent } from "@intentic/need-resolver";
+import type { ResolvedNode } from "@intentic/resources";
+import type { IngressPair } from "./route.js";
+export declare const resolveAppGitHub: (intent: AppIntent, githubId: string, apiToken: SecretRef, zone: string, token: SecretRef) => {
+    nodes: ResolvedNode[];
+    ingress: IngressPair[];
+};
+//# sourceMappingURL=app-github.d.ts.map

package/dist/app-github.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-github.d.ts","sourceRoot":"","sources":["../src/app-github.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAO9C,eAAO,MAAM,gBAAgB,GACzB,QAAQ,SAAS,EACjB,UAAU,MAAM,EAChB,UAAU,SAAS,EACnB,MAAM,MAAM,EACZ,OAAO,SAAS,KACjB;IAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IAAC,OAAO,EAAE,WAAW,EAAE,CAAA;CAwEjD,CAAC"}

package/dist/app-github.js

@@ -0,0 +1,64 @@
+import { makeRef } from "@intentic/graph";
+import { deploymentId, deploymentPort, ghCiId, repoId } from "./ids.js";
+import { exposeRoute } from "./route.js";
+export const resolveAppGitHub = (intent, githubId, apiToken, zone, token) => {
+    const repo = repoId(intent.id);
+    const owner = makeRef(githubId, "owner");
+    const otel = intent.observe !== undefined
+        ? { OTEL_EXPORTER_OTLP_ENDPOINT: makeRef(intent.observe, "otlpEndpoint"), OTEL_EXPORTER_OTLP_PROTOCOL: "http/protobuf" }
+        : undefined;
+    const nodes = [
+        {
+            id: repo,
+            type: "gh-repo",
+            inputs: { name: intent.id, owner, private: true, token },
+            explicitDependsOn: [githubId],
+        },
+    ];
+    const ingress = [];
+    for (const [name, environment] of Object.entries(intent.environments)) {
+        const id = deploymentId(intent.id, name);
+        const port = deploymentPort(id);
+        const env = otel !== undefined || environment.env !== undefined ? { ...otel, ...environment.env } : undefined;
+        const ci = ghCiId(intent.id, name);
+        nodes.push({
+            id: ci,
+            type: "gh-ci",
+            inputs: {
+                owner,
+                repoName: intent.id,
+                branch: environment.branch,
+                tag: name,
+                token,
+                hostAddress: makeRef(intent.on, "publicIp"),
+                hostUser: intent.on,
+                hostSshKey: intent.on,
+                deploymentId: id,
+                port,
+                ...(env !== undefined ? { env } : {}),
+            },
+            explicitDependsOn: [githubId, repo],
+        });
+        nodes.push({
+            id,
+            type: "gh-deployment",
+            inputs: {
+                owner,
+                repoName: intent.id,
+                tag: name,
+                domain: environment.domain,
+                internalIp: makeRef(intent.on, "internalIp"),
+                port,
+                address: intent.on,
+                ...(env !== undefined ? { env } : {}),
+            },
+            explicitDependsOn: [ci, ...(intent.observe !== undefined ? [intent.observe] : [])],
+            ...(environment.readyWhen !== undefined ? { readyWhen: environment.readyWhen } : {}),
+        });
+        const exposure = exposeRoute(intent.expose, intent.on, environment.domain, port, apiToken);
+        nodes.push(exposure.route);
+        ingress.push(exposure.ingress);
+    }
+    return { nodes, ingress };
+};
+//# sourceMappingURL=app-github.js.map

package/dist/app-github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-github.js","sourceRoot":"","sources":["../src/app-github.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAG1C,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAExE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAMzC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC5B,MAAiB,EACjB,QAAgB,EAChB,QAAmB,EACnB,IAAY,EACZ,KAAgB,EACiC,EAAE;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,OAAO,CAAS,QAAQ,EAAE,OAAO,CAAC,CAAC;IAGjD,MAAM,IAAI,GACN,MAAM,CAAC,OAAO,KAAK,SAAS;QACxB,CAAC,CAAC,EAAE,2BAA2B,EAAE,OAAO,CAAS,MAAM,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,2BAA2B,EAAE,eAAe,EAAE;QAChI,CAAC,CAAC,SAAS,CAAC;IAEpB,MAAM,KAAK,GAAmB;QAC1B;YACI,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE;YACxD,iBAAiB,EAAE,CAAC,QAAQ,CAAC;SAChC;KACJ,CAAC;IACF,MAAM,OAAO,GAAkB,EAAE,CAAC;IAElC,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QACpE,MAAM,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,KAAK,SAAS,IAAI,WAAW,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9G,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAInC,KAAK,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,OAAO;YACb,MAAM,EAAE;gBACJ,KAAK;gBACL,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,GAAG,EAAE,IAAI;gBACT,KAAK;gBACL,WAAW,EAAE,OAAO,CAAS,MAAM,CAAC,EAAE,EAAE,UAAU,CAAC;gBACnD,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,UAAU,EAAE,MAAM,CAAC,EAAE;gBACrB,YAAY,EAAE,EAAE;gBAChB,IAAI;gBACJ,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxC;YACD,iBAAiB,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC;SACtC,CAAC,CAAC;QAGH,KAAK,CAAC,IAAI,CAAC;YACP,EAAE;YACF,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE;gBACJ,KAAK;gBACL,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,GAAG,EAAE,IAAI;gBACT,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,UAAU,EAAE,OAAO,CAAS,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC;gBACpD,IAAI;gBAEJ,OAAO,EAAE,MAAM,CAAC,EAAE;gBAClB,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxC;YACD,iBAAiB,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAClF,GAAG,CAAC,WAAW,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvF,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC3F,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC,CAAC"}

package/dist/app.d.ts

@@ -0,0 +1,13 @@
+import type { SecretRef } from "@intentic/graph";
+import type { AppIntent, BackingIntent, HostInput } from "@intentic/need-resolver";
+import type { ResolvedNode } from "@intentic/resources";
+import type { PlatformRefs } from "./platform.js";
+import type { IngressPair } from "./route.js";
+export declare const resolveApp: (intent: AppIntent, platform: PlatformRefs, apiToken: SecretRef, zone: string, controlPlaneHost: string, backings: ReadonlyMap<string, {
+    readonly intent: BackingIntent;
+    readonly host: HostInput;
+}>) => {
+    nodes: ResolvedNode[];
+    ingress: IngressPair[];
+};
+//# sourceMappingURL=app.d.ts.map

package/dist/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAO,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEtD,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACnF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAexD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAW9C,eAAO,MAAM,UAAU,GACnB,QAAQ,SAAS,EACjB,UAAU,YAAY,EACtB,UAAU,SAAS,EACnB,MAAM,MAAM,EACZ,kBAAkB,MAAM,EAGxB,UAAU,WAAW,CAAC,MAAM,EAAE;IAAE,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC,KAC5F;IAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IAAC,OAAO,EAAE,WAAW,EAAE,CAAA;CAyIjD,CAAC"}

package/dist/app.js

@@ -0,0 +1,108 @@
+import { generated, makeRef } from "@intentic/graph";
+import { bindingEnv, resolveBinding } from "./backing.js";
+import { adminUsername, ciId, deploymentId, deploymentPort, forgejoNotifyId, forgejoOrgId, gitDomain, komodoNotifyId, orgName, registryAuthority, repoId, } from "./ids.js";
+import { exposeRoute } from "./route.js";
+export const resolveApp = (intent, platform, apiToken, zone, controlPlaneHost, backings) => {
+    const repo = repoId(intent.id);
+    const forgejoUrl = makeRef(platform.forgejo, "url");
+    const komodoUrl = makeRef(platform.deploy, "url");
+    const komodoInternalUrl = makeRef(platform.deploy, "internalUrl");
+    const packagesToken = makeRef(platform.forgejo, "packagesToken");
+    const forgejoAdmin = { adminUser: adminUsername, adminPassword: generated("FORGEJO_ADMIN_PASSWORD") };
+    const komodoAdmin = { adminUser: adminUsername, adminPassword: generated("KOMODO_ADMIN_PASSWORD") };
+    const ownerTeam = intent.teams?.[0];
+    const owner = ownerTeam !== undefined ? orgName(ownerTeam.team) : adminUsername;
+    const ownerDeps = ownerTeam !== undefined ? [forgejoOrgId(controlPlaneHost, ownerTeam.team)] : [];
+    const otel = intent.observe !== undefined
+        ? { OTEL_EXPORTER_OTLP_ENDPOINT: makeRef(intent.observe, "otlpEndpoint"), OTEL_EXPORTER_OTLP_PROTOCOL: "http/protobuf" }
+        : undefined;
+    const appDomains = Object.values(intent.environments).map((environment) => environment.domain);
+    const bindingNodes = [];
+    const bound = {};
+    const bindingDeps = [];
+    for (const binding of intent.use ?? []) {
+        const backing = backings.get(binding.target);
+        if (backing === undefined) {
+            throw new Error(`app "${intent.id}" uses unknown backing "${binding.target}"; declare it with i.want.${binding.capability}`);
+        }
+        const node = resolveBinding(intent.id, backing.intent, backing.host, appDomains);
+        bindingNodes.push(node);
+        Object.assign(bound, bindingEnv(intent.id, backing.intent));
+        bindingDeps.push(node.id);
+    }
+    const nodes = [
+        ...bindingNodes,
+        {
+            id: repo,
+            type: "repo",
+            inputs: { name: intent.id, owner, private: true, forgejoUrl, domain: gitDomain(zone), ...forgejoAdmin },
+            explicitDependsOn: [platform.forgejo, platform.gitRoute, ...ownerDeps],
+        },
+    ];
+    const ingress = [];
+    for (const [name, environment] of Object.entries(intent.environments)) {
+        const id = deploymentId(intent.id, name);
+        const port = deploymentPort(id);
+        const merged = { ...otel, ...bound, ...environment.env };
+        const env = Object.keys(merged).length > 0 ? merged : undefined;
+        const ci = ciId(intent.id, name);
+        nodes.push({
+            id: ci,
+            type: "ci",
+            inputs: {
+                forgejoUrl,
+                ...forgejoAdmin,
+                komodoPassword: komodoAdmin.adminPassword,
+                owner,
+                repoName: intent.id,
+                branch: environment.branch,
+                registry: registryAuthority(zone),
+                tag: name,
+                packagesToken,
+                komodoUrl: komodoInternalUrl,
+                deployment: id,
+            },
+            explicitDependsOn: [platform.forgejo, platform.gitRoute, platform.deploy, repo, ...ownerDeps],
+        });
+        nodes.push({
+            id,
+            type: "deployment",
+            inputs: {
+                ...(intent.on !== controlPlaneHost ? { server: intent.on } : {}),
+                owner,
+                repoName: intent.id,
+                registry: registryAuthority(zone),
+                tag: name,
+                domain: environment.domain,
+                internalIp: makeRef(intent.on, "internalIp"),
+                port,
+                komodoUrl,
+                ...komodoAdmin,
+                ...(env !== undefined ? { env } : {}),
+            },
+            explicitDependsOn: [ci, platform.deployRoute, ...(intent.observe !== undefined ? [intent.observe] : []), ...bindingDeps],
+            ...(environment.readyWhen !== undefined ? { readyWhen: environment.readyWhen } : {}),
+        });
+        const exposure = exposeRoute(intent.expose, intent.on, environment.domain, port, apiToken);
+        nodes.push(exposure.route);
+        ingress.push(exposure.ingress);
+    }
+    if (intent.notify !== undefined) {
+        const webhook = makeRef(intent.notify, `appWebhook:${intent.id}`);
+        nodes.push({
+            id: forgejoNotifyId(intent.id),
+            type: "forgejo-notify",
+            inputs: { forgejoUrl, ...forgejoAdmin, owner, repoName: intent.id, webhook, events: ["build"] },
+            explicitDependsOn: [platform.forgejo, platform.gitRoute, repo, intent.notify, ...ownerDeps],
+        });
+        const targets = Object.keys(intent.environments).map((environment) => deploymentId(intent.id, environment));
+        nodes.push({
+            id: komodoNotifyId(intent.id),
+            type: "komodo-notify",
+            inputs: { komodoUrl, ...komodoAdmin, targets, webhook, events: ["deploy"] },
+            explicitDependsOn: [platform.deploy, platform.deployRoute, intent.notify, ...targets],
+        });
+    }
+    return { nodes, ingress };
+};
+//# sourceMappingURL=app.js.map

package/dist/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAGrD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EACH,aAAa,EACb,IAAI,EACJ,YAAY,EACZ,cAAc,EACd,eAAe,EACf,YAAY,EACZ,SAAS,EACT,cAAc,EACd,OAAO,EACP,iBAAiB,EACjB,MAAM,GACT,MAAM,UAAU,CAAC;AAGlB,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAUzC,MAAM,CAAC,MAAM,UAAU,GAAG,CACtB,MAAiB,EACjB,QAAsB,EACtB,QAAmB,EACnB,IAAY,EACZ,gBAAwB,EAGxB,QAA2F,EAC1C,EAAE;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/B,MAAM,UAAU,GAAG,OAAO,CAAS,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,OAAO,CAAS,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAG1D,MAAM,iBAAiB,GAAG,OAAO,CAAS,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC1E,MAAM,aAAa,GAAG,OAAO,CAAS,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACzE,MAAM,YAAY,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,CAAC,wBAAwB,CAAC,EAAE,CAAC;IACtG,MAAM,WAAW,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,CAAC,uBAAuB,CAAC,EAAE,CAAC;IAKpG,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;IAChF,MAAM,SAAS,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,gBAAgB,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAGlG,MAAM,IAAI,GACN,MAAM,CAAC,OAAO,KAAK,SAAS;QACxB,CAAC,CAAC,EAAE,2BAA2B,EAAE,OAAO,CAAS,MAAM,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,2BAA2B,EAAE,eAAe,EAAE;QAChI,CAAC,CAAC,SAAS,CAAC;IAMpB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC/F,MAAM,YAAY,GAAmB,EAAE,CAAC;IACxC,MAAM,KAAK,GAAgC,EAAE,CAAC;IAC9C,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,QAAQ,MAAM,CAAC,EAAE,2BAA2B,OAAO,CAAC,MAAM,6BAA6B,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QACjI,CAAC;QACD,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACjF,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5D,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM,KAAK,GAAmB;QAC1B,GAAG,YAAY;QACf;YACI,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,YAAY,EAAE;YAGvG,iBAAiB,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,EAAE,GAAG,SAAS,CAAC;SACzE;KACJ,CAAC;IACF,MAAM,OAAO,GAAkB,EAAE,CAAC;IAElC,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QACpE,MAAM,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;QAEhC,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACzD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAChE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAGjC,KAAK,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,IAAI;YACV,MAAM,EAAE;gBACJ,UAAU;gBACV,GAAG,YAAY;gBACf,cAAc,EAAE,WAAW,CAAC,aAAa;gBACzC,KAAK;gBACL,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,QAAQ,EAAE,iBAAiB,CAAC,IAAI,CAAC;gBACjC,GAAG,EAAE,IAAI;gBACT,aAAa;gBACb,SAAS,EAAE,iBAAiB;gBAC5B,UAAU,EAAE,EAAE;aACjB;YAGD,iBAAiB,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC;SAChG,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC;YACP,EAAE;YACF,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE;gBAIJ,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,gBAAgB,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,KAAK;gBACL,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,QAAQ,EAAE,iBAAiB,CAAC,IAAI,CAAC;gBACjC,GAAG,EAAE,IAAI;gBACT,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,UAAU,EAAE,OAAO,CAAS,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC;gBACpD,IAAI;gBACJ,SAAS;gBACT,GAAG,WAAW;gBACd,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxC;YAKD,iBAAiB,EAAE,CAAC,EAAE,EAAE,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,WAAW,CAAC;YACxH,GAAG,CAAC,WAAW,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvF,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC3F,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAKD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,OAAO,CAAS,MAAM,CAAC,MAAM,EAAE,cAAc,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1E,KAAK,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,EAAE,UAAU,EAAE,GAAG,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;YAC/F,iBAAiB,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC;SAC9F,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;QAC5G,KAAK,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE;YAC3E,iBAAiB,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC;SACxF,CAAC,CAAC;IACP,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC,CAAC"}

package/dist/backing.d.ts

@@ -0,0 +1,11 @@
+import type { Ref, SecretRef } from "@intentic/graph";
+import type { BackingIntent, HostInput } from "@intentic/need-resolver";
+import type { ResolvedNode } from "@intentic/resources";
+import type { IngressPair } from "./route.js";
+export declare const resolveBacking: (intent: BackingIntent, host: HostInput, apiToken: SecretRef) => {
+    nodes: ResolvedNode[];
+    ingress: IngressPair[];
+};
+export declare const resolveBinding: (appId: string, intent: BackingIntent, host: HostInput, appDomains: readonly string[]) => ResolvedNode;
+export declare const bindingEnv: (appId: string, intent: BackingIntent) => Record<string, Ref<string>>;
+//# sourceMappingURL=backing.d.ts.map

package/dist/backing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backing.d.ts","sourceRoot":"","sources":["../src/backing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEtD,OAAO,KAAK,EAAqB,aAAa,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAC3F,OAAO,KAAK,EAAE,YAAY,EAAgB,MAAM,qBAAqB,CAAC;AAGtE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAoG9C,eAAO,MAAM,cAAc,GAAI,QAAQ,aAAa,EAAE,MAAM,SAAS,EAAE,UAAU,SAAS,KAAG;IAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IAAC,OAAO,EAAE,WAAW,EAAE,CAAA;CA2B3I,CAAC;AAOF,eAAO,MAAM,cAAc,GAAI,OAAO,MAAM,EAAE,QAAQ,aAAa,EAAE,MAAM,SAAS,EAAE,YAAY,SAAS,MAAM,EAAE,KAAG,YA+DrH,CAAC;AAIF,eAAO,MAAM,UAAU,GAAI,OAAO,MAAM,EAAE,QAAQ,aAAa,KAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAO3F,CAAC"}

package/dist/backing.js

@@ -0,0 +1,147 @@
+import { generated, makeRef } from "@intentic/graph";
+import { appSlug, backingPort, bindingId, bucketName, cacheUser, dbName, secretKey } from "./ids.js";
+import { IMAGES } from "./images.js";
+import { exposeRoute, routeId } from "./route.js";
+const catalog = {
+    database: { type: "postgres", bindingType: "postgres-database", image: IMAGES.postgres, routes: false },
+    cache: { type: "valkey", bindingType: "valkey-namespace", image: IMAGES.valkey, routes: false },
+    auth: { type: "authentik", bindingType: "authentik-client", image: IMAGES.authentik, routes: true },
+    "object-storage": { type: "garage", bindingType: "garage-bucket", image: IMAGES.garage, routes: false },
+};
+const envContract = {
+    database: [["DATABASE_URL", "url"]],
+    cache: [
+        ["VALKEY_URL", "url"],
+        ["REDIS_URL", "url"],
+    ],
+    auth: [
+        ["OIDC_ISSUER", "issuer"],
+        ["OIDC_CLIENT_ID", "clientId"],
+        ["OIDC_CLIENT_SECRET", "clientSecret"],
+    ],
+    "object-storage": [
+        ["S3_ENDPOINT", "endpoint"],
+        ["S3_ACCESS_KEY", "accessKey"],
+        ["S3_SECRET_KEY", "secretKey"],
+        ["S3_BUCKET", "bucket"],
+    ],
+};
+const sshOf = (input) => ({
+    address: input.address,
+    user: input.user,
+    sshKey: input.sshKey,
+    ...(input.port !== undefined ? { port: input.port } : {}),
+});
+const adminSecretKey = (capability, instanceId) => secretKey(capability === "database" ? "POSTGRES_ADMIN_PASSWORD" : "VALKEY_ADMIN_PASSWORD", instanceId);
+const authBootstrapTokenKey = (instanceId) => secretKey("AUTHENTIK_BOOTSTRAP_TOKEN", instanceId);
+const instanceExtra = (intent) => {
+    switch (intent.capability) {
+        case "database":
+        case "cache":
+            return { adminPassword: generated(adminSecretKey(intent.capability, intent.id)) };
+        case "auth":
+            return {
+                domain: intent.domain,
+                secretKey: generated(secretKey("AUTHENTIK_SECRET_KEY", intent.id)),
+                bootstrapToken: generated(authBootstrapTokenKey(intent.id)),
+                bootstrapPassword: generated(secretKey("AUTHENTIK_BOOTSTRAP_PASSWORD", intent.id)),
+                dbPassword: generated(secretKey("AUTHENTIK_DB_PASSWORD", intent.id)),
+                pgImage: IMAGES.postgres,
+                redisImage: IMAGES.valkey,
+            };
+        case "object-storage":
+            return {
+                region: "garage",
+                ...(intent.domain !== undefined ? { domain: intent.domain } : {}),
+            };
+    }
+};
+export const resolveBacking = (intent, host, apiToken) => {
+    const spec = catalog[intent.capability];
+    const node = {
+        id: intent.id,
+        type: spec.type,
+        inputs: {
+            server: makeRef(intent.on),
+            ...sshOf(host),
+            internalIp: makeRef(intent.on, "internalIp"),
+            publishPort: backingPort(intent.id),
+            image: spec.image,
+            ...instanceExtra(intent),
+        },
+        explicitDependsOn: [intent.on],
+    };
+    const nodes = [node];
+    const ingress = [];
+    if (spec.routes || intent.domain !== undefined) {
+        if (intent.domain === undefined || intent.expose === undefined) {
+            throw new Error(`backing "${intent.id}" (${intent.capability}) must be exposed with a domain; declare it with { expose, domain }`);
+        }
+        const exposure = exposeRoute(intent.expose, intent.on, intent.domain, backingPort(intent.id), apiToken);
+        nodes.push(exposure.route);
+        ingress.push(exposure.ingress);
+    }
+    return { nodes, ingress };
+};
+export const resolveBinding = (appId, intent, host, appDomains) => {
+    const spec = catalog[intent.capability];
+    const id = bindingId(appId, intent.id);
+    const shared = { ...sshOf(host), instance: intent.id };
+    const node = (inputs) => ({ id, type: spec.bindingType, inputs, explicitDependsOn: [intent.id] });
+    switch (intent.capability) {
+        case "database":
+            return node({
+                ...shared,
+                instanceHost: makeRef(intent.id, "internalHost"),
+                instancePort: makeRef(intent.id, "port"),
+                database: dbName(appId),
+                role: dbName(appId),
+                password: generated(secretKey("APP_DATABASE_PASSWORD", id)),
+            });
+        case "cache":
+            return node({
+                ...shared,
+                instanceHost: makeRef(intent.id, "internalHost"),
+                instancePort: makeRef(intent.id, "port"),
+                adminPassword: generated(adminSecretKey("cache", intent.id)),
+                username: cacheUser(appId),
+                password: generated(secretKey("APP_CACHE_PASSWORD", id)),
+                keyPrefix: cacheUser(appId),
+            });
+        case "auth": {
+            if (intent.domain === undefined || intent.expose === undefined) {
+                throw new Error(`auth backing "${intent.id}" must be exposed with a domain; declare it with i.want.auth({ expose, domain })`);
+            }
+            return {
+                id,
+                type: spec.bindingType,
+                inputs: {
+                    authentikUrl: `https://${intent.domain}`,
+                    bootstrapToken: generated(authBootstrapTokenKey(intent.id)),
+                    domain: intent.domain,
+                    slug: appSlug(appId),
+                    clientId: generated(secretKey("OIDC_CLIENT_ID", id)),
+                    clientSecret: generated(secretKey("OIDC_CLIENT_SECRET", id)),
+                    redirectDomains: appDomains,
+                },
+                explicitDependsOn: [intent.id, routeId(intent.expose, intent.domain)],
+            };
+        }
+        case "object-storage":
+            return node({
+                ...shared,
+                endpoint: makeRef(intent.id, "internalEndpoint"),
+                bucket: bucketName(appId),
+                keyName: bucketName(appId),
+            });
+    }
+};
+export const bindingEnv = (appId, intent) => {
+    const id = bindingId(appId, intent.id);
+    const env = {};
+    for (const [name, output] of envContract[intent.capability]) {
+        env[name] = makeRef(id, output);
+    }
+    return env;
+};
+//# sourceMappingURL=backing.js.map

package/dist/backing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backing.js","sourceRoot":"","sources":["../src/backing.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAGrD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrG,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAelD,MAAM,OAAO,GAAqD;IAC9D,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE;IACvG,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;IAG/F,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE;IACnG,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;CAC1G,CAAC;AAKF,MAAM,WAAW,GAAgF;IAC7F,QAAQ,EAAE,CAAC,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACnC,KAAK,EAAE;QACH,CAAC,YAAY,EAAE,KAAK,CAAC;QACrB,CAAC,WAAW,EAAE,KAAK,CAAC;KACvB;IACD,IAAI,EAAE;QACF,CAAC,aAAa,EAAE,QAAQ,CAAC;QACzB,CAAC,gBAAgB,EAAE,UAAU,CAAC;QAC9B,CAAC,oBAAoB,EAAE,cAAc,CAAC;KACzC;IACD,gBAAgB,EAAE;QACd,CAAC,aAAa,EAAE,UAAU,CAAC;QAC3B,CAAC,eAAe,EAAE,WAAW,CAAC;QAC9B,CAAC,eAAe,EAAE,WAAW,CAAC;QAC9B,CAAC,WAAW,EAAE,QAAQ,CAAC;KAC1B;CACJ,CAAC;AAGF,MAAM,KAAK,GAAG,CAAC,KAAgB,EAA2B,EAAE,CAAC,CAAC;IAC1D,OAAO,EAAE,KAAK,CAAC,OAAO;IACtB,IAAI,EAAE,KAAK,CAAC,IAAI;IAChB,MAAM,EAAE,KAAK,CAAC,MAAM;IACpB,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CAC5D,CAAC,CAAC;AAMH,MAAM,cAAc,GAAG,CAAC,UAA6B,EAAE,UAAkB,EAAU,EAAE,CACjF,SAAS,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,uBAAuB,EAAE,UAAU,CAAC,CAAC;AAI3G,MAAM,qBAAqB,GAAG,CAAC,UAAkB,EAAU,EAAE,CAAC,SAAS,CAAC,2BAA2B,EAAE,UAAU,CAAC,CAAC;AAMjH,MAAM,aAAa,GAAG,CAAC,MAAqB,EAA2B,EAAE;IACrE,QAAQ,MAAM,CAAC,UAAU,EAAE,CAAC;QACxB,KAAK,UAAU,CAAC;QAChB,KAAK,OAAO;YACR,OAAO,EAAE,aAAa,EAAE,SAAS,CAAC,cAAc,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACtF,KAAK,MAAM;YACP,OAAO;gBACH,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,sBAAsB,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;gBAClE,cAAc,EAAE,SAAS,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC3D,iBAAiB,EAAE,SAAS,CAAC,SAAS,CAAC,8BAA8B,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;gBAClF,UAAU,EAAE,SAAS,CAAC,SAAS,CAAC,uBAAuB,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;gBACpE,OAAO,EAAE,MAAM,CAAC,QAAQ;gBACxB,UAAU,EAAE,MAAM,CAAC,MAAM;aAC5B,CAAC;QACN,KAAK,gBAAgB;YAIjB,OAAO;gBACH,MAAM,EAAE,QAAQ;gBAChB,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpE,CAAC;IACV,CAAC;AACL,CAAC,CAAC;AAMF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,MAAqB,EAAE,IAAe,EAAE,QAAmB,EAAqD,EAAE;IAC7I,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,IAAI,GAAiB;QACvB,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM,EAAE;YACJ,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,GAAG,KAAK,CAAC,IAAI,CAAC;YACd,UAAU,EAAE,OAAO,CAAS,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC;YAEpD,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,aAAa,CAAC,MAAM,CAAC;SAC3B;QACD,iBAAiB,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;KACjC,CAAC;IACF,MAAM,KAAK,GAAmB,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,YAAY,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC,UAAU,qEAAqE,CAAC,CAAC;QACvI,CAAC;QACD,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;QACxG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC,CAAC;AAOF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAa,EAAE,MAAqB,EAAE,IAAe,EAAE,UAA6B,EAAgB,EAAE;IACjI,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAGvC,MAAM,MAAM,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;IACvD,MAAM,IAAI,GAAG,CAAC,MAA+B,EAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACzI,QAAQ,MAAM,CAAC,UAAU,EAAE,CAAC;QACxB,KAAK,UAAU;YACX,OAAO,IAAI,CAAC;gBACR,GAAG,MAAM;gBACT,YAAY,EAAE,OAAO,CAAS,MAAM,CAAC,EAAE,EAAE,cAAc,CAAC;gBACxD,YAAY,EAAE,OAAO,CAAS,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC;gBAChD,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC;gBACvB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC;gBACnB,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC;aAC9D,CAAC,CAAC;QACP,KAAK,OAAO;YAGR,OAAO,IAAI,CAAC;gBACR,GAAG,MAAM;gBACT,YAAY,EAAE,OAAO,CAAS,MAAM,CAAC,EAAE,EAAE,cAAc,CAAC;gBACxD,YAAY,EAAE,OAAO,CAAS,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC;gBAChD,aAAa,EAAE,SAAS,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC5D,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC;gBAC1B,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;gBACxD,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC;aAC9B,CAAC,CAAC;QACP,KAAK,MAAM,CAAC,CAAC,CAAC;YAMV,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,iBAAiB,MAAM,CAAC,EAAE,kFAAkF,CAAC,CAAC;YAClI,CAAC;YACD,OAAO;gBACH,EAAE;gBACF,IAAI,EAAE,IAAI,CAAC,WAAW;gBACtB,MAAM,EAAE;oBACJ,YAAY,EAAE,WAAW,MAAM,CAAC,MAAM,EAAE;oBACxC,cAAc,EAAE,SAAS,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBAC3D,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC;oBACpB,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;oBACpD,YAAY,EAAE,SAAS,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;oBAC5D,eAAe,EAAE,UAAU;iBAC9B;gBACD,iBAAiB,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;aACxE,CAAC;QACN,CAAC;QACD,KAAK,gBAAgB;YAGjB,OAAO,IAAI,CAAC;gBACR,GAAG,MAAM;gBACT,QAAQ,EAAE,OAAO,CAAS,MAAM,CAAC,EAAE,EAAE,kBAAkB,CAAC;gBACxD,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC;gBACzB,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC;aAC7B,CAAC,CAAC;IACX,CAAC;AACL,CAAC,CAAC;AAIF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,MAAqB,EAA+B,EAAE;IAC5F,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACvC,MAAM,GAAG,GAAgC,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,CAAS,EAAE,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC,CAAC"}

package/dist/backup.d.ts

@@ -0,0 +1,4 @@
+import type { BackupInput, HostInput } from "@intentic/need-resolver";
+import type { ResolvedNode } from "@intentic/resources";
+export declare const resolveBackup: (hostId: string, host: HostInput, input: BackupInput, signozServiceId: string | undefined) => ResolvedNode;
+//# sourceMappingURL=backup.d.ts.map

package/dist/backup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.d.ts","sourceRoot":"","sources":["../src/backup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAUxD,eAAO,MAAM,aAAa,GAAI,QAAQ,MAAM,EAAE,MAAM,SAAS,EAAE,OAAO,WAAW,EAAE,iBAAiB,MAAM,GAAG,SAAS,KAAG,YAuBxH,CAAC"}

package/dist/backup.js

@@ -0,0 +1,27 @@
+import { backupId, forgejoId, komodoId } from "./ids.js";
+import { IMAGES } from "./images.js";
+export const resolveBackup = (hostId, host, input, signozServiceId) => {
+    const ssh = {
+        address: host.address,
+        user: host.user,
+        sshKey: host.sshKey,
+        ...(host.port !== undefined ? { port: host.port } : {}),
+    };
+    const signoz = input.signoz === true && signozServiceId !== undefined;
+    return {
+        id: backupId(hostId),
+        type: "backup",
+        inputs: {
+            ...ssh,
+            repo: input.repo,
+            password: input.password,
+            signoz,
+            image: IMAGES.backup,
+            ...(input.credentials !== undefined ? { credentials: input.credentials } : {}),
+            ...(input.schedule !== undefined ? { schedule: input.schedule } : {}),
+            ...(input.retention !== undefined ? { retention: input.retention } : {}),
+        },
+        explicitDependsOn: [forgejoId(hostId), komodoId(hostId), ...(signoz ? [signozServiceId] : [])],
+    };
+};
+//# sourceMappingURL=backup.js.map

package/dist/backup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.js","sourceRoot":"","sources":["../src/backup.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAQrC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,IAAe,EAAE,KAAkB,EAAE,eAAmC,EAAgB,EAAE;IACpI,MAAM,GAAG,GAAG;QACR,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,eAAe,KAAK,SAAS,CAAC;IACtE,OAAO;QACH,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE;YACJ,GAAG,GAAG;YACN,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM;YACN,KAAK,EAAE,MAAM,CAAC,MAAM;YACpB,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3E;QACD,iBAAiB,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;KACjG,CAAC;AACN,CAAC,CAAC"}

package/dist/catalog.d.ts

@@ -0,0 +1,12 @@
+import type { Capability, IntentSet } from "@intentic/need-resolver";
+export interface Option {
+    readonly id: string;
+    readonly provides: readonly Capability[];
+}
+export interface Catalog {
+    optionsFor(capability: Capability): readonly Option[];
+}
+export declare const forgejoCatalog: Catalog;
+export declare const githubCatalog: Catalog;
+export declare const catalogFor: (intent: IntentSet) => Catalog;
+//# sourceMappingURL=catalog.d.ts.map

package/dist/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../src/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAKrE,MAAM,WAAW,MAAM;IACnB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,SAAS,UAAU,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,OAAO;IACpB,UAAU,CAAC,UAAU,EAAE,UAAU,GAAG,SAAS,MAAM,EAAE,CAAC;CACzD;AAuBD,eAAO,MAAM,cAAc,EAAE,OAAqC,CAAC;AACnE,eAAO,MAAM,aAAa,EAAE,OAAoC,CAAC;AAIjE,eAAO,MAAM,UAAU,GAAI,QAAQ,SAAS,KAAG,OAAyE,CAAC"}

package/dist/catalog.js

@@ -0,0 +1,17 @@
+const forgejoOptions = [
+    { id: "forgejo", provides: ["source-control", "docker-registry"] },
+    { id: "komodo", provides: ["infra-control"] },
+    { id: "ssh-linux", provides: ["deployment-target"] },
+    { id: "cloudflare-tunnel", provides: ["domain"] },
+];
+const githubOptions = [
+    { id: "github", provides: ["source-control", "docker-registry"] },
+    { id: "github-actions", provides: ["infra-control"] },
+    { id: "ssh-linux", provides: ["deployment-target"] },
+    { id: "cloudflare-tunnel", provides: ["domain"] },
+];
+const makeCatalog = (options) => Object.freeze({ optionsFor: (capability) => options.filter((option) => option.provides.includes(capability)) });
+export const forgejoCatalog = makeCatalog(forgejoOptions);
+export const githubCatalog = makeCatalog(githubOptions);
+export const catalogFor = (intent) => (intent.github !== undefined ? githubCatalog : forgejoCatalog);
+//# sourceMappingURL=catalog.js.map

package/dist/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../src/catalog.ts"],"names":[],"mappings":"AAgBA,MAAM,cAAc,GAAsB;IACtC,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,EAAE;IAClE,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,eAAe,CAAC,EAAE;IAC7C,EAAE,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,mBAAmB,CAAC,EAAE;IACpD,EAAE,EAAE,EAAE,mBAAmB,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE;CACpD,CAAC;AAIF,MAAM,aAAa,GAAsB;IACrC,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,EAAE;IACjE,EAAE,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,eAAe,CAAC,EAAE;IACrD,EAAE,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,mBAAmB,CAAC,EAAE;IACpD,EAAE,EAAE,EAAE,mBAAmB,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE;CACpD,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,OAA0B,EAAW,EAAE,CACxD,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,UAAsB,EAAqB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC;AAEnJ,MAAM,CAAC,MAAM,cAAc,GAAY,WAAW,CAAC,cAAc,CAAC,CAAC;AACnE,MAAM,CAAC,MAAM,aAAa,GAAY,WAAW,CAAC,aAAa,CAAC,CAAC;AAIjE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAiB,EAAW,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC"}

package/dist/emit-github.d.ts

@@ -0,0 +1,4 @@
+import type { IntentSet } from "@intentic/need-resolver";
+import type { ResolvedNode } from "@intentic/resources";
+export declare const emitGitHub: (intent: IntentSet, zone: string) => ResolvedNode[];
+//# sourceMappingURL=emit-github.d.ts.map

package/dist/emit-github.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emit-github.d.ts","sourceRoot":"","sources":["../src/emit-github.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAa,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAkBxD,eAAO,MAAM,UAAU,GAAI,QAAQ,SAAS,EAAE,MAAM,MAAM,KAAG,YAAY,EAwGxE,CAAC"}