@intentius/chant-lexicon-fly 0.16.0

package/dist/op/activities/fly-apply.d.ts

@@ -0,0 +1,382 @@
+/**
+ * fly (Machines API / "flaps") native applier — #739.
+ *
+ * Peer of `gcpApply` (#706): a direct-REST applier that does its own diff,
+ * owned-only prune, and mutation waiting. GCP has no server-side declarative
+ * apply, and neither does flaps, so this loop is hand-rolled — GET-then-
+ * create/update per resource, poll `/wait` after each mutation, and prune only
+ * what chant owns. Unlike GCP's long-running operations, flaps gates mutations
+ * behind machine leases (a nonce echoed in the `fly-machine-lease-nonce`
+ * header), so the tricky paths here are the lease-conflict retry and waiting on
+ * the correct new `instance_id` after an update.
+ *
+ * Input is the #738 serializer's output: a JSON object keyed by entity name,
+ * each value a single flaps create request `{ endpoint, method, body }` (app →
+ * `/v1/apps`, machine → `/v1/apps/{app}/machines`). A machine endpoint may carry
+ * a literal `{app}` placeholder when the stack declares more than one app; it is
+ * resolved from the owning app at apply time.
+ *
+ * D1: direct REST, no flyctl, no state file. D2: owned-only prune via the
+ * `managed-by: chant` machine metadata. D3: endpoint override via
+ * `FLY_FLAPS_BASE_URL` (or an explicit `endpoint` arg), so the same code points
+ * at real Fly or at mudflaps (`:4280`).
+ */
+/** Default flaps host when neither an `endpoint` arg nor `FLY_FLAPS_BASE_URL` is set. */
+export declare const DEFAULT_FLAPS_BASE_URL = "https://api.machines.dev";
+/** Header carrying a lease nonce on a mutating request, matching fly-go/flaps. */
+export declare const LEASE_NONCE_HEADER = "fly-machine-lease-nonce";
+/** One flaps REST call as emitted by the #738 serializer. */
+export interface FlapsRequest {
+    endpoint: string;
+    method: string;
+    body: Record<string, unknown>;
+    /**
+     * D7: apply-only resources (Secrets) are POSTed but never read back for a
+     * diff — flaps returns only a digest, never the value. `flyApply` always
+     * POSTs these and excludes them from any drift/diff.
+     */
+    applyOnly?: boolean;
+}
+/** The serializer's whole output: entity name → flaps create request. */
+export type FlyPlan = Record<string, FlapsRequest>;
+/** The subset of a live flaps machine the applier reads back. */
+export interface FlapsMachine {
+    id: string;
+    name: string;
+    state: string;
+    instance_id: string;
+    config?: {
+        metadata?: Record<string, string>;
+    } & Record<string, unknown>;
+}
+/**
+ * Resolve the flaps base URL (D3): an explicit `endpoint` arg wins, then the
+ * `FLY_FLAPS_BASE_URL` env, then the real-Fly default. The trailing slash is
+ * stripped so `${base}/v1/...` never doubles up. Pure.
+ */
+export declare function resolveEndpoint(args?: {
+    endpoint?: string;
+}, env?: NodeJS.ProcessEnv): string;
+/** Parse the serializer's JSON output into a plan. Pure. */
+export declare function parsePlan(content: string): FlyPlan;
+/** True when a request creates an App (`POST /v1/apps`). Pure. */
+export declare function isAppRequest(req: FlapsRequest): boolean;
+/** True when a request creates a Machine (`.../machines`). Pure. */
+export declare function isMachineRequest(req: FlapsRequest): boolean;
+/** The app segment of a machine endpoint, or the literal `{app}` placeholder. Pure. */
+export declare function machineAppSegment(endpoint: string): string;
+/** True when a request creates a Volume (`.../volumes`). Pure. */
+export declare function isVolumeRequest(req: FlapsRequest): boolean;
+/** True when a request assigns an IP (`.../ip_assignments`). Pure. */
+export declare function isIpRequest(req: FlapsRequest): boolean;
+/** True when a request creates a Certificate (`.../certificates`). Pure. */
+export declare function isCertRequest(req: FlapsRequest): boolean;
+/** True when a request sets a Secret (`.../secrets/{name}`). Pure. */
+export declare function isSecretRequest(req: FlapsRequest): boolean;
+/**
+ * The app segment of any app-scoped resource endpoint (volumes, ip_assignments,
+ * certificates, secrets), or the literal `{app}` placeholder. Pure.
+ */
+export declare function resourceAppSegment(endpoint: string): string;
+/** The secret name segment of a `.../secrets/{name}` endpoint. Pure. */
+export declare function secretNameSegment(endpoint: string): string;
+/**
+ * Resolve a machine's owning app: the endpoint segment as-is, unless it is the
+ * `{app}` placeholder the serializer leaves when it can't decide — then fall
+ * back to the stack's sole app. Throws when neither settles it. Pure.
+ */
+export declare function resolveApp(segment: string, soleApp: string | undefined): string;
+/** The `app_name` an app request creates. Pure. */
+export declare function appNameFromRequest(req: FlapsRequest): string;
+/**
+ * True when a machine's live metadata carries chant's ownership marker (D2).
+ * Pure. Reads the key convention the fly lexicon declares via the #686 seam
+ * (`FLY_METADATA_OWNERSHIP_KEYS`) through core's `hasOwnershipMarker`, so the
+ * prune filter and the serializer's stamp can never drift apart — the marker
+ * key lives in exactly one place.
+ */
+export declare function isChantOwned(metadata: Record<string, string> | null | undefined): boolean;
+/** Structural equality over two config values, order-insensitive. Pure. */
+export declare function configEqual(a: unknown, b: unknown): boolean;
+/**
+ * The lease-conflict retry decision. A 409 whose body mentions a lease is a
+ * stale/lost nonce (the `lease_currently_held` acquire envelope, or the "machine
+ * is leased" gate on a mutation) — the caller should re-acquire and retry once.
+ * A 409 that is not lease-shaped (e.g. "app already exists") is not retried. Pure.
+ */
+export declare function isLeaseConflict(status: number, text: string): boolean;
+/**
+ * Injectable HTTP client — mirrors gcp-apply's `GcpHttp`, extended with a
+ * per-call `headers` map so the applier can carry the `fly-machine-lease-nonce`
+ * header on a mutation (and so tests can assert it). Tests inject a fake; the
+ * default hits `fetch`.
+ */
+export type FlyHttp = (method: string, url: string, body?: unknown, headers?: Record<string, string>, signal?: AbortSignal) => Promise<{
+    status: number;
+    text: string;
+}>;
+/**
+ * Default `fetch`-based client. Sends `Authorization: Bearer <token>` when a
+ * token is set (real Fly); mudflaps ignores it. The token defaults to
+ * `FLY_API_TOKEN` at call time.
+ */
+export declare function defaultFlyHttp(token?: string): FlyHttp;
+/** Wait-loop tuning. Defaults suit real flaps; tests shrink the interval. */
+export interface WaitOpts {
+    /** Server-side long-poll cap per request (clamped to 60s by flaps). */
+    timeoutSecs?: number;
+    /** Delay between re-polls after a non-terminal response. */
+    intervalMs?: number;
+    /** Overall client deadline across re-polls. */
+    deadlineMs?: number;
+}
+export interface ApplyCtx {
+    base: string;
+}
+/**
+ * Acquire a lease, retrying once on a lease-conflict 409. The retry is what
+ * lets a stale/lost hold clear (the prior lease expired or was released) before
+ * the mutation goes out with a fresh nonce. Returns the nonce.
+ */
+export declare function acquireLease(ctx: ApplyCtx, app: string, id: string, http: FlyHttp, signal?: AbortSignal): Promise<string>;
+/** Best-effort lease release. A cleared lease (post-destroy) 404s — ignored. */
+export declare function releaseLease(ctx: ApplyCtx, app: string, id: string, nonce: string, http: FlyHttp, signal?: AbortSignal): Promise<void>;
+/**
+ * Run a lease-gated mutation: acquire → mutate (nonce in the header) → release.
+ * On a lease-conflict 409 from the mutation (a stale/lost nonce), re-acquire a
+ * fresh nonce and retry the mutation once. `mutate` receives the nonce so the
+ * caller can put it in the header; it returns the raw response. Returns the
+ * final mutation response.
+ */
+export declare function withLease(ctx: ApplyCtx, app: string, id: string, http: FlyHttp, signal: AbortSignal | undefined, mutate: (nonce: string) => Promise<{
+    status: number;
+    text: string;
+}>): Promise<{
+    status: number;
+    text: string;
+}>;
+/**
+ * Poll `GET .../wait` until the machine reaches `state` at the given `version`
+ * (its new `instance_id`). flaps clamps its own timeout to 60s and answers 408
+ * on expiry, so the client re-polls until its own deadline. A destroyed+reaped
+ * machine satisfies a `state=destroyed` wait (flaps returns `ok` on the missing
+ * machine). `http` and the interval are injectable so tests avoid real waits.
+ */
+export declare function waitForMachine(ctx: ApplyCtx, app: string, id: string, version: string, http: FlyHttp, signal?: AbortSignal, opts?: WaitOpts & {
+    state?: string;
+}): Promise<void>;
+/** Create the app if absent (idempotent). A create-time conflict means it exists. */
+export declare function applyApp(ctx: ApplyCtx, req: FlapsRequest, http: FlyHttp, signal?: AbortSignal): Promise<{
+    app: string;
+    created: boolean;
+}>;
+/** List an app's live machines. */
+export declare function listMachines(ctx: ApplyCtx, app: string, http: FlyHttp, signal?: AbortSignal): Promise<FlapsMachine[]>;
+/**
+ * Reconcile one machine: create it when absent; when present, update it only if
+ * its config drifted (else no-op). A create/update is followed by a wait on the
+ * machine's new `instance_id`. Updates go through a lease. The declared machine
+ * is identified by name (falling back to the plan entity name), so re-applying
+ * an unchanged machine is a no-op.
+ */
+export declare function applyMachine(ctx: ApplyCtx, app: string, entityName: string, req: FlapsRequest, http: FlyHttp, signal?: AbortSignal, opts?: WaitOpts): Promise<{
+    action: "created" | "updated" | "noop";
+    id: string;
+    name: string;
+}>;
+/** Lease → destroy → wait for the machine to be reaped. */
+export declare function destroyMachine(ctx: ApplyCtx, app: string, id: string, http: FlyHttp, signal?: AbortSignal, opts?: WaitOpts): Promise<void>;
+/** Delete an app (idempotent; a 404 means it is already gone). */
+export declare function deleteApp(ctx: ApplyCtx, app: string, http: FlyHttp, signal?: AbortSignal): Promise<{
+    app: string;
+    deleted: boolean;
+}>;
+/**
+ * Owned-only prune (D2): for one app, destroy the chant-owned machines whose
+ * name is not in `keep`. An unmarked machine (no `managed-by: chant`) is never
+ * touched, so it survives an apply that would otherwise delete it. Machines
+ * already tearing down are skipped.
+ */
+export declare function pruneMachines(ctx: ApplyCtx, app: string, keep: Set<string>, http: FlyHttp, signal?: AbortSignal, opts?: WaitOpts): Promise<Array<{
+    app: string;
+    name: string;
+    id: string;
+}>>;
+/** A live volume as flaps lists it. */
+export interface FlapsVolume {
+    id: string;
+    name: string;
+    state?: string;
+}
+/** A live IP assignment as flaps lists it. */
+export interface FlapsIp {
+    ip: string;
+    shared?: boolean;
+}
+/** A live certificate as flaps lists it. */
+export interface FlapsCert {
+    hostname: string;
+}
+/** A live secret as flaps lists it (digest only, never the value). */
+export interface FlapsSecret {
+    name: string;
+}
+/**
+ * The declared identity of an IP: its `type` collapses to a family key the
+ * live-list can be mapped back to (shared v4 / dedicated v4 / v6). This lets a
+ * re-apply of the same declared type be a no-op even though the address is
+ * server-allocated. Pure.
+ */
+export declare function ipType(shared: boolean | undefined, address: string): string;
+/** The declared IP family from a request body's `type`. Pure. */
+export declare function declaredIpType(type: unknown): string;
+/** List an app's live volumes (flaps returns a bare array). */
+export declare function listVolumes(ctx: ApplyCtx, app: string, http: FlyHttp, signal?: AbortSignal): Promise<FlapsVolume[]>;
+/** List an app's live IP assignments (`{ ips: [...] }`). */
+export declare function listIps(ctx: ApplyCtx, app: string, http: FlyHttp, signal?: AbortSignal): Promise<FlapsIp[]>;
+/** List an app's live certificates (`{ certificates: [...] }`). */
+export declare function listCerts(ctx: ApplyCtx, app: string, http: FlyHttp, signal?: AbortSignal): Promise<FlapsCert[]>;
+/** List an app's live secrets (`{ secrets: [...] }`; digests only, never values). */
+export declare function listSecrets(ctx: ApplyCtx, app: string, http: FlyHttp, signal?: AbortSignal): Promise<FlapsSecret[]>;
+/** Create a volume if absent (idempotent by name). Machines that mount it apply after. */
+export declare function applyVolume(ctx: ApplyCtx, app: string, entityName: string, req: FlapsRequest, http: FlyHttp, signal?: AbortSignal): Promise<{
+    action: "created" | "noop";
+    name: string;
+}>;
+/** Assign an IP if the declared type is not already present (idempotent by family). */
+export declare function applyIp(ctx: ApplyCtx, app: string, req: FlapsRequest, http: FlyHttp, signal?: AbortSignal): Promise<{
+    action: "created" | "noop";
+    type: string;
+}>;
+/** Create a certificate if absent (idempotent by hostname). */
+export declare function applyCert(ctx: ApplyCtx, app: string, req: FlapsRequest, http: FlyHttp, signal?: AbortSignal): Promise<{
+    action: "created" | "noop";
+    hostname: string;
+}>;
+/**
+ * Set a secret (D7, apply-only): always POST, never read back for a diff. flaps
+ * returns only a digest, so there is nothing to compare — every apply re-sets it.
+ */
+export declare function applySecret(ctx: ApplyCtx, app: string, name: string, req: FlapsRequest, http: FlyHttp, signal?: AbortSignal): Promise<{
+    action: "set";
+    name: string;
+}>;
+/** App-scoped prune (D2): destroy volumes the plan no longer declares (by name). */
+export declare function pruneVolumes(ctx: ApplyCtx, app: string, keep: Set<string>, http: FlyHttp, signal?: AbortSignal): Promise<Array<{
+    app: string;
+    name: string;
+    id: string;
+}>>;
+/** App-scoped prune (D2): release IP assignments whose type the plan no longer declares. */
+export declare function pruneIps(ctx: ApplyCtx, app: string, keep: Set<string>, http: FlyHttp, signal?: AbortSignal): Promise<Array<{
+    app: string;
+    address: string;
+}>>;
+/** App-scoped prune (D2): destroy certificates whose hostname the plan no longer declares. */
+export declare function pruneCerts(ctx: ApplyCtx, app: string, keep: Set<string>, http: FlyHttp, signal?: AbortSignal): Promise<Array<{
+    app: string;
+    hostname: string;
+}>>;
+/**
+ * App-scoped prune (D2) for apply-only secrets: a declared-then-removed secret
+ * is still prunable by name, even though it never enters a drift/diff.
+ */
+export declare function pruneSecrets(ctx: ApplyCtx, app: string, keep: Set<string>, http: FlyHttp, signal?: AbortSignal): Promise<Array<{
+    app: string;
+    name: string;
+}>>;
+export interface FlyApplyArgs {
+    /** Path to the #738 serializer's JSON output (entity name → flaps request). */
+    planPath: string;
+    /** flaps endpoint override (D3). Default: `FLY_FLAPS_BASE_URL` env, else real Fly. */
+    endpoint?: string;
+    /** Bearer token for real Fly. Default: `FLY_API_TOKEN`. mudflaps ignores it. */
+    token?: string;
+    /**
+     * Prune (D2): destroy declared-then-removed resources. Machines are owned-only
+     * (chant metadata marker); an unmarked machine is never touched. The
+     * metadata-less types (volumes/ips/certs/secrets) are app-scoped: anything the
+     * plan no longer declares under a managed app is removed. Destructive — off by
+     * default.
+     */
+    prune?: boolean;
+    /** Wait-loop tuning (mainly for tests). */
+    wait?: WaitOpts;
+}
+/**
+ * The native fly applier (#739, #741): read the serialized plan and apply it
+ * straight to flaps in dependency order — app → volumes → machines → ips →
+ * certificates → secrets — then optionally prune. Machines prune owned-only via
+ * the metadata marker (D2); the metadata-less types (volumes/ips/certs/secrets)
+ * prune app-scoped: everything the plan no longer declares under a managed app.
+ * Secrets are apply-only (D7): set, never read back for a diff. `http` is
+ * injectable for tests.
+ */
+export declare function flyApply(args: FlyApplyArgs, signal?: AbortSignal, http?: FlyHttp): Promise<{
+    apps: Array<{
+        app: string;
+        created: boolean;
+    }>;
+    machines: Array<{
+        app: string;
+        name: string;
+        action: "created" | "updated" | "noop";
+    }>;
+    volumes: Array<{
+        app: string;
+        name: string;
+        action: "created" | "noop";
+    }>;
+    ips: Array<{
+        app: string;
+        type: string;
+        action: "created" | "noop";
+    }>;
+    certs: Array<{
+        app: string;
+        hostname: string;
+        action: "created" | "noop";
+    }>;
+    secrets: Array<{
+        app: string;
+        name: string;
+    }>;
+    pruned: Array<{
+        app: string;
+        name: string;
+        id: string;
+    }>;
+    prunedVolumes: Array<{
+        app: string;
+        name: string;
+        id: string;
+    }>;
+    prunedIps: Array<{
+        app: string;
+        address: string;
+    }>;
+    prunedCerts: Array<{
+        app: string;
+        hostname: string;
+    }>;
+    prunedSecrets: Array<{
+        app: string;
+        name: string;
+    }>;
+}>;
+/**
+ * The inverse of {@link flyApply}: destroy the machines the plan declares, then
+ * delete the apps (dependents before their app). Idempotent — already-absent
+ * resources are a no-op. `http` is injectable for tests.
+ */
+export declare function flyDelete(args: FlyApplyArgs, signal?: AbortSignal, http?: FlyHttp): Promise<{
+    machines: Array<{
+        app: string;
+        name: string;
+    }>;
+    apps: Array<{
+        app: string;
+        deleted: boolean;
+    }>;
+}>;
+//# sourceMappingURL=fly-apply.d.ts.map

package/dist/op/activities/fly-apply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fly-apply.d.ts","sourceRoot":"","sources":["../../../src/op/activities/fly-apply.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAOH,yFAAyF;AACzF,eAAO,MAAM,sBAAsB,6BAA6B,CAAC;AAEjE,kFAAkF;AAClF,eAAO,MAAM,kBAAkB,4BAA4B,CAAC;AAE5D,6DAA6D;AAC7D,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,yEAAyE;AACzE,MAAM,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAEnD,iEAAiE;AACjE,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC1E;AAID;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,EAChC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAGR;AAED,4DAA4D;AAC5D,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAElD;AAED,kEAAkE;AAClE,wBAAgB,YAAY,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAEvD;AAED,oEAAoE;AACpE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAE3D;AAED,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAI1D;AAED,kEAAkE;AAClE,wBAAgB,eAAe,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAE1D;AAED,sEAAsE;AACtE,wBAAgB,WAAW,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAEtD;AAED,4EAA4E;AAC5E,wBAAgB,aAAa,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAExD;AAED,sEAAsE;AACtE,wBAAgB,eAAe,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAE1D;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAI3D;AAED,wEAAwE;AACxE,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAI1D;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAI/E;AAED,mDAAmD;AACnD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,YAAY,GAAG,MAAM,CAI5D;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAEzF;AAED,2EAA2E;AAC3E,wBAAgB,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,GAAG,OAAO,CAE3D;AAkBD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAErE;AAmDD;;;;;GAKG;AACH,MAAM,MAAM,OAAO,GAAG,CACpB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,OAAO,EACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAChC,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE/C;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CActD;AAED,6EAA6E;AAC7E,MAAM,WAAW,QAAQ;IACvB,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+CAA+C;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;CACd;AAID;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,QAAQ,EACb,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,OAAO,EACb,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,MAAM,CAAC,CAajB;AAED,gFAAgF;AAChF,wBAAsB,YAAY,CAChC,GAAG,EAAE,QAAQ,EACb,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,OAAO,EACb,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CAMf;AAED;;;;;;GAMG;AACH,wBAAsB,SAAS,CAC7B,GAAG,EAAE,QAAQ,EACb,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,OAAO,EACb,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GACnE,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAY3C;AAID;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,QAAQ,EACb,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,OAAO,EACb,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,GAAE,QAAQ,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GACvC,OAAO,CAAC,IAAI,CAAC,CAwBf;AAID,qFAAqF;AACrF,wBAAsB,QAAQ,CAC5B,GAAG,EAAE,QAAQ,EACb,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,OAAO,EACb,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAU5C;AAED,mCAAmC;AACnC,wBAAsB,YAAY,CAChC,GAAG,EAAE,QAAQ,EACb,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,OAAO,EACb,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,EAAE,CAAC,CAMzB;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,QAAQ,EACb,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,OAAO,EACb,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,GAAE,QAAa,GAClB,OAAO,CAAC;IAAE,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CA0B/E;AAED,2DAA2D;AAC3D,wBAAsB,cAAc,CAClC,GAAG,EAAE,QAAQ,EACb,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,OAAO,EACb,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,GAAE,QAAa,GAClB,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,kEAAkE;AAClE,wBAAsB,SAAS,CAC7B,GAAG,EAAE,QAAQ,EACb,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,OAAO,EACb,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAK5C;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,QAAQ,EACb,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EACjB,IAAI,EAAE,OAAO,EACb,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,GAAE,QAAa,GAClB,OAAO,CAAC,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAW3D;AA2BD,uCAAuC;AACvC,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,8CAA8C;AAC9C,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,4CAA4C;AAC5C,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,sEAAsE;AACtE,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,wBAAgB,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAG3E;AAED,iEAAiE;AACjE,wBAAgB,cAAc,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAIpD;AAED,+DAA+D;AAC/D,wBAAsB,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAMzH;AAED,4DAA4D;AAC5D,wBAAsB,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAMjH;AAED,mEAAmE;AACnE,wBAAsB,SAAS,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAMrH;AAED,qFAAqF;AACrF,wBAAsB,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAMzH;AAED,0FAA0F;AAC1F,wBAAsB,WAAW,CAC/B,GAAG,EAAE,QAAQ,EACb,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,OAAO,EACb,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC;IAAE,MAAM,EAAE,SAAS,GAAG,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAQvD;AAED,uFAAuF;AACvF,wBAAsB,OAAO,CAC3B,GAAG,EAAE,QAAQ,EACb,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,OAAO,EACb,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC;IAAE,MAAM,EAAE,SAAS,GAAG,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAOvD;AAED,+DAA+D;AAC/D,wBAAsB,SAAS,CAC7B,GAAG,EAAE,QAAQ,EACb,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,OAAO,EACb,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC;IAAE,MAAM,EAAE,SAAS,GAAG,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAS3D;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,QAAQ,EACb,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,OAAO,EACb,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC;IAAE,MAAM,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAI1C;AAED,oFAAoF;AACpF,wBAAsB,YAAY,CAChC,GAAG,EAAE,QAAQ,EACb,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EACjB,IAAI,EAAE,OAAO,EACb,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAU3D;AAED,4FAA4F;AAC5F,wBAAsB,QAAQ,CAC5B,GAAG,EAAE,QAAQ,EACb,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EACjB,IAAI,EAAE,OAAO,EACb,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAUlD;AAED,8FAA8F;AAC9F,wBAAsB,UAAU,CAC9B,GAAG,EAAE,QAAQ,EACb,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EACjB,IAAI,EAAE,OAAO,EACb,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAUnD;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,QAAQ,EACb,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EACjB,IAAI,EAAE,OAAO,EACb,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAU/C;AAID,MAAM,WAAW,YAAY;IAC3B,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,2CAA2C;IAC3C,IAAI,CAAC,EAAE,QAAQ,CAAC;CACjB;AAED;;;;;;;;GAQG;AACH,wBAAsB,QAAQ,CAC5B,IAAI,EAAE,YAAY,EAClB,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,GAAE,OAAoC,GACzC,OAAO,CAAC;IACT,IAAI,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC/C,QAAQ,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,MAAM,CAAA;KAAE,CAAC,CAAC;IACvF,OAAO,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1E,GAAG,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAAA;KAAE,CAAC,CAAC;IACtE,KAAK,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5E,OAAO,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9C,MAAM,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzD,aAAa,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChE,SAAS,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD,WAAW,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtD,aAAa,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrD,CAAC,CAqID;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAC7B,IAAI,EAAE,YAAY,EAClB,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,GAAE,OAAoC,GACzC,OAAO,CAAC;IAAE,QAAQ,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,IAAI,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC,CAgC7G"}

package/dist/op/activities/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * fly Op activities — resolved by the core activity registry when a project's
+ * `chant.config.ts` lists the `fly` lexicon. Contributes the native flaps
+ * applier (`flyApply`), which speaks the Fly Machines REST API directly (no
+ * flyctl, no state file), and the mudflaps emulator lifecycle it is tested
+ * against.
+ */
+export { flyApply, flyDelete, applyApp, applyMachine, destroyMachine, deleteApp, listMachines, pruneMachines, waitForMachine, acquireLease, releaseLease, withLease, resolveEndpoint, parsePlan, isAppRequest, isMachineRequest, machineAppSegment, resolveApp, appNameFromRequest, isChantOwned, configEqual, isLeaseConflict, defaultFlyHttp, DEFAULT_FLAPS_BASE_URL, LEASE_NONCE_HEADER, } from "./fly-apply.js";
+export type { FlyApplyArgs, FlyPlan, FlapsRequest, FlapsMachine, FlyHttp, WaitOpts, ApplyCtx } from "./fly-apply.js";
+export { flapsUp, flapsDown, flapsRunCommand, flapsRmCommand, flapsExistsCommand, flapsHealthUrl, flapsEndpoint, } from "./flaps.js";
+export type { FlapsUpArgs, FlapsDownArgs } from "./flaps.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/op/activities/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/op/activities/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,cAAc,EACd,SAAS,EACT,YAAY,EACZ,aAAa,EACb,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,SAAS,EACT,eAAe,EACf,SAAS,EACT,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,EACV,kBAAkB,EAClB,YAAY,EACZ,WAAW,EACX,eAAe,EACf,cAAc,EACd,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAIlH,OAAO,EACL,OAAO,EACP,SAAS,EACT,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC"}

package/dist/ownership.d.ts

@@ -0,0 +1,27 @@
+/**
+ * The fly lexicon's ownership convention (#743, decision D2), declared here so
+ * core carries no fly-specific branch — the #686 seam: each lexicon owns its key
+ * names; core keeps only the generic stamp/detect logic
+ * (@intentius/chant/ownership), the same way aws declares `AWS_TAG_OWNERSHIP_KEYS`
+ * and azure `AZURE_TAG_OWNERSHIP_KEYS`.
+ *
+ * The convention is two-tier, because flaps resources differ in what they can
+ * carry:
+ *
+ *   1. Primary marker — machine `config.metadata`. Machines carry a flat
+ *      `Record<string, string>`, so chant stamps `managed-by: chant` (+ stack/env)
+ *      there. This is the k8s-label / AWS-tag analogue and the basis for
+ *      owned-only machine prune (a metadata filter — a foreign machine survives).
+ *      The serializer stamps it (see serializer.ts); the applier reads it via
+ *      `isChantOwned` → core `hasOwnershipMarker(..., FLY_METADATA_OWNERSHIP_KEYS)`.
+ *
+ *   2. Secondary boundary — the app. Volumes, secrets, certs, and IPs carry no
+ *      arbitrary metadata, so for them the Fly app is the ownership boundary
+ *      (like a CloudFormation stack): chant owns the app's declared-type
+ *      resources and prunes owned orphans within app scope. See the app-scoped
+ *      prune block in op/activities/fly-apply.ts for the limitation this leaves.
+ */
+import type { ChannelKeys } from "@intentius/chant/ownership";
+/** Machine `config.metadata` keys for chant's ownership markers (tier 1, D2). */
+export declare const FLY_METADATA_OWNERSHIP_KEYS: ChannelKeys;
+//# sourceMappingURL=ownership.d.ts.map

package/dist/ownership.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownership.d.ts","sourceRoot":"","sources":["../src/ownership.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAE9D,iFAAiF;AACjF,eAAO,MAAM,2BAA2B,EAAE,WAIzC,CAAC"}

package/dist/package-cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env tsx
+export {};
+//# sourceMappingURL=package-cli.d.ts.map

package/dist/package-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-cli.d.ts","sourceRoot":"","sources":["../src/package-cli.ts"],"names":[],"mappings":""}

package/dist/plugin.d.ts

@@ -0,0 +1,8 @@
+import type { LexiconPlugin } from "@intentius/chant/lexicon";
+/**
+ * fly lexicon plugin.
+ *
+ * Implements all required LexiconPlugin lifecycle methods.
+ */
+export declare const flyPlugin: LexiconPlugin;
+//# sourceMappingURL=plugin.d.ts.map

package/dist/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAkD,MAAM,0BAA0B,CAAC;AAiB9G;;;;GAIG;AACH,eAAO,MAAM,SAAS,EAAE,aAsQvB,CAAC"}

package/dist/pseudo.d.ts

@@ -0,0 +1,23 @@
+import { PseudoParameter } from "@intentius/chant/pseudo-parameter";
+export { PseudoParameter };
+/**
+ * Fly pseudo-parameters — environment-resolved values a project references
+ * without hard-coding. Each serializes to a `{ Ref: "Fly::..." }` marker that
+ * the serializer resolves from an environment variable at build time (see
+ * PSEUDO_ENV_MAP in ./serializer.ts), mirroring gcp's `GCP.Region` /
+ * `GCP.ProjectId`.
+ *
+ *   - Region  → the target Fly region (FLY_REGION), e.g. `iad`.
+ *   - OrgSlug → the owning org slug (FLY_ORG / FLY_ORG_SLUG).
+ *   - AppName → the target app name (FLY_APP_NAME).
+ */
+export declare const Region: PseudoParameter, OrgSlug: PseudoParameter, AppName: PseudoParameter;
+/**
+ * Fly namespace containing all pseudo-parameters.
+ */
+export declare const Fly: {
+    readonly Region: PseudoParameter;
+    readonly OrgSlug: PseudoParameter;
+    readonly AppName: PseudoParameter;
+};
+//# sourceMappingURL=pseudo.d.ts.map

package/dist/pseudo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pseudo.d.ts","sourceRoot":"","sources":["../src/pseudo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAA0B,MAAM,mCAAmC,CAAC;AAE5F,OAAO,EAAE,eAAe,EAAE,CAAC;AAE3B;;;;;;;;;;GAUG;AACH,eAAO,MAAQ,MAAM,mBAAE,OAAO,mBAAE,OAAO,iBAIrC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,GAAG;;;;CAIN,CAAC"}

package/dist/serializer.d.ts

@@ -0,0 +1,36 @@
+/**
+ * fly (Machines API / "flaps") serializer.
+ *
+ * Turns declared `App`, `Machine`, `Volume`, `IPAddress`, `Certificate`, and
+ * `Secret` resources into the JSON create bodies the flaps REST API accepts, so
+ * #739's applier can POST them straight through and mudflaps (#740) can
+ * round-trip them.
+ *
+ * Output shape — a JSON object keyed by entity name. Each value is a single
+ * flaps request:
+ *
+ *   {
+ *     "<entityName>": {
+ *       "endpoint": "/v1/apps",                       // or /v1/apps/{app}/machines
+ *       "method": "POST",
+ *       "body": { ... }                               // the create body
+ *     }
+ *   }
+ *
+ * Field names are taken from mudflaps' Go structs (the wire oracle), which win
+ * over the OpenAPI-generated TypeScript names:
+ *   - App    → CreateAppRequest    `{ app_name, org_slug? }` (NOT `name`).
+ *   - Machine→ CreateMachineRequest `{ name?, region?, config?, skip_launch? }`;
+ *     `config` is the full MachineConfig. The owning app is a URL path segment,
+ *     not a body field, so it lands in `endpoint`.
+ *
+ * D2: every serialized Machine carries the `managed-by: chant` ownership marker
+ * (plus the stack/env identity from `context.ownership`) merged into
+ * `config.metadata`, even when the user supplied no metadata.
+ */
+import type { Serializer } from "@intentius/chant/serializer";
+/**
+ * fly flaps serializer.
+ */
+export declare const flySerializer: Serializer;
+//# sourceMappingURL=serializer.d.ts.map

package/dist/serializer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serializer.d.ts","sourceRoot":"","sources":["../src/serializer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAoB,MAAM,6BAA6B,CAAC;AAmHhF;;GAEG;AACH,eAAO,MAAM,aAAa,EAAE,UA6I3B,CAAC"}

package/dist/spec/fetch.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Fetch the flaps OpenAPI spec and return it as a Map<typeName, Buffer>
+ * compatible with the generatePipeline fetchSchemas callback.
+ *
+ * The flaps spec is a single document, so we return a single entry keyed by
+ * "Fly::OpenAPI" — the parse step splits it into the curated resources and
+ * their reachable property types.
+ */
+export declare function fetchSchemas(options?: {
+    force?: boolean;
+}): Promise<Map<string, Buffer>>;
+//# sourceMappingURL=fetch.d.ts.map

package/dist/spec/fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../../src/spec/fetch.ts"],"names":[],"mappings":"AAsBA;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAG9F"}

package/dist/spec/parse.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Fly Machines API OpenAPI 3.0.1 parser.
+ *
+ * The flaps spec has no resource marker and is mostly request/response DTOs,
+ * so we generate a curated set of resources rather than every schema. Each
+ * curated resource pairs a request schema (writable authoring surface) with a
+ * response schema (read-only attributes). The property types reachable from the
+ * request schemas — notably the fly.MachineConfig graph — are emitted as
+ * standalone property-type classes so `config` is fully typed.
+ */
+import { type PropertyConstraints } from "@intentius/chant/codegen/json-schema";
+export type { PropertyConstraints };
+export interface ParsedProperty {
+    name: string;
+    tsType: string;
+    required: boolean;
+    description?: string;
+    constraints: PropertyConstraints;
+}
+export interface ParsedResource {
+    typeName: string;
+    description?: string;
+    properties: ParsedProperty[];
+    attributes: Array<{
+        name: string;
+        tsType: string;
+    }>;
+}
+export interface FlyParseResult {
+    resource: ParsedResource;
+    /** Always empty — fly emits property types as standalone results. */
+    propertyTypes: Array<{
+        name: string;
+        defType: string;
+    }>;
+    /** Always empty — enums are inlined as string-literal unions. */
+    enums: Array<{
+        name: string;
+        values: string[];
+    }>;
+    /** Whether this entity is a property type (nested config shape). */
+    isProperty?: boolean;
+}
+/**
+ * Parse the flaps OpenAPI spec into the curated resources and the property
+ * types reachable from their request schemas.
+ */
+export declare function parseFlyOpenAPI(data: string | Buffer): FlyParseResult[];
+/**
+ * Convert a schema name into a PascalCase class-name segment.
+ * "fly.MachineConfig" → "MachineConfig", "fly.dnsOption" → "DnsOption".
+ */
+export declare function schemaToClassName(schemaName: string): string;
+/** Extract short name: "Fly::Machines::Machine" → "Machine". */
+export declare function flyShortName(typeName: string): string;
+/** Extract service name: "Fly::Machines::Machine" → "Machines". */
+export declare function flyServiceName(typeName: string): string;
+//# sourceMappingURL=parse.d.ts.map

package/dist/spec/parse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.d.ts","sourceRoot":"","sources":["../../src/spec/parse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAKL,KAAK,mBAAmB,EACzB,MAAM,sCAAsC,CAAC;AAI9C,YAAY,EAAE,mBAAmB,EAAE,CAAC;AAEpC,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,mBAAmB,CAAC;CAClC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,UAAU,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,cAAc,CAAC;IACzB,qEAAqE;IACrE,aAAa,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxD,iEAAiE;IACjE,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACjD,oEAAoE;IACpE,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAuCD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,cAAc,EAAE,CAyEvE;AA6ID;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAG5D;AAED,gEAAgE;AAChE,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGrD;AAED,mEAAmE;AACnE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGvD"}