@kici-dev/orchestrator 0.1.27 → 0.3.0

package/dist/cli/wizard/orchestrator-wizard.d.ts

@@ -5,34 +5,62 @@
  * port, secrets key) with sensible defaults. Returns a config
  * object that the install command uses to write the env file.
  */
+import { OrchestratorMode } from '@kici-dev/engine';
+/** A GitHub App source the wizard collected, to be added once the orchestrator is running. */
+export interface OrchestratorSourceHint {
+    name: string;
+    appId: string;
+    /** Filesystem path to the App private key (.pem) — NOT the key contents. */
+    privateKeyPath: string;
+    webhookSecret?: string;
+}
 /** Config produced by the orchestrator wizard. */
 interface OrchestratorInstallConfig {
-    mode: 'platform' | 'hybrid' | 'independent';
+    mode: OrchestratorMode;
     databaseUrl: string;
     port: number;
     secretsKey: string;
     bootstrapAdminToken: string;
     platformUrl?: string;
     platformToken?: string;
-    /** Source to add after orchestrator is running. */
-    source?: {
-        provider: string;
-        name: string;
-        appId: string;
-        privateKey: string;
-        webhookSecret?: string;
-    };
+    /** Public base URL of this orchestrator's own ingress (required in observed mode). */
+    webhookPublicUrl?: string;
+    /** GitHub App source to add after the orchestrator is running. */
+    source?: OrchestratorSourceHint;
 }
+/**
+ * Render the post-install next-step lines for adding the collected GitHub App
+ * source. The primary command inlines the webhook secret (copy-paste-runnable);
+ * when a secret is present a "Secure alternative" pipes it via stdin so the
+ * secret stays out of the process argument list (printf is a shell builtin, and
+ * kici-admin receives the value on stdin — so it never appears in `ps`). Returns
+ * indented lines for the install "Next steps" block.
+ */
+export declare function formatSourceAddHint(hint: OrchestratorSourceHint): string[];
+/**
+ * Check that the private-key path the operator gave is readable. Returns a
+ * warning string when it is not, so the wizard can surface it without aborting
+ * the whole install — the source is opt-in and secondary to the orchestrator.
+ */
+export declare function checkPrivateKeyReadable(keyPath: string): Promise<string | null>;
+/**
+ * Default Platform relay URL offered by the install wizard. Kept in lockstep
+ * with the quickstart compose `KICI_PLATFORM_URL` value (`wss://api.kici.dev/ws`)
+ * — the single hosted KiCI Platform relay endpoint. Pinned by
+ * orchestrator-wizard.test.ts so the two surfaces cannot drift.
+ */
+export declare const DEFAULT_PLATFORM_RELAY_URL = "wss://api.kici.dev/ws";
 /**
  * Run the interactive orchestrator setup wizard.
  *
  * Asks only essential questions per the user decision:
- * 1. Mode (platform/hybrid/independent)
+ * 1. Mode (platform/hybrid/observed/independent)
  * 2. Database URL
  * 3. Port
  * 4. Secrets encryption key
  * 5. Bootstrap admin token (for kici-admin authentication)
- * 6. Platform URL + token (if platform/hybrid mode)
+ * 6. Platform URL + token (if platform/hybrid/observed mode), plus the public
+ *    webhook base URL when observed
  * 7. Webhook secret (if hybrid/independent mode)
  */
 export declare function runOrchestratorWizard(): Promise<OrchestratorInstallConfig>;