@omnitron-dev/omnitron 0.2.0 → 0.3.0

package/dist/services/kubernetes.service.d.ts

@@ -10,47 +10,13 @@
  * Uses dynamic import for @xec-sh/core. Falls back to kubectl subprocess
  * when the adapter is not installed.
  */
-import type { ILogger } from '@omnitron-dev/titan/module/logger';
-export interface K8sPod {
-    name: string;
-    namespace: string;
-    status: string;
-    ready: boolean;
-    restarts: number;
-    age: string;
-    node: string;
-    labels: Record<string, string>;
-}
-export interface K8sDeployment {
-    name: string;
-    namespace: string;
-    replicas: number;
-    available: number;
-    ready: number;
-    age: string;
-}
-export interface K8sService {
-    name: string;
-    namespace: string;
-    type: string;
-    clusterIP: string;
-    ports: Array<{
-        port: number;
-        targetPort: number;
-        protocol: string;
-    }>;
-}
-export interface PortForwardHandle {
-    localPort: number;
-    remotePort: number;
-    pod: string;
-    namespace: string;
-    close: () => void;
-}
+import { type ILoggerModule } from '@omnitron-dev/titan/module/logger';
+export type { K8sPod, K8sDeployment, K8sService, PortForwardHandle, } from '../shared/dto/kubernetes.js';
+import type { K8sPod, K8sDeployment, K8sService, PortForwardHandle } from '../shared/dto/kubernetes.js';
 export declare class KubernetesService {
-    private readonly logger;
     private adapter;
-    constructor(logger: ILogger);
+    private readonly logger;
+    constructor(loggerModule: ILoggerModule);
     private getAdapter;
     listPods(namespace?: string, labelSelector?: string): Promise<K8sPod[]>;
     getPod(name: string, namespace?: string): Promise<K8sPod | null>;

package/dist/services/kubernetes.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kubernetes.service.d.ts","sourceRoot":"","sources":["../../src/services/kubernetes.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mCAAmC,CAAC;AAMjE,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACtE;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB;AA+CD,qBAAa,iBAAiB;IAGhB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFnC,OAAO,CAAC,OAAO,CAAoB;gBAEN,MAAM,EAAE,OAAO;YAE9B,UAAU;IAclB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAsBvE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,SAAY,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IASnE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,SAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAK7D,UAAU,CACd,IAAI,EAAE,MAAM,EACZ,SAAS,SAAY,EACrB,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,GAC5C,OAAO,CAAC,MAAM,CAAC;IAWZ,eAAe,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAiB7D,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,SAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrF,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,SAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IASrE,YAAY,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAwBvD,WAAW,CACf,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,SAAY,GACpB,OAAO,CAAC,iBAAiB,CAAC;IA8CvB,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,SAAS,SAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IAQlF,OAAO,CAAC,MAAM;IAad,OAAO,CAAC,aAAa;CAgBtB"}
+{"version":3,"file":"kubernetes.service.d.ts","sourceRoot":"","sources":["../../src/services/kubernetes.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAwB,KAAK,aAAa,EAAgB,MAAM,mCAAmC,CAAC;AAM3G,YAAY,EACV,MAAM,EACN,aAAa,EACb,UAAU,EACV,iBAAiB,GAClB,MAAM,6BAA6B,CAAC;AAQrC,OAAO,KAAK,EACV,MAAM,EACN,aAAa,EACb,UAAU,EACV,iBAAiB,EAClB,MAAM,6BAA6B,CAAC;AAyCrC,qBACa,iBAAiB;IAC5B,OAAO,CAAC,OAAO,CAAoB;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAU;IAMjC,YAA0C,YAAY,EAAE,aAAa,EAEpE;YAEa,UAAU;IAclB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAoB5E;IAEK,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,SAAY,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAOxE;IAEK,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,SAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAGlE;IAEK,UAAU,CACd,IAAI,EAAE,MAAM,EACZ,SAAS,SAAY,EACrB,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,GAC5C,OAAO,CAAC,MAAM,CAAC,CAKjB;IAMK,eAAe,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAelE;IAEK,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,SAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAG1F;IAEK,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,SAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAG1E;IAMK,YAAY,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAkB5D;IAMK,WAAW,CACf,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,SAAY,GACpB,OAAO,CAAC,iBAAiB,CAAC,CAwC5B;IAMK,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,SAAS,SAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAEjF;IAMD,OAAO,CAAC,MAAM;IAad,OAAO,CAAC,aAAa;CAgBtB"}

package/dist/services/kubernetes.service.js

@@ -10,6 +10,20 @@
  * Uses dynamic import for @xec-sh/core. Falls back to kubectl subprocess
  * when the adapter is not installed.
  */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { Injectable, Inject } from '@omnitron-dev/titan/decorators';
+import { LOGGER_SERVICE_TOKEN } from '@omnitron-dev/titan/module/logger';
 // =============================================================================
 // @xec-sh/core KubernetesAdapter — loaded dynamically
 // =============================================================================
@@ -50,11 +64,15 @@ function computeAge(creationTimestamp) {
 // =============================================================================
 // Service
 // =============================================================================
-export class KubernetesService {
-    logger;
+let KubernetesService = class KubernetesService {
     adapter = null;
-    constructor(logger) {
-        this.logger = logger;
+    logger;
+    // T-2 — @Injectable + @Inject closes the order-swap drift the
+    // framework arity guard can't catch. The DI container reads
+    // metadata directly from the decorator; no parallel inject:[]
+    // array can drift out of sync with constructor positions.
+    constructor(loggerModule) {
+        this.logger = loggerModule.logger;
     }
     async getAdapter() {
         if (this.adapter)
@@ -240,5 +258,11 @@ export class KubernetesService {
             labels: item.metadata?.labels ?? {},
         };
     }
-}
+};
+KubernetesService = __decorate([
+    Injectable(),
+    __param(0, Inject(LOGGER_SERVICE_TOKEN)),
+    __metadata("design:paramtypes", [Object])
+], KubernetesService);
+export { KubernetesService };
 //# sourceMappingURL=kubernetes.service.js.map

package/dist/services/kubernetes.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"kubernetes.service.js","sourceRoot":"","sources":["../../src/services/kubernetes.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AA4CH,gFAAgF;AAChF,sDAAsD;AACtD,gFAAgF;AAEhF,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEtD,gFAAgF;AAChF,sDAAsD;AACtD,gFAAgF;AAEhF,KAAK,UAAU,OAAO,CAAC,IAAc;IACnC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACxD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAE1C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,IAAI,EAAE;YACtD,OAAO,EAAE,MAAM;YACf,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IACpG,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAI,IAAc;IAC1C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAM,CAAC;AACjC,CAAC;AAED,SAAS,UAAU,CAAC,iBAAyB;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,CAAC;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,UAAU,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,UAAU,CAAC,GAAG,SAAS,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,SAAS,CAAC,GAAG,MAAM,CAAC,CAAC;IACrD,IAAI,IAAI,GAAG,CAAC;QAAE,OAAO,GAAG,IAAI,GAAG,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,GAAG,KAAK,GAAG,CAAC;IAClC,OAAO,GAAG,IAAI,GAAG,CAAC;AACpB,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,MAAM,OAAO,iBAAiB;IAGC;IAFrB,OAAO,GAAe,IAAI,CAAC;IAEnC,YAA6B,MAAe;QAAf,WAAM,GAAN,MAAM,CAAS;IAAG,CAAC;IAExC,KAAK,CAAC,UAAU;QACtB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;QAChC,IAAI,GAAG,EAAE,iBAAiB,EAAE,CAAC;YAC3B,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,iBAAiB,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC,OAAO,CAAC;QACtB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8EAA8E;IAC9E,iBAAiB;IACjB,8EAA8E;IAE9E,KAAK,CAAC,QAAQ,CAAC,SAAkB,EAAE,aAAsB;QACvD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxC,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;gBAClE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,6DAA6D,CAAC,CAAC;YACrH,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC7B,IAAI,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;;YACrC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACnC,IAAI,aAAa;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAElD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAM,IAAI,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAU,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,SAAS,GAAG,SAAS;QAC9C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAM,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;YAC7E,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,SAAS,GAAG,SAAS;QACjD,MAAM,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,UAAU,CACd,IAAY,EACZ,SAAS,GAAG,SAAS,EACrB,OAA6C;QAE7C,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAC7C,IAAI,OAAO,EAAE,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7D,4EAA4E;QAC5E,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAED,8EAA8E;IAC9E,wBAAwB;IACxB,8EAA8E;IAE9E,KAAK,CAAC,eAAe,CAAC,SAAkB;QACtC,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QACpC,IAAI,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;;YACrC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAEnC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAM,IAAI,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAU,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC1B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;YACxB,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,IAAI,CAAC;YAClC,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,iBAAiB,IAAI,CAAC;YAC9C,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,IAAI,CAAC;YACtC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;SACjD,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,IAAY,EAAE,QAAgB,EAAE,SAAS,GAAG,SAAS;QACzE,MAAM,OAAO,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QACxF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,mBAAmB,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,IAAY,EAAE,SAAS,GAAG,SAAS;QACzD,MAAM,OAAO,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,sBAAsB,CAAC,CAAC;IAC5E,CAAC;IAED,8EAA8E;IAC9E,eAAe;IACf,8EAA8E;IAE9E,KAAK,CAAC,YAAY,CAAC,SAAkB;QACnC,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACjC,IAAI,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;;YACrC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAEnC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAM,IAAI,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAU,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC1B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;YACxB,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,WAAW;YACpC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE;YACrC,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;gBAC/C,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,UAAU,EAAE,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;gBACpE,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,KAAK;aAC9B,CAAC,CAAC;SACJ,CAAC,CAAC,CAAC;IACN,CAAC;IAED,8EAA8E;IAC9E,kBAAkB;IAClB,8EAA8E;IAE9E,KAAK,CAAC,WAAW,CACf,GAAW,EACX,SAAiB,EACjB,UAAkB,EAClB,SAAS,GAAG,SAAS;QAErB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE,GAAG,SAAS,IAAI,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE;YACnG,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;QAEH,0CAA0C;QAC1C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACtF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;gBACxC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC5B,IAAI,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;oBACpC,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACxB,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBACxB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACf,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,yCAAyC,IAAI,EAAE,CAAC,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,0BAA0B,CAAC,CAAC;QAExF,OAAO;YACL,SAAS;YACT,UAAU;YACV,GAAG;YACH,SAAS;YACT,KAAK,EAAE,GAAG,EAAE;gBACV,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,qBAAqB,CAAC,CAAC;YAC9D,CAAC;SACF,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,gBAAgB;IAChB,8EAA8E;IAE9E,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,OAAiB,EAAE,SAAS,GAAG,SAAS;QAC9D,OAAO,OAAO,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,8EAA8E;IAC9E,UAAU;IACV,8EAA8E;IAEtE,MAAM,CAAC,CAAM;QACnB,OAAO;YACL,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE;YACtC,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,IAAI,SAAS;YAC5D,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,SAAS;YAC7B,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,KAAK;YACvB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC;YACzB,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;YAChB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;YAClB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE;SAC7C,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,IAAS;QAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,iBAAiB,IAAI,EAAE,CAAC;QACxD,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,GAAW,EAAE,CAAM,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACjG,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAEhF,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;YACxB,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,SAAS;YACvC,KAAK,EAAE,QAAQ;YACf,QAAQ,EAAE,aAAa;YACvB,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YAChD,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE;YAC/B,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE;SACpC,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"kubernetes.service.js","sourceRoot":"","sources":["../../src/services/kubernetes.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAoC,MAAM,mCAAmC,CAAC;AAc3G,gFAAgF;AAChF,sDAAsD;AACtD,gFAAgF;AAEhF,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAQtD,gFAAgF;AAChF,sDAAsD;AACtD,gFAAgF;AAEhF,KAAK,UAAU,OAAO,CAAC,IAAc;IACnC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACxD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAE1C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,IAAI,EAAE;YACtD,OAAO,EAAE,MAAM;YACf,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IACpG,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAI,IAAc;IAC1C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAM,CAAC;AACjC,CAAC;AAED,SAAS,UAAU,CAAC,iBAAyB;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,CAAC;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,UAAU,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,UAAU,CAAC,GAAG,SAAS,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,SAAS,CAAC,GAAG,MAAM,CAAC,CAAC;IACrD,IAAI,IAAI,GAAG,CAAC;QAAE,OAAO,GAAG,IAAI,GAAG,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,GAAG,KAAK,GAAG,CAAC;IAClC,OAAO,GAAG,IAAI,GAAG,CAAC;AACpB,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAGzE,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IACpB,OAAO,GAAe,IAAI,CAAC;IAClB,MAAM,CAAU;IAEjC,8DAA8D;IAC9D,4DAA4D;IAC5D,8DAA8D;IAC9D,0DAA0D;IAC1D,YAA0C,YAA2B;QACnE,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;IACpC,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;QAChC,IAAI,GAAG,EAAE,iBAAiB,EAAE,CAAC;YAC3B,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,iBAAiB,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC,OAAO,CAAC;QACtB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8EAA8E;IAC9E,iBAAiB;IACjB,8EAA8E;IAE9E,KAAK,CAAC,QAAQ,CAAC,SAAkB,EAAE,aAAsB;QACvD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxC,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;gBAClE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,6DAA6D,CAAC,CAAC;YACrH,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC7B,IAAI,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;;YACrC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACnC,IAAI,aAAa;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAElD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAM,IAAI,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAU,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,SAAS,GAAG,SAAS;QAC9C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAM,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;YAC7E,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,SAAS,GAAG,SAAS;QACjD,MAAM,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,UAAU,CACd,IAAY,EACZ,SAAS,GAAG,SAAS,EACrB,OAA6C;QAE7C,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAC7C,IAAI,OAAO,EAAE,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7D,4EAA4E;QAC5E,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAED,8EAA8E;IAC9E,wBAAwB;IACxB,8EAA8E;IAE9E,KAAK,CAAC,eAAe,CAAC,SAAkB;QACtC,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QACpC,IAAI,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;;YACrC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAEnC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAM,IAAI,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAU,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC1B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;YACxB,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,IAAI,CAAC;YAClC,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,iBAAiB,IAAI,CAAC;YAC9C,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,IAAI,CAAC;YACtC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;SACjD,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,IAAY,EAAE,QAAgB,EAAE,SAAS,GAAG,SAAS;QACzE,MAAM,OAAO,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QACxF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,mBAAmB,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,IAAY,EAAE,SAAS,GAAG,SAAS;QACzD,MAAM,OAAO,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,sBAAsB,CAAC,CAAC;IAC5E,CAAC;IAED,8EAA8E;IAC9E,eAAe;IACf,8EAA8E;IAE9E,KAAK,CAAC,YAAY,CAAC,SAAkB;QACnC,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACjC,IAAI,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;;YACrC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAEnC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAM,IAAI,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAU,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC1B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;YACxB,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,WAAW;YACpC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE;YACrC,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;gBAC/C,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,UAAU,EAAE,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;gBACpE,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,KAAK;aAC9B,CAAC,CAAC;SACJ,CAAC,CAAC,CAAC;IACN,CAAC;IAED,8EAA8E;IAC9E,kBAAkB;IAClB,8EAA8E;IAE9E,KAAK,CAAC,WAAW,CACf,GAAW,EACX,SAAiB,EACjB,UAAkB,EAClB,SAAS,GAAG,SAAS;QAErB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE,GAAG,SAAS,IAAI,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE;YACnG,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;QAEH,0CAA0C;QAC1C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACtF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;gBACxC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC5B,IAAI,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;oBACpC,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACxB,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBACxB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACf,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,yCAAyC,IAAI,EAAE,CAAC,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,0BAA0B,CAAC,CAAC;QAExF,OAAO;YACL,SAAS;YACT,UAAU;YACV,GAAG;YACH,SAAS;YACT,KAAK,EAAE,GAAG,EAAE;gBACV,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,qBAAqB,CAAC,CAAC;YAC9D,CAAC;SACF,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,gBAAgB;IAChB,8EAA8E;IAE9E,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,OAAiB,EAAE,SAAS,GAAG,SAAS;QAC9D,OAAO,OAAO,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,8EAA8E;IAC9E,UAAU;IACV,8EAA8E;IAEtE,MAAM,CAAC,CAAM;QACnB,OAAO;YACL,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE;YACtC,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,IAAI,SAAS;YAC5D,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,SAAS;YAC7B,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,KAAK;YACvB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC;YACzB,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;YAChB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;YAClB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE;SAC7C,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,IAAS;QAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,iBAAiB,IAAI,EAAE,CAAC;QACxD,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,GAAW,EAAE,CAAM,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACjG,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAEhF,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;YACxB,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,SAAS;YACvC,KAAK,EAAE,QAAQ;YACf,QAAQ,EAAE,aAAa;YACvB,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YAChD,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE;YAC/B,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE;SACpC,CAAC;IACJ,CAAC;CACF,CAAA;AA5NY,iBAAiB;IAD7B,UAAU,EAAE;IASE,WAAA,MAAM,CAAC,oBAAoB,CAAC,CAAA;;GAR9B,iBAAiB,CA4N7B"}

package/dist/services/local-bundle.d.ts

@@ -0,0 +1,151 @@
+/**
+ * Shipping the omnitron in this working tree to a node, instead of the one on
+ * npm.
+ *
+ * The registry channel installs `@omnitron-dev/omnitron` and whatever it
+ * depends on. That is the right default and it has one property an operator
+ * cannot change: it ships what was published. Measured 2026-09-14, the
+ * published version was five months and 224 commits behind the working tree
+ * and carried the same version number, so a node built from it reported
+ * `v0.2.0` — indistinguishable from a node built from today's code.
+ *
+ * This is the other channel: build here, ship that.
+ *
+ * ## Why it is not `npm pack`
+ *
+ * `apps/omnitron` declares ten workspace dependencies, and they declare four
+ * more between them — fourteen packages that resolve inside this repository
+ * and nowhere else. A tarball of the app alone carries `workspace:*` ranges
+ * that npm on the far side cannot resolve at all.
+ *
+ * ## Why it is not `pnpm deploy`
+ *
+ * It exists, it produces a self-contained tree with `node_modules`, and
+ * shipping that tree is wrong in a way that only shows up on the target.
+ * Measured on a tree deployed from this machine:
+ *
+ *     node_modules/.pnpm/@esbuild+darwin-arm64@0.28.2
+ *     node_modules/.pnpm/@typescript+typescript-darwin-arm64@7.0.2
+ *     node_modules/.pnpm/fsevents@2.3.3
+ *
+ * Every one of those is for the machine that built it. `@esbuild/linux-x64`
+ * is not in the tree, because this machine never needed it. Unpacked on a
+ * Linux node the daemon starts and its build path does not, and the reason is
+ * three directories deep in a tarball nobody opens.
+ *
+ * ## What this does instead
+ *
+ * Pack each workspace package with `pnpm pack`, and let `npm install` run ON
+ * THE TARGET. The platform-specific packages are then resolved for the
+ * platform that will run them, which is the only place that knows what it is.
+ *
+ * The redirection is npm's own `overrides`, not a rewrite of our own.
+ * `pnpm pack` already turns `workspace:*` into the exact version — but that
+ * is a REGISTRY reference, so an install would fetch the published
+ * `@omnitron-dev/common@0.2.0`, which is the copy this channel exists to
+ * avoid. An `overrides` entry replaces the resolution of a package everywhere
+ * in the tree, transitively, which is exactly the shape of the problem.
+ *
+ * Measured before building on it: six packages, one of them reached only
+ * through another, all six resolved `file:vendor/…` in the lockfile, and
+ * `import('@omnitron-dev/titan')` returned its 33 exports.
+ */
+/** Minimal shape of the package.json fields this reads. */
+export interface PackageManifest {
+    name: string;
+    version: string;
+    dependencies?: Record<string, string> | undefined;
+    optionalDependencies?: Record<string, string> | undefined;
+}
+/** Everything the workspace holds, by package name. */
+export type Workspace = ReadonlyMap<string, PackageManifest>;
+/** A workspace package that has to travel with the bundle. */
+export interface VendoredPackage {
+    readonly name: string;
+    readonly version: string;
+    /** File name inside the bundle's `vendor/` directory. */
+    readonly tarball: string;
+}
+export interface BundlePlan {
+    readonly root: PackageManifest;
+    /** Transitive closure of workspace dependencies, in a stable order. */
+    readonly vendored: readonly VendoredPackage[];
+    /**
+     * The `overrides` map for the bundle's root `package.json`.
+     *
+     * npm applies these to the whole tree, so one entry per workspace package
+     * redirects every reference to it — including the ones inside the vendored
+     * tarballs, which `pnpm pack` left pointing at registry versions.
+     */
+    readonly overrides: Readonly<Record<string, string>>;
+    readonly refusal?: string;
+}
+/** `workspace:*`, `workspace:^`, `workspace:1.2.3` — all of them. */
+export declare function isWorkspaceRange(range: string): boolean;
+/**
+ * `link:../packages/titan`, `link:/abs/path/to/titan`.
+ *
+ * pnpm's `link:` means "symlink this directory, do not copy it and do not
+ * install its dependencies". That is the right answer while the directory is
+ * on the same machine, and the only possible answer while it is not is that
+ * nothing resolves.
+ */
+export declare function isLinkRange(range: string): boolean;
+/**
+ * A dependency that has to travel as a tarball, because no registry has it.
+ *
+ * Both spellings name a directory on the developer's machine, and both
+ * produce a symlink in an installed tree. The difference — a `workspace:`
+ * range names a package of THIS repository, a `link:` range names a path,
+ * usually a sibling checkout — matters to pnpm and not at all here: a
+ * directory cannot be shipped by reference to a machine that does not have it.
+ *
+ * Measured, and the reason this predicate exists: an artifact built for the
+ * test node carried twenty-three symlinks of the form
+ *
+ *     node_modules/@omnitron-dev/titan
+ *       -> ../../../../../../../../../../Users/taaliman/projects/.../packages/titan
+ *
+ * — ten `..` segments, which climb past `/` and land in a home directory that
+ * exists on exactly one computer. `ls` showed every entry present; `ls
+ * <entry>/` answered `No such file or directory`. Every app on the node failed
+ * at its first import, and the builder's own check — `existsSync(node_modules)`
+ * — could not see it, because a dangling symlink is an entry that exists.
+ */
+export declare function isVendorableRange(range: string): boolean;
+/** A tarball name that is a safe file name and identifies the package. */
+export declare function tarballNameFor(name: string, version: string): string;
+/**
+ * Work out what has to be packed, and what each manifest becomes.
+ *
+ * Pure: the workspace is passed in. The caller reads it from disk, which is
+ * the part that cannot be tested without one.
+ */
+export declare function planBundle(rootName: string, workspace: Workspace): BundlePlan;
+/** Where the tarballs sit inside a bundle. */
+export declare const VENDOR_DIR = "vendor";
+/**
+ * The root `package.json` a bundle installs from.
+ *
+ * Its own function so the file that decides what the target installs can be
+ * read in a test. The root's direct workspace dependencies are given as
+ * `file:` too: an `overrides` entry redirects a resolution, and a
+ * `workspace:*` range has no resolution to redirect — npm rejects it before
+ * overrides are consulted. The same is true of `link:`, which npm reads as a
+ * path it is supposed to symlink; on the target that path is not there.
+ */
+export declare function bundleRootManifest(plan: BundlePlan, version: string): Record<string, unknown>;
+/**
+ * The identity of a locally built bundle.
+ *
+ * `0.2.0` on npm and `0.2.0` in this tree are two different programs. A node
+ * running either reports the same string, so "which of my nodes are behind"
+ * has no answer and `fleet upgrade` cannot know whom to upgrade.
+ *
+ * Build metadata (`+local.<sha>.<stamp>`) is the semver-legal way to say
+ * this: comparison ignores everything after `+`, so nothing that reasons
+ * about versions is confused by it, while two builds are still visibly
+ * different strings.
+ */
+export declare function localVersion(baseVersion: string, commit: string, at: Date): string;
+//# sourceMappingURL=local-bundle.d.ts.map

package/dist/services/local-bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-bundle.d.ts","sourceRoot":"","sources":["../../src/services/local-bundle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAEH,2DAA2D;AAC3D,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAClD,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;CAC3D;AAED,uDAAuD;AACvD,MAAM,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAE7D,8DAA8D;AAC9D,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,yDAAyD;IACzD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;IAC9C;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACrD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,qEAAqE;AACrE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAElD;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,0EAA0E;AAC1E,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAIpE;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,UAAU,CA4E7E;AAED,8CAA8C;AAC9C,eAAO,MAAM,UAAU,WAAW,CAAC;AAEnC;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAc7F;AAYD;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,GAAG,MAAM,CAUlF"}

package/dist/services/local-bundle.js

@@ -0,0 +1,233 @@
+/**
+ * Shipping the omnitron in this working tree to a node, instead of the one on
+ * npm.
+ *
+ * The registry channel installs `@omnitron-dev/omnitron` and whatever it
+ * depends on. That is the right default and it has one property an operator
+ * cannot change: it ships what was published. Measured 2026-09-14, the
+ * published version was five months and 224 commits behind the working tree
+ * and carried the same version number, so a node built from it reported
+ * `v0.2.0` — indistinguishable from a node built from today's code.
+ *
+ * This is the other channel: build here, ship that.
+ *
+ * ## Why it is not `npm pack`
+ *
+ * `apps/omnitron` declares ten workspace dependencies, and they declare four
+ * more between them — fourteen packages that resolve inside this repository
+ * and nowhere else. A tarball of the app alone carries `workspace:*` ranges
+ * that npm on the far side cannot resolve at all.
+ *
+ * ## Why it is not `pnpm deploy`
+ *
+ * It exists, it produces a self-contained tree with `node_modules`, and
+ * shipping that tree is wrong in a way that only shows up on the target.
+ * Measured on a tree deployed from this machine:
+ *
+ *     node_modules/.pnpm/@esbuild+darwin-arm64@0.28.2
+ *     node_modules/.pnpm/@typescript+typescript-darwin-arm64@7.0.2
+ *     node_modules/.pnpm/fsevents@2.3.3
+ *
+ * Every one of those is for the machine that built it. `@esbuild/linux-x64`
+ * is not in the tree, because this machine never needed it. Unpacked on a
+ * Linux node the daemon starts and its build path does not, and the reason is
+ * three directories deep in a tarball nobody opens.
+ *
+ * ## What this does instead
+ *
+ * Pack each workspace package with `pnpm pack`, and let `npm install` run ON
+ * THE TARGET. The platform-specific packages are then resolved for the
+ * platform that will run them, which is the only place that knows what it is.
+ *
+ * The redirection is npm's own `overrides`, not a rewrite of our own.
+ * `pnpm pack` already turns `workspace:*` into the exact version — but that
+ * is a REGISTRY reference, so an install would fetch the published
+ * `@omnitron-dev/common@0.2.0`, which is the copy this channel exists to
+ * avoid. An `overrides` entry replaces the resolution of a package everywhere
+ * in the tree, transitively, which is exactly the shape of the problem.
+ *
+ * Measured before building on it: six packages, one of them reached only
+ * through another, all six resolved `file:vendor/…` in the lockfile, and
+ * `import('@omnitron-dev/titan')` returned its 33 exports.
+ */
+/** `workspace:*`, `workspace:^`, `workspace:1.2.3` — all of them. */
+export function isWorkspaceRange(range) {
+    return typeof range === 'string' && range.startsWith('workspace:');
+}
+/**
+ * `link:../packages/titan`, `link:/abs/path/to/titan`.
+ *
+ * pnpm's `link:` means "symlink this directory, do not copy it and do not
+ * install its dependencies". That is the right answer while the directory is
+ * on the same machine, and the only possible answer while it is not is that
+ * nothing resolves.
+ */
+export function isLinkRange(range) {
+    return typeof range === 'string' && range.startsWith('link:');
+}
+/**
+ * A dependency that has to travel as a tarball, because no registry has it.
+ *
+ * Both spellings name a directory on the developer's machine, and both
+ * produce a symlink in an installed tree. The difference — a `workspace:`
+ * range names a package of THIS repository, a `link:` range names a path,
+ * usually a sibling checkout — matters to pnpm and not at all here: a
+ * directory cannot be shipped by reference to a machine that does not have it.
+ *
+ * Measured, and the reason this predicate exists: an artifact built for the
+ * test node carried twenty-three symlinks of the form
+ *
+ *     node_modules/@omnitron-dev/titan
+ *       -> ../../../../../../../../../../Users/taaliman/projects/.../packages/titan
+ *
+ * — ten `..` segments, which climb past `/` and land in a home directory that
+ * exists on exactly one computer. `ls` showed every entry present; `ls
+ * <entry>/` answered `No such file or directory`. Every app on the node failed
+ * at its first import, and the builder's own check — `existsSync(node_modules)`
+ * — could not see it, because a dangling symlink is an entry that exists.
+ */
+export function isVendorableRange(range) {
+    return isWorkspaceRange(range) || isLinkRange(range);
+}
+/** A tarball name that is a safe file name and identifies the package. */
+export function tarballNameFor(name, version) {
+    // `@omnitron-dev/titan-pm` → `omnitron-dev-titan-pm-0.2.0.tgz`, which is
+    // what `npm pack` produces, minus the leading `@`.
+    return `${name.replace(/^@/, '').replace(/\//g, '-')}-${version}.tgz`;
+}
+/**
+ * Work out what has to be packed, and what each manifest becomes.
+ *
+ * Pure: the workspace is passed in. The caller reads it from disk, which is
+ * the part that cannot be tested without one.
+ */
+export function planBundle(rootName, workspace) {
+    const root = workspace.get(rootName);
+    if (!root) {
+        // The refusal names the PLACE, not only the package. Run from another
+        // project's repository — `cd ~/projects/dao/daos && omnitron fleet
+        // upgrade` — the old sentence was «@omnitron-dev/omnitron is not a
+        // package in this workspace», which is true of that workspace and reads
+        // as a broken omnitron checkout. `commands/fleet.ts` guards the
+        // neighbouring case, a cwd with NO workspace above it, and its comment
+        // describes this exact trap; a cwd with somebody ELSE'S workspace above
+        // it walks past that guard and arrives here, in the same words.
+        const names = [...workspace.keys()];
+        const found = names.length === 0
+            ? 'that workspace declares no packages at all'
+            : `that workspace holds ${names.length} package${names.length === 1 ? '' : 's'}, ` +
+                `including ${names.slice(0, 2).join(', ')}`;
+        return {
+            root: { name: rootName, version: '0.0.0' },
+            vendored: [],
+            overrides: {},
+            refusal: `${rootName} is not a package in this workspace — ${found}.`,
+        };
+    }
+    // Breadth-first over workspace ranges, so the closure is complete and the
+    // order is stable. A `dependencies` map is iterated in insertion order and
+    // the queue preserves it, which keeps a bundle byte-identical between runs
+    // that change nothing — an identity a fleet upgrade can compare.
+    const closure = [];
+    const seen = new Set([rootName]);
+    const queue = [...workspaceDepsOf(root)];
+    const missing = [];
+    while (queue.length > 0) {
+        const name = queue.shift();
+        if (seen.has(name))
+            continue;
+        seen.add(name);
+        const manifest = workspace.get(name);
+        if (!manifest) {
+            // A `workspace:*` range naming a package the workspace does not have.
+            // Packing what is left would produce a bundle that installs and then
+            // fails at the first import — reported instead.
+            missing.push(name);
+            continue;
+        }
+        closure.push(name);
+        for (const dep of workspaceDepsOf(manifest)) {
+            if (!seen.has(dep))
+                queue.push(dep);
+        }
+    }
+    if (missing.length > 0) {
+        return {
+            root,
+            vendored: [],
+            overrides: {},
+            refusal: `These packages are required through a workspace range and are not in this workspace: ` +
+                `${missing.join(', ')}.`,
+        };
+    }
+    const vendored = closure.map((name) => {
+        const m = workspace.get(name);
+        return { name, version: m.version, tarball: tarballNameFor(name, m.version) };
+    });
+    // One entry per vendored package. npm resolves an override anywhere the
+    // package appears, so a dependency three levels down inside a tarball is
+    // redirected by the same line as a direct one.
+    const overrides = {};
+    for (const v of vendored)
+        overrides[v.name] = `file:./${VENDOR_DIR}/${v.tarball}`;
+    return { root, vendored, overrides };
+}
+/** Where the tarballs sit inside a bundle. */
+export const VENDOR_DIR = 'vendor';
+/**
+ * The root `package.json` a bundle installs from.
+ *
+ * Its own function so the file that decides what the target installs can be
+ * read in a test. The root's direct workspace dependencies are given as
+ * `file:` too: an `overrides` entry redirects a resolution, and a
+ * `workspace:*` range has no resolution to redirect — npm rejects it before
+ * overrides are consulted. The same is true of `link:`, which npm reads as a
+ * path it is supposed to symlink; on the target that path is not there.
+ */
+export function bundleRootManifest(plan, version) {
+    const dependencies = {};
+    for (const [name, range] of Object.entries(plan.root.dependencies ?? {})) {
+        dependencies[name] = isVendorableRange(range) ? (plan.overrides[name] ?? range) : range;
+    }
+    return {
+        name: plan.root.name,
+        version,
+        private: true,
+        type: 'module',
+        dependencies,
+        overrides: plan.overrides,
+    };
+}
+function workspaceDepsOf(manifest) {
+    const out = [];
+    for (const group of [manifest.dependencies, manifest.optionalDependencies]) {
+        for (const [name, range] of Object.entries(group ?? {})) {
+            if (isVendorableRange(range))
+                out.push(name);
+        }
+    }
+    return out;
+}
+/**
+ * The identity of a locally built bundle.
+ *
+ * `0.2.0` on npm and `0.2.0` in this tree are two different programs. A node
+ * running either reports the same string, so "which of my nodes are behind"
+ * has no answer and `fleet upgrade` cannot know whom to upgrade.
+ *
+ * Build metadata (`+local.<sha>.<stamp>`) is the semver-legal way to say
+ * this: comparison ignores everything after `+`, so nothing that reasons
+ * about versions is confused by it, while two builds are still visibly
+ * different strings.
+ */
+export function localVersion(baseVersion, commit, at) {
+    const stamp = at.getUTCFullYear().toString() +
+        String(at.getUTCMonth() + 1).padStart(2, '0') +
+        String(at.getUTCDate()).padStart(2, '0') +
+        String(at.getUTCHours()).padStart(2, '0') +
+        String(at.getUTCMinutes()).padStart(2, '0');
+    // Build metadata may hold only alphanumerics, dots and dashes.
+    const sha = commit.replace(/[^0-9a-zA-Z]/g, '').slice(0, 12) || 'nocommit';
+    return `${baseVersion}+local.${sha}.${stamp}`;
+}
+//# sourceMappingURL=local-bundle.js.map

package/dist/services/local-bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-bundle.js","sourceRoot":"","sources":["../../src/services/local-bundle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAoCH,qEAAqE;AACrE,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,gBAAgB,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC;AACvD,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,OAAe;IAC1D,yEAAyE;IACzE,mDAAmD;IACnD,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,OAAO,MAAM,CAAC;AACxE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,SAAoB;IAC/D,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,sEAAsE;QACtE,mEAAmE;QACnE,mEAAmE;QACnE,wEAAwE;QACxE,gEAAgE;QAChE,uEAAuE;QACvE,wEAAwE;QACxE,gEAAgE;QAChE,MAAM,KAAK,GAAG,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QACpC,MAAM,KAAK,GACT,KAAK,CAAC,MAAM,KAAK,CAAC;YAChB,CAAC,CAAC,4CAA4C;YAC9C,CAAC,CAAC,wBAAwB,KAAK,CAAC,MAAM,WAAW,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI;gBAChF,aAAa,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,OAAO;YACL,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE;YAC1C,QAAQ,EAAE,EAAE;YACZ,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,GAAG,QAAQ,yCAAyC,KAAK,GAAG;SACtE,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,iEAAiE;IACjE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzC,MAAM,KAAK,GAAa,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;QAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEf,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,sEAAsE;YACtE,qEAAqE;YACrE,gDAAgD;YAChD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,IAAI;YACJ,QAAQ,EAAE,EAAE;YACZ,SAAS,EAAE,EAAE;YACb,OAAO,EACL,uFAAuF;gBACvF,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;SAC3B,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACpC,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,yEAAyE;IACzE,+CAA+C;IAC/C,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,UAAU,UAAU,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAElF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACvC,CAAC;AAED,8CAA8C;AAC9C,MAAM,CAAC,MAAM,UAAU,GAAG,QAAQ,CAAC;AAEnC;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAgB,EAAE,OAAe;IAClE,MAAM,YAAY,GAA2B,EAAE,CAAC;IAChD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;QACzE,YAAY,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1F,CAAC;IAED,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;QACpB,OAAO;QACP,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,QAAQ;QACd,YAAY;QACZ,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,QAAyB;IAChD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC3E,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;YACxD,IAAI,iBAAiB,CAAC,KAAK,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAAC,WAAmB,EAAE,MAAc,EAAE,EAAQ;IACxE,MAAM,KAAK,GACT,EAAE,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE;QAC9B,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;QAC7C,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;QACzC,MAAM,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9C,+DAA+D;IAC/D,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC;IAC3E,OAAO,GAAG,WAAW,UAAU,GAAG,IAAI,KAAK,EAAE,CAAC;AAChD,CAAC"}

package/dist/services/lockout.d.ts

@@ -0,0 +1,28 @@
+/**
+ * How long an account stays locked after a run of failed sign-ins.
+ *
+ * A function of its own so the schedule can be tested. The daemon's auth
+ * service had 469 lines and no tests at all, and the part worth pinning is
+ * this one: it decides when an operator is shut out of the control plane, and
+ * every mistake in it is either a lockout that never engages or one that
+ * never lets go.
+ *
+ * The state it drives is persisted rather than held in memory, because a
+ * daemon restart — which an attacker may be able to provoke — must not hand
+ * back a clean slate.
+ */
+/** Consecutive failures tolerated before the account locks. */
+export declare const MAX_FAILED_ATTEMPTS = 5;
+/** First lockout duration; doubles with each further failure. */
+export declare const LOCKOUT_BASE_MS = 60000;
+/** Ceiling for the exponential lockout. */
+export declare const LOCKOUT_MAX_MS: number;
+/**
+ * The lockout expiry after `attempts` consecutive failures.
+ *
+ * @param attempts the failure count INCLUDING the one just recorded
+ * @param now injected for tests
+ * @returns when the lock expires, or null while under the threshold
+ */
+export declare function computeLockout(attempts: number, now?: number): Date | null;
+//# sourceMappingURL=lockout.d.ts.map

package/dist/services/lockout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockout.d.ts","sourceRoot":"","sources":["../../src/services/lockout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,+DAA+D;AAC/D,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC,iEAAiE;AACjE,eAAO,MAAM,eAAe,QAAS,CAAC;AAEtC,2CAA2C;AAC3C,eAAO,MAAM,cAAc,QAAc,CAAC;AAE1C;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,IAAI,GAAG,IAAI,CAatF"}

package/dist/services/lockout.js

@@ -0,0 +1,41 @@
+/**
+ * How long an account stays locked after a run of failed sign-ins.
+ *
+ * A function of its own so the schedule can be tested. The daemon's auth
+ * service had 469 lines and no tests at all, and the part worth pinning is
+ * this one: it decides when an operator is shut out of the control plane, and
+ * every mistake in it is either a lockout that never engages or one that
+ * never lets go.
+ *
+ * The state it drives is persisted rather than held in memory, because a
+ * daemon restart — which an attacker may be able to provoke — must not hand
+ * back a clean slate.
+ */
+/** Consecutive failures tolerated before the account locks. */
+export const MAX_FAILED_ATTEMPTS = 5;
+/** First lockout duration; doubles with each further failure. */
+export const LOCKOUT_BASE_MS = 60_000;
+/** Ceiling for the exponential lockout. */
+export const LOCKOUT_MAX_MS = 30 * 60_000;
+/**
+ * The lockout expiry after `attempts` consecutive failures.
+ *
+ * @param attempts the failure count INCLUDING the one just recorded
+ * @param now injected for tests
+ * @returns when the lock expires, or null while under the threshold
+ */
+export function computeLockout(attempts, now = Date.now()) {
+    // A non-finite or negative count is not a smaller number of failures, it is
+    // a broken one — and reading it as "under the threshold" would disable the
+    // lockout entirely for whoever produced it.
+    if (!Number.isFinite(attempts))
+        return new Date(now + LOCKOUT_BASE_MS);
+    const overThreshold = Math.floor(attempts) - MAX_FAILED_ATTEMPTS;
+    if (overThreshold < 0)
+        return null;
+    // 2 ** overThreshold overflows to Infinity around 1024 attempts; the min
+    // against the cap handles that, but only because Infinity compares larger.
+    const duration = Math.min(LOCKOUT_BASE_MS * 2 ** overThreshold, LOCKOUT_MAX_MS);
+    return new Date(now + duration);
+}
+//# sourceMappingURL=lockout.js.map

package/dist/services/lockout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockout.js","sourceRoot":"","sources":["../../src/services/lockout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,+DAA+D;AAC/D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC,iEAAiE;AACjE,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AAEtC,2CAA2C;AAC3C,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,MAAM,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE;IACvE,4EAA4E;IAC5E,2EAA2E;IAC3E,4CAA4C;IAC5C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,IAAI,CAAC,GAAG,GAAG,eAAe,CAAC,CAAC;IAEvE,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,mBAAmB,CAAC;IACjE,IAAI,aAAa,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnC,yEAAyE;IACzE,2EAA2E;IAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,GAAG,CAAC,IAAI,aAAa,EAAE,cAAc,CAAC,CAAC;IAChF,OAAO,IAAI,IAAI,CAAC,GAAG,GAAG,QAAQ,CAAC,CAAC;AAClC,CAAC"}