@omnitron-dev/omnitron 0.2.0 → 0.3.0

package/dist/infrastructure/bare-metal-plan.js

@@ -0,0 +1,363 @@
+/**
+ * What has to happen on a host for a declared bare-metal service to be as
+ * declared.
+ *
+ * `IBareMetalServiceConfig` has described this since it was written —
+ * `installCommand`, `systemdUnit`, `configFile` + `configTemplate`,
+ * `dataDir`, `user`, `validateCommand`, and variants keyed by `networkMode`.
+ * Every field of it was read by nothing: the type existed, the preset
+ * registry copied it, and no code path ever acted on one. An operator could
+ * declare that a service runs from systemd and get a service that did not
+ * run at all.
+ *
+ * It matters because some things should not be containers. A Bitcoin or
+ * Monero node on a server is a system service with a chain directory
+ * measured in hundreds of gigabytes, a package the distribution knows how to
+ * update, and a lifetime longer than any deployment. Wrapping one in a
+ * container to satisfy a provisioning tool is the tool making its own
+ * convenience the architecture.
+ *
+ * This is the planning half, and it is pure: given what is declared and what
+ * the host currently looks like, it says what to do and what it cannot do.
+ * Executing lives next door, so the decisions can be tested without a host
+ * and the same plan can run locally or over SSH.
+ */
+import { bindService, secretValues } from './service-binding.js';
+/**
+ * The marker that says omnitron wrote a config file.
+ *
+ * A host's existing config was written by a person, and it holds decisions
+ * this does not know about — which interfaces to bind, how much bandwidth to
+ * use, whether to relay over Tor. Overwriting one because a template
+ * disagrees is how a provisioning tool destroys a working service, and the
+ * chain directory beside it makes that expensive to undo.
+ *
+ * So: a file that is absent is written, a file carrying this marker is
+ * updated, and a file without it is left exactly alone and reported. The
+ * operator adopts it by pasting one line, which is a decision they can see.
+ */
+export const OMNITRON_CONFIG_MARKER = '# managed-by: omnitron';
+/** Config files hold RPC credentials. 0640, owned by the service's user. */
+export const CONFIG_MODE = '0640';
+export function planBareMetal(spec, observed) {
+    const actions = [];
+    const refusals = [];
+    // 1. The software itself.
+    if (!observed.installed) {
+        if (spec.installCommand) {
+            actions.push({ type: 'install', command: spec.installCommand });
+        }
+        else {
+            // Named as the missing declaration rather than as a host problem: the
+            // host is fine, the description of it is incomplete.
+            refusals.push(`${spec.name} is not installed and its declaration has no \`installCommand\` — nothing here can put it there.`);
+        }
+    }
+    // 2. The account it runs as, before anything is owned by it.
+    if (spec.user && !observed.userExists) {
+        actions.push({ type: 'create-user', user: spec.user });
+    }
+    // 3. Where its data lives. Never touched when it is already there: the
+    //    directory may hold hundreds of gigabytes of chain. And never made
+    //    empty beside a chain the stack says the host holds already — that is
+    //    the same chain synced twice.
+    const adoption = planAdoption(spec, observed);
+    actions.push(...adoption.actions);
+    refusals.push(...adoption.refusals);
+    const dataRefused = adoption.refusals.length > 0;
+    if (spec.dataDir && !observed.dataDirExists && !adoption.adopts && !dataRefused) {
+        actions.push({ type: 'create-data-dir', path: spec.dataDir, owner: spec.user });
+    }
+    // 4. Its configuration.
+    let configChanged = false;
+    const hasUnfilled = Boolean(spec.unresolved && spec.unresolved.length > 0);
+    if (hasUnfilled) {
+        refusals.push(`${spec.name}'s templates still have ${spec.unresolved.join(', ')} in them — ` +
+            'nothing resolved those, and writing the files as they stand would configure the service with a placeholder.');
+    }
+    else if (spec.configFile && spec.configContent !== undefined) {
+        const wanted = withMarker(spec.configContent);
+        if (observed.configContent === null) {
+            actions.push({ type: 'write-config', path: spec.configFile, content: wanted, owner: spec.user, mode: CONFIG_MODE });
+            configChanged = true;
+        }
+        else if (!observed.configContent.includes(OMNITRON_CONFIG_MARKER)) {
+            refusals.push(`${spec.configFile} was not written by omnitron, so it is left alone. ` +
+                `Add \`${OMNITRON_CONFIG_MARKER}\` to its first line to let this manage it.`);
+        }
+        else if (normalise(observed.configContent) !== normalise(wanted)) {
+            actions.push({ type: 'write-config', path: spec.configFile, content: wanted, owner: spec.user, mode: CONFIG_MODE });
+            configChanged = true;
+        }
+    }
+    // 5. The unit itself, when nothing on the host provides one.
+    let unitChanged = false;
+    if (spec.systemdUnit && spec.unitContent !== undefined && !hasUnfilled) {
+        const path = spec.unitFile ?? `/etc/systemd/system/${spec.systemdUnit}.service`;
+        const wanted = withMarker(spec.unitContent);
+        const current = observed.unitContent ?? null;
+        if (current === null) {
+            actions.push({ type: 'write-unit', path, content: wanted });
+            unitChanged = true;
+        }
+        else if (!current.includes(OMNITRON_CONFIG_MARKER)) {
+            // Same rule as a config file, and for a stronger reason: a unit
+            // somebody else wrote is how their service starts.
+            refusals.push(`${path} was not written by omnitron, so it is left alone. ` +
+                `Add \`${OMNITRON_CONFIG_MARKER}\` to it to let this manage it.`);
+        }
+        else if (normalise(current) !== normalise(wanted)) {
+            actions.push({ type: 'write-unit', path, content: wanted });
+            unitChanged = true;
+        }
+        if (unitChanged)
+            actions.push({ type: 'daemon-reload' });
+    }
+    // 6. Its state — not with a template unfilled. The comment above promises
+    //    a placeholder stops everything, and this still enabled and started a
+    //    unit systemd already knew: a service brought up on whatever config was
+    //    lying on the disk, or none, because its credential was missing. Nor
+    //    with its data refused: started, it would sync from nothing.
+    if (spec.systemdUnit && !hasUnfilled && !dataRefused) {
+        if (!observed.unitKnown && !unitChanged) {
+            refusals.push(`systemd does not know a unit called \`${spec.systemdUnit}\`, and this declaration provides no \`unitTemplate\` — nothing here can create it.`);
+        }
+        else {
+            if (!observed.unitEnabled)
+                actions.push({ type: 'enable-unit', unit: spec.systemdUnit });
+            if (!observed.unitActive) {
+                actions.push({ type: 'start-unit', unit: spec.systemdUnit });
+            }
+            else if (configChanged || unitChanged) {
+                // A running service holds the configuration it started with. Last,
+                // so the file is already in place when it re-reads it.
+                actions.push({
+                    type: 'restart-unit',
+                    unit: spec.systemdUnit,
+                    because: configChanged && unitChanged ? 'its unit and configuration changed'
+                        : unitChanged ? 'its unit changed' : 'its configuration changed',
+                });
+            }
+        }
+    }
+    return { actions, refusals };
+}
+/** True when the host already matches the declaration. */
+export function isSettled(plan) {
+    return plan.actions.length === 0 && plan.refusals.length === 0;
+}
+/** What the old daemon's configuration is renamed to when its directory is taken over. */
+export const SET_ASIDE_SUFFIX = '.before-omnitron';
+/**
+ * Taking over a chain the host already holds (`IBareMetalAdoption`).
+ *
+ * The unit that ran it is disabled first, so a reboot never starts it on a
+ * directory that has gone; the directory is renamed to `dataDir`; the old
+ * daemon's config file is set aside, because Bitcoin Core refuses to start on
+ * a data directory holding a `bitcoin.conf` that `-conf` makes it ignore
+ * (measured on 31.0).
+ *
+ * Refused, and the host left as it is, while that unit runs (a chain moved
+ * from under its daemon is a corrupt one), when `dataDir` already holds
+ * something (two chains, and which to keep is a person's call), across
+ * filesystems (the rename becomes a copy of the whole chain), and when
+ * `replaces` names a unit systemd does not know (the real one would stay
+ * enabled). With nothing at `from` and no `dataDir` either it is refused as
+ * well: the stack declared a chain to keep, and syncing one from nothing is
+ * another decision.
+ */
+function planAdoption(spec, observed) {
+    const adopt = spec.adopt;
+    const seen = observed.adoption;
+    const none = { actions: [], refusals: [], adopts: false };
+    if (!adopt || !spec.dataDir || !seen || adopt.from === spec.dataDir)
+        return none;
+    const refused = (why) => ({ actions: [], refusals: [why], adopts: false });
+    if (!seen.sourceHeld) {
+        // Taken over already — or never there.
+        return observed.dataDirExists
+            ? none
+            : refused(`there is no chain at ${adopt.from} to take over, and no ${spec.dataDir} — ` +
+                `syncing ${spec.name} from nothing is not what this stack declares; drop \`adopt\` to do that.`);
+    }
+    if (adopt.replaces && seen.replaced && !seen.replaced.known) {
+        return refused(`systemd knows no unit \`${adopt.replaces}\` — \`replaces\` names the unit that runs the chain at ${adopt.from}, ` +
+            'and the real one would be left enabled.');
+    }
+    if (seen.replaced?.active) {
+        return refused(`${adopt.replaces} is running the chain at ${adopt.from} — stop it first: ` +
+            'a chain moved from under its daemon is a corrupt one.');
+    }
+    if (seen.targetHeld) {
+        return refused(`${adopt.from} and ${spec.dataDir} both hold data — which to keep is not a deployment's decision.`);
+    }
+    if (!seen.sameFilesystem) {
+        return refused(`${adopt.from} is not on ${spec.dataDir}'s filesystem — taking it over would copy the whole chain, not rename it.`);
+    }
+    const actions = [];
+    if (adopt.replaces && seen.replaced?.enabled) {
+        actions.push({ type: 'disable-unit', unit: adopt.replaces, because: `it ran the chain at ${adopt.from}` });
+    }
+    const config = spec.configFile?.slice(spec.configFile.lastIndexOf('/') + 1);
+    actions.push({
+        type: 'adopt-data-dir',
+        from: adopt.from,
+        to: spec.dataDir,
+        owner: spec.user,
+        setAside: seen.configBeside && config ? { file: config, as: `${config}${SET_ASIDE_SUFFIX}` } : undefined,
+    });
+    return { actions, refusals: [], adopts: true };
+}
+function withMarker(content) {
+    return content.includes(OMNITRON_CONFIG_MARKER) ? content : `${OMNITRON_CONFIG_MARKER}\n${content}`;
+}
+/**
+ * Compared ignoring trailing whitespace and blank lines at the end.
+ *
+ * A file that differs only in how it ends is the same configuration, and
+ * rewriting it would restart the service for nothing — which for a chain
+ * daemon is minutes of resynchronisation.
+ */
+function normalise(content) {
+    return content.replace(/[ \t]+$/gm, '').replace(/\n+$/, '');
+}
+// =============================================================================
+// Rendering a declared config file
+// =============================================================================
+/**
+ * Fill a `configTemplate` with what the declaration resolved to.
+ *
+ * The same vocabulary the `env` templates use, because an operator writing
+ * both should not have to learn two:
+ *
+ *   ${port:rpc}      a named port
+ *   ${secret:name}   a resolved secret
+ *   ${dataDir}       the declared data directory
+ *   ${user}          the account it runs as
+ *   ${bindAddress}   where it should listen
+ *
+ * A placeholder with nothing behind it is left in the output verbatim rather
+ * than replaced with an empty string. `rpcpassword=` is a config file that
+ * starts a daemon with no password on a mainnet node; `rpcpassword=${secret:
+ * rpc_password}` is one that fails to start and says why.
+ */
+export function renderConfigTemplate(template, values) {
+    const unresolved = [];
+    const content = template
+        .replace(/\$\{port:(\w[\w-]*)\}/g, (match, name) => {
+        const port = values.ports?.[name];
+        if (port === undefined) {
+            unresolved.push(match);
+            return match;
+        }
+        return String(port);
+    })
+        .replace(/\$\{secret:(\w[\w-]*)\}/g, (match, name) => {
+        const secret = values.secrets?.[name];
+        if (secret === undefined || secret === '') {
+            unresolved.push(match);
+            return match;
+        }
+        return secret;
+    })
+        .replace(/\$\{(dataDir|user|bindAddress)\}/g, (match, key) => {
+        const value = values[key];
+        if (value === undefined || value === '') {
+            unresolved.push(match);
+            return match;
+        }
+        return value;
+    });
+    return { content, unresolved };
+}
+/**
+ * The bare-metal half of a stack's declared services.
+ *
+ * A requirement describes one service two ways — as a container and as a
+ * host service — and `networkMode` picks the variant of each. Which one is
+ * used is the operator's choice, expressed by which block they filled in:
+ * a requirement with a `bareMetal` block is a host service, and its
+ * container config, if any, is what the same thing looks like on a laptop.
+ */
+export function selectBareMetal(name, requirement, override) {
+    // Only a service this stack runs on the node. One it declares EXTERNAL
+    // names an address and credentials for something already running — a
+    // chain daemon whose data directory is measured in hundreds of gigabytes —
+    // and installing a second beside it is the opposite of what was asked. One
+    // it runs as a container is not a unit as well: a node given paysys's
+    // bitcoin, which declares both blocks, made the container AND planned the
+    // unit, because nothing chose (`bindService`).
+    const binding = bindService(requirement, override);
+    if (binding.provisioning !== 'bareMetal')
+        return null;
+    const base = requirement.bareMetal;
+    if (!base)
+        return null;
+    // base → the network's variant → the stack's override. The stack decides
+    // the network, because an application declares the one that is right on a
+    // laptop and a stack is the scope that knows when it is not.
+    const networkMode = override?.networkMode ?? requirement.networkMode;
+    const variant = networkMode ? base.variants?.[networkMode] : undefined;
+    const merged = { ...base, ...(variant ?? {}), ...(override?.bareMetal ?? {}) };
+    const spec = { name };
+    if (merged.installCommand)
+        spec.installCommand = merged.installCommand;
+    if (merged.systemdUnit)
+        spec.systemdUnit = merged.systemdUnit;
+    if (merged.configFile)
+        spec.configFile = merged.configFile;
+    if (merged.dataDir)
+        spec.dataDir = merged.dataDir;
+    if (merged.user)
+        spec.user = merged.user;
+    if (merged.validateCommand)
+        spec.validateCommand = merged.validateCommand;
+    const { healthCheck } = merged;
+    if (healthCheck)
+        spec.healthCheck = healthCheck;
+    // A chain to take over is the node's own history: the stack's word only.
+    const adopt = override?.bareMetal?.adopt;
+    if (adopt)
+        spec.adopt = { from: adopt.from, replaces: adopt.replaces };
+    // Ports and credentials as this stack runs the service: the declaration's
+    // only for the network the declaration names.
+    const values = {
+        ports: binding.ports,
+        secrets: secretValues(binding),
+        dataDir: merged.dataDir,
+        user: merged.user,
+        bindAddress: merged.bindAddress,
+    };
+    const unresolved = [];
+    if (merged.configTemplate) {
+        const rendered = renderConfigTemplate(merged.configTemplate, values);
+        spec.configContent = rendered.content;
+        unresolved.push(...rendered.unresolved);
+    }
+    const withUnit = merged;
+    if (withUnit.unitTemplate) {
+        const rendered = renderConfigTemplate(withUnit.unitTemplate, values);
+        spec.unitContent = rendered.content;
+        unresolved.push(...rendered.unresolved);
+    }
+    if (withUnit.unitFile)
+        spec.unitFile = withUnit.unitFile;
+    // A placeholder anywhere stops everything. A unit that names a data
+    // directory it could not resolve starts a daemon in the wrong place, and
+    // for a chain daemon the wrong place is a second copy of the chain.
+    if (unresolved.length > 0) {
+        spec.unresolved = [...new Set(unresolved)].map((placeholder) => {
+            // A credential the declaration has and the stack did not give: said as
+            // what to write, because "unfilled" alone reads as a bug here rather
+            // than as the laptop's password withheld from a server on purpose.
+            const secret = /^\$\{secret:([\w-]+)\}$/.exec(placeholder)?.[1];
+            if (!secret || binding.declaredNetwork)
+                return placeholder;
+            const declared = requirement.secrets?.[secret] !== undefined ? `; the declaration's is for ${requirement.networkMode}` : '';
+            return (`${placeholder} (the stack runs ${binding.networkMode} and gives no ${secret}${declared} — ` +
+                `give one in serviceOverrides.${name}.secrets)`);
+        });
+    }
+    return spec;
+}
+//# sourceMappingURL=bare-metal-plan.js.map

package/dist/infrastructure/bare-metal-plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bare-metal-plan.js","sourceRoot":"","sources":["../../src/infrastructure/bare-metal-plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AA2FjE;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AAE/D,4EAA4E;AAC5E,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC;AAElC,MAAM,UAAU,aAAa,CAAC,IAAmB,EAAE,QAA8B;IAC/E,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,0BAA0B;IAC1B,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QAClE,CAAC;aAAM,CAAC;YACN,sEAAsE;YACtE,qDAAqD;YACrD,QAAQ,CAAC,IAAI,CACX,GAAG,IAAI,CAAC,IAAI,kGAAkG,CAC/G,CAAC;QACJ,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,uEAAuE;IACvE,uEAAuE;IACvE,0EAA0E;IAC1E,kCAAkC;IAClC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC9C,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClC,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACjD,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAChF,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,wBAAwB;IACxB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3E,IAAI,WAAW,EAAE,CAAC;QAChB,QAAQ,CAAC,IAAI,CACX,GAAG,IAAI,CAAC,IAAI,2BAA2B,IAAI,CAAC,UAAW,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa;YAC7E,6GAA6G,CAChH,CAAC;IACJ,CAAC;SAAM,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC9C,IAAI,QAAQ,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YACpH,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;aAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;YACpE,QAAQ,CAAC,IAAI,CACX,GAAG,IAAI,CAAC,UAAU,qDAAqD;gBACrE,SAAS,sBAAsB,6CAA6C,CAC/E,CAAC;QACJ,CAAC;aAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YACpH,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,WAAW,EAAE,CAAC;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,uBAAuB,IAAI,CAAC,WAAW,UAAU,CAAC;QAChF,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC;QAE7C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5D,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;aAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;YACrD,gEAAgE;YAChE,mDAAmD;YACnD,QAAQ,CAAC,IAAI,CACX,GAAG,IAAI,qDAAqD;gBAC1D,SAAS,sBAAsB,iCAAiC,CACnE,CAAC;QACJ,CAAC;aAAM,IAAI,SAAS,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5D,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;QAED,IAAI,WAAW;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,0EAA0E;IAC1E,0EAA0E;IAC1E,4EAA4E;IAC5E,yEAAyE;IACzE,iEAAiE;IACjE,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;QACrD,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,WAAW,EAAE,CAAC;YACxC,QAAQ,CAAC,IAAI,CACX,yCAAyC,IAAI,CAAC,WAAW,qFAAqF,CAC/I,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ,CAAC,WAAW;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YAEzF,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YAC/D,CAAC;iBAAM,IAAI,aAAa,IAAI,WAAW,EAAE,CAAC;gBACxC,mEAAmE;gBACnE,uDAAuD;gBACvD,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,cAAc;oBACpB,IAAI,EAAE,IAAI,CAAC,WAAW;oBACtB,OAAO,EAAE,aAAa,IAAI,WAAW,CAAC,CAAC,CAAC,oCAAoC;wBAC1E,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,2BAA2B;iBACnE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,SAAS,CAAC,IAAmB;IAC3C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAEnD;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,YAAY,CACnB,IAAmB,EACnB,QAA8B;IAE9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAC/B,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC1D,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACjF,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAEnF,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACrB,uCAAuC;QACvC,OAAO,QAAQ,CAAC,aAAa;YAC3B,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,OAAO,CACL,wBAAwB,KAAK,CAAC,IAAI,yBAAyB,IAAI,CAAC,OAAO,KAAK;gBAC1E,WAAW,IAAI,CAAC,IAAI,2EAA2E,CAClG,CAAC;IACR,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC5D,OAAO,OAAO,CACZ,2BAA2B,KAAK,CAAC,QAAQ,2DAA2D,KAAK,CAAC,IAAI,IAAI;YAChH,yCAAyC,CAC5C,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QAC1B,OAAO,OAAO,CACZ,GAAG,KAAK,CAAC,QAAQ,4BAA4B,KAAK,CAAC,IAAI,oBAAoB;YACzE,uDAAuD,CAC1D,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,OAAO,OAAO,CAAC,GAAG,KAAK,CAAC,IAAI,QAAQ,IAAI,CAAC,OAAO,iEAAiE,CAAC,CAAC;IACrH,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QACzB,OAAO,OAAO,CACZ,GAAG,KAAK,CAAC,IAAI,cAAc,IAAI,CAAC,OAAO,2EAA2E,CACnH,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,uBAAuB,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7G,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5E,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,EAAE,EAAE,IAAI,CAAC,OAAO;QAChB,KAAK,EAAE,IAAI,CAAC,IAAI;QAChB,QAAQ,EAAE,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,GAAG,gBAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS;KACzG,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,sBAAsB,KAAK,OAAO,EAAE,CAAC;AACtG,CAAC;AAED;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,OAAe;IAChC,OAAO,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,gFAAgF;AAChF,mCAAmC;AACnC,gFAAgF;AAEhF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAgB,EAChB,MAMC;IAED,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,MAAM,OAAO,GAAG,QAAQ;SACrB,OAAO,CAAC,wBAAwB,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;QACzD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QACjE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC;SACD,OAAO,CAAC,0BAA0B,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;QAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QACpF,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;SACD,OAAO,CAAC,mCAAmC,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;QACnE,MAAM,KAAK,GAAI,MAA6C,CAAC,GAAG,CAAC,CAAC;QAClE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QAClF,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IAEL,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,WAMC,EACD,QAAuC;IAEvC,uEAAuE;IACvE,qEAAqE;IACrE,2EAA2E;IAC3E,2EAA2E;IAC3E,sEAAsE;IACtE,0EAA0E;IAC1E,+CAA+C;IAC/C,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACnD,IAAI,OAAO,CAAC,YAAY,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAEtD,MAAM,IAAI,GAAG,WAAW,CAAC,SAEZ,CAAC;IACd,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,yEAAyE;IACzE,0EAA0E;IAC1E,6DAA6D;IAC7D,MAAM,WAAW,GAAG,QAAQ,EAAE,WAAW,IAAI,WAAW,CAAC,WAAW,CAAC;IACrE,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,CAAC,EAG3E,CAAC;IAEF,MAAM,IAAI,GAAkB,EAAE,IAAI,EAAE,CAAC;IACrC,IAAI,MAAM,CAAC,cAAc;QAAE,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;IACvE,IAAI,MAAM,CAAC,WAAW;QAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IAC9D,IAAI,MAAM,CAAC,UAAU;QAAE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAC3D,IAAI,MAAM,CAAC,OAAO;QAAE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAClD,IAAI,MAAM,CAAC,IAAI;QAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzC,IAAI,MAAM,CAAC,eAAe;QAAE,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;IAC1E,MAAM,EAAE,WAAW,EAAE,GAAG,MAA+C,CAAC;IACxE,IAAI,WAAW;QAAE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IAChD,yEAAyE;IACzE,MAAM,KAAK,GAAG,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC;IACzC,IAAI,KAAK;QAAE,IAAI,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;IAEvE,0EAA0E;IAC1E,8CAA8C;IAC9C,MAAM,MAAM,GAAG;QACb,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC;QAC9B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC;IACF,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QACrE,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC;QACtC,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,QAAQ,GAAG,MAAsE,CAAC;IACxF,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACrE,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC;QACpC,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ;QAAE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAEzD,oEAAoE;IACpE,yEAAyE;IACzE,oEAAoE;IACpE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE;YAC7D,uEAAuE;YACvE,qEAAqE;YACrE,mEAAmE;YACnE,MAAM,MAAM,GAAG,yBAAyB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAChE,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,eAAe;gBAAE,OAAO,WAAW,CAAC;YAC3D,MAAM,QAAQ,GACZ,WAAW,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,8BAA8B,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7G,OAAO,CACL,GAAG,WAAW,oBAAoB,OAAO,CAAC,WAAW,iBAAiB,MAAM,GAAG,QAAQ,KAAK;gBAC5F,gCAAgC,IAAI,WAAW,CAChD,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/infrastructure/bare-metal-runner.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Carrying out a bare-metal plan on the host it was planned for.
+ *
+ * Runs where the service runs — inside the node's own daemon, beside the
+ * container reconciler — so there is no second machine's view of the state
+ * and no shell quoting between the decision and the act. Every command is
+ * an argv array through `execFile`: none of these values is ever spliced
+ * into a shell string, because several of them are credentials and one of
+ * them is a whole config file.
+ *
+ * The observation half is here too, because "is it installed" and "is the
+ * unit active" are questions only the host can answer, and answering them
+ * wrongly is how a reconciler restarts a healthy service.
+ */
+import type { ILogger } from '@omnitron-dev/titan/module/logger';
+import type { BareMetalAction, BareMetalObservation, BareMetalSpec } from './bare-metal-plan.js';
+export interface CommandResult {
+    ok: boolean;
+    stdout: string;
+    stderr: string;
+}
+/** Everything this needs from a host, so a test can be a host. */
+export interface HostRunner {
+    /** Run argv. Never a shell string. */
+    run(argv: readonly string[], options?: {
+        timeoutMs?: number;
+    }): Promise<CommandResult>;
+    /** Run a command line through a shell — only for operator-declared commands. */
+    shell(command: string, options?: {
+        timeoutMs?: number;
+    }): Promise<CommandResult>;
+    readFile(path: string): Promise<string | null>;
+    writeFile(path: string, content: string, options: {
+        mode: string;
+        owner?: string | undefined;
+    }): Promise<void>;
+    exists(path: string): Promise<boolean>;
+    /**
+     * rename(2): on one filesystem, and never a copy — across two it fails. A
+     * directory replaces an empty one at `to`, and never lands inside it.
+     */
+    rename(from: string, to: string): Promise<void>;
+}
+export declare function observeBareMetal(spec: BareMetalSpec, host: HostRunner): Promise<BareMetalObservation>;
+export declare function applyBareMetal(actions: readonly BareMetalAction[], host: HostRunner, logger: ILogger, service: string): Promise<{
+    applied: BareMetalAction[];
+    failed: {
+        action: BareMetalAction;
+        error: string;
+    } | null;
+}>;
+export declare function describe(action: BareMetalAction): string;
+/**
+ * A `HostRunner` for the machine this process is on.
+ *
+ * `provisionStack` executes on the node, so "the host" is local: no SSH, no
+ * quoting, and no second machine's idea of what is installed.
+ *
+ * Writes are atomic and never pass through a shell. A config file is created
+ * with its final permissions BEFORE anything is written into it — created
+ * 0644 and chmod-ed afterwards leaves a window in which credentials are
+ * world-readable, and a window is all a `while :; do cat` loop needs.
+ */
+export declare function localHost(): HostRunner;
+//# sourceMappingURL=bare-metal-runner.d.ts.map

package/dist/infrastructure/bare-metal-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bare-metal-runner.d.ts","sourceRoot":"","sources":["../../src/infrastructure/bare-metal-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,KAAK,EAAuB,eAAe,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAEtH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,kEAAkE;AAClE,MAAM,WAAW,UAAU;IACzB,sCAAsC;IACtC,GAAG,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACvF,gFAAgF;IAChF,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACjF,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/C,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/G,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjD;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA4B3G;AAsDD,wBAAsB,cAAc,CAClC,OAAO,EAAE,SAAS,eAAe,EAAE,EACnC,IAAI,EAAE,UAAU,EAChB,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;IAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IAAC,MAAM,EAAE;QAAE,MAAM,EAAE,eAAe,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;CAAE,CAAC,CAsBpG;AAiHD,wBAAgB,QAAQ,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAuBxD;AAwBD;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,IAAI,UAAU,CAkGtC"}