@omnitron-dev/omnitron 0.2.0 → 0.3.1

package/dist/services/node-upgrade.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-upgrade.service.d.ts","sourceRoot":"","sources":["../../src/services/node-upgrade.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAQH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mCAAmC,CAAC;AAEjE,MAAM,MAAM,YAAY;AACtB;;;;;;;;GAQG;AACD,QAAQ,GACR,UAAU,GACV,cAAc,GACd,YAAY,GACZ,MAAM,GACN,QAAQ,GACR,SAAS,CAAC;AAEd,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,mEAAmE;IACnE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,iEAAiE;IACjE,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,sDAAsD;AACtD,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IAC5E;;;;;;;;;;;;OAYG;IACH,cAAc,CAAC,IAAI,SAAS,OAAO,mBAAmB,EAAE,gBAAgB,EAAE,CAAC;CAC5E;AAED,0EAA0E;AAC1E,MAAM,WAAW,eAAe;IAC9B,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrF,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzG;;;;OAIG;IACH,kBAAkB,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9G;;;;;;OAMG;IACH,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACpF;AAYD,sFAAsF;AACtF,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,qBAAa,kBAAkB;IAS3B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,qEAAqE;IACrE,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;IACvB;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;IAnB/B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA0C;IACzE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgB;IACtC,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAE7C,YACmB,MAAM,EAAE,OAAO,EACf,KAAK,EAAE,iBAAiB;IACzC,qEAAqE;IACpD,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,EAC5C,QAAQ,EAAE,MAAM,eAAe,EAC/B,KAAK,CAAC,EAAE;QAAE,MAAM,CAAC,KAAK,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAC;YAAC,UAAU,CAAC,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,GAAG,SAAS;IACvK;;;;OAIG;IACc,WAAW,CAAC,GAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,CAAC,aAAA,EACvF;IAEJ,+EAA+E;IAC/E,YAAY,IAAI,mBAAmB,EAAE,CAEpC;IAED,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAEtD;IAED;;;;;;;;;;;;OAYG;IACG,IAAI,CACR,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,EACxB,OAAO,GAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAO,GACzC,OAAO,CAAC,OAAO,mBAAmB,EAAE,WAAW,GAAG;QAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC,CA4DnF;IAED;;;;;;OAMG;IACG,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAI1E;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CACL,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,WAAW,SAAI,GACd;QAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,KAAK,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CA6E7E;IAED;;;;;OAKG;IACH,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAe5D;YAEa,UAAU;IA2BxB,6GAA6G;IAC7G,OAAO,CAAC,QAAQ;YAUF,UAAU;IA4CxB;;;;;;;OAOG;YACW,YAAY;IA2C1B,OAAO,CAAC,OAAO;IAKf,wGAAwG;IACxG,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,UAAU;IAclB;;;;;;OAMG;IACH,OAAO,CAAC,aAAa;IAgBrB,OAAO,CAAC,IAAI;CA0Bb"}

package/dist/services/node-upgrade.service.js

@@ -0,0 +1,468 @@
+/**
+ * Upgrading a node's omnitron from the console.
+ *
+ * `fleet upgrade` does this from a terminal: build a bundle from the working
+ * tree, ship it, install it beside the running copy, switch and restart. The
+ * console could not, because the two RPCs that do the last part —
+ * `installBundleOnNode`, `activateBundleOnNode` — take an archive path on
+ * the DAEMON's filesystem, and only the CLI knew how to produce one.
+ *
+ * So this is the middle: the daemon builds its own bundle, from the
+ * workspace it is running out of, and then calls the same two methods the
+ * CLI does. A node ends up with the same artifact whichever surface asked
+ * for it.
+ *
+ * A build takes minutes, so an upgrade is started and polled rather than
+ * awaited: `start` returns as soon as the work is under way and `progress`
+ * says where it is. That is the same shape as a stack deployment, for the
+ * same reason, and the console already knows how to render it.
+ *
+ * A daemon that is not running from a workspace — one installed from a
+ * bundle, which is every node — refuses with the reason rather than failing
+ * somewhere inside a build. It has nothing to build FROM.
+ */
+import path from 'node:path';
+import fs from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { planUpgrade } from './node-upgrade.js';
+/**
+ * The target version of a plan that did not build one.
+ *
+ * A sentinel rather than `''`, because `decideFor` compares it against each
+ * node's current version and an empty string would silently match a node
+ * whose version is unknown — turning «we did not compare» into «already on
+ * it», which is the exact reading this plan exists to avoid.
+ */
+const UNKNOWN_TARGET = '\u0000unbuilt';
+export class NodeUpgradeService {
+    logger;
+    nodes;
+    toTarget;
+    deployer;
+    audit;
+    buildBundle;
+    progressByNode = new Map();
+    inFlight = new Set();
+    /** Nodes accepted by a rollout and still waiting for a slot, in order. */
+    queue = [];
+    /** Nodes whose install or activate is running now — not interruptible. */
+    running = new Set();
+    constructor(logger, nodes, 
+    /** Resolves a node id to the deploy target, credentials included. */
+    toTarget, deployer, audit, 
+    /**
+     * How a bundle is built. The default runs `bundle-build-worker.ts` in a
+     * child process; a court passes its own so the queue can be judged
+     * without compiling omnitron.
+     */
+    buildBundle) {
+        this.logger = logger;
+        this.nodes = nodes;
+        this.toTarget = toTarget;
+        this.deployer = deployer;
+        this.audit = audit;
+        this.buildBundle = buildBundle;
+    }
+    /** Everything this daemon has been asked to upgrade, newest state per node. */
+    listProgress() {
+        return [...this.progressByNode.values()].sort((a, b) => b.at.localeCompare(a.at));
+    }
+    progressFor(nodeId) {
+        return this.progressByNode.get(nodeId) ?? null;
+    }
+    /**
+     * What a rollout would do to each node, without doing any of it.
+     *
+     * The version comes from a BUILD: a plan that cannot name the target
+     * cannot say «already on it», and «already on it» is half the value —
+     * without it an operator sees twelve rows saying `upgrade` where two need
+     * upgrading. So this is expensive on purpose, and the console is told to
+     * expect that rather than given a cheap answer that means less.
+     *
+     * The decision itself is `planUpgrade` in `node-upgrade.ts`, unchanged and
+     * still pure: this method's whole job is to gather what that function
+     * needs and to throw the bundle away afterwards.
+     */
+    async plan(only, options = {}) {
+        // Said as a refusal, not as an empty plan. A planner wired without a
+        // candidate source that answered `rows: []` would be read as «nothing
+        // to upgrade», which is the one thing it cannot know.
+        if (!this.nodes.listCandidates) {
+            return {
+                targetVersion: '',
+                steps: [],
+                toUpgrade: [],
+                refusal: 'This daemon cannot list its fleet, so it cannot plan a rollout',
+                compared: false,
+            };
+        }
+        const workspace = this.workspaceRoot();
+        if (!workspace) {
+            return {
+                targetVersion: '',
+                steps: [],
+                toUpgrade: [],
+                refusal: 'This daemon does not run from an omnitron workspace, so it has no source to build a bundle from',
+                compared: false,
+            };
+        }
+        const candidates = this.nodes.listCandidates();
+        // WITHOUT A BUILD by default, and this is the important default.
+        //
+        // Naming the target version means compiling the workspace, and
+        // `bundle-builder` does that with 42 synchronous fs calls including a
+        // recursive `cpSync` of whole packages. On the daemon's own thread that
+        // is not slow, it is a STOP: measured from the console, the master
+        // answered nothing at all for ~150 s — health checks, node polls and
+        // every other RPC stood still with it — and the request died at nginx's
+        // 120 s `proxy_read_timeout` long before that, so no client deadline can
+        // reach it either.
+        //
+        // The cheap plan still answers most of the question: which nodes are
+        // local, which refused SSH, which would be attempted. What it cannot say
+        // is «already on it», and it says THAT rather than pretending the
+        // comparison happened.
+        if (!options.build) {
+            const plan = planUpgrade(candidates, UNKNOWN_TARGET, only ? { only } : {});
+            return { ...plan, targetVersion: UNKNOWN_TARGET, compared: false };
+        }
+        // Built in a child process, like a rollout's bundle: the in-process
+        // build this used to run is what stopped the daemon for ~150 s.
+        const bundle = await (this.buildBundle ?? ((w, l) => this.buildInChild(w, l)))(workspace, `plan-${Date.now()}`);
+        try {
+            return { ...planUpgrade(candidates, bundle.version, only ? { only } : {}), compared: true };
+        }
+        finally {
+            // A plan ships nothing, so the bundle it built has no further use.
+            // Left behind, one per press of the Plan button, it is tens of
+            // megabytes of staging directory each time.
+            await bundle.cleanup().catch(() => undefined);
+        }
+    }
+    /**
+     * Begin an upgrade of one node — a rollout of one.
+     *
+     * Kept for the per-node button and the RPC that has always been there; it
+     * goes through the same queue as a fleet rollout, so there is one path for
+     * «build, lease, install, activate», not two that drift.
+     */
+    async start(nodeId) {
+        const outcome = this.rollout([nodeId], 1);
+        if (outcome.accepted.length === 1)
+            return { started: true };
+        return { started: false, reason: outcome.refused[0]?.because ?? 'Not accepted' };
+    }
+    /**
+     * Queue a rollout and return at once: what was taken, what was not and why.
+     *
+     * ONE bundle for the whole rollout, built in a child process
+     * (`bundle-build-worker.ts`) so the daemon keeps answering while it
+     * compiles; every accepted node then receives that same version. Building
+     * per node, as the first version of this did, made «upgrade the fleet»
+     * mean N builds of possibly different trees. Two rollouts at once each
+     * install their own bundle on their own nodes — they share the queue's
+     * numbering, not its nodes.
+     *
+     * `concurrency` nodes at a time, default 1: an upgrade restarts the daemon
+     * it lands on, and a fleet that restarts together has no witness left.
+     * The rest wait in `queued` with a position that is updated as the queue
+     * moves.
+     *
+     * The decision of what to touch is `planUpgrade`, the same pure function
+     * the plan shows — so the rollout refuses exactly what the plan said it
+     * would, in the same words: the local daemon, a node SSH did not reach,
+     * the second registry name for one machine.
+     */
+    rollout(nodeIds, concurrency = 1) {
+        const refused = [];
+        const accepted = [];
+        const workspace = this.workspaceRoot();
+        if (!workspace) {
+            const because = 'This daemon does not run from an omnitron workspace, so it has no source to build a bundle from';
+            for (const id of nodeIds) {
+                this.emit(id, 'refused', 0, because, null);
+                refused.push({ nodeId: id, because });
+            }
+            return { accepted, refused };
+        }
+        // Without a candidate list every node would read «No such node» — a
+        // wrong sentence about nodes that exist. Refused in the plan's words.
+        if (!this.nodes.listCandidates) {
+            const because = 'This daemon cannot list its fleet, so it cannot plan a rollout';
+            for (const id of nodeIds)
+                refused.push({ nodeId: id, because });
+            return { accepted, refused };
+        }
+        // The same decision the plan shows, without a build: which to touch.
+        const candidates = this.nodes.listCandidates();
+        const plan = planUpgrade(candidates, UNKNOWN_TARGET, { only: nodeIds });
+        if (plan.refusal) {
+            for (const id of nodeIds)
+                refused.push({ nodeId: id, because: plan.refusal });
+            return { accepted, refused };
+        }
+        const decided = new Map(plan.steps.map((st) => [st.node.nodeId, st]));
+        for (const id of nodeIds) {
+            const node = this.nodes.getNode(id);
+            if (!node) {
+                refused.push({ nodeId: id, because: 'No such node' });
+                continue;
+            }
+            if (this.inFlight.has(id)) {
+                refused.push({ nodeId: id, because: 'An upgrade of this node is already queued or running' });
+                continue;
+            }
+            // Planned against the unbuilt target, every node the plan would touch
+            // reads `upgrade` — nothing has been compared, because the bundle is
+            // built below. What the plan skips or refuses stays refused, in its
+            // own words.
+            const decision = decided.get(id)?.decision;
+            if (decision?.action !== 'upgrade') {
+                refused.push({
+                    nodeId: id,
+                    because: decision?.because ?? (node.isLocal ? 'This is the local daemon — it is upgraded by rebuilding it' : 'The plan did not select this node'),
+                });
+                continue;
+            }
+            accepted.push(id);
+        }
+        if (accepted.length === 0)
+            return { accepted, refused };
+        for (const id of accepted) {
+            this.inFlight.add(id);
+            this.queue.push(id);
+        }
+        this.renumberQueue();
+        const width = Math.max(1, Math.min(8, Math.floor(concurrency) || 1));
+        void this.runRollout(accepted, width, workspace).catch((err) => {
+            // Every node still waiting is told why it will not run — a rollout
+            // that failed to build leaves no node silently «queued» for ever.
+            for (const id of accepted) {
+                if (!this.inFlight.has(id))
+                    continue;
+                this.dequeue(id);
+                this.emit(id, 'failed', 0, `The rollout could not build its bundle: ${err.message.slice(0, 240)}`, null);
+                this.inFlight.delete(id);
+            }
+            this.logger.error({ error: err.message }, 'Fleet rollout failed before any node was touched');
+        });
+        return { accepted, refused };
+    }
+    /**
+     * Take a node out of a rollout — only if it has not started.
+     *
+     * A node already installing is not interrupted: stopping between unpacking
+     * and activating leaves it worse than either end, and the answer says so.
+     */
+    cancel(nodeId) {
+        if (this.running.has(nodeId)) {
+            return {
+                stopped: false,
+                because: 'This node is installing now — an upgrade is not interrupted between unpacking and activating',
+            };
+        }
+        if (!this.queue.includes(nodeId)) {
+            return { stopped: false, because: 'This node is not waiting in a rollout' };
+        }
+        this.dequeue(nodeId);
+        this.inFlight.delete(nodeId);
+        this.emit(nodeId, 'refused', 0, 'Dropped from the rollout before it started', null);
+        this.renumberQueue();
+        return { stopped: true, because: 'Dropped from the rollout before it started' };
+    }
+    async runRollout(nodeIds, width, workspace) {
+        const label = `${process.pid}-rollout-${Date.now()}`;
+        for (const id of nodeIds) {
+            if (this.queue.includes(id))
+                this.emitQueued(id, 'Building one bundle for the whole rollout…');
+        }
+        const bundle = await (this.buildBundle ?? ((w, l) => this.buildInChild(w, l)))(workspace, label);
+        this.logger.info({ version: bundle.version, nodes: nodeIds.length, concurrency: width }, 'Fleet rollout: bundle built');
+        // This rollout's own list. The queue is shared — it is what positions
+        // are counted in — and a worker that took the queue's head would take a
+        // node another rollout accepted, installing THIS bundle on it while the
+        // other rollout's bundle, built for it, went unused.
+        const mine = [...nodeIds];
+        try {
+            const workers = Array.from({ length: width }, async () => {
+                for (;;) {
+                    const next = this.takeNext(mine);
+                    if (!next)
+                        return;
+                    await this.upgradeOne(next, bundle.version, bundle.archive);
+                }
+            });
+            await Promise.all(workers);
+        }
+        finally {
+            await bundle.cleanup();
+        }
+    }
+    /** The next node of one rollout still waiting; one dropped by `cancel` has left the queue and is skipped. */
+    takeNext(mine) {
+        for (let id = mine.shift(); id !== undefined; id = mine.shift()) {
+            if (!this.queue.includes(id))
+                continue;
+            this.dequeue(id);
+            this.renumberQueue();
+            return id;
+        }
+        return undefined;
+    }
+    async upgradeOne(nodeId, version, archive) {
+        const node = this.nodes.getNode(nodeId);
+        const nodeName = node?.name ?? nodeId;
+        this.running.add(nodeId);
+        try {
+            const target = await this.toTarget(nodeId);
+            const deployer = this.deployer();
+            const work = async () => {
+                this.emit(nodeId, 'transferring', 40, `Installing ${version}`, version);
+                const installed = await deployer.installBundle(target, archive, version);
+                if (!installed) {
+                    this.emit(nodeId, 'failed', 40, 'The install failed; this node is unchanged', version);
+                    return;
+                }
+                this.emit(nodeId, 'activating', 80, 'Switching the node into the new version', version);
+                // Held where the deployer can: activation stops every app on the node.
+                const activated = deployer.activateBundleHeld
+                    ? await deployer.activateBundleHeld(target, version, '/opt/omnitron', 3)
+                    : await deployer.activateBundle(target, version, '/opt/omnitron', 3);
+                if (!activated) {
+                    this.emit(nodeId, 'failed', 80, 'The new version did not come up; the previous one is still installed on this node', version);
+                    return;
+                }
+                this.emit(nodeId, 'done', 100, `Running ${version}`, version);
+                this.logger.info({ node: nodeName, nodeId, version }, 'Node upgraded');
+            };
+            if (deployer.underLease)
+                await deployer.underLease(target, `upgrade to ${version}`, work);
+            else
+                await work();
+        }
+        catch (err) {
+            const message = err.message.slice(0, 300);
+            this.emit(nodeId, 'failed', 0, message, version);
+            this.logger.error({ node: nodeName, nodeId, error: message }, 'Node upgrade failed');
+        }
+        finally {
+            this.running.delete(nodeId);
+            this.inFlight.delete(nodeId);
+        }
+    }
+    /**
+     * Build the bundle in a child process and wait for its one line of JSON.
+     *
+     * The child is this module's sibling, run with the daemon's own node and
+     * loader flags, so it builds exactly what an in-process build would have.
+     * Fifteen minutes is past any build measured; a build that takes longer is
+     * a build that hung.
+     */
+    async buildInChild(workspace, label) {
+        const { execFile } = await import('node:child_process');
+        const { ownBundleStaging } = await import('./bundle-builder.js');
+        const { failureReason } = await import('./bundle-worker-protocol.js');
+        const worker = fileURLToPath(new URL('./bundle-build-worker.js', import.meta.url));
+        const staging = ownBundleStaging(label);
+        const cleanup = async () => {
+            await fs.promises.rm(staging, { recursive: true, force: true }).catch(() => undefined);
+            await fs.promises.rm(`${staging}.tar.gz`, { force: true }).catch(() => undefined);
+        };
+        const stdout = await new Promise((resolve, reject) => {
+            execFile(process.execPath, [...process.execArgv, worker, workspace, label], { maxBuffer: 16 * 1024 * 1024, timeout: 15 * 60_000 }, (err, out, errOut) => {
+                if (err) {
+                    // The child's own sentence when it gave one; the tail of its
+                    // output only when it died before it could (a crash, a kill).
+                    const reason = failureReason(String(errOut)) ?? String(errOut).trim().split('\n').slice(-4).join(' | ');
+                    reject(new Error(`the bundle build failed: ${reason || err.message}`));
+                }
+                else
+                    resolve(String(out));
+            });
+        }).catch(async (err) => {
+            await cleanup();
+            throw err;
+        });
+        const line = stdout.trim().split('\n').pop() ?? '';
+        let parsed;
+        try {
+            parsed = JSON.parse(line);
+        }
+        catch {
+            await cleanup();
+            throw new Error('the bundle build printed no result');
+        }
+        if (!parsed.version || !parsed.archive) {
+            await cleanup();
+            throw new Error('the bundle build named no version or archive');
+        }
+        return { version: parsed.version, archive: parsed.archive, cleanup };
+    }
+    dequeue(nodeId) {
+        const i = this.queue.indexOf(nodeId);
+        if (i >= 0)
+            this.queue.splice(i, 1);
+    }
+    /** Every waiting node told its current place — a position that went stale would say something false. */
+    renumberQueue() {
+        this.queue.forEach((id) => this.emitQueued(id));
+    }
+    emitQueued(nodeId, message) {
+        const position = this.queue.indexOf(nodeId) + 1;
+        const entry = {
+            nodeId,
+            phase: 'queued',
+            percent: 0,
+            message: message ?? (position === 1 ? 'Next in the rollout' : `Waiting — ${position - 1} ahead`),
+            version: null,
+            at: new Date().toISOString(),
+            ...(position > 0 ? { position } : {}),
+        };
+        this.progressByNode.set(nodeId, entry);
+    }
+    /**
+     * The workspace this daemon runs out of, or null when it does not.
+     *
+     * From this module's own location rather than `process.cwd()`: a daemon
+     * started by launchd or systemd has a working directory that says nothing
+     * about where its code is.
+     */
+    workspaceRoot() {
+        try {
+            const here = path.dirname(fileURLToPath(import.meta.url));
+            // Synchronous on purpose: this decides whether to start at all.
+            let dir = here;
+            for (;;) {
+                if (fs.existsSync(path.join(dir, 'pnpm-workspace.yaml')))
+                    return dir;
+                const parent = path.dirname(dir);
+                if (parent === dir)
+                    return null;
+                dir = parent;
+            }
+        }
+        catch {
+            return null;
+        }
+    }
+    emit(nodeId, phase, percent, message, version) {
+        const entry = {
+            nodeId,
+            phase,
+            percent,
+            message,
+            version,
+            at: new Date().toISOString(),
+        };
+        this.progressByNode.set(nodeId, entry);
+        if (phase === 'done' || phase === 'failed') {
+            void this.audit?.record({
+                action: phase === 'done' ? 'node.upgrade' : 'node.upgrade.failed',
+                resourceType: 'node',
+                resourceId: nodeId,
+                details: { version: version ?? 'unknown', message },
+            });
+        }
+    }
+}
+//# sourceMappingURL=node-upgrade.service.js.map

package/dist/services/node-upgrade.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-upgrade.service.js","sourceRoot":"","sources":["../../src/services/node-upgrade.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AA+EhD;;;;;;;GAOG;AACH,MAAM,cAAc,GAAG,eAAe,CAAC;AASvC,MAAM,OAAO,kBAAkB;IASV,MAAM;IACN,KAAK;IAEL,QAAQ;IACR,QAAQ;IACR,KAAK;IAML,WAAW;IAnBb,cAAc,GAAG,IAAI,GAAG,EAA+B,CAAC;IACxD,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9C,0EAA0E;IACzD,KAAK,GAAa,EAAE,CAAC;IACtC,0EAA0E;IACzD,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAE7C,YACmB,MAAe,EACf,KAAwB;IACzC,qEAAqE;IACpD,QAA4C,EAC5C,QAA+B,EAC/B,KAAsJ;IACvK;;;;OAIG;IACc,WAAwE;sBAXxE,MAAM;qBACN,KAAK;wBAEL,QAAQ;wBACR,QAAQ;qBACR,KAAK;2BAML,WAAW;IAC3B,CAAC;IAEJ,+EAA+E;IAC/E,YAAY;QACV,OAAO,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpF,CAAC;IAED,WAAW,CAAC,MAAc;QACxB,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;IACjD,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,IAAI,CACR,IAAwB,EACxB,OAAO,GAAiC,EAAE;QAE1C,qEAAqE;QACrE,sEAAsE;QACtE,sDAAsD;QACtD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YAC/B,OAAO;gBACL,aAAa,EAAE,EAAE;gBACjB,KAAK,EAAE,EAAE;gBACT,SAAS,EAAE,EAAE;gBACb,OAAO,EAAE,gEAAgE;gBACzE,QAAQ,EAAE,KAAK;aAChB,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,aAAa,EAAE,EAAE;gBACjB,KAAK,EAAE,EAAE;gBACT,SAAS,EAAE,EAAE;gBACb,OAAO,EACL,iGAAiG;gBACnG,QAAQ,EAAE,KAAK;aAChB,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QAE/C,iEAAiE;QACjE,EAAE;QACF,+DAA+D;QAC/D,sEAAsE;QACtE,wEAAwE;QACxE,mEAAmE;QACnE,qEAAqE;QACrE,wEAAwE;QACxE,yEAAyE;QACzE,mBAAmB;QACnB,EAAE;QACF,qEAAqE;QACrE,yEAAyE;QACzE,kEAAkE;QAClE,uBAAuB;QACvB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3E,OAAO,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACrE,CAAC;QAED,oEAAoE;QACpE,gEAAgE;QAChE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAEhH,IAAI,CAAC;YACH,OAAO,EAAE,GAAG,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC9F,CAAC;gBAAS,CAAC;YACT,mEAAmE;YACnE,+DAA+D;YAC/D,4CAA4C;YAC5C,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,KAAK,CAAC,MAAc;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC5D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,cAAc,EAAE,CAAC;IACnF,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CACL,OAA0B,EAC1B,WAAW,GAAG,CAAC;QAEf,MAAM,OAAO,GAA+C,EAAE,CAAC;QAC/D,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,iGAAiG,CAAC;YAClH,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YACxC,CAAC;YACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC/B,CAAC;QAED,oEAAoE;QACpE,sEAAsE;QACtE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,gEAAgE,CAAC;YACjF,KAAK,MAAM,EAAE,IAAI,OAAO;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAChE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC/B,CAAC;QAED,qEAAqE;QACrE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,KAAK,MAAM,EAAE,IAAI,OAAO;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9E,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC/B,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAEtE,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;gBACtD,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,sDAAsD,EAAE,CAAC,CAAC;gBAC9F,SAAS;YACX,CAAC;YACD,sEAAsE;YACtE,qEAAqE;YACrE,oEAAoE;YACpE,aAAa;YACb,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC;YAC3C,IAAI,QAAQ,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;gBACnC,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM,EAAE,EAAE;oBACV,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,4DAA4D,CAAC,CAAC,CAAC,mCAAmC,CAAC;iBAClJ,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpB,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAExD,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC1B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACtB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,aAAa,EAAE,CAAC;QAErB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrE,KAAK,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;YACpE,mEAAmE;YACnE,kEAAkE;YAClE,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;gBAC1B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,SAAS;gBACrC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACjB,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,2CAA2C,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;gBACzG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC3B,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,kDAAkD,CAAC,CAAC;QAChG,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,MAAc;QACnB,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,8FAA8F;aACxG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,4CAA4C,EAAE,IAAI,CAAC,CAAC;QACpF,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC;IAClF,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,OAA0B,EAAE,KAAa,EAAE,SAAiB;QACnF,MAAM,KAAK,GAAG,GAAG,OAAO,CAAC,GAAG,YAAY,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACrD,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,4CAA4C,CAAC,CAAC;QACjG,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACjG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,6BAA6B,CAAC,CAAC;QAExH,sEAAsE;QACtE,wEAAwE;QACxE,wEAAwE;QACxE,qDAAqD;QACrD,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,KAAK,IAAI,EAAE;gBACvD,SAAS,CAAC;oBACR,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;oBACjC,IAAI,CAAC,IAAI;wBAAE,OAAO;oBAClB,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC,CAAC,CAAC;YACH,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAED,6GAA6G;IACrG,QAAQ,CAAC,IAAc;QAC7B,KAAK,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,SAAS,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YAChE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAE,SAAS;YACvC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACjB,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,OAAe,EAAE,OAAe;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,EAAE,IAAI,IAAI,MAAM,CAAC;QACtC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;gBACrC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE,cAAc,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;gBACxE,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;gBACzE,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,4CAA4C,EAAE,OAAO,CAAC,CAAC;oBACvF,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,yCAAyC,EAAE,OAAO,CAAC,CAAC;gBACxF,uEAAuE;gBACvE,MAAM,SAAS,GAAG,QAAQ,CAAC,kBAAkB;oBAC3C,CAAC,CAAC,MAAM,QAAQ,CAAC,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;oBACxE,CAAC,CAAC,MAAM,QAAQ,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;gBACvE,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,IAAI,CAAC,IAAI,CACP,MAAM,EACN,QAAQ,EACR,EAAE,EACF,mFAAmF,EACnF,OAAO,CACR,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;gBAC9D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,eAAe,CAAC,CAAC;YACzE,CAAC,CAAC;YACF,IAAI,QAAQ,CAAC,UAAU;gBAAE,MAAM,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,cAAc,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;;gBACrF,MAAM,IAAI,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAI,GAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACrD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,qBAAqB,CAAC,CAAC;QACvF,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,KAAa;QACzD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACxD,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACjE,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,0BAA0B,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACnF,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;YACzB,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACvF,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,OAAO,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpF,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3D,QAAQ,CACN,OAAO,CAAC,QAAQ,EAChB,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,EAC/C,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,EACrD,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;gBACnB,IAAI,GAAG,EAAE,CAAC;oBACR,6DAA6D;oBAC7D,8DAA8D;oBAC9D,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACxG,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBACzE,CAAC;;oBAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9B,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAU,EAAE,EAAE;YAC5B,MAAM,OAAO,EAAE,CAAC;YAChB,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QACnD,IAAI,MAA8C,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA2C,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,OAAO,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACvC,MAAM,OAAO,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;IACvE,CAAC;IAEO,OAAO,CAAC,MAAc;QAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtC,CAAC;IAED,wGAAwG;IAChG,aAAa;QACnB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IAClD,CAAC;IAEO,UAAU,CAAC,MAAc,EAAE,OAAgB;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChD,MAAM,KAAK,GAAwB;YACjC,MAAM;YACN,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,OAAO,IAAI,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,aAAa,QAAQ,GAAG,CAAC,QAAQ,CAAC;YAChG,OAAO,EAAE,IAAI;YACb,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;OAMG;IACK,aAAa;QACnB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1D,gEAAgE;YAChE,IAAI,GAAG,GAAG,IAAI,CAAC;YACf,SAAS,CAAC;gBACR,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;oBAAE,OAAO,GAAG,CAAC;gBACrE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACjC,IAAI,MAAM,KAAK,GAAG;oBAAE,OAAO,IAAI,CAAC;gBAChC,GAAG,GAAG,MAAM,CAAC;YACf,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,IAAI,CACV,MAAc,EACd,KAAmB,EACnB,OAAe,EACf,OAAe,EACf,OAAsB;QAEtB,MAAM,KAAK,GAAwB;YACjC,MAAM;YACN,KAAK;YACL,OAAO;YACP,OAAO;YACP,OAAO;YACP,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC7B,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAEvC,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC3C,KAAK,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;gBACtB,MAAM,EAAE,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,qBAAqB;gBACjE,YAAY,EAAE,MAAM;gBACpB,UAAU,EAAE,MAAM;gBAClB,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,OAAO,EAAE;aACpD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/services/pipeline.rpc-service.d.ts

@@ -4,10 +4,15 @@
  * Netron RPC endpoints for CI/CD pipeline management from webapp and CLI.
  */
 import type { PipelineService, Pipeline, PipelineDef, PipelineRun } from './pipeline.service.js';
-export declare class PipelineRpcService {
+import type { IOmnitronPipelinesService } from '../shared/dto/services.js';
+export declare class PipelineRpcService implements IOmnitronPipelinesService {
     private readonly pipelines;
     constructor(pipelines: PipelineService);
     createPipeline(data: PipelineDef): Promise<Pipeline>;
+    updatePipeline(data: {
+        id: string;
+        definition: PipelineDef;
+    }): Promise<Pipeline>;
     getPipeline(data: {
         id: string;
     }): Promise<Pipeline | null>;

package/dist/services/pipeline.rpc-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pipeline.rpc-service.d.ts","sourceRoot":"","sources":["../../src/services/pipeline.rpc-service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EACV,eAAe,EACf,QAAQ,EACR,WAAW,EACX,WAAW,EACZ,MAAM,uBAAuB,CAAC;AAE/B,qBACa,kBAAkB;IACjB,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,eAAe;IAGjD,cAAc,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;IAKpD,WAAW,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAK3D,aAAa,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;IAKpC,cAAc,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAMnE,eAAe,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC;IAK7F,SAAS,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAMjE,YAAY,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAKlE,QAAQ,CAAC,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;CAGvF"}
+{"version":3,"file":"pipeline.rpc-service.d.ts","sourceRoot":"","sources":["../../src/services/pipeline.rpc-service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EACV,eAAe,EACf,QAAQ,EACR,WAAW,EACX,WAAW,EACZ,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAE3E,qBACa,kBAAmB,YAAW,yBAAyB;IACtD,OAAO,CAAC,QAAQ,CAAC,SAAS;IAAtC,YAA6B,SAAS,EAAE,eAAe,EAAI;IAGrD,cAAc,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAEzD;IAGK,cAAc,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAErF;IAGK,WAAW,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAEhE;IAGK,aAAa,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC,CAEzC;IAGK,cAAc,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAGxE;IAGK,eAAe,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAElG;IAGK,SAAS,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAGtE;IAGK,YAAY,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAEvE;IAGK,QAAQ,CAAC,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAErF;CACF"}

package/dist/services/pipeline.rpc-service.js

@@ -22,6 +22,9 @@ let PipelineRpcService = class PipelineRpcService {
     async createPipeline(data) {
         return this.pipelines.createPipeline(data);
     }
+    async updatePipeline(data) {
+        return this.pipelines.updatePipeline(data.id, data.definition);
+    }
     async getPipeline(data) {
         return this.pipelines.getPipeline(data.id);
     }
@@ -52,6 +55,12 @@ __decorate([
     __metadata("design:paramtypes", [Object]),
     __metadata("design:returntype", Promise)
 ], PipelineRpcService.prototype, "createPipeline", null);
+__decorate([
+    Public({ auth: { roles: OPERATOR_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], PipelineRpcService.prototype, "updatePipeline", null);
 __decorate([
     Public({ auth: { roles: VIEWER_ROLES } }),
     __metadata("design:type", Function),

package/dist/services/pipeline.rpc-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"pipeline.rpc-service.js","sourceRoot":"","sources":["../../src/services/pipeline.rpc-service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;;;;;;;;;;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAS3D,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IACA;IAA7B,YAA6B,SAA0B;QAA1B,cAAS,GAAT,SAAS,CAAiB;IAAG,CAAC;IAGrD,AAAN,KAAK,CAAC,cAAc,CAAC,IAAiB;QACpC,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CAAC,IAAoB;QACpC,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7C,CAAC;IAGK,AAAN,KAAK,CAAC,aAAa;QACjB,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;IACxC,CAAC;IAGK,AAAN,KAAK,CAAC,cAAc,CAAC,IAAoB;QACvC,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAGK,AAAN,KAAK,CAAC,eAAe,CAAC,IAAsD;QAC1E,OAAO,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9D,CAAC;IAGK,AAAN,KAAK,CAAC,SAAS,CAAC,IAAuB;QACrC,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAGK,AAAN,KAAK,CAAC,YAAY,CAAC,IAAuB;QACxC,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAGK,AAAN,KAAK,CAAC,QAAQ,CAAC,IAA8C;QAC3D,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;CACF,CAAA;AAxCO;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;wDAG3C;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;qDAGzC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;uDAGzC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;wDAI3C;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;yDAG3C;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;mDAI3C;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;sDAGzC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;kDAGzC;AA3CU,kBAAkB;IAD9B,OAAO,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;;GAC1B,kBAAkB,CA4C9B"}
+{"version":3,"file":"pipeline.rpc-service.js","sourceRoot":"","sources":["../../src/services/pipeline.rpc-service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;;;;;;;;;;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAW3D,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IACA,SAAS;IAAtC,YAA6B,SAA0B;yBAA1B,SAAS;IAAoB,CAAC;IAGrD,AAAN,KAAK,CAAC,cAAc,CAAC,IAAiB;QACpC,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAGK,AAAN,KAAK,CAAC,cAAc,CAAC,IAA6C;QAChE,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACjE,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CAAC,IAAoB;QACpC,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7C,CAAC;IAGK,AAAN,KAAK,CAAC,aAAa;QACjB,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;IACxC,CAAC;IAGK,AAAN,KAAK,CAAC,cAAc,CAAC,IAAoB;QACvC,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAGK,AAAN,KAAK,CAAC,eAAe,CAAC,IAAsD;QAC1E,OAAO,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9D,CAAC;IAGK,AAAN,KAAK,CAAC,SAAS,CAAC,IAAuB;QACrC,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAGK,AAAN,KAAK,CAAC,YAAY,CAAC,IAAuB;QACxC,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAGK,AAAN,KAAK,CAAC,QAAQ,CAAC,IAA8C;QAC3D,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;CACF,CAAA;AA7CO;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;wDAG3C;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;wDAG3C;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;qDAGzC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;uDAGzC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;wDAI3C;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;yDAG3C;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;mDAI3C;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;sDAGzC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;kDAGzC;AAhDU,kBAAkB;IAD9B,OAAO,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;;GAC1B,kBAAkB,CAiD9B"}

package/dist/services/pipeline.service.d.ts

@@ -10,57 +10,16 @@
 import type { Kysely } from 'kysely';
 import type { ILogger } from '@omnitron-dev/titan/module/logger';
 import type { OmnitronDatabase } from '../database/schema.js';
-export interface PipelineDef {
-    name: string;
-    description?: string;
-    steps: PipelineStep[];
-    triggers?: PipelineTrigger[];
-}
-export interface PipelineStep {
-    name: string;
-    run: string;
-    dependsOn?: string[];
-    env?: Record<string, string>;
-    timeout?: number;
-    retries?: number;
-    condition?: string;
-}
-export interface PipelineTrigger {
-    type: 'cron' | 'webhook' | 'manual';
-    config: Record<string, unknown>;
-}
-export interface Pipeline {
-    id: string;
-    name: string;
-    description: string | null;
-    steps: PipelineStep[];
-    triggers: PipelineTrigger[];
-    createdAt: string;
-    updatedAt: string;
-}
-export interface PipelineRunStepResult {
-    name: string;
-    status: string;
-    duration: number;
-    output?: string;
-    error?: string;
-}
-export interface PipelineRun {
-    id: string;
-    pipelineId: string;
-    status: 'pending' | 'running' | 'success' | 'failed' | 'cancelled';
-    steps: PipelineRunStepResult[];
-    startedAt: string;
-    completedAt: string | null;
-    triggeredBy: string;
-    params: Record<string, unknown> | null;
-}
+export type { PipelineDef, PipelineStep, Pipeline, PipelineRunStepResult, PipelineRun, } from '../shared/dto/pipelines.js';
+import type { PipelineDef, Pipeline, PipelineRun } from '../shared/dto/pipelines.js';
 export declare class PipelineService {
     private readonly db;
     private readonly logger;
     private activeRuns;
     constructor(db: Kysely<OmnitronDatabase>, logger: ILogger);
     createPipeline(def: PipelineDef): Promise<Pipeline>;
+    /** Replace the definition while retaining run history and the stable pipeline identity. */
+    updatePipeline(id: string, def: PipelineDef): Promise<Pipeline>;
     getPipeline(id: string): Promise<Pipeline | null>;
     listPipelines(): Promise<Pipeline[]>;
     deletePipeline(id: string): Promise<void>;
@@ -85,8 +44,20 @@ export declare class PipelineService {
      *   !params.key             → falsy check
      */
     private evaluateCondition;
-    private runShellCommand;
+    /** @internal exported for tests via `__test__` below. */
+    runShellCommand(command: string, env?: Record<string, string>, timeout?: number, signal?: AbortSignal): Promise<string>;
     private mapPipeline;
     private mapRun;
 }
+/**
+ * Exported for tests only.
+ *
+ * `runShellCommand` is the piece with behaviour worth pinning — exit codes,
+ * timeouts, output retention — and the shapes that matter (a command that
+ * succeeds while printing megabytes) are awkward to reach through the full
+ * service, which wants a database and a scheduler.
+ */
+export declare const __test__: {
+    runShellCommand: (service: PipelineService, command: string, env: Record<string, string> | undefined, timeout: number, signal?: AbortSignal) => Promise<string>;
+};
 //# sourceMappingURL=pipeline.service.d.ts.map