@omnitron-dev/omnitron 0.2.0 → 0.3.1

package/dist/project/artifact-builder.d.ts

@@ -18,13 +18,30 @@
  *   └── config/         (omnitron-generated, no secrets in files)
  */
 import type { IEcosystemAppEntry } from '../config/types.js';
+import { resolvePnpmForTests } from '../shared/pnpm.js';
+export { resolvePnpmForTests };
 export interface ArtifactInfo {
     app: string;
     version: string;
     path: string;
     size: number;
     builtAt: string;
+    /**
+     * Hash of the build INPUTS — sources plus vendored dependencies — which is
+     * what tells the next deployment whether it has anything to do. NOT the
+     * hash of the file below, despite `.artifact-sha256` being the name it is
+     * stored under on the node.
+     */
     checksum: string;
+    /**
+     * sha256 of the tarball itself, as the receiving side recomputes it.
+     *
+     * The pair `{ tarballSha256, size }` is what makes a transfer checkable at
+     * the one moment the bytes cross a machine boundary. Absent for an
+     * artifact found on disk rather than built here — `listArtifacts` reads a
+     * directory and does not hash what it finds.
+     */
+    tarballSha256?: string;
 }
 export interface BuildOptions {
     /** Skip npm install (use existing node_modules) */
@@ -34,10 +51,75 @@ export interface BuildOptions {
     /** Output directory for artifacts */
     outputDir?: string;
 }
+/**
+ * The artifact was built, and it cannot run where it lands.
+ *
+ * Thrown rather than logged so a caller cannot report a deployment as
+ * successful: an artifact with no dependencies installs fine, extracts fine,
+ * and fails at the first import — which is the least useful moment to learn
+ * it.
+ */
+export declare class ArtifactWithoutDependencies extends Error {
+    readonly app: string;
+    readonly reason: string;
+    readonly artifactPath: string;
+    constructor(app: string, reason: string, artifactPath: string);
+}
+/**
+ * Refuse an artifact that only works on the machine that built it.
+ *
+ * Three ways a build can produce one, all of them silent, all of them cheap
+ * to rule out here and expensive to find on a node:
+ *
+ *   - a symlink that resolves outside the artifact. This is what shipped for
+ *     weeks: `ls` listed every `@omnitron-dev/*` entry and `ls <entry>/`
+ *     answered `No such file or directory`, because the target was ten `..`
+ *     segments up, in a home directory the node does not have.
+ *   - a dependency range that still names a directory. `workspace:*` and
+ *     `link:…` are instructions to symlink, and `npm` on the node either
+ *     refuses them outright or makes another link to nothing.
+ *   - an override pointing at a tarball that was not packed. Then the install
+ *     succeeds, resolves the package from the REGISTRY, and the node runs a
+ *     published version of code this bundle exists to replace.
+ *
+ * Thrown rather than logged: an artifact is a file, and a file that is wrong
+ * in these ways is indistinguishable from a good one until something imports
+ * it.
+ */
+export declare function assertNothingEscapes(bundleDir: string): void;
 export declare class ArtifactBuilder {
     private readonly projectRoot;
+    /**
+     * Where to report progress.
+     *
+     * Packing twenty-one packages is the longest phase of a deployment and
+     * it wrote nothing anywhere: the daemon log went quiet for minutes
+     * between `Starting remote stack` and the first transfer, which reads
+     * exactly like a hang. An operator watching the console had no way to
+     * tell the two apart.
+     */
+    private readonly logger?;
     private readonly outputDir;
-    constructor(projectRoot: string, outputDir?: string);
+    /**
+     * Tarballs packed during the current `buildAll`.
+     *
+     * Set for the duration of that call and cleared after it, so two
+     * deployments never share one — see `packCache` in `BuildBundleOptions`.
+     */
+    private packCache;
+    constructor(projectRoot: string, outputDir?: string, 
+    /**
+     * Where to report progress.
+     *
+     * Packing twenty-one packages is the longest phase of a deployment and
+     * it wrote nothing anywhere: the daemon log went quiet for minutes
+     * between `Starting remote stack` and the first transfer, which reads
+     * exactly like a hang. An operator watching the console had no way to
+     * tell the two apart.
+     */
+    logger?: {
+        info(msg: string): void;
+    } | undefined);
     /**
      * Build an app artifact (tarball) ready for remote deployment.
      */
@@ -45,7 +127,26 @@ export declare class ArtifactBuilder {
     /**
      * Build all apps in the project.
      */
-    buildAll(entries: IEcosystemAppEntry[], options?: BuildOptions): Promise<ArtifactInfo[]>;
+    /**
+     * Build every app, and say which ones did not build.
+     *
+     * This caught each failure and wrote it to `console.error` — which in a
+     * daemon goes nowhere anyone reads — then returned the apps that worked.
+     * With all six failing, the caller received `[]` and logged
+     * `Artifacts built for deployment`, and the deployment proceeded to ship
+     * nothing to a node that then had nothing to run.
+     *
+     * The failures come back with the successes now. A caller that wants to
+     * continue past them still can; a caller that reports success cannot do it
+     * without looking.
+     */
+    buildAll(entries: IEcosystemAppEntry[], options?: BuildOptions): Promise<{
+        built: ArtifactInfo[];
+        failed: Array<{
+            app: string;
+            error: string;
+        }>;
+    }>;
     /**
      * List available artifacts.
      */
@@ -56,8 +157,78 @@ export declare class ArtifactBuilder {
     cleanOldArtifacts(keep?: number): number;
     private resolveAppDir;
     private getVersion;
+    /**
+     * Build the app, and make sure the build has something to do.
+     *
+     * A `composite: true` project keeps `tsconfig.tsbuildinfo` beside its
+     * config, and tsc trusts it: if the inputs have not changed since that file
+     * was written, it emits nothing and exits zero. The usual `build` script is
+     * `rm -rf dist && tsc`, which removes the OUTPUT and leaves the record
+     * saying the output is current.
+     *
+     * So the build succeeds, `dist/` stays empty, and the next step fails with
+     * `No dist/ directory found for messaging. Build failed?` — a question mark
+     * that turns out to be the right punctuation, because the build did not
+     * fail. Measured: `pnpm build` in that app exits zero with `dist` at zero
+     * files; deleting `tsconfig.tsbuildinfo` first gives sixteen.
+     *
+     * Removed here rather than in each app's script: an artifact build is a
+     * from-scratch build by definition — nothing about the machine that ran the
+     * last one is evidence about this one — and fixing it per app means fixing
+     * it again for every app added later.
+     */
     private runBuild;
+    /**
+     * Package an app so it can RUN where it lands.
+     *
+     * Two earlier shapes of this, and why neither worked:
+     *
+     * It first packed `dist/`, `package.json` and `config/`, with the header
+     * above promising `node_modules/ (production deps only)`. The difference
+     * was to be made up on the node by
+     * `npm install --production --ignore-scripts 2>/dev/null || true`, which
+     * could not work even once — the manifests use pnpm's `workspace:`
+     * protocol and npm answers `EUNSUPPORTEDPROTOCOL` — and the `|| true` meant
+     * nobody found out.
+     *
+     * It then used `pnpm deploy --prod --legacy`, whose whole purpose is to
+     * write a tree that stands on its own. It does, for dependencies that come
+     * from a registry or from this repository. It cannot for the ones declared
+     * `link:/Users/…/omni/packages/titan` — a `link:` is an instruction to
+     * symlink a directory, and pnpm carried it out faithfully: twenty-three
+     * symlinks per artifact, each climbing ten `..` segments past `/` into a
+     * home directory that exists on one machine. The guard here was
+     * `existsSync(node_modules)`, and a directory full of dangling symlinks
+     * exists.
+     *
+     * `--legacy` was itself the warning. Without it pnpm 10 refuses and asks
+     * for `inject-workspace-packages`, which is the setting that makes a deploy
+     * self-contained; the flag silenced the refusal and produced the tree the
+     * refusal was about.
+     *
+     * So the artifact is built the way the daemon's own bundle is built, by the
+     * same functions: every dependency that names a directory — `workspace:` or
+     * `link:` — is packed with `pnpm pack` into `vendor/`, the manifest is
+     * rewritten to install those tarballs, and `npm install` runs ON THE NODE.
+     * That is also the only way the platform-specific packages come out right:
+     * this machine has `@esbuild/darwin-arm64` and the node needs
+     * `@esbuild/linux-x64`, and the only computer that knows which is which is
+     * the one being installed on.
+     */
     private createTarball;
-    private computeChecksum;
+    /**
+     * Where this master keeps what it knows about builds it has run.
+     *
+     * Under the temporary directory, because losing it costs one compile and
+     * nothing else — and because the alternative is writing into a repository
+     * that belongs to the project being deployed.
+     */
+    private buildCacheDir;
+    private decideRebuild;
+    /** What the last build of this app recorded, or nothing anybody can use. */
+    private readBuildRecord;
+    private recordBuild;
+    /** The app's own manifest — its name, and the ranges that say what must travel. */
+    private manifestOf;
 }
 //# sourceMappingURL=artifact-builder.d.ts.map

package/dist/project/artifact-builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-builder.d.ts","sourceRoot":"","sources":["../../src/project/artifact-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAMH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAQ7D,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,mDAAmD;IACnD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,0CAA0C;IAC1C,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,qCAAqC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAMD,qBAAa,eAAe;IAIxB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAH9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAGhB,WAAW,EAAE,MAAM,EACpC,SAAS,CAAC,EAAE,MAAM;IAMpB;;OAEG;IACG,QAAQ,CAAC,KAAK,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAoCxF;;OAEG;IACG,QAAQ,CAAC,OAAO,EAAE,kBAAkB,EAAE,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAc9F;;OAEG;IACH,aAAa,IAAI,YAAY,EAAE;IAoB/B;;OAEG;IACH,iBAAiB,CAAC,IAAI,SAAI,GAAG,MAAM;IA6BnC,OAAO,CAAC,aAAa;YAeP,UAAU;YASV,QAAQ;YAQR,aAAa;YAYb,eAAe;CAU9B"}
+{"version":3,"file":"artifact-builder.d.ts","sourceRoot":"","sources":["../../src/project/artifact-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAOH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,OAAO,EAAe,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAIrE,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAyB/B,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,mDAAmD;IACnD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,0CAA0C;IAC1C,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,qCAAqC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAMD;;;;;;;GAOG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;IAElD,QAAQ,CAAC,GAAG,EAAE,MAAM;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM;IAH/B,YACW,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EAQ9B;CACF;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CA0D5D;AAED,qBAAa,eAAe;IAYxB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B;;;;;;;;OAQG;IACH,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAtB1B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IAEnC;;;;;OAKG;IACH,OAAO,CAAC,SAAS,CAAoC;IAErD,YACmB,WAAW,EAAE,MAAM,EACpC,SAAS,CAAC,EAAE,MAAM;IAClB;;;;;;;;OAQG;IACc,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,SAAS,EAIlE;IAED;;OAEG;IACG,QAAQ,CAAC,KAAK,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CA2EvF;IAED;;OAEG;IACH;;;;;;;;;;;;OAYG;IACG,QAAQ,CACZ,OAAO,EAAE,kBAAkB,EAAE,EAC7B,OAAO,CAAC,EAAE,YAAY,GACrB,OAAO,CAAC;QAAE,KAAK,EAAE,YAAY,EAAE,CAAC;QAAC,MAAM,EAAE,KAAK,CAAC;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAmBnF;IAED;;OAEG;IACH,aAAa,IAAI,YAAY,EAAE,CAkB9B;IAED;;OAEG;IACH,iBAAiB,CAAC,IAAI,SAAI,GAAG,MAAM,CAuBlC;IAMD,OAAO,CAAC,aAAa;YAeP,UAAU;IASxB;;;;;;;;;;;;;;;;;;;OAmBG;YACW,QAAQ;IAsEtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAoCG;YACW,aAAa;IAyD3B;;;;;;OAMG;IACH,OAAO,CAAC,aAAa;YAMP,aAAa;IAiB3B,4EAA4E;IAC5E,OAAO,CAAC,eAAe;YAYT,WAAW;IAsBzB,mFAAmF;IACnF,OAAO,CAAC,UAAU;CAQnB"}