@omnitron-dev/omnitron 0.3.0 → 0.3.2

package/dist/infrastructure/presets/postgres.js

@@ -4,6 +4,8 @@
  * Provisions PostgreSQL via Docker (or externally in prod).
  * postProvision hook creates databases declared in config.
  */
+import { escapeIdentifier, escapeLiteral } from 'pg';
+import { describeError } from '@omnitron-dev/titan/diagnostics';
 export const postgresPreset = {
     name: 'postgres',
     type: 'database',
@@ -73,22 +75,29 @@ export const postgresPreset = {
     },
     async postProvision(ctx) {
         const databases = ctx.userConfig['databases'];
-        if (!databases)
+        if (databases === undefined)
             return;
         const user = ctx.secrets['user'] ?? 'postgres';
+        if (typeof databases !== 'object' || databases === null || Array.isArray(databases))
+            throw new Error('PostgreSQL databases must be a declaration map');
+        const failures = [];
         const maxRetries = 5;
         const retryDelay = 2000;
         for (const [dbName, dbConfig] of Object.entries(databases)) {
+            if (!dbName || dbName.includes('\0') || Buffer.byteLength(dbName) > 63) {
+                failures.push(new Error('Invalid PostgreSQL database name'));
+                continue;
+            }
             let created = false;
             for (let attempt = 0; attempt < maxRetries && !created; attempt++) {
                 try {
                     const result = await ctx.execInContainer([
-                        'psql', '-U', user, '-tAc',
-                        `SELECT 1 FROM pg_database WHERE datname='${dbName}'`,
+                        'psql', '-X', '-v', 'ON_ERROR_STOP=1', '-U', user, '-d', 'postgres', '-tAc',
+                        `SELECT 1 FROM pg_database WHERE datname=${escapeLiteral(dbName)}`,
                     ]);
                     if (!result.trim()) {
                         await ctx.execInContainer([
-                            'psql', '-U', user, '-c', `CREATE DATABASE "${dbName}"`,
+                            'psql', '-X', '-v', 'ON_ERROR_STOP=1', '-U', user, '-d', 'postgres', '-c', `CREATE DATABASE ${escapeIdentifier(dbName)}`,
                         ]);
                         ctx.logger.info({ database: dbName }, 'Created PostgreSQL database');
                     }
@@ -100,13 +109,21 @@ export const postgresPreset = {
                         await new Promise((r) => setTimeout(r, retryDelay));
                     }
                     else {
-                        ctx.logger.warn({ database: dbName, error: err.message }, 'Failed to create database');
+                        failures.push(new Error(`Database '${dbName}' could not be prepared: ${describeError(err)}`));
                     }
                 }
             }
-            if (created)
-                await createExtensions(ctx, user, dbName, dbConfig?.extensions ?? []);
+            if (created) {
+                try {
+                    await createExtensions(ctx, user, dbName, dbConfig?.extensions ?? []);
+                }
+                catch (error) {
+                    failures.push(new Error(describeError(error)));
+                }
+            }
         }
+        if (failures.length)
+            throw new AggregateError(failures, failures.map(error => error.message).join('; '));
     },
     generateEnvTemplates(_userConfig) {
         return {
@@ -114,40 +131,27 @@ export const postgresPreset = {
         };
     },
 };
-/**
- * Create the extensions a database declared, inside that database.
- *
- * `omnitronConfig.database.extensions` was declared in the type and in the
- * zod schema and read by nothing: the resolver took `dialect` and `pool` and
- * dropped the rest. An app asking for postgis got a plain container and
- * failed on its first spatial query with `$libdir/postgis-3: No such file` —
- * a message about a shared library, three layers away from the setting that
- * was ignored. The workaround was to override the image by hand in the stack
- * config, which is why the gap survived: it looked like an image problem.
- *
- * A missing extension is reported here, at provisioning time, naming the
- * extension and the fact that the image has to carry it. Failing to create
- * one does not abort the rest — the other databases and the other extensions
- * are still worth having, and the app's own startup will fail loudly enough
- * if it truly cannot run without it.
- */
+/** Complete independent declarations, then refuse readiness if any required extension failed. */
 async function createExtensions(ctx, user, dbName, extensions) {
-    for (const ext of extensions) {
-        // Extension names come from a config file, not from a request, but they
-        // are interpolated into SQL — so keep them to what an identifier can be.
+    if (!Array.isArray(extensions) || extensions.some(ext => typeof ext !== 'string'))
+        throw new Error(`Database '${dbName}' extensions must be a list of names`);
+    const failures = [];
+    for (const ext of new Set(extensions)) {
         if (!/^[a-zA-Z][a-zA-Z0-9_-]*$/.test(ext)) {
-            ctx.logger.warn({ database: dbName, extension: ext }, 'Skipped extension: not a valid identifier');
+            failures.push(new Error(`Invalid extension identifier for database '${dbName}'`));
             continue;
         }
         try {
             await ctx.execInContainer([
-                'psql', '-U', user, '-d', dbName, '-c', `CREATE EXTENSION IF NOT EXISTS "${ext}"`,
+                'psql', '-X', '-v', 'ON_ERROR_STOP=1', '-U', user, '-d', dbName, '-c', `CREATE EXTENSION IF NOT EXISTS ${escapeIdentifier(ext)}`,
             ]);
             ctx.logger.info({ database: dbName, extension: ext }, 'Ensured PostgreSQL extension');
         }
-        catch (err) {
-            ctx.logger.error({ database: dbName, extension: ext, error: err.message }, `Could not create extension "${ext}" — the image must ship it (postgres:17-alpine has the contrib set, not postgis; use an image override for those)`);
+        catch (error) {
+            failures.push(new Error(`Database '${dbName}' requires extension '${ext}'; ensure the image ships it: ${describeError(error)}`));
         }
     }
+    if (failures.length)
+        throw new AggregateError(failures, failures.map(error => error.message).join('; '));
 }
 //# sourceMappingURL=postgres.js.map

package/dist/infrastructure/presets/postgres.js.map

@@ -1 +1 @@
-{"version":3,"file":"postgres.js","sourceRoot":"","sources":["../../../src/infrastructure/presets/postgres.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,CAAC,MAAM,cAAc,GAAmB;IAC5C,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,UAAU;IAChB,YAAY,EAAE,oBAAoB;IAClC,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;IAC5B,cAAc,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE;IAE1D,kBAAkB,EAAE;QAClB,qEAAqE;QACrE,kEAAkE;QAClE,+DAA+D;QAC/D,mEAAmE;QACnE,+DAA+D;QAC/D,8CAA8C;QAC9C,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,6FAA6F;QACrG,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,EAAE;KACZ;IAED,YAAY,CAAC,UAAmC;QAC9C,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAOtC,CAAC;QAEF,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,KAAkC,EAAQ,EAAE;YACpE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;gBAAE,OAAO;YAClE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;QACxC,CAAC,CAAC;QAEF,GAAG,CAAC,iBAAiB,EAAE,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,CAAC;QAClD,GAAG,CAAC,gBAAgB,EAAE,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,CAAC;QACpD,wEAAwE;QACxE,oEAAoE;QACpE,GAAG,CAAC,sBAAsB,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACpD,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,GAAG,CAAC,sBAAsB,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACpD,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC7B,wEAAwE;QACxE,yEAAyE;QACzE,8CAA8C;QAC9C,GAAG,CAAC,4BAA4B,EAAE,GAAG,CAAC,uBAAuB,IAAI,IAAI,CAAC,CAAC;QACvE,oEAAoE;QACpE,oEAAoE;QACpE,GAAG,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;QAClD,GAAG,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;QAC/B,GAAG,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC;QACnC,GAAG,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC;QAE/B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,aAAa,EAAE;QACb,kEAAkE;QAClE,uDAAuD;QACvD,OAAO,EAAE;YACP,UAAU;YACV,IAAI,EAAE,qBAAqB;YAC3B,IAAI,EAAE,sBAAsB;YAC5B,IAAI,EAAE,oBAAoB;YAC1B,IAAI,EAAE,iCAAiC;YACvC,IAAI,EAAE,2CAA2C;YACjD,IAAI,EAAE,wBAAwB;YAC9B,IAAI,EAAE,4BAA4B;YAClC,IAAI,EAAE,wBAAwB;SAC/B;QACD,WAAW,EAAE,EAAE;QACf,OAAO,EAAE;YACP,IAAI,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,MAAM,EAAE,EAAE,EAAE;SACzD;QACD,OAAO,EAAE,MAAM;KAChB;IAED,KAAK,CAAC,aAAa,CAAC,GAA0B;QAC5C,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC,WAAW,CAE/B,CAAC;QACd,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC;QAC/C,MAAM,UAAU,GAAG,CAAC,CAAC;QACrB,MAAM,UAAU,GAAG,IAAI,CAAC;QAExB,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3D,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,UAAU,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;gBAClE,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC;wBACvC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM;wBAC1B,4CAA4C,MAAM,GAAG;qBACtD,CAAC,CAAC;oBACH,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;wBACnB,MAAM,GAAG,CAAC,eAAe,CAAC;4BACxB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,MAAM,GAAG;yBACxD,CAAC,CAAC;wBACH,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,6BAA6B,CAAC,CAAC;oBACvE,CAAC;oBACD,OAAO,GAAG,IAAI,CAAC;gBACjB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,OAAO,GAAG,UAAU,GAAG,CAAC,EAAE,CAAC;wBAC7B,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,CAAC,EAAE,EAAE,+BAA+B,CAAC,CAAC;wBAC9F,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;oBACtD,CAAC;yBAAM,CAAC;wBACN,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,2BAA2B,CAAC,CAAC;oBACpG,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,OAAO;gBAAE,MAAM,gBAAgB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAED,oBAAoB,CAAC,WAAoC;QACvD,OAAO;YACL,YAAY,EAAE,+EAA+E;SAC9F,CAAC;IACJ,CAAC;CACF,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,KAAK,UAAU,gBAAgB,CAC7B,GAA0B,EAC1B,IAAY,EACZ,MAAc,EACd,UAAoB;IAEpB,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,wEAAwE;QACxE,yEAAyE;QACzE,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,2CAA2C,CAAC,CAAC;YACnG,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,eAAe,CAAC;gBACxB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mCAAmC,GAAG,GAAG;aAClF,CAAC,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,8BAA8B,CAAC,CAAC;QACxF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,KAAK,CACd,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,EACnE,+BAA+B,GAAG,mHAAmH,CACtJ,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"postgres.js","sourceRoot":"","sources":["../../../src/infrastructure/presets/postgres.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAGhE,MAAM,CAAC,MAAM,cAAc,GAAmB;IAC5C,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,UAAU;IAChB,YAAY,EAAE,oBAAoB;IAClC,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;IAC5B,cAAc,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE;IAE1D,kBAAkB,EAAE;QAClB,qEAAqE;QACrE,kEAAkE;QAClE,+DAA+D;QAC/D,mEAAmE;QACnE,+DAA+D;QAC/D,8CAA8C;QAC9C,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,6FAA6F;QACrG,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,EAAE;KACZ;IAED,YAAY,CAAC,UAAmC;QAC9C,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAOtC,CAAC;QAEF,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,KAAkC,EAAQ,EAAE;YACpE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;gBAAE,OAAO;YAClE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;QACxC,CAAC,CAAC;QAEF,GAAG,CAAC,iBAAiB,EAAE,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,CAAC;QAClD,GAAG,CAAC,gBAAgB,EAAE,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,CAAC;QACpD,wEAAwE;QACxE,oEAAoE;QACpE,GAAG,CAAC,sBAAsB,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACpD,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,GAAG,CAAC,sBAAsB,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACpD,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC7B,wEAAwE;QACxE,yEAAyE;QACzE,8CAA8C;QAC9C,GAAG,CAAC,4BAA4B,EAAE,GAAG,CAAC,uBAAuB,IAAI,IAAI,CAAC,CAAC;QACvE,oEAAoE;QACpE,oEAAoE;QACpE,GAAG,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;QAClD,GAAG,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;QAC/B,GAAG,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC;QACnC,GAAG,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC;QAE/B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,aAAa,EAAE;QACb,kEAAkE;QAClE,uDAAuD;QACvD,OAAO,EAAE;YACP,UAAU;YACV,IAAI,EAAE,qBAAqB;YAC3B,IAAI,EAAE,sBAAsB;YAC5B,IAAI,EAAE,oBAAoB;YAC1B,IAAI,EAAE,iCAAiC;YACvC,IAAI,EAAE,2CAA2C;YACjD,IAAI,EAAE,wBAAwB;YAC9B,IAAI,EAAE,4BAA4B;YAClC,IAAI,EAAE,wBAAwB;SAC/B;QACD,WAAW,EAAE,EAAE;QACf,OAAO,EAAE;YACP,IAAI,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,MAAM,EAAE,EAAE,EAAE;SACzD;QACD,OAAO,EAAE,MAAM;KAChB;IAED,KAAK,CAAC,aAAa,CAAC,GAA0B;QAC5C,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC,WAAW,CAE/B,CAAC;QACd,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO;QAEpC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC;QAC/C,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACvJ,MAAM,QAAQ,GAAY,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,CAAC,CAAC;QACrB,MAAM,UAAU,GAAG,IAAI,CAAC;QAExB,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;gBACvE,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;gBAAC,SAAS;YACzE,CAAC;YACD,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,UAAU,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;gBAClE,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC;wBACvC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM;wBAC3E,2CAA2C,aAAa,CAAC,MAAM,CAAC,EAAE;qBACnE,CAAC,CAAC;oBACH,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;wBACnB,MAAM,GAAG,CAAC,eAAe,CAAC;4BACxB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,mBAAmB,gBAAgB,CAAC,MAAM,CAAC,EAAE;yBACzH,CAAC,CAAC;wBACH,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,6BAA6B,CAAC,CAAC;oBACvE,CAAC;oBACD,OAAO,GAAG,IAAI,CAAC;gBACjB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,OAAO,GAAG,UAAU,GAAG,CAAC,EAAE,CAAC;wBAC7B,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,CAAC,EAAE,EAAE,+BAA+B,CAAC,CAAC;wBAC9F,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;oBACtD,CAAC;yBAAM,CAAC;wBACN,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,aAAa,MAAM,4BAA4B,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;oBAChG,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC;oBAAC,MAAM,gBAAgB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;gBAAC,CAAC;gBAC9E,OAAO,KAAK,EAAE,CAAC;oBAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;YACnE,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM;YAAE,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3G,CAAC;IAED,oBAAoB,CAAC,WAAoC;QACvD,OAAO;YACL,YAAY,EAAE,+EAA+E;SAC9F,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,iGAAiG;AACjG,KAAK,UAAU,gBAAgB,CAC7B,GAA0B,EAC1B,IAAY,EACZ,MAAc,EACd,UAAoB;IAEpB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,sCAAsC,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAY,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,8CAA8C,MAAM,GAAG,CAAC,CAAC,CAAC;YAAC,SAAS;QAC9F,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,eAAe,CAAC;gBACxB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kCAAkC,gBAAgB,CAAC,GAAG,CAAC,EAAE;aACjI,CAAC,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,8BAA8B,CAAC,CAAC;QACxF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,aAAa,MAAM,yBAAyB,GAAG,iCAAiC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACnI,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM;QAAE,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3G,CAAC"}

package/dist/infrastructure/presets/tor.d.ts

@@ -104,8 +104,7 @@ export interface ITorPresetConfig {
  * which would stop, without a sentence, an onion restricted to nobody.
  *
  * Exported so the court can run exactly this text. It needs `set -eu -o
- * pipefail` in effect, which ENTRYPOINT_SHELL sets; busybox `sh` in
- * alpine:3.21 honours `pipefail` (measured: `false | cat` → 1).
+ * pipefail` in effect, which ENTRYPOINT_SHELL sets in Alpine's BusyBox shell.
  */
 export declare const CLIENT_AUTH_SHELL = "# Client-authorization keys, when the service uses them.\nif [ -n \"${OMNITRON_TOR_CLIENT_AUTH_JSON:-}\" ]; then\n  command -v jq >/dev/null 2>&1 || apk add --no-cache jq >/dev/null 2>&1 || apk add jq >/dev/null 2>&1 || true\n  if ! command -v jq >/dev/null 2>&1; then\n    echo 'tor: client authorization is configured and there is no jq to write its keys; not starting an onion service without them' >&2\n    exit 1\n  fi\n  expected=$(printf '%s' \"$OMNITRON_TOR_CLIENT_AUTH_JSON\" | jq -e 'length')\n  entries=$(printf '%s' \"$OMNITRON_TOR_CLIENT_AUTH_JSON\" | jq -c '.[]')\n  written=0\n  while IFS= read -r f; do\n    [ -n \"$f\" ] || continue\n    path=$(printf '%s' \"$f\" | jq -er .path)\n    mkdir -p \"$(dirname \"$path\")\"\n    printf '%s' \"$f\" | jq -er .content > \"$path\"\n    chmod 600 \"$path\"\n    written=$((written + 1))\n  done <<CLIENT_AUTH_KEYS\n$entries\nCLIENT_AUTH_KEYS\n  if [ \"$written\" -ne \"$expected\" ]; then\n    echo \"tor: wrote $written of $expected client-authorization keys; not starting an onion service without them\" >&2\n    exit 1\n  fi\nfi\n";
 export declare const torPreset: IServicePreset;

package/dist/infrastructure/presets/tor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tor.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/presets/tor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,+CAA+C;AAC/C,MAAM,WAAW,uBAAuB;IACtC,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,WAAW,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,uCAAuC;AACvC,MAAM,WAAW,gBAAgB;IAC/B,mEAAmE;IACnE,cAAc,EAAE,uBAAuB,EAAE,CAAC;IAC1C;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;;;;GAOG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,iBAAiB,wkCAyB7B,CAAC;AAiCF,eAAO,MAAM,SAAS,EAAE,cA0CvB,CAAC"}
+{"version":3,"file":"tor.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/presets/tor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,+CAA+C;AAC/C,MAAM,WAAW,uBAAuB;IACtC,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,WAAW,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,uCAAuC;AACvC,MAAM,WAAW,gBAAgB;IAC/B,mEAAmE;IACnE,cAAc,EAAE,uBAAuB,EAAE,CAAC;IAC1C;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;;;;GAOG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,eAAO,MAAM,iBAAiB,wkCAyB7B,CAAC;AA6BF,eAAO,MAAM,SAAS,EAAE,cAyCvB,CAAC"}

package/dist/infrastructure/presets/tor.js

@@ -84,8 +84,7 @@
  * which would stop, without a sentence, an onion restricted to nobody.
  *
  * Exported so the court can run exactly this text. It needs `set -eu -o
- * pipefail` in effect, which ENTRYPOINT_SHELL sets; busybox `sh` in
- * alpine:3.21 honours `pipefail` (measured: `false | cat` → 1).
+ * pipefail` in effect, which ENTRYPOINT_SHELL sets in Alpine's BusyBox shell.
  */
 export const CLIENT_AUTH_SHELL = `# Client-authorization keys, when the service uses them.
 if [ -n "\${OMNITRON_TOR_CLIENT_AUTH_JSON:-}" ]; then
@@ -118,13 +117,9 @@ const ENTRYPOINT_SHELL = `set -eu
 # failed in front of a pipe was invisible to \`set -e\` — see CLIENT_AUTH_SHELL.
 set -o pipefail
 
-# Tor, from the distribution. The version this pins to is measured, not
-# assumed: \`docker run --rm alpine:3.21 sh -c 'apk add tor && tor --version'\`
-# answers 0.4.9.12, against 0.4.9.11 on 3.20. Onion-service anonymity
-# improves with the release — 0.4.7 added the layer-2/3 guards that blunt
-# guard discovery, 0.4.8 the PoW defences this config turns on — so the base
-# image is part of the security posture and not a detail.
-apk add --no-cache tor >/dev/null 2>&1 || apk add tor >/dev/null 2>&1
+# Resolve Tor against this stable Alpine branch on each start. Keep apk's
+# diagnostics visible if the signed package index or installation fails.
+apk add --no-cache --upgrade tor
 
 mkdir -p /etc/tor /var/lib/tor
 
@@ -146,15 +141,14 @@ exec tor -f /etc/tor/torrc
 export const torPreset = {
     name: 'tor',
     type: 'gateway',
-    defaultImage: 'alpine:3.21',
+    defaultImage: 'alpine:3.24',
     // No host-side ports: hidden services are reachable only via the Tor
     // network. Exposing 9050 etc. would defeat the entire point.
     defaultPorts: {},
     defaultSecrets: {},
     defaultHealthCheck: {
-        // Tor takes 30-90s to bootstrap an HS on first start. We watch for the
-        // hostname file to be written — that's the unambiguous signal that the
-        // hidden service has been published.
+        // Container liveness and initialized storage. Descriptor publication
+        // and reachability require a probe through the Tor network.
         type: 'command',
         target: 'pgrep tor >/dev/null && [ "$(ls /var/lib/tor 2>/dev/null | wc -l)" -gt 0 ] || exit 1',
         interval: '15s',

package/dist/infrastructure/presets/tor.js.map

@@ -1 +1 @@
-{"version":3,"file":"tor.js","sourceRoot":"","sources":["../../../src/infrastructure/presets/tor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAyBH;;;;;;;GAOG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;CAyBhC,CAAC;AAEF,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;EAmBvB,iBAAiB;;;;;;;;;;CAUlB,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAmB;IACvC,IAAI,EAAE,KAAK;IACX,IAAI,EAAE,SAAS;IACf,YAAY,EAAE,aAAa;IAC3B,qEAAqE;IACrE,6DAA6D;IAC7D,YAAY,EAAE,EAAE;IAChB,cAAc,EAAE,EAAE;IAElB,kBAAkB,EAAE;QAClB,uEAAuE;QACvE,uEAAuE;QACvE,qCAAqC;QACrC,IAAI,EAAE,SAAS;QACf,MAAM,EACJ,sFAAsF;QACxF,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,EAAE;QACX,WAAW,EAAE,MAAM;KACpB;IAED,aAAa,EAAE;QACb,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,gBAAgB,CAAC;QACvC,OAAO,EAAE;YACP,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE;SAC7C;QACD,sEAAsE;QACtE,4DAA4D;QAC5D,UAAU,EAAE,CAAC,mCAAmC,CAAC;QACjD,WAAW,EAAE;YACX,mEAAmE;YACnE,iEAAiE;YACjE,KAAK,EAAE,KAAK;SACb;KACF;IAED,oBAAoB;QAClB,uEAAuE;QACvE,sEAAsE;QACtE,OAAO,EAAE,CAAC;IACZ,CAAC;CACF,CAAC"}
+{"version":3,"file":"tor.js","sourceRoot":"","sources":["../../../src/infrastructure/presets/tor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAyBH;;;;;;;GAOG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;CAyBhC,CAAC;AAEF,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;EAevB,iBAAiB;;;;;;;;;;CAUlB,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAmB;IACvC,IAAI,EAAE,KAAK;IACX,IAAI,EAAE,SAAS;IACf,YAAY,EAAE,aAAa;IAC3B,qEAAqE;IACrE,6DAA6D;IAC7D,YAAY,EAAE,EAAE;IAChB,cAAc,EAAE,EAAE;IAElB,kBAAkB,EAAE;QAClB,qEAAqE;QACrE,4DAA4D;QAC5D,IAAI,EAAE,SAAS;QACf,MAAM,EACJ,sFAAsF;QACxF,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,EAAE;QACX,WAAW,EAAE,MAAM;KACpB;IAED,aAAa,EAAE;QACb,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,gBAAgB,CAAC;QACvC,OAAO,EAAE;YACP,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE;SAC7C;QACD,sEAAsE;QACtE,4DAA4D;QAC5D,UAAU,EAAE,CAAC,mCAAmC,CAAC;QACjD,WAAW,EAAE;YACX,mEAAmE;YACnE,iEAAiE;YACjE,KAAK,EAAE,KAAK;SACb;KACF;IAED,oBAAoB;QAClB,uEAAuE;QACvE,sEAAsE;QACtE,OAAO,EAAE,CAAC;IACZ,CAAC;CACF,CAAC"}

package/dist/infrastructure/provisioning-outcome.d.ts

@@ -16,7 +16,7 @@
  * `state.services` happened to hold. An empty object printed the heading and
  * nothing else — and an empty enumeration of problems reads as "no
  * problems". Observed three times in one shift on a host under memory
- * pressure, with `daos-dev-postgres` and `daos-dev-redis` absent from
+ * pressure, with `sample-dev-postgres` and `sample-dev-redis` absent from
  * `docker ps -a` entirely at the moment it said so.
  *
  * The cost is separate from the cause. A control plane that reports health
@@ -35,6 +35,7 @@
  *     looks like success.
  */
 import type { ContainerState, ContainerStatus } from './types.js';
+import type { IStackInfraStatus } from '../shared/dto/project.js';
 export interface ServiceOutcome {
     name: string;
     image: string | undefined;
@@ -52,6 +53,12 @@ export interface ProvisioningOutcome {
     /** Declared, and absent from the state entirely. */
     missing: ServiceOutcome[];
 }
+/** Native polling cannot prove a preset's setup succeeded or erase its failure. */
+export declare function retainProvisioningObservation(actual: ContainerState, previous: ContainerState | undefined, required?: boolean): ContainerState;
+/** Join native inventory to the reconciler's generation-bound setup observation. */
+export declare function observeProvisioning(actual: readonly ContainerState[], observations: readonly ContainerState[]): ContainerState[];
+/** Local and remote stack views use the same readiness and evidence. */
+export declare function stackServiceObservation(state: ContainerState): IStackInfraStatus['services'][string];
 export declare function summariseProvisioning(desired: readonly {
     name: string;
     image?: string | undefined;

package/dist/infrastructure/provisioning-outcome.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provisioning-outcome.d.ts","sourceRoot":"","sources":["../../src/infrastructure/provisioning-outcome.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,MAAM,EAAE,eAAe,GAAG,SAAS,CAAC;IACpC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IAClC,iEAAiE;IACjE,KAAK,EAAE,OAAO,CAAC;IACf,oEAAoE;IACpE,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,mEAAmE;IACnE,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,oDAAoD;IACpD,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B;AAcD,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,EAAE,EAChE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,GACjD,mBAAmB,CA+CrB;AAED,8EAA8E;AAC9E,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAQzE;AAED,0FAA0F;AAC1F,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,+DAA+D;IAC/D,MAAM,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;CAC/E;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,mBAAmB,EAC5B,MAAM,EAAE,mBAAmB,GAC1B;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAKpC"}
+{"version":3,"file":"provisioning-outcome.d.ts","sourceRoot":"","sources":["../../src/infrastructure/provisioning-outcome.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAElE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,MAAM,EAAE,eAAe,GAAG,SAAS,CAAC;IACpC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IAClC,iEAAiE;IACjE,KAAK,EAAE,OAAO,CAAC;IACf,oEAAoE;IACpE,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,mEAAmE;IACnE,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,oDAAoD;IACpD,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B;AAaD,mFAAmF;AACnF,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,cAAc,GAAG,SAAS,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,cAAc,CAQ9I;AAED,oFAAoF;AACpF,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,EAAE,YAAY,EAAE,SAAS,cAAc,EAAE,GAAG,cAAc,EAAE,CAMhI;AAED,wEAAwE;AACxE,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,cAAc,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAapG;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,EAAE,EAChE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,GACjD,mBAAmB,CA+CrB;AAED,8EAA8E;AAC9E,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAQzE;AAED,0FAA0F;AAC1F,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,+DAA+D;IAC/D,MAAM,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;CAC/E;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,mBAAmB,EAC5B,MAAM,EAAE,mBAAmB,GAC1B;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAKpC"}

package/dist/infrastructure/provisioning-outcome.js

@@ -16,7 +16,7 @@
  * `state.services` happened to hold. An empty object printed the heading and
  * nothing else — and an empty enumeration of problems reads as "no
  * problems". Observed three times in one shift on a host under memory
- * pressure, with `daos-dev-postgres` and `daos-dev-redis` absent from
+ * pressure, with `sample-dev-postgres` and `sample-dev-redis` absent from
  * `docker ps -a` entirely at the moment it said so.
  *
  * The cost is separate from the cause. A control plane that reports health
@@ -37,13 +37,46 @@
 /**
  * A container that is running is not necessarily working.
  *
- * Docker's own health probe is the only thing here that has looked inside,
- * so `unhealthy` outranks `running`. `starting` does not: a container in its
- * first probe window is not yet a failure, and calling it one would make
- * every provisioning run fail for the seconds before the first check.
+ * Native health and declared service setup must both be ready. A container
+ * still in its first probe window is not ready yet either.
  */
 function isUp(state) {
-    return state.status === 'running' && state.health !== 'unhealthy';
+    return state.status === 'running' && state.health !== 'unhealthy' && state.health !== 'starting' && !state.error &&
+        (state.provisioning === undefined || state.provisioning === 'ready');
+}
+/** Native polling cannot prove a preset's setup succeeded or erase its failure. */
+export function retainProvisioningObservation(actual, previous, required) {
+    const same = actual.containerId && actual.startedAt && actual.containerId === previous?.containerId &&
+        actual.startedAt === previous.startedAt && actual.specHash === previous.specHash;
+    if (same && previous.provisioning && required !== false)
+        return {
+            ...actual, provisioning: previous.provisioning,
+            ...(previous.provisioning !== 'ready' && { error: [...new Set([actual.error, previous.error ?? 'Declared service setup is not verified'].filter(Boolean))].join('; ') }),
+        };
+    return required ? { ...actual, provisioning: 'pending', error: [actual.error, 'Declared service setup is not verified for this container generation'].filter(Boolean).join('; ') } : actual;
+}
+/** Join native inventory to the reconciler's generation-bound setup observation. */
+export function observeProvisioning(actual, observations) {
+    const previous = new Map(observations.map(service => [service.name, service]));
+    return actual.map(service => {
+        const setup = previous.get(service.name);
+        return retainProvisioningObservation(service, setup, setup?.provisioning ? true : undefined);
+    });
+}
+/** Local and remote stack views use the same readiness and evidence. */
+export function stackServiceObservation(state) {
+    return {
+        status: state.error || state.provisioning === 'failed' ? 'error' : state.status === 'running' ? 'running' : 'stopped',
+        containerName: state.name, port: Object.values(state.ports ?? {})[0] ?? null,
+        ...(state.service !== undefined && { service: state.service }),
+        ...(state.containerId !== undefined && { containerId: state.containerId }),
+        image: state.image,
+        ...(state.ports !== undefined && { ports: state.ports }),
+        ...(state.app !== undefined && { app: state.app }),
+        health: state.status === 'running' ? state.health ?? 'none' : 'none',
+        ...(state.provisioning !== undefined && { provisioning: state.provisioning }),
+        ...(state.error !== undefined && { error: state.error }),
+    };
 }
 export function summariseProvisioning(desired, services) {
     const running = [];
@@ -63,7 +96,7 @@ export function summariseProvisioning(desired, services) {
             name: state.name,
             image: state.image,
             status: state.status,
-            error: state.error ?? (state.health === 'unhealthy' ? 'container reports unhealthy' : undefined),
+            error: state.error ?? (state.health === 'unhealthy' || state.health === 'starting' ? `container health probe is ${state.health}` : undefined),
         });
     }
     // Services provisioned outside the declared set — omnitron's own Postgres
@@ -77,7 +110,7 @@ export function summariseProvisioning(desired, services) {
             name: state.name ?? name,
             image: state.image,
             status: state.status,
-            error: state.error ?? (state.health === 'unhealthy' ? 'container reports unhealthy' : undefined),
+            error: state.error ?? (state.health === 'unhealthy' || state.health === 'starting' ? `container health probe is ${state.health}` : undefined),
         });
     }
     const empty = desired.length === 0 && Object.keys(services).length === 0;
@@ -99,7 +132,7 @@ export function describeProvisioning(outcome) {
     if (outcome.missing.length > 0)
         parts.push(`${outcome.missing.length} missing (${outcome.missing.map((s) => s.name).join(', ')})`);
     if (outcome.failed.length > 0)
-        parts.push(`${outcome.failed.length} not running (${outcome.failed.map((s) => s.name).join(', ')})`);
+        parts.push(`${outcome.failed.length} not ready (${outcome.failed.map((s) => s.name).join(', ')})`);
     return `Infrastructure is NOT ready — ${parts.join('; ')}`;
 }
 /**

package/dist/infrastructure/provisioning-outcome.js.map

@@ -1 +1 @@
-{"version":3,"file":"provisioning-outcome.js","sourceRoot":"","sources":["../../src/infrastructure/provisioning-outcome.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAuBH;;;;;;;GAOG;AACH,SAAS,IAAI,CAAC,KAAqB;IACjC,OAAO,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAgE,EAChE,QAAkD;IAElD,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,MAAM,OAAO,GAAqB,EAAE,CAAC;IAErC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,qEAAqE;YACrE,+CAA+C;YAC/C,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YAC1F,SAAS;QACX,CAAC;QACD,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;YACpC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,SAAS,CAAC;SACjG,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAC1E,0EAA0E;IAC1E,yEAAyE;IACzE,2BAA2B;IAC3B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;YACpC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,SAAS,CAAC;SACjG,CAAC,CAAC;IACL,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;IAEzE,OAAO;QACL,KAAK,EAAE,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAC5D,KAAK;QACL,OAAO;QACP,MAAM;QACN,OAAO;KACR,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,oBAAoB,CAAC,OAA4B;IAC/D,IAAI,OAAO,CAAC,KAAK;QAAE,OAAO,iEAAiE,CAAC;IAC5F,IAAI,OAAO,CAAC,KAAK;QAAE,OAAO,2CAA2C,OAAO,CAAC,OAAO,CAAC,MAAM,YAAY,CAAC;IAExG,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,aAAa,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnI,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,iBAAiB,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpI,OAAO,iCAAiC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC7D,CAAC;AASD;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA4B,EAC5B,MAA2B;IAE3B,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;IACvG,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,iBAAiB,EAAE,CAAC,CAAC;IAC9H,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9F,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,UAAU,0BAA0B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;AAC7F,CAAC"}
+{"version":3,"file":"provisioning-outcome.js","sourceRoot":"","sources":["../../src/infrastructure/provisioning-outcome.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAwBH;;;;;GAKG;AACH,SAAS,IAAI,CAAC,KAAqB;IACjC,OAAO,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,KAAK,CAAC,KAAK;QAC9G,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,OAAO,CAAC,CAAC;AACzE,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,6BAA6B,CAAC,MAAsB,EAAE,QAAoC,EAAE,QAAkB;IAC5H,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,WAAW,KAAK,QAAQ,EAAE,WAAW;QACjG,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,CAAC;IACnF,IAAI,IAAI,IAAI,QAAQ,CAAC,YAAY,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO;YAC9D,GAAG,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY;YAC9C,GAAG,CAAC,QAAQ,CAAC,YAAY,KAAK,OAAO,IAAI,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,wCAAwC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;SACzK,CAAC;IACF,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,sEAAsE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AAC9L,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,mBAAmB,CAAC,MAAiC,EAAE,YAAuC;IAC5G,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/E,OAAO,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;QAC1B,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,6BAA6B,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,uBAAuB,CAAC,KAAqB;IAC3D,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACrH,aAAa,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI;QAC5E,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAC9D,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;QAC1E,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QACxD,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;QAClD,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM;QACpE,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;QAC7E,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;KACzD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAgE,EAChE,QAAkD;IAElD,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,MAAM,OAAO,GAAqB,EAAE,CAAC;IAErC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,qEAAqE;YACrE,+CAA+C;YAC/C,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YAC1F,SAAS;QACX,CAAC;QACD,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;YACpC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,6BAA6B,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;SAC9I,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAC1E,0EAA0E;IAC1E,yEAAyE;IACzE,2BAA2B;IAC3B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;YACpC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,6BAA6B,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;SAC9I,CAAC,CAAC;IACL,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;IAEzE,OAAO;QACL,KAAK,EAAE,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAC5D,KAAK;QACL,OAAO;QACP,MAAM;QACN,OAAO;KACR,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,oBAAoB,CAAC,OAA4B;IAC/D,IAAI,OAAO,CAAC,KAAK;QAAE,OAAO,iEAAiE,CAAC;IAC5F,IAAI,OAAO,CAAC,KAAK;QAAE,OAAO,2CAA2C,OAAO,CAAC,OAAO,CAAC,MAAM,YAAY,CAAC;IAExG,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,aAAa,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnI,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,eAAe,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClI,OAAO,iCAAiC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC7D,CAAC;AASD;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA4B,EAC5B,MAA2B;IAE3B,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;IACvG,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,iBAAiB,EAAE,CAAC,CAAC;IAC9H,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9F,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,UAAU,0BAA0B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;AAC7F,CAAC"}

package/dist/infrastructure/service-binding.js

@@ -59,7 +59,7 @@ export function bindService(requirement, override) {
  * The ports a network's variant of the provisioning block names —
  * `docker.variants.mainnet.ports`, `bareMetal.variants.mainnet.ports`.
  *
- * paysys declares Bitcoin's per network (testnet 18332/18333, mainnet
+ * payments declares Bitcoin's per network (testnet 18332/18333, mainnet
  * 8332/8333) and monerod's for mainnet (18081/18080) in its docker variants,
  * and nothing read them (2026-09-23): a stack running Bitcoin on mainnet in
  * a container would have published, addressed and health-checked regtest's

package/dist/infrastructure/service-resolver.d.ts

@@ -8,6 +8,8 @@
  *   { name: 'omnitron-postgres', image: 'postgres:17-alpine', ports: [...], env: [...] }
  */
 import type { InfrastructureConfig, GatewayServiceConfig, ResolvedContainer, IServiceRequirement, IServiceOverride } from './types.js';
+/** Concurrent operations own their names/networks/volumes; ownerless work starts clean. */
+export declare function withInfrastructureScope<T>(project: string | undefined, stack: string | undefined, work: () => T): T;
 /** Set the container prefix for project-scoped infrastructure */
 export declare function setContainerPrefix(project: string, env: string): void;
 /** Get current prefix */
@@ -20,7 +22,7 @@ export declare function getContainerPrefix(): string;
  * Every other named volume is its service's — `<prefix>-<service>-<key>`,
  * whatever its `source` says — so nothing a stack could write gave two
  * containers one volume. The onion needed exactly that: Tor resolved
- * `daos-test-gateway` once, at start, and on 2026-09-26 a deploy gave the
+ * `sample-test-gateway` once, at start, and on 2026-09-26 a deploy gave the
  * gateway's old address to Nominatim; for ~10 minutes the onion served
  * Nominatim's Apache and nobody could sign in. A unix socket on a volume
  * both containers mount has no address to go stale.
@@ -37,7 +39,7 @@ export declare const SHARED_VOLUME_PREFIX = "shared:";
  *
  * Measured on the dev stand: `omnitron.config.ts` declares
  * `gateway.ports.http = 8080` and its own comment says ":8080" three times,
- * while `daos-dev-gateway` published `80/tcp -> 0.0.0.0:80`. The consequence
+ * while `sample-dev-gateway` published `80/tcp -> 0.0.0.0:80`. The consequence
  * is quiet rather than loud — a browser arriving on :80 sends
  * `Origin: http://localhost` with no port, which is not in the gateway's
  * allow-list, so the portal cannot call the API through it at all. The portal
@@ -165,7 +167,7 @@ export declare function resolveOmnitronPg(options?: {
  * Read from disk on the machine that will run the container: on a node that
  * is the copy just written from the master's payload, on a master the
  * project's own files. Synchronous, because the resolver is — and small: the
- * daos gateway's files are 65 KB, read once per provision.
+ * sample gateway's files are 65 KB, read once per provision.
  *
  * `undefined` when there is nothing under `root` to read, or it cannot be
  * read — the spec hash then stays what it was without this.
@@ -190,6 +192,10 @@ export declare function mountedConfigDigest(root: string, volumes: ResolvedConta
  * onion's socket, would have reached nothing either.
  */
 export declare function gatewayConfigOf(presetConfig: Readonly<Record<string, unknown>> | undefined, legacy: Partial<GatewayServiceConfig> | undefined, port: number, redisDb: number): GatewayServiceConfig;
+/** Only the OpenResty preset owns the shipped template contract.
+ * A service called "gateway" can declare a completely different container.
+ */
+export declare function usesGatewayTemplate(service: IServiceRequirement | undefined): boolean;
 export declare function resolveGateway(config: GatewayServiceConfig, redisConfig: {
     host: string;
     port: number;
@@ -221,7 +227,7 @@ export declare function resolveOmnitronNginx(options?: {
  * Resolve an InfrastructureConfig into concrete container specs.
  * Uses preset-normalized services map — all services go through resolveServiceRequirement().
  */
-export declare function resolveInfrastructure(_config: InfrastructureConfig, normalizedServices?: Record<string, IServiceRequirement>, 
+export declare function resolveInfrastructure(config: InfrastructureConfig, normalizedServices?: Record<string, IServiceRequirement>, 
 /**
  * Stack overrides — `disabled`, `external`, per-service docker changes.
  *
@@ -263,7 +269,7 @@ configRoots?: Map<string, string>, gatewayContext?: {
     /**
      * The static ROOT per service, when the delivery made a
      * `current-<project>-<stack>` link inside it. Only a NODE sends this: on a
-     * master `staticDir` is a path inside the project (daos declares
+     * master `staticDir` is a path inside the project (sample declares
      * `apps/portal/dist`), and mounting ITS parent would put `src/` and
      * `node_modules` under the web root.
      */

package/dist/infrastructure/service-resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service-resolver.d.ts","sourceRoot":"","sources":["../../src/infrastructure/service-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AASH,OAAO,KAAK,EACV,oBAAoB,EACpB,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EAEnB,gBAAgB,EAEjB,MAAM,YAAY,CAAC;AAepB,iEAAiE;AACjE,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAErE;AAED,yBAAyB;AACzB,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,oBAAoB,YAAY,CAAC;AAgC9C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAAC,MAAM,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAA;CAAE,GAAG,SAAS,EAC/I,MAAM,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GAAG,SAAS,GAChD,MAAM,CAER;AAMD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAExG;AAED,0DAA0D;AAC1D,eAAO,MAAM,oBAAoB,OAAO,CAAC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,iBAAiB,GAAG,iBAAiB,CA8B/E;AASD,+DAA+D;AAC/D,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAOnE;AAED,0DAA0D;AAC1D,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC;AA8ED,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,mBAAmB,EAChC,QAAQ,CAAC,EAAE,gBAAgB,EAC3B,OAAO,CAAC,EAAE,MAAM;AAChB,kGAAkG;AAClG,WAAW,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GACxC,iBAAiB,GAAG,IAAI,CA0F1B;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,EACnD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,EAC5C,OAAO,CAAC,EAAE,MAAM,EAChB,WAAW,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GACxC,iBAAiB,EAAE,CA0BrB;AA8FD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,CAAC,EAAE;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,iBAAiB,CAuCpB;AAMD;;;;;;;GAOG;AACH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC,SAAS,CAAC,GAAG,MAAM,GAAG,SAAS,CAuB3G;AAED;;;;;;;;;GASG;AACH;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,EAC3D,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC,GAAG,SAAS,EACjD,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACd,oBAAoB,CActB;AAED,wBAAgB,cAAc,CAC5B,MAAM,EAAE,oBAAoB,EAC5B,WAAW,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,EAC1E,WAAW,EAAE,MAAM,GAClB,iBAAiB,CA+HnB;AAMD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,CAAC,EAAE;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,iBAAiB,CA6CpB;AAMD;;;;;;;;GAQG;AACH;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,oBAAoB,EAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC;AACxD;;;;;;;;;;;GAWG;AACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC5C;;;;;;;;;;;;;;GAcG;AACH,WAAW,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EACjC,cAAc,CAAC,EAAE;IACf,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,WAAW,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC,GACA,iBAAiB,EAAE,CAyDrB"}
+{"version":3,"file":"service-resolver.d.ts","sourceRoot":"","sources":["../../src/infrastructure/service-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAcH,OAAO,KAAK,EACV,oBAAoB,EACpB,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EAEnB,gBAAgB,EAEjB,MAAM,YAAY,CAAC;AAoBpB,2FAA2F;AAC3F,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAYnH;AAED,iEAAiE;AACjE,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAIrE;AAED,yBAAyB;AACzB,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,oBAAoB,YAAY,CAAC;AAiC9C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EACH;IACE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAC3C,MAAM,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAC;CAC5E,GACD,SAAS,EACb,MAAM,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GAAG,SAAS,GAChD,MAAM,CAER;AAMD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAExG;AAED,0DAA0D;AAC1D,eAAO,MAAM,oBAAoB,OAAO,CAAC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,iBAAiB,GAAG,iBAAiB,CA8B/E;AASD,+DAA+D;AAC/D,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAUnE;AAED,0DAA0D;AAC1D,wBAAgB,gBAAgB,IAAI,IAAI,CAIvC;AA2ED,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,mBAAmB,EAChC,QAAQ,CAAC,EAAE,gBAAgB,EAC3B,OAAO,CAAC,EAAE,MAAM;AAChB,kGAAkG;AAClG,WAAW,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GACxC,iBAAiB,GAAG,IAAI,CAsG1B;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,EACnD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,EAC5C,OAAO,CAAC,EAAE,MAAM,EAChB,WAAW,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GACxC,iBAAiB,EAAE,CA0BrB;AAiGD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,CAAC,EAAE;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,iBAAiB,CAyCpB;AAMD;;;;;;;GAOG;AACH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC,SAAS,CAAC,GAAG,MAAM,GAAG,SAAS,CA2B3G;AAED;;;;;;;;;GASG;AACH;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,EAC3D,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC,GAAG,SAAS,EACjD,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACd,oBAAoB,CActB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,mBAAmB,GAAG,SAAS,GAAG,OAAO,CAErF;AAED,wBAAgB,cAAc,CAC5B,MAAM,EAAE,oBAAoB,EAC5B,WAAW,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,EAC1E,WAAW,EAAE,MAAM,GAClB,iBAAiB,CAkInB;AAMD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,CAAC,EAAE;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,iBAAiB,CA8CpB;AAMD;;;;;;;;GAQG;AACH;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,oBAAoB,EAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC;AACxD;;;;;;;;;;;GAWG;AACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC5C;;;;;;;;;;;;;;GAcG;AACH,WAAW,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EACjC,cAAc,CAAC,EAAE;IACf,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,WAAW,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC,GACA,iBAAiB,EAAE,CA+DrB"}