@omnitron-dev/omnitron 0.3.0 → 0.3.2

package/dist/project/stack-placement.d.ts

@@ -0,0 +1,11 @@
+import type { IEcosystemAppEntry, IStackConfig, IStackNode } from '../config/types.js';
+export declare function stackNodeKey(host: string, port?: number): string;
+/** Preserve existing cluster exclusions; explicit placement always takes precedence. */
+export declare function nodeApplicationNames(stack: Pick<IStackConfig, 'type'>, node: IStackNode, applications: readonly string[]): readonly string[];
+export interface NodeApplicationPlacement {
+    node: IStackNode;
+    apps: IEcosystemAppEntry[];
+}
+/** The planner and executor use the same placement rules, before building or contacting a node. */
+export declare function resolveNodePlacements(stack: IStackConfig, apps: readonly IEcosystemAppEntry[]): NodeApplicationPlacement[];
+//# sourceMappingURL=stack-placement.d.ts.map

package/dist/project/stack-placement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack-placement.d.ts","sourceRoot":"","sources":["../../src/project/stack-placement.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGvF,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,SAAO,GAAG,MAAM,CAE9D;AAED,wFAAwF;AACxF,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,EACjC,IAAI,EAAE,UAAU,EAChB,YAAY,EAAE,SAAS,MAAM,EAAE,GAC9B,SAAS,MAAM,EAAE,CAInB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,kBAAkB,EAAE,CAAC;CAC5B;AAED,mGAAmG;AACnG,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE,SAAS,kBAAkB,EAAE,GAClC,wBAAwB,EAAE,CAoC5B"}

package/dist/project/stack-placement.js

@@ -0,0 +1,57 @@
+import { resolveStartupOrder } from '../orchestrator/dependency-resolver.js';
+export function stackNodeKey(host, port = 9700) {
+    return `${host.includes(':') ? `[${host}]` : host}:${port}`;
+}
+/** Preserve existing cluster exclusions; explicit placement always takes precedence. */
+export function nodeApplicationNames(stack, node, applications) {
+    if (node.apps !== undefined)
+        return node.apps;
+    if (stack.type === 'cluster' && (node.role === 'database' || node.role === 'cache'))
+        return [];
+    return applications;
+}
+/** The planner and executor use the same placement rules, before building or contacting a node. */
+export function resolveNodePlacements(stack, apps) {
+    const nodes = stack.nodes ?? [];
+    if (new Set(apps.map((app) => app.name)).size !== apps.length)
+        throw new Error('Duplicate application definitions');
+    resolveStartupOrder([...apps]);
+    if (stack.type === 'local')
+        return [];
+    if (!nodes.length)
+        throw new Error('A remote topology requires at least one node');
+    const names = new Set(apps.map((app) => app.name));
+    const seen = new Set();
+    const placed = new Set();
+    const result = nodes.map((node) => {
+        const key = stackNodeKey(node.host, node.port);
+        if (!node.host || /[\s/\\\0]/.test(node.host))
+            throw new Error('Node host must be a hostname or IP address');
+        if (node.port !== undefined && (!Number.isInteger(node.port) || node.port < 1 || node.port > 65535))
+            throw new Error(`Invalid daemon port on ${key}`);
+        if (seen.has(key))
+            throw new Error(`Node ${key} is listed more than once`);
+        seen.add(key);
+        const selected = nodeApplicationNames(stack, node, [...names]);
+        if (new Set(selected).size !== selected.length)
+            throw new Error(`Duplicate application placement on ${key}`);
+        for (const name of selected) {
+            if (!names.has(name))
+                throw new Error(`Application '${name}' on ${key} is not enabled in this stack`);
+            placed.add(name);
+        }
+        const entries = apps.filter((app) => selected.includes(app.name));
+        for (const app of entries)
+            for (const dependency of app.dependsOn ?? []) {
+                if (!selected.includes(dependency))
+                    throw new Error(`${app.name} on ${key} requires local startup dependency '${dependency}'. Place them together; remote readiness requires an explicit service binding, not a discarded dependsOn.`);
+            }
+        resolveStartupOrder(entries);
+        return { node, apps: entries };
+    });
+    const missing = [...names].filter((name) => !placed.has(name));
+    if (missing.length)
+        throw new Error(`Applications have no node placement: ${missing.join(', ')}`);
+    return result;
+}
+//# sourceMappingURL=stack-placement.js.map

package/dist/project/stack-placement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack-placement.js","sourceRoot":"","sources":["../../src/project/stack-placement.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAE7E,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,IAAI,GAAG,IAAI;IACpD,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,oBAAoB,CAClC,KAAiC,EACjC,IAAgB,EAChB,YAA+B;IAE/B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/F,OAAO,YAAY,CAAC;AACtB,CAAC;AAOD,mGAAmG;AACnG,MAAM,UAAU,qBAAqB,CACnC,KAAmB,EACnB,IAAmC;IAEnC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;IAChC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACpH,mBAAmB,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,CAAC;IACtC,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAChC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC7G,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;YACjG,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,EAAE,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,2BAA2B,CAAC,CAAC;QAC3E,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;QAC/D,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,GAAG,EAAE,CAAC,CAAC;QAC7G,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,QAAQ,GAAG,+BAA+B,CAAC,CAAC;YACtG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,KAAK,MAAM,GAAG,IAAI,OAAO;YACvB,KAAK,MAAM,UAAU,IAAI,GAAG,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;gBAC7C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;oBAChC,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,CAAC,IAAI,OAAO,GAAG,uCAAuC,UAAU,2GAA2G,CAClL,CAAC;YACN,CAAC;QACH,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACjC,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,IAAI,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClG,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/project/stack-stop-review.d.ts

@@ -0,0 +1,14 @@
+import type { StackStopReview } from '../shared/dto/project.js';
+import type { StackExecutionScope } from '../shared/dto/stack-execution.js';
+import { type NodeStackStopInventory } from './node-stack-stop.js';
+export type StopReviewTarget = {
+    node: string;
+    inventory: NodeStackStopInventory;
+} | {
+    node: string;
+    reason: string;
+};
+/** Bind a human review to the same generations, definition and resources used by execution.
+ * Node-issued nonces and their deadlines belong to execution and change on a fresh preparation. */
+export declare function stackStopReview(scope: StackExecutionScope, targets: StopReviewTarget[], keepInfrastructure?: boolean): StackStopReview;
+//# sourceMappingURL=stack-stop-review.d.ts.map

package/dist/project/stack-stop-review.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack-stop-review.d.ts","sourceRoot":"","sources":["../../src/project/stack-stop-review.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAA8B,KAAK,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE/F,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,sBAAsB,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtH;mGACmG;AACnG,wBAAgB,eAAe,CAAC,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,kBAAkB,UAAQ,GAAG,eAAe,CAgBpI"}

package/dist/project/stack-stop-review.js

@@ -0,0 +1,22 @@
+import { stackDefinitionFingerprint } from './node-stack-stop.js';
+/** Bind a human review to the same generations, definition and resources used by execution.
+ * Node-issued nonces and their deadlines belong to execution and change on a fresh preparation. */
+export function stackStopReview(scope, targets, keepInfrastructure = false) {
+    const evidence = [];
+    const observations = targets.map(target => {
+        if ('reason' in target)
+            return target;
+        const { inventory, node } = target;
+        const { execution, containers, audience } = inventory;
+        evidence.push([node, inventory.project, inventory.stack, inventory.applications, inventory.definition,
+            audience ? [audience.clusterId, audience.nodeId] : null,
+            execution ? [execution.project, execution.stack, execution.phase, execution.revision, execution.apps.map(a => [a.name, a.generation])] : null,
+            containers.map(c => [c.id, c.name])]);
+        return { node, ...(execution && { runtime: { project: execution.project, stack: execution.stack } }),
+            applications: execution?.apps.map(app => app.name) ?? [], containers: containers.map(container => container.name) };
+    });
+    const digest = targets.length && evidence.length === targets.length
+        ? stackDefinitionFingerprint([keepInfrastructure ? 'omnitron/stack.stop.keep-infrastructure.review/v1' : 'omnitron/stack.stop.review/v1', scope.project, scope.stack, evidence]) : null;
+    return { ...scope, ...(keepInfrastructure && { keepInfrastructure: true }), checkedAt: new Date().toISOString(), digest, targets: observations };
+}
+//# sourceMappingURL=stack-stop-review.js.map

package/dist/project/stack-stop-review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack-stop-review.js","sourceRoot":"","sources":["../../src/project/stack-stop-review.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,0BAA0B,EAA+B,MAAM,sBAAsB,CAAC;AAI/F;mGACmG;AACnG,MAAM,UAAU,eAAe,CAAC,KAA0B,EAAE,OAA2B,EAAE,kBAAkB,GAAG,KAAK;IACjH,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;QACxC,IAAI,QAAQ,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QACtC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;QACnC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC;QACtD,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,UAAU;YACnG,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;YACvD,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YAC7I,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;YAClG,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;IACxH,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;QACjE,CAAC,CAAC,0BAA0B,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,mDAAmD,CAAC,CAAC,CAAC,+BAA+B,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1L,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,CAAC,kBAAkB,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;AACnJ,CAAC"}

package/dist/project/stack-targets.d.ts

@@ -0,0 +1,24 @@
+import type { DaemonStateStore } from '../daemon/daemon-state-store.service.js';
+import { type StackExecutionScope } from '../shared/dto/stack-execution.js';
+export interface StackTarget {
+    host: string;
+    port: number;
+    applications: boolean;
+    nodeId?: string;
+}
+interface TargetState {
+    version: 1;
+    revision: number;
+    nodes: StackTarget[];
+}
+/** Deployment destinations remain obligations until every node confirms a stop. */
+export declare class StackTargets {
+    private readonly store;
+    constructor(store: Pick<DaemonStateStore, 'kvGetSync' | 'kvUpdateSync'>);
+    private key;
+    inspect(scope: StackExecutionScope, declared?: StackTarget[]): TargetState;
+    remember(scope: StackExecutionScope, targets: StackTarget[]): void;
+    confirmStopped(scope: StackExecutionScope, revision: number): void;
+}
+export {};
+//# sourceMappingURL=stack-targets.d.ts.map

package/dist/project/stack-targets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack-targets.d.ts","sourceRoot":"","sources":["../../src/project/stack-targets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAqB,KAAK,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAG/F,MAAM,WAAW,WAAW;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;AACnG,UAAU,WAAW;IAAG,OAAO,EAAE,CAAC,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,WAAW,EAAE,CAAA;CAAE;AAmC5E,mFAAmF;AACnF,qBAAa,YAAY;IACX,OAAO,CAAC,QAAQ,CAAC,KAAK;IAAlC,YAA6B,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,WAAW,GAAG,cAAc,CAAC,EAAI;IAC5F,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,KAAK,EAAE,mBAAmB,EAAE,QAAQ,GAAE,WAAW,EAAO,GAAG,WAAW,CAG7E;IACD,QAAQ,CAAC,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,CAMjE;IACD,cAAc,CAAC,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAOjE;CACF"}

package/dist/project/stack-targets.js

@@ -0,0 +1,67 @@
+import { stackExecutionKey } from '../shared/dto/stack-execution.js';
+import { stackNodeKey } from './stack-placement.js';
+function merge(...sets) {
+    const nodes = new Map();
+    const endpoints = new Map();
+    for (const targets of sets)
+        for (const target of targets) {
+            if (!target || typeof target.host !== 'string' || !target.host || /[\s/\\\0]/.test(target.host) ||
+                !Number.isInteger(target.port) || target.port < 1 || target.port > 65535 || typeof target.applications !== 'boolean' ||
+                (target.nodeId !== undefined && (typeof target.nodeId !== 'string' || !/^[a-zA-Z0-9][a-zA-Z0-9_.-]{0,127}$/.test(target.nodeId)))) {
+                throw new Error('Corrupt stack target inventory');
+            }
+            const key = stackNodeKey(target.host, target.port);
+            const previous = nodes.get(key);
+            if (target.nodeId) {
+                const pinned = endpoints.get(target.nodeId);
+                if (pinned && pinned !== key)
+                    throw new Error(`Recipient ${target.nodeId} is already pinned to ${pinned}; reconcile the previous allocation first`);
+                endpoints.set(target.nodeId, key);
+            }
+            if (previous?.nodeId && target.nodeId && previous.nodeId !== target.nodeId) {
+                throw new Error(`Recipient identity changed for ${key}; reconcile the previous allocation first`);
+            }
+            nodes.set(key, { ...previous, ...target, ...(previous?.nodeId && { nodeId: previous.nodeId }),
+                applications: target.applications || previous?.applications === true });
+        }
+    return [...nodes.values()].sort((a, b) => stackNodeKey(a.host, a.port).localeCompare(stackNodeKey(b.host, b.port)));
+}
+function read(value) {
+    if (value === null)
+        return { version: 1, revision: 0, nodes: [] };
+    if (value.version !== 1 || !Number.isSafeInteger(value.revision) || value.revision < 0 || !Array.isArray(value.nodes)) {
+        throw new Error('Corrupt stack target journal');
+    }
+    return { ...value, nodes: merge(value.nodes) };
+}
+/** Deployment destinations remain obligations until every node confirms a stop. */
+export class StackTargets {
+    store;
+    constructor(store) {
+        this.store = store;
+    }
+    key(scope) { return `lifecycle:stack-targets:${stackExecutionKey(scope)}`; }
+    inspect(scope, declared = []) {
+        const state = read(this.store.kvGetSync(this.key(scope), { strict: true }));
+        return { ...state, nodes: merge(state.nodes, declared) };
+    }
+    remember(scope, targets) {
+        this.store.kvUpdateSync(this.key(scope), current => {
+            const state = read(current);
+            if (state.revision === Number.MAX_SAFE_INTEGER)
+                throw new Error('Stack target revision exhausted');
+            return { version: 1, revision: state.revision + 1, nodes: merge(state.nodes, targets) };
+        });
+    }
+    confirmStopped(scope, revision) {
+        this.store.kvUpdateSync(this.key(scope), current => {
+            const state = read(current);
+            if (state.revision !== revision)
+                throw new Error('Deployment targets changed during stop; inspect and reconcile again');
+            if (state.revision === Number.MAX_SAFE_INTEGER)
+                throw new Error('Stack target revision exhausted');
+            return { version: 1, revision: state.revision + 1, nodes: [] };
+        });
+    }
+}
+//# sourceMappingURL=stack-targets.js.map

package/dist/project/stack-targets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack-targets.js","sourceRoot":"","sources":["../../src/project/stack-targets.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAA4B,MAAM,kCAAkC,CAAC;AAC/F,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAKpD,SAAS,KAAK,CAAC,GAAG,IAA8B;IAC9C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC7C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,KAAK,MAAM,OAAO,IAAI,IAAI;QAAE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YACzD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBAC3F,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,KAAK,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,SAAS;gBACpH,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtI,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YACD,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC5C,IAAI,MAAM,IAAI,MAAM,KAAK,GAAG;oBAAE,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,CAAC,MAAM,yBAAyB,MAAM,2CAA2C,CAAC,CAAC;gBACpJ,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACpC,CAAC;YACD,IAAI,QAAQ,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC3E,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,2CAA2C,CAAC,CAAC;YACpG,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC3F,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,QAAQ,EAAE,YAAY,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5E,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACtH,CAAC;AAED,SAAS,IAAI,CAAC,KAAyB;IACrC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAClE,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACtH,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,mFAAmF;AACnF,MAAM,OAAO,YAAY;IACM,KAAK;IAAlC,YAA6B,KAA2D;qBAA3D,KAAK;IAAyD,CAAC;IACpF,GAAG,CAAC,KAA0B,IAAY,OAAO,2BAA2B,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACjH,OAAO,CAAC,KAA0B,EAAE,QAAQ,GAAkB,EAAE;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAc,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACzF,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;IAC3D,CAAC;IACD,QAAQ,CAAC,KAA0B,EAAE,OAAsB;QACzD,IAAI,CAAC,KAAK,CAAC,YAAY,CAAc,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,EAAE;YAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5B,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,gBAAgB;gBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACnG,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QAC1F,CAAC,CAAC,CAAC;IACL,CAAC;IACD,cAAc,CAAC,KAA0B,EAAE,QAAgB;QACzD,IAAI,CAAC,KAAK,CAAC,YAAY,CAAc,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,EAAE;YAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5B,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;YACxH,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,gBAAgB;gBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACnG,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACjE,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/project/stand-containers.d.ts

@@ -1,4 +1,11 @@
-export declare function standContainers(prefix: string): Readonly<Record<string, string>>;
+/**
+ * Project tools may already consume <PROJECT>_*_CONTAINER variables. Derive
+ * that namespace from the registered project, independently of a custom
+ * container prefix, so existing tools continue to work without project names
+ * in the runtime. The fallback supports the conventional <project>-<stack>
+ * prefix for standalone callers; the daemon always supplies projectName.
+ */
+export declare function standContainers(prefix: string, projectName?: string): Readonly<Record<string, string>>;
 /** The same, as shell assignments to put before a command. */
-export declare function standContainerAssignments(prefix: string): string;
+export declare function standContainerAssignments(prefix: string, projectName?: string): string;
 //# sourceMappingURL=stand-containers.d.ts.map

package/dist/project/stand-containers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stand-containers.d.ts","sourceRoot":"","sources":["../../src/project/stand-containers.ts"],"names":[],"mappings":"AAcA,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAMhF;AAED,8DAA8D;AAC9D,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAIhE"}
+{"version":3,"file":"stand-containers.d.ts","sourceRoot":"","sources":["../../src/project/stand-containers.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAUtG;AAED,8DAA8D;AAC9D,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAItF"}

package/dist/project/stand-containers.js

@@ -1,26 +1,26 @@
+/** Container environment shared by project tools and release probes. */
+import { shellEscape } from '../shared/shell-escape.js';
 /**
- * The names the project's tools look the stand's containers up by, as they
- * are on a node — `<prefix>-postgres`, not the developer's `daos-dev-postgres`
- * the tools default to.
- *
- * One table for every tool this master runs on a node. There were two: the
- * attestation's with three names and the operator-account tool's with two —
- * no gateway. When signup began reading the legal texts in force from the
- * gateway (daos c0dcf556), `omnitron stack account daos test` looked for
- * `daos-dev-gateway` on the test node and made no account (2026-09-25):
- * «No such container: daos-dev-gateway».
+ * Project tools may already consume <PROJECT>_*_CONTAINER variables. Derive
+ * that namespace from the registered project, independently of a custom
+ * container prefix, so existing tools continue to work without project names
+ * in the runtime. The fallback supports the conventional <project>-<stack>
+ * prefix for standalone callers; the daemon always supplies projectName.
  */
-import { shellEscape } from '../shared/shell-escape.js';
-export function standContainers(prefix) {
+export function standContainers(prefix, projectName) {
+    const namespace = (projectName ?? prefix.replace(/-[^-]+$/, '')).toUpperCase().replace(/[^A-Z0-9_]/g, '_');
+    if (!/^[A-Z_][A-Z0-9_]*$/.test(namespace)) {
+        throw new Error('A project name must produce a valid environment variable namespace');
+    }
     return {
-        DAOS_PG_CONTAINER: `${prefix}-postgres`,
-        DAOS_REDIS_CONTAINER: `${prefix}-redis`,
-        DAOS_GATEWAY_CONTAINER: `${prefix}-gateway`,
+        [`${namespace}_PG_CONTAINER`]: `${prefix}-postgres`,
+        [`${namespace}_REDIS_CONTAINER`]: `${prefix}-redis`,
+        [`${namespace}_GATEWAY_CONTAINER`]: `${prefix}-gateway`,
     };
 }
 /** The same, as shell assignments to put before a command. */
-export function standContainerAssignments(prefix) {
-    return Object.entries(standContainers(prefix))
+export function standContainerAssignments(prefix, projectName) {
+    return Object.entries(standContainers(prefix, projectName))
         .map(([k, v]) => `${k}=${shellEscape(v)}`)
         .join(' ');
 }

package/dist/project/stand-containers.js.map

@@ -1 +1 @@
-{"version":3,"file":"stand-containers.js","sourceRoot":"","sources":["../../src/project/stand-containers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAExD,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO;QACL,iBAAiB,EAAE,GAAG,MAAM,WAAW;QACvC,oBAAoB,EAAE,GAAG,MAAM,QAAQ;QACvC,sBAAsB,EAAE,GAAG,MAAM,UAAU;KAC5C,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,yBAAyB,CAAC,MAAc;IACtD,OAAO,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;SAC3C,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;SACzC,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"stand-containers.js","sourceRoot":"","sources":["../../src/project/stand-containers.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAExD;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,WAAoB;IAClE,MAAM,SAAS,GAAG,CAAC,WAAW,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IAC3G,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO;QACL,CAAC,GAAG,SAAS,eAAe,CAAC,EAAE,GAAG,MAAM,WAAW;QACnD,CAAC,GAAG,SAAS,kBAAkB,CAAC,EAAE,GAAG,MAAM,QAAQ;QACnD,CAAC,GAAG,SAAS,oBAAoB,CAAC,EAAE,GAAG,MAAM,UAAU;KACxD,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,yBAAyB,CAAC,MAAc,EAAE,WAAoB;IAC5E,OAAO,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;SACxD,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;SACzC,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC"}

package/dist/project/topology-control.d.ts

@@ -0,0 +1,41 @@
+import type { IEcosystemAppEntry, IEcosystemConfig, IStackConfig } from '../config/types.js';
+import type { IStackInfo, ProjectTopology } from '../shared/dto/project.js';
+import type { TopologyScope, TopologySpec, TopologyPlan, TopologyWorkspace } from '../shared/dto/topology.js';
+import { TopologyStateStore } from './topology-state.js';
+export interface TopologySources {
+    configuration(scope: TopologyScope): Promise<{
+        config: IEcosystemConfig;
+        stack: IStackConfig;
+        apps: IEcosystemAppEntry[];
+        userStacks: Record<string, IStackConfig>;
+    }>;
+    observation(scope: TopologyScope): Promise<IStackInfo>;
+    dependencies(scope: TopologyScope): Promise<ProjectTopology>;
+    nodes(): TopologyWorkspace['availableNodes'];
+}
+/** Owns target intent. It has no process, SSH, provisioning or restart capabilities. */
+export declare class TopologyControl {
+    private readonly state;
+    private readonly sources;
+    constructor(state: TopologyStateStore, sources: TopologySources);
+    private context;
+    workspace(scope: TopologyScope): Promise<TopologyWorkspace>;
+    saveDraft(data: TopologyScope & {
+        baseRevision: string;
+        expectedDraft: number | null;
+        spec: TopologySpec;
+    }): Promise<import("../shared/dto/topology.js").TopologyDraft>;
+    plan(data: TopologyScope & {
+        draftRevision: number;
+    }): Promise<TopologyPlan>;
+    apply(data: TopologyScope & {
+        plan: string;
+    }, actor: {
+        actorId: string | null;
+        actorType: string;
+    }): Promise<{
+        plan: TopologyPlan;
+        changed: boolean;
+    }>;
+}
+//# sourceMappingURL=topology-control.d.ts.map

package/dist/project/topology-control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"topology-control.d.ts","sourceRoot":"","sources":["../../src/project/topology-control.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC7F,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAU9G,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAIzD,MAAM,WAAW,eAAe;IAC9B,aAAa,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC;QAC3C,MAAM,EAAE,gBAAgB,CAAC;QACzB,KAAK,EAAE,YAAY,CAAC;QACpB,IAAI,EAAE,kBAAkB,EAAE,CAAC;QAC3B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;KAC1C,CAAC,CAAC;IACH,WAAW,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACvD,YAAY,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC7D,KAAK,IAAI,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;CAC9C;AAED,wFAAwF;AACxF,qBAAa,eAAe;IAExB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAF1B,YACmB,KAAK,EAAE,kBAAkB,EACzB,OAAO,EAAE,eAAe,EACvC;YAEU,OAAO;IAcf,SAAS,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAuBhE;IAEK,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,EAAE,YAAY,CAAA;KAAE,8DAK/G;IAEK,IAAI,CAAC,IAAI,EAAE,aAAa,GAAG;QAAE,aAAa,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAqEjF;IAEK,KAAK,CAAC,IAAI,EAAE,aAAa,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;;;OAKvG;CACF"}

package/dist/project/topology-control.js

@@ -0,0 +1,133 @@
+import { randomUUID } from 'node:crypto';
+import { mergeInfrastructure } from '../infrastructure/merge-config.js';
+import { topologyChanges, topologyIssues, topologyRevision, topologySpec, validateTopologySpec, } from './topology-plan.js';
+import { topologyServices } from './topology-services.js';
+import { TopologyStateStore } from './topology-state.js';
+import { publicStack } from './public-stack.js';
+import { stackNodeKey } from './stack-observation.js';
+/** Owns target intent. It has no process, SSH, provisioning or restart capabilities. */
+export class TopologyControl {
+    state;
+    sources;
+    constructor(state, sources) {
+        this.state = state;
+        this.sources = sources;
+    }
+    async context(scope) {
+        const { config, stack, apps, userStacks } = await this.sources.configuration(scope);
+        const configured = topologySpec(stack, apps);
+        const desired = this.state.read(scope).desired ?? configured;
+        return {
+            config,
+            stack,
+            configured,
+            desired,
+            applications: config.apps.filter((app) => app.enabled !== false),
+            revision: topologyRevision({ config, userStacks, desired }),
+        };
+    }
+    async workspace(scope) {
+        const context = await this.context(scope);
+        const state = this.state.read(scope);
+        const [observed, graph] = await Promise.all([this.sources.observation(scope), this.sources.dependencies(scope)]);
+        return {
+            ...scope,
+            revision: context.revision,
+            configured: context.configured,
+            desired: context.desired,
+            draft: state.draft,
+            plans: state.plans,
+            applications: context.applications.map((app) => ({
+                name: app.name,
+                runtime: 'process',
+                dependsOn: app.dependsOn ?? [],
+            })),
+            services: topologyServices(mergeInfrastructure(context.config, context.stack), context.stack, graph.dependencies),
+            availableNodes: this.sources.nodes(),
+            observed: publicStack(observed),
+            dependencies: graph.dependencies,
+            coverage: graph.coverage ?? [],
+            warnings: graph.warnings.map((warning) => `${warning.app ?? scope.stack}: ${warning.reason}`),
+        };
+    }
+    async saveDraft(data) {
+        const context = await this.context(data);
+        if (data.baseRevision !== context.revision)
+            throw new Error('Topology configuration changed; reload and rebase the draft');
+        return this.state.saveDraft(data, context.revision, validateTopologySpec(data.spec), data.expectedDraft);
+    }
+    async plan(data) {
+        const context = await this.context(data);
+        const draft = this.state.read(data).draft;
+        if (!draft || draft.revision !== data.draftRevision)
+            throw new Error('Topology draft changed; reload before planning');
+        if (draft.baseRevision !== context.revision)
+            throw new Error('Draft is based on an older configuration; rebase before planning');
+        const issues = topologyIssues(draft.spec, context.applications);
+        const configured = new Map(context.configured.nodes.map(node => [stackNodeKey(node.host, node.port), node]));
+        const fleet = new Map(this.sources.nodes().map(node => [stackNodeKey(node.host, node.port), node]));
+        for (const node of draft.spec.nodes) {
+            const endpoint = stackNodeKey(node.host, node.port);
+            const previous = configured.get(endpoint);
+            const registered = fleet.get(endpoint);
+            if (!registered && !previous)
+                issues.push({
+                    severity: 'error',
+                    code: 'unregistered-node',
+                    message: `${stackNodeKey(node.host, node.port)} is not a registered fleet node`,
+                });
+            if ((previous?.nodeId && previous.nodeId !== node.nodeId) ||
+                (node.nodeId && previous?.nodeId !== node.nodeId && registered?.id !== node.nodeId) ||
+                (node.nodeId && registered && registered.id !== node.nodeId)) {
+                issues.push({ severity: 'error', code: 'recipient-identity', message: `Reconcile the registered identity and existing allocation at ${endpoint} before changing its pin` });
+            }
+        }
+        if (draft.spec.type !== context.stack.type)
+            issues.push({
+                severity: 'error',
+                code: 'runtime-transition',
+                message: 'Changing local/remote/cluster ownership requires a separate migration; create another stack and plan its rollout',
+            });
+        const changes = topologyChanges(context.desired, draft.spec);
+        if (changes.some((change) => change.resource === 'node'))
+            issues.push({
+                severity: 'warning',
+                code: 'infrastructure-placement',
+                message: 'Current deployment provisions managed stack infrastructure on each declared node. It does not replicate databases or migrate volumes. Service placement needs its own execution plan.',
+            });
+        if (changes.some((change) => change.action === 'remove'))
+            issues.push({
+                severity: 'warning',
+                code: 'retained-workloads',
+                message: 'Removing a placement from a target does not stop processes or delete data. The runtime map continues to show configured and observed placements.',
+            });
+        issues.push({
+            severity: 'warning',
+            code: 'intent-only',
+            message: 'Accepting this plan stores the target topology. It does not change deployment or restart configuration. Runtime placement changes require a separately admitted execution plan; this version does not execute topology migrations.',
+        });
+        const now = Date.now();
+        return this.state.addPlan(data, {
+            project: data.project,
+            stack: data.stack,
+            id: randomUUID(),
+            baseRevision: context.revision,
+            draftRevision: draft.revision,
+            createdAt: new Date(now).toISOString(),
+            expiresAt: new Date(now + 600_000).toISOString(),
+            spec: draft.spec,
+            changes,
+            issues,
+            effect: 'configuration',
+            status: 'planned',
+        });
+    }
+    async apply(data, actor) {
+        const context = await this.context(data);
+        const prior = this.state.read(data).plans.find((plan) => plan.id === data.plan);
+        if (prior?.status === 'applied')
+            return { plan: prior, changed: false };
+        return { plan: this.state.apply(data, data.plan, context.revision, actor), changed: true };
+    }
+}
+//# sourceMappingURL=topology-control.js.map

package/dist/project/topology-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"topology-control.js","sourceRoot":"","sources":["../../src/project/topology-control.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EACL,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AActD,wFAAwF;AACxF,MAAM,OAAO,eAAe;IAEP,KAAK;IACL,OAAO;IAF1B,YACmB,KAAyB,EACzB,OAAwB;qBADxB,KAAK;uBACL,OAAO;IACvB,CAAC;IAEI,KAAK,CAAC,OAAO,CAAC,KAAoB;QACxC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACpF,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;QAC7D,OAAO;YACL,MAAM;YACN,KAAK;YACL,UAAU;YACV,OAAO;YACP,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,KAAK,CAAC;YAChE,QAAQ,EAAE,gBAAgB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;SAC5D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAoB;QAClC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACjH,OAAO;YACL,GAAG,KAAK;YACR,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,YAAY,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC/C,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,OAAO,EAAE,SAAS;gBAClB,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE;aAC/B,CAAC,CAAC;YACH,QAAQ,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,YAAY,CAAC;YACjH,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;YACpC,QAAQ,EAAE,WAAW,CAAC,QAAQ,CAAC;YAC/B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;YAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;SAC9F,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAgG;QAC9G,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,YAAY,KAAK,OAAO,CAAC,QAAQ;YACxC,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IAC3G,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAA+C;QACxD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC;QAC1C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,aAAa;YACjD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,IAAI,KAAK,CAAC,YAAY,KAAK,OAAO,CAAC,QAAQ;YACzC,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACtF,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7G,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACpG,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACpD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ;gBAC1B,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,mBAAmB;oBACzB,OAAO,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,iCAAiC;iBAChF,CAAC,CAAC;YACL,IAAI,CAAC,QAAQ,EAAE,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC;gBACrD,CAAC,IAAI,CAAC,MAAM,IAAI,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,UAAU,EAAE,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC;gBACnF,CAAC,IAAI,CAAC,MAAM,IAAI,UAAU,IAAI,UAAU,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjE,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,gEAAgE,QAAQ,0BAA0B,EAAE,CAAC,CAAC;YAC9K,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,KAAK,CAAC,IAAI;YACxC,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EACL,kHAAkH;aACrH,CAAC,CAAC;QACL,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7D,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EACL,uLAAuL;aAC1L,CAAC,CAAC;QACL,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EACL,kJAAkJ;aACrJ,CAAC,CAAC;QACL,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,aAAa;YACnB,OAAO,EACL,oOAAoO;SACvO,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE;YAC9B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,EAAE,EAAE,UAAU,EAAE;YAChB,YAAY,EAAE,OAAO,CAAC,QAAQ;YAC9B,aAAa,EAAE,KAAK,CAAC,QAAQ;YAC7B,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;YACtC,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,CAAC,WAAW,EAAE;YAChD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO;YACP,MAAM;YACN,MAAM,EAAE,eAAe;YACvB,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAsC,EAAE,KAAoD;QACtG,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;QAChF,IAAI,KAAK,EAAE,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACxE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7F,CAAC;CACF"}

package/dist/project/topology-plan.d.ts

@@ -0,0 +1,11 @@
+import type { IEcosystemAppEntry, IStackConfig } from '../config/types.js';
+import type { TopologySpec, TopologyChange, TopologyIssue } from '../shared/dto/topology.js';
+export declare const topologyRevision: (value: unknown) => string;
+export declare function topologySpec(config: IStackConfig, apps: readonly IEcosystemAppEntry[]): TopologySpec;
+/** Closed input schema: unknown fields cannot smuggle credentials or execution options through the editor. */
+export declare function validateTopologySpec(input: unknown): TopologySpec;
+/** Reuse deployment configuration and preserve SSH references outside the portable document. */
+export declare function applyTopologySpec(base: IStackConfig, spec: TopologySpec): IStackConfig;
+export declare function topologyChanges(before: TopologySpec, after: TopologySpec): TopologyChange[];
+export declare function topologyIssues(spec: TopologySpec, apps: readonly IEcosystemAppEntry[]): TopologyIssue[];
+//# sourceMappingURL=topology-plan.d.ts.map

package/dist/project/topology-plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"topology-plan.d.ts","sourceRoot":"","sources":["../../src/project/topology-plan.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAa7F,eAAO,MAAM,gBAAgB,UAAW,OAAO,KAAG,MAGhC,CAAC;AAEnB,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,kBAAkB,EAAE,GAAG,YAAY,CAepG;AAED,8GAA8G;AAC9G,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,CAqDjE;AAED,gGAAgG;AAChG,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,GAAG,YAAY,CAatF;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,GAAG,cAAc,EAAE,CAmC3F;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,kBAAkB,EAAE,GAAG,aAAa,EAAE,CAgBvG"}