@omnitron-dev/omnitron 0.3.1 → 0.3.2

package/dist/release/artifact-volumes.js

@@ -0,0 +1,112 @@
+/** Declarative artifact mounts. Only the ordinary local release installer supplies roots. */
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { mergeInfrastructure } from '../infrastructure/merge-config.js';
+const name = (value) => typeof value === 'string' && /^[A-Za-z0-9][A-Za-z0-9._-]{0,255}$/.test(value) && !value.includes('..');
+// eslint-disable-next-line no-control-regex -- Deliberately reject control bytes in declarative Docker mount paths.
+const relative = (value) => typeof value === 'string' && value.length <= 4096 && !/[\\:\x00-\x1f\x7f]/.test(value) &&
+    value.split('/').every(part => !!part && part !== '.' && part !== '..' && part.toLowerCase() !== 'node_modules');
+const target = (value) => typeof value === 'string' && value.startsWith('/') && relative(value.slice(1));
+const overlap = (a, b) => a === b || a.startsWith(b + '/') || b.startsWith(a + '/');
+/** Synchronous structural checks run before archive preparation or deployment mutations. */
+export function artifactVolumeBindings(infrastructure, requireServices = true) {
+    const raw = infrastructure?.artifactVolumes;
+    if (raw === undefined)
+        return [];
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw) || Object.keys(raw).length > 64)
+        throw Error('Invalid artifact volume declarations');
+    const selected = [];
+    for (const [key, binding] of Object.entries(raw)) {
+        if (!name(key) || !binding || typeof binding !== 'object' || Array.isArray(binding) ||
+            Object.keys(binding).some(field => !['service', 'app', 'directory', 'target'].includes(field)) ||
+            !name(binding.service) || !name(binding.app) || !relative(binding.directory) || !target(binding.target))
+            throw Error('Artifact volume requires an exact service, artifact and physical package-relative directory: ' + key);
+        const service = infrastructure?.services?.[binding.service];
+        if (requireServices && (!service || 'preset' in service || !service.docker))
+            throw Error('Artifact volume requires a custom Docker service: ' + binding.service);
+        const docker = service && !('preset' in service) ? service.docker : undefined;
+        for (const volumes of [docker?.volumes, ...Object.values(docker?.variants ?? {}).map(variant => variant.volumes)]) {
+            if (volumes && Object.hasOwn(volumes, key))
+                throw Error('Artifact volume conflicts with an existing volume key: ' + key);
+            for (const value of Object.values(volumes ?? {})) {
+                const destination = typeof value === 'string' ? value : value.target;
+                if (!target(destination) || overlap(binding.target, destination))
+                    throw Error('Artifact volume overlaps another mount target: ' + binding.target);
+            }
+        }
+        if (selected.some(([, other]) => other.service === binding.service && overlap(other.target, binding.target)))
+            throw Error('Artifact volumes have overlapping mount targets: ' + binding.target);
+        selected.push([key, { ...binding }]);
+    }
+    return selected;
+}
+export function artifactVolumeEntries(infrastructure, entries, requireServices = true) {
+    const names = new Set(artifactVolumeBindings(infrastructure, requireServices).map(([, binding]) => binding.app));
+    return [...names].map(app => {
+        const found = entries.filter(entry => entry.name === app);
+        if (found.length !== 1)
+            throw Error('Artifact volume requires one declared consumer application: ' + app);
+        return found[0];
+    });
+}
+/** Include disabled payload declarations only when a stack explicitly mounts their artifacts. */
+export function releaseBuildEntries(config) {
+    const required = new Set(artifactVolumeEntries(config.infrastructure, config.apps, false).map(entry => entry.name));
+    for (const stack of Object.values(config.stacks ?? {})) {
+        for (const entry of artifactVolumeEntries(mergeInfrastructure(config, stack), config.apps, false))
+            required.add(entry.name);
+    }
+    // enabled is a runtime membership switch. The importer/builders see an explicitly required payload.
+    return config.apps.filter(entry => entry.enabled !== false || required.has(entry.name)).map(entry => required.has(entry.name) ? { ...entry, enabled: true } : entry);
+}
+/** No symlink at any source segment or within the served tree, and no dependency exposure. */
+async function physicalDirectory(root, directory) {
+    if (!relative(directory) || !path.isAbsolute(root) || await fs.realpath(root) !== root)
+        throw Error('Artifact volume root is not physical');
+    // The ordinary Docker encoder uses colon-delimited -v. A physical
+    // installation root must not introduce separators or control characters.
+    // eslint-disable-next-line no-control-regex -- Physical installation paths must reject the same control bytes as declarations.
+    if (/[\\:\x00-\x1f\x7f]/.test(path.join(root, directory)))
+        throw Error('Artifact volume source cannot be encoded as a Docker mount');
+    let selected = root;
+    for (const part of directory.split('/')) {
+        selected = path.join(selected, part);
+        if (!(await fs.lstat(selected)).isDirectory() || await fs.realpath(selected) !== selected)
+            throw Error('Artifact volume directory is not physical');
+    }
+    const pending = [selected];
+    let count = 0;
+    while (pending.length) {
+        const parent = pending.pop();
+        for (const child of await fs.readdir(parent)) {
+            if (++count > 200_000 || child.toLowerCase() === 'node_modules')
+                throw Error('Artifact volume exposes dependencies or exceeds its member limit');
+            const file = path.join(parent, child), stat = await fs.lstat(file);
+            if (stat.isSymbolicLink() || (!stat.isDirectory() && !stat.isFile()) || (stat.isFile() && stat.nlink !== 1))
+                throw Error('Artifact volume contains a link or special file');
+            if (stat.isDirectory())
+                pending.push(file);
+        }
+    }
+    return selected;
+}
+/** Replace declarations only in an ephemeral provisioning copy. No config/store/selection writes. */
+export async function bindArtifactVolumes(infrastructure, roots) {
+    const bindings = artifactVolumeBindings(infrastructure);
+    if (!bindings.length)
+        return infrastructure;
+    const { artifactVolumes: _declared, ...resolved } = structuredClone(infrastructure);
+    for (const [key, binding] of bindings) {
+        const root = roots.get(binding.app);
+        if (!root)
+            throw Error('No verified local installation for artifact volume: ' + binding.app);
+        const source = await physicalDirectory(root, binding.directory);
+        const service = resolved.services[binding.service];
+        if ('preset' in service || !service.docker)
+            throw Error('Artifact volume service changed');
+        const mount = { source, target: binding.target, readonly: true };
+        service.docker.volumes = { ...service.docker.volumes, [key]: mount };
+    }
+    return resolved;
+}
+//# sourceMappingURL=artifact-volumes.js.map

package/dist/release/artifact-volumes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-volumes.js","sourceRoot":"","sources":["../../src/release/artifact-volumes.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAExE,MAAM,IAAI,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACzJ,oHAAoH;AACpH,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;IAC1I,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,cAAc,CAAC,CAAC;AACnH,MAAM,MAAM,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACnI,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;AAEpG,4FAA4F;AAC5F,MAAM,UAAU,sBAAsB,CAAC,cAAqC,EAAE,eAAe,GAAG,IAAI;IAClG,MAAM,GAAG,GAAG,cAAc,EAAE,eAAe,CAAC;IAC5C,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC/I,MAAM,QAAQ,GAA2C,EAAE,CAAC;IAC5D,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAC/E,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC9F,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;YACzG,MAAM,KAAK,CAAC,+FAA+F,GAAG,GAAG,CAAC,CAAC;QACrH,MAAM,OAAO,GAAG,cAAc,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,eAAe,IAAI,CAAC,CAAC,OAAO,IAAI,QAAQ,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YACzE,MAAM,KAAK,CAAC,oDAAoD,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QACtF,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,KAAK,MAAM,OAAO,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAClH,IAAI,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC;gBAAE,MAAM,KAAK,CAAC,yDAAyD,GAAG,GAAG,CAAC,CAAC;YACzH,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;gBACjD,MAAM,WAAW,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;gBACrE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC;oBAAE,MAAM,KAAK,CAAC,iDAAiD,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YACpJ,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC1G,MAAM,KAAK,CAAC,mDAAmD,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QACpF,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,cAAgD,EAAE,OAAsC,EAAE,eAAe,GAAG,IAAI;IACpJ,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,sBAAsB,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACjH,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;QAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;QAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC,8DAA8D,GAAG,GAAG,CAAC,CAAC;QAC1G,OAAO,KAAK,CAAC,CAAC,CAAE,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,mBAAmB,CAAC,MAAwB;IAC1D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,qBAAqB,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACpH,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QACvD,KAAK,MAAM,KAAK,IAAI,qBAAqB,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9H,CAAC;IACD,oGAAoG;IACpG,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAClG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AACpE,CAAC;AAED,8FAA8F;AAC9F,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,SAAiB;IAC9D,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,MAAM,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC5I,kEAAkE;IAClE,yEAAyE;IACzE,+HAA+H;IAC/H,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAAE,MAAM,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACrI,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACtJ,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAG,CAAC;QAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7C,IAAI,EAAE,KAAK,GAAG,OAAO,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,cAAc;gBAAE,MAAM,KAAK,CAAC,kEAAkE,CAAC,CAAC;YACjJ,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACnE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC;gBACzG,MAAM,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACjE,IAAI,IAAI,CAAC,WAAW,EAAE;gBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,cAAgD,EAAE,KAAkC;IAC5H,MAAM,QAAQ,GAAG,sBAAsB,CAAC,cAAc,CAAC,CAAC;IACxD,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,cAAc,CAAC;IAC5C,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,eAAe,CAAC,cAAe,CAAC,CAAC;IACrF,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI;YAAE,MAAM,KAAK,CAAC,sDAAsD,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7F,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAS,CAAC,OAAO,CAAC,OAAO,CAAE,CAAC;QACrD,IAAI,QAAQ,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAC3F,MAAM,KAAK,GAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/E,OAAO,CAAC,MAAM,CAAC,OAAO,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC;IACvE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/release/build-run.d.ts

@@ -11,12 +11,16 @@
  * What a release IS, and why it is built from clean clones of two commits, is
  * in `release/manifest.ts` and `release/layout.ts`.
  */
-import type { GateOutcome, ReleaseManifest } from './manifest.js';
+import type { FrameworkSource } from '../shared/framework-source.js';
+export { readReleaseSource } from './source.js';
+import type { ReleaseManifest } from './manifest.js';
 export interface ReleaseBuildOptions {
     /** The project commit to build; default: the project checkout's HEAD. */
     projectCommit?: string;
-    /** The omni commit to build; default: the omni checkout's HEAD. */
+    /** Linked checkout revision, registry constraint or full upstream commit to reproduce vendored framework archives. */
     omniCommit?: string;
+    /** Override the committed omnitron.framework source without assuming a Git host or branch. */
+    frameworkSource?: FrameworkSource;
     /** Keep the clones after a successful build. */
     keepSource?: boolean;
     /** Record every gate as not-run instead of running them — for a look, never for a stack. */
@@ -33,10 +37,10 @@ export interface ReleaseBuildOptions {
      *
      * The gates need what the developer's shell had — sample's want
      * `TEST_DATABASE__PORT` — and a daemon started by launchd has none of it.
-     * Only `[A-Z][A-Z0-9_]*` names are taken, and never one that changes what
-     * an interpreter LOADS (`PATH`, `NODE_OPTIONS`, `LD_PRELOAD`…): a build
-     * request is permission to build this project, not to run something else
-     * as the daemon's user.
+     * Daemon RPC requires administrator admission for any nonempty override:
+     * tool configuration can execute code even through ordinary environment
+     * names. The validation below retains additional loader restrictions; it
+     * is not an authorization boundary. Local CLI uses its OS user's authority.
      */
     env?: Record<string, string>;
     /** Stop the build: the running step's process group is ended. */
@@ -51,15 +55,8 @@ export interface ReleaseBuildOptions {
  */
 export declare function checkedEnv(env: Record<string, string> | undefined): Record<string, string>;
 /** Where a build has got to. One sentence, one number, and the time. */
-export interface BuildPhase {
-    readonly phase: string;
-    readonly percent: number;
-    readonly at: string;
-    /** Known once the commits are resolved. */
-    readonly releaseId?: string;
-    /** Filled the moment the gates answer, so the console can show them running. */
-    readonly gates?: readonly GateOutcome[];
-}
+import type { BuildPhase } from '../shared/dto/releases.js';
+export type { BuildPhase } from '../shared/dto/releases.js';
 export interface BuildOutcome {
     readonly id: string;
     readonly root: string;

package/dist/release/build-run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build-run.d.ts","sourceRoot":"","sources":["../../src/release/build-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAaH,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAiB,MAAM,eAAe,CAAC;AAKjF,MAAM,WAAW,mBAAmB;IAClC,yEAAyE;IACzE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,4FAA4F;IAC5F,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;OASG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,iEAAiE;IACjE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAkBD;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAa1F;AAED,wEAAwE;AACxE,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,2CAA2C;IAC3C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,gFAAgF;IAChF,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAsID,gFAAgF;AAChF,wBAAsB,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,CAanD;AAwED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAwBlE;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,GAAE,SAAS,MAAM,EAA4B,GAAG,MAAM,EAAE,CAajH;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,eAAe,CACnC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,mBAAmB,EAC5B,OAAO,GAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAe,GAC9C,OAAO,CAAC,YAAY,CAAC,CAEvB;AAED;;;;;;;;GAQG;AACH,wBAAsB,0BAA0B,CAAC,CAAC,EAChD,UAAU,EAAE,OAAO,GAAG,SAAS,EAC/B,KAAK,EAAE,CAAC,KAAK,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC,CAAC,CAAC,GAC5D,OAAO,CAAC,CAAC,CAAC,CAUZ;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAAG,MAAM,CAEnF;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,GAAE,MAAyB,GAAG,MAAM,CAExE"}
+{"version":3,"file":"build-run.d.ts","sourceRoot":"","sources":["../../src/release/build-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAmBH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAKrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAe,eAAe,EAAiB,MAAM,eAAe,CAAC;AAKjF,MAAM,WAAW,mBAAmB;IAClC,yEAAyE;IACzE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sHAAsH;IACtH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8FAA8F;IAC9F,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,gDAAgD;IAChD,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,4FAA4F;IAC5F,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;OASG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,iEAAiE;IACjE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAkBD;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAiB1F;AAED,wEAAwE;AACxE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAC5D,YAAY,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAE5D,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AA0HD,gFAAgF;AAChF,wBAAsB,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,CAiBnD;AAwED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAwBlE;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,GAAE,SAAS,MAAM,EAA4B,GAAG,MAAM,EAAE,CAajH;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,eAAe,CACnC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,mBAAmB,EAC5B,OAAO,GAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAe,GAC9C,OAAO,CAAC,YAAY,CAAC,CAEvB;AAED;;;;;;;;GAQG;AACH,wBAAsB,0BAA0B,CAAC,CAAC,EAChD,UAAU,EAAE,OAAO,GAAG,SAAS,EAC/B,KAAK,EAAE,CAAC,KAAK,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC,CAAC,CAAC,GAC5D,OAAO,CAAC,CAAC,CAAC,CAUZ;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAAG,MAAM,CAEnF;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,GAAE,MAAyB,GAAG,MAAM,CAExE"}