@rizom/ops 0.2.0-alpha.350 → 0.2.0-alpha.351

package/dist/entries/deploy.d.ts

@@ -1,3 +1,4 @@
 export { readJsonResponse, parseEnvFile, parseEnvSchema, parseEnvSchemaFile, requireEnv, writeGitHubOutput, writeGitHubEnv, } from "@brains/deploy-support";
 export type { EnvSchemaEntry } from "@brains/deploy-support";
-export { siteImageTag, sitePackagesFor, requiredImages, resolveImageBuilds, runResolveMissingImages, type ImageRequirementSource, type RequiredImage, type ResolveImageBuildsOptions, type RunResolveMissingImagesOptions, } from "../images";
+export { siteImageTag, runtimeImageTag, sitePackagesFor, requiredImages, resolveImageBuilds, runResolveMissingImages, type ImageRequirementSource, type RequiredImage, type ResolveImageBuildsOptions, type RunResolveMissingImagesOptions, } from "../images";
+export { SHARED_FLEET_IMAGE_CONTRACT, ISOLATED_SITE_IMAGE_CONTRACT, imageContractSchema, type ImageContract, } from "../schema";

package/dist/images.d.ts

@@ -1,5 +1,6 @@
 import { type ResolvedSiteOverride } from "./load-registry";
 import { type RunCommand } from "./run-subprocess";
+import { type ImageContract } from "./schema";
 /**
  * Resolve a fleet image tag as a pure function of a single instance's own
  * config. This is the shared contract between the build (which tags the image
@@ -13,6 +14,8 @@ import { type RunCommand } from "./run-subprocess";
  * never collide with — or leak into — the shared default image.
  */
 export declare function siteImageTag(brainVersion: string, sitePackages: string[]): string;
+/** Resolve the runtime tag selected by the pilot's explicit image contract. */
+export declare function runtimeImageTag(imageContract: ImageContract, brainVersion: string, sitePackages: string[]): string;
 /**
  * The npm packages a site override installs into its per-instance image.
  * A @rizom-scoped theme is independently published and installs at its own
@@ -28,19 +31,19 @@ export interface ImageRequirementSource {
 export interface RequiredImage {
     tag: string;
     brainVersion: string;
-    /** Sorted, deduped — build args for the image, empty for the default. */
+    /** Sorted, deduped package specs installed into this runtime image. */
     sitePackages: string[];
 }
 /**
- * The image set the declared fleet state requires: one default
- * `brain-{version}` per distinct brain version in use, plus one
- * `brain-{version}-sites-{hash}` per distinct site-override package set.
- * Derived purely from resolved users (pass `registry.users`), so CI can build
- * exactly what a config push declares — nothing reactive, nothing manual.
+ * Derive the immutable images required by the declared fleet. Shared fleets
+ * get one image per Brain version containing the union of packages required by
+ * every instance on that version. Fleets that explicitly retain isolated site
+ * images get one tag per distinct version/package set.
  */
-export declare function requiredImages(users: ImageRequirementSource[]): RequiredImage[];
+export declare function requiredImages(users: ImageRequirementSource[], imageContract?: ImageContract): RequiredImage[];
 export interface ResolveImageBuildsOptions {
     users: ImageRequirementSource[];
+    imageContract?: ImageContract | undefined;
     /**
      * Explicit dispatch override — the manual/backfill path. When set, exactly
      * this one image is built, skipping the registry-derived resolve. Published
@@ -72,8 +75,8 @@ export interface RunResolveMissingImagesOptions {
  * state (pilot.yaml + cohorts + users) requires, probe the container registry
  * for each tag, and emit the missing ones as a GitHub Actions build matrix
  * (`images_json`, entries `{tag, brain_version, site_packages}`). Dispatch
- * inputs `BRAIN_VERSION_INPUT`/`SITE_PACKAGES_INPUT` force a single explicit
- * build instead. Deriving and probing here means a config push builds exactly
+ * inputs `BRAIN_VERSION_INPUT`/`SITE_PACKAGES_INPUT`/`IMAGE_CONTRACT_INPUT`
+ * force a single explicit build instead. Deriving and probing here means a config push builds exactly
  * what it declares — nothing reactive, nothing manual.
  */
 export declare function runResolveMissingImages(options: RunResolveMissingImagesOptions): Promise<RequiredImage[]>;

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 export { initPilotRepo } from "./init";
 export { loadPilotRegistry, type LoadPilotRegistryOptions, } from "./load-registry";
-export { siteImageTag, sitePackagesFor, requiredImages, resolveImageBuilds, runResolveMissingImages, type ImageRequirementSource, type RequiredImage, type ResolveImageBuildsOptions, type RunResolveMissingImagesOptions, } from "./images";
+export { siteImageTag, runtimeImageTag, sitePackagesFor, requiredImages, resolveImageBuilds, runResolveMissingImages, type ImageRequirementSource, type RequiredImage, type ResolveImageBuildsOptions, type RunResolveMissingImagesOptions, } from "./images";
 export { derivePreviewDomain, type PreviewDomainOptions, } from "./preview-domain";
 export { writeUsersTable } from "./render-users-table";
 export { onboardUser } from "./onboard-user";
@@ -18,4 +18,4 @@ export { assertDirectorySyncStressTarget, directorySyncStressPlanSchema, directo
 export { cleanupDirectorySyncStress, runDeployedDirectorySyncStress, verifyDirectorySyncStressAccess, type CleanupDirectorySyncStressOptions, type CleanupDirectorySyncStressResult, type DeployedDirectorySyncStressOptions, type DeployedDirectorySyncStressResult, type VerifyDirectorySyncStressAccessOptions, type VerifyDirectorySyncStressAccessResult, } from "./directory-sync-stress-system";
 export { assertHealthWatchdogSmokeTarget, cleanupHealthWatchdogSmoke, renderHealthWatchdogSmokeRemoteScript, runHealthWatchdogSmoke, type CleanupHealthWatchdogSmokeOptions, type CleanupHealthWatchdogSmokeResult, type HealthWatchdogSmokeOptions, type HealthWatchdogSmokeResult, type HealthWatchdogSmokeTarget, } from "./health-watchdog-smoke";
 export { runCommand, type CommandResult } from "./run-command";
-export { pilotSchema, cohortSchema, canonicalBundleIdSchema, CAPABILITY_BUNDLE_CONTRACT, type PilotConfig, type CohortConfig, } from "./schema";
+export { pilotSchema, cohortSchema, canonicalBundleIdSchema, CAPABILITY_BUNDLE_CONTRACT, SHARED_FLEET_IMAGE_CONTRACT, ISOLATED_SITE_IMAGE_CONTRACT, imageContractSchema, type ImageContract, type PilotConfig, type CohortConfig, } from "./schema";