@rizom/ops 0.2.0-alpha.371 → 0.2.0-alpha.373

package/dist/entries/deploy.d.ts

@@ -1,3 +1,4 @@
 export { readJsonResponse, parseEnvFile, parseEnvSchema, parseEnvSchemaFile, requireEnv, writeGitHubOutput, writeGitHubEnv, } from "@brains/deploy-support";
+export { verifyRuntimeImage } from "../image-inventory";
 export type { EnvSchemaEntry } from "@brains/deploy-support";
 export { runtimeImageTag, sitePackagesFor, requiredImages, resolveImageBuilds, runResolveMissingImages, type ImageRequirementSource, type RequiredImage, type ResolveImageBuildsOptions, type RunResolveMissingImagesOptions, } from "../images";

package/dist/image-inventory.d.ts

@@ -0,0 +1,4 @@
+import type { RequiredImage } from "./image-types";
+import { type RunCommand } from "./run-subprocess";
+/** Verify a published image without starting an app or touching a fleet host. */
+export declare function verifyRuntimeImage(imageRepository: string, image: RequiredImage, run?: RunCommand): Promise<void>;

package/dist/image-types.d.ts

@@ -0,0 +1,7 @@
+/** Exact runtime requirements shared by image planning and verification. */
+export interface RequiredImage {
+    tag: string;
+    brainVersion: string;
+    /** Sorted, deduped package specs installed into this runtime image. */
+    sitePackages: string[];
+}

package/dist/images.d.ts

@@ -1,3 +1,5 @@
+import type { RequiredImage } from "./image-types";
+export type { RequiredImage } from "./image-types";
 import { type ResolvedSiteOverride } from "./load-registry";
 import { type RunCommand } from "./run-subprocess";
 /**
@@ -7,7 +9,7 @@ import { type RunCommand } from "./run-subprocess";
  */
 export declare function runtimeImageTag(brainVersion: string): string;
 /**
- * The npm packages a site override contributes to its version's shared image.
+ * The npm packages a site override contributes to every new fleet image.
  * A @rizom-scoped theme is independently published and installs at its own
  * explicit version; @brains/* themes are bundled inside @rizom/brain and must
  * not be npm-installed.
@@ -18,23 +20,17 @@ export interface ImageRequirementSource {
     brainVersion: string;
     siteOverride?: ResolvedSiteOverride | undefined;
 }
-export interface RequiredImage {
-    tag: string;
-    brainVersion: string;
-    /** Sorted, deduped package specs installed into this runtime image. */
-    sitePackages: string[];
-}
 /**
  * Derive one immutable image per effective Brain version. Each image contains
- * the union of exact site/theme package pins required by every instance on
- * that version.
+ * the union of exact site/theme package pins across the entire fleet, including
+ * instances still on older Brain versions. Promotion must not change an image.
  */
 export declare function requiredImages(users: ImageRequirementSource[]): RequiredImage[];
 export interface ResolveImageBuildsOptions {
     users: ImageRequirementSource[];
     /**
      * Explicit dispatch override — the manual/backfill path. When set, exactly
-     * this one image is built, skipping the registry-derived resolve. Published
+     * this one version is built with the fleet union plus explicit extra pins. Published
      * tags stay immutable: a same-tag rebuild from a newer Dockerfile can
      * strand the tag boot-broken, so rebuilding needs allowTagOverwrite.
      */
@@ -42,6 +38,8 @@ export interface ResolveImageBuildsOptions {
     sitePackagesInput?: string | undefined;
     allowTagOverwrite?: boolean | undefined;
     imageExists: (tag: string) => Promise<boolean>;
+    /** Fail closed if a published image cannot serve its assigned instances. */
+    verifyImage: (image: RequiredImage) => Promise<void>;
 }
 /**
  * Decide which images a Build run must produce: the declared required set