@serve.zone/appstore 32.27.0 → 33.0.0

package/ts_client/types.ts

@@ -1,18 +1,7 @@
-import type * as interfaces from '@serve.zone/interfaces';
-
-export type TAppStoreFetch = typeof fetch;
-export type TAppStoreSourceMode = 'package' | 'remote';
-export type TAppStoreIndex = interfaces.appstore.IAppStoreIndex;
-export type TAppStoreApp = interfaces.appstore.IAppStoreApp;
-export type TAppStoreAppMeta = interfaces.appstore.IAppStoreAppMeta;
-export type TAppStoreVersionConfig = interfaces.appstore.IAppStoreVersionConfig;
-export type TAppStoreDockerImageSource = interfaces.appstore.IAppStoreDockerImageSource;
-export type TAppStoreRepoManifestSource = interfaces.appstore.IAppStoreRepoManifestSource;
-export type TAppStoreResolvedSource = interfaces.appstore.IAppStoreResolvedSource;
-export type TServezoneAppStoreManifest = interfaces.appstore.IServezoneAppStoreManifest;
-export type TAppStoreStorageRequest = interfaces.appstore.TAppStoreStorageRequest;
-export type TAppStoreStorageClass = interfaces.appstore.IAppStoreStorageClass;
-export type TAppStoreStorageFeatureId = interfaces.appstore.TAppStoreStorageFeatureId;
+import type * as plugins from './plugins.js';
+
+// ---------------------------------------------------------------------------------------------
+// Storage handoff
 
 export type TAppStoreStorageRequestOrigin =
   | 'explicit'
@@ -32,11 +21,12 @@ export interface IAppStoreStorageLegacyCompatibility {
   };
 }
 
+/** The canonical storage handoff a fulfillment adapter receives for one version config. */
 export interface INormalizedAppStoreStorageConfig {
-  storageClasses: Record<string, TAppStoreStorageClass>;
-  storageRequests: TAppStoreStorageRequest[];
+  storageClasses: Record<string, plugins.servezoneInterfaces.appstore.IAppStoreStorageClass>;
+  storageRequests: plugins.servezoneInterfaces.appstore.TAppStoreStorageRequest[];
   requestOrigins: Record<string, TAppStoreStorageRequestOrigin>;
-  requiredFeatureIds: TAppStoreStorageFeatureId[];
+  requiredFeatureIds: plugins.servezoneInterfaces.appstore.TAppStoreStorageFeatureId[];
   legacyCompatibility?: IAppStoreStorageLegacyCompatibility;
 }
 
@@ -48,37 +38,107 @@ export interface IAppStoreStorageNormalizationOptions {
   supportedFeatures: Iterable<string>;
 }
 
-export interface IAppStoreResolverOptions {
-  source?: TAppStoreSourceMode;
-  baseUrl?: string;
-  fetch?: TAppStoreFetch;
-  resolveDockerDigests?: boolean;
-  requestTimeoutMs?: number;
+// ---------------------------------------------------------------------------------------------
+// Catalog loading
+
+export interface IAppStoreCatalogLoaderOptions {
+  /** The catalog signing keys this consumer trusts, shipped with its release, never fetched. */
+  trustedKeys: readonly plugins.servezoneInterfaces.appstore.IAppStoreCatalogTrustedKey[];
+  /** The feature ids this consumer fulfils (`requiresFeatures`), e.g. `appStoreStorageFeatureIds` values. */
+  supportedFeatureIds: Iterable<string>;
+  /**
+   * npm registries asked for the catalog package, in order, as
+   * `appstore.validateAppStoreCatalogRegistries` (`@serve.zone/interfaces`) admits them. Absent or
+   * empty means `appstore.appStoreCatalogDefaultRegistries` (npmjs).
+   */
+  registries?: readonly string[];
+  /** Defaults to the global `fetch`. */
+  fetch?: typeof fetch;
+  /** Defaults to the system clock. */
   now?: () => Date;
+  /** Bound of each registry request, response body included. Defaults to 30 000 ms. */
+  requestTimeoutMs?: number;
+  /** Largest package tarball the loader downloads. Defaults to 32 MiB. */
+  maximumTarballBytes?: number;
+  /** Largest size the loader decompresses a package tarball to. Defaults to 256 MiB. */
+  maximumUnpackedBytes?: number;
 }
 
-export interface IAppStorePackageData {
-  generatedAt: string;
-  jsonFiles: Record<string, unknown>;
-  textFiles: Record<string, string>;
+/** Options of one load. */
+export interface IAppStoreCatalogLoadOptions {
+  /**
+   * Aborting it (the consumer stopping) ends the load at once, in-flight requests included, and
+   * rejects it with the signal's reason.
+   */
+  signal?: AbortSignal;
+}
+
+/** What a consumer stored with its last-known-good envelope text, to restore it at start. */
+export interface IAppStoreCatalogStoredRecord {
+  origin: plugins.servezoneInterfaces.appstore.TAppStoreCatalogOrigin;
+  /** When the consumer first activated it. */
+  loadedAt: string;
 }
 
-export interface IAppStoreSourceInfo {
-  source: TAppStoreSourceMode;
-  packageName: string;
-  packageVersion: string;
-  baseUrl?: string;
+/** What one registry answered during a load. */
+export interface IAppStoreCatalogRegistryReport {
+  registry: string;
+  outcome: plugins.servezoneInterfaces.appstore.TAppStoreCatalogAttemptOutcome;
+  /** The package version the registry's `latest` dist-tag named, once read. */
+  packageVersion?: string;
+  /** Why a `refused` or `failed` answer ended. */
+  message?: string;
 }
 
-export interface IResolvedAppStoreApp {
-  appStoreApp: TAppStoreApp;
-  appMeta: TAppStoreAppMeta;
-  configsByVersion: Map<string, TAppStoreVersionConfig>;
+interface IAppStoreCatalogJudgementBase {
+  /** The attempt as a consumer records it in its catalog status (`lastAttempt`). */
+  attempt: plugins.servezoneInterfaces.appstore.IAppStoreCatalogAttempt;
 }
 
-export interface IParsedDockerImageReference {
-  registry: string;
-  repository: string;
-  tag: string;
-  digest?: string;
+/** A verified catalog that succeeds the active one; the consumer stores it as last-known-good. */
+export interface IAppStoreCatalogActivation extends IAppStoreCatalogJudgementBase {
+  outcome: 'activated';
+  envelope: plugins.servezoneInterfaces.appstore.IAppStoreCatalogEnvelope;
+  /** The status `active` member for the activated catalog. */
+  active: plugins.servezoneInterfaces.appstore.IAppStoreCatalogActiveState;
 }
+
+/** The candidate is the active catalog. */
+export interface IAppStoreCatalogUnchanged extends IAppStoreCatalogJudgementBase {
+  outcome: 'unchanged';
+}
+
+/** The candidate was read and refused; the active catalog stays in place. */
+export interface IAppStoreCatalogRefused extends IAppStoreCatalogJudgementBase {
+  outcome: 'refused';
+  /** The status `refused` member. */
+  refused: plugins.servezoneInterfaces.appstore.IAppStoreCatalogRefusalRecord;
+}
+
+/** No candidate could be read: transport, integrity or packaging failed. */
+export interface IAppStoreCatalogFailure extends IAppStoreCatalogJudgementBase {
+  outcome: 'failed';
+  message: string;
+}
+
+/** The judgement of one candidate envelope against the active catalog. */
+export type TAppStoreCatalogJudgement =
+  | IAppStoreCatalogActivation
+  | IAppStoreCatalogUnchanged
+  | IAppStoreCatalogRefused;
+
+/** The result of one registry load: the judgement of the best answer and every registry's answer. */
+export type TAppStoreCatalogLoadResult = (TAppStoreCatalogJudgement | IAppStoreCatalogFailure) & {
+  registries: IAppStoreCatalogRegistryReport[];
+};
+
+/** A stored catalog that verifies today: the consumer activates it at start. */
+export interface IAppStoreCatalogRestored {
+  outcome: 'restored';
+  envelope: plugins.servezoneInterfaces.appstore.IAppStoreCatalogEnvelope;
+  /** The status `active` member: `origin` and `loadedAt` as stored, `keyId` as verified now. */
+  active: plugins.servezoneInterfaces.appstore.IAppStoreCatalogActiveState;
+}
+
+/** The result of restoring a stored catalog: restored, or refused and left inactive. */
+export type TAppStoreCatalogRestoreResult = IAppStoreCatalogRestored | IAppStoreCatalogRefused;

package/ts_testing/fixtures.ts

@@ -0,0 +1,230 @@
+/**
+ * Test fixtures for App Store catalog consumers (`@serve.zone/appstore/testing`), never part of the
+ * runtime entry: a throwaway signing key, a catalog, its signed envelope, the npm package tarball
+ * carrying it, a registry stub and a `fetch` serving it. A consumer's tests drive
+ * `AppStoreCatalogLoader` against these exactly as against a registry.
+ */
+import * as plugins from './plugins.js';
+import { appStoreCatalogEnvelopePackagePath, appStoreCatalogPackageName } from '../ts_client/catalog.js';
+
+type TCatalog = plugins.servezoneInterfaces.appstore.IAppStoreCatalog;
+type TEnvelope = plugins.servezoneInterfaces.appstore.IAppStoreCatalogEnvelope;
+type TVersionConfig = plugins.servezoneInterfaces.appstore.TAppStoreCatalogVersionConfig;
+type TSigningKey = plugins.servezoneInterfacesRuntime.IAppStoreCatalogSigningKey;
+type TTrustedKey = plugins.servezoneInterfaces.appstore.IAppStoreCatalogTrustedKey;
+
+/** A throwaway catalog signing key and the trusted-key record a consumer under test is given. */
+export interface IAppStoreTestSigningKey {
+  signingKey: TSigningKey;
+  trustedKey: TTrustedKey;
+}
+
+export interface IAppStoreTestVersion {
+  version: string;
+  config: TVersionConfig;
+  withdrawn?: plugins.servezoneInterfaces.appstore.IAppStoreCatalogWithdrawal;
+}
+
+export interface IAppStoreTestApp {
+  info: plugins.servezoneInterfaces.appstore.IServezoneAppStoreAppInfo;
+  /** Defaults to the highest version that is not withdrawn (the highest one when all are). */
+  latestVersion?: string;
+  upgradeStrategy?: plugins.servezoneInterfaces.appstore.TAppStoreCatalogUpgradeStrategy;
+  versions: IAppStoreTestVersion[];
+}
+
+export interface IAppStoreTestCatalogOptions {
+  revision: number;
+  /** Defaults to `2026-10-08T12:00:00.000Z`. */
+  publishedAt?: string;
+  /** Defaults to 40 times `c`. */
+  sourceRevision?: string;
+  apps: IAppStoreTestApp[];
+}
+
+/** One registry origin's answers: the `latest` version manifest and the tarball it names. */
+export interface IAppStoreTestRegistryStub {
+  /** The `latest` version manifest body; `null` answers 404. */
+  manifest: unknown;
+  tarball?: Uint8Array<ArrayBuffer>;
+  /** Never answers until the request is aborted. */
+  hang?: boolean;
+  /** Answers every request with this HTTP status. */
+  status?: number;
+}
+
+const tarballPath = '/tarball.tgz';
+
+/** A fresh throwaway key; nothing about it is ever stored. */
+export const createAppStoreTestSigningKey = async (): Promise<IAppStoreTestSigningKey> => {
+  const signingKey = await plugins.servezoneInterfacesRuntime.createAppStoreCatalogSigningKey();
+  return { signingKey, trustedKey: plugins.servezoneInterfacesRuntime.getAppStoreCatalogTrustedKey(signingKey) };
+};
+
+/** A version config the contract accepts: a digest-pinned `example/<name>` image and one web port. */
+export const createAppStoreTestVersionConfig = (
+  nameArg: string,
+  imageDigitArg: string,
+  overridesArg: Partial<TVersionConfig> = {},
+): TVersionConfig => ({
+  image: `example/${nameArg}@sha256:${imageDigitArg.repeat(64)}`,
+  targetPorts: [{ name: 'web', port: 8080, protocol: 'http', default: true }],
+  ...overridesArg,
+});
+
+const compareVersions = (leftArg: string, rightArg: string): number => {
+  const { data } = plugins.servezoneInterfaces;
+  const left = data.parseReleaseVersion(leftArg);
+  const right = data.parseReleaseVersion(rightArg);
+  if (left === null || right === null) throw new Error(`test catalog versions must be MAJOR.MINOR.PATCH: ${leftArg}, ${rightArg}`);
+  return data.compareReleaseVersions(left, right);
+};
+
+const defaultLatestVersion = (appArg: IAppStoreTestApp): string => {
+  const available = appArg.versions.filter((versionArg) => versionArg.withdrawn === undefined);
+  const candidates = (available.length > 0 ? available : appArg.versions).map((versionArg) => versionArg.version);
+  const [latest] = [...candidates].sort((leftArg, rightArg) => compareVersions(rightArg, leftArg));
+  if (latest === undefined) throw new Error(`test catalog app '${appArg.info.id}' lists no version`);
+  return latest;
+};
+
+/** Every feature id the catalog's version configs name. */
+const usedFeatureIds = (catalogArg: TCatalog): string[] =>
+  [...new Set(catalogArg.apps.flatMap((appArg) =>
+    appArg.versions.flatMap((versionArg) => versionArg.config.requiresFeatures ?? [])))].sort();
+
+/** A catalog the contract accepts, apps in id order, each version with its config digest; throws otherwise. */
+export const createAppStoreTestCatalog = async (optionsArg: IAppStoreTestCatalogOptions): Promise<TCatalog> => {
+  const { appstore } = plugins.servezoneInterfaces;
+  const apps: TCatalog['apps'] = [];
+  const sorted = [...optionsArg.apps].sort((leftArg, rightArg) =>
+    leftArg.info.id < rightArg.info.id ? -1 : leftArg.info.id > rightArg.info.id ? 1 : 0);
+  for (const app of sorted) {
+    const versions: TCatalog['apps'][number]['versions'] = [];
+    for (const version of app.versions) {
+      const config = structuredClone(version.config);
+      versions.push({
+        version: version.version,
+        config,
+        configDigest: await appstore.computeAppStoreCatalogConfigDigest(config),
+        ...(version.withdrawn === undefined ? {} : { withdrawn: { ...version.withdrawn } }),
+      });
+    }
+    apps.push({
+      info: structuredClone(app.info),
+      latestVersion: app.latestVersion ?? defaultLatestVersion(app),
+      ...(app.upgradeStrategy === undefined ? {} : { upgradeStrategy: app.upgradeStrategy }),
+      versions,
+    });
+  }
+  const contract = appstore.appStoreCatalogContract;
+  const catalog: TCatalog = {
+    contract: { id: contract.id, major: contract.major, minor: contract.minor },
+    revision: optionsArg.revision,
+    publishedAt: optionsArg.publishedAt ?? '2026-10-08T12:00:00.000Z',
+    sourceRevision: optionsArg.sourceRevision ?? 'c'.repeat(40),
+    apps,
+  };
+  const errors = appstore.validateAppStoreCatalog(catalog, { supportedFeatureIds: usedFeatureIds(catalog) });
+  if (errors.length > 0) throw new Error(`test catalog refused by the contract: ${errors.join('; ')}`);
+  return catalog;
+};
+
+/** The signed envelope of a test catalog, as the publisher would ship it. */
+export const signAppStoreTestCatalog = async (catalogArg: TCatalog, keyArg: IAppStoreTestSigningKey): Promise<TEnvelope> =>
+  await plugins.servezoneInterfacesRuntime.signAppStoreCatalog(catalogArg, [keyArg.signingKey], {
+    supportedFeatureIds: usedFeatureIds(catalogArg),
+  });
+
+const gzip = async (bytesArg: Uint8Array<ArrayBuffer>): Promise<Uint8Array<ArrayBuffer>> =>
+  new Uint8Array(await new Response(new Blob([bytesArg]).stream().pipeThrough(new CompressionStream('gzip'))).arrayBuffer());
+
+export interface IAppStoreTestTarballOptions {
+  /** Defaults to `33.0.0`. */
+  packageVersion?: string;
+  /** Bytes of a filler `dist_catalog/catalog.json` entry ahead of the envelope; defaults to 0. */
+  fillerBytes?: number;
+}
+
+/**
+ * The gzip-compressed npm package tarball (`package/…`) of `@serve.zone/appstore`, carrying
+ * `envelopeTextArg` at the envelope's package path, or no envelope for `null`.
+ */
+export const createAppStoreTestPackageTarball = async (
+  envelopeTextArg: string | null,
+  optionsArg: IAppStoreTestTarballOptions = {},
+): Promise<Uint8Array<ArrayBuffer>> => {
+  const encoder = new TextEncoder();
+  const packageJson = encoder.encode(JSON.stringify({
+    name: appStoreCatalogPackageName,
+    version: optionsArg.packageVersion ?? '33.0.0',
+  }));
+  const filler = new Uint8Array(optionsArg.fillerBytes ?? 0).fill(0x20);
+  const entries = [
+    { header: { name: 'package/package.json', size: packageJson.byteLength }, body: packageJson },
+    { header: { name: 'package/dist_catalog/catalog.json', size: filler.byteLength }, body: filler },
+  ];
+  if (envelopeTextArg !== null) {
+    const envelope = encoder.encode(envelopeTextArg);
+    entries.push({
+      header: { name: `package/${appStoreCatalogEnvelopePackagePath}`, size: envelope.byteLength },
+      body: envelope,
+    });
+  }
+  return await gzip(await plugins.modernTar.packTar(entries));
+};
+
+/** The npm `dist.integrity` of a tarball. */
+export const computeAppStoreTestIntegrity = (bytesArg: Uint8Array): string =>
+  `sha512-${plugins.crypto.createHash('sha512').update(bytesArg).digest('base64')}`;
+
+export interface IAppStoreTestRegistryOptions {
+  /** Defaults to the tarball's true integrity. */
+  integrity?: string;
+  /** Defaults to `33.0.0`. */
+  packageVersion?: string;
+}
+
+/** A registry stub at `originArg` whose `latest` names `tarballArg`. */
+export const createAppStoreTestRegistry = (
+  originArg: string,
+  tarballArg: Uint8Array<ArrayBuffer>,
+  optionsArg: IAppStoreTestRegistryOptions = {},
+): IAppStoreTestRegistryStub => ({
+  manifest: {
+    name: appStoreCatalogPackageName,
+    version: optionsArg.packageVersion ?? '33.0.0',
+    dist: { tarball: `${originArg}${tarballPath}`, integrity: optionsArg.integrity ?? computeAppStoreTestIntegrity(tarballArg) },
+  },
+  tarball: tarballArg,
+});
+
+/**
+ * A `fetch` serving one stub per registry origin: the `latest` manifest of
+ * `@serve.zone/appstore` and its tarball. An origin without a stub fails like an unreachable host;
+ * a hanging stub rejects once the request's signal aborts.
+ */
+export const createAppStoreTestFetch = (registriesArg: Record<string, IAppStoreTestRegistryStub>): typeof fetch =>
+  async (inputArg: RequestInfo | URL, initArg?: RequestInit): Promise<Response> => {
+    const url = new URL(inputArg instanceof Request ? inputArg.url : inputArg);
+    const stub = registriesArg[url.origin];
+    if (stub === undefined) throw new TypeError(`fetch failed: no registry at ${url.origin}`);
+    const signal = initArg?.signal ?? null;
+    if (stub.hang === true) {
+      return await new Promise<Response>((_resolveArg, rejectArg) => {
+        const abort = () => rejectArg(signal?.reason ?? new Error('aborted'));
+        if (signal?.aborted === true) abort();
+        signal?.addEventListener('abort', abort, { once: true });
+      });
+    }
+    if (stub.status !== undefined) return new Response('unavailable', { status: stub.status });
+    if (url.pathname === `/${appStoreCatalogPackageName.replace('/', '%2f')}/latest`) {
+      return stub.manifest === null
+        ? new Response('not found', { status: 404 })
+        : new Response(JSON.stringify(stub.manifest), { headers: { 'content-type': 'application/json' } });
+    }
+    if (url.pathname === tarballPath && stub.tarball !== undefined) {
+      return new Response(new Blob([stub.tarball]));
+    }
+    return new Response('not found', { status: 404 });
+  };

package/ts_testing/index.ts

@@ -0,0 +1 @@
+export * from './fixtures.js';

package/ts_testing/plugins.ts

@@ -0,0 +1,15 @@
+// node native
+import * as crypto from 'node:crypto';
+
+export { crypto };
+
+// @serve.zone scope
+import * as servezoneInterfaces from '@serve.zone/interfaces';
+import * as servezoneInterfacesRuntime from '@serve.zone/interfaces/runtime';
+
+export { servezoneInterfaces, servezoneInterfacesRuntime };
+
+// third party
+import * as modernTar from 'modern-tar';
+
+export { modernTar };

package/ts_testing/tspublish.json

@@ -0,0 +1,3 @@
+{
+  "order": 2
+}

package/apps/adminer/app.json

@@ -1,10 +0,0 @@
-{
-  "id": "adminer",
-  "name": "Adminer",
-  "description": "Lightweight database management tool with web interface",
-  "category": "Databases",
-  "iconName": "adminer",
-  "latestVersion": "1.0.0",
-  "versions": ["1.0.0"],
-  "maintainer": "serve.zone"
-}

package/apps/adminer/versions/1.0.0/config.json

@@ -1,6 +0,0 @@
-{
-  "image": "adminer:latest",
-  "targetPorts": [
-    { "name": "web", "port": 8080, "protocol": "http", "default": true }
-  ]
-}

package/apps/cloudly/app.json

@@ -1,14 +0,0 @@
-{
-  "id": "cloudly",
-  "name": "Cloudly",
-  "description": "Multi-node serve.zone control plane for clusters, workload services, domains, and deployments.",
-  "category": "Dev Tools",
-  "iconName": "server",
-  "latestVersion": "1.27.0",
-  "versions": ["1.0.0", "1.1.0", "1.1.1", "1.1.2", "1.1.3", "1.1.4", "1.1.5", "1.1.6", "1.1.7", "1.1.8", "1.1.9", "1.1.10", "1.2.0", "1.2.1", "1.3.0", "1.4.0", "1.5.0", "1.6.0", "1.7.0", "1.8.0", "1.9.0", "1.10.0", "1.11.0", "1.12.0", "1.13.0", "1.14.0", "1.15.0", "1.16.0", "1.17.0", "1.18.0", "1.19.0", "1.20.0", "1.21.0", "1.22.0", "1.23.0", "1.24.0", "1.25.0", "1.26.0", "1.27.0"],
-  "maintainer": "serve.zone",
-  "links": {
-    "Source": "https://code.foss.global/serve.zone/cloudly",
-    "Docs": "https://serve.zone"
-  }
-}

package/apps/cloudly/versions/1.0.0/config.json

@@ -1,120 +0,0 @@
-{
-  "image": "code.foss.global/serve.zone/cloudly:latest",
-  "targetPorts": [
-    { "name": "web", "port": 3000, "protocol": "http", "default": true }
-  ],
-  "envVars": [
-    {
-      "key": "SERVEZONE_ENVIRONMENT",
-      "value": "production",
-      "description": "Cloudly runtime environment.",
-      "required": true
-    },
-    {
-      "key": "SERVEZONE_PUBLIC_ORIGIN",
-      "value": "https://${SERVICE_DOMAIN}",
-      "description": "Canonical public Cloudly origin including protocol and optional public port.",
-      "required": true
-    },
-    {
-      "key": "SERVEZONE_LISTENPORT",
-      "value": "3000",
-      "description": "Internal Cloudly HTTP port inside the container.",
-      "required": true
-    },
-    {
-      "key": "SERVEZONE_SSLMODE",
-      "value": "external",
-      "description": "Use external TLS termination through Onebox or dcrouter.",
-      "required": true
-    },
-    {
-      "key": "MONGODB_URL",
-      "value": "${MONGODB_URI}",
-      "description": "Authenticated MongoDB connection URL provisioned by Onebox.",
-      "required": true
-    },
-    {
-      "key": "MONGODB_NAME",
-      "value": "${MONGODB_DATABASE}",
-      "description": "MongoDB database name provisioned by Onebox.",
-      "required": true
-    },
-    {
-      "key": "MONGODB_USER",
-      "value": "${MONGODB_USERNAME}",
-      "description": "MongoDB username provisioned by Onebox.",
-      "required": true
-    },
-    {
-      "key": "MONGODB_PASS",
-      "value": "${MONGODB_PASSWORD}",
-      "description": "MongoDB password provisioned by Onebox.",
-      "required": true
-    },
-    {
-      "key": "S3_ENDPOINT",
-      "value": "onebox-minio",
-      "description": "S3 endpoint host for the MinIO service provisioned by Onebox.",
-      "required": true
-    },
-    {
-      "key": "S3_PORT",
-      "value": "9000",
-      "description": "S3 endpoint port for the MinIO service provisioned by Onebox.",
-      "required": true
-    },
-    {
-      "key": "S3_USESSL",
-      "value": "false",
-      "description": "Use plain HTTP for internal MinIO traffic on the Onebox network.",
-      "required": true
-    },
-    {
-      "key": "S3_BUCKET",
-      "value": "${S3_BUCKET}",
-      "description": "S3 bucket provisioned by Onebox for Cloudly's registry.",
-      "required": true
-    },
-    {
-      "key": "S3_ACCESSKEY",
-      "value": "${S3_ACCESS_KEY}",
-      "description": "S3 access key provisioned by Onebox.",
-      "required": true
-    },
-    {
-      "key": "S3_SECRETKEY",
-      "value": "${S3_SECRET_KEY}",
-      "description": "S3 secret key provisioned by Onebox.",
-      "required": true
-    }
-  ],
-  "platformRequirements": {
-    "mongodb": true,
-    "s3": true
-  },
-  "platformOidc": {
-    "redirectPath": "/auth/oidc/callback",
-    "roles": [
-      {
-        "id": "admin",
-        "label": "Administrator",
-        "description": "Full Cloudly administration for this hosted instance."
-      },
-      {
-        "id": "user",
-        "label": "User",
-        "description": "Standard authenticated Cloudly access for this hosted instance."
-      }
-    ],
-    "environmentVariables": {
-      "issuerUrl": "SERVEZONE_PLATFORM_OIDC_ISSUER",
-      "clientId": "SERVEZONE_PLATFORM_OIDC_CLIENT_ID",
-      "clientSecret": "SERVEZONE_PLATFORM_OIDC_CLIENT_SECRET",
-      "redirectUri": "SERVEZONE_PLATFORM_OIDC_REDIRECT_URI",
-      "audience": "SERVEZONE_PLATFORM_OIDC_AUDIENCE"
-    },
-    "clientAuthenticationMethod": "client_secret_basic"
-  },
-  "minOneboxVersion": "2.2.0"
-}