@synopackageland/cli 0.14.1 → 0.15.0

package/dist/compose/analyze.d.ts

@@ -1,12 +1,12 @@
 import { type Document } from "yaml";
-import type { AppContract, ComposeDocument, ComposeService, ValidationError } from "../types.js";
-import { type PrivilegeFlag } from "./privilege.js";
+import type { ComposeDocument, ComposeService } from "../types.js";
 export interface ParsedCompose {
     compose: ComposeDocument;
     source: string;
     document: Document;
 }
-export declare function loadCompose(composePath: string): ParsedCompose | null;
+/** Raw structural utilities for tooling; SDK compose owns all runtime policy. */
+export declare function loadCompose(path: string): ParsedCompose | null;
 export declare function listServiceNames(compose: ComposeDocument): string[];
 export declare function extractPublishedTcpPorts(service: ComposeService): number[];
 export interface PortExposure {
@@ -22,67 +22,9 @@ export interface PortExposure {
 /** Every way a Compose service is reachable from outside its container network. */
 export declare function listPortExposures(compose: ComposeDocument): PortExposure[];
 export declare function collectPublishedTcpPorts(compose: ComposeDocument): Map<number, string[]>;
-export type ResourceWorkerIneligibleReason = "HAS_INSTALL_PARAMETERS" | "HAS_COMPOSE_INTERPOLATION" | "HAS_COMPOSE_SECRETS_OR_CONFIGS" | "HAS_BUILD_STANZA" | "HAS_PRIVILEGED_CAPABILITY" | "WEB_APP_MISSING_OR_AMBIGUOUS_ADMINPORT";
-export interface ResourceWorkerEligibility {
-    eligible: boolean;
-    reasons: ResourceWorkerIneligibleReason[];
-    headless: boolean;
-    adminport?: number;
-}
-/**
- * Checks if a Compose contract and document are eligible for the zero-config DSM resource-worker path.
- * Zero-config slice rejects:
- * - any install parameter
- * - any ${...} interpolation anywhere in compose document
- * - compose secrets or configs
- * - build: stanzas
- * - privileged / host network / device / root-like capabilities
- * - any non-headless App without a unique literal published adminport status probe
- */
-export declare function resourceWorkerEligibility(contract: AppContract, compose: ComposeDocument): ResourceWorkerEligibility;
 export interface UnpinnedImage {
     service: string;
     image: string;
 }
 /** Service images a registry can move: anything without a trailing `@sha256:<64 hex>` digest. */
 export declare function collectUnpinnedImages(compose: ComposeDocument): UnpinnedImage[];
-export type ComposeRoute = "static-zero-config" | "dynamic" | "reject";
-export interface ComposeRouteClassification {
-    route: ComposeRoute;
-    eligibility: ResourceWorkerEligibility;
-    errors: ValidationError[];
-}
-/**
- * Chooses the local route D0 can safely emit. The first dynamic slice is
- * deliberately small: only string/boolean wizard answers interpolated as
- * ordinary Compose values. Secrets/configs remain rejected because the live
- * DSM worker does not load docker-compose.override.yml, and no secret may be
- * placed in the project .env.
- */
-export declare function classifyComposeRoute(contract: AppContract, parsed: ParsedCompose, composeFile?: string): ComposeRouteClassification;
-export declare function collectComposeInterpolations(compose: ComposeDocument): Set<string>;
-export declare function validateComposeSecurity(compose: ComposeDocument, composeFile: string, options: {
-    profile: "personal" | "listing";
-    declaredPrivilege: ReadonlySet<PrivilegeFlag>;
-}): ValidationError[];
-/**
- * DSM's Docker Project resource worker can lose YAML quotes while acquiring a
- * project. A quoted numeric command argument can therefore become a number;
- * reject that platform-invalid shape before it reaches the NAS.
- */
-export declare function validateComposeNumericCommandArgs(compose: ComposeDocument, composeFile: string): ValidationError[];
-export interface HostBindContext {
-    sharedFolderParams: ReadonlySet<string>;
-    homesParams?: ReadonlySet<string>;
-    posixAllSharesParams?: ReadonlySet<string>;
-    installParamNames: ReadonlySet<string>;
-}
-export declare function collectVolumeSourceInterpolations(compose: ComposeDocument): Set<string>;
-export declare function validateComposeHostBinds(compose: ComposeDocument, composeFile: string, context: HostBindContext): ValidationError[];
-export declare function validateComposeRunAs(compose: ComposeDocument, composeFile: string, context: {
-    hasSharedFolder: boolean;
-    hasDsmUser?: boolean;
-}): ValidationError[];
-/** The gateway is the only door: the container's web port must not be reachable except through it. */
-export declare function validateGatewayPortLoopback(adminport: number, compose: ComposeDocument, composeFile: string): ValidationError[];
-export declare function validateAdminPortMapping(adminport: number, compose: ComposeDocument, composeFile: string): ValidationError[];