@toa.io/boot 1.0.0-alpha.296 → 1.0.0-alpha.298

package/CHANGELOG.md

@@ -3,6 +3,22 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [1.0.0-alpha.298](https://github.com/toa-io/toa/compare/v1.0.0-alpha.297...v1.0.0-alpha.298) (2026-09-08)
+
+**Note:** Version bump only for package @toa.io/boot
+
+
+
+
+
+# [1.0.0-alpha.297](https://github.com/toa-io/toa/compare/v1.0.0-alpha.296...v1.0.0-alpha.297) (2026-09-08)
+
+**Note:** Version bump only for package @toa.io/boot
+
+
+
+
+
 # [1.0.0-alpha.296](https://github.com/toa-io/toa/compare/v1.0.0-alpha.295...v1.0.0-alpha.296) (2026-09-08)
 
 **Note:** Version bump only for package @toa.io/boot

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@toa.io/boot",
-  "version": "1.0.0-alpha.296",
+  "version": "1.0.0-alpha.298",
   "type": "module",
   "description": "Toa Boot",
   "author": "temich <tema.gurtovoy@gmail.com>",
@@ -23,13 +23,13 @@
   "dependencies": {
     "@toa.io/atomicity": "1.0.0-alpha.293",
     "@toa.io/core": "1.0.0-alpha.293",
-    "@toa.io/definitions": "1.0.0-alpha.296",
+    "@toa.io/definitions": "1.0.0-alpha.298",
     "@toa.io/generic": "1.0.0-alpha.292",
-    "@toa.io/norm": "1.0.0-alpha.296",
+    "@toa.io/norm": "1.0.0-alpha.298",
     "@toa.io/schemas": "1.0.0-alpha.293",
     "clone-deep": "4.0.1",
     "dotenv": "17.4.2",
     "openspan": "1.0.0-alpha.293"
   },
-  "gitHead": "d0fd4f9d13483f763acd9dd2b3c3eb8cb8856524"
+  "gitHead": "334fad8726adfa7507462c33b509ce7db9db853f"
 }

package/src/manifest.js

@@ -1,9 +1,9 @@
 import clone from 'clone-deep'
-import { existsSync } from 'node:fs'
+import { existsSync, readFileSync } from 'node:fs'
 import { readFile } from 'node:fs/promises'
-import { basename, join } from 'node:path'
+import { basename, dirname, join } from 'node:path'
 import { merge } from '@toa.io/generic'
-import { component as load, revive, NORMALIZED } from '@toa.io/norm'
+import { component as load, definition, revive, NORMALIZED } from '@toa.io/norm'
 import { Locator } from '@toa.io/core'
 
 import { span } from './span.js'
@@ -33,17 +33,66 @@ export const manifest = async (path, options = {}) => {
 }
 
 /**
- * What the build wrote, where it wrote one. An image carries the manifest a build normalised;
- * a workspace has no such file and is read as it always was.
+ * A manifest already normalised, where there is one, and the sources read where there is not.
+ *
+ * A component of an application's own comes with the manifest its build wrote beside it. A
+ * component an extension ships comes with none — its package is published once, long before
+ * any image is built — but `@toa.io/definitions` carries the digest of those manifests, which
+ * a deploy has read for as long as it has been unable to install the extension. A service runs
+ * them from the package, so it reads the same digest rather than reading their sources again.
+ *
+ * Only a workspace normalises, then, which is the one place a source can have changed since.
  *
  * @param {string} path
  */
 async function read(path) {
   const file = join(path, NORMALIZED)
 
-  if (!existsSync(file)) return await load(path)
+  if (existsSync(file)) return revive(JSON.parse(await readFile(file, 'utf8')), path)
 
-  return revive(JSON.parse(await readFile(file, 'utf8')), path)
+  return (await digested(path)) ?? (await load(path))
 }
 
+/**
+ * What the digest holds for a component of an extension's own, by the directory it is in.
+ *
+ * An extension ships its components in `components/` beside its manifest and nowhere else, so
+ * that is the whole of what is looked for: anything else — an application's own component, a
+ * fixture in a workspace — is read from its sources.
+ *
+ * @param {string} path
+ * @returns {Promise<object | undefined>}
+ */
+async function digested(path) {
+  const directory = dirname(path)
+
+  if (basename(directory) !== COMPONENTS) return undefined
+
+  const root = dirname(directory)
+  const manifest = join(root, MANIFEST)
+
+  if (!existsSync(manifest)) return undefined
+
+  const { name } = JSON.parse(readFileSync(manifest, 'utf8'))
+
+  // the digest is of what Toa ships, and a package it does not define has none
+  if (name === undefined || !name.startsWith(SCOPE)) return undefined
+
+  const { module } = await definition(name)
+  const { labels, manifests } = module.components?.() ?? {}
+
+  if (manifests === undefined) return undefined
+
+  // a chart names a component's workload the way the digest labels it
+  const index = labels.indexOf(basename(path).replace('.', '-'))
+
+  return index === -1 ? undefined : revive(manifests[index], path)
+}
+
+const SCOPE = '@toa.io/'
+
+const COMPONENTS = 'components'
+
+const MANIFEST = 'package.json'
+
 const DEFAULTS = {}

package/src/manifest.test.js

@@ -1,7 +1,7 @@
 import { it, mock } from 'node:test'
 import assert from 'node:assert/strict'
 
-import { mkdtemp, writeFile } from 'node:fs/promises'
+import { mkdtemp, mkdir, writeFile } from 'node:fs/promises'
 import { join } from 'node:path'
 import { tmpdir } from 'node:os'
 import { generate } from 'randomstring'
@@ -10,6 +10,8 @@ const NORMALIZED = 'manifest.toa.json'
 
 let normalised = 0
 
+const digest = { labels: ['identity-basic'], manifests: [{ name: 'basic', namespace: 'identity' }] }
+
 mock.module('@toa.io/norm', {
   namedExports: {
     component: () => {
@@ -17,7 +19,9 @@ mock.module('@toa.io/norm', {
 
       return mockComponent()
     },
-    definition: async () => ({ module: {} }),
+    definition: async (reference) => ({
+      module: reference === '@toa.io/extensions.exposition' ? { components: () => digest } : {}
+    }),
     revive: (declared, path) => ({ ...declared, path }),
     NORMALIZED
   }
@@ -58,6 +62,39 @@ it('should read what the build wrote, and not normalize', async () => {
   assert.strictEqual(read.locator.id, 'todos.tasks')
 })
 
+it('should read the digest for a component an extension ships, and not normalize', async () => {
+  const root = await mkdtemp(join(tmpdir(), 'toa-manifest-test'))
+  const component = join(root, 'components', 'identity.basic')
+
+  await mkdir(component, { recursive: true })
+  await writeFile(
+    join(root, 'package.json'),
+    JSON.stringify({ name: '@toa.io/extensions.exposition' })
+  )
+
+  const before = normalised
+  const read = await manifest(component)
+
+  assert.strictEqual(normalised, before, 'the component was normalized')
+  assert.strictEqual(read.path, component)
+  assert.strictEqual(read.locator.id, 'identity.basic')
+})
+
+it('should normalize a component that only looks like one an extension ships', async () => {
+  const root = await mkdtemp(join(tmpdir(), 'toa-manifest-test'))
+  const component = join(root, 'components', 'identity.basic')
+
+  await mkdir(component, { recursive: true })
+  // an application's own package, which the digest knows nothing about
+  await writeFile(join(root, 'package.json'), JSON.stringify({ name: 'acme' }))
+
+  const before = normalised
+
+  await manifest(component)
+
+  assert.strictEqual(normalised, before + 1)
+})
+
 function mockComponent() {
   return { name: generate(), namespace: generate() }
 }