@toa.io/operations 1.0.0-alpha.314 → 1.0.0-alpha.316

package/CHANGELOG.md

@@ -3,6 +3,23 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [1.0.0-alpha.316](https://github.com/toa-io/toa/compare/v1.0.0-alpha.315...v1.0.0-alpha.316) (2026-09-23)
+
+**Note:** Version bump only for package @toa.io/operations
+
+
+
+
+
+# [1.0.0-alpha.315](https://github.com/toa-io/toa/compare/v1.0.0-alpha.314...v1.0.0-alpha.315) (2026-09-23)
+
+* feat(map)!: leave out of a contract what the runtime gives every component ([b81837a](https://github.com/toa-io/toa/commit/b81837a3bc4771d7ee1c10fe613c9a1d7501bf1a))
+
+### BREAKING CHANGES
+
+* the deployed component map is `/etc/toa/.map.json.gz`.
+
+
 # [1.0.0-alpha.314](https://github.com/toa-io/toa/compare/v1.0.0-alpha.313...v1.0.0-alpha.314) (2026-09-19)
 
 ### Features

package/image/runtime.Dockerfile

@@ -6,6 +6,12 @@ ARG VERSION
 # on, and npm links a dependency's binaries only into a local `node_modules/.bin`
 WORKDIR /toa
 
+# what the install scripts of Toa's own dependencies may do, stated where npm reads it — the
+# project Toa is installed into, which every later `npm i --prefix /toa` of an image built on
+# this one installs into too. npm runs no script nobody allowed and warns about each, and the
+# one there is, msgpackr-extract's, only looks for the binary its optional dependency provides
+RUN echo '{ "private": true, "allowScripts": { "msgpackr-extract": false } }' > package.json
+
 # mounted rather than written: npm's cache is a hundred megabytes, and a layer keeps whatever
 # the command left behind
 RUN --mount=type=cache,target=/root/.npm,sharing=locked \

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@toa.io/operations",
-  "version": "1.0.0-alpha.314",
+  "version": "1.0.0-alpha.316",
   "type": "module",
   "description": "Toa Deployment",
   "homepage": "https://toa.io",
@@ -30,9 +30,9 @@
   "dependencies": {
     "@toa.io/generic": "1.0.0-alpha.311",
     "@toa.io/kubernetes": "1.0.0-alpha.301",
-    "@toa.io/norm": "1.0.0-alpha.314",
+    "@toa.io/norm": "1.0.0-alpha.316",
     "oxc-parser": "0.150.0",
     "paseto": "4.0.1"
   },
-  "gitHead": "4b7c0f4468e6fa89f95a69f43fed85c648fb033d"
+  "gitHead": "1a873a2f74dc27cc82cc523aa4557a38f23593c6"
 }

package/src/deployment/.deployment/describe.js

@@ -1,3 +1,4 @@
+import { gzipSync } from 'node:zlib'
 import { map } from '@toa.io/norm'
 import { MAP_DIRECTORY, MAP_FILE } from '@toa.io/definitions'
 
@@ -170,8 +171,14 @@ function unit(context, dependency) {
  * The component map every workload mounts: which version of a component a process asks what that
  * component provides. Named rather than found, because a ConfigMap mounts as a directory.
  *
+ * Compressed here rather than in the chart, which renders no gzip, and carried as the bytes it is:
+ * a ConfigMap is capped at a megabyte, and this copy is read by a program. `gzipSync` writes a zero
+ * timestamp, so a deploy that changed nothing renders the same object.
+ *
  * @param {toa.norm.Context} context
  */
 function versions(context) {
-  return { directory: MAP_DIRECTORY, file: MAP_FILE, components: map(context) }
+  const gzip = gzipSync(Buffer.from(JSON.stringify(map(context)))).toString('base64')
+
+  return { directory: MAP_DIRECTORY, file: MAP_FILE, gzip }
 }

package/src/deployment/chart/templates/components.configmap.yaml

@@ -2,13 +2,12 @@
 # What every component of the context provides, by the version this deployment runs of it.
 # Mounted rather than rendered into a workload's environment: a variable would replace every pod
 # of the context on every deployment, and a pod that came up between two of them could not be
-# told. Rendered compactly, because what is read here is read by a program and a ConfigMap is
-# capped at a megabyte.
+# told. Carried gzipped, because what is read here is read by a program and a ConfigMap is capped
+# at a megabyte: `kubectl exec <pod> -- zcat {{ .Values.map.directory }}/{{ .Values.map.file }}`.
 apiVersion: v1
 kind: ConfigMap
 metadata:
   name: components
-data:
-  {{ .Values.map.file }}: |
-{{ .Values.map.components | toJson | indent 4 }}
+binaryData:
+  {{ .Values.map.file }}: {{ .Values.map.gzip | quote }}
 {{- end }}

package/src/deployment/images/dependencies.test.js

@@ -213,7 +213,7 @@ describe('prepare', () => {
     assert.deepStrictEqual(lines, [
       `FROM ${image.dependencies.reference}`,
       'COPY --link . /composition',
-      'CMD toa compose * --map /etc/toa/.map.json'
+      'CMD toa compose * --map /etc/toa/.map.json.gz'
     ])
 
     const entries = (await readdir(context, { recursive: true })).sort()