@treeseed/sdk 0.13.0-rc.101 → 0.13.0-rc.103

package/dist/deployment/postgres/contracts.d.ts

@@ -22,6 +22,25 @@ export declare const postgresRequirementSchema: z.ZodObject<{
     extensions: string[];
     runtimeConnectionLimit: number;
 }>;
+/** Immutable component requirement. Installation activation supplies componentId/enabled. */
+export declare const postgresComponentRequirementSchema: z.ZodObject<Omit<{
+    id: z.ZodString;
+    componentId: z.ZodString;
+    enabled: z.ZodBoolean;
+    supportedMajors: z.ZodEffects<z.ZodArray<z.ZodNumber, "atleastone">, [number, ...number[]], [number, ...number[]]>;
+    extensions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">, string[], string[]>;
+    runtimeConnectionLimit: z.ZodNumber;
+}, "componentId" | "enabled">, "strict", z.ZodTypeAny, {
+    id: string;
+    supportedMajors: [number, ...number[]];
+    extensions: string[];
+    runtimeConnectionLimit: number;
+}, {
+    id: string;
+    supportedMajors: [number, ...number[]];
+    extensions: string[];
+    runtimeConnectionLimit: number;
+}>;
 /** Deployment owns the selected server and its bootstrap authority. No credentials here. */
 export declare const postgresServerSchema: z.ZodObject<{
     id: z.ZodString;
@@ -44,30 +63,30 @@ export declare const postgresServerSchema: z.ZodObject<{
     }>;
 }, "strict", z.ZodTypeAny, {
     id: string;
-    mode: "external" | "shared" | "dedicated";
+    mode: "shared" | "dedicated" | "external";
     environment: "production" | "staging";
     port: number;
     major: number;
+    extensions: string[];
+    installationId: string;
+    hostname: string;
     tls: {
         mode: "verify-full";
         trustReference: string;
     };
-    extensions: string[];
-    installationId: string;
-    hostname: string;
 }, {
     id: string;
-    mode: "external" | "shared" | "dedicated";
+    mode: "shared" | "dedicated" | "external";
     environment: "production" | "staging";
     port: number;
     major: number;
+    extensions: string[];
+    installationId: string;
+    hostname: string;
     tls: {
         mode: "verify-full";
         trustReference: string;
     };
-    extensions: string[];
-    installationId: string;
-    hostname: string;
 }>;
 export declare const postgresAllocationSchema: z.ZodEffects<z.ZodObject<{
     requirementId: z.ZodString;
@@ -146,30 +165,30 @@ export declare const postgresTopologySchema: z.ZodEffects<z.ZodObject<{
         }>;
     }, "strict", z.ZodTypeAny, {
         id: string;
-        mode: "external" | "shared" | "dedicated";
+        mode: "shared" | "dedicated" | "external";
         environment: "production" | "staging";
         port: number;
         major: number;
+        extensions: string[];
+        installationId: string;
+        hostname: string;
         tls: {
             mode: "verify-full";
             trustReference: string;
         };
-        extensions: string[];
-        installationId: string;
-        hostname: string;
     }, {
         id: string;
-        mode: "external" | "shared" | "dedicated";
+        mode: "shared" | "dedicated" | "external";
         environment: "production" | "staging";
         port: number;
         major: number;
+        extensions: string[];
+        installationId: string;
+        hostname: string;
         tls: {
             mode: "verify-full";
             trustReference: string;
         };
-        extensions: string[];
-        installationId: string;
-        hostname: string;
     }>, "many">;
     requirements: z.ZodArray<z.ZodObject<{
         id: z.ZodString;
@@ -250,17 +269,17 @@ export declare const postgresTopologySchema: z.ZodEffects<z.ZodObject<{
     installationId: string;
     servers: {
         id: string;
-        mode: "external" | "shared" | "dedicated";
+        mode: "shared" | "dedicated" | "external";
         environment: "production" | "staging";
         port: number;
         major: number;
+        extensions: string[];
+        installationId: string;
+        hostname: string;
         tls: {
             mode: "verify-full";
             trustReference: string;
         };
-        extensions: string[];
-        installationId: string;
-        hostname: string;
     }[];
     requirements: {
         id: string;
@@ -287,17 +306,17 @@ export declare const postgresTopologySchema: z.ZodEffects<z.ZodObject<{
     installationId: string;
     servers: {
         id: string;
-        mode: "external" | "shared" | "dedicated";
+        mode: "shared" | "dedicated" | "external";
         environment: "production" | "staging";
         port: number;
         major: number;
+        extensions: string[];
+        installationId: string;
+        hostname: string;
         tls: {
             mode: "verify-full";
             trustReference: string;
         };
-        extensions: string[];
-        installationId: string;
-        hostname: string;
     }[];
     requirements: {
         id: string;
@@ -324,17 +343,17 @@ export declare const postgresTopologySchema: z.ZodEffects<z.ZodObject<{
     installationId: string;
     servers: {
         id: string;
-        mode: "external" | "shared" | "dedicated";
+        mode: "shared" | "dedicated" | "external";
         environment: "production" | "staging";
         port: number;
         major: number;
+        extensions: string[];
+        installationId: string;
+        hostname: string;
         tls: {
             mode: "verify-full";
             trustReference: string;
         };
-        extensions: string[];
-        installationId: string;
-        hostname: string;
     }[];
     requirements: {
         id: string;
@@ -361,17 +380,17 @@ export declare const postgresTopologySchema: z.ZodEffects<z.ZodObject<{
     installationId: string;
     servers: {
         id: string;
-        mode: "external" | "shared" | "dedicated";
+        mode: "shared" | "dedicated" | "external";
         environment: "production" | "staging";
         port: number;
         major: number;
+        extensions: string[];
+        installationId: string;
+        hostname: string;
         tls: {
             mode: "verify-full";
             trustReference: string;
         };
-        extensions: string[];
-        installationId: string;
-        hostname: string;
     }[];
     requirements: {
         id: string;

package/dist/deployment/postgres/contracts.js

@@ -10,6 +10,7 @@ const postgresRequirementSchema = z.object({
   extensions: z.array(sqlName).refine(unique),
   runtimeConnectionLimit: z.number().int().min(1).max(1e3)
 }).strict();
+const postgresComponentRequirementSchema = postgresRequirementSchema.omit({ componentId: true, enabled: true });
 const postgresServerSchema = z.object({
   id,
   installationId: id,
@@ -47,7 +48,7 @@ const postgresTopologySchema = z.object({
   if (!unique(value.servers.map((server) => server.id)) || !unique(value.requirements.map((requirement) => requirement.id)) || !unique(value.allocations.map((allocation) => allocation.requirementId))) fail("Server, requirement and allocation identities must be unique.");
   if (value.servers.filter((server) => server.mode === "shared").length > 1) fail("An environment has at most one default shared server.");
   if (value.servers.some((server) => server.installationId !== value.installationId || server.environment !== value.environment)) fail("Servers must belong to this installation and environment.");
-  const databases = /* @__PURE__ */ new Set(), roles = /* @__PURE__ */ new Set();
+  const databases = /* @__PURE__ */ new Set(), roles = /* @__PURE__ */ new Set(), credentials = /* @__PURE__ */ new Set();
   for (const allocation of value.allocations) {
     const server = value.servers.find((entry) => entry.id === allocation.serverId);
     const requirement = value.requirements.find((entry) => entry.id === allocation.requirementId);
@@ -59,6 +60,10 @@ const postgresTopologySchema = z.object({
     const databaseKey = `${server.id}:${allocation.database}`;
     if (databases.has(databaseKey)) fail("Applications must not share an allocated database.");
     databases.add(databaseKey);
+    for (const reference of [allocation.migrationCredentialReference, allocation.runtimeCredentialReference]) {
+      if (credentials.has(reference)) fail("Applications must not share database credential references.");
+      credentials.add(reference);
+    }
     for (const role of [allocation.ownerRole, allocation.migrationRole, allocation.runtimeRole]) {
       const key = `${server.id}:${role}`;
       if (roles.has(key)) fail("Applications must not share database roles.");
@@ -71,6 +76,7 @@ const postgresTopologySchema = z.object({
 });
 export {
   postgresAllocationSchema,
+  postgresComponentRequirementSchema,
   postgresRequirementSchema,
   postgresServerSchema,
   postgresTopologySchema

package/dist/deployment/postgres/requirements.d.ts

@@ -0,0 +1,14 @@
+/** Call after artifact authenticity verification, with the complete selected
+ * component inventory. Host configuration cannot weaken a package requirement.
+ */
+export declare function verifyHostPostgresRequirements(hostInput: unknown, releaseInputs: unknown[]): {
+    verified: true;
+    requirements: {
+        id: string;
+        componentId: string;
+        enabled: boolean;
+        supportedMajors: [number, ...number[]];
+        extensions: string[];
+        runtimeConnectionLimit: number;
+    }[];
+};

package/dist/deployment/postgres/requirements.js

@@ -0,0 +1,30 @@
+import { componentReleaseSchema, hostConfigurationSchema } from "../schemas.js";
+import { canonicalDeploymentJson, deploymentDigest } from "../canonical.js";
+function verifyHostPostgresRequirements(hostInput, releaseInputs) {
+  const host = hostConfigurationSchema.parse(hostInput);
+  const releases = releaseInputs.map((input) => componentReleaseSchema.parse(input));
+  if (new Set(releases.map((item) => item.componentId)).size !== releases.length) throw new Error("Duplicate component release inventory");
+  if (Object.entries(host.components).some(([id, selection]) => selection.enabled && !releases.some((release) => release.componentId === id))) throw new Error("Selected component release inventory is incomplete");
+  const requirements = [];
+  for (const release of releases) {
+    const selection = host.components[release.componentId];
+    if (!selection) continue;
+    if (deploymentDigest(release.runtime) !== release.runtimeDigest) throw new Error("Component runtime digest mismatch");
+    for (const requirement of release.runtime.postgresRequirements ?? []) requirements.push({
+      ...requirement,
+      componentId: release.componentId,
+      enabled: selection.enabled
+    });
+  }
+  if (new Set(requirements.map((item) => item.id)).size !== requirements.length) throw new Error("Component database requirement identities collide");
+  const normalize = (items) => items.map((item) => ({
+    ...item,
+    supportedMajors: [...item.supportedMajors].sort((a, b) => a - b),
+    extensions: [...item.extensions].sort()
+  })).sort((a, b) => a.id.localeCompare(b.id));
+  if (canonicalDeploymentJson(normalize(requirements)) !== canonicalDeploymentJson(normalize(host.postgres?.requirements ?? []))) throw new Error("Host database requirements differ from selected immutable components");
+  return { verified: true, requirements };
+}
+export {
+  verifyHostPostgresRequirements
+};