@treeseed/sdk 0.13.0-rc.11 → 0.13.0-rc.111

package/dist/deployment/hosted-topology-template.d.ts

@@ -0,0 +1,449 @@
+import { z } from 'zod';
+import { hostedArtifactSchema } from './hosted-topology.js';
+export declare const hostedTopologyTemplateSchema: z.ZodEffects<z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"treeseed.hosted-topology-template/v1">;
+    id: z.ZodString;
+    deploymentId: z.ZodString;
+    stackId: z.ZodString;
+    environment: z.ZodEnum<["staging", "production"]>;
+    mutation: z.ZodLiteral<"agent-authorized">;
+    stateBackend: z.ZodObject<{
+        connectionRef: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        connectionRef: string;
+    }, {
+        connectionRef: string;
+    }>;
+    providerConnections: z.ZodRecord<z.ZodEnum<["cloudflare", "railway"]>, z.ZodObject<{
+        connectionRef: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        connectionRef: string;
+    }, {
+        connectionRef: string;
+    }>>;
+    artifactBindings: z.ZodRecord<z.ZodString, z.ZodObject<{
+        input: z.ZodString;
+        kind: z.ZodEnum<["archive", "file", "oci-image"]>;
+    }, "strict", z.ZodTypeAny, {
+        kind: "oci-image" | "archive" | "file";
+        input: string;
+    }, {
+        kind: "oci-image" | "archive" | "file";
+        input: string;
+    }>>;
+    resources: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        provider: z.ZodEnum<["cloudflare", "railway"]>;
+        kind: z.ZodEnum<["admin-application", "pages-application", "dns-record", "tls-policy", "api-proxy", "control-plane-api", "postgresql", "operations-runner", "treedx-service"]>;
+        dependsOn: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        parameters: z.ZodDefault<z.ZodRecord<z.ZodUnion<[z.ZodString, z.ZodString]>, z.ZodUnion<[z.ZodObject<{
+            input: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            input: string;
+        }, {
+            input: string;
+        }>, z.ZodObject<{
+            artifact: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            artifact: string;
+        }, {
+            artifact: string;
+        }>, z.ZodObject<{
+            resourceOutput: z.ZodObject<{
+                resourceId: z.ZodString;
+                output: z.ZodString;
+            }, "strict", z.ZodTypeAny, {
+                resourceId: string;
+                output: string;
+            }, {
+                resourceId: string;
+                output: string;
+            }>;
+        }, "strict", z.ZodTypeAny, {
+            resourceOutput: {
+                resourceId: string;
+                output: string;
+            };
+        }, {
+            resourceOutput: {
+                resourceId: string;
+                output: string;
+            };
+        }>, z.ZodObject<{
+            literal: z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean]>;
+        }, "strict", z.ZodTypeAny, {
+            literal: string | number | boolean;
+        }, {
+            literal: string | number | boolean;
+        }>]>>>;
+        adoption: z.ZodObject<{
+            mode: z.ZodLiteral<"adopt-or-create">;
+            externalIdInput: z.ZodOptional<z.ZodString>;
+            replacement: z.ZodLiteral<"forbidden">;
+        }, "strict", z.ZodTypeAny, {
+            mode: "adopt-or-create";
+            replacement: "forbidden";
+            externalIdInput?: string | undefined;
+        }, {
+            mode: "adopt-or-create";
+            replacement: "forbidden";
+            externalIdInput?: string | undefined;
+        }>;
+    }, "strict", z.ZodTypeAny, {
+        kind: "admin-application" | "pages-application" | "dns-record" | "tls-policy" | "api-proxy" | "control-plane-api" | "postgresql" | "operations-runner" | "treedx-service";
+        provider: "cloudflare" | "railway";
+        id: string;
+        dependsOn: string[];
+        parameters: Record<string, {
+            input: string;
+        } | {
+            artifact: string;
+        } | {
+            resourceOutput: {
+                resourceId: string;
+                output: string;
+            };
+        } | {
+            literal: string | number | boolean;
+        }>;
+        adoption: {
+            mode: "adopt-or-create";
+            replacement: "forbidden";
+            externalIdInput?: string | undefined;
+        };
+    }, {
+        kind: "admin-application" | "pages-application" | "dns-record" | "tls-policy" | "api-proxy" | "control-plane-api" | "postgresql" | "operations-runner" | "treedx-service";
+        provider: "cloudflare" | "railway";
+        id: string;
+        adoption: {
+            mode: "adopt-or-create";
+            replacement: "forbidden";
+            externalIdInput?: string | undefined;
+        };
+        dependsOn?: string[] | undefined;
+        parameters?: Record<string, {
+            input: string;
+        } | {
+            artifact: string;
+        } | {
+            resourceOutput: {
+                resourceId: string;
+                output: string;
+            };
+        } | {
+            literal: string | number | boolean;
+        }> | undefined;
+    }>, "many">;
+}, "strict", z.ZodTypeAny, {
+    id: string;
+    schemaVersion: "treeseed.hosted-topology-template/v1";
+    resources: {
+        kind: "admin-application" | "pages-application" | "dns-record" | "tls-policy" | "api-proxy" | "control-plane-api" | "postgresql" | "operations-runner" | "treedx-service";
+        provider: "cloudflare" | "railway";
+        id: string;
+        dependsOn: string[];
+        parameters: Record<string, {
+            input: string;
+        } | {
+            artifact: string;
+        } | {
+            resourceOutput: {
+                resourceId: string;
+                output: string;
+            };
+        } | {
+            literal: string | number | boolean;
+        }>;
+        adoption: {
+            mode: "adopt-or-create";
+            replacement: "forbidden";
+            externalIdInput?: string | undefined;
+        };
+    }[];
+    mutation: "agent-authorized";
+    environment: "production" | "staging";
+    deploymentId: string;
+    stackId: string;
+    stateBackend: {
+        connectionRef: string;
+    };
+    providerConnections: Partial<Record<"cloudflare" | "railway", {
+        connectionRef: string;
+    }>>;
+    artifactBindings: Record<string, {
+        kind: "oci-image" | "archive" | "file";
+        input: string;
+    }>;
+}, {
+    id: string;
+    schemaVersion: "treeseed.hosted-topology-template/v1";
+    resources: {
+        kind: "admin-application" | "pages-application" | "dns-record" | "tls-policy" | "api-proxy" | "control-plane-api" | "postgresql" | "operations-runner" | "treedx-service";
+        provider: "cloudflare" | "railway";
+        id: string;
+        adoption: {
+            mode: "adopt-or-create";
+            replacement: "forbidden";
+            externalIdInput?: string | undefined;
+        };
+        dependsOn?: string[] | undefined;
+        parameters?: Record<string, {
+            input: string;
+        } | {
+            artifact: string;
+        } | {
+            resourceOutput: {
+                resourceId: string;
+                output: string;
+            };
+        } | {
+            literal: string | number | boolean;
+        }> | undefined;
+    }[];
+    mutation: "agent-authorized";
+    environment: "production" | "staging";
+    deploymentId: string;
+    stackId: string;
+    stateBackend: {
+        connectionRef: string;
+    };
+    providerConnections: Partial<Record<"cloudflare" | "railway", {
+        connectionRef: string;
+    }>>;
+    artifactBindings: Record<string, {
+        kind: "oci-image" | "archive" | "file";
+        input: string;
+    }>;
+}>, {
+    id: string;
+    schemaVersion: "treeseed.hosted-topology-template/v1";
+    resources: {
+        kind: "admin-application" | "pages-application" | "dns-record" | "tls-policy" | "api-proxy" | "control-plane-api" | "postgresql" | "operations-runner" | "treedx-service";
+        provider: "cloudflare" | "railway";
+        id: string;
+        dependsOn: string[];
+        parameters: Record<string, {
+            input: string;
+        } | {
+            artifact: string;
+        } | {
+            resourceOutput: {
+                resourceId: string;
+                output: string;
+            };
+        } | {
+            literal: string | number | boolean;
+        }>;
+        adoption: {
+            mode: "adopt-or-create";
+            replacement: "forbidden";
+            externalIdInput?: string | undefined;
+        };
+    }[];
+    mutation: "agent-authorized";
+    environment: "production" | "staging";
+    deploymentId: string;
+    stackId: string;
+    stateBackend: {
+        connectionRef: string;
+    };
+    providerConnections: Partial<Record<"cloudflare" | "railway", {
+        connectionRef: string;
+    }>>;
+    artifactBindings: Record<string, {
+        kind: "oci-image" | "archive" | "file";
+        input: string;
+    }>;
+}, {
+    id: string;
+    schemaVersion: "treeseed.hosted-topology-template/v1";
+    resources: {
+        kind: "admin-application" | "pages-application" | "dns-record" | "tls-policy" | "api-proxy" | "control-plane-api" | "postgresql" | "operations-runner" | "treedx-service";
+        provider: "cloudflare" | "railway";
+        id: string;
+        adoption: {
+            mode: "adopt-or-create";
+            replacement: "forbidden";
+            externalIdInput?: string | undefined;
+        };
+        dependsOn?: string[] | undefined;
+        parameters?: Record<string, {
+            input: string;
+        } | {
+            artifact: string;
+        } | {
+            resourceOutput: {
+                resourceId: string;
+                output: string;
+            };
+        } | {
+            literal: string | number | boolean;
+        }> | undefined;
+    }[];
+    mutation: "agent-authorized";
+    environment: "production" | "staging";
+    deploymentId: string;
+    stackId: string;
+    stateBackend: {
+        connectionRef: string;
+    };
+    providerConnections: Partial<Record<"cloudflare" | "railway", {
+        connectionRef: string;
+    }>>;
+    artifactBindings: Record<string, {
+        kind: "oci-image" | "archive" | "file";
+        input: string;
+    }>;
+}>;
+export type HostedTopologyTemplate = z.infer<typeof hostedTopologyTemplateSchema>;
+export declare const hostedTopologyArtifactInputsSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"treeseed.hosted-topology-artifacts/v1">;
+    artifacts: z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"archive">;
+        format: z.ZodLiteral<"tar+gzip">;
+        digest: z.ZodString;
+        source: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        kind: "archive";
+        digest: string;
+        source: string;
+        format: "tar+gzip";
+    }, {
+        kind: "archive";
+        digest: string;
+        source: string;
+        format: "tar+gzip";
+    }>, z.ZodObject<{
+        kind: z.ZodLiteral<"file">;
+        mediaType: z.ZodString;
+        digest: z.ZodString;
+        source: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        kind: "file";
+        digest: string;
+        source: string;
+        mediaType: string;
+    }, {
+        kind: "file";
+        digest: string;
+        source: string;
+        mediaType: string;
+    }>, z.ZodEffects<z.ZodObject<{
+        kind: z.ZodLiteral<"oci-image">;
+        digest: z.ZodString;
+        identity: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        identity: string;
+        kind: "oci-image";
+        digest: string;
+    }, {
+        identity: string;
+        kind: "oci-image";
+        digest: string;
+    }>, {
+        identity: string;
+        kind: "oci-image";
+        digest: string;
+    }, {
+        identity: string;
+        kind: "oci-image";
+        digest: string;
+    }>]>>;
+}, "strict", z.ZodTypeAny, {
+    schemaVersion: "treeseed.hosted-topology-artifacts/v1";
+    artifacts: Record<string, {
+        kind: "archive";
+        digest: string;
+        source: string;
+        format: "tar+gzip";
+    } | {
+        kind: "file";
+        digest: string;
+        source: string;
+        mediaType: string;
+    } | {
+        identity: string;
+        kind: "oci-image";
+        digest: string;
+    }>;
+}, {
+    schemaVersion: "treeseed.hosted-topology-artifacts/v1";
+    artifacts: Record<string, {
+        kind: "archive";
+        digest: string;
+        source: string;
+        format: "tar+gzip";
+    } | {
+        kind: "file";
+        digest: string;
+        source: string;
+        mediaType: string;
+    } | {
+        identity: string;
+        kind: "oci-image";
+        digest: string;
+    }>;
+}>;
+export type HostedTopologyArtifactInputs = z.infer<typeof hostedTopologyArtifactInputsSchema>;
+export declare function compileHostedTopologyTemplate(input: {
+    template: HostedTopologyTemplate;
+    teamId: string;
+    platformCommit: string;
+    artifacts: Record<string, z.input<typeof hostedArtifactSchema>>;
+}): {
+    id: string;
+    schemaVersion: "treeseed.hosted-topology/v1";
+    resources: {
+        kind: "admin-application" | "pages-application" | "dns-record" | "tls-policy" | "api-proxy" | "control-plane-api" | "postgresql" | "operations-runner" | "treedx-service";
+        provider: "cloudflare" | "railway";
+        id: string;
+        dependsOn: string[];
+        parameters: Record<string, {
+            input: string;
+        } | {
+            artifact: string;
+        } | {
+            resourceOutput: {
+                resourceId: string;
+                output: string;
+            };
+        } | {
+            literal: string | number | boolean;
+        }>;
+        adoption: {
+            mode: "adopt-or-create";
+            replacement: "forbidden";
+            externalIdInput?: string | undefined;
+        };
+    }[];
+    teamId: string;
+    platform: {
+        repository: "treeseed-ai/platform";
+        commit: string;
+    };
+    mutation: "agent-authorized";
+    environment: "production" | "staging";
+    artifacts: Record<string, {
+        kind: "archive";
+        digest: string;
+        source: string;
+        format: "tar+gzip";
+    } | {
+        kind: "file";
+        digest: string;
+        source: string;
+        mediaType: string;
+    } | {
+        identity: string;
+        kind: "oci-image";
+        digest: string;
+    }>;
+    deploymentId: string;
+    stackId: string;
+    stateBackend: {
+        connectionRef: string;
+    };
+    providerConnections: Partial<Record<"cloudflare" | "railway", {
+        connectionRef: string;
+    }>>;
+};

package/dist/deployment/hosted-topology-template.js

@@ -0,0 +1,56 @@
+import { z } from "zod";
+import { hostedArtifactSchema, hostedProviderSchema, hostedResourceDeclarationSchema, hostedTopologyDeclarationSchema } from "./hosted-topology.js";
+const identifier = z.string().regex(/^[a-z][a-z0-9.-]{1,63}$/u);
+const custodyIdentifier = z.string().regex(/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/u);
+const gitCommit = z.string().regex(/^[a-f0-9]{40}$/u);
+const hostedTopologyTemplateSchema = z.object({
+  schemaVersion: z.literal("treeseed.hosted-topology-template/v1"),
+  id: identifier,
+  deploymentId: custodyIdentifier,
+  stackId: custodyIdentifier,
+  environment: z.enum(["staging", "production"]),
+  mutation: z.literal("agent-authorized"),
+  stateBackend: z.object({ connectionRef: identifier }).strict(),
+  providerConnections: z.record(hostedProviderSchema, z.object({ connectionRef: identifier }).strict()),
+  artifactBindings: z.record(identifier, z.object({ input: identifier, kind: z.enum(["archive", "file", "oci-image"]) }).strict()),
+  resources: z.array(hostedResourceDeclarationSchema)
+}).strict().superRefine((template, context) => {
+  const referenced = new Set(template.resources.flatMap(({ parameters }) => Object.values(parameters).flatMap((parameter) => "artifact" in parameter ? [parameter.artifact] : [])));
+  for (const artifact of referenced) if (!template.artifactBindings[artifact]) context.addIssue({ code: z.ZodIssueCode.custom, path: ["artifactBindings"], message: `Hosted topology template has no binding for ${artifact}.` });
+  for (const artifact of Object.keys(template.artifactBindings)) if (!referenced.has(artifact)) context.addIssue({ code: z.ZodIssueCode.custom, path: ["artifactBindings", artifact], message: `Hosted topology artifact binding ${artifact} is unused.` });
+});
+const hostedTopologyArtifactInputsSchema = z.object({
+  schemaVersion: z.literal("treeseed.hosted-topology-artifacts/v1"),
+  artifacts: z.record(identifier, hostedArtifactSchema)
+}).strict();
+function compileHostedTopologyTemplate(input) {
+  const template = hostedTopologyTemplateSchema.parse(input.template), teamId = custodyIdentifier.parse(input.teamId), platformCommit = gitCommit.parse(input.platformCommit);
+  const artifactInputs = hostedTopologyArtifactInputsSchema.parse({ schemaVersion: "treeseed.hosted-topology-artifacts/v1", artifacts: input.artifacts }).artifacts;
+  const expectedInputs = Object.values(template.artifactBindings).map(({ input: name }) => name).sort(), receivedInputs = Object.keys(artifactInputs).sort();
+  if (new Set(expectedInputs).size !== expectedInputs.length) throw new Error("Hosted topology template artifact input names must be unique.");
+  if (expectedInputs.join("\n") !== receivedInputs.join("\n")) throw new Error("Hosted topology artifact inputs must match the exact template bindings.");
+  const artifacts = Object.fromEntries(Object.entries(template.artifactBindings).sort(([left], [right]) => left.localeCompare(right)).map(([id, binding]) => {
+    const artifact = artifactInputs[binding.input];
+    if (artifact.kind !== binding.kind) throw new Error(`Hosted topology artifact ${binding.input} must be ${binding.kind}.`);
+    return [id, artifact];
+  }));
+  return hostedTopologyDeclarationSchema.parse({
+    schemaVersion: "treeseed.hosted-topology/v1",
+    id: template.id,
+    teamId,
+    deploymentId: template.deploymentId,
+    stackId: template.stackId,
+    environment: template.environment,
+    mutation: template.mutation,
+    platform: { repository: "treeseed-ai/platform", commit: platformCommit },
+    stateBackend: template.stateBackend,
+    providerConnections: template.providerConnections,
+    artifacts,
+    resources: template.resources
+  });
+}
+export {
+  compileHostedTopologyTemplate,
+  hostedTopologyArtifactInputsSchema,
+  hostedTopologyTemplateSchema
+};