@wildo-ai/platform-config-lib 1.0.1

package/dist/esm/infra-managers/redis-manager.service.js

@@ -0,0 +1,326 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import Redis from 'ioredis';
+import { injectable, inject } from 'inversify';
+import { PLATFORM_RUNTIME_BRIDGE_TYPES, } from '../runtime-bridge/platform-runtime-bridge.contracts.js';
+/**
+ * Redis Connection Manager Service
+ * Manages Redis connections for different applications and platform services
+ */
+let RedisConnectionManagerService = class RedisConnectionManagerService {
+    logger;
+    connections = new Map();
+    adminRedis = null;
+    logDebug;
+    constructor(logger) {
+        this.logger = logger;
+        this.logDebug = this.logger.debugByType('RedisConnectionManagerService');
+        this.logger.setDebugTypeLogging('RedisConnectionManagerService', true);
+        this.logDebug('Redis connection manager service initialized');
+    }
+    // =====================
+    // ACL MANAGEMENT (Admin)
+    // =====================
+    /**
+     * Check if Redis ACL admin is initialized and ready to use
+     * @returns true if initializeAclAdmin() has been called successfully
+     */
+    isAclAdminInitialized() {
+        return this.adminRedis !== null;
+    }
+    /**
+     * Initialize Redis ACL admin connection with retry logic.
+     * Waits for Redis to be ready before returning.
+     * @param config - Redis admin configuration
+     * @param maxRetries - Maximum number of retry attempts (default: 10)
+     * @param retryDelayMs - Delay between retries in milliseconds (default: 3000)
+     * @throws Error if connection cannot be established after all retries
+     */
+    async initializeAclAdmin(config, maxRetries = 10, retryDelayMs = 3000) {
+        if (this.adminRedis)
+            return;
+        this.logDebug('Initializing Redis ACL admin connection');
+        for (let attempt = 1; attempt <= maxRetries; attempt++) {
+            try {
+                this.adminRedis = new Redis(config.adminUrl, {
+                    enableReadyCheck: true,
+                    connectTimeout: 10000,
+                    commandTimeout: 5000,
+                    lazyConnect: true, // Don't connect immediately
+                });
+                // CRITICAL: Attach error handler before connect to prevent unhandled errors during Redis restarts
+                this.adminRedis.on('error', (err) => {
+                    this.logger.error('Redis ACL admin connection error', { error: err.message });
+                });
+                this.adminRedis.on('close', () => {
+                    this.logger.warn('Redis ACL admin connection closed');
+                });
+                this.adminRedis.on('reconnecting', () => {
+                    this.logDebug('Redis ACL admin reconnecting...');
+                });
+                await this.adminRedis.connect();
+                await this.adminRedis.ping();
+                this.logDebug('Redis ACL admin connection verified', { attempt });
+                return;
+            }
+            catch (error) {
+                const errorMsg = error instanceof Error ? error.message : String(error);
+                const isConnectionError = errorMsg.includes('ECONNREFUSED') || errorMsg.includes('ETIMEDOUT');
+                // Clean up failed connection
+                if (this.adminRedis) {
+                    try {
+                        this.adminRedis.disconnect();
+                    }
+                    catch { }
+                    this.adminRedis = null;
+                }
+                if (attempt === maxRetries) {
+                    throw new Error(`Redis ACL admin connection failed after ${maxRetries} attempts: ${errorMsg}`);
+                }
+                if (isConnectionError) {
+                    this.logDebug(`Redis not ready (attempt ${attempt}/${maxRetries}), retrying in ${retryDelayMs}ms...`, { error: errorMsg });
+                    await this.sleep(retryDelayMs);
+                }
+                else {
+                    // Non-connection error (e.g., auth failure) - fail immediately
+                    throw new Error(`Redis ACL admin connection error: ${errorMsg}`);
+                }
+            }
+        }
+    }
+    sleep(ms) {
+        return new Promise(resolve => setTimeout(resolve, ms));
+    }
+    async upsertTenantUserAcl(input) {
+        if (!this.adminRedis)
+            throw new Error('Redis ACL admin not initialized');
+        // Include @pubsub for psubscribe/subscribe operations needed by Socket.IO Redis adapter
+        const allowCats = input.allowCategories ?? ['@read', '@write', '@pubsub'];
+        const denyCats = input.denyCategories ?? ['@dangerous'];
+        // SECURITY NOTE: SCAN is intentionally allowed because:
+        // 1. Key pattern ACL (~{username}:*) already restricts which keys SCAN can return
+        // 2. SCAN is non-blocking (unlike KEYS which uses cursor-based iteration)
+        // 3. Required for legitimate operations like editing state cleanup on disconnect
+        // KEYS is still denied as it's a blocking O(N) operation that can freeze Redis
+        const denyCmds = input.denyCommands ?? ['FLUSHALL', 'CONFIG', 'SHUTDOWN', 'KEYS'];
+        const args = [
+            'SETUSER',
+            input.username,
+            'on',
+            `>${input.password}`,
+            'resetkeys',
+            'resetchannels',
+            // Revoke all commands first (more widely supported than 'resetcommands')
+            '-@all',
+            `~${input.keyPattern}`,
+        ];
+        // SECURITY FIX: Use tenant-specific channel patterns instead of allchannels
+        // Socket.IO Redis adapter creates multiple channel types with namespace:
+        //   - {prefix}#/{namespace}#...        (main broadcast channel)
+        //   - {prefix}-request#/{namespace}#   (request routing channel)  
+        //   - {prefix}-response#/{namespace}#  (response routing channel)
+        // 
+        // For Redis ACL, PSUBSCRIBE patterns must be explicitly allowed.
+        // ACL pattern `&foo#*` matches SUBSCRIBE to any `foo#...` channel
+        // but PSUBSCRIBE to pattern `foo#/#*` requires `&foo#/#*` in the ACL.
+        // 
+        // We allow both generic patterns and the specific `/#` namespace patterns
+        // to support both SUBSCRIBE and PSUBSCRIBE operations.
+        args.push(`&${input.username}#*`);
+        args.push(`&${input.username}#/#*`);
+        args.push(`&${input.username}-request#*`);
+        args.push(`&${input.username}-request#/#*`);
+        args.push(`&${input.username}-response#*`);
+        args.push(`&${input.username}-response#/#*`);
+        for (const cat of allowCats)
+            args.push(`+${cat}`);
+        for (const cat of denyCats)
+            args.push(`-${cat}`);
+        for (const cmd of denyCmds)
+            args.push(`-${cmd}`);
+        // Explicitly allow INFO command for ioredis ready check
+        args.push('+INFO');
+        // Allow EVAL/EVALSHA for Lua scripting (used by auth session atomic updates,
+        // rate limiting, etc.). Safe: scripts run under the same key ACL restrictions.
+        args.push('+EVAL');
+        args.push('+EVALSHA');
+        this.logDebug('Applying Redis ACL SETUSER', {
+            username: input.username,
+            keyPattern: input.keyPattern,
+            channelPatterns: [
+                `${input.username}#*`, `${input.username}#/#*`,
+                `${input.username}-request#*`, `${input.username}-request#/#*`,
+                `${input.username}-response#*`, `${input.username}-response#/#*`
+            ]
+        });
+        try {
+            await this.adminRedis.acl(...args);
+        }
+        catch (e) {
+            // If user exists, SETUSER updates in-place; if command failed for transient reason, retry once
+            this.logDebug('Redis ACL SETUSER failed, retrying once', { error: e instanceof Error ? e.message : String(e) });
+            await this.adminRedis.acl(...args);
+        }
+        return { username: input.username, configured: true };
+    }
+    async deleteTenantUser(username) {
+        if (!this.adminRedis)
+            throw new Error('Redis ACL admin not initialized');
+        this.logDebug('Deleting Redis ACL user', { username });
+        const res = await this.adminRedis.acl('DELUSER', username);
+        return { username, deleted: res === 1 };
+    }
+    /**
+     * Persist ACL configuration to disk.
+     * This saves all ACL users (including tenant users) to the ACL file.
+     * Required for tenant users to survive Valkey/Redis restarts.
+     *
+     * IMPORTANT: The Valkey StatefulSet must have the ACL file on a
+     * persistent volume for this to be effective. See deployment.yaml.hbs.
+     */
+    async aclSave() {
+        if (!this.adminRedis)
+            throw new Error('Redis ACL admin not initialized');
+        this.logDebug('Persisting ACL configuration to disk');
+        try {
+            await this.adminRedis.acl('SAVE');
+            this.logDebug('ACL configuration saved successfully');
+        }
+        catch (e) {
+            const errorMsg = e instanceof Error ? e.message : String(e);
+            this.logger.error('Failed to save ACL configuration', { error: errorMsg });
+            throw new Error(`ACL SAVE failed: ${errorMsg}`);
+        }
+    }
+    /**
+     * Create a new Redis connection
+     */
+    async createConnection(connectionName, redisUrl, options) {
+        try {
+            if (this.connections.has(connectionName)) {
+                this.logger.warn(`Redis connection ${connectionName} already exists, returning existing connection`);
+                return this.connections.get(connectionName);
+            }
+            const defaultOptions = {
+                enableReadyCheck: true,
+                maxRetriesPerRequest: 3,
+                connectTimeout: 10000,
+                commandTimeout: 5000,
+                ...options
+            };
+            const redis = new Redis(redisUrl, defaultOptions);
+            redis.on('connect', () => {
+                this.logger.info(`Redis connected: ${connectionName}`);
+            });
+            redis.on('error', (error) => {
+                this.logger.error(`Redis connection error for ${connectionName}:`, error);
+            });
+            redis.on('close', () => {
+                this.logger.warn(`Redis connection closed: ${connectionName}`);
+            });
+            // Wait for connection to be ready
+            await redis.ping();
+            this.connections.set(connectionName, redis);
+            this.logger.info(`Redis connection '${connectionName}' established successfully`);
+            return redis;
+        }
+        catch (error) {
+            this.logger.error(`Failed to create Redis connection '${connectionName}':`, error);
+            throw error;
+        }
+    }
+    /**
+     * Get an existing Redis connection by name
+     */
+    getConnection(connectionName) {
+        return this.connections.get(connectionName);
+    }
+    /**
+     * Get all connection names
+     */
+    getConnectionNames() {
+        return Array.from(this.connections.keys());
+    }
+    /**
+     * Close a specific connection
+     */
+    async closeConnection(connectionName) {
+        const redis = this.connections.get(connectionName);
+        if (redis) {
+            await redis.quit();
+            this.connections.delete(connectionName);
+            this.logger.info(`Redis connection '${connectionName}' closed`);
+        }
+    }
+    /**
+     * Close all connections
+     */
+    async closeAllConnections() {
+        const closePromises = Array.from(this.connections.entries()).map(async ([name, redis]) => {
+            await redis.quit();
+            this.logger.info(`Redis connection '${name}' closed`);
+        });
+        await Promise.all(closePromises);
+        this.connections.clear();
+        this.logger.info('All Redis connections closed');
+    }
+    /**
+     * Check if a connection exists and is ready
+     */
+    async isConnectionReady(connectionName) {
+        const redis = this.connections.get(connectionName);
+        if (!redis)
+            return false;
+        try {
+            await redis.ping();
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Get connection health status
+     */
+    async getConnectionHealth() {
+        const health = {};
+        const healthChecks = Array.from(this.connections.entries()).map(async ([name, redis]) => {
+            try {
+                const start = Date.now();
+                await redis.ping();
+                const latency = Date.now() - start;
+                health[name] = { status: 'connected', latency };
+            }
+            catch (error) {
+                health[name] = { status: 'disconnected' };
+            }
+        });
+        await Promise.all(healthChecks);
+        return health;
+    }
+};
+RedisConnectionManagerService = __decorate([
+    injectable(),
+    __param(0, inject(PLATFORM_RUNTIME_BRIDGE_TYPES.Logger)),
+    __metadata("design:paramtypes", [Object])
+], RedisConnectionManagerService);
+export { RedisConnectionManagerService };
+// Predefined connection types for platform management
+export var PlatformRedisType;
+(function (PlatformRedisType) {
+    PlatformRedisType["PLATFORM_CACHE"] = "platform-cache";
+    PlatformRedisType["SESSION_STORE"] = "session-store";
+    PlatformRedisType["RATE_LIMITING"] = "rate-limiting";
+    PlatformRedisType["PUB_SUB"] = "pub-sub";
+})(PlatformRedisType || (PlatformRedisType = {}));
+//# sourceMappingURL=redis-manager.service.js.map

package/dist/esm/infra-managers/redis-manager.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis-manager.service.js","sourceRoot":"","sources":["../../../src/infra-managers/redis-manager.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,KAAuB,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EACL,6BAA6B,GAE9B,MAAM,qDAAqD,CAAC;AAQ7D;;;GAGG;AAEI,IAAM,6BAA6B,GAAnC,MAAM,6BAA6B;IAMgB;IALhD,WAAW,GAAuB,IAAI,GAAG,EAAE,CAAC;IAC5C,UAAU,GAAiB,IAAI,CAAC;IAC9B,QAAQ,CAA+D;IAEjF,YACwD,MAA6B;QAA7B,WAAM,GAAN,MAAM,CAAuB;QAEnF,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,+BAA+B,CAAC,CAAC;QACzE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAC;QACvE,IAAI,CAAC,QAAQ,CAAC,8CAA8C,CAAC,CAAC;IAChE,CAAC;IAED,wBAAwB;IACxB,yBAAyB;IACzB,wBAAwB;IAExB;;;OAGG;IACI,qBAAqB;QAC1B,OAAO,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC;IAClC,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,kBAAkB,CAC7B,MAA2B,EAC3B,aAAqB,EAAE,EACvB,eAAuB,IAAI;QAE3B,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO;QAE5B,IAAI,CAAC,QAAQ,CAAC,yCAAyC,CAAC,CAAC;QAEzD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;YACvD,IAAI,CAAC;gBACH,IAAI,CAAC,UAAU,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;oBAC3C,gBAAgB,EAAE,IAAI;oBACtB,cAAc,EAAE,KAAK;oBACrB,cAAc,EAAE,IAAI;oBACpB,WAAW,EAAE,IAAI,EAAE,4BAA4B;iBAChD,CAAC,CAAC;gBAEH,kGAAkG;gBAClG,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;oBAClC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAChF,CAAC,CAAC,CAAC;gBACH,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;oBAC/B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;gBACxD,CAAC,CAAC,CAAC;gBACH,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE;oBACtC,IAAI,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC;gBACnD,CAAC,CAAC,CAAC;gBAEH,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBAChC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;gBAC7B,IAAI,CAAC,QAAQ,CAAC,qCAAqC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;gBAClE,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACxE,MAAM,iBAAiB,GAAG,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBAE9F,6BAA6B;gBAC7B,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;oBACpB,IAAI,CAAC;wBAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAA,CAAC;oBAC9C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;gBACzB,CAAC;gBAED,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;oBAC3B,MAAM,IAAI,KAAK,CAAC,2CAA2C,UAAU,cAAc,QAAQ,EAAE,CAAC,CAAC;gBACjG,CAAC;gBAED,IAAI,iBAAiB,EAAE,CAAC;oBACtB,IAAI,CAAC,QAAQ,CAAC,4BAA4B,OAAO,IAAI,UAAU,kBAAkB,YAAY,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;oBAC3H,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBACjC,CAAC;qBAAM,CAAC;oBACN,+DAA+D;oBAC/D,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,EAAE,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,EAAU;QACtB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACzD,CAAC;IAEM,KAAK,CAAC,mBAAmB,CAAC,KAA8B;QAC7D,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACzE,wFAAwF;QACxF,MAAM,SAAS,GAAG,KAAK,CAAC,eAAe,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,KAAK,CAAC,cAAc,IAAI,CAAC,YAAY,CAAC,CAAC;QACxD,wDAAwD;QACxD,kFAAkF;QAClF,0EAA0E;QAC1E,iFAAiF;QACjF,+EAA+E;QAC/E,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAElF,MAAM,IAAI,GAAa;YACrB,SAAS;YACT,KAAK,CAAC,QAAQ;YACd,IAAI;YACJ,IAAI,KAAK,CAAC,QAAQ,EAAE;YACpB,WAAW;YACX,eAAe;YACf,yEAAyE;YACzE,OAAO;YACP,IAAI,KAAK,CAAC,UAAU,EAAE;SACvB,CAAC;QACF,4EAA4E;QAC5E,yEAAyE;QACzE,gEAAgE;QAChE,mEAAmE;QACnE,kEAAkE;QAClE,GAAG;QACH,iEAAiE;QACjE,kEAAkE;QAClE,sEAAsE;QACtE,GAAG;QACH,0EAA0E;QAC1E,uDAAuD;QACvD,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,YAAY,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,cAAc,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,aAAa,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,eAAe,CAAC,CAAC;QAC7C,KAAK,MAAM,GAAG,IAAI,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QAClD,KAAK,MAAM,GAAG,IAAI,QAAQ;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QACjD,KAAK,MAAM,GAAG,IAAI,QAAQ;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QACjD,wDAAwD;QACxD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnB,6EAA6E;QAC7E,+EAA+E;QAC/E,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAEtB,IAAI,CAAC,QAAQ,CAAC,4BAA4B,EAAE;YAC1C,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,eAAe,EAAE;gBACf,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,GAAG,KAAK,CAAC,QAAQ,MAAM;gBAC9C,GAAG,KAAK,CAAC,QAAQ,YAAY,EAAE,GAAG,KAAK,CAAC,QAAQ,cAAc;gBAC9D,GAAG,KAAK,CAAC,QAAQ,aAAa,EAAE,GAAG,KAAK,CAAC,QAAQ,eAAe;aACjE;SACF,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAO,IAAI,CAAC,UAAkB,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,+FAA+F;YAC/F,IAAI,CAAC,QAAQ,CAAC,yCAAyC,EAAE,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAChH,MAAO,IAAI,CAAC,UAAkB,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACxD,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QAC5C,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACzE,IAAI,CAAC,QAAQ,CAAC,yBAAyB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,MAAO,IAAI,CAAC,UAAkB,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACpE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;IAC1C,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,OAAO;QAClB,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACzE,IAAI,CAAC,QAAQ,CAAC,sCAAsC,CAAC,CAAC;QACtD,IAAI,CAAC;YACH,MAAO,IAAI,CAAC,UAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,CAAC,QAAQ,CAAC,sCAAsC,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,QAAQ,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC5D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,oBAAoB,QAAQ,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,cAAsB,EACtB,QAAgB,EAChB,OAAsB;QAEtB,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;gBACzC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,cAAc,gDAAgD,CAAC,CAAC;gBACrG,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,cAAc,CAAE,CAAC;YAC/C,CAAC;YAED,MAAM,cAAc,GAAiB;gBACnC,gBAAgB,EAAE,IAAI;gBACtB,oBAAoB,EAAE,CAAC;gBACvB,cAAc,EAAE,KAAK;gBACrB,cAAc,EAAE,IAAI;gBACpB,GAAG,OAAO;aACX,CAAC;YAEF,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YAElD,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;gBACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,cAAc,EAAE,CAAC,CAAC;YACzD,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,cAAc,GAAG,EAAE,KAAK,CAAC,CAAC;YAC5E,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,cAAc,EAAE,CAAC,CAAC;YACjE,CAAC,CAAC,CAAC;YAEH,kCAAkC;YAClC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;YAEnB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;YAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,cAAc,4BAA4B,CAAC,CAAC;YAElF,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,cAAc,IAAI,EAAE,KAAK,CAAC,CAAC;YACnF,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,cAAsB;QAClC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,cAAsB;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACnD,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YACxC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,cAAc,UAAU,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB;QACvB,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAC9D,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE;YACtB,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,IAAI,UAAU,CAAC,CAAC;QACxD,CAAC,CACF,CAAC;QAEF,MAAM,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACjC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,cAAsB;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAEzB,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB;QACvB,MAAM,MAAM,GAAyD,EAAE,CAAC;QAExE,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAC7D,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE;YACtB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACzB,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;gBACnB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;gBACnC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;YAClD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;YAC5C,CAAC;QACH,CAAC,CACF,CAAC;QAEF,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAChC,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAA;AAjUY,6BAA6B;IADzC,UAAU,EAAE;IAOR,WAAA,MAAM,CAAC,6BAA6B,CAAC,MAAM,CAAC,CAAA;;GANpC,6BAA6B,CAiUzC;;AAED,sDAAsD;AACtD,MAAM,CAAN,IAAY,iBAKX;AALD,WAAY,iBAAiB;IAC3B,sDAAiC,CAAA;IACjC,oDAA+B,CAAA;IAC/B,oDAA+B,CAAA;IAC/B,wCAAmB,CAAA;AACrB,CAAC,EALW,iBAAiB,KAAjB,iBAAiB,QAK5B"}

package/dist/esm/project-config/define-framework-config.d.ts

@@ -0,0 +1,36 @@
+import { z } from 'zod';
+export declare const WildoFrameworkReleaseNpmConfigSchema: z.ZodObject<{
+    scope: z.ZodLiteral<"@wildo-ai">;
+    packages: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export type WildoFrameworkReleaseNpmConfig = z.infer<typeof WildoFrameworkReleaseNpmConfigSchema>;
+export declare const WildoFrameworkReleaseDockerConfigSchema: z.ZodObject<{
+    namespace: z.ZodLiteral<"wildoai">;
+    images: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export type WildoFrameworkReleaseDockerConfig = z.infer<typeof WildoFrameworkReleaseDockerConfigSchema>;
+export declare const WildoFrameworkConfigSchema: z.ZodObject<{
+    version: z.ZodDefault<z.ZodNumber>;
+    frameworkVersion: z.ZodString;
+    minCliVersion: z.ZodString;
+    publish: z.ZodObject<{
+        npm: z.ZodObject<{
+            scope: z.ZodLiteral<"@wildo-ai">;
+            packages: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+        docker: z.ZodObject<{
+            namespace: z.ZodLiteral<"wildoai">;
+            images: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export type WildoFrameworkConfig = z.infer<typeof WildoFrameworkConfigSchema>;
+export type WildoFrameworkConfigInput = z.input<typeof WildoFrameworkConfigSchema>;
+/**
+ * Define framework-scoped release configuration.
+ *
+ * This is the author-owned source of truth for framework release metadata that
+ * later materializes into `wildo-framework.info.json` and the CLI publish flow.
+ */
+export declare function defineFrameworkConfig(config: WildoFrameworkConfigInput): WildoFrameworkConfig;
+//# sourceMappingURL=define-framework-config.d.ts.map

package/dist/esm/project-config/define-framework-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"define-framework-config.d.ts","sourceRoot":"","sources":["../../../src/project-config/define-framework-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,eAAO,MAAM,oCAAoC;;;uCAG/C,CAAC;AACH,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAElG,eAAO,MAAM,uCAAuC;;;uCAGlD,CAAC;AACH,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC;AAExG,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;uCAQrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAEnF;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,yBAAyB,GAAG,oBAAoB,CAE7F"}

package/dist/esm/project-config/define-framework-config.js

@@ -0,0 +1,30 @@
+import { z } from 'zod';
+import { FRAMEWORK_RELEASE_DOCKER_NAMESPACE, FRAMEWORK_RELEASE_NPM_SCOPE, } from '../release/framework-release.constants.js';
+const SimpleSemverSchema = z.string().regex(/^\d+\.\d+\.\d+$/, 'must be a simple semver string in the form x.y.z');
+export const WildoFrameworkReleaseNpmConfigSchema = z.object({
+    scope: z.literal(FRAMEWORK_RELEASE_NPM_SCOPE),
+    packages: z.array(z.string().min(1)).default([]),
+});
+export const WildoFrameworkReleaseDockerConfigSchema = z.object({
+    namespace: z.literal(FRAMEWORK_RELEASE_DOCKER_NAMESPACE),
+    images: z.array(z.string().min(1)).default([]),
+});
+export const WildoFrameworkConfigSchema = z.object({
+    version: z.number().int().positive().default(1),
+    frameworkVersion: SimpleSemverSchema,
+    minCliVersion: SimpleSemverSchema,
+    publish: z.object({
+        npm: WildoFrameworkReleaseNpmConfigSchema,
+        docker: WildoFrameworkReleaseDockerConfigSchema,
+    }),
+});
+/**
+ * Define framework-scoped release configuration.
+ *
+ * This is the author-owned source of truth for framework release metadata that
+ * later materializes into `wildo-framework.info.json` and the CLI publish flow.
+ */
+export function defineFrameworkConfig(config) {
+    return WildoFrameworkConfigSchema.parse(config);
+}
+//# sourceMappingURL=define-framework-config.js.map

package/dist/esm/project-config/define-framework-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"define-framework-config.js","sourceRoot":"","sources":["../../../src/project-config/define-framework-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,kCAAkC,EAClC,2BAA2B,GAC5B,MAAM,wCAAwC,CAAC;AAEhD,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CACzC,iBAAiB,EACjB,kDAAkD,CACnD,CAAC;AAEF,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3D,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC;IAC7C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACjD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9D,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,kCAAkC,CAAC;IACxD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC/C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,gBAAgB,EAAE,kBAAkB;IACpC,aAAa,EAAE,kBAAkB;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,GAAG,EAAE,oCAAoC;QACzC,MAAM,EAAE,uCAAuC;KAChD,CAAC;CACH,CAAC,CAAC;AAIH;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAiC;IACrE,OAAO,0BAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAClD,CAAC"}

package/dist/esm/project-config/define-infra-config.d.ts

@@ -0,0 +1,128 @@
+import { z } from 'zod';
+import { WildoDeploymentRuntime, WildoImageTagStrategy } from './shared/environment.schemas.js';
+/**
+ * Addressing config for local or Docker Compose services.
+ * Describes how to reach a service (host, port, URL override).
+ */
+export declare const InfraServiceAddressingSchema: z.ZodObject<{
+    host: z.ZodOptional<z.ZodString>;
+    port: z.ZodOptional<z.ZodNumber>;
+    url: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export type InfraServiceAddressing = z.infer<typeof InfraServiceAddressingSchema>;
+/**
+ * Scaling config for Kubernetes-deployed services.
+ * Controls replica count per service in K8s Deployment manifests.
+ */
+export declare const InfraServiceK8sSchema: z.ZodObject<{
+    replicas: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export type InfraServiceK8s = z.infer<typeof InfraServiceK8sSchema>;
+export declare const WildoInfraConfigSchema: z.ZodObject<{
+    version: z.ZodDefault<z.ZodNumber>;
+    environment: z.ZodString;
+    deployment: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        branch: z.ZodString;
+        runtime: z.ZodLiteral<WildoDeploymentRuntime.DOCKER_COMPOSE>;
+        imageTagStrategy: z.ZodDefault<z.ZodEnum<typeof WildoImageTagStrategy>>;
+    }, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+        branch: z.ZodString;
+        runtime: z.ZodLiteral<WildoDeploymentRuntime.KUBERNETES>;
+        registry: z.ZodOptional<z.ZodString>;
+        namespace: z.ZodOptional<z.ZodString>;
+        imageTagStrategy: z.ZodDefault<z.ZodEnum<typeof WildoImageTagStrategy>>;
+    }, z.core.$strip, core.$ZodObjectExtra>], "runtime">>;
+    database: z.ZodOptional<z.ZodObject<{
+        name: z.ZodOptional<z.ZodString>;
+        host: z.ZodOptional<z.ZodString>;
+        port: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    cache: z.ZodOptional<z.ZodObject<{
+        host: z.ZodOptional<z.ZodString>;
+        port: z.ZodOptional<z.ZodNumber>;
+        database: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    queue: z.ZodOptional<z.ZodObject<{
+        host: z.ZodOptional<z.ZodString>;
+        port: z.ZodOptional<z.ZodNumber>;
+        vhost: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    storage: z.ZodOptional<z.ZodObject<{
+        bucket: z.ZodOptional<z.ZodString>;
+        endpoint: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    services: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        host: z.ZodOptional<z.ZodString>;
+        port: z.ZodOptional<z.ZodNumber>;
+        url: z.ZodOptional<z.ZodString>;
+        replicas: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip, core.$ZodObjectExtra>>>;
+    domain: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export type WildoInfraConfig = z.infer<typeof WildoInfraConfigSchema>;
+export type WildoInfraConfigInput = z.input<typeof WildoInfraConfigSchema>;
+interface InfraConfigBase {
+    version?: number;
+    environment: string;
+    database?: {
+        name?: string;
+        host?: string;
+        port?: number;
+    };
+    cache?: {
+        host?: string;
+        port?: number;
+        database?: number;
+    };
+    queue?: {
+        host?: string;
+        port?: number;
+        vhost?: string;
+    };
+    storage?: {
+        bucket?: string;
+        endpoint?: string;
+    };
+    domain?: string;
+}
+/** Input shape when no deployment is configured (local environment). */
+interface InfraConfigLocal extends InfraConfigBase {
+    deployment?: undefined;
+    services?: Record<string, InfraServiceAddressing>;
+}
+/** Input shape for Docker Compose runtime. */
+interface InfraConfigDockerCompose extends InfraConfigBase {
+    deployment: {
+        branch: string;
+        runtime: WildoDeploymentRuntime.DOCKER_COMPOSE;
+        imageTagStrategy?: WildoImageTagStrategy | `${WildoImageTagStrategy}`;
+    };
+    services?: Record<string, InfraServiceAddressing>;
+}
+/** Input shape for Kubernetes runtime — services support `replicas`. */
+interface InfraConfigKubernetes extends InfraConfigBase {
+    deployment: {
+        branch: string;
+        runtime: WildoDeploymentRuntime.KUBERNETES;
+        registry?: string;
+        namespace?: string;
+        imageTagStrategy?: WildoImageTagStrategy | `${WildoImageTagStrategy}`;
+    };
+    services?: Record<string, InfraServiceK8s>;
+}
+/**
+ * Define per-environment infrastructure configuration for a SaaS app.
+ *
+ * The function is overloaded to enforce runtime-specific constraints at
+ * compile time:
+ * - **No deployment / Docker Compose**: services accept `host`, `port`, `url`
+ * - **Kubernetes**: services accept `replicas`
+ *
+ * Additional runtime validation via Zod `superRefine` catches mismatches
+ * that TypeScript inference might not catch (e.g., generic `WildoInfraConfigInput`).
+ */
+export declare function defineInfraConfig(config: InfraConfigLocal): WildoInfraConfig;
+export declare function defineInfraConfig(config: InfraConfigDockerCompose): WildoInfraConfig;
+export declare function defineInfraConfig(config: InfraConfigKubernetes): WildoInfraConfig;
+export {};
+//# sourceMappingURL=define-infra-config.d.ts.map

package/dist/esm/project-config/define-infra-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"define-infra-config.d.ts","sourceRoot":"","sources":["../../../src/project-config/define-infra-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,sBAAsB,EAEtB,qBAAqB,EACtB,MAAM,8BAA8B,CAAC;AAMtC;;;GAGG;AACH,eAAO,MAAM,4BAA4B;;;;uCAIvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF;;;GAGG;AACH,eAAO,MAAM,qBAAqB;;uCAEhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAiBpE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uCAuDjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAM3E,UAAU,eAAe;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3D,KAAK,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D,KAAK,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACzD,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wEAAwE;AACxE,UAAU,gBAAiB,SAAQ,eAAe;IAChD,UAAU,CAAC,EAAE,SAAS,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;CACnD;AAED,8CAA8C;AAC9C,UAAU,wBAAyB,SAAQ,eAAe;IACxD,UAAU,EAAE;QACV,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,sBAAsB,CAAC,cAAc,CAAC;QAC/C,gBAAgB,CAAC,EAAE,qBAAqB,GAAG,GAAG,qBAAqB,EAAE,CAAC;KACvE,CAAC;IACF,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;CACnD;AAED,wEAAwE;AACxE,UAAU,qBAAsB,SAAQ,eAAe;IACrD,UAAU,EAAE;QACV,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,sBAAsB,CAAC,UAAU,CAAC;QAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,gBAAgB,CAAC,EAAE,qBAAqB,GAAG,GAAG,qBAAqB,EAAE,CAAC;KACvE,CAAC;IACF,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;CAC5C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,GAAG,gBAAgB,CAAC;AAC9E,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,wBAAwB,GAAG,gBAAgB,CAAC;AACtF,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,qBAAqB,GAAG,gBAAgB,CAAC"}

package/dist/esm/project-config/define-infra-config.js

@@ -0,0 +1,87 @@
+import { z } from 'zod';
+import { WildoEnvironmentIdSchema, WildoDeploymentRuntime, WildoDeploymentConfigSchema, } from './shared/environment.schemas.js';
+// ============================================================================
+// Service Schemas — runtime-specific shapes
+// ============================================================================
+/**
+ * Addressing config for local or Docker Compose services.
+ * Describes how to reach a service (host, port, URL override).
+ */
+export const InfraServiceAddressingSchema = z.object({
+    host: z.string().optional(),
+    port: z.number().int().positive().optional(),
+    url: z.string().optional(),
+});
+/**
+ * Scaling config for Kubernetes-deployed services.
+ * Controls replica count per service in K8s Deployment manifests.
+ */
+export const InfraServiceK8sSchema = z.object({
+    replicas: z.number().int().positive().optional(),
+});
+/**
+ * Internal union schema for Zod parsing — accepts all fields,
+ * runtime validation in `superRefine` enforces per-runtime constraints.
+ */
+const InfraServiceSchema = z.object({
+    host: z.string().optional(),
+    port: z.number().int().positive().optional(),
+    url: z.string().optional(),
+    replicas: z.number().int().positive().optional(),
+});
+// ============================================================================
+// Infra Config Schema
+// ============================================================================
+export const WildoInfraConfigSchema = z.object({
+    version: z.number().int().positive().default(1),
+    environment: WildoEnvironmentIdSchema,
+    deployment: WildoDeploymentConfigSchema.optional(),
+    database: z.object({
+        name: z.string().min(1).optional(),
+        host: z.string().optional(),
+        port: z.number().int().positive().optional(),
+    }).optional(),
+    cache: z.object({
+        host: z.string().optional(),
+        port: z.number().int().positive().optional(),
+        database: z.number().int().nonnegative().optional(),
+    }).optional(),
+    queue: z.object({
+        host: z.string().optional(),
+        port: z.number().int().positive().optional(),
+        vhost: z.string().optional(),
+    }).optional(),
+    storage: z.object({
+        bucket: z.string().min(1).optional(),
+        endpoint: z.string().optional(),
+    }).optional(),
+    services: z.record(z.string(), InfraServiceSchema).optional(),
+    domain: z.string().optional(),
+}).superRefine((data, ctx) => {
+    const runtime = data.deployment?.runtime;
+    const services = data.services;
+    if (!services)
+        return;
+    for (const [name, svc] of Object.entries(services)) {
+        if (runtime !== WildoDeploymentRuntime.KUBERNETES && svc.replicas !== undefined) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ['services', name, 'replicas'],
+                message: `"replicas" is only valid when deployment.runtime is "${WildoDeploymentRuntime.KUBERNETES}". Docker Compose always runs 1 container per service.`,
+            });
+        }
+        if (runtime === WildoDeploymentRuntime.KUBERNETES) {
+            if (svc.host !== undefined || svc.port !== undefined || svc.url !== undefined) {
+                ctx.addIssue({
+                    code: z.ZodIssueCode.custom,
+                    path: ['services', name],
+                    message: `"host"/"port"/"url" are not used in Kubernetes runtime — service discovery handles addressing.`,
+                });
+            }
+        }
+    }
+});
+export function defineInfraConfig(config) {
+    return WildoInfraConfigSchema.parse(config);
+}
+//# sourceMappingURL=define-infra-config.js.map

package/dist/esm/project-config/define-infra-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"define-infra-config.js","sourceRoot":"","sources":["../../../src/project-config/define-infra-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,2BAA2B,GAE5B,MAAM,8BAA8B,CAAC;AAEtC,+EAA+E;AAC/E,4CAA4C;AAC5C,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAEH,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,WAAW,EAAE,wBAAwB;IAErC,UAAU,EAAE,2BAA2B,CAAC,QAAQ,EAAE;IAElD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KAC7C,CAAC,CAAC,QAAQ,EAAE;IAEb,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC5C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;KACpD,CAAC,CAAC,QAAQ,EAAE;IAEb,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC5C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC7B,CAAC,CAAC,QAAQ,EAAE;IAEb,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC,CAAC,QAAQ,EAAE;IAEb,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,QAAQ,EAAE;IAC7D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC/B,IAAI,CAAC,QAAQ;QAAE,OAAO;IAEtB,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,IAAI,OAAO,KAAK,sBAAsB,CAAC,UAAU,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChF,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC;gBACpC,OAAO,EAAE,wDAAwD,sBAAsB,CAAC,UAAU,wDAAwD;aAC3J,CAAC,CAAC;QACL,CAAC;QAED,IAAI,OAAO,KAAK,sBAAsB,CAAC,UAAU,EAAE,CAAC;YAClD,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC9E,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;oBAC3B,IAAI,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC;oBACxB,OAAO,EAAE,gGAAgG;iBAC1G,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AA6DH,MAAM,UAAU,iBAAiB,CAC/B,MAA2E;IAE3E,OAAO,sBAAsB,CAAC,KAAK,CAAC,MAA+B,CAAC,CAAC;AACvE,CAAC"}