@xemahq/xema 0.1.4 → 0.2.0

package/dist/runtime/infra/infra-catalog.js

@@ -0,0 +1,128 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SHARED_BIOMES_DATABASE = exports.OBJECT_STORE_BUCKETS = exports.INFRA_COMPONENTS = exports.INFRA_CATALOG = void 0;
+const schema_1 = require("../config/schema");
+exports.INFRA_CATALOG = Object.freeze({
+    [schema_1.InfraComponent.Postgres]: {
+        component: schema_1.InfraComponent.Postgres,
+        mandatory: true,
+        managed: {
+            image: 'pgvector/pgvector:pg16',
+            containerName: 'xema-postgres',
+            ports: [[5432, 5432]],
+            dataPath: '/var/lib/postgresql/data',
+            healthCmd: 'pg_isready -U postgres',
+        },
+    },
+    [schema_1.InfraComponent.Redis]: {
+        component: schema_1.InfraComponent.Redis,
+        mandatory: true,
+        managed: {
+            image: 'redis:7-alpine',
+            containerName: 'xema-redis',
+            ports: [[6379, 6379]],
+            dataPath: '/data',
+            healthCmd: 'redis-cli ping',
+        },
+        defaultLocalUrl: 'redis://127.0.0.1:6379',
+    },
+    [schema_1.InfraComponent.Etcd]: {
+        component: schema_1.InfraComponent.Etcd,
+        mandatory: true,
+        managed: {
+            image: 'quay.io/coreos/etcd:v3.6.4',
+            containerName: 'xema-etcd',
+            ports: [[2379, 2379]],
+            dataPath: '/etcd-data',
+            healthCmd: 'etcdctl endpoint health',
+        },
+        defaultLocalUrl: '127.0.0.1:2379',
+    },
+    [schema_1.InfraComponent.Keycloak]: {
+        component: schema_1.InfraComponent.Keycloak,
+        mandatory: true,
+        managed: {
+            image: 'quay.io/keycloak/keycloak:26.0',
+            containerName: 'xema-keycloak',
+            ports: [[8180, 8080]],
+            healthCmd: '/opt/healthcheck.sh',
+        },
+        defaultLocalUrl: 'http://127.0.0.1:8180',
+    },
+    [schema_1.InfraComponent.ObjectStore]: {
+        component: schema_1.InfraComponent.ObjectStore,
+        mandatory: true,
+        managed: {
+            image: 'minio/minio:RELEASE.2025-01-20T14-49-07Z',
+            containerName: 'xema-minio',
+            ports: [
+                [9000, 9000],
+                [9001, 9001],
+            ],
+            dataPath: '/data',
+            healthCmd: 'mc ready local',
+        },
+        defaultLocalUrl: 'http://127.0.0.1:9000',
+    },
+    [schema_1.InfraComponent.Search]: {
+        component: schema_1.InfraComponent.Search,
+        mandatory: false,
+        managed: {
+            image: 'opensearchproject/opensearch:2.18.0',
+            containerName: 'xema-opensearch',
+            ports: [[9200, 9200]],
+            dataPath: '/usr/share/opensearch/data',
+            healthCmd: 'curl -fsS http://localhost:9200/_cluster/health',
+        },
+        defaultLocalUrl: 'http://127.0.0.1:9200',
+    },
+    [schema_1.InfraComponent.Fga]: {
+        component: schema_1.InfraComponent.Fga,
+        mandatory: false,
+        managed: {
+            image: 'openfga/openfga:v1.16.1',
+            containerName: 'xema-openfga',
+            ports: [
+                [8088, 8080],
+                [8081, 8081],
+            ],
+        },
+        defaultLocalUrl: 'http://127.0.0.1:8088',
+    },
+    [schema_1.InfraComponent.Git]: {
+        component: schema_1.InfraComponent.Git,
+        mandatory: false,
+        managed: {
+            image: 'gitea/gitea:1.25-rootless',
+            containerName: 'xema-gitea',
+            ports: [
+                [3000, 3000],
+                [2222, 2222],
+            ],
+            dataPath: '/var/lib/gitea',
+            healthCmd: 'wget -qO- http://localhost:3000/api/v1/version',
+        },
+        defaultLocalUrl: 'http://127.0.0.1:3000',
+    },
+    [schema_1.InfraComponent.Temporal]: {
+        component: schema_1.InfraComponent.Temporal,
+        mandatory: false,
+        managed: {
+            image: 'temporalio/auto-setup:1.28.2',
+            containerName: 'xema-temporal',
+            ports: [[7233, 7233]],
+        },
+        defaultLocalUrl: '127.0.0.1:7233',
+    },
+});
+exports.INFRA_COMPONENTS = Object.freeze(Object.values(schema_1.InfraComponent));
+exports.OBJECT_STORE_BUCKETS = Object.freeze([
+    'session-session-attachments',
+    'session-opencode-sessions',
+    'kb-knowledge-base-pages',
+    'plugin-bundles',
+    'artifact-store',
+    'artifact-store-web-biome-remotes',
+]);
+exports.SHARED_BIOMES_DATABASE = 'xema_biomes';
+//# sourceMappingURL=infra-catalog.js.map

package/dist/runtime/infra/infra-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra-catalog.js","sourceRoot":"","sources":["../../../src/runtime/infra/infra-catalog.ts"],"names":[],"mappings":";;;AAAA,6CAAkD;AAiCrC,QAAA,aAAa,GAAwD,MAAM,CAAC,MAAM,CAAC;IAC9F,CAAC,uBAAc,CAAC,QAAQ,CAAC,EAAE;QACzB,SAAS,EAAE,uBAAc,CAAC,QAAQ;QAClC,SAAS,EAAE,IAAI;QACf,OAAO,EAAE;YACP,KAAK,EAAE,wBAAwB;YAC/B,aAAa,EAAE,eAAe;YAC9B,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrB,QAAQ,EAAE,0BAA0B;YACpC,SAAS,EAAE,wBAAwB;SACpC;KACF;IACD,CAAC,uBAAc,CAAC,KAAK,CAAC,EAAE;QACtB,SAAS,EAAE,uBAAc,CAAC,KAAK;QAC/B,SAAS,EAAE,IAAI;QACf,OAAO,EAAE;YACP,KAAK,EAAE,gBAAgB;YACvB,aAAa,EAAE,YAAY;YAC3B,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrB,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,gBAAgB;SAC5B;QACD,eAAe,EAAE,wBAAwB;KAC1C;IACD,CAAC,uBAAc,CAAC,IAAI,CAAC,EAAE;QACrB,SAAS,EAAE,uBAAc,CAAC,IAAI;QAC9B,SAAS,EAAE,IAAI;QACf,OAAO,EAAE;YACP,KAAK,EAAE,4BAA4B;YACnC,aAAa,EAAE,WAAW;YAC1B,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrB,QAAQ,EAAE,YAAY;YACtB,SAAS,EAAE,yBAAyB;SACrC;QACD,eAAe,EAAE,gBAAgB;KAClC;IACD,CAAC,uBAAc,CAAC,QAAQ,CAAC,EAAE;QACzB,SAAS,EAAE,uBAAc,CAAC,QAAQ;QAClC,SAAS,EAAE,IAAI;QACf,OAAO,EAAE;YACP,KAAK,EAAE,gCAAgC;YACvC,aAAa,EAAE,eAAe;YAC9B,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrB,SAAS,EAAE,qBAAqB;SACjC;QACD,eAAe,EAAE,uBAAuB;KACzC;IACD,CAAC,uBAAc,CAAC,WAAW,CAAC,EAAE;QAC5B,SAAS,EAAE,uBAAc,CAAC,WAAW;QACrC,SAAS,EAAE,IAAI;QACf,OAAO,EAAE;YACP,KAAK,EAAE,0CAA0C;YACjD,aAAa,EAAE,YAAY;YAC3B,KAAK,EAAE;gBACL,CAAC,IAAI,EAAE,IAAI,CAAC;gBACZ,CAAC,IAAI,EAAE,IAAI,CAAC;aACb;YACD,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,gBAAgB;SAC5B;QACD,eAAe,EAAE,uBAAuB;KACzC;IACD,CAAC,uBAAc,CAAC,MAAM,CAAC,EAAE;QACvB,SAAS,EAAE,uBAAc,CAAC,MAAM;QAChC,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE;YACP,KAAK,EAAE,qCAAqC;YAC5C,aAAa,EAAE,iBAAiB;YAChC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrB,QAAQ,EAAE,4BAA4B;YACtC,SAAS,EAAE,iDAAiD;SAC7D;QACD,eAAe,EAAE,uBAAuB;KACzC;IACD,CAAC,uBAAc,CAAC,GAAG,CAAC,EAAE;QACpB,SAAS,EAAE,uBAAc,CAAC,GAAG;QAC7B,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE;YACP,KAAK,EAAE,yBAAyB;YAChC,aAAa,EAAE,cAAc;YAC7B,KAAK,EAAE;gBACL,CAAC,IAAI,EAAE,IAAI,CAAC;gBACZ,CAAC,IAAI,EAAE,IAAI,CAAC;aACb;SACF;QACD,eAAe,EAAE,uBAAuB;KACzC;IACD,CAAC,uBAAc,CAAC,GAAG,CAAC,EAAE;QACpB,SAAS,EAAE,uBAAc,CAAC,GAAG;QAC7B,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE;YACP,KAAK,EAAE,2BAA2B;YAClC,aAAa,EAAE,YAAY;YAC3B,KAAK,EAAE;gBACL,CAAC,IAAI,EAAE,IAAI,CAAC;gBACZ,CAAC,IAAI,EAAE,IAAI,CAAC;aACb;YACD,QAAQ,EAAE,gBAAgB;YAC1B,SAAS,EAAE,gDAAgD;SAC5D;QACD,eAAe,EAAE,uBAAuB;KACzC;IACD,CAAC,uBAAc,CAAC,QAAQ,CAAC,EAAE;QACzB,SAAS,EAAE,uBAAc,CAAC,QAAQ;QAClC,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE;YACP,KAAK,EAAE,8BAA8B;YACrC,aAAa,EAAE,eAAe;YAC9B,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;SACtB;QACD,eAAe,EAAE,gBAAgB;KAClC;CACF,CAAC,CAAC;AAGU,QAAA,gBAAgB,GAA8B,MAAM,CAAC,MAAM,CACtE,MAAM,CAAC,MAAM,CAAC,uBAAc,CAAC,CAC9B,CAAC;AAOW,QAAA,oBAAoB,GAAsB,MAAM,CAAC,MAAM,CAAC;IACnE,6BAA6B;IAC7B,2BAA2B;IAC3B,yBAAyB;IACzB,gBAAgB;IAChB,gBAAgB;IAChB,kCAAkC;CACnC,CAAC,CAAC;AAGU,QAAA,sBAAsB,GAAG,aAAa,CAAC"}

package/dist/runtime/infra/infra-plan.d.ts

@@ -0,0 +1,16 @@
+import { InfraMode, type InfraComponent, type InfraComponentConfig, type XemaConfig } from '../config/schema';
+export interface ResolvedInfraComponent {
+    readonly component: InfraComponent;
+    readonly mode: InfraMode;
+    readonly url?: string;
+    readonly config: InfraComponentConfig;
+}
+export interface InfraPlan {
+    readonly managed: readonly ResolvedInfraComponent[];
+    readonly external: readonly ResolvedInfraComponent[];
+    readonly disabled: readonly ResolvedInfraComponent[];
+    readonly byComponent: ReadonlyMap<InfraComponent, ResolvedInfraComponent>;
+    readonly warnings: readonly string[];
+}
+export declare function resolveInfraPlan(config: XemaConfig): InfraPlan;
+//# sourceMappingURL=infra-plan.d.ts.map

package/dist/runtime/infra/infra-plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra-plan.d.ts","sourceRoot":"","sources":["../../../src/runtime/infra/infra-plan.ts"],"names":[],"mappings":"AACA,OAAO,EACL,SAAS,EACT,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,UAAU,EAChB,MAAM,kBAAkB,CAAC;AAgB1B,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAEzB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;CACvC;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACpD,QAAQ,CAAC,QAAQ,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACrD,QAAQ,CAAC,QAAQ,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACrD,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;IAC1E,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAID,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAgD9D"}

package/dist/runtime/infra/infra-plan.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveInfraPlan = resolveInfraPlan;
+const infra_catalog_1 = require("./infra-catalog");
+const schema_1 = require("../config/schema");
+const DEFAULT_MODE = schema_1.InfraMode.Managed;
+function resolveInfraPlan(config) {
+    const managed = [];
+    const external = [];
+    const disabled = [];
+    const byComponent = new Map();
+    const warnings = [];
+    for (const component of infra_catalog_1.INFRA_COMPONENTS) {
+        const raw = config.infra[component] ?? { mode: DEFAULT_MODE };
+        const catalog = infra_catalog_1.INFRA_CATALOG[component];
+        if (raw.mode === schema_1.InfraMode.Disabled) {
+            if (catalog.mandatory) {
+                throw new Error(`Infra component "${component}" is mandatory and cannot be disabled — ` +
+                    `every Xema service depends on it. Set it to "managed" or "external".`);
+            }
+            const resolved = { component, mode: raw.mode, config: raw };
+            disabled.push(resolved);
+            byComponent.set(component, resolved);
+            warnings.push(`infra.${component} is disabled — capabilities that require it will be unavailable; ` +
+                `services that hard-depend on it will fail-fast at boot.`);
+            continue;
+        }
+        if (raw.mode === schema_1.InfraMode.External) {
+            if (!raw.url) {
+                throw new Error(`Infra component "${component}" is "external" but has no "url". Provide the ` +
+                    `pre-provisioned endpoint so the launcher can inject it into consumers.`);
+            }
+            const resolved = { component, mode: raw.mode, url: raw.url, config: raw };
+            external.push(resolved);
+            byComponent.set(component, resolved);
+            continue;
+        }
+        const resolved = { component, mode: schema_1.InfraMode.Managed, config: raw };
+        managed.push(resolved);
+        byComponent.set(component, resolved);
+    }
+    return { managed, external, disabled, byComponent, warnings };
+}
+//# sourceMappingURL=infra-plan.js.map

package/dist/runtime/infra/infra-plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra-plan.js","sourceRoot":"","sources":["../../../src/runtime/infra/infra-plan.ts"],"names":[],"mappings":";;AAwCA,4CAgDC;AAxFD,mDAAkE;AAClE,6CAK0B;AAgC1B,MAAM,YAAY,GAAG,kBAAS,CAAC,OAAO,CAAC;AAEvC,SAAgB,gBAAgB,CAAC,MAAkB;IACjD,MAAM,OAAO,GAA6B,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAA6B,EAAE,CAAC;IAC9C,MAAM,QAAQ,GAA6B,EAAE,CAAC;IAC9C,MAAM,WAAW,GAAG,IAAI,GAAG,EAA0C,CAAC;IACtE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,SAAS,IAAI,gCAAgB,EAAE,CAAC;QACzC,MAAM,GAAG,GAAyB,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QACpF,MAAM,OAAO,GAAG,6BAAa,CAAC,SAAS,CAAC,CAAC;QAEzC,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAS,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CACb,oBAAoB,SAAS,0CAA0C;oBACrE,sEAAsE,CACzE,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAA2B,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;YACpF,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxB,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACrC,QAAQ,CAAC,IAAI,CACX,SAAS,SAAS,mEAAmE;gBACnF,yDAAyD,CAC5D,CAAC;YACF,SAAS;QACX,CAAC;QAED,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAS,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CACb,oBAAoB,SAAS,gDAAgD;oBAC3E,wEAAwE,CAC3E,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAA2B,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;YAClG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxB,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACrC,SAAS;QACX,CAAC;QAGD,MAAM,QAAQ,GAA2B,EAAE,SAAS,EAAE,IAAI,EAAE,kBAAS,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAC7F,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvB,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;AAChE,CAAC"}

package/dist/runtime/infra/infra-runner.d.ts

@@ -0,0 +1,26 @@
+import { InfraComponent } from '../config/schema';
+import type { InfraPlan } from './infra-plan';
+import type { RosterEntry } from '../roster';
+export interface ManagedInfraHandle {
+    readonly component: InfraComponent;
+    readonly containerName: string;
+}
+export interface InfraRunnerOptions {
+    readonly network: string;
+    readonly bin?: string;
+    readonly volumePrefix?: string;
+    readonly healthTimeoutMs?: number;
+}
+export declare class InfraRunner {
+    private readonly opts;
+    private readonly docker;
+    private readonly volumePrefix;
+    constructor(opts: InfraRunnerOptions);
+    bringUp(plan: InfraPlan): Promise<ManagedInfraHandle[]>;
+    waitHealthy(plan: InfraPlan): Promise<void>;
+    bootstrap(plan: InfraPlan, roster: readonly RosterEntry[]): Promise<void>;
+    private bootstrapPostgres;
+    private bootstrapObjectStore;
+    private execOk;
+}
+//# sourceMappingURL=infra-runner.d.ts.map

package/dist/runtime/infra/infra-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra-runner.d.ts","sourceRoot":"","sources":["../../../src/runtime/infra/infra-runner.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGlD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAgB7C,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAE/B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAKD,qBAAa,WAAW;IAIV,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;gBAET,IAAI,EAAE,kBAAkB;IAK/C,OAAO,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAkCvD,WAAW,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IA2B3C,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,WAAW,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YAcjE,iBAAiB;YAyBjB,oBAAoB;YAkBpB,MAAM;CAQrB"}

package/dist/runtime/infra/infra-runner.js

@@ -0,0 +1,135 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InfraRunner = void 0;
+const infra_catalog_1 = require("./infra-catalog");
+const schema_1 = require("../config/schema");
+const docker_cli_1 = require("../runner/docker-cli");
+const DEFAULT_HEALTH_TIMEOUT_MS = 60_000;
+const HEALTH_INTERVAL_MS = 1_000;
+class InfraRunner {
+    opts;
+    docker;
+    volumePrefix;
+    constructor(opts) {
+        this.opts = opts;
+        this.docker = new docker_cli_1.DockerCli(opts.bin ?? 'docker');
+        this.volumePrefix = opts.volumePrefix ?? 'xema';
+    }
+    async bringUp(plan) {
+        await this.docker.ensureNetwork(this.opts.network);
+        const handles = [];
+        for (const resolved of plan.managed) {
+            const spec = infra_catalog_1.INFRA_CATALOG[resolved.component].managed;
+            await this.docker.runQuiet(['rm', '-f', spec.containerName]);
+            const args = [
+                'run',
+                '-d',
+                '--name',
+                spec.containerName,
+                '--label',
+                `${docker_cli_1.LAUNCHER_LABEL}=infra`,
+                '--network',
+                this.opts.network,
+                '--restart',
+                'unless-stopped',
+            ];
+            for (const [hostPort, containerPort] of spec.ports) {
+                args.push('-p', `${String(hostPort)}:${String(containerPort)}`);
+            }
+            if (spec.dataPath) {
+                args.push('-v', `${this.volumePrefix}-${resolved.component}-data:${spec.dataPath}`);
+            }
+            args.push(spec.image);
+            await this.docker.run(args);
+            handles.push({ component: resolved.component, containerName: spec.containerName });
+        }
+        return handles;
+    }
+    async waitHealthy(plan) {
+        const timeout = this.opts.healthTimeoutMs ?? DEFAULT_HEALTH_TIMEOUT_MS;
+        for (const resolved of plan.managed) {
+            const spec = infra_catalog_1.INFRA_CATALOG[resolved.component].managed;
+            if (!spec.healthCmd) {
+                continue;
+            }
+            const deadline = Date.now() + timeout;
+            for (;;) {
+                if (await this.execOk(spec.containerName, spec.healthCmd)) {
+                    break;
+                }
+                if (Date.now() >= deadline) {
+                    throw new Error(`infra component ${resolved.component} did not become healthy within ${String(timeout)}ms`);
+                }
+                await delay(HEALTH_INTERVAL_MS);
+            }
+        }
+    }
+    async bootstrap(plan, roster) {
+        if (plan.byComponent.get(schema_1.InfraComponent.Postgres)?.mode === undefined) {
+            return;
+        }
+        const pgManaged = plan.managed.some((m) => m.component === schema_1.InfraComponent.Postgres);
+        if (pgManaged) {
+            await this.bootstrapPostgres(roster);
+        }
+        const minioManaged = plan.managed.some((m) => m.component === schema_1.InfraComponent.ObjectStore);
+        if (minioManaged) {
+            await this.bootstrapObjectStore();
+        }
+    }
+    async bootstrapPostgres(roster) {
+        const pg = infra_catalog_1.INFRA_CATALOG[schema_1.InfraComponent.Postgres].managed.containerName;
+        const databases = new Set([infra_catalog_1.SHARED_BIOMES_DATABASE]);
+        for (const entry of roster) {
+            databases.add(`${entry.name.replace(/-/g, '_')}_db`);
+        }
+        for (const db of databases) {
+            const out = await this.docker.runQuiet([
+                'exec',
+                pg,
+                'psql',
+                '-U',
+                'postgres',
+                '-tc',
+                `SELECT 1 FROM pg_database WHERE datname='${db}'`,
+            ]);
+            if (out.trim() === '1') {
+                continue;
+            }
+            await this.docker.runQuiet(['exec', pg, 'createdb', '-U', 'postgres', db]);
+        }
+    }
+    async bootstrapObjectStore() {
+        const minio = infra_catalog_1.INFRA_CATALOG[schema_1.InfraComponent.ObjectStore].managed.containerName;
+        await this.docker.runQuiet([
+            'exec',
+            minio,
+            'mc',
+            'alias',
+            'set',
+            'local',
+            'http://localhost:9000',
+            'minioadmin',
+            'minioadmin',
+        ]);
+        for (const bucket of infra_catalog_1.OBJECT_STORE_BUCKETS) {
+            await this.docker.runQuiet(['exec', minio, 'mc', 'mb', '-p', `local/${bucket}`]);
+        }
+    }
+    async execOk(container, cmd) {
+        try {
+            await this.docker.run(['exec', container, 'sh', '-c', cmd]);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+}
+exports.InfraRunner = InfraRunner;
+function delay(ms) {
+    return new Promise((resolve) => {
+        setTimeout(resolve, ms);
+    });
+}
+//# sourceMappingURL=infra-runner.js.map

package/dist/runtime/infra/infra-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra-runner.js","sourceRoot":"","sources":["../../../src/runtime/infra/infra-runner.ts"],"names":[],"mappings":";;;AAAA,mDAIyB;AACzB,6CAAkD;AAClD,qDAAiE;AAgCjE,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC,MAAa,WAAW;IAIO;IAHZ,MAAM,CAAY;IAClB,YAAY,CAAS;IAEtC,YAA6B,IAAwB;QAAxB,SAAI,GAAJ,IAAI,CAAoB;QACnD,IAAI,CAAC,MAAM,GAAG,IAAI,sBAAS,CAAC,IAAI,CAAC,GAAG,IAAI,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAe;QAC3B,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,OAAO,GAAyB,EAAE,CAAC;QACzC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,6BAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YACvD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;YAE7D,MAAM,IAAI,GAAG;gBACX,KAAK;gBACL,IAAI;gBACJ,QAAQ;gBACR,IAAI,CAAC,aAAa;gBAClB,SAAS;gBACT,GAAG,2BAAc,QAAQ;gBACzB,WAAW;gBACX,IAAI,CAAC,IAAI,CAAC,OAAO;gBACjB,WAAW;gBACX,gBAAgB;aACjB,CAAC;YACF,KAAK,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACnD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,YAAY,IAAI,QAAQ,CAAC,SAAS,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAEtB,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAGD,KAAK,CAAC,WAAW,CAAC,IAAe;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,yBAAyB,CAAC;QACvE,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,6BAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YACtC,SAAS,CAAC;gBACR,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC1D,MAAM;gBACR,CAAC;gBACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;oBAC3B,MAAM,IAAI,KAAK,CACb,mBAAmB,QAAQ,CAAC,SAAS,kCAAkC,MAAM,CAAC,OAAO,CAAC,IAAI,CAC3F,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAOD,KAAK,CAAC,SAAS,CAAC,IAAe,EAAE,MAA8B;QAC7D,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,QAAQ,CAAC,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YACtE,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,uBAAc,CAAC,QAAQ,CAAC,CAAC;QACpF,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,uBAAc,CAAC,WAAW,CAAC,CAAC;QAC1F,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACpC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,MAA8B;QAC5D,MAAM,EAAE,GAAG,6BAAa,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QACxE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,CAAC,sCAAsB,CAAC,CAAC,CAAC;QAC5D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAG3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACrC,MAAM;gBACN,EAAE;gBACF,MAAM;gBACN,IAAI;gBACJ,UAAU;gBACV,KAAK;gBACL,4CAA4C,EAAE,GAAG;aAClD,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACvB,SAAS;YACX,CAAC;YACD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,oBAAoB;QAChC,MAAM,KAAK,GAAG,6BAAa,CAAC,uBAAc,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QAC9E,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YACzB,MAAM;YACN,KAAK;YACL,IAAI;YACJ,OAAO;YACP,KAAK;YACL,OAAO;YACP,uBAAuB;YACvB,YAAY;YACZ,YAAY;SACb,CAAC,CAAC;QACH,KAAK,MAAM,MAAM,IAAI,oCAAoB,EAAE,CAAC;YAC1C,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,GAAW;QACjD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAvID,kCAuIC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/launch.d.ts

@@ -0,0 +1,24 @@
+import { type XemaConfig } from './config/schema';
+import { type RosterEntry, type RosterInclude, type RosterSelection } from './roster';
+import { type BringUpResult, type LifecycleEvent } from './supervisor';
+export interface LaunchOptions {
+    readonly config: XemaConfig;
+    readonly includeWeb: boolean;
+    readonly lockPathOverride?: string | undefined;
+    readonly bootGraphPathOverride?: string | undefined;
+    readonly onEvent?: (event: LifecycleEvent) => void;
+    readonly log?: (line: string) => void;
+}
+export interface LaunchHandle {
+    readonly result: BringUpResult;
+    readonly roster: readonly RosterEntry[];
+    shutdown(): Promise<void>;
+}
+export declare function launch(opts: LaunchOptions): Promise<LaunchHandle>;
+export declare function buildSelection(config: XemaConfig, includeWeb: boolean): RosterSelection;
+export declare function normalizeInclude(include: 'all' | readonly string[], features: readonly string[]): RosterInclude;
+export declare function splitIncludeTokens(tokens: readonly string[]): {
+    tiers: string[];
+    services: string[];
+};
+//# sourceMappingURL=launch.d.ts.map

package/dist/runtime/launch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch.d.ts","sourceRoot":"","sources":["../../src/runtime/launch.ts"],"names":[],"mappings":"AACA,OAAO,EAAa,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAK7D,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,eAAe,EACrB,MAAM,UAAU,CAAC;AAIlB,OAAO,EAAc,KAAK,aAAa,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAYnF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;IACnD,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACvC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IACxC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAOD,wBAAsB,MAAM,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAyEvE;AAaD,wBAAgB,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,GAAG,eAAe,CAQvF;AAYD,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,KAAK,GAAG,SAAS,MAAM,EAAE,EAClC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,aAAa,CAMf;AAGD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG;IAC7D,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAWA"}

package/dist/runtime/launch.js

@@ -0,0 +1,116 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.launch = launch;
+exports.buildSelection = buildSelection;
+exports.normalizeInclude = normalizeInclude;
+exports.splitIncludeTokens = splitIncludeTokens;
+const boot_graph_loader_1 = require("./boot-graph-loader");
+const schema_1 = require("./config/schema");
+const infra_plan_1 = require("./infra/infra-plan");
+const infra_runner_1 = require("./infra/infra-runner");
+const lock_loader_1 = require("./lock-loader");
+const port_map_1 = require("./port-map");
+const roster_1 = require("./roster");
+const container_runner_1 = require("./runner/container-runner");
+const helm_runner_1 = require("./runner/helm-runner");
+const native_runner_1 = require("./runner/native-runner");
+const supervisor_1 = require("./supervisor");
+const unit_type_1 = require("./unit-type");
+const waves_1 = require("./waves");
+const KNOWN_TIERS = new Set(['kernel', 'system', 'base', 'platform', 'edge']);
+const NETWORK = 'xema';
+const CONTAINER_PORT = 3000;
+async function launch(opts) {
+    const { config } = opts;
+    const log = opts.log ?? (() => undefined);
+    const substrate = config.app.substrate;
+    const infra = (0, infra_plan_1.resolveInfraPlan)(config);
+    for (const warning of infra.warnings) {
+        log(`WARN  ${warning}`);
+    }
+    const { lock, resolution: lockRes } = (0, lock_loader_1.loadDistributionLock)({
+        edition: config.edition,
+        explicit: opts.lockPathOverride,
+        envVar: process.env.XEMA_DISTRIBUTION_LOCK_PATH,
+    });
+    log(`lock     : ${lockRes.path} (${lockRes.source})`);
+    const usesImages = substrate === schema_1.Substrate.Container || substrate === schema_1.Substrate.Helm;
+    let imagesByBiome;
+    if (usesImages) {
+        imagesByBiome = (0, lock_loader_1.loadImageLock)({ edition: config.edition }).imagesByBiome;
+    }
+    const bootGraph = (0, boot_graph_loader_1.loadBootGraph)({ explicit: opts.bootGraphPathOverride, envVar: process.env.XEMA_BOOT_GRAPH_PATH });
+    const selection = buildSelection(config, opts.includeWeb);
+    const roster = (0, roster_1.resolveRoster)(lock, selection, imagesByBiome);
+    const waves = (0, waves_1.deriveWaves)(roster, bootGraph);
+    const violations = (0, waves_1.findWaveOrderViolations)(waves, bootGraph);
+    if (violations.length > 0) {
+        throw new Error(`Boot-graph invariant violated (a service hard-requires a same/later-wave peer):\n` +
+            violations.map((v) => `  ${v.service} (${v.serviceTier}) → ${v.requires} (${v.requiresTier})`).join('\n'));
+    }
+    if (substrate === schema_1.Substrate.Container && infra.managed.length > 0) {
+        log(`infra    : bringing up ${infra.managed.map((m) => m.component).join(', ')}`);
+        const infraRunner = new infra_runner_1.InfraRunner({ network: NETWORK });
+        await infraRunner.bringUp(infra);
+        await infraRunner.waitHealthy(infra);
+        await infraRunner.bootstrap(infra, roster);
+        log('infra    : healthy + bootstrapped (per-service databases, object-store buckets)');
+    }
+    const ports = (0, port_map_1.assignPorts)(roster);
+    const runner = selectRunner(substrate);
+    const supervisor = new supervisor_1.Supervisor({
+        roster,
+        waves,
+        runner,
+        config,
+        infra,
+        substrate,
+        ports,
+        containerPort: CONTAINER_PORT,
+        ...(opts.onEvent ? { onEvent: opts.onEvent } : {}),
+    });
+    const result = await supervisor.bringUp();
+    return {
+        result,
+        roster,
+        shutdown: () => supervisor.shutdown(),
+    };
+}
+function selectRunner(substrate) {
+    if (substrate === schema_1.Substrate.Container) {
+        return new container_runner_1.ContainerRunner({ network: NETWORK, containerPort: CONTAINER_PORT });
+    }
+    if (substrate === schema_1.Substrate.Helm) {
+        return new helm_runner_1.HelmRunner();
+    }
+    return new native_runner_1.NativeRunner();
+}
+function buildSelection(config, includeWeb) {
+    const include = normalizeInclude(config.app.include, config.app.features);
+    const exclude = [...config.app.exclude];
+    if (!includeWeb && !exclude.includes(unit_type_1.WEB_SERVICE_NAME)) {
+        exclude.push(unit_type_1.WEB_SERVICE_NAME);
+    }
+    return { include, exclude };
+}
+function normalizeInclude(include, features) {
+    if (include === 'all') {
+        return 'all';
+    }
+    const tokens = Array.from(new Set([...include, ...features]));
+    return splitIncludeTokens(tokens);
+}
+function splitIncludeTokens(tokens) {
+    const tiers = [];
+    const services = [];
+    for (const token of tokens) {
+        if (KNOWN_TIERS.has(token)) {
+            tiers.push(token);
+        }
+        else {
+            services.push(token);
+        }
+    }
+    return { tiers, services };
+}
+//# sourceMappingURL=launch.js.map

package/dist/runtime/launch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch.js","sourceRoot":"","sources":["../../src/runtime/launch.ts"],"names":[],"mappings":";;AA+CA,wBAyEC;AAaD,wCAQC;AAYD,4CASC;AAGD,gDAcC;AAnLD,2DAAoD;AACpD,4CAA6D;AAC7D,mDAAsD;AACtD,uDAAmD;AACnD,+CAAqF;AACrF,yCAAyC;AACzC,qCAKkB;AAClB,gEAA4D;AAC5D,sDAAkD;AAClD,0DAAsD;AACtD,6CAAmF;AACnF,2CAA+C;AAC/C,mCAA+D;AAK/D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AAE9E,MAAM,OAAO,GAAG,MAAM,CAAC;AACvB,MAAM,cAAc,GAAG,IAAI,CAAC;AAsBrB,KAAK,UAAU,MAAM,CAAC,IAAmB;IAC9C,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAS,EAAE,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;IAGvC,MAAM,KAAK,GAAG,IAAA,6BAAgB,EAAC,MAAM,CAAC,CAAC;IACvC,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,GAAG,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IAC1B,CAAC;IAGD,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,IAAA,kCAAoB,EAAC;QACzD,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,IAAI,CAAC,gBAAgB;QAC/B,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B;KAChD,CAAC,CAAC;IACH,GAAG,CAAC,cAAc,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAGtD,MAAM,UAAU,GAAG,SAAS,KAAK,kBAAS,CAAC,SAAS,IAAI,SAAS,KAAK,kBAAS,CAAC,IAAI,CAAC;IACrF,IAAI,aAA0D,CAAC;IAC/D,IAAI,UAAU,EAAE,CAAC;QACf,aAAa,GAAG,IAAA,2BAAa,EAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,aAAa,CAAC;IAC3E,CAAC;IACD,MAAM,SAAS,GAAG,IAAA,iCAAa,EAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,qBAAqB,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAGpH,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,IAAA,sBAAa,EAAC,IAAI,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,IAAA,mBAAW,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAE7C,MAAM,UAAU,GAAG,IAAA,+BAAuB,EAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC7D,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,mFAAmF;YACjF,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,WAAW,OAAO,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC5G,CAAC;IACJ,CAAC;IAID,IAAI,SAAS,KAAK,kBAAS,CAAC,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,0BAA0B,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClF,MAAM,WAAW,GAAG,IAAI,0BAAW,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1D,MAAM,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,WAAW,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3C,GAAG,CAAC,iFAAiF,CAAC,CAAC;IACzF,CAAC;IAGD,MAAM,KAAK,GAAG,IAAA,sBAAW,EAAC,MAAM,CAAC,CAAC;IAClC,MAAM,MAAM,GAAkB,YAAY,CAAC,SAAS,CAAC,CAAC;IAEtD,MAAM,UAAU,GAAG,IAAI,uBAAU,CAAC;QAChC,MAAM;QACN,KAAK;QACL,MAAM;QACN,MAAM;QACN,KAAK;QACL,SAAS;QACT,KAAK;QACL,aAAa,EAAE,cAAc;QAC7B,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC;IAC1C,OAAO;QACL,MAAM;QACN,MAAM;QACN,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,SAAoB;IACxC,IAAI,SAAS,KAAK,kBAAS,CAAC,SAAS,EAAE,CAAC;QACtC,OAAO,IAAI,kCAAe,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,SAAS,KAAK,kBAAS,CAAC,IAAI,EAAE,CAAC;QACjC,OAAO,IAAI,wBAAU,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,4BAAY,EAAE,CAAC;AAC5B,CAAC;AAGD,SAAgB,cAAc,CAAC,MAAkB,EAAE,UAAmB;IACpE,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAExC,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAAgB,CAAC,EAAE,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,4BAAgB,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAYD,SAAgB,gBAAgB,CAC9B,OAAkC,EAClC,QAA2B;IAE3B,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC9D,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC;AAGD,SAAgB,kBAAkB,CAAC,MAAyB;IAI1D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7B,CAAC"}

package/dist/runtime/lock-loader.d.ts

@@ -0,0 +1,26 @@
+import { type DistributionLock } from '@xemahq/kernel-contracts/distribution';
+import { type ArtifactResolution } from './paths';
+export interface LoadedDistributionLock {
+    readonly lock: DistributionLock;
+    readonly resolution: ArtifactResolution;
+}
+export interface LoadLockOptions {
+    readonly edition: string;
+    readonly explicit?: string | undefined;
+    readonly envVar?: string | undefined;
+}
+export declare function loadDistributionLock(opts: LoadLockOptions): LoadedDistributionLock;
+export interface ImageEntry {
+    readonly biomeId: string;
+    readonly target: string;
+    readonly imageRef: string;
+    readonly contentHash: string;
+    readonly repo: string;
+    readonly path: string;
+}
+export interface LoadedImageLock {
+    readonly imagesByBiome: ReadonlyMap<string, ImageEntry>;
+    readonly resolution: ArtifactResolution;
+}
+export declare function loadImageLock(opts: LoadLockOptions): LoadedImageLock;
+//# sourceMappingURL=lock-loader.d.ts.map

package/dist/runtime/lock-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock-loader.d.ts","sourceRoot":"","sources":["../../src/runtime/lock-loader.ts"],"names":[],"mappings":"AAEA,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAErG,OAAO,EAAqD,KAAK,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAOrG,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;CACzC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,eAAe,GAAG,sBAAsB,CASlF;AAOD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAE9B,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACxD,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;CACzC;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,eAAe,GAAG,eAAe,CA6BpE"}

package/dist/runtime/lock-loader.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadDistributionLock = loadDistributionLock;
+exports.loadImageLock = loadImageLock;
+const node_fs_1 = require("node:fs");
+const distribution_1 = require("@xemahq/kernel-contracts/distribution");
+const paths_1 = require("./paths");
+function loadDistributionLock(opts) {
+    const resolution = (0, paths_1.resolveDistributionLockPath)({
+        edition: opts.edition,
+        explicit: opts.explicit,
+        envVar: opts.envVar,
+    });
+    const raw = readJson(resolution.path);
+    const lock = (0, distribution_1.parseDistributionLock)(raw);
+    return { lock, resolution };
+}
+function loadImageLock(opts) {
+    const resolution = (0, paths_1.resolveImageLockPath)({ edition: opts.edition, explicit: opts.explicit });
+    const raw = readJson(resolution.path);
+    if (!Array.isArray(raw.images)) {
+        throw new Error(`Invalid images.lock.json at ${resolution.path}: missing images[] array.`);
+    }
+    const imagesByBiome = new Map();
+    for (const entry of raw.images) {
+        if (typeof entry.biomeId !== 'string' ||
+            typeof entry.imageRef !== 'string' ||
+            typeof entry.contentHash !== 'string') {
+            throw new Error(`Invalid images.lock.json at ${resolution.path}: an images[] entry is missing biomeId/imageRef/contentHash.`);
+        }
+        if (entry.target === 'server') {
+            imagesByBiome.set(entry.biomeId, {
+                biomeId: entry.biomeId,
+                target: entry.target,
+                imageRef: entry.imageRef,
+                contentHash: entry.contentHash,
+                repo: typeof entry.repo === 'string' ? entry.repo : '',
+                path: typeof entry.path === 'string' ? entry.path : '',
+            });
+        }
+    }
+    return { imagesByBiome, resolution };
+}
+function readJson(path) {
+    let text;
+    try {
+        text = (0, node_fs_1.readFileSync)(path, 'utf8');
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        throw new Error(`Failed to read ${path}: ${message}`);
+    }
+    try {
+        return JSON.parse(text);
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        throw new Error(`Failed to parse ${path} as JSON: ${message}`);
+    }
+}
+//# sourceMappingURL=lock-loader.js.map

package/dist/runtime/lock-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock-loader.js","sourceRoot":"","sources":["../../src/runtime/lock-loader.ts"],"names":[],"mappings":";;AAsBA,oDASC;AAsBD,sCA6BC;AAlFD,qCAAuC;AAEvC,wEAAqG;AAErG,mCAAqG;AAkBrG,SAAgB,oBAAoB,CAAC,IAAqB;IACxD,MAAM,UAAU,GAAG,IAAA,mCAA2B,EAAC;QAC7C,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,IAAA,oCAAqB,EAAC,GAAG,CAAC,CAAC;IACxC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC9B,CAAC;AAsBD,SAAgB,aAAa,CAAC,IAAqB;IACjD,MAAM,UAAU,GAAG,IAAA,4BAAoB,EAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5F,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAyB,CAAC;IAC9D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,+BAA+B,UAAU,CAAC,IAAI,2BAA2B,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAsB,CAAC;IACpD,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAgD,EAAE,CAAC;QACzE,IACE,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;YACjC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;YAClC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,EACrC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,+BAA+B,UAAU,CAAC,IAAI,8DAA8D,CAC7G,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC9B,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE;gBAC/B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,IAAI,EAAE,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;gBACtD,IAAI,EAAE,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;aACvD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,aAAa,OAAO,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC"}