@xemahq/xema 0.12.0 → 0.14.0

package/dist/runtime/infra/infra-runner.js

@@ -15,6 +15,31 @@ class InfraRunner {
         this.docker = new docker_cli_1.DockerCli(opts.bin ?? 'docker');
         this.volumePrefix = opts.volumePrefix ?? 'xema';
     }
+    async assertCredentialStoreCompatible(plan, hasCredentialStore) {
+        if (hasCredentialStore) {
+            return;
+        }
+        const custodiedComponents = [
+            schema_1.InfraComponent.Postgres,
+            schema_1.InfraComponent.ObjectStore,
+        ];
+        if (plan.managed.some((entry) => entry.component === schema_1.InfraComponent.Postgres ||
+            entry.component === schema_1.InfraComponent.ObjectStore) &&
+            !(await this.docker.available())) {
+            throw new Error('The container runtime is not reachable, so managed-local credential compatibility cannot be verified.');
+        }
+        for (const component of custodiedComponents) {
+            if (!plan.managed.some((entry) => entry.component === component)) {
+                continue;
+            }
+            const spec = infra_catalog_1.INFRA_CATALOG[component].managed;
+            if (spec.dataPath !== undefined &&
+                (await this.docker.volumeExists(`${this.volumePrefix}-${component}-data`))) {
+                throw new Error(`Managed ${component} data predates per-installation credential custody. ` +
+                    'Run `xema down --purge` to explicitly remove the legacy local data, then launch again.');
+            }
+        }
+    }
     async bringUp(plan) {
         await this.docker.ensureNetwork(this.opts.network);
         const handles = [];
@@ -39,9 +64,18 @@ class InfraRunner {
             if (spec.dataPath) {
                 args.push('-v', `${this.volumePrefix}-${resolved.component}-data:${spec.dataPath}`);
             }
-            args.push(spec.image);
-            await this.docker.run(args);
-            handles.push({ component: resolved.component, containerName: spec.containerName });
+            const containerEnv = this.containerEnvironment(resolved.component);
+            for (const name of Object.keys(containerEnv)) {
+                args.push('--env', name);
+            }
+            args.push(spec.image, ...(spec.command ?? []));
+            await this.docker.run(args, {
+                env: { ...process.env, ...containerEnv },
+            });
+            handles.push({
+                component: resolved.component,
+                containerName: spec.containerName,
+            });
         }
         return handles;
     }
@@ -93,6 +127,7 @@ class InfraRunner {
     }
     async bootstrapPostgres(roster) {
         const pg = infra_catalog_1.INFRA_CATALOG[schema_1.InfraComponent.Postgres].managed.containerName;
+        const credentials = this.requireCredentials(schema_1.InfraComponent.Postgres);
         const databases = new Set([infra_catalog_1.SHARED_BIOMES_DATABASE]);
         for (const entry of roster) {
             databases.add(`${entry.name.replace(/-/g, '_')}_db`);
@@ -103,14 +138,21 @@ class InfraRunner {
                 pg,
                 'psql',
                 '-U',
-                'postgres',
+                credentials.username,
                 '-tc',
                 `SELECT 1 FROM pg_database WHERE datname='${db}'`,
             ]);
             if (out.trim() === '1') {
                 continue;
             }
-            await this.docker.runQuiet(['exec', pg, 'createdb', '-U', 'postgres', db]);
+            await this.docker.runQuiet([
+                'exec',
+                pg,
+                'createdb',
+                '-U',
+                credentials.username,
+                db,
+            ]);
         }
     }
     async bootstrapObjectStore() {
@@ -118,16 +160,19 @@ class InfraRunner {
         await this.docker.runQuiet([
             'exec',
             minio,
-            'mc',
-            'alias',
-            'set',
-            'local',
-            'http://localhost:9000',
-            'minioadmin',
-            'minioadmin',
+            'sh',
+            '-c',
+            'mc alias set local http://localhost:9000 "$MINIO_ROOT_USER" "$MINIO_ROOT_PASSWORD"',
         ]);
         for (const bucket of infra_catalog_1.OBJECT_STORE_BUCKETS) {
-            await this.docker.runQuiet(['exec', minio, 'mc', 'mb', '-p', `local/${bucket}`]);
+            await this.docker.runQuiet([
+                'exec',
+                minio,
+                'mc',
+                'mb',
+                '-p',
+                `local/${bucket}`,
+            ]);
         }
     }
     async execOk(container, cmd) {
@@ -139,6 +184,30 @@ class InfraRunner {
             return false;
         }
     }
+    containerEnvironment(component) {
+        if (component === schema_1.InfraComponent.Postgres) {
+            const credentials = this.requireCredentials(schema_1.InfraComponent.Postgres);
+            return {
+                POSTGRES_USER: credentials.username,
+                POSTGRES_PASSWORD: credentials.password,
+            };
+        }
+        if (component === schema_1.InfraComponent.ObjectStore) {
+            const credentials = this.requireCredentials(schema_1.InfraComponent.ObjectStore);
+            return {
+                MINIO_ROOT_USER: credentials.username,
+                MINIO_ROOT_PASSWORD: credentials.password,
+            };
+        }
+        return {};
+    }
+    requireCredentials(component) {
+        const credentials = this.opts.credentials?.[component];
+        if (credentials === undefined) {
+            throw new Error(`Managed-local ${component} credentials were not resolved before launch.`);
+        }
+        return credentials;
+    }
 }
 exports.InfraRunner = InfraRunner;
 function delay(ms) {

package/dist/runtime/infra/infra-runner.js.map

@@ -1 +1 @@
-{"version":3,"file":"infra-runner.js","sourceRoot":"","sources":["../../../src/runtime/infra/infra-runner.ts"],"names":[],"mappings":";;;AAAA,mDAIyB;AACzB,6CAAkD;AAClD,qDAAiE;AAgCjE,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC,MAAa,WAAW;IAIO;IAHZ,MAAM,CAAY;IAClB,YAAY,CAAS;IAEtC,YAA6B,IAAwB;QAAxB,SAAI,GAAJ,IAAI,CAAoB;QACnD,IAAI,CAAC,MAAM,GAAG,IAAI,sBAAS,CAAC,IAAI,CAAC,GAAG,IAAI,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAe;QAC3B,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,OAAO,GAAyB,EAAE,CAAC;QACzC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,6BAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YACvD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;YAE7D,MAAM,IAAI,GAAG;gBACX,KAAK;gBACL,IAAI;gBACJ,QAAQ;gBACR,IAAI,CAAC,aAAa;gBAClB,SAAS;gBACT,GAAG,2BAAc,QAAQ;gBACzB,WAAW;gBACX,IAAI,CAAC,IAAI,CAAC,OAAO;gBACjB,WAAW;gBACX,gBAAgB;aACjB,CAAC;YACF,KAAK,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACnD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,YAAY,IAAI,QAAQ,CAAC,SAAS,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAEtB,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAGD,KAAK,CAAC,WAAW,CAAC,IAAe;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,yBAAyB,CAAC;QACvE,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,6BAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YACtC,SAAS,CAAC;gBACR,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC1D,MAAM;gBACR,CAAC;gBACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;oBAC3B,MAAM,IAAI,KAAK,CACb,mBAAmB,QAAQ,CAAC,SAAS,kCAAkC,MAAM,CAAC,OAAO,CAAC,IAAI,CAC3F,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAOD,KAAK,CAAC,SAAS,CAAC,IAAe,EAAE,MAA8B;QAC7D,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,QAAQ,CAAC,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YACtE,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,uBAAc,CAAC,QAAQ,CAAC,CAAC;QACpF,IACE,SAAS;YACT,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,6BAAa,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,EAC7F,CAAC;YACD,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,uBAAc,CAAC,WAAW,CAAC,CAAC;QAC1F,IACE,YAAY;YACZ,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,6BAAa,CAAC,uBAAc,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,EAChG,CAAC;YACD,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACpC,CAAC;IACH,CAAC;IAQO,KAAK,CAAC,kBAAkB,CAAC,IAAY;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YACrC,IAAI;YACJ,UAAU;YACV,SAAS,IAAI,GAAG;YAChB,UAAU;YACV,gBAAgB;YAChB,UAAU;YACV,YAAY;SACb,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,MAA8B;QAC5D,MAAM,EAAE,GAAG,6BAAa,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QACxE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,CAAC,sCAAsB,CAAC,CAAC,CAAC;QAC5D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAG3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACrC,MAAM;gBACN,EAAE;gBACF,MAAM;gBACN,IAAI;gBACJ,UAAU;gBACV,KAAK;gBACL,4CAA4C,EAAE,GAAG;aAClD,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACvB,SAAS;YACX,CAAC;YACD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,oBAAoB;QAChC,MAAM,KAAK,GAAG,6BAAa,CAAC,uBAAc,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QAC9E,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YACzB,MAAM;YACN,KAAK;YACL,IAAI;YACJ,OAAO;YACP,KAAK;YACL,OAAO;YACP,uBAAuB;YACvB,YAAY;YACZ,YAAY;SACb,CAAC,CAAC;QACH,KAAK,MAAM,MAAM,IAAI,oCAAoB,EAAE,CAAC;YAC1C,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,GAAW;QACjD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAhKD,kCAgKC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"infra-runner.js","sourceRoot":"","sources":["../../../src/runtime/infra/infra-runner.ts"],"names":[],"mappings":";;;AAAA,mDAIyB;AACzB,6CAAkD;AAClD,qDAAiE;AAqCjE,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC,MAAa,WAAW;IAIO;IAHZ,MAAM,CAAY;IAClB,YAAY,CAAS;IAEtC,YAA6B,IAAwB;QAAxB,SAAI,GAAJ,IAAI,CAAoB;QACnD,IAAI,CAAC,MAAM,GAAG,IAAI,sBAAS,CAAC,IAAI,CAAC,GAAG,IAAI,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC;IAClD,CAAC;IAMD,KAAK,CAAC,+BAA+B,CACnC,IAAe,EACf,kBAA2B;QAE3B,IAAI,kBAAkB,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QACD,MAAM,mBAAmB,GAAG;YAC1B,uBAAc,CAAC,QAAQ;YACvB,uBAAc,CAAC,WAAW;SAClB,CAAC;QACX,IACE,IAAI,CAAC,OAAO,CAAC,IAAI,CACf,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,SAAS,KAAK,uBAAc,CAAC,QAAQ;YAC3C,KAAK,CAAC,SAAS,KAAK,uBAAc,CAAC,WAAW,CACjD;YACD,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,EAChC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,uGAAuG,CACxG,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,mBAAmB,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,CAAC;gBACjE,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,6BAAa,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YAC9C,IACE,IAAI,CAAC,QAAQ,KAAK,SAAS;gBAC3B,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAC7B,GAAG,IAAI,CAAC,YAAY,IAAI,SAAS,OAAO,CACzC,CAAC,EACF,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,WAAW,SAAS,sDAAsD;oBACxE,wFAAwF,CAC3F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAe;QAC3B,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,OAAO,GAAyB,EAAE,CAAC;QACzC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,6BAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YACvD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;YAE7D,MAAM,IAAI,GAAG;gBACX,KAAK;gBACL,IAAI;gBACJ,QAAQ;gBACR,IAAI,CAAC,aAAa;gBAClB,SAAS;gBACT,GAAG,2BAAc,QAAQ;gBACzB,WAAW;gBACX,IAAI,CAAC,IAAI,CAAC,OAAO;gBACjB,WAAW;gBACX,gBAAgB;aACjB,CAAC;YACF,KAAK,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACnD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,IAAI,CAAC,IAAI,CACP,IAAI,EACJ,GAAG,IAAI,CAAC,YAAY,IAAI,QAAQ,CAAC,SAAS,SAAS,IAAI,CAAC,QAAQ,EAAE,CACnE,CAAC;YACJ,CAAC;YACD,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YACnE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC7C,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC3B,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;YAE/C,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE;gBAC1B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,YAAY,EAAE;aACzC,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,aAAa,EAAE,IAAI,CAAC,aAAa;aAClC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAGD,KAAK,CAAC,WAAW,CAAC,IAAe;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,yBAAyB,CAAC;QACvE,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,6BAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YACtC,SAAS,CAAC;gBACR,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC1D,MAAM;gBACR,CAAC;gBACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;oBAC3B,MAAM,IAAI,KAAK,CACb,mBAAmB,QAAQ,CAAC,SAAS,kCAAkC,MAAM,CAAC,OAAO,CAAC,IAAI,CAC3F,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAOD,KAAK,CAAC,SAAS,CACb,IAAe,EACf,MAA8B;QAE9B,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,QAAQ,CAAC,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YACtE,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CACjC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,uBAAc,CAAC,QAAQ,CAC/C,CAAC;QACF,IACE,SAAS;YACT,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAC5B,6BAAa,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,aAAa,CAC7D,CAAC,EACF,CAAC;YACD,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CACpC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,uBAAc,CAAC,WAAW,CAClD,CAAC;QACF,IACE,YAAY;YACZ,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAC5B,6BAAa,CAAC,uBAAc,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,aAAa,CAChE,CAAC,EACF,CAAC;YACD,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACpC,CAAC;IACH,CAAC;IAQO,KAAK,CAAC,kBAAkB,CAAC,IAAY;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YACrC,IAAI;YACJ,UAAU;YACV,SAAS,IAAI,GAAG;YAChB,UAAU;YACV,gBAAgB;YAChB,UAAU;YACV,YAAY;SACb,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,MAA8B;QAE9B,MAAM,EAAE,GAAG,6BAAa,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QACxE,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,CAAC,sCAAsB,CAAC,CAAC,CAAC;QAC5D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAG3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACrC,MAAM;gBACN,EAAE;gBACF,MAAM;gBACN,IAAI;gBACJ,WAAW,CAAC,QAAQ;gBACpB,KAAK;gBACL,4CAA4C,EAAE,GAAG;aAClD,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACvB,SAAS;YACX,CAAC;YACD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACzB,MAAM;gBACN,EAAE;gBACF,UAAU;gBACV,IAAI;gBACJ,WAAW,CAAC,QAAQ;gBACpB,EAAE;aACH,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,oBAAoB;QAChC,MAAM,KAAK,GACT,6BAAa,CAAC,uBAAc,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QAClE,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YACzB,MAAM;YACN,KAAK;YACL,IAAI;YACJ,IAAI;YACJ,oFAAoF;SACrF,CAAC,CAAC;QACH,KAAK,MAAM,MAAM,IAAI,oCAAoB,EAAE,CAAC;YAC1C,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACzB,MAAM;gBACN,KAAK;gBACL,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,SAAS,MAAM,EAAE;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,GAAW;QACjD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,oBAAoB,CAC1B,SAAyB;QAEzB,IAAI,SAAS,KAAK,uBAAc,CAAC,QAAQ,EAAE,CAAC;YAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC;YACrE,OAAO;gBACL,aAAa,EAAE,WAAW,CAAC,QAAQ;gBACnC,iBAAiB,EAAE,WAAW,CAAC,QAAQ;aACxC,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,KAAK,uBAAc,CAAC,WAAW,EAAE,CAAC;YAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,uBAAc,CAAC,WAAW,CAAC,CAAC;YACxE,OAAO;gBACL,eAAe,EAAE,WAAW,CAAC,QAAQ;gBACrC,mBAAmB,EAAE,WAAW,CAAC,QAAQ;aAC1C,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,kBAAkB,CACxB,SAA+D;QAE/D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,iBAAiB,SAAS,+CAA+C,CAC1E,CAAC;QACJ,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;CACF;AAnRD,kCAmRC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/installation/compiler.d.ts

@@ -0,0 +1,37 @@
+import { BackupMode, InstallationDeploymentProfile, InstallationSubstrate, StorageClass, TenantIsolation, TenancyMode, UpgradeChannel, type ParsedXemaInstallation, type XemaInstallation } from './contract';
+import { WorkspaceDriver } from '../config/schema';
+export interface CompiledXemaInstallation extends Omit<ParsedXemaInstallation, 'deployment' | 'tenancy' | 'storage' | 'capacity' | 'upgrade'> {
+    readonly deployment: {
+        readonly profile: InstallationDeploymentProfile;
+        readonly substrate: InstallationSubstrate;
+        readonly regions: readonly string[];
+    };
+    readonly tenancy: {
+        readonly mode: TenancyMode;
+        readonly isolation: TenantIsolation;
+    };
+    readonly storage: {
+        readonly class: StorageClass;
+        readonly workspaceDriver: WorkspaceDriver;
+        readonly externalBinding?: string;
+        readonly backup: {
+            readonly mode: BackupMode;
+            readonly retentionDays: number;
+            readonly destinationSecretRef?: string;
+        };
+    };
+    readonly capacity: {
+        readonly minReplicas: number;
+        readonly maxReplicas: number;
+        readonly maxOrganizations: number;
+        readonly maxConcurrentSessions: number;
+    };
+    readonly upgrade: {
+        readonly channel: UpgradeChannel;
+        readonly releaseRef?: string;
+    };
+    readonly planHash: string;
+}
+export declare function compileXemaInstallation(raw: XemaInstallation | unknown): CompiledXemaInstallation;
+export declare function isManagedInfrastructure(plan: CompiledXemaInstallation): boolean;
+//# sourceMappingURL=compiler.d.ts.map

package/dist/runtime/installation/compiler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compiler.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/compiler.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,6BAA6B,EAC7B,qBAAqB,EACrB,YAAY,EACZ,eAAe,EACf,WAAW,EACX,cAAc,EACd,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,EACtB,MAAM,YAAY,CAAC;AAOpB,OAAO,EAAa,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAG9D,MAAM,WAAW,wBACf,SAAQ,IAAI,CACV,sBAAsB,EACtB,YAAY,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAC9D;IACD,QAAQ,CAAC,UAAU,EAAE;QACnB,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC;QAChD,QAAQ,CAAC,SAAS,EAAE,qBAAqB,CAAC;QAC1C,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;KACrC,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QAC3B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;KACrC,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;QAC7B,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;QAC1C,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,MAAM,EAAE;YACf,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;YAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;YAC/B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;SACxC,CAAC;KACH,CAAC;IACF,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;KACxC,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;QACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC;IACF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AA4FD,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,gBAAgB,GAAG,OAAO,GAC9B,wBAAwB,CAwB1B;AAiGD,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAIT"}

package/dist/runtime/installation/compiler.js

@@ -0,0 +1,190 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.compileXemaInstallation = compileXemaInstallation;
+exports.isManagedInfrastructure = isManagedInfrastructure;
+const contract_1 = require("./contract");
+const diagnostics_1 = require("./diagnostics");
+const serialization_1 = require("./serialization");
+const validation_1 = require("./validation");
+const schema_1 = require("../config/schema");
+const infra_catalog_1 = require("../infra/infra-catalog");
+const PROFILE_DEFAULTS = {
+    [contract_1.InstallationDeploymentProfile.Developer]: {
+        substrate: contract_1.InstallationSubstrate.Local,
+        regions: ['local'],
+        tenancyMode: contract_1.TenancyMode.SingleOrganization,
+        isolation: contract_1.TenantIsolation.Shared,
+        storageClass: contract_1.StorageClass.Ephemeral,
+        workspaceDriver: schema_1.WorkspaceDriver.HostPath,
+        backupMode: contract_1.BackupMode.Disabled,
+        backupRetentionDays: 1,
+        minReplicas: 1,
+        maxReplicas: 1,
+        maxOrganizations: 1,
+        maxConcurrentSessions: 10,
+    },
+    [contract_1.InstallationDeploymentProfile.StarterPme]: {
+        substrate: contract_1.InstallationSubstrate.SingleNode,
+        regions: ['local'],
+        tenancyMode: contract_1.TenancyMode.MultiOrganization,
+        isolation: contract_1.TenantIsolation.Shared,
+        storageClass: contract_1.StorageClass.Persistent,
+        workspaceDriver: schema_1.WorkspaceDriver.DockerLocal,
+        backupMode: contract_1.BackupMode.Snapshots,
+        backupRetentionDays: 14,
+        minReplicas: 1,
+        maxReplicas: 1,
+        maxOrganizations: 100,
+        maxConcurrentSessions: 100,
+    },
+    [contract_1.InstallationDeploymentProfile.HighAvailability]: {
+        substrate: contract_1.InstallationSubstrate.Cluster,
+        regions: ['primary'],
+        tenancyMode: contract_1.TenancyMode.MultiOrganization,
+        isolation: contract_1.TenantIsolation.Namespace,
+        storageClass: contract_1.StorageClass.Persistent,
+        workspaceDriver: schema_1.WorkspaceDriver.DockerLocal,
+        backupMode: contract_1.BackupMode.Snapshots,
+        backupRetentionDays: 30,
+        minReplicas: 3,
+        maxReplicas: 12,
+        maxOrganizations: 10_000,
+        maxConcurrentSessions: 10_000,
+    },
+    [contract_1.InstallationDeploymentProfile.Regulated]: {
+        substrate: contract_1.InstallationSubstrate.Cluster,
+        regions: ['primary'],
+        tenancyMode: contract_1.TenancyMode.MultiOrganization,
+        isolation: contract_1.TenantIsolation.DedicatedCell,
+        storageClass: contract_1.StorageClass.Persistent,
+        workspaceDriver: schema_1.WorkspaceDriver.DockerLocal,
+        backupMode: contract_1.BackupMode.Continuous,
+        backupRetentionDays: 90,
+        minReplicas: 3,
+        maxReplicas: 24,
+        maxOrganizations: 10_000,
+        maxConcurrentSessions: 10_000,
+    },
+    [contract_1.InstallationDeploymentProfile.MultiRegion]: {
+        substrate: contract_1.InstallationSubstrate.Cluster,
+        regions: [],
+        tenancyMode: contract_1.TenancyMode.MultiOrganization,
+        isolation: contract_1.TenantIsolation.Namespace,
+        storageClass: contract_1.StorageClass.Persistent,
+        workspaceDriver: schema_1.WorkspaceDriver.DockerLocal,
+        backupMode: contract_1.BackupMode.Continuous,
+        backupRetentionDays: 30,
+        minReplicas: 3,
+        maxReplicas: 24,
+        maxOrganizations: 100_000,
+        maxConcurrentSessions: 100_000,
+    },
+};
+function compileXemaInstallation(raw) {
+    const validation = (0, validation_1.validateXemaInstallation)(raw);
+    if (validation.installation === undefined || validation.issues.length > 0) {
+        throw new diagnostics_1.InstallationCompilationError(validation.issues);
+    }
+    const installation = validation.installation;
+    const defaults = PROFILE_DEFAULTS[installation.deployment.profile];
+    const payload = normalizedPayload(installation, defaults);
+    if (payload.capacity.minReplicas > payload.capacity.maxReplicas) {
+        throw new diagnostics_1.InstallationCompilationError([
+            {
+                kind: diagnostics_1.InstallationIssueKind.Invalid,
+                code: 'CAPACITY_RANGE_INVALID',
+                path: 'capacity',
+                message: 'minReplicas cannot exceed maxReplicas',
+            },
+        ]);
+    }
+    const plan = {
+        ...payload,
+        planHash: (0, serialization_1.hashInstallation)(payload),
+    };
+    return deepFreeze(plan);
+}
+function normalizedPayload(installation, defaults) {
+    const declaredInfrastructure = new Map(installation.infrastructure.map((binding) => [binding.component, binding]));
+    const storage = {
+        class: installation.storage.class ?? defaults.storageClass,
+        workspaceDriver: installation.storage.workspaceDriver ?? defaults.workspaceDriver,
+        ...(installation.storage.externalBinding === undefined
+            ? {}
+            : { externalBinding: installation.storage.externalBinding }),
+        backup: {
+            mode: installation.storage.backup.mode ?? defaults.backupMode,
+            retentionDays: installation.storage.backup.retentionDays ??
+                defaults.backupRetentionDays,
+            ...(installation.storage.backup.destinationSecretRef === undefined
+                ? {}
+                : {
+                    destinationSecretRef: installation.storage.backup.destinationSecretRef,
+                }),
+        },
+    };
+    return {
+        schemaVersion: 1,
+        installationId: installation.installationId,
+        ...(installation.sourceConfigHash === undefined
+            ? {}
+            : { sourceConfigHash: installation.sourceConfigHash }),
+        distribution: installation.distribution,
+        deployment: {
+            profile: installation.deployment.profile,
+            substrate: installation.deployment.substrate ?? defaults.substrate,
+            regions: [
+                ...(installation.deployment.regions ?? defaults.regions),
+            ].sort(),
+        },
+        infrastructure: infra_catalog_1.INFRA_COMPONENTS.map((component) => {
+            const binding = declaredInfrastructure.get(component) ?? {
+                component,
+                ownership: schema_1.InfraMode.Managed,
+                secretRefs: [],
+            };
+            return {
+                ...binding,
+                secretRefs: [...binding.secretRefs].sort(),
+            };
+        }).sort((left, right) => left.component.localeCompare(right.component)),
+        secrets: [...installation.secrets].sort((left, right) => left.name.localeCompare(right.name)),
+        tenancy: {
+            mode: installation.tenancy.mode ?? defaults.tenancyMode,
+            isolation: installation.tenancy.isolation ?? defaults.isolation,
+        },
+        domains: [...installation.domains].sort((left, right) => {
+            const purpose = left.purpose.localeCompare(right.purpose);
+            return purpose === 0
+                ? left.hostname.localeCompare(right.hostname)
+                : purpose;
+        }),
+        storage,
+        capacity: {
+            minReplicas: installation.capacity.minReplicas ?? defaults.minReplicas,
+            maxReplicas: installation.capacity.maxReplicas ?? defaults.maxReplicas,
+            maxOrganizations: installation.capacity.maxOrganizations ?? defaults.maxOrganizations,
+            maxConcurrentSessions: installation.capacity.maxConcurrentSessions ??
+                defaults.maxConcurrentSessions,
+        },
+        upgrade: {
+            channel: installation.upgrade.channel ?? contract_1.UpgradeChannel.Stable,
+            ...(installation.upgrade.releaseRef === undefined
+                ? {}
+                : { releaseRef: installation.upgrade.releaseRef }),
+        },
+    };
+}
+function deepFreeze(value) {
+    if (value !== null && typeof value === 'object' && !Object.isFrozen(value)) {
+        for (const child of Object.values(value)) {
+            deepFreeze(child);
+        }
+        Object.freeze(value);
+    }
+    return value;
+}
+function isManagedInfrastructure(plan) {
+    return plan.infrastructure.some((binding) => binding.ownership === schema_1.InfraMode.Managed);
+}
+//# sourceMappingURL=compiler.js.map

package/dist/runtime/installation/compiler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compiler.js","sourceRoot":"","sources":["../../../src/runtime/installation/compiler.ts"],"names":[],"mappings":";;AAmJA,0DA0BC;AAiGD,0DAMC;AApRD,yCAUoB;AACpB,+CAGuB;AACvB,mDAAmD;AACnD,6CAAwD;AACxD,6CAA8D;AAC9D,0DAA0D;AAsD1D,MAAM,gBAAgB,GAElB;IACF,CAAC,wCAA6B,CAAC,SAAS,CAAC,EAAE;QACzC,SAAS,EAAE,gCAAqB,CAAC,KAAK;QACtC,OAAO,EAAE,CAAC,OAAO,CAAC;QAClB,WAAW,EAAE,sBAAW,CAAC,kBAAkB;QAC3C,SAAS,EAAE,0BAAe,CAAC,MAAM;QACjC,YAAY,EAAE,uBAAY,CAAC,SAAS;QACpC,eAAe,EAAE,wBAAe,CAAC,QAAQ;QACzC,UAAU,EAAE,qBAAU,CAAC,QAAQ;QAC/B,mBAAmB,EAAE,CAAC;QACtB,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,CAAC;QACd,gBAAgB,EAAE,CAAC;QACnB,qBAAqB,EAAE,EAAE;KAC1B;IACD,CAAC,wCAA6B,CAAC,UAAU,CAAC,EAAE;QAC1C,SAAS,EAAE,gCAAqB,CAAC,UAAU;QAC3C,OAAO,EAAE,CAAC,OAAO,CAAC;QAClB,WAAW,EAAE,sBAAW,CAAC,iBAAiB;QAC1C,SAAS,EAAE,0BAAe,CAAC,MAAM;QACjC,YAAY,EAAE,uBAAY,CAAC,UAAU;QACrC,eAAe,EAAE,wBAAe,CAAC,WAAW;QAC5C,UAAU,EAAE,qBAAU,CAAC,SAAS;QAChC,mBAAmB,EAAE,EAAE;QACvB,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,CAAC;QACd,gBAAgB,EAAE,GAAG;QACrB,qBAAqB,EAAE,GAAG;KAC3B;IACD,CAAC,wCAA6B,CAAC,gBAAgB,CAAC,EAAE;QAChD,SAAS,EAAE,gCAAqB,CAAC,OAAO;QACxC,OAAO,EAAE,CAAC,SAAS,CAAC;QACpB,WAAW,EAAE,sBAAW,CAAC,iBAAiB;QAC1C,SAAS,EAAE,0BAAe,CAAC,SAAS;QACpC,YAAY,EAAE,uBAAY,CAAC,UAAU;QACrC,eAAe,EAAE,wBAAe,CAAC,WAAW;QAC5C,UAAU,EAAE,qBAAU,CAAC,SAAS;QAChC,mBAAmB,EAAE,EAAE;QACvB,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,EAAE;QACf,gBAAgB,EAAE,MAAM;QACxB,qBAAqB,EAAE,MAAM;KAC9B;IACD,CAAC,wCAA6B,CAAC,SAAS,CAAC,EAAE;QACzC,SAAS,EAAE,gCAAqB,CAAC,OAAO;QACxC,OAAO,EAAE,CAAC,SAAS,CAAC;QACpB,WAAW,EAAE,sBAAW,CAAC,iBAAiB;QAC1C,SAAS,EAAE,0BAAe,CAAC,aAAa;QACxC,YAAY,EAAE,uBAAY,CAAC,UAAU;QACrC,eAAe,EAAE,wBAAe,CAAC,WAAW;QAC5C,UAAU,EAAE,qBAAU,CAAC,UAAU;QACjC,mBAAmB,EAAE,EAAE;QACvB,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,EAAE;QACf,gBAAgB,EAAE,MAAM;QACxB,qBAAqB,EAAE,MAAM;KAC9B;IACD,CAAC,wCAA6B,CAAC,WAAW,CAAC,EAAE;QAC3C,SAAS,EAAE,gCAAqB,CAAC,OAAO;QACxC,OAAO,EAAE,EAAE;QACX,WAAW,EAAE,sBAAW,CAAC,iBAAiB;QAC1C,SAAS,EAAE,0BAAe,CAAC,SAAS;QACpC,YAAY,EAAE,uBAAY,CAAC,UAAU;QACrC,eAAe,EAAE,wBAAe,CAAC,WAAW;QAC5C,UAAU,EAAE,qBAAU,CAAC,UAAU;QACjC,mBAAmB,EAAE,EAAE;QACvB,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,EAAE;QACf,gBAAgB,EAAE,OAAO;QACzB,qBAAqB,EAAE,OAAO;KAC/B;CACF,CAAC;AAEF,SAAgB,uBAAuB,CACrC,GAA+B;IAE/B,MAAM,UAAU,GAAG,IAAA,qCAAwB,EAAC,GAAG,CAAC,CAAC;IACjD,IAAI,UAAU,CAAC,YAAY,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,0CAA4B,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;IAC7C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,iBAAiB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC1D,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAChE,MAAM,IAAI,0CAA4B,CAAC;YACrC;gBACE,IAAI,EAAE,mCAAqB,CAAC,OAAO;gBACnC,IAAI,EAAE,wBAAwB;gBAC9B,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,uCAAuC;aACjD;SACF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG;QACX,GAAG,OAAO;QACV,QAAQ,EAAE,IAAA,gCAAgB,EAAC,OAAO,CAAC;KACpC,CAAC;IACF,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,iBAAiB,CACxB,YAAoC,EACpC,QAAyB;IAEzB,MAAM,sBAAsB,GAAG,IAAI,GAAG,CACpC,YAAY,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAC3E,CAAC;IACF,MAAM,OAAO,GAAG;QACd,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC,YAAY;QAC1D,eAAe,EACb,YAAY,CAAC,OAAO,CAAC,eAAe,IAAI,QAAQ,CAAC,eAAe;QAClE,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS;YACpD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,eAAe,EAAE,YAAY,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;QAC9D,MAAM,EAAE;YACN,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,QAAQ,CAAC,UAAU;YAC7D,aAAa,EACX,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa;gBACzC,QAAQ,CAAC,mBAAmB;YAC9B,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,KAAK,SAAS;gBAChE,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE,oBAAoB,EAClB,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB;iBACnD,CAAC;SACP;KACF,CAAC;IAEF,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,cAAc,EAAE,YAAY,CAAC,cAAc;QAC3C,GAAG,CAAC,YAAY,CAAC,gBAAgB,KAAK,SAAS;YAC7C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,YAAY,CAAC,gBAAgB,EAAE,CAAC;QACxD,YAAY,EAAE,YAAY,CAAC,YAAY;QACvC,UAAU,EAAE;YACV,OAAO,EAAE,YAAY,CAAC,UAAU,CAAC,OAAO;YACxC,SAAS,EAAE,YAAY,CAAC,UAAU,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS;YAClE,OAAO,EAAE;gBACP,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC;aACzD,CAAC,IAAI,EAAE;SACT;QACD,cAAc,EAAE,gCAAgB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;YACjD,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI;gBACvD,SAAS;gBACT,SAAS,EAAE,kBAAS,CAAC,OAAO;gBAC5B,UAAU,EAAE,EAAE;aACf,CAAC;YACF,OAAO;gBACL,GAAG,OAAO;gBACV,UAAU,EAAE,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE;aAC3C,CAAC;QACJ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvE,OAAO,EAAE,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACtD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CACpC;QACD,OAAO,EAAE;YACP,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC,WAAW;YACvD,SAAS,EAAE,YAAY,CAAC,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS;SAChE;QACD,OAAO,EAAE,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YACtD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1D,OAAO,OAAO,KAAK,CAAC;gBAClB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC7C,CAAC,CAAC,OAAO,CAAC;QACd,CAAC,CAAC;QACF,OAAO;QACP,QAAQ,EAAE;YACR,WAAW,EAAE,YAAY,CAAC,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW;YACtE,WAAW,EAAE,YAAY,CAAC,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW;YACtE,gBAAgB,EACd,YAAY,CAAC,QAAQ,CAAC,gBAAgB,IAAI,QAAQ,CAAC,gBAAgB;YACrE,qBAAqB,EACnB,YAAY,CAAC,QAAQ,CAAC,qBAAqB;gBAC3C,QAAQ,CAAC,qBAAqB;SACjC;QACD,OAAO,EAAE;YACP,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,OAAO,IAAI,yBAAc,CAAC,MAAM;YAC9D,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS;gBAC/C,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;SACrD;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3E,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,uBAAuB,CACrC,IAA8B;IAE9B,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAC7B,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,kBAAS,CAAC,OAAO,CACrD,CAAC;AACJ,CAAC"}

package/dist/runtime/installation/contract.d.ts

@@ -0,0 +1,125 @@
+import { z } from 'zod';
+import { InfraComponent, InfraMode, SecretSource, WorkspaceDriver } from '../config/schema';
+export declare enum InstallationDeploymentProfile {
+    Developer = "developer",
+    StarterPme = "starter-pme",
+    HighAvailability = "high-availability",
+    Regulated = "regulated",
+    MultiRegion = "multi-region"
+}
+export declare enum InstallationSubstrate {
+    Local = "local",
+    SingleNode = "single-node",
+    Cluster = "cluster"
+}
+export declare enum DistributionReferenceKind {
+    Edition = "edition",
+    Lock = "lock"
+}
+export declare enum SecretReferenceProvider {
+    Environment = "environment",
+    File = "file",
+    Prompt = "prompt",
+    ManagedLocal = "managed-local",
+    Kubernetes = "kubernetes",
+    ExternalVault = "external-vault"
+}
+export declare enum TenancyMode {
+    SingleOrganization = "single-organization",
+    MultiOrganization = "multi-organization"
+}
+export declare enum TenantIsolation {
+    Shared = "shared",
+    Namespace = "namespace",
+    DedicatedCell = "dedicated-cell"
+}
+export declare enum DomainPurpose {
+    Api = "api",
+    Web = "web",
+    Identity = "identity"
+}
+export declare enum TlsMode {
+    Disabled = "disabled",
+    Managed = "managed",
+    External = "external"
+}
+export declare enum StorageClass {
+    Ephemeral = "ephemeral",
+    Persistent = "persistent",
+    External = "external"
+}
+export declare enum BackupMode {
+    Disabled = "disabled",
+    Snapshots = "snapshots",
+    Continuous = "continuous"
+}
+export declare enum UpgradeChannel {
+    Stable = "stable",
+    Preview = "preview",
+    Pinned = "pinned"
+}
+export declare const XemaInstallationSchema: z.ZodObject<{
+    schemaVersion: z.ZodDefault<z.ZodLiteral<1>>;
+    installationId: z.ZodString;
+    sourceConfigHash: z.ZodOptional<z.ZodString>;
+    distribution: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<DistributionReferenceKind.Edition>;
+        edition: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<DistributionReferenceKind.Lock>;
+        ref: z.ZodString;
+        digest: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>], "kind">;
+    deployment: z.ZodObject<{
+        profile: z.ZodEnum<typeof InstallationDeploymentProfile>;
+        substrate: z.ZodOptional<z.ZodEnum<typeof InstallationSubstrate>>;
+        regions: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>;
+    infrastructure: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        component: z.ZodEnum<typeof InfraComponent>;
+        ownership: z.ZodEnum<typeof InfraMode>;
+        endpoint: z.ZodOptional<z.ZodString>;
+        secretRefs: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>>;
+    secrets: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        provider: z.ZodEnum<typeof SecretReferenceProvider>;
+        locator: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>>;
+    tenancy: z.ZodDefault<z.ZodObject<{
+        mode: z.ZodOptional<z.ZodEnum<typeof TenancyMode>>;
+        isolation: z.ZodOptional<z.ZodEnum<typeof TenantIsolation>>;
+    }, z.core.$strict>>;
+    domains: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        hostname: z.ZodString;
+        purpose: z.ZodEnum<typeof DomainPurpose>;
+        tls: z.ZodObject<{
+            mode: z.ZodEnum<typeof TlsMode>;
+            secretRef: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+    }, z.core.$strict>>>;
+    storage: z.ZodDefault<z.ZodObject<{
+        class: z.ZodOptional<z.ZodEnum<typeof StorageClass>>;
+        workspaceDriver: z.ZodOptional<z.ZodEnum<typeof WorkspaceDriver>>;
+        externalBinding: z.ZodOptional<z.ZodString>;
+        backup: z.ZodDefault<z.ZodObject<{
+            mode: z.ZodOptional<z.ZodEnum<typeof BackupMode>>;
+            retentionDays: z.ZodOptional<z.ZodNumber>;
+            destinationSecretRef: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    capacity: z.ZodDefault<z.ZodObject<{
+        minReplicas: z.ZodOptional<z.ZodNumber>;
+        maxReplicas: z.ZodOptional<z.ZodNumber>;
+        maxOrganizations: z.ZodOptional<z.ZodNumber>;
+        maxConcurrentSessions: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+    upgrade: z.ZodDefault<z.ZodObject<{
+        channel: z.ZodOptional<z.ZodEnum<typeof UpgradeChannel>>;
+        releaseRef: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type XemaInstallation = z.input<typeof XemaInstallationSchema>;
+export type ParsedXemaInstallation = z.output<typeof XemaInstallationSchema>;
+export declare const CURRENT_SECRET_SOURCE_PROVIDER: Readonly<Record<SecretSource, SecretReferenceProvider>>;
+//# sourceMappingURL=contract.d.ts.map

package/dist/runtime/installation/contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,cAAc,EACd,SAAS,EACT,YAAY,EACZ,eAAe,EAChB,MAAM,kBAAkB,CAAC;AAS1B,oBAAY,6BAA6B;IACvC,SAAS,cAAc;IACvB,UAAU,gBAAgB;IAC1B,gBAAgB,sBAAsB;IACtC,SAAS,cAAc;IACvB,WAAW,iBAAiB;CAC7B;AAED,oBAAY,qBAAqB;IAC/B,KAAK,UAAU;IACf,UAAU,gBAAgB;IAC1B,OAAO,YAAY;CACpB;AAED,oBAAY,yBAAyB;IACnC,OAAO,YAAY;IACnB,IAAI,SAAS;CACd;AAED,oBAAY,uBAAuB;IACjC,WAAW,gBAAgB;IAC3B,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,YAAY,kBAAkB;IAC9B,UAAU,eAAe;IACzB,aAAa,mBAAmB;CACjC;AAED,oBAAY,WAAW;IACrB,kBAAkB,wBAAwB;IAC1C,iBAAiB,uBAAuB;CACzC;AAED,oBAAY,eAAe;IACzB,MAAM,WAAW;IACjB,SAAS,cAAc;IACvB,aAAa,mBAAmB;CACjC;AAED,oBAAY,aAAa;IACvB,GAAG,QAAQ;IACX,GAAG,QAAQ;IACX,QAAQ,aAAa;CACtB;AAED,oBAAY,OAAO;IACjB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,QAAQ,aAAa;CACtB;AAED,oBAAY,YAAY;IACtB,SAAS,cAAc;IACvB,UAAU,eAAe;IACzB,QAAQ,aAAa;CACtB;AAED,oBAAY,UAAU;IACpB,QAAQ,aAAa;IACrB,SAAS,cAAc;IACvB,UAAU,eAAe;CAC1B;AAED,oBAAY,cAAc;IACxB,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,MAAM,WAAW;CAClB;AAgDD,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA4DxB,CAAC;AAEZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE7E,eAAO,MAAM,8BAA8B,EAAE,QAAQ,CACnD,MAAM,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAK9C,CAAC"}