@xemahq/xema 0.13.0 → 0.14.0

package/dist/runtime/env-seeder.js

@@ -5,33 +5,115 @@ const kernel_state_runtime_1 = require("@xemahq/kernel-state-runtime");
 const service_registry_nest_1 = require("@xemahq/service-registry-nest");
 const schema_1 = require("./config/schema");
 const infra_catalog_1 = require("./infra/infra-catalog");
+const paths_1 = require("./paths");
+const resolver_1 = require("./secrets/resolver");
 const env_defaults_1 = require("../dev/env-defaults");
 const DEFAULT_CONTAINER_PORT = 3000;
+const LAUNCHER_OWNED_ENV = new Set([
+    'DATABASE_URL',
+    'EVENT_HUB_URL',
+    'JWT_ISSUER',
+    'JWT_PUBLIC_KEY_URL',
+    'KEYCLOAK_URL',
+    'OPENSEARCH_URL',
+    'PORT',
+    'REDIS_URL',
+    'S3_ENDPOINT',
+    'S3_PUBLIC_BASE_URL',
+    'S3_PUBLIC_ENDPOINT',
+    'SERVICE_PUBLIC_URL',
+    'SHARED_BIOME_DB_HOST',
+    'SHARED_BIOME_DB_NAME',
+    'SHARED_BIOME_DB_PASSWORD',
+    'SHARED_BIOME_DB_PORT',
+    'SHARED_BIOME_DB_USER',
+    'TEMPORAL_ADDRESS',
+    'TEMPORAL_NAMESPACE',
+    'WEBHOOK_URL',
+    'XEMA_DEFAULT_ALLOWED_TIERS',
+    'XEMA_DISTRIBUTION_LOCK_PATH',
+    'XEMA_ETCD_ENDPOINTS',
+    'XEMA_KERNEL_STATE_PROFILE',
+    service_registry_nest_1.SERVICE_REGISTRY_ADAPTER_ENV_VAR,
+]);
 function seedEnv(ctx) {
     const containerPort = ctx.containerPort ?? DEFAULT_CONTAINER_PORT;
-    const hostOf = (name) => ctx.substrate === schema_1.Substrate.Container
-        ? name
-        : '127.0.0.1';
+    const hostOf = (name) => ctx.substrate === schema_1.Substrate.Container ? name : '127.0.0.1';
     const portOf = (name) => ctx.substrate === schema_1.Substrate.Container
         ? containerPort
-        : ctx.ports?.get(name) ?? env_defaults_1.PORT_MAP[name] ?? containerPort;
-    const base = {};
+        : (ctx.ports?.get(name) ?? env_defaults_1.PORT_MAP[name] ?? containerPort);
+    const materializedSecrets = (0, resolver_1.secretEnvironment)(ctx.secrets ?? new Map());
+    const launcherOwnedEnv = new Set(LAUNCHER_OWNED_ENV);
+    if (ctx.infra.byComponent.get(schema_1.InfraComponent.ObjectStore)?.mode ===
+        schema_1.InfraMode.Managed) {
+        launcherOwnedEnv.add('S3_ACCESS_KEY_ID');
+        launcherOwnedEnv.add('S3_FORCE_PATH_STYLE');
+        launcherOwnedEnv.add('S3_REGION');
+        launcherOwnedEnv.add('S3_SECRET_ACCESS_KEY');
+    }
+    for (const name of Object.keys(materializedSecrets)) {
+        if (launcherOwnedEnv.has(name)) {
+            throw new Error(`Secret "${name}" collides with a launcher-owned service environment variable.`);
+        }
+    }
+    const base = { ...materializedSecrets };
     base.REDIS_URL = `redis://${stripScheme(infraUrl(ctx, schema_1.InfraComponent.Redis) ?? '127.0.0.1:6379')}`;
-    base.OPENSEARCH_URL = infraUrl(ctx, schema_1.InfraComponent.Search) ?? 'http://127.0.0.1:9200';
+    base.OPENSEARCH_URL =
+        infraUrl(ctx, schema_1.InfraComponent.Search) ?? 'http://127.0.0.1:9200';
     base.TEMPORAL_ADDRESS = stripScheme(infraUrl(ctx, schema_1.InfraComponent.Temporal) ?? '127.0.0.1:7233');
-    base.TEMPORAL_NAMESPACE = 'default';
+    base.TEMPORAL_NAMESPACE = 'xema';
     const eventHubHost = ctx.substrate === schema_1.Substrate.Container ? 'event-hub' : '127.0.0.1';
     base.EVENT_HUB_URL = `http://${eventHubHost}:3128`;
     base.WEBHOOK_URL = `http://${eventHubHost}:3128/webhooks`;
     const etcd = infraUrl(ctx, schema_1.InfraComponent.Etcd) ?? '127.0.0.1:2379';
     base.XEMA_ETCD_ENDPOINTS = stripScheme(etcd);
     base.XEMA_KERNEL_STATE_PROFILE = kernel_state_runtime_1.KernelStateProfile.Cluster;
-    base[service_registry_nest_1.SERVICE_REGISTRY_ADAPTER_ENV_VAR] = service_registry_nest_1.ServiceRegistryAdapterKind.KernelState;
+    base[service_registry_nest_1.SERVICE_REGISTRY_ADAPTER_ENV_VAR] =
+        service_registry_nest_1.ServiceRegistryAdapterKind.KernelState;
     const kcUrl = infraUrl(ctx, schema_1.InfraComponent.Keycloak) ?? 'http://127.0.0.1:8180';
     const realm = ctx.infra.byComponent.get(schema_1.InfraComponent.Keycloak)?.config.realm ?? 'xema';
     base.JWT_ISSUER = `${kcUrl}/realms/${realm}`;
     base.JWT_PUBLIC_KEY_URL = `${kcUrl}/realms/${realm}/protocol/openid-connect/certs`;
     base.KEYCLOAK_URL = kcUrl;
+    if (ctx.substrate !== schema_1.Substrate.Helm) {
+        const objectStore = ctx.infra.byComponent.get(schema_1.InfraComponent.ObjectStore);
+        const internalEndpoint = infraUrl(ctx, schema_1.InfraComponent.ObjectStore);
+        if (internalEndpoint !== undefined) {
+            const publicEndpoint = objectStore?.mode === schema_1.InfraMode.Managed
+                ? infra_catalog_1.INFRA_CATALOG[schema_1.InfraComponent.ObjectStore].defaultLocalUrl
+                : internalEndpoint;
+            if (publicEndpoint === undefined) {
+                throw new Error('Managed object storage has no public endpoint in the infrastructure catalog.');
+            }
+            base.S3_ENDPOINT = internalEndpoint;
+            base.S3_PUBLIC_ENDPOINT = publicEndpoint;
+            base.S3_PUBLIC_BASE_URL = publicEndpoint.replace(/\/+$/, '');
+        }
+        if (objectStore?.mode === schema_1.InfraMode.Managed) {
+            const objectStoreCredentials = ctx.managedCredentials?.objectStore;
+            if (objectStoreCredentials === undefined) {
+                throw new Error('Managed-local object-store credentials were not resolved before environment seeding.');
+            }
+            base.S3_ACCESS_KEY_ID = objectStoreCredentials.username;
+            base.S3_SECRET_ACCESS_KEY = objectStoreCredentials.password;
+            base.S3_REGION = 'us-east-1';
+            base.S3_FORCE_PATH_STYLE = 'true';
+        }
+    }
+    if (ctx.substrate !== schema_1.Substrate.Helm) {
+        const pg = postgresHostPort(ctx);
+        const pgCredentials = postgresCredentials(ctx);
+        base.SHARED_BIOME_DB_HOST = pg.host;
+        base.SHARED_BIOME_DB_PORT = String(pg.port);
+        base.SHARED_BIOME_DB_USER = pgCredentials.username;
+        base.SHARED_BIOME_DB_PASSWORD = pgCredentials.password;
+        base.SHARED_BIOME_DB_NAME = 'xema_biomes';
+    }
+    base.XEMA_DEFAULT_ALLOWED_TIERS = (0, schema_1.resolveDefaultAllowedTiers)(ctx.config.policy);
+    base.XEMA_DISTRIBUTION_LOCK_PATH =
+        ctx.substrate === schema_1.Substrate.Container
+            ? paths_1.CONTAINER_DISTRIBUTION_LOCK_PATH
+            : ctx.distributionLockPath;
     return {
         base,
         perService(entry) {
@@ -39,20 +121,40 @@ function seedEnv(ctx) {
             const selfPort = portOf(entry.name);
             overlay.PORT = String(selfPort);
             overlay.SERVICE_PUBLIC_URL = `http://${hostOf(entry.name)}:${String(selfPort)}`;
-            overlay.DATABASE_URL = databaseUrl(ctx, entry.name);
+            if (ctx.substrate !== schema_1.Substrate.Helm) {
+                overlay.DATABASE_URL = databaseUrl(ctx, entry.name);
+            }
             return overlay;
         },
     };
 }
-function databaseUrl(ctx, serviceName) {
+function postgresHostPort(ctx) {
     const pg = ctx.infra.byComponent.get(schema_1.InfraComponent.Postgres);
-    const host = pg?.mode === schema_1.InfraMode.External && pg.url
-        ? new URL(pg.url).host
-        : ctx.substrate === schema_1.Substrate.Container
-            ? `${infra_catalog_1.INFRA_CATALOG[schema_1.InfraComponent.Postgres].managed.containerName}:5432`
-            : '127.0.0.1:5432';
+    if (pg?.mode === schema_1.InfraMode.External && pg.url) {
+        const url = new URL(pg.url);
+        return { host: url.hostname, port: Number(url.port) || 5432 };
+    }
+    const host = ctx.substrate === schema_1.Substrate.Container
+        ? infra_catalog_1.INFRA_CATALOG[schema_1.InfraComponent.Postgres].managed.containerName
+        : '127.0.0.1';
+    return { host, port: 5432 };
+}
+function databaseUrl(ctx, serviceName) {
+    const { host, port } = postgresHostPort(ctx);
+    const { username, password } = postgresCredentials(ctx);
     const db = `${serviceName.replace(/-/g, '_')}_db`;
-    return `postgresql://postgres:postgres@${host}/${db}?schema=public&connection_limit=3`;
+    return `postgresql://${encodeURIComponent(username)}:${encodeURIComponent(password)}@${host}:${String(port)}/${db}?schema=public&connection_limit=3`;
+}
+function postgresCredentials(ctx) {
+    const external = (0, resolver_1.externalPostgresCredentials)(ctx.config, ctx.secrets ?? new Map());
+    if (external !== undefined) {
+        return external;
+    }
+    const managedPostgres = ctx.managedCredentials?.postgres;
+    if (managedPostgres === undefined) {
+        throw new Error('Managed-local PostgreSQL credentials were not resolved before environment seeding.');
+    }
+    return managedPostgres;
 }
 function infraUrl(ctx, component) {
     const resolved = ctx.infra.byComponent.get(component);

package/dist/runtime/env-seeder.js.map

@@ -1 +1 @@
-{"version":3,"file":"env-seeder.js","sourceRoot":"","sources":["../../src/runtime/env-seeder.ts"],"names":[],"mappings":";;AA6CA,0BAoEC;AAjHD,uEAAkE;AAClE,yEAGuC;AAGvC,4CAAwF;AACxF,yDAAsD;AACtD,sDAA+C;AAkC/C,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAEpC,SAAgB,OAAO,CAAC,GAAqB;IAC3C,MAAM,aAAa,GAAG,GAAG,CAAC,aAAa,IAAI,sBAAsB,CAAC;IAClE,MAAM,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE,CACtC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS;QACnC,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,WAAW,CAAC;IAIlB,MAAM,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE,CACtC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS;QACnC,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,uBAAQ,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC;IAE9D,MAAM,IAAI,GAA2B,EAAE,CAAC;IAMxC,IAAI,CAAC,SAAS,GAAG,WAAW,WAAW,CAAC,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,EAAE,CAAC;IACnG,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,MAAM,CAAC,IAAI,uBAAuB,CAAC;IACtF,IAAI,CAAC,gBAAgB,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,QAAQ,CAAC,IAAI,gBAAgB,CAAC,CAAC;IAChG,IAAI,CAAC,kBAAkB,GAAG,SAAS,CAAC;IAKpC,MAAM,YAAY,GAAG,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;IACvF,IAAI,CAAC,aAAa,GAAG,UAAU,YAAY,OAAO,CAAC;IACnD,IAAI,CAAC,WAAW,GAAG,UAAU,YAAY,gBAAgB,CAAC;IAM1D,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC;IACpE,IAAI,CAAC,mBAAmB,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,yBAAyB,GAAG,yCAAkB,CAAC,OAAO,CAAC;IAC5D,IAAI,CAAC,wDAAgC,CAAC,GAAG,kDAA0B,CAAC,WAAW,CAAC;IAGhF,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,QAAQ,CAAC,IAAI,uBAAuB,CAAC;IAChF,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC;IACzF,IAAI,CAAC,UAAU,GAAG,GAAG,KAAK,WAAW,KAAK,EAAE,CAAC;IAC7C,IAAI,CAAC,kBAAkB,GAAG,GAAG,KAAK,WAAW,KAAK,gCAAgC,CAAC;IAKnF,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;IAO1B,OAAO;QACL,IAAI;QACJ,UAAU,CAAC,KAAkB;YAC3B,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChC,OAAO,CAAC,kBAAkB,GAAG,UAAU,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChF,OAAO,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACpD,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC;AAGD,SAAS,WAAW,CAAC,GAAqB,EAAE,WAAmB;IAC7D,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC;IAC9D,MAAM,IAAI,GACR,EAAE,EAAE,IAAI,KAAK,kBAAS,CAAC,QAAQ,IAAI,EAAE,CAAC,GAAG;QACvC,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI;QACtB,CAAC,CAAC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS;YACrC,CAAC,CAAC,GAAG,6BAAa,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,aAAa,OAAO;YACxE,CAAC,CAAC,gBAAgB,CAAC;IACzB,MAAM,EAAE,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC;IAClD,OAAO,kCAAkC,IAAI,IAAI,EAAE,mCAAmC,CAAC;AACzF,CAAC;AAED,SAAS,QAAQ,CAAC,GAAqB,EAAE,SAAyB;IAChE,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,kBAAS,CAAC,QAAQ,EAAE,CAAC;QACzC,OAAO,QAAQ,CAAC,GAAG,CAAC;IACtB,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,kBAAS,CAAC,QAAQ,EAAE,CAAC;QACzC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,UAAU,CAAC,GAAqB,EAAE,QAAgC;IACzE,MAAM,IAAI,GAAG,6BAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,EAAE,CAAC;QAC1C,OAAO,UAAU,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,oBAAoB,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC"}
+{"version":3,"file":"env-seeder.js","sourceRoot":"","sources":["../../src/runtime/env-seeder.ts"],"names":[],"mappings":";;AAgGA,0BAyKC;AAzQD,uEAAkE;AAClE,yEAGuC;AAEvC,4CAMyB;AACzB,yDAAsD;AACtD,mCAA2D;AAC3D,iDAI4B;AAC5B,sDAA+C;AA+C/C,MAAM,sBAAsB,GAAG,IAAI,CAAC;AACpC,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,cAAc;IACd,eAAe;IACf,YAAY;IACZ,oBAAoB;IACpB,cAAc;IACd,gBAAgB;IAChB,MAAM;IACN,WAAW;IACX,aAAa;IACb,oBAAoB;IACpB,oBAAoB;IACpB,oBAAoB;IACpB,sBAAsB;IACtB,sBAAsB;IACtB,0BAA0B;IAC1B,sBAAsB;IACtB,sBAAsB;IACtB,kBAAkB;IAClB,oBAAoB;IACpB,aAAa;IACb,4BAA4B;IAC5B,6BAA6B;IAC7B,qBAAqB;IACrB,2BAA2B;IAC3B,wDAAgC;CACjC,CAAC,CAAC;AAEH,SAAgB,OAAO,CAAC,GAAqB;IAC3C,MAAM,aAAa,GAAG,GAAG,CAAC,aAAa,IAAI,sBAAsB,CAAC;IAClE,MAAM,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE,CACtC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;IAI7D,MAAM,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE,CACtC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS;QACnC,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,uBAAQ,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,CAAC;IAEhE,MAAM,mBAAmB,GAAG,IAAA,4BAAiB,EAAC,GAAG,CAAC,OAAO,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;IACxE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACrD,IACE,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,WAAW,CAAC,EAAE,IAAI;QAC3D,kBAAS,CAAC,OAAO,EACjB,CAAC;QACD,gBAAgB,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACzC,gBAAgB,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAC5C,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAClC,gBAAgB,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACpD,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,WAAW,IAAI,gEAAgE,CAChF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAA2B,EAAE,GAAG,mBAAmB,EAAE,CAAC;IAMhE,IAAI,CAAC,SAAS,GAAG,WAAW,WAAW,CAAC,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,EAAE,CAAC;IACnG,IAAI,CAAC,cAAc;QACjB,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,MAAM,CAAC,IAAI,uBAAuB,CAAC;IAClE,IAAI,CAAC,gBAAgB,GAAG,WAAW,CACjC,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,QAAQ,CAAC,IAAI,gBAAgB,CAC3D,CAAC;IAKF,IAAI,CAAC,kBAAkB,GAAG,MAAM,CAAC;IAKjC,MAAM,YAAY,GAChB,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;IACpE,IAAI,CAAC,aAAa,GAAG,UAAU,YAAY,OAAO,CAAC;IACnD,IAAI,CAAC,WAAW,GAAG,UAAU,YAAY,gBAAgB,CAAC;IAM1D,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC;IACpE,IAAI,CAAC,mBAAmB,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,yBAAyB,GAAG,yCAAkB,CAAC,OAAO,CAAC;IAC5D,IAAI,CAAC,wDAAgC,CAAC;QACpC,kDAA0B,CAAC,WAAW,CAAC;IAGzC,MAAM,KAAK,GACT,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,QAAQ,CAAC,IAAI,uBAAuB,CAAC;IACpE,MAAM,KAAK,GACT,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC;IAC7E,IAAI,CAAC,UAAU,GAAG,GAAG,KAAK,WAAW,KAAK,EAAE,CAAC;IAC7C,IAAI,CAAC,kBAAkB,GAAG,GAAG,KAAK,WAAW,KAAK,gCAAgC,CAAC;IAKnF,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;IAM1B,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,WAAW,CAAC,CAAC;QAC1E,MAAM,gBAAgB,GAAG,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,WAAW,CAAC,CAAC;QACnE,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,cAAc,GAClB,WAAW,EAAE,IAAI,KAAK,kBAAS,CAAC,OAAO;gBACrC,CAAC,CAAC,6BAAa,CAAC,uBAAc,CAAC,WAAW,CAAC,CAAC,eAAe;gBAC3D,CAAC,CAAC,gBAAgB,CAAC;YACvB,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CACb,8EAA8E,CAC/E,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,WAAW,GAAG,gBAAgB,CAAC;YACpC,IAAI,CAAC,kBAAkB,GAAG,cAAc,CAAC;YACzC,IAAI,CAAC,kBAAkB,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,WAAW,EAAE,IAAI,KAAK,kBAAS,CAAC,OAAO,EAAE,CAAC;YAC5C,MAAM,sBAAsB,GAAG,GAAG,CAAC,kBAAkB,EAAE,WAAW,CAAC;YACnE,IAAI,sBAAsB,KAAK,SAAS,EAAE,CAAC;gBACzC,MAAM,IAAI,KAAK,CACb,sFAAsF,CACvF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,gBAAgB,GAAG,sBAAsB,CAAC,QAAQ,CAAC;YACxD,IAAI,CAAC,oBAAoB,GAAG,sBAAsB,CAAC,QAAQ,CAAC;YAC5D,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC;YAC7B,IAAI,CAAC,mBAAmB,GAAG,MAAM,CAAC;QACpC,CAAC;IACH,CAAC;IAQD,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,aAAa,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,oBAAoB,GAAG,EAAE,CAAC,IAAI,CAAC;QACpC,IAAI,CAAC,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,oBAAoB,GAAG,aAAa,CAAC,QAAQ,CAAC;QACnD,IAAI,CAAC,wBAAwB,GAAG,aAAa,CAAC,QAAQ,CAAC;QACvD,IAAI,CAAC,oBAAoB,GAAG,aAAa,CAAC;IAC5C,CAAC;IAQD,IAAI,CAAC,0BAA0B,GAAG,IAAA,mCAA0B,EAC1D,GAAG,CAAC,MAAM,CAAC,MAAM,CAClB,CAAC;IAQF,IAAI,CAAC,2BAA2B;QAC9B,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS;YACnC,CAAC,CAAC,wCAAgC;YAClC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAO/B,OAAO;QACL,IAAI;QACJ,UAAU,CAAC,KAAkB;YAC3B,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChC,OAAO,CAAC,kBAAkB,GAAG,UAAU,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChF,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,IAAI,EAAE,CAAC;gBACrC,OAAO,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACtD,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC;AAOD,SAAS,gBAAgB,CAAC,GAAqB;IAI7C,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC;IAC9D,IAAI,EAAE,EAAE,IAAI,KAAK,kBAAS,CAAC,QAAQ,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,IAAI,GACR,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS;QACnC,CAAC,CAAC,6BAAa,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,aAAa;QAC9D,CAAC,CAAC,WAAW,CAAC;IAClB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC9B,CAAC;AAGD,SAAS,WAAW,CAAC,GAAqB,EAAE,WAAmB;IAC7D,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACxD,MAAM,EAAE,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC;IAClD,OAAO,gBAAgB,kBAAkB,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,mCAAmC,CAAC;AACvJ,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAqB;IAIhD,MAAM,QAAQ,GAAG,IAAA,sCAA2B,EAC1C,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,OAAO,IAAI,IAAI,GAAG,EAAE,CACzB,CAAC;IACF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,eAAe,GAAG,GAAG,CAAC,kBAAkB,EAAE,QAAQ,CAAC;IACzD,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,SAAS,QAAQ,CACf,GAAqB,EACrB,SAAyB;IAEzB,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,kBAAS,CAAC,QAAQ,EAAE,CAAC;QACzC,OAAO,QAAQ,CAAC,GAAG,CAAC;IACtB,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,kBAAS,CAAC,QAAQ,EAAE,CAAC;QACzC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,UAAU,CACjB,GAAqB,EACrB,QAAgC;IAEhC,MAAM,IAAI,GAAG,6BAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,EAAE,CAAC;QAC1C,OAAO,UAAU,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,oBAAoB,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC"}

package/dist/runtime/foreground.d.ts

@@ -1,8 +1,12 @@
 import { type XemaConfig } from './config/schema';
+import { type LaunchHandle } from './launch';
 export interface ForegroundOptions {
     readonly config: XemaConfig;
     readonly includeWeb: boolean;
     readonly detach: boolean;
+    readonly installationIdentity: string;
+    readonly onReady?: () => Promise<void>;
 }
 export declare function bringUpForeground(opts: ForegroundOptions): Promise<void>;
+export declare function waitForSignal(handle: LaunchHandle): Promise<void>;
 //# sourceMappingURL=foreground.d.ts.map

package/dist/runtime/foreground.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"foreground.d.ts","sourceRoot":"","sources":["../../src/runtime/foreground.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAU7D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsC9E"}
+{"version":3,"file":"foreground.d.ts","sourceRoot":"","sources":["../../src/runtime/foreground.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAU,KAAK,YAAY,EAAE,MAAM,UAAU,CAAC;AAUrD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IAEtC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,IAAI,CAAC,CAiDf;AAwBD,wBAAgB,aAAa,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBjE"}

package/dist/runtime/foreground.js

@@ -1,8 +1,10 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.bringUpForeground = bringUpForeground;
+exports.waitForSignal = waitForSignal;
 const schema_1 = require("./config/schema");
 const launch_1 = require("./launch");
+const run_manifest_1 = require("./run-manifest");
 async function bringUpForeground(opts) {
     const onEvent = (event) => {
         if (event.kind === 'wave-start') {
@@ -18,9 +20,17 @@ async function bringUpForeground(opts) {
     const handle = await (0, launch_1.launch)({
         config: opts.config,
         includeWeb: opts.includeWeb,
+        installationIdentity: opts.installationIdentity,
         onEvent,
         log: (line) => console.log(line),
     });
+    try {
+        await opts.onReady?.();
+    }
+    catch (error) {
+        await handle.shutdown();
+        throw error;
+    }
     printSummary(handle);
     if (opts.detach) {
         if (opts.config.app.substrate !== schema_1.Substrate.Container) {
@@ -61,6 +71,7 @@ function waitForSignal(handle) {
                 .shutdown()
                 .catch(() => undefined)
                 .finally(() => {
+                (0, run_manifest_1.clearRunManifest)();
                 resolve();
             });
         };

package/dist/runtime/foreground.js.map

@@ -1 +1 @@
-{"version":3,"file":"foreground.js","sourceRoot":"","sources":["../../src/runtime/foreground.ts"],"names":[],"mappings":";;AAgBA,8CAsCC;AAtDD,4CAA6D;AAC7D,qCAAqD;AAe9C,KAAK,UAAU,iBAAiB,CAAC,IAAuB;IAC7D,MAAM,OAAO,GAAG,CAAC,KAAqB,EAAQ,EAAE;QAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,QAAQ,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,IAAI,EAAE,KAAK,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;QACnE,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,OAAO,IAAI,EAAE,KAAK,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,IAAA,eAAM,EAAC;QAC1B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO;QACP,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;KACjC,CAAC,CAAC;IAEH,YAAY,CAAC,MAAM,CAAC,CAAC;IAErB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,EAAE,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CACT,8EAA8E;gBAC5E,mDAAmD,CACtD,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,gFAAgF,CAAC,CAAC;YAC9F,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAC1C,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY,CAAC,MAAoB;IACxC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CACT,UAAU,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW;QACzE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACpE,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IAC3E,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAAoB;IACzC,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACnC,MAAM,QAAQ,GAAG,CAAC,MAAsB,EAAQ,EAAE;YAChD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,oBAAoB,CAAC,CAAC;YACpD,MAAM;iBACH,QAAQ,EAAE;iBACV,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;iBACtB,OAAO,CAAC,GAAG,EAAE;gBACZ,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACP,CAAC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"foreground.js","sourceRoot":"","sources":["../../src/runtime/foreground.ts"],"names":[],"mappings":";;AAoBA,8CAmDC;AAwBD,sCAmBC;AAlHD,4CAA6D;AAC7D,qCAAqD;AACrD,iDAAkD;AAkB3C,KAAK,UAAU,iBAAiB,CACrC,IAAuB;IAEvB,MAAM,OAAO,GAAG,CAAC,KAAqB,EAAQ,EAAE;QAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,QAAQ,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,IAAI,EAAE,KAAK,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;QACnE,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,OAAO,IAAI,EAAE,KAAK,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,IAAA,eAAM,EAAC;QAC1B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;QAC/C,OAAO;QACP,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;KACjC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxB,MAAM,KAAK,CAAC;IACd,CAAC;IACD,YAAY,CAAC,MAAM,CAAC,CAAC;IAErB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,EAAE,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CACT,8EAA8E;gBAC5E,mDAAmD,CACtD,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CACT,gFAAgF,CACjF,CAAC;YACF,OAAO,CAAC,GAAG,CACT,+DAA+D,CAChE,CAAC;YACF,OAAO;QACT,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAC1C,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY,CAAC,MAAoB;IACxC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CACT,UAAU,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW;QACzE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACpE,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IAC3E,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAQD,SAAgB,aAAa,CAAC,MAAoB;IAChD,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACnC,MAAM,QAAQ,GAAG,CAAC,MAAsB,EAAQ,EAAE;YAChD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,oBAAoB,CAAC,CAAC;YACpD,MAAM;iBACH,QAAQ,EAAE;iBACV,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;iBACtB,OAAO,CAAC,GAAG,EAAE;gBAIZ,IAAA,+BAAgB,GAAE,CAAC;gBACnB,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACP,CAAC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/infra/infra-catalog.d.ts

@@ -5,6 +5,7 @@ export interface ManagedInfraSpec {
     readonly ports: ReadonlyArray<readonly [number, number]>;
     readonly dataPath?: string;
     readonly healthCmd?: string;
+    readonly command?: readonly string[];
 }
 export interface InfraCatalogEntry {
     readonly component: InfraComponent;

package/dist/runtime/infra/infra-catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"infra-catalog.d.ts","sourceRoot":"","sources":["../../../src/runtime/infra/infra-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAclD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAE/B,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAEzD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IAEnC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAgH5E,CAAC;AAGH,eAAO,MAAM,gBAAgB,EAAE,SAAS,cAAc,EAErD,CAAC;AAOF,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAOhD,CAAC;AAGH,eAAO,MAAM,sBAAsB,gBAAgB,CAAC"}
+{"version":3,"file":"infra-catalog.d.ts","sourceRoot":"","sources":["../../../src/runtime/infra/infra-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAclD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAE/B,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAEzD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IAEnC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,eAAO,MAAM,aAAa,EAAE,QAAQ,CAClC,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAuHzC,CAAC;AAGH,eAAO,MAAM,gBAAgB,EAAE,SAAS,cAAc,EAErD,CAAC;AAOF,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAOhD,CAAC;AAGH,eAAO,MAAM,sBAAsB,gBAAgB,CAAC"}

package/dist/runtime/infra/infra-catalog.js

@@ -11,7 +11,7 @@ exports.INFRA_CATALOG = Object.freeze({
             containerName: 'xema-postgres',
             ports: [[5432, 5432]],
             dataPath: '/var/lib/postgresql/data',
-            healthCmd: 'pg_isready -U postgres',
+            healthCmd: 'pg_isready -U "$POSTGRES_USER"',
         },
     },
     [schema_1.InfraComponent.Redis]: {
@@ -61,6 +61,7 @@ exports.INFRA_CATALOG = Object.freeze({
             ],
             dataPath: '/data',
             healthCmd: 'mc ready local',
+            command: ['server', '/data', '--console-address', ':9001'],
         },
         defaultLocalUrl: 'http://127.0.0.1:9000',
     },

package/dist/runtime/infra/infra-catalog.js.map

@@ -1 +1 @@
-{"version":3,"file":"infra-catalog.js","sourceRoot":"","sources":["../../../src/runtime/infra/infra-catalog.ts"],"names":[],"mappings":";;;AAAA,6CAAkD;AAiCrC,QAAA,aAAa,GAAwD,MAAM,CAAC,MAAM,CAAC;IAC9F,CAAC,uBAAc,CAAC,QAAQ,CAAC,EAAE;QACzB,SAAS,EAAE,uBAAc,CAAC,QAAQ;QAClC,SAAS,EAAE,IAAI;QACf,OAAO,EAAE;YACP,KAAK,EAAE,wBAAwB;YAC/B,aAAa,EAAE,eAAe;YAC9B,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrB,QAAQ,EAAE,0BAA0B;YACpC,SAAS,EAAE,wBAAwB;SACpC;KACF;IACD,CAAC,uBAAc,CAAC,KAAK,CAAC,EAAE;QACtB,SAAS,EAAE,uBAAc,CAAC,KAAK;QAC/B,SAAS,EAAE,IAAI;QACf,OAAO,EAAE;YACP,KAAK,EAAE,gBAAgB;YACvB,aAAa,EAAE,YAAY;YAC3B,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrB,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,gBAAgB;SAC5B;QACD,eAAe,EAAE,wBAAwB;KAC1C;IACD,CAAC,uBAAc,CAAC,IAAI,CAAC,EAAE;QACrB,SAAS,EAAE,uBAAc,CAAC,IAAI;QAC9B,SAAS,EAAE,IAAI;QACf,OAAO,EAAE;YACP,KAAK,EAAE,4BAA4B;YACnC,aAAa,EAAE,WAAW;YAC1B,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrB,QAAQ,EAAE,YAAY;YACtB,SAAS,EAAE,yBAAyB;SACrC;QACD,eAAe,EAAE,gBAAgB;KAClC;IACD,CAAC,uBAAc,CAAC,QAAQ,CAAC,EAAE;QACzB,SAAS,EAAE,uBAAc,CAAC,QAAQ;QAClC,SAAS,EAAE,IAAI;QACf,OAAO,EAAE;YACP,KAAK,EAAE,gCAAgC;YACvC,aAAa,EAAE,eAAe;YAC9B,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrB,SAAS,EAAE,qBAAqB;SACjC;QACD,eAAe,EAAE,uBAAuB;KACzC;IACD,CAAC,uBAAc,CAAC,WAAW,CAAC,EAAE;QAC5B,SAAS,EAAE,uBAAc,CAAC,WAAW;QACrC,SAAS,EAAE,IAAI;QACf,OAAO,EAAE;YACP,KAAK,EAAE,0CAA0C;YACjD,aAAa,EAAE,YAAY;YAC3B,KAAK,EAAE;gBACL,CAAC,IAAI,EAAE,IAAI,CAAC;gBACZ,CAAC,IAAI,EAAE,IAAI,CAAC;aACb;YACD,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,gBAAgB;SAC5B;QACD,eAAe,EAAE,uBAAuB;KACzC;IACD,CAAC,uBAAc,CAAC,MAAM,CAAC,EAAE;QACvB,SAAS,EAAE,uBAAc,CAAC,MAAM;QAChC,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE;YACP,KAAK,EAAE,qCAAqC;YAC5C,aAAa,EAAE,iBAAiB;YAChC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrB,QAAQ,EAAE,4BAA4B;YACtC,SAAS,EAAE,iDAAiD;SAC7D;QACD,eAAe,EAAE,uBAAuB;KACzC;IACD,CAAC,uBAAc,CAAC,GAAG,CAAC,EAAE;QACpB,SAAS,EAAE,uBAAc,CAAC,GAAG;QAC7B,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE;YACP,KAAK,EAAE,yBAAyB;YAChC,aAAa,EAAE,cAAc;YAC7B,KAAK,EAAE;gBACL,CAAC,IAAI,EAAE,IAAI,CAAC;gBACZ,CAAC,IAAI,EAAE,IAAI,CAAC;aACb;SACF;QACD,eAAe,EAAE,uBAAuB;KACzC;IACD,CAAC,uBAAc,CAAC,GAAG,CAAC,EAAE;QACpB,SAAS,EAAE,uBAAc,CAAC,GAAG;QAC7B,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE;YACP,KAAK,EAAE,2BAA2B;YAClC,aAAa,EAAE,YAAY;YAC3B,KAAK,EAAE;gBACL,CAAC,IAAI,EAAE,IAAI,CAAC;gBACZ,CAAC,IAAI,EAAE,IAAI,CAAC;aACb;YACD,QAAQ,EAAE,gBAAgB;YAC1B,SAAS,EAAE,gDAAgD;SAC5D;QACD,eAAe,EAAE,uBAAuB;KACzC;IACD,CAAC,uBAAc,CAAC,QAAQ,CAAC,EAAE;QACzB,SAAS,EAAE,uBAAc,CAAC,QAAQ;QAClC,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE;YACP,KAAK,EAAE,8BAA8B;YACrC,aAAa,EAAE,eAAe;YAC9B,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;SACtB;QACD,eAAe,EAAE,gBAAgB;KAClC;CACF,CAAC,CAAC;AAGU,QAAA,gBAAgB,GAA8B,MAAM,CAAC,MAAM,CACtE,MAAM,CAAC,MAAM,CAAC,uBAAc,CAAC,CAC9B,CAAC;AAOW,QAAA,oBAAoB,GAAsB,MAAM,CAAC,MAAM,CAAC;IACnE,6BAA6B;IAC7B,2BAA2B;IAC3B,yBAAyB;IACzB,gBAAgB;IAChB,gBAAgB;IAChB,kCAAkC;CACnC,CAAC,CAAC;AAGU,QAAA,sBAAsB,GAAG,aAAa,CAAC"}
+{"version":3,"file":"infra-catalog.js","sourceRoot":"","sources":["../../../src/runtime/infra/infra-catalog.ts"],"names":[],"mappings":";;;AAAA,6CAAkD;AAmCrC,QAAA,aAAa,GAEtB,MAAM,CAAC,MAAM,CAAC;IAChB,CAAC,uBAAc,CAAC,QAAQ,CAAC,EAAE;QACzB,SAAS,EAAE,uBAAc,CAAC,QAAQ;QAClC,SAAS,EAAE,IAAI;QACf,OAAO,EAAE;YACP,KAAK,EAAE,wBAAwB;YAC/B,aAAa,EAAE,eAAe;YAC9B,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrB,QAAQ,EAAE,0BAA0B;YACpC,SAAS,EAAE,gCAAgC;SAC5C;KACF;IACD,CAAC,uBAAc,CAAC,KAAK,CAAC,EAAE;QACtB,SAAS,EAAE,uBAAc,CAAC,KAAK;QAC/B,SAAS,EAAE,IAAI;QACf,OAAO,EAAE;YACP,KAAK,EAAE,gBAAgB;YACvB,aAAa,EAAE,YAAY;YAC3B,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrB,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,gBAAgB;SAC5B;QACD,eAAe,EAAE,wBAAwB;KAC1C;IACD,CAAC,uBAAc,CAAC,IAAI,CAAC,EAAE;QACrB,SAAS,EAAE,uBAAc,CAAC,IAAI;QAC9B,SAAS,EAAE,IAAI;QACf,OAAO,EAAE;YACP,KAAK,EAAE,4BAA4B;YACnC,aAAa,EAAE,WAAW;YAC1B,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrB,QAAQ,EAAE,YAAY;YACtB,SAAS,EAAE,yBAAyB;SACrC;QACD,eAAe,EAAE,gBAAgB;KAClC;IACD,CAAC,uBAAc,CAAC,QAAQ,CAAC,EAAE;QACzB,SAAS,EAAE,uBAAc,CAAC,QAAQ;QAClC,SAAS,EAAE,IAAI;QACf,OAAO,EAAE;YACP,KAAK,EAAE,gCAAgC;YACvC,aAAa,EAAE,eAAe;YAC9B,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrB,SAAS,EAAE,qBAAqB;SACjC;QACD,eAAe,EAAE,uBAAuB;KACzC;IACD,CAAC,uBAAc,CAAC,WAAW,CAAC,EAAE;QAC5B,SAAS,EAAE,uBAAc,CAAC,WAAW;QACrC,SAAS,EAAE,IAAI;QACf,OAAO,EAAE;YACP,KAAK,EAAE,0CAA0C;YACjD,aAAa,EAAE,YAAY;YAC3B,KAAK,EAAE;gBACL,CAAC,IAAI,EAAE,IAAI,CAAC;gBACZ,CAAC,IAAI,EAAE,IAAI,CAAC;aACb;YACD,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,gBAAgB;YAC3B,OAAO,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,mBAAmB,EAAE,OAAO,CAAC;SAC3D;QACD,eAAe,EAAE,uBAAuB;KACzC;IAMD,CAAC,uBAAc,CAAC,MAAM,CAAC,EAAE;QACvB,SAAS,EAAE,uBAAc,CAAC,MAAM;QAChC,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE;YACP,KAAK,EAAE,qCAAqC;YAC5C,aAAa,EAAE,iBAAiB;YAChC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrB,QAAQ,EAAE,4BAA4B;YACtC,SAAS,EAAE,iDAAiD;SAC7D;QACD,eAAe,EAAE,uBAAuB;KACzC;IACD,CAAC,uBAAc,CAAC,GAAG,CAAC,EAAE;QACpB,SAAS,EAAE,uBAAc,CAAC,GAAG;QAC7B,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE;YACP,KAAK,EAAE,yBAAyB;YAChC,aAAa,EAAE,cAAc;YAC7B,KAAK,EAAE;gBACL,CAAC,IAAI,EAAE,IAAI,CAAC;gBACZ,CAAC,IAAI,EAAE,IAAI,CAAC;aACb;SACF;QACD,eAAe,EAAE,uBAAuB;KACzC;IACD,CAAC,uBAAc,CAAC,GAAG,CAAC,EAAE;QACpB,SAAS,EAAE,uBAAc,CAAC,GAAG;QAC7B,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE;YACP,KAAK,EAAE,2BAA2B;YAClC,aAAa,EAAE,YAAY;YAC3B,KAAK,EAAE;gBACL,CAAC,IAAI,EAAE,IAAI,CAAC;gBACZ,CAAC,IAAI,EAAE,IAAI,CAAC;aACb;YACD,QAAQ,EAAE,gBAAgB;YAC1B,SAAS,EAAE,gDAAgD;SAC5D;QACD,eAAe,EAAE,uBAAuB;KACzC;IACD,CAAC,uBAAc,CAAC,QAAQ,CAAC,EAAE;QACzB,SAAS,EAAE,uBAAc,CAAC,QAAQ;QAClC,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE;YACP,KAAK,EAAE,8BAA8B;YACrC,aAAa,EAAE,eAAe;YAC9B,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;SACtB;QACD,eAAe,EAAE,gBAAgB;KAClC;CACF,CAAC,CAAC;AAGU,QAAA,gBAAgB,GAA8B,MAAM,CAAC,MAAM,CACtE,MAAM,CAAC,MAAM,CAAC,uBAAc,CAAC,CAC9B,CAAC;AAOW,QAAA,oBAAoB,GAAsB,MAAM,CAAC,MAAM,CAAC;IACnE,6BAA6B;IAC7B,2BAA2B;IAC3B,yBAAyB;IACzB,gBAAgB;IAChB,gBAAgB;IAChB,kCAAkC;CACnC,CAAC,CAAC;AAGU,QAAA,sBAAsB,GAAG,aAAa,CAAC"}

package/dist/runtime/infra/infra-runner.d.ts

@@ -1,6 +1,7 @@
 import { InfraComponent } from '../config/schema';
 import type { InfraPlan } from './infra-plan';
 import type { RosterEntry } from '../roster';
+import type { LocalInfrastructureCredentials } from '../secrets/managed-local-store';
 export interface ManagedInfraHandle {
     readonly component: InfraComponent;
     readonly containerName: string;
@@ -10,12 +11,14 @@ export interface InfraRunnerOptions {
     readonly bin?: string;
     readonly volumePrefix?: string;
     readonly healthTimeoutMs?: number;
+    readonly credentials?: LocalInfrastructureCredentials;
 }
 export declare class InfraRunner {
     private readonly opts;
     private readonly docker;
     private readonly volumePrefix;
     constructor(opts: InfraRunnerOptions);
+    assertCredentialStoreCompatible(plan: InfraPlan, hasCredentialStore: boolean): Promise<void>;
     bringUp(plan: InfraPlan): Promise<ManagedInfraHandle[]>;
     waitHealthy(plan: InfraPlan): Promise<void>;
     bootstrap(plan: InfraPlan, roster: readonly RosterEntry[]): Promise<void>;
@@ -23,5 +26,7 @@ export declare class InfraRunner {
     private bootstrapPostgres;
     private bootstrapObjectStore;
     private execOk;
+    private containerEnvironment;
+    private requireCredentials;
 }
 //# sourceMappingURL=infra-runner.d.ts.map

package/dist/runtime/infra/infra-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"infra-runner.d.ts","sourceRoot":"","sources":["../../../src/runtime/infra/infra-runner.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGlD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAgB7C,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAE/B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAKD,qBAAa,WAAW;IAIV,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;gBAET,IAAI,EAAE,kBAAkB;IAK/C,OAAO,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAkCvD,WAAW,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IA2B3C,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,WAAW,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YA0BjE,kBAAkB;YAalB,iBAAiB;YAyBjB,oBAAoB;YAkBpB,MAAM;CAQrB"}
+{"version":3,"file":"infra-runner.d.ts","sourceRoot":"","sources":["../../../src/runtime/infra/infra-runner.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGlD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAEV,8BAA8B,EAC/B,MAAM,gCAAgC,CAAC;AAgBxC,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAE/B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,8BAA8B,CAAC;CACvD;AAKD,qBAAa,WAAW;IAIV,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;gBAET,IAAI,EAAE,kBAAkB;IAS/C,+BAA+B,CACnC,IAAI,EAAE,SAAS,EACf,kBAAkB,EAAE,OAAO,GAC1B,OAAO,CAAC,IAAI,CAAC;IAuCV,OAAO,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IA8CvD,WAAW,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IA2B3C,SAAS,CACb,IAAI,EAAE,SAAS,EACf,MAAM,EAAE,SAAS,WAAW,EAAE,GAC7B,OAAO,CAAC,IAAI,CAAC;YAkCF,kBAAkB;YAalB,iBAAiB;YAmCjB,oBAAoB;YAsBpB,MAAM;IASpB,OAAO,CAAC,oBAAoB;IAoB5B,OAAO,CAAC,kBAAkB;CAW3B"}

package/dist/runtime/infra/infra-runner.js

@@ -15,6 +15,31 @@ class InfraRunner {
         this.docker = new docker_cli_1.DockerCli(opts.bin ?? 'docker');
         this.volumePrefix = opts.volumePrefix ?? 'xema';
     }
+    async assertCredentialStoreCompatible(plan, hasCredentialStore) {
+        if (hasCredentialStore) {
+            return;
+        }
+        const custodiedComponents = [
+            schema_1.InfraComponent.Postgres,
+            schema_1.InfraComponent.ObjectStore,
+        ];
+        if (plan.managed.some((entry) => entry.component === schema_1.InfraComponent.Postgres ||
+            entry.component === schema_1.InfraComponent.ObjectStore) &&
+            !(await this.docker.available())) {
+            throw new Error('The container runtime is not reachable, so managed-local credential compatibility cannot be verified.');
+        }
+        for (const component of custodiedComponents) {
+            if (!plan.managed.some((entry) => entry.component === component)) {
+                continue;
+            }
+            const spec = infra_catalog_1.INFRA_CATALOG[component].managed;
+            if (spec.dataPath !== undefined &&
+                (await this.docker.volumeExists(`${this.volumePrefix}-${component}-data`))) {
+                throw new Error(`Managed ${component} data predates per-installation credential custody. ` +
+                    'Run `xema down --purge` to explicitly remove the legacy local data, then launch again.');
+            }
+        }
+    }
     async bringUp(plan) {
         await this.docker.ensureNetwork(this.opts.network);
         const handles = [];
@@ -39,9 +64,18 @@ class InfraRunner {
             if (spec.dataPath) {
                 args.push('-v', `${this.volumePrefix}-${resolved.component}-data:${spec.dataPath}`);
             }
-            args.push(spec.image);
-            await this.docker.run(args);
-            handles.push({ component: resolved.component, containerName: spec.containerName });
+            const containerEnv = this.containerEnvironment(resolved.component);
+            for (const name of Object.keys(containerEnv)) {
+                args.push('--env', name);
+            }
+            args.push(spec.image, ...(spec.command ?? []));
+            await this.docker.run(args, {
+                env: { ...process.env, ...containerEnv },
+            });
+            handles.push({
+                component: resolved.component,
+                containerName: spec.containerName,
+            });
         }
         return handles;
     }
@@ -93,6 +127,7 @@ class InfraRunner {
     }
     async bootstrapPostgres(roster) {
         const pg = infra_catalog_1.INFRA_CATALOG[schema_1.InfraComponent.Postgres].managed.containerName;
+        const credentials = this.requireCredentials(schema_1.InfraComponent.Postgres);
         const databases = new Set([infra_catalog_1.SHARED_BIOMES_DATABASE]);
         for (const entry of roster) {
             databases.add(`${entry.name.replace(/-/g, '_')}_db`);
@@ -103,14 +138,21 @@ class InfraRunner {
                 pg,
                 'psql',
                 '-U',
-                'postgres',
+                credentials.username,
                 '-tc',
                 `SELECT 1 FROM pg_database WHERE datname='${db}'`,
             ]);
             if (out.trim() === '1') {
                 continue;
             }
-            await this.docker.runQuiet(['exec', pg, 'createdb', '-U', 'postgres', db]);
+            await this.docker.runQuiet([
+                'exec',
+                pg,
+                'createdb',
+                '-U',
+                credentials.username,
+                db,
+            ]);
         }
     }
     async bootstrapObjectStore() {
@@ -118,16 +160,19 @@ class InfraRunner {
         await this.docker.runQuiet([
             'exec',
             minio,
-            'mc',
-            'alias',
-            'set',
-            'local',
-            'http://localhost:9000',
-            'minioadmin',
-            'minioadmin',
+            'sh',
+            '-c',
+            'mc alias set local http://localhost:9000 "$MINIO_ROOT_USER" "$MINIO_ROOT_PASSWORD"',
         ]);
         for (const bucket of infra_catalog_1.OBJECT_STORE_BUCKETS) {
-            await this.docker.runQuiet(['exec', minio, 'mc', 'mb', '-p', `local/${bucket}`]);
+            await this.docker.runQuiet([
+                'exec',
+                minio,
+                'mc',
+                'mb',
+                '-p',
+                `local/${bucket}`,
+            ]);
         }
     }
     async execOk(container, cmd) {
@@ -139,6 +184,30 @@ class InfraRunner {
             return false;
         }
     }
+    containerEnvironment(component) {
+        if (component === schema_1.InfraComponent.Postgres) {
+            const credentials = this.requireCredentials(schema_1.InfraComponent.Postgres);
+            return {
+                POSTGRES_USER: credentials.username,
+                POSTGRES_PASSWORD: credentials.password,
+            };
+        }
+        if (component === schema_1.InfraComponent.ObjectStore) {
+            const credentials = this.requireCredentials(schema_1.InfraComponent.ObjectStore);
+            return {
+                MINIO_ROOT_USER: credentials.username,
+                MINIO_ROOT_PASSWORD: credentials.password,
+            };
+        }
+        return {};
+    }
+    requireCredentials(component) {
+        const credentials = this.opts.credentials?.[component];
+        if (credentials === undefined) {
+            throw new Error(`Managed-local ${component} credentials were not resolved before launch.`);
+        }
+        return credentials;
+    }
 }
 exports.InfraRunner = InfraRunner;
 function delay(ms) {

package/dist/runtime/infra/infra-runner.js.map

@@ -1 +1 @@
-{"version":3,"file":"infra-runner.js","sourceRoot":"","sources":["../../../src/runtime/infra/infra-runner.ts"],"names":[],"mappings":";;;AAAA,mDAIyB;AACzB,6CAAkD;AAClD,qDAAiE;AAgCjE,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC,MAAa,WAAW;IAIO;IAHZ,MAAM,CAAY;IAClB,YAAY,CAAS;IAEtC,YAA6B,IAAwB;QAAxB,SAAI,GAAJ,IAAI,CAAoB;QACnD,IAAI,CAAC,MAAM,GAAG,IAAI,sBAAS,CAAC,IAAI,CAAC,GAAG,IAAI,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAe;QAC3B,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,OAAO,GAAyB,EAAE,CAAC;QACzC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,6BAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YACvD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;YAE7D,MAAM,IAAI,GAAG;gBACX,KAAK;gBACL,IAAI;gBACJ,QAAQ;gBACR,IAAI,CAAC,aAAa;gBAClB,SAAS;gBACT,GAAG,2BAAc,QAAQ;gBACzB,WAAW;gBACX,IAAI,CAAC,IAAI,CAAC,OAAO;gBACjB,WAAW;gBACX,gBAAgB;aACjB,CAAC;YACF,KAAK,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACnD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,YAAY,IAAI,QAAQ,CAAC,SAAS,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAEtB,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAGD,KAAK,CAAC,WAAW,CAAC,IAAe;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,yBAAyB,CAAC;QACvE,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,6BAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YACtC,SAAS,CAAC;gBACR,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC1D,MAAM;gBACR,CAAC;gBACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;oBAC3B,MAAM,IAAI,KAAK,CACb,mBAAmB,QAAQ,CAAC,SAAS,kCAAkC,MAAM,CAAC,OAAO,CAAC,IAAI,CAC3F,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAOD,KAAK,CAAC,SAAS,CAAC,IAAe,EAAE,MAA8B;QAC7D,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,QAAQ,CAAC,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YACtE,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,uBAAc,CAAC,QAAQ,CAAC,CAAC;QACpF,IACE,SAAS;YACT,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,6BAAa,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,EAC7F,CAAC;YACD,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,uBAAc,CAAC,WAAW,CAAC,CAAC;QAC1F,IACE,YAAY;YACZ,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,6BAAa,CAAC,uBAAc,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,EAChG,CAAC;YACD,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACpC,CAAC;IACH,CAAC;IAQO,KAAK,CAAC,kBAAkB,CAAC,IAAY;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YACrC,IAAI;YACJ,UAAU;YACV,SAAS,IAAI,GAAG;YAChB,UAAU;YACV,gBAAgB;YAChB,UAAU;YACV,YAAY;SACb,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,MAA8B;QAC5D,MAAM,EAAE,GAAG,6BAAa,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QACxE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,CAAC,sCAAsB,CAAC,CAAC,CAAC;QAC5D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAG3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACrC,MAAM;gBACN,EAAE;gBACF,MAAM;gBACN,IAAI;gBACJ,UAAU;gBACV,KAAK;gBACL,4CAA4C,EAAE,GAAG;aAClD,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACvB,SAAS;YACX,CAAC;YACD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,oBAAoB;QAChC,MAAM,KAAK,GAAG,6BAAa,CAAC,uBAAc,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QAC9E,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YACzB,MAAM;YACN,KAAK;YACL,IAAI;YACJ,OAAO;YACP,KAAK;YACL,OAAO;YACP,uBAAuB;YACvB,YAAY;YACZ,YAAY;SACb,CAAC,CAAC;QACH,KAAK,MAAM,MAAM,IAAI,oCAAoB,EAAE,CAAC;YAC1C,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,GAAW;QACjD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAhKD,kCAgKC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"infra-runner.js","sourceRoot":"","sources":["../../../src/runtime/infra/infra-runner.ts"],"names":[],"mappings":";;;AAAA,mDAIyB;AACzB,6CAAkD;AAClD,qDAAiE;AAqCjE,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC,MAAa,WAAW;IAIO;IAHZ,MAAM,CAAY;IAClB,YAAY,CAAS;IAEtC,YAA6B,IAAwB;QAAxB,SAAI,GAAJ,IAAI,CAAoB;QACnD,IAAI,CAAC,MAAM,GAAG,IAAI,sBAAS,CAAC,IAAI,CAAC,GAAG,IAAI,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC;IAClD,CAAC;IAMD,KAAK,CAAC,+BAA+B,CACnC,IAAe,EACf,kBAA2B;QAE3B,IAAI,kBAAkB,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QACD,MAAM,mBAAmB,GAAG;YAC1B,uBAAc,CAAC,QAAQ;YACvB,uBAAc,CAAC,WAAW;SAClB,CAAC;QACX,IACE,IAAI,CAAC,OAAO,CAAC,IAAI,CACf,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,SAAS,KAAK,uBAAc,CAAC,QAAQ;YAC3C,KAAK,CAAC,SAAS,KAAK,uBAAc,CAAC,WAAW,CACjD;YACD,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,EAChC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,uGAAuG,CACxG,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,mBAAmB,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,CAAC;gBACjE,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,6BAAa,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YAC9C,IACE,IAAI,CAAC,QAAQ,KAAK,SAAS;gBAC3B,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAC7B,GAAG,IAAI,CAAC,YAAY,IAAI,SAAS,OAAO,CACzC,CAAC,EACF,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,WAAW,SAAS,sDAAsD;oBACxE,wFAAwF,CAC3F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAe;QAC3B,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,OAAO,GAAyB,EAAE,CAAC;QACzC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,6BAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YACvD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;YAE7D,MAAM,IAAI,GAAG;gBACX,KAAK;gBACL,IAAI;gBACJ,QAAQ;gBACR,IAAI,CAAC,aAAa;gBAClB,SAAS;gBACT,GAAG,2BAAc,QAAQ;gBACzB,WAAW;gBACX,IAAI,CAAC,IAAI,CAAC,OAAO;gBACjB,WAAW;gBACX,gBAAgB;aACjB,CAAC;YACF,KAAK,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACnD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,IAAI,CAAC,IAAI,CACP,IAAI,EACJ,GAAG,IAAI,CAAC,YAAY,IAAI,QAAQ,CAAC,SAAS,SAAS,IAAI,CAAC,QAAQ,EAAE,CACnE,CAAC;YACJ,CAAC;YACD,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YACnE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC7C,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC3B,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;YAE/C,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE;gBAC1B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,YAAY,EAAE;aACzC,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,aAAa,EAAE,IAAI,CAAC,aAAa;aAClC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAGD,KAAK,CAAC,WAAW,CAAC,IAAe;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,yBAAyB,CAAC;QACvE,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,6BAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YACtC,SAAS,CAAC;gBACR,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC1D,MAAM;gBACR,CAAC;gBACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;oBAC3B,MAAM,IAAI,KAAK,CACb,mBAAmB,QAAQ,CAAC,SAAS,kCAAkC,MAAM,CAAC,OAAO,CAAC,IAAI,CAC3F,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAOD,KAAK,CAAC,SAAS,CACb,IAAe,EACf,MAA8B;QAE9B,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,QAAQ,CAAC,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YACtE,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CACjC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,uBAAc,CAAC,QAAQ,CAC/C,CAAC;QACF,IACE,SAAS;YACT,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAC5B,6BAAa,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,aAAa,CAC7D,CAAC,EACF,CAAC;YACD,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CACpC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,uBAAc,CAAC,WAAW,CAClD,CAAC;QACF,IACE,YAAY;YACZ,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAC5B,6BAAa,CAAC,uBAAc,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,aAAa,CAChE,CAAC,EACF,CAAC;YACD,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACpC,CAAC;IACH,CAAC;IAQO,KAAK,CAAC,kBAAkB,CAAC,IAAY;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YACrC,IAAI;YACJ,UAAU;YACV,SAAS,IAAI,GAAG;YAChB,UAAU;YACV,gBAAgB;YAChB,UAAU;YACV,YAAY;SACb,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,MAA8B;QAE9B,MAAM,EAAE,GAAG,6BAAa,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QACxE,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,CAAC,sCAAsB,CAAC,CAAC,CAAC;QAC5D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAG3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACrC,MAAM;gBACN,EAAE;gBACF,MAAM;gBACN,IAAI;gBACJ,WAAW,CAAC,QAAQ;gBACpB,KAAK;gBACL,4CAA4C,EAAE,GAAG;aAClD,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACvB,SAAS;YACX,CAAC;YACD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACzB,MAAM;gBACN,EAAE;gBACF,UAAU;gBACV,IAAI;gBACJ,WAAW,CAAC,QAAQ;gBACpB,EAAE;aACH,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,oBAAoB;QAChC,MAAM,KAAK,GACT,6BAAa,CAAC,uBAAc,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QAClE,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YACzB,MAAM;YACN,KAAK;YACL,IAAI;YACJ,IAAI;YACJ,oFAAoF;SACrF,CAAC,CAAC;QACH,KAAK,MAAM,MAAM,IAAI,oCAAoB,EAAE,CAAC;YAC1C,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACzB,MAAM;gBACN,KAAK;gBACL,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,SAAS,MAAM,EAAE;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,GAAW;QACjD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,oBAAoB,CAC1B,SAAyB;QAEzB,IAAI,SAAS,KAAK,uBAAc,CAAC,QAAQ,EAAE,CAAC;YAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC;YACrE,OAAO;gBACL,aAAa,EAAE,WAAW,CAAC,QAAQ;gBACnC,iBAAiB,EAAE,WAAW,CAAC,QAAQ;aACxC,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,KAAK,uBAAc,CAAC,WAAW,EAAE,CAAC;YAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,uBAAc,CAAC,WAAW,CAAC,CAAC;YACxE,OAAO;gBACL,eAAe,EAAE,WAAW,CAAC,QAAQ;gBACrC,mBAAmB,EAAE,WAAW,CAAC,QAAQ;aAC1C,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,kBAAkB,CACxB,SAA+D;QAE/D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,iBAAiB,SAAS,+CAA+C,CAC1E,CAAC;QACJ,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;CACF;AAnRD,kCAmRC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/installation/compiler.d.ts

@@ -0,0 +1,37 @@
+import { BackupMode, InstallationDeploymentProfile, InstallationSubstrate, StorageClass, TenantIsolation, TenancyMode, UpgradeChannel, type ParsedXemaInstallation, type XemaInstallation } from './contract';
+import { WorkspaceDriver } from '../config/schema';
+export interface CompiledXemaInstallation extends Omit<ParsedXemaInstallation, 'deployment' | 'tenancy' | 'storage' | 'capacity' | 'upgrade'> {
+    readonly deployment: {
+        readonly profile: InstallationDeploymentProfile;
+        readonly substrate: InstallationSubstrate;
+        readonly regions: readonly string[];
+    };
+    readonly tenancy: {
+        readonly mode: TenancyMode;
+        readonly isolation: TenantIsolation;
+    };
+    readonly storage: {
+        readonly class: StorageClass;
+        readonly workspaceDriver: WorkspaceDriver;
+        readonly externalBinding?: string;
+        readonly backup: {
+            readonly mode: BackupMode;
+            readonly retentionDays: number;
+            readonly destinationSecretRef?: string;
+        };
+    };
+    readonly capacity: {
+        readonly minReplicas: number;
+        readonly maxReplicas: number;
+        readonly maxOrganizations: number;
+        readonly maxConcurrentSessions: number;
+    };
+    readonly upgrade: {
+        readonly channel: UpgradeChannel;
+        readonly releaseRef?: string;
+    };
+    readonly planHash: string;
+}
+export declare function compileXemaInstallation(raw: XemaInstallation | unknown): CompiledXemaInstallation;
+export declare function isManagedInfrastructure(plan: CompiledXemaInstallation): boolean;
+//# sourceMappingURL=compiler.d.ts.map

package/dist/runtime/installation/compiler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compiler.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/compiler.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,6BAA6B,EAC7B,qBAAqB,EACrB,YAAY,EACZ,eAAe,EACf,WAAW,EACX,cAAc,EACd,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,EACtB,MAAM,YAAY,CAAC;AAOpB,OAAO,EAAa,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAG9D,MAAM,WAAW,wBACf,SAAQ,IAAI,CACV,sBAAsB,EACtB,YAAY,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAC9D;IACD,QAAQ,CAAC,UAAU,EAAE;QACnB,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC;QAChD,QAAQ,CAAC,SAAS,EAAE,qBAAqB,CAAC;QAC1C,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;KACrC,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QAC3B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;KACrC,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;QAC7B,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;QAC1C,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,MAAM,EAAE;YACf,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;YAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;YAC/B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;SACxC,CAAC;KACH,CAAC;IACF,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;KACxC,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;QACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC;IACF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AA4FD,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,gBAAgB,GAAG,OAAO,GAC9B,wBAAwB,CAwB1B;AAiGD,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAIT"}