@xemahq/xema 0.13.0 → 0.14.0

package/dist/runtime/installation/compiler.js

@@ -0,0 +1,190 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.compileXemaInstallation = compileXemaInstallation;
+exports.isManagedInfrastructure = isManagedInfrastructure;
+const contract_1 = require("./contract");
+const diagnostics_1 = require("./diagnostics");
+const serialization_1 = require("./serialization");
+const validation_1 = require("./validation");
+const schema_1 = require("../config/schema");
+const infra_catalog_1 = require("../infra/infra-catalog");
+const PROFILE_DEFAULTS = {
+    [contract_1.InstallationDeploymentProfile.Developer]: {
+        substrate: contract_1.InstallationSubstrate.Local,
+        regions: ['local'],
+        tenancyMode: contract_1.TenancyMode.SingleOrganization,
+        isolation: contract_1.TenantIsolation.Shared,
+        storageClass: contract_1.StorageClass.Ephemeral,
+        workspaceDriver: schema_1.WorkspaceDriver.HostPath,
+        backupMode: contract_1.BackupMode.Disabled,
+        backupRetentionDays: 1,
+        minReplicas: 1,
+        maxReplicas: 1,
+        maxOrganizations: 1,
+        maxConcurrentSessions: 10,
+    },
+    [contract_1.InstallationDeploymentProfile.StarterPme]: {
+        substrate: contract_1.InstallationSubstrate.SingleNode,
+        regions: ['local'],
+        tenancyMode: contract_1.TenancyMode.MultiOrganization,
+        isolation: contract_1.TenantIsolation.Shared,
+        storageClass: contract_1.StorageClass.Persistent,
+        workspaceDriver: schema_1.WorkspaceDriver.DockerLocal,
+        backupMode: contract_1.BackupMode.Snapshots,
+        backupRetentionDays: 14,
+        minReplicas: 1,
+        maxReplicas: 1,
+        maxOrganizations: 100,
+        maxConcurrentSessions: 100,
+    },
+    [contract_1.InstallationDeploymentProfile.HighAvailability]: {
+        substrate: contract_1.InstallationSubstrate.Cluster,
+        regions: ['primary'],
+        tenancyMode: contract_1.TenancyMode.MultiOrganization,
+        isolation: contract_1.TenantIsolation.Namespace,
+        storageClass: contract_1.StorageClass.Persistent,
+        workspaceDriver: schema_1.WorkspaceDriver.DockerLocal,
+        backupMode: contract_1.BackupMode.Snapshots,
+        backupRetentionDays: 30,
+        minReplicas: 3,
+        maxReplicas: 12,
+        maxOrganizations: 10_000,
+        maxConcurrentSessions: 10_000,
+    },
+    [contract_1.InstallationDeploymentProfile.Regulated]: {
+        substrate: contract_1.InstallationSubstrate.Cluster,
+        regions: ['primary'],
+        tenancyMode: contract_1.TenancyMode.MultiOrganization,
+        isolation: contract_1.TenantIsolation.DedicatedCell,
+        storageClass: contract_1.StorageClass.Persistent,
+        workspaceDriver: schema_1.WorkspaceDriver.DockerLocal,
+        backupMode: contract_1.BackupMode.Continuous,
+        backupRetentionDays: 90,
+        minReplicas: 3,
+        maxReplicas: 24,
+        maxOrganizations: 10_000,
+        maxConcurrentSessions: 10_000,
+    },
+    [contract_1.InstallationDeploymentProfile.MultiRegion]: {
+        substrate: contract_1.InstallationSubstrate.Cluster,
+        regions: [],
+        tenancyMode: contract_1.TenancyMode.MultiOrganization,
+        isolation: contract_1.TenantIsolation.Namespace,
+        storageClass: contract_1.StorageClass.Persistent,
+        workspaceDriver: schema_1.WorkspaceDriver.DockerLocal,
+        backupMode: contract_1.BackupMode.Continuous,
+        backupRetentionDays: 30,
+        minReplicas: 3,
+        maxReplicas: 24,
+        maxOrganizations: 100_000,
+        maxConcurrentSessions: 100_000,
+    },
+};
+function compileXemaInstallation(raw) {
+    const validation = (0, validation_1.validateXemaInstallation)(raw);
+    if (validation.installation === undefined || validation.issues.length > 0) {
+        throw new diagnostics_1.InstallationCompilationError(validation.issues);
+    }
+    const installation = validation.installation;
+    const defaults = PROFILE_DEFAULTS[installation.deployment.profile];
+    const payload = normalizedPayload(installation, defaults);
+    if (payload.capacity.minReplicas > payload.capacity.maxReplicas) {
+        throw new diagnostics_1.InstallationCompilationError([
+            {
+                kind: diagnostics_1.InstallationIssueKind.Invalid,
+                code: 'CAPACITY_RANGE_INVALID',
+                path: 'capacity',
+                message: 'minReplicas cannot exceed maxReplicas',
+            },
+        ]);
+    }
+    const plan = {
+        ...payload,
+        planHash: (0, serialization_1.hashInstallation)(payload),
+    };
+    return deepFreeze(plan);
+}
+function normalizedPayload(installation, defaults) {
+    const declaredInfrastructure = new Map(installation.infrastructure.map((binding) => [binding.component, binding]));
+    const storage = {
+        class: installation.storage.class ?? defaults.storageClass,
+        workspaceDriver: installation.storage.workspaceDriver ?? defaults.workspaceDriver,
+        ...(installation.storage.externalBinding === undefined
+            ? {}
+            : { externalBinding: installation.storage.externalBinding }),
+        backup: {
+            mode: installation.storage.backup.mode ?? defaults.backupMode,
+            retentionDays: installation.storage.backup.retentionDays ??
+                defaults.backupRetentionDays,
+            ...(installation.storage.backup.destinationSecretRef === undefined
+                ? {}
+                : {
+                    destinationSecretRef: installation.storage.backup.destinationSecretRef,
+                }),
+        },
+    };
+    return {
+        schemaVersion: 1,
+        installationId: installation.installationId,
+        ...(installation.sourceConfigHash === undefined
+            ? {}
+            : { sourceConfigHash: installation.sourceConfigHash }),
+        distribution: installation.distribution,
+        deployment: {
+            profile: installation.deployment.profile,
+            substrate: installation.deployment.substrate ?? defaults.substrate,
+            regions: [
+                ...(installation.deployment.regions ?? defaults.regions),
+            ].sort(),
+        },
+        infrastructure: infra_catalog_1.INFRA_COMPONENTS.map((component) => {
+            const binding = declaredInfrastructure.get(component) ?? {
+                component,
+                ownership: schema_1.InfraMode.Managed,
+                secretRefs: [],
+            };
+            return {
+                ...binding,
+                secretRefs: [...binding.secretRefs].sort(),
+            };
+        }).sort((left, right) => left.component.localeCompare(right.component)),
+        secrets: [...installation.secrets].sort((left, right) => left.name.localeCompare(right.name)),
+        tenancy: {
+            mode: installation.tenancy.mode ?? defaults.tenancyMode,
+            isolation: installation.tenancy.isolation ?? defaults.isolation,
+        },
+        domains: [...installation.domains].sort((left, right) => {
+            const purpose = left.purpose.localeCompare(right.purpose);
+            return purpose === 0
+                ? left.hostname.localeCompare(right.hostname)
+                : purpose;
+        }),
+        storage,
+        capacity: {
+            minReplicas: installation.capacity.minReplicas ?? defaults.minReplicas,
+            maxReplicas: installation.capacity.maxReplicas ?? defaults.maxReplicas,
+            maxOrganizations: installation.capacity.maxOrganizations ?? defaults.maxOrganizations,
+            maxConcurrentSessions: installation.capacity.maxConcurrentSessions ??
+                defaults.maxConcurrentSessions,
+        },
+        upgrade: {
+            channel: installation.upgrade.channel ?? contract_1.UpgradeChannel.Stable,
+            ...(installation.upgrade.releaseRef === undefined
+                ? {}
+                : { releaseRef: installation.upgrade.releaseRef }),
+        },
+    };
+}
+function deepFreeze(value) {
+    if (value !== null && typeof value === 'object' && !Object.isFrozen(value)) {
+        for (const child of Object.values(value)) {
+            deepFreeze(child);
+        }
+        Object.freeze(value);
+    }
+    return value;
+}
+function isManagedInfrastructure(plan) {
+    return plan.infrastructure.some((binding) => binding.ownership === schema_1.InfraMode.Managed);
+}
+//# sourceMappingURL=compiler.js.map

package/dist/runtime/installation/compiler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compiler.js","sourceRoot":"","sources":["../../../src/runtime/installation/compiler.ts"],"names":[],"mappings":";;AAmJA,0DA0BC;AAiGD,0DAMC;AApRD,yCAUoB;AACpB,+CAGuB;AACvB,mDAAmD;AACnD,6CAAwD;AACxD,6CAA8D;AAC9D,0DAA0D;AAsD1D,MAAM,gBAAgB,GAElB;IACF,CAAC,wCAA6B,CAAC,SAAS,CAAC,EAAE;QACzC,SAAS,EAAE,gCAAqB,CAAC,KAAK;QACtC,OAAO,EAAE,CAAC,OAAO,CAAC;QAClB,WAAW,EAAE,sBAAW,CAAC,kBAAkB;QAC3C,SAAS,EAAE,0BAAe,CAAC,MAAM;QACjC,YAAY,EAAE,uBAAY,CAAC,SAAS;QACpC,eAAe,EAAE,wBAAe,CAAC,QAAQ;QACzC,UAAU,EAAE,qBAAU,CAAC,QAAQ;QAC/B,mBAAmB,EAAE,CAAC;QACtB,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,CAAC;QACd,gBAAgB,EAAE,CAAC;QACnB,qBAAqB,EAAE,EAAE;KAC1B;IACD,CAAC,wCAA6B,CAAC,UAAU,CAAC,EAAE;QAC1C,SAAS,EAAE,gCAAqB,CAAC,UAAU;QAC3C,OAAO,EAAE,CAAC,OAAO,CAAC;QAClB,WAAW,EAAE,sBAAW,CAAC,iBAAiB;QAC1C,SAAS,EAAE,0BAAe,CAAC,MAAM;QACjC,YAAY,EAAE,uBAAY,CAAC,UAAU;QACrC,eAAe,EAAE,wBAAe,CAAC,WAAW;QAC5C,UAAU,EAAE,qBAAU,CAAC,SAAS;QAChC,mBAAmB,EAAE,EAAE;QACvB,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,CAAC;QACd,gBAAgB,EAAE,GAAG;QACrB,qBAAqB,EAAE,GAAG;KAC3B;IACD,CAAC,wCAA6B,CAAC,gBAAgB,CAAC,EAAE;QAChD,SAAS,EAAE,gCAAqB,CAAC,OAAO;QACxC,OAAO,EAAE,CAAC,SAAS,CAAC;QACpB,WAAW,EAAE,sBAAW,CAAC,iBAAiB;QAC1C,SAAS,EAAE,0BAAe,CAAC,SAAS;QACpC,YAAY,EAAE,uBAAY,CAAC,UAAU;QACrC,eAAe,EAAE,wBAAe,CAAC,WAAW;QAC5C,UAAU,EAAE,qBAAU,CAAC,SAAS;QAChC,mBAAmB,EAAE,EAAE;QACvB,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,EAAE;QACf,gBAAgB,EAAE,MAAM;QACxB,qBAAqB,EAAE,MAAM;KAC9B;IACD,CAAC,wCAA6B,CAAC,SAAS,CAAC,EAAE;QACzC,SAAS,EAAE,gCAAqB,CAAC,OAAO;QACxC,OAAO,EAAE,CAAC,SAAS,CAAC;QACpB,WAAW,EAAE,sBAAW,CAAC,iBAAiB;QAC1C,SAAS,EAAE,0BAAe,CAAC,aAAa;QACxC,YAAY,EAAE,uBAAY,CAAC,UAAU;QACrC,eAAe,EAAE,wBAAe,CAAC,WAAW;QAC5C,UAAU,EAAE,qBAAU,CAAC,UAAU;QACjC,mBAAmB,EAAE,EAAE;QACvB,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,EAAE;QACf,gBAAgB,EAAE,MAAM;QACxB,qBAAqB,EAAE,MAAM;KAC9B;IACD,CAAC,wCAA6B,CAAC,WAAW,CAAC,EAAE;QAC3C,SAAS,EAAE,gCAAqB,CAAC,OAAO;QACxC,OAAO,EAAE,EAAE;QACX,WAAW,EAAE,sBAAW,CAAC,iBAAiB;QAC1C,SAAS,EAAE,0BAAe,CAAC,SAAS;QACpC,YAAY,EAAE,uBAAY,CAAC,UAAU;QACrC,eAAe,EAAE,wBAAe,CAAC,WAAW;QAC5C,UAAU,EAAE,qBAAU,CAAC,UAAU;QACjC,mBAAmB,EAAE,EAAE;QACvB,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,EAAE;QACf,gBAAgB,EAAE,OAAO;QACzB,qBAAqB,EAAE,OAAO;KAC/B;CACF,CAAC;AAEF,SAAgB,uBAAuB,CACrC,GAA+B;IAE/B,MAAM,UAAU,GAAG,IAAA,qCAAwB,EAAC,GAAG,CAAC,CAAC;IACjD,IAAI,UAAU,CAAC,YAAY,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,0CAA4B,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;IAC7C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,iBAAiB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC1D,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAChE,MAAM,IAAI,0CAA4B,CAAC;YACrC;gBACE,IAAI,EAAE,mCAAqB,CAAC,OAAO;gBACnC,IAAI,EAAE,wBAAwB;gBAC9B,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,uCAAuC;aACjD;SACF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG;QACX,GAAG,OAAO;QACV,QAAQ,EAAE,IAAA,gCAAgB,EAAC,OAAO,CAAC;KACpC,CAAC;IACF,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,iBAAiB,CACxB,YAAoC,EACpC,QAAyB;IAEzB,MAAM,sBAAsB,GAAG,IAAI,GAAG,CACpC,YAAY,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAC3E,CAAC;IACF,MAAM,OAAO,GAAG;QACd,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC,YAAY;QAC1D,eAAe,EACb,YAAY,CAAC,OAAO,CAAC,eAAe,IAAI,QAAQ,CAAC,eAAe;QAClE,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS;YACpD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,eAAe,EAAE,YAAY,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;QAC9D,MAAM,EAAE;YACN,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,QAAQ,CAAC,UAAU;YAC7D,aAAa,EACX,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa;gBACzC,QAAQ,CAAC,mBAAmB;YAC9B,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,KAAK,SAAS;gBAChE,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE,oBAAoB,EAClB,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB;iBACnD,CAAC;SACP;KACF,CAAC;IAEF,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,cAAc,EAAE,YAAY,CAAC,cAAc;QAC3C,GAAG,CAAC,YAAY,CAAC,gBAAgB,KAAK,SAAS;YAC7C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,YAAY,CAAC,gBAAgB,EAAE,CAAC;QACxD,YAAY,EAAE,YAAY,CAAC,YAAY;QACvC,UAAU,EAAE;YACV,OAAO,EAAE,YAAY,CAAC,UAAU,CAAC,OAAO;YACxC,SAAS,EAAE,YAAY,CAAC,UAAU,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS;YAClE,OAAO,EAAE;gBACP,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC;aACzD,CAAC,IAAI,EAAE;SACT;QACD,cAAc,EAAE,gCAAgB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;YACjD,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI;gBACvD,SAAS;gBACT,SAAS,EAAE,kBAAS,CAAC,OAAO;gBAC5B,UAAU,EAAE,EAAE;aACf,CAAC;YACF,OAAO;gBACL,GAAG,OAAO;gBACV,UAAU,EAAE,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE;aAC3C,CAAC;QACJ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvE,OAAO,EAAE,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACtD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CACpC;QACD,OAAO,EAAE;YACP,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC,WAAW;YACvD,SAAS,EAAE,YAAY,CAAC,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS;SAChE;QACD,OAAO,EAAE,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YACtD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1D,OAAO,OAAO,KAAK,CAAC;gBAClB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC7C,CAAC,CAAC,OAAO,CAAC;QACd,CAAC,CAAC;QACF,OAAO;QACP,QAAQ,EAAE;YACR,WAAW,EAAE,YAAY,CAAC,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW;YACtE,WAAW,EAAE,YAAY,CAAC,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW;YACtE,gBAAgB,EACd,YAAY,CAAC,QAAQ,CAAC,gBAAgB,IAAI,QAAQ,CAAC,gBAAgB;YACrE,qBAAqB,EACnB,YAAY,CAAC,QAAQ,CAAC,qBAAqB;gBAC3C,QAAQ,CAAC,qBAAqB;SACjC;QACD,OAAO,EAAE;YACP,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,OAAO,IAAI,yBAAc,CAAC,MAAM;YAC9D,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS;gBAC/C,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;SACrD;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3E,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,uBAAuB,CACrC,IAA8B;IAE9B,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAC7B,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,kBAAS,CAAC,OAAO,CACrD,CAAC;AACJ,CAAC"}

package/dist/runtime/installation/contract.d.ts

@@ -0,0 +1,125 @@
+import { z } from 'zod';
+import { InfraComponent, InfraMode, SecretSource, WorkspaceDriver } from '../config/schema';
+export declare enum InstallationDeploymentProfile {
+    Developer = "developer",
+    StarterPme = "starter-pme",
+    HighAvailability = "high-availability",
+    Regulated = "regulated",
+    MultiRegion = "multi-region"
+}
+export declare enum InstallationSubstrate {
+    Local = "local",
+    SingleNode = "single-node",
+    Cluster = "cluster"
+}
+export declare enum DistributionReferenceKind {
+    Edition = "edition",
+    Lock = "lock"
+}
+export declare enum SecretReferenceProvider {
+    Environment = "environment",
+    File = "file",
+    Prompt = "prompt",
+    ManagedLocal = "managed-local",
+    Kubernetes = "kubernetes",
+    ExternalVault = "external-vault"
+}
+export declare enum TenancyMode {
+    SingleOrganization = "single-organization",
+    MultiOrganization = "multi-organization"
+}
+export declare enum TenantIsolation {
+    Shared = "shared",
+    Namespace = "namespace",
+    DedicatedCell = "dedicated-cell"
+}
+export declare enum DomainPurpose {
+    Api = "api",
+    Web = "web",
+    Identity = "identity"
+}
+export declare enum TlsMode {
+    Disabled = "disabled",
+    Managed = "managed",
+    External = "external"
+}
+export declare enum StorageClass {
+    Ephemeral = "ephemeral",
+    Persistent = "persistent",
+    External = "external"
+}
+export declare enum BackupMode {
+    Disabled = "disabled",
+    Snapshots = "snapshots",
+    Continuous = "continuous"
+}
+export declare enum UpgradeChannel {
+    Stable = "stable",
+    Preview = "preview",
+    Pinned = "pinned"
+}
+export declare const XemaInstallationSchema: z.ZodObject<{
+    schemaVersion: z.ZodDefault<z.ZodLiteral<1>>;
+    installationId: z.ZodString;
+    sourceConfigHash: z.ZodOptional<z.ZodString>;
+    distribution: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<DistributionReferenceKind.Edition>;
+        edition: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<DistributionReferenceKind.Lock>;
+        ref: z.ZodString;
+        digest: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>], "kind">;
+    deployment: z.ZodObject<{
+        profile: z.ZodEnum<typeof InstallationDeploymentProfile>;
+        substrate: z.ZodOptional<z.ZodEnum<typeof InstallationSubstrate>>;
+        regions: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>;
+    infrastructure: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        component: z.ZodEnum<typeof InfraComponent>;
+        ownership: z.ZodEnum<typeof InfraMode>;
+        endpoint: z.ZodOptional<z.ZodString>;
+        secretRefs: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>>;
+    secrets: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        provider: z.ZodEnum<typeof SecretReferenceProvider>;
+        locator: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>>;
+    tenancy: z.ZodDefault<z.ZodObject<{
+        mode: z.ZodOptional<z.ZodEnum<typeof TenancyMode>>;
+        isolation: z.ZodOptional<z.ZodEnum<typeof TenantIsolation>>;
+    }, z.core.$strict>>;
+    domains: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        hostname: z.ZodString;
+        purpose: z.ZodEnum<typeof DomainPurpose>;
+        tls: z.ZodObject<{
+            mode: z.ZodEnum<typeof TlsMode>;
+            secretRef: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+    }, z.core.$strict>>>;
+    storage: z.ZodDefault<z.ZodObject<{
+        class: z.ZodOptional<z.ZodEnum<typeof StorageClass>>;
+        workspaceDriver: z.ZodOptional<z.ZodEnum<typeof WorkspaceDriver>>;
+        externalBinding: z.ZodOptional<z.ZodString>;
+        backup: z.ZodDefault<z.ZodObject<{
+            mode: z.ZodOptional<z.ZodEnum<typeof BackupMode>>;
+            retentionDays: z.ZodOptional<z.ZodNumber>;
+            destinationSecretRef: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    capacity: z.ZodDefault<z.ZodObject<{
+        minReplicas: z.ZodOptional<z.ZodNumber>;
+        maxReplicas: z.ZodOptional<z.ZodNumber>;
+        maxOrganizations: z.ZodOptional<z.ZodNumber>;
+        maxConcurrentSessions: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+    upgrade: z.ZodDefault<z.ZodObject<{
+        channel: z.ZodOptional<z.ZodEnum<typeof UpgradeChannel>>;
+        releaseRef: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type XemaInstallation = z.input<typeof XemaInstallationSchema>;
+export type ParsedXemaInstallation = z.output<typeof XemaInstallationSchema>;
+export declare const CURRENT_SECRET_SOURCE_PROVIDER: Readonly<Record<SecretSource, SecretReferenceProvider>>;
+//# sourceMappingURL=contract.d.ts.map

package/dist/runtime/installation/contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,cAAc,EACd,SAAS,EACT,YAAY,EACZ,eAAe,EAChB,MAAM,kBAAkB,CAAC;AAS1B,oBAAY,6BAA6B;IACvC,SAAS,cAAc;IACvB,UAAU,gBAAgB;IAC1B,gBAAgB,sBAAsB;IACtC,SAAS,cAAc;IACvB,WAAW,iBAAiB;CAC7B;AAED,oBAAY,qBAAqB;IAC/B,KAAK,UAAU;IACf,UAAU,gBAAgB;IAC1B,OAAO,YAAY;CACpB;AAED,oBAAY,yBAAyB;IACnC,OAAO,YAAY;IACnB,IAAI,SAAS;CACd;AAED,oBAAY,uBAAuB;IACjC,WAAW,gBAAgB;IAC3B,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,YAAY,kBAAkB;IAC9B,UAAU,eAAe;IACzB,aAAa,mBAAmB;CACjC;AAED,oBAAY,WAAW;IACrB,kBAAkB,wBAAwB;IAC1C,iBAAiB,uBAAuB;CACzC;AAED,oBAAY,eAAe;IACzB,MAAM,WAAW;IACjB,SAAS,cAAc;IACvB,aAAa,mBAAmB;CACjC;AAED,oBAAY,aAAa;IACvB,GAAG,QAAQ;IACX,GAAG,QAAQ;IACX,QAAQ,aAAa;CACtB;AAED,oBAAY,OAAO;IACjB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,QAAQ,aAAa;CACtB;AAED,oBAAY,YAAY;IACtB,SAAS,cAAc;IACvB,UAAU,eAAe;IACzB,QAAQ,aAAa;CACtB;AAED,oBAAY,UAAU;IACpB,QAAQ,aAAa;IACrB,SAAS,cAAc;IACvB,UAAU,eAAe;CAC1B;AAED,oBAAY,cAAc;IACxB,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,MAAM,WAAW;CAClB;AAgDD,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA4DxB,CAAC;AAEZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE7E,eAAO,MAAM,8BAA8B,EAAE,QAAQ,CACnD,MAAM,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAK9C,CAAC"}

package/dist/runtime/installation/contract.js

@@ -0,0 +1,182 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CURRENT_SECRET_SOURCE_PROVIDER = exports.XemaInstallationSchema = exports.UpgradeChannel = exports.BackupMode = exports.StorageClass = exports.TlsMode = exports.DomainPurpose = exports.TenantIsolation = exports.TenancyMode = exports.SecretReferenceProvider = exports.DistributionReferenceKind = exports.InstallationSubstrate = exports.InstallationDeploymentProfile = void 0;
+const zod_1 = require("zod");
+const schema_1 = require("../config/schema");
+var InstallationDeploymentProfile;
+(function (InstallationDeploymentProfile) {
+    InstallationDeploymentProfile["Developer"] = "developer";
+    InstallationDeploymentProfile["StarterPme"] = "starter-pme";
+    InstallationDeploymentProfile["HighAvailability"] = "high-availability";
+    InstallationDeploymentProfile["Regulated"] = "regulated";
+    InstallationDeploymentProfile["MultiRegion"] = "multi-region";
+})(InstallationDeploymentProfile || (exports.InstallationDeploymentProfile = InstallationDeploymentProfile = {}));
+var InstallationSubstrate;
+(function (InstallationSubstrate) {
+    InstallationSubstrate["Local"] = "local";
+    InstallationSubstrate["SingleNode"] = "single-node";
+    InstallationSubstrate["Cluster"] = "cluster";
+})(InstallationSubstrate || (exports.InstallationSubstrate = InstallationSubstrate = {}));
+var DistributionReferenceKind;
+(function (DistributionReferenceKind) {
+    DistributionReferenceKind["Edition"] = "edition";
+    DistributionReferenceKind["Lock"] = "lock";
+})(DistributionReferenceKind || (exports.DistributionReferenceKind = DistributionReferenceKind = {}));
+var SecretReferenceProvider;
+(function (SecretReferenceProvider) {
+    SecretReferenceProvider["Environment"] = "environment";
+    SecretReferenceProvider["File"] = "file";
+    SecretReferenceProvider["Prompt"] = "prompt";
+    SecretReferenceProvider["ManagedLocal"] = "managed-local";
+    SecretReferenceProvider["Kubernetes"] = "kubernetes";
+    SecretReferenceProvider["ExternalVault"] = "external-vault";
+})(SecretReferenceProvider || (exports.SecretReferenceProvider = SecretReferenceProvider = {}));
+var TenancyMode;
+(function (TenancyMode) {
+    TenancyMode["SingleOrganization"] = "single-organization";
+    TenancyMode["MultiOrganization"] = "multi-organization";
+})(TenancyMode || (exports.TenancyMode = TenancyMode = {}));
+var TenantIsolation;
+(function (TenantIsolation) {
+    TenantIsolation["Shared"] = "shared";
+    TenantIsolation["Namespace"] = "namespace";
+    TenantIsolation["DedicatedCell"] = "dedicated-cell";
+})(TenantIsolation || (exports.TenantIsolation = TenantIsolation = {}));
+var DomainPurpose;
+(function (DomainPurpose) {
+    DomainPurpose["Api"] = "api";
+    DomainPurpose["Web"] = "web";
+    DomainPurpose["Identity"] = "identity";
+})(DomainPurpose || (exports.DomainPurpose = DomainPurpose = {}));
+var TlsMode;
+(function (TlsMode) {
+    TlsMode["Disabled"] = "disabled";
+    TlsMode["Managed"] = "managed";
+    TlsMode["External"] = "external";
+})(TlsMode || (exports.TlsMode = TlsMode = {}));
+var StorageClass;
+(function (StorageClass) {
+    StorageClass["Ephemeral"] = "ephemeral";
+    StorageClass["Persistent"] = "persistent";
+    StorageClass["External"] = "external";
+})(StorageClass || (exports.StorageClass = StorageClass = {}));
+var BackupMode;
+(function (BackupMode) {
+    BackupMode["Disabled"] = "disabled";
+    BackupMode["Snapshots"] = "snapshots";
+    BackupMode["Continuous"] = "continuous";
+})(BackupMode || (exports.BackupMode = BackupMode = {}));
+var UpgradeChannel;
+(function (UpgradeChannel) {
+    UpgradeChannel["Stable"] = "stable";
+    UpgradeChannel["Preview"] = "preview";
+    UpgradeChannel["Pinned"] = "pinned";
+})(UpgradeChannel || (exports.UpgradeChannel = UpgradeChannel = {}));
+const DistributionReferenceSchema = zod_1.z.discriminatedUnion('kind', [
+    zod_1.z
+        .object({
+        kind: zod_1.z.literal(DistributionReferenceKind.Edition),
+        edition: zod_1.z.string().min(1),
+    })
+        .strict(),
+    zod_1.z
+        .object({
+        kind: zod_1.z.literal(DistributionReferenceKind.Lock),
+        ref: zod_1.z.string().min(1),
+        digest: zod_1.z.string().min(1).optional(),
+    })
+        .strict(),
+]);
+const InfrastructureBindingSchema = zod_1.z
+    .object({
+    component: zod_1.z.nativeEnum(schema_1.InfraComponent),
+    ownership: zod_1.z.nativeEnum(schema_1.InfraMode),
+    endpoint: zod_1.z.string().min(1).optional(),
+    secretRefs: zod_1.z.array(zod_1.z.string().min(1)).default([]),
+})
+    .strict();
+const SecretReferenceSchema = zod_1.z
+    .object({
+    name: zod_1.z.string().min(1),
+    provider: zod_1.z.nativeEnum(SecretReferenceProvider),
+    locator: zod_1.z.string().min(1).optional(),
+})
+    .strict();
+const DomainSchema = zod_1.z
+    .object({
+    hostname: zod_1.z.string().min(1),
+    purpose: zod_1.z.nativeEnum(DomainPurpose),
+    tls: zod_1.z
+        .object({
+        mode: zod_1.z.nativeEnum(TlsMode),
+        secretRef: zod_1.z.string().min(1).optional(),
+    })
+        .strict(),
+})
+    .strict();
+exports.XemaInstallationSchema = zod_1.z
+    .object({
+    schemaVersion: zod_1.z.literal(1).default(1),
+    installationId: zod_1.z.string().min(1),
+    sourceConfigHash: zod_1.z
+        .string()
+        .regex(/^[a-f0-9]{64}$/)
+        .optional(),
+    distribution: DistributionReferenceSchema,
+    deployment: zod_1.z
+        .object({
+        profile: zod_1.z.nativeEnum(InstallationDeploymentProfile),
+        substrate: zod_1.z.nativeEnum(InstallationSubstrate).optional(),
+        regions: zod_1.z.array(zod_1.z.string().min(1)).optional(),
+    })
+        .strict(),
+    infrastructure: zod_1.z.array(InfrastructureBindingSchema).default([]),
+    secrets: zod_1.z.array(SecretReferenceSchema).default([]),
+    tenancy: zod_1.z
+        .object({
+        mode: zod_1.z.nativeEnum(TenancyMode).optional(),
+        isolation: zod_1.z.nativeEnum(TenantIsolation).optional(),
+    })
+        .strict()
+        .default({}),
+    domains: zod_1.z.array(DomainSchema).default([]),
+    storage: zod_1.z
+        .object({
+        class: zod_1.z.nativeEnum(StorageClass).optional(),
+        workspaceDriver: zod_1.z.nativeEnum(schema_1.WorkspaceDriver).optional(),
+        externalBinding: zod_1.z.string().min(1).optional(),
+        backup: zod_1.z
+            .object({
+            mode: zod_1.z.nativeEnum(BackupMode).optional(),
+            retentionDays: zod_1.z.number().int().positive().optional(),
+            destinationSecretRef: zod_1.z.string().min(1).optional(),
+        })
+            .strict()
+            .default({}),
+    })
+        .strict()
+        .default({ backup: {} }),
+    capacity: zod_1.z
+        .object({
+        minReplicas: zod_1.z.number().int().positive().optional(),
+        maxReplicas: zod_1.z.number().int().positive().optional(),
+        maxOrganizations: zod_1.z.number().int().positive().optional(),
+        maxConcurrentSessions: zod_1.z.number().int().positive().optional(),
+    })
+        .strict()
+        .default({}),
+    upgrade: zod_1.z
+        .object({
+        channel: zod_1.z.nativeEnum(UpgradeChannel).optional(),
+        releaseRef: zod_1.z.string().min(1).optional(),
+    })
+        .strict()
+        .default({}),
+})
+    .strict();
+exports.CURRENT_SECRET_SOURCE_PROVIDER = {
+    [schema_1.SecretSource.Env]: SecretReferenceProvider.Environment,
+    [schema_1.SecretSource.File]: SecretReferenceProvider.File,
+    [schema_1.SecretSource.Prompt]: SecretReferenceProvider.Prompt,
+};
+//# sourceMappingURL=contract.js.map

package/dist/runtime/installation/contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../../src/runtime/installation/contract.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,6CAK0B;AAS1B,IAAY,6BAMX;AAND,WAAY,6BAA6B;IACvC,wDAAuB,CAAA;IACvB,2DAA0B,CAAA;IAC1B,uEAAsC,CAAA;IACtC,wDAAuB,CAAA;IACvB,6DAA4B,CAAA;AAC9B,CAAC,EANW,6BAA6B,6CAA7B,6BAA6B,QAMxC;AAED,IAAY,qBAIX;AAJD,WAAY,qBAAqB;IAC/B,wCAAe,CAAA;IACf,mDAA0B,CAAA;IAC1B,4CAAmB,CAAA;AACrB,CAAC,EAJW,qBAAqB,qCAArB,qBAAqB,QAIhC;AAED,IAAY,yBAGX;AAHD,WAAY,yBAAyB;IACnC,gDAAmB,CAAA;IACnB,0CAAa,CAAA;AACf,CAAC,EAHW,yBAAyB,yCAAzB,yBAAyB,QAGpC;AAED,IAAY,uBAOX;AAPD,WAAY,uBAAuB;IACjC,sDAA2B,CAAA;IAC3B,wCAAa,CAAA;IACb,4CAAiB,CAAA;IACjB,yDAA8B,CAAA;IAC9B,oDAAyB,CAAA;IACzB,2DAAgC,CAAA;AAClC,CAAC,EAPW,uBAAuB,uCAAvB,uBAAuB,QAOlC;AAED,IAAY,WAGX;AAHD,WAAY,WAAW;IACrB,yDAA0C,CAAA;IAC1C,uDAAwC,CAAA;AAC1C,CAAC,EAHW,WAAW,2BAAX,WAAW,QAGtB;AAED,IAAY,eAIX;AAJD,WAAY,eAAe;IACzB,oCAAiB,CAAA;IACjB,0CAAuB,CAAA;IACvB,mDAAgC,CAAA;AAClC,CAAC,EAJW,eAAe,+BAAf,eAAe,QAI1B;AAED,IAAY,aAIX;AAJD,WAAY,aAAa;IACvB,4BAAW,CAAA;IACX,4BAAW,CAAA;IACX,sCAAqB,CAAA;AACvB,CAAC,EAJW,aAAa,6BAAb,aAAa,QAIxB;AAED,IAAY,OAIX;AAJD,WAAY,OAAO;IACjB,gCAAqB,CAAA;IACrB,8BAAmB,CAAA;IACnB,gCAAqB,CAAA;AACvB,CAAC,EAJW,OAAO,uBAAP,OAAO,QAIlB;AAED,IAAY,YAIX;AAJD,WAAY,YAAY;IACtB,uCAAuB,CAAA;IACvB,yCAAyB,CAAA;IACzB,qCAAqB,CAAA;AACvB,CAAC,EAJW,YAAY,4BAAZ,YAAY,QAIvB;AAED,IAAY,UAIX;AAJD,WAAY,UAAU;IACpB,mCAAqB,CAAA;IACrB,qCAAuB,CAAA;IACvB,uCAAyB,CAAA;AAC3B,CAAC,EAJW,UAAU,0BAAV,UAAU,QAIrB;AAED,IAAY,cAIX;AAJD,WAAY,cAAc;IACxB,mCAAiB,CAAA;IACjB,qCAAmB,CAAA;IACnB,mCAAiB,CAAA;AACnB,CAAC,EAJW,cAAc,8BAAd,cAAc,QAIzB;AAED,MAAM,2BAA2B,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC/D,OAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,OAAO,CAAC;QAClD,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC3B,CAAC;SACD,MAAM,EAAE;IACX,OAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,IAAI,CAAC;QAC/C,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACtB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACrC,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAG,OAAC;KAClC,MAAM,CAAC;IACN,SAAS,EAAE,OAAC,CAAC,UAAU,CAAC,uBAAc,CAAC;IACvC,SAAS,EAAE,OAAC,CAAC,UAAU,CAAC,kBAAS,CAAC;IAClC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACnD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,qBAAqB,GAAG,OAAC;KAC5B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,QAAQ,EAAE,OAAC,CAAC,UAAU,CAAC,uBAAuB,CAAC;IAC/C,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,YAAY,GAAG,OAAC;KACnB,MAAM,CAAC;IACN,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,OAAO,EAAE,OAAC,CAAC,UAAU,CAAC,aAAa,CAAC;IACpC,GAAG,EAAE,OAAC;SACH,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,UAAU,CAAC,OAAO,CAAC;QAC3B,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACxC,CAAC;SACD,MAAM,EAAE;CACZ,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,sBAAsB,GAAG,OAAC;KACpC,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACtC,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAEjC,gBAAgB,EAAE,OAAC;SAChB,MAAM,EAAE;SACR,KAAK,CAAC,gBAAgB,CAAC;SACvB,QAAQ,EAAE;IACb,YAAY,EAAE,2BAA2B;IACzC,UAAU,EAAE,OAAC;SACV,MAAM,CAAC;QACN,OAAO,EAAE,OAAC,CAAC,UAAU,CAAC,6BAA6B,CAAC;QACpD,SAAS,EAAE,OAAC,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;QACzD,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAC/C,CAAC;SACD,MAAM,EAAE;IACX,cAAc,EAAE,OAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChE,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD,OAAO,EAAE,OAAC;SACP,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE;QAC1C,SAAS,EAAE,OAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;KACpD,CAAC;SACD,MAAM,EAAE;SACR,OAAO,CAAC,EAAE,CAAC;IACd,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,OAAO,EAAE,OAAC;SACP,MAAM,CAAC;QACN,KAAK,EAAE,OAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE;QAC5C,eAAe,EAAE,OAAC,CAAC,UAAU,CAAC,wBAAe,CAAC,CAAC,QAAQ,EAAE;QACzD,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC7C,MAAM,EAAE,OAAC;aACN,MAAM,CAAC;YACN,IAAI,EAAE,OAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE;YACzC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;YACrD,oBAAoB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;SACnD,CAAC;aACD,MAAM,EAAE;aACR,OAAO,CAAC,EAAE,CAAC;KACf,CAAC;SACD,MAAM,EAAE;SACR,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC1B,QAAQ,EAAE,OAAC;SACR,MAAM,CAAC;QACN,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACnD,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACnD,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACxD,qBAAqB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KAC9D,CAAC;SACD,MAAM,EAAE;SACR,OAAO,CAAC,EAAE,CAAC;IACd,OAAO,EAAE,OAAC;SACP,MAAM,CAAC;QACN,OAAO,EAAE,OAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE;QAChD,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACzC,CAAC;SACD,MAAM,EAAE;SACR,OAAO,CAAC,EAAE,CAAC;CACf,CAAC;KACD,MAAM,EAAE,CAAC;AAKC,QAAA,8BAA8B,GAEvC;IACF,CAAC,qBAAY,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC,WAAW;IACvD,CAAC,qBAAY,CAAC,IAAI,CAAC,EAAE,uBAAuB,CAAC,IAAI;IACjD,CAAC,qBAAY,CAAC,MAAM,CAAC,EAAE,uBAAuB,CAAC,MAAM;CACtD,CAAC"}

package/dist/runtime/installation/diagnostics.d.ts

@@ -0,0 +1,16 @@
+export declare enum InstallationIssueKind {
+    Invalid = "invalid",
+    Unresolved = "unresolved",
+    Unsupported = "unsupported"
+}
+export interface InstallationIssue {
+    readonly kind: InstallationIssueKind;
+    readonly code: string;
+    readonly path: string;
+    readonly message: string;
+}
+export declare class InstallationCompilationError extends Error {
+    readonly issues: readonly InstallationIssue[];
+    constructor(issues: readonly InstallationIssue[]);
+}
+//# sourceMappingURL=diagnostics.d.ts.map

package/dist/runtime/installation/diagnostics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/diagnostics.ts"],"names":[],"mappings":"AAAA,oBAAY,qBAAqB;IAC/B,OAAO,YAAY;IACnB,UAAU,eAAe;IACzB,WAAW,gBAAgB;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,SAAgB,MAAM,EAAE,SAAS,iBAAiB,EAAE,CAAC;gBAElC,MAAM,EAAE,SAAS,iBAAiB,EAAE;CASxD"}

package/dist/runtime/installation/diagnostics.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InstallationCompilationError = exports.InstallationIssueKind = void 0;
+var InstallationIssueKind;
+(function (InstallationIssueKind) {
+    InstallationIssueKind["Invalid"] = "invalid";
+    InstallationIssueKind["Unresolved"] = "unresolved";
+    InstallationIssueKind["Unsupported"] = "unsupported";
+})(InstallationIssueKind || (exports.InstallationIssueKind = InstallationIssueKind = {}));
+class InstallationCompilationError extends Error {
+    issues;
+    constructor(issues) {
+        super(`Invalid XemaInstallation: ${issues
+            .map((issue) => `[${issue.path}] ${issue.message}`)
+            .join('; ')}`);
+        this.name = 'InstallationCompilationError';
+        this.issues = issues;
+    }
+}
+exports.InstallationCompilationError = InstallationCompilationError;
+//# sourceMappingURL=diagnostics.js.map

package/dist/runtime/installation/diagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.js","sourceRoot":"","sources":["../../../src/runtime/installation/diagnostics.ts"],"names":[],"mappings":";;;AAAA,IAAY,qBAIX;AAJD,WAAY,qBAAqB;IAC/B,4CAAmB,CAAA;IACnB,kDAAyB,CAAA;IACzB,oDAA2B,CAAA;AAC7B,CAAC,EAJW,qBAAqB,qCAArB,qBAAqB,QAIhC;AASD,MAAa,4BAA6B,SAAQ,KAAK;IACrC,MAAM,CAA+B;IAErD,YAAmB,MAAoC;QACrD,KAAK,CACH,6BAA6B,MAAM;aAChC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aAClD,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;QAC3C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAZD,oEAYC"}

package/dist/runtime/installation/diff.d.ts

@@ -0,0 +1,17 @@
+import type { CompiledXemaInstallation } from './compiler';
+export declare enum InstallationChangeClass {
+    SafeInPlace = "safe-in-place",
+    RequiresRollout = "requires-rollout",
+    Destructive = "destructive",
+    Rejected = "rejected"
+}
+export interface InstallationPlanChange {
+    readonly path: string;
+    readonly classification: InstallationChangeClass;
+}
+export interface InstallationPlanDiff {
+    readonly classification: InstallationChangeClass;
+    readonly changes: readonly InstallationPlanChange[];
+}
+export declare function diffInstallationPlans(current: CompiledXemaInstallation, desired: CompiledXemaInstallation): InstallationPlanDiff;
+//# sourceMappingURL=diff.d.ts.map

package/dist/runtime/installation/diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/diff.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAE3D,oBAAY,uBAAuB;IACjC,WAAW,kBAAkB;IAC7B,eAAe,qBAAqB;IACpC,WAAW,gBAAgB;IAC3B,QAAQ,aAAa;CACtB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,uBAAuB,CAAC;CAClD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,cAAc,EAAE,uBAAuB,CAAC;IACjD,QAAQ,CAAC,OAAO,EAAE,SAAS,sBAAsB,EAAE,CAAC;CACrD;AASD,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,wBAAwB,EACjC,OAAO,EAAE,wBAAwB,GAChC,oBAAoB,CAkBtB"}