@xemahq/xema 0.13.0 → 0.15.0

package/dist/runtime/distribution/compose.js

@@ -23,6 +23,7 @@ function composeDistribution(input) {
         displayName: input.displayName ?? input.id,
         description: `Custom distribution composed from "${input.baseEdition}" + ${String(input.userSources.length)} user source(s).`,
         include: pool.map((b) => ({ biome: b.id })),
+        requiredPlatforms: input.requiredPlatforms,
         trustPolicy: {
             allow: input.allowThirdParty
                 ? [biome_1.BiomeOrigin.FirstParty, biome_1.BiomeOrigin.ThirdParty]
@@ -30,7 +31,9 @@ function composeDistribution(input) {
         },
         platformServices: baseLock.platformServices.map((ps) => ({ name: ps.name, tier: ps.tier })),
     };
-    const resolved = (0, distribution_resolver_1.resolveDistribution)(definition, pool, { resolvedAt: input.resolvedAt });
+    const resolved = (0, distribution_resolver_1.resolveDistribution)(definition, pool, baseLock.capabilityDomainOwners, {
+        resolvedAt: input.resolvedAt,
+    });
     const requiresById = new Map(pool.map((b) => [b.id, b.requires]));
     const lock = {
         ...resolved,

package/dist/runtime/distribution/compose.js.map

@@ -1 +1 @@
-{"version":3,"file":"compose.js","sourceRoot":"","sources":["../../../src/runtime/distribution/compose.ts"],"names":[],"mappings":";;AAmDA,kDAqDC;AAxGD,yEAAyF;AACzF,0DAA6D;AAE7D,gDAAsD;AACtD,uDAI2B;AAC3B,4DAA8D;AA0C9D,SAAgB,mBAAmB,CAAC,KAAmB;IACrD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAA,kCAAoB,EAAC,EAAE,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAChF,MAAM,UAAU,GAAqB,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,wCAAsB,CAAC,CAAC;IAEjF,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,kCAAkB,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,UAAU,CAAC,IAAI,CAAC,IAAA,4CAA0B,EAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,IAAA,sCAAoB,EAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAElF,MAAM,UAAU,GAAiB;QAC/B,aAAa,EAAE,CAAC;QAChB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,EAAE;QAC1C,WAAW,EAAE,sCAAsC,KAAK,CAAC,WAAW,OAAO,MAAM,CAC/E,KAAK,CAAC,WAAW,CAAC,MAAM,CACzB,kBAAkB;QAInB,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3C,WAAW,EAAE;YACX,KAAK,EAAE,KAAK,CAAC,eAAe;gBAC1B,CAAC,CAAC,CAAC,mBAAW,CAAC,UAAU,EAAE,mBAAW,CAAC,UAAU,CAAC;gBAClD,CAAC,CAAC,CAAC,mBAAW,CAAC,UAAU,CAAC;SAC7B;QACD,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;KAC5F,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAA,2CAAmB,EAAC,UAAU,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;IAIzF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,IAAI,GAAqB;QAC7B,GAAG,QAAQ;QACX,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClC,GAAG,CAAC;YACJ,oBAAoB,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE;SACnD,CAAC,CAAC;KACJ,CAAC;IAEF,OAAO;QACL,UAAU;QACV,IAAI;QACJ,cAAc,EAAE,UAAU,CAAC,MAAM;QACjC,cAAc,EAAE,UAAU,CAAC,MAAM;QACjC,UAAU;KACX,CAAC;AACJ,CAAC"}
+{"version":3,"file":"compose.js","sourceRoot":"","sources":["../../../src/runtime/distribution/compose.ts"],"names":[],"mappings":";;AAmEA,kDA6DC;AAhID,yEAAyF;AACzF,0DAA6D;AAE7D,gDAAsD;AACtD,uDAI2B;AAC3B,4DAA8D;AA0D9D,SAAgB,mBAAmB,CAAC,KAAmB;IACrD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAA,kCAAoB,EAAC,EAAE,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAChF,MAAM,UAAU,GAAqB,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,wCAAsB,CAAC,CAAC;IAEjF,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,kCAAkB,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,UAAU,CAAC,IAAI,CAAC,IAAA,4CAA0B,EAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,IAAA,sCAAoB,EAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAElF,MAAM,UAAU,GAAiB;QAC/B,aAAa,EAAE,CAAC;QAChB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,EAAE;QAC1C,WAAW,EAAE,sCAAsC,KAAK,CAAC,WAAW,OAAO,MAAM,CAC/E,KAAK,CAAC,WAAW,CAAC,MAAM,CACzB,kBAAkB;QAInB,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,WAAW,EAAE;YACX,KAAK,EAAE,KAAK,CAAC,eAAe;gBAC1B,CAAC,CAAC,CAAC,mBAAW,CAAC,UAAU,EAAE,mBAAW,CAAC,UAAU,CAAC;gBAClD,CAAC,CAAC,CAAC,mBAAW,CAAC,UAAU,CAAC;SAC7B;QACD,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;KAC5F,CAAC;IAOF,MAAM,QAAQ,GAAG,IAAA,2CAAmB,EAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,sBAAsB,EAAE;QACtF,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;IAIH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,IAAI,GAAqB;QAC7B,GAAG,QAAQ;QACX,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClC,GAAG,CAAC;YACJ,oBAAoB,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE;SACnD,CAAC,CAAC;KACJ,CAAC;IAEF,OAAO;QACL,UAAU;QACV,IAAI;QACJ,cAAc,EAAE,UAAU,CAAC,MAAM;QACjC,cAAc,EAAE,UAAU,CAAC,MAAM;QACjC,UAAU;KACX,CAAC;AACJ,CAAC"}

package/dist/runtime/env-seeder.d.ts

@@ -1,6 +1,8 @@
 import { Substrate, type XemaConfig } from './config/schema';
+import { type ResolvedSecrets } from './secrets/resolver';
 import type { InfraPlan } from './infra/infra-plan';
 import type { RosterEntry } from './roster';
+import type { LocalInfrastructureCredentials } from './secrets/managed-local-store';
 export interface SeededEnv {
     readonly base: Readonly<Record<string, string>>;
     perService(entry: RosterEntry): Readonly<Record<string, string>>;
@@ -10,8 +12,11 @@ export interface EnvSeederContext {
     readonly infra: InfraPlan;
     readonly roster: readonly RosterEntry[];
     readonly substrate: Substrate;
+    readonly distributionLockPath: string;
     readonly ports?: ReadonlyMap<string, number>;
     readonly containerPort?: number;
+    readonly secrets?: ResolvedSecrets;
+    readonly managedCredentials?: LocalInfrastructureCredentials;
 }
 export declare function seedEnv(ctx: EnvSeederContext): SeededEnv;
 //# sourceMappingURL=env-seeder.d.ts.map

package/dist/runtime/env-seeder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env-seeder.d.ts","sourceRoot":"","sources":["../../src/runtime/env-seeder.ts"],"names":[],"mappings":"AAOA,OAAO,EAA6B,SAAS,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAIxF,OAAO,KAAK,EAAE,SAAS,EAA0B,MAAM,oBAAoB,CAAC;AAC5E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAa5C,MAAM,WAAW,SAAS;IAExB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAEhD,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAE9B,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE7C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAID,wBAAgB,OAAO,CAAC,GAAG,EAAE,gBAAgB,GAAG,SAAS,CAoExD"}
+{"version":3,"file":"env-seeder.d.ts","sourceRoot":"","sources":["../../src/runtime/env-seeder.ts"],"names":[],"mappings":"AAMA,OAAO,EAGL,SAAS,EAET,KAAK,UAAU,EAChB,MAAM,iBAAiB,CAAC;AASzB,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,KAAK,EAAE,SAAS,EAA0B,MAAM,oBAAoB,CAAC;AAC5E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAapF,MAAM,WAAW,SAAS;IAExB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAEhD,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAQ9B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IAEtC,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE7C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEhC,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;IAEnC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,8BAA8B,CAAC;CAC9D;AAsDD,wBAAgB,OAAO,CAAC,GAAG,EAAE,gBAAgB,GAAG,SAAS,CAyOxD"}

package/dist/runtime/env-seeder.js

@@ -5,33 +5,154 @@ const kernel_state_runtime_1 = require("@xemahq/kernel-state-runtime");
 const service_registry_nest_1 = require("@xemahq/service-registry-nest");
 const schema_1 = require("./config/schema");
 const infra_catalog_1 = require("./infra/infra-catalog");
+const keycloak_realm_1 = require("./infra/keycloak-realm");
+const postgres_endpoint_1 = require("./infra/postgres-endpoint");
+const paths_1 = require("./paths");
+const resolver_1 = require("./secrets/resolver");
 const env_defaults_1 = require("../dev/env-defaults");
+const ORG_CLAIM_KEY_CANONICAL = 'xema_org_id';
+const XEMA_SCOPED_CLAIM_PREFIX = 'xema_';
 const DEFAULT_CONTAINER_PORT = 3000;
+const LAUNCHER_OWNED_ENV = new Set([
+    'DATABASE_URL',
+    'EVENT_HUB_URL',
+    'JWT_ISSUER',
+    'JWT_PUBLIC_KEY_URL',
+    'KEYCLOAK_CLIENT_ID',
+    'KEYCLOAK_CLIENT_SECRET',
+    'KEYCLOAK_REALM',
+    'KEYCLOAK_URL',
+    'REALM_TENANT_CLAIMS',
+    'OPENSEARCH_URL',
+    'PORT',
+    'REDIS_URL',
+    'S3_ENDPOINT',
+    'S3_PUBLIC_BASE_URL',
+    'S3_PUBLIC_ENDPOINT',
+    'SERVICE_PUBLIC_URL',
+    'SHARED_BIOME_DB_HOST',
+    'SHARED_BIOME_DB_NAME',
+    'SHARED_BIOME_DB_PASSWORD',
+    'SHARED_BIOME_DB_PORT',
+    'SHARED_BIOME_DB_USER',
+    'TEMPORAL_ADDRESS',
+    'TEMPORAL_NAMESPACE',
+    'WEBHOOK_URL',
+    'XEMA_DEFAULT_ALLOWED_TIERS',
+    'XEMA_DISTRIBUTION_LOCK_PATH',
+    'XEMA_ETCD_ENDPOINTS',
+    'XEMA_KERNEL_STATE_PROFILE',
+    service_registry_nest_1.SERVICE_REGISTRY_ADAPTER_ENV_VAR,
+]);
 function seedEnv(ctx) {
     const containerPort = ctx.containerPort ?? DEFAULT_CONTAINER_PORT;
-    const hostOf = (name) => ctx.substrate === schema_1.Substrate.Container
-        ? name
-        : '127.0.0.1';
+    const hostOf = (name) => ctx.substrate === schema_1.Substrate.Container ? name : '127.0.0.1';
     const portOf = (name) => ctx.substrate === schema_1.Substrate.Container
         ? containerPort
-        : ctx.ports?.get(name) ?? env_defaults_1.PORT_MAP[name] ?? containerPort;
-    const base = {};
+        : (ctx.ports?.get(name) ?? env_defaults_1.PORT_MAP[name] ?? containerPort);
+    const materializedSecrets = (0, resolver_1.secretEnvironment)(ctx.secrets ?? new Map());
+    const launcherOwnedEnv = new Set(LAUNCHER_OWNED_ENV);
+    if (ctx.infra.byComponent.get(schema_1.InfraComponent.ObjectStore)?.mode ===
+        schema_1.InfraMode.Managed) {
+        launcherOwnedEnv.add('S3_ACCESS_KEY_ID');
+        launcherOwnedEnv.add('S3_FORCE_PATH_STYLE');
+        launcherOwnedEnv.add('S3_REGION');
+        launcherOwnedEnv.add('S3_SECRET_ACCESS_KEY');
+    }
+    for (const name of Object.keys(materializedSecrets)) {
+        if (launcherOwnedEnv.has(name)) {
+            throw new Error(`Secret "${name}" collides with a launcher-owned service environment variable.`);
+        }
+    }
+    const base = { ...materializedSecrets };
     base.REDIS_URL = `redis://${stripScheme(infraUrl(ctx, schema_1.InfraComponent.Redis) ?? '127.0.0.1:6379')}`;
-    base.OPENSEARCH_URL = infraUrl(ctx, schema_1.InfraComponent.Search) ?? 'http://127.0.0.1:9200';
+    base.OPENSEARCH_URL =
+        infraUrl(ctx, schema_1.InfraComponent.Search) ?? 'http://127.0.0.1:9200';
     base.TEMPORAL_ADDRESS = stripScheme(infraUrl(ctx, schema_1.InfraComponent.Temporal) ?? '127.0.0.1:7233');
-    base.TEMPORAL_NAMESPACE = 'default';
+    base.TEMPORAL_NAMESPACE = infra_catalog_1.TEMPORAL_NAMESPACE;
     const eventHubHost = ctx.substrate === schema_1.Substrate.Container ? 'event-hub' : '127.0.0.1';
     base.EVENT_HUB_URL = `http://${eventHubHost}:3128`;
     base.WEBHOOK_URL = `http://${eventHubHost}:3128/webhooks`;
     const etcd = infraUrl(ctx, schema_1.InfraComponent.Etcd) ?? '127.0.0.1:2379';
     base.XEMA_ETCD_ENDPOINTS = stripScheme(etcd);
     base.XEMA_KERNEL_STATE_PROFILE = kernel_state_runtime_1.KernelStateProfile.Cluster;
-    base[service_registry_nest_1.SERVICE_REGISTRY_ADAPTER_ENV_VAR] = service_registry_nest_1.ServiceRegistryAdapterKind.KernelState;
-    const kcUrl = infraUrl(ctx, schema_1.InfraComponent.Keycloak) ?? 'http://127.0.0.1:8180';
-    const realm = ctx.infra.byComponent.get(schema_1.InfraComponent.Keycloak)?.config.realm ?? 'xema';
-    base.JWT_ISSUER = `${kcUrl}/realms/${realm}`;
+    base[service_registry_nest_1.SERVICE_REGISTRY_ADAPTER_ENV_VAR] =
+        service_registry_nest_1.ServiceRegistryAdapterKind.KernelState;
+    const keycloak = ctx.infra.byComponent.get(schema_1.InfraComponent.Keycloak);
+    const kcUrl = infraUrl(ctx, schema_1.InfraComponent.Keycloak);
+    if (keycloak === undefined || kcUrl === undefined) {
+        throw new Error('Keycloak is mandatory but produced no endpoint; every service authenticates against it.');
+    }
+    const realm = (0, keycloak_realm_1.resolveKeycloakRealm)(ctx.infra);
+    base.KEYCLOAK_REALM = realm;
+    base.REALM_TENANT_CLAIMS = JSON.stringify({
+        [realm]: {
+            orgClaim: ORG_CLAIM_KEY_CANONICAL,
+            scopedClaimPrefixes: [XEMA_SCOPED_CLAIM_PREFIX],
+        },
+    });
+    const issuerBases = new Set([kcUrl]);
+    if (keycloak.mode === schema_1.InfraMode.Managed &&
+        ctx.substrate === schema_1.Substrate.Container) {
+        const hostUrl = infra_catalog_1.INFRA_CATALOG[schema_1.InfraComponent.Keycloak].defaultLocalUrl;
+        if (hostUrl === undefined) {
+            throw new Error('Managed Keycloak has no host-mapped URL in the infrastructure catalog.');
+        }
+        issuerBases.add(hostUrl);
+    }
+    base.JWT_ISSUER = [...issuerBases]
+        .map((issuerBase) => `${issuerBase}/realms/${realm}`)
+        .join(',');
     base.JWT_PUBLIC_KEY_URL = `${kcUrl}/realms/${realm}/protocol/openid-connect/certs`;
     base.KEYCLOAK_URL = kcUrl;
+    if (keycloak.mode === schema_1.InfraMode.Managed &&
+        ctx.substrate === schema_1.Substrate.Container) {
+        const keycloakClient = ctx.managedCredentials?.keycloakClient;
+        if (keycloakClient === undefined) {
+            throw new Error('Managed-local Keycloak client credentials were not resolved before environment seeding.');
+        }
+        base.KEYCLOAK_CLIENT_ID = infra_catalog_1.KEYCLOAK_ADMIN_CLIENT_ID;
+        base.KEYCLOAK_CLIENT_SECRET = keycloakClient.password;
+    }
+    if (ctx.substrate !== schema_1.Substrate.Helm) {
+        const objectStore = ctx.infra.byComponent.get(schema_1.InfraComponent.ObjectStore);
+        const internalEndpoint = infraUrl(ctx, schema_1.InfraComponent.ObjectStore);
+        if (internalEndpoint !== undefined) {
+            const publicEndpoint = objectStore?.mode === schema_1.InfraMode.Managed
+                ? infra_catalog_1.INFRA_CATALOG[schema_1.InfraComponent.ObjectStore].defaultLocalUrl
+                : internalEndpoint;
+            if (publicEndpoint === undefined) {
+                throw new Error('Managed object storage has no public endpoint in the infrastructure catalog.');
+            }
+            base.S3_ENDPOINT = internalEndpoint;
+            base.S3_PUBLIC_ENDPOINT = publicEndpoint;
+            base.S3_PUBLIC_BASE_URL = publicEndpoint.replace(/\/+$/, '');
+        }
+        if (objectStore?.mode === schema_1.InfraMode.Managed) {
+            const objectStoreCredentials = ctx.managedCredentials?.objectStore;
+            if (objectStoreCredentials === undefined) {
+                throw new Error('Managed-local object-store credentials were not resolved before environment seeding.');
+            }
+            base.S3_ACCESS_KEY_ID = objectStoreCredentials.username;
+            base.S3_SECRET_ACCESS_KEY = objectStoreCredentials.password;
+            base.S3_REGION = 'us-east-1';
+            base.S3_FORCE_PATH_STYLE = 'true';
+        }
+    }
+    if (ctx.substrate !== schema_1.Substrate.Helm) {
+        const pg = postgresHostPort(ctx);
+        const pgCredentials = postgresCredentials(ctx);
+        base.SHARED_BIOME_DB_HOST = pg.host;
+        base.SHARED_BIOME_DB_PORT = String(pg.port);
+        base.SHARED_BIOME_DB_USER = pgCredentials.username;
+        base.SHARED_BIOME_DB_PASSWORD = pgCredentials.password;
+        base.SHARED_BIOME_DB_NAME = 'xema_biomes';
+    }
+    base.XEMA_DEFAULT_ALLOWED_TIERS = (0, schema_1.resolveDefaultAllowedTiers)(ctx.config.policy);
+    base.XEMA_DISTRIBUTION_LOCK_PATH =
+        ctx.substrate === schema_1.Substrate.Container
+            ? paths_1.CONTAINER_DISTRIBUTION_LOCK_PATH
+            : ctx.distributionLockPath;
     return {
         base,
         perService(entry) {
@@ -39,20 +160,32 @@ function seedEnv(ctx) {
             const selfPort = portOf(entry.name);
             overlay.PORT = String(selfPort);
             overlay.SERVICE_PUBLIC_URL = `http://${hostOf(entry.name)}:${String(selfPort)}`;
-            overlay.DATABASE_URL = databaseUrl(ctx, entry.name);
+            if (ctx.substrate !== schema_1.Substrate.Helm) {
+                overlay.DATABASE_URL = databaseUrl(ctx, entry.name);
+            }
             return overlay;
         },
     };
 }
+function postgresHostPort(ctx) {
+    return (0, postgres_endpoint_1.resolvePostgresEndpoint)(ctx.infra, ctx.substrate);
+}
 function databaseUrl(ctx, serviceName) {
-    const pg = ctx.infra.byComponent.get(schema_1.InfraComponent.Postgres);
-    const host = pg?.mode === schema_1.InfraMode.External && pg.url
-        ? new URL(pg.url).host
-        : ctx.substrate === schema_1.Substrate.Container
-            ? `${infra_catalog_1.INFRA_CATALOG[schema_1.InfraComponent.Postgres].managed.containerName}:5432`
-            : '127.0.0.1:5432';
+    const { host, port } = postgresHostPort(ctx);
+    const { username, password } = postgresCredentials(ctx);
     const db = `${serviceName.replace(/-/g, '_')}_db`;
-    return `postgresql://postgres:postgres@${host}/${db}?schema=public&connection_limit=3`;
+    return `postgresql://${encodeURIComponent(username)}:${encodeURIComponent(password)}@${host}:${String(port)}/${db}?schema=public&connection_limit=3`;
+}
+function postgresCredentials(ctx) {
+    const external = (0, resolver_1.externalPostgresCredentials)(ctx.config, ctx.secrets ?? new Map());
+    if (external !== undefined) {
+        return external;
+    }
+    const managedPostgres = ctx.managedCredentials?.postgres;
+    if (managedPostgres === undefined) {
+        throw new Error('Managed-local PostgreSQL credentials were not resolved before environment seeding.');
+    }
+    return managedPostgres;
 }
 function infraUrl(ctx, component) {
     const resolved = ctx.infra.byComponent.get(component);

package/dist/runtime/env-seeder.js.map

@@ -1 +1 @@
-{"version":3,"file":"env-seeder.js","sourceRoot":"","sources":["../../src/runtime/env-seeder.ts"],"names":[],"mappings":";;AA6CA,0BAoEC;AAjHD,uEAAkE;AAClE,yEAGuC;AAGvC,4CAAwF;AACxF,yDAAsD;AACtD,sDAA+C;AAkC/C,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAEpC,SAAgB,OAAO,CAAC,GAAqB;IAC3C,MAAM,aAAa,GAAG,GAAG,CAAC,aAAa,IAAI,sBAAsB,CAAC;IAClE,MAAM,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE,CACtC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS;QACnC,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,WAAW,CAAC;IAIlB,MAAM,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE,CACtC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS;QACnC,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,uBAAQ,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC;IAE9D,MAAM,IAAI,GAA2B,EAAE,CAAC;IAMxC,IAAI,CAAC,SAAS,GAAG,WAAW,WAAW,CAAC,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,EAAE,CAAC;IACnG,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,MAAM,CAAC,IAAI,uBAAuB,CAAC;IACtF,IAAI,CAAC,gBAAgB,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,QAAQ,CAAC,IAAI,gBAAgB,CAAC,CAAC;IAChG,IAAI,CAAC,kBAAkB,GAAG,SAAS,CAAC;IAKpC,MAAM,YAAY,GAAG,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;IACvF,IAAI,CAAC,aAAa,GAAG,UAAU,YAAY,OAAO,CAAC;IACnD,IAAI,CAAC,WAAW,GAAG,UAAU,YAAY,gBAAgB,CAAC;IAM1D,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC;IACpE,IAAI,CAAC,mBAAmB,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,yBAAyB,GAAG,yCAAkB,CAAC,OAAO,CAAC;IAC5D,IAAI,CAAC,wDAAgC,CAAC,GAAG,kDAA0B,CAAC,WAAW,CAAC;IAGhF,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,QAAQ,CAAC,IAAI,uBAAuB,CAAC;IAChF,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC;IACzF,IAAI,CAAC,UAAU,GAAG,GAAG,KAAK,WAAW,KAAK,EAAE,CAAC;IAC7C,IAAI,CAAC,kBAAkB,GAAG,GAAG,KAAK,WAAW,KAAK,gCAAgC,CAAC;IAKnF,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;IAO1B,OAAO;QACL,IAAI;QACJ,UAAU,CAAC,KAAkB;YAC3B,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChC,OAAO,CAAC,kBAAkB,GAAG,UAAU,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChF,OAAO,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACpD,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC;AAGD,SAAS,WAAW,CAAC,GAAqB,EAAE,WAAmB;IAC7D,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC;IAC9D,MAAM,IAAI,GACR,EAAE,EAAE,IAAI,KAAK,kBAAS,CAAC,QAAQ,IAAI,EAAE,CAAC,GAAG;QACvC,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI;QACtB,CAAC,CAAC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS;YACrC,CAAC,CAAC,GAAG,6BAAa,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,aAAa,OAAO;YACxE,CAAC,CAAC,gBAAgB,CAAC;IACzB,MAAM,EAAE,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC;IAClD,OAAO,kCAAkC,IAAI,IAAI,EAAE,mCAAmC,CAAC;AACzF,CAAC;AAED,SAAS,QAAQ,CAAC,GAAqB,EAAE,SAAyB;IAChE,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,kBAAS,CAAC,QAAQ,EAAE,CAAC;QACzC,OAAO,QAAQ,CAAC,GAAG,CAAC;IACtB,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,kBAAS,CAAC,QAAQ,EAAE,CAAC;QACzC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,UAAU,CAAC,GAAqB,EAAE,QAAgC;IACzE,MAAM,IAAI,GAAG,6BAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,EAAE,CAAC;QAC1C,OAAO,UAAU,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,oBAAoB,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC"}
+{"version":3,"file":"env-seeder.js","sourceRoot":"","sources":["../../src/runtime/env-seeder.ts"],"names":[],"mappings":";;AA6HA,0BAyOC;AAtWD,uEAAkE;AAClE,yEAGuC;AAEvC,4CAMyB;AACzB,yDAI+B;AAC/B,2DAA8D;AAC9D,iEAAoE;AACpE,mCAA2D;AAC3D,iDAI4B;AAC5B,sDAA+C;AA+D/C,MAAM,uBAAuB,GAAG,aAAa,CAAC;AAC9C,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAEzC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AACpC,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,cAAc;IACd,eAAe;IACf,YAAY;IACZ,oBAAoB;IACpB,oBAAoB;IACpB,wBAAwB;IACxB,gBAAgB;IAChB,cAAc;IACd,qBAAqB;IACrB,gBAAgB;IAChB,MAAM;IACN,WAAW;IACX,aAAa;IACb,oBAAoB;IACpB,oBAAoB;IACpB,oBAAoB;IACpB,sBAAsB;IACtB,sBAAsB;IACtB,0BAA0B;IAC1B,sBAAsB;IACtB,sBAAsB;IACtB,kBAAkB;IAClB,oBAAoB;IACpB,aAAa;IACb,4BAA4B;IAC5B,6BAA6B;IAC7B,qBAAqB;IACrB,2BAA2B;IAC3B,wDAAgC;CACjC,CAAC,CAAC;AAEH,SAAgB,OAAO,CAAC,GAAqB;IAC3C,MAAM,aAAa,GAAG,GAAG,CAAC,aAAa,IAAI,sBAAsB,CAAC;IAClE,MAAM,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE,CACtC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;IAI7D,MAAM,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE,CACtC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS;QACnC,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,uBAAQ,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,CAAC;IAEhE,MAAM,mBAAmB,GAAG,IAAA,4BAAiB,EAAC,GAAG,CAAC,OAAO,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;IACxE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACrD,IACE,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,WAAW,CAAC,EAAE,IAAI;QAC3D,kBAAS,CAAC,OAAO,EACjB,CAAC;QACD,gBAAgB,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACzC,gBAAgB,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAC5C,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAClC,gBAAgB,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACpD,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,WAAW,IAAI,gEAAgE,CAChF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAA2B,EAAE,GAAG,mBAAmB,EAAE,CAAC;IAMhE,IAAI,CAAC,SAAS,GAAG,WAAW,WAAW,CAAC,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,EAAE,CAAC;IACnG,IAAI,CAAC,cAAc;QACjB,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,MAAM,CAAC,IAAI,uBAAuB,CAAC;IAClE,IAAI,CAAC,gBAAgB,GAAG,WAAW,CACjC,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,QAAQ,CAAC,IAAI,gBAAgB,CAC3D,CAAC;IAKF,IAAI,CAAC,kBAAkB,GAAG,kCAAkB,CAAC;IAK7C,MAAM,YAAY,GAChB,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;IACpE,IAAI,CAAC,aAAa,GAAG,UAAU,YAAY,OAAO,CAAC;IACnD,IAAI,CAAC,WAAW,GAAG,UAAU,YAAY,gBAAgB,CAAC;IAM1D,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC;IACpE,IAAI,CAAC,mBAAmB,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,yBAAyB,GAAG,yCAAkB,CAAC,OAAO,CAAC;IAC5D,IAAI,CAAC,wDAAgC,CAAC;QACpC,kDAA0B,CAAC,WAAW,CAAC;IAGzC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,QAAQ,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAA,qCAAoB,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;IAW5B,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,SAAS,CAAC;QACxC,CAAC,KAAK,CAAC,EAAE;YACP,QAAQ,EAAE,uBAAuB;YACjC,mBAAmB,EAAE,CAAC,wBAAwB,CAAC;SAChD;KACF,CAAC,CAAC;IAOH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7C,IACE,QAAQ,CAAC,IAAI,KAAK,kBAAS,CAAC,OAAO;QACnC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,EACrC,CAAC;QACD,MAAM,OAAO,GAAG,6BAAa,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC,eAAe,CAAC;QACvE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;QACJ,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,CAAC,UAAU,GAAG,CAAC,GAAG,WAAW,CAAC;SAC/B,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,UAAU,WAAW,KAAK,EAAE,CAAC;SACpD,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,IAAI,CAAC,kBAAkB,GAAG,GAAG,KAAK,WAAW,KAAK,gCAAgC,CAAC;IAKnF,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;IAO1B,IACE,QAAQ,CAAC,IAAI,KAAK,kBAAS,CAAC,OAAO;QACnC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,EACrC,CAAC;QACD,MAAM,cAAc,GAAG,GAAG,CAAC,kBAAkB,EAAE,cAAc,CAAC;QAC9D,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;QACJ,CAAC;QAID,IAAI,CAAC,kBAAkB,GAAG,wCAAwB,CAAC;QACnD,IAAI,CAAC,sBAAsB,GAAG,cAAc,CAAC,QAAQ,CAAC;IACxD,CAAC;IAMD,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,WAAW,CAAC,CAAC;QAC1E,MAAM,gBAAgB,GAAG,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,WAAW,CAAC,CAAC;QACnE,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,cAAc,GAClB,WAAW,EAAE,IAAI,KAAK,kBAAS,CAAC,OAAO;gBACrC,CAAC,CAAC,6BAAa,CAAC,uBAAc,CAAC,WAAW,CAAC,CAAC,eAAe;gBAC3D,CAAC,CAAC,gBAAgB,CAAC;YACvB,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CACb,8EAA8E,CAC/E,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,WAAW,GAAG,gBAAgB,CAAC;YACpC,IAAI,CAAC,kBAAkB,GAAG,cAAc,CAAC;YACzC,IAAI,CAAC,kBAAkB,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,WAAW,EAAE,IAAI,KAAK,kBAAS,CAAC,OAAO,EAAE,CAAC;YAC5C,MAAM,sBAAsB,GAAG,GAAG,CAAC,kBAAkB,EAAE,WAAW,CAAC;YACnE,IAAI,sBAAsB,KAAK,SAAS,EAAE,CAAC;gBACzC,MAAM,IAAI,KAAK,CACb,sFAAsF,CACvF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,gBAAgB,GAAG,sBAAsB,CAAC,QAAQ,CAAC;YACxD,IAAI,CAAC,oBAAoB,GAAG,sBAAsB,CAAC,QAAQ,CAAC;YAC5D,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC;YAC7B,IAAI,CAAC,mBAAmB,GAAG,MAAM,CAAC;QACpC,CAAC;IACH,CAAC;IAQD,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,aAAa,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,oBAAoB,GAAG,EAAE,CAAC,IAAI,CAAC;QACpC,IAAI,CAAC,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,oBAAoB,GAAG,aAAa,CAAC,QAAQ,CAAC;QACnD,IAAI,CAAC,wBAAwB,GAAG,aAAa,CAAC,QAAQ,CAAC;QACvD,IAAI,CAAC,oBAAoB,GAAG,aAAa,CAAC;IAC5C,CAAC;IAQD,IAAI,CAAC,0BAA0B,GAAG,IAAA,mCAA0B,EAC1D,GAAG,CAAC,MAAM,CAAC,MAAM,CAClB,CAAC;IAQF,IAAI,CAAC,2BAA2B;QAC9B,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS;YACnC,CAAC,CAAC,wCAAgC;YAClC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAO/B,OAAO;QACL,IAAI;QACJ,UAAU,CAAC,KAAkB;YAC3B,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChC,OAAO,CAAC,kBAAkB,GAAG,UAAU,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChF,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,IAAI,EAAE,CAAC;gBACrC,OAAO,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACtD,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC;AAOD,SAAS,gBAAgB,CAAC,GAAqB;IAI7C,OAAO,IAAA,2CAAuB,EAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;AAC3D,CAAC;AAGD,SAAS,WAAW,CAAC,GAAqB,EAAE,WAAmB;IAC7D,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACxD,MAAM,EAAE,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC;IAClD,OAAO,gBAAgB,kBAAkB,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,mCAAmC,CAAC;AACvJ,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAqB;IAIhD,MAAM,QAAQ,GAAG,IAAA,sCAA2B,EAC1C,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,OAAO,IAAI,IAAI,GAAG,EAAE,CACzB,CAAC;IACF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,eAAe,GAAG,GAAG,CAAC,kBAAkB,EAAE,QAAQ,CAAC;IACzD,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,SAAS,QAAQ,CACf,GAAqB,EACrB,SAAyB;IAEzB,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,kBAAS,CAAC,QAAQ,EAAE,CAAC;QACzC,OAAO,QAAQ,CAAC,GAAG,CAAC;IACtB,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,kBAAS,CAAC,QAAQ,EAAE,CAAC;QACzC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,UAAU,CACjB,GAAqB,EACrB,QAAgC;IAEhC,MAAM,IAAI,GAAG,6BAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,EAAE,CAAC;QAC1C,OAAO,UAAU,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,oBAAoB,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC"}

package/dist/runtime/foreground.d.ts

@@ -1,8 +1,17 @@
 import { type XemaConfig } from './config/schema';
+import { type LaunchHandle } from './launch';
+import type { HelmReleaseRendering } from './installation/helm-release';
 export interface ForegroundOptions {
     readonly config: XemaConfig;
     readonly includeWeb: boolean;
     readonly detach: boolean;
+    readonly installationIdentity: string;
+    readonly installationId: string;
+    readonly planHash: string;
+    readonly helmRelease?: HelmReleaseRendering;
+    readonly allowEmulatedPlatform?: boolean;
+    readonly onReady?: (handle: LaunchHandle) => Promise<void>;
 }
 export declare function bringUpForeground(opts: ForegroundOptions): Promise<void>;
+export declare function waitForSignal(handle: LaunchHandle): Promise<void>;
 //# sourceMappingURL=foreground.d.ts.map

package/dist/runtime/foreground.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"foreground.d.ts","sourceRoot":"","sources":["../../src/runtime/foreground.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAU7D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsC9E"}
+{"version":3,"file":"foreground.d.ts","sourceRoot":"","sources":["../../src/runtime/foreground.ts"],"names":[],"mappings":"AAGA,OAAO,EAAa,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAEL,KAAK,YAAY,EAClB,MAAM,UAAU,CAAC;AAElB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAQxE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC;IAE5C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAEzC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,IAAI,CAAC,CA+Ef;AAwBD,wBAAgB,aAAa,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBjE"}

package/dist/runtime/foreground.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.bringUpForeground = bringUpForeground;
+exports.waitForSignal = waitForSignal;
+const cleanup_1 = require("./cleanup");
 const schema_1 = require("./config/schema");
 const launch_1 = require("./launch");
 async function bringUpForeground(opts) {
@@ -18,10 +20,36 @@ async function bringUpForeground(opts) {
     const handle = await (0, launch_1.launch)({
         config: opts.config,
         includeWeb: opts.includeWeb,
+        installationIdentity: opts.installationIdentity,
+        installationId: opts.installationId,
+        planHash: opts.planHash,
+        ...(opts.helmRelease === undefined
+            ? {}
+            : { helmRelease: opts.helmRelease }),
+        allowEmulatedPlatform: opts.allowEmulatedPlatform === true,
         onEvent,
         log: (line) => console.log(line),
     });
+    try {
+        await opts.onReady?.(handle);
+    }
+    catch (error) {
+        try {
+            await handle.shutdown();
+        }
+        catch (cleanupError) {
+            throw (0, cleanup_1.combineOperationAndCleanupErrors)('foreground readiness callback', error, cleanupError);
+        }
+        throw error;
+    }
     printSummary(handle);
+    if (opts.config.app.substrate === schema_1.Substrate.Helm) {
+        console.log('');
+        console.log(`Helm releases installed in namespace "${handle.plan.helmNamespace ?? ''}". ` +
+            'Kubernetes owns their lifecycle from here.');
+        console.log('Use `xema status` / `xema logs` / `xema down` to manage the releases.');
+        return;
+    }
     if (opts.detach) {
         if (opts.config.app.substrate !== schema_1.Substrate.Container) {
             console.log('');
@@ -53,15 +81,21 @@ function printSummary(handle) {
     }
 }
 function waitForSignal(handle) {
-    return new Promise((resolve) => {
+    return new Promise((resolve, reject) => {
+        let shuttingDown = false;
         const shutdown = (signal) => {
+            if (shuttingDown) {
+                return;
+            }
+            shuttingDown = true;
             console.log('');
             console.log(`received ${signal}; shutting down...`);
             handle
                 .shutdown()
-                .catch(() => undefined)
+                .then(resolve, reject)
                 .finally(() => {
-                resolve();
+                process.off('SIGINT', shutdown);
+                process.off('SIGTERM', shutdown);
             });
         };
         process.on('SIGINT', shutdown);

package/dist/runtime/foreground.js.map

@@ -1 +1 @@
-{"version":3,"file":"foreground.js","sourceRoot":"","sources":["../../src/runtime/foreground.ts"],"names":[],"mappings":";;AAgBA,8CAsCC;AAtDD,4CAA6D;AAC7D,qCAAqD;AAe9C,KAAK,UAAU,iBAAiB,CAAC,IAAuB;IAC7D,MAAM,OAAO,GAAG,CAAC,KAAqB,EAAQ,EAAE;QAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,QAAQ,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,IAAI,EAAE,KAAK,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;QACnE,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,OAAO,IAAI,EAAE,KAAK,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,IAAA,eAAM,EAAC;QAC1B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO;QACP,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;KACjC,CAAC,CAAC;IAEH,YAAY,CAAC,MAAM,CAAC,CAAC;IAErB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,EAAE,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CACT,8EAA8E;gBAC5E,mDAAmD,CACtD,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,gFAAgF,CAAC,CAAC;YAC9F,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAC1C,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY,CAAC,MAAoB;IACxC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CACT,UAAU,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW;QACzE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACpE,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IAC3E,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAAoB;IACzC,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACnC,MAAM,QAAQ,GAAG,CAAC,MAAsB,EAAQ,EAAE;YAChD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,oBAAoB,CAAC,CAAC;YACpD,MAAM;iBACH,QAAQ,EAAE;iBACV,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;iBACtB,OAAO,CAAC,GAAG,EAAE;gBACZ,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACP,CAAC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"foreground.js","sourceRoot":"","sources":["../../src/runtime/foreground.ts"],"names":[],"mappings":";;AAgCA,8CAiFC;AAwBD,sCAqBC;AA9JD,uCAEmB;AACnB,4CAA6D;AAC7D,qCAGkB;AAyBX,KAAK,UAAU,iBAAiB,CACrC,IAAuB;IAEvB,MAAM,OAAO,GAAG,CAAC,KAAqB,EAAQ,EAAE;QAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,QAAQ,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,IAAI,EAAE,KAAK,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;QACnE,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,OAAO,IAAI,EAAE,KAAK,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,IAAA,eAAM,EAAC;QAC1B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;QAC/C,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS;YAChC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QACtC,qBAAqB,EAAE,IAAI,CAAC,qBAAqB,KAAK,IAAI;QAC1D,OAAO;QACP,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;KACjC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC1B,CAAC;QAAC,OAAO,YAAY,EAAE,CAAC;YACtB,MAAM,IAAA,0CAAgC,EACpC,+BAA+B,EAC/B,KAAK,EACL,YAAY,CACb,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,YAAY,CAAC,MAAM,CAAC,CAAC;IAErB,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,IAAI,EAAE,CAAC;QAKjD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CACT,yCAAyC,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,KAAK;YAC3E,4CAA4C,CAC/C,CAAC;QACF,OAAO,CAAC,GAAG,CACT,uEAAuE,CACxE,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,EAAE,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CACT,8EAA8E;gBAC5E,mDAAmD,CACtD,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CACT,gFAAgF,CACjF,CAAC;YACF,OAAO,CAAC,GAAG,CACT,+DAA+D,CAChE,CAAC;YACF,OAAO;QACT,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAC1C,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY,CAAC,MAAoB;IACxC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CACT,UAAU,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW;QACzE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACpE,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IAC3E,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAQD,SAAgB,aAAa,CAAC,MAAoB;IAChD,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,MAAM,QAAQ,GAAG,CAAC,MAAsB,EAAQ,EAAE;YAChD,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;YACD,YAAY,GAAG,IAAI,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,oBAAoB,CAAC,CAAC;YACpD,MAAM;iBACH,QAAQ,EAAE;iBACV,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;iBACrB,OAAO,CAAC,GAAG,EAAE;gBACZ,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBAChC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACnC,CAAC,CAAC,CAAC;QACP,CAAC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/infra/infra-catalog.d.ts

@@ -1,10 +1,34 @@
 import { InfraComponent } from '../config/schema';
+export declare enum InfraHealthProbeKind {
+    ContainerExec = "container-exec",
+    HostHttp = "host-http"
+}
+export interface ContainerExecHealthProbe {
+    readonly kind: InfraHealthProbeKind.ContainerExec;
+    readonly command: string;
+}
+export interface HostHttpHealthProbe {
+    readonly kind: InfraHealthProbeKind.HostHttp;
+    readonly hostPort: number;
+    readonly path: string;
+    readonly expectBody: string;
+}
+export type InfraHealthProbe = ContainerExecHealthProbe | HostHttpHealthProbe;
+export interface InfraPreStartJob {
+    readonly containerName: string;
+    readonly command: readonly string[];
+}
 export interface ManagedInfraSpec {
     readonly image: string;
     readonly containerName: string;
     readonly ports: ReadonlyArray<readonly [number, number]>;
     readonly dataPath?: string;
-    readonly healthCmd?: string;
+    readonly health: InfraHealthProbe;
+    readonly startupBudgetMs: number;
+    readonly command?: readonly string[];
+    readonly dependsOn: readonly InfraComponent[];
+    readonly requiresDatabases: readonly string[];
+    readonly preStart?: InfraPreStartJob;
 }
 export interface InfraCatalogEntry {
     readonly component: InfraComponent;
@@ -12,8 +36,17 @@ export interface InfraCatalogEntry {
     readonly managed: ManagedInfraSpec;
     readonly defaultLocalUrl?: string;
 }
+export declare const DEFAULT_KEYCLOAK_REALM = "xema";
+export declare const KEYCLOAK_ADMIN_CLIENT_ID = "user-api";
+export declare const KEYCLOAK_ADMIN_USERNAME = "admin@xema.dev";
+export declare const TEMPORAL_NAMESPACE = "xema";
+export declare const TEMPORAL_DEFAULT_RETENTION = "30d";
+export declare const KEYCLOAK_DATABASE = "keycloak_db";
+export declare const OPENFGA_DATABASE = "openfga";
+export declare const KEYCLOAK_IMPORT_DIR = "/opt/keycloak/data/import";
 export declare const INFRA_CATALOG: Readonly<Record<InfraComponent, InfraCatalogEntry>>;
 export declare const INFRA_COMPONENTS: readonly InfraComponent[];
 export declare const OBJECT_STORE_BUCKETS: readonly string[];
 export declare const SHARED_BIOMES_DATABASE = "xema_biomes";
+export declare function assertCatalogIsComplete(catalog?: Readonly<Record<InfraComponent, InfraCatalogEntry>>): void;
 //# sourceMappingURL=infra-catalog.d.ts.map

package/dist/runtime/infra/infra-catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"infra-catalog.d.ts","sourceRoot":"","sources":["../../../src/runtime/infra/infra-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAclD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAE/B,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAEzD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IAEnC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAgH5E,CAAC;AAGH,eAAO,MAAM,gBAAgB,EAAE,SAAS,cAAc,EAErD,CAAC;AAOF,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAOhD,CAAC;AAGH,eAAO,MAAM,sBAAsB,gBAAgB,CAAC"}
+{"version":3,"file":"infra-catalog.d.ts","sourceRoot":"","sources":["../../../src/runtime/infra/infra-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AA8BlD,oBAAY,oBAAoB;IAC9B,aAAa,mBAAmB;IAChC,QAAQ,cAAc;CACvB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC,aAAa,CAAC;IAElD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC,QAAQ,CAAC;IAE7C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,gBAAgB,GAAG,wBAAwB,GAAG,mBAAmB,CAAC;AAO9E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAE/B,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAEzD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAUlC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IAEjC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAErC,QAAQ,CAAC,SAAS,EAAE,SAAS,cAAc,EAAE,CAAC;IAO9C,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;CACtC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IAEnC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAGD,eAAO,MAAM,sBAAsB,SAAS,CAAC;AAS7C,eAAO,MAAM,wBAAwB,aAAa,CAAC;AAGnD,eAAO,MAAM,uBAAuB,mBAAmB,CAAC;AAQxD,eAAO,MAAM,kBAAkB,SAAS,CAAC;AAGzC,eAAO,MAAM,0BAA0B,QAAQ,CAAC;AAGhD,eAAO,MAAM,iBAAiB,gBAAgB,CAAC;AAG/C,eAAO,MAAM,gBAAgB,YAAY,CAAC;AAG1C,eAAO,MAAM,mBAAmB,8BAA8B,CAAC;AAE/D,eAAO,MAAM,aAAa,EAAE,QAAQ,CAClC,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAgOzC,CAAC;AAGH,eAAO,MAAM,gBAAgB,EAAE,SAAS,cAAc,EAErD,CAAC;AAOF,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAOhD,CAAC;AAGH,eAAO,MAAM,sBAAsB,gBAAgB,CAAC;AAapD,wBAAgB,uBAAuB,CACrC,OAAO,GAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAiB,GAC3E,IAAI,CA+DN"}