@xemahq/xema 0.13.0 → 0.15.0

package/dist/runtime/infra/infra-runner.js

@@ -1,11 +1,16 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.InfraRunner = void 0;
+exports.dependencyWaves = dependencyWaves;
 const infra_catalog_1 = require("./infra-catalog");
+const infra_environment_1 = require("./infra-environment");
+const keycloak_realm_1 = require("./keycloak-realm");
+const postgres_endpoint_1 = require("./postgres-endpoint");
+const cleanup_1 = require("../cleanup");
 const schema_1 = require("../config/schema");
 const docker_cli_1 = require("../runner/docker-cli");
-const DEFAULT_HEALTH_TIMEOUT_MS = 60_000;
 const HEALTH_INTERVAL_MS = 1_000;
+const HEALTH_HTTP_TIMEOUT_MS = 2_000;
 class InfraRunner {
     opts;
     docker;
@@ -15,68 +20,183 @@ class InfraRunner {
         this.docker = new docker_cli_1.DockerCli(opts.bin ?? 'docker');
         this.volumePrefix = opts.volumePrefix ?? 'xema';
     }
+    async assertCredentialStoreCompatible(plan, hasCredentialStore) {
+        if (hasCredentialStore) {
+            return;
+        }
+        const custodiedComponents = [
+            schema_1.InfraComponent.Postgres,
+            schema_1.InfraComponent.ObjectStore,
+        ];
+        if (plan.managed.some((entry) => entry.component === schema_1.InfraComponent.Postgres ||
+            entry.component === schema_1.InfraComponent.ObjectStore) &&
+            !(await this.docker.available())) {
+            throw new Error('The container runtime is not reachable, so managed-local credential compatibility cannot be verified.');
+        }
+        for (const component of custodiedComponents) {
+            if (!plan.managed.some((entry) => entry.component === component)) {
+                continue;
+            }
+            const spec = infra_catalog_1.INFRA_CATALOG[component].managed;
+            if (spec.dataPath !== undefined &&
+                (await this.docker.volumeExists(`${this.volumePrefix}-${component}-data`))) {
+                throw new Error(`Managed ${component} data predates per-installation credential custody. ` +
+                    'Run `xema down --purge` to explicitly remove the legacy local data, then launch again.');
+            }
+        }
+    }
     async bringUp(plan) {
         await this.docker.ensureNetwork(this.opts.network);
+        const allManagedInfra = await this.docker.launcherInfraContainersStrict();
+        const ownedManagedInfra = await this.docker.launcherInfraContainersStrict(this.opts.installationId);
+        const owned = new Set(ownedManagedInfra);
+        const foreign = allManagedInfra.filter((name) => !owned.has(name));
+        if (foreign.length > 0) {
+            throw new Error(`Local managed infrastructure is already owned by another installation: ${foreign.join(', ')}. Stop that installation before starting this fixed-port local substrate.`);
+        }
+        await (0, cleanup_1.runCleanupOperations)(ownedManagedInfra.map((containerName) => ({
+            operation: `remove prior managed infrastructure ${containerName}`,
+            run: async () => {
+                await this.docker.run(['rm', '-f', containerName]);
+            },
+        })));
         const handles = [];
-        for (const resolved of plan.managed) {
-            const spec = infra_catalog_1.INFRA_CATALOG[resolved.component].managed;
-            await this.docker.runQuiet(['rm', '-f', spec.containerName]);
-            const args = [
+        for (const wave of dependencyWaves(plan)) {
+            for (const component of wave) {
+                await this.provisionDependencies(plan, component);
+            }
+            for (const component of wave) {
+                await this.startComponent(plan, component);
+                handles.push({
+                    component,
+                    containerName: infra_catalog_1.INFRA_CATALOG[component].managed.containerName,
+                });
+            }
+            await this.gate(wave);
+        }
+        return handles;
+    }
+    async waitHealthy(plan) {
+        await this.gate(plan.managed.map((entry) => entry.component));
+    }
+    async bootstrap(plan, roster) {
+        if (plan.byComponent.get(schema_1.InfraComponent.Postgres)?.mode === undefined) {
+            return;
+        }
+        const pgManaged = plan.managed.some((m) => m.component === schema_1.InfraComponent.Postgres);
+        if (pgManaged &&
+            (await this.isContainerRunning(infra_catalog_1.INFRA_CATALOG[schema_1.InfraComponent.Postgres].managed.containerName))) {
+            const databases = new Set([infra_catalog_1.SHARED_BIOMES_DATABASE]);
+            for (const entry of roster) {
+                databases.add(`${entry.name.replace(/-/g, '_')}_db`);
+            }
+            await this.createDatabases(databases);
+        }
+        const minioManaged = plan.managed.some((m) => m.component === schema_1.InfraComponent.ObjectStore);
+        if (minioManaged &&
+            (await this.isContainerRunning(infra_catalog_1.INFRA_CATALOG[schema_1.InfraComponent.ObjectStore].managed.containerName))) {
+            await this.bootstrapObjectStore();
+        }
+    }
+    async provisionDependencies(plan, component) {
+        const spec = infra_catalog_1.INFRA_CATALOG[component].managed;
+        if (spec.requiresDatabases.length > 0) {
+            this.assertPostgresIsManaged(plan, component, spec.requiresDatabases);
+            await this.createDatabases(new Set(spec.requiresDatabases));
+        }
+        if (spec.preStart !== undefined) {
+            await this.docker.runQuiet(['rm', '-f', spec.preStart.containerName]);
+            const env = this.componentEnvironment(plan, component);
+            await this.docker.run([
                 'run',
-                '-d',
+                '--rm',
                 '--name',
-                spec.containerName,
+                spec.preStart.containerName,
                 '--label',
                 `${docker_cli_1.LAUNCHER_LABEL}=infra`,
+                '--label',
+                `${docker_cli_1.INSTALLATION_ID_LABEL}=${this.opts.installationId}`,
                 '--network',
                 this.opts.network,
-                '--restart',
-                'unless-stopped',
-            ];
-            for (const [hostPort, containerPort] of spec.ports) {
-                args.push('-p', `${String(hostPort)}:${String(containerPort)}`);
-            }
-            if (spec.dataPath) {
-                args.push('-v', `${this.volumePrefix}-${resolved.component}-data:${spec.dataPath}`);
-            }
-            args.push(spec.image);
-            await this.docker.run(args);
-            handles.push({ component: resolved.component, containerName: spec.containerName });
+                ...envFlags(env),
+                spec.image,
+                ...spec.preStart.command,
+            ], { env: { ...process.env, ...env } });
         }
-        return handles;
     }
-    async waitHealthy(plan) {
-        const timeout = this.opts.healthTimeoutMs ?? DEFAULT_HEALTH_TIMEOUT_MS;
-        for (const resolved of plan.managed) {
-            const spec = infra_catalog_1.INFRA_CATALOG[resolved.component].managed;
-            if (!spec.healthCmd) {
-                continue;
-            }
+    async startComponent(plan, component) {
+        const spec = infra_catalog_1.INFRA_CATALOG[component].managed;
+        const args = [
+            'run',
+            '-d',
+            '--name',
+            spec.containerName,
+            '--label',
+            `${docker_cli_1.LAUNCHER_LABEL}=infra`,
+            '--label',
+            `${docker_cli_1.INSTALLATION_ID_LABEL}=${this.opts.installationId}`,
+            '--network',
+            this.opts.network,
+            '--restart',
+            'unless-stopped',
+        ];
+        for (const [hostPort, containerPort] of spec.ports) {
+            args.push('-p', `${String(hostPort)}:${String(containerPort)}`);
+        }
+        if (spec.dataPath) {
+            args.push('-v', `${this.volumePrefix}-${component}-data:${spec.dataPath}`);
+        }
+        if (component === schema_1.InfraComponent.Keycloak) {
+            const admin = this.requireCredentials('keycloakAdmin', component);
+            const realm = (0, keycloak_realm_1.materializeRealm)(this.opts.installationId, {
+                [keycloak_realm_1.RealmPlaceholder.Realm]: this.opts.keycloakRealm,
+                [keycloak_realm_1.RealmPlaceholder.AdminUsername]: admin.username,
+                [keycloak_realm_1.RealmPlaceholder.AdminPassword]: admin.password,
+                [keycloak_realm_1.RealmPlaceholder.ClientSecret]: this.requireCredentials('keycloakClient', component).password,
+            }, this.opts.stateRoot);
+            args.push('-v', `${realm.path}:${infra_catalog_1.KEYCLOAK_IMPORT_DIR}/${realm.fileName}:ro`);
+        }
+        const containerEnv = this.componentEnvironment(plan, component);
+        args.push(...envFlags(containerEnv));
+        args.push(spec.image, ...(spec.command ?? []));
+        await this.docker.run(args, {
+            env: { ...process.env, ...containerEnv },
+        });
+    }
+    async gate(components) {
+        for (const component of components) {
+            const spec = infra_catalog_1.INFRA_CATALOG[component].managed;
+            const timeout = this.opts.healthTimeoutMs ?? spec.startupBudgetMs;
             const deadline = Date.now() + timeout;
             for (;;) {
-                if (await this.execOk(spec.containerName, spec.healthCmd)) {
+                if (await this.probe(spec.containerName, spec.health)) {
                     break;
                 }
+                if (!(await this.isContainerRunning(spec.containerName))) {
+                    throw new Error(`infra component ${component} exited before becoming healthy. ` +
+                        `Inspect it with: docker logs ${spec.containerName}`);
+                }
                 if (Date.now() >= deadline) {
-                    throw new Error(`infra component ${resolved.component} did not become healthy within ${String(timeout)}ms`);
+                    throw new Error(`infra component ${component} did not become healthy within ${String(timeout)}ms. ` +
+                        `Inspect it with: docker logs ${spec.containerName}`);
                 }
                 await delay(HEALTH_INTERVAL_MS);
             }
         }
     }
-    async bootstrap(plan, roster) {
-        if (plan.byComponent.get(schema_1.InfraComponent.Postgres)?.mode === undefined) {
-            return;
+    async probe(containerName, health) {
+        if (health.kind === infra_catalog_1.InfraHealthProbeKind.ContainerExec) {
+            return this.execOk(containerName, health.command);
         }
-        const pgManaged = plan.managed.some((m) => m.component === schema_1.InfraComponent.Postgres);
-        if (pgManaged &&
-            (await this.isContainerRunning(infra_catalog_1.INFRA_CATALOG[schema_1.InfraComponent.Postgres].managed.containerName))) {
-            await this.bootstrapPostgres(roster);
+        try {
+            const response = await fetch(`http://127.0.0.1:${String(health.hostPort)}${health.path}`, { signal: AbortSignal.timeout(HEALTH_HTTP_TIMEOUT_MS) });
+            if (!response.ok) {
+                return false;
+            }
+            return (await response.text()).includes(health.expectBody);
         }
-        const minioManaged = plan.managed.some((m) => m.component === schema_1.InfraComponent.ObjectStore);
-        if (minioManaged &&
-            (await this.isContainerRunning(infra_catalog_1.INFRA_CATALOG[schema_1.InfraComponent.ObjectStore].managed.containerName))) {
-            await this.bootstrapObjectStore();
+        catch {
+            return false;
         }
     }
     async isContainerRunning(name) {
@@ -91,26 +211,30 @@ class InfraRunner {
         ]);
         return out.trim() === name;
     }
-    async bootstrapPostgres(roster) {
+    async createDatabases(databases) {
         const pg = infra_catalog_1.INFRA_CATALOG[schema_1.InfraComponent.Postgres].managed.containerName;
-        const databases = new Set([infra_catalog_1.SHARED_BIOMES_DATABASE]);
-        for (const entry of roster) {
-            databases.add(`${entry.name.replace(/-/g, '_')}_db`);
-        }
+        const credentials = this.requireCredentials('postgres', schema_1.InfraComponent.Postgres);
         for (const db of databases) {
             const out = await this.docker.runQuiet([
                 'exec',
                 pg,
                 'psql',
                 '-U',
-                'postgres',
+                credentials.username,
                 '-tc',
                 `SELECT 1 FROM pg_database WHERE datname='${db}'`,
             ]);
             if (out.trim() === '1') {
                 continue;
             }
-            await this.docker.runQuiet(['exec', pg, 'createdb', '-U', 'postgres', db]);
+            await this.docker.runQuiet([
+                'exec',
+                pg,
+                'createdb',
+                '-U',
+                credentials.username,
+                db,
+            ]);
         }
     }
     async bootstrapObjectStore() {
@@ -118,16 +242,19 @@ class InfraRunner {
         await this.docker.runQuiet([
             'exec',
             minio,
-            'mc',
-            'alias',
-            'set',
-            'local',
-            'http://localhost:9000',
-            'minioadmin',
-            'minioadmin',
+            'sh',
+            '-c',
+            'mc alias set local http://localhost:9000 "$MINIO_ROOT_USER" "$MINIO_ROOT_PASSWORD"',
         ]);
         for (const bucket of infra_catalog_1.OBJECT_STORE_BUCKETS) {
-            await this.docker.runQuiet(['exec', minio, 'mc', 'mb', '-p', `local/${bucket}`]);
+            await this.docker.runQuiet([
+                'exec',
+                minio,
+                'mc',
+                'mb',
+                '-p',
+                `local/${bucket}`,
+            ]);
         }
     }
     async execOk(container, cmd) {
@@ -139,8 +266,71 @@ class InfraRunner {
             return false;
         }
     }
+    componentEnvironment(plan, component) {
+        return (0, infra_environment_1.infraContainerEnvironment)(component, {
+            ...(this.opts.credentials !== undefined
+                ? { credentials: this.opts.credentials }
+                : {}),
+            postgres: this.postgresEndpoint(plan),
+            realm: this.opts.keycloakRealm,
+        });
+    }
+    postgresEndpoint(plan) {
+        return (0, postgres_endpoint_1.resolvePostgresEndpoint)(plan, schema_1.Substrate.Container);
+    }
+    assertPostgresIsManaged(plan, component, databases) {
+        const postgres = plan.byComponent.get(schema_1.InfraComponent.Postgres);
+        if (postgres?.mode === schema_1.InfraMode.Managed) {
+            return;
+        }
+        throw new Error(`Managed "${component}" requires the database(s) ${databases.join(', ')} to exist, ` +
+            `but infra.postgres is "${postgres?.mode ?? 'absent'}" — the launcher cannot create ` +
+            'them on a server it does not own. Either set infra.postgres to "managed", or create ' +
+            `those databases on the external server and set infra.${component} to "external".`);
+    }
+    requireCredentials(key, component) {
+        const credentials = this.opts.credentials?.[key];
+        if (credentials === undefined) {
+            throw new Error(`Managed-local "${key}" credentials were not resolved before launching ${component}.`);
+        }
+        return credentials;
+    }
 }
 exports.InfraRunner = InfraRunner;
+function dependencyWaves(plan) {
+    const managed = plan.managed.map((entry) => entry.component);
+    const inPlan = new Set(managed);
+    const depth = new Map();
+    const depthOf = (component) => {
+        const known = depth.get(component);
+        if (known !== undefined) {
+            return known;
+        }
+        const dependencies = infra_catalog_1.INFRA_CATALOG[component].managed.dependsOn.filter((d) => inPlan.has(d));
+        const value = dependencies.length === 0
+            ? 0
+            : 1 + Math.max(...dependencies.map((d) => depthOf(d)));
+        depth.set(component, value);
+        return value;
+    };
+    const waves = new Map();
+    for (const component of managed) {
+        const level = depthOf(component);
+        const wave = waves.get(level);
+        if (wave === undefined) {
+            waves.set(level, [component]);
+        }
+        else {
+            wave.push(component);
+        }
+    }
+    return [...waves.keys()]
+        .sort((a, b) => a - b)
+        .map((level) => waves.get(level) ?? []);
+}
+function envFlags(env) {
+    return Object.keys(env).flatMap((name) => ['--env', name]);
+}
 function delay(ms) {
     return new Promise((resolve) => {
         setTimeout(resolve, ms);

package/dist/runtime/infra/infra-runner.js.map

@@ -1 +1 @@
-{"version":3,"file":"infra-runner.js","sourceRoot":"","sources":["../../../src/runtime/infra/infra-runner.ts"],"names":[],"mappings":";;;AAAA,mDAIyB;AACzB,6CAAkD;AAClD,qDAAiE;AAgCjE,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC,MAAa,WAAW;IAIO;IAHZ,MAAM,CAAY;IAClB,YAAY,CAAS;IAEtC,YAA6B,IAAwB;QAAxB,SAAI,GAAJ,IAAI,CAAoB;QACnD,IAAI,CAAC,MAAM,GAAG,IAAI,sBAAS,CAAC,IAAI,CAAC,GAAG,IAAI,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAe;QAC3B,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,OAAO,GAAyB,EAAE,CAAC;QACzC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,6BAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YACvD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;YAE7D,MAAM,IAAI,GAAG;gBACX,KAAK;gBACL,IAAI;gBACJ,QAAQ;gBACR,IAAI,CAAC,aAAa;gBAClB,SAAS;gBACT,GAAG,2BAAc,QAAQ;gBACzB,WAAW;gBACX,IAAI,CAAC,IAAI,CAAC,OAAO;gBACjB,WAAW;gBACX,gBAAgB;aACjB,CAAC;YACF,KAAK,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACnD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,YAAY,IAAI,QAAQ,CAAC,SAAS,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAEtB,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAGD,KAAK,CAAC,WAAW,CAAC,IAAe;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,yBAAyB,CAAC;QACvE,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,6BAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YACtC,SAAS,CAAC;gBACR,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC1D,MAAM;gBACR,CAAC;gBACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;oBAC3B,MAAM,IAAI,KAAK,CACb,mBAAmB,QAAQ,CAAC,SAAS,kCAAkC,MAAM,CAAC,OAAO,CAAC,IAAI,CAC3F,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAOD,KAAK,CAAC,SAAS,CAAC,IAAe,EAAE,MAA8B;QAC7D,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,QAAQ,CAAC,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YACtE,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,uBAAc,CAAC,QAAQ,CAAC,CAAC;QACpF,IACE,SAAS;YACT,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,6BAAa,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,EAC7F,CAAC;YACD,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,uBAAc,CAAC,WAAW,CAAC,CAAC;QAC1F,IACE,YAAY;YACZ,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,6BAAa,CAAC,uBAAc,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,EAChG,CAAC;YACD,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACpC,CAAC;IACH,CAAC;IAQO,KAAK,CAAC,kBAAkB,CAAC,IAAY;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YACrC,IAAI;YACJ,UAAU;YACV,SAAS,IAAI,GAAG;YAChB,UAAU;YACV,gBAAgB;YAChB,UAAU;YACV,YAAY;SACb,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,MAA8B;QAC5D,MAAM,EAAE,GAAG,6BAAa,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QACxE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,CAAC,sCAAsB,CAAC,CAAC,CAAC;QAC5D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAG3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACrC,MAAM;gBACN,EAAE;gBACF,MAAM;gBACN,IAAI;gBACJ,UAAU;gBACV,KAAK;gBACL,4CAA4C,EAAE,GAAG;aAClD,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACvB,SAAS;YACX,CAAC;YACD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,oBAAoB;QAChC,MAAM,KAAK,GAAG,6BAAa,CAAC,uBAAc,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QAC9E,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YACzB,MAAM;YACN,KAAK;YACL,IAAI;YACJ,OAAO;YACP,KAAK;YACL,OAAO;YACP,uBAAuB;YACvB,YAAY;YACZ,YAAY;SACb,CAAC,CAAC;QACH,KAAK,MAAM,MAAM,IAAI,oCAAoB,EAAE,CAAC;YAC1C,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,GAAW;QACjD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAhKD,kCAgKC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"infra-runner.js","sourceRoot":"","sources":["../../../src/runtime/infra/infra-runner.ts"],"names":[],"mappings":";;;AAkgBA,0CAqCC;AAviBD,mDAOyB;AACzB,2DAAgE;AAChE,qDAAsE;AACtE,2DAG6B;AAC7B,wCAAkD;AAClD,6CAAwE;AACxE,qDAI8B;AAsD9B,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAErC,MAAa,WAAW;IAIO;IAHZ,MAAM,CAAY;IAClB,YAAY,CAAS;IAEtC,YAA6B,IAAwB;QAAxB,SAAI,GAAJ,IAAI,CAAoB;QACnD,IAAI,CAAC,MAAM,GAAG,IAAI,sBAAS,CAAC,IAAI,CAAC,GAAG,IAAI,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC;IAClD,CAAC;IAMD,KAAK,CAAC,+BAA+B,CACnC,IAAe,EACf,kBAA2B;QAE3B,IAAI,kBAAkB,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QACD,MAAM,mBAAmB,GAAG;YAC1B,uBAAc,CAAC,QAAQ;YACvB,uBAAc,CAAC,WAAW;SAClB,CAAC;QACX,IACE,IAAI,CAAC,OAAO,CAAC,IAAI,CACf,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,SAAS,KAAK,uBAAc,CAAC,QAAQ;YAC3C,KAAK,CAAC,SAAS,KAAK,uBAAc,CAAC,WAAW,CACjD;YACD,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,EAChC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,uGAAuG,CACxG,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,mBAAmB,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,CAAC;gBACjE,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,6BAAa,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YAC9C,IACE,IAAI,CAAC,QAAQ,KAAK,SAAS;gBAC3B,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAC7B,GAAG,IAAI,CAAC,YAAY,IAAI,SAAS,OAAO,CACzC,CAAC,EACF,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,WAAW,SAAS,sDAAsD;oBACxE,wFAAwF,CAC3F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAe;QAC3B,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,eAAe,GACnB,MAAM,IAAI,CAAC,MAAM,CAAC,6BAA6B,EAAE,CAAC;QACpD,MAAM,iBAAiB,GACrB,MAAM,IAAI,CAAC,MAAM,CAAC,6BAA6B,CAC7C,IAAI,CAAC,IAAI,CAAC,cAAc,CACzB,CAAC;QACJ,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,0EAA0E,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,2EAA2E,CACxK,CAAC;QACJ,CAAC;QACD,MAAM,IAAA,8BAAoB,EACxB,iBAAiB,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;YACxC,SAAS,EAAE,uCAAuC,aAAa,EAAE;YACjE,GAAG,EAAE,KAAK,IAAI,EAAE;gBACd,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;YACrD,CAAC;SACF,CAAC,CAAC,CACJ,CAAC;QAEF,MAAM,OAAO,GAAyB,EAAE,CAAC;QACzC,KAAK,MAAM,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YACpD,CAAC;YACD,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC;oBACX,SAAS;oBACT,aAAa,EAAE,6BAAa,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,aAAa;iBAC9D,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAQD,KAAK,CAAC,WAAW,CAAC,IAAe;QAC/B,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IAChE,CAAC;IAOD,KAAK,CAAC,SAAS,CACb,IAAe,EACf,MAA8B;QAE9B,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,QAAQ,CAAC,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YACtE,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CACjC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,uBAAc,CAAC,QAAQ,CAC/C,CAAC;QACF,IACE,SAAS;YACT,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAC5B,6BAAa,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,aAAa,CAC7D,CAAC,EACF,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,CAAC,sCAAsB,CAAC,CAAC,CAAC;YAC5D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CACpC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,uBAAc,CAAC,WAAW,CAClD,CAAC;QACF,IACE,YAAY;YACZ,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAC5B,6BAAa,CAAC,uBAAc,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,aAAa,CAChE,CAAC,EACF,CAAC;YACD,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACpC,CAAC;IACH,CAAC;IAMO,KAAK,CAAC,qBAAqB,CACjC,IAAe,EACf,SAAyB;QAEzB,MAAM,IAAI,GAAG,6BAAa,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;QAC9C,IAAI,IAAI,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACtE,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAGhC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;YACtE,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YACvD,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACnB;gBACE,KAAK;gBACL,MAAM;gBACN,QAAQ;gBACR,IAAI,CAAC,QAAQ,CAAC,aAAa;gBAC3B,SAAS;gBACT,GAAG,2BAAc,QAAQ;gBACzB,SAAS;gBACT,GAAG,kCAAqB,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;gBACtD,WAAW;gBACX,IAAI,CAAC,IAAI,CAAC,OAAO;gBACjB,GAAG,QAAQ,CAAC,GAAG,CAAC;gBAChB,IAAI,CAAC,KAAK;gBACV,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO;aACzB,EACD,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,EAAE,CACpC,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,IAAe,EACf,SAAyB;QAEzB,MAAM,IAAI,GAAG,6BAAa,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;QAC9C,MAAM,IAAI,GAAG;YACX,KAAK;YACL,IAAI;YACJ,QAAQ;YACR,IAAI,CAAC,aAAa;YAClB,SAAS;YACT,GAAG,2BAAc,QAAQ;YACzB,SAAS;YACT,GAAG,kCAAqB,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;YACtD,WAAW;YACX,IAAI,CAAC,IAAI,CAAC,OAAO;YACjB,WAAW;YACX,gBAAgB;SACjB,CAAC;QACF,KAAK,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACnD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,YAAY,IAAI,SAAS,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,SAAS,KAAK,uBAAc,CAAC,QAAQ,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;YAClE,MAAM,KAAK,GAAG,IAAA,iCAAgB,EAC5B,IAAI,CAAC,IAAI,CAAC,cAAc,EACxB;gBACE,CAAC,iCAAgB,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa;gBACjD,CAAC,iCAAgB,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,QAAQ;gBAChD,CAAC,iCAAgB,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,QAAQ;gBAChD,CAAC,iCAAgB,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,kBAAkB,CACtD,gBAAgB,EAChB,SAAS,CACV,CAAC,QAAQ;aACX,EACD,IAAI,CAAC,IAAI,CAAC,SAAS,CACpB,CAAC;YACF,IAAI,CAAC,IAAI,CACP,IAAI,EACJ,GAAG,KAAK,CAAC,IAAI,IAAI,mCAAmB,IAAI,KAAK,CAAC,QAAQ,KAAK,CAC5D,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;QAE/C,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE;YAC1B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,YAAY,EAAE;SACzC,CAAC,CAAC;IACL,CAAC;IAGO,KAAK,CAAC,IAAI,CAAC,UAAqC;QACtD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,6BAAa,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe,CAAC;YAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YACtC,SAAS,CAAC;gBACR,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBACtD,MAAM;gBACR,CAAC;gBAID,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;oBACzD,MAAM,IAAI,KAAK,CACb,mBAAmB,SAAS,mCAAmC;wBAC7D,gCAAgC,IAAI,CAAC,aAAa,EAAE,CACvD,CAAC;gBACJ,CAAC;gBACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;oBAC3B,MAAM,IAAI,KAAK,CACb,mBAAmB,SAAS,kCAAkC,MAAM,CAAC,OAAO,CAAC,MAAM;wBACjF,gCAAgC,IAAI,CAAC,aAAa,EAAE,CACvD,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAK,CACjB,aAAqB,EACrB,MAAwB;QAExB,IAAI,MAAM,CAAC,IAAI,KAAK,oCAAoB,CAAC,aAAa,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,oBAAoB,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,EAC3D,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,sBAAsB,CAAC,EAAE,CACxD,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAQO,KAAK,CAAC,kBAAkB,CAAC,IAAY;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YACrC,IAAI;YACJ,UAAU;YACV,SAAS,IAAI,GAAG;YAChB,UAAU;YACV,gBAAgB;YAChB,UAAU;YACV,YAAY;SACb,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC;IAC7B,CAAC;IAQO,KAAK,CAAC,eAAe,CAAC,SAA8B;QAC1D,MAAM,EAAE,GAAG,6BAAa,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QACxE,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CACzC,UAAU,EACV,uBAAc,CAAC,QAAQ,CACxB,CAAC;QACF,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACrC,MAAM;gBACN,EAAE;gBACF,MAAM;gBACN,IAAI;gBACJ,WAAW,CAAC,QAAQ;gBACpB,KAAK;gBACL,4CAA4C,EAAE,GAAG;aAClD,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACvB,SAAS;YACX,CAAC;YACD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACzB,MAAM;gBACN,EAAE;gBACF,UAAU;gBACV,IAAI;gBACJ,WAAW,CAAC,QAAQ;gBACpB,EAAE;aACH,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,oBAAoB;QAChC,MAAM,KAAK,GACT,6BAAa,CAAC,uBAAc,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QAClE,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YACzB,MAAM;YACN,KAAK;YACL,IAAI;YACJ,IAAI;YACJ,oFAAoF;SACrF,CAAC,CAAC;QACH,KAAK,MAAM,MAAM,IAAI,oCAAoB,EAAE,CAAC;YAC1C,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACzB,MAAM;gBACN,KAAK;gBACL,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,SAAS,MAAM,EAAE;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,GAAW;QACjD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,oBAAoB,CAC1B,IAAe,EACf,SAAyB;QAEzB,OAAO,IAAA,6CAAyB,EAAC,SAAS,EAAE;YAC1C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS;gBACrC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;gBACxC,CAAC,CAAC,EAAE,CAAC;YACP,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;YACrC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa;SAC/B,CAAC,CAAC;IACL,CAAC;IAEO,gBAAgB,CAAC,IAAe;QACtC,OAAO,IAAA,2CAAuB,EAAC,IAAI,EAAE,kBAAS,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;IAQO,uBAAuB,CAC7B,IAAe,EACf,SAAyB,EACzB,SAA4B;QAE5B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,QAAQ,EAAE,IAAI,KAAK,kBAAS,CAAC,OAAO,EAAE,CAAC;YACzC,OAAO;QACT,CAAC;QACD,MAAM,IAAI,KAAK,CACb,YAAY,SAAS,8BAA8B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa;YAClF,0BAA0B,QAAQ,EAAE,IAAI,IAAI,QAAQ,iCAAiC;YACrF,sFAAsF;YACtF,wDAAwD,SAAS,iBAAiB,CACrF,CAAC;IACJ,CAAC;IAEO,kBAAkB,CACxB,GAAyC,EACzC,SAAyB;QAEzB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,kBAAkB,GAAG,oDAAoD,SAAS,GAAG,CACtF,CAAC;QACJ,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;CACF;AA7aD,kCA6aC;AAOD,SAAgB,eAAe,CAC7B,IAAe;IAEf,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAChD,MAAM,OAAO,GAAG,CAAC,SAAyB,EAAU,EAAE;QACpD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QAGD,MAAM,YAAY,GAAG,6BAAa,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC3E,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CACd,CAAC;QACF,MAAM,KAAK,GACT,YAAY,CAAC,MAAM,KAAK,CAAC;YACvB,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAClD,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;SACrB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;SACrB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AAC5C,CAAC;AAGD,SAAS,QAAQ,CAAC,GAAqC;IACrD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/infra/keycloak-realm.d.ts

@@ -0,0 +1,25 @@
+import type { InfraPlan } from './infra-plan';
+export declare function resolveKeycloakRealm(infra: InfraPlan): string;
+export declare enum RealmPlaceholder {
+    Realm = "XEMA_KEYCLOAK_REALM",
+    AdminUsername = "XEMA_KEYCLOAK_ADMIN_USERNAME",
+    AdminPassword = "XEMA_KEYCLOAK_ADMIN_PASSWORD",
+    ClientSecret = "XEMA_KEYCLOAK_CLIENT_SECRET"
+}
+export interface RealmRenderValues {
+    readonly [RealmPlaceholder.Realm]: string;
+    readonly [RealmPlaceholder.AdminUsername]: string;
+    readonly [RealmPlaceholder.AdminPassword]: string;
+    readonly [RealmPlaceholder.ClientSecret]: string;
+}
+export declare function realmTemplateCandidates(): readonly string[];
+export declare function readRealmTemplate(): string;
+export declare function renderRealm(template: string, values: RealmRenderValues): string;
+export declare function defaultStateRoot(): string;
+export declare function realmStateDirectory(installationId: string, stateRoot?: string): string;
+export interface RenderedRealm {
+    readonly path: string;
+    readonly fileName: string;
+}
+export declare function materializeRealm(installationId: string, values: RealmRenderValues, stateRoot?: string): RenderedRealm;
+//# sourceMappingURL=keycloak-realm.d.ts.map

package/dist/runtime/infra/keycloak-realm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keycloak-realm.d.ts","sourceRoot":"","sources":["../../../src/runtime/infra/keycloak-realm.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AA0C9C,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAK7D;AAGD,oBAAY,gBAAgB;IAC1B,KAAK,wBAAwB;IAC7B,aAAa,iCAAiC;IAC9C,aAAa,iCAAiC;IAC9C,YAAY,gCAAgC;CAC7C;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAClD,QAAQ,CAAC,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAClD,QAAQ,CAAC,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAClD;AAaD,wBAAgB,uBAAuB,IAAI,SAAS,MAAM,EAAE,CAS3D;AAGD,wBAAgB,iBAAiB,IAAI,MAAM,CAa1C;AAaD,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAwB/E;AAkCD,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAGD,wBAAgB,mBAAmB,CACjC,cAAc,EAAE,MAAM,EACtB,SAAS,GAAE,MAA2B,GACrC,MAAM,CAER;AAED,MAAM,WAAW,aAAa;IAE5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAQD,wBAAgB,gBAAgB,CAC9B,cAAc,EAAE,MAAM,EACtB,MAAM,EAAE,iBAAiB,EACzB,SAAS,CAAC,EAAE,MAAM,GACjB,aAAa,CAkBf"}

package/dist/runtime/infra/keycloak-realm.js

@@ -0,0 +1,116 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RealmPlaceholder = void 0;
+exports.resolveKeycloakRealm = resolveKeycloakRealm;
+exports.realmTemplateCandidates = realmTemplateCandidates;
+exports.readRealmTemplate = readRealmTemplate;
+exports.renderRealm = renderRealm;
+exports.defaultStateRoot = defaultStateRoot;
+exports.realmStateDirectory = realmStateDirectory;
+exports.materializeRealm = materializeRealm;
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const infra_catalog_1 = require("./infra-catalog");
+const schema_1 = require("../config/schema");
+const paths_1 = require("../paths");
+const REALM_ASSET_RELPATH = (0, node_path_1.join)('keycloak', 'realm-xema.json');
+function resolveKeycloakRealm(infra) {
+    return (infra.byComponent.get(schema_1.InfraComponent.Keycloak)?.config.realm ??
+        infra_catalog_1.DEFAULT_KEYCLOAK_REALM);
+}
+var RealmPlaceholder;
+(function (RealmPlaceholder) {
+    RealmPlaceholder["Realm"] = "XEMA_KEYCLOAK_REALM";
+    RealmPlaceholder["AdminUsername"] = "XEMA_KEYCLOAK_ADMIN_USERNAME";
+    RealmPlaceholder["AdminPassword"] = "XEMA_KEYCLOAK_ADMIN_PASSWORD";
+    RealmPlaceholder["ClientSecret"] = "XEMA_KEYCLOAK_CLIENT_SECRET";
+})(RealmPlaceholder || (exports.RealmPlaceholder = RealmPlaceholder = {}));
+const PRIVATE_DIRECTORY_MODE = 0o700;
+const MOUNTED_FILE_MODE = 0o644;
+function realmTemplateCandidates() {
+    return [
+        (0, node_path_1.join)((0, paths_1.vendoredAssetsDir)(), REALM_ASSET_RELPATH),
+        (0, node_path_1.resolve)(__dirname, '..', '..', '..', 'assets', REALM_ASSET_RELPATH),
+    ];
+}
+function readRealmTemplate() {
+    const candidates = realmTemplateCandidates();
+    for (const candidate of candidates) {
+        if ((0, node_fs_1.existsSync)(candidate)) {
+            return (0, node_fs_1.readFileSync)(candidate, 'utf8');
+        }
+    }
+    throw new Error('The managed Keycloak realm template is missing from this install. Tried:\n' +
+        candidates.map((c) => `  - ${c}`).join('\n') +
+        '\nWithout it the launcher would start a Keycloak with no "xema" realm and every ' +
+        'service would fail JWT verification at boot. Reinstall @xemahq/xema.');
+}
+function renderRealm(template, values) {
+    const parsed = JSON.parse(template);
+    const seen = new Set();
+    const rendered = substitute(parsed, values, seen);
+    const missing = Object.values(RealmPlaceholder).filter((p) => !seen.has(p));
+    if (missing.length > 0) {
+        throw new Error(`The Keycloak realm template does not carry placeholder(s): ${missing.join(', ')}. ` +
+            'The template and the launcher have drifted; a realm rendered from it would not ' +
+            'match the credentials the platform is given.');
+    }
+    const body = `${JSON.stringify(rendered, null, 2)}\n`;
+    const leftover = /\$\{XEMA_[A-Z0-9_]+\}/.exec(body);
+    if (leftover !== null) {
+        throw new Error(`The Keycloak realm template carries an unknown placeholder ${leftover[0]}. ` +
+            'Add it to RealmPlaceholder (and supply a value) — an unsubstituted placeholder ' +
+            'would be imported into Keycloak verbatim.');
+    }
+    return body;
+}
+function substitute(value, values, seen) {
+    if (typeof value === 'string') {
+        return value.replace(/\$\{(XEMA_[A-Z0-9_]+)\}/g, (match, name) => {
+            if (!isKnownPlaceholder(name)) {
+                return match;
+            }
+            seen.add(name);
+            return values[name];
+        });
+    }
+    if (Array.isArray(value)) {
+        return value.map((item) => substitute(item, values, seen));
+    }
+    if (typeof value === 'object' && value !== null) {
+        const out = {};
+        for (const [key, item] of Object.entries(value)) {
+            out[key] = substitute(item, values, seen);
+        }
+        return out;
+    }
+    return value;
+}
+function isKnownPlaceholder(name) {
+    return Object.values(RealmPlaceholder).includes(name);
+}
+function defaultStateRoot() {
+    return (0, node_path_1.join)((0, node_os_1.homedir)(), '.xema', 'installations');
+}
+function realmStateDirectory(installationId, stateRoot = defaultStateRoot()) {
+    return (0, node_path_1.join)(stateRoot, installationId, 'keycloak');
+}
+function materializeRealm(installationId, values, stateRoot) {
+    const realm = values[RealmPlaceholder.Realm];
+    if (!/^[A-Za-z0-9._-]+$/.test(realm)) {
+        throw new Error(`Keycloak realm name "${realm}" is not a bare identifier. It becomes part of a file ` +
+            'name and of every service\'s JWT issuer URL, so only letters, digits, ".", "_" and ' +
+            '"-" are accepted.');
+    }
+    const body = renderRealm(readRealmTemplate(), values);
+    const directory = realmStateDirectory(installationId, stateRoot);
+    (0, node_fs_1.mkdirSync)(directory, { recursive: true, mode: PRIVATE_DIRECTORY_MODE });
+    const fileName = `realm-${realm}.json`;
+    const path = (0, node_path_1.join)(directory, fileName);
+    const candidate = `${path}.${String(process.pid)}.tmp`;
+    (0, node_fs_1.writeFileSync)(candidate, body, { encoding: 'utf8', mode: MOUNTED_FILE_MODE });
+    (0, node_fs_1.renameSync)(candidate, path);
+    return { path, fileName };
+}
+//# sourceMappingURL=keycloak-realm.js.map

package/dist/runtime/infra/keycloak-realm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keycloak-realm.js","sourceRoot":"","sources":["../../../src/runtime/infra/keycloak-realm.ts"],"names":[],"mappings":";;;AAkDA,oDAKC;AA4BD,0DASC;AAGD,8CAaC;AAaD,kCAwBC;AAkCD,4CAEC;AAGD,kDAKC;AAeD,4CAsBC;AAlOD,qCAAyF;AACzF,qCAAkC;AAClC,yCAA0C;AAE1C,mDAAyD;AACzD,6CAAkD;AAClD,oCAA6C;AAoC7C,MAAM,mBAAmB,GAAG,IAAA,gBAAI,EAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;AAQhE,SAAgB,oBAAoB,CAAC,KAAgB;IACnD,OAAO,CACL,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK;QAC5D,sCAAsB,CACvB,CAAC;AACJ,CAAC;AAGD,IAAY,gBAKX;AALD,WAAY,gBAAgB;IAC1B,iDAA6B,CAAA;IAC7B,kEAA8C,CAAA;IAC9C,kEAA8C,CAAA;IAC9C,gEAA4C,CAAA;AAC9C,CAAC,EALW,gBAAgB,gCAAhB,gBAAgB,QAK3B;AAUD,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAOrC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAGhC,SAAgB,uBAAuB;IACrC,OAAO;QAEL,IAAA,gBAAI,EAAC,IAAA,yBAAiB,GAAE,EAAE,mBAAmB,CAAC;QAI9C,IAAA,mBAAO,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,mBAAmB,CAAC;KACpE,CAAC;AACJ,CAAC;AAGD,SAAgB,iBAAiB;IAC/B,MAAM,UAAU,GAAG,uBAAuB,EAAE,CAAC;IAC7C,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,IAAA,oBAAU,EAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAA,sBAAY,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CACb,4EAA4E;QAC1E,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5C,kFAAkF;QAClF,sEAAsE,CACzE,CAAC;AACJ,CAAC;AAaD,SAAgB,WAAW,CAAC,QAAgB,EAAE,MAAyB;IACrE,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAElD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,8DAA8D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAClF,iFAAiF;YACjF,8CAA8C,CACjD,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACtD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,8DAA8D,QAAQ,CAAC,CAAC,CAAC,IAAI;YAC3E,iFAAiF;YACjF,2CAA2C,CAC9C,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CACjB,KAAc,EACd,MAAyB,EACzB,IAAiB;IAEjB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;YACvE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAQ,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACtE,CAAC;AAGD,SAAgB,gBAAgB;IAC9B,OAAO,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;AACnD,CAAC;AAGD,SAAgB,mBAAmB,CACjC,cAAsB,EACtB,YAAoB,gBAAgB,EAAE;IAEtC,OAAO,IAAA,gBAAI,EAAC,SAAS,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;AACrD,CAAC;AAeD,SAAgB,gBAAgB,CAC9B,cAAsB,EACtB,MAAyB,EACzB,SAAkB;IAElB,MAAM,KAAK,GAAG,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,wBAAwB,KAAK,wDAAwD;YACnF,qFAAqF;YACrF,mBAAmB,CACtB,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,iBAAiB,EAAE,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,mBAAmB,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IACjE,IAAA,mBAAS,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,SAAS,KAAK,OAAO,CAAC;IACvC,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;IACvD,IAAA,uBAAa,EAAC,SAAS,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC9E,IAAA,oBAAU,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC5B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC"}

package/dist/runtime/infra/postgres-endpoint.d.ts

@@ -0,0 +1,8 @@
+import { Substrate } from '../config/schema';
+import type { InfraPlan } from './infra-plan';
+export interface PostgresEndpoint {
+    readonly host: string;
+    readonly port: number;
+}
+export declare function resolvePostgresEndpoint(infra: InfraPlan, substrate: Substrate): PostgresEndpoint;
+//# sourceMappingURL=postgres-endpoint.d.ts.map

package/dist/runtime/infra/postgres-endpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-endpoint.d.ts","sourceRoot":"","sources":["../../../src/runtime/infra/postgres-endpoint.ts"],"names":[],"mappings":"AACA,OAAO,EAA6B,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAExE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAU9C,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAID,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,SAAS,EAChB,SAAS,EAAE,SAAS,GACnB,gBAAgB,CAclB"}

package/dist/runtime/infra/postgres-endpoint.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolvePostgresEndpoint = resolvePostgresEndpoint;
+const infra_catalog_1 = require("./infra-catalog");
+const schema_1 = require("../config/schema");
+const DEFAULT_POSTGRES_PORT = 5432;
+function resolvePostgresEndpoint(infra, substrate) {
+    const postgres = infra.byComponent.get(schema_1.InfraComponent.Postgres);
+    if (postgres?.mode === schema_1.InfraMode.External && postgres.url !== undefined) {
+        const url = new URL(postgres.url);
+        return {
+            host: url.hostname,
+            port: Number(url.port) || DEFAULT_POSTGRES_PORT,
+        };
+    }
+    const host = substrate === schema_1.Substrate.Container
+        ? infra_catalog_1.INFRA_CATALOG[schema_1.InfraComponent.Postgres].managed.containerName
+        : '127.0.0.1';
+    return { host, port: DEFAULT_POSTGRES_PORT };
+}
+//# sourceMappingURL=postgres-endpoint.js.map

package/dist/runtime/infra/postgres-endpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-endpoint.js","sourceRoot":"","sources":["../../../src/runtime/infra/postgres-endpoint.ts"],"names":[],"mappings":";;AAoBA,0DAiBC;AArCD,mDAAgD;AAChD,6CAAwE;AAiBxE,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAEnC,SAAgB,uBAAuB,CACrC,KAAgB,EAChB,SAAoB;IAEpB,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC;IAChE,IAAI,QAAQ,EAAE,IAAI,KAAK,kBAAS,CAAC,QAAQ,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QACxE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,qBAAqB;SAChD,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GACR,SAAS,KAAK,kBAAS,CAAC,SAAS;QAC/B,CAAC,CAAC,6BAAa,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,aAAa;QAC9D,CAAC,CAAC,WAAW,CAAC;IAClB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;AAC/C,CAAC"}