@xemahq/xema 0.13.0 → 0.15.0

package/dist/runtime/installation/contract.d.ts

@@ -0,0 +1,296 @@
+import { z } from 'zod';
+import { InfraComponent, InfraMode, LaunchAllowedTiers, WorkspaceDriver } from '../config/schema';
+export declare const XEMA_INSTALLATION_API_VERSION = "installation.xema.dev/v1";
+export declare const XEMA_INSTALLATION_KIND = "XemaInstallation";
+export declare const XEMA_INSTALLATION_CONTRACT_RELEASE = "2.0.0";
+export declare enum InstallationProfile {
+    Developer = "developer",
+    Starter = "starter",
+    SingleNodeProduction = "single-node-production",
+    BusinessHa = "business-ha",
+    EnterpriseRegulated = "enterprise-regulated",
+    HostedCell = "hosted-cell"
+}
+export declare enum LifecycleEnvironment {
+    Development = "development",
+    Staging = "staging",
+    Production = "production"
+}
+export declare enum InstallationTargetKind {
+    LocalMachine = "local-machine",
+    SingleNodeKubernetes = "single-node-kubernetes",
+    CustomerKubernetes = "customer-kubernetes",
+    HostedCell = "hosted-cell"
+}
+export declare enum InstallationOperatorKind {
+    Developer = "developer",
+    Organization = "organization",
+    Platform = "platform"
+}
+export declare enum DistributionReferenceKind {
+    Edition = "edition",
+    Lock = "lock"
+}
+export declare enum FeatureSelectionMode {
+    Minimal = "minimal",
+    Default = "default",
+    All = "all",
+    Explicit = "explicit"
+}
+export declare enum SecretReferenceProvider {
+    Environment = "environment",
+    File = "file",
+    Prompt = "prompt",
+    ManagedLocal = "managed-local",
+    Kubernetes = "kubernetes",
+    ExternalSecrets = "external-secrets",
+    ExternalVault = "external-vault"
+}
+export declare enum DeveloperSecretWorkflow {
+    Interactive = "developer-interactive"
+}
+export declare enum ExternalSecretStoreKind {
+    ClusterSecretStore = "ClusterSecretStore",
+    SecretStore = "SecretStore"
+}
+export declare enum TenancyMode {
+    SingleOrganization = "single-organization",
+    MultiOrganization = "multi-organization"
+}
+export declare enum TenantIsolation {
+    Shared = "shared",
+    Namespace = "namespace",
+    DedicatedCell = "dedicated-cell"
+}
+export declare enum NetworkPolicyMode {
+    Development = "development",
+    Restricted = "restricted",
+    ZeroTrust = "zero-trust"
+}
+export declare enum IdentityMode {
+    Managed = "managed",
+    ExternalOidc = "external-oidc"
+}
+export declare enum SecretsBackend {
+    Local = "local",
+    Kubernetes = "kubernetes",
+    External = "external"
+}
+export declare enum EncryptionMode {
+    Development = "development",
+    PlatformManaged = "platform-managed",
+    CustomerManaged = "customer-managed"
+}
+export declare enum DomainPurpose {
+    Api = "api",
+    Web = "web",
+    Identity = "identity"
+}
+export declare enum TlsMode {
+    Disabled = "disabled",
+    Managed = "managed",
+    External = "external"
+}
+export declare enum StorageClass {
+    Ephemeral = "ephemeral",
+    Persistent = "persistent",
+    External = "external"
+}
+export declare enum BackupMode {
+    Disabled = "disabled",
+    Snapshots = "snapshots",
+    Continuous = "continuous"
+}
+export declare enum ObservabilityLevel {
+    Development = "development",
+    Standard = "standard",
+    Regulated = "regulated"
+}
+export declare enum UpgradeChannel {
+    Stable = "stable",
+    Preview = "preview",
+    Pinned = "pinned"
+}
+export declare enum SourceBindingKind {
+    Workspace = "workspace",
+    Distribution = "distribution",
+    Npm = "npm",
+    Oci = "oci",
+    Git = "git"
+}
+export declare const XemaInstallationSchema: z.ZodObject<{
+    apiVersion: z.ZodDefault<z.ZodLiteral<"installation.xema.dev/v1">>;
+    kind: z.ZodDefault<z.ZodLiteral<"XemaInstallation">>;
+    metadata: z.ZodObject<{
+        name: z.ZodString;
+    }, z.core.$strict>;
+    provenance: z.ZodDefault<z.ZodObject<{
+        sourceConfigHash: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    spec: z.ZodObject<{
+        profile: z.ZodEnum<typeof InstallationProfile>;
+        lifecycle: z.ZodObject<{
+            environment: z.ZodEnum<typeof LifecycleEnvironment>;
+        }, z.core.$strict>;
+        distribution: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<DistributionReferenceKind.Edition>;
+            edition: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<DistributionReferenceKind.Lock>;
+            ref: z.ZodString;
+            digest: z.ZodString;
+        }, z.core.$strict>], "kind">;
+        target: z.ZodDefault<z.ZodObject<{
+            kind: z.ZodOptional<z.ZodEnum<typeof InstallationTargetKind>>;
+            region: z.ZodOptional<z.ZodString>;
+            zones: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>;
+        operator: z.ZodDefault<z.ZodObject<{
+            kind: z.ZodOptional<z.ZodEnum<typeof InstallationOperatorKind>>;
+            namespace: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        features: z.ZodDefault<z.ZodObject<{
+            selection: z.ZodOptional<z.ZodEnum<typeof FeatureSelectionMode>>;
+            include: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            exclude: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            enabled: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            web: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strict>>;
+        infrastructure: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            component: z.ZodEnum<typeof InfraComponent>;
+            ownership: z.ZodEnum<typeof InfraMode>;
+            endpoint: z.ZodOptional<z.ZodString>;
+            secretRefs: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            realm: z.ZodOptional<z.ZodString>;
+            bucketPrefix: z.ZodOptional<z.ZodString>;
+            persistencePath: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>>;
+        secrets: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            provider: z.ZodLiteral<SecretReferenceProvider.Environment>;
+            workflow: z.ZodLiteral<DeveloperSecretWorkflow>;
+            variable: z.ZodString;
+            name: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            provider: z.ZodLiteral<SecretReferenceProvider.File>;
+            workflow: z.ZodLiteral<DeveloperSecretWorkflow>;
+            path: z.ZodString;
+            name: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            provider: z.ZodLiteral<SecretReferenceProvider.Prompt>;
+            workflow: z.ZodLiteral<DeveloperSecretWorkflow>;
+            promptId: z.ZodString;
+            name: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            provider: z.ZodLiteral<SecretReferenceProvider.ManagedLocal>;
+            entry: z.ZodString;
+            name: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            provider: z.ZodLiteral<SecretReferenceProvider.Kubernetes>;
+            namespace: z.ZodString;
+            resourceName: z.ZodString;
+            key: z.ZodString;
+            name: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            provider: z.ZodLiteral<SecretReferenceProvider.ExternalSecrets>;
+            namespace: z.ZodString;
+            storeKind: z.ZodEnum<typeof ExternalSecretStoreKind>;
+            storeName: z.ZodString;
+            remoteKey: z.ZodString;
+            property: z.ZodOptional<z.ZodString>;
+            targetName: z.ZodString;
+            targetKey: z.ZodString;
+            name: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            provider: z.ZodLiteral<SecretReferenceProvider.ExternalVault>;
+            address: z.ZodString;
+            mount: z.ZodString;
+            path: z.ZodString;
+            key: z.ZodString;
+            name: z.ZodString;
+        }, z.core.$strict>], "provider">>>;
+        tenancy: z.ZodDefault<z.ZodObject<{
+            mode: z.ZodOptional<z.ZodEnum<typeof TenancyMode>>;
+            isolation: z.ZodOptional<z.ZodEnum<typeof TenantIsolation>>;
+        }, z.core.$strict>>;
+        domains: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            hostname: z.ZodString;
+            purpose: z.ZodEnum<typeof DomainPurpose>;
+            tls: z.ZodObject<{
+                mode: z.ZodEnum<typeof TlsMode>;
+                secretRef: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>;
+        }, z.core.$strict>>>;
+        security: z.ZodDefault<z.ZodObject<{
+            networkPolicy: z.ZodOptional<z.ZodEnum<typeof NetworkPolicyMode>>;
+            identity: z.ZodOptional<z.ZodEnum<typeof IdentityMode>>;
+            secretsBackend: z.ZodOptional<z.ZodEnum<typeof SecretsBackend>>;
+            encryption: z.ZodOptional<z.ZodEnum<typeof EncryptionMode>>;
+            residency: z.ZodOptional<z.ZodString>;
+            managedModelAccess: z.ZodOptional<z.ZodEnum<typeof LaunchAllowedTiers>>;
+        }, z.core.$strict>>;
+        storage: z.ZodDefault<z.ZodObject<{
+            class: z.ZodOptional<z.ZodEnum<typeof StorageClass>>;
+            workspaceDriver: z.ZodOptional<z.ZodEnum<typeof WorkspaceDriver>>;
+            workspaceRoot: z.ZodOptional<z.ZodString>;
+            materializationRoot: z.ZodOptional<z.ZodString>;
+            externalBinding: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        recovery: z.ZodDefault<z.ZodObject<{
+            mode: z.ZodOptional<z.ZodEnum<typeof BackupMode>>;
+            retentionDays: z.ZodOptional<z.ZodNumber>;
+            rpoMinutes: z.ZodOptional<z.ZodNumber>;
+            rtoMinutes: z.ZodOptional<z.ZodNumber>;
+            restoreDrillIntervalDays: z.ZodOptional<z.ZodNumber>;
+            destinationSecretRef: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        observability: z.ZodDefault<z.ZodObject<{
+            level: z.ZodOptional<z.ZodEnum<typeof ObservabilityLevel>>;
+            metrics: z.ZodOptional<z.ZodBoolean>;
+            tracing: z.ZodOptional<z.ZodBoolean>;
+            auditLog: z.ZodOptional<z.ZodBoolean>;
+            retentionDays: z.ZodOptional<z.ZodNumber>;
+            exportSecretRef: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        capacity: z.ZodDefault<z.ZodObject<{
+            minReplicas: z.ZodOptional<z.ZodNumber>;
+            maxReplicas: z.ZodOptional<z.ZodNumber>;
+            maxOrganizations: z.ZodOptional<z.ZodNumber>;
+            maxConcurrentSessions: z.ZodOptional<z.ZodNumber>;
+            zones: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+        sources: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<SourceBindingKind.Workspace>;
+            root: z.ZodOptional<z.ZodString>;
+            name: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<SourceBindingKind.Distribution>;
+            edition: z.ZodString;
+            ref: z.ZodOptional<z.ZodString>;
+            name: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<SourceBindingKind.Npm>;
+            registryUrl: z.ZodOptional<z.ZodString>;
+            scope: z.ZodOptional<z.ZodString>;
+            authSecretRef: z.ZodOptional<z.ZodString>;
+            name: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<SourceBindingKind.Oci>;
+            registry: z.ZodString;
+            authSecretRef: z.ZodOptional<z.ZodString>;
+            name: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<SourceBindingKind.Git>;
+            url: z.ZodString;
+            ref: z.ZodOptional<z.ZodString>;
+            authSecretRef: z.ZodOptional<z.ZodString>;
+            name: z.ZodString;
+        }, z.core.$strict>], "kind">>>;
+        upgrade: z.ZodDefault<z.ZodObject<{
+            channel: z.ZodOptional<z.ZodEnum<typeof UpgradeChannel>>;
+            releaseRef: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type XemaInstallation = z.input<typeof XemaInstallationSchema>;
+export type ParsedXemaInstallation = z.output<typeof XemaInstallationSchema>;
+//# sourceMappingURL=contract.d.ts.map

package/dist/runtime/installation/contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,cAAc,EACd,SAAS,EACT,kBAAkB,EAClB,eAAe,EAChB,MAAM,kBAAkB,CAAC;AAE1B,eAAO,MAAM,6BAA6B,6BAA6B,CAAC;AACxE,eAAO,MAAM,sBAAsB,qBAAqB,CAAC;AACzD,eAAO,MAAM,kCAAkC,UAAU,CAAC;AAE1D,oBAAY,mBAAmB;IAC7B,SAAS,cAAc;IACvB,OAAO,YAAY;IACnB,oBAAoB,2BAA2B;IAC/C,UAAU,gBAAgB;IAC1B,mBAAmB,yBAAyB;IAC5C,UAAU,gBAAgB;CAC3B;AAED,oBAAY,oBAAoB;IAC9B,WAAW,gBAAgB;IAC3B,OAAO,YAAY;IACnB,UAAU,eAAe;CAC1B;AAED,oBAAY,sBAAsB;IAChC,YAAY,kBAAkB;IAC9B,oBAAoB,2BAA2B;IAC/C,kBAAkB,wBAAwB;IAC1C,UAAU,gBAAgB;CAC3B;AAED,oBAAY,wBAAwB;IAClC,SAAS,cAAc;IACvB,YAAY,iBAAiB;IAC7B,QAAQ,aAAa;CACtB;AAED,oBAAY,yBAAyB;IACnC,OAAO,YAAY;IACnB,IAAI,SAAS;CACd;AAED,oBAAY,oBAAoB;IAC9B,OAAO,YAAY;IACnB,OAAO,YAAY;IACnB,GAAG,QAAQ;IACX,QAAQ,aAAa;CACtB;AAED,oBAAY,uBAAuB;IACjC,WAAW,gBAAgB;IAC3B,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,YAAY,kBAAkB;IAC9B,UAAU,eAAe;IACzB,eAAe,qBAAqB;IACpC,aAAa,mBAAmB;CACjC;AAED,oBAAY,uBAAuB;IACjC,WAAW,0BAA0B;CACtC;AAED,oBAAY,uBAAuB;IACjC,kBAAkB,uBAAuB;IACzC,WAAW,gBAAgB;CAC5B;AAED,oBAAY,WAAW;IACrB,kBAAkB,wBAAwB;IAC1C,iBAAiB,uBAAuB;CACzC;AAED,oBAAY,eAAe;IACzB,MAAM,WAAW;IACjB,SAAS,cAAc;IACvB,aAAa,mBAAmB;CACjC;AAED,oBAAY,iBAAiB;IAC3B,WAAW,gBAAgB;IAC3B,UAAU,eAAe;IACzB,SAAS,eAAe;CACzB;AAED,oBAAY,YAAY;IACtB,OAAO,YAAY;IACnB,YAAY,kBAAkB;CAC/B;AAED,oBAAY,cAAc;IACxB,KAAK,UAAU;IACf,UAAU,eAAe;IACzB,QAAQ,aAAa;CACtB;AAED,oBAAY,cAAc;IACxB,WAAW,gBAAgB;IAC3B,eAAe,qBAAqB;IACpC,eAAe,qBAAqB;CACrC;AAED,oBAAY,aAAa;IACvB,GAAG,QAAQ;IACX,GAAG,QAAQ;IACX,QAAQ,aAAa;CACtB;AAED,oBAAY,OAAO;IACjB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,QAAQ,aAAa;CACtB;AAED,oBAAY,YAAY;IACtB,SAAS,cAAc;IACvB,UAAU,eAAe;IACzB,QAAQ,aAAa;CACtB;AAED,oBAAY,UAAU;IACpB,QAAQ,aAAa;IACrB,SAAS,cAAc;IACvB,UAAU,eAAe;CAC1B;AAED,oBAAY,kBAAkB;IAC5B,WAAW,gBAAgB;IAC3B,QAAQ,aAAa;IACrB,SAAS,cAAc;CACxB;AAED,oBAAY,cAAc;IACxB,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,MAAM,WAAW;CAClB;AAED,oBAAY,iBAAiB;IAC3B,SAAS,cAAc;IACvB,YAAY,iBAAiB;IAC7B,GAAG,QAAQ;IACX,GAAG,QAAQ;IACX,GAAG,QAAQ;CACZ;AAsPD,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAgIxB,CAAC;AAEZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC"}