@xemahq/xema 0.13.0 → 0.15.0

package/dist/runtime/installation/helm-release-readiness.js

@@ -0,0 +1,97 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HelmReleaseReadinessObserver = void 0;
+const helm_release_1 = require("./helm-release");
+const readiness_proof_1 = require("./readiness-proof");
+const schema_1 = require("../config/schema");
+const helm_cli_1 = require("../runner/helm-cli");
+class HelmReleaseReadinessObserver {
+    helmFor;
+    constructor(helmFor = (namespace) => new helm_cli_1.HelmCli({ namespace })) {
+        this.helmFor = helmFor;
+    }
+    async observe(expectation) {
+        if (expectation.substrate !== schema_1.Substrate.Helm) {
+            throw new Error(`HelmReleaseReadinessObserver cannot observe the ${expectation.substrate} substrate.`);
+        }
+        if (expectation.namespace === undefined) {
+            throw new Error('Helm readiness observation requires the exact namespace the releases were installed into.');
+        }
+        const helm = this.helmFor(expectation.namespace);
+        if (!(await helm.available())) {
+            return (0, readiness_proof_1.unavailableProof)(expectation, 'The helm binary is not reachable.', 'Install helm (and point KUBECONFIG at the target cluster), then run `xema installation status` again.');
+        }
+        let owned;
+        try {
+            owned = await this.collectOwnedReleases(helm, expectation);
+        }
+        catch (error) {
+            return (0, readiness_proof_1.unavailableProof)(expectation, `Helm readiness observation failed: ${error instanceof Error ? error.message : String(error)}`, 'Restore access to the cluster and retry; no applied state was committed.');
+        }
+        const consumed = new Set();
+        const workloads = [];
+        const issues = [];
+        for (const expected of expectation.workloads) {
+            const release = owned.get(expected.name);
+            if (release === undefined) {
+                issues.push((0, readiness_proof_1.missingWorkload)(expected.name));
+                continue;
+            }
+            consumed.add(expected.name);
+            const deployed = release.status === helm_cli_1.HelmReleaseStatus.Deployed;
+            const planMatches = release.planHash === expectation.effectivePlanHash;
+            const executionMatches = expectation.executionId === undefined ||
+                release.executionId === expectation.executionId;
+            workloads.push({
+                name: expected.name,
+                state: deployed && planMatches && executionMatches ? 'ready' : 'unhealthy',
+                expected: true,
+                checks: {
+                    releaseStatus: release.status,
+                    revision: release.revision,
+                    installationId: release.installationId ?? 'missing',
+                    planHash: release.planHash ?? 'missing',
+                    planMatches,
+                    executionId: release.executionId ?? 'missing',
+                    executionMatches,
+                    namespace: expectation.namespace,
+                },
+            });
+            if (!deployed) {
+                issues.push({
+                    code: readiness_proof_1.InstallationReadinessIssueCode.ServiceNotReady,
+                    workload: expected.name,
+                    message: `Helm release ${expected.name} is ${release.status}, not deployed.`,
+                    remediation: 'Inspect `helm status` and the workload events for that release, then re-run apply.',
+                });
+            }
+            if (!planMatches) {
+                issues.push((0, readiness_proof_1.planIdentityMismatch)(expected.name));
+            }
+            if (!executionMatches) {
+                issues.push((0, readiness_proof_1.executionIdentityMismatch)(expected.name));
+            }
+        }
+        for (const [name] of owned) {
+            if (!consumed.has(name)) {
+                workloads.push({
+                    name,
+                    state: 'unexpected',
+                    expected: false,
+                    checks: {
+                        releaseStatus: owned.get(name)?.status ?? 'missing',
+                        namespace: expectation.namespace,
+                    },
+                });
+                issues.push((0, readiness_proof_1.unexpectedWorkload)(name));
+            }
+        }
+        return (0, readiness_proof_1.buildReadinessProof)(expectation, workloads, issues);
+    }
+    async collectOwnedReleases(helm, expectation) {
+        const { owned } = await (0, helm_release_1.partitionHelmReleasesByOwner)(helm, expectation.installationId);
+        return new Map(owned.map((release) => [release.name, release]));
+    }
+}
+exports.HelmReleaseReadinessObserver = HelmReleaseReadinessObserver;
+//# sourceMappingURL=helm-release-readiness.js.map

package/dist/runtime/installation/helm-release-readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm-release-readiness.js","sourceRoot":"","sources":["../../../src/runtime/installation/helm-release-readiness.ts"],"names":[],"mappings":";;;AAAA,iDAGwB;AACxB,uDAa2B;AAC3B,6CAA6C;AAC7C,iDAAgE;AAwBhE,MAAa,4BAA4B;IAIpB;IADnB,YACmB,UAA0C,CAAC,SAAS,EAAE,EAAE,CACvE,IAAI,kBAAO,CAAC,EAAE,SAAS,EAAE,CAAC;QADX,YAAO,GAAP,OAAO,CACI;IAC3B,CAAC;IAEG,KAAK,CAAC,OAAO,CAClB,WAA6C;QAE7C,IAAI,WAAW,CAAC,SAAS,KAAK,kBAAS,CAAC,IAAI,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CACb,mDAAmD,WAAW,CAAC,SAAS,aAAa,CACtF,CAAC;QACJ,CAAC;QACD,IAAI,WAAW,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,2FAA2F,CAC5F,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAA,kCAAgB,EACrB,WAAW,EACX,mCAAmC,EACnC,uGAAuG,CACxG,CAAC;QACJ,CAAC;QAED,IAAI,KAAgD,CAAC;QACrD,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAA,kCAAgB,EACrB,WAAW,EACX,sCAAsC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC9F,0EAA0E,CAC3E,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QACnC,MAAM,SAAS,GAAmC,EAAE,CAAC;QACrD,MAAM,MAAM,GAAiC,EAAE,CAAC;QAChD,KAAK,MAAM,QAAQ,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;YAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,IAAA,iCAAe,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC5C,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,KAAK,4BAAiB,CAAC,QAAQ,CAAC;YAC/D,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,KAAK,WAAW,CAAC,iBAAiB,CAAC;YACvE,MAAM,gBAAgB,GACpB,WAAW,CAAC,WAAW,KAAK,SAAS;gBACrC,OAAO,CAAC,WAAW,KAAK,WAAW,CAAC,WAAW,CAAC;YAClD,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,KAAK,EAAE,QAAQ,IAAI,WAAW,IAAI,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW;gBAC1E,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE;oBACN,aAAa,EAAE,OAAO,CAAC,MAAM;oBAC7B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,SAAS;oBACnD,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,SAAS;oBACvC,WAAW;oBACX,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,SAAS;oBAC7C,gBAAgB;oBAChB,SAAS,EAAE,WAAW,CAAC,SAAS;iBACjC;aACF,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,gDAA8B,CAAC,eAAe;oBACpD,QAAQ,EAAE,QAAQ,CAAC,IAAI;oBACvB,OAAO,EAAE,gBAAgB,QAAQ,CAAC,IAAI,OAAO,OAAO,CAAC,MAAM,iBAAiB;oBAC5E,WAAW,EACT,oFAAoF;iBACvF,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,IAAA,sCAAoB,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,MAAM,CAAC,IAAI,CAAC,IAAA,2CAAyB,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,SAAS,CAAC,IAAI,CAAC;oBACb,IAAI;oBACJ,KAAK,EAAE,YAAY;oBACnB,QAAQ,EAAE,KAAK;oBACf,MAAM,EAAE;wBACN,aAAa,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,SAAS;wBACnD,SAAS,EAAE,WAAW,CAAC,SAAS;qBACjC;iBACF,CAAC,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,IAAA,oCAAkB,EAAC,IAAI,CAAC,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QACD,OAAO,IAAA,qCAAmB,EAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;IAOO,KAAK,CAAC,oBAAoB,CAChC,IAAa,EACb,WAA6C;QAE7C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAA,2CAA4B,EAClD,IAAI,EACJ,WAAW,CAAC,cAAc,CAC3B,CAAC;QACF,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;CACF;AAvHD,oEAuHC"}

package/dist/runtime/installation/helm-release.d.ts

@@ -0,0 +1,24 @@
+import type { CompiledXemaInstallation } from './compiler';
+import type { HelmCli, HelmReleaseState } from '../runner/helm-cli';
+export interface HelmReleaseRendering {
+    readonly namespace?: string;
+    readonly values: Readonly<Record<string, string>>;
+}
+export declare const HELM_INSTALLATION_ID_VALUE = "xema.installationId";
+export declare const HELM_PLAN_HASH_VALUE = "xema.planHash";
+export declare const HELM_EXECUTION_ID_VALUE = "xema.executionId";
+export interface HelmReleaseIdentity {
+    readonly installationId?: string;
+    readonly planHash?: string;
+    readonly executionId?: string;
+}
+export declare function readHelmReleaseIdentity(values: Readonly<Record<string, unknown>>): HelmReleaseIdentity;
+export interface InspectedHelmRelease extends HelmReleaseState, HelmReleaseIdentity {
+}
+export interface HelmReleaseOwnership {
+    readonly owned: readonly InspectedHelmRelease[];
+    readonly foreign: readonly InspectedHelmRelease[];
+}
+export declare function partitionHelmReleasesByOwner(helm: HelmCli, installationId: string): Promise<HelmReleaseOwnership>;
+export declare function helmReleaseRendering(installation: CompiledXemaInstallation): HelmReleaseRendering;
+//# sourceMappingURL=helm-release.d.ts.map

package/dist/runtime/installation/helm-release.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm-release.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/helm-release.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAmBpE,MAAM,WAAW,oBAAoB;IAKnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACnD;AAGD,eAAO,MAAM,0BAA0B,wBAAwB,CAAC;AAChE,eAAO,MAAM,oBAAoB,kBAAkB,CAAC;AACpD,eAAO,MAAM,uBAAuB,qBAAqB,CAAC;AAQ1D,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACxC,mBAAmB,CASrB;AAGD,MAAM,WAAW,oBACf,SAAQ,gBAAgB,EACtB,mBAAmB;CAAG;AAG1B,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACnD;AAWD,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,OAAO,EACb,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,oBAAoB,CAAC,CAkB/B;AA0BD,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,wBAAwB,GACrC,oBAAoB,CA6DtB"}

package/dist/runtime/installation/helm-release.js

@@ -0,0 +1,96 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HELM_EXECUTION_ID_VALUE = exports.HELM_PLAN_HASH_VALUE = exports.HELM_INSTALLATION_ID_VALUE = void 0;
+exports.readHelmReleaseIdentity = readHelmReleaseIdentity;
+exports.partitionHelmReleasesByOwner = partitionHelmReleasesByOwner;
+exports.helmReleaseRendering = helmReleaseRendering;
+const readiness_proof_1 = require("./readiness-proof");
+exports.HELM_INSTALLATION_ID_VALUE = 'xema.installationId';
+exports.HELM_PLAN_HASH_VALUE = 'xema.planHash';
+exports.HELM_EXECUTION_ID_VALUE = 'xema.executionId';
+function readHelmReleaseIdentity(values) {
+    const installationId = readHelmValue(values, exports.HELM_INSTALLATION_ID_VALUE);
+    const planHash = readHelmValue(values, exports.HELM_PLAN_HASH_VALUE);
+    const executionId = readHelmValue(values, exports.HELM_EXECUTION_ID_VALUE);
+    return {
+        ...(installationId === undefined ? {} : { installationId }),
+        ...(planHash === undefined ? {} : { planHash }),
+        ...(executionId === undefined ? {} : { executionId }),
+    };
+}
+async function partitionHelmReleasesByOwner(helm, installationId) {
+    const states = await helm.listReleaseStates();
+    const inspected = await (0, readiness_proof_1.mapConcurrentOrdered)(states, readiness_proof_1.MAX_CONCURRENT_READINESS_PROBES, async (state) => ({
+        ...state,
+        ...readHelmReleaseIdentity(await helm.getReleaseValues(state.name)),
+    }));
+    return {
+        owned: inspected.filter((release) => release.installationId === installationId),
+        foreign: inspected.filter((release) => release.installationId !== installationId),
+    };
+}
+function readHelmValue(values, dottedKey) {
+    let cursor = values;
+    for (const segment of dottedKey.split('.')) {
+        if (typeof cursor !== 'object' || cursor === null) {
+            return undefined;
+        }
+        cursor = cursor[segment];
+    }
+    return typeof cursor === 'string' ? cursor : undefined;
+}
+function helmReleaseRendering(installation) {
+    const spec = installation.spec;
+    const values = {
+        'xema.profile': spec.profile,
+        'xema.environment': spec.lifecycle.environment,
+        'xema.target': spec.target.kind,
+        'xema.region': spec.target.region,
+        'xema.tenancy.mode': spec.tenancy.mode,
+        'xema.tenancy.isolation': spec.tenancy.isolation,
+        'xema.security.networkPolicy': spec.security.networkPolicy,
+        'xema.security.identity': spec.security.identity,
+        'xema.security.secretsBackend': spec.security.secretsBackend,
+        'xema.security.encryption': spec.security.encryption,
+        'xema.storage.class': spec.storage.class,
+        'xema.recovery.mode': spec.recovery.mode,
+        'xema.recovery.retentionDays': String(spec.recovery.retentionDays),
+        'xema.recovery.rpoMinutes': String(spec.recovery.rpoMinutes),
+        'xema.recovery.rtoMinutes': String(spec.recovery.rtoMinutes),
+        'xema.recovery.restoreDrillIntervalDays': String(spec.recovery.restoreDrillIntervalDays),
+        'xema.observability.level': spec.observability.level,
+        'xema.observability.metrics': String(spec.observability.metrics),
+        'xema.observability.tracing': String(spec.observability.tracing),
+        'xema.observability.auditLog': String(spec.observability.auditLog),
+        'xema.observability.retentionDays': String(spec.observability.retentionDays),
+        'xema.capacity.minReplicas': String(spec.capacity.minReplicas),
+        'xema.capacity.maxReplicas': String(spec.capacity.maxReplicas),
+        'xema.capacity.maxOrganizations': String(spec.capacity.maxOrganizations),
+        'xema.capacity.maxConcurrentSessions': String(spec.capacity.maxConcurrentSessions),
+        replicaCount: String(spec.capacity.minReplicas),
+    };
+    if (spec.recovery.destinationSecretRef !== undefined) {
+        values['xema.recovery.destinationSecretRef'] =
+            spec.recovery.destinationSecretRef;
+    }
+    if (spec.observability.exportSecretRef !== undefined) {
+        values['xema.observability.exportSecretRef'] =
+            spec.observability.exportSecretRef;
+    }
+    spec.domains.forEach((domain, index) => {
+        values[`xema.domains[${String(index)}].purpose`] = domain.purpose;
+        values[`xema.domains[${String(index)}].hostname`] = domain.hostname;
+        values[`xema.domains[${String(index)}].tls.mode`] = domain.tls.mode;
+        if (domain.tls.secretRef !== undefined) {
+            values[`xema.domains[${String(index)}].tls.secretRef`] =
+                domain.tls.secretRef;
+        }
+    });
+    return {
+        ...(spec.operator.namespace === undefined
+            ? {}
+            : { namespace: spec.operator.namespace }),
+        values,
+    };
+}
+//# sourceMappingURL=helm-release.js.map

package/dist/runtime/installation/helm-release.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm-release.js","sourceRoot":"","sources":["../../../src/runtime/installation/helm-release.ts"],"names":[],"mappings":";;;AAoDA,0DAWC;AAsBD,oEAqBC;AA0BD,oDA+DC;AAnMD,uDAG2B;AAiCd,QAAA,0BAA0B,GAAG,qBAAqB,CAAC;AACnD,QAAA,oBAAoB,GAAG,eAAe,CAAC;AACvC,QAAA,uBAAuB,GAAG,kBAAkB,CAAC;AAc1D,SAAgB,uBAAuB,CACrC,MAAyC;IAEzC,MAAM,cAAc,GAAG,aAAa,CAAC,MAAM,EAAE,kCAA0B,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,EAAE,4BAAoB,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,EAAE,+BAAuB,CAAC,CAAC;IACnE,OAAO;QACL,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;QAC3D,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC/C,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;KACtD,CAAC;AACJ,CAAC;AAsBM,KAAK,UAAU,4BAA4B,CAChD,IAAa,EACb,cAAsB;IAEtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC9C,MAAM,SAAS,GAAG,MAAM,IAAA,sCAAoB,EAC1C,MAAM,EACN,iDAA+B,EAC/B,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAChB,GAAG,KAAK;QACR,GAAG,uBAAuB,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;KACpE,CAAC,CACH,CAAC;IACF,OAAO;QACL,KAAK,EAAE,SAAS,CAAC,MAAM,CACrB,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc,KAAK,cAAc,CACvD;QACD,OAAO,EAAE,SAAS,CAAC,MAAM,CACvB,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc,KAAK,cAAc,CACvD;KACF,CAAC;AACJ,CAAC;AAOD,SAAS,aAAa,CACpB,MAAyC,EACzC,SAAiB;IAEjB,IAAI,MAAM,GAAY,MAAM,CAAC;IAC7B,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAClD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAI,MAAkC,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAOD,SAAgB,oBAAoB,CAClC,YAAsC;IAEtC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC;IAC/B,MAAM,MAAM,GAA2B;QACrC,cAAc,EAAE,IAAI,CAAC,OAAO;QAC5B,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW;QAC9C,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;QAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;QACjC,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;QACtC,wBAAwB,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;QAChD,6BAA6B,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa;QAC1D,wBAAwB,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;QAChD,8BAA8B,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc;QAC5D,0BAA0B,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU;QACpD,oBAAoB,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;QACxC,oBAAoB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;QACxC,6BAA6B,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;QAClE,0BAA0B,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC5D,0BAA0B,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC5D,wCAAwC,EAAE,MAAM,CAC9C,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CACvC;QACD,0BAA0B,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK;QACpD,4BAA4B,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAChE,4BAA4B,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAChE,6BAA6B,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;QAClE,kCAAkC,EAAE,MAAM,CACxC,IAAI,CAAC,aAAa,CAAC,aAAa,CACjC;QACD,2BAA2B,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC9D,2BAA2B,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC9D,gCAAgC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QACxE,qCAAqC,EAAE,MAAM,CAC3C,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CACpC;QACD,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;KAChD,CAAC;IACF,IAAI,IAAI,CAAC,QAAQ,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QACrD,MAAM,CAAC,oCAAoC,CAAC;YAC1C,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IACvC,CAAC;IACD,IAAI,IAAI,CAAC,aAAa,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACrD,MAAM,CAAC,oCAAoC,CAAC;YAC1C,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC;IACvC,CAAC;IAGD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QACrC,MAAM,CAAC,gBAAgB,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;QAClE,MAAM,CAAC,gBAAgB,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;QACpE,MAAM,CAAC,gBAAgB,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;QACpE,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,CAAC,gBAAgB,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC;gBACpD,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;QACzB,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO;QACL,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC3C,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/runtime/installation/index.d.ts

@@ -0,0 +1,22 @@
+export * from './compiler';
+export * from './contract';
+export * from './current-launcher-renderer';
+export * from './diagnostics';
+export * from './diff';
+export * from './from-current-config';
+export * from './helm-release';
+export * from './helm-release-readiness';
+export * from './format';
+export * from './lifecycle';
+export * from './readiness';
+export * from './json-schema';
+export * from './kubernetes-readiness';
+export * from './serialization';
+export * from './setup-renderer';
+export * from './setup-profile';
+export * from './state-store';
+export * from './status';
+export * from './support-bundle';
+export * from './to-current-config';
+export * from './validation';
+//# sourceMappingURL=index.d.ts.map

package/dist/runtime/installation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,eAAe,CAAC;AAC9B,cAAc,QAAQ,CAAC;AACvB,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC;AACzC,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,cAAc,CAAC"}

package/dist/runtime/installation/index.js

@@ -0,0 +1,38 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./compiler"), exports);
+__exportStar(require("./contract"), exports);
+__exportStar(require("./current-launcher-renderer"), exports);
+__exportStar(require("./diagnostics"), exports);
+__exportStar(require("./diff"), exports);
+__exportStar(require("./from-current-config"), exports);
+__exportStar(require("./helm-release"), exports);
+__exportStar(require("./helm-release-readiness"), exports);
+__exportStar(require("./format"), exports);
+__exportStar(require("./lifecycle"), exports);
+__exportStar(require("./readiness"), exports);
+__exportStar(require("./json-schema"), exports);
+__exportStar(require("./kubernetes-readiness"), exports);
+__exportStar(require("./serialization"), exports);
+__exportStar(require("./setup-renderer"), exports);
+__exportStar(require("./setup-profile"), exports);
+__exportStar(require("./state-store"), exports);
+__exportStar(require("./status"), exports);
+__exportStar(require("./support-bundle"), exports);
+__exportStar(require("./to-current-config"), exports);
+__exportStar(require("./validation"), exports);
+//# sourceMappingURL=index.js.map

package/dist/runtime/installation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/installation/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAA2B;AAC3B,6CAA2B;AAC3B,8DAA4C;AAC5C,gDAA8B;AAC9B,yCAAuB;AACvB,wDAAsC;AACtC,iDAA+B;AAC/B,2DAAyC;AACzC,2CAAyB;AACzB,8CAA4B;AAC5B,8CAA4B;AAC5B,gDAA8B;AAC9B,yDAAuC;AACvC,kDAAgC;AAChC,mDAAiC;AACjC,kDAAgC;AAChC,gDAA8B;AAC9B,2CAAyB;AACzB,mDAAiC;AACjC,sDAAoC;AACpC,+CAA6B"}

package/dist/runtime/installation/json-schema.d.ts

@@ -0,0 +1,4 @@
+export declare function xemaInstallationJsonSchema(): object;
+export declare const XEMA_INSTALLATION_JSON_SCHEMA_GOLDEN_SHA256 = "70a66ac1ec0b28160bf2fce2cb605f4f64e28f6add91fd4f59d7d0c249c92051";
+export declare function xemaInstallationJsonSchemaHash(): string;
+//# sourceMappingURL=json-schema.d.ts.map

package/dist/runtime/installation/json-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-schema.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/json-schema.ts"],"names":[],"mappings":"AASA,wBAAgB,0BAA0B,IAAI,MAAM,CAEnD;AAED,eAAO,MAAM,2CAA2C,qEACY,CAAC;AAErE,wBAAgB,8BAA8B,IAAI,MAAM,CAEvD"}

package/dist/runtime/installation/json-schema.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.XEMA_INSTALLATION_JSON_SCHEMA_GOLDEN_SHA256 = void 0;
+exports.xemaInstallationJsonSchema = xemaInstallationJsonSchema;
+exports.xemaInstallationJsonSchemaHash = xemaInstallationJsonSchemaHash;
+const zod_1 = require("zod");
+const contract_1 = require("./contract");
+const serialization_1 = require("./serialization");
+function xemaInstallationJsonSchema() {
+    return (0, zod_1.toJSONSchema)(contract_1.XemaInstallationSchema, { target: 'draft-7' });
+}
+exports.XEMA_INSTALLATION_JSON_SCHEMA_GOLDEN_SHA256 = '70a66ac1ec0b28160bf2fce2cb605f4f64e28f6add91fd4f59d7d0c249c92051';
+function xemaInstallationJsonSchemaHash() {
+    return (0, serialization_1.hashInstallation)(xemaInstallationJsonSchema());
+}
+//# sourceMappingURL=json-schema.js.map

package/dist/runtime/installation/json-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-schema.js","sourceRoot":"","sources":["../../../src/runtime/installation/json-schema.ts"],"names":[],"mappings":";;;AASA,gEAEC;AAKD,wEAEC;AAlBD,6BAAmC;AAEnC,yCAAoD;AACpD,mDAAmD;AAMnD,SAAgB,0BAA0B;IACxC,OAAO,IAAA,kBAAY,EAAC,iCAAsB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AACrE,CAAC;AAEY,QAAA,2CAA2C,GACtD,kEAAkE,CAAC;AAErE,SAAgB,8BAA8B;IAC5C,OAAO,IAAA,gCAAgB,EAAC,0BAA0B,EAAE,CAAC,CAAC;AACxD,CAAC"}

package/dist/runtime/installation/kubernetes-readiness.d.ts

@@ -0,0 +1,60 @@
+import { type InstallationReadinessProof } from './readiness';
+import type { LaunchPlan } from '../launch';
+export declare enum KubernetesWorkloadKind {
+    Deployment = "Deployment",
+    StatefulSet = "StatefulSet",
+    Job = "Job"
+}
+export interface ExpectedKubernetesWorkload {
+    readonly kind: KubernetesWorkloadKind;
+    readonly name: string;
+    readonly serviceName?: string;
+    readonly replicas?: number;
+    readonly successfulCompletions?: number;
+    readonly artifactIdentity?: string;
+    readonly rolloutIdentity?: string;
+    readonly controllerRevision?: string;
+}
+export interface KubernetesReadinessExpectation {
+    readonly workloads: readonly ExpectedKubernetesWorkload[];
+    readonly bootstrapMarkers: readonly string[];
+    readonly smokeChecks: readonly string[];
+    readonly backupPrerequisites: readonly string[];
+    readonly effectivePlanHash: string;
+    readonly namespace: string;
+    readonly installationId: string;
+}
+export interface ObservedKubernetesWorkload {
+    readonly kind: KubernetesWorkloadKind;
+    readonly name: string;
+    readonly generation: number;
+    readonly observedGeneration?: number;
+    readonly desiredReplicas?: number;
+    readonly readyReplicas?: number;
+    readonly updatedReplicas?: number;
+    readonly availableReplicas?: number;
+    readonly succeeded?: number;
+    readonly failed?: number;
+    readonly artifactIdentity?: string;
+    readonly rolloutIdentity?: string;
+    readonly currentRevision?: string;
+    readonly updateRevision?: string;
+}
+export interface KubernetesReadinessObservation {
+    readonly workloads: readonly ObservedKubernetesWorkload[];
+    readonly services: readonly string[];
+    readonly endpointReadyAddresses: Readonly<Record<string, number>>;
+    readonly bootstrapMarkers: readonly string[];
+    readonly smokeChecks: Readonly<Record<string, boolean>>;
+    readonly backupPrerequisites: Readonly<Record<string, boolean>>;
+    readonly effectivePlanHash: string;
+    readonly namespace: string;
+    readonly installationId: string;
+}
+export interface KubernetesReadinessObservationSource {
+    observe(expectation: KubernetesReadinessExpectation): Promise<KubernetesReadinessObservation>;
+}
+export declare function proveKubernetesInstallationReadiness(expectation: KubernetesReadinessExpectation, source: KubernetesReadinessObservationSource): Promise<InstallationReadinessProof>;
+export declare function kubernetesServiceExpectationsFromLaunchPlan(plan: Pick<LaunchPlan, 'substrate' | 'roster'>, rolloutIdentities: ReadonlyMap<string, string>): readonly ExpectedKubernetesWorkload[];
+export declare function evaluateKubernetesReadiness(expectation: KubernetesReadinessExpectation, observation: KubernetesReadinessObservation): InstallationReadinessProof;
+//# sourceMappingURL=kubernetes-readiness.d.ts.map

package/dist/runtime/installation/kubernetes-readiness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubernetes-readiness.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/kubernetes-readiness.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,0BAA0B,EAEhC,MAAM,aAAa,CAAC;AAErB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C,oBAAY,sBAAsB;IAChC,UAAU,eAAe;IACzB,WAAW,gBAAgB;IAC3B,GAAG,QAAQ;CACZ;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAExC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC;AAED,MAAM,WAAW,8BAA8B;IAM7C,QAAQ,CAAC,SAAS,EAAE,SAAS,0BAA0B,EAAE,CAAC;IAC1D,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IAChD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,8BAA8B;IAE7C,QAAQ,CAAC,SAAS,EAAE,SAAS,0BAA0B,EAAE,CAAC;IAC1D,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAClE,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,QAAQ,CAAC,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAEhE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,oCAAoC;IACnD,OAAO,CACL,WAAW,EAAE,8BAA8B,GAC1C,OAAO,CAAC,8BAA8B,CAAC,CAAC;CAC5C;AAED,wBAAsB,oCAAoC,CACxD,WAAW,EAAE,8BAA8B,EAC3C,MAAM,EAAE,oCAAoC,GAC3C,OAAO,CAAC,0BAA0B,CAAC,CAKrC;AAOD,wBAAgB,2CAA2C,CACzD,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,GAAG,QAAQ,CAAC,EAC9C,iBAAiB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7C,SAAS,0BAA0B,EAAE,CA6BvC;AAED,wBAAgB,2BAA2B,CACzC,WAAW,EAAE,8BAA8B,EAC3C,WAAW,EAAE,8BAA8B,GAC1C,0BAA0B,CA0M5B"}