@xemahq/xema 0.14.0 → 0.15.0

package/dist/runtime/installation/from-current-config.js

@@ -1,75 +1,245 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.installationFromCurrentConfig = installationFromCurrentConfig;
+const compiler_1 = require("./compiler");
 const contract_1 = require("./contract");
 const serialization_1 = require("./serialization");
 const schema_1 = require("../config/schema");
 const infra_catalog_1 = require("../infra/infra-catalog");
+const schema_2 = require("../sources/schema");
 function installationFromCurrentConfig(config, context) {
     const profile = context.profile ?? profileForSubstrate(config.app.substrate);
+    const sourceSecretNames = allocateSourceSecretNames(config);
+    const sourceSecrets = sourceSecretReferences(config.sources, sourceSecretNames);
+    const declaredSecrets = Object.entries(config.secrets).map(([name, secret]) => currentSecretBinding(name, secret.from, secret.env, secret.path));
     return {
-        schemaVersion: 1,
-        installationId: context.installationId,
-        sourceConfigHash: (0, serialization_1.hashInstallation)(config),
-        distribution: {
-            kind: contract_1.DistributionReferenceKind.Edition,
-            edition: config.edition,
-        },
-        deployment: {
+        apiVersion: contract_1.XEMA_INSTALLATION_API_VERSION,
+        kind: contract_1.XEMA_INSTALLATION_KIND,
+        metadata: { name: context.installationId },
+        provenance: { sourceConfigHash: (0, serialization_1.hashInstallation)(config) },
+        spec: {
             profile,
-            substrate: installationSubstrate(config.app.substrate),
-        },
-        infrastructure: infra_catalog_1.INFRA_COMPONENTS.map((component) => {
-            const current = config.infra[component] ?? { mode: schema_1.InfraMode.Managed };
-            return {
-                component,
-                ownership: current.mode,
-                ...(current.url === undefined ? {} : { endpoint: current.url }),
-                ...(current.secretRef === undefined
+            lifecycle: {
+                environment: context.environment ?? (0, compiler_1.profileLifecycleEnvironment)(profile),
+            },
+            distribution: {
+                kind: contract_1.DistributionReferenceKind.Edition,
+                edition: config.edition,
+            },
+            target: {
+                kind: targetForProfile(profile),
+            },
+            operator: {
+                kind: profile === contract_1.InstallationProfile.Developer
+                    ? contract_1.InstallationOperatorKind.Developer
+                    : profile === contract_1.InstallationProfile.HostedCell
+                        ? contract_1.InstallationOperatorKind.Platform
+                        : contract_1.InstallationOperatorKind.Organization,
+            },
+            features: {
+                ...featureSelection(config.app.include),
+                exclude: config.app.exclude,
+                enabled: config.app.features,
+                web: config.app.web.enabled,
+            },
+            infrastructure: infra_catalog_1.INFRA_COMPONENTS.map((component) => {
+                const current = config.infra[component] ?? {
+                    mode: schema_1.InfraMode.Managed,
+                };
+                return {
+                    component,
+                    ownership: current.mode,
+                    ...(current.url === undefined ? {} : { endpoint: current.url }),
+                    ...(current.secretRef === undefined
+                        ? {}
+                        : { secretRefs: [current.secretRef] }),
+                    ...(current.realm === undefined ? {} : { realm: current.realm }),
+                    ...(current.bucketPrefix === undefined
+                        ? {}
+                        : { bucketPrefix: current.bucketPrefix }),
+                    ...(current.persist?.path === undefined
+                        ? {}
+                        : { persistencePath: current.persist.path }),
+                };
+            }),
+            secrets: [...declaredSecrets, ...sourceSecrets],
+            security: {
+                managedModelAccess: config.policy?.allowedTiers ?? schema_1.LaunchAllowedTiers.Byok,
+            },
+            storage: {
+                ...(config.state.workspaces.driver === undefined
                     ? {}
-                    : { secretRefs: [current.secretRef] }),
-            };
-        }),
-        secrets: Object.entries(config.secrets).map(([name, secret]) => ({
-            name,
-            provider: contract_1.CURRENT_SECRET_SOURCE_PROVIDER[secret.from],
-            ...secretLocator(name, secret.from, secret.env, secret.path),
-        })),
-        storage: {
-            ...(config.state.workspaces.driver === undefined
-                ? {}
-                : { workspaceDriver: config.state.workspaces.driver }),
+                    : { workspaceDriver: config.state.workspaces.driver }),
+                ...(config.state.workspaces.path === undefined
+                    ? {}
+                    : { workspaceRoot: config.state.workspaces.path }),
+                ...(config.state.biomeMaterialization.path === undefined
+                    ? {}
+                    : {
+                        materializationRoot: config.state.biomeMaterialization.path,
+                    }),
+            },
+            sources: config.sources.map((source) => toInstallationSource(source, sourceSecretNames)),
         },
     };
 }
 function profileForSubstrate(substrate) {
     switch (substrate) {
         case schema_1.Substrate.Native:
-            return contract_1.InstallationDeploymentProfile.Developer;
+            return contract_1.InstallationProfile.Developer;
         case schema_1.Substrate.Container:
-            return contract_1.InstallationDeploymentProfile.StarterPme;
+            return contract_1.InstallationProfile.Starter;
         case schema_1.Substrate.Helm:
-            return contract_1.InstallationDeploymentProfile.HighAvailability;
+            return contract_1.InstallationProfile.SingleNodeProduction;
     }
 }
-function installationSubstrate(substrate) {
-    switch (substrate) {
-        case schema_1.Substrate.Native:
-            return contract_1.InstallationSubstrate.Local;
-        case schema_1.Substrate.Container:
-            return contract_1.InstallationSubstrate.SingleNode;
-        case schema_1.Substrate.Helm:
-            return contract_1.InstallationSubstrate.Cluster;
+function targetForProfile(profile) {
+    switch (profile) {
+        case contract_1.InstallationProfile.Developer:
+        case contract_1.InstallationProfile.Starter:
+            return contract_1.InstallationTargetKind.LocalMachine;
+        case contract_1.InstallationProfile.SingleNodeProduction:
+            return contract_1.InstallationTargetKind.SingleNodeKubernetes;
+        case contract_1.InstallationProfile.BusinessHa:
+        case contract_1.InstallationProfile.EnterpriseRegulated:
+            return contract_1.InstallationTargetKind.CustomerKubernetes;
+        case contract_1.InstallationProfile.HostedCell:
+            return contract_1.InstallationTargetKind.HostedCell;
     }
 }
-function secretLocator(name, source, env, path) {
+function featureSelection(include) {
+    if (Array.isArray(include)) {
+        return {
+            selection: contract_1.FeatureSelectionMode.Explicit,
+            include: [...include],
+        };
+    }
+    switch (include) {
+        case 'minimal':
+            return { selection: contract_1.FeatureSelectionMode.Minimal, include: [] };
+        case 'default':
+            return { selection: contract_1.FeatureSelectionMode.Default, include: [] };
+        case 'all':
+            return { selection: contract_1.FeatureSelectionMode.All, include: [] };
+    }
+}
+function currentSecretBinding(name, source, env, path) {
     switch (source) {
         case schema_1.SecretSource.Env:
-            return { locator: env ?? name };
+            return {
+                name,
+                provider: contract_1.SecretReferenceProvider.Environment,
+                workflow: contract_1.DeveloperSecretWorkflow.Interactive,
+                variable: env ?? name,
+            };
         case schema_1.SecretSource.File:
-            return path === undefined ? {} : { locator: path };
+            if (path === undefined) {
+                throw new Error(`File secret "${name}" requires a path.`);
+            }
+            return {
+                name,
+                provider: contract_1.SecretReferenceProvider.File,
+                workflow: contract_1.DeveloperSecretWorkflow.Interactive,
+                path,
+            };
         case schema_1.SecretSource.Prompt:
-            return {};
+            return {
+                name,
+                provider: contract_1.SecretReferenceProvider.Prompt,
+                workflow: contract_1.DeveloperSecretWorkflow.Interactive,
+                promptId: name,
+            };
+    }
+}
+function sourceSecretReferences(sources, names) {
+    return sources.flatMap((source) => {
+        if (!('authTokenEnv' in source) || source.authTokenEnv === undefined) {
+            return [];
+        }
+        return [
+            {
+                name: requiredSourceSecretName(source, names),
+                provider: contract_1.SecretReferenceProvider.Environment,
+                workflow: contract_1.DeveloperSecretWorkflow.Interactive,
+                variable: source.authTokenEnv,
+            },
+        ];
+    });
+}
+function toInstallationSource(source, names) {
+    const authSecretRef = 'authTokenEnv' in source && source.authTokenEnv !== undefined
+        ? requiredSourceSecretName(source, names)
+        : undefined;
+    switch (source.kind) {
+        case schema_2.SourceKind.Workspace:
+            return {
+                name: source.name,
+                kind: contract_1.SourceBindingKind.Workspace,
+                ...(source.root === undefined ? {} : { root: source.root }),
+            };
+        case schema_2.SourceKind.Distribution:
+            return {
+                name: source.name,
+                kind: contract_1.SourceBindingKind.Distribution,
+                edition: source.edition,
+                ...(source.ref === undefined ? {} : { ref: source.ref }),
+            };
+        case schema_2.SourceKind.Npm:
+            return {
+                name: source.name,
+                kind: contract_1.SourceBindingKind.Npm,
+                ...(source.registryUrl === undefined
+                    ? {}
+                    : { registryUrl: source.registryUrl }),
+                ...(source.scope === undefined ? {} : { scope: source.scope }),
+                ...(authSecretRef === undefined ? {} : { authSecretRef }),
+            };
+        case schema_2.SourceKind.Oci:
+            return {
+                name: source.name,
+                kind: contract_1.SourceBindingKind.Oci,
+                registry: source.registry,
+                ...(authSecretRef === undefined ? {} : { authSecretRef }),
+            };
+        case schema_2.SourceKind.Git:
+            return {
+                name: source.name,
+                kind: contract_1.SourceBindingKind.Git,
+                url: source.url,
+                ...(source.ref === undefined ? {} : { ref: source.ref }),
+                ...(authSecretRef === undefined ? {} : { authSecretRef }),
+            };
+    }
+}
+function allocateSourceSecretNames(config) {
+    const allocated = new Set(Object.keys(config.secrets));
+    const names = new Map();
+    for (const source of config.sources) {
+        if (!('authTokenEnv' in source) || source.authTokenEnv === undefined) {
+            continue;
+        }
+        for (let nonce = 0;; nonce += 1) {
+            const digest = (0, serialization_1.hashInstallation)({
+                source: source.name,
+                kind: source.kind,
+                variable: source.authTokenEnv,
+                nonce,
+            });
+            const candidate = `xema-source-auth-${digest}`;
+            if (!allocated.has(candidate)) {
+                allocated.add(candidate);
+                names.set(source, candidate);
+                break;
+            }
+        }
+    }
+    return names;
+}
+function requiredSourceSecretName(source, names) {
+    const name = names.get(source);
+    if (name === undefined) {
+        throw new Error(`Internal source-secret allocation is missing for source "${source.name}".`);
     }
+    return name;
 }
 //# sourceMappingURL=from-current-config.js.map

package/dist/runtime/installation/from-current-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"from-current-config.js","sourceRoot":"","sources":["../../../src/runtime/installation/from-current-config.ts"],"names":[],"mappings":";;AA0BA,sEAwCC;AAlED,yCAMoB;AACpB,mDAAmD;AACnD,6CAK0B;AAC1B,0DAA0D;AAY1D,SAAgB,6BAA6B,CAC3C,MAAkB,EAClB,OAAyC;IAEzC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAE7E,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,gBAAgB,EAAE,IAAA,gCAAgB,EAAC,MAAM,CAAC;QAC1C,YAAY,EAAE;YACZ,IAAI,EAAE,oCAAyB,CAAC,OAAO;YACvC,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB;QACD,UAAU,EAAE;YACV,OAAO;YACP,SAAS,EAAE,qBAAqB,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;SACvD;QACD,cAAc,EAAE,gCAAgB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;YACjD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,kBAAS,CAAC,OAAO,EAAE,CAAC;YACvE,OAAO;gBACL,SAAS;gBACT,SAAS,EAAE,OAAO,CAAC,IAAI;gBACvB,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC/D,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS;oBACjC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;aACzC,CAAC;QACJ,CAAC,CAAC;QACF,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/D,IAAI;YACJ,QAAQ,EAAE,yCAA8B,CAAC,MAAM,CAAC,IAAI,CAAC;YACrD,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC;SAC7D,CAAC,CAAC;QACH,OAAO,EAAE;YACP,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS;gBAC9C,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;SACzD;KACF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,SAAoB;IAEpB,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,kBAAS,CAAC,MAAM;YACnB,OAAO,wCAA6B,CAAC,SAAS,CAAC;QACjD,KAAK,kBAAS,CAAC,SAAS;YACtB,OAAO,wCAA6B,CAAC,UAAU,CAAC;QAClD,KAAK,kBAAS,CAAC,IAAI;YACjB,OAAO,wCAA6B,CAAC,gBAAgB,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,SAAoB;IACjD,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,kBAAS,CAAC,MAAM;YACnB,OAAO,gCAAqB,CAAC,KAAK,CAAC;QACrC,KAAK,kBAAS,CAAC,SAAS;YACtB,OAAO,gCAAqB,CAAC,UAAU,CAAC;QAC1C,KAAK,kBAAS,CAAC,IAAI;YACjB,OAAO,gCAAqB,CAAC,OAAO,CAAC;IACzC,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,IAAY,EACZ,MAAoB,EACpB,GAAuB,EACvB,IAAwB;IAExB,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,qBAAY,CAAC,GAAG;YACnB,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;QAClC,KAAK,qBAAY,CAAC,IAAI;YACpB,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACrD,KAAK,qBAAY,CAAC,MAAM;YACtB,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"from-current-config.js","sourceRoot":"","sources":["../../../src/runtime/installation/from-current-config.ts"],"names":[],"mappings":";;AAsCA,sEAuFC;AA7HD,yCAAyD;AACzD,yCAcoB;AACpB,mDAAmD;AACnD,6CAM0B;AAC1B,0DAA0D;AAC1D,8CAAgE;AAahE,SAAgB,6BAA6B,CAC3C,MAAkB,EAClB,OAAyC;IAEzC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC7E,MAAM,iBAAiB,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAC5D,MAAM,aAAa,GAAG,sBAAsB,CAC1C,MAAM,CAAC,OAAO,EACd,iBAAiB,CAClB,CAAC;IACF,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAC5E,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CACjE,CAAC;IACF,OAAO;QACL,UAAU,EAAE,wCAA6B;QACzC,IAAI,EAAE,iCAAsB;QAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,cAAc,EAAE;QAC1C,UAAU,EAAE,EAAE,gBAAgB,EAAE,IAAA,gCAAgB,EAAC,MAAM,CAAC,EAAE;QAC1D,IAAI,EAAE;YACJ,OAAO;YACP,SAAS,EAAE;gBACT,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAA,sCAA2B,EAAC,OAAO,CAAC;aACzE;YACD,YAAY,EAAE;gBACZ,IAAI,EAAE,oCAAyB,CAAC,OAAO;gBACvC,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB;YACD,MAAM,EAAE;gBACN,IAAI,EAAE,gBAAgB,CAAC,OAAO,CAAC;aAChC;YACD,QAAQ,EAAE;gBACR,IAAI,EACF,OAAO,KAAK,8BAAmB,CAAC,SAAS;oBACvC,CAAC,CAAC,mCAAwB,CAAC,SAAS;oBACpC,CAAC,CAAC,OAAO,KAAK,8BAAmB,CAAC,UAAU;wBAC1C,CAAC,CAAC,mCAAwB,CAAC,QAAQ;wBACnC,CAAC,CAAC,mCAAwB,CAAC,YAAY;aAC9C;YACD,QAAQ,EAAE;gBACR,GAAG,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;gBACvC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO;gBAC3B,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ;gBAC5B,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO;aAC5B;YACD,cAAc,EAAE,gCAAgB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;gBACjD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI;oBACzC,IAAI,EAAE,kBAAS,CAAC,OAAO;iBACxB,CAAC;gBACF,OAAO;oBACL,SAAS;oBACT,SAAS,EAAE,OAAO,CAAC,IAAI;oBACvB,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;oBAC/D,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS;wBACjC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;oBACxC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;oBAChE,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS;wBACpC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;oBAC3C,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,KAAK,SAAS;wBACrC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;iBAC/C,CAAC;YACJ,CAAC,CAAC;YACF,OAAO,EAAE,CAAC,GAAG,eAAe,EAAE,GAAG,aAAa,CAAC;YAC/C,QAAQ,EAAE;gBACR,kBAAkB,EAChB,MAAM,CAAC,MAAM,EAAE,YAAY,IAAI,2BAAkB,CAAC,IAAI;aACzD;YACD,OAAO,EAAE;gBACP,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS;oBAC9C,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;gBACxD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS;oBAC5C,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;gBACpD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAAI,KAAK,SAAS;oBACtD,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC;wBACE,mBAAmB,EAAE,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAAI;qBAC5D,CAAC;aACP;YACD,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACrC,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAChD;SACF;KACF,CAAC;AACJ,CAAC;AAiBD,SAAS,mBAAmB,CAAC,SAAoB;IAC/C,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,kBAAS,CAAC,MAAM;YACnB,OAAO,8BAAmB,CAAC,SAAS,CAAC;QACvC,KAAK,kBAAS,CAAC,SAAS;YACtB,OAAO,8BAAmB,CAAC,OAAO,CAAC;QACrC,KAAK,kBAAS,CAAC,IAAI;YACjB,OAAO,8BAAmB,CAAC,oBAAoB,CAAC;IACpD,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,OAA4B;IAE5B,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,8BAAmB,CAAC,SAAS,CAAC;QACnC,KAAK,8BAAmB,CAAC,OAAO;YAC9B,OAAO,iCAAsB,CAAC,YAAY,CAAC;QAC7C,KAAK,8BAAmB,CAAC,oBAAoB;YAC3C,OAAO,iCAAsB,CAAC,oBAAoB,CAAC;QACrD,KAAK,8BAAmB,CAAC,UAAU,CAAC;QACpC,KAAK,8BAAmB,CAAC,mBAAmB;YAC1C,OAAO,iCAAsB,CAAC,kBAAkB,CAAC;QACnD,KAAK,8BAAmB,CAAC,UAAU;YACjC,OAAO,iCAAsB,CAAC,UAAU,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAqC;IAI7D,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,SAAS,EAAE,+BAAoB,CAAC,QAAQ;YACxC,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;SACtB,CAAC;IACJ,CAAC;IACD,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,SAAS;YACZ,OAAO,EAAE,SAAS,EAAE,+BAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAClE,KAAK,SAAS;YACZ,OAAO,EAAE,SAAS,EAAE,+BAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAClE,KAAK,KAAK;YACR,OAAO,EAAE,SAAS,EAAE,+BAAoB,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAChE,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,IAAY,EACZ,MAAoB,EACpB,GAAuB,EACvB,IAAwB;IAExB,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,qBAAY,CAAC,GAAG;YACnB,OAAO;gBACL,IAAI;gBACJ,QAAQ,EAAE,kCAAuB,CAAC,WAAW;gBAC7C,QAAQ,EAAE,kCAAuB,CAAC,WAAW;gBAC7C,QAAQ,EAAE,GAAG,IAAI,IAAI;aACtB,CAAC;QACJ,KAAK,qBAAY,CAAC,IAAI;YACpB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,oBAAoB,CAAC,CAAC;YAC5D,CAAC;YACD,OAAO;gBACL,IAAI;gBACJ,QAAQ,EAAE,kCAAuB,CAAC,IAAI;gBACtC,QAAQ,EAAE,kCAAuB,CAAC,WAAW;gBAC7C,IAAI;aACL,CAAC;QACJ,KAAK,qBAAY,CAAC,MAAM;YACtB,OAAO;gBACL,IAAI;gBACJ,QAAQ,EAAE,kCAAuB,CAAC,MAAM;gBACxC,QAAQ,EAAE,kCAAuB,CAAC,WAAW;gBAC7C,QAAQ,EAAE,IAAI;aACf,CAAC;IACN,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAA8B,EAC9B,KAAsC;IAOtC,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QAChC,IAAI,CAAC,CAAC,cAAc,IAAI,MAAM,CAAC,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACrE,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO;YACL;gBACE,IAAI,EAAE,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC;gBAC7C,QAAQ,EAAE,kCAAuB,CAAC,WAAW;gBAC7C,QAAQ,EAAE,kCAAuB,CAAC,WAAW;gBAC7C,QAAQ,EAAE,MAAM,CAAC,YAAY;aAC9B;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAAkB,EAClB,KAAsC;IAEtC,MAAM,aAAa,GACjB,cAAc,IAAI,MAAM,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS;QAC3D,CAAC,CAAC,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC;QACzC,CAAC,CAAC,SAAS,CAAC;IAChB,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,mBAAU,CAAC,SAAS;YACvB,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,4BAAiB,CAAC,SAAS;gBACjC,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;aAC5D,CAAC;QACJ,KAAK,mBAAU,CAAC,YAAY;YAC1B,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,4BAAiB,CAAC,YAAY;gBACpC,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;aACzD,CAAC;QACJ,KAAK,mBAAU,CAAC,GAAG;YACjB,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,4BAAiB,CAAC,GAAG;gBAC3B,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS;oBAClC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;gBACxC,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC9D,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;aAC1D,CAAC;QACJ,KAAK,mBAAU,CAAC,GAAG;YACjB,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,4BAAiB,CAAC,GAAG;gBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;aAC1D,CAAC;QACJ,KAAK,mBAAU,CAAC,GAAG;YACjB,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,4BAAiB,CAAC,GAAG;gBAC3B,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;gBACxD,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;aAC1D,CAAC;IACN,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAChC,MAAkB;IAElB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC5C,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,CAAC,CAAC,cAAc,IAAI,MAAM,CAAC,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACrE,SAAS;QACX,CAAC;QACD,KAAK,IAAI,KAAK,GAAG,CAAC,GAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,IAAA,gCAAgB,EAAC;gBAC9B,MAAM,EAAE,MAAM,CAAC,IAAI;gBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,QAAQ,EAAE,MAAM,CAAC,YAAY;gBAC7B,KAAK;aACN,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,oBAAoB,MAAM,EAAE,CAAC;YAC/C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC9B,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACzB,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBAC7B,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,wBAAwB,CAC/B,MAAkB,EAClB,KAAsC;IAEtC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,4DAA4D,MAAM,CAAC,IAAI,IAAI,CAC5E,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/runtime/installation/helm-release-readiness.d.ts

@@ -0,0 +1,9 @@
+import { type InstallationReadinessExpectation, type InstallationReadinessObserver, type InstallationReadinessProof } from './readiness-proof';
+import { HelmCli } from '../runner/helm-cli';
+export declare class HelmReleaseReadinessObserver implements InstallationReadinessObserver {
+    private readonly helmFor;
+    constructor(helmFor?: (namespace: string) => HelmCli);
+    observe(expectation: InstallationReadinessExpectation): Promise<InstallationReadinessProof>;
+    private collectOwnedReleases;
+}
+//# sourceMappingURL=helm-release-readiness.d.ts.map

package/dist/runtime/installation/helm-release-readiness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm-release-readiness.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/helm-release-readiness.ts"],"names":[],"mappings":"AAIA,OAAO,EAQL,KAAK,gCAAgC,EAErC,KAAK,6BAA6B,EAClC,KAAK,0BAA0B,EAEhC,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,OAAO,EAAqB,MAAM,oBAAoB,CAAC;AAwBhE,qBAAa,4BACX,YAAW,6BAA6B;IAGtC,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,GAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OACrB;IAGjB,OAAO,CAClB,WAAW,EAAE,gCAAgC,GAC5C,OAAO,CAAC,0BAA0B,CAAC;YAmGxB,oBAAoB;CAUnC"}

package/dist/runtime/installation/helm-release-readiness.js

@@ -0,0 +1,97 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HelmReleaseReadinessObserver = void 0;
+const helm_release_1 = require("./helm-release");
+const readiness_proof_1 = require("./readiness-proof");
+const schema_1 = require("../config/schema");
+const helm_cli_1 = require("../runner/helm-cli");
+class HelmReleaseReadinessObserver {
+    helmFor;
+    constructor(helmFor = (namespace) => new helm_cli_1.HelmCli({ namespace })) {
+        this.helmFor = helmFor;
+    }
+    async observe(expectation) {
+        if (expectation.substrate !== schema_1.Substrate.Helm) {
+            throw new Error(`HelmReleaseReadinessObserver cannot observe the ${expectation.substrate} substrate.`);
+        }
+        if (expectation.namespace === undefined) {
+            throw new Error('Helm readiness observation requires the exact namespace the releases were installed into.');
+        }
+        const helm = this.helmFor(expectation.namespace);
+        if (!(await helm.available())) {
+            return (0, readiness_proof_1.unavailableProof)(expectation, 'The helm binary is not reachable.', 'Install helm (and point KUBECONFIG at the target cluster), then run `xema installation status` again.');
+        }
+        let owned;
+        try {
+            owned = await this.collectOwnedReleases(helm, expectation);
+        }
+        catch (error) {
+            return (0, readiness_proof_1.unavailableProof)(expectation, `Helm readiness observation failed: ${error instanceof Error ? error.message : String(error)}`, 'Restore access to the cluster and retry; no applied state was committed.');
+        }
+        const consumed = new Set();
+        const workloads = [];
+        const issues = [];
+        for (const expected of expectation.workloads) {
+            const release = owned.get(expected.name);
+            if (release === undefined) {
+                issues.push((0, readiness_proof_1.missingWorkload)(expected.name));
+                continue;
+            }
+            consumed.add(expected.name);
+            const deployed = release.status === helm_cli_1.HelmReleaseStatus.Deployed;
+            const planMatches = release.planHash === expectation.effectivePlanHash;
+            const executionMatches = expectation.executionId === undefined ||
+                release.executionId === expectation.executionId;
+            workloads.push({
+                name: expected.name,
+                state: deployed && planMatches && executionMatches ? 'ready' : 'unhealthy',
+                expected: true,
+                checks: {
+                    releaseStatus: release.status,
+                    revision: release.revision,
+                    installationId: release.installationId ?? 'missing',
+                    planHash: release.planHash ?? 'missing',
+                    planMatches,
+                    executionId: release.executionId ?? 'missing',
+                    executionMatches,
+                    namespace: expectation.namespace,
+                },
+            });
+            if (!deployed) {
+                issues.push({
+                    code: readiness_proof_1.InstallationReadinessIssueCode.ServiceNotReady,
+                    workload: expected.name,
+                    message: `Helm release ${expected.name} is ${release.status}, not deployed.`,
+                    remediation: 'Inspect `helm status` and the workload events for that release, then re-run apply.',
+                });
+            }
+            if (!planMatches) {
+                issues.push((0, readiness_proof_1.planIdentityMismatch)(expected.name));
+            }
+            if (!executionMatches) {
+                issues.push((0, readiness_proof_1.executionIdentityMismatch)(expected.name));
+            }
+        }
+        for (const [name] of owned) {
+            if (!consumed.has(name)) {
+                workloads.push({
+                    name,
+                    state: 'unexpected',
+                    expected: false,
+                    checks: {
+                        releaseStatus: owned.get(name)?.status ?? 'missing',
+                        namespace: expectation.namespace,
+                    },
+                });
+                issues.push((0, readiness_proof_1.unexpectedWorkload)(name));
+            }
+        }
+        return (0, readiness_proof_1.buildReadinessProof)(expectation, workloads, issues);
+    }
+    async collectOwnedReleases(helm, expectation) {
+        const { owned } = await (0, helm_release_1.partitionHelmReleasesByOwner)(helm, expectation.installationId);
+        return new Map(owned.map((release) => [release.name, release]));
+    }
+}
+exports.HelmReleaseReadinessObserver = HelmReleaseReadinessObserver;
+//# sourceMappingURL=helm-release-readiness.js.map

package/dist/runtime/installation/helm-release-readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm-release-readiness.js","sourceRoot":"","sources":["../../../src/runtime/installation/helm-release-readiness.ts"],"names":[],"mappings":";;;AAAA,iDAGwB;AACxB,uDAa2B;AAC3B,6CAA6C;AAC7C,iDAAgE;AAwBhE,MAAa,4BAA4B;IAIpB;IADnB,YACmB,UAA0C,CAAC,SAAS,EAAE,EAAE,CACvE,IAAI,kBAAO,CAAC,EAAE,SAAS,EAAE,CAAC;QADX,YAAO,GAAP,OAAO,CACI;IAC3B,CAAC;IAEG,KAAK,CAAC,OAAO,CAClB,WAA6C;QAE7C,IAAI,WAAW,CAAC,SAAS,KAAK,kBAAS,CAAC,IAAI,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CACb,mDAAmD,WAAW,CAAC,SAAS,aAAa,CACtF,CAAC;QACJ,CAAC;QACD,IAAI,WAAW,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,2FAA2F,CAC5F,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAA,kCAAgB,EACrB,WAAW,EACX,mCAAmC,EACnC,uGAAuG,CACxG,CAAC;QACJ,CAAC;QAED,IAAI,KAAgD,CAAC;QACrD,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAA,kCAAgB,EACrB,WAAW,EACX,sCAAsC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC9F,0EAA0E,CAC3E,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QACnC,MAAM,SAAS,GAAmC,EAAE,CAAC;QACrD,MAAM,MAAM,GAAiC,EAAE,CAAC;QAChD,KAAK,MAAM,QAAQ,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;YAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,IAAA,iCAAe,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC5C,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,KAAK,4BAAiB,CAAC,QAAQ,CAAC;YAC/D,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,KAAK,WAAW,CAAC,iBAAiB,CAAC;YACvE,MAAM,gBAAgB,GACpB,WAAW,CAAC,WAAW,KAAK,SAAS;gBACrC,OAAO,CAAC,WAAW,KAAK,WAAW,CAAC,WAAW,CAAC;YAClD,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,KAAK,EAAE,QAAQ,IAAI,WAAW,IAAI,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW;gBAC1E,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE;oBACN,aAAa,EAAE,OAAO,CAAC,MAAM;oBAC7B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,SAAS;oBACnD,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,SAAS;oBACvC,WAAW;oBACX,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,SAAS;oBAC7C,gBAAgB;oBAChB,SAAS,EAAE,WAAW,CAAC,SAAS;iBACjC;aACF,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,gDAA8B,CAAC,eAAe;oBACpD,QAAQ,EAAE,QAAQ,CAAC,IAAI;oBACvB,OAAO,EAAE,gBAAgB,QAAQ,CAAC,IAAI,OAAO,OAAO,CAAC,MAAM,iBAAiB;oBAC5E,WAAW,EACT,oFAAoF;iBACvF,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,IAAA,sCAAoB,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,MAAM,CAAC,IAAI,CAAC,IAAA,2CAAyB,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,SAAS,CAAC,IAAI,CAAC;oBACb,IAAI;oBACJ,KAAK,EAAE,YAAY;oBACnB,QAAQ,EAAE,KAAK;oBACf,MAAM,EAAE;wBACN,aAAa,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,SAAS;wBACnD,SAAS,EAAE,WAAW,CAAC,SAAS;qBACjC;iBACF,CAAC,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,IAAA,oCAAkB,EAAC,IAAI,CAAC,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QACD,OAAO,IAAA,qCAAmB,EAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;IAOO,KAAK,CAAC,oBAAoB,CAChC,IAAa,EACb,WAA6C;QAE7C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAA,2CAA4B,EAClD,IAAI,EACJ,WAAW,CAAC,cAAc,CAC3B,CAAC;QACF,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;CACF;AAvHD,oEAuHC"}

package/dist/runtime/installation/helm-release.d.ts

@@ -0,0 +1,24 @@
+import type { CompiledXemaInstallation } from './compiler';
+import type { HelmCli, HelmReleaseState } from '../runner/helm-cli';
+export interface HelmReleaseRendering {
+    readonly namespace?: string;
+    readonly values: Readonly<Record<string, string>>;
+}
+export declare const HELM_INSTALLATION_ID_VALUE = "xema.installationId";
+export declare const HELM_PLAN_HASH_VALUE = "xema.planHash";
+export declare const HELM_EXECUTION_ID_VALUE = "xema.executionId";
+export interface HelmReleaseIdentity {
+    readonly installationId?: string;
+    readonly planHash?: string;
+    readonly executionId?: string;
+}
+export declare function readHelmReleaseIdentity(values: Readonly<Record<string, unknown>>): HelmReleaseIdentity;
+export interface InspectedHelmRelease extends HelmReleaseState, HelmReleaseIdentity {
+}
+export interface HelmReleaseOwnership {
+    readonly owned: readonly InspectedHelmRelease[];
+    readonly foreign: readonly InspectedHelmRelease[];
+}
+export declare function partitionHelmReleasesByOwner(helm: HelmCli, installationId: string): Promise<HelmReleaseOwnership>;
+export declare function helmReleaseRendering(installation: CompiledXemaInstallation): HelmReleaseRendering;
+//# sourceMappingURL=helm-release.d.ts.map

package/dist/runtime/installation/helm-release.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm-release.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/helm-release.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAmBpE,MAAM,WAAW,oBAAoB;IAKnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACnD;AAGD,eAAO,MAAM,0BAA0B,wBAAwB,CAAC;AAChE,eAAO,MAAM,oBAAoB,kBAAkB,CAAC;AACpD,eAAO,MAAM,uBAAuB,qBAAqB,CAAC;AAQ1D,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACxC,mBAAmB,CASrB;AAGD,MAAM,WAAW,oBACf,SAAQ,gBAAgB,EACtB,mBAAmB;CAAG;AAG1B,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACnD;AAWD,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,OAAO,EACb,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,oBAAoB,CAAC,CAkB/B;AA0BD,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,wBAAwB,GACrC,oBAAoB,CA6DtB"}

package/dist/runtime/installation/helm-release.js

@@ -0,0 +1,96 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HELM_EXECUTION_ID_VALUE = exports.HELM_PLAN_HASH_VALUE = exports.HELM_INSTALLATION_ID_VALUE = void 0;
+exports.readHelmReleaseIdentity = readHelmReleaseIdentity;
+exports.partitionHelmReleasesByOwner = partitionHelmReleasesByOwner;
+exports.helmReleaseRendering = helmReleaseRendering;
+const readiness_proof_1 = require("./readiness-proof");
+exports.HELM_INSTALLATION_ID_VALUE = 'xema.installationId';
+exports.HELM_PLAN_HASH_VALUE = 'xema.planHash';
+exports.HELM_EXECUTION_ID_VALUE = 'xema.executionId';
+function readHelmReleaseIdentity(values) {
+    const installationId = readHelmValue(values, exports.HELM_INSTALLATION_ID_VALUE);
+    const planHash = readHelmValue(values, exports.HELM_PLAN_HASH_VALUE);
+    const executionId = readHelmValue(values, exports.HELM_EXECUTION_ID_VALUE);
+    return {
+        ...(installationId === undefined ? {} : { installationId }),
+        ...(planHash === undefined ? {} : { planHash }),
+        ...(executionId === undefined ? {} : { executionId }),
+    };
+}
+async function partitionHelmReleasesByOwner(helm, installationId) {
+    const states = await helm.listReleaseStates();
+    const inspected = await (0, readiness_proof_1.mapConcurrentOrdered)(states, readiness_proof_1.MAX_CONCURRENT_READINESS_PROBES, async (state) => ({
+        ...state,
+        ...readHelmReleaseIdentity(await helm.getReleaseValues(state.name)),
+    }));
+    return {
+        owned: inspected.filter((release) => release.installationId === installationId),
+        foreign: inspected.filter((release) => release.installationId !== installationId),
+    };
+}
+function readHelmValue(values, dottedKey) {
+    let cursor = values;
+    for (const segment of dottedKey.split('.')) {
+        if (typeof cursor !== 'object' || cursor === null) {
+            return undefined;
+        }
+        cursor = cursor[segment];
+    }
+    return typeof cursor === 'string' ? cursor : undefined;
+}
+function helmReleaseRendering(installation) {
+    const spec = installation.spec;
+    const values = {
+        'xema.profile': spec.profile,
+        'xema.environment': spec.lifecycle.environment,
+        'xema.target': spec.target.kind,
+        'xema.region': spec.target.region,
+        'xema.tenancy.mode': spec.tenancy.mode,
+        'xema.tenancy.isolation': spec.tenancy.isolation,
+        'xema.security.networkPolicy': spec.security.networkPolicy,
+        'xema.security.identity': spec.security.identity,
+        'xema.security.secretsBackend': spec.security.secretsBackend,
+        'xema.security.encryption': spec.security.encryption,
+        'xema.storage.class': spec.storage.class,
+        'xema.recovery.mode': spec.recovery.mode,
+        'xema.recovery.retentionDays': String(spec.recovery.retentionDays),
+        'xema.recovery.rpoMinutes': String(spec.recovery.rpoMinutes),
+        'xema.recovery.rtoMinutes': String(spec.recovery.rtoMinutes),
+        'xema.recovery.restoreDrillIntervalDays': String(spec.recovery.restoreDrillIntervalDays),
+        'xema.observability.level': spec.observability.level,
+        'xema.observability.metrics': String(spec.observability.metrics),
+        'xema.observability.tracing': String(spec.observability.tracing),
+        'xema.observability.auditLog': String(spec.observability.auditLog),
+        'xema.observability.retentionDays': String(spec.observability.retentionDays),
+        'xema.capacity.minReplicas': String(spec.capacity.minReplicas),
+        'xema.capacity.maxReplicas': String(spec.capacity.maxReplicas),
+        'xema.capacity.maxOrganizations': String(spec.capacity.maxOrganizations),
+        'xema.capacity.maxConcurrentSessions': String(spec.capacity.maxConcurrentSessions),
+        replicaCount: String(spec.capacity.minReplicas),
+    };
+    if (spec.recovery.destinationSecretRef !== undefined) {
+        values['xema.recovery.destinationSecretRef'] =
+            spec.recovery.destinationSecretRef;
+    }
+    if (spec.observability.exportSecretRef !== undefined) {
+        values['xema.observability.exportSecretRef'] =
+            spec.observability.exportSecretRef;
+    }
+    spec.domains.forEach((domain, index) => {
+        values[`xema.domains[${String(index)}].purpose`] = domain.purpose;
+        values[`xema.domains[${String(index)}].hostname`] = domain.hostname;
+        values[`xema.domains[${String(index)}].tls.mode`] = domain.tls.mode;
+        if (domain.tls.secretRef !== undefined) {
+            values[`xema.domains[${String(index)}].tls.secretRef`] =
+                domain.tls.secretRef;
+        }
+    });
+    return {
+        ...(spec.operator.namespace === undefined
+            ? {}
+            : { namespace: spec.operator.namespace }),
+        values,
+    };
+}
+//# sourceMappingURL=helm-release.js.map

package/dist/runtime/installation/helm-release.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm-release.js","sourceRoot":"","sources":["../../../src/runtime/installation/helm-release.ts"],"names":[],"mappings":";;;AAoDA,0DAWC;AAsBD,oEAqBC;AA0BD,oDA+DC;AAnMD,uDAG2B;AAiCd,QAAA,0BAA0B,GAAG,qBAAqB,CAAC;AACnD,QAAA,oBAAoB,GAAG,eAAe,CAAC;AACvC,QAAA,uBAAuB,GAAG,kBAAkB,CAAC;AAc1D,SAAgB,uBAAuB,CACrC,MAAyC;IAEzC,MAAM,cAAc,GAAG,aAAa,CAAC,MAAM,EAAE,kCAA0B,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,EAAE,4BAAoB,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,EAAE,+BAAuB,CAAC,CAAC;IACnE,OAAO;QACL,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;QAC3D,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC/C,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;KACtD,CAAC;AACJ,CAAC;AAsBM,KAAK,UAAU,4BAA4B,CAChD,IAAa,EACb,cAAsB;IAEtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC9C,MAAM,SAAS,GAAG,MAAM,IAAA,sCAAoB,EAC1C,MAAM,EACN,iDAA+B,EAC/B,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAChB,GAAG,KAAK;QACR,GAAG,uBAAuB,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;KACpE,CAAC,CACH,CAAC;IACF,OAAO;QACL,KAAK,EAAE,SAAS,CAAC,MAAM,CACrB,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc,KAAK,cAAc,CACvD;QACD,OAAO,EAAE,SAAS,CAAC,MAAM,CACvB,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc,KAAK,cAAc,CACvD;KACF,CAAC;AACJ,CAAC;AAOD,SAAS,aAAa,CACpB,MAAyC,EACzC,SAAiB;IAEjB,IAAI,MAAM,GAAY,MAAM,CAAC;IAC7B,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAClD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAI,MAAkC,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAOD,SAAgB,oBAAoB,CAClC,YAAsC;IAEtC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC;IAC/B,MAAM,MAAM,GAA2B;QACrC,cAAc,EAAE,IAAI,CAAC,OAAO;QAC5B,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW;QAC9C,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;QAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;QACjC,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;QACtC,wBAAwB,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;QAChD,6BAA6B,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa;QAC1D,wBAAwB,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;QAChD,8BAA8B,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc;QAC5D,0BAA0B,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU;QACpD,oBAAoB,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;QACxC,oBAAoB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;QACxC,6BAA6B,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;QAClE,0BAA0B,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC5D,0BAA0B,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC5D,wCAAwC,EAAE,MAAM,CAC9C,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CACvC;QACD,0BAA0B,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK;QACpD,4BAA4B,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAChE,4BAA4B,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAChE,6BAA6B,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;QAClE,kCAAkC,EAAE,MAAM,CACxC,IAAI,CAAC,aAAa,CAAC,aAAa,CACjC;QACD,2BAA2B,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC9D,2BAA2B,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC9D,gCAAgC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QACxE,qCAAqC,EAAE,MAAM,CAC3C,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CACpC;QACD,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;KAChD,CAAC;IACF,IAAI,IAAI,CAAC,QAAQ,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QACrD,MAAM,CAAC,oCAAoC,CAAC;YAC1C,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IACvC,CAAC;IACD,IAAI,IAAI,CAAC,aAAa,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACrD,MAAM,CAAC,oCAAoC,CAAC;YAC1C,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC;IACvC,CAAC;IAGD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QACrC,MAAM,CAAC,gBAAgB,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;QAClE,MAAM,CAAC,gBAAgB,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;QACpE,MAAM,CAAC,gBAAgB,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;QACpE,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,CAAC,gBAAgB,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC;gBACpD,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;QACzB,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO;QACL,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC3C,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/runtime/installation/index.d.ts

@@ -1,13 +1,22 @@
 export * from './compiler';
 export * from './contract';
+export * from './current-launcher-renderer';
 export * from './diagnostics';
 export * from './diff';
 export * from './from-current-config';
+export * from './helm-release';
+export * from './helm-release-readiness';
 export * from './format';
 export * from './lifecycle';
+export * from './readiness';
+export * from './json-schema';
+export * from './kubernetes-readiness';
 export * from './serialization';
+export * from './setup-renderer';
+export * from './setup-profile';
 export * from './state-store';
 export * from './status';
 export * from './support-bundle';
+export * from './to-current-config';
 export * from './validation';
 //# sourceMappingURL=index.d.ts.map

package/dist/runtime/installation/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,QAAQ,CAAC;AACvB,cAAc,uBAAuB,CAAC;AACtC,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,kBAAkB,CAAC;AACjC,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,eAAe,CAAC;AAC9B,cAAc,QAAQ,CAAC;AACvB,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC;AACzC,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,cAAc,CAAC"}

package/dist/runtime/installation/index.js

@@ -16,14 +16,23 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./compiler"), exports);
 __exportStar(require("./contract"), exports);
+__exportStar(require("./current-launcher-renderer"), exports);
 __exportStar(require("./diagnostics"), exports);
 __exportStar(require("./diff"), exports);
 __exportStar(require("./from-current-config"), exports);
+__exportStar(require("./helm-release"), exports);
+__exportStar(require("./helm-release-readiness"), exports);
 __exportStar(require("./format"), exports);
 __exportStar(require("./lifecycle"), exports);
+__exportStar(require("./readiness"), exports);
+__exportStar(require("./json-schema"), exports);
+__exportStar(require("./kubernetes-readiness"), exports);
 __exportStar(require("./serialization"), exports);
+__exportStar(require("./setup-renderer"), exports);
+__exportStar(require("./setup-profile"), exports);
 __exportStar(require("./state-store"), exports);
 __exportStar(require("./status"), exports);
 __exportStar(require("./support-bundle"), exports);
+__exportStar(require("./to-current-config"), exports);
 __exportStar(require("./validation"), exports);
 //# sourceMappingURL=index.js.map

package/dist/runtime/installation/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/installation/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAA2B;AAC3B,6CAA2B;AAC3B,gDAA8B;AAC9B,yCAAuB;AACvB,wDAAsC;AACtC,2CAAyB;AACzB,8CAA4B;AAC5B,kDAAgC;AAChC,gDAA8B;AAC9B,2CAAyB;AACzB,mDAAiC;AACjC,+CAA6B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/installation/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAA2B;AAC3B,6CAA2B;AAC3B,8DAA4C;AAC5C,gDAA8B;AAC9B,yCAAuB;AACvB,wDAAsC;AACtC,iDAA+B;AAC/B,2DAAyC;AACzC,2CAAyB;AACzB,8CAA4B;AAC5B,8CAA4B;AAC5B,gDAA8B;AAC9B,yDAAuC;AACvC,kDAAgC;AAChC,mDAAiC;AACjC,kDAAgC;AAChC,gDAA8B;AAC9B,2CAAyB;AACzB,mDAAiC;AACjC,sDAAoC;AACpC,+CAA6B"}