@xemahq/xema 0.14.0 → 0.15.0

package/dist/runtime/installation/json-schema.d.ts

@@ -0,0 +1,4 @@
+export declare function xemaInstallationJsonSchema(): object;
+export declare const XEMA_INSTALLATION_JSON_SCHEMA_GOLDEN_SHA256 = "70a66ac1ec0b28160bf2fce2cb605f4f64e28f6add91fd4f59d7d0c249c92051";
+export declare function xemaInstallationJsonSchemaHash(): string;
+//# sourceMappingURL=json-schema.d.ts.map

package/dist/runtime/installation/json-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-schema.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/json-schema.ts"],"names":[],"mappings":"AASA,wBAAgB,0BAA0B,IAAI,MAAM,CAEnD;AAED,eAAO,MAAM,2CAA2C,qEACY,CAAC;AAErE,wBAAgB,8BAA8B,IAAI,MAAM,CAEvD"}

package/dist/runtime/installation/json-schema.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.XEMA_INSTALLATION_JSON_SCHEMA_GOLDEN_SHA256 = void 0;
+exports.xemaInstallationJsonSchema = xemaInstallationJsonSchema;
+exports.xemaInstallationJsonSchemaHash = xemaInstallationJsonSchemaHash;
+const zod_1 = require("zod");
+const contract_1 = require("./contract");
+const serialization_1 = require("./serialization");
+function xemaInstallationJsonSchema() {
+    return (0, zod_1.toJSONSchema)(contract_1.XemaInstallationSchema, { target: 'draft-7' });
+}
+exports.XEMA_INSTALLATION_JSON_SCHEMA_GOLDEN_SHA256 = '70a66ac1ec0b28160bf2fce2cb605f4f64e28f6add91fd4f59d7d0c249c92051';
+function xemaInstallationJsonSchemaHash() {
+    return (0, serialization_1.hashInstallation)(xemaInstallationJsonSchema());
+}
+//# sourceMappingURL=json-schema.js.map

package/dist/runtime/installation/json-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-schema.js","sourceRoot":"","sources":["../../../src/runtime/installation/json-schema.ts"],"names":[],"mappings":";;;AASA,gEAEC;AAKD,wEAEC;AAlBD,6BAAmC;AAEnC,yCAAoD;AACpD,mDAAmD;AAMnD,SAAgB,0BAA0B;IACxC,OAAO,IAAA,kBAAY,EAAC,iCAAsB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AACrE,CAAC;AAEY,QAAA,2CAA2C,GACtD,kEAAkE,CAAC;AAErE,SAAgB,8BAA8B;IAC5C,OAAO,IAAA,gCAAgB,EAAC,0BAA0B,EAAE,CAAC,CAAC;AACxD,CAAC"}

package/dist/runtime/installation/kubernetes-readiness.d.ts

@@ -0,0 +1,60 @@
+import { type InstallationReadinessProof } from './readiness';
+import type { LaunchPlan } from '../launch';
+export declare enum KubernetesWorkloadKind {
+    Deployment = "Deployment",
+    StatefulSet = "StatefulSet",
+    Job = "Job"
+}
+export interface ExpectedKubernetesWorkload {
+    readonly kind: KubernetesWorkloadKind;
+    readonly name: string;
+    readonly serviceName?: string;
+    readonly replicas?: number;
+    readonly successfulCompletions?: number;
+    readonly artifactIdentity?: string;
+    readonly rolloutIdentity?: string;
+    readonly controllerRevision?: string;
+}
+export interface KubernetesReadinessExpectation {
+    readonly workloads: readonly ExpectedKubernetesWorkload[];
+    readonly bootstrapMarkers: readonly string[];
+    readonly smokeChecks: readonly string[];
+    readonly backupPrerequisites: readonly string[];
+    readonly effectivePlanHash: string;
+    readonly namespace: string;
+    readonly installationId: string;
+}
+export interface ObservedKubernetesWorkload {
+    readonly kind: KubernetesWorkloadKind;
+    readonly name: string;
+    readonly generation: number;
+    readonly observedGeneration?: number;
+    readonly desiredReplicas?: number;
+    readonly readyReplicas?: number;
+    readonly updatedReplicas?: number;
+    readonly availableReplicas?: number;
+    readonly succeeded?: number;
+    readonly failed?: number;
+    readonly artifactIdentity?: string;
+    readonly rolloutIdentity?: string;
+    readonly currentRevision?: string;
+    readonly updateRevision?: string;
+}
+export interface KubernetesReadinessObservation {
+    readonly workloads: readonly ObservedKubernetesWorkload[];
+    readonly services: readonly string[];
+    readonly endpointReadyAddresses: Readonly<Record<string, number>>;
+    readonly bootstrapMarkers: readonly string[];
+    readonly smokeChecks: Readonly<Record<string, boolean>>;
+    readonly backupPrerequisites: Readonly<Record<string, boolean>>;
+    readonly effectivePlanHash: string;
+    readonly namespace: string;
+    readonly installationId: string;
+}
+export interface KubernetesReadinessObservationSource {
+    observe(expectation: KubernetesReadinessExpectation): Promise<KubernetesReadinessObservation>;
+}
+export declare function proveKubernetesInstallationReadiness(expectation: KubernetesReadinessExpectation, source: KubernetesReadinessObservationSource): Promise<InstallationReadinessProof>;
+export declare function kubernetesServiceExpectationsFromLaunchPlan(plan: Pick<LaunchPlan, 'substrate' | 'roster'>, rolloutIdentities: ReadonlyMap<string, string>): readonly ExpectedKubernetesWorkload[];
+export declare function evaluateKubernetesReadiness(expectation: KubernetesReadinessExpectation, observation: KubernetesReadinessObservation): InstallationReadinessProof;
+//# sourceMappingURL=kubernetes-readiness.d.ts.map

package/dist/runtime/installation/kubernetes-readiness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubernetes-readiness.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/kubernetes-readiness.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,0BAA0B,EAEhC,MAAM,aAAa,CAAC;AAErB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C,oBAAY,sBAAsB;IAChC,UAAU,eAAe;IACzB,WAAW,gBAAgB;IAC3B,GAAG,QAAQ;CACZ;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAExC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC;AAED,MAAM,WAAW,8BAA8B;IAM7C,QAAQ,CAAC,SAAS,EAAE,SAAS,0BAA0B,EAAE,CAAC;IAC1D,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IAChD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,8BAA8B;IAE7C,QAAQ,CAAC,SAAS,EAAE,SAAS,0BAA0B,EAAE,CAAC;IAC1D,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAClE,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,QAAQ,CAAC,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAEhE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,oCAAoC;IACnD,OAAO,CACL,WAAW,EAAE,8BAA8B,GAC1C,OAAO,CAAC,8BAA8B,CAAC,CAAC;CAC5C;AAED,wBAAsB,oCAAoC,CACxD,WAAW,EAAE,8BAA8B,EAC3C,MAAM,EAAE,oCAAoC,GAC3C,OAAO,CAAC,0BAA0B,CAAC,CAKrC;AAOD,wBAAgB,2CAA2C,CACzD,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,GAAG,QAAQ,CAAC,EAC9C,iBAAiB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7C,SAAS,0BAA0B,EAAE,CA6BvC;AAED,wBAAgB,2BAA2B,CACzC,WAAW,EAAE,8BAA8B,EAC3C,WAAW,EAAE,8BAA8B,GAC1C,0BAA0B,CA0M5B"}

package/dist/runtime/installation/kubernetes-readiness.js

@@ -0,0 +1,384 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KubernetesWorkloadKind = void 0;
+exports.proveKubernetesInstallationReadiness = proveKubernetesInstallationReadiness;
+exports.kubernetesServiceExpectationsFromLaunchPlan = kubernetesServiceExpectationsFromLaunchPlan;
+exports.evaluateKubernetesReadiness = evaluateKubernetesReadiness;
+const schema_1 = require("../config/schema");
+const unit_type_1 = require("../unit-type");
+const readiness_1 = require("./readiness");
+var KubernetesWorkloadKind;
+(function (KubernetesWorkloadKind) {
+    KubernetesWorkloadKind["Deployment"] = "Deployment";
+    KubernetesWorkloadKind["StatefulSet"] = "StatefulSet";
+    KubernetesWorkloadKind["Job"] = "Job";
+})(KubernetesWorkloadKind || (exports.KubernetesWorkloadKind = KubernetesWorkloadKind = {}));
+async function proveKubernetesInstallationReadiness(expectation, source) {
+    return evaluateKubernetesReadiness(expectation, await source.observe(expectation));
+}
+function kubernetesServiceExpectationsFromLaunchPlan(plan, rolloutIdentities) {
+    if (plan.substrate !== schema_1.Substrate.Helm) {
+        throw new Error('Kubernetes service expectations require a Helm launch plan.');
+    }
+    return plan.roster.map((entry) => {
+        if (entry.unitType !== unit_type_1.RuntimeUnitType.Service &&
+            entry.unitType !== unit_type_1.RuntimeUnitType.Web) {
+            throw new Error(`Distribution-lock workload ${entry.name} has unsupported Kubernetes unit type ${entry.unitType}.`);
+        }
+        const rolloutIdentity = rolloutIdentities.get(entry.name);
+        if (rolloutIdentity === undefined || rolloutIdentity.length === 0) {
+            throw new Error(`Kubernetes executor supplied no artifact-derived rollout identity for ${entry.name}.`);
+        }
+        return {
+            kind: KubernetesWorkloadKind.Deployment,
+            name: entry.name,
+            serviceName: entry.name,
+            replicas: 1,
+            rolloutIdentity,
+        };
+    });
+}
+function evaluateKubernetesReadiness(expectation, observation) {
+    assertUniqueExpectedIdentities(expectation);
+    assertValidObservation(observation);
+    const expectedByIdentity = new Map(expectation.workloads.map((workload) => [
+        workloadIdentity(workload.kind, workload.name),
+        workload,
+    ]));
+    const observedByIdentity = new Map(observation.workloads.map((workload) => [
+        workloadIdentity(workload.kind, workload.name),
+        workload,
+    ]));
+    if (observedByIdentity.size !== observation.workloads.length) {
+        throw new Error('Kubernetes readiness observation contains duplicate workload identities.');
+    }
+    const services = new Set(observation.services);
+    const markers = new Set(observation.bootstrapMarkers);
+    const workloads = [];
+    const issues = [];
+    if (observation.namespace !== expectation.namespace ||
+        observation.installationId !== expectation.installationId) {
+        issues.push({
+            code: readiness_1.InstallationReadinessIssueCode.PlanIdentityMismatch,
+            message: `Observed Kubernetes scope ${observation.namespace}/${observation.installationId} does not match ${expectation.namespace}/${expectation.installationId}.`,
+            remediation: 'Query only resources carrying the exact namespace and installation ownership labels.',
+        });
+    }
+    if (observation.effectivePlanHash !== expectation.effectivePlanHash) {
+        issues.push({
+            code: readiness_1.InstallationReadinessIssueCode.PlanIdentityMismatch,
+            message: `Observed Kubernetes plan identity ${observation.effectivePlanHash} does not match ${expectation.effectivePlanHash}.`,
+            remediation: 'Reconcile the current setup artifacts and wait for their durable plan marker before committing state.',
+        });
+    }
+    for (const expected of expectation.workloads) {
+        const identity = workloadIdentity(expected.kind, expected.name);
+        const observed = observedByIdentity.get(identity);
+        if (observed === undefined) {
+            issues.push({
+                code: readiness_1.InstallationReadinessIssueCode.MissingWorkload,
+                workload: identity,
+                message: `Expected Kubernetes ${identity} is missing.`,
+                remediation: 'Inspect the matching Helm release and Kubernetes events, then reconcile the setup artifacts.',
+            });
+            continue;
+        }
+        const currentGeneration = observed.kind === KubernetesWorkloadKind.Job ||
+            observed.observedGeneration === observed.generation;
+        const resourceReady = kubernetesResourceReady(expected, observed);
+        workloads.push({
+            name: identity,
+            state: currentGeneration && resourceReady ? 'ready' : 'unhealthy',
+            expected: true,
+            checks: {
+                generation: observed.generation,
+                ...(observed.observedGeneration === undefined
+                    ? {}
+                    : { observedGeneration: observed.observedGeneration }),
+                ...(observed.rolloutIdentity === undefined
+                    ? {}
+                    : { rolloutIdentity: observed.rolloutIdentity }),
+                ...(observed.artifactIdentity === undefined
+                    ? {}
+                    : { artifactIdentity: observed.artifactIdentity }),
+                resourceReady,
+            },
+        });
+        if (!currentGeneration) {
+            issues.push({
+                code: readiness_1.InstallationReadinessIssueCode.GenerationNotObserved,
+                workload: identity,
+                message: `${identity} has not observed generation ${String(observed.generation)}.`,
+                remediation: 'Inspect controller events and wait for the current rollout to be observed before committing applied state.',
+            });
+        }
+        appendResourceIssues(expected, observed, issues);
+        if (expected.serviceName !== undefined) {
+            if (!services.has(expected.serviceName)) {
+                issues.push({
+                    code: readiness_1.InstallationReadinessIssueCode.ServiceMissing,
+                    workload: identity,
+                    message: `Service ${expected.serviceName} for ${identity} is missing.`,
+                    remediation: 'Reconcile the workload artifact that declares the Kubernetes Service.',
+                });
+            }
+            if ((observation.endpointReadyAddresses[expected.serviceName] ?? 0) < 1) {
+                issues.push({
+                    code: readiness_1.InstallationReadinessIssueCode.EndpointsMissing,
+                    workload: identity,
+                    message: `Service ${expected.serviceName} has no ready endpoint addresses.`,
+                    remediation: 'Inspect pod readiness, Service selectors, and EndpointSlice state.',
+                });
+            }
+        }
+    }
+    for (const observed of observation.workloads) {
+        const identity = workloadIdentity(observed.kind, observed.name);
+        if (!expectedByIdentity.has(identity)) {
+            workloads.push({
+                name: identity,
+                state: 'unexpected',
+                expected: false,
+                checks: {
+                    generation: observed.generation,
+                    ...(observed.observedGeneration === undefined
+                        ? {}
+                        : { observedGeneration: observed.observedGeneration }),
+                },
+            });
+            issues.push({
+                code: readiness_1.InstallationReadinessIssueCode.UnexpectedWorkload,
+                workload: identity,
+                message: `Managed Kubernetes ${identity} is not declared by the distribution roster or setup artifacts.`,
+                remediation: 'Review the selected distribution and rendered setup artifacts, then remove stale managed resources.',
+            });
+        }
+    }
+    const expectedServices = new Set(expectation.workloads.flatMap((workload) => workload.serviceName === undefined ? [] : [workload.serviceName]));
+    for (const service of services) {
+        if (!expectedServices.has(service)) {
+            issues.push({
+                code: readiness_1.InstallationReadinessIssueCode.UnexpectedWorkload,
+                workload: `Service/${service}`,
+                message: `Managed Kubernetes Service/${service} is not declared by the readiness expectation.`,
+                remediation: 'Remove the stale managed Service or restore it to the artifact-derived expectation.',
+            });
+        }
+    }
+    for (const endpointName of Object.keys(observation.endpointReadyAddresses)) {
+        if (!expectedServices.has(endpointName)) {
+            issues.push({
+                code: readiness_1.InstallationReadinessIssueCode.UnexpectedWorkload,
+                workload: `Endpoints/${endpointName}`,
+                message: `Managed Kubernetes Endpoints/${endpointName} is not declared by the readiness expectation.`,
+                remediation: 'Remove stale endpoint resources after reconciling their owning Service.',
+            });
+        }
+    }
+    for (const marker of expectation.bootstrapMarkers) {
+        if (!markers.has(marker)) {
+            issues.push({
+                code: readiness_1.InstallationReadinessIssueCode.BootstrapMarkerMissing,
+                message: `Bootstrap marker ${marker} is missing.`,
+                remediation: 'Inspect the bootstrap Job and do not commit applied state until its durable marker exists.',
+            });
+        }
+    }
+    appendNamedCheckIssues(expectation.smokeChecks, observation.smokeChecks, readiness_1.InstallationReadinessIssueCode.SmokeCheckFailed, 'smoke check', issues);
+    appendNamedCheckIssues(expectation.backupPrerequisites, observation.backupPrerequisites, readiness_1.InstallationReadinessIssueCode.BackupPrerequisiteMissing, 'backup prerequisite', issues);
+    return {
+        substrate: schema_1.Substrate.Helm,
+        effectivePlanHash: observation.effectivePlanHash,
+        expectedWorkloads: expectation.workloads.map((workload) => workloadIdentity(workload.kind, workload.name)),
+        ready: issues.length === 0,
+        workloads,
+        issues,
+    };
+}
+function assertValidObservation(observation) {
+    if (observation.namespace.length === 0 ||
+        observation.installationId.length === 0 ||
+        observation.effectivePlanHash.length === 0) {
+        throw new Error('Kubernetes readiness observation is missing namespace, installation, or plan scope.');
+    }
+    for (const workload of observation.workloads) {
+        const counters = [
+            ['generation', workload.generation],
+            ['observedGeneration', workload.observedGeneration],
+            ['desiredReplicas', workload.desiredReplicas],
+            ['readyReplicas', workload.readyReplicas],
+            ['updatedReplicas', workload.updatedReplicas],
+            ['availableReplicas', workload.availableReplicas],
+            ['succeeded', workload.succeeded],
+            ['failed', workload.failed],
+        ];
+        for (const [field, value] of counters) {
+            if (value !== undefined &&
+                (!Number.isSafeInteger(value) || value < 0)) {
+                throw new Error(`Kubernetes readiness observation has invalid ${field} for ${workloadIdentity(workload.kind, workload.name)}.`);
+            }
+        }
+        if (workload.kind !== KubernetesWorkloadKind.Job &&
+            workload.observedGeneration === undefined) {
+            throw new Error(`Kubernetes readiness observation has no observedGeneration for ${workloadIdentity(workload.kind, workload.name)}.`);
+        }
+        if (workload.kind === KubernetesWorkloadKind.Job &&
+            (workload.artifactIdentity === undefined ||
+                workload.artifactIdentity.length === 0)) {
+            throw new Error(`Kubernetes readiness observation has no artifact identity for ${workloadIdentity(workload.kind, workload.name)}.`);
+        }
+    }
+    for (const [name, count] of Object.entries(observation.endpointReadyAddresses)) {
+        if (!Number.isSafeInteger(count) || count < 0) {
+            throw new Error(`Kubernetes readiness observation has invalid ready endpoint count for ${name}.`);
+        }
+    }
+}
+function kubernetesResourceReady(expected, workload) {
+    switch (workload.kind) {
+        case KubernetesWorkloadKind.Deployment:
+            return (expected.replicas !== undefined &&
+                expected.replicas > 0 &&
+                workload.desiredReplicas === expected.replicas &&
+                workload.updatedReplicas === expected.replicas &&
+                workload.readyReplicas === expected.replicas &&
+                workload.availableReplicas === expected.replicas &&
+                workload.rolloutIdentity === expected.rolloutIdentity);
+        case KubernetesWorkloadKind.StatefulSet:
+            return (expected.replicas !== undefined &&
+                expected.replicas > 0 &&
+                workload.desiredReplicas === expected.replicas &&
+                workload.updatedReplicas === expected.replicas &&
+                workload.readyReplicas === expected.replicas &&
+                workload.availableReplicas === expected.replicas &&
+                workload.rolloutIdentity === expected.rolloutIdentity &&
+                workload.currentRevision === expected.controllerRevision &&
+                workload.updateRevision === expected.controllerRevision);
+        case KubernetesWorkloadKind.Job:
+            return ((workload.failed ?? 0) === 0 &&
+                (workload.succeeded ?? 0) >=
+                    (expected.successfulCompletions ?? 1) &&
+                workload.artifactIdentity === expected.artifactIdentity);
+    }
+}
+function appendResourceIssues(expected, workload, issues) {
+    const identity = workloadIdentity(workload.kind, workload.name);
+    switch (workload.kind) {
+        case KubernetesWorkloadKind.Deployment:
+        case KubernetesWorkloadKind.StatefulSet:
+            if (expected.replicas === undefined ||
+                expected.replicas < 1 ||
+                workload.desiredReplicas !== expected.replicas ||
+                workload.updatedReplicas !== expected.replicas ||
+                workload.readyReplicas !== expected.replicas ||
+                workload.availableReplicas !== expected.replicas) {
+                issues.push({
+                    code: readiness_1.InstallationReadinessIssueCode.ReplicasNotReady,
+                    workload: identity,
+                    message: `${identity} has desired=${String(workload.desiredReplicas ?? 0)}, updated=${String(workload.updatedReplicas ?? 0)}, ready=${String(workload.readyReplicas ?? 0)}, available=${String(workload.availableReplicas ?? 0)}; expected exactly ${String(expected.replicas ?? 0)}.`,
+                    remediation: 'Inspect pod status, readiness probes, scheduling, and rollout events.',
+                });
+            }
+            if (workload.rolloutIdentity !== expected.rolloutIdentity ||
+                (workload.kind === KubernetesWorkloadKind.StatefulSet &&
+                    (workload.currentRevision !== expected.controllerRevision ||
+                        workload.updateRevision !== expected.controllerRevision))) {
+                issues.push({
+                    code: readiness_1.InstallationReadinessIssueCode.PlanIdentityMismatch,
+                    workload: identity,
+                    message: `${identity} is serving an old pod-template/controller revision.`,
+                    remediation: 'Wait for every updated replica and controller revision to match the artifact-derived rollout identity.',
+                });
+            }
+            return;
+        case KubernetesWorkloadKind.Job:
+            if (workload.artifactIdentity !== expected.artifactIdentity) {
+                issues.push({
+                    code: readiness_1.InstallationReadinessIssueCode.PlanIdentityMismatch,
+                    workload: identity,
+                    message: `${identity} completed for a different rendered artifact identity.`,
+                    remediation: 'Recreate the Job from the current plan-bound artifact and require that exact identity before accepting completion.',
+                });
+            }
+            if ((workload.failed ?? 0) > 0) {
+                issues.push({
+                    code: readiness_1.InstallationReadinessIssueCode.JobFailed,
+                    workload: identity,
+                    message: `${identity} reports ${String(workload.failed)} failed execution(s).`,
+                    remediation: 'Inspect the Job logs and failure condition before retrying bootstrap.',
+                });
+            }
+            else if ((workload.succeeded ?? 0) <
+                (expected.successfulCompletions ?? 1)) {
+                issues.push({
+                    code: readiness_1.InstallationReadinessIssueCode.JobNotComplete,
+                    workload: identity,
+                    message: `${identity} has not completed successfully.`,
+                    remediation: 'Wait for the Job completion condition and inspect its events if it remains pending.',
+                });
+            }
+    }
+}
+function appendNamedCheckIssues(expected, observed, code, label, issues) {
+    for (const name of expected) {
+        if (observed[name] !== true) {
+            issues.push({
+                code,
+                message: `Required ${label} ${name} did not pass.`,
+                remediation: `Resolve ${label} ${name} and rerun readiness proof before committing applied state.`,
+            });
+        }
+    }
+}
+function assertUniqueExpectedIdentities(expectation) {
+    if (expectation.namespace.length === 0 ||
+        expectation.installationId.length === 0 ||
+        expectation.effectivePlanHash.length === 0) {
+        throw new Error('Kubernetes readiness expectation is missing namespace, installation, or plan scope.');
+    }
+    if (expectation.workloads.length === 0) {
+        throw new Error('Kubernetes readiness expectation must declare at least one workload.');
+    }
+    const identities = expectation.workloads.map((workload) => workloadIdentity(workload.kind, workload.name));
+    if (new Set(identities).size !== identities.length) {
+        throw new Error('Kubernetes readiness expectation contains duplicate workload identities.');
+    }
+    for (const workload of expectation.workloads) {
+        if (workload.kind === KubernetesWorkloadKind.Job
+            ? workload.successfulCompletions === undefined ||
+                workload.successfulCompletions < 1 ||
+                workload.replicas !== undefined ||
+                workload.rolloutIdentity !== undefined ||
+                workload.controllerRevision !== undefined ||
+                workload.artifactIdentity === undefined ||
+                workload.artifactIdentity.length === 0
+            : workload.replicas === undefined ||
+                workload.replicas < 1 ||
+                workload.successfulCompletions !== undefined ||
+                workload.artifactIdentity !== undefined ||
+                workload.rolloutIdentity === undefined ||
+                workload.rolloutIdentity.length === 0 ||
+                (workload.kind === KubernetesWorkloadKind.StatefulSet
+                    ? workload.controllerRevision === undefined ||
+                        workload.controllerRevision.length === 0
+                    : workload.controllerRevision !== undefined)) {
+            throw new Error(`Kubernetes readiness expectation has invalid scale/completion evidence for ${workloadIdentity(workload.kind, workload.name)}.`);
+        }
+    }
+    for (const [label, values] of [
+        ['bootstrap marker', expectation.bootstrapMarkers],
+        ['smoke check', expectation.smokeChecks],
+        ['backup prerequisite', expectation.backupPrerequisites],
+    ]) {
+        if (values.length === 0) {
+            throw new Error(`Kubernetes readiness expectation must declare at least one ${label}.`);
+        }
+        if (new Set(values).size !== values.length) {
+            throw new Error(`Kubernetes readiness expectation contains duplicate ${label} identities.`);
+        }
+    }
+}
+function workloadIdentity(kind, name) {
+    return `${kind}/${name}`;
+}
+//# sourceMappingURL=kubernetes-readiness.js.map

package/dist/runtime/installation/kubernetes-readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubernetes-readiness.js","sourceRoot":"","sources":["../../../src/runtime/installation/kubernetes-readiness.ts"],"names":[],"mappings":";;;AAkFA,oFAQC;AAOD,kGAgCC;AAED,kEA6MC;AAhVD,6CAA6C;AAC7C,4CAA+C;AAC/C,2CAKqB;AAIrB,IAAY,sBAIX;AAJD,WAAY,sBAAsB;IAChC,mDAAyB,CAAA;IACzB,qDAA2B,CAAA;IAC3B,qCAAW,CAAA;AACb,CAAC,EAJW,sBAAsB,sCAAtB,sBAAsB,QAIjC;AAmEM,KAAK,UAAU,oCAAoC,CACxD,WAA2C,EAC3C,MAA4C;IAE5C,OAAO,2BAA2B,CAChC,WAAW,EACX,MAAM,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAClC,CAAC;AACJ,CAAC;AAOD,SAAgB,2CAA2C,CACzD,IAA8C,EAC9C,iBAA8C;IAE9C,IAAI,IAAI,CAAC,SAAS,KAAK,kBAAS,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC/B,IACE,KAAK,CAAC,QAAQ,KAAK,2BAAe,CAAC,OAAO;YAC1C,KAAK,CAAC,QAAQ,KAAK,2BAAe,CAAC,GAAG,EACtC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,8BAA8B,KAAK,CAAC,IAAI,yCAAyC,KAAK,CAAC,QAAQ,GAAG,CACnG,CAAC;QACJ,CAAC;QACD,MAAM,eAAe,GAAG,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,eAAe,KAAK,SAAS,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CACb,yEAAyE,KAAK,CAAC,IAAI,GAAG,CACvF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE,sBAAsB,CAAC,UAAU;YACvC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,IAAI;YACvB,QAAQ,EAAE,CAAC;YACX,eAAe;SAChB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,2BAA2B,CACzC,WAA2C,EAC3C,WAA2C;IAE3C,8BAA8B,CAAC,WAAW,CAAC,CAAC;IAC5C,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAChC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;QACtC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC;QAC9C,QAAQ;KACT,CAAC,CACH,CAAC;IACF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAChC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;QACtC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC;QAC9C,QAAQ;KACT,CAAC,CACH,CAAC;IACF,IAAI,kBAAkB,CAAC,IAAI,KAAK,WAAW,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;IACtD,MAAM,SAAS,GAAmC,EAAE,CAAC;IACrD,MAAM,MAAM,GAAiC,EAAE,CAAC;IAChD,IACE,WAAW,CAAC,SAAS,KAAK,WAAW,CAAC,SAAS;QAC/C,WAAW,CAAC,cAAc,KAAK,WAAW,CAAC,cAAc,EACzD,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,0CAA8B,CAAC,oBAAoB;YACzD,OAAO,EAAE,6BAA6B,WAAW,CAAC,SAAS,IAAI,WAAW,CAAC,cAAc,mBAAmB,WAAW,CAAC,SAAS,IAAI,WAAW,CAAC,cAAc,GAAG;YAClK,WAAW,EACT,sFAAsF;SACzF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,WAAW,CAAC,iBAAiB,KAAK,WAAW,CAAC,iBAAiB,EAAE,CAAC;QACpE,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,0CAA8B,CAAC,oBAAoB;YACzD,OAAO,EAAE,qCAAqC,WAAW,CAAC,iBAAiB,mBAAmB,WAAW,CAAC,iBAAiB,GAAG;YAC9H,WAAW,EACT,uGAAuG;SAC1G,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,0CAA8B,CAAC,eAAe;gBACpD,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,uBAAuB,QAAQ,cAAc;gBACtD,WAAW,EACT,8FAA8F;aACjG,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,iBAAiB,GACrB,QAAQ,CAAC,IAAI,KAAK,sBAAsB,CAAC,GAAG;YAC5C,QAAQ,CAAC,kBAAkB,KAAK,QAAQ,CAAC,UAAU,CAAC;QACtD,MAAM,aAAa,GAAG,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAClE,SAAS,CAAC,IAAI,CAAC;YACb,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,iBAAiB,IAAI,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW;YACjE,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE;gBACN,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,GAAG,CAAC,QAAQ,CAAC,kBAAkB,KAAK,SAAS;oBAC3C,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB,EAAE,CAAC;gBACxD,GAAG,CAAC,QAAQ,CAAC,eAAe,KAAK,SAAS;oBACxC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,eAAe,EAAE,CAAC;gBAClD,GAAG,CAAC,QAAQ,CAAC,gBAAgB,KAAK,SAAS;oBACzC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,EAAE,CAAC;gBACpD,aAAa;aACd;SACF,CAAC,CAAC;QACH,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,0CAA8B,CAAC,qBAAqB;gBAC1D,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,GAAG,QAAQ,gCAAgC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG;gBAClF,WAAW,EACT,4GAA4G;aAC/G,CAAC,CAAC;QACL,CAAC;QACD,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACvC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACxC,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,0CAA8B,CAAC,cAAc;oBACnD,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,WAAW,QAAQ,CAAC,WAAW,QAAQ,QAAQ,cAAc;oBACtE,WAAW,EACT,uEAAuE;iBAC1E,CAAC,CAAC;YACL,CAAC;YACD,IACE,CAAC,WAAW,CAAC,sBAAsB,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EACnE,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,0CAA8B,CAAC,gBAAgB;oBACrD,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,WAAW,QAAQ,CAAC,WAAW,mCAAmC;oBAC3E,WAAW,EACT,oEAAoE;iBACvE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtC,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,YAAY;gBACnB,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE;oBACN,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,GAAG,CAAC,QAAQ,CAAC,kBAAkB,KAAK,SAAS;wBAC3C,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB,EAAE,CAAC;iBACzD;aACF,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,0CAA8B,CAAC,kBAAkB;gBACvD,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,sBAAsB,QAAQ,iEAAiE;gBACxG,WAAW,EACT,qGAAqG;aACxG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CACzC,QAAQ,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CACjE,CACF,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,0CAA8B,CAAC,kBAAkB;gBACvD,QAAQ,EAAE,WAAW,OAAO,EAAE;gBAC9B,OAAO,EAAE,8BAA8B,OAAO,gDAAgD;gBAC9F,WAAW,EACT,qFAAqF;aACxF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,YAAY,IAAI,MAAM,CAAC,IAAI,CACpC,WAAW,CAAC,sBAAsB,CACnC,EAAE,CAAC;QACF,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,0CAA8B,CAAC,kBAAkB;gBACvD,QAAQ,EAAE,aAAa,YAAY,EAAE;gBACrC,OAAO,EAAE,gCAAgC,YAAY,gDAAgD;gBACrG,WAAW,EACT,yEAAyE;aAC5E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,gBAAgB,EAAE,CAAC;QAClD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,0CAA8B,CAAC,sBAAsB;gBAC3D,OAAO,EAAE,oBAAoB,MAAM,cAAc;gBACjD,WAAW,EACT,4FAA4F;aAC/F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,sBAAsB,CACpB,WAAW,CAAC,WAAW,EACvB,WAAW,CAAC,WAAW,EACvB,0CAA8B,CAAC,gBAAgB,EAC/C,aAAa,EACb,MAAM,CACP,CAAC;IACF,sBAAsB,CACpB,WAAW,CAAC,mBAAmB,EAC/B,WAAW,CAAC,mBAAmB,EAC/B,0CAA8B,CAAC,yBAAyB,EACxD,qBAAqB,EACrB,MAAM,CACP,CAAC;IAEF,OAAO;QACL,SAAS,EAAE,kBAAS,CAAC,IAAI;QACzB,iBAAiB,EAAE,WAAW,CAAC,iBAAiB;QAChD,iBAAiB,EAAE,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CACxD,gBAAgB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAC/C;QACD,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,SAAS;QACT,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,WAA2C;IAE3C,IACE,WAAW,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAClC,WAAW,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;QACvC,WAAW,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG;YACf,CAAC,YAAY,EAAE,QAAQ,CAAC,UAAU,CAAC;YACnC,CAAC,oBAAoB,EAAE,QAAQ,CAAC,kBAAkB,CAAC;YACnD,CAAC,iBAAiB,EAAE,QAAQ,CAAC,eAAe,CAAC;YAC7C,CAAC,eAAe,EAAE,QAAQ,CAAC,aAAa,CAAC;YACzC,CAAC,iBAAiB,EAAE,QAAQ,CAAC,eAAe,CAAC;YAC7C,CAAC,mBAAmB,EAAE,QAAQ,CAAC,iBAAiB,CAAC;YACjD,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC;YACjC,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC;SACnB,CAAC;QACX,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;YACtC,IACE,KAAK,KAAK,SAAS;gBACnB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,EAC3C,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,gDAAgD,KAAK,QAAQ,gBAAgB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAC/G,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IACE,QAAQ,CAAC,IAAI,KAAK,sBAAsB,CAAC,GAAG;YAC5C,QAAQ,CAAC,kBAAkB,KAAK,SAAS,EACzC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,kEAAkE,gBAAgB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CACpH,CAAC;QACJ,CAAC;QACD,IACE,QAAQ,CAAC,IAAI,KAAK,sBAAsB,CAAC,GAAG;YAC5C,CAAC,QAAQ,CAAC,gBAAgB,KAAK,SAAS;gBACtC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC,CAAC,EACzC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,iEAAiE,gBAAgB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CACnH,CAAC;QACJ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CACxC,WAAW,CAAC,sBAAsB,CACnC,EAAE,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,yEAAyE,IAAI,GAAG,CACjF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAC9B,QAAoC,EACpC,QAAoC;IAEpC,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,sBAAsB,CAAC,UAAU;YACpC,OAAO,CACL,QAAQ,CAAC,QAAQ,KAAK,SAAS;gBAC/B,QAAQ,CAAC,QAAQ,GAAG,CAAC;gBACrB,QAAQ,CAAC,eAAe,KAAK,QAAQ,CAAC,QAAQ;gBAC9C,QAAQ,CAAC,eAAe,KAAK,QAAQ,CAAC,QAAQ;gBAC9C,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,QAAQ;gBAC5C,QAAQ,CAAC,iBAAiB,KAAK,QAAQ,CAAC,QAAQ;gBAChD,QAAQ,CAAC,eAAe,KAAK,QAAQ,CAAC,eAAe,CACtD,CAAC;QACJ,KAAK,sBAAsB,CAAC,WAAW;YACrC,OAAO,CACL,QAAQ,CAAC,QAAQ,KAAK,SAAS;gBAC/B,QAAQ,CAAC,QAAQ,GAAG,CAAC;gBACrB,QAAQ,CAAC,eAAe,KAAK,QAAQ,CAAC,QAAQ;gBAC9C,QAAQ,CAAC,eAAe,KAAK,QAAQ,CAAC,QAAQ;gBAC9C,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,QAAQ;gBAC5C,QAAQ,CAAC,iBAAiB,KAAK,QAAQ,CAAC,QAAQ;gBAChD,QAAQ,CAAC,eAAe,KAAK,QAAQ,CAAC,eAAe;gBACrD,QAAQ,CAAC,eAAe,KAAK,QAAQ,CAAC,kBAAkB;gBACxD,QAAQ,CAAC,cAAc,KAAK,QAAQ,CAAC,kBAAkB,CACxD,CAAC;QACJ,KAAK,sBAAsB,CAAC,GAAG;YAC7B,OAAO,CACL,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC;gBAC5B,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,CAAC;oBACvB,CAAC,QAAQ,CAAC,qBAAqB,IAAI,CAAC,CAAC;gBACvC,QAAQ,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB,CACxD,CAAC;IACN,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,QAAoC,EACpC,QAAoC,EACpC,MAAoC;IAEpC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChE,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,sBAAsB,CAAC,UAAU,CAAC;QACvC,KAAK,sBAAsB,CAAC,WAAW;YACrC,IACE,QAAQ,CAAC,QAAQ,KAAK,SAAS;gBAC/B,QAAQ,CAAC,QAAQ,GAAG,CAAC;gBACrB,QAAQ,CAAC,eAAe,KAAK,QAAQ,CAAC,QAAQ;gBAC9C,QAAQ,CAAC,eAAe,KAAK,QAAQ,CAAC,QAAQ;gBAC9C,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,QAAQ;gBAC5C,QAAQ,CAAC,iBAAiB,KAAK,QAAQ,CAAC,QAAQ,EAChD,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,0CAA8B,CAAC,gBAAgB;oBACrD,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,GAAG,QAAQ,gBAAgB,MAAM,CAAC,QAAQ,CAAC,eAAe,IAAI,CAAC,CAAC,aAAa,MAAM,CAAC,QAAQ,CAAC,eAAe,IAAI,CAAC,CAAC,WAAW,MAAM,CAAC,QAAQ,CAAC,aAAa,IAAI,CAAC,CAAC,eAAe,MAAM,CAAC,QAAQ,CAAC,iBAAiB,IAAI,CAAC,CAAC,sBAAsB,MAAM,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG;oBACtR,WAAW,EACT,uEAAuE;iBAC1E,CAAC,CAAC;YACL,CAAC;YACD,IACE,QAAQ,CAAC,eAAe,KAAK,QAAQ,CAAC,eAAe;gBACrD,CAAC,QAAQ,CAAC,IAAI,KAAK,sBAAsB,CAAC,WAAW;oBACnD,CAAC,QAAQ,CAAC,eAAe,KAAK,QAAQ,CAAC,kBAAkB;wBACvD,QAAQ,CAAC,cAAc,KAAK,QAAQ,CAAC,kBAAkB,CAAC,CAAC,EAC7D,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,0CAA8B,CAAC,oBAAoB;oBACzD,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,GAAG,QAAQ,sDAAsD;oBAC1E,WAAW,EACT,wGAAwG;iBAC3G,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,KAAK,sBAAsB,CAAC,GAAG;YAC7B,IAAI,QAAQ,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB,EAAE,CAAC;gBAC5D,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,0CAA8B,CAAC,oBAAoB;oBACzD,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,GAAG,QAAQ,wDAAwD;oBAC5E,WAAW,EACT,oHAAoH;iBACvH,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,0CAA8B,CAAC,SAAS;oBAC9C,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,GAAG,QAAQ,YAAY,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,uBAAuB;oBAC9E,WAAW,EACT,uEAAuE;iBAC1E,CAAC,CAAC;YACL,CAAC;iBAAM,IACL,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,CAAC;gBACzB,CAAC,QAAQ,CAAC,qBAAqB,IAAI,CAAC,CAAC,EACrC,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,0CAA8B,CAAC,cAAc;oBACnD,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,GAAG,QAAQ,kCAAkC;oBACtD,WAAW,EACT,qFAAqF;iBACxF,CAAC,CAAC;YACL,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,QAA2B,EAC3B,QAA2C,EAC3C,IAE4D,EAC5D,KAAa,EACb,MAAoC;IAEpC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI;gBACJ,OAAO,EAAE,YAAY,KAAK,IAAI,IAAI,gBAAgB;gBAClD,WAAW,EAAE,WAAW,KAAK,IAAI,IAAI,6DAA6D;aACnG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,8BAA8B,CACrC,WAA2C;IAE3C,IACE,WAAW,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAClC,WAAW,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;QACvC,WAAW,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,sEAAsE,CACvE,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CACxD,gBAAgB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAC/C,CAAC;IACF,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;QAC7C,IACE,QAAQ,CAAC,IAAI,KAAK,sBAAsB,CAAC,GAAG;YAC1C,CAAC,CAAC,QAAQ,CAAC,qBAAqB,KAAK,SAAS;gBAC5C,QAAQ,CAAC,qBAAqB,GAAG,CAAC;gBAClC,QAAQ,CAAC,QAAQ,KAAK,SAAS;gBAC/B,QAAQ,CAAC,eAAe,KAAK,SAAS;gBACtC,QAAQ,CAAC,kBAAkB,KAAK,SAAS;gBACzC,QAAQ,CAAC,gBAAgB,KAAK,SAAS;gBACvC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC;YACxC,CAAC,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS;gBAC/B,QAAQ,CAAC,QAAQ,GAAG,CAAC;gBACrB,QAAQ,CAAC,qBAAqB,KAAK,SAAS;gBAC5C,QAAQ,CAAC,gBAAgB,KAAK,SAAS;gBACvC,QAAQ,CAAC,eAAe,KAAK,SAAS;gBACtC,QAAQ,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;gBACrC,CAAC,QAAQ,CAAC,IAAI,KAAK,sBAAsB,CAAC,WAAW;oBACnD,CAAC,CAAC,QAAQ,CAAC,kBAAkB,KAAK,SAAS;wBACzC,QAAQ,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC;oBAC1C,CAAC,CAAC,QAAQ,CAAC,kBAAkB,KAAK,SAAS,CAAC,EAClD,CAAC;YACD,MAAM,IAAI,KAAK,CACb,8EAA8E,gBAAgB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAChI,CAAC;QACJ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI;QAC5B,CAAC,kBAAkB,EAAE,WAAW,CAAC,gBAAgB,CAAC;QAClD,CAAC,aAAa,EAAE,WAAW,CAAC,WAAW,CAAC;QACxC,CAAC,qBAAqB,EAAE,WAAW,CAAC,mBAAmB,CAAC;KAChD,EAAE,CAAC;QACX,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,8DAA8D,KAAK,GAAG,CACvE,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,uDAAuD,KAAK,cAAc,CAC3E,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,IAA4B,EAC5B,IAAY;IAEZ,OAAO,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/dist/runtime/installation/lifecycle.d.ts

@@ -1,8 +1,9 @@
 import { type CompiledXemaInstallation } from './compiler';
-import { type InstallationPlanDiff } from './diff';
+import { type InstallationPlanDiff, type InstallationRenderAcknowledgement } from './diff';
 import { type CurrentConfigInstallationContext } from './from-current-config';
+import { type InstallationReadinessProof } from './readiness';
+import { type XemaConfig } from '../config/schema';
 import type { InstallationStateStore } from './state-store';
-import type { XemaConfig } from '../config/schema';
 export interface InstallationPlanResult {
     readonly desired: CompiledXemaInstallation;
     readonly applied?: CompiledXemaInstallation;
@@ -11,13 +12,14 @@ export interface InstallationPlanResult {
 export interface InstallationApplyOptions {
     readonly allowDestructive?: boolean;
     readonly forceExecution?: boolean;
+    readonly renderedArtifacts: readonly InstallationRenderAcknowledgement[];
 }
 export interface InstallationApplyResult extends InstallationPlanResult {
     readonly executed: boolean;
 }
-export type InstallationExecutor = (onReady: () => Promise<void>) => Promise<void>;
+export type InstallationExecutor = (onReady: (proof: InstallationReadinessProof) => Promise<void>) => Promise<void>;
 export declare function installationContext(installationIdentity: string): CurrentConfigInstallationContext;
 export declare function compileCurrentInstallation(config: XemaConfig, installationIdentity: string): CompiledXemaInstallation;
 export declare function planInstallation(desired: CompiledXemaInstallation, store: InstallationStateStore): InstallationPlanResult;
-export declare function applyInstallation(desired: CompiledXemaInstallation, store: InstallationStateStore, executor: InstallationExecutor, opts?: InstallationApplyOptions): Promise<InstallationApplyResult>;
+export declare function applyInstallation(desired: CompiledXemaInstallation, store: InstallationStateStore, executor: InstallationExecutor, opts: InstallationApplyOptions): Promise<InstallationApplyResult>;
 //# sourceMappingURL=lifecycle.d.ts.map

package/dist/runtime/installation/lifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,YAAY,CAAC;AACpB,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,QAAQ,CAAC;AAChB,OAAO,EAEL,KAAK,gCAAgC,EACtC,MAAM,uBAAuB,CAAC;AAG/B,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;IAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE,wBAAwB,CAAC;IAC5C,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;CACrC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,uBAAwB,SAAQ,sBAAsB;IACrE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,MAAM,oBAAoB,GAAG,CACjC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,KACzB,OAAO,CAAC,IAAI,CAAC,CAAC;AAEnB,wBAAgB,mBAAmB,CACjC,oBAAoB,EAAE,MAAM,GAC3B,gCAAgC,CAIlC;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,UAAU,EAClB,oBAAoB,EAAE,MAAM,GAC3B,wBAAwB,CAO1B;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,wBAAwB,EACjC,KAAK,EAAE,sBAAsB,GAC5B,sBAAsB,CAmBxB;AAED,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,wBAAwB,EACjC,KAAK,EAAE,sBAAsB,EAC7B,QAAQ,EAAE,oBAAoB,EAC9B,IAAI,GAAE,wBAA6B,GAClC,OAAO,CAAC,uBAAuB,CAAC,CAwBlC"}
+{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,YAAY,CAAC;AAEpB,OAAO,EAIL,KAAK,oBAAoB,EACzB,KAAK,iCAAiC,EACvC,MAAM,QAAQ,CAAC;AAChB,OAAO,EAEL,KAAK,gCAAgC,EACtC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,KAAK,0BAA0B,EAChC,MAAM,aAAa,CAAC;AAErB,OAAO,EAAa,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAE5D,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;IAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE,wBAAwB,CAAC;IAC5C,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;CACrC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,iCAAiC,EAAE,CAAC;CAC1E;AAED,MAAM,WAAW,uBAAwB,SAAQ,sBAAsB;IACrE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,MAAM,oBAAoB,GAAG,CACjC,OAAO,EAAE,CAAC,KAAK,EAAE,0BAA0B,KAAK,OAAO,CAAC,IAAI,CAAC,KAC1D,OAAO,CAAC,IAAI,CAAC,CAAC;AAEnB,wBAAgB,mBAAmB,CACjC,oBAAoB,EAAE,MAAM,GAC3B,gCAAgC,CAIlC;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,UAAU,EAClB,oBAAoB,EAAE,MAAM,GAC3B,wBAAwB,CAO1B;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,wBAAwB,EACjC,KAAK,EAAE,sBAAsB,GAC5B,sBAAsB,CA2BxB;AAED,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,wBAAwB,EACjC,KAAK,EAAE,sBAAsB,EAC7B,QAAQ,EAAE,oBAAoB,EAC9B,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,uBAAuB,CAAC,CAqDlC"}