@xemahq/xema 0.14.0 → 0.15.0

package/dist/runtime/installation/lifecycle.js

@@ -5,9 +5,12 @@ exports.compileCurrentInstallation = compileCurrentInstallation;
 exports.planInstallation = planInstallation;
 exports.applyInstallation = applyInstallation;
 const compiler_1 = require("./compiler");
+const contract_1 = require("./contract");
 const diff_1 = require("./diff");
 const from_current_config_1 = require("./from-current-config");
+const readiness_1 = require("./readiness");
 const serialization_1 = require("./serialization");
+const schema_1 = require("../config/schema");
 function installationContext(installationIdentity) {
     return {
         installationId: `local-${(0, serialization_1.hashInstallation)(installationIdentity).slice(0, 20)}`,
@@ -17,7 +20,7 @@ function compileCurrentInstallation(config, installationIdentity) {
     return (0, compiler_1.compileXemaInstallation)((0, from_current_config_1.installationFromCurrentConfig)(config, installationContext(installationIdentity)));
 }
 function planInstallation(desired, store) {
-    const appliedState = store.read(desired.installationId);
+    const appliedState = store.read(desired.metadata.name);
     const applied = appliedState?.plan;
     return {
         desired,
@@ -25,29 +28,52 @@ function planInstallation(desired, store) {
         diff: applied === undefined
             ? {
                 classification: diff_1.InstallationChangeClass.RequiresRollout,
+                renderObligations: [
+                    diff_1.InstallationRenderObligation.RuntimeReconfigure,
+                    diff_1.InstallationRenderObligation.WorkloadRollout,
+                    diff_1.InstallationRenderObligation.InfrastructureReconcile,
+                    diff_1.InstallationRenderObligation.DataAndRecoveryReconcile,
+                ],
                 changes: [
                     {
                         path: '<installation>',
                         classification: diff_1.InstallationChangeClass.RequiresRollout,
+                        renderObligation: diff_1.InstallationRenderObligation.InfrastructureReconcile,
                     },
                 ],
             }
             : (0, diff_1.diffInstallationPlans)(applied, desired),
     };
 }
-async function applyInstallation(desired, store, executor, opts = {}) {
-    const release = store.acquireApplyLock(desired.installationId);
+async function applyInstallation(desired, store, executor, opts) {
+    assertApplyProfileSupported(desired.spec.profile);
+    const releaseLocalRuntime = store.acquireLocalRuntimeLock();
+    let release;
     let ready = false;
     try {
+        release = store.acquireApplyLock(desired.metadata.name);
         const planned = planInstallation(desired, store);
         assertChangeAuthorized(planned.diff, opts);
+        assertRenderAcknowledged(planned.diff, desired, opts.renderedArtifacts);
         if (planned.diff.changes.length === 0 && opts.forceExecution !== true) {
             return { ...planned, executed: false };
         }
-        await executor(async () => {
-            store.write(desired);
+        if (desired.spec.profile === contract_1.InstallationProfile.Starter) {
+            store.claimLocalRuntimeOwner(desired.metadata.name);
+        }
+        await executor(async (proof) => {
+            if (ready) {
+                throw new Error('Installation executor reported readiness more than once.');
+            }
+            if (proof.substrate !== substrateForProfile(desired.spec.profile)) {
+                throw new Error(`Installation readiness proof used substrate ${proof.substrate}, expected ${substrateForProfile(desired.spec.profile)} for profile ${desired.spec.profile}.`);
+            }
+            (0, readiness_1.assertInstallationReady)(proof);
+            if (proof.effectivePlanHash !== desired.effectivePlanHash) {
+                throw new Error('Installation readiness proof is bound to a different effective plan.');
+            }
+            store.write(desired, opts.renderedArtifacts);
             ready = true;
-            release();
         });
         if (!ready) {
             throw new Error('Installation executor completed without reporting a ready installation.');
@@ -55,7 +81,68 @@ async function applyInstallation(desired, store, executor, opts = {}) {
         return { ...planned, executed: true };
     }
     finally {
-        release();
+        try {
+            release?.();
+        }
+        finally {
+            releaseLocalRuntime();
+        }
+    }
+}
+function assertApplyProfileSupported(profile) {
+    switch (profile) {
+        case contract_1.InstallationProfile.Developer:
+        case contract_1.InstallationProfile.Starter:
+        case contract_1.InstallationProfile.SingleNodeProduction:
+            return;
+        case contract_1.InstallationProfile.BusinessHa:
+        case contract_1.InstallationProfile.EnterpriseRegulated:
+        case contract_1.InstallationProfile.HostedCell:
+            throw new Error(`Installation apply does not support profile ${profile}; its dedicated renderer and executor are unavailable.`);
+    }
+}
+function substrateForProfile(profile) {
+    switch (profile) {
+        case contract_1.InstallationProfile.Developer:
+            return schema_1.Substrate.Native;
+        case contract_1.InstallationProfile.Starter:
+            return schema_1.Substrate.Container;
+        case contract_1.InstallationProfile.SingleNodeProduction:
+        case contract_1.InstallationProfile.BusinessHa:
+        case contract_1.InstallationProfile.EnterpriseRegulated:
+        case contract_1.InstallationProfile.HostedCell:
+            return schema_1.Substrate.Helm;
+    }
+}
+function assertRenderAcknowledged(diff, desired, acknowledgements) {
+    const byObligation = new Map();
+    for (const acknowledgement of acknowledgements) {
+        if (byObligation.has(acknowledgement.obligation)) {
+            throw new Error(`Installation renderer acknowledged ${acknowledgement.obligation} more than once.`);
+        }
+        if (acknowledgement.effectivePlanHash !== desired.effectivePlanHash) {
+            throw new Error(`Installation renderer acknowledgement for ${acknowledgement.obligation} is bound to a different effective plan.`);
+        }
+        if (!/^sha256:[a-f0-9]{64}$/.test(acknowledgement.artifactDigest)) {
+            throw new Error(`Installation renderer acknowledgement for ${acknowledgement.obligation} has an invalid artifact digest.`);
+        }
+        if (acknowledgement.rendererId.length === 0) {
+            throw new Error('Installation renderer id must not be empty.');
+        }
+        byObligation.set(acknowledgement.obligation, acknowledgement);
+    }
+    const materialObligations = [
+        ...new Set([
+            diff_1.InstallationRenderObligation.RuntimeReconfigure,
+            diff_1.InstallationRenderObligation.WorkloadRollout,
+            diff_1.InstallationRenderObligation.InfrastructureReconcile,
+            diff_1.InstallationRenderObligation.DataAndRecoveryReconcile,
+            ...diff.renderObligations,
+        ]),
+    ];
+    const missing = materialObligations.filter((obligation) => !byObligation.has(obligation));
+    if (missing.length > 0) {
+        throw new Error(`Installation renderer did not fulfill material obligations: ${missing.join(', ')}.`);
     }
 }
 function assertChangeAuthorized(diff, opts) {

package/dist/runtime/installation/lifecycle.js.map

@@ -1 +1 @@
-{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../../../src/runtime/installation/lifecycle.ts"],"names":[],"mappings":";;AAqCA,kDAMC;AAED,gEAUC;AAED,4CAsBC;AAED,8CA6BC;AA9GD,yCAGoB;AACpB,iCAIgB;AAChB,+DAG+B;AAC/B,mDAAmD;AAwBnD,SAAgB,mBAAmB,CACjC,oBAA4B;IAE5B,OAAO;QACL,cAAc,EAAE,SAAS,IAAA,gCAAgB,EAAC,oBAAoB,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;KAC/E,CAAC;AACJ,CAAC;AAED,SAAgB,0BAA0B,CACxC,MAAkB,EAClB,oBAA4B;IAE5B,OAAO,IAAA,kCAAuB,EAC5B,IAAA,mDAA6B,EAC3B,MAAM,EACN,mBAAmB,CAAC,oBAAoB,CAAC,CAC1C,CACF,CAAC;AACJ,CAAC;AAED,SAAgB,gBAAgB,CAC9B,OAAiC,EACjC,KAA6B;IAE7B,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,YAAY,EAAE,IAAI,CAAC;IACnC,OAAO;QACL,OAAO;QACP,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;QAC7C,IAAI,EACF,OAAO,KAAK,SAAS;YACnB,CAAC,CAAC;gBACE,cAAc,EAAE,8BAAuB,CAAC,eAAe;gBACvD,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,gBAAgB;wBACtB,cAAc,EAAE,8BAAuB,CAAC,eAAe;qBACxD;iBACF;aACF;YACH,CAAC,CAAC,IAAA,4BAAqB,EAAC,OAAO,EAAE,OAAO,CAAC;KAC9C,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,iBAAiB,CACrC,OAAiC,EACjC,KAA6B,EAC7B,QAA8B,EAC9B,OAAiC,EAAE;IAEnC,MAAM,OAAO,GAAG,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/D,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACjD,sBAAsB,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;YACtE,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACzC,CAAC;QAED,MAAM,QAAQ,CAAC,KAAK,IAAI,EAAE;YACxB,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACrB,KAAK,GAAG,IAAI,CAAC;YACb,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACxC,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,IAA0B,EAC1B,IAA8B;IAE9B,IAAI,IAAI,CAAC,cAAc,KAAK,8BAAuB,CAAC,QAAQ,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CACb,oIAAoI,CACrI,CAAC;IACJ,CAAC;IACD,IACE,IAAI,CAAC,cAAc,KAAK,8BAAuB,CAAC,WAAW;QAC3D,IAAI,CAAC,gBAAgB,KAAK,IAAI,EAC9B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,2GAA2G,CAC5G,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../../../src/runtime/installation/lifecycle.ts"],"names":[],"mappings":";;AA6CA,kDAMC;AAED,gEAUC;AAED,4CA8BC;AAED,8CA0DC;AA3JD,yCAGoB;AACpB,yCAAiD;AACjD,iCAMgB;AAChB,+DAG+B;AAC/B,2CAGqB;AACrB,mDAAmD;AACnD,6CAA8D;AAwB9D,SAAgB,mBAAmB,CACjC,oBAA4B;IAE5B,OAAO;QACL,cAAc,EAAE,SAAS,IAAA,gCAAgB,EAAC,oBAAoB,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;KAC/E,CAAC;AACJ,CAAC;AAED,SAAgB,0BAA0B,CACxC,MAAkB,EAClB,oBAA4B;IAE5B,OAAO,IAAA,kCAAuB,EAC5B,IAAA,mDAA6B,EAC3B,MAAM,EACN,mBAAmB,CAAC,oBAAoB,CAAC,CAC1C,CACF,CAAC;AACJ,CAAC;AAED,SAAgB,gBAAgB,CAC9B,OAAiC,EACjC,KAA6B;IAE7B,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,YAAY,EAAE,IAAI,CAAC;IACnC,OAAO;QACL,OAAO;QACP,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;QAC7C,IAAI,EACF,OAAO,KAAK,SAAS;YACnB,CAAC,CAAC;gBACE,cAAc,EAAE,8BAAuB,CAAC,eAAe;gBACvD,iBAAiB,EAAE;oBACjB,mCAA4B,CAAC,kBAAkB;oBAC/C,mCAA4B,CAAC,eAAe;oBAC5C,mCAA4B,CAAC,uBAAuB;oBACpD,mCAA4B,CAAC,wBAAwB;iBACtD;gBACD,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,gBAAgB;wBACtB,cAAc,EAAE,8BAAuB,CAAC,eAAe;wBACvD,gBAAgB,EACd,mCAA4B,CAAC,uBAAuB;qBACvD;iBACF;aACF;YACH,CAAC,CAAC,IAAA,4BAAqB,EAAC,OAAO,EAAE,OAAO,CAAC;KAC9C,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,iBAAiB,CACrC,OAAiC,EACjC,KAA6B,EAC7B,QAA8B,EAC9B,IAA8B;IAE9B,2BAA2B,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,mBAAmB,GAAG,KAAK,CAAC,uBAAuB,EAAE,CAAC;IAC5D,IAAI,OAAiC,CAAC;IACtC,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,CAAC;QACH,OAAO,GAAG,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACjD,sBAAsB,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3C,wBAAwB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACxE,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;YACtE,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACzC,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,8BAAmB,CAAC,OAAO,EAAE,CAAC;YAIzD,KAAK,CAAC,sBAAsB,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC7B,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CACb,0DAA0D,CAC3D,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,SAAS,KAAK,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClE,MAAM,IAAI,KAAK,CACb,+CAA+C,KAAK,CAAC,SAAS,cAAc,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,OAAO,CAAC,IAAI,CAAC,OAAO,GAAG,CAC7J,CAAC;YACJ,CAAC;YACD,IAAA,mCAAuB,EAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,iBAAiB,KAAK,OAAO,CAAC,iBAAiB,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CACb,sEAAsE,CACvE,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC7C,KAAK,GAAG,IAAI,CAAC;QACf,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACxC,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,OAAO,EAAE,EAAE,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,mBAAmB,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;AACH,CAAC;AAUD,SAAS,2BAA2B,CAAC,OAA4B;IAC/D,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,8BAAmB,CAAC,SAAS,CAAC;QACnC,KAAK,8BAAmB,CAAC,OAAO,CAAC;QACjC,KAAK,8BAAmB,CAAC,oBAAoB;YAC3C,OAAO;QACT,KAAK,8BAAmB,CAAC,UAAU,CAAC;QACpC,KAAK,8BAAmB,CAAC,mBAAmB,CAAC;QAC7C,KAAK,8BAAmB,CAAC,UAAU;YACjC,MAAM,IAAI,KAAK,CACb,+CAA+C,OAAO,wDAAwD,CAC/G,CAAC;IACN,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,OAA4B;IACvD,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,8BAAmB,CAAC,SAAS;YAChC,OAAO,kBAAS,CAAC,MAAM,CAAC;QAC1B,KAAK,8BAAmB,CAAC,OAAO;YAC9B,OAAO,kBAAS,CAAC,SAAS,CAAC;QAC7B,KAAK,8BAAmB,CAAC,oBAAoB,CAAC;QAC9C,KAAK,8BAAmB,CAAC,UAAU,CAAC;QACpC,KAAK,8BAAmB,CAAC,mBAAmB,CAAC;QAC7C,KAAK,8BAAmB,CAAC,UAAU;YACjC,OAAO,kBAAS,CAAC,IAAI,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAC/B,IAA0B,EAC1B,OAAiC,EACjC,gBAA8D;IAE9D,MAAM,YAAY,GAAG,IAAI,GAAG,EAGzB,CAAC;IACJ,KAAK,MAAM,eAAe,IAAI,gBAAgB,EAAE,CAAC;QAC/C,IAAI,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CACb,sCAAsC,eAAe,CAAC,UAAU,kBAAkB,CACnF,CAAC;QACJ,CAAC;QACD,IAAI,eAAe,CAAC,iBAAiB,KAAK,OAAO,CAAC,iBAAiB,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CACb,6CAA6C,eAAe,CAAC,UAAU,0CAA0C,CAClH,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CACb,6CAA6C,eAAe,CAAC,UAAU,kCAAkC,CAC1G,CAAC;QACJ,CAAC;QACD,IAAI,eAAe,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,mBAAmB,GAAG;QAC1B,GAAG,IAAI,GAAG,CAAC;YACT,mCAA4B,CAAC,kBAAkB;YAC/C,mCAA4B,CAAC,eAAe;YAC5C,mCAA4B,CAAC,uBAAuB;YACpD,mCAA4B,CAAC,wBAAwB;YACrD,GAAG,IAAI,CAAC,iBAAiB;SAC1B,CAAC;KACH,CAAC;IACF,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CACxC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAC9C,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,+DAA+D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACrF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,IAA0B,EAC1B,IAA8B;IAE9B,IAAI,IAAI,CAAC,cAAc,KAAK,8BAAuB,CAAC,QAAQ,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CACb,oIAAoI,CACrI,CAAC;IACJ,CAAC;IACD,IACE,IAAI,CAAC,cAAc,KAAK,8BAAuB,CAAC,WAAW;QAC3D,IAAI,CAAC,gBAAgB,KAAK,IAAI,EAC9B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,2GAA2G,CAC5G,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/runtime/installation/readiness-proof.d.ts

@@ -0,0 +1,72 @@
+import type { Substrate } from '../config/schema';
+import type { RuntimeUnitType } from '../unit-type';
+export declare enum InstallationReadinessIssueCode {
+    ObserverUnavailable = "observer-unavailable",
+    MissingWorkload = "missing-workload",
+    UnexpectedWorkload = "unexpected-workload",
+    ProcessNotRunning = "process-not-running",
+    ContainerNotRunning = "container-not-running",
+    ContainerUnhealthy = "container-unhealthy",
+    ServiceNotReady = "service-not-ready",
+    GenerationNotObserved = "generation-not-observed",
+    ReplicasNotReady = "replicas-not-ready",
+    JobNotComplete = "job-not-complete",
+    JobFailed = "job-failed",
+    ServiceMissing = "service-missing",
+    EndpointsMissing = "endpoints-missing",
+    BootstrapMarkerMissing = "bootstrap-marker-missing",
+    SmokeCheckFailed = "smoke-check-failed",
+    BackupPrerequisiteMissing = "backup-prerequisite-missing",
+    PlanIdentityMismatch = "plan-identity-mismatch",
+    ExecutionIdentityMismatch = "execution-identity-mismatch"
+}
+export declare const MAX_CONCURRENT_READINESS_PROBES = 32;
+export interface InstallationReadinessIssue {
+    readonly code: InstallationReadinessIssueCode;
+    readonly workload?: string;
+    readonly message: string;
+    readonly remediation: string;
+}
+export interface ExpectedInstallationWorkload {
+    readonly name: string;
+    readonly unitType: RuntimeUnitType;
+    readonly port: number;
+    readonly image?: string;
+    readonly containerPort?: number;
+}
+export interface InstallationReadinessExpectation {
+    readonly substrate: Substrate;
+    readonly workloads: readonly ExpectedInstallationWorkload[];
+    readonly distributionLockPath: string;
+    readonly installationId: string;
+    readonly effectivePlanHash: string;
+    readonly executionId?: string;
+    readonly namespace?: string;
+}
+export interface ObservedInstallationWorkload {
+    readonly name: string;
+    readonly state: string;
+    readonly expected: boolean;
+    readonly checks: Readonly<Record<string, string | number | boolean>>;
+}
+export interface InstallationReadinessProof {
+    readonly substrate: Substrate;
+    readonly effectivePlanHash?: string;
+    readonly expectedWorkloads: readonly string[];
+    readonly ready: boolean;
+    readonly workloads: readonly ObservedInstallationWorkload[];
+    readonly issues: readonly InstallationReadinessIssue[];
+}
+export interface InstallationReadinessObserver {
+    observe(expectation: InstallationReadinessExpectation): Promise<InstallationReadinessProof>;
+}
+export declare function assertInstallationReady(proof: InstallationReadinessProof): void;
+export declare function buildReadinessProof(expectation: InstallationReadinessExpectation, workloads: readonly ObservedInstallationWorkload[], issues: readonly InstallationReadinessIssue[]): InstallationReadinessProof;
+export declare function unavailableProof(expectation: InstallationReadinessExpectation, message: string, remediation: string): InstallationReadinessProof;
+export declare function missingWorkload(name: string): InstallationReadinessIssue;
+export declare function unexpectedWorkload(name: string): InstallationReadinessIssue;
+export declare function serviceNotReady(name: string): InstallationReadinessIssue;
+export declare function planIdentityMismatch(name: string): InstallationReadinessIssue;
+export declare function executionIdentityMismatch(name: string): InstallationReadinessIssue;
+export declare function mapConcurrentOrdered<T, R>(items: readonly T[], concurrency: number, mapper: (item: T) => Promise<R>): Promise<R[]>;
+//# sourceMappingURL=readiness-proof.d.ts.map

package/dist/runtime/installation/readiness-proof.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness-proof.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/readiness-proof.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAapD,oBAAY,8BAA8B;IACxC,mBAAmB,yBAAyB;IAC5C,eAAe,qBAAqB;IACpC,kBAAkB,wBAAwB;IAC1C,iBAAiB,wBAAwB;IACzC,mBAAmB,0BAA0B;IAC7C,kBAAkB,wBAAwB;IAC1C,eAAe,sBAAsB;IACrC,qBAAqB,4BAA4B;IACjD,gBAAgB,uBAAuB;IACvC,cAAc,qBAAqB;IACnC,SAAS,eAAe;IACxB,cAAc,oBAAoB;IAClC,gBAAgB,sBAAsB;IACtC,sBAAsB,6BAA6B;IACnD,gBAAgB,uBAAuB;IACvC,yBAAyB,gCAAgC;IACzD,oBAAoB,2BAA2B;IAC/C,yBAAyB,gCAAgC;CAC1D;AAED,eAAO,MAAM,+BAA+B,KAAK,CAAC;AAElD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,8BAA8B,CAAC;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,SAAS,4BAA4B,EAAE,CAAC;IAC5D,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IAEnC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAM9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;CACtE;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,SAAS,4BAA4B,EAAE,CAAC;IAC5D,QAAQ,CAAC,MAAM,EAAE,SAAS,0BAA0B,EAAE,CAAC;CACxD;AAED,MAAM,WAAW,6BAA6B;IAC5C,OAAO,CACL,WAAW,EAAE,gCAAgC,GAC5C,OAAO,CAAC,0BAA0B,CAAC,CAAC;CACxC;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,0BAA0B,GAChC,IAAI,CA6BN;AAED,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,gCAAgC,EAC7C,SAAS,EAAE,SAAS,4BAA4B,EAAE,EAClD,MAAM,EAAE,SAAS,0BAA0B,EAAE,GAC5C,0BAA0B,CAS5B;AAmBD,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,gCAAgC,EAC7C,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,GAClB,0BAA0B,CAQ5B;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,0BAA0B,CAQxE;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,0BAA0B,CAQ3E;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,0BAA0B,CAQxE;AAED,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,GACX,0BAA0B,CAQ5B;AAED,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,GACX,0BAA0B,CAQ5B;AAOD,wBAAsB,oBAAoB,CAAC,CAAC,EAAE,CAAC,EAC7C,KAAK,EAAE,SAAS,CAAC,EAAE,EACnB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,GAC9B,OAAO,CAAC,CAAC,EAAE,CAAC,CAkBd"}

package/dist/runtime/installation/readiness-proof.js

@@ -0,0 +1,142 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_CONCURRENT_READINESS_PROBES = exports.InstallationReadinessIssueCode = void 0;
+exports.assertInstallationReady = assertInstallationReady;
+exports.buildReadinessProof = buildReadinessProof;
+exports.unavailableProof = unavailableProof;
+exports.missingWorkload = missingWorkload;
+exports.unexpectedWorkload = unexpectedWorkload;
+exports.serviceNotReady = serviceNotReady;
+exports.planIdentityMismatch = planIdentityMismatch;
+exports.executionIdentityMismatch = executionIdentityMismatch;
+exports.mapConcurrentOrdered = mapConcurrentOrdered;
+var InstallationReadinessIssueCode;
+(function (InstallationReadinessIssueCode) {
+    InstallationReadinessIssueCode["ObserverUnavailable"] = "observer-unavailable";
+    InstallationReadinessIssueCode["MissingWorkload"] = "missing-workload";
+    InstallationReadinessIssueCode["UnexpectedWorkload"] = "unexpected-workload";
+    InstallationReadinessIssueCode["ProcessNotRunning"] = "process-not-running";
+    InstallationReadinessIssueCode["ContainerNotRunning"] = "container-not-running";
+    InstallationReadinessIssueCode["ContainerUnhealthy"] = "container-unhealthy";
+    InstallationReadinessIssueCode["ServiceNotReady"] = "service-not-ready";
+    InstallationReadinessIssueCode["GenerationNotObserved"] = "generation-not-observed";
+    InstallationReadinessIssueCode["ReplicasNotReady"] = "replicas-not-ready";
+    InstallationReadinessIssueCode["JobNotComplete"] = "job-not-complete";
+    InstallationReadinessIssueCode["JobFailed"] = "job-failed";
+    InstallationReadinessIssueCode["ServiceMissing"] = "service-missing";
+    InstallationReadinessIssueCode["EndpointsMissing"] = "endpoints-missing";
+    InstallationReadinessIssueCode["BootstrapMarkerMissing"] = "bootstrap-marker-missing";
+    InstallationReadinessIssueCode["SmokeCheckFailed"] = "smoke-check-failed";
+    InstallationReadinessIssueCode["BackupPrerequisiteMissing"] = "backup-prerequisite-missing";
+    InstallationReadinessIssueCode["PlanIdentityMismatch"] = "plan-identity-mismatch";
+    InstallationReadinessIssueCode["ExecutionIdentityMismatch"] = "execution-identity-mismatch";
+})(InstallationReadinessIssueCode || (exports.InstallationReadinessIssueCode = InstallationReadinessIssueCode = {}));
+exports.MAX_CONCURRENT_READINESS_PROBES = 32;
+function assertInstallationReady(proof) {
+    const expected = new Set(proof.expectedWorkloads);
+    const readyExpected = new Set(proof.workloads
+        .filter((workload) => workload.expected && workload.state === 'ready')
+        .map((workload) => workload.name));
+    const structurallyComplete = expected.size > 0 &&
+        expected.size === proof.expectedWorkloads.length &&
+        proof.workloads.length === expected.size &&
+        [...expected].every((name) => readyExpected.has(name)) &&
+        proof.workloads.every((workload) => workload.expected);
+    if (proof.ready && proof.issues.length === 0 && structurallyComplete) {
+        return;
+    }
+    const structuralDetail = structurallyComplete
+        ? ''
+        : '\n- [invalid-proof] Readiness evidence does not contain one ready observation for every unique expected workload.';
+    throw new Error(`Installation readiness proof failed:\n${proof.issues
+        .map((issue) => `- [${issue.code}] ${issue.message} Remediation: ${issue.remediation}`)
+        .join('\n')}${structuralDetail}`);
+}
+function buildReadinessProof(expectation, workloads, issues) {
+    return {
+        substrate: expectation.substrate,
+        ...observedEffectivePlanHash(workloads),
+        expectedWorkloads: expectation.workloads.map((workload) => workload.name),
+        ready: issues.length === 0,
+        workloads,
+        issues,
+    };
+}
+function observedEffectivePlanHash(workloads) {
+    const identities = new Set(workloads.flatMap((workload) => {
+        const identity = workload.checks.planHash;
+        return typeof identity === 'string' && identity !== 'missing'
+            ? [identity]
+            : [];
+    }));
+    if (identities.size !== 1) {
+        return {};
+    }
+    return { effectivePlanHash: [...identities][0] };
+}
+function unavailableProof(expectation, message, remediation) {
+    return buildReadinessProof(expectation, [], [
+        {
+            code: InstallationReadinessIssueCode.ObserverUnavailable,
+            message,
+            remediation,
+        },
+    ]);
+}
+function missingWorkload(name) {
+    return {
+        code: InstallationReadinessIssueCode.MissingWorkload,
+        workload: name,
+        message: `Expected workload ${name} is missing.`,
+        remediation: 'Run `xema installation apply` and inspect the workload-specific startup error.',
+    };
+}
+function unexpectedWorkload(name) {
+    return {
+        code: InstallationReadinessIssueCode.UnexpectedWorkload,
+        workload: name,
+        message: `Launcher-owned workload ${name} is not present in the resolved distribution-lock roster.`,
+        remediation: 'Run `xema down`, review the selected edition/features, and reapply the installation.',
+    };
+}
+function serviceNotReady(name) {
+    return {
+        code: InstallationReadinessIssueCode.ServiceNotReady,
+        workload: name,
+        message: `Expected service ${name} did not pass /health/ready.`,
+        remediation: 'Inspect the service logs and dependency health, then re-run the readiness check.',
+    };
+}
+function planIdentityMismatch(name) {
+    return {
+        code: InstallationReadinessIssueCode.PlanIdentityMismatch,
+        workload: name,
+        message: `Workload ${name} was not launched for the expected effective plan.`,
+        remediation: 'Stop stale workloads and re-run apply so every workload carries the current plan hash.',
+    };
+}
+function executionIdentityMismatch(name) {
+    return {
+        code: InstallationReadinessIssueCode.ExecutionIdentityMismatch,
+        workload: name,
+        message: `Workload ${name} was not launched by the execution being proved.`,
+        remediation: 'Stop the stale execution and re-run apply so readiness is bound to exactly one launch.',
+    };
+}
+async function mapConcurrentOrdered(items, concurrency, mapper) {
+    const results = new Array(items.length);
+    let nextIndex = 0;
+    const workers = Array.from({ length: Math.min(concurrency, items.length) }, async () => {
+        for (;;) {
+            const index = nextIndex;
+            nextIndex += 1;
+            if (index >= items.length) {
+                return;
+            }
+            results[index] = await mapper(items[index]);
+        }
+    });
+    await Promise.all(workers);
+    return results;
+}
+//# sourceMappingURL=readiness-proof.js.map

package/dist/runtime/installation/readiness-proof.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness-proof.js","sourceRoot":"","sources":["../../../src/runtime/installation/readiness-proof.ts"],"names":[],"mappings":";;;AA0FA,0DA+BC;AAED,kDAaC;AAmBD,4CAYC;AAED,0CAQC;AAED,gDAQC;AAED,0CAQC;AAED,oDAUC;AAED,8DAUC;AAOD,oDAsBC;AA5OD,IAAY,8BAmBX;AAnBD,WAAY,8BAA8B;IACxC,8EAA4C,CAAA;IAC5C,sEAAoC,CAAA;IACpC,4EAA0C,CAAA;IAC1C,2EAAyC,CAAA;IACzC,+EAA6C,CAAA;IAC7C,4EAA0C,CAAA;IAC1C,uEAAqC,CAAA;IACrC,mFAAiD,CAAA;IACjD,yEAAuC,CAAA;IACvC,qEAAmC,CAAA;IACnC,0DAAwB,CAAA;IACxB,oEAAkC,CAAA;IAClC,wEAAsC,CAAA;IACtC,qFAAmD,CAAA;IACnD,yEAAuC,CAAA;IACvC,2FAAyD,CAAA;IACzD,iFAA+C,CAAA;IAC/C,2FAAyD,CAAA;AAC3D,CAAC,EAnBW,8BAA8B,8CAA9B,8BAA8B,QAmBzC;AAEY,QAAA,+BAA+B,GAAG,EAAE,CAAC;AAuDlD,SAAgB,uBAAuB,CACrC,KAAiC;IAEjC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,KAAK,CAAC,SAAS;SACZ,MAAM,CACL,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,OAAO,CAC9D;SACA,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CACpC,CAAC;IACF,MAAM,oBAAoB,GACxB,QAAQ,CAAC,IAAI,GAAG,CAAC;QACjB,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,iBAAiB,CAAC,MAAM;QAChD,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI;QACxC,CAAC,GAAG,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtD,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,oBAAoB,EAAE,CAAC;QACrE,OAAO;IACT,CAAC;IACD,MAAM,gBAAgB,GAAG,oBAAoB;QAC3C,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,mHAAmH,CAAC;IACxH,MAAM,IAAI,KAAK,CACb,yCAAyC,KAAK,CAAC,MAAM;SAClD,GAAG,CACF,CAAC,KAAK,EAAE,EAAE,CACR,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,iBAAiB,KAAK,CAAC,WAAW,EAAE,CACzE;SACA,IAAI,CAAC,IAAI,CAAC,GAAG,gBAAgB,EAAE,CACnC,CAAC;AACJ,CAAC;AAED,SAAgB,mBAAmB,CACjC,WAA6C,EAC7C,SAAkD,EAClD,MAA6C;IAE7C,OAAO;QACL,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,GAAG,yBAAyB,CAAC,SAAS,CAAC;QACvC,iBAAiB,EAAE,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;QACzE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,SAAS;QACT,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAChC,SAAkD;IAElD,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC7B,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC1C,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,SAAS;YAC3D,CAAC,CAAC,CAAC,QAAQ,CAAC;YACZ,CAAC,CAAC,EAAE,CAAC;IACT,CAAC,CAAC,CACH,CAAC;IACF,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,EAAE,iBAAiB,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAW,EAAE,CAAC;AAC7D,CAAC;AAED,SAAgB,gBAAgB,CAC9B,WAA6C,EAC7C,OAAe,EACf,WAAmB;IAEnB,OAAO,mBAAmB,CAAC,WAAW,EAAE,EAAE,EAAE;QAC1C;YACE,IAAI,EAAE,8BAA8B,CAAC,mBAAmB;YACxD,OAAO;YACP,WAAW;SACZ;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,eAAe,CAAC,IAAY;IAC1C,OAAO;QACL,IAAI,EAAE,8BAA8B,CAAC,eAAe;QACpD,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,qBAAqB,IAAI,cAAc;QAChD,WAAW,EACT,gFAAgF;KACnF,CAAC;AACJ,CAAC;AAED,SAAgB,kBAAkB,CAAC,IAAY;IAC7C,OAAO;QACL,IAAI,EAAE,8BAA8B,CAAC,kBAAkB;QACvD,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,2BAA2B,IAAI,2DAA2D;QACnG,WAAW,EACT,sFAAsF;KACzF,CAAC;AACJ,CAAC;AAED,SAAgB,eAAe,CAAC,IAAY;IAC1C,OAAO;QACL,IAAI,EAAE,8BAA8B,CAAC,eAAe;QACpD,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,oBAAoB,IAAI,8BAA8B;QAC/D,WAAW,EACT,kFAAkF;KACrF,CAAC;AACJ,CAAC;AAED,SAAgB,oBAAoB,CAClC,IAAY;IAEZ,OAAO;QACL,IAAI,EAAE,8BAA8B,CAAC,oBAAoB;QACzD,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,YAAY,IAAI,oDAAoD;QAC7E,WAAW,EACT,wFAAwF;KAC3F,CAAC;AACJ,CAAC;AAED,SAAgB,yBAAyB,CACvC,IAAY;IAEZ,OAAO;QACL,IAAI,EAAE,8BAA8B,CAAC,yBAAyB;QAC9D,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,YAAY,IAAI,kDAAkD;QAC3E,WAAW,EACT,wFAAwF;KAC3F,CAAC;AACJ,CAAC;AAOM,KAAK,UAAU,oBAAoB,CACxC,KAAmB,EACnB,WAAmB,EACnB,MAA+B;IAE/B,MAAM,OAAO,GAAG,IAAI,KAAK,CAAI,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CACxB,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAC/C,KAAK,IAAI,EAAE;QACT,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,SAAS,CAAC;YACxB,SAAS,IAAI,CAAC,CAAC;YACf,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC1B,OAAO;YACT,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAM,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CACF,CAAC;IACF,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/runtime/installation/readiness.d.ts

@@ -0,0 +1,21 @@
+import { type InstallationReadinessExpectation, type InstallationReadinessObserver, type InstallationReadinessProof } from './readiness-proof';
+import { type RunManifestEntry } from '../run-manifest';
+import { DockerCli } from '../runner/docker-cli';
+import type { LaunchHandle, LaunchPlan } from '../launch';
+export * from './readiness-proof';
+export declare function readinessExpectationFromLaunchPlan(plan: Pick<LaunchPlan, 'substrate' | 'roster' | 'ports' | 'lock' | 'helmNamespace'>, effectivePlanHash: string, installationId: string, executionId?: string): InstallationReadinessExpectation;
+export declare function proveLocalLaunchReadiness(handle: LaunchHandle, effectivePlanHash: string, observer?: InstallationReadinessObserver): Promise<InstallationReadinessProof>;
+export declare class LocalInstallationReadinessObserver implements InstallationReadinessObserver {
+    private readonly docker;
+    private readonly readinessProbe;
+    private readonly nativeManifest;
+    private readonly processProbe;
+    private readonly nativePortOwnerProbe;
+    private readonly nativeProcessIdentityProbe;
+    private readonly helmObserver;
+    constructor(docker?: DockerCli, readinessProbe?: (url: string) => Promise<boolean>, nativeManifest?: (installationId: string) => readonly RunManifestEntry[], processProbe?: (pid: number) => boolean, nativePortOwnerProbe?: (entry: RunManifestEntry) => Promise<boolean>, nativeProcessIdentityProbe?: (entry: RunManifestEntry) => Promise<boolean>, helmObserver?: InstallationReadinessObserver);
+    observe(expectation: InstallationReadinessExpectation): Promise<InstallationReadinessProof>;
+    private observeNative;
+    private observeContainers;
+}
+//# sourceMappingURL=readiness.d.ts.map

package/dist/runtime/installation/readiness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/readiness.ts"],"names":[],"mappings":"AACA,OAAO,EAWL,KAAK,gCAAgC,EAErC,KAAK,6BAA6B,EAClC,KAAK,0BAA0B,EAEhC,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAKL,KAAK,gBAAgB,EACtB,MAAM,iBAAiB,CAAC;AAKzB,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAGjD,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAO1D,cAAc,mBAAmB,CAAC;AAElC,wBAAgB,kCAAkC,CAChD,IAAI,EAAE,IAAI,CACR,UAAU,EACV,WAAW,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,eAAe,CAC5D,EACD,iBAAiB,EAAE,MAAM,EACzB,cAAc,EAAE,MAAM,EACtB,WAAW,CAAC,EAAE,MAAM,GACnB,gCAAgC,CAmClC;AAED,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,YAAY,EACpB,iBAAiB,EAAE,MAAM,EACzB,QAAQ,GAAE,6BAAwE,GACjF,OAAO,CAAC,0BAA0B,CAAC,CAkDrC;AASD,qBAAa,kCACX,YAAW,6BAA6B;IAGtC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,cAAc;IAE/B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAG/B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IAGrC,OAAO,CAAC,QAAQ,CAAC,0BAA0B;IAG3C,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAbZ,MAAM,GAAE,SAA2B,EACnC,cAAc,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CACjD,EACC,cAAc,GAAE,CAC/B,cAAc,EAAE,MAAM,KACnB,SAAS,gBAAgB,EAAoB,EACjC,YAAY,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAwB,EACvD,oBAAoB,GAAE,CACrC,KAAK,EAAE,gBAAgB,KACpB,OAAO,CAAC,OAAO,CAAiC,EACpC,0BAA0B,GAAE,CAC3C,KAAK,EAAE,gBAAgB,KACpB,OAAO,CAAC,OAAO,CAAuC,EAC1C,YAAY,GAAE,6BAAkE;IAGtF,OAAO,CAClB,WAAW,EAAE,gCAAgC,GAC5C,OAAO,CAAC,0BAA0B,CAAC;YAWxB,aAAa;YAoKb,iBAAiB;CAoLhC"}