@xemahq/xema 0.14.0 → 0.15.0

package/dist/runtime/installation/validators/infrastructure.js

@@ -7,8 +7,8 @@ const url_security_1 = require("../../secrets/url-security");
 const diagnostics_1 = require("../diagnostics");
 function validateInfrastructure(installation) {
     const issues = [];
-    for (const binding of installation.infrastructure) {
-        const path = `infrastructure.${binding.component}`;
+    for (const binding of installation.spec.infrastructure) {
+        const path = `spec.infrastructure.${binding.component}`;
         if (binding.ownership === schema_1.InfraMode.External &&
             binding.endpoint === undefined) {
             issues.push({
@@ -49,6 +49,24 @@ function validateInfrastructure(installation) {
         if (binding.endpoint !== undefined) {
             validateEndpoint(binding.endpoint, `${path}.endpoint`, issues);
         }
+        if (binding.realm !== undefined &&
+            binding.component !== schema_1.InfraComponent.Keycloak) {
+            issues.push({
+                kind: diagnostics_1.InstallationIssueKind.Invalid,
+                code: 'REALM_COMPONENT_INVALID',
+                path: `${path}.realm`,
+                message: 'realm is only valid for identity infrastructure',
+            });
+        }
+        if (binding.bucketPrefix !== undefined &&
+            binding.component !== schema_1.InfraComponent.ObjectStore) {
+            issues.push({
+                kind: diagnostics_1.InstallationIssueKind.Invalid,
+                code: 'BUCKET_PREFIX_COMPONENT_INVALID',
+                path: `${path}.bucketPrefix`,
+                message: 'bucketPrefix is only valid for object-store infrastructure',
+            });
+        }
     }
     return issues;
 }

package/dist/runtime/installation/validators/infrastructure.js.map

@@ -1 +1 @@
-{"version":3,"file":"infrastructure.js","sourceRoot":"","sources":["../../../../src/runtime/installation/validators/infrastructure.ts"],"names":[],"mappings":";;AAOA,wDAyDC;AAhED,gDAAgE;AAChE,6DAA0D;AAC1D,6DAA2E;AAC3E,gDAA+E;AAI/E,SAAgB,sBAAsB,CACpC,YAAoC;IAEpC,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,cAAc,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,kBAAkB,OAAO,CAAC,SAAS,EAAE,CAAC;QACnD,IACE,OAAO,CAAC,SAAS,KAAK,kBAAS,CAAC,QAAQ;YACxC,OAAO,CAAC,QAAQ,KAAK,SAAS,EAC9B,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,mCAAqB,CAAC,UAAU;gBACtC,IAAI,EAAE,4BAA4B;gBAClC,IAAI,EAAE,GAAG,IAAI,WAAW;gBACxB,OAAO,EAAE,8CAA8C;aACxD,CAAC,CAAC;QACL,CAAC;QACD,IACE,OAAO,CAAC,SAAS,KAAK,uBAAc,CAAC,QAAQ;YAC7C,OAAO,CAAC,SAAS,KAAK,kBAAS,CAAC,QAAQ;YACxC,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAC/B,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,mCAAqB,CAAC,UAAU;gBACtC,IAAI,EAAE,oCAAoC;gBAC1C,IAAI,EAAE,GAAG,IAAI,aAAa;gBAC1B,OAAO,EACL,oEAAoE;aACvE,CAAC,CAAC;QACL,CAAC;QACD,IACE,OAAO,CAAC,SAAS,KAAK,kBAAS,CAAC,QAAQ;YACxC,OAAO,CAAC,QAAQ,KAAK,SAAS,EAC9B,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,mCAAqB,CAAC,OAAO;gBACnC,IAAI,EAAE,sBAAsB;gBAC5B,IAAI,EAAE,GAAG,IAAI,WAAW;gBACxB,OAAO,EAAE,+BAA+B,OAAO,CAAC,SAAS,iBAAiB;aAC3E,CAAC,CAAC;QACL,CAAC;QACD,IACE,OAAO,CAAC,SAAS,KAAK,kBAAS,CAAC,QAAQ;YACxC,6BAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,SAAS,EAC1C,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,mCAAqB,CAAC,OAAO;gBACnC,IAAI,EAAE,mCAAmC;gBACzC,IAAI,EAAE,GAAG,IAAI,YAAY;gBACzB,OAAO,EAAE,6CAA6C;aACvD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACnC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,IAAI,WAAW,EAAE,MAAM,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CACvB,QAAgB,EAChB,IAAY,EACZ,MAA2B;IAE3B,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mCAAqB,CAAC,OAAO;YACnC,IAAI,EAAE,kBAAkB;YACxB,IAAI;YACJ,OAAO,EAAE,yBAAyB;SACnC,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,IAAA,4CAA6B,EAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mCAAqB,CAAC,OAAO;YACnC,IAAI,EAAE,0BAA0B;YAChC,IAAI;YACJ,OAAO,EACL,oEAAoE;SACvE,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}
+{"version":3,"file":"infrastructure.js","sourceRoot":"","sources":["../../../../src/runtime/installation/validators/infrastructure.ts"],"names":[],"mappings":";;AAOA,wDA+EC;AAtFD,gDAAgE;AAChE,6DAA0D;AAC1D,6DAA2E;AAC3E,gDAA+E;AAI/E,SAAgB,sBAAsB,CACpC,YAAoC;IAEpC,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,uBAAuB,OAAO,CAAC,SAAS,EAAE,CAAC;QACxD,IACE,OAAO,CAAC,SAAS,KAAK,kBAAS,CAAC,QAAQ;YACxC,OAAO,CAAC,QAAQ,KAAK,SAAS,EAC9B,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,mCAAqB,CAAC,UAAU;gBACtC,IAAI,EAAE,4BAA4B;gBAClC,IAAI,EAAE,GAAG,IAAI,WAAW;gBACxB,OAAO,EAAE,8CAA8C;aACxD,CAAC,CAAC;QACL,CAAC;QACD,IACE,OAAO,CAAC,SAAS,KAAK,uBAAc,CAAC,QAAQ;YAC7C,OAAO,CAAC,SAAS,KAAK,kBAAS,CAAC,QAAQ;YACxC,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAC/B,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,mCAAqB,CAAC,UAAU;gBACtC,IAAI,EAAE,oCAAoC;gBAC1C,IAAI,EAAE,GAAG,IAAI,aAAa;gBAC1B,OAAO,EACL,oEAAoE;aACvE,CAAC,CAAC;QACL,CAAC;QACD,IACE,OAAO,CAAC,SAAS,KAAK,kBAAS,CAAC,QAAQ;YACxC,OAAO,CAAC,QAAQ,KAAK,SAAS,EAC9B,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,mCAAqB,CAAC,OAAO;gBACnC,IAAI,EAAE,sBAAsB;gBAC5B,IAAI,EAAE,GAAG,IAAI,WAAW;gBACxB,OAAO,EAAE,+BAA+B,OAAO,CAAC,SAAS,iBAAiB;aAC3E,CAAC,CAAC;QACL,CAAC;QACD,IACE,OAAO,CAAC,SAAS,KAAK,kBAAS,CAAC,QAAQ;YACxC,6BAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,SAAS,EAC1C,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,mCAAqB,CAAC,OAAO;gBACnC,IAAI,EAAE,mCAAmC;gBACzC,IAAI,EAAE,GAAG,IAAI,YAAY;gBACzB,OAAO,EAAE,6CAA6C;aACvD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACnC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,IAAI,WAAW,EAAE,MAAM,CAAC,CAAC;QACjE,CAAC;QACD,IACE,OAAO,CAAC,KAAK,KAAK,SAAS;YAC3B,OAAO,CAAC,SAAS,KAAK,uBAAc,CAAC,QAAQ,EAC7C,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,mCAAqB,CAAC,OAAO;gBACnC,IAAI,EAAE,yBAAyB;gBAC/B,IAAI,EAAE,GAAG,IAAI,QAAQ;gBACrB,OAAO,EAAE,iDAAiD;aAC3D,CAAC,CAAC;QACL,CAAC;QACD,IACE,OAAO,CAAC,YAAY,KAAK,SAAS;YAClC,OAAO,CAAC,SAAS,KAAK,uBAAc,CAAC,WAAW,EAChD,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,mCAAqB,CAAC,OAAO;gBACnC,IAAI,EAAE,iCAAiC;gBACvC,IAAI,EAAE,GAAG,IAAI,eAAe;gBAC5B,OAAO,EAAE,4DAA4D;aACtE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CACvB,QAAgB,EAChB,IAAY,EACZ,MAA2B;IAE3B,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mCAAqB,CAAC,OAAO;YACnC,IAAI,EAAE,kBAAkB;YACxB,IAAI;YACJ,OAAO,EAAE,yBAAyB;SACnC,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,IAAA,4CAA6B,EAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mCAAqB,CAAC,OAAO;YACnC,IAAI,EAAE,0BAA0B;YAChC,IAAI;YACJ,OAAO,EACL,oEAAoE;SACvE,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/runtime/installation/validators/operational.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"operational.d.ts","sourceRoot":"","sources":["../../../../src/runtime/installation/validators/operational.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,sBAAsB,EAC5B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAyB,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAE/E,wBAAgB,yBAAyB,CACvC,YAAY,EAAE,sBAAsB,GACnC,SAAS,iBAAiB,EAAE,CAM9B"}
+{"version":3,"file":"operational.d.ts","sourceRoot":"","sources":["../../../../src/runtime/installation/validators/operational.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,sBAAsB,EAC5B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAyB,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAE/E,wBAAgB,yBAAyB,CACvC,YAAY,EAAE,sBAAsB,GACnC,SAAS,iBAAiB,EAAE,CA+J9B"}

package/dist/runtime/installation/validators/operational.js

@@ -4,123 +4,65 @@ exports.validateOperationalPolicy = validateOperationalPolicy;
 const contract_1 = require("../contract");
 const diagnostics_1 = require("../diagnostics");
 function validateOperationalPolicy(installation) {
-    return [
-        ...validateStorage(installation),
-        ...validateCapacity(installation),
-        ...validateUpgrade(installation),
-    ];
-}
-function validateStorage(installation) {
+    const spec = installation.spec;
     const issues = [];
-    if (installation.storage.class === contract_1.StorageClass.External &&
-        installation.storage.externalBinding === undefined) {
-        issues.push({
-            kind: diagnostics_1.InstallationIssueKind.Unresolved,
-            code: 'EXTERNAL_STORAGE_BINDING_REQUIRED',
-            path: 'storage.externalBinding',
-            message: 'external storage requires a binding reference',
-        });
+    if (spec.features.selection === contract_1.FeatureSelectionMode.Explicit &&
+        spec.features.include.length === 0) {
+        issues.push(issue('FEATURE_INCLUDE_REQUIRED', 'spec.features.include', 'explicit feature selection requires at least one included roster entry', diagnostics_1.InstallationIssueKind.Unresolved));
+    }
+    if (spec.features.selection !== undefined &&
+        spec.features.selection !== contract_1.FeatureSelectionMode.Explicit &&
+        spec.features.include.length > 0) {
+        issues.push(issue('FEATURE_INCLUDE_NOT_ALLOWED', 'spec.features.include', 'feature include entries are only valid with explicit selection'));
     }
-    if (installation.storage.class !== contract_1.StorageClass.External &&
-        installation.storage.externalBinding !== undefined) {
-        issues.push({
-            kind: diagnostics_1.InstallationIssueKind.Invalid,
-            code: 'EXTERNAL_STORAGE_BINDING_NOT_ALLOWED',
-            path: 'storage.externalBinding',
-            message: 'externalBinding is only valid for external storage',
-        });
+    if (spec.storage.class === contract_1.StorageClass.External &&
+        spec.storage.externalBinding === undefined) {
+        issues.push(issue('EXTERNAL_STORAGE_BINDING_REQUIRED', 'spec.storage.externalBinding', 'external storage requires a binding reference', diagnostics_1.InstallationIssueKind.Unresolved));
     }
-    if (installation.storage.backup.mode === contract_1.BackupMode.Disabled &&
-        installation.storage.backup.destinationSecretRef !== undefined) {
-        issues.push({
-            kind: diagnostics_1.InstallationIssueKind.Invalid,
-            code: 'BACKUP_DESTINATION_NOT_ALLOWED',
-            path: 'storage.backup.destinationSecretRef',
-            message: 'a disabled backup policy cannot declare a destination',
-        });
+    if (spec.storage.class !== contract_1.StorageClass.External &&
+        spec.storage.externalBinding !== undefined) {
+        issues.push(issue('EXTERNAL_STORAGE_BINDING_NOT_ALLOWED', 'spec.storage.externalBinding', 'externalBinding is only valid for external storage'));
     }
-    if (installation.deployment.profile ===
-        contract_1.InstallationDeploymentProfile.Regulated &&
-        installation.storage.backup.mode !== undefined &&
-        installation.storage.backup.mode !== contract_1.BackupMode.Continuous) {
-        issues.push({
-            kind: diagnostics_1.InstallationIssueKind.Invalid,
-            code: 'REGULATED_BACKUP_REQUIRED',
-            path: 'storage.backup.mode',
-            message: 'regulated installations require continuous backup',
-        });
+    if (spec.recovery.mode === contract_1.BackupMode.Disabled &&
+        spec.recovery.destinationSecretRef !== undefined) {
+        issues.push(issue('BACKUP_DESTINATION_NOT_ALLOWED', 'spec.recovery.destinationSecretRef', 'a disabled recovery policy cannot declare a destination'));
     }
-    if (installation.deployment.profile ===
-        contract_1.InstallationDeploymentProfile.Regulated &&
-        installation.domains.some((domain) => domain.tls.mode === contract_1.TlsMode.Disabled)) {
-        issues.push({
-            kind: diagnostics_1.InstallationIssueKind.Invalid,
-            code: 'REGULATED_TLS_REQUIRED',
-            path: 'domains',
-            message: 'regulated installation domains require TLS',
-        });
+    if (spec.profile === contract_1.InstallationProfile.EnterpriseRegulated &&
+        spec.recovery.mode !== undefined &&
+        spec.recovery.mode !== contract_1.BackupMode.Continuous) {
+        issues.push(issue('REGULATED_BACKUP_REQUIRED', 'spec.recovery.mode', 'enterprise-regulated installations require continuous backup'));
     }
-    for (const domain of installation.domains) {
-        const path = `domains.${domain.purpose}.${domain.hostname}.tls.secretRef`;
+    if (spec.profile === contract_1.InstallationProfile.EnterpriseRegulated &&
+        spec.domains.some((domain) => domain.tls.mode === contract_1.TlsMode.Disabled)) {
+        issues.push(issue('REGULATED_TLS_REQUIRED', 'spec.domains', 'enterprise-regulated installation domains require TLS'));
+    }
+    for (const domain of spec.domains) {
+        const path = `spec.domains.${domain.purpose}.${domain.hostname}.tls.secretRef`;
         if (domain.tls.mode === contract_1.TlsMode.External &&
             domain.tls.secretRef === undefined) {
-            issues.push({
-                kind: diagnostics_1.InstallationIssueKind.Unresolved,
-                code: 'EXTERNAL_TLS_SECRET_REQUIRED',
-                path,
-                message: 'external TLS requires a certificate secret reference',
-            });
+            issues.push(issue('EXTERNAL_TLS_SECRET_REQUIRED', path, 'external TLS requires a certificate secret reference', diagnostics_1.InstallationIssueKind.Unresolved));
         }
         if (domain.tls.mode !== contract_1.TlsMode.External &&
             domain.tls.secretRef !== undefined) {
-            issues.push({
-                kind: diagnostics_1.InstallationIssueKind.Invalid,
-                code: 'TLS_SECRET_NOT_ALLOWED',
-                path,
-                message: `a ${domain.tls.mode} TLS policy cannot declare an external certificate secret`,
-            });
+            issues.push(issue('TLS_SECRET_NOT_ALLOWED', path, `a ${domain.tls.mode} TLS policy cannot declare an external certificate secret`));
         }
     }
-    return issues;
-}
-function validateCapacity(installation) {
-    const { minReplicas, maxReplicas } = installation.capacity;
-    if (minReplicas !== undefined &&
-        maxReplicas !== undefined &&
-        minReplicas > maxReplicas) {
-        return [
-            {
-                kind: diagnostics_1.InstallationIssueKind.Invalid,
-                code: 'CAPACITY_RANGE_INVALID',
-                path: 'capacity',
-                message: 'minReplicas cannot exceed maxReplicas',
-            },
-        ];
+    if (spec.capacity.minReplicas !== undefined &&
+        spec.capacity.maxReplicas !== undefined &&
+        spec.capacity.minReplicas > spec.capacity.maxReplicas) {
+        issues.push(issue('CAPACITY_RANGE_INVALID', 'spec.capacity', 'minReplicas cannot exceed maxReplicas'));
     }
-    return [];
-}
-function validateUpgrade(installation) {
-    const { channel, releaseRef } = installation.upgrade;
-    if (channel === contract_1.UpgradeChannel.Pinned && releaseRef === undefined) {
-        return [
-            {
-                kind: diagnostics_1.InstallationIssueKind.Unresolved,
-                code: 'PINNED_RELEASE_REQUIRED',
-                path: 'upgrade.releaseRef',
-                message: 'pinned upgrade channel requires a releaseRef',
-            },
-        ];
+    if (spec.upgrade.channel === contract_1.UpgradeChannel.Pinned &&
+        spec.upgrade.releaseRef === undefined) {
+        issues.push(issue('PINNED_RELEASE_REQUIRED', 'spec.upgrade.releaseRef', 'pinned upgrade channel requires a releaseRef', diagnostics_1.InstallationIssueKind.Unresolved));
     }
-    if (channel !== contract_1.UpgradeChannel.Pinned && releaseRef !== undefined) {
-        return [
-            {
-                kind: diagnostics_1.InstallationIssueKind.Invalid,
-                code: 'RELEASE_REF_NOT_ALLOWED',
-                path: 'upgrade.releaseRef',
-                message: 'releaseRef is only valid for the pinned upgrade channel',
-            },
-        ];
+    if (spec.upgrade.channel !== contract_1.UpgradeChannel.Pinned &&
+        spec.upgrade.releaseRef !== undefined) {
+        issues.push(issue('RELEASE_REF_NOT_ALLOWED', 'spec.upgrade.releaseRef', 'releaseRef is only valid for the pinned upgrade channel'));
     }
-    return [];
+    return issues;
+}
+function issue(code, path, message, kind = diagnostics_1.InstallationIssueKind.Invalid) {
+    return { kind, code, path, message };
 }
 //# sourceMappingURL=operational.js.map

package/dist/runtime/installation/validators/operational.js.map

@@ -1 +1 @@
-{"version":3,"file":"operational.js","sourceRoot":"","sources":["../../../../src/runtime/installation/validators/operational.ts"],"names":[],"mappings":";;AAUA,8DAQC;AAlBD,0CAOqB;AACrB,gDAA+E;AAE/E,SAAgB,yBAAyB,CACvC,YAAoC;IAEpC,OAAO;QACL,GAAG,eAAe,CAAC,YAAY,CAAC;QAChC,GAAG,gBAAgB,CAAC,YAAY,CAAC;QACjC,GAAG,eAAe,CAAC,YAAY,CAAC;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,YAAoC;IAEpC,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,IACE,YAAY,CAAC,OAAO,CAAC,KAAK,KAAK,uBAAY,CAAC,QAAQ;QACpD,YAAY,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,EAClD,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mCAAqB,CAAC,UAAU;YACtC,IAAI,EAAE,mCAAmC;YACzC,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,+CAA+C;SACzD,CAAC,CAAC;IACL,CAAC;IACD,IACE,YAAY,CAAC,OAAO,CAAC,KAAK,KAAK,uBAAY,CAAC,QAAQ;QACpD,YAAY,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,EAClD,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mCAAqB,CAAC,OAAO;YACnC,IAAI,EAAE,sCAAsC;YAC5C,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,oDAAoD;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,IACE,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,qBAAU,CAAC,QAAQ;QACxD,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,KAAK,SAAS,EAC9D,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mCAAqB,CAAC,OAAO;YACnC,IAAI,EAAE,gCAAgC;YACtC,IAAI,EAAE,qCAAqC;YAC3C,OAAO,EAAE,uDAAuD;SACjE,CAAC,CAAC;IACL,CAAC;IACD,IACE,YAAY,CAAC,UAAU,CAAC,OAAO;QAC7B,wCAA6B,CAAC,SAAS;QACzC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS;QAC9C,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,qBAAU,CAAC,UAAU,EAC1D,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mCAAqB,CAAC,OAAO;YACnC,IAAI,EAAE,2BAA2B;YACjC,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,mDAAmD;SAC7D,CAAC,CAAC;IACL,CAAC;IACD,IACE,YAAY,CAAC,UAAU,CAAC,OAAO;QAC7B,wCAA6B,CAAC,SAAS;QACzC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,KAAK,kBAAO,CAAC,QAAQ,CAAC,EAC3E,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mCAAqB,CAAC,OAAO;YACnC,IAAI,EAAE,wBAAwB;YAC9B,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,4CAA4C;SACtD,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,WAAW,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,gBAAgB,CAAC;QAC1E,IACE,MAAM,CAAC,GAAG,CAAC,IAAI,KAAK,kBAAO,CAAC,QAAQ;YACpC,MAAM,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,EAClC,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,mCAAqB,CAAC,UAAU;gBACtC,IAAI,EAAE,8BAA8B;gBACpC,IAAI;gBACJ,OAAO,EAAE,sDAAsD;aAChE,CAAC,CAAC;QACL,CAAC;QACD,IACE,MAAM,CAAC,GAAG,CAAC,IAAI,KAAK,kBAAO,CAAC,QAAQ;YACpC,MAAM,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,EAClC,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,mCAAqB,CAAC,OAAO;gBACnC,IAAI,EAAE,wBAAwB;gBAC9B,IAAI;gBACJ,OAAO,EAAE,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,2DAA2D;aACzF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CACvB,YAAoC;IAEpC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC;IAC3D,IACE,WAAW,KAAK,SAAS;QACzB,WAAW,KAAK,SAAS;QACzB,WAAW,GAAG,WAAW,EACzB,CAAC;QACD,OAAO;YACL;gBACE,IAAI,EAAE,mCAAqB,CAAC,OAAO;gBACnC,IAAI,EAAE,wBAAwB;gBAC9B,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,uCAAuC;aACjD;SACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,eAAe,CACtB,YAAoC;IAEpC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC;IACrD,IAAI,OAAO,KAAK,yBAAc,CAAC,MAAM,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAClE,OAAO;YACL;gBACE,IAAI,EAAE,mCAAqB,CAAC,UAAU;gBACtC,IAAI,EAAE,yBAAyB;gBAC/B,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,8CAA8C;aACxD;SACF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,yBAAc,CAAC,MAAM,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAClE,OAAO;YACL;gBACE,IAAI,EAAE,mCAAqB,CAAC,OAAO;gBACnC,IAAI,EAAE,yBAAyB;gBAC/B,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,yDAAyD;aACnE;SACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}
+{"version":3,"file":"operational.js","sourceRoot":"","sources":["../../../../src/runtime/installation/validators/operational.ts"],"names":[],"mappings":";;AAWA,8DAiKC;AA5KD,0CAQqB;AACrB,gDAA+E;AAE/E,SAAgB,yBAAyB,CACvC,YAAoC;IAEpC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC;IAC/B,MAAM,MAAM,GAAwB,EAAE,CAAC;IAEvC,IACE,IAAI,CAAC,QAAQ,CAAC,SAAS,KAAK,+BAAoB,CAAC,QAAQ;QACzD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAClC,CAAC;QACD,MAAM,CAAC,IAAI,CACT,KAAK,CACH,0BAA0B,EAC1B,uBAAuB,EACvB,wEAAwE,EACxE,mCAAqB,CAAC,UAAU,CACjC,CACF,CAAC;IACJ,CAAC;IACD,IACE,IAAI,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS;QACrC,IAAI,CAAC,QAAQ,CAAC,SAAS,KAAK,+BAAoB,CAAC,QAAQ;QACzD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAChC,CAAC;QACD,MAAM,CAAC,IAAI,CACT,KAAK,CACH,6BAA6B,EAC7B,uBAAuB,EACvB,gEAAgE,CACjE,CACF,CAAC;IACJ,CAAC;IACD,IACE,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,uBAAY,CAAC,QAAQ;QAC5C,IAAI,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,EAC1C,CAAC;QACD,MAAM,CAAC,IAAI,CACT,KAAK,CACH,mCAAmC,EACnC,8BAA8B,EAC9B,+CAA+C,EAC/C,mCAAqB,CAAC,UAAU,CACjC,CACF,CAAC;IACJ,CAAC;IACD,IACE,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,uBAAY,CAAC,QAAQ;QAC5C,IAAI,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,EAC1C,CAAC;QACD,MAAM,CAAC,IAAI,CACT,KAAK,CACH,sCAAsC,EACtC,8BAA8B,EAC9B,oDAAoD,CACrD,CACF,CAAC;IACJ,CAAC;IACD,IACE,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,qBAAU,CAAC,QAAQ;QAC1C,IAAI,CAAC,QAAQ,CAAC,oBAAoB,KAAK,SAAS,EAChD,CAAC;QACD,MAAM,CAAC,IAAI,CACT,KAAK,CACH,gCAAgC,EAChC,oCAAoC,EACpC,yDAAyD,CAC1D,CACF,CAAC;IACJ,CAAC;IACD,IACE,IAAI,CAAC,OAAO,KAAK,8BAAmB,CAAC,mBAAmB;QACxD,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS;QAChC,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,qBAAU,CAAC,UAAU,EAC5C,CAAC;QACD,MAAM,CAAC,IAAI,CACT,KAAK,CACH,2BAA2B,EAC3B,oBAAoB,EACpB,8DAA8D,CAC/D,CACF,CAAC;IACJ,CAAC;IACD,IACE,IAAI,CAAC,OAAO,KAAK,8BAAmB,CAAC,mBAAmB;QACxD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,KAAK,kBAAO,CAAC,QAAQ,CAAC,EACnE,CAAC;QACD,MAAM,CAAC,IAAI,CACT,KAAK,CACH,wBAAwB,EACxB,cAAc,EACd,uDAAuD,CACxD,CACF,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,gBAAgB,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,gBAAgB,CAAC;QAC/E,IACE,MAAM,CAAC,GAAG,CAAC,IAAI,KAAK,kBAAO,CAAC,QAAQ;YACpC,MAAM,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,EAClC,CAAC;YACD,MAAM,CAAC,IAAI,CACT,KAAK,CACH,8BAA8B,EAC9B,IAAI,EACJ,sDAAsD,EACtD,mCAAqB,CAAC,UAAU,CACjC,CACF,CAAC;QACJ,CAAC;QACD,IACE,MAAM,CAAC,GAAG,CAAC,IAAI,KAAK,kBAAO,CAAC,QAAQ;YACpC,MAAM,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,EAClC,CAAC;YACD,MAAM,CAAC,IAAI,CACT,KAAK,CACH,wBAAwB,EACxB,IAAI,EACJ,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,2DAA2D,CAChF,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IACE,IAAI,CAAC,QAAQ,CAAC,WAAW,KAAK,SAAS;QACvC,IAAI,CAAC,QAAQ,CAAC,WAAW,KAAK,SAAS;QACvC,IAAI,CAAC,QAAQ,CAAC,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EACrD,CAAC;QACD,MAAM,CAAC,IAAI,CACT,KAAK,CACH,wBAAwB,EACxB,eAAe,EACf,uCAAuC,CACxC,CACF,CAAC;IACJ,CAAC;IACD,IACE,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,yBAAc,CAAC,MAAM;QAC9C,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,EACrC,CAAC;QACD,MAAM,CAAC,IAAI,CACT,KAAK,CACH,yBAAyB,EACzB,yBAAyB,EACzB,8CAA8C,EAC9C,mCAAqB,CAAC,UAAU,CACjC,CACF,CAAC;IACJ,CAAC;IACD,IACE,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,yBAAc,CAAC,MAAM;QAC9C,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,EACrC,CAAC;QACD,MAAM,CAAC,IAAI,CACT,KAAK,CACH,yBAAyB,EACzB,yBAAyB,EACzB,yDAAyD,CAC1D,CACF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,KAAK,CACZ,IAAY,EACZ,IAAY,EACZ,OAAe,EACf,IAAI,GAAG,mCAAqB,CAAC,OAAO;IAEpC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACvC,CAAC"}

package/dist/runtime/installation/validators/profile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"profile.d.ts","sourceRoot":"","sources":["../../../../src/runtime/installation/validators/profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,sBAAsB,EAC5B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAyB,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAE/E,wBAAgB,eAAe,CAC7B,YAAY,EAAE,sBAAsB,GACnC,SAAS,iBAAiB,EAAE,CA6E9B"}
+{"version":3,"file":"profile.d.ts","sourceRoot":"","sources":["../../../../src/runtime/installation/validators/profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,sBAAsB,EAC5B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAyB,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AA4B/E,wBAAgB,eAAe,CAC7B,YAAY,EAAE,sBAAsB,GACnC,SAAS,iBAAiB,EAAE,CA2D9B"}

package/dist/runtime/installation/validators/profile.js

@@ -3,76 +3,78 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.validateProfile = validateProfile;
 const contract_1 = require("../contract");
 const diagnostics_1 = require("../diagnostics");
+const PROFILE_TARGETS = {
+    [contract_1.InstallationProfile.Developer]: [contract_1.InstallationTargetKind.LocalMachine],
+    [contract_1.InstallationProfile.Starter]: [
+        contract_1.InstallationTargetKind.LocalMachine,
+        contract_1.InstallationTargetKind.SingleNodeKubernetes,
+    ],
+    [contract_1.InstallationProfile.SingleNodeProduction]: [
+        contract_1.InstallationTargetKind.SingleNodeKubernetes,
+        contract_1.InstallationTargetKind.CustomerKubernetes,
+    ],
+    [contract_1.InstallationProfile.BusinessHa]: [
+        contract_1.InstallationTargetKind.CustomerKubernetes,
+        contract_1.InstallationTargetKind.HostedCell,
+    ],
+    [contract_1.InstallationProfile.EnterpriseRegulated]: [
+        contract_1.InstallationTargetKind.CustomerKubernetes,
+        contract_1.InstallationTargetKind.HostedCell,
+    ],
+    [contract_1.InstallationProfile.HostedCell]: [
+        contract_1.InstallationTargetKind.CustomerKubernetes,
+        contract_1.InstallationTargetKind.HostedCell,
+    ],
+};
 function validateProfile(installation) {
     const issues = [];
-    const { profile, substrate } = installation.deployment;
-    const regions = installation.deployment.regions ?? [];
-    if (profile === contract_1.InstallationDeploymentProfile.MultiRegion) {
+    const spec = installation.spec;
+    const target = spec.target.kind;
+    if (target !== undefined && !PROFILE_TARGETS[spec.profile].includes(target)) {
         issues.push({
-            kind: diagnostics_1.InstallationIssueKind.Unsupported,
-            code: 'MULTI_REGION_NOT_EXECUTABLE',
-            path: 'deployment.profile',
-            message: 'multi-region is accepted as declared intent but this compiler version cannot produce an executable plan',
+            kind: diagnostics_1.InstallationIssueKind.Invalid,
+            code: 'PROFILE_TARGET_MISMATCH',
+            path: 'spec.target.kind',
+            message: `${spec.profile} does not support target ${target}`,
         });
     }
-    if (profile === contract_1.InstallationDeploymentProfile.Developer &&
-        substrate !== undefined &&
-        substrate !== contract_1.InstallationSubstrate.Local) {
-        issues.push(profileSubstrateIssue(profile, contract_1.InstallationSubstrate.Local));
-    }
-    if (profile === contract_1.InstallationDeploymentProfile.StarterPme &&
-        substrate === contract_1.InstallationSubstrate.Cluster) {
+    if ((spec.target.zones?.length ?? 0) > 0 &&
+        spec.target.region === undefined) {
         issues.push({
-            kind: diagnostics_1.InstallationIssueKind.Invalid,
-            code: 'PROFILE_SUBSTRATE_MISMATCH',
-            path: 'deployment.substrate',
-            message: 'starter-pme supports local or single-node substrate',
+            kind: diagnostics_1.InstallationIssueKind.Unresolved,
+            code: 'TARGET_REGION_REQUIRED',
+            path: 'spec.target.region',
+            message: 'explicit zones require one explicit target region',
         });
     }
-    if ((profile === contract_1.InstallationDeploymentProfile.HighAvailability ||
-        profile === contract_1.InstallationDeploymentProfile.Regulated ||
-        profile === contract_1.InstallationDeploymentProfile.MultiRegion) &&
-        substrate !== undefined &&
-        substrate !== contract_1.InstallationSubstrate.Cluster) {
-        issues.push(profileSubstrateIssue(profile, contract_1.InstallationSubstrate.Cluster));
-    }
-    if (profile !== contract_1.InstallationDeploymentProfile.MultiRegion &&
-        installation.deployment.regions !== undefined &&
-        regions.length !== 1) {
+    if (spec.profile === contract_1.InstallationProfile.EnterpriseRegulated &&
+        spec.tenancy.isolation === contract_1.TenantIsolation.Shared) {
         issues.push({
             kind: diagnostics_1.InstallationIssueKind.Invalid,
-            code: 'PROFILE_REGION_MISMATCH',
-            path: 'deployment.regions',
-            message: `${profile} requires exactly one explicitly declared region when regions are overridden`,
+            code: 'REGULATED_SHARED_ISOLATION',
+            path: 'spec.tenancy.isolation',
+            message: 'enterprise-regulated installations cannot use shared isolation',
         });
     }
-    if (profile === contract_1.InstallationDeploymentProfile.MultiRegion &&
-        regions.length > 0 &&
-        regions.length < 2) {
+    if (spec.profile === contract_1.InstallationProfile.HostedCell &&
+        spec.operator.kind !== undefined &&
+        spec.operator.kind !== contract_1.InstallationOperatorKind.Platform) {
         issues.push({
-            kind: diagnostics_1.InstallationIssueKind.Unresolved,
-            code: 'MULTI_REGION_REQUIRES_REGIONS',
-            path: 'deployment.regions',
-            message: 'multi-region requires at least two regions',
+            kind: diagnostics_1.InstallationIssueKind.Invalid,
+            code: 'HOSTED_CELL_OPERATOR_INVALID',
+            path: 'spec.operator.kind',
+            message: 'hosted-cell installations require the platform operator',
         });
     }
-    if (profile === contract_1.InstallationDeploymentProfile.Regulated &&
-        installation.tenancy.isolation === contract_1.TenantIsolation.Shared) {
+    if (spec.profile === contract_1.InstallationProfile.Developer &&
+        spec.lifecycle.environment === contract_1.LifecycleEnvironment.Production) {
         issues.push({
             kind: diagnostics_1.InstallationIssueKind.Invalid,
-            code: 'REGULATED_SHARED_ISOLATION',
-            path: 'tenancy.isolation',
-            message: 'regulated installations cannot use shared tenant isolation',
+            code: 'DEVELOPER_PRODUCTION_INVALID',
+            path: 'spec.lifecycle.environment',
+            message: 'the developer profile cannot be used for a production lifecycle environment',
         });
     }
     return issues;
 }
-function profileSubstrateIssue(profile, required) {
-    return {
-        kind: diagnostics_1.InstallationIssueKind.Invalid,
-        code: 'PROFILE_SUBSTRATE_MISMATCH',
-        path: 'deployment.substrate',
-        message: `${profile} requires ${required} substrate`,
-    };
-}
 //# sourceMappingURL=profile.js.map

package/dist/runtime/installation/validators/profile.js.map

@@ -1 +1 @@
-{"version":3,"file":"profile.js","sourceRoot":"","sources":["../../../../src/runtime/installation/validators/profile.ts"],"names":[],"mappings":";;AAQA,0CA+EC;AAvFD,0CAKqB;AACrB,gDAA+E;AAE/E,SAAgB,eAAe,CAC7B,YAAoC;IAEpC,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC,UAAU,CAAC;IACvD,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC;IAEtD,IAAI,OAAO,KAAK,wCAA6B,CAAC,WAAW,EAAE,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mCAAqB,CAAC,WAAW;YACvC,IAAI,EAAE,6BAA6B;YACnC,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EACL,yGAAyG;SAC5G,CAAC,CAAC;IACL,CAAC;IACD,IACE,OAAO,KAAK,wCAA6B,CAAC,SAAS;QACnD,SAAS,KAAK,SAAS;QACvB,SAAS,KAAK,gCAAqB,CAAC,KAAK,EACzC,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,gCAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,IACE,OAAO,KAAK,wCAA6B,CAAC,UAAU;QACpD,SAAS,KAAK,gCAAqB,CAAC,OAAO,EAC3C,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mCAAqB,CAAC,OAAO;YACnC,IAAI,EAAE,4BAA4B;YAClC,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,qDAAqD;SAC/D,CAAC,CAAC;IACL,CAAC;IACD,IACE,CAAC,OAAO,KAAK,wCAA6B,CAAC,gBAAgB;QACzD,OAAO,KAAK,wCAA6B,CAAC,SAAS;QACnD,OAAO,KAAK,wCAA6B,CAAC,WAAW,CAAC;QACxD,SAAS,KAAK,SAAS;QACvB,SAAS,KAAK,gCAAqB,CAAC,OAAO,EAC3C,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,gCAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,IACE,OAAO,KAAK,wCAA6B,CAAC,WAAW;QACrD,YAAY,CAAC,UAAU,CAAC,OAAO,KAAK,SAAS;QAC7C,OAAO,CAAC,MAAM,KAAK,CAAC,EACpB,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mCAAqB,CAAC,OAAO;YACnC,IAAI,EAAE,yBAAyB;YAC/B,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,GAAG,OAAO,8EAA8E;SAClG,CAAC,CAAC;IACL,CAAC;IACD,IACE,OAAO,KAAK,wCAA6B,CAAC,WAAW;QACrD,OAAO,CAAC,MAAM,GAAG,CAAC;QAClB,OAAO,CAAC,MAAM,GAAG,CAAC,EAClB,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mCAAqB,CAAC,UAAU;YACtC,IAAI,EAAE,+BAA+B;YACrC,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,4CAA4C;SACtD,CAAC,CAAC;IACL,CAAC;IACD,IACE,OAAO,KAAK,wCAA6B,CAAC,SAAS;QACnD,YAAY,CAAC,OAAO,CAAC,SAAS,KAAK,0BAAe,CAAC,MAAM,EACzD,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mCAAqB,CAAC,OAAO;YACnC,IAAI,EAAE,4BAA4B;YAClC,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,4DAA4D;SACtE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAAsC,EACtC,QAA+B;IAE/B,OAAO;QACL,IAAI,EAAE,mCAAqB,CAAC,OAAO;QACnC,IAAI,EAAE,4BAA4B;QAClC,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,GAAG,OAAO,aAAa,QAAQ,YAAY;KACrD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../../../../src/runtime/installation/validators/profile.ts"],"names":[],"mappings":";;AAoCA,0CA6DC;AAjGD,0CAOqB;AACrB,gDAA+E;AAE/E,MAAM,eAAe,GAEjB;IACF,CAAC,8BAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,iCAAsB,CAAC,YAAY,CAAC;IACtE,CAAC,8BAAmB,CAAC,OAAO,CAAC,EAAE;QAC7B,iCAAsB,CAAC,YAAY;QACnC,iCAAsB,CAAC,oBAAoB;KAC5C;IACD,CAAC,8BAAmB,CAAC,oBAAoB,CAAC,EAAE;QAC1C,iCAAsB,CAAC,oBAAoB;QAC3C,iCAAsB,CAAC,kBAAkB;KAC1C;IACD,CAAC,8BAAmB,CAAC,UAAU,CAAC,EAAE;QAChC,iCAAsB,CAAC,kBAAkB;QACzC,iCAAsB,CAAC,UAAU;KAClC;IACD,CAAC,8BAAmB,CAAC,mBAAmB,CAAC,EAAE;QACzC,iCAAsB,CAAC,kBAAkB;QACzC,iCAAsB,CAAC,UAAU;KAClC;IACD,CAAC,8BAAmB,CAAC,UAAU,CAAC,EAAE;QAChC,iCAAsB,CAAC,kBAAkB;QACzC,iCAAsB,CAAC,UAAU;KAClC;CACF,CAAC;AAEF,SAAgB,eAAe,CAC7B,YAAoC;IAEpC,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;IAChC,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5E,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mCAAqB,CAAC,OAAO;YACnC,IAAI,EAAE,yBAAyB;YAC/B,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,4BAA4B,MAAM,EAAE;SAC7D,CAAC,CAAC;IACL,CAAC;IACD,IACE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,EAChC,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mCAAqB,CAAC,UAAU;YACtC,IAAI,EAAE,wBAAwB;YAC9B,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,mDAAmD;SAC7D,CAAC,CAAC;IACL,CAAC;IACD,IACE,IAAI,CAAC,OAAO,KAAK,8BAAmB,CAAC,mBAAmB;QACxD,IAAI,CAAC,OAAO,CAAC,SAAS,KAAK,0BAAe,CAAC,MAAM,EACjD,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mCAAqB,CAAC,OAAO;YACnC,IAAI,EAAE,4BAA4B;YAClC,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,gEAAgE;SAC1E,CAAC,CAAC;IACL,CAAC;IACD,IACE,IAAI,CAAC,OAAO,KAAK,8BAAmB,CAAC,UAAU;QAC/C,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS;QAChC,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,mCAAwB,CAAC,QAAQ,EACxD,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mCAAqB,CAAC,OAAO;YACnC,IAAI,EAAE,8BAA8B;YACpC,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,yDAAyD;SACnE,CAAC,CAAC;IACL,CAAC;IACD,IACE,IAAI,CAAC,OAAO,KAAK,8BAAmB,CAAC,SAAS;QAC9C,IAAI,CAAC,SAAS,CAAC,WAAW,KAAK,+BAAoB,CAAC,UAAU,EAC9D,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mCAAqB,CAAC,OAAO;YACnC,IAAI,EAAE,8BAA8B;YACpC,IAAI,EAAE,4BAA4B;YAClC,OAAO,EACL,6EAA6E;SAChF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/runtime/installation/validators/secrets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../../../src/runtime/installation/validators/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAyB,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAE/E,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,sBAAsB,GACnC,SAAS,iBAAiB,EAAE,CAsC9B"}
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../../../src/runtime/installation/validators/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,sBAAsB,EAC5B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAyB,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAE/E,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,sBAAsB,GACnC,SAAS,iBAAiB,EAAE,CAmD9B"}

package/dist/runtime/installation/validators/secrets.js

@@ -5,7 +5,7 @@ const contract_1 = require("../contract");
 const diagnostics_1 = require("../diagnostics");
 function validateSecretReferences(installation) {
     const issues = [];
-    const declared = new Set(installation.secrets.map((secret) => secret.name));
+    const declared = new Set(installation.spec.secrets.map((secret) => secret.name));
     const referenced = collectReferences(installation);
     for (const reference of referenced) {
         if (!declared.has(reference.ref)) {
@@ -17,52 +17,69 @@ function validateSecretReferences(installation) {
             });
         }
     }
-    for (const secret of installation.secrets) {
-        const locatorRequired = secret.provider !== contract_1.SecretReferenceProvider.Prompt &&
-            secret.provider !== contract_1.SecretReferenceProvider.ManagedLocal;
-        if (locatorRequired && secret.locator === undefined) {
-            issues.push({
-                kind: diagnostics_1.InstallationIssueKind.Unresolved,
-                code: 'SECRET_LOCATOR_REQUIRED',
-                path: `secrets.${secret.name}.locator`,
-                message: `${secret.provider} secret reference requires a locator`,
-            });
-        }
-        if (!locatorRequired && secret.locator !== undefined) {
-            issues.push({
-                kind: diagnostics_1.InstallationIssueKind.Invalid,
-                code: 'SECRET_LOCATOR_NOT_ALLOWED',
-                path: `secrets.${secret.name}.locator`,
-                message: `${secret.provider} secret reference cannot carry a locator`,
-            });
-        }
+    const interactive = installation.spec.secrets.filter((secret) => secret.provider === contract_1.SecretReferenceProvider.Environment ||
+        secret.provider === contract_1.SecretReferenceProvider.File ||
+        secret.provider === contract_1.SecretReferenceProvider.Prompt);
+    if (interactive.length > 0 &&
+        (installation.spec.profile !== contract_1.InstallationProfile.Developer &&
+            installation.spec.profile !== contract_1.InstallationProfile.Starter)) {
+        issues.push({
+            kind: diagnostics_1.InstallationIssueKind.Invalid,
+            code: 'DEVELOPER_SECRET_WORKFLOW_REQUIRED',
+            path: 'spec.secrets',
+            message: 'environment, file, and prompt bindings are restricted to developer or starter setup workflows',
+        });
+    }
+    if (interactive.length > 0 &&
+        installation.spec.lifecycle.environment !==
+            contract_1.LifecycleEnvironment.Development) {
+        issues.push({
+            kind: diagnostics_1.InstallationIssueKind.Invalid,
+            code: 'DEVELOPER_SECRET_WORKFLOW_REQUIRED',
+            path: 'spec.secrets',
+            message: 'environment, file, and prompt bindings require a development lifecycle and the explicit developer-interactive workflow',
+        });
     }
     return issues;
 }
 function collectReferences(installation) {
     const referenced = [];
-    for (const binding of installation.infrastructure) {
+    for (const binding of installation.spec.infrastructure) {
         for (const ref of binding.secretRefs) {
             referenced.push({
                 ref,
-                path: `infrastructure.${binding.component}.secretRefs`,
+                path: `spec.infrastructure.${binding.component}.secretRefs`,
             });
         }
     }
-    for (const domain of installation.domains) {
+    for (const domain of installation.spec.domains) {
         if (domain.tls.secretRef !== undefined) {
             referenced.push({
                 ref: domain.tls.secretRef,
-                path: `domains.${domain.purpose}.${domain.hostname}.tls.secretRef`,
+                path: `spec.domains.${domain.purpose}.${domain.hostname}.tls.secretRef`,
             });
         }
     }
-    if (installation.storage.backup.destinationSecretRef !== undefined) {
+    if (installation.spec.recovery.destinationSecretRef !== undefined) {
+        referenced.push({
+            ref: installation.spec.recovery.destinationSecretRef,
+            path: 'spec.recovery.destinationSecretRef',
+        });
+    }
+    if (installation.spec.observability.exportSecretRef !== undefined) {
         referenced.push({
-            ref: installation.storage.backup.destinationSecretRef,
-            path: 'storage.backup.destinationSecretRef',
+            ref: installation.spec.observability.exportSecretRef,
+            path: 'spec.observability.exportSecretRef',
         });
     }
+    for (const source of installation.spec.sources) {
+        if ('authSecretRef' in source && source.authSecretRef !== undefined) {
+            referenced.push({
+                ref: source.authSecretRef,
+                path: `spec.sources.${source.name}.authSecretRef`,
+            });
+        }
+    }
     return referenced;
 }
 //# sourceMappingURL=secrets.js.map

package/dist/runtime/installation/validators/secrets.js.map

@@ -1 +1 @@
-{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../../../src/runtime/installation/validators/secrets.ts"],"names":[],"mappings":";;AAMA,4DAwCC;AA9CD,0CAGqB;AACrB,gDAA+E;AAE/E,SAAgB,wBAAwB,CACtC,YAAoC;IAEpC,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAEnD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,mCAAqB,CAAC,UAAU;gBACtC,IAAI,EAAE,6BAA6B;gBACnC,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,OAAO,EAAE,iCAAiC,SAAS,CAAC,GAAG,GAAG;aAC3D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;QAC1C,MAAM,eAAe,GACnB,MAAM,CAAC,QAAQ,KAAK,kCAAuB,CAAC,MAAM;YAClD,MAAM,CAAC,QAAQ,KAAK,kCAAuB,CAAC,YAAY,CAAC;QAC3D,IAAI,eAAe,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,mCAAqB,CAAC,UAAU;gBACtC,IAAI,EAAE,yBAAyB;gBAC/B,IAAI,EAAE,WAAW,MAAM,CAAC,IAAI,UAAU;gBACtC,OAAO,EAAE,GAAG,MAAM,CAAC,QAAQ,sCAAsC;aAClE,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,eAAe,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACrD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,mCAAqB,CAAC,OAAO;gBACnC,IAAI,EAAE,4BAA4B;gBAClC,IAAI,EAAE,WAAW,MAAM,CAAC,IAAI,UAAU;gBACtC,OAAO,EAAE,GAAG,MAAM,CAAC,QAAQ,0CAA0C;aACtE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CACxB,YAAoC;IAEpC,MAAM,UAAU,GAAyC,EAAE,CAAC;IAC5D,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,cAAc,EAAE,CAAC;QAClD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACrC,UAAU,CAAC,IAAI,CAAC;gBACd,GAAG;gBACH,IAAI,EAAE,kBAAkB,OAAO,CAAC,SAAS,aAAa;aACvD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACvC,UAAU,CAAC,IAAI,CAAC;gBACd,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS;gBACzB,IAAI,EAAE,WAAW,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,gBAAgB;aACnE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QACnE,UAAU,CAAC,IAAI,CAAC;YACd,GAAG,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB;YACrD,IAAI,EAAE,qCAAqC;SAC5C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../../../src/runtime/installation/validators/secrets.ts"],"names":[],"mappings":";;AAQA,4DAqDC;AA7DD,0CAKqB;AACrB,gDAA+E;AAE/E,SAAgB,wBAAwB,CACtC,YAAoC;IAEpC,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CACvD,CAAC;IACF,MAAM,UAAU,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAEnD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,mCAAqB,CAAC,UAAU;gBACtC,IAAI,EAAE,6BAA6B;gBACnC,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,OAAO,EAAE,iCAAiC,SAAS,CAAC,GAAG,GAAG;aAC3D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAClD,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,QAAQ,KAAK,kCAAuB,CAAC,WAAW;QACvD,MAAM,CAAC,QAAQ,KAAK,kCAAuB,CAAC,IAAI;QAChD,MAAM,CAAC,QAAQ,KAAK,kCAAuB,CAAC,MAAM,CACrD,CAAC;IACF,IACE,WAAW,CAAC,MAAM,GAAG,CAAC;QACtB,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,KAAK,8BAAmB,CAAC,SAAS;YAC1D,YAAY,CAAC,IAAI,CAAC,OAAO,KAAK,8BAAmB,CAAC,OAAO,CAAC,EAC5D,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mCAAqB,CAAC,OAAO;YACnC,IAAI,EAAE,oCAAoC;YAC1C,IAAI,EAAE,cAAc;YACpB,OAAO,EACL,+FAA+F;SAClG,CAAC,CAAC;IACL,CAAC;IACD,IACE,WAAW,CAAC,MAAM,GAAG,CAAC;QACtB,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW;YACrC,+BAAoB,CAAC,WAAW,EAClC,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mCAAqB,CAAC,OAAO;YACnC,IAAI,EAAE,oCAAoC;YAC1C,IAAI,EAAE,cAAc;YACpB,OAAO,EACL,wHAAwH;SAC3H,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CACxB,YAAoC;IAEpC,MAAM,UAAU,GAAyC,EAAE,CAAC;IAC5D,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QACvD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACrC,UAAU,CAAC,IAAI,CAAC;gBACd,GAAG;gBACH,IAAI,EAAE,uBAAuB,OAAO,CAAC,SAAS,aAAa;aAC5D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/C,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACvC,UAAU,CAAC,IAAI,CAAC;gBACd,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS;gBACzB,IAAI,EAAE,gBAAgB,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,gBAAgB;aACxE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QAClE,UAAU,CAAC,IAAI,CAAC;YACd,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB;YACpD,IAAI,EAAE,oCAAoC;SAC3C,CAAC,CAAC;IACL,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QAClE,UAAU,CAAC,IAAI,CAAC;YACd,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,eAAe;YACpD,IAAI,EAAE,oCAAoC;SAC3C,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/C,IAAI,eAAe,IAAI,MAAM,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACpE,UAAU,CAAC,IAAI,CAAC;gBACd,GAAG,EAAE,MAAM,CAAC,aAAa;gBACzB,IAAI,EAAE,gBAAgB,MAAM,CAAC,IAAI,gBAAgB;aAClD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/runtime/launch.d.ts

@@ -3,19 +3,28 @@ import { resolveInfraPlan } from './infra/infra-plan';
 import { type RosterEntry, type RosterInclude, type RosterSelection } from './roster';
 import { type BringUpResult, type LifecycleEvent } from './supervisor';
 import { deriveWaves } from './waves';
+import type { HelmReleaseRendering } from './installation/helm-release';
 export interface LaunchOptions {
     readonly config: XemaConfig;
     readonly includeWeb: boolean;
     readonly installationIdentity?: string;
+    readonly installationId?: string;
     readonly lockPathOverride?: string | undefined;
     readonly bootGraphPathOverride?: string | undefined;
     readonly onEvent?: (event: LifecycleEvent) => void;
     readonly log?: (line: string) => void;
+    readonly planHash?: string;
     readonly offline?: boolean;
     readonly includeBiomes?: readonly string[];
+    readonly helmRelease?: HelmReleaseRendering;
+    readonly allowEmulatedPlatform?: boolean;
 }
 export interface LaunchHandle {
     readonly result: BringUpResult;
+    readonly plan: LaunchPlan;
+    readonly installationId: string;
+    readonly planHash: string;
+    readonly executionId: string;
     readonly roster: readonly RosterEntry[];
     shutdown(): Promise<void>;
 }
@@ -33,6 +42,7 @@ export interface LaunchPlan {
     readonly skippedOptionalBiomes: readonly string[];
     readonly infraWarnings: readonly string[];
     readonly unresolvedSources: readonly string[];
+    readonly helmNamespace?: string;
 }
 export declare function resolveLaunchPlan(opts: LaunchOptions): LaunchPlan;
 export declare function unionIncludeServices(include: RosterInclude, services: readonly string[]): RosterInclude;

package/dist/runtime/launch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"launch.d.ts","sourceRoot":"","sources":["../../src/runtime/launch.ts"],"names":[],"mappings":"AAUA,OAAO,EAGL,SAAS,EACT,KAAK,UAAU,EAChB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAStD,OAAO,EAOL,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,eAAe,EACrB,MAAM,UAAU,CAAC;AAiBlB,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAGL,WAAW,EACZ,MAAM,SAAS,CAAC;AAmBjB,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAE7B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;IACnD,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAQtC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAU3B,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IACxC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAQD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC;IAC/C,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;IAEpD,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAM/C,QAAQ,CAAC,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;IAElD,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAM1C,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/C;AASD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,aAAa,GAAG,UAAU,CAuHjE;AAQD,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,aAAa,CAcf;AAqED,wBAAsB,MAAM,CAC1B,IAAI,EAAE,aAAa,EACnB,WAAW,CAAC,EAAE,UAAU,GACvB,OAAO,CAAC,YAAY,CAAC,CA0BvB;AAoSD,wBAAgB,cAAc,CAC5B,MAAM,EAAE,UAAU,EAClB,UAAU,EAAE,OAAO,GAClB,eAAe,CAQjB;AAcD,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,KAAK,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,MAAM,EAAE,EAC1D,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,aAAa,CAsBf;AAGD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG;IAC7D,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAWA"}
+{"version":3,"file":"launch.d.ts","sourceRoot":"","sources":["../../src/runtime/launch.ts"],"names":[],"mappings":"AAoBA,OAAO,EAGL,SAAS,EACT,KAAK,UAAU,EAChB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAYtD,OAAO,EAOL,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,eAAe,EACrB,MAAM,UAAU,CAAC;AA2BlB,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAGL,WAAW,EACZ,MAAM,SAAS,CAAC;AAKjB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAexE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAE7B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAEvC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;IACnD,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAEtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAQ3B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAU3B,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAQ3C,QAAQ,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC;IAO5C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;CAC1C;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAE/B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IACxC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAQD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC;IAC/C,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;IAEpD,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAM/C,QAAQ,CAAC,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;IAElD,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAM1C,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAM9C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AASD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,aAAa,GAAG,UAAU,CAiIjE;AAQD,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,aAAa,CAcf;AAqED,wBAAsB,MAAM,CAC1B,IAAI,EAAE,aAAa,EACnB,WAAW,CAAC,EAAE,UAAU,GACvB,OAAO,CAAC,YAAY,CAAC,CA0BvB;AAwaD,wBAAgB,cAAc,CAC5B,MAAM,EAAE,UAAU,EAClB,UAAU,EAAE,OAAO,GAClB,eAAe,CAQjB;AAcD,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,KAAK,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,MAAM,EAAE,EAC1D,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,aAAa,CAsBf;AAGD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG;IAC7D,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAWA"}