@xemahq/xema 0.15.4 → 0.15.6

package/dist/appliance-owner.d.ts

@@ -0,0 +1,18 @@
+import { type PlatformServiceTier } from '@xemahq/kernel-contracts/distribution';
+export declare enum ApplianceOwnedDecision {
+    RealmRender = "realm-render",
+    LicenseRegistryHosts = "license-registry-hosts",
+    LicenseRegistryUsername = "license-registry-username",
+    PlatformTierOrder = "platform-tier-order",
+    ImageCoordinates = "image-coordinates"
+}
+export declare class ApplianceOwnerQueryError extends Error {
+    readonly usage: boolean;
+    constructor(message: string, usage?: boolean);
+}
+export interface ApplianceOwnerQueryIo {
+    readonly readStdin: () => string;
+}
+export declare function answerApplianceOwnerQuery(argv: readonly string[], io: ApplianceOwnerQueryIo): string;
+export declare function platformTierOrder(): PlatformServiceTier[];
+//# sourceMappingURL=appliance-owner.d.ts.map

package/dist/appliance-owner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appliance-owner.d.ts","sourceRoot":"","sources":["../src/appliance-owner.ts"],"names":[],"mappings":"AAmCA,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,uCAAuC,CAAC;AAe/C,oBAAY,sBAAsB;IAEhC,WAAW,iBAAiB;IAE5B,oBAAoB,2BAA2B;IAE/C,uBAAuB,8BAA8B;IAErD,iBAAiB,wBAAwB;IAEzC,gBAAgB,sBAAsB;CACvC;AAQD,qBAAa,wBAAyB,SAAQ,KAAK;IAG/C,QAAQ,CAAC,KAAK,EAAE,OAAO;gBADvB,OAAO,EAAE,MAAM,EACN,KAAK,GAAE,OAAe;CAKlC;AAaD,MAAM,WAAW,qBAAqB;IAEpC,QAAQ,CAAC,SAAS,EAAE,MAAM,MAAM,CAAC;CAClC;AAGD,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,qBAAqB,GACxB,MAAM,CA8BR;AAYD,wBAAgB,iBAAiB,IAAI,mBAAmB,EAAE,CAIzD"}

package/dist/appliance-owner.js

@@ -0,0 +1,122 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApplianceOwnerQueryError = exports.ApplianceOwnedDecision = void 0;
+exports.answerApplianceOwnerQuery = answerApplianceOwnerQuery;
+exports.platformTierOrder = platformTierOrder;
+const distribution_1 = require("@xemahq/kernel-contracts/distribution");
+const keycloak_realm_1 = require("./runtime/infra/keycloak-realm");
+const registry_credential_1 = require("./runtime/license/registry-credential");
+const lock_loader_1 = require("./runtime/lock-loader");
+var ApplianceOwnedDecision;
+(function (ApplianceOwnedDecision) {
+    ApplianceOwnedDecision["RealmRender"] = "realm-render";
+    ApplianceOwnedDecision["LicenseRegistryHosts"] = "license-registry-hosts";
+    ApplianceOwnedDecision["LicenseRegistryUsername"] = "license-registry-username";
+    ApplianceOwnedDecision["PlatformTierOrder"] = "platform-tier-order";
+    ApplianceOwnedDecision["ImageCoordinates"] = "image-coordinates";
+})(ApplianceOwnedDecision || (exports.ApplianceOwnedDecision = ApplianceOwnedDecision = {}));
+class ApplianceOwnerQueryError extends Error {
+    usage;
+    constructor(message, usage = false) {
+        super(message);
+        this.usage = usage;
+        this.name = 'ApplianceOwnerQueryError';
+    }
+}
+exports.ApplianceOwnerQueryError = ApplianceOwnerQueryError;
+const EXPLICIT_LOCK_EDITION = '<--images-lock>';
+function answerApplianceOwnerQuery(argv, io) {
+    const [decision, ...rest] = argv;
+    if (decision === undefined) {
+        throw new ApplianceOwnerQueryError(`no decision requested. One of: ${Object.values(ApplianceOwnedDecision).join(', ')}.`, true);
+    }
+    switch (decision) {
+        case ApplianceOwnedDecision.RealmRender:
+            expectNoFlags(decision, rest);
+            return (0, keycloak_realm_1.renderRealm)((0, keycloak_realm_1.readRealmTemplate)(), parseRealmValues(io.readStdin()));
+        case ApplianceOwnedDecision.LicenseRegistryHosts:
+            expectNoFlags(decision, rest);
+            return lines([...registry_credential_1.LICENSE_REGISTRY_HOSTS]);
+        case ApplianceOwnedDecision.LicenseRegistryUsername:
+            expectNoFlags(decision, rest);
+            return `${registry_credential_1.LICENSE_REGISTRY_USERNAME}\n`;
+        case ApplianceOwnedDecision.PlatformTierOrder:
+            expectNoFlags(decision, rest);
+            return lines(platformTierOrder());
+        case ApplianceOwnedDecision.ImageCoordinates:
+            return lines(imageCoordinates(requireFlag(decision, rest, '--images-lock')));
+        default:
+            throw new ApplianceOwnerQueryError(`unknown decision "${decision}". One of: ` +
+                `${Object.values(ApplianceOwnedDecision).join(', ')}.`, true);
+    }
+}
+function platformTierOrder() {
+    return Object.keys(distribution_1.PLATFORM_SERVICE_TIER_RANK).sort((a, b) => distribution_1.PLATFORM_SERVICE_TIER_RANK[a] - distribution_1.PLATFORM_SERVICE_TIER_RANK[b]);
+}
+function parseRealmValues(stdin) {
+    if (stdin.trim().length === 0) {
+        throw new ApplianceOwnerQueryError(`${ApplianceOwnedDecision.RealmRender} reads its values as a JSON object on stdin ` +
+            '(realm, adminUsername, adminPassword, clientSecret, browserOrigins[]), and stdin ' +
+            'was empty.', true);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(stdin);
+    }
+    catch (err) {
+        throw new ApplianceOwnerQueryError(`the realm render values on stdin are not JSON: ${err instanceof Error ? err.message : String(err)}`, true);
+    }
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+        throw new ApplianceOwnerQueryError('the realm render values on stdin must be a JSON object.', true);
+    }
+    const doc = parsed;
+    const origins = doc.browserOrigins;
+    if (!Array.isArray(origins) ||
+        origins.length === 0 ||
+        origins.some((entry) => typeof entry !== 'string')) {
+        throw new ApplianceOwnerQueryError('"browserOrigins" must be a non-empty array of origin strings. A realm rendered ' +
+            'without one imports with an empty redirectUris on its browser client, so every ' +
+            'login is refused with invalid_redirect_uri.', true);
+    }
+    return {
+        [keycloak_realm_1.RealmPlaceholder.Realm]: requireString(doc.realm, 'realm'),
+        [keycloak_realm_1.RealmPlaceholder.AdminUsername]: requireString(doc.adminUsername, 'adminUsername'),
+        [keycloak_realm_1.RealmPlaceholder.AdminPassword]: requireString(doc.adminPassword, 'adminPassword'),
+        [keycloak_realm_1.RealmPlaceholder.ClientSecret]: requireString(doc.clientSecret, 'clientSecret'),
+        [keycloak_realm_1.RealmPlaceholder.BrowserOrigin]: origins,
+    };
+}
+function requireString(value, field) {
+    if (typeof value !== 'string' || value.length === 0) {
+        throw new ApplianceOwnerQueryError(`the realm render values on stdin declare no non-empty "${field}".`, true);
+    }
+    return value;
+}
+function imageCoordinates(lockPath) {
+    const loaded = (0, lock_loader_1.loadImageLock)({ edition: EXPLICIT_LOCK_EDITION, explicit: lockPath });
+    if (loaded.resolution.source !== 'flag') {
+        throw new ApplianceOwnerQueryError(`--images-lock ${lockPath} does not exist, so the image plane was resolved from ` +
+            `${loaded.resolution.path} (${loaded.resolution.source}) instead. That is a ` +
+            'DIFFERENT distribution\'s images; refusing to answer with it.');
+    }
+    const out = [];
+    for (const [service, entry] of loaded.imagesByService) {
+        out.push(`${service}\t${entry.imageRef}\t${entry.contentHash}`);
+    }
+    return out.sort();
+}
+function lines(values) {
+    return values.map((value) => `${value}\n`).join('');
+}
+function expectNoFlags(decision, rest) {
+    if (rest.length > 0) {
+        throw new ApplianceOwnerQueryError(`${decision} takes no arguments (got ${rest.join(' ')}).`, true);
+    }
+}
+function requireFlag(decision, rest, flag) {
+    if (rest.length !== 2 || rest[0] !== flag) {
+        throw new ApplianceOwnerQueryError(`${decision} requires exactly \`${flag} <path>\` (got ${rest.length === 0 ? 'nothing' : rest.join(' ')}).`, true);
+    }
+    return rest[1];
+}
+//# sourceMappingURL=appliance-owner.js.map

package/dist/appliance-owner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appliance-owner.js","sourceRoot":"","sources":["../src/appliance-owner.ts"],"names":[],"mappings":";;;AAmGA,8DAiCC;AAYD,8CAIC;AAjHD,wEAG+C;AAE/C,mEAKwC;AACxC,+EAG+C;AAC/C,uDAAsD;AAGtD,IAAY,sBAWX;AAXD,WAAY,sBAAsB;IAEhC,sDAA4B,CAAA;IAE5B,yEAA+C,CAAA;IAE/C,+EAAqD,CAAA;IAErD,mEAAyC,CAAA;IAEzC,gEAAsC,CAAA;AACxC,CAAC,EAXW,sBAAsB,sCAAtB,sBAAsB,QAWjC;AAQD,MAAa,wBAAyB,SAAQ,KAAK;IAGtC;IAFX,YACE,OAAe,EACN,QAAiB,KAAK;QAE/B,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,UAAK,GAAL,KAAK,CAAiB;QAG/B,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AARD,4DAQC;AAWD,MAAM,qBAAqB,GAAG,iBAAiB,CAAC;AAQhD,SAAgB,yBAAyB,CACvC,IAAuB,EACvB,EAAyB;IAEzB,MAAM,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACjC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,wBAAwB,CAChC,kCAAkC,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EACrF,IAAI,CACL,CAAC;IACJ,CAAC;IACD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,sBAAsB,CAAC,WAAW;YACrC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC9B,OAAO,IAAA,4BAAW,EAAC,IAAA,kCAAiB,GAAE,EAAE,gBAAgB,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAC5E,KAAK,sBAAsB,CAAC,oBAAoB;YAC9C,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC9B,OAAO,KAAK,CAAC,CAAC,GAAG,4CAAsB,CAAC,CAAC,CAAC;QAC5C,KAAK,sBAAsB,CAAC,uBAAuB;YACjD,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC9B,OAAO,GAAG,+CAAyB,IAAI,CAAC;QAC1C,KAAK,sBAAsB,CAAC,iBAAiB;YAC3C,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC9B,OAAO,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACpC,KAAK,sBAAsB,CAAC,gBAAgB;YAC1C,OAAO,KAAK,CAAC,gBAAgB,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;QAC/E;YACE,MAAM,IAAI,wBAAwB,CAChC,qBAAqB,QAAQ,aAAa;gBACxC,GAAG,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EACxD,IAAI,CACL,CAAC;IACN,CAAC;AACH,CAAC;AAYD,SAAgB,iBAAiB;IAC/B,OAAQ,MAAM,CAAC,IAAI,CAAC,yCAA0B,CAA2B,CAAC,IAAI,CAC5E,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,yCAA0B,CAAC,CAAC,CAAC,GAAG,yCAA0B,CAAC,CAAC,CAAC,CACxE,CAAC;AACJ,CAAC;AAwBD,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,wBAAwB,CAChC,GAAG,sBAAsB,CAAC,WAAW,8CAA8C;YACjF,mFAAmF;YACnF,YAAY,EACd,IAAI,CACL,CAAC;IACJ,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,wBAAwB,CAChC,kDACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,EACF,IAAI,CACL,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,wBAAwB,CAChC,yDAAyD,EACzD,IAAI,CACL,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAA6B,CAAC;IAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,cAAc,CAAC;IACnC,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QACvB,OAAO,CAAC,MAAM,KAAK,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAClD,CAAC;QACD,MAAM,IAAI,wBAAwB,CAChC,iFAAiF;YAC/E,iFAAiF;YACjF,6CAA6C,EAC/C,IAAI,CACL,CAAC;IACJ,CAAC;IACD,OAAO;QACL,CAAC,iCAAgB,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC;QAC3D,CAAC,iCAAgB,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,aAAa,EAAE,eAAe,CAAC;QACnF,CAAC,iCAAgB,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,aAAa,EAAE,eAAe,CAAC;QACnF,CAAC,iCAAgB,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,YAAY,EAAE,cAAc,CAAC;QAChF,CAAC,iCAAgB,CAAC,aAAa,CAAC,EAAE,OAA4B;KAC/D,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,wBAAwB,CAChC,0DAA0D,KAAK,IAAI,EACnE,IAAI,CACL,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAUD,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,MAAM,GAAG,IAAA,2BAAa,EAAC,EAAE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrF,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACxC,MAAM,IAAI,wBAAwB,CAChC,iBAAiB,QAAQ,wDAAwD;YAC/E,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,KAAK,MAAM,CAAC,UAAU,CAAC,MAAM,uBAAuB;YAC7E,+DAA+D,CAClE,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QACtD,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,KAAK,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,KAAK,CAAC,MAAyB;IACtC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,IAAuB;IAC9D,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,wBAAwB,CAChC,GAAG,QAAQ,4BAA4B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EACzD,IAAI,CACL,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,QAAgB,EAChB,IAAuB,EACvB,IAAY;IAEZ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1C,MAAM,IAAI,wBAAwB,CAChC,GAAG,QAAQ,uBAAuB,IAAI,kBACpC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC/C,IAAI,EACJ,IAAI,CACL,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,CAAW,CAAC;AAC3B,CAAC"}