@xemahq/xema 0.19.0 → 0.21.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/assets/appliance-base/distribution.lock.json +255 -72
- package/dist/assets/appliance-base/images.lock.json +144 -144
- package/dist/assets/appliance-lean/distribution.lock.json +219 -54
- package/dist/assets/appliance-lean/images.lock.json +139 -139
- package/dist/assets/boot-graph.json +30 -5
- package/dist/assets/cloud/distribution.lock.json +256 -73
- package/dist/assets/cloud/images.lock.json +144 -144
- package/dist/assets/core/distribution.lock.json +241 -58
- package/dist/assets/core/images.lock.json +137 -137
- package/dist/assets/distribution-assets.manifest.json +30 -30
- package/dist/assets/minimal/distribution.lock.json +219 -54
- package/dist/assets/minimal/images.lock.json +124 -124
- package/dist/assets/oss/distribution.lock.json +255 -72
- package/dist/assets/oss/images.lock.json +144 -144
- package/dist/assets/starter/distribution.lock.json +243 -60
- package/dist/assets/starter/images.lock.json +140 -140
- package/dist/dev/env-defaults.js +0 -1
- package/dist/dev/env-defaults.js.map +1 -1
- package/dist/runtime/biome-scaffold-manifest.d.ts.map +1 -1
- package/dist/runtime/biome-scaffold-manifest.js +5 -2
- package/dist/runtime/biome-scaffold-manifest.js.map +1 -1
- package/dist/runtime/env-seeder.d.ts +1 -0
- package/dist/runtime/env-seeder.d.ts.map +1 -1
- package/dist/runtime/env-seeder.js +5 -1
- package/dist/runtime/env-seeder.js.map +1 -1
- package/dist/runtime/infra/infra-catalog.d.ts +0 -1
- package/dist/runtime/infra/infra-catalog.d.ts.map +1 -1
- package/dist/runtime/infra/infra-catalog.js +2 -3
- package/dist/runtime/infra/infra-catalog.js.map +1 -1
- package/dist/runtime/infra/infra-environment.d.ts +1 -0
- package/dist/runtime/infra/infra-environment.d.ts.map +1 -1
- package/dist/runtime/infra/infra-environment.js +2 -1
- package/dist/runtime/infra/infra-environment.js.map +1 -1
- package/dist/runtime/infra/infra-runner.d.ts.map +1 -1
- package/dist/runtime/infra/infra-runner.js +1 -0
- package/dist/runtime/infra/infra-runner.js.map +1 -1
- package/dist/runtime/installation/deployment-root.d.ts.map +1 -1
- package/dist/runtime/installation/deployment-root.js +6 -6
- package/dist/runtime/installation/deployment-root.js.map +1 -1
- package/dist/runtime/lock-loader.d.ts +2 -2
- package/dist/runtime/lock-loader.d.ts.map +1 -1
- package/dist/runtime/lock-loader.js +1 -1
- package/dist/runtime/lock-loader.js.map +1 -1
- package/dist/runtime/runner/chart-stage-record.d.ts +17 -0
- package/dist/runtime/runner/chart-stage-record.d.ts.map +1 -0
- package/dist/runtime/runner/chart-stage-record.js +70 -0
- package/dist/runtime/runner/chart-stage-record.js.map +1 -0
- package/dist/runtime/runner/chart-trust.d.ts +5 -0
- package/dist/runtime/runner/chart-trust.d.ts.map +1 -1
- package/dist/runtime/runner/chart-trust.js +94 -3
- package/dist/runtime/runner/chart-trust.js.map +1 -1
- package/dist/runtime/supervisor.d.ts.map +1 -1
- package/dist/runtime/supervisor.js +1 -0
- package/dist/runtime/supervisor.js.map +1 -1
- package/dist/runtime/workflow-namespace.d.ts +4 -0
- package/dist/runtime/workflow-namespace.d.ts.map +1 -0
- package/dist/runtime/workflow-namespace.js +12 -0
- package/dist/runtime/workflow-namespace.js.map +1 -0
- package/package.json +7 -7
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"lock-loader.js","sourceRoot":"","sources":["../../src/runtime/lock-loader.ts"],"names":[],"mappings":";;
|
|
1
|
+
{"version":3,"file":"lock-loader.js","sourceRoot":"","sources":["../../src/runtime/lock-loader.ts"],"names":[],"mappings":";;AAmCA,oDASC;AAoDD,sCAwBC;AAxHD,qCAAuC;AAEvC,iEAOwC;AAExC,mCAAqG;AAwBrG,SAAgB,oBAAoB,CAAC,IAAqB;IACxD,MAAM,UAAU,GAAG,IAAA,mCAA2B,EAAC;QAC7C,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,IAAA,8CAA+B,EAAC,GAAG,CAAC,CAAC;IAClD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC9B,CAAC;AAoDD,SAAgB,aAAa,CAAC,IAAqB;IACjD,MAAM,UAAU,GAAG,IAAA,4BAAoB,EAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAG,IAAA,6BAAc,EAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAEvD,MAAM,aAAa,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC7D,MAAM,eAAe,GAAG,IAAI,GAAG,EAAsB,CAAC;IACtD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,IAAI,KAAK,sCAAuB,CAAC,OAAO,EAAE,CAAC;YACrD,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;QACnD,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QACtF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,8BAA8B,UAAU,CAAC,IAAI,qBAAqB;gBAChE,IAAI,OAAO,CAAC,eAAe,eAAe,OAAO,CAAC,WAAW,WAAW;gBACxE,IAAI,OAAO,CAAC,SAAS,+CAA+C,CACvE,CAAC;QACJ,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,UAAU,CAAC,IAA6B,EAAE,EAAU;IAC3D,OAAO,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,YAAY,CAAC,OAA4B;IAChD,OAAO;QACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,aAAa,OAAO,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC"}
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
export declare const CHART_STAGE_RECORD_FILE = ".xema-chart-stage.sha256";
|
|
2
|
+
export interface ChartStageRecord {
|
|
3
|
+
readonly path: string;
|
|
4
|
+
readonly digests: ReadonlyMap<string, string>;
|
|
5
|
+
}
|
|
6
|
+
export declare enum ChartStageVerdict {
|
|
7
|
+
NoRecord = "no-record",
|
|
8
|
+
Admitted = "admitted",
|
|
9
|
+
NotRecorded = "not-recorded",
|
|
10
|
+
DigestMismatch = "digest-mismatch",
|
|
11
|
+
NotAnArchive = "not-an-archive"
|
|
12
|
+
}
|
|
13
|
+
export declare function loadChartStageRecord(chartsDir: string): ChartStageRecord | null;
|
|
14
|
+
export declare function fileDigest(path: string): string;
|
|
15
|
+
export declare function chartStageVerdict(chartRef: string, isArchive: boolean, record: ChartStageRecord | null): ChartStageVerdict;
|
|
16
|
+
export declare function chartsDirOf(chartRef: string): string;
|
|
17
|
+
//# sourceMappingURL=chart-stage-record.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"chart-stage-record.d.ts","sourceRoot":"","sources":["../../../src/runtime/runner/chart-stage-record.ts"],"names":[],"mappings":"AAiDA,eAAO,MAAM,uBAAuB,6BAA6B,CAAC;AAElE,MAAM,WAAW,gBAAgB;IAE/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/C;AAGD,oBAAY,iBAAiB;IAE3B,QAAQ,cAAc;IAEtB,QAAQ,aAAa;IAErB,WAAW,iBAAiB;IAE5B,cAAc,oBAAoB;IAElC,YAAY,mBAAmB;CAChC;AAUD,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAgC/E;AAGD,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/C;AAUD,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,OAAO,EAClB,MAAM,EAAE,gBAAgB,GAAG,IAAI,GAC9B,iBAAiB,CAcnB;AAGD,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEpD"}
|
|
@@ -0,0 +1,70 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.ChartStageVerdict = exports.CHART_STAGE_RECORD_FILE = void 0;
|
|
4
|
+
exports.loadChartStageRecord = loadChartStageRecord;
|
|
5
|
+
exports.fileDigest = fileDigest;
|
|
6
|
+
exports.chartStageVerdict = chartStageVerdict;
|
|
7
|
+
exports.chartsDirOf = chartsDirOf;
|
|
8
|
+
const node_crypto_1 = require("node:crypto");
|
|
9
|
+
const node_fs_1 = require("node:fs");
|
|
10
|
+
const node_path_1 = require("node:path");
|
|
11
|
+
const chart_set_lock_1 = require("./chart-set-lock");
|
|
12
|
+
exports.CHART_STAGE_RECORD_FILE = '.xema-chart-stage.sha256';
|
|
13
|
+
var ChartStageVerdict;
|
|
14
|
+
(function (ChartStageVerdict) {
|
|
15
|
+
ChartStageVerdict["NoRecord"] = "no-record";
|
|
16
|
+
ChartStageVerdict["Admitted"] = "admitted";
|
|
17
|
+
ChartStageVerdict["NotRecorded"] = "not-recorded";
|
|
18
|
+
ChartStageVerdict["DigestMismatch"] = "digest-mismatch";
|
|
19
|
+
ChartStageVerdict["NotAnArchive"] = "not-an-archive";
|
|
20
|
+
})(ChartStageVerdict || (exports.ChartStageVerdict = ChartStageVerdict = {}));
|
|
21
|
+
function loadChartStageRecord(chartsDir) {
|
|
22
|
+
const path = (0, node_path_1.join)(chartsDir, exports.CHART_STAGE_RECORD_FILE);
|
|
23
|
+
let raw;
|
|
24
|
+
try {
|
|
25
|
+
raw = (0, node_fs_1.readFileSync)(path, 'utf8');
|
|
26
|
+
}
|
|
27
|
+
catch (error) {
|
|
28
|
+
if ((0, chart_set_lock_1.isMissingPath)(error)) {
|
|
29
|
+
return null;
|
|
30
|
+
}
|
|
31
|
+
throw new Error(`Cannot read the chart stage record ${path}: ${String(error)}`);
|
|
32
|
+
}
|
|
33
|
+
const digests = new Map();
|
|
34
|
+
for (const line of raw.split('\n')) {
|
|
35
|
+
const trimmed = line.trim();
|
|
36
|
+
if (trimmed.length === 0) {
|
|
37
|
+
continue;
|
|
38
|
+
}
|
|
39
|
+
const match = /^([0-9a-f]{64}) [ *](.+)$/.exec(trimmed);
|
|
40
|
+
if (match === null) {
|
|
41
|
+
throw new Error(`The chart stage record ${path} has a line that is not sha256sum output: ` +
|
|
42
|
+
`'${trimmed}'. Refusing to read a provenance record this cannot parse — ` +
|
|
43
|
+
'a record half-understood is worse than none.');
|
|
44
|
+
}
|
|
45
|
+
digests.set((0, node_path_1.basename)(match[2]), match[1]);
|
|
46
|
+
}
|
|
47
|
+
return { path, digests };
|
|
48
|
+
}
|
|
49
|
+
function fileDigest(path) {
|
|
50
|
+
return (0, node_crypto_1.createHash)('sha256').update((0, node_fs_1.readFileSync)(path)).digest('hex');
|
|
51
|
+
}
|
|
52
|
+
function chartStageVerdict(chartRef, isArchive, record) {
|
|
53
|
+
if (record === null) {
|
|
54
|
+
return ChartStageVerdict.NoRecord;
|
|
55
|
+
}
|
|
56
|
+
if (!isArchive) {
|
|
57
|
+
return ChartStageVerdict.NotAnArchive;
|
|
58
|
+
}
|
|
59
|
+
const recorded = record.digests.get((0, node_path_1.basename)(chartRef));
|
|
60
|
+
if (recorded === undefined) {
|
|
61
|
+
return ChartStageVerdict.NotRecorded;
|
|
62
|
+
}
|
|
63
|
+
return fileDigest(chartRef) === recorded
|
|
64
|
+
? ChartStageVerdict.Admitted
|
|
65
|
+
: ChartStageVerdict.DigestMismatch;
|
|
66
|
+
}
|
|
67
|
+
function chartsDirOf(chartRef) {
|
|
68
|
+
return (0, node_path_1.dirname)(chartRef);
|
|
69
|
+
}
|
|
70
|
+
//# sourceMappingURL=chart-stage-record.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"chart-stage-record.js","sourceRoot":"","sources":["../../../src/runtime/runner/chart-stage-record.ts"],"names":[],"mappings":";;;AAgFA,oDAgCC;AAGD,gCAEC;AAUD,8CAkBC;AAGD,kCAEC;AAtJD,6CAAyC;AACzC,qCAAuC;AACvC,yCAAoD;AAEpD,qDAAiD;AA6CpC,QAAA,uBAAuB,GAAG,0BAA0B,CAAC;AAUlE,IAAY,iBAWX;AAXD,WAAY,iBAAiB;IAE3B,2CAAsB,CAAA;IAEtB,0CAAqB,CAAA;IAErB,iDAA4B,CAAA;IAE5B,uDAAkC,CAAA;IAElC,oDAA+B,CAAA;AACjC,CAAC,EAXW,iBAAiB,iCAAjB,iBAAiB,QAW5B;AAUD,SAAgB,oBAAoB,CAAC,SAAiB;IACpD,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,+BAAuB,CAAC,CAAC;IACtD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,IAAA,8BAAa,EAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,SAAS;QACX,CAAC;QAID,MAAM,KAAK,GAAG,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,0BAA0B,IAAI,4CAA4C;gBACxE,IAAI,OAAO,8DAA8D;gBACzE,8CAA8C,CACjD,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAA,oBAAQ,EAAC,KAAK,CAAC,CAAC,CAAW,CAAC,EAAE,KAAK,CAAC,CAAC,CAAW,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAGD,SAAgB,UAAU,CAAC,IAAY;IACrC,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAA,sBAAY,EAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AAUD,SAAgB,iBAAiB,CAC/B,QAAgB,EAChB,SAAkB,EAClB,MAA+B;IAE/B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,iBAAiB,CAAC,QAAQ,CAAC;IACpC,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,iBAAiB,CAAC,YAAY,CAAC;IACxC,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAA,oBAAQ,EAAC,QAAQ,CAAC,CAAC,CAAC;IACxD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,iBAAiB,CAAC,WAAW,CAAC;IACvC,CAAC;IACD,OAAO,UAAU,CAAC,QAAQ,CAAC,KAAK,QAAQ;QACtC,CAAC,CAAC,iBAAiB,CAAC,QAAQ;QAC5B,CAAC,CAAC,iBAAiB,CAAC,cAAc,CAAC;AACvC,CAAC;AAGD,SAAgB,WAAW,CAAC,QAAgB;IAC1C,OAAO,IAAA,mBAAO,EAAC,QAAQ,CAAC,CAAC;AAC3B,CAAC"}
|
|
@@ -9,6 +9,8 @@ export declare enum ChartTrustMode {
|
|
|
9
9
|
export declare function parseChartTrustMode(raw: string | undefined): ChartTrustMode;
|
|
10
10
|
export declare enum ChartTrustOutcome {
|
|
11
11
|
NoRemoteCharts = "no-remote-charts",
|
|
12
|
+
LocalUnattested = "local-unattested",
|
|
13
|
+
LocalUnrecorded = "local-unrecorded",
|
|
12
14
|
Verified = "verified",
|
|
13
15
|
Insecure = "insecure",
|
|
14
16
|
CosignMissing = "cosign-missing",
|
|
@@ -37,8 +39,11 @@ export declare class ChartTrustVerifier {
|
|
|
37
39
|
readonly mode: ChartTrustMode;
|
|
38
40
|
private readonly cosign;
|
|
39
41
|
private readonly verifiedSubjects;
|
|
42
|
+
private readonly stageRecords;
|
|
43
|
+
private readonly admittedLocalRefs;
|
|
40
44
|
constructor(opts?: ChartTrustVerifierOptions);
|
|
41
45
|
evaluate(charts: readonly ResolvedChart[]): Promise<ChartTrustReport>;
|
|
46
|
+
private evaluateLocalProvenance;
|
|
42
47
|
assertVerified(charts: readonly ResolvedChart[]): Promise<ChartTrustReport>;
|
|
43
48
|
}
|
|
44
49
|
export declare function assertChartTrust(report: ChartTrustReport): void;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"chart-trust.d.ts","sourceRoot":"","sources":["../../../src/runtime/runner/chart-trust.ts"],"names":[],"mappings":"AAEA,OAAO,EAAmB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;
|
|
1
|
+
{"version":3,"file":"chart-trust.d.ts","sourceRoot":"","sources":["../../../src/runtime/runner/chart-trust.ts"],"names":[],"mappings":"AAEA,OAAO,EAAmB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AA8CvE,eAAO,MAAM,eAAe,qBAAqB,CAAC;AAalD,eAAO,MAAM,4BAA4B,kJACwG,CAAC;AAElJ,eAAO,MAAM,wBAAwB,gDACU,CAAC;AAMhD,oBAAY,cAAc;IAExB,MAAM,WAAW;IAOjB,QAAQ,aAAa;CACtB;AAQD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,cAAc,CAe3E;AAGD,oBAAY,iBAAiB;IAQ3B,cAAc,qBAAqB;IAQnC,eAAe,qBAAqB;IAOpC,eAAe,qBAAqB;IAEpC,QAAQ,aAAa;IAErB,QAAQ,aAAa;IAErB,aAAa,mBAAmB;IAEhC,UAAU,eAAe;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IAEpC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAMrC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAEvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAGD,MAAM,WAAW,YAAY;IAE3B,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAE9B,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3C;AAQD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CASnE;AAUD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAclE;AAcD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,CAAC,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CAClC;AAYD,qBAAa,kBAAkB;IAC7B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;IACtC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqB;IAEtD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA8C;IAE3E,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAqB;gBAE3C,IAAI,GAAE,yBAA8B;IAU1C,QAAQ,CACZ,MAAM,EAAE,SAAS,aAAa,EAAE,GAC/B,OAAO,CAAC,gBAAgB,CAAC;IA2I5B,OAAO,CAAC,uBAAuB;IA4EzB,cAAc,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAKlF;AAGD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAI/D;AAYD,qBAAa,gBAAiB,YAAW,YAAY;IACvC,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,SAAW;IAErC,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IAI7B,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI/C,OAAO,CAAC,GAAG;CAOZ"}
|
|
@@ -7,6 +7,7 @@ exports.chartSignatureSubject = chartSignatureSubject;
|
|
|
7
7
|
exports.assertChartTrust = assertChartTrust;
|
|
8
8
|
const node_child_process_1 = require("node:child_process");
|
|
9
9
|
const chart_resolver_1 = require("./chart-resolver");
|
|
10
|
+
const chart_stage_record_1 = require("./chart-stage-record");
|
|
10
11
|
exports.CHART_TRUST_ENV = 'XEMA_CHART_TRUST';
|
|
11
12
|
exports.CHART_SIGNER_IDENTITY_REGEXP = '^https://github\\.com/xema-dev/(xema-deploy|xema-infra-services)/\\.github/workflows/publish-charts\\.yaml@refs/(heads/main|tags/charts-v.+)$';
|
|
12
13
|
exports.CHART_SIGNER_OIDC_ISSUER = 'https://token.actions.githubusercontent.com';
|
|
@@ -30,6 +31,8 @@ function parseChartTrustMode(raw) {
|
|
|
30
31
|
var ChartTrustOutcome;
|
|
31
32
|
(function (ChartTrustOutcome) {
|
|
32
33
|
ChartTrustOutcome["NoRemoteCharts"] = "no-remote-charts";
|
|
34
|
+
ChartTrustOutcome["LocalUnattested"] = "local-unattested";
|
|
35
|
+
ChartTrustOutcome["LocalUnrecorded"] = "local-unrecorded";
|
|
33
36
|
ChartTrustOutcome["Verified"] = "verified";
|
|
34
37
|
ChartTrustOutcome["Insecure"] = "insecure";
|
|
35
38
|
ChartTrustOutcome["CosignMissing"] = "cosign-missing";
|
|
@@ -60,6 +63,8 @@ class ChartTrustVerifier {
|
|
|
60
63
|
mode;
|
|
61
64
|
cosign;
|
|
62
65
|
verifiedSubjects = new Set();
|
|
66
|
+
stageRecords = new Map();
|
|
67
|
+
admittedLocalRefs = new Set();
|
|
63
68
|
constructor(opts = {}) {
|
|
64
69
|
const env = opts.env ?? process.env;
|
|
65
70
|
this.mode = opts.mode ?? parseChartTrustMode(env[exports.CHART_TRUST_ENV]);
|
|
@@ -68,13 +73,36 @@ class ChartTrustVerifier {
|
|
|
68
73
|
async evaluate(charts) {
|
|
69
74
|
const remote = charts.filter((chart) => chart.kind === chart_resolver_1.ChartSourceKind.Oci);
|
|
70
75
|
const subjects = remote.map((chart) => chart.name);
|
|
76
|
+
const localProvenance = this.evaluateLocalProvenance(charts.filter((chart) => chart.kind !== chart_resolver_1.ChartSourceKind.Oci));
|
|
77
|
+
if (localProvenance.unrecorded.length > 0) {
|
|
78
|
+
return {
|
|
79
|
+
mode: this.mode,
|
|
80
|
+
outcome: ChartTrustOutcome.LocalUnrecorded,
|
|
81
|
+
subjects,
|
|
82
|
+
unverified: localProvenance.unrecorded.map((entry) => entry.name),
|
|
83
|
+
message: 'Refusing to install a LOCAL chart the stage record does not cover:\n' +
|
|
84
|
+
localProvenance.unrecorded
|
|
85
|
+
.map((entry) => ` - ${entry.name}: ${entry.reason}`)
|
|
86
|
+
.join('\n') +
|
|
87
|
+
`\nThe record at ${String(localProvenance.recordPath)} is the chart ` +
|
|
88
|
+
'digests `install-bundle.sh` carried out of the air-gap bundle AFTER ' +
|
|
89
|
+
'verifying that bundle against the pinned Sigstore root. A chart it ' +
|
|
90
|
+
'does not name came from somewhere else, and a local chart outranks ' +
|
|
91
|
+
'the signed one the lock names — so it cannot be admitted on the ' +
|
|
92
|
+
'strength of being in the directory. Re-run airgap/install-bundle.sh ' +
|
|
93
|
+
'to restage from a verified bundle, or remove the file.',
|
|
94
|
+
passed: false,
|
|
95
|
+
};
|
|
96
|
+
}
|
|
71
97
|
if (remote.length === 0) {
|
|
72
98
|
return {
|
|
73
99
|
mode: this.mode,
|
|
74
|
-
outcome:
|
|
100
|
+
outcome: localProvenance.attested
|
|
101
|
+
? ChartTrustOutcome.NoRemoteCharts
|
|
102
|
+
: ChartTrustOutcome.LocalUnattested,
|
|
75
103
|
subjects: [],
|
|
76
104
|
unverified: [],
|
|
77
|
-
message:
|
|
105
|
+
message: localProvenance.message,
|
|
78
106
|
passed: true,
|
|
79
107
|
};
|
|
80
108
|
}
|
|
@@ -140,10 +168,73 @@ class ChartTrustVerifier {
|
|
|
140
168
|
outcome: ChartTrustOutcome.Verified,
|
|
141
169
|
subjects: inScope,
|
|
142
170
|
unverified: [],
|
|
143
|
-
message:
|
|
171
|
+
message: localProvenance.message,
|
|
144
172
|
passed: true,
|
|
145
173
|
};
|
|
146
174
|
}
|
|
175
|
+
evaluateLocalProvenance(local) {
|
|
176
|
+
if (local.length === 0) {
|
|
177
|
+
return { attested: true, unrecorded: [], recordPath: null, message: '' };
|
|
178
|
+
}
|
|
179
|
+
const unrecorded = [];
|
|
180
|
+
let recordPath = null;
|
|
181
|
+
let unattested = 0;
|
|
182
|
+
for (const chart of local) {
|
|
183
|
+
if (this.admittedLocalRefs.has(chart.ref)) {
|
|
184
|
+
continue;
|
|
185
|
+
}
|
|
186
|
+
const chartsDir = (0, chart_stage_record_1.chartsDirOf)(chart.ref);
|
|
187
|
+
let record = this.stageRecords.get(chartsDir);
|
|
188
|
+
if (record === undefined) {
|
|
189
|
+
record = (0, chart_stage_record_1.loadChartStageRecord)(chartsDir);
|
|
190
|
+
this.stageRecords.set(chartsDir, record);
|
|
191
|
+
}
|
|
192
|
+
if (record !== null) {
|
|
193
|
+
recordPath = record.path;
|
|
194
|
+
}
|
|
195
|
+
const verdict = (0, chart_stage_record_1.chartStageVerdict)(chart.ref, chart.kind === chart_resolver_1.ChartSourceKind.LocalArchive, record);
|
|
196
|
+
switch (verdict) {
|
|
197
|
+
case chart_stage_record_1.ChartStageVerdict.NoRecord:
|
|
198
|
+
unattested += 1;
|
|
199
|
+
break;
|
|
200
|
+
case chart_stage_record_1.ChartStageVerdict.Admitted:
|
|
201
|
+
this.admittedLocalRefs.add(chart.ref);
|
|
202
|
+
break;
|
|
203
|
+
case chart_stage_record_1.ChartStageVerdict.NotRecorded:
|
|
204
|
+
unrecorded.push({
|
|
205
|
+
name: chart.name,
|
|
206
|
+
reason: `${chart.ref} is not named in the stage record`,
|
|
207
|
+
});
|
|
208
|
+
break;
|
|
209
|
+
case chart_stage_record_1.ChartStageVerdict.DigestMismatch:
|
|
210
|
+
unrecorded.push({
|
|
211
|
+
name: chart.name,
|
|
212
|
+
reason: `${chart.ref} is named in the stage record at DIFFERENT bytes`,
|
|
213
|
+
});
|
|
214
|
+
break;
|
|
215
|
+
case chart_stage_record_1.ChartStageVerdict.NotAnArchive:
|
|
216
|
+
unrecorded.push({
|
|
217
|
+
name: chart.name,
|
|
218
|
+
reason: `${chart.ref} is a chart DIRECTORY, and a record of packaged ` +
|
|
219
|
+
'charts cannot cover one — the bundle stages .tgz only',
|
|
220
|
+
});
|
|
221
|
+
break;
|
|
222
|
+
}
|
|
223
|
+
}
|
|
224
|
+
return {
|
|
225
|
+
attested: unattested === 0,
|
|
226
|
+
unrecorded,
|
|
227
|
+
recordPath,
|
|
228
|
+
message: unattested === 0
|
|
229
|
+
? ''
|
|
230
|
+
: `${String(unattested)} local chart(s) resolved from a charts ` +
|
|
231
|
+
'directory with NO stage record — nothing attests where they came ' +
|
|
232
|
+
'from. That is expected for a checkout or a hand-placed chart and ' +
|
|
233
|
+
'is NOT expected on a box installed from an air-gap bundle, which ' +
|
|
234
|
+
'always writes one. These charts are being installed on the ' +
|
|
235
|
+
'operator’s authority, not the publisher’s.',
|
|
236
|
+
};
|
|
237
|
+
}
|
|
147
238
|
async assertVerified(charts) {
|
|
148
239
|
const report = await this.evaluate(charts);
|
|
149
240
|
assertChartTrust(report);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"chart-trust.js","sourceRoot":"","sources":["../../../src/runtime/runner/chart-trust.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"chart-trust.js","sourceRoot":"","sources":["../../../src/runtime/runner/chart-trust.ts"],"names":[],"mappings":";;;AAyFA,kDAeC;AAoED,4CASC;AAUD,sDAcC;AAkRD,4CAIC;AAneD,2DAA8C;AAE9C,qDAAuE;AACvE,6DAM8B;AAuCjB,QAAA,eAAe,GAAG,kBAAkB,CAAC;AAarC,QAAA,4BAA4B,GACvC,+IAA+I,CAAC;AAErI,QAAA,wBAAwB,GACnC,6CAA6C,CAAC;AAMhD,IAAY,cAUX;AAVD,WAAY,cAAc;IAExB,mCAAiB,CAAA;IAOjB,uCAAqB,CAAA;AACvB,CAAC,EAVW,cAAc,8BAAd,cAAc,QAUzB;AAQD,SAAgB,mBAAmB,CAAC,GAAuB;IACzD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,OAAO,cAAc,CAAC,MAAM,CAAC;IAC/B,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAC7C,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,GAAG,CACjC,CAAC;IACF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,GAAG,uBAAe,KAAK,GAAG,yCAAyC;YACjE,IAAI,cAAc,CAAC,MAAM,6CAA6C;YACtE,2BAA2B,cAAc,CAAC,QAAQ,IAAI,CACzD,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAGD,IAAY,iBAgCX;AAhCD,WAAY,iBAAiB;IAQ3B,wDAAmC,CAAA;IAQnC,yDAAoC,CAAA;IAOpC,yDAAoC,CAAA;IAEpC,0CAAqB,CAAA;IAErB,0CAAqB,CAAA;IAErB,qDAAgC,CAAA;IAEhC,8CAAyB,CAAA;AAC3B,CAAC,EAhCW,iBAAiB,iCAAjB,iBAAiB,QAgC5B;AAiCD,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,OAAO;QACL,QAAQ;QACR,+BAA+B;QAC/B,oCAA4B;QAC5B,2BAA2B;QAC3B,gCAAwB;QACxB,OAAO;KACR,CAAC;AACJ,CAAC;AAUD,SAAgB,qBAAqB,CAAC,KAAoB;IACxD,IAAI,KAAK,CAAC,IAAI,KAAK,gCAAe,CAAC,GAAG,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,UAAU,KAAK,CAAC,IAAI,uBAAuB,KAAK,CAAC,IAAI,wBAAwB;YAC3E,oBAAoB,CACvB,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,UAAU,KAAK,CAAC,IAAI,uDAAuD;YACzE,mDAAmD,CACtD,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;AAClE,CAAC;AA8BD,MAAa,kBAAkB;IACpB,IAAI,CAAiB;IACb,MAAM,CAAe;IACrB,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAErC,YAAY,GAAG,IAAI,GAAG,EAAmC,CAAC;IAE1D,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAEvD,YAAY,OAAkC,EAAE;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,mBAAmB,CAAC,GAAG,CAAC,uBAAe,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;IACtD,CAAC;IAMD,KAAK,CAAC,QAAQ,CACZ,MAAgC;QAEhC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,gCAAe,CAAC,GAAG,CAAC,CAAC;QAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAOnD,MAAM,eAAe,GAAG,IAAI,CAAC,uBAAuB,CAClD,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,gCAAe,CAAC,GAAG,CAAC,CAC7D,CAAC;QACF,IAAI,eAAe,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,iBAAiB,CAAC,eAAe;gBAC1C,QAAQ;gBACR,UAAU,EAAE,eAAe,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;gBACjE,OAAO,EACL,sEAAsE;oBACtE,eAAe,CAAC,UAAU;yBACvB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;yBACpD,IAAI,CAAC,IAAI,CAAC;oBACb,mBAAmB,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,gBAAgB;oBACrE,sEAAsE;oBACtE,qEAAqE;oBACrE,qEAAqE;oBACrE,kEAAkE;oBAClE,sEAAsE;oBACtE,wDAAwD;gBAC1D,MAAM,EAAE,KAAK;aACd,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,eAAe,CAAC,QAAQ;oBAC/B,CAAC,CAAC,iBAAiB,CAAC,cAAc;oBAClC,CAAC,CAAC,iBAAiB,CAAC,eAAe;gBACrC,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,EAAE;gBACd,OAAO,EAAE,eAAe,CAAC,OAAO;gBAChC,MAAM,EAAE,IAAI;aACb,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,QAAQ,EAAE,CAAC;YAC1C,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,iBAAiB,CAAC,QAAQ;gBACnC,QAAQ;gBACR,UAAU,EAAE,EAAE;gBACd,OAAO,EACL,GAAG,uBAAe,IAAI,cAAc,CAAC,QAAQ,8BAA8B;oBAC3E,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,4CAA4C;oBACxE,kEAAkE;oBAClE,cAAc;gBAChB,MAAM,EAAE,IAAI;aACb,CAAC;QACJ,CAAC;QAMD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;YACrC,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,iBAAiB,CAAC,aAAa;gBACxC,QAAQ;gBACR,UAAU,EAAE,EAAE;gBACd,OAAO,EACL,oCAAoC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB;oBAC1E,wEAAwE;oBACxE,yEAAyE;oBACzE,uEAAuE;oBACvE,qEAAqE;oBACrE,mBAAmB,uBAAe,IAAI,cAAc,CAAC,QAAQ,WAAW;oBACxE,gBAAgB;gBAClB,MAAM,EAAE,KAAK;aACd,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtB,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvC,SAAS;YACX,CAAC;YACD,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACnC,SAAS;YACX,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,iBAAiB,CAAC,UAAU;gBACrC,QAAQ,EAAE,OAAO;gBACjB,UAAU;gBACV,OAAO,EACL,qCAAqC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;oBAC3E,0EAA0E;oBAC1E,oEAAoE;oBACpE,8DAA8D;oBAC9D,GAAG,oCAA4B,QAAQ,gCAAwB,GAAG;gBACpE,MAAM,EAAE,KAAK;aACd,CAAC;QACJ,CAAC;QAED,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,iBAAiB,CAAC,QAAQ;YACnC,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,EAAE;YAKd,OAAO,EAAE,eAAe,CAAC,OAAO;YAChC,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;IAYO,uBAAuB,CAC7B,KAA+B;QAE/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC3E,CAAC;QAED,MAAM,UAAU,GAAuC,EAAE,CAAC;QAC1D,IAAI,UAAU,GAAkB,IAAI,CAAC;QACrC,IAAI,UAAU,GAAG,CAAC,CAAC;QAEnB,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1C,SAAS;YACX,CAAC;YACD,MAAM,SAAS,GAAG,IAAA,gCAAW,EAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,GAAG,IAAA,yCAAoB,EAAC,SAAS,CAAC,CAAC;gBACzC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC3C,CAAC;YACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;YAC3B,CAAC;YACD,MAAM,OAAO,GAAG,IAAA,sCAAiB,EAC/B,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,IAAI,KAAK,gCAAe,CAAC,YAAY,EAC3C,MAAM,CACP,CAAC;YACF,QAAQ,OAAO,EAAE,CAAC;gBAChB,KAAK,sCAAiB,CAAC,QAAQ;oBAC7B,UAAU,IAAI,CAAC,CAAC;oBAChB,MAAM;gBACR,KAAK,sCAAiB,CAAC,QAAQ;oBAC7B,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBACtC,MAAM;gBACR,KAAK,sCAAiB,CAAC,WAAW;oBAChC,UAAU,CAAC,IAAI,CAAC;wBACd,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,mCAAmC;qBACxD,CAAC,CAAC;oBACH,MAAM;gBACR,KAAK,sCAAiB,CAAC,cAAc;oBACnC,UAAU,CAAC,IAAI,CAAC;wBACd,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,kDAAkD;qBACvE,CAAC,CAAC;oBACH,MAAM;gBACR,KAAK,sCAAiB,CAAC,YAAY;oBACjC,UAAU,CAAC,IAAI,CAAC;wBACd,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,MAAM,EACJ,GAAG,KAAK,CAAC,GAAG,kDAAkD;4BAC9D,uDAAuD;qBAC1D,CAAC,CAAC;oBACH,MAAM;YACV,CAAC;QACH,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,UAAU,KAAK,CAAC;YAC1B,UAAU;YACV,UAAU;YACV,OAAO,EACL,UAAU,KAAK,CAAC;gBACd,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,yCAAyC;oBAC9D,mEAAmE;oBACnE,mEAAmE;oBACnE,mEAAmE;oBACnE,6DAA6D;oBAC7D,4CAA4C;SACnD,CAAC;IACJ,CAAC;IAGD,KAAK,CAAC,cAAc,CAAC,MAAgC;QACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3C,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACzB,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAjPD,gDAiPC;AAGD,SAAgB,gBAAgB,CAAC,MAAwB;IACvD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAYD,MAAa,gBAAgB;IACE;IAA7B,YAA6B,MAAM,QAAQ;QAAd,QAAG,GAAH,GAAG,CAAW;IAAG,CAAC;IAE/C,KAAK,CAAC,SAAS;QACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAe;QAC1B,OAAO,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,CAAC;IAEO,GAAG,CAAC,IAAuB;QACjC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAA,6BAAQ,EAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;gBACpE,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;YACxB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAlBD,4CAkBC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"supervisor.d.ts","sourceRoot":"","sources":["../../src/runtime/supervisor.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AACpF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAUpC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE5C,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,8BAA8B,CAAC;IAC7D,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;CACpD;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EACT,YAAY,GACZ,kBAAkB,GAClB,eAAe,GACf,iBAAiB,GACjB,eAAe,CAAC;IACpB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;CAC7C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAMD,qBAAa,UAAU;IAOT,OAAO,CAAC,QAAQ,CAAC,IAAI;IANjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAChD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IACxB,OAAO,CAAC,aAAa,CAAoC;IACzD,OAAO,CAAC,wBAAwB,CAAS;gBAEZ,IAAI,EAAE,iBAAiB;
|
|
1
|
+
{"version":3,"file":"supervisor.d.ts","sourceRoot":"","sources":["../../src/runtime/supervisor.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AACpF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAUpC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE5C,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,8BAA8B,CAAC;IAC7D,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;CACpD;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EACT,YAAY,GACZ,kBAAkB,GAClB,eAAe,GACf,iBAAiB,GACjB,eAAe,CAAC;IACpB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;CAC7C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAMD,qBAAa,UAAU;IAOT,OAAO,CAAC,QAAQ,CAAC,IAAI;IANjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAChD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IACxB,OAAO,CAAC,aAAa,CAAoC;IACzD,OAAO,CAAC,wBAAwB,CAAS;gBAEZ,IAAI,EAAE,iBAAiB;IAmB9C,OAAO,IAAI,OAAO,CAAC,aAAa,CAAC;YAuHzB,WAAW;IAwCnB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAwC/B,OAAO,CAAC,iBAAiB;YAgBX,oBAAoB;IAUlC,OAAO,CAAC,uBAAuB;IAQ/B,IAAI,OAAO,IAAI,SAAS,cAAc,EAAE,CAEvC;IAED,OAAO,CAAC,IAAI;CAGb;AAED,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,SAAS,cAAc,EAAE,EACnC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,SAAS,sBAAsB,EAAE,CAAC,CAU5C"}
|
|
@@ -24,6 +24,7 @@ class Supervisor {
|
|
|
24
24
|
substrate: opts.substrate,
|
|
25
25
|
distributionLockPath: opts.distributionLockPath,
|
|
26
26
|
ports: opts.ports,
|
|
27
|
+
installationId: opts.installationId,
|
|
27
28
|
...(opts.secrets !== undefined ? { secrets: opts.secrets } : {}),
|
|
28
29
|
...(opts.managedCredentials !== undefined
|
|
29
30
|
? { managedCredentials: opts.managedCredentials }
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"supervisor.js","sourceRoot":"","sources":["../../src/runtime/supervisor.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"supervisor.js","sourceRoot":"","sources":["../../src/runtime/supervisor.ts"],"names":[],"mappings":";;;AA2VA,wDAaC;AAxWD,6CAAuC;AACvC,iDAMwB;AACxB,wDAA4D;AAmE5D,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,cAAc,GAAG,QAAQ,CAAC;AAEhC,MAAa,UAAU;IAOQ;IANZ,OAAO,GAAqB,EAAE,CAAC;IAC/B,OAAO,GAAqB,EAAE,CAAC;IAC/B,MAAM,CAAC;IAChB,aAAa,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IACjD,wBAAwB,GAAG,KAAK,CAAC;IAEzC,YAA6B,IAAuB;QAAvB,SAAI,GAAJ,IAAI,CAAmB;QAClD,IAAI,CAAC,MAAM,GAAG,IAAA,oBAAO,EAAC;YACpB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS;gBACvC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE;gBACjD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS;gBAClC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE;gBACvC,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,kBAAkB,GACtB,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,oBAAoB,CAAC;QACvD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACrE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACzB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAC5C,CACF,CAAC;YAGF,MAAM,yBAAyB,GAAY,EAAE,CAAC;YAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBAC1B,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;oBACvB,SAAS;gBACX,CAAC;gBACD,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;oBAClC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAChC,IAAI,CAAC;wBACH,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;wBACrD,IAAI,CAAC,IAAI,CAAC;4BACR,IAAI,EAAE,eAAe;4BACrB,OAAO,EAAE,MAAM,CAAC,IAAI;4BACpB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG;yBACzB,CAAC,CAAC;oBACL,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,yBAAyB,CAAC,IAAI,CAC5B,IAAI,KAAK,CACP,4CAA4C,MAAM,CAAC,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACpH,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CACF,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YACD,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;gBAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACnC,IACE,MAAM,KAAK,SAAS;oBACpB,MAAM,EAAE,MAAM,KAAK,UAAU;oBAC7B,MAAM,CAAC,IAAI,KAAK,cAAc,EAC9B,CAAC;oBACD,OAAO,EAAE,CAAC;gBACZ,CAAC;gBACD,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,YAAY,KAAK;oBAC5B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;oBACvB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC5B,OAAO;oBACL,IAAI,KAAK,CACP,qBAAqB,MAAM,CAAC,IAAI,qBAAqB,MAAM,EAAE,CAC9D;iBACF,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;gBACxD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACnC,IACE,MAAM,KAAK,SAAS;oBACpB,MAAM,EAAE,MAAM,KAAK,UAAU;oBAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,YAAY,oCAAoB,CAAC,EAChD,CAAC;oBACD,OAAO,EAAE,CAAC;gBACZ,CAAC;gBACD,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC;gBACrC,OAAO;oBACL,IAAI,KAAK,CACP,WAAW,MAAM,CAAC,IAAI,6DAA6D,EACnF,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CACzB;iBACF,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,MAAM,aAAa,GAAG;gBACpB,GAAG,iBAAiB;gBACpB,GAAG,yBAAyB;gBAC5B,GAAG,eAAe;aACnB,CAAC;YACF,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,MAAM,cAAc,GAClB,yBAAyB,CAAC,MAAM,KAAK,CAAC;oBACpC,CAAC,CAAC,mCAAmC;oBACrC,CAAC,CAAC,6CAA6C,CAAC;gBACpD,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACxB,CAAC;gBAAC,OAAO,YAAY,EAAE,CAAC;oBACtB,MAAM,IAAI,cAAc,CACtB,CAAC,GAAG,aAAa,EAAE,YAAY,CAAC,EAChC,GAAG,cAAc,0BAA0B,CAC5C,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,cAAc,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;YAC1D,CAAC;YACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBAC1B,IACE,MAAM,KAAK,SAAS;oBACpB,MAAM,EAAE,MAAM,KAAK,UAAU,EAC7B,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,YAAY,KAAK;oBAC5B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;oBACvB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC1B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;gBACjD,IAAI,CAAC,IAAI,CAAC;oBACR,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EAAE,MAAM,CAAC,IAAI;oBACpB,MAAM,EAAE,MAAM;iBACf,CAAC,CAAC;YACP,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;IACpE,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,KAAkB,EAClB,kBAA0B;QAE1B,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,KAAK,CAAC,IAAI;YACnB,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAC5B,KAAK;YACL,GAAG;YACH,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc;YACxC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ;YAC5B,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;YAClC,IAAI;YACJ,kBAAkB;YAClB,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CACrB,IAAI,CAAC,uBAAuB,CAAC,GAAG,EAAE;gBAChC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACrD,CAAC,CAAC;YACJ,oBAAoB,EAAE,CAAC,OAAO,EAAE,EAAE,CAChC,IAAI,CAAC,uBAAuB,CAAC,GAAG,EAAE;gBAChC,MAAM,GAAG,GAAG,IAAA,6BAAc,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC3C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;oBACtB,IAAA,sDAAuC,EACrC,IAAI,CAAC,IAAI,CAAC,WAAW,EACrB,GAAG,CACJ,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC;SACL,CAAC,CAAC;IACL,CAAC;IAGD,KAAK,CAAC,QAAQ;QACZ,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,gBAAgB,CAAC;QACtD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjE,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAC3C,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAC/C,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAC5B,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QACxB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAC/B,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,cAAc,CACtB,QAAQ,CAAC,GAAG,CACV,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CACrB,IAAI,KAAK,CACP,iBAAiB,OAAO,CAAC,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC1F,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CACJ,EACD,sBAAsB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,iBAAiB,QAAQ;iBACnE,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;iBACtC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACb,+FAA+F,CAChG,CAAC;QACJ,CAAC;QACD,IAAA,qCAAsB,EAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAChD,CAAC;IAQO,iBAAiB,CAAC,IAAY,EAAE,MAAc;QACpD,MAAM,GAAG,GAAG,IAAA,6BAAc,EAAC,MAAM,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,IAAA,qCAAsB,EAAC;YACrB,IAAI;YACJ,GAAG;YACH,IAAI;YACJ,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc;YACxC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ;YAC5B,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;SACnC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,MAAc;QAC/C,MAAM,GAAG,GAAG,IAAA,6BAAc,EAAC,MAAM,CAAC,CAAC;QACnC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,uBAAuB,CAAC,GAAG,EAAE;YACtC,IAAA,wCAAyB,EAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,uBAAuB,CAC7B,SAAqB;QAErB,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,OAAO;QACT,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAEO,IAAI,CAAC,KAAqB;QAChC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;CACF;AA1QD,gCA0QC;AAEM,KAAK,UAAU,sBAAsB,CAC1C,QAAmC,EACnC,OAAe;IAEf,MAAM,QAAQ,GAA6B,EAAE,CAAC;IAC9C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}
|
|
@@ -0,0 +1,4 @@
|
|
|
1
|
+
import { type DeploymentId } from '@xemahq/contracts/deployment';
|
|
2
|
+
export declare function deploymentIdForInstallation(installationId: string): DeploymentId;
|
|
3
|
+
export declare function workflowNamespaceForInstallation(installationId: string): string;
|
|
4
|
+
//# sourceMappingURL=workflow-namespace.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"workflow-namespace.d.ts","sourceRoot":"","sources":["../../src/runtime/workflow-namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,YAAY,EAClB,MAAM,8BAA8B,CAAC;AAWtC,wBAAgB,2BAA2B,CAAC,cAAc,EAAE,MAAM,GAAG,YAAY,CAEhF;AASD,wBAAgB,gCAAgC,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAE/E"}
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.deploymentIdForInstallation = deploymentIdForInstallation;
|
|
4
|
+
exports.workflowNamespaceForInstallation = workflowNamespaceForInstallation;
|
|
5
|
+
const deployment_1 = require("@xemahq/contracts/deployment");
|
|
6
|
+
function deploymentIdForInstallation(installationId) {
|
|
7
|
+
return (0, deployment_1.parseDeploymentId)(installationId);
|
|
8
|
+
}
|
|
9
|
+
function workflowNamespaceForInstallation(installationId) {
|
|
10
|
+
return (0, deployment_1.workflowNamespaceForDeployment)(deploymentIdForInstallation(installationId));
|
|
11
|
+
}
|
|
12
|
+
//# sourceMappingURL=workflow-namespace.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"workflow-namespace.js","sourceRoot":"","sources":["../../src/runtime/workflow-namespace.ts"],"names":[],"mappings":";;AAeA,kEAEC;AASD,4EAEC;AA5BD,6DAIsC;AAWtC,SAAgB,2BAA2B,CAAC,cAAsB;IAChE,OAAO,IAAA,8BAAiB,EAAC,cAAc,CAAC,CAAC;AAC3C,CAAC;AASD,SAAgB,gCAAgC,CAAC,cAAsB;IACrE,OAAO,IAAA,2CAA8B,EAAC,2BAA2B,CAAC,cAAc,CAAC,CAAC,CAAC;AACrF,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@xemahq/xema",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.21.0",
|
|
4
4
|
"repository": {
|
|
5
5
|
"type": "git",
|
|
6
6
|
"url": "git+https://github.com/xema-dev/xema-cli.git",
|
|
@@ -38,12 +38,12 @@
|
|
|
38
38
|
"@nestjs/common": "^11.1.18",
|
|
39
39
|
"@nestjs/core": "^11.1.18",
|
|
40
40
|
"@nestjs/platform-express": "^11.1.28",
|
|
41
|
-
"@xemahq/biome-sdk": "^
|
|
41
|
+
"@xemahq/biome-sdk": "^18.1.0",
|
|
42
42
|
"@xemahq/biome-supply-chain": "^0.5.0",
|
|
43
|
-
"@xemahq/distribution-resolver": "^0.
|
|
44
|
-
"@xemahq/dsl": "^0.
|
|
45
|
-
"@xemahq/identity-client": "^0.
|
|
46
|
-
"@xemahq/contracts": "^0.
|
|
43
|
+
"@xemahq/distribution-resolver": "^0.5.0",
|
|
44
|
+
"@xemahq/dsl": "^0.23.0",
|
|
45
|
+
"@xemahq/identity-client": "^0.16.0",
|
|
46
|
+
"@xemahq/contracts": "^0.51.0",
|
|
47
47
|
"@xemahq/kernel-state-runtime": "^0.6.3",
|
|
48
48
|
"@xemahq/license-verifier": "^0.2.0",
|
|
49
49
|
"@xemahq/service-registry-nest": "^0.12.2",
|
|
@@ -58,7 +58,7 @@
|
|
|
58
58
|
"@types/jest": "^30.0.0",
|
|
59
59
|
"@types/node": "25.2.3",
|
|
60
60
|
"@xemahq/biome-host-api-client": "^0.3.31",
|
|
61
|
-
"@xemahq/eslint-config": "^0.
|
|
61
|
+
"@xemahq/eslint-config": "^0.9.2",
|
|
62
62
|
"eslint": "^9.39.4",
|
|
63
63
|
"jest": "^30.3.0",
|
|
64
64
|
"prettier": "3.6.2",
|