@xemahq/xema 0.59.0 → 0.60.1

package/dist/runtime/seed/seed-container.js

@@ -0,0 +1,175 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.launchSeedContainer = launchSeedContainer;
+exports.stopSeedContainers = stopSeedContainers;
+const cleanup_1 = require("../cleanup");
+const closure_names_1 = require("./closure-names");
+const installation_tar_1 = require("./installation-tar");
+const seed_env_file_1 = require("./seed-env-file");
+const seed_facts_1 = require("./seed-facts");
+const seed_image_user_1 = require("./seed-image-user");
+const seed_options_1 = require("./seed-options");
+const seed_record_1 = require("./seed-record");
+const supervisor_contract_1 = require("./supervisor-contract");
+const schema_1 = require("../config/schema");
+const paths_1 = require("../paths");
+const container_runner_1 = require("../runner/container-runner");
+const docker_cli_1 = require("../runner/docker-cli");
+const health_probe_1 = require("../runner/health-probe");
+const host_platform_1 = require("../runner/host-platform");
+const SEED_CONTAINER_STOP_GRACE_MS = 10_000;
+async function launchSeedContainer(input) {
+    const { plan, installationId, log, deliveries } = input;
+    const image = plan.seedImage;
+    if (plan.seed === undefined || image === undefined) {
+        throw new Error('A container launch plan carries no seed launch options or no seed image.');
+    }
+    const base = plan.seed;
+    const docker = input.docker ?? new docker_cli_1.DockerCli();
+    const imageRef = (0, container_runner_1.containerImageForRosterEntry)(image);
+    const platform = (0, host_platform_1.selectEntryRunPlatform)(image, await docker.serverPlatform());
+    if (platform === undefined) {
+        throw new Error(`${image.name}: no runnable image platform resolved for "${imageRef}"; refusing to start a ` +
+            'container whose architecture the launcher cannot pin.');
+    }
+    const rootProcess = (0, closure_names_1.rootSeedProcess)(deliveries.map((delivery) => delivery.process)).name;
+    const startedAt = new Date().toISOString();
+    const started = [];
+    const currentRecord = () => ({
+        substrate: schema_1.Substrate.Container,
+        installationId,
+        planHash: input.planHash,
+        executionId: input.executionId,
+        startedAt,
+        image: imageRef,
+        processes: [...started],
+    });
+    const rollback = async () => {
+        await (0, cleanup_1.runCleanupOperations)([...started].reverse().map(({ containerName }) => ({
+            operation: `remove container ${containerName}`,
+            run: async () => {
+                await docker.run(['rm', '-f', containerName]);
+            },
+        })));
+        (0, seed_record_1.removeSeedRecord)(installationId);
+    };
+    try {
+        for (const [index, delivery] of deliveries.entries()) {
+            const name = delivery.process.name;
+            const options = (0, seed_options_1.seedProcessLaunchOptions)(base, delivery.process, index, {
+                substrate: schema_1.Substrate.Container,
+                rootProcess,
+            });
+            const containerName = (0, container_runner_1.containerNameForWorkload)(installationId, name);
+            const baseArgs = [
+                'create',
+                '--platform',
+                (0, host_platform_1.formatPlatform)(platform),
+                '--name',
+                containerName,
+                '--label',
+                `${docker_cli_1.LAUNCHER_LABEL}=service`,
+                '--label',
+                `${docker_cli_1.INSTALLATION_ID_LABEL}=${installationId}`,
+                '--label',
+                `${docker_cli_1.PLAN_HASH_LABEL}=${input.planHash}`,
+                '--label',
+                `${docker_cli_1.EXECUTION_ID_LABEL}=${input.executionId}`,
+                '--label',
+                `${docker_cli_1.WORKLOAD_NAME_LABEL}=${name}`,
+                '--network',
+                input.network,
+                '--network-alias',
+                name,
+                '--restart',
+                'unless-stopped',
+                ...(0, seed_facts_1.seedProcessHostPorts)(delivery.process, index).flatMap(({ port }) => [
+                    '-p',
+                    `${seed_facts_1.SEED_LOOPBACK_HOST}:${String(port)}:${String(port)}`,
+                ]),
+                '-v',
+                `${seed_facts_1.SEED_BUNDLE_VOLUME}:${options.bundleCacheDir}`,
+                '-v',
+                `${plan.lock.path}:${paths_1.CONTAINER_DISTRIBUTION_LOCK_PATH}:ro`,
+                '-v',
+                `${input.resolvedDeploymentHostPath}:${paths_1.CONTAINER_RESOLVED_DEPLOYMENT_PATH}:ro`,
+            ];
+            const runArgs = [imageRef, ...(0, supervisor_contract_1.supervisorArgv)(options)];
+            const containerId = (Object.keys(delivery.env).length === 0
+                ? await docker.run([...baseArgs, ...runArgs])
+                : await (0, seed_env_file_1.withSeedEnvFile)(delivery.env, (envFile) => docker.run([...baseArgs, '--env-file', envFile, ...runArgs]))).trim();
+            started.push({ name, containerName, containerId, probePort: options.probePort });
+            (0, seed_record_1.writeSeedRecord)(currentRecord());
+            await installAndStart(docker, containerName, imageRef, delivery.installationFiles);
+            log(`seed     : started container ${containerName} (${containerId.slice(0, 12)}) from ${imageRef}`);
+            try {
+                await (0, health_probe_1.waitForReady)((0, seed_facts_1.seedLoopbackUrl)(options.probePort), options.bootDeadlineMs);
+            }
+            catch (error) {
+                throw new Error(`The seed container ${name} did not become ready: ${error instanceof Error ? error.message : String(error)} ` +
+                    `(inspect it with \`xema logs ${name}\`).`, { cause: error });
+            }
+        }
+    }
+    catch (error) {
+        try {
+            await rollback();
+        }
+        catch (cleanupError) {
+            throw (0, cleanup_1.combineOperationAndCleanupErrors)('seed container launch', error, cleanupError);
+        }
+        throw error;
+    }
+    const shutdown = async (graceMs = SEED_CONTAINER_STOP_GRACE_MS) => {
+        await stopSeedContainers(docker, started.map(({ containerName }) => containerName), installationId, graceMs);
+    };
+    const seeds = started.map((record) => ({
+        name: record.name,
+        handle: `container:${record.containerName}`,
+        probeUrl: (0, seed_facts_1.seedLoopbackUrl)(record.probePort),
+        logs: `xema logs ${record.name}`,
+    }));
+    return {
+        result: {
+            running: started.map((record) => ({
+                name: record.name,
+                url: (0, seed_facts_1.seedLoopbackUrl)(record.probePort),
+                handle: record.containerId.slice(0, 12),
+                close: shutdown,
+            })),
+            skipped: [],
+        },
+        plan,
+        installationId,
+        planHash: input.planHash,
+        executionId: input.executionId,
+        roster: plan.roster,
+        seeds,
+        shutdown: () => shutdown(),
+    };
+}
+async function installAndStart(docker, containerName, imageRef, files) {
+    if (files !== undefined) {
+        const owner = (0, seed_image_user_1.seedImageUser)(await docker.run(['inspect', '--format', '{{.Config.User}}', containerName]), imageRef);
+        await docker.runWithInput(['cp', '-a', '-', `${containerName}:${installation_tar_1.SEED_INSTALLATION_TAR_ROOT}`], (0, installation_tar_1.installationTar)(files, owner));
+    }
+    await docker.run(['start', containerName]);
+}
+async function stopSeedContainers(docker, containerNamesInBootOrder, installationId, graceMs = SEED_CONTAINER_STOP_GRACE_MS) {
+    await (0, cleanup_1.runCleanupOperations)([...containerNamesInBootOrder].reverse().flatMap((containerName) => [
+        {
+            operation: `stop container ${containerName}`,
+            run: async () => {
+                await docker.run(['stop', '-t', String(Math.ceil(graceMs / 1000)), containerName]);
+            },
+        },
+        {
+            operation: `remove container ${containerName}`,
+            run: async () => {
+                await docker.run(['rm', '-f', containerName]);
+            },
+        },
+    ]));
+    (0, seed_record_1.removeSeedRecord)(installationId);
+}
+//# sourceMappingURL=seed-container.js.map

package/dist/runtime/seed/seed-container.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-container.js","sourceRoot":"","sources":["../../../src/runtime/seed/seed-container.ts"],"names":[],"mappings":";;AA4DA,kDAkJC;AAqBD,gDAuBC;AA1PD,wCAAoF;AACpF,mDAAkD;AAClD,yDAAiF;AACjF,mDAAkD;AAClD,6CAA6G;AAC7G,uDAAkD;AAClD,iDAA0D;AAC1D,+CAA6H;AAC7H,+DAAuD;AACvD,6CAA6C;AAC7C,oCAAgG;AAChG,iEAGoC;AACpC,qDAO8B;AAC9B,yDAAsD;AACtD,2DAAiF;AAQjF,MAAM,4BAA4B,GAAG,MAAM,CAAC;AA4BrC,KAAK,UAAU,mBAAmB,CAAC,KAAyB;IACjE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;IAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,sBAAS,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAA,+CAA4B,EAAC,KAAK,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,IAAA,sCAAsB,EAAC,KAAK,EAAE,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;IAC9E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,CAAC,IAAI,8CAA8C,QAAQ,yBAAyB;YAC1F,uDAAuD,CAC1D,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,IAAA,+BAAe,EAAC,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAEzF,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAiC,EAAE,CAAC;IACjD,MAAM,aAAa,GAAG,GAAwB,EAAE,CAAC,CAAC;QAChD,SAAS,EAAE,kBAAS,CAAC,SAAS;QAC9B,cAAc;QACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS;QACT,KAAK,EAAE,QAAQ;QACf,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC;KACxB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,KAAK,IAAmB,EAAE;QACzC,MAAM,IAAA,8BAAoB,EACxB,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;YACjD,SAAS,EAAE,oBAAoB,aAAa,EAAE;YAC9C,GAAG,EAAE,KAAK,IAAI,EAAE;gBACd,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;YAChD,CAAC;SACF,CAAC,CAAC,CACJ,CAAC;QACF,IAAA,8BAAgB,EAAC,cAAc,CAAC,CAAC;IACnC,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;YACnC,MAAM,OAAO,GAAG,IAAA,uCAAwB,EAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE;gBACtE,SAAS,EAAE,kBAAS,CAAC,SAAS;gBAC9B,WAAW;aACZ,CAAC,CAAC;YACH,MAAM,aAAa,GAAG,IAAA,2CAAwB,EAAC,cAAc,EAAE,IAAI,CAAC,CAAC;YACrE,MAAM,QAAQ,GAAG;gBACf,QAAQ;gBACR,YAAY;gBACZ,IAAA,8BAAc,EAAC,QAAQ,CAAC;gBACxB,QAAQ;gBACR,aAAa;gBACb,SAAS;gBACT,GAAG,2BAAc,UAAU;gBAC3B,SAAS;gBACT,GAAG,kCAAqB,IAAI,cAAc,EAAE;gBAC5C,SAAS;gBACT,GAAG,4BAAe,IAAI,KAAK,CAAC,QAAQ,EAAE;gBACtC,SAAS;gBACT,GAAG,+BAAkB,IAAI,KAAK,CAAC,WAAW,EAAE;gBAC5C,SAAS;gBACT,GAAG,gCAAmB,IAAI,IAAI,EAAE;gBAChC,WAAW;gBACX,KAAK,CAAC,OAAO;gBACb,iBAAiB;gBACjB,IAAI;gBACJ,WAAW;gBACX,gBAAgB;gBAChB,GAAG,IAAA,iCAAoB,EAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;oBACrE,IAAI;oBACJ,GAAG,+BAAkB,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE;iBACxD,CAAC;gBACF,IAAI;gBACJ,GAAG,+BAAkB,IAAI,OAAO,CAAC,cAAc,EAAE;gBACjD,IAAI;gBACJ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,wCAAgC,KAAK;gBAC1D,IAAI;gBACJ,GAAG,KAAK,CAAC,0BAA0B,IAAI,0CAAkC,KAAK;aAC/E,CAAC;YACF,MAAM,OAAO,GAAG,CAAC,QAAQ,EAAE,GAAG,IAAA,oCAAc,EAAC,OAAO,CAAC,CAAC,CAAC;YACvD,MAAM,WAAW,GAAG,CAClB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;gBACpC,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC,CAAC;gBAC7C,CAAC,CAAC,MAAM,IAAA,+BAAe,EAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAC9C,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,CAC7D,CACN,CAAC,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YACjF,IAAA,6BAAe,EAAC,aAAa,EAAE,CAAC,CAAC;YACjC,MAAM,eAAe,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAC;YACnF,GAAG,CAAC,gCAAgC,aAAa,KAAK,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,QAAQ,EAAE,CAAC,CAAC;YAEpG,IAAI,CAAC;gBACH,MAAM,IAAA,2BAAY,EAAC,IAAA,4BAAe,EAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;YACjF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,sBAAsB,IAAI,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG;oBAC3G,gCAAgC,IAAI,MAAM,EAC5C,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,QAAQ,EAAE,CAAC;QACnB,CAAC;QAAC,OAAO,YAAY,EAAE,CAAC;YACtB,MAAM,IAAA,0CAAgC,EAAC,uBAAuB,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,EAAE,UAAkB,4BAA4B,EAAiB,EAAE;QACvF,MAAM,kBAAkB,CACtB,MAAM,EACN,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,EACjD,cAAc,EACd,OAAO,CACR,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACrC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,aAAa,MAAM,CAAC,aAAa,EAAE;QAC3C,QAAQ,EAAE,IAAA,4BAAe,EAAC,MAAM,CAAC,SAAS,CAAC;QAC3C,IAAI,EAAE,aAAa,MAAM,CAAC,IAAI,EAAE;KACjC,CAAC,CAAC,CAAC;IACJ,OAAO;QACL,MAAM,EAAE;YACN,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAChC,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,GAAG,EAAE,IAAA,4BAAe,EAAC,MAAM,CAAC,SAAS,CAAC;gBACtC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBACvC,KAAK,EAAE,QAAQ;aAChB,CAAC,CAAC;YACH,OAAO,EAAE,EAAE;SACZ;QACD,IAAI;QACJ,cAAc;QACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK;QACL,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE;KAC3B,CAAC;AACJ,CAAC;AAOD,KAAK,UAAU,eAAe,CAC5B,MAAiB,EACjB,aAAqB,EACrB,QAAgB,EAChB,KAAmC;IAEnC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,IAAA,+BAAa,EAAC,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,kBAAkB,EAAE,aAAa,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QACpH,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,aAAa,IAAI,6CAA0B,EAAE,CAAC,EAAE,IAAA,kCAAe,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IAChI,CAAC;IACD,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;AAC7C,CAAC;AAGM,KAAK,UAAU,kBAAkB,CACtC,MAAiB,EACjB,yBAA4C,EAC5C,cAAsB,EACtB,UAAkB,4BAA4B;IAE9C,MAAM,IAAA,8BAAoB,EACxB,CAAC,GAAG,yBAAyB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC;QAClE;YACE,SAAS,EAAE,kBAAkB,aAAa,EAAE;YAC5C,GAAG,EAAE,KAAK,IAAI,EAAE;gBACd,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;YACrF,CAAC;SACF;QACD;YACE,SAAS,EAAE,oBAAoB,aAAa,EAAE;YAC9C,GAAG,EAAE,KAAK,IAAI,EAAE;gBACd,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;YAChD,CAAC;SACF;KACF,CAAC,CACH,CAAC;IACF,IAAA,8BAAgB,EAAC,cAAc,CAAC,CAAC;AACnC,CAAC"}

package/dist/runtime/seed/seed-delivery-env.d.ts

@@ -0,0 +1,39 @@
+import type { SeedEnv } from './seed-environment';
+import type { SeedFilePaths } from './seed-installation-files';
+export type SeedOpenBaoCredentialFile = {
+    readonly keyFile: string;
+} | {
+    readonly projectedTokenFile: string;
+};
+export interface SeedOpenBaoLogin {
+    readonly authMount: string;
+    readonly role: string;
+}
+export declare const CORS_ALLOWED_ORIGINS_ENV = "CORS_ALLOWED_ORIGINS";
+export interface SeedDistributionLock {
+    readonly path: string;
+    readonly sha256: string;
+}
+export declare const POD_NAMESPACE_ENV = "POD_NAMESPACE";
+export interface SeedResolvedDeployment {
+    readonly path: string;
+    readonly sha256: string;
+    readonly runtimeNamespace: string;
+}
+export interface SeedEditionDelivery {
+    readonly lock: SeedDistributionLock;
+    readonly resolvedDeployment: SeedResolvedDeployment;
+}
+export interface SeedDeliveryEnvInput {
+    readonly paths: SeedFilePaths;
+    readonly edition?: SeedEditionDelivery;
+    readonly openBaoEndpoint: string;
+    readonly browserOrigins: readonly string[];
+    readonly login?: {
+        readonly target: SeedOpenBaoLogin;
+        readonly credential: SeedOpenBaoCredentialFile;
+    };
+}
+export declare function seedDeliveryEnv(input: SeedDeliveryEnvInput): SeedEnv;
+export declare function withDeliveryEnv(memberEnv: SeedEnv, delivery: SeedEnv): SeedEnv;
+//# sourceMappingURL=seed-delivery-env.d.ts.map

package/dist/runtime/seed/seed-delivery-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-delivery-env.d.ts","sourceRoot":"","sources":["../../../src/runtime/seed/seed-delivery-env.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAG/D,MAAM,MAAM,yBAAyB,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/G,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAGD,eAAO,MAAM,wBAAwB,yBAAyB,CAAC;AAG/D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAGD,eAAO,MAAM,iBAAiB,kBAAkB,CAAC;AAGjD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAMD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,kBAAkB,EAAE,sBAAsB,CAAC;CACrD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAK9B,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IAKjC,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAK3C,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;QAAC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAA;KAAE,CAAC;CACxG;AAGD,wBAAgB,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CA+BpE;AAGD,wBAAgB,eAAe,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,GAAG,OAAO,CAM9E"}

package/dist/runtime/seed/seed-delivery-env.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POD_NAMESPACE_ENV = exports.CORS_ALLOWED_ORIGINS_ENV = void 0;
+exports.seedDeliveryEnv = seedDeliveryEnv;
+exports.withDeliveryEnv = withDeliveryEnv;
+const member_config_1 = require("@xemahq/installation-tenancy/member-config");
+const xema_service_nest_1 = require("@xemahq/xema-service-nest");
+exports.CORS_ALLOWED_ORIGINS_ENV = 'CORS_ALLOWED_ORIGINS';
+exports.POD_NAMESPACE_ENV = 'POD_NAMESPACE';
+function seedDeliveryEnv(input) {
+    if (input.browserOrigins.length === 0) {
+        throw new Error(`${exports.CORS_ALLOWED_ORIGINS_ENV} cannot be delivered: the installation declares no browser origin, and the platform ` +
+            'refuses to start without one. Declare a Web domain with the web feature on.');
+    }
+    return {
+        [exports.CORS_ALLOWED_ORIGINS_ENV]: input.browserOrigins.join(','),
+        [member_config_1.INSTALLATION_INVENTORY_FILE_ENV]: input.paths.inventory,
+        ...(input.edition === undefined
+            ? {}
+            : {
+                [xema_service_nest_1.DISTRIBUTION_LOCK_PATH_ENV]: input.edition.lock.path,
+                [xema_service_nest_1.DISTRIBUTION_LOCK_SHA256_ENV]: input.edition.lock.sha256,
+                [xema_service_nest_1.RESOLVED_DEPLOYMENT_PATH_ENV]: input.edition.resolvedDeployment.path,
+                [xema_service_nest_1.RESOLVED_DEPLOYMENT_SHA256_ENV]: input.edition.resolvedDeployment.sha256,
+                [exports.POD_NAMESPACE_ENV]: input.edition.resolvedDeployment.runtimeNamespace,
+                [xema_service_nest_1.RESOLVED_DEPLOYMENT_ACCEPT_UNSPLIT_ENV]: xema_service_nest_1.RESOLVED_DEPLOYMENT_ACCEPT_UNSPLIT_VALUE,
+            }),
+        [member_config_1.OPENBAO_LOGIN_ENV.endpoint]: input.openBaoEndpoint,
+        ...(input.login === undefined
+            ? {}
+            : {
+                [member_config_1.OPENBAO_LOGIN_ENV.authMount]: input.login.target.authMount,
+                [member_config_1.OPENBAO_LOGIN_ENV.role]: input.login.target.role,
+                ...('keyFile' in input.login.credential
+                    ? { [member_config_1.OPENBAO_LOGIN_ENV.keyFile]: input.login.credential.keyFile }
+                    : { [member_config_1.OPENBAO_LOGIN_ENV.projectedTokenFile]: input.login.credential.projectedTokenFile }),
+            }),
+    };
+}
+function withDeliveryEnv(memberEnv, delivery) {
+    const clashes = Object.keys(delivery).filter((name) => name in memberEnv);
+    if (clashes.length > 0) {
+        throw new Error(`The seed environment states ${clashes.join(', ')} twice: a member requires a name the launcher delivers.`);
+    }
+    return { ...memberEnv, ...delivery };
+}
+//# sourceMappingURL=seed-delivery-env.js.map

package/dist/runtime/seed/seed-delivery-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-delivery-env.js","sourceRoot":"","sources":["../../../src/runtime/seed/seed-delivery-env.ts"],"names":[],"mappings":";;;AAsEA,0CA+BC;AAGD,0CAMC;AA9GD,8EAAgH;AAChH,iEAOmC;AActB,QAAA,wBAAwB,GAAG,sBAAsB,CAAC;AASlD,QAAA,iBAAiB,GAAG,eAAe,CAAC;AAuCjD,SAAgB,eAAe,CAAC,KAA2B;IACzD,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,GAAG,gCAAwB,sFAAsF;YAC/G,6EAA6E,CAChF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,CAAC,gCAAwB,CAAC,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;QAC1D,CAAC,+CAA+B,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS;QACxD,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS;YAC7B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,CAAC,8CAA0B,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI;gBACrD,CAAC,gDAA4B,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM;gBACzD,CAAC,gDAA4B,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI;gBACrE,CAAC,kDAA8B,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM;gBACzE,CAAC,yBAAiB,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,gBAAgB;gBACtE,CAAC,0DAAsC,CAAC,EAAE,4DAAwC;aACnF,CAAC;QACN,CAAC,iCAAiB,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,eAAe;QACnD,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS;YAC3B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,CAAC,iCAAiB,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS;gBAC3D,CAAC,iCAAiB,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI;gBACjD,GAAG,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU;oBACrC,CAAC,CAAC,EAAE,CAAC,iCAAiB,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE;oBACjE,CAAC,CAAC,EAAE,CAAC,iCAAiB,CAAC,kBAAkB,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC;aAC3F,CAAC;KACP,CAAC;AACJ,CAAC;AAGD,SAAgB,eAAe,CAAC,SAAkB,EAAE,QAAiB;IACnE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IAC9H,CAAC;IACD,OAAO,EAAE,GAAG,SAAS,EAAE,GAAG,QAAQ,EAAE,CAAC;AACvC,CAAC"}

package/dist/runtime/seed/seed-down.d.ts

@@ -0,0 +1,2 @@
+export declare function runSeedDown(installationId: string, print: (line: string) => void): Promise<void>;
+//# sourceMappingURL=seed-down.d.ts.map

package/dist/runtime/seed/seed-down.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-down.d.ts","sourceRoot":"","sources":["../../../src/runtime/seed/seed-down.ts"],"names":[],"mappings":"AAcA,wBAAsB,WAAW,CAC/B,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAC5B,OAAO,CAAC,IAAI,CAAC,CAkDf"}

package/dist/runtime/seed/seed-down.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runSeedDown = runSeedDown;
+const seed_process_1 = require("./seed-process");
+const seed_record_1 = require("./seed-record");
+const schema_1 = require("../config/schema");
+async function runSeedDown(installationId, print) {
+    const record = (0, seed_record_1.readSeedRecord)(installationId);
+    if (record === undefined) {
+        print('No seed supervisor to stop.');
+        return;
+    }
+    if (record.substrate !== schema_1.Substrate.Native) {
+        print(`The recorded seed is a ${record.substrate} seed (${record.processes.map((seedProcess) => seedProcess.containerName).join(', ')}), not a native one; ` +
+            'run `xema down` with the substrate it was launched under.');
+        return;
+    }
+    const processes = [...record.processes].reverse();
+    const ownerships = new Map();
+    for (const seedProcess of processes) {
+        ownerships.set(seedProcess.name, await (0, seed_process_1.seedOwnership)(seedProcess));
+    }
+    const running = processes.filter((seedProcess) => ownerships.get(seedProcess.name) === seed_process_1.SeedOwnership.Owned);
+    if (running.length > 0 && (0, seed_process_1.launcherIsActive)(record)) {
+        print(`The seed (${running.map((seedProcess) => seedProcess.name).join(', ')}) is owned by a running \`xema up\` ` +
+            `(pid ${String(record.launcherPid)}). Stop it with Ctrl+C in that terminal.`);
+        return;
+    }
+    let unverified = false;
+    for (const seedProcess of processes) {
+        const label = `seed process ${seedProcess.name} (pid ${String(seedProcess.pid)})`;
+        switch (ownerships.get(seedProcess.name)) {
+            case seed_process_1.SeedOwnership.Gone:
+                print(`  ${label} had already exited.`);
+                break;
+            case seed_process_1.SeedOwnership.Unverified:
+                unverified = true;
+                print(`  skipped ${label}: its process group is still occupied but ` +
+                    'no member matches the recorded identity, so the PID was likely reused by an unrelated ' +
+                    'process and was left untouched.');
+                break;
+            case seed_process_1.SeedOwnership.Owned:
+                await (0, seed_process_1.stopSeedProcess)(seedProcess);
+                print(`  ✓ stopped ${label}`);
+                break;
+        }
+    }
+    if (!unverified) {
+        (0, seed_record_1.removeSeedRecord)(installationId);
+    }
+}
+//# sourceMappingURL=seed-down.js.map

package/dist/runtime/seed/seed-down.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-down.js","sourceRoot":"","sources":["../../../src/runtime/seed/seed-down.ts"],"names":[],"mappings":";;AAcA,kCAqDC;AAnED,iDAKwB;AACxB,+CAAiE;AACjE,6CAA6C;AAOtC,KAAK,UAAU,WAAW,CAC/B,cAAsB,EACtB,KAA6B;IAE7B,MAAM,MAAM,GAAG,IAAA,4BAAc,EAAC,cAAc,CAAC,CAAC;IAC9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACrC,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,KAAK,kBAAS,CAAC,MAAM,EAAE,CAAC;QAC1C,KAAK,CACH,0BAA0B,MAAM,CAAC,SAAS,UAAU,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB;YACpJ,2DAA2D,CAC9D,CAAC;QACF,OAAO;IACT,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;IAClD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAyB,CAAC;IACpD,KAAK,MAAM,WAAW,IAAI,SAAS,EAAE,CAAC;QACpC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,IAAA,4BAAa,EAAC,WAAW,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,4BAAa,CAAC,KAAK,CAAC,CAAC;IAC5G,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,IAAA,+BAAgB,EAAC,MAAM,CAAC,EAAE,CAAC;QACnD,KAAK,CACH,aAAa,OAAO,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,sCAAsC;YAC1G,QAAQ,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,0CAA0C,CAC/E,CAAC;QACF,OAAO;IACT,CAAC;IACD,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,KAAK,MAAM,WAAW,IAAI,SAAS,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,gBAAgB,WAAW,CAAC,IAAI,SAAS,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;QAClF,QAAQ,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,KAAK,4BAAa,CAAC,IAAI;gBACrB,KAAK,CAAC,KAAK,KAAK,sBAAsB,CAAC,CAAC;gBACxC,MAAM;YACR,KAAK,4BAAa,CAAC,UAAU;gBAC3B,UAAU,GAAG,IAAI,CAAC;gBAClB,KAAK,CACH,aAAa,KAAK,4CAA4C;oBAC5D,wFAAwF;oBACxF,iCAAiC,CACpC,CAAC;gBACF,MAAM;YACR,KAAK,4BAAa,CAAC,KAAK;gBACtB,MAAM,IAAA,8BAAe,EAAC,WAAW,CAAC,CAAC;gBACnC,KAAK,CAAC,eAAe,KAAK,EAAE,CAAC,CAAC;gBAC9B,MAAM;QACV,CAAC;IACH,CAAC;IACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,IAAA,8BAAgB,EAAC,cAAc,CAAC,CAAC;IACnC,CAAC;AACH,CAAC"}

package/dist/runtime/seed/seed-env-file.d.ts

@@ -0,0 +1,3 @@
+import type { SeedEnv } from './seed-environment';
+export declare function withSeedEnvFile<T>(env: SeedEnv, use: (envFile: string) => Promise<T>): Promise<T>;
+//# sourceMappingURL=seed-env-file.d.ts.map

package/dist/runtime/seed/seed-env-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-env-file.d.ts","sourceRoot":"","sources":["../../../src/runtime/seed/seed-env-file.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAOlD,wBAAsB,eAAe,CAAC,CAAC,EACrC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GACnC,OAAO,CAAC,CAAC,CAAC,CAeZ"}

package/dist/runtime/seed/seed-env-file.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.withSeedEnvFile = withSeedEnvFile;
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+async function withSeedEnvFile(env, use) {
+    const lines = Object.entries(env).map(([name, value]) => {
+        if (/[\r\n]/.test(value)) {
+            throw new Error(`The value of ${name} contains a line break; a docker env-file cannot carry it.`);
+        }
+        return `${name}=${value}`;
+    });
+    const directory = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'xema-seed-env-'));
+    try {
+        const file = (0, node_path_1.join)(directory, 'seed.env');
+        (0, node_fs_1.writeFileSync)(file, `${lines.join('\n')}\n`, { mode: 0o600, flag: 'wx' });
+        return await use(file);
+    }
+    finally {
+        (0, node_fs_1.rmSync)(directory, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=seed-env-file.js.map

package/dist/runtime/seed/seed-env-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-env-file.js","sourceRoot":"","sources":["../../../src/runtime/seed/seed-env-file.ts"],"names":[],"mappings":";;AAWA,0CAkBC;AA7BD,qCAA6D;AAC7D,qCAAiC;AACjC,yCAAiC;AAS1B,KAAK,UAAU,eAAe,CACnC,GAAY,EACZ,GAAoC;IAEpC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE;QACtD,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,4DAA4D,CAAC,CAAC;QACpG,CAAC;QACD,OAAO,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,IAAA,qBAAW,EAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QACzC,IAAA,uBAAa,EAAC,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;YAAS,CAAC;QACT,IAAA,gBAAM,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC"}

package/dist/runtime/seed/seed-env-secret.d.ts

@@ -0,0 +1,18 @@
+import type { SeedOpenBaoLogin } from './seed-delivery-env';
+import type { SeedEnv } from './seed-environment';
+export declare const HELM_SEED_ENV_FROM_VALUE = "process.envFrom[0].secretRef.name";
+export declare function seedEnvSecretManifest(namespace: string, installationId: string, process: string, env: SeedEnv): string;
+export declare const HELM_SEED_INSTALLATION_VALUES: {
+    readonly mountPath: "process.installation.mountPath";
+    readonly inventoryConfigMap: "process.installation.inventoryConfigMap";
+    readonly authMount: "process.installation.openBao.authMount";
+    readonly role: "process.installation.openBao.role";
+    readonly projectedTokenFile: "process.installation.openBao.projectedTokenFile";
+};
+export interface SeedInstallationPayload {
+    readonly inventoryText: string;
+    readonly login: SeedOpenBaoLogin;
+}
+export declare function helmSeedInstallationValuePairs(payload: SeedInstallationPayload): Readonly<Record<string, string>>;
+export declare function seedInstallationManifest(namespace: string, installationId: string, payload: SeedInstallationPayload): string;
+//# sourceMappingURL=seed-env-secret.d.ts.map

package/dist/runtime/seed/seed-env-secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-env-secret.d.ts","sourceRoot":"","sources":["../../../src/runtime/seed/seed-env-secret.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAGlD,eAAO,MAAM,wBAAwB,sCAAsC,CAAC;AAO5E,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,MAAM,CAmBtH;AAGD,eAAO,MAAM,6BAA6B;;;;;;CAMhC,CAAC;AAEX,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;CAClC;AAED,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,uBAAuB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAQjH;AAGD,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,GAAG,MAAM,CAe5H"}

package/dist/runtime/seed/seed-env-secret.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HELM_SEED_INSTALLATION_VALUES = exports.HELM_SEED_ENV_FROM_VALUE = void 0;
+exports.seedEnvSecretManifest = seedEnvSecretManifest;
+exports.helmSeedInstallationValuePairs = helmSeedInstallationValuePairs;
+exports.seedInstallationManifest = seedInstallationManifest;
+const seed_facts_1 = require("./seed-facts");
+const seed_installation_files_1 = require("./seed-installation-files");
+exports.HELM_SEED_ENV_FROM_VALUE = 'process.envFrom[0].secretRef.name';
+function seedEnvSecretManifest(namespace, installationId, process, env) {
+    return JSON.stringify({
+        apiVersion: 'v1',
+        kind: 'List',
+        items: [
+            { apiVersion: 'v1', kind: 'Namespace', metadata: { name: namespace } },
+            {
+                apiVersion: 'v1',
+                kind: 'Secret',
+                type: 'Opaque',
+                metadata: {
+                    name: (0, seed_facts_1.seedEnvSecretName)(process),
+                    namespace,
+                    labels: { 'app.kubernetes.io/managed-by': 'xema-cli', 'xema.installationId': installationId },
+                },
+                stringData: env,
+            },
+        ],
+    });
+}
+exports.HELM_SEED_INSTALLATION_VALUES = {
+    mountPath: 'process.installation.mountPath',
+    inventoryConfigMap: 'process.installation.inventoryConfigMap',
+    authMount: 'process.installation.openBao.authMount',
+    role: 'process.installation.openBao.role',
+    projectedTokenFile: 'process.installation.openBao.projectedTokenFile',
+};
+function helmSeedInstallationValuePairs(payload) {
+    return {
+        [exports.HELM_SEED_INSTALLATION_VALUES.mountPath]: seed_installation_files_1.SEED_HELM_INSTALLATION_MOUNT,
+        [exports.HELM_SEED_INSTALLATION_VALUES.inventoryConfigMap]: seed_facts_1.SEED_INVENTORY_CONFIGMAP_NAME,
+        [exports.HELM_SEED_INSTALLATION_VALUES.authMount]: payload.login.authMount,
+        [exports.HELM_SEED_INSTALLATION_VALUES.role]: payload.login.role,
+        [exports.HELM_SEED_INSTALLATION_VALUES.projectedTokenFile]: seed_installation_files_1.SEED_HELM_PROJECTED_TOKEN_FILE,
+    };
+}
+function seedInstallationManifest(namespace, installationId, payload) {
+    const labels = { 'app.kubernetes.io/managed-by': 'xema-cli', 'xema.installationId': installationId };
+    return JSON.stringify({
+        apiVersion: 'v1',
+        kind: 'List',
+        items: [
+            { apiVersion: 'v1', kind: 'Namespace', metadata: { name: namespace } },
+            {
+                apiVersion: 'v1',
+                kind: 'ConfigMap',
+                metadata: { name: seed_facts_1.SEED_INVENTORY_CONFIGMAP_NAME, namespace, labels },
+                data: { [seed_installation_files_1.HELM_INVENTORY_KEY]: payload.inventoryText },
+            },
+        ],
+    });
+}
+//# sourceMappingURL=seed-env-secret.js.map

package/dist/runtime/seed/seed-env-secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-env-secret.js","sourceRoot":"","sources":["../../../src/runtime/seed/seed-env-secret.ts"],"names":[],"mappings":";;;AAcA,sDAmBC;AAgBD,wEAQC;AAGD,4DAeC;AA3ED,6CAAgF;AAChF,uEAA6H;AAMhH,QAAA,wBAAwB,GAAG,mCAAmC,CAAC;AAO5E,SAAgB,qBAAqB,CAAC,SAAiB,EAAE,cAAsB,EAAE,OAAe,EAAE,GAAY;IAC5G,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,UAAU,EAAE,IAAI;QAChB,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE;YACL,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;YACtE;gBACE,UAAU,EAAE,IAAI;gBAChB,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE;oBACR,IAAI,EAAE,IAAA,8BAAiB,EAAC,OAAO,CAAC;oBAChC,SAAS;oBACT,MAAM,EAAE,EAAE,8BAA8B,EAAE,UAAU,EAAE,qBAAqB,EAAE,cAAc,EAAE;iBAC9F;gBACD,UAAU,EAAE,GAAG;aAChB;SACF;KACF,CAAC,CAAC;AACL,CAAC;AAGY,QAAA,6BAA6B,GAAG;IAC3C,SAAS,EAAE,gCAAgC;IAC3C,kBAAkB,EAAE,yCAAyC;IAC7D,SAAS,EAAE,wCAAwC;IACnD,IAAI,EAAE,mCAAmC;IACzC,kBAAkB,EAAE,iDAAiD;CAC7D,CAAC;AAOX,SAAgB,8BAA8B,CAAC,OAAgC;IAC7E,OAAO;QACL,CAAC,qCAA6B,CAAC,SAAS,CAAC,EAAE,sDAA4B;QACvE,CAAC,qCAA6B,CAAC,kBAAkB,CAAC,EAAE,0CAA6B;QACjF,CAAC,qCAA6B,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS;QAClE,CAAC,qCAA6B,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI;QACxD,CAAC,qCAA6B,CAAC,kBAAkB,CAAC,EAAE,wDAA8B;KACnF,CAAC;AACJ,CAAC;AAGD,SAAgB,wBAAwB,CAAC,SAAiB,EAAE,cAAsB,EAAE,OAAgC;IAClH,MAAM,MAAM,GAAG,EAAE,8BAA8B,EAAE,UAAU,EAAE,qBAAqB,EAAE,cAAc,EAAE,CAAC;IACrG,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,UAAU,EAAE,IAAI;QAChB,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE;YACL,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;YACtE;gBACE,UAAU,EAAE,IAAI;gBAChB,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,EAAE,IAAI,EAAE,0CAA6B,EAAE,SAAS,EAAE,MAAM,EAAE;gBACpE,IAAI,EAAE,EAAE,CAAC,4CAAkB,CAAC,EAAE,OAAO,CAAC,aAAa,EAAE;aACtD;SACF;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/seed/seed-environment.d.ts

@@ -0,0 +1,12 @@
+import { type MemberEnvironmentInstallation } from '@xemahq/installation-tenancy';
+import type { SubstrateFacts } from './substrate-facts';
+import type { SeedProcess } from '@xemahq/composed-process-host';
+export type SeedEnv = Readonly<Record<string, string>>;
+export interface SeedEnvironmentInput {
+    readonly installation: MemberEnvironmentInstallation;
+    readonly facts: SubstrateFacts;
+    readonly required: Readonly<Record<string, readonly string[]>>;
+}
+export declare function seedMembersWithDatabase(processes: readonly SeedProcess[]): string[];
+export declare function seedEnvironment(input: SeedEnvironmentInput): SeedEnv;
+//# sourceMappingURL=seed-environment.d.ts.map

package/dist/runtime/seed/seed-environment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-environment.d.ts","sourceRoot":"","sources":["../../../src/runtime/seed/seed-environment.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,6BAA6B,EAEnC,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAGjE,MAAM,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEvD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,YAAY,EAAE,6BAA6B,CAAC;IACrD,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAE/B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;CAChE;AAcD,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,SAAS,WAAW,EAAE,GAAG,MAAM,EAAE,CAMnF;AAUD,wBAAgB,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CA4CpE"}

package/dist/runtime/seed/seed-environment.js

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.seedMembersWithDatabase = seedMembersWithDatabase;
+exports.seedEnvironment = seedEnvironment;
+const installation_tenancy_1 = require("@xemahq/installation-tenancy");
+const POOLED_LEG_OWNER = 'pooled-leg';
+function componentOf(memberKey) {
+    const [, component] = memberKey.split('/');
+    if (component === undefined || component === '') {
+        throw new Error(`Seed member key "${memberKey}" is not <biomeId>/<componentKey>.`);
+    }
+    return component;
+}
+function seedMembersWithDatabase(processes) {
+    return processes
+        .flatMap((seedProcess) => Object.entries(seedProcess.requiredEnvVars))
+        .filter(([, names]) => names.includes(installation_tenancy_1.MemberEnvName.DatabaseUrl))
+        .map(([memberKey]) => componentOf(memberKey))
+        .sort();
+}
+function seedEnvironment(input) {
+    const env = {};
+    const owner = new Map();
+    const refusals = [];
+    const merge = (member, values) => {
+        for (const [name, value] of Object.entries(values)) {
+            const previous = env[name];
+            if (previous !== undefined && previous !== value) {
+                refusals.push({
+                    member,
+                    name,
+                    reason: `resolves differently from ${owner.get(name) ?? 'another member'}'s; the seed members share one process environment`,
+                });
+                continue;
+            }
+            env[name] = value;
+            owner.set(name, member);
+        }
+    };
+    for (const [memberKey, names] of Object.entries(input.required)) {
+        const member = componentOf(memberKey);
+        const fromFacts = names.filter((name) => input.facts[name] !== undefined);
+        const fromInstallation = names.filter((name) => !fromFacts.includes(name));
+        let built = {};
+        try {
+            built = (0, installation_tenancy_1.memberEnvironment)(input.installation, member, fromInstallation);
+        }
+        catch (error) {
+            if (!(error instanceof installation_tenancy_1.MemberEnvironmentError)) {
+                throw error;
+            }
+            refusals.push(...error.refusals);
+        }
+        const values = { ...built };
+        for (const name of fromFacts) {
+            values[name] = input.facts[name];
+        }
+        merge(member, values);
+    }
+    merge(POOLED_LEG_OWNER, (0, installation_tenancy_1.pooledLegEnvironment)(input.installation));
+    if (refusals.length > 0) {
+        throw new installation_tenancy_1.MemberEnvironmentError(refusals);
+    }
+    return env;
+}
+//# sourceMappingURL=seed-environment.js.map

package/dist/runtime/seed/seed-environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-environment.js","sourceRoot":"","sources":["../../../src/runtime/seed/seed-environment.ts"],"names":[],"mappings":";;AAkCA,0DAMC;AAUD,0CA4CC;AA9FD,uEAOsC;AAgBtC,MAAM,gBAAgB,GAAG,YAAY,CAAC;AAEtC,SAAS,WAAW,CAAC,SAAiB;IACpC,MAAM,CAAC,EAAE,SAAS,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,oBAAoB,SAAS,oCAAoC,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAGD,SAAgB,uBAAuB,CAAC,SAAiC;IACvE,OAAO,SAAS;SACb,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;SACrE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,oCAAa,CAAC,WAAW,CAAC,CAAC;SAChE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;SAC5C,IAAI,EAAE,CAAC;AACZ,CAAC;AAUD,SAAgB,eAAe,CAAC,KAA2B;IACzD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,QAAQ,GAA+B,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,CAAC,MAAc,EAAE,MAAwC,EAAQ,EAAE;QAC/E,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;gBACjD,QAAQ,CAAC,IAAI,CAAC;oBACZ,MAAM;oBACN,IAAI;oBACJ,MAAM,EAAE,6BAA6B,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,gBAAgB,oDAAoD;iBAC7H,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;YAClB,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CAAC;IACF,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChE,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAA4B,CAAC,KAAK,SAAS,CAAC,CAAC;QAClG,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3E,IAAI,KAAK,GAAqC,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,KAAK,GAAG,IAAA,wCAAiB,EAAC,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,6CAAsB,CAAC,EAAE,CAAC;gBAC/C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,MAAM,GAA2B,EAAE,GAAG,KAAK,EAAE,CAAC;QACpD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAA4B,CAAW,CAAC;QACrE,CAAC;QACD,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,gBAAgB,EAAE,IAAA,2CAAoB,EAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IAClE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,6CAAsB,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/runtime/seed/seed-facts.d.ts

@@ -0,0 +1,22 @@
+export declare const SEED_BIOME_HOST_PORT = 7354;
+export declare const SEED_EVENT_HUB_PORT = 3128;
+export declare const SEED_PROBE_PORT: 7399;
+export declare const SEED_COMPOSED_PROCESS_NAME = "xema-composed-process";
+export declare function seedEnvSecretName(process: string): string;
+export declare function seedProbePort(index: number): number;
+export declare const SEED_CONTAINER_BUNDLE_CACHE_DIR = "/var/lib/xema/biome-bundles";
+export declare const SEED_BUNDLE_VOLUME = "xema-seed-bundles";
+export declare const SEED_LOOPBACK_HOST = "127.0.0.1";
+export interface SeedHostPort {
+    readonly port: number;
+    readonly owner: string;
+}
+export declare const SEED_ROOT_HOST_PORTS: readonly SeedHostPort[];
+export declare function seedProcessHostPorts(process: {
+    readonly name: string;
+    readonly hostsRoot: boolean;
+}, index: number): SeedHostPort[];
+export declare function seedLoopbackUrl(port: number): string;
+export declare const SEED_INVENTORY_CONFIGMAP_NAME = "xema-composed-process-inventory";
+export declare function clusterServiceUrl(service: string, namespace: string, port?: number): string;
+//# sourceMappingURL=seed-facts.d.ts.map

package/dist/runtime/seed/seed-facts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-facts.d.ts","sourceRoot":"","sources":["../../../src/runtime/seed/seed-facts.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,oBAAoB,OAAO,CAAC;AACzC,eAAO,MAAM,mBAAmB,OAAO,CAAC;AAExC,eAAO,MAAM,eAAe,MAAqC,CAAC;AAQlE,eAAO,MAAM,0BAA0B,0BAA0B,CAAC;AAGlE,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEzD;AAGD,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnD;AAGD,eAAO,MAAM,+BAA+B,gCAAgC,CAAC;AAG7E,eAAO,MAAM,kBAAkB,sBAAsB,CAAC;AAEtD,eAAO,MAAM,kBAAkB,cAAc,CAAC;AAE9C,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAGD,eAAO,MAAM,oBAAoB,EAAE,SAAS,YAAY,EAGtB,CAAC;AAGnC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAAE,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,EAAE,CAKnI;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpD;AAGD,eAAO,MAAM,6BAA6B,oCAA4C,CAAC;AAGvF,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAE3F"}