@xemahq/xema 0.59.0 → 0.60.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -2
- package/dist/appliance-owner.d.ts.map +1 -1
- package/dist/appliance-owner.js +6 -6
- package/dist/appliance-owner.js.map +1 -1
- package/dist/assets/appliance-base/authorization.lock.json +5186 -0
- package/dist/assets/appliance-base/distribution.lock.json +760 -279
- package/dist/assets/appliance-base/images.lock.json +576 -513
- package/dist/assets/appliance-lean/authorization.lock.json +4648 -0
- package/dist/assets/appliance-lean/distribution.lock.json +641 -186
- package/dist/assets/appliance-lean/images.lock.json +574 -512
- package/dist/assets/boot-graph.json +33 -14
- package/dist/assets/distribution-assets.manifest.json +23 -20
- package/dist/cli.d.ts.map +1 -1
- package/dist/cli.js +7 -9
- package/dist/cli.js.map +1 -1
- package/dist/commands/biome-dev.d.ts.map +1 -1
- package/dist/commands/biome-dev.js +41 -137
- package/dist/commands/biome-dev.js.map +1 -1
- package/dist/commands/biome-lifecycle.d.ts +24 -0
- package/dist/commands/biome-lifecycle.d.ts.map +1 -0
- package/dist/commands/biome-lifecycle.js +253 -0
- package/dist/commands/biome-lifecycle.js.map +1 -0
- package/dist/commands/biome.d.ts +2 -4
- package/dist/commands/biome.d.ts.map +1 -1
- package/dist/commands/biome.js +61 -46
- package/dist/commands/biome.js.map +1 -1
- package/dist/commands/config.d.ts.map +1 -1
- package/dist/commands/config.js +96 -8
- package/dist/commands/config.js.map +1 -1
- package/dist/commands/doctor.d.ts.map +1 -1
- package/dist/commands/doctor.js +13 -20
- package/dist/commands/doctor.js.map +1 -1
- package/dist/commands/down.d.ts.map +1 -1
- package/dist/commands/down.js +14 -21
- package/dist/commands/down.js.map +1 -1
- package/dist/commands/init.d.ts.map +1 -1
- package/dist/commands/init.js +6 -3
- package/dist/commands/init.js.map +1 -1
- package/dist/commands/installation-tenancy.d.ts +11 -0
- package/dist/commands/installation-tenancy.d.ts.map +1 -0
- package/dist/commands/installation-tenancy.js +308 -0
- package/dist/commands/installation-tenancy.js.map +1 -0
- package/dist/commands/installation.d.ts.map +1 -1
- package/dist/commands/installation.js +19 -5
- package/dist/commands/installation.js.map +1 -1
- package/dist/commands/logs.d.ts +2 -0
- package/dist/commands/logs.d.ts.map +1 -1
- package/dist/commands/logs.js +41 -8
- package/dist/commands/logs.js.map +1 -1
- package/dist/commands/{dev.d.ts → mirror.d.ts} +1 -1
- package/dist/commands/mirror.d.ts.map +1 -0
- package/dist/commands/mirror.js +132 -0
- package/dist/commands/mirror.js.map +1 -0
- package/dist/commands/source.d.ts.map +1 -1
- package/dist/commands/source.js +3 -2
- package/dist/commands/source.js.map +1 -1
- package/dist/commands/status.d.ts.map +1 -1
- package/dist/commands/status.js +40 -21
- package/dist/commands/status.js.map +1 -1
- package/dist/commands/up.d.ts.map +1 -1
- package/dist/commands/up.js +36 -4
- package/dist/commands/up.js.map +1 -1
- package/dist/dev/infra-preflight.d.ts.map +1 -1
- package/dist/dev/infra-preflight.js +0 -4
- package/dist/dev/infra-preflight.js.map +1 -1
- package/dist/lib/confirm.d.ts +3 -0
- package/dist/lib/confirm.d.ts.map +1 -0
- package/dist/lib/confirm.js +19 -0
- package/dist/lib/confirm.js.map +1 -0
- package/dist/lib/output-format.d.ts +6 -0
- package/dist/lib/output-format.d.ts.map +1 -0
- package/dist/lib/output-format.js +20 -0
- package/dist/lib/output-format.js.map +1 -0
- package/dist/mirror/config/mirror-config-document.d.ts +18 -0
- package/dist/mirror/config/mirror-config-document.d.ts.map +1 -0
- package/dist/mirror/config/mirror-config-document.js +57 -0
- package/dist/mirror/config/mirror-config-document.js.map +1 -0
- package/dist/mirror/config/mirror-config-schema.d.ts +54 -0
- package/dist/mirror/config/mirror-config-schema.d.ts.map +1 -0
- package/dist/mirror/config/mirror-config-schema.js +80 -0
- package/dist/mirror/config/mirror-config-schema.js.map +1 -0
- package/dist/mirror/kit/delta.d.ts +4 -0
- package/dist/mirror/kit/delta.d.ts.map +1 -0
- package/dist/mirror/kit/delta.js +41 -0
- package/dist/mirror/kit/delta.js.map +1 -0
- package/dist/mirror/kit/export-kit.d.ts +16 -0
- package/dist/mirror/kit/export-kit.d.ts.map +1 -0
- package/dist/mirror/kit/export-kit.js +112 -0
- package/dist/mirror/kit/export-kit.js.map +1 -0
- package/dist/mirror/kit/import-kit.d.ts +9 -0
- package/dist/mirror/kit/import-kit.d.ts.map +1 -0
- package/dist/mirror/kit/import-kit.js +166 -0
- package/dist/mirror/kit/import-kit.js.map +1 -0
- package/dist/mirror/kit/kit-archive.d.ts +4 -0
- package/dist/mirror/kit/kit-archive.d.ts.map +1 -0
- package/dist/mirror/kit/kit-archive.js +38 -0
- package/dist/mirror/kit/kit-archive.js.map +1 -0
- package/dist/mirror/kit/kit-layout.d.ts +10 -0
- package/dist/mirror/kit/kit-layout.d.ts.map +1 -0
- package/dist/mirror/kit/kit-layout.js +19 -0
- package/dist/mirror/kit/kit-layout.js.map +1 -0
- package/dist/mirror/kit/kit-sums.d.ts +5 -0
- package/dist/mirror/kit/kit-sums.d.ts.map +1 -0
- package/dist/mirror/kit/kit-sums.js +63 -0
- package/dist/mirror/kit/kit-sums.js.map +1 -0
- package/dist/mirror/kit/layout-sync.d.ts +8 -0
- package/dist/mirror/kit/layout-sync.d.ts.map +1 -0
- package/dist/mirror/kit/layout-sync.js +58 -0
- package/dist/mirror/kit/layout-sync.js.map +1 -0
- package/dist/mirror/plan/bundle-content.d.ts +10 -0
- package/dist/mirror/plan/bundle-content.d.ts.map +1 -0
- package/dist/mirror/plan/bundle-content.js +61 -0
- package/dist/mirror/plan/bundle-content.js.map +1 -0
- package/dist/mirror/plan/declaration-file.d.ts +9 -0
- package/dist/mirror/plan/declaration-file.d.ts.map +1 -0
- package/dist/mirror/plan/declaration-file.js +27 -0
- package/dist/mirror/plan/declaration-file.js.map +1 -0
- package/dist/mirror/plan/edition-inputs.d.ts +57 -0
- package/dist/mirror/plan/edition-inputs.d.ts.map +1 -0
- package/dist/mirror/plan/edition-inputs.js +44 -0
- package/dist/mirror/plan/edition-inputs.js.map +1 -0
- package/dist/mirror/plan/edition-reader.d.ts +9 -0
- package/dist/mirror/plan/edition-reader.d.ts.map +1 -0
- package/dist/mirror/plan/edition-reader.js +47 -0
- package/dist/mirror/plan/edition-reader.js.map +1 -0
- package/dist/mirror/plan/image-content.d.ts +30 -0
- package/dist/mirror/plan/image-content.d.ts.map +1 -0
- package/dist/mirror/plan/image-content.js +120 -0
- package/dist/mirror/plan/image-content.js.map +1 -0
- package/dist/mirror/plan/npm-lockfile.d.ts +12 -0
- package/dist/mirror/plan/npm-lockfile.d.ts.map +1 -0
- package/dist/mirror/plan/npm-lockfile.js +106 -0
- package/dist/mirror/plan/npm-lockfile.js.map +1 -0
- package/dist/mirror/plan/oci-reads.d.ts +22 -0
- package/dist/mirror/plan/oci-reads.d.ts.map +1 -0
- package/dist/mirror/plan/oci-reads.js +43 -0
- package/dist/mirror/plan/oci-reads.js.map +1 -0
- package/dist/mirror/plan/plan-command.d.ts +22 -0
- package/dist/mirror/plan/plan-command.d.ts.map +1 -0
- package/dist/mirror/plan/plan-command.js +81 -0
- package/dist/mirror/plan/plan-command.js.map +1 -0
- package/dist/mirror/plan/plan-file.d.ts +13 -0
- package/dist/mirror/plan/plan-file.d.ts.map +1 -0
- package/dist/mirror/plan/plan-file.js +63 -0
- package/dist/mirror/plan/plan-file.js.map +1 -0
- package/dist/mirror/plan/resolve-content-set.d.ts +16 -0
- package/dist/mirror/plan/resolve-content-set.d.ts.map +1 -0
- package/dist/mirror/plan/resolve-content-set.js +90 -0
- package/dist/mirror/plan/resolve-content-set.js.map +1 -0
- package/dist/mirror/preflight/glob.d.ts +2 -0
- package/dist/mirror/preflight/glob.d.ts.map +1 -0
- package/dist/mirror/preflight/glob.js +59 -0
- package/dist/mirror/preflight/glob.js.map +1 -0
- package/dist/mirror/preflight/harbor-api.d.ts +27 -0
- package/dist/mirror/preflight/harbor-api.d.ts.map +1 -0
- package/dist/mirror/preflight/harbor-api.js +39 -0
- package/dist/mirror/preflight/harbor-api.js.map +1 -0
- package/dist/mirror/preflight/preflight.d.ts +18 -0
- package/dist/mirror/preflight/preflight.d.ts.map +1 -0
- package/dist/mirror/preflight/preflight.js +41 -0
- package/dist/mirror/preflight/preflight.js.map +1 -0
- package/dist/mirror/preflight/tag-moves.d.ts +16 -0
- package/dist/mirror/preflight/tag-moves.d.ts.map +1 -0
- package/dist/mirror/preflight/tag-moves.js +28 -0
- package/dist/mirror/preflight/tag-moves.js.map +1 -0
- package/dist/mirror/preflight/write-probe.d.ts +10 -0
- package/dist/mirror/preflight/write-probe.d.ts.map +1 -0
- package/dist/mirror/preflight/write-probe.js +36 -0
- package/dist/mirror/preflight/write-probe.js.map +1 -0
- package/dist/mirror/target/extras.d.ts +16 -0
- package/dist/mirror/target/extras.d.ts.map +1 -0
- package/dist/mirror/target/extras.js +47 -0
- package/dist/mirror/target/extras.js.map +1 -0
- package/dist/mirror/target/npm-registry.d.ts +20 -0
- package/dist/mirror/target/npm-registry.d.ts.map +1 -0
- package/dist/mirror/target/npm-registry.js +67 -0
- package/dist/mirror/target/npm-registry.js.map +1 -0
- package/dist/mirror/target/npm-sync.d.ts +15 -0
- package/dist/mirror/target/npm-sync.d.ts.map +1 -0
- package/dist/mirror/target/npm-sync.js +44 -0
- package/dist/mirror/target/npm-sync.js.map +1 -0
- package/dist/mirror/target/oci-items.d.ts +27 -0
- package/dist/mirror/target/oci-items.d.ts.map +1 -0
- package/dist/mirror/target/oci-items.js +79 -0
- package/dist/mirror/target/oci-items.js.map +1 -0
- package/dist/mirror/target/oci-sync.d.ts +20 -0
- package/dist/mirror/target/oci-sync.d.ts.map +1 -0
- package/dist/mirror/target/oci-sync.js +93 -0
- package/dist/mirror/target/oci-sync.js.map +1 -0
- package/dist/mirror/target/receipt-store.d.ts +13 -0
- package/dist/mirror/target/receipt-store.d.ts.map +1 -0
- package/dist/mirror/target/receipt-store.js +61 -0
- package/dist/mirror/target/receipt-store.js.map +1 -0
- package/dist/mirror/target/receipt.d.ts +13 -0
- package/dist/mirror/target/receipt.d.ts.map +1 -0
- package/dist/mirror/target/receipt.js +25 -0
- package/dist/mirror/target/receipt.js.map +1 -0
- package/dist/mirror/target/seed-push.d.ts +15 -0
- package/dist/mirror/target/seed-push.d.ts.map +1 -0
- package/dist/mirror/target/seed-push.js +20 -0
- package/dist/mirror/target/seed-push.js.map +1 -0
- package/dist/mirror/target/target-access.d.ts +7 -0
- package/dist/mirror/target/target-access.d.ts.map +1 -0
- package/dist/mirror/target/target-access.js +17 -0
- package/dist/mirror/target/target-access.js.map +1 -0
- package/dist/mirror/target/target-commands.d.ts +21 -0
- package/dist/mirror/target/target-commands.d.ts.map +1 -0
- package/dist/mirror/target/target-commands.js +134 -0
- package/dist/mirror/target/target-commands.js.map +1 -0
- package/dist/mirror/target/target-context.d.ts +11 -0
- package/dist/mirror/target/target-context.d.ts.map +1 -0
- package/dist/mirror/target/target-context.js +31 -0
- package/dist/mirror/target/target-context.js.map +1 -0
- package/dist/mirror/target/target-ports.d.ts +18 -0
- package/dist/mirror/target/target-ports.d.ts.map +1 -0
- package/dist/mirror/target/target-ports.js +49 -0
- package/dist/mirror/target/target-ports.js.map +1 -0
- package/dist/mirror/target/target-state.d.ts +22 -0
- package/dist/mirror/target/target-state.d.ts.map +1 -0
- package/dist/mirror/target/target-state.js +41 -0
- package/dist/mirror/target/target-state.js.map +1 -0
- package/dist/runtime/biome-dev.d.ts +0 -16
- package/dist/runtime/biome-dev.d.ts.map +1 -1
- package/dist/runtime/biome-dev.js +0 -53
- package/dist/runtime/biome-dev.js.map +1 -1
- package/dist/runtime/biome-host/biome-directory-packer.d.ts +3 -0
- package/dist/runtime/biome-host/biome-directory-packer.d.ts.map +1 -0
- package/dist/runtime/biome-host/biome-directory-packer.js +12 -0
- package/dist/runtime/biome-host/biome-directory-packer.js.map +1 -0
- package/dist/runtime/biome-host/bundle-packer.d.ts +8 -0
- package/dist/runtime/biome-host/bundle-packer.d.ts.map +1 -0
- package/dist/runtime/biome-host/bundle-packer.js +3 -0
- package/dist/runtime/biome-host/bundle-packer.js.map +1 -0
- package/dist/runtime/biome-host/from-spec.d.ts +33 -0
- package/dist/runtime/biome-host/from-spec.d.ts.map +1 -0
- package/dist/runtime/biome-host/from-spec.js +70 -0
- package/dist/runtime/biome-host/from-spec.js.map +1 -0
- package/dist/runtime/biome-host/lifecycle-client.d.ts +20 -0
- package/dist/runtime/biome-host/lifecycle-client.d.ts.map +1 -0
- package/dist/runtime/biome-host/lifecycle-client.js +197 -0
- package/dist/runtime/biome-host/lifecycle-client.js.map +1 -0
- package/dist/runtime/biome-host/lifecycle-contract.d.ts +95 -0
- package/dist/runtime/biome-host/lifecycle-contract.d.ts.map +1 -0
- package/dist/runtime/biome-host/lifecycle-contract.js +61 -0
- package/dist/runtime/biome-host/lifecycle-contract.js.map +1 -0
- package/dist/runtime/biome-host/lifecycle-flow.d.ts +29 -0
- package/dist/runtime/biome-host/lifecycle-flow.d.ts.map +1 -0
- package/dist/runtime/biome-host/lifecycle-flow.js +106 -0
- package/dist/runtime/biome-host/lifecycle-flow.js.map +1 -0
- package/dist/runtime/biome-host/plan-sources.d.ts +4 -0
- package/dist/runtime/biome-host/plan-sources.d.ts.map +1 -0
- package/dist/runtime/biome-host/plan-sources.js +26 -0
- package/dist/runtime/biome-host/plan-sources.js.map +1 -0
- package/dist/runtime/biome-host/relay/bundle-fetch.d.ts +12 -0
- package/dist/runtime/biome-host/relay/bundle-fetch.d.ts.map +1 -0
- package/dist/runtime/biome-host/relay/bundle-fetch.js +76 -0
- package/dist/runtime/biome-host/relay/bundle-fetch.js.map +1 -0
- package/dist/runtime/biome-host/relay/declared-scheme.d.ts +3 -0
- package/dist/runtime/biome-host/relay/declared-scheme.d.ts.map +1 -0
- package/dist/runtime/biome-host/relay/declared-scheme.js +14 -0
- package/dist/runtime/biome-host/relay/declared-scheme.js.map +1 -0
- package/dist/runtime/biome-host/relay/npm-token.d.ts +4 -0
- package/dist/runtime/biome-host/relay/npm-token.d.ts.map +1 -0
- package/dist/runtime/biome-host/relay/npm-token.js +16 -0
- package/dist/runtime/biome-host/relay/npm-token.js.map +1 -0
- package/dist/runtime/biome-host/relay/relay-flow.d.ts +16 -0
- package/dist/runtime/biome-host/relay/relay-flow.d.ts.map +1 -0
- package/dist/runtime/biome-host/relay/relay-flow.js +48 -0
- package/dist/runtime/biome-host/relay/relay-flow.js.map +1 -0
- package/dist/runtime/biome-host/source-staging.d.ts +17 -0
- package/dist/runtime/biome-host/source-staging.d.ts.map +1 -0
- package/dist/runtime/biome-host/source-staging.js +80 -0
- package/dist/runtime/biome-host/source-staging.js.map +1 -0
- package/dist/runtime/biome-host/sse.d.ts +2 -0
- package/dist/runtime/biome-host/sse.d.ts.map +1 -0
- package/dist/runtime/biome-host/sse.js +33 -0
- package/dist/runtime/biome-host/sse.js.map +1 -0
- package/dist/runtime/biome-local-install.js +1 -1
- package/dist/runtime/biome-local-install.js.map +1 -1
- package/dist/runtime/browser-origins.d.ts +9 -0
- package/dist/runtime/browser-origins.d.ts.map +1 -1
- package/dist/runtime/browser-origins.js +10 -0
- package/dist/runtime/browser-origins.js.map +1 -1
- package/dist/runtime/config/config-document.d.ts +10 -0
- package/dist/runtime/config/config-document.d.ts.map +1 -0
- package/dist/runtime/config/config-document.js +56 -0
- package/dist/runtime/config/config-document.js.map +1 -0
- package/dist/runtime/config/config-migrations.d.ts +21 -0
- package/dist/runtime/config/config-migrations.d.ts.map +1 -0
- package/dist/runtime/config/config-migrations.js +102 -0
- package/dist/runtime/config/config-migrations.js.map +1 -0
- package/dist/runtime/config/config-paths.d.ts +3 -0
- package/dist/runtime/config/config-paths.d.ts.map +1 -0
- package/dist/runtime/config/config-paths.js +9 -0
- package/dist/runtime/config/config-paths.js.map +1 -0
- package/dist/runtime/config/dev-mode.d.ts +0 -1
- package/dist/runtime/config/dev-mode.d.ts.map +1 -1
- package/dist/runtime/config/dev-mode.js +11 -27
- package/dist/runtime/config/dev-mode.js.map +1 -1
- package/dist/runtime/config/init-presets.js +5 -9
- package/dist/runtime/config/init-presets.js.map +1 -1
- package/dist/runtime/config/launch-config-help.d.ts +4 -0
- package/dist/runtime/config/launch-config-help.d.ts.map +1 -0
- package/dist/runtime/config/launch-config-help.js +42 -0
- package/dist/runtime/config/launch-config-help.js.map +1 -0
- package/dist/runtime/config/launch-config.d.ts +60 -0
- package/dist/runtime/config/launch-config.d.ts.map +1 -0
- package/dist/runtime/config/launch-config.js +123 -0
- package/dist/runtime/config/launch-config.js.map +1 -0
- package/dist/runtime/config/launch-schema.d.ts +18 -0
- package/dist/runtime/config/launch-schema.d.ts.map +1 -0
- package/dist/runtime/config/launch-schema.js +31 -0
- package/dist/runtime/config/launch-schema.js.map +1 -0
- package/dist/runtime/config/loader.d.ts.map +1 -1
- package/dist/runtime/config/loader.js +4 -14
- package/dist/runtime/config/loader.js.map +1 -1
- package/dist/runtime/config/schema.d.ts +43 -38
- package/dist/runtime/config/schema.d.ts.map +1 -1
- package/dist/runtime/config/schema.js +17 -46
- package/dist/runtime/config/schema.js.map +1 -1
- package/dist/runtime/config/sources-config.d.ts +0 -2
- package/dist/runtime/config/sources-config.d.ts.map +1 -1
- package/dist/runtime/config/sources-config.js +10 -29
- package/dist/runtime/config/sources-config.js.map +1 -1
- package/dist/runtime/config/versioned-document.d.ts +26 -0
- package/dist/runtime/config/versioned-document.d.ts.map +1 -0
- package/dist/runtime/config/versioned-document.js +87 -0
- package/dist/runtime/config/versioned-document.js.map +1 -0
- package/dist/runtime/directory-changes.d.ts +12 -0
- package/dist/runtime/directory-changes.d.ts.map +1 -0
- package/dist/runtime/directory-changes.js +62 -0
- package/dist/runtime/directory-changes.js.map +1 -0
- package/dist/runtime/foreground.d.ts +2 -0
- package/dist/runtime/foreground.d.ts.map +1 -1
- package/dist/runtime/foreground.js +5 -20
- package/dist/runtime/foreground.js.map +1 -1
- package/dist/runtime/infra/infra-runner.js +5 -5
- package/dist/runtime/infra/infra-runner.js.map +1 -1
- package/dist/runtime/infra/keycloak-realm.d.ts +3 -19
- package/dist/runtime/infra/keycloak-realm.d.ts.map +1 -1
- package/dist/runtime/infra/keycloak-realm.js +12 -133
- package/dist/runtime/infra/keycloak-realm.js.map +1 -1
- package/dist/runtime/installation/current-launcher-renderer.js.map +1 -1
- package/dist/runtime/installation/from-current-config.d.ts.map +1 -1
- package/dist/runtime/installation/from-current-config.js +24 -47
- package/dist/runtime/installation/from-current-config.js.map +1 -1
- package/dist/runtime/installation/index.d.ts +1 -0
- package/dist/runtime/installation/index.d.ts.map +1 -1
- package/dist/runtime/installation/index.js +1 -0
- package/dist/runtime/installation/index.js.map +1 -1
- package/dist/runtime/installation/installation-file.d.ts +3 -0
- package/dist/runtime/installation/installation-file.d.ts.map +1 -0
- package/dist/runtime/installation/installation-file.js +9 -0
- package/dist/runtime/installation/installation-file.js.map +1 -0
- package/dist/runtime/installation/readiness.d.ts +6 -7
- package/dist/runtime/installation/readiness.d.ts.map +1 -1
- package/dist/runtime/installation/readiness.js +82 -132
- package/dist/runtime/installation/readiness.js.map +1 -1
- package/dist/runtime/installation/state-store.d.ts +4 -0
- package/dist/runtime/installation/state-store.d.ts.map +1 -1
- package/dist/runtime/installation/state-store.js +22 -1
- package/dist/runtime/installation/state-store.js.map +1 -1
- package/dist/runtime/installation/to-current-config.d.ts +4 -1
- package/dist/runtime/installation/to-current-config.d.ts.map +1 -1
- package/dist/runtime/installation/to-current-config.js +10 -36
- package/dist/runtime/installation/to-current-config.js.map +1 -1
- package/dist/runtime/launch-plan-format.d.ts.map +1 -1
- package/dist/runtime/launch-plan-format.js +31 -6
- package/dist/runtime/launch-plan-format.js.map +1 -1
- package/dist/runtime/launch-result.d.ts +15 -0
- package/dist/runtime/launch-result.d.ts.map +1 -0
- package/dist/runtime/launch-result.js +3 -0
- package/dist/runtime/launch-result.js.map +1 -0
- package/dist/runtime/launch.d.ts +16 -5
- package/dist/runtime/launch.d.ts.map +1 -1
- package/dist/runtime/launch.js +151 -315
- package/dist/runtime/launch.js.map +1 -1
- package/dist/runtime/license/helm-pull-secret.d.ts +1 -1
- package/dist/runtime/license/helm-pull-secret.d.ts.map +1 -1
- package/dist/runtime/license/helm-pull-secret.js +2 -2
- package/dist/runtime/license/helm-pull-secret.js.map +1 -1
- package/dist/runtime/lifecycle-progress/index.d.ts +9 -0
- package/dist/runtime/lifecycle-progress/index.d.ts.map +1 -0
- package/dist/runtime/lifecycle-progress/index.js +30 -0
- package/dist/runtime/lifecycle-progress/index.js.map +1 -0
- package/dist/runtime/lifecycle-progress/json-renderer.d.ts +3 -0
- package/dist/runtime/lifecycle-progress/json-renderer.d.ts.map +1 -0
- package/dist/runtime/lifecycle-progress/json-renderer.js +27 -0
- package/dist/runtime/lifecycle-progress/json-renderer.js.map +1 -0
- package/dist/runtime/lifecycle-progress/text-renderer.d.ts +5 -0
- package/dist/runtime/lifecycle-progress/text-renderer.d.ts.map +1 -0
- package/dist/runtime/lifecycle-progress/text-renderer.js +83 -0
- package/dist/runtime/lifecycle-progress/text-renderer.js.map +1 -0
- package/dist/runtime/lifecycle-progress/types.d.ts +79 -0
- package/dist/runtime/lifecycle-progress/types.d.ts.map +1 -0
- package/dist/runtime/lifecycle-progress/types.js +32 -0
- package/dist/runtime/lifecycle-progress/types.js.map +1 -0
- package/dist/runtime/lock-loader.d.ts +13 -3
- package/dist/runtime/lock-loader.d.ts.map +1 -1
- package/dist/runtime/lock-loader.js +28 -8
- package/dist/runtime/lock-loader.js.map +1 -1
- package/dist/runtime/paths.d.ts +2 -0
- package/dist/runtime/paths.d.ts.map +1 -1
- package/dist/runtime/paths.js +17 -4
- package/dist/runtime/paths.js.map +1 -1
- package/dist/runtime/roster.d.ts +6 -5
- package/dist/runtime/roster.d.ts.map +1 -1
- package/dist/runtime/roster.js +0 -21
- package/dist/runtime/roster.js.map +1 -1
- package/dist/runtime/runner/container-preflight.d.ts +3 -2
- package/dist/runtime/runner/container-preflight.d.ts.map +1 -1
- package/dist/runtime/runner/container-preflight.js +5 -5
- package/dist/runtime/runner/container-preflight.js.map +1 -1
- package/dist/runtime/runner/container-runner.d.ts +0 -22
- package/dist/runtime/runner/container-runner.d.ts.map +1 -1
- package/dist/runtime/runner/container-runner.js +0 -112
- package/dist/runtime/runner/container-runner.js.map +1 -1
- package/dist/runtime/runner/docker-cli.d.ts +1 -0
- package/dist/runtime/runner/docker-cli.d.ts.map +1 -1
- package/dist/runtime/runner/docker-cli.js +19 -0
- package/dist/runtime/runner/docker-cli.js.map +1 -1
- package/dist/runtime/runner/helm-cli.d.ts +1 -0
- package/dist/runtime/runner/helm-cli.d.ts.map +1 -1
- package/dist/runtime/runner/helm-cli.js +5 -1
- package/dist/runtime/runner/helm-cli.js.map +1 -1
- package/dist/runtime/runner/helm-pre-install.d.ts +3 -2
- package/dist/runtime/runner/helm-pre-install.d.ts.map +1 -1
- package/dist/runtime/runner/helm-pre-install.js +3 -3
- package/dist/runtime/runner/helm-pre-install.js.map +1 -1
- package/dist/runtime/runner/helm-runner.d.ts +29 -4
- package/dist/runtime/runner/helm-runner.d.ts.map +1 -1
- package/dist/runtime/runner/helm-runner.js +44 -14
- package/dist/runtime/runner/helm-runner.js.map +1 -1
- package/dist/runtime/runner/kube-cli.d.ts +1 -0
- package/dist/runtime/runner/kube-cli.d.ts.map +1 -1
- package/dist/runtime/runner/kube-cli.js +24 -2
- package/dist/runtime/runner/kube-cli.js.map +1 -1
- package/dist/runtime/secrets/managed-local-key-provider.d.ts +2 -0
- package/dist/runtime/secrets/managed-local-key-provider.d.ts.map +1 -1
- package/dist/runtime/secrets/managed-local-key-provider.js +17 -8
- package/dist/runtime/secrets/managed-local-key-provider.js.map +1 -1
- package/dist/runtime/seed/closure-container.d.ts +8 -0
- package/dist/runtime/seed/closure-container.d.ts.map +1 -0
- package/dist/runtime/seed/closure-container.js +23 -0
- package/dist/runtime/seed/closure-container.js.map +1 -0
- package/dist/runtime/seed/closure-helm.d.ts +9 -0
- package/dist/runtime/seed/closure-helm.d.ts.map +1 -0
- package/dist/runtime/seed/closure-helm.js +16 -0
- package/dist/runtime/seed/closure-helm.js.map +1 -0
- package/dist/runtime/seed/closure-names.d.ts +4 -0
- package/dist/runtime/seed/closure-names.d.ts.map +1 -0
- package/dist/runtime/seed/closure-names.js +29 -0
- package/dist/runtime/seed/closure-names.js.map +1 -0
- package/dist/runtime/seed/closure-native.d.ts +3 -0
- package/dist/runtime/seed/closure-native.d.ts.map +1 -0
- package/dist/runtime/seed/closure-native.js +18 -0
- package/dist/runtime/seed/closure-native.js.map +1 -0
- package/dist/runtime/seed/installation-tar.d.ts +5 -0
- package/dist/runtime/seed/installation-tar.d.ts.map +1 -0
- package/dist/runtime/seed/installation-tar.js +30 -0
- package/dist/runtime/seed/installation-tar.js.map +1 -0
- package/dist/runtime/seed/launch-env.d.ts +42 -0
- package/dist/runtime/seed/launch-env.d.ts.map +1 -0
- package/dist/runtime/seed/launch-env.js +150 -0
- package/dist/runtime/seed/launch-env.js.map +1 -0
- package/dist/runtime/seed/seed-container.d.ts +13 -0
- package/dist/runtime/seed/seed-container.d.ts.map +1 -0
- package/dist/runtime/seed/seed-container.js +175 -0
- package/dist/runtime/seed/seed-container.js.map +1 -0
- package/dist/runtime/seed/seed-delivery-env.d.ts +39 -0
- package/dist/runtime/seed/seed-delivery-env.d.ts.map +1 -0
- package/dist/runtime/seed/seed-delivery-env.js +47 -0
- package/dist/runtime/seed/seed-delivery-env.js.map +1 -0
- package/dist/runtime/seed/seed-down.d.ts +2 -0
- package/dist/runtime/seed/seed-down.d.ts.map +1 -0
- package/dist/runtime/seed/seed-down.js +52 -0
- package/dist/runtime/seed/seed-down.js.map +1 -0
- package/dist/runtime/seed/seed-env-file.d.ts +3 -0
- package/dist/runtime/seed/seed-env-file.d.ts.map +1 -0
- package/dist/runtime/seed/seed-env-file.js +24 -0
- package/dist/runtime/seed/seed-env-file.js.map +1 -0
- package/dist/runtime/seed/seed-env-secret.d.ts +18 -0
- package/dist/runtime/seed/seed-env-secret.d.ts.map +1 -0
- package/dist/runtime/seed/seed-env-secret.js +62 -0
- package/dist/runtime/seed/seed-env-secret.js.map +1 -0
- package/dist/runtime/seed/seed-environment.d.ts +12 -0
- package/dist/runtime/seed/seed-environment.d.ts.map +1 -0
- package/dist/runtime/seed/seed-environment.js +66 -0
- package/dist/runtime/seed/seed-environment.js.map +1 -0
- package/dist/runtime/seed/seed-facts.d.ts +22 -0
- package/dist/runtime/seed/seed-facts.d.ts.map +1 -0
- package/dist/runtime/seed/seed-facts.js +40 -0
- package/dist/runtime/seed/seed-facts.js.map +1 -0
- package/dist/runtime/seed/seed-helm.d.ts +10 -0
- package/dist/runtime/seed/seed-helm.d.ts.map +1 -0
- package/dist/runtime/seed/seed-helm.js +74 -0
- package/dist/runtime/seed/seed-helm.js.map +1 -0
- package/dist/runtime/seed/seed-image-user.d.ts +6 -0
- package/dist/runtime/seed/seed-image-user.d.ts.map +1 -0
- package/dist/runtime/seed/seed-image-user.js +14 -0
- package/dist/runtime/seed/seed-image-user.js.map +1 -0
- package/dist/runtime/seed/seed-installation-files.d.ts +23 -0
- package/dist/runtime/seed/seed-installation-files.d.ts.map +1 -0
- package/dist/runtime/seed/seed-installation-files.js +51 -0
- package/dist/runtime/seed/seed-installation-files.js.map +1 -0
- package/dist/runtime/seed/seed-installation.d.ts +20 -0
- package/dist/runtime/seed/seed-installation.d.ts.map +1 -0
- package/dist/runtime/seed/seed-installation.js +36 -0
- package/dist/runtime/seed/seed-installation.js.map +1 -0
- package/dist/runtime/seed/seed-launcher.d.ts +14 -0
- package/dist/runtime/seed/seed-launcher.d.ts.map +1 -0
- package/dist/runtime/seed/seed-launcher.js +155 -0
- package/dist/runtime/seed/seed-launcher.js.map +1 -0
- package/dist/runtime/seed/seed-options.d.ts +22 -0
- package/dist/runtime/seed/seed-options.d.ts.map +1 -0
- package/dist/runtime/seed/seed-options.js +57 -0
- package/dist/runtime/seed/seed-options.js.map +1 -0
- package/dist/runtime/seed/seed-platform-endpoints.d.ts +8 -0
- package/dist/runtime/seed/seed-platform-endpoints.d.ts.map +1 -0
- package/dist/runtime/seed/seed-platform-endpoints.js +55 -0
- package/dist/runtime/seed/seed-platform-endpoints.js.map +1 -0
- package/dist/runtime/seed/seed-process.d.ts +22 -0
- package/dist/runtime/seed/seed-process.d.ts.map +1 -0
- package/dist/runtime/seed/seed-process.js +79 -0
- package/dist/runtime/seed/seed-process.js.map +1 -0
- package/dist/runtime/seed/seed-record.d.ts +101 -0
- package/dist/runtime/seed/seed-record.d.ts.map +1 -0
- package/dist/runtime/seed/seed-record.js +141 -0
- package/dist/runtime/seed/seed-record.js.map +1 -0
- package/dist/runtime/seed/seed-resolved-deployment.d.ts +14 -0
- package/dist/runtime/seed/seed-resolved-deployment.d.ts.map +1 -0
- package/dist/runtime/seed/seed-resolved-deployment.js +52 -0
- package/dist/runtime/seed/seed-resolved-deployment.js.map +1 -0
- package/dist/runtime/seed/substrate-facts.d.ts +52 -0
- package/dist/runtime/seed/substrate-facts.d.ts.map +1 -0
- package/dist/runtime/seed/substrate-facts.js +92 -0
- package/dist/runtime/seed/substrate-facts.js.map +1 -0
- package/dist/runtime/seed/supervisor-contract.d.ts +9 -0
- package/dist/runtime/seed/supervisor-contract.d.ts.map +1 -0
- package/dist/runtime/seed/supervisor-contract.js +68 -0
- package/dist/runtime/seed/supervisor-contract.js.map +1 -0
- package/dist/runtime/seed/workload-identity-facts.d.ts +17 -0
- package/dist/runtime/seed/workload-identity-facts.d.ts.map +1 -0
- package/dist/runtime/seed/workload-identity-facts.js +53 -0
- package/dist/runtime/seed/workload-identity-facts.js.map +1 -0
- package/dist/runtime/sources/schema.d.ts +2 -0
- package/dist/runtime/sources/schema.d.ts.map +1 -1
- package/dist/runtime/sources/schema.js +10 -9
- package/dist/runtime/sources/schema.js.map +1 -1
- package/dist/runtime/store-client.d.ts +0 -10
- package/dist/runtime/store-client.d.ts.map +1 -1
- package/dist/runtime/store-client.js +0 -5
- package/dist/runtime/store-client.js.map +1 -1
- package/dist/runtime/tenancy/identity-installer.d.ts +11 -0
- package/dist/runtime/tenancy/identity-installer.d.ts.map +1 -0
- package/dist/runtime/tenancy/identity-installer.js +39 -0
- package/dist/runtime/tenancy/identity-installer.js.map +1 -0
- package/dist/runtime/tenancy/import-cache.d.ts +5 -0
- package/dist/runtime/tenancy/import-cache.d.ts.map +1 -0
- package/dist/runtime/tenancy/import-cache.js +27 -0
- package/dist/runtime/tenancy/import-cache.js.map +1 -0
- package/dist/runtime/tenancy/openfga.d.ts +4 -0
- package/dist/runtime/tenancy/openfga.d.ts.map +1 -0
- package/dist/runtime/tenancy/openfga.js +29 -0
- package/dist/runtime/tenancy/openfga.js.map +1 -0
- package/dist/runtime/tenancy/servers.d.ts +18 -0
- package/dist/runtime/tenancy/servers.d.ts.map +1 -0
- package/dist/runtime/tenancy/servers.js +102 -0
- package/dist/runtime/tenancy/servers.js.map +1 -0
- package/dist/runtime/tenancy/session.d.ts +19 -0
- package/dist/runtime/tenancy/session.d.ts.map +1 -0
- package/dist/runtime/tenancy/session.js +79 -0
- package/dist/runtime/tenancy/session.js.map +1 -0
- package/dist/runtime/tenancy/specs.d.ts +27 -0
- package/dist/runtime/tenancy/specs.d.ts.map +1 -0
- package/dist/runtime/tenancy/specs.js +129 -0
- package/dist/runtime/tenancy/specs.js.map +1 -0
- package/examples/01-local-native.yaml +1 -3
- package/examples/02-local-container-full.yaml +0 -2
- package/examples/03-byo-infra.yaml +1 -5
- package/examples/06-biome-sources.yaml +1 -3
- package/package.json +32 -37
- package/xema.config.example.yaml +1 -10
- package/dist/assets/keycloak/realm-xema.json +0 -397
- package/dist/commands/dev.d.ts.map +0 -1
- package/dist/commands/dev.js +0 -196
- package/dist/commands/dev.js.map +0 -1
- package/dist/commands/edition.d.ts +0 -3
- package/dist/commands/edition.d.ts.map +0 -1
- package/dist/commands/edition.js +0 -54
- package/dist/commands/edition.js.map +0 -1
- package/dist/commands/serve.d.ts +0 -3
- package/dist/commands/serve.d.ts.map +0 -1
- package/dist/commands/serve.js +0 -114
- package/dist/commands/serve.js.map +0 -1
- package/dist/dev/carved-installs.d.ts +0 -3
- package/dist/dev/carved-installs.d.ts.map +0 -1
- package/dist/dev/carved-installs.js +0 -63
- package/dist/dev/carved-installs.js.map +0 -1
- package/dist/dev/env-defaults.d.ts +0 -15
- package/dist/dev/env-defaults.d.ts.map +0 -1
- package/dist/dev/env-defaults.js +0 -178
- package/dist/dev/env-defaults.js.map +0 -1
- package/dist/dev/forked-worker-bootstrap-protocol.d.ts +0 -17
- package/dist/dev/forked-worker-bootstrap-protocol.d.ts.map +0 -1
- package/dist/dev/forked-worker-bootstrap-protocol.js +0 -35
- package/dist/dev/forked-worker-bootstrap-protocol.js.map +0 -1
- package/dist/dev/forked-worker-bootstrap.d.ts +0 -18
- package/dist/dev/forked-worker-bootstrap.d.ts.map +0 -1
- package/dist/dev/forked-worker-bootstrap.js +0 -84
- package/dist/dev/forked-worker-bootstrap.js.map +0 -1
- package/dist/dev/forked-worker.d.ts +0 -43
- package/dist/dev/forked-worker.d.ts.map +0 -1
- package/dist/dev/forked-worker.js +0 -358
- package/dist/dev/forked-worker.js.map +0 -1
- package/dist/edition/verify-image-evidence.bundle.mjs +0 -70456
- package/dist/edition/verify-image-evidence.bundle.provenance.json +0 -3957
- package/dist/runtime/backing-registration.d.ts +0 -11
- package/dist/runtime/backing-registration.d.ts.map +0 -1
- package/dist/runtime/backing-registration.js +0 -94
- package/dist/runtime/backing-registration.js.map +0 -1
- package/dist/runtime/edition/run-entry.d.ts +0 -9
- package/dist/runtime/edition/run-entry.d.ts.map +0 -1
- package/dist/runtime/edition/run-entry.js +0 -36
- package/dist/runtime/edition/run-entry.js.map +0 -1
- package/dist/runtime/edition/verb-map.d.ts +0 -70
- package/dist/runtime/edition/verb-map.d.ts.map +0 -1
- package/dist/runtime/edition/verb-map.js +0 -166
- package/dist/runtime/edition/verb-map.js.map +0 -1
- package/dist/runtime/env-seeder.d.ts +0 -26
- package/dist/runtime/env-seeder.d.ts.map +0 -1
- package/dist/runtime/env-seeder.js +0 -340
- package/dist/runtime/env-seeder.js.map +0 -1
- package/dist/runtime/port-map.d.ts +0 -3
- package/dist/runtime/port-map.d.ts.map +0 -1
- package/dist/runtime/port-map.js +0 -25
- package/dist/runtime/port-map.js.map +0 -1
- package/dist/runtime/run-manifest.d.ts +0 -52
- package/dist/runtime/run-manifest.d.ts.map +0 -1
- package/dist/runtime/run-manifest.js +0 -585
- package/dist/runtime/run-manifest.js.map +0 -1
- package/dist/runtime/runner/native-runner.d.ts +0 -13
- package/dist/runtime/runner/native-runner.d.ts.map +0 -1
- package/dist/runtime/runner/native-runner.js +0 -94
- package/dist/runtime/runner/native-runner.js.map +0 -1
- package/dist/runtime/runner/service-runner.d.ts +0 -28
- package/dist/runtime/runner/service-runner.d.ts.map +0 -1
- package/dist/runtime/runner/service-runner.js +0 -10
- package/dist/runtime/runner/service-runner.js.map +0 -1
- package/dist/runtime/secrets/generated-platform-secrets.d.ts +0 -16
- package/dist/runtime/secrets/generated-platform-secrets.d.ts.map +0 -1
- package/dist/runtime/secrets/generated-platform-secrets.js +0 -115
- package/dist/runtime/secrets/generated-platform-secrets.js.map +0 -1
- package/dist/runtime/secrets/resolver.d.ts +0 -23
- package/dist/runtime/secrets/resolver.d.ts.map +0 -1
- package/dist/runtime/secrets/resolver.js +0 -266
- package/dist/runtime/secrets/resolver.js.map +0 -1
- package/dist/runtime/supervisor.d.ts +0 -67
- package/dist/runtime/supervisor.d.ts.map +0 -1
- package/dist/runtime/supervisor.js +0 -227
- package/dist/runtime/supervisor.js.map +0 -1
- package/edition/README.md +0 -293
- package/edition/adapter-bundled-versions.mjs +0 -108
- package/edition/adapter-host-versions.mjs +0 -41
- package/edition/assemble-producer-input.mjs +0 -1414
- package/edition/assemble-third-party-input.mjs +0 -336
- package/edition/authored-source-check.mjs +0 -135
- package/edition/authorization-base.mjs +0 -357
- package/edition/biome-content.mjs +0 -327
- package/edition/build-biome-index.mjs +0 -180
- package/edition/build-ledger-completeness.mjs +0 -67
- package/edition/build-ledger.mjs +0 -107
- package/edition/build-platform-service-index.mjs +0 -292
- package/edition/build-runtime-image-source-index.mjs +0 -1187
- package/edition/built-verifier.mjs +0 -55
- package/edition/candidate-edition.mjs +0 -697
- package/edition/canonical-evidence-json.mjs +0 -82
- package/edition/canonical-repository-url.mjs +0 -47
- package/edition/catalogue-edition.mjs +0 -49
- package/edition/catalogue-evidence.mjs +0 -228
- package/edition/catalogue-fetch.mjs +0 -124
- package/edition/catalogue-lock-field.mjs +0 -41
- package/edition/catalogue-pin.mjs +0 -71
- package/edition/catalogue.mjs +0 -223
- package/edition/chart-set-source-commit.mjs +0 -97
- package/edition/check-committed-image-evidence.mjs +0 -412
- package/edition/checkout-indexed-source-repositories.mjs +0 -283
- package/edition/collected-refusals.mjs +0 -59
- package/edition/comment-blanker.mjs +0 -75
- package/edition/connector-source-authority.mjs +0 -60
- package/edition/contract-authority.mjs +0 -122
- package/edition/cosign-certificate-constraints.mjs +0 -50
- package/edition/cross-repo-build-inputs.mjs +0 -158
- package/edition/customer-definition.mjs +0 -174
- package/edition/customer-edition-verbs.mjs +0 -617
- package/edition/customer-flags.mjs +0 -15
- package/edition/develop-catalogue-free-resolve.mjs +0 -280
- package/edition/develop-chart-roster.mjs +0 -96
- package/edition/develop-chart-set.mjs +0 -147
- package/edition/develop-coverage-readers.mjs +0 -217
- package/edition/develop-coverage-run.mjs +0 -50
- package/edition/develop-coverage-verdict.mjs +0 -153
- package/edition/develop-coverage.mjs +0 -131
- package/edition/develop-current-resolution.mjs +0 -29
- package/edition/develop-edition-invariants.mjs +0 -142
- package/edition/develop-edition-resolve.mjs +0 -211
- package/edition/develop-edition.mjs +0 -379
- package/edition/develop-engine-image.mjs +0 -95
- package/edition/develop-follow.mjs +0 -491
- package/edition/develop-freeze.mjs +0 -289
- package/edition/develop-git-bundles.mjs +0 -255
- package/edition/develop-graph.mjs +0 -28
- package/edition/develop-image-coordinate.mjs +0 -54
- package/edition/develop-image-probe.mjs +0 -120
- package/edition/develop-image-record.mjs +0 -194
- package/edition/develop-record-ancestry.mjs +0 -144
- package/edition/develop-record-verify.mjs +0 -216
- package/edition/develop-resolve-report.mjs +0 -159
- package/edition/develop-select-records.mjs +0 -172
- package/edition/develop-selection-line.mjs +0 -30
- package/edition/develop-selection-pins.mjs +0 -36
- package/edition/develop-snapshot-inputs.mjs +0 -93
- package/edition/develop-verify-image-record.mjs +0 -109
- package/edition/dispatched-runtime-components.mjs +0 -172
- package/edition/dist-check.mjs +0 -1137
- package/edition/distribution-evidence-set.mjs +0 -1064
- package/edition/distribution-paths.mjs +0 -191
- package/edition/edition-artifact.mjs +0 -529
- package/edition/edition-biome-manifests.mjs +0 -85
- package/edition/edition-ceiling.mjs +0 -180
- package/edition/edition-channel.mjs +0 -20
- package/edition/edition-chart-set.mjs +0 -104
- package/edition/edition-config.mjs +0 -374
- package/edition/edition-constants.mjs +0 -110
- package/edition/edition-contract-parse.mjs +0 -179
- package/edition/edition-contract.json +0 -100
- package/edition/edition-image-seal.mjs +0 -110
- package/edition/edition-kind.mjs +0 -10
- package/edition/edition-list.mjs +0 -35
- package/edition/edition-locks.mjs +0 -79
- package/edition/edition-pin-verbs.mjs +0 -183
- package/edition/edition-pin.mjs +0 -17
- package/edition/edition-pinned-inputs.mjs +0 -116
- package/edition/edition-protocol.mjs +0 -277
- package/edition/edition-publisher.mjs +0 -21
- package/edition/edition-seal.mjs +0 -257
- package/edition/edition-source-pins.mjs +0 -211
- package/edition/edition-unpin.mjs +0 -16
- package/edition/edition-workspace.mjs +0 -204
- package/edition/evidence-checkout.mjs +0 -439
- package/edition/evidence-grammars.mjs +0 -18
- package/edition/evidence-input-mode.mjs +0 -136
- package/edition/evidence-trust-pin.mjs +0 -380
- package/edition/evidence-trust-policy.mjs +0 -374
- package/edition/external-source-walk.mjs +0 -485
- package/edition/first-party-source-ids.mjs +0 -62
- package/edition/fleet-coordinate-finality.mjs +0 -363
- package/edition/fulcio-certificate-extensions.mjs +0 -231
- package/edition/git-json.mjs +0 -54
- package/edition/git-source-auth.mjs +0 -131
- package/edition/image-delivery-entitlement-descriptor.mjs +0 -106
- package/edition/image-evidence-replay-state.mjs +0 -242
- package/edition/image-evidence.mjs +0 -1404
- package/edition/image-lock-service-rows.mjs +0 -26
- package/edition/image-subject-identity.mjs +0 -24
- package/edition/images-from-record.mjs +0 -298
- package/edition/indexes-at-pins.mjs +0 -13
- package/edition/kernel-capability-domain.mjs +0 -30
- package/edition/kernel-contract-authority.mjs +0 -517
- package/edition/kernel-contract-source-path-set.mjs +0 -94
- package/edition/kernel-package.mjs +0 -206
- package/edition/kernel-protocol-choice.mjs +0 -239
- package/edition/kernel-signer-kind.mjs +0 -23
- package/edition/lib.mjs +0 -3303
- package/edition/locked-bundle-signer.mjs +0 -297
- package/edition/map-with-concurrency.mjs +0 -19
- package/edition/no-follow-file.mjs +0 -94
- package/edition/oci-evidence-verbs.mjs +0 -419
- package/edition/oci-image-source-evidence.mjs +0 -364
- package/edition/operation-grant-admission.mjs +0 -285
- package/edition/operation-requirements.mjs +0 -282
- package/edition/oras-process.mjs +0 -35
- package/edition/oras.mjs +0 -742
- package/edition/pin-source.mjs +0 -242
- package/edition/pinned-cosign.mjs +0 -70
- package/edition/plan-image-evidence-refresh.mjs +0 -427
- package/edition/platform-lock-readability.mjs +0 -901
- package/edition/platform-service-class.mjs +0 -85
- package/edition/platform-service-ownership.mjs +0 -88
- package/edition/platform-service-source-authority.mjs +0 -105
- package/edition/positive-closure.mjs +0 -162
- package/edition/previous-seal-registry.mjs +0 -149
- package/edition/produce-distribution-completeness-evidence.mjs +0 -318
- package/edition/produce-edition-catalogue-evidence.mjs +0 -252
- package/edition/produce-image-delivery-entitlement-evidence.mjs +0 -304
- package/edition/produce-image-source-evidence.mjs +0 -788
- package/edition/producer-evidence-bundle.mjs +0 -201
- package/edition/producer-evidence-index-file.mjs +0 -4
- package/edition/record-refused.mjs +0 -12
- package/edition/registry-credentials.mjs +0 -225
- package/edition/release-catalogue.mjs +0 -47
- package/edition/release-channel-guard.mjs +0 -108
- package/edition/release-edition-artifact.mjs +0 -152
- package/edition/release-edition.mjs +0 -54
- package/edition/remedy-command.mjs +0 -89
- package/edition/repin-evidence-trust.mjs +0 -109
- package/edition/required-resource-provider.mjs +0 -58
- package/edition/resolve-chart-set.mjs +0 -376
- package/edition/resolve-customer-edition.mjs +0 -374
- package/edition/resolve-distribution.mjs +0 -2639
- package/edition/resolve-edition.mjs +0 -192
- package/edition/resolve-images.mjs +0 -2294
- package/edition/seal-image-digests.mjs +0 -954
- package/edition/sealed-distribution-lock.mjs +0 -22
- package/edition/sealed-evidence-accept.mjs +0 -82
- package/edition/shallow-checkout.mjs +0 -18
- package/edition/sigstore-bundle-media-type.mjs +0 -4
- package/edition/source-authority.mjs +0 -713
- package/edition/source-closure.mjs +0 -115
- package/edition/store-publisher-trust.mjs +0 -40
- package/edition/strict-json.mjs +0 -121
- package/edition/string-order.mjs +0 -5
- package/edition/third-party-admission.mjs +0 -91
- package/edition/third-party-bundle-registry.mjs +0 -242
- package/edition/third-party-certificate-extensions.mjs +0 -21
- package/edition/third-party-image-pins.mjs +0 -41
- package/edition/third-party-pins-trusted.mjs +0 -24
- package/edition/third-party-producer-evidence.mjs +0 -76
- package/edition/third-party-source-check.mjs +0 -28
- package/edition/third-party-source-context.mjs +0 -41
- package/edition/third-party-source-evidence.mjs +0 -287
- package/edition/third-party-source-flags.mjs +0 -134
- package/edition/third-party-source-pins.mjs +0 -259
- package/edition/third-party-source-uniqueness.mjs +0 -54
- package/edition/third-party-source-walk.mjs +0 -115
- package/edition/third-party-source-writer.mjs +0 -213
- package/edition/third-party-subjects.mjs +0 -128
- package/edition/trust-policy-arming-verb.mjs +0 -60
- package/edition/trust-policy-arming.mjs +0 -144
- package/edition/trust-policy-image-ownership.mjs +0 -85
- package/edition/trusted-executable.mjs +0 -166
- package/edition/verifier-binding.mjs +0 -45
- package/edition/verifier-files.mjs +0 -8
- package/edition/verifier-kernel-schemas.mjs +0 -22
- package/edition/verifier-provenance.mjs +0 -64
- package/edition/verify-catalogue-evidence.mjs +0 -247
- package/edition/verify-image-evidence.mjs +0 -475
- package/edition/verify-image-platforms.mjs +0 -523
- package/edition/why.mjs +0 -56
- package/edition/workspace-sections.mjs +0 -276
|
@@ -0,0 +1,40 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.SEED_INVENTORY_CONFIGMAP_NAME = exports.SEED_ROOT_HOST_PORTS = exports.SEED_LOOPBACK_HOST = exports.SEED_BUNDLE_VOLUME = exports.SEED_CONTAINER_BUNDLE_CACHE_DIR = exports.SEED_COMPOSED_PROCESS_NAME = exports.SEED_PROBE_PORT = exports.SEED_EVENT_HUB_PORT = exports.SEED_BIOME_HOST_PORT = void 0;
|
|
4
|
+
exports.seedEnvSecretName = seedEnvSecretName;
|
|
5
|
+
exports.seedProbePort = seedProbePort;
|
|
6
|
+
exports.seedProcessHostPorts = seedProcessHostPorts;
|
|
7
|
+
exports.seedLoopbackUrl = seedLoopbackUrl;
|
|
8
|
+
exports.clusterServiceUrl = clusterServiceUrl;
|
|
9
|
+
const xema_service_nest_1 = require("@xemahq/xema-service-nest");
|
|
10
|
+
exports.SEED_BIOME_HOST_PORT = 7354;
|
|
11
|
+
exports.SEED_EVENT_HUB_PORT = 3128;
|
|
12
|
+
exports.SEED_PROBE_PORT = xema_service_nest_1.SEED_SUPERVISOR_DEFAULTS.probePort;
|
|
13
|
+
exports.SEED_COMPOSED_PROCESS_NAME = 'xema-composed-process';
|
|
14
|
+
function seedEnvSecretName(process) {
|
|
15
|
+
return `${process}-env`;
|
|
16
|
+
}
|
|
17
|
+
function seedProbePort(index) {
|
|
18
|
+
return exports.SEED_PROBE_PORT - index;
|
|
19
|
+
}
|
|
20
|
+
exports.SEED_CONTAINER_BUNDLE_CACHE_DIR = '/var/lib/xema/biome-bundles';
|
|
21
|
+
exports.SEED_BUNDLE_VOLUME = 'xema-seed-bundles';
|
|
22
|
+
exports.SEED_LOOPBACK_HOST = '127.0.0.1';
|
|
23
|
+
exports.SEED_ROOT_HOST_PORTS = Object.freeze([
|
|
24
|
+
{ port: exports.SEED_BIOME_HOST_PORT, owner: 'biome-host-api' },
|
|
25
|
+
{ port: exports.SEED_EVENT_HUB_PORT, owner: 'event-hub-api' },
|
|
26
|
+
].sort((a, b) => a.port - b.port));
|
|
27
|
+
function seedProcessHostPorts(process, index) {
|
|
28
|
+
return [
|
|
29
|
+
...(process.hostsRoot ? exports.SEED_ROOT_HOST_PORTS : []),
|
|
30
|
+
{ port: seedProbePort(index), owner: `${process.name} probe` },
|
|
31
|
+
].sort((a, b) => a.port - b.port);
|
|
32
|
+
}
|
|
33
|
+
function seedLoopbackUrl(port) {
|
|
34
|
+
return `http://${exports.SEED_LOOPBACK_HOST}:${String(port)}`;
|
|
35
|
+
}
|
|
36
|
+
exports.SEED_INVENTORY_CONFIGMAP_NAME = `${exports.SEED_COMPOSED_PROCESS_NAME}-inventory`;
|
|
37
|
+
function clusterServiceUrl(service, namespace, port) {
|
|
38
|
+
return `http://${service}.${namespace}.svc.cluster.local${port === undefined ? '' : `:${String(port)}`}`;
|
|
39
|
+
}
|
|
40
|
+
//# sourceMappingURL=seed-facts.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"seed-facts.js","sourceRoot":"","sources":["../../../src/runtime/seed/seed-facts.ts"],"names":[],"mappings":";;;AAqBA,8CAEC;AAGD,sCAEC;AAsBD,oDAKC;AAED,0CAEC;AAMD,8CAEC;AAnED,iEAAqE;AAOxD,QAAA,oBAAoB,GAAG,IAAI,CAAC;AAC5B,QAAA,mBAAmB,GAAG,IAAI,CAAC;AAE3B,QAAA,eAAe,GAAG,4CAAwB,CAAC,SAAS,CAAC;AAQrD,QAAA,0BAA0B,GAAG,uBAAuB,CAAC;AAGlE,SAAgB,iBAAiB,CAAC,OAAe;IAC/C,OAAO,GAAG,OAAO,MAAM,CAAC;AAC1B,CAAC;AAGD,SAAgB,aAAa,CAAC,KAAa;IACzC,OAAO,uBAAe,GAAG,KAAK,CAAC;AACjC,CAAC;AAGY,QAAA,+BAA+B,GAAG,6BAA6B,CAAC;AAGhE,QAAA,kBAAkB,GAAG,mBAAmB,CAAC;AAEzC,QAAA,kBAAkB,GAAG,WAAW,CAAC;AAQjC,QAAA,oBAAoB,GAA4B,MAAM,CAAC,MAAM,CAAC;IACzE,EAAE,IAAI,EAAE,4BAAoB,EAAE,KAAK,EAAE,gBAAgB,EAAE;IACvD,EAAE,IAAI,EAAE,2BAAmB,EAAE,KAAK,EAAE,eAAe,EAAE;CACtD,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAGnC,SAAgB,oBAAoB,CAAC,OAA+D,EAAE,KAAa;IACjH,OAAO;QACL,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,4BAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,EAAE,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,IAAI,QAAQ,EAAE;KAC/D,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,SAAgB,eAAe,CAAC,IAAY;IAC1C,OAAO,UAAU,0BAAkB,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;AACxD,CAAC;AAGY,QAAA,6BAA6B,GAAG,GAAG,kCAA0B,YAAY,CAAC;AAGvF,SAAgB,iBAAiB,CAAC,OAAe,EAAE,SAAiB,EAAE,IAAa;IACjF,OAAO,UAAU,OAAO,IAAI,SAAS,qBAAqB,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;AAC3G,CAAC"}
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
import type { HelmSeedProcessDelivery } from './launch-env';
|
|
2
|
+
import type { SeedLaunchInput } from './seed-launcher';
|
|
3
|
+
import type { LaunchHandle } from '../launch';
|
|
4
|
+
import type { HelmRunner } from '../runner/helm-runner';
|
|
5
|
+
export interface SeedHelmInput extends SeedLaunchInput {
|
|
6
|
+
readonly deliveries: readonly HelmSeedProcessDelivery[];
|
|
7
|
+
readonly runner: HelmRunner;
|
|
8
|
+
}
|
|
9
|
+
export declare function launchSeedRelease(input: SeedHelmInput): Promise<LaunchHandle>;
|
|
10
|
+
//# sourceMappingURL=seed-helm.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"seed-helm.d.ts","sourceRoot":"","sources":["../../../src/runtime/seed/seed-helm.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAY,MAAM,WAAW,CAAC;AAExD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,WAAW,aAAc,SAAQ,eAAe;IAEpD,QAAQ,CAAC,UAAU,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACxD,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC7B;AAkBD,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAyDnF"}
|
|
@@ -0,0 +1,74 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.launchSeedRelease = launchSeedRelease;
|
|
4
|
+
const closure_names_1 = require("./closure-names");
|
|
5
|
+
const seed_facts_1 = require("./seed-facts");
|
|
6
|
+
const seed_options_1 = require("./seed-options");
|
|
7
|
+
const supervisor_contract_1 = require("./supervisor-contract");
|
|
8
|
+
const cleanup_1 = require("../cleanup");
|
|
9
|
+
const BIOME_HOST_SERVICE_PORT = { name: 'biome-host', port: seed_facts_1.SEED_BIOME_HOST_PORT };
|
|
10
|
+
async function launchSeedRelease(input) {
|
|
11
|
+
const { plan, installationId, log, deliveries } = input;
|
|
12
|
+
const image = plan.seedImage;
|
|
13
|
+
if (plan.seed === undefined || image === undefined) {
|
|
14
|
+
throw new Error('A Helm launch plan carries no seed launch options or no seed image.');
|
|
15
|
+
}
|
|
16
|
+
if (plan.helmNamespace === undefined) {
|
|
17
|
+
throw new Error('A Helm launch plan carries no release namespace.');
|
|
18
|
+
}
|
|
19
|
+
const base = plan.seed;
|
|
20
|
+
const namespace = plan.helmNamespace;
|
|
21
|
+
const rootProcess = (0, closure_names_1.rootSeedProcess)(deliveries.map((delivery) => delivery.process)).name;
|
|
22
|
+
const installed = [];
|
|
23
|
+
try {
|
|
24
|
+
for (const [index, delivery] of deliveries.entries()) {
|
|
25
|
+
const options = (0, seed_options_1.helmSeedProcessLaunchOptions)(base, delivery.process, index, { rootProcess, namespace });
|
|
26
|
+
const running = await input.runner.installSeed({
|
|
27
|
+
release: delivery.process.name,
|
|
28
|
+
image,
|
|
29
|
+
args: (0, supervisor_contract_1.supervisorArgv)(options),
|
|
30
|
+
probePort: options.probePort,
|
|
31
|
+
installationId,
|
|
32
|
+
planHash: input.planHash,
|
|
33
|
+
executionId: input.executionId,
|
|
34
|
+
env: delivery.env,
|
|
35
|
+
installation: delivery.installation,
|
|
36
|
+
servicePorts: delivery.process.hostsRoot ? [BIOME_HOST_SERVICE_PORT] : [],
|
|
37
|
+
});
|
|
38
|
+
installed.push(running);
|
|
39
|
+
log(`seed : installed Helm release ${running.name}`);
|
|
40
|
+
}
|
|
41
|
+
}
|
|
42
|
+
catch (error) {
|
|
43
|
+
try {
|
|
44
|
+
await uninstallInReverse(installed);
|
|
45
|
+
}
|
|
46
|
+
catch (cleanupError) {
|
|
47
|
+
throw (0, cleanup_1.combineOperationAndCleanupErrors)('seed release install', error, cleanupError);
|
|
48
|
+
}
|
|
49
|
+
throw error;
|
|
50
|
+
}
|
|
51
|
+
const seeds = installed.map((running) => ({
|
|
52
|
+
name: running.name,
|
|
53
|
+
handle: running.handle,
|
|
54
|
+
probeUrl: running.url,
|
|
55
|
+
logs: `xema logs ${running.name}`,
|
|
56
|
+
}));
|
|
57
|
+
return {
|
|
58
|
+
result: { running: installed, skipped: [] },
|
|
59
|
+
plan,
|
|
60
|
+
installationId,
|
|
61
|
+
planHash: input.planHash,
|
|
62
|
+
executionId: input.executionId,
|
|
63
|
+
roster: plan.roster,
|
|
64
|
+
seeds,
|
|
65
|
+
shutdown: () => uninstallInReverse(installed),
|
|
66
|
+
};
|
|
67
|
+
}
|
|
68
|
+
async function uninstallInReverse(installed) {
|
|
69
|
+
await (0, cleanup_1.runCleanupOperations)([...installed].reverse().map((running) => ({
|
|
70
|
+
operation: `uninstall release ${running.name}`,
|
|
71
|
+
run: () => running.close(),
|
|
72
|
+
})));
|
|
73
|
+
}
|
|
74
|
+
//# sourceMappingURL=seed-helm.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"seed-helm.js","sourceRoot":"","sources":["../../../src/runtime/seed/seed-helm.ts"],"names":[],"mappings":";;AAkCA,8CAyDC;AA3FD,mDAAkD;AAClD,6CAAoD;AACpD,iDAA8D;AAC9D,+DAAuD;AACvD,wCAAoF;AAepF,MAAM,uBAAuB,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,iCAAoB,EAAW,CAAC;AAerF,KAAK,UAAU,iBAAiB,CAAC,KAAoB;IAC1D,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;IAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC;IACrC,MAAM,WAAW,GAAG,IAAA,+BAAe,EAAC,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAEzF,MAAM,SAAS,GAAqB,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;YACrD,MAAM,OAAO,GAAG,IAAA,2CAA4B,EAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;YACxG,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC;gBAC7C,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI;gBAC9B,KAAK;gBACL,IAAI,EAAE,IAAA,oCAAc,EAAC,OAAO,CAAC;gBAC7B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,cAAc;gBACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACjB,YAAY,EAAE,QAAQ,CAAC,YAAY;gBACnC,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,EAAE;aAC1E,CAAC,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxB,GAAG,CAAC,qCAAqC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,YAAY,EAAE,CAAC;YACtB,MAAM,IAAA,0CAAgC,EAAC,sBAAsB,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAe,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,OAAO,CAAC,GAAG;QACrB,IAAI,EAAE,aAAa,OAAO,CAAC,IAAI,EAAE;KAClC,CAAC,CAAC,CAAC;IACJ,OAAO;QACL,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE;QAC3C,IAAI;QACJ,cAAc;QACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK;QACL,QAAQ,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,SAAS,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,SAAoC;IACpE,MAAM,IAAA,8BAAoB,EACxB,CAAC,GAAG,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACzC,SAAS,EAAE,qBAAqB,OAAO,CAAC,IAAI,EAAE;QAC9C,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE;KAC3B,CAAC,CAAC,CACJ,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"seed-image-user.d.ts","sourceRoot":"","sources":["../../../src/runtime/seed/seed-image-user.ts"],"names":[],"mappings":"AACA,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAUD,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,aAAa,CAUjF"}
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.seedImageUser = seedImageUser;
|
|
4
|
+
const NUMERIC_USER = /^(\d+)(?::(\d+))?$/;
|
|
5
|
+
function seedImageUser(configUser, imageRef) {
|
|
6
|
+
const match = NUMERIC_USER.exec(configUser.trim());
|
|
7
|
+
if (match === null) {
|
|
8
|
+
throw new Error(`The seed image ${imageRef} sets User "${configUser.trim()}"; the installation files are owned by the user the seed runs as, ` +
|
|
9
|
+
'so the image must set a numeric User (`uid[:gid]`).');
|
|
10
|
+
}
|
|
11
|
+
const uid = Number(match[1]);
|
|
12
|
+
return { uid, gid: match[2] === undefined ? uid : Number(match[2]) };
|
|
13
|
+
}
|
|
14
|
+
//# sourceMappingURL=seed-image-user.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"seed-image-user.js","sourceRoot":"","sources":["../../../src/runtime/seed/seed-image-user.ts"],"names":[],"mappings":";;AAcA,sCAUC;AAlBD,MAAM,YAAY,GAAG,oBAAoB,CAAC;AAQ1C,SAAgB,aAAa,CAAC,UAAkB,EAAE,QAAgB;IAChE,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,kBAAkB,QAAQ,eAAe,UAAU,CAAC,IAAI,EAAE,oEAAoE;YAC5H,qDAAqD,CACxD,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACvE,CAAC"}
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
export declare enum SeedInstallationFile {
|
|
2
|
+
Inventory = "inventory.yaml",
|
|
3
|
+
WorkloadKey = "workload-key.pem"
|
|
4
|
+
}
|
|
5
|
+
export declare const PRIVATE_FILE_MODE = 384;
|
|
6
|
+
export declare const PRIVATE_DIRECTORY_MODE = 448;
|
|
7
|
+
export declare const SEED_CONTAINER_INSTALLATION_DIR = "/run/xema/installation";
|
|
8
|
+
export declare const SEED_HELM_INSTALLATION_MOUNT = "/etc/xema/installation";
|
|
9
|
+
export declare const HELM_INVENTORY_KEY = SeedInstallationFile.Inventory;
|
|
10
|
+
export declare const SEED_HELM_PROJECTED_TOKEN_FILE = "/var/run/secrets/openbao/token";
|
|
11
|
+
export interface SeedFilePaths {
|
|
12
|
+
readonly inventory: string;
|
|
13
|
+
readonly workloadKey?: string;
|
|
14
|
+
}
|
|
15
|
+
export declare function nativeSeedFilePaths(directory: string, withKey: boolean): SeedFilePaths;
|
|
16
|
+
export declare function containerSeedFilePaths(withKey: boolean): SeedFilePaths;
|
|
17
|
+
export declare function helmSeedFilePaths(): SeedFilePaths;
|
|
18
|
+
export interface SeedFileContents {
|
|
19
|
+
readonly inventoryText: string;
|
|
20
|
+
readonly workloadKeyPem?: string;
|
|
21
|
+
}
|
|
22
|
+
export declare function writeSeedFiles(directory: string, contents: SeedFileContents): void;
|
|
23
|
+
//# sourceMappingURL=seed-installation-files.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"seed-installation-files.d.ts","sourceRoot":"","sources":["../../../src/runtime/seed/seed-installation-files.ts"],"names":[],"mappings":"AAIA,oBAAY,oBAAoB;IAC9B,SAAS,mBAAmB;IAC5B,WAAW,qBAAqB;CACjC;AAED,eAAO,MAAM,iBAAiB,MAAQ,CAAC;AACvC,eAAO,MAAM,sBAAsB,MAAQ,CAAC;AAG5C,eAAO,MAAM,+BAA+B,2BAA2B,CAAC;AAGxE,eAAO,MAAM,4BAA4B,2BAA2B,CAAC;AAErE,eAAO,MAAM,kBAAkB,iCAAiC,CAAC;AAEjE,eAAO,MAAM,8BAA8B,mCAAmC,CAAC;AAG/E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,aAAa,CAKtF;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,CAKtE;AAED,wBAAgB,iBAAiB,IAAI,aAAa,CAIjD;AAGD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAMD,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAYlF"}
|
|
@@ -0,0 +1,51 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.SEED_HELM_PROJECTED_TOKEN_FILE = exports.HELM_INVENTORY_KEY = exports.SEED_HELM_INSTALLATION_MOUNT = exports.SEED_CONTAINER_INSTALLATION_DIR = exports.PRIVATE_DIRECTORY_MODE = exports.PRIVATE_FILE_MODE = exports.SeedInstallationFile = void 0;
|
|
4
|
+
exports.nativeSeedFilePaths = nativeSeedFilePaths;
|
|
5
|
+
exports.containerSeedFilePaths = containerSeedFilePaths;
|
|
6
|
+
exports.helmSeedFilePaths = helmSeedFilePaths;
|
|
7
|
+
exports.writeSeedFiles = writeSeedFiles;
|
|
8
|
+
const node_fs_1 = require("node:fs");
|
|
9
|
+
const node_path_1 = require("node:path");
|
|
10
|
+
var SeedInstallationFile;
|
|
11
|
+
(function (SeedInstallationFile) {
|
|
12
|
+
SeedInstallationFile["Inventory"] = "inventory.yaml";
|
|
13
|
+
SeedInstallationFile["WorkloadKey"] = "workload-key.pem";
|
|
14
|
+
})(SeedInstallationFile || (exports.SeedInstallationFile = SeedInstallationFile = {}));
|
|
15
|
+
exports.PRIVATE_FILE_MODE = 0o600;
|
|
16
|
+
exports.PRIVATE_DIRECTORY_MODE = 0o700;
|
|
17
|
+
exports.SEED_CONTAINER_INSTALLATION_DIR = '/run/xema/installation';
|
|
18
|
+
exports.SEED_HELM_INSTALLATION_MOUNT = '/etc/xema/installation';
|
|
19
|
+
exports.HELM_INVENTORY_KEY = SeedInstallationFile.Inventory;
|
|
20
|
+
exports.SEED_HELM_PROJECTED_TOKEN_FILE = '/var/run/secrets/openbao/token';
|
|
21
|
+
function nativeSeedFilePaths(directory, withKey) {
|
|
22
|
+
return {
|
|
23
|
+
inventory: (0, node_path_1.join)(directory, SeedInstallationFile.Inventory),
|
|
24
|
+
...(withKey ? { workloadKey: (0, node_path_1.join)(directory, SeedInstallationFile.WorkloadKey) } : {}),
|
|
25
|
+
};
|
|
26
|
+
}
|
|
27
|
+
function containerSeedFilePaths(withKey) {
|
|
28
|
+
return {
|
|
29
|
+
inventory: `${exports.SEED_CONTAINER_INSTALLATION_DIR}/${SeedInstallationFile.Inventory}`,
|
|
30
|
+
...(withKey ? { workloadKey: `${exports.SEED_CONTAINER_INSTALLATION_DIR}/${SeedInstallationFile.WorkloadKey}` } : {}),
|
|
31
|
+
};
|
|
32
|
+
}
|
|
33
|
+
function helmSeedFilePaths() {
|
|
34
|
+
return {
|
|
35
|
+
inventory: `${exports.SEED_HELM_INSTALLATION_MOUNT}/inventory/${exports.HELM_INVENTORY_KEY}`,
|
|
36
|
+
};
|
|
37
|
+
}
|
|
38
|
+
function writeSeedFiles(directory, contents) {
|
|
39
|
+
(0, node_fs_1.mkdirSync)(directory, { recursive: true, mode: exports.PRIVATE_DIRECTORY_MODE });
|
|
40
|
+
(0, node_fs_1.chmodSync)(directory, exports.PRIVATE_DIRECTORY_MODE);
|
|
41
|
+
const write = (name, content) => {
|
|
42
|
+
const path = (0, node_path_1.join)(directory, name);
|
|
43
|
+
(0, node_fs_1.writeFileSync)(path, content, { mode: exports.PRIVATE_FILE_MODE });
|
|
44
|
+
(0, node_fs_1.chmodSync)(path, exports.PRIVATE_FILE_MODE);
|
|
45
|
+
};
|
|
46
|
+
write(SeedInstallationFile.Inventory, contents.inventoryText);
|
|
47
|
+
if (contents.workloadKeyPem !== undefined) {
|
|
48
|
+
write(SeedInstallationFile.WorkloadKey, contents.workloadKeyPem);
|
|
49
|
+
}
|
|
50
|
+
}
|
|
51
|
+
//# sourceMappingURL=seed-installation-files.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"seed-installation-files.js","sourceRoot":"","sources":["../../../src/runtime/seed/seed-installation-files.ts"],"names":[],"mappings":";;;AA6BA,kDAKC;AAED,wDAKC;AAED,8CAIC;AAYD,wCAYC;AAvED,qCAA8D;AAC9D,yCAAiC;AAGjC,IAAY,oBAGX;AAHD,WAAY,oBAAoB;IAC9B,oDAA4B,CAAA;IAC5B,wDAAgC,CAAA;AAClC,CAAC,EAHW,oBAAoB,oCAApB,oBAAoB,QAG/B;AAEY,QAAA,iBAAiB,GAAG,KAAK,CAAC;AAC1B,QAAA,sBAAsB,GAAG,KAAK,CAAC;AAG/B,QAAA,+BAA+B,GAAG,wBAAwB,CAAC;AAG3D,QAAA,4BAA4B,GAAG,wBAAwB,CAAC;AAExD,QAAA,kBAAkB,GAAG,oBAAoB,CAAC,SAAS,CAAC;AAEpD,QAAA,8BAA8B,GAAG,gCAAgC,CAAC;AAS/E,SAAgB,mBAAmB,CAAC,SAAiB,EAAE,OAAgB;IACrE,OAAO;QACL,SAAS,EAAE,IAAA,gBAAI,EAAC,SAAS,EAAE,oBAAoB,CAAC,SAAS,CAAC;QAC1D,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAA,gBAAI,EAAC,SAAS,EAAE,oBAAoB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvF,CAAC;AACJ,CAAC;AAED,SAAgB,sBAAsB,CAAC,OAAgB;IACrD,OAAO;QACL,SAAS,EAAE,GAAG,uCAA+B,IAAI,oBAAoB,CAAC,SAAS,EAAE;QACjF,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,uCAA+B,IAAI,oBAAoB,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9G,CAAC;AACJ,CAAC;AAED,SAAgB,iBAAiB;IAC/B,OAAO;QACL,SAAS,EAAE,GAAG,oCAA4B,cAAc,0BAAkB,EAAE;KAC7E,CAAC;AACJ,CAAC;AAYD,SAAgB,cAAc,CAAC,SAAiB,EAAE,QAA0B;IAC1E,IAAA,mBAAS,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,8BAAsB,EAAE,CAAC,CAAC;IACxE,IAAA,mBAAS,EAAC,SAAS,EAAE,8BAAsB,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,CAAC,IAA0B,EAAE,OAAe,EAAQ,EAAE;QAClE,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACnC,IAAA,uBAAa,EAAC,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,yBAAiB,EAAE,CAAC,CAAC;QAC1D,IAAA,mBAAS,EAAC,IAAI,EAAE,yBAAiB,CAAC,CAAC;IACrC,CAAC,CAAC;IACF,KAAK,CAAC,oBAAoB,CAAC,SAAS,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC9D,IAAI,QAAQ,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAC1C,KAAK,CAAC,oBAAoB,CAAC,WAAW,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IACnE,CAAC;AACH,CAAC"}
|
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
import { type InstallationSecrets, type XemaInstallationInventory } from '@xemahq/installation-tenancy';
|
|
2
|
+
import type { InstallationStateStore } from '../installation/state-store';
|
|
3
|
+
export interface SeedInstallation {
|
|
4
|
+
readonly installationId: string;
|
|
5
|
+
readonly inventory: XemaInstallationInventory;
|
|
6
|
+
readonly inventoryText: string;
|
|
7
|
+
readonly openBao: {
|
|
8
|
+
readonly endpoint: string;
|
|
9
|
+
};
|
|
10
|
+
readonly webOrigins: readonly string[];
|
|
11
|
+
readSecrets(names: readonly string[]): Promise<InstallationSecrets>;
|
|
12
|
+
}
|
|
13
|
+
export interface OpenSeedInstallationInput {
|
|
14
|
+
readonly installationId: string;
|
|
15
|
+
readonly store: InstallationStateStore;
|
|
16
|
+
readonly authority: string | undefined;
|
|
17
|
+
readonly webOrigins: readonly string[];
|
|
18
|
+
}
|
|
19
|
+
export declare function openSeedInstallation(input: OpenSeedInstallationInput): SeedInstallation;
|
|
20
|
+
//# sourceMappingURL=seed-installation.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"seed-installation.d.ts","sourceRoot":"","sources":["../../../src/runtime/seed/seed-installation.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC/B,MAAM,8BAA8B,CAAC;AAKtC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAQ1E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,yBAAyB,CAAC;IAC9C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAEhD,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,WAAW,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACrE;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;IAEvC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAEvC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAQD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,yBAAyB,GAAG,gBAAgB,CAmCvF"}
|
|
@@ -0,0 +1,36 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.openSeedInstallation = openSeedInstallation;
|
|
4
|
+
const installation_tenancy_1 = require("@xemahq/installation-tenancy");
|
|
5
|
+
const cli_errors_1 = require("../../lib/cli-errors");
|
|
6
|
+
const session_1 = require("../tenancy/session");
|
|
7
|
+
function openSeedInstallation(input) {
|
|
8
|
+
const { installationId } = input;
|
|
9
|
+
const inventoryText = input.store.readInventoryCache(installationId);
|
|
10
|
+
if (inventoryText === undefined) {
|
|
11
|
+
throw new cli_errors_1.CliConfigurationError(`Installation "${installationId}" has no tenancy inventory, so the seed's environment cannot be built. ` +
|
|
12
|
+
'Create the installation first (`xema installation create`).');
|
|
13
|
+
}
|
|
14
|
+
const inventory = (0, installation_tenancy_1.parseInventoryText)(inventoryText, input.store.inventoryCachePath(installationId));
|
|
15
|
+
if (input.authority === undefined) {
|
|
16
|
+
throw new cli_errors_1.CliConfigurationError('The seed reads its installation through OpenBao: pass --authority <dir>, the directory of the operator\'s ' +
|
|
17
|
+
'admin credentials (the one `xema installation create` takes).');
|
|
18
|
+
}
|
|
19
|
+
const server = inventory.servers[installation_tenancy_1.Backend.OpenBao];
|
|
20
|
+
if (server === undefined) {
|
|
21
|
+
throw new cli_errors_1.CliConfigurationError(`The inventory of "${installationId}" records no openbao server.`);
|
|
22
|
+
}
|
|
23
|
+
const admin = (0, installation_tenancy_1.connectionsFromAuthority)(input.authority, { [installation_tenancy_1.Backend.OpenBao]: server.endpoint }, [installation_tenancy_1.Backend.OpenBao], session_1.AUTHORITY_OPTIONS)[installation_tenancy_1.Backend.OpenBao];
|
|
24
|
+
if (admin === undefined) {
|
|
25
|
+
throw new cli_errors_1.CliConfigurationError(`The credentials directory ${input.authority} holds no openbao credential.`);
|
|
26
|
+
}
|
|
27
|
+
return {
|
|
28
|
+
installationId,
|
|
29
|
+
inventory,
|
|
30
|
+
inventoryText,
|
|
31
|
+
openBao: { endpoint: admin.endpoint },
|
|
32
|
+
webOrigins: input.webOrigins,
|
|
33
|
+
readSecrets: (names) => (0, installation_tenancy_1.readInstallationSecrets)(installationId, names, { token: admin.token }, { endpoint: admin.endpoint, requestTimeoutMs: admin.requestTimeoutMs }),
|
|
34
|
+
};
|
|
35
|
+
}
|
|
36
|
+
//# sourceMappingURL=seed-installation.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"seed-installation.js","sourceRoot":"","sources":["../../../src/runtime/seed/seed-installation.ts"],"names":[],"mappings":";;AA6CA,oDAmCC;AAhFD,uEAOsC;AAEtC,qDAA6D;AAC7D,gDAAuD;AAmCvD,SAAgB,oBAAoB,CAAC,KAAgC;IACnE,MAAM,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC;IACjC,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC;IACrE,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,kCAAqB,CAC7B,iBAAiB,cAAc,yEAAyE;YACtG,6DAA6D,CAChE,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,IAAA,yCAAkB,EAAC,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC,CAAC;IACpG,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,kCAAqB,CAC7B,4GAA4G;YAC1G,+DAA+D,CAClE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,8BAAO,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,kCAAqB,CAAC,qBAAqB,cAAc,8BAA8B,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,KAAK,GAAG,IAAA,+CAAwB,EAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,8BAAO,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,8BAAO,CAAC,OAAO,CAAC,EAAE,2BAAiB,CAAC,CACnI,8BAAO,CAAC,OAAO,CAChB,CAAC;IACF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,kCAAqB,CAAC,6BAA6B,KAAK,CAAC,SAAS,+BAA+B,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO;QACL,cAAc;QACd,SAAS;QACT,aAAa;QACb,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE;QACrC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CACrB,IAAA,8CAAuB,EAAC,cAAc,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC;KACjJ,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
import type { NativeSeedProcessDelivery } from './launch-env';
|
|
2
|
+
import type { LaunchHandle, LaunchPlan } from '../launch';
|
|
3
|
+
export interface SeedLaunchInput {
|
|
4
|
+
readonly plan: LaunchPlan;
|
|
5
|
+
readonly installationId: string;
|
|
6
|
+
readonly planHash: string;
|
|
7
|
+
readonly executionId: string;
|
|
8
|
+
readonly log: (line: string) => void;
|
|
9
|
+
}
|
|
10
|
+
export interface NativeSeedLaunchInput extends SeedLaunchInput {
|
|
11
|
+
readonly prepareDeliveries: () => Promise<readonly NativeSeedProcessDelivery[]>;
|
|
12
|
+
}
|
|
13
|
+
export declare function launchSeed(input: NativeSeedLaunchInput): Promise<LaunchHandle>;
|
|
14
|
+
//# sourceMappingURL=seed-launcher.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"seed-launcher.d.ts","sourceRoot":"","sources":["../../../src/runtime/seed/seed-launcher.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAY,MAAM,WAAW,CAAC;AAGpE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACtC;AAED,MAAM,WAAW,qBAAsB,SAAQ,eAAe;IAM5D,QAAQ,CAAC,iBAAiB,EAAE,MAAM,OAAO,CAAC,SAAS,yBAAyB,EAAE,CAAC,CAAC;CACjF;AAgBD,wBAAsB,UAAU,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,YAAY,CAAC,CAoGpF"}
|
|
@@ -0,0 +1,155 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.launchSeed = launchSeed;
|
|
4
|
+
const cleanup_1 = require("../cleanup");
|
|
5
|
+
const native_process_group_1 = require("../native-process-group");
|
|
6
|
+
const seed_facts_1 = require("./seed-facts");
|
|
7
|
+
const seed_options_1 = require("./seed-options");
|
|
8
|
+
const seed_process_1 = require("./seed-process");
|
|
9
|
+
const seed_record_1 = require("./seed-record");
|
|
10
|
+
const supervisor_contract_1 = require("./supervisor-contract");
|
|
11
|
+
const schema_1 = require("../config/schema");
|
|
12
|
+
const health_probe_1 = require("../runner/health-probe");
|
|
13
|
+
async function launchSeed(input) {
|
|
14
|
+
const { plan, installationId, log } = input;
|
|
15
|
+
const base = plan.seed;
|
|
16
|
+
if (base === undefined) {
|
|
17
|
+
throw new Error('A native launch plan carries no seed launch options.');
|
|
18
|
+
}
|
|
19
|
+
const binPath = (0, supervisor_contract_1.resolveSupervisorBin)();
|
|
20
|
+
await assertNoLiveSeed(installationId);
|
|
21
|
+
const deliveries = await input.prepareDeliveries();
|
|
22
|
+
const launcherPid = process.pid;
|
|
23
|
+
const launcherFingerprint = (0, native_process_group_1.captureProcessFingerprint)(launcherPid);
|
|
24
|
+
const startedAt = new Date().toISOString();
|
|
25
|
+
const started = [];
|
|
26
|
+
const currentRecord = () => ({
|
|
27
|
+
substrate: schema_1.Substrate.Native,
|
|
28
|
+
installationId,
|
|
29
|
+
planHash: input.planHash,
|
|
30
|
+
executionId: input.executionId,
|
|
31
|
+
startedAt,
|
|
32
|
+
launcherPid,
|
|
33
|
+
launcherFingerprint,
|
|
34
|
+
processes: started.map((entry) => entry.record),
|
|
35
|
+
});
|
|
36
|
+
const stopStarted = async (graceMs) => {
|
|
37
|
+
await (0, cleanup_1.runCleanupOperations)([...started].reverse().map(({ record }) => ({
|
|
38
|
+
operation: `stop seed process ${record.name}`,
|
|
39
|
+
run: () => (0, seed_process_1.stopSeedProcess)(record, graceMs),
|
|
40
|
+
})));
|
|
41
|
+
(0, seed_record_1.removeSeedRecord)(installationId);
|
|
42
|
+
};
|
|
43
|
+
let booting;
|
|
44
|
+
let bootingLog;
|
|
45
|
+
try {
|
|
46
|
+
for (const [index, delivery] of deliveries.entries()) {
|
|
47
|
+
const name = delivery.process.name;
|
|
48
|
+
const logFile = (0, seed_record_1.seedLogPath)(installationId, name);
|
|
49
|
+
const options = (0, seed_options_1.seedProcessLaunchOptions)(base, delivery.process, index, { substrate: schema_1.Substrate.Native });
|
|
50
|
+
booting = name;
|
|
51
|
+
bootingLog = logFile;
|
|
52
|
+
const child = (0, seed_process_1.spawnSeedProcess)(binPath, options, logFile, delivery.env);
|
|
53
|
+
const pid = await spawned(child);
|
|
54
|
+
const exit = watchExit(child);
|
|
55
|
+
const group = (0, native_process_group_1.captureOwnedProcessGroup)(pid);
|
|
56
|
+
const entry = {
|
|
57
|
+
group,
|
|
58
|
+
record: {
|
|
59
|
+
name,
|
|
60
|
+
pid,
|
|
61
|
+
processGroupId: group.processGroupId,
|
|
62
|
+
members: [...group.members],
|
|
63
|
+
probePort: options.probePort,
|
|
64
|
+
logFile,
|
|
65
|
+
},
|
|
66
|
+
};
|
|
67
|
+
started.push(entry);
|
|
68
|
+
(0, seed_record_1.writeSeedRecord)(currentRecord());
|
|
69
|
+
log(`seed : ${name} started pid ${String(pid)} (log ${logFile})`);
|
|
70
|
+
await (0, health_probe_1.waitForReady)(probeUrlOf(options.probePort), options.bootDeadlineMs, undefined, () => !exit.exited);
|
|
71
|
+
started[index] = { ...entry, record: { ...entry.record, members: [...(0, native_process_group_1.refreshOwnedProcessGroup)(group).members] } };
|
|
72
|
+
(0, seed_record_1.writeSeedRecord)(currentRecord());
|
|
73
|
+
}
|
|
74
|
+
}
|
|
75
|
+
catch (error) {
|
|
76
|
+
const failure = new Error(`The seed process ${booting ?? '(none)'} did not become ready: ${error instanceof Error ? error.message : String(error)}` +
|
|
77
|
+
(bootingLog === undefined ? '.' : ` (see ${bootingLog}).`), { cause: error });
|
|
78
|
+
try {
|
|
79
|
+
await stopStarted();
|
|
80
|
+
}
|
|
81
|
+
catch (cleanupError) {
|
|
82
|
+
throw (0, cleanup_1.combineOperationAndCleanupErrors)('seed launch', failure, cleanupError);
|
|
83
|
+
}
|
|
84
|
+
throw failure;
|
|
85
|
+
}
|
|
86
|
+
const shutdown = async (graceMs) => stopStarted(graceMs);
|
|
87
|
+
const seeds = started.map(({ record }) => ({
|
|
88
|
+
name: record.name,
|
|
89
|
+
handle: `pid:${String(record.pid)}`,
|
|
90
|
+
probeUrl: probeUrlOf(record.probePort),
|
|
91
|
+
logs: record.logFile,
|
|
92
|
+
}));
|
|
93
|
+
return {
|
|
94
|
+
result: {
|
|
95
|
+
running: seeds.map((seed) => ({ name: seed.name, url: seed.probeUrl, handle: seed.handle, close: shutdown })),
|
|
96
|
+
skipped: [],
|
|
97
|
+
},
|
|
98
|
+
plan,
|
|
99
|
+
installationId,
|
|
100
|
+
planHash: input.planHash,
|
|
101
|
+
executionId: input.executionId,
|
|
102
|
+
roster: plan.roster,
|
|
103
|
+
seeds,
|
|
104
|
+
shutdown: () => shutdown(),
|
|
105
|
+
};
|
|
106
|
+
}
|
|
107
|
+
function probeUrlOf(port) {
|
|
108
|
+
return `http://${seed_facts_1.SEED_LOOPBACK_HOST}:${String(port)}`;
|
|
109
|
+
}
|
|
110
|
+
async function assertNoLiveSeed(installationId) {
|
|
111
|
+
const existing = (0, seed_record_1.readSeedRecord)(installationId);
|
|
112
|
+
if (existing === undefined) {
|
|
113
|
+
return;
|
|
114
|
+
}
|
|
115
|
+
if (existing.substrate !== schema_1.Substrate.Native) {
|
|
116
|
+
throw new Error(`A ${existing.substrate} seed (${existing.processes.map((seedProcess) => seedProcess.containerName).join(', ')}) is recorded for this installation, ` +
|
|
117
|
+
'so a native seed would run beside it. Run `xema down` with the substrate it was launched under first.');
|
|
118
|
+
}
|
|
119
|
+
const ownerships = new Map();
|
|
120
|
+
for (const seedProcess of existing.processes) {
|
|
121
|
+
ownerships.set(seedProcess.name, await (0, seed_process_1.seedOwnership)(seedProcess));
|
|
122
|
+
}
|
|
123
|
+
const occupied = [...ownerships].filter(([, ownership]) => ownership !== seed_process_1.SeedOwnership.Gone);
|
|
124
|
+
if (occupied.length === 0) {
|
|
125
|
+
(0, seed_record_1.removeSeedRecord)(installationId);
|
|
126
|
+
return;
|
|
127
|
+
}
|
|
128
|
+
const running = occupied.filter(([, ownership]) => ownership === seed_process_1.SeedOwnership.Owned).map(([name]) => name);
|
|
129
|
+
if (running.length > 0) {
|
|
130
|
+
throw new Error(`The seed process(es) ${running.join(', ')} are already running for this installation. Run \`xema down\` first.`);
|
|
131
|
+
}
|
|
132
|
+
throw new Error(`The recorded process group(s) of ${occupied.map(([name]) => name).join(', ')} are occupied by a process that does not match the record, so they were left untouched. ` +
|
|
133
|
+
'Inspect them, then remove the record with `xema down` once they are confirmed unrelated.');
|
|
134
|
+
}
|
|
135
|
+
function spawned(child) {
|
|
136
|
+
return new Promise((resolve, reject) => {
|
|
137
|
+
child.once('error', reject);
|
|
138
|
+
child.once('spawn', () => {
|
|
139
|
+
child.off('error', reject);
|
|
140
|
+
if (child.pid === undefined) {
|
|
141
|
+
reject(new Error('The seed supervisor spawned without a pid.'));
|
|
142
|
+
return;
|
|
143
|
+
}
|
|
144
|
+
resolve(child.pid);
|
|
145
|
+
});
|
|
146
|
+
});
|
|
147
|
+
}
|
|
148
|
+
function watchExit(child) {
|
|
149
|
+
const state = { exited: false };
|
|
150
|
+
child.once('exit', () => {
|
|
151
|
+
state.exited = true;
|
|
152
|
+
});
|
|
153
|
+
return state;
|
|
154
|
+
}
|
|
155
|
+
//# sourceMappingURL=seed-launcher.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"seed-launcher.js","sourceRoot":"","sources":["../../../src/runtime/seed/seed-launcher.ts"],"names":[],"mappings":";;AAyDA,gCAoGC;AA7JD,wCAAoF;AACpF,kEAAgJ;AAChJ,6CAAkD;AAClD,iDAA0D;AAC1D,iDAKwB;AACxB,+CAOuB;AACvB,+DAA6D;AAC7D,6CAA6C;AAC7C,yDAAsD;AAqC/C,KAAK,UAAU,UAAU,CAAC,KAA4B;IAC3D,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,OAAO,GAAG,IAAA,0CAAoB,GAAE,CAAC;IACvC,MAAM,gBAAgB,CAAC,cAAc,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,iBAAiB,EAAE,CAAC;IAEnD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAChC,MAAM,mBAAmB,GAAG,IAAA,gDAAyB,EAAC,WAAW,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,MAAM,aAAa,GAAG,GAAqB,EAAE,CAAC,CAAC;QAC7C,SAAS,EAAE,kBAAS,CAAC,MAAM;QAC3B,cAAc;QACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS;QACT,WAAW;QACX,mBAAmB;QACnB,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;KAChD,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,KAAK,EAAE,OAAgB,EAAiB,EAAE;QAC5D,MAAM,IAAA,8BAAoB,EACxB,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;YAC1C,SAAS,EAAE,qBAAqB,MAAM,CAAC,IAAI,EAAE;YAC7C,GAAG,EAAE,GAAG,EAAE,CAAC,IAAA,8BAAe,EAAC,MAAM,EAAE,OAAO,CAAC;SAC5C,CAAC,CAAC,CACJ,CAAC;QACF,IAAA,8BAAgB,EAAC,cAAc,CAAC,CAAC;IACnC,CAAC,CAAC;IAEF,IAAI,OAA2B,CAAC;IAChC,IAAI,UAA8B,CAAC;IACnC,IAAI,CAAC;QACH,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;YACnC,MAAM,OAAO,GAAG,IAAA,yBAAW,EAAC,cAAc,EAAE,IAAI,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,IAAA,uCAAwB,EAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,kBAAS,CAAC,MAAM,EAAE,CAAC,CAAC;YACzG,OAAO,GAAG,IAAI,CAAC;YACf,UAAU,GAAG,OAAO,CAAC;YACrB,MAAM,KAAK,GAAG,IAAA,+BAAgB,EAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;YACxE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,IAAA,+CAAwB,EAAC,GAAG,CAAC,CAAC;YAC5C,MAAM,KAAK,GAAmB;gBAC5B,KAAK;gBACL,MAAM,EAAE;oBACN,IAAI;oBACJ,GAAG;oBACH,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;oBAC3B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,OAAO;iBACR;aACF,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,IAAA,6BAAe,EAAC,aAAa,EAAE,CAAC,CAAC;YACjC,GAAG,CAAC,cAAc,IAAI,gBAAgB,MAAM,CAAC,GAAG,CAAC,SAAS,OAAO,GAAG,CAAC,CAAC;YAEtE,MAAM,IAAA,2BAAY,EAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,cAAc,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACzG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,IAAA,+CAAwB,EAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAClH,IAAA,6BAAe,EAAC,aAAa,EAAE,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,IAAI,KAAK,CACvB,oBAAoB,OAAO,IAAI,QAAQ,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;YACvH,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,UAAU,IAAI,CAAC,EAC5D,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACF,IAAI,CAAC;YACH,MAAM,WAAW,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,YAAY,EAAE,CAAC;YACtB,MAAM,IAAA,0CAAgC,EAAC,aAAa,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,OAAO,CAAC;IAChB,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,EAAE,OAAgB,EAAiB,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACjF,MAAM,KAAK,GAAe,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACrD,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;QACnC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC;QACtC,IAAI,EAAE,MAAM,CAAC,OAAO;KACrB,CAAC,CAAC,CAAC;IACJ,OAAO;QACL,MAAM,EAAE;YACN,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC7G,OAAO,EAAE,EAAE;SACZ;QACD,IAAI;QACJ,cAAc;QACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK;QACL,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,UAAU,+BAAkB,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;AACxD,CAAC;AAGD,KAAK,UAAU,gBAAgB,CAAC,cAAsB;IACpD,MAAM,QAAQ,GAAG,IAAA,4BAAc,EAAC,cAAc,CAAC,CAAC;IAChD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO;IACT,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,KAAK,kBAAS,CAAC,MAAM,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,KAAK,QAAQ,CAAC,SAAS,UAAU,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,uCAAuC;YACnJ,uGAAuG,CAC1G,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAyB,CAAC;IACpD,KAAK,MAAM,WAAW,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC7C,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,IAAA,4BAAa,EAAC,WAAW,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,SAAS,KAAK,4BAAa,CAAC,IAAI,CAAC,CAAC;IAC7F,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,IAAA,8BAAgB,EAAC,cAAc,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,SAAS,KAAK,4BAAa,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC5G,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,wBAAwB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,sEAAsE,CACjH,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CACb,oCAAoC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,0FAA0F;QACrK,0FAA0F,CAC7F,CAAC;AACJ,CAAC;AAGD,SAAS,OAAO,CAAC,KAAmB;IAClC,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC7C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC3B,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,CAAC,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC,CAAC;gBAChE,OAAO;YACT,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,KAAmB;IACpC,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAChC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;QACtB,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC"}
|
|
@@ -0,0 +1,22 @@
|
|
|
1
|
+
import { Substrate, type XemaConfig } from '../config/schema';
|
|
2
|
+
import type { SeedProcess } from '@xemahq/composed-process-host';
|
|
3
|
+
import type { SupervisorLaunchOptions } from '@xemahq/xema-service-nest';
|
|
4
|
+
export type SeedBaseLaunchOptions = Omit<SupervisorLaunchOptions, 'processName' | 'replica' | 'probePort' | 'advertiseHost' | 'eventHubUrl'> & {
|
|
5
|
+
readonly eventHubUrl?: string;
|
|
6
|
+
};
|
|
7
|
+
export declare function seedBundleCacheDir(substrate: Substrate): string;
|
|
8
|
+
export declare function buildSeedLaunchOptions(config: XemaConfig, env: NodeJS.ProcessEnv, eventHubUrl: string | undefined): SeedBaseLaunchOptions;
|
|
9
|
+
export type SeedProcessPlacement = {
|
|
10
|
+
readonly substrate: Substrate.Native;
|
|
11
|
+
} | {
|
|
12
|
+
readonly substrate: Substrate.Container;
|
|
13
|
+
readonly rootProcess: string;
|
|
14
|
+
};
|
|
15
|
+
export interface HelmSeedProcessPlacement {
|
|
16
|
+
readonly rootProcess: string;
|
|
17
|
+
readonly namespace: string;
|
|
18
|
+
}
|
|
19
|
+
export declare function seedProcessLaunchOptions(base: SeedBaseLaunchOptions, process: SeedProcess, index: number, placement: SeedProcessPlacement): SupervisorLaunchOptions;
|
|
20
|
+
export type HelmSeedProcessLaunchOptions = Omit<SupervisorLaunchOptions, 'advertiseHost'>;
|
|
21
|
+
export declare function helmSeedProcessLaunchOptions(base: SeedBaseLaunchOptions, process: SeedProcess, index: number, placement: HelmSeedProcessPlacement): HelmSeedProcessLaunchOptions;
|
|
22
|
+
//# sourceMappingURL=seed-options.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"seed-options.d.ts","sourceRoot":"","sources":["../../../src/runtime/seed/seed-options.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,SAAS,EAAE,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAOzE,MAAM,MAAM,qBAAqB,GAAG,IAAI,CACtC,uBAAuB,EACvB,aAAa,GAAG,SAAS,GAAG,WAAW,GAAG,eAAe,GAAG,aAAa,CAC1E,GAAG;IAKF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,CAI/D;AAYD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,UAAU,EAClB,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,WAAW,EAAE,MAAM,GAAG,SAAS,GAC9B,qBAAqB,CAavB;AAGD,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,MAAM,CAAA;CAAE,GACxC;IACE,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC;IAExC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B,CAAC;AAGN,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAYD,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,qBAAqB,EAC3B,OAAO,EAAE,WAAW,EACpB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,oBAAoB,GAC9B,uBAAuB,CAYzB;AAGD,MAAM,MAAM,4BAA4B,GAAG,IAAI,CAAC,uBAAuB,EAAE,eAAe,CAAC,CAAC;AAQ1F,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,qBAAqB,EAC3B,OAAO,EAAE,WAAW,EACpB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,wBAAwB,GAClC,4BAA4B,CAW9B"}
|
|
@@ -0,0 +1,57 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.seedBundleCacheDir = seedBundleCacheDir;
|
|
4
|
+
exports.buildSeedLaunchOptions = buildSeedLaunchOptions;
|
|
5
|
+
exports.seedProcessLaunchOptions = seedProcessLaunchOptions;
|
|
6
|
+
exports.helmSeedProcessLaunchOptions = helmSeedProcessLaunchOptions;
|
|
7
|
+
const node_os_1 = require("node:os");
|
|
8
|
+
const node_path_1 = require("node:path");
|
|
9
|
+
const xema_service_nest_1 = require("@xemahq/xema-service-nest");
|
|
10
|
+
const seed_facts_1 = require("./seed-facts");
|
|
11
|
+
const seed_platform_endpoints_1 = require("./seed-platform-endpoints");
|
|
12
|
+
const launch_config_1 = require("../config/launch-config");
|
|
13
|
+
const schema_1 = require("../config/schema");
|
|
14
|
+
function seedBundleCacheDir(substrate) {
|
|
15
|
+
return substrate === schema_1.Substrate.Native
|
|
16
|
+
? (0, node_path_1.join)((0, node_os_1.homedir)(), '.xema', 'cache', 'biome-bundles')
|
|
17
|
+
: seed_facts_1.SEED_CONTAINER_BUNDLE_CACHE_DIR;
|
|
18
|
+
}
|
|
19
|
+
function buildSeedLaunchOptions(config, env, eventHubUrl) {
|
|
20
|
+
const launch = (0, launch_config_1.resolveLaunchConfig)({ flags: {}, env, document: config });
|
|
21
|
+
return {
|
|
22
|
+
role: xema_service_nest_1.SEED_SUPERVISOR_DEFAULTS.role,
|
|
23
|
+
bootDeadlineMs: xema_service_nest_1.SEED_SUPERVISOR_DEFAULTS.bootDeadlineMs,
|
|
24
|
+
bundleCacheDir: seedBundleCacheDir(config.app.substrate),
|
|
25
|
+
biomeHostUrl: launch.biomeHostUrl?.value ?? (0, seed_facts_1.seedLoopbackUrl)(seed_facts_1.SEED_BIOME_HOST_PORT),
|
|
26
|
+
...(eventHubUrl === undefined ? {} : { eventHubUrl }),
|
|
27
|
+
...(launch.ociRegistry === undefined
|
|
28
|
+
? {}
|
|
29
|
+
: { bundleRegistry: launch.ociRegistry.value }),
|
|
30
|
+
};
|
|
31
|
+
}
|
|
32
|
+
function seedProcessLaunchOptions(base, process, index, placement) {
|
|
33
|
+
const common = { processName: process.name, replica: `${process.name}:0`, probePort: (0, seed_facts_1.seedProbePort)(index) };
|
|
34
|
+
if (placement.substrate === schema_1.Substrate.Native) {
|
|
35
|
+
return { ...base, ...common, eventHubUrl: (0, seed_platform_endpoints_1.requireSeedEventHubUrl)(base.eventHubUrl), advertiseHost: seed_facts_1.SEED_LOOPBACK_HOST };
|
|
36
|
+
}
|
|
37
|
+
return {
|
|
38
|
+
...base,
|
|
39
|
+
...common,
|
|
40
|
+
eventHubUrl: (0, seed_platform_endpoints_1.requireSeedEventHubUrl)(base.eventHubUrl),
|
|
41
|
+
advertiseHost: process.name,
|
|
42
|
+
biomeHostUrl: process.hostsRoot ? base.biomeHostUrl : `http://${placement.rootProcess}:${String(seed_facts_1.SEED_BIOME_HOST_PORT)}`,
|
|
43
|
+
};
|
|
44
|
+
}
|
|
45
|
+
function helmSeedProcessLaunchOptions(base, process, index, placement) {
|
|
46
|
+
return {
|
|
47
|
+
...base,
|
|
48
|
+
processName: process.name,
|
|
49
|
+
replica: `${process.name}:0`,
|
|
50
|
+
probePort: (0, seed_facts_1.seedProbePort)(index),
|
|
51
|
+
biomeHostUrl: process.hostsRoot
|
|
52
|
+
? base.biomeHostUrl
|
|
53
|
+
: (0, seed_facts_1.clusterServiceUrl)(placement.rootProcess, placement.namespace, seed_facts_1.SEED_BIOME_HOST_PORT),
|
|
54
|
+
eventHubUrl: (0, seed_platform_endpoints_1.requireSeedEventHubUrl)(base.eventHubUrl),
|
|
55
|
+
};
|
|
56
|
+
}
|
|
57
|
+
//# sourceMappingURL=seed-options.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"seed-options.js","sourceRoot":"","sources":["../../../src/runtime/seed/seed-options.ts"],"names":[],"mappings":";;AAoCA,gDAIC;AAYD,wDAiBC;AA2BD,4DAiBC;AAWD,oEAgBC;AA5ID,qCAAkC;AAClC,yCAAiC;AAEjC,iEAAqE;AAErE,6CAOsB;AACtB,uEAAmE;AACnE,2DAA8D;AAC9D,6CAA8D;AAqB9D,SAAgB,kBAAkB,CAAC,SAAoB;IACrD,OAAO,SAAS,KAAK,kBAAS,CAAC,MAAM;QACnC,CAAC,CAAC,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC;QACpD,CAAC,CAAC,4CAA+B,CAAC;AACtC,CAAC;AAYD,SAAgB,sBAAsB,CACpC,MAAkB,EAClB,GAAsB,EACtB,WAA+B;IAE/B,MAAM,MAAM,GAAG,IAAA,mCAAmB,EAAC,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACzE,OAAO;QACL,IAAI,EAAE,4CAAwB,CAAC,IAAI;QACnC,cAAc,EAAE,4CAAwB,CAAC,cAAc;QACvD,cAAc,EAAE,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;QACxD,YAAY,EACV,MAAM,CAAC,YAAY,EAAE,KAAK,IAAI,IAAA,4BAAe,EAAC,iCAAoB,CAAC;QACrE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACrD,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS;YAClC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AA2BD,SAAgB,wBAAwB,CACtC,IAA2B,EAC3B,OAAoB,EACpB,KAAa,EACb,SAA+B;IAE/B,MAAM,MAAM,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,SAAS,EAAE,IAAA,0BAAa,EAAC,KAAK,CAAC,EAAE,CAAC;IAC5G,IAAI,SAAS,CAAC,SAAS,KAAK,kBAAS,CAAC,MAAM,EAAE,CAAC;QAC7C,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,IAAA,gDAAsB,EAAC,IAAI,CAAC,WAAW,CAAC,EAAE,aAAa,EAAE,+BAAkB,EAAE,CAAC;IAC1H,CAAC;IACD,OAAO;QACL,GAAG,IAAI;QACP,GAAG,MAAM;QACT,WAAW,EAAE,IAAA,gDAAsB,EAAC,IAAI,CAAC,WAAW,CAAC;QACrD,aAAa,EAAE,OAAO,CAAC,IAAI;QAC3B,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,SAAS,CAAC,WAAW,IAAI,MAAM,CAAC,iCAAoB,CAAC,EAAE;KACxH,CAAC;AACJ,CAAC;AAWD,SAAgB,4BAA4B,CAC1C,IAA2B,EAC3B,OAAoB,EACpB,KAAa,EACb,SAAmC;IAEnC,OAAO;QACL,GAAG,IAAI;QACP,WAAW,EAAE,OAAO,CAAC,IAAI;QACzB,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI;QAC5B,SAAS,EAAE,IAAA,0BAAa,EAAC,KAAK,CAAC;QAC/B,YAAY,EAAE,OAAO,CAAC,SAAS;YAC7B,CAAC,CAAC,IAAI,CAAC,YAAY;YACnB,CAAC,CAAC,IAAA,8BAAiB,EAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,SAAS,EAAE,iCAAoB,CAAC;QACvF,WAAW,EAAE,IAAA,gDAAsB,EAAC,IAAI,CAAC,WAAW,CAAC;KACtD,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,8 @@
|
|
|
1
|
+
import { type XemaInstallationInventory } from '@xemahq/installation-tenancy';
|
|
2
|
+
import { Substrate } from '../config/schema';
|
|
3
|
+
export declare const EVENT_HUB_SERVER_KEY = "servers.eventHub";
|
|
4
|
+
export declare function declaredEventHubUrl(inventory: XemaInstallationInventory): string | undefined;
|
|
5
|
+
export declare function requireSeedEventHubUrl(eventHubUrl: string | undefined): string;
|
|
6
|
+
export declare function isLoopbackHost(host: string): boolean;
|
|
7
|
+
export declare function requireReachableServerEndpoints(inventory: XemaInstallationInventory, substrate: Substrate.Container | Substrate.Helm): void;
|
|
8
|
+
//# sourceMappingURL=seed-platform-endpoints.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"seed-platform-endpoints.d.ts","sourceRoot":"","sources":["../../../src/runtime/seed/seed-platform-endpoints.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,KAAK,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAG9F,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAG7C,eAAO,MAAM,oBAAoB,qBAAuC,CAAC;AAGzE,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,yBAAyB,GAAG,MAAM,GAAG,SAAS,CAE5F;AAGD,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAQ9E;AAoBD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAUpD;AAQD,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,yBAAyB,EACpC,SAAS,EAAE,SAAS,CAAC,SAAS,GAAG,SAAS,CAAC,IAAI,GAC9C,IAAI,CAcN"}
|