@xemahq/xema 0.59.0 → 0.60.1

package/dist/runtime/seed/seed-platform-endpoints.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EVENT_HUB_SERVER_KEY = void 0;
+exports.declaredEventHubUrl = declaredEventHubUrl;
+exports.requireSeedEventHubUrl = requireSeedEventHubUrl;
+exports.isLoopbackHost = isLoopbackHost;
+exports.requireReachableServerEndpoints = requireReachableServerEndpoints;
+const installation_tenancy_1 = require("@xemahq/installation-tenancy");
+const cli_errors_1 = require("../../lib/cli-errors");
+const schema_1 = require("../config/schema");
+exports.EVENT_HUB_SERVER_KEY = `servers.${installation_tenancy_1.DeclaredServer.EventHub}`;
+function declaredEventHubUrl(inventory) {
+    return inventory.servers[installation_tenancy_1.DeclaredServer.EventHub]?.endpoint;
+}
+function requireSeedEventHubUrl(eventHubUrl) {
+    if (eventHubUrl === undefined || eventHubUrl === '') {
+        throw new cli_errors_1.CliConfigurationError(`The seed needs the event hub, but the installation declares no ${exports.EVENT_HUB_SERVER_KEY}. ` +
+            `Declare \`${installation_tenancy_1.DeclaredServer.EventHub}: { endpoint: <http(s) url of event-hub-api> }\` in the servers declaration (--servers) of the installation.`);
+    }
+    return eventHubUrl;
+}
+const SCHEME = /^[a-z][a-z0-9+.-]*:\/\//i;
+const IPV4_LOOPBACK = /^127(\.\d{1,3}){3}$/;
+const IPV4_MAPPED_LOOPBACK = /^::ffff:7f[0-9a-f]{2}:[0-9a-f]{1,4}$/;
+function endpointHost(key, endpoint) {
+    try {
+        return new URL(SCHEME.test(endpoint) ? endpoint : `tcp://${endpoint}`).hostname.replace(/^\[|\]$/g, '').toLowerCase();
+    }
+    catch {
+        throw new cli_errors_1.CliConfigurationError(`${key}.endpoint "${endpoint}" is not a valid endpoint (an http(s) URL or host:port).`);
+    }
+}
+function isLoopbackHost(host) {
+    const name = host.replace(/\.$/, '');
+    return (name === 'localhost' ||
+        name.endsWith('.localhost') ||
+        host === '0.0.0.0' ||
+        host === '::1' ||
+        IPV4_LOOPBACK.test(host) ||
+        IPV4_MAPPED_LOOPBACK.test(host));
+}
+function requireReachableServerEndpoints(inventory, substrate) {
+    const inside = substrate === schema_1.Substrate.Container ? 'container' : 'pod';
+    for (const [name, server] of Object.entries(inventory.servers)) {
+        if (server === undefined) {
+            continue;
+        }
+        const key = `servers.${name}`;
+        if (isLoopbackHost(endpointHost(key, server.endpoint))) {
+            throw new cli_errors_1.CliConfigurationError(`${key}.endpoint is "${server.endpoint}", a loopback address: inside the ${inside} that is the ${inside} itself, not the host. ` +
+                `Declare an endpoint reachable from inside the ${inside}, for example host.docker.internal or the compose network alias.`);
+        }
+    }
+}
+//# sourceMappingURL=seed-platform-endpoints.js.map

package/dist/runtime/seed/seed-platform-endpoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-platform-endpoints.js","sourceRoot":"","sources":["../../../src/runtime/seed/seed-platform-endpoints.ts"],"names":[],"mappings":";;;AASA,kDAEC;AAGD,wDAQC;AAoBD,wCAUC;AAQD,0EAiBC;AA7ED,uEAA8F;AAE9F,qDAA6D;AAC7D,6CAA6C;AAGhC,QAAA,oBAAoB,GAAG,WAAW,qCAAc,CAAC,QAAQ,EAAE,CAAC;AAGzE,SAAgB,mBAAmB,CAAC,SAAoC;IACtE,OAAO,SAAS,CAAC,OAAO,CAAC,qCAAc,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;AAC9D,CAAC;AAGD,SAAgB,sBAAsB,CAAC,WAA+B;IACpE,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;QACpD,MAAM,IAAI,kCAAqB,CAC7B,kEAAkE,4BAAoB,IAAI;YACxF,aAAa,qCAAc,CAAC,QAAQ,8GAA8G,CACrJ,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,MAAM,GAAG,0BAA0B,CAAC;AAC1C,MAAM,aAAa,GAAG,qBAAqB,CAAC;AAC5C,MAAM,oBAAoB,GAAG,sCAAsC,CAAC;AAGpE,SAAS,YAAY,CAAC,GAAW,EAAE,QAAgB;IACjD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACxH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kCAAqB,CAAC,GAAG,GAAG,cAAc,QAAQ,0DAA0D,CAAC,CAAC;IAC1H,CAAC;AACH,CAAC;AAOD,SAAgB,cAAc,CAAC,IAAY;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrC,OAAO,CACL,IAAI,KAAK,WAAW;QACpB,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC3B,IAAI,KAAK,SAAS;QAClB,IAAI,KAAK,KAAK;QACd,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QACxB,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAChC,CAAC;AACJ,CAAC;AAQD,SAAgB,+BAA+B,CAC7C,SAAoC,EACpC,SAA+C;IAE/C,MAAM,MAAM,GAAG,SAAS,KAAK,kBAAS,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC;IACvE,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,WAAW,IAAI,EAAE,CAAC;QAC9B,IAAI,cAAc,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,kCAAqB,CAC7B,GAAG,GAAG,iBAAiB,MAAM,CAAC,QAAQ,qCAAqC,MAAM,gBAAgB,MAAM,yBAAyB;gBAC9H,iDAAiD,MAAM,kEAAkE,CAC5H,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/runtime/seed/seed-process.d.ts

@@ -0,0 +1,22 @@
+import { type ChildProcess } from 'node:child_process';
+import type { SeedEnv } from './seed-environment';
+import type { NativeSeedProcessRecord, NativeSeedRecord } from './seed-record';
+import type { SupervisorLaunchOptions } from '@xemahq/xema-service-nest';
+export declare const SEED_STOP_GRACE_MS = 10000;
+export declare const SEED_STOP_VERIFY_MS = 3000;
+export declare enum SeedOwnership {
+    Gone = "gone",
+    Owned = "owned",
+    Unverified = "unverified"
+}
+export interface SeedLaunchEnv {
+    HOME: string;
+    PATH: string;
+}
+export declare function seedLaunchEnv(path?: string | undefined): SeedLaunchEnv;
+export declare function spawnSeedProcess(binPath: string, options: SupervisorLaunchOptions, logFile: string, memberEnv?: SeedEnv): ChildProcess;
+export declare function processExists(pid: number): boolean;
+export declare function launcherIsActive(record: NativeSeedRecord): boolean;
+export declare function seedOwnership(record: NativeSeedProcessRecord): Promise<SeedOwnership>;
+export declare function stopSeedProcess(record: NativeSeedProcessRecord, graceMs?: number): Promise<void>;
+//# sourceMappingURL=seed-process.d.ts.map

package/dist/runtime/seed/seed-process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-process.d.ts","sourceRoot":"","sources":["../../../src/runtime/seed/seed-process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAY9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC/E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAGzE,eAAO,MAAM,kBAAkB,QAAS,CAAC;AAEzC,eAAO,MAAM,mBAAmB,OAAQ,CAAC;AAEzC,oBAAY,aAAa;IAEvB,IAAI,SAAS;IAEb,KAAK,UAAU;IAEf,UAAU,eAAe;CAC1B;AAGD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,aAAa,CAAC,IAAI,GAAE,MAAM,GAAG,SAA4B,GAAG,aAAa,CAKxF;AAQD,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,uBAAuB,EAChC,OAAO,EAAE,MAAM,EACf,SAAS,GAAE,OAAY,GACtB,YAAY,CAkBd;AAGD,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOlD;AAWD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAKlE;AAGD,wBAAsB,aAAa,CAAC,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,aAAa,CAAC,CAW3F;AAGD,wBAAsB,eAAe,CACnC,MAAM,EAAE,uBAAuB,EAC/B,OAAO,GAAE,MAA2B,GACnC,OAAO,CAAC,IAAI,CAAC,CAMf"}

package/dist/runtime/seed/seed-process.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SeedOwnership = exports.SEED_STOP_VERIFY_MS = exports.SEED_STOP_GRACE_MS = void 0;
+exports.seedLaunchEnv = seedLaunchEnv;
+exports.spawnSeedProcess = spawnSeedProcess;
+exports.processExists = processExists;
+exports.launcherIsActive = launcherIsActive;
+exports.seedOwnership = seedOwnership;
+exports.stopSeedProcess = stopSeedProcess;
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const native_process_group_1 = require("../native-process-group");
+const supervisor_contract_1 = require("./supervisor-contract");
+exports.SEED_STOP_GRACE_MS = 10_000;
+exports.SEED_STOP_VERIFY_MS = 3_000;
+var SeedOwnership;
+(function (SeedOwnership) {
+    SeedOwnership["Gone"] = "gone";
+    SeedOwnership["Owned"] = "owned";
+    SeedOwnership["Unverified"] = "unverified";
+})(SeedOwnership || (exports.SeedOwnership = SeedOwnership = {}));
+function seedLaunchEnv(path = process.env.PATH) {
+    if (path === undefined || path === '') {
+        throw new Error('Cannot start the seed: PATH is not set in the CLI environment.');
+    }
+    return { HOME: (0, node_os_1.homedir)(), PATH: path };
+}
+function spawnSeedProcess(binPath, options, logFile, memberEnv = {}) {
+    (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(logFile), { recursive: true, mode: 0o700 });
+    const descriptor = (0, node_fs_1.openSync)(logFile, 'a', 0o600);
+    try {
+        const child = (0, node_child_process_1.spawn)(process.execPath, [binPath, ...(0, supervisor_contract_1.supervisorArgv)(options)], {
+            detached: true,
+            stdio: ['ignore', descriptor, descriptor],
+            env: { ...memberEnv, ...seedLaunchEnv() },
+        });
+        child.unref();
+        return child;
+    }
+    finally {
+        (0, node_fs_1.closeSync)(descriptor);
+    }
+}
+function processExists(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code === 'EPERM';
+    }
+}
+function fingerprintMatches(pid, expected) {
+    try {
+        return (0, native_process_group_1.captureProcessFingerprint)(pid) === expected;
+    }
+    catch {
+        return false;
+    }
+}
+function launcherIsActive(record) {
+    return (processExists(record.launcherPid) &&
+        fingerprintMatches(record.launcherPid, record.launcherFingerprint));
+}
+async function seedOwnership(record) {
+    const members = await (0, native_process_group_1.processGroupMembersAsync)(record.processGroupId);
+    if (members.length === 0) {
+        return SeedOwnership.Gone;
+    }
+    const owned = record.members.some((identity) => members.includes(identity.pid) &&
+        fingerprintMatches(identity.pid, identity.processFingerprint));
+    return owned ? SeedOwnership.Owned : SeedOwnership.Unverified;
+}
+async function stopSeedProcess(record, graceMs = exports.SEED_STOP_GRACE_MS) {
+    await (0, native_process_group_1.terminateOwnedProcessGroup)({ processGroupId: record.processGroupId, members: record.members }, graceMs, exports.SEED_STOP_VERIFY_MS);
+}
+//# sourceMappingURL=seed-process.js.map

package/dist/runtime/seed/seed-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-process.js","sourceRoot":"","sources":["../../../src/runtime/seed/seed-process.ts"],"names":[],"mappings":";;;AAoCA,sCAKC;AAQD,4CAuBC;AAGD,sCAOC;AAWD,4CAKC;AAGD,sCAWC;AAGD,0CASC;AA5HD,2DAA8D;AAC9D,qCAAyD;AACzD,qCAAkC;AAClC,yCAAoC;AAEpC,kEAIiC;AACjC,+DAAuD;AAO1C,QAAA,kBAAkB,GAAG,MAAM,CAAC;AAE5B,QAAA,mBAAmB,GAAG,KAAK,CAAC;AAEzC,IAAY,aAOX;AAPD,WAAY,aAAa;IAEvB,8BAAa,CAAA;IAEb,gCAAe,CAAA;IAEf,0CAAyB,CAAA;AAC3B,CAAC,EAPW,aAAa,6BAAb,aAAa,QAOxB;AAQD,SAAgB,aAAa,CAAC,OAA2B,OAAO,CAAC,GAAG,CAAC,IAAI;IACvE,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAA,iBAAO,GAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC;AAQD,SAAgB,gBAAgB,CAC9B,OAAe,EACf,OAAgC,EAChC,OAAe,EACf,YAAqB,EAAE;IAEvB,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,IAAA,kBAAQ,EAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAA,0BAAK,EACjB,OAAO,CAAC,QAAQ,EAChB,CAAC,OAAO,EAAE,GAAG,IAAA,oCAAc,EAAC,OAAO,CAAC,CAAC,EACrC;YACE,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC;YACzC,GAAG,EAAE,EAAE,GAAG,SAAS,EAAE,GAAG,aAAa,EAAE,EAAE;SAC1C,CACF,CAAC;QACF,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,IAAA,mBAAS,EAAC,UAAU,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAGD,SAAgB,aAAa,CAAC,GAAW;IACvC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW,EAAE,QAAgB;IACvD,IAAI,CAAC;QACH,OAAO,IAAA,gDAAyB,EAAC,GAAG,CAAC,KAAK,QAAQ,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAGD,SAAgB,gBAAgB,CAAC,MAAwB;IACvD,OAAO,CACL,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC;QACjC,kBAAkB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,mBAAmB,CAAC,CACnE,CAAC;AACJ,CAAC;AAGM,KAAK,UAAU,aAAa,CAAC,MAA+B;IACjE,MAAM,OAAO,GAAG,MAAM,IAAA,+CAAwB,EAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACtE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,aAAa,CAAC,IAAI,CAAC;IAC5B,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAC/B,CAAC,QAAQ,EAAE,EAAE,CACX,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC9B,kBAAkB,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAChE,CAAC;IACF,OAAO,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC;AAChE,CAAC;AAGM,KAAK,UAAU,eAAe,CACnC,MAA+B,EAC/B,UAAkB,0BAAkB;IAEpC,MAAM,IAAA,iDAA0B,EAC9B,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAClE,OAAO,EACP,2BAAmB,CACpB,CAAC;AACJ,CAAC"}

package/dist/runtime/seed/seed-record.d.ts

@@ -0,0 +1,101 @@
+import { z } from 'zod';
+import { Substrate } from '../config/schema';
+declare const NativeSeedProcessSchema: z.ZodObject<{
+    name: z.ZodString;
+    pid: z.ZodNumber;
+    processGroupId: z.ZodNumber;
+    members: z.ZodArray<z.ZodObject<{
+        pid: z.ZodNumber;
+        processFingerprint: z.ZodString;
+    }, z.core.$strict>>;
+    probePort: z.ZodNumber;
+    logFile: z.ZodString;
+}, z.core.$strict>;
+export type NativeSeedProcessRecord = z.infer<typeof NativeSeedProcessSchema>;
+export declare const NativeSeedRecordSchema: z.ZodObject<{
+    substrate: z.ZodLiteral<Substrate.Native>;
+    processes: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        pid: z.ZodNumber;
+        processGroupId: z.ZodNumber;
+        members: z.ZodArray<z.ZodObject<{
+            pid: z.ZodNumber;
+            processFingerprint: z.ZodString;
+        }, z.core.$strict>>;
+        probePort: z.ZodNumber;
+        logFile: z.ZodString;
+    }, z.core.$strict>>;
+    launcherPid: z.ZodNumber;
+    launcherFingerprint: z.ZodString;
+    installationId: z.ZodString;
+    planHash: z.ZodString;
+    executionId: z.ZodString;
+    startedAt: z.ZodString;
+}, z.core.$strict>;
+export type NativeSeedRecord = z.infer<typeof NativeSeedRecordSchema>;
+declare const ContainerSeedProcessSchema: z.ZodObject<{
+    name: z.ZodString;
+    containerName: z.ZodString;
+    containerId: z.ZodString;
+    probePort: z.ZodNumber;
+}, z.core.$strict>;
+export type ContainerSeedProcessRecord = z.infer<typeof ContainerSeedProcessSchema>;
+export declare const ContainerSeedRecordSchema: z.ZodObject<{
+    substrate: z.ZodLiteral<Substrate.Container>;
+    processes: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        containerName: z.ZodString;
+        containerId: z.ZodString;
+        probePort: z.ZodNumber;
+    }, z.core.$strict>>;
+    image: z.ZodString;
+    installationId: z.ZodString;
+    planHash: z.ZodString;
+    executionId: z.ZodString;
+    startedAt: z.ZodString;
+}, z.core.$strict>;
+export type ContainerSeedRecord = z.infer<typeof ContainerSeedRecordSchema>;
+export declare const SeedRecordSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    substrate: z.ZodLiteral<Substrate.Native>;
+    processes: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        pid: z.ZodNumber;
+        processGroupId: z.ZodNumber;
+        members: z.ZodArray<z.ZodObject<{
+            pid: z.ZodNumber;
+            processFingerprint: z.ZodString;
+        }, z.core.$strict>>;
+        probePort: z.ZodNumber;
+        logFile: z.ZodString;
+    }, z.core.$strict>>;
+    launcherPid: z.ZodNumber;
+    launcherFingerprint: z.ZodString;
+    installationId: z.ZodString;
+    planHash: z.ZodString;
+    executionId: z.ZodString;
+    startedAt: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    substrate: z.ZodLiteral<Substrate.Container>;
+    processes: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        containerName: z.ZodString;
+        containerId: z.ZodString;
+        probePort: z.ZodNumber;
+    }, z.core.$strict>>;
+    image: z.ZodString;
+    installationId: z.ZodString;
+    planHash: z.ZodString;
+    executionId: z.ZodString;
+    startedAt: z.ZodString;
+}, z.core.$strict>], "substrate">;
+export type SeedRecord = z.infer<typeof SeedRecordSchema>;
+export declare function seedRecordPath(installationId: string): string;
+export declare function seedLogPath(installationId: string, process: string): string;
+export declare function writeSeedRecord(record: SeedRecord): void;
+export declare function readSeedRecord(installationId: string): SeedRecord | undefined;
+export declare function listSeedRecords(): SeedRecord[];
+export declare function seedFilesDirectory(installationId: string, process: string): string;
+export declare function seedResolvedDeploymentPath(installationId: string): string;
+export declare function removeSeedRecord(installationId: string): void;
+export {};
+//# sourceMappingURL=seed-record.d.ts.map

package/dist/runtime/seed/seed-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-record.d.ts","sourceRoot":"","sources":["../../../src/runtime/seed/seed-record.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AA4B7C,QAAA,MAAM,uBAAuB;;;;;;;;;;kBAWlB,CAAC;AACZ,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAG9E,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;kBASxB,CAAC;AACZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAGtE,QAAA,MAAM,0BAA0B;;;;;kBAQrB,CAAC;AACZ,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAGpF,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;kBAQ3B,CAAC;AACZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCAG3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAM1D,wBAAgB,cAAc,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAQ7D;AAED,wBAAgB,WAAW,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAO3E;AAGD,wBAAgB,eAAe,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,CAUxD;AAGD,wBAAgB,cAAc,CAAC,cAAc,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAE7E;AAGD,wBAAgB,eAAe,IAAI,UAAU,EAAE,CAe9C;AA2BD,wBAAgB,kBAAkB,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAElF;AAGD,wBAAgB,0BAA0B,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAEzE;AAGD,wBAAgB,gBAAgB,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAG7D"}

package/dist/runtime/seed/seed-record.js

@@ -0,0 +1,141 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SeedRecordSchema = exports.ContainerSeedRecordSchema = exports.NativeSeedRecordSchema = void 0;
+exports.seedRecordPath = seedRecordPath;
+exports.seedLogPath = seedLogPath;
+exports.writeSeedRecord = writeSeedRecord;
+exports.readSeedRecord = readSeedRecord;
+exports.listSeedRecords = listSeedRecords;
+exports.seedFilesDirectory = seedFilesDirectory;
+exports.seedResolvedDeploymentPath = seedResolvedDeploymentPath;
+exports.removeSeedRecord = removeSeedRecord;
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const zod_1 = require("zod");
+const schema_1 = require("../config/schema");
+const ProcessIdentitySchema = zod_1.z
+    .object({
+    pid: zod_1.z.number().int().positive(),
+    processFingerprint: zod_1.z.string().min(1),
+})
+    .strict();
+const SeedRecordBase = {
+    installationId: zod_1.z.string().min(1),
+    planHash: zod_1.z.string().min(1),
+    executionId: zod_1.z.string().min(1),
+    startedAt: zod_1.z.string().min(1),
+};
+const ProbePortSchema = zod_1.z.number().int().positive().max(65_535);
+const NativeSeedProcessSchema = zod_1.z
+    .object({
+    name: zod_1.z.string().min(1),
+    pid: zod_1.z.number().int().positive(),
+    processGroupId: zod_1.z.number().int().positive(),
+    members: zod_1.z.array(ProcessIdentitySchema).min(1),
+    probePort: ProbePortSchema,
+    logFile: zod_1.z.string().min(1),
+})
+    .strict();
+exports.NativeSeedRecordSchema = zod_1.z
+    .object({
+    ...SeedRecordBase,
+    substrate: zod_1.z.literal(schema_1.Substrate.Native),
+    processes: zod_1.z.array(NativeSeedProcessSchema).min(1),
+    launcherPid: zod_1.z.number().int().positive(),
+    launcherFingerprint: zod_1.z.string().min(1),
+})
+    .strict();
+const ContainerSeedProcessSchema = zod_1.z
+    .object({
+    name: zod_1.z.string().min(1),
+    containerName: zod_1.z.string().min(1),
+    containerId: zod_1.z.string().min(1),
+    probePort: ProbePortSchema,
+})
+    .strict();
+exports.ContainerSeedRecordSchema = zod_1.z
+    .object({
+    ...SeedRecordBase,
+    substrate: zod_1.z.literal(schema_1.Substrate.Container),
+    processes: zod_1.z.array(ContainerSeedProcessSchema).min(1),
+    image: zod_1.z.string().min(1),
+})
+    .strict();
+exports.SeedRecordSchema = zod_1.z.discriminatedUnion('substrate', [
+    exports.NativeSeedRecordSchema,
+    exports.ContainerSeedRecordSchema,
+]);
+function installationDigest(installationId) {
+    return (0, node_crypto_1.createHash)('sha256').update(installationId).digest('hex');
+}
+function seedRecordPath(installationId) {
+    return (0, node_path_1.join)((0, node_os_1.homedir)(), '.xema', 'run', 'seeds', `${installationDigest(installationId)}.json`);
+}
+function seedLogPath(installationId, process) {
+    return (0, node_path_1.join)((0, node_os_1.homedir)(), '.xema', 'logs', `seed-${installationDigest(installationId).slice(0, 20)}-${process}.log`);
+}
+function writeSeedRecord(record) {
+    const path = seedRecordPath(record.installationId);
+    (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(path), { recursive: true, mode: 0o700 });
+    const temporary = `${path}.${String(process.pid)}.${(0, node_crypto_1.randomUUID)()}.tmp`;
+    (0, node_fs_1.writeFileSync)(temporary, `${JSON.stringify(record, null, 2)}\n`, {
+        encoding: 'utf8',
+        flag: 'wx',
+        mode: 0o600,
+    });
+    (0, node_fs_1.renameSync)(temporary, path);
+}
+function readSeedRecord(installationId) {
+    return readSeedRecordFile(seedRecordPath(installationId));
+}
+function listSeedRecords() {
+    const directory = (0, node_path_1.dirname)(seedRecordPath(''));
+    let names;
+    try {
+        names = (0, node_fs_1.readdirSync)(directory).filter((name) => name.endsWith('.json'));
+    }
+    catch (error) {
+        if (error.code === 'ENOENT') {
+            return [];
+        }
+        throw error;
+    }
+    return names.flatMap((name) => {
+        const record = readSeedRecordFile((0, node_path_1.join)(directory, name));
+        return record === undefined ? [] : [record];
+    });
+}
+function readSeedRecordFile(path) {
+    let text;
+    try {
+        text = (0, node_fs_1.readFileSync)(path, 'utf8');
+    }
+    catch (error) {
+        if (error.code === 'ENOENT') {
+            return undefined;
+        }
+        throw error;
+    }
+    const parsed = exports.SeedRecordSchema.safeParse(JSON.parse(text));
+    if (!parsed.success) {
+        throw new Error(`The seed record ${path} is not valid (${parsed.error.issues.map((issue) => issue.message).join('; ')}). ` +
+            'Remove it after confirming no seed process is running.');
+    }
+    return parsed.data;
+}
+function seedFilesRoot(installationId) {
+    return (0, node_path_1.join)((0, node_os_1.homedir)(), '.xema', 'run', 'seed-files', installationDigest(installationId).slice(0, 20));
+}
+function seedFilesDirectory(installationId, process) {
+    return (0, node_path_1.join)(seedFilesRoot(installationId), process);
+}
+function seedResolvedDeploymentPath(installationId) {
+    return (0, node_path_1.join)(seedFilesRoot(installationId), 'resolved-deployment.json');
+}
+function removeSeedRecord(installationId) {
+    (0, node_fs_1.rmSync)(seedRecordPath(installationId), { force: true });
+    (0, node_fs_1.rmSync)(seedFilesRoot(installationId), { recursive: true, force: true });
+}
+//# sourceMappingURL=seed-record.js.map

package/dist/runtime/seed/seed-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-record.js","sourceRoot":"","sources":["../../../src/runtime/seed/seed-record.ts"],"names":[],"mappings":";;;AAuGA,wCAQC;AAED,kCAOC;AAGD,0CAUC;AAGD,wCAEC;AAGD,0CAeC;AA2BD,gDAEC;AAGD,gEAEC;AAGD,4CAGC;AApMD,6CAAqD;AACrD,qCAOiB;AACjB,qCAAkC;AAClC,yCAA0C;AAE1C,6BAAwB;AAExB,6CAA6C;AAU7C,MAAM,qBAAqB,GAAG,OAAC;KAC5B,MAAM,CAAC;IACN,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,cAAc,GAAG;IACrB,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACpB,CAAC;AAEX,MAAM,eAAe,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAGhE,MAAM,uBAAuB,GAAG,OAAC;KAC9B,MAAM,CAAC;IAEN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAEvB,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC3C,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,SAAS,EAAE,eAAe;IAC1B,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AAIC,QAAA,sBAAsB,GAAG,OAAC;KACpC,MAAM,CAAC;IACN,GAAG,cAAc;IACjB,SAAS,EAAE,OAAC,CAAC,OAAO,CAAC,kBAAS,CAAC,MAAM,CAAC;IACtC,SAAS,EAAE,OAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAElD,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxC,mBAAmB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACvC,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,0BAA0B,GAAG,OAAC;KACjC,MAAM,CAAC;IAEN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,SAAS,EAAE,eAAe;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AAIC,QAAA,yBAAyB,GAAG,OAAC;KACvC,MAAM,CAAC;IACN,GAAG,cAAc;IACjB,SAAS,EAAE,OAAC,CAAC,OAAO,CAAC,kBAAS,CAAC,SAAS,CAAC;IACzC,SAAS,EAAE,OAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAErD,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACzB,CAAC;KACD,MAAM,EAAE,CAAC;AAGC,QAAA,gBAAgB,GAAG,OAAC,CAAC,kBAAkB,CAAC,WAAW,EAAE;IAChE,8BAAsB;IACtB,iCAAyB;CAC1B,CAAC,CAAC;AAGH,SAAS,kBAAkB,CAAC,cAAsB;IAChD,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AAED,SAAgB,cAAc,CAAC,cAAsB;IACnD,OAAO,IAAA,gBAAI,EACT,IAAA,iBAAO,GAAE,EACT,OAAO,EACP,KAAK,EACL,OAAO,EACP,GAAG,kBAAkB,CAAC,cAAc,CAAC,OAAO,CAC7C,CAAC;AACJ,CAAC;AAED,SAAgB,WAAW,CAAC,cAAsB,EAAE,OAAe;IACjE,OAAO,IAAA,gBAAI,EACT,IAAA,iBAAO,GAAE,EACT,OAAO,EACP,MAAM,EACN,QAAQ,kBAAkB,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,OAAO,MAAM,CACzE,CAAC;AACJ,CAAC;AAGD,SAAgB,eAAe,CAAC,MAAkB;IAChD,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACnD,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAA,wBAAU,GAAE,MAAM,CAAC;IACvE,IAAA,uBAAa,EAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QAC/D,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,IAAA,oBAAU,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAC9B,CAAC;AAGD,SAAgB,cAAc,CAAC,cAAsB;IACnD,OAAO,kBAAkB,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,CAAC;AAC5D,CAAC;AAGD,SAAgB,eAAe;IAC7B,MAAM,SAAS,GAAG,IAAA,mBAAO,EAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,IAAA,qBAAW,EAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QAC5B,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;QACzD,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,wBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,kBAAkB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;YACxG,wDAAwD,CAC3D,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,aAAa,CAAC,cAAsB;IAC3C,OAAO,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,kBAAkB,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AACxG,CAAC;AAGD,SAAgB,kBAAkB,CAAC,cAAsB,EAAE,OAAe;IACxE,OAAO,IAAA,gBAAI,EAAC,aAAa,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC;AACtD,CAAC;AAGD,SAAgB,0BAA0B,CAAC,cAAsB;IAC/D,OAAO,IAAA,gBAAI,EAAC,aAAa,CAAC,cAAc,CAAC,EAAE,0BAA0B,CAAC,CAAC;AACzE,CAAC;AAGD,SAAgB,gBAAgB,CAAC,cAAsB;IACrD,IAAA,gBAAM,EAAC,cAAc,CAAC,cAAc,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,IAAA,gBAAM,EAAC,aAAa,CAAC,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC1E,CAAC"}

package/dist/runtime/seed/seed-resolved-deployment.d.ts

@@ -0,0 +1,14 @@
+export interface SeedResolvedDeploymentInput {
+    readonly installationId: string;
+    readonly editionId: string;
+    readonly distributionLockPath: string;
+    readonly imagesLockPath: string;
+    readonly authorizationLockPath: string;
+}
+export interface SeedResolvedDeploymentFile {
+    readonly path: string;
+    readonly sha256: string;
+    readonly runtimeNamespace: string;
+}
+export declare function writeSeedResolvedDeployment(input: SeedResolvedDeploymentInput): Promise<SeedResolvedDeploymentFile>;
+//# sourceMappingURL=seed-resolved-deployment.d.ts.map

package/dist/runtime/seed/seed-resolved-deployment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-resolved-deployment.d.ts","sourceRoot":"","sources":["../../../src/runtime/seed/seed-resolved-deployment.ts"],"names":[],"mappings":"AAuBA,MAAM,WAAW,2BAA2B;IAE1C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;CACxC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAOD,wBAAsB,2BAA2B,CAAC,KAAK,EAAE,2BAA2B,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAoCzH"}

package/dist/runtime/seed/seed-resolved-deployment.js

@@ -0,0 +1,52 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.writeSeedResolvedDeployment = writeSeedResolvedDeployment;
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const content_address_1 = require("@xemahq/contracts/content-address");
+const distribution_1 = require("@xemahq/contracts/distribution");
+const package_json_1 = __importDefault(require("@xemahq/contracts/package.json"));
+const seed_installation_files_1 = require("./seed-installation-files");
+const seed_record_1 = require("./seed-record");
+const LOCAL_EDITION_VERSION = '0.0.0-local';
+const LOCAL_EDITION_REGISTRY = 'xema-cli.invalid';
+async function writeSeedResolvedDeployment(input) {
+    const lockBytes = (0, node_fs_1.readFileSync)(input.distributionLockPath);
+    const imagesLockBytes = (0, node_fs_1.readFileSync)(input.imagesLockPath);
+    const authorizationLockBytes = (0, node_fs_1.readFileSync)(input.authorizationLockPath);
+    const lockSha256 = (0, node_crypto_1.createHash)('sha256').update(lockBytes).digest('hex');
+    let resolved;
+    try {
+        resolved = await (0, distribution_1.resolveUnsplitDeployment)({
+            lockBytes,
+            imagesLockBytes,
+            authorizationLockBytes,
+            deployment: input.installationId,
+            runtimeNamespace: input.installationId,
+            edition: {
+                version: LOCAL_EDITION_VERSION,
+                registry: LOCAL_EDITION_REGISTRY,
+                ref: `${LOCAL_EDITION_REGISTRY}/editions/${input.editionId}@sha256:${lockSha256}`,
+            },
+            resolverVersion: package_json_1.default.version,
+        });
+    }
+    catch (error) {
+        throw new Error(`The unsplit deployment of edition "${input.editionId}" cannot be resolved for installation "${input.installationId}" ` +
+            `(deployment and runtime namespace) from ${input.distributionLockPath}, ${input.imagesLockPath} and ` +
+            `${input.authorizationLockPath} with @xemahq/contracts@${package_json_1.default.version}: ` +
+            (error instanceof Error ? error.message : String(error)), { cause: error });
+    }
+    const bytes = Buffer.from((0, content_address_1.canonicalJsonStringify)(resolved), 'utf-8');
+    const path = (0, seed_record_1.seedResolvedDeploymentPath)(input.installationId);
+    (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(path), { recursive: true, mode: seed_installation_files_1.PRIVATE_DIRECTORY_MODE });
+    (0, node_fs_1.chmodSync)((0, node_path_1.dirname)(path), seed_installation_files_1.PRIVATE_DIRECTORY_MODE);
+    (0, node_fs_1.writeFileSync)(path, bytes, { mode: seed_installation_files_1.PRIVATE_FILE_MODE });
+    (0, node_fs_1.chmodSync)(path, seed_installation_files_1.PRIVATE_FILE_MODE);
+    return { path, sha256: (0, node_crypto_1.createHash)('sha256').update(bytes).digest('hex'), runtimeNamespace: resolved.runtimeNamespace };
+}
+//# sourceMappingURL=seed-resolved-deployment.js.map

package/dist/runtime/seed/seed-resolved-deployment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-resolved-deployment.js","sourceRoot":"","sources":["../../../src/runtime/seed/seed-resolved-deployment.ts"],"names":[],"mappings":";;;;;AA4CA,kEAoCC;AAhFD,6CAAyC;AACzC,qCAA4E;AAC5E,yCAAoC;AAEpC,uEAA2E;AAC3E,iEAA0E;AAC1E,kFAA8D;AAE9D,uEAAsF;AACtF,+CAA2D;AAW3D,MAAM,qBAAqB,GAAG,aAAa,CAAC;AAC5C,MAAM,sBAAsB,GAAG,kBAAkB,CAAC;AAuB3C,KAAK,UAAU,2BAA2B,CAAC,KAAkC;IAClF,MAAM,SAAS,GAAG,IAAA,sBAAY,EAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC3D,MAAM,eAAe,GAAG,IAAA,sBAAY,EAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC3D,MAAM,sBAAsB,GAAG,IAAA,sBAAY,EAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxE,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,IAAA,uCAAwB,EAAC;YACxC,SAAS;YACT,eAAe;YACf,sBAAsB;YACtB,UAAU,EAAE,KAAK,CAAC,cAAc;YAChC,gBAAgB,EAAE,KAAK,CAAC,cAAc;YACtC,OAAO,EAAE;gBACP,OAAO,EAAE,qBAAqB;gBAC9B,QAAQ,EAAE,sBAAsB;gBAChC,GAAG,EAAE,GAAG,sBAAsB,aAAa,KAAK,CAAC,SAAS,WAAW,UAAU,EAAE;aAClF;YACD,eAAe,EAAE,sBAAgB,CAAC,OAAO;SAC1C,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,sCAAsC,KAAK,CAAC,SAAS,0CAA0C,KAAK,CAAC,cAAc,IAAI;YACrH,2CAA2C,KAAK,CAAC,oBAAoB,KAAK,KAAK,CAAC,cAAc,OAAO;YACrG,GAAG,KAAK,CAAC,qBAAqB,2BAA2B,sBAAgB,CAAC,OAAO,IAAI;YACrF,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAC1D,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAA,wCAAsB,EAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,IAAA,wCAA0B,EAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC9D,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,gDAAsB,EAAE,CAAC,CAAC;IAC5E,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,EAAE,gDAAsB,CAAC,CAAC;IACjD,IAAA,uBAAa,EAAC,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,2CAAiB,EAAE,CAAC,CAAC;IACxD,IAAA,mBAAS,EAAC,IAAI,EAAE,2CAAiB,CAAC,CAAC;IACnC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,EAAE,CAAC;AACzH,CAAC"}

package/dist/runtime/seed/substrate-facts.d.ts

@@ -0,0 +1,52 @@
+import { Substrate } from '../config/schema';
+export declare enum SubstrateFactName {
+    SandboxPtyProvider = "BIOME_SANDBOX_PTY_PROVIDER",
+    SandboxPtyRoot = "BIOME_SANDBOX_PTY_ROOT",
+    CatalogSource = "XEMA_CATALOG_SOURCE",
+    ForbidCatalogScan = "XEMA_FORBID_CATALOG_SCAN",
+    BiomeScanRootsServer = "XEMA_BIOME_SCAN_ROOTS_SERVER",
+    BiomeScanRootsWeb = "XEMA_BIOME_SCAN_ROOTS_WEB",
+    BiomeRuntimeRoot = "XEMA_BIOME_RUNTIME_ROOT",
+    BlobStorageBackend = "BLOB_STORAGE_BACKEND",
+    KernelStateProfile = "XEMA_KERNEL_STATE_PROFILE",
+    ControlPlaneNamespace = "XEMA_CONTROL_PLANE_NAMESPACE",
+    BiomeApiK8sNamespace = "BIOME_API_K8S_NAMESPACE",
+    BiomeApiBaseDomain = "BIOME_API_BASE_DOMAIN",
+    AdapterHostPullSecret = "BIOME_ADAPTER_HOST_PULL_SECRET"
+}
+export declare enum SandboxPtyProvider {
+    Local = "local"
+}
+export declare enum CatalogSource {
+    Lock = "lock"
+}
+export declare enum BlobStorageBackend {
+    S3 = "s3"
+}
+export declare const KERNEL_STATE_PROFILE_CLUSTER = "cluster";
+export declare const IMAGE_BIOMES_ROOT = "/app/biomes";
+export declare const IMAGE_BIOMES_RUNTIME_ROOT = "/app/biomes-runtime";
+export declare const IMAGE_SANDBOX_ROOT = "/tmp/biome-sandboxes";
+export interface NativeSeedPaths {
+    readonly biomesRoot?: string;
+    readonly biomesRuntimeRoot?: string;
+    readonly sandboxRoot?: string;
+}
+export interface HelmSeedFacts {
+    readonly namespace: string;
+    readonly biomeApiNamespace?: string;
+    readonly biomeApiBaseDomain?: string;
+    readonly adapterHostPullSecret?: string;
+}
+export type SubstrateFactsInput = {
+    readonly substrate: Substrate.Native;
+    readonly paths: NativeSeedPaths;
+} | {
+    readonly substrate: Substrate.Container;
+} | {
+    readonly substrate: Substrate.Helm;
+    readonly helm: HelmSeedFacts;
+};
+export type SubstrateFacts = Readonly<Partial<Record<SubstrateFactName, string>>>;
+export declare function substrateFacts(input: SubstrateFactsInput): SubstrateFacts;
+//# sourceMappingURL=substrate-facts.d.ts.map

package/dist/runtime/seed/substrate-facts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"substrate-facts.d.ts","sourceRoot":"","sources":["../../../src/runtime/seed/substrate-facts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAS7C,oBAAY,iBAAiB;IAC3B,kBAAkB,+BAA+B;IACjD,cAAc,2BAA2B;IACzC,aAAa,wBAAwB;IACrC,iBAAiB,6BAA6B;IAC9C,oBAAoB,iCAAiC;IACrD,iBAAiB,8BAA8B;IAC/C,gBAAgB,4BAA4B;IAC5C,kBAAkB,yBAAyB;IAC3C,kBAAkB,8BAA8B;IAChD,qBAAqB,iCAAiC;IACtD,oBAAoB,4BAA4B;IAChD,kBAAkB,0BAA0B;IAC5C,qBAAqB,mCAAmC;CACzD;AAGD,oBAAY,kBAAkB;IAC5B,KAAK,UAAU;CAChB;AAGD,oBAAY,aAAa;IACvB,IAAI,SAAS;CACd;AAED,oBAAY,kBAAkB;IAC5B,EAAE,OAAO;CACV;AAGD,eAAO,MAAM,4BAA4B,YAAY,CAAC;AAGtD,eAAO,MAAM,iBAAiB,gBAAgB,CAAC;AAC/C,eAAO,MAAM,yBAAyB,wBAAwB,CAAC;AAC/D,eAAO,MAAM,kBAAkB,yBAAyB,CAAC;AAOzD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAGD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;CACzC;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;CAAE,GACzE;IAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,SAAS,CAAA;CAAE,GAC3C;IAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;CAAE,CAAC;AAEzE,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AA+ClF,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,cAAc,CAqBzE"}