paratix 0.6.0 → 0.8.0

package/README.md

@@ -104,7 +104,7 @@ Signals are deferred side effects such as `service.reload(...)` or `service.rest
 
 For Podman-native services, Paratix now also includes `quadlet.container(...)`. It writes a `.container` file under `/etc/containers/systemd`, reloads systemd when the content changes, and works cleanly with `service.enabled(...)` and `service.running(...)` for the generated service.
 
-When you need a targeted image refresh outside the normal deploy flow, `quadlet.updateImage(...)` pulls exactly one image, reuses existing Podman registry auth on the host, optionally supports `authFile`, and only restarts the generated service when the pull actually downloaded a newer image.
+When you need a targeted image refresh outside the normal deploy flow, `quadlet.updateImage(...)` pulls exactly one image, reuses existing Podman registry auth on the host, optionally supports `authFile`, and only restarts the generated service when the pull actually downloaded a newer image. Changed runs now also print the new registry digest in parentheses in the CLI output, with a local image ID fallback when no repo digest is available.
 
 ### Guards
 

package/dist/{chunk-IUY5BJHA.js → chunk-47PTUZZR.js}

@@ -2,7 +2,7 @@ import {
   CommandError,
   assertValidModuleMetaEntries,
   mergeEnvironmentFromMeta
-} from "./chunk-JJRF37BP.js";
+} from "./chunk-NRDLYHJL.js";
 
 // src/output.ts
 import pc from "picocolors";
@@ -492,4 +492,4 @@ export {
   printSummary,
   runSignalModules
 };
-//# sourceMappingURL=chunk-IUY5BJHA.js.map
+//# sourceMappingURL=chunk-47PTUZZR.js.map

package/dist/{chunk-ENWMSERJ.js → chunk-FFQ6FR4N.js}

@@ -9,7 +9,7 @@ import {
   shellQuote,
   sshdPortMeta,
   validateMode
-} from "./chunk-JJRF37BP.js";
+} from "./chunk-NRDLYHJL.js";
 
 // src/moduleFailure.ts
 function firstNonEmptyLine(text) {
@@ -3542,6 +3542,62 @@ function shellQuoteForQuadlet(value) {
   return `'${value.replaceAll("'", escapedQuote)}'`;
 }
 
+// src/modules/quadletImageInspectHelpers.ts
+function shellQuoteForQuadletImageInspect(value) {
+  const escapedQuote = "'\\''";
+  return `'${value.replaceAll("'", escapedQuote)}'`;
+}
+function buildQuadletImageInspectCommand(image) {
+  return `podman image inspect ${shellQuoteForQuadletImageInspect(image)}`;
+}
+function formatQuadletImageIdentifierDetail(imageIdentifier) {
+  return `(${imageIdentifier})`;
+}
+function readQuadletImageIdentifierFromInspectOutput(image, output) {
+  const parsed = parseQuadletImageInspectOutput(output);
+  if (parsed == null) return null;
+  const repoDigest = findQuadletRepoDigest(image, parsed.repoDigests);
+  return repoDigest ?? parsed.id;
+}
+function findQuadletRepoDigest(image, repoDigests) {
+  const repository = getQuadletImageRepository(image);
+  for (const repoDigest of repoDigests) {
+    const separatorIndex = repoDigest.indexOf("@");
+    if (separatorIndex === -1) continue;
+    const repo = repoDigest.slice(0, separatorIndex);
+    const digest = repoDigest.slice(separatorIndex + 1);
+    if (repo === repository && digest.length > 0) return digest;
+  }
+  return null;
+}
+function getQuadletImageRepository(image) {
+  const digestSeparatorIndex = image.indexOf("@");
+  if (digestSeparatorIndex !== -1) return image.slice(0, digestSeparatorIndex);
+  const lastSlashIndex = image.lastIndexOf("/");
+  const lastColonIndex = image.lastIndexOf(":");
+  return lastColonIndex > lastSlashIndex ? image.slice(0, lastColonIndex) : image;
+}
+function parseQuadletImageInspectOutput(output) {
+  try {
+    const parsed = JSON.parse(output);
+    if (!Array.isArray(parsed) || parsed.length === 0) return null;
+    const [firstEntry] = parsed;
+    if (!isQuadletInspectEntry(firstEntry)) return null;
+    const repoDigests = Array.isArray(firstEntry.RepoDigests) ? firstEntry.RepoDigests : [];
+    return {
+      id: typeof firstEntry.Id === "string" && firstEntry.Id.length > 0 ? firstEntry.Id : null,
+      repoDigests: repoDigests.filter(
+        (entry) => typeof entry === "string" && entry.length > 0
+      )
+    };
+  } catch {
+    return null;
+  }
+}
+function isQuadletInspectEntry(value) {
+  return value != null && typeof value === "object";
+}
+
 // src/modules/quadlet.ts
 var CONTAINERS_SYSTEMD_DIRECTORY_COMMAND = "mkdir -p '/etc/containers/systemd'";
 var QUADLET_FILE_MODE = "0644";
@@ -3588,6 +3644,61 @@ async function checkQuadletFile(parameters) {
   const remoteContent = await parameters.ssh.readFile(parameters.filePath);
   return remoteContent.trim() === parameters.content.trim() ? "ok" : NEEDS_APPLY;
 }
+async function inspectQuadletImageId(parameters) {
+  const inspectResult = await parameters.ssh.exec(parameters.inspectCommand, {
+    ignoreExitCode: true,
+    silent: true
+  });
+  if (inspectResult.code !== 0) {
+    return failedCommand(
+      `[quadlet.updateImage: ${parameters.name}] podman image inspect failed`,
+      inspectResult
+    );
+  }
+  const imageId = readQuadletImageIdentifierFromInspectOutput(
+    parameters.image,
+    inspectResult.stdout
+  );
+  if (imageId == null) {
+    return failed(
+      `[quadlet.updateImage: ${parameters.name}] podman image inspect returned no digest or image ID`
+    );
+  }
+  return imageId;
+}
+async function restartQuadletService(parameters) {
+  const restartResult = await parameters.ssh.exec(
+    `${SYSTEMCTL} restart ${shellQuote(parameters.serviceName)}`,
+    {
+      ignoreExitCode: true,
+      silent: true
+    }
+  );
+  return restartResult.code === 0 ? { detail: formatQuadletImageIdentifierDetail(parameters.imageId), status: "changed" } : failedCommand(
+    `[quadlet.updateImage: ${parameters.name}] systemctl restart failed`,
+    restartResult
+  );
+}
+async function applyQuadletImageUpdate(parameters) {
+  const pullResult = await parameters.ssh.exec(parameters.pullCommand, {
+    ignoreExitCode: true,
+    silent: true
+  });
+  if (pullResult.code !== 0) {
+    return failedCommand(`[quadlet.updateImage: ${parameters.name}] podman pull failed`, pullResult);
+  }
+  if (!quadletPullOutputIndicatesChange(pullResult.stdout)) {
+    return { status: "ok" };
+  }
+  const imageId = await inspectQuadletImageId(parameters);
+  if (typeof imageId !== "string") return imageId;
+  return restartQuadletService({
+    imageId,
+    name: parameters.name,
+    serviceName: parameters.serviceName,
+    ssh: parameters.ssh
+  });
+}
 var quadlet = {
   /**
    * Write a Podman Quadlet `.container` definition and reload systemd when it changes.
@@ -3628,31 +3739,19 @@ var quadlet = {
     validateQuadletName(options.name);
     if (options.serviceName != null) validateQuadletName(options.serviceName);
     const pullCommand = buildQuadletImagePullCommand(options);
+    const inspectCommand = buildQuadletImageInspectCommand(options.image);
     const serviceName = getQuadletContainerServiceName(options);
     return {
       async apply(ssh2) {
         if (!ssh2) return failed(`[quadlet.updateImage: ${options.name}] SSH connection is required`);
-        const pullResult = await ssh2.exec(pullCommand, {
-          ignoreExitCode: true,
-          silent: true
-        });
-        if (pullResult.code !== 0) {
-          return failedCommand(
-            `[quadlet.updateImage: ${options.name}] podman pull failed`,
-            pullResult
-          );
-        }
-        if (!quadletPullOutputIndicatesChange(pullResult.stdout)) {
-          return { status: "ok" };
-        }
-        const restartResult = await ssh2.exec(`${SYSTEMCTL} restart ${shellQuote(serviceName)}`, {
-          ignoreExitCode: true,
-          silent: true
+        return applyQuadletImageUpdate({
+          image: options.image,
+          inspectCommand,
+          name: options.name,
+          pullCommand,
+          serviceName,
+          ssh: ssh2
         });
-        return restartResult.code === 0 ? { status: "changed" } : failedCommand(
-          `[quadlet.updateImage: ${options.name}] systemctl restart failed`,
-          restartResult
-        );
       },
       // eslint-disable-next-line @typescript-eslint/require-await -- Signal-style module
       async check() {
@@ -5742,4 +5841,4 @@ export {
   ufw,
   user
 };
-//# sourceMappingURL=chunk-ENWMSERJ.js.map
+//# sourceMappingURL=chunk-FFQ6FR4N.js.map