rampway 0.5.11 → 0.5.13
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +18 -3
- package/build/src/cli.d.ts +2 -13
- package/build/src/cli.d.ts.map +1 -1
- package/build/src/cli.js +3 -93
- package/build/src/cli.js.map +1 -1
- package/build/src/config/validate-config.d.ts.map +1 -1
- package/build/src/config/validate-config.js +10 -3
- package/build/src/config/validate-config.js.map +1 -1
- package/build/src/runtimes/rollbridge-runtime.d.ts +1 -1
- package/build/src/runtimes/rollbridge-runtime.d.ts.map +1 -1
- package/build/src/runtimes/rollbridge-runtime.js +7 -9
- package/build/src/runtimes/rollbridge-runtime.js.map +1 -1
- package/build/src/transports/ssh-credentials.d.ts +23 -1
- package/build/src/transports/ssh-credentials.d.ts.map +1 -1
- package/build/src/transports/ssh-credentials.js +170 -2
- package/build/src/transports/ssh-credentials.js.map +1 -1
- package/build/src/types.d.ts +6 -1
- package/build/src/types.d.ts.map +1 -1
- package/build/src/velocious/controller.js +1 -1
- package/build/src/velocious/controller.js.map +1 -1
- package/build/src/velocious/executor.d.ts +10 -4
- package/build/src/velocious/executor.d.ts.map +1 -1
- package/build/src/velocious/executor.js +84 -75
- package/build/src/velocious/executor.js.map +1 -1
- package/docs/config-reference.md +30 -10
- package/docs/velocious-deployment-api.md +5 -4
- package/package.json +1 -1
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../../src/velocious/executor.js"],"names":[],"mappings":"AAAA,YAAY;AAEZ,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAA;AAEtC,OAAO,EAAC,
|
|
1
|
+
{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../../src/velocious/executor.js"],"names":[],"mappings":"AAAA,YAAY;AAEZ,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAA;AAEtC,OAAO,EAAC,0BAA0B,IAAI,iCAAiC,EAAE,qBAAqB,IAAI,4BAA4B,EAAC,MAAM,wBAAwB,CAAA;AAC7J,OAAO,EAAC,MAAM,IAAI,SAAS,EAAE,QAAQ,IAAI,WAAW,EAAC,MAAM,0BAA0B,CAAA;AACrF,OAAO,EAAC,WAAW,EAAC,MAAM,kBAAkB,CAAA;AAC5C,OAAO,EAAC,gBAAgB,EAAE,eAAe,EAAC,MAAM,4BAA4B,CAAA;AAC5E,OAAO,EAAC,kBAAkB,EAAC,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAC,QAAQ,EAAC,MAAM,qBAAqB,CAAA;AAC5C,OAAO,EAAC,UAAU,EAAC,MAAM,gCAAgC,CAAA;AACzD,OAAO,EAAC,yBAAyB,IAAI,gCAAgC,EAAC,MAAM,kCAAkC,CAAA;AAE9G;;;;;;GAMG;AAEH,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,EAAC,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAC,CAAC,CAAA;AAEnF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EAAC,KAAK,EAAE,SAAS,EAAC;IAC3D,MAAM,cAAc,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;IAC/D,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,KAAK,EAAE,cAAc,CAAC,CAAA;IACxE,IAAI,cAAc,GAAG,IAAI,CAAA;IAEzB,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,YAAY,EAAE,cAAc,EAAE,UAAU,CAAC,CAAA;QAC3F,IAAI,MAAM,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC;YAAE,cAAc,GAAG,CAAC,MAAM,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC5G,CAAC;IAED,OAAO,EAAC,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,QAAQ,IAAI,IAAI,EAAC,CAAA;AAC5E,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,+BAA+B,CAAC,EAC9C,0BAA0B,GAAG,iCAAiC,EAC9D,MAAM,GAAG,SAAS,EAClB,qBAAqB,GAAG,4BAA4B,EACpD,oBAAoB,EAAE,YAAY,GAAG,oBAAoB,EACzD,QAAQ,GAAG,WAAW,EACtB,yBAAyB,GAAG,gCAAgC,EAC7D,GAAG,EAAE;IACJ;;;;;;OAMG;IACH,KAAK,UAAU,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ;QACpD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,EAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAC,EAAE,SAAS,CAAC,CAAA;QACpF,OAAO,MAAM,yBAAyB,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,OAAO,GAAG,0BAA0B,CAAC,QAAQ,EAAE,EAAC,QAAQ,EAAE,aAAa,EAAE,EAAC,CAAC,CAAA;YACjF,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,CAAC,KAAK,CAAC,WAAW,IAAI,SAAS,mCAAmC,CAAC,CAAA;YAC1H,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,CAAC,KAAK,CAAC,WAAW,IAAI,SAAS,wBAAwB,CAAC,CAAA;YACtI,OAAO,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAA;QAChC,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO;QACL,KAAK,CAAC,gBAAgB,CAAC,EAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAC;YAC9C,OAAO,MAAM,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAC,KAAK,EAAE,YAAY,EAAE,SAAS,EAAC,EAAE,EAAE;gBACjF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,2BAA2B,UAAU,EAAE,EAAE,CAAC,CAAA;gBAC7F,MAAM,UAAU,GAAG,qBAAqB,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;gBAC5D,MAAM,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAA;gBAC7C,IAAI,CAAC;oBACH,IAAI,CAAC;wBACH,MAAM,SAAS,CAAC,GAAG,CAAC,YAAY,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;wBACxD,MAAM,SAAS,CAAC,GAAG,CAAC,UAAU,UAAU,CAAC,SAAS,CAAC,sBAAsB,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;wBAClG,MAAM,SAAS,CAAC,GAAG,CAAC,UAAU,UAAU,CAAC,SAAS,CAAC,2BAA2B,UAAU,CAAC,cAAc,MAAM,CAAC,aAAa,EAAE,CAAC,EAAE,CAAC,CAAA;oBACnI,CAAC;oBAAC,MAAM,CAAC;wBACP,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,CAAC,aAAa,SAAS,kBAAkB,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAA;oBAC3I,CAAC;oBACD,IAAI,CAAC;wBACH,MAAM,SAAS,CAAC,GAAG,CAAC,UAAU,UAAU,CAAC,SAAS,CAAC,6BAA6B,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAA;wBAClH,OAAO,IAAI,CAAA;oBACb,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,KAAK,CAAA;oBACd,CAAC;gBACH,CAAC;wBAAS,CAAC;oBACT,MAAM,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,CAAA;gBAC/B,CAAC;YACH,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAC,QAAQ,EAAE,sBAAsB,EAAE,KAAK,EAAE,MAAM,EAAC;YAC5D,OAAO,MAAM,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAC,KAAK,EAAE,YAAY,EAAE,SAAS,EAAC,EAAE,EAAE;gBACjF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAC,KAAK,EAAE,YAAY,EAAE,SAAS,EAAC,CAAC,CAAA;gBACnE,IAAI,CAAC;oBACH,OAAO,kCAAkC,CAAC,CAAC,MAAM,MAAM,CAAC;wBACtD,MAAM,EAAE,MAAM,CAAC,aAAa;wBAC5B,KAAK,EAAE,KAAK;wBACZ,sBAAsB;wBACtB,QAAQ,EAAE,aAAa,EAAE;wBACzB,QAAQ;wBACR,KAAK,EAAE,YAAY;wBACnB,SAAS;qBACV,CAAC,CAAC,CAAA;gBACL,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;oBACzE,kCAAkC;oBAClC,IAAI,QAAQ,CAAA;oBACZ,IAAI,CAAC;wBACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,EAAC,KAAK,EAAE,YAAY,EAAE,SAAS,EAAC,CAAC,CAAA;wBAClE,MAAM,OAAO,GAAG,KAAK,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,CAAA;wBAC9D,IAAI,OAAO,IAAI,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;4BAC1E,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,EAAC,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,CAAC,cAAc,EAAE,SAAS,EAAC,CAAC,CAAA;4BAClG,QAAQ,GAAG;gCACT,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,IAAI;gCAC7C,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,IAAI;gCAC7C,QAAQ,EAAE,IAAI;gCACd,QAAQ,EAAE,cAAc;6BACzB,CAAA;wBACH,CAAC;6BAAM,CAAC;4BACN,QAAQ,GAAG;gCACT,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,IAAI;gCAC5C,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,IAAI;gCAC5C,QAAQ,EAAE,CAAC,OAAO;6BACnB,CAAA;wBACH,CAAC;oBACH,CAAC;oBAAC,OAAO,aAAa,EAAE,CAAC;wBACvB,QAAQ,GAAG;4BACT,OAAO,EAAE,aAAa,YAAY,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;4BACvF,QAAQ,EAAE,KAAK;yBAChB,CAAA;oBACH,CAAC;oBACD,uDAAuD,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,GAAG,QAAQ,CAAA;oBACrF,MAAM,OAAO,CAAA;gBACf,CAAC;YACH,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,EAAC,KAAK,EAAE,MAAM,EAAC;YAC9B,OAAO,MAAM,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC,CAAA;QACvD,CAAC;KACF,CAAA;AACH,CAAC"}
|
package/docs/config-reference.md
CHANGED
|
@@ -88,8 +88,8 @@ transport: {
|
|
|
88
88
|
type: "ssh",
|
|
89
89
|
credentials: {
|
|
90
90
|
type: "ephemeral-agent",
|
|
91
|
+
deployKey: "auto",
|
|
91
92
|
identityFiles: [
|
|
92
|
-
"/run/credentials/deploy-host",
|
|
93
93
|
"/run/credentials/source-repository"
|
|
94
94
|
]
|
|
95
95
|
},
|
|
@@ -97,11 +97,30 @@ transport: {
|
|
|
97
97
|
}
|
|
98
98
|
```
|
|
99
99
|
|
|
100
|
-
`
|
|
101
|
-
|
|
102
|
-
|
|
103
|
-
|
|
104
|
-
|
|
100
|
+
Set `deployKey: "auto"` to select the deploy-host identity without putting an
|
|
101
|
+
operator-specific path in the project config. Rampway checks these paths in
|
|
102
|
+
order and uses the first readable regular file:
|
|
103
|
+
|
|
104
|
+
1. `deploy.key` beside the loaded Rampway config file;
|
|
105
|
+
2. OpenSSH-current's standard private-key names under the current user's
|
|
106
|
+
`~/.ssh` directory, in order: `id_rsa`, `id_ecdsa`, `id_ecdsa_sk`,
|
|
107
|
+
`id_ed25519`, `id_ed25519_sk`, and `id_mldsa44_ed25519`.
|
|
108
|
+
|
|
109
|
+
Rampway writes each checked, missing, found, and selected path to stderr. This
|
|
110
|
+
keeps `--json` stdout machine-readable while making credential selection visible
|
|
111
|
+
during every operational command. Keep a config-local `deploy.key` untracked and
|
|
112
|
+
readable only by its intended user. To bypass discovery, set `deployKey` to an
|
|
113
|
+
absolute path; an explicit path that is missing, unreadable, or not a regular
|
|
114
|
+
file fails without falling back.
|
|
115
|
+
|
|
116
|
+
`identityFiles` is an optional nonempty list of distinct absolute paths for
|
|
117
|
+
additional identities, such as a source-repository key. Rampway checks each
|
|
118
|
+
selected path when the command starts, owns one private agent for the whole
|
|
119
|
+
command, loads the deploy key followed by the additional identities via
|
|
120
|
+
`ssh-add` stdin, and removes the agent afterward. A configuration that omits
|
|
121
|
+
`deployKey` retains the original `identityFiles`-only behavior. The identities
|
|
122
|
+
are available to every SSH subprocess in that command, including archive-upload
|
|
123
|
+
pipelines.
|
|
105
124
|
Rampway also isolates the command's subprocess groups. On completion or
|
|
106
125
|
HUP/INT/TERM cancellation it terminates any surviving descendants with bounded
|
|
107
126
|
TERM-then-KILL escalation before removing the private agent. Processes and SSH
|
|
@@ -118,7 +137,8 @@ the stage does not use the ssh transport. For deploys, the flag selects the
|
|
|
118
137
|
direct ssh path instead of the default `auto` HTTP control-plane path; combining
|
|
119
138
|
it with `--transport=http` is an error. Only enable forwarding for hosts you
|
|
120
139
|
trust: while a session lives, the forwarded agent's keys are usable on that
|
|
121
|
-
host.
|
|
140
|
+
host. This includes a personal key selected from the current user's `~/.ssh`
|
|
141
|
+
directory when `deployKey: "auto"` falls back past the config-local key.
|
|
122
142
|
|
|
123
143
|
### http (control plane)
|
|
124
144
|
|
|
@@ -418,7 +438,7 @@ Rollbridge runtime adapter. Handles `deploy`, `validate`, `status`, `logs`, and
|
|
|
418
438
|
| `socketPath` | string | no | Path to the Rollbridge Unix socket. |
|
|
419
439
|
| `versionPath` | string | no | Path to a version file used for stale-daemon detection. |
|
|
420
440
|
| `env` | object | no | String environment values passed to Rollbridge. Secret-like values are transported and redacted separately. |
|
|
421
|
-
| `externalOwner` | object | no | Opt in to a persistent external foreground owner with `{type: "foreground"}`. Requires `config` and Rollbridge 0.1.
|
|
441
|
+
| `externalOwner` | object | no | Opt in to a persistent external foreground owner with `{type: "foreground"}`. Requires `config` and Rollbridge 0.1.20 or newer. |
|
|
422
442
|
|
|
423
443
|
```js
|
|
424
444
|
runtime: {
|
|
@@ -552,8 +572,8 @@ migration, publication, cleanup, or fallback selection. Rollbridge support
|
|
|
552
572
|
requires an explicit `runtime.config` and Rollbridge 0.1.17 or newer; a
|
|
553
573
|
successful deploy without stable config remains supported but cannot seed
|
|
554
574
|
runtime boot state. The optional external-owner handoff requires Rollbridge
|
|
555
|
-
0.1.
|
|
556
|
-
`--boot-attestation
|
|
575
|
+
0.1.20 or newer and passes the accepted boot-state digest as
|
|
576
|
+
`--boot-attestation` with the explicit external-owner takeover flag.
|
|
557
577
|
|
|
558
578
|
## Health checks
|
|
559
579
|
|
|
@@ -203,10 +203,11 @@ Rampway serializes durable admission and writes the request audit before
|
|
|
203
203
|
launching the worker. The parent waits for the operating system's child-spawn
|
|
204
204
|
acknowledgement before returning `202`; the worker then claims the pending run
|
|
205
205
|
and writes the heartbeat, lifecycle audits, terminal result, and database
|
|
206
|
-
connections from its own process. Its
|
|
207
|
-
|
|
208
|
-
|
|
209
|
-
|
|
206
|
+
connections from its own process. Its stdin and stdout are ignored; stderr is
|
|
207
|
+
inherited so credential-selection diagnostics remain visible in the operator's
|
|
208
|
+
application logs. Its invocation contains only the immutable bootstrap path and
|
|
209
|
+
bounded mount/run identifiers. A launch error fences the pending run as failed
|
|
210
|
+
and is not retried in the request process.
|
|
210
211
|
|
|
211
212
|
Rampway serializes durable admission before validating reachability on the
|
|
212
213
|
deployment target, so an idempotent retry storm performs the Git fetch only for
|