redkite 0.1.6

package/dist/shell.js

@@ -0,0 +1,65 @@
+import { spawn } from "node:child_process";
+import { lineReader, tail } from "./host.js";
+// Every child still running. A detached child outlives this process, so a stop
+// that does not go through here leaves a build running
+const live = new Set();
+// Signals every group and answers with how many are still there. The count is
+// the whole point: nothing may exit while it is above zero
+export function signalEverything(name) {
+    for (const child of live) {
+        try {
+            if (child.pid)
+                process.kill(-child.pid, name);
+        }
+        catch {
+            // Already gone, which is the outcome being asked for
+        }
+    }
+    return live.size;
+}
+export function stillRunning() {
+    return live.size;
+}
+export function spawnCollect(command, args, options = {}) {
+    return new Promise((resolve, reject) => {
+        if (options.signal?.aborted)
+            return reject(new Error("Stopped"));
+        // Its own process group, so one signal reaches everything it started. A
+        // shell that ran docker dies on its own otherwise, and docker keeps going
+        const child = spawn(command, args, {
+            stdio: [options.stdin === undefined ? "ignore" : "pipe", "pipe", "pipe"],
+            detached: true,
+        });
+        live.add(child);
+        const out = [];
+        const err = [];
+        const collect = (into) => lineReader((line) => {
+            into.push(line);
+            options.onLine?.(line);
+        });
+        const stdout = collect(out);
+        const stderr = collect(err);
+        // Only a streamed command is truncated. The host snapshot is one command
+        // listing every container and image, and a busy host overruns any tail
+        const keep = (lines) => (options.onLine ? tail(lines) : lines.join("\n"));
+        child.stdout?.on("data", (chunk) => stdout.push(chunk.toString()));
+        child.stderr?.on("data", (chunk) => stderr.push(chunk.toString()));
+        child.on("error", reject);
+        // The only thing that settles this. A signalled command answers here once
+        // it has actually gone, which is what lets a caller wait for exactly that
+        child.on("close", (code) => {
+            live.delete(child);
+            stdout.flush();
+            stderr.flush();
+            resolve({ code: code ?? 1, stdout: keep(out), stderr: keep(err) });
+        });
+        if (options.stdin !== undefined)
+            child.stdin?.end(options.stdin);
+    });
+}
+// Single quotes are what a shell strips, so a value containing double quotes
+// survives being handed to one
+export function quote(value) {
+    return `'${value.replaceAll("'", `'\\''`)}'`;
+}
+//# sourceMappingURL=shell.js.map

package/dist/shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../src/shell.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAE9D,OAAO,EAAE,UAAU,EAAE,IAAI,EAA4B,MAAM,WAAW,CAAC;AAcvE,+EAA+E;AAC/E,uDAAuD;AACvD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAgB,CAAC;AAErC,8EAA8E;AAC9E,2DAA2D;AAC3D,MAAM,UAAU,gBAAgB,CAAC,IAAoB;IACnD,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,GAAG;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;QACvD,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,IAAI,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,IAAI,CAAC,IAAI,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,OAAe,EACf,IAAc,EACd,UAAwB,EAAE;IAE1B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAEjE,wEAAwE;QACxE,0EAA0E;QAC1E,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YACjC,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YACxE,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAEhB,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,MAAM,GAAG,GAAa,EAAE,CAAC;QAEzB,MAAM,OAAO,GAAG,CAAC,IAAc,EAAE,EAAE,CACjC,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE;YAClB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QAEL,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAE5B,yEAAyE;QACzE,uEAAuE;QACvE,MAAM,IAAI,GAAG,CAAC,KAAe,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAEpF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC3E,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAE3E,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE1B,0EAA0E;QAC1E,0EAA0E;QAC1E,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEnB,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,6EAA6E;AAC7E,+BAA+B;AAC/B,MAAM,UAAU,KAAK,CAAC,KAAa;IACjC,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAC/C,CAAC"}

package/dist/source.d.ts

@@ -0,0 +1,16 @@
+import type { Host } from "./host.js";
+export type Source = {
+    release: string;
+    tree: string;
+};
+export type SourceRequest = {
+    name: string;
+    repo?: string;
+    path?: string;
+    include?: string[];
+    branch: string;
+    submodules: boolean;
+    detail?: (message: string) => void;
+};
+export declare function prepareSource(host: Host, request: SourceRequest): Promise<Source>;
+//# sourceMappingURL=source.d.ts.map

package/dist/source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source.d.ts","sourceRoot":"","sources":["../src/source.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAOtC,MAAM,MAAM,MAAM,GAAG;IAGnB,OAAO,EAAE,MAAM,CAAC;IAEhB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAG1B,IAAI,EAAE,MAAM,CAAC;IAEb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IAGd,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACpC,CAAC;AAKF,wBAAsB,aAAa,CACjC,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,MAAM,CAAC,CAKjB"}

package/dist/source.js

@@ -0,0 +1,108 @@
+// accept-new rather than no: a host key that changes is still worth refusing
+const GIT_SSH = "ssh -o StrictHostKeyChecking=accept-new";
+export async function prepareSource(host, request) {
+    if (request.path)
+        return await localSource(host, request.path, request);
+    if (request.repo)
+        return await clonedSource(host, request.repo, request);
+    throw new Error(`${request.name} names neither a repo nor a path to build from`);
+}
+// Built where it sits. Nothing is cloned, checked out or cleaned: what the
+// build reads is the tree as the person running this left it
+async function localSource(host, path, request) {
+    const detail = request.detail ?? (() => { });
+    detail(`reading ${path}`);
+    await assertKnowable(host, path, request.include);
+    const release = await treeOf(host, path, request.include);
+    detail(`built from ${release.slice(0, 7)}`);
+    return { release, tree: path };
+}
+// Something has to say what belongs in the build. A work tree's .gitignore
+// does; anywhere else the deployment has to say it, or the release would cover
+// whatever happened to be lying in the directory
+async function assertKnowable(host, path, include) {
+    if (include)
+        return;
+    const inside = await host.sh(`git -C '${path}' rev-parse --is-inside-work-tree`);
+    if (inside.code === 0 && inside.stdout.trim() === "true")
+        return;
+    throw new Error(`${path} is not a git work tree, so nothing there says what belongs in the ` +
+        'build. Say it: include: ["src", "package.json"] on the app names what ' +
+        "ships, and git init there would let .gitignore name it instead");
+}
+// git's own content addressing, over a scratch repository so nothing about the
+// source changes and no object lands in it. The tree covers what is committed,
+// what is modified and what is untracked, so an edit that is never committed is
+// a new release. Without an include it honours .gitignore, which is the same
+// set the build reads
+async function treeOf(host, path, include) {
+    // Everything the work tree does not ignore, or exactly what was named. The
+    // -- is only for the second: it would make -A a path rather than a flag
+    const added = include ? `-- ${include.map((item) => `'${item}'`).join(" ")}` : "-A";
+    const written = await host.sh([
+        "scratch=$(mktemp -d)",
+        'git init -q --bare "$scratch/git"',
+        `export GIT_DIR="$scratch/git" GIT_WORK_TREE='${path}' GIT_INDEX_FILE="$scratch/index"`,
+        `git add ${added}`,
+        "git write-tree",
+        'rm -rf "$scratch"',
+    ].join("\n"));
+    const release = written.stdout.trim().split("\n").at(-1) ?? "";
+    if (/^[0-9a-f]{40}$/.test(release))
+        return release;
+    throw new Error(`Could not read the state of ${path}: ${written.stderr || written.stdout}`);
+}
+async function clonedSource(host, repo, request) {
+    const detail = request.detail ?? (() => { });
+    const mirror = `${host.cache}/mirrors/${request.name}.git`;
+    const path = `${host.cache}/source/${request.name}`;
+    detail(`fetching ${request.branch}`);
+    await run(host, `updating the mirror of ${repo}`, [
+        `if [ -d '${mirror}' ]; then`,
+        `  git -C '${mirror}' remote set-url origin '${repo}'`,
+        `  git -C '${mirror}' remote update --prune`,
+        "else",
+        `  mkdir -p '${host.cache}/mirrors'`,
+        `  git clone --mirror '${repo}' '${mirror}'`,
+        "fi",
+    ]);
+    const resolved = await run(host, `resolving ${request.branch}`, [
+        `git -C '${mirror}' rev-parse 'refs/heads/${request.branch}'`,
+    ]);
+    const release = resolved.stdout.trim();
+    if (!/^[0-9a-f]{40}$/.test(release)) {
+        throw new Error(`${repo} has no branch ${request.branch}`);
+    }
+    detail(`checking out ${release.slice(0, 7)}`);
+    await run(host, `checking out ${release.slice(0, 7)}`, [
+        // The checkout shares the mirror's object store, so it costs the working
+        // tree and nothing else. Reused between deploys, hence the reset and clean
+        `if [ ! -d '${path}/.git' ]; then`,
+        `  rm -rf '${path}'`,
+        `  mkdir -p '${host.cache}/source'`,
+        `  git clone --shared --no-checkout '${mirror}' '${path}'`,
+        "fi",
+        `git -C '${path}' fetch --prune origin`,
+        `git -C '${path}' checkout --detach --force '${release}'`,
+        // Leaves the submodules alone: they are tracked, and clean only removes
+        // what is not
+        `git -C '${path}' clean -ffdx`,
+    ]);
+    if (request.submodules) {
+        // --remote follows the branch named in .gitmodules rather than the commit
+        // the parent recorded, which is what the pipeline has always done
+        detail("updating submodules");
+        await run(host, "updating submodules", [
+            `git -C '${path}' submodule sync --recursive`,
+            `git -C '${path}' submodule update --init --remote --recursive`,
+        ]);
+    }
+    return { release, tree: path };
+}
+async function run(host, what, script) {
+    const result = await host.sh([`export GIT_SSH_COMMAND='${GIT_SSH}'`, "set -e", ...script].join("\n"));
+    if (result.code === 0)
+        return result;
+    throw new Error(`Failed ${what}: ${result.stderr || result.stdout}`);
+}
+//# sourceMappingURL=source.js.map

package/dist/source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source.js","sourceRoot":"","sources":["../src/source.ts"],"names":[],"mappings":"AA8BA,6EAA6E;AAC7E,MAAM,OAAO,GAAG,yCAAyC,CAAC;AAE1D,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAU,EACV,OAAsB;IAEtB,IAAI,OAAO,CAAC,IAAI;QAAE,OAAO,MAAM,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxE,IAAI,OAAO,CAAC,IAAI;QAAE,OAAO,MAAM,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAEzE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,IAAI,gDAAgD,CAAC,CAAC;AACnF,CAAC;AAED,2EAA2E;AAC3E,6DAA6D;AAC7D,KAAK,UAAU,WAAW,CACxB,IAAU,EACV,IAAY,EACZ,OAAsB;IAEtB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC5C,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAE1B,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAElD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,CAAC,cAAc,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAE5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,2EAA2E;AAC3E,+EAA+E;AAC/E,iDAAiD;AACjD,KAAK,UAAU,cAAc,CAAC,IAAU,EAAE,IAAY,EAAE,OAAkB;IACxE,IAAI,OAAO;QAAE,OAAO;IAEpB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,IAAI,mCAAmC,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,MAAM;QAAE,OAAO;IAEjE,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,qEAAqE;QAC1E,wEAAwE;QACxE,gEAAgE,CACnE,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,+EAA+E;AAC/E,gFAAgF;AAChF,6EAA6E;AAC7E,sBAAsB;AACtB,KAAK,UAAU,MAAM,CAAC,IAAU,EAAE,IAAY,EAAE,OAAkB;IAChE,2EAA2E;IAC3E,wEAAwE;IACxE,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAEpF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAC3B;QACE,sBAAsB;QACtB,mCAAmC;QACnC,gDAAgD,IAAI,mCAAmC;QACvF,WAAW,KAAK,EAAE;QAClB,gBAAgB;QAChB,mBAAmB;KACpB,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IAEF,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/D,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAEnD,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,KAAK,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9F,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,IAAU,EACV,IAAY,EACZ,OAAsB;IAEtB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,YAAY,OAAO,CAAC,IAAI,MAAM,CAAC;IAC3D,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,WAAW,OAAO,CAAC,IAAI,EAAE,CAAC;IAEpD,MAAM,CAAC,YAAY,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACrC,MAAM,GAAG,CAAC,IAAI,EAAE,0BAA0B,IAAI,EAAE,EAAE;QAChD,YAAY,MAAM,WAAW;QAC7B,aAAa,MAAM,4BAA4B,IAAI,GAAG;QACtD,aAAa,MAAM,yBAAyB;QAC5C,MAAM;QACN,eAAe,IAAI,CAAC,KAAK,WAAW;QACpC,yBAAyB,IAAI,MAAM,MAAM,GAAG;QAC5C,IAAI;KACL,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,aAAa,OAAO,CAAC,MAAM,EAAE,EAAE;QAC9D,WAAW,MAAM,2BAA2B,OAAO,CAAC,MAAM,GAAG;KAC9D,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,kBAAkB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,CAAC,gBAAgB,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9C,MAAM,GAAG,CAAC,IAAI,EAAE,gBAAgB,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;QACrD,yEAAyE;QACzE,2EAA2E;QAC3E,cAAc,IAAI,gBAAgB;QAClC,aAAa,IAAI,GAAG;QACpB,eAAe,IAAI,CAAC,KAAK,UAAU;QACnC,uCAAuC,MAAM,MAAM,IAAI,GAAG;QAC1D,IAAI;QACJ,WAAW,IAAI,wBAAwB;QACvC,WAAW,IAAI,gCAAgC,OAAO,GAAG;QACzD,wEAAwE;QACxE,cAAc;QACd,WAAW,IAAI,eAAe;KAC/B,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,0EAA0E;QAC1E,kEAAkE;QAClE,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAC9B,MAAM,GAAG,CAAC,IAAI,EAAE,qBAAqB,EAAE;YACrC,WAAW,IAAI,8BAA8B;YAC7C,WAAW,IAAI,gDAAgD;SAChE,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,IAAU,EAAE,IAAY,EAAE,MAAgB;IAC3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAC1B,CAAC,2BAA2B,OAAO,GAAG,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACxE,CAAC;IAEF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAErC,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AACvE,CAAC"}

package/dist/sshHost.d.ts

@@ -0,0 +1,15 @@
+import type { Host, OnLine, Result } from "./host.js";
+export type Ssh = (args: string[], options?: {
+    stdin?: string;
+    onLine?: OnLine;
+}) => Promise<Result>;
+export type Shell = (command: string) => Promise<Result>;
+export type SshOptions = {
+    run?: Ssh;
+    shell?: Shell;
+    directory?: string;
+    cache?: string;
+    signal?: AbortSignal;
+};
+export declare function sshHost(bastion: string, options?: SshOptions): Promise<Host>;
+//# sourceMappingURL=sshHost.d.ts.map

package/dist/sshHost.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sshHost.d.ts","sourceRoot":"","sources":["../src/sshHost.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAQtD,MAAM,MAAM,GAAG,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,KAC1C,OAAO,CAAC,MAAM,CAAC,CAAC;AAIrB,MAAM,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAEzD,MAAM,MAAM,UAAU,GAAG;IACvB,GAAG,CAAC,EAAE,GAAG,CAAC;IACV,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IAGf,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAeF,wBAAsB,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,UAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAkFtF"}

package/dist/sshHost.js

@@ -0,0 +1,91 @@
+import { randomUUID } from "node:crypto";
+import { dirname } from "node:path";
+import { quote, spawnCollect } from "./shell.js";
+// One TCP connection and one authentication for the whole deploy. Without it
+// every command pays a handshake, which is most of what a command costs
+const MULTIPLEX = [
+    "-o",
+    "ControlMaster=auto",
+    "-o",
+    "ControlPersist=60s",
+    "-o",
+    "StrictHostKeyChecking=no",
+    // The host clones from GitHub on our behalf rather than us shipping a tree
+    "-A",
+];
+export async function sshHost(bastion, options = {}) {
+    const control = `/tmp/redkite-${randomUUID().slice(0, 8)}.control`;
+    const directory = options.directory ?? `/tmp/redkite-${randomUUID().slice(0, 8)}`;
+    const signal = options.signal;
+    const run = options.run ?? ((args, extra) => spawnCollect("ssh", args, { ...extra, signal }));
+    // Cleanup has to survive the abort that made it necessary, so it is the one
+    // thing here that is not killed along with everything else
+    const final = options.run ?? ((args, extra) => spawnCollect("ssh", args, extra));
+    const shell = options.shell ??
+        ((command) => spawnCollect("sh", ["-c", command], { signal }));
+    const argv = (command) => [
+        ...MULTIPLEX,
+        "-o",
+        `ControlPath=${control}`,
+        bastion,
+        command,
+    ];
+    const ssh = (command, extra) => run(argv(command), extra);
+    // Each command records the process group job control gave it, because killing
+    // the ssh client here leaves what it was carrying running there
+    let issued = 0;
+    // One round trip for all of it, including the home directory the cache hangs
+    // off. A literal ~ would only survive as long as every caller used a shell
+    const opened = await ssh(`mkdir -p -m 700 '${directory}' && mkdir -p "$HOME/.cache/redkite" && printf %s "$HOME"`);
+    if (opened.code !== 0) {
+        throw new Error(`Could not reach ${bastion}: ${opened.stderr || opened.stdout}`);
+    }
+    const cache = options.cache ?? `${opened.stdout.trim()}/.cache/redkite`;
+    return {
+        directory,
+        cache,
+        sh: async (command, onLine) => {
+            issued += 1;
+            return await ssh(supervised(command, `${directory}/run.${issued}.pid`), { onLine });
+        },
+        write: async (name, contents) => {
+            const path = `${directory}/${name}`;
+            const result = await ssh(`mkdir -p '${dirname(path)}' && cat > '${path}'`, {
+                stdin: contents,
+            });
+            if (result.code !== 0) {
+                throw new Error(`Could not write ${name}: ${result.stderr}`);
+            }
+            return path;
+        },
+        // Through the connection that is already open, so an image is streamed
+        // rather than written to a disk at each end and copied between them
+        pipe: async (local, remote) => await shell(`${local} | ssh ${argv(remote).map(quote).join(" ")}`),
+        // Signalled where they are running, not here. Killing the client would
+        // leave the build going with nothing left able to reach it
+        stop: async (name) => {
+            const result = await final(argv(sweep(directory, name)));
+            return Number(result.stdout.trim()) || 0;
+        },
+        close: async () => {
+            await final(argv(`rm -rf '${directory}'`));
+            await final(["-o", `ControlPath=${control}`, "-O", "exit", bastion]);
+        },
+    };
+}
+// Job control puts a background job in a process group of its own, which is the
+// only handle a second connection has on what the first one started. Nothing is
+// written to stdout by this: an announcement would corrupt the host snapshot
+function supervised(command, pidfile) {
+    return `set -m; { ${command}; } & __rk=$!; printf %s "$__rk" > '${pidfile}'; wait "$__rk"`;
+}
+// Signals every group this deploy started there, then counts the ones still
+// answering. The count is what the caller waits on: a build that ignores the
+// first signal keeps it above zero until a harder one is sent
+function sweep(directory, name) {
+    return (`left=0; for f in '${directory}'/*.pid; do [ -f "$f" ] || continue; ` +
+        `p=$(cat "$f" 2>/dev/null) || continue; ` +
+        `kill -${name} -"$p" 2>/dev/null; ` +
+        `kill -0 -"$p" 2>/dev/null && left=$((left+1)); done; printf %s "$left"`);
+}
+//# sourceMappingURL=sshHost.js.map

package/dist/sshHost.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sshHost.js","sourceRoot":"","sources":["../src/sshHost.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AA0BjD,6EAA6E;AAC7E,wEAAwE;AACxE,MAAM,SAAS,GAAG;IAChB,IAAI;IACJ,oBAAoB;IACpB,IAAI;IACJ,oBAAoB;IACpB,IAAI;IACJ,0BAA0B;IAC1B,2EAA2E;IAC3E,IAAI;CACL,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAe,EAAE,UAAsB,EAAE;IACrE,MAAM,OAAO,GAAG,gBAAgB,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC;IACnE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAClF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAE9B,MAAM,GAAG,GACP,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAEpF,4EAA4E;IAC5E,2DAA2D;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAEjF,MAAM,KAAK,GACT,OAAO,CAAC,KAAK;QACb,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAEzE,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC;QAChC,GAAG,SAAS;QACZ,IAAI;QACJ,eAAe,OAAO,EAAE;QACxB,OAAO;QACP,OAAO;KACR,CAAC;IAEF,MAAM,GAAG,GAAG,CAAC,OAAe,EAAE,KAA2C,EAAE,EAAE,CAC3E,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IAE5B,8EAA8E;IAC9E,gEAAgE;IAChE,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,6EAA6E;IAC7E,2EAA2E;IAC3E,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,oBAAoB,SAAS,2DAA2D,CACzF,CAAC;IAEF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,KAAK,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAExE,OAAO;QACL,SAAS;QACT,KAAK;QAEL,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;YAC5B,MAAM,IAAI,CAAC,CAAC;YACZ,OAAO,MAAM,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,SAAS,QAAQ,MAAM,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACtF,CAAC;QAED,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YAC9B,MAAM,IAAI,GAAG,GAAG,SAAS,IAAI,IAAI,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,aAAa,OAAO,CAAC,IAAI,CAAC,eAAe,IAAI,GAAG,EAAE;gBACzE,KAAK,EAAE,QAAQ;aAChB,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/D,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAED,uEAAuE;QACvE,oEAAoE;QACpE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAC5B,MAAM,KAAK,CAAC,GAAG,KAAK,UAAU,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAEpE,uEAAuE;QACvE,2DAA2D;QAC3D,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YACzD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QAED,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,SAAS,GAAG,CAAC,CAAC,CAAC;YAC3C,MAAM,KAAK,CAAC,CAAC,IAAI,EAAE,eAAe,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACvE,CAAC;KACF,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,gFAAgF;AAChF,6EAA6E;AAC7E,SAAS,UAAU,CAAC,OAAe,EAAE,OAAe;IAClD,OAAO,aAAa,OAAO,uCAAuC,OAAO,iBAAiB,CAAC;AAC7F,CAAC;AAED,4EAA4E;AAC5E,6EAA6E;AAC7E,8DAA8D;AAC9D,SAAS,KAAK,CAAC,SAAiB,EAAE,IAAY;IAC5C,OAAO,CACL,qBAAqB,SAAS,uCAAuC;QACrE,yCAAyC;QACzC,SAAS,IAAI,sBAAsB;QACnC,wEAAwE,CACzE,CAAC;AACJ,CAAC"}

package/dist/steps.d.ts

@@ -0,0 +1,27 @@
+import type { Built, Step } from "./pipeline.js";
+import type { Topology } from "./topology.js";
+import type { AppSpec, StepNetwork } from "./types.js";
+export declare function attachment(network: StepNetwork, topology: Topology): string[];
+type MigrateOptions = {
+    app: string;
+    command: string;
+    network?: StepNetwork;
+    tunnel?: {
+        bastion: string;
+        from: string;
+        alias?: string;
+        port?: number;
+    };
+};
+export declare function migrate(options: MigrateOptions): Step<`swap:before:${string}`>;
+export declare function builderOf(input: Built, name: string): string;
+type SentryOptions = {
+    stripFromImage: string;
+};
+export declare function sentry(options: SentryOptions): {
+    provider: "sentry";
+    stripFromImage: string;
+};
+export declare function routeOf(app: AppSpec): string;
+export {};
+//# sourceMappingURL=steps.d.ts.map

package/dist/steps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"steps.d.ts","sourceRoot":"","sources":["../src/steps.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAQ,IAAI,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAKvD,wBAAgB,UAAU,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,GAAG,MAAM,EAAE,CAY7E;AAED,KAAK,cAAc,GAAG;IAGpB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAIhB,OAAO,CAAC,EAAE,WAAW,CAAC;IAItB,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3E,CAAC;AAIF,wBAAgB,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,CAAC,eAAe,MAAM,EAAE,CAAC,CAyB9E;AAqBD,wBAAgB,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,UAKnD;AAED,KAAK,aAAa,GAAG;IAAE,cAAc,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhD,wBAAgB,MAAM,CAAC,OAAO,EAAE,aAAa;;;EAE5C;AAED,wBAAgB,OAAO,CAAC,GAAG,EAAE,OAAO,UAEnC"}

package/dist/steps.js

@@ -0,0 +1,69 @@
+import { environmentOf } from "./config.js";
+// The flags that attach one. The deployment network carries the aliases too,
+// because a service answers to its alias rather than its container name, and a
+// step reaching postgres:5432 is the whole reason to be on that network
+export function attachment(network, topology) {
+    if (network === "host")
+        return ["--network host"];
+    if (network === "none")
+        return ["--network none"];
+    if (network !== "deployment")
+        return [`--network ${network.named}`];
+    return [
+        // No address is asked for. Docker allocates from the bottom of the subnet
+        // and every derived address starts at .20, so an ephemeral container never
+        // takes one an app is about to be created on
+        `--network ${topology.network}`,
+        ...Object.entries(topology.extraHosts).map(([name, ip]) => `--add-host ${name}:${ip}`),
+    ];
+}
+// An ordinary step at an ordinary point. Hung before the swap, it runs while
+// the old containers still serve, and it throws, so nothing retires
+export function migrate(options) {
+    const command = options.command.split(" ");
+    return {
+        point: `swap:before:migrate-${options.app}`,
+        check: (plan) => assertReachable(plan, options),
+        run: async (input, context) => {
+            const image = builderOf(input, options.app);
+            context.task.detail(`${options.app}: ${options.command}`);
+            await context.docker.runOrThrow([
+                "run --rm",
+                ...attachment(options.network ?? "host", context.topology),
+                "--workdir /app",
+                image,
+                ...command,
+            ].join(" "), `${options.app} failed to migrate`);
+            return input;
+        },
+    };
+}
+// Checked before the run starts, so a config naming an app that never kept a
+// builder fails without having touched the host
+function assertReachable(plan, options) {
+    const app = plan.config.apps.find((item) => item.name === options.app);
+    if (!app)
+        throw new Error(`${options.app} names no app in this deployment`);
+    const bastion = environmentOf(plan.config, plan.environment)?.host?.bastion;
+    const tunnel = options.tunnel;
+    if (!tunnel || tunnel.bastion === bastion)
+        return;
+    throw new Error(`${options.app} tunnels its migration through ${tunnel.bastion}, ` +
+        `but ${plan.environment} deploys to ${bastion ?? "this machine"}. ` +
+        "The step runs on the deploy host, so they have to be the same");
+}
+// A deployment may replace the build step, and a command hung on the pipeline
+// has to run in an image something actually produced
+export function builderOf(input, name) {
+    const app = input.apps.find((item) => item.name === name);
+    if (app?.builderTag)
+        return app.builderTag;
+    throw new Error(`${name} has no builder image, so nothing can be run in it`);
+}
+export function sentry(options) {
+    return { provider: "sentry", stripFromImage: options.stripFromImage };
+}
+export function routeOf(app) {
+    return app.route;
+}
+//# sourceMappingURL=steps.js.map

package/dist/steps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"steps.js","sourceRoot":"","sources":["../src/steps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAK5C,6EAA6E;AAC7E,+EAA+E;AAC/E,wEAAwE;AACxE,MAAM,UAAU,UAAU,CAAC,OAAoB,EAAE,QAAkB;IACjE,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,YAAY;QAAE,OAAO,CAAC,aAAa,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAEpE,OAAO;QACL,0EAA0E;QAC1E,2EAA2E;QAC3E,6CAA6C;QAC7C,aAAa,QAAQ,CAAC,OAAO,EAAE;QAC/B,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,IAAI,IAAI,EAAE,EAAE,CAAC;KACvF,CAAC;AACJ,CAAC;AAiBD,6EAA6E;AAC7E,oEAAoE;AACpE,MAAM,UAAU,OAAO,CAAC,OAAuB;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE3C,OAAO;QACL,KAAK,EAAE,uBAAuB,OAAO,CAAC,GAAG,EAAE;QAC3C,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC;QAE/C,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YAC5B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAE1D,MAAM,OAAO,CAAC,MAAM,CAAC,UAAU,CAC7B;gBACE,UAAU;gBACV,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,IAAI,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC;gBAC1D,gBAAgB;gBAChB,KAAK;gBACL,GAAG,OAAO;aACX,CAAC,IAAI,CAAC,GAAG,CAAC,EACX,GAAG,OAAO,CAAC,GAAG,oBAAoB,CACnC,CAAC;YAEF,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,gDAAgD;AAChD,SAAS,eAAe,CAAC,IAAU,EAAE,OAAuB;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACvE,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,GAAG,kCAAkC,CAAC,CAAC;IAE5E,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC;IAC5E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO;QAAE,OAAO;IAElD,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,CAAC,GAAG,kCAAkC,MAAM,CAAC,OAAO,IAAI;QAChE,OAAO,IAAI,CAAC,WAAW,eAAe,OAAO,IAAI,cAAc,IAAI;QACnE,+DAA+D,CAClE,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,qDAAqD;AACrD,MAAM,UAAU,SAAS,CAAC,KAAY,EAAE,IAAY;IAClD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC1D,IAAI,GAAG,EAAE,UAAU;QAAE,OAAO,GAAG,CAAC,UAAU,CAAC;IAE3C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oDAAoD,CAAC,CAAC;AAC/E,CAAC;AAID,MAAM,UAAU,MAAM,CAAC,OAAsB;IAC3C,OAAO,EAAE,QAAQ,EAAE,QAAiB,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAY;IAClC,OAAO,GAAG,CAAC,KAAK,CAAC;AACnB,CAAC"}

package/dist/topology.d.ts

@@ -0,0 +1,40 @@
+import type { Deployment } from "./types.js";
+export type AppTopology = {
+    name: string;
+    container: string;
+    retired: string;
+    failed: string;
+    currentAddress: string;
+    retiredAddress: string;
+    port: number;
+    route: string;
+    volumes: {
+        volume: string;
+        mountPath: string;
+    }[];
+    caches: Record<string, string>;
+};
+export type ServiceTopology = {
+    name: string;
+    container: string;
+    address: string;
+    alias?: string;
+    volumes: {
+        volume: string;
+        mountPath: string;
+    }[];
+};
+export type Topology = {
+    environment: string;
+    branch: string;
+    network: string;
+    subnet: string;
+    cidr: string;
+    publicPort?: number;
+    router: ServiceTopology;
+    apps: AppTopology[];
+    services: ServiceTopology[];
+    extraHosts: Record<string, string>;
+};
+export declare function topologyFor(config: Deployment, environment: string): Topology;
+//# sourceMappingURL=topology.d.ts.map

package/dist/topology.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"topology.d.ts","sourceRoot":"","sources":["../src/topology.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAW,UAAU,EAAe,MAAM,YAAY,CAAC;AAcnE,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACjD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAClD,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IAEb,UAAU,CAAC,EAAE,MAAM,CAAC;IAGpB,MAAM,EAAE,eAAe,CAAC;IACxB,IAAI,EAAE,WAAW,EAAE,CAAC;IACpB,QAAQ,EAAE,eAAe,EAAE,CAAC;IAE5B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC,CAAC;AAEF,wBAAgB,WAAW,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,GAAG,QAAQ,CAgD7E"}

package/dist/topology.js

@@ -0,0 +1,113 @@
+import { environmentOf } from "./config.js";
+import { mountFor } from "./layout.js";
+// Every name and address the deployment uses, derived from the app list. This
+// is the file that replaces the constants block: nothing is chosen by hand, so
+// adding an app cannot collide with an address somebody already picked.
+const NGINX_OCTET = 20;
+const APP_BLOCK_START = 21;
+// Services sit in their own block, so adding one never moves an app
+const SERVICE_BLOCK_START = 200;
+export function topologyFor(config, environment) {
+    const env = environmentOf(config, environment);
+    if (!env) {
+        const known = Object.keys(config.environments ?? {});
+        // An environment is a file, so having none is a different mistake from
+        // asking for one that is not there, and reads as one
+        if (known.length === 0) {
+            throw new Error(`No environments. Each one is a redkite.<name>.config.ts beside the ` +
+                `deployment, so ${environment} wants a redkite.${environment}.config.ts`);
+        }
+        throw new Error(`Unknown environment ${environment}, expected one of ${known.join(", ")}`);
+    }
+    const prefix = `${config.project}-${environment}`;
+    const address = (octet) => `${env.subnet}.${octet}`;
+    const apps = config.apps.map((app, index) => appTopology(app, prefix, environment, address, index));
+    const services = config.services.map((service, index) => serviceTopology(service, prefix, address, index));
+    return {
+        environment,
+        branch: env.branch,
+        network: `${prefix}-network`,
+        subnet: env.subnet,
+        cidr: `${env.subnet}.0/16`,
+        publicPort: env.publicPort,
+        router: {
+            name: "nginx",
+            container: `${prefix}-nginx`,
+            address: address(NGINX_OCTET),
+            volumes: [],
+        },
+        apps,
+        services,
+        extraHosts: extraHosts(apps, services, env.extraHosts),
+    };
+}
+function appTopology(app, prefix, environment, address, index) {
+    const container = `${prefix}-${app.name}`;
+    const base = APP_BLOCK_START + index * 2;
+    const volumes = Object.entries(app.volumes ?? {}).map(([name, mountPath]) => ({
+        volume: `${container}-${name}`,
+        mountPath,
+    }));
+    // Deduplicated by where each one mounts: an app that is the whole repository
+    // resolves the root and its own node_modules to one path, and two ids for one
+    // target would be a second cache nothing ever writes to
+    const targets = new Set();
+    const caches = {};
+    for (const cache of app.build.caches) {
+        const target = mountFor(cache, app.dir);
+        if (targets.has(target))
+            continue;
+        targets.add(target);
+        caches[cache] = `${app.name}-${environment}-${cache}-cache`;
+    }
+    return {
+        name: app.name,
+        container,
+        retired: `retired-${container}`,
+        failed: `failed-${container}`,
+        // Retired takes the lower slot, so a rollback never renumbers the live one
+        retiredAddress: address(base),
+        currentAddress: address(base + 1),
+        port: app.port,
+        route: app.route,
+        volumes,
+        caches,
+    };
+}
+function serviceTopology(service, prefix, address, index) {
+    const container = `${prefix}-${service.name}`;
+    return {
+        name: service.name,
+        container,
+        // Pinned when a service already exists at a known address
+        address: address(service.address ?? SERVICE_BLOCK_START + index),
+        alias: service.alias,
+        volumes: Object.entries(service.volumes ?? {}).map(([name, mountPath]) => ({
+            volume: `${container}-${name}`,
+            mountPath,
+        })),
+    };
+}
+// Nginx resolves upstreams by container name, apps reach services by alias
+function extraHosts(apps, services, declared = {}) {
+    const hosts = {};
+    for (const app of apps) {
+        hosts[app.container] = app.currentAddress;
+        hosts[app.retired] = app.retiredAddress;
+    }
+    for (const service of services) {
+        if (service.alias)
+            hosts[service.alias] = service.address;
+    }
+    // Declared last, but never over a derived one: a name that already resolves
+    // to a container in this deployment would send its traffic somewhere else,
+    // and the deploy would look like it worked
+    for (const [name, address] of Object.entries(declared)) {
+        if (name in hosts) {
+            throw new Error(`extraHosts names ${name}, which this deployment already resolves to ${hosts[name]}`);
+        }
+        hosts[name] = address;
+    }
+    return hosts;
+}
+//# sourceMappingURL=topology.js.map

package/dist/topology.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"topology.js","sourceRoot":"","sources":["../src/topology.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,8EAA8E;AAC9E,+EAA+E;AAC/E,wEAAwE;AAExE,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,oEAAoE;AACpE,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAwChC,MAAM,UAAU,WAAW,CAAC,MAAkB,EAAE,WAAmB;IACjE,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAE/C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QAErD,uEAAuE;QACvE,qDAAqD;QACrD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,qEAAqE;gBACnE,kBAAkB,WAAW,oBAAoB,WAAW,YAAY,CAC3E,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,KAAK,CACb,uBAAuB,WAAW,qBAAqB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC1E,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,IAAI,WAAW,EAAE,CAAC;IAClD,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;IAE5D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAC1C,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CACtD,CAAC;IAEF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CACtD,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CACjD,CAAC;IAEF,OAAO;QACL,WAAW;QACX,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,GAAG,MAAM,UAAU;QAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,OAAO;QAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,MAAM,EAAE;YACN,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,GAAG,MAAM,QAAQ;YAC5B,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC;YAC7B,OAAO,EAAE,EAAE;SACZ;QACD,IAAI;QACJ,QAAQ;QACR,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC;KACvD,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,GAAY,EACZ,MAAc,EACd,WAAmB,EACnB,OAAkC,EAClC,KAAa;IAEb,MAAM,SAAS,GAAG,GAAG,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,eAAe,GAAG,KAAK,GAAG,CAAC,CAAC;IAEzC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5E,MAAM,EAAE,GAAG,SAAS,IAAI,IAAI,EAAE;QAC9B,SAAS;KACV,CAAC,CAAC,CAAC;IAEJ,6EAA6E;IAC7E,8EAA8E;IAC9E,wDAAwD;IACxD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QAElC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC,IAAI,IAAI,WAAW,IAAI,KAAK,QAAQ,CAAC;IAC9D,CAAC;IAED,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS;QACT,OAAO,EAAE,WAAW,SAAS,EAAE;QAC/B,MAAM,EAAE,UAAU,SAAS,EAAE;QAC7B,2EAA2E;QAC3E,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC;QAC7B,cAAc,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;QACjC,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,OAAO;QACP,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,OAAoB,EACpB,MAAc,EACd,OAAkC,EAClC,KAAa;IAEb,MAAM,SAAS,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IAE9C,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,SAAS;QACT,0DAA0D;QAC1D,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,mBAAmB,GAAG,KAAK,CAAC;QAChE,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;YACzE,MAAM,EAAE,GAAG,SAAS,IAAI,IAAI,EAAE;YAC9B,SAAS;SACV,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,SAAS,UAAU,CACjB,IAAmB,EACnB,QAA2B,EAC3B,WAAmC,EAAE;IAErC,MAAM,KAAK,GAA2B,EAAE,CAAC;IAEzC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,cAAc,CAAC;QAC1C,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,cAAc,CAAC;IAC1C,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,KAAK;YAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAC5D,CAAC;IAED,4EAA4E;IAC5E,2EAA2E;IAC3E,2CAA2C;IAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CACb,oBAAoB,IAAI,+CAA+C,KAAK,CAAC,IAAI,CAAC,EAAE,CACrF,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;IACxB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}