domain/architecture/system/effects.bend
near-v-framework@0.3.0.1 · 331 lines · 0 definitions
1import Base
2import bend-kit-files@0.1.0.0/files.bend as Fs
3import near-v-framework@0.3.0.1/domain/architecture/system/effs/io.bend as X
4import near-v-framework@0.3.0.1/domain/architecture/type.bend as A
5import near-v-framework@0.3.0.1/domain/architecture/ops.bend as O
6import near-v-framework@0.3.0.1/domain/architecture/system/container/effects.bend as CtE
7import near-v-framework@0.3.0.1/domain/architecture/system/deployment/type.bend as D
8import near-v-framework@0.3.0.1/domain/architecture/system/deployment/ops.bend as DO
9import near-v-framework@0.3.0.1/domain/architecture/system/deployment/azure/effects.bend as AzE
10import near-v-framework@0.3.0.1/domain/architecture/system/deployment/nix_darwin/type.bend as ND
11import near-v-framework@0.3.0.1/domain/architecture/system/deployment/nix_darwin/ops.bend as NDO
12import near-v-framework@0.3.0.1/domain/architecture/system/deployment/nix_darwin/effects.bend as NDE
13import near-v-framework@0.3.0.1/domain/architecture/system/deployment/nix_darwin/setting/type.bend as St
14import near-v-framework@0.3.0.1/domain/architecture/system/deployment/nix_darwin/setting/ops.bend as StO
15import near-v-framework@0.3.0.1/domain/architecture/system/deployment/nix_darwin/brew/type.bend as Br
16import near-v-framework@0.3.0.1/domain/architecture/system/deployment/nix_darwin/setting/effects.bend as StE
17import near-v-framework@0.3.0.1/domain/architecture/system/deployment/nix_darwin/brew/effects.bend as BrE
18import near-v-framework@0.3.0.1/domain/architecture/system/deployment/nix_darwin/service/ops.bend as SvO
19import near-v-framework@0.3.0.1/domain/architecture/system/release/type.bend as Rl
20import near-v-framework@0.3.0.1/domain/architecture/system/release/ops.bend as RlO
21import near-v-framework@0.3.0.1/domain/architecture/system/plan/type.bend as P
22import near-v-framework@0.3.0.1/domain/architecture/system/plan/ops.bend as PO
23import near-v-framework@0.3.0.1/domain/architecture/system/ops.bend as SO
24
25# The system's effects: reading the repository, the Bend hub and GitHub (a snapshot of the world), and
26# changing them (a deploy). Programs run with their arguments, never through a shell; files are read with
27# Base's File API.
28
29# ---- the repository's files ----
30def files(+root: String) -> IO(List<&2, String>):
31 do IO<List<&2, String>>:
32 out : String <- X.run("git", ["-C", root, "ls-files", "-co", "--exclude-standard"])
33 return X.nonempty(String.lines(out))
34
35# ---- what an entry reaches: it and every file it imports, followed in Bend ----
36def second_word(+t: String) -> String:
37 Maybe.default(&2, String, List.get(&2, String, X.nonempty(String.split(t, ' ')), 1n), "")
38
39def unquote(+w: String) -> String:
40 Bool.pick(String, String.starts_with(w, "\""), Maybe.default(&2, String, List.get(&2, String, String.split(w, '"'), 1n), ""), w)
41
42# The file a line imports, relative to the repository, or "" when it imports none of the repository's.
43def import_of(+line: String, +dir: String) -> String:
44 +w = unquote(second_word(String.trim(line)))
45 Bool.pick(String, String.starts_with(String.trim(line), "import ") && (String.starts_with(w, "./") || String.starts_with(w, "../")),
46 Fs.path.normalize(Fs.path.join(dir, w)), "")
47
48def imports(ls: List<&2, String>, +dir: String) -> List<&2, String>:
49 match ls:
50 case []:
51 []
52 case l <> rest:
53 X.nonempty(import_of(l, dir) <> imports(rest, dir))
54
55# Each step reads one file; the number of files squared bounds the walk.
56def reach(fuel: Nat, +todo: List<&2, String>, +seen: List<&2, String>, +root: String) -> IO(List<&2, String>):
57 match fuel:
58 case 0n:
59 IO.pure(List<&2, String>, seen)
60 case 1n+k:
61 match todo:
62 case []:
63 IO.pure(List<&2, String>, seen)
64 case +f <> rest:
65 do IO<List<&2, String>>:
66 text : String <- X.read_head(root ++ "/" ++ f, 4096)
67 +known : Bool = List.contains(~String, ~String.eq, seen, f)
68 reach(k, List.append(&2, String, rest, Bool.pick(List<&2, String>, known, [], imports(String.lines(text), Fs.path.parent(f)))), Bool.pick(List<&2, String>, known, seen, f <> seen), root)
69
70# ---- the Bend hub: has it published this package, with these exact files? ----
71def differing(fs: List<&2, String>, +local: String, +hub: String) -> IO(String):
72 match fs:
73 case []:
74 IO.pure(String, "")
75 case +f <> rest:
76 do IO<String>:
77 same : Bool <- X.succeeds("cmp", ["-s", local ++ "/" ++ f, hub ++ "/" ++ f])
78 more : String <- differing(rest, local, hub)
79 return Bool.pick(String, same, more, f)
80
81def hub_of(+published: String, +f: String) -> P.Hub:
82 Bool.pick(P.Hub, String.is_empty(published), P.Unpublished{}, Bool.pick(P.Hub, String.is_empty(f), P.Same{}, P.Differs{f}))
83
84# The package's hash, as Bend's local cache names it. A package not cached yet is fetched first by
85# checking a file that imports it: the hub has it exactly when that succeeds.
86def fetch_if(missing: Bool, +home: String, +n: String, +v: String, +e: String, +cached: String) -> IO(String):
87 match missing:
88 case False{}:
89 IO.pure(String, cached)
90 case True{}:
91 do IO<String>:
92 X.write("/tmp/v-probe.bend", "import Base\nimport " ++ n ++ "@" ++ v ++ "/" ++ Fs.path.file_name(e) ++ " as P\n")
93 _ : Bool <- X.succeeds(home ++ "/.bend/bin/bend", ["/tmp/v-probe.bend", "--check-only"])
94 X.read(home ++ "/.bend/lib/names/" ++ n ++ "@" ++ v)
95
96def fetched(+home: String, +n: String, +v: String, +e: String, +cached: String) -> IO(String):
97 fetch_if(String.is_empty(String.trim(cached)), home, n, v, e, cached)
98
99def hub_state(+home: String, +root: String, p: Rl.Package) -> IO(P.Hub):
100 match p:
101 case Rl.Package{+n, +v, +e, _}:
102 do IO<P.Hub>:
103 cached : String <- X.read(home ++ "/.bend/lib/names/" ++ n ++ "@" ++ v)
104 +hash : String <- fetched(home, n, v, e, cached)
105 +files : List<&2, String> <- reach(1000n, [e], [], root)
106 f : String <- differing(files, root, home ++ "/.bend/lib/" ++ String.trim(hash))
107 return hub_of(String.trim(hash), f)
108
109def hub_states(+home: String, +root: String, ps: List<&2, Rl.Package>) -> IO(List<&2, P.Hub>):
110 match ps:
111 case []:
112 IO.pure(List<&2, P.Hub>, [])
113 case p <> rest:
114 do IO<List<&2, P.Hub>>:
115 h : P.Hub <- hub_state(home, root, p)
116 hs : List<&2, P.Hub> <- hub_states(home, root, rest)
117 return h <> hs
118
119# ---- GitHub ----
120def first_word(+t: String) -> String:
121 Maybe.default(&2, String, List.head(&2, String, X.nonempty(String.split(t, '\t'))), "")
122
123def pushed(+root: String, +sha: String) -> IO(Bool):
124 Bool.pick(IO(Bool), String.is_empty(sha), IO.pure(Bool, False{}), X.succeeds("git", ["-C", root, "merge-base", "--is-ancestor", "HEAD", sha]))
125
126def remote(+root: String, r: Rl.Repository) -> IO(P.Remote):
127 match r:
128 case Rl.Repository{+name, _}:
129 do IO<P.Remote>:
130 origin : String <- X.run("git", ["-C", root, "remote", "get-url", "origin"])
131 vis : String <- X.run("gh", ["repo", "view", name, "--json", "visibility", "--jq", ".visibility"])
132 status : String <- X.run("git", ["-C", root, "status", "--porcelain"])
133 head : String <- X.run("git", ["-C", root, "ls-remote", "origin", "refs/heads/main"])
134 up : Bool <- pushed(root, first_word(head))
135 return P.Remote{String.trim(origin), String.to_lower(String.trim(vis)), String.is_empty(String.trim(status)), up}
136
137# ---- a snapshot: everything a plan needs ----
138def root() -> IO(String):
139 do IO<String>:
140 t : String <- X.run("git", ["rev-parse", "--show-toplevel"])
141 return String.trim(t)
142
143# The files, what the packages' entries and the system's own entry reach, the hub, and GitHub.
144def observe(+root: String, +entry: String, r: Rl.Release) -> IO(P.Observed):
145 match r:
146 case Rl.Release{repo, +ps}:
147 do IO<P.Observed>:
148 +h : String <- X.home()
149 +fs : List<&2, String> <- files(root)
150 reached : List<&2, String> <- reach(Nat.mul(1n+List.length(&2, String, fs), 1n+List.length(&2, String, fs)), entry <> RlO.entries(ps), [], root)
151 hs : List<&2, P.Hub> <- hub_states(h, root, ps)
152 rm : P.Remote <- remote(root, repo)
153 return P.Observed{fs, reached, hs, rm}
154
155# ---- a deploy: carry out a plan with nothing blocked ----
156def apply(+root: String, +bend: String, s: P.Step) -> IO(Unit):
157 match s:
158 case P.Current{_}:
159 IO.print(PO.show(s))
160 case P.Publish{+n, +v, +e}:
161 do IO<Unit>:
162 out : String <- X.run(bend, [root ++ "/" ++ e, "--publish", n ++ "@" ++ v])
163 IO.print(Bool.pick(String, String.contains(out, "published"), "published " ++ n ++ "@" ++ v, "failed publish " ++ n ++ "@" ++ v))
164 case P.Push{+r}:
165 do IO<Unit>:
166 ok : Bool <- X.succeeds("git", ["-C", root, "push", "-q", "origin", "HEAD:main"])
167 IO.print(Bool.pick(String, ok, "pushed github " ++ r, "failed push github " ++ r))
168 case P.Rebuild{+h, +fl, +mac}:
169 do IO<Unit>:
170 _ : Result<&1, &1, U32 & String, Unit> <- Fs.mkdir(root ++ "/nix")
171 X.write(root ++ "/nix/flake.nix", fl)
172 X.write(root ++ "/nix/mac.nix", mac)
173 ok : Bool <- X.succeeds("sudo", ["-n", "/run/current-system/sw/bin/darwin-rebuild", "switch", "--flake", root ++ "/nix#" ++ h])
174 IO.print(Bool.pick(String, ok, "rebuilt nix-darwin " ++ h, "failed darwin-rebuild switch " ++ h))
175 case P.ServePort{+p, +t, ts}:
176 do IO<Unit>:
177 ok : Bool <- X.succeeds(ts, ["serve", "--bg", "--yes", "--https=" ++ U32.show(p), t])
178 IO.print(Bool.pick(String, ok, "served :" ++ U32.show(p) ++ " -> " ++ t, "failed serve :" ++ U32.show(p)))
179 case P.Change{_, _, _}:
180 IO.pure(Unit, Unit{})
181 case P.Blocked{_, _}:
182 IO.print(PO.show(s))
183
184def apply_all(+root: String, +bend: String, ss: List<&2, P.Step>) -> IO(Unit):
185 match ss:
186 case []:
187 IO.pure(Unit, Unit{})
188 case s <> rest:
189 do IO<Unit>:
190 apply(root, bend, s)
191 apply_all(root, bend, rest)
192
193def deploy_if(blocked: Bool, +root: String, +ss: List<&2, P.Step>) -> IO(Unit):
194 match blocked:
195 case True{}:
196 IO.die(Unit, 1, PO.show_all(ss) ++ "nothing deployed: the plan is blocked")
197 case False{}:
198 do IO<Unit>:
199 +h : String <- X.home()
200 apply_all(root, h ++ "/.bend/bin/bend", ss)
201
202def deploy(+root: String, +ss: List<&2, P.Step>) -> IO(Unit):
203 deploy_if(PO.any_blocked(ss), root, ss)
204
205# ---- the whole plan: the release, the stack, each deployment node, and what the deploy would break ----
206# ---- a nix-darwin node: its checks, what a rebuild would change, and the rebuild when anything would ----
207def has_change(ss: List<&2, P.Step>) -> Bool:
208 match ss:
209 case []:
210 False{}
211 case s <> rest:
212 match s:
213 case P.Change{_, _, _}:
214 True{}
215 case _:
216 has_change(rest)
217
218def mac_of(nd: ND.NixDarwin) -> String:
219 match nd:
220 case ND.NixDarwin{_, _, _, _, _, st, fw, br, _, _, _, _, _, _}:
221 StO.mac_nix(st, fw, br)
222
223def host_of(nd: ND.NixDarwin) -> String:
224 match nd:
225 case ND.NixDarwin{h, _, _, _, _, _, _, _, _, _, _, _, _, _}:
226 h
227
228def rebuild_if(c: Bool, +h: String, +fl: String, +mac: String) -> List<&2, P.Step>:
229 match c:
230 case True{}:
231 [P.Rebuild{h, fl, mac}]
232 case False{}:
233 [P.Current{"nix-darwin " ++ h}]
234
235# Whether a generated file differs from the one in the repository (compared by cmp, not in memory).
236def differs(+path: String, +text: String) -> IO(Bool):
237 do IO<Bool>:
238 X.write("/tmp/v-generated", text)
239 same : Bool <- X.succeeds("cmp", ["-s", "/tmp/v-generated", path])
240 return Bool.not(same)
241
242def darwin_steps(+root: String, +k: String, +nd: ND.NixDarwin) -> IO(List<&2, P.Step>):
243 match nd:
244 case ND.NixDarwin{_, _, _, _, _, +st, +fw, +br, _, _, _, _, _, _}:
245 do IO<List<&2, P.Step>>:
246 checks : List<&2, P.Step> <- NDE.checks(k, nd)
247 +settings : List<&2, P.Step> <- StE.changes(st, fw)
248 +brews : List<&2, P.Step> <- BrE.changes(br)
249 flake_new : Bool <- differs(root ++ "/nix/flake.nix", NDO.flake(nd))
250 mac_new : Bool <- differs(root ++ "/nix/mac.nix", mac_of(nd))
251 return List.append(&2, P.Step, checks, List.append(&2, P.Step, settings, List.append(&2, P.Step, brews,
252 rebuild_if(flake_new || mac_new || has_change(settings) || has_change(brews), host_of(nd), NDO.flake(nd), mac_of(nd)))))
253
254def platform_steps(p: D.Platform, +root: String, +k: String, +a: A.Architecture) -> IO(List<&2, P.Step>):
255 match p:
256 case D.Unmanaged{}:
257 IO.pure(List<&2, P.Step>, [])
258 case D.Darwin{+nd}:
259 darwin_steps(root, k, nd)
260 case D.AzureCloud{az}:
261 AzE.checks(az, O.agreement(a))
262
263def node_steps(ns: List<&2, D.Node>, +root: String, +a: A.Architecture) -> IO(List<&2, P.Step>):
264 match ns:
265 case []:
266 IO.pure(List<&2, P.Step>, [])
267 case n <> rest:
268 match n:
269 case D.Node{+k, _, _, _, _, pf, kids, _}:
270 do IO<List<&2, P.Step>>:
271 here : List<&2, P.Step> <- platform_steps(pf, root, k, a)
272 below : List<&2, P.Step> <- node_steps(kids, root, a)
273 after : List<&2, P.Step> <- node_steps(rest, root, a)
274 return List.append(&2, P.Step, here, List.append(&2, P.Step, below, after))
275
276def deployed_path(+root: String) -> String:
277 root ++ "/.git/v-deployed"
278
279def breaks_step(+bs: List<&2, D.Break>, +d: D.Deployment) -> List<&2, P.Step>:
280 Bool.pick(List<&2, P.Step>, DO.breaks_eq(bs, DO.accepted(d)), [],
281 [P.Blocked{"deployment", DO.show_breaks(bs) ++ " (declare it as accepted to deploy)"}])
282
283# What the deploy would break, against what this repository last deployed (recorded in .git, never committed).
284def deployed_steps(+root: String, +d: D.Deployment) -> IO(List<&2, P.Step>):
285 do IO<List<&2, P.Step>>:
286 +text : String <- X.read(deployed_path(root))
287 return breaks_step(DO.breaks(DO.recorded_address(text), DO.recorded_stores(text), d), d)
288
289def plan_all(+root: String, +entry: String, +a: A.Architecture) -> IO(List<&2, P.Step>):
290 do IO<List<&2, P.Step>>:
291 o : P.Observed <- observe(root, entry, SO.release(O.system(a)))
292 stack : List<&2, P.Step> <- CtE.checks(root, O.containers(a), O.externals(a))
293 nodes : List<&2, P.Step> <- node_steps(O.nodes(a), root, a)
294 breaks : List<&2, P.Step> <- deployed_steps(root, O.deployment(a))
295 return List.append(&2, P.Step, stack, List.append(&2, P.Step, nodes, List.append(&2, P.Step, breaks, PO.plan(SO.release(O.system(a)), o))))
296
297# A deploy of the whole plan; afterwards it records the deployment, so the next plan compares against it.
298def deploy_all(+root: String, +entry: String, +a: A.Architecture) -> IO(Unit):
299 do IO<Unit>:
300 +steps : List<&2, P.Step> <- plan_all(root, entry, a)
301 deploy(root, steps)
302 X.write(deployed_path(root), DO.record(O.deployment(a)))
303
304# ---- import: each nix-darwin node's Mac as it is now, as Bend to declare it with ----
305def import_node(p: D.Platform, +root: String) -> IO(Unit):
306 match p:
307 case D.Darwin{nd}:
308 match nd:
309 case ND.NixDarwin{h, _, _, _, _, _, _, _, svs, _, _, _, _, _}:
310 do IO<Unit>:
311 st : List<&2, St.Setting> <- StE.observed(root ++ "/nix/options.tsv", SvO.labels(svs))
312 fw : St.Firewall <- StE.firewall_now()
313 br : List<&2, Br.Brew> <- BrE.observed()
314 IO.print("# " ++ h ++ "\n" ++ StO.import_text(st, fw, br))
315 case _:
316 IO.pure(Unit, Unit{})
317
318def import_nodes(ns: List<&2, D.Node>, +root: String) -> IO(Unit):
319 match ns:
320 case []:
321 IO.pure(Unit, Unit{})
322 case n <> rest:
323 match n:
324 case D.Node{_, _, _, _, _, pf, kids, _}:
325 do IO<Unit>:
326 import_node(pf, root)
327 import_nodes(kids, root)
328 import_nodes(rest, root)
329
330def import_all(+root: String, a: A.Architecture) -> IO(Unit):
331 import_nodes(O.nodes(a), root)