feat(deploy): add production remote preflight

Author: haydaramru

.github/workflows/ci.yml

@@ -74,6 +74,7 @@ jobs:
           python3 -m py_compile \
             scripts/deployment_controller.py \
             scripts/ci_validate_field_inputs.py \
+            scripts/vps_field_remote_probe.py \
             tests/test_deployment_controller.py
           make test-deployment-controller
 

deploy/deployment-policy.json

@@ -46,6 +46,7 @@
     "deploy/schemas/deployment-policy.schema.json",
     "deploy/schemas/deployment-result.schema.json",
     "deploy/schemas/evidence-index.schema.json",
+    "deploy/schemas/remote-preflight.schema.json",
     "deploy/vps-field.env.example",
     "docker-compose.ci.yml",
     "docker-compose.yml",
@@ -64,6 +65,7 @@
     "scripts/field_validation_preflight.sh",
     "scripts/vps_field_deploy.sh",
     "scripts/vps_field_remote_preflight.sh",
+    "scripts/vps_field_remote_probe.py",
     "scripts/vps_field_smoke_test.sh",
     "scripts/vps_field_verify_external.sh"
   ],
@@ -74,5 +76,6 @@
   ],
   "result_schema_version": 1,
   "evidence_index_schema_version": 1,
-  "ci_proof_schema_version": 1
+  "ci_proof_schema_version": 1,
+  "remote_preflight_schema_version": 1
 }

deploy/schemas/deployment-policy.schema.json

@@ -16,7 +16,8 @@
     "supported_compose_files",
     "result_schema_version",
     "evidence_index_schema_version",
-    "ci_proof_schema_version"
+    "ci_proof_schema_version",
+    "remote_preflight_schema_version"
   ],
   "properties": {
     "schema_version": {
@@ -185,6 +186,9 @@
     },
     "ci_proof_schema_version": {
       "const": 1
+    },
+    "remote_preflight_schema_version": {
+      "const": 1
     }
   }
 }

deploy/schemas/remote-preflight.schema.json

@@ -0,0 +1,130 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://eventhorizon.invalid/schemas/remote-preflight.schema.json",
+  "title": "EventHorizon remote preflight evidence",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "target_alias",
+    "deployment_commit",
+    "checked_utc",
+    "starting_state",
+    "result",
+    "checks"
+  ],
+  "properties": {
+    "schema_version": {
+      "const": 1
+    },
+    "target_alias": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$"
+    },
+    "deployment_commit": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{40}$"
+    },
+    "checked_utc": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "starting_state": {
+      "enum": [
+        "INITIAL_DEPLOYMENT",
+        "MANAGED_REDEPLOYMENT",
+        "UNSUPPORTED"
+      ]
+    },
+    "result": {
+      "enum": [
+        "PASS",
+        "BLOCKED"
+      ]
+    },
+    "checks": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 64,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "id",
+          "status",
+          "summary"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "pattern": "^[a-z][a-z0-9_]{0,63}$"
+          },
+          "status": {
+            "enum": [
+              "PASS",
+              "WARNING",
+              "BLOCKER"
+            ]
+          },
+          "summary": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 240
+          }
+        }
+      }
+    }
+  },
+  "allOf": [
+    {
+      "if": {
+        "properties": {
+          "result": {
+            "const": "PASS"
+          }
+        },
+        "required": [
+          "result"
+        ]
+      },
+      "then": {
+        "properties": {
+          "starting_state": {
+            "enum": [
+              "INITIAL_DEPLOYMENT",
+              "MANAGED_REDEPLOYMENT"
+            ]
+          },
+          "checks": {
+            "items": {
+              "properties": {
+                "status": {
+                  "enum": [
+                    "PASS",
+                    "WARNING"
+                  ]
+                }
+              }
+            }
+          }
+        }
+      },
+      "else": {
+        "properties": {
+          "checks": {
+            "contains": {
+              "properties": {
+                "status": {
+                  "const": "BLOCKER"
+                }
+              },
+              "required": [
+                "status"
+              ]
+            }
+          }
+        }
+      }
+    }
+  ]
+}