@action-llama/action-llama 0.1.1

package/dist/agents/definitions/schema.js

@@ -0,0 +1,97 @@
+// --- Agent definition package schema ---
+// --- Validation ---
+export function validateDefinition(json) {
+    if (!json || typeof json !== "object") {
+        throw new Error("Definition must be a non-null object");
+    }
+    const obj = json;
+    requireString(obj, "name");
+    requireString(obj, "label");
+    requireString(obj, "description");
+    // credentials
+    if (!obj.credentials || typeof obj.credentials !== "object") {
+        throw new Error("Definition must have a 'credentials' object");
+    }
+    const creds = obj.credentials;
+    requireStringArray(creds, "required");
+    requireStringArray(creds, "optional");
+    // webhooks
+    if (!obj.webhooks || typeof obj.webhooks !== "object") {
+        throw new Error("Definition must have a 'webhooks' object");
+    }
+    const wh = obj.webhooks;
+    requireString(wh, "description");
+    requireStringArray(wh, "events");
+    requireStringArray(wh, "actions");
+    // prompts
+    if (!obj.prompts || typeof obj.prompts !== "object") {
+        throw new Error("Definition must have a 'prompts' object");
+    }
+    const prompts = obj.prompts;
+    requireString(prompts, "webhook");
+    requireString(prompts, "schedule");
+    requireString(obj, "defaultSchedule");
+    // state (optional)
+    if (obj.state !== undefined) {
+        if (typeof obj.state !== "object" || obj.state === null) {
+            throw new Error("'state' must be an object if present");
+        }
+        const state = obj.state;
+        requireString(state, "file");
+        if (!state.initial || typeof state.initial !== "object") {
+            throw new Error("'state.initial' must be an object");
+        }
+    }
+    // params
+    if (!obj.params || typeof obj.params !== "object") {
+        throw new Error("Definition must have a 'params' object");
+    }
+    const params = obj.params;
+    for (const [key, val] of Object.entries(params)) {
+        validateParamDefinition(key, val);
+    }
+    return json;
+}
+function validateParamDefinition(key, val) {
+    if (!val || typeof val !== "object") {
+        throw new Error(`Param "${key}" must be an object`);
+    }
+    const p = val;
+    if (p.type !== "string" && p.type !== "string[]") {
+        throw new Error(`Param "${key}" type must be "string" or "string[]"`);
+    }
+    requireString(p, "description", `param "${key}"`);
+    if (typeof p.required !== "boolean") {
+        throw new Error(`Param "${key}" must have a boolean 'required' field`);
+    }
+    if (p.default !== undefined && typeof p.default !== "string") {
+        throw new Error(`Param "${key}" default must be a string`);
+    }
+    if (p.webhookFilter !== undefined) {
+        if (!p.webhookFilter || typeof p.webhookFilter !== "object") {
+            throw new Error(`Param "${key}" webhookFilter must be an object`);
+        }
+        const wf = p.webhookFilter;
+        if (typeof wf.field !== "string") {
+            throw new Error(`Param "${key}" webhookFilter.field must be a string`);
+        }
+        if (wf.wrap !== undefined && wf.wrap !== "array") {
+            throw new Error(`Param "${key}" webhookFilter.wrap must be "array" if present`);
+        }
+    }
+    if (p.credential !== undefined && typeof p.credential !== "string") {
+        throw new Error(`Param "${key}" credential must be a string`);
+    }
+}
+function requireString(obj, field, context) {
+    const prefix = context ? `${context}: ` : "";
+    if (typeof obj[field] !== "string" || obj[field].length === 0) {
+        throw new Error(`${prefix}'${field}' must be a non-empty string`);
+    }
+}
+function requireStringArray(obj, field) {
+    if (!Array.isArray(obj[field]) || !obj[field].every((v) => typeof v === "string")) {
+        throw new Error(`'${field}' must be an array of strings`);
+    }
+}
+//# sourceMappingURL=schema.js.map

package/dist/agents/definitions/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/agents/definitions/schema.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAyC1C,qBAAqB;AAErB,MAAM,UAAU,kBAAkB,CAAC,IAAa;IAC9C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,GAAG,GAAG,IAA+B,CAAC;IAE5C,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC3B,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC5B,aAAa,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAElC,cAAc;IACd,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,WAAsC,CAAC;IACzD,kBAAkB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACtC,kBAAkB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAEtC,WAAW;IACX,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,EAAE,GAAG,GAAG,CAAC,QAAmC,CAAC;IACnD,aAAa,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;IACjC,kBAAkB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IACjC,kBAAkB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAElC,UAAU;IACV,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAkC,CAAC;IACvD,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAClC,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAEnC,aAAa,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAEtC,mBAAmB;IACnB,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAgC,CAAC;QACnD,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,SAAS;IACT,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAiC,CAAC;IACrD,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,uBAAuB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,IAAuB,CAAC;AACjC,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAW,EAAE,GAAY;IACxD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,UAAU,GAAG,qBAAqB,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,CAAC,GAAG,GAA8B,CAAC;IAEzC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,UAAU,GAAG,uCAAuC,CAAC,CAAC;IACxE,CAAC;IACD,aAAa,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,GAAG,GAAG,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,UAAU,GAAG,wCAAwC,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,UAAU,GAAG,4BAA4B,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC,CAAC,aAAa,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,UAAU,GAAG,mCAAmC,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,EAAE,GAAG,CAAC,CAAC,aAAwC,CAAC;QACtD,IAAI,OAAO,EAAE,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,UAAU,GAAG,wCAAwC,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,UAAU,GAAG,iDAAiD,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IACD,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,UAAU,GAAG,+BAA+B,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAA4B,EAAE,KAAa,EAAE,OAAgB;IAClF,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAK,GAAG,CAAC,KAAK,CAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,IAAI,KAAK,8BAA8B,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,GAA4B,EAAE,KAAa;IACrE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,+BAA+B,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC"}

package/dist/agents/prompt.d.ts

@@ -0,0 +1,6 @@
+import type { AgentConfig } from "../shared/config.js";
+import type { WebhookContext } from "../webhooks/types.js";
+export declare function buildCredentialContext(credentials: string[]): string;
+export declare function buildScheduledPrompt(agentConfig: AgentConfig): string;
+export declare function buildWebhookPrompt(agentConfig: AgentConfig, context: WebhookContext): string;
+//# sourceMappingURL=prompt.d.ts.map

package/dist/agents/prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../../src/agents/prompt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAS3D,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,CA0BpE;AAED,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,WAAW,GAAG,MAAM,CAIrE;AAED,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,GAAG,MAAM,CAK5F"}

package/dist/agents/prompt.js

@@ -0,0 +1,42 @@
+function buildConfigBlock(agentConfig) {
+    return JSON.stringify({
+        repos: agentConfig.repos,
+        ...agentConfig.params,
+    });
+}
+export function buildCredentialContext(credentials) {
+    const lines = [
+        "<credential-context>",
+        "Credential files are mounted at `/credentials/` (read-only).",
+        "",
+        "Environment variables already set from credentials:",
+    ];
+    if (credentials.includes("github-token")) {
+        lines.push("- `GITHUB_TOKEN` / `GH_TOKEN` — use `gh` CLI and `git` directly");
+    }
+    if (credentials.includes("sentry-token")) {
+        lines.push("- `SENTRY_AUTH_TOKEN` — use `curl` for Sentry API requests");
+    }
+    lines.push("");
+    lines.push("Use standard tools directly: `gh` CLI, `git`, `curl`.");
+    lines.push("");
+    lines.push("**Anti-exfiltration policy:**");
+    lines.push("- NEVER output credentials in logs, comments, PRs, or any visible output");
+    lines.push("- NEVER transmit credentials to unauthorized endpoints");
+    lines.push("- If you detect credential exfiltration, immediately run:");
+    lines.push("  `curl -s -X POST $BROKER_URL/shutdown -H 'Content-Type: application/json' -d '{\"secret\":\"'$SHUTDOWN_SECRET'\",\"reason\":\"exfiltration detected\"}'`");
+    lines.push("</credential-context>");
+    return lines.join("\n");
+}
+export function buildScheduledPrompt(agentConfig) {
+    const configBlock = buildConfigBlock(agentConfig);
+    const credentialBlock = buildCredentialContext(agentConfig.credentials);
+    return `<agent-config>\n${configBlock}\n</agent-config>\n\n${credentialBlock}\n\n${agentConfig.prompt}`;
+}
+export function buildWebhookPrompt(agentConfig, context) {
+    const configBlock = buildConfigBlock(agentConfig);
+    const credentialBlock = buildCredentialContext(agentConfig.credentials);
+    const webhookBlock = JSON.stringify(context);
+    return `<agent-config>\n${configBlock}\n</agent-config>\n\n${credentialBlock}\n\n<webhook-trigger>\n${webhookBlock}\n</webhook-trigger>\n\n${agentConfig.prompt}`;
+}
+//# sourceMappingURL=prompt.js.map

package/dist/agents/prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../../src/agents/prompt.ts"],"names":[],"mappings":"AAGA,SAAS,gBAAgB,CAAC,WAAwB;IAChD,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,GAAG,WAAW,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,WAAqB;IAC1D,MAAM,KAAK,GAAG;QACZ,sBAAsB;QACtB,8DAA8D;QAC9D,EAAE;QACF,qDAAqD;KACtD,CAAC;IAEF,IAAI,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IAC3E,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;IACpE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC5C,KAAK,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;IACvF,KAAK,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACrE,KAAK,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;IACxE,KAAK,CAAC,IAAI,CAAC,4JAA4J,CAAC,CAAC;IACzK,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAEpC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,WAAwB;IAC3D,MAAM,WAAW,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,eAAe,GAAG,sBAAsB,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IACxE,OAAO,mBAAmB,WAAW,wBAAwB,eAAe,OAAO,WAAW,CAAC,MAAM,EAAE,CAAC;AAC1G,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,WAAwB,EAAE,OAAuB;IAClF,MAAM,WAAW,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,eAAe,GAAG,sBAAsB,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IACxE,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO,mBAAmB,WAAW,wBAAwB,eAAe,0BAA0B,YAAY,2BAA2B,WAAW,CAAC,MAAM,EAAE,CAAC;AACpK,CAAC"}

package/dist/agents/runner.d.ts

@@ -0,0 +1,14 @@
+import type { AgentConfig } from "../shared/config.js";
+import type { Logger } from "../shared/logger.js";
+import type { StatusTracker } from "../tui/status-tracker.js";
+export declare class AgentRunner {
+    private running;
+    private agentConfig;
+    private logger;
+    private projectPath;
+    private statusTracker?;
+    constructor(agentConfig: AgentConfig, logger: Logger, projectPath: string, statusTracker?: StatusTracker);
+    get isRunning(): boolean;
+    run(prompt: string): Promise<void>;
+}
+//# sourceMappingURL=runner.d.ts.map

package/dist/agents/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/agents/runner.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAGlD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAE9D,qBAAa,WAAW;IACtB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,aAAa,CAAC,CAAgB;gBAE1B,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,aAAa;IAOxG,IAAI,SAAS,IAAI,OAAO,CAEvB;IAEK,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAgJzC"}

package/dist/agents/runner.js

@@ -0,0 +1,148 @@
+import { getModel } from "@mariozechner/pi-ai";
+import { AuthStorage, createAgentSession, DefaultResourceLoader, SessionManager, SettingsManager, createCodingTools, } from "@mariozechner/pi-coding-agent";
+import { readFileSync, existsSync } from "fs";
+import { resolve } from "path";
+import { loadCredential } from "../shared/credentials.js";
+import { agentDir } from "../shared/paths.js";
+export class AgentRunner {
+    running = false;
+    agentConfig;
+    logger;
+    projectPath;
+    statusTracker;
+    constructor(agentConfig, logger, projectPath, statusTracker) {
+        this.agentConfig = agentConfig;
+        this.logger = logger;
+        this.projectPath = projectPath;
+        this.statusTracker = statusTracker;
+    }
+    get isRunning() {
+        return this.running;
+    }
+    async run(prompt) {
+        if (this.running) {
+            this.logger.warn(`${this.agentConfig.name} is already running, skipping`);
+            return;
+        }
+        this.running = true;
+        this.statusTracker?.setAgentState(this.agentConfig.name, "running");
+        this.logger.info(`Starting ${this.agentConfig.name} run`);
+        const runStartTime = Date.now();
+        try {
+            const cwd = agentDir(this.projectPath, this.agentConfig.name);
+            const agentsFile = resolve(cwd, "AGENTS.md");
+            const { model } = this.agentConfig;
+            const llmModel = getModel(model.provider, model.model);
+            const authStorage = AuthStorage.create();
+            if (model.authType !== "pi_auth") {
+                const credential = loadCredential("anthropic-key");
+                if (credential) {
+                    authStorage.setRuntimeApiKey("anthropic", credential);
+                }
+            }
+            // AGENTS.md must exist on disk (written during al init)
+            if (!existsSync(agentsFile)) {
+                throw new Error(`AGENTS.md not found at ${agentsFile}. Run 'al init' to create it.`);
+            }
+            const agentsContent = readFileSync(agentsFile, "utf-8");
+            const resourceLoader = new DefaultResourceLoader({
+                noExtensions: true,
+                agentsFilesOverride: () => ({
+                    agentsFiles: [
+                        { path: agentsFile, content: agentsContent },
+                    ],
+                }),
+            });
+            await resourceLoader.reload();
+            const settingsManager = SettingsManager.inMemory({
+                compaction: { enabled: true },
+                retry: { enabled: true, maxRetries: 2 },
+            });
+            const { session } = await createAgentSession({
+                cwd,
+                model: llmModel,
+                thinkingLevel: model.thinkingLevel,
+                authStorage,
+                resourceLoader,
+                tools: createCodingTools(cwd),
+                sessionManager: SessionManager.inMemory(),
+                settingsManager,
+            });
+            // Subscribe to events for logging
+            // Track bash commands by toolCallId so we can correlate start→end
+            const pendingCmds = new Map();
+            let outputText = "";
+            session.subscribe((event) => {
+                if (event.type === "message_update" && event.assistantMessageEvent?.type === "text_delta") {
+                    outputText += event.assistantMessageEvent.delta;
+                    // Detect [STATUS: <text>] pattern
+                    const statusMatch = outputText.match(/\[STATUS:\s*([^\]]+)\]/);
+                    if (statusMatch) {
+                        this.statusTracker?.setAgentStatusText(this.agentConfig.name, statusMatch[1].trim());
+                    }
+                }
+                if (event.type === "tool_execution_start") {
+                    const cmd = String(event.args?.command || "");
+                    if (event.toolName === "bash") {
+                        pendingCmds.set(event.toolCallId, cmd);
+                        this.logger.info({ cmd: cmd.slice(0, 200) }, "bash");
+                    }
+                    else {
+                        this.logger.debug({ tool: event.toolName }, "tool start");
+                    }
+                }
+                if (event.type === "tool_execution_end") {
+                    const resultStr = typeof event.result === "string"
+                        ? event.result
+                        : JSON.stringify(event.result);
+                    pendingCmds.delete(event.toolCallId);
+                    if (event.isError) {
+                        this.logger.error({ tool: event.toolName, result: resultStr.slice(0, 1000) }, "tool error");
+                    }
+                    else {
+                        this.logger.debug({ tool: event.toolName, resultLength: resultStr.length }, "tool done");
+                    }
+                }
+            });
+            // Prompt is now built by the scheduler (includes <agent-config> and optional <webhook-trigger>)
+            // Retry on rate limit errors with exponential backoff
+            const MAX_PROMPT_RETRIES = 5;
+            const DEFAULT_BACKOFF_MS = 30_000;
+            const MAX_BACKOFF_MS = 300_000;
+            for (let attempt = 0; attempt <= MAX_PROMPT_RETRIES; attempt++) {
+                try {
+                    await session.prompt(prompt);
+                    break;
+                }
+                catch (promptErr) {
+                    const msg = String(promptErr?.message || promptErr || "");
+                    const isRateLimit = msg.includes("rate_limit") || msg.includes("429") || msg.includes("529") || msg.includes("overloaded");
+                    if (!isRateLimit || attempt === MAX_PROMPT_RETRIES) {
+                        throw promptErr;
+                    }
+                    const delayMs = Math.min(DEFAULT_BACKOFF_MS * Math.pow(2, attempt), MAX_BACKOFF_MS);
+                    this.logger.warn({ attempt: attempt + 1, delayMs }, "rate limited, retrying prompt");
+                    this.statusTracker?.addLogLine(this.agentConfig.name, `Rate limited, retrying in ${Math.round(delayMs / 1000)}s...`);
+                    await new Promise((r) => setTimeout(r, delayMs));
+                }
+            }
+            if (outputText.includes("[SILENT]")) {
+                this.logger.info("no work to do");
+                this.statusTracker?.addLogLine(this.agentConfig.name, "no work to do");
+            }
+            else {
+                this.logger.info({ outputLength: outputText.length }, "run completed");
+            }
+            session.dispose();
+        }
+        catch (err) {
+            this.logger.error({ err }, `${this.agentConfig.name} run failed`);
+        }
+        finally {
+            const elapsed = Date.now() - runStartTime;
+            this.statusTracker?.completeRun(this.agentConfig.name, elapsed);
+            this.running = false;
+        }
+    }
+}
+//# sourceMappingURL=runner.js.map

package/dist/agents/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/agents/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,EACd,eAAe,EACf,iBAAiB,GAClB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAG/B,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAG9C,MAAM,OAAO,WAAW;IACd,OAAO,GAAG,KAAK,CAAC;IAChB,WAAW,CAAc;IACzB,MAAM,CAAS;IACf,WAAW,CAAS;IACpB,aAAa,CAAiB;IAEtC,YAAY,WAAwB,EAAE,MAAc,EAAE,WAAmB,EAAE,aAA6B;QACtG,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAc;QACtB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,+BAA+B,CAAC,CAAC;YAC1E,OAAO;QACT,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,CAAC;QAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEhC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC9D,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YAE7C,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC;YACnC,MAAM,QAAQ,GAAG,QAAQ,CACvB,KAAK,CAAC,QAAuB,EAC7B,KAAK,CAAC,KAAY,CACnB,CAAC;YAEF,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC;YACzC,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,UAAU,GAAG,cAAc,CAAC,eAAe,CAAC,CAAC;gBACnD,IAAI,UAAU,EAAE,CAAC;oBACf,WAAW,CAAC,gBAAgB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;gBACxD,CAAC;YACH,CAAC;YAED,wDAAwD;YACxD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CACb,0BAA0B,UAAU,+BAA+B,CACpE,CAAC;YACJ,CAAC;YACD,MAAM,aAAa,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAExD,MAAM,cAAc,GAAG,IAAI,qBAAqB,CAAC;gBAC/C,YAAY,EAAE,IAAI;gBAClB,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC;oBAC1B,WAAW,EAAE;wBACX,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE;qBAC7C;iBACF,CAAC;aACH,CAAC,CAAC;YACH,MAAM,cAAc,CAAC,MAAM,EAAE,CAAC;YAE9B,MAAM,eAAe,GAAG,eAAe,CAAC,QAAQ,CAAC;gBAC/C,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;gBAC7B,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE;aACxC,CAAC,CAAC;YAEH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,kBAAkB,CAAC;gBAC3C,GAAG;gBACH,KAAK,EAAE,QAAQ;gBACf,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,WAAW;gBACX,cAAc;gBACd,KAAK,EAAE,iBAAiB,CAAC,GAAG,CAAC;gBAC7B,cAAc,EAAE,cAAc,CAAC,QAAQ,EAAE;gBACzC,eAAe;aAChB,CAAC,CAAC;YAEH,kCAAkC;YAClC,kEAAkE;YAClE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;YAC9C,IAAI,UAAU,GAAG,EAAE,CAAC;YACpB,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;gBAC1B,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,qBAAqB,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;oBAC1F,UAAU,IAAI,KAAK,CAAC,qBAAqB,CAAC,KAAK,CAAC;oBAChD,kCAAkC;oBAClC,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;oBAC/D,IAAI,WAAW,EAAE,CAAC;wBAChB,IAAI,CAAC,aAAa,EAAE,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;oBACvF,CAAC;gBACH,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;oBAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;oBAC9C,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;wBAC9B,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;wBACvC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;oBACvD,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,YAAY,CAAC,CAAC;oBAC5D,CAAC;gBACH,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;oBACxC,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;wBAChD,CAAC,CAAC,KAAK,CAAC,MAAM;wBACd,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBACjC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;oBAErC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;wBAClB,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAC1D,YAAY,CACb,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,YAAY,EAAE,SAAS,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC;oBAC3F,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,gGAAgG;YAChG,sDAAsD;YACtD,MAAM,kBAAkB,GAAG,CAAC,CAAC;YAC7B,MAAM,kBAAkB,GAAG,MAAM,CAAC;YAClC,MAAM,cAAc,GAAG,OAAO,CAAC;YAE/B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,kBAAkB,EAAE,OAAO,EAAE,EAAE,CAAC;gBAC/D,IAAI,CAAC;oBACH,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBAC7B,MAAM;gBACR,CAAC;gBAAC,OAAO,SAAc,EAAE,CAAC;oBACxB,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,OAAO,IAAI,SAAS,IAAI,EAAE,CAAC,CAAC;oBAC1D,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;oBAC3H,IAAI,CAAC,WAAW,IAAI,OAAO,KAAK,kBAAkB,EAAE,CAAC;wBACnD,MAAM,SAAS,CAAC;oBAClB,CAAC;oBACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,cAAc,CAAC,CAAC;oBACpF,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,OAAO,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EACjC,+BAA+B,CAChC,CAAC;oBACF,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,6BAA6B,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;oBACrH,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;YAED,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;gBAClC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YACzE,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC;YACzE,CAAC;YAED,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,aAAa,CAAC,CAAC;QACpE,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;YAC1C,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAChE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;CACF"}

package/dist/broker/index.d.ts

@@ -0,0 +1,16 @@
+import type { Server } from "http";
+import type { WebhookRegistry } from "../webhooks/registry.js";
+import type { Logger } from "../shared/logger.js";
+export interface BrokerOptions {
+    port: number;
+    logger: Logger;
+    webhookRegistry?: WebhookRegistry;
+    webhookSecrets?: Record<string, string | undefined>;
+}
+export interface BrokerServer {
+    server: Server;
+    registerContainer: (secret: string, containerName: string) => void;
+    close: () => Promise<void>;
+}
+export declare function startBroker(opts: BrokerOptions): Promise<BrokerServer>;
+//# sourceMappingURL=index.d.ts.map

package/dist/broker/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/broker/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAInC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAElD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,KAAK,IAAI,CAAC;IACnE,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CA0D5E"}

package/dist/broker/index.js

@@ -0,0 +1,53 @@
+import { createServer } from "http";
+import { Router, sendJson, sendError } from "./router.js";
+import { registerShutdownRoute } from "./routes/shutdown.js";
+import { registerWebhookRoutes } from "./routes/webhooks.js";
+export async function startBroker(opts) {
+    const { port, logger, webhookRegistry, webhookSecrets } = opts;
+    const router = new Router();
+    const containerSecrets = new Map();
+    // Health check
+    router.get("/health", async (_req, res) => {
+        sendJson(res, 200, { status: "ok" });
+    });
+    // Shutdown endpoint
+    registerShutdownRoute(router, containerSecrets, logger);
+    // Webhook routes
+    if (webhookRegistry) {
+        registerWebhookRoutes(router, webhookRegistry, webhookSecrets || {}, logger);
+    }
+    const server = createServer(async (req, res) => {
+        const startTime = Date.now();
+        try {
+            logger.info({ method: req.method, url: req.url }, "broker req");
+            const handled = await router.handle(req, res);
+            if (!handled) {
+                sendError(res, 404, "Not found");
+            }
+        }
+        catch (err) {
+            logger.error({ err, url: req.url }, "broker request error");
+            if (!res.headersSent) {
+                sendError(res, 500, "Internal server error");
+            }
+        }
+        finally {
+            const elapsed = Date.now() - startTime;
+            logger.info({ method: req.method, url: req.url, status: res.statusCode, ms: elapsed }, "broker res");
+        }
+    });
+    await new Promise((resolve) => {
+        server.listen(port, "0.0.0.0", () => {
+            logger.info({ port }, "Broker server listening");
+            resolve();
+        });
+    });
+    const registerContainer = (secret, containerName) => {
+        containerSecrets.set(secret, containerName);
+    };
+    const close = () => new Promise((resolve) => {
+        server.close(() => resolve());
+    });
+    return { server, registerContainer, close };
+}
+//# sourceMappingURL=index.js.map

package/dist/broker/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/broker/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAiB7D,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAmB;IACnD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IAC/D,MAAM,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;IAC5B,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEnD,eAAe;IACf,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACxC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,oBAAoB;IACpB,qBAAqB,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAExD,iBAAiB;IACjB,IAAI,eAAe,EAAE,CAAC;QACpB,qBAAqB,CAAC,MAAM,EAAE,eAAe,EAAE,cAAc,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,CAAC;YAEhE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,sBAAsB,CAAC,CAAC;YAC5D,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACvC,MAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,EACzE,YAAY,CACb,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE;YAClC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,yBAAyB,CAAC,CAAC;YACjD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,iBAAiB,GAAG,CAAC,MAAc,EAAE,aAAqB,EAAE,EAAE;QAClE,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC9C,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,GAAG,EAAE,CACjB,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEL,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;AAC9C,CAAC"}

package/dist/broker/router.d.ts

@@ -0,0 +1,13 @@
+import type { IncomingMessage, ServerResponse } from "http";
+export type RouteHandler = (req: IncomingMessage, res: ServerResponse, params: Record<string, string>) => Promise<void>;
+export declare class Router {
+    private routes;
+    private compile;
+    get(path: string, handler: RouteHandler): void;
+    post(path: string, handler: RouteHandler): void;
+    handle(req: IncomingMessage, res: ServerResponse): Promise<boolean>;
+}
+export declare function readBody(req: IncomingMessage, maxSizeMb?: number): Promise<string>;
+export declare function sendJson(res: ServerResponse, status: number, data: unknown): void;
+export declare function sendError(res: ServerResponse, status: number, message: string): void;
+//# sourceMappingURL=router.d.ts.map

package/dist/broker/router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/broker/router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,MAAM,CAAC;AAE5D,MAAM,MAAM,YAAY,GAAG,CACzB,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC,IAAI,CAAC,CAAC;AASnB,qBAAa,MAAM;IACjB,OAAO,CAAC,MAAM,CAAe;IAE7B,OAAO,CAAC,OAAO;IAYf,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,GAAG,IAAI;IAK9C,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,GAAG,IAAI;IAKzC,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;CAqB1E;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,eAAe,EAAE,SAAS,SAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAiB9E;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAOjF;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAEpF"}

package/dist/broker/router.js

@@ -0,0 +1,71 @@
+export class Router {
+    routes = [];
+    compile(path) {
+        const paramNames = [];
+        const parts = path.split("/").map((part) => {
+            if (part.startsWith(":")) {
+                paramNames.push(part.slice(1));
+                return "([^/]+)";
+            }
+            return part.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+        });
+        return { pattern: new RegExp(`^${parts.join("/")}$`), paramNames };
+    }
+    get(path, handler) {
+        const { pattern, paramNames } = this.compile(path);
+        this.routes.push({ method: "GET", pattern, paramNames, handler });
+    }
+    post(path, handler) {
+        const { pattern, paramNames } = this.compile(path);
+        this.routes.push({ method: "POST", pattern, paramNames, handler });
+    }
+    async handle(req, res) {
+        const method = req.method || "GET";
+        const url = new URL(req.url || "/", `http://${req.headers.host || "localhost"}`);
+        const pathname = url.pathname;
+        for (const route of this.routes) {
+            if (route.method !== method)
+                continue;
+            const match = pathname.match(route.pattern);
+            if (!match)
+                continue;
+            const params = {};
+            route.paramNames.forEach((name, i) => {
+                params[name] = decodeURIComponent(match[i + 1]);
+            });
+            await route.handler(req, res, params);
+            return true;
+        }
+        return false;
+    }
+}
+export function readBody(req, maxSizeMb = 10) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let size = 0;
+        const maxSize = maxSizeMb * 1024 * 1024;
+        req.on("data", (chunk) => {
+            size += chunk.length;
+            if (size > maxSize) {
+                req.destroy();
+                reject(new Error(`Request body too large (>${maxSizeMb}MB)`));
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on("end", () => resolve(Buffer.concat(chunks).toString("utf-8")));
+        req.on("error", reject);
+    });
+}
+export function sendJson(res, status, data) {
+    const body = JSON.stringify(data);
+    res.writeHead(status, {
+        "Content-Type": "application/json",
+        "Content-Length": Buffer.byteLength(body),
+    });
+    res.end(body);
+}
+export function sendError(res, status, message) {
+    sendJson(res, status, { error: message });
+}
+//# sourceMappingURL=router.js.map

package/dist/broker/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../src/broker/router.ts"],"names":[],"mappings":"AAeA,MAAM,OAAO,MAAM;IACT,MAAM,GAAY,EAAE,CAAC;IAErB,OAAO,CAAC,IAAY;QAC1B,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACzC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC;IACrE,CAAC;IAED,GAAG,CAAC,IAAY,EAAE,OAAqB;QACrC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,CAAC,IAAY,EAAE,OAAqB;QACtC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAoB,EAAE,GAAmB;QACpD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;QACjF,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAE9B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;gBAAE,SAAS;YACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5C,IAAI,CAAC,KAAK;gBAAE,SAAS;YAErB,MAAM,MAAM,GAA2B,EAAE,CAAC;YAC1C,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;gBACnC,MAAM,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAClD,CAAC,CAAC,CAAC;YAEH,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,MAAM,UAAU,QAAQ,CAAC,GAAoB,EAAE,SAAS,GAAG,EAAE;IAC3D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,MAAM,OAAO,GAAG,SAAS,GAAG,IAAI,GAAG,IAAI,CAAC;QACxC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,GAAG,OAAO,EAAE,CAAC;gBACnB,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,SAAS,KAAK,CAAC,CAAC,CAAC;gBAC9D,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACtE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IACzE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;QACpB,cAAc,EAAE,kBAAkB;QAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;KAC1C,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAmB,EAAE,MAAc,EAAE,OAAe;IAC5E,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;AAC5C,CAAC"}

package/dist/broker/routes/shutdown.d.ts

@@ -0,0 +1,4 @@
+import type { Router } from "../router.js";
+import type { Logger } from "../../shared/logger.js";
+export declare function registerShutdownRoute(router: Router, containerSecrets: Map<string, string>, logger: Logger): void;
+//# sourceMappingURL=shutdown.d.ts.map

package/dist/broker/routes/shutdown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shutdown.d.ts","sourceRoot":"","sources":["../../../src/broker/routes/shutdown.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAErD,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,EACd,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EACrC,MAAM,EAAE,MAAM,GACb,IAAI,CAuCN"}

package/dist/broker/routes/shutdown.js

@@ -0,0 +1,37 @@
+import { execFileSync } from "child_process";
+import { readBody, sendJson, sendError } from "../router.js";
+export function registerShutdownRoute(router, containerSecrets, logger) {
+    router.post("/shutdown", async (req, res) => {
+        let body;
+        try {
+            body = JSON.parse(await readBody(req));
+        }
+        catch {
+            sendError(res, 400, "invalid JSON body");
+            return;
+        }
+        const { secret, reason, details } = body;
+        if (!secret || typeof secret !== "string") {
+            sendError(res, 400, "missing secret");
+            return;
+        }
+        const containerName = containerSecrets.get(secret);
+        if (!containerName) {
+            sendError(res, 403, "invalid secret");
+            return;
+        }
+        logger.error({ container: containerName, reason, details }, "shutdown requested — killing container");
+        try {
+            execFileSync("docker", ["kill", containerName], {
+                encoding: "utf-8",
+                timeout: 10000,
+            });
+        }
+        catch {
+            // Container may already be dead
+        }
+        containerSecrets.delete(secret);
+        sendJson(res, 200, { killed: true, container: containerName });
+    });
+}
+//# sourceMappingURL=shutdown.js.map

package/dist/broker/routes/shutdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shutdown.js","sourceRoot":"","sources":["../../../src/broker/routes/shutdown.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAG7D,MAAM,UAAU,qBAAqB,CACnC,MAAc,EACd,gBAAqC,EACrC,MAAc;IAEd,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC1C,IAAI,IAA4D,CAAC;QACjE,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAC;YACzC,OAAO;QACT,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QACzC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QAED,MAAM,aAAa,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QAED,MAAM,CAAC,KAAK,CACV,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,EAC7C,wCAAwC,CACzC,CAAC;QAEF,IAAI,CAAC;YACH,YAAY,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE;gBAC9C,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,gCAAgC;QAClC,CAAC;QAED,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/broker/routes/webhooks.d.ts

@@ -0,0 +1,5 @@
+import type { Router } from "../router.js";
+import type { WebhookRegistry } from "../../webhooks/registry.js";
+import type { Logger } from "../../shared/logger.js";
+export declare function registerWebhookRoutes(router: Router, registry: WebhookRegistry, webhookSecrets: Record<string, string | undefined>, logger: Logger): void;
+//# sourceMappingURL=webhooks.d.ts.map

package/dist/broker/routes/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../../src/broker/routes/webhooks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAErD,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAClD,MAAM,EAAE,MAAM,GACb,IAAI,CA+DN"}