@agent-relay/factory 0.1.50 → 0.1.52

package/dist/environments/stack-descriptor.d.ts

@@ -0,0 +1,243 @@
+import { z } from 'zod';
+export declare const KubernetesDeploymentSchema: z.ZodDiscriminatedUnion<"strategy", [z.ZodObject<{
+    strategy: z.ZodLiteral<"helm">;
+    chart: z.ZodEffects<z.ZodString, string, string>;
+    release: z.ZodOptional<z.ZodString>;
+    valuesFiles: z.ZodDefault<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
+    values: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
+}, "strict", z.ZodTypeAny, {
+    values: Record<string, string | number | boolean>;
+    strategy: "helm";
+    chart: string;
+    valuesFiles: string[];
+    release?: string | undefined;
+}, {
+    strategy: "helm";
+    chart: string;
+    values?: Record<string, string | number | boolean> | undefined;
+    release?: string | undefined;
+    valuesFiles?: string[] | undefined;
+}>, z.ZodObject<{
+    strategy: z.ZodLiteral<"kustomize">;
+    path: z.ZodEffects<z.ZodString, string, string>;
+}, "strict", z.ZodTypeAny, {
+    path: string;
+    strategy: "kustomize";
+}, {
+    path: string;
+    strategy: "kustomize";
+}>, z.ZodObject<{
+    strategy: z.ZodLiteral<"manifests">;
+    paths: z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
+}, "strict", z.ZodTypeAny, {
+    strategy: "manifests";
+    paths: string[];
+}, {
+    strategy: "manifests";
+    paths: string[];
+}>]>;
+export declare const KubernetesEndpointSchema: z.ZodObject<{
+    name: z.ZodString;
+    service: z.ZodString;
+    port: z.ZodNumber;
+    protocol: z.ZodDefault<z.ZodEnum<["http", "https"]>>;
+    path: z.ZodDefault<z.ZodString>;
+    ingressUrl: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    path: string;
+    port: number;
+    name: string;
+    service: string;
+    protocol: "http" | "https";
+    ingressUrl?: string | undefined;
+}, {
+    port: number;
+    name: string;
+    service: string;
+    path?: string | undefined;
+    protocol?: "http" | "https" | undefined;
+    ingressUrl?: string | undefined;
+}>;
+export declare const ReferencedKubernetesSecretSchema: z.ZodEffects<z.ZodObject<{
+    name: z.ZodString;
+    key: z.ZodString;
+    secretRef: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    key: string;
+    secretRef: string;
+    name: string;
+}, {
+    key: string;
+    secretRef: string;
+    name: string;
+}>, {
+    key: string;
+    secretRef: string;
+    name: string;
+}, {
+    key: string;
+    secretRef: string;
+    name: string;
+}>;
+/** Kubernetes slice of the repository-owned verification-stack contract. */
+export declare const KubernetesStackDescriptorSchema: z.ZodObject<{
+    apiVersion: z.ZodDefault<z.ZodLiteral<"factory.agentworkforce.dev/v1alpha1">>;
+    name: z.ZodString;
+    deployKind: z.ZodLiteral<"kubernetes">;
+    target: z.ZodDefault<z.ZodEnum<["byoc", "managed"]>>;
+    deployment: z.ZodDiscriminatedUnion<"strategy", [z.ZodObject<{
+        strategy: z.ZodLiteral<"helm">;
+        chart: z.ZodEffects<z.ZodString, string, string>;
+        release: z.ZodOptional<z.ZodString>;
+        valuesFiles: z.ZodDefault<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
+        values: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
+    }, "strict", z.ZodTypeAny, {
+        values: Record<string, string | number | boolean>;
+        strategy: "helm";
+        chart: string;
+        valuesFiles: string[];
+        release?: string | undefined;
+    }, {
+        strategy: "helm";
+        chart: string;
+        values?: Record<string, string | number | boolean> | undefined;
+        release?: string | undefined;
+        valuesFiles?: string[] | undefined;
+    }>, z.ZodObject<{
+        strategy: z.ZodLiteral<"kustomize">;
+        path: z.ZodEffects<z.ZodString, string, string>;
+    }, "strict", z.ZodTypeAny, {
+        path: string;
+        strategy: "kustomize";
+    }, {
+        path: string;
+        strategy: "kustomize";
+    }>, z.ZodObject<{
+        strategy: z.ZodLiteral<"manifests">;
+        paths: z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
+    }, "strict", z.ZodTypeAny, {
+        strategy: "manifests";
+        paths: string[];
+    }, {
+        strategy: "manifests";
+        paths: string[];
+    }>]>;
+    endpoints: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        service: z.ZodString;
+        port: z.ZodNumber;
+        protocol: z.ZodDefault<z.ZodEnum<["http", "https"]>>;
+        path: z.ZodDefault<z.ZodString>;
+        ingressUrl: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        path: string;
+        port: number;
+        name: string;
+        service: string;
+        protocol: "http" | "https";
+        ingressUrl?: string | undefined;
+    }, {
+        port: number;
+        name: string;
+        service: string;
+        path?: string | undefined;
+        protocol?: "http" | "https" | undefined;
+        ingressUrl?: string | undefined;
+    }>, "many">>;
+    secrets: z.ZodDefault<z.ZodArray<z.ZodEffects<z.ZodObject<{
+        name: z.ZodString;
+        key: z.ZodString;
+        secretRef: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        key: string;
+        secretRef: string;
+        name: string;
+    }, {
+        key: string;
+        secretRef: string;
+        name: string;
+    }>, {
+        key: string;
+        secretRef: string;
+        name: string;
+    }, {
+        key: string;
+        secretRef: string;
+        name: string;
+    }>, "many">>;
+    allowClusterScopedResources: z.ZodDefault<z.ZodBoolean>;
+    readinessTimeoutMs: z.ZodOptional<z.ZodNumber>;
+}, "strict", z.ZodTypeAny, {
+    target: "byoc" | "managed";
+    allowClusterScopedResources: boolean;
+    name: string;
+    apiVersion: "factory.agentworkforce.dev/v1alpha1";
+    deployKind: "kubernetes";
+    deployment: {
+        values: Record<string, string | number | boolean>;
+        strategy: "helm";
+        chart: string;
+        valuesFiles: string[];
+        release?: string | undefined;
+    } | {
+        path: string;
+        strategy: "kustomize";
+    } | {
+        strategy: "manifests";
+        paths: string[];
+    };
+    endpoints: {
+        path: string;
+        port: number;
+        name: string;
+        service: string;
+        protocol: "http" | "https";
+        ingressUrl?: string | undefined;
+    }[];
+    secrets: {
+        key: string;
+        secretRef: string;
+        name: string;
+    }[];
+    readinessTimeoutMs?: number | undefined;
+}, {
+    name: string;
+    deployKind: "kubernetes";
+    deployment: {
+        strategy: "helm";
+        chart: string;
+        values?: Record<string, string | number | boolean> | undefined;
+        release?: string | undefined;
+        valuesFiles?: string[] | undefined;
+    } | {
+        path: string;
+        strategy: "kustomize";
+    } | {
+        strategy: "manifests";
+        paths: string[];
+    };
+    target?: "byoc" | "managed" | undefined;
+    allowClusterScopedResources?: boolean | undefined;
+    readinessTimeoutMs?: number | undefined;
+    apiVersion?: "factory.agentworkforce.dev/v1alpha1" | undefined;
+    endpoints?: {
+        port: number;
+        name: string;
+        service: string;
+        path?: string | undefined;
+        protocol?: "http" | "https" | undefined;
+        ingressUrl?: string | undefined;
+    }[] | undefined;
+    secrets?: {
+        key: string;
+        secretRef: string;
+        name: string;
+    }[] | undefined;
+}>;
+export type KubernetesDeployment = z.output<typeof KubernetesDeploymentSchema>;
+export type KubernetesEndpoint = z.output<typeof KubernetesEndpointSchema>;
+export type ReferencedKubernetesSecret = z.output<typeof ReferencedKubernetesSecretSchema>;
+export type KubernetesStackDescriptor = z.output<typeof KubernetesStackDescriptorSchema>;
+export type KubernetesStackDescriptorInput = z.input<typeof KubernetesStackDescriptorSchema>;
+export declare function loadKubernetesStackDescriptor(path: string): Promise<KubernetesStackDescriptor>;
+//# sourceMappingURL=stack-descriptor.d.ts.map

package/dist/environments/stack-descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack-descriptor.d.ts","sourceRoot":"","sources":["../../src/environments/stack-descriptor.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AA0BvB,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAIrC,CAAA;AAEF,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;EAO1B,CAAA;AAEX,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;EAmB3C,CAAA;AAEF,4EAA4E;AAC5E,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAUjC,CAAA;AAEX,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAA;AAC9E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,wBAAwB,CAAC,CAAA;AAC1E,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,gCAAgC,CAAC,CAAA;AAC1F,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,+BAA+B,CAAC,CAAA;AACxF,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAA;AAE5F,wBAAsB,6BAA6B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAiBpG"}

package/dist/environments/stack-descriptor.js

@@ -0,0 +1,88 @@
+import { readFile } from 'node:fs/promises';
+import { parse as parseYaml } from 'yaml';
+import { z } from 'zod';
+const relativePathSchema = z.string().trim().min(1).superRefine((value, context) => {
+    if (value.startsWith('/') || value.split(/[\\/]/u).includes('..')) {
+        context.addIssue({ code: z.ZodIssueCode.custom, message: 'must stay within the repository checkout' });
+    }
+});
+const helmDeploymentSchema = z.object({
+    strategy: z.literal('helm'),
+    chart: relativePathSchema,
+    release: z.string().trim().min(1).max(53).optional(),
+    valuesFiles: z.array(relativePathSchema).default([]),
+    values: z.record(z.string(), z.union([z.string(), z.number(), z.boolean()])).default({}),
+}).strict();
+const kustomizeDeploymentSchema = z.object({
+    strategy: z.literal('kustomize'),
+    path: relativePathSchema,
+}).strict();
+const manifestsDeploymentSchema = z.object({
+    strategy: z.literal('manifests'),
+    paths: z.array(relativePathSchema).min(1),
+}).strict();
+export const KubernetesDeploymentSchema = z.discriminatedUnion('strategy', [
+    helmDeploymentSchema,
+    kustomizeDeploymentSchema,
+    manifestsDeploymentSchema,
+]);
+export const KubernetesEndpointSchema = z.object({
+    name: z.string().trim().min(1).max(63),
+    service: z.string().trim().min(1).max(253),
+    port: z.number().int().min(1).max(65_535),
+    protocol: z.enum(['http', 'https']).default('http'),
+    path: z.string().startsWith('/').default('/'),
+    ingressUrl: z.string().url().optional(),
+}).strict();
+export const ReferencedKubernetesSecretSchema = z.object({
+    name: z.string().trim().min(1).max(63),
+    key: z.string().trim().min(1).max(253),
+    secretRef: z.string().trim().min(1).max(512),
+}).strict().superRefine((secret, context) => {
+    if (!/^[a-z][a-z0-9+.-]*:\S+$/iu.test(secret.secretRef)) {
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ['secretRef'],
+            message: 'must be an opaque scheme-prefixed secret-manager reference',
+        });
+    }
+    if (/-----BEGIN|password\s*=|token\s*=|\{\s*"/iu.test(secret.secretRef)) {
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ['secretRef'],
+            message: 'must be an opaque secret-manager reference, never inline secret data',
+        });
+    }
+});
+/** Kubernetes slice of the repository-owned verification-stack contract. */
+export const KubernetesStackDescriptorSchema = z.object({
+    apiVersion: z.literal('factory.agentworkforce.dev/v1alpha1').default('factory.agentworkforce.dev/v1alpha1'),
+    name: z.string().trim().min(1).max(63),
+    deployKind: z.literal('kubernetes'),
+    target: z.enum(['byoc', 'managed']).default('byoc'),
+    deployment: KubernetesDeploymentSchema,
+    endpoints: z.array(KubernetesEndpointSchema).default([]),
+    secrets: z.array(ReferencedKubernetesSecretSchema).default([]),
+    allowClusterScopedResources: z.boolean().default(false),
+    readinessTimeoutMs: z.number().int().min(1_000).max(60 * 60_000).optional(),
+}).strict();
+export async function loadKubernetesStackDescriptor(path) {
+    const source = await readFile(path, 'utf8');
+    let value;
+    try {
+        value = parseYaml(source);
+    }
+    catch (error) {
+        throw new Error(`Could not parse verification stack descriptor ${path}: ${errorMessage(error)}`);
+    }
+    const parsed = KubernetesStackDescriptorSchema.safeParse(value);
+    if (!parsed.success) {
+        const issues = parsed.error.issues
+            .map((issue) => `${issue.path.join('.') || '<root>'}: ${issue.message}`)
+            .join('; ');
+        throw new Error(`Invalid verification stack descriptor ${path}: ${issues}`);
+    }
+    return parsed.data;
+}
+const errorMessage = (error) => error instanceof Error ? error.message : String(error);
+//# sourceMappingURL=stack-descriptor.js.map

package/dist/environments/stack-descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack-descriptor.js","sourceRoot":"","sources":["../../src/environments/stack-descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAE3C,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAA;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACjF,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC,CAAA;IACxG,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC3B,KAAK,EAAE,kBAAkB;IACzB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACpD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACzF,CAAC,CAAC,MAAM,EAAE,CAAA;AAEX,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAChC,IAAI,EAAE,kBAAkB;CACzB,CAAC,CAAC,MAAM,EAAE,CAAA;AAEX,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1C,CAAC,CAAC,MAAM,EAAE,CAAA;AAEX,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,kBAAkB,CAAC,UAAU,EAAE;IACzE,oBAAoB;IACpB,yBAAyB;IACzB,yBAAyB;CAC1B,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACnD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAC7C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC,MAAM,EAAE,CAAA;AAEX,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACtC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CAC7C,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;IAC1C,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACxD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,OAAO,EAAE,4DAA4D;SACtE,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,4CAA4C,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACxE,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,OAAO,EAAE,sEAAsE;SAChF,CAAC,CAAA;IACJ,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC,OAAO,CAAC,qCAAqC,CAAC;IAC3G,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACtC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IACnC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACnD,UAAU,EAAE,0BAA0B;IACtC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9D,2BAA2B,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,QAAQ,EAAE;CAC5E,CAAC,CAAC,MAAM,EAAE,CAAA;AAQX,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,IAAY;IAC9D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC3C,IAAI,KAAc,CAAA;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,iDAAiD,IAAI,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAClG,CAAC;IAED,MAAM,MAAM,GAAG,+BAA+B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC/D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aACvE,IAAI,CAAC,IAAI,CAAC,CAAA;QACb,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,KAAK,MAAM,EAAE,CAAC,CAAA;IAC7E,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAA;AACpB,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA"}

package/dist/environments/verification-pipeline.d.ts

@@ -0,0 +1,117 @@
+import type { FactoryEventReporter } from '../ports/observability.js';
+import type { Logger } from '../ports/system.js';
+import type { VerificationEnvironment, VerificationEnvironmentProvider } from '../ports/environment.js';
+import type { LoadMeasurements, LoadSloViolation } from './load-harness.js';
+import { type StackDeployment } from './verification-stack-deployer.js';
+import { type ResolvedVerificationStack } from './verification-stack.js';
+export declare const VERIFICATION_EVIDENCE_CONTRACT: "factory.verification.evidence.v1";
+export declare const DEFAULT_VERIFICATION_DESCRIPTOR = ".factory/verification-stack.yaml";
+export type VerificationStageStatus = 'pass' | 'fail' | 'skipped' | 'timed_out';
+export interface VerificationStageEvidence {
+    status: VerificationStageStatus;
+    durationMs: number;
+    error?: string;
+}
+export interface VerificationE2eEvidence extends VerificationStageEvidence {
+    exitCode?: number;
+}
+export interface VerificationLoadEvidence extends VerificationStageEvidence {
+    measured?: LoadMeasurements;
+    violations?: LoadSloViolation[];
+}
+export interface VerificationEvidence {
+    contract: typeof VERIFICATION_EVIDENCE_CONTRACT;
+    runId: string;
+    repository: string;
+    repositoryPath: string;
+    descriptorPath: string;
+    expectedHeadSha?: string;
+    environmentId?: string;
+    namespace?: string;
+    startedAt: string;
+    completedAt: string;
+    timedOut: boolean;
+    stages: {
+        resolve: VerificationStageEvidence;
+        provision: VerificationStageEvidence;
+        deploy: VerificationStageEvidence;
+        e2e: VerificationE2eEvidence;
+        load: VerificationLoadEvidence;
+        evaluate: VerificationStageEvidence;
+        teardown: VerificationStageEvidence;
+    };
+}
+export interface VerificationVerdict {
+    status: 'pass' | 'fail';
+    passed: boolean;
+    reason: string;
+    evidence: VerificationEvidence;
+}
+export interface VerificationGateInput {
+    repository: string;
+    repositoryPath: string;
+    issueKey?: string;
+    expectedHeadSha?: string;
+    descriptorPath?: string;
+    runId?: string;
+}
+export interface VerificationGate {
+    verify(input: VerificationGateInput): Promise<VerificationVerdict>;
+}
+export interface E2eCommandInput {
+    image: string;
+    environment: VerificationEnvironment;
+    command: string;
+    args: string[];
+    cwd: string;
+    env: Record<string, string>;
+    timeoutMs: number;
+    signal: AbortSignal;
+}
+export interface E2eCommandResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+    durationMs: number;
+}
+export type E2eCommandRunner = (input: E2eCommandInput) => Promise<E2eCommandResult>;
+export type VerificationRevisionResolver = (repositoryPath: string) => Promise<string>;
+export interface VerificationLoadResult {
+    status: 'pass' | 'fail';
+    measured: LoadMeasurements;
+    violations: LoadSloViolation[];
+}
+export type VerificationLoadRunner = (environment: VerificationEnvironment, stack: ResolvedVerificationStack, runId: string, signal?: AbortSignal) => Promise<VerificationLoadResult>;
+export interface VerificationStackDeployRunner {
+    deploy(stack: ResolvedVerificationStack['loaded'], environment: VerificationEnvironment, options?: {
+        signal?: AbortSignal;
+    }): Promise<StackDeployment>;
+}
+export type VerificationLeaseProvider = Pick<VerificationEnvironmentProvider, 'provision' | 'teardown'>;
+export interface VerificationPipelineOptions {
+    descriptorPath?: string;
+    environmentProvider?: VerificationLeaseProvider;
+    stackDeployer?: VerificationStackDeployRunner;
+    e2eRunner?: E2eCommandRunner;
+    loadRunner?: VerificationLoadRunner;
+    revisionResolver?: VerificationRevisionResolver;
+    reporter?: FactoryEventReporter;
+    logger?: Logger;
+    maxConcurrentEnvironments?: number;
+    maxRunTimeoutMs?: number;
+    maxEnvironmentTtlMs?: number;
+    maxTeardownTimeoutMs?: number;
+    now?: () => Date;
+    runId?: () => string;
+}
+export declare class VerificationPipeline implements VerificationGate {
+    #private;
+    constructor(options?: VerificationPipelineOptions);
+    verify(input: VerificationGateInput): Promise<VerificationVerdict>;
+}
+export declare function resolveGitHeadRevision(repositoryPath: string): Promise<string>;
+export declare function runE2eCommand(input: E2eCommandInput): Promise<E2eCommandResult>;
+export declare class VerificationTimeoutError extends Error {
+    constructor(message: string);
+}
+//# sourceMappingURL=verification-pipeline.d.ts.map

package/dist/environments/verification-pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-pipeline.d.ts","sourceRoot":"","sources":["../../src/environments/verification-pipeline.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AACrE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,KAAK,EAEV,uBAAuB,EACvB,+BAA+B,EAChC,MAAM,yBAAyB,CAAA;AAEhC,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAS3E,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,kCAAkC,CAAA;AACzC,OAAO,EAA6B,KAAK,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AAEnG,eAAO,MAAM,8BAA8B,EAAG,kCAA2C,CAAA;AACzF,eAAO,MAAM,+BAA+B,qCAAqC,CAAA;AAEjF,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,WAAW,CAAA;AAE/E,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,uBAAuB,CAAA;IAC/B,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,uBAAwB,SAAQ,yBAAyB;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,wBAAyB,SAAQ,yBAAyB;IACzE,QAAQ,CAAC,EAAE,gBAAgB,CAAA;IAC3B,UAAU,CAAC,EAAE,gBAAgB,EAAE,CAAA;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,OAAO,8BAA8B,CAAA;IAC/C,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,MAAM,CAAA;IACtB,cAAc,EAAE,MAAM,CAAA;IACtB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,OAAO,CAAA;IACjB,MAAM,EAAE;QACN,OAAO,EAAE,yBAAyB,CAAA;QAClC,SAAS,EAAE,yBAAyB,CAAA;QACpC,MAAM,EAAE,yBAAyB,CAAA;QACjC,GAAG,EAAE,uBAAuB,CAAA;QAC5B,IAAI,EAAE,wBAAwB,CAAA;QAC9B,QAAQ,EAAE,yBAAyB,CAAA;QACnC,QAAQ,EAAE,yBAAyB,CAAA;KACpC,CAAA;CACF;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;IACvB,MAAM,EAAE,OAAO,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,oBAAoB,CAAA;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAA;CACnE;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,uBAAuB,CAAA;IACpC,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC3B,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,WAAW,CAAA;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,eAAe,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAA;AAEpF,MAAM,MAAM,4BAA4B,GAAG,CAAC,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;AAEtF,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;IACvB,QAAQ,EAAE,gBAAgB,CAAA;IAC1B,UAAU,EAAE,gBAAgB,EAAE,CAAA;CAC/B;AAED,MAAM,MAAM,sBAAsB,GAAG,CACnC,WAAW,EAAE,uBAAuB,EACpC,KAAK,EAAE,yBAAyB,EAChC,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC,sBAAsB,CAAC,CAAA;AAEpC,MAAM,WAAW,6BAA6B;IAC5C,MAAM,CACJ,KAAK,EAAE,yBAAyB,CAAC,QAAQ,CAAC,EAC1C,WAAW,EAAE,uBAAuB,EACpC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GACjC,OAAO,CAAC,eAAe,CAAC,CAAA;CAC5B;AAED,MAAM,MAAM,yBAAyB,GAAG,IAAI,CAC1C,+BAA+B,EAC/B,WAAW,GAAG,UAAU,CACzB,CAAA;AAED,MAAM,WAAW,2BAA2B;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,mBAAmB,CAAC,EAAE,yBAAyB,CAAA;IAC/C,aAAa,CAAC,EAAE,6BAA6B,CAAA;IAC7C,SAAS,CAAC,EAAE,gBAAgB,CAAA;IAC5B,UAAU,CAAC,EAAE,sBAAsB,CAAA;IACnC,gBAAgB,CAAC,EAAE,4BAA4B,CAAA;IAC/C,QAAQ,CAAC,EAAE,oBAAoB,CAAA;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,MAAM,CAAA;CACrB;AAED,qBAAa,oBAAqB,YAAW,gBAAgB;;gBAiB/C,OAAO,GAAE,2BAAgC;IAkB/C,MAAM,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,mBAAmB,CAAC;CA+SzE;AAID,wBAAsB,sBAAsB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA4BpF;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAoIrF;AAwHD,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,OAAO,EAAE,MAAM;CAI5B"}