@agent-relay/sdk 4.0.1 → 4.0.3

package/dist/provisioner/__tests__/seeder.test.js

@@ -0,0 +1,224 @@
+import assert from 'node:assert/strict';
+import { mkdtemp, mkdir, rm, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import path from 'node:path';
+import test, { afterEach, mock } from 'node:test';
+import { RelayFileClient } from '@relayfile/sdk';
+import { seedAclRules, seedWorkflowAcls, seedWorkspace } from '../seeder.js';
+const originalFetch = globalThis.fetch;
+async function createWorkspace(files) {
+    const dir = await mkdtemp(path.join(tmpdir(), 'relay-seeder-'));
+    for (const [relativePath, content] of Object.entries(files)) {
+        const filePath = path.join(dir, relativePath);
+        await mkdir(path.dirname(filePath), { recursive: true });
+        await writeFile(filePath, content);
+    }
+    return {
+        dir,
+        cleanup: () => rm(dir, { recursive: true, force: true }),
+    };
+}
+function createFetchResponse(body, status = 200) {
+    return {
+        ok: status >= 200 && status < 300,
+        status,
+        async text() {
+            return body;
+        },
+    };
+}
+function parseFetchBody(fetchMock) {
+    assert.equal(fetchMock.mock.calls.length, 1);
+    const [, options] = fetchMock.mock.calls[0].arguments;
+    assert.equal(typeof options.body, 'string');
+    return JSON.parse(options.body);
+}
+afterEach(() => {
+    mock.restoreAll();
+    globalThis.fetch = originalFetch;
+});
+test('seedWorkspace posts the expected HTTP payload after SDK fallback', async () => {
+    const workspace = await createWorkspace({
+        'alpha.txt': 'alpha payload',
+        'binary.bin': Buffer.from([0xff, 0x00, 0x61]),
+        '.relay/ignored.txt': 'skip',
+        '.git/config': 'skip',
+        'node_modules/pkg/index.js': 'skip',
+        'custom-skip/ignored.txt': 'skip',
+        '.relayfile-mount-state.json': '{"skip":true}',
+    });
+    try {
+        mock.method(RelayFileClient.prototype, 'bulkWrite', async () => {
+            throw new Error('fall back to HTTP');
+        });
+        const fetchMock = mock.method(globalThis, 'fetch', async () => createFetchResponse(JSON.stringify({ written: 2, errorCount: 0, errors: [] })));
+        const seededCount = await seedWorkspace('https://relay.example///', 'admin-token', ' workspace-123 ', workspace.dir, ['custom-skip']);
+        assert.equal(seededCount, 2);
+        assert.equal(fetchMock.mock.calls.length, 1);
+        const [url, options] = fetchMock.mock.calls[0].arguments;
+        assert.equal(url, 'https://relay.example/v1/workspaces/workspace-123/fs/bulk');
+        assert.equal(options.method, 'POST');
+        assert.deepEqual(options.headers, {
+            Authorization: 'Bearer admin-token',
+            'Content-Type': 'application/json',
+            'X-Correlation-Id': options.headers && options.headers['X-Correlation-Id'],
+        });
+        assert.match(options.headers['X-Correlation-Id'], /^seed-workspace-workspace-123-\d+-0$/u);
+        const body = parseFetchBody(fetchMock);
+        assert.deepEqual(body.files, [
+            {
+                path: '/alpha.txt',
+                content: 'alpha payload',
+                encoding: 'utf-8',
+            },
+            {
+                path: '/binary.bin',
+                content: Buffer.from([0xff, 0x00, 0x61]).toString('base64'),
+                encoding: 'base64',
+            },
+        ]);
+    }
+    finally {
+        await workspace.cleanup();
+    }
+});
+test('seedAclRules formats ACL files for root and nested directories', async () => {
+    mock.method(RelayFileClient.prototype, 'bulkWrite', async () => {
+        throw new Error('fall back to HTTP');
+    });
+    const fetchMock = mock.method(globalThis, 'fetch', async () => createFetchResponse(JSON.stringify({ written: 2, errorCount: 0, errors: [] })));
+    await seedAclRules('https://relay.example/', 'acl-token', 'workspace-acl', {
+        '/': ['allow:agent:lead:read'],
+        '/docs/': ['allow:agent:writer:write', 'deny:agent:reader'],
+    });
+    const body = parseFetchBody(fetchMock);
+    assert.deepEqual(body.files, [
+        {
+            path: '/.relayfile.acl',
+            content: JSON.stringify({
+                semantics: { permissions: ['allow:agent:lead:read'] },
+            }),
+            encoding: 'utf-8',
+        },
+        {
+            path: '/docs/.relayfile.acl',
+            content: JSON.stringify({
+                semantics: {
+                    permissions: ['allow:agent:writer:write', 'deny:agent:reader'],
+                },
+            }),
+            encoding: 'utf-8',
+        },
+    ]);
+});
+test('seedWorkflowAcls merges multiple agents onto shared directories', async () => {
+    mock.method(RelayFileClient.prototype, 'bulkWrite', async () => {
+        throw new Error('fall back to HTTP');
+    });
+    const fetchMock = mock.method(globalThis, 'fetch', async () => createFetchResponse(JSON.stringify({ written: 2, errorCount: 0, errors: [] })));
+    await seedWorkflowAcls({
+        relayfileUrl: 'https://relay.example',
+        adminToken: 'workflow-token',
+        workspace: 'workflow-merge',
+        agents: [
+            { name: 'qa-reviewer', acl: { src: ['read'] } },
+            { name: 'builder', acl: { 'src\\': ['write'], '/docs/': ['read'] } },
+            { name: 'analyst', acl: { docs: ['read'] } },
+        ],
+    });
+    const body = parseFetchBody(fetchMock);
+    assert.deepEqual(body.files, [
+        {
+            path: '/docs/.relayfile.acl',
+            content: JSON.stringify({
+                semantics: {
+                    permissions: [
+                        'allow:agent:analyst:read',
+                        'allow:agent:builder:read',
+                        'allow:agent:qa-reviewer:read',
+                    ],
+                },
+            }),
+            encoding: 'utf-8',
+        },
+        {
+            path: '/src/.relayfile.acl',
+            content: JSON.stringify({
+                semantics: {
+                    permissions: [
+                        'allow:agent:builder:read',
+                        'allow:agent:builder:write',
+                        'allow:agent:qa-reviewer:read',
+                        'deny:agent:analyst',
+                    ],
+                },
+            }),
+            encoding: 'utf-8',
+        },
+    ]);
+});
+test('seedWorkflowAcls unions deny rules for agents missing directory access', async () => {
+    mock.method(RelayFileClient.prototype, 'bulkWrite', async () => {
+        throw new Error('fall back to HTTP');
+    });
+    const fetchMock = mock.method(globalThis, 'fetch', async () => createFetchResponse(JSON.stringify({ written: 2, errorCount: 0, errors: [] })));
+    await seedWorkflowAcls({
+        relayfileUrl: 'https://relay.example',
+        adminToken: 'workflow-token',
+        workspace: 'workflow-deny',
+        agents: [
+            { name: 'alpha', acl: { src: ['read'] } },
+            { name: 'beta', acl: { docs: ['write'] } },
+        ],
+    });
+    const body = parseFetchBody(fetchMock);
+    assert.deepEqual(body.files, [
+        {
+            path: '/docs/.relayfile.acl',
+            content: JSON.stringify({
+                semantics: {
+                    permissions: ['allow:agent:beta:read', 'allow:agent:beta:write', 'deny:agent:alpha'],
+                },
+            }),
+            encoding: 'utf-8',
+        },
+        {
+            path: '/src/.relayfile.acl',
+            content: JSON.stringify({
+                semantics: {
+                    permissions: ['allow:agent:alpha:read', 'deny:agent:beta'],
+                },
+            }),
+            encoding: 'utf-8',
+        },
+    ]);
+});
+test('seedWorkflowAcls is a no-op when there are no ACL directories to seed', async () => {
+    const bulkWriteMock = mock.method(RelayFileClient.prototype, 'bulkWrite', async () => {
+        throw new Error('bulkWrite should not be called');
+    });
+    const fetchMock = mock.method(globalThis, 'fetch', async () => {
+        throw new Error('fetch should not be called');
+    });
+    await seedWorkflowAcls({
+        relayfileUrl: 'https://relay.example',
+        adminToken: 'workflow-token',
+        workspace: 'workflow-empty',
+        agents: [
+            { name: 'builder', acl: {} },
+            { name: 'qa-reviewer', acl: {} },
+        ],
+    });
+    assert.equal(bulkWriteMock.mock.calls.length, 0);
+    assert.equal(fetchMock.mock.calls.length, 0);
+});
+test('seedAclRules surfaces HTTP failures from the fallback API', async () => {
+    mock.method(RelayFileClient.prototype, 'bulkWrite', async () => {
+        throw new Error('fall back to HTTP');
+    });
+    mock.method(globalThis, 'fetch', async () => createFetchResponse('relay unavailable', 503));
+    await assert.rejects(seedAclRules('https://relay.example', 'acl-token', 'workspace-http', {
+        '/': ['allow:agent:builder:read'],
+    }), new Error('failed to seed workspace workspace-http: HTTP 503 relay unavailable'));
+});
+//# sourceMappingURL=seeder.test.js.map

package/dist/provisioner/__tests__/seeder.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seeder.test.js","sourceRoot":"","sources":["../../../src/provisioner/__tests__/seeder.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAElD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAQ7E,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC;AAEvC,KAAK,UAAU,eAAe,CAC5B,KAAsC;IAEtC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IAEhE,KAAK,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAC9C,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,OAAO;QACL,GAAG;QACH,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;KACzD,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,MAAM,GAAG,GAAG;IACrD,OAAO;QACL,EAAE,EAAE,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QACjC,MAAM;QACN,KAAK,CAAC,IAAI;YACR,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,SAAyC;IAC/D,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC7C,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,SAAkC,CAAC;IAChF,MAAM,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAc,CAAyB,CAAC;AACpE,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACb,IAAI,CAAC,UAAU,EAAE,CAAC;IAClB,UAAU,CAAC,KAAK,GAAG,aAAa,CAAC;AACnC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;IAClF,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC;QACtC,WAAW,EAAE,eAAe;QAC5B,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7C,oBAAoB,EAAE,MAAM;QAC5B,aAAa,EAAE,MAAM;QACrB,2BAA2B,EAAE,MAAM;QACnC,yBAAyB,EAAE,MAAM;QACjC,6BAA6B,EAAE,eAAe;KAC/C,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAC5D,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAC/E,CAAC;QAEF,MAAM,WAAW,GAAG,MAAM,aAAa,CACrC,0BAA0B,EAC1B,aAAa,EACb,iBAAiB,EACjB,SAAS,CAAC,GAAG,EACb,CAAC,aAAa,CAAC,CAChB,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAE7C,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,SAAkC,CAAC;QACnF,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,2DAA2D,CAAC,CAAC;QAC/E,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE;YAChC,aAAa,EAAE,oBAAoB;YACnC,cAAc,EAAE,kBAAkB;YAClC,kBAAkB,EAAE,OAAO,CAAC,OAAO,IAAK,OAAO,CAAC,OAAkC,CAAC,kBAAkB,CAAC;SACvG,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CACT,OAAO,CAAC,OAAkC,CAAC,kBAAkB,CAAC,EAC/D,uCAAuC,CACxC,CAAC;QAEF,MAAM,IAAI,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE;YAC3B;gBACE,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,eAAe;gBACxB,QAAQ,EAAE,OAAO;aAClB;YACD;gBACE,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC3D,QAAQ,EAAE,QAAQ;aACnB;SACF,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;IAChF,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAC5D,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAC/E,CAAC;IAEF,MAAM,YAAY,CAAC,wBAAwB,EAAE,WAAW,EAAE,eAAe,EAAE;QACzE,GAAG,EAAE,CAAC,uBAAuB,CAAC;QAC9B,QAAQ,EAAE,CAAC,0BAA0B,EAAE,mBAAmB,CAAC;KAC5D,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE;QAC3B;YACE,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;gBACtB,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC,uBAAuB,CAAC,EAAE;aACtD,CAAC;YACF,QAAQ,EAAE,OAAO;SAClB;QACD;YACE,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;gBACtB,SAAS,EAAE;oBACT,WAAW,EAAE,CAAC,0BAA0B,EAAE,mBAAmB,CAAC;iBAC/D;aACF,CAAC;YACF,QAAQ,EAAE,OAAO;SAClB;KACF,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;IACjF,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAC5D,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAC/E,CAAC;IAEF,MAAM,gBAAgB,CAAC;QACrB,YAAY,EAAE,uBAAuB;QACrC,UAAU,EAAE,gBAAgB;QAC5B,SAAS,EAAE,gBAAgB;QAC3B,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE;YAC/C,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE;YACpE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE;SAC7C;KACF,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE;QAC3B;YACE,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;gBACtB,SAAS,EAAE;oBACT,WAAW,EAAE;wBACX,0BAA0B;wBAC1B,0BAA0B;wBAC1B,8BAA8B;qBAC/B;iBACF;aACF,CAAC;YACF,QAAQ,EAAE,OAAO;SAClB;QACD;YACE,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;gBACtB,SAAS,EAAE;oBACT,WAAW,EAAE;wBACX,0BAA0B;wBAC1B,2BAA2B;wBAC3B,8BAA8B;wBAC9B,oBAAoB;qBACrB;iBACF;aACF,CAAC;YACF,QAAQ,EAAE,OAAO;SAClB;KACF,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;IACxF,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAC5D,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAC/E,CAAC;IAEF,MAAM,gBAAgB,CAAC;QACrB,YAAY,EAAE,uBAAuB;QACrC,UAAU,EAAE,gBAAgB;QAC5B,SAAS,EAAE,eAAe;QAC1B,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE;YACzC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE;SAC3C;KACF,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE;QAC3B;YACE,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;gBACtB,SAAS,EAAE;oBACT,WAAW,EAAE,CAAC,uBAAuB,EAAE,wBAAwB,EAAE,kBAAkB,CAAC;iBACrF;aACF,CAAC;YACF,QAAQ,EAAE,OAAO;SAClB;QACD;YACE,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;gBACtB,SAAS,EAAE;oBACT,WAAW,EAAE,CAAC,wBAAwB,EAAE,iBAAiB,CAAC;iBAC3D;aACF,CAAC;YACF,QAAQ,EAAE,OAAO;SAClB;KACF,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;IACvF,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,MAAM,gBAAgB,CAAC;QACrB,YAAY,EAAE,uBAAuB;QACrC,UAAU,EAAE,gBAAgB;QAC5B,SAAS,EAAE,gBAAgB;QAC3B,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE;YAC5B,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,EAAE,EAAE;SACjC;KACF,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;IAC3E,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,CAAC;IAE5F,MAAM,MAAM,CAAC,OAAO,CAClB,YAAY,CAAC,uBAAuB,EAAE,WAAW,EAAE,gBAAgB,EAAE;QACnE,GAAG,EAAE,CAAC,0BAA0B,CAAC;KAClC,CAAC,EACF,IAAI,KAAK,CAAC,qEAAqE,CAAC,CACjF,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/provisioner/__tests__/tar-seeder.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=tar-seeder.test.d.ts.map

package/dist/provisioner/__tests__/tar-seeder.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tar-seeder.test.d.ts","sourceRoot":"","sources":["../../../src/provisioner/__tests__/tar-seeder.test.ts"],"names":[],"mappings":""}

package/dist/provisioner/__tests__/tar-seeder.test.js

@@ -0,0 +1,191 @@
+import fs from 'node:fs';
+import { tmpdir } from 'node:os';
+import path from 'node:path';
+import * as tar from 'tar';
+import { afterEach, describe, expect, it, vi } from 'vitest';
+const bulkWriteMock = vi.hoisted(() => vi.fn());
+const relayFileClientMock = vi.hoisted(() => vi.fn());
+const execSyncMock = vi.hoisted(() => vi.fn());
+vi.mock('@relayfile/sdk', () => ({
+    RelayFileClient: relayFileClientMock.mockImplementation(() => ({
+        bulkWrite: bulkWriteMock,
+    })),
+}));
+vi.mock('node:child_process', () => ({
+    execSync: execSyncMock,
+}));
+import { seedWorkspaceTar } from '../seeder.js';
+const tempDirs = [];
+function makeTempDir(prefix) {
+    const dir = fs.mkdtempSync(path.join(tmpdir(), prefix));
+    tempDirs.push(dir);
+    return dir;
+}
+function jsonResponse(payload, status = 200) {
+    return new Response(JSON.stringify(payload), {
+        status,
+        headers: { 'Content-Type': 'application/json' },
+    });
+}
+function listRelativeFiles(rootDir, currentDir = rootDir) {
+    const files = [];
+    const entries = fs.readdirSync(currentDir, { withFileTypes: true });
+    for (const entry of entries) {
+        const absolutePath = path.join(currentDir, entry.name);
+        if (entry.isDirectory()) {
+            files.push(...listRelativeFiles(rootDir, absolutePath));
+            continue;
+        }
+        if (entry.isFile()) {
+            files.push(path.relative(rootDir, absolutePath).split(path.sep).join('/'));
+        }
+    }
+    return files.sort((left, right) => left.localeCompare(right));
+}
+async function extractTarballEntries(body) {
+    const archiveDir = makeTempDir('relay-tar-archive-');
+    const extractDir = makeTempDir('relay-tar-extract-');
+    const archivePath = path.join(archiveDir, 'seed.tar.gz');
+    fs.writeFileSync(archivePath, Buffer.from(body));
+    await tar.extract({ file: archivePath, cwd: extractDir, gzip: true });
+    return listRelativeFiles(extractDir);
+}
+afterEach(() => {
+    bulkWriteMock.mockReset();
+    relayFileClientMock.mockClear();
+    execSyncMock.mockReset();
+    vi.restoreAllMocks();
+    vi.unstubAllGlobals();
+    for (const dir of tempDirs.splice(0)) {
+        fs.rmSync(dir, { recursive: true, force: true });
+    }
+});
+describe('seedWorkspaceTar', () => {
+    it('creates and uploads a tar.gz to the import endpoint and respects excludeDirs', async () => {
+        const projectDir = makeTempDir('relay-seed-project-');
+        fs.mkdirSync(path.join(projectDir, 'src'), { recursive: true });
+        fs.mkdirSync(path.join(projectDir, 'ignored'), { recursive: true });
+        fs.mkdirSync(path.join(projectDir, 'node_modules', 'left-pad'), { recursive: true });
+        fs.writeFileSync(path.join(projectDir, 'src', 'hello.txt'), 'hello world\n');
+        fs.writeFileSync(path.join(projectDir, 'src', 'data.bin'), Buffer.from([0xff, 0x00, 0xaa]));
+        fs.writeFileSync(path.join(projectDir, 'ignored', 'skip.txt'), 'skip me\n');
+        fs.writeFileSync(path.join(projectDir, 'node_modules', 'left-pad', 'index.js'), 'module.exports = 1;\n');
+        fs.writeFileSync(path.join(projectDir, '.relayfile-mount-state.json'), '{}\n');
+        execSyncMock.mockReturnValue([
+            'src/hello.txt',
+            'src/data.bin',
+            'ignored/skip.txt',
+            'node_modules/left-pad/index.js',
+            '.relayfile-mount-state.json',
+        ].join('\0'));
+        const fetchMock = vi.fn().mockResolvedValue(jsonResponse({ imported: 2 }));
+        vi.stubGlobal('fetch', fetchMock);
+        const imported = await seedWorkspaceTar('https://relayfile.example/', 'token', 'rw_demo', projectDir, [
+            'ignored',
+        ]);
+        expect(imported).toBe(2);
+        expect(fetchMock).toHaveBeenCalledTimes(1);
+        const [url, init] = fetchMock.mock.calls[0];
+        expect(String(url)).toContain('/v1/workspaces/rw_demo/fs/import');
+        expect(init.method).toBe('POST');
+        expect(init.headers).toMatchObject({
+            Authorization: 'Bearer token',
+            'Content-Type': 'application/gzip',
+            'X-Correlation-Id': expect.stringMatching(/^seed-tar-rw_demo-/),
+        });
+        expect(init.body).toBeInstanceOf(Uint8Array);
+        const entries = await extractTarballEntries(init.body);
+        expect(entries).toEqual(expect.arrayContaining(['src/data.bin', 'src/hello.txt']));
+        expect(entries).not.toContain('ignored/skip.txt');
+        expect(entries).not.toContain('node_modules/left-pad/index.js');
+        expect(entries).not.toContain('.relayfile-mount-state.json');
+    });
+    it('falls back to seedWorkspace when the import endpoint returns 404', async () => {
+        const projectDir = makeTempDir('relay-seed-project-');
+        fs.mkdirSync(path.join(projectDir, 'src'), { recursive: true });
+        fs.writeFileSync(path.join(projectDir, 'src', 'hello.txt'), 'hello fallback\n');
+        execSyncMock.mockReturnValue('src/hello.txt\0');
+        bulkWriteMock.mockRejectedValue({ status: undefined });
+        const fetchMock = vi
+            .fn()
+            .mockResolvedValueOnce(new Response('missing', { status: 404 }))
+            .mockResolvedValueOnce(jsonResponse({ written: 1, errorCount: 0, errors: [] }));
+        vi.stubGlobal('fetch', fetchMock);
+        const imported = await seedWorkspaceTar('https://relayfile.example/', 'token', 'rw_demo', projectDir, []);
+        expect(imported).toBe(1);
+        expect(fetchMock).toHaveBeenCalledTimes(2);
+        expect(String(fetchMock.mock.calls[0]?.[0])).toContain('/v1/workspaces/rw_demo/fs/import');
+        expect(String(fetchMock.mock.calls[1]?.[0])).toContain('/v1/workspaces/rw_demo/fs/bulk');
+        const payload = JSON.parse(String(fetchMock.mock.calls[1]?.[1].body));
+        expect(payload.files).toEqual([
+            { path: '/src/hello.txt', content: 'hello fallback\n', encoding: 'utf-8' },
+        ]);
+    });
+    it('throws on non-404 HTTP errors', async () => {
+        const projectDir = makeTempDir('relay-seed-project-');
+        fs.mkdirSync(path.join(projectDir, 'src'), { recursive: true });
+        fs.writeFileSync(path.join(projectDir, 'src', 'hello.txt'), 'hello\n');
+        execSyncMock.mockReturnValue('src/hello.txt\0');
+        const fetchMock = vi.fn().mockResolvedValue(new Response('boom', { status: 500 }));
+        vi.stubGlobal('fetch', fetchMock);
+        await expect(seedWorkspaceTar('https://relayfile.example/', 'token', 'rw_demo', projectDir, [])).rejects.toThrow('tar import failed for workspace rw_demo: HTTP 500 boom');
+    });
+    it('works for non-git directories via the directory-walk fallback path', async () => {
+        const projectDir = makeTempDir('relay-seed-project-');
+        fs.mkdirSync(path.join(projectDir, 'src'), { recursive: true });
+        fs.mkdirSync(path.join(projectDir, 'nested', 'docs'), { recursive: true });
+        fs.mkdirSync(path.join(projectDir, 'custom-ignore'), { recursive: true });
+        fs.mkdirSync(path.join(projectDir, 'node_modules', 'left-pad'), { recursive: true });
+        fs.writeFileSync(path.join(projectDir, 'src', 'app.ts'), 'export const app = true;\n');
+        fs.writeFileSync(path.join(projectDir, 'nested', 'docs', 'readme.md'), '# hello\n');
+        fs.writeFileSync(path.join(projectDir, 'custom-ignore', 'skip.txt'), 'skip\n');
+        fs.writeFileSync(path.join(projectDir, 'node_modules', 'left-pad', 'index.js'), 'module.exports = 1;\n');
+        fs.writeFileSync(path.join(projectDir, '.relayfile-mount-state.json'), '{}\n');
+        execSyncMock.mockImplementation(() => {
+            throw new Error('not a git repo');
+        });
+        const fetchMock = vi.fn().mockResolvedValue(jsonResponse({ imported: 2 }));
+        vi.stubGlobal('fetch', fetchMock);
+        const imported = await seedWorkspaceTar('https://relayfile.example/', 'token', 'rw_demo', projectDir, [
+            'custom-ignore',
+        ]);
+        expect(imported).toBe(2);
+        expect(fetchMock).toHaveBeenCalledTimes(1);
+        const [, init] = fetchMock.mock.calls[0];
+        const entries = await extractTarballEntries(init.body);
+        expect(entries).toEqual(expect.arrayContaining(['nested/docs/readme.md', 'src/app.ts']));
+        expect(entries).not.toContain('custom-ignore/skip.txt');
+        expect(entries).not.toContain('node_modules/left-pad/index.js');
+        expect(entries).not.toContain('.relayfile-mount-state.json');
+    });
+    it('includes untracked files returned by git ls-files and preserves gitignore filtering', async () => {
+        const projectDir = makeTempDir('relay-seed-project-');
+        fs.mkdirSync(path.join(projectDir, 'src'), { recursive: true });
+        fs.mkdirSync(path.join(projectDir, 'ignored-by-git'), { recursive: true });
+        fs.writeFileSync(path.join(projectDir, 'src', 'tracked.ts'), 'export const tracked = true;\n');
+        fs.writeFileSync(path.join(projectDir, 'src', 'draft.ts'), 'export const draft = true;\n');
+        fs.writeFileSync(path.join(projectDir, 'ignored-by-git', 'skip.txt'), 'skip\n');
+        execSyncMock.mockReturnValue(['src/tracked.ts', 'src/draft.ts'].join('\0'));
+        const fetchMock = vi.fn().mockResolvedValue(jsonResponse({ imported: 2 }));
+        vi.stubGlobal('fetch', fetchMock);
+        const imported = await seedWorkspaceTar('https://relayfile.example/', 'token', 'rw_demo', projectDir, []);
+        expect(imported).toBe(2);
+        expect(execSyncMock).toHaveBeenCalledWith('git ls-files -z --cached --others --exclude-standard', expect.objectContaining({ cwd: path.resolve(projectDir), encoding: 'utf-8' }));
+        const [, init] = fetchMock.mock.calls[0];
+        const entries = await extractTarballEntries(init.body);
+        expect(entries).toEqual(['src/draft.ts', 'src/tracked.ts']);
+        expect(entries).not.toContain('ignored-by-git/skip.txt');
+    });
+    it('does not fall back to a directory walk when git ls-files succeeds with no files', async () => {
+        const projectDir = makeTempDir('relay-seed-project-');
+        fs.mkdirSync(path.join(projectDir, 'ignored-by-git'), { recursive: true });
+        fs.writeFileSync(path.join(projectDir, 'ignored-by-git', 'skip.txt'), 'skip\n');
+        execSyncMock.mockReturnValue('');
+        const fetchMock = vi.fn().mockResolvedValue(jsonResponse({ imported: 0 }));
+        vi.stubGlobal('fetch', fetchMock);
+        const imported = await seedWorkspaceTar('https://relayfile.example/', 'token', 'rw_demo', projectDir, []);
+        expect(imported).toBe(0);
+        expect(fetchMock).not.toHaveBeenCalled();
+    });
+});
+//# sourceMappingURL=tar-seeder.test.js.map

package/dist/provisioner/__tests__/tar-seeder.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tar-seeder.test.js","sourceRoot":"","sources":["../../../src/provisioner/__tests__/tar-seeder.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;AAC3B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE7D,MAAM,aAAa,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AAChD,MAAM,mBAAmB,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AACtD,MAAM,YAAY,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AAE/C,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/B,eAAe,EAAE,mBAAmB,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7D,SAAS,EAAE,aAAa;KACzB,CAAC,CAAC;CACJ,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,QAAQ,EAAE,YAAY;CACvB,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,MAAM,QAAQ,GAAa,EAAE,CAAC;AAE9B,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IACxD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,OAAgB,EAAE,MAAM,GAAG,GAAG;IAClD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;QAC3C,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,UAAU,GAAG,OAAO;IAC9D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAEpE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;YACxD,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,IAAa;IAChD,MAAM,UAAU,GAAG,WAAW,CAAC,oBAAoB,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,WAAW,CAAC,oBAAoB,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAEzD,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,IAAkB,CAAC,CAAC,CAAC;IAC/D,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAEtE,OAAO,iBAAiB,CAAC,UAAU,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACb,aAAa,CAAC,SAAS,EAAE,CAAC;IAC1B,mBAAmB,CAAC,SAAS,EAAE,CAAC;IAChC,YAAY,CAAC,SAAS,EAAE,CAAC;IACzB,EAAE,CAAC,eAAe,EAAE,CAAC;IACrB,EAAE,CAAC,gBAAgB,EAAE,CAAC;IACtB,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,UAAU,GAAG,WAAW,CAAC,qBAAqB,CAAC,CAAC;QACtD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAErF,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,eAAe,CAAC,CAAC;QAC7E,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5F,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC;QAC5E,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,uBAAuB,CAAC,CAAC;QACzG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,6BAA6B,CAAC,EAAE,MAAM,CAAC,CAAC;QAE/E,YAAY,CAAC,eAAe,CAC1B;YACE,eAAe;YACf,cAAc;YACd,kBAAkB;YAClB,gCAAgC;YAChC,6BAA6B;SAC9B,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QAEF,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3E,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAElC,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,4BAA4B,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE;YACpG,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAE3C,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;QAClE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC;YACjC,aAAa,EAAE,cAAc;YAC7B,cAAc,EAAE,kBAAkB;YAClC,kBAAkB,EAAE,MAAM,CAAC,cAAc,CAAC,oBAAoB,CAAC;SAChE,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;QACnF,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAClD,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;QAChE,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,UAAU,GAAG,WAAW,CAAC,qBAAqB,CAAC,CAAC;QACtD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAEhF,YAAY,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC;QAChD,aAAa,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAEvD,MAAM,SAAS,GAAG,EAAE;aACjB,EAAE,EAAE;aACJ,qBAAqB,CAAC,IAAI,QAAQ,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;aAC/D,qBAAqB,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAClF,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAElC,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,4BAA4B,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAE1G,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;QAC3F,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;QAEzF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACtE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YAC5B,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,OAAO,EAAE;SAC3E,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,UAAU,GAAG,WAAW,CAAC,qBAAqB,CAAC,CAAC;QACtD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC;QAEvE,YAAY,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC;QAEhD,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACnF,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAElC,MAAM,MAAM,CACV,gBAAgB,CAAC,4BAA4B,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,CACnF,CAAC,OAAO,CAAC,OAAO,CAAC,wDAAwD,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,UAAU,GAAG,WAAW,CAAC,qBAAqB,CAAC,CAAC;QACtD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAErF,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,4BAA4B,CAAC,CAAC;QACvF,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC;QACpF,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC/E,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,uBAAuB,CAAC,CAAC;QACzG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,6BAA6B,CAAC,EAAE,MAAM,CAAC,CAAC;QAE/E,YAAY,CAAC,kBAAkB,CAAC,GAAG,EAAE;YACnC,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3E,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAElC,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,4BAA4B,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE;YACpG,eAAe;SAChB,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAE3C,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,uBAAuB,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;QACzF,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QACxD,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;QAChE,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACnG,MAAM,UAAU,GAAG,WAAW,CAAC,qBAAqB,CAAC,CAAC;QACtD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE3E,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,YAAY,CAAC,EAAE,gCAAgC,CAAC,CAAC;QAC/F,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,8BAA8B,CAAC,CAAC;QAC3F,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC;QAEhF,YAAY,CAAC,eAAe,CAAC,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAE5E,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3E,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAElC,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,4BAA4B,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAE1G,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACvC,sDAAsD,EACtD,MAAM,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAC9E,CAAC;QAEF,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAC5D,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,UAAU,GAAG,WAAW,CAAC,qBAAqB,CAAC,CAAC;QACtD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC;QAEhF,YAAY,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAEjC,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3E,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAElC,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,4BAA4B,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAE1G,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEzB,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/provisioner/__tests__/token-factory.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=token-factory.test.d.ts.map

package/dist/provisioner/__tests__/token-factory.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-factory.test.d.ts","sourceRoot":"","sources":["../../../src/provisioner/__tests__/token-factory.test.ts"],"names":[],"mappings":""}

package/dist/provisioner/__tests__/token-factory.test.js

@@ -0,0 +1,127 @@
+import assert from 'node:assert/strict';
+import { createHmac } from 'node:crypto';
+import test from 'node:test';
+import { DEFAULT_ADMIN_AGENT_NAME, DEFAULT_ADMIN_SCOPES, DEFAULT_WORKFLOW_TOKEN_TTL_SECONDS, WorkflowTokenFactory, mintAgentToken, } from '../token.js';
+function decodeJwtPart(value) {
+    return JSON.parse(Buffer.from(value, 'base64url').toString('utf8'));
+}
+function decodeJwt(token) {
+    const [header, payload, signature] = token.split('.');
+    assert.ok(header);
+    assert.ok(payload);
+    assert.ok(signature);
+    return {
+        header: decodeJwtPart(header),
+        payload: decodeJwtPart(payload),
+        signature,
+    };
+}
+test('mintAgentToken returns a valid JWT', () => {
+    const token = mintAgentToken({
+        secret: 'test-secret',
+        agentName: 'worker',
+        workspace: 'workspace-123',
+        scopes: ['relayfile:fs:read:/src/index.ts'],
+    });
+    const parts = token.split('.');
+    const decoded = decodeJwt(token);
+    assert.equal(parts.length, 3);
+    assert.ok(parts.every((part) => /^[A-Za-z0-9_-]+$/u.test(part)));
+    assert.deepEqual(decoded.header, { alg: 'HS256', typ: 'JWT' });
+    assert.equal(decoded.payload.sub, 'agent_worker');
+});
+test('mintAgentToken payload contains agent_name, workspace, and scopes', () => {
+    const scopes = ['relayfile:fs:read:/src/index.ts', 'relayfile:fs:write:/src/index.ts'];
+    const token = mintAgentToken({
+        secret: 'test-secret',
+        agentName: 'compiler',
+        workspace: 'workspace-abc',
+        scopes,
+    });
+    const { payload } = decodeJwt(token);
+    assert.equal(payload.agent_name, 'compiler');
+    assert.equal(payload.wks, 'workspace-abc');
+    assert.equal(payload.workspace_id, 'workspace-abc');
+    assert.deepEqual(payload.scopes, scopes);
+});
+test('mintAgentToken defaults expiry to 2 hours', () => {
+    const token = mintAgentToken({
+        secret: 'test-secret',
+        agentName: 'worker',
+        workspace: 'workspace-123',
+        scopes: [],
+    });
+    const { payload } = decodeJwt(token);
+    assert.equal(payload.exp - payload.iat, DEFAULT_WORKFLOW_TOKEN_TTL_SECONDS);
+    assert.equal(payload.exp - payload.iat, 2 * 60 * 60);
+});
+test('mintAgentToken applies a custom TTL', () => {
+    const token = mintAgentToken({
+        secret: 'test-secret',
+        agentName: 'worker',
+        workspace: 'workspace-123',
+        scopes: [],
+        ttlSeconds: 90,
+    });
+    const { payload } = decodeJwt(token);
+    assert.equal(payload.exp - payload.iat, 90);
+});
+test('WorkflowTokenFactory mintAdmin uses the default admin identity and scopes', () => {
+    const factory = new WorkflowTokenFactory('test-secret', 'workspace-admin');
+    const token = factory.mintAdmin();
+    const { payload } = decodeJwt(token);
+    assert.equal(payload.agent_name, DEFAULT_ADMIN_AGENT_NAME);
+    assert.equal(payload.wks, 'workspace-admin');
+    assert.deepEqual(payload.scopes, DEFAULT_ADMIN_SCOPES);
+});
+test('WorkflowTokenFactory getToken returns the token minted for an agent', () => {
+    const factory = new WorkflowTokenFactory('test-secret', 'workspace-123');
+    const token = factory.mintForAgent('builder', ['relayfile:fs:read:/src/index.ts']);
+    assert.equal(factory.getToken('builder'), token);
+});
+test('WorkflowTokenFactory uses its configured TTL when minting agent tokens', () => {
+    const factory = new WorkflowTokenFactory('test-secret', 'workspace-123', 45);
+    const token = factory.mintForAgent('builder', []);
+    const { payload } = decodeJwt(token);
+    assert.equal(payload.exp - payload.iat, 45);
+});
+test('mintAgentToken generates a unique JTI per token', () => {
+    const first = decodeJwt(mintAgentToken({
+        secret: 'test-secret',
+        agentName: 'worker',
+        workspace: 'workspace-123',
+        scopes: [],
+    })).payload;
+    const second = decodeJwt(mintAgentToken({
+        secret: 'test-secret',
+        agentName: 'worker',
+        workspace: 'workspace-123',
+        scopes: [],
+    })).payload;
+    assert.notEqual(first.jti, second.jti);
+    assert.match(first.jti, /^tok-\d+-/u);
+    assert.match(second.jti, /^tok-\d+-/u);
+});
+test('mintAgentToken includes the expected audience claims', () => {
+    const token = mintAgentToken({
+        secret: 'test-secret',
+        agentName: 'worker',
+        workspace: 'workspace-123',
+        scopes: [],
+    });
+    const { payload } = decodeJwt(token);
+    assert.deepEqual(payload.aud, ['relayauth', 'relayfile']);
+});
+test('mintAgentToken signs tokens with HMAC-SHA256', () => {
+    const secret = 'test-secret';
+    const token = mintAgentToken({
+        secret,
+        agentName: 'worker',
+        workspace: 'workspace-123',
+        scopes: ['relayfile:fs:read:/src/index.ts'],
+    });
+    const [header, payload, signature] = token.split('.');
+    const expectedSignature = createHmac('sha256', secret).update(`${header}.${payload}`).digest('base64url');
+    assert.equal(signature, expectedSignature);
+});
+//# sourceMappingURL=token-factory.test.js.map

package/dist/provisioner/__tests__/token-factory.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-factory.test.js","sourceRoot":"","sources":["../../../src/provisioner/__tests__/token-factory.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,kCAAkC,EAClC,oBAAoB,EACpB,cAAc,GAEf,MAAM,aAAa,CAAC;AAOrB,SAAS,aAAa,CAAI,KAAa;IACrC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAM,CAAC;AAC3E,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IAClB,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;IACnB,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IAErB,OAAO;QACL,MAAM,EAAE,aAAa,CAAY,MAAM,CAAC;QACxC,OAAO,EAAE,aAAa,CAAc,OAAO,CAAC;QAC5C,SAAS;KACV,CAAC;AACJ,CAAC;AAED,IAAI,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAC9C,MAAM,KAAK,GAAG,cAAc,CAAC;QAC3B,MAAM,EAAE,aAAa;QACrB,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,eAAe;QAC1B,MAAM,EAAE,CAAC,iCAAiC,CAAC;KAC5C,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAEjC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9B,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mEAAmE,EAAE,GAAG,EAAE;IAC7E,MAAM,MAAM,GAAG,CAAC,iCAAiC,EAAE,kCAAkC,CAAC,CAAC;IACvF,MAAM,KAAK,GAAG,cAAc,CAAC;QAC3B,MAAM,EAAE,aAAa;QACrB,SAAS,EAAE,UAAU;QACrB,SAAS,EAAE,eAAe;QAC1B,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAErC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAC3C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IACpD,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAC3C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACrD,MAAM,KAAK,GAAG,cAAc,CAAC;QAC3B,MAAM,EAAE,aAAa;QACrB,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,eAAe;QAC1B,MAAM,EAAE,EAAE;KACX,CAAC,CAAC;IAEH,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAErC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,kCAAkC,CAAC,CAAC;IAC5E,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qCAAqC,EAAE,GAAG,EAAE;IAC/C,MAAM,KAAK,GAAG,cAAc,CAAC;QAC3B,MAAM,EAAE,aAAa;QACrB,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,eAAe;QAC1B,MAAM,EAAE,EAAE;QACV,UAAU,EAAE,EAAE;KACf,CAAC,CAAC;IAEH,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAErC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2EAA2E,EAAE,GAAG,EAAE;IACrF,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAClC,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAErC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;IAC3D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAC7C,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;AACzD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qEAAqE,EAAE,GAAG,EAAE;IAC/E,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC,iCAAiC,CAAC,CAAC,CAAC;IAEnF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wEAAwE,EAAE,GAAG,EAAE;IAClF,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,aAAa,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAErC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iDAAiD,EAAE,GAAG,EAAE;IAC3D,MAAM,KAAK,GAAG,SAAS,CACrB,cAAc,CAAC;QACb,MAAM,EAAE,aAAa;QACrB,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,eAAe;QAC1B,MAAM,EAAE,EAAE;KACX,CAAC,CACH,CAAC,OAAO,CAAC;IACV,MAAM,MAAM,GAAG,SAAS,CACtB,cAAc,CAAC;QACb,MAAM,EAAE,aAAa;QACrB,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,eAAe;QAC1B,MAAM,EAAE,EAAE;KACX,CAAC,CACH,CAAC,OAAO,CAAC;IAEV,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACtC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;AACzC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sDAAsD,EAAE,GAAG,EAAE;IAChE,MAAM,KAAK,GAAG,cAAc,CAAC;QAC3B,MAAM,EAAE,aAAa;QACrB,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,eAAe;QAC1B,MAAM,EAAE,EAAE;KACX,CAAC,CAAC;IAEH,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAErC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;AAC5D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8CAA8C,EAAE,GAAG,EAAE;IACxD,MAAM,MAAM,GAAG,aAAa,CAAC;IAC7B,MAAM,KAAK,GAAG,cAAc,CAAC;QAC3B,MAAM;QACN,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,eAAe;QAC1B,MAAM,EAAE,CAAC,iCAAiC,CAAC;KAC5C,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,iBAAiB,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAE1G,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC"}

package/dist/provisioner/__tests__/token.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=token.test.d.ts.map

package/dist/provisioner/__tests__/token.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.test.d.ts","sourceRoot":"","sources":["../../../src/provisioner/__tests__/token.test.ts"],"names":[],"mappings":""}