@agent-vm/agent-vm 0.0.20

package/dist/controller/git-push-operations.js

@@ -0,0 +1,247 @@
+import { execa } from 'execa';
+import { scrubGithubTokenFromOutput } from './git-auth-support.js';
+const GIT_OPERATION_TIMEOUT_MS = 120_000;
+export class PushBranchesValidationError extends Error {
+}
+function writePushFlowLog(message) {
+    process.stderr.write(`[git-push-operations] ${message}\n`);
+}
+function parseRepoFromUrl(repoUrl) {
+    const cleaned = repoUrl.replace(/\.git$/, '');
+    const urlPattern = /(?:https?:\/\/)?github\.com\/([^/]+\/[^/]+)$/u;
+    const match = urlPattern.exec(cleaned);
+    if (match?.[1]) {
+        return match[1];
+    }
+    if (/^[^\s/]+\/[^\s/]+$/u.test(cleaned)) {
+        return cleaned;
+    }
+    throw new PushBranchesValidationError(`Invalid GitHub repository: ${repoUrl}`);
+}
+function buildPushUrl(repoUrl, githubToken) {
+    return `https://x-access-token:${githubToken}@github.com/${parseRepoFromUrl(repoUrl)}.git`;
+}
+function sanitizeBranchName(name) {
+    return name.replace(/[^a-zA-Z0-9\-_./]/gu, '-');
+}
+async function git(options) {
+    const result = await execa('git', [...options.args], {
+        cwd: options.cwd,
+        reject: false,
+        timeout: GIT_OPERATION_TIMEOUT_MS,
+    });
+    const normalized = {
+        stdout: result.stdout,
+        stderr: result.stderr,
+        exitCode: result.exitCode ?? 0,
+    };
+    if (options.reject === true && normalized.exitCode !== 0) {
+        throw new Error(`git ${options.args.join(' ')} failed\n${normalized.stdout}\n${normalized.stderr}`.trim());
+    }
+    return normalized;
+}
+async function gitStdout(cwd, args) {
+    return (await git({ args, cwd, reject: true })).stdout.trim();
+}
+function parseCommitSummaries(output) {
+    if (output.trim().length === 0)
+        return [];
+    return output
+        .trim()
+        .split('\n')
+        .map((line) => {
+        const [sha = '', subject = '', author = '', date = ''] = line.split('\t');
+        const summary = {
+            sha,
+            subject,
+        };
+        if (author) {
+            summary.author = author;
+        }
+        if (date) {
+            summary.date = date;
+        }
+        return summary;
+    });
+}
+async function commitSummaries(cwd, range, options) {
+    const format = options?.includeAuthorDate === true ? '%H%x09%s%x09%an%x09%aI' : '%H%x09%s';
+    const result = await git({ cwd, args: ['log', range, `--format=${format}`], reject: false });
+    if (result.exitCode !== 0)
+        return [];
+    return parseCommitSummaries(result.stdout);
+}
+async function refExists(cwd, ref) {
+    return ((await git({ cwd, args: ['rev-parse', '--verify', '--quiet', ref], reject: false }))
+        .exitCode === 0);
+}
+async function countRange(cwd, range) {
+    const result = await git({ cwd, args: ['rev-list', '--count', range], reject: false });
+    if (result.exitCode !== 0)
+        return 0;
+    return Number.parseInt(result.stdout.trim(), 10) || 0;
+}
+async function fetchRemoteRefs(options) {
+    const pushUrl = buildPushUrl(options.repoUrl, options.githubToken);
+    const result = await git({
+        cwd: options.cwd,
+        args: [
+            'fetch',
+            '--prune',
+            pushUrl,
+            `${options.defaultBranch}:refs/remotes/origin/${options.defaultBranch}`,
+        ],
+        reject: false,
+    });
+    if (result.exitCode !== 0) {
+        const detail = scrubGithubTokenFromOutput(`${result.stdout}\n${result.stderr}`).trim();
+        throw new Error(`git fetch failed\n${detail}`);
+    }
+}
+async function remoteBranchHead(cwd, branchName) {
+    if (!(await refExists(cwd, `refs/remotes/origin/${branchName}`)))
+        return null;
+    return await gitStdout(cwd, ['rev-parse', `refs/remotes/origin/${branchName}`]);
+}
+async function pushBranch(options) {
+    const result = await git({
+        cwd: options.cwd,
+        args: [
+            'push',
+            buildPushUrl(options.repoUrl, options.githubToken),
+            `${sanitizeBranchName(options.branchName)}:refs/heads/${sanitizeBranchName(options.branchName)}`,
+        ],
+        reject: false,
+    });
+    if (result.exitCode !== 0) {
+        const errorDetail = scrubGithubTokenFromOutput(`${result.stdout}\n${result.stderr}`).trim();
+        writePushFlowLog(`git push failed for ${options.repoUrl} ${sanitizeBranchName(options.branchName)}: ${errorDetail}`);
+        throw new Error(`git push failed\n${errorDetail}`);
+    }
+}
+async function buildBranchState(options) {
+    const localHead = await gitStdout(options.cwd, ['rev-parse', 'HEAD']);
+    const pushedRemoteBranchHead = await remoteBranchHead(options.cwd, options.branchName);
+    const remoteDefaultRef = `refs/remotes/origin/${options.defaultBranch}`;
+    const remoteDefaultHead = (await refExists(options.cwd, remoteDefaultRef))
+        ? await gitStdout(options.cwd, ['rev-parse', remoteDefaultRef])
+        : '';
+    const defaultRange = remoteDefaultHead ? `${remoteDefaultRef}..HEAD` : '';
+    const commitsOnBranch = defaultRange
+        ? await commitSummaries(options.cwd, defaultRange, { includeAuthorDate: true })
+        : [];
+    const pushedRange = options.previousRemoteBranchHead
+        ? `${options.previousRemoteBranchHead}..HEAD`
+        : defaultRange;
+    const pushedInThisCall = pushedRange ? await commitSummaries(options.cwd, pushedRange) : [];
+    const divergence = remoteDefaultHead
+        ? {
+            aheadOfDefault: await countRange(options.cwd, `${remoteDefaultRef}..HEAD`),
+            behindDefault: await countRange(options.cwd, `HEAD..${remoteDefaultRef}`),
+        }
+        : { aheadOfDefault: 0, behindDefault: 0 };
+    return {
+        localHead,
+        ...(pushedRemoteBranchHead ? { remoteBranchHead: pushedRemoteBranchHead } : {}),
+        defaultBranch: options.defaultBranch,
+        remoteDefaultHead,
+        commitsOnBranch,
+        pushedInThisCall,
+        remoteAlreadyHadBranch: options.previousRemoteBranchHead !== null,
+        divergence,
+    };
+}
+export async function pushBranchesForTask(options) {
+    for (const branch of options.branches) {
+        if (!branch.branchName.startsWith(options.activeTask.branchPrefix)) {
+            throw new PushBranchesValidationError(`Branch '${branch.branchName}' must start with '${options.activeTask.branchPrefix}'.`);
+        }
+        const repo = options.activeTask.repos.find((candidate) => candidate.repoUrl === branch.repoUrl);
+        if (!repo) {
+            throw new PushBranchesValidationError(`Repo '${branch.repoUrl}' is not registered for active task '${options.activeTask.taskId}'.`);
+        }
+    }
+    const results = [];
+    for (const branch of options.branches) {
+        // Push flow intentionally stays sequential so git state observation,
+        // remote ref fetches, and error reporting remain easy to reason about.
+        // oxlint-disable-next-line eslint/no-await-in-loop
+        const repo = options.activeTask.repos.find((candidate) => candidate.repoUrl === branch.repoUrl);
+        if (!repo) {
+            throw new PushBranchesValidationError(`Repo '${branch.repoUrl}' is not registered for active task '${options.activeTask.taskId}'.`);
+        }
+        const branchName = sanitizeBranchName(branch.branchName);
+        try {
+            if (branchName === repo.baseBranch) {
+                results.push({
+                    repoUrl: branch.repoUrl,
+                    branch: branchName,
+                    success: false,
+                    error: `Refusing to push: you are on the default branch "${repo.baseBranch}". Create an ${options.activeTask.branchPrefix} branch first and move your commits to it.`,
+                });
+                continue;
+            }
+            // oxlint-disable-next-line eslint/no-await-in-loop
+            await fetchRemoteRefs({
+                cwd: repo.hostWorkspacePath,
+                defaultBranch: repo.baseBranch,
+                repoUrl: branch.repoUrl,
+                githubToken: options.githubToken,
+            });
+            // oxlint-disable-next-line eslint/no-await-in-loop
+            const previousRemoteBranchHead = await remoteBranchHead(repo.hostWorkspacePath, branchName);
+            // oxlint-disable-next-line eslint/no-await-in-loop
+            const localHead = await gitStdout(repo.hostWorkspacePath, ['rev-parse', 'HEAD']);
+            if (previousRemoteBranchHead === localHead) {
+                results.push({
+                    repoUrl: branch.repoUrl,
+                    branch: branchName,
+                    success: false,
+                    error: `Nothing new to push on ${branchName}. Local HEAD matches origin/${branchName} (${localHead}). Commit your work and call git-push again.`,
+                });
+                continue;
+            }
+            // oxlint-disable-next-line eslint/no-await-in-loop
+            await pushBranch({
+                repoUrl: branch.repoUrl,
+                branchName,
+                cwd: repo.hostWorkspacePath,
+                githubToken: options.githubToken,
+            });
+            // oxlint-disable-next-line eslint/no-await-in-loop
+            await git({
+                cwd: repo.hostWorkspacePath,
+                args: [
+                    'fetch',
+                    '--prune',
+                    buildPushUrl(branch.repoUrl, options.githubToken),
+                    `${branchName}:refs/remotes/origin/${branchName}`,
+                ],
+                reject: false,
+            });
+            // oxlint-disable-next-line eslint/no-await-in-loop
+            const state = await buildBranchState({
+                cwd: repo.hostWorkspacePath,
+                branchName,
+                defaultBranch: repo.baseBranch,
+                previousRemoteBranchHead,
+            });
+            results.push({
+                repoUrl: branch.repoUrl,
+                branch: branchName,
+                success: true,
+                ...state,
+            });
+        }
+        catch (error) {
+            results.push({
+                repoUrl: branch.repoUrl,
+                branch: branchName,
+                success: false,
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    return { results };
+}
+//# sourceMappingURL=git-push-operations.js.map

package/dist/controller/git-push-operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-push-operations.js","sourceRoot":"","sources":["../../src/controller/git-push-operations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAG9B,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAEnE,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAoCzC,MAAM,OAAO,2BAA4B,SAAQ,KAAK;CAAG;AAEzD,SAAS,gBAAgB,CAAC,OAAe;IACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,OAAO,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACxC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,+CAA+C,CAAC;IACnE,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAEvC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChB,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,2BAA2B,CAAC,8BAA8B,OAAO,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,WAAmB;IACzD,OAAO,0BAA0B,WAAW,eAAe,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC;AAC5F,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACvC,OAAO,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,OAIlB;IACA,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE;QACpD,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,wBAAwB;KACjC,CAAC,CAAC;IACH,MAAM,UAAU,GAAG;QAClB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;KAC9B,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,UAAU,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CACd,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,UAAU,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CACzF,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,IAAuB;IAC5D,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAc;IAC3C,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1C,OAAO,MAAM;SACX,IAAI,EAAE;SACN,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACb,MAAM,CAAC,GAAG,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,EAAE,MAAM,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1E,MAAM,OAAO,GAA6B;YACzC,GAAG;YACH,OAAO;SACP,CAAC;QACF,IAAI,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;QACzB,CAAC;QACD,IAAI,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,eAAe,CAC7B,GAAW,EACX,KAAa,EACb,OAAkD;IAElD,MAAM,MAAM,GAAG,OAAO,EAAE,iBAAiB,KAAK,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,UAAU,CAAC;IAC3F,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7F,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,GAAW;IAChD,OAAO,CACN,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;SAClF,QAAQ,KAAK,CAAC,CAChB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,KAAa;IACnD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACvF,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;AACvD,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,OAK9B;IACA,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC;QACxB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,IAAI,EAAE;YACL,OAAO;YACP,SAAS;YACT,OAAO;YACP,GAAG,OAAO,CAAC,aAAa,wBAAwB,OAAO,CAAC,aAAa,EAAE;SACvE;QACD,MAAM,EAAE,KAAK;KACb,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,0BAA0B,CAAC,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,EAAE,CAAC,CAAC;IAChD,CAAC;AACF,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,GAAW,EAAE,UAAkB;IAC9D,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,uBAAuB,UAAU,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9E,OAAO,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,uBAAuB,UAAU,EAAE,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,OAKzB;IACA,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC;QACxB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,IAAI,EAAE;YACL,MAAM;YACN,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC;YAClD,GAAG,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,eAAe,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE;SAChG;QACD,MAAM,EAAE,KAAK;KACb,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,WAAW,GAAG,0BAA0B,CAAC,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5F,gBAAgB,CACf,uBAAuB,OAAO,CAAC,OAAO,IAAI,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,WAAW,EAAE,CAClG,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,oBAAoB,WAAW,EAAE,CAAC,CAAC;IACpD,CAAC;AACF,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,OAK/B;IACA,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IACtE,MAAM,sBAAsB,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IACvF,MAAM,gBAAgB,GAAG,uBAAuB,OAAO,CAAC,aAAa,EAAE,CAAC;IACxE,MAAM,iBAAiB,GAAG,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QACzE,CAAC,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC/D,CAAC,CAAC,EAAE,CAAC;IACN,MAAM,YAAY,GAAG,iBAAiB,CAAC,CAAC,CAAC,GAAG,gBAAgB,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,MAAM,eAAe,GAAG,YAAY;QACnC,CAAC,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;QAC/E,CAAC,CAAC,EAAE,CAAC;IACN,MAAM,WAAW,GAAG,OAAO,CAAC,wBAAwB;QACnD,CAAC,CAAC,GAAG,OAAO,CAAC,wBAAwB,QAAQ;QAC7C,CAAC,CAAC,YAAY,CAAC;IAChB,MAAM,gBAAgB,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,MAAM,UAAU,GAAG,iBAAiB;QACnC,CAAC,CAAC;YACA,cAAc,EAAE,MAAM,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,gBAAgB,QAAQ,CAAC;YAC1E,aAAa,EAAE,MAAM,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,gBAAgB,EAAE,CAAC;SACzE;QACF,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IAE3C,OAAO;QACN,SAAS;QACT,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,iBAAiB;QACjB,eAAe;QACf,gBAAgB;QAChB,sBAAsB,EAAE,OAAO,CAAC,wBAAwB,KAAK,IAAI;QACjE,UAAU;KACV,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAIzC;IACA,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,2BAA2B,CACpC,WAAW,MAAM,CAAC,UAAU,sBAAsB,OAAO,CAAC,UAAU,CAAC,YAAY,IAAI,CACrF,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC;QAChG,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,MAAM,IAAI,2BAA2B,CACpC,SAAS,MAAM,CAAC,OAAO,wCAAwC,OAAO,CAAC,UAAU,CAAC,MAAM,IAAI,CAC5F,CAAC;QACH,CAAC;IACF,CAAC;IAED,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvC,qEAAqE;QACrE,uEAAuE;QACvE,mDAAmD;QACnD,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC;QAChG,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,MAAM,IAAI,2BAA2B,CACpC,SAAS,MAAM,CAAC,OAAO,wCAAwC,OAAO,CAAC,UAAU,CAAC,MAAM,IAAI,CAC5F,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,CAAC;YACJ,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpC,OAAO,CAAC,IAAI,CAAC;oBACZ,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,MAAM,EAAE,UAAU;oBAClB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,oDAAoD,IAAI,CAAC,UAAU,gBAAgB,OAAO,CAAC,UAAU,CAAC,YAAY,4CAA4C;iBACrK,CAAC,CAAC;gBACH,SAAS;YACV,CAAC;YAED,mDAAmD;YACnD,MAAM,eAAe,CAAC;gBACrB,GAAG,EAAE,IAAI,CAAC,iBAAiB;gBAC3B,aAAa,EAAE,IAAI,CAAC,UAAU;gBAC9B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,WAAW,EAAE,OAAO,CAAC,WAAW;aAChC,CAAC,CAAC;YACH,mDAAmD;YACnD,MAAM,wBAAwB,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;YAC5F,mDAAmD;YACnD,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;YACjF,IAAI,wBAAwB,KAAK,SAAS,EAAE,CAAC;gBAC5C,OAAO,CAAC,IAAI,CAAC;oBACZ,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,MAAM,EAAE,UAAU;oBAClB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,0BAA0B,UAAU,+BAA+B,UAAU,KAAK,SAAS,8CAA8C;iBAChJ,CAAC,CAAC;gBACH,SAAS;YACV,CAAC;YAED,mDAAmD;YACnD,MAAM,UAAU,CAAC;gBAChB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,UAAU;gBACV,GAAG,EAAE,IAAI,CAAC,iBAAiB;gBAC3B,WAAW,EAAE,OAAO,CAAC,WAAW;aAChC,CAAC,CAAC;YACH,mDAAmD;YACnD,MAAM,GAAG,CAAC;gBACT,GAAG,EAAE,IAAI,CAAC,iBAAiB;gBAC3B,IAAI,EAAE;oBACL,OAAO;oBACP,SAAS;oBACT,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC;oBACjD,GAAG,UAAU,wBAAwB,UAAU,EAAE;iBACjD;gBACD,MAAM,EAAE,KAAK;aACb,CAAC,CAAC;YACH,mDAAmD;YACnD,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC;gBACpC,GAAG,EAAE,IAAI,CAAC,iBAAiB;gBAC3B,UAAU;gBACV,aAAa,EAAE,IAAI,CAAC,UAAU;gBAC9B,wBAAwB;aACxB,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,UAAU;gBAClB,OAAO,EAAE,IAAI;gBACb,GAAG,KAAK;aACR,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,UAAU;gBAClB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,CAAC;AACpB,CAAC"}

package/dist/controller/heartbeat-sender.d.ts

@@ -0,0 +1,13 @@
+export interface HeartbeatSenderProps {
+    readonly callerUrl: string;
+    readonly cadenceMs?: number;
+    readonly setIntervalImpl?: (callback: () => void | Promise<void>, delayMs: number) => NodeJS.Timeout;
+    readonly clearIntervalImpl?: (handle: NodeJS.Timeout) => void;
+    readonly fetchImpl?: typeof fetch;
+    readonly logWarning?: (message: string) => void;
+}
+export interface HeartbeatHandle {
+    readonly stop: () => void;
+}
+export declare function startHeartbeatSender(requestTaskId: string, props: HeartbeatSenderProps): HeartbeatHandle;
+//# sourceMappingURL=heartbeat-sender.d.ts.map

package/dist/controller/heartbeat-sender.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"heartbeat-sender.d.ts","sourceRoot":"","sources":["../../src/controller/heartbeat-sender.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,CAAC,EAAE,CAC1B,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EACpC,OAAO,EAAE,MAAM,KACX,MAAM,CAAC,OAAO,CAAC;IACpB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC;IAC9D,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAChD;AAED,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC;CAC1B;AAMD,wBAAgB,oBAAoB,CACnC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,oBAAoB,GACzB,eAAe,CAiGjB"}

package/dist/controller/heartbeat-sender.js

@@ -0,0 +1,94 @@
+const HEARTBEAT_CADENCE_MS_DEFAULT = 10_000;
+const HEARTBEAT_REQUEST_TIMEOUT_MS = 5_000;
+const TERMINAL_STATUS_CODES = new Set([404, 410]);
+function defaultLogWarning(message) {
+    process.stderr.write(`[heartbeat] ${message}\n`);
+}
+export function startHeartbeatSender(requestTaskId, props) {
+    const cadenceMs = props.cadenceMs ?? HEARTBEAT_CADENCE_MS_DEFAULT;
+    const setIntervalFn = props.setIntervalImpl ?? setInterval;
+    const clearIntervalFn = props.clearIntervalImpl ?? clearInterval;
+    const fetchFn = props.fetchImpl ?? fetch;
+    const logWarning = props.logWarning ?? defaultLogWarning;
+    const url = `${props.callerUrl.replace(/\/$/, '')}/tasks/${encodeURIComponent(requestTaskId)}/heartbeat`;
+    let stopped = false;
+    const timer = setIntervalFn(() => void tick(), cadenceMs);
+    let consecutiveFailureCount = 0;
+    let inFlight = false;
+    let activeAbort;
+    let activeTimeoutHandle;
+    function stopTicker() {
+        if (stopped) {
+            return;
+        }
+        stopped = true;
+        clearIntervalFn(timer);
+        activeAbort?.abort();
+        if (activeTimeoutHandle) {
+            clearTimeout(activeTimeoutHandle);
+        }
+    }
+    function recordHeartbeatFailure(message) {
+        consecutiveFailureCount += 1;
+        if (consecutiveFailureCount === 1) {
+            logWarning(message);
+            return;
+        }
+        if (consecutiveFailureCount === 3) {
+            logWarning(`task ${requestTaskId}: heartbeat has failed 3 consecutive times; the caller may treat this run as stalled`);
+        }
+    }
+    function resetHeartbeatFailures() {
+        consecutiveFailureCount = 0;
+    }
+    async function tick() {
+        if (stopped || inFlight) {
+            return;
+        }
+        inFlight = true;
+        const abort = new AbortController();
+        const timeoutHandle = setTimeout(() => abort.abort(), HEARTBEAT_REQUEST_TIMEOUT_MS);
+        activeAbort = abort;
+        activeTimeoutHandle = timeoutHandle;
+        try {
+            const response = await fetchFn(url, {
+                method: 'POST',
+                signal: abort.signal,
+            });
+            if (TERMINAL_STATUS_CODES.has(response.status)) {
+                logWarning(`task ${requestTaskId}: caller returned HTTP ${String(response.status)} from ${url} - stopping heartbeat permanently`);
+                stopTicker();
+                return;
+            }
+            if (!response.ok) {
+                recordHeartbeatFailure(`task ${requestTaskId}: caller returned HTTP ${String(response.status)} from ${url}`);
+                return;
+            }
+            resetHeartbeatFailures();
+        }
+        catch (error) {
+            if (stopped && abort.signal.aborted) {
+                return;
+            }
+            const message = error instanceof Error ? error.message : String(error);
+            recordHeartbeatFailure(`task ${requestTaskId}: heartbeat POST failed to ${url}: ${message}`);
+        }
+        finally {
+            clearTimeout(timeoutHandle);
+            if (activeTimeoutHandle === timeoutHandle) {
+                activeTimeoutHandle = undefined;
+            }
+            if (activeAbort === abort) {
+                activeAbort = undefined;
+            }
+            inFlight = false;
+        }
+    }
+    void tick();
+    return {
+        stop() {
+            stopTicker();
+        },
+    };
+}
+//# sourceMappingURL=heartbeat-sender.js.map

package/dist/controller/heartbeat-sender.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"heartbeat-sender.js","sourceRoot":"","sources":["../../src/controller/heartbeat-sender.ts"],"names":[],"mappings":"AAAA,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAC5C,MAAM,4BAA4B,GAAG,KAAK,CAAC;AAE3C,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAkBlD,SAAS,iBAAiB,CAAC,OAAe;IACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,OAAO,IAAI,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,oBAAoB,CACnC,aAAqB,EACrB,KAA2B;IAE3B,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,4BAA4B,CAAC;IAClE,MAAM,aAAa,GAAG,KAAK,CAAC,eAAe,IAAI,WAAW,CAAC;IAC3D,MAAM,eAAe,GAAG,KAAK,CAAC,iBAAiB,IAAI,aAAa,CAAC;IACjE,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC;IACzC,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,iBAAiB,CAAC;IACzD,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,kBAAkB,CAAC,aAAa,CAAC,YAAY,CAAC;IAEzG,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC;IAC1D,IAAI,uBAAuB,GAAG,CAAC,CAAC;IAChC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,WAAwC,CAAC;IAC7C,IAAI,mBAA8D,CAAC;IAEnE,SAAS,UAAU;QAClB,IAAI,OAAO,EAAE,CAAC;YACb,OAAO;QACR,CAAC;QACD,OAAO,GAAG,IAAI,CAAC;QACf,eAAe,CAAC,KAAK,CAAC,CAAC;QACvB,WAAW,EAAE,KAAK,EAAE,CAAC;QACrB,IAAI,mBAAmB,EAAE,CAAC;YACzB,YAAY,CAAC,mBAAmB,CAAC,CAAC;QACnC,CAAC;IACF,CAAC;IAED,SAAS,sBAAsB,CAAC,OAAe;QAC9C,uBAAuB,IAAI,CAAC,CAAC;QAC7B,IAAI,uBAAuB,KAAK,CAAC,EAAE,CAAC;YACnC,UAAU,CAAC,OAAO,CAAC,CAAC;YACpB,OAAO;QACR,CAAC;QACD,IAAI,uBAAuB,KAAK,CAAC,EAAE,CAAC;YACnC,UAAU,CACT,QAAQ,aAAa,sFAAsF,CAC3G,CAAC;QACH,CAAC;IACF,CAAC;IAED,SAAS,sBAAsB;QAC9B,uBAAuB,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,UAAU,IAAI;QAClB,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;YACzB,OAAO;QACR,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,4BAA4B,CAAC,CAAC;QACpF,WAAW,GAAG,KAAK,CAAC;QACpB,mBAAmB,GAAG,aAAa,CAAC;QACpC,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;gBACnC,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,KAAK,CAAC,MAAM;aACpB,CAAC,CAAC;YACH,IAAI,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChD,UAAU,CACT,QAAQ,aAAa,0BAA0B,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,GAAG,mCAAmC,CACrH,CAAC;gBACF,UAAU,EAAE,CAAC;gBACb,OAAO;YACR,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,sBAAsB,CACrB,QAAQ,aAAa,0BAA0B,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,GAAG,EAAE,CACpF,CAAC;gBACF,OAAO;YACR,CAAC;YACD,sBAAsB,EAAE,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACrC,OAAO;YACR,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,sBAAsB,CAAC,QAAQ,aAAa,8BAA8B,GAAG,KAAK,OAAO,EAAE,CAAC,CAAC;QAC9F,CAAC;gBAAS,CAAC;YACV,YAAY,CAAC,aAAa,CAAC,CAAC;YAC5B,IAAI,mBAAmB,KAAK,aAAa,EAAE,CAAC;gBAC3C,mBAAmB,GAAG,SAAS,CAAC;YACjC,CAAC;YACD,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;gBAC3B,WAAW,GAAG,SAAS,CAAC;YACzB,CAAC;YACD,QAAQ,GAAG,KAAK,CAAC;QAClB,CAAC;IACF,CAAC;IAED,KAAK,IAAI,EAAE,CAAC;IAEZ,OAAO;QACN,IAAI;YACH,UAAU,EAAE,CAAC;QACd,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/controller/http/controller-client.d.ts

@@ -0,0 +1,17 @@
+export interface ControllerClient {
+    destroyZone(zoneId: string, purge: boolean): Promise<unknown>;
+    enableZoneSsh(zoneId: string): Promise<unknown>;
+    execInZone?(zoneId: string, command: string): Promise<unknown>;
+    getControllerStatus(): Promise<unknown>;
+    getZoneLogs(zoneId: string): Promise<unknown>;
+    listLeases(): Promise<unknown>;
+    refreshZoneCredentials(zoneId: string): Promise<unknown>;
+    releaseLease(leaseId: string): Promise<void>;
+    stopController(): Promise<unknown>;
+    upgradeZone(zoneId: string): Promise<unknown>;
+}
+export declare function createControllerClient(options: {
+    readonly baseUrl: string;
+    readonly fetchImpl?: (input: string | URL, init?: RequestInit) => Promise<Response>;
+}): ControllerClient;
+//# sourceMappingURL=controller-client.d.ts.map

package/dist/controller/http/controller-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-client.d.ts","sourceRoot":"","sources":["../../../src/controller/http/controller-client.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAChC,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9D,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,UAAU,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/D,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/B,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,cAAc,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC9C;AAkBD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE;IAC/C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;CACpF,GAAG,gBAAgB,CA+DnB"}

package/dist/controller/http/controller-client.js

@@ -0,0 +1,76 @@
+async function readJsonResponse(response, context) {
+    const responseBody = await response.text().catch(() => '(unreadable)');
+    if (!response.ok) {
+        throw new Error(`${context} failed with HTTP ${response.status}: ${responseBody}`);
+    }
+    try {
+        return JSON.parse(responseBody);
+    }
+    catch (error) {
+        throw new Error(`${context} returned invalid JSON: ${error instanceof Error ? error.message : String(error)}. Body: ${responseBody}`, { cause: error });
+    }
+}
+export function createControllerClient(options) {
+    const fetchImpl = options.fetchImpl ?? fetch;
+    const baseUrl = options.baseUrl.replace(/\/$/u, '');
+    return {
+        enableZoneSsh: async (zoneId) => {
+            const response = await fetchImpl(`${baseUrl}/zones/${zoneId}/enable-ssh`, {
+                method: 'POST',
+            });
+            return await readJsonResponse(response, `Enable SSH for zone '${zoneId}'`);
+        },
+        execInZone: async (zoneId, command) => {
+            const response = await fetchImpl(`${baseUrl}/zones/${zoneId}/execute-command`, {
+                body: JSON.stringify({ command }),
+                headers: {
+                    'content-type': 'application/json',
+                },
+                method: 'POST',
+            });
+            return await readJsonResponse(response, `Execute command in zone '${zoneId}'`);
+        },
+        destroyZone: async (zoneId, purge) => {
+            const response = await fetchImpl(`${baseUrl}/zones/${zoneId}/destroy`, {
+                body: JSON.stringify({ purge }),
+                headers: {
+                    'content-type': 'application/json',
+                },
+                method: 'POST',
+            });
+            return await readJsonResponse(response, `Destroy zone '${zoneId}'`);
+        },
+        getControllerStatus: async () => {
+            const response = await fetchImpl(`${baseUrl}/controller-status`);
+            return await readJsonResponse(response, 'Get controller status');
+        },
+        getZoneLogs: async (zoneId) => {
+            const response = await fetchImpl(`${baseUrl}/zones/${zoneId}/logs`);
+            return await readJsonResponse(response, `Get logs for zone '${zoneId}'`);
+        },
+        refreshZoneCredentials: async (zoneId) => {
+            const response = await fetchImpl(`${baseUrl}/zones/${zoneId}/credentials/refresh`, {
+                method: 'POST',
+            });
+            return await readJsonResponse(response, `Refresh credentials for zone '${zoneId}'`);
+        },
+        listLeases: async () => {
+            const response = await fetchImpl(`${baseUrl}/leases`);
+            return await readJsonResponse(response, 'List leases');
+        },
+        releaseLease: async (leaseId) => {
+            await fetchImpl(`${baseUrl}/lease/${leaseId}`, { method: 'DELETE' });
+        },
+        stopController: async () => {
+            const response = await fetchImpl(`${baseUrl}/stop-controller`, { method: 'POST' });
+            return await readJsonResponse(response, 'Stop controller');
+        },
+        upgradeZone: async (zoneId) => {
+            const response = await fetchImpl(`${baseUrl}/zones/${zoneId}/upgrade`, {
+                method: 'POST',
+            });
+            return await readJsonResponse(response, `Upgrade zone '${zoneId}'`);
+        },
+    };
+}
+//# sourceMappingURL=controller-client.js.map

package/dist/controller/http/controller-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-client.js","sourceRoot":"","sources":["../../../src/controller/http/controller-client.ts"],"names":[],"mappings":"AAaA,KAAK,UAAU,gBAAgB,CAAC,QAAkB,EAAE,OAAe;IAClE,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,CAAC;IACvE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,qBAAqB,QAAQ,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAY,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACd,GAAG,OAAO,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,YAAY,EAAE,EACpH,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;IACH,CAAC;AACF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAGtC;IACA,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEpD,OAAO;QACN,aAAa,EAAE,KAAK,EAAE,MAAc,EAAoB,EAAE;YACzD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,UAAU,MAAM,aAAa,EAAE;gBACzE,MAAM,EAAE,MAAM;aACd,CAAC,CAAC;YACH,OAAO,MAAM,gBAAgB,CAAC,QAAQ,EAAE,wBAAwB,MAAM,GAAG,CAAC,CAAC;QAC5E,CAAC;QACD,UAAU,EAAE,KAAK,EAAE,MAAc,EAAE,OAAe,EAAoB,EAAE;YACvE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,UAAU,MAAM,kBAAkB,EAAE;gBAC9E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;gBACjC,OAAO,EAAE;oBACR,cAAc,EAAE,kBAAkB;iBAClC;gBACD,MAAM,EAAE,MAAM;aACd,CAAC,CAAC;YACH,OAAO,MAAM,gBAAgB,CAAC,QAAQ,EAAE,4BAA4B,MAAM,GAAG,CAAC,CAAC;QAChF,CAAC;QACD,WAAW,EAAE,KAAK,EAAE,MAAc,EAAE,KAAc,EAAoB,EAAE;YACvE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,UAAU,MAAM,UAAU,EAAE;gBACtE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;gBAC/B,OAAO,EAAE;oBACR,cAAc,EAAE,kBAAkB;iBAClC;gBACD,MAAM,EAAE,MAAM;aACd,CAAC,CAAC;YACH,OAAO,MAAM,gBAAgB,CAAC,QAAQ,EAAE,iBAAiB,MAAM,GAAG,CAAC,CAAC;QACrE,CAAC;QACD,mBAAmB,EAAE,KAAK,IAAsB,EAAE;YACjD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,oBAAoB,CAAC,CAAC;YACjE,OAAO,MAAM,gBAAgB,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;QAClE,CAAC;QACD,WAAW,EAAE,KAAK,EAAE,MAAc,EAAoB,EAAE;YACvD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,UAAU,MAAM,OAAO,CAAC,CAAC;YACpE,OAAO,MAAM,gBAAgB,CAAC,QAAQ,EAAE,sBAAsB,MAAM,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,sBAAsB,EAAE,KAAK,EAAE,MAAc,EAAoB,EAAE;YAClE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,UAAU,MAAM,sBAAsB,EAAE;gBAClF,MAAM,EAAE,MAAM;aACd,CAAC,CAAC;YACH,OAAO,MAAM,gBAAgB,CAAC,QAAQ,EAAE,iCAAiC,MAAM,GAAG,CAAC,CAAC;QACrF,CAAC;QACD,UAAU,EAAE,KAAK,IAAsB,EAAE;YACxC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,SAAS,CAAC,CAAC;YACtD,OAAO,MAAM,gBAAgB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACxD,CAAC;QACD,YAAY,EAAE,KAAK,EAAE,OAAe,EAAiB,EAAE;YACtD,MAAM,SAAS,CAAC,GAAG,OAAO,UAAU,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,cAAc,EAAE,KAAK,IAAsB,EAAE;YAC5C,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,kBAAkB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACnF,OAAO,MAAM,gBAAgB,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;QAC5D,CAAC;QACD,WAAW,EAAE,KAAK,EAAE,MAAc,EAAoB,EAAE;YACvD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,UAAU,MAAM,UAAU,EAAE;gBACtE,MAAM,EAAE,MAAM;aACd,CAAC,CAAC;YACH,OAAO,MAAM,gBAAgB,CAAC,QAAQ,EAAE,iBAAiB,MAAM,GAAG,CAAC,CAAC;QACrE,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/controller/http/controller-http-route-support.d.ts

@@ -0,0 +1,46 @@
+import type { Lease, LeaseManager } from '../leases/lease-manager.js';
+import type { PreparedWorkerTask, WorkerTaskInput } from '../worker-task-runner.js';
+export declare class ControllerTaskNotReadyError extends Error {
+}
+export declare class ControllerRuntimeAtCapacityError extends Error {
+}
+export interface ControllerRouteOperations {
+    readonly destroyZone: (zoneId: string, purge: boolean) => Promise<unknown>;
+    readonly enableSshForZone?: (zoneId: string) => Promise<unknown>;
+    readonly execInZone?: (zoneId: string, command: string) => Promise<unknown>;
+    readonly getStatus: () => Promise<unknown>;
+    readonly getTaskState?: (zoneId: string, taskId: string) => Promise<unknown>;
+    readonly getZoneLogs: (zoneId: string) => Promise<unknown>;
+    readonly refreshZoneCredentials: (zoneId: string) => Promise<unknown>;
+    readonly prepareWorkerTask?: (zoneId: string, input: WorkerTaskInput) => Promise<PreparedWorkerTask>;
+    readonly executeWorkerTask?: (prepared: PreparedWorkerTask) => Promise<unknown>;
+    readonly closeTaskForZone?: (zoneId: string, taskId: string) => Promise<{
+        readonly status: 'closed';
+    }>;
+    readonly pushTaskBranches?: (zoneId: string, taskId: string, input: {
+        readonly branches: readonly {
+            readonly repoUrl: string;
+            readonly branchName: string;
+        }[];
+    }) => Promise<unknown>;
+    readonly pullDefaultForTask?: (zoneId: string, taskId: string, input: {
+        readonly repoUrl: string;
+    }) => Promise<unknown>;
+    readonly stopController?: () => Promise<unknown>;
+    readonly upgradeZone: (zoneId: string) => Promise<unknown>;
+}
+export type ControllerLeaseManager = Pick<LeaseManager, 'createLease' | 'getLease' | 'listLeases' | 'releaseLease'>;
+export declare function readIdentityPemFromFile(identityFilePath: string): Promise<string>;
+export declare function serializeLeaseForResponse(lease: Lease, readIdentityPem: (identityFilePath: string) => Promise<string>): Promise<{
+    readonly leaseId: string;
+    readonly ssh: {
+        readonly host: string;
+        readonly identityPem: string;
+        readonly knownHostsLine: string;
+        readonly port: number;
+        readonly user: string;
+    };
+    readonly tcpSlot: number;
+    readonly workdir: '/workspace';
+}>;
+//# sourceMappingURL=controller-http-route-support.d.ts.map

package/dist/controller/http/controller-http-route-support.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-http-route-support.d.ts","sourceRoot":"","sources":["../../../src/controller/http/controller-http-route-support.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEpF,qBAAa,2BAA4B,SAAQ,KAAK;CAAG;AACzD,qBAAa,gCAAiC,SAAQ,KAAK;CAAG;AAE9D,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5E,QAAQ,CAAC,SAAS,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7E,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,QAAQ,CAAC,sBAAsB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAC5B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,eAAe,KAClB,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACjC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,QAAQ,EAAE,kBAAkB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAChF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAC3B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,KACV,OAAO,CAAC;QAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAA;KAAE,CAAC,CAAC;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAC3B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;QACN,QAAQ,CAAC,QAAQ,EAAE,SAAS;YAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;YACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;SAC5B,EAAE,CAAC;KACJ,KACG,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAC7B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;QACN,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KACzB,KACG,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3D;AAED,MAAM,MAAM,sBAAsB,GAAG,IAAI,CACxC,YAAY,EACZ,aAAa,GAAG,UAAU,GAAG,YAAY,GAAG,cAAc,CAC1D,CAAC;AAEF,wBAAsB,uBAAuB,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAEvF;AAED,wBAAsB,yBAAyB,CAC9C,KAAK,EAAE,KAAK,EACZ,eAAe,EAAE,CAAC,gBAAgB,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,GAC5D,OAAO,CAAC;IACV,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE;QACb,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;CAC/B,CAAC,CAeD"}

package/dist/controller/http/controller-http-route-support.js

@@ -0,0 +1,25 @@
+import fs from 'node:fs/promises';
+export class ControllerTaskNotReadyError extends Error {
+}
+export class ControllerRuntimeAtCapacityError extends Error {
+}
+export async function readIdentityPemFromFile(identityFilePath) {
+    return await fs.readFile(identityFilePath, 'utf8');
+}
+export async function serializeLeaseForResponse(lease, readIdentityPem) {
+    return {
+        leaseId: lease.id,
+        ssh: {
+            host: `tool-${lease.tcpSlot}.vm.host`,
+            identityPem: lease.sshAccess.identityFile
+                ? await readIdentityPem(lease.sshAccess.identityFile)
+                : '',
+            knownHostsLine: '',
+            port: 22,
+            user: lease.sshAccess.user ?? 'root',
+        },
+        tcpSlot: lease.tcpSlot,
+        workdir: '/workspace',
+    };
+}
+//# sourceMappingURL=controller-http-route-support.js.map

package/dist/controller/http/controller-http-route-support.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-http-route-support.js","sourceRoot":"","sources":["../../../src/controller/http/controller-http-route-support.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAKlC,MAAM,OAAO,2BAA4B,SAAQ,KAAK;CAAG;AACzD,MAAM,OAAO,gCAAiC,SAAQ,KAAK;CAAG;AA6C9D,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,gBAAwB;IACrE,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,KAAY,EACZ,eAA8D;IAa9D,OAAO;QACN,OAAO,EAAE,KAAK,CAAC,EAAE;QACjB,GAAG,EAAE;YACJ,IAAI,EAAE,QAAQ,KAAK,CAAC,OAAO,UAAU;YACrC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,YAAY;gBACxC,CAAC,CAAC,MAAM,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC;gBACrD,CAAC,CAAC,EAAE;YACL,cAAc,EAAE,EAAE;YAClB,IAAI,EAAE,EAAE;YACR,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,MAAM;SACpC;QACD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,YAAY;KACrB,CAAC;AACH,CAAC"}

package/dist/controller/http/controller-http-routes.d.ts

@@ -0,0 +1,22 @@
+import { Hono } from 'hono';
+import type { SystemConfig } from '../../config/system-config.js';
+import { type ControllerLeaseManager, type ControllerRouteOperations } from './controller-http-route-support.js';
+export declare function createControllerApp(options: {
+    readonly leaseManager: ControllerLeaseManager;
+    readonly readIdentityPem?: (identityFilePath: string) => Promise<string>;
+    readonly toolProfiles?: Record<string, {
+        readonly cpus: number;
+        readonly imageProfile: string;
+        readonly memory: string;
+        readonly workspaceRoot: string;
+    }>;
+    readonly zoneToolProfiles?: Record<string, string>;
+    readonly zoneIds?: ReadonlySet<string>;
+    readonly operations?: Partial<ControllerRouteOperations>;
+}): Hono;
+export declare function createControllerService(options: {
+    readonly leaseManager: ControllerLeaseManager;
+    readonly operations?: Partial<ControllerRouteOperations>;
+    readonly systemConfig: SystemConfig;
+}): Hono;
+//# sourceMappingURL=controller-http-routes.d.ts.map

package/dist/controller/http/controller-http-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-http-routes.d.ts","sourceRoot":"","sources":["../../../src/controller/http/controller-http-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EACN,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,EAG9B,MAAM,oCAAoC,CAAC;AAI5C,wBAAgB,mBAAmB,CAAC,OAAO,EAAE;IAC5C,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACzE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAC7B,MAAM,EACN;QACC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;KAC/B,CACD,CAAC;IACF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACzD,GAAG,IAAI,CAuGP;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE;IAChD,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACzD,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;CACpC,GAAG,IAAI,CAqBP"}