@agent-vm/gateway-interface 0.0.56 → 0.0.57

package/dist/index.d.ts

@@ -1,50 +1,11 @@
+import { SecretResolver, SecretSpec, VfsMountSpec } from "@agent-vm/gondolin-adapter";
+
 //#region src/gateway-runtime-contract.d.ts
 declare const gatewayTypeValues: readonly ["openclaw", "worker"];
 type GatewayType = (typeof gatewayTypeValues)[number];
 declare function buildGatewaySessionLabel(projectNamespace: string, zoneId: string): string;
 declare function buildToolSessionLabel(projectNamespace: string, zoneId: string, tcpSlot: number): string;
 //#endregion
-//#region ../gondolin-adapter/dist/index.d.ts
-
-//#endregion
-//#region src/pinned-realfs.d.ts
-interface PinnedRealFsRoot {
-  readonly hostPath: string;
-  readonly realPath: string;
-  readonly fd: number;
-  readonly device: number;
-  readonly inode: number;
-}
-//#endregion
-//#region src/types.d.ts
-interface SecretSpec {
-  readonly hosts: readonly string[];
-  readonly value: string;
-}
-type SecretRef = {
-  readonly source: '1password';
-  readonly ref: string;
-} | {
-  readonly source: 'environment';
-  readonly ref: string;
-};
-//#endregion
-//#region src/secret-resolver.d.ts
-
-interface SecretResolver {
-  resolve(ref: SecretRef): Promise<string>;
-  resolveAll(refs: Record<string, SecretRef>): Promise<Record<string, string>>;
-}
-interface VfsMountSpec {
-  readonly kind: 'realfs' | 'realfs-readonly' | 'memory' | 'shadow';
-  readonly hostPath?: string;
-  readonly pinnedHostRoot?: PinnedRealFsRoot;
-  readonly shadowConfig?: {
-    readonly deny: readonly string[];
-    readonly tmpfs: readonly string[];
-  };
-}
-//#endregion
 //#region src/gateway-process-spec.d.ts
 type GatewayHealthCheck = {
   readonly type: 'http';
@@ -162,6 +123,7 @@ interface BuildGatewayVmSpecOptions {
   readonly gatewayCacheDir: string;
   readonly projectNamespace: string;
   readonly resolvedSecrets: Record<string, string>;
+  readonly runtimeDir: string;
   readonly tcpPool: {
     readonly basePort: number;
     readonly size: number;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":["BuildConfig","BuildConfig$1","CreateHttpHooksResult","EnableIngressOptions","EnableSshOptions","IngressRoute","IngressRoute$1","ShadowPredicate","ShadowProviderOptions","VMOptions","VirtualProvider","getDefaultBuildConfig","BuildImageOptions","BuildOutput","Uint8Array","BuildImageResult","buildImageAssetFileNames","BuildPipelineDependencies","Promise","hasBuiltImageAssets","computeBuildFingerprint","computeEffectiveBuildFingerprint","buildImage","parseMinimumZigVersion","resolveGondolinPackageJsonPath","resolveGondolinPackageSpec","ResolveGondolinMinimumZigVersionOptions","resolveGondolinMinimumZigVersion","WritableMountPolicy","RuntimeMountPolicyConfig","Record","Readonly","resolveGuestMountPath","validateWritableMount","validateRuntimeMountPolicy","PinnedRealFsRoot","CreatePinnedRealFsProviderOptions","pinRealFsRoot","closePinnedRealFsRoot","assertPinnedRealFsRoot","createPinnedRealFsProvider","PolicySources","normalizeHostname","dedupeStable","compilePolicy","SecretSpec","SecretRef","SecretResolverClient","SecretResolver","TokenSource","ExecFileOptions","ExecFileResult","resolveServiceAccountToken","CreateSecretResolverDependencies","createSecretResolver","createOpCliSecretResolver","Pick","ExecResult","SshAccess","IngressAccess","ManagedVmInstance","ManagedVmDependencies","Request","Response","VfsMountSpec","CreateVmOptions","ManagedVm","createManagedVm","VolumeConfigEntry","ResolvedVolume","ensureVolumeDir","resolveVolumeDirs","writeFileAtomically"],"sources":["../src/gateway-runtime-contract.ts","../../gondolin-adapter/dist/index.d.ts","../src/gateway-process-spec.ts","../src/gateway-vm-spec.ts","../src/gateway-lifecycle.ts","../src/split-resolved-gateway-secrets.ts"],"sourcesContent":["import { BuildConfig, BuildConfig as BuildConfig$1, CreateHttpHooksResult, EnableIngressOptions, EnableSshOptions, IngressRoute as IngressRoute$1, ShadowPredicate, ShadowProviderOptions, VMOptions, VirtualProvider, getDefaultBuildConfig } from \"@earendil-works/gondolin\";\n\n//#region src/build-pipeline.d.ts\ninterface BuildImageOptions {\n  readonly buildConfig: BuildConfig$1;\n  readonly cacheDir: string;\n  /** Directory to resolve relative paths in buildConfig (e.g. postBuild.copy.src).\n   *  Defaults to process.cwd() if not provided. */\n  readonly configDir?: string;\n  readonly fullReset?: boolean;\n  readonly fingerprintInput?: unknown;\n  readonly output?: BuildOutput;\n}\ninterface BuildOutput {\n  write(chunk: string | Uint8Array): boolean;\n}\ninterface BuildImageResult {\n  readonly built: boolean;\n  readonly fingerprint: string;\n  readonly imagePath: string;\n}\ndeclare const buildImageAssetFileNames: readonly [\"manifest.json\", \"rootfs.ext4\", \"initramfs.cpio.lz4\", \"vmlinuz-virt\"];\ninterface BuildPipelineDependencies {\n  readonly buildAssets?: (buildConfig: BuildConfig$1, outputDirectory: string, configDir?: string) => Promise<unknown>;\n  readonly gondolinVersion?: string;\n}\ndeclare function hasBuiltImageAssets(outputDirectoryPath: string): Promise<boolean>;\ndeclare function computeBuildFingerprint(buildConfig: BuildConfig$1, gondolinVersion?: string, fingerprintInput?: unknown): string;\ndeclare function computeEffectiveBuildFingerprint(options: {\n  readonly buildConfig: BuildConfig$1;\n  readonly configDir?: string;\n  readonly fingerprintInput?: unknown;\n  readonly gondolinVersion?: string;\n}): Promise<{\n  readonly fingerprint: string;\n  readonly rootfsInitExtraContent: string;\n}>;\ndeclare function buildImage(options: BuildImageOptions, dependencies?: BuildPipelineDependencies): Promise<BuildImageResult>;\n//#endregion\n//#region src/gondolin-package.d.ts\ndeclare function parseMinimumZigVersion(rawContents: string): string;\ndeclare function resolveGondolinPackageJsonPath(): string;\ndeclare function resolveGondolinPackageSpec(): Promise<string>;\ninterface ResolveGondolinMinimumZigVersionOptions {\n  readonly buildZigZonPath?: string;\n}\ndeclare function resolveGondolinMinimumZigVersion(options?: ResolveGondolinMinimumZigVersionOptions): Promise<string>;\n//#endregion\n//#region src/mount-policy.d.ts\ninterface WritableMountPolicy {\n  readonly allowAuthWrite: boolean;\n  readonly writableAllowedGuestPrefixes: readonly string[];\n}\ninterface RuntimeMountPolicyConfig {\n  readonly extraMounts: Readonly<Record<string, string>>;\n  readonly mountControls: WritableMountPolicy;\n}\ndeclare function resolveGuestMountPath(guestPath: string, workDir: string): string;\ndeclare function validateWritableMount(guestPath: string, policy: WritableMountPolicy, options: {\n  readonly workDir: string;\n}): void;\ndeclare function validateRuntimeMountPolicy(config: RuntimeMountPolicyConfig, options: {\n  readonly hostHome: string;\n  readonly workDir: string;\n}): Promise<void>;\n//#endregion\n//#region src/pinned-realfs.d.ts\ninterface PinnedRealFsRoot {\n  readonly hostPath: string;\n  readonly realPath: string;\n  readonly fd: number;\n  readonly device: number;\n  readonly inode: number;\n}\ninterface CreatePinnedRealFsProviderOptions {\n  readonly root: PinnedRealFsRoot;\n  readonly createRealFsProvider: (hostPath: string) => VirtualProvider;\n}\ndeclare function pinRealFsRoot(hostPath: string): PinnedRealFsRoot;\ndeclare function closePinnedRealFsRoot(root: PinnedRealFsRoot): void;\ndeclare function assertPinnedRealFsRoot(root: PinnedRealFsRoot): void;\ndeclare function createPinnedRealFsProvider(options: CreatePinnedRealFsProviderOptions): VirtualProvider;\n//#endregion\n//#region src/policy-compiler.d.ts\ninterface PolicySources {\n  readonly base: readonly string[];\n  readonly profile: readonly string[];\n  readonly extra: readonly string[];\n}\ndeclare function normalizeHostname(rawHostname: string): string;\ndeclare function dedupeStable(values: readonly string[]): string[];\ndeclare function compilePolicy(sources: PolicySources): string[];\n//#endregion\n//#region src/types.d.ts\ninterface SecretSpec {\n  readonly hosts: readonly string[];\n  readonly value: string;\n}\ntype SecretRef = {\n  readonly source: '1password';\n  readonly ref: string;\n} | {\n  readonly source: 'environment';\n  readonly ref: string;\n};\n//#endregion\n//#region src/secret-resolver.d.ts\ninterface SecretResolverClient {\n  readonly secrets: {\n    resolve(secretReference: string): Promise<string>;\n    resolveAll(secretReferences: readonly string[]): Promise<unknown>;\n  };\n}\ninterface SecretResolver {\n  resolve(ref: SecretRef): Promise<string>;\n  resolveAll(refs: Record<string, SecretRef>): Promise<Record<string, string>>;\n}\ntype TokenSource = {\n  readonly type: 'op-cli';\n  readonly ref: string;\n} | {\n  readonly type: 'env';\n  readonly envVar?: string | undefined;\n} | {\n  readonly type: 'keychain';\n  readonly service: string;\n  readonly account: string;\n};\ninterface ExecFileOptions {\n  readonly env?: Readonly<Record<string, string | undefined>>;\n}\ninterface ExecFileResult {\n  readonly stdout: string;\n  readonly stderr: string;\n}\ndeclare function resolveServiceAccountToken(source: TokenSource, dependencies?: {\n  readonly execFileAsync?: (command: string, args: readonly string[], options?: ExecFileOptions) => Promise<ExecFileResult>;\n}): Promise<string>;\ninterface CreateSecretResolverDependencies {\n  readonly createClient?: (config: {\n    auth: string;\n    integrationName: string;\n    integrationVersion: string;\n  }) => Promise<SecretResolverClient>;\n  readonly execFileAsync?: (command: string, args: readonly string[], options?: ExecFileOptions) => Promise<ExecFileResult>;\n  readonly integrationName?: string;\n  readonly integrationVersion?: string;\n}\ndeclare function createSecretResolver(options: {\n  readonly serviceAccountToken: string;\n}, dependencies?: CreateSecretResolverDependencies): Promise<SecretResolver>;\ndeclare function createOpCliSecretResolver(options: {\n  readonly serviceAccountToken: string;\n}, dependencies?: Pick<CreateSecretResolverDependencies, 'execFileAsync'>): Promise<SecretResolver>;\n//#endregion\n//#region src/vm-adapter.d.ts\ninterface ExecResult {\n  readonly exitCode: number;\n  readonly stdout: string;\n  readonly stderr: string;\n}\ntype IngressRoute = IngressRoute$1;\ninterface SshAccess {\n  readonly host: string;\n  readonly command?: string;\n  readonly identityFile?: string;\n  readonly port: number;\n  readonly user?: string;\n}\ninterface IngressAccess {\n  readonly host: string;\n  readonly port: number;\n}\ninterface ManagedVmInstance {\n  readonly id: string;\n  exec(command: string): Promise<{\n    readonly exitCode: number;\n    readonly stdout?: string;\n    readonly stderr?: string;\n  }>;\n  enableSsh(options?: EnableSshOptions): Promise<SshAccess>;\n  enableIngress(options?: EnableIngressOptions): Promise<IngressAccess>;\n  setIngressRoutes(routes: readonly IngressRoute[]): void;\n  close(): Promise<void>;\n}\ninterface ManagedVmDependencies {\n  createVm(vmOptions: VMOptions): Promise<ManagedVmInstance>;\n  createHttpHooks(options: {\n    readonly allowedHosts: readonly string[];\n    readonly secrets: Record<string, SecretSpec>;\n    readonly onRequest?: (request: Request) => Promise<Request | Response | void>;\n    readonly onResponse?: (response: Response) => Promise<Response | void>;\n  }): Pick<CreateHttpHooksResult, 'env' | 'httpHooks'>;\n  closePinnedRealFsRoot(root: PinnedRealFsRoot): void;\n  createPinnedRealFsProvider(root: PinnedRealFsRoot): VirtualProvider;\n  createRealFsProvider(hostPath: string): VirtualProvider;\n  createReadonlyProvider(provider: VirtualProvider): VirtualProvider;\n  createMemoryProvider(): VirtualProvider;\n  createShadowProvider(provider: VirtualProvider, options: ShadowProviderOptions): VirtualProvider;\n  createShadowPathPredicate(paths: readonly string[]): ShadowPredicate;\n}\ninterface VfsMountSpec {\n  readonly kind: 'realfs' | 'realfs-readonly' | 'memory' | 'shadow';\n  readonly hostPath?: string;\n  readonly pinnedHostRoot?: PinnedRealFsRoot;\n  readonly shadowConfig?: {\n    readonly deny: readonly string[];\n    readonly tmpfs: readonly string[];\n  };\n}\ninterface CreateVmOptions {\n  readonly imagePath: string;\n  readonly memory: string;\n  readonly cpus: number;\n  readonly rootfsMode: 'readonly' | 'memory' | 'cow';\n  readonly allowedHosts: readonly string[];\n  readonly secrets: Record<string, SecretSpec>;\n  readonly vfsMounts: Record<string, VfsMountSpec>;\n  readonly tcpHosts?: Record<string, string>;\n  readonly env?: Record<string, string>;\n  readonly sessionLabel?: string;\n  readonly onRequest?: (request: Request) => Promise<Request | Response | void>;\n  readonly onResponse?: (response: Response) => Promise<Response | void>;\n}\ninterface ManagedVm {\n  readonly id: string;\n  exec(command: string): Promise<ExecResult>;\n  enableSsh(options?: EnableSshOptions): Promise<SshAccess>;\n  enableIngress(options?: EnableIngressOptions): Promise<IngressAccess>;\n  getVmInstance(): ManagedVmInstance;\n  setIngressRoutes(routes: readonly IngressRoute[]): void;\n  close(): Promise<void>;\n}\ndeclare function createManagedVm(options: CreateVmOptions, dependencies?: ManagedVmDependencies): Promise<ManagedVm>;\n//#endregion\n//#region src/volume-manager.d.ts\ninterface VolumeConfigEntry {\n  readonly guestPath: string;\n}\ninterface ResolvedVolume {\n  readonly hostDir: string;\n  readonly guestPath: string;\n}\ndeclare function ensureVolumeDir(cacheBase: string, workspaceHash: string, volumeName: string): Promise<string>;\ndeclare function resolveVolumeDirs(cacheBase: string, workspaceHash: string, volumes: Readonly<Record<string, VolumeConfigEntry>>): Promise<Record<string, ResolvedVolume>>;\n//#endregion\n//#region src/write-file-atomically.d.ts\ndeclare function writeFileAtomically(filePath: string, content: string, options?: {\n  readonly mode?: number;\n}): Promise<void>;\n//#endregion\nexport { type BuildConfig, BuildImageOptions, BuildImageResult, BuildOutput, CreatePinnedRealFsProviderOptions, CreateSecretResolverDependencies, CreateVmOptions, ExecFileOptions, ExecFileResult, ExecResult, IngressAccess, IngressRoute, ManagedVm, ManagedVmDependencies, ManagedVmInstance, PinnedRealFsRoot, PolicySources, ResolveGondolinMinimumZigVersionOptions, ResolvedVolume, RuntimeMountPolicyConfig, SecretRef, SecretResolver, SecretResolverClient, SecretSpec, SshAccess, TokenSource, VfsMountSpec, VolumeConfigEntry, WritableMountPolicy, assertPinnedRealFsRoot, buildImage, buildImageAssetFileNames, closePinnedRealFsRoot, compilePolicy, computeBuildFingerprint, computeEffectiveBuildFingerprint, createManagedVm, createOpCliSecretResolver, createPinnedRealFsProvider, createSecretResolver, dedupeStable, ensureVolumeDir, getDefaultBuildConfig, hasBuiltImageAssets, normalizeHostname, parseMinimumZigVersion, pinRealFsRoot, resolveGondolinMinimumZigVersion, resolveGondolinPackageJsonPath, resolveGondolinPackageSpec, resolveGuestMountPath, resolveServiceAccountToken, resolveVolumeDirs, validateRuntimeMountPolicy, validateWritableMount, writeFileAtomically };\n//# sourceMappingURL=index.d.ts.map"],"mappings":";cAAa;AAAA,KAED,WAAA,GAFoD,CAAA,OAE9B,iBAF8B,CAAA,CAAA,MAAA,CAAA;AAEpD,iBAEI,wBAAA,CAFmC,gBAAA,EAAA,MAAA,EAAA,MAAA,EAAA,MAAA,CAAA,EAAA,MAAA;AAEnC,iBAIA,qBAAA,CAJwB,gBAAA,EAAA,MAAA,EAAA,MAAA,EAAA,MAAA,EAAA,OAAA,EAAA,MAAA,CAAA,EAAA,MAAA;;;;;;UC+D9BmC,gBAAAA,CGqES;EACf,SAAA,QAAA,EAAA,MAAA;EAMqB,SAAA,QAAA,EAAA,MAAA;EAAmC,SAAA,EAAA,EAAA,MAAA;EAAiB,SAAA,MAAA,EAAA,MAAA;EAAO,SAAA,KAAA,EAAA,MAAA;;;;UHjD1EU,UAAAA;;;;KAILC,SAAAA;;;;;;;;;;UAeKE,cAAAA;eACKF,YAAY5B;mBACRY,eAAegB,aAAa5B,QAAQY;;UAsF7CkC,YAAAA;;;4BAGkB7B;;;;;;;;KC5MhB,kBAAA;EFAC,SAAA,IAAA,EAAA,MAAmD;EAEpD,SAAA,IAAA,EAAW,MAAA;EAEP,SAAA,IAAA,EAAA,MAAA;AAIhB,CAAA,GAAgB;;;;ACwDL;AA2B0C;AAGjC;AAgBwC;AAI7CW,UC1GE,kBAAA,CD0GFA;EAAY5B,SAAAA,gBAAAA,EAAAA,MAAAA;EACO4B,SAAAA,YAAAA,EAAAA,MAAAA;EAAfhB,SAAAA,WAAAA,ECxGI,kBDwGJA;EAAoCA,SAAAA,eAAAA,EAAAA,MAAAA;EAARZ,SAAAA,OAAAA,EAAAA,MAAAA;;;;ADnH/C;AAEA;AAEA;AAIA;UGFiB,aAAA;wBACM;sBACF,eAAe;EF2D1BiB,SAAAA,eAAgB,EE1DC,MF0DD,CAAA,MAAA,EE1DgB,UF0DhB,CAAA;EA2BhBU,SAAAA,QAAU,EEpFA,MFoFA,CAAA,MAAA,EAAA,MAAA,CAAA;EAIfC,SAAAA,YAAS,EAAA,SAAA,MAAA,EAAA;EAeJE,SAAAA,UAAc,EAAA,UAAA,GAAA,QAAA,GAAA,KAAA;EACTF,SAAAA,YAAAA,EAAAA,MAAAA;;;;AD1Gf;;;;AC2DUX,UGzDO,iBAAA,CHyDS;EA2BhBU;AAAU;AAgBwC;;EAIjC3B,SAAAA,oBAAAA,EAAAA,MAAAA;EACO4B;;;;EAAoB,SAAA,iBAAA,EAAA,CAAA,QAAA,EAAA,MAAA,EAAA,QAAA,EAAA;IAsF5CkB,SAAAA,UAAY,CAAA,EAAA,OAGM7B;;;;AC5M5B,UE8BU,sBAAA,CF9BoB;EAQb,SAAA,MAAA,EAAA,WAAkB,GAAA,aAGZ;;UEuBb,iCAAA,SAA0C;;ED5BnC,SAAA,GAAA,EAAA,MAAa;;UCiCpB,iCAAA,SAA0C,sBD/BhB,CAAA;EAAf,SAAA,MAAA,EAAA,aAAA;EACqB,SAAA,MAAA,EAAA,MAAA;;AACtB,KCkCR,uBAAA,GDlCQ,QAAA,GAAA,UAAA,GAAA,OAAA;AAAM,UCoCT,gBAAA,CDpCS;sBCqCL;;UAGX,4BAAA;EAxCO,SAAA,IAAA,EAyCD,WAzCkB;EAoBxB,SAAA,MAAA,EAAA,MAAA;EAIA,SAAA,IAAA,EAAA,MAAA;EAKA,SAAA,IAAA,EAAA,MAAA;EAKE,SAAA,MAAA,EAAA,MAAA;EAEK,SAAA,QAAA,EAAgB,MAAA;EAIvB,SAAA,GAAA,EAOK,gBAPL;EACM,SAAA,eAAA,CAAA,EAQZ,iCARY,GASZ,iCATY,GAAA,SAAA;;UAaN,gCAAA,SAAyC,4BAL/C,CAAA;EACA,SAAA,IAAA,EAAA,UAAA;EAAiC,SAAA,YAAA,EAAA,MAAA;EAI3B,SAAA,mBAAA,CAAA,EAGsB,QAHW,CAIzC,MAJyC,CAAA,MAAA,EAI1B,iCAJ0B,GAIU,iCAJV,CAAA,CAAA;;UAQjC,8BAAA,SAAuC,4BAJI,CAAA;EAAnD,SAAA,IAAA,EAAA,QAAA;;KAQG,wBAAA,GAA2B,gCAZmB,GAYgB,8BAZhB;;AAA4B;AAQF;AAU7E;AAuBiB,UAvBA,iBAAA,CAuByB;EAYzB,SAAA,EAAA,EAAA,MAAgB;EAKV,SAAA,OAAA,EAtCJ,wBAsCI;EAMD,SAAA,OAAA,EA3CH,MA2CG,CAAA,MAAA,EAAA;IAA4B,SAAA,MAAA,EAAA,WAAA;IAO1C,SAAA,GAAA,EAAA,MAAA;IACW,SAAA,SAAA,EAAA,KAAA,GAAA,gBAAA;IACf,SAAA,KAAA,CAAA,EAAA,SAAA,MAAA,EAAA,GAAA,SAAA;EAMqB,CAAA,GAAA;IAAmC,SAAA,MAAA,EAAA,aAAA;IAAiB,SAAA,MAAA,EAAA,MAAA;IAAO,SAAA,SAAA,EAAA,KAAA,GAAA,gBAAA;;;;EC3InE,SAAA,eAAA,EAAA,SAAA,MAAiC,EAAA;EACpB,SAAA,oBAAA,CAAA,EAAA,MAAA;;AACH,UDmGV,yBAAA,CCnGU;EAAM,SAAA,cAAA,EAAA,MAAA;EAGjB,SAAA,eAAA,EAAA,MAA2B;EACpC,SAAA,gBAAA,EAAA,MAAA;EACW,SAAA,eAAA,EDkGS,MClGT,CAAA,MAAA,EAAA,MAAA,CAAA;EACf,SAAA,OAAA,EAAA;IAAiC,SAAA,QAAA,EAAA,MAAA;;;iBDsGpB;;UAGC,gBAAA;;;;;wBAKM;;;;;uBAMD,4BAA4B;;;;;yBAO1C,oCACW,yBACf;;;;;0BAMqB,mCAAmC,iBAAiB;;;;AJ7IjE,UKEK,iCAAA,CLFkC;EAEnC,SAAA,kBAAwB,EKCV,MLDU,CAAA,MAAA,EAAA,MAAA,CAAA;EAIxB,SAAA,eAAqB,EKFV,MLEU,CAAA,MAAA,EKFK,ULEL,CAAA;;iBKCrB,2BAAA,OACT,oCACW,yBACf"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/gateway-runtime-contract.ts","../src/gateway-process-spec.ts","../src/gateway-vm-spec.ts","../src/gateway-lifecycle.ts","../src/split-resolved-gateway-secrets.ts"],"mappings":";;;cAAa,iBAAA;AAAA,KAED,WAAA,WAAsB,iBAAA;AAAA,iBAElB,wBAAA,CAAyB,gBAAA,UAA0B,MAAA;AAAA,iBAInD,qBAAA,CACf,gBAAA,UACA,MAAA,UACA,OAAA;;;KCXW,kBAAA;EAAA,SACE,IAAA;EAAA,SAAuB,IAAA;EAAA,SAAuB,IAAA;AAAA;EAAA,SAC9C,IAAA;EAAA,SAA0B,OAAA;AAAA;ADAxC;;;;AAAA,UCMiB,kBAAA;EAAA,SACP,gBAAA;EAAA,SACA,YAAA;EAAA,SACA,WAAA,EAAa,kBAAA;EAAA,SACb,eAAA;EAAA,SACA,OAAA;AAAA;;;;;ADbV;;UEMiB,aAAA;EAAA,SACP,WAAA,EAAa,MAAA;EAAA,SACb,SAAA,EAAW,MAAA,SAAe,YAAA;EAAA,SAC1B,eAAA,EAAiB,MAAA,SAAe,UAAA;EAAA,SAChC,QAAA,EAAU,MAAA;EAAA,SACV,YAAA;EAAA,SACA,UAAA;EAAA,SACA,YAAA;AAAA;;;;;;;UCHO,iBAAA;EHRM;;;;EAAA,SGab,oBAAA;EHX8B;;;;EAAA,SGiB9B,iBAAA,GACR,QAAA,UACA,OAAA;IAAA,SACU,UAAA;IAAA,SACA,UAAA;EAAA;AAAA;AAAA,UAKF,sBAAA;EAAA,SACA,MAAA;AAAA;AAAA,UAGA,iCAAA,SAA0C,sBAAA;EAAA,SAC1C,MAAA;EAAA,SACA,GAAA;AAAA;AAAA,UAGA,iCAAA,SAA0C,sBAAA;EAAA,SAC1C,MAAA;EAAA,SACA,MAAA;AAAA;AAAA,KAGE,uBAAA;AAAA,UAEK,gBAAA;EAAA,SACP,SAAA,EAAW,uBAAA;AAAA;AAAA,UAGX,4BAAA;EAAA,SACA,IAAA,EAAM,WAAA;EAAA,SACN,MAAA;EAAA,SACA,IAAA;EAAA,SACA,IAAA;EAAA,SACA,MAAA;EAAA,SACA,QAAA;EAAA,SACA,GAAA,EAAK,gBAAA;EAAA,SACL,eAAA,GACN,iCAAA,GACA,iCAAA;AAAA;AAAA,UAIM,gCAAA,SAAyC,4BAAA;EAAA,SACzC,IAAA;EAAA,SACA,YAAA;EAAA,SACA,mBAAA,GAAsB,QAAA,CAC9B,MAAA,SAAe,iCAAA,GAAoC,iCAAA;AAAA;AAAA,UAI3C,8BAAA,SAAuC,4BAAA;EAAA,SACvC,IAAA;AAAA;AAAA,KAGL,wBAAA,GAA2B,gCAAA,GAAmC,8BAAA;;;;;UAMlD,iBAAA;EAAA,SACP,EAAA;EAAA,SACA,OAAA,EAAS,wBAAA;EAAA,SACT,OAAA,EAAS,MAAA;IAAA,SAGN,MAAA;IAAA,SACA,GAAA;IAAA,SACA,SAAA;IAAA,SACA,KAAA;EAAA;IAAA,SAGA,MAAA;IAAA,SACA,MAAA;IAAA,SACA,SAAA;IAAA,SACA,KAAA;EAAA;EAAA,SAGH,YAAA;EAAA,SACA,eAAA;EAAA,SACA,oBAAA;AAAA;AAAA,UAGO,yBAAA;EAAA,SACP,cAAA;EAAA,SACA,eAAA;EAAA,SACA,gBAAA;EAAA,SACA,eAAA,EAAiB,MAAA;EAAA,SACjB,UAAA;EAAA,SACA,OAAA;IAAA,SACC,QAAA;IAAA,SACA,IAAA;EAAA;EAAA,SAED,IAAA,EAAM,iBAAA;AAAA;AAAA,UAGC,gBAAA;EA9FL;;;;EAAA,SAmGF,UAAA,GAAa,iBAAA;EA7Fb;;;;EAmGT,WAAA,CAAY,OAAA,EAAS,yBAAA,GAA4B,aAAA;EA/FxC;;;;EAqGT,gBAAA,CACC,IAAA,EAAM,iBAAA,EACN,eAAA,EAAiB,MAAA,mBACf,kBAAA;EAvGM;;;;EA6GT,gBAAA,EAAkB,IAAA,EAAM,iBAAA,EAAmB,cAAA,EAAgB,cAAA,GAAiB,OAAA;AAAA;;;UC5I5D,iCAAA;EAAA,SACP,kBAAA,EAAoB,MAAA;EAAA,SACpB,eAAA,EAAiB,MAAA,SAAe,UAAA;AAAA;AAAA,iBAG1B,2BAAA,CACf,IAAA,EAAM,iBAAA,EACN,eAAA,EAAiB,MAAA,mBACf,iCAAA"}

package/dist/index.js

@@ -6,7 +6,6 @@ function buildGatewaySessionLabel(projectNamespace, zoneId) {
 function buildToolSessionLabel(projectNamespace, zoneId, tcpSlot) {
 	return `${projectNamespace}:${zoneId}:tool:${tcpSlot}`;
 }
-
 //#endregion
 //#region src/split-resolved-gateway-secrets.ts
 function splitResolvedGatewaySecrets(zone, resolvedSecrets) {
@@ -32,7 +31,7 @@ function splitResolvedGatewaySecrets(zone, resolvedSecrets) {
 		mediatedSecrets
 	};
 }
-
 //#endregion
 export { buildGatewaySessionLabel, buildToolSessionLabel, gatewayTypeValues, splitResolvedGatewaySecrets };
+
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["environmentSecrets: Record<string, string>","mediatedSecrets: Record<string, SecretSpec>"],"sources":["../src/gateway-runtime-contract.ts","../src/split-resolved-gateway-secrets.ts"],"sourcesContent":["export const gatewayTypeValues = ['openclaw', 'worker'] as const;\n\nexport type GatewayType = (typeof gatewayTypeValues)[number];\n\nexport function buildGatewaySessionLabel(projectNamespace: string, zoneId: string): string {\n\treturn `${projectNamespace}:${zoneId}:gateway`;\n}\n\nexport function buildToolSessionLabel(\n\tprojectNamespace: string,\n\tzoneId: string,\n\ttcpSlot: number,\n): string {\n\treturn `${projectNamespace}:${zoneId}:tool:${tcpSlot}`;\n}\n","import type { SecretSpec } from '@agent-vm/gondolin-adapter';\n\nimport type { GatewayZoneConfig } from './gateway-lifecycle.js';\n\nexport interface SplitResolvedGatewaySecretsResult {\n\treadonly environmentSecrets: Record<string, string>;\n\treadonly mediatedSecrets: Record<string, SecretSpec>;\n}\n\nexport function splitResolvedGatewaySecrets(\n\tzone: GatewayZoneConfig,\n\tresolvedSecrets: Record<string, string>,\n): SplitResolvedGatewaySecretsResult {\n\tconst environmentSecrets: Record<string, string> = {};\n\tconst mediatedSecrets: Record<string, SecretSpec> = {};\n\n\tfor (const [secretName, secretValue] of Object.entries(resolvedSecrets)) {\n\t\tconst secretConfig = zone.secrets[secretName];\n\t\tif (!secretConfig) {\n\t\t\tprocess.stderr.write(\n\t\t\t\t`[split-resolved-gateway-secrets] Secret '${secretName}' was resolved but has no matching zone secret config.\\n`,\n\t\t\t);\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (secretConfig.injection === 'http-mediation' && secretConfig.hosts) {\n\t\t\tmediatedSecrets[secretName] = {\n\t\t\t\thosts: [...secretConfig.hosts],\n\t\t\t\tvalue: secretValue,\n\t\t\t};\n\t\t\tcontinue;\n\t\t}\n\n\t\tenvironmentSecrets[secretName] = secretValue;\n\t}\n\n\treturn { environmentSecrets, mediatedSecrets };\n}\n"],"mappings":";AAAA,MAAa,oBAAoB,CAAC,YAAY,SAAS;AAIvD,SAAgB,yBAAyB,kBAA0B,QAAwB;AAC1F,QAAO,GAAG,iBAAiB,GAAG,OAAO;;AAGtC,SAAgB,sBACf,kBACA,QACA,SACS;AACT,QAAO,GAAG,iBAAiB,GAAG,OAAO,QAAQ;;;;;ACJ9C,SAAgB,4BACf,MACA,iBACoC;CACpC,MAAMA,qBAA6C,EAAE;CACrD,MAAMC,kBAA8C,EAAE;AAEtD,MAAK,MAAM,CAAC,YAAY,gBAAgB,OAAO,QAAQ,gBAAgB,EAAE;EACxE,MAAM,eAAe,KAAK,QAAQ;AAClC,MAAI,CAAC,cAAc;AAClB,WAAQ,OAAO,MACd,4CAA4C,WAAW,0DACvD;AACD;;AAGD,MAAI,aAAa,cAAc,oBAAoB,aAAa,OAAO;AACtE,mBAAgB,cAAc;IAC7B,OAAO,CAAC,GAAG,aAAa,MAAM;IAC9B,OAAO;IACP;AACD;;AAGD,qBAAmB,cAAc;;AAGlC,QAAO;EAAE;EAAoB;EAAiB"}
+{"version":3,"file":"index.js","names":[],"sources":["../src/gateway-runtime-contract.ts","../src/split-resolved-gateway-secrets.ts"],"sourcesContent":["export const gatewayTypeValues = ['openclaw', 'worker'] as const;\n\nexport type GatewayType = (typeof gatewayTypeValues)[number];\n\nexport function buildGatewaySessionLabel(projectNamespace: string, zoneId: string): string {\n\treturn `${projectNamespace}:${zoneId}:gateway`;\n}\n\nexport function buildToolSessionLabel(\n\tprojectNamespace: string,\n\tzoneId: string,\n\ttcpSlot: number,\n): string {\n\treturn `${projectNamespace}:${zoneId}:tool:${tcpSlot}`;\n}\n","import type { SecretSpec } from '@agent-vm/gondolin-adapter';\n\nimport type { GatewayZoneConfig } from './gateway-lifecycle.js';\n\nexport interface SplitResolvedGatewaySecretsResult {\n\treadonly environmentSecrets: Record<string, string>;\n\treadonly mediatedSecrets: Record<string, SecretSpec>;\n}\n\nexport function splitResolvedGatewaySecrets(\n\tzone: GatewayZoneConfig,\n\tresolvedSecrets: Record<string, string>,\n): SplitResolvedGatewaySecretsResult {\n\tconst environmentSecrets: Record<string, string> = {};\n\tconst mediatedSecrets: Record<string, SecretSpec> = {};\n\n\tfor (const [secretName, secretValue] of Object.entries(resolvedSecrets)) {\n\t\tconst secretConfig = zone.secrets[secretName];\n\t\tif (!secretConfig) {\n\t\t\tprocess.stderr.write(\n\t\t\t\t`[split-resolved-gateway-secrets] Secret '${secretName}' was resolved but has no matching zone secret config.\\n`,\n\t\t\t);\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (secretConfig.injection === 'http-mediation' && secretConfig.hosts) {\n\t\t\tmediatedSecrets[secretName] = {\n\t\t\t\thosts: [...secretConfig.hosts],\n\t\t\t\tvalue: secretValue,\n\t\t\t};\n\t\t\tcontinue;\n\t\t}\n\n\t\tenvironmentSecrets[secretName] = secretValue;\n\t}\n\n\treturn { environmentSecrets, mediatedSecrets };\n}\n"],"mappings":";AAAA,MAAa,oBAAoB,CAAC,YAAY,SAAS;AAIvD,SAAgB,yBAAyB,kBAA0B,QAAwB;CAC1F,OAAO,GAAG,iBAAiB,GAAG,OAAO;;AAGtC,SAAgB,sBACf,kBACA,QACA,SACS;CACT,OAAO,GAAG,iBAAiB,GAAG,OAAO,QAAQ;;;;ACJ9C,SAAgB,4BACf,MACA,iBACoC;CACpC,MAAM,qBAA6C,EAAE;CACrD,MAAM,kBAA8C,EAAE;CAEtD,KAAK,MAAM,CAAC,YAAY,gBAAgB,OAAO,QAAQ,gBAAgB,EAAE;EACxE,MAAM,eAAe,KAAK,QAAQ;EAClC,IAAI,CAAC,cAAc;GAClB,QAAQ,OAAO,MACd,4CAA4C,WAAW,0DACvD;GACD;;EAGD,IAAI,aAAa,cAAc,oBAAoB,aAAa,OAAO;GACtE,gBAAgB,cAAc;IAC7B,OAAO,CAAC,GAAG,aAAa,MAAM;IAC9B,OAAO;IACP;GACD;;EAGD,mBAAmB,cAAc;;CAGlC,OAAO;EAAE;EAAoB;EAAiB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-vm/gateway-interface",
-  "version": "0.0.56",
+  "version": "0.0.57",
   "description": "Shared TypeScript interfaces for VM gateway lifecycles, VmSpec, and ProcessSpec.",
   "homepage": "https://github.com/ShravanSunder/agent-vm#readme",
   "bugs": {
@@ -29,7 +29,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@agent-vm/gondolin-adapter": "0.0.56"
+    "@agent-vm/gondolin-adapter": "0.0.57"
   },
   "scripts": {
     "build": "tsdown",