@agentworkforce/deploy 0.0.0

package/dist/bundle.d.ts

@@ -0,0 +1,22 @@
+import type { BundleStager } from './types.js';
+/**
+ * Stage a deploy-ready bundle to `input.outDir`. Output layout:
+ *
+ *   <outDir>/
+ *     agent.bundle.mjs       — esbuilt user `onEvent` (default-exported handler)
+ *     runner.mjs             — entry that imports the runtime + bundle + persona
+ *     persona.json           — verbatim copy of the input persona spec
+ *     package.json           — minimal manifest pinning the runtime dep
+ *
+ * The bundle is idempotent: re-running with the same `outDir` overwrites
+ * the four files cleanly. Auxiliary files left behind from earlier runs
+ * are not touched (callers control the directory lifecycle).
+ *
+ * Externals: every `node:*` builtin and `@agentworkforce/runtime` itself
+ * are left external so the runner can resolve them at execution time.
+ * Bundling the runtime in would require shipping the runtime sources into
+ * every sandbox; the chosen split keeps the bundle small and lets ops
+ * patch the runtime without rebuilding every persona.
+ */
+export declare const bundleStager: BundleStager;
+//# sourceMappingURL=bundle.d.ts.map

package/dist/bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.d.ts","sourceRoot":"","sources":["../src/bundle.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAkC,YAAY,EAAE,MAAM,YAAY,CAAC;AAS/E;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,YAAY,EAAE,YAyD1B,CAAC"}

package/dist/bundle.js

@@ -0,0 +1,132 @@
+import { mkdir, writeFile, stat } from 'node:fs/promises';
+import path from 'node:path';
+import { build } from 'esbuild';
+/**
+ * Versioned identifier embedded in the generated runner so a future
+ * bundle reader can detect format drift. Bumped whenever the runner
+ * shape changes incompatibly.
+ */
+const RUNNER_FORMAT_VERSION = 1;
+/**
+ * Stage a deploy-ready bundle to `input.outDir`. Output layout:
+ *
+ *   <outDir>/
+ *     agent.bundle.mjs       — esbuilt user `onEvent` (default-exported handler)
+ *     runner.mjs             — entry that imports the runtime + bundle + persona
+ *     persona.json           — verbatim copy of the input persona spec
+ *     package.json           — minimal manifest pinning the runtime dep
+ *
+ * The bundle is idempotent: re-running with the same `outDir` overwrites
+ * the four files cleanly. Auxiliary files left behind from earlier runs
+ * are not touched (callers control the directory lifecycle).
+ *
+ * Externals: every `node:*` builtin and `@agentworkforce/runtime` itself
+ * are left external so the runner can resolve them at execution time.
+ * Bundling the runtime in would require shipping the runtime sources into
+ * every sandbox; the chosen split keeps the bundle small and lets ops
+ * patch the runtime without rebuilding every persona.
+ */
+export const bundleStager = {
+    async stage(input) {
+        await mkdir(input.outDir, { recursive: true });
+        const onEventAbs = path.resolve(path.dirname(input.personaPath), input.persona.onEvent ?? '');
+        if (!input.persona.onEvent) {
+            throw new Error(`bundle: persona "${input.persona.id}" is missing onEvent (cannot stage a bundle without a handler)`);
+        }
+        await assertReadableFile(onEventAbs, `persona "${input.persona.id}" onEvent`);
+        const bundlePath = path.join(input.outDir, 'agent.bundle.mjs');
+        const runnerPath = path.join(input.outDir, 'runner.mjs');
+        const personaCopyPath = path.join(input.outDir, 'persona.json');
+        const packageJsonPath = path.join(input.outDir, 'package.json');
+        await build({
+            entryPoints: [onEventAbs],
+            outfile: bundlePath,
+            bundle: true,
+            format: 'esm',
+            platform: 'node',
+            target: 'node20',
+            sourcemap: 'inline',
+            logLevel: 'silent',
+            minify: input.bundlerOptions?.minify ?? false,
+            // Resolve TypeScript / JS extensions without forcing the user to
+            // write `.ts`-suffixed imports in their handler file.
+            resolveExtensions: ['.ts', '.mts', '.cts', '.tsx', '.js', '.mjs', '.cjs', '.jsx', '.json'],
+            external: [
+                // Runtime stays external — see file header comment.
+                '@agentworkforce/runtime',
+                '@agentworkforce/runtime/raw',
+                // Node builtins must never be bundled.
+                'node:*'
+            ]
+        });
+        await writeFile(personaCopyPath, JSON.stringify(input.persona, null, 2) + '\n', 'utf8');
+        await writeFile(packageJsonPath, buildPackageJson(input.persona.id), 'utf8');
+        await writeFile(runnerPath, renderRunner(), 'utf8');
+        const bundleStat = await stat(bundlePath);
+        const runnerStat = await stat(runnerPath);
+        const sizeBytes = bundleStat.size + runnerStat.size;
+        return {
+            personaCopyPath,
+            runnerPath,
+            bundlePath,
+            packageJsonPath,
+            sizeBytes
+        };
+    }
+};
+function buildPackageJson(personaId) {
+    return (JSON.stringify({
+        name: `@agentworkforce/deployed-${personaId}`,
+        private: true,
+        version: '0.0.0',
+        type: 'module',
+        main: './runner.mjs',
+        dependencies: {
+            '@agentworkforce/runtime': '*'
+        },
+        comment: 'Generated by workforce deploy. The runtime dep is pinned to "*" because deploys resolve the runtime version from the active workspace.'
+    }, null, 2) + '\n');
+}
+function renderRunner() {
+    return `// Generated by @agentworkforce/deploy. Format version ${RUNNER_FORMAT_VERSION}.
+// Do not edit by hand — \`workforce deploy\` overwrites this file on every stage.
+//
+// The runner imports the user's handler from the esbuilt bundle, the
+// parsed persona spec from the verbatim JSON copy, and the runtime's
+// \`startRunner\` to drive the dispatch loop. Envelopes arrive on stdin
+// as NDJSON; structured logs go to stdout.
+
+import { createRequire } from 'node:module';
+import { startRunner } from '@agentworkforce/runtime/runner';
+import { handler as wrapHandler } from '@agentworkforce/runtime';
+import * as userModule from './agent.bundle.mjs';
+
+const require = createRequire(import.meta.url);
+const persona = require('./persona.json');
+
+const candidate = userModule.default ?? userModule.handler;
+if (typeof candidate !== 'function') {
+  throw new TypeError(
+    \`workforce deploy bundle: \${persona.id} did not default-export a function. Did you forget \\\`export default handler(...)\\\`?\`
+  );
+}
+const handler = candidate.__workforceHandler ? candidate : wrapHandler(candidate);
+
+await startRunner({ persona, handler });
+`;
+}
+async function assertReadableFile(abs, label) {
+    try {
+        const st = await stat(abs);
+        if (!st.isFile()) {
+            throw new Error(`${label}: ${abs} is not a regular file`);
+        }
+    }
+    catch (err) {
+        if (err.code === 'ENOENT') {
+            throw new Error(`${label}: file not found at ${abs}`);
+        }
+        throw err;
+    }
+}
+//# sourceMappingURL=bundle.js.map

package/dist/bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.js","sourceRoot":"","sources":["../src/bundle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAGhC;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEhC;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,YAAY,GAAiB;IACxC,KAAK,CAAC,KAAK,CAAC,KAAuB;QACjC,MAAM,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE/C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAC9F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,oBAAoB,KAAK,CAAC,OAAO,CAAC,EAAE,gEAAgE,CACrG,CAAC;QACJ,CAAC;QACD,MAAM,kBAAkB,CAAC,UAAU,EAAE,YAAY,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAC;QAE9E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACzD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAChE,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAEhE,MAAM,KAAK,CAAC;YACV,WAAW,EAAE,CAAC,UAAU,CAAC;YACzB,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,QAAQ;YACnB,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,KAAK,CAAC,cAAc,EAAE,MAAM,IAAI,KAAK;YAC7C,iEAAiE;YACjE,sDAAsD;YACtD,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC;YAC1F,QAAQ,EAAE;gBACR,oDAAoD;gBACpD,yBAAyB;gBACzB,6BAA6B;gBAC7B,uCAAuC;gBACvC,QAAQ;aACT;SACF,CAAC,CAAC;QAEH,MAAM,SAAS,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QAExF,MAAM,SAAS,CAAC,eAAe,EAAE,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QAE7E,MAAM,SAAS,CAAC,UAAU,EAAE,YAAY,EAAE,EAAE,MAAM,CAAC,CAAC;QAEpD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAEpD,OAAO;YACL,eAAe;YACf,UAAU;YACV,UAAU;YACV,eAAe;YACf,SAAS;SACV,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,SAAS,gBAAgB,CAAC,SAAiB;IACzC,OAAO,CACL,IAAI,CAAC,SAAS,CACZ;QACE,IAAI,EAAE,4BAA4B,SAAS,EAAE;QAC7C,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,cAAc;QACpB,YAAY,EAAE;YACZ,yBAAyB,EAAE,GAAG;SAC/B;QACD,OAAO,EACL,wIAAwI;KAC3I,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,CACT,CAAC;AACJ,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,0DAA0D,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;CAyBvF,CAAC;AACF,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,GAAW,EAAE,KAAa;IAC1D,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,GAAG,wBAAwB,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,uBAAuB,GAAG,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/bundle.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=bundle.test.d.ts.map

package/dist/bundle.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.test.d.ts","sourceRoot":"","sources":["../src/bundle.test.ts"],"names":[],"mappings":""}

package/dist/bundle.test.js

@@ -0,0 +1,92 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+import os from 'node:os';
+import { bundleStager } from './bundle.js';
+function persona(overrides = {}) {
+    return {
+        id: 'bundle-fixture',
+        intent: 'documentation',
+        tags: ['documentation'],
+        description: 'fixture for bundle tests',
+        skills: [],
+        harness: 'claude',
+        model: 'anthropic/claude-3-5-sonnet',
+        systemPrompt: 'be helpful',
+        harnessSettings: { reasoning: 'medium', timeoutSeconds: 300 },
+        cloud: true,
+        schedules: [{ name: 'weekly', cron: '0 9 * * 6' }],
+        onEvent: './agent.ts',
+        ...overrides
+    };
+}
+test('bundleStager produces an executable, importable bundle from a real onEvent file', async () => {
+    const dir = await mkdtemp(path.join(os.tmpdir(), 'wf-bundle-'));
+    try {
+        const personaPath = path.join(dir, 'persona.json');
+        const personaSpec = persona();
+        await writeFile(personaPath, JSON.stringify(personaSpec, null, 2), 'utf8');
+        await writeFile(path.join(dir, 'agent.ts'), [
+            "import { handler } from '@agentworkforce/runtime';",
+            '',
+            'export default handler(async (ctx, event) => {',
+            "  ctx.log('info', 'fixture.handler.fired', { eventId: event.id });",
+            '});',
+            ''
+        ].join('\n'), 'utf8');
+        const outDir = path.join(dir, 'build');
+        const result = await bundleStager.stage({
+            personaPath,
+            persona: personaSpec,
+            outDir
+        });
+        assert.equal(result.personaCopyPath, path.join(outDir, 'persona.json'));
+        assert.equal(result.runnerPath, path.join(outDir, 'runner.mjs'));
+        assert.equal(result.bundlePath, path.join(outDir, 'agent.bundle.mjs'));
+        assert.equal(result.packageJsonPath, path.join(outDir, 'package.json'));
+        assert.ok(result.sizeBytes > 0);
+        // persona.json round-trips verbatim
+        const personaCopy = JSON.parse(await readFile(result.personaCopyPath, 'utf8'));
+        assert.equal(personaCopy.id, personaSpec.id);
+        assert.equal(personaCopy.onEvent, './agent.ts');
+        // runner imports the expected entry points
+        const runnerSource = await readFile(result.runnerPath, 'utf8');
+        assert.match(runnerSource, /from '@agentworkforce\/runtime\/runner'/);
+        assert.match(runnerSource, /from '@agentworkforce\/runtime'/);
+        assert.match(runnerSource, /import \* as userModule from '\.\/agent\.bundle\.mjs'/);
+        // bundle output is ES module shape and references the runtime as external
+        const bundleSource = await readFile(result.bundlePath, 'utf8');
+        assert.match(bundleSource, /^import /m);
+        assert.match(bundleSource, /from\s+['"]@agentworkforce\/runtime['"]/);
+    }
+    finally {
+        await rm(dir, { recursive: true, force: true });
+    }
+});
+test('bundleStager throws when onEvent file is missing', async () => {
+    const dir = await mkdtemp(path.join(os.tmpdir(), 'wf-bundle-'));
+    try {
+        const personaPath = path.join(dir, 'persona.json');
+        const personaSpec = persona({ onEvent: './missing.ts' });
+        await writeFile(personaPath, JSON.stringify(personaSpec, null, 2), 'utf8');
+        await assert.rejects(() => bundleStager.stage({ personaPath, persona: personaSpec, outDir: path.join(dir, 'build') }), /file not found/);
+    }
+    finally {
+        await rm(dir, { recursive: true, force: true });
+    }
+});
+test('bundleStager throws when persona has no onEvent', async () => {
+    const dir = await mkdtemp(path.join(os.tmpdir(), 'wf-bundle-'));
+    try {
+        const personaPath = path.join(dir, 'persona.json');
+        const personaSpec = persona();
+        delete personaSpec.onEvent;
+        await writeFile(personaPath, JSON.stringify(personaSpec, null, 2), 'utf8');
+        await assert.rejects(() => bundleStager.stage({ personaPath, persona: personaSpec, outDir: path.join(dir, 'build') }), /missing onEvent/);
+    }
+    finally {
+        await rm(dir, { recursive: true, force: true });
+    }
+});
+//# sourceMappingURL=bundle.test.js.map

package/dist/bundle.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.test.js","sourceRoot":"","sources":["../src/bundle.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,SAAS,OAAO,CAAC,YAAkC,EAAE;IACnD,OAAO;QACL,EAAE,EAAE,gBAAgB;QACpB,MAAM,EAAE,eAAe;QACvB,IAAI,EAAE,CAAC,eAAe,CAAC;QACvB,WAAW,EAAE,0BAA0B;QACvC,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,QAAQ;QACjB,KAAK,EAAE,6BAA6B;QACpC,YAAY,EAAE,YAAY;QAC1B,eAAe,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,EAAE;QAC7D,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAClD,OAAO,EAAE,YAAY;QACrB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,IAAI,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;IACjG,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG,OAAO,EAAE,CAAC;QAC9B,MAAM,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC3E,MAAM,SAAS,CACb,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAC1B;YACE,oDAAoD;YACpD,EAAE;YACF,gDAAgD;YAChD,oEAAoE;YACpE,KAAK;YACL,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,MAAM,CACP,CAAC;QAEF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC;YACtC,WAAW;YACX,OAAO,EAAE,WAAW;YACpB,MAAM;SACP,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;QACxE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;QACxE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAEhC,oCAAoC;QACpC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/E,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAEhD,2CAA2C;QAC3C,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,yCAAyC,CAAC,CAAC;QACtE,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,iCAAiC,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,uDAAuD,CAAC,CAAC;QAEpF,0EAA0E;QAC1E,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,yCAAyC,CAAC,CAAC;IACxE,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;IAClE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG,OAAO,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;QACzD,MAAM,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC3E,MAAM,MAAM,CAAC,OAAO,CAClB,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,EAChG,gBAAgB,CACjB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;IACjE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG,OAAO,EAAE,CAAC;QAC9B,OAAQ,WAAoC,CAAC,OAAO,CAAC;QACrD,MAAM,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC3E,MAAM,MAAM,CAAC,OAAO,CAClB,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,EAChG,iBAAiB,CAClB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/connect.d.ts

@@ -0,0 +1,81 @@
+import type { PersonaSpec } from '@agentworkforce/persona-kit';
+import type { DeployIO, IntegrationConnectOutcome } from './types.js';
+/**
+ * Resolver the orchestrator uses to check + connect a Relayfile-backed
+ * provider for the active workspace. The deploy package does not depend
+ * on `@relayfile/sdk` directly; the CLI dispatches the real implementation
+ * (which imports the SDK) into this contract.
+ *
+ * Decoupling this keeps the orchestrator unit-testable without spinning
+ * up Relayfile and keeps the SDK out of the deploy package's transitive
+ * dep tree (smaller bin, faster install).
+ */
+export interface IntegrationConnectResolver {
+    /** Is the provider already linked to the workspace? */
+    isConnected(args: {
+        workspace: string;
+        provider: string;
+    }): Promise<boolean>;
+    /** Run the browser-based OAuth flow and resolve when the user finishes. */
+    connect(args: {
+        workspace: string;
+        provider: string;
+    }): Promise<{
+        connectionId: string;
+    }>;
+}
+/**
+ * Provider linker for `useSubscription: true` personas — connects the
+ * user's chosen LLM provider so cloud inference is billed against their
+ * subscription rather than workforce.
+ */
+export interface ProviderSubscriptionResolver {
+    isConnected(args: {
+        workspace: string;
+        providerHint?: string;
+    }): Promise<boolean>;
+    connect(args: {
+        workspace: string;
+        providerHint?: string;
+    }): Promise<{
+        provider: string;
+    }>;
+}
+/**
+ * Resolver backed by env vars. Used as the default when no higher-level
+ * implementation is plugged in. `isConnected` returns true exactly when
+ * one of the two recognized env vars is set for the provider; `connect`
+ * is a no-op that records the env-resolved nature of the connection so
+ * the orchestrator's flow stays uniform across resolvers.
+ */
+export declare function envIntegrationResolver(): IntegrationConnectResolver;
+export interface ConnectAllInput {
+    persona: PersonaSpec;
+    workspace: string;
+    noConnect: boolean;
+    io: DeployIO;
+    integrations: IntegrationConnectResolver;
+    /** Required only when persona.useSubscription is true. */
+    subscription?: ProviderSubscriptionResolver;
+}
+export interface ConnectAllResult {
+    outcomes: IntegrationConnectOutcome[];
+    /** Provider the subscription was bound to, when applicable. */
+    subscriptionProvider?: string;
+}
+/**
+ * Walk the persona's declared integrations and ensure each is connected.
+ * Per the deploy-v1 spec, the orchestrator prompts before each provider's
+ * connect flow ("Connect github now? (Y/n)") so users running on a shared
+ * machine don't have surprise browser pops.
+ *
+ * Behavior summary:
+ *   - integrations: {} or undefined → returns immediately, no prompts
+ *   - already-connected provider → no prompt; emits `already-connected`
+ *   - not connected + noConnect=true → fails the deploy with a clear message
+ *   - not connected + noConnect=false → prompts; on yes runs `connect`,
+ *     on no marks `skipped`. The orchestrator decides what to do with
+ *     `skipped` outcomes (today: fails the deploy at the call site).
+ */
+export declare function connectIntegrations(input: ConnectAllInput): Promise<ConnectAllResult>;
+//# sourceMappingURL=connect.d.ts.map

package/dist/connect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../src/connect.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,KAAK,EAAE,QAAQ,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAkBtE;;;;;;;;;GASG;AACH,MAAM,WAAW,0BAA0B;IACzC,uDAAuD;IACvD,WAAW,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7E,2EAA2E;IAC3E,OAAO,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC3F;AAED;;;;GAIG;AACH,MAAM,WAAW,4BAA4B;IAC3C,WAAW,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClF,OAAO,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC5F;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,IAAI,0BAA0B,CAcnE;AAUD,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,EAAE,EAAE,QAAQ,CAAC;IACb,YAAY,EAAE,0BAA0B,CAAC;IACzC,0DAA0D;IAC1D,YAAY,CAAC,EAAE,4BAA4B,CAAC;CAC7C;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,yBAAyB,EAAE,CAAC;IACtC,+DAA+D;IAC/D,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA0F3F"}

package/dist/connect.js

@@ -0,0 +1,127 @@
+/**
+ * Provider env-var conventions the deploy CLI checks when no higher-level
+ * integration resolver is supplied. The convention is:
+ *
+ *   - `WORKFORCE_INTEGRATION_<PROVIDER>_TOKEN` — direct provider token
+ *     (e.g. `WORKFORCE_INTEGRATION_GITHUB_TOKEN`). Treated as "connected"
+ *     when present and non-empty.
+ *   - or `WORKFORCE_INTEGRATION_<PROVIDER>_CONNECTION_ID` — Relayfile
+ *     connection id, resolved to a scoped token at runtime by the agent.
+ *
+ * The connect side is a no-op for the env path: there is nothing to
+ * authenticate interactively. Authors plug a higher-level resolver into
+ * `DeployResolvers.integrations` once Relayfile's OAuth surface is wired.
+ */
+const PROVIDER_ENV_PREFIX = 'WORKFORCE_INTEGRATION_';
+/**
+ * Resolver backed by env vars. Used as the default when no higher-level
+ * implementation is plugged in. `isConnected` returns true exactly when
+ * one of the two recognized env vars is set for the provider; `connect`
+ * is a no-op that records the env-resolved nature of the connection so
+ * the orchestrator's flow stays uniform across resolvers.
+ */
+export function envIntegrationResolver() {
+    return {
+        async isConnected({ provider }) {
+            return providerHasEnvCredentials(provider);
+        },
+        async connect({ provider }) {
+            if (!providerHasEnvCredentials(provider)) {
+                throw new Error(`env resolver: ${provider} is not connected. Set ${PROVIDER_ENV_PREFIX}${provider.toUpperCase()}_TOKEN or ${PROVIDER_ENV_PREFIX}${provider.toUpperCase()}_CONNECTION_ID, then re-run deploy. (Higher-level resolvers — e.g. a Relayfile OAuth flow — plug in via DeployResolvers.integrations.)`);
+            }
+            return { connectionId: `env:${provider}` };
+        }
+    };
+}
+function providerHasEnvCredentials(provider) {
+    const upper = provider.toUpperCase();
+    return Boolean(process.env[`${PROVIDER_ENV_PREFIX}${upper}_TOKEN`] ||
+        process.env[`${PROVIDER_ENV_PREFIX}${upper}_CONNECTION_ID`]);
+}
+/**
+ * Walk the persona's declared integrations and ensure each is connected.
+ * Per the deploy-v1 spec, the orchestrator prompts before each provider's
+ * connect flow ("Connect github now? (Y/n)") so users running on a shared
+ * machine don't have surprise browser pops.
+ *
+ * Behavior summary:
+ *   - integrations: {} or undefined → returns immediately, no prompts
+ *   - already-connected provider → no prompt; emits `already-connected`
+ *   - not connected + noConnect=true → fails the deploy with a clear message
+ *   - not connected + noConnect=false → prompts; on yes runs `connect`,
+ *     on no marks `skipped`. The orchestrator decides what to do with
+ *     `skipped` outcomes (today: fails the deploy at the call site).
+ */
+export async function connectIntegrations(input) {
+    const integrations = input.persona.integrations ?? {};
+    const outcomes = [];
+    for (const provider of Object.keys(integrations)) {
+        const connected = await input.integrations
+            .isConnected({ workspace: input.workspace, provider })
+            .catch((err) => {
+            input.io.warn(`failed to check connection status for ${provider}: ${err instanceof Error ? err.message : String(err)}`);
+            return false;
+        });
+        if (connected) {
+            input.io.info(`integrations.${provider}: already connected`);
+            outcomes.push({ provider, status: 'already-connected' });
+            continue;
+        }
+        if (input.noConnect) {
+            input.io.error(`integrations.${provider}: not connected, and --no-connect was passed`);
+            outcomes.push({
+                provider,
+                status: 'failed',
+                message: 'not connected (--no-connect was set)'
+            });
+            continue;
+        }
+        const shouldConnect = await input.io.confirm(`Connect ${provider} now? (opens browser)`, { defaultValue: true });
+        if (!shouldConnect) {
+            outcomes.push({ provider, status: 'skipped', message: 'user declined to connect' });
+            continue;
+        }
+        try {
+            const result = await input.integrations.connect({ workspace: input.workspace, provider });
+            input.io.info(`integrations.${provider}: connected (${result.connectionId})`);
+            outcomes.push({ provider, status: 'connected-now' });
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            input.io.error(`integrations.${provider}: connect failed: ${message}`);
+            outcomes.push({ provider, status: 'failed', message });
+        }
+    }
+    // Track the subscription provider only when this deploy actually
+    // connected one — already-connected cases stay logged but do not
+    // leak a sentinel string up to callers reading `subscriptionProvider`.
+    let subscriptionProvider;
+    if (input.persona.useSubscription) {
+        if (!input.subscription) {
+            throw new Error('persona has useSubscription:true but no subscription resolver was supplied to the deploy orchestrator');
+        }
+        const isConn = await input.subscription
+            .isConnected({ workspace: input.workspace })
+            .catch(() => false);
+        if (!isConn) {
+            if (input.noConnect) {
+                throw new Error('persona requires a subscription provider connection, but --no-connect was passed');
+            }
+            const ok = await input.io.confirm('persona has useSubscription:true — connect your LLM provider now?', { defaultValue: true });
+            if (!ok) {
+                throw new Error('user declined the subscription provider connect; deploy aborted');
+            }
+            const result = await input.subscription.connect({ workspace: input.workspace });
+            subscriptionProvider = result.provider;
+            input.io.info(`subscription: connected (${result.provider})`);
+        }
+        else {
+            input.io.info('subscription: already connected');
+        }
+    }
+    return {
+        outcomes,
+        ...(subscriptionProvider ? { subscriptionProvider } : {})
+    };
+}
+//# sourceMappingURL=connect.js.map

package/dist/connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.js","sourceRoot":"","sources":["../src/connect.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;GAaG;AACH,MAAM,mBAAmB,GAAG,wBAAwB,CAAC;AA6BrD;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB;IACpC,OAAO;QACL,KAAK,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE;YAC5B,OAAO,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QAC7C,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE;YACxB,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzC,MAAM,IAAI,KAAK,CACb,iBAAiB,QAAQ,0BAA0B,mBAAmB,GAAG,QAAQ,CAAC,WAAW,EAAE,aAAa,mBAAmB,GAAG,QAAQ,CAAC,WAAW,EAAE,wIAAwI,CACjS,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,YAAY,EAAE,OAAO,QAAQ,EAAE,EAAE,CAAC;QAC7C,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,QAAgB;IACjD,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO,OAAO,CACZ,OAAO,CAAC,GAAG,CAAC,GAAG,mBAAmB,GAAG,KAAK,QAAQ,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,GAAG,mBAAmB,GAAG,KAAK,gBAAgB,CAAC,CAC9D,CAAC;AACJ,CAAC;AAkBD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAsB;IAC9D,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;IACtD,MAAM,QAAQ,GAAgC,EAAE,CAAC;IAEjD,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,YAAY;aACvC,WAAW,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC;aACrD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,KAAK,CAAC,EAAE,CAAC,IAAI,CACX,yCAAyC,QAAQ,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACzG,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QAEL,IAAI,SAAS,EAAE,CAAC;YACd,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,QAAQ,qBAAqB,CAAC,CAAC;YAC7D,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACzD,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACpB,KAAK,CAAC,EAAE,CAAC,KAAK,CACZ,gBAAgB,QAAQ,8CAA8C,CACvE,CAAC;YACF,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ;gBACR,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,sCAAsC;aAChD,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,OAAO,CAC1C,WAAW,QAAQ,uBAAuB,EAC1C,EAAE,YAAY,EAAE,IAAI,EAAE,CACvB,CAAC;QACF,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;YACpF,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC1F,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,QAAQ,gBAAgB,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC;YAC9E,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,QAAQ,qBAAqB,OAAO,EAAE,CAAC,CAAC;YACvE,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,iEAAiE;IACjE,uEAAuE;IACvE,IAAI,oBAAwC,CAAC;IAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,uGAAuG,CACxG,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,YAAY;aACpC,WAAW,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;aAC3C,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,OAAO,CAC/B,mEAAmE,EACnE,EAAE,YAAY,EAAE,IAAI,EAAE,CACvB,CAAC;YACF,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;YACrF,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YAChF,oBAAoB,GAAG,MAAM,CAAC,QAAQ,CAAC;YACvC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,4BAA4B,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;QAChE,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ;QACR,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC"}

package/dist/deploy.d.ts

@@ -0,0 +1,50 @@
+import { type IntegrationConnectResolver, type ProviderSubscriptionResolver } from './connect.js';
+import { type WorkspaceAuth } from './login.js';
+import type { BundleStager, DeployMode, DeployOptions, DeployResult, ModeLauncher } from './types.js';
+/**
+ * External-resolver bundle the orchestrator depends on. Each field has a
+ * real default backed by env (or, for `bundle`/`modes`, the real
+ * launchers). Callers override individual fields to plug in higher-level
+ * implementations: a CLI dispatch case may pass an `IntegrationResolver`
+ * backed by `@relayfile/sdk`'s OAuth flow once it is available, tests
+ * pass deterministic in-memory fakes.
+ */
+export interface DeployResolvers {
+    workspaceAuth?: WorkspaceAuth;
+    integrations?: IntegrationConnectResolver;
+    subscription?: ProviderSubscriptionResolver;
+    bundle?: BundleStager;
+    modes?: Partial<Record<DeployMode, ModeLauncher>>;
+}
+/**
+ * Pick the run mode for this deploy. Per the deploy-v1 spec:
+ *   - Explicit `--mode` always wins.
+ *   - Otherwise `--mode sandbox` is the default when Daytona creds resolve
+ *     (BYO env or workforce-managed both count as "resolved" here; the
+ *     sandbox launcher itself decides which auth path to use).
+ *   - Otherwise fall back to `--mode dev`.
+ *
+ * The orchestrator doesn't probe the cloud endpoint here — `--mode cloud`
+ * stays opt-in until the M4 endpoint is live.
+ */
+export declare function pickMode(opts: DeployOptions): DeployMode;
+/**
+ * Top-level entry. The CLI dispatch case calls this with parsed options
+ * and resolvers. Returns a `DeployResult` summarizing the deploy; on
+ * failure, throws with an actionable message (no half-deploys).
+ *
+ * Step ordering — see `docs/plans/deploy-v1.md` §5:
+ *   1. Preflight persona (parse, lint, onEvent on disk).
+ *   2. Resolve workspace + token.
+ *   3. Connect integrations (prompt per provider).
+ *   4. Stage bundle to `.workforce/build/<id>/`.
+ *   5. Launch in the resolved mode.
+ *   6. Return the handle + summary.
+ *
+ * `dryRun: true` exits cleanly after step 1, returning a minimal result
+ * with the warnings collected so far.
+ *
+ * `bundleOut: <dir>` runs steps 1-4 then exits, skipping launch.
+ */
+export declare function deploy(opts: DeployOptions, resolvers?: DeployResolvers): Promise<DeployResult>;
+//# sourceMappingURL=deploy.d.ts.map

package/dist/deploy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../src/deploy.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,EAClC,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAoB,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAKlE,OAAO,KAAK,EACV,YAAY,EACZ,UAAU,EACV,aAAa,EACb,YAAY,EACZ,YAAY,EACb,MAAM,YAAY,CAAC;AAEpB;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,YAAY,CAAC,EAAE,0BAA0B,CAAC;IAC1C,YAAY,CAAC,EAAE,4BAA4B,CAAC;IAC5C,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,KAAK,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;CACnD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,UAAU,CAQxD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,GAAE,eAAoB,GAAG,OAAO,CAAC,YAAY,CAAC,CAsHxG"}