@assemblyline-agents/cli 0.1.0

package/dist/auth.js

@@ -0,0 +1,74 @@
+import { fileURLToPath } from "node:url";
+import { compileAgent } from "@assemblyline-agents/compiler";
+import { adapterProviderMetadata } from "@assemblyline-agents/core";
+import { resolveProvider } from "@assemblyline-agents/node";
+import { booleanFlag, stringFlag } from "./args.js";
+import { resolveDeployDefinition, resolveDeployEnvironment } from "./deploy-definition.js";
+/**
+ * Bootstrap hosted Codex OAuth through the selected deployment publisher. The
+ * remote Codex CLI owns the device exchange and credential cache; Assembly Line never
+ * reads, copies, prints, or stores the resulting OAuth tokens.
+ */
+export async function runCodexAuthCommand(agentRoot, parsed) {
+    const manifest = compileAgent({ root: agentRoot });
+    if (!manifest.agent.model.startsWith("openai-codex/")) {
+        throw new Error(`Agent model ${manifest.agent.model} does not use the openai-codex provider.`);
+    }
+    const target = stringFlag(parsed, "target") ?? manifest.gateway.deploy?.kind ?? "local";
+    const definition = resolveDeployDefinition(manifest, target, parsed);
+    const metadata = adapterProviderMetadata(target, "deploy")
+        ?? manifest.providerMetadata?.find((entry) => entry.kind === target && entry.role === "deploy");
+    const capabilities = new Set(metadata?.capabilities ?? []);
+    const missing = ["persistent-storage", "remote-exec"].filter((capability) => !capabilities.has(capability));
+    if (missing.length > 0) {
+        throw new Error(`Deploy target ${target} cannot host Codex OAuth because it lacks: ${missing.join(", ")}.`);
+    }
+    const plan = {
+        target,
+        environment: resolveDeployEnvironment(manifest, parsed),
+        agentRevision: manifest.agentRevision
+    };
+    const artifact = { root: agentRoot, manifest };
+    const publisher = await resolveProvider("deploy", definition, {
+        env: process.env,
+        fetch,
+        manifest,
+        artifactRoot: agentRoot,
+        providerRoot: fileURLToPath(new URL("..", import.meta.url)),
+        devMode: false
+    });
+    if (!publisher.runRemoteCommand) {
+        throw new Error(`Deploy target ${target} advertises remote execution but its publisher does not implement runRemoteCommand().`);
+    }
+    const remotePublisher = publisher;
+    const release = booleanFlag(parsed, "prepared") ? "prepared" : "active";
+    if (booleanFlag(parsed, "status")) {
+        await assertRemoteCodexLogin(remotePublisher, artifact, plan, false, release);
+        console.log(`Codex OAuth is ready on ${target} and its credential cache is persistent.`);
+        return;
+    }
+    if (!booleanFlag(parsed, "force") && await remoteCodexLoginReady(remotePublisher, artifact, plan, release)) {
+        console.log(`Codex OAuth is already ready on ${target} and its credential cache is persistent.`);
+        return;
+    }
+    console.log(`Starting Codex device authentication on ${target}. Complete the browser prompt; no OAuth token is copied through Assembly Line or deployment secrets.`);
+    const login = await remotePublisher.runRemoteCommand(artifact, plan, ["codex", "login", "--device-auth"], { interactive: true, release });
+    if (login.exitCode !== 0)
+        throw new Error(`Remote Codex device authentication failed with exit code ${login.exitCode}.`);
+    await assertRemoteCodexLogin(remotePublisher, artifact, plan, true, release);
+    console.log(`Codex OAuth device authentication completed and persists on ${target}.`);
+}
+async function remoteCodexLoginReady(publisher, artifact, plan, release) {
+    const result = await publisher.runRemoteCommand(artifact, plan, ["codex", "login", "status"], {
+        silent: true,
+        release
+    });
+    return result.exitCode === 0;
+}
+async function assertRemoteCodexLogin(publisher, artifact, plan, silent, release) {
+    const result = await publisher.runRemoteCommand(artifact, plan, ["codex", "login", "status"], { silent, release });
+    if (result.exitCode !== 0) {
+        throw new Error(`Codex authentication is not ready on ${plan.target}. Run \`assembly-line auth codex\` and complete device authentication.`);
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EACL,uBAAuB,EAIxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,UAAU,EAAmB,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAE3F;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,SAAiB,EAAE,MAAkB;IAC7E,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,eAAe,QAAQ,CAAC,KAAK,CAAC,KAAK,0CAA0C,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,IAAI,OAAO,CAAC;IACxF,MAAM,UAAU,GAAG,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,uBAAuB,CAAC,MAAM,EAAE,QAAQ,CAAC;WACrD,QAAQ,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAClG,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,CAAC,oBAAoB,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5G,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,iBAAiB,MAAM,8CAA8C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9G,CAAC;IAED,MAAM,IAAI,GAAe;QACvB,MAAM;QACN,WAAW,EAAE,wBAAwB,CAAC,QAAQ,EAAE,MAAM,CAAC;QACvD,aAAa,EAAE,QAAQ,CAAC,aAAa;KACtC,CAAC;IACF,MAAM,QAAQ,GAAmB,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IAC/D,MAAM,SAAS,GAAG,MAAM,eAAe,CAAkB,QAAQ,EAAE,UAAU,EAAE;QAC7E,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK;QACL,QAAQ;QACR,YAAY,EAAE,SAAS;QACvB,YAAY,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3D,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,iBAAiB,MAAM,uFAAuF,CAAC,CAAC;IAClI,CAAC;IACD,MAAM,eAAe,GAAG,SAAkF,CAAC;IAC3G,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;IAExE,IAAI,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QAClC,MAAM,sBAAsB,CAAC,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAC9E,OAAO,CAAC,GAAG,CAAC,2BAA2B,MAAM,0CAA0C,CAAC,CAAC;QACzF,OAAO;IACT,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,MAAM,qBAAqB,CAAC,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;QAC3G,OAAO,CAAC,GAAG,CAAC,mCAAmC,MAAM,0CAA0C,CAAC,CAAC;QACjG,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,2CAA2C,MAAM,sGAAsG,CAAC,CAAC;IACrK,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,gBAAgB,CAClD,QAAQ,EACR,IAAI,EACJ,CAAC,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,EACnC,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,CAC/B,CAAC;IACF,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC;IACzH,MAAM,sBAAsB,CAAC,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,+DAA+D,MAAM,GAAG,CAAC,CAAC;AACxF,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,SAAgF,EAChF,QAAwB,EACxB,IAAgB,EAChB,OAA8B;IAE9B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE;QAC5F,MAAM,EAAE,IAAI;QACZ,OAAO;KACR,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,SAAgF,EAChF,QAAwB,EACxB,IAAgB,EAChB,MAAe,EACf,OAA8B;IAE9B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACnH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,CAAC,MAAM,wEAAwE,CAAC,CAAC;IAC/I,CAAC;AACH,CAAC"}

package/dist/channels.d.ts

@@ -0,0 +1,25 @@
+import type { AgentManifest, CompiledChannel } from "@assemblyline-agents/core";
+/**
+ * `assembly-line channels wire` — point each configured channel's provider at the
+ * deployed ingress URL. Only Telegram can be set fully via API (setWebhook);
+ * the others return the exact URL/instructions to apply in the provider console.
+ *
+ * The channel-specific API call (Telegram) lives here rather than pulling a
+ * channel package into the CLI — it mirrors `@assemblyline-agents/telegram`'s
+ * `setTelegramWebhook`.
+ */
+export interface ChannelWireResult {
+    channel: string;
+    provider: string;
+    url: string;
+    action: "set" | "manual";
+    detail: string;
+}
+type FetchLike = (url: string, init?: unknown) => Promise<{
+    json(): Promise<unknown>;
+}>;
+/** Absolute ingress URL for a channel from the base URL + its compiled route. */
+export declare function channelIngressUrl(baseUrl: string, channel: CompiledChannel): string;
+export declare function wireChannels(manifest: AgentManifest, baseUrl: string, env: Record<string, string | undefined>, fetchImpl: FetchLike): Promise<ChannelWireResult[]>;
+export {};
+//# sourceMappingURL=channels.d.ts.map

package/dist/channels.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels.d.ts","sourceRoot":"","sources":["../src/channels.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAEhF;;;;;;;;GAQG;AAEH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,KAAK,GAAG,QAAQ,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,KAAK,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC;IAAE,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;CAAE,CAAC,CAAC;AAOxF,iFAAiF;AACjF,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,MAAM,CAKnF;AA+BD,wBAAsB,YAAY,CAChC,QAAQ,EAAE,aAAa,EACvB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACvC,SAAS,EAAE,SAAS,GACnB,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAmC9B"}

package/dist/channels.js

@@ -0,0 +1,76 @@
+function providerOf(channel) {
+    const meta = channel.metadata;
+    return typeof meta?.provider === "string" ? meta.provider : channel.name;
+}
+/** Absolute ingress URL for a channel from the base URL + its compiled route. */
+export function channelIngressUrl(baseUrl, channel) {
+    const base = baseUrl.replace(/\/+$/, "");
+    const route = channel.route ?? "";
+    if (!route)
+        return base;
+    return `${base}${route.startsWith("/") ? "" : "/"}${route}`;
+}
+async function setTelegramWebhook(env, fetchImpl, url) {
+    const token = env.TELEGRAM_BOT_TOKEN;
+    if (!token)
+        return { ok: false, detail: "TELEGRAM_BOT_TOKEN is not set — can't call setWebhook." };
+    const body = { url };
+    const secret = env.TELEGRAM_WEBHOOK_SECRET?.trim();
+    if (secret)
+        body.secret_token = secret;
+    const res = await fetchImpl(`https://api.telegram.org/bot${token}/setWebhook`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify(body),
+    });
+    const json = (await res.json());
+    return { ok: json.ok === true, detail: json.description ?? (json.ok ? "webhook set" : JSON.stringify(json)) };
+}
+// Keys are the compiled `metadata.provider` values (see compiler
+// channel-metadata.ts: teams → "microsoft-teams", photon → "photon-spectrum").
+const MANUAL_INSTRUCTIONS = {
+    slack: "Set this as the Slack Events API Request URL in your app config, then reinstall the app.",
+    discord: "Set this as the Interactions Endpoint URL in your Discord application settings.",
+    "microsoft-teams": "Set this as the messaging endpoint in your Azure Bot / Bot Framework registration.",
+    "photon-spectrum": "Point your Photon/Spectrum webhook at this URL.",
+    github: "Set this as the webhook Payload URL in your GitHub App/repo webhook settings.",
+};
+export async function wireChannels(manifest, baseUrl, env, fetchImpl) {
+    const results = [];
+    for (const channel of manifest.channels) {
+        const provider = providerOf(channel);
+        const url = channelIngressUrl(baseUrl, channel);
+        if (provider === "telegram") {
+            try {
+                const res = await setTelegramWebhook(env, fetchImpl, url);
+                results.push({
+                    channel: channel.name,
+                    provider,
+                    url,
+                    action: res.ok ? "set" : "manual",
+                    detail: res.detail,
+                });
+            }
+            catch (error) {
+                results.push({
+                    channel: channel.name,
+                    provider,
+                    url,
+                    action: "manual",
+                    detail: `setWebhook failed: ${error instanceof Error ? error.message : String(error)}`,
+                });
+            }
+        }
+        else {
+            results.push({
+                channel: channel.name,
+                provider,
+                url,
+                action: "manual",
+                detail: MANUAL_INSTRUCTIONS[provider] ?? `Point your ${provider} provider at this URL.`,
+            });
+        }
+    }
+    return results;
+}
+//# sourceMappingURL=channels.js.map

package/dist/channels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels.js","sourceRoot":"","sources":["../src/channels.ts"],"names":[],"mappings":"AAsBA,SAAS,UAAU,CAAC,OAAwB;IAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,QAA8C,CAAC;IACpE,OAAO,OAAO,IAAI,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;AAC3E,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,OAAwB;IACzE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,GAAG,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,EAAE,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,GAAuC,EACvC,SAAoB,EACpB,GAAW;IAEX,MAAM,KAAK,GAAG,GAAG,CAAC,kBAAkB,CAAC;IACrC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wDAAwD,EAAE,CAAC;IACnG,MAAM,IAAI,GAA4B,EAAE,GAAG,EAAE,CAAC;IAC9C,MAAM,MAAM,GAAG,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE,CAAC;IACnD,IAAI,MAAM;QAAE,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC;IACvC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,+BAA+B,KAAK,aAAa,EAAE;QAC7E,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA2C,CAAC;IAC1E,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,KAAK,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;AAChH,CAAC;AAED,iEAAiE;AACjE,+EAA+E;AAC/E,MAAM,mBAAmB,GAA2B;IAClD,KAAK,EAAE,0FAA0F;IACjG,OAAO,EAAE,iFAAiF;IAC1F,iBAAiB,EAAE,oFAAoF;IACvG,iBAAiB,EAAE,iDAAiD;IACpE,MAAM,EAAE,+EAA+E;CACxF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAuB,EACvB,OAAe,EACf,GAAuC,EACvC,SAAoB;IAEpB,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;gBAC1D,OAAO,CAAC,IAAI,CAAC;oBACX,OAAO,EAAE,OAAO,CAAC,IAAI;oBACrB,QAAQ;oBACR,GAAG;oBACH,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;oBACjC,MAAM,EAAE,GAAG,CAAC,MAAM;iBACnB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC;oBACX,OAAO,EAAE,OAAO,CAAC,IAAI;oBACrB,QAAQ;oBACR,GAAG;oBACH,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE,sBAAsB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;iBACvF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC;gBACX,OAAO,EAAE,OAAO,CAAC,IAAI;gBACrB,QAAQ;gBACR,GAAG;gBACH,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,mBAAmB,CAAC,QAAQ,CAAC,IAAI,cAAc,QAAQ,wBAAwB;aACxF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/checkpoints.d.ts

@@ -0,0 +1,3 @@
+import { type ParsedArgs } from "./args.js";
+export declare function runCheckpointCompactCommand(agentRoot: string, parsed: ParsedArgs): Promise<void>;
+//# sourceMappingURL=checkpoints.d.ts.map

package/dist/checkpoints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoints.d.ts","sourceRoot":"","sources":["../src/checkpoints.ts"],"names":[],"mappings":"AAYA,OAAO,EAAqD,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAE/F,wBAAsB,2BAA2B,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAmCtG"}

package/dist/checkpoints.js

@@ -0,0 +1,60 @@
+import { resolve } from "node:path";
+import { buildAgent } from "@assemblyline-agents/compiler";
+import { resolveProvider } from "@assemblyline-agents/node";
+import { FileStateAdapter, LocalBlobAdapter, LocalSandboxAdapter, OpenEveRuntime, loadRuntimeBundle } from "@assemblyline-agents/runtime";
+import { booleanFlag, buildOptions, numberFlag, stringFlag } from "./args.js";
+export async function runCheckpointCompactCommand(agentRoot, parsed) {
+    const artifact = buildAgent(buildOptions(parsed, agentRoot));
+    const runtimeOptions = loadRuntimeBundle(artifact.root);
+    const state = await resolveStateForMaintenance(runtimeOptions, artifact.root);
+    const runtime = new OpenEveRuntime({
+        ...runtimeOptions,
+        state,
+        blob: new LocalBlobAdapter(resolve(artifact.root, "blobs")),
+        sandbox: new LocalSandboxAdapter(resolve(artifact.root, "sandbox")),
+        devMode: true
+    });
+    const options = {
+        dryRun: booleanFlag(parsed, "dry-run") || !booleanFlag(parsed, "apply")
+    };
+    const runId = stringFlag(parsed, "run-id");
+    if (runId)
+        options.runId = runId;
+    const maxActive = numberFlag(parsed, "max-active-per-run-name");
+    if (maxActive !== undefined)
+        options.maxActivePerRunName = maxActive;
+    const terminalTtl = numberFlag(parsed, "terminal-ttl-ms");
+    if (terminalTtl !== undefined)
+        options.terminalTtlMs = terminalTtl;
+    const failedTtl = numberFlag(parsed, "failed-ttl-ms");
+    if (failedTtl !== undefined)
+        options.failedRunTtlMs = failedTtl;
+    const scheduledTtl = numberFlag(parsed, "scheduled-ttl-ms");
+    if (scheduledTtl !== undefined)
+        options.scheduledRunTtlMs = scheduledTtl;
+    try {
+        const result = await runtime.compactCheckpoints(options);
+        console.log(JSON.stringify({
+            mode: options.dryRun ? "dry-run" : "apply",
+            agentRevision: runtimeOptions.manifest.agentRevision,
+            result
+        }, null, 2));
+    }
+    finally {
+        await state.close?.();
+    }
+}
+async function resolveStateForMaintenance(runtimeOptions, artifactRoot) {
+    const definition = runtimeOptions.manifest.gateway.state;
+    if (!definition || definition.kind === "local") {
+        return new FileStateAdapter(process.env.OPENEVE_STATE_FILE ?? resolve(artifactRoot, "runtime-state.json"));
+    }
+    return resolveProvider("state", definition, {
+        env: process.env,
+        fetch: fetch,
+        manifest: runtimeOptions.manifest,
+        artifactRoot,
+        devMode: false
+    });
+}
+//# sourceMappingURL=checkpoints.js.map

package/dist/checkpoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoints.js","sourceRoot":"","sources":["../src/checkpoints.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EAGlB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAmB,MAAM,WAAW,CAAC;AAE/F,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,SAAiB,EAAE,MAAkB;IACrF,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IAC7D,MAAM,cAAc,GAAG,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,MAAM,0BAA0B,CAAC,cAAc,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC;QACjC,GAAG,cAAc;QACjB,KAAK;QACL,IAAI,EAAE,IAAI,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3D,OAAO,EAAE,IAAI,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACnE,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IACH,MAAM,OAAO,GAA+B;QAC1C,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC;KACxE,CAAC;IACF,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC3C,IAAI,KAAK;QAAE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;IACjC,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IAChE,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC;IACrE,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC1D,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,CAAC,aAAa,GAAG,WAAW,CAAC;IACnE,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACtD,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;IAChE,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC5D,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,CAAC,iBAAiB,GAAG,YAAY,CAAC;IAEzE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YACzB,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;YAC1C,aAAa,EAAE,cAAc,CAAC,QAAQ,CAAC,aAAa;YACpD,MAAM;SACP,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACf,CAAC;YAAS,CAAC;QACT,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,cAAoD,EAAE,YAAoB;IAClH,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;IACzD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC/C,OAAO,IAAI,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,OAAO,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAC7G,CAAC;IACD,OAAO,eAAe,CAAe,OAAO,EAAE,UAAU,EAAE;QACxD,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK,EAAE,KAAc;QACrB,QAAQ,EAAE,cAAc,CAAC,QAAQ;QACjC,YAAY;QACZ,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;AACL,CAAC"}

package/dist/deploy-definition.d.ts

@@ -0,0 +1,14 @@
+import type { AdapterDefinition, AgentManifest } from "@assemblyline-agents/core";
+import { type ParsedArgs } from "./args.js";
+/**
+ * Resolve deploy configuration once so publish and hosted auth use identical
+ * precedence. Environment scoping happens here because only this layer knows
+ * whether an identity option (fly app, vps domain) was configured in the
+ * manifest — which non-default environments must scope — or passed explicitly
+ * on the command line, which is always respected verbatim.
+ */
+export declare function resolveDeployDefinition(manifest: AgentManifest, target: string, parsed: ParsedArgs, env?: Record<string, string | undefined>, cwd?: string): AdapterDefinition;
+export declare function resolveDeployEnvironment(manifest: AgentManifest, parsed: ParsedArgs, env?: Record<string, string | undefined>): string;
+/** The environment deploys land in when --env/ASSEMBLY_LINE_DEPLOY_ENV are absent. */
+export declare function resolveDefaultDeployEnvironment(manifest: AgentManifest): string;
+//# sourceMappingURL=deploy-definition.d.ts.map

package/dist/deploy-definition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-definition.d.ts","sourceRoot":"","sources":["../src/deploy-definition.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAc,MAAM,2BAA2B,CAAC;AAC9F,OAAO,EAAuC,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAEjF;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,UAAU,EAClB,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,EACrD,GAAG,SAAgB,GAClB,iBAAiB,CAsDnB;AAED,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,UAAU,EAClB,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,MAAM,CAMR;AAED,sFAAsF;AACtF,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,CAG/E"}

package/dist/deploy-definition.js

@@ -0,0 +1,92 @@
+import { environmentScopedName, sanitizeDeployName } from "@assemblyline-agents/core";
+import { booleanFlag, numberFlag, stringFlag } from "./args.js";
+/**
+ * Resolve deploy configuration once so publish and hosted auth use identical
+ * precedence. Environment scoping happens here because only this layer knows
+ * whether an identity option (fly app, vps domain) was configured in the
+ * manifest — which non-default environments must scope — or passed explicitly
+ * on the command line, which is always respected verbatim.
+ */
+export function resolveDeployDefinition(manifest, target, parsed, env = process.env, cwd = process.cwd()) {
+    const configured = manifest.gateway.deploy?.kind === target ? manifest.gateway.deploy : undefined;
+    const options = { ...(configured?.options ?? {}) };
+    const environment = resolveDeployEnvironment(manifest, parsed, env);
+    const defaultEnvironment = resolveDefaultDeployEnvironment(manifest);
+    const scope = { environment, defaultEnvironment };
+    if (target === "railway") {
+        setString(options, "railwayBin", stringFlag(parsed, "railway-bin"));
+        setString(options, "project", stringFlag(parsed, "railway-project") ?? env.RAILWAY_PROJECT_ID ?? jsonString(options.project));
+        setString(options, "service", stringFlag(parsed, "railway-service") ?? env.RAILWAY_SERVICE_ID ?? jsonString(options.service));
+        setBoolean(options, "json", flagBoolean(parsed, "railway-json"));
+        setBoolean(options, "detach", flagBoolean(parsed, "detach"));
+    }
+    else if (target === "docker") {
+        setString(options, "dockerBin", stringFlag(parsed, "docker-bin"));
+        setString(options, "image", stringFlag(parsed, "docker-image") ?? env.OPENEVE_DOCKER_IMAGE ?? jsonString(options.image));
+        const serve = flagBoolean(parsed, "serve") ?? flagBoolean(parsed, "run");
+        setBoolean(options, "serve", serve);
+        setNumber(options, "port", numberFlag(parsed, "port"));
+    }
+    else if (target === "fly") {
+        setString(options, "flyBin", stringFlag(parsed, "fly-bin"));
+        const explicitApp = stringFlag(parsed, "fly-app") ?? env.FLY_APP_NAME;
+        const manifestApp = jsonString(options.app);
+        setString(options, "app", explicitApp ?? (manifestApp ? environmentScopedName(manifestApp, scope) : undefined));
+        setString(options, "org", stringFlag(parsed, "fly-org") ?? env.FLY_ORG ?? jsonString(options.org));
+        setString(options, "region", stringFlag(parsed, "fly-region") ?? env.FLY_REGION ?? jsonString(options.region));
+        setString(options, "memory", stringFlag(parsed, "fly-memory"));
+        setString(options, "vmSize", stringFlag(parsed, "fly-vm-size"));
+        setNumber(options, "internalPort", numberFlag(parsed, "fly-internal-port"));
+        setBoolean(options, "detach", flagBoolean(parsed, "detach"));
+    }
+    else if (target === "vps") {
+        setString(options, "host", stringFlag(parsed, "vps-host") ?? jsonString(options.host));
+        const explicitDomain = stringFlag(parsed, "vps-domain");
+        const manifestDomain = jsonString(options.domain);
+        // Non-default environments get a derived subdomain so a test deploy never
+        // contends for the production domain claim. DNS for it (a wildcard or an
+        // explicit record) is the operator's prerequisite.
+        const scopedDomain = manifestDomain && environment !== defaultEnvironment
+            ? `${sanitizeDeployName(environment, 20)}.${manifestDomain}`
+            : manifestDomain;
+        setString(options, "domain", explicitDomain ?? scopedDomain);
+        setString(options, "hostsFile", stringFlag(parsed, "vps-hosts-file") ?? env.OPENEVE_VPS_HOSTS_FILE ?? jsonString(options.hostsFile));
+    }
+    options.cwd = cwd;
+    return {
+        kind: target,
+        options,
+        ...(configured?.packageName ? { packageName: configured.packageName } : {})
+    };
+}
+export function resolveDeployEnvironment(manifest, parsed, env = process.env) {
+    const configured = manifest.gateway.deploy?.options?.environment;
+    return stringFlag(parsed, "env")
+        ?? env.OPENEVE_DEPLOY_ENV
+        ?? (typeof configured === "string" ? configured : undefined)
+        ?? "development";
+}
+/** The environment deploys land in when --env/ASSEMBLY_LINE_DEPLOY_ENV are absent. */
+export function resolveDefaultDeployEnvironment(manifest) {
+    const configured = manifest.gateway.deploy?.options?.environment;
+    return typeof configured === "string" ? configured : "development";
+}
+function flagBoolean(parsed, name) {
+    return parsed.flags[name] === undefined ? undefined : booleanFlag(parsed, name);
+}
+function jsonString(value) {
+    return typeof value === "string" ? value : undefined;
+}
+function setString(options, name, value) {
+    if (value !== undefined)
+        options[name] = value;
+}
+function setNumber(options, name, value) {
+    if (value !== undefined)
+        options[name] = value;
+}
+function setBoolean(options, name, value) {
+    if (value !== undefined)
+        options[name] = value;
+}
+//# sourceMappingURL=deploy-definition.js.map

package/dist/deploy-definition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-definition.js","sourceRoot":"","sources":["../src/deploy-definition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAEtF,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAmB,MAAM,WAAW,CAAC;AAEjF;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAuB,EACvB,MAAc,EACd,MAAkB,EAClB,MAA0C,OAAO,CAAC,GAAG,EACrD,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IAEnB,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAClG,MAAM,OAAO,GAAe,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;IAC/D,MAAM,WAAW,GAAG,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACpE,MAAM,kBAAkB,GAAG,+BAA+B,CAAC,QAAQ,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAElD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,SAAS,CAAC,OAAO,EAAE,YAAY,EAAE,UAAU,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;QACpE,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,MAAM,EAAE,iBAAiB,CAAC,IAAI,GAAG,CAAC,kBAAkB,IAAI,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9H,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,MAAM,EAAE,iBAAiB,CAAC,IAAI,GAAG,CAAC,kBAAkB,IAAI,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9H,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;QACjE,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/D,CAAC;SAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,SAAS,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;QAClE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,EAAE,cAAc,CAAC,IAAI,GAAG,CAAC,oBAAoB,IAAI,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACzH,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACzE,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACpC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACzD,CAAC;SAAM,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC5B,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;QAC5D,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC;QACtE,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5C,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,qBAAqB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAChH,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,GAAG,CAAC,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACnG,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,IAAI,GAAG,CAAC,UAAU,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/G,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;QAC/D,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;QAChE,SAAS,CAAC,OAAO,EAAE,cAAc,EAAE,UAAU,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAC5E,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/D,CAAC;SAAM,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC5B,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACvF,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACxD,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClD,0EAA0E;QAC1E,yEAAyE;QACzE,mDAAmD;QACnD,MAAM,YAAY,GAAG,cAAc,IAAI,WAAW,KAAK,kBAAkB;YACvE,CAAC,CAAC,GAAG,kBAAkB,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,cAAc,EAAE;YAC5D,CAAC,CAAC,cAAc,CAAC;QACnB,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,cAAc,IAAI,YAAY,CAAC,CAAC;QAC7D,SAAS,CACP,OAAO,EACP,WAAW,EACX,UAAU,CAAC,MAAM,EAAE,gBAAgB,CAAC,IAAI,GAAG,CAAC,sBAAsB,IAAI,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CACpG,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC;IAClB,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,OAAO;QACP,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,QAAuB,EACvB,MAAkB,EAClB,MAA0C,OAAO,CAAC,GAAG;IAErD,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC;IACjE,OAAO,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC;WAC3B,GAAG,CAAC,kBAAkB;WACtB,CAAC,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;WACzD,aAAa,CAAC;AACrB,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,+BAA+B,CAAC,QAAuB;IACrE,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC;IACjE,OAAO,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC;AACrE,CAAC;AAED,SAAS,WAAW,CAAC,MAAkB,EAAE,IAAY;IACnD,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,SAAS,CAAC,OAAmB,EAAE,IAAY,EAAE,KAAyB;IAC7E,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;AACjD,CAAC;AAED,SAAS,SAAS,CAAC,OAAmB,EAAE,IAAY,EAAE,KAAyB;IAC7E,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;AACjD,CAAC;AAED,SAAS,UAAU,CAAC,OAAmB,EAAE,IAAY,EAAE,KAA0B;IAC/E,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;AACjD,CAAC"}

package/dist/deploy-lifecycle.d.ts

@@ -0,0 +1,17 @@
+import type { DeployArtifact, DeployMigrationRequest, DeployPlan, DeployPublisher, DeployReceipt } from "@assemblyline-agents/core";
+export interface DeployLifecycleResult {
+    providerReceipt: DeployReceipt;
+    migrationStatus: string;
+    lifecycle: Record<string, DeployReceipt>;
+}
+/** Execute the provider lifecycle in the one supported hosted-deploy order. */
+export declare function executeDeployLifecycle(input: {
+    publisher: DeployPublisher;
+    artifact: DeployArtifact;
+    plan: DeployPlan;
+    migrationRequest: DeployMigrationRequest;
+    syncSecrets: () => Promise<void>;
+    runFallbackMigrations: () => Promise<string>;
+    activate?: boolean;
+}): Promise<DeployLifecycleResult>;
+//# sourceMappingURL=deploy-lifecycle.d.ts.map

package/dist/deploy-lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-lifecycle.d.ts","sourceRoot":"","sources":["../src/deploy-lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,sBAAsB,EACtB,UAAU,EACV,eAAe,EACf,aAAa,EACd,MAAM,2BAA2B,CAAC;AAEnC,MAAM,WAAW,qBAAqB;IACpC,eAAe,EAAE,aAAa,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;CAC1C;AAED,+EAA+E;AAC/E,wBAAsB,sBAAsB,CAAC,KAAK,EAAE;IAClD,SAAS,EAAE,eAAe,CAAC;IAC3B,QAAQ,EAAE,cAAc,CAAC;IACzB,IAAI,EAAE,UAAU,CAAC;IACjB,gBAAgB,EAAE,sBAAsB,CAAC;IACzC,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,qBAAqB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7C,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAwBjC"}

package/dist/deploy-lifecycle.js

@@ -0,0 +1,25 @@
+/** Execute the provider lifecycle in the one supported hosted-deploy order. */
+export async function executeDeployLifecycle(input) {
+    const lifecycle = {};
+    const preflight = await input.publisher.preflight?.(input.artifact, input.plan);
+    if (preflight)
+        lifecycle.preflight = preflight;
+    const preparation = await input.publisher.prepare?.(input.artifact, input.plan);
+    if (preparation)
+        lifecycle.preparation = preparation;
+    await input.syncSecrets();
+    const migrationStatus = input.publisher.runMigrations
+        ? await input.publisher.runMigrations(input.artifact, input.plan, input.migrationRequest)
+        : await input.runFallbackMigrations();
+    const providerReceipt = input.activate === false
+        ? {
+            ...(preparation ?? {}),
+            target: input.publisher.target,
+            status: "prepared",
+            environment: input.plan.environment,
+            agentRevision: input.plan.agentRevision
+        }
+        : await (input.publisher.activate ?? input.publisher.publish).call(input.publisher, input.artifact, input.plan);
+    return { providerReceipt, migrationStatus, lifecycle };
+}
+//# sourceMappingURL=deploy-lifecycle.js.map

package/dist/deploy-lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-lifecycle.js","sourceRoot":"","sources":["../src/deploy-lifecycle.ts"],"names":[],"mappings":"AAcA,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAQ5C;IACC,MAAM,SAAS,GAAkC,EAAE,CAAC;IACpD,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAChF,IAAI,SAAS;QAAE,SAAS,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/C,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAChF,IAAI,WAAW;QAAE,SAAS,CAAC,WAAW,GAAG,WAAW,CAAC;IACrD,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC;IAC1B,MAAM,eAAe,GAAG,KAAK,CAAC,SAAS,CAAC,aAAa;QACnD,CAAC,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,gBAAgB,CAAC;QACzF,CAAC,CAAC,MAAM,KAAK,CAAC,qBAAqB,EAAE,CAAC;IACxC,MAAM,eAAe,GAAG,KAAK,CAAC,QAAQ,KAAK,KAAK;QAC9C,CAAC,CAAC;YACE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;YACtB,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM;YAC9B,MAAM,EAAE,UAAU;YAClB,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW;YACnC,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,aAAa;SACxC;QACH,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,CAC9D,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,IAAI,CACX,CAAC;IACN,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC;AACzD,CAAC"}

package/dist/deploy.d.ts

@@ -0,0 +1,20 @@
+import { type DeploymentPlan } from "@assemblyline-agents/compiler";
+import { type ParsedArgs } from "./args.js";
+export { parseEnvSecrets } from "./project-env.js";
+export declare function runDeployCommand(agentRoot: string, parsed: ParsedArgs): Promise<void>;
+export declare function withDeclaredRuntimeEnv(fileSecrets: Record<string, string>, plan: DeploymentPlan, env: Record<string, string | undefined>): Record<string, string>;
+export declare function splitDeploySecrets(secrets: Record<string, string>, plan: DeploymentPlan): {
+    runtimeSecrets: Record<string, string>;
+    localDeployKeys: string[];
+};
+export declare function runCommand(commandName: string, args: string[], options?: {
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+    silent?: boolean;
+}): Promise<{
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+}>;
+export declare function writeJson(path: string, value: unknown): void;
+//# sourceMappingURL=deploy.d.ts.map

package/dist/deploy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../src/deploy.ts"],"names":[],"mappings":"AAIA,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,+BAA+B,CAAC;AAgBvC,OAAO,EAAqD,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAO/F,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,wBAAsB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAqF3F;AAuID,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,IAAI,EAAE,cAAc,EACpB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CASxB;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,IAAI,EAAE,cAAc,GACnB;IAAE,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,eAAe,EAAE,MAAM,EAAE,CAAA;CAAE,CAqBvE;AAqKD,wBAAgB,UAAU,CACxB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACxE,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA8B/D;AAcD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAG5D"}