@assemblyline-agents/cli 2.0.0 → 3.0.0

package/dist/operator-client.js

@@ -1,4 +1,159 @@
-import { stringFlag } from "./args.js";
+import { booleanFlag, stringFlag } from "./args.js";
+export async function runWorkspaceOperatorCommand(parsed, env = process.env, fetchImpl = fetch) {
+    const action = parsed.positional[0];
+    const workspaceId = parsed.positional[1];
+    const allowed = new Set([
+        "list",
+        "status",
+        "versions",
+        "checkpoint-create",
+        "checkpoint-list",
+        "checkpoint-delete",
+        "restore",
+        "fork",
+        "forks",
+        "retention",
+        "verify",
+        "verify-all",
+        "diagnostics",
+        "usage",
+        "reachability",
+        "gc",
+        "repair-blob",
+        "repair-head"
+    ]);
+    const globalActions = new Set(["list", "verify-all", "diagnostics", "usage", "reachability", "gc"]);
+    if (!action || !allowed.has(action) || (!globalActions.has(action) && !workspaceId)) {
+        throw new Error("Usage: assembly-line workspaces <action> [workspaceId] --url <baseUrl> [--token <token>]");
+    }
+    const baseUrl = (stringFlag(parsed, "url") ?? env.ASSEMBLY_LINE_URL)?.replace(/\/+$/u, "");
+    if (!baseUrl)
+        throw new Error("A deployed agent URL is required via --url or ASSEMBLY_LINE_URL.");
+    const token = stringFlag(parsed, "token") ?? env.ASSEMBLY_LINE_ADMIN_TOKEN;
+    if (!token)
+        throw new Error("An admin bearer token is required via --token or ASSEMBLY_LINE_ADMIN_TOKEN.");
+    const encodedId = workspaceId ? encodeURIComponent(workspaceId) : "";
+    let method = "GET";
+    let path = "/workspaces";
+    let body;
+    if (action === "status")
+        path = `/workspaces/${encodedId}`;
+    if (action === "versions")
+        path = `/workspaces/${encodedId}/versions`;
+    if (action === "checkpoint-list")
+        path = `/workspaces/${encodedId}/checkpoints`;
+    if (action === "forks")
+        path = `/workspaces/${encodedId}/forks`;
+    if (action === "diagnostics")
+        path = "/workspaces/diagnostics";
+    if (action === "usage")
+        path = "/workspaces/usage";
+    if (action === "reachability")
+        path = "/workspaces/reachability";
+    if (action === "verify-all")
+        path = "/workspaces/verify";
+    if (action === "verify")
+        path = `/workspaces/${encodedId}/verify`;
+    if (action === "checkpoint-create") {
+        method = "POST";
+        path = `/workspaces/${encodedId}/checkpoints`;
+        body = { name: requiredFlag(parsed, "name"), replace: booleanFlag(parsed, "replace") };
+    }
+    if (action === "checkpoint-delete") {
+        method = "DELETE";
+        path = `/workspaces/${encodedId}/checkpoints/${encodeURIComponent(requiredFlag(parsed, "name"))}`;
+    }
+    if (action === "restore") {
+        method = "POST";
+        path = `/workspaces/${encodedId}/restore`;
+        body = {
+            name: requiredFlag(parsed, "name"),
+            ...(stringFlag(parsed, "idempotency-key") ? { idempotencyKey: stringFlag(parsed, "idempotency-key") } : {})
+        };
+    }
+    if (action === "fork") {
+        method = "POST";
+        path = `/workspaces/${encodedId}/forks`;
+        body = {
+            ...(stringFlag(parsed, "name") ? { name: stringFlag(parsed, "name") } : {}),
+            ...(stringFlag(parsed, "checkpoint") ? { checkpoint: stringFlag(parsed, "checkpoint") } : {}),
+            ...(stringFlag(parsed, "source-version") ? { sourceVersionId: stringFlag(parsed, "source-version") } : {}),
+            ...(stringFlag(parsed, "workspace-id") ? { workspaceId: stringFlag(parsed, "workspace-id") } : {}),
+            ...(stringFlag(parsed, "tenant-id") ? { tenantId: stringFlag(parsed, "tenant-id") } : {})
+        };
+    }
+    if (action === "retention") {
+        method = "POST";
+        path = `/workspaces/${encodedId}/retention`;
+        body = {
+            apply: booleanFlag(parsed, "apply"),
+            ...(numericFlag(parsed, "tail") !== undefined ? { tailCount: numericFlag(parsed, "tail") } : {})
+        };
+    }
+    if (action === "gc") {
+        method = "POST";
+        path = "/workspaces/gc";
+        body = {
+            apply: booleanFlag(parsed, "apply"),
+            ...(numericFlag(parsed, "min-age-ms") !== undefined ? { minAgeMs: numericFlag(parsed, "min-age-ms") } : {})
+        };
+    }
+    if (action === "repair-blob") {
+        method = "POST";
+        path = `/workspaces/${encodedId}/repair/blob`;
+        body = {
+            versionId: requiredFlag(parsed, "version"),
+            replacementBase64: requiredFlag(parsed, "replacement-base64"),
+            ...(stringFlag(parsed, "path") ? { path: stringFlag(parsed, "path") } : {})
+        };
+    }
+    if (action === "repair-head") {
+        method = "POST";
+        path = `/workspaces/${encodedId}/repair/head`;
+        body = {
+            targetVersionId: requiredFlag(parsed, "version"),
+            ...(stringFlag(parsed, "expected-head") ? { expectedHeadVersionId: stringFlag(parsed, "expected-head") } : {})
+        };
+    }
+    const headers = { authorization: `Bearer ${token}`, accept: "application/json" };
+    if (body)
+        headers["content-type"] = "application/json";
+    const response = await fetchImpl(`${baseUrl}${path}`, {
+        method,
+        headers,
+        ...(body ? { body: JSON.stringify(body) } : {})
+    });
+    const responseText = await response.text();
+    let responseBody = responseText;
+    try {
+        responseBody = responseText ? JSON.parse(responseText) : {};
+    }
+    catch {
+        // Preserve non-JSON host errors.
+    }
+    if (!response.ok) {
+        const detail = responseBody && typeof responseBody === "object" && "error" in responseBody
+            ? String(responseBody.error)
+            : responseText || response.statusText;
+        throw new Error(`Operator request failed (${response.status}): ${detail}`);
+    }
+    return { status: response.status, body: responseBody };
+}
+function requiredFlag(parsed, name) {
+    const value = stringFlag(parsed, name);
+    if (!value)
+        throw new Error(`--${name} is required.`);
+    return value;
+}
+function numericFlag(parsed, name) {
+    const raw = stringFlag(parsed, name);
+    if (raw === undefined)
+        return undefined;
+    const value = Number(raw);
+    if (!Number.isFinite(value))
+        throw new Error(`--${name} must be a number.`);
+    return value;
+}
 export async function runOperatorCommand(resource, parsed, env = process.env, fetchImpl = fetch) {
     const action = parsed.positional[0];
     const runId = resource === "runs" ? parsed.positional[1] : undefined;
@@ -8,10 +163,10 @@ export async function runOperatorCommand(resource, parsed, env = process.env, fe
             ? "Usage: assembly-line runs cancel|suspend|resume <runId> --url <baseUrl> [--token <token>]"
             : "Usage: assembly-line agent disable|enable|quiesce|resume|status --url <baseUrl> [--token <token>]");
     }
-    const baseUrl = (stringFlag(parsed, "url") ?? env.OPENEVE_URL)?.replace(/\/+$/u, "");
+    const baseUrl = (stringFlag(parsed, "url") ?? env.ASSEMBLY_LINE_URL)?.replace(/\/+$/u, "");
     if (!baseUrl)
         throw new Error("A deployed agent URL is required via --url or ASSEMBLY_LINE_URL.");
-    const token = stringFlag(parsed, "token") ?? env.OPENEVE_ADMIN_TOKEN;
+    const token = stringFlag(parsed, "token") ?? env.ASSEMBLY_LINE_ADMIN_TOKEN;
     if (!token)
         throw new Error("An admin bearer token is required via --token or ASSEMBLY_LINE_ADMIN_TOKEN.");
     const path = resource === "runs"

package/dist/operator-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"operator-client.js","sourceRoot":"","sources":["../src/operator-client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAOvC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAA0B,EAC1B,MAAkB,EAClB,MAA0C,OAAO,CAAC,GAAG,EACrD,YAA0B,KAAK;IAE/B,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,MAAM,OAAO,GAAG,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC7H,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM;YACjC,CAAC,CAAC,2FAA2F;YAC7F,CAAC,CAAC,mGAAmG,CAAC,CAAC;IAC3G,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACrF,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IAClG,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC,mBAAmB,CAAC;IACrE,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IAC3G,MAAM,IAAI,GAAG,QAAQ,KAAK,MAAM;QAC9B,CAAC,CAAC,SAAS,kBAAkB,CAAC,KAAe,CAAC,IAAI,MAAM,EAAE;QAC1D,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,MAAM,EAAE,CAAC;IAChE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,GAAG,IAAI,EAAE,EAAE;QACpD,MAAM,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;QAC5C,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;KAC1E,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,IAAI,GAAY,YAAY,CAAC;IACjC,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;IACtE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI;YAChE,CAAC,CAAC,MAAM,CAAE,IAA2B,CAAC,KAAK,CAAC;YAC5C,CAAC,CAAC,YAAY,IAAI,QAAQ,CAAC,UAAU,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,CAAC,MAAM,MAAM,MAAM,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,IAAI,MAAM,KAAK,SAAS,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,GAAG,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC;YACzE,MAAM,cAAc,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,gBAAgB,EAAE;gBACjE,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;aAC1E,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAY,CAAC;YAC5E,IAAI,CAAC,cAAc,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC;YACzG,IAAI,GAAG,UAAU,CAAC;YAClB,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QAChF,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAC;IACzG,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAI,KAAoC,CAAC,YAAY,CAAC;IACjE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACtF,CAAC"}
+{"version":3,"file":"operator-client.js","sourceRoot":"","sources":["../src/operator-client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAOpD,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,MAAkB,EAClB,MAA0C,OAAO,CAAC,GAAG,EACrD,YAA0B,KAAK;IAE/B,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,MAAM;QACN,QAAQ;QACR,UAAU;QACV,mBAAmB;QACnB,iBAAiB;QACjB,mBAAmB;QACnB,SAAS;QACT,MAAM;QACN,OAAO;QACP,WAAW;QACX,QAAQ;QACR,YAAY;QACZ,aAAa;QACb,OAAO;QACP,cAAc;QACd,IAAI;QACJ,aAAa;QACb,aAAa;KACd,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;IACpG,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAC;IAC9G,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC3F,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IAClG,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC,yBAAyB,CAAC;IAC3E,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IAC3G,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,IAAI,GAAG,aAAa,CAAC;IACzB,IAAI,IAAyC,CAAC;IAC9C,IAAI,MAAM,KAAK,QAAQ;QAAE,IAAI,GAAG,eAAe,SAAS,EAAE,CAAC;IAC3D,IAAI,MAAM,KAAK,UAAU;QAAE,IAAI,GAAG,eAAe,SAAS,WAAW,CAAC;IACtE,IAAI,MAAM,KAAK,iBAAiB;QAAE,IAAI,GAAG,eAAe,SAAS,cAAc,CAAC;IAChF,IAAI,MAAM,KAAK,OAAO;QAAE,IAAI,GAAG,eAAe,SAAS,QAAQ,CAAC;IAChE,IAAI,MAAM,KAAK,aAAa;QAAE,IAAI,GAAG,yBAAyB,CAAC;IAC/D,IAAI,MAAM,KAAK,OAAO;QAAE,IAAI,GAAG,mBAAmB,CAAC;IACnD,IAAI,MAAM,KAAK,cAAc;QAAE,IAAI,GAAG,0BAA0B,CAAC;IACjE,IAAI,MAAM,KAAK,YAAY;QAAE,IAAI,GAAG,oBAAoB,CAAC;IACzD,IAAI,MAAM,KAAK,QAAQ;QAAE,IAAI,GAAG,eAAe,SAAS,SAAS,CAAC;IAClE,IAAI,MAAM,KAAK,mBAAmB,EAAE,CAAC;QACnC,MAAM,GAAG,MAAM,CAAC;QAChB,IAAI,GAAG,eAAe,SAAS,cAAc,CAAC;QAC9C,IAAI,GAAG,EAAE,IAAI,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,MAAM,KAAK,mBAAmB,EAAE,CAAC;QACnC,MAAM,GAAG,QAAQ,CAAC;QAClB,IAAI,GAAG,eAAe,SAAS,gBAAgB,kBAAkB,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;IACpG,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,GAAG,MAAM,CAAC;QAChB,IAAI,GAAG,eAAe,SAAS,UAAU,CAAC;QAC1C,IAAI,GAAG;YACL,IAAI,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC;YAClC,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,UAAU,CAAC,MAAM,EAAE,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5G,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,MAAM,GAAG,MAAM,CAAC;QAChB,IAAI,GAAG,eAAe,SAAS,QAAQ,CAAC;QACxC,IAAI,GAAG;YACL,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7F,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,UAAU,CAAC,MAAM,EAAE,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1G,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClG,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1F,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,MAAM,GAAG,MAAM,CAAC;QAChB,IAAI,GAAG,eAAe,SAAS,YAAY,CAAC;QAC5C,IAAI,GAAG;YACL,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC;YACnC,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjG,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,GAAG,MAAM,CAAC;QAChB,IAAI,GAAG,gBAAgB,CAAC;QACxB,IAAI,GAAG;YACL,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC;YACnC,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5G,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;QAC7B,MAAM,GAAG,MAAM,CAAC;QAChB,IAAI,GAAG,eAAe,SAAS,cAAc,CAAC;QAC9C,IAAI,GAAG;YACL,SAAS,EAAE,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC;YAC1C,iBAAiB,EAAE,YAAY,CAAC,MAAM,EAAE,oBAAoB,CAAC;YAC7D,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5E,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;QAC7B,MAAM,GAAG,MAAM,CAAC;QAChB,IAAI,GAAG,eAAe,SAAS,cAAc,CAAC;QAC9C,IAAI,GAAG;YACL,eAAe,EAAE,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC;YAChD,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,UAAU,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/G,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAA2B,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACzG,IAAI,IAAI;QAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,GAAG,IAAI,EAAE,EAAE;QACpD,MAAM;QACN,OAAO;QACP,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,YAAY,GAAY,YAAY,CAAC;IACzC,IAAI,CAAC;QACH,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;IACnC,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,OAAO,IAAI,YAAY;YACxF,CAAC,CAAC,MAAM,CAAE,YAAmC,CAAC,KAAK,CAAC;YACpD,CAAC,CAAC,YAAY,IAAI,QAAQ,CAAC,UAAU,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,CAAC,MAAM,MAAM,MAAM,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,YAAY,CAAC,MAAkB,EAAE,IAAY;IACpD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,KAAK,IAAI,eAAe,CAAC,CAAC;IACtD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,MAAkB,EAAE,IAAY;IACnD,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACrC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,KAAK,IAAI,oBAAoB,CAAC,CAAC;IAC5E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAA0B,EAC1B,MAAkB,EAClB,MAA0C,OAAO,CAAC,GAAG,EACrD,YAA0B,KAAK;IAE/B,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,MAAM,OAAO,GAAG,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC7H,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM;YACjC,CAAC,CAAC,2FAA2F;YAC7F,CAAC,CAAC,mGAAmG,CAAC,CAAC;IAC3G,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC3F,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IAClG,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC,yBAAyB,CAAC;IAC3E,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IAC3G,MAAM,IAAI,GAAG,QAAQ,KAAK,MAAM;QAC9B,CAAC,CAAC,SAAS,kBAAkB,CAAC,KAAe,CAAC,IAAI,MAAM,EAAE;QAC1D,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,MAAM,EAAE,CAAC;IAChE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,GAAG,IAAI,EAAE,EAAE;QACpD,MAAM,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;QAC5C,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;KAC1E,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,IAAI,GAAY,YAAY,CAAC;IACjC,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;IACtE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI;YAChE,CAAC,CAAC,MAAM,CAAE,IAA2B,CAAC,KAAK,CAAC;YAC5C,CAAC,CAAC,YAAY,IAAI,QAAQ,CAAC,UAAU,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,CAAC,MAAM,MAAM,MAAM,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,IAAI,MAAM,KAAK,SAAS,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,GAAG,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC;YACzE,MAAM,cAAc,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,gBAAgB,EAAE;gBACjE,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;aAC1E,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAY,CAAC;YAC5E,IAAI,CAAC,cAAc,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC;YACzG,IAAI,GAAG,UAAU,CAAC;YAClB,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QAChF,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAC;IACzG,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAI,KAAoC,CAAC,YAAY,CAAC;IACjE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACtF,CAAC"}

package/dist/project-env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project-env.d.ts","sourceRoot":"","sources":["../src/project-env.ts"],"names":[],"mappings":"AAIA,uEAAuE;AACvE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAmBpE;AAED,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAGvE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,WAAW,SAAgB,EAC3B,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,MAAM,EAAE,CAgBV"}
+{"version":3,"file":"project-env.d.ts","sourceRoot":"","sources":["../src/project-env.ts"],"names":[],"mappings":"AAIA,uEAAuE;AACvE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAmBpE;AAED,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAGvE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,WAAW,SAAgB,EAC3B,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,MAAM,EAAE,CAUV"}

package/dist/project-env.js

@@ -1,6 +1,6 @@
 import { chmodSync, existsSync, readFileSync } from "node:fs";
 import { basename, resolve } from "node:path";
-import { isPrivateEnvFileName, mirrorEnvAliasesInPlace } from "@assemblyline-agents/core";
+import { isPrivateEnvFileName } from "@assemblyline-agents/core";
 /** Parse `KEY=VALUE` lines (quotes stripped, `#` comments ignored). */
 export function parseEnvSecrets(text) {
     const out = {};
@@ -38,10 +38,8 @@ export function readEnvSecretsFile(path) {
  */
 export function loadProjectEnv(projectRoot = process.cwd(), env = process.env) {
     const path = resolve(projectRoot, ".env");
-    if (!existsSync(path)) {
-        mirrorEnvAliasesInPlace(env);
+    if (!existsSync(path))
         return [];
-    }
     const loaded = [];
     for (const [key, value] of Object.entries(readEnvSecretsFile(path))) {
         if (env[key] !== undefined)
@@ -49,9 +47,6 @@ export function loadProjectEnv(projectRoot = process.cwd(), env = process.env) {
         env[key] = value;
         loaded.push(key);
     }
-    // Rename compatibility: expose every branded variable under both its
-    // ASSEMBLY_LINE_* and OPENEVE_* spellings after the .env merge.
-    mirrorEnvAliasesInPlace(env);
     return loaded;
 }
 //# sourceMappingURL=project-env.js.map

package/dist/project-env.js.map

@@ -1 +1 @@
-{"version":3,"file":"project-env.js","sourceRoot":"","sources":["../src/project-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAE1F,uEAAuE;AACvE,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAChG,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,EAAE,IAAI,CAAC;YAAE,SAAS;QACtB,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QACrD,IAAI,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACrG,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjE,OAAO,eAAe,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,EAC3B,MAA0C,OAAO,CAAC,GAAG;IAErD,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,uBAAuB,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACpE,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,SAAS;QACrC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,qEAAqE;IACrE,gEAAgE;IAChE,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"project-env.js","sourceRoot":"","sources":["../src/project-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,uEAAuE;AACvE,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAChG,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,EAAE,IAAI,CAAC;YAAE,SAAS;QACtB,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QACrD,IAAI,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACrG,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjE,OAAO,eAAe,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,EAC3B,MAA0C,OAAO,CAAC,GAAG;IAErD,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACpE,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,SAAS;QACrC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/release-history.d.ts

@@ -0,0 +1,20 @@
+import type { AgentManifest } from "@assemblyline-agents/core";
+export interface ReleaseSnapshot {
+    version?: string;
+    gitSha: string;
+    agentRevision: string;
+    actor: string;
+    repositoryRoot?: string;
+    namespace?: string;
+}
+export declare function findReleaseSnapshot(repositoryRoot: string, namespace: string | undefined, agentRevision: string): ReleaseSnapshot | undefined;
+/**
+ * Capture the exact compiled agent source in a detached Git commit before a
+ * provider receives it. The sequential rev-N tag is added only after the
+ * provider has activated and health-checked the release.
+ */
+export declare function prepareReleaseSnapshot(agentRoot: string, manifest: AgentManifest): ReleaseSnapshot | undefined;
+export declare function finalizeReleaseSnapshot(snapshot: ReleaseSnapshot): ReleaseSnapshot;
+export declare function releaseSnapshotForReceipt(prepared: ReleaseSnapshot | undefined, receipt: unknown, activated: boolean): ReleaseSnapshot | undefined;
+export declare function withReleaseSnapshot(receipt: unknown, snapshot: ReleaseSnapshot | undefined): unknown;
+//# sourceMappingURL=release-history.d.ts.map

package/dist/release-history.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-history.d.ts","sourceRoot":"","sources":["../src/release-history.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAM/D,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA6ED,wBAAgB,mBAAmB,CACjC,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,aAAa,EAAE,MAAM,GACpB,eAAe,GAAG,SAAS,CAgB7B;AAoBD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,GAAG,eAAe,GAAG,SAAS,CA0E9G;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,eAAe,GAAG,eAAe,CAWlF;AAED,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,eAAe,GAAG,SAAS,EACrC,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,OAAO,GACjB,eAAe,GAAG,SAAS,CAS7B;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,GAAG,SAAS,GAAG,OAAO,CAWpG"}

package/dist/release-history.js

@@ -0,0 +1,232 @@
+import { createHash, randomUUID } from "node:crypto";
+import { existsSync, readFileSync, realpathSync, rmSync } from "node:fs";
+import { isAbsolute, relative, resolve, sep } from "node:path";
+import { spawnSync } from "node:child_process";
+const RELEASE_VERSION = /^rev-(\d+)$/u;
+const RELEASE_GIT_SHA = /^[a-f0-9]{40,64}$/u;
+const RELEASE_REVISION_TRAILER = "Assembly-Line-Agent-Revision: ";
+function git(cwd, args, env) {
+    const result = spawnSync("git", args, {
+        cwd,
+        env: env ? { ...process.env, ...env } : process.env,
+        encoding: "utf8",
+    });
+    return {
+        ok: result.status === 0,
+        stdout: (result.stdout ?? "").trim(),
+        stderr: (result.stderr ?? "").trim(),
+    };
+}
+function requireGit(cwd, args, env) {
+    const result = git(cwd, args, env);
+    if (!result.ok)
+        throw new Error(result.stderr || `git ${args[0] ?? "command"} failed`);
+    return result.stdout;
+}
+function safeRelativePath(path) {
+    if (!path || isAbsolute(path))
+        return false;
+    return path.split(/[\\/]/u).every((part) => part.length > 0 && part !== "." && part !== "..");
+}
+function posixPath(path) {
+    return path.split(sep).join("/");
+}
+function releaseNamespace(identity) {
+    const slug = identity
+        .toLocaleLowerCase()
+        .replace(/[^a-z0-9]+/gu, "-")
+        .replace(/^-+|-+$/gu, "") || "agent";
+    const digest = createHash("sha256").update(identity).digest("hex").slice(0, 8);
+    return `assembly-line/agents/${slug}-${digest}`;
+}
+function versionFromTag(tag) {
+    const value = tag.split("/").at(-1);
+    return value && RELEASE_VERSION.test(value) ? value : undefined;
+}
+function tagFor(namespace, version) {
+    return namespace ? `${namespace}/${version}` : version;
+}
+function releaseTags(repositoryRoot, namespace) {
+    const pattern = namespace ? `${namespace}/rev-*` : "rev-*";
+    return requireGit(repositoryRoot, ["tag", "--list", pattern])
+        .split("\n")
+        .map((tag) => tag.trim())
+        .filter(Boolean)
+        .sort((left, right) => {
+        const leftVersion = Number(versionFromTag(left)?.slice(4) ?? 0);
+        const rightVersion = Number(versionFromTag(right)?.slice(4) ?? 0);
+        return leftVersion - rightVersion;
+    });
+}
+function revisionFromCommit(repositoryRoot, reference) {
+    const message = git(repositoryRoot, ["show", "-s", "--format=%B", reference]);
+    if (!message.ok)
+        return undefined;
+    return message.stdout
+        .split("\n")
+        .find((line) => line.startsWith(RELEASE_REVISION_TRAILER))
+        ?.slice(RELEASE_REVISION_TRAILER.length)
+        .trim();
+}
+export function findReleaseSnapshot(repositoryRoot, namespace, agentRevision) {
+    for (const tag of releaseTags(repositoryRoot, namespace)) {
+        if (revisionFromCommit(repositoryRoot, tag) !== agentRevision)
+            continue;
+        const version = versionFromTag(tag);
+        const commit = git(repositoryRoot, ["rev-parse", `${tag}^{commit}`]);
+        if (!version || !commit.ok || !RELEASE_GIT_SHA.test(commit.stdout))
+            continue;
+        return {
+            version,
+            gitSha: commit.stdout,
+            agentRevision,
+            actor: git(repositoryRoot, ["show", "-s", "--format=%an", tag]).stdout || "Assembly Line CLI",
+            repositoryRoot,
+            ...(namespace ? { namespace } : {}),
+        };
+    }
+    return undefined;
+}
+function externalReleaseSnapshot(agentRevision) {
+    const version = process.env.ASSEMBLY_LINE_RELEASE_VERSION?.trim();
+    const gitSha = process.env.ASSEMBLY_LINE_RELEASE_GIT_SHA?.trim();
+    if (!version && !gitSha)
+        return undefined;
+    if (!version || !RELEASE_VERSION.test(version)) {
+        throw new Error("ASSEMBLY_LINE_RELEASE_VERSION must use the rev-N format.");
+    }
+    if (!gitSha || !RELEASE_GIT_SHA.test(gitSha)) {
+        throw new Error("ASSEMBLY_LINE_RELEASE_GIT_SHA must be a full Git commit SHA.");
+    }
+    return {
+        version,
+        gitSha,
+        agentRevision,
+        actor: process.env.ASSEMBLY_LINE_RELEASE_ACTOR?.trim() || "Assembly Line Builder",
+    };
+}
+/**
+ * Capture the exact compiled agent source in a detached Git commit before a
+ * provider receives it. The sequential rev-N tag is added only after the
+ * provider has activated and health-checked the release.
+ */
+export function prepareReleaseSnapshot(agentRoot, manifest) {
+    const supplied = externalReleaseSnapshot(manifest.agentRevision);
+    if (supplied)
+        return supplied;
+    const canonicalRoot = realpathSync(resolve(agentRoot));
+    const repository = git(canonicalRoot, ["rev-parse", "--show-toplevel"]);
+    if (!repository.ok)
+        return undefined;
+    const repositoryRoot = realpathSync(resolve(repository.stdout));
+    const relativeRoot = posixPath(relative(repositoryRoot, canonicalRoot)) || ".";
+    if (relativeRoot.startsWith("../") || relativeRoot === "..")
+        return undefined;
+    const identity = manifest.agent.id?.trim() || relativeRoot;
+    const namespace = repositoryRoot === canonicalRoot ? undefined : releaseNamespace(identity);
+    const existing = findReleaseSnapshot(repositoryRoot, namespace, manifest.agentRevision);
+    if (existing)
+        return existing;
+    const gitDirValue = requireGit(repositoryRoot, ["rev-parse", "--git-dir"]);
+    const gitDir = isAbsolute(gitDirValue) ? gitDirValue : resolve(repositoryRoot, gitDirValue);
+    const index = resolve(gitDir, `assembly-line-release-index-${randomUUID()}`);
+    const indexEnv = { GIT_INDEX_FILE: index };
+    const parent = git(repositoryRoot, ["rev-parse", "--verify", "HEAD"]);
+    try {
+        if (parent.ok) {
+            requireGit(repositoryRoot, ["read-tree", "HEAD"], indexEnv);
+            requireGit(repositoryRoot, ["rm", "-r", "--cached", "--ignore-unmatch", "--", relativeRoot], indexEnv);
+        }
+        const paths = manifest.files.map((file) => {
+            if (!safeRelativePath(file.path))
+                throw new Error(`Compiled source path is unsafe: ${file.path}`);
+            const full = resolve(canonicalRoot, file.path);
+            if (!full.startsWith(`${canonicalRoot}${sep}`) || !existsSync(full)) {
+                throw new Error(`Compiled source file changed before release snapshot: ${file.path}`);
+            }
+            const sha256 = createHash("sha256").update(readFileSync(full)).digest("hex");
+            if (sha256 !== file.sha256) {
+                throw new Error(`Compiled source file changed before release snapshot: ${file.path}`);
+            }
+            return relativeRoot === "." ? file.path : `${relativeRoot}/${file.path}`;
+        });
+        for (let offset = 0; offset < paths.length; offset += 100) {
+            requireGit(repositoryRoot, ["add", "-f", "--", ...paths.slice(offset, offset + 100)], indexEnv);
+        }
+        const tree = requireGit(repositoryRoot, ["write-tree"], indexEnv);
+        const configuredName = git(repositoryRoot, ["config", "user.name"]).stdout;
+        const configuredEmail = git(repositoryRoot, ["config", "user.email"]).stdout;
+        const actor = configuredName || "Assembly Line CLI";
+        const identityArgs = configuredName && configuredEmail
+            ? []
+            : ["-c", "user.name=Assembly Line CLI", "-c", "user.email=cli@assembly-line.local"];
+        const message = [
+            `Assembly Line release ${manifest.agentRevision.slice(0, 12)}`,
+            "",
+            `Assembly-Line-Agent-Path: ${relativeRoot}`,
+            `Assembly-Line-Agent-Identity: ${identity}`,
+            `${RELEASE_REVISION_TRAILER}${manifest.agentRevision}`,
+        ].join("\n");
+        const commitArgs = [
+            ...identityArgs,
+            "commit-tree",
+            tree,
+            "-m",
+            message,
+            ...(parent.ok ? ["-p", parent.stdout] : []),
+        ];
+        const gitSha = requireGit(repositoryRoot, commitArgs, indexEnv);
+        return {
+            gitSha,
+            agentRevision: manifest.agentRevision,
+            actor,
+            repositoryRoot,
+            ...(namespace ? { namespace } : {}),
+        };
+    }
+    finally {
+        rmSync(index, { force: true });
+    }
+}
+export function finalizeReleaseSnapshot(snapshot) {
+    if (snapshot.version || !snapshot.repositoryRoot)
+        return snapshot;
+    for (let attempt = 0; attempt < 20; attempt += 1) {
+        const versions = releaseTags(snapshot.repositoryRoot, snapshot.namespace)
+            .map((tag) => Number(versionFromTag(tag)?.slice(4) ?? 0));
+        const version = `rev-${Math.max(0, ...versions) + 1}`;
+        const tagged = git(snapshot.repositoryRoot, ["tag", tagFor(snapshot.namespace, version), snapshot.gitSha]);
+        if (tagged.ok)
+            return { ...snapshot, version };
+        if (!/already exists/iu.test(tagged.stderr))
+            throw new Error(tagged.stderr || "Could not record release tag.");
+    }
+    throw new Error("Could not allocate the next release version after concurrent deployments.");
+}
+export function releaseSnapshotForReceipt(prepared, receipt, activated) {
+    const record = receipt && typeof receipt === "object" && !Array.isArray(receipt)
+        ? receipt
+        : {};
+    const agentRevision = typeof record.agentRevision === "string" ? record.agentRevision : prepared?.agentRevision;
+    if (!agentRevision)
+        return undefined;
+    if (prepared?.agentRevision === agentRevision)
+        return activated ? finalizeReleaseSnapshot(prepared) : prepared;
+    if (!prepared?.repositoryRoot)
+        return undefined;
+    return findReleaseSnapshot(prepared.repositoryRoot, prepared.namespace, agentRevision);
+}
+export function withReleaseSnapshot(receipt, snapshot) {
+    if (!snapshot?.version)
+        return receipt;
+    const record = receipt && typeof receipt === "object" && !Array.isArray(receipt)
+        ? receipt
+        : {};
+    return {
+        ...record,
+        releaseVersion: snapshot.version,
+        releaseGitSha: snapshot.gitSha,
+        releaseActor: snapshot.actor,
+    };
+}
+//# sourceMappingURL=release-history.js.map

package/dist/release-history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-history.js","sourceRoot":"","sources":["../src/release-history.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAG/C,MAAM,eAAe,GAAG,cAAc,CAAC;AACvC,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAC7C,MAAM,wBAAwB,GAAG,gCAAgC,CAAC;AAiBlE,SAAS,GAAG,CAAC,GAAW,EAAE,IAAc,EAAE,GAAuB;IAC/D,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE;QACpC,GAAG;QACH,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG;QACnD,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC;IACH,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QACvB,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACpC,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;KACrC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,IAAc,EAAE,GAAuB;IACtE,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,SAAS,SAAS,CAAC,CAAC;IACvF,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,IAAI,GAAG,QAAQ;SAClB,iBAAiB,EAAE;SACnB,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC;SAC5B,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC;IACvC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/E,OAAO,wBAAwB,IAAI,IAAI,MAAM,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,OAAO,KAAK,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAClE,CAAC;AAED,SAAS,MAAM,CAAC,SAA6B,EAAE,OAAe;IAC5D,OAAO,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AACzD,CAAC;AAED,SAAS,WAAW,CAAC,cAAsB,EAAE,SAA6B;IACxE,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;IAC3D,OAAO,UAAU,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;SAC1D,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;SACxB,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACpB,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAChE,MAAM,YAAY,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,OAAO,WAAW,GAAG,YAAY,CAAC;IACpC,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,kBAAkB,CAAC,cAAsB,EAAE,SAAiB;IACnE,MAAM,OAAO,GAAG,GAAG,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;IAC9E,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IAClC,OAAO,OAAO,CAAC,MAAM;SAClB,KAAK,CAAC,IAAI,CAAC;SACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;QAC1D,EAAE,KAAK,CAAC,wBAAwB,CAAC,MAAM,CAAC;SACvC,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,cAAsB,EACtB,SAA6B,EAC7B,aAAqB;IAErB,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,cAAc,EAAE,SAAS,CAAC,EAAE,CAAC;QACzD,IAAI,kBAAkB,CAAC,cAAc,EAAE,GAAG,CAAC,KAAK,aAAa;YAAE,SAAS;QACxE,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,GAAG,CAAC,cAAc,EAAE,CAAC,WAAW,EAAE,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,SAAS;QAC7E,OAAO;YACL,OAAO;YACP,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,aAAa;YACb,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,mBAAmB;YAC7F,cAAc;YACd,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpC,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,uBAAuB,CAAC,aAAqB;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAI,EAAE,CAAC;IAClE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAI,EAAE,CAAC;IACjE,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,OAAO;QACL,OAAO;QACP,MAAM;QACN,aAAa;QACb,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE,IAAI,uBAAuB;KAClF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAAiB,EAAE,QAAuB;IAC/E,MAAM,QAAQ,GAAG,uBAAuB,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACjE,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,GAAG,CAAC,aAAa,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,cAAc,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC,IAAI,GAAG,CAAC;IAC/E,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAE9E,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,YAAY,CAAC;IAC3D,MAAM,SAAS,GAAG,cAAc,KAAK,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC5F,MAAM,QAAQ,GAAG,mBAAmB,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;IACxF,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,WAAW,GAAG,UAAU,CAAC,cAAc,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,+BAA+B,UAAU,EAAE,EAAE,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,cAAc,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,UAAU,CAAC,cAAc,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC5D,UAAU,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAE,YAAY,CAAC,EAAE,QAAQ,CAAC,CAAC;QACzG,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACxC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAClG,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,aAAa,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpE,MAAM,IAAI,KAAK,CAAC,yDAAyD,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7E,IAAI,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,yDAAyD,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,OAAO,YAAY,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,YAAY,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC3E,CAAC,CAAC,CAAC;QACH,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,GAAG,EAAE,CAAC;YAC1D,UAAU,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAClG,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,CAAC,cAAc,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,CAAC;QAClE,MAAM,cAAc,GAAG,GAAG,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3E,MAAM,eAAe,GAAG,GAAG,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7E,MAAM,KAAK,GAAG,cAAc,IAAI,mBAAmB,CAAC;QACpD,MAAM,YAAY,GAAG,cAAc,IAAI,eAAe;YACpD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,oCAAoC,CAAC,CAAC;QACtF,MAAM,OAAO,GAAG;YACd,yBAAyB,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;YAC9D,EAAE;YACF,6BAA6B,YAAY,EAAE;YAC3C,iCAAiC,QAAQ,EAAE;YAC3C,GAAG,wBAAwB,GAAG,QAAQ,CAAC,aAAa,EAAE;SACvD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,UAAU,GAAG;YACjB,GAAG,YAAY;YACf,aAAa;YACb,IAAI;YACJ,IAAI;YACJ,OAAO;YACP,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC;QACF,MAAM,MAAM,GAAG,UAAU,CAAC,cAAc,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAChE,OAAO;YACL,MAAM;YACN,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,KAAK;YACL,cAAc;YACd,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpC,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAAyB;IAC/D,IAAI,QAAQ,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc;QAAE,OAAO,QAAQ,CAAC;IAClE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,SAAS,CAAC;aACtE,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3G,IAAI,MAAM,CAAC,EAAE;YAAE,OAAO,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC/C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,+BAA+B,CAAC,CAAC;IACjH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,QAAqC,EACrC,OAAgB,EAChB,SAAkB;IAElB,MAAM,MAAM,GAAG,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAC9E,CAAC,CAAC,OAAkC;QACpC,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,aAAa,GAAG,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC;IAChH,IAAI,CAAC,aAAa;QAAE,OAAO,SAAS,CAAC;IACrC,IAAI,QAAQ,EAAE,aAAa,KAAK,aAAa;QAAE,OAAO,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC/G,IAAI,CAAC,QAAQ,EAAE,cAAc;QAAE,OAAO,SAAS,CAAC;IAChD,OAAO,mBAAmB,CAAC,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAgB,EAAE,QAAqC;IACzF,IAAI,CAAC,QAAQ,EAAE,OAAO;QAAE,OAAO,OAAO,CAAC;IACvC,MAAM,MAAM,GAAG,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAC9E,CAAC,CAAC,OAAkC;QACpC,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;QACL,GAAG,MAAM;QACT,cAAc,EAAE,QAAQ,CAAC,OAAO;QAChC,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,YAAY,EAAE,QAAQ,CAAC,KAAK;KAC7B,CAAC;AACJ,CAAC"}

package/dist/secrets.d.ts

@@ -1,3 +1,14 @@
+import type { AgentManifest, DeployPlan } from "@assemblyline-agents/core";
 import type { ParsedArgs } from "./args.js";
 export declare function runSecretsCommand(agentRoot: string, parsed: ParsedArgs): Promise<void>;
+export declare function classifySecretDiff(manifest: AgentManifest, plan: DeployPlan, remote: ReadonlySet<string>, local: Record<string, string | undefined>): {
+    required: string[];
+    optional: string[];
+    providerManaged: string[];
+    missingRemoteRequired: string[];
+    unsetRemoteOptional: string[];
+    missingLocalRequired: string[];
+    unsetLocalOptional: string[];
+    extraRemote: string[];
+};
 //# sourceMappingURL=secrets.d.ts.map

package/dist/secrets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAG5C,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAuC5F"}
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAkB,UAAU,EAA+C,MAAM,2BAA2B,CAAC;AAExI,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAG5C,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAsC5F;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,aAAa,EACvB,IAAI,EAAE,UAAU,EAChB,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,EAC3B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACxC;IACD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,CAsBA"}

package/dist/secrets.js

@@ -1,6 +1,6 @@
 import { fileURLToPath } from "node:url";
 import { compileAgent, planDeployment } from "@assemblyline-agents/compiler";
-import { resolveProvider } from "@assemblyline-agents/node";
+import { resolveProvider, resolveSecretsEnv } from "@assemblyline-agents/node";
 import { resolveDeployDefinition, resolveDeployEnvironment } from "./deploy-definition.js";
 export async function runSecretsCommand(agentRoot, parsed) {
     const subcommand = parsed.positional[0];
@@ -26,23 +26,76 @@ export async function runSecretsCommand(agentRoot, parsed) {
     if (!publisher.inspectSecrets)
         throw new Error(`Deploy target ${plan.target} does not support secret inventory.`);
     const remote = new Set(await publisher.inspectSecrets(artifact, plan));
-    const required = plan.requirements
-        .filter((requirement) => requirement.kind === "env" && requirement.adapter !== plan.target)
-        .map((requirement) => requirement.name)
-        .sort();
-    const missingRemote = required.filter((name) => !remote.has(name));
-    const extraRemote = [...remote].filter((name) => !required.includes(name)).sort();
-    const missingLocal = required.filter((name) => !process.env[name]);
+    const localEnv = await resolveSecretsEnv({
+        manifest,
+        env: process.env,
+        artifactRoot: agentRoot,
+        providerRoot: fileURLToPath(new URL("..", import.meta.url)),
+        devMode: false
+    });
+    const diff = classifySecretDiff(manifest, plan, remote, localEnv);
     console.log(JSON.stringify({
         target: plan.target,
-        required,
+        environment: plan.environment,
+        ...diff,
         configuredRemote: [...remote].sort(),
-        missingRemote,
-        missingLocal,
-        extraRemote,
         valuesExposed: false
     }, null, 2));
-    if (missingRemote.length > 0)
+    if (diff.missingRemoteRequired.length > 0)
         process.exitCode = 2;
 }
+export function classifySecretDiff(manifest, plan, remote, local) {
+    const requirements = (plan.requirements ?? []).filter((requirement) => requirement.kind === "env" && requirement.adapter !== plan.target);
+    const managed = providerManagedSecretNames(manifest, plan);
+    const required = requirements.filter((requirement) => requirement.required !== false);
+    const optional = requirements.filter((requirement) => requirement.required === false);
+    const missingRemoteRequired = missingGroups(required, (name) => remote.has(name), managed);
+    const unsetRemoteOptional = missingGroups(optional, (name) => remote.has(name), managed);
+    const missingLocalRequired = missingGroups(required, (name) => Boolean(local[name]?.trim()), managed);
+    const unsetLocalOptional = missingGroups(optional, (name) => Boolean(local[name]?.trim()), managed);
+    const declared = new Set(requirements.flatMap(requirementNames));
+    return {
+        required: required.map((requirement) => requirementLabel(requirement)).sort(),
+        optional: optional.map((requirement) => requirementLabel(requirement)).sort(),
+        providerManaged: [...managed].sort(),
+        missingRemoteRequired,
+        unsetRemoteOptional,
+        missingLocalRequired,
+        unsetLocalOptional,
+        extraRemote: [...remote].filter((name) => !declared.has(name) && !managed.has(name)).sort()
+    };
+}
+function missingGroups(requirements, configured, managed) {
+    return requirements
+        .filter((requirement) => !requirementNames(requirement).some((name) => configured(name) || managed.has(name)))
+        .map(requirementLabel)
+        .sort();
+}
+function requirementNames(requirement) {
+    return [requirement.name, ...(requirement.alternatives ?? [])];
+}
+function requirementLabel(requirement) {
+    return requirementNames(requirement).join(" or ");
+}
+function providerManagedSecretNames(manifest, plan) {
+    const managed = new Set();
+    if (plan.target === "vps")
+        managed.add("ASSEMBLY_LINE_PUBLIC_URL");
+    if (plan.target === "railway" &&
+        manifest.gateway.state?.kind === "postgres" &&
+        manifest.gateway.state.options?.provider === "railway" &&
+        manifest.gateway.state.options.provision !== false) {
+        managed.add("DATABASE_URL");
+    }
+    if (plan.target === "vps" && manifest.gateway.state?.kind === "postgres") {
+        const database = manifest.gateway.deploy?.kind === "vps" ? manifest.gateway.deploy.options?.database : undefined;
+        if (database && typeof database === "object" && !Array.isArray(database) && database.mode === "host") {
+            managed.add("DATABASE_URL");
+            managed.add("AWS_ACCESS_KEY_ID");
+            managed.add("AWS_SECRET_ACCESS_KEY");
+            managed.add("AWS_DEFAULT_REGION");
+        }
+    }
+    return managed;
+}
 //# sourceMappingURL=secrets.js.map