@assemblyline-agents/cli 5.0.10 → 6.0.0

package/dist/provider-deploy.js

@@ -0,0 +1,163 @@
+import { fileURLToPath } from "node:url";
+import { resolveProvider } from "@assemblyline-agents/node";
+import { booleanFlag } from "./args.js";
+import { wireConnectionEvents } from "./connections.js";
+import { executeDeployCleanup, executeDeployLifecycle } from "./deploy-lifecycle.js";
+import { configuredMigrationRequest, runConfiguredMigrations } from "./deploy-migrations.js";
+import { assertDestroyAllowed, removeDeployReceipts, writeDeployReceipt } from "./deploy-receipts.js";
+import { reusableSandboxEnvironmentResolutions, sandboxEnvironmentReconciler } from "./deploy-sandbox-environments.js";
+import { syncDeploySecretsIfRequested } from "./deploy-secrets.js";
+import { releaseSnapshotForReceipt, withReleaseSnapshot } from "./release-history.js";
+/** Run a non-kernel deployment through the selected plugin's publisher. */
+export async function runProviderDeploy(artifact, plan, definition, parsed, agentRoot, release, deployEnv) {
+    if (parsed.flags["domains-only"] !== undefined) {
+        throw new Error("--domains-only was removed. Use --ingress-only.");
+    }
+    const publisher = await resolveProvider("deploy", definition, {
+        env: deployEnv,
+        fetch,
+        manifest: artifact.manifest,
+        artifactRoot: artifact.root,
+        providerRoot: fileURLToPath(new URL("..", import.meta.url)),
+        devMode: false
+    });
+    const modeFlags = ["prepare-only", "activate", "rollback", "ingress-only", "destroy"]
+        .filter((flag) => booleanFlag(parsed, flag));
+    if (modeFlags.length > 1) {
+        throw new Error(`Deploy lifecycle flags are mutually exclusive: ${modeFlags.map((flag) => `--${flag}`).join(", ")}.`);
+    }
+    if (booleanFlag(parsed, "destroy")) {
+        if (!publisher.destroy)
+            throw new Error(`Deploy target ${plan.target} does not support destroy.`);
+        assertDestroyAllowed(plan, parsed);
+        const receipt = await publisher.destroy(artifact, plan, { purgeData: booleanFlag(parsed, "purge-data") });
+        removeDeployReceipts(artifact.root, plan);
+        console.log(`${plan.target} environment "${plan.environment}" destroyed${booleanFlag(parsed, "purge-data") ? " (data purged)" : ""}.`);
+        console.log(JSON.stringify(receipt, null, 2));
+        return;
+    }
+    if (booleanFlag(parsed, "activate")) {
+        if (!publisher.activate)
+            throw new Error(`Deploy target ${plan.target} does not support separate activation.`);
+        const activate = publisher.activate;
+        await publisher.preflight?.(artifact, plan);
+        const providerReceipt = await deployActionWithCleanup(publisher, artifact, plan, () => activate.call(publisher, artifact, plan));
+        const receipt = withReleaseSnapshot(providerReceipt, releaseSnapshotForReceipt(release, providerReceipt, true));
+        writeDeployReceipt(artifact.root, plan, receipt);
+        await wireDeployedConnectionEvents(artifact.manifest, receipt);
+        console.log(`${plan.target} prepared release activated.`);
+        console.log(JSON.stringify(receipt, null, 2));
+        return;
+    }
+    if (booleanFlag(parsed, "rollback")) {
+        if (!publisher.rollback)
+            throw new Error(`Deploy target ${plan.target} does not support rollback.`);
+        const rollback = publisher.rollback;
+        await publisher.preflight?.(artifact, plan);
+        const providerReceipt = await deployActionWithCleanup(publisher, artifact, plan, () => rollback.call(publisher, artifact, plan));
+        const receipt = withReleaseSnapshot(providerReceipt, releaseSnapshotForReceipt(release, providerReceipt, true));
+        writeDeployReceipt(artifact.root, plan, receipt);
+        await wireDeployedConnectionEvents(artifact.manifest, receipt);
+        console.log(`${plan.target} release rolled back.`);
+        console.log(JSON.stringify(receipt, null, 2));
+        return;
+    }
+    if (booleanFlag(parsed, "ingress-only")) {
+        if (!publisher.reconcileIngress)
+            throw new Error(`Deploy target ${plan.target} does not support ingress reconciliation.`);
+        const reconcileIngress = publisher.reconcileIngress;
+        await publisher.preflight?.(artifact, plan);
+        const receipt = await deployActionWithCleanup(publisher, artifact, plan, () => reconcileIngress.call(publisher, artifact, plan));
+        writeDeployReceipt(artifact.root, plan, receipt);
+        console.log(`${plan.target} ingress reconciled.`);
+        console.log(JSON.stringify(receipt, null, 2));
+        return;
+    }
+    const prepareOnly = booleanFlag(parsed, "prepare-only");
+    const reconcileSandboxEnvironment = sandboxEnvironmentReconciler(artifact, deployEnv, reusableSandboxEnvironmentResolutions(artifact, plan.environment));
+    console.log(`${prepareOnly ? "Preparing" : "Publishing"} Assembly Line revision ${plan.agentRevision} with ${plan.target}.`);
+    const migrationRequest = configuredMigrationRequest(artifact, parsed);
+    const progressStages = [
+        "preflight",
+        ...(reconcileSandboxEnvironment ? ["sandbox-environment"] : []),
+        "prepare",
+        "secrets",
+        "migrations",
+        ...(!prepareOnly ? ["activate"] : []),
+        ...(publisher.cleanup ? ["cleanup"] : [])
+    ];
+    const progressLabels = {
+        preflight: "Checking provider and host",
+        "sandbox-environment": "Reconciling sandbox environment",
+        prepare: "Uploading artifact and preparing runtime image",
+        secrets: "Reconciling runtime secrets",
+        migrations: "Running migrations",
+        activate: "Activating and health-checking the release",
+        cleanup: "Cleaning managed deployment artifacts"
+    };
+    const { providerReceipt, migrationStatus, lifecycle, sandboxEnvironments } = await executeDeployLifecycle({
+        publisher,
+        artifact,
+        plan,
+        migrationRequest,
+        activate: !prepareOnly,
+        ...(reconcileSandboxEnvironment ? { reconcileSandboxEnvironment } : {}),
+        syncSecrets: () => syncDeploySecretsIfRequested(publisher, plan, parsed, deployEnv),
+        runFallbackMigrations: () => runConfiguredMigrations(artifact, plan, migrationRequest),
+        onProgress: (stage) => {
+            const index = progressStages.indexOf(stage);
+            if (index >= 0)
+                console.log(`[${index + 1}/${progressStages.length}] ${progressLabels[stage]}`);
+        }
+    });
+    const providerLifecycleReceipt = {
+        ...providerReceipt,
+        migrationStatus,
+        ...(sandboxEnvironments ? { sandboxEnvironments } : {}),
+        ...(Object.keys(lifecycle).length > 0 ? { lifecycle } : {})
+    };
+    const receipt = withReleaseSnapshot(providerLifecycleReceipt, releaseSnapshotForReceipt(release, providerLifecycleReceipt, !prepareOnly));
+    writeDeployReceipt(artifact.root, plan, receipt);
+    if (!prepareOnly)
+        await wireDeployedConnectionEvents(artifact.manifest, receipt);
+    console.log(`${plan.target} deploy ${prepareOnly ? "prepared" : "completed"}.`);
+    const remoteAuthProviders = artifact.manifest.modelProviders.filter((provider) => provider.authentication.kind === "oauth" && provider.runtime?.remoteExecution);
+    for (const provider of remoteAuthProviders) {
+        console.log(`Persistent model credentials are provisioned. Run \`assembly-line auth ${provider.provider} <agentRoot> --target ${plan.target} --env ${plan.environment}${prepareOnly ? " --prepared" : ""}\` to complete remote authentication.`);
+    }
+    console.log(JSON.stringify(receipt, null, 2));
+}
+async function deployActionWithCleanup(publisher, artifact, plan, action) {
+    try {
+        const receipt = await action();
+        const cleanup = await executeDeployCleanup({ publisher, artifact, plan });
+        return cleanup ? { ...receipt, cleanup } : receipt;
+    }
+    catch (error) {
+        await executeDeployCleanup({ publisher, artifact, plan });
+        throw error;
+    }
+}
+async function wireDeployedConnectionEvents(manifest, receipt) {
+    if (!manifest.connections.some((connection) => connection.events?.enabled))
+        return;
+    const deploymentUrl = receiptField(receipt, "deploymentUrl");
+    if (!deploymentUrl) {
+        console.warn("Connection events were not wired because the deploy target did not return a public deployment URL. Run `assembly-line connections wire <agentRoot> --url <publicUrl>` after ingress is available.");
+        return;
+    }
+    const result = await wireConnectionEvents({
+        baseUrl: deploymentUrl,
+        ...(process.env.ASSEMBLY_LINE_ADMIN_TOKEN ? { token: process.env.ASSEMBLY_LINE_ADMIN_TOKEN } : {}),
+        force: false
+    });
+    console.log("Connection event subscriptions reconciled.");
+    console.log(JSON.stringify(result, null, 2));
+}
+function receiptField(receipt, name) {
+    if (!receipt || typeof receipt !== "object" || Array.isArray(receipt))
+        return undefined;
+    const value = receipt[name];
+    return typeof value === "string" && value.trim() ? value.trim() : undefined;
+}
+//# sourceMappingURL=provider-deploy.js.map

package/dist/provider-deploy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-deploy.js","sourceRoot":"","sources":["../src/provider-deploy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAQzC,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAmB,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EAEvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,0BAA0B,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAC7F,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,qCAAqC,EACrC,4BAA4B,EAC7B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EAEpB,MAAM,sBAAsB,CAAC;AAE9B,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAuB,EACvB,IAAoB,EACpB,UAA6B,EAC7B,MAAkB,EAClB,SAAiB,EACjB,OAAoC,EACpC,SAA4B;IAE5B,IAAI,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,SAAS,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,eAAe,CAAkB,QAAQ,EAAE,UAAU,EAAE;QAC7E,GAAG,EAAE,SAAS;QACd,KAAK;QACL,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,YAAY,EAAE,QAAQ,CAAC,IAAI;QAC3B,YAAY,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3D,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,CAAC,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,CAAC;SAClF,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/C,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,kDAAkD,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxH,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,SAAS,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,CAAC,MAAM,4BAA4B,CAAC,CAAC;QAClG,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;QAC1G,oBAAoB,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,iBAAiB,IAAI,CAAC,WAAW,cAAc,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACvI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,SAAS,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,CAAC,MAAM,wCAAwC,CAAC,CAAC;QAC/G,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;QACpC,MAAM,SAAS,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC5C,MAAM,eAAe,GAAG,MAAM,uBAAuB,CACnD,SAAS,EACT,QAAQ,EACR,IAAI,EACJ,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAC/C,CAAC;QACF,MAAM,OAAO,GAAG,mBAAmB,CACjC,eAAe,EACf,yBAAyB,CAAC,OAAO,EAAE,eAAe,EAAE,IAAI,CAAC,CAC1D,CAAC;QACF,kBAAkB,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,4BAA4B,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,8BAA8B,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,SAAS,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,CAAC,MAAM,6BAA6B,CAAC,CAAC;QACpG,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;QACpC,MAAM,SAAS,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC5C,MAAM,eAAe,GAAG,MAAM,uBAAuB,CACnD,SAAS,EACT,QAAQ,EACR,IAAI,EACJ,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAC/C,CAAC;QACF,MAAM,OAAO,GAAG,mBAAmB,CACjC,eAAe,EACf,yBAAyB,CAAC,OAAO,EAAE,eAAe,EAAE,IAAI,CAAC,CAC1D,CAAC;QACF,kBAAkB,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,4BAA4B,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,uBAAuB,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,SAAS,CAAC,gBAAgB;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,CAAC,MAAM,2CAA2C,CAAC,CAAC;QAC1H,MAAM,gBAAgB,GAAG,SAAS,CAAC,gBAAgB,CAAC;QACpD,MAAM,SAAS,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAC3C,SAAS,EACT,QAAQ,EACR,IAAI,EACJ,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CACvD,CAAC;QACF,kBAAkB,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,sBAAsB,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACxD,MAAM,2BAA2B,GAAG,4BAA4B,CAC9D,QAAQ,EACR,SAAS,EACT,qCAAqC,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAClE,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,2BAA2B,IAAI,CAAC,aAAa,SAAS,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7H,MAAM,gBAAgB,GAAG,0BAA0B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACtE,MAAM,cAAc,GAA2B;QAC7C,WAAW;QACX,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC,qBAA8B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,SAAS;QACT,SAAS;QACT,YAAY;QACZ,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,UAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC;IACF,MAAM,cAAc,GAAyC;QAC3D,SAAS,EAAE,4BAA4B;QACvC,qBAAqB,EAAE,iCAAiC;QACxD,OAAO,EAAE,gDAAgD;QACzD,OAAO,EAAE,6BAA6B;QACtC,UAAU,EAAE,oBAAoB;QAChC,QAAQ,EAAE,4CAA4C;QACtD,OAAO,EAAE,uCAAuC;KACjD,CAAC;IACF,MAAM,EAAE,eAAe,EAAE,eAAe,EAAE,SAAS,EAAE,mBAAmB,EAAE,GAAG,MAAM,sBAAsB,CAAC;QACxG,SAAS;QACT,QAAQ;QACR,IAAI;QACJ,gBAAgB;QAChB,QAAQ,EAAE,CAAC,WAAW;QACtB,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,WAAW,EAAE,GAAG,EAAE,CAAC,4BAA4B,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC;QACnF,qBAAqB,EAAE,GAAG,EAAE,CAAC,uBAAuB,CAAC,QAAQ,EAAE,IAAI,EAAE,gBAAgB,CAAC;QACtF,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;YACpB,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5C,IAAI,KAAK,IAAI,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,cAAc,CAAC,MAAM,KAAK,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClG,CAAC;KACF,CAAC,CAAC;IACH,MAAM,wBAAwB,GAAG;QAC/B,GAAG,eAAe;QAClB,eAAe;QACf,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;IACF,MAAM,OAAO,GAAG,mBAAmB,CACjC,wBAAwB,EACxB,yBAAyB,CAAC,OAAO,EAAE,wBAAwB,EAAE,CAAC,WAAW,CAAC,CAC3E,CAAC;IACF,kBAAkB,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,WAAW;QAAE,MAAM,4BAA4B,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,WAAW,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC;IAChF,MAAM,mBAAmB,GAAG,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC/E,QAAQ,CAAC,cAAc,CAAC,IAAI,KAAK,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,eAAe,CAC9E,CAAC;IACF,KAAK,MAAM,QAAQ,IAAI,mBAAmB,EAAE,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,0EAA0E,QAAQ,CAAC,QAAQ,yBAAyB,IAAI,CAAC,MAAM,UAAU,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,uCAAuC,CAAC,CAAC;IACnP,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,SAA0B,EAC1B,QAAuB,EACvB,IAAoB,EACpB,MAAoC;IAEpC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,oBAAoB,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,4BAA4B,CAAC,QAAuB,EAAE,OAAgB;IACnF,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC;QAAE,OAAO;IACnF,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC7D,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,mMAAmM,CAAC,CAAC;QAClN,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC;QACxC,OAAO,EAAE,aAAa;QACtB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClG,KAAK,EAAE,KAAK;KACb,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY,CAAC,OAAgB,EAAE,IAAY;IAClD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IACxF,MAAM,KAAK,GAAI,OAAmC,CAAC,IAAI,CAAC,CAAC;IACzD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC"}

package/dist/secrets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAkB,UAAU,EAA+C,MAAM,2BAA2B,CAAC;AAExI,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAG5C,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAgD5F;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,aAAa,EACvB,IAAI,EAAE,UAAU,EAChB,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,EAC3B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACxC;IACD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,CA+BA"}
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAkB,UAAU,EAA+C,MAAM,2BAA2B,CAAC;AAExI,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAG5C,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAgD5F;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,aAAa,EACvB,IAAI,EAAE,UAAU,EAChB,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,EAC3B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACxC;IACD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,CA0BA"}

package/dist/secrets.js

@@ -5,7 +5,7 @@ import { resolveDeployDefinition, resolveDeployEnvironment } from "./deploy-defi
 export async function runSecretsCommand(agentRoot, parsed) {
     const subcommand = parsed.positional[0];
     if (subcommand !== "diff")
-        throw new Error("Usage: assembly-line secrets diff <agentRoot> [--target vps] [--env <name>]");
+        throw new Error("Usage: assembly-line secrets diff <agentRoot> [--target <plugin>] [--env <name>]");
     const manifest = compileAgent({ root: agentRoot });
     const target = typeof parsed.flags.target === "string"
         ? parsed.flags.target
@@ -55,15 +55,12 @@ export async function runSecretsCommand(agentRoot, parsed) {
         process.exitCode = 2;
 }
 export function classifySecretDiff(manifest, plan, remote, local) {
-    const requirements = (plan.requirements ?? []).filter((requirement) => requirement.kind === "env"
-        && requirement.classification === "credential"
-        && requirement.adapter !== plan.target);
+    const requirements = (plan.requirements ?? []).filter((requirement) => requirement.kind === "env" && requirement.adapter !== plan.target);
     const managed = providerManagedSecretNames(manifest, plan);
-    // Ordinary store-held credentials resolve at runtime and need no target
-    // copy. Credentials owned by the deploy capability must still be
-    // materialized by its trusted publisher.
-    const deployCredentials = new Set(plan.deployCredentialNames ?? []);
-    const storeHeld = new Set((plan.storeHeldCredentials ?? []).filter((name) => !deployCredentials.has(name)));
+    // Names the gateway secrets store supplies reach the runtime at boot on any
+    // target, so they count as configured remotely — and a lingering target
+    // copy is stale state to prune, not configuration.
+    const storeHeld = new Set(plan.storeHeldCredentials ?? []);
     const required = requirements.filter((requirement) => requirement.required !== false);
     const optional = requirements.filter((requirement) => requirement.required === false);
     const missingRemoteRequired = missingGroups(required, (name) => remote.has(name) || storeHeld.has(name), managed);
@@ -95,24 +92,7 @@ function requirementLabel(requirement) {
     return requirementNames(requirement).join(" or ");
 }
 function providerManagedSecretNames(manifest, plan) {
-    const managed = new Set();
-    if (plan.target === "vps")
-        managed.add("ASSEMBLY_LINE_PUBLIC_URL");
-    if (plan.target === "railway" &&
-        manifest.gateway.state?.kind === "postgres" &&
-        manifest.gateway.state.options?.provider === "railway" &&
-        manifest.gateway.state.options.provision !== false) {
-        managed.add("DATABASE_URL");
-    }
-    if (plan.target === "vps" && manifest.gateway.state?.kind === "postgres") {
-        const database = manifest.gateway.deploy?.kind === "vps" ? manifest.gateway.deploy.options?.database : undefined;
-        if (database && typeof database === "object" && !Array.isArray(database) && database.mode === "host") {
-            managed.add("DATABASE_URL");
-            managed.add("AWS_ACCESS_KEY_ID");
-            managed.add("AWS_SECRET_ACCESS_KEY");
-            managed.add("AWS_DEFAULT_REGION");
-        }
-    }
-    return managed;
+    void manifest;
+    return new Set(plan.managedEnv ?? []);
 }
 //# sourceMappingURL=secrets.js.map

package/dist/secrets.js.map

@@ -1 +1 @@
-{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,2BAA2B,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAE1G,OAAO,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAElH,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAE3F,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,SAAiB,EAAE,MAAkB;IAC3E,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,UAAU,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IAC1H,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ;QACpD,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM;QACrB,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,IAAI,OAAO,CAAC;IAC7C,MAAM,QAAQ,GAAmB,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IAC/D,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC;QAC9C,QAAQ;QACR,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,yBAAyB,EAAE,2BAA2B,CAAC,QAAQ,EAAE,MAAM,CAAC;QACxE,YAAY,EAAE,SAAS;QACvB,YAAY,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3D,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC;IAC7B,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,EAAE;QACpC,MAAM;QACN,WAAW,EAAE,wBAAwB,CAAC,QAAQ,EAAE,MAAM,CAAC;QACvD,MAAM,EAAE,KAAK;QACb,GAAG,EAAE,QAAQ;KACd,CAAC,CAAC;IACH,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,UAAU,CAAC;IAC/C,MAAM,UAAU,GAAG,uBAAuB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1E,4EAA4E;IAC5E,yEAAyE;IACzE,MAAM,SAAS,GAAG,MAAM,eAAe,CAAkB,QAAQ,EAAE,UAAU,EAAE;QAC7E,GAAG,EAAE,QAAQ;QACb,KAAK;QACL,QAAQ;QACR,YAAY,EAAE,SAAS;QACvB,YAAY,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3D,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,CAAC,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,CAAC,MAAM,qCAAqC,CAAC,CAAC;IAClH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,SAAS,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,GAAG,IAAI;QACP,SAAS,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;QACxD,gBAAgB,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE;QACpC,aAAa,EAAE,KAAK;KACrB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACb,IAAI,IAAI,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,QAAuB,EACvB,IAAgB,EAChB,MAA2B,EAC3B,KAAyC;IAWzC,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CACpE,WAAW,CAAC,IAAI,KAAK,KAAK;WACrB,WAAW,CAAC,cAAc,KAAK,YAAY;WAC3C,WAAW,CAAC,OAAO,KAAK,IAAI,CAAC,MAAM,CACzC,CAAC;IACF,MAAM,OAAO,GAAG,0BAA0B,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC3D,wEAAwE;IACxE,iEAAiE;IACjE,yCAAyC;IACzC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,CAAC,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACjF,CAAC;IACF,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC;IACtF,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC;IACtF,MAAM,qBAAqB,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IAClH,MAAM,mBAAmB,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IAChH,MAAM,oBAAoB,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IACtG,MAAM,kBAAkB,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IACpG,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACjE,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE;QAC7E,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE;QAC7E,eAAe,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE;QACpC,qBAAqB;QACrB,mBAAmB;QACnB,oBAAoB;QACpB,kBAAkB;QAClB,WAAW,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;KACrH,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,YAAmD,EACnD,UAAqC,EACrC,OAA4B;IAE5B,OAAO,YAAY;SAChB,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;SAC7G,GAAG,CAAC,gBAAgB,CAAC;SACrB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,gBAAgB,CAAC,WAAuC;IAC/D,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,WAAW,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,gBAAgB,CAAC,WAAuC;IAC/D,OAAO,gBAAgB,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,0BAA0B,CAAC,QAAuB,EAAE,IAAgB;IAC3E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK;QAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IACnE,IACE,IAAI,CAAC,MAAM,KAAK,SAAS;QACzB,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,KAAK,UAAU;QAC3C,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,KAAK,SAAS;QACtD,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,KAAK,EAClD,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;QACzE,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACjH,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACrG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,2BAA2B,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAE1G,OAAO,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAElH,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAE3F,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,SAAiB,EAAE,MAAkB;IAC3E,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,UAAU,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;IAC/H,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ;QACpD,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM;QACrB,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,IAAI,OAAO,CAAC;IAC7C,MAAM,QAAQ,GAAmB,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IAC/D,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC;QAC9C,QAAQ;QACR,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,yBAAyB,EAAE,2BAA2B,CAAC,QAAQ,EAAE,MAAM,CAAC;QACxE,YAAY,EAAE,SAAS;QACvB,YAAY,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3D,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC;IAC7B,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,EAAE;QACpC,MAAM;QACN,WAAW,EAAE,wBAAwB,CAAC,QAAQ,EAAE,MAAM,CAAC;QACvD,MAAM,EAAE,KAAK;QACb,GAAG,EAAE,QAAQ;KACd,CAAC,CAAC;IACH,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,UAAU,CAAC;IAC/C,MAAM,UAAU,GAAG,uBAAuB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1E,4EAA4E;IAC5E,yEAAyE;IACzE,MAAM,SAAS,GAAG,MAAM,eAAe,CAAkB,QAAQ,EAAE,UAAU,EAAE;QAC7E,GAAG,EAAE,QAAQ;QACb,KAAK;QACL,QAAQ;QACR,YAAY,EAAE,SAAS;QACvB,YAAY,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3D,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,CAAC,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,CAAC,MAAM,qCAAqC,CAAC,CAAC;IAClH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,SAAS,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,GAAG,IAAI;QACP,SAAS,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;QACxD,gBAAgB,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE;QACpC,aAAa,EAAE,KAAK;KACrB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACb,IAAI,IAAI,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,QAAuB,EACvB,IAAgB,EAChB,MAA2B,EAC3B,KAAyC;IAWzC,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CACpE,WAAW,CAAC,IAAI,KAAK,KAAK,IAAI,WAAW,CAAC,OAAO,KAAK,IAAI,CAAC,MAAM,CAClE,CAAC;IACF,MAAM,OAAO,GAAG,0BAA0B,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC3D,4EAA4E;IAC5E,wEAAwE;IACxE,mDAAmD;IACnD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC;IACtF,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC;IACtF,MAAM,qBAAqB,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IAClH,MAAM,mBAAmB,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IAChH,MAAM,oBAAoB,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IACtG,MAAM,kBAAkB,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IACpG,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACjE,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE;QAC7E,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE;QAC7E,eAAe,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE;QACpC,qBAAqB;QACrB,mBAAmB;QACnB,oBAAoB;QACpB,kBAAkB;QAClB,WAAW,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;KACrH,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,YAAmD,EACnD,UAAqC,EACrC,OAA4B;IAE5B,OAAO,YAAY;SAChB,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;SAC7G,GAAG,CAAC,gBAAgB,CAAC;SACrB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,gBAAgB,CAAC,WAAuC;IAC/D,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,WAAW,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,gBAAgB,CAAC,WAAuC;IAC/D,OAAO,gBAAgB,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,0BAA0B,CAAC,QAAuB,EAAE,IAAgB;IAC3E,KAAK,QAAQ,CAAC;IACd,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;AACxC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@assemblyline-agents/cli",
-  "version": "5.0.10",
+  "version": "6.0.0",
   "type": "module",
   "bin": {
     "assembly-line": "./dist/index.js"
@@ -17,16 +17,14 @@
   },
   "dependencies": {
     "esbuild": "^0.28.1",
-    "@assemblyline-agents/compiler": "5.0.10",
-    "@assemblyline-agents/core": "5.0.10",
-    "@assemblyline-agents/docs": "5.0.10",
-    "@assemblyline-agents/fly": "5.0.10",
-    "@assemblyline-agents/node": "5.0.10",
-    "@assemblyline-agents/docker": "5.0.10",
-    "@assemblyline-agents/pi": "5.0.10",
-    "@assemblyline-agents/runtime": "5.0.10",
-    "@assemblyline-agents/railway": "5.0.10",
-    "@assemblyline-agents/vps": "5.0.10"
+    "yaml": "^2.9.0",
+    "@assemblyline-agents/compiler": "6.0.0",
+    "@assemblyline-agents/core": "6.0.0",
+    "@assemblyline-agents/docs": "6.0.0",
+    "@assemblyline-agents/openrouter": "6.0.0",
+    "@assemblyline-agents/pi": "6.0.0",
+    "@assemblyline-agents/node": "6.0.0",
+    "@assemblyline-agents/runtime": "6.0.0"
   },
   "description": "Vendor-neutral, filesystem-first framework for durable AI agents.",
   "files": [

package/dist/hosts.d.ts

@@ -1,3 +0,0 @@
-import { type ParsedArgs } from "./args.js";
-export declare function runHostsCommand(parsed: ParsedArgs): Promise<void>;
-//# sourceMappingURL=hosts.d.ts.map

package/dist/hosts.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"hosts.d.ts","sourceRoot":"","sources":["../src/hosts.ts"],"names":[],"mappings":"AAEA,OAAO,EAA2B,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAGrE,wBAAsB,eAAe,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA8CvE"}

package/dist/hosts.js

@@ -1,60 +0,0 @@
-import { resolve } from "node:path";
-import { bootstrapHetznerHost } from "@assemblyline-agents/vps";
-import { booleanFlag, stringFlag } from "./args.js";
-import { runCommand } from "./deploy.js";
-export async function runHostsCommand(parsed) {
-    const subcommand = parsed.positional[0];
-    if (subcommand !== "bootstrap") {
-        throw new Error(`Unknown hosts subcommand: ${subcommand ?? "(none)"}. Usage: assembly-line hosts bootstrap --provider hetzner ...`);
-    }
-    const provider = requiredFlag(parsed, "provider");
-    if (provider !== "hetzner")
-        throw new Error(`Unsupported host bootstrap provider: ${provider}.`);
-    const location = stringFlag(parsed, "location");
-    const serverType = stringFlag(parsed, "server-type");
-    const image = stringFlag(parsed, "image");
-    const sshSource = stringFlag(parsed, "ssh-source");
-    const expectedRegion = stringFlag(parsed, "expected-region");
-    const expectedHostKeySha256 = stringFlag(parsed, "host-key-sha256");
-    const hcloudBin = stringFlag(parsed, "hcloud-bin");
-    const sshBin = stringFlag(parsed, "ssh-bin");
-    const sshKeygenBin = stringFlag(parsed, "ssh-keygen-bin");
-    const defaultVisibilityFlag = stringFlag(parsed, "default-visibility");
-    if (defaultVisibilityFlag && defaultVisibilityFlag !== "public" && defaultVisibilityFlag !== "private") {
-        throw new Error('--default-visibility must be "public" or "private".');
-    }
-    const defaultVisibility = defaultVisibilityFlag === "public" || defaultVisibilityFlag === "private"
-        ? defaultVisibilityFlag
-        : undefined;
-    const receipt = await bootstrapHetznerHost({
-        hostRef: requiredFlag(parsed, "host"),
-        server: requiredFlag(parsed, "server"),
-        inventoryPath: resolve(requiredFlag(parsed, "inventory")),
-        sshPublicKeyPath: resolve(requiredFlag(parsed, "ssh-public-key")),
-        identityFileEnv: stringFlag(parsed, "identity-file-env") ?? "ASSEMBLY_LINE_VPS_SSH_KEY",
-        baseDomain: requiredFlag(parsed, "base-domain"),
-        ...(defaultVisibility ? { defaultVisibility } : {}),
-        ...(location ? { location } : {}),
-        ...(serverType ? { serverType } : {}),
-        ...(image ? { image } : {}),
-        ...(sshSource ? { sshSource } : {}),
-        ...(expectedRegion ? { expectedRegion } : {}),
-        ...(expectedHostKeySha256 ? { expectedHostKeySha256 } : {}),
-        ...(hcloudBin ? { hcloudBin } : {}),
-        ...(sshBin ? { sshBin } : {}),
-        ...(sshKeygenBin ? { sshKeygenBin } : {}),
-        allowGlobalSsh: booleanFlag(parsed, "allow-global-ssh"),
-        rebuild: booleanFlag(parsed, "rebuild"),
-        run: runCommand
-    });
-    for (const warning of receipt.warnings)
-        console.warn(`Warning: ${warning}`);
-    console.log(JSON.stringify(receipt, null, 2));
-}
-function requiredFlag(parsed, name) {
-    const value = stringFlag(parsed, name);
-    if (!value)
-        throw new Error(`assembly-line hosts bootstrap requires --${name} <value>.`);
-    return value;
-}
-//# sourceMappingURL=hosts.js.map

package/dist/hosts.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hosts.js","sourceRoot":"","sources":["../src/hosts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAmB,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAkB;IACtD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,6BAA6B,UAAU,IAAI,QAAQ,+DAA+D,CAAC,CAAC;IACtI,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClD,IAAI,QAAQ,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,GAAG,CAAC,CAAC;IACjG,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACnD,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC7D,MAAM,qBAAqB,GAAG,UAAU,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC1D,MAAM,qBAAqB,GAAG,UAAU,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACvE,IAAI,qBAAqB,IAAI,qBAAqB,KAAK,QAAQ,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;QACvG,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,iBAAiB,GAAG,qBAAqB,KAAK,QAAQ,IAAI,qBAAqB,KAAK,SAAS;QACjG,CAAC,CAAC,qBAAqB;QACvB,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC;QACzC,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC;QACrC,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC;QACtC,aAAa,EAAE,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACzD,gBAAgB,EAAE,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QACjE,eAAe,EAAE,UAAU,CAAC,MAAM,EAAE,mBAAmB,CAAC,IAAI,2BAA2B;QACvF,UAAU,EAAE,YAAY,CAAC,MAAM,EAAE,aAAa,CAAC;QAC/C,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,kBAAkB,CAAC;QACvD,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC;QACvC,GAAG,EAAE,UAAU;KAChB,CAAC,CAAC;IACH,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,YAAY,OAAO,EAAE,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,YAAY,CAAC,MAAkB,EAAE,IAAY;IACpD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,WAAW,CAAC,CAAC;IACzF,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/model-providers.d.ts

@@ -1,5 +0,0 @@
-import type { AgentManifest } from "@assemblyline-agents/core";
-/** Every model spec reachable from the root agent or a nested subagent. */
-export declare function manifestModelSpecs(manifest: Pick<AgentManifest, "possibleModels" | "subagents">): string[];
-export declare function manifestUsesModelProvider(manifest: Pick<AgentManifest, "possibleModels" | "subagents">, providerId: string): boolean;
-//# sourceMappingURL=model-providers.d.ts.map

package/dist/model-providers.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"model-providers.d.ts","sourceRoot":"","sources":["../src/model-providers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE/D,2EAA2E;AAC3E,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,gBAAgB,GAAG,WAAW,CAAC,GAAG,MAAM,EAAE,CAK1G;AAED,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,gBAAgB,GAAG,WAAW,CAAC,EAC7D,UAAU,EAAE,MAAM,GACjB,OAAO,CAET"}

package/dist/model-providers.js

@@ -1,17 +0,0 @@
-/** Every model spec reachable from the root agent or a nested subagent. */
-export function manifestModelSpecs(manifest) {
-    return [
-        ...manifest.possibleModels,
-        ...subagentModelSpecs(manifest.subagents)
-    ];
-}
-export function manifestUsesModelProvider(manifest, providerId) {
-    return manifestModelSpecs(manifest).some((model) => model.startsWith(`${providerId}/`));
-}
-function subagentModelSpecs(subagents) {
-    return subagents.flatMap((subagent) => [
-        ...subagent.possibleModels,
-        ...subagentModelSpecs(subagent.subagents)
-    ]);
-}
-//# sourceMappingURL=model-providers.js.map

package/dist/model-providers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"model-providers.js","sourceRoot":"","sources":["../src/model-providers.ts"],"names":[],"mappings":"AAEA,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB,CAAC,QAA6D;IAC9F,OAAO;QACL,GAAG,QAAQ,CAAC,cAAc;QAC1B,GAAG,kBAAkB,CAAC,QAAQ,CAAC,SAAS,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,QAA6D,EAC7D,UAAkB;IAElB,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAqC;IAC/D,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;QACrC,GAAG,QAAQ,CAAC,cAAc;QAC1B,GAAG,kBAAkB,CAAC,QAAQ,CAAC,SAAS,CAAC;KAC1C,CAAC,CAAC;AACL,CAAC"}

package/dist/state.d.ts

@@ -1,3 +0,0 @@
-import { type ParsedArgs } from "./args.js";
-export declare function runStateCommand(agentRoot: string, parsed: ParsedArgs): Promise<void>;
-//# sourceMappingURL=state.d.ts.map

package/dist/state.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../src/state.ts"],"names":[],"mappings":"AAYA,OAAO,EAA2B,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAKrE,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAmE1F"}

package/dist/state.js

@@ -1,79 +0,0 @@
-import { compileAgent } from "@assemblyline-agents/compiler";
-import { ARTIFACT_DIR_NAME } from "@assemblyline-agents/core";
-import { createSshTransport, hostPostgresUpgradeScript, resolveVpsDeployOptions, resolveVpsHost, transferPostgresToVps, vpsDeploymentNames, ROOT_SCRIPT, assertCommand } from "@assemblyline-agents/vps";
-import { booleanFlag, stringFlag } from "./args.js";
-import { resolveDeployDefinition, resolveDeployEnvironment } from "./deploy-definition.js";
-import { writeJson } from "./deploy.js";
-import { dirname, resolve } from "node:path";
-export async function runStateCommand(agentRoot, parsed) {
-    const subcommand = parsed.positional[0];
-    if (subcommand !== "migrate-postgres" && subcommand !== "upgrade-postgres") {
-        throw new Error(`Unknown state subcommand: ${subcommand ?? "(none)"}. Usage: assembly-line state migrate-postgres|upgrade-postgres <agentRoot> ...`);
-    }
-    const manifest = compileAgent({ root: agentRoot });
-    const definition = resolveDeployDefinition(manifest, "vps", parsed);
-    const deploy = resolveVpsDeployOptions(definition.options ?? {}, process.cwd());
-    if (deploy.database.mode !== "host")
-        throw new Error("Postgres transfer requires VPS database.mode to be host.");
-    const host = resolveVpsHost({
-        host: deploy.host,
-        agentRoot,
-        cwd: deploy.cwd,
-        ...(deploy.hostsFile ? { hostsFile: deploy.hostsFile } : {}),
-        env: process.env
-    });
-    const transport = createSshTransport(host);
-    if (subcommand === "upgrade-postgres") {
-        if (!booleanFlag(parsed, "confirm-upgrade")) {
-            throw new Error("Postgres cluster upgrade requires --confirm-upgrade after reviewing the logical backup, rollback-volume, and downtime plan.");
-        }
-        const result = await transport.runScript(ROOT_SCRIPT + hostPostgresUpgradeScript({ postgresImage: deploy.postgresImage }), [], { silent: true });
-        assertCommand(result, "upgrading host Postgres");
-        const receipt = {
-            target: "vps",
-            operation: "upgrade-postgres",
-            host: host.ref,
-            image: deploy.postgresImage,
-            result: result.stdout.trim(),
-            completedAt: new Date().toISOString()
-        };
-        writeJson(resolve(dirname(agentRoot), artifactDirName(agentRoot), "postgres-upgrade.json"), receipt);
-        console.log(JSON.stringify(receipt, null, 2));
-        return;
-    }
-    const sourceEnv = stringFlag(parsed, "source-url-env") ?? "DATABASE_URL";
-    if (!/^[A-Z_][A-Z0-9_]*$/u.test(sourceEnv)) {
-        throw new Error("--source-url-env must be an uppercase environment variable name.");
-    }
-    const sourceUrl = process.env[sourceEnv];
-    if (!sourceUrl)
-        throw new Error(`Source Postgres URL environment variable ${sourceEnv} is not set.`);
-    const agentId = manifest.agent.id;
-    if (!agentId)
-        throw new Error("Postgres transfer requires a stable agent.id.");
-    const environment = resolveDeployEnvironment(manifest, parsed);
-    const dockerBin = stringFlag(parsed, "docker-bin");
-    const names = vpsDeploymentNames({
-        agentId,
-        environment,
-        hostRef: host.ref,
-        revision: manifest.agentRevision
-    });
-    const receipt = await transferPostgresToVps({
-        sourceUrl,
-        sourceLabel: sourceEnv,
-        postgresImage: deploy.postgresImage,
-        names,
-        transport,
-        sourceQuiesced: booleanFlag(parsed, "source-quiesced"),
-        replaceTarget: booleanFlag(parsed, "replace-target"),
-        ...(dockerBin ? { dockerBin } : {})
-    });
-    writeJson(resolve(dirname(agentRoot), artifactDirName(agentRoot), "postgres-transfer.json"), receipt);
-    console.log(JSON.stringify(receipt, null, 2));
-}
-/** Sibling artifact dir name for receipts. */
-function artifactDirName(_agentRoot) {
-    return ARTIFACT_DIR_NAME;
-}
-//# sourceMappingURL=state.js.map

package/dist/state.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"state.js","sourceRoot":"","sources":["../src/state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,uBAAuB,EACvB,cAAc,EACd,qBAAqB,EACrB,kBAAkB,EAClB,WAAW,EACX,aAAa,EACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAmB,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAC3F,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7C,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB,EAAE,MAAkB;IACzE,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,UAAU,KAAK,kBAAkB,IAAI,UAAU,KAAK,kBAAkB,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,6BAA6B,UAAU,IAAI,QAAQ,gFAAgF,CAAC,CAAC;IACvJ,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,uBAAuB,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,uBAAuB,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAChF,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IACjH,MAAM,IAAI,GAAG,cAAc,CAAC;QAC1B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS;QACT,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,UAAU,KAAK,kBAAkB,EAAE,CAAC;QACtC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,6HAA6H,CAAC,CAAC;QACjJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,SAAS,CACtC,WAAW,GAAG,yBAAyB,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,EAChF,EAAE,EACF,EAAE,MAAM,EAAE,IAAI,EAAE,CACjB,CAAC;QACF,aAAa,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG;YACd,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,kBAAkB;YAC7B,IAAI,EAAE,IAAI,CAAC,GAAG;YACd,KAAK,EAAE,MAAM,CAAC,aAAa;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;YAC5B,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC;QACF,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC,SAAS,CAAC,EAAE,uBAAuB,CAAC,EAAE,OAAO,CAAC,CAAC;QACrG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IACD,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,EAAE,gBAAgB,CAAC,IAAI,cAAc,CAAC;IACzE,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,SAAS,cAAc,CAAC,CAAC;IACrG,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAClC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC/E,MAAM,WAAW,GAAG,wBAAwB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,kBAAkB,CAAC;QAC/B,OAAO;QACP,WAAW;QACX,OAAO,EAAE,IAAI,CAAC,GAAG;QACjB,QAAQ,EAAE,QAAQ,CAAC,aAAa;KACjC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC;QAC1C,SAAS;QACT,WAAW,EAAE,SAAS;QACtB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,KAAK;QACL,SAAS;QACT,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC;QACtD,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC;QACpD,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpC,CAAC,CAAC;IACH,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC,SAAS,CAAC,EAAE,wBAAwB,CAAC,EAAE,OAAO,CAAC,CAAC;IACtG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,8CAA8C;AAC9C,SAAS,eAAe,CAAC,UAAkB;IACzC,OAAO,iBAAiB,CAAC;AAC3B,CAAC"}