@assemblyline-agents/core 1.0.0 → 3.0.0

package/dist/sandbox-types.d.ts

@@ -5,10 +5,10 @@ export interface SandboxSession {
     provider?: string;
     metadata?: JsonObject;
     readFile(path: string): MaybePromise<string>;
+    /** Byte-preserving exact-path read for binary artifacts. */
+    readFileBytes?(path: string): MaybePromise<Uint8Array>;
     writeFile(path: string, contents: string | Uint8Array): MaybePromise<void>;
-    listFiles?(path: string, options?: {
-        excludeTopLevel?: string[];
-    }): MaybePromise<SandboxFileEntry[]>;
+    listFiles?(path: string, options?: SandboxListFilesOptions): MaybePromise<SandboxFileEntry[]>;
     deletePath?(path: string, options?: {
         recursive?: boolean;
     }): MaybePromise<void>;
@@ -21,6 +21,14 @@ export interface SandboxSession {
     snapshot?(request?: SandboxSnapshotRequest): MaybePromise<SandboxSnapshot>;
     dispose?(): MaybePromise<void>;
 }
+export interface SandboxListFilesOptions {
+    /** Directory names pruned only when they are direct children of `path`. */
+    excludeTopLevel?: string[];
+    /** Maximum entries to return. Adapters must stop traversal once reached. */
+    limit?: number;
+    /** Load each file body. Defaults to true for persistence and grep scans. */
+    includeContents?: boolean;
+}
 export interface SandboxSpawnOptions {
     cwd?: string;
     env?: Record<string, string>;
@@ -50,8 +58,13 @@ export interface SandboxSnapshotRequest {
 }
 export interface SandboxFileEntry {
     path: string;
+    /** Empty when `includeContents` is false. */
     contents: string | Uint8Array;
     size?: number;
+    /** Providers should report non-regular entries so workspace sync can reject them. */
+    kind?: "file" | "symlink" | "other";
+    /** Portable POSIX permission bits. Workspace persistence currently preserves executable bits. */
+    mode?: number;
 }
 export interface SandboxCommandResult {
     command: string;
@@ -68,11 +81,69 @@ export interface SandboxSnapshot {
 export interface SandboxDefinition {
     adapter: string;
     image?: string;
+    /** Immutable build context used to provision a provider-native sandbox environment. */
+    environment?: SandboxEnvironmentDefinition;
     workingDirectory?: string;
     env?: string[];
     snapshot?: SandboxSnapshotPolicy;
     metadata?: JsonObject;
 }
+/** Authored, provider-neutral sandbox environment build context. */
+export interface SandboxEnvironmentDefinition {
+    /** Directory relative to the owning sandbox definition file. */
+    context: string;
+    /** Dockerfile path relative to `context`. Defaults to `Dockerfile`. */
+    dockerfile?: string;
+    /** Command executed inside a temporary sandbox to verify a newly resolved artifact. */
+    verifyCommand?: string;
+}
+/** One immutable source file contributing to a compiled sandbox environment. */
+export interface SandboxEnvironmentFile {
+    /** Path relative to the environment context. */
+    path: string;
+    sha256: string;
+    size: number;
+}
+/** Compiler-owned environment identity embedded in the agent manifest. */
+export interface CompiledSandboxEnvironment {
+    sourceKind: "dockerfile";
+    /** Agent-root-relative authored context path. */
+    context: string;
+    /** Built-artifact-relative copy of the complete context. */
+    artifactPath: string;
+    /** Path relative to both `context` and `artifactPath`. */
+    dockerfile: string;
+    verifyCommand?: string;
+    /** SHA-256 over the declaration and complete sorted context inventory. */
+    fingerprint: string;
+    files: SandboxEnvironmentFile[];
+}
+export type SandboxEnvironmentAction = "reused" | "built" | "external";
+/** Input supplied to the selected sandbox provider during hosted deployment. */
+export interface SandboxEnvironmentEnsureInput {
+    agentId: string;
+    sandboxName: string;
+    adapter: string;
+    artifactRoot: string;
+    environment: CompiledSandboxEnvironment;
+}
+/** Sanitized provider result safe to persist in deployment receipts. */
+export interface SandboxEnvironmentResolution {
+    provider: string;
+    artifactKind: string;
+    fingerprint: string;
+    artifactId: string;
+    runtimeReference: string;
+    action: SandboxEnvironmentAction;
+}
+/** Optional deployment-time facet implemented by sandbox providers with build artifacts. */
+export interface SandboxEnvironmentProvisioner {
+    ensureEnvironment(input: SandboxEnvironmentEnsureInput): Promise<SandboxEnvironmentResolution>;
+}
+/** Stable provider-safe base name shared by deploy reconciliation and runtime selection. */
+export declare function sandboxEnvironmentName(agentId: string, sandboxName: string, maxLength?: number): string;
+/** Content-addressed tag owned by Assembly Line; providers must never retarget it. */
+export declare function sandboxEnvironmentTag(fingerprint: string): string;
 export interface InstrumentationSetupContext {
     agentName: string;
     manifest: AgentManifest;

package/dist/sandbox-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-types.d.ts","sourceRoot":"","sources":["../src/sandbox-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1E,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAC7C,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC3E,SAAS,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,YAAY,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACrG,UAAU,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACjF,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,YAAY,CAAC,oBAAoB,CAAC,CAAC;IACzI,KAAK,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;IACrG,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,sBAAsB,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;IAC3E,OAAO,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9B,SAAS,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACzC,KAAK,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;CAC5C;AAED,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,QAAQ,GAAG,YAAY,GAAG,QAAQ,CAAC;AAE/E,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,UAAU,CAAC;CACvB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,UAAU,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,GAAG,UAAU,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,UAAU,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IACjC,QAAQ,CAAC,EAAE,UAAU,CAAC;CACvB;AAED,MAAM,WAAW,2BAA2B;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,aAAa,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CACzC;AAED;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG,KAAK,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;AAEvE,kFAAkF;AAClF,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,mBAAmB,CAAC;IAC3B,oFAAoF;IACpF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,uFAAuF;IACvF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mFAAmF;IACnF,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,yBAAyB;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,2BAA2B,KAAK,YAAY,CAAC,OAAO,CAAC,CAAC;IACxE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,gFAAgF;IAChF,cAAc,CAAC,EAAE,mBAAmB,GAAG,oBAAoB,CAAC;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,UAAU,CAAC;CACvB"}
+{"version":3,"file":"sandbox-types.d.ts","sourceRoot":"","sources":["../src/sandbox-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1E,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAC7C,4DAA4D;IAC5D,aAAa,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACvD,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC3E,SAAS,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,uBAAuB,GAAG,YAAY,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC9F,UAAU,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACjF,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,YAAY,CAAC,oBAAoB,CAAC,CAAC;IACzI,KAAK,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;IACrG,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,sBAAsB,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;IAC3E,OAAO,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,uBAAuB;IACtC,2EAA2E;IAC3E,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9B,SAAS,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACzC,KAAK,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;CAC5C;AAED,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,QAAQ,GAAG,YAAY,GAAG,QAAQ,CAAC;AAE/E,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,UAAU,CAAC;CACvB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,UAAU,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,GAAG,UAAU,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qFAAqF;IACrF,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IACpC,iGAAiG;IACjG,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,UAAU,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uFAAuF;IACvF,WAAW,CAAC,EAAE,4BAA4B,CAAC;IAC3C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IACjC,QAAQ,CAAC,EAAE,UAAU,CAAC;CACvB;AAED,oEAAoE;AACpE,MAAM,WAAW,4BAA4B;IAC3C,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uFAAuF;IACvF,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,gFAAgF;AAChF,MAAM,WAAW,sBAAsB;IACrC,gDAAgD;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,0EAA0E;AAC1E,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,YAAY,CAAC;IACzB,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,YAAY,EAAE,MAAM,CAAC;IACrB,0DAA0D;IAC1D,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0EAA0E;IAC1E,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,sBAAsB,EAAE,CAAC;CACjC;AAED,MAAM,MAAM,wBAAwB,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAC;AAEvE,gFAAgF;AAChF,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,0BAA0B,CAAC;CACzC;AAED,wEAAwE;AACxE,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,wBAAwB,CAAC;CAClC;AAED,4FAA4F;AAC5F,MAAM,WAAW,6BAA6B;IAC5C,iBAAiB,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;CAChG;AAED,4FAA4F;AAC5F,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,SAAK,GAAG,MAAM,CAOnG;AAED,sFAAsF;AACtF,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEjE;AAED,MAAM,WAAW,2BAA2B;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,aAAa,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CACzC;AAED;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG,KAAK,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;AAEvE,kFAAkF;AAClF,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,mBAAmB,CAAC;IAC3B,oFAAoF;IACpF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,uFAAuF;IACvF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mFAAmF;IACnF,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,yBAAyB;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,2BAA2B,KAAK,YAAY,CAAC,OAAO,CAAC,CAAC;IACxE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,gFAAgF;IAChF,cAAc,CAAC,EAAE,mBAAmB,GAAG,oBAAoB,CAAC;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,UAAU,CAAC;CACvB"}

package/dist/sandbox-types.js

@@ -1,2 +1,14 @@
-export {};
+/** Stable provider-safe base name shared by deploy reconciliation and runtime selection. */
+export function sandboxEnvironmentName(agentId, sandboxName, maxLength = 64) {
+    const value = `assembly-line-${agentId}-${sandboxName}`
+        .toLowerCase()
+        .replace(/[^a-z0-9_-]+/gu, "-")
+        .replace(/^-+|-+$/gu, "")
+        .slice(0, maxLength);
+    return value || "assembly-line-agent-sandbox";
+}
+/** Content-addressed tag owned by Assembly Line; providers must never retarget it. */
+export function sandboxEnvironmentTag(fingerprint) {
+    return `sha256-${fingerprint}`;
+}
 //# sourceMappingURL=sandbox-types.js.map

package/dist/sandbox-types.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-types.js","sourceRoot":"","sources":["../src/sandbox-types.ts"],"names":[],"mappings":""}
+{"version":3,"file":"sandbox-types.js","sourceRoot":"","sources":["../src/sandbox-types.ts"],"names":[],"mappings":"AA2JA,4FAA4F;AAC5F,MAAM,UAAU,sBAAsB,CAAC,OAAe,EAAE,WAAmB,EAAE,SAAS,GAAG,EAAE;IACzF,MAAM,KAAK,GAAG,iBAAiB,OAAO,IAAI,WAAW,EAAE;SACpD,WAAW,EAAE;SACb,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;SAC9B,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;SACxB,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACvB,OAAO,KAAK,IAAI,6BAA6B,CAAC;AAChD,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,qBAAqB,CAAC,WAAmB;IACvD,OAAO,UAAU,WAAW,EAAE,CAAC;AACjC,CAAC"}

package/dist/secrets-types.d.ts

@@ -0,0 +1,25 @@
+import type { AgentManifest, MaybePromise } from "./index.js";
+/**
+ * A secrets adapter resolves declared environment names to values at boot.
+ * The gateway selects one (`secrets: adapter("1password")`); without one the
+ * process environment is used as-is. Resolved values overlay the process
+ * environment, so the configured store is authoritative for the names it
+ * holds and rotation happens in one place.
+ */
+export interface SecretsAdapter {
+    /**
+     * Resolve the named secrets. Return only the names the store holds; absent
+     * names fall back to the process environment. Throw only for store-level
+     * failures (bad credentials, unreachable backend) — a missing name is not
+     * an error.
+     */
+    resolve(names: string[]): MaybePromise<Record<string, string>>;
+}
+/**
+ * Every environment name the compiled agent declares: env-kind preflight
+ * requirements (gateway adapters, model providers, channels, connections,
+ * subagents) plus sandbox env projections. This is the exact set a secrets
+ * adapter is asked to resolve — stores never inject undeclared names.
+ */
+export declare function manifestSecretEnvNames(manifest: AgentManifest): string[];
+//# sourceMappingURL=secrets-types.d.ts.map

package/dist/secrets-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-types.d.ts","sourceRoot":"","sources":["../src/secrets-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE9D;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;OAKG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAChE;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,EAAE,CAWxE"}

package/dist/secrets-types.js

@@ -0,0 +1,22 @@
+/**
+ * Every environment name the compiled agent declares: env-kind preflight
+ * requirements (gateway adapters, model providers, channels, connections,
+ * subagents) plus sandbox env projections. This is the exact set a secrets
+ * adapter is asked to resolve — stores never inject undeclared names.
+ */
+export function manifestSecretEnvNames(manifest) {
+    const names = new Set();
+    for (const requirement of manifest.preflight) {
+        if (requirement.kind !== "env")
+            continue;
+        names.add(requirement.name);
+        for (const alternative of requirement.alternatives ?? [])
+            names.add(alternative);
+    }
+    for (const sandbox of manifest.sandboxes) {
+        for (const name of sandbox.env)
+            names.add(name);
+    }
+    return [...names].sort();
+}
+//# sourceMappingURL=secrets-types.js.map

package/dist/secrets-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-types.js","sourceRoot":"","sources":["../src/secrets-types.ts"],"names":[],"mappings":"AAmBA;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAuB;IAC5D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,WAAW,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC7C,IAAI,WAAW,CAAC,IAAI,KAAK,KAAK;YAAE,SAAS;QACzC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC5B,KAAK,MAAM,WAAW,IAAI,WAAW,CAAC,YAAY,IAAI,EAAE;YAAE,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACnF,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QACzC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,GAAG;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/dist/skill-bundles.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Shared skill-bundle constants and helpers used by the compiler (discovery,
+ * packaging) and the runtime (projection, hydration). A skill bundle is the
+ * top-level folder `skills/<id>` of an agent: a standalone skill folder or a
+ * multi-skill plugin pack.
+ */
+export declare const PLUGIN_MANIFEST_RELATIVE_PATH = ".assembly-line-plugin/plugin.json";
+export declare const SKILL_BUNDLE_MAX_FILES = 2000;
+export declare const SKILL_BUNDLE_MAX_BYTES: number;
+/** Directory or file names excluded from skill bundles (OS junk, VCS, caches, build output). */
+export declare function isSkillBundleJunkEntry(name: string): boolean;
+/** Extension-derived content type for a bundle resource path. */
+export declare function contentTypeForPath(path: string): string;
+//# sourceMappingURL=skill-bundles.d.ts.map

package/dist/skill-bundles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-bundles.d.ts","sourceRoot":"","sources":["../src/skill-bundles.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,eAAO,MAAM,6BAA6B,sCAAsC,CAAC;AAEjF,eAAO,MAAM,sBAAsB,OAAO,CAAC;AAC3C,eAAO,MAAM,sBAAsB,QAAmB,CAAC;AAcvD,gGAAgG;AAChG,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAK5D;AAmDD,iEAAiE;AACjE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKvD"}

package/dist/skill-bundles.js

@@ -0,0 +1,85 @@
+/**
+ * Shared skill-bundle constants and helpers used by the compiler (discovery,
+ * packaging) and the runtime (projection, hydration). A skill bundle is the
+ * top-level folder `skills/<id>` of an agent: a standalone skill folder or a
+ * multi-skill plugin pack.
+ */
+export const PLUGIN_MANIFEST_RELATIVE_PATH = ".assembly-line-plugin/plugin.json";
+export const SKILL_BUNDLE_MAX_FILES = 2000;
+export const SKILL_BUNDLE_MAX_BYTES = 64 * 1024 * 1024;
+const JUNK_ENTRY_NAMES = new Set([
+    ".DS_Store",
+    ".git",
+    "__pycache__",
+    "node_modules",
+    ".pytest_cache",
+    ".mypy_cache",
+    ".ruff_cache",
+    ".venv",
+    "Thumbs.db"
+]);
+/** Directory or file names excluded from skill bundles (OS junk, VCS, caches, build output). */
+export function isSkillBundleJunkEntry(name) {
+    if (JUNK_ENTRY_NAMES.has(name))
+        return true;
+    if (name.endsWith(".pyc"))
+        return true;
+    if (name.endsWith(".egg-info"))
+        return true;
+    return false;
+}
+const TEXT_CONTENT_TYPES = {
+    md: "text/markdown",
+    markdown: "text/markdown",
+    txt: "text/plain",
+    json: "application/json",
+    yaml: "application/yaml",
+    yml: "application/yaml",
+    toml: "application/toml",
+    csv: "text/csv",
+    tsv: "text/tab-separated-values",
+    py: "text/x-python",
+    js: "text/javascript",
+    mjs: "text/javascript",
+    cjs: "text/javascript",
+    ts: "text/x-typescript",
+    tsx: "text/x-typescript",
+    jsx: "text/javascript",
+    css: "text/css",
+    html: "text/html",
+    htm: "text/html",
+    svg: "image/svg+xml",
+    xml: "application/xml",
+    sh: "text/x-shellscript",
+    sql: "text/x-sql",
+    gitignore: "text/plain"
+};
+const BINARY_CONTENT_TYPES = {
+    png: "image/png",
+    jpg: "image/jpeg",
+    jpeg: "image/jpeg",
+    gif: "image/gif",
+    webp: "image/webp",
+    ico: "image/x-icon",
+    pdf: "application/pdf",
+    zip: "application/zip",
+    gz: "application/gzip",
+    xlsx: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+    xls: "application/vnd.ms-excel",
+    docx: "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+    pptx: "application/vnd.openxmlformats-officedocument.presentationml.presentation",
+    woff: "font/woff",
+    woff2: "font/woff2",
+    ttf: "font/ttf",
+    mp3: "audio/mpeg",
+    mp4: "video/mp4",
+    wav: "audio/wav"
+};
+/** Extension-derived content type for a bundle resource path. */
+export function contentTypeForPath(path) {
+    const base = path.slice(path.lastIndexOf("/") + 1);
+    const dot = base.lastIndexOf(".");
+    const extension = dot >= 0 ? base.slice(dot + 1).toLowerCase() : "";
+    return TEXT_CONTENT_TYPES[extension] ?? BINARY_CONTENT_TYPES[extension] ?? "application/octet-stream";
+}
+//# sourceMappingURL=skill-bundles.js.map

package/dist/skill-bundles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-bundles.js","sourceRoot":"","sources":["../src/skill-bundles.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,mCAAmC,CAAC;AAEjF,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAC3C,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEvD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,WAAW;IACX,MAAM;IACN,aAAa;IACb,cAAc;IACd,eAAe;IACf,aAAa;IACb,aAAa;IACb,OAAO;IACP,WAAW;CACZ,CAAC,CAAC;AAEH,gGAAgG;AAChG,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,kBAAkB,GAA2B;IACjD,EAAE,EAAE,eAAe;IACnB,QAAQ,EAAE,eAAe;IACzB,GAAG,EAAE,YAAY;IACjB,IAAI,EAAE,kBAAkB;IACxB,IAAI,EAAE,kBAAkB;IACxB,GAAG,EAAE,kBAAkB;IACvB,IAAI,EAAE,kBAAkB;IACxB,GAAG,EAAE,UAAU;IACf,GAAG,EAAE,2BAA2B;IAChC,EAAE,EAAE,eAAe;IACnB,EAAE,EAAE,iBAAiB;IACrB,GAAG,EAAE,iBAAiB;IACtB,GAAG,EAAE,iBAAiB;IACtB,EAAE,EAAE,mBAAmB;IACvB,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,iBAAiB;IACtB,GAAG,EAAE,UAAU;IACf,IAAI,EAAE,WAAW;IACjB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,eAAe;IACpB,GAAG,EAAE,iBAAiB;IACtB,EAAE,EAAE,oBAAoB;IACxB,GAAG,EAAE,YAAY;IACjB,SAAS,EAAE,YAAY;CACxB,CAAC;AAEF,MAAM,oBAAoB,GAA2B;IACnD,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,YAAY;IACjB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,WAAW;IAChB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,cAAc;IACnB,GAAG,EAAE,iBAAiB;IACtB,GAAG,EAAE,iBAAiB;IACtB,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,mEAAmE;IACzE,GAAG,EAAE,0BAA0B;IAC/B,IAAI,EAAE,yEAAyE;IAC/E,IAAI,EAAE,2EAA2E;IACjF,IAAI,EAAE,WAAW;IACjB,KAAK,EAAE,YAAY;IACnB,GAAG,EAAE,UAAU;IACf,GAAG,EAAE,YAAY;IACjB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,WAAW;CACjB,CAAC;AAEF,iEAAiE;AACjE,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,OAAO,kBAAkB,CAAC,SAAS,CAAC,IAAI,oBAAoB,CAAC,SAAS,CAAC,IAAI,0BAA0B,CAAC;AACxG,CAAC"}

package/dist/tool-wire-name.d.ts

@@ -0,0 +1,8 @@
+export declare const PROVIDER_TOOL_NAME_PATTERN: RegExp;
+export declare const PROVIDER_TOOL_NAME_MAX_LENGTH = 64;
+/**
+ * Return a deterministic model-provider wire name while preserving the
+ * canonical runtime name as the authorization and execution identity.
+ */
+export declare function providerSafeToolName(name: string, canonicalName?: string, forceAlias?: boolean): string;
+//# sourceMappingURL=tool-wire-name.d.ts.map

package/dist/tool-wire-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-wire-name.d.ts","sourceRoot":"","sources":["../src/tool-wire-name.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,0BAA0B,QAAsB,CAAC;AAC9D,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAIhD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,SAAO,EAAE,UAAU,UAAQ,GAAG,MAAM,CAgBnG"}

package/dist/tool-wire-name.js

@@ -0,0 +1,26 @@
+import { createHash } from "node:crypto";
+export const PROVIDER_TOOL_NAME_PATTERN = /^[a-zA-Z0-9_-]+$/u;
+export const PROVIDER_TOOL_NAME_MAX_LENGTH = 64;
+const PROVIDER_TOOL_ALIAS_HASH_LENGTH = 12;
+/**
+ * Return a deterministic model-provider wire name while preserving the
+ * canonical runtime name as the authorization and execution identity.
+ */
+export function providerSafeToolName(name, canonicalName = name, forceAlias = false) {
+    if (!forceAlias && PROVIDER_TOOL_NAME_PATTERN.test(name) && name.length <= PROVIDER_TOOL_NAME_MAX_LENGTH) {
+        return name;
+    }
+    const normalized = name
+        .normalize("NFKD")
+        .replace(/[\u0300-\u036f]/gu, "")
+        .replace(/[^a-zA-Z0-9_-]+/gu, "_")
+        .replace(/^[-_]+|[-_]+$/gu, "") || "tool";
+    const hash = createHash("sha256")
+        .update(canonicalName)
+        .digest("hex")
+        .slice(0, PROVIDER_TOOL_ALIAS_HASH_LENGTH);
+    const baseLength = PROVIDER_TOOL_NAME_MAX_LENGTH - hash.length - 1;
+    const base = normalized.slice(0, baseLength).replace(/[-_]+$/gu, "") || "tool";
+    return `${base}_${hash}`;
+}
+//# sourceMappingURL=tool-wire-name.js.map

package/dist/tool-wire-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-wire-name.js","sourceRoot":"","sources":["../src/tool-wire-name.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,CAAC,MAAM,0BAA0B,GAAG,mBAAmB,CAAC;AAC9D,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AAEhD,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAE3C;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,aAAa,GAAG,IAAI,EAAE,UAAU,GAAG,KAAK;IACzF,IAAI,CAAC,UAAU,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,6BAA6B,EAAE,CAAC;QACzG,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,UAAU,GAAG,IAAI;SACpB,SAAS,CAAC,MAAM,CAAC;SACjB,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC;SAChC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC;SACjC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC;IAC5C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC;SAC9B,MAAM,CAAC,aAAa,CAAC;SACrB,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,+BAA+B,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,6BAA6B,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC;IAC/E,OAAO,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@assemblyline-agents/core",
-  "version": "1.0.0",
+  "version": "3.0.0",
   "type": "module",
   "exports": {
     ".": {

package/dist/env-alias.d.ts

@@ -1,38 +0,0 @@
-/**
- * Environment-variable aliasing for the OpenEve -> Assembly Line rename.
- *
- * Unlike every other renamed surface (routes, exports, bins, artifact/hosts
- * file names), this mirror is PERMANENT, not a soak-window shim: host
- * environments are free to keep the `OPENEVE_*` spelling forever. The
- * contract is a uniform prefix bijection: every `ASSEMBLY_LINE_X` has the
- * legacy spelling `OPENEVE_X` and vice versa. Aliasing mirrors each value
- * under both names so existing read sites (including prefix rules like
- * `OPENEVE_VPS_BACKUP_*` and the `OPENEVE_*_RATE_LIMIT` family) keep working
- * without per-site edits. Precedence: the new name wins; equal duplicates are
- * accepted; conflicting duplicates are a hard error.
- */
-export declare function canonicalEnvName(name: string): string;
-export declare function legacyEnvName(name: string): string;
-export declare class EnvAliasConflictError extends Error {
-    readonly names: readonly [string, string];
-    constructor(newName: string, legacyName: string);
-}
-export interface AppliedEnvAliases {
-    env: Record<string, string | undefined>;
-    /** Variables supplied only under their legacy `OPENEVE_*` name. */
-    legacyOnlyNames: string[];
-}
-/**
- * Returns a copy of `env` where every branded variable is readable under both
- * its `ASSEMBLY_LINE_*` and `OPENEVE_*` spellings. Throws
- * {@link EnvAliasConflictError} when both spellings are set to different
- * values. The input record is not mutated.
- */
-export declare function applyEnvAliases(env: Record<string, string | undefined>): AppliedEnvAliases;
-/**
- * Mirrors branded variables into `target` in place (used for `process.env`,
- * which must keep its exotic binding). Same precedence rules as
- * {@link applyEnvAliases}.
- */
-export declare function mirrorEnvAliasesInPlace(target: Record<string, string | undefined>): AppliedEnvAliases;
-//# sourceMappingURL=env-alias.d.ts.map

package/dist/env-alias.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"env-alias.d.ts","sourceRoot":"","sources":["../src/env-alias.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;GAYG;AAEH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAIrD;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAIlD;AAED,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAE9B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM;CAQhD;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC,mEAAmE;IACnE,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,iBAAiB,CAyB1F;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,iBAAiB,CAMrG"}

package/dist/env-alias.js

@@ -1,82 +0,0 @@
-import { ENV_PREFIX, LEGACY_ENV_PREFIX } from "./brand.js";
-/**
- * Environment-variable aliasing for the OpenEve -> Assembly Line rename.
- *
- * Unlike every other renamed surface (routes, exports, bins, artifact/hosts
- * file names), this mirror is PERMANENT, not a soak-window shim: host
- * environments are free to keep the `OPENEVE_*` spelling forever. The
- * contract is a uniform prefix bijection: every `ASSEMBLY_LINE_X` has the
- * legacy spelling `OPENEVE_X` and vice versa. Aliasing mirrors each value
- * under both names so existing read sites (including prefix rules like
- * `OPENEVE_VPS_BACKUP_*` and the `OPENEVE_*_RATE_LIMIT` family) keep working
- * without per-site edits. Precedence: the new name wins; equal duplicates are
- * accepted; conflicting duplicates are a hard error.
- */
-export function canonicalEnvName(name) {
-    return name.startsWith(LEGACY_ENV_PREFIX)
-        ? `${ENV_PREFIX}${name.slice(LEGACY_ENV_PREFIX.length)}`
-        : name;
-}
-export function legacyEnvName(name) {
-    return name.startsWith(ENV_PREFIX)
-        ? `${LEGACY_ENV_PREFIX}${name.slice(ENV_PREFIX.length)}`
-        : name;
-}
-export class EnvAliasConflictError extends Error {
-    names;
-    constructor(newName, legacyName) {
-        super(`Conflicting values for ${newName} and ${legacyName}. ` +
-            `These are aliases for the same setting; set one, or set both to the same value.`);
-        this.name = "EnvAliasConflictError";
-        this.names = [newName, legacyName];
-    }
-}
-/**
- * Returns a copy of `env` where every branded variable is readable under both
- * its `ASSEMBLY_LINE_*` and `OPENEVE_*` spellings. Throws
- * {@link EnvAliasConflictError} when both spellings are set to different
- * values. The input record is not mutated.
- */
-export function applyEnvAliases(env) {
-    const merged = { ...env };
-    const legacyOnlyNames = [];
-    for (const [name, value] of Object.entries(env)) {
-        if (value === undefined)
-            continue;
-        if (name.startsWith(ENV_PREFIX)) {
-            const legacy = legacyEnvName(name);
-            const legacyValue = env[legacy];
-            if (legacyValue !== undefined && legacyValue !== value) {
-                throw new EnvAliasConflictError(name, legacy);
-            }
-            merged[legacy] = value;
-        }
-        else if (name.startsWith(LEGACY_ENV_PREFIX)) {
-            const canonical = canonicalEnvName(name);
-            const canonicalValue = env[canonical];
-            if (canonicalValue !== undefined) {
-                if (canonicalValue !== value)
-                    throw new EnvAliasConflictError(canonical, name);
-                continue;
-            }
-            merged[canonical] = value;
-            legacyOnlyNames.push(name);
-        }
-    }
-    legacyOnlyNames.sort();
-    return { env: merged, legacyOnlyNames };
-}
-/**
- * Mirrors branded variables into `target` in place (used for `process.env`,
- * which must keep its exotic binding). Same precedence rules as
- * {@link applyEnvAliases}.
- */
-export function mirrorEnvAliasesInPlace(target) {
-    const applied = applyEnvAliases({ ...target });
-    for (const [name, value] of Object.entries(applied.env)) {
-        if (value !== undefined && target[name] === undefined)
-            target[name] = value;
-    }
-    return { env: target, legacyOnlyNames: applied.legacyOnlyNames };
-}
-//# sourceMappingURL=env-alias.js.map

package/dist/env-alias.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"env-alias.js","sourceRoot":"","sources":["../src/env-alias.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE3D;;;;;;;;;;;;GAYG;AAEH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC;QACvC,CAAC,CAAC,GAAG,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE;QACxD,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAChC,CAAC,CAAC,GAAG,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE;QACxD,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACrC,KAAK,CAA4B;IAE1C,YAAY,OAAe,EAAE,UAAkB;QAC7C,KAAK,CACH,0BAA0B,OAAO,QAAQ,UAAU,IAAI;YACrD,iFAAiF,CACpF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACrC,CAAC;CACF;AAQD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,GAAuC;IACrE,MAAM,MAAM,GAAuC,EAAE,GAAG,GAAG,EAAE,CAAC;IAC9D,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;YACnC,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;YAChC,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;gBACvD,MAAM,IAAI,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAChD,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QACzB,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,cAAc,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;YACtC,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBACjC,IAAI,cAAc,KAAK,KAAK;oBAAE,MAAM,IAAI,qBAAqB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBAC/E,SAAS;YACX,CAAC;YACD,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;YAC1B,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,eAAe,CAAC,IAAI,EAAE,CAAC;IACvB,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAA0C;IAChF,MAAM,OAAO,GAAG,eAAe,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACxD,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAC9E,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC;AACnE,CAAC"}