@cat-factory/integrations 0.31.0 → 0.32.0

package/dist/modules/runners/runner-backends.js

@@ -0,0 +1,101 @@
+import { STRICT_URL_SAFETY_POLICY } from '@cat-factory/kernel';
+import { assertApiServerUrlSafe, KUBERNETES_TOKEN_KEY } from '../kubernetes/kubernetes.logic.js';
+import { KubernetesRunnerTransport } from '../kubernetes/KubernetesRunnerTransport.js';
+import { HttpRunnerPoolProvider } from './HttpRunnerPoolProvider.js';
+import { RunnerPoolTransport } from './RunnerPoolTransport.js';
+import { assertManifestUrlsSafe, referencedSecretKeys as manifestSecretKeys, } from './runners.logic.js';
+const REGISTRY = new Map();
+/** Register a runner-backend provider (built-ins on import; third-party for side effect). */
+export function registerRunnerBackend(provider) {
+    REGISTRY.set(provider.kind, provider);
+}
+/** The provider for a backend kind, or undefined when unregistered. */
+export function runnerBackend(kind) {
+    return REGISTRY.get(kind);
+}
+/** All registered backend kinds (for diagnostics / a UI capabilities list). */
+export function registeredRunnerBackendKinds() {
+    return [...REGISTRY.keys()];
+}
+// --- Built-in: manifest (the original BYO HTTP scheduler pool) ----------------
+let sharedHttpProvider;
+function defaultHttpProvider(urlPolicy) {
+    return (sharedHttpProvider ??= new HttpRunnerPoolProvider(urlPolicy ? { urlPolicy } : {}));
+}
+export const manifestRunnerBackend = {
+    kind: 'manifest',
+    referencedSecretKeys: (config) => config.kind === 'manifest' ? manifestSecretKeys(config.manifest) : [],
+    connectionMeta: (config) => {
+        if (config.kind !== 'manifest')
+            throw new Error('Expected a manifest runner config');
+        return {
+            providerId: config.manifest.providerId,
+            label: config.manifest.label,
+            baseUrl: config.manifest.baseUrl,
+        };
+    },
+    assertConfigSafe: (config, opts) => {
+        if (config.kind === 'manifest') {
+            assertManifestUrlsSafe(config.manifest, opts?.urlPolicy ?? STRICT_URL_SAFETY_POLICY);
+        }
+    },
+    buildTransport: (config, ctx) => {
+        if (config.kind !== 'manifest')
+            throw new Error('Expected a manifest runner config');
+        const provider = ctx.runnerPoolProvider ?? defaultHttpProvider(ctx.urlPolicy);
+        return new RunnerPoolTransport(provider, config.manifest, ctx.resolveSecret);
+    },
+    testConnection: (config, ctx) => {
+        if (config.kind !== 'manifest') {
+            return Promise.resolve({ ok: false, message: 'Expected a manifest runner config' });
+        }
+        const provider = ctx.runnerPoolProvider ?? defaultHttpProvider(ctx.urlPolicy);
+        return (provider.testConnection?.({
+            manifest: config.manifest,
+            config: {},
+            resolveSecret: ctx.resolveSecret,
+        }) ?? Promise.resolve({ ok: true, message: 'This pool provider has no connection test.' }));
+    },
+};
+// --- Built-in: kubernetes (native per-run pods over the apiserver pod-proxy) ---
+export const kubernetesRunnerBackend = {
+    kind: 'kubernetes',
+    referencedSecretKeys: (config) => (config.kind === 'kubernetes' ? [KUBERNETES_TOKEN_KEY] : []),
+    connectionMeta: (config) => {
+        if (config.kind !== 'kubernetes')
+            throw new Error('Expected a kubernetes runner config');
+        return {
+            providerId: 'kubernetes',
+            label: config.kubernetes.label,
+            baseUrl: config.kubernetes.apiServerUrl,
+        };
+    },
+    assertConfigSafe: (config, opts) => {
+        if (config.kind !== 'kubernetes')
+            return;
+        assertApiServerUrlSafe(config.kubernetes.apiServerUrl);
+        // Custom TLS trust material is honored only on a runtime with undici (Node/local).
+        // Reject it up front on a runtime that can't (the Cloudflare Worker) so the
+        // connection can't save and then fail at every dispatch.
+        const needsCustomTls = !!config.kubernetes.caCertPem || !!config.kubernetes.insecureSkipTlsVerify;
+        if (needsCustomTls && opts?.customTlsSupported === false) {
+            throw new Error('This runtime cannot verify a custom CA / skip TLS for the Kubernetes apiserver ' +
+                '(it requires the Node runtime). Use a publicly-trusted apiserver certificate, or ' +
+                'run this workspace on the Node/local deployment.');
+        }
+    },
+    buildTransport: (config, ctx) => {
+        if (config.kind !== 'kubernetes')
+            throw new Error('Expected a kubernetes runner config');
+        return new KubernetesRunnerTransport(config.kubernetes, ctx.resolveSecret);
+    },
+    testConnection: (config, ctx) => {
+        if (config.kind !== 'kubernetes') {
+            return Promise.resolve({ ok: false, message: 'Expected a kubernetes runner config' });
+        }
+        return new KubernetesRunnerTransport(config.kubernetes, ctx.resolveSecret).testConnection();
+    },
+};
+registerRunnerBackend(manifestRunnerBackend);
+registerRunnerBackend(kubernetesRunnerBackend);
+//# sourceMappingURL=runner-backends.js.map

package/dist/modules/runners/runner-backends.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-backends.js","sourceRoot":"","sources":["../../../src/modules/runners/runner-backends.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAA;AAC9D,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAA;AAChG,OAAO,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAA;AACtF,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EACL,sBAAsB,EACtB,oBAAoB,IAAI,kBAAkB,GAC3C,MAAM,oBAAoB,CAAA;AA2D3B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAiC,CAAA;AAEzD,6FAA6F;AAC7F,MAAM,UAAU,qBAAqB,CAAC,QAA+B;IACnE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;AACvC,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AAC3B,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,4BAA4B;IAC1C,OAAO,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;AAC7B,CAAC;AAED,iFAAiF;AAEjF,IAAI,kBAAsD,CAAA;AAC1D,SAAS,mBAAmB,CAAC,SAA2B;IACtD,OAAO,CAAC,kBAAkB,KAAK,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAC5F,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAA0B;IAC1D,IAAI,EAAE,UAAU;IAChB,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE,CAC/B,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;IACvE,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE;QACzB,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;QACpF,OAAO;YACL,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU;YACtC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK;YAC5B,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;SACjC,CAAA;IACH,CAAC;IACD,gBAAgB,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;QACjC,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,sBAAsB,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,IAAI,wBAAwB,CAAC,CAAA;QACtF,CAAC;IACH,CAAC;IACD,cAAc,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;QAC9B,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;QACpF,MAAM,QAAQ,GAAG,GAAG,CAAC,kBAAkB,IAAI,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC7E,OAAO,IAAI,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,aAAa,CAAC,CAAA;IAC9E,CAAC;IACD,cAAc,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;QAC9B,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAA;QACrF,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,CAAC,kBAAkB,IAAI,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC7E,OAAO,CACL,QAAQ,CAAC,cAAc,EAAE,CAAC;YACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,EAAE;YACV,aAAa,EAAE,GAAG,CAAC,aAAa;SACjC,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC,CAC3F,CAAA;IACH,CAAC;CACF,CAAA;AAED,kFAAkF;AAElF,MAAM,CAAC,MAAM,uBAAuB,GAA0B;IAC5D,IAAI,EAAE,YAAY;IAClB,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9F,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE;QACzB,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;QACxF,OAAO;YACL,UAAU,EAAE,YAAY;YACxB,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK;YAC9B,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY;SACxC,CAAA;IACH,CAAC;IACD,gBAAgB,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;QACjC,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY;YAAE,OAAM;QACxC,sBAAsB,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAA;QACtD,mFAAmF;QACnF,4EAA4E;QAC5E,yDAAyD;QACzD,MAAM,cAAc,GAClB,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,qBAAqB,CAAA;QAC5E,IAAI,cAAc,IAAI,IAAI,EAAE,kBAAkB,KAAK,KAAK,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CACb,iFAAiF;gBAC/E,mFAAmF;gBACnF,kDAAkD,CACrD,CAAA;QACH,CAAC;IACH,CAAC;IACD,cAAc,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;QAC9B,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;QACxF,OAAO,IAAI,yBAAyB,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,aAAa,CAAC,CAAA;IAC5E,CAAC;IACD,cAAc,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;QAC9B,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACjC,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC,CAAA;QACvF,CAAC;QACD,OAAO,IAAI,yBAAyB,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,cAAc,EAAE,CAAA;IAC7F,CAAC;CACF,CAAA;AAED,qBAAqB,CAAC,qBAAqB,CAAC,CAAA;AAC5C,qBAAqB,CAAC,uBAAuB,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/integrations",
-  "version": "0.31.0",
+  "version": "0.32.0",
   "description": "External-system integration domain logic for the Agent Architecture Board (GitHub, documents, tasks, environments, runners).",
   "repository": {
     "type": "git",
@@ -25,8 +25,8 @@
   },
   "dependencies": {
     "ai": "^6.0.209",
-    "@cat-factory/contracts": "0.47.0",
-    "@cat-factory/kernel": "0.48.0"
+    "@cat-factory/contracts": "0.48.0",
+    "@cat-factory/kernel": "0.49.0"
   },
   "devDependencies": {
     "typescript": "7.0.1-rc",