@cat-factory/integrations 0.94.1 → 0.96.0

package/dist/modules/validation/ValidationConfigService.js

@@ -0,0 +1,103 @@
+import { NotFoundError, ValidationError } from '@cat-factory/kernel';
+import { VALIDATION_DEFAULT_MAX_ATTEMPTS } from '@cat-factory/contracts';
+/**
+ * Owns a service's PRE-PR VALIDATION CHECKS — the shell commands the executor-harness runs
+ * against the checkout after the coding agent settles and BEFORE the PR opens (see
+ * `docs/initiatives/pre-pr-validation.md`).
+ *
+ * The CRUD surface ({@link getView}/{@link set}/{@link deleteFor}) operates on the exact SERVICE
+ * FRAME block the inspector edits. The resolution surface ({@link resolveForFrame}) reads the
+ * checks for the frame a dispatch resolved, and is the SINGLE seam a dispatch resolves checks
+ * through — so adding a second source later (a checked-in repo manifest, see the tracker's D1) is
+ * a change inside that method plus a precedence rule, not a new path through the executor.
+ *
+ * Nothing here is a secret: the commands are operator-authored strings that run inside the run's
+ * own sandboxed container, the same trust boundary as the coding agent.
+ */
+export class ValidationConfigService {
+    repo;
+    blocks;
+    clock;
+    constructor(deps) {
+        this.repo = deps.validationConfigRepository;
+        this.blocks = deps.blockRepository;
+        this.clock = deps.clock;
+    }
+    /** The checks configured for a service frame (empty when it has none). */
+    async getView(workspaceId, blockId) {
+        const record = await this.repo.getByBlock(workspaceId, blockId);
+        return toView(blockId, record);
+    }
+    /** Every configured service's checks in the workspace (the inspector store's hydrate read). */
+    async list(workspaceId) {
+        const rows = await this.repo.listByWorkspace(workspaceId);
+        return rows.map((r) => toView(r.blockId, r));
+    }
+    /**
+     * Set/replace a service frame's validation checks. An empty list deletes the row (a service
+     * with no checks carries none), so a cleared inspector restores the exact pre-feature
+     * behaviour rather than leaving an empty config that still has to be resolved.
+     */
+    async set(workspaceId, blockId, input) {
+        // Checks are keyed by (and resolved up to) the SERVICE FRAME, so storing them against a
+        // module/task block would leave them silently un-run at dispatch time (resolution walks UP
+        // to the frame and never finds them). Reject a non-frame block here so the operator gets a
+        // clear error instead of a config that appears to save but never runs.
+        const block = await this.blocks.get(workspaceId, blockId);
+        if (!block)
+            throw new NotFoundError('block', blockId);
+        if (block.level !== 'frame') {
+            throw new ValidationError('Validation checks can only be set on a service frame');
+        }
+        if (input.checks.length === 0) {
+            await this.repo.delete(workspaceId, blockId);
+            return toView(blockId, null);
+        }
+        const now = this.clock.now();
+        const existing = await this.repo.getByBlock(workspaceId, blockId);
+        const record = {
+            workspaceId,
+            blockId,
+            checks: input.checks.map((c) => ({ label: c.label, command: c.command })),
+            maxAttempts: input.maxAttempts ?? VALIDATION_DEFAULT_MAX_ATTEMPTS,
+            createdAt: existing?.createdAt ?? now,
+            updatedAt: now,
+        };
+        await this.repo.upsert(record);
+        return toView(blockId, record);
+    }
+    /** Remove a service frame's validation checks. */
+    async deleteFor(workspaceId, blockId) {
+        await this.repo.delete(workspaceId, blockId);
+    }
+    /**
+     * The checks that apply to a run dispatched against SERVICE FRAME `frameId`. This is what the
+     * engine folds onto the agent run context and the container executor forwards on the coding job
+     * body. `null` when the frame configured no checks, which is what keeps an unconfigured
+     * deployment byte-for-byte on the old code path.
+     *
+     * Takes the frame the CALLER already resolved rather than a run block, deliberately: the
+     * engine's `AgentContextBuilder` walks the frame→module→task ancestry exactly ONCE per dispatch
+     * and threads the result into every frame-scoped resolver (environment, service config,
+     * frontend, fragments). Re-deriving it here would put two extra block point-reads on every
+     * dispatch to reach a frame the caller is already holding.
+     */
+    async resolveForFrame(workspaceId, frameId) {
+        const record = await this.repo.getByBlock(workspaceId, frameId);
+        if (!record || record.checks.length === 0)
+            return null;
+        return {
+            checks: record.checks.map((c) => ({ label: c.label, command: c.command })),
+            maxAttempts: record.maxAttempts,
+        };
+    }
+}
+/** Project a stored record (or its absence) into the wire view. */
+function toView(blockId, record) {
+    return {
+        blockId,
+        checks: record?.checks ?? [],
+        maxAttempts: record?.maxAttempts ?? VALIDATION_DEFAULT_MAX_ATTEMPTS,
+    };
+}
+//# sourceMappingURL=ValidationConfigService.js.map

package/dist/modules/validation/ValidationConfigService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ValidationConfigService.js","sourceRoot":"","sources":["../../../src/modules/validation/ValidationConfigService.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAMpE,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAA;AASxE;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,uBAAuB;IACjB,IAAI,CAA4B;IAChC,MAAM,CAAiB;IACvB,KAAK,CAAO;IAE7B,YAAY,IAAyC;QACnD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,0BAA0B,CAAA;QAC3C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,eAAe,CAAA;QAClC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;IACzB,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,OAAO,CAAC,WAAmB,EAAE,OAAe;QAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QAC/D,OAAO,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAChC,CAAC;IAED,+FAA+F;IAC/F,KAAK,CAAC,IAAI,CAAC,WAAmB;QAC5B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAA;QACzD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAA;IAC9C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAG,CACP,WAAmB,EACnB,OAAe,EACf,KAAyC;QAEzC,wFAAwF;QACxF,2FAA2F;QAC3F,2FAA2F;QAC3F,uEAAuE;QACvE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QACzD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACrD,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,eAAe,CAAC,sDAAsD,CAAC,CAAA;QACnF,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;YAC5C,OAAO,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAC9B,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAA;QAC5B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QACjE,MAAM,MAAM,GAA2B;YACrC,WAAW;YACX,OAAO;YACP,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,+BAA+B;YACjE,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,GAAG;YACrC,SAAS,EAAE,GAAG;SACf,CAAA;QACD,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC9B,OAAO,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAChC,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,SAAS,CAAC,WAAmB,EAAE,OAAe;QAClD,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;IAC9C,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,eAAe,CACnB,WAAmB,EACnB,OAAe;QAEf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QAC/D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QACtD,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1E,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAA;IACH,CAAC;CACF;AAED,mEAAmE;AACnE,SAAS,MAAM,CAAC,OAAe,EAAE,MAAqC;IACpE,OAAO;QACL,OAAO;QACP,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE;QAC5B,WAAW,EAAE,MAAM,EAAE,WAAW,IAAI,+BAA+B;KACpE,CAAA;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/integrations",
-  "version": "0.94.1",
+  "version": "0.96.0",
   "description": "External-system integration domain logic for the Agent Architecture Board (GitHub, documents, tasks, environments, runners).",
   "repository": {
     "type": "git",
@@ -27,15 +27,15 @@
     "ai": "^7.0.35",
     "p-map": "^7.0.6",
     "yaml": "^2.9.0",
-    "@cat-factory/contracts": "0.162.0",
-    "@cat-factory/kernel": "0.156.0"
+    "@cat-factory/contracts": "0.164.0",
+    "@cat-factory/kernel": "0.158.0"
   },
   "devDependencies": {
     "typescript": "7.0.2",
     "undici": "^8.8.0",
     "valibot": "^1.4.2",
     "vitest": "^4.1.10",
-    "@cat-factory/caching": "0.10.37"
+    "@cat-factory/caching": "0.10.39"
   },
   "scripts": {
     "build": "tsc -b tsconfig.build.json",