@cyanautomation/kaseki-agent 1.4.1

package/dist/secrets/SecretsManager.js

@@ -0,0 +1,306 @@
+/**
+ * Secrets Manager
+ *
+ * Secure credential storage with keyring integration
+ * - Primary: Linux keyring (pass)
+ * - Fallback: File-based storage (~/.kaseki/secrets/) with 0600 permissions
+ *
+ * Note: macOS Keychain and Windows Credential Manager support can be added
+ */
+import fs from 'fs/promises';
+import path from 'path';
+import os from 'os';
+import { execSync } from 'child_process';
+import { createLogger } from '../logger.js';
+const logger = createLogger('secrets');
+/**
+ * File-based secrets store (fallback, headless systems)
+ */
+export class FileSecretsStore {
+    baseDir;
+    constructor(baseDir) {
+        this.baseDir = baseDir || path.join(os.homedir(), '.kaseki', 'secrets');
+    }
+    async store(key, value) {
+        try {
+            await fs.mkdir(this.baseDir, { recursive: true, mode: 0o700 });
+            const filePath = path.join(this.baseDir, key);
+            // Write with restrictive permissions (0600 - owner read/write only)
+            await fs.writeFile(filePath, value, {
+                mode: 0o600,
+                flag: 'w',
+            });
+            logger.debug(`Secret stored: ${key} -> ${filePath}`);
+        }
+        catch (error) {
+            throw new Error(`Failed to store secret: ${error}`);
+        }
+    }
+    async retrieve(key) {
+        try {
+            const filePath = path.join(this.baseDir, key);
+            const stat = await fs.stat(filePath);
+            // Security check: verify file permissions are restrictive
+            if ((stat.mode & 0o077) !== 0) {
+                logger.warn(`Secret file has overly permissive permissions: ${filePath}`);
+            }
+            const value = await fs.readFile(filePath, 'utf-8');
+            return value.trim();
+        }
+        catch (error) {
+            if (error.code === 'ENOENT') {
+                return null;
+            }
+            throw new Error(`Failed to retrieve secret: ${error}`);
+        }
+    }
+    async delete(key) {
+        try {
+            const filePath = path.join(this.baseDir, key);
+            await fs.unlink(filePath);
+            logger.debug(`Secret deleted: ${key}`);
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT') {
+                throw new Error(`Failed to delete secret: ${error}`);
+            }
+        }
+    }
+    async list() {
+        try {
+            const files = await fs.readdir(this.baseDir);
+            return files;
+        }
+        catch (error) {
+            if (error.code === 'ENOENT') {
+                return [];
+            }
+            throw error;
+        }
+    }
+}
+/**
+ * Linux pass (password-store) backed secrets
+ * Requires: pass package installed and initialized
+ */
+export class PassSecretsStore {
+    prefix;
+    constructor(prefix = 'kaseki-agent') {
+        this.prefix = prefix;
+    }
+    getPassKey(key) {
+        return `${this.prefix}/${key}`;
+    }
+    isPassAvailable() {
+        try {
+            execSync('command -v pass', { shell: '/bin/bash', stdio: 'ignore' });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    isPassInitialized() {
+        try {
+            execSync('pass ls > /dev/null 2>&1', { shell: '/bin/bash', stdio: 'ignore' });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    async store(key, value) {
+        if (!this.isPassAvailable()) {
+            throw new Error('pass (password-store) not installed. Install with: sudo apt install pass');
+        }
+        if (!this.isPassInitialized()) {
+            throw new Error('pass (password-store) not initialized. Run: pass init');
+        }
+        try {
+            // Use echo + pass insert to avoid interactive prompt
+            const passKey = this.getPassKey(key);
+            execSync(`echo "${value.replace(/"/g, '\\"')}" | pass insert -f "${passKey}"`, {
+                shell: '/bin/bash',
+            });
+            logger.debug(`Secret stored in pass: ${passKey}`);
+        }
+        catch (error) {
+            throw new Error(`Failed to store secret in pass: ${error}`);
+        }
+    }
+    async retrieve(key) {
+        if (!this.isPassAvailable()) {
+            logger.debug('pass not available, skipping keyring retrieval');
+            return null;
+        }
+        try {
+            const passKey = this.getPassKey(key);
+            const result = execSync(`pass show "${passKey}" 2>/dev/null || echo ""`, {
+                shell: '/bin/bash',
+                encoding: 'utf-8',
+            });
+            return result.trim() || null;
+        }
+        catch (error) {
+            logger.debug(`Failed to retrieve secret from pass: ${error}`);
+            return null;
+        }
+    }
+    async delete(key) {
+        if (!this.isPassAvailable()) {
+            return;
+        }
+        try {
+            const passKey = this.getPassKey(key);
+            execSync(`pass rm -f "${passKey}"`, { shell: '/bin/bash' });
+            logger.debug(`Secret deleted from pass: ${passKey}`);
+        }
+        catch (error) {
+            throw new Error(`Failed to delete secret from pass: ${error}`);
+        }
+    }
+    async list() {
+        if (!this.isPassAvailable()) {
+            return [];
+        }
+        try {
+            const result = execSync(`pass ls 2>/dev/null | grep "^${this.prefix}/" || echo ""`, {
+                shell: '/bin/bash',
+                encoding: 'utf-8',
+            });
+            return result
+                .split('\n')
+                .filter((line) => line.trim())
+                .map((line) => line.replace(`${this.prefix}/`, ''));
+        }
+        catch (error) {
+            logger.debug(`Failed to list secrets from pass: ${error}`);
+            return [];
+        }
+    }
+}
+/**
+ * Secrets Manager - Main interface
+ * Tries keyring first, falls back to file storage
+ */
+export class SecretsManager {
+    fileStore;
+    passStore;
+    usePassIfAvailable;
+    constructor(usePassIfAvailable = true) {
+        this.fileStore = new FileSecretsStore();
+        this.passStore = new PassSecretsStore();
+        this.usePassIfAvailable = usePassIfAvailable;
+    }
+    /**
+     * Store a secret with automatic fallback
+     */
+    async store(key, value) {
+        if (this.usePassIfAvailable && this.isPassAvailable()) {
+            try {
+                await this.passStore.store(key, value);
+                return;
+            }
+            catch (error) {
+                logger.warn(`Keyring storage failed, falling back to file storage: ${error}`);
+            }
+        }
+        await this.fileStore.store(key, value);
+    }
+    /**
+     * Retrieve a secret (tries keyring first, then file)
+     */
+    async retrieve(key) {
+        // Try file-based first (where users might have stored it)
+        const fileValue = await this.fileStore.retrieve(key);
+        if (fileValue) {
+            return fileValue;
+        }
+        // Try keyring if available
+        if (this.usePassIfAvailable && this.isPassAvailable()) {
+            const passValue = await this.passStore.retrieve(key);
+            if (passValue) {
+                return passValue;
+            }
+        }
+        return null;
+    }
+    /**
+     * Delete a secret from both stores
+     */
+    async delete(key) {
+        try {
+            await this.fileStore.delete(key);
+        }
+        catch (error) {
+            logger.debug(`Failed to delete from file store: ${error}`);
+        }
+        if (this.usePassIfAvailable && this.isPassAvailable()) {
+            try {
+                await this.passStore.delete(key);
+            }
+            catch (error) {
+                logger.debug(`Failed to delete from keyring: ${error}`);
+            }
+        }
+    }
+    /**
+     * List all stored secrets
+     */
+    async list() {
+        const secrets = new Map();
+        // List from file store
+        const fileKeys = await this.fileStore.list();
+        for (const key of fileKeys) {
+            const value = await this.fileStore.retrieve(key);
+            if (value) {
+                secrets.set(key, `file:${path.join(os.homedir(), '.kaseki', 'secrets', key)}`);
+            }
+        }
+        // List from keyring
+        if (this.usePassIfAvailable && this.isPassAvailable()) {
+            const passKeys = await this.passStore.list();
+            for (const key of passKeys) {
+                secrets.set(key, `keyring:${key}`);
+            }
+        }
+        return secrets;
+    }
+    /**
+     * Check if pass is available
+     */
+    isPassAvailable() {
+        try {
+            execSync('command -v pass', { shell: '/bin/bash', stdio: 'ignore' });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Initialize/setup keyring (interactive)
+     */
+    async initializeKeyring() {
+        if (!this.isPassAvailable()) {
+            throw new Error('pass (password-store) not installed');
+        }
+        try {
+            execSync('pass init 2>&1', { shell: '/bin/bash', stdio: 'inherit' });
+            logger.info('Keyring initialized successfully');
+        }
+        catch (error) {
+            throw new Error(`Failed to initialize keyring: ${error}`);
+        }
+    }
+    /**
+     * Get recommended storage method for system
+     */
+    getRecommendedStore() {
+        if (this.isPassAvailable()) {
+            return 'keyring (pass)';
+        }
+        return 'file (~/.kaseki/secrets/)';
+    }
+}
+//# sourceMappingURL=SecretsManager.js.map

package/dist/secrets/SecretsManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecretsManager.js","sourceRoot":"","sources":["../../src/secrets/SecretsManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,MAAM,aAAa,CAAC;AAC7B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;AASvC;;GAEG;AACH,MAAM,OAAO,gBAAgB;IACnB,OAAO,CAAS;IAExB,YAAY,OAAgB;QAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAW,EAAE,KAAa;QACpC,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAE9C,oEAAoE;YACpE,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE;gBAClC,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,GAAG;aACV,CAAC,CAAC;YAEH,MAAM,CAAC,KAAK,CAAC,kBAAkB,GAAG,OAAO,QAAQ,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAW;QACxB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC9C,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAErC,0DAA0D;YAC1D,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,kDAAkD,QAAQ,EAAE,CAAC,CAAC;YAC5E,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC9C,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1B,MAAM,CAAC,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7C,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,gBAAgB;IACnB,MAAM,CAAS;IAEvB,YAAY,SAAiB,cAAc;QACzC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAEO,UAAU,CAAC,GAAW;QAC5B,OAAO,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;IACjC,CAAC;IAEO,eAAe;QACrB,IAAI,CAAC;YACH,QAAQ,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YACrE,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,iBAAiB;QACvB,IAAI,CAAC;YACH,QAAQ,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9E,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAW,EAAE,KAAa;QACpC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC9F,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,CAAC;YACH,qDAAqD;YACrD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACrC,QAAQ,CAAC,SAAS,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,uBAAuB,OAAO,GAAG,EAAE;gBAC7E,KAAK,EAAE,WAAW;aACnB,CAAC,CAAC;YAEH,MAAM,CAAC,KAAK,CAAC,0BAA0B,OAAO,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAW;QACxB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC5B,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,cAAc,OAAO,0BAA0B,EAAE;gBACvE,KAAK,EAAE,WAAW;gBAClB,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;YAEH,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,wCAAwC,KAAK,EAAE,CAAC,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACrC,QAAQ,CAAC,eAAe,OAAO,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YAC5D,MAAM,CAAC,KAAK,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,sCAAsC,KAAK,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,CAAC,gCAAgC,IAAI,CAAC,MAAM,eAAe,EAAE;gBAClF,KAAK,EAAE,WAAW;gBAClB,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;YAEH,OAAO,MAAM;iBACV,KAAK,CAAC,IAAI,CAAC;iBACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;iBAC7B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,qCAAqC,KAAK,EAAE,CAAC,CAAC;YAC3D,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,cAAc;IACjB,SAAS,CAAmB;IAC5B,SAAS,CAAmB;IAC5B,kBAAkB,CAAU;IAEpC,YAAY,qBAA8B,IAAI;QAC5C,IAAI,CAAC,SAAS,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACxC,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CAAC,GAAW,EAAE,KAAa;QACpC,IAAI,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YACtD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACvC,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,yDAAyD,KAAK,EAAE,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;QAED,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,GAAW;QACxB,0DAA0D;QAC1D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,2BAA2B;QAC3B,IAAI,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YACtD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACrD,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,qCAAqC,KAAK,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YACtD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,kCAAkC,KAAK,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAE1C,uBAAuB;QACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAC7C,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjD,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,IAAI,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YACtD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YAC7C,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,eAAe;QACrB,IAAI,CAAC;YACH,QAAQ,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YACrE,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB;QACrB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,CAAC;YACH,QAAQ,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YACrE,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED;;OAEG;IACH,mBAAmB;QACjB,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC3B,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QACD,OAAO,2BAA2B,CAAC;IACrC,CAAC;CACF"}

package/dist/test-utils.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Shared generic test utilities and fixtures for unit and integration tests.
+ * Consolidates common test setup patterns to reduce duplication.
+ *
+ * This module contains reusable test factories and types that can be imported
+ * by multiple test files. For API-route-specific test setup, see kaseki-api-routes.test.ts.
+ */
+import type { KasekiApiConfig } from './kaseki-api-config';
+/**
+ * Test-specific config type with jest.fn() mocks.
+ */
+export interface TestScheduler {
+    getQueueStatus: jest.Mock;
+    getReadiness: jest.Mock;
+    getJob: jest.Mock;
+    submitJob: jest.Mock;
+    listJobs: jest.Mock;
+    cancelJob: jest.Mock;
+}
+/**
+ * Possible job statuses for mock scheduler.
+ */
+export type MockJobStatus = 'pending' | 'running' | 'completed' | 'failed' | 'cancelled';
+/**
+ * Mock job object for tests.
+ */
+export interface MockJob {
+    id: string;
+    status: MockJobStatus;
+    createdAt: Date;
+    resultDir?: string;
+    exitCode?: number;
+    failureClass?: string;
+    error?: string;
+}
+/**
+ * Creates a mock scheduler with standard behavior for tests.
+ * Customize by providing jobData to override default getJob behavior.
+ *
+ * @example
+ * const scheduler = createMockScheduler();
+ * scheduler.getReadiness.mockReturnValue({ ready: false, reasons: ['error'] });
+ */
+export declare function createMockScheduler(jobData?: {
+    [jobId: string]: MockJob;
+}): TestScheduler;
+/**
+ * Creates a standard test configuration object.
+ * Pass resultsDir to set the directory; other params use reasonable defaults.
+ *
+ * @example
+ * const config = createTestConfig('/tmp/results');
+ */
+export declare function createTestConfig(resultsDir: string): KasekiApiConfig;
+//# sourceMappingURL=test-utils.d.ts.map

package/dist/test-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-utils.d.ts","sourceRoot":"","sources":["../src/test-utils.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC;IAC1B,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC;IACxB,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC;IACrB,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEzF;;GAEG;AACH,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,CAAC,EAAE;IAAE,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,GAAG,aAAa,CASzF;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,eAAe,CAcpE"}

package/dist/test-utils.js

@@ -0,0 +1,48 @@
+/**
+ * Shared generic test utilities and fixtures for unit and integration tests.
+ * Consolidates common test setup patterns to reduce duplication.
+ *
+ * This module contains reusable test factories and types that can be imported
+ * by multiple test files. For API-route-specific test setup, see kaseki-api-routes.test.ts.
+ */
+/**
+ * Creates a mock scheduler with standard behavior for tests.
+ * Customize by providing jobData to override default getJob behavior.
+ *
+ * @example
+ * const scheduler = createMockScheduler();
+ * scheduler.getReadiness.mockReturnValue({ ready: false, reasons: ['error'] });
+ */
+export function createMockScheduler(jobData) {
+    return {
+        getQueueStatus: jest.fn(() => ({ pending: 0, running: 0, maxConcurrent: 1 })),
+        getReadiness: jest.fn(() => ({ ready: true, reasons: [] })),
+        getJob: jest.fn((id) => jobData?.[id]),
+        submitJob: jest.fn(),
+        listJobs: jest.fn(() => []),
+        cancelJob: jest.fn(),
+    };
+}
+/**
+ * Creates a standard test configuration object.
+ * Pass resultsDir to set the directory; other params use reasonable defaults.
+ *
+ * @example
+ * const config = createTestConfig('/tmp/results');
+ */
+export function createTestConfig(resultsDir) {
+    return {
+        port: 0,
+        apiKeys: ['test-key'],
+        resultsDir,
+        maxConcurrentRuns: 1,
+        defaultTaskMode: 'patch',
+        maxDiffBytes: 200000,
+        agentTimeoutSeconds: 1200,
+        logLevel: 'info',
+        artifactCacheMaxEntries: 20,
+        artifactCacheTtlMs: 5 * 60 * 1000,
+        artifactCacheMaxFileBytes: 10 * 1024 * 1024,
+    };
+}
+//# sourceMappingURL=test-utils.js.map

package/dist/test-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-utils.js","sourceRoot":"","sources":["../src/test-utils.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAkCH;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAsC;IACxE,OAAO;QACL,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7E,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE;QACpB,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAC3B,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE;KACrB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAkB;IACjD,OAAO;QACL,IAAI,EAAE,CAAC;QACP,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,UAAU;QACV,iBAAiB,EAAE,CAAC;QACpB,eAAe,EAAE,OAAgB;QACjC,YAAY,EAAE,MAAM;QACpB,mBAAmB,EAAE,IAAI;QACzB,QAAQ,EAAE,MAAe;QACzB,uBAAuB,EAAE,EAAE;QAC3B,kBAAkB,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI;QACjC,yBAAyB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;KAC5C,CAAC;AACJ,CAAC"}

package/dist/timestamp-tracker.d.ts

@@ -0,0 +1,75 @@
+/**
+ * timestamp-tracker.ts
+ *
+ * Encapsulates timestamp tracking logic for Pi event stream processing.
+ * Safely parses ISO timestamps, tracks min/max values, and converts to epoch milliseconds.
+ */
+export interface TimestampRange {
+    first: string | null;
+    last: string | null;
+    minEpochMs: number | null;
+    maxEpochMs: number | null;
+}
+/**
+ * TimestampTracker manages timestamp observations from an event stream.
+ *
+ * Responsibilities:
+ * - Parse and record ISO 8601 timestamps
+ * - Track first and last observed timestamps (as ISO strings)
+ * - Track min/max epoch milliseconds for duration calculation
+ * - Provide safe conversion from ISO string to epoch milliseconds
+ * - Handle malformed timestamps gracefully
+ */
+export declare class TimestampTracker {
+    private first;
+    private last;
+    private minEpochMs;
+    private maxEpochMs;
+    /**
+     * Convert ISO 8601 string to epoch milliseconds.
+     * Returns null if the string cannot be parsed.
+     */
+    private parseToEpochMs;
+    /**
+     * Record an ISO timestamp observation.
+     * Safely handles malformed timestamps by ignoring them.
+     */
+    record(timestamp: string | null): void;
+    /**
+     * Get epoch milliseconds for a given ISO timestamp string.
+     * Useful for extracting individual timestamp conversions.
+     */
+    getEpochMs(timestamp: string | null): number | null;
+    /**
+     * Get the first recorded timestamp (ISO string).
+     * Returns null if no timestamps have been recorded.
+     */
+    firstTimestamp(): string | null;
+    /**
+     * Get the last recorded timestamp (ISO string).
+     * Returns null if no timestamps have been recorded.
+     */
+    lastTimestamp(): string | null;
+    /**
+     * Get the first timestamp as epoch milliseconds.
+     * If first timestamp string exists but is malformed, attempts parse; otherwise
+     * uses tracked minEpochMs (which may be different if timestamps came from different sources).
+     */
+    firstEpochMs(): number | null;
+    /**
+     * Get the last timestamp as epoch milliseconds.
+     * If last timestamp string exists but is malformed, attempts parse; otherwise
+     * uses tracked maxEpochMs (which may be different if timestamps came from different sources).
+     */
+    lastEpochMs(): number | null;
+    /**
+     * Calculate duration in milliseconds between first and last recorded epochs.
+     * Returns null if either bound is missing or invalid.
+     */
+    durationMs(): number | null;
+    /**
+     * Get complete timestamp range information.
+     */
+    range(): TimestampRange;
+}
+//# sourceMappingURL=timestamp-tracker.d.ts.map

package/dist/timestamp-tracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timestamp-tracker.d.ts","sourceRoot":"","sources":["../src/timestamp-tracker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;;;;;;;;GASG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,KAAK,CAAuB;IACpC,OAAO,CAAC,IAAI,CAAuB;IACnC,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,UAAU,CAAuB;IAEzC;;;OAGG;IACH,OAAO,CAAC,cAAc;IAMtB;;;OAGG;IACH,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAmBtC;;;OAGG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI;IAInD;;;OAGG;IACH,cAAc,IAAI,MAAM,GAAG,IAAI;IAI/B;;;OAGG;IACH,aAAa,IAAI,MAAM,GAAG,IAAI;IAI9B;;;;OAIG;IACH,YAAY,IAAI,MAAM,GAAG,IAAI;IAM7B;;;;OAIG;IACH,WAAW,IAAI,MAAM,GAAG,IAAI;IAM5B;;;OAGG;IACH,UAAU,IAAI,MAAM,GAAG,IAAI;IAO3B;;OAEG;IACH,KAAK,IAAI,cAAc;CAQxB"}

package/dist/timestamp-tracker.js

@@ -0,0 +1,121 @@
+/**
+ * timestamp-tracker.ts
+ *
+ * Encapsulates timestamp tracking logic for Pi event stream processing.
+ * Safely parses ISO timestamps, tracks min/max values, and converts to epoch milliseconds.
+ */
+/**
+ * TimestampTracker manages timestamp observations from an event stream.
+ *
+ * Responsibilities:
+ * - Parse and record ISO 8601 timestamps
+ * - Track first and last observed timestamps (as ISO strings)
+ * - Track min/max epoch milliseconds for duration calculation
+ * - Provide safe conversion from ISO string to epoch milliseconds
+ * - Handle malformed timestamps gracefully
+ */
+export class TimestampTracker {
+    first = null;
+    last = null;
+    minEpochMs = null;
+    maxEpochMs = null;
+    /**
+     * Convert ISO 8601 string to epoch milliseconds.
+     * Returns null if the string cannot be parsed.
+     */
+    parseToEpochMs(timestamp) {
+        if (!timestamp)
+            return null;
+        const epochMs = Date.parse(timestamp);
+        return Number.isFinite(epochMs) ? epochMs : null;
+    }
+    /**
+     * Record an ISO timestamp observation.
+     * Safely handles malformed timestamps by ignoring them.
+     */
+    record(timestamp) {
+        if (!timestamp)
+            return;
+        // Track first and last as ISO strings
+        if (this.first === null) {
+            this.first = timestamp;
+        }
+        this.last = timestamp;
+        // Track min/max as epoch milliseconds for duration calculation
+        const epochMs = this.parseToEpochMs(timestamp);
+        if (epochMs !== null) {
+            this.minEpochMs =
+                this.minEpochMs === null ? epochMs : Math.min(this.minEpochMs, epochMs);
+            this.maxEpochMs =
+                this.maxEpochMs === null ? epochMs : Math.max(this.maxEpochMs, epochMs);
+        }
+    }
+    /**
+     * Get epoch milliseconds for a given ISO timestamp string.
+     * Useful for extracting individual timestamp conversions.
+     */
+    getEpochMs(timestamp) {
+        return this.parseToEpochMs(timestamp);
+    }
+    /**
+     * Get the first recorded timestamp (ISO string).
+     * Returns null if no timestamps have been recorded.
+     */
+    firstTimestamp() {
+        return this.first;
+    }
+    /**
+     * Get the last recorded timestamp (ISO string).
+     * Returns null if no timestamps have been recorded.
+     */
+    lastTimestamp() {
+        return this.last;
+    }
+    /**
+     * Get the first timestamp as epoch milliseconds.
+     * If first timestamp string exists but is malformed, attempts parse; otherwise
+     * uses tracked minEpochMs (which may be different if timestamps came from different sources).
+     */
+    firstEpochMs() {
+        if (this.minEpochMs !== null)
+            return this.minEpochMs;
+        if (this.first !== null)
+            return this.parseToEpochMs(this.first);
+        return null;
+    }
+    /**
+     * Get the last timestamp as epoch milliseconds.
+     * If last timestamp string exists but is malformed, attempts parse; otherwise
+     * uses tracked maxEpochMs (which may be different if timestamps came from different sources).
+     */
+    lastEpochMs() {
+        if (this.maxEpochMs !== null)
+            return this.maxEpochMs;
+        if (this.last !== null)
+            return this.parseToEpochMs(this.last);
+        return null;
+    }
+    /**
+     * Calculate duration in milliseconds between first and last recorded epochs.
+     * Returns null if either bound is missing or invalid.
+     */
+    durationMs() {
+        const first = this.firstEpochMs();
+        const last = this.lastEpochMs();
+        if (first === null || last === null)
+            return null;
+        return Math.max(0, last - first);
+    }
+    /**
+     * Get complete timestamp range information.
+     */
+    range() {
+        return {
+            first: this.first,
+            last: this.last,
+            minEpochMs: this.minEpochMs,
+            maxEpochMs: this.maxEpochMs,
+        };
+    }
+}
+//# sourceMappingURL=timestamp-tracker.js.map

package/dist/timestamp-tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"timestamp-tracker.js","sourceRoot":"","sources":["../src/timestamp-tracker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH;;;;;;;;;GASG;AACH,MAAM,OAAO,gBAAgB;IACnB,KAAK,GAAkB,IAAI,CAAC;IAC5B,IAAI,GAAkB,IAAI,CAAC;IAC3B,UAAU,GAAkB,IAAI,CAAC;IACjC,UAAU,GAAkB,IAAI,CAAC;IAEzC;;;OAGG;IACK,cAAc,CAAC,SAAwB;QAC7C,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACtC,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACnD,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,SAAwB;QAC7B,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,sCAAsC;QACtC,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACzB,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;QAEtB,+DAA+D;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,UAAU;gBACb,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC1E,IAAI,CAAC,UAAU;gBACb,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,SAAwB;QACjC,OAAO,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAED;;;OAGG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;;OAGG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACH,YAAY;QACV,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC;QACrD,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACH,WAAW;QACT,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC;QACrD,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,UAAU;QACR,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAChC,IAAI,KAAK,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACjD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,KAAK,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,KAAK;QACH,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;IACJ,CAAC;CACF"}

package/dist/utils/failure-artifact-writer.d.ts

@@ -0,0 +1,29 @@
+import { Job } from '../kaseki-api-types';
+export type CleanupResult = {
+    attempted: boolean;
+    ok?: boolean;
+    detail?: string;
+};
+/**
+ * Handles writing failure artifacts (failure.json, analysis.md, result-summary.md, etc.)
+ * when a job fails before complete diagnostics are available.
+ */
+export declare class FailureArtifactWriter {
+    private resultsDir;
+    constructor(resultsDir: string);
+    /**
+     * Write API finalization artifacts when job fails before container diagnostics.
+     */
+    writeFailureArtifacts(job: Job, cleanup: CleanupResult, options?: {
+        stdoutTail?: Buffer<ArrayBufferLike>;
+        stderrTail?: Buffer<ArrayBufferLike>;
+        lastStage?: string;
+    }): void;
+    private writeFailureJson;
+    private writeResultSummary;
+    private writeAnalysis;
+    private writeMetadata;
+    private writeStderrLog;
+    private decodeUtf8Tail;
+}
+//# sourceMappingURL=failure-artifact-writer.d.ts.map

package/dist/utils/failure-artifact-writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"failure-artifact-writer.d.ts","sourceRoot":"","sources":["../../src/utils/failure-artifact-writer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,GAAG,EAAE,MAAM,qBAAqB,CAAC;AAE1C,MAAM,MAAM,aAAa,GAAG;IAC1B,SAAS,EAAE,OAAO,CAAC;IACnB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;GAGG;AACH,qBAAa,qBAAqB;IACpB,OAAO,CAAC,UAAU;gBAAV,UAAU,EAAE,MAAM;IAEtC;;OAEG;IACH,qBAAqB,CACnB,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,aAAa,EACtB,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3G,IAAI;IAoBP,OAAO,CAAC,gBAAgB;IAiBxB,OAAO,CAAC,kBAAkB;IAoB1B,OAAO,CAAC,aAAa;IAgCrB,OAAO,CAAC,aAAa;IAyCrB,OAAO,CAAC,cAAc;IA2BtB,OAAO,CAAC,cAAc;CAIvB"}