@enricai/barnacle 1.0.0

package/dist/scripts/recon-shared.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Shared types and utilities for the recon pipeline scripts.
+ * Extracted so recon-summarize.ts and recon-generate.ts stay consistent
+ * without duplicating the core data model or header-tally logic.
+ */
+export declare const CAPTURES_DIR = "/tmp/recon/graphql";
+export declare const REPLAYS_DIR = "/tmp/recon/replays";
+export declare const AUX_DIR = "/tmp/recon/aux";
+export declare const STEP_FAILURES_DIR = "/tmp/recon/step-failures";
+export interface Capture {
+    timestamp: string;
+    phase: string;
+    method: string;
+    url: string;
+    status: number;
+    requestHeaders: Record<string, string>;
+    requestPostData: string | null;
+    responseHeaders: Record<string, string>;
+    responseBody: unknown;
+    operationName: string | null;
+    query: string | null;
+    variables: unknown;
+    decodedParams: unknown;
+}
+export interface ReplayResult {
+    sourceCapture: string;
+    url: string;
+    method: string;
+    operationName: string | null;
+    requestBody: string | null;
+    replayStatus: number | null;
+    replayHeaders: Record<string, string>;
+    replayBody: unknown;
+    success: boolean;
+    error: string | null;
+}
+export interface RateLimitFinding {
+    endpoint: string;
+    safeRps: number | null;
+    triggerStatus: number | null;
+    triggerRps: number | null;
+    retryAfter: string | null;
+    xRateLimitHeaders: Record<string, string>;
+}
+export declare function readJsonDir<T>(dir: string, exclude?: string[]): T[];
+/**
+ * Counts how often each response header appears across successful replays.
+ * Infrastructure headers that are never load-bearing on the request side are
+ * excluded so the caller sees only candidates worth committing as BASE_HEADERS.
+ */
+export declare function tallyResponseHeaders(replays: ReplayResult[]): Map<string, number>;
+//# sourceMappingURL=recon-shared.d.ts.map

package/dist/scripts/recon-shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recon-shared.d.ts","sourceRoot":"","sources":["../../src/scripts/recon-shared.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,eAAO,MAAM,YAAY,uBAAuB,CAAC;AACjD,eAAO,MAAM,WAAW,uBAAuB,CAAC;AAChD,eAAO,MAAM,OAAO,mBAAmB,CAAC;AACxC,eAAO,MAAM,iBAAiB,6BAA6B,CAAC;AAE5D,MAAM,WAAW,OAAO;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,EAAO,GAAG,CAAC,EAAE,CASvE;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAiCjF"}

package/dist/scripts/recon-shared.js

@@ -0,0 +1,68 @@
+"use strict";
+/**
+ * Shared types and utilities for the recon pipeline scripts.
+ * Extracted so recon-summarize.ts and recon-generate.ts stay consistent
+ * without duplicating the core data model or header-tally logic.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.STEP_FAILURES_DIR = exports.AUX_DIR = exports.REPLAYS_DIR = exports.CAPTURES_DIR = void 0;
+exports.readJsonDir = readJsonDir;
+exports.tallyResponseHeaders = tallyResponseHeaders;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+exports.CAPTURES_DIR = "/tmp/recon/graphql";
+exports.REPLAYS_DIR = "/tmp/recon/replays";
+exports.AUX_DIR = "/tmp/recon/aux";
+exports.STEP_FAILURES_DIR = "/tmp/recon/step-failures";
+function readJsonDir(dir, exclude = []) {
+    try {
+        return (0, node_fs_1.readdirSync)(dir)
+            .filter((f) => f.endsWith(".json") && !f.endsWith(".decoded.json") && !exclude.includes(f))
+            .sort()
+            .map((f) => JSON.parse((0, node_fs_1.readFileSync)((0, node_path_1.join)(dir, f), "utf8")));
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Counts how often each response header appears across successful replays.
+ * Infrastructure headers that are never load-bearing on the request side are
+ * excluded so the caller sees only candidates worth committing as BASE_HEADERS.
+ */
+function tallyResponseHeaders(replays) {
+    const IGNORE = new Set([
+        "date",
+        "content-length",
+        "transfer-encoding",
+        "connection",
+        "vary",
+        "server",
+        "x-request-id",
+        "x-correlation-id",
+        "cf-ray",
+        "cf-cache-status",
+        "age",
+        "via",
+        "etag",
+        "last-modified",
+        "expires",
+        "pragma",
+        "strict-transport-security",
+        "x-content-type-options",
+        "x-frame-options",
+        "x-xss-protection",
+    ]);
+    const counts = new Map();
+    const successfulReplays = replays.filter((r) => r.success && r.replayHeaders);
+    for (const replay of successfulReplays) {
+        for (const header of Object.keys(replay.replayHeaders)) {
+            const lower = header.toLowerCase();
+            if (IGNORE.has(lower))
+                continue;
+            counts.set(lower, (counts.get(lower) ?? 0) + 1);
+        }
+    }
+    return counts;
+}
+//# sourceMappingURL=recon-shared.js.map

package/dist/scripts/recon-shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recon-shared.js","sourceRoot":"","sources":["../../src/scripts/recon-shared.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAgDH,kCASC;AAOD,oDAiCC;AA/FD,qCAAoD;AACpD,yCAAiC;AAEpB,QAAA,YAAY,GAAG,oBAAoB,CAAC;AACpC,QAAA,WAAW,GAAG,oBAAoB,CAAC;AACnC,QAAA,OAAO,GAAG,gBAAgB,CAAC;AAC3B,QAAA,iBAAiB,GAAG,0BAA0B,CAAC;AAwC5D,SAAgB,WAAW,CAAI,GAAW,EAAE,UAAoB,EAAE;IAChE,IAAI,CAAC;QACH,OAAO,IAAA,qBAAW,EAAC,GAAG,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;aAC1F,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAM,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,oBAAoB,CAAC,OAAuB;IAC1D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC;QACrB,MAAM;QACN,gBAAgB;QAChB,mBAAmB;QACnB,YAAY;QACZ,MAAM;QACN,QAAQ;QACR,cAAc;QACd,kBAAkB;QAClB,QAAQ;QACR,iBAAiB;QACjB,KAAK;QACL,KAAK;QACL,MAAM;QACN,eAAe;QACf,SAAS;QACT,QAAQ;QACR,2BAA2B;QAC3B,wBAAwB;QACxB,iBAAiB;QACjB,kBAAkB;KACnB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC;IAC9E,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;QACvC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YACvD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;YACnC,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAS;YAChC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/scripts/recon-summarize.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Phase 4e: reads captures and replays produced by recon-browser.ts and
+ * recon-http.ts and generates docs/target-recon.md — the findings document
+ * a teammate needs when the integration breaks.
+ *
+ * Usage:
+ *   pnpm tsx src/scripts/recon-summarize.ts \
+ *     [--site-id <id>] [--out docs/target-recon.md]
+ *
+ * When --site-id is provided, path placeholders in the output (src/sites/<id>/...)
+ * are replaced with the real site ID and the default output path becomes
+ * docs/<site-id>-recon.md.
+ */
+export {};
+//# sourceMappingURL=recon-summarize.d.ts.map

package/dist/scripts/recon-summarize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recon-summarize.d.ts","sourceRoot":"","sources":["../../src/scripts/recon-summarize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}

package/dist/scripts/recon-summarize.js

@@ -0,0 +1,233 @@
+"use strict";
+/**
+ * Phase 4e: reads captures and replays produced by recon-browser.ts and
+ * recon-http.ts and generates docs/target-recon.md — the findings document
+ * a teammate needs when the integration breaks.
+ *
+ * Usage:
+ *   pnpm tsx src/scripts/recon-summarize.ts \
+ *     [--site-id <id>] [--out docs/target-recon.md]
+ *
+ * When --site-id is provided, path placeholders in the output (src/sites/<id>/...)
+ * are replaced with the real site ID and the default output path becomes
+ * docs/<site-id>-recon.md.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const errors_1 = require("../lib/errors");
+const logging_1 = require("../lib/logging");
+const recon_shared_1 = require("../scripts/recon-shared");
+const logger = (0, logging_1.getScriptLogger)("recon-summarize");
+const DEFAULT_OUT = "docs/target-recon.md";
+const PLACEHOLDER_ID = "<id>";
+function formatDate(iso) {
+    return new Date(iso).toLocaleString("en-US", {
+        timeZone: "UTC",
+        dateStyle: "medium",
+        timeStyle: "short",
+    });
+}
+async function main() {
+    const args = process.argv.slice(2);
+    let siteId = PLACEHOLDER_ID;
+    let outPath = null;
+    for (let i = 0; i < args.length; i++) {
+        if (args[i] === "--site-id" && args[i + 1])
+            siteId = args[++i];
+        else if (args[i] === "--out" && args[i + 1])
+            outPath = args[++i];
+    }
+    // Default output path is scoped to site ID when one is provided.
+    outPath ??= siteId !== PLACEHOLDER_ID ? `docs/${siteId}-recon.md` : DEFAULT_OUT;
+    const captures = (0, recon_shared_1.readJsonDir)(recon_shared_1.CAPTURES_DIR);
+    const replays = (0, recon_shared_1.readJsonDir)(recon_shared_1.REPLAYS_DIR, [
+        "rate-limit.json",
+        "introspection-schema.json",
+    ]);
+    const rateLimitRaw = (() => {
+        try {
+            return JSON.parse((0, node_fs_1.readFileSync)((0, node_path_1.join)(recon_shared_1.REPLAYS_DIR, "rate-limit.json"), "utf8"));
+        }
+        catch {
+            return [];
+        }
+    })();
+    const auxFiles = (() => {
+        try {
+            return (0, node_fs_1.readdirSync)(recon_shared_1.AUX_DIR)
+                .filter((f) => f.endsWith(".json"))
+                .sort();
+        }
+        catch {
+            return [];
+        }
+    })();
+    const now = new Date().toISOString();
+    const reconDate = captures[0]?.timestamp ? formatDate(captures[0].timestamp) : "unknown";
+    const uniqueEndpoints = new Map();
+    for (const c of captures) {
+        try {
+            const u = new URL(c.url);
+            const key = `${u.origin}${u.pathname}`;
+            const entry = uniqueEndpoints.get(key) ?? {
+                methods: new Set(),
+                operations: new Set(),
+            };
+            entry.methods.add(c.method);
+            if (c.operationName)
+                entry.operations.add(c.operationName);
+            uniqueEndpoints.set(key, entry);
+        }
+        catch {
+            // skip
+        }
+    }
+    const replayByUrl = new Map();
+    for (const r of replays) {
+        try {
+            const u = new URL(r.url);
+            replayByUrl.set(`${u.origin}${u.pathname}`, r);
+        }
+        catch {
+            // skip
+        }
+    }
+    const passed = replays.filter((r) => r.success).length;
+    const failed = replays.filter((r) => !r.success).length;
+    const has401 = replays.some((r) => r.replayStatus === 401);
+    const has403 = replays.some((r) => r.replayStatus === 403);
+    const rateLimitSummary = rateLimitRaw.length === 0
+        ? "Rate-limit probe not yet run."
+        : rateLimitRaw
+            .map((f) => {
+            const safe = f.safeRps !== null ? `${f.safeRps} rps` : "unknown";
+            const trigger = f.triggerStatus !== null
+                ? ` (triggered ${f.triggerStatus} at ${f.triggerRps} rps)`
+                : " (no trigger observed)";
+            const minTime = f.safeRps !== null ? Math.floor(1000 / f.safeRps) : null;
+            const snippet = minTime !== null
+                ? `\n  \`\`\`typescript\n  // Step 4c: commit this Bottleneck ceiling in your plugin's contract.ts\n  const limiter = new Bottleneck({ minTime: ${minTime} }); // ${f.safeRps} rps safe ceiling\n  \`\`\``
+                : "";
+            return `- \`${f.endpoint}\`: safe ceiling **${safe}**${trigger}${snippet}`;
+        })
+            .join("\n");
+    const headerCounts = (0, recon_shared_1.tallyResponseHeaders)(replays);
+    const successCount = replays.filter((r) => r.success).length;
+    const hazards = [];
+    if (has401)
+        hazards.push("Auth required on some endpoints (401)");
+    if (has403)
+        hazards.push("Bot detection active on some endpoints (403) — may need more headers or Stagehand-only");
+    const rateLimitHeaders = rateLimitRaw.flatMap((f) => Object.keys(f.xRateLimitHeaders ?? {}));
+    if (rateLimitHeaders.some((h) => h.toLowerCase().includes("akamai")))
+        hazards.push("Akamai edge detected");
+    if (rateLimitHeaders.some((h) => h.toLowerCase().includes("cf-")))
+        hazards.push("Cloudflare edge detected");
+    const lines = [
+        `# Target Recon Findings`,
+        ``,
+        `> Generated by \`recon-summarize.ts\` on ${formatDate(now)} from captures taken ${reconDate}.`,
+        `> Human review required — update this doc and \`src/sites/<id>/contract.ts\` then ship.`,
+        ``,
+        `## Summary`,
+        ``,
+        `| Stat | Value |`,
+        `|------|-------|`,
+        `| Captures | ${captures.length} |`,
+        `| Unique endpoints | ${uniqueEndpoints.size} |`,
+        `| Replay passed | ${passed} |`,
+        `| Replay failed | ${failed} |`,
+        `| Auth required | ${has401 ? "YES — see §Auth" : "No"} |`,
+        `| Bot detection | ${has403 ? "YES — see §Hazards" : "No"} |`,
+        `| Auxiliary fixtures | ${auxFiles.length} |`,
+        ``,
+        `## Endpoints Found`,
+        ``,
+        ...[...uniqueEndpoints.entries()].map(([endpoint, { methods, operations }]) => {
+            const replay = replayByUrl.get(endpoint);
+            const replayStatus = replay ? `\`${replay.replayStatus ?? "ERR"}\`` : "not replayed";
+            const ops = operations.size > 0 ? `operations: ${[...operations].join(", ")}` : "REST";
+            return `- \`${endpoint}\` — ${[...methods].join("/")} — ${ops} — replay: ${replayStatus}`;
+        }),
+        ``,
+        `## Public Endpoints`,
+        ``,
+        replays.filter((r) => r.success).length === 0
+            ? "_None confirmed — all replays failed. Check §Hazards._"
+            : replays
+                .filter((r) => r.success)
+                .map((r) => `- \`${r.url}\` — **public** (replayed ${r.replayStatus})`)
+                .join("\n"),
+        ``,
+        `## Auth Required`,
+        ``,
+        has401
+            ? replays
+                .filter((r) => r.replayStatus === 401)
+                .map((r) => `- \`${r.url}\` — 401. Capture token, determine lifetime, build refresh strategy.`)
+                .join("\n")
+            : "_No authenticated endpoints detected._",
+        ``,
+        `## Rate-Limit Ceiling`,
+        ``,
+        rateLimitSummary,
+        ``,
+        `## Codified Headers (Step 4b)`,
+        ``,
+        headerCounts.size === 0
+            ? "_No successful replays — run recon-http.ts first._"
+            : [
+                `_Headers present in successful replays, sorted by frequency. Headers appearing in all_`,
+                `_${successCount} successful replay(s) are likely load-bearing. Commit the load-bearing subset_`,
+                `_as \`BASE_HEADERS\` in \`src/sites/<id>/contract.ts\` and drop the rest._`,
+                ``,
+                `| Header | Replays present (of ${successCount}) | Likely load-bearing? |`,
+                `|--------|--------------------------------------|----------------------|`,
+                ...[...headerCounts.entries()]
+                    .sort((a, b) => b[1] - a[1])
+                    .map(([header, count]) => {
+                    const loadBearing = count === successCount ? "**Yes**" : "No";
+                    return `| \`${header}\` | ${count} | ${loadBearing} |`;
+                }),
+            ].join("\n"),
+        ``,
+        `## Hazards`,
+        ``,
+        hazards.length === 0 ? "_None detected._" : hazards.map((h) => `- ${h}`).join("\n"),
+        ``,
+        `## Auxiliary Fixtures`,
+        ``,
+        auxFiles.length === 0
+            ? "_No auxiliary fixtures detected. Run Phase 3B (recon-http.ts) to probe static endpoints._"
+            : [
+                `_Downloaded to \`${recon_shared_1.AUX_DIR}\` — commit each as a static fixture in \`src/sites/<id>/fixtures/\`._`,
+                ``,
+                ...auxFiles.map((f) => `- \`${f}\` — commit as \`src/sites/<id>/fixtures/${f}\``),
+            ].join("\n"),
+        ``,
+        `## Codified Query Location`,
+        ``,
+        `Run \`pnpm run recon:generate -- --site-id <id>\` to generate \`src/sites/<id>/contract.ts\``,
+        `from the captured JSON. Review and trim the generated file before registering.`,
+        ``,
+        `## Maintenance`,
+        ``,
+        `When smoke test fails: re-run \`pnpm tsx src/scripts/recon-browser.ts\` → diff`,
+        `\`/tmp/recon/graphql/*<operationName>*.json\` against \`src/sites/<id>/contract.ts\``,
+        `→ update query / headers / Zod schema → ship.`,
+        ``,
+        `---`,
+        `_Generated by barnacle recon pipeline. Do not edit by hand — re-run \`recon-summarize.ts\` after each recon run._`,
+        ``,
+    ];
+    (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(outPath), { recursive: true });
+    const content = lines.join("\n").replaceAll(PLACEHOLDER_ID, siteId);
+    (0, node_fs_1.writeFileSync)(outPath, content);
+    logger.info(`findings written to ${outPath}`);
+}
+main().catch((err) => {
+    logger.error(`recon-summarize failed: ${(0, errors_1.toErrorMessage)(err)}`);
+    process.exit(1);
+});
+//# sourceMappingURL=recon-summarize.js.map

package/dist/scripts/recon-summarize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recon-summarize.js","sourceRoot":"","sources":["../../src/scripts/recon-summarize.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;AAEH,qCAA8E;AAC9E,yCAA0C;AAE1C,yCAA8C;AAC9C,2CAAgD;AAChD,yDASgC;AAEhC,MAAM,MAAM,GAAG,IAAA,yBAAe,EAAC,iBAAiB,CAAC,CAAC;AAElD,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAC3C,MAAM,cAAc,GAAG,MAAM,CAAC;AAE9B,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE;QAC3C,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,OAAO;KACnB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,MAAM,GAAG,cAAc,CAAC;IAC5B,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAAE,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAE,CAAC;aAC3D,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAE,CAAC;IACpE,CAAC;IACD,iEAAiE;IACjE,OAAO,KAAK,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,QAAQ,MAAM,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;IAEhF,MAAM,QAAQ,GAAG,IAAA,0BAAW,EAAU,2BAAY,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,IAAA,0BAAW,EAAe,0BAAW,EAAE;QACrD,iBAAiB;QACjB,2BAA2B;KAC5B,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE;QACzB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CACf,IAAA,sBAAY,EAAC,IAAA,gBAAI,EAAC,0BAAW,EAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC,CACrC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAwB,CAAC;QAClC,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE;QACrB,IAAI,CAAC;YACH,OAAO,IAAA,qBAAW,EAAC,sBAAO,CAAC;iBACxB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;iBAClC,IAAI,EAAE,CAAC;QACZ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAc,CAAC;QACxB,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEzF,MAAM,eAAe,GAAG,IAAI,GAAG,EAA6D,CAAC;IAC7F,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACzB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI;gBACxC,OAAO,EAAE,IAAI,GAAG,EAAU;gBAC1B,UAAU,EAAE,IAAI,GAAG,EAAU;aAC9B,CAAC;YACF,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC5B,IAAI,CAAC,CAAC,aAAa;gBAAE,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YAC3D,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,GAAG,EAAwB,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACzB,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACvD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAExD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,GAAG,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,GAAG,CAAC,CAAC;IAE3D,MAAM,gBAAgB,GACpB,YAAY,CAAC,MAAM,KAAK,CAAC;QACvB,CAAC,CAAC,+BAA+B;QACjC,CAAC,CAAC,YAAY;aACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACT,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YACjE,MAAM,OAAO,GACX,CAAC,CAAC,aAAa,KAAK,IAAI;gBACtB,CAAC,CAAC,eAAe,CAAC,CAAC,aAAa,OAAO,CAAC,CAAC,UAAU,OAAO;gBAC1D,CAAC,CAAC,wBAAwB,CAAC;YAC/B,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACzE,MAAM,OAAO,GACX,OAAO,KAAK,IAAI;gBACd,CAAC,CAAC,gJAAgJ,OAAO,WAAW,CAAC,CAAC,OAAO,6BAA6B;gBAC1M,CAAC,CAAC,EAAE,CAAC;YACT,OAAO,OAAO,CAAC,CAAC,QAAQ,sBAAsB,IAAI,KAAK,OAAO,GAAG,OAAO,EAAE,CAAC;QAC7E,CAAC,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,CAAC;IAEpB,MAAM,YAAY,GAAG,IAAA,mCAAoB,EAAC,OAAO,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAE7D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IAClE,IAAI,MAAM;QACR,OAAO,CAAC,IAAI,CACV,wFAAwF,CACzF,CAAC;IACJ,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7F,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACvC,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAE3C,MAAM,KAAK,GAAa;QACtB,yBAAyB;QACzB,EAAE;QACF,4CAA4C,UAAU,CAAC,GAAG,CAAC,wBAAwB,SAAS,GAAG;QAC/F,yFAAyF;QACzF,EAAE;QACF,YAAY;QACZ,EAAE;QACF,kBAAkB;QAClB,kBAAkB;QAClB,gBAAgB,QAAQ,CAAC,MAAM,IAAI;QACnC,wBAAwB,eAAe,CAAC,IAAI,IAAI;QAChD,qBAAqB,MAAM,IAAI;QAC/B,qBAAqB,MAAM,IAAI;QAC/B,qBAAqB,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,IAAI;QAC1D,qBAAqB,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,IAAI;QAC7D,0BAA0B,QAAQ,CAAC,MAAM,IAAI;QAC7C,EAAE;QACF,oBAAoB;QACpB,EAAE;QACF,GAAG,CAAC,GAAG,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE;YAC5E,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzC,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,YAAY,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC;YACrF,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;YACvF,OAAO,OAAO,QAAQ,QAAQ,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,cAAc,YAAY,EAAE,CAAC;QAC5F,CAAC,CAAC;QACF,EAAE;QACF,qBAAqB;QACrB,EAAE;QACF,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;YAC3C,CAAC,CAAC,wDAAwD;YAC1D,CAAC,CAAC,OAAO;iBACJ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;iBACxB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,GAAG,6BAA6B,CAAC,CAAC,YAAY,GAAG,CAAC;iBACtE,IAAI,CAAC,IAAI,CAAC;QACjB,EAAE;QACF,kBAAkB;QAClB,EAAE;QACF,MAAM;YACJ,CAAC,CAAC,OAAO;iBACJ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,GAAG,CAAC;iBACrC,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,OAAO,CAAC,CAAC,GAAG,sEAAsE,CACrF;iBACA,IAAI,CAAC,IAAI,CAAC;YACf,CAAC,CAAC,wCAAwC;QAC5C,EAAE;QACF,uBAAuB;QACvB,EAAE;QACF,gBAAgB;QAChB,EAAE;QACF,+BAA+B;QAC/B,EAAE;QACF,YAAY,CAAC,IAAI,KAAK,CAAC;YACrB,CAAC,CAAC,oDAAoD;YACtD,CAAC,CAAC;gBACE,wFAAwF;gBACxF,IAAI,YAAY,gFAAgF;gBAChG,4EAA4E;gBAC5E,EAAE;gBACF,kCAAkC,YAAY,4BAA4B;gBAC1E,0EAA0E;gBAC1E,GAAG,CAAC,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC;qBAC3B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;qBAC3B,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE;oBACvB,MAAM,WAAW,GAAG,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;oBAC9D,OAAO,OAAO,MAAM,QAAQ,KAAK,MAAM,WAAW,IAAI,CAAC;gBACzD,CAAC,CAAC;aACL,CAAC,IAAI,CAAC,IAAI,CAAC;QAChB,EAAE;QACF,YAAY;QACZ,EAAE;QACF,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACnF,EAAE;QACF,uBAAuB;QACvB,EAAE;QACF,QAAQ,CAAC,MAAM,KAAK,CAAC;YACnB,CAAC,CAAC,2FAA2F;YAC7F,CAAC,CAAC;gBACE,oBAAoB,sBAAO,wEAAwE;gBACnG,EAAE;gBACF,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,4CAA4C,CAAC,IAAI,CAAC;aAClF,CAAC,IAAI,CAAC,IAAI,CAAC;QAChB,EAAE;QACF,4BAA4B;QAC5B,EAAE;QACF,8FAA8F;QAC9F,gFAAgF;QAChF,EAAE;QACF,gBAAgB;QAChB,EAAE;QACF,gFAAgF;QAChF,sFAAsF;QACtF,+CAA+C;QAC/C,EAAE;QACF,KAAK;QACL,mHAAmH;QACnH,EAAE;KACH,CAAC;IAEF,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IACpE,IAAA,uBAAa,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChC,MAAM,CAAC,IAAI,CAAC,uBAAuB,OAAO,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,MAAM,CAAC,KAAK,CAAC,2BAA2B,IAAA,uBAAc,EAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/scripts/smoke-test.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Nightly validation: runs one request through a plugin's endpoint end-to-end
+ * and validates the response envelope shape and HTTP status. Exits 0 on
+ * success, non-zero on HTTP error or malformed envelope. Wire into CI and
+ * cron — this is the first rung of the drift-detection ladder.
+ *
+ * Usage:
+ *   pnpm run smoke -- --site <siteId> --payload '{"key":"value"}' \
+ *     [--host http://localhost:3000] [--route <path>] [--fallback] \
+ *     [--response-schema <path>] [--timeout <ms>]
+ *
+ * --response-schema must point to a TypeScript/JS module whose default export is a
+ * Zod schema. The smoke test validates the full response body against it — not just
+ * the envelope wrapper — so schema drift on the data payload fails loud and fast.
+ *
+ * Requires:
+ *   - The server to be running (or pass --host to point at staging/prod)
+ *   - API_KEY env var with a plaintext key that matches one of API_KEYS_HASHED
+ *   - The target plugin to be registered and healthy
+ */
+export {};
+//# sourceMappingURL=smoke-test.d.ts.map

package/dist/scripts/smoke-test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"smoke-test.d.ts","sourceRoot":"","sources":["../../src/scripts/smoke-test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG"}

package/dist/scripts/smoke-test.js

@@ -0,0 +1,236 @@
+"use strict";
+/**
+ * Nightly validation: runs one request through a plugin's endpoint end-to-end
+ * and validates the response envelope shape and HTTP status. Exits 0 on
+ * success, non-zero on HTTP error or malformed envelope. Wire into CI and
+ * cron — this is the first rung of the drift-detection ladder.
+ *
+ * Usage:
+ *   pnpm run smoke -- --site <siteId> --payload '{"key":"value"}' \
+ *     [--host http://localhost:3000] [--route <path>] [--fallback] \
+ *     [--response-schema <path>] [--timeout <ms>]
+ *
+ * --response-schema must point to a TypeScript/JS module whose default export is a
+ * Zod schema. The smoke test validates the full response body against it — not just
+ * the envelope wrapper — so schema drift on the data payload fails loud and fast.
+ *
+ * Requires:
+ *   - The server to be running (or pass --host to point at staging/prod)
+ *   - API_KEY env var with a plaintext key that matches one of API_KEYS_HASHED
+ *   - The target plugin to be registered and healthy
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_path_1 = require("node:path");
+const v4_1 = require("zod/v4");
+const errors_1 = require("../lib/errors");
+const http_1 = require("../lib/http");
+const logging_1 = require("../lib/logging");
+(0, http_1.configureHttpDispatcher)();
+const logger = (0, logging_1.getScriptLogger)("smoke-test");
+const DEFAULT_HOST = "http://localhost:3000";
+const ResponseEnvelopeSchema = v4_1.z.object({
+    status: v4_1.z.object({
+        httpStatus: v4_1.z.string(),
+        dateTime: v4_1.z.string(),
+        details: v4_1.z.array(v4_1.z.unknown()),
+    }),
+});
+const DEFAULT_TIMEOUT_MS = 30_000;
+function parseCli() {
+    const args = process.argv.slice(2);
+    let site = "";
+    let payloadStr = "{}";
+    let host = process.env.SMOKE_HOST ?? DEFAULT_HOST;
+    let route = null;
+    let runFallback = false;
+    let responseSchemaPath = null;
+    let timeoutMs = Number(process.env.SMOKE_TIMEOUT_MS ?? DEFAULT_TIMEOUT_MS);
+    for (let i = 0; i < args.length; i++) {
+        if (args[i] === "--site" && args[i + 1])
+            site = args[++i];
+        else if (args[i] === "--payload" && args[i + 1])
+            payloadStr = args[++i];
+        else if (args[i] === "--host" && args[i + 1])
+            host = args[++i];
+        else if (args[i] === "--route" && args[i + 1])
+            route = args[++i];
+        else if (args[i] === "--fallback")
+            runFallback = true;
+        else if (args[i] === "--response-schema" && args[i + 1])
+            responseSchemaPath = (0, node_path_1.resolve)(args[++i]);
+        else if (args[i] === "--timeout" && args[i + 1])
+            timeoutMs = Number(args[++i]);
+    }
+    if (!site) {
+        logger.error("usage: smoke-test.ts --site <siteId> [--payload <json>] [--host <url>] [--route <path>] [--fallback] [--response-schema <path>] [--timeout <ms>]");
+        process.exit(1);
+    }
+    let payload;
+    try {
+        payload = JSON.parse(payloadStr);
+    }
+    catch {
+        logger.error(`invalid --payload JSON: ${payloadStr}`);
+        process.exit(1);
+    }
+    return { site, payload, host, route, runFallback, responseSchemaPath, timeoutMs };
+}
+/**
+ * Dynamically imports a Zod schema from a module path. The module must
+ * export a Zod schema as its default export so the smoke test remains
+ * site-agnostic — it validates without knowing which plugin it targets.
+ */
+async function loadResponseSchema(schemaPath) {
+    try {
+        const mod = (await import(schemaPath));
+        if (!mod.default || typeof mod.default.safeParse !== "function") {
+            logger.error(`--response-schema: default export from ${schemaPath} is not a Zod schema`);
+            process.exit(1);
+        }
+        return mod.default;
+    }
+    catch (err) {
+        logger.error(`--response-schema: failed to import ${schemaPath}: ${(0, errors_1.toErrorMessage)(err)}`);
+        process.exit(1);
+    }
+}
+async function main() {
+    const { site, payload, host, route, runFallback, responseSchemaPath, timeoutMs } = parseCli();
+    const responseSchema = responseSchemaPath ? await loadResponseSchema(responseSchemaPath) : null;
+    const apiKey = process.env.API_KEY;
+    if (!apiKey) {
+        logger.error("API_KEY env var required");
+        process.exit(1);
+    }
+    const url = route != null ? `${host}${route}` : `${host}/v1/${site}/run`;
+    logger.info(`smoke-test: POST ${url}${route != null ? " (routeOverride)" : ""} (timeout=${timeoutMs}ms)`);
+    logger.info(`payload: ${JSON.stringify(payload)}`);
+    const startMs = Date.now();
+    let response;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        response = await fetch(url, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                Authorization: `Bearer ${apiKey}`,
+            },
+            body: JSON.stringify(payload),
+            signal: controller.signal,
+        });
+    }
+    catch (err) {
+        if (err instanceof Error && err.name === "AbortError") {
+            logger.error(`smoke-test timed out after ${timeoutMs}ms`);
+        }
+        else {
+            logger.error(`fetch failed: ${(0, errors_1.toErrorMessage)(err)}`);
+        }
+        process.exit(1);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+    const latencyMs = Date.now() - startMs;
+    logger.info(`response: ${response.status} in ${latencyMs}ms`);
+    let body;
+    try {
+        body = await response.json();
+    }
+    catch (err) {
+        logger.error(`response body is not JSON: ${(0, errors_1.toErrorMessage)(err)}`);
+        process.exit(1);
+    }
+    const envelope = ResponseEnvelopeSchema.safeParse(body);
+    if (!envelope.success) {
+        logger.error(`response does not match envelope schema: ${JSON.stringify(envelope.error.issues, null, 2)}`);
+        process.exit(1);
+    }
+    if (!response.ok) {
+        logger.error(`smoke-test FAILED — HTTP ${response.status}: ${JSON.stringify(body, null, 2)}`);
+        process.exit(1);
+    }
+    if (envelope.data.status.httpStatus !== "OK") {
+        logger.error(`smoke-test FAILED — envelope status: ${envelope.data.status.httpStatus}: ${JSON.stringify(body, null, 2)}`);
+        process.exit(1);
+    }
+    if (responseSchema) {
+        const dataResult = responseSchema.safeParse(body);
+        if (!dataResult.success) {
+            logger.error(`smoke-test FAILED — response body failed schema validation: ${JSON.stringify(dataResult.error.issues, null, 2)}`);
+            process.exit(1);
+        }
+        logger.info("schema validation PASSED");
+    }
+    logger.info(`smoke-test PASSED — site=${site} status=OK latency=${latencyMs}ms`);
+    if (runFallback) {
+        logger.info("smoke-test: running optional fallback-path probe...");
+        const fallbackStartMs = Date.now();
+        let fallbackResponse;
+        const fallbackController = new AbortController();
+        const fallbackTimer = setTimeout(() => fallbackController.abort(), timeoutMs);
+        try {
+            fallbackResponse = await fetch(url, {
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/json",
+                    Authorization: `Bearer ${apiKey}`,
+                    "X-Barnacle-Force-Fallback": "true",
+                },
+                body: JSON.stringify(payload),
+                signal: fallbackController.signal,
+            });
+        }
+        catch (err) {
+            if (err instanceof Error && err.name === "AbortError") {
+                logger.error(`smoke-test (fallback) timed out after ${timeoutMs}ms`);
+            }
+            else {
+                logger.error(`fallback probe fetch failed: ${(0, errors_1.toErrorMessage)(err)}`);
+            }
+            process.exit(1);
+        }
+        finally {
+            clearTimeout(fallbackTimer);
+        }
+        const fallbackLatencyMs = Date.now() - fallbackStartMs;
+        logger.info(`fallback response: ${fallbackResponse.status} in ${fallbackLatencyMs}ms`);
+        if (!fallbackResponse.ok) {
+            const body = await fallbackResponse.text().catch(() => "(unreadable body)");
+            logger.error(`smoke-test FAILED (fallback) — HTTP ${fallbackResponse.status}: ${body}`);
+            process.exit(1);
+        }
+        let fallbackBody;
+        try {
+            fallbackBody = await fallbackResponse.json();
+        }
+        catch (err) {
+            logger.error(`fallback response body is not JSON: ${(0, errors_1.toErrorMessage)(err)}`);
+            process.exit(1);
+        }
+        const fallbackEnvelope = ResponseEnvelopeSchema.safeParse(fallbackBody);
+        if (!fallbackEnvelope.success) {
+            logger.error(`fallback response does not match envelope schema: ${JSON.stringify(fallbackEnvelope.error.issues, null, 2)}`);
+            process.exit(1);
+        }
+        if (fallbackEnvelope.data.status.httpStatus !== "OK") {
+            logger.error(`smoke-test FAILED (fallback) — envelope status: ${fallbackEnvelope.data.status.httpStatus}: ${JSON.stringify(fallbackBody, null, 2)}`);
+            process.exit(1);
+        }
+        if (responseSchema) {
+            const fallbackDataResult = responseSchema.safeParse(fallbackBody);
+            if (!fallbackDataResult.success) {
+                logger.error(`smoke-test FAILED (fallback) — response body failed schema validation: ${JSON.stringify(fallbackDataResult.error.issues, null, 2)}`);
+                process.exit(1);
+            }
+            logger.info("schema validation PASSED (fallback)");
+        }
+        logger.info(`smoke-test PASSED (fallback) — site=${site} status=OK latency=${fallbackLatencyMs}ms`);
+    }
+}
+main().catch((err) => {
+    logger.error(`smoke-test error: ${(0, errors_1.toErrorMessage)(err)}`);
+    process.exit(1);
+});
+//# sourceMappingURL=smoke-test.js.map