@flighthq/tool-pipeline 0.5.1-edge.685.f72fc7f

package/LICENSE.md

@@ -0,0 +1,9 @@
+# MIT License
+
+Copyright (c) 2013-2026 Joshua Granick and other contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/README.md

@@ -0,0 +1,17 @@
+# @flighthq/tool-pipeline
+
+Server and CI content-addressed pass-through asset publisher with canonical manifests
+
+## Install
+
+```sh
+npm install @flighthq/tool-pipeline
+```
+
+Import the supported application-facing API from `@flighthq/tool-pipeline`. The `@flighthq/tool-pipeline/contract` export is the wider package-to-package contract used to compose Flight itself.
+
+This package is part of the locked-version Flight SDK graph. Applications may instead install and import `@flighthq/sdk` when package-level tree shaking is sufficient.
+
+- [Flight project](https://github.com/flighthq/flight)
+- [Source for @flighthq/tool-pipeline@0.5.1-edge.685.f72fc7f](https://github.com/flighthq/flight/tree/f72fc7feaa9653d950f39c7d2fe6365f48e82e51/packages/tool-pipeline)
+- [License](https://github.com/flighthq/flight/blob/f72fc7feaa9653d950f39c7d2fe6365f48e82e51/LICENSE.md)

package/dist/bin.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=bin.d.ts.map

package/dist/bin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.d.ts","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":""}

package/dist/bin.js

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+import { runToolPipeline } from './pipelineTool';
+process.exitCode = await runToolPipeline(process.argv.slice(2), {
+    writeError: (message) => process.stderr.write(message),
+    writeOutput: (message) => process.stdout.write(message),
+});
+//# sourceMappingURL=bin.js.map

package/dist/bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,CAAC,QAAQ,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;IAC9D,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;IACtD,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;CACxD,CAAC,CAAC"}

package/dist/contract.d.ts

@@ -0,0 +1,4 @@
+export * from './pipelineBuild';
+export * from './pipelineConfig';
+export * from './pipelineTool';
+//# sourceMappingURL=contract.d.ts.map

package/dist/contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../src/contract.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC"}

package/dist/contract.js

@@ -0,0 +1,4 @@
+export * from './pipelineBuild';
+export * from './pipelineConfig';
+export * from './pipelineTool';
+//# sourceMappingURL=contract.js.map

package/dist/contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../src/contract.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+export * from './contract';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,2 @@
+export * from './contract';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC"}

package/dist/pipelineBuild.d.ts

@@ -0,0 +1,25 @@
+import type { AssetType } from '@flighthq/types/contract';
+export declare const TOOL_PIPELINE_MANIFEST_SCHEMA_VERSION = 1;
+export interface ToolPipelineBuildOptions {
+    readonly configPath: string;
+    readonly outputDirectory: string;
+}
+export interface ToolPipelineBuildResult {
+    readonly manifest: Readonly<ToolPipelineManifest>;
+    readonly manifestHash: string;
+    readonly outputFiles: readonly string[];
+}
+export interface ToolPipelineManifest {
+    readonly assets: readonly Readonly<ToolPipelineManifestAsset>[];
+    readonly schemaVersion: 1;
+}
+export interface ToolPipelineManifestAsset {
+    readonly byteLength: number;
+    readonly contentHash: string;
+    readonly groups?: readonly string[];
+    readonly id: string;
+    readonly type: AssetType;
+    readonly url: string;
+}
+export declare function buildToolPipeline(options: Readonly<ToolPipelineBuildOptions>): Promise<ToolPipelineBuildResult>;
+//# sourceMappingURL=pipelineBuild.d.ts.map

package/dist/pipelineBuild.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipelineBuild.d.ts","sourceRoot":"","sources":["../src/pipelineBuild.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAK1D,eAAO,MAAM,qCAAqC,IAAI,CAAC;AAEvD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IAClD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,SAAS,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CAAC;IAChE,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;CAC3B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,wBAAwB,CAAC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA6BrH"}

package/dist/pipelineBuild.js

@@ -0,0 +1,91 @@
+import { createHash } from 'node:crypto';
+import { lstat, mkdir, mkdtemp, readFile, rename, rm, writeFile } from 'node:fs/promises';
+import { basename, dirname, join, resolve } from 'node:path';
+import { parseToolPipelineConfig } from './pipelineConfig';
+export const TOOL_PIPELINE_MANIFEST_SCHEMA_VERSION = 1;
+export async function buildToolPipeline(options) {
+    const configPath = resolve(options.configPath);
+    const outputDirectory = resolve(options.outputDirectory);
+    if (await pathExists(outputDirectory)) {
+        throw new Error(`tool-pipeline: output directory already exists: ${outputDirectory}`);
+    }
+    const config = parseToolPipelineConfig(await readFile(configPath, 'utf8'), configPath);
+    const configDirectory = dirname(configPath);
+    const outputByUrl = new Map();
+    const manifestAssets = [];
+    for (const source of [...config.assets].sort((a, b) => compareCodeUnits(a.id, b.id))) {
+        const bytes = await readFile(resolve(configDirectory, ...source.source.split('/')));
+        const contentHash = `sha256-${hashBytes(bytes)}`;
+        const url = `assets/${contentHash}${getNormalizedExtension(source.source)}`;
+        outputByUrl.set(url, bytes);
+        manifestAssets.push(createManifestAsset(source, bytes.byteLength, contentHash, url));
+    }
+    const manifest = {
+        assets: manifestAssets,
+        schemaVersion: TOOL_PIPELINE_MANIFEST_SCHEMA_VERSION,
+    };
+    const manifestText = `${JSON.stringify(manifest, null, 2)}\n`;
+    const manifestHash = `sha256-${hashBytes(Buffer.from(manifestText, 'utf8'))}`;
+    const outputFiles = ['asset-manifest.json', ...outputByUrl.keys()].sort(compareCodeUnits);
+    await publishToolPipelineOutput(outputDirectory, outputByUrl, manifestText);
+    return { manifest, manifestHash, outputFiles };
+}
+function compareCodeUnits(a, b) {
+    return a < b ? -1 : a > b ? 1 : 0;
+}
+function createManifestAsset(source, byteLength, contentHash, url) {
+    return {
+        byteLength,
+        contentHash,
+        ...(source.groups === undefined ? {} : { groups: [...source.groups] }),
+        id: source.id,
+        type: source.type,
+        url,
+    };
+}
+function getNormalizedExtension(source) {
+    const name = source.slice(source.lastIndexOf('/') + 1);
+    const extension = /\.([A-Za-z0-9]+)$/.exec(name)?.[1];
+    return extension === undefined ? '' : `.${extension.toLowerCase()}`;
+}
+function hashBytes(bytes) {
+    return createHash('sha256').update(bytes).digest('hex');
+}
+async function pathExists(path) {
+    try {
+        await lstat(path);
+        return true;
+    }
+    catch (error) {
+        if (isNodeError(error) && error.code === 'ENOENT')
+            return false;
+        throw error;
+    }
+}
+async function publishToolPipelineOutput(outputDirectory, outputByUrl, manifestText) {
+    const parent = dirname(outputDirectory);
+    await mkdir(parent, { recursive: true });
+    const stagingDirectory = await mkdtemp(join(parent, `.${basename(outputDirectory)}.tmp-`));
+    let published = false;
+    try {
+        for (const [url, bytes] of [...outputByUrl.entries()].sort((a, b) => compareCodeUnits(a[0], b[0]))) {
+            const path = join(stagingDirectory, ...url.split('/'));
+            await mkdir(dirname(path), { recursive: true });
+            await writeFile(path, bytes);
+        }
+        await writeFile(join(stagingDirectory, 'asset-manifest.json'), manifestText, 'utf8');
+        if (await pathExists(outputDirectory)) {
+            throw new Error(`tool-pipeline: output directory already exists: ${outputDirectory}`);
+        }
+        await rename(stagingDirectory, outputDirectory);
+        published = true;
+    }
+    finally {
+        if (!published)
+            await rm(stagingDirectory, { force: true, recursive: true });
+    }
+}
+function isNodeError(error) {
+    return error instanceof Error && 'code' in error;
+}
+//# sourceMappingURL=pipelineBuild.js.map

package/dist/pipelineBuild.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipelineBuild.js","sourceRoot":"","sources":["../src/pipelineBuild.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1F,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAI7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAG3D,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC;AA2BvD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAA2C;IACjF,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACzD,IAAI,MAAM,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,mDAAmD,eAAe,EAAE,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,MAAM,GAAG,uBAAuB,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC;IACvF,MAAM,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,MAAM,cAAc,GAAgC,EAAE,CAAC;IACvD,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACpF,MAAM,WAAW,GAAG,UAAU,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,UAAU,WAAW,GAAG,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5E,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5B,cAAc,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,QAAQ,GAAyB;QACrC,MAAM,EAAE,cAAc;QACtB,aAAa,EAAE,qCAAqC;KACrD,CAAC;IACF,MAAM,YAAY,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAC9D,MAAM,YAAY,GAAG,UAAU,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;IAC9E,MAAM,WAAW,GAAG,CAAC,qBAAqB,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAE1F,MAAM,yBAAyB,CAAC,eAAe,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IAC5E,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAS,EAAE,CAAS;IAC5C,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAAoC,EACpC,UAAkB,EAClB,WAAmB,EACnB,GAAW;IAEX,OAAO;QACL,UAAU;QACV,WAAW;QACX,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACtE,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG;KACJ,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAc;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACtD,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,SAAS,CAAC,KAA2B;IAC5C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAChE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,eAAuB,EACvB,WAAwC,EACxC,YAAoB;IAEpB,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACxC,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3F,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC;QACH,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnG,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YACvD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;QACD,MAAM,SAAS,CAAC,IAAI,CAAC,gBAAgB,EAAE,qBAAqB,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QACrF,IAAI,MAAM,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,mDAAmD,eAAe,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,MAAM,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;QAChD,SAAS,GAAG,IAAI,CAAC;IACnB,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,SAAS;YAAE,MAAM,EAAE,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;AACnD,CAAC"}

package/dist/pipelineConfig.d.ts

@@ -0,0 +1,14 @@
+import type { AssetType } from '@flighthq/types/contract';
+export declare const TOOL_PIPELINE_CONFIG_SCHEMA_VERSION = 1;
+export interface ToolPipelineConfig {
+    readonly assets: readonly Readonly<ToolPipelineSource>[];
+    readonly schemaVersion: 1;
+}
+export interface ToolPipelineSource {
+    readonly groups?: readonly string[];
+    readonly id: string;
+    readonly source: string;
+    readonly type: AssetType;
+}
+export declare function parseToolPipelineConfig(source: string, sourceName?: string): ToolPipelineConfig;
+//# sourceMappingURL=pipelineConfig.d.ts.map

package/dist/pipelineConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipelineConfig.d.ts","sourceRoot":"","sources":["../src/pipelineConfig.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAE1D,eAAO,MAAM,mCAAmC,IAAI,CAAC;AAErD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,SAAS,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;IACzD,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;CAC1B;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,EACd,UAAU,GAAE,MAA+B,GAC1C,kBAAkB,CAiDpB"}

package/dist/pipelineConfig.js

@@ -0,0 +1,73 @@
+export const TOOL_PIPELINE_CONFIG_SCHEMA_VERSION = 1;
+export function parseToolPipelineConfig(source, sourceName = 'tool pipeline config') {
+    let value;
+    try {
+        value = JSON.parse(source);
+    }
+    catch {
+        throw new Error(`${sourceName}: invalid JSON`);
+    }
+    if (!isRecord(value))
+        throw new Error(`${sourceName}: config must be an object`);
+    assertKnownFields(value, ['assets', 'schemaVersion'], sourceName);
+    if (value['schemaVersion'] !== TOOL_PIPELINE_CONFIG_SCHEMA_VERSION) {
+        throw new Error(`${sourceName}: schemaVersion must equal ${TOOL_PIPELINE_CONFIG_SCHEMA_VERSION}`);
+    }
+    if (!Array.isArray(value['assets']))
+        throw new Error(`${sourceName}: assets must be an array`);
+    const ids = new Set();
+    const assets = [];
+    for (let index = 0; index < value['assets'].length; index++) {
+        const input = value['assets'][index];
+        const label = `${sourceName}: assets[${index}]`;
+        if (!isRecord(input))
+            throw new Error(`${label} must be an object`);
+        assertKnownFields(input, ['groups', 'id', 'source', 'type'], label);
+        const id = input['id'];
+        const assetSource = input['source'];
+        const type = input['type'];
+        if (typeof id !== 'string' || id.length === 0)
+            throw new Error(`${label}.id must be a non-empty string`);
+        if (ids.has(id))
+            throw new Error(`${sourceName}: duplicate asset id "${id}"`);
+        ids.add(id);
+        if (typeof assetSource !== 'string' || !isPortableRelativePath(assetSource)) {
+            throw new Error(`${label}.source must be a portable relative path`);
+        }
+        if (typeof type !== 'string' || type.length === 0)
+            throw new Error(`${label}.type must be a non-empty string`);
+        const groups = input['groups'];
+        if (groups !== undefined &&
+            (!Array.isArray(groups) || groups.some((group) => typeof group !== 'string' || group.length === 0))) {
+            throw new Error(`${label}.groups must contain non-empty strings`);
+        }
+        const normalizedGroups = groups === undefined ? [] : [...new Set(groups)].sort(compareCodeUnits);
+        assets.push({
+            ...(normalizedGroups.length > 0 ? { groups: normalizedGroups } : {}),
+            id,
+            source: assetSource,
+            type: type,
+        });
+    }
+    return { assets, schemaVersion: TOOL_PIPELINE_CONFIG_SCHEMA_VERSION };
+}
+function assertKnownFields(value, fields, label) {
+    const known = new Set(fields);
+    const unknown = Object.keys(value)
+        .filter((field) => !known.has(field))
+        .sort(compareCodeUnits)[0];
+    if (unknown !== undefined)
+        throw new Error(`${label}: unknown field "${unknown}"`);
+}
+function compareCodeUnits(a, b) {
+    return a < b ? -1 : a > b ? 1 : 0;
+}
+function isPortableRelativePath(value) {
+    if (value.length === 0 || value.startsWith('/') || value.includes('\\') || /^[A-Za-z]:/.test(value))
+        return false;
+    return value.split('/').every((segment) => segment !== '' && segment !== '.' && segment !== '..');
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=pipelineConfig.js.map

package/dist/pipelineConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipelineConfig.js","sourceRoot":"","sources":["../src/pipelineConfig.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC;AAcrD,MAAM,UAAU,uBAAuB,CACrC,MAAc,EACd,aAAqB,sBAAsB;IAE3C,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,gBAAgB,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,4BAA4B,CAAC,CAAC;IACjF,iBAAiB,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,UAAU,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,eAAe,CAAC,KAAK,mCAAmC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,8BAA8B,mCAAmC,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,2BAA2B,CAAC,CAAC;IAE/F,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,GAAG,UAAU,YAAY,KAAK,GAAG,CAAC;QAChD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;QACpE,iBAAiB,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;QAEpE,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACvB,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;QACzG,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,yBAAyB,EAAE,GAAG,CAAC,CAAC;QAC9E,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACZ,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,0CAA0C,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,kCAAkC,CAAC,CAAC;QAE/G,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,IACE,MAAM,KAAK,SAAS;YACpB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,EACnG,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wCAAwC,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,gBAAgB,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7G,MAAM,CAAC,IAAI,CAAC;YACV,GAAG,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,EAAE;YACF,MAAM,EAAE,WAAW;YACnB,IAAI,EAAE,IAAiB;SACxB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,mCAAmC,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAwC,EAAE,MAAyB,EAAE,KAAa;IAC3G,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;SAC/B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;SACpC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,OAAO,GAAG,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAS,EAAE,CAAS;IAC5C,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClH,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/pipelineTool.d.ts

@@ -0,0 +1,6 @@
+export interface ToolPipelineToolIO {
+    readonly writeError: (message: string) => void;
+    readonly writeOutput: (message: string) => void;
+}
+export declare function runToolPipeline(args: readonly string[], io: Readonly<ToolPipelineToolIO>): Promise<number>;
+//# sourceMappingURL=pipelineTool.d.ts.map

package/dist/pipelineTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipelineTool.d.ts","sourceRoot":"","sources":["../src/pipelineTool.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/C,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACjD;AAID,wBAAsB,eAAe,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAkBhH"}

package/dist/pipelineTool.js

@@ -0,0 +1,42 @@
+import { buildToolPipeline } from './pipelineBuild';
+const USAGE = 'Usage: tool-pipeline build --config <file> --out <new-directory>\n';
+export async function runToolPipeline(args, io) {
+    if (args.length === 1 && (args[0] === '--help' || args[0] === '-h')) {
+        io.writeOutput(USAGE);
+        return 0;
+    }
+    const options = parseBuildArguments(args);
+    if (options === null) {
+        io.writeError(USAGE);
+        return 1;
+    }
+    try {
+        const result = await buildToolPipeline(options);
+        io.writeOutput(`${result.manifestHash}  asset-manifest.json\n`);
+        return 0;
+    }
+    catch (error) {
+        io.writeError(`${error instanceof Error ? error.message : String(error)}\n`);
+        return 1;
+    }
+}
+function parseBuildArguments(args) {
+    if (args.length !== 5 || args[0] !== 'build')
+        return null;
+    let configPath = null;
+    let outputDirectory = null;
+    for (let index = 1; index < args.length; index += 2) {
+        const flag = args[index];
+        const value = args[index + 1];
+        if (value === undefined || value.length === 0)
+            return null;
+        if (flag === '--config' && configPath === null)
+            configPath = value;
+        else if (flag === '--out' && outputDirectory === null)
+            outputDirectory = value;
+        else
+            return null;
+    }
+    return configPath === null || outputDirectory === null ? null : { configPath, outputDirectory };
+}
+//# sourceMappingURL=pipelineTool.js.map

package/dist/pipelineTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipelineTool.js","sourceRoot":"","sources":["../src/pipelineTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAOpD,MAAM,KAAK,GAAG,oEAAoE,CAAC;AAEnF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAuB,EAAE,EAAgC;IAC7F,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;QACpE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACtB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAChD,EAAE,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,YAAY,yBAAyB,CAAC,CAAC;QAChE,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,EAAE,CAAC,UAAU,CAAC,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7E,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,IAAuB;IAEvB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1D,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,eAAe,GAAkB,IAAI,CAAC;IAC1C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3D,IAAI,IAAI,KAAK,UAAU,IAAI,UAAU,KAAK,IAAI;YAAE,UAAU,GAAG,KAAK,CAAC;aAC9D,IAAI,IAAI,KAAK,OAAO,IAAI,eAAe,KAAK,IAAI;YAAE,eAAe,GAAG,KAAK,CAAC;;YAC1E,OAAO,IAAI,CAAC;IACnB,CAAC;IACD,OAAO,UAAU,KAAK,IAAI,IAAI,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC;AAClG,CAAC"}

package/package.json

@@ -0,0 +1,51 @@
+{
+  "name": "@flighthq/tool-pipeline",
+  "version": "0.5.1-edge.685.f72fc7f",
+  "author": "Joshua Granick and other contributors",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/flighthq/flight.git",
+    "directory": "packages/tool-pipeline"
+  },
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./contract": {
+      "types": "./dist/contract.d.ts",
+      "default": "./dist/contract.js"
+    }
+  },
+  "bin": {
+    "tool-pipeline": "dist/bin.js"
+  },
+  "files": [
+    "dist",
+    "src/**/*.test.ts",
+    "!dist/**/*.test.js",
+    "!dist/**/*.test.d.ts",
+    "!dist/**/*.test.js.map",
+    "!dist/**/*.test.d.ts.map"
+  ],
+  "scripts": {
+    "build": "tsc -b",
+    "clean": "tsc -b --clean",
+    "test": "vitest run --config vitest.config.ts",
+    "test:watch": "vitest --watch --config vitest.config.ts",
+    "prepack": "npm run clean && npm run clean:dist && npm run build",
+    "clean:dist": "tsx ../../scripts/clean-package-dist.ts"
+  },
+  "dependencies": {
+    "@flighthq/types": "0.5.1-edge.685.f72fc7f"
+  },
+  "devDependencies": {
+    "typescript": "^5.3.0"
+  },
+  "description": "Server and CI content-addressed pass-through asset publisher with canonical manifests",
+  "sideEffects": false
+}

package/src/pipelineBuild.test.ts

@@ -0,0 +1,187 @@
+import { createHash } from 'node:crypto';
+import { access, mkdir, mkdtemp, readFile, rm, utimes, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { dirname, join } from 'node:path';
+
+import { buildToolPipeline } from './pipelineBuild';
+
+const roots: string[] = [];
+
+afterEach(async () => {
+  await Promise.all(roots.splice(0).map((root) => rm(root, { force: true, recursive: true })));
+});
+
+describe('buildToolPipeline', () => {
+  it('publishes exact source bytes at their full SHA-256 URL with a canonical manifest', async () => {
+    const root = await createRoot();
+    const bytes = new Uint8Array([0, 1, 2, 255]);
+    const configPath = await writeConfig(root, {
+      assets: [{ groups: ['boot'], id: 'hero', source: 'images/hero.PNG', type: 'image' }],
+      schemaVersion: 1,
+    });
+    await writeBytes(join(root, 'images', 'hero.PNG'), bytes);
+    const outputDirectory = join(root, 'out');
+
+    const result = await buildToolPipeline({ configPath, outputDirectory });
+
+    const contentHash = `sha256-${sha256(bytes)}`;
+    const assetUrl = `assets/${contentHash}.png`;
+    const expectedManifest = {
+      assets: [{ byteLength: 4, contentHash, groups: ['boot'], id: 'hero', type: 'image', url: assetUrl }],
+      schemaVersion: 1,
+    };
+    const expectedText = `${JSON.stringify(expectedManifest, null, 2)}\n`;
+    expect(result).toEqual({
+      manifest: expectedManifest,
+      manifestHash: `sha256-${sha256(expectedText)}`,
+      outputFiles: ['asset-manifest.json', assetUrl],
+    });
+    expect(await readFile(join(outputDirectory, assetUrl))).toEqual(Buffer.from(bytes));
+    expect(await readFile(join(outputDirectory, 'asset-manifest.json'), 'utf8')).toBe(expectedText);
+  });
+
+  it('is byte-identical across config order, group order, roots, and mtimes with explicit code-unit sorting', async () => {
+    const first = await createDeterminismFixture(false, new Date(1_000));
+    const second = await createDeterminismFixture(true, new Date(9_000_000));
+
+    const firstResult = await buildToolPipeline(first);
+    const secondResult = await buildToolPipeline(second);
+    expect(firstResult).toEqual(secondResult);
+    expect(firstResult.manifest.assets.map((asset) => asset.id)).toEqual(['Z', 'a', 'ä']);
+    expect(firstResult.manifest.assets.find((asset) => asset.id === 'a')?.groups).toEqual(['alpha', 'zeta']);
+    expect(await readFile(join(first.outputDirectory, 'asset-manifest.json'))).toEqual(
+      await readFile(join(second.outputDirectory, 'asset-manifest.json')),
+    );
+    for (const file of firstResult.outputFiles.filter((path) => path !== 'asset-manifest.json')) {
+      expect(await readFile(join(first.outputDirectory, file))).toEqual(
+        await readFile(join(second.outputDirectory, file)),
+      );
+    }
+  });
+
+  it('changes only the affected artifact identity and manifest hash when one source byte changes', async () => {
+    const first = await createChangeFixture(2);
+    const second = await createChangeFixture(3);
+    const firstResult = await buildToolPipeline(first);
+    const secondResult = await buildToolPipeline(second);
+    const firstStable = firstResult.manifest.assets.find((asset) => asset.id === 'stable');
+    const secondStable = secondResult.manifest.assets.find((asset) => asset.id === 'stable');
+    const firstChanged = firstResult.manifest.assets.find((asset) => asset.id === 'changed');
+    const secondChanged = secondResult.manifest.assets.find((asset) => asset.id === 'changed');
+
+    expect(firstStable).toEqual(secondStable);
+    expect(firstChanged?.url).not.toBe(secondChanged?.url);
+    expect(firstChanged?.contentHash).not.toBe(secondChanged?.contentHash);
+    expect(firstResult.manifestHash).not.toBe(secondResult.manifestHash);
+  });
+
+  it('deduplicates equal bytes with equal normalized extensions while retaining both manifest IDs', async () => {
+    const root = await createRoot();
+    const bytes = new Uint8Array([4, 5, 6]);
+    const configPath = await writeConfig(root, {
+      assets: [
+        { id: 'first', source: 'first.png', type: 'image' },
+        { id: 'second', source: 'second.PNG', type: 'image' },
+      ],
+      schemaVersion: 1,
+    });
+    await writeBytes(join(root, 'first.png'), bytes);
+    await writeBytes(join(root, 'second.PNG'), bytes);
+
+    const result = await buildToolPipeline({ configPath, outputDirectory: join(root, 'out') });
+
+    expect(result.manifest.assets).toHaveLength(2);
+    expect(result.manifest.assets[0]?.url).toBe(result.manifest.assets[1]?.url);
+    expect(result.outputFiles).toHaveLength(2);
+  });
+
+  it('does not publish an output directory when a later source cannot be read', async () => {
+    const root = await createRoot();
+    const configPath = await writeConfig(root, {
+      assets: [
+        { id: 'first', source: 'first.bin', type: 'data' },
+        { id: 'missing', source: 'missing.bin', type: 'data' },
+      ],
+      schemaVersion: 1,
+    });
+    await writeBytes(join(root, 'first.bin'), new Uint8Array([1]));
+    const outputDirectory = join(root, 'out');
+
+    await expect(buildToolPipeline({ configPath, outputDirectory })).rejects.toThrow('missing.bin');
+    await expect(access(outputDirectory)).rejects.toThrow();
+  });
+
+  it('rejects an existing output directory without changing it', async () => {
+    const root = await createRoot();
+    const configPath = await writeConfig(root, {
+      assets: [{ id: 'asset', source: 'asset.bin', type: 'data' }],
+      schemaVersion: 1,
+    });
+    await writeBytes(join(root, 'asset.bin'), new Uint8Array([1]));
+    const outputDirectory = join(root, 'out');
+    await mkdir(outputDirectory);
+    await writeFile(join(outputDirectory, 'sentinel.txt'), 'keep');
+
+    await expect(buildToolPipeline({ configPath, outputDirectory })).rejects.toThrow('output directory already exists');
+    expect(await readFile(join(outputDirectory, 'sentinel.txt'), 'utf8')).toBe('keep');
+    await expect(access(join(outputDirectory, 'asset-manifest.json'))).rejects.toThrow();
+  });
+});
+
+async function createChangeFixture(changedByte: number): Promise<{ configPath: string; outputDirectory: string }> {
+  const root = await createRoot();
+  const configPath = await writeConfig(root, {
+    assets: [
+      { id: 'stable', source: 'stable.bin', type: 'data' },
+      { id: 'changed', source: 'changed.bin', type: 'data' },
+    ],
+    schemaVersion: 1,
+  });
+  await writeBytes(join(root, 'stable.bin'), new Uint8Array([1]));
+  await writeBytes(join(root, 'changed.bin'), new Uint8Array([changedByte]));
+  return { configPath, outputDirectory: join(root, 'out') };
+}
+
+async function createDeterminismFixture(
+  reverse: boolean,
+  mtime: Date,
+): Promise<{ configPath: string; outputDirectory: string }> {
+  const root = await createRoot();
+  const assets = [
+    { id: 'ä', source: 'images/umlaut.PNG', type: 'image' },
+    { groups: reverse ? ['alpha', 'zeta'] : ['zeta', 'alpha', 'zeta'], id: 'a', source: 'data/a.bin', type: 'data' },
+    { id: 'Z', source: 'data/z.bin', type: 'data' },
+  ];
+  const configPath = await writeConfig(root, { assets: reverse ? [...assets].reverse() : assets, schemaVersion: 1 });
+  for (const [source, bytes] of [
+    ['images/umlaut.PNG', new Uint8Array([9, 8, 7])],
+    ['data/a.bin', new Uint8Array([1, 2])],
+    ['data/z.bin', new Uint8Array([3, 4])],
+  ] as const) {
+    const path = join(root, ...source.split('/'));
+    await writeBytes(path, bytes);
+    await utimes(path, mtime, mtime);
+  }
+  return { configPath, outputDirectory: join(root, 'out') };
+}
+
+async function createRoot(): Promise<string> {
+  const root = await mkdtemp(join(tmpdir(), 'flight-tool-pipeline-'));
+  roots.push(root);
+  return root;
+}
+
+function sha256(value: string | Readonly<Uint8Array>): string {
+  return createHash('sha256').update(value).digest('hex');
+}
+
+async function writeBytes(path: string, bytes: Readonly<Uint8Array>): Promise<void> {
+  await mkdir(dirname(path), { recursive: true });
+  await writeFile(path, bytes);
+}
+
+async function writeConfig(root: string, config: unknown): Promise<string> {
+  const path = join(root, 'tool-pipeline.json');
+  await writeFile(path, JSON.stringify(config));
+  return path;
+}

package/src/pipelineConfig.test.ts

@@ -0,0 +1,81 @@
+import { parseToolPipelineConfig } from './pipelineConfig';
+
+describe('parseToolPipelineConfig', () => {
+  it('accepts the strict version-1 shape and normalizes groups without reordering assets', () => {
+    const config = parseToolPipelineConfig(
+      JSON.stringify({
+        assets: [
+          { groups: ['z', 'a', 'z'], id: 'second', source: 'images/hero.PNG', type: 'image' },
+          { id: 'first', source: 'data/scene.bin', type: 'scene' },
+        ],
+        schemaVersion: 1,
+      }),
+      'fixture.json',
+    );
+
+    expect(config).toEqual({
+      assets: [
+        { groups: ['a', 'z'], id: 'second', source: 'images/hero.PNG', type: 'image' },
+        { id: 'first', source: 'data/scene.bin', type: 'scene' },
+      ],
+      schemaVersion: 1,
+    });
+  });
+
+  it('rejects missing or unsupported schema versions and unknown fields', () => {
+    expect(() => parseToolPipelineConfig('{"assets":[]}', 'missing.json')).toThrow(
+      'missing.json: schemaVersion must equal 1',
+    );
+    expect(() => parseToolPipelineConfig('{"assets":[],"schemaVersion":2}', 'newer.json')).toThrow(
+      'newer.json: schemaVersion must equal 1',
+    );
+    expect(() => parseToolPipelineConfig('{"assets":[],"schemaVersion":1,"watch":true}', 'unknown.json')).toThrow(
+      'unknown.json: unknown field "watch"',
+    );
+    expect(() =>
+      parseToolPipelineConfig(
+        '{"assets":[{"id":"a","source":"a.bin","transform":"copy","type":"data"}],"schemaVersion":1}',
+        'asset-unknown.json',
+      ),
+    ).toThrow('asset-unknown.json: assets[0]: unknown field "transform"');
+  });
+
+  it.each(['/absolute.png', '../escape.png', './local.png', 'nested//file.png', 'nested\\file.png', 'C:/file.png'])(
+    'rejects non-portable source path %s',
+    (source) => {
+      expect(() =>
+        parseToolPipelineConfig(
+          JSON.stringify({ assets: [{ id: 'asset', source, type: 'image' }], schemaVersion: 1 }),
+          'paths.json',
+        ),
+      ).toThrow('paths.json: assets[0].source must be a portable relative path');
+    },
+  );
+
+  it('rejects duplicate IDs and empty scalar/group values', () => {
+    expect(() =>
+      parseToolPipelineConfig(
+        JSON.stringify({
+          assets: [
+            { id: 'same', source: 'a.bin', type: 'data' },
+            { id: 'same', source: 'b.bin', type: 'data' },
+          ],
+          schemaVersion: 1,
+        }),
+        'duplicates.json',
+      ),
+    ).toThrow('duplicates.json: duplicate asset id "same"');
+    expect(() =>
+      parseToolPipelineConfig(
+        JSON.stringify({ assets: [{ groups: [''], id: 'asset', source: 'a.bin', type: 'data' }], schemaVersion: 1 }),
+        'groups.json',
+      ),
+    ).toThrow('groups.json: assets[0].groups must contain non-empty strings');
+    expect(() =>
+      parseToolPipelineConfig(
+        JSON.stringify({ assets: [{ id: '', source: 'a.bin', type: 'data' }], schemaVersion: 1 }),
+        'id.json',
+      ),
+    ).toThrow('id.json: assets[0].id must be a non-empty string');
+  });
+});

package/src/pipelineTool.test.ts

@@ -0,0 +1,79 @@
+import { createHash } from 'node:crypto';
+import { mkdir, mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+
+import { runToolPipeline } from './pipelineTool';
+
+const roots: string[] = [];
+
+afterEach(async () => {
+  await Promise.all(roots.splice(0).map((root) => rm(root, { force: true, recursive: true })));
+});
+
+describe('runToolPipeline', () => {
+  it('prints help successfully and rejects unknown commands at the thin CLI boundary', async () => {
+    await expect(run(['--help'])).resolves.toEqual({
+      errors: [],
+      exitCode: 0,
+      output: ['Usage: tool-pipeline build --config <file> --out <new-directory>\n'],
+    });
+    await expect(run(['transform'])).resolves.toEqual({
+      errors: ['Usage: tool-pipeline build --config <file> --out <new-directory>\n'],
+      exitCode: 1,
+      output: [],
+    });
+  });
+
+  it('builds from explicit paths and prints only the deterministic manifest identity', async () => {
+    const root = await createRoot();
+    const configPath = join(root, 'tool-pipeline.json');
+    const outputDirectory = join(root, 'out');
+    await writeFile(join(root, 'asset.bin'), new Uint8Array([1, 2, 3]));
+    await writeFile(
+      configPath,
+      JSON.stringify({ assets: [{ id: 'asset', source: 'asset.bin', type: 'data' }], schemaVersion: 1 }),
+    );
+
+    const result = await run(['build', '--config', configPath, '--out', outputDirectory]);
+    const manifest = await readFile(join(outputDirectory, 'asset-manifest.json'));
+
+    expect(result).toEqual({
+      errors: [],
+      exitCode: 0,
+      output: [`sha256-${createHash('sha256').update(manifest).digest('hex')}  asset-manifest.json\n`],
+    });
+  });
+
+  it('reports config/build failures without publishing a manifest or printing a stack', async () => {
+    const root = await createRoot();
+    const configPath = join(root, 'tool-pipeline.json');
+    const outputDirectory = join(root, 'out');
+    await writeFile(configPath, '{"assets":[],"schemaVersion":2}');
+
+    const result = await run(['build', '--config', configPath, '--out', outputDirectory]);
+
+    expect(result.exitCode).toBe(1);
+    expect(result.output).toEqual([]);
+    expect(result.errors.join('')).toContain('schemaVersion must equal 1');
+    expect(result.errors.join('')).not.toContain('\n    at ');
+    await expect(readFile(join(outputDirectory, 'asset-manifest.json'))).rejects.toThrow();
+  });
+});
+
+async function createRoot(): Promise<string> {
+  const root = await mkdtemp(join(tmpdir(), 'flight-tool-pipeline-cli-'));
+  roots.push(root);
+  await mkdir(root, { recursive: true });
+  return root;
+}
+
+async function run(args: readonly string[]): Promise<{ errors: string[]; exitCode: number; output: string[] }> {
+  const errors: string[] = [];
+  const output: string[] = [];
+  const exitCode = await runToolPipeline(args, {
+    writeError: (message) => errors.push(message),
+    writeOutput: (message) => output.push(message),
+  });
+  return { errors, exitCode, output };
+}