@illumiarq/lumis 1.2.7 → 1.2.9

package/dist/runtime/executor.js

@@ -0,0 +1,180 @@
+import { spawn } from 'node:child_process';
+import { redactRuntimeProfileForLogs } from './profiles.js';
+function nowIso() {
+    return new Date().toISOString();
+}
+function shouldRedactEnvKey(key) {
+    return /token|secret|password|key/i.test(key);
+}
+function collectSensitiveValues(request) {
+    const values = new Set();
+    const processEnv = request.processEnv ?? process.env;
+    for (const [key, value] of Object.entries(request.env ?? {})) {
+        if (value && shouldRedactEnvKey(key)) {
+            values.add(value);
+        }
+    }
+    if (request.profile.kind === 'ssh') {
+        const sshProfile = request.profile;
+        if (sshProfile.privateKeyEnvVar) {
+            const keyValue = processEnv[sshProfile.privateKeyEnvVar];
+            if (keyValue) {
+                values.add(keyValue);
+            }
+        }
+        if (sshProfile.passwordEnvVar) {
+            const passwordValue = processEnv[sshProfile.passwordEnvVar];
+            if (passwordValue) {
+                values.add(passwordValue);
+            }
+        }
+    }
+    return Array.from(values);
+}
+function redactText(text, sensitiveValues) {
+    let redacted = text;
+    for (const value of sensitiveValues) {
+        if (!value) {
+            continue;
+        }
+        redacted = redacted.split(value).join('[REDACTED]');
+    }
+    return redacted;
+}
+function quoteArg(arg) {
+    if (/^[A-Za-z0-9_./:-]+$/.test(arg)) {
+        return arg;
+    }
+    return `'${arg.replace(/'/g, `'\\''`)}'`;
+}
+function buildSshArgs(profile, request) {
+    const processEnv = request.processEnv ?? process.env;
+    const args = [];
+    if (profile.port !== undefined) {
+        args.push('-p', String(profile.port));
+    }
+    if (profile.knownHostsPath) {
+        args.push('-o', `UserKnownHostsFile=${profile.knownHostsPath}`);
+    }
+    if (profile.privateKeyEnvVar) {
+        const privateKeyPath = processEnv[profile.privateKeyEnvVar];
+        if (!privateKeyPath) {
+            return { ok: false, error: `Missing SSH private key env var: ${profile.privateKeyEnvVar}` };
+        }
+        args.push('-i', privateKeyPath);
+    }
+    if (profile.passwordEnvVar && !processEnv[profile.passwordEnvVar]) {
+        return { ok: false, error: `Missing SSH password env var: ${profile.passwordEnvVar}` };
+    }
+    args.push(`${profile.user}@${profile.host}`);
+    const remoteTokens = [request.command, ...(request.args ?? [])].map((token) => quoteArg(token));
+    if (request.cwd && request.cwd.trim().length > 0) {
+        remoteTokens.unshift('&&');
+        remoteTokens.unshift(quoteArg(request.cwd));
+        remoteTokens.unshift('cd');
+    }
+    args.push(remoteTokens.join(' '));
+    return { ok: true, args };
+}
+function createResultSkeleton(request) {
+    const startedAt = nowIso();
+    return {
+        profileId: request.profile.id,
+        profileKind: request.profile.kind,
+        command: request.command,
+        args: request.args ?? [],
+        success: false,
+        exitCode: null,
+        startedAt,
+        endedAt: startedAt,
+        durationMs: 0,
+        transcript: [],
+        stdout: '',
+        stderr: '',
+        redactedProfile: redactRuntimeProfileForLogs(request.profile),
+        diagnostics: [],
+    };
+}
+export async function executeOnRuntimeProfile(request) {
+    const result = createResultSkeleton(request);
+    const startedAtMs = Date.now();
+    const sensitiveValues = collectSensitiveValues(request);
+    const writeTranscript = (stream, text) => {
+        const redacted = redactText(text, sensitiveValues);
+        if (!redacted) {
+            return;
+        }
+        result.transcript.push({
+            stream,
+            text: redacted,
+            timestamp: nowIso(),
+        });
+        if (stream === 'stdout') {
+            result.stdout += redacted;
+        }
+        if (stream === 'stderr' || stream === 'system') {
+            result.stderr += redacted;
+        }
+    };
+    const env = {
+        ...(request.processEnv ?? process.env),
+        ...(request.env ?? {}),
+    };
+    let executable = request.command;
+    let executableArgs = request.args ?? [];
+    if (request.profile.kind === 'ssh') {
+        executable = 'ssh';
+        const sshArgs = buildSshArgs(request.profile, request);
+        if (!sshArgs.ok) {
+            result.diagnostics.push(sshArgs.error);
+            writeTranscript('system', `${sshArgs.error}\n`);
+            result.endedAt = nowIso();
+            result.durationMs = Date.now() - startedAtMs;
+            return result;
+        }
+        executableArgs = sshArgs.args;
+    }
+    try {
+        const child = spawn(executable, executableArgs, {
+            cwd: request.cwd,
+            env,
+            shell: false,
+        });
+        let timedOut = false;
+        let timeoutHandle;
+        if (request.timeoutMs && request.timeoutMs > 0) {
+            timeoutHandle = setTimeout(() => {
+                timedOut = true;
+                child.kill('SIGTERM');
+            }, request.timeoutMs);
+        }
+        child.stdout.on('data', (chunk) => {
+            writeTranscript('stdout', String(chunk));
+        });
+        child.stderr.on('data', (chunk) => {
+            writeTranscript('stderr', String(chunk));
+        });
+        const exitCode = await new Promise((resolve, reject) => {
+            child.on('error', reject);
+            child.on('close', (code) => resolve(code));
+        });
+        if (timeoutHandle) {
+            clearTimeout(timeoutHandle);
+        }
+        if (timedOut) {
+            result.diagnostics.push(`Execution timed out after ${request.timeoutMs}ms`);
+        }
+        result.exitCode = exitCode;
+        result.success = exitCode === 0 && !timedOut;
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        result.diagnostics.push(message);
+        writeTranscript('system', `${message}\n`);
+        result.success = false;
+    }
+    result.endedAt = nowIso();
+    result.durationMs = Date.now() - startedAtMs;
+    return result;
+}
+//# sourceMappingURL=executor.js.map

package/dist/runtime/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../src/runtime/executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAI1C,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAA;AAmC3D,SAAS,MAAM;IACd,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;AAChC,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW;IACtC,OAAO,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAC9C,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAgC;IAC/D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAA;IAChC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAA;IAEpD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9D,IAAI,KAAK,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAClB,CAAC;IACF,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAA;QAClC,IAAI,UAAU,CAAC,gBAAgB,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAA;YACxD,IAAI,QAAQ,EAAE,CAAC;gBACd,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YACrB,CAAC;QACF,CAAC;QAED,IAAI,UAAU,CAAC,cAAc,EAAE,CAAC;YAC/B,MAAM,aAAa,GAAG,UAAU,CAAC,UAAU,CAAC,cAAc,CAAC,CAAA;YAC3D,IAAI,aAAa,EAAE,CAAC;gBACnB,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;YAC1B,CAAC;QACF,CAAC;IACF,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AAC1B,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,eAAyB;IAC1D,IAAI,QAAQ,GAAG,IAAI,CAAA;IACnB,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,SAAQ;QACT,CAAC;QACD,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IACpD,CAAC;IACD,OAAO,QAAQ,CAAA;AAChB,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC5B,IAAI,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,OAAO,GAAG,CAAA;IACX,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAA;AACzC,CAAC;AAED,SAAS,YAAY,CAAC,OAA0B,EAAE,OAAgC;IACjF,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAA;IACpD,MAAM,IAAI,GAAa,EAAE,CAAA;IAEzB,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IACtC,CAAC;IAED,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;IAChE,CAAC;IAED,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC9B,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;QAC3D,IAAI,CAAC,cAAc,EAAE,CAAC;YACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAA;QAC5F,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAA;IAChC,CAAC;IAED,IAAI,OAAO,CAAC,cAAc,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAA;IACvF,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;IAE5C,MAAM,YAAY,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;IAC/F,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC1B,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;QAC3C,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IAEjC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AAC1B,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAgC;IAC7D,MAAM,SAAS,GAAG,MAAM,EAAE,CAAA;IAC1B,OAAO;QACN,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;QAC7B,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI;QACjC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;QACxB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,IAAI;QACd,SAAS;QACT,OAAO,EAAE,SAAS;QAClB,UAAU,EAAE,CAAC;QACb,UAAU,EAAE,EAAE;QACd,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,EAAE;QACV,eAAe,EAAE,2BAA2B,CAAC,OAAO,CAAC,OAAO,CAAC;QAC7D,WAAW,EAAE,EAAE;KACf,CAAA;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAgC;IAC7E,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAA;IAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAC9B,MAAM,eAAe,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAA;IAEvD,MAAM,eAAe,GAAG,CAAC,MAAwC,EAAE,IAAY,EAAQ,EAAE;QACxF,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;QAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,OAAM;QACP,CAAC;QACD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;YACtB,MAAM;YACN,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,MAAM,EAAE;SACnB,CAAC,CAAA;QACF,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzB,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAA;QAC1B,CAAC;QACD,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAA;QAC1B,CAAC;IACF,CAAC,CAAA;IAED,MAAM,GAAG,GAAG;QACX,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC;QACtC,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;KACtB,CAAA;IAED,IAAI,UAAU,GAAG,OAAO,CAAC,OAAO,CAAA;IAChC,IAAI,cAAc,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAA;IAEvC,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACpC,UAAU,GAAG,KAAK,CAAA;QAClB,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACtD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YACtC,eAAe,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAA;YAC/C,MAAM,CAAC,OAAO,GAAG,MAAM,EAAE,CAAA;YACzB,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAA;YAC5C,OAAO,MAAM,CAAA;QACd,CAAC;QACD,cAAc,GAAG,OAAO,CAAC,IAAI,CAAA;IAC9B,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,cAAc,EAAE;YAC/C,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG;YACH,KAAK,EAAE,KAAK;SACZ,CAAC,CAAA;QAEF,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,IAAI,aAAyC,CAAA;QAC7C,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;YAChD,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC/B,QAAQ,GAAG,IAAI,CAAA;gBACf,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACtB,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;QACtB,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACjC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QACzC,CAAC,CAAC,CAAA;QAEF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACjC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QACzC,CAAC,CAAC,CAAA;QAEF,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YACzB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QAC3C,CAAC,CAAC,CAAA;QAEF,IAAI,aAAa,EAAE,CAAC;YACnB,YAAY,CAAC,aAAa,CAAC,CAAA;QAC5B,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,6BAA6B,OAAO,CAAC,SAAS,IAAI,CAAC,CAAA;QAC5E,CAAC;QAED,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAA;QAC1B,MAAM,CAAC,OAAO,GAAG,QAAQ,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAA;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAChC,eAAe,CAAC,QAAQ,EAAE,GAAG,OAAO,IAAI,CAAC,CAAA;QACzC,MAAM,CAAC,OAAO,GAAG,KAAK,CAAA;IACvB,CAAC;IAED,MAAM,CAAC,OAAO,GAAG,MAAM,EAAE,CAAA;IACzB,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAA;IAC5C,OAAO,MAAM,CAAA;AACd,CAAC"}

package/dist/runtime/orchestration.d.ts

@@ -0,0 +1,43 @@
+import type { LumisAdapter } from '@lumiarq/context';
+import type { LumisTraceListener } from '../tracing/types.js';
+import type { LumisConfig } from '../config-loader.js';
+import { executeOnRuntimeProfile } from './executor.js';
+export type RuntimeTaskName = 'typecheck' | 'lint' | 'boundaryCheck' | 'build' | 'test';
+export type RuntimeTaskExecution = {
+    task: RuntimeTaskName;
+    command: string;
+    result: Awaited<ReturnType<typeof executeOnRuntimeProfile>>;
+    transcriptPath: string;
+};
+export type RuntimeOrchestrationResult = {
+    enabled: boolean;
+    profileId?: string;
+    profileKind?: string;
+    steps: RuntimeTaskExecution[];
+    success: boolean;
+    errors: string[];
+};
+export declare function executeRuntimeTasks(input: {
+    projectRoot: string;
+    adapter: LumisAdapter;
+    config: LumisConfig;
+    write: (message: string) => void;
+    writeError: (message: string) => void;
+    enabled: boolean;
+    profileId?: string;
+    requestedTasks?: RuntimeTaskName[];
+    failOnTaskError?: boolean;
+    approveRemote?: boolean;
+    labelPrefix?: string;
+    processEnv?: NodeJS.ProcessEnv;
+    onTrace?: LumisTraceListener;
+}): Promise<RuntimeOrchestrationResult>;
+export declare function runPostMakeRuntimeTasks(input: {
+    projectRoot: string;
+    adapter: LumisAdapter;
+    config: LumisConfig;
+    write: (message: string) => void;
+    writeError: (message: string) => void;
+    onTrace?: LumisTraceListener;
+}): Promise<RuntimeOrchestrationResult>;
+//# sourceMappingURL=orchestration.d.ts.map

package/dist/runtime/orchestration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestration.d.ts","sourceRoot":"","sources":["../../src/runtime/orchestration.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAE7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AAKvD,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG,MAAM,GAAG,eAAe,GAAG,OAAO,GAAG,MAAM,CAAA;AAEvF,MAAM,MAAM,oBAAoB,GAAG;IAClC,IAAI,EAAE,eAAe,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC,CAAA;IAC3D,cAAc,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,0BAA0B,GAAG;IACxC,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,EAAE,oBAAoB,EAAE,CAAA;IAC7B,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,MAAM,EAAE,CAAA;CAChB,CAAA;AAoCD,wBAAsB,mBAAmB,CAAC,KAAK,EAAE;IAChD,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,YAAY,CAAA;IACrB,MAAM,EAAE,WAAW,CAAA;IACnB,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IAChC,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IACrC,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,cAAc,CAAC,EAAE,eAAe,EAAE,CAAA;IAClC,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;IAC9B,OAAO,CAAC,EAAE,kBAAkB,CAAA;CAC5B,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAiLtC;AAED,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACpD,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,YAAY,CAAA;IACrB,MAAM,EAAE,WAAW,CAAA;IACnB,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IAChC,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IACrC,OAAO,CAAC,EAAE,kBAAkB,CAAA;CAC5B,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAWtC"}

package/dist/runtime/orchestration.js

@@ -0,0 +1,209 @@
+import path from 'node:path';
+import { executeOnRuntimeProfile } from './executor.js';
+import { evaluateRuntimePolicy } from './policy.js';
+import { getRuntimeProfile, loadRuntimeProfileStore } from './profiles.js';
+import { persistRuntimeTranscript } from './transcripts.js';
+function resolveRuntimeTasks(config, adapter) {
+    const requestedTasks = config.runtime?.postMakeTasks ?? ['typecheck', 'boundaryCheck'];
+    const resolved = [];
+    for (const task of requestedTasks) {
+        const override = config.runtime?.taskCommandOverrides?.[task];
+        const command = override ?? adapter.buildCommands[task];
+        if (typeof command === 'string' && command.trim().length > 0) {
+            resolved.push({ task, command: command.trim() });
+        }
+    }
+    return resolved;
+}
+function resolveRuntimeTasksWithSelection(config, adapter, requestedTasks) {
+    if (!requestedTasks || requestedTasks.length === 0) {
+        return resolveRuntimeTasks(config, adapter);
+    }
+    return requestedTasks
+        .map((task) => {
+        const override = config.runtime?.taskCommandOverrides?.[task];
+        const command = override ?? adapter.buildCommands[task];
+        if (!command || command.trim().length === 0) {
+            return null;
+        }
+        return { task, command: command.trim() };
+    })
+        .filter((entry) => entry !== null);
+}
+export async function executeRuntimeTasks(input) {
+    const emitTrace = async (event) => {
+        if (!input.onTrace)
+            return;
+        await input.onTrace(event);
+    };
+    await emitTrace({
+        type: 'runtime-task',
+        status: 'start',
+        name: 'runtime-orchestration',
+        context: { enabled: input.enabled },
+    });
+    if (!input.enabled) {
+        await emitTrace({
+            type: 'runtime-task',
+            status: 'info',
+            name: 'runtime-disabled',
+        });
+        return {
+            enabled: false,
+            steps: [],
+            success: true,
+            errors: [],
+        };
+    }
+    const store = loadRuntimeProfileStore(input.projectRoot);
+    const profile = getRuntimeProfile(store, input.profileId ?? input.config.runtime?.profileId);
+    if (!profile) {
+        const error = 'Runtime profile not found. Configure runtime.profileId or defaultProfileId in .lumis/runtime-profiles.json.';
+        await emitTrace({
+            type: 'runtime-task',
+            status: 'failure',
+            name: 'runtime-profile-not-found',
+            message: error,
+        });
+        input.writeError(`${error}\n`);
+        return {
+            enabled: true,
+            steps: [],
+            success: false,
+            errors: [error],
+        };
+    }
+    const policyDecision = evaluateRuntimePolicy({
+        profile,
+        config: input.config,
+        ...(typeof input.approveRemote === 'boolean'
+            ? { approveRemote: input.approveRemote }
+            : {}),
+        ...(input.processEnv ? { processEnv: input.processEnv } : {}),
+    });
+    if (!policyDecision.allowExecution) {
+        const blockingReason = policyDecision.blockingReason ?? 'Runtime policy blocked execution.';
+        await emitTrace({
+            type: 'runtime-task',
+            status: 'failure',
+            name: 'runtime-policy-blocked',
+            message: blockingReason,
+            context: { profileId: profile.id, policyMode: policyDecision.mode },
+        });
+        input.writeError(`${blockingReason}\n`);
+        return {
+            enabled: true,
+            profileId: profile.id,
+            profileKind: profile.kind,
+            steps: [],
+            success: false,
+            errors: [blockingReason],
+        };
+    }
+    if (policyDecision.requiresApproval && policyDecision.approved) {
+        input.write('Runtime policy: remote execution approved.\n');
+    }
+    const commands = resolveRuntimeTasksWithSelection(input.config, input.adapter, input.requestedTasks);
+    if (commands.length === 0) {
+        await emitTrace({
+            type: 'runtime-task',
+            status: 'info',
+            name: 'runtime-no-tasks',
+            context: { profileId: profile.id },
+        });
+        input.write('Runtime orchestration enabled, but no buildCommands matched configured tasks.\n');
+        return {
+            enabled: true,
+            profileId: profile.id,
+            profileKind: profile.kind,
+            steps: [],
+            success: true,
+            errors: [],
+        };
+    }
+    input.write(`Runtime profile: ${profile.name} (${profile.kind})\n`);
+    const steps = [];
+    const errors = [];
+    const failOnTaskError = input.failOnTaskError ?? input.config.runtime?.failOnTaskError !== false;
+    const labelPrefix = input.labelPrefix ?? 'runtime';
+    for (const runtimeTask of commands) {
+        await emitTrace({
+            type: 'runtime-task',
+            status: 'start',
+            name: runtimeTask.task,
+            context: { command: runtimeTask.command, profileId: profile.id },
+        });
+        input.write(`Runtime task [${runtimeTask.task}]: ${runtimeTask.command}\n`);
+        const result = await executeOnRuntimeProfile({
+            profile,
+            command: process.platform === 'win32' ? 'cmd' : 'sh',
+            args: process.platform === 'win32' ? ['/c', runtimeTask.command] : ['-lc', runtimeTask.command],
+            cwd: input.projectRoot,
+        });
+        const transcriptPath = persistRuntimeTranscript(input.projectRoot, `${labelPrefix}-${runtimeTask.task}`, result);
+        const relativePath = path.relative(input.projectRoot, transcriptPath);
+        steps.push({
+            task: runtimeTask.task,
+            command: runtimeTask.command,
+            result,
+            transcriptPath,
+        });
+        if (result.success) {
+            await emitTrace({
+                type: 'runtime-task',
+                status: 'success',
+                name: runtimeTask.task,
+                context: { transcriptPath: relativePath },
+            });
+            input.write(`  [ok] ${runtimeTask.task} (transcript: ${relativePath})\n`);
+            continue;
+        }
+        const error = `${runtimeTask.task} failed with exit code ${result.exitCode ?? 'null'}`;
+        errors.push(error);
+        await emitTrace({
+            type: 'runtime-task',
+            status: 'failure',
+            name: runtimeTask.task,
+            message: error,
+            context: { transcriptPath: relativePath },
+        });
+        input.writeError(`  [fail] ${error} (transcript: ${relativePath})\n`);
+        for (const diagnostic of result.diagnostics) {
+            input.writeError(`  [diag] ${diagnostic}\n`);
+        }
+        if (failOnTaskError) {
+            break;
+        }
+    }
+    const advisoryMode = policyDecision.mode === 'advisory';
+    if (advisoryMode && errors.length > 0) {
+        input.writeError('Runtime policy mode is advisory: task failures recorded but execution continues.\n');
+    }
+    await emitTrace({
+        type: 'runtime-task',
+        status: errors.length === 0 || advisoryMode ? 'success' : 'failure',
+        name: 'runtime-orchestration-complete',
+        context: { errors: errors.length, advisoryMode, profileId: profile.id },
+    });
+    return {
+        enabled: true,
+        profileId: profile.id,
+        profileKind: profile.kind,
+        steps,
+        success: advisoryMode ? true : errors.length === 0,
+        errors,
+    };
+}
+export async function runPostMakeRuntimeTasks(input) {
+    return executeRuntimeTasks({
+        projectRoot: input.projectRoot,
+        adapter: input.adapter,
+        config: input.config,
+        write: input.write,
+        writeError: input.writeError,
+        ...(input.onTrace ? { onTrace: input.onTrace } : {}),
+        enabled: input.config.runtime?.enabled === true,
+        labelPrefix: 'make',
+    });
+}
+//# sourceMappingURL=orchestration.js.map

package/dist/runtime/orchestration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestration.js","sourceRoot":"","sources":["../../src/runtime/orchestration.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAA;AAM5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAA;AAoB3D,SAAS,mBAAmB,CAAC,MAAmB,EAAE,OAAqB;IACtE,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,EAAE,aAAa,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAA;IACtF,MAAM,QAAQ,GAAsD,EAAE,CAAA;IACtE,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,EAAE,oBAAoB,EAAE,CAAC,IAAI,CAAC,CAAA;QAC7D,MAAM,OAAO,GAAG,QAAQ,IAAI,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;QACvD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9D,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QACjD,CAAC;IACF,CAAC;IACD,OAAO,QAAQ,CAAA;AAChB,CAAC;AAED,SAAS,gCAAgC,CACxC,MAAmB,EACnB,OAAqB,EACrB,cAA6C;IAE7C,IAAI,CAAC,cAAc,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC5C,CAAC;IAED,OAAO,cAAc;SACnB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACb,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,EAAE,oBAAoB,EAAE,CAAC,IAAI,CAAC,CAAA;QAC7D,MAAM,OAAO,GAAG,QAAQ,IAAI,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;QACvD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAA;QACZ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAA;IACzC,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,KAAK,EAAuD,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAA;AACzF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAczC;IACA,MAAM,SAAS,GAAG,KAAK,EAAE,KAAwC,EAAE,EAAE;QACpE,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,OAAM;QAC1B,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAC3B,CAAC,CAAA;IAED,MAAM,SAAS,CAAC;QACf,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;KACnC,CAAC,CAAA;IAEF,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,SAAS,CAAC;YACf,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,kBAAkB;SACxB,CAAC,CAAA;QACF,OAAO;YACN,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,EAAE;YACT,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,EAAE;SACV,CAAA;IACF,CAAC;IAED,MAAM,KAAK,GAAG,uBAAuB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;IACxD,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;IAC5F,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,6GAA6G,CAAA;QAC3H,MAAM,SAAS,CAAC;YACf,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,SAAS;YACjB,IAAI,EAAE,2BAA2B;YACjC,OAAO,EAAE,KAAK;SACd,CAAC,CAAA;QACF,KAAK,CAAC,UAAU,CAAC,GAAG,KAAK,IAAI,CAAC,CAAA;QAC9B,OAAO;YACN,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,EAAE;YACT,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,CAAC,KAAK,CAAC;SACf,CAAA;IACF,CAAC;IAED,MAAM,cAAc,GAAG,qBAAqB,CAAC;QAC5C,OAAO;QACP,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,OAAO,KAAK,CAAC,aAAa,KAAK,SAAS;YAC3C,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE;YACxC,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7D,CAAC,CAAA;IACF,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,CAAC;QACpC,MAAM,cAAc,GAAG,cAAc,CAAC,cAAc,IAAI,mCAAmC,CAAA;QAC3F,MAAM,SAAS,CAAC;YACf,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,SAAS;YACjB,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,cAAc;YACvB,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,UAAU,EAAE,cAAc,CAAC,IAAI,EAAE;SACnE,CAAC,CAAA;QACF,KAAK,CAAC,UAAU,CAAC,GAAG,cAAc,IAAI,CAAC,CAAA;QACvC,OAAO;YACN,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,WAAW,EAAE,OAAO,CAAC,IAAI;YACzB,KAAK,EAAE,EAAE;YACT,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,CAAC,cAAc,CAAC;SACxB,CAAA;IACF,CAAC;IAED,IAAI,cAAc,CAAC,gBAAgB,IAAI,cAAc,CAAC,QAAQ,EAAE,CAAC;QAChE,KAAK,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAA;IAC5D,CAAC;IAED,MAAM,QAAQ,GAAG,gCAAgC,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,cAAc,CAAC,CAAA;IACpG,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,SAAS,CAAC;YACf,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE;SAClC,CAAC,CAAA;QACF,KAAK,CAAC,KAAK,CAAC,iFAAiF,CAAC,CAAA;QAC9F,OAAO;YACN,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,WAAW,EAAE,OAAO,CAAC,IAAI;YACzB,KAAK,EAAE,EAAE;YACT,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,EAAE;SACV,CAAA;IACF,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,oBAAoB,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,KAAK,CAAC,CAAA;IAEnE,MAAM,KAAK,GAA2B,EAAE,CAAA;IACxC,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,eAAe,GAAG,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,eAAe,KAAK,KAAK,CAAA;IAChG,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,SAAS,CAAA;IAElD,KAAK,MAAM,WAAW,IAAI,QAAQ,EAAE,CAAC;QACpC,MAAM,SAAS,CAAC;YACf,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,WAAW,CAAC,IAAI;YACtB,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE;SAChE,CAAC,CAAA;QACF,KAAK,CAAC,KAAK,CAAC,iBAAiB,WAAW,CAAC,IAAI,MAAM,WAAW,CAAC,OAAO,IAAI,CAAC,CAAA;QAC3E,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC;YAC5C,OAAO;YACP,OAAO,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;YACpD,IAAI,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC;YAC/F,GAAG,EAAE,KAAK,CAAC,WAAW;SACtB,CAAC,CAAA;QACF,MAAM,cAAc,GAAG,wBAAwB,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,WAAW,IAAI,WAAW,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAA;QAChH,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,cAAc,CAAC,CAAA;QAErE,KAAK,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,WAAW,CAAC,IAAI;YACtB,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,MAAM;YACN,cAAc;SACd,CAAC,CAAA;QAEF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,SAAS,CAAC;gBACf,IAAI,EAAE,cAAc;gBACpB,MAAM,EAAE,SAAS;gBACjB,IAAI,EAAE,WAAW,CAAC,IAAI;gBACtB,OAAO,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE;aACzC,CAAC,CAAA;YACF,KAAK,CAAC,KAAK,CAAC,UAAU,WAAW,CAAC,IAAI,iBAAiB,YAAY,KAAK,CAAC,CAAA;YACzE,SAAQ;QACT,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,WAAW,CAAC,IAAI,0BAA0B,MAAM,CAAC,QAAQ,IAAI,MAAM,EAAE,CAAA;QACtF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClB,MAAM,SAAS,CAAC;YACf,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,SAAS;YACjB,IAAI,EAAE,WAAW,CAAC,IAAI;YACtB,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE;SACzC,CAAC,CAAA;QACF,KAAK,CAAC,UAAU,CAAC,YAAY,KAAK,iBAAiB,YAAY,KAAK,CAAC,CAAA;QACrE,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YAC7C,KAAK,CAAC,UAAU,CAAC,YAAY,UAAU,IAAI,CAAC,CAAA;QAC7C,CAAC;QACD,IAAI,eAAe,EAAE,CAAC;YACrB,MAAK;QACN,CAAC;IACF,CAAC;IAED,MAAM,YAAY,GAAG,cAAc,CAAC,IAAI,KAAK,UAAU,CAAA;IACvD,IAAI,YAAY,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,KAAK,CAAC,UAAU,CAAC,oFAAoF,CAAC,CAAA;IACvG,CAAC;IAED,MAAM,SAAS,CAAC;QACf,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACnE,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE;KACvE,CAAC,CAAA;IAEF,OAAO;QACN,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,WAAW,EAAE,OAAO,CAAC,IAAI;QACzB,KAAK;QACL,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAClD,MAAM;KACN,CAAA;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAO7C;IACA,OAAO,mBAAmB,CAAC;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI;QAC/C,WAAW,EAAE,MAAM;KACnB,CAAC,CAAA;AACH,CAAC"}

package/dist/runtime/policy.d.ts

@@ -0,0 +1,23 @@
+import type { RuntimeProfile } from '@lumiarq/context';
+import type { LumisConfig } from '../config-loader.js';
+export type RuntimePolicyMode = 'strict' | 'advisory';
+export type ResolvedRuntimePolicy = {
+    mode: RuntimePolicyMode;
+    requireApprovalForRemote: boolean;
+    approvalEnvVar: string;
+};
+export type RuntimePolicyDecision = {
+    mode: RuntimePolicyMode;
+    requiresApproval: boolean;
+    approved: boolean;
+    allowExecution: boolean;
+    blockingReason?: string;
+};
+export declare function resolveRuntimePolicy(config: LumisConfig): ResolvedRuntimePolicy;
+export declare function evaluateRuntimePolicy(input: {
+    profile: RuntimeProfile;
+    config: LumisConfig;
+    approveRemote?: boolean;
+    processEnv?: NodeJS.ProcessEnv;
+}): RuntimePolicyDecision;
+//# sourceMappingURL=policy.d.ts.map

package/dist/runtime/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/runtime/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAEtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAEtD,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,UAAU,CAAA;AAErD,MAAM,MAAM,qBAAqB,GAAG;IACnC,IAAI,EAAE,iBAAiB,CAAA;IACvB,wBAAwB,EAAE,OAAO,CAAA;IACjC,cAAc,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,qBAAqB,GAAG;IACnC,IAAI,EAAE,iBAAiB,CAAA;IACvB,gBAAgB,EAAE,OAAO,CAAA;IACzB,QAAQ,EAAE,OAAO,CAAA;IACjB,cAAc,EAAE,OAAO,CAAA;IACvB,cAAc,CAAC,EAAE,MAAM,CAAA;CACvB,CAAA;AAUD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,WAAW,GAAG,qBAAqB,CAU/E;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC5C,OAAO,EAAE,cAAc,CAAA;IACvB,MAAM,EAAE,WAAW,CAAA;IACnB,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAC9B,GAAG,qBAAqB,CA4BxB"}

package/dist/runtime/policy.js

@@ -0,0 +1,43 @@
+function isTruthy(value) {
+    if (!value) {
+        return false;
+    }
+    const normalized = value.trim().toLowerCase();
+    return normalized === '1' || normalized === 'true' || normalized === 'yes' || normalized === 'y';
+}
+export function resolveRuntimePolicy(config) {
+    const mode = config.runtime?.policy?.mode ?? 'strict';
+    const requireApprovalForRemote = config.runtime?.policy?.requireApprovalForRemote !== false;
+    const approvalEnvVar = config.runtime?.policy?.approvalEnvVar ?? 'LUMIS_RUNTIME_APPROVED';
+    return {
+        mode,
+        requireApprovalForRemote,
+        approvalEnvVar,
+    };
+}
+export function evaluateRuntimePolicy(input) {
+    const policy = resolveRuntimePolicy(input.config);
+    const isRemoteProfile = input.profile.kind !== 'local';
+    const requiresApproval = isRemoteProfile && policy.requireApprovalForRemote;
+    const env = input.processEnv ?? process.env;
+    const approvedByEnv = isTruthy(env[policy.approvalEnvVar]);
+    const approvedByFlag = input.approveRemote === true;
+    const approved = !requiresApproval || approvedByEnv || approvedByFlag;
+    if (!approved) {
+        return {
+            mode: policy.mode,
+            requiresApproval,
+            approved,
+            allowExecution: false,
+            blockingReason: `Runtime profile ${input.profile.id} (${input.profile.kind}) requires explicit approval. ` +
+                `Set ${policy.approvalEnvVar}=true or pass --approve-remote.`,
+        };
+    }
+    return {
+        mode: policy.mode,
+        requiresApproval,
+        approved,
+        allowExecution: true,
+    };
+}
+//# sourceMappingURL=policy.js.map

package/dist/runtime/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/runtime/policy.ts"],"names":[],"mappings":"AAoBA,SAAS,QAAQ,CAAC,KAAyB;IAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,KAAK,CAAA;IACb,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC7C,OAAO,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,GAAG,CAAA;AACjG,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAmB;IACvD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,IAAI,QAAQ,CAAA;IACrD,MAAM,wBAAwB,GAAG,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,wBAAwB,KAAK,KAAK,CAAA;IAC3F,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,IAAI,wBAAwB,CAAA;IAEzF,OAAO;QACN,IAAI;QACJ,wBAAwB;QACxB,cAAc;KACd,CAAA;AACF,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAKrC;IACA,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACjD,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAA;IACtD,MAAM,gBAAgB,GAAG,eAAe,IAAI,MAAM,CAAC,wBAAwB,CAAA;IAE3E,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAA;IAC3C,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAA;IAC1D,MAAM,cAAc,GAAG,KAAK,CAAC,aAAa,KAAK,IAAI,CAAA;IACnD,MAAM,QAAQ,GAAG,CAAC,gBAAgB,IAAI,aAAa,IAAI,cAAc,CAAA;IAErE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO;YACN,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,gBAAgB;YAChB,QAAQ;YACR,cAAc,EAAE,KAAK;YACrB,cAAc,EACb,mBAAmB,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,CAAC,IAAI,gCAAgC;gBAC1F,OAAO,MAAM,CAAC,cAAc,iCAAiC;SAC9D,CAAA;IACF,CAAC;IAED,OAAO;QACN,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,gBAAgB;QAChB,QAAQ;QACR,cAAc,EAAE,IAAI;KACpB,CAAA;AACF,CAAC"}

package/dist/runtime/profiles.d.ts

@@ -0,0 +1,15 @@
+import type { RuntimeProfile, RuntimeProfileStore } from '@lumiarq/context';
+export type RuntimeProfileValidationResult = {
+    ok: true;
+    value: RuntimeProfileStore;
+} | {
+    ok: false;
+    errors: string[];
+};
+export declare function validateRuntimeProfileStore(input: unknown): RuntimeProfileValidationResult;
+export declare function createDefaultRuntimeProfileStore(projectRoot: string): RuntimeProfileStore;
+export declare function loadRuntimeProfileStore(projectRoot: string): RuntimeProfileStore;
+export declare function saveRuntimeProfileStore(projectRoot: string, store: RuntimeProfileStore): void;
+export declare function getRuntimeProfile(store: RuntimeProfileStore, profileId?: string): RuntimeProfile | null;
+export declare function redactRuntimeProfileForLogs(profile: RuntimeProfile): RuntimeProfile;
+//# sourceMappingURL=profiles.d.ts.map

package/dist/runtime/profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../src/runtime/profiles.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,cAAc,EACd,mBAAmB,EAEpB,MAAM,kBAAkB,CAAA;AAIzB,MAAM,MAAM,8BAA8B,GACtC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,mBAAmB,CAAA;CAAE,GACxC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAAA;AAiDnC,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,8BAA8B,CAkC1F;AAED,wBAAgB,gCAAgC,CAAC,WAAW,EAAE,MAAM,GAAG,mBAAmB,CAazF;AAED,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,MAAM,GAAG,mBAAmB,CAoBhF;AAED,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,IAAI,CAI7F;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,mBAAmB,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAMvG;AAED,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,cAAc,GAAG,cAAc,CAWnF"}