@inf-monkeys-tech/monkeys-cli 0.12.43 → 0.12.44
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -0
- package/dist/command/metadata.d.ts.map +1 -1
- package/dist/command/metadata.js +3 -0
- package/dist/command/metadata.js.map +1 -1
- package/dist/commands/page/program/read.d.ts +12 -0
- package/dist/commands/page/program/read.d.ts.map +1 -0
- package/dist/commands/page/program/read.js +17 -0
- package/dist/commands/page/program/read.js.map +1 -0
- package/dist/commands/page/program/register.d.ts +14 -0
- package/dist/commands/page/program/register.d.ts.map +1 -0
- package/dist/commands/page/program/register.js +26 -0
- package/dist/commands/page/program/register.js.map +1 -0
- package/dist/declarative/program.d.ts +639 -0
- package/dist/declarative/program.d.ts.map +1 -0
- package/dist/declarative/program.js +174 -0
- package/dist/declarative/program.js.map +1 -0
- package/dist/security/redact.d.ts.map +1 -1
- package/dist/security/redact.js +20 -1
- package/dist/security/redact.js.map +1 -1
- package/oclif.manifest.json +169 -1
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -389,6 +389,8 @@ Studio commands require an explicit `--team`. Use `--surface`, `--environment`,
|
|
|
389
389
|
|
|
390
390
|
After an authorized dependency update, `page publish <id> --refresh-dependencies --yes` compiles a new release even when the Page JSON is unchanged. Normal publication keeps its existing no-op behavior for an already active declaration.
|
|
391
391
|
|
|
392
|
+
For Pages that reference an ActionProgram, register its exact artifact before publishing. `page program register --subscription <name> --team <team-id> --file <candidate.json> --receipt <private-receipt.json> --dry-run` validates a `PrepareActionProgramRequest` with the server, including its inspected `expectedVersion`, hashes, permissions, and installed dependencies. Apply with `--yes` instead of `--dry-run`. The CLI durably creates the receipt before sending the write and verifies the complete artifact afterward. Reusing that receipt performs readback only, including after a timeout; retain it even if verification fails. `page program read --subscription <name> --team <team-id> --file <reference.json>` accepts a `ReadActionProgramRequest` containing the exact `revisionRef`. Neither command executes the program, installs its dependencies, or publishes its Page.
|
|
393
|
+
|
|
392
394
|
Catalog commands require a Subscription configured with only `--expected-surface kernel`. Kernel operators can use `page catalog import --file <artifact.json> --expected-hash <active-hash>`, followed by `page catalog synchronize --expected-hash <new-hash>`. Import checks the observed head before sending; synchronization enforces the exact catalog hash and definition revisions on the server. Use `--dry-run` first and `--yes` to apply each stage. These commands do not publish pages. `page catalog design-import --file <intent.json>` accepts an official Design artifact with `expectedCurrentSourceHash` and its exact `idempotencyKey`; the server checks dedicated activation authority and append-only compatibility. Its dry run checks local artifact hashes only. If a write outcome is unknown, inspect current catalog and definition state before retrying.
|
|
393
395
|
|
|
394
396
|
These commands require the document-import endpoints in monkeys-server and SDK 1.1.11. For coordinated local testing before SDK publication, build and pack the SDK, then run CLI verification with `MONKEYS_TEST_SDK_TARBALL=/absolute/path/to/sdk.tgz bun run verify`. Release the exact SDK artifact before releasing consumers.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"metadata.d.ts","sourceRoot":"","sources":["../../src/command/metadata.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC9B,gBAAgB,EAAE,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAClE,uBAAuB,EAAE,SAAS,GAAG,QAAQ,GAAG,MAAM,CAAC;IACvD,oBAAoB,EAAE,OAAO,CAAC;IAC9B,MAAM,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC1B,IAAI,EAAE,SAAS,CAAC;CACjB;
|
|
1
|
+
{"version":3,"file":"metadata.d.ts","sourceRoot":"","sources":["../../src/command/metadata.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC9B,gBAAgB,EAAE,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAClE,uBAAuB,EAAE,SAAS,GAAG,QAAQ,GAAG,MAAM,CAAC;IACvD,oBAAoB,EAAE,OAAO,CAAC;IAC9B,MAAM,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC1B,IAAI,EAAE,SAAS,CAAC;CACjB;AAmLD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,CAiCnE"}
|
package/dist/command/metadata.js
CHANGED
|
@@ -9,6 +9,7 @@ const IDENTITY_MUTATIONS = [
|
|
|
9
9
|
'group permission set',
|
|
10
10
|
];
|
|
11
11
|
const NATIVE_DRY_RUN_COMMANDS = new Set([
|
|
12
|
+
'page program register',
|
|
12
13
|
'page catalog design-import',
|
|
13
14
|
'page catalog import',
|
|
14
15
|
'page catalog synchronize',
|
|
@@ -67,6 +68,7 @@ const READ_COMMANDS = new Set([
|
|
|
67
68
|
const CREDENTIAL_PREFIXES = ['auth login', 'auth logout', 'subscription add', 'subscription remove'];
|
|
68
69
|
const CREDENTIAL_COMMANDS = new Set(['auth api-key import']);
|
|
69
70
|
const PRIVILEGED_COMMANDS = new Set([
|
|
71
|
+
'page program register',
|
|
70
72
|
'page catalog design-import',
|
|
71
73
|
'page catalog import',
|
|
72
74
|
'page catalog synchronize',
|
|
@@ -99,6 +101,7 @@ const PRIVILEGED_COMMANDS = new Set([
|
|
|
99
101
|
]);
|
|
100
102
|
const DESTRUCTIVE_VERBS = new Set(['delete', 'remove']);
|
|
101
103
|
const NATIVE_REQUIRED_CONFIRMATION = new Set([
|
|
104
|
+
'page program register',
|
|
102
105
|
'page catalog design-import',
|
|
103
106
|
'page catalog import',
|
|
104
107
|
'page catalog synchronize',
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"metadata.js","sourceRoot":"","sources":["../../src/command/metadata.ts"],"names":[],"mappings":"AAUA,MAAM,kBAAkB,GAAG;IACzB,gBAAgB;IAChB,mBAAmB;IACnB,kBAAkB;IAClB,qBAAqB;IACrB,cAAc;IACd,cAAc;IACd,cAAc;IACd,sBAAsB;CACvB,CAAC;AAEF,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,4BAA4B;IAC5B,qBAAqB;IACrB,0BAA0B;IAC1B,+BAA+B;IAC/B,+BAA+B;IAC/B,GAAG,kBAAkB;IACrB,aAAa;IACb,cAAc;IACd,eAAe;IACf,iBAAiB;IACjB,mBAAmB;IACnB,oBAAoB;IACpB,qBAAqB;IACrB,uBAAuB;IACvB,cAAc;IACd,YAAY;IACZ,yBAAyB;IACzB,6BAA6B;IAC7B,mBAAmB;IACnB,sBAAsB;IACtB,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;IACjB,QAAQ;IACR,SAAS;CACV,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,OAAO;IACP,SAAS;IACT,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,KAAK;IACL,SAAS;IACT,MAAM;IACN,UAAU;IACV,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,MAAM;IACN,UAAU;IACV,SAAS;IACT,MAAM;IACN,OAAO;IACP,QAAQ;CACT,CAAC,CAAC;AACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,sBAAsB;IACtB,oCAAoC;IACpC,wCAAwC;IACxC,6BAA6B;CAC9B,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,qBAAqB,CAAC,CAAC;AACrG,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC;AAC7D,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,4BAA4B;IAC5B,qBAAqB;IACrB,0BAA0B;IAC1B,GAAG,kBAAkB;IACrB,aAAa;IACb,cAAc;IACd,eAAe;IACf,iBAAiB;IACjB,mBAAmB;IACnB,oBAAoB;IACpB,qBAAqB;IACrB,uBAAuB;IACvB,gCAAgC;IAChC,2BAA2B;IAC3B,sBAAsB;IACtB,+BAA+B;IAC/B,6BAA6B;IAC7B,iCAAiC;IACjC,cAAc;IACd,YAAY;IACZ,mBAAmB;IACnB,yBAAyB;IACzB,gCAAgC;IAChC,oBAAoB;IACpB,oBAAoB;IACpB,sBAAsB;IACtB,sBAAsB;IACtB,sBAAsB;IACtB,gCAAgC;CACjC,CAAC,CAAC;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AACxD,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAC;IAC3C,4BAA4B;IAC5B,qBAAqB;IACrB,0BAA0B;IAC1B,+BAA+B;IAC/B,+BAA+B;IAC/B,GAAG,kBAAkB;IACrB,aAAa;IACb,cAAc;IACd,eAAe;IACf,iBAAiB;IACjB,mBAAmB;IACnB,oBAAoB;IACpB,qBAAqB;IACrB,uBAAuB;IACvB,gCAAgC;IAChC,2BAA2B;IAC3B,uBAAuB;IACvB,sBAAsB;IACtB,+BAA+B;IAC/B,6BAA6B;IAC7B,iCAAiC;IACjC,cAAc;IACd,YAAY;IACZ,mBAAmB;IACnB,mBAAmB;IACnB,yBAAyB;IACzB,gCAAgC;IAChC,oBAAoB;IACpB,oBAAoB;IACpB,uBAAuB;IACvB,sBAAsB;IACtB,sBAAsB;IACtB,sBAAsB;IACtB,iBAAiB;IACjB,uBAAuB;IACvB,gCAAgC;IAChC,kBAAkB;IAClB,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;CAClB,CAAC,CAAC;AACH,MAAM,+BAA+B,GAAG,IAAI,GAAG,CAAC;IAC9C,eAAe;IACf,gCAAgC;IAChC,mBAAmB;IACnB,2BAA2B;IAC3B,sBAAsB;IACtB,eAAe;IACf,yCAAyC;IACzC,4CAA4C;CAC7C,CAAC,CAAC;AACH,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC;IAC1C,aAAa;IACb,mBAAmB;IACnB,eAAe;IACf,gCAAgC;IAChC,mBAAmB;IACnB,2BAA2B;IAC3B,sBAAsB;IACtB,eAAe;IACf,yCAAyC;IACzC,4CAA4C;IAC5C,WAAW;CACZ,CAAC,CAAC;AAEH,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACvD,IAAI,IAAe,CAAC;IAEpB,IAAI,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAAE,IAAI,GAAG,YAAY,CAAC;SAC/H,IAAI,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,IAAI,GAAG,YAAY,CAAC;SAC7D,IAAI,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,IAAI,GAAG,aAAa,CAAC;SAC3G,IAAI,2BAA2B,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,IAAI,GAAG,eAAe,CAAC;SACxE,IAAI,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAAE,IAAI,GAAG,MAAM,CAAC;;QAC5F,IAAI,GAAG,eAAe,CAAC;IAE5B,MAAM,gBAAgB,GACpB,UAAU,KAAK,UAAU;QACvB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,+BAA+B,CAAC,GAAG,CAAC,UAAU,CAAC;YAC/C,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,4BAA4B,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,YAAY;gBACxH,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,MAAM,CAAC;IACjB,MAAM,uBAAuB,GAC3B,4BAA4B,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,+BAA+B,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,UAAU,KAAK,UAAU;QAC1H,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,gBAAgB,KAAK,UAAU;YAC/B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,MAAM,CAAC;IAEf,OAAO;QACL,uBAAuB;QACvB,gBAAgB;QAChB,oBAAoB,EAAE,gBAAgB,KAAK,UAAU;QACrD,MAAM,EAAE,uBAAuB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;QACnE,IAAI;KACL,CAAC;AACJ,CAAC"}
|
|
1
|
+
{"version":3,"file":"metadata.js","sourceRoot":"","sources":["../../src/command/metadata.ts"],"names":[],"mappings":"AAUA,MAAM,kBAAkB,GAAG;IACzB,gBAAgB;IAChB,mBAAmB;IACnB,kBAAkB;IAClB,qBAAqB;IACrB,cAAc;IACd,cAAc;IACd,cAAc;IACd,sBAAsB;CACvB,CAAC;AAEF,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,uBAAuB;IACvB,4BAA4B;IAC5B,qBAAqB;IACrB,0BAA0B;IAC1B,+BAA+B;IAC/B,+BAA+B;IAC/B,GAAG,kBAAkB;IACrB,aAAa;IACb,cAAc;IACd,eAAe;IACf,iBAAiB;IACjB,mBAAmB;IACnB,oBAAoB;IACpB,qBAAqB;IACrB,uBAAuB;IACvB,cAAc;IACd,YAAY;IACZ,yBAAyB;IACzB,6BAA6B;IAC7B,mBAAmB;IACnB,sBAAsB;IACtB,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;IACjB,QAAQ;IACR,SAAS;CACV,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,OAAO;IACP,SAAS;IACT,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,KAAK;IACL,SAAS;IACT,MAAM;IACN,UAAU;IACV,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,MAAM;IACN,UAAU;IACV,SAAS;IACT,MAAM;IACN,OAAO;IACP,QAAQ;CACT,CAAC,CAAC;AACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,sBAAsB;IACtB,oCAAoC;IACpC,wCAAwC;IACxC,6BAA6B;CAC9B,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,qBAAqB,CAAC,CAAC;AACrG,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC;AAC7D,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,uBAAuB;IACvB,4BAA4B;IAC5B,qBAAqB;IACrB,0BAA0B;IAC1B,GAAG,kBAAkB;IACrB,aAAa;IACb,cAAc;IACd,eAAe;IACf,iBAAiB;IACjB,mBAAmB;IACnB,oBAAoB;IACpB,qBAAqB;IACrB,uBAAuB;IACvB,gCAAgC;IAChC,2BAA2B;IAC3B,sBAAsB;IACtB,+BAA+B;IAC/B,6BAA6B;IAC7B,iCAAiC;IACjC,cAAc;IACd,YAAY;IACZ,mBAAmB;IACnB,yBAAyB;IACzB,gCAAgC;IAChC,oBAAoB;IACpB,oBAAoB;IACpB,sBAAsB;IACtB,sBAAsB;IACtB,sBAAsB;IACtB,gCAAgC;CACjC,CAAC,CAAC;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AACxD,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAC;IAC3C,uBAAuB;IACvB,4BAA4B;IAC5B,qBAAqB;IACrB,0BAA0B;IAC1B,+BAA+B;IAC/B,+BAA+B;IAC/B,GAAG,kBAAkB;IACrB,aAAa;IACb,cAAc;IACd,eAAe;IACf,iBAAiB;IACjB,mBAAmB;IACnB,oBAAoB;IACpB,qBAAqB;IACrB,uBAAuB;IACvB,gCAAgC;IAChC,2BAA2B;IAC3B,uBAAuB;IACvB,sBAAsB;IACtB,+BAA+B;IAC/B,6BAA6B;IAC7B,iCAAiC;IACjC,cAAc;IACd,YAAY;IACZ,mBAAmB;IACnB,mBAAmB;IACnB,yBAAyB;IACzB,gCAAgC;IAChC,oBAAoB;IACpB,oBAAoB;IACpB,uBAAuB;IACvB,sBAAsB;IACtB,sBAAsB;IACtB,sBAAsB;IACtB,iBAAiB;IACjB,uBAAuB;IACvB,gCAAgC;IAChC,kBAAkB;IAClB,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;CAClB,CAAC,CAAC;AACH,MAAM,+BAA+B,GAAG,IAAI,GAAG,CAAC;IAC9C,eAAe;IACf,gCAAgC;IAChC,mBAAmB;IACnB,2BAA2B;IAC3B,sBAAsB;IACtB,eAAe;IACf,yCAAyC;IACzC,4CAA4C;CAC7C,CAAC,CAAC;AACH,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC;IAC1C,aAAa;IACb,mBAAmB;IACnB,eAAe;IACf,gCAAgC;IAChC,mBAAmB;IACnB,2BAA2B;IAC3B,sBAAsB;IACtB,eAAe;IACf,yCAAyC;IACzC,4CAA4C;IAC5C,WAAW;CACZ,CAAC,CAAC;AAEH,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACvD,IAAI,IAAe,CAAC;IAEpB,IAAI,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAAE,IAAI,GAAG,YAAY,CAAC;SAC/H,IAAI,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,IAAI,GAAG,YAAY,CAAC;SAC7D,IAAI,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,IAAI,GAAG,aAAa,CAAC;SAC3G,IAAI,2BAA2B,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,IAAI,GAAG,eAAe,CAAC;SACxE,IAAI,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAAE,IAAI,GAAG,MAAM,CAAC;;QAC5F,IAAI,GAAG,eAAe,CAAC;IAE5B,MAAM,gBAAgB,GACpB,UAAU,KAAK,UAAU;QACvB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,+BAA+B,CAAC,GAAG,CAAC,UAAU,CAAC;YAC/C,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,4BAA4B,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,YAAY;gBACxH,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,MAAM,CAAC;IACjB,MAAM,uBAAuB,GAC3B,4BAA4B,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,+BAA+B,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,UAAU,KAAK,UAAU;QAC1H,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,gBAAgB,KAAK,UAAU;YAC/B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,MAAM,CAAC;IAEf,OAAO;QACL,uBAAuB;QACvB,gBAAgB;QAChB,oBAAoB,EAAE,gBAAgB,KAAK,UAAU;QACrD,MAAM,EAAE,uBAAuB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;QACnE,IAAI;KACL,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
import { LocalCommand } from '../../../config/local-command.js';
|
|
2
|
+
export default class ProgramRead extends LocalCommand {
|
|
3
|
+
static description: string;
|
|
4
|
+
static flags: {
|
|
5
|
+
subscription: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
|
|
6
|
+
team: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
|
|
7
|
+
file: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
|
|
8
|
+
output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
|
|
9
|
+
};
|
|
10
|
+
run(): Promise<void>;
|
|
11
|
+
}
|
|
12
|
+
//# sourceMappingURL=read.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../src/commands/page/program/read.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAmB,MAAM,kCAAkC,CAAC;AAGjF,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,YAAY;IACnD,OAAgB,WAAW,SAAsF;IACjH,OAAgB,KAAK;QACnB,YAAY;QACZ,IAAI;QACJ,IAAI;QACJ,MAAM;MACN;IACI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAKzB;CACF"}
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
import { Flags } from '@oclif/core';
|
|
2
|
+
import { LocalCommand, localOutputFlag } from '../../../config/local-command.js';
|
|
3
|
+
import { runProgramRead } from '../../../declarative/program.js';
|
|
4
|
+
export default class ProgramRead extends LocalCommand {
|
|
5
|
+
static description = 'Read and verify an exact registered ActionProgram revision without executing it.';
|
|
6
|
+
static flags = {
|
|
7
|
+
subscription: Flags.string({ required: true }),
|
|
8
|
+
team: Flags.string({ required: true, summary: 'Verified authoring Team context' }),
|
|
9
|
+
file: Flags.string({ required: true, summary: 'ReadActionProgramRequest JSON containing the exact revisionRef' }),
|
|
10
|
+
output: localOutputFlag,
|
|
11
|
+
};
|
|
12
|
+
async run() {
|
|
13
|
+
const { flags } = await this.parse(ProgramRead);
|
|
14
|
+
await this.emit('page program read', flags.output, () => runProgramRead({ subscription: flags.subscription, team: flags.team, file: flags.file }));
|
|
15
|
+
}
|
|
16
|
+
}
|
|
17
|
+
//# sourceMappingURL=read.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../src/commands/page/program/read.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAEjE,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,YAAY;IACnD,MAAM,CAAU,WAAW,GAAG,kFAAkF,CAAC;IACjH,MAAM,CAAU,KAAK,GAAG;QACtB,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC9C,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC;QAClF,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,gEAAgE,EAAE,CAAC;QACjH,MAAM,EAAE,eAAe;KACxB,CAAC;IACF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,CACtD,cAAc,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CACzF,CAAC;IACJ,CAAC;CACF"}
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
import { LocalCommand } from '../../../config/local-command.js';
|
|
2
|
+
export default class ProgramRegister extends LocalCommand {
|
|
3
|
+
static description: string;
|
|
4
|
+
static flags: {
|
|
5
|
+
subscription: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
|
|
6
|
+
team: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
|
|
7
|
+
file: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
|
|
8
|
+
receipt: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
|
|
9
|
+
'dry-run': import("@oclif/core/interfaces").BooleanFlag<boolean>;
|
|
10
|
+
output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
|
|
11
|
+
};
|
|
12
|
+
run(): Promise<void>;
|
|
13
|
+
}
|
|
14
|
+
//# sourceMappingURL=register.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../../../src/commands/page/program/register.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAmB,MAAM,kCAAkC,CAAC;AAGjF,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,YAAY;IACvD,OAAgB,WAAW,SAA+G;IAC1I,OAAgB,KAAK;QACnB,YAAY;QACZ,IAAI;QACJ,IAAI;QACJ,OAAO;QACP,SAAS;QACT,MAAM;MACN;IACI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAYzB;CACF"}
|
|
@@ -0,0 +1,26 @@
|
|
|
1
|
+
import { Flags } from '@oclif/core';
|
|
2
|
+
import { LocalCommand, localOutputFlag } from '../../../config/local-command.js';
|
|
3
|
+
import { runProgramRegister } from '../../../declarative/program.js';
|
|
4
|
+
export default class ProgramRegister extends LocalCommand {
|
|
5
|
+
static description = 'Prepare and register an exact ActionProgram artifact, retaining a durable receipt for read-only recovery.';
|
|
6
|
+
static flags = {
|
|
7
|
+
subscription: Flags.string({ required: true }),
|
|
8
|
+
team: Flags.string({ required: true, summary: 'Verified authoring Team context' }),
|
|
9
|
+
file: Flags.string({ required: true, summary: 'PrepareActionProgramRequest JSON with artifact and inspected expectedVersion' }),
|
|
10
|
+
receipt: Flags.string({ required: true, summary: 'Private receipt path; existing receipts trigger readback only' }),
|
|
11
|
+
'dry-run': Flags.boolean({ default: false, summary: 'Validate the exact candidate with the server without registration' }),
|
|
12
|
+
output: localOutputFlag,
|
|
13
|
+
};
|
|
14
|
+
async run() {
|
|
15
|
+
const { flags } = await this.parse(ProgramRegister);
|
|
16
|
+
await this.emit('page program register', flags.output, () => runProgramRegister({
|
|
17
|
+
subscription: flags.subscription,
|
|
18
|
+
team: flags.team,
|
|
19
|
+
file: flags.file,
|
|
20
|
+
receipt: flags.receipt,
|
|
21
|
+
dryRun: flags['dry-run'],
|
|
22
|
+
yes: flags.yes,
|
|
23
|
+
}));
|
|
24
|
+
}
|
|
25
|
+
}
|
|
26
|
+
//# sourceMappingURL=register.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"register.js","sourceRoot":"","sources":["../../../../src/commands/page/program/register.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,YAAY;IACvD,MAAM,CAAU,WAAW,GAAG,2GAA2G,CAAC;IAC1I,MAAM,CAAU,KAAK,GAAG;QACtB,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC9C,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC;QAClF,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,8EAA8E,EAAE,CAAC;QAC/H,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,+DAA+D,EAAE,CAAC;QACnH,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,mEAAmE,EAAE,CAAC;QAC1H,MAAM,EAAE,eAAe;KACxB,CAAC;IACF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACpD,MAAM,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,CAC1D,kBAAkB,CAAC;YACjB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC;YACxB,GAAG,EAAE,KAAK,CAAC,GAAG;SACf,CAAC,CACH,CAAC;IACJ,CAAC;CACF"}
|
|
@@ -0,0 +1,639 @@
|
|
|
1
|
+
import { type SemanticRuntime } from '../semantic/runtime.js';
|
|
2
|
+
type Options = {
|
|
3
|
+
subscription: string;
|
|
4
|
+
team: string;
|
|
5
|
+
file: string;
|
|
6
|
+
receipt: string;
|
|
7
|
+
dryRun: boolean;
|
|
8
|
+
yes: boolean;
|
|
9
|
+
};
|
|
10
|
+
export declare class ProgramClient {
|
|
11
|
+
readonly runtime: SemanticRuntime;
|
|
12
|
+
constructor(runtime: SemanticRuntime);
|
|
13
|
+
private call;
|
|
14
|
+
prepare(input: unknown): Promise<{
|
|
15
|
+
revisionRef: {
|
|
16
|
+
revision: number;
|
|
17
|
+
schemaVersion: number;
|
|
18
|
+
contentHash: string;
|
|
19
|
+
kind: string;
|
|
20
|
+
id: string;
|
|
21
|
+
ownerRepo: string;
|
|
22
|
+
visibility: "global" | "public" | "tenant";
|
|
23
|
+
tenantScope?: {
|
|
24
|
+
tenantRef: {
|
|
25
|
+
kind: string;
|
|
26
|
+
id: string;
|
|
27
|
+
ownerRepo: string;
|
|
28
|
+
};
|
|
29
|
+
dataSpaceRef: {
|
|
30
|
+
kind: string;
|
|
31
|
+
id: string;
|
|
32
|
+
ownerRepo: string;
|
|
33
|
+
};
|
|
34
|
+
teamRef?: {
|
|
35
|
+
kind: string;
|
|
36
|
+
id: string;
|
|
37
|
+
ownerRepo: string;
|
|
38
|
+
} | undefined;
|
|
39
|
+
} | undefined;
|
|
40
|
+
};
|
|
41
|
+
planHash: string;
|
|
42
|
+
}>;
|
|
43
|
+
register(input: unknown): Promise<{
|
|
44
|
+
revisionRef: {
|
|
45
|
+
revision: number;
|
|
46
|
+
schemaVersion: number;
|
|
47
|
+
contentHash: string;
|
|
48
|
+
kind: string;
|
|
49
|
+
id: string;
|
|
50
|
+
ownerRepo: string;
|
|
51
|
+
visibility: "global" | "public" | "tenant";
|
|
52
|
+
tenantScope?: {
|
|
53
|
+
tenantRef: {
|
|
54
|
+
kind: string;
|
|
55
|
+
id: string;
|
|
56
|
+
ownerRepo: string;
|
|
57
|
+
};
|
|
58
|
+
dataSpaceRef: {
|
|
59
|
+
kind: string;
|
|
60
|
+
id: string;
|
|
61
|
+
ownerRepo: string;
|
|
62
|
+
};
|
|
63
|
+
teamRef?: {
|
|
64
|
+
kind: string;
|
|
65
|
+
id: string;
|
|
66
|
+
ownerRepo: string;
|
|
67
|
+
} | undefined;
|
|
68
|
+
} | undefined;
|
|
69
|
+
};
|
|
70
|
+
}>;
|
|
71
|
+
read(input: unknown): Promise<{
|
|
72
|
+
definition: {
|
|
73
|
+
contract: "ActionProgramDefinition";
|
|
74
|
+
schemaVersion: 1;
|
|
75
|
+
programId: string;
|
|
76
|
+
ownerRepo: string;
|
|
77
|
+
tenantScope: {
|
|
78
|
+
tenantRef: {
|
|
79
|
+
kind: string;
|
|
80
|
+
id: string;
|
|
81
|
+
ownerRepo: string;
|
|
82
|
+
};
|
|
83
|
+
dataSpaceRef: {
|
|
84
|
+
kind: string;
|
|
85
|
+
id: string;
|
|
86
|
+
ownerRepo: string;
|
|
87
|
+
};
|
|
88
|
+
teamRef?: {
|
|
89
|
+
kind: string;
|
|
90
|
+
id: string;
|
|
91
|
+
ownerRepo: string;
|
|
92
|
+
} | undefined;
|
|
93
|
+
};
|
|
94
|
+
supportedSurface: "studio";
|
|
95
|
+
inputSchemaRevisionRef: {
|
|
96
|
+
revision: number;
|
|
97
|
+
schemaVersion: number;
|
|
98
|
+
contentHash: string;
|
|
99
|
+
kind: string;
|
|
100
|
+
id: string;
|
|
101
|
+
ownerRepo: string;
|
|
102
|
+
visibility: "global" | "public" | "tenant";
|
|
103
|
+
tenantScope?: {
|
|
104
|
+
tenantRef: {
|
|
105
|
+
kind: string;
|
|
106
|
+
id: string;
|
|
107
|
+
ownerRepo: string;
|
|
108
|
+
};
|
|
109
|
+
dataSpaceRef: {
|
|
110
|
+
kind: string;
|
|
111
|
+
id: string;
|
|
112
|
+
ownerRepo: string;
|
|
113
|
+
};
|
|
114
|
+
teamRef?: {
|
|
115
|
+
kind: string;
|
|
116
|
+
id: string;
|
|
117
|
+
ownerRepo: string;
|
|
118
|
+
} | undefined;
|
|
119
|
+
} | undefined;
|
|
120
|
+
};
|
|
121
|
+
resultSchemaRevisionRef: {
|
|
122
|
+
revision: number;
|
|
123
|
+
schemaVersion: number;
|
|
124
|
+
contentHash: string;
|
|
125
|
+
kind: string;
|
|
126
|
+
id: string;
|
|
127
|
+
ownerRepo: string;
|
|
128
|
+
visibility: "global" | "public" | "tenant";
|
|
129
|
+
tenantScope?: {
|
|
130
|
+
tenantRef: {
|
|
131
|
+
kind: string;
|
|
132
|
+
id: string;
|
|
133
|
+
ownerRepo: string;
|
|
134
|
+
};
|
|
135
|
+
dataSpaceRef: {
|
|
136
|
+
kind: string;
|
|
137
|
+
id: string;
|
|
138
|
+
ownerRepo: string;
|
|
139
|
+
};
|
|
140
|
+
teamRef?: {
|
|
141
|
+
kind: string;
|
|
142
|
+
id: string;
|
|
143
|
+
ownerRepo: string;
|
|
144
|
+
} | undefined;
|
|
145
|
+
} | undefined;
|
|
146
|
+
};
|
|
147
|
+
entry: "main";
|
|
148
|
+
abi: "monkeys.action-program/2";
|
|
149
|
+
compiler: string;
|
|
150
|
+
target: "browser-worker-es2020";
|
|
151
|
+
sourceHash: string;
|
|
152
|
+
compiledHash: string;
|
|
153
|
+
sourceMapHash: string;
|
|
154
|
+
dependencies: {
|
|
155
|
+
kind: "command" | "query";
|
|
156
|
+
revisionRef: {
|
|
157
|
+
revision: number;
|
|
158
|
+
schemaVersion: number;
|
|
159
|
+
contentHash: string;
|
|
160
|
+
kind: string;
|
|
161
|
+
id: string;
|
|
162
|
+
ownerRepo: string;
|
|
163
|
+
visibility: "global" | "public" | "tenant";
|
|
164
|
+
tenantScope?: {
|
|
165
|
+
tenantRef: {
|
|
166
|
+
kind: string;
|
|
167
|
+
id: string;
|
|
168
|
+
ownerRepo: string;
|
|
169
|
+
};
|
|
170
|
+
dataSpaceRef: {
|
|
171
|
+
kind: string;
|
|
172
|
+
id: string;
|
|
173
|
+
ownerRepo: string;
|
|
174
|
+
};
|
|
175
|
+
teamRef?: {
|
|
176
|
+
kind: string;
|
|
177
|
+
id: string;
|
|
178
|
+
ownerRepo: string;
|
|
179
|
+
} | undefined;
|
|
180
|
+
} | undefined;
|
|
181
|
+
};
|
|
182
|
+
inputSchemaRevisionRef: {
|
|
183
|
+
revision: number;
|
|
184
|
+
schemaVersion: number;
|
|
185
|
+
contentHash: string;
|
|
186
|
+
kind: string;
|
|
187
|
+
id: string;
|
|
188
|
+
ownerRepo: string;
|
|
189
|
+
visibility: "global" | "public" | "tenant";
|
|
190
|
+
tenantScope?: {
|
|
191
|
+
tenantRef: {
|
|
192
|
+
kind: string;
|
|
193
|
+
id: string;
|
|
194
|
+
ownerRepo: string;
|
|
195
|
+
};
|
|
196
|
+
dataSpaceRef: {
|
|
197
|
+
kind: string;
|
|
198
|
+
id: string;
|
|
199
|
+
ownerRepo: string;
|
|
200
|
+
};
|
|
201
|
+
teamRef?: {
|
|
202
|
+
kind: string;
|
|
203
|
+
id: string;
|
|
204
|
+
ownerRepo: string;
|
|
205
|
+
} | undefined;
|
|
206
|
+
} | undefined;
|
|
207
|
+
};
|
|
208
|
+
resultSchemaRevisionRef: {
|
|
209
|
+
revision: number;
|
|
210
|
+
schemaVersion: number;
|
|
211
|
+
contentHash: string;
|
|
212
|
+
kind: string;
|
|
213
|
+
id: string;
|
|
214
|
+
ownerRepo: string;
|
|
215
|
+
visibility: "global" | "public" | "tenant";
|
|
216
|
+
tenantScope?: {
|
|
217
|
+
tenantRef: {
|
|
218
|
+
kind: string;
|
|
219
|
+
id: string;
|
|
220
|
+
ownerRepo: string;
|
|
221
|
+
};
|
|
222
|
+
dataSpaceRef: {
|
|
223
|
+
kind: string;
|
|
224
|
+
id: string;
|
|
225
|
+
ownerRepo: string;
|
|
226
|
+
};
|
|
227
|
+
teamRef?: {
|
|
228
|
+
kind: string;
|
|
229
|
+
id: string;
|
|
230
|
+
ownerRepo: string;
|
|
231
|
+
} | undefined;
|
|
232
|
+
} | undefined;
|
|
233
|
+
};
|
|
234
|
+
download?: {
|
|
235
|
+
kind: "native";
|
|
236
|
+
} | {
|
|
237
|
+
kind: "text-artifact";
|
|
238
|
+
fileNamePath: string[];
|
|
239
|
+
mimeTypePath: string[];
|
|
240
|
+
contentPath: string[];
|
|
241
|
+
maxBytes: number;
|
|
242
|
+
} | undefined;
|
|
243
|
+
dynamicInputKeys: string[];
|
|
244
|
+
}[];
|
|
245
|
+
effects: ("download" | "form" | "refresh" | "state.get" | "state.set" | "toast")[];
|
|
246
|
+
refreshAliases: string[];
|
|
247
|
+
stateAliases: {
|
|
248
|
+
alias: string;
|
|
249
|
+
schemaRevisionRef: {
|
|
250
|
+
revision: number;
|
|
251
|
+
schemaVersion: number;
|
|
252
|
+
contentHash: string;
|
|
253
|
+
kind: string;
|
|
254
|
+
id: string;
|
|
255
|
+
ownerRepo: string;
|
|
256
|
+
visibility: "global" | "public" | "tenant";
|
|
257
|
+
tenantScope?: {
|
|
258
|
+
tenantRef: {
|
|
259
|
+
kind: string;
|
|
260
|
+
id: string;
|
|
261
|
+
ownerRepo: string;
|
|
262
|
+
};
|
|
263
|
+
dataSpaceRef: {
|
|
264
|
+
kind: string;
|
|
265
|
+
id: string;
|
|
266
|
+
ownerRepo: string;
|
|
267
|
+
};
|
|
268
|
+
teamRef?: {
|
|
269
|
+
kind: string;
|
|
270
|
+
id: string;
|
|
271
|
+
ownerRepo: string;
|
|
272
|
+
} | undefined;
|
|
273
|
+
} | undefined;
|
|
274
|
+
};
|
|
275
|
+
}[];
|
|
276
|
+
budgets: {
|
|
277
|
+
rpcMs: number;
|
|
278
|
+
concurrentCalls: number;
|
|
279
|
+
calls: number;
|
|
280
|
+
messageBytes: number;
|
|
281
|
+
activeMs: number;
|
|
282
|
+
formMs: number;
|
|
283
|
+
wallMs: number;
|
|
284
|
+
};
|
|
285
|
+
};
|
|
286
|
+
javascript: string;
|
|
287
|
+
sourceMap: string;
|
|
288
|
+
}>;
|
|
289
|
+
}
|
|
290
|
+
export declare function runProgramRead(options: Pick<Options, 'subscription' | 'team' | 'file'>, supplied?: ProgramClient): Promise<{
|
|
291
|
+
subscription: string;
|
|
292
|
+
contextFingerprint: string;
|
|
293
|
+
revisionRef: {
|
|
294
|
+
revision: number;
|
|
295
|
+
schemaVersion: number;
|
|
296
|
+
contentHash: string;
|
|
297
|
+
kind: string;
|
|
298
|
+
id: string;
|
|
299
|
+
ownerRepo: string;
|
|
300
|
+
visibility: "global" | "public" | "tenant";
|
|
301
|
+
tenantScope?: {
|
|
302
|
+
tenantRef: {
|
|
303
|
+
kind: string;
|
|
304
|
+
id: string;
|
|
305
|
+
ownerRepo: string;
|
|
306
|
+
};
|
|
307
|
+
dataSpaceRef: {
|
|
308
|
+
kind: string;
|
|
309
|
+
id: string;
|
|
310
|
+
ownerRepo: string;
|
|
311
|
+
};
|
|
312
|
+
teamRef?: {
|
|
313
|
+
kind: string;
|
|
314
|
+
id: string;
|
|
315
|
+
ownerRepo: string;
|
|
316
|
+
} | undefined;
|
|
317
|
+
} | undefined;
|
|
318
|
+
};
|
|
319
|
+
artifact: {
|
|
320
|
+
definition: {
|
|
321
|
+
contract: "ActionProgramDefinition";
|
|
322
|
+
schemaVersion: 1;
|
|
323
|
+
programId: string;
|
|
324
|
+
ownerRepo: string;
|
|
325
|
+
tenantScope: {
|
|
326
|
+
tenantRef: {
|
|
327
|
+
kind: string;
|
|
328
|
+
id: string;
|
|
329
|
+
ownerRepo: string;
|
|
330
|
+
};
|
|
331
|
+
dataSpaceRef: {
|
|
332
|
+
kind: string;
|
|
333
|
+
id: string;
|
|
334
|
+
ownerRepo: string;
|
|
335
|
+
};
|
|
336
|
+
teamRef?: {
|
|
337
|
+
kind: string;
|
|
338
|
+
id: string;
|
|
339
|
+
ownerRepo: string;
|
|
340
|
+
} | undefined;
|
|
341
|
+
};
|
|
342
|
+
supportedSurface: "studio";
|
|
343
|
+
inputSchemaRevisionRef: {
|
|
344
|
+
revision: number;
|
|
345
|
+
schemaVersion: number;
|
|
346
|
+
contentHash: string;
|
|
347
|
+
kind: string;
|
|
348
|
+
id: string;
|
|
349
|
+
ownerRepo: string;
|
|
350
|
+
visibility: "global" | "public" | "tenant";
|
|
351
|
+
tenantScope?: {
|
|
352
|
+
tenantRef: {
|
|
353
|
+
kind: string;
|
|
354
|
+
id: string;
|
|
355
|
+
ownerRepo: string;
|
|
356
|
+
};
|
|
357
|
+
dataSpaceRef: {
|
|
358
|
+
kind: string;
|
|
359
|
+
id: string;
|
|
360
|
+
ownerRepo: string;
|
|
361
|
+
};
|
|
362
|
+
teamRef?: {
|
|
363
|
+
kind: string;
|
|
364
|
+
id: string;
|
|
365
|
+
ownerRepo: string;
|
|
366
|
+
} | undefined;
|
|
367
|
+
} | undefined;
|
|
368
|
+
};
|
|
369
|
+
resultSchemaRevisionRef: {
|
|
370
|
+
revision: number;
|
|
371
|
+
schemaVersion: number;
|
|
372
|
+
contentHash: string;
|
|
373
|
+
kind: string;
|
|
374
|
+
id: string;
|
|
375
|
+
ownerRepo: string;
|
|
376
|
+
visibility: "global" | "public" | "tenant";
|
|
377
|
+
tenantScope?: {
|
|
378
|
+
tenantRef: {
|
|
379
|
+
kind: string;
|
|
380
|
+
id: string;
|
|
381
|
+
ownerRepo: string;
|
|
382
|
+
};
|
|
383
|
+
dataSpaceRef: {
|
|
384
|
+
kind: string;
|
|
385
|
+
id: string;
|
|
386
|
+
ownerRepo: string;
|
|
387
|
+
};
|
|
388
|
+
teamRef?: {
|
|
389
|
+
kind: string;
|
|
390
|
+
id: string;
|
|
391
|
+
ownerRepo: string;
|
|
392
|
+
} | undefined;
|
|
393
|
+
} | undefined;
|
|
394
|
+
};
|
|
395
|
+
entry: "main";
|
|
396
|
+
abi: "monkeys.action-program/2";
|
|
397
|
+
compiler: string;
|
|
398
|
+
target: "browser-worker-es2020";
|
|
399
|
+
sourceHash: string;
|
|
400
|
+
compiledHash: string;
|
|
401
|
+
sourceMapHash: string;
|
|
402
|
+
dependencies: {
|
|
403
|
+
kind: "command" | "query";
|
|
404
|
+
revisionRef: {
|
|
405
|
+
revision: number;
|
|
406
|
+
schemaVersion: number;
|
|
407
|
+
contentHash: string;
|
|
408
|
+
kind: string;
|
|
409
|
+
id: string;
|
|
410
|
+
ownerRepo: string;
|
|
411
|
+
visibility: "global" | "public" | "tenant";
|
|
412
|
+
tenantScope?: {
|
|
413
|
+
tenantRef: {
|
|
414
|
+
kind: string;
|
|
415
|
+
id: string;
|
|
416
|
+
ownerRepo: string;
|
|
417
|
+
};
|
|
418
|
+
dataSpaceRef: {
|
|
419
|
+
kind: string;
|
|
420
|
+
id: string;
|
|
421
|
+
ownerRepo: string;
|
|
422
|
+
};
|
|
423
|
+
teamRef?: {
|
|
424
|
+
kind: string;
|
|
425
|
+
id: string;
|
|
426
|
+
ownerRepo: string;
|
|
427
|
+
} | undefined;
|
|
428
|
+
} | undefined;
|
|
429
|
+
};
|
|
430
|
+
inputSchemaRevisionRef: {
|
|
431
|
+
revision: number;
|
|
432
|
+
schemaVersion: number;
|
|
433
|
+
contentHash: string;
|
|
434
|
+
kind: string;
|
|
435
|
+
id: string;
|
|
436
|
+
ownerRepo: string;
|
|
437
|
+
visibility: "global" | "public" | "tenant";
|
|
438
|
+
tenantScope?: {
|
|
439
|
+
tenantRef: {
|
|
440
|
+
kind: string;
|
|
441
|
+
id: string;
|
|
442
|
+
ownerRepo: string;
|
|
443
|
+
};
|
|
444
|
+
dataSpaceRef: {
|
|
445
|
+
kind: string;
|
|
446
|
+
id: string;
|
|
447
|
+
ownerRepo: string;
|
|
448
|
+
};
|
|
449
|
+
teamRef?: {
|
|
450
|
+
kind: string;
|
|
451
|
+
id: string;
|
|
452
|
+
ownerRepo: string;
|
|
453
|
+
} | undefined;
|
|
454
|
+
} | undefined;
|
|
455
|
+
};
|
|
456
|
+
resultSchemaRevisionRef: {
|
|
457
|
+
revision: number;
|
|
458
|
+
schemaVersion: number;
|
|
459
|
+
contentHash: string;
|
|
460
|
+
kind: string;
|
|
461
|
+
id: string;
|
|
462
|
+
ownerRepo: string;
|
|
463
|
+
visibility: "global" | "public" | "tenant";
|
|
464
|
+
tenantScope?: {
|
|
465
|
+
tenantRef: {
|
|
466
|
+
kind: string;
|
|
467
|
+
id: string;
|
|
468
|
+
ownerRepo: string;
|
|
469
|
+
};
|
|
470
|
+
dataSpaceRef: {
|
|
471
|
+
kind: string;
|
|
472
|
+
id: string;
|
|
473
|
+
ownerRepo: string;
|
|
474
|
+
};
|
|
475
|
+
teamRef?: {
|
|
476
|
+
kind: string;
|
|
477
|
+
id: string;
|
|
478
|
+
ownerRepo: string;
|
|
479
|
+
} | undefined;
|
|
480
|
+
} | undefined;
|
|
481
|
+
};
|
|
482
|
+
download?: {
|
|
483
|
+
kind: "native";
|
|
484
|
+
} | {
|
|
485
|
+
kind: "text-artifact";
|
|
486
|
+
fileNamePath: string[];
|
|
487
|
+
mimeTypePath: string[];
|
|
488
|
+
contentPath: string[];
|
|
489
|
+
maxBytes: number;
|
|
490
|
+
} | undefined;
|
|
491
|
+
dynamicInputKeys: string[];
|
|
492
|
+
}[];
|
|
493
|
+
effects: ("download" | "form" | "refresh" | "state.get" | "state.set" | "toast")[];
|
|
494
|
+
refreshAliases: string[];
|
|
495
|
+
stateAliases: {
|
|
496
|
+
alias: string;
|
|
497
|
+
schemaRevisionRef: {
|
|
498
|
+
revision: number;
|
|
499
|
+
schemaVersion: number;
|
|
500
|
+
contentHash: string;
|
|
501
|
+
kind: string;
|
|
502
|
+
id: string;
|
|
503
|
+
ownerRepo: string;
|
|
504
|
+
visibility: "global" | "public" | "tenant";
|
|
505
|
+
tenantScope?: {
|
|
506
|
+
tenantRef: {
|
|
507
|
+
kind: string;
|
|
508
|
+
id: string;
|
|
509
|
+
ownerRepo: string;
|
|
510
|
+
};
|
|
511
|
+
dataSpaceRef: {
|
|
512
|
+
kind: string;
|
|
513
|
+
id: string;
|
|
514
|
+
ownerRepo: string;
|
|
515
|
+
};
|
|
516
|
+
teamRef?: {
|
|
517
|
+
kind: string;
|
|
518
|
+
id: string;
|
|
519
|
+
ownerRepo: string;
|
|
520
|
+
} | undefined;
|
|
521
|
+
} | undefined;
|
|
522
|
+
};
|
|
523
|
+
}[];
|
|
524
|
+
budgets: {
|
|
525
|
+
rpcMs: number;
|
|
526
|
+
concurrentCalls: number;
|
|
527
|
+
calls: number;
|
|
528
|
+
messageBytes: number;
|
|
529
|
+
activeMs: number;
|
|
530
|
+
formMs: number;
|
|
531
|
+
wallMs: number;
|
|
532
|
+
};
|
|
533
|
+
};
|
|
534
|
+
javascript: string;
|
|
535
|
+
sourceMap: string;
|
|
536
|
+
};
|
|
537
|
+
verified: boolean;
|
|
538
|
+
}>;
|
|
539
|
+
export declare function runProgramRegister(options: Options, supplied?: ProgramClient): Promise<{
|
|
540
|
+
subscription: string;
|
|
541
|
+
baseUrl: string;
|
|
542
|
+
contextFingerprint: string;
|
|
543
|
+
revisionRef: {
|
|
544
|
+
revision: number;
|
|
545
|
+
schemaVersion: number;
|
|
546
|
+
contentHash: string;
|
|
547
|
+
kind: string;
|
|
548
|
+
id: string;
|
|
549
|
+
ownerRepo: string;
|
|
550
|
+
visibility: "global" | "public" | "tenant";
|
|
551
|
+
tenantScope?: {
|
|
552
|
+
tenantRef: {
|
|
553
|
+
kind: string;
|
|
554
|
+
id: string;
|
|
555
|
+
ownerRepo: string;
|
|
556
|
+
};
|
|
557
|
+
dataSpaceRef: {
|
|
558
|
+
kind: string;
|
|
559
|
+
id: string;
|
|
560
|
+
ownerRepo: string;
|
|
561
|
+
};
|
|
562
|
+
teamRef?: {
|
|
563
|
+
kind: string;
|
|
564
|
+
id: string;
|
|
565
|
+
ownerRepo: string;
|
|
566
|
+
} | undefined;
|
|
567
|
+
} | undefined;
|
|
568
|
+
};
|
|
569
|
+
dryRun: boolean;
|
|
570
|
+
recoveryOnly: boolean;
|
|
571
|
+
verified: boolean;
|
|
572
|
+
} | {
|
|
573
|
+
subscription: string;
|
|
574
|
+
baseUrl: string;
|
|
575
|
+
contextFingerprint: string;
|
|
576
|
+
revisionRef: {
|
|
577
|
+
revision: number;
|
|
578
|
+
schemaVersion: number;
|
|
579
|
+
contentHash: string;
|
|
580
|
+
kind: string;
|
|
581
|
+
id: string;
|
|
582
|
+
ownerRepo: string;
|
|
583
|
+
visibility: "global" | "public" | "tenant";
|
|
584
|
+
tenantScope?: {
|
|
585
|
+
tenantRef: {
|
|
586
|
+
kind: string;
|
|
587
|
+
id: string;
|
|
588
|
+
ownerRepo: string;
|
|
589
|
+
};
|
|
590
|
+
dataSpaceRef: {
|
|
591
|
+
kind: string;
|
|
592
|
+
id: string;
|
|
593
|
+
ownerRepo: string;
|
|
594
|
+
};
|
|
595
|
+
teamRef?: {
|
|
596
|
+
kind: string;
|
|
597
|
+
id: string;
|
|
598
|
+
ownerRepo: string;
|
|
599
|
+
} | undefined;
|
|
600
|
+
} | undefined;
|
|
601
|
+
};
|
|
602
|
+
dryRun: boolean;
|
|
603
|
+
planHash: string;
|
|
604
|
+
validationCoverage: string;
|
|
605
|
+
} | {
|
|
606
|
+
subscription: string;
|
|
607
|
+
baseUrl: string;
|
|
608
|
+
contextFingerprint: string;
|
|
609
|
+
revisionRef: {
|
|
610
|
+
revision: number;
|
|
611
|
+
schemaVersion: number;
|
|
612
|
+
contentHash: string;
|
|
613
|
+
kind: string;
|
|
614
|
+
id: string;
|
|
615
|
+
ownerRepo: string;
|
|
616
|
+
visibility: "global" | "public" | "tenant";
|
|
617
|
+
tenantScope?: {
|
|
618
|
+
tenantRef: {
|
|
619
|
+
kind: string;
|
|
620
|
+
id: string;
|
|
621
|
+
ownerRepo: string;
|
|
622
|
+
};
|
|
623
|
+
dataSpaceRef: {
|
|
624
|
+
kind: string;
|
|
625
|
+
id: string;
|
|
626
|
+
ownerRepo: string;
|
|
627
|
+
};
|
|
628
|
+
teamRef?: {
|
|
629
|
+
kind: string;
|
|
630
|
+
id: string;
|
|
631
|
+
ownerRepo: string;
|
|
632
|
+
} | undefined;
|
|
633
|
+
} | undefined;
|
|
634
|
+
};
|
|
635
|
+
dryRun: boolean;
|
|
636
|
+
verified: boolean;
|
|
637
|
+
}>;
|
|
638
|
+
export {};
|
|
639
|
+
//# sourceMappingURL=program.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"program.d.ts","sourceRoot":"","sources":["../../src/declarative/program.ts"],"names":[],"mappings":"AAYA,OAAO,EAA+E,KAAK,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAY3I,KAAK,OAAO,GAAG;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,OAAO,CAAA;CAAE,CAAC;AAMpH,qBAAa,aAAa;IACZ,QAAQ,CAAC,OAAO,EAAE,eAAe;IAA7C,YAAqB,OAAO,EAAE,eAAe,EAAI;YAEnC,IAAI;IA4ClB,OAAO,CAAC,KAAK,EAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAErB;IACD,QAAQ,CAAC,KAAK,EAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;OAEtB;IACD,IAAI,CAAC,KAAK,EAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAElB;CACF;AAUD,wBAAsB,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM,GAAG,MAAM,CAAC,EAAE,QAAQ,CAAC,EAAE,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqBtH;AAED,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4ElF"}
|
|
@@ -0,0 +1,174 @@
|
|
|
1
|
+
import { open, readFile } from 'node:fs/promises';
|
|
2
|
+
import { ActionProgramArtifactSchema, PrepareActionProgramRequestSchema, RegisterActionProgramRequestSchema, ReadActionProgramRequestSchema, RevisionRefSchema, } from '@inf-monkeys-tech/monkeys/contracts';
|
|
3
|
+
import { canonicalContentHash as hash } from '@inf-monkeys-tech/monkeys/runtime';
|
|
4
|
+
import { z } from 'zod';
|
|
5
|
+
import { CliError, EXIT_CODES } from '../errors/cli-error.js';
|
|
6
|
+
import { assertConfirmation } from '../policy/risk.js';
|
|
7
|
+
import { loadSemanticRuntime, requireSemanticTeam, requestSemantic, unwrapServerData } from '../semantic/runtime.js';
|
|
8
|
+
const refSchema = z.unknown().transform((value) => RevisionRefSchema.parse(value));
|
|
9
|
+
const registrationSchema = z.object({ revisionRef: refSchema });
|
|
10
|
+
const preparedSchema = registrationSchema.extend({ planHash: z.string().regex(/^[a-f0-9]{64}$/) });
|
|
11
|
+
const receiptSchema = z.object({
|
|
12
|
+
state: z.literal('pending'),
|
|
13
|
+
contextFingerprint: z.string(),
|
|
14
|
+
candidateHash: z.string(),
|
|
15
|
+
revisionRef: refSchema,
|
|
16
|
+
});
|
|
17
|
+
function fail(code, message) {
|
|
18
|
+
throw new CliError(message, { code, exitCode: EXIT_CODES.validation });
|
|
19
|
+
}
|
|
20
|
+
export class ProgramClient {
|
|
21
|
+
runtime;
|
|
22
|
+
constructor(runtime) {
|
|
23
|
+
this.runtime = runtime;
|
|
24
|
+
}
|
|
25
|
+
async call(action, body, schema) {
|
|
26
|
+
const write = action === 'register';
|
|
27
|
+
try {
|
|
28
|
+
const result = await requestSemantic(this.runtime, {
|
|
29
|
+
id: `declarative.program.${action}`,
|
|
30
|
+
command: ['page', 'program', action === 'prepare' ? 'register' : action],
|
|
31
|
+
risk: write ? 'privileged' : 'read',
|
|
32
|
+
apiBindings: [
|
|
33
|
+
{
|
|
34
|
+
adapter: 'action-program-v1',
|
|
35
|
+
legacyBuiltinContract: true,
|
|
36
|
+
method: 'POST',
|
|
37
|
+
pathTemplate: `/api/declarative-control/authoring/programs/${action}`,
|
|
38
|
+
},
|
|
39
|
+
],
|
|
40
|
+
}, { body });
|
|
41
|
+
try {
|
|
42
|
+
return schema.parse(unwrapServerData(result.response.data));
|
|
43
|
+
}
|
|
44
|
+
catch (cause) {
|
|
45
|
+
throw new CliError('The program response could not be verified. Retain the receipt and read the exact revision before retrying.', {
|
|
46
|
+
cause,
|
|
47
|
+
code: write ? 'MUTATION_OUTCOME_UNKNOWN' : 'PROGRAM_RESPONSE_INCOMPATIBLE',
|
|
48
|
+
exitCode: EXIT_CODES.compatibility,
|
|
49
|
+
});
|
|
50
|
+
}
|
|
51
|
+
}
|
|
52
|
+
catch (cause) {
|
|
53
|
+
if (write &&
|
|
54
|
+
cause instanceof CliError &&
|
|
55
|
+
(['NETWORK_ERROR', 'REQUEST_TIMEOUT', 'REQUEST_ABORTED'].includes(cause.code) || /^HTTP_5/.test(cause.code)))
|
|
56
|
+
throw new CliError('Program registration outcome is unknown. Reuse the receipt to perform readback only.', {
|
|
57
|
+
cause,
|
|
58
|
+
code: 'MUTATION_OUTCOME_UNKNOWN',
|
|
59
|
+
exitCode: EXIT_CODES.network,
|
|
60
|
+
});
|
|
61
|
+
throw cause;
|
|
62
|
+
}
|
|
63
|
+
}
|
|
64
|
+
prepare(input) {
|
|
65
|
+
return this.call('prepare', PrepareActionProgramRequestSchema.parse(input), preparedSchema);
|
|
66
|
+
}
|
|
67
|
+
register(input) {
|
|
68
|
+
return this.call('register', RegisterActionProgramRequestSchema.parse(input), registrationSchema);
|
|
69
|
+
}
|
|
70
|
+
read(input) {
|
|
71
|
+
return this.call('read', ReadActionProgramRequestSchema.parse(input), ActionProgramArtifactSchema);
|
|
72
|
+
}
|
|
73
|
+
}
|
|
74
|
+
async function clientFor(options, supplied) {
|
|
75
|
+
const client = supplied ??
|
|
76
|
+
new ProgramClient(await loadSemanticRuntime({ subscription: options.subscription, team: options.team, inheritDefaultTeam: false }));
|
|
77
|
+
requireSemanticTeam(client.runtime, 'page program');
|
|
78
|
+
return client;
|
|
79
|
+
}
|
|
80
|
+
export async function runProgramRead(options, supplied) {
|
|
81
|
+
const input = ReadActionProgramRequestSchema.parse(JSON.parse(await readFile(options.file, 'utf8')));
|
|
82
|
+
const client = await clientFor(options, supplied);
|
|
83
|
+
const artifact = await client.read(input);
|
|
84
|
+
if (input.revisionRef.kind !== 'action-program' ||
|
|
85
|
+
input.revisionRef.id !== artifact.definition.programId ||
|
|
86
|
+
input.revisionRef.ownerRepo !== artifact.definition.ownerRepo ||
|
|
87
|
+
hash(input.revisionRef.tenantScope) !== hash(artifact.definition.tenantScope) ||
|
|
88
|
+
input.revisionRef.contentHash !== hash(artifact.definition) ||
|
|
89
|
+
hash(artifact.javascript) !== artifact.definition.compiledHash ||
|
|
90
|
+
hash(artifact.sourceMap) !== artifact.definition.sourceMapHash)
|
|
91
|
+
fail('PROGRAM_READBACK_MISMATCH', 'The returned program does not match the exact requested revision.');
|
|
92
|
+
return {
|
|
93
|
+
subscription: client.runtime.context.subscription,
|
|
94
|
+
contextFingerprint: client.runtime.context.fingerprint,
|
|
95
|
+
revisionRef: input.revisionRef,
|
|
96
|
+
artifact,
|
|
97
|
+
verified: true,
|
|
98
|
+
};
|
|
99
|
+
}
|
|
100
|
+
export async function runProgramRegister(options, supplied) {
|
|
101
|
+
const candidate = PrepareActionProgramRequestSchema.parse(JSON.parse(await readFile(options.file, 'utf8')));
|
|
102
|
+
const { artifact, expectedVersion } = candidate;
|
|
103
|
+
if (hash(artifact.javascript) !== artifact.definition.compiledHash || hash(artifact.sourceMap) !== artifact.definition.sourceMapHash)
|
|
104
|
+
fail('PROGRAM_ARTIFACT_HASH_MISMATCH', 'The artifact code or source map does not match its definition.');
|
|
105
|
+
const client = await clientFor(options, supplied);
|
|
106
|
+
const revisionRef = RevisionRefSchema.parse({
|
|
107
|
+
kind: 'action-program',
|
|
108
|
+
id: artifact.definition.programId,
|
|
109
|
+
ownerRepo: artifact.definition.ownerRepo,
|
|
110
|
+
visibility: 'tenant',
|
|
111
|
+
tenantScope: artifact.definition.tenantScope,
|
|
112
|
+
revision: expectedVersion + 1,
|
|
113
|
+
schemaVersion: 1,
|
|
114
|
+
contentHash: hash(artifact.definition),
|
|
115
|
+
});
|
|
116
|
+
const preview = {
|
|
117
|
+
subscription: client.runtime.context.subscription,
|
|
118
|
+
baseUrl: client.runtime.context.baseUrl,
|
|
119
|
+
contextFingerprint: client.runtime.context.fingerprint,
|
|
120
|
+
revisionRef,
|
|
121
|
+
dryRun: options.dryRun,
|
|
122
|
+
};
|
|
123
|
+
const receipt = {
|
|
124
|
+
state: 'pending',
|
|
125
|
+
contextFingerprint: preview.contextFingerprint,
|
|
126
|
+
candidateHash: hash(candidate),
|
|
127
|
+
revisionRef,
|
|
128
|
+
};
|
|
129
|
+
let existing;
|
|
130
|
+
try {
|
|
131
|
+
existing = JSON.parse(await readFile(options.receipt, 'utf8'));
|
|
132
|
+
}
|
|
133
|
+
catch (error) {
|
|
134
|
+
if (error.code !== 'ENOENT')
|
|
135
|
+
throw error;
|
|
136
|
+
}
|
|
137
|
+
if (existing !== undefined) {
|
|
138
|
+
const parsed = receiptSchema.safeParse(existing);
|
|
139
|
+
if (!parsed.success || hash(parsed.data) !== hash(receipt))
|
|
140
|
+
fail('PROGRAM_RECEIPT_MISMATCH', 'The receipt belongs to another context, candidate, or revision.');
|
|
141
|
+
const actual = await client.read({ revisionRef });
|
|
142
|
+
if (hash(actual) !== hash(artifact))
|
|
143
|
+
fail('PROGRAM_READBACK_MISMATCH', 'The registered artifact differs from the candidate. Retain the receipt and inspect the exact revision.');
|
|
144
|
+
return { ...preview, recoveryOnly: true, verified: true };
|
|
145
|
+
}
|
|
146
|
+
const prepared = await client.prepare(candidate);
|
|
147
|
+
const planHash = hash({ ...candidate, revisionRef });
|
|
148
|
+
if (hash(prepared.revisionRef) !== hash(revisionRef) || prepared.planHash !== planHash)
|
|
149
|
+
fail('PROGRAM_PLAN_MISMATCH', 'Preparation does not match the exact candidate and expected revision.');
|
|
150
|
+
if (options.dryRun)
|
|
151
|
+
return {
|
|
152
|
+
...preview,
|
|
153
|
+
planHash,
|
|
154
|
+
validationCoverage: 'server authority, dependency revisions, artifact hashes, and current program head',
|
|
155
|
+
};
|
|
156
|
+
assertConfirmation({ interactive: Boolean(process.stdin.isTTY), risk: 'privileged', yes: options.yes });
|
|
157
|
+
// Exclusive creation prevents concurrent registrations and recovery never resends a write.
|
|
158
|
+
const file = await open(options.receipt, 'wx', 0o600);
|
|
159
|
+
try {
|
|
160
|
+
await file.writeFile(`${JSON.stringify(receipt)}\n`);
|
|
161
|
+
await file.sync();
|
|
162
|
+
}
|
|
163
|
+
finally {
|
|
164
|
+
await file.close();
|
|
165
|
+
}
|
|
166
|
+
const registered = await client.register({ ...candidate, planHash, idempotencyKey: `program:${planHash}` });
|
|
167
|
+
if (hash(registered.revisionRef) !== hash(revisionRef))
|
|
168
|
+
fail('PROGRAM_READBACK_MISMATCH', 'Registration returned another revision. Retain the receipt and read the expected revision.');
|
|
169
|
+
const actual = await client.read({ revisionRef });
|
|
170
|
+
if (hash(actual) !== hash(artifact))
|
|
171
|
+
fail('PROGRAM_READBACK_MISMATCH', 'The registered artifact differs from the candidate. Retain the receipt and inspect the exact revision.');
|
|
172
|
+
return { ...preview, verified: true };
|
|
173
|
+
}
|
|
174
|
+
//# sourceMappingURL=program.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"program.js","sourceRoot":"","sources":["../../src/declarative/program.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EACL,2BAA2B,EAC3B,iCAAiC,EACjC,kCAAkC,EAClC,8BAA8B,EAC9B,iBAAiB,GAClB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,oBAAoB,IAAI,IAAI,EAAE,MAAM,mCAAmC,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,eAAe,EAAE,gBAAgB,EAAwB,MAAM,wBAAwB,CAAC;AAE3I,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACnF,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;AAChE,MAAM,cAAc,GAAG,kBAAkB,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;AACnG,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC3B,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC9B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,WAAW,EAAE,SAAS;CACvB,CAAC,CAAC;AAIH,SAAS,IAAI,CAAC,IAAY,EAAE,OAAe;IACzC,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,OAAO,aAAa;IACH,OAAO;IAA5B,YAAqB,OAAwB;uBAAxB,OAAO;IAAoB,CAAC;IAEzC,KAAK,CAAC,IAAI,CAAI,MAAuC,EAAE,IAAa,EAAE,MAAiB;QAC7F,MAAM,KAAK,GAAG,MAAM,KAAK,UAAU,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,IAAI,CAAC,OAAO,EACZ;gBACE,EAAE,EAAE,uBAAuB,MAAM,EAAE;gBACnC,OAAO,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;gBACxE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM;gBACnC,WAAW,EAAE;oBACX;wBACE,OAAO,EAAE,mBAAmB;wBAC5B,qBAAqB,EAAE,IAAI;wBAC3B,MAAM,EAAE,MAAM;wBACd,YAAY,EAAE,+CAA+C,MAAM,EAAE;qBACtE;iBACF;aACF,EACD,EAAE,IAAI,EAAE,CACT,CAAC;YACF,IAAI,CAAC;gBACH,OAAO,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,QAAQ,CAAC,6GAA6G,EAAE;oBAChI,KAAK;oBACL,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,+BAA+B;oBAC1E,QAAQ,EAAE,UAAU,CAAC,aAAa;iBACnC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,KAAK;gBACL,KAAK,YAAY,QAAQ;gBACzB,CAAC,CAAC,eAAe,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAE5G,MAAM,IAAI,QAAQ,CAAC,sFAAsF,EAAE;oBACzG,KAAK;oBACL,IAAI,EAAE,0BAA0B;oBAChC,QAAQ,EAAE,UAAU,CAAC,OAAO;iBAC7B,CAAC,CAAC;YACL,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,CAAC,KAAc;QACpB,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iCAAiC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,CAAC;IAC9F,CAAC;IACD,QAAQ,CAAC,KAAc;QACrB,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,kCAAkC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,kBAAkB,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,CAAC,KAAc;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,8BAA8B,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,2BAA2B,CAAC,CAAC;IACrG,CAAC;CACF;AAED,KAAK,UAAU,SAAS,CAAC,OAA+C,EAAE,QAAwB;IAChG,MAAM,MAAM,GACV,QAAQ;QACR,IAAI,aAAa,CAAC,MAAM,mBAAmB,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACtI,mBAAmB,CAAC,MAAM,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAwD,EAAE,QAAwB;IACrH,MAAM,KAAK,GAAG,8BAA8B,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACrG,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,IACE,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,gBAAgB;QAC3C,KAAK,CAAC,WAAW,CAAC,EAAE,KAAK,QAAQ,CAAC,UAAU,CAAC,SAAS;QACtD,KAAK,CAAC,WAAW,CAAC,SAAS,KAAK,QAAQ,CAAC,UAAU,CAAC,SAAS;QAC7D,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC;QAC7E,KAAK,CAAC,WAAW,CAAC,WAAW,KAAK,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC3D,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,UAAU,CAAC,YAAY;QAC9D,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,UAAU,CAAC,aAAa;QAE9D,IAAI,CAAC,2BAA2B,EAAE,mEAAmE,CAAC,CAAC;IACzG,OAAO;QACL,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY;QACjD,kBAAkB,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW;QACtD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,QAAQ;QACR,QAAQ,EAAE,IAAI;KACf,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAgB,EAAE,QAAwB;IACjF,MAAM,SAAS,GAAG,iCAAiC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5G,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,SAAS,CAAC;IAChD,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,UAAU,CAAC,YAAY,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,UAAU,CAAC,aAAa;QAClI,IAAI,CAAC,gCAAgC,EAAE,gEAAgE,CAAC,CAAC;IAC3G,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC;QAC1C,IAAI,EAAE,gBAAgB;QACtB,EAAE,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS;QACjC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS;QACxC,UAAU,EAAE,QAAQ;QACpB,WAAW,EAAE,QAAQ,CAAC,UAAU,CAAC,WAAW;QAC5C,QAAQ,EAAE,eAAe,GAAG,CAAC;QAC7B,aAAa,EAAE,CAAC;QAChB,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;KACvC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG;QACd,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY;QACjD,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO;QACvC,kBAAkB,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW;QACtD,WAAW;QACX,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC;IACF,MAAM,OAAO,GAAG;QACd,KAAK,EAAE,SAAkB;QACzB,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC;QAC9B,WAAW;KACZ,CAAC;IACF,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IACjE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC;YACxD,IAAI,CAAC,0BAA0B,EAAE,iEAAiE,CAAC,CAAC;QACtG,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;QAClD,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC;YACjC,IAAI,CACF,2BAA2B,EAC3B,wGAAwG,CACzG,CAAC;QACJ,OAAO,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5D,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,GAAG,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;IACrD,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ;QACpF,IAAI,CAAC,uBAAuB,EAAE,uEAAuE,CAAC,CAAC;IACzG,IAAI,OAAO,CAAC,MAAM;QAChB,OAAO;YACL,GAAG,OAAO;YACV,QAAQ;YACR,kBAAkB,EAAE,mFAAmF;SACxG,CAAC;IACJ,kBAAkB,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACxG,2FAA2F;IAC3F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,WAAW,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC5G,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,WAAW,CAAC;QACpD,IAAI,CAAC,2BAA2B,EAAE,4FAA4F,CAAC,CAAC;IAClI,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;IAClD,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC;QACjC,IAAI,CACF,2BAA2B,EAC3B,wGAAwG,CACzG,CAAC;IACJ,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AACxC,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/security/redact.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/security/redact.ts"],"names":[],"mappings":"AAwBA,eAAO,MAAM,QAAQ,eAAe,CAAC;AAWrC,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,kBAAwB,GAAG,OAAO,CAoBtF"}
|
package/dist/security/redact.js
CHANGED
|
@@ -1,6 +1,22 @@
|
|
|
1
1
|
const SENSITIVE_KEY = /(authorization|cookie|password|secret|token|api[-_]?key|private[-_]?key)/i;
|
|
2
2
|
const SAFE_TOKEN_KEY = /^(nextPageToken|tokenUsage)$/i;
|
|
3
3
|
const BEARER_VALUE = /\bBearer\s+[A-Za-z0-9._~+/=-]+/gi;
|
|
4
|
+
function isDesignTokenReferences(key, value) {
|
|
5
|
+
if (!Array.isArray(value))
|
|
6
|
+
return false;
|
|
7
|
+
if (key === 'tokenRefs')
|
|
8
|
+
return value.every((item) => typeof item === 'string' && /^semantic\.[a-zA-Z0-9_.-]+$/.test(item));
|
|
9
|
+
return (key === 'tokenRevisionRefs' &&
|
|
10
|
+
value.every((item) => item !== null &&
|
|
11
|
+
typeof item === 'object' &&
|
|
12
|
+
item.kind === 'design-token' &&
|
|
13
|
+
typeof item.id === 'string' &&
|
|
14
|
+
typeof item.ownerRepo === 'string' &&
|
|
15
|
+
Number.isSafeInteger(item.revision) &&
|
|
16
|
+
item.revision > 0 &&
|
|
17
|
+
typeof item.contentHash === 'string' &&
|
|
18
|
+
/^[a-f0-9]{64}$/.test(item.contentHash)));
|
|
19
|
+
}
|
|
4
20
|
export const REDACTED = '[REDACTED]';
|
|
5
21
|
function redactSensitiveField(value) {
|
|
6
22
|
// Contract/status fields such as `secretRemoved: false` are not Secrets. Keep
|
|
@@ -29,7 +45,10 @@ export function redactValue(value, ancestors = new WeakSet()) {
|
|
|
29
45
|
return value.map((item) => redactValue(item, ancestors));
|
|
30
46
|
const output = {};
|
|
31
47
|
for (const [key, child] of Object.entries(value)) {
|
|
32
|
-
output[key] =
|
|
48
|
+
output[key] =
|
|
49
|
+
SENSITIVE_KEY.test(key) && !SAFE_TOKEN_KEY.test(key) && !isDesignTokenReferences(key, child)
|
|
50
|
+
? redactSensitiveField(child)
|
|
51
|
+
: redactValue(child, ancestors);
|
|
33
52
|
}
|
|
34
53
|
return output;
|
|
35
54
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/security/redact.ts"],"names":[],"mappings":"AAAA,MAAM,aAAa,GAAG,2EAA2E,CAAC;AAClG,MAAM,cAAc,GAAG,+BAA+B,CAAC;AACvD,MAAM,YAAY,GAAG,kCAAkC,CAAC;AAExD,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAErC,SAAS,oBAAoB,CAAC,KAAc;IAC1C,8EAA8E;IAC9E,yEAAyE;IACzE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5F,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACzG,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,UAAU,QAAQ,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc,EAAE,SAAS,GAAG,IAAI,OAAO,EAAU;IAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IAE9C,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QAEnF,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,CAAC,GAAG,CAAC,
|
|
1
|
+
{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/security/redact.ts"],"names":[],"mappings":"AAAA,MAAM,aAAa,GAAG,2EAA2E,CAAC;AAClG,MAAM,cAAc,GAAG,+BAA+B,CAAC;AACvD,MAAM,YAAY,GAAG,kCAAkC,CAAC;AAExD,SAAS,uBAAuB,CAAC,GAAW,EAAE,KAAc;IAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,GAAG,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5H,OAAO,CACL,GAAG,KAAK,mBAAmB;QAC3B,KAAK,CAAC,KAAK,CACT,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,KAAK,IAAI;YACb,OAAO,IAAI,KAAK,QAAQ;YACxB,IAAI,CAAC,IAAI,KAAK,cAAc;YAC5B,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ;YAC3B,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;YAClC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC;YACnC,IAAI,CAAC,QAAQ,GAAG,CAAC;YACjB,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;YACpC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAC1C,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAErC,SAAS,oBAAoB,CAAC,KAAc;IAC1C,8EAA8E;IAC9E,yEAAyE;IACzE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5F,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACzG,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,UAAU,QAAQ,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc,EAAE,SAAS,GAAG,IAAI,OAAO,EAAU;IAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IAE9C,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QAEnF,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,CAAC,GAAG,CAAC;gBACT,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,GAAG,EAAE,KAAK,CAAC;oBAC1F,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC;oBAC7B,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC"}
|
package/oclif.manifest.json
CHANGED
|
@@ -16600,6 +16600,174 @@
|
|
|
16600
16600
|
],
|
|
16601
16601
|
"strict": true
|
|
16602
16602
|
},
|
|
16603
|
+
"page:program:read": {
|
|
16604
|
+
"aliases": [],
|
|
16605
|
+
"args": {},
|
|
16606
|
+
"description": "Read and verify an exact registered ActionProgram revision without executing it.",
|
|
16607
|
+
"enableJsonFlag": false,
|
|
16608
|
+
"flags": {
|
|
16609
|
+
"file": {
|
|
16610
|
+
"hasDynamicHelp": false,
|
|
16611
|
+
"multiple": false,
|
|
16612
|
+
"name": "file",
|
|
16613
|
+
"required": true,
|
|
16614
|
+
"summary": "ReadActionProgramRequest JSON containing the exact revisionRef",
|
|
16615
|
+
"type": "option"
|
|
16616
|
+
},
|
|
16617
|
+
"jq": {
|
|
16618
|
+
"char": "q",
|
|
16619
|
+
"hasDynamicHelp": false,
|
|
16620
|
+
"multiple": false,
|
|
16621
|
+
"name": "jq",
|
|
16622
|
+
"summary": "Filter the JSON result with a jq expression",
|
|
16623
|
+
"type": "option"
|
|
16624
|
+
},
|
|
16625
|
+
"output": {
|
|
16626
|
+
"default": "json",
|
|
16627
|
+
"hasDynamicHelp": false,
|
|
16628
|
+
"multiple": false,
|
|
16629
|
+
"name": "output",
|
|
16630
|
+
"options": [
|
|
16631
|
+
"json",
|
|
16632
|
+
"pretty",
|
|
16633
|
+
"table",
|
|
16634
|
+
"ndjson",
|
|
16635
|
+
"csv",
|
|
16636
|
+
"text"
|
|
16637
|
+
],
|
|
16638
|
+
"summary": "Output format",
|
|
16639
|
+
"type": "option"
|
|
16640
|
+
},
|
|
16641
|
+
"subscription": {
|
|
16642
|
+
"hasDynamicHelp": false,
|
|
16643
|
+
"multiple": false,
|
|
16644
|
+
"name": "subscription",
|
|
16645
|
+
"required": true,
|
|
16646
|
+
"type": "option"
|
|
16647
|
+
},
|
|
16648
|
+
"team": {
|
|
16649
|
+
"hasDynamicHelp": false,
|
|
16650
|
+
"multiple": false,
|
|
16651
|
+
"name": "team",
|
|
16652
|
+
"required": true,
|
|
16653
|
+
"summary": "Verified authoring Team context",
|
|
16654
|
+
"type": "option"
|
|
16655
|
+
},
|
|
16656
|
+
"yes": {
|
|
16657
|
+
"allowNo": false,
|
|
16658
|
+
"char": "y",
|
|
16659
|
+
"name": "yes",
|
|
16660
|
+
"summary": "Confirm destructive or privileged operations",
|
|
16661
|
+
"type": "boolean"
|
|
16662
|
+
}
|
|
16663
|
+
},
|
|
16664
|
+
"hasDynamicHelp": false,
|
|
16665
|
+
"hiddenAliases": [],
|
|
16666
|
+
"id": "page:program:read",
|
|
16667
|
+
"isESM": true,
|
|
16668
|
+
"pluginAlias": "@inf-monkeys-tech/monkeys-cli",
|
|
16669
|
+
"pluginName": "@inf-monkeys-tech/monkeys-cli",
|
|
16670
|
+
"pluginType": "core",
|
|
16671
|
+
"relativePath": [
|
|
16672
|
+
"dist",
|
|
16673
|
+
"commands",
|
|
16674
|
+
"page",
|
|
16675
|
+
"program",
|
|
16676
|
+
"read.js"
|
|
16677
|
+
],
|
|
16678
|
+
"strict": true
|
|
16679
|
+
},
|
|
16680
|
+
"page:program:register": {
|
|
16681
|
+
"aliases": [],
|
|
16682
|
+
"args": {},
|
|
16683
|
+
"description": "Prepare and register an exact ActionProgram artifact, retaining a durable receipt for read-only recovery.",
|
|
16684
|
+
"enableJsonFlag": false,
|
|
16685
|
+
"flags": {
|
|
16686
|
+
"dry-run": {
|
|
16687
|
+
"allowNo": false,
|
|
16688
|
+
"name": "dry-run",
|
|
16689
|
+
"summary": "Validate the exact candidate with the server without registration",
|
|
16690
|
+
"type": "boolean"
|
|
16691
|
+
},
|
|
16692
|
+
"file": {
|
|
16693
|
+
"hasDynamicHelp": false,
|
|
16694
|
+
"multiple": false,
|
|
16695
|
+
"name": "file",
|
|
16696
|
+
"required": true,
|
|
16697
|
+
"summary": "PrepareActionProgramRequest JSON with artifact and inspected expectedVersion",
|
|
16698
|
+
"type": "option"
|
|
16699
|
+
},
|
|
16700
|
+
"jq": {
|
|
16701
|
+
"char": "q",
|
|
16702
|
+
"hasDynamicHelp": false,
|
|
16703
|
+
"multiple": false,
|
|
16704
|
+
"name": "jq",
|
|
16705
|
+
"summary": "Filter the JSON result with a jq expression",
|
|
16706
|
+
"type": "option"
|
|
16707
|
+
},
|
|
16708
|
+
"output": {
|
|
16709
|
+
"default": "json",
|
|
16710
|
+
"hasDynamicHelp": false,
|
|
16711
|
+
"multiple": false,
|
|
16712
|
+
"name": "output",
|
|
16713
|
+
"options": [
|
|
16714
|
+
"json",
|
|
16715
|
+
"pretty",
|
|
16716
|
+
"table",
|
|
16717
|
+
"ndjson",
|
|
16718
|
+
"csv",
|
|
16719
|
+
"text"
|
|
16720
|
+
],
|
|
16721
|
+
"summary": "Output format",
|
|
16722
|
+
"type": "option"
|
|
16723
|
+
},
|
|
16724
|
+
"receipt": {
|
|
16725
|
+
"hasDynamicHelp": false,
|
|
16726
|
+
"multiple": false,
|
|
16727
|
+
"name": "receipt",
|
|
16728
|
+
"required": true,
|
|
16729
|
+
"summary": "Private receipt path; existing receipts trigger readback only",
|
|
16730
|
+
"type": "option"
|
|
16731
|
+
},
|
|
16732
|
+
"subscription": {
|
|
16733
|
+
"hasDynamicHelp": false,
|
|
16734
|
+
"multiple": false,
|
|
16735
|
+
"name": "subscription",
|
|
16736
|
+
"required": true,
|
|
16737
|
+
"type": "option"
|
|
16738
|
+
},
|
|
16739
|
+
"team": {
|
|
16740
|
+
"hasDynamicHelp": false,
|
|
16741
|
+
"multiple": false,
|
|
16742
|
+
"name": "team",
|
|
16743
|
+
"required": true,
|
|
16744
|
+
"summary": "Verified authoring Team context",
|
|
16745
|
+
"type": "option"
|
|
16746
|
+
},
|
|
16747
|
+
"yes": {
|
|
16748
|
+
"allowNo": false,
|
|
16749
|
+
"char": "y",
|
|
16750
|
+
"name": "yes",
|
|
16751
|
+
"summary": "Confirm destructive or privileged operations",
|
|
16752
|
+
"type": "boolean"
|
|
16753
|
+
}
|
|
16754
|
+
},
|
|
16755
|
+
"hasDynamicHelp": false,
|
|
16756
|
+
"hiddenAliases": [],
|
|
16757
|
+
"id": "page:program:register",
|
|
16758
|
+
"isESM": true,
|
|
16759
|
+
"pluginAlias": "@inf-monkeys-tech/monkeys-cli",
|
|
16760
|
+
"pluginName": "@inf-monkeys-tech/monkeys-cli",
|
|
16761
|
+
"pluginType": "core",
|
|
16762
|
+
"relativePath": [
|
|
16763
|
+
"dist",
|
|
16764
|
+
"commands",
|
|
16765
|
+
"page",
|
|
16766
|
+
"program",
|
|
16767
|
+
"register.js"
|
|
16768
|
+
],
|
|
16769
|
+
"strict": true
|
|
16770
|
+
},
|
|
16603
16771
|
"page:publish": {
|
|
16604
16772
|
"aliases": [],
|
|
16605
16773
|
"args": {
|
|
@@ -20184,5 +20352,5 @@
|
|
|
20184
20352
|
"strict": true
|
|
20185
20353
|
}
|
|
20186
20354
|
},
|
|
20187
|
-
"version": "0.12.
|
|
20355
|
+
"version": "0.12.44"
|
|
20188
20356
|
}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@inf-monkeys-tech/monkeys-cli",
|
|
3
|
-
"version": "0.12.
|
|
3
|
+
"version": "0.12.44",
|
|
4
4
|
"packageManager": "bun@1.3.14",
|
|
5
5
|
"description": "Monkeys command-line client for AI agents, automation, and interactive use",
|
|
6
6
|
"type": "module",
|
|
@@ -150,5 +150,5 @@
|
|
|
150
150
|
"publishConfig": {
|
|
151
151
|
"access": "public"
|
|
152
152
|
},
|
|
153
|
-
"monkeysReleaseCommit": "
|
|
153
|
+
"monkeysReleaseCommit": "65a2bb4ab7b439934b7c714c215f97477939f16e"
|
|
154
154
|
}
|