@kici-dev/engine 0.7.0 → 0.9.0

package/dist/protocol/messages/oidc-mint.js

@@ -1,62 +0,0 @@
-import "../../rolldown-runtime-ClRpJifh.js";
-import { AttestationOrigin } from "../../provenance/attestation-origin.js";
-import { z } from "zod";
-//#region src/protocol/messages/oidc-mint.ts
-/**
-* @deprecated The `oidc.mint.*` RPC pair (Platform-rooted identity mint) is
-* hard-deprecated in favor of orchestrator-owned signing. It is kept
-* wire-compatible for the mixed-version rollout window and removed at v1.0; a
-* fresh orchestrator with its own signer never sends it. See
-* docs/user/deprecations.md.
-*/
-/**
-* Error discriminator for a failed provenance mint, carried on
-* `oidc.mint.response.error.code`. Mirrors the three orchestrator-side error
-* classes that consume it:
-*   rejected    -> run/job missing or job terminal (MintRejectedError)
-*   unavailable -> the Platform signer/issuer is not configured (MintUnavailableError)
-*   failed      -> any other Platform-side failure (MintRelayError)
-*/
-const OidcMintErrorCode = z.enum([
-	"rejected",
-	"unavailable",
-	"failed"
-]);
-/** orchestrator -> Platform: request a short-lived OIDC ID token for a job. */
-const oidcMintRequestSchema = z.object({
-	type: z.literal("oidc.mint.request"),
-	requestId: z.string().min(1),
-	orchestratorId: z.string().min(1),
-	runId: z.string().min(1),
-	jobId: z.string().min(1),
-	audience: z.string().min(1).max(255),
-	/**
-	* Deferred fulfilment (attest-later): when true, the mint knowingly targets a
-	* completed job and binds `statementHash` + `origin` into the token. Absent
-	* for the live agent path. `orgId` is never on the wire — the Platform derives
-	* it from the authenticated connection.
-	*/
-	deferred: z.literal(true).optional(),
-	/** SHA-256 of the frozen DSSE statement the deferred token binds to. */
-	statementHash: z.string().optional(),
-	/** Mint-timing origin for a deferred fulfilment (never `live` here). */
-	origin: AttestationOrigin.extract(["deferred", "offline-backfill"]).optional()
-});
-/** Platform -> orchestrator: the minted token or a typed error (exactly one). */
-const oidcMintResponseSchema = z.object({
-	type: z.literal("oidc.mint.response"),
-	requestId: z.string().min(1),
-	result: z.object({
-		token: z.string().min(1),
-		expiresIn: z.number().int().positive(),
-		jti: z.string().min(1)
-	}).optional(),
-	error: z.object({
-		code: OidcMintErrorCode,
-		message: z.string()
-	}).optional()
-}).refine((m) => m.result === void 0 !== (m.error === void 0), { message: "oidc.mint.response must carry exactly one of result | error" });
-//#endregion
-export { OidcMintErrorCode, oidcMintRequestSchema, oidcMintResponseSchema };
-
-//# sourceMappingURL=oidc-mint.js.map

package/dist/provider/contributor-resolver.d.ts

@@ -1,30 +0,0 @@
-/**
- * ContributorResolver interface for determining contributor permissions.
- *
- * Deprecated in favour of ref-based trust: the whole interface, including the
- * `ContributorPermission` / `ContributorInfo` shapes it carries, is retained
- * for compatibility and has no caller in this repo.
- */
-import type { ProviderType } from './types.js';
-/** Contributor's permission level on a repository. */
-export type ContributorPermission = 'admin' | 'write' | 'read' | 'none';
-/** Information about a contributor and their relationship to a PR. */
-export interface ContributorInfo {
-    username: string;
-    permission: ContributorPermission;
-    /** Whether the PR comes from a fork */
-    isForkPR: boolean;
-}
-/**
- * Resolves contributor information from a git hosting provider.
- *
- * @deprecated Trust is derived from the git ref, not from the contributor's
- * permission level, so nothing in the webhook pipeline calls a resolver. The
- * type stays exported for wire compatibility with external implementations and
- * is removed at v1.0.0.
- */
-export interface ContributorResolver {
-    readonly provider: ProviderType;
-    resolveContributor(repoIdentifier: string, username: string, credentials: unknown): Promise<ContributorInfo>;
-}
-//# sourceMappingURL=contributor-resolver.d.ts.map

package/dist/provider/contributor-resolver.js

@@ -1,2 +0,0 @@
-import "../rolldown-runtime-ClRpJifh.js";
-export {};