@knpkv/herdr-fleet 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 knpkv
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,25 @@
+# `@knpkv/herdr-fleet`
+
+Fleet job protocol and local decision authority for Herdr hosts.
+
+The host that receives a job owns its durable SQLite record and every state transition. Risky work starts as `pending_approval`; approval is bound to the job's canonical hash and one-time nonce. Rejection and expiry clear that nonce. Safe work queues immediately. Recovery resumes queued jobs and expires stale approvals without moving authority to a coordinator.
+
+`JobRecord.hash` persists a lowercase hex SHA-256 digest. Its canonical JSON input contains the host, actor, payload discriminant, and every identity field for that variant: `ref` for `nix.apply`; `repository`, `prompt`, `mode`, and the optional `channel` for `agent.delegate`; `session` and `message` for `agent.message`; no extra field for `nix.check` or `browser.mcp.recover`. Raw credentials and provider secrets never enter this hash or the persisted job payload.
+
+The package exports:
+
+- Schema contracts for configuration, jobs, status, and agent inventory
+- `AgentConnectTarget`, the canonical sanitized Connect URL for one exact host and stable agent ID
+- `JobStore`, the local SQLite persistence boundary
+- `makeFleetService`, the approval and execution state machine
+- typed validation, storage, approval, authorization, and operation errors
+
+`HostConfiguration.pushAllowedOrigins` is the explicit exact-origin allowlist used by the approval runtime for browser push delivery. It has no implicit defaults; deployment configuration owns the accepted push services.
+
+`HostConfiguration.machines` stores `{ host, nodeId }` for every fleet machine. Both fields must be unique. Tailscale adapters use the stable node ID as authority and treat the hostname only as a consistency check.
+
+Callers provide `HostOperations`. This keeps Nix, Git, and Herdr command execution out of the protocol package.
+
+When an `agent.delegate` worker starts, `JobRecord` persists its exact identity and matching `AgentConnectTarget` in the same transition. Records before start, including pending, rejected, expired, and failed-before-start jobs, contain neither field. Terminal observation time remains separate and appears only after that exact started job succeeds or fails.
+
+`agent.delegate.prompt` and `agent.message.message` are capped at the exported `jobTextMaxLength` (16 KiB). Repository, session, and ref fields have smaller identifier/path bounds. These limits keep every schema-valid payload executable through the host command adapter without crossing the operating system's single-argument limit after JSON escaping and UTF-8 encoding.

package/dist/config.d.ts

@@ -0,0 +1,36 @@
+import { Effect, FileSystem } from "effect";
+import { FleetValidationError } from "./errors.js";
+export declare const loadConfiguration: (path: string) => Effect.Effect<{
+    readonly host: string;
+    readonly repository: string;
+    readonly stateDirectory: string;
+    readonly crossHost: boolean;
+    readonly port: number;
+    readonly localPort: number;
+    readonly approvalPort: number;
+    readonly allowedUsers: readonly string[];
+    readonly approvalNodes: readonly string[];
+    readonly machines: readonly {
+        readonly host: string;
+        readonly nodeId: string;
+    }[];
+    readonly applyMachines: readonly string[];
+    readonly checkCommand: readonly string[];
+    readonly applyCommand: readonly string[] | null;
+    readonly browserMcpRecoverCommand: readonly string[] | null;
+    readonly coordinatorCommand: readonly string[];
+    readonly herdrCommand: string;
+    readonly tailscaleCommand: string;
+    readonly approvalTls: {
+        readonly certificatePath: string;
+        readonly privateKeyPath: string;
+    } | null;
+    readonly approvalHub: {
+        readonly host: string;
+        readonly nodeId: string;
+        readonly url: string;
+    };
+    readonly pushAllowedOrigins: readonly string[];
+    readonly pushSubject: string;
+}, FleetValidationError, FileSystem.FileSystem>;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAU,MAAM,QAAQ,CAAA;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAGlD,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+CA4B7B,CAAA"}

package/dist/config.js

@@ -0,0 +1,21 @@
+import { Effect, FileSystem, Schema } from "effect";
+import { FleetValidationError } from "./errors.js";
+import { HostConfiguration } from "./model.js";
+export const loadConfiguration = Effect.fn("FleetConfiguration.load")(function* (path) {
+    const fileSystem = yield* FileSystem.FileSystem;
+    const text = yield* fileSystem.readFileString(path).pipe(Effect.mapError((cause) => new FleetValidationError({
+        detail: `cannot read ${path}: ${String(cause)}`
+    })));
+    const unknown = yield* Effect.try({
+        try: () => JSON.parse(text),
+        catch: (cause) => new FleetValidationError({
+            detail: `invalid JSON in ${path}: ${String(cause)}`
+        })
+    });
+    return yield* Schema.decodeUnknownEffect(HostConfiguration, {
+        onExcessProperty: "error"
+    })(unknown).pipe(Effect.mapError((error) => new FleetValidationError({
+        detail: `invalid fleet configuration: ${String(error)}`
+    })));
+});
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAE9C,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,yBAAyB,CAAC,CACnE,QAAQ,CAAC,EAAC,IAAY;IACpB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAA;IAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,CACtD,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,IAAI,oBAAoB,CAAC;QACvB,MAAM,EAAE,eAAe,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE;KAChD,CAAC,CACH,CACF,CAAA;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QAChC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAC3B,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,IAAI,oBAAoB,CAAC;YACvB,MAAM,EAAE,mBAAmB,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE;SACpD,CAAC;KACL,CAAC,CAAA;IACF,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,iBAAiB,EAAE;QAC1D,gBAAgB,EAAE,OAAO;KAC1B,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CACd,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,oBAAoB,CAAC;QACvB,MAAM,EAAE,gCAAgC,MAAM,CAAC,KAAK,CAAC,EAAE;KACxD,CAAC,CACL,CACF,CAAA;AACH,CAAC,CACF,CAAA"}

package/dist/errors.d.ts

@@ -0,0 +1,93 @@
+import { Schema } from "effect";
+declare const FleetValidationError_base: Schema.Class<FleetValidationError, Schema.TaggedStruct<"FleetValidationError", {
+    readonly detail: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class FleetValidationError extends FleetValidationError_base {
+}
+declare const FleetAuthorizationError_base: Schema.Class<FleetAuthorizationError, Schema.TaggedStruct<"FleetAuthorizationError", {
+    readonly actor: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class FleetAuthorizationError extends FleetAuthorizationError_base {
+}
+declare const FleetStoreError_base: Schema.Class<FleetStoreError, Schema.TaggedStruct<"FleetStoreError", {
+    readonly operation: Schema.String;
+    readonly detail: Schema.String;
+    readonly cause: Schema.Defect;
+}>, import("effect/Cause").YieldableError>;
+export declare class FleetStoreError extends FleetStoreError_base {
+}
+declare const FleetTransitionConflictError_base: Schema.Class<FleetTransitionConflictError, Schema.TaggedStruct<"FleetTransitionConflictError", {
+    readonly jobId: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class FleetTransitionConflictError extends FleetTransitionConflictError_base {
+}
+declare const FleetJobConflictError_base: Schema.Class<FleetJobConflictError, Schema.TaggedStruct<"FleetJobConflictError", {
+    readonly jobId: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class FleetJobConflictError extends FleetJobConflictError_base {
+}
+declare const FleetJobNotFoundError_base: Schema.Class<FleetJobNotFoundError, Schema.TaggedStruct<"FleetJobNotFoundError", {
+    readonly jobId: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class FleetJobNotFoundError extends FleetJobNotFoundError_base {
+}
+declare const FleetApprovalError_base: Schema.Class<FleetApprovalError, Schema.TaggedStruct<"FleetApprovalError", {
+    readonly jobId: Schema.String;
+    readonly detail: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class FleetApprovalError extends FleetApprovalError_base {
+}
+declare const FleetOperationError_base: Schema.Class<FleetOperationError, Schema.TaggedStruct<"FleetOperationError", {
+    readonly operation: Schema.String;
+    readonly detail: Schema.String;
+    readonly cause: Schema.Defect;
+}>, import("effect/Cause").YieldableError>;
+export declare class FleetOperationError extends FleetOperationError_base {
+}
+declare const FleetResponseBodyError_base: Schema.Class<FleetResponseBodyError, Schema.TaggedStruct<"FleetResponseBodyError", {
+    readonly cause: Schema.Defect;
+    readonly detail: Schema.String;
+    readonly reason: Schema.Literals<readonly ["decode", "too_large", "transport"]>;
+}>, import("effect/Cause").YieldableError>;
+export declare class FleetResponseBodyError extends FleetResponseBodyError_base {
+}
+declare const PeerPendingTransportError_base: Schema.Class<PeerPendingTransportError, Schema.TaggedStruct<"PeerPendingTransportError", {
+    readonly host: Schema.String;
+    readonly detail: Schema.String;
+    readonly cause: Schema.Defect;
+}>, import("effect/Cause").YieldableError>;
+export declare class PeerPendingTransportError extends PeerPendingTransportError_base {
+}
+declare const PeerPendingStatusError_base: Schema.Class<PeerPendingStatusError, Schema.TaggedStruct<"PeerPendingStatusError", {
+    readonly host: Schema.String;
+    readonly status: Schema.Number;
+}>, import("effect/Cause").YieldableError>;
+export declare class PeerPendingStatusError extends PeerPendingStatusError_base {
+}
+declare const PeerPendingDecodeError_base: Schema.Class<PeerPendingDecodeError, Schema.TaggedStruct<"PeerPendingDecodeError", {
+    readonly host: Schema.String;
+    readonly detail: Schema.String;
+    readonly cause: Schema.Defect;
+}>, import("effect/Cause").YieldableError>;
+export declare class PeerPendingDecodeError extends PeerPendingDecodeError_base {
+}
+declare const PeerPendingHostMismatchError_base: Schema.Class<PeerPendingHostMismatchError, Schema.TaggedStruct<"PeerPendingHostMismatchError", {
+    readonly expectedHost: Schema.String;
+    readonly receivedHost: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class PeerPendingHostMismatchError extends PeerPendingHostMismatchError_base {
+}
+declare const PeerPendingTimeoutError_base: Schema.Class<PeerPendingTimeoutError, Schema.TaggedStruct<"PeerPendingTimeoutError", {
+    readonly host: Schema.String;
+    readonly timeoutMs: Schema.Number;
+}>, import("effect/Cause").YieldableError>;
+export declare class PeerPendingTimeoutError extends PeerPendingTimeoutError_base {
+}
+declare const PeerPendingUnavailableError_base: Schema.Class<PeerPendingUnavailableError, Schema.TaggedStruct<"PeerPendingUnavailableError", {
+    readonly host: Schema.String;
+    readonly reason: Schema.Literals<readonly ["offline", "unavailable"]>;
+}>, import("effect/Cause").YieldableError>;
+export declare class PeerPendingUnavailableError extends PeerPendingUnavailableError_base {
+}
+export {};
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;;;;AAE/B,qBAAa,oBAAqB,SAAQ,yBAGzC;CAAG;;;;AAEJ,qBAAa,uBAAwB,SAAQ,4BAG5C;CAAG;;;;;;AAEJ,qBAAa,eAAgB,SAAQ,oBAOpC;CAAG;;;;AAEJ,qBAAa,4BAA6B,SAAQ,iCAGjD;CAAG;;;;AAEJ,qBAAa,qBAAsB,SAAQ,0BAG1C;CAAG;;;;AAEJ,qBAAa,qBAAsB,SAAQ,0BAG1C;CAAG;;;;;AAEJ,qBAAa,kBAAmB,SAAQ,uBAGvC;CAAG;;;;;;AAEJ,qBAAa,mBAAoB,SAAQ,wBAOxC;CAAG;;;;;;AAEJ,qBAAa,sBAAuB,SAAQ,2BAO3C;CAAG;;;;;;AAEJ,qBAAa,yBAA0B,SAAQ,8BAO9C;CAAG;;;;;AAEJ,qBAAa,sBAAuB,SAAQ,2BAG3C;CAAG;;;;;;AAEJ,qBAAa,sBAAuB,SAAQ,2BAO3C;CAAG;;;;;AAEJ,qBAAa,4BAA6B,SAAQ,iCAGjD;CAAG;;;;;AAEJ,qBAAa,uBAAwB,SAAQ,4BAG5C;CAAG;;;;;AAEJ,qBAAa,2BAA4B,SAAQ,gCAMhD;CAAG"}

package/dist/errors.js

@@ -0,0 +1,55 @@
+import { Schema } from "effect";
+export class FleetValidationError extends Schema.TaggedError()("FleetValidationError", { detail: Schema.String }) {
+}
+export class FleetAuthorizationError extends Schema.TaggedError()("FleetAuthorizationError", { actor: Schema.String }) {
+}
+export class FleetStoreError extends Schema.TaggedError()("FleetStoreError", {
+    operation: Schema.String,
+    detail: Schema.String,
+    cause: Schema.Defect()
+}) {
+}
+export class FleetTransitionConflictError extends Schema.TaggedError()("FleetTransitionConflictError", { jobId: Schema.String }) {
+}
+export class FleetJobConflictError extends Schema.TaggedError()("FleetJobConflictError", { jobId: Schema.String }) {
+}
+export class FleetJobNotFoundError extends Schema.TaggedError()("FleetJobNotFoundError", { jobId: Schema.String }) {
+}
+export class FleetApprovalError extends Schema.TaggedError()("FleetApprovalError", { jobId: Schema.String, detail: Schema.String }) {
+}
+export class FleetOperationError extends Schema.TaggedError()("FleetOperationError", {
+    operation: Schema.String,
+    detail: Schema.String,
+    cause: Schema.Defect()
+}) {
+}
+export class FleetResponseBodyError extends Schema.TaggedError()("FleetResponseBodyError", {
+    cause: Schema.Defect(),
+    detail: Schema.String,
+    reason: Schema.Literals(["decode", "too_large", "transport"])
+}) {
+}
+export class PeerPendingTransportError extends Schema.TaggedError()("PeerPendingTransportError", {
+    host: Schema.String,
+    detail: Schema.String,
+    cause: Schema.Defect()
+}) {
+}
+export class PeerPendingStatusError extends Schema.TaggedError()("PeerPendingStatusError", { host: Schema.String, status: Schema.Number }) {
+}
+export class PeerPendingDecodeError extends Schema.TaggedError()("PeerPendingDecodeError", {
+    host: Schema.String,
+    detail: Schema.String,
+    cause: Schema.Defect()
+}) {
+}
+export class PeerPendingHostMismatchError extends Schema.TaggedError()("PeerPendingHostMismatchError", { expectedHost: Schema.String, receivedHost: Schema.String }) {
+}
+export class PeerPendingTimeoutError extends Schema.TaggedError()("PeerPendingTimeoutError", { host: Schema.String, timeoutMs: Schema.Number }) {
+}
+export class PeerPendingUnavailableError extends Schema.TaggedError()("PeerPendingUnavailableError", {
+    host: Schema.String,
+    reason: Schema.Literals(["offline", "unavailable"])
+}) {
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,MAAM,OAAO,oBAAqB,SAAQ,MAAM,CAAC,WAAW,EAAwB,CAClF,sBAAsB,EACtB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAC1B;CAAG;AAEJ,MAAM,OAAO,uBAAwB,SAAQ,MAAM,CAAC,WAAW,EAA2B,CACxF,yBAAyB,EACzB,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CACzB;CAAG;AAEJ,MAAM,OAAO,eAAgB,SAAQ,MAAM,CAAC,WAAW,EAAmB,CACxE,iBAAiB,EACjB;IACE,SAAS,EAAE,MAAM,CAAC,MAAM;IACxB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;CACvB,CACF;CAAG;AAEJ,MAAM,OAAO,4BAA6B,SAAQ,MAAM,CAAC,WAAW,EAAgC,CAClG,8BAA8B,EAC9B,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CACzB;CAAG;AAEJ,MAAM,OAAO,qBAAsB,SAAQ,MAAM,CAAC,WAAW,EAAyB,CACpF,uBAAuB,EACvB,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CACzB;CAAG;AAEJ,MAAM,OAAO,qBAAsB,SAAQ,MAAM,CAAC,WAAW,EAAyB,CACpF,uBAAuB,EACvB,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CACzB;CAAG;AAEJ,MAAM,OAAO,kBAAmB,SAAQ,MAAM,CAAC,WAAW,EAAsB,CAC9E,oBAAoB,EACpB,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAChD;CAAG;AAEJ,MAAM,OAAO,mBAAoB,SAAQ,MAAM,CAAC,WAAW,EAAuB,CAChF,qBAAqB,EACrB;IACE,SAAS,EAAE,MAAM,CAAC,MAAM;IACxB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;CACvB,CACF;CAAG;AAEJ,MAAM,OAAO,sBAAuB,SAAQ,MAAM,CAAC,WAAW,EAA0B,CACtF,wBAAwB,EACxB;IACE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;IACtB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;CAC9D,CACF;CAAG;AAEJ,MAAM,OAAO,yBAA0B,SAAQ,MAAM,CAAC,WAAW,EAA6B,CAC5F,2BAA2B,EAC3B;IACE,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;CACvB,CACF;CAAG;AAEJ,MAAM,OAAO,sBAAuB,SAAQ,MAAM,CAAC,WAAW,EAA0B,CACtF,wBAAwB,EACxB,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAC/C;CAAG;AAEJ,MAAM,OAAO,sBAAuB,SAAQ,MAAM,CAAC,WAAW,EAA0B,CACtF,wBAAwB,EACxB;IACE,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;CACvB,CACF;CAAG;AAEJ,MAAM,OAAO,4BAA6B,SAAQ,MAAM,CAAC,WAAW,EAAgC,CAClG,8BAA8B,EAC9B,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,CAC7D;CAAG;AAEJ,MAAM,OAAO,uBAAwB,SAAQ,MAAM,CAAC,WAAW,EAA2B,CACxF,yBAAyB,EACzB,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,CAClD;CAAG;AAEJ,MAAM,OAAO,2BAA4B,SAAQ,MAAM,CAAC,WAAW,EAA+B,CAChG,6BAA6B,EAC7B;IACE,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;CACpD,CACF;CAAG"}

package/dist/hash.d.ts

@@ -0,0 +1,21 @@
+import { Crypto, Effect } from "effect";
+import { FleetOperationError } from "./errors.js";
+export declare const jobHash: (host: string, actor: string, payload: {
+    readonly kind: "nix.check";
+} | {
+    readonly kind: "nix.apply";
+    readonly ref: string;
+} | {
+    readonly kind: "agent.delegate";
+    readonly repository: string;
+    readonly prompt: string;
+    readonly mode: "consult" | "review" | "work";
+    readonly channel?: "coordinator_chat";
+} | {
+    readonly kind: "agent.message";
+    readonly session: string;
+    readonly message: string;
+} | {
+    readonly kind: "browser.mcp.recover";
+}) => Effect.Effect<string, FleetOperationError, Crypto.Crypto>;
+//# sourceMappingURL=hash.d.ts.map

package/dist/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../src/hash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAY,MAAM,QAAQ,CAAA;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAsBjD,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;+DAkBlB,CAAA"}

package/dist/hash.js

@@ -0,0 +1,28 @@
+import { Crypto, Effect, Encoding } from "effect";
+import { FleetOperationError } from "./errors.js";
+const text = (value) => JSON.stringify(value);
+const canonicalPayload = (payload) => {
+    switch (payload.kind) {
+        case "browser.mcp.recover":
+            return `{"kind":${text(payload.kind)}}`;
+        case "nix.check":
+            return `{"kind":${text(payload.kind)}}`;
+        case "nix.apply":
+            return `{"kind":${text(payload.kind)},"ref":${text(payload.ref)}}`;
+        case "agent.delegate":
+            return `{"channel":${payload.channel === undefined ? "null" : text(payload.channel)},"kind":${text(payload.kind)},"mode":${text(payload.mode)},"prompt":${text(payload.prompt)},"repository":${text(payload.repository)}}`;
+        case "agent.message":
+            return `{"kind":${text(payload.kind)},"message":${text(payload.message)},"session":${text(payload.session)}}`;
+    }
+};
+export const jobHash = Effect.fn("Fleet.jobHash")(function* (host, actor, payload) {
+    const cryptoService = yield* Crypto.Crypto;
+    const canonical = `{"actor":${text(actor)},"host":${text(host)},"payload":${canonicalPayload(payload)}}`;
+    const digest = yield* cryptoService.digest("SHA-256", new TextEncoder().encode(canonical)).pipe(Effect.mapError((cause) => new FleetOperationError({
+        cause,
+        detail: "could not hash fleet job payload",
+        operation: "fleet.job_hash"
+    })));
+    return Encoding.encodeHex(digest);
+});
+//# sourceMappingURL=hash.js.map

package/dist/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../src/hash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAA;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAGjD,MAAM,IAAI,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;AAE7D,MAAM,gBAAgB,GAAG,CAAC,OAAmB,EAAU,EAAE;IACvD,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,qBAAqB;YACxB,OAAO,WAAW,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAA;QACzC,KAAK,WAAW;YACd,OAAO,WAAW,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAA;QACzC,KAAK,WAAW;YACd,OAAO,WAAW,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAA;QACpE,KAAK,gBAAgB;YACnB,OAAO,cAAc,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WACjF,IAAI,CAAC,OAAO,CAAC,IAAI,CACnB,WAAW,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAA;QAC5G,KAAK,eAAe;YAClB,OAAO,WAAW,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAA;IACjH,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,EACzD,IAAY,EACZ,KAAa,EACb,OAAmB;IAEnB,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAA;IAC1C,MAAM,SAAS,GAAG,YAAY,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,cAAc,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAA;IACxG,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAC7F,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,mBAAmB,CAAC;QACtB,KAAK;QACL,MAAM,EAAE,kCAAkC;QAC1C,SAAS,EAAE,gBAAgB;KAC5B,CAAC,CACL,CACF,CAAA;IACD,OAAO,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;AACnC,CAAC,CAAC,CAAA"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+export * from "./config.js";
+export * from "./errors.js";
+export * from "./hash.js";
+export * from "./model.js";
+export * from "./response.js";
+export * from "./service.js";
+export * from "./store.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,YAAY,CAAA;AAC1B,cAAc,eAAe,CAAA;AAC7B,cAAc,cAAc,CAAA;AAC5B,cAAc,YAAY,CAAA"}

package/dist/index.js

@@ -0,0 +1,8 @@
+export * from "./config.js";
+export * from "./errors.js";
+export * from "./hash.js";
+export * from "./model.js";
+export * from "./response.js";
+export * from "./service.js";
+export * from "./store.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,YAAY,CAAA;AAC1B,cAAc,eAAe,CAAA;AAC7B,cAAc,cAAc,CAAA;AAC5B,cAAc,YAAY,CAAA"}

package/dist/limits.d.ts

@@ -0,0 +1,3 @@
+export declare const fleetResponseBodyMaxBytes: number;
+export declare const fleetJobRecordMaxBytes: number;
+//# sourceMappingURL=limits.d.ts.map

package/dist/limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../src/limits.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,yBAAyB,QAAc,CAAA;AACpD,eAAO,MAAM,sBAAsB,QAAoC,CAAA"}

package/dist/limits.js

@@ -0,0 +1,3 @@
+export const fleetResponseBodyMaxBytes = 1024 * 1024;
+export const fleetJobRecordMaxBytes = fleetResponseBodyMaxBytes - 1_024;
+//# sourceMappingURL=limits.js.map

package/dist/limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.js","sourceRoot":"","sources":["../src/limits.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,GAAG,IAAI,CAAA;AACpD,MAAM,CAAC,MAAM,sBAAsB,GAAG,yBAAyB,GAAG,KAAK,CAAA"}