@kya-os/cli 2.0.0 → 2.0.3

package/node_modules/@kya-os/contracts/dist/workbench/managed-worker.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OfflineWorkerStatusSchema = exports.OfflineWorkerReviewSchema = exports.OfflineWorkerSpecSchema = void 0;
+const zod_1 = require("zod");
+const utf8 = (limit) => (value) => new TextEncoder().encode(value).length <= limit;
+const identity = zod_1.z.string().max(256).refine(utf8(256)).refine(value => value.trim() === value && value.length > 0);
+const invocation = zod_1.z.string().uuid().refine(value => value === value.toLowerCase());
+const path = zod_1.z.string().startsWith('/').max(4096).refine(utf8(4096)).refine((value) => !/\p{Cc}/u.test(value) && !value.split('/').includes('..'), 'Use an absolute path without parent traversal or control characters');
+const argv = zod_1.z.string().max(8192).refine(utf8(8192)).refine((value) => !value.includes('\0'));
+/** Reviewed local offline component. It cannot represent network-enabled work
+ * or a Checkpoint grant; neither is implied by a successful container exit. */
+exports.OfflineWorkerSpecSchema = zod_1.z.object({
+    schemaVersion: zod_1.z.literal(1),
+    invocationId: invocation,
+    taskId: identity,
+    ownerEpoch: zod_1.z.number().int().positive().safe(),
+    runnerId: identity,
+    dockerExecutable: path,
+    dockerSocket: path,
+    imageId: zod_1.z.string().regex(/^sha256:[a-fA-F0-9]{64}$/),
+    inputDirectory: path,
+    command: zod_1.z.array(argv).min(1).max(128).refine((args) => args[0].startsWith('/')),
+    uid: zod_1.z.number().int().min(1).max(2147483647),
+    gid: zod_1.z.number().int().min(1).max(2147483647),
+    cpuMillis: zod_1.z.number().int().min(100).max(32000),
+    memoryMib: zod_1.z.number().int().min(64).max(32768),
+    pids: zod_1.z.number().int().min(8).max(1024),
+    maxRuntimeSeconds: zod_1.z.number().int().min(1).max(86400),
+}).strict();
+exports.OfflineWorkerReviewSchema = zod_1.z.object({
+    spec: exports.OfflineWorkerSpecSchema,
+    executableDigest: zod_1.z.string().regex(/^[a-f0-9]{64}$/),
+    inputDigest: zod_1.z.string().regex(/^sha256:[a-f0-9]{64}$/),
+    inputFiles: zod_1.z.number().int().min(0).max(10000),
+    inputBytes: zod_1.z.number().int().min(0).max(64 * 1024 * 1024),
+    authority: zod_1.z.literal('explicit_local_worker_review'),
+    limitation: zod_1.z.string().min(1),
+}).strict();
+exports.OfflineWorkerStatusSchema = zod_1.z.object({
+    invocationId: invocation,
+    taskId: identity,
+    ownerEpoch: zod_1.z.number().int().positive().safe(),
+    state: zod_1.z.enum(['prepared', 'creating', 'created', 'starting', 'running', 'unknown', 'cancel_requested', 'cancelled', 'succeeded', 'failed']),
+    containerId: zod_1.z.string().regex(/^[a-fA-F0-9]{64}$/).nullable(),
+    outputDirectory: path,
+    deadlineMs: zod_1.z.number().int().nonnegative().safe().nullable(),
+    exitCode: zod_1.z.number().int().nullable(),
+    notice: zod_1.z.string().nullable(),
+}).strict();