@loucompanion/forge-bridge 0.1.3-dev.b6be5e7f9668 → 0.1.3-dev.ba293ccf876b

package/dist/session/session-redaction.js

@@ -0,0 +1,38 @@
+import { redactSecrets } from "../shared/redaction/redaction.js";
+const integrityProtectedEventDataTypes = new Set(["sandbox_started"]);
+export function redactRunnerDispatchEvent(event, exactSecrets = []) {
+    if (!event.data || !integrityProtectedEventDataTypes.has(event.eventType)) {
+        return redactSecrets(event, exactSecrets);
+    }
+    // sandbox_started data is runner-authored protocol metadata. Its runtime
+    // lease repeats the dispatch fence so the API can validate ownership. The
+    // transcript redactor treats any serialized `*Token` field as a secret and
+    // must not rewrite that identity before transport or result persistence.
+    const { data, ...transcript } = event;
+    return {
+        ...redactSecrets(transcript, exactSecrets),
+        data,
+    };
+}
+export function redactRunOnceResultPacket(result, exactSecrets = []) {
+    const { events, artifact, artifacts, ...payload } = result;
+    return {
+        ...redactSecrets(payload, exactSecrets),
+        ...(artifact !== undefined
+            ? { artifact: artifact === null ? null : redactArtifact(artifact, exactSecrets) }
+            : {}),
+        ...(artifacts !== undefined
+            ? { artifacts: artifacts === null ? null : artifacts.map(item => redactArtifact(item, exactSecrets)) }
+            : {}),
+        events: events.map(event => redactRunnerDispatchEvent(event, exactSecrets)),
+    };
+}
+function redactArtifact(artifact, exactSecrets) {
+    const { sidecars, ...payload } = artifact;
+    return {
+        ...redactSecrets(payload, exactSecrets),
+        // These bytes already passed the QA path/hash/size checks. The generic
+        // redactor strips contentBase64 fields and must not corrupt the payload.
+        ...(sidecars !== undefined ? { sidecars } : {}),
+    };
+}

package/dist/session/session.base.d.ts

@@ -1,7 +1,12 @@
-import type { RunOnceDispatchPacket, RunOnceResultPacket, RunnerDispatchEvent } from "./session.types.js";
+import type { HostRuntimeReadinessProbeRequest, HostRuntimeReadinessProbeResult, RunOnceDispatchPacket, RunOnceResultPacket, RunnerDispatchEvent } from "./session.types.js";
+import type { HostRuntimeCapacitySnapshot, HostRuntimeReapOptions, HostRuntimeReapReport } from "../runtime/host-runtime-lease.js";
 export interface SessionEventSink {
     emit(event: RunnerDispatchEvent): Promise<void>;
 }
 export interface SessionService {
     runOnce(dispatch: RunOnceDispatchPacket, sink: SessionEventSink, signal?: AbortSignal): Promise<RunOnceResultPacket>;
+    updateLease?(dispatchAttemptId: string, fencingToken: string, expiresAt: string): Promise<void>;
+    reapHostRuntime?(options: HostRuntimeReapOptions): Promise<HostRuntimeReapReport | null>;
+    runtimeCapacity?(): HostRuntimeCapacitySnapshot | null;
+    probeHostRuntime?(request: HostRuntimeReadinessProbeRequest, signal?: AbortSignal): Promise<HostRuntimeReadinessProbeResult>;
 }

package/dist/session/session.service.d.ts

@@ -1,10 +1,16 @@
 import type { ProviderCliService } from "./provider-cli/provider-cli.base.js";
 import type { SessionEventSink, SessionService } from "./session.base.js";
-import type { RunOnceDispatchPacket, RunOnceResultPacket } from "./session.types.js";
+import type { HostRuntimeReadinessProbeRequest, HostRuntimeReadinessProbeResult, RunOnceDispatchPacket, RunOnceResultPacket } from "./session.types.js";
 import type { WorktreeService } from "../worktree/worktree.base.js";
+import { type HostRuntimeCapacitySnapshot, type HostRuntimeLeaseRuntime, type HostRuntimeReapOptions, type HostRuntimeReapReport } from "../runtime/host-runtime-lease.js";
 export declare class BridgeSessionService implements SessionService {
     private readonly worktrees;
     private readonly providerCli;
-    constructor(worktrees?: WorktreeService, providerCli?: ProviderCliService);
+    private readonly hostRuntime?;
+    constructor(worktrees?: WorktreeService, providerCli?: ProviderCliService, hostRuntime?: HostRuntimeLeaseRuntime | undefined);
+    updateLease(dispatchAttemptId: string, fencingToken: string, expiresAt: string): Promise<void>;
+    reapHostRuntime(options: HostRuntimeReapOptions): Promise<HostRuntimeReapReport | null>;
+    runtimeCapacity(): HostRuntimeCapacitySnapshot | null;
+    probeHostRuntime(request: HostRuntimeReadinessProbeRequest, signal?: AbortSignal): Promise<HostRuntimeReadinessProbeResult>;
     runOnce(dispatch: RunOnceDispatchPacket, sink: SessionEventSink, signal?: AbortSignal): Promise<RunOnceResultPacket>;
 }