@mcoda/shared 0.1.113 → 0.1.115

package/dist/index.d.ts

@@ -12,6 +12,7 @@ export * from "./mswarm/GenericJobContract.js";
 export * from "./mswarm/CapabilityContract.js";
 export * from "./mswarm/ArtifactSandboxContract.js";
 export * from "./mswarm/LifecycleContract.js";
+export * from "./mswarm/ClientProductContract.js";
 export * from "./status/TaskStatus.js";
 export type { BacklogLaneTotals, BacklogTotals, BacklogSummary, EffectiveVelocity, EstimateResult, EstimateDurations, EstimateEtas, EstimateStatusCounts, EstimateCompletionMetric, EstimateCompletion, VelocitySource, AgentHealth, AgentHealthStatus, AgentUsageLimitScope, AgentUsageLimitWindowType, AgentUsageLimitStatus, AgentUsageLimitRecord, UpsertAgentUsageLimitInput, RoutingDefaults, RoutingDefault, RoutingProvenance, RoutingCandidate, RoutingPreview, RoutingDefaultsUpdate, RefineTasksRequest, RefineTasksPlan, RefineTasksResult, RefineStrategy, RefineOperation, UpdateTaskOp, SplitTaskOp, MergeTasksOp, UpdateEstimateOp, UpdateInfo, UpdateChannel, ApplyUpdateResponse, } from "./openapi/OpenApiTypes.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,qCAAqC,CAAC;AACpD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AACvC,YAAY,EACV,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,oBAAoB,EACpB,wBAAwB,EACxB,kBAAkB,EAClB,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,yBAAyB,EACzB,qBAAqB,EACrB,qBAAqB,EACrB,0BAA0B,EAC1B,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,qBAAqB,EACrB,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,aAAa,EACb,mBAAmB,GACpB,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,qCAAqC,CAAC;AACpD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,mCAAmC,CAAC;AAClD,cAAc,wBAAwB,CAAC;AACvC,YAAY,EACV,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,oBAAoB,EACpB,wBAAwB,EACxB,kBAAkB,EAClB,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,yBAAyB,EACzB,qBAAqB,EACrB,qBAAqB,EACrB,0BAA0B,EAC1B,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,qBAAqB,EACrB,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,aAAa,EACb,mBAAmB,GACpB,MAAM,2BAA2B,CAAC"}

package/dist/index.js

@@ -12,4 +12,5 @@ export * from "./mswarm/GenericJobContract.js";
 export * from "./mswarm/CapabilityContract.js";
 export * from "./mswarm/ArtifactSandboxContract.js";
 export * from "./mswarm/LifecycleContract.js";
+export * from "./mswarm/ClientProductContract.js";
 export * from "./status/TaskStatus.js";

package/dist/mswarm/ClientProductContract.d.ts

@@ -0,0 +1,31 @@
+/**
+ * The product a run is acting for, sent to mswarm as `x-mswarm-client-product`.
+ *
+ * This is deliberately separate from the client identity. The identity is the run's
+ * tenant slug and stays per-tenant, which is what mswarm attributes usage to. The
+ * product is what a self-hosted node can grant wholesale: a node that allowlists
+ * `okacam` admits every okacam tenant, so a multi-tenant product does not need one
+ * allowlist row per tenant added at provisioning time.
+ *
+ * mswarm never infers one from the other. A tenant whose slug happens to be `okacam`
+ * still reads as a client identity there, not as the product.
+ */
+/**
+ * Resolves the product for a run.
+ *
+ * An explicit value from the host's run context wins; otherwise the deployment's
+ * `MSWARM_CLIENT_PRODUCT` is used. The env fallback is what lets a product enable this
+ * with one deployment variable and no code of its own, since each product runs its own
+ * codali instance.
+ *
+ * Returns undefined rather than throwing on a malformed value: failing to send an
+ * optional header must never take a run down. Node access simply falls back to whatever
+ * the client identity alone can reach.
+ */
+export declare function resolveMswarmClientProduct(explicit?: string | null): string | undefined;
+/**
+ * The header pair for a resolved product, or nothing when there is no usable product.
+ * Callers spread this next to the client-identity headers.
+ */
+export declare function mswarmClientProductHeaders(product: string | undefined | null): Record<string, string> | undefined;
+//# sourceMappingURL=ClientProductContract.d.ts.map

package/dist/mswarm/ClientProductContract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClientProductContract.d.ts","sourceRoot":"","sources":["../../src/mswarm/ClientProductContract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH;;;;;;;;;;;GAWG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAMvF;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GACjC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAGpC"}

package/dist/mswarm/ClientProductContract.js

@@ -0,0 +1,41 @@
+/**
+ * The product a run is acting for, sent to mswarm as `x-mswarm-client-product`.
+ *
+ * This is deliberately separate from the client identity. The identity is the run's
+ * tenant slug and stays per-tenant, which is what mswarm attributes usage to. The
+ * product is what a self-hosted node can grant wholesale: a node that allowlists
+ * `okacam` admits every okacam tenant, so a multi-tenant product does not need one
+ * allowlist row per tenant added at provisioning time.
+ *
+ * mswarm never infers one from the other. A tenant whose slug happens to be `okacam`
+ * still reads as a client identity there, not as the product.
+ */
+/** Same shape mswarm accepts for a product entry: a single slug-like label. */
+const CLIENT_PRODUCT_PATTERN = /^[a-z0-9](?:[a-z0-9_-]{0,62}[a-z0-9])?$/i;
+/**
+ * Resolves the product for a run.
+ *
+ * An explicit value from the host's run context wins; otherwise the deployment's
+ * `MSWARM_CLIENT_PRODUCT` is used. The env fallback is what lets a product enable this
+ * with one deployment variable and no code of its own, since each product runs its own
+ * codali instance.
+ *
+ * Returns undefined rather than throwing on a malformed value: failing to send an
+ * optional header must never take a run down. Node access simply falls back to whatever
+ * the client identity alone can reach.
+ */
+export function resolveMswarmClientProduct(explicit) {
+    const candidate = explicit?.trim() || process.env.MSWARM_CLIENT_PRODUCT?.trim();
+    if (!candidate || !CLIENT_PRODUCT_PATTERN.test(candidate)) {
+        return undefined;
+    }
+    return candidate.toLowerCase();
+}
+/**
+ * The header pair for a resolved product, or nothing when there is no usable product.
+ * Callers spread this next to the client-identity headers.
+ */
+export function mswarmClientProductHeaders(product) {
+    const value = resolveMswarmClientProduct(product);
+    return value ? { "x-mswarm-client-product": value } : undefined;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mcoda/shared",
-  "version": "0.1.113",
+  "version": "0.1.115",
   "description": "Shared utilities and schemas for mcoda.",
   "type": "module",
   "main": "dist/index.js",