@noodleseed/one 0.137.0 → 0.139.0

package/dist/mcp-import.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-import.js","sourceRoot":"","sources":["../src/mcp-import.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,aAAa,EAGb,sBAAsB,EACtB,cAAc,EACd,qBAAqB,GACtB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;AACzD,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAgB3C,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAgC,EAChC,eAAsC,EAAE;IAKxC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACrD,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,yBAAyB,UAAU,8BAA8B,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,KAAK,IAAI,cAAc,CAAC,CAAC;QAC5D,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACnE,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QACtE,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;KAC9D,CAAC,CAAC;IACH,WAAW,CAAC;QACV,GAAG,EAAE,OAAO,CAAC,MAAM;QACnB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK;KAC9B,CAAC,CAAC;IACH,aAAa,CAAC,UAAU,EAAE,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3D,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7F,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAA+C,EAC/C,eAAsC,EAAE;IAKxC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,KAAK,IAAI,cAAc,CAAC,CAAC;QACzD,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,MAAM,CAAC,WAAW;QACxB,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,SAAS;YACjD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAChD,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QACtE,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;KAC5D,CAAC,CAAC;IACH,OAAO,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,kBAAkB,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC;QACH,OAAO,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,QAA2B;IACzC,MAAM,MAAM,GACV,QAAQ,CAAC,IAAI,KAAK,SAAS;QACzB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,kCAAkC,QAAQ,CAAC,IAAI,CAAC,SAAS,YAAY,CAAC;IAC5E,OAAO,KAAK,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;;;;;;;;;;;;uBAYlB,QAAQ,CAAC,gBAAgB;uBACzB,QAAQ,CAAC,cAAc;;EAE5C,MAAM;;;;;;;;CAQP,CAAC;AACF,CAAC;AAED,SAAS,KAAK,CAAC,KAAa;IAC1B,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC"}

package/dist/self-host-init.d.ts

@@ -0,0 +1,23 @@
+import type { ServiceProfileName } from '@noodle-borg/capabilities';
+export declare const COMPOSE_INIT_VERSION = 1;
+export interface SelfHostSecrets {
+    readonly adminToken: string;
+    readonly postgresPassword: string;
+    readonly secretMasterKey: string;
+    readonly assetIdentitySalt: string;
+}
+export interface FileResult {
+    readonly path: string;
+    readonly status: 'created' | 'unchanged' | 'skipped' | 'replaced';
+}
+export interface SelfHostInitInput {
+    readonly root: string;
+    readonly force?: boolean;
+    readonly replaceSecrets?: boolean;
+    readonly random?: (bytes: number) => Buffer;
+    readonly rename?: (source: string, destination: string) => void;
+}
+export declare function generateSelfHostSecrets(random: (bytes: number) => Buffer): SelfHostSecrets;
+export declare function reconcileSelfHostFiles(input: SelfHostInitInput): readonly FileResult[];
+export declare function serviceConfigTemplate(profile: ServiceProfileName): string;
+//# sourceMappingURL=self-host-init.d.ts.map

package/dist/self-host-init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-host-init.d.ts","sourceRoot":"","sources":["../src/self-host-init.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAEtC,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,UAAU,CAAC;CACnE;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,KAAK,IAAI,CAAC;CACjE;AAaD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,eAAe,CAO1F;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,iBAAiB,GAAG,SAAS,UAAU,EAAE,CAsDtF;AA2ND,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,kBAAkB,GAAG,MAAM,CAgDzE"}

package/dist/self-host-init.js

@@ -0,0 +1,315 @@
+import { randomBytes } from 'node:crypto';
+import { chmodSync, closeSync, existsSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, renameSync, rmSync, writeFileSync, } from 'node:fs';
+import { dirname, join } from 'node:path';
+export const COMPOSE_INIT_VERSION = 1;
+export function generateSelfHostSecrets(random) {
+    return {
+        adminToken: random(32).toString('base64url'),
+        postgresPassword: random(24).toString('base64url'),
+        secretMasterKey: random(32).toString('base64'),
+        assetIdentitySalt: random(32).toString('base64url'),
+    };
+}
+export function reconcileSelfHostFiles(input) {
+    assertCompatibleRepository(input.root);
+    const stateDirectory = join(input.root, '.self-host');
+    const files = [
+        { relativePath: '.self-host/.env', mode: 0o600 },
+        { relativePath: '.self-host/compose.generated.yaml', mode: 0o644 },
+        { relativePath: 'noodle.service.yaml', mode: 0o644 },
+    ];
+    rejectSymlink(stateDirectory, 'state directory');
+    for (const file of files) {
+        const target = join(input.root, file.relativePath);
+        rejectSymlink(target, 'generated target');
+        rejectTemporaryTarget(`${target}.tmp`);
+    }
+    if (existsSync(stateDirectory)) {
+        if (!lstatSync(stateDirectory).isDirectory()) {
+            throw new Error('self-host state path exists but is not a directory');
+        }
+        chmodSync(stateDirectory, 0o700);
+    }
+    else {
+        mkdirSync(stateDirectory, { mode: 0o700 });
+    }
+    const rename = input.rename ?? renameSync;
+    const envPath = join(input.root, files[0].relativePath);
+    const results = [];
+    if (existsSync(envPath) && !input.replaceSecrets) {
+        chmodSync(envPath, files[0].mode);
+        results.push({ path: files[0].relativePath, status: 'unchanged' });
+    }
+    else {
+        const secrets = generateSelfHostSecrets(input.random ?? randomBytes);
+        const status = existsSync(envPath) ? 'replaced' : 'created';
+        atomicWrite(envPath, renderEnvironment(secrets), files[0].mode, rename);
+        results.push({ path: files[0].relativePath, status });
+    }
+    const generated = [
+        {
+            relativePath: files[1].relativePath,
+            mode: files[1].mode,
+            content: generatedComposeTemplate(),
+        },
+        {
+            relativePath: files[2].relativePath,
+            mode: files[2].mode,
+            content: serviceConfigTemplate('open-core'),
+        },
+    ];
+    for (const file of generated) {
+        results.push(reconcileGeneratedFile(input.root, file, input.force ?? false, rename));
+    }
+    return results;
+}
+function assertCompatibleRepository(root) {
+    const rootPackage = readPackage(join(root, 'package.json'));
+    const candidate = rootPackage?.name === 'noodle-borg'
+        ? readPackage(join(root, 'opensource', 'overlay', 'package.json'))
+        : rootPackage;
+    if (candidate?.name !== 'noodle-core' ||
+        candidate.noodleCore?.composeInitVersion !== COMPOSE_INIT_VERSION) {
+        throw new Error(`this is not a compatible Noodle Core checkout (requires composeInitVersion ${COMPOSE_INIT_VERSION}); use the checkout-local CLI or a matching pinned @noodleseed/one version`);
+    }
+}
+function readPackage(path) {
+    try {
+        return JSON.parse(readFileSync(path, 'utf8'));
+    }
+    catch {
+        return undefined;
+    }
+}
+function rejectSymlink(path, label) {
+    try {
+        if (lstatSync(path).isSymbolicLink()) {
+            throw new Error(`${label} must not be a symbolic link: ${path}`);
+        }
+    }
+    catch (error) {
+        if (isMissingPath(error))
+            return;
+        throw error;
+    }
+}
+function rejectTemporaryTarget(path) {
+    try {
+        const stat = lstatSync(path);
+        if (stat.isSymbolicLink()) {
+            throw new Error(`temporary target must not be a symbolic link: ${path}`);
+        }
+        throw new Error(`temporary target already exists: ${path}`);
+    }
+    catch (error) {
+        if (isMissingPath(error))
+            return;
+        throw error;
+    }
+}
+function isMissingPath(error) {
+    return (typeof error === 'object' &&
+        error !== null &&
+        'code' in error &&
+        error.code === 'ENOENT');
+}
+function atomicWrite(target, content, mode, rename) {
+    const temporary = `${target}.tmp`;
+    mkdirSync(dirname(target), { recursive: true });
+    let descriptor;
+    try {
+        descriptor = openSync(temporary, 'wx', mode);
+        writeFileSync(descriptor, content, 'utf8');
+        fsyncSync(descriptor);
+        closeSync(descriptor);
+        descriptor = undefined;
+        rename(temporary, target);
+        chmodSync(target, mode);
+    }
+    catch (error) {
+        if (descriptor !== undefined)
+            closeSync(descriptor);
+        rmSync(temporary, { force: true });
+        throw error;
+    }
+}
+function reconcileGeneratedFile(root, file, force, rename) {
+    const target = join(root, file.relativePath);
+    if (existsSync(target)) {
+        const current = readFileSync(target, 'utf8');
+        chmodSync(target, file.mode);
+        if (current === file.content)
+            return { path: file.relativePath, status: 'unchanged' };
+        if (!force)
+            return { path: file.relativePath, status: 'skipped' };
+        atomicWrite(target, file.content, file.mode, rename);
+        return { path: file.relativePath, status: 'replaced' };
+    }
+    atomicWrite(target, file.content, file.mode, rename);
+    return { path: file.relativePath, status: 'created' };
+}
+function renderEnvironment(secrets) {
+    return [
+        'POSTGRES_DB=noodle',
+        'POSTGRES_USER=noodle',
+        `POSTGRES_PASSWORD=${secrets.postgresPassword}`,
+        `DATABASE_URL=postgresql://noodle:${secrets.postgresPassword}@postgres:5432/noodle`,
+        `NOODLE_SECRET_MASTER_KEY=${secrets.secretMasterKey}`,
+        `NOODLE_SELF_HOST_ADMIN_TOKEN=${secrets.adminToken}`,
+        'NOODLE_ASSET_ROOT=/var/lib/noodle/assets',
+        `NOODLE_ASSET_IDENTITY_SALT=${secrets.assetIdentitySalt}`,
+        'HOST=0.0.0.0',
+        'PORT=8787',
+        'PUBLIC_BASE_URL=http://localhost:8787',
+        '',
+    ].join('\n');
+}
+function generatedComposeTemplate() {
+    return [
+        '# Generated by noodle service init --profile open-core --compose.',
+        '# Re-run the command to reconcile this file; do not put secrets here.',
+        'services:',
+        '  postgres:',
+        '    image: postgres:16',
+        '    user: postgres',
+        '    env_file:',
+        '      - .env',
+        '    volumes:',
+        '      - postgres-data:/var/lib/postgresql/data',
+        '    healthcheck:',
+        '      test:',
+        '        - CMD-SHELL',
+        '        - \'pg_isready -U "$${POSTGRES_USER}" -d "$${POSTGRES_DB}"\'',
+        '      interval: 2s',
+        '      timeout: 3s',
+        '      retries: 30',
+        '    restart: unless-stopped',
+        '    stop_grace_period: 30s',
+        '    read_only: true',
+        '    cap_drop:',
+        '      - ALL',
+        '    security_opt:',
+        '      - no-new-privileges:true',
+        '    tmpfs:',
+        '      - /tmp:rw,noexec,nosuid,size=64m',
+        '      - /var/run/postgresql:rw,noexec,nosuid,size=16m,uid=999,gid=999,mode=0775',
+        '  noodle:',
+        '    build:',
+        '      context: ..',
+        '      dockerfile: Dockerfile',
+        '      target: service-runtime',
+        '    user: node',
+        '    env_file:',
+        '      - .env',
+        '    ports:',
+        '      - 127.0.0.1:8787:8787',
+        '    volumes:',
+        '      - asset-data:/var/lib/noodle/assets',
+        '    depends_on:',
+        '      postgres:',
+        '        condition: service_healthy',
+        '    healthcheck:',
+        '      test:',
+        '        - CMD',
+        '        - node',
+        '        - -e',
+        '        - "fetch(\'http://127.0.0.1:8787/readyz\').then(r=>{if(!r.ok)process.exit(1)}).catch(()=>process.exit(1))"',
+        '      interval: 2s',
+        '      timeout: 3s',
+        '      retries: 30',
+        '    restart: unless-stopped',
+        '    stop_grace_period: 30s',
+        '    init: true',
+        '    read_only: true',
+        '    cap_drop:',
+        '      - ALL',
+        '    security_opt:',
+        '      - no-new-privileges:true',
+        '    tmpfs:',
+        '      - /tmp:rw,noexec,nosuid,size=64m',
+        '  bootstrap:',
+        '    build:',
+        '      context: ..',
+        '      dockerfile: Dockerfile',
+        '      target: cli-runtime',
+        '    user: node',
+        '    env_file:',
+        '      - .env',
+        '    environment:',
+        '      NOODLE_SERVICE_URL: http://noodle:8787',
+        '    depends_on:',
+        '      noodle:',
+        '        condition: service_healthy',
+        '    entrypoint:',
+        '      - /bin/sh',
+        '      - -eu',
+        '      - -c',
+        '    command:',
+        '      - |',
+        '        export NOODLE_AUTH_TOKEN="$${NOODLE_SELF_HOST_ADMIN_TOKEN}"',
+        '        exec node dist/bin.js orgs create local --display-name Local --json',
+        '    restart: no',
+        '    init: true',
+        '    read_only: true',
+        '    cap_drop:',
+        '      - ALL',
+        '    security_opt:',
+        '      - no-new-privileges:true',
+        '    tmpfs:',
+        '      - /tmp:rw,noexec,nosuid,size=64m',
+        'volumes:',
+        '  postgres-data: {}',
+        '  asset-data: {}',
+        '',
+    ].join('\n');
+}
+export function serviceConfigTemplate(profile) {
+    if (profile === 'enterprise-governed') {
+        return [
+            'profile: enterprise-governed',
+            '',
+            'identity:',
+            '  admin:',
+            '    provider: google-workspace',
+            '',
+            'access:',
+            '  mode: org-members',
+            '',
+            'audit:',
+            '  store: postgres',
+            '',
+            'controls:',
+            '  rateLimits:',
+            '    default:',
+            '      perMinute: 60',
+            '',
+            'apps:',
+            '  enabled: true',
+            '',
+        ].join('\n');
+    }
+    if (profile === 'agency-managed') {
+        return [
+            'profile: agency-managed',
+            '',
+            'org:',
+            '  slug: acme',
+            '  template: mid-market',
+            '',
+            'audit:',
+            '  store: postgres',
+            '',
+            'access:',
+            '  mode: org-members',
+            '',
+            'controls:',
+            '  preset: standard',
+            '',
+            'apps:',
+            '  enabled: true',
+            '',
+        ].join('\n');
+    }
+    return [`profile: ${profile}`, ''].join('\n');
+}
+//# sourceMappingURL=self-host-init.js.map

package/dist/self-host-init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-host-init.js","sourceRoot":"","sources":["../src/self-host-init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,MAAM,EACN,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAG1C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAiCtC,MAAM,UAAU,uBAAuB,CAAC,MAAiC;IACvE,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC5C,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QAClD,eAAe,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC9C,iBAAiB,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAwB;IAC7D,0BAA0B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG;QACZ,EAAE,YAAY,EAAE,iBAAiB,EAAE,IAAI,EAAE,KAAK,EAAE;QAChD,EAAE,YAAY,EAAE,mCAAmC,EAAE,IAAI,EAAE,KAAK,EAAE;QAClE,EAAE,YAAY,EAAE,qBAAqB,EAAE,IAAI,EAAE,KAAK,EAAE;KAC5C,CAAC;IAEX,aAAa,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACnD,aAAa,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAC1C,qBAAqB,CAAC,GAAG,MAAM,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,SAAS,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,UAAU,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QACjD,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACrE,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,MAAM,IAAI,WAAW,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5D,WAAW,CAAC,OAAO,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,SAAS,GAA6B;QAC1C;YACE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY;YACnC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;YACnB,OAAO,EAAE,wBAAwB,EAAE;SACpC;QACD;YACE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY;YACnC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;YACnB,OAAO,EAAE,qBAAqB,CAAC,WAAW,CAAC;SAC5C;KACF,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAY;IAC9C,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;IAC5D,MAAM,SAAS,GACb,WAAW,EAAE,IAAI,KAAK,aAAa;QACjC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;QAClE,CAAC,CAAC,WAAW,CAAC;IAClB,IACE,SAAS,EAAE,IAAI,KAAK,aAAa;QACjC,SAAS,CAAC,UAAU,EAAE,kBAAkB,KAAK,oBAAoB,EACjE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,8EAA8E,oBAAoB,4EAA4E,CAC/K,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAsB,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,KAAa;IAChD,IAAI,CAAC;QACH,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iCAAiC,IAAI,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,aAAa,CAAC,KAAK,CAAC;YAAE,OAAO;QACjC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,iDAAiD,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,aAAa,CAAC,KAAK,CAAC;YAAE,OAAO;QACjC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACd,KAAqC,CAAC,IAAI,KAAK,QAAQ,CACzD,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,MAAc,EACd,OAAe,EACf,IAAY,EACZ,MAAqD;IAErD,MAAM,SAAS,GAAG,GAAG,MAAM,MAAM,CAAC;IAClC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,IAAI,UAA8B,CAAC;IACnC,IAAI,CAAC;QACH,UAAU,GAAG,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7C,aAAa,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3C,SAAS,CAAC,UAAU,CAAC,CAAC;QACtB,SAAS,CAAC,UAAU,CAAC,CAAC;QACtB,UAAU,GAAG,SAAS,CAAC;QACvB,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC1B,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,UAAU,KAAK,SAAS;YAAE,SAAS,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,IAAY,EACZ,IAAmB,EACnB,KAAc,EACd,MAAqD;IAErD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7C,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7C,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,OAAO,KAAK,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACtF,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAClE,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACzD,CAAC;IACD,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAwB;IACjD,OAAO;QACL,oBAAoB;QACpB,sBAAsB;QACtB,qBAAqB,OAAO,CAAC,gBAAgB,EAAE;QAC/C,oCAAoC,OAAO,CAAC,gBAAgB,uBAAuB;QACnF,4BAA4B,OAAO,CAAC,eAAe,EAAE;QACrD,gCAAgC,OAAO,CAAC,UAAU,EAAE;QACpD,0CAA0C;QAC1C,8BAA8B,OAAO,CAAC,iBAAiB,EAAE;QACzD,cAAc;QACd,WAAW;QACX,uCAAuC;QACvC,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,wBAAwB;IAC/B,OAAO;QACL,mEAAmE;QACnE,uEAAuE;QACvE,WAAW;QACX,aAAa;QACb,wBAAwB;QACxB,oBAAoB;QACpB,eAAe;QACf,cAAc;QACd,cAAc;QACd,gDAAgD;QAChD,kBAAkB;QAClB,aAAa;QACb,qBAAqB;QACrB,sEAAsE;QACtE,oBAAoB;QACpB,mBAAmB;QACnB,mBAAmB;QACnB,6BAA6B;QAC7B,4BAA4B;QAC5B,qBAAqB;QACrB,eAAe;QACf,aAAa;QACb,mBAAmB;QACnB,gCAAgC;QAChC,YAAY;QACZ,wCAAwC;QACxC,iFAAiF;QACjF,WAAW;QACX,YAAY;QACZ,mBAAmB;QACnB,8BAA8B;QAC9B,+BAA+B;QAC/B,gBAAgB;QAChB,eAAe;QACf,cAAc;QACd,YAAY;QACZ,6BAA6B;QAC7B,cAAc;QACd,2CAA2C;QAC3C,iBAAiB;QACjB,iBAAiB;QACjB,oCAAoC;QACpC,kBAAkB;QAClB,aAAa;QACb,eAAe;QACf,gBAAgB;QAChB,cAAc;QACd,oHAAoH;QACpH,oBAAoB;QACpB,mBAAmB;QACnB,mBAAmB;QACnB,6BAA6B;QAC7B,4BAA4B;QAC5B,gBAAgB;QAChB,qBAAqB;QACrB,eAAe;QACf,aAAa;QACb,mBAAmB;QACnB,gCAAgC;QAChC,YAAY;QACZ,wCAAwC;QACxC,cAAc;QACd,YAAY;QACZ,mBAAmB;QACnB,8BAA8B;QAC9B,2BAA2B;QAC3B,gBAAgB;QAChB,eAAe;QACf,cAAc;QACd,kBAAkB;QAClB,8CAA8C;QAC9C,iBAAiB;QACjB,eAAe;QACf,oCAAoC;QACpC,iBAAiB;QACjB,iBAAiB;QACjB,aAAa;QACb,YAAY;QACZ,cAAc;QACd,WAAW;QACX,qEAAqE;QACrE,6EAA6E;QAC7E,iBAAiB;QACjB,gBAAgB;QAChB,qBAAqB;QACrB,eAAe;QACf,aAAa;QACb,mBAAmB;QACnB,gCAAgC;QAChC,YAAY;QACZ,wCAAwC;QACxC,UAAU;QACV,qBAAqB;QACrB,kBAAkB;QAClB,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAA2B;IAC/D,IAAI,OAAO,KAAK,qBAAqB,EAAE,CAAC;QACtC,OAAO;YACL,8BAA8B;YAC9B,EAAE;YACF,WAAW;YACX,UAAU;YACV,gCAAgC;YAChC,EAAE;YACF,SAAS;YACT,qBAAqB;YACrB,EAAE;YACF,QAAQ;YACR,mBAAmB;YACnB,EAAE;YACF,WAAW;YACX,eAAe;YACf,cAAc;YACd,qBAAqB;YACrB,EAAE;YACF,OAAO;YACP,iBAAiB;YACjB,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACjC,OAAO;YACL,yBAAyB;YACzB,EAAE;YACF,MAAM;YACN,cAAc;YACd,wBAAwB;YACxB,EAAE;YACF,QAAQ;YACR,mBAAmB;YACnB,EAAE;YACF,SAAS;YACT,qBAAqB;YACrB,EAAE;YACF,WAAW;YACX,oBAAoB;YACpB,EAAE;YACF,OAAO;YACP,iBAAiB;YACjB,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IACD,OAAO,CAAC,YAAY,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChD,CAAC"}

package/node_modules/@noodle-borg/admission-limits/dist/envelope.js

@@ -17,7 +17,7 @@ const HOUR = 60 * MINUTE;
 /** Ceilings. Nothing may exceed these, whatever the manifest or managed config asks for. */
 export const ADMISSION_MAXIMUM = Object.freeze({
     messageCharacters: 4_000,
-    turnsPerSession: 20,
+    turnsPerSession: 40,
     modelStepsPerTurn: 6,
     toolCallsPerTurn: 8,
     pendingInteractions: 1,