@noodleseed/one 0.23.0 → 0.25.0

package/node_modules/@noodle-borg/service/dist/github/deploy-pipeline.js

@@ -0,0 +1,121 @@
+const trimTrailingSlash = (url) => url.replace(/\/+$/, '');
+/** Build a redacted one-line summary from a route's own (secret-free) `{ error, code }` body. */
+async function summarizeHttpFailure(stage, res) {
+    let code;
+    let message;
+    try {
+        const body = (await res.json());
+        if (typeof body.code === 'string')
+            code = body.code;
+        if (typeof body.error === 'string')
+            message = body.error;
+    }
+    catch {
+        // A non-JSON error body carries no structured reason; the status code still localizes the failure.
+    }
+    return {
+        summary: `${stage} failed (HTTP ${res.status}${code !== undefined ? `, ${code}` : ''})${message !== undefined ? `: ${message}` : ''}`,
+        ...(code !== undefined ? { code } : {}),
+    };
+}
+export async function runDeployPipeline(deps) {
+    const { run, runToken, compile, httpFetch } = deps;
+    const baseUrl = trimTrailingSlash(deps.serviceBaseUrl);
+    const statusUrl = `${baseUrl}/v1/github/runs/${encodeURIComponent(run.runId)}/status`;
+    const tenantBase = `${baseUrl}/v1/orgs/${encodeURIComponent(run.orgSlug)}/apps/${encodeURIComponent(run.appSlug)}/envs/${encodeURIComponent(run.envName)}`;
+    const report = async (to, patch) => {
+        try {
+            await httpFetch(statusUrl, {
+                method: 'POST',
+                headers: { 'content-type': 'application/json', authorization: `Bearer ${runToken}` },
+                body: JSON.stringify({ to, ...patch }),
+            });
+        }
+        catch {
+            // Best-effort: a failed status report is observability loss, not a deploy failure.
+        }
+    };
+    const fail = async (stage, errorSummary) => {
+        await report('failed', { errorSummary });
+        return { status: 'failed', stage, errorSummary };
+    };
+    let stage = 'compile';
+    try {
+        await report('building');
+        const compiled = await compile(run);
+        if (!compiled.ok)
+            return await fail('compile', compiled.errorSummary);
+        await report('deploying');
+        let hostedAssets;
+        const assets = compiled.input.assets ?? [];
+        if (assets.length > 0) {
+            stage = 'preflight';
+            const preflightRes = await httpFetch(`${tenantBase}/assets/preflight`, {
+                method: 'POST',
+                headers: { 'content-type': 'application/json', 'x-noodle-run-token': runToken },
+                body: JSON.stringify({ assets: assets.map((asset) => asset.prepared) }),
+            });
+            if (!preflightRes.ok) {
+                const failure = await summarizeHttpFailure('asset preflight', preflightRes);
+                return await fail('preflight', failure.summary);
+            }
+            const plan = (await preflightRes.json());
+            stage = 'upload';
+            for (const upload of plan.uploads ?? []) {
+                const asset = assets.find((candidate) => candidate.prepared.logicalId === upload.logicalId);
+                if (asset === undefined) {
+                    return await fail('upload', `upload: preflight planned an unknown asset "${upload.logicalId}"`);
+                }
+                const putRes = await httpFetch(upload.uploadUrl, {
+                    method: upload.method,
+                    headers: upload.headers,
+                    body: asset.bytes,
+                });
+                if (!putRes.ok) {
+                    return await fail('upload', `upload: asset "${upload.logicalId}" PUT failed (HTTP ${putRes.status})`);
+                }
+            }
+            hostedAssets = plan.assets;
+        }
+        stage = 'deploy';
+        const deployRes = await httpFetch(`${tenantBase}/deploy`, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json', 'x-noodle-run-token': runToken },
+            body: JSON.stringify({
+                manifest: compiled.input.manifest,
+                ...(compiled.input.connectors !== undefined
+                    ? { connectors: compiled.input.connectors }
+                    : {}),
+                ...(compiled.input.serverVersion !== undefined
+                    ? { serverVersion: compiled.input.serverVersion }
+                    : {}),
+                ...(compiled.input.declaredAccessMode !== undefined
+                    ? { accessMode: compiled.input.declaredAccessMode }
+                    : {}),
+                ...(hostedAssets !== undefined ? { hostedAssets } : {}),
+            }),
+        });
+        if (!deployRes.ok) {
+            const failure = await summarizeHttpFailure('deploy', deployRes);
+            if (failure.code === 'run_superseded') {
+                await report('superseded');
+                return { status: 'superseded' };
+            }
+            return await fail('deploy', failure.summary);
+        }
+        const deployed = (await deployRes.json());
+        if (typeof deployed.deploymentId !== 'string') {
+            return await fail('deploy', 'deploy: service returned no deploymentId');
+        }
+        await report('deployed', { deploymentId: deployed.deploymentId });
+        return { status: 'deployed', deploymentId: deployed.deploymentId };
+    }
+    catch (error) {
+        // An unexpected throw (network fault, etc.) still lands the run in `failed` with a redacted,
+        // stage-tagged summary — never a silent hang. Only the error's name is included; never a message
+        // that could carry a URL, token, or body.
+        const name = error instanceof Error ? error.name : 'Error';
+        return await fail(stage, `${stage}: unexpected error (${name})`);
+    }
+}
+//# sourceMappingURL=deploy-pipeline.js.map

package/node_modules/@noodle-borg/service/dist/github/deploy-pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-pipeline.js","sourceRoot":"","sources":["../../src/github/deploy-pipeline.ts"],"names":[],"mappings":"AA4DA,MAAM,iBAAiB,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAE3E,iGAAiG;AACjG,KAAK,UAAU,oBAAoB,CACjC,KAAa,EACb,GAAa;IAEb,IAAI,IAAwB,CAAC;IAC7B,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwC,CAAC;QACvE,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAAE,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACpD,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,mGAAmG;IACrG,CAAC;IACD,OAAO;QACL,OAAO,EAAE,GAAG,KAAK,iBAAiB,GAAG,CAAC,MAAM,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAClF,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,EAC3C,EAAE;QACF,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAwB;IAC9D,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IACnD,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,GAAG,OAAO,mBAAmB,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;IACtF,MAAM,UAAU,GAAG,GAAG,OAAO,YAAY,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,kBAAkB,CACjG,GAAG,CAAC,OAAO,CACZ,SAAS,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;IAE5C,MAAM,MAAM,GAAG,KAAK,EAClB,EAAmE,EACnE,KAA0E,EAC3D,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,SAAS,EAAE;gBACzB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,QAAQ,EAAE,EAAE;gBACpF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC;aACvC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,mFAAmF;QACrF,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,KAAK,EAAE,KAAkB,EAAE,YAAoB,EAAkC,EAAE;QAC9F,MAAM,MAAM,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QACzC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IACnD,CAAC,CAAC;IAEF,IAAI,KAAK,GAAgB,SAAS,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,MAAM,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;QAEtE,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QAE1B,IAAI,YAAwD,CAAC;QAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;QAC3C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,KAAK,GAAG,WAAW,CAAC;YACpB,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,GAAG,UAAU,mBAAmB,EAAE;gBACrE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,QAAQ,EAAE;gBAC/E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;aACxE,CAAC,CAAC;YACH,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;gBACrB,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;gBAC5E,OAAO,MAAM,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YAClD,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,CAQtC,CAAC;YACF,KAAK,GAAG,QAAQ,CAAC;YACjB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;gBACxC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC5F,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,OAAO,MAAM,IAAI,CACf,QAAQ,EACR,+CAA+C,MAAM,CAAC,SAAS,GAAG,CACnE,CAAC;gBACJ,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE;oBAC/C,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,IAAI,EAAE,KAAK,CAAC,KAAK;iBAClB,CAAC,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;oBACf,OAAO,MAAM,IAAI,CACf,QAAQ,EACR,kBAAkB,MAAM,CAAC,SAAS,sBAAsB,MAAM,CAAC,MAAM,GAAG,CACzE,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC;QAC7B,CAAC;QAED,KAAK,GAAG,QAAQ,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,GAAG,UAAU,SAAS,EAAE;YACxD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,QAAQ,EAAE;YAC/E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ;gBACjC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;oBACzC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE;oBAC3C,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS;oBAC5C,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa,EAAE;oBACjD,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,KAAK,SAAS;oBACjD,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,kBAAkB,EAAE;oBACnD,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxD,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YAChE,IAAI,OAAO,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBACtC,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;gBAC3B,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;YAClC,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,QAAQ,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAA+B,CAAC;QACxE,IAAI,OAAO,QAAQ,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YAC9C,OAAO,MAAM,IAAI,CAAC,QAAQ,EAAE,0CAA0C,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,MAAM,CAAC,UAAU,EAAE,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;QAClE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC;IACrE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,6FAA6F;QAC7F,iGAAiG;QACjG,0CAA0C;QAC1C,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QAC3D,OAAO,MAAM,IAAI,CAAC,KAAK,EAAE,GAAG,KAAK,uBAAuB,IAAI,GAAG,CAAC,CAAC;IACnE,CAAC;AACH,CAAC"}

package/node_modules/@noodle-borg/service/dist/github/deploy-run-executor.d.ts

@@ -0,0 +1,33 @@
+import type { DeployRunRecord } from '../store.js';
+/**
+ * The isolation seam for GHD-3 (ADR 0132 Decision 6). The dispatcher hands an accepted, non-blocked
+ * run to an executor; the executor runs the untrusted-compile → trusted-deploy pipeline somewhere
+ * isolated and reports progress back through `POST /v1/github/runs/{runId}/status` using the
+ * `runToken`. The executor is the ONLY thing that varies by environment:
+ *
+ * - `CloudRunJobExecutor` (C3, production) — triggers one Cloud Run Job execution per run.
+ * - `LocalProcessExecutor` (C2, dev/self-host/E2E) — runs the pipeline as a local child process.
+ * - {@link FakeDeployRunExecutor} (tests) — records dispatches, runs nothing.
+ *
+ * `dispatch` is fire-and-forget from the caller's view (the webhook must answer GitHub immediately);
+ * it resolves once the execution is *launched*, not *finished*. It must never throw into the request
+ * path — an executor that can't launch records the failure out-of-band and the sweeper retries.
+ */
+export interface DeployRunDispatchInput {
+    readonly run: DeployRunRecord;
+    /** Run-scoped credential the executor uses to report status + deploy (never the sandbox's). */
+    readonly runToken: string;
+    /** Base URL the executor calls back to (the status/deploy routes). */
+    readonly serviceBaseUrl: string;
+}
+export interface DeployRunExecutor {
+    dispatch(input: DeployRunDispatchInput): Promise<void>;
+}
+/** Test double: captures every dispatch, launches nothing. */
+export declare class FakeDeployRunExecutor implements DeployRunExecutor {
+    #private;
+    readonly dispatches: DeployRunDispatchInput[];
+    constructor(onDispatch?: (input: DeployRunDispatchInput) => void | Promise<void>);
+    dispatch(input: DeployRunDispatchInput): Promise<void>;
+}
+//# sourceMappingURL=deploy-run-executor.d.ts.map

package/node_modules/@noodle-borg/service/dist/github/deploy-run-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-run-executor.d.ts","sourceRoot":"","sources":["../../src/github/deploy-run-executor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,GAAG,EAAE,eAAe,CAAC;IAC9B,+FAA+F;IAC/F,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,sEAAsE;IACtE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxD;AAED,8DAA8D;AAC9D,qBAAa,qBAAsB,YAAW,iBAAiB;;IAC7D,QAAQ,CAAC,UAAU,EAAE,sBAAsB,EAAE,CAAM;gBAIvC,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,sBAAsB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1E,QAAQ,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;CAI7D"}

package/node_modules/@noodle-borg/service/dist/github/deploy-run-executor.js

@@ -0,0 +1,14 @@
+/** Test double: captures every dispatch, launches nothing. */
+export class FakeDeployRunExecutor {
+    dispatches = [];
+    /** Optional hook so a test can assert the token/base or simulate a launch failure. */
+    #onDispatch;
+    constructor(onDispatch) {
+        this.#onDispatch = onDispatch;
+    }
+    async dispatch(input) {
+        this.dispatches.push(input);
+        await this.#onDispatch?.(input);
+    }
+}
+//# sourceMappingURL=deploy-run-executor.js.map

package/node_modules/@noodle-borg/service/dist/github/deploy-run-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-run-executor.js","sourceRoot":"","sources":["../../src/github/deploy-run-executor.ts"],"names":[],"mappings":"AA4BA,8DAA8D;AAC9D,MAAM,OAAO,qBAAqB;IACvB,UAAU,GAA6B,EAAE,CAAC;IACnD,sFAAsF;IAC7E,WAAW,CAAwE;IAE5F,YAAY,UAAoE;QAC9E,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAA6B;QAC1C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;CACF"}

package/node_modules/@noodle-borg/service/dist/github/deploy-run-reconciler.d.ts

@@ -0,0 +1,36 @@
+import { type Logger } from '@noodle-borg/transport-http';
+import type { GithubConnectionStore, GithubDeployRunStore } from '../store.js';
+import type { DeployRunExecutor } from './deploy-run-executor.js';
+export declare const GITHUB_RUN_RECONCILE_INTERVAL_MS = 60000;
+export declare const GITHUB_RUN_TIMEOUT_MS = 180000;
+export declare const GITHUB_RUN_QUEUED_REDISPATCH_GRACE_MS = 30000;
+export interface GithubDeployRunReconcilerOptions {
+    readonly runStore: GithubDeployRunStore;
+    readonly connectionStore: GithubConnectionStore;
+    readonly executor: DeployRunExecutor;
+    readonly webhookSecret: string;
+    readonly serviceBaseUrl: string;
+    readonly clock?: () => Date;
+    readonly logger?: Logger;
+    readonly intervalMs?: number;
+    readonly runTimeoutMs?: number;
+    readonly queuedRedispatchGraceMs?: number;
+    readonly limitPerConnection?: number;
+}
+export interface GithubDeployRunReconcileResult {
+    readonly connections: number;
+    readonly inspected: number;
+    readonly dispatched: number;
+    readonly failed: number;
+}
+/**
+ * Idempotent GitHub deploy-run reconciler. Webhook dispatch is intentionally fire-and-forget; this
+ * loop is the recovery path for missed Cloud Run Job launches and abandoned in-flight runs.
+ */
+export declare class GithubDeployRunReconciler {
+    #private;
+    constructor(options: GithubDeployRunReconcilerOptions);
+    maybeSweep(): void;
+    sweepNow(): Promise<GithubDeployRunReconcileResult>;
+}
+//# sourceMappingURL=deploy-run-reconciler.d.ts.map

package/node_modules/@noodle-borg/service/dist/github/deploy-run-reconciler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-run-reconciler.d.ts","sourceRoot":"","sources":["../../src/github/deploy-run-reconciler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,MAAM,EAAc,MAAM,6BAA6B,CAAC;AACtE,OAAO,KAAK,EAAmB,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAChG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAIlE,eAAO,MAAM,gCAAgC,QAAS,CAAC;AACvD,eAAO,MAAM,qBAAqB,SAAU,CAAC;AAC7C,eAAO,MAAM,qCAAqC,QAAS,CAAC;AAE5D,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,qBAAqB,CAAC;IAChD,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,qBAAa,yBAAyB;;gBAexB,OAAO,EAAE,gCAAgC;IAerD,UAAU,IAAI,IAAI;IAcZ,QAAQ,IAAI,OAAO,CAAC,8BAA8B,CAAC;CA6D1D"}

package/node_modules/@noodle-borg/service/dist/github/deploy-run-reconciler.js

@@ -0,0 +1,107 @@
+import { noopLogger } from '@noodle-borg/transport-http';
+import { resolveGithubStateSecret } from './install-nonce.js';
+import { signRunToken } from './run-token.js';
+export const GITHUB_RUN_RECONCILE_INTERVAL_MS = 60_000;
+export const GITHUB_RUN_TIMEOUT_MS = 180_000;
+export const GITHUB_RUN_QUEUED_REDISPATCH_GRACE_MS = 30_000;
+/**
+ * Idempotent GitHub deploy-run reconciler. Webhook dispatch is intentionally fire-and-forget; this
+ * loop is the recovery path for missed Cloud Run Job launches and abandoned in-flight runs.
+ */
+export class GithubDeployRunReconciler {
+    #runStore;
+    #connectionStore;
+    #executor;
+    #webhookSecret;
+    #serviceBaseUrl;
+    #clock;
+    #logger;
+    #intervalMs;
+    #runTimeoutMs;
+    #queuedRedispatchGraceMs;
+    #limitPerConnection;
+    #lastSweepStartedAt = Number.NEGATIVE_INFINITY;
+    #inFlight = false;
+    constructor(options) {
+        this.#runStore = options.runStore;
+        this.#connectionStore = options.connectionStore;
+        this.#executor = options.executor;
+        this.#webhookSecret = resolveGithubStateSecret(options.webhookSecret);
+        this.#serviceBaseUrl = options.serviceBaseUrl.replace(/\/+$/, '');
+        this.#clock = options.clock ?? (() => new Date());
+        this.#logger = options.logger ?? noopLogger;
+        this.#intervalMs = options.intervalMs ?? GITHUB_RUN_RECONCILE_INTERVAL_MS;
+        this.#runTimeoutMs = options.runTimeoutMs ?? GITHUB_RUN_TIMEOUT_MS;
+        this.#queuedRedispatchGraceMs =
+            options.queuedRedispatchGraceMs ?? GITHUB_RUN_QUEUED_REDISPATCH_GRACE_MS;
+        this.#limitPerConnection = options.limitPerConnection ?? 50;
+    }
+    maybeSweep() {
+        const now = this.#clock().getTime();
+        if (this.#inFlight || now - this.#lastSweepStartedAt < this.#intervalMs)
+            return;
+        this.#lastSweepStartedAt = now;
+        this.#inFlight = true;
+        void this.sweepNow()
+            .catch(() => {
+            this.#logger.warn('github.run.reconcile_failed', { status: 500 });
+        })
+            .finally(() => {
+            this.#inFlight = false;
+        });
+    }
+    async sweepNow() {
+        const now = this.#clock();
+        const connections = await this.#connectionStore.listRepoConnections();
+        let inspected = 0;
+        let dispatched = 0;
+        let failed = 0;
+        for (const connection of connections) {
+            const result = await this.#runStore.listDeployRuns(connection.orgSlug, connection.appSlug, {
+                limit: this.#limitPerConnection,
+            });
+            for (const run of result.runs) {
+                if (run.githubRepositoryId !== connection.githubRepositoryId)
+                    continue;
+                inspected += 1;
+                if (run.blockedReason !== undefined)
+                    continue;
+                if (run.status === 'queued') {
+                    if (!this.#isOlderThan(run.createdAt, now, this.#queuedRedispatchGraceMs))
+                        continue;
+                    await this.#dispatch(run);
+                    dispatched += 1;
+                    continue;
+                }
+                if ((run.status === 'building' || run.status === 'deploying') &&
+                    this.#isOlderThan(run.startedAt ?? run.createdAt, now, this.#runTimeoutMs)) {
+                    const transition = await this.#runStore.transitionDeployRun(run.orgSlug, run.runId, 'failed', {
+                        errorSummary: `github build worker timed out after ${Math.round(this.#runTimeoutMs / 1000)}s`,
+                    });
+                    if (transition.ok)
+                        failed += 1;
+                }
+            }
+        }
+        return { connections: connections.length, inspected, dispatched, failed };
+    }
+    async #dispatch(run) {
+        const runToken = signRunToken({
+            runId: run.runId,
+            org: run.orgSlug,
+            app: run.appSlug,
+            env: run.envName,
+            issuedAt: this.#clock().getTime(),
+        }, this.#webhookSecret);
+        await this.#executor
+            .dispatch({ run, runToken, serviceBaseUrl: this.#serviceBaseUrl })
+            .catch(() => {
+            this.#logger.warn('github.run.dispatch_failed', { status: 200, runId: run.runId });
+        });
+    }
+    #isOlderThan(iso, now, thresholdMs) {
+        const started = Date.parse(iso);
+        return Number.isFinite(started) && now.getTime() - started >= thresholdMs;
+    }
+}
+//# sourceMappingURL=deploy-run-reconciler.js.map

package/node_modules/@noodle-borg/service/dist/github/deploy-run-reconciler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-run-reconciler.js","sourceRoot":"","sources":["../../src/github/deploy-run-reconciler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAGtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,MAAM,CAAC,MAAM,gCAAgC,GAAG,MAAM,CAAC;AACvD,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAC;AAC7C,MAAM,CAAC,MAAM,qCAAqC,GAAG,MAAM,CAAC;AAuB5D;;;GAGG;AACH,MAAM,OAAO,yBAAyB;IAC3B,SAAS,CAAuB;IAChC,gBAAgB,CAAwB;IACxC,SAAS,CAAoB;IAC7B,cAAc,CAAS;IACvB,eAAe,CAAS;IACxB,MAAM,CAAa;IACnB,OAAO,CAAS;IAChB,WAAW,CAAS;IACpB,aAAa,CAAS;IACtB,wBAAwB,CAAS;IACjC,mBAAmB,CAAS;IACrC,mBAAmB,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAC/C,SAAS,GAAG,KAAK,CAAC;IAElB,YAAY,OAAyC;QACnD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;QAChD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,IAAI,CAAC,cAAc,GAAG,wBAAwB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACtE,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC;QAC5C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,IAAI,gCAAgC,CAAC;QAC1E,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,YAAY,IAAI,qBAAqB,CAAC;QACnE,IAAI,CAAC,wBAAwB;YAC3B,OAAO,CAAC,uBAAuB,IAAI,qCAAqC,CAAC;QAC3E,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC;IAC9D,CAAC;IAED,UAAU;QACR,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,SAAS,IAAI,GAAG,GAAG,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,WAAW;YAAE,OAAO;QAChF,IAAI,CAAC,mBAAmB,GAAG,GAAG,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,KAAK,IAAI,CAAC,QAAQ,EAAE;aACjB,KAAK,CAAC,GAAG,EAAE;YACV,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACpE,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACzB,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,EAAE,CAAC;QACtE,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE;gBACzF,KAAK,EAAE,IAAI,CAAC,mBAAmB;aAChC,CAAC,CAAC;YACH,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC9B,IAAI,GAAG,CAAC,kBAAkB,KAAK,UAAU,CAAC,kBAAkB;oBAAE,SAAS;gBACvE,SAAS,IAAI,CAAC,CAAC;gBACf,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS;oBAAE,SAAS;gBAC9C,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAC5B,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,wBAAwB,CAAC;wBAAE,SAAS;oBACpF,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBAC1B,UAAU,IAAI,CAAC,CAAC;oBAChB,SAAS;gBACX,CAAC;gBACD,IACE,CAAC,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC;oBACzD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,aAAa,CAAC,EAC1E,CAAC;oBACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,mBAAmB,CACzD,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,KAAK,EACT,QAAQ,EACR;wBACE,YAAY,EAAE,uCAAuC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG;qBAC9F,CACF,CAAC;oBACF,IAAI,UAAU,CAAC,EAAE;wBAAE,MAAM,IAAI,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAoB;QAClC,MAAM,QAAQ,GAAG,YAAY,CAC3B;YACE,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,GAAG,EAAE,GAAG,CAAC,OAAO;YAChB,GAAG,EAAE,GAAG,CAAC,OAAO;YAChB,GAAG,EAAE,GAAG,CAAC,OAAO;YAChB,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;SAClC,EACD,IAAI,CAAC,cAAc,CACpB,CAAC;QACF,MAAM,IAAI,CAAC,SAAS;aACjB,QAAQ,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC;aACjE,KAAK,CAAC,GAAG,EAAE;YACV,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;IACP,CAAC;IAED,YAAY,CAAC,GAAW,EAAE,GAAS,EAAE,WAAmB;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,OAAO,IAAI,WAAW,CAAC;IAC5E,CAAC;CACF"}

package/node_modules/@noodle-borg/service/dist/github/fast-lane-classifier.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Fast-lane eligibility classifier (GHD-3, ADR 0132 Decision 2). A canonical Noodle app imports only
+ * the SDK and local files — nothing to install — so its git deploy is structurally *seconds*. This
+ * gate enforces exactly that BEFORE any user source executes: a repo whose `package.json` declares
+ * third-party dependencies is rejected up front with a structured reason, never compiled. The slow
+ * lane (frozen installs) is a later, separate decision behind the same executor seam.
+ *
+ * Pure over the parsed `package.json` (no fs, no network) so it runs identically in the untrusted
+ * sandbox and in unit tests.
+ */
+/** SDK package names an app may depend on without leaving the fast lane. */
+export declare const FAST_LANE_ALLOWED_DEPENDENCIES: ReadonlySet<string>;
+export type FastLaneClassification = {
+    readonly eligible: true;
+} | {
+    readonly eligible: false;
+    readonly reason: 'unsupported_dependencies';
+    readonly unsupported: readonly string[];
+};
+interface PackageJsonShape {
+    readonly dependencies?: Readonly<Record<string, unknown>>;
+    readonly devDependencies?: Readonly<Record<string, unknown>>;
+}
+/**
+ * Classify a repo from its parsed `package.json` (or `undefined` when the repo has none — a bare
+ * `server.ts` app is fast-lane eligible). Any dependency or devDependency outside the SDK allowlist
+ * makes the repo slow-lane (unsupported in the MVP): the offending names are returned so the failure
+ * can name them.
+ */
+export declare function classifyFastLane(pkg: PackageJsonShape | undefined): FastLaneClassification;
+/**
+ * Parse a raw `package.json` string, then classify. Malformed JSON is treated as "no package.json"
+ * (fast-lane eligible) — the compile step will surface any real problem — rather than failing the
+ * run on a formatting quirk. Callers that need strict parsing should classify the parsed object.
+ */
+export declare function classifyFastLaneFromRaw(raw: string | undefined): FastLaneClassification;
+export {};
+//# sourceMappingURL=fast-lane-classifier.d.ts.map

package/node_modules/@noodle-borg/service/dist/github/fast-lane-classifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fast-lane-classifier.d.ts","sourceRoot":"","sources":["../../src/github/fast-lane-classifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,4EAA4E;AAC5E,eAAO,MAAM,8BAA8B,EAAE,WAAW,CAAC,MAAM,CAM7D,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAC9B;IAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAA;CAAE,GAC3B;IACE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC,CAAC;AAEN,UAAU,gBAAgB;IACxB,QAAQ,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1D,QAAQ,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC9D;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,gBAAgB,GAAG,SAAS,GAAG,sBAAsB,CAe1F;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,sBAAsB,CAOvF"}

package/node_modules/@noodle-borg/service/dist/github/fast-lane-classifier.js

@@ -0,0 +1,60 @@
+/**
+ * Fast-lane eligibility classifier (GHD-3, ADR 0132 Decision 2). A canonical Noodle app imports only
+ * the SDK and local files — nothing to install — so its git deploy is structurally *seconds*. This
+ * gate enforces exactly that BEFORE any user source executes: a repo whose `package.json` declares
+ * third-party dependencies is rejected up front with a structured reason, never compiled. The slow
+ * lane (frozen installs) is a later, separate decision behind the same executor seam.
+ *
+ * Pure over the parsed `package.json` (no fs, no network) so it runs identically in the untrusted
+ * sandbox and in unit tests.
+ */
+/** SDK package names an app may depend on without leaving the fast lane. */
+export const FAST_LANE_ALLOWED_DEPENDENCIES = new Set([
+    '@noodleseed/one',
+    // The widget runtime the SDK's React surface compiles against — provisioned in the builder image,
+    // never installed from a lockfile.
+    'react',
+    'react-dom',
+]);
+/**
+ * Classify a repo from its parsed `package.json` (or `undefined` when the repo has none — a bare
+ * `server.ts` app is fast-lane eligible). Any dependency or devDependency outside the SDK allowlist
+ * makes the repo slow-lane (unsupported in the MVP): the offending names are returned so the failure
+ * can name them.
+ */
+export function classifyFastLane(pkg) {
+    if (pkg === undefined)
+        return { eligible: true };
+    const names = new Set();
+    for (const record of [pkg.dependencies, pkg.devDependencies]) {
+        if (record === undefined)
+            continue;
+        for (const name of Object.keys(record)) {
+            if (!FAST_LANE_ALLOWED_DEPENDENCIES.has(name))
+                names.add(name);
+        }
+    }
+    if (names.size === 0)
+        return { eligible: true };
+    return {
+        eligible: false,
+        reason: 'unsupported_dependencies',
+        unsupported: [...names].sort(),
+    };
+}
+/**
+ * Parse a raw `package.json` string, then classify. Malformed JSON is treated as "no package.json"
+ * (fast-lane eligible) — the compile step will surface any real problem — rather than failing the
+ * run on a formatting quirk. Callers that need strict parsing should classify the parsed object.
+ */
+export function classifyFastLaneFromRaw(raw) {
+    if (raw === undefined)
+        return { eligible: true };
+    try {
+        return classifyFastLane(JSON.parse(raw));
+    }
+    catch {
+        return { eligible: true };
+    }
+}
+//# sourceMappingURL=fast-lane-classifier.js.map

package/node_modules/@noodle-borg/service/dist/github/fast-lane-classifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fast-lane-classifier.js","sourceRoot":"","sources":["../../src/github/fast-lane-classifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,8BAA8B,GAAwB,IAAI,GAAG,CAAC;IACzE,iBAAiB;IACjB,kGAAkG;IAClG,mCAAmC;IACnC,OAAO;IACP,WAAW;CACZ,CAAC,CAAC;AAeH;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAiC;IAChE,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;QAC7D,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS;QACnC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC,8BAA8B,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAChD,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,0BAA0B;QAClC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE;KAC/B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAuB;IAC7D,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjD,IAAI,CAAC;QACH,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC"}

package/node_modules/@noodle-borg/service/dist/github/local-compile.d.ts

@@ -0,0 +1,24 @@
+import type { CompileStageResult } from './deploy-pipeline.js';
+/**
+ * The untrusted compile stage for the local/self-host build worker (GHD-3, ADR 0132 Decision 2/5).
+ * It reads a checked-out source directory and returns manifest data — it is NEVER handed the run token
+ * (the pipeline enforces that seam). The manifest emission itself is injected as {@link ManifestExporter}
+ * so the executor can run the real `noodle export manifest` subprocess while unit tests supply a
+ * manifest directly (no binary, no child process). Debuggability: the default exporter runs the exact
+ * command a human debugs with — `noodle export manifest` in the repo.
+ *
+ * Order matters for the fast-lane guarantee: the dependency gate runs BEFORE any source executes, so a
+ * repo with third-party deps is rejected up front with a named reason, never compiled.
+ */
+export type ManifestExporter = (input: {
+    readonly sourceDir: string;
+    readonly entrypoint: string;
+}) => Promise<{
+    readonly manifest: string;
+    readonly connectors?: string;
+}>;
+export interface LocalCompileOptions {
+    readonly exportManifest: ManifestExporter;
+}
+export declare function createLocalCompile(options: LocalCompileOptions): (sourceDir: string) => Promise<CompileStageResult>;
+//# sourceMappingURL=local-compile.d.ts.map

package/node_modules/@noodle-borg/service/dist/github/local-compile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-compile.d.ts","sourceRoot":"","sources":["../../src/github/local-compile.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAiB,MAAM,sBAAsB,CAAC;AAG9E;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,KAAK,OAAO,CAAC;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE3E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,cAAc,EAAE,gBAAgB,CAAC;CAC3C;AA2CD,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,mBAAmB,GAC3B,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,kBAAkB,CAAC,CA8DpD"}

package/node_modules/@noodle-borg/service/dist/github/local-compile.js

@@ -0,0 +1,98 @@
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { manifestSchema, prepareLocalAssets } from '@noodle-borg/compiler';
+import { classifyFastLane } from './fast-lane-classifier.js';
+async function readJsonFile(path) {
+    try {
+        return JSON.parse(await readFile(path, 'utf8'));
+    }
+    catch {
+        return undefined;
+    }
+}
+function truncate(text, max = 240) {
+    return text.length > max ? `${text.slice(0, max)}…` : text;
+}
+/**
+ * Resolve the manifest's local hosted assets (widget bundles, images) to upload-ready pairs: the wire
+ * metadata (absolutePath stripped) plus the bytes. Reuses the compiler's `prepareLocalAssets` so the
+ * git build worker and the CLI deploy path share one asset contract.
+ */
+async function prepareAssetsForUpload(manifest, rootDir) {
+    let raw;
+    try {
+        raw = JSON.parse(manifest);
+    }
+    catch {
+        return [];
+    }
+    const parsed = manifestSchema.safeParse(raw);
+    if (!parsed.success)
+        return [];
+    const prepared = prepareLocalAssets(parsed.data, { rootDir });
+    if (prepared.errors.length > 0) {
+        throw new Error(prepared.errors.map((error) => error.message).join('; '));
+    }
+    const assets = [];
+    for (const asset of prepared.assets) {
+        const { absolutePath, ...wire } = asset;
+        assets.push({ prepared: wire, bytes: new Uint8Array(await readFile(absolutePath)) });
+    }
+    return assets;
+}
+export function createLocalCompile(options) {
+    return async (sourceDir) => {
+        // 1. Fast-lane dependency gate — reject third-party deps BEFORE running any source.
+        const pkg = await readJsonFile(join(sourceDir, 'package.json'));
+        const classification = classifyFastLane(pkg);
+        if (!classification.eligible) {
+            const noun = classification.unsupported.length === 1 ? 'dependency' : 'dependencies';
+            const list = classification.unsupported.map((name) => `"${name}"`).join(', ');
+            return {
+                ok: false,
+                errorSummary: `compile: unsupported ${noun} ${list} — the git build worker compiles Noodle-native source only (SDK + local files); deploy with the CLI instead`,
+            };
+        }
+        // 2. Entrypoint + declared access mode from committed noodle.json (the "declared" inherit source).
+        const noodleJson = await readJsonFile(join(sourceDir, 'noodle.json'));
+        const entrypoint = typeof noodleJson?.entrypoint === 'string' ? noodleJson.entrypoint : 'server.ts';
+        const declaredAccessMode = typeof noodleJson?.accessMode === 'string' ? noodleJson.accessMode : undefined;
+        // 3. Compile the manifest (untrusted — this runs the app's source).
+        let exported;
+        try {
+            exported = await options.exportManifest({
+                sourceDir,
+                entrypoint: join(sourceDir, entrypoint),
+            });
+        }
+        catch (error) {
+            const name = error instanceof Error ? error.name : 'Error';
+            const message = error instanceof Error ? error.message : '';
+            return {
+                ok: false,
+                errorSummary: `compile: ${entrypoint} failed to compile (${name})${message !== '' ? `: ${truncate(message)}` : ''}`,
+            };
+        }
+        // 4. Prepare local hosted assets for the pipeline to upload.
+        let assets;
+        try {
+            assets = await prepareAssetsForUpload(exported.manifest, sourceDir);
+        }
+        catch (error) {
+            return {
+                ok: false,
+                errorSummary: `compile: hosted asset preparation failed: ${error instanceof Error ? truncate(error.message) : 'unknown error'}`,
+            };
+        }
+        return {
+            ok: true,
+            input: {
+                manifest: exported.manifest,
+                ...(exported.connectors !== undefined ? { connectors: exported.connectors } : {}),
+                ...(declaredAccessMode !== undefined ? { declaredAccessMode } : {}),
+                ...(assets.length > 0 ? { assets } : {}),
+            },
+        };
+    };
+}
+//# sourceMappingURL=local-compile.js.map

package/node_modules/@noodle-borg/service/dist/github/local-compile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-compile.js","sourceRoot":"","sources":["../../src/github/local-compile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAuB7D,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAA4B,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,GAAG,GAAG,GAAG;IACvC,OAAO,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,sBAAsB,CACnC,QAAgB,EAChB,OAAe;IAEf,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9D,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,OAA4B;IAE5B,OAAO,KAAK,EAAE,SAAS,EAAE,EAAE;QACzB,oFAAoF;QACpF,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;QAChE,MAAM,cAAc,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC;YACrF,MAAM,IAAI,GAAG,cAAc,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9E,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,YAAY,EAAE,wBAAwB,IAAI,IAAI,IAAI,6GAA6G;aAChK,CAAC;QACJ,CAAC;QAED,mGAAmG;QACnG,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;QACtE,MAAM,UAAU,GACd,OAAO,UAAU,EAAE,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC;QACnF,MAAM,kBAAkB,GACtB,OAAO,UAAU,EAAE,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QAEjF,oEAAoE;QACpE,IAAI,QAA+C,CAAC;QACpD,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;gBACtC,SAAS;gBACT,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC;aACxC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3D,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,YAAY,EAAE,YAAY,UAAU,uBAAuB,IAAI,IAC7D,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAC9C,EAAE;aACH,CAAC;QACJ,CAAC;QAED,6DAA6D;QAC7D,IAAI,MAAgC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,YAAY,EAAE,6CACZ,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,eACrD,EAAE;aACH,CAAC;QACJ,CAAC;QAED,OAAO;YACL,EAAE,EAAE,IAAI;YACR,KAAK,EAAE;gBACL,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,GAAG,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjF,GAAG,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnE,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzC;SACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/node_modules/@noodle-borg/service/dist/github/local-process-executor.d.ts

@@ -0,0 +1,39 @@
+import type { DeployRunRecord } from '../store.js';
+import type { DeployRunDispatchInput, DeployRunExecutor } from './deploy-run-executor.js';
+import { type ManifestExporter } from './local-compile.js';
+/** A checked-out working copy of the run's source, plus an optional cleanup for its temp storage. */
+export interface RepoCheckout {
+    readonly sourceDir: string;
+    readonly cleanup?: () => Promise<void>;
+}
+export interface LocalProcessExecutorDeps {
+    /**
+     * Fetch the run's source into a local directory — a git clone at `commitSha` in prod/self-host, a
+     * fixture directory in tests. This is the deferred credential-broker/git seam; it lives here so the
+     * rest of the pipeline never sees an installation token.
+     */
+    readonly checkout: (run: DeployRunRecord) => Promise<RepoCheckout>;
+    /** How the untrusted source becomes a manifest — the real adapter runs `noodle export manifest`. */
+    readonly exportManifest: ManifestExporter;
+    /** Injected so tests use a fake and prod uses global `fetch`. */
+    readonly httpFetch?: typeof fetch;
+}
+/**
+ * The C2 / self-host / E2E executor (GHD-3, ADR 0132 Decision 6): runs the untrusted-compile →
+ * trusted-deploy pipeline as a local async task. `checkout` (fetch source) and `exportManifest`
+ * (source → manifest) are the only environment-specific seams, and both are folded into the pipeline's
+ * untrusted `compile` closure — so a checkout OR compile failure lands the run at `failed` with a
+ * compile-stage `errorSummary`, never a hang.
+ *
+ * `dispatch` is fire-and-forget: it launches the task and resolves immediately (the webhook must answer
+ * GitHub at once) and never throws into the caller. `settled()` lets tests and graceful shutdown await
+ * the launched work.
+ */
+export declare class LocalProcessExecutor implements DeployRunExecutor {
+    #private;
+    constructor(deps: LocalProcessExecutorDeps);
+    dispatch(input: DeployRunDispatchInput): Promise<void>;
+    /** Await every launched pipeline — for tests and graceful shutdown. */
+    settled(): Promise<void>;
+}
+//# sourceMappingURL=local-process-executor.d.ts.map

package/node_modules/@noodle-borg/service/dist/github/local-process-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-process-executor.d.ts","sourceRoot":"","sources":["../../src/github/local-process-executor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGnD,OAAO,KAAK,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC1F,OAAO,EAAsB,KAAK,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE/E,qGAAqG;AACrG,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,wBAAwB;IACvC;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IACnE,oGAAoG;IACpG,QAAQ,CAAC,cAAc,EAAE,gBAAgB,CAAC;IAC1C,iEAAiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CACnC;AAED;;;;;;;;;;GAUG;AACH,qBAAa,oBAAqB,YAAW,iBAAiB;;gBAMhD,IAAI,EAAE,wBAAwB;IAM1C,QAAQ,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAQtD,uEAAuE;IACjE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAiC/B"}