@oisincoveney/pipeline 3.11.9 → 3.11.10

package/dist/config/schemas.d.ts

@@ -226,8 +226,8 @@ declare const configSchema: z.ZodObject<{
     policy: z.ZodOptional<z.ZodObject<{
       commands: z.ZodOptional<z.ZodEnum<{
         allow: "allow";
-        deny: "deny";
         "trusted-only": "trusted-only";
+        deny: "deny";
       }>>;
       modules: z.ZodOptional<z.ZodEnum<{
         allow: "allow";
@@ -255,8 +255,8 @@ declare const configSchema: z.ZodObject<{
       global: "global";
     }>>;
     mode: z.ZodEnum<{
-      local: "local";
       hosted: "hosted";
+      local: "local";
     }>;
     provider: z.ZodLiteral<"toolhive">;
     authorization_env: z.ZodDefault<z.ZodString>;
@@ -299,10 +299,10 @@ declare const configSchema: z.ZodObject<{
     }, z.core.$strict>>;
     output: z.ZodOptional<z.ZodObject<{
       format: z.ZodEnum<{
-        json_schema: "json_schema";
         text: "text";
         json: "json";
         jsonl: "jsonl";
+        json_schema: "json_schema";
       }>;
       repair: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodOptional<z.ZodBoolean>;
@@ -371,10 +371,10 @@ declare const configSchema: z.ZodObject<{
         disabled: "disabled";
       }>>>;
       output_formats: z.ZodOptional<z.ZodArray<z.ZodEnum<{
-        json_schema: "json_schema";
         text: "text";
         json: "json";
         jsonl: "jsonl";
+        json_schema: "json_schema";
       }>>>;
       rules: z.ZodOptional<z.ZodBoolean>;
       skills: z.ZodOptional<z.ZodBoolean>;
@@ -481,8 +481,8 @@ declare const configSchema: z.ZodObject<{
   schedules: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
     description: z.ZodOptional<z.ZodString>;
     baseline: z.ZodEnum<{
-      quick: "quick";
       execute: "execute";
+      quick: "quick";
     }>;
     max_parallel_nodes: z.ZodOptional<z.ZodNumber>;
     node_catalog: z.ZodOptional<z.ZodString>;

package/dist/moka-submit.d.ts

@@ -161,8 +161,8 @@ declare const mokaSubmitOptionsSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
   }, z.core.$strict>>;
   serviceAccountName: z.ZodOptional<z.ZodString>;
   mode: z.ZodEnum<{
-    full: "full";
     quick: "quick";
+    full: "full";
   }>;
   schedulePath: z.ZodOptional<z.ZodString>;
   scheduleYaml: z.ZodOptional<z.ZodString>;

package/dist/run-state/git-refs.js

@@ -74,6 +74,17 @@ function commitAndPushNodeRefEffect(input) {
 		return sha;
 	});
 }
+/**
+* Run a single git command through the runner's authenticated path: per-command
+* credential-helper store (basic-auth from the mounted git-credentials) plus
+* GIT_TERMINAL_PROMPT=0 so a missing credential fails fast instead of blocking
+* forever on an interactive username prompt. This is the ONE git-auth primitive;
+* every runner git operation (node delivery, dependency merge, open-pull-request)
+* must route through it rather than spawning naked git.
+*/
+async function runAuthenticatedGit(cwd, args) {
+	return await Effect.runPromise(Effect.provide(runGit(cwd, args), GitPorcelainServiceLive));
+}
 async function promoteFinalRef(input) {
 	return await Effect.runPromise(Effect.provide(promoteFinalRefEffect(input), GitPorcelainServiceLive));
 }
@@ -315,4 +326,4 @@ function shellQuote(value) {
 	return `'${value.replaceAll("'", `'\\''`)}'`;
 }
 //#endregion
-export { commitAndPushNodeRef, mergeDependencyRefs, prepareRunnerGitWorkspace, promoteFinalRef };
+export { commitAndPushNodeRef, mergeDependencyRefs, prepareRunnerGitWorkspace, promoteFinalRef, runAuthenticatedGit };

package/dist/runner-command-contract.d.ts

@@ -43,8 +43,8 @@ declare const runnerDeliverySchema: z.ZodObject<{
 declare const mokaSubmissionSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
   kind: z.ZodLiteral<"graph">;
   mode: z.ZodEnum<{
-    full: "full";
     quick: "quick";
+    full: "full";
   }>;
 }, z.core.$strict>, z.ZodObject<{
   argv: z.ZodArray<z.ZodString>;
@@ -104,8 +104,8 @@ declare const runnerCommandPayloadSchema: z.ZodObject<{
   submission: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
     kind: z.ZodLiteral<"graph">;
     mode: z.ZodEnum<{
-      full: "full";
       quick: "quick";
+      full: "full";
     }>;
   }, z.core.$strict>, z.ZodObject<{
     argv: z.ZodArray<z.ZodString>;

package/dist/runtime/services/open-pull-request-git-service.js

@@ -1,10 +1,10 @@
+import { runAuthenticatedGit } from "../../run-state/git-refs.js";
 import { Context, Effect, Layer } from "effect";
-import simpleGit$1 from "simple-git";
 //#region src/runtime/services/open-pull-request-git-service.ts
 var OpenPullRequestGitService = class extends Context.Tag("OpenPullRequestGitService")() {};
-const OpenPullRequestGitServiceLive = Layer.succeed(OpenPullRequestGitService, { create: (baseDir) => Effect.sync(() => {
-	const git = simpleGit$1({ baseDir });
-	return { raw: (args) => Effect.tryPromise(() => git.raw(args)) };
-}) });
+function authenticatedGitClient(baseDir) {
+	return { raw: (args) => Effect.tryPromise(() => runAuthenticatedGit(baseDir, args)) };
+}
+const OpenPullRequestGitServiceLive = Layer.succeed(OpenPullRequestGitService, { create: (baseDir) => Effect.sync(() => authenticatedGitClient(baseDir)) });
 //#endregion
 export { OpenPullRequestGitService, OpenPullRequestGitServiceLive };

package/dist/runtime/services/runner-command-io-service.js

@@ -1,5 +1,5 @@
-import { runScheduledWorkflowTask } from "../../pipeline-runtime.js";
 import { commitAndPushNodeRef, mergeDependencyRefs, prepareRunnerGitWorkspace, promoteFinalRef } from "../../run-state/git-refs.js";
+import { runScheduledWorkflowTask } from "../../pipeline-runtime.js";
 import { resolveRunnerEventSinkAuthToken } from "../../runner-command-contract.js";
 import { createRunnerEventSink } from "../../runner-event-sink.js";
 import { Context, Effect, Layer } from "effect";

package/package.json

@@ -127,7 +127,7 @@
     "prepack": "bun run build:cli"
   },
   "type": "module",
-  "version": "3.11.9",
+  "version": "3.11.10",
   "description": "Config-driven multi-agent pipeline runner for repository work",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",