@oisincoveney/pipeline 3.11.9 → 3.11.11

package/dist/argo-workflow.d.ts

@@ -80,6 +80,7 @@ declare const runnerArgoWorkflowManifestSchema: z.ZodObject<{
           path: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
       }, z.core.$strict>>;
+      activeDeadlineSeconds: z.ZodOptional<z.ZodNumber>;
       name: z.ZodString;
       retryStrategy: z.ZodOptional<z.ZodObject<{
         expression: z.ZodOptional<z.ZodString>;

package/dist/argo-workflow.js

@@ -31,6 +31,7 @@ const DEFAULT_RUNNER_RESOURCES = {
 		memory: "8Gi"
 	}
 };
+const DEFAULT_RUNNER_DEADLINE_SECONDS = 3600;
 const kubernetesNameSchema = z.string().min(1);
 const labelValueSchema = z.string().min(1);
 const stringMapSchema = z.record(z.string().min(1), z.string().min(1));
@@ -109,6 +110,7 @@ const argoWorkflowTemplateSchema = z.object({
 		parameters: z.array(z.object({ name: z.string().min(1) }).strict()).optional()
 	}).strict().optional(),
 	outputs: z.object({ artifacts: z.array(argoWorkflowArtifactSchema) }).strict().optional(),
+	activeDeadlineSeconds: z.number().int().positive().optional(),
 	name: z.string().min(1),
 	retryStrategy: argoWorkflowRetryStrategySchema.optional()
 }).strict().refine((template) => template.container !== void 0 || template.dag !== void 0, { message: "Workflow templates must declare container or dag" });
@@ -384,7 +386,8 @@ function runnerLifecycleTemplate(options, volumeMounts) {
 			volumeMounts
 		},
 		name: RUNNER_WORKFLOW_START_TASK,
-		retryStrategy: { ...RUNNER_RETRY_STRATEGY }
+		retryStrategy: { ...RUNNER_RETRY_STRATEGY },
+		activeDeadlineSeconds: DEFAULT_RUNNER_DEADLINE_SECONDS
 	};
 }
 function runnerCommandTemplate(task, options, volumeMounts) {
@@ -412,7 +415,8 @@ function runnerCommandTemplate(task, options, volumeMounts) {
 			volumeMounts: [...volumeMounts, taskVolumeMount]
 		},
 		name: task.templateName,
-		retryStrategy: { ...RUNNER_RETRY_STRATEGY }
+		retryStrategy: { ...RUNNER_RETRY_STRATEGY },
+		activeDeadlineSeconds: DEFAULT_RUNNER_DEADLINE_SECONDS
 	};
 }
 function runnerFinalizerTemplate(options, volumeMounts) {
@@ -435,7 +439,8 @@ function runnerFinalizerTemplate(options, volumeMounts) {
 			resources: options.resources ?? DEFAULT_RUNNER_RESOURCES,
 			volumeMounts
 		},
-		name: "pipeline-finalizer"
+		name: "pipeline-finalizer",
+		activeDeadlineSeconds: DEFAULT_RUNNER_DEADLINE_SECONDS
 	};
 }
 function compactRecord(input) {

package/dist/config/schemas.d.ts

@@ -226,8 +226,8 @@ declare const configSchema: z.ZodObject<{
     policy: z.ZodOptional<z.ZodObject<{
       commands: z.ZodOptional<z.ZodEnum<{
         allow: "allow";
-        deny: "deny";
         "trusted-only": "trusted-only";
+        deny: "deny";
       }>>;
       modules: z.ZodOptional<z.ZodEnum<{
         allow: "allow";
@@ -255,8 +255,8 @@ declare const configSchema: z.ZodObject<{
       global: "global";
     }>>;
     mode: z.ZodEnum<{
-      local: "local";
       hosted: "hosted";
+      local: "local";
     }>;
     provider: z.ZodLiteral<"toolhive">;
     authorization_env: z.ZodDefault<z.ZodString>;
@@ -299,10 +299,10 @@ declare const configSchema: z.ZodObject<{
     }, z.core.$strict>>;
     output: z.ZodOptional<z.ZodObject<{
       format: z.ZodEnum<{
-        json_schema: "json_schema";
         text: "text";
         json: "json";
         jsonl: "jsonl";
+        json_schema: "json_schema";
       }>;
       repair: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodOptional<z.ZodBoolean>;
@@ -371,10 +371,10 @@ declare const configSchema: z.ZodObject<{
         disabled: "disabled";
       }>>>;
       output_formats: z.ZodOptional<z.ZodArray<z.ZodEnum<{
-        json_schema: "json_schema";
         text: "text";
         json: "json";
         jsonl: "jsonl";
+        json_schema: "json_schema";
       }>>>;
       rules: z.ZodOptional<z.ZodBoolean>;
       skills: z.ZodOptional<z.ZodBoolean>;
@@ -481,8 +481,8 @@ declare const configSchema: z.ZodObject<{
   schedules: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
     description: z.ZodOptional<z.ZodString>;
     baseline: z.ZodEnum<{
-      quick: "quick";
       execute: "execute";
+      quick: "quick";
     }>;
     max_parallel_nodes: z.ZodOptional<z.ZodNumber>;
     node_catalog: z.ZodOptional<z.ZodString>;

package/dist/hooks.d.ts

@@ -13,8 +13,8 @@ declare const hookResultSchema: z.ZodObject<{
     taskContext: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
   }, z.core.$strict>>;
   status: z.ZodEnum<{
-    fail: "fail";
     pass: "pass";
+    fail: "fail";
     skip: "skip";
   }>;
   summary: z.ZodOptional<z.ZodString>;

package/dist/moka-submit.d.ts

@@ -161,8 +161,8 @@ declare const mokaSubmitOptionsSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
   }, z.core.$strict>>;
   serviceAccountName: z.ZodOptional<z.ZodString>;
   mode: z.ZodEnum<{
-    full: "full";
     quick: "quick";
+    full: "full";
   }>;
   schedulePath: z.ZodOptional<z.ZodString>;
   scheduleYaml: z.ZodOptional<z.ZodString>;

package/dist/run-state/git-refs.js

@@ -74,6 +74,17 @@ function commitAndPushNodeRefEffect(input) {
 		return sha;
 	});
 }
+/**
+* Run a single git command through the runner's authenticated path: per-command
+* credential-helper store (basic-auth from the mounted git-credentials) plus
+* GIT_TERMINAL_PROMPT=0 so a missing credential fails fast instead of blocking
+* forever on an interactive username prompt. This is the ONE git-auth primitive;
+* every runner git operation (node delivery, dependency merge, open-pull-request)
+* must route through it rather than spawning naked git.
+*/
+async function runAuthenticatedGit(cwd, args) {
+	return await Effect.runPromise(Effect.provide(runGit(cwd, args), GitPorcelainServiceLive));
+}
 async function promoteFinalRef(input) {
 	return await Effect.runPromise(Effect.provide(promoteFinalRefEffect(input), GitPorcelainServiceLive));
 }
@@ -315,4 +326,4 @@ function shellQuote(value) {
 	return `'${value.replaceAll("'", `'\\''`)}'`;
 }
 //#endregion
-export { commitAndPushNodeRef, mergeDependencyRefs, prepareRunnerGitWorkspace, promoteFinalRef };
+export { commitAndPushNodeRef, mergeDependencyRefs, prepareRunnerGitWorkspace, promoteFinalRef, runAuthenticatedGit };

package/dist/runner-command-contract.d.ts

@@ -43,8 +43,8 @@ declare const runnerDeliverySchema: z.ZodObject<{
 declare const mokaSubmissionSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
   kind: z.ZodLiteral<"graph">;
   mode: z.ZodEnum<{
-    full: "full";
     quick: "quick";
+    full: "full";
   }>;
 }, z.core.$strict>, z.ZodObject<{
   argv: z.ZodArray<z.ZodString>;
@@ -104,8 +104,8 @@ declare const runnerCommandPayloadSchema: z.ZodObject<{
   submission: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
     kind: z.ZodLiteral<"graph">;
     mode: z.ZodEnum<{
-      full: "full";
       quick: "quick";
+      full: "full";
     }>;
   }, z.core.$strict>, z.ZodObject<{
     argv: z.ZodArray<z.ZodString>;

package/dist/runner-event-schema.d.ts

@@ -108,8 +108,8 @@ declare const runnerEventRecordSchema: z.ZodUnion<readonly [z.ZodObject<{
     nodeId: z.ZodOptional<z.ZodString>;
     outputs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     status: z.ZodEnum<{
-      fail: "fail";
       pass: "pass";
+      fail: "fail";
       skip: "skip";
     }>;
     summary: z.ZodOptional<z.ZodString>;
@@ -286,8 +286,8 @@ declare const runnerEventBatchSchema: z.ZodObject<{
       nodeId: z.ZodOptional<z.ZodString>;
       outputs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
       status: z.ZodEnum<{
-        fail: "fail";
         pass: "pass";
+        fail: "fail";
         skip: "skip";
       }>;
       summary: z.ZodOptional<z.ZodString>;

package/dist/runtime/services/open-pull-request-git-service.js

@@ -1,10 +1,10 @@
+import { runAuthenticatedGit } from "../../run-state/git-refs.js";
 import { Context, Effect, Layer } from "effect";
-import simpleGit$1 from "simple-git";
 //#region src/runtime/services/open-pull-request-git-service.ts
 var OpenPullRequestGitService = class extends Context.Tag("OpenPullRequestGitService")() {};
-const OpenPullRequestGitServiceLive = Layer.succeed(OpenPullRequestGitService, { create: (baseDir) => Effect.sync(() => {
-	const git = simpleGit$1({ baseDir });
-	return { raw: (args) => Effect.tryPromise(() => git.raw(args)) };
-}) });
+function authenticatedGitClient(baseDir) {
+	return { raw: (args) => Effect.tryPromise(() => runAuthenticatedGit(baseDir, args)) };
+}
+const OpenPullRequestGitServiceLive = Layer.succeed(OpenPullRequestGitService, { create: (baseDir) => Effect.sync(() => authenticatedGitClient(baseDir)) });
 //#endregion
 export { OpenPullRequestGitService, OpenPullRequestGitServiceLive };

package/dist/runtime/services/runner-command-io-service.js

@@ -1,5 +1,5 @@
-import { runScheduledWorkflowTask } from "../../pipeline-runtime.js";
 import { commitAndPushNodeRef, mergeDependencyRefs, prepareRunnerGitWorkspace, promoteFinalRef } from "../../run-state/git-refs.js";
+import { runScheduledWorkflowTask } from "../../pipeline-runtime.js";
 import { resolveRunnerEventSinkAuthToken } from "../../runner-command-contract.js";
 import { createRunnerEventSink } from "../../runner-event-sink.js";
 import { Context, Effect, Layer } from "effect";

package/package.json

@@ -127,7 +127,7 @@
     "prepack": "bun run build:cli"
   },
   "type": "module",
-  "version": "3.11.9",
+  "version": "3.11.11",
   "description": "Config-driven multi-agent pipeline runner for repository work",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",