@omnitron-dev/omnitron 0.3.0 → 0.3.2

package/dist/services/pipeline-definition.d.ts

@@ -0,0 +1,14 @@
+import type { PipelineDef, PipelineStep } from '../shared/dto/pipelines.js';
+export declare const PIPELINE_LIMITS: {
+    readonly steps: 32;
+    readonly activeRuns: 8;
+    readonly concurrency: 4;
+    readonly sourceBytes: number;
+    readonly outputBytes: number;
+};
+/** A deliberately small condition language. Unsupported expressions never authorize a step. */
+export declare function pipelineCondition(expression: string, params: Record<string, unknown>): boolean;
+export declare function validatePipeline(def: PipelineDef): void;
+export declare function validatePipelineParams(params?: Record<string, unknown>): void;
+export declare function stepEnvironment(step: PipelineStep, params: Record<string, unknown>): Record<string, string>;
+//# sourceMappingURL=pipeline-definition.d.ts.map

package/dist/services/pipeline-definition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline-definition.d.ts","sourceRoot":"","sources":["../../src/services/pipeline-definition.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE5E,eAAO,MAAM,eAAe;aAC1B,KAAK,EAAE,EAAE;aACT,UAAU,EAAE,CAAC;aACb,WAAW,EAAE,CAAC;aACd,WAAW;aACX,WAAW;CACH,CAAC;AAEX,+FAA+F;AAC/F,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAS9F;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAoDvD;AAED,wBAAgB,sBAAsB,CAAC,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI,CAcjF;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAE3G"}

package/dist/services/pipeline-definition.js

@@ -0,0 +1,77 @@
+export const PIPELINE_LIMITS = {
+    steps: 32,
+    activeRuns: 8,
+    concurrency: 4,
+    sourceBytes: 128 * 1024,
+    outputBytes: 32 * 1024,
+};
+/** A deliberately small condition language. Unsupported expressions never authorize a step. */
+export function pipelineCondition(expression, params) {
+    const comparison = expression.match(/^params\.(\w+)\s*(==|!=)\s*(['"])(.*?)\3\s*$/);
+    if (comparison) {
+        const equal = String(params[comparison[1]] ?? '') === comparison[4];
+        return comparison[2] === '==' ? equal : !equal;
+    }
+    const boolean = expression.match(/^(!\s*)?params\.(\w+)\s*$/);
+    if (boolean)
+        return boolean[1] ? !params[boolean[2]] : Boolean(params[boolean[2]]);
+    throw new Error(`Unsupported pipeline condition: ${expression}`);
+}
+export function validatePipeline(def) {
+    if (!def || typeof def.name !== 'string' || !def.name.trim() || def.name.length > 120)
+        throw new Error('Pipeline name must contain 1–120 characters');
+    if (def.description !== undefined && (typeof def.description !== 'string' || def.description.length > 2000))
+        throw new Error('Pipeline description must contain at most 2000 characters');
+    if (!Array.isArray(def.steps) || !def.steps.length || def.steps.length > PIPELINE_LIMITS.steps)
+        throw new Error(`A pipeline requires 1–${PIPELINE_LIMITS.steps} steps`);
+    if (def.triggers !== undefined &&
+        (!Array.isArray(def.triggers) || def.triggers.some((trigger) => !trigger || trigger.type !== 'manual')))
+        throw new Error('Only manual triggers are currently supported');
+    for (const step of def.steps) {
+        if (!step || typeof step.name !== 'string' || !/^[\w.-]{1,80}$/.test(step.name))
+            throw new Error('Invalid step name');
+        if (typeof step.run !== 'string' || !step.run.trim() || Buffer.byteLength(step.run) > PIPELINE_LIMITS.sourceBytes)
+            throw new Error(`Step ${step.name} requires source of at most 128 KiB`);
+        if (step.kind !== undefined && step.kind !== 'shell' && step.kind !== 'xec')
+            throw new Error('Unknown step kind');
+        if (/\{\{\w+\}\}/.test(step.run))
+            throw new Error('Shell interpolation is disabled. Use params in Xec or OMNITRON_PARAMS JSON in shell steps');
+        if (step.timeout !== undefined &&
+            (!Number.isInteger(step.timeout) || step.timeout < 1 || step.timeout > 86_400_000))
+            throw new Error('Step timeout must be between 1 ms and 24 hours');
+        if (step.retries !== undefined && (!Number.isInteger(step.retries) || step.retries < 0 || step.retries > 5))
+            throw new Error('Step retries must be between 0 and 5');
+        for (const value of [step.cwd, step.nodeId])
+            if (value !== undefined && (typeof value !== 'string' || !value || value.length > 4096 || value.includes('\0')))
+                throw new Error('Invalid working directory or node ID');
+        if (step.dependsOn !== undefined &&
+            (!Array.isArray(step.dependsOn) || !step.dependsOn.every((d) => typeof d === 'string')))
+            throw new Error('Step dependencies must be an array of names');
+        if (step.env !== undefined &&
+            (!step.env ||
+                Array.isArray(step.env) ||
+                typeof step.env !== 'object' ||
+                Object.keys(step.env).length > 64 ||
+                Object.entries(step.env).some(([key, value]) => !/^[A-Za-z_][\w]*$/.test(key) || typeof value !== 'string' || value.length > 8192 || value.includes('\0'))))
+            throw new Error('Invalid step environment');
+        if (step.condition !== undefined) {
+            if (typeof step.condition !== 'string' || step.condition.length > 512)
+                throw new Error('Invalid step condition');
+            pipelineCondition(step.condition, {});
+        }
+    }
+}
+export function validatePipelineParams(params = {}) {
+    if (!params ||
+        Array.isArray(params) ||
+        typeof params !== 'object' ||
+        Object.keys(params).length > 64 ||
+        Object.values(params).some((value) => (value !== null && !['string', 'number', 'boolean'].includes(typeof value)) ||
+            (typeof value === 'number' && !Number.isFinite(value))) ||
+        Buffer.byteLength(JSON.stringify(params)) > 16 * 1024)
+        throw new Error('Parameters must be scalar JSON values, at most 16 KiB');
+}
+export function stepEnvironment(step, params) {
+    return { ...step.env, OMNITRON_PARAMS: JSON.stringify(params) };
+}
+//# sourceMappingURL=pipeline-definition.js.map

package/dist/services/pipeline-definition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline-definition.js","sourceRoot":"","sources":["../../src/services/pipeline-definition.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,KAAK,EAAE,EAAE;IACT,UAAU,EAAE,CAAC;IACb,WAAW,EAAE,CAAC;IACd,WAAW,EAAE,GAAG,GAAG,IAAI;IACvB,WAAW,EAAE,EAAE,GAAG,IAAI;CACd,CAAC;AAEX,+FAA+F;AAC/F,MAAM,UAAU,iBAAiB,CAAC,UAAkB,EAAE,MAA+B;IACnF,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACpF,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC;QACrE,OAAO,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACjD,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC9D,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;IACrF,MAAM,IAAI,KAAK,CAAC,mCAAmC,UAAU,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAgB;IAC/C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG;QACnF,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC;QACzG,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,eAAe,CAAC,KAAK;QAC5F,MAAM,IAAI,KAAK,CAAC,yBAAyB,eAAe,CAAC,KAAK,QAAQ,CAAC,CAAC;IAC1E,IACE,GAAG,CAAC,QAAQ,KAAK,SAAS;QAC1B,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QAEvG,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAC7E,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,WAAW;YAC/G,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,IAAI,qCAAqC,CAAC,CAAC;QAC1E,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAClH,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAC;QAC/G,IACE,IAAI,CAAC,OAAO,KAAK,SAAS;YAC1B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC;YAElF,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;YACzG,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC;YACzC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC7G,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC5D,IACE,IAAI,CAAC,SAAS,KAAK,SAAS;YAC5B,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;YAEvF,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,IACE,IAAI,CAAC,GAAG,KAAK,SAAS;YACtB,CAAC,CAAC,IAAI,CAAC,GAAG;gBACR,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;gBACvB,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;gBAC5B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE;gBACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAC3B,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CACf,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC5G,CAAC;YAEJ,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACjH,iBAAiB,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAM,GAA4B,EAAE;IACzE,IACE,CAAC,MAAM;QACP,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACrB,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,EAAE;QAC/B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CACxB,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC,CAAC;YAC3E,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CACzD;QACD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI;QAErD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAkB,EAAE,MAA+B;IACjF,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;AAClE,CAAC"}

package/dist/services/pipeline.rpc-service.d.ts

@@ -3,12 +3,22 @@
  *
  * Netron RPC endpoints for CI/CD pipeline management from webapp and CLI.
  */
-import type { PipelineService, Pipeline, PipelineDef, PipelineRun } from './pipeline.service.js';
+import type { AuthService } from './auth.service.js';
+import type { AuditService } from './audit.service.js';
+import type { PipelineService, Pipeline, PipelineDef, PipelineRun, PipelineRunSummary } from './pipeline.service.js';
 import type { IOmnitronPipelinesService } from '../shared/dto/services.js';
 export declare class PipelineRpcService implements IOmnitronPipelinesService {
     private readonly pipelines;
-    constructor(pipelines: PipelineService);
+    private readonly auth;
+    private readonly audit;
+    constructor(pipelines: PipelineService, auth: Pick<AuthService, 'validateSession'>, audit: Pick<AuditService, 'record'>);
+    private authorize;
     createPipeline(data: PipelineDef): Promise<Pipeline>;
+    updatePipeline(data: {
+        id: string;
+        definition: PipelineDef;
+        expectedRevision: string;
+    }): Promise<Pipeline>;
     getPipeline(data: {
         id: string;
     }): Promise<Pipeline | null>;
@@ -20,6 +30,7 @@ export declare class PipelineRpcService implements IOmnitronPipelinesService {
     }>;
     executePipeline(data: {
         id: string;
+        expectedRevision: string;
         params?: Record<string, unknown>;
     }): Promise<PipelineRun>;
     cancelRun(data: {
@@ -33,6 +44,6 @@ export declare class PipelineRpcService implements IOmnitronPipelinesService {
     listRuns(data?: {
         pipelineId?: string;
         limit?: number;
-    }): Promise<PipelineRun[]>;
+    }): Promise<PipelineRunSummary[]>;
 }
 //# sourceMappingURL=pipeline.rpc-service.d.ts.map

package/dist/services/pipeline.rpc-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pipeline.rpc-service.d.ts","sourceRoot":"","sources":["../../src/services/pipeline.rpc-service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EACV,eAAe,EACf,QAAQ,EACR,WAAW,EACX,WAAW,EACZ,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAE3E,qBACa,kBAAmB,YAAW,yBAAyB;IACtD,OAAO,CAAC,QAAQ,CAAC,SAAS;IAAtC,YAA6B,SAAS,EAAE,eAAe,EAAI;IAGrD,cAAc,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAEzD;IAGK,WAAW,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAEhE;IAGK,aAAa,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC,CAEzC;IAGK,cAAc,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAGxE;IAGK,eAAe,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAElG;IAGK,SAAS,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAGtE;IAGK,YAAY,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAEvE;IAGK,QAAQ,CAAC,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAErF;CACF"}
+{"version":3,"file":"pipeline.rpc-service.d.ts","sourceRoot":"","sources":["../../src/services/pipeline.rpc-service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAErH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAE3E,qBACa,kBAAmB,YAAW,yBAAyB;IAEhE,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAHxB,YACmB,SAAS,EAAE,eAAe,EAC1B,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAC1C,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,EAClD;YAEU,SAAS;IAOjB,cAAc,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAGzD;IAGK,cAAc,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,WAAW,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAK/G;IAGK,WAAW,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAGhE;IAGK,aAAa,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC,CAGzC;IAGK,cAAc,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAIxE;IAGK,eAAe,CAAC,IAAI,EAAE;QAC1B,EAAE,EAAE,MAAM,CAAC;QACX,gBAAgB,EAAE,MAAM,CAAC;QACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,GAAG,OAAO,CAAC,WAAW,CAAC,CAKvB;IAGK,SAAS,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAItE;IAGK,YAAY,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAGvE;IAGK,QAAQ,CAAC,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAG5F;CACF"}

package/dist/services/pipeline.rpc-service.js

@@ -13,90 +13,123 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 import { Service, Public } from '@omnitron-dev/titan/decorators';
-import { VIEWER_ROLES, OPERATOR_ROLES } from '../shared/roles.js';
+import { ADMIN_ROLES } from '../shared/roles.js';
+import { daemonPrincipal } from './daemon-principal.js';
 let PipelineRpcService = class PipelineRpcService {
     pipelines;
-    constructor(pipelines) {
+    auth;
+    audit;
+    constructor(pipelines, auth, audit) {
         this.pipelines = pipelines;
+        this.auth = auth;
+        this.audit = audit;
+    }
+    async authorize(action, resourceId) {
+        const principal = await daemonPrincipal(this.auth, 'admin');
+        if (action)
+            await this.audit.record({ action: `pipeline.${action}`, resourceType: 'pipeline', resourceId }, true);
+        return principal.context.userId;
     }
     async createPipeline(data) {
+        await this.authorize('create.requested');
         return this.pipelines.createPipeline(data);
     }
+    async updatePipeline(data) {
+        await this.authorize('update.requested', data.id);
+        if (!/^[a-f0-9]{64}$/.test(data.expectedRevision ?? ''))
+            throw new Error('Review the current definition before updating it');
+        return this.pipelines.updatePipeline(data.id, data.definition, data.expectedRevision);
+    }
     async getPipeline(data) {
+        await this.authorize();
         return this.pipelines.getPipeline(data.id);
     }
     async listPipelines() {
+        await this.authorize();
         return this.pipelines.listPipelines();
     }
     async deletePipeline(data) {
+        await this.authorize('delete.requested', data.id);
         await this.pipelines.deletePipeline(data.id);
         return { success: true };
     }
     async executePipeline(data) {
-        return this.pipelines.executePipeline(data.id, data.params);
+        const actor = await this.authorize('run.requested', data.id);
+        if (!/^[a-f0-9]{64}$/.test(data.expectedRevision ?? ''))
+            throw new Error('Review the current definition before running it');
+        return this.pipelines.executePipeline(data.id, data.params, actor, data.expectedRevision);
     }
     async cancelRun(data) {
+        await this.authorize('cancel.requested', data.runId);
         await this.pipelines.cancelRun(data.runId);
         return { success: true };
     }
     async getRunStatus(data) {
+        await this.authorize();
         return this.pipelines.getRunStatus(data.runId);
     }
     async listRuns(data) {
+        await this.authorize();
         return this.pipelines.listRuns(data?.pipelineId, data?.limit);
     }
 };
 __decorate([
-    Public({ auth: { roles: OPERATOR_ROLES } }),
+    Public({ auth: { roles: ADMIN_ROLES } }),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object]),
     __metadata("design:returntype", Promise)
 ], PipelineRpcService.prototype, "createPipeline", null);
 __decorate([
-    Public({ auth: { roles: VIEWER_ROLES } }),
+    Public({ auth: { roles: ADMIN_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], PipelineRpcService.prototype, "updatePipeline", null);
+__decorate([
+    Public({ auth: { roles: ADMIN_ROLES } }),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object]),
     __metadata("design:returntype", Promise)
 ], PipelineRpcService.prototype, "getPipeline", null);
 __decorate([
-    Public({ auth: { roles: VIEWER_ROLES } }),
+    Public({ auth: { roles: ADMIN_ROLES } }),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", []),
     __metadata("design:returntype", Promise)
 ], PipelineRpcService.prototype, "listPipelines", null);
 __decorate([
-    Public({ auth: { roles: OPERATOR_ROLES } }),
+    Public({ auth: { roles: ADMIN_ROLES } }),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object]),
     __metadata("design:returntype", Promise)
 ], PipelineRpcService.prototype, "deletePipeline", null);
 __decorate([
-    Public({ auth: { roles: OPERATOR_ROLES } }),
+    Public({ auth: { roles: ADMIN_ROLES } }),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object]),
     __metadata("design:returntype", Promise)
 ], PipelineRpcService.prototype, "executePipeline", null);
 __decorate([
-    Public({ auth: { roles: OPERATOR_ROLES } }),
+    Public({ auth: { roles: ADMIN_ROLES } }),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object]),
     __metadata("design:returntype", Promise)
 ], PipelineRpcService.prototype, "cancelRun", null);
 __decorate([
-    Public({ auth: { roles: VIEWER_ROLES } }),
+    Public({ auth: { roles: ADMIN_ROLES } }),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object]),
     __metadata("design:returntype", Promise)
 ], PipelineRpcService.prototype, "getRunStatus", null);
 __decorate([
-    Public({ auth: { roles: VIEWER_ROLES } }),
+    Public({ auth: { roles: ADMIN_ROLES } }),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object]),
     __metadata("design:returntype", Promise)
 ], PipelineRpcService.prototype, "listRuns", null);
 PipelineRpcService = __decorate([
     Service({ name: 'OmnitronPipelines' }),
-    __metadata("design:paramtypes", [Function])
+    __metadata("design:paramtypes", [Function, Object, Object])
 ], PipelineRpcService);
 export { PipelineRpcService };
 //# sourceMappingURL=pipeline.rpc-service.js.map

package/dist/services/pipeline.rpc-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"pipeline.rpc-service.js","sourceRoot":"","sources":["../../src/services/pipeline.rpc-service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;;;;;;;;;;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAW3D,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IACA,SAAS;IAAtC,YAA6B,SAA0B;yBAA1B,SAAS;IAAoB,CAAC;IAGrD,AAAN,KAAK,CAAC,cAAc,CAAC,IAAiB;QACpC,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CAAC,IAAoB;QACpC,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7C,CAAC;IAGK,AAAN,KAAK,CAAC,aAAa;QACjB,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;IACxC,CAAC;IAGK,AAAN,KAAK,CAAC,cAAc,CAAC,IAAoB;QACvC,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAGK,AAAN,KAAK,CAAC,eAAe,CAAC,IAAsD;QAC1E,OAAO,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9D,CAAC;IAGK,AAAN,KAAK,CAAC,SAAS,CAAC,IAAuB;QACrC,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAGK,AAAN,KAAK,CAAC,YAAY,CAAC,IAAuB;QACxC,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAGK,AAAN,KAAK,CAAC,QAAQ,CAAC,IAA8C;QAC3D,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;CACF,CAAA;AAxCO;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;wDAG3C;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;qDAGzC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;uDAGzC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;wDAI3C;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;yDAG3C;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;mDAI3C;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;sDAGzC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;kDAGzC;AA3CU,kBAAkB;IAD9B,OAAO,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;;GAC1B,kBAAkB,CA4C9B"}
+{"version":3,"file":"pipeline.rpc-service.js","sourceRoot":"","sources":["../../src/services/pipeline.rpc-service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;;;;;;;;;;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAQjD,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAEV,SAAS;IACT,IAAI;IACJ,KAAK;IAHxB,YACmB,SAA0B,EAC1B,IAA0C,EAC1C,KAAmC;yBAFnC,SAAS;oBACT,IAAI;qBACJ,KAAK;IACrB,CAAC;IAEI,KAAK,CAAC,SAAS,CAAC,MAAe,EAAE,UAAmB;QAC1D,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5D,IAAI,MAAM;YAAE,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,YAAY,MAAM,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,IAAI,CAAC,CAAC;QAClH,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC;IAClC,CAAC;IAGK,AAAN,KAAK,CAAC,cAAc,CAAC,IAAiB;QACpC,MAAM,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAGK,AAAN,KAAK,CAAC,cAAc,CAAC,IAAuE;QAC1F,MAAM,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACxF,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CAAC,IAAoB;QACpC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7C,CAAC;IAGK,AAAN,KAAK,CAAC,aAAa;QACjB,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;IACxC,CAAC;IAGK,AAAN,KAAK,CAAC,cAAc,CAAC,IAAoB;QACvC,MAAM,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAClD,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAGK,AAAN,KAAK,CAAC,eAAe,CAAC,IAIrB;QACC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC5F,CAAC;IAGK,AAAN,KAAK,CAAC,SAAS,CAAC,IAAuB;QACrC,MAAM,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAGK,AAAN,KAAK,CAAC,YAAY,CAAC,IAAuB;QACxC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAGK,AAAN,KAAK,CAAC,QAAQ,CAAC,IAA8C;QAC3D,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;CACF,CAAA;AA9DO;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;;;;wDAIxC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;;;;wDAMxC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;;;;qDAIxC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;;;;uDAIxC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;;;;wDAKxC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;;;;yDAUxC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;;;;mDAKxC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;;;;sDAIxC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;;;;kDAIxC;AA3EU,kBAAkB;IAD9B,OAAO,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;;GAC1B,kBAAkB,CA4E9B"}

package/dist/services/pipeline.service.d.ts

@@ -1,61 +1,47 @@
-/**
- * PipelineService — CI/CD Pipeline execution via @xec-sh/ops Pipeline
- *
- * Manages DAG-based pipeline definitions and their execution runs.
- * Pipeline definitions and run history are persisted in omnitron-pg.
- *
- * Uses dynamic import for @xec-sh/ops. Falls back to basic sequential
- * shell execution when the package is not installed.
- */
 import type { Kysely } from 'kysely';
 import type { ILogger } from '@omnitron-dev/titan/module/logger';
 import type { OmnitronDatabase } from '../database/schema.js';
-export type { PipelineDef, PipelineStep, Pipeline, PipelineRunStepResult, PipelineRun, } from '../shared/dto/pipelines.js';
-import type { PipelineDef, Pipeline, PipelineRun } from '../shared/dto/pipelines.js';
+import type { NodeManagerService } from './node-manager.service.js';
+import type { PipelineDef, Pipeline, PipelineRun, PipelineRunSummary } from '../shared/dto/pipelines.js';
+export type { PipelineDef, PipelineStep, Pipeline, PipelineRunStepResult, PipelineRun, PipelineRunSummary, } from '../shared/dto/pipelines.js';
+type Nodes = Pick<NodeManagerService, 'getNode' | 'nodeToSshTarget'>;
+/** Incomplete known secrets are withheld across stream chunk boundaries. */
+export declare class PipelineOutput {
+    private readonly secrets;
+    private text;
+    private privateKeyOpen;
+    private privateKeyTail;
+    received: boolean;
+    truncated: boolean;
+    constructor(secrets: string[]);
+    append(text: string): void;
+    snapshot(final?: boolean): string;
+}
 export declare class PipelineService {
     private readonly db;
     private readonly logger;
-    private activeRuns;
+    activeRunCount(): number;
+    private readonly activeRuns;
+    private initialization?;
+    private stopped;
+    private nodes?;
+    private observe;
     constructor(db: Kysely<OmnitronDatabase>, logger: ILogger);
+    configure(nodes: Nodes, observe?: (status: PipelineRun['status'], duration: number) => void): void;
+    initialize(): Promise<void>;
+    dispose(): Promise<void>;
+    private validate;
     createPipeline(def: PipelineDef): Promise<Pipeline>;
+    updatePipeline(id: string, def: PipelineDef, expectedRevision: string): Promise<Pipeline>;
     getPipeline(id: string): Promise<Pipeline | null>;
     listPipelines(): Promise<Pipeline[]>;
     deletePipeline(id: string): Promise<void>;
-    executePipeline(id: string, params?: Record<string, unknown>, triggeredBy?: string): Promise<PipelineRun>;
+    executePipeline(id: string, params?: Record<string, unknown>, triggeredBy?: string, expectedRevision?: string): Promise<PipelineRun>;
+    private executeRun;
     cancelRun(runId: string): Promise<void>;
     getRunStatus(runId: string): Promise<PipelineRun | null>;
-    listRuns(pipelineId?: string, limit?: number): Promise<PipelineRun[]>;
-    private executeSteps;
-    private executeStep;
-    /**
-     * Substitute {{paramName}} placeholders in a string with values from params.
-     * Unknown placeholders are left as-is so they surface clearly in output.
-     */
-    private interpolateParams;
-    /**
-     * Evaluate a simple step condition expression against pipeline params.
-     *
-     * Supported forms:
-     *   params.key == 'value'   → string equality
-     *   params.key != 'value'   → string inequality
-     *   params.key              → truthy check
-     *   !params.key             → falsy check
-     */
-    private evaluateCondition;
-    /** @internal exported for tests via `__test__` below. */
-    runShellCommand(command: string, env?: Record<string, string>, timeout?: number, signal?: AbortSignal): Promise<string>;
+    listRuns(pipelineId?: string, limit?: number): Promise<PipelineRunSummary[]>;
     private mapPipeline;
     private mapRun;
 }
-/**
- * Exported for tests only.
- *
- * `runShellCommand` is the piece with behaviour worth pinning — exit codes,
- * timeouts, output retention — and the shapes that matter (a command that
- * succeeds while printing megabytes) are awkward to reach through the full
- * service, which wants a database and a scheduler.
- */
-export declare const __test__: {
-    runShellCommand: (service: PipelineService, command: string, env: Record<string, string> | undefined, timeout: number, signal?: AbortSignal) => Promise<string>;
-};
 //# sourceMappingURL=pipeline.service.d.ts.map

package/dist/services/pipeline.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pipeline.service.d.ts","sourceRoot":"","sources":["../../src/services/pipeline.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAM9D,YAAY,EACV,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,qBAAqB,EACrB,WAAW,GACZ,MAAM,4BAA4B,CAAC;AAQpC,OAAO,KAAK,EACV,WAAW,EAEX,QAAQ,EAER,WAAW,EACZ,MAAM,4BAA4B,CAAC;AAMpC,qBAAa,eAAe;IAIxB,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJzB,OAAO,CAAC,UAAU,CAA6C;IAE/D,YACmB,EAAE,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAC5B,MAAM,EAAE,OAAO,EAC9B;IAME,cAAc,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAkBxD;IAEK,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAQtD;IAEK,aAAa,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC,CAQzC;IAEK,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAI9C;IAMK,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,SAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAiChH;IAEK,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAc5C;IAEK,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAQ7D;IAEK,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAatE;YAMa,YAAY;YA4FZ,WAAW;IAoDzB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAQzB;;;;;;;;OAQG;IACH,OAAO,CAAC,iBAAiB;IAkBzB,yDAAyD;IACnD,eAAe,CACnB,OAAO,EAAE,MAAM,EACf,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,SAAU,EACjB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,MAAM,CAAC,CAsEjB;IAMD,OAAO,CAAC,WAAW;IAYnB,OAAO,CAAC,MAAM;CAYf;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,QAAQ;IACnB,eAAe,YACJ,eAAe,WACf,MAAM,OACV,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,WAC9B,MAAM,WACN,WAAW;CAEvB,CAAC"}
+{"version":3,"file":"pipeline.service.d.ts","sourceRoot":"","sources":["../../src/services/pipeline.service.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAc,MAAM,QAAQ,CAAC;AAGjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mCAAmC,CAAC;AAEjE,OAAO,KAAK,EAAE,gBAAgB,EAAqC,MAAM,uBAAuB,CAAC;AAEjG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAQpE,OAAO,KAAK,EACV,WAAW,EACX,QAAQ,EAER,WAAW,EACX,kBAAkB,EACnB,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,qBAAqB,EACrB,WAAW,EACX,kBAAkB,GACnB,MAAM,4BAA4B,CAAC;AAOpC,KAAK,KAAK,GAAG,IAAI,CAAC,kBAAkB,EAAE,SAAS,GAAG,iBAAiB,CAAC,CAAC;AAIrE,4EAA4E;AAC5E,qBAAa,cAAc;IAMb,OAAO,CAAC,QAAQ,CAAC,OAAO;IALpC,OAAO,CAAC,IAAI,CAAM;IAClB,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,cAAc,CAAM;IAC5B,QAAQ,UAAS;IACjB,SAAS,UAAS;IAClB,YAA6B,OAAO,EAAE,MAAM,EAAE,EAAI;IAClD,MAAM,CAAC,IAAI,EAAE,MAAM,QAiClB;IACD,QAAQ,CAAC,KAAK,UAAQ,UAoBrB;CACF;AAED,qBAAa,eAAe;IAQxB,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,MAAM;IARzB,cAAc,IAAI,MAAM,CAAiC;IACzD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgC;IAC3D,OAAO,CAAC,cAAc,CAAC,CAAgB;IACvC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,KAAK,CAAC,CAAQ;IACtB,OAAO,CAAC,OAAO,CAA0E;IACzF,YACmB,EAAE,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAC5B,MAAM,EAAE,OAAO,EAC9B;IAEJ,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAGjG;IACK,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAQhC;IACK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAI7B;YACa,QAAQ;IAQhB,cAAc,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAgBxD;IACK,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAmB9F;IACK,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAGtD;IACK,aAAa,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC,CAIzC;IACK,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAO9C;IAGK,eAAe,CACnB,EAAE,EAAE,MAAM,EACV,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EACpC,WAAW,SAAW,EACtB,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,WAAW,CAAC,CAgHtB;YAEa,UAAU;IAkGlB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB5C;IACK,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAG7D;IACK,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAc7E;IACD,OAAO,CAAC,WAAW;IAYnB,OAAO,CAAC,MAAM;CAef"}