@pipeline-builder/api-core 4.1.13 → 4.1.14

package/lib/validation/plugin-base-images.js

@@ -0,0 +1,17 @@
+// Copyright 2026 Pipeline Builder Contributors
+// SPDX-License-Identifier: Apache-2.0
+export const PLUGIN_BASE_IMAGES = [
+    { key: 'plugin', image: 'pipeline-plugin-base:24.04', dir: '_plugin-base', provides: 'git, curl, jq, unzip, fetch-verified, run-logged (the root base)', smokeTest: 'bash --version && jq --version' },
+    { key: 'aws-cli', image: 'pipeline-aws-cli-base:1.0', dir: '_aws-cli-base', provides: 'AWS CLI v2', smokeTest: 'aws --version' },
+    { key: 'cpp', image: 'pipeline-cpp-base:1.0', dir: '_cpp-base', provides: 'C/C++ toolchain, CMake, Conan, Meson', smokeTest: 'cc --version && cmake --version' },
+    { key: 'dotnet', image: 'pipeline-dotnet-base:1.0', dir: '_dotnet-base', provides: 'one pinned .NET SDK', smokeTest: 'dotnet --version' },
+    { key: 'go', image: 'pipeline-go-base:1.0', dir: '_go-base', provides: 'one pinned Go', smokeTest: 'go version' },
+    { key: 'jvm', image: 'pipeline-jvm-base:1.0', dir: '_jvm-base', provides: 'Corretto JDK, Maven, Gradle, Kotlin', smokeTest: 'java -version && mvn --version' },
+    { key: 'node', image: 'pipeline-node-base:1.0', dir: '_node-base', provides: 'one pinned Node.js + npm', smokeTest: 'node --version && npm --version' },
+    { key: 'php', image: 'pipeline-php-base:1.0', dir: '_php-base', provides: 'one pinned PHP + Composer', smokeTest: 'php --version && composer --version' },
+    { key: 'python', image: 'pipeline-python-base:1.0', dir: '_python-base', provides: 'one pinned CPython + pip', smokeTest: 'python3 --version && pip3 --version' },
+    { key: 'ruby', image: 'pipeline-ruby-base:1.0', dir: '_ruby-base', provides: 'one pinned Ruby + Bundler', smokeTest: 'ruby --version && bundle --version' },
+    { key: 'rust', image: 'pipeline-rust-base:1.0', dir: '_rust-base', provides: 'one pinned Rust toolchain + clippy/rustfmt', smokeTest: 'cargo --version && rustc --version' },
+    { key: 'trivy', image: 'pipeline-trivy-base:1.0', dir: '_trivy-base', provides: 'trivy (two pinned versions)', smokeTest: 'trivy --version' },
+];
+//# sourceMappingURL=data:application/json;base64,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

package/lib/validation/plugin-catalog-detect.d.ts

@@ -0,0 +1,86 @@
+import { type MetadataSource, type MetadataSources, type PluginCatalogField } from '../types/plugin-catalog.js';
+import { type PluginCatalogEdits } from './plugin-catalog-metadata.js';
+/** A source a value can be DETECTED from (`user` is only ever an edit). */
+export type DetectedSource = Exclude<MetadataSource, 'user'>;
+/** One descriptive field as detected from the package. */
+export interface DetectedField {
+    field: PluginCatalogField;
+    /** The validated (normalized) value, or null when none was found or it failed validation. */
+    value: unknown;
+    /** Where the winning candidate came from, or null when no source had one. */
+    source: DetectedSource | null;
+    /** Why the winning candidate was refused, or null. */
+    error: string | null;
+}
+/** The spec fields detection reads (a structural subset of the plugin spec). */
+export interface CatalogSpecFields {
+    readonly description?: string;
+    readonly summary?: string;
+    readonly category?: string;
+    readonly keywords?: readonly string[];
+    readonly license?: string;
+    readonly homepageUrl?: string;
+    readonly sourceUrl?: string;
+    readonly documentationUrl?: string;
+    readonly icon?: string | {
+        key: string;
+        badge?: string;
+    };
+    readonly changelog?: string;
+}
+/** What detection reads: the spec, the zip-root README and the plugin's own Dockerfile. */
+export interface CatalogInputs {
+    spec: CatalogSpecFields;
+    readmeMd: string | null;
+    dockerfileContent: string | null;
+}
+/** The accepted/edited values of every descriptive field, plus their provenance. */
+export interface ResolvedCatalog {
+    values: Record<PluginCatalogField, unknown>;
+    sources: MetadataSources;
+}
+/** Strip inline markdown down to readable text (links → text, images/emphasis/code marks removed). */
+export declare function stripInlineMarkdown(text: string): string;
+/** The README's first level-1 ATX heading (`# Title`), as plain text. */
+export declare function readmeTitle(md: string): string | null;
+/**
+ * The README's first prose paragraph: the first block of consecutive text
+ * lines that is not a heading, badge row, list, table, quote, rule or HTML.
+ */
+export declare function readmeFirstParagraph(md: string): string | null;
+/**
+ * The first sentence of `text`, capped at {@link PLUGIN_SUMMARY_MAX}: cut at
+ * the first `.`/`!`/`?` followed by whitespace (or the end), else the first
+ * line; an over-long sentence is shortened on a word boundary with `…`.
+ */
+export declare function firstSentence(text: string): string | null;
+/**
+ * Detect every descriptive field from the package, in
+ * `PLUGIN_CATALOG_FIELDS` order. Pure; never throws.
+ */
+export declare function detectCatalogMetadata(inputs: CatalogInputs): DetectedField[];
+/**
+ * Apply the user's edits over the detected values. A key present in `edits`
+ * is the user's (`null` clears it) and is recorded as `user`; every other field
+ * keeps its detected value (none when it failed validation). `edits` must
+ * already have passed `PluginCatalogEditsSchema`. A summary that was DERIVED
+ * from the description is re-derived when the user edited the description.
+ */
+export declare function resolveCatalogMetadata(detected: DetectedField[], edits?: PluginCatalogEdits): ResolvedCatalog;
+/** A detection with every value accepted (no edits) — scripts, the Official loader. */
+export declare function acceptAllCatalogMetadata(detected: DetectedField[]): ResolvedCatalog;
+/**
+ * Validate a catalog-edit payload (the upload's `metadata` part, already
+ * JSON-decoded). Execution-contract keys are refused by name before the
+ * strict schema runs, so the caller learns exactly which keys can't be edited.
+ */
+export declare function parseCatalogEdits(raw: unknown): {
+    ok: true;
+    value: PluginCatalogEdits;
+} | {
+    ok: false;
+    error: string;
+    contractKeys?: string[];
+};
+/** Decode the upload's multipart `metadata` part (JSON text), then {@link parseCatalogEdits}. */
+export declare function parseCatalogEditsPart(text: string | undefined): ReturnType<typeof parseCatalogEdits>;

package/lib/validation/plugin-catalog-detect.js

@@ -0,0 +1,237 @@
+// Copyright 2026 Pipeline Builder Contributors
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Catalog metadata: DETECTED from the package, then ACCEPTED OR EDITED
+ * (docs/plugin-publishing.md).
+ *
+ * Sources, highest priority first — the first non-empty value wins, per field:
+ *
+ * | Field              | 1. spec            | 2. README.md       | 3. own Dockerfile LABEL                 |
+ * |--------------------|--------------------|--------------------|-----------------------------------------|
+ * | summary            | `summary`          | —                  | — (then first sentence of description)  |
+ * | description        | `description`      | first paragraph    | `org.opencontainers.image.description`  |
+ * | displayName        | —                  | first `# heading`  | `org.opencontainers.image.title`        |
+ * | license            | `license`          | —                  | `org.opencontainers.image.licenses`     |
+ * | homepageUrl        | `homepageUrl`      | —                  | `org.opencontainers.image.url`          |
+ * | sourceUrl          | `sourceUrl`        | —                  | `org.opencontainers.image.source`       |
+ * | documentationUrl   | `documentationUrl` | —                  | `org.opencontainers.image.documentation`|
+ * | category, keywords, icon, changelog | spec | —              | —                                       |
+ * | readme             | —                  | `README.md`        | —                                       |
+ *
+ * Every value — detected or typed — passes the ONE shared validator
+ * (api-core `validateCatalogField`). A detected value that fails is returned
+ * BLANK WITH THE REASON, never silently dropped, and is not stored unless the
+ * user supplies a valid replacement.
+ *
+ * Pure and shared from api-core: the plugin service's upload and inspect
+ * routes and the CLI's `plugin validate` / `plugin publish` run this one
+ * detection, so the CLI reports exactly what the server will detect.
+ */
+import { OCI_LABELS, parseDockerfile } from './dockerfile-static.js';
+import { PLUGIN_CATALOG_FIELDS, PLUGIN_SUMMARY_MAX, } from '../types/plugin-catalog.js';
+import { PluginCatalogEditsSchema, contractKeysMessage, findContractKeys, validateCatalogField, } from './plugin-catalog-metadata.js';
+// -----------------------------------------------------------------------------
+// README reading
+// -----------------------------------------------------------------------------
+/** Strip inline markdown down to readable text (links → text, images/emphasis/code marks removed). */
+export function stripInlineMarkdown(text) {
+    return text
+        .replace(/!\[[^\]]*\]\([^)]*\)/g, '') // images / badges
+        .replace(/\[([^\]]*)\]\([^)]*\)/g, '$1') // links → text
+        .replace(/<[^>]+>/g, '') // inline HTML
+        .replace(/(\*\*|__|\*|_|`)/g, '')
+        .replace(/\s+/g, ' ')
+        .trim();
+}
+/** Markdown lines outside fenced code blocks, in order. */
+function proseLines(md) {
+    const out = [];
+    let fenced = false;
+    for (const line of md.replace(/\r\n?/g, '\n').split('\n')) {
+        if (/^\s*(```|~~~)/.test(line)) {
+            fenced = !fenced;
+            out.push('');
+            continue;
+        }
+        out.push(fenced ? '' : line);
+    }
+    return out;
+}
+/** The README's first level-1 ATX heading (`# Title`), as plain text. */
+export function readmeTitle(md) {
+    for (const line of proseLines(md)) {
+        const m = /^#\s+(.+?)\s*#*\s*$/.exec(line);
+        if (m) {
+            const title = stripInlineMarkdown(m[1]);
+            return title || null;
+        }
+    }
+    return null;
+}
+/**
+ * The README's first prose paragraph: the first block of consecutive text
+ * lines that is not a heading, badge row, list, table, quote, rule or HTML.
+ */
+export function readmeFirstParagraph(md) {
+    const isStructural = (l) => /^\s*(#|>|[-*+]\s|\d+[.)]\s|\||<|---|\*\*\*|===)/.test(l);
+    let para = [];
+    for (const line of [...proseLines(md), '']) {
+        if (line.trim() === '' || isStructural(line)) {
+            if (para.length > 0) {
+                const text = stripInlineMarkdown(para.join(' '));
+                if (text)
+                    return text;
+            }
+            para = [];
+            continue;
+        }
+        para.push(line.trim());
+    }
+    return null;
+}
+/**
+ * The first sentence of `text`, capped at {@link PLUGIN_SUMMARY_MAX}: cut at
+ * the first `.`/`!`/`?` followed by whitespace (or the end), else the first
+ * line; an over-long sentence is shortened on a word boundary with `…`.
+ */
+export function firstSentence(text) {
+    const flat = text.replace(/\s+/g, ' ').trim();
+    if (!flat)
+        return null;
+    const m = /^(.+?[.!?])(\s|$)/.exec(flat);
+    const sentence = (m ? m[1] : flat).trim();
+    if (sentence.length <= PLUGIN_SUMMARY_MAX)
+        return sentence;
+    const cut = sentence.slice(0, PLUGIN_SUMMARY_MAX - 1);
+    const atWord = cut.includes(' ') ? cut.slice(0, cut.lastIndexOf(' ')) : cut;
+    return `${atWord.replace(/[\s,;:]+$/, '')}…`;
+}
+const nonEmpty = (v) => v !== undefined && v !== null && !(typeof v === 'string' && v.trim() === '') && !(Array.isArray(v) && v.length === 0);
+/** Pick the first non-empty candidate and validate it (blank + reason on failure). */
+function pick(field, candidates) {
+    const winner = candidates.find(([, v]) => nonEmpty(v));
+    if (!winner)
+        return { field, value: null, source: null, error: null };
+    const [source, raw] = winner;
+    const checked = validateCatalogField(field, raw);
+    return checked.ok
+        ? { field, value: checked.value, source, error: null }
+        : { field, value: null, source, error: checked.error };
+}
+/** The summary derived from a description, as a detected field. */
+function derivedSummary(description) {
+    const sentence = typeof description === 'string' ? firstSentence(description) : null;
+    return pick('summary', [['derived', sentence]]);
+}
+/**
+ * Detect every descriptive field from the package, in
+ * `PLUGIN_CATALOG_FIELDS` order. Pure; never throws.
+ */
+export function detectCatalogMetadata(inputs) {
+    const { spec } = inputs;
+    const readme = inputs.readmeMd;
+    const labels = parseDockerfile(inputs.dockerfileContent).labels;
+    const label = (key) => labels[key];
+    const description = pick('description', [
+        ['spec', spec.description],
+        ['readme', readme !== null ? readmeFirstParagraph(readme) : null],
+        ['dockerfile', label(OCI_LABELS.description)],
+    ]);
+    const specSummary = pick('summary', [['spec', spec.summary]]);
+    const byField = {
+        displayName: pick('displayName', [
+            ['readme', readme !== null ? readmeTitle(readme) : null],
+            ['dockerfile', label(OCI_LABELS.title)],
+        ]),
+        summary: specSummary.source !== null ? specSummary : derivedSummary(description.value),
+        description,
+        category: pick('category', [['spec', spec.category]]),
+        keywords: pick('keywords', [['spec', spec.keywords]]),
+        license: pick('license', [['spec', spec.license], ['dockerfile', label(OCI_LABELS.licenses)]]),
+        homepageUrl: pick('homepageUrl', [['spec', spec.homepageUrl], ['dockerfile', label(OCI_LABELS.url)]]),
+        sourceUrl: pick('sourceUrl', [['spec', spec.sourceUrl], ['dockerfile', label(OCI_LABELS.source)]]),
+        documentationUrl: pick('documentationUrl', [['spec', spec.documentationUrl], ['dockerfile', label(OCI_LABELS.documentation)]]),
+        icon: pick('icon', [['spec', spec.icon]]),
+        changelog: pick('changelog', [['spec', spec.changelog]]),
+        readme: pick('readme', [['readme', readme]]),
+    };
+    return PLUGIN_CATALOG_FIELDS.map((f) => byField[f]);
+}
+// -----------------------------------------------------------------------------
+// Accept or edit
+// -----------------------------------------------------------------------------
+/**
+ * Apply the user's edits over the detected values. A key present in `edits`
+ * is the user's (`null` clears it) and is recorded as `user`; every other field
+ * keeps its detected value (none when it failed validation). `edits` must
+ * already have passed `PluginCatalogEditsSchema`. A summary that was DERIVED
+ * from the description is re-derived when the user edited the description.
+ */
+export function resolveCatalogMetadata(detected, edits = {}) {
+    const values = {};
+    const sources = {};
+    const set = (field, value, source) => {
+        values[field] = value ?? null;
+        if (source && (value !== null && value !== undefined || source === 'user'))
+            sources[field] = source;
+    };
+    for (const d of detected) {
+        if (Object.prototype.hasOwnProperty.call(edits, d.field)) {
+            set(d.field, edits[d.field], 'user');
+        }
+        else {
+            set(d.field, d.error ? null : d.value, d.error ? null : d.source);
+        }
+    }
+    const summaryDetected = detected.find((d) => d.field === 'summary');
+    const summaryEdited = Object.prototype.hasOwnProperty.call(edits, 'summary');
+    const descriptionEdited = Object.prototype.hasOwnProperty.call(edits, 'description');
+    if (!summaryEdited && descriptionEdited && (summaryDetected?.source === 'derived' || summaryDetected?.source === null)) {
+        const rederived = derivedSummary(values.description);
+        delete sources.summary;
+        set('summary', rederived.error ? null : rederived.value, rederived.error ? null : rederived.source);
+    }
+    return { values, sources };
+}
+/** A detection with every value accepted (no edits) — scripts, the Official loader. */
+export function acceptAllCatalogMetadata(detected) {
+    return resolveCatalogMetadata(detected, {});
+}
+// -----------------------------------------------------------------------------
+// Edit payloads
+// -----------------------------------------------------------------------------
+/**
+ * Validate a catalog-edit payload (the upload's `metadata` part, already
+ * JSON-decoded). Execution-contract keys are refused by name before the
+ * strict schema runs, so the caller learns exactly which keys can't be edited.
+ */
+export function parseCatalogEdits(raw) {
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw)) {
+        return { ok: false, error: 'metadata must be a JSON object' };
+    }
+    const contractKeys = findContractKeys(raw);
+    if (contractKeys.length > 0)
+        return { ok: false, error: contractKeysMessage(contractKeys), contractKeys };
+    const parsed = PluginCatalogEditsSchema.safeParse(raw);
+    if (!parsed.success) {
+        return {
+            ok: false,
+            error: `Invalid metadata: ${parsed.error.issues.map((i) => `${i.path.join('.') || '(root)'}: ${i.message}`).join('; ')}`,
+        };
+    }
+    return { ok: true, value: parsed.data };
+}
+/** Decode the upload's multipart `metadata` part (JSON text), then {@link parseCatalogEdits}. */
+export function parseCatalogEditsPart(text) {
+    if (text === undefined || text.trim() === '')
+        return { ok: true, value: {} };
+    let raw;
+    try {
+        raw = JSON.parse(text);
+    }
+    catch {
+        return { ok: false, error: 'metadata must be valid JSON' };
+    }
+    return parseCatalogEdits(raw);
+}
+//# sourceMappingURL=data:application/json;base64,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

package/lib/validation/plugin-catalog-metadata.d.ts

@@ -0,0 +1,141 @@
+/**
+ * Plugin CATALOG metadata: the descriptive fields a plugin version shows in the
+ * catalog, detected from the package and then accepted or edited by the user
+ * (docs/plugin-publishing.md).
+ *
+ * ONE validator for both paths: a value detected from the package (spec,
+ * README, the plugin's own Dockerfile labels) and a value typed into a form or
+ * sent by the CLI pass the same rules. Shared from api-core so the plugin
+ * service, the frontend and the CLI can't drift.
+ *
+ * Only DESCRIPTIVE fields live here. Execution-contract fields (commands, env,
+ * secrets, compute type, …) are spec-only — changing one is a new version with a
+ * new digest — and an edit payload naming one is refused
+ * ({@link findContractKeys}).
+ */
+import { z } from 'zod';
+import { type PluginCatalogField } from '../types/plugin-catalog.js';
+/**
+ * Accepted SPDX license identifiers — a compact allowlist of the ids that
+ * cover effectively every published plugin, rather than the full ~700-entry
+ * SPDX list (an unfamiliar id is worth a human look). Case-sensitive, exactly
+ * as SPDX spells them. `LicenseRef-Proprietary` is the SPDX-sanctioned
+ * spelling for "not open source".
+ */
+export declare const SPDX_LICENSE_IDS: ReadonlySet<string>;
+/** True when `id` is an accepted SPDX identifier. */
+export declare function isAllowedSpdxId(id: string): boolean;
+/**
+ * URL shorteners refused in project links: a shortener hides the destination
+ * from the reviewer and can be re-pointed after approval.
+ */
+export declare const URL_SHORTENER_HOSTS: ReadonlySet<string>;
+/**
+ * Why `raw` is not an acceptable project URL, or `null` when it is: must parse,
+ * be `https:`, carry no userinfo, and not point at a known shortener (the host
+ * or any parent domain of it).
+ */
+export declare function projectUrlProblem(raw: string): string | null;
+/** Curated icon / badge key: a file name under `deploy/plugins/_icons/`. */
+export declare const ICON_KEY_PATTERN: RegExp;
+/** `https:` project URL, no shorteners, no credentials. */
+export declare const ProjectUrlSchema: z.ZodString;
+/** Curated icon / badge key. */
+export declare const IconKeySchema: z.ZodString;
+/**
+ * Icon as stored: `{ key, badge? }`. A bare key string is accepted and
+ * normalized first, so a bad key reports the key rule (not a bare union miss).
+ */
+export declare const PluginIconSchema: z.ZodPreprocess<z.ZodObject<{
+    key: z.ZodString;
+    badge: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>>;
+/**
+ * Per-field validators for every DESCRIPTIVE field. A detected value
+ * and a user-typed value both go through these.
+ */
+export declare const PLUGIN_CATALOG_FIELD_SCHEMAS: {
+    readonly summary: z.ZodString;
+    readonly description: z.ZodString;
+    readonly displayName: z.ZodString;
+    readonly category: z.ZodEnum<{
+        ai: "ai";
+        artifact: "artifact";
+        deploy: "deploy";
+        infrastructure: "infrastructure";
+        language: "language";
+        monitoring: "monitoring";
+        notification: "notification";
+        quality: "quality";
+        security: "security";
+        testing: "testing";
+    }>;
+    readonly keywords: z.ZodArray<z.ZodString>;
+    readonly license: z.ZodString;
+    readonly homepageUrl: z.ZodString;
+    readonly sourceUrl: z.ZodString;
+    readonly documentationUrl: z.ZodString;
+    readonly icon: z.ZodPreprocess<z.ZodObject<{
+        key: z.ZodString;
+        badge: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    readonly changelog: z.ZodString;
+    readonly readme: z.ZodString;
+};
+/**
+ * Catalog EDITS (the upload's `metadata` part, a `PUT /plugins/:id` body's
+ * descriptive keys, the CLI's `--metadata` file). `null` clears a field.
+ * Strict: an unknown key is an error, never silently dropped.
+ */
+export declare const PluginCatalogEditsSchema: z.ZodObject<{
+    category: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+        ai: "ai";
+        artifact: "artifact";
+        deploy: "deploy";
+        infrastructure: "infrastructure";
+        language: "language";
+        monitoring: "monitoring";
+        notification: "notification";
+        quality: "quality";
+        security: "security";
+        testing: "testing";
+    }>>>;
+    changelog: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    displayName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    documentationUrl: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    homepageUrl: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    icon: z.ZodOptional<z.ZodNullable<z.ZodPreprocess<z.ZodObject<{
+        key: z.ZodString;
+        badge: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>>>;
+    keywords: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+    license: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    readme: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    sourceUrl: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    summary: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strict>;
+export type PluginCatalogEdits = z.infer<typeof PluginCatalogEditsSchema>;
+/**
+ * Validate one field's value. Returns the normalized value (trimmed text, an
+ * icon string as `{ key }`) or the reason it was refused — so a detected value
+ * that fails is shown BLANK WITH THE REASON rather than silently dropped.
+ */
+export declare function validateCatalogField<F extends PluginCatalogField>(field: F, value: unknown): {
+    ok: true;
+    value: z.infer<typeof PLUGIN_CATALOG_FIELD_SCHEMAS[F]>;
+} | {
+    ok: false;
+    error: string;
+};
+/**
+ * Keys that describe WHAT RUNS. They come only from the spec: changing one is a
+ * new version, a new digest and a review diff. A metadata edit
+ * naming any of them is refused with 400 — the refusal is the API's, not just
+ * the UI's. `name`/`version` key the pushed image and are immutable too.
+ */
+export declare const PLUGIN_CONTRACT_FIELDS: readonly ['name', 'version', 'commands', 'installCommands', 'env', 'buildArgs', 'secrets', 'metadata', 'requiredMetadata', 'requiredVars', 'metadataTypes', 'varsTypes', 'network', 'networkEgress', 'computeType', 'pluginType', 'primaryOutputDirectory', 'smokeTest', 'timeout', 'failureBehavior', 'dockerfile', 'buildType'];
+/** The execution-contract keys present in `payload` (empty when none). */
+export declare function findContractKeys(payload: unknown): string[];
+/** The message a contract-key refusal carries. */
+export declare function contractKeysMessage(keys: readonly string[]): string;