@sema-agent/server 1.185.0

package/dist/images/bake-validate.d.ts

@@ -0,0 +1,41 @@
+export declare const FROZEN_PROFILES: readonly string[];
+export declare const FROZEN_BANDS: readonly string[];
+export declare const FROZEN_BUMP_TOOLS: readonly string[];
+export declare const VER_RE: RegExp;
+export declare const BAND_SHAPE_RE: RegExp;
+export declare const DIGEST_RE: RegExp;
+export interface BakeSubmit {
+    profile?: unknown;
+    bands?: unknown;
+    baseRef?: unknown;
+    bump?: unknown;
+    push?: unknown;
+    dryRun?: unknown;
+    logs?: unknown;
+    pkgSource?: unknown;
+}
+export interface BakeReject {
+    ok: false;
+    status: number;
+    error: string;
+    conflictBands?: string[];
+}
+export interface BakeAccept {
+    ok: true;
+    profile: string;
+    bands: string[] | null;
+    baseRef: string | null;
+    bump: Record<string, string> | null;
+    push: boolean;
+    dryRun: boolean;
+    logs: boolean;
+    pkgSource: "cn" | "global" | null;
+    argv: string[];
+}
+export type BakeValidation = BakeAccept | BakeReject;
+export declare function validateBake(body: BakeSubmit): BakeValidation;
+export declare function buildBakeArgv(v: BakeAccept, effective: {
+    baseRef: string | null;
+    cacheBase: string | null;
+}): string[];
+//# sourceMappingURL=bake-validate.d.ts.map

package/dist/images/bake-validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bake-validate.d.ts","sourceRoot":"","sources":["../../src/images/bake-validate.ts"],"names":[],"mappings":"AAsBA,eAAO,MAAM,eAAe,EAAE,SAAS,MAAM,EAoB5C,CAAC;AAGF,eAAO,MAAM,YAAY,EAAE,SAAS,MAAM,EAoBzC,CAAC;AAOF,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAc9C,CAAC;AAOF,eAAO,MAAM,MAAM,QAA2B,CAAC;AAE/C,eAAO,MAAM,aAAa,QAAiB,CAAC;AAE5C,eAAO,MAAM,SAAS,QAA0B,CAAC;AAGjD,MAAM,WAAW,UAAU;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IAEf,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAGD,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IAEd,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAGD,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,IAAI,CAAC;IACT,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IACpC,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IAEd,SAAS,EAAE,IAAI,GAAG,QAAQ,GAAG,IAAI,CAAC;IAElC,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,UAAU,CAAC;AAiBrD,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,cAAc,CA8F7D;AAiBD,wBAAgB,aAAa,CAC3B,CAAC,EAAE,UAAU,EACb,SAAS,EAAE;IAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAC9D,MAAM,EAAE,CAsBV"}

package/dist/images/bake-validate.js

@@ -0,0 +1,183 @@
+export const FROZEN_PROFILES = [
+    "code-python",
+    "code-node",
+    "code-frontend",
+    "code-go",
+    "code-rust",
+    "code-dotnet",
+    "code-jvm",
+    "code-android",
+    "code-flutter",
+    "code-ios",
+    "code-cpp",
+    "code-php",
+    "code-ruby",
+    "code-godot",
+    "code-lua",
+    "code-infra",
+    "code-embedded",
+    "code-full",
+    "code-full-db",
+];
+export const FROZEN_BANDS = [
+    "python",
+    "node",
+    "go",
+    "rust",
+    "dotnet",
+    "jvm",
+    "android",
+    "flutter",
+    "swift",
+    "cpp",
+    "php",
+    "ruby",
+    "godot",
+    "lua",
+    "infra",
+    "embedded",
+    "browser",
+    "browser-nodriver",
+    "db",
+];
+export const FROZEN_BUMP_TOOLS = [
+    "node",
+    "python",
+    "go",
+    "rust",
+    "ruby",
+    "php",
+    "java",
+    "kotlin",
+    "swift",
+    "flutter",
+    "dart",
+    "playwright",
+    "pg",
+];
+const PROFILE_SET = new Set(FROZEN_PROFILES);
+const BAND_SET = new Set(FROZEN_BANDS);
+const BUMP_TOOL_SET = new Set(FROZEN_BUMP_TOOLS);
+export const VER_RE = /^[A-Za-z0-9._-]{1,40}$/;
+export const BAND_SHAPE_RE = /^[a-z0-9-]+$/;
+export const DIGEST_RE = /^sha256:[a-f0-9]{64}$/;
+function reject(status, error, conflictBands) {
+    return conflictBands ? { ok: false, status, error, conflictBands } : { ok: false, status, error };
+}
+export function validateBake(body) {
+    const hasProfile = body.profile !== undefined && body.profile !== null && body.profile !== "";
+    const hasBands = body.bands !== undefined && body.bands !== null;
+    if (hasProfile && hasBands)
+        return reject(400, "provide profile OR bands, not both");
+    if (!hasProfile && !hasBands)
+        return reject(400, "one of profile | bands is required");
+    let profile;
+    let bands = null;
+    if (hasProfile) {
+        if (typeof body.profile !== "string")
+            return reject(400, "profile must be a string");
+        profile = body.profile;
+        if (!PROFILE_SET.has(profile))
+            return reject(400, `unknown profile '${profile}'`);
+    }
+    else {
+        if (!Array.isArray(body.bands))
+            return reject(400, "bands must be an array of band ids");
+        if (body.bands.length === 0)
+            return reject(400, "bands must be a non-empty array");
+        if (body.bands.length > FROZEN_BANDS.length)
+            return reject(400, `at most ${FROZEN_BANDS.length} bands`);
+        const seen = new Set();
+        const offList = [];
+        for (const raw of body.bands) {
+            if (typeof raw !== "string" || raw.length === 0)
+                return reject(400, "each band must be a non-empty string");
+            if (!BAND_SHAPE_RE.test(raw))
+                return reject(400, `malformed band id '${raw}'`);
+            if (seen.has(raw))
+                return reject(400, `duplicate band '${raw}'`);
+            seen.add(raw);
+            if (!BAND_SET.has(raw))
+                offList.push(raw);
+        }
+        if (offList.length > 0) {
+            if (offList.includes("custom")) {
+                return reject(501, "custom/tenant bake is P4");
+            }
+            return reject(400, `unknown band(s): ${offList.join(", ")}`, offList);
+        }
+        bands = body.bands;
+        profile = "custom";
+    }
+    let bump = null;
+    if (body.bump !== undefined && body.bump !== null) {
+        if (typeof body.bump !== "object" || Array.isArray(body.bump)) {
+            return reject(400, "bump must be an object { tool: version }");
+        }
+        const out = {};
+        for (const [tool, ver] of Object.entries(body.bump)) {
+            if (!BUMP_TOOL_SET.has(tool))
+                return reject(400, `unknown bump tool '${tool}'`);
+            if (typeof ver !== "string" || !VER_RE.test(ver)) {
+                return reject(400, `bump version for '${tool}' must match ${VER_RE.source}`);
+            }
+            out[tool] = ver;
+        }
+        bump = Object.keys(out).length > 0 ? out : null;
+    }
+    let baseRef = null;
+    if (body.baseRef !== undefined && body.baseRef !== null && body.baseRef !== "") {
+        if (typeof body.baseRef !== "string" || !DIGEST_RE.test(body.baseRef)) {
+            return reject(400, "baseRef must be an immutable sha256 digest");
+        }
+        baseRef = body.baseRef;
+    }
+    const push = body.push === true;
+    const dryRun = body.dryRun === true;
+    const logs = body.logs === true;
+    let pkgSource = null;
+    if (body.pkgSource !== undefined && body.pkgSource !== null && body.pkgSource !== "") {
+        if (body.pkgSource !== "cn" && body.pkgSource !== "global") {
+            return reject(400, `pkgSource must be "cn" | "global"`);
+        }
+        pkgSource = body.pkgSource;
+    }
+    return {
+        ok: true,
+        profile,
+        bands,
+        baseRef,
+        bump,
+        push,
+        dryRun,
+        logs,
+        pkgSource,
+        argv: [],
+    };
+}
+export function buildBakeArgv(v, effective) {
+    const args = [];
+    if (v.bands && v.bands.length > 0) {
+        args.push("--bands", v.bands.join(","));
+    }
+    else {
+        args.push("--profile", v.profile);
+    }
+    if (effective.baseRef)
+        args.push("--base-ref", effective.baseRef);
+    if (effective.cacheBase)
+        args.push("--cache-base", effective.cacheBase);
+    if (v.bump) {
+        for (const [tool, ver] of Object.entries(v.bump))
+            args.push("--bump", `${tool}=${ver}`);
+    }
+    if (v.pkgSource)
+        args.push("--pkg-source", v.pkgSource);
+    if (v.push)
+        args.push("--push");
+    if (v.dryRun)
+        args.push("--dry-run");
+    args.push("--json");
+    return args;
+}
+//# sourceMappingURL=bake-validate.js.map

package/dist/images/bake-validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bake-validate.js","sourceRoot":"","sources":["../../src/images/bake-validate.ts"],"names":[],"mappings":"AAsBA,MAAM,CAAC,MAAM,eAAe,GAAsB;IAChD,aAAa;IACb,WAAW;IACX,eAAe;IACf,SAAS;IACT,WAAW;IACX,aAAa;IACb,UAAU;IACV,cAAc;IACd,cAAc;IACd,UAAU;IACV,UAAU;IACV,UAAU;IACV,WAAW;IACX,YAAY;IACZ,UAAU;IACV,YAAY;IACZ,eAAe;IACf,WAAW;IACX,cAAc;CACf,CAAC;AAGF,MAAM,CAAC,MAAM,YAAY,GAAsB;IAC7C,QAAQ;IACR,MAAM;IACN,IAAI;IACJ,MAAM;IACN,QAAQ;IACR,KAAK;IACL,SAAS;IACT,SAAS;IACT,OAAO;IACP,KAAK;IACL,KAAK;IACL,MAAM;IACN,OAAO;IACP,KAAK;IACL,OAAO;IACP,UAAU;IACV,SAAS;IACT,kBAAkB;IAClB,IAAI;CACL,CAAC;AAOF,MAAM,CAAC,MAAM,iBAAiB,GAAsB;IAClD,MAAM;IACN,QAAQ;IACR,IAAI;IACJ,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,QAAQ;IACR,OAAO;IACP,SAAS;IACT,MAAM;IACN,YAAY;IACZ,IAAI;CACL,CAAC;AAEF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;AAC7C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;AACvC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;AAGjD,MAAM,CAAC,MAAM,MAAM,GAAG,wBAAwB,CAAC;AAE/C,MAAM,CAAC,MAAM,aAAa,GAAG,cAAc,CAAC;AAE5C,MAAM,CAAC,MAAM,SAAS,GAAG,uBAAuB,CAAC;AA0CjD,SAAS,MAAM,CAAC,MAAc,EAAE,KAAa,EAAE,aAAwB;IACrE,OAAO,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACpG,CAAC;AAaD,MAAM,UAAU,YAAY,CAAC,IAAgB;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,EAAE,CAAC;IAC9F,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC;IAGjE,IAAI,UAAU,IAAI,QAAQ;QAAE,OAAO,MAAM,CAAC,GAAG,EAAE,oCAAoC,CAAC,CAAC;IACrF,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ;QAAE,OAAO,MAAM,CAAC,GAAG,EAAE,oCAAoC,CAAC,CAAC;IAEvF,IAAI,OAAe,CAAC;IACpB,IAAI,KAAK,GAAoB,IAAI,CAAC;IAElC,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;QACrF,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QACvB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,MAAM,CAAC,GAAG,EAAE,oBAAoB,OAAO,GAAG,CAAC,CAAC;IACpF,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,GAAG,EAAE,oCAAoC,CAAC,CAAC;QACzF,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC;QAEnF,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM;YAAE,OAAO,MAAM,CAAC,GAAG,EAAE,WAAW,YAAY,CAAC,MAAM,QAAQ,CAAC,CAAC;QACxG,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,MAAM,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;YAC5G,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,MAAM,CAAC,GAAG,EAAE,sBAAsB,GAAG,GAAG,CAAC,CAAC;YAC/E,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,MAAM,CAAC,GAAG,EAAE,mBAAmB,GAAG,GAAG,CAAC,CAAC;YACjE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAEd,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAEvB,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,OAAO,MAAM,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;YACjD,CAAC;YACD,OAAO,MAAM,CAAC,GAAG,EAAE,oBAAoB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACxE,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,KAAiB,CAAC;QAC/B,OAAO,GAAG,QAAQ,CAAC;IACrB,CAAC;IAGD,IAAI,IAAI,GAAkC,IAAI,CAAC;IAC/C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAClD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,OAAO,MAAM,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAA+B,CAAC,EAAE,CAAC;YAC/E,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,MAAM,CAAC,GAAG,EAAE,sBAAsB,IAAI,GAAG,CAAC,CAAC;YAChF,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjD,OAAO,MAAM,CAAC,GAAG,EAAE,qBAAqB,IAAI,gBAAgB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/E,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;QAClB,CAAC;QACD,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;IAID,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;QAC/E,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACtE,OAAO,MAAM,CAAC,GAAG,EAAE,4CAA4C,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IACzB,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;IAGhC,IAAI,SAAS,GAA2B,IAAI,CAAC;IAC7C,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;QACrF,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3D,OAAO,MAAM,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAC;QAC1D,CAAC;QACD,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAC7B,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO;QACP,KAAK;QACL,OAAO;QACP,IAAI;QACJ,IAAI;QACJ,MAAM;QACN,IAAI;QACJ,SAAS;QAET,IAAI,EAAE,EAAE;KACT,CAAC;AACJ,CAAC;AAiBD,MAAM,UAAU,aAAa,CAC3B,CAAa,EACb,SAA+D;IAE/D,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,SAAS,CAAC,OAAO;QAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;IAClE,IAAI,SAAS,CAAC,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;IACxE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACX,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,CAAC,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC,CAAC,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAMpB,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/images/manifest.d.ts

@@ -0,0 +1,36 @@
+import type { ImageIndexUpsert, ImageNestedBuildMode, ImageStatus } from "../plugins/tidb-image-index.js";
+export declare function nestedBuildModeOf(v: string | boolean | undefined): ImageNestedBuildMode;
+export interface BuildManifest {
+    profile?: string;
+    bands?: string[];
+    tag?: string;
+    digest?: string;
+    generatorVersion?: string;
+    recipeGitSha?: string;
+    buildDate?: string;
+    toolchainVersions?: Record<string, string>;
+    capabilities?: {
+        browser?: boolean;
+        db?: boolean;
+        nestedBuild?: string | boolean;
+        podContract?: {
+            devShm?: string;
+            securityCtx?: string;
+        };
+    };
+    owner?: string;
+    visibility?: string;
+    sizeBytes?: number;
+}
+export interface ManifestProjectOpts {
+    repo: string;
+    digest?: string;
+    status?: ImageStatus;
+    manifestSha?: string | null;
+    sizeBytes?: number | null;
+    signed?: boolean;
+}
+export declare function shmToMB(v: string | undefined): number | undefined;
+export declare function profileFromManifest(m: BuildManifest): string;
+export declare function manifestToIndexEntry(m: BuildManifest, opts: ManifestProjectOpts): ImageIndexUpsert;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/images/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/images/manifest.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAEV,gBAAgB,EAChB,oBAAoB,EAEpB,WAAW,EAEZ,MAAM,gCAAgC,CAAC;AAUxC,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,oBAAoB,CASvF;AAGD,MAAM,WAAW,aAAa;IAE5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IAEjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,YAAY,CAAC,EAAE;QACb,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,EAAE,CAAC,EAAE,OAAO,CAAC;QACb,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAC/B,WAAW,CAAC,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACzD,CAAC;IACF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAGD,MAAM,WAAW,mBAAmB;IAElC,IAAI,EAAE,MAAM,CAAC;IAEb,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,MAAM,CAAC,EAAE,WAAW,CAAC;IAErB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAGD,wBAAgB,OAAO,CAAC,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAMjE;AAGD,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,aAAa,GAAG,MAAM,CAI5D;AAGD,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,mBAAmB,GAAG,gBAAgB,CAqClG"}

package/dist/images/manifest.js

@@ -0,0 +1,69 @@
+const NESTED_BUILD_MODES = [
+    "none",
+    "docker-cli-only",
+    "rootless-buildkit",
+    "privileged-dind",
+];
+export function nestedBuildModeOf(v) {
+    if (typeof v === "string") {
+        return NESTED_BUILD_MODES.includes(v)
+            ? v
+            : v
+                ? "rootless-buildkit"
+                : "none";
+    }
+    return v ? "rootless-buildkit" : "none";
+}
+export function shmToMB(v) {
+    if (!v)
+        return undefined;
+    const m = /^(\d+)\s*([mg])?b?$/i.exec(v.trim());
+    if (!m)
+        return undefined;
+    const n = Number(m[1]);
+    return (m[2] ?? "m").toLowerCase() === "g" ? n * 1024 : n;
+}
+export function profileFromManifest(m) {
+    if (m.profile && m.profile !== "custom")
+        return m.profile;
+    const repo = (m.tag ?? "").split(":")[0] ?? "";
+    return repo || m.profile || "custom";
+}
+export function manifestToIndexEntry(m, opts) {
+    const profile = profileFromManifest(m);
+    const tag = (m.tag ?? "").includes(":") ? (m.tag ?? "").split(":")[1] : (m.tag ?? "");
+    const capabilities = {
+        browser: !!m.capabilities?.browser,
+        db: !!m.capabilities?.db,
+        nestedBuild: !!m.capabilities?.nestedBuild,
+        nestedBuildMode: nestedBuildModeOf(m.capabilities?.nestedBuild),
+    };
+    const pc = m.capabilities?.podContract;
+    const devShmMB = shmToMB(pc?.devShm);
+    const podContract = {
+        ...(devShmMB !== undefined ? { devShmMB } : {}),
+        ...(pc?.securityCtx ? { securityContext: { note: pc.securityCtx } } : {}),
+    };
+    const visibility = m.visibility === "tenant" ? "tenant" : "public";
+    return {
+        profile,
+        bands: m.bands ?? [],
+        repo: opts.repo,
+        tag,
+        digest: opts.digest ?? m.digest ?? "",
+        toolchainVersions: m.toolchainVersions ?? {},
+        capabilities,
+        podContract,
+        sizeBytes: opts.sizeBytes ?? m.sizeBytes ?? null,
+        status: opts.status ?? "published",
+        visibility,
+        tenantId: visibility === "tenant" && m.owner && m.owner !== "standard-pool" ? m.owner : null,
+        manifestSha: opts.manifestSha ?? null,
+        recipeGitSha: m.recipeGitSha && m.recipeGitSha !== "nogit" ? m.recipeGitSha : null,
+        generatorVersion: m.generatorVersion ?? null,
+        buildDate: m.buildDate ?? null,
+        supersedes: null,
+        signed: opts.signed ?? false,
+    };
+}
+//# sourceMappingURL=manifest.js.map

package/dist/images/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/images/manifest.ts"],"names":[],"mappings":"AAgBA,MAAM,kBAAkB,GAAoC;IAC1D,MAAM;IACN,iBAAiB;IACjB,mBAAmB;IACnB,iBAAiB;CAClB,CAAC;AAGF,MAAM,UAAU,iBAAiB,CAAC,CAA+B;IAC/D,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAQ,kBAAwC,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC1D,CAAC,CAAE,CAA0B;YAC7B,CAAC,CAAC,CAAC;gBACD,CAAC,CAAC,mBAAmB;gBACrB,CAAC,CAAC,MAAM,CAAC;IACf,CAAC;IACD,OAAO,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC;AAC1C,CAAC;AAwCD,MAAM,UAAU,OAAO,CAAC,CAAqB;IAC3C,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,MAAM,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvB,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5D,CAAC;AAGD,MAAM,UAAU,mBAAmB,CAAC,CAAgB;IAClD,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,OAAO,CAAC;IAC1D,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,OAAO,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC;AACvC,CAAC;AAGD,MAAM,UAAU,oBAAoB,CAAC,CAAgB,EAAE,IAAyB;IAC9E,MAAM,OAAO,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IACvF,MAAM,YAAY,GAAsB;QACtC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,OAAO;QAClC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,EAAE;QACxB,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,WAAW;QAC1C,eAAe,EAAE,iBAAiB,CAAC,CAAC,CAAC,YAAY,EAAE,WAAW,CAAC;KAChE,CAAC;IACF,MAAM,EAAE,GAAG,CAAC,CAAC,YAAY,EAAE,WAAW,CAAC;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACrC,MAAM,WAAW,GAAqB;QACpC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC;IACF,MAAM,UAAU,GAAoB,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IACpF,OAAO;QACL,OAAO;QACP,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;QACpB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG;QACH,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE;QACrC,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,IAAI,EAAE;QAC5C,YAAY;QACZ,WAAW;QACX,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI;QAChD,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,WAAW;QAClC,UAAU;QAEV,QAAQ,EAAE,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;QAC5F,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;QACrC,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;QAClF,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,IAAI,IAAI;QAC5C,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;QAC9B,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;KAC7B,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,25 @@
+export { loadConfig, type ServiceConfig } from "./config.js";
+export { createBrain } from "./brain.js";
+export { createSessionStore } from "./plugins/session-store.js";
+export { createTidbPool, ensureSchema, SCHEMA_STATEMENTS } from "./plugins/tidb-pool.js";
+export { TiDBSessionStore } from "./plugins/tidb-session-store.js";
+export { TiDBSessionStorage } from "./plugins/tidb-session-storage.js";
+export { CachingSessionStore, type CachingOptions } from "./plugins/caching-session-store.js";
+export { TiDBRunStore, type RunRecord, type RunEvent, } from "./plugins/tidb-run-store.js";
+export { runInBackground } from "./runs.js";
+export { TiDBApprovalStore, type ApprovalRow, type ApprovalStatus, } from "./plugins/tidb-approval-store.js";
+export { createOaApprovalPolicy, type OaApprovalOptions } from "./approval.js";
+export { createHardenedVmRunner, runInHardenedVm, type HardenedVmLimits, type HardenedMembrane } from "./orchestration/hardened-vm-runner.js";
+export { createWorkerHardenedVmRunner } from "./orchestration/hardened-vm-worker-runner.js";
+export { buildSessionAudit, type SessionAudit } from "./audit.js";
+export { createLogger, type Logger, type LogLevel } from "./observability/logger.js";
+export { Metrics, createMetrics, type Labels } from "./observability/metrics.js";
+export { RateLimiter, type RateDecision } from "./observability/rate-limit.js";
+export { GiteaClient, repoToolsFor, parseRepo, type RepoCoords } from "./capabilities/repo-tools.js";
+export { nowTool } from "./capabilities/builtin-tools.js";
+export { createCouncilTool } from "./capabilities/code-review-council.js";
+export { loadSkills, skillsForScenario, type LoadedSkill } from "./capabilities/skills.js";
+export { buildScenarios, selectScenario, type Scenario, type ScenarioBundle, type ScenarioDeps, type ScenarioRequest, } from "./capabilities/scenarios.js";
+export { createAuthorizer, principalFrom, memoryScopeFor, memoryEngineBackendFor, HttpError, type AuthContext, type OwnerAwareSessionStore, } from "./security.js";
+export { createHttpServer, type ServiceDeps, type TaskRequestBody, type RequestAuth, } from "./http/server.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,KAAK,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAC9F,OAAO,EACL,YAAY,EACZ,KAAK,SAAS,EACd,KAAK,QAAQ,GACd,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EACL,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,cAAc,GACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAC/E,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,KAAK,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAC9I,OAAO,EAAE,4BAA4B,EAAE,MAAM,8CAA8C,CAAC;AAC5F,OAAO,EAAE,iBAAiB,EAAE,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,KAAK,MAAM,EAAE,KAAK,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrF,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,UAAU,EAAE,MAAM,8BAA8B,CAAC;AACrG,OAAO,EAAE,OAAO,EAAE,MAAM,iCAAiC,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,KAAK,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC3F,OAAO,EACL,cAAc,EACd,cAAc,EACd,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,eAAe,GACrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,sBAAsB,EACtB,SAAS,EACT,KAAK,WAAW,EAChB,KAAK,sBAAsB,GAC5B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gBAAgB,EAChB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,WAAW,GACjB,MAAM,kBAAkB,CAAC"}

package/dist/index.js

@@ -0,0 +1,25 @@
+export { loadConfig } from "./config.js";
+export { createBrain } from "./brain.js";
+export { createSessionStore } from "./plugins/session-store.js";
+export { createTidbPool, ensureSchema, SCHEMA_STATEMENTS } from "./plugins/tidb-pool.js";
+export { TiDBSessionStore } from "./plugins/tidb-session-store.js";
+export { TiDBSessionStorage } from "./plugins/tidb-session-storage.js";
+export { CachingSessionStore } from "./plugins/caching-session-store.js";
+export { TiDBRunStore, } from "./plugins/tidb-run-store.js";
+export { runInBackground } from "./runs.js";
+export { TiDBApprovalStore, } from "./plugins/tidb-approval-store.js";
+export { createOaApprovalPolicy } from "./approval.js";
+export { createHardenedVmRunner, runInHardenedVm } from "./orchestration/hardened-vm-runner.js";
+export { createWorkerHardenedVmRunner } from "./orchestration/hardened-vm-worker-runner.js";
+export { buildSessionAudit } from "./audit.js";
+export { createLogger } from "./observability/logger.js";
+export { Metrics, createMetrics } from "./observability/metrics.js";
+export { RateLimiter } from "./observability/rate-limit.js";
+export { GiteaClient, repoToolsFor, parseRepo } from "./capabilities/repo-tools.js";
+export { nowTool } from "./capabilities/builtin-tools.js";
+export { createCouncilTool } from "./capabilities/code-review-council.js";
+export { loadSkills, skillsForScenario } from "./capabilities/skills.js";
+export { buildScenarios, selectScenario, } from "./capabilities/scenarios.js";
+export { createAuthorizer, principalFrom, memoryScopeFor, memoryEngineBackendFor, HttpError, } from "./security.js";
+export { createHttpServer, } from "./http/server.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAsB,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAuB,MAAM,oCAAoC,CAAC;AAC9F,OAAO,EACL,YAAY,GAGb,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EACL,iBAAiB,GAGlB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAA0B,MAAM,eAAe,CAAC;AAC/E,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAgD,MAAM,uCAAuC,CAAC;AAC9I,OAAO,EAAE,4BAA4B,EAAE,MAAM,8CAA8C,CAAC;AAC5F,OAAO,EAAE,iBAAiB,EAAqB,MAAM,YAAY,CAAC;AAClE,OAAO,EAAE,YAAY,EAA8B,MAAM,2BAA2B,CAAC;AACrF,OAAO,EAAE,OAAO,EAAE,aAAa,EAAe,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,WAAW,EAAqB,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAmB,MAAM,8BAA8B,CAAC;AACrG,OAAO,EAAE,OAAO,EAAE,MAAM,iCAAiC,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAoB,MAAM,0BAA0B,CAAC;AAC3F,OAAO,EACL,cAAc,EACd,cAAc,GAKf,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,sBAAsB,EACtB,SAAS,GAGV,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gBAAgB,GAIjB,MAAM,kBAAkB,CAAC"}

package/dist/key-resolver.d.ts

@@ -0,0 +1,5 @@
+import type { Model } from "@sema-agent/core";
+export declare function buildKeyResolver(modelApiKeyEnv: Record<string, string>, env?: NodeJS.ProcessEnv, modelApiKeys?: Record<string, string>): ((model: Model) => Promise<{
+    apiKey: string;
+} | undefined>) | undefined;
+//# sourceMappingURL=key-resolver.d.ts.map

package/dist/key-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-resolver.d.ts","sourceRoot":"","sources":["../src/key-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAqB9C,wBAAgB,gBAAgB,CAC9B,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACtC,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,YAAY,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACxC,CAAC,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAAC,CAAC,GAAG,SAAS,CAUzE"}

package/dist/key-resolver.js

@@ -0,0 +1,15 @@
+export function buildKeyResolver(modelApiKeyEnv, env = process.env, modelApiKeys = {}) {
+    if (Object.keys(modelApiKeyEnv).length === 0 && Object.keys(modelApiKeys).length === 0)
+        return undefined;
+    return async (model) => {
+        const sealed = modelApiKeys[model.name];
+        if (sealed)
+            return { apiKey: sealed };
+        const envName = modelApiKeyEnv[model.name];
+        if (!envName)
+            return undefined;
+        const apiKey = env[envName];
+        return apiKey ? { apiKey } : undefined;
+    };
+}
+//# sourceMappingURL=key-resolver.js.map

package/dist/key-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-resolver.js","sourceRoot":"","sources":["../src/key-resolver.ts"],"names":[],"mappings":"AAqBA,MAAM,UAAU,gBAAgB,CAC9B,cAAsC,EACtC,MAAyB,OAAO,CAAC,GAAG,EACpC,eAAuC,EAAE;IAEzC,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzG,OAAO,KAAK,EAAE,KAAY,EAA2C,EAAE;QACrE,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACzC,CAAC,CAAC;AACJ,CAAC"}

package/dist/leader/diffout.d.ts

@@ -0,0 +1,24 @@
+import type { OutputChunk, ExecStreamOptions } from "@sema-agent/core";
+export interface ExecStreamLike {
+    execStream(command: string, options?: ExecStreamOptions): AsyncIterable<OutputChunk>;
+}
+export interface PullDiffOptions {
+    ref?: string;
+    cwd?: string;
+    maxBytes?: number;
+    signal?: AbortSignal;
+    readTimeoutMs?: number;
+}
+export type PullDiffResult = {
+    ok: true;
+    patch: string;
+    bytes: number;
+} | {
+    ok: false;
+    error: string;
+    truncated?: boolean;
+    exitCode?: number;
+};
+export declare function safeRev(rev: string): boolean;
+export declare function pullDiff(env: ExecStreamLike, baseSha: string, opts?: PullDiffOptions): Promise<PullDiffResult>;
+//# sourceMappingURL=diffout.d.ts.map

package/dist/leader/diffout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diffout.d.ts","sourceRoot":"","sources":["../../src/leader/diffout.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAGvE,MAAM,WAAW,cAAc;IAC7B,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;CACtF;AAED,MAAM,WAAW,eAAe;IAE9B,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;IAErB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAOzE,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE5C;AAMD,wBAAsB,QAAQ,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CA6CxH"}

package/dist/leader/diffout.js

@@ -0,0 +1,54 @@
+const DEFAULT_MAX_DIFF_BYTES = 5 * 1024 * 1024;
+const DEFAULT_READ_TIMEOUT_MS = 30_000;
+const SAFE_REV = /^[A-Za-z0-9._/-]{1,200}$/;
+export function safeRev(rev) {
+    return SAFE_REV.test(rev) && !rev.startsWith("-") && !rev.includes("..--");
+}
+export async function pullDiff(env, baseSha, opts = {}) {
+    const ref = opts.ref ?? "HEAD";
+    if (!safeRev(baseSha) || !safeRev(ref)) {
+        return { ok: false, error: `unsafe git rev (baseSha=${JSON.stringify(baseSha)} ref=${JSON.stringify(ref)})` };
+    }
+    const maxBytes = opts.maxBytes ?? DEFAULT_MAX_DIFF_BYTES;
+    const cmd = `git format-patch --stdout ${baseSha}..${ref}`;
+    let patch = "";
+    let bytes = 0;
+    let stderr = "";
+    let exitCode;
+    try {
+        for await (const chunk of env.execStream(cmd, {
+            ...(opts.cwd ? { cwd: opts.cwd } : {}),
+            maxOutputBytes: maxBytes + 1,
+            readTimeoutMs: opts.readTimeoutMs ?? DEFAULT_READ_TIMEOUT_MS,
+            ...(opts.signal ? { signal: opts.signal } : {}),
+        })) {
+            if (chunk.type === "stdout") {
+                patch += chunk.data;
+                bytes += chunk.data.length;
+                if (bytes > maxBytes) {
+                    return { ok: false, truncated: true, error: `diff exceeded ${maxBytes} bytes — fail-on-truncation (council#13)` };
+                }
+            }
+            else if (chunk.type === "stderr") {
+                stderr += chunk.data;
+            }
+            else {
+                exitCode = chunk.exitCode;
+            }
+        }
+    }
+    catch (e) {
+        return { ok: false, error: `execStream failed before exit: ${e instanceof Error ? e.message : String(e)}` };
+    }
+    if (exitCode === undefined) {
+        return { ok: false, truncated: true, error: "stream ended without an exit chunk (truncated or aborted)" };
+    }
+    if (exitCode !== 0) {
+        return { ok: false, exitCode, error: `git format-patch exited ${exitCode}: ${stderr.slice(0, 500).trim()}` };
+    }
+    if (patch.trim() === "") {
+        return { ok: false, exitCode, error: `empty diff: no commits in ${baseSha}..${ref} (worker produced nothing)` };
+    }
+    return { ok: true, patch, bytes };
+}
+//# sourceMappingURL=diffout.js.map

package/dist/leader/diffout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diffout.js","sourceRoot":"","sources":["../../src/leader/diffout.ts"],"names":[],"mappings":"AAqCA,MAAM,sBAAsB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC/C,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAEvC,MAAM,QAAQ,GAAG,0BAA0B,CAAC;AAE5C,MAAM,UAAU,OAAO,CAAC,GAAW;IACjC,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC7E,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAmB,EAAE,OAAe,EAAE,OAAwB,EAAE;IAC7F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC;IAC/B,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;IAChH,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,sBAAsB,CAAC;IAEzD,MAAM,GAAG,GAAG,6BAA6B,OAAO,KAAK,GAAG,EAAE,CAAC;IAC3D,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,QAA4B,CAAC;IACjC,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE;YAC5C,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,cAAc,EAAE,QAAQ,GAAG,CAAC;YAC5B,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,uBAAuB;YAC5D,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC,EAAE,CAAC;YACH,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5B,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC;gBACpB,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC3B,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;oBACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,iBAAiB,QAAQ,0CAA0C,EAAE,CAAC;gBACpH,CAAC;YACH,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAEX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC9G,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,2DAA2D,EAAE,CAAC;IAC5G,CAAC;IACD,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,2BAA2B,QAAQ,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;IAC/G,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,6BAA6B,OAAO,KAAK,GAAG,4BAA4B,EAAE,CAAC;IAClH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACpC,CAAC"}

package/dist/leader/diffup.d.ts

@@ -0,0 +1,14 @@
+import { type PullDiffResult } from "./diffout.js";
+export declare function buildUploadScript(p: {
+    repoDir: string;
+    baseSha: string;
+    putUrl: string;
+    workDir: string;
+}): string;
+export declare function uploadStepSuffix(workDir: string): string;
+export declare function fetchUploadedDiff(getUrl: string, opts?: {
+    maxBytes?: number;
+    fetchImpl?: typeof fetch;
+}): Promise<PullDiffResult>;
+export declare function withStaging<T extends object>(env: T, stage: (env: T) => Promise<void>, finalize?: (env: T) => Promise<void>): T;
+//# sourceMappingURL=diffup.d.ts.map

package/dist/leader/diffup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diffup.d.ts","sourceRoot":"","sources":["../../src/leader/diffup.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAW,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAQ5D,wBAAgB,iBAAiB,CAAC,CAAC,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAgBlH;AAGD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAExD;AAOD,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CAAO,GACzD,OAAO,CAAC,cAAc,CAAC,CAkBzB;AAWD,wBAAgB,WAAW,CAAC,CAAC,SAAS,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAwC/H"}