@shipfox/api-workflows 2.0.0

package/dist/core/agent-tools.js

@@ -0,0 +1,296 @@
+import { getProjectById } from '@shipfox/api-projects';
+import { AgentIntegrationMaterializationError } from './errors.js';
+let services;
+export function setAgentToolMaterializationServices(nextServices) {
+    services = nextServices;
+}
+export function clearAgentToolMaterializationServices() {
+    services = undefined;
+}
+export async function loadAgentToolMaterializationContext(params) {
+    if (!modelHasAgentStepIntegrations(params.model, params.jobs)) return undefined;
+    if (services === undefined) {
+        throw new AgentIntegrationMaterializationError('Agent tool materialization is not configured');
+    }
+    const project = await getProjectById(params.projectId);
+    if (project === undefined) {
+        throw new AgentIntegrationMaterializationError(`Project ${params.projectId} was not found while materializing agent integrations`);
+    }
+    const [workspaceConnectionSnapshot, defaultConnection] = await Promise.all([
+        services.loadWorkspaceConnectionSnapshot(params.workspaceId),
+        services.getIntegrationConnectionById(project.sourceConnectionId)
+    ]);
+    if (defaultConnection === undefined) {
+        throw new AgentIntegrationMaterializationError(`Source connection ${project.sourceConnectionId} was not found while materializing agent integrations`);
+    }
+    return {
+        catalogs: services.catalogs,
+        workspaceConnectionSnapshot,
+        defaultConnection: {
+            id: defaultConnection.id,
+            slug: defaultConnection.slug,
+            provider: defaultConnection.provider
+        }
+    };
+}
+export function materializeAgentIntegrations(params) {
+    const snapshot = findSnapshotStep(params);
+    if (snapshot !== undefined) return snapshot.integrations.map(copyMaterializedIntegration);
+    if (params.integrations === undefined) return undefined;
+    if (params.context === undefined) {
+        throw new AgentIntegrationMaterializationError('Agent integrations require materialization context');
+    }
+    const { context } = params;
+    return params.integrations.map((integration)=>materializeAgentIntegration({
+            integration,
+            context
+        }));
+}
+export function createAgentToolMaterializationSnapshot(params) {
+    if (params.context === undefined) return null;
+    const steps = params.model.jobs.flatMap((job)=>job.steps.flatMap((step)=>{
+            if (step.kind !== 'agent' || step.integrations === undefined) return [];
+            const integrations = materializeAgentIntegrations({
+                jobKey: job.key,
+                stepId: step.id,
+                integrations: step.integrations,
+                context: params.context
+            });
+            if (integrations === undefined) return [];
+            return [
+                {
+                    jobKey: job.key,
+                    stepId: step.id,
+                    integrations
+                }
+            ];
+        }));
+    return steps.length === 0 ? null : {
+        steps
+    };
+}
+function findSnapshotStep(params) {
+    return params.snapshot?.steps.find((step)=>step.jobKey === params.jobKey && step.stepId === params.stepId);
+}
+function materializeAgentIntegration(params) {
+    const connection = resolveConnection(params);
+    const catalog = params.context.catalogs.get(connection.provider);
+    if (catalog === undefined) {
+        throw new AgentIntegrationMaterializationError(`Integration provider ${connection.provider} has no agent tool catalog`);
+    }
+    const tools = selectTools({
+        catalog,
+        include: params.integration.include,
+        exclude: params.integration.exclude ?? []
+    });
+    const requiredScope = mergeRequiredScopes(tools.map((tool)=>tool.requiredScope));
+    return {
+        connectionId: connection.id,
+        connectionSlug: connection.slug,
+        provider: connection.provider,
+        requiredScope,
+        tools
+    };
+}
+function copyMaterializedIntegration(integration) {
+    return {
+        ...integration,
+        requiredScope: [
+            ...integration.requiredScope
+        ],
+        tools: integration.tools.map((tool)=>({
+                ...tool,
+                requiredScope: [
+                    ...tool.requiredScope
+                ],
+                ...tool.methods === undefined ? {} : {
+                    methods: tool.methods.map((method)=>({
+                            ...method,
+                            requiredScope: [
+                                ...method.requiredScope
+                            ]
+                        }))
+                }
+            }))
+    };
+}
+function resolveConnection(params) {
+    if (params.integration.connection === undefined) return params.context.defaultConnection;
+    const connection = params.context.workspaceConnectionSnapshot.get(params.integration.connection);
+    if (connection === undefined) {
+        throw new AgentIntegrationMaterializationError(`Integration connection ${params.integration.connection} was not found while materializing agent integrations`);
+    }
+    return {
+        id: connection.id,
+        slug: params.integration.connection,
+        provider: connection.provider
+    };
+}
+function selectTools(params) {
+    const selected = new Map();
+    for (const token of params.include){
+        applySelection({
+            catalog: params.catalog,
+            selected,
+            token,
+            mode: 'include'
+        });
+    }
+    for (const token of params.exclude){
+        applySelection({
+            catalog: params.catalog,
+            selected,
+            token,
+            mode: 'exclude'
+        });
+    }
+    const tools = params.catalog.flatMap((entry)=>{
+        const state = selected.get(entry.id);
+        if (state === undefined) return [];
+        return [
+            materializedTool(state)
+        ];
+    });
+    if (tools.length === 0) {
+        throw new AgentIntegrationMaterializationError('Agent integration selection resolved to no tools');
+    }
+    return tools;
+}
+function applySelection(params) {
+    if (params.token === '*') {
+        for (const entry of params.catalog)applyEntrySelection(params, entry);
+        return;
+    }
+    const match = findCatalogSelection(params.catalog, params.token);
+    if (match === undefined) {
+        throw new AgentIntegrationMaterializationError(`Unknown integration tool: ${params.token}`);
+    }
+    applyEntrySelection(params, match.entry, match.method);
+}
+function applyEntrySelection(params, entry, method) {
+    if (params.mode === 'exclude') {
+        excludeEntrySelection(params.selected, entry, method);
+        return;
+    }
+    const state = params.selected.get(entry.id) ?? {
+        entry,
+        methods: new Map(),
+        selectedStandalone: false
+    };
+    if (entry.methods === undefined) {
+        state.selectedStandalone = true;
+    } else if (method === undefined) {
+        for (const candidate of entry.methods)state.methods.set(candidate.id, candidate);
+    } else {
+        state.methods.set(method.id, method);
+    }
+    params.selected.set(entry.id, state);
+}
+function excludeEntrySelection(selected, entry, method) {
+    if (method === undefined) {
+        selected.delete(entry.id);
+        return;
+    }
+    const state = selected.get(entry.id);
+    if (state === undefined) return;
+    state.methods.delete(method.id);
+    if (!state.selectedStandalone && state.methods.size === 0) selected.delete(entry.id);
+}
+function findCatalogSelection(catalog, token) {
+    const entry = catalog.find((candidate)=>candidate.id === token);
+    if (entry !== undefined) return {
+        entry
+    };
+    const wildcardSuffix = '.*';
+    if (token.endsWith(wildcardSuffix)) {
+        const family = token.slice(0, -wildcardSuffix.length);
+        const familyEntry = catalog.find((candidate)=>candidate.id === family);
+        return familyEntry === undefined ? undefined : {
+            entry: familyEntry
+        };
+    }
+    const dotIndex = token.indexOf('.');
+    if (dotIndex < 1) return undefined;
+    const family = token.slice(0, dotIndex);
+    const methodId = token.slice(dotIndex + 1);
+    const familyEntry = catalog.find((candidate)=>candidate.id === family);
+    const method = familyEntry?.methods?.find((candidate)=>candidate.id === methodId);
+    if (familyEntry === undefined || method === undefined) return undefined;
+    return {
+        entry: familyEntry,
+        method
+    };
+}
+function materializedTool(state) {
+    if (state.entry.methods === undefined) {
+        return {
+            id: state.entry.id,
+            sensitivity: state.entry.sensitivity,
+            sensitive: state.entry.sensitive,
+            requiredScope: normalizeRequiredScope(state.entry.requiredScope),
+            inputSchema: state.entry.inputSchema,
+            ...state.entry.outputSchema === undefined ? {} : {
+                outputSchema: state.entry.outputSchema
+            }
+        };
+    }
+    const methods = state.entry.methods.filter((method)=>state.methods.has(method.id)).map((method)=>({
+            id: method.id,
+            token: `${state.entry.id}.${method.id}`,
+            description: method.description,
+            sensitivity: method.sensitivity,
+            sensitive: method.sensitive,
+            requiredScope: normalizeRequiredScope(method.requiredScope)
+        }));
+    return {
+        id: state.entry.id,
+        sensitivity: methods.some((method)=>method.sensitivity === 'write') ? 'write' : 'read',
+        sensitive: methods.some((method)=>method.sensitive),
+        requiredScope: mergeRequiredScopes(methods.map((method)=>method.requiredScope)),
+        inputSchema: state.entry.inputSchema,
+        ...state.entry.outputSchema === undefined ? {} : {
+            outputSchema: state.entry.outputSchema
+        },
+        methods
+    };
+}
+function mergeRequiredScopes(scopes) {
+    const items = scopes.flatMap(normalizeRequiredScope);
+    if (items.every(isPermissionScope)) {
+        const byPermission = new Map();
+        for (const item of items){
+            const existing = byPermission.get(item.permission);
+            if (existing === 'write') continue;
+            byPermission.set(item.permission, item.access);
+        }
+        return [
+            ...byPermission.entries()
+        ].map(([permission, access])=>({
+                permission,
+                access
+            }));
+    }
+    const deduped = new Map();
+    for (const item of items)deduped.set(JSON.stringify(item), item);
+    return [
+        ...deduped.values()
+    ];
+}
+function normalizeRequiredScope(scope) {
+    return Array.isArray(scope) ? [
+        ...scope
+    ] : [
+        scope
+    ];
+}
+function isPermissionScope(value) {
+    if (typeof value !== 'object' || value === null) return false;
+    const candidate = value;
+    return typeof candidate.permission === 'string' && (candidate.access === 'read' || candidate.access === 'write');
+}
+function modelHasAgentStepIntegrations(model, jobs) {
+    if (model === null) return false;
+    return (jobs ?? model.jobs).some((job)=>job.steps.some((step)=>step.kind === 'agent' && step.integrations !== undefined));
+}
+
+//# sourceMappingURL=agent-tools.js.map

package/dist/core/agent-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/agent-tools.ts"],"sourcesContent":["import type {\n  MaterializedAgentIntegrationConfigDto,\n  MaterializedAgentIntegrationToolConfigDto,\n} from '@shipfox/api-agent-dto';\nimport type {WorkflowModel} from '@shipfox/api-definitions';\nimport type {\n  AgentToolCatalogEntry,\n  AgentToolCatalogMethod,\n  AgentToolCatalogs,\n  GetIntegrationConnectionByIdFn,\n  IntegrationProviderKind,\n  LoadWorkspaceConnectionSnapshot,\n  WorkspaceConnectionSnapshot,\n} from '@shipfox/api-integration-core';\nimport {getProjectById} from '@shipfox/api-projects';\nimport {AgentIntegrationMaterializationError} from './errors.js';\n\ntype WorkflowModelJob = WorkflowModel['jobs'][number];\ntype WorkflowModelAgentStep = Extract<WorkflowModelJob['steps'][number], {kind: 'agent'}>;\ntype WorkflowModelStepIntegration = NonNullable<WorkflowModelAgentStep['integrations']>[number];\n\ninterface AgentToolMaterializationServices {\n  readonly catalogs: AgentToolCatalogs;\n  readonly loadWorkspaceConnectionSnapshot: LoadWorkspaceConnectionSnapshot;\n  readonly getIntegrationConnectionById: GetIntegrationConnectionByIdFn;\n}\n\nexport interface AgentToolMaterializationContext {\n  readonly catalogs: AgentToolCatalogs;\n  readonly workspaceConnectionSnapshot: WorkspaceConnectionSnapshot;\n  readonly defaultConnection: {\n    readonly id: string;\n    readonly slug: string;\n    readonly provider: IntegrationProviderKind;\n  };\n}\n\nexport interface AgentToolMaterializationSnapshot {\n  readonly steps: readonly AgentToolMaterializationSnapshotStep[];\n}\n\nexport interface AgentToolMaterializationSnapshotStep {\n  readonly jobKey: string;\n  readonly stepId: string;\n  readonly integrations: readonly MaterializedAgentIntegrationConfigDto[];\n}\n\ninterface SelectedToolState {\n  readonly entry: AgentToolCatalogEntry;\n  readonly methods: Map<string, AgentToolCatalogMethod>;\n  selectedStandalone: boolean;\n}\n\nlet services: AgentToolMaterializationServices | undefined;\n\nexport function setAgentToolMaterializationServices(\n  nextServices: AgentToolMaterializationServices,\n): void {\n  services = nextServices;\n}\n\nexport function clearAgentToolMaterializationServices(): void {\n  services = undefined;\n}\n\nexport async function loadAgentToolMaterializationContext(params: {\n  readonly model: WorkflowModel | null;\n  readonly workspaceId: string;\n  readonly projectId: string;\n  readonly jobs?: readonly WorkflowModelJob[] | undefined;\n}): Promise<AgentToolMaterializationContext | undefined> {\n  if (!modelHasAgentStepIntegrations(params.model, params.jobs)) return undefined;\n  if (services === undefined) {\n    throw new AgentIntegrationMaterializationError('Agent tool materialization is not configured');\n  }\n\n  const project = await getProjectById(params.projectId);\n  if (project === undefined) {\n    throw new AgentIntegrationMaterializationError(\n      `Project ${params.projectId} was not found while materializing agent integrations`,\n    );\n  }\n\n  const [workspaceConnectionSnapshot, defaultConnection] = await Promise.all([\n    services.loadWorkspaceConnectionSnapshot(params.workspaceId),\n    services.getIntegrationConnectionById(project.sourceConnectionId),\n  ]);\n  if (defaultConnection === undefined) {\n    throw new AgentIntegrationMaterializationError(\n      `Source connection ${project.sourceConnectionId} was not found while materializing agent integrations`,\n    );\n  }\n\n  return {\n    catalogs: services.catalogs,\n    workspaceConnectionSnapshot,\n    defaultConnection: {\n      id: defaultConnection.id,\n      slug: defaultConnection.slug,\n      provider: defaultConnection.provider,\n    },\n  };\n}\n\nexport function materializeAgentIntegrations(params: {\n  readonly jobKey: string;\n  readonly stepId: string;\n  readonly integrations: readonly WorkflowModelStepIntegration[] | undefined;\n  readonly context: AgentToolMaterializationContext | undefined;\n  readonly snapshot?: AgentToolMaterializationSnapshot | null | undefined;\n}): MaterializedAgentIntegrationConfigDto[] | undefined {\n  const snapshot = findSnapshotStep(params);\n  if (snapshot !== undefined) return snapshot.integrations.map(copyMaterializedIntegration);\n  if (params.integrations === undefined) return undefined;\n  if (params.context === undefined) {\n    throw new AgentIntegrationMaterializationError(\n      'Agent integrations require materialization context',\n    );\n  }\n  const {context} = params;\n\n  return params.integrations.map((integration) =>\n    materializeAgentIntegration({integration, context}),\n  );\n}\n\nexport function createAgentToolMaterializationSnapshot(params: {\n  readonly model: WorkflowModel;\n  readonly context: AgentToolMaterializationContext | undefined;\n}): AgentToolMaterializationSnapshot | null {\n  if (params.context === undefined) return null;\n\n  const steps = params.model.jobs.flatMap((job) =>\n    job.steps.flatMap((step) => {\n      if (step.kind !== 'agent' || step.integrations === undefined) return [];\n      const integrations = materializeAgentIntegrations({\n        jobKey: job.key,\n        stepId: step.id,\n        integrations: step.integrations,\n        context: params.context,\n      });\n      if (integrations === undefined) return [];\n      return [\n        {\n          jobKey: job.key,\n          stepId: step.id,\n          integrations,\n        },\n      ];\n    }),\n  );\n\n  return steps.length === 0 ? null : {steps};\n}\n\nfunction findSnapshotStep(params: {\n  readonly jobKey: string;\n  readonly stepId: string;\n  readonly snapshot?: AgentToolMaterializationSnapshot | null | undefined;\n}): AgentToolMaterializationSnapshotStep | undefined {\n  return params.snapshot?.steps.find(\n    (step) => step.jobKey === params.jobKey && step.stepId === params.stepId,\n  );\n}\n\nfunction materializeAgentIntegration(params: {\n  readonly integration: WorkflowModelStepIntegration;\n  readonly context: AgentToolMaterializationContext;\n}): MaterializedAgentIntegrationConfigDto {\n  const connection = resolveConnection(params);\n  const catalog = params.context.catalogs.get(connection.provider);\n  if (catalog === undefined) {\n    throw new AgentIntegrationMaterializationError(\n      `Integration provider ${connection.provider} has no agent tool catalog`,\n    );\n  }\n\n  const tools = selectTools({\n    catalog,\n    include: params.integration.include,\n    exclude: params.integration.exclude ?? [],\n  });\n  const requiredScope = mergeRequiredScopes(tools.map((tool) => tool.requiredScope));\n\n  return {\n    connectionId: connection.id,\n    connectionSlug: connection.slug,\n    provider: connection.provider,\n    requiredScope,\n    tools,\n  };\n}\n\nfunction copyMaterializedIntegration(\n  integration: MaterializedAgentIntegrationConfigDto,\n): MaterializedAgentIntegrationConfigDto {\n  return {\n    ...integration,\n    requiredScope: [...integration.requiredScope],\n    tools: integration.tools.map((tool) => ({\n      ...tool,\n      requiredScope: [...tool.requiredScope],\n      ...(tool.methods === undefined\n        ? {}\n        : {\n            methods: tool.methods.map((method) => ({\n              ...method,\n              requiredScope: [...method.requiredScope],\n            })),\n          }),\n    })),\n  };\n}\n\nfunction resolveConnection(params: {\n  readonly integration: WorkflowModelStepIntegration;\n  readonly context: AgentToolMaterializationContext;\n}): AgentToolMaterializationContext['defaultConnection'] {\n  if (params.integration.connection === undefined) return params.context.defaultConnection;\n\n  const connection = params.context.workspaceConnectionSnapshot.get(params.integration.connection);\n  if (connection === undefined) {\n    throw new AgentIntegrationMaterializationError(\n      `Integration connection ${params.integration.connection} was not found while materializing agent integrations`,\n    );\n  }\n  return {\n    id: connection.id,\n    slug: params.integration.connection,\n    provider: connection.provider,\n  };\n}\n\nfunction selectTools(params: {\n  readonly catalog: readonly AgentToolCatalogEntry[];\n  readonly include: readonly string[];\n  readonly exclude: readonly string[];\n}): MaterializedAgentIntegrationToolConfigDto[] {\n  const selected = new Map<string, SelectedToolState>();\n\n  for (const token of params.include) {\n    applySelection({catalog: params.catalog, selected, token, mode: 'include'});\n  }\n  for (const token of params.exclude) {\n    applySelection({catalog: params.catalog, selected, token, mode: 'exclude'});\n  }\n\n  const tools = params.catalog.flatMap((entry) => {\n    const state = selected.get(entry.id);\n    if (state === undefined) return [];\n    return [materializedTool(state)];\n  });\n  if (tools.length === 0) {\n    throw new AgentIntegrationMaterializationError(\n      'Agent integration selection resolved to no tools',\n    );\n  }\n  return tools;\n}\n\nfunction applySelection(params: {\n  readonly catalog: readonly AgentToolCatalogEntry[];\n  readonly selected: Map<string, SelectedToolState>;\n  readonly token: string;\n  readonly mode: 'include' | 'exclude';\n}): void {\n  if (params.token === '*') {\n    for (const entry of params.catalog) applyEntrySelection(params, entry);\n    return;\n  }\n\n  const match = findCatalogSelection(params.catalog, params.token);\n  if (match === undefined) {\n    throw new AgentIntegrationMaterializationError(`Unknown integration tool: ${params.token}`);\n  }\n  applyEntrySelection(params, match.entry, match.method);\n}\n\nfunction applyEntrySelection(\n  params: {\n    readonly selected: Map<string, SelectedToolState>;\n    readonly token: string;\n    readonly mode: 'include' | 'exclude';\n  },\n  entry: AgentToolCatalogEntry,\n  method?: AgentToolCatalogMethod | undefined,\n): void {\n  if (params.mode === 'exclude') {\n    excludeEntrySelection(params.selected, entry, method);\n    return;\n  }\n\n  const state =\n    params.selected.get(entry.id) ??\n    ({entry, methods: new Map(), selectedStandalone: false} satisfies SelectedToolState);\n  if (entry.methods === undefined) {\n    state.selectedStandalone = true;\n  } else if (method === undefined) {\n    for (const candidate of entry.methods) state.methods.set(candidate.id, candidate);\n  } else {\n    state.methods.set(method.id, method);\n  }\n  params.selected.set(entry.id, state);\n}\n\nfunction excludeEntrySelection(\n  selected: Map<string, SelectedToolState>,\n  entry: AgentToolCatalogEntry,\n  method?: AgentToolCatalogMethod | undefined,\n): void {\n  if (method === undefined) {\n    selected.delete(entry.id);\n    return;\n  }\n\n  const state = selected.get(entry.id);\n  if (state === undefined) return;\n  state.methods.delete(method.id);\n  if (!state.selectedStandalone && state.methods.size === 0) selected.delete(entry.id);\n}\n\nfunction findCatalogSelection(\n  catalog: readonly AgentToolCatalogEntry[],\n  token: string,\n):\n  | {readonly entry: AgentToolCatalogEntry; readonly method?: AgentToolCatalogMethod | undefined}\n  | undefined {\n  const entry = catalog.find((candidate) => candidate.id === token);\n  if (entry !== undefined) return {entry};\n\n  const wildcardSuffix = '.*';\n  if (token.endsWith(wildcardSuffix)) {\n    const family = token.slice(0, -wildcardSuffix.length);\n    const familyEntry = catalog.find((candidate) => candidate.id === family);\n    return familyEntry === undefined ? undefined : {entry: familyEntry};\n  }\n\n  const dotIndex = token.indexOf('.');\n  if (dotIndex < 1) return undefined;\n  const family = token.slice(0, dotIndex);\n  const methodId = token.slice(dotIndex + 1);\n  const familyEntry = catalog.find((candidate) => candidate.id === family);\n  const method = familyEntry?.methods?.find((candidate) => candidate.id === methodId);\n  if (familyEntry === undefined || method === undefined) return undefined;\n  return {entry: familyEntry, method};\n}\n\nfunction materializedTool(state: SelectedToolState): MaterializedAgentIntegrationToolConfigDto {\n  if (state.entry.methods === undefined) {\n    return {\n      id: state.entry.id,\n      sensitivity: state.entry.sensitivity,\n      sensitive: state.entry.sensitive,\n      requiredScope: normalizeRequiredScope(state.entry.requiredScope),\n      inputSchema: state.entry.inputSchema,\n      ...(state.entry.outputSchema === undefined ? {} : {outputSchema: state.entry.outputSchema}),\n    };\n  }\n\n  const methods = state.entry.methods\n    .filter((method) => state.methods.has(method.id))\n    .map((method) => ({\n      id: method.id,\n      token: `${state.entry.id}.${method.id}`,\n      description: method.description,\n      sensitivity: method.sensitivity,\n      sensitive: method.sensitive,\n      requiredScope: normalizeRequiredScope(method.requiredScope),\n    }));\n\n  return {\n    id: state.entry.id,\n    sensitivity: methods.some((method) => method.sensitivity === 'write') ? 'write' : 'read',\n    sensitive: methods.some((method) => method.sensitive),\n    requiredScope: mergeRequiredScopes(methods.map((method) => method.requiredScope)),\n    inputSchema: state.entry.inputSchema,\n    ...(state.entry.outputSchema === undefined ? {} : {outputSchema: state.entry.outputSchema}),\n    methods,\n  };\n}\n\nfunction mergeRequiredScopes(scopes: readonly unknown[]): unknown[] {\n  const items = scopes.flatMap(normalizeRequiredScope);\n  if (items.every(isPermissionScope)) {\n    const byPermission = new Map<string, 'read' | 'write'>();\n    for (const item of items) {\n      const existing = byPermission.get(item.permission);\n      if (existing === 'write') continue;\n      byPermission.set(item.permission, item.access);\n    }\n    return [...byPermission.entries()].map(([permission, access]) => ({permission, access}));\n  }\n\n  const deduped = new Map<string, unknown>();\n  for (const item of items) deduped.set(JSON.stringify(item), item);\n  return [...deduped.values()];\n}\n\nfunction normalizeRequiredScope(scope: unknown): unknown[] {\n  return Array.isArray(scope) ? [...scope] : [scope];\n}\n\nfunction isPermissionScope(\n  value: unknown,\n): value is {permission: string; access: 'read' | 'write'} {\n  if (typeof value !== 'object' || value === null) return false;\n  const candidate = value as {permission?: unknown; access?: unknown};\n  return (\n    typeof candidate.permission === 'string' &&\n    (candidate.access === 'read' || candidate.access === 'write')\n  );\n}\n\nfunction modelHasAgentStepIntegrations(\n  model: WorkflowModel | null,\n  jobs: readonly WorkflowModelJob[] | undefined,\n): boolean {\n  if (model === null) return false;\n  return (jobs ?? model.jobs).some((job) =>\n    job.steps.some((step) => step.kind === 'agent' && step.integrations !== undefined),\n  );\n}\n"],"names":["getProjectById","AgentIntegrationMaterializationError","services","setAgentToolMaterializationServices","nextServices","clearAgentToolMaterializationServices","undefined","loadAgentToolMaterializationContext","params","modelHasAgentStepIntegrations","model","jobs","project","projectId","workspaceConnectionSnapshot","defaultConnection","Promise","all","loadWorkspaceConnectionSnapshot","workspaceId","getIntegrationConnectionById","sourceConnectionId","catalogs","id","slug","provider","materializeAgentIntegrations","snapshot","findSnapshotStep","integrations","map","copyMaterializedIntegration","context","integration","materializeAgentIntegration","createAgentToolMaterializationSnapshot","steps","flatMap","job","step","kind","jobKey","key","stepId","length","find","connection","resolveConnection","catalog","get","tools","selectTools","include","exclude","requiredScope","mergeRequiredScopes","tool","connectionId","connectionSlug","methods","method","selected","Map","token","applySelection","mode","entry","state","materializedTool","applyEntrySelection","match","findCatalogSelection","excludeEntrySelection","selectedStandalone","candidate","set","delete","size","wildcardSuffix","endsWith","family","slice","familyEntry","dotIndex","indexOf","methodId","sensitivity","sensitive","normalizeRequiredScope","inputSchema","outputSchema","filter","has","description","some","scopes","items","every","isPermissionScope","byPermission","item","existing","permission","access","entries","deduped","JSON","stringify","values","scope","Array","isArray","value"],"mappings":"AAcA,SAAQA,cAAc,QAAO,wBAAwB;AACrD,SAAQC,oCAAoC,QAAO,cAAc;AAsCjE,IAAIC;AAEJ,OAAO,SAASC,oCACdC,YAA8C;IAE9CF,WAAWE;AACb;AAEA,OAAO,SAASC;IACdH,WAAWI;AACb;AAEA,OAAO,eAAeC,oCAAoCC,MAKzD;IACC,IAAI,CAACC,8BAA8BD,OAAOE,KAAK,EAAEF,OAAOG,IAAI,GAAG,OAAOL;IACtE,IAAIJ,aAAaI,WAAW;QAC1B,MAAM,IAAIL,qCAAqC;IACjD;IAEA,MAAMW,UAAU,MAAMZ,eAAeQ,OAAOK,SAAS;IACrD,IAAID,YAAYN,WAAW;QACzB,MAAM,IAAIL,qCACR,CAAC,QAAQ,EAAEO,OAAOK,SAAS,CAAC,qDAAqD,CAAC;IAEtF;IAEA,MAAM,CAACC,6BAA6BC,kBAAkB,GAAG,MAAMC,QAAQC,GAAG,CAAC;QACzEf,SAASgB,+BAA+B,CAACV,OAAOW,WAAW;QAC3DjB,SAASkB,4BAA4B,CAACR,QAAQS,kBAAkB;KACjE;IACD,IAAIN,sBAAsBT,WAAW;QACnC,MAAM,IAAIL,qCACR,CAAC,kBAAkB,EAAEW,QAAQS,kBAAkB,CAAC,qDAAqD,CAAC;IAE1G;IAEA,OAAO;QACLC,UAAUpB,SAASoB,QAAQ;QAC3BR;QACAC,mBAAmB;YACjBQ,IAAIR,kBAAkBQ,EAAE;YACxBC,MAAMT,kBAAkBS,IAAI;YAC5BC,UAAUV,kBAAkBU,QAAQ;QACtC;IACF;AACF;AAEA,OAAO,SAASC,6BAA6BlB,MAM5C;IACC,MAAMmB,WAAWC,iBAAiBpB;IAClC,IAAImB,aAAarB,WAAW,OAAOqB,SAASE,YAAY,CAACC,GAAG,CAACC;IAC7D,IAAIvB,OAAOqB,YAAY,KAAKvB,WAAW,OAAOA;IAC9C,IAAIE,OAAOwB,OAAO,KAAK1B,WAAW;QAChC,MAAM,IAAIL,qCACR;IAEJ;IACA,MAAM,EAAC+B,OAAO,EAAC,GAAGxB;IAElB,OAAOA,OAAOqB,YAAY,CAACC,GAAG,CAAC,CAACG,cAC9BC,4BAA4B;YAACD;YAAaD;QAAO;AAErD;AAEA,OAAO,SAASG,uCAAuC3B,MAGtD;IACC,IAAIA,OAAOwB,OAAO,KAAK1B,WAAW,OAAO;IAEzC,MAAM8B,QAAQ5B,OAAOE,KAAK,CAACC,IAAI,CAAC0B,OAAO,CAAC,CAACC,MACvCA,IAAIF,KAAK,CAACC,OAAO,CAAC,CAACE;YACjB,IAAIA,KAAKC,IAAI,KAAK,WAAWD,KAAKV,YAAY,KAAKvB,WAAW,OAAO,EAAE;YACvE,MAAMuB,eAAeH,6BAA6B;gBAChDe,QAAQH,IAAII,GAAG;gBACfC,QAAQJ,KAAKhB,EAAE;gBACfM,cAAcU,KAAKV,YAAY;gBAC/BG,SAASxB,OAAOwB,OAAO;YACzB;YACA,IAAIH,iBAAiBvB,WAAW,OAAO,EAAE;YACzC,OAAO;gBACL;oBACEmC,QAAQH,IAAII,GAAG;oBACfC,QAAQJ,KAAKhB,EAAE;oBACfM;gBACF;aACD;QACH;IAGF,OAAOO,MAAMQ,MAAM,KAAK,IAAI,OAAO;QAACR;IAAK;AAC3C;AAEA,SAASR,iBAAiBpB,MAIzB;IACC,OAAOA,OAAOmB,QAAQ,EAAES,MAAMS,KAC5B,CAACN,OAASA,KAAKE,MAAM,KAAKjC,OAAOiC,MAAM,IAAIF,KAAKI,MAAM,KAAKnC,OAAOmC,MAAM;AAE5E;AAEA,SAAST,4BAA4B1B,MAGpC;IACC,MAAMsC,aAAaC,kBAAkBvC;IACrC,MAAMwC,UAAUxC,OAAOwB,OAAO,CAACV,QAAQ,CAAC2B,GAAG,CAACH,WAAWrB,QAAQ;IAC/D,IAAIuB,YAAY1C,WAAW;QACzB,MAAM,IAAIL,qCACR,CAAC,qBAAqB,EAAE6C,WAAWrB,QAAQ,CAAC,0BAA0B,CAAC;IAE3E;IAEA,MAAMyB,QAAQC,YAAY;QACxBH;QACAI,SAAS5C,OAAOyB,WAAW,CAACmB,OAAO;QACnCC,SAAS7C,OAAOyB,WAAW,CAACoB,OAAO,IAAI,EAAE;IAC3C;IACA,MAAMC,gBAAgBC,oBAAoBL,MAAMpB,GAAG,CAAC,CAAC0B,OAASA,KAAKF,aAAa;IAEhF,OAAO;QACLG,cAAcX,WAAWvB,EAAE;QAC3BmC,gBAAgBZ,WAAWtB,IAAI;QAC/BC,UAAUqB,WAAWrB,QAAQ;QAC7B6B;QACAJ;IACF;AACF;AAEA,SAASnB,4BACPE,WAAkD;IAElD,OAAO;QACL,GAAGA,WAAW;QACdqB,eAAe;eAAIrB,YAAYqB,aAAa;SAAC;QAC7CJ,OAAOjB,YAAYiB,KAAK,CAACpB,GAAG,CAAC,CAAC0B,OAAU,CAAA;gBACtC,GAAGA,IAAI;gBACPF,eAAe;uBAAIE,KAAKF,aAAa;iBAAC;gBACtC,GAAIE,KAAKG,OAAO,KAAKrD,YACjB,CAAC,IACD;oBACEqD,SAASH,KAAKG,OAAO,CAAC7B,GAAG,CAAC,CAAC8B,SAAY,CAAA;4BACrC,GAAGA,MAAM;4BACTN,eAAe;mCAAIM,OAAON,aAAa;6BAAC;wBAC1C,CAAA;gBACF,CAAC;YACP,CAAA;IACF;AACF;AAEA,SAASP,kBAAkBvC,MAG1B;IACC,IAAIA,OAAOyB,WAAW,CAACa,UAAU,KAAKxC,WAAW,OAAOE,OAAOwB,OAAO,CAACjB,iBAAiB;IAExF,MAAM+B,aAAatC,OAAOwB,OAAO,CAAClB,2BAA2B,CAACmC,GAAG,CAACzC,OAAOyB,WAAW,CAACa,UAAU;IAC/F,IAAIA,eAAexC,WAAW;QAC5B,MAAM,IAAIL,qCACR,CAAC,uBAAuB,EAAEO,OAAOyB,WAAW,CAACa,UAAU,CAAC,qDAAqD,CAAC;IAElH;IACA,OAAO;QACLvB,IAAIuB,WAAWvB,EAAE;QACjBC,MAAMhB,OAAOyB,WAAW,CAACa,UAAU;QACnCrB,UAAUqB,WAAWrB,QAAQ;IAC/B;AACF;AAEA,SAAS0B,YAAY3C,MAIpB;IACC,MAAMqD,WAAW,IAAIC;IAErB,KAAK,MAAMC,SAASvD,OAAO4C,OAAO,CAAE;QAClCY,eAAe;YAAChB,SAASxC,OAAOwC,OAAO;YAAEa;YAAUE;YAAOE,MAAM;QAAS;IAC3E;IACA,KAAK,MAAMF,SAASvD,OAAO6C,OAAO,CAAE;QAClCW,eAAe;YAAChB,SAASxC,OAAOwC,OAAO;YAAEa;YAAUE;YAAOE,MAAM;QAAS;IAC3E;IAEA,MAAMf,QAAQ1C,OAAOwC,OAAO,CAACX,OAAO,CAAC,CAAC6B;QACpC,MAAMC,QAAQN,SAASZ,GAAG,CAACiB,MAAM3C,EAAE;QACnC,IAAI4C,UAAU7D,WAAW,OAAO,EAAE;QAClC,OAAO;YAAC8D,iBAAiBD;SAAO;IAClC;IACA,IAAIjB,MAAMN,MAAM,KAAK,GAAG;QACtB,MAAM,IAAI3C,qCACR;IAEJ;IACA,OAAOiD;AACT;AAEA,SAASc,eAAexD,MAKvB;IACC,IAAIA,OAAOuD,KAAK,KAAK,KAAK;QACxB,KAAK,MAAMG,SAAS1D,OAAOwC,OAAO,CAAEqB,oBAAoB7D,QAAQ0D;QAChE;IACF;IAEA,MAAMI,QAAQC,qBAAqB/D,OAAOwC,OAAO,EAAExC,OAAOuD,KAAK;IAC/D,IAAIO,UAAUhE,WAAW;QACvB,MAAM,IAAIL,qCAAqC,CAAC,0BAA0B,EAAEO,OAAOuD,KAAK,EAAE;IAC5F;IACAM,oBAAoB7D,QAAQ8D,MAAMJ,KAAK,EAAEI,MAAMV,MAAM;AACvD;AAEA,SAASS,oBACP7D,MAIC,EACD0D,KAA4B,EAC5BN,MAA2C;IAE3C,IAAIpD,OAAOyD,IAAI,KAAK,WAAW;QAC7BO,sBAAsBhE,OAAOqD,QAAQ,EAAEK,OAAON;QAC9C;IACF;IAEA,MAAMO,QACJ3D,OAAOqD,QAAQ,CAACZ,GAAG,CAACiB,MAAM3C,EAAE,KAC3B;QAAC2C;QAAOP,SAAS,IAAIG;QAAOW,oBAAoB;IAAK;IACxD,IAAIP,MAAMP,OAAO,KAAKrD,WAAW;QAC/B6D,MAAMM,kBAAkB,GAAG;IAC7B,OAAO,IAAIb,WAAWtD,WAAW;QAC/B,KAAK,MAAMoE,aAAaR,MAAMP,OAAO,CAAEQ,MAAMR,OAAO,CAACgB,GAAG,CAACD,UAAUnD,EAAE,EAAEmD;IACzE,OAAO;QACLP,MAAMR,OAAO,CAACgB,GAAG,CAACf,OAAOrC,EAAE,EAAEqC;IAC/B;IACApD,OAAOqD,QAAQ,CAACc,GAAG,CAACT,MAAM3C,EAAE,EAAE4C;AAChC;AAEA,SAASK,sBACPX,QAAwC,EACxCK,KAA4B,EAC5BN,MAA2C;IAE3C,IAAIA,WAAWtD,WAAW;QACxBuD,SAASe,MAAM,CAACV,MAAM3C,EAAE;QACxB;IACF;IAEA,MAAM4C,QAAQN,SAASZ,GAAG,CAACiB,MAAM3C,EAAE;IACnC,IAAI4C,UAAU7D,WAAW;IACzB6D,MAAMR,OAAO,CAACiB,MAAM,CAAChB,OAAOrC,EAAE;IAC9B,IAAI,CAAC4C,MAAMM,kBAAkB,IAAIN,MAAMR,OAAO,CAACkB,IAAI,KAAK,GAAGhB,SAASe,MAAM,CAACV,MAAM3C,EAAE;AACrF;AAEA,SAASgD,qBACPvB,OAAyC,EACzCe,KAAa;IAIb,MAAMG,QAAQlB,QAAQH,IAAI,CAAC,CAAC6B,YAAcA,UAAUnD,EAAE,KAAKwC;IAC3D,IAAIG,UAAU5D,WAAW,OAAO;QAAC4D;IAAK;IAEtC,MAAMY,iBAAiB;IACvB,IAAIf,MAAMgB,QAAQ,CAACD,iBAAiB;QAClC,MAAME,SAASjB,MAAMkB,KAAK,CAAC,GAAG,CAACH,eAAelC,MAAM;QACpD,MAAMsC,cAAclC,QAAQH,IAAI,CAAC,CAAC6B,YAAcA,UAAUnD,EAAE,KAAKyD;QACjE,OAAOE,gBAAgB5E,YAAYA,YAAY;YAAC4D,OAAOgB;QAAW;IACpE;IAEA,MAAMC,WAAWpB,MAAMqB,OAAO,CAAC;IAC/B,IAAID,WAAW,GAAG,OAAO7E;IACzB,MAAM0E,SAASjB,MAAMkB,KAAK,CAAC,GAAGE;IAC9B,MAAME,WAAWtB,MAAMkB,KAAK,CAACE,WAAW;IACxC,MAAMD,cAAclC,QAAQH,IAAI,CAAC,CAAC6B,YAAcA,UAAUnD,EAAE,KAAKyD;IACjE,MAAMpB,SAASsB,aAAavB,SAASd,KAAK,CAAC6B,YAAcA,UAAUnD,EAAE,KAAK8D;IAC1E,IAAIH,gBAAgB5E,aAAasD,WAAWtD,WAAW,OAAOA;IAC9D,OAAO;QAAC4D,OAAOgB;QAAatB;IAAM;AACpC;AAEA,SAASQ,iBAAiBD,KAAwB;IAChD,IAAIA,MAAMD,KAAK,CAACP,OAAO,KAAKrD,WAAW;QACrC,OAAO;YACLiB,IAAI4C,MAAMD,KAAK,CAAC3C,EAAE;YAClB+D,aAAanB,MAAMD,KAAK,CAACoB,WAAW;YACpCC,WAAWpB,MAAMD,KAAK,CAACqB,SAAS;YAChCjC,eAAekC,uBAAuBrB,MAAMD,KAAK,CAACZ,aAAa;YAC/DmC,aAAatB,MAAMD,KAAK,CAACuB,WAAW;YACpC,GAAItB,MAAMD,KAAK,CAACwB,YAAY,KAAKpF,YAAY,CAAC,IAAI;gBAACoF,cAAcvB,MAAMD,KAAK,CAACwB,YAAY;YAAA,CAAC;QAC5F;IACF;IAEA,MAAM/B,UAAUQ,MAAMD,KAAK,CAACP,OAAO,CAChCgC,MAAM,CAAC,CAAC/B,SAAWO,MAAMR,OAAO,CAACiC,GAAG,CAAChC,OAAOrC,EAAE,GAC9CO,GAAG,CAAC,CAAC8B,SAAY,CAAA;YAChBrC,IAAIqC,OAAOrC,EAAE;YACbwC,OAAO,GAAGI,MAAMD,KAAK,CAAC3C,EAAE,CAAC,CAAC,EAAEqC,OAAOrC,EAAE,EAAE;YACvCsE,aAAajC,OAAOiC,WAAW;YAC/BP,aAAa1B,OAAO0B,WAAW;YAC/BC,WAAW3B,OAAO2B,SAAS;YAC3BjC,eAAekC,uBAAuB5B,OAAON,aAAa;QAC5D,CAAA;IAEF,OAAO;QACL/B,IAAI4C,MAAMD,KAAK,CAAC3C,EAAE;QAClB+D,aAAa3B,QAAQmC,IAAI,CAAC,CAAClC,SAAWA,OAAO0B,WAAW,KAAK,WAAW,UAAU;QAClFC,WAAW5B,QAAQmC,IAAI,CAAC,CAAClC,SAAWA,OAAO2B,SAAS;QACpDjC,eAAeC,oBAAoBI,QAAQ7B,GAAG,CAAC,CAAC8B,SAAWA,OAAON,aAAa;QAC/EmC,aAAatB,MAAMD,KAAK,CAACuB,WAAW;QACpC,GAAItB,MAAMD,KAAK,CAACwB,YAAY,KAAKpF,YAAY,CAAC,IAAI;YAACoF,cAAcvB,MAAMD,KAAK,CAACwB,YAAY;QAAA,CAAC;QAC1F/B;IACF;AACF;AAEA,SAASJ,oBAAoBwC,MAA0B;IACrD,MAAMC,QAAQD,OAAO1D,OAAO,CAACmD;IAC7B,IAAIQ,MAAMC,KAAK,CAACC,oBAAoB;QAClC,MAAMC,eAAe,IAAIrC;QACzB,KAAK,MAAMsC,QAAQJ,MAAO;YACxB,MAAMK,WAAWF,aAAalD,GAAG,CAACmD,KAAKE,UAAU;YACjD,IAAID,aAAa,SAAS;YAC1BF,aAAaxB,GAAG,CAACyB,KAAKE,UAAU,EAAEF,KAAKG,MAAM;QAC/C;QACA,OAAO;eAAIJ,aAAaK,OAAO;SAAG,CAAC1E,GAAG,CAAC,CAAC,CAACwE,YAAYC,OAAO,GAAM,CAAA;gBAACD;gBAAYC;YAAM,CAAA;IACvF;IAEA,MAAME,UAAU,IAAI3C;IACpB,KAAK,MAAMsC,QAAQJ,MAAOS,QAAQ9B,GAAG,CAAC+B,KAAKC,SAAS,CAACP,OAAOA;IAC5D,OAAO;WAAIK,QAAQG,MAAM;KAAG;AAC9B;AAEA,SAASpB,uBAAuBqB,KAAc;IAC5C,OAAOC,MAAMC,OAAO,CAACF,SAAS;WAAIA;KAAM,GAAG;QAACA;KAAM;AACpD;AAEA,SAASX,kBACPc,KAAc;IAEd,IAAI,OAAOA,UAAU,YAAYA,UAAU,MAAM,OAAO;IACxD,MAAMtC,YAAYsC;IAClB,OACE,OAAOtC,UAAU4B,UAAU,KAAK,YAC/B5B,CAAAA,UAAU6B,MAAM,KAAK,UAAU7B,UAAU6B,MAAM,KAAK,OAAM;AAE/D;AAEA,SAAS9F,8BACPC,KAA2B,EAC3BC,IAA6C;IAE7C,IAAID,UAAU,MAAM,OAAO;IAC3B,OAAO,AAACC,CAAAA,QAAQD,MAAMC,IAAI,AAAD,EAAGmF,IAAI,CAAC,CAACxD,MAChCA,IAAIF,KAAK,CAAC0D,IAAI,CAAC,CAACvD,OAASA,KAAKC,IAAI,KAAK,WAAWD,KAAKV,YAAY,KAAKvB;AAE5E"}

package/dist/core/checkout.d.ts

@@ -0,0 +1,29 @@
+import type { CheckoutSpec, IntegrationSourceControlService } from '@shipfox/api-integration-core';
+export interface CheckoutIntent {
+    workspaceId: string;
+    connectionId: string;
+    externalRepositoryId: string;
+    persistCredentials: boolean;
+    permissions: {
+        contents: 'read' | 'write';
+    };
+}
+/**
+ * Resolves what to check out for a job, keyed off the authoritative `jobId`
+ * (`workflowRunId`/`workflowRunAttemptId`/`workspaceId` in the lease claim are informational).
+ * Chain: job → attempt → run → project source metadata. Credential-free.
+ */
+export declare function resolveCheckoutIntent(jobId: string): Promise<CheckoutIntent>;
+/**
+ * Resolves the job's checkout intent and exchanges it for a short-lived,
+ * scoped checkout spec. `ref` is left undefined so the provider defaults to the
+ * repository's default branch.
+ */
+export declare function createJobCheckoutSpec({ jobId, sourceControl, }: {
+    jobId: string;
+    sourceControl: IntegrationSourceControlService;
+}): Promise<{
+    spec: CheckoutSpec;
+    persistCredentials: boolean;
+}>;
+//# sourceMappingURL=checkout.d.ts.map

package/dist/core/checkout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkout.d.ts","sourceRoot":"","sources":["../../src/core/checkout.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,YAAY,EAAE,+BAA+B,EAAC,MAAM,+BAA+B,CAAC;AASjG,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,WAAW,EAAE;QAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAA;KAAC,CAAC;CAC3C;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAiBlF;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,EAC1C,KAAK,EACL,aAAa,GACd,EAAE;IACD,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,+BAA+B,CAAC;CAChD,GAAG,OAAO,CAAC;IAAC,IAAI,EAAE,YAAY,CAAC;IAAC,kBAAkB,EAAE,OAAO,CAAA;CAAC,CAAC,CAU7D"}

package/dist/core/checkout.js

@@ -0,0 +1,42 @@
+import { getProjectById } from '@shipfox/api-projects';
+import { getJobById, getWorkflowRunByAttemptId } from '#db/workflow-runs.js';
+import { CheckoutIntentUnresolvedError, JobNotFoundError, WorkflowRunNotFoundError } from './errors.js';
+/**
+ * Resolves what to check out for a job, keyed off the authoritative `jobId`
+ * (`workflowRunId`/`workflowRunAttemptId`/`workspaceId` in the lease claim are informational).
+ * Chain: job → attempt → run → project source metadata. Credential-free.
+ */ export async function resolveCheckoutIntent(jobId) {
+    const job = await getJobById(jobId);
+    if (!job) throw new JobNotFoundError(jobId);
+    const run = await getWorkflowRunByAttemptId(job.workflowRunAttemptId);
+    if (!run) throw new WorkflowRunNotFoundError(job.workflowRunAttemptId);
+    const project = await getProjectById(run.projectId);
+    if (!project) throw new CheckoutIntentUnresolvedError(run.projectId);
+    return {
+        workspaceId: project.workspaceId,
+        connectionId: project.sourceConnectionId,
+        externalRepositoryId: project.sourceExternalRepositoryId,
+        persistCredentials: job.checkout.persistCredentials,
+        permissions: job.checkout.permissions
+    };
+}
+/**
+ * Resolves the job's checkout intent and exchanges it for a short-lived,
+ * scoped checkout spec. `ref` is left undefined so the provider defaults to the
+ * repository's default branch.
+ */ export async function createJobCheckoutSpec({ jobId, sourceControl }) {
+    const intent = await resolveCheckoutIntent(jobId);
+    const spec = await sourceControl.createCheckoutSpec({
+        workspaceId: intent.workspaceId,
+        connectionId: intent.connectionId,
+        externalRepositoryId: intent.externalRepositoryId,
+        ref: undefined,
+        permissions: intent.permissions
+    });
+    return {
+        spec,
+        persistCredentials: intent.persistCredentials
+    };
+}
+
+//# sourceMappingURL=checkout.js.map

package/dist/core/checkout.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/checkout.ts"],"sourcesContent":["import type {CheckoutSpec, IntegrationSourceControlService} from '@shipfox/api-integration-core';\nimport {getProjectById} from '@shipfox/api-projects';\nimport {getJobById, getWorkflowRunByAttemptId} from '#db/workflow-runs.js';\nimport {\n  CheckoutIntentUnresolvedError,\n  JobNotFoundError,\n  WorkflowRunNotFoundError,\n} from './errors.js';\n\nexport interface CheckoutIntent {\n  workspaceId: string;\n  connectionId: string;\n  externalRepositoryId: string;\n  persistCredentials: boolean;\n  permissions: {contents: 'read' | 'write'};\n}\n\n/**\n * Resolves what to check out for a job, keyed off the authoritative `jobId`\n * (`workflowRunId`/`workflowRunAttemptId`/`workspaceId` in the lease claim are informational).\n * Chain: job → attempt → run → project source metadata. Credential-free.\n */\nexport async function resolveCheckoutIntent(jobId: string): Promise<CheckoutIntent> {\n  const job = await getJobById(jobId);\n  if (!job) throw new JobNotFoundError(jobId);\n\n  const run = await getWorkflowRunByAttemptId(job.workflowRunAttemptId);\n  if (!run) throw new WorkflowRunNotFoundError(job.workflowRunAttemptId);\n\n  const project = await getProjectById(run.projectId);\n  if (!project) throw new CheckoutIntentUnresolvedError(run.projectId);\n\n  return {\n    workspaceId: project.workspaceId,\n    connectionId: project.sourceConnectionId,\n    externalRepositoryId: project.sourceExternalRepositoryId,\n    persistCredentials: job.checkout.persistCredentials,\n    permissions: job.checkout.permissions,\n  };\n}\n\n/**\n * Resolves the job's checkout intent and exchanges it for a short-lived,\n * scoped checkout spec. `ref` is left undefined so the provider defaults to the\n * repository's default branch.\n */\nexport async function createJobCheckoutSpec({\n  jobId,\n  sourceControl,\n}: {\n  jobId: string;\n  sourceControl: IntegrationSourceControlService;\n}): Promise<{spec: CheckoutSpec; persistCredentials: boolean}> {\n  const intent = await resolveCheckoutIntent(jobId);\n  const spec = await sourceControl.createCheckoutSpec({\n    workspaceId: intent.workspaceId,\n    connectionId: intent.connectionId,\n    externalRepositoryId: intent.externalRepositoryId,\n    ref: undefined,\n    permissions: intent.permissions,\n  });\n  return {spec, persistCredentials: intent.persistCredentials};\n}\n"],"names":["getProjectById","getJobById","getWorkflowRunByAttemptId","CheckoutIntentUnresolvedError","JobNotFoundError","WorkflowRunNotFoundError","resolveCheckoutIntent","jobId","job","run","workflowRunAttemptId","project","projectId","workspaceId","connectionId","sourceConnectionId","externalRepositoryId","sourceExternalRepositoryId","persistCredentials","checkout","permissions","createJobCheckoutSpec","sourceControl","intent","spec","createCheckoutSpec","ref","undefined"],"mappings":"AACA,SAAQA,cAAc,QAAO,wBAAwB;AACrD,SAAQC,UAAU,EAAEC,yBAAyB,QAAO,uBAAuB;AAC3E,SACEC,6BAA6B,EAC7BC,gBAAgB,EAChBC,wBAAwB,QACnB,cAAc;AAUrB;;;;CAIC,GACD,OAAO,eAAeC,sBAAsBC,KAAa;IACvD,MAAMC,MAAM,MAAMP,WAAWM;IAC7B,IAAI,CAACC,KAAK,MAAM,IAAIJ,iBAAiBG;IAErC,MAAME,MAAM,MAAMP,0BAA0BM,IAAIE,oBAAoB;IACpE,IAAI,CAACD,KAAK,MAAM,IAAIJ,yBAAyBG,IAAIE,oBAAoB;IAErE,MAAMC,UAAU,MAAMX,eAAeS,IAAIG,SAAS;IAClD,IAAI,CAACD,SAAS,MAAM,IAAIR,8BAA8BM,IAAIG,SAAS;IAEnE,OAAO;QACLC,aAAaF,QAAQE,WAAW;QAChCC,cAAcH,QAAQI,kBAAkB;QACxCC,sBAAsBL,QAAQM,0BAA0B;QACxDC,oBAAoBV,IAAIW,QAAQ,CAACD,kBAAkB;QACnDE,aAAaZ,IAAIW,QAAQ,CAACC,WAAW;IACvC;AACF;AAEA;;;;CAIC,GACD,OAAO,eAAeC,sBAAsB,EAC1Cd,KAAK,EACLe,aAAa,EAId;IACC,MAAMC,SAAS,MAAMjB,sBAAsBC;IAC3C,MAAMiB,OAAO,MAAMF,cAAcG,kBAAkB,CAAC;QAClDZ,aAAaU,OAAOV,WAAW;QAC/BC,cAAcS,OAAOT,YAAY;QACjCE,sBAAsBO,OAAOP,oBAAoB;QACjDU,KAAKC;QACLP,aAAaG,OAAOH,WAAW;IACjC;IACA,OAAO;QAACI;QAAMN,oBAAoBK,OAAOL,kBAAkB;IAAA;AAC7D"}

package/dist/core/condition-trace.d.ts

@@ -0,0 +1,13 @@
+import { type AvailabilitySite, type RoutedExpression, type WorkflowExpression } from '@shipfox/expression';
+import type { PersistedEvaluationTraceEntry } from './entities/step.js';
+export declare function explicitConditionTrace(params: {
+    readonly expression: WorkflowExpression;
+    readonly field: 'job.if' | 'step.if';
+    readonly route: RoutedExpression;
+    readonly site: AvailabilitySite;
+    readonly value: boolean;
+    readonly degraded: boolean;
+}): readonly PersistedEvaluationTraceEntry[];
+export declare function defaultJobConditionTrace(): readonly PersistedEvaluationTraceEntry[];
+export declare function defaultStepConditionTrace(): readonly PersistedEvaluationTraceEntry[];
+//# sourceMappingURL=condition-trace.d.ts.map

package/dist/core/condition-trace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"condition-trace.d.ts","sourceRoot":"","sources":["../../src/core/condition-trace.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,gBAAgB,EAIrB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAC,6BAA6B,EAAC,MAAM,oBAAoB,CAAC;AAKtE,wBAAgB,sBAAsB,CAAC,MAAM,EAAE;IAC7C,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B,GAAG,SAAS,6BAA6B,EAAE,CAa3C;AAED,wBAAgB,wBAAwB,IAAI,SAAS,6BAA6B,EAAE,CAanF;AAED,wBAAgB,yBAAyB,IAAI,SAAS,6BAA6B,EAAE,CAapF"}

package/dist/core/condition-trace.js

@@ -0,0 +1,51 @@
+import { capTraceEntries, evaluationTraceEntry, predicateTraceEntry } from '@shipfox/expression';
+const DEFAULT_JOB_CONDITION_SOURCE = 'needs.all(n, n.status == "succeeded")';
+const DEFAULT_STEP_CONDITION_SOURCE = '!execution.failed';
+export function explicitConditionTrace(params) {
+    return capTraceEntries([
+        {
+            ...predicateTraceEntry({
+                expression: params.expression.source,
+                route: params.route,
+                site: params.site,
+                value: params.value,
+                degraded: params.degraded
+            }),
+            field: params.field
+        }
+    ]);
+}
+export function defaultJobConditionTrace() {
+    return capTraceEntries([
+        {
+            ...evaluationTraceEntry({
+                expression: DEFAULT_JOB_CONDITION_SOURCE,
+                roots: [
+                    'needs'
+                ],
+                fillTarget: 'job-activation',
+                evaluatedAt: 'job-activation',
+                value: 'false'
+            }),
+            field: 'job.default_gate'
+        }
+    ]);
+}
+export function defaultStepConditionTrace() {
+    return capTraceEntries([
+        {
+            ...evaluationTraceEntry({
+                expression: DEFAULT_STEP_CONDITION_SOURCE,
+                roots: [
+                    'execution'
+                ],
+                fillTarget: 'step-dispatch',
+                evaluatedAt: 'step-dispatch',
+                value: 'false'
+            }),
+            field: 'step.default_gate'
+        }
+    ]);
+}
+
+//# sourceMappingURL=condition-trace.js.map

package/dist/core/condition-trace.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/condition-trace.ts"],"sourcesContent":["import {\n  type AvailabilitySite,\n  capTraceEntries,\n  evaluationTraceEntry,\n  predicateTraceEntry,\n  type RoutedExpression,\n  type WorkflowExpression,\n} from '@shipfox/expression';\nimport type {PersistedEvaluationTraceEntry} from './entities/step.js';\n\nconst DEFAULT_JOB_CONDITION_SOURCE = 'needs.all(n, n.status == \"succeeded\")';\nconst DEFAULT_STEP_CONDITION_SOURCE = '!execution.failed';\n\nexport function explicitConditionTrace(params: {\n  readonly expression: WorkflowExpression;\n  readonly field: 'job.if' | 'step.if';\n  readonly route: RoutedExpression;\n  readonly site: AvailabilitySite;\n  readonly value: boolean;\n  readonly degraded: boolean;\n}): readonly PersistedEvaluationTraceEntry[] {\n  return capTraceEntries([\n    {\n      ...predicateTraceEntry({\n        expression: params.expression.source,\n        route: params.route,\n        site: params.site,\n        value: params.value,\n        degraded: params.degraded,\n      }),\n      field: params.field,\n    },\n  ]);\n}\n\nexport function defaultJobConditionTrace(): readonly PersistedEvaluationTraceEntry[] {\n  return capTraceEntries([\n    {\n      ...evaluationTraceEntry({\n        expression: DEFAULT_JOB_CONDITION_SOURCE,\n        roots: ['needs'],\n        fillTarget: 'job-activation',\n        evaluatedAt: 'job-activation',\n        value: 'false',\n      }),\n      field: 'job.default_gate',\n    },\n  ]);\n}\n\nexport function defaultStepConditionTrace(): readonly PersistedEvaluationTraceEntry[] {\n  return capTraceEntries([\n    {\n      ...evaluationTraceEntry({\n        expression: DEFAULT_STEP_CONDITION_SOURCE,\n        roots: ['execution'],\n        fillTarget: 'step-dispatch',\n        evaluatedAt: 'step-dispatch',\n        value: 'false',\n      }),\n      field: 'step.default_gate',\n    },\n  ]);\n}\n"],"names":["capTraceEntries","evaluationTraceEntry","predicateTraceEntry","DEFAULT_JOB_CONDITION_SOURCE","DEFAULT_STEP_CONDITION_SOURCE","explicitConditionTrace","params","expression","source","route","site","value","degraded","field","defaultJobConditionTrace","roots","fillTarget","evaluatedAt","defaultStepConditionTrace"],"mappings":"AAAA,SAEEA,eAAe,EACfC,oBAAoB,EACpBC,mBAAmB,QAGd,sBAAsB;AAG7B,MAAMC,+BAA+B;AACrC,MAAMC,gCAAgC;AAEtC,OAAO,SAASC,uBAAuBC,MAOtC;IACC,OAAON,gBAAgB;QACrB;YACE,GAAGE,oBAAoB;gBACrBK,YAAYD,OAAOC,UAAU,CAACC,MAAM;gBACpCC,OAAOH,OAAOG,KAAK;gBACnBC,MAAMJ,OAAOI,IAAI;gBACjBC,OAAOL,OAAOK,KAAK;gBACnBC,UAAUN,OAAOM,QAAQ;YAC3B,EAAE;YACFC,OAAOP,OAAOO,KAAK;QACrB;KACD;AACH;AAEA,OAAO,SAASC;IACd,OAAOd,gBAAgB;QACrB;YACE,GAAGC,qBAAqB;gBACtBM,YAAYJ;gBACZY,OAAO;oBAAC;iBAAQ;gBAChBC,YAAY;gBACZC,aAAa;gBACbN,OAAO;YACT,EAAE;YACFE,OAAO;QACT;KACD;AACH;AAEA,OAAO,SAASK;IACd,OAAOlB,gBAAgB;QACrB;YACE,GAAGC,qBAAqB;gBACtBM,YAAYH;gBACZW,OAAO;oBAAC;iBAAY;gBACpBC,YAAY;gBACZC,aAAa;gBACbN,OAAO;YACT,EAAE;YACFE,OAAO;QACT;KACD;AACH"}

package/dist/core/entities/index.d.ts

@@ -0,0 +1,5 @@
+export type { Job, JobCheckout, JobStatus } from './job.js';
+export type { Step, StepStatus } from './step.js';
+export type { TriggerPayload, WorkflowRun, WorkflowRunStatus, WorkflowSourceSnapshot, } from './workflow-run.js';
+export type { RerunMode, WorkflowRunAttempt } from './workflow-run-attempt.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/entities/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/entities/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAC,GAAG,EAAE,WAAW,EAAE,SAAS,EAAC,MAAM,UAAU,CAAC;AAC1D,YAAY,EAAC,IAAI,EAAE,UAAU,EAAC,MAAM,WAAW,CAAC;AAChD,YAAY,EACV,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAC,SAAS,EAAE,kBAAkB,EAAC,MAAM,2BAA2B,CAAC"}

package/dist/core/entities/index.js

@@ -0,0 +1,3 @@
+export { };
+
+//# sourceMappingURL=index.js.map

package/dist/core/entities/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/entities/index.ts"],"sourcesContent":["export type {Job, JobCheckout, JobStatus} from './job.js';\nexport type {Step, StepStatus} from './step.js';\nexport type {\n  TriggerPayload,\n  WorkflowRun,\n  WorkflowRunStatus,\n  WorkflowSourceSnapshot,\n} from './workflow-run.js';\nexport type {RerunMode, WorkflowRunAttempt} from './workflow-run-attempt.js';\n"],"names":[],"mappings":"AAQA,WAA6E"}

package/dist/core/entities/job-execution.d.ts

@@ -0,0 +1,30 @@
+import type { JobStatus, JobStatusReason } from './job.js';
+import type { PersistedEvaluationTraceEntry } from './step.js';
+export type JobExecutionStatus = Exclude<JobStatus, 'skipped'>;
+export interface WorkflowExecutionEvent {
+    source: string;
+    event: string;
+    delivery_id: string;
+    received_at: string;
+    data: unknown;
+}
+export interface JobExecution {
+    id: string;
+    jobId: string;
+    sequence: number;
+    name: string;
+    runner: string[] | null;
+    status: JobExecutionStatus;
+    statusReason: JobStatusReason | null;
+    triggerEvents: WorkflowExecutionEvent[];
+    outputs: Record<string, unknown> | null;
+    evaluationTrace?: readonly PersistedEvaluationTraceEntry[] | null;
+    version: number;
+    createdAt: Date;
+    updatedAt: Date;
+    queuedAt: Date | null;
+    startedAt: Date | null;
+    finishedAt: Date | null;
+    timedOutAt: Date | null;
+}
+//# sourceMappingURL=job-execution.d.ts.map

package/dist/core/entities/job-execution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"job-execution.d.ts","sourceRoot":"","sources":["../../../src/core/entities/job-execution.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,SAAS,EAAE,eAAe,EAAC,MAAM,UAAU,CAAC;AACzD,OAAO,KAAK,EAAC,6BAA6B,EAAC,MAAM,WAAW,CAAC;AAE7D,MAAM,MAAM,kBAAkB,GAAG,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AAE/D,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,YAAY,EAAE,eAAe,GAAG,IAAI,CAAC;IACrC,aAAa,EAAE,sBAAsB,EAAE,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxC,eAAe,CAAC,EAAE,SAAS,6BAA6B,EAAE,GAAG,IAAI,CAAC;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;CACzB"}

package/dist/core/entities/job-execution.js

@@ -0,0 +1,3 @@
+export { };
+
+//# sourceMappingURL=job-execution.js.map

package/dist/core/entities/job-execution.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/entities/job-execution.ts"],"sourcesContent":["import type {JobStatus, JobStatusReason} from './job.js';\nimport type {PersistedEvaluationTraceEntry} from './step.js';\n\nexport type JobExecutionStatus = Exclude<JobStatus, 'skipped'>;\n\nexport interface WorkflowExecutionEvent {\n  source: string;\n  event: string;\n  delivery_id: string;\n  received_at: string;\n  data: unknown;\n}\n\nexport interface JobExecution {\n  id: string;\n  jobId: string;\n  sequence: number;\n  name: string;\n  runner: string[] | null;\n  status: JobExecutionStatus;\n  statusReason: JobStatusReason | null;\n  triggerEvents: WorkflowExecutionEvent[];\n  outputs: Record<string, unknown> | null;\n  evaluationTrace?: readonly PersistedEvaluationTraceEntry[] | null;\n  version: number;\n  createdAt: Date;\n  updatedAt: Date;\n  queuedAt: Date | null;\n  startedAt: Date | null;\n  finishedAt: Date | null;\n  timedOutAt: Date | null;\n}\n"],"names":[],"mappings":"AAaA,WAkBC"}

package/dist/core/entities/job-listener-event.d.ts

@@ -0,0 +1,15 @@
+export type JobListenerEventDisposition = 'fire' | 'resolve';
+export interface JobListenerEvent {
+    id: string;
+    jobId: string;
+    disposition: JobListenerEventDisposition;
+    eventRef: string;
+    deliveryId: string;
+    source: string;
+    event: string;
+    payload: unknown;
+    receivedAt: Date;
+    consumedByExecutionId: string | null;
+    createdAt: Date;
+}
+//# sourceMappingURL=job-listener-event.d.ts.map

package/dist/core/entities/job-listener-event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"job-listener-event.d.ts","sourceRoot":"","sources":["../../../src/core/entities/job-listener-event.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,2BAA2B,GAAG,MAAM,GAAG,SAAS,CAAC;AAE7D,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,2BAA2B,CAAC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,IAAI,CAAC;IACjB,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,SAAS,EAAE,IAAI,CAAC;CACjB"}

package/dist/core/entities/job-listener-event.js

@@ -0,0 +1,3 @@
+export { };
+
+//# sourceMappingURL=job-listener-event.js.map

package/dist/core/entities/job-listener-event.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/entities/job-listener-event.ts"],"sourcesContent":["export type JobListenerEventDisposition = 'fire' | 'resolve';\n\nexport interface JobListenerEvent {\n  id: string;\n  jobId: string;\n  disposition: JobListenerEventDisposition;\n  eventRef: string;\n  deliveryId: string;\n  source: string;\n  event: string;\n  payload: unknown;\n  receivedAt: Date;\n  consumedByExecutionId: string | null;\n  createdAt: Date;\n}\n"],"names":[],"mappings":"AAEA,WAYC"}