@source-repo/rpc-cli 4.5.0 → 5.0.0

package/dist/scripts.d.ts

@@ -26,7 +26,14 @@ export declare const nodeArgvFor: (file: string, version?: string) => string[];
  *
  * So a script does not hardcode a broker url that is right on one machine and wrong on the next -
  * and so a model writing one has something to read rather than a value to invent. The names match
- * the flags they came from, and `SOURCE_RPC_TOKEN` is the one the CLI already reads for credentials.
+ * the flags they came from.
+ *
+ * **This deliberately no longer hands over the node's own token.** It used to, and that was wrong
+ * twice: a token is pinned to exactly one peer name, so a script could not authenticate under its
+ * own name with it anyway, and passing it put the node's credential in the environment of an
+ * arbitrary program - which, for a program an AI wrote, is precisely the thing the boundary work
+ * exists to prevent. A script that must authenticate is given a credential of its own, minted for
+ * it and expiring on its own schedule; see `ScriptRunner`'s `credentialFor`.
  */
 export declare const environmentFor: (options: NetworkOptions) => {
     [key: string]: string;
@@ -47,13 +54,30 @@ export interface RunningScript {
 export declare class ScriptRunner {
     private directory;
     private environment;
+    /**
+     * Mints the credential this script will connect with, when the node can. Called once per
+     * start, so each run gets its own short-lived credential rather than sharing one - and a
+     * node that cannot mint simply starts the script without one, which is honest: the script
+     * then reaches whatever an unauthenticated peer may reach, and nothing more.
+     */
+    private credentialFor?;
     private running;
     private finished;
     constructor(directory: string, environment?: {
         [key: string]: string;
-    });
+    }, 
+    /**
+     * Mints the credential this script will connect with, when the node can. Called once per
+     * start, so each run gets its own short-lived credential rather than sharing one - and a
+     * node that cannot mint simply starts the script without one, which is honest: the script
+     * then reaches whatever an unauthenticated peer may reach, and nothing more.
+     */
+    credentialFor?: ((script: string) => Promise<{
+        name: string;
+        token: string;
+    } | undefined>) | undefined);
     isRunning(name: string): boolean;
-    start(name: string): RunningScript;
+    start(name: string): Promise<RunningScript>;
     stop(name: string): Promise<RunningScript>;
     status(name: string): RunningScript | undefined;
     all(): RunningScript[];

package/dist/scripts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scripts.d.ts","sourceRoot":"","sources":["../src/scripts.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AA8BlD,gGAAgG;AAChG,eAAO,MAAM,iBAAiB,YAAI,KAAK,EAAE,MAAM,CAAU,CAAA;AACzD,MAAM,MAAM,cAAc,GAAG,IAAI,GAAG,KAAK,CAAA;AASzC,6FAA6F;AAC7F,eAAO,MAAM,UAAU,cAAe,MAAM,QAAQ,MAAM,aAAY,cAAc,WAMnF,CAAA;AAED,uFAAuF;AACvF,eAAO,MAAM,UAAU,cAAe,MAAM,QAAQ,MAAM,WAOzD,CAAA;AAED,eAAO,MAAM,UAAU,cAAe,MAAM,QAAQ,MAAM,UAAU,MAAM,aAAY,cAAc,WAcnG,CAAA;AAED,eAAO,MAAM,UAAU,cAAe,MAAM,QAAQ,MAAM,WAAsD,CAAA;AAEhH,eAAO,MAAM,YAAY,cAAe,MAAM,QAAQ,MAAM,SAAwC,CAAA;AAEpG,eAAO,MAAM,WAAW,cAAe,MAAM;;cAIiE,cAAc;GAM3H,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,SAAU,MAAM,+BAQvC,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,YAAa,cAAc,KAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;CAO9E,CAAA;AAEF,MAAM,WAAW,aAAa;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,8FAA8F;IAC9F,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;IAClE,MAAM,EAAE,MAAM,EAAE,CAAA;CACnB;AAED,sEAAsE;AACtE,qBAAa,YAAY;IAKjB,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,WAAW;IALvB,OAAO,CAAC,OAAO,CAAoE;IACnF,OAAO,CAAC,QAAQ,CAAmC;IAEnD,YACY,SAAS,EAAE,MAAM,EACjB,WAAW,GAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAO,EACnD;IAEJ,SAAS,CAAC,IAAI,EAAE,MAAM,WAErB;IAED,KAAK,CAAC,IAAI,EAAE,MAAM,iBAiCjB;IAEK,IAAI,CAAC,IAAI,EAAE,MAAM,0BAetB;IAED,MAAM,CAAC,IAAI,EAAE,MAAM,6BAElB;IAED,GAAG,IAAI,aAAa,EAAE,CAErB;IAEK,OAAO,kBAEZ;CACJ"}
+{"version":3,"file":"scripts.d.ts","sourceRoot":"","sources":["../src/scripts.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AA8BlD,gGAAgG;AAChG,eAAO,MAAM,iBAAiB,YAAI,KAAK,EAAE,MAAM,CAAU,CAAA;AACzD,MAAM,MAAM,cAAc,GAAG,IAAI,GAAG,KAAK,CAAA;AASzC,6FAA6F;AAC7F,eAAO,MAAM,UAAU,cAAe,MAAM,QAAQ,MAAM,aAAY,cAAc,WAMnF,CAAA;AAED,uFAAuF;AACvF,eAAO,MAAM,UAAU,cAAe,MAAM,QAAQ,MAAM,WAOzD,CAAA;AAED,eAAO,MAAM,UAAU,cAAe,MAAM,QAAQ,MAAM,UAAU,MAAM,aAAY,cAAc,WAcnG,CAAA;AAED,eAAO,MAAM,UAAU,cAAe,MAAM,QAAQ,MAAM,WAAsD,CAAA;AAEhH,eAAO,MAAM,YAAY,cAAe,MAAM,QAAQ,MAAM,SAAwC,CAAA;AAEpG,eAAO,MAAM,WAAW,cAAe,MAAM;;cAIiE,cAAc;GAM3H,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,SAAU,MAAM,+BAQvC,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,cAAc,YAAa,cAAc,KAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;CAI9E,CAAA;AAEF,MAAM,WAAW,aAAa;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,8FAA8F;IAC9F,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;IAClE,MAAM,EAAE,MAAM,EAAE,CAAA;CACnB;AAED,sEAAsE;AACtE,qBAAa,YAAY;IAKjB,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,WAAW;IACnB;;;;;OAKG;IACH,OAAO,CAAC,aAAa,CAAC;IAZ1B,OAAO,CAAC,OAAO,CAAoE;IACnF,OAAO,CAAC,QAAQ,CAAmC;IAEnD,YACY,SAAS,EAAE,MAAM,EACjB,WAAW,GAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAO;IACnD;;;;;OAKG;IACK,aAAa,CAAC,GAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC,aAAA,EAChG;IAEJ,SAAS,CAAC,IAAI,EAAE,MAAM,WAErB;IAEK,KAAK,CAAC,IAAI,EAAE,MAAM,0BA4CvB;IAEK,IAAI,CAAC,IAAI,EAAE,MAAM,0BAetB;IAED,MAAM,CAAC,IAAI,EAAE,MAAM,6BAElB;IAED,GAAG,IAAI,aAAa,EAAE,CAErB;IAEK,OAAO,kBAEZ;CACJ"}

package/dist/scripts.js

@@ -107,40 +107,63 @@ export const nodeArgvFor = (file, version = process.versions.node) => {
  *
  * So a script does not hardcode a broker url that is right on one machine and wrong on the next -
  * and so a model writing one has something to read rather than a value to invent. The names match
- * the flags they came from, and `SOURCE_RPC_TOKEN` is the one the CLI already reads for credentials.
+ * the flags they came from.
+ *
+ * **This deliberately no longer hands over the node's own token.** It used to, and that was wrong
+ * twice: a token is pinned to exactly one peer name, so a script could not authenticate under its
+ * own name with it anyway, and passing it put the node's credential in the environment of an
+ * arbitrary program - which, for a program an AI wrote, is precisely the thing the boundary work
+ * exists to prevent. A script that must authenticate is given a credential of its own, minted for
+ * it and expiring on its own schedule; see `ScriptRunner`'s `credentialFor`.
  */
 export const environmentFor = (options) => ({
     ...(options.broker ? { SOURCE_RPC_BROKER: options.broker } : {}),
     ...(options.hub ? { SOURCE_RPC_HUB: options.hub } : {}),
-    ...(options.prefix ? { SOURCE_RPC_PREFIX: options.prefix } : {}),
-    ...(options.hubCredentials?.token
-        ? { SOURCE_RPC_TOKEN: options.hubCredentials.token }
-        : {})
+    ...(options.prefix ? { SOURCE_RPC_PREFIX: options.prefix } : {})
 });
 /** Starts, stops and remembers the scripts this server is running. */
 export class ScriptRunner {
     directory;
     environment;
+    credentialFor;
     running = new Map();
     finished = new Map();
-    constructor(directory, environment = {}) {
+    constructor(directory, environment = {}, 
+    /**
+     * Mints the credential this script will connect with, when the node can. Called once per
+     * start, so each run gets its own short-lived credential rather than sharing one - and a
+     * node that cannot mint simply starts the script without one, which is honest: the script
+     * then reaches whatever an unauthenticated peer may reach, and nothing more.
+     */
+    credentialFor) {
         this.directory = directory;
         this.environment = environment;
+        this.credentialFor = credentialFor;
     }
     isRunning(name) {
         return this.running.has(name);
     }
-    start(name) {
+    async start(name) {
         if (this.running.has(name))
             throw new Error(`'${name}' is already running. Stop it first.`);
         const file = scriptFile(this.directory, name);
         const argv = nodeArgvFor(file);
+        // Minted per start, before the process exists, so the credential is never written anywhere
+        // the script could have read it from earlier.
+        const credential = await this.credentialFor?.(name);
         const record = { name, startedAt: Date.now(), output: [] };
         const child = spawn(process.execPath, argv, {
             // The script's own directory, so a relative import in it means what its author meant and
             // `@source-repo/rpc` resolves from the project the directory sits in.
             cwd: resolve(this.directory),
-            env: { ...process.env, ...this.environment },
+            env: {
+                ...process.env,
+                ...this.environment,
+                // The name is handed over with the credential, because a derived credential is
+                // pinned to one peer name: a script that picks its own would be refused by the bus
+                // rather than mysteriously ignored.
+                ...(credential ? { SOURCE_RPC_NAME: credential.name, SOURCE_RPC_TOKEN: credential.token } : {})
+            },
             stdio: ['ignore', 'pipe', 'pipe']
         });
         record.pid = child.pid ?? undefined;

package/dist/scripts.js.map

@@ -1 +1 @@
-{"version":3,"file":"scripts.js","sourceRoot":"","sources":["../src/scripts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAA;AAC7D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACjG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAE/C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAE9C;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,8FAA8F;AAC9F,MAAM,gBAAgB,GAAG,mCAAmC,CAAA;AAE5D,gGAAgG;AAChG,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,MAAM,CAAU,CAAA;AAGzD,qJAAqJ;AACrJ,MAAM,UAAU,GAAG,GAAG,CAAA;AAEtB,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,EAAE;IAClC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,+BAA+B,CAAC,CAAA;AAC9F,CAAC,CAAA;AAED,6FAA6F;AAC7F,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAE,IAAY,EAAE,QAAQ,GAAmB,IAAI,EAAE,EAAE;IAC3F,YAAY,CAAC,IAAI,CAAC,CAAA;IAClB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAA;IAC5D,+FAA+F;IAC/F,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,6CAA6C,CAAC,CAAA;IACtH,OAAO,IAAI,CAAA;AACf,CAAC,CAAA;AAED,uFAAuF;AACvF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAE,IAAY,EAAE,EAAE;IAC1D,YAAY,CAAC,IAAI,CAAC,CAAA;IAClB,KAAK,MAAM,SAAS,IAAI,iBAAiB,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAmB,CAAC,CAAA;QAC9E,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;IACrC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,4BAA4B,CAAC,CAAA;AAC1E,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAE,IAAY,EAAE,MAAc,EAAE,QAAQ,GAAmB,IAAI,EAAE,EAAE;IAC3G,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;IAClD,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAClD,iGAAiG;IACjG,6EAA6E;IAC7E,cAAc,CAAC,SAAS,CAAC,CAAA;IACzB,6FAA6F;IAC7F,4CAA4C;IAC5C,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAmB,CAAC,CAAA;QAC/E,IAAI,SAAS,KAAK,IAAI,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,MAAM,CAAC,SAAS,CAAC,CAAA;IACtE,CAAC;IACD,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,EAAE,MAAM,CAAC,CAAA;IAC3E,OAAO,IAAI,CAAA;AACf,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAE,IAAY,EAAE,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAA;AAEhH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,SAAiB,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAA;AAEpG,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,SAAiB,EAAE,EAAE;IAC7C,IAAI,CAAC;QACD,OAAO,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;aACjC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAE,iBAAuC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;aAClF,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAmB,EAAE,CAAC,CAAC;aACnH,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;IACrD,CAAC;IAAC,MAAM,CAAC;QACL,0FAA0F;QAC1F,OAAO,EAAE,CAAA;IACb,CAAC;AACL,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE;IACzE,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1C,MAAM,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAC7D,IAAI,KAAK,GAAG,EAAE,IAAI,CAAC,KAAK,KAAK,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7D,IAAI,KAAK,GAAG,EAAE,IAAI,CAAC,KAAK,KAAK,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,4BAA4B,EAAE,IAAI,CAAC,CAAA;IAC3F,MAAM,IAAI,KAAK,CACX,eAAe,OAAO,oHAAoH,CAC7I,CAAA;AACL,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAuB,EAA6B,EAAE,CAAC,CAAC;IACnF,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,GAAG,CAAE,OAAO,CAAC,cAAiD,EAAE,KAAK;QACjE,CAAC,CAAC,EAAE,gBAAgB,EAAG,OAAO,CAAC,cAAoC,CAAC,KAAK,EAAE;QAC3E,CAAC,CAAC,EAAE,CAAC;CACZ,CAAC,CAAA;AAWF,sEAAsE;AACtE,MAAM,OAAO,YAAY;IAKT,SAAS;IACT,WAAW;IALf,OAAO,GAAG,IAAI,GAAG,EAA0D,CAAA;IAC3E,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAA;IAEnD,YACY,SAAiB,EACjB,WAAW,GAA8B,EAAE;yBAD3C,SAAS;2BACT,WAAW;IACpB,CAAC;IAEJ,SAAS,CAAC,IAAY;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACjC,CAAC;IAED,KAAK,CAAC,IAAY;QACd,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,sCAAsC,CAAC,CAAA;QAC3F,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QAC7C,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;QAE9B,MAAM,MAAM,GAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;QACzE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE;YACxC,yFAAyF;YACzF,sEAAsE;YACtE,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;YAC5B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE;YAC5C,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SACpC,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,SAAS,CAAA;QAEnC,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE;YAC9C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC,CAAA;YACtC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,UAAU;gBAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC,CAAA;QACrG,CAAC,CAAA;QACD,IAAI,KAAK,CAAC,MAAM;YAAE,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;QAC/E,IAAI,KAAK,CAAC,MAAM;YAAE,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QAEjF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAC9B,MAAM,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAA;YAC/C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YACzB,oFAAoF;YACpF,6EAA6E;YAC7E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACnC,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QAErE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;QACzC,OAAO,MAAM,CAAA;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAY;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACpC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,wBAAwB,CAAC,CAAA;QAC7D,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAA;QAClB,qFAAqF;QACrF,MAAM,KAAK,GAAG,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QACjF,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,EAAE,CACtC,UAAU,CAAC,GAAG,EAAE;YACZ,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAC3B,IAAI,EAAE,CAAA;QACV,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CACnB,CAAA;QACD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAA;QACnC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACzB,OAAO,KAAK,CAAC,MAAM,CAAA;IACvB,CAAC;IAED,MAAM,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACpE,CAAC;IAED,GAAG;QACC,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IAClG,CAAC;IAED,KAAK,CAAC,OAAO;QACT,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAAE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAC7F,CAAC;CACJ"}
+{"version":3,"file":"scripts.js","sourceRoot":"","sources":["../src/scripts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAA;AAC7D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACjG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAE/C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAE9C;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,8FAA8F;AAC9F,MAAM,gBAAgB,GAAG,mCAAmC,CAAA;AAE5D,gGAAgG;AAChG,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,MAAM,CAAU,CAAA;AAGzD,qJAAqJ;AACrJ,MAAM,UAAU,GAAG,GAAG,CAAA;AAEtB,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,EAAE;IAClC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,+BAA+B,CAAC,CAAA;AAC9F,CAAC,CAAA;AAED,6FAA6F;AAC7F,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAE,IAAY,EAAE,QAAQ,GAAmB,IAAI,EAAE,EAAE;IAC3F,YAAY,CAAC,IAAI,CAAC,CAAA;IAClB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAA;IAC5D,+FAA+F;IAC/F,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,6CAA6C,CAAC,CAAA;IACtH,OAAO,IAAI,CAAA;AACf,CAAC,CAAA;AAED,uFAAuF;AACvF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAE,IAAY,EAAE,EAAE;IAC1D,YAAY,CAAC,IAAI,CAAC,CAAA;IAClB,KAAK,MAAM,SAAS,IAAI,iBAAiB,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAmB,CAAC,CAAA;QAC9E,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;IACrC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,4BAA4B,CAAC,CAAA;AAC1E,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAE,IAAY,EAAE,MAAc,EAAE,QAAQ,GAAmB,IAAI,EAAE,EAAE;IAC3G,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;IAClD,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAClD,iGAAiG;IACjG,6EAA6E;IAC7E,cAAc,CAAC,SAAS,CAAC,CAAA;IACzB,6FAA6F;IAC7F,4CAA4C;IAC5C,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAmB,CAAC,CAAA;QAC/E,IAAI,SAAS,KAAK,IAAI,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,MAAM,CAAC,SAAS,CAAC,CAAA;IACtE,CAAC;IACD,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,EAAE,MAAM,CAAC,CAAA;IAC3E,OAAO,IAAI,CAAA;AACf,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAE,IAAY,EAAE,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAA;AAEhH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,SAAiB,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAA;AAEpG,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,SAAiB,EAAE,EAAE;IAC7C,IAAI,CAAC;QACD,OAAO,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;aACjC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAE,iBAAuC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;aAClF,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAmB,EAAE,CAAC,CAAC;aACnH,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;IACrD,CAAC;IAAC,MAAM,CAAC;QACL,0FAA0F;QAC1F,OAAO,EAAE,CAAA;IACb,CAAC;AACL,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE;IACzE,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1C,MAAM,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAC7D,IAAI,KAAK,GAAG,EAAE,IAAI,CAAC,KAAK,KAAK,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7D,IAAI,KAAK,GAAG,EAAE,IAAI,CAAC,KAAK,KAAK,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,4BAA4B,EAAE,IAAI,CAAC,CAAA;IAC3F,MAAM,IAAI,KAAK,CACX,eAAe,OAAO,oHAAoH,CAC7I,CAAA;AACL,CAAC,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAuB,EAA6B,EAAE,CAAC,CAAC;IACnF,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CACnE,CAAC,CAAA;AAWF,sEAAsE;AACtE,MAAM,OAAO,YAAY;IAKT,SAAS;IACT,WAAW;IAOX,aAAa;IAZjB,OAAO,GAAG,IAAI,GAAG,EAA0D,CAAA;IAC3E,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAA;IAEnD,YACY,SAAiB,EACjB,WAAW,GAA8B,EAAE;IACnD;;;;;OAKG;IACK,aAAwF;yBARxF,SAAS;2BACT,WAAW;6BAOX,aAAa;IACtB,CAAC;IAEJ,SAAS,CAAC,IAAY;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACjC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAY;QACpB,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,sCAAsC,CAAC,CAAA;QAC3F,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QAC7C,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;QAE9B,2FAA2F;QAC3F,8CAA8C;QAC9C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,CAAA;QAEnD,MAAM,MAAM,GAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;QACzE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE;YACxC,yFAAyF;YACzF,sEAAsE;YACtE,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;YAC5B,GAAG,EAAE;gBACD,GAAG,OAAO,CAAC,GAAG;gBACd,GAAG,IAAI,CAAC,WAAW;gBACnB,+EAA+E;gBAC/E,mFAAmF;gBACnF,oCAAoC;gBACpC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,UAAU,CAAC,IAAI,EAAE,gBAAgB,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClG;YACD,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SACpC,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,SAAS,CAAA;QAEnC,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE;YAC9C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC,CAAA;YACtC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,UAAU;gBAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC,CAAA;QACrG,CAAC,CAAA;QACD,IAAI,KAAK,CAAC,MAAM;YAAE,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;QAC/E,IAAI,KAAK,CAAC,MAAM;YAAE,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QAEjF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAC9B,MAAM,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAA;YAC/C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YACzB,oFAAoF;YACpF,6EAA6E;YAC7E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACnC,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QAErE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;QACzC,OAAO,MAAM,CAAA;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAY;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACpC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,wBAAwB,CAAC,CAAA;QAC7D,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAA;QAClB,qFAAqF;QACrF,MAAM,KAAK,GAAG,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QACjF,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,EAAE,CACtC,UAAU,CAAC,GAAG,EAAE;YACZ,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAC3B,IAAI,EAAE,CAAA;QACV,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CACnB,CAAA;QACD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAA;QACnC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACzB,OAAO,KAAK,CAAC,MAAM,CAAA;IACvB,CAAC;IAED,MAAM,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACpE,CAAC;IAED,GAAG;QACC,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IAClG,CAAC;IAED,KAAK,CAAC,OAAO;QACT,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAAE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAC7F,CAAC;CACJ"}

package/dist/tasks.d.ts

@@ -0,0 +1,189 @@
+import { type SigningKeys } from './credentials.js';
+/**
+ * What `run` starts when nothing is named, and what `run --init` writes when nothing is named.
+ *
+ * Looked for in the working directory and nowhere else. Walking up the tree the way `package.json`
+ * is found would mean that running this three directories deep silently starts the roles described
+ * somewhere above — with that file's signing secrets, under that file's peer names, on that file's
+ * bus. A task file is an identity, so which one ran must never depend on where the shell happened
+ * to be. Named for what it is rather than `tasks.json`, which is already several other things.
+ */
+export declare const defaultTaskFile = "source-rpc.tasks.json";
+/** MQTT's own username and password, which authenticate the connection rather than the peer. */
+export interface TaskMqttAuth {
+    username?: string;
+    password?: string;
+}
+export interface TaskNetwork {
+    broker?: string;
+    hub?: string;
+    prefix?: string;
+    timeout?: number;
+    insecureTls?: boolean;
+    mqtt?: TaskMqttAuth;
+}
+/**
+ * What a task presents when a bus asks who it is: a bearer token for a hub, and the `derive` secret
+ * a node mints its scripts' credentials with.
+ *
+ * `tokens` and `issuers` are deliberately not here. Those say what a *bus* accepts, and no task type
+ * is a bus - putting them in a host's file would be writing a policy nothing in that file enforces.
+ */
+export interface TaskAuth {
+    token?: string;
+    derive?: string;
+}
+interface CommonTask {
+    id: string;
+    type: 'console' | 'node' | 'serve';
+    network?: TaskNetwork;
+    name?: string;
+    /** A path to a key file, or the same keys written inline. */
+    sign?: string | SigningKeys;
+    /** A path to an auth file, or the same credentials written inline. */
+    auth?: string | TaskAuth;
+}
+export interface ConsoleTask extends CommonTask {
+    type: 'console';
+    host?: string;
+    port?: number;
+    basePath?: string;
+    /** Serve HTTPS, and WSS with it. Both together, and they move the default port to 8844. */
+    cert?: string;
+    key?: string;
+}
+export interface NodeTask extends CommonTask {
+    type: 'node';
+    scripts: string;
+    scriptableBy: string[];
+    /**
+     * Path to the AI grants document. A path only, never inline: the document carries its own
+     * revision so that policy can be replaced on its own cadence, and burying it in a file that
+     * changes for unrelated reasons takes that away. It is policy rather than a secret, so the
+     * argument that put `sign` and `auth` inline does not apply to it.
+     */
+    grants?: string;
+}
+export interface ServeTask extends CommonTask {
+    type: 'serve';
+    contract: string;
+    script?: string;
+    allowExec?: boolean;
+}
+export type SourceRpcTask = ConsoleTask | NodeTask | ServeTask;
+export interface SourceRpcTaskFile {
+    version: 1;
+    network?: TaskNetwork;
+    tasks: SourceRpcTask[];
+}
+export interface StartedTask {
+    id: string;
+    type: SourceRpcTask['type'];
+    name: string;
+    url?: string;
+    namespaces?: string[];
+}
+export interface TaskFileRun {
+    file: string;
+    tasks: StartedTask[];
+    close: () => Promise<void>;
+    /**
+     * Re-read every node task's grants document and apply it, reporting through `warning`.
+     *
+     * Here as well as on `node` because `run` is how a host is meant to be started, and a grant that
+     * can only be closed by restarting the process is one that cannot be closed while something is
+     * going wrong. A document that fails to re-read leaves the one in force alone.
+     */
+    reloadGrants: () => void;
+}
+export interface TaskFileCallbacks {
+    started?: (task: StartedTask) => void;
+    warning?: (message: string) => void;
+}
+/** Parse strictly so a misspelled setting is a startup error rather than an ignored intention. */
+export declare const parseTaskFile: (value: unknown) => SourceRpcTaskFile;
+/**
+ * A certificate moves the default port the same way `--cert` does, so the convention holds without
+ * anyone having to remember it. An explicit port always wins, since a plant with its own numbering
+ * has the last word.
+ */
+export declare const consolePortFor: (task: ConsoleTask, secure: boolean) => number;
+/** Start every task in one process, rolling back the earlier ones if a later task cannot start. */
+export declare const startTaskFile: (path: string, callbacks?: TaskFileCallbacks) => Promise<TaskFileRun>;
+/**
+ * A task file with the three roles in it, ready to edit.
+ *
+ * The secrets are real rather than placeholders, and that is the point of generating one at all: the
+ * shape of a task file is easy to type out from the documentation, and a secret somebody invents at
+ * a keyboard is the part that is reliably done badly. Every role gets its own, and each one's
+ * `peers` names the others, so the file that lands is a network whose members already know each
+ * other rather than a template with `<secret>` in five places.
+ *
+ * `controller` is in every `peers` map without being a task here, because the reason to run a
+ * scriptable node is that something elsewhere scripts it. Its secret is in this file for whoever
+ * sets that machine up to copy out - printing it would put it in a scrollback and a terminal log.
+ */
+export declare const taskFileSkeleton: (options?: {
+    broker?: string;
+    hub?: string;
+    controller?: string;
+}) => {
+    version: 1;
+    network: {
+        hub: string;
+        timeout: number;
+    } | {
+        broker: string;
+        timeout: number;
+    };
+    tasks: ({
+        id: string;
+        type: 'console';
+        sign: {
+            name: string;
+            secret: string;
+            peers: {
+                [k: string]: string;
+            };
+        };
+        host: string;
+        port: number;
+        scripts?: undefined;
+        scriptableBy?: undefined;
+        contract?: undefined;
+    } | {
+        host?: undefined;
+        port?: undefined;
+        id: string;
+        type: 'node';
+        sign: {
+            name: string;
+            secret: string;
+            peers: {
+                [k: string]: string;
+            };
+        };
+        scripts: string;
+        scriptableBy: string[];
+        contract?: undefined;
+    } | {
+        host?: undefined;
+        port?: undefined;
+        scripts?: undefined;
+        scriptableBy?: undefined;
+        id: string;
+        type: 'serve';
+        sign: {
+            name: string;
+            secret: string;
+            peers: {
+                [k: string]: string;
+            };
+        };
+        contract: string;
+    })[];
+};
+/** What the generated file still needs from whoever generated it, in the order they have to do it. */
+export declare const taskFileSkeletonNotes: (file: string, controller?: string) => string[];
+export {};
+//# sourceMappingURL=tasks.d.ts.map

package/dist/tasks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tasks.d.ts","sourceRoot":"","sources":["../src/tasks.ts"],"names":[],"mappings":"AAMA,OAAO,EAA0G,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAM3J;;;;;;;;GAQG;AACH,eAAO,MAAM,eAAe,0BAA0B,CAAA;AAEtD,gGAAgG;AAChG,MAAM,WAAW,YAAY;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,WAAW;IACxB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,IAAI,CAAC,EAAE,YAAY,CAAA;CACtB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,QAAQ;IACrB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,UAAU,UAAU;IAChB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,OAAO,CAAA;IAClC,OAAO,CAAC,EAAE,WAAW,CAAA;IACrB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,6DAA6D;IAC7D,IAAI,CAAC,EAAE,MAAM,GAAG,WAAW,CAAA;IAC3B,sEAAsE;IACtE,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAA;CAC3B;AAED,MAAM,WAAW,WAAY,SAAQ,UAAU;IAC3C,IAAI,EAAE,SAAS,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,2FAA2F;IAC3F,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,GAAG,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,QAAS,SAAQ,UAAU;IACxC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,SAAU,SAAQ,UAAU;IACzC,IAAI,EAAE,OAAO,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,OAAO,CAAA;CACtB;AAED,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAA;AAE9D,MAAM,WAAW,iBAAiB;IAC9B,OAAO,EAAE,CAAC,CAAA;IACV,OAAO,CAAC,EAAE,WAAW,CAAA;IACrB,KAAK,EAAE,aAAa,EAAE,CAAA;CACzB;AAED,MAAM,WAAW,WAAW;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;CACxB;AAED,MAAM,WAAW,WAAW;IACxB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,WAAW,EAAE,CAAA;IACpB,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1B;;;;;;OAMG;IACH,YAAY,EAAE,MAAM,IAAI,CAAA;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAC9B,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAA;IACrC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CACtC;AAgLD,kGAAkG;AAClG,eAAO,MAAM,aAAa,UAAW,OAAO,KAAG,iBAU9C,CAAA;AAuGD;;;;GAIG;AACH,eAAO,MAAM,cAAc,SAAU,WAAW,UAAU,OAAO,WAAkE,CAAA;AAyBnI,mGAAmG;AACnG,eAAO,MAAM,aAAa,SAAgB,MAAM,cAAa,iBAAiB,KAAQ,OAAO,CAAC,WAAW,CAyFxG,CAAA;AAKD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,gBAAgB,aAAa;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE;aAU/E,CAAC;;;;;;;;;;cAQI,SAAS;;YACP,IAAI;YAAkB,MAAM;YAA2B,KAAK;;;;;;;;;;;;;cAM9D,MAAM;;YACJ,IAAI;YAAe,MAAM;YAAwB,KAAK;;;;;;;;;;;;;cAMxD,OAAO;;YACL,IAAI;YAAoB,MAAM;YAA6B,KAAK;;;;;;CAKvF,CAAA;AAED,sGAAsG;AACtG,eAAO,MAAM,qBAAqB,SAAU,MAAM,kCAMjD,CAAA"}