@stigmer/runner 3.5.3 → 3.7.0

package/dist/sandbox-token-renewal.js

@@ -0,0 +1,169 @@
+/**
+ * Self-renewal of a cloud sandbox's control-plane credential (STIGMER_TOKEN).
+ *
+ * A sandbox token is minted with a fixed TTL, but the sandbox it serves has
+ * no fixed lifetime: an active conversation extends a session sandbox
+ * indefinitely, and a long workflow run can outlast any TTL chosen at
+ * provisioning. Before this module, the only refresh path was the control
+ * plane's Secret-rewrite + pod restart — which the 2026-08-05 incident
+ * showed both sacrifices the turn that trips it (the old pod picks up the
+ * work holding the dead env token) and wipes an ephemeral sandbox's
+ * workspace. Renewal decouples credential lifetime from sandbox lifetime:
+ * the runner re-mints in-process before expiry via the getRunnerScopedToken
+ * `renewal` arm, and the server bounds renewability by the live sandbox
+ * record (a reaped sandbox's credential dies with it).
+ *
+ * Relationship to {@link createRunnerTokenCoordinator}
+ * (runner-token-coordinator.ts): the coordinator owns the PROXY credential
+ * (x-stigmer-auth) and re-mints it using the control-plane token; this
+ * module keeps that control-plane token itself fresh, so the two form one
+ * chain with no expiring root. They stay separate modules because their
+ * hosts differ — every proxy-mode runner has a coordinator, but only
+ * in-cluster sandbox runners (static cloud sandboxes and pool members) hold
+ * a renewable credential; the desktop's control-plane token is the user's
+ * own Auth0 token, refreshed by the host app.
+ *
+ * The loop re-reads the CURRENT token every cycle rather than binding to
+ * the boot credential, because the credential's class can change under it:
+ * a pool member boots with a non-renewable pool_sandbox token and swaps to
+ * a renewable session token at claim time (attach-session.ts). A
+ * non-renewable token parks the loop on a slow recheck instead of stopping
+ * it, so the swap is picked up without any coupling to the claim path.
+ */
+/**
+ * Renew once the token has lived this fraction of its issued lifetime
+ * (anchored on iat/exp, the coordinator's 0.8 convention). Anchoring on the
+ * ISSUED lifetime matters: a fraction of the *remaining* lifetime re-arms at
+ * 80% of an ever-shrinking remainder and never reaches the renewal point.
+ */
+const RENEW_AT_LIFETIME_FRACTION = 0.8;
+/**
+ * Fallback safety margin before expiry for a token without an iat claim:
+ * renew this early, leaving room for two retry cycles.
+ */
+const FALLBACK_RENEW_MARGIN_MS = 10 * 60_000;
+/** Retry delay after a failed renewal — short enough to recover well before expiry. */
+const RETRY_DELAY_MS = 60_000;
+/** Recheck cadence while the current token is not a renewable class (pre-claim pool member). */
+const RECHECK_DELAY_MS = 60_000;
+/** Floor for any scheduled delay so a malformed expiry cannot spin a hot loop. */
+const MIN_DELAY_MS = 5_000;
+/** The token_type claims the renewal arm accepts (mirrors the server's gate). */
+const RENEWABLE_TOKEN_TYPES = new Set(["sandbox", "workflow_sandbox"]);
+/**
+ * Whether a token's decoded claims mark it as renewable through the
+ * `renewal` arm. Exported so a static-mode host can decide not to start
+ * the loop at all for a credential whose class can never change.
+ */
+export function isRenewableSandboxToken(token) {
+    const claims = decodeClaims(token);
+    return claims !== null
+        && RENEWABLE_TOKEN_TYPES.has(claims.tokenType ?? "")
+        && claims.expMs !== null;
+}
+/**
+ * Start the renewal loop. The first cycle runs immediately (it only reads
+ * the token and schedules; no network call unless the credential is already
+ * past its renewal point).
+ */
+export function startSandboxTokenRenewal(options) {
+    const log = options.log ?? console;
+    let stopped = false;
+    let timer = null;
+    const schedule = (delayMs) => {
+        if (stopped) {
+            return;
+        }
+        timer = setTimeout(() => {
+            void cycle();
+        }, Math.max(MIN_DELAY_MS, delayMs));
+        // Never keep the process alive solely for a token renewal.
+        timer.unref?.();
+    };
+    const cycle = async () => {
+        if (stopped) {
+            return;
+        }
+        const token = options.getToken() ?? null;
+        const claims = decodeClaims(token);
+        if (token === null || claims === null
+            || !RENEWABLE_TOKEN_TYPES.has(claims.tokenType ?? "")) {
+            // Not (yet) a renewable credential — a pre-claim pool member, or a
+            // credential class this loop does not own. Park and look again.
+            schedule(RECHECK_DELAY_MS);
+            return;
+        }
+        if (claims.expMs === null) {
+            // A renewable-class token without an expiry is a mint-side anomaly;
+            // renewing "before expiry" is undefined, so park rather than spin.
+            log.warn("[sandbox-token-renewal] Credential carries no exp claim; parking");
+            schedule(RECHECK_DELAY_MS);
+            return;
+        }
+        const renewAtMs = claims.iatMs !== null
+            ? claims.iatMs + (claims.expMs - claims.iatMs) * RENEW_AT_LIFETIME_FRACTION
+            : claims.expMs - FALLBACK_RENEW_MARGIN_MS;
+        const delayMs = renewAtMs - Date.now();
+        if (delayMs > MIN_DELAY_MS) {
+            schedule(delayMs);
+            return;
+        }
+        // At or past the renewal point (possibly past expiry after a long pod
+        // pause — the attempt is still correct: the server decides).
+        try {
+            const renewed = await options.renew(token);
+            if (renewed) {
+                options.applyToken(renewed.token);
+                log.log("[sandbox-token-renewal] Sandbox credential renewed");
+                // Recompute from the fresh token (its own exp is authoritative).
+                schedule(MIN_DELAY_MS);
+            }
+            else {
+                log.warn("[sandbox-token-renewal] Server minted no renewal; will retry");
+                schedule(RETRY_DELAY_MS);
+            }
+        }
+        catch (err) {
+            log.warn("[sandbox-token-renewal] Renewal failed; will retry: " +
+                `${err instanceof Error ? err.message : err}`);
+            schedule(RETRY_DELAY_MS);
+        }
+    };
+    void cycle();
+    return {
+        stop() {
+            stopped = true;
+            if (timer) {
+                clearTimeout(timer);
+                timer = null;
+            }
+        },
+    };
+}
+/**
+ * Decode the claims this module reads (token_type, iat, exp) from an
+ * unverified JWT. Decode-only on purpose: this is the runner's OWN
+ * credential, minted by the server it will present it back to —
+ * verification happens there.
+ */
+function decodeClaims(token) {
+    if (!token) {
+        return null;
+    }
+    const parts = token.split(".");
+    if (parts.length !== 3) {
+        return null;
+    }
+    try {
+        const payload = JSON.parse(Buffer.from(parts[1], "base64url").toString("utf-8"));
+        return {
+            tokenType: payload.token_type,
+            iatMs: typeof payload.iat === "number" ? payload.iat * 1000 : null,
+            expMs: typeof payload.exp === "number" ? payload.exp * 1000 : null,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=sandbox-token-renewal.js.map

package/dist/sandbox-token-renewal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-token-renewal.js","sourceRoot":"","sources":["../src/sandbox-token-renewal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH;;;;;GAKG;AACH,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAEvC;;;GAGG;AACH,MAAM,wBAAwB,GAAG,EAAE,GAAG,MAAM,CAAC;AAE7C,uFAAuF;AACvF,MAAM,cAAc,GAAG,MAAM,CAAC;AAE9B,gGAAgG;AAChG,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC,kFAAkF;AAClF,MAAM,YAAY,GAAG,KAAK,CAAC;AAE3B,iFAAiF;AACjF,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAwBvE;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAgC;IACtE,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACnC,OAAO,MAAM,KAAK,IAAI;WACjB,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;WACjD,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAmC;IAEnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC;IACnC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,KAAK,GAAyC,IAAI,CAAC;IAEvD,MAAM,QAAQ,GAAG,CAAC,OAAe,EAAQ,EAAE;QACzC,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QACD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,KAAK,KAAK,EAAE,CAAC;QACf,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;QACpC,2DAA2D;QAC3D,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,KAAK,IAAmB,EAAE;QACtC,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC;QACzC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QAEnC,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI;eAC9B,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;YAC1D,mEAAmE;YACnE,gEAAgE;YAChE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1B,oEAAoE;YACpE,mEAAmE;YACnE,GAAG,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;YAC7E,QAAQ,CAAC,gBAAgB,CAAC,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,KAAK,IAAI;YACrC,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,0BAA0B;YAC3E,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG,wBAAwB,CAAC;QAC5C,MAAM,OAAO,GAAG,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvC,IAAI,OAAO,GAAG,YAAY,EAAE,CAAC;YAC3B,QAAQ,CAAC,OAAO,CAAC,CAAC;YAClB,OAAO;QACT,CAAC;QAED,sEAAsE;QACtE,6DAA6D;QAC7D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAClC,GAAG,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;gBAC9D,iEAAiE;gBACjE,QAAQ,CAAC,YAAY,CAAC,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;gBACzE,QAAQ,CAAC,cAAc,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CACN,sDAAsD;gBACtD,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAC9C,CAAC;YACF,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,KAAK,EAAE,CAAC;IAEb,OAAO;QACL,IAAI;YACF,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,KAAK,EAAE,CAAC;gBACV,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CACnB,KAAgC;IAEhC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CACE,CAAC;QACzD,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,UAAU;YAC7B,KAAK,EAAE,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI;YAClE,KAAK,EAAE,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI;SACnE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/shared/artifact-storage.d.ts

@@ -44,19 +44,33 @@ export declare class LocalArtifactStorage implements ArtifactStorage {
 }
 export declare class ProxyArtifactStorage implements ArtifactStorage {
     private readonly baseUrl;
-    private readonly authToken;
-    constructor(proxyEndpoint: string, authToken: string);
+    private readonly authTokenSource;
+    constructor(proxyEndpoint: string, authToken: ProxyAuthTokenSource);
+    /**
+     * Resolve the credential per call rather than pinning the boot token: a
+     * cloud sandbox's control-plane token rotates in place (see
+     * sandbox-token-renewal.ts), and this storage lives for the pod's whole
+     * life — a captured string would silently 401 after the first rotation.
+     */
+    private get authToken();
     upload(key: string, content: Buffer, contentType?: string): Promise<string>;
     getDownloadUrl(key: string): Promise<string>;
     download(key: string): Promise<Buffer>;
     exists(key: string): Promise<boolean>;
 }
+/**
+ * The proxy credential, either fixed (a caller-supplied string) or live (a
+ * shared mutable ref, read per call — the sandbox token-renewal posture).
+ */
+export type ProxyAuthTokenSource = string | {
+    readonly current: string | null;
+};
 export interface ArtifactStorageConfig {
     readonly type: ArtifactStorageType;
     readonly localPath: string;
     readonly localServeUrl: string;
     readonly proxyEndpoint: string | null;
-    readonly proxyAuthToken: string | null;
+    readonly proxyAuthToken: ProxyAuthTokenSource | null;
 }
 export declare function loadArtifactStorageConfig(config: Config): ArtifactStorageConfig;
 export declare function createArtifactStorage(cfg: ArtifactStorageConfig): ArtifactStorage;

package/dist/shared/artifact-storage.js

@@ -59,10 +59,21 @@ export class LocalArtifactStorage {
 // ── Proxy Backend ────────────────────────────────────────────────────
 export class ProxyArtifactStorage {
     baseUrl;
-    authToken;
+    authTokenSource;
     constructor(proxyEndpoint, authToken) {
         this.baseUrl = `${proxyEndpoint.replace(/\/+$/, "")}/v1/proxy/artifacts`;
-        this.authToken = authToken;
+        this.authTokenSource = authToken;
+    }
+    /**
+     * Resolve the credential per call rather than pinning the boot token: a
+     * cloud sandbox's control-plane token rotates in place (see
+     * sandbox-token-renewal.ts), and this storage lives for the pod's whole
+     * life — a captured string would silently 401 after the first rotation.
+     */
+    get authToken() {
+        return typeof this.authTokenSource === "string"
+            ? this.authTokenSource
+            : (this.authTokenSource.current ?? "");
     }
     async upload(key, content, contentType) {
         const ct = contentType ?? "application/octet-stream";
@@ -181,7 +192,11 @@ export function loadArtifactStorageConfig(config) {
         localPath: process.env.LOCAL_ARTIFACT_PATH ?? "/var/stigmer/artifacts",
         localServeUrl: process.env.LOCAL_ARTIFACT_SERVE_URL ?? "http://localhost:7235",
         proxyEndpoint: type === "proxy" ? (config.proxyEndpoint ?? null) : null,
-        proxyAuthToken: type === "proxy" ? (config.stigmerToken ?? null) : null,
+        // Prefer the live ref: renewal rotates the token in place and uploads
+        // must present the current credential, not the boot one.
+        proxyAuthToken: type === "proxy"
+            ? (config.stigmerTokenRef ?? config.stigmerToken ?? null)
+            : null,
     };
 }
 export function createArtifactStorage(cfg) {
@@ -189,7 +204,10 @@ export function createArtifactStorage(cfg) {
         if (!cfg.proxyEndpoint) {
             throw new Error("Proxy artifact storage requires STIGMER_PROXY_ENDPOINT");
         }
-        if (!cfg.proxyAuthToken) {
+        const tokenAtBoot = typeof cfg.proxyAuthToken === "string"
+            ? cfg.proxyAuthToken
+            : cfg.proxyAuthToken?.current;
+        if (!tokenAtBoot) {
             throw new Error("Proxy artifact storage requires STIGMER_TOKEN");
         }
         return new ProxyArtifactStorage(cfg.proxyEndpoint, cfg.proxyAuthToken);

package/dist/shared/artifact-storage.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-storage.js","sourceRoot":"","sources":["../../src/shared/artifact-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAwB1C,wEAAwE;AAExE,MAAM,OAAO,oBAAoB;IACd,QAAQ,CAAS;IACjB,YAAY,CAAS;IAEtC,YAAY,QAAgB,EAAE,YAAoB;QAChD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,OAAe,EAAE,YAAqB;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC1C,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAW;QAC9B,OAAO,GAAG,IAAI,CAAC,YAAY,IAAI,GAAG,EAAE,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAW;QACxB,2EAA2E;QAC3E,4EAA4E;QAC5E,iEAAiE;QACjE,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,MAAM,MAAM,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAED,wEAAwE;AAExE,MAAM,OAAO,oBAAoB;IACd,OAAO,CAAS;IAChB,SAAS,CAAS;IAEnC,YAAY,aAAqB,EAAE,SAAiB;QAClD,IAAI,CAAC,OAAO,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,qBAAqB,CAAC;QACzE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,OAAe,EAAE,WAAoB;QAC7D,MAAM,EAAE,GAAG,WAAW,IAAI,0BAA0B,CAAC;QAErD,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,uBAAuB,EAAE;YACtE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,IAAI,CAAC,SAAS,EAAE;gBAC3C,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;SAChD,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,4CAA4C,WAAW,CAAC,MAAM,KAAK;gBACnE,MAAM,WAAW,CAAC,IAAI,EAAE,CACzB,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,EAAuD,CAAC;QAE3F,yEAAyE;QACzE,4EAA4E;QAC5E,6EAA6E;QAC7E,0DAA0D;QAC1D,yEAAyE;QACzE,6EAA6E;QAC7E,4EAA4E;QAC5E,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QACzC,MAAM,aAAa,GAA2B,EAAE,CAAC;QACjD,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YAC1D,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM;gBAAE,SAAS;YAC5C,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,cAAc;gBAAE,iBAAiB,GAAG,IAAI,CAAC;YACpE,aAAa,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC;QACD,2EAA2E;QAC3E,4EAA4E;QAC5E,kCAAkC;QAClC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,aAAa,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC;QACrC,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,aAAa;YACtB,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACb,iCAAiC,OAAO,CAAC,MAAM,KAAK;gBACpD,MAAM,OAAO,CAAC,IAAI,EAAE,CACrB,CAAC;QACJ,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAW;QAC9B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,yBAAyB,EAAE;YACjE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,IAAI,CAAC,SAAS,EAAE;gBAC3C,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,8CAA8C,IAAI,CAAC,MAAM,KAAK;gBAC9D,MAAM,IAAI,CAAC,IAAI,EAAE,CAClB,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAqB,CAAC;QAClD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAW;QACxB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,kCAAkC,IAAI,CAAC,MAAM,cAAc,GAAG,KAAK;gBACnE,MAAM,IAAI,CAAC,IAAI,EAAE,CAClB,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,8EAA8E;QAC9E,6EAA6E;QAC7E,+EAA+E;QAC/E,yEAAyE;QACzE,uEAAuE;QACvE,4EAA4E;QAC5E,4EAA4E;QAC5E,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;YACzE,kEAAkE;YAClE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,0BAA0B;QAC3E,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QACtC,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACnF,8EAA8E;QAC9E,uEAAuE;QACvE,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,CAAC,MAAM,cAAc,GAAG,GAAG,CACzE,CAAC;IACJ,CAAC;CACF;AAYD,MAAM,UAAU,yBAAyB,CAAC,MAAc;IACtD,4EAA4E;IAC5E,+EAA+E;IAC/E,wEAAwE;IACxE,0EAA0E;IAC1E,qCAAqC;IACrC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAClD,MAAM,IAAI,GACR,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC/B,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC/B,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IAE3C,OAAO;QACL,IAAI;QACJ,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,wBAAwB;QACtE,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,uBAAuB;QAC9E,aAAa,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;QACvE,cAAc,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;KACxE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAA0B;IAC9D,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,IAAI,oBAAoB,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,IAAI,oBAAoB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,gBAAgB,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC/B,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,GAA0B,EAC1B,GAA4B;IAE5B,IAAI,OAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CACV,0EAA0E;YAC1E,kDAAkD,GAAG,CAAC,WAAW,IAAI;YACrE,QAAQ,GAAG,CAAC,IAAI,WAAW,GAAG,EAAE,CACjC,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACxE,OAAO,CAAC,IAAI,CACV,4EAA4E;YAC5E,4DAA4D,GAAG,CAAC,WAAW,IAAI;YAC/E,QAAQ,GAAG,CAAC,SAAS,EAAE,CACxB,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"artifact-storage.js","sourceRoot":"","sources":["../../src/shared/artifact-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAwB1C,wEAAwE;AAExE,MAAM,OAAO,oBAAoB;IACd,QAAQ,CAAS;IACjB,YAAY,CAAS;IAEtC,YAAY,QAAgB,EAAE,YAAoB;QAChD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,OAAe,EAAE,YAAqB;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC1C,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAW;QAC9B,OAAO,GAAG,IAAI,CAAC,YAAY,IAAI,GAAG,EAAE,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAW;QACxB,2EAA2E;QAC3E,4EAA4E;QAC5E,iEAAiE;QACjE,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,MAAM,MAAM,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAED,wEAAwE;AAExE,MAAM,OAAO,oBAAoB;IACd,OAAO,CAAS;IAChB,eAAe,CAAuB;IAEvD,YAAY,aAAqB,EAAE,SAA+B;QAChE,IAAI,CAAC,OAAO,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,qBAAqB,CAAC;QACzE,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;IACnC,CAAC;IAED;;;;;OAKG;IACH,IAAY,SAAS;QACnB,OAAO,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ;YAC7C,CAAC,CAAC,IAAI,CAAC,eAAe;YACtB,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,OAAe,EAAE,WAAoB;QAC7D,MAAM,EAAE,GAAG,WAAW,IAAI,0BAA0B,CAAC;QAErD,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,uBAAuB,EAAE;YACtE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,IAAI,CAAC,SAAS,EAAE;gBAC3C,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;SAChD,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,4CAA4C,WAAW,CAAC,MAAM,KAAK;gBACnE,MAAM,WAAW,CAAC,IAAI,EAAE,CACzB,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,EAAuD,CAAC;QAE3F,yEAAyE;QACzE,4EAA4E;QAC5E,6EAA6E;QAC7E,0DAA0D;QAC1D,yEAAyE;QACzE,6EAA6E;QAC7E,4EAA4E;QAC5E,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QACzC,MAAM,aAAa,GAA2B,EAAE,CAAC;QACjD,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YAC1D,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM;gBAAE,SAAS;YAC5C,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,cAAc;gBAAE,iBAAiB,GAAG,IAAI,CAAC;YACpE,aAAa,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC;QACD,2EAA2E;QAC3E,4EAA4E;QAC5E,kCAAkC;QAClC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,aAAa,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC;QACrC,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,aAAa;YACtB,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACb,iCAAiC,OAAO,CAAC,MAAM,KAAK;gBACpD,MAAM,OAAO,CAAC,IAAI,EAAE,CACrB,CAAC;QACJ,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAW;QAC9B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,yBAAyB,EAAE;YACjE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,IAAI,CAAC,SAAS,EAAE;gBAC3C,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,8CAA8C,IAAI,CAAC,MAAM,KAAK;gBAC9D,MAAM,IAAI,CAAC,IAAI,EAAE,CAClB,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAqB,CAAC;QAClD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAW;QACxB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,kCAAkC,IAAI,CAAC,MAAM,cAAc,GAAG,KAAK;gBACnE,MAAM,IAAI,CAAC,IAAI,EAAE,CAClB,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,8EAA8E;QAC9E,6EAA6E;QAC7E,+EAA+E;QAC/E,yEAAyE;QACzE,uEAAuE;QACvE,4EAA4E;QAC5E,4EAA4E;QAC5E,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;YACzE,kEAAkE;YAClE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,0BAA0B;QAC3E,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QACtC,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACnF,8EAA8E;QAC9E,uEAAuE;QACvE,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,CAAC,MAAM,cAAc,GAAG,GAAG,CACzE,CAAC;IACJ,CAAC;CACF;AAkBD,MAAM,UAAU,yBAAyB,CAAC,MAAc;IACtD,4EAA4E;IAC5E,+EAA+E;IAC/E,wEAAwE;IACxE,0EAA0E;IAC1E,qCAAqC;IACrC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAClD,MAAM,IAAI,GACR,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC/B,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC/B,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IAE3C,OAAO;QACL,IAAI;QACJ,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,wBAAwB;QACtE,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,uBAAuB;QAC9E,aAAa,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;QACvE,sEAAsE;QACtE,yDAAyD;QACzD,cAAc,EAAE,IAAI,KAAK,OAAO;YAC9B,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC;YACzD,CAAC,CAAC,IAAI;KACT,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAA0B;IAC9D,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,WAAW,GAAG,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ;YACxD,CAAC,CAAC,GAAG,CAAC,cAAc;YACpB,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC;QAChC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,IAAI,oBAAoB,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,cAAe,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO,IAAI,oBAAoB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,gBAAgB,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC/B,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,GAA0B,EAC1B,GAA4B;IAE5B,IAAI,OAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CACV,0EAA0E;YAC1E,kDAAkD,GAAG,CAAC,WAAW,IAAI;YACrE,QAAQ,GAAG,CAAC,IAAI,WAAW,GAAG,EAAE,CACjC,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACxE,OAAO,CAAC,IAAI,CACV,4EAA4E;YAC5E,4DAA4D,GAAG,CAAC,WAAW,IAAI;YAC/E,QAAQ,GAAG,CAAC,SAAS,EAAE,CACxB,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/shared/caller-identity.d.ts

@@ -0,0 +1,89 @@
+/**
+ * The caller identity for MCP server configs — reserved platform env keys
+ * that carry the platform-verified "who is calling" into user-defined MCP
+ * server headers/args, without ever passing through the model.
+ *
+ * The identity is a (kind, value) pair with fixed precedence:
+ *   1. The channel sender (Meta/Slack-verified, stamped into
+ *      `SessionSpec.metadata` by the cloud broker — sender-identity.ts is
+ *      the reader).
+ *   2. The session creator (`stigmer_user`) from the Session resource's
+ *      audit actor — console/CLI sessions have no channel sender, but the
+ *      platform knows exactly who created the session.
+ *   3. The anonymous sentinel — discovery (no session exists) and sessions
+ *      with no readable creator. Consumers must treat anonymous as a
+ *      first-class caller: answer tools/list, refuse tool calls.
+ *
+ * Injection is opt-in by construction: the values enter the env map used
+ * for MCP placeholder resolution, and `filterEnvToDeclaredKeys` already
+ * restricts every server to the keys it declared in `spec.env`. A server
+ * that never declares the reserved keys never receives identity.
+ * Declarations MUST be `optional: true` — execution creation validates
+ * declared-env completeness in both editions, and these keys have no value
+ * until the runner injects them.
+ *
+ * Trust model: the resulting header is RUNNER-asserted, not signed. It
+ * closes the prompt-injection hole (the model cannot influence the value),
+ * but the receiving server must pair it with a shared secret and be
+ * operated by someone who trusts the runner's network path.
+ */
+/** Reserved env key: the identity's kind token. */
+export declare const CALLER_IDENTITY_KIND_ENV_KEY = "STIGMER_CALLER_IDENTITY_KIND";
+/** Reserved env key: the identity's value. */
+export declare const CALLER_IDENTITY_VALUE_ENV_KEY = "STIGMER_CALLER_IDENTITY_VALUE";
+/** Reserved env key: the session the identity was resolved for. */
+export declare const SESSION_ID_ENV_KEY = "STIGMER_SESSION_ID";
+/**
+ * Kind token for a platform user (console/CLI session creator). Channel
+ * kinds (`whatsapp_phone`, `slack_user_id`, ...) pass through VERBATIM
+ * from the cloud broker's metadata — this module never rewrites them.
+ */
+export declare const STIGMER_USER_KIND = "stigmer_user";
+/**
+ * Kind token for the anonymous caller. Deliberately a real token rather
+ * than an absent key: every declared placeholder must resolve in every
+ * resolution context, or discovery fails with PlaceholderResolutionError
+ * before the server's tools are ever classified.
+ */
+export declare const ANONYMOUS_KIND = "anonymous";
+/** The resolved caller identity. */
+export interface CallerIdentity {
+    kind: string;
+    value: string;
+}
+/** The audit actor shape read from `status.audit.spec_audit.created_by`. */
+export interface SessionCreatorActor {
+    id?: string;
+    email?: string;
+}
+/** The identity injected when no session context exists (discovery). */
+export declare function anonymousCallerIdentity(): CallerIdentity;
+/**
+ * Resolve the caller identity for a session: channel sender first, then
+ * the session creator, then anonymous.
+ *
+ * The creator value prefers email over id: bindings are maintained by
+ * humans, and the audit actor's `id` field is historically mixed
+ * (identity-account id vs email — see the proto's own @internal note).
+ * Binding matchers should compare emails case-insensitively.
+ */
+export declare function resolveCallerIdentity(sessionMetadata: Record<string, string> | undefined, creator?: SessionCreatorActor): CallerIdentity;
+/**
+ * Return a NEW env map with the reserved caller-identity keys set —
+ * platform values are authoritative over same-named user entries (the
+ * injectPlatformEnv precedent: a user env var must never be able to
+ * impersonate a caller).
+ *
+ * Call this on the env map handed to MCP resolution ONLY — never on the
+ * map that reaches agent subprocess environments. Per-server opt-in is
+ * enforced downstream by filterEnvToDeclaredKeys.
+ */
+export declare function injectCallerIdentityEnv(envVars: Record<string, string>, identity: CallerIdentity, sessionId: string): Record<string, string>;
+/**
+ * Discovery-context injection: the connect workflow resolves the same
+ * header templates with no session, so every declared reserved key gets
+ * the anonymous sentinel — otherwise a caller-identity-templating server
+ * can never be discovered. Gated on the server's declared keys, matching
+ * injectPlatformEnv's contract in the discovery activity.
+ */
+export declare function injectAnonymousCallerIdentityForDiscovery(declaredEnvKeys: ReadonlySet<string>, envVars: Record<string, string>): Record<string, string>;

package/dist/shared/caller-identity.js

@@ -0,0 +1,124 @@
+/**
+ * The caller identity for MCP server configs — reserved platform env keys
+ * that carry the platform-verified "who is calling" into user-defined MCP
+ * server headers/args, without ever passing through the model.
+ *
+ * The identity is a (kind, value) pair with fixed precedence:
+ *   1. The channel sender (Meta/Slack-verified, stamped into
+ *      `SessionSpec.metadata` by the cloud broker — sender-identity.ts is
+ *      the reader).
+ *   2. The session creator (`stigmer_user`) from the Session resource's
+ *      audit actor — console/CLI sessions have no channel sender, but the
+ *      platform knows exactly who created the session.
+ *   3. The anonymous sentinel — discovery (no session exists) and sessions
+ *      with no readable creator. Consumers must treat anonymous as a
+ *      first-class caller: answer tools/list, refuse tool calls.
+ *
+ * Injection is opt-in by construction: the values enter the env map used
+ * for MCP placeholder resolution, and `filterEnvToDeclaredKeys` already
+ * restricts every server to the keys it declared in `spec.env`. A server
+ * that never declares the reserved keys never receives identity.
+ * Declarations MUST be `optional: true` — execution creation validates
+ * declared-env completeness in both editions, and these keys have no value
+ * until the runner injects them.
+ *
+ * Trust model: the resulting header is RUNNER-asserted, not signed. It
+ * closes the prompt-injection hole (the model cannot influence the value),
+ * but the receiving server must pair it with a shared secret and be
+ * operated by someone who trusts the runner's network path.
+ */
+import { readSenderIdentity } from "./sender-identity.js";
+/** Reserved env key: the identity's kind token. */
+export const CALLER_IDENTITY_KIND_ENV_KEY = "STIGMER_CALLER_IDENTITY_KIND";
+/** Reserved env key: the identity's value. */
+export const CALLER_IDENTITY_VALUE_ENV_KEY = "STIGMER_CALLER_IDENTITY_VALUE";
+/** Reserved env key: the session the identity was resolved for. */
+export const SESSION_ID_ENV_KEY = "STIGMER_SESSION_ID";
+/**
+ * Kind token for a platform user (console/CLI session creator). Channel
+ * kinds (`whatsapp_phone`, `slack_user_id`, ...) pass through VERBATIM
+ * from the cloud broker's metadata — this module never rewrites them.
+ */
+export const STIGMER_USER_KIND = "stigmer_user";
+/**
+ * Kind token for the anonymous caller. Deliberately a real token rather
+ * than an absent key: every declared placeholder must resolve in every
+ * resolution context, or discovery fails with PlaceholderResolutionError
+ * before the server's tools are ever classified.
+ */
+export const ANONYMOUS_KIND = "anonymous";
+/** The identity injected when no session context exists (discovery). */
+export function anonymousCallerIdentity() {
+    return { kind: ANONYMOUS_KIND, value: "" };
+}
+/**
+ * Resolve the caller identity for a session: channel sender first, then
+ * the session creator, then anonymous.
+ *
+ * The creator value prefers email over id: bindings are maintained by
+ * humans, and the audit actor's `id` field is historically mixed
+ * (identity-account id vs email — see the proto's own @internal note).
+ * Binding matchers should compare emails case-insensitively.
+ */
+export function resolveCallerIdentity(sessionMetadata, creator) {
+    const sender = readSenderIdentity(sessionMetadata);
+    if (sender) {
+        return { kind: sender.kind, value: sender.value };
+    }
+    const email = creator?.email?.trim();
+    const id = creator?.id?.trim();
+    const value = email || id;
+    if (value) {
+        return { kind: STIGMER_USER_KIND, value };
+    }
+    return anonymousCallerIdentity();
+}
+/**
+ * Return a NEW env map with the reserved caller-identity keys set —
+ * platform values are authoritative over same-named user entries (the
+ * injectPlatformEnv precedent: a user env var must never be able to
+ * impersonate a caller).
+ *
+ * Call this on the env map handed to MCP resolution ONLY — never on the
+ * map that reaches agent subprocess environments. Per-server opt-in is
+ * enforced downstream by filterEnvToDeclaredKeys.
+ */
+export function injectCallerIdentityEnv(envVars, identity, sessionId) {
+    const reserved = {
+        [CALLER_IDENTITY_KIND_ENV_KEY]: identity.kind,
+        [CALLER_IDENTITY_VALUE_ENV_KEY]: identity.value,
+        [SESSION_ID_ENV_KEY]: sessionId,
+    };
+    for (const [key, value] of Object.entries(reserved)) {
+        if (key in envVars && envVars[key] !== value) {
+            console.info(`Platform env var '${key}' overrides value from ExecutionContext ` +
+                `(caller-identity vars are authoritative)`);
+        }
+    }
+    return { ...envVars, ...reserved };
+}
+/**
+ * Discovery-context injection: the connect workflow resolves the same
+ * header templates with no session, so every declared reserved key gets
+ * the anonymous sentinel — otherwise a caller-identity-templating server
+ * can never be discovered. Gated on the server's declared keys, matching
+ * injectPlatformEnv's contract in the discovery activity.
+ */
+export function injectAnonymousCallerIdentityForDiscovery(declaredEnvKeys, envVars) {
+    const anonymous = anonymousCallerIdentity();
+    const sentinels = {
+        [CALLER_IDENTITY_KIND_ENV_KEY]: anonymous.kind,
+        [CALLER_IDENTITY_VALUE_ENV_KEY]: anonymous.value,
+        [SESSION_ID_ENV_KEY]: "",
+    };
+    let result;
+    for (const [key, value] of Object.entries(sentinels)) {
+        if (!declaredEnvKeys.has(key))
+            continue;
+        if (!result)
+            result = { ...envVars };
+        result[key] = value;
+    }
+    return result ?? envVars;
+}
+//# sourceMappingURL=caller-identity.js.map

package/dist/shared/caller-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"caller-identity.js","sourceRoot":"","sources":["../../src/shared/caller-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,mDAAmD;AACnD,MAAM,CAAC,MAAM,4BAA4B,GAAG,8BAA8B,CAAC;AAE3E,8CAA8C;AAC9C,MAAM,CAAC,MAAM,6BAA6B,GAAG,+BAA+B,CAAC;AAE7E,mEAAmE;AACnE,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEvD;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAEhD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,WAAW,CAAC;AAc1C,wEAAwE;AACxE,MAAM,UAAU,uBAAuB;IACrC,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;AAC7C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CACnC,eAAmD,EACnD,OAA6B;IAE7B,MAAM,MAAM,GAAG,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACnD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACrC,MAAM,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE,CAAC;IAC1B,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;IAC5C,CAAC;IAED,OAAO,uBAAuB,EAAE,CAAC;AACnC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAA+B,EAC/B,QAAwB,EACxB,SAAiB;IAEjB,MAAM,QAAQ,GAA2B;QACvC,CAAC,4BAA4B,CAAC,EAAE,QAAQ,CAAC,IAAI;QAC7C,CAAC,6BAA6B,CAAC,EAAE,QAAQ,CAAC,KAAK;QAC/C,CAAC,kBAAkB,CAAC,EAAE,SAAS;KAChC,CAAC;IAEF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,IAAI,GAAG,IAAI,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC;YAC7C,OAAO,CAAC,IAAI,CACV,qBAAqB,GAAG,0CAA0C;gBAClE,0CAA0C,CAC3C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC;AACrC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yCAAyC,CACvD,eAAoC,EACpC,OAA+B;IAE/B,MAAM,SAAS,GAAG,uBAAuB,EAAE,CAAC;IAC5C,MAAM,SAAS,GAA2B;QACxC,CAAC,4BAA4B,CAAC,EAAE,SAAS,CAAC,IAAI;QAC9C,CAAC,6BAA6B,CAAC,EAAE,SAAS,CAAC,KAAK;QAChD,CAAC,kBAAkB,CAAC,EAAE,EAAE;KACzB,CAAC;IAEF,IAAI,MAA0C,CAAC;IAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACxC,IAAI,CAAC,MAAM;YAAE,MAAM,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,OAAO,MAAM,IAAI,OAAO,CAAC;AAC3B,CAAC"}

package/dist/shared/channel-attachment.d.ts

@@ -0,0 +1,85 @@
+/**
+ * The runner-synthesized channel messaging attachment (proactive-messaging
+ * DD-006 D7/D8) — the datastore records attachment's structural twin.
+ *
+ * When the control plane says an agent serves at least one
+ * proactive-messaging channel (the `listMessagingChannels` discovery
+ * read, DD-006 D2 — the SAME candidate computation the send
+ * authorization runs, so attachment and authority cannot disagree), the
+ * runner synthesizes ONE MCP attachment serving `send_channel_message`,
+ * and injects the `<available_channel_templates>` prompt section so the
+ * model composes template sends in context without spending a tool
+ * round (DD-003 D5).
+ *
+ * Two connection shapes, one roster (the records pattern):
+ *   - Bridge endpoint configured (cloud): Streamable HTTP against the
+ *     bridge's /channels route with the execution's own session-scoped
+ *     credential as the Bearer token.
+ *   - No bridge endpoint (OSS/local): a spawned `stigmer mcp-server`
+ *     stdio child with STIGMER_MCP_ROSTER=channels. In practice OSS
+ *     answers the discovery read with an empty list (DD-006 D3), so
+ *     this shape only serves local deployments that grow a messaging
+ *     runtime later — it exists for symmetry with the deployment
+ *     topology, not for a live OSS path today.
+ *
+ * Approval-free by construction, and FORCED, not convenient (DD-002
+ * D6): both calling surfaces run APPROVAL_MODE_UNATTENDED, where a
+ * gated tool resolves as skip-and-adapt — a gated send tool would mean
+ * reminders never send. Empty approval maps + no McpServerUsage keep
+ * the connect backfill structurally unable to gate it (see
+ * synthesized-attachment.ts). Callers inject AFTER resolve + backfill.
+ *
+ * Failure posture (DD-006 D4): every discovery failure — OSS's empty
+ * answer, a registry outage, a control plane predating the RPC
+ * (UNIMPLEMENTED), a reach refusal — degrades to honest absence: no
+ * tool, no section, execution unharmed.
+ */
+import type { ChannelTemplate, MessagingChannel } from "@stigmer/protos/ai/stigmer/agentic/agentchannel/v1/message_io_pb";
+import type { StigmerClient } from "../client/stigmer-client.js";
+import type { ResolvedMcpServer } from "./mcp-resolver.js";
+import { type SynthesizedAttachmentOptions } from "./synthesized-attachment.js";
+/**
+ * The synthesized attachment's slug. Reserved: a user McpServer with
+ * this slug is shadowed by the synthesized attachment, with a warning.
+ * Pinned cross-repo by the mcp-server integration test (the
+ * TOOL_CALL_LIMIT precedent).
+ */
+export declare const CHANNEL_ATTACHMENT_SLUG = "stigmer-channels";
+/** The bridge route serving the channels-only roster (mcp-server DD-006 D8). */
+export declare const CHANNELS_ROUTE = "/channels";
+/**
+ * The most templates the prompt section carries (DD-006 D6): Meta
+ * allows hundreds per WABA, and an unbounded section would tax every
+ * run's context. Deterministic (name, language) order plus a withheld
+ * count keep the agent's behavior independent of registry ordering.
+ */
+export declare const TEMPLATE_SECTION_CAP = 30;
+/** One channel plus its sendable approved templates, ready to format. */
+export interface ChannelMessagingInfo {
+    channel: MessagingChannel;
+    templates: ChannelTemplate[];
+}
+/**
+ * The discovery read plus the per-channel template fetch, with the
+ * DD-006 D4 failure posture applied: this function NEVER throws — any
+ * failure returns an empty list (no tool, no section), because a
+ * messaging hiccup must not fail an execution that may not even want
+ * to send anything.
+ */
+export declare function discoverChannelMessaging(client: StigmerClient, scopedCredential: string | undefined): Promise<ChannelMessagingInfo[]>;
+/**
+ * Synthesize the channel messaging attachment. Returns undefined when
+ * the agent serves no proactive channel — the attachment exists exactly
+ * when the discovery read says so.
+ */
+export declare function synthesizeChannelAttachment(channels: ChannelMessagingInfo[], options: SynthesizedAttachmentOptions): ResolvedMcpServer | undefined;
+/**
+ * The `<available_channel_templates>` prompt section (DD-003 D5):
+ * approved AND sendable templates with their full body text, so the
+ * model fills positional placeholders beside the values it composes.
+ * Unsendable entries are filtered, not annotated (DD-006 D6 — the
+ * console panel is the diagnosis surface, the prompt is a composition
+ * aid). Returns "" when nothing survives the filter — the tool alone
+ * still serves text sends inside a 24-hour window.
+ */
+export declare function formatChannelTemplatesSection(channels: ChannelMessagingInfo[]): string;