@stigmer/server 3.18.0 → 3.19.0

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,wCAAwC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAiEhD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAgB3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAQ1E,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAW1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAKnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAK9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAc3E,OAAO,EACL,YAAY,EACZ,cAAc,EACd,QAAQ,GACT,MAAM,gCAAgC,CAAC;AAUxC,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,aAAa,GACd,MAAM,8BAA8B,CAAC;AAQtC,OAAO,EACL,sBAAsB,EACtB,cAAc,GACf,MAAM,mCAAmC,CAAC;AAC3C,wEAAwE;AACxE,yEAAyE;AACzE,oEAAoE;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAWvE,OAAO,EAAE,8BAA8B,EAAE,MAAM,sCAAsC,CAAC;AAUtF,OAAO,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAC3F,OAAO,EACL,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,0CAA0C,CAAC;AAIlD,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,uBAAuB,EACvB,aAAa,EACb,oBAAoB,EACpB,aAAa,EACb,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAC9B,yEAAyE;AACzE,+DAA+D;AAC/D,wEAAwE;AACxE,QAAQ;AACR,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,wEAAwE;AACxE,wEAAwE;AACxE,uEAAuE;AACvE,gEAAgE;AAChE,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,iCAAiC,CAAC;AAEzC,sEAAsE;AACtE,qEAAqE;AACrE,6DAA6D;AAC7D,iEAAiE;AACjE,wEAAwE;AACxE,iEAAiE;AACjE,yEAAyE;AACzE,+DAA+D;AAC/D,yEAAyE;AACzE,8DAA8D;AAC9D,wEAAwE;AACxE,uEAAuE;AACvE,mEAAmE;AACnE,2DAA2D;AAC3D,OAAO,EACL,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,iCAAiC,CAAC;AACzC,+DAA+D;AAC/D,qEAAqE;AACrE,qEAAqE;AACrE,wEAAwE;AACxE,iCAAiC;AACjC,OAAO,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAC;AACjF,oEAAoE;AACpE,wEAAwE;AACxE,sEAAsE;AACtE,qEAAqE;AACrE,uEAAuE;AACvE,kDAAkD;AAClD,OAAO,EACL,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,0EAA0E;AAC1E,uEAAuE;AACvE,oEAAoE;AACpE,uEAAuE;AACvE,oEAAoE;AACpE,wCAAwC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAMtE,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAM9B,uEAAuE;AACvE,yEAAyE;AACzE,uEAAuE;AACvE,qEAAqE;AACrE,qEAAqE;AACrE,0EAA0E;AAC1E,wEAAwE;AACxE,yEAAyE;AACzE,2EAA2E;AAC3E,iEAAiE;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAO1D,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,0EAA0E;AAC1E,0EAA0E;AAC1E,sEAAsE;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAQvE,qEAAqE;AACrE,uEAAuE;AACvE,yEAAyE;AACzE,oEAAoE;AACpE,OAAO,EAAE,mCAAmC,EAAE,MAAM,gDAAgD,CAAC;AAkBrG,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,4BAA4B,CAAC;AAEpC,qEAAqE;AACrE,uEAAuE;AACvE,0EAA0E;AAC1E,qEAAqE;AACrE,6DAA6D;AAC7D,uEAAuE;AACvE,qEAAqE;AACrE,gEAAgE;AAChE,0EAA0E;AAC1E,qEAAqE;AACrE,uEAAuE;AACvE,iEAAiE;AACjE,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,eAAe,EACf,0BAA0B,EAC1B,sBAAsB,EACtB,aAAa,GACd,MAAM,4BAA4B,CAAC;AAepC,OAAO,EAAE,kCAAkC,EAAE,MAAM,0BAA0B,CAAC;AAE9E,yEAAyE;AACzE,wEAAwE;AACxE,0EAA0E;AAC1E,0EAA0E;AAC1E,yEAAyE;AACzE,wEAAwE;AACxE,kDAAkD;AAClD,OAAO,EACL,4BAA4B,EAC5B,eAAe,EACf,gBAAgB,IAAI,sCAAsC,GAC3D,MAAM,4CAA4C,CAAC;AACpD,OAAO,EACL,0BAA0B,EAC1B,+BAA+B,EAC/B,iCAAiC,GAClC,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AA0BrE,oEAAoE;AACpE,yEAAyE;AACzE,iDAAiD;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,wCAAwC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAiEhD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAe3E,OAAO,EACL,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,iCAAiC,CAAC;AAQzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAQ1E,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAW1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAKnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAK9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAc3E,OAAO,EACL,YAAY,EACZ,cAAc,EACd,QAAQ,GACT,MAAM,gCAAgC,CAAC;AAUxC,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,aAAa,GACd,MAAM,8BAA8B,CAAC;AAQtC,OAAO,EACL,sBAAsB,EACtB,cAAc,GACf,MAAM,mCAAmC,CAAC;AAC3C,wEAAwE;AACxE,yEAAyE;AACzE,oEAAoE;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAWvE,OAAO,EAAE,8BAA8B,EAAE,MAAM,sCAAsC,CAAC;AAUtF,OAAO,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAC3F,OAAO,EACL,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,0CAA0C,CAAC;AAIlD,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,uBAAuB,EACvB,aAAa,EACb,oBAAoB,EACpB,aAAa,EACb,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAC9B,yEAAyE;AACzE,+DAA+D;AAC/D,wEAAwE;AACxE,QAAQ;AACR,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,wEAAwE;AACxE,wEAAwE;AACxE,uEAAuE;AACvE,gEAAgE;AAChE,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,iCAAiC,CAAC;AAEzC,sEAAsE;AACtE,qEAAqE;AACrE,6DAA6D;AAC7D,iEAAiE;AACjE,wEAAwE;AACxE,iEAAiE;AACjE,yEAAyE;AACzE,+DAA+D;AAC/D,yEAAyE;AACzE,8DAA8D;AAC9D,wEAAwE;AACxE,uEAAuE;AACvE,mEAAmE;AACnE,2DAA2D;AAC3D,OAAO,EACL,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,iCAAiC,CAAC;AACzC,+DAA+D;AAC/D,qEAAqE;AACrE,qEAAqE;AACrE,wEAAwE;AACxE,iCAAiC;AACjC,OAAO,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAC;AACjF,oEAAoE;AACpE,wEAAwE;AACxE,sEAAsE;AACtE,qEAAqE;AACrE,uEAAuE;AACvE,kDAAkD;AAClD,OAAO,EACL,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,0EAA0E;AAC1E,uEAAuE;AACvE,oEAAoE;AACpE,uEAAuE;AACvE,oEAAoE;AACpE,wCAAwC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAMtE,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAM9B,uEAAuE;AACvE,yEAAyE;AACzE,uEAAuE;AACvE,qEAAqE;AACrE,qEAAqE;AACrE,0EAA0E;AAC1E,wEAAwE;AACxE,yEAAyE;AACzE,2EAA2E;AAC3E,iEAAiE;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAO1D,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,0EAA0E;AAC1E,0EAA0E;AAC1E,sEAAsE;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAQvE,qEAAqE;AACrE,uEAAuE;AACvE,yEAAyE;AACzE,oEAAoE;AACpE,OAAO,EAAE,mCAAmC,EAAE,MAAM,gDAAgD,CAAC;AAkBrG,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,4BAA4B,CAAC;AAEpC,qEAAqE;AACrE,uEAAuE;AACvE,0EAA0E;AAC1E,qEAAqE;AACrE,6DAA6D;AAC7D,uEAAuE;AACvE,qEAAqE;AACrE,gEAAgE;AAChE,0EAA0E;AAC1E,qEAAqE;AACrE,uEAAuE;AACvE,iEAAiE;AACjE,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,eAAe,EACf,0BAA0B,EAC1B,sBAAsB,EACtB,aAAa,GACd,MAAM,4BAA4B,CAAC;AAepC,OAAO,EAAE,kCAAkC,EAAE,MAAM,0BAA0B,CAAC;AAE9E,yEAAyE;AACzE,wEAAwE;AACxE,0EAA0E;AAC1E,0EAA0E;AAC1E,yEAAyE;AACzE,wEAAwE;AACxE,kDAAkD;AAClD,OAAO,EACL,4BAA4B,EAC5B,eAAe,EACf,gBAAgB,IAAI,sCAAsC,GAC3D,MAAM,4CAA4C,CAAC;AACpD,OAAO,EACL,0BAA0B,EAC1B,+BAA+B,EAC/B,iCAAiC,GAClC,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AA0BrE,oEAAoE;AACpE,yEAAyE;AACzE,iDAAiD;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/pipeline/apiresource-labels.d.ts

@@ -74,6 +74,20 @@ export declare const PLUGIN_LABEL = "stigmer.ai/plugin";
  * lane deleted or an older install left behind is re-materialised.
  */
 export declare const PLUGIN_VERSION_LABEL = "stigmer.ai/plugin-version";
+/**
+ * How an MCP server's `spec.auth` came to be. The one value, `endpoint`,
+ * says the server itself completed it: the author supplied a URL and
+ * nothing about authentication, the endpoint answered the save-time probe
+ * with an OAuth challenge, and the server wrote the token variable, its
+ * declaration and the Bearer header (domain/mcpserver/complete-endpoint-auth.ts).
+ * The label is provenance, not permission: it lets the next save tell a
+ * completion it may reuse from an author's own `auth` it must not touch.
+ * Stamped through the server-stamped mechanism; dropped when the author
+ * writes their own `auth`.
+ */
+export declare const MCP_AUTH_LABEL = "stigmer.ai/mcp-auth";
+/** The MCP_AUTH_LABEL value for a completion the endpoint's own challenge produced. */
+export declare const MCP_AUTH_ENDPOINT = "endpoint";
 /** The plugin id a resource's labels claim, or undefined when unlabelled. */
 export declare function pluginIdOf(metadata: ApiResourceMetadata | undefined): string | undefined;
 /**

package/dist/pipeline/apiresource-labels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apiresource-labels.d.ts","sourceRoot":"","sources":["../../src/pipeline/apiresource-labels.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4DAA4D,CAAC;AAEtG;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,gBAAgB,CAAC;AAEnD;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,gCAA6C,CAAC;AAEjF;;;GAGG;AACH,eAAO,MAAM,oBAAoB,8BAA2C,CAAC;AAE7E;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,YAAY,sBAAmC,CAAC;AAE7D;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,SAAS,CAAC;AAE1C;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,sBAAmC,CAAC;AAE7D;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,8BAA2C,CAAC;AAE7E,6EAA6E;AAC7E,wBAAgB,UAAU,CACxB,QAAQ,EAAE,mBAAmB,GAAG,SAAS,GACxC,MAAM,GAAG,SAAS,CAGpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,mBAAmB,GAAG,SAAS,GACxC,OAAO,CAET;AAED,6EAA6E;AAC7E,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,mBAAmB,GAAG,SAAS,GACxC,OAAO,CAET"}
+{"version":3,"file":"apiresource-labels.d.ts","sourceRoot":"","sources":["../../src/pipeline/apiresource-labels.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4DAA4D,CAAC;AAEtG;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,gBAAgB,CAAC;AAEnD;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,gCAA6C,CAAC;AAEjF;;;GAGG;AACH,eAAO,MAAM,oBAAoB,8BAA2C,CAAC;AAE7E;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,YAAY,sBAAmC,CAAC;AAE7D;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,SAAS,CAAC;AAE1C;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,sBAAmC,CAAC;AAE7D;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,8BAA2C,CAAC;AAE7E;;;;;;;;;;GAUG;AACH,eAAO,MAAM,cAAc,wBAAqC,CAAC;AAEjE,uFAAuF;AACvF,eAAO,MAAM,iBAAiB,aAAa,CAAC;AAE5C,6EAA6E;AAC7E,wBAAgB,UAAU,CACxB,QAAQ,EAAE,mBAAmB,GAAG,SAAS,GACxC,MAAM,GAAG,SAAS,CAGpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,mBAAmB,GAAG,SAAS,GACxC,OAAO,CAET;AAED,6EAA6E;AAC7E,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,mBAAmB,GAAG,SAAS,GACxC,OAAO,CAET"}

package/dist/pipeline/apiresource-labels.js

@@ -52,6 +52,20 @@ export const PLUGIN_LABEL = `${RESERVED_LABEL_PREFIX}plugin`;
  * lane deleted or an older install left behind is re-materialised.
  */
 export const PLUGIN_VERSION_LABEL = `${RESERVED_LABEL_PREFIX}plugin-version`;
+/**
+ * How an MCP server's `spec.auth` came to be. The one value, `endpoint`,
+ * says the server itself completed it: the author supplied a URL and
+ * nothing about authentication, the endpoint answered the save-time probe
+ * with an OAuth challenge, and the server wrote the token variable, its
+ * declaration and the Bearer header (domain/mcpserver/complete-endpoint-auth.ts).
+ * The label is provenance, not permission: it lets the next save tell a
+ * completion it may reuse from an author's own `auth` it must not touch.
+ * Stamped through the server-stamped mechanism; dropped when the author
+ * writes their own `auth`.
+ */
+export const MCP_AUTH_LABEL = `${RESERVED_LABEL_PREFIX}mcp-auth`;
+/** The MCP_AUTH_LABEL value for a completion the endpoint's own challenge produced. */
+export const MCP_AUTH_ENDPOINT = "endpoint";
 /** The plugin id a resource's labels claim, or undefined when unlabelled. */
 export function pluginIdOf(metadata) {
     const value = metadata?.labels[PLUGIN_LABEL];

package/dist/pipeline/apiresource-labels.js.map

@@ -1 +1 @@
-{"version":3,"file":"apiresource-labels.js","sourceRoot":"","sources":["../../src/pipeline/apiresource-labels.ts"],"names":[],"mappings":"AAuBA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,aAAa,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,qBAAqB,kBAAkB,CAAC;AAEjF;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,qBAAqB,gBAAgB,CAAC;AAE7E;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,qBAAqB,QAAQ,CAAC;AAE7D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,qBAAqB,QAAQ,CAAC;AAE7D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,qBAAqB,gBAAgB,CAAC;AAE7E,6EAA6E;AAC7E,MAAM,UAAU,UAAU,CACxB,QAAyC;IAEzC,MAAM,KAAK,GAAG,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IAC7C,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AACjE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAyC;IAEzC,OAAO,QAAQ,EAAE,MAAM,CAAC,sBAAsB,CAAC,KAAK,mBAAmB,CAAC;AAC1E,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,eAAe,CAC7B,QAAyC;IAEzC,OAAO,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,KAAK,mBAAmB,CAAC;AAChE,CAAC"}
+{"version":3,"file":"apiresource-labels.js","sourceRoot":"","sources":["../../src/pipeline/apiresource-labels.ts"],"names":[],"mappings":"AAuBA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,aAAa,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,qBAAqB,kBAAkB,CAAC;AAEjF;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,qBAAqB,gBAAgB,CAAC;AAE7E;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,qBAAqB,QAAQ,CAAC;AAE7D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,qBAAqB,QAAQ,CAAC;AAE7D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,qBAAqB,gBAAgB,CAAC;AAE7E;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,qBAAqB,UAAU,CAAC;AAEjE,uFAAuF;AACvF,MAAM,CAAC,MAAM,iBAAiB,GAAG,UAAU,CAAC;AAE5C,6EAA6E;AAC7E,MAAM,UAAU,UAAU,CACxB,QAAyC;IAEzC,MAAM,KAAK,GAAG,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IAC7C,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AACjE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAyC;IAEzC,OAAO,QAAQ,EAAE,MAAM,CAAC,sBAAsB,CAAC,KAAK,mBAAmB,CAAC;AAC1E,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,eAAe,CAC7B,QAAyC;IAEzC,OAAO,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,KAAK,mBAAmB,CAAC;AAChE,CAAC"}

package/dist/sandbox/kubernetes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kubernetes.d.ts","sourceRoot":"","sources":["../../src/sandbox/kubernetes.ts"],"names":[],"mappings":"AAwCA,OAAO,KAAK,EACV,YAAY,EACZ,uBAAuB,EACvB,QAAQ,EACT,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EACV,mBAAmB,EACnB,kBAAkB,EAElB,kBAAkB,EAClB,yBAAyB,EACzB,YAAY,EACb,MAAM,kBAAkB,CAAC;AA8C1B,MAAM,WAAW,wBAAwB;IACvC,0EAA0E;IAC1E,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9D,WAAW,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,QAAQ,CAAC,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,eAAe,CAAC,UAAU,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,4DAA4D;IAC5D,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC;AAwID,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,MAAM,GACnB,QAAQ,CAWV;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,GACT,uBAAuB,CAczB;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,kBAAkB,EACvB,MAAM,EAAE,mBAAmB,GAC1B,YAAY,CA6Ed;AAMD,eAAO,MAAM,+BAA+B,EAAE,yBAgB7C,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,0CAA0C,CACxD,OAAO,EAAE,wBAAwB,EACjC,MAAM,EAAE,mBAAmB,EAC3B,MAAM,EAAE;IACN,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAC/D,GACA,kBAAkB,CA8EpB"}
+{"version":3,"file":"kubernetes.d.ts","sourceRoot":"","sources":["../../src/sandbox/kubernetes.ts"],"names":[],"mappings":"AAwCA,OAAO,KAAK,EACV,YAAY,EACZ,uBAAuB,EACvB,QAAQ,EACT,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EACV,mBAAmB,EACnB,kBAAkB,EAElB,kBAAkB,EAClB,yBAAyB,EACzB,YAAY,EACb,MAAM,kBAAkB,CAAC;AAqD1B,MAAM,WAAW,wBAAwB;IACvC,0EAA0E;IAC1E,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9D,WAAW,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,QAAQ,CAAC,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,eAAe,CAAC,UAAU,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,4DAA4D;IAC5D,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC;AAwID,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,MAAM,GACnB,QAAQ,CAWV;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,GACT,uBAAuB,CAczB;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,kBAAkB,EACvB,MAAM,EAAE,mBAAmB,GAC1B,YAAY,CA6Ed;AAMD,eAAO,MAAM,+BAA+B,EAAE,yBAgB7C,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,0CAA0C,CACxD,OAAO,EAAE,wBAAwB,EACjC,MAAM,EAAE,mBAAmB,EAC3B,MAAM,EAAE;IACN,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAC/D,GACA,kBAAkB,CA8EpB"}

package/dist/sandbox/kubernetes.js

@@ -57,7 +57,14 @@ const RUNNER_RESOURCES = {
     requests: { cpu: "500m", memory: "512Mi" },
     limits: { cpu: "2", memory: "2Gi" },
 };
-/** The persistent-workspace scopes (SandboxScope.persistentWorkspace). */
+/**
+ * The persistent-workspace scopes (SandboxScope.persistentWorkspace).
+ * Durability here is decided by SCOPE alone: this driver reads neither the
+ * environment's caller class nor any per-session policy, so every session
+ * keeps its PVC whoever asked. A driver that gives some caller classes a
+ * workspace that dies with the conversation is a composition's choice
+ * built on SandboxEnvironment.callerClass, not a built-in behaviour.
+ */
 const PERSISTENT_SCOPES = new Set([
     "session",
     "workflow",

package/dist/sandbox/kubernetes.js.map

@@ -1 +1 @@
-{"version":3,"file":"kubernetes.js","sourceRoot":"","sources":["../../src/sandbox/kubernetes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EACL,YAAY,EACZ,SAAS,EACT,SAAS,EACT,UAAU,GACX,MAAM,yBAAyB,CAAC;AAejC,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,GAChB,MAAM,aAAa,CAAC;AAErB,8EAA8E;AAC9E,oEAAoE;AACpE,0EAA0E;AAC1E,8EAA8E;AAE9E,0DAA0D;AAC1D,MAAM,qBAAqB,GAAG,QAAQ,CAAC;AACvC,+EAA+E;AAC/E,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;AACxD,2EAA2E;AAC3E,MAAM,oBAAoB,GAAG,YAAY,CAAC;AAC1C,gEAAgE;AAChE,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC;;;;GAIG;AACH,MAAM,gCAAgC,GAAG,GAAG,CAAC;AAC7C,wEAAwE;AACxE,MAAM,gBAAgB,GAAG;IACvB,QAAQ,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;IAC1C,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE;CAC3B,CAAC;AAEX,0EAA0E;AAC1E,MAAM,iBAAiB,GAA8B,IAAI,GAAG,CAAC;IAC3D,SAAS;IACT,UAAU;CACX,CAAC,CAAC;AAqBH,SAAS,gBAAgB,CAAC,SAAiB;IACzC,MAAM,UAAU,GAAG,IAAI,UAAU,EAAE,CAAC;IACpC,yEAAyE;IACzE,6DAA6D;IAC7D,UAAU,CAAC,eAAe,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAEjD,SAAS,UAAU,CAAC,KAAc;QAChC,OAAO,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;IAC7D,CAAC;IACD,SAAS,UAAU,CAAC,KAAc;QAChC,OAAO,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;IAC7D,CAAC;IAED,OAAO;QACL,KAAK,CAAC,kBAAkB,CAAC,IAAI;YAC3B,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC;oBACrD,IAAI;oBACJ,SAAS;iBACV,CAAC,CAAC;gBACH,OAAO,UAAU,CAAC,IAAI,EAAE,QAAQ,IAAI,CAAC,CAAC;YACxC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;oBACtB,OAAO,SAAS,CAAC;gBACnB,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,MAAM;YACtB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,sBAAsB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YACjE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvB,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,MAAM,IAAI,CAAC,uBAAuB,CAAC;oBACjC,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE;oBACjC,SAAS;oBACT,IAAI,EAAE,MAAM;iBACb,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,GAAG;YAChB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,qCAAqC,CAAC;oBAC/C,SAAS;oBACT,IAAI,EAAE,GAAG;iBACV,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,8DAA8D;gBAC9D,+DAA+D;gBAC/D,kBAAkB;gBAClB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvB,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,CAAC,eAAe,CAAC,UAAU;YAC9B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,0BAA0B,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;YACzE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvB,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,MAAM,IAAI,CAAC,2BAA2B,CAAC;oBACrC,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE;oBACrC,SAAS;oBACT,IAAI,EAAE,UAAU;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,QAAQ;YAClC,iEAAiE;YACjE,8DAA8D;YAC9D,4DAA4D;YAC5D,8CAA8C;YAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC;gBACrD,IAAI;gBACJ,SAAS;aACV,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;YACjD,MAAM,IAAI,CAAC,gCAAgC,CAAC;gBAC1C,IAAI;gBACJ,SAAS;gBACT,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,gBAAgB,CAAC,IAAI;YACzB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,0BAA0B,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YAC7D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvB,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,IAAI;YACrB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvB,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,IAAI;YAClB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,qCAAqC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YACxE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvB,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,4DAA4D;AAC5D,8EAA8E;AAE9E,SAAS,aAAa,CACpB,KAAmB,EACnB,EAAU;IAEV,OAAO;QACL,CAAC,wBAAwB,CAAC,EAAE,wBAAwB;QACpD,CAAC,mBAAmB,CAAC,EAAE,KAAK;QAC5B,CAAC,gBAAgB,CAAC,EAAE,EAAE;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAAmB,EACnB,EAAU,EACV,YAAoB;IAEpB,OAAO;QACL,QAAQ,EAAE;YACR,IAAI,EAAE,GAAG,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM;YACzC,MAAM,EAAE,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC;SACjC;QACD,IAAI,EAAE,QAAQ;QACd,kEAAkE;QAClE,qDAAqD;QACrD,UAAU,EAAE,YAAY,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE;KACvE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,KAAmB,EACnB,EAAU;IAEV,OAAO;QACL,QAAQ,EAAE;YACR,IAAI,EAAE,GAAG,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY;YAC/C,MAAM,EAAE,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC;SACjC;QACD,IAAI,EAAE;YACJ,WAAW,EAAE,CAAC,eAAe,CAAC;YAC9B,oEAAoE;YACpE,mEAAmE;YACnE,qBAAqB;YACrB,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE;SACzD;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAmB,EACnB,EAAU,EACV,GAAuB,EACvB,MAA2B;IAE3B,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAEhD,MAAM,YAAY,GAMb;QACH,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE;QAChC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,EAAE;QACpD,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,MAAM,CAAC,eAAe,EAAE;QACnE,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,MAAM,CAAC,eAAe,EAAE;QACnE,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,oBAAoB,EAAE;KAC5D,CAAC;IACF,IAAI,GAAG,CAAC,YAAY,KAAK,EAAE,EAAE,CAAC;QAC5B,YAAY,CAAC,IAAI,CAAC;YAChB,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE;gBACT,YAAY,EAAE,EAAE,IAAI,EAAE,GAAG,QAAQ,MAAM,EAAE,GAAG,EAAE,eAAe,EAAE;aAChE;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE;QACpC,IAAI,EAAE;YACJ,QAAQ,EAAE,CAAC;YACX,iEAAiE;YACjE,kEAAkE;YAClE,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;YAC9B,QAAQ,EAAE;gBACR,WAAW,EAAE;oBACX,CAAC,wBAAwB,CAAC,EAAE,wBAAwB;oBACpD,CAAC,gBAAgB,CAAC,EAAE,EAAE;iBACvB;aACF;YACD,QAAQ,EAAE;gBACR,QAAQ,EAAE,EAAE,MAAM,EAAE;gBACpB,IAAI,EAAE;oBACJ,6BAA6B,EAAE,gCAAgC;oBAC/D,4BAA4B,EAAE,KAAK;oBACnC,eAAe,EAAE,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE;oBAC/D,UAAU,EAAE;wBACV;4BACE,IAAI,EAAE,qBAAqB;4BAC3B,KAAK,EAAE,MAAM,CAAC,WAAW;4BACzB,OAAO,EAAE,CAAC,GAAG,cAAc,CAAC;4BAC5B,GAAG,EAAE,YAAY;4BACjB,SAAS,EAAE;gCACT,QAAQ,EAAE,EAAE,GAAG,gBAAgB,CAAC,QAAQ,EAAE;gCAC1C,MAAM,EAAE,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE;6BACvC;4BACD,eAAe,EAAE;gCACf,wBAAwB,EAAE,KAAK;gCAC/B,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE;6BAChC;4BACD,YAAY,EAAE;gCACZ,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,oBAAoB,EAAE;6BACvD;yBACF;qBACF;oBACD,OAAO,EAAE;wBACP,UAAU;4BACR,CAAC,CAAC;gCACE,IAAI,EAAE,WAAW;gCACjB,qBAAqB,EAAE,EAAE,SAAS,EAAE,GAAG,QAAQ,YAAY,EAAE;6BAC9D;4BACH,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE;qBACxC;iBACF;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E,MAAM,CAAC,MAAM,+BAA+B,GAA8B,CAAC,EACzE,MAAM,EACN,MAAM,GACP,EAAE,EAAE;IACH,IAAI,MAAM,CAAC,eAAe,KAAK,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,wIAAwI,CACzI,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,eAAe,KAAK,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,sIAAsI,CACvI,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC7D,OAAO,0CAA0C,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAC7E,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,0CAA0C,CACxD,OAAiC,EACjC,MAA2B,EAC3B,MAEC;IAED,KAAK,UAAU,MAAM,CACnB,KAAmB,EACnB,EAAU,EACV,GAAuB;QAEvB,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,gEAAgE;YAChE,iEAAiE;YACjE,qDAAqD;YACrD,MAAM,OAAO,CAAC,WAAW,CACvB,kBAAkB,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,CAChD,CAAC;YACF,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjC,MAAM,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,OAAO,CAAC,eAAe,CAC3B,sBAAsB,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,CAC/C,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;gBAC5C,KAAK;gBACL,EAAE;gBACF,UAAU,EAAE,QAAQ;gBACpB,SAAS,EAAE,GAAG,CAAC,SAAS;aACzB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;YACnB,MAAM,OAAO,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;gBAC1C,KAAK;gBACL,EAAE;gBACF,UAAU,EAAE,QAAQ;aACrB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,oEAAoE;QACpE,iDAAiD;IACnD,CAAC;IAED,KAAK,UAAU,WAAW,CAAC,KAAmB,EAAE,EAAU;QACxD,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5C,MAAM,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,OAAO,CAAC,YAAY,CAAC,GAAG,QAAQ,MAAM,CAAC,CAAC;QAC9C,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,QAAQ,YAAY,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;YAC9C,KAAK;YACL,EAAE;YACF,UAAU,EAAE,QAAQ;SACrB,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,oBAAoB,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC;QAC3E,yBAAyB,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC;QAC3E,qBAAqB,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE,EAAE,CAC1C,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,GAAG,CAAC;QACtC,0BAA0B,EAAE,CAAC,WAAW,EAAE,EAAE,CAC1C,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC;QACtC,KAAK,CAAC,oBAAoB,CAAC,gBAAgB,EAAE,GAAG;YAC9C,MAAM,MAAM,CAAC,SAAS,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;YAC/C,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QACD,yBAAyB,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC;QAC3E,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE;YACnB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAC/C,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC,CAC3B,CAAC;YACF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,OAAO,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAChD,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"kubernetes.js","sourceRoot":"","sources":["../../src/sandbox/kubernetes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EACL,YAAY,EACZ,SAAS,EACT,SAAS,EACT,UAAU,GACX,MAAM,yBAAyB,CAAC;AAejC,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,GAChB,MAAM,aAAa,CAAC;AAErB,8EAA8E;AAC9E,oEAAoE;AACpE,0EAA0E;AAC1E,8EAA8E;AAE9E,0DAA0D;AAC1D,MAAM,qBAAqB,GAAG,QAAQ,CAAC;AACvC,+EAA+E;AAC/E,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;AACxD,2EAA2E;AAC3E,MAAM,oBAAoB,GAAG,YAAY,CAAC;AAC1C,gEAAgE;AAChE,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC;;;;GAIG;AACH,MAAM,gCAAgC,GAAG,GAAG,CAAC;AAC7C,wEAAwE;AACxE,MAAM,gBAAgB,GAAG;IACvB,QAAQ,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;IAC1C,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE;CAC3B,CAAC;AAEX;;;;;;;GAOG;AACH,MAAM,iBAAiB,GAA8B,IAAI,GAAG,CAAC;IAC3D,SAAS;IACT,UAAU;CACX,CAAC,CAAC;AAqBH,SAAS,gBAAgB,CAAC,SAAiB;IACzC,MAAM,UAAU,GAAG,IAAI,UAAU,EAAE,CAAC;IACpC,yEAAyE;IACzE,6DAA6D;IAC7D,UAAU,CAAC,eAAe,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAEjD,SAAS,UAAU,CAAC,KAAc;QAChC,OAAO,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;IAC7D,CAAC;IACD,SAAS,UAAU,CAAC,KAAc;QAChC,OAAO,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;IAC7D,CAAC;IAED,OAAO;QACL,KAAK,CAAC,kBAAkB,CAAC,IAAI;YAC3B,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC;oBACrD,IAAI;oBACJ,SAAS;iBACV,CAAC,CAAC;gBACH,OAAO,UAAU,CAAC,IAAI,EAAE,QAAQ,IAAI,CAAC,CAAC;YACxC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;oBACtB,OAAO,SAAS,CAAC;gBACnB,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,MAAM;YACtB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,sBAAsB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YACjE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvB,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,MAAM,IAAI,CAAC,uBAAuB,CAAC;oBACjC,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE;oBACjC,SAAS;oBACT,IAAI,EAAE,MAAM;iBACb,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,GAAG;YAChB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,qCAAqC,CAAC;oBAC/C,SAAS;oBACT,IAAI,EAAE,GAAG;iBACV,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,8DAA8D;gBAC9D,+DAA+D;gBAC/D,kBAAkB;gBAClB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvB,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,CAAC,eAAe,CAAC,UAAU;YAC9B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,0BAA0B,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;YACzE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvB,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,MAAM,IAAI,CAAC,2BAA2B,CAAC;oBACrC,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE;oBACrC,SAAS;oBACT,IAAI,EAAE,UAAU;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,QAAQ;YAClC,iEAAiE;YACjE,8DAA8D;YAC9D,4DAA4D;YAC5D,8CAA8C;YAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC;gBACrD,IAAI;gBACJ,SAAS;aACV,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;YACjD,MAAM,IAAI,CAAC,gCAAgC,CAAC;gBAC1C,IAAI;gBACJ,SAAS;gBACT,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,gBAAgB,CAAC,IAAI;YACzB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,0BAA0B,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YAC7D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvB,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,IAAI;YACrB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvB,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,IAAI;YAClB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,qCAAqC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YACxE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvB,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,4DAA4D;AAC5D,8EAA8E;AAE9E,SAAS,aAAa,CACpB,KAAmB,EACnB,EAAU;IAEV,OAAO;QACL,CAAC,wBAAwB,CAAC,EAAE,wBAAwB;QACpD,CAAC,mBAAmB,CAAC,EAAE,KAAK;QAC5B,CAAC,gBAAgB,CAAC,EAAE,EAAE;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAAmB,EACnB,EAAU,EACV,YAAoB;IAEpB,OAAO;QACL,QAAQ,EAAE;YACR,IAAI,EAAE,GAAG,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM;YACzC,MAAM,EAAE,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC;SACjC;QACD,IAAI,EAAE,QAAQ;QACd,kEAAkE;QAClE,qDAAqD;QACrD,UAAU,EAAE,YAAY,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE;KACvE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,KAAmB,EACnB,EAAU;IAEV,OAAO;QACL,QAAQ,EAAE;YACR,IAAI,EAAE,GAAG,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY;YAC/C,MAAM,EAAE,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC;SACjC;QACD,IAAI,EAAE;YACJ,WAAW,EAAE,CAAC,eAAe,CAAC;YAC9B,oEAAoE;YACpE,mEAAmE;YACnE,qBAAqB;YACrB,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE;SACzD;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAmB,EACnB,EAAU,EACV,GAAuB,EACvB,MAA2B;IAE3B,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAEhD,MAAM,YAAY,GAMb;QACH,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE;QAChC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,EAAE;QACpD,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,MAAM,CAAC,eAAe,EAAE;QACnE,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,MAAM,CAAC,eAAe,EAAE;QACnE,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,oBAAoB,EAAE;KAC5D,CAAC;IACF,IAAI,GAAG,CAAC,YAAY,KAAK,EAAE,EAAE,CAAC;QAC5B,YAAY,CAAC,IAAI,CAAC;YAChB,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE;gBACT,YAAY,EAAE,EAAE,IAAI,EAAE,GAAG,QAAQ,MAAM,EAAE,GAAG,EAAE,eAAe,EAAE;aAChE;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE;QACpC,IAAI,EAAE;YACJ,QAAQ,EAAE,CAAC;YACX,iEAAiE;YACjE,kEAAkE;YAClE,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;YAC9B,QAAQ,EAAE;gBACR,WAAW,EAAE;oBACX,CAAC,wBAAwB,CAAC,EAAE,wBAAwB;oBACpD,CAAC,gBAAgB,CAAC,EAAE,EAAE;iBACvB;aACF;YACD,QAAQ,EAAE;gBACR,QAAQ,EAAE,EAAE,MAAM,EAAE;gBACpB,IAAI,EAAE;oBACJ,6BAA6B,EAAE,gCAAgC;oBAC/D,4BAA4B,EAAE,KAAK;oBACnC,eAAe,EAAE,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE;oBAC/D,UAAU,EAAE;wBACV;4BACE,IAAI,EAAE,qBAAqB;4BAC3B,KAAK,EAAE,MAAM,CAAC,WAAW;4BACzB,OAAO,EAAE,CAAC,GAAG,cAAc,CAAC;4BAC5B,GAAG,EAAE,YAAY;4BACjB,SAAS,EAAE;gCACT,QAAQ,EAAE,EAAE,GAAG,gBAAgB,CAAC,QAAQ,EAAE;gCAC1C,MAAM,EAAE,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE;6BACvC;4BACD,eAAe,EAAE;gCACf,wBAAwB,EAAE,KAAK;gCAC/B,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE;6BAChC;4BACD,YAAY,EAAE;gCACZ,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,oBAAoB,EAAE;6BACvD;yBACF;qBACF;oBACD,OAAO,EAAE;wBACP,UAAU;4BACR,CAAC,CAAC;gCACE,IAAI,EAAE,WAAW;gCACjB,qBAAqB,EAAE,EAAE,SAAS,EAAE,GAAG,QAAQ,YAAY,EAAE;6BAC9D;4BACH,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE;qBACxC;iBACF;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E,MAAM,CAAC,MAAM,+BAA+B,GAA8B,CAAC,EACzE,MAAM,EACN,MAAM,GACP,EAAE,EAAE;IACH,IAAI,MAAM,CAAC,eAAe,KAAK,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,wIAAwI,CACzI,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,eAAe,KAAK,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,sIAAsI,CACvI,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC7D,OAAO,0CAA0C,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAC7E,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,0CAA0C,CACxD,OAAiC,EACjC,MAA2B,EAC3B,MAEC;IAED,KAAK,UAAU,MAAM,CACnB,KAAmB,EACnB,EAAU,EACV,GAAuB;QAEvB,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,gEAAgE;YAChE,iEAAiE;YACjE,qDAAqD;YACrD,MAAM,OAAO,CAAC,WAAW,CACvB,kBAAkB,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,CAChD,CAAC;YACF,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjC,MAAM,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,OAAO,CAAC,eAAe,CAC3B,sBAAsB,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,CAC/C,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;gBAC5C,KAAK;gBACL,EAAE;gBACF,UAAU,EAAE,QAAQ;gBACpB,SAAS,EAAE,GAAG,CAAC,SAAS;aACzB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;YACnB,MAAM,OAAO,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;gBAC1C,KAAK;gBACL,EAAE;gBACF,UAAU,EAAE,QAAQ;aACrB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,oEAAoE;QACpE,iDAAiD;IACnD,CAAC;IAED,KAAK,UAAU,WAAW,CAAC,KAAmB,EAAE,EAAU;QACxD,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5C,MAAM,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,OAAO,CAAC,YAAY,CAAC,GAAG,QAAQ,MAAM,CAAC,CAAC;QAC9C,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,QAAQ,YAAY,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;YAC9C,KAAK;YACL,EAAE;YACF,UAAU,EAAE,QAAQ;SACrB,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,oBAAoB,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC;QAC3E,yBAAyB,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC;QAC3E,qBAAqB,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE,EAAE,CAC1C,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,GAAG,CAAC;QACtC,0BAA0B,EAAE,CAAC,WAAW,EAAE,EAAE,CAC1C,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC;QACtC,KAAK,CAAC,oBAAoB,CAAC,gBAAgB,EAAE,GAAG;YAC9C,MAAM,MAAM,CAAC,SAAS,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;YAC/C,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QACD,yBAAyB,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC;QAC3E,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE;YACnB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAC/C,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC,CAC3B,CAAC;YACF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,OAAO,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAChD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/sandbox/provisioner.d.ts

@@ -39,12 +39,15 @@
  * runner process polls the queues.
  */
 import type { Logger } from "../boot/logger.js";
+import type { CallerClass } from "../extensions/identity.js";
 /**
- * The runtime handed to a provisioner for one sandbox: which queue the
- * sandboxed runner must poll and the credential it authenticates with.
- * Deliberately minimal (the Java SandboxEnvironment carries the same two
- * load-bearing fields plus cloud-only accounting) — endpoints, images,
- * and resource shapes are DRIVER configuration, not per-sandbox state.
+ * What is TRUE about one provisioning request, handed to a driver: which
+ * queue the sandboxed runner must poll, the credential it authenticates
+ * with, and the class of the caller whose request is being served. Facts
+ * only — what a driver DOES with them (the workspace's durability, the
+ * pod's shape, whether a warm pool is consulted) is driver policy and
+ * never travels here. Endpoints, images and resource shapes are driver
+ * configuration, not per-sandbox state.
  */
 export interface SandboxEnvironment {
     /** The Temporal task queue the sandboxed runner polls (session:{id} / wfexec:{id}). */
@@ -55,6 +58,18 @@ export interface SandboxEnvironment {
      * and EC decrypt falls back to redaction, the oss#535 posture.
      */
     readonly stigmerToken: string;
+    /**
+     * The class of the caller whose request provisioned this sandbox — the
+     * identity interceptor's word for it (`user`, `internal`, a composed
+     * verifier's own lane such as a guest or a scheduled fire). A driver
+     * that gives some session classes a workspace that does not outlive the
+     * conversation reads it here; the built-in drivers (`local-process`,
+     * `docker`, `kubernetes`) ignore it and keep every session persistent.
+     * Required rather than optional so a construction site that forgets it
+     * fails to compile instead of silently reading as a persistent user
+     * session to every driver.
+     */
+    readonly callerClass: CallerClass;
 }
 /** One sandbox's observed live state (the Q5 probe result). */
 export type SandboxProbeState = "absent" | "stopped" | "running";

package/dist/sandbox/provisioner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provisioner.d.ts","sourceRoot":"","sources":["../../src/sandbox/provisioner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEhD;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,uFAAuF;IACvF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,+DAA+D;AAC/D,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;AAEjE,uEAAuE;AACvE,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,oBAAoB,CAClB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,kBAAkB,GACtB,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,uEAAuE;IACvE,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D;;;OAGG;IACH,qBAAqB,CACnB,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,kBAAkB,GACtB,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,wEAAwE;IACxE,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D;;;;OAIG;IACH,oBAAoB,CAClB,gBAAgB,EAAE,MAAM,EACxB,GAAG,EAAE,kBAAkB,GACtB,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,uEAAuE;IACvE,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,4EAA4E;IAC5E,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACpE;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,sFAAsF;IACtF,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,wEAAwE;IACxE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,0DAA0D;IAC1D,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,2DAA2D;IAC3D,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC;AAED,qGAAqG;AACrG,MAAM,MAAM,yBAAyB,GAAG,CAAC,OAAO,EAAE;IAChD,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,KAAK,kBAAkB,CAAC;AAEzB;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,oDAIrC,CAAC;AAEX;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;IAAE,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAC1E,gBAAgB,EAAE,WAAW,CAAC,MAAM,EAAE,yBAAyB,CAAC,EAChE,mBAAmB,EAAE,WAAW,CAAC,MAAM,EAAE,yBAAyB,CAAC,GAClE,kBAAkB,GAAG,SAAS,CAehC"}
+{"version":3,"file":"provisioner.d.ts","sourceRoot":"","sources":["../../src/sandbox/provisioner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAE7D;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAkB;IACjC,uFAAuF;IACvF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;CACnC;AAED,+DAA+D;AAC/D,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;AAEjE,uEAAuE;AACvE,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,oBAAoB,CAClB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,kBAAkB,GACtB,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,uEAAuE;IACvE,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D;;;OAGG;IACH,qBAAqB,CACnB,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,kBAAkB,GACtB,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,wEAAwE;IACxE,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D;;;;OAIG;IACH,oBAAoB,CAClB,gBAAgB,EAAE,MAAM,EACxB,GAAG,EAAE,kBAAkB,GACtB,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,uEAAuE;IACvE,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,4EAA4E;IAC5E,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACpE;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,sFAAsF;IACtF,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,wEAAwE;IACxE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,0DAA0D;IAC1D,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,2DAA2D;IAC3D,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC;AAED,qGAAqG;AACrG,MAAM,MAAM,yBAAyB,GAAG,CAAC,OAAO,EAAE;IAChD,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,KAAK,kBAAkB,CAAC;AAEzB;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,oDAIrC,CAAC;AAEX;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;IAAE,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAC1E,gBAAgB,EAAE,WAAW,CAAC,MAAM,EAAE,yBAAyB,CAAC,EAChE,mBAAmB,EAAE,WAAW,CAAC,MAAM,EAAE,yBAAyB,CAAC,GAClE,kBAAkB,GAAG,SAAS,CAehC"}

package/dist/sandbox/provisioner.js.map

@@ -1 +1 @@
-{"version":3,"file":"provisioner.js","sourceRoot":"","sources":["../../src/sandbox/provisioner.ts"],"names":[],"mappings":"AAyIA;;;;GAIG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG;IAChD,eAAe;IACf,QAAQ;IACR,YAAY;CACJ,CAAC;AAEX;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAY,EACZ,OAA0E,EAC1E,gBAAgE,EAChE,mBAAmE;IAEnE,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAChB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG;YACZ,GAAG,gBAAgB,CAAC,IAAI,EAAE;YAC1B,GAAG,mBAAmB,CAAC,IAAI,EAAE;SAC9B,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,qCAAqC,IAAI,qBAAqB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CACpF,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"provisioner.js","sourceRoot":"","sources":["../../src/sandbox/provisioner.ts"],"names":[],"mappings":"AAwJA;;;;GAIG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG;IAChD,eAAe;IACf,QAAQ;IACR,YAAY;CACJ,CAAC;AAEX;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAY,EACZ,OAA0E,EAC1E,gBAAgE,EAChE,mBAAmE;IAEnE,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAChB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG;YACZ,GAAG,gBAAgB,CAAC,IAAI,EAAE;YAC1B,GAAG,mBAAmB,CAAC,IAAI,EAAE;SAC9B,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,qCAAqC,IAAI,qBAAqB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CACpF,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;AAC1B,CAAC"}

package/dist/sandbox/steps.d.ts

@@ -5,6 +5,7 @@ import { WorkflowExecutionSchema } from "@stigmer/protos/ai/stigmer/agentic/work
 import { ExecutionPhase as WorkflowExecutionPhase } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/enum_pb";
 import type { Logger } from "../boot/logger.js";
 import type { AgentExecutionTemporalConfig } from "../domain/agentexecution/temporal/config.js";
+import type { CallerIdentity } from "../extensions/identity.js";
 import { type WorkflowExecutionTemporalConfig } from "../domain/workflowexecution/temporal/config.js";
 import type { PipelineStep } from "../pipeline/pipeline.js";
 import type { Store } from "../store/interface.js";
@@ -15,6 +16,16 @@ import { type SandboxLane } from "./lane.js";
  * read the same on both editions).
  */
 export declare const SANDBOX_PROVISIONING_FAILED_PREFIX = "Sandbox provisioning failed: ";
+/**
+ * The two facts about the requesting caller a sandbox ensure carries, cut
+ * from the chain's CallerIdentity (the domain/identityaccount/actor.ts
+ * shape): the id rides into the credential mint, so the session token is
+ * minted FOR the caller; the class rides onto the driver's environment,
+ * so a driver can decide the workspace's durability by who asked. A step
+ * hands `ctx.callerIdentity` in whole; the pick keeps a test's fixture to
+ * the two fields the body reads.
+ */
+export type SandboxCaller = Pick<CallerIdentity, "identityId" | "callerClass">;
 type AgentExecutionCreateDesc = typeof AgentExecutionSchema;
 export interface EnsureSessionSandboxDeps {
     readonly store: Store;
@@ -41,12 +52,15 @@ export declare function newEnsureSessionSandboxStep(deps: EnsureSessionSandboxDe
  * chains' differing context shapes (newState vs loaded execution) meet
  * at this seam instead.
  *
- * `callerIdentityId` rides into the credential mint (lane.ts): the Java
- * ensure step mints session tokens FOR the requesting caller, so the
- * capability mint needs the identity the OSS execution-scoped mint never
- * did. Empty when the invoking site has no caller.
+ * The caller splits two ways (SandboxCaller): `identityId` rides into the
+ * credential mint (lane.ts) — the Java ensure step mints session tokens
+ * FOR the requesting caller, so the capability mint needs the identity
+ * the OSS execution-scoped mint never did — and `callerClass` rides onto
+ * the driver's environment as the one request fact a driver may decide
+ * durability by. The chain always has a caller: the in-process transport
+ * mints `internal` for the server's own calls.
  */
-export declare function ensureSessionSandboxForExecution(deps: EnsureSessionSandboxDeps, execution: AgentExecution, callerIdentityId: string): Promise<void>;
+export declare function ensureSessionSandboxForExecution(deps: EnsureSessionSandboxDeps, execution: AgentExecution, caller: SandboxCaller): Promise<void>;
 export interface EnsureWorkflowSandboxDeps {
     readonly logger: Logger;
     readonly lane: SandboxLane;
@@ -66,10 +80,10 @@ export declare function newEnsureWorkflowSandboxStep(deps: EnsureWorkflowSandbox
  * re-provision (lifecycle.ts — the previous sandbox was deprovisioned at
  * the terminal FAILED, so a recovered execution needs a fresh one before
  * its fresh workflow starts). Throws Unavailable on provisioning failure
- * — the critical posture in both chains. `callerIdentityId` rides into
- * the credential mint exactly as on the session body.
+ * — the critical posture in both chains. The caller splits exactly as on
+ * the session body: id to the mint, class to the environment.
  */
-export declare function ensureWorkflowSandboxForExecution(deps: EnsureWorkflowSandboxDeps, execution: WorkflowExecution, callerIdentityId: string): Promise<void>;
+export declare function ensureWorkflowSandboxForExecution(deps: EnsureWorkflowSandboxDeps, execution: WorkflowExecution, caller: SandboxCaller): Promise<void>;
 /**
  * Observes one persisted status write and fires the workflow-sandbox
  * teardown on a transition INTO a terminal phase — fire-and-forget

package/dist/sandbox/steps.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"steps.d.ts","sourceRoot":"","sources":["../../src/sandbox/steps.ts"],"names":[],"mappings":"AAuCA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6DAA6D,CAAC;AAClG,OAAO,EACL,oBAAoB,EAErB,MAAM,6DAA6D,CAAC;AAErE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gEAAgE,CAAC;AACxG,OAAO,EAAE,uBAAuB,EAAE,MAAM,gEAAgE,CAAC;AACzG,OAAO,EAAE,cAAc,IAAI,sBAAsB,EAAE,MAAM,iEAAiE,CAAC;AAG3H,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EAEL,KAAK,+BAA+B,EACrC,MAAM,gDAAgD,CAAC;AAExD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAM5D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAoB,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AAE/D;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,kCACd,CAAC;AAElC,KAAK,wBAAwB,GAAG,OAAO,oBAAoB,CAAC;AAE5D,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,4BAA4B,CAAC;CACvD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,wBAAwB,GAC7B,YAAY,CAAC,wBAAwB,CAAC,CAWxC;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gCAAgC,CACpD,IAAI,EAAE,wBAAwB,EAC9B,SAAS,EAAE,cAAc,EACzB,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,IAAI,CAAC,CA+Df;AAsCD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,+BAA+B,CAAC;CAC1D;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,yBAAyB,GAC9B,YAAY,CAAC,OAAO,uBAAuB,CAAC,CAW9C;AAED;;;;;;;GAOG;AACH,wBAAsB,iCAAiC,CACrD,IAAI,EAAE,yBAAyB,EAC/B,SAAS,EAAE,iBAAiB,EAC5B,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,IAAI,CAAC,CA8Cf;AAUD;;;;;;;GAOG;AACH,MAAM,MAAM,+BAA+B,GAAG,CAC5C,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,sBAAsB,EACrC,YAAY,EAAE,sBAAsB,KACjC,IAAI,CAAC;AAEV,wBAAgB,kCAAkC,CAChD,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,MAAM,GACb,+BAA+B,CA6BjC;AAED;;;;;;GAMG;AACH,wBAAsB,mCAAmC,CACvD,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAYf"}
+{"version":3,"file":"steps.d.ts","sourceRoot":"","sources":["../../src/sandbox/steps.ts"],"names":[],"mappings":"AAuCA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6DAA6D,CAAC;AAClG,OAAO,EACL,oBAAoB,EAErB,MAAM,6DAA6D,CAAC;AAErE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gEAAgE,CAAC;AACxG,OAAO,EAAE,uBAAuB,EAAE,MAAM,gEAAgE,CAAC;AACzG,OAAO,EAAE,cAAc,IAAI,sBAAsB,EAAE,MAAM,iEAAiE,CAAC;AAG3H,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAEL,KAAK,+BAA+B,EACrC,MAAM,gDAAgD,CAAC;AAExD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAM5D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAoB,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AAE/D;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,kCACd,CAAC;AAElC;;;;;;;;GAQG;AACH,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,EAAE,YAAY,GAAG,aAAa,CAAC,CAAC;AAE/E,KAAK,wBAAwB,GAAG,OAAO,oBAAoB,CAAC;AAE5D,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,4BAA4B,CAAC;CACvD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,wBAAwB,GAC7B,YAAY,CAAC,wBAAwB,CAAC,CAWxC;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gCAAgC,CACpD,IAAI,EAAE,wBAAwB,EAC9B,SAAS,EAAE,cAAc,EACzB,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,IAAI,CAAC,CAgEf;AAsCD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,+BAA+B,CAAC;CAC1D;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,yBAAyB,GAC9B,YAAY,CAAC,OAAO,uBAAuB,CAAC,CAW9C;AAED;;;;;;;GAOG;AACH,wBAAsB,iCAAiC,CACrD,IAAI,EAAE,yBAAyB,EAC/B,SAAS,EAAE,iBAAiB,EAC5B,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,IAAI,CAAC,CA+Cf;AAUD;;;;;;;GAOG;AACH,MAAM,MAAM,+BAA+B,GAAG,CAC5C,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,sBAAsB,EACrC,YAAY,EAAE,sBAAsB,KACjC,IAAI,CAAC;AAEV,wBAAgB,kCAAkC,CAChD,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,MAAM,GACb,+BAA+B,CA6BjC;AAED;;;;;;GAMG;AACH,wBAAsB,mCAAmC,CACvD,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAYf"}

package/dist/sandbox/steps.js

@@ -66,7 +66,7 @@ export function newEnsureSessionSandboxStep(deps) {
     return {
         name: "EnsureSessionSandbox",
         async execute(ctx) {
-            await ensureSessionSandboxForExecution(deps, ctx.newState, ctx.callerIdentity.identityId);
+            await ensureSessionSandboxForExecution(deps, ctx.newState, ctx.callerIdentity);
         },
     };
 }
@@ -77,12 +77,15 @@ export function newEnsureSessionSandboxStep(deps) {
  * chains' differing context shapes (newState vs loaded execution) meet
  * at this seam instead.
  *
- * `callerIdentityId` rides into the credential mint (lane.ts): the Java
- * ensure step mints session tokens FOR the requesting caller, so the
- * capability mint needs the identity the OSS execution-scoped mint never
- * did. Empty when the invoking site has no caller.
+ * The caller splits two ways (SandboxCaller): `identityId` rides into the
+ * credential mint (lane.ts) — the Java ensure step mints session tokens
+ * FOR the requesting caller, so the capability mint needs the identity
+ * the OSS execution-scoped mint never did — and `callerClass` rides onto
+ * the driver's environment as the one request fact a driver may decide
+ * durability by. The chain always has a caller: the in-process transport
+ * mints `internal` for the server's own calls.
  */
-export async function ensureSessionSandboxForExecution(deps, execution, callerIdentityId) {
+export async function ensureSessionSandboxForExecution(deps, execution, caller) {
     if (!deps.lane.enabled) {
         return;
     }
@@ -115,8 +118,9 @@ export async function ensureSessionSandboxForExecution(deps, execution, callerId
                 sessionId,
                 executionId,
                 org: execution.metadata?.org ?? "",
-                callerIdentityId,
+                callerIdentityId: caller.identityId,
             }, deps.logger),
+            callerClass: caller.callerClass,
         });
     }
     catch (error) {
@@ -168,7 +172,7 @@ export function newEnsureWorkflowSandboxStep(deps) {
     return {
         name: "EnsureWorkflowSandbox",
         async execute(ctx) {
-            await ensureWorkflowSandboxForExecution(deps, ctx.newState, ctx.callerIdentity.identityId);
+            await ensureWorkflowSandboxForExecution(deps, ctx.newState, ctx.callerIdentity);
         },
     };
 }
@@ -177,10 +181,10 @@ export function newEnsureWorkflowSandboxStep(deps) {
  * re-provision (lifecycle.ts — the previous sandbox was deprovisioned at
  * the terminal FAILED, so a recovered execution needs a fresh one before
  * its fresh workflow starts). Throws Unavailable on provisioning failure
- * — the critical posture in both chains. `callerIdentityId` rides into
- * the credential mint exactly as on the session body.
+ * — the critical posture in both chains. The caller splits exactly as on
+ * the session body: id to the mint, class to the environment.
  */
-export async function ensureWorkflowSandboxForExecution(deps, execution, callerIdentityId) {
+export async function ensureWorkflowSandboxForExecution(deps, execution, caller) {
     if (!deps.lane.enabled) {
         return;
     }
@@ -202,8 +206,9 @@ export async function ensureWorkflowSandboxForExecution(deps, execution, callerI
                 sessionId: "",
                 executionId,
                 org: execution.metadata?.org ?? "",
-                callerIdentityId,
+                callerIdentityId: caller.identityId,
             }, deps.logger),
+            callerClass: caller.callerClass,
         });
     }
     catch (error) {

package/dist/sandbox/steps.js.map

@@ -1 +1 @@
-{"version":3,"file":"steps.js","sourceRoot":"","sources":["../../src/sandbox/steps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAG5C,OAAO,EACL,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,6DAA6D,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,uDAAuD,CAAC;AAGxF,OAAO,EAAE,cAAc,IAAI,sBAAsB,EAAE,MAAM,iEAAiE,CAAC;AAC3H,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAItH,OAAO,EACL,0BAA0B,GAE3B,MAAM,gDAAgD,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,OAAO,EACL,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAErF,OAAO,EAAE,gBAAgB,EAAoB,MAAM,WAAW,CAAC;AAE/D;;;;GAIG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAC7C,+BAA+B,CAAC;AAWlC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,2BAA2B,CACzC,IAA8B;IAE9B,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,KAAK,CAAC,OAAO,CAAC,GAAG;YACf,MAAM,gCAAgC,CACpC,IAAI,EACJ,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,cAAc,CAAC,UAAU,CAC9B,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,IAA8B,EAC9B,SAAyB,EACzB,gBAAwB;IAExB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;IACjD,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC;IAClD,mEAAmE;IACnE,kEAAkE;IAClE,iDAAiD;IACjD,IAAI,SAAS,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,iBAAiB,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;QACzE,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAC7C,IAAI,CAAC,KAAK,EACV,SAAS,EACT,IAAI,CAAC,cAAc,EACnB,EAAE,EACF,IAAI,CAAC,MAAM,CACZ,CAAC;QACF,IAAI,QAAQ,CAAC,eAAe,KAAK,eAAe,CAAC,KAAK,EAAE,CAAC;YACvD,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,CAAC,SAAS,KAAK,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,+DAA+D;YAC/D,gEAAgE;YAChE,iEAAiE;YACjE,4BAA4B;YAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,kEAAkE,EAClE,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAC1D,CAAC;YACF,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAAC,SAAS,EAAE;YACrD,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,YAAY,EAAE,gBAAgB,CAC5B,IAAI,EACJ;gBACE,KAAK,EAAE,SAAS;gBAChB,SAAS;gBACT,WAAW;gBACX,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE;gBAClC,gBAAgB;aACjB,EACD,IAAI,CAAC,MAAM,CACZ;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,gEAAgE;QAChE,iEAAiE;QACjE,+DAA+D;QAC/D,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,+FAA+F,EAC/F;YACE,WAAW;YACX,SAAS;YACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CACF,CAAC;QACF,MAAM,wBAAwB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,wBAAwB,CACrC,KAAY,EACZ,MAAc,EACd,WAAmB,EACnB,KAAc;IAEd,MAAM,OAAO,GACX,kCAAkC;QAClC,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,cAAc,CACxB,eAAe,CAAC,eAAe,EAC/B,WAAW,EACX,oBAAoB,EACpB,CAAC,SAAyB,EAAE,EAAE;YAC5B,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,0BAA0B,CAAC,CAAC;YACxD,IAAI,SAAS,CAAC,MAAM,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;gBAClC,SAAS,CAAC,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC;YACnC,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE;YAC/D,WAAW;YACX,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAQD;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAC1C,IAA+B;IAE/B,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,KAAK,CAAC,OAAO,CAAC,GAAG;YACf,MAAM,iCAAiC,CACrC,IAAI,EACJ,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,cAAc,CAAC,UAAU,CAC9B,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,IAA+B,EAC/B,SAA4B,EAC5B,gBAAwB;IAExB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;IACjD,IACE,WAAW,KAAK,EAAE;QAClB,IAAI,CAAC,cAAc,CAAC,uBAAuB,KAAK,0BAA0B,EAC1E,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,wBAAwB,CACvC,WAAW,EACX,SAAS,CAAC,IAAI,EAAE,eAAe,IAAI,eAAe,CAAC,WAAW,EAC9D,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,MAAM,CACZ,CAAC;IACF,IAAI,QAAQ,CAAC,eAAe,KAAK,eAAe,CAAC,KAAK,EAAE,CAAC;QACvD,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,WAAW,EAAE;YACxD,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,YAAY,EAAE,gBAAgB,CAC5B,IAAI,EACJ;gBACE,KAAK,EAAE,UAAU;gBACjB,SAAS,EAAE,EAAE;gBACb,WAAW;gBACX,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE;gBAClC,gBAAgB;aACjB,EACD,IAAI,CAAC,MAAM,CACZ;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,6DAA6D,EAC7D;YACE,WAAW;YACX,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CACF,CAAC;QACF,MAAM,gBAAgB,CAAC,sCAAsC,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,MAAM,wBAAwB,GAAwC,IAAI,GAAG,CAAC;IAC5E,sBAAsB,CAAC,mBAAmB;IAC1C,sBAAsB,CAAC,gBAAgB;IACvC,sBAAsB,CAAC,mBAAmB;IAC1C,sBAAsB,CAAC,oBAAoB;CAC5C,CAAC,CAAC;AAgBH,MAAM,UAAU,kCAAkC,CAChD,IAAiB,EACjB,MAAc;IAEd,OAAO,CAAC,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,EAAE;QAClD,IACE,CAAC,IAAI,CAAC,OAAO;YACb,aAAa,KAAK,YAAY;YAC9B,CAAC,wBAAwB,CAAC,GAAG,CAAC,YAAY,CAAC,EAC3C,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,IAAI,CAAC,WAAW,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC,IAAI,CAChE,GAAG,EAAE;YACH,MAAM,CAAC,IAAI,CAAC,kDAAkD,EAAE;gBAC9D,WAAW;gBACX,KAAK,EAAE,sBAAsB,CAAC,YAAY,CAAC;aAC5C,CAAC,CAAC;QACL,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;YACjB,+DAA+D;YAC/D,0DAA0D;YAC1D,MAAM,CAAC,KAAK,CACV,6DAA6D,EAC7D;gBACE,WAAW;gBACX,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CACF,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,IAAiB,EACjB,MAAc,EACd,SAAiB;IAEjB,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QACtC,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,4DAA4D,EAAE;YACzE,SAAS;YACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}
+{"version":3,"file":"steps.js","sourceRoot":"","sources":["../../src/sandbox/steps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAG5C,OAAO,EACL,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,6DAA6D,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,uDAAuD,CAAC;AAGxF,OAAO,EAAE,cAAc,IAAI,sBAAsB,EAAE,MAAM,iEAAiE,CAAC;AAC3H,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAKtH,OAAO,EACL,0BAA0B,GAE3B,MAAM,gDAAgD,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,OAAO,EACL,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAErF,OAAO,EAAE,gBAAgB,EAAoB,MAAM,WAAW,CAAC;AAE/D;;;;GAIG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAC7C,+BAA+B,CAAC;AAsBlC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,2BAA2B,CACzC,IAA8B;IAE9B,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,KAAK,CAAC,OAAO,CAAC,GAAG;YACf,MAAM,gCAAgC,CACpC,IAAI,EACJ,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,cAAc,CACnB,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,IAA8B,EAC9B,SAAyB,EACzB,MAAqB;IAErB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;IACjD,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC;IAClD,mEAAmE;IACnE,kEAAkE;IAClE,iDAAiD;IACjD,IAAI,SAAS,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,iBAAiB,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;QACzE,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAC7C,IAAI,CAAC,KAAK,EACV,SAAS,EACT,IAAI,CAAC,cAAc,EACnB,EAAE,EACF,IAAI,CAAC,MAAM,CACZ,CAAC;QACF,IAAI,QAAQ,CAAC,eAAe,KAAK,eAAe,CAAC,KAAK,EAAE,CAAC;YACvD,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,CAAC,SAAS,KAAK,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,+DAA+D;YAC/D,gEAAgE;YAChE,iEAAiE;YACjE,4BAA4B;YAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,kEAAkE,EAClE,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAC1D,CAAC;YACF,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAAC,SAAS,EAAE;YACrD,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,YAAY,EAAE,gBAAgB,CAC5B,IAAI,EACJ;gBACE,KAAK,EAAE,SAAS;gBAChB,SAAS;gBACT,WAAW;gBACX,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE;gBAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU;aACpC,EACD,IAAI,CAAC,MAAM,CACZ;YACD,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,gEAAgE;QAChE,iEAAiE;QACjE,+DAA+D;QAC/D,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,+FAA+F,EAC/F;YACE,WAAW;YACX,SAAS;YACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CACF,CAAC;QACF,MAAM,wBAAwB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,wBAAwB,CACrC,KAAY,EACZ,MAAc,EACd,WAAmB,EACnB,KAAc;IAEd,MAAM,OAAO,GACX,kCAAkC;QAClC,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,cAAc,CACxB,eAAe,CAAC,eAAe,EAC/B,WAAW,EACX,oBAAoB,EACpB,CAAC,SAAyB,EAAE,EAAE;YAC5B,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,0BAA0B,CAAC,CAAC;YACxD,IAAI,SAAS,CAAC,MAAM,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;gBAClC,SAAS,CAAC,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC;YACnC,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE;YAC/D,WAAW;YACX,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAQD;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAC1C,IAA+B;IAE/B,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,KAAK,CAAC,OAAO,CAAC,GAAG;YACf,MAAM,iCAAiC,CACrC,IAAI,EACJ,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,cAAc,CACnB,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,IAA+B,EAC/B,SAA4B,EAC5B,MAAqB;IAErB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;IACjD,IACE,WAAW,KAAK,EAAE;QAClB,IAAI,CAAC,cAAc,CAAC,uBAAuB,KAAK,0BAA0B,EAC1E,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,wBAAwB,CACvC,WAAW,EACX,SAAS,CAAC,IAAI,EAAE,eAAe,IAAI,eAAe,CAAC,WAAW,EAC9D,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,MAAM,CACZ,CAAC;IACF,IAAI,QAAQ,CAAC,eAAe,KAAK,eAAe,CAAC,KAAK,EAAE,CAAC;QACvD,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,WAAW,EAAE;YACxD,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,YAAY,EAAE,gBAAgB,CAC5B,IAAI,EACJ;gBACE,KAAK,EAAE,UAAU;gBACjB,SAAS,EAAE,EAAE;gBACb,WAAW;gBACX,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE;gBAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU;aACpC,EACD,IAAI,CAAC,MAAM,CACZ;YACD,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,6DAA6D,EAC7D;YACE,WAAW;YACX,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CACF,CAAC;QACF,MAAM,gBAAgB,CAAC,sCAAsC,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,MAAM,wBAAwB,GAAwC,IAAI,GAAG,CAAC;IAC5E,sBAAsB,CAAC,mBAAmB;IAC1C,sBAAsB,CAAC,gBAAgB;IACvC,sBAAsB,CAAC,mBAAmB;IAC1C,sBAAsB,CAAC,oBAAoB;CAC5C,CAAC,CAAC;AAgBH,MAAM,UAAU,kCAAkC,CAChD,IAAiB,EACjB,MAAc;IAEd,OAAO,CAAC,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,EAAE;QAClD,IACE,CAAC,IAAI,CAAC,OAAO;YACb,aAAa,KAAK,YAAY;YAC9B,CAAC,wBAAwB,CAAC,GAAG,CAAC,YAAY,CAAC,EAC3C,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,IAAI,CAAC,WAAW,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC,IAAI,CAChE,GAAG,EAAE;YACH,MAAM,CAAC,IAAI,CAAC,kDAAkD,EAAE;gBAC9D,WAAW;gBACX,KAAK,EAAE,sBAAsB,CAAC,YAAY,CAAC;aAC5C,CAAC,CAAC;QACL,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;YACjB,+DAA+D;YAC/D,0DAA0D;YAC1D,MAAM,CAAC,KAAK,CACV,6DAA6D,EAC7D;gBACE,WAAW;gBACX,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CACF,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,IAAiB,EACjB,MAAc,EACd,SAAiB;IAEjB,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QACtC,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,4DAA4D,EAAE;YACzE,SAAS;YACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stigmer/server",
-  "version": "3.18.0",
+  "version": "3.19.0",
   "description": "The Stigmer OSS control plane as a composable library: composeServer, the extension registry and the driver seams a composition builds on. The self-contained deployable of the same server is @stigmer/server-slim.",
   "license": "Apache-2.0",
   "type": "module",
@@ -62,10 +62,11 @@
     "@connectrpc/connect-node": "^2.0.0",
     "@kubernetes/client-node": "2.0.0",
     "@opentelemetry/api": "^1.9.0",
-    "@stigmer/plugin-package": "3.18.0",
-    "@stigmer/protos": "3.18.0",
-    "@stigmer/temporal-codecs": "3.18.0",
-    "@stigmer/zip-structure": "3.18.0",
+    "@stigmer/outbound": "3.19.0",
+    "@stigmer/plugin-package": "3.19.0",
+    "@stigmer/protos": "3.19.0",
+    "@stigmer/temporal-codecs": "3.19.0",
+    "@stigmer/zip-structure": "3.19.0",
     "@temporalio/activity": "1.16.2",
     "@temporalio/client": "1.16.2",
     "@temporalio/common": "1.16.2",

package/src/boot/__tests__/oauth-redirect-uri.test.ts

@@ -0,0 +1,38 @@
+/**
+ * Pins the OAuth redirect-URI posture: a configured value wins, a served
+ * console on a known port derives the console's callback page at
+ * localhost, and a server with no console or no known port derives nothing
+ * (today's warn and refusal stand).
+ */
+import { describe, expect, it } from "vitest";
+
+import { CONSOLE_OAUTH_CALLBACK_PATH, resolveOAuthRedirectUri } from "../oauth-redirect-uri.js";
+
+describe("resolveOAuthRedirectUri", () => {
+  it("keeps a configured value whatever else is true", () => {
+    expect(resolveOAuthRedirectUri({ configured: "https://app.stigmer.test/auth/oauth/callback", servesConsole: true, port: 7777 })).toEqual({
+      kind: "configured",
+      uri: "https://app.stigmer.test/auth/oauth/callback",
+    });
+    expect(resolveOAuthRedirectUri({ configured: "https://app.stigmer.test/cb", servesConsole: false, port: 0 })).toEqual({
+      kind: "configured",
+      uri: "https://app.stigmer.test/cb",
+    });
+  });
+
+  it("derives the console's callback page at localhost on the unified port when the console is served", () => {
+    expect(resolveOAuthRedirectUri({ configured: "", servesConsole: true, port: 7777 })).toEqual({
+      kind: "derived",
+      uri: `http://localhost:7777${CONSOLE_OAUTH_CALLBACK_PATH}`,
+    });
+    expect(CONSOLE_OAUTH_CALLBACK_PATH).toBe("/auth/oauth/callback");
+  });
+
+  it("derives nothing for a server that serves no console", () => {
+    expect(resolveOAuthRedirectUri({ configured: "", servesConsole: false, port: 7777 })).toEqual({ kind: "absent" });
+  });
+
+  it("derives nothing when the port is not known until listen", () => {
+    expect(resolveOAuthRedirectUri({ configured: "", servesConsole: true, port: 0 })).toEqual({ kind: "absent" });
+  });
+});

package/src/boot/compose.ts

@@ -40,6 +40,7 @@ import { authorizationPostureOf } from "../authorization/posture.js";
 import { newBuiltInScheduleFireCaller } from "../authorization/schedule-fire-caller.js";
 import type { Authorizer } from "../extensions/authorizer.js";
 import { ABSENT_LICENSE_STATUS } from "../extensions/license-status.js";
+import { relaxedEgressPolicy } from "../extensions/outbound-egress.js";
 import type { ListReadScope } from "../extensions/list-read-scope.js";
 import type { OrganizationDirectory } from "../extensions/organization-directory.js";
 import type { ScheduleFireCallerMint } from "../extensions/schedule-fire-caller.js";
@@ -86,6 +87,7 @@ import { newDirectAccountProvisioner } from "../domain/identityaccount/provision
 import { newResourceIdentityAccountStore } from "../domain/identityaccount/resource-store.js";
 import { registerIamPolicyServices } from "../domain/iampolicy/controller.js";
 import { newIamPolicyGrantPath } from "../domain/iampolicy/grant-path.js";
+import { asFetch, guardedFetch, nodeLookup } from "@stigmer/outbound/egress";
 import { newOrganizationOnlyGrantScope } from "../domain/iampolicy/grant-scope.js";
 import { newMembershipRules } from "../domain/iampolicy/membership.js";
 import { newResourceIamPolicyStore } from "../domain/iampolicy/resource-store.js";
@@ -164,6 +166,7 @@ import { PostgresStore } from "../store/postgres/store.js";
 import { SqliteStore } from "../store/sqlite/store.js";
 import type { Store } from "../store/interface.js";
 import { resolveExtensions } from "../extensions/registry.js";
+import { resolveOAuthRedirectUri } from "./oauth-redirect-uri.js";
 import type { ServerExtension } from "../extensions/registry.js";
 import { registerWorkflowServices } from "../domain/workflow/controller.js";
 import {
@@ -1101,14 +1104,46 @@ export async function composeServer(
     config: temporalConfig,
     logger,
   });
-  // WARN-degrade, not boot-fatal (Go server.go:722-729): every OAuth RPC
-  // except initiateOAuthConnect works without the redirect URI, and
-  // initiate refuses with the pinned FailedPrecondition copy.
-  if (config.oauthRedirectUri === "") {
-    logger.warn(
-      "STIGMER_OAUTH_REDIRECT_URI is not set — OAuth Connect flows for MCP servers are unavailable (initiateOAuthConnect will refuse)",
-    );
+  // The OAuth callback: configured, or derived from the served console's
+  // own origin when it serves one on a known port (boot/oauth-redirect-uri.ts
+  // carries the posture). Absent is WARN-degrade, not boot-fatal (Go
+  // server.go:722-729): every OAuth RPC except initiateOAuthConnect works
+  // without the redirect URI, and initiate refuses with the pinned
+  // FailedPrecondition copy.
+  const oauthRedirect = resolveOAuthRedirectUri({
+    configured: config.oauthRedirectUri,
+    servesConsole: consoleAssets !== undefined,
+    port: options.portOverride ?? config.grpcPort,
+  });
+  switch (oauthRedirect.kind) {
+    case "configured":
+      break;
+    case "derived":
+      logger.info("STIGMER_OAUTH_REDIRECT_URI is not set — deriving the served console's callback for MCP server OAuth Connect", {
+        redirectUri: oauthRedirect.uri,
+      });
+      break;
+    case "absent":
+      logger.warn(
+        "STIGMER_OAUTH_REDIRECT_URI is not set — OAuth Connect flows for MCP servers are unavailable (initiateOAuthConnect will refuse)",
+      );
+      break;
+    default: {
+      const exhaustive: never = oauthRedirect;
+      throw new Error(String(exhaustive));
+    }
   }
+  const oauthRedirectUri = oauthRedirect.kind === "absent" ? "" : oauthRedirect.uri;
+  // The ONE fetch the McpServer domain dials user-supplied URLs with: the
+  // endpoint it probes at save time and the login server it reaches on
+  // Sign in. Every hop is judged under the edition's egress policy
+  // (`drivers.outboundEgress`; the default is open source's relaxed
+  // posture, installed at this `??` site like the permissive Authorizer).
+  // `options.fetchImpl` is the test seam under the guard.
+  const outboundFetch = guardedFetch(
+    extensions.drivers.outboundEgress ?? relaxedEgressPolicy(),
+    { fetchImpl: options.fetchImpl ?? fetch, lookup: nodeLookup() },
+  );
   // The SAME `routes` function registers every service on BOTH the serving
   // router and the in-process router transport (createInProcessClients).
   // Handlers are stateless over the same store, so the two routers behave
@@ -1334,6 +1369,9 @@ export async function composeServer(
         executionContextCreator: () =>
           requireInProcess().executionContextCreator,
         managedEnvService,
+        // The run-start token refresh dials the vendor's token endpoint;
+        // it rides the same egress-guarded fetch as every other OAuth call.
+        fetchImpl: asFetch(outboundFetch),
       },
     });
     registerWorkflowServices(router, {
@@ -1414,7 +1452,8 @@ export async function composeServer(
         oauthGrants: store.oauthGrants,
         pendingOAuthStates: store.pendingOAuthStates,
         secretService,
-        oauthRedirectUri: config.oauthRedirectUri,
+        oauthRedirectUri,
+        outboundFetch,
       },
     });
     registerSkillServices(router, {

package/src/boot/config.ts

@@ -109,8 +109,12 @@ export interface ServerConfig {
   readonly gitHubOAuthClientSecret: string;
   /**
    * The OAuth callback URL for the McpServer OAuth Connect flows
-   * (STIGMER_OAUTH_REDIRECT_URI; Go config.go OAuthRedirectURI). Unset is
-   * a WARN at wiring time, not a boot failure — every RPC except
+   * (STIGMER_OAUTH_REDIRECT_URI; Go config.go OAuthRedirectURI). Unset, a
+   * server that serves the web console on its unified port derives the
+   * console's own callback page at `http://localhost:<port>` (the
+   * `trusted-local` reading; boot/oauth-redirect-uri.ts), so a local
+   * install signs in without being told. Unset on a server that serves no
+   * console is a WARN at wiring time, not a boot failure — every RPC except
    * initiateOAuthConnect works without it, and initiate refuses with a
    * FailedPrecondition naming the variable (the pinned copy).
    */