@tokenfactory/acc-runner 0.44.8 → 0.44.10

package/dist/machine-console/transport.d.ts

@@ -0,0 +1,57 @@
+import type { RunnerSupabaseClient } from "../supabase.js";
+import type { MachineCommandClassification } from "./policy.js";
+export type MachineCommandStream = "stdout" | "stderr" | "system";
+export type MachineCommandRunnerStatus = "running" | "cancel_requested" | "succeeded" | "failed" | "cancelled" | "expired";
+export type MachineCommandCompletionStatus = Extract<MachineCommandRunnerStatus, "succeeded" | "failed" | "cancelled" | "expired">;
+export interface ClaimedMachineCommand {
+    command_id: string;
+    session_id: string;
+    project_id: string;
+    repo: string;
+    command_text: string;
+    classification: MachineCommandClassification;
+    expires_at: string;
+}
+/**
+ * Opaque capability returned only after the runner-scoped claim RPC succeeds.
+ * Every later transport operation requires this exact object, preventing a
+ * command id from another session from being mixed into the active execution.
+ */
+export interface MachineCommandLease {
+    readonly command: ClaimedMachineCommand;
+}
+export type MachineCommandTransportErrorCode = "authorization_failed" | "transport_unavailable" | "invalid_claim" | "invalid_lease" | "invalid_status" | "invalid_output";
+export declare class MachineCommandTransportError extends Error {
+    readonly code: MachineCommandTransportErrorCode;
+    constructor(code: MachineCommandTransportErrorCode, message: string);
+}
+export interface MachineCommandTransport {
+    claim(): Promise<MachineCommandLease | null>;
+    append(lease: MachineCommandLease, stream: MachineCommandStream, content: string): Promise<void>;
+    status(lease: MachineCommandLease): Promise<MachineCommandRunnerStatus>;
+    complete(lease: MachineCommandLease, status: MachineCommandCompletionStatus, exitCode: number | null): Promise<void>;
+    refreshClient(client: RunnerSupabaseClient): void;
+}
+/**
+ * Runner-side adapter for the existing machine-session RPC transport.
+ *
+ * The database remains the authorization authority. This adapter adds a local
+ * fail-closed boundary: malformed claims never reach spawn, leases are bound to
+ * the exact claimed command/session pair, and output sequence numbers are owned
+ * by the transport rather than by event callbacks.
+ */
+export declare class SupabaseMachineCommandTransport implements MachineCommandTransport {
+    private readonly runnerId;
+    private client;
+    private readonly leases;
+    private readonly recentClaimIds;
+    private readonly recentClaimOrder;
+    constructor(client: RunnerSupabaseClient, runnerId: string);
+    refreshClient(client: RunnerSupabaseClient): void;
+    claim(): Promise<MachineCommandLease | null>;
+    append(lease: MachineCommandLease, stream: MachineCommandStream, content: string): Promise<void>;
+    status(lease: MachineCommandLease): Promise<MachineCommandRunnerStatus>;
+    complete(lease: MachineCommandLease, status: MachineCommandCompletionStatus, exitCode: number | null): Promise<void>;
+    private requireLease;
+}
+//# sourceMappingURL=transport.d.ts.map

package/dist/machine-console/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/machine-console/transport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAC;AAEhE,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAClE,MAAM,MAAM,0BAA0B,GAClC,SAAS,GACT,kBAAkB,GAClB,WAAW,GACX,QAAQ,GACR,WAAW,GACX,SAAS,CAAC;AACd,MAAM,MAAM,8BAA8B,GAAG,OAAO,CAClD,0BAA0B,EAC1B,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,CACjD,CAAC;AAEF,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,4BAA4B,CAAC;IAC7C,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;CACzC;AAED,MAAM,MAAM,gCAAgC,GACxC,sBAAsB,GACtB,uBAAuB,GACvB,eAAe,GACf,eAAe,GACf,gBAAgB,GAChB,gBAAgB,CAAC;AAErB,qBAAa,4BAA6B,SAAQ,KAAK;IAEnD,QAAQ,CAAC,IAAI,EAAE,gCAAgC;gBAAtC,IAAI,EAAE,gCAAgC,EAC/C,OAAO,EAAE,MAAM;CAKlB;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,IAAI,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjG,MAAM,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACxE,QAAQ,CACN,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,8BAA8B,EACtC,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,aAAa,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACnD;AA+DD;;;;;;;GAOG;AACH,qBAAa,+BAAgC,YAAW,uBAAuB;IAQ3E,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAP3B,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkD;IACzE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqB;IACpD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAgB;gBAG/C,MAAM,EAAE,oBAAoB,EACX,QAAQ,EAAE,MAAM;IAMnC,aAAa,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI;IAI3C,KAAK,IAAI,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IA4B5C,MAAM,CAAC,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBhG,MAAM,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAcvE,QAAQ,CACZ,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,8BAA8B,EACtC,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,OAAO,CAAC,IAAI,CAAC;IAahB,OAAO,CAAC,YAAY;CAOrB"}

package/dist/machine-console/transport.js

@@ -0,0 +1,170 @@
+export class MachineCommandTransportError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "MachineCommandTransportError";
+    }
+}
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+const REPO = /^[^/\s]+\/[^/\s]+$/;
+const STATUSES = new Set([
+    "running",
+    "cancel_requested",
+    "succeeded",
+    "failed",
+    "cancelled",
+    "expired",
+]);
+const MAX_COMMAND_CHARACTERS = 16_384;
+const MAX_OUTPUT_CHUNK_BYTES = 64 * 1024;
+const MAX_RECENT_CLAIMS = 1_024;
+function rpcError(operation, error) {
+    const detail = `${error?.code ?? ""} ${error?.message ?? ""}`;
+    const denied = /42501|unauthori[sz]ed|permission|forbidden|target_unavailable|jwt/i.test(detail);
+    return new MachineCommandTransportError(denied ? "authorization_failed" : "transport_unavailable", denied
+        ? `Machine command ${operation} was not authorized.`
+        : `Machine command ${operation} transport is unavailable.`);
+}
+function invalidClaim(message) {
+    throw new MachineCommandTransportError("invalid_claim", message);
+}
+function parseClaim(value) {
+    if (!value || typeof value !== "object")
+        invalidClaim("Runner claim payload must be an object.");
+    const row = value;
+    for (const key of ["command_id", "session_id", "project_id"]) {
+        if (typeof row[key] !== "string" || !UUID.test(row[key]))
+            invalidClaim(`Runner claim has an invalid ${key}.`);
+    }
+    if (typeof row.repo !== "string" || !REPO.test(row.repo) || row.repo !== row.repo.toLowerCase()) {
+        invalidClaim("Runner claim has an invalid repository scope.");
+    }
+    if (typeof row.command_text !== "string"
+        || row.command_text.length < 1
+        || row.command_text.length > MAX_COMMAND_CHARACTERS) {
+        invalidClaim("Runner claim has an invalid bounded command.");
+    }
+    if (row.classification !== "read" && row.classification !== "write" && row.classification !== "destructive") {
+        invalidClaim("Runner claim has an invalid command classification.");
+    }
+    if (typeof row.expires_at !== "string" || !Number.isFinite(Date.parse(row.expires_at))) {
+        invalidClaim("Runner claim has an invalid expiry.");
+    }
+    return row;
+}
+/**
+ * Runner-side adapter for the existing machine-session RPC transport.
+ *
+ * The database remains the authorization authority. This adapter adds a local
+ * fail-closed boundary: malformed claims never reach spawn, leases are bound to
+ * the exact claimed command/session pair, and output sequence numbers are owned
+ * by the transport rather than by event callbacks.
+ */
+export class SupabaseMachineCommandTransport {
+    runnerId;
+    client;
+    leases = new WeakMap();
+    recentClaimIds = new Set();
+    recentClaimOrder = [];
+    constructor(client, runnerId) {
+        this.runnerId = runnerId;
+        this.client = client;
+        if (!runnerId.trim())
+            throw new Error("runnerId is required");
+    }
+    refreshClient(client) {
+        this.client = client;
+    }
+    async claim() {
+        const { data, error } = await this.client.rpc("claim_machine_command", {
+            p_runner_id: this.runnerId,
+        });
+        if (error)
+            throw rpcError("claim", error);
+        if (!Array.isArray(data))
+            invalidClaim("Runner claim response must be an array.");
+        if (data.length === 0)
+            return null;
+        if (data.length !== 1)
+            invalidClaim("Runner claim response returned more than one command.");
+        const command = parseClaim(data[0]);
+        if (this.recentClaimIds.has(command.command_id)) {
+            invalidClaim("Runner claim replayed a command already seen by this process.");
+        }
+        this.recentClaimIds.add(command.command_id);
+        this.recentClaimOrder.push(command.command_id);
+        if (this.recentClaimOrder.length > MAX_RECENT_CLAIMS) {
+            const oldest = this.recentClaimOrder.shift();
+            if (oldest)
+                this.recentClaimIds.delete(oldest);
+        }
+        const lease = Object.freeze({ command: Object.freeze(command) });
+        this.leases.set(lease, {
+            commandId: command.command_id,
+            sessionId: command.session_id,
+            nextOutputSequence: 0,
+            settled: false,
+        });
+        return lease;
+    }
+    async append(lease, stream, content) {
+        const state = this.requireLease(lease);
+        if (state.settled)
+            throw new MachineCommandTransportError("invalid_lease", "Machine command lease is already settled.");
+        if (stream !== "stdout" && stream !== "stderr" && stream !== "system") {
+            throw new MachineCommandTransportError("invalid_output", "Machine command output stream is invalid.");
+        }
+        if (Buffer.byteLength(content) > MAX_OUTPUT_CHUNK_BYTES) {
+            throw new MachineCommandTransportError("invalid_output", "Machine command output chunk exceeds 64 KiB.");
+        }
+        const sequence = state.nextOutputSequence;
+        const { error } = await this.client.rpc("append_machine_output", {
+            p_command_id: state.commandId,
+            p_sequence_no: sequence,
+            p_stream: stream,
+            p_content: content,
+            p_runner_id: this.runnerId,
+        });
+        if (error)
+            throw rpcError("output", error);
+        state.nextOutputSequence = sequence + 1;
+    }
+    async status(lease) {
+        const state = this.requireLease(lease);
+        if (state.settled)
+            throw new MachineCommandTransportError("invalid_lease", "Machine command lease is already settled.");
+        const { data, error } = await this.client.rpc("machine_command_status_for_runner", {
+            p_command_id: state.commandId,
+            p_runner_id: this.runnerId,
+        });
+        if (error)
+            throw rpcError("status", error);
+        if (typeof data !== "string" || !STATUSES.has(data)) {
+            throw new MachineCommandTransportError("invalid_status", "Machine command status response is invalid.");
+        }
+        return data;
+    }
+    async complete(lease, status, exitCode) {
+        const state = this.requireLease(lease);
+        if (state.settled)
+            throw new MachineCommandTransportError("invalid_lease", "Machine command lease is already settled.");
+        const { error } = await this.client.rpc("complete_machine_command", {
+            p_command_id: state.commandId,
+            p_status: status,
+            p_exit_code: exitCode,
+            p_runner_id: this.runnerId,
+        });
+        if (error)
+            throw rpcError("completion", error);
+        state.settled = true;
+    }
+    requireLease(lease) {
+        const state = this.leases.get(lease);
+        if (!state || lease.command.command_id !== state.commandId || lease.command.session_id !== state.sessionId) {
+            throw new MachineCommandTransportError("invalid_lease", "Machine command lease does not belong to this transport.");
+        }
+        return state;
+    }
+}
+//# sourceMappingURL=transport.js.map

package/dist/machine-console/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../src/machine-console/transport.ts"],"names":[],"mappings":"AA2CA,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IAE1C;IADX,YACW,IAAsC,EAC/C,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAAkC;QAI/C,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AAqBD,MAAM,IAAI,GAAG,4EAA4E,CAAC;AAC1F,MAAM,IAAI,GAAG,oBAAoB,CAAC;AAClC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAA6B;IACnD,SAAS;IACT,kBAAkB;IAClB,WAAW;IACX,QAAQ;IACR,WAAW;IACX,SAAS;CACV,CAAC,CAAC;AACH,MAAM,sBAAsB,GAAG,MAAM,CAAC;AACtC,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,CAAC;AACzC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEhC,SAAS,QAAQ,CAAC,SAAiB,EAAE,KAA6D;IAChG,MAAM,MAAM,GAAG,GAAG,KAAK,EAAE,IAAI,IAAI,EAAE,IAAI,KAAK,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;IAC9D,MAAM,MAAM,GAAG,oEAAoE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjG,OAAO,IAAI,4BAA4B,CACrC,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,uBAAuB,EACzD,MAAM;QACJ,CAAC,CAAC,mBAAmB,SAAS,sBAAsB;QACpD,CAAC,CAAC,mBAAmB,SAAS,4BAA4B,CAC7D,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,IAAI,4BAA4B,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,YAAY,CAAC,yCAAyC,CAAC,CAAC;IACjG,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,KAAK,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,YAAY,CAAU,EAAE,CAAC;QACtE,IAAI,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAAE,YAAY,CAAC,+BAA+B,GAAG,GAAG,CAAC,CAAC;IAChH,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QAChG,YAAY,CAAC,+CAA+C,CAAC,CAAC;IAChE,CAAC;IACD,IACE,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ;WACjC,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;WAC3B,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,sBAAsB,EACnD,CAAC;QACD,YAAY,CAAC,8CAA8C,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,KAAK,MAAM,IAAI,GAAG,CAAC,cAAc,KAAK,OAAO,IAAI,GAAG,CAAC,cAAc,KAAK,aAAa,EAAE,CAAC;QAC5G,YAAY,CAAC,qDAAqD,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACvF,YAAY,CAAC,qCAAqC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,GAAuC,CAAC;AACjD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,+BAA+B;IAQvB;IAPX,MAAM,CAAuB;IACpB,MAAM,GAAG,IAAI,OAAO,EAAmC,CAAC;IACxD,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,gBAAgB,GAAa,EAAE,CAAC;IAEjD,YACE,MAA4B,EACX,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;QAEjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAChE,CAAC;IAED,aAAa,CAAC,MAA4B;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE;YACrE,WAAW,EAAE,IAAI,CAAC,QAAQ;SAC3B,CAAC,CAAC;QACH,IAAI,KAAK;YAAE,MAAM,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,YAAY,CAAC,yCAAyC,CAAC,CAAC;QAClF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,YAAY,CAAC,uDAAuD,CAAC,CAAC;QAC7F,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAChD,YAAY,CAAC,+DAA+D,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;YAC7C,IAAI,MAAM;gBAAE,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,KAAK,GAAwB,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE;YACrB,SAAS,EAAE,OAAO,CAAC,UAAU;YAC7B,SAAS,EAAE,OAAO,CAAC,UAAU;YAC7B,kBAAkB,EAAE,CAAC;YACrB,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA0B,EAAE,MAA4B,EAAE,OAAe;QACpF,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,OAAO;YAAE,MAAM,IAAI,4BAA4B,CAAC,eAAe,EAAE,2CAA2C,CAAC,CAAC;QACxH,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACtE,MAAM,IAAI,4BAA4B,CAAC,gBAAgB,EAAE,2CAA2C,CAAC,CAAC;QACxG,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,sBAAsB,EAAE,CAAC;YACxD,MAAM,IAAI,4BAA4B,CAAC,gBAAgB,EAAE,8CAA8C,CAAC,CAAC;QAC3G,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,kBAAkB,CAAC;QAC1C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE;YAC/D,YAAY,EAAE,KAAK,CAAC,SAAS;YAC7B,aAAa,EAAE,QAAQ;YACvB,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,OAAO;YAClB,WAAW,EAAE,IAAI,CAAC,QAAQ;SAC3B,CAAC,CAAC;QACH,IAAI,KAAK;YAAE,MAAM,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC3C,KAAK,CAAC,kBAAkB,GAAG,QAAQ,GAAG,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA0B;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,OAAO;YAAE,MAAM,IAAI,4BAA4B,CAAC,eAAe,EAAE,2CAA2C,CAAC,CAAC;QACxH,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,mCAAmC,EAAE;YACjF,YAAY,EAAE,KAAK,CAAC,SAAS;YAC7B,WAAW,EAAE,IAAI,CAAC,QAAQ;SAC3B,CAAC,CAAC;QACH,IAAI,KAAK;YAAE,MAAM,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC3C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAkC,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,4BAA4B,CAAC,gBAAgB,EAAE,6CAA6C,CAAC,CAAC;QAC1G,CAAC;QACD,OAAO,IAAkC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,KAA0B,EAC1B,MAAsC,EACtC,QAAuB;QAEvB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,OAAO;YAAE,MAAM,IAAI,4BAA4B,CAAC,eAAe,EAAE,2CAA2C,CAAC,CAAC;QACxH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,0BAA0B,EAAE;YAClE,YAAY,EAAE,KAAK,CAAC,SAAS;YAC7B,QAAQ,EAAE,MAAM;YAChB,WAAW,EAAE,QAAQ;YACrB,WAAW,EAAE,IAAI,CAAC,QAAQ;SAC3B,CAAC,CAAC;QACH,IAAI,KAAK;YAAE,MAAM,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC/C,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;IACvB,CAAC;IAEO,YAAY,CAAC,KAA0B;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;YAC3G,MAAM,IAAI,4BAA4B,CAAC,eAAe,EAAE,0DAA0D,CAAC,CAAC;QACtH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/preview-environments/control-plane.d.ts

@@ -0,0 +1,11 @@
+import type { PreviewControlPlane, PreviewEnvironmentLease } from "./types.js";
+export declare class SupabasePreviewControlPlane implements PreviewControlPlane {
+    private readonly client;
+    constructor(url: string, serviceRoleKey: string);
+    listCandidates(limit: number): Promise<PreviewEnvironmentLease[]>;
+    recordObservation(input: Parameters<PreviewControlPlane["recordObservation"]>[0]): Promise<{
+        idempotent_replay?: boolean;
+    }>;
+    audit(verb: string, environmentId: string, payload: Record<string, unknown>): Promise<void>;
+}
+//# sourceMappingURL=control-plane.d.ts.map

package/dist/preview-environments/control-plane.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-plane.d.ts","sourceRoot":"","sources":["../../src/preview-environments/control-plane.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAE/E,qBAAa,2BAA4B,YAAW,mBAAmB;IACrE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAEZ,GAAG,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM;IAQzC,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC;IAWjE,iBAAiB,CAAC,KAAK,EAAE,UAAU,CAAC,mBAAmB,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;4BAYvC,OAAO;;IAGhD,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;CASlG"}

package/dist/preview-environments/control-plane.js

@@ -0,0 +1,49 @@
+import { createClient } from "@supabase/supabase-js";
+export class SupabasePreviewControlPlane {
+    client;
+    constructor(url, serviceRoleKey) {
+        if (!url || !serviceRoleKey)
+            throw new Error("preview_control_plane_credentials_missing");
+        this.client = createClient(url, serviceRoleKey, {
+            db: { schema: "acc" },
+            auth: { persistSession: false, autoRefreshToken: false },
+        });
+    }
+    async listCandidates(limit) {
+        const { data, error } = await this.client
+            .from("preview_environments")
+            .select("id,org_id,project_id,repo,pull_request_number,head_sha,provider,provider_credential_profile_ref,deployment_identity_sha,provider_deployment_id,desired_state,observed_state,generation,lease_expires_at,updated_at")
+            .neq("observed_state", "archived")
+            .order("updated_at", { ascending: true })
+            .limit(limit);
+        if (error)
+            throw new Error(`preview_candidate_read_failed:${error.code ?? "unknown"}`);
+        return (data ?? []);
+    }
+    async recordObservation(input) {
+        const { data, error } = await this.client.rpc("record_preview_environment_observation", {
+            p_environment_id: input.environmentId,
+            p_generation: input.generation,
+            p_observed_state: input.observedState,
+            p_provider_deployment_id: input.providerDeploymentId,
+            p_preview_url: input.previewUrl ?? null,
+            p_provider_receipt_sha: input.providerReceiptSha,
+            p_failure_code: input.failureCode ?? null,
+            p_idempotency_key: input.idempotencyKey,
+        });
+        if (error)
+            throw new Error(`preview_observation_failed:${error.code ?? "unknown"}`);
+        return (data ?? {});
+    }
+    async audit(verb, environmentId, payload) {
+        const { error } = await this.client.rpc("log_activity", {
+            p_verb: verb,
+            p_target_id: environmentId,
+            p_target_type: "preview_environment",
+            p_payload: payload,
+        });
+        if (error)
+            throw new Error(`preview_audit_failed:${error.code ?? "unknown"}`);
+    }
+}
+//# sourceMappingURL=control-plane.js.map

package/dist/preview-environments/control-plane.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-plane.js","sourceRoot":"","sources":["../../src/preview-environments/control-plane.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAGrD,MAAM,OAAO,2BAA2B;IACrB,MAAM,CAAC;IAExB,YAAY,GAAW,EAAE,cAAsB;QAC7C,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC1F,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE;YAC9C,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;YACrB,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE;SACzD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAa;QAChC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM;aACtC,IAAI,CAAC,sBAAsB,CAAC;aAC5B,MAAM,CAAC,oNAAoN,CAAC;aAC5N,GAAG,CAAC,gBAAgB,EAAE,UAAU,CAAC;aACjC,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;aACxC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChB,IAAI,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC;QACvF,OAAO,CAAC,IAAI,IAAI,EAAE,CAA8B,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAA8D;QACpF,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,wCAAwC,EAAE;YACtF,gBAAgB,EAAE,KAAK,CAAC,aAAa;YACrC,YAAY,EAAE,KAAK,CAAC,UAAU;YAC9B,gBAAgB,EAAE,KAAK,CAAC,aAAa;YACrC,wBAAwB,EAAE,KAAK,CAAC,oBAAoB;YACpD,aAAa,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;YACvC,sBAAsB,EAAE,KAAK,CAAC,kBAAkB;YAChD,cAAc,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;YACzC,iBAAiB,EAAE,KAAK,CAAC,cAAc;SACxC,CAAC,CAAC;QACH,IAAI,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC;QACpF,OAAO,CAAC,IAAI,IAAI,EAAE,CAAoC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,aAAqB,EAAE,OAAgC;QAC/E,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE;YACtD,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,aAAa;YAC1B,aAAa,EAAE,qBAAqB;YACpC,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;QACH,IAAI,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC;IAChF,CAAC;CACF"}

package/dist/preview-environments/http-provider.d.ts

@@ -0,0 +1,13 @@
+import type { PreviewProviderAdapter, PreviewProviderRequest, PreviewProviderResult } from "./types.js";
+export interface HttpPreviewProviderOptions {
+    endpoint: string;
+    token: string;
+    fetchImpl?: typeof fetch;
+}
+export declare class HttpPreviewProvider implements PreviewProviderAdapter {
+    private readonly options;
+    private readonly fetchImpl;
+    constructor(options: HttpPreviewProviderOptions);
+    execute(request: PreviewProviderRequest): Promise<PreviewProviderResult>;
+}
+//# sourceMappingURL=http-provider.d.ts.map

package/dist/preview-environments/http-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-provider.d.ts","sourceRoot":"","sources":["../../src/preview-environments/http-provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACtB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AASD,qBAAa,mBAAoB,YAAW,sBAAsB;IAGpD,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAEZ,OAAO,EAAE,0BAA0B;IAQ1D,OAAO,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAyC/E"}

package/dist/preview-environments/http-provider.js

@@ -0,0 +1,64 @@
+function publicPreviewUrl(value) {
+    if (typeof value !== "string" || !value.startsWith("https://"))
+        return null;
+    const url = new URL(value);
+    if (url.username || url.password)
+        throw new Error("preview_provider_url_credentials_forbidden");
+    return url.toString();
+}
+export class HttpPreviewProvider {
+    options;
+    fetchImpl;
+    constructor(options) {
+        this.options = options;
+        const endpoint = new URL(options.endpoint);
+        if (endpoint.protocol !== "https:" || endpoint.username || endpoint.password)
+            throw new Error("preview_provider_endpoint_invalid");
+        if (!options.token)
+            throw new Error("preview_provider_token_missing");
+        this.fetchImpl = options.fetchImpl ?? fetch;
+    }
+    async execute(request) {
+        const response = await this.fetchImpl(this.options.endpoint, {
+            method: "POST",
+            headers: {
+                authorization: `Bearer ${this.options.token}`,
+                "content-type": "application/json",
+                "idempotency-key": `${request.deploymentIdentity}:${request.generation}:${request.action}`,
+            },
+            signal: request.signal,
+            body: JSON.stringify({
+                action: request.action,
+                environment_id: request.environmentId,
+                org_id: request.orgId,
+                project_id: request.projectId,
+                repo: request.repo,
+                pull_request_number: request.pullRequestNumber,
+                head_sha: request.headSha,
+                generation: request.generation,
+                deployment_identity_sha: request.deploymentIdentity,
+                provider_deployment_id: request.providerDeploymentId,
+                lease_expires_at: request.leaseExpiresAt,
+            }),
+        });
+        if (!response.ok)
+            throw new Error(`preview_provider_http_${response.status}`);
+        const body = (await response.json());
+        const state = body.observed_state;
+        if (!['ready', 'failed', 'stopped', 'archived'].includes(String(state)))
+            throw new Error("preview_provider_response_invalid");
+        if (request.action === "stop" && !["stopped", "failed"].includes(String(state)))
+            throw new Error("preview_provider_stop_state_invalid");
+        if (["create", "refresh", "promote"].includes(request.action) && !["ready", "failed"].includes(String(state)))
+            throw new Error("preview_provider_active_state_invalid");
+        if (body.provider_deployment_id !== request.providerDeploymentId)
+            throw new Error("preview_provider_identity_mismatch");
+        return {
+            providerDeploymentId: request.providerDeploymentId,
+            observedState: state,
+            previewUrl: publicPreviewUrl(body.preview_url),
+            receipt: typeof body.receipt === "object" && body.receipt ? body.receipt : {},
+        };
+    }
+}
+//# sourceMappingURL=http-provider.js.map

package/dist/preview-environments/http-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-provider.js","sourceRoot":"","sources":["../../src/preview-environments/http-provider.ts"],"names":[],"mappings":"AAYA,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChG,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,OAAO,mBAAmB;IAGD;IAFZ,SAAS,CAAe;IAEzC,YAA6B,OAAmC;QAAnC,YAAO,GAAP,OAAO,CAA4B;QAC9D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ;YAC1E,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACtE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAA+B;QAC3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;YAC3D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;gBAC7C,cAAc,EAAE,kBAAkB;gBAClC,iBAAiB,EAAE,GAAG,OAAO,CAAC,kBAAkB,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE;aAC3F;YACD,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,cAAc,EAAE,OAAO,CAAC,aAAa;gBACrC,MAAM,EAAE,OAAO,CAAC,KAAK;gBACrB,UAAU,EAAE,OAAO,CAAC,SAAS;gBAC7B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,mBAAmB,EAAE,OAAO,CAAC,iBAAiB;gBAC9C,QAAQ,EAAE,OAAO,CAAC,OAAO;gBACzB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,uBAAuB,EAAE,OAAO,CAAC,kBAAkB;gBACnD,sBAAsB,EAAE,OAAO,CAAC,oBAAoB;gBACpD,gBAAgB,EAAE,OAAO,CAAC,cAAc;aACzC,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;QAChE,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC;QAClC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7E,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3G,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,IAAI,IAAI,CAAC,sBAAsB,KAAK,OAAO,CAAC,oBAAoB;YAC9D,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,OAAO;YACL,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;YAClD,aAAa,EAAE,KAA+C;YAC9D,UAAU,EAAE,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC;YAC9C,OAAO,EAAE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAkC,CAAC,CAAC,CAAC,EAAE;SACzG,CAAC;IACJ,CAAC;CACF"}

package/dist/preview-environments/profiles.d.ts

@@ -0,0 +1,6 @@
+import type { PreviewProviderAdapter } from "./types.js";
+export declare function configuredPreviewProfiles(env?: NodeJS.ProcessEnv): string[];
+export declare function previewEnvironmentServiceEnabled(env?: NodeJS.ProcessEnv): boolean;
+export declare function previewEnvironmentCaps(env?: NodeJS.ProcessEnv): Record<string, unknown>;
+export declare function providerForProfile(provider: string, profile: string, env?: NodeJS.ProcessEnv, fetchImpl?: typeof fetch): PreviewProviderAdapter;
+//# sourceMappingURL=profiles.d.ts.map

package/dist/preview-environments/profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../src/preview-environments/profiles.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAOzD,wBAAgB,yBAAyB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,EAAE,CAMxF;AAED,wBAAgB,gCAAgC,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAM9F;AAED,wBAAgB,sBAAsB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGpG;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,SAAS,CAAC,EAAE,OAAO,KAAK,GACvB,sBAAsB,CASxB"}

package/dist/preview-environments/profiles.js

@@ -0,0 +1,34 @@
+import { HttpPreviewProvider } from "./http-provider.js";
+function envStem(profile) {
+    if (!/^[A-Za-z0-9_.-]{1,80}$/.test(profile))
+        throw new Error("preview_provider_profile_invalid");
+    return profile.toUpperCase().replace(/[^A-Z0-9]/g, "_");
+}
+export function configuredPreviewProfiles(env = process.env) {
+    return Object.keys(env)
+        .flatMap((key) => /^ACC_PREVIEW_PROVIDER_([A-Z0-9_]+)_ENDPOINT$/.exec(key)?.[1] ?? [])
+        .filter((stem) => Boolean(env[`ACC_PREVIEW_PROVIDER_${stem}_TOKEN`]))
+        .map((stem) => stem.toLowerCase())
+        .sort();
+}
+export function previewEnvironmentServiceEnabled(env = process.env) {
+    return (env.ACC_PREVIEW_ENVIRONMENT_SERVICE === "1" &&
+        Boolean(env.ACC_PREVIEW_CONTROL_PLANE_SERVICE_ROLE_KEY) &&
+        configuredPreviewProfiles(env).length > 0);
+}
+export function previewEnvironmentCaps(env = process.env) {
+    const profiles = configuredPreviewProfiles(env);
+    return profiles.length ? { preview_environments: true, preview_provider_profiles: profiles } : {};
+}
+export function providerForProfile(provider, profile, env = process.env, fetchImpl) {
+    const stem = envStem(profile);
+    const endpoint = env[`ACC_PREVIEW_PROVIDER_${stem}_ENDPOINT`];
+    const token = env[`ACC_PREVIEW_PROVIDER_${stem}_TOKEN`];
+    const configuredProvider = env[`ACC_PREVIEW_PROVIDER_${stem}_KIND`]?.toLowerCase();
+    if (!endpoint || !token)
+        throw new Error("preview_provider_profile_missing");
+    if (configuredProvider && configuredProvider !== provider.toLowerCase())
+        throw new Error("preview_provider_profile_kind_mismatch");
+    return new HttpPreviewProvider({ endpoint, token, fetchImpl });
+}
+//# sourceMappingURL=profiles.js.map

package/dist/preview-environments/profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../../src/preview-environments/profiles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAGzD,SAAS,OAAO,CAAC,OAAe;IAC9B,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACjG,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC5E,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SACpB,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,8CAA8C,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACrF,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,QAAQ,CAAC,CAAC,CAAC;SACpE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;SACjC,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnF,OAAO,CACL,GAAG,CAAC,+BAA+B,KAAK,GAAG;QAC3C,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC;QACvD,yBAAyB,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACzE,MAAM,QAAQ,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;IAChD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,yBAAyB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACpG,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,QAAgB,EAChB,OAAe,EACf,MAAyB,OAAO,CAAC,GAAG,EACpC,SAAwB;IAExB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,wBAAwB,IAAI,WAAW,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,GAAG,CAAC,wBAAwB,IAAI,QAAQ,CAAC,CAAC;IACxD,MAAM,kBAAkB,GAAG,GAAG,CAAC,wBAAwB,IAAI,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC;IACnF,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC7E,IAAI,kBAAkB,IAAI,kBAAkB,KAAK,QAAQ,CAAC,WAAW,EAAE;QACrE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,OAAO,IAAI,mBAAmB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;AACjE,CAAC"}

package/dist/preview-environments/safety.d.ts

@@ -0,0 +1,7 @@
+import type { PreviewAction, PreviewEnvironmentLease } from "./types.js";
+export declare function safePreviewCode(error: unknown): string;
+export declare function receiptSha(value: unknown): string;
+export declare function deterministicUuid(...parts: Array<string | number>): string;
+export declare function desiredAction(row: PreviewEnvironmentLease, now?: number, staleAfterMs?: number): PreviewAction | null;
+export declare function validateLease(row: PreviewEnvironmentLease): void;
+//# sourceMappingURL=safety.d.ts.map

package/dist/preview-environments/safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.d.ts","sourceRoot":"","sources":["../../src/preview-environments/safety.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAKzE,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAOtD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEjD;AAED,wBAAgB,iBAAiB,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,MAAM,CAG1E;AAED,wBAAgB,aAAa,CAC3B,GAAG,EAAE,uBAAuB,EAC5B,GAAG,SAAa,EAChB,YAAY,SAAU,GACrB,aAAa,GAAG,IAAI,CAatB;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,uBAAuB,GAAG,IAAI,CAShE"}

package/dist/preview-environments/safety.js

@@ -0,0 +1,47 @@
+import { createHash } from "node:crypto";
+import { isCommitSha, isSha256Digest } from "../commit-sha.js";
+const UUID_NAMESPACE = "acc-preview-environment-runner-v1";
+export function safePreviewCode(error) {
+    const raw = error instanceof Error ? error.message : "unknown_error";
+    return raw
+        .replace(/https?:\/\/[^\s]+/gi, "[REDACTED_URL]")
+        .replace(/(authorization|password|token|secret|key)[=:]?[^\s]*/gi, "$1=[REDACTED]")
+        .replace(/[^a-zA-Z0-9_.:[\] -]/g, "_")
+        .slice(0, 180);
+}
+export function receiptSha(value) {
+    return createHash("sha256").update(JSON.stringify(value)).digest("hex");
+}
+export function deterministicUuid(...parts) {
+    const hex = createHash("sha256").update([UUID_NAMESPACE, ...parts].join(":"), "utf8").digest("hex");
+    return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-4${hex.slice(13, 16)}-a${hex.slice(17, 20)}-${hex.slice(20, 32)}`;
+}
+export function desiredAction(row, now = Date.now(), staleAfterMs = 180_000) {
+    const staleProvision = row.observed_state === "provisioning" &&
+        Number.isFinite(Date.parse(row.updated_at)) &&
+        Date.parse(row.updated_at) + staleAfterMs <= now;
+    if (row.desired_state === "active" && ["pending", "failed", "stopped"].includes(row.observed_state))
+        return row.generation === 1 ? "create" : "refresh";
+    if (row.desired_state === "active" && staleProvision)
+        return row.generation === 1 ? "create" : "refresh";
+    if (row.desired_state === "promoted" && row.observed_state === "ready")
+        return "promote";
+    if (row.desired_state === "promoted" && staleProvision)
+        return "promote";
+    if (row.desired_state === "stopped" && !["stopped", "archived"].includes(row.observed_state))
+        return "stop";
+    return null;
+}
+export function validateLease(row) {
+    if (!isCommitSha(row.head_sha))
+        throw new Error("preview_commit_invalid");
+    if (!isSha256Digest(row.deployment_identity_sha))
+        throw new Error("preview_deployment_identity_invalid");
+    if (!/^[\w.-]+\/[\w.-]+$/.test(row.repo))
+        throw new Error("preview_repo_invalid");
+    if (!Number.isInteger(row.pull_request_number) || row.pull_request_number < 1)
+        throw new Error("preview_pull_request_invalid");
+    if (!Number.isInteger(row.generation) || row.generation < 1)
+        throw new Error("preview_generation_invalid");
+}
+//# sourceMappingURL=safety.js.map

package/dist/preview-environments/safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.js","sourceRoot":"","sources":["../../src/preview-environments/safety.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAE/D,MAAM,cAAc,GAAG,mCAAmC,CAAC;AAE3D,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;IACrE,OAAO,GAAG;SACP,OAAO,CAAC,qBAAqB,EAAE,gBAAgB,CAAC;SAChD,OAAO,CAAC,wDAAwD,EAAE,eAAe,CAAC;SAClF,OAAO,CAAC,uBAAuB,EAAE,GAAG,CAAC;SACrC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAG,KAA6B;IAChE,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,cAAc,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpG,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;AACnH,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,GAA4B,EAC5B,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAChB,YAAY,GAAG,OAAO;IAEtB,MAAM,cAAc,GAClB,GAAG,CAAC,cAAc,KAAK,cAAc;QACrC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,YAAY,IAAI,GAAG,CAAC;IACnD,IAAI,GAAG,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC;QACjG,OAAO,GAAG,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,IAAI,GAAG,CAAC,aAAa,KAAK,QAAQ,IAAI,cAAc;QAClD,OAAO,GAAG,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,IAAI,GAAG,CAAC,aAAa,KAAK,UAAU,IAAI,GAAG,CAAC,cAAc,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IACzF,IAAI,GAAG,CAAC,aAAa,KAAK,UAAU,IAAI,cAAc;QAAE,OAAO,SAAS,CAAC;IACzE,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC;QAAE,OAAO,MAAM,CAAC;IAC5G,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAA4B;IACxD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC1E,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,uBAAuB,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAClF,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,mBAAmB,GAAG,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,UAAU,GAAG,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;AAClD,CAAC"}

package/dist/preview-environments/service.d.ts

@@ -0,0 +1,36 @@
+import type { RunnerConfig } from "../config.js";
+import type { PreviewControlPlane, PreviewEnvironmentLease, PreviewProviderAdapter } from "./types.js";
+export interface PreviewEnvironmentLogger {
+    info(message: string): void;
+    error(message: string): void;
+}
+export interface PreviewEnvironmentServiceOptions {
+    env?: NodeJS.ProcessEnv;
+    pollMs?: number;
+    timeoutMs?: number;
+    batchSize?: number;
+    logger?: PreviewEnvironmentLogger;
+    controlPlane?: PreviewControlPlane;
+    providerFactory?: (provider: string, profile: string) => PreviewProviderAdapter;
+}
+export declare class PreviewEnvironmentService {
+    private readonly runnerId;
+    private readonly options;
+    private timer;
+    private active;
+    private stopping;
+    private readonly env;
+    private readonly logger;
+    private readonly pollMs;
+    private readonly timeoutMs;
+    private readonly staleAfterMs;
+    private readonly batchSize;
+    private readonly controlPlane;
+    constructor(cfg: RunnerConfig, runnerId: string, options?: PreviewEnvironmentServiceOptions);
+    start(): void;
+    stop(): Promise<void>;
+    pollOnce(): Promise<void>;
+    process(row: PreviewEnvironmentLease): Promise<"skipped" | "succeeded" | "failed">;
+}
+export { previewEnvironmentCaps, previewEnvironmentServiceEnabled } from "./profiles.js";
+//# sourceMappingURL=service.d.ts.map

package/dist/preview-environments/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/preview-environments/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAUjD,OAAO,KAAK,EACV,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,wBAAwB;IACvC,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,gCAAgC;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,wBAAwB,CAAC;IAClC,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,sBAAsB,CAAC;CACjF;AAED,qBAAa,yBAAyB;IAclC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAd1B,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAoB;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2B;IAClD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;gBAGjD,GAAG,EAAE,YAAY,EACA,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,gCAAqC;IAcjE,KAAK,IAAI,IAAI;IAQP,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IASrB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAgBzB,OAAO,CAAC,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;CAkFzF;AAMD,OAAO,EAAE,sBAAsB,EAAE,gCAAgC,EAAE,MAAM,eAAe,CAAC"}