@tokenfactory/acc-runner 0.44.8 → 0.44.9

package/dist/preview-environments/control-plane.js

@@ -0,0 +1,49 @@
+import { createClient } from "@supabase/supabase-js";
+export class SupabasePreviewControlPlane {
+    client;
+    constructor(url, serviceRoleKey) {
+        if (!url || !serviceRoleKey)
+            throw new Error("preview_control_plane_credentials_missing");
+        this.client = createClient(url, serviceRoleKey, {
+            db: { schema: "acc" },
+            auth: { persistSession: false, autoRefreshToken: false },
+        });
+    }
+    async listCandidates(limit) {
+        const { data, error } = await this.client
+            .from("preview_environments")
+            .select("id,org_id,project_id,repo,pull_request_number,head_sha,provider,provider_credential_profile_ref,deployment_identity_sha,provider_deployment_id,desired_state,observed_state,generation,lease_expires_at,updated_at")
+            .neq("observed_state", "archived")
+            .order("updated_at", { ascending: true })
+            .limit(limit);
+        if (error)
+            throw new Error(`preview_candidate_read_failed:${error.code ?? "unknown"}`);
+        return (data ?? []);
+    }
+    async recordObservation(input) {
+        const { data, error } = await this.client.rpc("record_preview_environment_observation", {
+            p_environment_id: input.environmentId,
+            p_generation: input.generation,
+            p_observed_state: input.observedState,
+            p_provider_deployment_id: input.providerDeploymentId,
+            p_preview_url: input.previewUrl ?? null,
+            p_provider_receipt_sha: input.providerReceiptSha,
+            p_failure_code: input.failureCode ?? null,
+            p_idempotency_key: input.idempotencyKey,
+        });
+        if (error)
+            throw new Error(`preview_observation_failed:${error.code ?? "unknown"}`);
+        return (data ?? {});
+    }
+    async audit(verb, environmentId, payload) {
+        const { error } = await this.client.rpc("log_activity", {
+            p_verb: verb,
+            p_target_id: environmentId,
+            p_target_type: "preview_environment",
+            p_payload: payload,
+        });
+        if (error)
+            throw new Error(`preview_audit_failed:${error.code ?? "unknown"}`);
+    }
+}
+//# sourceMappingURL=control-plane.js.map

package/dist/preview-environments/control-plane.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-plane.js","sourceRoot":"","sources":["../../src/preview-environments/control-plane.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAGrD,MAAM,OAAO,2BAA2B;IACrB,MAAM,CAAC;IAExB,YAAY,GAAW,EAAE,cAAsB;QAC7C,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC1F,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE;YAC9C,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;YACrB,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE;SACzD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAa;QAChC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM;aACtC,IAAI,CAAC,sBAAsB,CAAC;aAC5B,MAAM,CAAC,oNAAoN,CAAC;aAC5N,GAAG,CAAC,gBAAgB,EAAE,UAAU,CAAC;aACjC,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;aACxC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChB,IAAI,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC;QACvF,OAAO,CAAC,IAAI,IAAI,EAAE,CAA8B,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAA8D;QACpF,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,wCAAwC,EAAE;YACtF,gBAAgB,EAAE,KAAK,CAAC,aAAa;YACrC,YAAY,EAAE,KAAK,CAAC,UAAU;YAC9B,gBAAgB,EAAE,KAAK,CAAC,aAAa;YACrC,wBAAwB,EAAE,KAAK,CAAC,oBAAoB;YACpD,aAAa,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;YACvC,sBAAsB,EAAE,KAAK,CAAC,kBAAkB;YAChD,cAAc,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;YACzC,iBAAiB,EAAE,KAAK,CAAC,cAAc;SACxC,CAAC,CAAC;QACH,IAAI,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC;QACpF,OAAO,CAAC,IAAI,IAAI,EAAE,CAAoC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,aAAqB,EAAE,OAAgC;QAC/E,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE;YACtD,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,aAAa;YAC1B,aAAa,EAAE,qBAAqB;YACpC,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;QACH,IAAI,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC;IAChF,CAAC;CACF"}

package/dist/preview-environments/http-provider.d.ts

@@ -0,0 +1,13 @@
+import type { PreviewProviderAdapter, PreviewProviderRequest, PreviewProviderResult } from "./types.js";
+export interface HttpPreviewProviderOptions {
+    endpoint: string;
+    token: string;
+    fetchImpl?: typeof fetch;
+}
+export declare class HttpPreviewProvider implements PreviewProviderAdapter {
+    private readonly options;
+    private readonly fetchImpl;
+    constructor(options: HttpPreviewProviderOptions);
+    execute(request: PreviewProviderRequest): Promise<PreviewProviderResult>;
+}
+//# sourceMappingURL=http-provider.d.ts.map

package/dist/preview-environments/http-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-provider.d.ts","sourceRoot":"","sources":["../../src/preview-environments/http-provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACtB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AASD,qBAAa,mBAAoB,YAAW,sBAAsB;IAGpD,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAEZ,OAAO,EAAE,0BAA0B;IAQ1D,OAAO,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAyC/E"}

package/dist/preview-environments/http-provider.js

@@ -0,0 +1,64 @@
+function publicPreviewUrl(value) {
+    if (typeof value !== "string" || !value.startsWith("https://"))
+        return null;
+    const url = new URL(value);
+    if (url.username || url.password)
+        throw new Error("preview_provider_url_credentials_forbidden");
+    return url.toString();
+}
+export class HttpPreviewProvider {
+    options;
+    fetchImpl;
+    constructor(options) {
+        this.options = options;
+        const endpoint = new URL(options.endpoint);
+        if (endpoint.protocol !== "https:" || endpoint.username || endpoint.password)
+            throw new Error("preview_provider_endpoint_invalid");
+        if (!options.token)
+            throw new Error("preview_provider_token_missing");
+        this.fetchImpl = options.fetchImpl ?? fetch;
+    }
+    async execute(request) {
+        const response = await this.fetchImpl(this.options.endpoint, {
+            method: "POST",
+            headers: {
+                authorization: `Bearer ${this.options.token}`,
+                "content-type": "application/json",
+                "idempotency-key": `${request.deploymentIdentity}:${request.generation}:${request.action}`,
+            },
+            signal: request.signal,
+            body: JSON.stringify({
+                action: request.action,
+                environment_id: request.environmentId,
+                org_id: request.orgId,
+                project_id: request.projectId,
+                repo: request.repo,
+                pull_request_number: request.pullRequestNumber,
+                head_sha: request.headSha,
+                generation: request.generation,
+                deployment_identity_sha: request.deploymentIdentity,
+                provider_deployment_id: request.providerDeploymentId,
+                lease_expires_at: request.leaseExpiresAt,
+            }),
+        });
+        if (!response.ok)
+            throw new Error(`preview_provider_http_${response.status}`);
+        const body = (await response.json());
+        const state = body.observed_state;
+        if (!['ready', 'failed', 'stopped', 'archived'].includes(String(state)))
+            throw new Error("preview_provider_response_invalid");
+        if (request.action === "stop" && !["stopped", "failed"].includes(String(state)))
+            throw new Error("preview_provider_stop_state_invalid");
+        if (["create", "refresh", "promote"].includes(request.action) && !["ready", "failed"].includes(String(state)))
+            throw new Error("preview_provider_active_state_invalid");
+        if (body.provider_deployment_id !== request.providerDeploymentId)
+            throw new Error("preview_provider_identity_mismatch");
+        return {
+            providerDeploymentId: request.providerDeploymentId,
+            observedState: state,
+            previewUrl: publicPreviewUrl(body.preview_url),
+            receipt: typeof body.receipt === "object" && body.receipt ? body.receipt : {},
+        };
+    }
+}
+//# sourceMappingURL=http-provider.js.map

package/dist/preview-environments/http-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-provider.js","sourceRoot":"","sources":["../../src/preview-environments/http-provider.ts"],"names":[],"mappings":"AAYA,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChG,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,OAAO,mBAAmB;IAGD;IAFZ,SAAS,CAAe;IAEzC,YAA6B,OAAmC;QAAnC,YAAO,GAAP,OAAO,CAA4B;QAC9D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ;YAC1E,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACtE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAA+B;QAC3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;YAC3D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;gBAC7C,cAAc,EAAE,kBAAkB;gBAClC,iBAAiB,EAAE,GAAG,OAAO,CAAC,kBAAkB,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE;aAC3F;YACD,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,cAAc,EAAE,OAAO,CAAC,aAAa;gBACrC,MAAM,EAAE,OAAO,CAAC,KAAK;gBACrB,UAAU,EAAE,OAAO,CAAC,SAAS;gBAC7B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,mBAAmB,EAAE,OAAO,CAAC,iBAAiB;gBAC9C,QAAQ,EAAE,OAAO,CAAC,OAAO;gBACzB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,uBAAuB,EAAE,OAAO,CAAC,kBAAkB;gBACnD,sBAAsB,EAAE,OAAO,CAAC,oBAAoB;gBACpD,gBAAgB,EAAE,OAAO,CAAC,cAAc;aACzC,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;QAChE,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC;QAClC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7E,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3G,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,IAAI,IAAI,CAAC,sBAAsB,KAAK,OAAO,CAAC,oBAAoB;YAC9D,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,OAAO;YACL,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;YAClD,aAAa,EAAE,KAA+C;YAC9D,UAAU,EAAE,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC;YAC9C,OAAO,EAAE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAkC,CAAC,CAAC,CAAC,EAAE;SACzG,CAAC;IACJ,CAAC;CACF"}

package/dist/preview-environments/profiles.d.ts

@@ -0,0 +1,6 @@
+import type { PreviewProviderAdapter } from "./types.js";
+export declare function configuredPreviewProfiles(env?: NodeJS.ProcessEnv): string[];
+export declare function previewEnvironmentServiceEnabled(env?: NodeJS.ProcessEnv): boolean;
+export declare function previewEnvironmentCaps(env?: NodeJS.ProcessEnv): Record<string, unknown>;
+export declare function providerForProfile(provider: string, profile: string, env?: NodeJS.ProcessEnv, fetchImpl?: typeof fetch): PreviewProviderAdapter;
+//# sourceMappingURL=profiles.d.ts.map

package/dist/preview-environments/profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../src/preview-environments/profiles.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAOzD,wBAAgB,yBAAyB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,EAAE,CAMxF;AAED,wBAAgB,gCAAgC,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAM9F;AAED,wBAAgB,sBAAsB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGpG;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,SAAS,CAAC,EAAE,OAAO,KAAK,GACvB,sBAAsB,CASxB"}

package/dist/preview-environments/profiles.js

@@ -0,0 +1,34 @@
+import { HttpPreviewProvider } from "./http-provider.js";
+function envStem(profile) {
+    if (!/^[A-Za-z0-9_.-]{1,80}$/.test(profile))
+        throw new Error("preview_provider_profile_invalid");
+    return profile.toUpperCase().replace(/[^A-Z0-9]/g, "_");
+}
+export function configuredPreviewProfiles(env = process.env) {
+    return Object.keys(env)
+        .flatMap((key) => /^ACC_PREVIEW_PROVIDER_([A-Z0-9_]+)_ENDPOINT$/.exec(key)?.[1] ?? [])
+        .filter((stem) => Boolean(env[`ACC_PREVIEW_PROVIDER_${stem}_TOKEN`]))
+        .map((stem) => stem.toLowerCase())
+        .sort();
+}
+export function previewEnvironmentServiceEnabled(env = process.env) {
+    return (env.ACC_PREVIEW_ENVIRONMENT_SERVICE === "1" &&
+        Boolean(env.ACC_PREVIEW_CONTROL_PLANE_SERVICE_ROLE_KEY) &&
+        configuredPreviewProfiles(env).length > 0);
+}
+export function previewEnvironmentCaps(env = process.env) {
+    const profiles = configuredPreviewProfiles(env);
+    return profiles.length ? { preview_environments: true, preview_provider_profiles: profiles } : {};
+}
+export function providerForProfile(provider, profile, env = process.env, fetchImpl) {
+    const stem = envStem(profile);
+    const endpoint = env[`ACC_PREVIEW_PROVIDER_${stem}_ENDPOINT`];
+    const token = env[`ACC_PREVIEW_PROVIDER_${stem}_TOKEN`];
+    const configuredProvider = env[`ACC_PREVIEW_PROVIDER_${stem}_KIND`]?.toLowerCase();
+    if (!endpoint || !token)
+        throw new Error("preview_provider_profile_missing");
+    if (configuredProvider && configuredProvider !== provider.toLowerCase())
+        throw new Error("preview_provider_profile_kind_mismatch");
+    return new HttpPreviewProvider({ endpoint, token, fetchImpl });
+}
+//# sourceMappingURL=profiles.js.map

package/dist/preview-environments/profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../../src/preview-environments/profiles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAGzD,SAAS,OAAO,CAAC,OAAe;IAC9B,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACjG,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC5E,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SACpB,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,8CAA8C,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACrF,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,QAAQ,CAAC,CAAC,CAAC;SACpE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;SACjC,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnF,OAAO,CACL,GAAG,CAAC,+BAA+B,KAAK,GAAG;QAC3C,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC;QACvD,yBAAyB,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACzE,MAAM,QAAQ,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;IAChD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,yBAAyB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACpG,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,QAAgB,EAChB,OAAe,EACf,MAAyB,OAAO,CAAC,GAAG,EACpC,SAAwB;IAExB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,wBAAwB,IAAI,WAAW,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,GAAG,CAAC,wBAAwB,IAAI,QAAQ,CAAC,CAAC;IACxD,MAAM,kBAAkB,GAAG,GAAG,CAAC,wBAAwB,IAAI,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC;IACnF,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC7E,IAAI,kBAAkB,IAAI,kBAAkB,KAAK,QAAQ,CAAC,WAAW,EAAE;QACrE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,OAAO,IAAI,mBAAmB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;AACjE,CAAC"}

package/dist/preview-environments/safety.d.ts

@@ -0,0 +1,7 @@
+import type { PreviewAction, PreviewEnvironmentLease } from "./types.js";
+export declare function safePreviewCode(error: unknown): string;
+export declare function receiptSha(value: unknown): string;
+export declare function deterministicUuid(...parts: Array<string | number>): string;
+export declare function desiredAction(row: PreviewEnvironmentLease, now?: number, staleAfterMs?: number): PreviewAction | null;
+export declare function validateLease(row: PreviewEnvironmentLease): void;
+//# sourceMappingURL=safety.d.ts.map

package/dist/preview-environments/safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.d.ts","sourceRoot":"","sources":["../../src/preview-environments/safety.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAKzE,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAOtD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEjD;AAED,wBAAgB,iBAAiB,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,MAAM,CAG1E;AAED,wBAAgB,aAAa,CAC3B,GAAG,EAAE,uBAAuB,EAC5B,GAAG,SAAa,EAChB,YAAY,SAAU,GACrB,aAAa,GAAG,IAAI,CAatB;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,uBAAuB,GAAG,IAAI,CAShE"}

package/dist/preview-environments/safety.js

@@ -0,0 +1,47 @@
+import { createHash } from "node:crypto";
+import { isCommitSha, isSha256Digest } from "../commit-sha.js";
+const UUID_NAMESPACE = "acc-preview-environment-runner-v1";
+export function safePreviewCode(error) {
+    const raw = error instanceof Error ? error.message : "unknown_error";
+    return raw
+        .replace(/https?:\/\/[^\s]+/gi, "[REDACTED_URL]")
+        .replace(/(authorization|password|token|secret|key)[=:]?[^\s]*/gi, "$1=[REDACTED]")
+        .replace(/[^a-zA-Z0-9_.:[\] -]/g, "_")
+        .slice(0, 180);
+}
+export function receiptSha(value) {
+    return createHash("sha256").update(JSON.stringify(value)).digest("hex");
+}
+export function deterministicUuid(...parts) {
+    const hex = createHash("sha256").update([UUID_NAMESPACE, ...parts].join(":"), "utf8").digest("hex");
+    return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-4${hex.slice(13, 16)}-a${hex.slice(17, 20)}-${hex.slice(20, 32)}`;
+}
+export function desiredAction(row, now = Date.now(), staleAfterMs = 180_000) {
+    const staleProvision = row.observed_state === "provisioning" &&
+        Number.isFinite(Date.parse(row.updated_at)) &&
+        Date.parse(row.updated_at) + staleAfterMs <= now;
+    if (row.desired_state === "active" && ["pending", "failed", "stopped"].includes(row.observed_state))
+        return row.generation === 1 ? "create" : "refresh";
+    if (row.desired_state === "active" && staleProvision)
+        return row.generation === 1 ? "create" : "refresh";
+    if (row.desired_state === "promoted" && row.observed_state === "ready")
+        return "promote";
+    if (row.desired_state === "promoted" && staleProvision)
+        return "promote";
+    if (row.desired_state === "stopped" && !["stopped", "archived"].includes(row.observed_state))
+        return "stop";
+    return null;
+}
+export function validateLease(row) {
+    if (!isCommitSha(row.head_sha))
+        throw new Error("preview_commit_invalid");
+    if (!isSha256Digest(row.deployment_identity_sha))
+        throw new Error("preview_deployment_identity_invalid");
+    if (!/^[\w.-]+\/[\w.-]+$/.test(row.repo))
+        throw new Error("preview_repo_invalid");
+    if (!Number.isInteger(row.pull_request_number) || row.pull_request_number < 1)
+        throw new Error("preview_pull_request_invalid");
+    if (!Number.isInteger(row.generation) || row.generation < 1)
+        throw new Error("preview_generation_invalid");
+}
+//# sourceMappingURL=safety.js.map

package/dist/preview-environments/safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.js","sourceRoot":"","sources":["../../src/preview-environments/safety.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAE/D,MAAM,cAAc,GAAG,mCAAmC,CAAC;AAE3D,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;IACrE,OAAO,GAAG;SACP,OAAO,CAAC,qBAAqB,EAAE,gBAAgB,CAAC;SAChD,OAAO,CAAC,wDAAwD,EAAE,eAAe,CAAC;SAClF,OAAO,CAAC,uBAAuB,EAAE,GAAG,CAAC;SACrC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAG,KAA6B;IAChE,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,cAAc,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpG,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;AACnH,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,GAA4B,EAC5B,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAChB,YAAY,GAAG,OAAO;IAEtB,MAAM,cAAc,GAClB,GAAG,CAAC,cAAc,KAAK,cAAc;QACrC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,YAAY,IAAI,GAAG,CAAC;IACnD,IAAI,GAAG,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC;QACjG,OAAO,GAAG,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,IAAI,GAAG,CAAC,aAAa,KAAK,QAAQ,IAAI,cAAc;QAClD,OAAO,GAAG,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,IAAI,GAAG,CAAC,aAAa,KAAK,UAAU,IAAI,GAAG,CAAC,cAAc,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IACzF,IAAI,GAAG,CAAC,aAAa,KAAK,UAAU,IAAI,cAAc;QAAE,OAAO,SAAS,CAAC;IACzE,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC;QAAE,OAAO,MAAM,CAAC;IAC5G,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAA4B;IACxD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC1E,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,uBAAuB,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAClF,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,mBAAmB,GAAG,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,UAAU,GAAG,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;AAClD,CAAC"}

package/dist/preview-environments/service.d.ts

@@ -0,0 +1,36 @@
+import type { RunnerConfig } from "../config.js";
+import type { PreviewControlPlane, PreviewEnvironmentLease, PreviewProviderAdapter } from "./types.js";
+export interface PreviewEnvironmentLogger {
+    info(message: string): void;
+    error(message: string): void;
+}
+export interface PreviewEnvironmentServiceOptions {
+    env?: NodeJS.ProcessEnv;
+    pollMs?: number;
+    timeoutMs?: number;
+    batchSize?: number;
+    logger?: PreviewEnvironmentLogger;
+    controlPlane?: PreviewControlPlane;
+    providerFactory?: (provider: string, profile: string) => PreviewProviderAdapter;
+}
+export declare class PreviewEnvironmentService {
+    private readonly runnerId;
+    private readonly options;
+    private timer;
+    private active;
+    private stopping;
+    private readonly env;
+    private readonly logger;
+    private readonly pollMs;
+    private readonly timeoutMs;
+    private readonly staleAfterMs;
+    private readonly batchSize;
+    private readonly controlPlane;
+    constructor(cfg: RunnerConfig, runnerId: string, options?: PreviewEnvironmentServiceOptions);
+    start(): void;
+    stop(): Promise<void>;
+    pollOnce(): Promise<void>;
+    process(row: PreviewEnvironmentLease): Promise<"skipped" | "succeeded" | "failed">;
+}
+export { previewEnvironmentCaps, previewEnvironmentServiceEnabled } from "./profiles.js";
+//# sourceMappingURL=service.d.ts.map

package/dist/preview-environments/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/preview-environments/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAUjD,OAAO,KAAK,EACV,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,wBAAwB;IACvC,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,gCAAgC;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,wBAAwB,CAAC;IAClC,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,sBAAsB,CAAC;CACjF;AAED,qBAAa,yBAAyB;IAclC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAd1B,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAoB;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2B;IAClD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;gBAGjD,GAAG,EAAE,YAAY,EACA,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,gCAAqC;IAcjE,KAAK,IAAI,IAAI;IAQP,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IASrB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAgBzB,OAAO,CAAC,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;CAkFzF;AAMD,OAAO,EAAE,sBAAsB,EAAE,gCAAgC,EAAE,MAAM,eAAe,CAAC"}

package/dist/preview-environments/service.js

@@ -0,0 +1,149 @@
+import { SupabasePreviewControlPlane } from "./control-plane.js";
+import { providerForProfile } from "./profiles.js";
+import { desiredAction, deterministicUuid, receiptSha, safePreviewCode, validateLease, } from "./safety.js";
+export class PreviewEnvironmentService {
+    runnerId;
+    options;
+    timer = null;
+    active = false;
+    stopping = false;
+    env;
+    logger;
+    pollMs;
+    timeoutMs;
+    staleAfterMs;
+    batchSize;
+    controlPlane;
+    constructor(cfg, runnerId, options = {}) {
+        this.runnerId = runnerId;
+        this.options = options;
+        this.env = options.env ?? process.env;
+        this.logger = options.logger ?? console;
+        this.pollMs = bounded(options.pollMs ?? Number(this.env.ACC_PREVIEW_POLL_MS ?? 30_000), 5_000, 300_000);
+        this.timeoutMs = bounded(options.timeoutMs ?? Number(this.env.ACC_PREVIEW_ACTION_TIMEOUT_MS ?? 120_000), 5_000, 600_000);
+        this.staleAfterMs = Math.max(this.timeoutMs * 2, 180_000);
+        this.batchSize = bounded(options.batchSize ?? Number(this.env.ACC_PREVIEW_BATCH_SIZE ?? 10), 1, 50);
+        this.controlPlane = options.controlPlane ?? new SupabasePreviewControlPlane(cfg.supabaseUrl, this.env.ACC_PREVIEW_CONTROL_PLANE_SERVICE_ROLE_KEY ?? "");
+    }
+    start() {
+        if (this.timer)
+            return;
+        this.stopping = false;
+        void this.pollOnce();
+        this.timer = setInterval(() => void this.pollOnce(), this.pollMs);
+        this.timer.unref?.();
+    }
+    async stop() {
+        this.stopping = true;
+        if (this.timer)
+            clearInterval(this.timer);
+        this.timer = null;
+        const deadline = Date.now() + this.timeoutMs;
+        while (this.active && Date.now() < deadline)
+            await new Promise((resolve) => setTimeout(resolve, 25));
+    }
+    async pollOnce() {
+        if (this.active || this.stopping)
+            return;
+        this.active = true;
+        try {
+            const rows = await this.controlPlane.listCandidates(this.batchSize);
+            for (const row of rows) {
+                if (this.stopping)
+                    break;
+                await this.process(row);
+            }
+        }
+        catch (error) {
+            this.logger.error(`[acc-runner] preview environment service: ${safePreviewCode(error)}`);
+        }
+        finally {
+            this.active = false;
+        }
+    }
+    async process(row) {
+        const action = desiredAction(row, Date.now(), this.staleAfterMs);
+        if (!action)
+            return "skipped";
+        try {
+            validateLease(row);
+            if (action !== "stop" && action !== "archive" && Date.parse(row.lease_expires_at) <= Date.now())
+                throw new Error("preview_lease_expired");
+            const providerDeploymentId = row.provider_deployment_id ?? row.deployment_identity_sha;
+            const recovering = row.observed_state === "provisioning";
+            const claimReceipt = { action, runner_id: this.runnerId, generation: row.generation, recovering };
+            const claim = await this.controlPlane.recordObservation({
+                environmentId: row.id,
+                generation: row.generation,
+                observedState: "provisioning",
+                providerDeploymentId,
+                providerReceiptSha: receiptSha(claimReceipt),
+                idempotencyKey: deterministicUuid(row.id, row.generation, action, recovering ? `recover:${row.updated_at}` : "claim"),
+            });
+            if (claim.idempotent_replay)
+                return "skipped";
+            const controller = new AbortController();
+            const timeout = setTimeout(() => controller.abort(new Error("preview_provider_timeout")), this.timeoutMs);
+            try {
+                const adapter = this.options.providerFactory?.(row.provider, row.provider_credential_profile_ref) ??
+                    providerForProfile(row.provider, row.provider_credential_profile_ref, this.env);
+                const result = await adapter.execute({
+                    action,
+                    environmentId: row.id,
+                    orgId: row.org_id,
+                    projectId: row.project_id,
+                    repo: row.repo,
+                    pullRequestNumber: row.pull_request_number,
+                    headSha: row.head_sha,
+                    generation: row.generation,
+                    deploymentIdentity: row.deployment_identity_sha,
+                    providerDeploymentId,
+                    leaseExpiresAt: row.lease_expires_at,
+                    signal: controller.signal,
+                });
+                const providerReceiptSha = receiptSha(result.receipt);
+                await this.controlPlane.recordObservation({
+                    environmentId: row.id,
+                    generation: row.generation,
+                    observedState: result.observedState,
+                    providerDeploymentId: result.providerDeploymentId,
+                    previewUrl: result.previewUrl,
+                    providerReceiptSha,
+                    idempotencyKey: deterministicUuid(row.id, row.generation, action, "complete"),
+                });
+                await this.controlPlane.audit("preview.environment_runner_completed", row.id, {
+                    runner_id: this.runnerId,
+                    action,
+                    generation: row.generation,
+                    provider_receipt_sha: providerReceiptSha,
+                }).catch((error) => {
+                    this.logger.error(`[acc-runner] preview audit: ${safePreviewCode(error)}`);
+                });
+                return "succeeded";
+            }
+            finally {
+                clearTimeout(timeout);
+            }
+        }
+        catch (error) {
+            const failureCode = safePreviewCode(error);
+            const providerDeploymentId = row.provider_deployment_id ?? row.deployment_identity_sha;
+            await this.controlPlane.recordObservation({
+                environmentId: row.id,
+                generation: row.generation,
+                observedState: "failed",
+                providerDeploymentId,
+                providerReceiptSha: receiptSha({ failureCode }),
+                failureCode,
+                idempotencyKey: deterministicUuid(row.id, row.generation, action, "failed"),
+            }).catch(() => undefined);
+            this.logger.error(`[acc-runner] preview environment ${row.id}: ${failureCode}`);
+            return "failed";
+        }
+    }
+}
+function bounded(value, min, max) {
+    return Number.isFinite(value) ? Math.max(min, Math.min(max, Math.floor(value))) : min;
+}
+export { previewEnvironmentCaps, previewEnvironmentServiceEnabled } from "./profiles.js";
+//# sourceMappingURL=service.js.map

package/dist/preview-environments/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/preview-environments/service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,UAAU,EACV,eAAe,EACf,aAAa,GACd,MAAM,aAAa,CAAC;AAsBrB,MAAM,OAAO,yBAAyB;IAcjB;IACA;IAdX,KAAK,GAA0B,IAAI,CAAC;IACpC,MAAM,GAAG,KAAK,CAAC;IACf,QAAQ,GAAG,KAAK,CAAC;IACR,GAAG,CAAoB;IACvB,MAAM,CAA2B;IACjC,MAAM,CAAS;IACf,SAAS,CAAS;IAClB,YAAY,CAAS;IACrB,SAAS,CAAS;IAClB,YAAY,CAAsB;IAEnD,YACE,GAAiB,EACA,QAAgB,EAChB,UAA4C,EAAE;QAD9C,aAAQ,GAAR,QAAQ,CAAQ;QAChB,YAAO,GAAP,OAAO,CAAuC;QAE/D,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,IAAI,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACxG,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,6BAA6B,IAAI,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACzH,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACpG,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,2BAA2B,CACzE,GAAG,CAAC,WAAW,EACf,IAAI,CAAC,GAAG,CAAC,0CAA0C,IAAI,EAAE,CAC1D,CAAC;IACJ,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACtB,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7C,OAAO,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;YACzC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QACzC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACpE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,IAAI,CAAC,QAAQ;oBAAE,MAAM;gBACzB,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3F,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAA4B;QACxC,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9B,IAAI,CAAC;YACH,aAAa,CAAC,GAAG,CAAC,CAAC;YACnB,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE;gBAC7F,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,MAAM,oBAAoB,GAAG,GAAG,CAAC,sBAAsB,IAAI,GAAG,CAAC,uBAAuB,CAAC;YACvF,MAAM,UAAU,GAAG,GAAG,CAAC,cAAc,KAAK,cAAc,CAAC;YACzD,MAAM,YAAY,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC;YAClG,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC;gBACtD,aAAa,EAAE,GAAG,CAAC,EAAE;gBACrB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,aAAa,EAAE,cAAc;gBAC7B,oBAAoB;gBACpB,kBAAkB,EAAE,UAAU,CAAC,YAAY,CAAC;gBAC5C,cAAc,EAAE,iBAAiB,CAC/B,GAAG,CAAC,EAAE,EACN,GAAG,CAAC,UAAU,EACd,MAAM,EACN,UAAU,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CACnD;aACF,CAAC,CAAC;YACH,IAAI,KAAK,CAAC,iBAAiB;gBAAE,OAAO,SAAS,CAAC;YAE9C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1G,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,+BAA+B,CAAC;oBAC/F,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,+BAA+B,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;gBAClF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC;oBACnC,MAAM;oBACN,aAAa,EAAE,GAAG,CAAC,EAAE;oBACrB,KAAK,EAAE,GAAG,CAAC,MAAM;oBACjB,SAAS,EAAE,GAAG,CAAC,UAAU;oBACzB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,iBAAiB,EAAE,GAAG,CAAC,mBAAmB;oBAC1C,OAAO,EAAE,GAAG,CAAC,QAAQ;oBACrB,UAAU,EAAE,GAAG,CAAC,UAAU;oBAC1B,kBAAkB,EAAE,GAAG,CAAC,uBAAuB;oBAC/C,oBAAoB;oBACpB,cAAc,EAAE,GAAG,CAAC,gBAAgB;oBACpC,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;gBACH,MAAM,kBAAkB,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACtD,MAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC;oBACxC,aAAa,EAAE,GAAG,CAAC,EAAE;oBACrB,UAAU,EAAE,GAAG,CAAC,UAAU;oBAC1B,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;oBACjD,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,kBAAkB;oBAClB,cAAc,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC;iBAC9E,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,EAAE,EAAE;oBAC5E,SAAS,EAAE,IAAI,CAAC,QAAQ;oBACxB,MAAM;oBACN,UAAU,EAAE,GAAG,CAAC,UAAU;oBAC1B,oBAAoB,EAAE,kBAAkB;iBACzC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;oBACjB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC7E,CAAC,CAAC,CAAC;gBACH,OAAO,WAAW,CAAC;YACrB,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,oBAAoB,GAAG,GAAG,CAAC,sBAAsB,IAAI,GAAG,CAAC,uBAAuB,CAAC;YACvF,MAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC;gBACxC,aAAa,EAAE,GAAG,CAAC,EAAE;gBACrB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,aAAa,EAAE,QAAQ;gBACvB,oBAAoB;gBACpB,kBAAkB,EAAE,UAAU,CAAC,EAAE,WAAW,EAAE,CAAC;gBAC/C,WAAW;gBACX,cAAc,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC;aAC5E,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,GAAG,CAAC,EAAE,KAAK,WAAW,EAAE,CAAC,CAAC;YAChF,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;CACF;AAED,SAAS,OAAO,CAAC,KAAa,EAAE,GAAW,EAAE,GAAW;IACtD,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACxF,CAAC;AAED,OAAO,EAAE,sBAAsB,EAAE,gCAAgC,EAAE,MAAM,eAAe,CAAC"}

package/dist/preview-environments/types.d.ts

@@ -0,0 +1,60 @@
+export type PreviewDesiredState = "active" | "promoted" | "stopped" | "archived";
+export type PreviewObservedState = "pending" | "provisioning" | "ready" | "failed" | "stopped" | "archived";
+export type PreviewAction = "create" | "refresh" | "promote" | "stop" | "archive";
+export interface PreviewEnvironmentLease {
+    id: string;
+    org_id: string;
+    project_id: string;
+    repo: string;
+    pull_request_number: number;
+    head_sha: string;
+    provider: string;
+    provider_credential_profile_ref: string;
+    deployment_identity_sha: string;
+    provider_deployment_id: string | null;
+    desired_state: PreviewDesiredState;
+    observed_state: PreviewObservedState;
+    generation: number;
+    lease_expires_at: string;
+    updated_at: string;
+}
+export interface PreviewProviderRequest {
+    action: PreviewAction;
+    environmentId: string;
+    orgId: string;
+    projectId: string;
+    repo: string;
+    pullRequestNumber: number;
+    headSha: string;
+    generation: number;
+    deploymentIdentity: string;
+    providerDeploymentId: string;
+    leaseExpiresAt: string;
+    signal: AbortSignal;
+}
+export interface PreviewProviderResult {
+    providerDeploymentId: string;
+    observedState: Exclude<PreviewObservedState, "pending" | "provisioning">;
+    previewUrl?: string | null;
+    receipt: Record<string, unknown>;
+}
+export interface PreviewProviderAdapter {
+    execute(request: PreviewProviderRequest): Promise<PreviewProviderResult>;
+}
+export interface PreviewControlPlane {
+    listCandidates(limit: number): Promise<PreviewEnvironmentLease[]>;
+    recordObservation(input: {
+        environmentId: string;
+        generation: number;
+        observedState: Exclude<PreviewObservedState, "pending">;
+        providerDeploymentId: string;
+        previewUrl?: string | null;
+        providerReceiptSha: string;
+        failureCode?: string | null;
+        idempotencyKey: string;
+    }): Promise<{
+        idempotent_replay?: boolean;
+    }>;
+    audit(verb: string, environmentId: string, payload: Record<string, unknown>): Promise<void>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/preview-environments/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/preview-environments/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,CAAC;AACjF,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,cAAc,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;AAC5G,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;AAElF,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,+BAA+B,EAAE,MAAM,CAAC;IACxC,uBAAuB,EAAE,MAAM,CAAC;IAChC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,aAAa,EAAE,mBAAmB,CAAC;IACnC,cAAc,EAAE,oBAAoB,CAAC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,aAAa,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,aAAa,EAAE,OAAO,CAAC,oBAAoB,EAAE,SAAS,GAAG,cAAc,CAAC,CAAC;IACzE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;CAC1E;AAED,MAAM,WAAW,mBAAmB;IAClC,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAC;IAClE,iBAAiB,CAAC,KAAK,EAAE;QACvB,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,OAAO,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;QACxD,oBAAoB,EAAE,MAAM,CAAC;QAC7B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,kBAAkB,EAAE,MAAM,CAAC;QAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,cAAc,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC;QAAE,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7F"}

package/dist/preview-environments/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/preview-environments/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/preview-environments/types.ts"],"names":[],"mappings":""}

package/dist/production-migrations/command.d.ts

@@ -0,0 +1,3 @@
+/** Explicit single-promotion entrypoint; the claim RPC is always the authority. */
+export declare function applyApprovedProductionMigrationCommand(promotionId: string): Promise<void>;
+//# sourceMappingURL=command.d.ts.map

package/dist/production-migrations/command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../src/production-migrations/command.ts"],"names":[],"mappings":"AAKA,mFAAmF;AACnF,wBAAsB,uCAAuC,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAWhG"}

package/dist/production-migrations/command.js

@@ -0,0 +1,21 @@
+import { loadConfig } from "../config.js";
+import { getTokenProvider } from "../token-provider.js";
+import { createRunnerClient } from "../supabase.js";
+import { ProductionMigrationService } from "./service.js";
+/** Explicit single-promotion entrypoint; the claim RPC is always the authority. */
+export async function applyApprovedProductionMigrationCommand(promotionId) {
+    if (!/^[0-9a-f-]{36}$/i.test(promotionId))
+        throw new Error("invalid production promotion id");
+    const cfg = loadConfig();
+    const session = await getTokenProvider().load();
+    if (!session?.runner_id)
+        throw new Error("runner login required");
+    const sb = createRunnerClient(cfg, session.access_token, session.realtime_config);
+    const service = new ProductionMigrationService(sb, cfg, session.runner_id, {
+        env: { ...process.env, ACC_PRODUCTION_MIGRATION_PROMOTION_IDS: promotionId },
+    });
+    const outcome = await service.claimAndRun(promotionId);
+    if (outcome !== "succeeded")
+        throw new Error(`production migration ${outcome}`);
+}
+//# sourceMappingURL=command.js.map

package/dist/production-migrations/command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.js","sourceRoot":"","sources":["../../src/production-migrations/command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAE1D,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAAC,WAAmB;IAC/E,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC9F,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,MAAM,gBAAgB,EAAE,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAClE,MAAM,EAAE,GAAG,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,IAAI,0BAA0B,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,SAAS,EAAE;QACzE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,sCAAsC,EAAE,WAAW,EAAE;KAC7E,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IACvD,IAAI,OAAO,KAAK,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAC;AAClF,CAAC"}