@toon-protocol/rig 4.6.0 → 4.7.0

package/dist/index.d.ts

@@ -424,8 +424,10 @@ interface FetchRemoteStateOptions {
     timeoutMs?: number;
     /**
      * Git-SHA → Arweave txId resolver used by {@link RemoteState.resolveMissing}.
-     * Defaults to the shared GraphQL resolver from @toon-protocol/arweave;
-     * injectable for tests.
+     * Defaults to the shared GraphQL resolver from @toon-protocol/arweave,
+     * which asks `arweave.net` — so every command that takes a gateway passes
+     * one bound to it instead (`../git-sha-resolver.ts`, #183). Injectable for
+     * tests.
      */
     resolveSha?: (sha: string, repo: string) => Promise<string | null>;
     /** WebSocket constructor override (defaults to the global WebSocket). */
@@ -1674,6 +1676,13 @@ declare const CI_MANUAL_TRIGGER_KIND = 9840;
 declare const CI_JOB_RESULT_KIND = 9841;
 declare const CI_WORKFLOW_RESULT_KIND = 9842;
 declare const CI_WORKFLOW_PROGRESS_KIND = 39842;
+/**
+ * rig's NIP-C1 EXTENSION kind (ADR-0002, docs/specs/nip-c1-live-log-tail.md):
+ * the live log tail of a run in flight. Not in the vendored spec — the number
+ * is rig's choice, offered upstream to ngit-ci, and renumbering it is a deploy
+ * rather than a migration because the event holds no durable data.
+ */
+declare const CI_LIVE_LOG_TAIL_KIND = 39841;
 /** The one runner family rig supports (`W` tag / `R` prefix). */
 declare const CI_RUNNER_FAMILY = "act";
 /** The `software` tag name rig advertises under. */
@@ -1681,6 +1690,35 @@ declare const CI_SOFTWARE = "rig";
 /** NIP-40 bound on Advertisement + Progress lifetime (seconds). */
 declare const CI_MAX_ADVERTISEMENT_TTL: number;
 declare const CI_MAX_PROGRESS_TTL: number;
+/** The same NIP-40 bound on a Live Log Tail (seconds). */
+declare const CI_MAX_LIVE_LOG_TAIL_TTL: number;
+/**
+ * How often a run in flight republishes its tail. Fixed — a fixed interval is
+ * what makes the worst case budgetable — and expressed in milliseconds because
+ * both consumers (the coordinator's scheduler seam and `estimateRunCost`'s run
+ * timeout) work in milliseconds.
+ */
+declare const CI_LIVE_LOG_TAIL_INTERVAL_MS = 10000;
+/**
+ * Bytes of tail one live job gets by default: deliberately far more than the
+ * 4 KiB that rides in a Job Result, because the relay fee ignores event size
+ * and the difference between one screen and several is the difference between
+ * "is it alive" and "what is it doing".
+ */
+declare const CI_LIVE_LOG_TAIL_JOB_BYTES: number;
+/**
+ * Ceiling on the tail bytes ONE event may carry, so a run with many live jobs
+ * stays relay-safe. Beyond it the budget is divided evenly — see
+ * {@link liveLogTailBudget}.
+ */
+declare const CI_LIVE_LOG_TAIL_MAX_BYTES: number;
+/**
+ * The distinguished key naming the runner channel in a coordinator's per-job
+ * buffers. It is not a job id and can never collide with one (a workflow job id
+ * matches `[A-Za-z_][A-Za-z0-9_-]*`), and it never appears in the wire event's
+ * `jobs` array — the runner channel has its own `runner` slot.
+ */
+declare const CI_RUNNER_CHANNEL_KEY = "~runner";
 type CiConclusion = 'success' | 'failure' | 'neutral' | 'cancelled' | 'skipped' | 'timed_out' | 'startup_failure';
 declare function isCiConclusion(value: string): value is CiConclusion;
 type CiProgressStatus = 'queued' | 'in_progress' | 'concluded';
@@ -1981,6 +2019,76 @@ interface CiWorkflowProgress {
 }
 declare function buildCiWorkflowProgress(input: CiWorkflowProgressInput, createdAt?: number): UnsignedEvent;
 declare function parseCiWorkflowProgress(ev: NostrEvent): CiWorkflowProgress | null;
+/** One unfinished job's recent output. */
+interface CiLiveLogTailJob {
+    /** Job id as declared in the workflow file. */
+    job: string;
+    /** The most recent output, sliced from the END of the redacted log. */
+    tail: string;
+    /** Bytes of that job's output preceding `tail`. */
+    omitted: number;
+}
+/** The runner channel: the runner's own account of the run, never a job. */
+interface CiLiveLogTailChannel {
+    tail: string;
+    omitted: number;
+}
+interface CiLiveLogTailInput {
+    trigger: CiTriggerContext;
+    /** The run's Workflow Progress `d`. */
+    runId: string;
+    /** Every unfinished job; a job drops out once its Job Result is published. */
+    jobs: CiLiveLogTailJob[];
+    runner?: CiLiveLogTailChannel;
+    /** NIP-40 expiration: > created_at, ≤ created_at + 30 min. */
+    expiresAt: number;
+}
+interface CiLiveLogTail {
+    eventId: string;
+    pubkey: string;
+    createdAt: number;
+    trigger: CiTriggerContext;
+    runId: string;
+    jobs: CiLiveLogTailJob[];
+    runner?: CiLiveLogTailChannel;
+    expiresAt: number;
+}
+/**
+ * Bytes of tail each live entry gets when `entries` of them share one event:
+ * the per-job default until that many entries would breach the per-event
+ * ceiling, then the ceiling divided evenly. Entries are unfinished jobs PLUS
+ * the runner channel when it has output — everything that occupies bytes in
+ * the event.
+ */
+declare function liveLogTailBudget(entries: number): number;
+/**
+ * Worst-case number of Live Log Tail events a run of at most `runTimeoutMs`
+ * can publish: one per cadence tick plus the closing replacement. This is what
+ * the coordinator must be able to afford BEFORE it starts the run — there is
+ * no best-effort mode, because a stream that silently stops is
+ * indistinguishable to a viewer from a stalled job.
+ */
+declare function liveLogTailEventBudget(runTimeoutMs: number): number;
+/**
+ * Take the last `maxBytes` UTF-8 bytes of `text`, reporting how many bytes
+ * precede them. The slice never splits a multi-byte character, and `omitted`
+ * counts BYTES (what a reader comparing against the job log's size needs), not
+ * characters. Callers slice REDACTED output — never the reverse (ADR-0002).
+ */
+declare function sliceLogTail(text: string, maxBytes: number): {
+    tail: string;
+    omitted: number;
+};
+declare function buildCiLiveLogTail(input: CiLiveLogTailInput, createdAt?: number): UnsignedEvent;
+/**
+ * Parse a Live Log Tail. Unknown fields — anywhere in the content, and unknown
+ * tags — are ignored, so a later rig may add to the shape without breaking a
+ * client; anything the shape does NOT allow (bad JSON, a jobs entry without a
+ * job id, a duplicated job, a runner channel smuggled in as a job, an
+ * expiration beyond the 30-minute bound) is `null` rather than a throw or a
+ * half-populated result.
+ */
+declare function parseCiLiveLogTail(ev: NostrEvent): CiLiveLogTail | null;
 
 /**
  * Repository Secret Update payloads (rig#125): the NIP-44 v2 ciphertext a
@@ -2172,7 +2280,12 @@ interface RunnerRequest {
     env?: Record<string, string>;
     /** Wall-clock budget for the whole run; exceeding it concludes `timed_out`. */
     timeoutMs: number;
-    /** Streaming log sink (per job). */
+    /**
+     * Streaming log sink, called with a job id as output is produced. Output
+     * the runner attributes to no job — its own account of executing the run —
+     * goes to the RUNNER CHANNEL: the reserved key `CI_RUNNER_CHANNEL_KEY`
+     * exported by ./nip-c1-events.ts, which no workflow job id can equal.
+     */
     onLog?: (jobId: string, chunk: string) => void;
     /** Cancels the run (concludes `cancelled`). */
     signal?: AbortSignal;
@@ -2519,4 +2632,4 @@ declare const NGIT_STATUS_NGIT_TARGET: NostrEvent;
 /** Every captured event, flattened — for the id/signature verification test. */
 declare const ALL_NGIT_FIXTURE_EVENTS: NostrEvent[];
 
-export { ALL_NGIT_FIXTURE_EVENTS, type AnnouncementEdits, type BuildIncrementOfferOptions, type BuildNarrationOptions, type BuildResultEventOptions, CI_ADVERTISEMENT_KIND, CI_JOB_RESULT_KIND, CI_MANUAL_TRIGGER_KIND, CI_MAX_ADVERTISEMENT_TTL, CI_MAX_PROGRESS_TTL, CI_RUNNER_FAMILY, CI_SECRET_UPDATE_KIND, CI_SERVICE_REQUEST_KIND, CI_SERVICE_STOP_KIND, CI_SOFTWARE, CI_TRUST_ORDER, CI_WORKFLOW_PROGRESS_KIND, CI_WORKFLOW_RESULT_KIND, type CiAdmissionPolicy, type CiAdvertisement, type CiAdvertisementInput, type CiArtifact, type CiBillingPolicy, type CiConclusion, type CiExecutionPolicy, type CiJobQuote, type CiJobResult, type CiJobResultInput, type CiManualTrigger, type CiPrContext, type CiProgressStatus, type CiProvenance, type CiSecretUpdate, type CiSecretUpdateArgs, type CiStatusJob, type CiStatusReport, type CiStatusRun, type CiStatusSummary, type CiTriggerContext, type CiTriggerReason, type CiTrustLevel, type CiWorkflowProgress, type CiWorkflowProgressInput, type CiWorkflowRef, type CiWorkflowResult, type CiWorkflowResultInput, type ClosureResult, type CollectRepoObjectsOptions, type CollectRepoObjectsResult, DEFAULT_CONCURRENCY, type DeriveTrustLevelArgs, type DiscoveredWorkflow, type DownloadOptions, type DownloadResult, EARLIEST_UNIQUE_COMMIT_MARKER, type EncryptedArtifact, type EncryptedArtifactRef, type ExecuteFactoryJobOptions, type ExecutePushOptions, type ExistingAnnouncement, FACTORY_JOB_FEEDBACK_KIND, FACTORY_JOB_REQUEST_KIND, FACTORY_JOB_RESULT_KIND, type FactoryJobExecution, type FactoryJobHooks, type FactoryJobOutcome, type FactoryJobRequest, type FactoryJobWork, type FactoryMilestone, type FactoryTicket, FakeRunner, type FakeRunnerScript, FeeRates, type FetchLike, type FetchRemoteStateOptions, type FetchedObject, type GateCheck, type GateResult, type GatewayFetchOptions, type GitCommentRequest, GitError, type GitErrorEnvelope, type GitEstimateRequest, type GitEstimateResponse, type GitEventResponse, type GitFeeEstimate, type GitIssueRequest, GitObjectType, type GitPatchRequest, type GitPlannedObject, type GitPublishReceipt, type GitPushRequest, type GitPushResponse, type GitRef, type GitRefUpdate, type GitRepoAddr, GitRepoReader, type GitStatusRequest, type GitStatusValue, type GitUploadStep, type IncrementSpec, type JobDeliveryPort, MAX_SECRET_CIPHERTEXT_BYTES, MAX_SECRET_NAMES, MAX_SECRET_PLAINTEXT_BYTES, MAX_SECRET_VALUE_BYTES, type MissingObject, NGIT_ANNOUNCEMENT_WYRD, NGIT_ANNOUNCEMENT_WYRD_CAPTURED_AT, NGIT_ANNOUNCEMENT_WYRD_EVENT_ID, NGIT_ANNOUNCEMENT_WYRD_RELAY, NGIT_COMMENT_THREAD_CAPTURED_AT, NGIT_COMMENT_THREAD_COMMENTS, NGIT_COMMENT_THREAD_COMMENT_EVENT_IDS, NGIT_COMMENT_THREAD_NESTED_REPLY_ID, NGIT_COMMENT_THREAD_NESTED_REPLY_PARENT_ID, NGIT_COMMENT_THREAD_RELAY, NGIT_COMMENT_THREAD_ROOT, NGIT_COMMENT_THREAD_ROOT_EVENT_ID, NGIT_STATE_NGIT, NGIT_STATE_NGIT_CAPTURED_AT, NGIT_STATE_NGIT_EVENT_ID, NGIT_STATE_NGIT_RELAY, NGIT_STATUS_NGIT, NGIT_STATUS_NGIT_CAPTURED_AT, NGIT_STATUS_NGIT_EVENT_ID, NGIT_STATUS_NGIT_RELAY, NGIT_STATUS_NGIT_TARGET, NGIT_STATUS_NGIT_TARGET_EVENT_ID, NonFastForwardError, type NostrEvent, type NostrFilter, ObjectIntegrityError, type ObjectStat, type ObjectWithPath, ObjectWriteMismatchError, type OfferedIncrement, type OversizeObject, OversizeObjectsError, PayoutPointer, type PlanPushOptions, type PlannedObject, PublishReceipt, Publisher, type PushFeeEstimate, type PushPlan, type PushResult, RELAYS_TAG, RESERVED_SECRET_NAMES, type ReadGitObject, type ReadObjectsResult, type RefFilters, type RefUpdate, type RefUpdateKind, type RejectedRefUpdate, type RelayEvent, type RemoteState, type RepoAddress, type RepoRefs, type Runner, type RunnerArtifact, type RunnerJobResult, type RunnerRequest, type RunnerRunResult, SECRET_NAME_RE, type SecretInventory, type SecretInventoryEntry, type SecretUpdatePlaintext, type SelectServiceRequestsOptions, type SelectedServiceRequests, type ServiceControl, type StatObjectsResult, UnsignedEvent, type UploadStepResult, WEB_TAG, WORKFLOW_DIRS, type WebSocketFactory, type WebSocketLike, type WorkflowJob, type WorkflowTriggers, amendRepoAnnouncement, applySecretUpdate, assembleCiStatus, assertSecretUpdateShape, buildCiAdvertisement, buildCiJobResult, buildCiManualTrigger, buildCiSecretUpdate, buildCiServiceRequest, buildCiServiceStop, buildCiWorkflowProgress, buildCiWorkflowResult, buildIncrementOfferEvent, buildNarrationEvent, buildQuoteEvent, buildRepoAnnouncement, buildResultEvent, collectRepoObjects, commonTriggerTags, controlOrder, decryptSecretUpdate, defaultFakeRunResult, deriveTrustLevel, discoverWorkflows, downloadGitObjects, effectiveSecrets, encryptSecretUpdate, executeFactoryJob, executePush, fetchRemoteState, fetchTxBytes, gatePassed, generateSecretsKey, hexToNpub, isCiConclusion, isCiTrustLevel, isSafeRefname, matchesPullRequest, matchesPush, missingObjectsMessage, npubToHex, ownerToHex, parseCiAdvertisement, parseCiJobResult, parseCiManualTrigger, parseCiSecretUpdate, parseCiServiceControl, parseCiTriggerContext, parseCiWorkflowProgress, parseCiWorkflowResult, parseFactoryJobRequest, parseRepoAddress, parseWorkflow, planFactoryJob, planPush, queryRelay, refMatchesPatterns, referencedShas, repoAddress, selectServiceRequests, serializeEventReceipt, serializeFeeEstimate, serializePushPlan, serializePushResult, setHeadSymref, sha256Hex, trustAtLeast, updateRef, validateSecretUpdate, verifyObjectBody, walkClosure, writeGitObject, writeGitObjects };
+export { ALL_NGIT_FIXTURE_EVENTS, type AnnouncementEdits, type BuildIncrementOfferOptions, type BuildNarrationOptions, type BuildResultEventOptions, CI_ADVERTISEMENT_KIND, CI_JOB_RESULT_KIND, CI_LIVE_LOG_TAIL_INTERVAL_MS, CI_LIVE_LOG_TAIL_JOB_BYTES, CI_LIVE_LOG_TAIL_KIND, CI_LIVE_LOG_TAIL_MAX_BYTES, CI_MANUAL_TRIGGER_KIND, CI_MAX_ADVERTISEMENT_TTL, CI_MAX_LIVE_LOG_TAIL_TTL, CI_MAX_PROGRESS_TTL, CI_RUNNER_CHANNEL_KEY, CI_RUNNER_FAMILY, CI_SECRET_UPDATE_KIND, CI_SERVICE_REQUEST_KIND, CI_SERVICE_STOP_KIND, CI_SOFTWARE, CI_TRUST_ORDER, CI_WORKFLOW_PROGRESS_KIND, CI_WORKFLOW_RESULT_KIND, type CiAdmissionPolicy, type CiAdvertisement, type CiAdvertisementInput, type CiArtifact, type CiBillingPolicy, type CiConclusion, type CiExecutionPolicy, type CiJobQuote, type CiJobResult, type CiJobResultInput, type CiLiveLogTail, type CiLiveLogTailChannel, type CiLiveLogTailInput, type CiLiveLogTailJob, type CiManualTrigger, type CiPrContext, type CiProgressStatus, type CiProvenance, type CiSecretUpdate, type CiSecretUpdateArgs, type CiStatusJob, type CiStatusReport, type CiStatusRun, type CiStatusSummary, type CiTriggerContext, type CiTriggerReason, type CiTrustLevel, type CiWorkflowProgress, type CiWorkflowProgressInput, type CiWorkflowRef, type CiWorkflowResult, type CiWorkflowResultInput, type ClosureResult, type CollectRepoObjectsOptions, type CollectRepoObjectsResult, DEFAULT_CONCURRENCY, type DeriveTrustLevelArgs, type DiscoveredWorkflow, type DownloadOptions, type DownloadResult, EARLIEST_UNIQUE_COMMIT_MARKER, type EncryptedArtifact, type EncryptedArtifactRef, type ExecuteFactoryJobOptions, type ExecutePushOptions, type ExistingAnnouncement, FACTORY_JOB_FEEDBACK_KIND, FACTORY_JOB_REQUEST_KIND, FACTORY_JOB_RESULT_KIND, type FactoryJobExecution, type FactoryJobHooks, type FactoryJobOutcome, type FactoryJobRequest, type FactoryJobWork, type FactoryMilestone, type FactoryTicket, FakeRunner, type FakeRunnerScript, FeeRates, type FetchLike, type FetchRemoteStateOptions, type FetchedObject, type GateCheck, type GateResult, type GatewayFetchOptions, type GitCommentRequest, GitError, type GitErrorEnvelope, type GitEstimateRequest, type GitEstimateResponse, type GitEventResponse, type GitFeeEstimate, type GitIssueRequest, GitObjectType, type GitPatchRequest, type GitPlannedObject, type GitPublishReceipt, type GitPushRequest, type GitPushResponse, type GitRef, type GitRefUpdate, type GitRepoAddr, GitRepoReader, type GitStatusRequest, type GitStatusValue, type GitUploadStep, type IncrementSpec, type JobDeliveryPort, MAX_SECRET_CIPHERTEXT_BYTES, MAX_SECRET_NAMES, MAX_SECRET_PLAINTEXT_BYTES, MAX_SECRET_VALUE_BYTES, type MissingObject, NGIT_ANNOUNCEMENT_WYRD, NGIT_ANNOUNCEMENT_WYRD_CAPTURED_AT, NGIT_ANNOUNCEMENT_WYRD_EVENT_ID, NGIT_ANNOUNCEMENT_WYRD_RELAY, NGIT_COMMENT_THREAD_CAPTURED_AT, NGIT_COMMENT_THREAD_COMMENTS, NGIT_COMMENT_THREAD_COMMENT_EVENT_IDS, NGIT_COMMENT_THREAD_NESTED_REPLY_ID, NGIT_COMMENT_THREAD_NESTED_REPLY_PARENT_ID, NGIT_COMMENT_THREAD_RELAY, NGIT_COMMENT_THREAD_ROOT, NGIT_COMMENT_THREAD_ROOT_EVENT_ID, NGIT_STATE_NGIT, NGIT_STATE_NGIT_CAPTURED_AT, NGIT_STATE_NGIT_EVENT_ID, NGIT_STATE_NGIT_RELAY, NGIT_STATUS_NGIT, NGIT_STATUS_NGIT_CAPTURED_AT, NGIT_STATUS_NGIT_EVENT_ID, NGIT_STATUS_NGIT_RELAY, NGIT_STATUS_NGIT_TARGET, NGIT_STATUS_NGIT_TARGET_EVENT_ID, NonFastForwardError, type NostrEvent, type NostrFilter, ObjectIntegrityError, type ObjectStat, type ObjectWithPath, ObjectWriteMismatchError, type OfferedIncrement, type OversizeObject, OversizeObjectsError, PayoutPointer, type PlanPushOptions, type PlannedObject, PublishReceipt, Publisher, type PushFeeEstimate, type PushPlan, type PushResult, RELAYS_TAG, RESERVED_SECRET_NAMES, type ReadGitObject, type ReadObjectsResult, type RefFilters, type RefUpdate, type RefUpdateKind, type RejectedRefUpdate, type RelayEvent, type RemoteState, type RepoAddress, type RepoRefs, type Runner, type RunnerArtifact, type RunnerJobResult, type RunnerRequest, type RunnerRunResult, SECRET_NAME_RE, type SecretInventory, type SecretInventoryEntry, type SecretUpdatePlaintext, type SelectServiceRequestsOptions, type SelectedServiceRequests, type ServiceControl, type StatObjectsResult, UnsignedEvent, type UploadStepResult, WEB_TAG, WORKFLOW_DIRS, type WebSocketFactory, type WebSocketLike, type WorkflowJob, type WorkflowTriggers, amendRepoAnnouncement, applySecretUpdate, assembleCiStatus, assertSecretUpdateShape, buildCiAdvertisement, buildCiJobResult, buildCiLiveLogTail, buildCiManualTrigger, buildCiSecretUpdate, buildCiServiceRequest, buildCiServiceStop, buildCiWorkflowProgress, buildCiWorkflowResult, buildIncrementOfferEvent, buildNarrationEvent, buildQuoteEvent, buildRepoAnnouncement, buildResultEvent, collectRepoObjects, commonTriggerTags, controlOrder, decryptSecretUpdate, defaultFakeRunResult, deriveTrustLevel, discoverWorkflows, downloadGitObjects, effectiveSecrets, encryptSecretUpdate, executeFactoryJob, executePush, fetchRemoteState, fetchTxBytes, gatePassed, generateSecretsKey, hexToNpub, isCiConclusion, isCiTrustLevel, isSafeRefname, liveLogTailBudget, liveLogTailEventBudget, matchesPullRequest, matchesPush, missingObjectsMessage, npubToHex, ownerToHex, parseCiAdvertisement, parseCiJobResult, parseCiLiveLogTail, parseCiManualTrigger, parseCiSecretUpdate, parseCiServiceControl, parseCiTriggerContext, parseCiWorkflowProgress, parseCiWorkflowResult, parseFactoryJobRequest, parseRepoAddress, parseWorkflow, planFactoryJob, planPush, queryRelay, refMatchesPatterns, referencedShas, repoAddress, selectServiceRequests, serializeEventReceipt, serializeFeeEstimate, serializePushPlan, serializePushResult, setHeadSymref, sha256Hex, sliceLogTail, trustAtLeast, updateRef, validateSecretUpdate, verifyObjectBody, walkClosure, writeGitObject, writeGitObjects };

package/dist/index.js

@@ -1,9 +1,15 @@
 import {
   CI_ADVERTISEMENT_KIND,
   CI_JOB_RESULT_KIND,
+  CI_LIVE_LOG_TAIL_INTERVAL_MS,
+  CI_LIVE_LOG_TAIL_JOB_BYTES,
+  CI_LIVE_LOG_TAIL_KIND,
+  CI_LIVE_LOG_TAIL_MAX_BYTES,
   CI_MANUAL_TRIGGER_KIND,
   CI_MAX_ADVERTISEMENT_TTL,
+  CI_MAX_LIVE_LOG_TAIL_TTL,
   CI_MAX_PROGRESS_TTL,
+  CI_RUNNER_CHANNEL_KEY,
   CI_RUNNER_FAMILY,
   CI_SECRET_UPDATE_KIND,
   CI_SERVICE_REQUEST_KIND,
@@ -36,6 +42,7 @@ import {
   assertSecretUpdateShape,
   buildCiAdvertisement,
   buildCiJobResult,
+  buildCiLiveLogTail,
   buildCiManualTrigger,
   buildCiSecretUpdate,
   buildCiServiceRequest,
@@ -64,6 +71,8 @@ import {
   isCiConclusion,
   isCiTrustLevel,
   isSafeRefname,
+  liveLogTailBudget,
+  liveLogTailEventBudget,
   matchesPullRequest,
   matchesPush,
   missingObjectsMessage,
@@ -71,6 +80,7 @@ import {
   ownerToHex,
   parseCiAdvertisement,
   parseCiJobResult,
+  parseCiLiveLogTail,
   parseCiManualTrigger,
   parseCiSecretUpdate,
   parseCiServiceControl,
@@ -90,6 +100,7 @@ import {
   serializePushResult,
   setHeadSymref,
   sha256Hex,
+  sliceLogTail,
   trustAtLeast,
   updateRef,
   validateSecretUpdate,
@@ -97,7 +108,7 @@ import {
   walkClosure,
   writeGitObject,
   writeGitObjects
-} from "./chunk-DCGV6ALH.js";
+} from "./chunk-3IVO2MSZ.js";
 import {
   COMMENT_KIND,
   LEGACY_COMMENT_KIND,
@@ -117,7 +128,7 @@ import {
   parseMaintainers,
   parsePayout,
   queryRelay
-} from "./chunk-JBFBD7HV.js";
+} from "./chunk-S3KKQ4IC.js";
 import "./chunk-U5A7MHBP.js";
 
 // src/factory-job-gate.ts
@@ -426,10 +437,21 @@ var FakeRunner = class {
   /** Every request, in call order. */
   requests = [];
   async run(request) {
-    this.requests.push(request);
-    const result = await this.script(request);
-    if (request.onLog) {
-      for (const job of result.jobs) request.onLog(job.jobId, job.log);
+    const sink = request.onLog;
+    const streamed = /* @__PURE__ */ new Set();
+    const scripted = sink ? {
+      ...request,
+      onLog: (jobId, chunk) => {
+        streamed.add(jobId);
+        sink(jobId, chunk);
+      }
+    } : request;
+    this.requests.push(scripted);
+    const result = await this.script(scripted);
+    if (sink) {
+      for (const job of result.jobs) {
+        if (!streamed.has(job.jobId)) sink(job.jobId, job.log);
+      }
     }
     return result;
   }
@@ -892,9 +914,15 @@ export {
   ALL_NGIT_FIXTURE_EVENTS,
   CI_ADVERTISEMENT_KIND,
   CI_JOB_RESULT_KIND,
+  CI_LIVE_LOG_TAIL_INTERVAL_MS,
+  CI_LIVE_LOG_TAIL_JOB_BYTES,
+  CI_LIVE_LOG_TAIL_KIND,
+  CI_LIVE_LOG_TAIL_MAX_BYTES,
   CI_MANUAL_TRIGGER_KIND,
   CI_MAX_ADVERTISEMENT_TTL,
+  CI_MAX_LIVE_LOG_TAIL_TTL,
   CI_MAX_PROGRESS_TTL,
+  CI_RUNNER_CHANNEL_KEY,
   CI_RUNNER_FAMILY,
   CI_SECRET_UPDATE_KIND,
   CI_SERVICE_REQUEST_KIND,
@@ -960,6 +988,7 @@ export {
   authorizedStatusAuthors,
   buildCiAdvertisement,
   buildCiJobResult,
+  buildCiLiveLogTail,
   buildCiManualTrigger,
   buildCiSecretUpdate,
   buildCiServiceRequest,
@@ -1003,6 +1032,8 @@ export {
   isCiTrustLevel,
   isSafeRefname,
   isValidEvmPayoutAddress,
+  liveLogTailBudget,
+  liveLogTailEventBudget,
   matchesPullRequest,
   matchesPush,
   missingObjectsMessage,
@@ -1010,6 +1041,7 @@ export {
   ownerToHex,
   parseCiAdvertisement,
   parseCiJobResult,
+  parseCiLiveLogTail,
   parseCiManualTrigger,
   parseCiSecretUpdate,
   parseCiServiceControl,
@@ -1034,6 +1066,7 @@ export {
   serializePushResult,
   setHeadSymref,
   sha256Hex,
+  sliceLogTail,
   trustAtLeast,
   updateRef,
   validateSecretUpdate,