@vellumai/credential-executor 0.4.55

package/Dockerfile

@@ -0,0 +1,55 @@
+# Build stage
+FROM debian:trixie@sha256:3615a749858a1cba49b408fb49c37093db813321355a9ab7c1f9f4836341e9db AS builder
+
+WORKDIR /app
+
+# Install build dependencies
+RUN apt-get update && apt-get install -y \
+    curl \
+    unzip \
+    && rm -rf /var/lib/apt/lists/*
+
+# Install bun
+RUN curl -fsSL https://bun.sh/install | bash
+ENV PATH="/root/.bun/bin:${PATH}"
+
+# Copy shared packages first (needed for repo-local dependencies)
+COPY packages/ces-contracts ./packages/ces-contracts
+COPY packages/credential-storage ./packages/credential-storage
+COPY packages/egress-proxy ./packages/egress-proxy
+
+# Install credential-executor dependencies with local package resolution
+COPY credential-executor/package.json credential-executor/bun.lock* ./credential-executor/
+RUN cd /app/credential-executor && bun install --frozen-lockfile
+
+# Copy credential-executor source
+COPY credential-executor ./credential-executor
+
+# Runtime stage
+FROM debian:trixie-slim@sha256:1d3c811171a08a5adaa4a163fbafd96b61b87aa871bbc7aa15431ac275d3d430 AS runner
+
+WORKDIR /app/credential-executor
+
+RUN apt-get update && apt-get install -y \
+    ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+
+# Copy bun binary from builder
+COPY --from=builder /root/.bun/bin/bun /usr/local/bin/bun
+RUN ln -sf /usr/local/bin/bun /usr/local/bin/bunx
+
+# Create non-root user
+RUN groupadd --system --gid 1001 ces && \
+    useradd --system --uid 1001 --gid ces --create-home ces
+
+# Copy built app from builder
+COPY --from=builder --chown=ces:ces /app /app
+
+USER ces
+
+EXPOSE 7841
+
+ENV CES_MODE=managed
+ENV CES_HEALTH_PORT=7841
+
+CMD ["bun", "run", "src/managed-main.ts"]

package/bun.lock

@@ -0,0 +1,37 @@
+{
+  "lockfileVersion": 1,
+  "configVersion": 1,
+  "workspaces": {
+    "": {
+      "name": "@vellumai/credential-executor",
+      "dependencies": {
+        "@vellumai/ces-contracts": "file:../packages/ces-contracts",
+        "@vellumai/credential-storage": "file:../packages/credential-storage",
+        "@vellumai/egress-proxy": "file:../packages/egress-proxy",
+      },
+      "devDependencies": {
+        "@types/bun": "^1.2.4",
+        "typescript": "^5.7.3",
+      },
+    },
+  },
+  "packages": {
+    "@types/bun": ["@types/bun@1.3.10", "", { "dependencies": { "bun-types": "1.3.10" } }, "sha512-0+rlrUrOrTSskibryHbvQkDOWRJwJZqZlxrUs1u4oOoTln8+WIXBPmAuCF35SWB2z4Zl3E84Nl/D0P7803nigQ=="],
+
+    "@types/node": ["@types/node@25.5.0", "", { "dependencies": { "undici-types": "~7.18.0" } }, "sha512-jp2P3tQMSxWugkCUKLRPVUpGaL5MVFwF8RDuSRztfwgN1wmqJeMSbKlnEtQqU8UrhTmzEmZdu2I6v2dpp7XIxw=="],
+
+    "@vellumai/ces-contracts": ["@vellumai/ces-contracts@file:../packages/ces-contracts", { "dependencies": { "zod": "^4.3.6" }, "devDependencies": { "@types/bun": "^1.2.4", "typescript": "^5.7.3" } }],
+
+    "@vellumai/credential-storage": ["@vellumai/credential-storage@file:../packages/credential-storage", { "devDependencies": { "@types/bun": "^1.2.4", "typescript": "^5.7.3" } }],
+
+    "@vellumai/egress-proxy": ["@vellumai/egress-proxy@file:../packages/egress-proxy", { "devDependencies": { "@types/bun": "^1.2.4", "typescript": "^5.7.3" } }],
+
+    "bun-types": ["bun-types@1.3.10", "", { "dependencies": { "@types/node": "*" } }, "sha512-tcpfCCl6XWo6nCVnpcVrxQ+9AYN1iqMIzgrSKYMB/fjLtV2eyAVEg7AxQJuCq/26R6HpKWykQXuSOq/21RYcbg=="],
+
+    "typescript": ["typescript@5.9.3", "", { "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" } }, "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw=="],
+
+    "undici-types": ["undici-types@7.18.2", "", {}, "sha512-AsuCzffGHJybSaRrmr5eHr81mwJU3kjw6M+uprWvCXiNeN9SOGwQ3Jn8jb8m3Z6izVgknn1R0FTCEAP2QrLY/w=="],
+
+    "zod": ["zod@4.3.6", "", {}, "sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg=="],
+  }
+}

package/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "@vellumai/credential-executor",
+  "version": "0.4.55",
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
+  },
+  "bin": {
+    "credential-executor": "./src/main.ts",
+    "credential-executor-managed": "./src/managed-main.ts"
+  },
+  "scripts": {
+    "dev": "bun run src/main.ts",
+    "dev:managed": "CES_MODE=managed bun run src/managed-main.ts",
+    "typecheck": "bunx tsc --noEmit",
+    "test": "bun test src/"
+  },
+  "dependencies": {
+    "@vellumai/ces-contracts": "file:../packages/ces-contracts",
+    "@vellumai/credential-storage": "file:../packages/credential-storage",
+    "@vellumai/egress-proxy": "file:../packages/egress-proxy"
+  },
+  "bundledDependencies": [
+    "@vellumai/ces-contracts",
+    "@vellumai/credential-storage",
+    "@vellumai/egress-proxy"
+  ],
+  "devDependencies": {
+    "@types/bun": "^1.2.4",
+    "typescript": "^5.7.3"
+  }
+}