@xenosystem/agent-sdk 0.10.32 → 0.10.34

package/dist/hosted/index.js

@@ -1 +1 @@
-var b=1,Le=1,I=1,je=1;import{createHash as q,randomUUID as oe}from"node:crypto";function l(e){return JSON.stringify(H(e,new Set))}function H(e,t){if(e===null||typeof e!="object"){if(typeof e=="number"&&!Number.isFinite(e))throw new TypeError("Artifact JSON cannot contain non-finite numbers");return e}if(t.has(e))throw new TypeError("Artifact JSON cannot contain cycles");if(t.add(e),Array.isArray(e)){let r=e.map(o=>H(o,t));return t.delete(e),r}let n={};for(let r of Object.keys(e).sort((o,s)=>o.localeCompare(s))){let o=e[r];if(o===void 0)throw new TypeError(`Artifact JSON property ${r} is undefined`);n[r]=H(o,t)}return t.delete(e),n}function h(e,t={}){for(let n of e){let r=n.codePointAt(0);if(r===127)return!0;if(!(r>31)&&!(r===9&&t.allowTab===!0)&&!((r===10||r===13)&&t.allowLineBreaks===!0))return!0}return!1}function Ze(e){let t={...L(e),schemaVersion:1,kind:"xeno-hosted-environment"};return{...t,checksum:{algorithm:"sha256",value:k(t)}}}function A(e){let t=[];if(e?.schemaVersion!==1||e.kind!=="xeno-hosted-environment")return t.push("Unsupported hosted environment manifest"),{valid:!1,errors:t};let n;try{let{checksum:r,schemaVersion:o,kind:s,...i}=e;n={...L(i),schemaVersion:1,kind:"xeno-hosted-environment"}}catch(r){return t.push(r instanceof Error?r.message:String(r)),{valid:!1,errors:t}}return l(n)!==l(se(e))&&t.push("Hosted environment manifest is not normalized"),(e.checksum?.algorithm!=="sha256"||e.checksum.value!==k(n))&&t.push("Hosted environment checksum mismatch"),{valid:t.length===0,errors:t}}function Qe(e){let t=p(e.streamId,"streamId"),n=U(e.sequence,"sequence");if(e.previous){if(e.previous.streamId!==t)throw new Error("Previous event belongs to another stream");if(e.previous.sequence+1!==n)throw new Error("Hosted event sequence must be contiguous")}else if(n!==1)throw new Error("The first hosted event sequence must be 1");let r={schemaVersion:1,kind:"xeno-hosted-event",eventId:p(e.eventId??`hevt_${oe()}`,"eventId"),streamId:t,sequence:n,timestamp:z(e.timestamp??new Date().toISOString(),"timestamp"),type:j(e.type,"type"),actorId:p(e.actorId,"actorId"),...e.idempotencyKey?{idempotencyKey:c(e.idempotencyKey,"idempotencyKey",512)}:{},payload:ie(e.payload??{},"payload"),previousHash:e.previous?.hash??null};return{...r,hash:k(r)}}function Ye(e,t){let n=[],r,o=t?t.afterSequence+1:1,s=t?.lastHash??null;for(let a of e){if(a.schemaVersion!==1||a.kind!=="xeno-hosted-event"){n.push(`Unsupported hosted event at sequence ${String(a.sequence)}`);continue}a.sequence!==o&&n.push(`Hosted event sequence gap at ${a.sequence}; expected ${o}`),a.previousHash!==s&&n.push(`Hosted event previous hash mismatch at ${a.sequence}`);let{hash:d,...g}=a;d!==k(g)&&n.push(`Hosted event hash mismatch at ${a.sequence}`),r&&r.streamId!==a.streamId&&n.push(`Hosted event stream changed at ${a.sequence}`),r=a,o=a.sequence+1,s=a.hash}let i=e.at(-1);return{valid:n.length===0,errors:n,cursor:i?{streamId:i.streamId,afterSequence:i.sequence,lastHash:i.hash}:t??null}}function et(e){let t=A(e);if(!t.valid)throw new Error(t.errors.join("; "));return`${e.environmentId}@${e.revision}:${e.checksum.value}`}function tt(...e){if(e.length===0)throw new Error("At least one idempotency-key part is required");let t=e.map((n,r)=>ae(n,`parts[${r}]`));return`xeno:${q("sha256").update(t.join("\0")).digest("hex")}`}function L(e){let t=e.secrets.map((o,s)=>({ref:p(o.ref,`secrets[${s}].ref`),target:o.target.kind==="environment"?{kind:"environment",name:de(o.target.name)}:{kind:"file",path:E(o.target.path,`secrets[${s}].target.path`)},required:!!o.required,exposeToChildProcesses:!!o.exposeToChildProcesses})),n=new Set,r=new Set;for(let o of t){if(n.has(o.ref))throw new Error(`Duplicate secret ref: ${o.ref}`);n.add(o.ref);let s=`${o.target.kind}:${o.target.kind==="environment"?o.target.name:o.target.path}`;if(r.has(s))throw new Error(`Duplicate secret target: ${s}`);r.add(s)}if(e.network.default!=="deny")throw new Error("Hosted network policy must be default-deny");return{environmentId:p(e.environmentId,"environmentId"),revision:U(e.revision,"revision"),createdAt:z(e.createdAt,"createdAt"),createdBy:p(e.createdBy,"createdBy"),workspaceId:p(e.workspaceId,"workspaceId"),name:c(e.name,"name",160),repository:{provider:e.repository.provider,repository:c(e.repository.repository,"repository.repository",2048),ref:c(e.repository.ref,"repository.ref",512),...e.repository.commit?{commit:le(e.repository.commit,"repository.commit")}:{},...e.repository.subdirectory?{subdirectory:E(e.repository.subdirectory,"repository.subdirectory")}:{},...e.repository.shallow!==void 0?{shallow:!!e.repository.shallow}:{}},image:{reference:c(e.image.reference,"image.reference",2048),digest:ue(e.image.digest),os:e.image.os,architecture:e.image.architecture},setup:e.setup.map((o,s)=>({id:p(o.id,`setup[${s}].id`),command:c(o.command,`setup[${s}].command`,32768),...o.workingDirectory?{workingDirectory:E(o.workingDirectory,`setup[${s}].workingDirectory`)}:{},timeoutMs:u(o.timeoutMs,`setup[${s}].timeoutMs`,1e3,36e5),network:o.network})),caches:e.caches.map((o,s)=>({key:c(o.key,`caches[${s}].key`,512),path:E(o.path,`caches[${s}].path`),...o.restoreKeys?.length?{restoreKeys:me(o.restoreKeys,`caches[${s}].restoreKeys`,512)}:{},...o.readOnly!==void 0?{readOnly:!!o.readOnly}:{},...o.maxBytes!==void 0?{maxBytes:u(o.maxBytes,`caches[${s}].maxBytes`,1,Number.MAX_SAFE_INTEGER)}:{}})),network:{default:"deny",dns:e.network.dns,destinations:e.network.destinations.map((o,s)=>({host:ce(o.host,`network.destinations[${s}].host`),...o.ports?.length?{ports:[...new Set(o.ports.map(i=>u(i,"port",1,65535)))].sort((i,a)=>i-a)}:{},...o.protocols?.length?{protocols:[...new Set(o.protocols)].sort()}:{},reason:c(o.reason,`network.destinations[${s}].reason`,500)})).sort((o,s)=>o.host.localeCompare(s.host)),...e.network.maxResponseBytes!==void 0?{maxResponseBytes:u(e.network.maxResponseBytes,"network.maxResponseBytes",1,Number.MAX_SAFE_INTEGER)}:{}},secrets:t,resources:{cpuMillis:u(e.resources.cpuMillis,"resources.cpuMillis",10,1e6),memoryBytes:u(e.resources.memoryBytes,"resources.memoryBytes",16*1024*1024,Number.MAX_SAFE_INTEGER),diskBytes:u(e.resources.diskBytes,"resources.diskBytes",16*1024*1024,Number.MAX_SAFE_INTEGER),processLimit:u(e.resources.processLimit,"resources.processLimit",1,65535),wallTimeMs:u(e.resources.wallTimeMs,"resources.wallTimeMs",1e3,10080*60*1e3)},retention:{workspaceTtlMs:u(e.retention.workspaceTtlMs,"retention.workspaceTtlMs",0,365*24*60*60*1e3),eventTtlMs:u(e.retention.eventTtlMs,"retention.eventTtlMs",6e4,365*24*60*60*1e3),artifactTtlMs:u(e.retention.artifactTtlMs,"retention.artifactTtlMs",6e4,365*24*60*60*1e3),wipeWorkspace:!!e.retention.wipeWorkspace},labels:Object.fromEntries(Object.entries(e.labels).map(([o,s])=>[j(o,"label key"),c(s,`labels.${o}`,500)]).sort(([o],[s])=>o.localeCompare(s)))}}function se(e){let{checksum:t,...n}=e;return n}function k(e){return q("sha256").update(l(e)).digest("hex")}function ie(e,t){let n=l(e);if(Buffer.byteLength(n,"utf8")>256*1024)throw new Error(`${t} exceeds 262144 bytes`);return JSON.parse(n)}function p(e,t){let n=c(e,t,512);if(!/^[A-Za-z0-9][A-Za-z0-9._:@/-]*$/.test(n))throw new Error(`${t} is invalid`);return n}function j(e,t){let n=c(e,t,160);if(!/^[A-Za-z0-9][A-Za-z0-9._:-]*$/.test(n))throw new Error(`${t} is invalid`);return n}function c(e,t,n){let r=e.trim();if(!r||r.length>n||h(r,{allowTab:!0,allowLineBreaks:!0}))throw new Error(`${t} is invalid`);return r}function ae(e,t){let n=e.trim();if(n.length>4096||h(n,{allowTab:!0,allowLineBreaks:!0}))throw new Error(`${t} is invalid`);return n}function U(e,t){return u(e,t,1,Number.MAX_SAFE_INTEGER)}function u(e,t,n,r){if(!Number.isSafeInteger(e)||e<n||e>r)throw new Error(`${t} must be an integer between ${n} and ${r}`);return e}function z(e,t){let n=Date.parse(e);if(!Number.isFinite(n)||new Date(n).toISOString()!==e)throw new Error(`${t} must be an ISO-8601 UTC timestamp`);return e}function ce(e,t){let n=c(e.toLowerCase(),t,253);if(n==="localhost"||/^(?:\d{1,3}\.){3}\d{1,3}$/.test(n)||n.includes(":")||!/^(?:\*\.)?(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/.test(n))throw new Error(`${t} must be a public DNS hostname or wildcard hostname`);return n}function E(e,t){let n=c(e.replaceAll("\\","/"),t,4096);if(n.startsWith("/")||/^[A-Za-z]:\//.test(n)||n.split("/").includes(".."))throw new Error(`${t} must be workspace-relative`);return n.replace(/^\.\//,"")}function de(e){let t=c(e,"secret environment name",256);if(!/^[A-Z_][A-Z0-9_]*$/.test(t))throw new Error("Secret environment target must be an uppercase environment variable name");return t}function ue(e){let t=e.trim().toLowerCase();if(!/^sha256:[a-f0-9]{64}$/.test(t))throw new Error("image.digest must be a sha256 OCI digest");return t}function le(e,t){return c(e,t,512)}function me(e,t,n){return[...new Set(e.map((r,o)=>c(r,`${t}[${o}]`,n)))]}import{createHash as pe,createHmac as C,timingSafeEqual as ge}from"node:crypto";function ot(e){let t=typeof e.body=="string"?Buffer.from(e.body,"utf8"):Buffer.from(e.body),n=pe("sha256").update(t).digest("hex"),r=e.signature?.trim();if(!r)return{valid:!1,source:e.source,bodySha256:n,error:"missing-signature"};if(!e.secret||e.secret.length<16)throw new Error("Webhook secret must contain at least 16 characters");let o,s=r;if(e.source==="slack"){if(!e.timestamp||!/^\d+$/.test(e.timestamp))return{valid:!1,source:e.source,bodySha256:n,error:"invalid-timestamp"};let a=Number(e.timestamp)*1e3,d=Math.abs((e.now??new Date).getTime()-a);if(!Number.isFinite(a)||d>(e.maxClockSkewMs??5*6e4))return{valid:!1,source:e.source,bodySha256:n,timestamp:e.timestamp,error:"stale-timestamp"};o=`v0=${C("sha256",e.secret).update(`v0:${e.timestamp}:`).update(t).digest("hex")}`}else e.source==="gitlab"?o=e.secret:e.source==="teams"?o=`HMAC ${C("sha256",Buffer.from(e.secret,"base64")).update(t).digest("base64")}`:(o=`${e.source==="github"||e.source==="jira"?"sha256=":e.source==="xeno"?"v1=":""}${C("sha256",e.secret).update(t).digest("hex")}`,e.source==="linear"&&s.startsWith("sha256=")&&(s=s.slice(7)));let i=fe(o,s);return{valid:i,source:e.source,bodySha256:n,...e.timestamp?{timestamp:e.timestamp}:{},...i?{}:{error:"invalid-signature"}}}function fe(e,t){let n=Buffer.from(e,"utf8"),r=Buffer.from(t,"utf8");return n.length===r.length&&ge(n,r)}import{createHash as he,verify as ye}from"node:crypto";var v="xeno.hosted-execution-adapter-certification.v2",J=2,xe=744*60*60*1e3;function ct(e){return F(e),Buffer.from(X(e),"utf8")}function dt(e,t){if(e?.schemaVersion!==v)throw new Error(`Hosted execution adapter certificate must use ${v}`);let{signature:n,...r}=e;if(F(r),n?.algorithm!=="ed25519")throw new Error("Hosted execution adapter signature must use ed25519");let o=_(t.executableSha256,"executableSha256"),s=_(t.controlPlaneCandidateSha256,"controlPlaneCandidateSha256");if(r.adapter.executableSha256!==o)throw new Error("Hosted execution adapter executable does not match its signed certificate");if(r.controlPlaneCandidateSha256!==s)throw new Error("Hosted execution adapter certificate is bound to another control-plane candidate");let i=t.platform??process.platform,a=t.architecture??process.arch;if(r.platform.os!==i||r.platform.architecture!==a)throw new Error(`Hosted execution adapter certificate targets ${r.platform.os}-${r.platform.architecture}, not ${i}-${a}`);let d=T(r.issuedAt,"issuedAt"),g=T(r.expiresAt,"expiresAt"),$=(t.now??new Date).getTime();if(d>$+5*6e4)throw new Error("Hosted execution adapter certificate is not yet valid");if(g<=$)throw new Error("Hosted execution adapter certificate has expired");if(g<=d||g-d>xe)throw new Error("Hosted execution adapter certificate lifetime must be positive and at most 31 days");let B=t.trustedKeys[r.reviewer.keyId];if(!B)throw new Error(`Hosted execution adapter reviewer key is not trusted: ${r.reviewer.keyId}`);if(!ye(null,Buffer.from(X(r),"utf8"),B,we(n.value,"signature.value")))throw new Error("Hosted execution adapter certificate signature is invalid");return{certificationId:r.certificationId,adapterName:r.adapter.name,adapterVersion:r.adapter.version,protocolVersion:r.adapter.protocolVersion,executableSha256:o,controlPlaneCandidateSha256:s,certificateSha256:he("sha256").update(X(e)).digest("hex"),expiresAt:r.expiresAt,reviewerKeyId:r.reviewer.keyId}}function F(e){if(e.schemaVersion!==v)throw new Error(`Hosted execution adapter certificate must use ${v}`);if(S(e.certificationId,"certificationId"),S(e.adapter?.name,"adapter.name"),S(e.adapter?.version,"adapter.version"),e.adapter?.protocolVersion!==J)throw new Error(`Hosted execution adapter protocol must be ${J}`);_(e.adapter.executableSha256,"adapter.executableSha256"),_(e.controlPlaneCandidateSha256,"controlPlaneCandidateSha256"),S(e.reviewer?.keyId,"reviewer.keyId");let t=["immutableImages","filesystemIsolation","networkDefaultDeny","destinationAllowlist","secretProjection","nonRootExecution","readOnlyRoot","processTreeCleanup","resourceLimits","interactiveControl","artifactProtocol","gitResultReporting"];if(!e.capabilities||t.some(n=>e.capabilities[n]!==!0))throw new Error("Hosted execution adapter certificate does not attest every required containment capability");T(e.issuedAt,"issuedAt"),T(e.expiresAt,"expiresAt")}function X(e){return l(e)}function _(e,t){let n=e?.trim().toLowerCase();if(!/^[a-f0-9]{64}$/.test(n))throw new Error(`${t} must be a lowercase SHA-256 digest`);return n}function S(e,t){let n=e?.trim();if(!n||n.length>256||!/^[A-Za-z0-9][A-Za-z0-9._:@/-]*$/.test(n))throw new Error(`${t} is invalid`);return n}function T(e,t){let n=Date.parse(e);if(!Number.isFinite(n)||new Date(n).toISOString()!==e)throw new Error(`${t} must be an ISO-8601 UTC timestamp`);return n}function we(e,t){if(typeof e!="string"||e.length===0||e.length>4096||!/^[A-Za-z0-9+/]+={0,2}$/.test(e))throw new Error(`${t} must be bounded base64`);let n=Buffer.from(e,"base64");if(n.toString("base64")!==e)throw new Error(`${t} is not canonical base64`);return n}import{createHash as Ee}from"node:crypto";var K=["low","medium","high","xhigh","max"],G=["default","plan","acceptEdits","auto","dontAsk","bypassPermissions"];var be=/^\/([A-Za-z][A-Za-z0-9_.:-]*)(?=\s|$)/,O="Nothing was sent to the model.",W="unsupported_slash_command",mt=Object.freeze({"thread.run":"prompt","turn.start":"input","turn.steer":"input","schedule.create":"prompt","schedule.update":"prompt"});function Z(e){let t=e.trimStart();if(t==="/"||/^\/\s/.test(t))return"";let n=be.exec(t);return n?n[1].toLowerCase():null}var ke=2,Se=["Read","Write","Edit","Glob","Grep","WebFetch"],ve=new Set(Se);function _e(e){if(!Y(e.certificationId))throw new Error("certificationId is invalid");let t=new Set(e.authority.secretRefs);return{certificationId:e.certificationId,environmentChecksum:e.environment.checksum.value,imageDigest:e.environment.image.digest,networkPolicySha256:Q({authority:e.authority.network,policy:e.environment.network}),secretProjectionSha256:Q(e.environment.secrets.filter(n=>t.has(n.ref))),filesystem:e.authority.filesystem,network:e.authority.network==="deny"?"deny":"allowlist",immutableImage:!0,readOnlyRoot:!0,nonRoot:!0,processTreeCleanup:!0,resourceLimits:!0,inferenceGateway:"brokered"}}var M=class extends Error{code="INVALID_HOSTED_EXECUTION_JOB";errors;reason;command;field;constructor(t){super(`Invalid hosted execution job: ${t.errors.join("; ")}`),this.name="XenoHostedExecutionJobError",this.errors=[...t.errors],t.slashCommand&&(this.reason=t.slashCommand.reason,this.command=t.slashCommand.command,this.field=t.slashCommand.field)}};function Te(e){if(typeof e!="string")return null;let t=Z(e);if(t===null)return null;let n={reason:W,field:"prompt"};if(!t)return{...n,command:"/",message:`prompt begins with a bare "/"; a hosted job prompt is sent to the model as text and hosted execution runs no commands. Rephrase the prompt so it does not begin with "/". ${O}`};let r=`/${t}`;return{...n,command:r,message:`prompt is the slash command ${r}; a hosted job prompt is sent to the model as text and hosted execution runs no commands, so slash commands are refused. Rephrase the prompt so it does not begin with "${r}". ${O}`}}function Re(e){let t=[];if(!Oe(e))return{valid:!1,errors:["Hosted execution job must be an object"]};let n=e;if(n.protocolVersion!==ke||n.kind!=="xeno-hosted-execution-job")return t.push("Unsupported hosted execution protocol"),{valid:!1,errors:t};y(n.runId,"runId",t),y(n.userId,"userId",t),y(n.workspaceId,"workspaceId",t),P(n.workspaceHostPath,"workspaceHostPath",4096,t),P(n.prompt,"prompt",512*1024,t),P(n.model,"model",512,t),n.effort!==void 0&&!K.includes(n.effort)&&t.push("effort is invalid"),G.includes(n.permissionMode)||t.push("permissionMode is invalid"),(typeof n.runScopedToken!="string"||!n.runScopedToken.startsWith("xrun_")||n.runScopedToken.length>16*1024)&&t.push("runScopedToken is not a bounded run-scoped token");let r;try{r=new URL(n.inferenceBaseUrl),(r.protocol!=="https:"||r.username||r.password||r.hash)&&t.push("inferenceBaseUrl must be credential-free HTTPS")}catch{t.push("inferenceBaseUrl is invalid")}let o=A(n.environment);t.push(...o.errors.map(a=>`environment: ${a}`)),n.environment?.workspaceId!==n.workspaceId&&t.push("environment workspace does not match the job"),n.environment?.image?.os!=="linux"&&t.push("hosted execution image must target Linux");let s=n.environment?.repository?.commit;(typeof s!="string"||!/^(?:[a-fA-F0-9]{40}|[a-fA-F0-9]{64})$/.test(s))&&t.push("environment repository requires a full 40- or 64-character commit object id"),Ie(n.authority,t),He(n.budget,n.environment,t),Ae(n.allowedTools,t),Ce(n,t),Xe(n,t),r&&!n.environment?.network?.destinations?.some(a=>{let d=a.ports?.length?a.ports:[443];return a.host.toLowerCase()===r.hostname.toLowerCase()&&d.includes(Number(r.port||443))})&&t.push("inference origin is absent from the environment network allowlist");try{let a=Pe(n.environment?.repository);n.environment?.network?.destinations?.some(d=>{let g=d.ports?.length?d.ports:[443];return d.host.toLowerCase()===a.hostname&&g.includes(a.port)})||t.push("repository origin is absent from the environment network allowlist")}catch{t.push("environment repository must resolve to a credential-free HTTPS origin")}let i=Te(n.prompt);return i?(t.push(i.message),{valid:!1,errors:t,slashCommand:i}):{valid:t.length===0,errors:t}}function wt(e){let t=Re(e);if(!t.valid)throw new M(t)}function Ie(e,t){(!e||!["read","workspace-write"].includes(e.filesystem))&&t.push("authority.filesystem is invalid"),(!e||!["deny","environment-policy"].includes(e.network))&&t.push("authority.network is invalid"),(!e||!["deny","approval-required"].includes(e.externalActions))&&t.push("authority.externalActions is invalid"),!Array.isArray(e?.secretRefs)||new Set(e.secretRefs).size!==e.secretRefs.length?t.push("authority.secretRefs must be a unique array"):e.secretRefs.forEach((n,r)=>y(n,`authority.secretRefs[${r}]`,t))}function He(e,t,n){(!e||!Number.isFinite(e.maxCredits)||e.maxCredits<=0)&&n.push("budget.maxCredits is invalid"),(!e||!N(e.maxDurationMs)||e.maxDurationMs>(t?.resources?.wallTimeMs??0))&&n.push("budget.maxDurationMs is invalid or exceeds the environment limit"),e?.maxTokens!==void 0&&!N(e.maxTokens)&&n.push("budget.maxTokens is invalid"),e?.maxToolCalls!==void 0&&!N(e.maxToolCalls)&&n.push("budget.maxToolCalls is invalid")}function Ae(e,t){if(!Array.isArray(e)||e.length<1||e.length>512||new Set(e).size!==e.length){t.push("allowedTools must contain 1..512 unique tool names");return}e.forEach((n,r)=>{y(n,`allowedTools[${r}]`,t),ve.has(n)||t.push(`allowedTools[${r}] is not in the hosted v0.1 registry`)})}function Ce(e,t){if(!Array.isArray(e.secrets)||e.secrets.length>128){t.push("secrets must be a bounded array");return}let n=new Set(e.authority?.secretRefs??[]),r=new Map((e.environment?.secrets??[]).map(s=>[s.ref,s])),o=new Set;for(let[s,i]of e.secrets.entries()){let a=r.get(i.ref);if(!a||!n.has(i.ref)||o.has(i.ref)){t.push(`secrets[${s}] is undeclared, unauthorized, or duplicated`);continue}o.add(i.ref),(x(a.target)!==x(i.target)||a.exposeToChildProcesses!==i.exposeToChildProcesses)&&t.push(`secrets[${s}] does not match its declared projection`),(typeof i.value!="string"||i.value.length<1||Buffer.byteLength(i.value,"utf8")>1024*1024)&&t.push(`secrets[${s}] value is empty or too large`)}for(let s of e.environment?.secrets??[])s.required&&(!n.has(s.ref)||!o.has(s.ref))&&t.push(`required secret ${s.ref} is absent or unauthorized`);[...n].some(s=>!r.has(s))&&t.push("authority references an undeclared secret")}function Xe(e,t){let n=e.expectedBoundary;if(!n){t.push("expectedBoundary is missing");return}let r;try{r=_e({certificationId:n.certificationId,environment:e.environment,authority:e.authority})}catch{t.push("expectedBoundary does not match the hosted execution contract");return}(!Y(n.certificationId)||x(n)!==x(r))&&t.push("expectedBoundary does not match the hosted execution contract")}function y(e,t,n){(typeof e!="string"||!/^[A-Za-z0-9][A-Za-z0-9._:@/-]{0,511}$/.test(e))&&n.push(`${t} is invalid`)}function P(e,t,n,r){(typeof e!="string"||e.length<1||e.length>n||e.includes("\0"))&&r.push(`${t} is invalid`)}function N(e){return typeof e=="number"&&Number.isSafeInteger(e)&&e>0}function Y(e){return typeof e=="string"&&/^[A-Za-z0-9][A-Za-z0-9._:@/-]{0,511}$/.test(e)}function Oe(e){return!!e&&typeof e=="object"&&!Array.isArray(e)}function x(e){return l(e)}function Q(e){return Ee("sha256").update(x(e)).digest("hex")}function Pe(e){if(!e)throw new Error("repository source is missing");let t=e.repository.replace(/^\/+|\/+$/g,""),n=e.provider==="github"&&!t.includes("://")?`https://github.com/${t}.git`:e.provider==="gitlab"&&!t.includes("://")?`https://gitlab.com/${t}.git`:e.provider==="bitbucket"&&!t.includes("://")?`https://bitbucket.org/${t}.git`:e.repository,r=new URL(n);if(r.protocol!=="https:"||r.username||r.password||r.hash)throw new Error("repository origin is not credential-free HTTPS");return{hostname:r.hostname.toLowerCase(),port:Number(r.port||443)}}import{createHash as Ne,randomUUID as Me}from"node:crypto";var te=1,ne=1;function De(e){let t={schemaVersion:te,kind:"xeno-hosted-control",controlId:m(e.controlId??`hctl_${Me()}`,"controlId"),runId:m(e.runId,"runId"),workspaceId:m(e.workspaceId,"workspaceId"),actorId:m(e.actorId,"actorId"),idempotencyKey:f(e.idempotencyKey,"idempotencyKey",512),createdAt:V(e.createdAt,"createdAt"),action:$e(e.action)};return{...t,hash:{algorithm:"sha256",value:re(t)}}}function vt(e){let t=[];try{let{hash:n,schemaVersion:r,kind:o,...s}=e,i=De(s);(e.schemaVersion!==te||e.kind!=="xeno-hosted-control")&&t.push("Unsupported hosted control command"),w(R(e))!==w(R(i))&&t.push("Hosted control command is not normalized"),(n?.algorithm!=="sha256"||n.value!==i.hash.value)&&t.push("Hosted control command hash mismatch")}catch(n){t.push(n instanceof Error?n.message:String(n))}return{valid:t.length===0,errors:t}}function _t(e){if(!["accepted","applied","rejected","unsupported"].includes(e.status))throw new Error("Hosted control acknowledgement status is invalid");return{controlId:m(e.controlId,"controlId"),status:e.status,acknowledgedAt:V(e.acknowledgedAt,"acknowledgedAt"),...e.reason?{reason:f(e.reason,"reason",2048)}:{}}}function Ve(e){let t=e.git?{...e.git.branch?{branch:D(e.git.branch,"git.branch")}:{},...e.git.baseRef?{baseRef:D(e.git.baseRef,"git.baseRef")}:{},...e.git.commit?{commit:D(e.git.commit,"git.commit")}:{}}:void 0,n={schemaVersion:ne,kind:"xeno-hosted-run-result",runId:m(e.runId,"runId"),workspaceId:m(e.workspaceId,"workspaceId"),completedAt:V(e.completedAt,"completedAt"),...t&&Object.keys(t).length>0?{git:t}:{},...e.pullRequest?{pullRequest:Be(e.pullRequest)}:{},artifactIds:ee(e.artifactIds,"artifactIds"),evidenceArtifactIds:ee(e.evidenceArtifactIds,"evidenceArtifactIds")};return{...n,hash:{algorithm:"sha256",value:re(n)}}}function Tt(e){let t=[];try{let{hash:n,schemaVersion:r,kind:o,...s}=e,i=Ve(s);(e.schemaVersion!==ne||e.kind!=="xeno-hosted-run-result")&&t.push("Unsupported hosted run result"),w(R(e))!==w(R(i))&&t.push("Hosted run result is not normalized"),(n?.algorithm!=="sha256"||n.value!==i.hash.value)&&t.push("Hosted run result hash mismatch")}catch(n){t.push(n instanceof Error?n.message:String(n))}return{valid:t.length===0,errors:t}}function $e(e){if(e?.type==="message")return{type:"message",message:f(e.message,"action.message",32768)};if(e?.type==="approval"){if(e.decision!=="approved"&&e.decision!=="rejected")throw new Error("Hosted approval decision is invalid");return{type:"approval",requestId:m(e.requestId,"action.requestId"),decision:e.decision,scopeHash:qe(e.scopeHash,"action.scopeHash"),...e.rationale?{rationale:f(e.rationale,"action.rationale",4096)}:{}}}throw new Error("Hosted control action is invalid")}function Be(e){let t;try{t=new URL(e.url)}catch{throw new Error("pullRequest.url is invalid")}if(t.protocol!=="https:"||t.username||t.password)throw new Error("pullRequest.url must be credential-free HTTPS");if(!Number.isSafeInteger(e.number)||e.number<1)throw new Error("pullRequest.number must be a positive integer");return{provider:m(e.provider,"pullRequest.provider"),repository:f(e.repository,"pullRequest.repository",2048),number:e.number,url:t.toString()}}function ee(e,t){if(!Array.isArray(e)||e.length>1e4)throw new Error(`${t} is invalid`);return[...new Set(e.map((n,r)=>m(n,`${t}[${r}]`)))].sort()}function D(e,t){return f(e,t,512)}function m(e,t){let n=f(e,t,512);if(!/^[A-Za-z0-9][A-Za-z0-9._:@/-]*$/.test(n))throw new Error(`${t} is invalid`);return n}function f(e,t,n){let r=e?.trim();if(!r||r.length>n||h(r,{allowTab:!0,allowLineBreaks:!0}))throw new Error(`${t} is invalid`);return r}function V(e,t){let n=Date.parse(e);if(!Number.isFinite(n)||new Date(n).toISOString()!==e)throw new Error(`${t} must be ISO-8601 UTC`);return e}function qe(e,t){let n=e?.trim().toLowerCase();if(!/^[a-f0-9]{64}$/.test(n))throw new Error(`${t} must be a lowercase SHA-256 digest`);return n}function re(e){return Ne("sha256").update(w(e)).digest("hex")}function w(e){return l(e)}function R(e){let{hash:t,...n}=e;return n}export{te as XENO_HOSTED_CONTROL_SCHEMA_VERSION,b as XENO_HOSTED_ENVIRONMENT_SCHEMA_VERSION,I as XENO_HOSTED_EVENT_SCHEMA_VERSION,v as XENO_HOSTED_EXECUTION_ADAPTER_CERTIFICATION_SCHEMA,xe as XENO_HOSTED_EXECUTION_ADAPTER_MAX_CERTIFICATE_LIFETIME_MS,J as XENO_HOSTED_EXECUTION_ADAPTER_PROTOCOL_VERSION,ke as XENO_HOSTED_EXECUTION_PROTOCOL_VERSION,Se as XENO_HOSTED_EXECUTION_TOOL_NAMES,ne as XENO_HOSTED_RESULT_SCHEMA_VERSION,Le as XENO_HOSTED_RUN_SCHEMA_VERSION,je as XENO_HOSTED_TRIGGER_SCHEMA_VERSION,M as XenoHostedExecutionJobError,wt as assertValidXenoHostedExecutionJob,De as createXenoHostedControlCommand,Ze as createXenoHostedEnvironmentManifest,Qe as createXenoHostedEvent,_e as createXenoHostedExecutionBoundaryReceipt,Ve as createXenoHostedRunResult,tt as deriveHostedIdempotencyKey,et as hostedEnvironmentIdentity,Te as hostedSlashCommandRefusal,_t as normalizeXenoHostedControlAcknowledgement,vt as verifyXenoHostedControlCommand,A as verifyXenoHostedEnvironmentManifest,Ye as verifyXenoHostedEventChain,dt as verifyXenoHostedExecutionAdapterCertification,Re as verifyXenoHostedExecutionJob,Tt as verifyXenoHostedRunResult,ot as verifyXenoHostedWebhook,ct as xenoHostedExecutionAdapterSigningPayload};
+var b=1,Le=1,H=1,je=1;import{createHash as q,randomUUID as oe}from"node:crypto";function l(e){return JSON.stringify(I(e,new Set))}function I(e,t){if(e===null||typeof e!="object"){if(typeof e=="number"&&!Number.isFinite(e))throw new TypeError("Artifact JSON cannot contain non-finite numbers");return e}if(t.has(e))throw new TypeError("Artifact JSON cannot contain cycles");if(t.add(e),Array.isArray(e)){let r=e.map(o=>I(o,t));return t.delete(e),r}let n={};for(let r of Object.keys(e).sort((o,s)=>o.localeCompare(s))){let o=e[r];if(o===void 0)throw new TypeError(`Artifact JSON property ${r} is undefined`);n[r]=I(o,t)}return t.delete(e),n}function h(e,t={}){for(let n of e){let r=n.codePointAt(0);if(r===127)return!0;if(!(r>31)&&!(r===9&&t.allowTab===!0)&&!((r===10||r===13)&&t.allowLineBreaks===!0))return!0}return!1}function Ze(e){let t={...L(e),schemaVersion:1,kind:"xeno-hosted-environment"};return{...t,checksum:{algorithm:"sha256",value:k(t)}}}function A(e){let t=[];if(e?.schemaVersion!==1||e.kind!=="xeno-hosted-environment")return t.push("Unsupported hosted environment manifest"),{valid:!1,errors:t};let n;try{let{checksum:r,schemaVersion:o,kind:s,...i}=e;n={...L(i),schemaVersion:1,kind:"xeno-hosted-environment"}}catch(r){return t.push(r instanceof Error?r.message:String(r)),{valid:!1,errors:t}}return l(n)!==l(se(e))&&t.push("Hosted environment manifest is not normalized"),(e.checksum?.algorithm!=="sha256"||e.checksum.value!==k(n))&&t.push("Hosted environment checksum mismatch"),{valid:t.length===0,errors:t}}function Qe(e){let t=p(e.streamId,"streamId"),n=U(e.sequence,"sequence");if(e.previous){if(e.previous.streamId!==t)throw new Error("Previous event belongs to another stream");if(e.previous.sequence+1!==n)throw new Error("Hosted event sequence must be contiguous")}else if(n!==1)throw new Error("The first hosted event sequence must be 1");let r={schemaVersion:1,kind:"xeno-hosted-event",eventId:p(e.eventId??`hevt_${oe()}`,"eventId"),streamId:t,sequence:n,timestamp:z(e.timestamp??new Date().toISOString(),"timestamp"),type:j(e.type,"type"),actorId:p(e.actorId,"actorId"),...e.idempotencyKey?{idempotencyKey:c(e.idempotencyKey,"idempotencyKey",512)}:{},payload:ie(e.payload??{},"payload"),previousHash:e.previous?.hash??null};return{...r,hash:k(r)}}function Ye(e,t){let n=[],r,o=t?t.afterSequence+1:1,s=t?.lastHash??null;for(let a of e){if(a.schemaVersion!==1||a.kind!=="xeno-hosted-event"){n.push(`Unsupported hosted event at sequence ${String(a.sequence)}`);continue}a.sequence!==o&&n.push(`Hosted event sequence gap at ${a.sequence}; expected ${o}`),a.previousHash!==s&&n.push(`Hosted event previous hash mismatch at ${a.sequence}`);let{hash:d,...g}=a;d!==k(g)&&n.push(`Hosted event hash mismatch at ${a.sequence}`),r&&r.streamId!==a.streamId&&n.push(`Hosted event stream changed at ${a.sequence}`),r=a,o=a.sequence+1,s=a.hash}let i=e.at(-1);return{valid:n.length===0,errors:n,cursor:i?{streamId:i.streamId,afterSequence:i.sequence,lastHash:i.hash}:t??null}}function et(e){let t=A(e);if(!t.valid)throw new Error(t.errors.join("; "));return`${e.environmentId}@${e.revision}:${e.checksum.value}`}function tt(...e){if(e.length===0)throw new Error("At least one idempotency-key part is required");let t=e.map((n,r)=>ae(n,`parts[${r}]`));return`xeno:${q("sha256").update(t.join("\0")).digest("hex")}`}function L(e){let t=e.secrets.map((o,s)=>({ref:p(o.ref,`secrets[${s}].ref`),target:o.target.kind==="environment"?{kind:"environment",name:de(o.target.name)}:{kind:"file",path:E(o.target.path,`secrets[${s}].target.path`)},required:!!o.required,exposeToChildProcesses:!!o.exposeToChildProcesses})),n=new Set,r=new Set;for(let o of t){if(n.has(o.ref))throw new Error(`Duplicate secret ref: ${o.ref}`);n.add(o.ref);let s=`${o.target.kind}:${o.target.kind==="environment"?o.target.name:o.target.path}`;if(r.has(s))throw new Error(`Duplicate secret target: ${s}`);r.add(s)}if(e.network.default!=="deny")throw new Error("Hosted network policy must be default-deny");return{environmentId:p(e.environmentId,"environmentId"),revision:U(e.revision,"revision"),createdAt:z(e.createdAt,"createdAt"),createdBy:p(e.createdBy,"createdBy"),workspaceId:p(e.workspaceId,"workspaceId"),name:c(e.name,"name",160),repository:{provider:e.repository.provider,repository:c(e.repository.repository,"repository.repository",2048),ref:c(e.repository.ref,"repository.ref",512),...e.repository.commit?{commit:le(e.repository.commit,"repository.commit")}:{},...e.repository.subdirectory?{subdirectory:E(e.repository.subdirectory,"repository.subdirectory")}:{},...e.repository.shallow!==void 0?{shallow:!!e.repository.shallow}:{}},image:{reference:c(e.image.reference,"image.reference",2048),digest:ue(e.image.digest),os:e.image.os,architecture:e.image.architecture},setup:e.setup.map((o,s)=>({id:p(o.id,`setup[${s}].id`),command:c(o.command,`setup[${s}].command`,32768),...o.workingDirectory?{workingDirectory:E(o.workingDirectory,`setup[${s}].workingDirectory`)}:{},timeoutMs:u(o.timeoutMs,`setup[${s}].timeoutMs`,1e3,36e5),network:o.network})),caches:e.caches.map((o,s)=>({key:c(o.key,`caches[${s}].key`,512),path:E(o.path,`caches[${s}].path`),...o.restoreKeys?.length?{restoreKeys:me(o.restoreKeys,`caches[${s}].restoreKeys`,512)}:{},...o.readOnly!==void 0?{readOnly:!!o.readOnly}:{},...o.maxBytes!==void 0?{maxBytes:u(o.maxBytes,`caches[${s}].maxBytes`,1,Number.MAX_SAFE_INTEGER)}:{}})),network:{default:"deny",dns:e.network.dns,destinations:e.network.destinations.map((o,s)=>({host:ce(o.host,`network.destinations[${s}].host`),...o.ports?.length?{ports:[...new Set(o.ports.map(i=>u(i,"port",1,65535)))].sort((i,a)=>i-a)}:{},...o.protocols?.length?{protocols:[...new Set(o.protocols)].sort()}:{},reason:c(o.reason,`network.destinations[${s}].reason`,500)})).sort((o,s)=>o.host.localeCompare(s.host)),...e.network.maxResponseBytes!==void 0?{maxResponseBytes:u(e.network.maxResponseBytes,"network.maxResponseBytes",1,Number.MAX_SAFE_INTEGER)}:{}},secrets:t,resources:{cpuMillis:u(e.resources.cpuMillis,"resources.cpuMillis",10,1e6),memoryBytes:u(e.resources.memoryBytes,"resources.memoryBytes",16*1024*1024,Number.MAX_SAFE_INTEGER),diskBytes:u(e.resources.diskBytes,"resources.diskBytes",16*1024*1024,Number.MAX_SAFE_INTEGER),processLimit:u(e.resources.processLimit,"resources.processLimit",1,65535),wallTimeMs:u(e.resources.wallTimeMs,"resources.wallTimeMs",1e3,10080*60*1e3)},retention:{workspaceTtlMs:u(e.retention.workspaceTtlMs,"retention.workspaceTtlMs",0,365*24*60*60*1e3),eventTtlMs:u(e.retention.eventTtlMs,"retention.eventTtlMs",6e4,365*24*60*60*1e3),artifactTtlMs:u(e.retention.artifactTtlMs,"retention.artifactTtlMs",6e4,365*24*60*60*1e3),wipeWorkspace:!!e.retention.wipeWorkspace},labels:Object.fromEntries(Object.entries(e.labels).map(([o,s])=>[j(o,"label key"),c(s,`labels.${o}`,500)]).sort(([o],[s])=>o.localeCompare(s)))}}function se(e){let{checksum:t,...n}=e;return n}function k(e){return q("sha256").update(l(e)).digest("hex")}function ie(e,t){let n=l(e);if(Buffer.byteLength(n,"utf8")>256*1024)throw new Error(`${t} exceeds 262144 bytes`);return JSON.parse(n)}function p(e,t){let n=c(e,t,512);if(!/^[A-Za-z0-9][A-Za-z0-9._:@/-]*$/.test(n))throw new Error(`${t} is invalid`);return n}function j(e,t){let n=c(e,t,160);if(!/^[A-Za-z0-9][A-Za-z0-9._:-]*$/.test(n))throw new Error(`${t} is invalid`);return n}function c(e,t,n){let r=e.trim();if(!r||r.length>n||h(r,{allowTab:!0,allowLineBreaks:!0}))throw new Error(`${t} is invalid`);return r}function ae(e,t){let n=e.trim();if(n.length>4096||h(n,{allowTab:!0,allowLineBreaks:!0}))throw new Error(`${t} is invalid`);return n}function U(e,t){return u(e,t,1,Number.MAX_SAFE_INTEGER)}function u(e,t,n,r){if(!Number.isSafeInteger(e)||e<n||e>r)throw new Error(`${t} must be an integer between ${n} and ${r}`);return e}function z(e,t){let n=Date.parse(e);if(!Number.isFinite(n)||new Date(n).toISOString()!==e)throw new Error(`${t} must be an ISO-8601 UTC timestamp`);return e}function ce(e,t){let n=c(e.toLowerCase(),t,253);if(n==="localhost"||/^(?:\d{1,3}\.){3}\d{1,3}$/.test(n)||n.includes(":")||!/^(?:\*\.)?(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/.test(n))throw new Error(`${t} must be a public DNS hostname or wildcard hostname`);return n}function E(e,t){let n=c(e.replaceAll("\\","/"),t,4096);if(n.startsWith("/")||/^[A-Za-z]:\//.test(n)||n.split("/").includes(".."))throw new Error(`${t} must be workspace-relative`);return n.replace(/^\.\//,"")}function de(e){let t=c(e,"secret environment name",256);if(!/^[A-Z_][A-Z0-9_]*$/.test(t))throw new Error("Secret environment target must be an uppercase environment variable name");return t}function ue(e){let t=e.trim().toLowerCase();if(!/^sha256:[a-f0-9]{64}$/.test(t))throw new Error("image.digest must be a sha256 OCI digest");return t}function le(e,t){return c(e,t,512)}function me(e,t,n){return[...new Set(e.map((r,o)=>c(r,`${t}[${o}]`,n)))]}import{createHash as pe,createHmac as C,timingSafeEqual as ge}from"node:crypto";function ot(e){let t=typeof e.body=="string"?Buffer.from(e.body,"utf8"):Buffer.from(e.body),n=pe("sha256").update(t).digest("hex"),r=e.signature?.trim();if(!r)return{valid:!1,source:e.source,bodySha256:n,error:"missing-signature"};if(!e.secret||e.secret.length<16)throw new Error("Webhook secret must contain at least 16 characters");let o,s=r;if(e.source==="slack"){if(!e.timestamp||!/^\d+$/.test(e.timestamp))return{valid:!1,source:e.source,bodySha256:n,error:"invalid-timestamp"};let a=Number(e.timestamp)*1e3,d=Math.abs((e.now??new Date).getTime()-a);if(!Number.isFinite(a)||d>(e.maxClockSkewMs??5*6e4))return{valid:!1,source:e.source,bodySha256:n,timestamp:e.timestamp,error:"stale-timestamp"};o=`v0=${C("sha256",e.secret).update(`v0:${e.timestamp}:`).update(t).digest("hex")}`}else e.source==="gitlab"?o=e.secret:e.source==="teams"?o=`HMAC ${C("sha256",Buffer.from(e.secret,"base64")).update(t).digest("base64")}`:(o=`${e.source==="github"||e.source==="jira"?"sha256=":e.source==="xeno"?"v1=":""}${C("sha256",e.secret).update(t).digest("hex")}`,e.source==="linear"&&s.startsWith("sha256=")&&(s=s.slice(7)));let i=fe(o,s);return{valid:i,source:e.source,bodySha256:n,...e.timestamp?{timestamp:e.timestamp}:{},...i?{}:{error:"invalid-signature"}}}function fe(e,t){let n=Buffer.from(e,"utf8"),r=Buffer.from(t,"utf8");return n.length===r.length&&ge(n,r)}import{createHash as he,verify as ye}from"node:crypto";var S="xeno.hosted-execution-adapter-certification.v2",J=2,xe=744*60*60*1e3;function ct(e){return F(e),Buffer.from(O(e),"utf8")}function dt(e,t){if(e?.schemaVersion!==S)throw new Error(`Hosted execution adapter certificate must use ${S}`);let{signature:n,...r}=e;if(F(r),n?.algorithm!=="ed25519")throw new Error("Hosted execution adapter signature must use ed25519");let o=T(t.executableSha256,"executableSha256"),s=T(t.controlPlaneCandidateSha256,"controlPlaneCandidateSha256");if(r.adapter.executableSha256!==o)throw new Error("Hosted execution adapter executable does not match its signed certificate");if(r.controlPlaneCandidateSha256!==s)throw new Error("Hosted execution adapter certificate is bound to another control-plane candidate");let i=t.platform??process.platform,a=t.architecture??process.arch;if(r.platform.os!==i||r.platform.architecture!==a)throw new Error(`Hosted execution adapter certificate targets ${r.platform.os}-${r.platform.architecture}, not ${i}-${a}`);let d=_(r.issuedAt,"issuedAt"),g=_(r.expiresAt,"expiresAt"),$=(t.now??new Date).getTime();if(d>$+5*6e4)throw new Error("Hosted execution adapter certificate is not yet valid");if(g<=$)throw new Error("Hosted execution adapter certificate has expired");if(g<=d||g-d>xe)throw new Error("Hosted execution adapter certificate lifetime must be positive and at most 31 days");let B=t.trustedKeys[r.reviewer.keyId];if(!B)throw new Error(`Hosted execution adapter reviewer key is not trusted: ${r.reviewer.keyId}`);if(!ye(null,Buffer.from(O(r),"utf8"),B,we(n.value,"signature.value")))throw new Error("Hosted execution adapter certificate signature is invalid");return{certificationId:r.certificationId,adapterName:r.adapter.name,adapterVersion:r.adapter.version,protocolVersion:r.adapter.protocolVersion,executableSha256:o,controlPlaneCandidateSha256:s,certificateSha256:he("sha256").update(O(e)).digest("hex"),expiresAt:r.expiresAt,reviewerKeyId:r.reviewer.keyId}}function F(e){if(e.schemaVersion!==S)throw new Error(`Hosted execution adapter certificate must use ${S}`);if(v(e.certificationId,"certificationId"),v(e.adapter?.name,"adapter.name"),v(e.adapter?.version,"adapter.version"),e.adapter?.protocolVersion!==J)throw new Error(`Hosted execution adapter protocol must be ${J}`);T(e.adapter.executableSha256,"adapter.executableSha256"),T(e.controlPlaneCandidateSha256,"controlPlaneCandidateSha256"),v(e.reviewer?.keyId,"reviewer.keyId");let t=["immutableImages","filesystemIsolation","networkDefaultDeny","destinationAllowlist","secretProjection","nonRootExecution","readOnlyRoot","processTreeCleanup","resourceLimits","interactiveControl","artifactProtocol","gitResultReporting"];if(!e.capabilities||t.some(n=>e.capabilities[n]!==!0))throw new Error("Hosted execution adapter certificate does not attest every required containment capability");_(e.issuedAt,"issuedAt"),_(e.expiresAt,"expiresAt")}function O(e){return l(e)}function T(e,t){let n=e?.trim().toLowerCase();if(!/^[a-f0-9]{64}$/.test(n))throw new Error(`${t} must be a lowercase SHA-256 digest`);return n}function v(e,t){let n=e?.trim();if(!n||n.length>256||!/^[A-Za-z0-9][A-Za-z0-9._:@/-]*$/.test(n))throw new Error(`${t} is invalid`);return n}function _(e,t){let n=Date.parse(e);if(!Number.isFinite(n)||new Date(n).toISOString()!==e)throw new Error(`${t} must be an ISO-8601 UTC timestamp`);return n}function we(e,t){if(typeof e!="string"||e.length===0||e.length>4096||!/^[A-Za-z0-9+/]+={0,2}$/.test(e))throw new Error(`${t} must be bounded base64`);let n=Buffer.from(e,"base64");if(n.toString("base64")!==e)throw new Error(`${t} is not canonical base64`);return n}import{createHash as Ee}from"node:crypto";var K=["low","medium","high","xhigh","max"],G=["default","plan","acceptEdits","auto","dontAsk","bypassPermissions"];var be=/^\/([A-Za-z][A-Za-z0-9_.:-]*)(?=\s|$)/,X="Nothing was sent to the model.",W="unsupported_slash_command",mt=Object.freeze({"thread.run":"prompt","turn.start":"input","turn.steer":"input","schedule.create":"prompt","schedule.update":"prompt"});function Z(e){let t=e.trimStart();if(t==="/"||/^\/\s/.test(t))return"";let n=be.exec(t);return n?n[1].toLowerCase():null}var ke=2,ve=["Read","Write","Edit","Glob","Grep","WebFetch"],Se=new Set(ve);function Te(e){if(!Y(e.certificationId))throw new Error("certificationId is invalid");let t=new Set(e.authority.secretRefs);return{certificationId:e.certificationId,environmentChecksum:e.environment.checksum.value,imageDigest:e.environment.image.digest,networkPolicySha256:Q({authority:e.authority.network,policy:e.environment.network}),secretProjectionSha256:Q(e.environment.secrets.filter(n=>t.has(n.ref))),filesystem:e.authority.filesystem,network:e.authority.network==="deny"?"deny":"allowlist",immutableImage:!0,readOnlyRoot:!0,nonRoot:!0,processTreeCleanup:!0,resourceLimits:!0,inferenceGateway:"brokered"}}var M=class extends Error{code="INVALID_HOSTED_EXECUTION_JOB";errors;reason;command;field;constructor(t){super(`Invalid hosted execution job: ${t.errors.join("; ")}`),this.name="XenoHostedExecutionJobError",this.errors=[...t.errors],t.slashCommand&&(this.reason=t.slashCommand.reason,this.command=t.slashCommand.command,this.field=t.slashCommand.field)}};function _e(e){if(typeof e!="string")return null;let t=Z(e);if(t===null)return null;let n={reason:W,field:"prompt"};if(!t)return{...n,command:"/",message:`prompt begins with a bare "/"; a hosted job prompt is sent to the model as text and hosted execution runs no commands. Rephrase the prompt so it does not begin with "/". ${X}`};let r=`/${t}`;return{...n,command:r,message:`prompt is the slash command ${r}; a hosted job prompt is sent to the model as text and hosted execution runs no commands, so slash commands are refused. Rephrase the prompt so it does not begin with "${r}". ${X}`}}function Re(e){let t=[];if(!Xe(e))return{valid:!1,errors:["Hosted execution job must be an object"]};let n=e;if(n.protocolVersion!==ke||n.kind!=="xeno-hosted-execution-job")return t.push("Unsupported hosted execution protocol"),{valid:!1,errors:t};y(n.runId,"runId",t),y(n.userId,"userId",t),y(n.workspaceId,"workspaceId",t),P(n.workspaceHostPath,"workspaceHostPath",4096,t),P(n.prompt,"prompt",512*1024,t),P(n.model,"model",512,t),n.effort!==void 0&&!K.includes(n.effort)&&t.push("effort is invalid"),G.includes(n.permissionMode)||t.push("permissionMode is invalid"),(typeof n.runScopedToken!="string"||!n.runScopedToken.startsWith("xrun_")||n.runScopedToken.length>16*1024)&&t.push("runScopedToken is not a bounded run-scoped token");let r;try{r=new URL(n.inferenceBaseUrl),(r.protocol!=="https:"||r.username||r.password||r.hash)&&t.push("inferenceBaseUrl must be credential-free HTTPS")}catch{t.push("inferenceBaseUrl is invalid")}let o=A(n.environment);t.push(...o.errors.map(a=>`environment: ${a}`)),n.environment?.workspaceId!==n.workspaceId&&t.push("environment workspace does not match the job"),n.environment?.image?.os!=="linux"&&t.push("hosted execution image must target Linux");let s=n.environment?.repository?.commit;(typeof s!="string"||!/^(?:[a-fA-F0-9]{40}|[a-fA-F0-9]{64})$/.test(s))&&t.push("environment repository requires a full 40- or 64-character commit object id"),He(n.authority,t),Ie(n.budget,n.environment,t),Ae(n.allowedTools,t),Ce(n,t),Oe(n,t),r&&!n.environment?.network?.destinations?.some(a=>{let d=a.ports?.length?a.ports:[443];return a.host.toLowerCase()===r.hostname.toLowerCase()&&d.includes(Number(r.port||443))})&&t.push("inference origin is absent from the environment network allowlist");try{let a=Pe(n.environment?.repository);n.environment?.network?.destinations?.some(d=>{let g=d.ports?.length?d.ports:[443];return d.host.toLowerCase()===a.hostname&&g.includes(a.port)})||t.push("repository origin is absent from the environment network allowlist")}catch{t.push("environment repository must resolve to a credential-free HTTPS origin")}let i=_e(n.prompt);return i?(t.push(i.message),{valid:!1,errors:t,slashCommand:i}):{valid:t.length===0,errors:t}}function wt(e){let t=Re(e);if(!t.valid)throw new M(t)}function He(e,t){(!e||!["read","workspace-write"].includes(e.filesystem))&&t.push("authority.filesystem is invalid"),(!e||!["deny","environment-policy"].includes(e.network))&&t.push("authority.network is invalid"),(!e||!["deny","approval-required"].includes(e.externalActions))&&t.push("authority.externalActions is invalid"),!Array.isArray(e?.secretRefs)||new Set(e.secretRefs).size!==e.secretRefs.length?t.push("authority.secretRefs must be a unique array"):e.secretRefs.forEach((n,r)=>y(n,`authority.secretRefs[${r}]`,t))}function Ie(e,t,n){(!e||!Number.isFinite(e.maxCredits)||e.maxCredits<=0)&&n.push("budget.maxCredits is invalid"),(!e||!N(e.maxDurationMs)||e.maxDurationMs>(t?.resources?.wallTimeMs??0))&&n.push("budget.maxDurationMs is invalid or exceeds the environment limit"),e?.maxTokens!==void 0&&!N(e.maxTokens)&&n.push("budget.maxTokens is invalid"),e?.maxToolCalls!==void 0&&!N(e.maxToolCalls)&&n.push("budget.maxToolCalls is invalid")}function Ae(e,t){if(!Array.isArray(e)||e.length<1||e.length>512||new Set(e).size!==e.length){t.push("allowedTools must contain 1..512 unique tool names");return}e.forEach((n,r)=>{y(n,`allowedTools[${r}]`,t),Se.has(n)||t.push(`allowedTools[${r}] is not in the hosted v0.1 registry`)})}function Ce(e,t){if(!Array.isArray(e.secrets)||e.secrets.length>128){t.push("secrets must be a bounded array");return}let n=new Set(e.authority?.secretRefs??[]),r=new Map((e.environment?.secrets??[]).map(s=>[s.ref,s])),o=new Set;for(let[s,i]of e.secrets.entries()){let a=r.get(i.ref);if(!a||!n.has(i.ref)||o.has(i.ref)){t.push(`secrets[${s}] is undeclared, unauthorized, or duplicated`);continue}o.add(i.ref),(x(a.target)!==x(i.target)||a.exposeToChildProcesses!==i.exposeToChildProcesses)&&t.push(`secrets[${s}] does not match its declared projection`),(typeof i.value!="string"||i.value.length<1||Buffer.byteLength(i.value,"utf8")>1024*1024)&&t.push(`secrets[${s}] value is empty or too large`)}for(let s of e.environment?.secrets??[])s.required&&(!n.has(s.ref)||!o.has(s.ref))&&t.push(`required secret ${s.ref} is absent or unauthorized`);[...n].some(s=>!r.has(s))&&t.push("authority references an undeclared secret")}function Oe(e,t){let n=e.expectedBoundary;if(!n){t.push("expectedBoundary is missing");return}let r;try{r=Te({certificationId:n.certificationId,environment:e.environment,authority:e.authority})}catch{t.push("expectedBoundary does not match the hosted execution contract");return}(!Y(n.certificationId)||x(n)!==x(r))&&t.push("expectedBoundary does not match the hosted execution contract")}function y(e,t,n){(typeof e!="string"||!/^[A-Za-z0-9][A-Za-z0-9._:@/-]{0,511}$/.test(e))&&n.push(`${t} is invalid`)}function P(e,t,n,r){(typeof e!="string"||e.length<1||e.length>n||e.includes("\0"))&&r.push(`${t} is invalid`)}function N(e){return typeof e=="number"&&Number.isSafeInteger(e)&&e>0}function Y(e){return typeof e=="string"&&/^[A-Za-z0-9][A-Za-z0-9._:@/-]{0,511}$/.test(e)}function Xe(e){return!!e&&typeof e=="object"&&!Array.isArray(e)}function x(e){return l(e)}function Q(e){return Ee("sha256").update(x(e)).digest("hex")}function Pe(e){if(!e)throw new Error("repository source is missing");let t=e.repository.replace(/^\/+|\/+$/g,""),n=e.provider==="github"&&!t.includes("://")?`https://github.com/${t}.git`:e.provider==="gitlab"&&!t.includes("://")?`https://gitlab.com/${t}.git`:e.provider==="bitbucket"&&!t.includes("://")?`https://bitbucket.org/${t}.git`:e.repository,r=new URL(n);if(r.protocol!=="https:"||r.username||r.password||r.hash)throw new Error("repository origin is not credential-free HTTPS");return{hostname:r.hostname.toLowerCase(),port:Number(r.port||443)}}import{createHash as Ne,randomUUID as Me}from"node:crypto";var te=1,ne=1;function De(e){let t={schemaVersion:te,kind:"xeno-hosted-control",controlId:m(e.controlId??`hctl_${Me()}`,"controlId"),runId:m(e.runId,"runId"),workspaceId:m(e.workspaceId,"workspaceId"),actorId:m(e.actorId,"actorId"),idempotencyKey:f(e.idempotencyKey,"idempotencyKey",512),createdAt:V(e.createdAt,"createdAt"),action:$e(e.action)};return{...t,hash:{algorithm:"sha256",value:re(t)}}}function St(e){let t=[];try{let{hash:n,schemaVersion:r,kind:o,...s}=e,i=De(s);(e.schemaVersion!==te||e.kind!=="xeno-hosted-control")&&t.push("Unsupported hosted control command"),w(R(e))!==w(R(i))&&t.push("Hosted control command is not normalized"),(n?.algorithm!=="sha256"||n.value!==i.hash.value)&&t.push("Hosted control command hash mismatch")}catch(n){t.push(n instanceof Error?n.message:String(n))}return{valid:t.length===0,errors:t}}function Tt(e){if(!["accepted","applied","rejected","unsupported"].includes(e.status))throw new Error("Hosted control acknowledgement status is invalid");return{controlId:m(e.controlId,"controlId"),status:e.status,acknowledgedAt:V(e.acknowledgedAt,"acknowledgedAt"),...e.reason?{reason:f(e.reason,"reason",2048)}:{}}}function Ve(e){let t=e.git?{...e.git.branch?{branch:D(e.git.branch,"git.branch")}:{},...e.git.baseRef?{baseRef:D(e.git.baseRef,"git.baseRef")}:{},...e.git.commit?{commit:D(e.git.commit,"git.commit")}:{}}:void 0,n={schemaVersion:ne,kind:"xeno-hosted-run-result",runId:m(e.runId,"runId"),workspaceId:m(e.workspaceId,"workspaceId"),completedAt:V(e.completedAt,"completedAt"),...t&&Object.keys(t).length>0?{git:t}:{},...e.pullRequest?{pullRequest:Be(e.pullRequest)}:{},artifactIds:ee(e.artifactIds,"artifactIds"),evidenceArtifactIds:ee(e.evidenceArtifactIds,"evidenceArtifactIds")};return{...n,hash:{algorithm:"sha256",value:re(n)}}}function _t(e){let t=[];try{let{hash:n,schemaVersion:r,kind:o,...s}=e,i=Ve(s);(e.schemaVersion!==ne||e.kind!=="xeno-hosted-run-result")&&t.push("Unsupported hosted run result"),w(R(e))!==w(R(i))&&t.push("Hosted run result is not normalized"),(n?.algorithm!=="sha256"||n.value!==i.hash.value)&&t.push("Hosted run result hash mismatch")}catch(n){t.push(n instanceof Error?n.message:String(n))}return{valid:t.length===0,errors:t}}function $e(e){if(e?.type==="message")return{type:"message",message:f(e.message,"action.message",32768)};if(e?.type==="approval"){if(e.decision!=="approved"&&e.decision!=="rejected")throw new Error("Hosted approval decision is invalid");return{type:"approval",requestId:m(e.requestId,"action.requestId"),decision:e.decision,scopeHash:qe(e.scopeHash,"action.scopeHash"),...e.rationale?{rationale:f(e.rationale,"action.rationale",4096)}:{}}}throw new Error("Hosted control action is invalid")}function Be(e){let t;try{t=new URL(e.url)}catch{throw new Error("pullRequest.url is invalid")}if(t.protocol!=="https:"||t.username||t.password)throw new Error("pullRequest.url must be credential-free HTTPS");if(!Number.isSafeInteger(e.number)||e.number<1)throw new Error("pullRequest.number must be a positive integer");return{provider:m(e.provider,"pullRequest.provider"),repository:f(e.repository,"pullRequest.repository",2048),number:e.number,url:t.toString()}}function ee(e,t){if(!Array.isArray(e)||e.length>1e4)throw new Error(`${t} is invalid`);return[...new Set(e.map((n,r)=>m(n,`${t}[${r}]`)))].sort()}function D(e,t){return f(e,t,512)}function m(e,t){let n=f(e,t,512);if(!/^[A-Za-z0-9][A-Za-z0-9._:@/-]*$/.test(n))throw new Error(`${t} is invalid`);return n}function f(e,t,n){let r=e?.trim();if(!r||r.length>n||h(r,{allowTab:!0,allowLineBreaks:!0}))throw new Error(`${t} is invalid`);return r}function V(e,t){let n=Date.parse(e);if(!Number.isFinite(n)||new Date(n).toISOString()!==e)throw new Error(`${t} must be ISO-8601 UTC`);return e}function qe(e,t){let n=e?.trim().toLowerCase();if(!/^[a-f0-9]{64}$/.test(n))throw new Error(`${t} must be a lowercase SHA-256 digest`);return n}function re(e){return Ne("sha256").update(w(e)).digest("hex")}function w(e){return l(e)}function R(e){let{hash:t,...n}=e;return n}export{te as XENO_HOSTED_CONTROL_SCHEMA_VERSION,b as XENO_HOSTED_ENVIRONMENT_SCHEMA_VERSION,H as XENO_HOSTED_EVENT_SCHEMA_VERSION,S as XENO_HOSTED_EXECUTION_ADAPTER_CERTIFICATION_SCHEMA,xe as XENO_HOSTED_EXECUTION_ADAPTER_MAX_CERTIFICATE_LIFETIME_MS,J as XENO_HOSTED_EXECUTION_ADAPTER_PROTOCOL_VERSION,ke as XENO_HOSTED_EXECUTION_PROTOCOL_VERSION,ve as XENO_HOSTED_EXECUTION_TOOL_NAMES,ne as XENO_HOSTED_RESULT_SCHEMA_VERSION,Le as XENO_HOSTED_RUN_SCHEMA_VERSION,je as XENO_HOSTED_TRIGGER_SCHEMA_VERSION,M as XenoHostedExecutionJobError,wt as assertValidXenoHostedExecutionJob,De as createXenoHostedControlCommand,Ze as createXenoHostedEnvironmentManifest,Qe as createXenoHostedEvent,Te as createXenoHostedExecutionBoundaryReceipt,Ve as createXenoHostedRunResult,tt as deriveHostedIdempotencyKey,et as hostedEnvironmentIdentity,_e as hostedSlashCommandRefusal,Tt as normalizeXenoHostedControlAcknowledgement,St as verifyXenoHostedControlCommand,A as verifyXenoHostedEnvironmentManifest,Ye as verifyXenoHostedEventChain,dt as verifyXenoHostedExecutionAdapterCertification,Re as verifyXenoHostedExecutionJob,_t as verifyXenoHostedRunResult,ot as verifyXenoHostedWebhook,ct as xenoHostedExecutionAdapterSigningPayload};

package/dist/hosted/metafile-cjs.json

@@ -1 +1 @@
-{"inputs":{"src/hosted/types.ts":{"bytes":7060,"imports":[],"format":"esm"},"src/artifacts/hash.ts":{"bytes":1489,"imports":[{"path":"node:crypto","kind":"import-statement","external":true}],"format":"esm"},"src/utils/text-security.ts":{"bytes":809,"imports":[],"format":"esm"},"src/hosted/protocol.ts":{"bytes":15483,"imports":[{"path":"node:crypto","kind":"import-statement","external":true},{"path":"src/artifacts/hash.ts","kind":"import-statement","original":"../artifacts/hash.js"},{"path":"src/utils/text-security.ts","kind":"import-statement","original":"../utils/text-security.js"},{"path":"src/hosted/types.ts","kind":"import-statement","original":"./types.js"}],"format":"esm"},"src/hosted/webhook.ts":{"bytes":3148,"imports":[{"path":"node:crypto","kind":"import-statement","external":true}],"format":"esm"},"src/hosted/execution-adapter.ts":{"bytes":8090,"imports":[{"path":"node:crypto","kind":"import-statement","external":true},{"path":"src/artifacts/hash.ts","kind":"import-statement","original":"../artifacts/hash.js"}],"format":"esm"},"src/types.ts":{"bytes":32150,"imports":[],"format":"esm"},"src/app-server/slash-input-guard.ts":{"bytes":5502,"imports":[],"format":"esm"},"src/hosted/execution-job.ts":{"bytes":17643,"imports":[{"path":"node:crypto","kind":"import-statement","external":true},{"path":"src/types.ts","kind":"import-statement","original":"../types.js"},{"path":"src/app-server/slash-input-guard.ts","kind":"import-statement","original":"../app-server/slash-input-guard.js"},{"path":"src/artifacts/hash.ts","kind":"import-statement","original":"../artifacts/hash.js"},{"path":"src/hosted/protocol.ts","kind":"import-statement","original":"./protocol.js"}],"format":"esm"},"src/hosted/control.ts":{"bytes":9553,"imports":[{"path":"node:crypto","kind":"import-statement","external":true},{"path":"src/artifacts/hash.ts","kind":"import-statement","original":"../artifacts/hash.js"},{"path":"src/utils/text-security.ts","kind":"import-statement","original":"../utils/text-security.js"}],"format":"esm"},"src/hosted/index.ts":{"bytes":195,"imports":[{"path":"src/hosted/types.ts","kind":"import-statement","original":"./types.js"},{"path":"src/hosted/protocol.ts","kind":"import-statement","original":"./protocol.js"},{"path":"src/hosted/webhook.ts","kind":"import-statement","original":"./webhook.js"},{"path":"src/hosted/execution-adapter.ts","kind":"import-statement","original":"./execution-adapter.js"},{"path":"src/hosted/execution-job.ts","kind":"import-statement","original":"./execution-job.js"},{"path":"src/hosted/control.ts","kind":"import-statement","original":"./control.js"}],"format":"esm"}},"outputs":{"dist/hosted/index.cjs":{"imports":[{"path":"node:crypto","kind":"require-call","external":true},{"path":"node:crypto","kind":"require-call","external":true},{"path":"node:crypto","kind":"require-call","external":true},{"path":"node:crypto","kind":"require-call","external":true},{"path":"node:crypto","kind":"require-call","external":true}],"exports":[],"entryPoint":"src/hosted/index.ts","inputs":{"src/hosted/index.ts":{"bytesInOutput":1276},"src/hosted/types.ts":{"bytesInOutput":22},"src/hosted/protocol.ts":{"bytesInOutput":8148},"src/artifacts/hash.ts":{"bytesInOutput":559},"src/utils/text-security.ts":{"bytesInOutput":179},"src/hosted/webhook.ts":{"bytesInOutput":1462},"src/hosted/execution-adapter.ts":{"bytesInOutput":3660},"src/hosted/execution-job.ts":{"bytesInOutput":7568},"src/types.ts":{"bytesInOutput":118},"src/app-server/slash-input-guard.ts":{"bytesInOutput":373},"src/hosted/control.ts":{"bytesInOutput":4070}},"bytes":28927}}}
+{"inputs":{"src/hosted/types.ts":{"bytes":7060,"imports":[],"format":"esm"},"src/artifacts/hash.ts":{"bytes":1489,"imports":[{"path":"node:crypto","kind":"import-statement","external":true}],"format":"esm"},"src/utils/text-security.ts":{"bytes":809,"imports":[],"format":"esm"},"src/hosted/protocol.ts":{"bytes":15483,"imports":[{"path":"node:crypto","kind":"import-statement","external":true},{"path":"src/artifacts/hash.ts","kind":"import-statement","original":"../artifacts/hash.js"},{"path":"src/utils/text-security.ts","kind":"import-statement","original":"../utils/text-security.js"},{"path":"src/hosted/types.ts","kind":"import-statement","original":"./types.js"}],"format":"esm"},"src/hosted/webhook.ts":{"bytes":3148,"imports":[{"path":"node:crypto","kind":"import-statement","external":true}],"format":"esm"},"src/hosted/execution-adapter.ts":{"bytes":8090,"imports":[{"path":"node:crypto","kind":"import-statement","external":true},{"path":"src/artifacts/hash.ts","kind":"import-statement","original":"../artifacts/hash.js"}],"format":"esm"},"src/types.ts":{"bytes":35541,"imports":[],"format":"esm"},"src/app-server/slash-input-guard.ts":{"bytes":5502,"imports":[],"format":"esm"},"src/hosted/execution-job.ts":{"bytes":17643,"imports":[{"path":"node:crypto","kind":"import-statement","external":true},{"path":"src/types.ts","kind":"import-statement","original":"../types.js"},{"path":"src/app-server/slash-input-guard.ts","kind":"import-statement","original":"../app-server/slash-input-guard.js"},{"path":"src/artifacts/hash.ts","kind":"import-statement","original":"../artifacts/hash.js"},{"path":"src/hosted/protocol.ts","kind":"import-statement","original":"./protocol.js"}],"format":"esm"},"src/hosted/control.ts":{"bytes":9553,"imports":[{"path":"node:crypto","kind":"import-statement","external":true},{"path":"src/artifacts/hash.ts","kind":"import-statement","original":"../artifacts/hash.js"},{"path":"src/utils/text-security.ts","kind":"import-statement","original":"../utils/text-security.js"}],"format":"esm"},"src/hosted/index.ts":{"bytes":195,"imports":[{"path":"src/hosted/types.ts","kind":"import-statement","original":"./types.js"},{"path":"src/hosted/protocol.ts","kind":"import-statement","original":"./protocol.js"},{"path":"src/hosted/webhook.ts","kind":"import-statement","original":"./webhook.js"},{"path":"src/hosted/execution-adapter.ts","kind":"import-statement","original":"./execution-adapter.js"},{"path":"src/hosted/execution-job.ts","kind":"import-statement","original":"./execution-job.js"},{"path":"src/hosted/control.ts","kind":"import-statement","original":"./control.js"}],"format":"esm"}},"outputs":{"dist/hosted/index.cjs":{"imports":[{"path":"node:crypto","kind":"require-call","external":true},{"path":"node:crypto","kind":"require-call","external":true},{"path":"node:crypto","kind":"require-call","external":true},{"path":"node:crypto","kind":"require-call","external":true},{"path":"node:crypto","kind":"require-call","external":true}],"exports":[],"entryPoint":"src/hosted/index.ts","inputs":{"src/hosted/index.ts":{"bytesInOutput":1276},"src/hosted/types.ts":{"bytesInOutput":22},"src/hosted/protocol.ts":{"bytesInOutput":8148},"src/artifacts/hash.ts":{"bytesInOutput":559},"src/utils/text-security.ts":{"bytesInOutput":179},"src/hosted/webhook.ts":{"bytesInOutput":1462},"src/hosted/execution-adapter.ts":{"bytesInOutput":3660},"src/hosted/execution-job.ts":{"bytesInOutput":7568},"src/types.ts":{"bytesInOutput":118},"src/app-server/slash-input-guard.ts":{"bytesInOutput":373},"src/hosted/control.ts":{"bytesInOutput":4070}},"bytes":28927}}}

package/dist/hosted/metafile-esm.json

@@ -1 +1 @@
-{"inputs":{"src/hosted/types.ts":{"bytes":7060,"imports":[],"format":"esm"},"src/artifacts/hash.ts":{"bytes":1489,"imports":[{"path":"node:crypto","kind":"import-statement","external":true}],"format":"esm"},"src/utils/text-security.ts":{"bytes":809,"imports":[],"format":"esm"},"src/hosted/protocol.ts":{"bytes":15483,"imports":[{"path":"node:crypto","kind":"import-statement","external":true},{"path":"src/artifacts/hash.ts","kind":"import-statement","original":"../artifacts/hash.js"},{"path":"src/utils/text-security.ts","kind":"import-statement","original":"../utils/text-security.js"},{"path":"src/hosted/types.ts","kind":"import-statement","original":"./types.js"}],"format":"esm"},"src/hosted/webhook.ts":{"bytes":3148,"imports":[{"path":"node:crypto","kind":"import-statement","external":true}],"format":"esm"},"src/hosted/execution-adapter.ts":{"bytes":8090,"imports":[{"path":"node:crypto","kind":"import-statement","external":true},{"path":"src/artifacts/hash.ts","kind":"import-statement","original":"../artifacts/hash.js"}],"format":"esm"},"src/types.ts":{"bytes":32150,"imports":[],"format":"esm"},"src/app-server/slash-input-guard.ts":{"bytes":5502,"imports":[],"format":"esm"},"src/hosted/execution-job.ts":{"bytes":17643,"imports":[{"path":"node:crypto","kind":"import-statement","external":true},{"path":"src/types.ts","kind":"import-statement","original":"../types.js"},{"path":"src/app-server/slash-input-guard.ts","kind":"import-statement","original":"../app-server/slash-input-guard.js"},{"path":"src/artifacts/hash.ts","kind":"import-statement","original":"../artifacts/hash.js"},{"path":"src/hosted/protocol.ts","kind":"import-statement","original":"./protocol.js"}],"format":"esm"},"src/hosted/control.ts":{"bytes":9553,"imports":[{"path":"node:crypto","kind":"import-statement","external":true},{"path":"src/artifacts/hash.ts","kind":"import-statement","original":"../artifacts/hash.js"},{"path":"src/utils/text-security.ts","kind":"import-statement","original":"../utils/text-security.js"}],"format":"esm"},"src/hosted/index.ts":{"bytes":195,"imports":[{"path":"src/hosted/types.ts","kind":"import-statement","original":"./types.js"},{"path":"src/hosted/protocol.ts","kind":"import-statement","original":"./protocol.js"},{"path":"src/hosted/webhook.ts","kind":"import-statement","original":"./webhook.js"},{"path":"src/hosted/execution-adapter.ts","kind":"import-statement","original":"./execution-adapter.js"},{"path":"src/hosted/execution-job.ts","kind":"import-statement","original":"./execution-job.js"},{"path":"src/hosted/control.ts","kind":"import-statement","original":"./control.js"}],"format":"esm"}},"outputs":{"dist/hosted/index.js":{"imports":[{"path":"node:crypto","kind":"import-statement","external":true},{"path":"node:crypto","kind":"import-statement","external":true},{"path":"node:crypto","kind":"import-statement","external":true},{"path":"node:crypto","kind":"import-statement","external":true},{"path":"node:crypto","kind":"import-statement","external":true}],"exports":["XENO_HOSTED_CONTROL_SCHEMA_VERSION","XENO_HOSTED_ENVIRONMENT_SCHEMA_VERSION","XENO_HOSTED_EVENT_SCHEMA_VERSION","XENO_HOSTED_EXECUTION_ADAPTER_CERTIFICATION_SCHEMA","XENO_HOSTED_EXECUTION_ADAPTER_MAX_CERTIFICATE_LIFETIME_MS","XENO_HOSTED_EXECUTION_ADAPTER_PROTOCOL_VERSION","XENO_HOSTED_EXECUTION_PROTOCOL_VERSION","XENO_HOSTED_EXECUTION_TOOL_NAMES","XENO_HOSTED_RESULT_SCHEMA_VERSION","XENO_HOSTED_RUN_SCHEMA_VERSION","XENO_HOSTED_TRIGGER_SCHEMA_VERSION","XenoHostedExecutionJobError","assertValidXenoHostedExecutionJob","createXenoHostedControlCommand","createXenoHostedEnvironmentManifest","createXenoHostedEvent","createXenoHostedExecutionBoundaryReceipt","createXenoHostedRunResult","deriveHostedIdempotencyKey","hostedEnvironmentIdentity","hostedSlashCommandRefusal","normalizeXenoHostedControlAcknowledgement","verifyXenoHostedControlCommand","verifyXenoHostedEnvironmentManifest","verifyXenoHostedEventChain","verifyXenoHostedExecutionAdapterCertification","verifyXenoHostedExecutionJob","verifyXenoHostedRunResult","verifyXenoHostedWebhook","xenoHostedExecutionAdapterSigningPayload"],"entryPoint":"src/hosted/index.ts","inputs":{"src/hosted/types.ts":{"bytesInOutput":22},"src/hosted/index.ts":{"bytesInOutput":0},"src/hosted/protocol.ts":{"bytesInOutput":8134},"src/artifacts/hash.ts":{"bytesInOutput":559},"src/utils/text-security.ts":{"bytesInOutput":179},"src/hosted/webhook.ts":{"bytesInOutput":1435},"src/hosted/execution-adapter.ts":{"bytesInOutput":3664},"src/hosted/execution-job.ts":{"bytesInOutput":7556},"src/types.ts":{"bytesInOutput":116},"src/app-server/slash-input-guard.ts":{"bytesInOutput":371},"src/hosted/control.ts":{"bytesInOutput":4079}},"bytes":27332}}}
+{"inputs":{"src/hosted/types.ts":{"bytes":7060,"imports":[],"format":"esm"},"src/artifacts/hash.ts":{"bytes":1489,"imports":[{"path":"node:crypto","kind":"import-statement","external":true}],"format":"esm"},"src/utils/text-security.ts":{"bytes":809,"imports":[],"format":"esm"},"src/hosted/protocol.ts":{"bytes":15483,"imports":[{"path":"node:crypto","kind":"import-statement","external":true},{"path":"src/artifacts/hash.ts","kind":"import-statement","original":"../artifacts/hash.js"},{"path":"src/utils/text-security.ts","kind":"import-statement","original":"../utils/text-security.js"},{"path":"src/hosted/types.ts","kind":"import-statement","original":"./types.js"}],"format":"esm"},"src/hosted/webhook.ts":{"bytes":3148,"imports":[{"path":"node:crypto","kind":"import-statement","external":true}],"format":"esm"},"src/hosted/execution-adapter.ts":{"bytes":8090,"imports":[{"path":"node:crypto","kind":"import-statement","external":true},{"path":"src/artifacts/hash.ts","kind":"import-statement","original":"../artifacts/hash.js"}],"format":"esm"},"src/types.ts":{"bytes":35541,"imports":[],"format":"esm"},"src/app-server/slash-input-guard.ts":{"bytes":5502,"imports":[],"format":"esm"},"src/hosted/execution-job.ts":{"bytes":17643,"imports":[{"path":"node:crypto","kind":"import-statement","external":true},{"path":"src/types.ts","kind":"import-statement","original":"../types.js"},{"path":"src/app-server/slash-input-guard.ts","kind":"import-statement","original":"../app-server/slash-input-guard.js"},{"path":"src/artifacts/hash.ts","kind":"import-statement","original":"../artifacts/hash.js"},{"path":"src/hosted/protocol.ts","kind":"import-statement","original":"./protocol.js"}],"format":"esm"},"src/hosted/control.ts":{"bytes":9553,"imports":[{"path":"node:crypto","kind":"import-statement","external":true},{"path":"src/artifacts/hash.ts","kind":"import-statement","original":"../artifacts/hash.js"},{"path":"src/utils/text-security.ts","kind":"import-statement","original":"../utils/text-security.js"}],"format":"esm"},"src/hosted/index.ts":{"bytes":195,"imports":[{"path":"src/hosted/types.ts","kind":"import-statement","original":"./types.js"},{"path":"src/hosted/protocol.ts","kind":"import-statement","original":"./protocol.js"},{"path":"src/hosted/webhook.ts","kind":"import-statement","original":"./webhook.js"},{"path":"src/hosted/execution-adapter.ts","kind":"import-statement","original":"./execution-adapter.js"},{"path":"src/hosted/execution-job.ts","kind":"import-statement","original":"./execution-job.js"},{"path":"src/hosted/control.ts","kind":"import-statement","original":"./control.js"}],"format":"esm"}},"outputs":{"dist/hosted/index.js":{"imports":[{"path":"node:crypto","kind":"import-statement","external":true},{"path":"node:crypto","kind":"import-statement","external":true},{"path":"node:crypto","kind":"import-statement","external":true},{"path":"node:crypto","kind":"import-statement","external":true},{"path":"node:crypto","kind":"import-statement","external":true}],"exports":["XENO_HOSTED_CONTROL_SCHEMA_VERSION","XENO_HOSTED_ENVIRONMENT_SCHEMA_VERSION","XENO_HOSTED_EVENT_SCHEMA_VERSION","XENO_HOSTED_EXECUTION_ADAPTER_CERTIFICATION_SCHEMA","XENO_HOSTED_EXECUTION_ADAPTER_MAX_CERTIFICATE_LIFETIME_MS","XENO_HOSTED_EXECUTION_ADAPTER_PROTOCOL_VERSION","XENO_HOSTED_EXECUTION_PROTOCOL_VERSION","XENO_HOSTED_EXECUTION_TOOL_NAMES","XENO_HOSTED_RESULT_SCHEMA_VERSION","XENO_HOSTED_RUN_SCHEMA_VERSION","XENO_HOSTED_TRIGGER_SCHEMA_VERSION","XenoHostedExecutionJobError","assertValidXenoHostedExecutionJob","createXenoHostedControlCommand","createXenoHostedEnvironmentManifest","createXenoHostedEvent","createXenoHostedExecutionBoundaryReceipt","createXenoHostedRunResult","deriveHostedIdempotencyKey","hostedEnvironmentIdentity","hostedSlashCommandRefusal","normalizeXenoHostedControlAcknowledgement","verifyXenoHostedControlCommand","verifyXenoHostedEnvironmentManifest","verifyXenoHostedEventChain","verifyXenoHostedExecutionAdapterCertification","verifyXenoHostedExecutionJob","verifyXenoHostedRunResult","verifyXenoHostedWebhook","xenoHostedExecutionAdapterSigningPayload"],"entryPoint":"src/hosted/index.ts","inputs":{"src/hosted/types.ts":{"bytesInOutput":22},"src/hosted/index.ts":{"bytesInOutput":0},"src/hosted/protocol.ts":{"bytesInOutput":8134},"src/artifacts/hash.ts":{"bytesInOutput":559},"src/utils/text-security.ts":{"bytesInOutput":179},"src/hosted/webhook.ts":{"bytesInOutput":1435},"src/hosted/execution-adapter.ts":{"bytesInOutput":3664},"src/hosted/execution-job.ts":{"bytesInOutput":7556},"src/types.ts":{"bytesInOutput":116},"src/app-server/slash-input-guard.ts":{"bytesInOutput":371},"src/hosted/control.ts":{"bytesInOutput":4079}},"bytes":27332}}}