agent-hitch 0.2.5 → 0.2.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +14 -1
- package/dist/scripts/canary-buildkit-secrets.js +166 -0
- package/dist/scripts/canary-buildkit-secrets.js.map +1 -0
- package/dist/scripts/canary-collision-domains.js +77 -0
- package/dist/scripts/canary-collision-domains.js.map +1 -0
- package/dist/scripts/canary-docker-image-observation.js +181 -0
- package/dist/scripts/canary-docker-image-observation.js.map +1 -0
- package/dist/scripts/canary-gpu-hardware.js +95 -0
- package/dist/scripts/canary-gpu-hardware.js.map +1 -0
- package/dist/scripts/canary-harbor-load.js +365 -0
- package/dist/scripts/canary-harbor-load.js.map +1 -0
- package/dist/scripts/canary-packaged-harness.js +75 -0
- package/dist/scripts/canary-packaged-harness.js.map +1 -0
- package/dist/scripts/canary-resource-load.js +188 -0
- package/dist/scripts/canary-resource-load.js.map +1 -0
- package/dist/scripts/check-architecture.js +8 -4
- package/dist/scripts/check-architecture.js.map +1 -1
- package/dist/scripts/docker-reaper-crash-child.js +21 -0
- package/dist/scripts/docker-reaper-crash-child.js.map +1 -0
- package/dist/src/adapters/catalog.js +1 -0
- package/dist/src/adapters/catalog.js.map +1 -1
- package/dist/src/adapters/discovery.js +1 -1
- package/dist/src/adapters/discovery.js.map +1 -1
- package/dist/src/adapters/providers/claude.js +6 -0
- package/dist/src/adapters/providers/claude.js.map +1 -1
- package/dist/src/adapters/providers/codex.js +6 -0
- package/dist/src/adapters/providers/codex.js.map +1 -1
- package/dist/src/adapters/providers/deepseek.js +6 -0
- package/dist/src/adapters/providers/deepseek.js.map +1 -1
- package/dist/src/adapters/providers/opencode.js +6 -0
- package/dist/src/adapters/providers/opencode.js.map +1 -1
- package/dist/src/adapters/providers/pi.js +6 -0
- package/dist/src/adapters/providers/pi.js.map +1 -1
- package/dist/src/artifacts/index.js +1 -0
- package/dist/src/artifacts/index.js.map +1 -1
- package/dist/src/backends/harbor/backend.js +55 -104
- package/dist/src/backends/harbor/backend.js.map +1 -1
- package/dist/src/backends/harbor/environment-config.js +92 -0
- package/dist/src/backends/harbor/environment-config.js.map +1 -0
- package/dist/src/backends/harbor/index.js +5 -1
- package/dist/src/backends/harbor/index.js.map +1 -1
- package/dist/src/backends/harbor/model-proxy-config.js +23 -0
- package/dist/src/backends/harbor/model-proxy-config.js.map +1 -0
- package/dist/src/backends/harbor/process.js +177 -0
- package/dist/src/backends/harbor/process.js.map +1 -0
- package/dist/src/backends/harbor/runtime-toolchain.js +30 -0
- package/dist/src/backends/harbor/runtime-toolchain.js.map +1 -0
- package/dist/src/backends/harbor/supervisor.js +74 -0
- package/dist/src/backends/harbor/supervisor.js.map +1 -0
- package/dist/src/backends/harbor/task-resources.js +206 -0
- package/dist/src/backends/harbor/task-resources.js.map +1 -0
- package/dist/src/backends/harbor/tools.js +6 -29
- package/dist/src/backends/harbor/tools.js.map +1 -1
- package/dist/src/backends/harbor/verifier-config.js +11 -0
- package/dist/src/backends/harbor/verifier-config.js.map +1 -0
- package/dist/src/backends/index.js +4 -1
- package/dist/src/backends/index.js.map +1 -1
- package/dist/src/cli/arguments.js +14 -0
- package/dist/src/cli/arguments.js.map +1 -1
- package/dist/src/cli/commands/daemon.js +135 -8
- package/dist/src/cli/commands/daemon.js.map +1 -1
- package/dist/src/cli/commands/eval.js +214 -4
- package/dist/src/cli/commands/eval.js.map +1 -1
- package/dist/src/cli/commands/images.js +40 -0
- package/dist/src/cli/commands/images.js.map +1 -0
- package/dist/src/cli/commands/run.js +6 -3
- package/dist/src/cli/commands/run.js.map +1 -1
- package/dist/src/cli/commands/runs.js +25 -3
- package/dist/src/cli/commands/runs.js.map +1 -1
- package/dist/src/cli/commands/worker.js +79 -0
- package/dist/src/cli/commands/worker.js.map +1 -0
- package/dist/src/cli/main.js +4 -0
- package/dist/src/cli/main.js.map +1 -1
- package/dist/src/cli/output.js +72 -3
- package/dist/src/cli/output.js.map +1 -1
- package/dist/src/control-plane/build-admission.js +69 -0
- package/dist/src/control-plane/build-admission.js.map +1 -0
- package/dist/src/control-plane/build-records.js +6 -0
- package/dist/src/control-plane/build-records.js.map +1 -0
- package/dist/src/control-plane/collisions.js +40 -0
- package/dist/src/control-plane/collisions.js.map +1 -0
- package/dist/src/control-plane/eval-control-state.js +22 -0
- package/dist/src/control-plane/eval-control-state.js.map +1 -0
- package/dist/src/control-plane/eval-control-work.js +39 -0
- package/dist/src/control-plane/eval-control-work.js.map +1 -0
- package/dist/src/control-plane/eval-image-resolution.js +52 -0
- package/dist/src/control-plane/eval-image-resolution.js.map +1 -0
- package/dist/src/control-plane/eval-image-services.js +30 -0
- package/dist/src/control-plane/eval-image-services.js.map +1 -0
- package/dist/src/control-plane/eval-records.js +252 -0
- package/dist/src/control-plane/eval-records.js.map +1 -0
- package/dist/src/control-plane/eval-recovery.js +181 -0
- package/dist/src/control-plane/eval-recovery.js.map +1 -0
- package/dist/src/control-plane/eval-scheduler.js +447 -0
- package/dist/src/control-plane/eval-scheduler.js.map +1 -0
- package/dist/src/control-plane/index.js +20 -0
- package/dist/src/control-plane/index.js.map +1 -0
- package/dist/src/control-plane/local-worker.js +49 -0
- package/dist/src/control-plane/local-worker.js.map +1 -0
- package/dist/src/control-plane/model-capture-planning.js +12 -0
- package/dist/src/control-plane/model-capture-planning.js.map +1 -0
- package/dist/src/control-plane/remote-result-transport.js +172 -0
- package/dist/src/control-plane/remote-result-transport.js.map +1 -0
- package/dist/src/control-plane/remote-work-coordinator.js +332 -0
- package/dist/src/control-plane/remote-work-coordinator.js.map +1 -0
- package/dist/src/control-plane/remote-work-inputs.js +266 -0
- package/dist/src/control-plane/remote-work-inputs.js.map +1 -0
- package/dist/src/control-plane/remote-work-recovery.js +181 -0
- package/dist/src/control-plane/remote-work-recovery.js.map +1 -0
- package/dist/src/control-plane/remote-worker-artifacts.js +135 -0
- package/dist/src/control-plane/remote-worker-artifacts.js.map +1 -0
- package/dist/src/control-plane/remote-worker-client.js +202 -0
- package/dist/src/control-plane/remote-worker-client.js.map +1 -0
- package/dist/src/control-plane/remote-worker-configuration.js +34 -0
- package/dist/src/control-plane/remote-worker-configuration.js.map +1 -0
- package/dist/src/control-plane/remote-worker-credentials.js +58 -0
- package/dist/src/control-plane/remote-worker-credentials.js.map +1 -0
- package/dist/src/control-plane/remote-worker-protocol.js +510 -0
- package/dist/src/control-plane/remote-worker-protocol.js.map +1 -0
- package/dist/src/control-plane/remote-worker-runner.js +214 -0
- package/dist/src/control-plane/remote-worker-runner.js.map +1 -0
- package/dist/src/control-plane/remote-workers.js +377 -0
- package/dist/src/control-plane/remote-workers.js.map +1 -0
- package/dist/src/control-plane/rerun-scheduler.js +411 -0
- package/dist/src/control-plane/rerun-scheduler.js.map +1 -0
- package/dist/src/control-plane/rerun-submission.js +56 -0
- package/dist/src/control-plane/rerun-submission.js.map +1 -0
- package/dist/src/control-plane/resources.js +182 -0
- package/dist/src/control-plane/resources.js.map +1 -0
- package/dist/src/control-plane/scheduler-eval-entry.js +32 -0
- package/dist/src/control-plane/scheduler-eval-entry.js.map +1 -0
- package/dist/src/control-plane/synthetic-result.js +21 -0
- package/dist/src/control-plane/synthetic-result.js.map +1 -0
- package/dist/src/control-plane/work-admission.js +21 -0
- package/dist/src/control-plane/work-admission.js.map +1 -0
- package/dist/src/control-plane/work-dispatcher.js +229 -0
- package/dist/src/control-plane/work-dispatcher.js.map +1 -0
- package/dist/src/controller-runtime/hash.js +12 -1
- package/dist/src/controller-runtime/hash.js.map +1 -1
- package/dist/src/controller-runtime/index.js +1 -1
- package/dist/src/controller-runtime/index.js.map +1 -1
- package/dist/src/controller-runtime/store.js +15 -6
- package/dist/src/controller-runtime/store.js.map +1 -1
- package/dist/src/daemon/client.js.map +1 -1
- package/dist/src/daemon/event-stream.js +46 -0
- package/dist/src/daemon/event-stream.js.map +1 -0
- package/dist/src/daemon/health.js +66 -0
- package/dist/src/daemon/health.js.map +1 -0
- package/dist/src/daemon/launcher.js +28 -1
- package/dist/src/daemon/launcher.js.map +1 -1
- package/dist/src/daemon/logging.js +23 -0
- package/dist/src/daemon/logging.js.map +1 -0
- package/dist/src/daemon/scheduler.js +26 -5
- package/dist/src/daemon/scheduler.js.map +1 -1
- package/dist/src/daemon/server.js +255 -98
- package/dist/src/daemon/server.js.map +1 -1
- package/dist/src/daemon/telemetry.js +163 -0
- package/dist/src/daemon/telemetry.js.map +1 -0
- package/dist/src/daemon/worker-routes.js +219 -0
- package/dist/src/daemon/worker-routes.js.map +1 -0
- package/dist/src/domain/bundles.js +2 -0
- package/dist/src/domain/bundles.js.map +1 -0
- package/dist/src/domain/control-plane.js +2 -0
- package/dist/src/domain/control-plane.js.map +1 -0
- package/dist/src/domain/execution-evidence.js +2 -0
- package/dist/src/domain/execution-evidence.js.map +1 -0
- package/dist/src/domain/execution-plan.js +2 -0
- package/dist/src/domain/execution-plan.js.map +1 -0
- package/dist/src/domain/images.js +2 -0
- package/dist/src/domain/images.js.map +1 -0
- package/dist/src/domain/index.js +9 -0
- package/dist/src/domain/index.js.map +1 -1
- package/dist/src/domain/interactions.js +2 -0
- package/dist/src/domain/interactions.js.map +1 -0
- package/dist/src/domain/providers.js +2 -0
- package/dist/src/domain/providers.js.map +1 -0
- package/dist/src/domain/resources.js +2 -0
- package/dist/src/domain/resources.js.map +1 -0
- package/dist/src/domain/workers.js +2 -0
- package/dist/src/domain/workers.js.map +1 -0
- package/dist/src/evals/collect-only-rerun.js +182 -0
- package/dist/src/evals/collect-only-rerun.js.map +1 -0
- package/dist/src/evals/directory.js +30 -0
- package/dist/src/evals/directory.js.map +1 -0
- package/dist/src/evals/docker-engine-stats.js +89 -0
- package/dist/src/evals/docker-engine-stats.js.map +1 -0
- package/dist/src/evals/docker-ownership.js +51 -0
- package/dist/src/evals/docker-ownership.js.map +1 -0
- package/dist/src/evals/docker-reaper.js +144 -0
- package/dist/src/evals/docker-reaper.js.map +1 -0
- package/dist/src/evals/docker-resource-observer.js +207 -0
- package/dist/src/evals/docker-resource-observer.js.map +1 -0
- package/dist/src/evals/environment-image-planning.js +164 -0
- package/dist/src/evals/environment-image-planning.js.map +1 -0
- package/dist/src/evals/eval-artifact-planning.js +56 -0
- package/dist/src/evals/eval-artifact-planning.js.map +1 -0
- package/dist/src/evals/eval-finalization.js +10 -0
- package/dist/src/evals/eval-finalization.js.map +1 -0
- package/dist/src/evals/eval-lifecycle-events.js +16 -0
- package/dist/src/evals/eval-lifecycle-events.js.map +1 -0
- package/dist/src/evals/events.js +53 -5
- package/dist/src/evals/events.js.map +1 -1
- package/dist/src/evals/execution-evidence.js +116 -0
- package/dist/src/evals/execution-evidence.js.map +1 -0
- package/dist/src/evals/execution-leases.js +342 -0
- package/dist/src/evals/execution-leases.js.map +1 -0
- package/dist/src/evals/execution-plan-artifacts.js +72 -0
- package/dist/src/evals/execution-plan-artifacts.js.map +1 -0
- package/dist/src/evals/execution-plan-images.js +69 -0
- package/dist/src/evals/execution-plan-images.js.map +1 -0
- package/dist/src/evals/execution-plan-resources.js +174 -0
- package/dist/src/evals/execution-plan-resources.js.map +1 -0
- package/dist/src/evals/execution-plan.js +415 -0
- package/dist/src/evals/execution-plan.js.map +1 -0
- package/dist/src/evals/harbor-artifact-builder-image.js +99 -0
- package/dist/src/evals/harbor-artifact-builder-image.js.map +1 -0
- package/dist/src/evals/harbor-artifact-builder.js +354 -0
- package/dist/src/evals/harbor-artifact-builder.js.map +1 -0
- package/dist/src/evals/harbor-bridge-error.js +39 -3
- package/dist/src/evals/harbor-bridge-error.js.map +1 -1
- package/dist/src/evals/harbor-phase-timings.js +60 -0
- package/dist/src/evals/harbor-phase-timings.js.map +1 -0
- package/dist/src/evals/index.js +26 -3
- package/dist/src/evals/index.js.map +1 -1
- package/dist/src/evals/infrastructure-retry.js +218 -0
- package/dist/src/evals/infrastructure-retry.js.map +1 -0
- package/dist/src/evals/interaction-capture-import.js +49 -0
- package/dist/src/evals/interaction-capture-import.js.map +1 -0
- package/dist/src/evals/local-docker-provider.js +372 -0
- package/dist/src/evals/local-docker-provider.js.map +1 -0
- package/dist/src/evals/local-eval-planning.js +80 -0
- package/dist/src/evals/local-eval-planning.js.map +1 -0
- package/dist/src/evals/model-capture-plan.js +22 -0
- package/dist/src/evals/model-capture-plan.js.map +1 -0
- package/dist/src/evals/model-capture-runtime.js +114 -0
- package/dist/src/evals/model-capture-runtime.js.map +1 -0
- package/dist/src/evals/model-proxy-runtime-state.js +53 -0
- package/dist/src/evals/model-proxy-runtime-state.js.map +1 -0
- package/dist/src/evals/planned-execution-support.js +54 -0
- package/dist/src/evals/planned-execution-support.js.map +1 -0
- package/dist/src/evals/planned-execution.js +461 -0
- package/dist/src/evals/planned-execution.js.map +1 -0
- package/dist/src/evals/planned-remote-execution.js +40 -0
- package/dist/src/evals/planned-remote-execution.js.map +1 -0
- package/dist/src/evals/planned-retry-lifecycle.js +186 -0
- package/dist/src/evals/planned-retry-lifecycle.js.map +1 -0
- package/dist/src/evals/prepared-harness.js +76 -0
- package/dist/src/evals/prepared-harness.js.map +1 -0
- package/dist/src/evals/progress.js +4 -4
- package/dist/src/evals/progress.js.map +1 -1
- package/dist/src/evals/records.js +20 -3
- package/dist/src/evals/records.js.map +1 -1
- package/dist/src/evals/recovery.js +192 -0
- package/dist/src/evals/recovery.js.map +1 -0
- package/dist/src/evals/remote-infrastructure-retry.js +99 -0
- package/dist/src/evals/remote-infrastructure-retry.js.map +1 -0
- package/dist/src/evals/request.js +14 -1
- package/dist/src/evals/request.js.map +1 -1
- package/dist/src/evals/rerun-inputs.js +89 -0
- package/dist/src/evals/rerun-inputs.js.map +1 -0
- package/dist/src/evals/rerun-slots.js +12 -3
- package/dist/src/evals/rerun-slots.js.map +1 -1
- package/dist/src/evals/rerun-types.js +49 -0
- package/dist/src/evals/rerun-types.js.map +1 -0
- package/dist/src/evals/rerun.js +113 -75
- package/dist/src/evals/rerun.js.map +1 -1
- package/dist/src/evals/result-helpers.js +65 -0
- package/dist/src/evals/result-helpers.js.map +1 -0
- package/dist/src/evals/resume-state.js +36 -0
- package/dist/src/evals/resume-state.js.map +1 -0
- package/dist/src/evals/service-types.js +2 -0
- package/dist/src/evals/service-types.js.map +1 -0
- package/dist/src/evals/service.js +327 -237
- package/dist/src/evals/service.js.map +1 -1
- package/dist/src/evals/task-resources.js +209 -0
- package/dist/src/evals/task-resources.js.map +1 -0
- package/dist/src/evals/trial-environment-evidence.js +87 -0
- package/dist/src/evals/trial-environment-evidence.js.map +1 -0
- package/dist/src/evals/trial-execution-evidence.js +13 -0
- package/dist/src/evals/trial-execution-evidence.js.map +1 -0
- package/dist/src/evals/trial-import-identity.js +31 -0
- package/dist/src/evals/trial-import-identity.js.map +1 -0
- package/dist/src/evals/trial-import.js +166 -168
- package/dist/src/evals/trial-import.js.map +1 -1
- package/dist/src/evals/trial-publication-recovery.js +104 -0
- package/dist/src/evals/trial-publication-recovery.js.map +1 -0
- package/dist/src/evals/trial-publication.js +25 -0
- package/dist/src/evals/trial-publication.js.map +1 -0
- package/dist/src/evals/verifier-diagnostics.js +235 -0
- package/dist/src/evals/verifier-diagnostics.js.map +1 -0
- package/dist/src/evals/work-item-artifacts.js +23 -0
- package/dist/src/evals/work-item-artifacts.js.map +1 -0
- package/dist/src/foundation/config.js +17 -0
- package/dist/src/foundation/config.js.map +1 -1
- package/dist/src/foundation/credential-redaction.js +137 -0
- package/dist/src/foundation/credential-redaction.js.map +1 -0
- package/dist/src/foundation/environment-image-references.js +59 -0
- package/dist/src/foundation/environment-image-references.js.map +1 -0
- package/dist/src/foundation/executable.js +45 -5
- package/dist/src/foundation/executable.js.map +1 -1
- package/dist/src/foundation/index.js +5 -2
- package/dist/src/foundation/index.js.map +1 -1
- package/dist/src/foundation/process-identity.js +69 -0
- package/dist/src/foundation/process-identity.js.map +1 -0
- package/dist/src/images/context.js +47 -0
- package/dist/src/images/context.js.map +1 -0
- package/dist/src/images/docker-buildkit.js +137 -0
- package/dist/src/images/docker-buildkit.js.map +1 -0
- package/dist/src/images/dockerfile.js +67 -0
- package/dist/src/images/dockerfile.js.map +1 -0
- package/dist/src/images/gc.js +261 -0
- package/dist/src/images/gc.js.map +1 -0
- package/dist/src/images/index.js +10 -0
- package/dist/src/images/index.js.map +1 -0
- package/dist/src/images/manifest.js +109 -0
- package/dist/src/images/manifest.js.map +1 -0
- package/dist/src/images/ownership.js +5 -0
- package/dist/src/images/ownership.js.map +1 -0
- package/dist/src/images/records.js +32 -0
- package/dist/src/images/records.js.map +1 -0
- package/dist/src/images/registry.js +154 -0
- package/dist/src/images/registry.js.map +1 -0
- package/dist/src/images/service.js +224 -0
- package/dist/src/images/service.js.map +1 -0
- package/dist/src/model-access/capture.js +255 -0
- package/dist/src/model-access/capture.js.map +1 -0
- package/dist/src/model-access/index.js +5 -0
- package/dist/src/model-access/index.js.map +1 -0
- package/dist/src/model-access/policy.js +49 -0
- package/dist/src/model-access/policy.js.map +1 -0
- package/dist/src/model-access/proxy.js +336 -0
- package/dist/src/model-access/proxy.js.map +1 -0
- package/dist/src/model-access/records.js +167 -0
- package/dist/src/model-access/records.js.map +1 -0
- package/dist/src/runs/bundle.js +450 -0
- package/dist/src/runs/bundle.js.map +1 -0
- package/dist/src/runs/events.js +12 -1
- package/dist/src/runs/events.js.map +1 -1
- package/dist/src/runs/executor.js +24 -17
- package/dist/src/runs/executor.js.map +1 -1
- package/dist/src/runs/index.js +3 -1
- package/dist/src/runs/index.js.map +1 -1
- package/dist/src/runs/manifest.js +5 -5
- package/dist/src/runs/manifest.js.map +1 -1
- package/dist/src/runs/request.js +6 -1
- package/dist/src/runs/request.js.map +1 -1
- package/dist/src/runs/training-candidate.js +161 -0
- package/dist/src/runs/training-candidate.js.map +1 -0
- package/dist/src/trajectories/provider-capture.js +15 -24
- package/dist/src/trajectories/provider-capture.js.map +1 -1
- package/dist/src/trajectories/providers/deepseek.js +3 -3
- package/dist/src/trajectories/providers/deepseek.js.map +1 -1
- package/dist/src/workers/index.js +3 -0
- package/dist/src/workers/index.js.map +1 -0
- package/dist/src/workers/remote-harbor-work-spec.js +97 -0
- package/dist/src/workers/remote-harbor-work-spec.js.map +1 -0
- package/dist/src/workers/remote-harbor-worker.js +220 -0
- package/dist/src/workers/remote-harbor-worker.js.map +1 -0
- package/docs/schemas/environment-build-index.schema.json +13 -0
- package/docs/schemas/environment-build-record.schema.json +25 -0
- package/docs/schemas/environment-image-manifest.schema.json +62 -0
- package/docs/schemas/eval-control.schema.json +36 -0
- package/docs/schemas/eval-execution-plan.schema.json +216 -0
- package/docs/schemas/eval-request.schema.json +2 -0
- package/docs/schemas/eval-rerun-result.schema.json +53 -0
- package/docs/schemas/eval-rerun-state.schema.json +61 -0
- package/docs/schemas/eval-rerun-submission.schema.json +58 -0
- package/docs/schemas/eval-result.schema.json +34 -1
- package/docs/schemas/eval-submission-input.schema.json +14 -0
- package/docs/schemas/eval-submission.schema.json +68 -0
- package/docs/schemas/eval-trial-publication.schema.json +39 -0
- package/docs/schemas/execution-evidence.schema.json +96 -0
- package/docs/schemas/execution-lease.schema.json +50 -0
- package/docs/schemas/execution-provider-status.schema.json +65 -0
- package/docs/schemas/execution-worker.schema.json +53 -0
- package/docs/schemas/harbor-process-exit.schema.json +14 -0
- package/docs/schemas/interaction-capture-ref.schema.json +45 -0
- package/docs/schemas/local-provider-execution.schema.json +33 -0
- package/docs/schemas/model-interaction.schema.json +41 -0
- package/docs/schemas/remote-result-envelope.schema.json +32 -0
- package/docs/schemas/remote-tree-envelope.schema.json +25 -0
- package/docs/schemas/remote-work-offer.schema.json +58 -0
- package/docs/schemas/remote-work-receipt.schema.json +50 -0
- package/docs/schemas/remote-worker-artifact.schema.json +17 -0
- package/docs/schemas/remote-worker-event.schema.json +18 -0
- package/docs/schemas/remote-worker-heartbeat.schema.json +37 -0
- package/docs/schemas/remote-worker-registration.schema.json +52 -0
- package/docs/schemas/result-bundle-index.schema.json +133 -0
- package/docs/schemas/run-environment-images.schema.json +39 -0
- package/docs/schemas/training-data-candidate.schema.json +46 -0
- package/integrations/harbor/hitch_harbor_agent.py +300 -547
- package/integrations/harbor/hitch_harbor_environment.py +331 -0
- package/integrations/harbor/hitch_harbor_task_resources.py +275 -0
- package/integrations/harbor/hitch_harbor_verifier.py +337 -0
- package/package.json +16 -2
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/images/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAClH,OAAO,EAAE,wBAAwB,EAAE,6BAA6B,EAAE,MAAM,eAAe,CAAC;AACxF,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AAc5D,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAUrD;IACC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAC/I,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7F,IAAI,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;WACrJ,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC;WACzG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,UAAU,CAAC,oDAAoD,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9H,CAAC;IACD,MAAM,eAAe,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9E,IAAI,eAAe,IAAI,eAAe,KAAK,QAAQ,CAAC,eAAe;QAAE,MAAM,IAAI,UAAU,CAAC,2DAA2D,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IACxM,MAAM,QAAQ,GAAG,UAAU,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,mBAAmB,EAAE,KAAK,CAAC,SAAS,EAAE,eAAe,EAAE,QAAQ,CAAC,eAAe,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC7J,MAAM,eAAe,GAAgE;QACnF,cAAc,EAAE,GAAG;QACnB,MAAM,EAAE;YACN,IAAI,EAAE,UAAU;YAChB,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,kBAAkB,EAAE,KAAK,CAAC,iBAAiB;YAC3C,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnD;QACD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE;YACL,OAAO,EAAE,UAAU;YACnB,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;YAC7B,QAAQ,EAAE,qBAAqB;YAC/B,YAAY,EAAE,WAAW;YACzB,SAAS,EAAE,QAAQ;SACpB;QACD,MAAM,EAAE;YACN,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7E;QACD,WAAW,EAAE,EAAE;KAChB,CAAC;IACF,MAAM,QAAQ,GAAG,6BAA6B,CAAC;QAC7C,GAAG,eAAe;QAClB,QAAQ,EAAE,wBAAwB,CAAC,eAAe,CAAC;QACnD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,4BAA4B,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,SAAS,GAAG,6BAA6B,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACtE,IAAI,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,SAAS,CAAC,MAAM,CAAC,eAAe,KAAK,QAAQ,CAAC,MAAM,CAAC,eAAe;YAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;QACnL,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjD,CAAC;IACD,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,MAAM,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtC,OAAO,EAAE,QAAQ,EAAE,6BAA6B,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC5F,CAAC;AAQD,MAAM,OAAO,sBAAsB;IACxB,EAAE,CAAS;IACH,MAAM,CAAS;IACf,GAAG,CAAoB;IAExC,YAAY,EAAE,gBAAgB,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,uBAAuB,KAAoC,EAAE;QACnH,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;QACvE,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,GAAG,gBAAgB,IAAI,GAAG,CAAC,iBAAiB,IAAI,QAAQ,CAAC;QACpE,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,QAAgB,EAAE,MAAoB;QACrE,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;QAC7G,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE;gBACzE,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,WAAW,EAAE,4BAA4B;gBACzC,eAAe,EAAE,CAAC;gBAClB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9B,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE;gBACtG,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,WAAW,EAAE,mBAAmB;gBAChC,eAAe,EAAE,EAAE;gBACnB,SAAS,EAAE,MAAM;gBACjB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9B,CAAC,CAAC;YACH,OAAO,qBAAqB,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA2B,CAAC,IAAI,KAAK,WAAW;gBAAE,MAAM,KAAK,CAAC;YACnE,MAAM,IAAI,UAAU,CAAC,kCAAkC,EAAE,EAAE,IAAI,EAAG,KAA2B,CAAC,IAAI,IAAI,4BAA4B,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACpK,CAAC;IACH,CAAC;CACF;AAED,SAAS,qBAAqB,CAAC,SAAiB,EAAE,QAAgB,EAAE,MAAc;IAChF,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAAC,CAAC;IAC3G,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAC9H,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACvM,MAAM,cAAc,GAAG,GAAG,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,YAAY,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC3I,IAAI,cAAc,KAAK,QAAQ;QAAE,MAAM,IAAI,UAAU,CAAC,wCAAwC,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IACnJ,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1I,MAAM,eAAe,GAAG,SAAS,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,GAAG,UAAU,IAAI,eAAe,EAAE,CAAC;WACpF,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC;WAC9D,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3D,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;IACrF,MAAM,cAAc,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAW,CAAC;IAC/E,IAAI,eAAe,IAAI,cAAc,KAAK,eAAe;QAAE,MAAM,IAAI,UAAU,CAAC,uCAAuC,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1K,OAAO,EAAE,SAAS,EAAE,GAAG,UAAU,IAAI,cAAc,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;AAC9I,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB;IACrC,MAAM,aAAa,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAW,CAAC;IACxD,MAAM,KAAK,GAAG,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;AACvE,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACnI,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,cAAc,CAAC,KAAe;IACrC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;IAC3H,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1G,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY;IACrC,IAAI,CAAC;QAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAC1D,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}
|
|
@@ -0,0 +1,224 @@
|
|
|
1
|
+
import { randomUUID } from "node:crypto";
|
|
2
|
+
import path from "node:path";
|
|
3
|
+
import { HitchError, atomicWriteJSON, ensureDir, readJSON, sha256JSON, statePaths, withFileLock } from "../foundation/index.js";
|
|
4
|
+
import { resolveBuildContext } from "./context.js";
|
|
5
|
+
import { environmentImageIdentity, parseEnvironmentBuildRecord, parseEnvironmentImageManifest } from "./manifest.js";
|
|
6
|
+
export class EnvironmentImageService {
|
|
7
|
+
root;
|
|
8
|
+
builder;
|
|
9
|
+
acquireBuildSlot;
|
|
10
|
+
onEvent;
|
|
11
|
+
active = new Map();
|
|
12
|
+
constructor({ root, builder, acquireBuildSlot, onEvent = () => { } }) {
|
|
13
|
+
if (!root || !builder.id)
|
|
14
|
+
throw new TypeError("environment image service identity is invalid");
|
|
15
|
+
this.root = root;
|
|
16
|
+
this.builder = builder;
|
|
17
|
+
this.acquireBuildSlot = acquireBuildSlot;
|
|
18
|
+
this.onEvent = onEvent;
|
|
19
|
+
}
|
|
20
|
+
async build(input) {
|
|
21
|
+
const resolved = await resolveInput(input);
|
|
22
|
+
const buildId = buildIdentity(resolved.cacheKey);
|
|
23
|
+
this.emit({ type: "build.queued", build_id: buildId, cache_key: resolved.cacheKey, task_id: input.taskId });
|
|
24
|
+
const current = this.active.get(resolved.cacheKey);
|
|
25
|
+
if (current) {
|
|
26
|
+
const waitStartedAt = Date.now();
|
|
27
|
+
return current.then((result) => {
|
|
28
|
+
this.emit({ type: "build.wait", build_id: buildId, cache_key: resolved.cacheKey, duration_ms: Date.now() - waitStartedAt });
|
|
29
|
+
return result;
|
|
30
|
+
});
|
|
31
|
+
}
|
|
32
|
+
const operation = this.buildLocked(resolved, input.signal).finally(() => this.active.delete(resolved.cacheKey));
|
|
33
|
+
this.active.set(resolved.cacheKey, operation);
|
|
34
|
+
return operation;
|
|
35
|
+
}
|
|
36
|
+
async buildLocked(input, signal) {
|
|
37
|
+
const paths = statePaths(this.root);
|
|
38
|
+
const lockRequestedAt = Date.now();
|
|
39
|
+
return withFileLock(paths.buildLocks, input.cacheKey, async () => {
|
|
40
|
+
const lockWaitMs = Date.now() - lockRequestedAt;
|
|
41
|
+
if (lockWaitMs > 0)
|
|
42
|
+
this.emit({ type: "build.wait", build_id: buildIdentity(input.cacheKey), cache_key: input.cacheKey, duration_ms: lockWaitMs });
|
|
43
|
+
const cached = await this.cached(input.cacheKey);
|
|
44
|
+
if (cached && await this.builder.probe(cached.output.reference, cached.output.manifest_digest, cached.platform, cached.output.config_digest)) {
|
|
45
|
+
this.emit({ type: "build.cache_hit", build_id: buildIdentity(input.cacheKey), cache_key: input.cacheKey, image_id: cached.image_id });
|
|
46
|
+
return { manifest: cached, cacheHit: true };
|
|
47
|
+
}
|
|
48
|
+
const now = new Date().toISOString();
|
|
49
|
+
const started = Date.now();
|
|
50
|
+
const ownerId = randomUUID();
|
|
51
|
+
const recordBase = {
|
|
52
|
+
schema_version: "1",
|
|
53
|
+
build_id: buildIdentity(input.cacheKey),
|
|
54
|
+
cache_key: input.cacheKey,
|
|
55
|
+
owner_id: ownerId,
|
|
56
|
+
builder_id: this.builder.id,
|
|
57
|
+
started_at: now,
|
|
58
|
+
};
|
|
59
|
+
await this.writeRecord(parseEnvironmentBuildRecord({ ...recordBase, state: "running" }));
|
|
60
|
+
this.emit({ type: "build.started", build_id: recordBase.build_id, cache_key: input.cacheKey });
|
|
61
|
+
let slot;
|
|
62
|
+
try {
|
|
63
|
+
slot = await this.acquireBuildSlot?.(signal);
|
|
64
|
+
const output = await this.builder.build({
|
|
65
|
+
contextDirectory: input.context.context_directory,
|
|
66
|
+
dockerfile: input.context.dockerfile,
|
|
67
|
+
platform: input.platform,
|
|
68
|
+
...(input.target ? { target: input.target } : {}),
|
|
69
|
+
buildArgs: input.buildArgs,
|
|
70
|
+
secretNames: input.secretNames,
|
|
71
|
+
outputReference: input.outputReference,
|
|
72
|
+
cacheKey: input.cacheKey,
|
|
73
|
+
cacheReference: input.cacheReference,
|
|
74
|
+
});
|
|
75
|
+
if (output.platform !== input.platform || !/^sha256:[a-f0-9]{64}$/.test(output.manifest_digest))
|
|
76
|
+
throw new HitchError("BuildKit output identity does not match the image plan", { code: "image_output_mismatch", exitCode: 12 });
|
|
77
|
+
const withoutIdentity = {
|
|
78
|
+
schema_version: "1",
|
|
79
|
+
source: input.source,
|
|
80
|
+
platform: input.platform,
|
|
81
|
+
build: {
|
|
82
|
+
builder: "buildkit",
|
|
83
|
+
...(output.buildkit_version ? { buildkit_version: output.buildkit_version } : {}),
|
|
84
|
+
builder_id: this.builder.id,
|
|
85
|
+
...(input.frontend ? { frontend: input.frontend } : {}),
|
|
86
|
+
...(input.target ? { target: input.target } : {}),
|
|
87
|
+
build_args_sha256: input.buildArgsDigest,
|
|
88
|
+
secret_names: input.secretNames,
|
|
89
|
+
cache_key: input.cacheKey,
|
|
90
|
+
},
|
|
91
|
+
output: {
|
|
92
|
+
reference: output.reference,
|
|
93
|
+
manifest_digest: output.manifest_digest,
|
|
94
|
+
...(output.config_digest ? { config_digest: output.config_digest } : {}),
|
|
95
|
+
},
|
|
96
|
+
base_images: input.baseImages,
|
|
97
|
+
};
|
|
98
|
+
const manifest = parseEnvironmentImageManifest({ ...withoutIdentity, image_id: environmentImageIdentity(withoutIdentity), created_at: new Date().toISOString() });
|
|
99
|
+
await this.writeManifest(manifest);
|
|
100
|
+
await this.writeRecord(parseEnvironmentBuildRecord({ ...recordBase, state: "succeeded", image_id: manifest.image_id, completed_at: new Date().toISOString() }));
|
|
101
|
+
this.emit({ type: "build.completed", build_id: recordBase.build_id, cache_key: input.cacheKey, image_id: manifest.image_id, duration_ms: Date.now() - started });
|
|
102
|
+
return { manifest, cacheHit: false };
|
|
103
|
+
}
|
|
104
|
+
catch (error) {
|
|
105
|
+
const code = error instanceof HitchError ? error.code : "image_build_failed";
|
|
106
|
+
await this.writeRecord(parseEnvironmentBuildRecord({
|
|
107
|
+
...recordBase,
|
|
108
|
+
state: "failed",
|
|
109
|
+
completed_at: new Date().toISOString(),
|
|
110
|
+
error: { code, message: "environment image build failed" },
|
|
111
|
+
}));
|
|
112
|
+
this.emit({ type: "build.failed", build_id: recordBase.build_id, cache_key: input.cacheKey, code, duration_ms: Date.now() - started });
|
|
113
|
+
throw new HitchError("environment image build failed", { code, exitCode: error instanceof HitchError ? error.exitCode : 12, cause: error });
|
|
114
|
+
}
|
|
115
|
+
finally {
|
|
116
|
+
slot?.release();
|
|
117
|
+
}
|
|
118
|
+
}, { timeoutCode: "image_build_locked", timeoutExitCode: 12, ...(signal ? { signal } : {}) });
|
|
119
|
+
}
|
|
120
|
+
async cached(cacheKey) {
|
|
121
|
+
const record = await readJSON(environmentBuildRecordPath(this.root, cacheKey), null);
|
|
122
|
+
if (!record)
|
|
123
|
+
return null;
|
|
124
|
+
const parsed = parseEnvironmentBuildRecord(record);
|
|
125
|
+
if (parsed.state !== "succeeded" || !parsed.image_id)
|
|
126
|
+
return null;
|
|
127
|
+
const manifest = await readJSON(environmentImageManifestPath(this.root, parsed.image_id), null);
|
|
128
|
+
return manifest ? parseEnvironmentImageManifest(manifest) : null;
|
|
129
|
+
}
|
|
130
|
+
async writeManifest(manifest) {
|
|
131
|
+
const file = environmentImageManifestPath(this.root, manifest.image_id);
|
|
132
|
+
await ensureDir(path.dirname(file));
|
|
133
|
+
await atomicWriteJSON(file, manifest);
|
|
134
|
+
parseEnvironmentImageManifest(await readJSON(file));
|
|
135
|
+
}
|
|
136
|
+
async writeRecord(record) {
|
|
137
|
+
const file = environmentBuildRecordPath(this.root, record.cache_key);
|
|
138
|
+
const index = path.join(statePaths(this.root).buildIndexes, `${record.build_id}.json`);
|
|
139
|
+
await ensureDir(path.dirname(file));
|
|
140
|
+
await ensureDir(path.dirname(index));
|
|
141
|
+
const existing = await readJSON(index, null);
|
|
142
|
+
if (existing && (existing.schema_version !== "1" || existing.build_id !== record.build_id || existing.cache_key !== record.cache_key)) {
|
|
143
|
+
throw new HitchError("environment build id collision", { code: "build_id_collision", exitCode: 12 });
|
|
144
|
+
}
|
|
145
|
+
if (!existing)
|
|
146
|
+
await atomicWriteJSON(index, { schema_version: "1", build_id: record.build_id, cache_key: record.cache_key });
|
|
147
|
+
await atomicWriteJSON(file, record);
|
|
148
|
+
}
|
|
149
|
+
emit(event) {
|
|
150
|
+
try {
|
|
151
|
+
this.onEvent(event);
|
|
152
|
+
}
|
|
153
|
+
catch { /* Build observers cannot alter image identity. */ }
|
|
154
|
+
}
|
|
155
|
+
}
|
|
156
|
+
function buildIdentity(cacheKey) {
|
|
157
|
+
return `build_${cacheKey.slice("sha256:".length, "sha256:".length + 32)}`;
|
|
158
|
+
}
|
|
159
|
+
async function resolveInput(input) {
|
|
160
|
+
if (!input.benchmarkId || !input.benchmarkRevision || !input.platform)
|
|
161
|
+
throw new TypeError("environment image request identity is invalid");
|
|
162
|
+
const context = await resolveBuildContext(input.contextDirectory, input.dockerfile);
|
|
163
|
+
const buildArgs = canonicalRecord(input.buildArgs ?? {});
|
|
164
|
+
const secretNames = canonicalNames(input.secretNames ?? []);
|
|
165
|
+
if (secretNames.some((name) => name in buildArgs))
|
|
166
|
+
throw new TypeError("secret image inputs cannot also be build args");
|
|
167
|
+
const baseImages = canonicalBaseImages(input.baseImages ?? []);
|
|
168
|
+
const source = {
|
|
169
|
+
kind: input.sourceKind ?? "build-context",
|
|
170
|
+
benchmark_id: input.benchmarkId,
|
|
171
|
+
benchmark_revision: input.benchmarkRevision,
|
|
172
|
+
...(input.taskId ? { task_id: input.taskId } : {}),
|
|
173
|
+
context_digest: context.context_digest,
|
|
174
|
+
dockerfile_digest: context.dockerfile_digest,
|
|
175
|
+
};
|
|
176
|
+
const buildArgsDigest = sha256JSON(buildArgs);
|
|
177
|
+
const cacheKey = sha256JSON({ source, platform: input.platform, frontend: input.frontend, target: input.target, build_args_sha256: buildArgsDigest, base_images: baseImages, secret_names: secretNames });
|
|
178
|
+
const suffix = cacheKey.slice("sha256:".length, "sha256:".length + 32);
|
|
179
|
+
return {
|
|
180
|
+
context,
|
|
181
|
+
source,
|
|
182
|
+
platform: input.platform,
|
|
183
|
+
...(input.target ? { target: input.target } : {}),
|
|
184
|
+
...(input.frontend ? { frontend: input.frontend } : {}),
|
|
185
|
+
buildArgs,
|
|
186
|
+
buildArgsDigest,
|
|
187
|
+
secretNames,
|
|
188
|
+
baseImages,
|
|
189
|
+
cacheKey,
|
|
190
|
+
outputReference: `hitch-environment:${suffix}`,
|
|
191
|
+
cacheReference: `hitch-cache:${sha256JSON({ benchmark_id: input.benchmarkId, task_id: input.taskId ?? null, platform: input.platform }).slice("sha256:".length, "sha256:".length + 32)}`,
|
|
192
|
+
};
|
|
193
|
+
}
|
|
194
|
+
function canonicalRecord(value) {
|
|
195
|
+
for (const [name, entry] of Object.entries(value))
|
|
196
|
+
if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(name) || typeof entry !== "string")
|
|
197
|
+
throw new TypeError("environment image build args are invalid");
|
|
198
|
+
return Object.fromEntries(Object.entries(value).sort(([left], [right]) => Buffer.compare(Buffer.from(left), Buffer.from(right))));
|
|
199
|
+
}
|
|
200
|
+
function canonicalNames(value) {
|
|
201
|
+
if (value.some((name) => !/^[A-Za-z_][A-Za-z0-9_]*$/.test(name)))
|
|
202
|
+
throw new TypeError("environment image secret names are invalid");
|
|
203
|
+
return [...new Set(value)].sort((left, right) => Buffer.compare(Buffer.from(left), Buffer.from(right)));
|
|
204
|
+
}
|
|
205
|
+
function canonicalBaseImages(value) {
|
|
206
|
+
for (const entry of value)
|
|
207
|
+
if (!entry.reference || !/^sha256:[a-f0-9]{64}$/.test(entry.digest))
|
|
208
|
+
throw new TypeError("environment image base identity is invalid");
|
|
209
|
+
if (new Set(value.map((entry) => entry.reference)).size !== value.length)
|
|
210
|
+
throw new TypeError("environment image base references are duplicated");
|
|
211
|
+
return [...value].sort((left, right) => Buffer.compare(Buffer.from(left.reference), Buffer.from(right.reference)));
|
|
212
|
+
}
|
|
213
|
+
export function environmentImageManifestPath(root, imageId) {
|
|
214
|
+
return path.join(statePaths(root).environmentImages, imageId.slice("sha256:".length), "manifest.json");
|
|
215
|
+
}
|
|
216
|
+
export async function loadEnvironmentImageManifest(root, imageId) {
|
|
217
|
+
if (!root || !/^sha256:[a-f0-9]{64}$/.test(imageId))
|
|
218
|
+
throw new TypeError("environment image identity is invalid");
|
|
219
|
+
return parseEnvironmentImageManifest(await readJSON(environmentImageManifestPath(root, imageId)));
|
|
220
|
+
}
|
|
221
|
+
export function environmentBuildRecordPath(root, cacheKey) {
|
|
222
|
+
return path.join(statePaths(root).buildRecords, cacheKey.slice("sha256:".length), "record.json");
|
|
223
|
+
}
|
|
224
|
+
//# sourceMappingURL=service.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../src/images/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAChI,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,6BAA6B,EAAE,MAAM,eAAe,CAAC;AAiDrH,MAAM,OAAO,uBAAuB;IACjB,IAAI,CAAS;IACb,OAAO,CAA0B;IACjC,gBAAgB,CAAuE;IACvF,OAAO,CAA2C;IAClD,MAAM,GAAG,IAAI,GAAG,EAAgF,CAAC;IAElH,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,GAAG,GAAG,EAAE,GAAE,CAAC,EAAkC;QACjG,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;QAC/F,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAiC;QAC3C,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5G,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACjC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBAC7B,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC;gBAC5H,OAAO,MAAM,CAAC;YAChB,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC9C,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,KAAoB,EAAE,MAAoB;QAClE,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACnC,OAAO,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC;YAChD,IAAI,UAAU,GAAG,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;YACnJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjD,IAAI,MAAM,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC7I,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACtI,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YAC9C,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG;gBACjB,cAAc,EAAE,GAAY;gBAC5B,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACvC,SAAS,EAAE,KAAK,CAAC,QAAQ;gBACzB,QAAQ,EAAE,OAAO;gBACjB,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;gBAC3B,UAAU,EAAE,GAAG;aAChB,CAAC;YACF,MAAM,IAAI,CAAC,WAAW,CAAC,2BAA2B,CAAC,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;YACzF,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC/F,IAAI,IAAqC,CAAC;YAC1C,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,MAAM,CAAC,CAAC;gBAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;oBACtC,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC,iBAAiB;oBACjD,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;oBACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjD,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,eAAe,EAAE,KAAK,CAAC,eAAe;oBACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,cAAc,EAAE,KAAK,CAAC,cAAc;iBACrC,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;oBAAE,MAAM,IAAI,UAAU,CAAC,wDAAwD,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;gBACjO,MAAM,eAAe,GAAgE;oBACnF,cAAc,EAAE,GAAG;oBACnB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,KAAK,EAAE;wBACL,OAAO,EAAE,UAAU;wBACnB,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACjF,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;wBAC3B,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACvD,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACjD,iBAAiB,EAAE,KAAK,CAAC,eAAe;wBACxC,YAAY,EAAE,KAAK,CAAC,WAAW;wBAC/B,SAAS,EAAE,KAAK,CAAC,QAAQ;qBAC1B;oBACD,MAAM,EAAE;wBACN,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,eAAe,EAAE,MAAM,CAAC,eAAe;wBACvC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACzE;oBACD,WAAW,EAAE,KAAK,CAAC,UAAU;iBAC9B,CAAC;gBACF,MAAM,QAAQ,GAAG,6BAA6B,CAAC,EAAE,GAAG,eAAe,EAAE,QAAQ,EAAE,wBAAwB,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;gBAClK,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;gBACnC,MAAM,IAAI,CAAC,WAAW,CAAC,2BAA2B,CAAC,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;gBAChK,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;gBACjK,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;YACvC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,GAAG,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC;gBAC7E,MAAM,IAAI,CAAC,WAAW,CAAC,2BAA2B,CAAC;oBACjD,GAAG,UAAU;oBACb,KAAK,EAAE,QAAQ;oBACf,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACtC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,gCAAgC,EAAE;iBAC3D,CAAC,CAAC,CAAC;gBACJ,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;gBACvI,MAAM,IAAI,UAAU,CAAC,gCAAgC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9I,CAAC;oBAAS,CAAC;gBAAC,IAAI,EAAE,OAAO,EAAE,CAAC;YAAC,CAAC;QAChC,CAAC,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE,eAAe,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,QAAgB;QACnC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAiB,0BAA0B,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;QACrG,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,MAAM,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAiB,4BAA4B,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;QAChH,OAAO,QAAQ,CAAC,CAAC,CAAC,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,QAAoC;QAC9D,MAAM,IAAI,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxE,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,MAAM,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACtC,6BAA6B,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,MAAgC;QACxD,MAAM,IAAI,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,GAAG,MAAM,CAAC,QAAQ,OAAO,CAAC,CAAC;QACvF,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAiC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7E,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,cAAc,KAAK,GAAG,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YACtI,MAAM,IAAI,UAAU,CAAC,gCAAgC,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACvG,CAAC;QACD,IAAI,CAAC,QAAQ;YAAE,MAAM,eAAe,CAAC,KAAK,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAC7H,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAEO,IAAI,CAAC,KAA8B;QACzC,IAAI,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kDAAkD,CAAC,CAAC;IAC3F,CAAC;CACF;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,OAAO,SAAS,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC;AAC5E,CAAC;AAiBD,KAAK,UAAU,YAAY,CAAC,KAAiC;IAC3D,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,KAAK,CAAC,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;IAC5I,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACpF,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC5D,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,SAAS,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;IACxH,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAyC;QACnD,IAAI,EAAE,KAAK,CAAC,UAAU,IAAI,eAAe;QACzC,YAAY,EAAE,KAAK,CAAC,WAAW;QAC/B,kBAAkB,EAAE,KAAK,CAAC,iBAAiB;QAC3C,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;KAC7C,CAAC;IACF,MAAM,eAAe,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,iBAAiB,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;IAC1M,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACvE,OAAO;QACL,OAAO;QACP,MAAM;QACN,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,SAAS;QACT,eAAe;QACf,WAAW;QACX,UAAU;QACV,QAAQ;QACR,eAAe,EAAE,qBAAqB,MAAM,EAAE;QAC9C,cAAc,EAAE,eAAe,UAAU,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,EAAE;KACzL,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAA6B;IACpD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;IAC5L,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACpI,CAAC;AAED,SAAS,cAAc,CAAC,KAAe;IACrC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACpI,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1G,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAmD;IAC9E,KAAK,MAAM,KAAK,IAAI,KAAK;QAAE,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IAClK,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IAClJ,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACrH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,IAAY,EAAE,OAAe;IACxE,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,CAAC;AACzG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,IAAY,EAAE,OAAe;IAC9E,IAAI,CAAC,IAAI,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAClH,OAAO,6BAA6B,CAAC,MAAM,QAAQ,CAAC,4BAA4B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AACpG,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,IAAY,EAAE,QAAgB;IACvE,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC;AACnG,CAAC"}
|
|
@@ -0,0 +1,255 @@
|
|
|
1
|
+
import { randomUUID } from "node:crypto";
|
|
2
|
+
import { readFile } from "node:fs/promises";
|
|
3
|
+
import path from "node:path";
|
|
4
|
+
import { appendLine, atomicWriteJSON, ensureDir, readJSON, sha256JSON, writePrivateFile } from "../foundation/index.js";
|
|
5
|
+
import { parseModelInteraction } from "./records.js";
|
|
6
|
+
const SENSITIVE_HEADER = /^(?:authorization|proxy-authorization|cookie|set-cookie|x-api-key|api-key)$/i;
|
|
7
|
+
const SENSITIVE_FIELD = /(?:^|[_-])(?:api[_-]?key|authorization|token|secret|password|credential|cookie)(?:$|[_-])/i;
|
|
8
|
+
const TEXT_RULES = [
|
|
9
|
+
{ id: "authorization-bearer-v1", pattern: /\bBearer\s+[A-Za-z0-9._~+\/-]{8,}/gi },
|
|
10
|
+
{ id: "provider-api-key-v1", pattern: /\b(?:sk|rk|pk)-[A-Za-z0-9_-]{12,}\b/g },
|
|
11
|
+
];
|
|
12
|
+
export class ModelInteractionCapture {
|
|
13
|
+
options;
|
|
14
|
+
directory;
|
|
15
|
+
rows;
|
|
16
|
+
credentials;
|
|
17
|
+
redactions = new Map();
|
|
18
|
+
sequence = 0;
|
|
19
|
+
failed = false;
|
|
20
|
+
closed = false;
|
|
21
|
+
tail = Promise.resolve();
|
|
22
|
+
constructor(options) {
|
|
23
|
+
this.options = options;
|
|
24
|
+
this.directory = path.join(options.runDirectory, "interactions");
|
|
25
|
+
this.rows = path.join(this.directory, "interactions.jsonl");
|
|
26
|
+
this.credentials = [...new Set((options.credentialValues ?? []).filter((value) => value.length >= 4))].sort();
|
|
27
|
+
}
|
|
28
|
+
static async open(options) {
|
|
29
|
+
if (!/^run_[a-f0-9]{32}$/.test(options.runId) || !new Set(["proxy", "hybrid"]).has(options.mode)
|
|
30
|
+
|| !new Set(["host-side", "in-sandbox"]).has(options.topology))
|
|
31
|
+
throw new TypeError("model interaction capture identity is invalid");
|
|
32
|
+
await ensureDir(path.join(options.runDirectory, "interactions", "payloads"));
|
|
33
|
+
const capture = new ModelInteractionCapture(options);
|
|
34
|
+
if (options.resumeExisting)
|
|
35
|
+
await capture.restore();
|
|
36
|
+
else {
|
|
37
|
+
await writePrivateFile(capture.rows, "");
|
|
38
|
+
await capture.writeState();
|
|
39
|
+
}
|
|
40
|
+
return capture;
|
|
41
|
+
}
|
|
42
|
+
record(exchange) {
|
|
43
|
+
if (this.closed)
|
|
44
|
+
throw new Error("model interaction capture is closed");
|
|
45
|
+
const sequence = ++this.sequence;
|
|
46
|
+
const operation = this.tail.then(() => this.persist(sequence, exchange));
|
|
47
|
+
this.tail = operation.then(() => undefined, () => { this.failed = true; });
|
|
48
|
+
return operation;
|
|
49
|
+
}
|
|
50
|
+
markRedactionFailed() {
|
|
51
|
+
this.failed = true;
|
|
52
|
+
}
|
|
53
|
+
async close() {
|
|
54
|
+
if (!this.closed) {
|
|
55
|
+
this.closed = true;
|
|
56
|
+
await this.tail;
|
|
57
|
+
}
|
|
58
|
+
const rules = [...this.redactions].sort(([left], [right]) => Buffer.from(left).compare(Buffer.from(right)))
|
|
59
|
+
.map(([rule_id, count]) => ({ rule_id, count }));
|
|
60
|
+
const ref = {
|
|
61
|
+
schema_version: "1",
|
|
62
|
+
run_id: this.options.runId,
|
|
63
|
+
mode: this.options.mode,
|
|
64
|
+
required: this.options.required,
|
|
65
|
+
topology: this.options.topology,
|
|
66
|
+
completeness: this.failed ? (this.sequence > 0 ? "partial" : "none") : this.sequence > 0 ? "complete" : "none",
|
|
67
|
+
interaction_count: this.sequence,
|
|
68
|
+
interactions_ref: "interactions/interactions.jsonl",
|
|
69
|
+
redaction: {
|
|
70
|
+
policy: this.options.redactionPolicy ?? "hitch-model-interaction-redaction-v1",
|
|
71
|
+
status: this.failed ? "failed" : rules.length > 0 ? "applied" : "not-needed",
|
|
72
|
+
rules,
|
|
73
|
+
},
|
|
74
|
+
};
|
|
75
|
+
await atomicWriteJSON(path.join(this.directory, "interaction.ref.json"), ref);
|
|
76
|
+
await this.writeState();
|
|
77
|
+
return ref;
|
|
78
|
+
}
|
|
79
|
+
async persist(sequence, exchange) {
|
|
80
|
+
const interactionId = `interaction_${randomUUID().replaceAll("-", "")}`;
|
|
81
|
+
const startedAt = timestamp(exchange.startedAt ?? new Date().toISOString(), "interaction started_at");
|
|
82
|
+
const completedAt = timestamp(exchange.completedAt ?? new Date().toISOString(), "interaction completed_at");
|
|
83
|
+
const requestRef = exchange.request === undefined && exchange.requestHeaders === undefined
|
|
84
|
+
? undefined
|
|
85
|
+
: `interactions/payloads/${interactionId}.request.json`;
|
|
86
|
+
const responseRef = exchange.response === undefined && exchange.responseHeaders === undefined
|
|
87
|
+
? undefined
|
|
88
|
+
: `interactions/payloads/${interactionId}.response.json`;
|
|
89
|
+
if (requestRef)
|
|
90
|
+
await atomicWriteJSON(path.join(this.options.runDirectory, ...requestRef.split("/")), this.redact({ headers: exchange.requestHeaders, body: exchange.request }));
|
|
91
|
+
if (responseRef)
|
|
92
|
+
await atomicWriteJSON(path.join(this.options.runDirectory, ...responseRef.split("/")), this.redact({ headers: exchange.responseHeaders, body: exchange.response }));
|
|
93
|
+
const row = {
|
|
94
|
+
schema_version: "1",
|
|
95
|
+
interaction_id: interactionId,
|
|
96
|
+
run_id: this.options.runId,
|
|
97
|
+
...(this.options.evalId ? { eval_id: this.options.evalId } : {}),
|
|
98
|
+
...(this.options.trialId ? { trial_id: this.options.trialId } : {}),
|
|
99
|
+
sequence,
|
|
100
|
+
requested_model: bounded(exchange.requestedModel, 1_024),
|
|
101
|
+
...(exchange.effectiveModel ? { effective_model: bounded(exchange.effectiveModel, 1_024) } : {}),
|
|
102
|
+
endpoint_identity: endpointIdentity(exchange.endpoint),
|
|
103
|
+
started_at: startedAt,
|
|
104
|
+
completed_at: completedAt,
|
|
105
|
+
latency_ms: Math.max(0, Date.parse(completedAt) - Date.parse(startedAt)),
|
|
106
|
+
status: exchange.status,
|
|
107
|
+
...(exchange.httpStatus === undefined ? {} : { http_status: httpStatus(exchange.httpStatus) }),
|
|
108
|
+
...(exchange.retryOf ? { retry_of: interactionIdValue(exchange.retryOf) } : {}),
|
|
109
|
+
...(exchange.usage ? { usage: usage(exchange.usage) } : {}),
|
|
110
|
+
...(requestRef ? { request_ref: requestRef } : {}),
|
|
111
|
+
...(responseRef ? { response_ref: responseRef } : {}),
|
|
112
|
+
...(exchange.error ? { error: { code: bounded(exchange.error.code, 256), message: bounded(this.redactText(exchange.error.message), 4_096) } } : {}),
|
|
113
|
+
};
|
|
114
|
+
await appendLine(this.rows, JSON.stringify(row));
|
|
115
|
+
await this.writeState();
|
|
116
|
+
return row;
|
|
117
|
+
}
|
|
118
|
+
async restore() {
|
|
119
|
+
const rows = await readInteractionRows(this.rows, this.options.runId);
|
|
120
|
+
this.sequence = rows.length;
|
|
121
|
+
const state = await readJSON(path.join(this.directory, "capture.state.json"), null);
|
|
122
|
+
if (!state) {
|
|
123
|
+
this.failed = rows.length > 0;
|
|
124
|
+
await this.writeState();
|
|
125
|
+
return;
|
|
126
|
+
}
|
|
127
|
+
const parsed = parseCaptureState(state);
|
|
128
|
+
for (const [rule, count] of parsed.redactions)
|
|
129
|
+
this.redactions.set(rule, count);
|
|
130
|
+
this.failed = parsed.failed || parsed.sequence !== rows.length;
|
|
131
|
+
await this.writeState();
|
|
132
|
+
}
|
|
133
|
+
writeState() {
|
|
134
|
+
return atomicWriteJSON(path.join(this.directory, "capture.state.json"), {
|
|
135
|
+
schema_version: "1",
|
|
136
|
+
sequence: this.sequence,
|
|
137
|
+
failed: this.failed,
|
|
138
|
+
redactions: [...this.redactions].sort(([left], [right]) => Buffer.from(left).compare(Buffer.from(right)))
|
|
139
|
+
.map(([rule_id, count]) => ({ rule_id, count })),
|
|
140
|
+
updated_at: new Date().toISOString(),
|
|
141
|
+
});
|
|
142
|
+
}
|
|
143
|
+
redact(value, key) {
|
|
144
|
+
if (key && (SENSITIVE_FIELD.test(key) || SENSITIVE_HEADER.test(key))) {
|
|
145
|
+
this.increment("sensitive-field-v1");
|
|
146
|
+
return "[REDACTED]";
|
|
147
|
+
}
|
|
148
|
+
if (Array.isArray(value))
|
|
149
|
+
return value.map((entry) => this.redact(entry));
|
|
150
|
+
if (value && typeof value === "object")
|
|
151
|
+
return Object.fromEntries(Object.entries(value).map(([name, entry]) => [name, this.redact(entry, name)]));
|
|
152
|
+
return typeof value === "string" ? this.redactText(value) : value;
|
|
153
|
+
}
|
|
154
|
+
redactText(value) {
|
|
155
|
+
let result = value;
|
|
156
|
+
for (const credential of this.credentials) {
|
|
157
|
+
const parts = result.split(credential);
|
|
158
|
+
const count = parts.length - 1;
|
|
159
|
+
if (count > 0)
|
|
160
|
+
result = parts.join("[REDACTED]");
|
|
161
|
+
if (count > 0)
|
|
162
|
+
this.increment("known-credential-value-v1", count);
|
|
163
|
+
}
|
|
164
|
+
for (const rule of TEXT_RULES) {
|
|
165
|
+
let count = 0;
|
|
166
|
+
result = result.replace(rule.pattern, () => { count += 1; return "[REDACTED]"; });
|
|
167
|
+
if (count > 0)
|
|
168
|
+
this.increment(rule.id, count);
|
|
169
|
+
}
|
|
170
|
+
return result;
|
|
171
|
+
}
|
|
172
|
+
increment(rule, count = 1) {
|
|
173
|
+
this.redactions.set(rule, (this.redactions.get(rule) ?? 0) + count);
|
|
174
|
+
}
|
|
175
|
+
}
|
|
176
|
+
async function readInteractionRows(file, runId) {
|
|
177
|
+
let contents;
|
|
178
|
+
try {
|
|
179
|
+
contents = await readFile(file, "utf8");
|
|
180
|
+
}
|
|
181
|
+
catch (error) {
|
|
182
|
+
if (error.code === "ENOENT") {
|
|
183
|
+
await writePrivateFile(file, "");
|
|
184
|
+
return [];
|
|
185
|
+
}
|
|
186
|
+
throw error;
|
|
187
|
+
}
|
|
188
|
+
const lines = contents.split(/\r?\n/).filter(Boolean);
|
|
189
|
+
const rows = lines.map((line) => parseModelInteraction(JSON.parse(line)));
|
|
190
|
+
if (rows.some((row, index) => row.run_id !== runId || row.sequence !== index + 1)) {
|
|
191
|
+
throw new TypeError("persisted model interaction sequence is invalid");
|
|
192
|
+
}
|
|
193
|
+
return rows;
|
|
194
|
+
}
|
|
195
|
+
function parseCaptureState(value) {
|
|
196
|
+
if (Object.keys(value).some((key) => !new Set(["schema_version", "sequence", "failed", "redactions", "updated_at"]).has(key))
|
|
197
|
+
|| value.schema_version !== "1" || !Number.isSafeInteger(value.sequence) || value.sequence < 0
|
|
198
|
+
|| typeof value.failed !== "boolean" || !Array.isArray(value.redactions)
|
|
199
|
+
|| typeof value.updated_at !== "string" || !Number.isFinite(Date.parse(value.updated_at))) {
|
|
200
|
+
throw new TypeError("model interaction capture state is invalid");
|
|
201
|
+
}
|
|
202
|
+
const redactions = value.redactions.map((entry) => {
|
|
203
|
+
if (!entry || typeof entry !== "object" || Array.isArray(entry))
|
|
204
|
+
throw new TypeError("model interaction capture redaction state is invalid");
|
|
205
|
+
const record = entry;
|
|
206
|
+
if (Object.keys(record).some((key) => key !== "rule_id" && key !== "count") || typeof record.rule_id !== "string" || !record.rule_id
|
|
207
|
+
|| !Number.isSafeInteger(record.count) || record.count < 1)
|
|
208
|
+
throw new TypeError("model interaction capture redaction state is invalid");
|
|
209
|
+
return [record.rule_id, record.count];
|
|
210
|
+
});
|
|
211
|
+
return { sequence: value.sequence, failed: value.failed, redactions };
|
|
212
|
+
}
|
|
213
|
+
export function endpointIdentity(value) {
|
|
214
|
+
let endpoint;
|
|
215
|
+
try {
|
|
216
|
+
endpoint = new URL(value);
|
|
217
|
+
}
|
|
218
|
+
catch {
|
|
219
|
+
throw new TypeError("model endpoint must be an absolute URL");
|
|
220
|
+
}
|
|
221
|
+
if (endpoint.protocol !== "https:" && endpoint.protocol !== "http:")
|
|
222
|
+
throw new TypeError("model endpoint protocol is unsupported");
|
|
223
|
+
const port = endpoint.port && !((endpoint.protocol === "https:" && endpoint.port === "443") || (endpoint.protocol === "http:" && endpoint.port === "80"))
|
|
224
|
+
? `:${endpoint.port}` : "";
|
|
225
|
+
const pathname = endpoint.pathname.replace(/\/{2,}/g, "/").replace(/\/$/, "") || "/";
|
|
226
|
+
return sha256JSON({ scheme: endpoint.protocol.slice(0, -1), host: endpoint.hostname.toLowerCase(), port, path: pathname });
|
|
227
|
+
}
|
|
228
|
+
function usage(value) {
|
|
229
|
+
const entries = Object.entries(value).sort(([left], [right]) => Buffer.from(left).compare(Buffer.from(right)));
|
|
230
|
+
if (entries.some(([key, entry]) => !key || !Number.isFinite(entry) || entry < 0))
|
|
231
|
+
throw new TypeError("model interaction usage is invalid");
|
|
232
|
+
return Object.fromEntries(entries);
|
|
233
|
+
}
|
|
234
|
+
function httpStatus(value) {
|
|
235
|
+
if (!Number.isSafeInteger(value) || value < 100 || value > 599)
|
|
236
|
+
throw new TypeError("model interaction HTTP status is invalid");
|
|
237
|
+
return value;
|
|
238
|
+
}
|
|
239
|
+
function interactionIdValue(value) {
|
|
240
|
+
if (!/^interaction_[a-f0-9]{32}$/.test(value))
|
|
241
|
+
throw new TypeError("model interaction retry identity is invalid");
|
|
242
|
+
return value;
|
|
243
|
+
}
|
|
244
|
+
function timestamp(value, label) {
|
|
245
|
+
if (!Number.isFinite(Date.parse(value)))
|
|
246
|
+
throw new TypeError(`${label} is invalid`);
|
|
247
|
+
return value;
|
|
248
|
+
}
|
|
249
|
+
function bounded(value, max) {
|
|
250
|
+
const normalized = String(value).replace(/[\0\r\n]/g, " ").slice(0, max);
|
|
251
|
+
if (!normalized)
|
|
252
|
+
throw new TypeError("model interaction text field is empty");
|
|
253
|
+
return normalized;
|
|
254
|
+
}
|
|
255
|
+
//# sourceMappingURL=capture.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"capture.js","sourceRoot":"","sources":["../../../src/model-access/capture.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACxH,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAErD,MAAM,gBAAgB,GAAG,8EAA8E,CAAC;AACxG,MAAM,eAAe,GAAG,4FAA4F,CAAC;AACrH,MAAM,UAAU,GAA2C;IACzD,EAAE,EAAE,EAAE,yBAAyB,EAAE,OAAO,EAAE,qCAAqC,EAAE;IACjF,EAAE,EAAE,EAAE,qBAAqB,EAAE,OAAO,EAAE,sCAAsC,EAAE;CAC/E,CAAC;AAgCF,MAAM,OAAO,uBAAuB;IACjB,OAAO,CAAiC;IACxC,SAAS,CAAS;IAClB,IAAI,CAAS;IACb,WAAW,CAAW;IACtB,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAChD,QAAQ,GAAG,CAAC,CAAC;IACb,MAAM,GAAG,KAAK,CAAC;IACf,MAAM,GAAG,KAAK,CAAC;IACf,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAEjC,YAAoB,OAAuC;QACzD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QAC5D,IAAI,CAAC,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAChH,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAuC;QACvD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;eAC3F,CAAC,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;QACvI,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,IAAI,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,OAAO,CAAC,cAAc;YAAE,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;aAC/C,CAAC;YACJ,MAAM,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACzC,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;QAC7B,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,QAA+B;QACpC,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,mBAAmB;QACjB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,MAAM,IAAI,CAAC,IAAI,CAAC;QAClB,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;aACxG,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACnD,MAAM,GAAG,GAA4B;YACnC,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YAC1B,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YACvB,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;YAC/B,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;YAC/B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM;YAC9G,iBAAiB,EAAE,IAAI,CAAC,QAAQ;YAChC,gBAAgB,EAAE,iCAAiC;YACnD,SAAS,EAAE;gBACT,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,sCAAsC;gBAC9E,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY;gBAC5E,KAAK;aACN;SACF,CAAC;QACF,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9E,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,QAA+B;QACrE,MAAM,aAAa,GAAG,eAAe,UAAU,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC;QACxE,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,wBAAwB,CAAC,CAAC;QACtG,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,CAAC,WAAW,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,0BAA0B,CAAC,CAAC;QAC5G,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,KAAK,SAAS,IAAI,QAAQ,CAAC,cAAc,KAAK,SAAS;YACxF,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,yBAAyB,aAAa,eAAe,CAAC;QAC1D,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS;YAC3F,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,yBAAyB,aAAa,gBAAgB,CAAC;QAC3D,IAAI,UAAU;YAAE,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,cAAc,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACjL,IAAI,WAAW;YAAE,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,eAAe,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACrL,MAAM,GAAG,GAAuB;YAC9B,cAAc,EAAE,GAAG;YACnB,cAAc,EAAE,aAAa;YAC7B,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YAC1B,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,QAAQ;YACR,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAE,KAAK,CAAC;YACxD,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChG,iBAAiB,EAAE,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACtD,UAAU,EAAE,SAAS;YACrB,YAAY,EAAE,WAAW;YACzB,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACxE,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,GAAG,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9F,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpJ,CAAC;QACF,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACjD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAiC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,EAAE,IAAI,CAAC,CAAC;QACpH,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;YAC9B,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU;YAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAChF,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,MAAM,CAAC;QAC/D,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;IAC1B,CAAC;IAEO,UAAU;QAChB,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,EAAE;YACtE,cAAc,EAAE,GAAG;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;iBACtG,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAClD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,KAAc,EAAE,GAAY;QACzC,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACrE,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;YACrC,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1E,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7K,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACpE,CAAC;IAEO,UAAU,CAAC,KAAa;QAC9B,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACvC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;YAC/B,IAAI,KAAK,GAAG,CAAC;gBAAE,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjD,IAAI,KAAK,GAAG,CAAC;gBAAE,IAAI,CAAC,SAAS,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;QACpE,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;YAClF,IAAI,KAAK,GAAG,CAAC;gBAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,SAAS,CAAC,IAAY,EAAE,KAAK,GAAG,CAAC;QACvC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;IACtE,CAAC;CACF;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAAa;IAC5D,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QAAC,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAChD,OAAO,KAAK,EAAE,CAAC;QACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,gBAAgB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACjC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC,CAAC,CAAC;IACrF,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,KAA8B;IACvD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;WACxH,KAAK,CAAC,cAAc,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAK,KAAK,CAAC,QAAmB,GAAG,CAAC;WACvG,OAAO,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;WACrE,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAChD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;QAC7I,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,OAAO,CAAC,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,OAAO;eAC/H,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,IAAK,MAAM,CAAC,KAAgB,GAAG,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;QACtJ,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAqB,CAAC;IAC5D,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAkB,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,IAAI,QAAa,CAAC;IAClB,IAAI,CAAC;QAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;IAAC,CAAC;IAC3G,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;IACnI,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACvJ,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;IACrF,OAAO,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC7H,CAAC;AAED,SAAS,KAAK,CAAC,KAA6B;IAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/G,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;IAC5I,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,GAAG,IAAI,KAAK,GAAG,GAAG;QAAE,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;IAChI,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;IAClH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,KAAa;IAC7C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IACpF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,KAAa,EAAE,GAAW;IACzC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzE,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAC9E,OAAO,UAAU,CAAC;AACpB,CAAC"}
|
|
@@ -0,0 +1,5 @@
|
|
|
1
|
+
export { endpointIdentity, ModelInteractionCapture } from "./capture.js";
|
|
2
|
+
export { normalizeModelCapturePolicy, planModelCapture } from "./policy.js";
|
|
3
|
+
export { loadInteractionCapture, parseInteractionCaptureRef, parseModelInteraction } from "./records.js";
|
|
4
|
+
export { HostModelProxy } from "./proxy.js";
|
|
5
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/model-access/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAEzE,OAAO,EAAE,2BAA2B,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACzG,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC"}
|
|
@@ -0,0 +1,49 @@
|
|
|
1
|
+
import { HitchError } from "../foundation/index.js";
|
|
2
|
+
export function normalizeModelCapturePolicy(value) {
|
|
3
|
+
const mode = value?.mode ?? "native";
|
|
4
|
+
const required = value?.required ?? false;
|
|
5
|
+
if (!new Set(["off", "native", "proxy", "hybrid"]).has(mode) || typeof required !== "boolean") {
|
|
6
|
+
throw new TypeError("model capture policy is invalid");
|
|
7
|
+
}
|
|
8
|
+
if (mode === "off" && required)
|
|
9
|
+
throw new TypeError("off model capture cannot be required");
|
|
10
|
+
return { mode, required };
|
|
11
|
+
}
|
|
12
|
+
export function planModelCapture(input) {
|
|
13
|
+
const policy = normalizeModelCapturePolicy(input.policy);
|
|
14
|
+
if (policy.mode === "off")
|
|
15
|
+
return { requested_mode: "off", effective_mode: "off", required: policy.required };
|
|
16
|
+
const native = input.adapter.capture.native_events;
|
|
17
|
+
if (policy.mode === "native") {
|
|
18
|
+
if (native)
|
|
19
|
+
return { requested_mode: "native", effective_mode: "native", required: policy.required };
|
|
20
|
+
return degradeOrReject(policy, "adapter-native-capture-unsupported", "off");
|
|
21
|
+
}
|
|
22
|
+
const proxy = input.adapter.endpoint_override === "supported"
|
|
23
|
+
&& input.adapter.capture.model_proxy_compatible
|
|
24
|
+
&& input.provider.features.model_proxy;
|
|
25
|
+
const hybrid = proxy && native;
|
|
26
|
+
if (policy.mode === "proxy" && proxy || policy.mode === "hybrid" && hybrid) {
|
|
27
|
+
return {
|
|
28
|
+
requested_mode: policy.mode,
|
|
29
|
+
effective_mode: policy.mode,
|
|
30
|
+
required: policy.required,
|
|
31
|
+
topology: input.provider.provider === "local-docker" ? "host-side" : "in-sandbox",
|
|
32
|
+
};
|
|
33
|
+
}
|
|
34
|
+
const reason = input.adapter.endpoint_override !== "supported"
|
|
35
|
+
? "adapter-endpoint-override-unsupported"
|
|
36
|
+
: !input.adapter.capture.model_proxy_compatible
|
|
37
|
+
? "adapter-model-proxy-incompatible"
|
|
38
|
+
: !input.provider.features.model_proxy
|
|
39
|
+
? "provider-model-proxy-unavailable"
|
|
40
|
+
: "adapter-native-capture-unsupported";
|
|
41
|
+
return degradeOrReject(policy, reason, native ? "native" : "off");
|
|
42
|
+
}
|
|
43
|
+
function degradeOrReject(policy, reason, fallback) {
|
|
44
|
+
if (policy.required) {
|
|
45
|
+
throw new HitchError(`required model capture is unsupported: ${reason}`, { code: "model_capture_unsupported", exitCode: 10 });
|
|
46
|
+
}
|
|
47
|
+
return { requested_mode: policy.mode, effective_mode: fallback, required: false, degraded_reason: reason };
|
|
48
|
+
}
|
|
49
|
+
//# sourceMappingURL=policy.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../src/model-access/policy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,MAAM,UAAU,2BAA2B,CAAC,KAAqC;IAC/E,MAAM,IAAI,GAAG,KAAK,EAAE,IAAI,IAAI,QAAQ,CAAC;IACrC,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAQ,IAAI,KAAK,CAAC;IAC1C,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC9F,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,IAAI,KAAK,KAAK,IAAI,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAC;IAC5F,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAIhC;IACC,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC9G,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;IACnD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,MAAM;YAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrG,OAAO,eAAe,CAAC,MAAM,EAAE,oCAAoC,EAAE,KAAK,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,KAAK,WAAW;WACxD,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB;WAC5C,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;IACzC,MAAM,MAAM,GAAG,KAAK,IAAI,MAAM,CAAC;IAC/B,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,EAAE,CAAC;QAC3E,OAAO;YACL,cAAc,EAAE,MAAM,CAAC,IAAI;YAC3B,cAAc,EAAE,MAAM,CAAC,IAAI;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,KAAK,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY;SAClF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,KAAK,WAAW;QAC5D,CAAC,CAAC,uCAAuC;QACzC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB;YAC7C,CAAC,CAAC,kCAAkC;YACpC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW;gBACpC,CAAC,CAAC,kCAAkC;gBACpC,CAAC,CAAC,oCAAoC,CAAC;IAC7C,OAAO,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,eAAe,CACtB,MAA4B,EAC5B,MAAc,EACd,QAA0B;IAE1B,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,MAAM,IAAI,UAAU,CAAC,0CAA0C,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAChI,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC;AAC7G,CAAC"}
|