alasio 4.0.0

package/dist/cli/src/release.js

@@ -0,0 +1,15 @@
+/**
+ * What this version of the package installs. The release workflow writes the released
+ * version and the digests of the images it published here, with tooling/pin-release.ts,
+ * before it builds the package; this module holds nothing else.
+ */
+export const VERSION = "4.0.0";
+/** alasio's own images, tagged with the version and pinned by digest once released. */
+export const IMAGES = {
+    alasio: { repository: "ghcr.io/eaucoin/alasio", tag: VERSION, digest: "sha256:ae9b943a6122d4a2b026be9bf4c04d10b8a6c936152183d0f142e5884bb9220c" },
+    agent: { repository: "ghcr.io/eaucoin/alasio-agent", tag: VERSION, digest: "sha256:6fdf6b513385b74f3c40739f11fe3d38e7d62d1cf5ef696656bee0581c53d2f7" },
+    lake: { repository: "ghcr.io/eaucoin/alasio-lake", tag: VERSION, digest: "sha256:750ea9cca137c3b08735b6cc29b3fd31735365bd8ae2a5223245adc57c477a50" },
+};
+/** The local cluster's node image: k3s with gVisor (cluster/node), pinned like the others. */
+export const NODE_IMAGE = { repository: "ghcr.io/eaucoin/alasio-node", tag: VERSION, digest: "sha256:3e98ad907f002d42eadc7cb126064e587e1d387f43154658fb34a06f4134d2ee" };
+//# sourceMappingURL=release.js.map

package/dist/cli/src/release.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release.js","sourceRoot":"","sources":["../../../src/release.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC;AAE/B,uFAAuF;AACvF,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,MAAM,EAAE,EAAE,UAAU,EAAE,wBAAwB,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,yEAAyE,EAAE;IACjJ,KAAK,EAAE,EAAE,UAAU,EAAE,8BAA8B,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,yEAAyE,EAAE;IACtJ,IAAI,EAAE,EAAE,UAAU,EAAE,6BAA6B,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,yEAAyE,EAAE;CACrJ,CAAC;AAEF,8FAA8F;AAC9F,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,UAAU,EAAE,6BAA6B,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,yEAAyE,EAAE,CAAC"}

package/dist/cli/src/secrets.js

@@ -0,0 +1,49 @@
+import { Effect, Redacted } from "effect";
+import { kind, KubeApi } from "./kube/api.js";
+import { NAMESPACE } from "./manifests/common.js";
+/** The bot's Secret: its token (`token`) and the users allowed to use it (`allowedUserIds`, comma-separated). */
+export const TELEGRAM_SECRET = "alasio-telegram";
+/** Claude Code's Secret: its token (`token`), from `claude setup-token`. */
+export const CLAUDE_SECRET = "alasio-claude";
+/** The annotation of the bot's Secret that names the bot, which is no secret. */
+const BOT_ANNOTATION = "alasio.dev/bot-username";
+const SECRET = kind("Secret");
+/** A Secret of alasio's holding `data`. */
+function secret(name, data, annotations = {}) {
+    return {
+        apiVersion: "v1",
+        kind: "Secret",
+        metadata: { name, namespace: NAMESPACE, labels: { "app.kubernetes.io/managed-by": "alasio", "app.kubernetes.io/part-of": "alasio" }, annotations },
+        type: "Opaque",
+        data: Object.fromEntries(Object.entries(data).map(([key, value]) => [key, Buffer.from(value, "utf8").toString("base64")])),
+    };
+}
+/** The value of `key` in `found`'s data, or null when it has none. */
+const valueOf = (found, key) => {
+    const encoded = found?.data?.[key];
+    return encoded === undefined ? null : Buffer.from(encoded, "base64").toString("utf8");
+};
+/** Writes the bot's Secret. */
+export const writeTelegramBot = (bot) => Effect.flatMap(KubeApi, (kube) => kube.apply(secret(TELEGRAM_SECRET, { token: Redacted.value(bot.token), allowedUserIds: bot.allowedUserIds.join(",") }, { [BOT_ANNOTATION]: bot.username }))).pipe(Effect.asVoid);
+/** Writes Claude Code's Secret. */
+export const writeClaudeToken = (token) => Effect.flatMap(KubeApi, (kube) => kube.apply(secret(CLAUDE_SECRET, { token: Redacted.value(token) }))).pipe(Effect.asVoid);
+/** The bot of the bot's Secret, or null when there is none. */
+export const readTelegramBot = Effect.gen(function* () {
+    const kube = yield* KubeApi;
+    const found = yield* kube.get({ ...SECRET, namespace: NAMESPACE, name: TELEGRAM_SECRET });
+    const token = valueOf(found, "token");
+    if (token === null)
+        return null;
+    return {
+        token: Redacted.make(token),
+        allowedUserIds: (valueOf(found, "allowedUserIds") ?? "").split(",").filter(Boolean),
+        username: found?.metadata?.annotations?.[BOT_ANNOTATION] ?? "",
+    };
+});
+/** Claude Code's token, or null when there is none. */
+export const readClaudeToken = Effect.gen(function* () {
+    const kube = yield* KubeApi;
+    const token = valueOf(yield* kube.get({ ...SECRET, namespace: NAMESPACE, name: CLAUDE_SECRET }), "token");
+    return token === null ? null : Redacted.make(token);
+});
+//# sourceMappingURL=secrets.js.map

package/dist/cli/src/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../../src/secrets.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAE1C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAqB,MAAM,eAAe,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD,iHAAiH;AACjH,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC;AACjD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC;AAC7C,iFAAiF;AACjF,MAAM,cAAc,GAAG,yBAAyB,CAAC;AAEjD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;AAU9B,2CAA2C;AAC3C,SAAS,MAAM,CAAC,IAAY,EAAE,IAAsC,EAAE,WAAW,GAAqC,EAAE;IACtH,OAAO;QACL,UAAU,EAAE,IAAI;QAChB,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,8BAA8B,EAAE,QAAQ,EAAE,2BAA2B,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE;QAClJ,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;KAC3H,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,OAAO,GAAG,CAAC,KAAsB,EAAE,GAAW,EAAiB,EAAE;IACrE,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC;IACnC,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACxF,CAAC,CAAC;AAEF,+BAA+B;AAC/B,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAgB,EAA8C,EAAE,CAC/F,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAC/B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAC/J,MAAM,CAAC,MAAM,CACd,CAAC;AAEN,mCAAmC;AACnC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAwB,EAA8C,EAAE,CACvG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAE7H,+DAA+D;AAC/D,MAAM,CAAC,MAAM,eAAe,GAA6D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC3G,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC;IAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAW,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;IACpG,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACtC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO;QACL,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAC3B,cAAc,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QACnF,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE;KAC/D,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,uDAAuD;AACvD,MAAM,CAAC,MAAM,eAAe,GAAmE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IACjH,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC;IAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAW,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IACpH,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC"}

package/dist/cli/src/target.js

@@ -0,0 +1,55 @@
+/**
+ * The cluster the operator's config targets (./config.ts): the one alasio makes on this
+ * machine, whose kubeconfig it writes beside the config file, or one a kubeconfig
+ * reaches; and the services that reach it.
+ *
+ * The local cluster's nodes mount the host profile's paths at their own, as folder
+ * workspaces mount them from the node, but for those the target's own mounts already
+ * put there (as a node path of /host/tmp mounts the machine's /tmp).
+ */
+import { Config, Effect, FileSystem, Layer, Option, Result } from "effect";
+import { DockerEngine } from "./cluster/docker.js";
+import { LocalCluster } from "./cluster/local.js";
+import { defaultStoragePath, installConfigOf, localKubeconfigPath, OperatorConfigError } from "./config.js";
+import { KubeApi } from "./kube/api.js";
+/** The cluster `config` targets. */
+export const resolveTarget = Effect.fnUntraced(function* (config) {
+    const { target } = config;
+    if ("kubeconfig" in target)
+        return { _tag: "Kubeconfig", kubeconfig: target.kubeconfig };
+    const { local } = target;
+    const install = installConfigOf(config.install, { claude: false });
+    if (Result.isFailure(install))
+        return yield* new OperatorConfigError({ path: config.path, reason: install.failure });
+    const { host } = install.success;
+    const hostPaths = host.enabled ? host.mounts.map(({ hostPath, readOnly }) => ({ source: hostPath, target: hostPath, readOnly })) : [];
+    return {
+        _tag: "Local",
+        cluster: {
+            name: local.name,
+            apiPort: local.apiPort,
+            storagePath: local.storagePath ?? (yield* defaultStoragePath),
+            ...(local.subnet ? { subnet: local.subnet } : {}),
+            ...(local.image ? { image: local.image } : {}),
+            hostAliases: local.hostAliases,
+            mounts: [...local.mounts, ...hostPaths.filter(({ target }) => !local.mounts.some((mount) => mount.target === target))],
+            agents: local.agents,
+            ...(local.registries ? { registries: local.registries } : {}),
+        },
+        kubeconfig: { path: localKubeconfigPath(config) },
+    };
+});
+/** Docker, as DOCKER_HOST names it. */
+const docker = Layer.unwrap(Effect.map(Config.option(Config.String("DOCKER_HOST")), (host) => DockerEngine.layer(Option.match(host, { onNone: () => ({}), onSome: (DOCKER_HOST) => ({ DOCKER_HOST }) }))));
+/** The local cluster made with `options`. */
+export const localCluster = (options) => LocalCluster.layer(options).pipe(Layer.provide(docker));
+/** The API of the cluster `target` is. */
+export const kubeApi = (target) => KubeApi.layer(target.kubeconfig);
+/** Where the cluster `target` is, as people read it. */
+export function describeTarget(target) {
+    if (target._tag === "Local")
+        return `the cluster ${target.cluster.name} on this machine`;
+    const { path, context } = target.kubeconfig;
+    return `the cluster ${context ? `of context ${context}` : "of the current context"} of ${path ?? "the default kubeconfig"}`;
+}
+//# sourceMappingURL=target.js.map

package/dist/cli/src/target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"target.js","sourceRoot":"","sources":["../../../src/target.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE3E,OAAO,EAAE,YAAY,EAA8B,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,YAAY,EAA4B,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,mBAAmB,EAAuB,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACjI,OAAO,EAAE,OAAO,EAA+C,MAAM,eAAe,CAAC;AAOrF,oCAAoC;AACpC,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAC,MAAsB;IAC7E,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC1B,IAAI,YAAY,IAAI,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;IACzF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IACzB,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,IAAI,mBAAmB,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACrH,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtI,OAAO;QACL,IAAI,EAAE,OAAO;QACb,OAAO,EAAE;YACP,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC;YAC7D,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC;YACtH,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D;QACD,UAAU,EAAE,EAAE,IAAI,EAAE,mBAAmB,CAAC,MAAM,CAAC,EAAE;KAClD,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,uCAAuC;AACvC,MAAM,MAAM,GAA0E,KAAK,CAAC,MAAM,CAChG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAC9K,CAAC;AAEF,6CAA6C;AAC7C,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAA4B,EAAgG,EAAE,CACzJ,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AAE1D,0CAA0C;AAC1C,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,MAAsB,EAA4C,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AAE9H,wDAAwD;AACxD,MAAM,UAAU,cAAc,CAAC,MAAsB;IACnD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,eAAe,MAAM,CAAC,OAAO,CAAC,IAAI,kBAAkB,CAAC;IACzF,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC;IAC5C,OAAO,eAAe,OAAO,CAAC,CAAC,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC,CAAC,wBAAwB,OAAO,IAAI,IAAI,wBAAwB,EAAE,CAAC;AAC9H,CAAC"}

package/dist/cli/src/telegram.js

@@ -0,0 +1,27 @@
+/**
+ * Telegram's Bot API, as far as alasio's command line asks it: which bot a token is
+ * (getMe), so a token is checked before it is kept. It only reads; it never sends a
+ * message. The API is at TELEGRAM_API_ROOT, as for alasio itself, or Telegram's own.
+ */
+import { Config, Context, Effect, Layer, Redacted, Schema } from "effect";
+const GetMeAnswer = Schema.Union([
+    Schema.Struct({ ok: Schema.Literal(true), result: Schema.Struct({ username: Schema.String }) }),
+    Schema.Struct({ ok: Schema.Literal(false), description: Schema.String }),
+]);
+/** A bot token could not be checked, or Telegram refused it. */
+export class BotTokenError extends Schema.TaggedError()("BotTokenError", {
+    message: Schema.String,
+}) {
+}
+/** Why `cause`, a failed fetch, failed: its own cause's message, as a fetch's says only that it failed. */
+const fetchFailure = (cause) => cause instanceof Error ? (cause.cause instanceof Error ? cause.cause.message : cause.message) : String(cause);
+export class TelegramBotApi extends Context.Service()("alasio/TelegramBotApi") {
+    static layer = Layer.effect(TelegramBotApi, Effect.map(Config.String("TELEGRAM_API_ROOT").pipe(Config.withDefault("https://api.telegram.org")), (root) => TelegramBotApi.of({
+        getMe: (token) => Effect.tryPromise({
+            try: async (signal) => (await fetch(`${root.replace(/\/$/u, "")}/bot${Redacted.value(token)}/getMe`, { signal })).json(),
+            // Told by its cause alone, as the URL holds the token.
+            catch: (cause) => new BotTokenError({ message: `Telegram could not be asked about the bot token: ${fetchFailure(cause)}` }),
+        }).pipe(Effect.flatMap((answer) => Schema.decodeUnknownEffect(GetMeAnswer)(answer).pipe(Effect.mapError(() => new BotTokenError({ message: `${root} answered what Telegram's Bot API does not` })))), Effect.flatMap((answer) => answer.ok ? Effect.succeed(answer.result.username) : Effect.fail(new BotTokenError({ message: `Telegram refused the bot token: ${answer.description}` })))),
+    })));
+}
+//# sourceMappingURL=telegram.js.map

package/dist/cli/src/telegram.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telegram.js","sourceRoot":"","sources":["../../../src/telegram.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE1E,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC;IAC/B,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IAC/F,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;CACzE,CAAC,CAAC;AAEH,gEAAgE;AAChE,MAAM,OAAO,aAAc,SAAQ,MAAM,CAAC,WAAW,EAAiB,CAAC,eAAe,EAAE;IACtF,OAAO,EAAE,MAAM,CAAC,MAAM;CACvB,CAAC;CAAG;AAEL,2GAA2G;AAC3G,MAAM,YAAY,GAAG,CAAC,KAAc,EAAU,EAAE,CAC9C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEhH,MAAM,OAAO,cAAe,SAAQ,OAAO,CAAC,OAAO,EAG/C,CAAC,uBAAuB,CAAC;IAC3B,MAAM,CAAU,KAAK,GAAoD,KAAK,CAAC,MAAM,CACnF,cAAc,EACd,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAC3G,cAAc,CAAC,EAAE,CAAC;QAChB,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,MAAM,CAAC,UAAU,CAAC;YAChB,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,EAAsB;YAC5I,uDAAuD;YACvD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,aAAa,CAAC,EAAE,OAAO,EAAE,oDAAoD,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;SAC5H,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,MAAM,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAClD,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,aAAa,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,4CAA4C,EAAE,CAAC,CAAC,CAC3G,CACF,EACD,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,EAAE,OAAO,EAAE,mCAAmC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAC1J,CACF;KACJ,CAAC,CAAC,CACN,CAAC;CACH"}

package/dist/src/kube/config.js

@@ -0,0 +1,99 @@
+/**
+ * The templates alasio's installation gives it for its workspaces: `ALASIO_KUBE_TEMPLATES`
+ * is the path of a JSON file, which its Deployment mounts from a ConfigMap
+ * (cli/src/manifests/alasio.ts), of the form
+ *
+ *     {
+ *       "sessions": { "namespace", "port", "workspaceDir", "egressGate", "fullModeNameservers",
+ *                     "podTemplate", "volumeClaimTemplates" },
+ *       "host":     { "namespace", "port", "stateRoot", "podTemplate" }
+ *     }
+ *
+ * either of which may be absent: no `sessions`, no session filesystems; no `host`, no
+ * folder workspaces. Each `podTemplate` has a container named `bayma` whose arguments
+ * serve MCP over HTTP on `port`; alasio adds the rest per Sandbox (./sandboxes.ts).
+ */
+import { readFileSync } from "node:fs";
+import { Config, Effect, Predicate, Result, Schema, SchemaGetter, SchemaIssue } from "effect";
+/** The deployment's templates could not be read, or are not what alasio needs; the message says which. */
+export class KubeTemplatesError extends Schema.TaggedError()("KubeTemplatesError", {
+    message: Schema.String,
+}) {
+}
+const NAMESPACE = /^[a-z0-9]([-a-z0-9]{0,61}[a-z0-9])?$/u;
+/**
+ * `schema`, whose every failure, a missing key's too, reads as `message`, which the
+ * error then says of the key's path.
+ */
+const said = (schema, message) => schema.annotate({ message }).annotateKey({ messageMissingKey: message });
+/** A namespace's name; a name YAML reads as a number (`123`) is that name. */
+const Namespace = said(Schema.Union([Schema.String, Schema.Finite.pipe(Schema.decodeTo(Schema.String, { decode: SchemaGetter.String(), encode: SchemaGetter.Number() }))])
+    .check(Schema.isPattern(NAMESPACE, { message: "must be a namespace name" })), "must be a namespace name");
+const Port = said(Schema.Number.check(Schema.isInt({ message: "must be a port number" }), Schema.isBetween({ minimum: 1, maximum: 65535 }, { message: "must be a port number" })), "must be a port number");
+const Path = said(Schema.String, "must be a path");
+/**
+ * What alasio relies on of a pod template is checked with its profile (a container named
+ * `bayma`); the rest of it, and the claim templates, are Kubernetes objects the
+ * installation gives, which the API server checks as each Sandbox is made.
+ */
+const PodTemplate = said(Schema.declare((value) => Predicate.isObject(value)), "must be an object").pipe(Schema.withDecodingDefaultKey(Effect.succeed({})));
+const VolumeClaimTemplates = said(Schema.Array(Schema.declare((value) => Predicate.isObject(value))), "must be a list of volume claim templates");
+/** Whether `podTemplate`, as the installation gives it, runs a container named `bayma`. */
+function runsBayma(podTemplate) {
+    const containers = Predicate.hasProperty(podTemplate, "spec") && Predicate.hasProperty(podTemplate.spec, "containers")
+        ? podTemplate.spec.containers
+        : undefined;
+    return Array.isArray(containers) && containers.some((container) => Predicate.hasProperty(container, "name") && container.name === "bayma");
+}
+/** What both profiles hold: where their Sandboxes are made, and from what. */
+const sandboxProfile = { namespace: Namespace, port: Port, podTemplate: PodTemplate };
+/** The issue of a profile whose pod template runs no bayma. */
+const baymaIssue = { path: ["podTemplate", "spec", "containers"], issue: 'must include one named "bayma"' };
+/** The template of session filesystems' Sandboxes (sessionsProfile in cli/src/manifests/alasio.ts). */
+const SessionsProfile = said(Schema.Struct({
+    ...sandboxProfile,
+    /** Where the session's workspace is in bayma's container. */
+    workspaceDir: Path,
+    /** Whether a session waits for its egress to be confined before it starts; only false turns it off. */
+    egressGate: Schema.optional(said(Schema.NullOr(Schema.Boolean), "must be true or false")),
+    /** The resolvers sessions with internet access use, or none for alasio's defaults. */
+    fullModeNameservers: Schema.optional(said(Schema.NullOr(Schema.Array(Schema.String)), "must be a list of addresses")),
+    volumeClaimTemplates: Schema.optional(VolumeClaimTemplates),
+}), "must be an object").check(Schema.makeFilter((profile) => (runsBayma(profile.podTemplate) ? undefined : baymaIssue)));
+/** The template of folder workspaces' bayma (hostProfile in cli/src/manifests/alasio.ts). */
+const HostProfile = said(Schema.Struct({
+    ...sandboxProfile,
+    /** The directory on the host under which each conversation's bayma keeps its state. */
+    stateRoot: Path,
+}), "must be an object").check(Schema.makeFilter((profile) => (runsBayma(profile.podTemplate) ? undefined : baymaIssue)));
+/** A profile the deployment may leave out, which is then null. */
+const optionalProfile = (schema) => said(Schema.NullOr(schema), "must be an object").pipe(Schema.withDecodingDefaultKey(Effect.succeed(null)));
+/** ALASIO_KUBE_TEMPLATES, checked: a profile the deployment does not render is null. */
+const KubeTemplates = said(Schema.Struct({ sessions: optionalProfile(SessionsProfile), host: optionalProfile(HostProfile) }), "must be an object");
+const formatIssue = SchemaIssue.makeFormatterStandardSchemaV1();
+/** The first thing wrong with the templates, as alasio says it: the key's path, then what it must be. */
+function describe(issue) {
+    const [first] = formatIssue(issue).issues;
+    const path = first?.path?.map((segment) => String(Predicate.hasProperty(segment, "key") ? segment.key : segment)).join(".") ?? "";
+    return ["ALASIO_KUBE_TEMPLATES", path, first?.message ?? "is not what alasio expects"].filter(Boolean).join(" ");
+}
+/** The templates in `text`, the content of the file at `path`, checked. */
+export const decodeKubeTemplates = (path, text) => Result.try({
+    try: () => JSON.parse(text),
+    catch: (error) => new KubeTemplatesError({ message: `ALASIO_KUBE_TEMPLATES ${path} is not readable JSON: ${error instanceof Error ? error.message : String(error)}` }),
+}).pipe(Result.flatMap((parsed) => Result.mapError(Schema.decodeUnknownResult(KubeTemplates)(parsed), (error) => new KubeTemplatesError({ message: describe(error.issue) }))));
+/**
+ * The templates, read once at startup and checked, so a deployment that renders them
+ * wrongly fails as it starts rather than at a workspace's first turn.
+ */
+export const loadKubeTemplates = Effect.gen(function* () {
+    const path = (yield* Config.String("ALASIO_KUBE_TEMPLATES").pipe(Config.withDefault(""))).trim();
+    if (!path)
+        return yield* new KubeTemplatesError({ message: "ALASIO_KUBE_TEMPLATES is not set: alasio runs where alasio up installs it" });
+    const text = yield* Effect.try({
+        try: () => readFileSync(path, "utf8"),
+        catch: (error) => new KubeTemplatesError({ message: `ALASIO_KUBE_TEMPLATES ${path} is not readable JSON: ${error instanceof Error ? error.message : String(error)}` }),
+    });
+    return yield* Effect.fromResult(decodeKubeTemplates(path, text));
+});
+//# sourceMappingURL=config.js.map

package/dist/src/kube/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../../src/kube/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAGvC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAE9F,0GAA0G;AAC1G,MAAM,OAAO,kBAAmB,SAAQ,MAAM,CAAC,WAAW,EAAsB,CAAC,oBAAoB,EAAE;IACrG,OAAO,EAAE,MAAM,CAAC,MAAM;CACvB,CAAC;CAAG;AAEL,MAAM,SAAS,GAAG,uCAAuC,CAAC;AAE1D;;;GAGG;AACH,MAAM,IAAI,GAAG,CAAuB,MAAS,EAAE,OAAe,EAAgB,EAAE,CAC9E,MAAM,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC;AAE3E,8EAA8E;AAC9E,MAAM,SAAS,GAAG,IAAI,CACpB,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;KAChJ,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC,EAC9E,0BAA0B,CAC3B,CAAC;AAEF,MAAM,IAAI,GAAG,IAAI,CACf,MAAM,CAAC,MAAM,CAAC,KAAK,CACjB,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,EAClD,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,CACvF,EACD,uBAAuB,CACxB,CAAC;AAEF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;AAEnD;;;;GAIG;AACH,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAA8B,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC,IAAI,CAClI,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAClD,CAAC;AAEF,MAAM,oBAAoB,GAAG,IAAI,CAC/B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAoC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EACpG,0CAA0C,CAC3C,CAAC;AAEF,2FAA2F;AAC3F,SAAS,SAAS,CAAC,WAAoB;IACrC,MAAM,UAAU,GAAG,SAAS,CAAC,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,SAAS,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC;QACpH,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU;QAC7B,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,SAAkB,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;AACtJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,cAAc,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;AAEtF,+DAA+D;AAC/D,MAAM,UAAU,GAAG,EAAE,IAAI,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;AAE5G,uGAAuG;AACvG,MAAM,eAAe,GAAG,IAAI,CAC1B,MAAM,CAAC,MAAM,CAAC;IACZ,GAAG,cAAc;IACjB,6DAA6D;IAC7D,YAAY,EAAE,IAAI;IAClB,uGAAuG;IACvG,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,uBAAuB,CAAC,CAAC;IACzF,sFAAsF;IACtF,mBAAmB,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,6BAA6B,CAAC,CAAC;IACrH,oBAAoB,EAAE,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC;CAC5D,CAAC,EACF,mBAAmB,CACpB,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AAEnG,6FAA6F;AAC7F,MAAM,WAAW,GAAG,IAAI,CACtB,MAAM,CAAC,MAAM,CAAC;IACZ,GAAG,cAAc;IACjB,uFAAuF;IACvF,SAAS,EAAE,IAAI;CAChB,CAAC,EACF,mBAAmB,CACpB,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AAEnG,kEAAkE;AAClE,MAAM,eAAe,GAAG,CAAuB,MAAS,EAAE,EAAE,CAC1D,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAE7G,wFAAwF;AACxF,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,eAAe,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,mBAAmB,CAAC,CAAC;AAMnJ,MAAM,WAAW,GAAG,WAAW,CAAC,6BAA6B,EAAE,CAAC;AAEhE,yGAAyG;AACzG,SAAS,QAAQ,CAAC,KAAwB;IACxC,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,IAAI,GAAG,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAClI,OAAO,CAAC,uBAAuB,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,IAAI,4BAA4B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnH,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAAE,IAAY,EAAoD,EAAE,CAClH,MAAM,CAAC,GAAG,CAAC;IACT,GAAG,EAAE,GAAY,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACpC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,kBAAkB,CAAC,EAAE,OAAO,EAAE,yBAAyB,IAAI,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;CACvK,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,kBAAkB,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAC1I,CACF,CAAC;AAEJ;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA0E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC1H,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjG,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC,CAAC,IAAI,kBAAkB,CAAC,EAAE,OAAO,EAAE,2EAA2E,EAAE,CAAC,CAAC;IAC1I,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QAC7B,GAAG,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC;QACrC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,kBAAkB,CAAC,EAAE,OAAO,EAAE,yBAAyB,IAAI,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;KACvK,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AACnE,CAAC,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "alasio",
+  "version": "4.0.0",
+  "description": "alasio: coding agents you talk to from Telegram, installed and run with npx alasio",
+  "type": "module",
+  "license": "MIT",
+  "bin": {
+    "alasio": "dist/cli/src/main.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "engines": {
+    "node": ">=24"
+  },
+  "scripts": {
+    "build": "rm -rf dist && tsc -p tsconfig.build.json",
+    "start": "node ./src/main.ts"
+  },
+  "dependencies": {
+    "@effect/platform-node": "4.0.0",
+    "@effect/platform-node-shared": "4.0.0",
+    "@kubernetes/client-node": "2.0.0",
+    "effect": "4.0.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/eaucoin/alasio.git",
+    "directory": "cli"
+  },
+  "homepage": "https://github.com/eaucoin/alasio"
+}