archal 0.9.18 → 0.9.19

package/dist/vitest/{chunk-IVXSSEYS.js → chunk-L36NXAU6.js}

@@ -21,7 +21,7 @@ import {
   requestedSeedsMatchSession,
   sleep,
   trimEnv
-} from "./chunk-CTSN67QR.js";
+} from "./chunk-WZ7SA4CK.js";
 
 // ../../node_modules/.pnpm/ajv@8.18.0/node_modules/ajv/dist/compile/codegen/code.js
 var require_code = __commonJS({
@@ -2974,7 +2974,7 @@ var require_compile = __commonJS({
       const schOrFunc = root.refs[ref];
       if (schOrFunc)
         return schOrFunc;
-      let _sch = resolve7.call(this, root, ref);
+      let _sch = resolve8.call(this, root, ref);
       if (_sch === void 0) {
         const schema = (_a2 = root.localRefs) === null || _a2 === void 0 ? void 0 : _a2[ref];
         const { schemaId } = this.opts;
@@ -3001,7 +3001,7 @@ var require_compile = __commonJS({
     function sameSchemaEnv(s1, s2) {
       return s1.schema === s2.schema && s1.root === s2.root && s1.baseId === s2.baseId;
     }
-    function resolve7(root, ref) {
+    function resolve8(root, ref) {
       let sch;
       while (typeof (sch = this.refs[ref]) == "string")
         ref = sch;
@@ -3576,55 +3576,55 @@ var require_fast_uri = __commonJS({
       }
       return uri;
     }
-    function resolve7(baseURI, relativeURI, options) {
+    function resolve8(baseURI, relativeURI, options) {
       const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
       const resolved = resolveComponent(parse3(baseURI, schemelessOptions), parse3(relativeURI, schemelessOptions), schemelessOptions, true);
       schemelessOptions.skipEscape = true;
       return serialize(resolved, schemelessOptions);
     }
-    function resolveComponent(base, relative2, options, skipNormalization) {
+    function resolveComponent(base, relative3, options, skipNormalization) {
       const target = {};
       if (!skipNormalization) {
         base = parse3(serialize(base, options), options);
-        relative2 = parse3(serialize(relative2, options), options);
+        relative3 = parse3(serialize(relative3, options), options);
       }
       options = options || {};
-      if (!options.tolerant && relative2.scheme) {
-        target.scheme = relative2.scheme;
-        target.userinfo = relative2.userinfo;
-        target.host = relative2.host;
-        target.port = relative2.port;
-        target.path = removeDotSegments(relative2.path || "");
-        target.query = relative2.query;
+      if (!options.tolerant && relative3.scheme) {
+        target.scheme = relative3.scheme;
+        target.userinfo = relative3.userinfo;
+        target.host = relative3.host;
+        target.port = relative3.port;
+        target.path = removeDotSegments(relative3.path || "");
+        target.query = relative3.query;
       } else {
-        if (relative2.userinfo !== void 0 || relative2.host !== void 0 || relative2.port !== void 0) {
-          target.userinfo = relative2.userinfo;
-          target.host = relative2.host;
-          target.port = relative2.port;
-          target.path = removeDotSegments(relative2.path || "");
-          target.query = relative2.query;
+        if (relative3.userinfo !== void 0 || relative3.host !== void 0 || relative3.port !== void 0) {
+          target.userinfo = relative3.userinfo;
+          target.host = relative3.host;
+          target.port = relative3.port;
+          target.path = removeDotSegments(relative3.path || "");
+          target.query = relative3.query;
         } else {
-          if (!relative2.path) {
+          if (!relative3.path) {
             target.path = base.path;
-            if (relative2.query !== void 0) {
-              target.query = relative2.query;
+            if (relative3.query !== void 0) {
+              target.query = relative3.query;
             } else {
               target.query = base.query;
             }
           } else {
-            if (relative2.path[0] === "/") {
-              target.path = removeDotSegments(relative2.path);
+            if (relative3.path[0] === "/") {
+              target.path = removeDotSegments(relative3.path);
             } else {
               if ((base.userinfo !== void 0 || base.host !== void 0 || base.port !== void 0) && !base.path) {
-                target.path = "/" + relative2.path;
+                target.path = "/" + relative3.path;
               } else if (!base.path) {
-                target.path = relative2.path;
+                target.path = relative3.path;
               } else {
-                target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative2.path;
+                target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative3.path;
               }
               target.path = removeDotSegments(target.path);
             }
-            target.query = relative2.query;
+            target.query = relative3.query;
           }
           target.userinfo = base.userinfo;
           target.host = base.host;
@@ -3632,7 +3632,7 @@ var require_fast_uri = __commonJS({
         }
         target.scheme = base.scheme;
       }
-      target.fragment = relative2.fragment;
+      target.fragment = relative3.fragment;
       return target;
     }
     function equal(uriA, uriB, options) {
@@ -3803,7 +3803,7 @@ var require_fast_uri = __commonJS({
     var fastUri = {
       SCHEMES,
       normalize,
-      resolve: resolve7,
+      resolve: resolve8,
       resolveComponent,
       equal,
       serialize,
@@ -7280,6 +7280,7 @@ var slackRouteManifest = {
     exactDomain("slack.com"),
     exactDomain("api.slack.com")
   ],
+  upstreamBasePath: "/api",
   // Block adjacent Slack-owned domains that tests don't need and that can be
   // abused as data-exfiltration channels. hooks.slack.com and files.slack.com
   // in particular are ideal POST targets for a malicious dependency trying to
@@ -8211,7 +8212,7 @@ var ROUTE_RUNTIME_DISPATCHING_ROUTE_KINDS = new Set(ROUTE_RUNTIME_PUBLIC_ROUTE_K
 var stripeCompatibilityProfile = buildServiceCompatibilityProfile(stripeRouteManifest);
 
 // ../route-runtime-core/src/hosted-capabilities.ts
-import { createHash as createHash5 } from "crypto";
+import { createHash as createHash6 } from "crypto";
 
 // ../../twins/core/src/control-plane-auth.ts
 import { timingSafeEqual } from "crypto";
@@ -27620,13 +27621,96 @@ import { randomUUID as randomUUID3 } from "crypto";
 import { performance as performance2 } from "perf_hooks";
 
 // ../../twins/core/src/fixture-oracle.ts
-import { existsSync as existsSync2, readdirSync as readdirSync2, readFileSync as readFileSync3 } from "fs";
-import { dirname as dirname3, resolve as resolve3 } from "path";
+import { existsSync as existsSync4, readdirSync as readdirSync2, readFileSync as readFileSync5 } from "fs";
+import { dirname as dirname5, resolve as resolve5 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 
+// ../../twins/core/src/legacy-asset-cache.ts
+import { createHash as createHash4 } from "crypto";
+import {
+  existsSync as existsSync3,
+  mkdirSync as mkdirSync2,
+  readFileSync as readFileSync4,
+  renameSync as renameSync3,
+  writeFileSync as writeFileSync3
+} from "fs";
+import { homedir as homedir2 } from "os";
+import { dirname as dirname4, relative as relative2, resolve as resolve4 } from "path";
+
+// ../../twins/core/src/recording-fetcher.ts
+import { createHash as createHash3 } from "crypto";
+import {
+  existsSync as existsSync2,
+  mkdirSync,
+  readFileSync as readFileSync3,
+  renameSync as renameSync2,
+  statSync,
+  writeFileSync as writeFileSync2
+} from "fs";
+import { homedir } from "os";
+import { dirname as dirname3, resolve as resolve3 } from "path";
+var RecordingManifestEntrySchema = external_exports3.object({
+  filename: external_exports3.string(),
+  sha256: external_exports3.string().regex(/^[0-9a-f]{64}$/, "sha256 must be 64 lowercase hex chars"),
+  size: external_exports3.number().optional(),
+  sizeBytes: external_exports3.number().optional(),
+  uploadedAt: external_exports3.string().optional(),
+  // Optional symbolic tags that map fixture-oracle / replay lookups onto this
+  // recording. Lets twins keep tag→file resolution inside the manifest itself
+  // rather than depending on a separate provenance.json (which is excluded
+  // from the in-tree fixture allowlist for graduated twins). Codex P2 on
+  // tavily #3603 — fixture-oracle previously required provenance.json to
+  // resolve `rest-profile:tavily:tavily_search_basic` → filename.
+  tags: external_exports3.array(external_exports3.string()).optional()
+}).loose();
+var RecordingManifestSchema = external_exports3.object({
+  service: external_exports3.string().min(1),
+  version: external_exports3.number().int(),
+  container: external_exports3.string().min(1),
+  baseUrl: external_exports3.string().optional(),
+  entries: external_exports3.array(RecordingManifestEntrySchema)
+}).loose();
+var DEFAULT_BASE_URL = process.env["ARCHAL_FIXTURE_BASE_URL"] ?? "https://archalforge8f96908966.blob.core.windows.net/archal-fixture-artifacts?sv=2023-11-03&spr=https&se=2031-05-10T00%3A00%3A00Z&sr=c&sp=rl&sig=r3%2FC3EwzilSHls8z3Pn5ZR%2BkinwQw1C6%2BDKObIZSIu0%3D";
+var DEFAULT_CACHE_ROOT = process.env["ARCHAL_FIXTURE_CACHE_ROOT"] ?? resolve3(homedir(), ".archal", "forge", "recordings-cache");
+function warnIfSasExpiresSoon(baseUrl) {
+  if (process.env["ARCHAL_FIXTURE_SAS_WARN"] === "0") return;
+  const queryIdx = baseUrl.indexOf("?");
+  if (queryIdx < 0) return;
+  const query = baseUrl.slice(queryIdx + 1);
+  const seParam = query.split("&").find((p) => p.startsWith("se="));
+  if (!seParam) return;
+  const seValue = decodeURIComponent(seParam.slice(3));
+  const expiresAt = Date.parse(seValue);
+  if (Number.isNaN(expiresAt)) return;
+  const now2 = Date.now();
+  const daysRemaining = Math.floor((expiresAt - now2) / (1e3 * 60 * 60 * 24));
+  if (daysRemaining < 365) {
+    console.warn(
+      `[recording-fetcher] SAS token in ARCHAL_FIXTURE_BASE_URL expires in ${daysRemaining}d (${seValue}). Rotate via scripts/rotate-fixture-sas.mjs before expiry.`
+    );
+  }
+}
+warnIfSasExpiresSoon(DEFAULT_BASE_URL);
+
+// ../../twins/core/src/legacy-asset-cache.ts
+var DEFAULT_CACHE_ROOT2 = process.env["ARCHAL_LEGACY_ASSET_CACHE_ROOT"] ?? resolve4(homedir2(), ".archal", "forge", "legacy-assets-cache");
+var LegacyAssetEntrySchema = external_exports3.object({
+  relativePath: external_exports3.string().min(1),
+  sha256: external_exports3.string().regex(/^[0-9a-f]{64}$/, "sha256 must be 64 lowercase hex chars"),
+  sizeBytes: external_exports3.number().optional(),
+  uploadedAt: external_exports3.string().optional()
+}).loose();
+var LegacyAssetManifestSchema = external_exports3.object({
+  service: external_exports3.string().min(1),
+  version: external_exports3.number().int(),
+  container: external_exports3.string().min(1),
+  layout: external_exports3.string().optional(),
+  entries: external_exports3.array(LegacyAssetEntrySchema)
+}).loose();
+
 // ../../twins/core/src/run-twin-cli.ts
-import { accessSync, constants, realpathSync, statSync } from "fs";
-import { resolve as resolve4 } from "path";
+import { accessSync, constants, realpathSync, statSync as statSync2 } from "fs";
+import { resolve as resolve6 } from "path";
 
 // ../../twins/manifest.json
 var manifest_default = [
@@ -27677,6 +27761,12 @@ var manifest_default = [
     package: "@archal/twin-firecrawl",
     path: "twins/firecrawl",
     stage: "internal",
+    display: {
+      icon: "FC",
+      name: "Firecrawl",
+      description: "Scraping, crawling, mapping, search, and extraction.",
+      toolCount: 6
+    },
     transport: "rest",
     hostedRuntime: { enabled: true, requiresDist: true, requiresEmptySeed: true },
     cli: { bundleAssets: false, bundleToolSnapshot: false },
@@ -27744,6 +27834,12 @@ var manifest_default = [
     package: "@archal/twin-hubspot",
     path: "twins/hubspot",
     stage: "internal",
+    display: {
+      icon: "HS",
+      name: "HubSpot",
+      description: "CRM contacts, companies, deals, tickets, and engagements.",
+      toolCount: 45
+    },
     transport: "rest",
     hostedRuntime: { enabled: true, requiresDist: true, requiresEmptySeed: true },
     cli: { bundleAssets: false, bundleToolSnapshot: false },
@@ -27820,6 +27916,12 @@ var manifest_default = [
     package: "@archal/twin-sendgrid",
     path: "twins/sendgrid",
     stage: "internal",
+    display: {
+      icon: "SG",
+      name: "SendGrid",
+      description: "Mail send, contacts, lists, templates, and stats.",
+      toolCount: 28
+    },
     transport: "rest",
     hostedRuntime: { enabled: true, requiresDist: true, requiresEmptySeed: true },
     cli: { bundleAssets: false, bundleToolSnapshot: false },
@@ -27916,6 +28018,12 @@ var manifest_default = [
     package: "@archal/twin-telegram",
     path: "twins/telegram",
     stage: "internal",
+    display: {
+      icon: "TG",
+      name: "Telegram",
+      description: "Bot messages, chats, updates, and webhooks.",
+      toolCount: 32
+    },
     transport: "both",
     hostedRuntime: { enabled: true, requiresDist: true, requiresEmptySeed: true },
     cli: { bundleAssets: false, bundleToolSnapshot: false },
@@ -27928,6 +28036,12 @@ var manifest_default = [
     package: "@archal/twin-twilio",
     path: "twins/twilio",
     stage: "internal",
+    display: {
+      icon: "TW",
+      name: "Twilio",
+      description: "Messages, calls, phone numbers, and verifications.",
+      toolCount: 35
+    },
     transport: "rest",
     hostedRuntime: { enabled: true, requiresDist: true, requiresEmptySeed: true },
     cli: { bundleAssets: false, bundleToolSnapshot: false },
@@ -27940,6 +28054,12 @@ var manifest_default = [
     package: "@archal/twin-unipile",
     path: "twins/unipile",
     stage: "internal",
+    display: {
+      icon: "UP",
+      name: "Unipile",
+      description: "LinkedIn and email messaging, accounts, and chats.",
+      toolCount: 24
+    },
     transport: "rest",
     hostedRuntime: { enabled: true, requiresDist: true, requiresEmptySeed: true },
     cli: { bundleAssets: false, bundleToolSnapshot: false },
@@ -27958,7 +28078,7 @@ var CLONE_PACKAGES = CLONE_MANIFEST.map((t) => t.package);
 var TWIN_PREFIX_PATTERN = new RegExp(`^(${CLONE_NAMES.join("|")})_`, "i");
 
 // ../../twins/core/src/session-run-id.ts
-import { createHash as createHash3 } from "crypto";
+import { createHash as createHash5 } from "crypto";
 
 // ../../twins/core/src/webhook-signing.ts
 import { createHmac, timingSafeEqual as timingSafeEqual2 } from "crypto";
@@ -28099,61 +28219,6 @@ var SCENARIO_RISK_TAXONOMY = SCENARIO_RISK_RULES.map(
   ({ id, label, description }) => ({ id, label, description })
 );
 
-// ../../twins/core/src/recording-fetcher.ts
-import { createHash as createHash4 } from "crypto";
-import {
-  existsSync as existsSync3,
-  mkdirSync,
-  readFileSync as readFileSync4,
-  renameSync as renameSync2,
-  statSync as statSync2,
-  writeFileSync as writeFileSync2
-} from "fs";
-import { homedir } from "os";
-import { dirname as dirname4, resolve as resolve5 } from "path";
-var RecordingManifestEntrySchema = external_exports3.object({
-  filename: external_exports3.string(),
-  sha256: external_exports3.string().regex(/^[0-9a-f]{64}$/, "sha256 must be 64 lowercase hex chars"),
-  size: external_exports3.number().optional(),
-  sizeBytes: external_exports3.number().optional(),
-  uploadedAt: external_exports3.string().optional(),
-  // Optional symbolic tags that map fixture-oracle / replay lookups onto this
-  // recording. Lets twins keep tag→file resolution inside the manifest itself
-  // rather than depending on a separate provenance.json (which is excluded
-  // from the in-tree fixture allowlist for graduated twins). Codex P2 on
-  // tavily #3603 — fixture-oracle previously required provenance.json to
-  // resolve `rest-profile:tavily:tavily_search_basic` → filename.
-  tags: external_exports3.array(external_exports3.string()).optional()
-}).loose();
-var RecordingManifestSchema = external_exports3.object({
-  service: external_exports3.string().min(1),
-  version: external_exports3.number().int(),
-  container: external_exports3.string().min(1),
-  baseUrl: external_exports3.string().optional(),
-  entries: external_exports3.array(RecordingManifestEntrySchema)
-}).loose();
-var DEFAULT_BASE_URL = process.env["ARCHAL_FIXTURE_BASE_URL"] ?? "https://archalforge8f96908966.blob.core.windows.net/archal-fixture-artifacts?sv=2023-11-03&spr=https&se=2031-05-10T00%3A00%3A00Z&sr=c&sp=rl&sig=r3%2FC3EwzilSHls8z3Pn5ZR%2BkinwQw1C6%2BDKObIZSIu0%3D";
-var DEFAULT_CACHE_ROOT = process.env["ARCHAL_FIXTURE_CACHE_ROOT"] ?? resolve5(homedir(), ".archal", "forge", "recordings-cache");
-function warnIfSasExpiresSoon(baseUrl) {
-  if (process.env["ARCHAL_FIXTURE_SAS_WARN"] === "0") return;
-  const queryIdx = baseUrl.indexOf("?");
-  if (queryIdx < 0) return;
-  const query = baseUrl.slice(queryIdx + 1);
-  const seParam = query.split("&").find((p) => p.startsWith("se="));
-  if (!seParam) return;
-  const seValue = decodeURIComponent(seParam.slice(3));
-  const expiresAt = Date.parse(seValue);
-  if (Number.isNaN(expiresAt)) return;
-  const now2 = Date.now();
-  const daysRemaining = Math.floor((expiresAt - now2) / (1e3 * 60 * 60 * 24));
-  if (daysRemaining < 365) {
-    console.warn(
-      `[recording-fetcher] SAS token in ARCHAL_FIXTURE_BASE_URL expires in ${daysRemaining}d (${seValue}). Rotate via scripts/rotate-fixture-sas.mjs before expiry.`
-    );
-  }
-}
-warnIfSasExpiresSoon(DEFAULT_BASE_URL);
-
 // src/runtime/service-profiles.ts
 function unsupportedServiceMessage(unsupportedServices) {
   const supportedServices = listSharedRouteManifests().map((manifest) => manifest.service).sort();
@@ -28183,10 +28248,10 @@ function resolveArchalVitestServiceProfiles(services) {
 }
 
 // src/runtime/hosted-session-provider.ts
-import { createHash as createHash6, randomUUID as randomUUID4 } from "crypto";
+import { createHash as createHash7, randomUUID as randomUUID4 } from "crypto";
 import { spawn } from "child_process";
 import { promises as fs } from "fs";
-import { join, resolve as resolve6 } from "path";
+import { join, resolve as resolve7 } from "path";
 import { tmpdir } from "os";
 
 // src/url-resolution.ts
@@ -28236,15 +28301,15 @@ function toSafeCoordinatorDirectoryName(sessionKey) {
     return sessionKey;
   }
   const slug = sessionKey.replace(/[^a-zA-Z0-9._-]+/g, "-").replace(/^[.-]+|[.-]+$/g, "").slice(0, 48);
-  const hash2 = createHash6("sha256").update(sessionKey).digest("hex").slice(0, 12);
+  const hash2 = createHash7("sha256").update(sessionKey).digest("hex").slice(0, 12);
   return `${slug || "session"}-${hash2}`;
 }
 function resolveCoordinatorPaths(config2) {
-  const baseDirectory = resolve6(
+  const baseDirectory = resolve7(
     trimEnv("ARCHAL_VITEST_COORDINATOR_DIR") ?? join(tmpdir(), "archal-vitest")
   );
   const sessionKey = config2.sessionKey ?? `${config2.projectName}-${randomUUID4()}`;
-  const directory = resolve6(baseDirectory, toSafeCoordinatorDirectoryName(sessionKey));
+  const directory = resolve7(baseDirectory, toSafeCoordinatorDirectoryName(sessionKey));
   return {
     directory,
     lockDirectory: join(directory, "lock"),
@@ -29170,11 +29235,11 @@ async function buildRuntimeConfig(scope) {
   };
   scope[GLOBAL_SESSION_KEY] = redactSessionSnapshot(session);
   try {
-    const { writeFileSync: writeFileSync3, mkdirSync: mkdirSync2 } = await import("fs");
-    const { dirname: dirname5 } = await import("path");
+    const { writeFileSync: writeFileSync4, mkdirSync: mkdirSync3 } = await import("fs");
+    const { dirname: dirname6 } = await import("path");
     const sessionIdPath = getSessionIdFilePath(config2.sessionKey);
-    mkdirSync2(dirname5(sessionIdPath), { recursive: true });
-    writeFileSync3(sessionIdPath, session.sessionId, "utf-8");
+    mkdirSync3(dirname6(sessionIdPath), { recursive: true });
+    writeFileSync4(sessionIdPath, session.sessionId, "utf-8");
   } catch {
   }
   return {