factory-factory 0.4.5 → 0.4.7

package/dist/src/backend/testing/npm-publish-workflow.test.js

@@ -0,0 +1,205 @@
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { describe, expect, it } from 'vitest';
+import { parse } from 'yaml';
+import { z } from 'zod';
+const workflowStepSchema = z.object({
+    env: z.record(z.string(), z.unknown()).optional(),
+    id: z.string().optional(),
+    if: z.string().optional(),
+    name: z.string().optional(),
+    run: z.string().optional(),
+    uses: z.string().optional(),
+    with: z.record(z.string(), z.unknown()).optional(),
+});
+const workflowJobSchema = z.object({
+    env: z.record(z.string(), z.unknown()).optional(),
+    environment: z.string().optional(),
+    if: z.string().optional(),
+    needs: z.union([z.string(), z.array(z.string())]).optional(),
+    permissions: z.record(z.string(), z.string()),
+    steps: z.array(workflowStepSchema),
+});
+const workflowDispatchInputSchema = z.object({
+    default: z.union([z.string(), z.boolean()]),
+    description: z.string(),
+    required: z.boolean(),
+    type: z.enum(['boolean', 'string']),
+});
+const publishWorkflowSchema = z.object({
+    jobs: z.record(z.string(), workflowJobSchema),
+    on: z.object({
+        workflow_dispatch: z.object({
+            inputs: z.record(z.string(), workflowDispatchInputSchema),
+        }),
+    }),
+});
+const workflowPath = fileURLToPath(new URL('../../../.github/workflows/npm-publish.yml', import.meta.url));
+const source = readFileSync(workflowPath, 'utf8');
+const parsedWorkflow = parse(source);
+const workflow = publishWorkflowSchema.parse(parsedWorkflow);
+function getJob(name) {
+    const job = workflow.jobs[name];
+    expect(job, `workflow job ${name} must exist`).toBeDefined();
+    return workflowJobSchema.parse(job);
+}
+function getStep(job, name) {
+    const step = job.steps.find((candidate) => candidate.name === name);
+    expect(step, `workflow step ${name} must exist`).toBeDefined();
+    return workflowStepSchema.parse(step);
+}
+function expectSecureNodeSetup(job) {
+    const setupNodeStep = job.steps.find((step) => step.uses?.startsWith('actions/setup-node@'));
+    expect(setupNodeStep?.with?.['package-manager-cache']).toBe(false);
+    expect(setupNodeStep?.with).not.toHaveProperty('registry-url');
+}
+function githubExpression(expression) {
+    return `\${{ ${expression} }}`;
+}
+describe('npm publish workflow', () => {
+    it('requires an explicit finalization dispatch after npm approval', () => {
+        expect(workflow.on.workflow_dispatch.inputs.finalize_release).toEqual({
+            default: 'false',
+            description: 'Finalize after approving the staged package on npm',
+            required: false,
+            type: 'boolean',
+        });
+        expect(workflow.on.workflow_dispatch.inputs.staging_run_id).toEqual({
+            default: '',
+            description: 'Run ID that staged the approved npm package',
+            required: false,
+            type: 'string',
+        });
+    });
+    it('keeps verification and dry runs outside publishing credentials', () => {
+        const verifyJob = getJob('verify');
+        expect(verifyJob.if).toBe(githubExpression("github.event_name == 'release' || github.event.inputs.finalize_release != 'true'"));
+        expect(verifyJob.environment).toBeUndefined();
+        expect(verifyJob.permissions).toEqual({ contents: 'read' });
+        expectSecureNodeSetup(verifyJob);
+        expect(getStep(verifyJob, 'Install npm CLI').run).toBe('npm install --global npm@11.19.0');
+        const dryRunStep = getStep(verifyJob, 'Publish to npm (dry run)');
+        expect(dryRunStep.if).toBe(githubExpression("matrix.node-version == '22.22' && github.event_name == 'workflow_dispatch' && github.event.inputs.dry_run == 'true'"));
+        expect(dryRunStep.run).toBe('npm publish --dry-run');
+    });
+    it('stages the packed artifact only in the protected OIDC job', () => {
+        const stageJob = getJob('stage');
+        expect(stageJob.needs).toBe('verify');
+        expect(stageJob.if).toBe(githubExpression("github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.ref == 'refs/heads/main' && github.event.inputs.dry_run != 'true' && github.event.inputs.finalize_release != 'true')"));
+        expect(stageJob.environment).toBe('npm-publish');
+        expect(stageJob.permissions).toEqual({ contents: 'read', 'id-token': 'write' });
+        expectSecureNodeSetup(stageJob);
+        expect(getStep(stageJob, 'Install npm CLI').run).toBe('npm install --global npm@11.19.0');
+        expect(getStep(stageJob, 'Stage package on npm').run).toBe('npm stage publish ./npm-package/factory-factory-*.tgz --access public');
+        const oidcJobs = Object.entries(workflow.jobs)
+            .filter(([, job]) => job.permissions['id-token'] === 'write')
+            .map(([name]) => name);
+        expect(oidcJobs).toEqual(['stage']);
+    });
+    it('pins every external action to an immutable commit', () => {
+        const actionReferences = Object.values(workflow.jobs).flatMap((job) => job.steps.flatMap((step) => (step.uses ? [step.uses] : [])));
+        expect(actionReferences).not.toHaveLength(0);
+        for (const actionReference of actionReferences) {
+            expect(actionReference).toMatch(/^[^@]+@[0-9a-f]{40}$/);
+        }
+    });
+    it('retains the package artifact for the protected-environment approval window', () => {
+        const uploadStep = getStep(getJob('verify'), 'Upload npm package');
+        expect(uploadStep.if).toBe(githubExpression("matrix.node-version == '22.22' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.ref == 'refs/heads/main' && github.event.inputs.dry_run != 'true' && github.event.inputs.finalize_release != 'true'))"));
+        expect(uploadStep.with).toEqual({
+            name: 'npm-package',
+            path: 'factory-factory-*.tgz',
+            'if-no-files-found': 'error',
+            'retention-days': 7,
+        });
+        const downloadStep = getStep(getJob('stage'), 'Download npm package');
+        expect(downloadStep.with).toEqual({
+            name: 'npm-package',
+            path: 'npm-package',
+        });
+    });
+    it('isolates GitHub release writes from the OIDC publisher', () => {
+        const finalizeJob = getJob('finalize-release');
+        expect(finalizeJob.needs).toBeUndefined();
+        expect(finalizeJob.if).toBe(githubExpression("github.event_name == 'workflow_dispatch' && github.ref == 'refs/heads/main' && github.event.inputs.dry_run != 'true' && github.event.inputs.finalize_release == 'true'"));
+        expect(finalizeJob.environment).toBeUndefined();
+        expect(finalizeJob.permissions).toEqual({ actions: 'read', contents: 'write' });
+        const verifyPublishedStep = getStep(finalizeJob, 'Verify package is published on npm');
+        expect(verifyPublishedStep.id).toBe('release_version');
+        expect(verifyPublishedStep.run).toBe(`set -euo pipefail
+VERSION=$(node -p "require('./package.json').version")
+PUBLISHED_VERSION=$(npm view "factory-factory@$VERSION" version)
+if [ "$PUBLISHED_VERSION" != "$VERSION" ]; then
+  echo "factory-factory@$VERSION is not published on npm" >&2
+  exit 1
+fi
+echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+`);
+        getStep(finalizeJob, 'Create and push tag');
+        expect(finalizeJob.steps.findIndex((step) => step.name === 'Verify package is published on npm')).toBeLessThan(finalizeJob.steps.findIndex((step) => step.name === 'Create and push tag'));
+        expect(getStep(finalizeJob, 'Create GitHub release')).toBeDefined();
+    });
+    it('tags the exact commit from the successful staging run', () => {
+        const stageJob = getJob('stage');
+        const recordFinalizationStep = getStep(stageJob, 'Record finalization details');
+        expect(recordFinalizationStep.if).toBe(githubExpression("github.event_name == 'workflow_dispatch'"));
+        expect(recordFinalizationStep.run).toBe(`echo "After npm approval, finalize this package with:" >> "$GITHUB_STEP_SUMMARY"
+echo "staging_run_id: $GITHUB_RUN_ID" >> "$GITHUB_STEP_SUMMARY"
+echo "staged commit: $GITHUB_SHA" >> "$GITHUB_STEP_SUMMARY"
+`);
+        const finalizeJob = getJob('finalize-release');
+        const resolveRunStep = getStep(finalizeJob, 'Resolve staged commit');
+        expect(resolveRunStep.id).toBe('staging_run');
+        expect(resolveRunStep.env).toEqual({
+            GH_TOKEN: githubExpression('github.token'),
+            STAGING_RUN_ID: githubExpression('github.event.inputs.staging_run_id'),
+        });
+        expect(resolveRunStep.run).toBe(`set -euo pipefail
+if [[ ! "$STAGING_RUN_ID" =~ ^[0-9]+$ ]]; then
+  echo "staging_run_id must be a GitHub Actions run ID" >&2
+  exit 1
+fi
+RUN_JSON=$(gh api "repos/${githubExpression('github.repository')}/actions/runs/$STAGING_RUN_ID")
+WORKFLOW_PATH=$(jq -r '.path' <<< "$RUN_JSON")
+EVENT=$(jq -r '.event' <<< "$RUN_JSON")
+HEAD_BRANCH=$(jq -r '.head_branch' <<< "$RUN_JSON")
+CONCLUSION=$(jq -r '.conclusion' <<< "$RUN_JSON")
+COMMIT=$(jq -r '.head_sha' <<< "$RUN_JSON")
+if [ "$WORKFLOW_PATH" != ".github/workflows/npm-publish.yml" ] ||
+  [ "$EVENT" != "workflow_dispatch" ] ||
+  [ "$HEAD_BRANCH" != "main" ] ||
+  [ "$CONCLUSION" != "success" ] ||
+  [[ ! "$COMMIT" =~ ^[0-9a-f]{40}$ ]]; then
+  echo "Run $STAGING_RUN_ID is not a successful main-branch staging run" >&2
+  exit 1
+fi
+echo "commit=$COMMIT" >> "$GITHUB_OUTPUT"
+`);
+        expect(getStep(finalizeJob, 'Download staged npm package').with).toEqual({
+            name: 'npm-package',
+            path: 'npm-package',
+            'github-token': githubExpression('github.token'),
+            'run-id': githubExpression('github.event.inputs.staging_run_id'),
+        });
+        expect(getStep(finalizeJob, 'Checkout staged commit').with).toEqual({
+            ref: githubExpression('steps.staging_run.outputs.commit'),
+        });
+        const orderedSteps = [
+            'Resolve staged commit',
+            'Checkout staged commit',
+            'Download staged npm package',
+            'Verify package is published on npm',
+            'Create and push tag',
+        ].map((name) => finalizeJob.steps.findIndex((step) => step.name === name));
+        expect(orderedSteps).toEqual([...orderedSteps].sort((left, right) => left - right));
+        expect(orderedSteps).not.toContain(-1);
+    });
+    it('does not configure a traditional npm token in any job', () => {
+        const environmentKeys = Object.values(workflow.jobs).flatMap((job) => [
+            ...Object.keys(job.env ?? {}),
+            ...job.steps.flatMap((step) => Object.keys(step.env ?? {})),
+        ]);
+        expect(environmentKeys).not.toContain('NODE_AUTH_TOKEN');
+    });
+});
+//# sourceMappingURL=npm-publish-workflow.test.js.map

package/dist/src/backend/testing/npm-publish-workflow.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-publish-workflow.test.js","sourceRoot":"","sources":["../../../../src/backend/testing/npm-publish-workflow.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACjD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5D,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;CACnC,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;CACpC,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC;IAC7C,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;QACX,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC;YAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC;SAC1D,CAAC;KACH,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,aAAa,CAChC,IAAI,GAAG,CAAC,4CAA4C,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CACvE,CAAC;AAEF,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;AAClD,MAAM,cAAc,GAAY,KAAK,CAAC,MAAM,CAAC,CAAC;AAC9C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;AAE7D,SAAS,MAAM,CAAC,IAAY;IAC1B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,EAAE,gBAAgB,IAAI,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7D,OAAO,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,OAAO,CACd,GAAsC,EACtC,IAAY;IAEZ,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACpE,MAAM,CAAC,IAAI,EAAE,iBAAiB,IAAI,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/D,OAAO,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAsC;IACnE,MAAM,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAC7F,MAAM,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnE,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAkB;IAC1C,OAAO,QAAQ,UAAU,KAAK,CAAC;AACjC,CAAC;AAED,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC;YACpE,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,oDAAoD;YACjE,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC;YAClE,OAAO,EAAE,EAAE;YACX,WAAW,EAAE,6CAA6C;YAC1D,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEnC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CACvB,gBAAgB,CACd,kFAAkF,CACnF,CACF,CAAC;QACF,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,aAAa,EAAE,CAAC;QAC9C,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5D,qBAAqB,CAAC,SAAS,CAAC,CAAC;QACjC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAC3F,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;QAClE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CACxB,gBAAgB,CACd,qHAAqH,CACtH,CACF,CAAC;QACF,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAEjC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CACtB,gBAAgB,CACd,4MAA4M,CAC7M,CACF,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QAChF,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAC1F,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CACxD,uEAAuE,CACxE,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;aAC3C,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC;aAC5D,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CACpE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAC5D,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7C,KAAK,MAAM,eAAe,IAAI,gBAAgB,EAAE,CAAC;YAC/C,MAAM,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,oBAAoB,CAAC,CAAC;QACnE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CACxB,gBAAgB,CACd,gPAAgP,CACjP,CACF,CAAC;QACF,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;YAC9B,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,uBAAuB;YAC7B,mBAAmB,EAAE,OAAO;YAC5B,gBAAgB,EAAE,CAAC;SACpB,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,sBAAsB,CAAC,CAAC;QACtE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;YAChC,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,aAAa;SACpB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,WAAW,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAE/C,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;QAC1C,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,IAAI,CACzB,gBAAgB,CACd,wKAAwK,CACzK,CACF,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,aAAa,EAAE,CAAC;QAChD,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAChF,MAAM,mBAAmB,GAAG,OAAO,CAAC,WAAW,EAAE,oCAAoC,CAAC,CAAC;QACvF,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACvD,MAAM,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;;;;;;;;CAQxC,CAAC,CAAC;QACC,OAAO,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;QAC5C,MAAM,CACJ,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,oCAAoC,CAAC,CAC1F,CAAC,YAAY,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC,CAAC;QAC3F,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,sBAAsB,GAAG,OAAO,CAAC,QAAQ,EAAE,6BAA6B,CAAC,CAAC;QAChF,MAAM,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,IAAI,CACpC,gBAAgB,CAAC,0CAA0C,CAAC,CAC7D,CAAC;QACF,MAAM,CACJ,sBAAsB,CAAC,GAAG,CAC3B,CAAC,IAAI,CAAC;;;CAGV,CAAC,CAAC;QAEC,MAAM,WAAW,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC/C,MAAM,cAAc,GAAG,OAAO,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC;QACrE,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC9C,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;YACjC,QAAQ,EAAE,gBAAgB,CAAC,cAAc,CAAC;YAC1C,cAAc,EAAE,gBAAgB,CAAC,oCAAoC,CAAC;SACvE,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;;;;;2BAKT,gBAAgB,CAAC,mBAAmB,CAAC;;;;;;;;;;;;;;;CAe/D,CAAC,CAAC;QAEC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,6BAA6B,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;YACvE,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,aAAa;YACnB,cAAc,EAAE,gBAAgB,CAAC,cAAc,CAAC;YAChD,QAAQ,EAAE,gBAAgB,CAAC,oCAAoC,CAAC;SACjE,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;YAClE,GAAG,EAAE,gBAAgB,CAAC,kCAAkC,CAAC;SAC1D,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG;YACnB,uBAAuB;YACvB,wBAAwB;YACxB,6BAA6B;YAC7B,oCAAoC;YACpC,qBAAqB;SACtB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;QAC3E,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC;QACpF,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;YACpE,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;YAC7B,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;SAC5D,CAAC,CAAC;QAEH,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/backend/trpc/admin.trpc.d.ts

@@ -263,6 +263,11 @@ export declare const adminRouter: import("@trpc/server").TRPCBuiltRouter<{
                     defaultCodexReasoningEffort: string | null;
                     defaultWorkspacePermissions: "STRICT" | "RELAXED" | "YOLO";
                     ratchetPermissions: "STRICT" | "RELAXED" | "YOLO";
+                    voiceModeEnabled: boolean;
+                    voiceTtsModel: string;
+                    voiceTtsSpeed: number;
+                    voiceUtteranceEndMs: number;
+                    voiceBargeInSustainedMs: number;
                 } | null;
             };
         };
@@ -391,6 +396,11 @@ export declare const adminRouter: import("@trpc/server").TRPCBuiltRouter<{
                     defaultCodexReasoningEffort?: string | null | undefined;
                     defaultWorkspacePermissions?: "STRICT" | "RELAXED" | "YOLO" | undefined;
                     ratchetPermissions?: "STRICT" | "RELAXED" | "YOLO" | undefined;
+                    voiceModeEnabled?: boolean | undefined;
+                    voiceTtsModel?: string | undefined;
+                    voiceTtsSpeed?: number | undefined;
+                    voiceUtteranceEndMs?: number | undefined;
+                    voiceBargeInSustainedMs?: number | undefined;
                 } | null;
             };
         };

package/dist/src/backend/trpc/admin.trpc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.trpc.d.ts","sourceRoot":"","sources":["../../../../src/backend/trpc/admin.trpc.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,KAAK,OAAO,EAA2B,MAAM,QAAQ,CAAC;AAM/D,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgXtB,CAAC"}
+{"version":3,"file":"admin.trpc.d.ts","sourceRoot":"","sources":["../../../../src/backend/trpc/admin.trpc.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,KAAK,OAAO,EAA2B,MAAM,QAAQ,CAAC;AAM/D,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgXtB,CAAC"}