glirastes 0.4.0 → 0.5.0

package/dist/sync/local-deployment-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-deployment-validator.js","sourceRoot":"","sources":["../../src/sync/local-deployment-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACvD,OAAO,EACL,0BAA0B,GAE3B,MAAM,mCAAmC,CAAC;AAqB3C;;;;;;;;;GASG;AACH,MAAM,UAAU,+BAA+B,CAAC,OAG/C;IACC,MAAM,QAAQ,GAAG,WAAW,CAC1B,OAAO,CAAC,QAAQ,EAChB,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAC3B,oBAAoB,CACrB,CAAC;IACF,MAAM,aAAa,GAAG,WAAW,CAC/B,OAAO,CAAC,SAAS,CAAC,gBAAgB,CAAC,KAAK,EACxC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EACrB,eAAe,CAChB,CAAC;IACF,MAAM,QAAQ,GAAG,WAAW,CAC1B,OAAO,CAAC,SAAS,CAAC,cAAc,CAAC,YAAY,EAC7C,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EACzB,qBAAqB,CACtB,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,OAAO,GAA0B,EAAE,CAAC;IAE1C,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,aAAa,EAAE,CAAC;QACnE,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,yCAAyC,MAAM,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEtB,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,YAAY,IAAI,CAAC,YAAY,CAAC,OAAO,IAAI,YAAY,CAAC,SAAS,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,wCAAwC,MAAM,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,wDAAwD;QACxD,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,4CAA4C,MAAM,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAC9D,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,0BAA0B,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACrE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,gCAAgC,EAAE,UAAU,EAAE,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IACD,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CACrC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACrE,CAAC;KACH,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,MAAwB,EACxB,GAAyB,EACzB,KAAa;IAEb,MAAM,OAAO,GAAG,IAAI,GAAG,EAAa,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,aAAa,KAAK,KAAK,EAAE,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/sync/managed-sync.d.ts

@@ -0,0 +1,40 @@
+import { type CapabilityReportResult } from './capability-report.js';
+import { HttpRuntimePublicKeyProvider } from './jwks-provider.js';
+import { RuntimeRevisionVerifier } from './signature-verifier.js';
+import { type RuntimeStateStore } from './state-store.js';
+import { RuntimeSyncManager } from './sync-manager.js';
+import { RuntimeControlPlaneClient, type RuntimePushConnector } from './control-plane-client.js';
+import type { RuntimeDeploymentBundle } from '../contracts/revisions.js';
+import type { MaterializedDeploymentRevisions } from './materialize-deployment.js';
+export declare function createManagedRuntimeSync(options: {
+    baseUrl: string;
+    apiKey: string;
+    appId: string;
+    environmentId: string;
+    runnerKey: string;
+    version: string;
+    stateStore?: RuntimeStateStore;
+    stateFilePath?: string;
+    fetchImpl?: typeof fetch;
+    push?: RuntimePushConnector | false;
+    pollIntervalMs?: number;
+    validateDeployment?: (deployment: RuntimeDeploymentBundle, revisions: MaterializedDeploymentRevisions) => void | Promise<void>;
+    onError?: (error: unknown) => void;
+    /**
+     * The committed setup artifact of the running code, e.g. the generated
+     * module's `setupArtifact`. Its discovery digest goes into every runner
+     * registration, and `reportCapabilities()` uploads it as the capability
+     * report (spec 4.10.6). Content-free; it never enables a tool. With it the
+     * runner also reports `policyRelaxations` (D16): compose the turns from
+     * the same artifact (`createLocalRuntimeSource`, or `createTurnSnapshot`
+     * with `relaxableToolIds(setupArtifact)`).
+     */
+    setupArtifact?: unknown;
+}): {
+    client: RuntimeControlPlaneClient;
+    manager: RuntimeSyncManager;
+    store: RuntimeStateStore;
+    verifier: RuntimeRevisionVerifier;
+    keys: HttpRuntimePublicKeyProvider;
+    reportCapabilities: () => Promise<CapabilityReportResult | undefined>;
+};

package/dist/sync/managed-sync.js

@@ -0,0 +1,94 @@
+import { capabilityReportFrom, uploadCapabilityReport, } from './capability-report.js';
+import { FetchSsePushConnector } from './fetch-sse-push.js';
+import { HttpRuntimePublicKeyProvider } from './jwks-provider.js';
+import { RuntimeRevisionVerifier } from './signature-verifier.js';
+import { FileRuntimeStateStore, MemoryRuntimeStateStore, } from './state-store.js';
+import { RuntimeSyncManager } from './sync-manager.js';
+import { RuntimeControlPlaneClient, } from './control-plane-client.js';
+export function createManagedRuntimeSync(options) {
+    const report = options.setupArtifact === undefined
+        ? undefined
+        : capabilityReportFrom(options.setupArtifact);
+    if (report && report.artifact.appId !== options.appId) {
+        throw new Error('The setup artifact belongs to a different app');
+    }
+    const store = options.stateStore
+        ?? (options.stateFilePath
+            ? new FileRuntimeStateStore(options.stateFilePath)
+            : new MemoryRuntimeStateStore());
+    const keys = new HttpRuntimePublicKeyProvider({
+        baseUrl: options.baseUrl,
+        apiKey: options.apiKey,
+        fetchImpl: options.fetchImpl,
+    });
+    const verifier = new RuntimeRevisionVerifier(keys);
+    let client;
+    const manager = new RuntimeSyncManager({
+        environmentId: options.environmentId,
+        store,
+        verifier,
+        validateDeployment: options.validateDeployment,
+        onPending: async (deployments) => {
+            for (const deployment of deployments) {
+                await client.heartbeat({
+                    health: options.validateDeployment ? 'healthy' : 'degraded',
+                    validatedDeploymentId: deployment.deploymentId,
+                    technicalMetadata: {
+                        validationStage: options.validateDeployment
+                            ? 'signature-schema-bindings'
+                            : 'missing-local-binding-validator',
+                    },
+                });
+            }
+        },
+        onActivated: async (deployments) => {
+            for (const deployment of deployments) {
+                await client.heartbeat({
+                    health: options.validateDeployment ? 'healthy' : 'degraded',
+                    lastAppliedDeploymentId: deployment.deploymentId,
+                    technicalMetadata: {
+                        activationStage: options.validateDeployment
+                            ? 'signature-schema-bindings'
+                            : 'missing-local-binding-validator',
+                    },
+                });
+            }
+        },
+    });
+    client = new RuntimeControlPlaneClient({
+        baseUrl: options.baseUrl,
+        apiKey: options.apiKey,
+        appId: options.appId,
+        environmentId: options.environmentId,
+        runnerKey: options.runnerKey,
+        version: options.version,
+        ...(report ? { discoveryDigest: report.discoveryDigest, setupRunId: report.artifact.runId } : {}),
+        policyRelaxations: report !== undefined,
+        manager,
+        fetchImpl: options.fetchImpl,
+        push: options.push === false
+            ? undefined
+            : options.push ?? new FetchSsePushConnector(options.fetchImpl),
+        pollIntervalMs: options.pollIntervalMs,
+        onError: options.onError,
+    });
+    let reported;
+    /** Uploads the capability report once per process; undefined without one. */
+    const reportCapabilities = async () => {
+        if (!report)
+            return undefined;
+        reported ??= uploadCapabilityReport({
+            baseUrl: options.baseUrl,
+            apiKey: options.apiKey,
+            appId: options.appId,
+            report,
+            ...(options.fetchImpl ? { fetchImpl: options.fetchImpl } : {}),
+        }).catch((error) => {
+            reported = undefined;
+            throw error;
+        });
+        return reported;
+    };
+    return { client, manager, store, verifier, keys, reportCapabilities };
+}
+//# sourceMappingURL=managed-sync.js.map

package/dist/sync/managed-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-sync.js","sourceRoot":"","sources":["../../src/sync/managed-sync.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,sBAAsB,GAEvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EACL,qBAAqB,EACrB,uBAAuB,GAExB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EACL,yBAAyB,GAE1B,MAAM,2BAA2B,CAAC;AAQnC,MAAM,UAAU,wBAAwB,CAAC,OA2BxC;IACC,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,KAAK,SAAS;QAChD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAChD,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU;WAC3B,CAAC,OAAO,CAAC,aAAa;YACvB,CAAC,CAAC,IAAI,qBAAqB,CAAC,OAAO,CAAC,aAAa,CAAC;YAClD,CAAC,CAAC,IAAI,uBAAuB,EAAE,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,4BAA4B,CAAC;QAC5C,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,MAAiC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC;QACrC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,KAAK;QACL,QAAQ;QACR,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;YAC/B,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;gBACrC,MAAM,MAAM,CAAC,SAAS,CAAC;oBACrB,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;oBAC3D,qBAAqB,EAAE,UAAU,CAAC,YAAY;oBAC9C,iBAAiB,EAAE;wBACjB,eAAe,EAAE,OAAO,CAAC,kBAAkB;4BACzC,CAAC,CAAC,2BAA2B;4BAC7B,CAAC,CAAC,iCAAiC;qBACtC;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;YACjC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;gBACrC,MAAM,MAAM,CAAC,SAAS,CAAC;oBACrB,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;oBAC3D,uBAAuB,EAAE,UAAU,CAAC,YAAY;oBAChD,iBAAiB,EAAE;wBACjB,eAAe,EAAE,OAAO,CAAC,kBAAkB;4BACzC,CAAC,CAAC,2BAA2B;4BAC7B,CAAC,CAAC,iCAAiC;qBACtC;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IACH,MAAM,GAAG,IAAI,yBAAyB,CAAC;QACrC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjG,iBAAiB,EAAE,MAAM,KAAK,SAAS;QACvC,OAAO;QACP,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,KAAK;YAC1B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,qBAAqB,CAAC,OAAO,CAAC,SAAS,CAAC;QAChE,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;IACH,IAAI,QAAqD,CAAC;IAC1D,6EAA6E;IAC7E,MAAM,kBAAkB,GAAG,KAAK,IAAiD,EAAE;QACjF,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9B,QAAQ,KAAK,sBAAsB,CAAC;YAClC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM;YACN,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC1B,QAAQ,GAAG,SAAS,CAAC;YACrB,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;AACxE,CAAC"}

package/dist/sync/materialize-deployment.d.ts

@@ -0,0 +1,7 @@
+import { type AgentRevision, type ManifestRevision, type RuntimeDeploymentBundle, type RuntimePolicyRevision } from '../contracts/revisions.js';
+export interface MaterializedDeploymentRevisions {
+    agentRevision: AgentRevision;
+    manifestRevision: ManifestRevision;
+    policyRevision: RuntimePolicyRevision;
+}
+export declare function materializeDeploymentRevisions(deployment: RuntimeDeploymentBundle): MaterializedDeploymentRevisions;

package/dist/sync/materialize-deployment.js

@@ -0,0 +1,63 @@
+import { AgentRevisionSchema, ManifestRevisionSchema, PlannerRevisionPayloadSchema, RuntimePolicyRevisionSchema, } from '../contracts/revisions.js';
+export function materializeDeploymentRevisions(deployment) {
+    const policyRevision = RuntimePolicyRevisionSchema.parse({
+        revisionId: deployment.policyRevision.revisionId,
+        revision: deployment.policyRevision.revision,
+        tenantId: deployment.policyRevision.tenantId,
+        environmentId: deployment.policyRevision.environmentId,
+        ...payloadObject(deployment.policyRevision),
+        publishedAt: deployment.policyRevision.publishedAt,
+        signature: deployment.policyRevision.signature,
+    });
+    return {
+        agentRevision: AgentRevisionSchema.parse({
+            revisionId: deployment.agentRevision.revisionId,
+            revision: deployment.agentRevision.revision,
+            agentId: deployment.agentRevision.subjectId,
+            tenantId: deployment.agentRevision.tenantId,
+            ...agentFields(payloadObject(deployment.agentRevision), policyRevision),
+            publishedAt: deployment.agentRevision.publishedAt,
+            signature: deployment.agentRevision.signature,
+        }),
+        manifestRevision: ManifestRevisionSchema.parse({
+            revisionId: deployment.manifestRevision.revisionId,
+            revision: deployment.manifestRevision.revision,
+            tenantId: deployment.manifestRevision.tenantId,
+            targetAppId: deployment.manifestRevision.targetAppId,
+            environmentId: deployment.manifestRevision.environmentId,
+            ...payloadObject(deployment.manifestRevision),
+            publishedAt: deployment.manifestRevision.publishedAt,
+            signature: deployment.manifestRevision.signature,
+        }),
+        policyRevision,
+    };
+}
+/**
+ * A v1 agent payload already carries every field the runtime contract needs.
+ * A v2 planner payload references a budget profile instead of a concrete
+ * budget, so its normalized form takes the budget the policy revision of the
+ * same deployment pins; any other shape falls through to the strict agent
+ * contract and fails closed there.
+ */
+function agentFields(payload, policyRevision) {
+    if (!('budgetProfileRef' in payload))
+        return payload;
+    const planner = PlannerRevisionPayloadSchema.parse(payload);
+    return {
+        name: planner.plannerId,
+        objective: `Planner ${planner.plannerId} (${planner.budgetProfileRef})`,
+        modelAlias: planner.modelBindingRef,
+        promptBindingRef: planner.promptBindingRef,
+        toolAllowlist: planner.toolAllowlist,
+        budget: policyRevision.budget,
+    };
+}
+function payloadObject(revision) {
+    if (!revision.payload
+        || typeof revision.payload !== 'object'
+        || Array.isArray(revision.payload)) {
+        throw new Error(`${revision.revisionType} revision payload must be an object`);
+    }
+    return revision.payload;
+}
+//# sourceMappingURL=materialize-deployment.js.map

package/dist/sync/materialize-deployment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"materialize-deployment.js","sourceRoot":"","sources":["../../src/sync/materialize-deployment.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,4BAA4B,EAC5B,2BAA2B,GAM5B,MAAM,2BAA2B,CAAC;AAQnC,MAAM,UAAU,8BAA8B,CAC5C,UAAmC;IAEnC,MAAM,cAAc,GAAG,2BAA2B,CAAC,KAAK,CAAC;QACvD,UAAU,EAAE,UAAU,CAAC,cAAc,CAAC,UAAU;QAChD,QAAQ,EAAE,UAAU,CAAC,cAAc,CAAC,QAAQ;QAC5C,QAAQ,EAAE,UAAU,CAAC,cAAc,CAAC,QAAQ;QAC5C,aAAa,EAAE,UAAU,CAAC,cAAc,CAAC,aAAa;QACtD,GAAG,aAAa,CAAC,UAAU,CAAC,cAAc,CAAC;QAC3C,WAAW,EAAE,UAAU,CAAC,cAAc,CAAC,WAAW;QAClD,SAAS,EAAE,UAAU,CAAC,cAAc,CAAC,SAAS;KAC/C,CAAC,CAAC;IACH,OAAO;QACL,aAAa,EAAE,mBAAmB,CAAC,KAAK,CAAC;YACvC,UAAU,EAAE,UAAU,CAAC,aAAa,CAAC,UAAU;YAC/C,QAAQ,EAAE,UAAU,CAAC,aAAa,CAAC,QAAQ;YAC3C,OAAO,EAAE,UAAU,CAAC,aAAa,CAAC,SAAS;YAC3C,QAAQ,EAAE,UAAU,CAAC,aAAa,CAAC,QAAQ;YAC3C,GAAG,WAAW,CAAC,aAAa,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,cAAc,CAAC;YACvE,WAAW,EAAE,UAAU,CAAC,aAAa,CAAC,WAAW;YACjD,SAAS,EAAE,UAAU,CAAC,aAAa,CAAC,SAAS;SAC9C,CAAC;QACF,gBAAgB,EAAE,sBAAsB,CAAC,KAAK,CAAC;YAC7C,UAAU,EAAE,UAAU,CAAC,gBAAgB,CAAC,UAAU;YAClD,QAAQ,EAAE,UAAU,CAAC,gBAAgB,CAAC,QAAQ;YAC9C,QAAQ,EAAE,UAAU,CAAC,gBAAgB,CAAC,QAAQ;YAC9C,WAAW,EAAE,UAAU,CAAC,gBAAgB,CAAC,WAAW;YACpD,aAAa,EAAE,UAAU,CAAC,gBAAgB,CAAC,aAAa;YACxD,GAAG,aAAa,CAAC,UAAU,CAAC,gBAAgB,CAAC;YAC7C,WAAW,EAAE,UAAU,CAAC,gBAAgB,CAAC,WAAW;YACpD,SAAS,EAAE,UAAU,CAAC,gBAAgB,CAAC,SAAS;SACjD,CAAC;QACF,cAAc;KACf,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAClB,OAAgC,EAChC,cAAqC;IAErC,IAAI,CAAC,CAAC,kBAAkB,IAAI,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACrD,MAAM,OAAO,GAAG,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5D,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,SAAS;QACvB,SAAS,EAAE,WAAW,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,gBAAgB,GAAG;QACvE,UAAU,EAAE,OAAO,CAAC,eAAe;QACnC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,MAAM,EAAE,cAAc,CAAC,MAAM;KAC9B,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,QAAiC;IAEjC,IACE,CAAC,QAAQ,CAAC,OAAO;WACd,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ;WACpC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAClC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,GAAG,QAAQ,CAAC,YAAY,qCAAqC,CAC9D,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC,OAAkC,CAAC;AACrD,CAAC"}

package/dist/sync/runtime-connect-client.d.ts

@@ -0,0 +1,23 @@
+import { type PairingStartRequest, type PairingStartResponse, type PairingTokenResult } from '../contracts/index.js';
+export interface RuntimeConnectClientOptions {
+    baseUrl: string;
+    fetchImpl?: typeof fetch;
+    now?: () => number;
+    sleep?: (milliseconds: number, signal?: AbortSignal) => Promise<void>;
+}
+export interface PollForConnectionOptions {
+    deviceCode: string;
+    pollIntervalMs: number;
+    expiresInSeconds: number;
+    signal?: AbortSignal;
+}
+export declare class RuntimeConnectClient {
+    private readonly options;
+    private readonly baseUrl;
+    constructor(options: RuntimeConnectClientOptions);
+    startPairing(input: PairingStartRequest, signal?: AbortSignal): Promise<PairingStartResponse>;
+    pollForConnection(options: PollForConnectionOptions): Promise<PairingTokenResult>;
+    private assertActive;
+    private withDeadline;
+    private request;
+}

package/dist/sync/runtime-connect-client.js

@@ -0,0 +1,182 @@
+import { PairingStartRequestSchema, PairingStartResponseSchema, PairingTokenResultSchema, } from '../contracts/index.js';
+import { FoundationDiagnosticError } from '../diagnostics/index.js';
+function safeControlPlaneBaseUrl(value) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new FoundationDiagnosticError({
+            code: 'E-CONNECT-URL-INVALID',
+            operation: 'connect.client',
+            message: 'The Control Plane URL is invalid.',
+            remediation: 'configure-control-plane-url',
+        });
+    }
+    if (value.length > 2_048) {
+        throw new FoundationDiagnosticError({
+            code: 'E-CONNECT-URL-INVALID',
+            operation: 'connect.client',
+            message: 'The Control Plane URL exceeds the supported length.',
+            remediation: 'configure-control-plane-url',
+        });
+    }
+    if (url.username || url.password) {
+        throw new FoundationDiagnosticError({
+            code: 'E-CONNECT-URL-INVALID',
+            operation: 'connect.client',
+            message: 'The Control Plane URL must not contain credentials.',
+            remediation: 'remove-url-credentials',
+        });
+    }
+    const loopback = new Set(['localhost', '127.0.0.1', '[::1]']);
+    if (url.protocol !== 'https:'
+        && !(url.protocol === 'http:' && loopback.has(url.hostname))) {
+        throw new FoundationDiagnosticError({
+            code: 'E-CONNECT-URL-INVALID',
+            operation: 'connect.client',
+            message: 'The Control Plane URL must use HTTPS or loopback HTTP.',
+            remediation: 'use-secure-control-plane-url',
+        });
+    }
+    return value.replace(/\/$/, '');
+}
+function diagnostic(code, message, remediation) {
+    return new FoundationDiagnosticError({
+        code,
+        operation: 'connect.pairing',
+        message,
+        remediation,
+    });
+}
+async function defaultSleep(milliseconds, signal) {
+    if (signal?.aborted)
+        return;
+    await new Promise((resolve) => {
+        const finish = () => {
+            clearTimeout(timer);
+            signal?.removeEventListener('abort', finish);
+            resolve();
+        };
+        const timer = setTimeout(finish, milliseconds);
+        signal?.addEventListener('abort', finish, { once: true });
+    });
+}
+export class RuntimeConnectClient {
+    options;
+    baseUrl;
+    constructor(options) {
+        this.options = options;
+        this.baseUrl = safeControlPlaneBaseUrl(options.baseUrl);
+    }
+    async startPairing(input, signal) {
+        const body = PairingStartRequestSchema.parse(input);
+        const value = await this.request('', body, signal);
+        const parsed = PairingStartResponseSchema.safeParse(value);
+        if (!parsed.success) {
+            throw diagnostic('E-CONNECT-RESPONSE-INVALID', 'The Control Plane returned an invalid pairing response.', 'retry-browser-pairing');
+        }
+        return parsed.data;
+    }
+    async pollForConnection(options) {
+        const startedAt = (this.options.now ?? Date.now)();
+        const deadline = startedAt + options.expiresInSeconds * 1_000;
+        let interval = options.pollIntervalMs;
+        const sleep = this.options.sleep ?? defaultSleep;
+        while (true) {
+            this.assertActive(options.signal, deadline);
+            await this.withDeadline(deadline, options.signal, (signal) => sleep(interval, signal));
+            this.assertActive(options.signal, deadline);
+            const value = await this.withDeadline(deadline, options.signal, (signal) => this.request('/token', { deviceCode: options.deviceCode }, signal));
+            const parsed = PairingTokenResultSchema.safeParse(value);
+            if (!parsed.success) {
+                throw diagnostic('E-CONNECT-RESPONSE-INVALID', 'The Control Plane returned an invalid pairing status.', 'retry-browser-pairing');
+            }
+            if (parsed.data.status !== 'pending')
+                return parsed.data;
+            interval = parsed.data.pollAfterMs;
+        }
+    }
+    assertActive(signal, deadline) {
+        if (signal?.aborted) {
+            throw diagnostic('E-CONNECT-CANCELLED', 'Platform pairing was cancelled.', 'restart-browser-pairing');
+        }
+        if ((this.options.now ?? Date.now)() >= deadline) {
+            throw diagnostic('E-CONNECT-TIMEOUT', 'Platform pairing timed out.', 'restart-browser-pairing');
+        }
+    }
+    async withDeadline(deadline, externalSignal, operation) {
+        this.assertActive(externalSignal, deadline);
+        const remaining = deadline - (this.options.now ?? Date.now)();
+        const controller = new AbortController();
+        let abortSource;
+        const onExternalAbort = () => {
+            if (controller.signal.aborted)
+                return;
+            abortSource = 'external';
+            controller.abort(externalSignal?.reason);
+        };
+        const onTimeout = () => {
+            if (controller.signal.aborted)
+                return;
+            abortSource = 'timeout';
+            controller.abort();
+        };
+        let rejectAborted = () => undefined;
+        const aborted = new Promise((_resolve, reject) => {
+            rejectAborted = reject;
+        });
+        const onInternalAbort = () => {
+            rejectAborted(new Error('connect operation aborted'));
+        };
+        controller.signal.addEventListener('abort', onInternalAbort, { once: true });
+        externalSignal?.addEventListener('abort', onExternalAbort, { once: true });
+        if (externalSignal?.aborted)
+            onExternalAbort();
+        const timer = setTimeout(onTimeout, remaining);
+        try {
+            return await Promise.race([operation(controller.signal), aborted]);
+        }
+        catch (error) {
+            if (abortSource === 'timeout') {
+                throw diagnostic('E-CONNECT-TIMEOUT', 'Platform pairing timed out.', 'restart-browser-pairing');
+            }
+            if (abortSource === 'external' || externalSignal?.aborted) {
+                throw diagnostic('E-CONNECT-CANCELLED', 'Platform pairing was cancelled.', 'restart-browser-pairing');
+            }
+            throw error;
+        }
+        finally {
+            clearTimeout(timer);
+            externalSignal?.removeEventListener('abort', onExternalAbort);
+            controller.signal.removeEventListener('abort', onInternalAbort);
+        }
+    }
+    async request(suffix, body, signal) {
+        let response;
+        try {
+            response = await (this.options.fetchImpl ?? fetch)(`${this.baseUrl}/v1/runtime-connect/pairings${suffix}`, {
+                method: 'POST',
+                headers: { 'content-type': 'application/json' },
+                body: JSON.stringify(body),
+                signal,
+            });
+        }
+        catch {
+            if (signal?.aborted) {
+                throw diagnostic('E-CONNECT-CANCELLED', 'Platform pairing was cancelled.', 'restart-browser-pairing');
+            }
+            throw diagnostic('E-CONNECT-NETWORK', 'The Control Plane pairing request failed.', 'check-control-plane-connection');
+        }
+        if (!response.ok) {
+            throw diagnostic('E-CONNECT-REQUEST', `The Control Plane pairing request failed (${response.status}).`, 'retry-browser-pairing');
+        }
+        try {
+            return await response.json();
+        }
+        catch {
+            throw diagnostic('E-CONNECT-RESPONSE-INVALID', 'The Control Plane returned invalid pairing data.', 'retry-browser-pairing');
+        }
+    }
+}
+//# sourceMappingURL=runtime-connect-client.js.map

package/dist/sync/runtime-connect-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-connect-client.js","sourceRoot":"","sources":["../../src/sync/runtime-connect-client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,wBAAwB,GAIzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAgBpE,SAAS,uBAAuB,CAAC,KAAa;IAC5C,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,yBAAyB,CAAC;YAClC,IAAI,EAAE,uBAAuB;YAC7B,SAAS,EAAE,gBAAgB;YAC3B,OAAO,EAAE,mCAAmC;YAC5C,WAAW,EAAE,6BAA6B;SAC3C,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,yBAAyB,CAAC;YAClC,IAAI,EAAE,uBAAuB;YAC7B,SAAS,EAAE,gBAAgB;YAC3B,OAAO,EAAE,qDAAqD;YAC9D,WAAW,EAAE,6BAA6B;SAC3C,CAAC,CAAC;IACL,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,yBAAyB,CAAC;YAClC,IAAI,EAAE,uBAAuB;YAC7B,SAAS,EAAE,gBAAgB;YAC3B,OAAO,EAAE,qDAAqD;YAC9D,WAAW,EAAE,wBAAwB;SACtC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9D,IACE,GAAG,CAAC,QAAQ,KAAK,QAAQ;WACtB,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAC5D,CAAC;QACD,MAAM,IAAI,yBAAyB,CAAC;YAClC,IAAI,EAAE,uBAAuB;YAC7B,SAAS,EAAE,gBAAgB;YAC3B,OAAO,EAAE,wDAAwD;YACjE,WAAW,EAAE,8BAA8B;SAC5C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,UAAU,CACjB,IAA2B,EAC3B,OAAe,EACf,WAAmB;IAEnB,OAAO,IAAI,yBAAyB,CAAC;QACnC,IAAI;QACJ,SAAS,EAAE,iBAAiB;QAC5B,OAAO;QACP,WAAW;KACZ,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,YAAoB,EACpB,MAAoB;IAEpB,IAAI,MAAM,EAAE,OAAO;QAAE,OAAO;IAC5B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7C,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC/C,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,oBAAoB;IAGF;IAFZ,OAAO,CAAS;IAEjC,YAA6B,OAAoC;QAApC,YAAO,GAAP,OAAO,CAA6B;QAC/D,IAAI,CAAC,OAAO,GAAG,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,KAA0B,EAC1B,MAAoB;QAEpB,MAAM,IAAI,GAAG,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,UAAU,CACd,4BAA4B,EAC5B,yDAAyD,EACzD,uBAAuB,CACxB,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,OAAiC;QAEjC,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,SAAS,GAAG,OAAO,CAAC,gBAAgB,GAAG,KAAK,CAAC;QAC9D,IAAI,QAAQ,GAAG,OAAO,CAAC,cAAc,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,YAAY,CAAC;QAEjD,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC5C,MAAM,IAAI,CAAC,YAAY,CACrB,QAAQ,EACR,OAAO,CAAC,MAAM,EACd,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CACpC,CAAC;YACF,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAE5C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CACnC,QAAQ,EACR,OAAO,CAAC,MAAM,EACd,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CACtB,QAAQ,EACR,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,EAClC,MAAM,CACP,CACF,CAAC;YACF,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACzD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,UAAU,CACd,4BAA4B,EAC5B,uDAAuD,EACvD,uBAAuB,CACxB,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC;YACzD,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;QACrC,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,MAA+B,EAAE,QAAgB;QACpE,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,MAAM,UAAU,CACd,qBAAqB,EACrB,iCAAiC,EACjC,yBAAyB,CAC1B,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,QAAQ,EAAE,CAAC;YACjD,MAAM,UAAU,CACd,mBAAmB,EACnB,6BAA6B,EAC7B,yBAAyB,CAC1B,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CACxB,QAAgB,EAChB,cAAuC,EACvC,SAA8C;QAE9C,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,QAAQ,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,WAA+C,CAAC;QACpD,MAAM,eAAe,GAAG,GAAG,EAAE;YAC3B,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO;YACtC,WAAW,GAAG,UAAU,CAAC;YACzB,UAAU,CAAC,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC,CAAC;QACF,MAAM,SAAS,GAAG,GAAG,EAAE;YACrB,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO;YACtC,WAAW,GAAG,SAAS,CAAC;YACxB,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC,CAAC;QACF,IAAI,aAAa,GAA2B,GAAG,EAAE,CAAC,SAAS,CAAC;QAC5D,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;YACtD,aAAa,GAAG,MAAM,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,MAAM,eAAe,GAAG,GAAG,EAAE;YAC3B,aAAa,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;QACxD,CAAC,CAAC;QACF,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7E,cAAc,EAAE,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,IAAI,cAAc,EAAE,OAAO;YAAE,eAAe,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAE/C,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,UAAU,CACd,mBAAmB,EACnB,6BAA6B,EAC7B,yBAAyB,CAC1B,CAAC;YACJ,CAAC;YACD,IAAI,WAAW,KAAK,UAAU,IAAI,cAAc,EAAE,OAAO,EAAE,CAAC;gBAC1D,MAAM,UAAU,CACd,qBAAqB,EACrB,iCAAiC,EACjC,yBAAyB,CAC1B,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,cAAc,EAAE,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YAC9D,UAAU,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAqB,EACrB,IAAa,EACb,MAAoB;QAEpB,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,CAChD,GAAG,IAAI,CAAC,OAAO,+BAA+B,MAAM,EAAE,EACtD;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM;aACP,CACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,MAAM,UAAU,CACd,qBAAqB,EACrB,iCAAiC,EACjC,yBAAyB,CAC1B,CAAC;YACJ,CAAC;YACD,MAAM,UAAU,CACd,mBAAmB,EACnB,2CAA2C,EAC3C,gCAAgC,CACjC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,UAAU,CACd,mBAAmB,EACnB,6CAA6C,QAAQ,CAAC,MAAM,IAAI,EAChE,uBAAuB,CACxB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,UAAU,CACd,4BAA4B,EAC5B,kDAAkD,EAClD,uBAAuB,CACxB,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/sync/runtime-setup-client.d.ts

@@ -0,0 +1,62 @@
+import type { ScannedRouteCandidate } from '../codegen/route-scanner.js';
+export interface RouteScanUpload {
+    schemaVersion: 1;
+    generatedAt: string;
+    candidates: ScannedRouteCandidate[];
+    ignored: string[];
+    executions?: LocalExecutionEvidence[];
+}
+interface LocalExecutionEvidenceBase {
+    definitionId: string;
+    stableKey: string;
+    sourceFingerprint: string;
+    inputSchemaDigest: string;
+    outputSchemaDigest: string;
+}
+export type LocalExecutionEvidence = LocalExecutionEvidenceBase & {
+    executionKind: 'endpoint';
+    method: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
+    path: string;
+} | LocalExecutionEvidenceBase & {
+    executionKind: 'ui';
+    actionBindingRef: string;
+};
+export interface LocalExecutionInventory {
+    schemaVersion: 1;
+    executions: LocalExecutionEvidence[];
+}
+export interface RuntimeSetupImportResult {
+    createdDrafts: number;
+    unchanged: number;
+    bindings: Array<{
+        toolId: string;
+        stableKey: string;
+        sourceFingerprint: string;
+    }>;
+    tombstoneCandidates: Array<{
+        toolId: string;
+        stableKey: string;
+    }>;
+    interview: Array<{
+        toolId: string;
+        stableKey: string;
+        reasonCodes: string[];
+        questions: string[];
+    }>;
+}
+export declare function parseLocalExecutionInventory(value: unknown): LocalExecutionInventory;
+export declare class RuntimeSetupClient {
+    private readonly options;
+    constructor(options: {
+        baseUrl: string;
+        apiKey: string;
+        appId: string;
+        environmentId: string;
+        fetchImpl?: typeof fetch;
+    });
+    importRouteScan(scan: RouteScanUpload): Promise<RuntimeSetupImportResult>;
+    private importUrl;
+    private sanitize;
+    private matchesUpload;
+}
+export {};

package/dist/sync/runtime-setup-client.js

@@ -0,0 +1,153 @@
+import { z } from 'zod';
+const fingerprintSchema = z.string().regex(/^sha256:(?:[A-Za-z0-9_-]{43}|[A-Za-z0-9+/]{43}=)$/);
+const executionBaseSchema = z.object({
+    definitionId: z.string().trim().min(1).max(200),
+    stableKey: z.string().trim().min(1).max(2_100),
+    sourceFingerprint: fingerprintSchema,
+    inputSchemaDigest: fingerprintSchema,
+    outputSchemaDigest: fingerprintSchema,
+});
+const localExecutionEvidenceSchema = z.discriminatedUnion('executionKind', [
+    executionBaseSchema.extend({
+        executionKind: z.literal('endpoint'),
+        method: z.enum(['GET', 'POST', 'PUT', 'PATCH', 'DELETE']),
+        path: z.string().startsWith('/').max(2_048),
+    }).strict(),
+    executionBaseSchema.extend({
+        executionKind: z.literal('ui'),
+        actionBindingRef: z.string().trim().min(1).max(200),
+    }).strict(),
+]);
+const localExecutionInventorySchema = z.object({
+    schemaVersion: z.literal(1),
+    executions: z.array(localExecutionEvidenceSchema).max(5_000),
+}).strict();
+const toolIdentitySchema = z.object({
+    toolId: z.string().uuid(),
+    stableKey: z.string().trim().min(1).max(2_100),
+}).strict();
+const importResultSchema = z.object({
+    createdDrafts: z.number().int().nonnegative(),
+    unchanged: z.number().int().nonnegative(),
+    bindings: z.array(toolIdentitySchema.extend({
+        sourceFingerprint: fingerprintSchema,
+    }).strict()).max(5_000),
+    tombstoneCandidates: z.array(toolIdentitySchema).max(5_000),
+    interview: z.array(z.object({
+        toolId: z.string().uuid(),
+        stableKey: z.string().trim().min(1).max(2_100),
+        reasonCodes: z.array(z.string().trim().min(1).max(200)).max(100),
+        questions: z.array(z.string().trim().min(1).max(1_000)).max(100),
+    }).strict()).max(5_000),
+}).strict();
+export function parseLocalExecutionInventory(value) {
+    return localExecutionInventorySchema.parse(value);
+}
+export class RuntimeSetupClient {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async importRouteScan(scan) {
+        const response = await (this.options.fetchImpl ?? fetch)(this.importUrl(), {
+            method: 'POST',
+            headers: {
+                authorization: `Bearer ${this.options.apiKey}`,
+                'content-type': 'application/json',
+            },
+            body: JSON.stringify(this.sanitize(scan)),
+        });
+        if (!response.ok) {
+            throw new Error(`Glirastes setup import failed (${response.status})`);
+        }
+        const parsed = importResultSchema.safeParse(await response.json());
+        if (!parsed.success || !this.matchesUpload(scan, parsed.data?.bindings)) {
+            throw new Error('Invalid Glirastes setup import response');
+        }
+        return parsed.data;
+    }
+    importUrl() {
+        return `${this.options.baseUrl.replace(/\/$/, '')}`
+            + `/v1/apps/${encodeURIComponent(this.options.appId)}`
+            + `/environments/${encodeURIComponent(this.options.environmentId)}`
+            + '/runtime-setup/scans';
+    }
+    sanitize(scan) {
+        return {
+            schemaVersion: 1,
+            generatedAt: scan.generatedAt,
+            candidates: scan.candidates.map((candidate) => ({
+                sourceFile: candidate.sourceFile,
+                sourceFingerprint: candidate.sourceFingerprint,
+                exportName: candidate.exportName,
+                method: candidate.method,
+                path: candidate.path,
+                pathParams: [...candidate.pathParams],
+                queryParams: candidate.queryParams.map((parameter) => ({
+                    name: parameter.name,
+                    repeated: parameter.repeated,
+                })),
+                schemaBindings: candidate.schemaBindings.map((binding) => ({
+                    symbol: binding.symbol,
+                    module: binding.module,
+                })),
+                authEvidence: [...candidate.authEvidence],
+                externalCallEvidence: [...candidate.externalCallEvidence],
+                riskClass: candidate.riskClass,
+                autoApprovalEligible: false,
+                reviewReasons: [...candidate.reviewReasons],
+            })),
+            ignored: [...scan.ignored],
+            ...(scan.executions
+                ? {
+                    executions: scan.executions.map((execution) => (execution.executionKind === 'endpoint'
+                        ? {
+                            definitionId: execution.definitionId,
+                            stableKey: execution.stableKey,
+                            executionKind: execution.executionKind,
+                            sourceFingerprint: execution.sourceFingerprint,
+                            inputSchemaDigest: execution.inputSchemaDigest,
+                            outputSchemaDigest: execution.outputSchemaDigest,
+                            method: execution.method,
+                            path: execution.path,
+                        }
+                        : {
+                            definitionId: execution.definitionId,
+                            stableKey: execution.stableKey,
+                            executionKind: execution.executionKind,
+                            sourceFingerprint: execution.sourceFingerprint,
+                            inputSchemaDigest: execution.inputSchemaDigest,
+                            outputSchemaDigest: execution.outputSchemaDigest,
+                            actionBindingRef: execution.actionBindingRef,
+                        })),
+                }
+                : {}),
+        };
+    }
+    matchesUpload(scan, bindings) {
+        if (!bindings)
+            return false;
+        const expected = new Map(scan.candidates.map((candidate) => [
+            `${candidate.method} ${candidate.path}`,
+            candidate.sourceFingerprint,
+        ]));
+        for (const execution of scan.executions ?? []) {
+            const existing = expected.get(execution.stableKey);
+            if (existing && existing !== execution.sourceFingerprint)
+                return false;
+            expected.set(execution.stableKey, execution.sourceFingerprint);
+        }
+        if (bindings.length !== expected.size)
+            return false;
+        const seen = new Set();
+        for (const binding of bindings) {
+            if (seen.has(binding.stableKey)
+                || expected.get(binding.stableKey) !== binding.sourceFingerprint) {
+                return false;
+            }
+            seen.add(binding.stableKey);
+        }
+        return seen.size === expected.size;
+    }
+}
+//# sourceMappingURL=runtime-setup-client.js.map