hammerkit 1.6.0 → 1.8.0

package/Dockerfile

@@ -1,32 +0,0 @@
-FROM node:24-alpine AS build
-
-ARG TARGETPLATFORM
-
-WORKDIR /app
-
-# install dependencies
-COPY package.json .
-COPY package-lock.json .
-RUN npm ci
-
-# build source code
-COPY tsconfig.json .
-COPY src src
-RUN node_modules/.bin/tsc -b
-RUN export ARCH=$(echo $TARGETPLATFORM | cut -c7-11)
-RUN node_modules/.bin/pkg . --targets "node24-alpine-$ARCH" --compress Brotli
-
-######################################
-# Minimal runtime: hammerkit talks to the daemon via dockerode and to k8s via
-# @kubernetes/client-node — both bundled into the binary — so it needs only a
-# shell, CA certs and libstdc++ (for the embedded node), not the full
-# docker-cli image with buildx/compose. docker-cli is kept for users who exec
-# into the image. Cuts the image roughly in half vs docker:*-cli-alpine.
-FROM alpine:3.21
-
-RUN apk add --no-cache docker-cli ca-certificates libstdc++
-
-WORKDIR /app
-COPY --from=build /app/hammerkit /usr/local/bin/hammerkit
-
-ENTRYPOINT ["hammerkit"]

package/FOLLOWUPS.md

@@ -1,34 +0,0 @@
-# Runtime follow-ups
-
-Tracking what's done on `feature/runtime-followups` and what remains. The integration-test work is tracked separately in [INTEGRATION-TESTS.md](INTEGRATION-TESTS.md).
-
-## Done on this branch
-
-- [x] **Cross-cycle validation** — new `hasMixedCycle` walks deps and needs together; wired into both [validate.ts](src/planner/validate.ts) and [check-for-loop.ts](src/executer/scheduler/check-for-loop.ts). Tests in [validate.spec.ts](src/planner/validate.spec.ts).
-- [x] **Local task pidfile** — [work-runtime-local.ts](src/planner/work-runtime-local.ts) writes `.hammerkit/<id>.pid` for the duration of `execute()`. A live PID (`find-process`) blocks re-entry with an `error` state; a stale PID is silently swept. Tests in [work-runtime-local.spec.ts](src/planner/work-runtime-local.spec.ts).
-- [x] **Docker service crash detection** — [docker-service.ts](src/executer/docker-service.ts) now races `container.wait()` against `abort`. A container that exits before abort is reported as `{ type: 'end', reason: 'crash' }` instead of `terminated`.
-- [x] **Service env hints for local tasks** — [get-service-env-hints.ts](src/executer/get-service-env-hints.ts) emits `HAMMERKIT_<NAME>_HOST` / `_PORT` / `_PORT_<containerPort>` for each running need. Merged into the local task's command env in [local-task.ts](src/executer/local-task.ts). Tests in [get-service-env-hints.spec.ts](src/executer/get-service-env-hints.spec.ts).
-- [x] **K8s deployment healthcheck** — `service.data.healthcheck.cmd` is translated to an `exec` `readinessProbe`/`livenessProbe` in [ensure-kubernetes-deployment-exists.ts](src/kubernetes/ensure-kubernetes-deployment-exists.ts). No more silently-ignored healthchecks on k8s.
-- [x] **Kubernetes port-forward without `kubectl`** — [kubernetes-service.ts](src/executer/kubernetes-service.ts) now uses `@kubernetes/client-node`'s `PortForward` class with a local `net.createServer` listener per port. Selector → pod resolution lives in [resolve-pod-name.ts](src/kubernetes/resolve-pod-name.ts) and supports `service`, `deployment`, and `pod` selectors. A new optional `namespace` field on the `kubernetes-service` schema (defaults to `'default'`) makes per-job namespace isolation possible from a build file.
-
-## Done in 1.6.0 hardening (branch `hardening/1.6.0`)
-
-- [x] **Transitive dependency cache invalidation** — `checkCacheState` now folds each task's own state key together with the recursively-computed state keys of its dependencies ([src/executer/scheduler/enqueue-next.ts](src/executer/scheduler/enqueue-next.ts) `combineStateKeys`/`resolveEffectiveStateKey`). A change to an upstream source now invalidates downstream tasks even when their own sources are unchanged. Because `currentStateKey` reads back the stored key, the round-trip stays consistent (one expected cache miss on first run after upgrade). Tests in [enqueue-next.spec.ts](src/executer/scheduler/enqueue-next.spec.ts).
-- [x] **K8s stale upload/download pod cleanup** — `getPodForPersistence` force-deletes and waits for any leftover pod of the same name before scheduling a fresh one ([src/kubernetes/ensure-persistent-data.ts](src/kubernetes/ensure-persistent-data.ts) `removeStalePod`), so a pod leaked by a crashed run no longer gets patched in place and stuck. `statusCodeOf` is now shared from [apply.ts](src/kubernetes/apply.ts).
-
-## Open
-
-**Release triage (1.6.0):** none of the items below block the 1.6.0 release — they
-are tracked as post-1.6.0 cleanup. They are error-message, code-placement, and
-operational-efficiency improvements (no longer any known correctness gap that
-yields wrong build outputs).
-
-### Smaller TODOs (lower priority)
-
-- [src/planner/utils/append-work-dependencies.ts:39](src/planner/utils/append-work-dependencies.ts) — `// TODO check if thats correct` (skipping `isFile` generates when inheriting).
-- **K8s persistence dedupe + real matcher/stateKey** — [src/kubernetes/ensure-persistent-data.ts](src/kubernetes/ensure-persistent-data.ts) and [src/kubernetes/volumes.ts:89](src/kubernetes/volumes.ts) `:91`. Skipping re-upload when the persisted state already matches needs an in-cluster state marker per volume, and the `matcher: () => true` / `stateKey: ''` placeholders must be replaced with the work item's real source matcher/key. Deferred deliberately: it is a new in-cluster-state feature (not a localized fix) and the k8s persistence path is only exercisable on the self-hosted integration runner, so it was kept out of the release-hardening pass to keep 1.6.0 verifiable. Until then uploads include the full source path (over-upload, still correct).
-- [src/schema/reference-parser.ts:276](src/schema/reference-parser.ts) `:305` — generic "unable to find" errors should include resolution path.
-- [src/executer/event-cache.ts:15](src/executer/event-cache.ts) `:28` — clean/store logic ought to live in the local runtime, not the cache module.
-- [src/executer/state.ts:41](src/executer/state.ts) — emit a warn when removing a listener that isn't registered.
-- [src/planner/work-item-status.ts:33](src/planner/work-item-status.ts) `:50` `:58` — `LogContext` should replace with `WorkItem` reference; two `cleanup` markers.
-- [src/kubernetes/await-running-state.ts:66](src/kubernetes/await-running-state.ts) — `awaitDeployRunningState` has a confusing `(... && obj.status?.readyReplicas) ?? 0 > 0` operator-precedence expression. It happens to behave correctly (resolves only when `readyReplicas` is truthy) but reads as a bug; rewrite as `((obj.status?.readyReplicas ?? 0) > 0)`. Cosmetic — left untouched in 1.6.0 to avoid changing the k8s path that is only exercised on the integration runner.

package/SUMMARY.md

@@ -1,68 +0,0 @@
-# Table of contents
-
-* [About](README.md)
-* [Why hammerkit](docs/why-hammerkit.md)
-* [Installation](docs/installation.md)
-* [Getting started](docs/getting-started.md)
-* [Tutorial](docs/tutorial.md)
-* [Concepts](docs/concepts.md)
-* [Build file](docs/build-file/README.md)
-  * [Environment Variables](docs/build-file/environment-variables.md)
-  * [References](docs/build-file/references.md)
-  * [Includes](docs/build-file/includes.md)
-  * [Caches](docs/build-file/caches.md)
-  * [Reference](docs/build-file/reference.md)
-* [Task](docs/task/README.md)
-  * [Dependencies](docs/task/dependencies.md)
-  * [Needs](docs/task/needs.md)
-  * [Caching](docs/task/caching.md)
-  * [Run task in a container](docs/task/container.md)
-  * [Run task on Kubernetes](docs/task/kubernetes.md)
-  * [Watching](docs/task/watching.md)
-  * [Extending](docs/task/extending.md)
-* [Service](docs/service/README.md)
-  * [Container service](docs/service/container.md)
-  * [Kubernetes service](docs/service/kubernetes.md)
-* [Labels](docs/labels/README.md)
-* [Guides](docs/guides/local-vs-container.md)
-  * [Local vs container tasks](docs/guides/local-vs-container.md)
-  * [Caching strategy in CI](docs/guides/ci-caching.md)
-  * [Services & networking](docs/guides/services-networking.md)
-  * [Monorepo layout](docs/guides/monorepo.md)
-  * [Development workflow](docs/guides/development-workflow.md)
-* [CLI](docs/cli/README.md)
-  * [Init](docs/cli/init.md)
-  * [ls](docs/cli/ls.md)
-  * [Execute](docs/cli/execute.md)
-  * [Up](docs/cli/up.md)
-  * [Down](docs/cli/down.md)
-  * [Store / Restore](docs/cli/store-restore.md)
-  * [Package](docs/cli/package.md)
-  * [Clean](docs/cli/clean.md)
-  * [Validate](docs/cli/validate.md)
-* [Recipes](docs/recipes.md)
-* [FAQ & Troubleshooting](docs/faq.md)
-
-## External Links
-
-* [Docker Hub](https://hub.docker.com/r/no0dles/hammerkit)
-* [Homebrew Repository](https://github.com/no0dles/homebrew-hammerkit)
-
-## Release Blog
-
-* [Release 1.4.0](docs/release-blog/release-1.4.0.md)
-* [Release 1.5.0](docs/release-blog/release-1.5.0.md)
-* [Release 1.6.0](docs/release-blog/release-1.6.0.md)
-
-## Change Log
-
-* [Changelog 1.4.0](docs/change-log/change-log-1.4.0.md)
-* [Changelog 1.5.0](docs/change-log/change-log-1.5.0.md)
-* [Changelog 1.6.0](docs/change-log/change-log-1.6.0.md)
-
-## Contribution
-
-* [Roadmap](docs/contribution/roadmap.md)
-  * [Secret managers (planned)](docs/contribution/secret-managers.md)
-* [Publishing](docs/contribution/publish.md)
-* [Self-hosted runner](docs/contribution/self-hosted-runner.md)

package/VALUES.md

@@ -1,53 +0,0 @@
-# Values
-
-This file is the canonical statement of what hammerkit optimizes for and the conventions that follow from it. Contributors and AI agents should read it before non-trivial work. Day-to-day agent operating rules live in [AGENTS.md](AGENTS.md); durable corrections live in [.agents/FEEDBACK.md](.agents/FEEDBACK.md).
-
-## Product values
-
-### Local-first
-
-Hammerkit must be usable on a developer's laptop, not only in CI. A build tool that only runs on CI is broken.
-
-### Platform-agnostic
-
-No coupling to GitHub Actions, GitLab CI, or any single provider. The same build runs anywhere a container does.
-
-### One config, many tools
-
-A single hammerkit build file replaces N tool-specific configs. Reducing config sprawl is a feature, not a side effect.
-
-### Caching reduces waste, not just time
-
-Smart, distributed caching saves compute — that matters for cost and footprint, not only build speed.
-
-## Engineering values
-
-### Stable foundation
-
-The CLI and build-file schema are contracts. Breaking them is a deliberate, versioned decision — never a refactor side effect.
-
-### Simplicity & composability
-
-Prefer small, composable pieces over clever abstractions. If two features can be one, make them one.
-
-### Pragmatic typing
-
-TS strict is on; `any` is permitted where it pulls its weight. Type purity is a means, not the goal.
-
-### Tests carry their weight
-
-Quality and coverage are non-negotiable. Slow integration tests are accepted because they buy real confidence.
-
-## Decision heuristics
-
-### Fix root causes, not symptoms
-
-A red check is fixed by repairing what's broken — not by removing, muting, or weakening the check.
-
-### Real integrations over mocks
-
-Where feasible, exercise real Docker / real registries / real Kubernetes. Mocks are a last resort, not a default.
-
-### Add nothing speculative
-
-Features, abstractions, and config knobs land when a concrete need exists — not for hypothetical futures.

package/dist/cache/auto-pull.spec.js

@@ -1,123 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const path_1 = require("path");
-const os_1 = require("os");
-const fs_1 = require("fs");
-const environment_mock_1 = require("../executer/environment-mock");
-const enqueue_next_1 = require("../executer/scheduler/enqueue-next");
-const local_cache_backend_1 = require("./backends/local-cache-backend");
-const state_1 = require("../executer/state");
-const cache_metadata_1 = require("../executer/cache-metadata");
-const get_cache_directory_1 = require("../optimizer/get-cache-directory");
-const get_work_cache_stats_1 = require("../optimizer/get-work-cache-stats");
-const work_task_cache_description_1 = require("../optimizer/work-task-cache-description");
-describe('checkCacheState auto-pull', () => {
-    let remoteDir;
-    let machineHome;
-    let originalHome;
-    beforeEach(() => {
-        remoteDir = (0, fs_1.mkdtempSync)((0, path_1.join)((0, os_1.tmpdir)(), 'hammerkit-remote-'));
-        machineHome = (0, fs_1.mkdtempSync)((0, path_1.join)((0, os_1.tmpdir)(), 'hammerkit-home-'));
-        originalHome = process.env.HOME;
-        if (process.platform === 'darwin') {
-            // getHammerkitDirectory uses Library/Application Support on macOS
-            process.env.HOME = machineHome;
-        }
-        else if (process.platform === 'win32') {
-            process.env.APPDATA = machineHome;
-        }
-        else {
-            process.env.HOME = machineHome;
-        }
-    });
-    afterEach(() => {
-        (0, fs_1.rmSync)(remoteDir, { recursive: true, force: true });
-        (0, fs_1.rmSync)(machineHome, { recursive: true, force: true });
-        if (originalHome !== undefined) {
-            process.env.HOME = originalHome;
-        }
-        else {
-            delete process.env.HOME;
-        }
-    });
-    function makeBackend() {
-        return (0, local_cache_backend_1.createLocalCacheBackend)({ type: 'local', path: remoteDir });
-    }
-    function makeWorkItem(cwd, resolved) {
-        const storedStateKey = null;
-        return {
-            id: () => 'demo-task',
-            name: 'demo-task',
-            status: { write: vi.fn() },
-            data: {
-                type: 'local-task',
-                name: 'demo-task',
-                cwd,
-                cmds: [],
-                generates: [],
-                src: [],
-                envs: { variables: {}, replacements: [] },
-                labels: {},
-                shell: '/bin/sh',
-                continuous: false,
-                caching: resolved,
-                description: null,
-                scope: {},
-            },
-            needs: [],
-            deps: [],
-            requiredBy: [],
-            state: new state_1.State({ type: 'pending', stateKey: null }),
-            runtime: {
-                async initialize() { },
-                async remove() { },
-                async execute() { },
-                async stop() { },
-                async archive() { },
-                async restore() {
-                    // simulate a successful artifact restore
-                },
-                async currentStateKey() {
-                    return storedStateKey;
-                },
-            },
-        };
-    }
-    it('reports cached:true on the second machine after the first pushed', async () => {
-        // Machine A: produce cache + push to remote
-        const machineAScratch = (0, fs_1.mkdtempSync)((0, path_1.join)((0, os_1.tmpdir)(), 'hammerkit-machine-a-'));
-        const envA = (0, environment_mock_1.environmentMock)(machineAScratch);
-        const backend = makeBackend();
-        const resolved = { name: 'remote', method: 'checksum', backend, implicit: false };
-        const itemA = makeWorkItem(machineAScratch, resolved);
-        const stats = await (0, get_work_cache_stats_1.getWorkCacheStats)(itemA.data, envA);
-        const stateKey = (0, get_work_cache_stats_1.getStateKey)(stats, 'checksum');
-        await (0, cache_metadata_1.writeCacheMetadata)(envA, itemA.id(), stats, (0, work_task_cache_description_1.getWorkTaskCacheDescription)(itemA.data));
-        const cacheDir = (0, get_cache_directory_1.getCacheDirectory)(itemA.id());
-        await backend.push(itemA.id(), stateKey, cacheDir, envA);
-        (0, fs_1.rmSync)(machineAScratch, { recursive: true, force: true });
-        // Machine B (different HOME = fresh local cache): same task, same sources → same stateKey
-        const machineBScratch = (0, fs_1.mkdtempSync)((0, path_1.join)((0, os_1.tmpdir)(), 'hammerkit-machine-b-'));
-        const envB = (0, environment_mock_1.environmentMock)(machineBScratch);
-        // simulate a *different* machine: reset the HOME again
-        const machineBHome = (0, fs_1.mkdtempSync)((0, path_1.join)((0, os_1.tmpdir)(), 'hammerkit-home-b-'));
-        process.env.HOME = machineBHome;
-        const itemB = makeWorkItem(machineBScratch, resolved);
-        const cacheState = await (0, enqueue_next_1.checkCacheState)(itemB, 'checksum', envB);
-        expect(cacheState.stateKey).toBe(stateKey);
-        expect(cacheState.cached).toBe(true);
-        (0, fs_1.rmSync)(machineBScratch, { recursive: true, force: true });
-        (0, fs_1.rmSync)(machineBHome, { recursive: true, force: true });
-    });
-    it('reports cached:false when remote has nothing', async () => {
-        const scratch = (0, fs_1.mkdtempSync)((0, path_1.join)((0, os_1.tmpdir)(), 'hammerkit-machine-c-'));
-        const env = (0, environment_mock_1.environmentMock)(scratch);
-        const backend = makeBackend();
-        const resolved = { name: 'remote', method: 'checksum', backend, implicit: false };
-        const item = makeWorkItem(scratch, resolved);
-        const cacheState = await (0, enqueue_next_1.checkCacheState)(item, 'checksum', env);
-        expect(cacheState.cached).toBe(false);
-        (0, fs_1.rmSync)(scratch, { recursive: true, force: true });
-    });
-});
-//# sourceMappingURL=auto-pull.spec.js.map

package/dist/cache/backends/local-cache-backend.spec.js

@@ -1,72 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const path_1 = require("path");
-const os_1 = require("os");
-const fs_1 = require("fs");
-const local_cache_backend_1 = require("./local-cache-backend");
-const environment_mock_1 = require("../../executer/environment-mock");
-describe('local cache backend', () => {
-    let root;
-    let scratch;
-    beforeEach(() => {
-        root = (0, fs_1.mkdtempSync)((0, path_1.join)((0, os_1.tmpdir)(), 'hammerkit-local-cache-'));
-        scratch = (0, fs_1.mkdtempSync)((0, path_1.join)((0, os_1.tmpdir)(), 'hammerkit-local-cache-scratch-'));
-    });
-    afterEach(() => {
-        (0, fs_1.rmSync)(root, { recursive: true, force: true });
-        (0, fs_1.rmSync)(scratch, { recursive: true, force: true });
-    });
-    it('reports no hit when nothing pushed yet', async () => {
-        const env = (0, environment_mock_1.environmentMock)(scratch);
-        const backend = (0, local_cache_backend_1.createLocalCacheBackend)({ type: 'local', path: root });
-        expect(await backend.has('taskA', 'key1', env)).toBe(false);
-        expect(await backend.pull('taskA', 'key1', (0, path_1.join)(scratch, 'pull'), env)).toBe(false);
-    });
-    it('round-trips a task through push and pull', async () => {
-        const env = (0, environment_mock_1.environmentMock)(scratch);
-        const backend = (0, local_cache_backend_1.createLocalCacheBackend)({ type: 'local', path: root });
-        const sourceDir = (0, path_1.join)(scratch, 'src');
-        await env.file.createDirectory(sourceDir);
-        await env.file.writeFile((0, path_1.join)(sourceDir, 'stats.json'), '{"files":{}}');
-        await env.file.writeFile((0, path_1.join)(sourceDir, 'description.json'), '{}');
-        await env.file.writeFile((0, path_1.join)(sourceDir, 'dist-generates.tgz'), 'tarball-bytes');
-        await backend.push('taskA', 'key1', sourceDir, env);
-        expect(await backend.has('taskA', 'key1', env)).toBe(true);
-        const into = (0, path_1.join)(scratch, 'pull');
-        const ok = await backend.pull('taskA', 'key1', into, env);
-        expect(ok).toBe(true);
-        expect(await env.file.exists((0, path_1.join)(into, 'stats.json'))).toBe(true);
-        expect(await env.file.exists((0, path_1.join)(into, 'description.json'))).toBe(true);
-        expect(await env.file.exists((0, path_1.join)(into, 'dist-generates.tgz'))).toBe(true);
-        expect(await env.file.read((0, path_1.join)(into, 'dist-generates.tgz'))).toBe('tarball-bytes');
-    });
-    it('isolates entries by stateKey', async () => {
-        const env = (0, environment_mock_1.environmentMock)(scratch);
-        const backend = (0, local_cache_backend_1.createLocalCacheBackend)({ type: 'local', path: root });
-        const sourceDir = (0, path_1.join)(scratch, 'src');
-        await env.file.createDirectory(sourceDir);
-        await env.file.writeFile((0, path_1.join)(sourceDir, 'stats.json'), '{}');
-        await backend.push('taskA', 'key1', sourceDir, env);
-        expect(await backend.has('taskA', 'key2', env)).toBe(false);
-    });
-    it('clear removes every state key of a task without touching others', async () => {
-        const env = (0, environment_mock_1.environmentMock)(scratch);
-        const backend = (0, local_cache_backend_1.createLocalCacheBackend)({ type: 'local', path: root });
-        const sourceDir = (0, path_1.join)(scratch, 'src');
-        await env.file.createDirectory(sourceDir);
-        await env.file.writeFile((0, path_1.join)(sourceDir, 'stats.json'), '{}');
-        await backend.push('taskA', 'key1', sourceDir, env);
-        await backend.push('taskA', 'key2', sourceDir, env);
-        await backend.push('taskB', 'key1', sourceDir, env);
-        await backend.clear('taskA', env);
-        expect(await backend.has('taskA', 'key1', env)).toBe(false);
-        expect(await backend.has('taskA', 'key2', env)).toBe(false);
-        expect(await backend.has('taskB', 'key1', env)).toBe(true);
-    });
-    it('clear is a no-op when the task has nothing cached', async () => {
-        const env = (0, environment_mock_1.environmentMock)(scratch);
-        const backend = (0, local_cache_backend_1.createLocalCacheBackend)({ type: 'local', path: root });
-        await expect(backend.clear('missing', env)).resolves.toBeUndefined();
-    });
-});
-//# sourceMappingURL=local-cache-backend.spec.js.map

package/dist/cache/backends/s3-cache-backend.spec.js

@@ -1,118 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const stream_1 = require("stream");
-// vi.hoisted: vi.mock is hoisted above this file's top-level code, so the factory
-// below can only reference variables that are themselves hoisted.
-const { sendMock } = vi.hoisted(() => ({ sendMock: vi.fn() }));
-vi.mock('@aws-sdk/client-s3', () => {
-    class S3ClientMock {
-        constructor() {
-            this.send = sendMock;
-        }
-    }
-    class GetObjectCommand {
-        constructor(input) {
-            this.input = input;
-        }
-    }
-    class PutObjectCommand {
-        constructor(input) {
-            this.input = input;
-        }
-    }
-    class HeadObjectCommand {
-        constructor(input) {
-            this.input = input;
-        }
-    }
-    class ListObjectsV2Command {
-        constructor(input) {
-            this.input = input;
-        }
-    }
-    return {
-        S3Client: S3ClientMock,
-        GetObjectCommand,
-        PutObjectCommand,
-        HeadObjectCommand,
-        ListObjectsV2Command,
-    };
-});
-const s3_cache_backend_1 = require("./s3-cache-backend");
-const fs_1 = require("fs");
-const os_1 = require("os");
-const path_1 = require("path");
-const environment_mock_1 = require("../../executer/environment-mock");
-describe('s3 cache backend', () => {
-    let scratch;
-    beforeEach(() => {
-        sendMock.mockReset();
-        scratch = (0, fs_1.mkdtempSync)((0, path_1.join)((0, os_1.tmpdir)(), 'hammerkit-s3-spec-'));
-    });
-    afterEach(() => {
-        (0, fs_1.rmSync)(scratch, { recursive: true, force: true });
-    });
-    it('returns false from has() when HeadObject rejects', async () => {
-        sendMock.mockRejectedValueOnce(new Error('not found'));
-        const backend = (0, s3_cache_backend_1.createS3CacheBackend)({ type: 's3', bucket: 'b', region: 'us-east-1' });
-        const env = (0, environment_mock_1.environmentMock)(scratch);
-        expect(await backend.has('task', 'state', env)).toBe(false);
-    });
-    it('returns true when HeadObject resolves', async () => {
-        sendMock.mockResolvedValueOnce({});
-        const backend = (0, s3_cache_backend_1.createS3CacheBackend)({ type: 's3', bucket: 'b', region: 'us-east-1' });
-        const env = (0, environment_mock_1.environmentMock)(scratch);
-        expect(await backend.has('task', 'state', env)).toBe(true);
-    });
-    it('uploads files via PutObject with prefix + task + stateKey path', async () => {
-        sendMock.mockResolvedValue({});
-        const backend = (0, s3_cache_backend_1.createS3CacheBackend)({ type: 's3', bucket: 'b', prefix: 'p/', region: 'us-east-1' });
-        const env = (0, environment_mock_1.environmentMock)(scratch);
-        await env.file.writeFile((0, path_1.join)(scratch, 'stats.json'), '{}');
-        await env.file.writeFile((0, path_1.join)(scratch, 'description.json'), '{}');
-        await env.file.writeFile((0, path_1.join)(scratch, 'a-generates.tgz'), 'bytes');
-        await backend.push('task1', 'key1', scratch, env);
-        const keys = sendMock.mock.calls.map(([cmd]) => cmd.input.Key);
-        expect(keys).toContain('p/task1/key1/a-generates.tgz');
-        expect(keys).toContain('p/task1/key1/description.json');
-        expect(keys).toContain('p/task1/key1/stats.json');
-        // stats.json must be uploaded last so a partial push is invisible to has()/pull()
-        expect(keys[keys.length - 1]).toBe('p/task1/key1/stats.json');
-    });
-    it('downloads files into the local cache dir on pull', async () => {
-        const backend = (0, s3_cache_backend_1.createS3CacheBackend)({ type: 's3', bucket: 'b', region: 'us-east-1' });
-        const env = (0, environment_mock_1.environmentMock)(scratch);
-        // Order: Head, then List, then a Get per object
-        sendMock.mockResolvedValueOnce({}); // head
-        sendMock.mockResolvedValueOnce({
-            Contents: [{ Key: 'task/state/stats.json' }, { Key: 'task/state/dist.tgz' }],
-        });
-        sendMock.mockResolvedValueOnce({ Body: stream_1.Readable.from(['{}']) });
-        sendMock.mockResolvedValueOnce({ Body: stream_1.Readable.from(['tarball']) });
-        const into = (0, path_1.join)(scratch, 'pulled');
-        const ok = await backend.pull('task', 'state', into, env);
-        expect(ok).toBe(true);
-        expect(await env.file.exists((0, path_1.join)(into, 'stats.json'))).toBe(true);
-        expect(await env.file.exists((0, path_1.join)(into, 'dist.tgz'))).toBe(true);
-    });
-    it('does not write objects whose key escapes the restore dir on pull', async () => {
-        const backend = (0, s3_cache_backend_1.createS3CacheBackend)({ type: 's3', bucket: 'b', region: 'us-east-1' });
-        const env = (0, environment_mock_1.environmentMock)(scratch);
-        sendMock.mockResolvedValueOnce({}); // head
-        sendMock.mockResolvedValueOnce({
-            // a poisoned bucket can list a key whose suffix traverses out of the dir
-            Contents: [{ Key: 'task/state/../escape.txt' }, { Key: 'task/state/safe.txt' }],
-        });
-        // only the safe object should be fetched; the traversal entry is skipped before Get
-        sendMock.mockResolvedValueOnce({ Body: stream_1.Readable.from(['ok']) });
-        const into = (0, path_1.join)(scratch, 'pulled');
-        const ok = await backend.pull('task', 'state', into, env);
-        expect(ok).toBe(true);
-        expect(await env.file.exists((0, path_1.join)(into, 'safe.txt'))).toBe(true);
-        // ../escape.txt would resolve to scratch/escape.txt, outside `into`
-        expect(await env.file.exists((0, path_1.join)(scratch, 'escape.txt'))).toBe(false);
-        // the traversal entry must not trigger a GetObject (head + list + 1 get = 3)
-        expect(sendMock).toHaveBeenCalledTimes(3);
-    });
-});
-//# sourceMappingURL=s3-cache-backend.spec.js.map

package/dist/cache/cache-backend-registry.spec.js

@@ -1,22 +0,0 @@
-"use strict";
-// The factory registry registers `local` and `s3` at import time. We can
-// exercise createCacheBackend for both registered types and the unknown-type
-// failure without needing the AWS SDK at runtime (`local` is real; for `s3`
-// we register a fake under a fresh type name).
-Object.defineProperty(exports, "__esModule", { value: true });
-const cache_backend_registry_1 = require("./cache-backend-registry");
-describe('createCacheBackend', () => {
-    it('builds a local backend from a {type:"local"} spec', () => {
-        const backend = (0, cache_backend_registry_1.createCacheBackend)({ type: 'local' });
-        expect(backend.type).toBe('local');
-    });
-    it('throws on an unknown backend type', () => {
-        expect(() => (0, cache_backend_registry_1.createCacheBackend)({ type: 'unknown-backend-xyz' })).toThrow(/unknown cache backend type: unknown-backend-xyz/);
-    });
-    it('dispatches to a registered custom factory', () => {
-        const fakeBackend = { type: 'fake' };
-        (0, cache_backend_registry_1.registerCacheBackend)('fake-backend', () => fakeBackend);
-        expect((0, cache_backend_registry_1.createCacheBackend)({ type: 'fake-backend' })).toBe(fakeBackend);
-    });
-});
-//# sourceMappingURL=cache-backend-registry.spec.js.map

package/dist/cache/resolve-cache.spec.js

@@ -1,52 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const resolve_cache_1 = require("./resolve-cache");
-describe('resolveCache', () => {
-    const catalog = (0, resolve_cache_1.withBuiltinCaches)({
-        s3: { method: 'modify-date', backend: { type: 'local', path: '/tmp/fake' } },
-    });
-    it('uses the default cache when no ref is given', () => {
-        const r = (0, resolve_cache_1.resolveCache)(undefined, catalog, 'taskA');
-        expect(r.name).toBe('default');
-        expect(r.method).toBe('checksum');
-        expect(r.backend.type).toBe('local');
-        expect(r.implicit).toBe(true);
-    });
-    it('treats a string ref as a method override on default', () => {
-        const r = (0, resolve_cache_1.resolveCache)('modify-date', catalog, 'taskA');
-        expect(r.name).toBe('default');
-        expect(r.method).toBe('modify-date');
-        expect(r.backend.type).toBe('local');
-        expect(r.implicit).toBe(false);
-    });
-    it('uses none method when "none" string shorthand is used', () => {
-        const r = (0, resolve_cache_1.resolveCache)('none', catalog, 'taskA');
-        expect(r.method).toBe('none');
-    });
-    it('resolves a named reference and keeps its declared method', () => {
-        const r = (0, resolve_cache_1.resolveCache)({ name: 's3' }, catalog, 'taskA');
-        expect(r.name).toBe('s3');
-        expect(r.method).toBe('modify-date');
-    });
-    it('overrides the named cache method when the task sets one', () => {
-        const r = (0, resolve_cache_1.resolveCache)({ name: 's3', method: 'checksum' }, catalog, 'taskA');
-        expect(r.name).toBe('s3');
-        expect(r.method).toBe('checksum');
-    });
-    it('throws when an unknown name is referenced', () => {
-        expect(() => (0, resolve_cache_1.resolveCache)({ name: 'missing' }, catalog, 'taskA')).toThrow(/cache "missing" referenced by task "taskA"/);
-    });
-    it('seeds default and none even when nothing is declared', () => {
-        const empty = (0, resolve_cache_1.withBuiltinCaches)(undefined);
-        expect(empty.default.backend.type).toBe('local');
-        expect(empty.none.backend.type).toBe('local');
-    });
-    it('lets the user override the built-in default', () => {
-        const cat = (0, resolve_cache_1.withBuiltinCaches)({
-            default: { method: 'modify-date', backend: { type: 'local', path: '/tmp/x' } },
-        });
-        const r = (0, resolve_cache_1.resolveCache)(undefined, cat, 'taskA');
-        expect(r.method).toBe('modify-date');
-    });
-});
-//# sourceMappingURL=resolve-cache.spec.js.map

package/dist/cli.spec.js

@@ -1,23 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const path_1 = require("path");
-const test_case_1 = require("./testing/test-case");
-const program_1 = require("./program");
-// Drives the real parse pipeline (createCli) over an in-memory build file and
-// then exercises Cli lookups against the resulting work tree — a real "not
-// found" situation, no mocking.
-describe('Cli', () => {
-    it('service() throws for an unknown service name', async () => {
-        const testCase = (0, test_case_1.createTestCase)('cli-service', {
-            '.hammerkit.yaml': {
-                services: { api: { image: 'nginx', ports: [] } },
-                tasks: { build: { cmds: ['tsc'], needs: ['api'] } },
-            },
-        });
-        await testCase.setup(async (cwd, environment) => {
-            const cli = await (0, program_1.createCli)((0, path_1.join)(cwd, '.hammerkit.yaml'), environment, { taskName: 'build' });
-            expect(() => cli.service('missing')).toThrow('unable to find service missing');
-        });
-    });
-});
-//# sourceMappingURL=cli.spec.js.map

package/dist/console/get-logger.spec.js

@@ -1,23 +0,0 @@
-"use strict";
-// Verifies getLogger dispatches to the right logger by name and rejects an
-// unknown mode via failNever — the actual loggers are tested elsewhere.
-Object.defineProperty(exports, "__esModule", { value: true });
-vi.mock('../logging/grouped-logger', () => ({ groupedLogger: vi.fn(() => 'grouped-instance') }));
-vi.mock('../logging/live-logger', () => ({ liveLogger: vi.fn(() => 'live-instance') }));
-vi.mock('../logging/interactive-logger', () => ({ interactiveLogger: vi.fn(() => 'interactive-instance') }));
-const get_logger_1 = require("./get-logger");
-describe('getLogger', () => {
-    it('returns the grouped logger for mode "grouped"', () => {
-        expect((0, get_logger_1.getLogger)('grouped', {}, {})).toBe('grouped-instance');
-    });
-    it('returns the live logger for mode "live"', () => {
-        expect((0, get_logger_1.getLogger)('live', {}, {})).toBe('live-instance');
-    });
-    it('returns the interactive logger for mode "interactive"', () => {
-        expect((0, get_logger_1.getLogger)('interactive', {}, {})).toBe('interactive-instance');
-    });
-    it('throws on an unknown mode (failNever)', () => {
-        expect(() => (0, get_logger_1.getLogger)('bogus', {}, {})).toThrow();
-    });
-});
-//# sourceMappingURL=get-logger.spec.js.map