lastlight 0.16.0 → 0.16.1

package/dist/config/core-pin.js

@@ -1,85 +0,0 @@
-/**
- * Read the core-version pin an overlay declares.
- *
- * The overlay's `config.yaml` may carry a `deploy.version` — a git tag/ref
- * (e.g. `v0.10.6`) that pins which core version this instance runs. When set,
- * `lastlight server update|setup` checks the core repo out at that ref instead
- * of tracking `main`, and the dashboard drift banner compares the running image
- * to the pinned tag rather than to `main` HEAD.
- *
- * This reader is deliberately standalone (a raw YAML read, not the full
- * default/overlay/env config machinery) because its two callers run in very
- * different contexts against a raw overlay checkout path:
- *   - the host-local `lastlight server` CLI (no harness / runtime config) —
- *     against `<serverHome>/instance`;
- *   - the in-container harness banner (`src/admin/version.ts`) — against the
- *     mounted `LASTLIGHT_OVERLAY_DIR` (`/app/instance`).
- *
- * `LASTLIGHT_CORE_VERSION` (env) overrides the file so CI can pin without
- * editing config.yaml. Unset, or the sentinels `main` / `latest`, mean "track
- * main" and return `null`.
- */
-import { readFileSync } from "node:fs";
-import { join } from "node:path";
-import { parse as parseYaml } from "yaml";
-/** Normalize a raw pin value: trim, treat empty / `main` / `latest` as null. */
-function normalizePin(raw) {
-    if (typeof raw !== "string")
-        return null;
-    const v = raw.trim();
-    if (!v)
-        return null;
-    const lower = v.toLowerCase();
-    if (lower === "main" || lower === "latest")
-        return null;
-    return v;
-}
-/**
- * Pick the *commit* SHA for tag `pin` from `git ls-remote … 'refs/tags/<pin>*'`
- * output. Annotated tags emit two rows — the tag object (`refs/tags/<pin>`) and
- * the peeled commit (`refs/tags/<pin>^{}`); only the glob pattern surfaces the
- * peeled row (an exact `refs/tags/<pin>` hides it). We want the commit, since
- * that's what `git checkout <pin>` lands HEAD on and what an image built at the
- * tag is stamped with. Preference: peeled commit → exact tag ref (lightweight
- * tag / branch) → first row. Null when nothing looks like a SHA.
- */
-export function pickTagCommit(lsRemoteOut, pin) {
-    if (!lsRemoteOut)
-        return null;
-    const rows = lsRemoteOut
-        .split("\n")
-        .map((l) => l.trim())
-        .filter(Boolean)
-        .map((l) => {
-        const [sha, ref] = l.split(/\s+/);
-        return { sha: sha ?? "", ref: ref ?? "" };
-    });
-    const peeled = rows.find((r) => r.ref === `refs/tags/${pin}^{}`);
-    const exact = rows.find((r) => r.ref === `refs/tags/${pin}`);
-    const chosen = (peeled ?? exact ?? rows[0])?.sha ?? "";
-    return /^[0-9a-f]{7,40}$/i.test(chosen) ? chosen : null;
-}
-/**
- * The core-version pin for the overlay at `overlayDir`, or `null` to track main.
- * `LASTLIGHT_CORE_VERSION` wins over the file. Missing / unreadable / malformed
- * config.yaml is treated as unpinned (never throws).
- */
-export function readCorePin(overlayDir) {
-    const fromEnv = normalizePin(process.env.LASTLIGHT_CORE_VERSION);
-    if (fromEnv)
-        return fromEnv;
-    try {
-        const parsed = parseYaml(readFileSync(join(overlayDir, "config.yaml"), "utf8"));
-        if (parsed && typeof parsed === "object") {
-            const deploy = parsed.deploy;
-            if (deploy && typeof deploy === "object") {
-                return normalizePin(deploy.version);
-            }
-        }
-    }
-    catch {
-        /* no overlay / no config.yaml / parse error → track main */
-    }
-    return null;
-}
-//# sourceMappingURL=core-pin.js.map

package/dist/config/core-pin.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"core-pin.js","sourceRoot":"","sources":["../../src/config/core-pin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAE1C,gFAAgF;AAChF,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9B,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACxD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,WAA0B,EAAE,GAAW;IACnE,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,WAAW;SACrB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClC,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IACL,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,aAAa,GAAG,KAAK,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,aAAa,GAAG,EAAE,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC;IACvD,OAAO,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,UAAkB;IAC5C,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACjE,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAChF,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,MAAM,MAAM,GAAI,MAAkC,CAAC,MAAM,CAAC;YAC1D,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACzC,OAAO,YAAY,CAAE,MAAkC,CAAC,OAAO,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/config/overlay-assets.d.ts

@@ -1,20 +0,0 @@
-export type OverlayAssetType = "workflow" | "cron" | "prompt" | "skill" | "agent-context";
-export interface OverlayAsset {
-    type: OverlayAssetType;
-    /** Logical name — workflow/cron/skill name, or the filename for prompts/context. */
-    name: string;
-    /** True when a same-named built-in exists under `coreRoot` (overlay shadows it);
-     *  false when the overlay adds something the built-ins don't have. */
-    shadowsDefault: boolean;
-}
-export interface EnumerateOpts {
-    /** Built-in asset tree (the lastlight checkout root). */
-    coreRoot?: string;
-    /** Overlay asset tree (the instance/ overlay root). */
-    overlayRoot?: string;
-}
-/**
- * List every asset the overlay provides, tagging each as shadowing a built-in or
- * a fresh addition. Returns `[]` when no overlay is configured or present.
- */
-export declare function enumerateOverlayAssets(opts: EnumerateOpts): OverlayAsset[];

package/dist/config/overlay-assets.js

@@ -1,114 +0,0 @@
-/**
- * Enumerate the assets a deployment overlay overrides or adds.
- *
- * The instance overlay (`$LASTLIGHT_OVERLAY_DIR`, prod `instance/`) can replace
- * or add workflows, prompts, skills, and agent-context files by logical name —
- * the layer-aware resolution lives in `src/workflows/loader.ts`. This module is
- * the read-only inverse: given the built-in (`coreRoot`) and overlay
- * (`overlayRoot`) trees, list every asset the overlay provides and whether it
- * **shadows** a same-named built-in or is a fresh **addition**.
- *
- * It's a pure filesystem walk (no loader caches), so the host-local CLI
- * (`lastlight server status`, `lastlight fork`) and the in-harness admin API
- * (`GET /admin/api/overrides`) can share one source of truth.
- */
-import { readFileSync, readdirSync, statSync } from "node:fs";
-import { join } from "node:path";
-import { parse as parseYaml } from "yaml";
-function isDir(path) {
-    try {
-        return statSync(path).isDirectory();
-    }
-    catch {
-        return false;
-    }
-}
-function listFiles(dir, predicate) {
-    if (!isDir(dir))
-        return [];
-    return readdirSync(dir).filter(predicate).sort();
-}
-function listDirs(dir) {
-    if (!isDir(dir))
-        return [];
-    return readdirSync(dir)
-        .filter((n) => isDir(join(dir, n)))
-        .sort();
-}
-const isYaml = (n) => n.endsWith(".yaml") || n.endsWith(".yml");
-const isMarkdown = (n) => n.endsWith(".md");
-/** Read a workflow YAML's `name`/`kind` without throwing on malformed files. */
-function readWorkflowMeta(filePath) {
-    try {
-        const raw = parseYaml(readFileSync(filePath, "utf-8"));
-        if (!raw || typeof raw.name !== "string")
-            return null;
-        return { name: raw.name, kind: typeof raw.kind === "string" ? raw.kind : "" };
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Index built-in assets by logical name so overlay entries can be tagged as
- * shadowing vs adding. Workflows/crons are keyed by their YAML `name`; prompts,
- * skills, and agent-context by filename / directory name.
- */
-function indexBuiltins(coreRoot) {
-    const workflows = new Set();
-    const crons = new Set();
-    const workflowDir = join(coreRoot, "workflows");
-    for (const file of listFiles(workflowDir, isYaml)) {
-        const meta = readWorkflowMeta(join(workflowDir, file));
-        if (!meta)
-            continue;
-        (meta.kind === "cron" ? crons : workflows).add(meta.name);
-    }
-    return {
-        workflows,
-        crons,
-        prompts: new Set(listFiles(join(coreRoot, "workflows", "prompts"), isMarkdown)),
-        skills: new Set(listDirs(join(coreRoot, "skills"))),
-        agentContext: new Set(listFiles(join(coreRoot, "agent-context"), isMarkdown)),
-    };
-}
-/**
- * List every asset the overlay provides, tagging each as shadowing a built-in or
- * a fresh addition. Returns `[]` when no overlay is configured or present.
- */
-export function enumerateOverlayAssets(opts) {
-    const { coreRoot, overlayRoot } = opts;
-    if (!overlayRoot || !isDir(overlayRoot))
-        return [];
-    const builtins = coreRoot && isDir(coreRoot)
-        ? indexBuiltins(coreRoot)
-        : { workflows: new Set(), crons: new Set(), prompts: new Set(), skills: new Set(), agentContext: new Set() };
-    const assets = [];
-    // Workflows + crons — keyed by YAML `name`, split by `kind`.
-    const overlayWorkflowDir = join(overlayRoot, "workflows");
-    for (const file of listFiles(overlayWorkflowDir, isYaml)) {
-        const meta = readWorkflowMeta(join(overlayWorkflowDir, file));
-        if (!meta)
-            continue;
-        const isCron = meta.kind === "cron";
-        assets.push({
-            type: isCron ? "cron" : "workflow",
-            name: meta.name,
-            shadowsDefault: (isCron ? builtins.crons : builtins.workflows).has(meta.name),
-        });
-    }
-    // Prompts — keyed by filename under workflows/prompts/.
-    for (const file of listFiles(join(overlayRoot, "workflows", "prompts"), isMarkdown)) {
-        assets.push({ type: "prompt", name: file, shadowsDefault: builtins.prompts.has(file) });
-    }
-    // Skills — keyed by directory name under skills/.
-    for (const dir of listDirs(join(overlayRoot, "skills"))) {
-        assets.push({ type: "skill", name: dir, shadowsDefault: builtins.skills.has(dir) });
-    }
-    // Agent-context — keyed by filename under agent-context/.
-    for (const file of listFiles(join(overlayRoot, "agent-context"), isMarkdown)) {
-        assets.push({ type: "agent-context", name: file, shadowsDefault: builtins.agentContext.has(file) });
-    }
-    return assets;
-}
-//# sourceMappingURL=overlay-assets.js.map

package/dist/config/overlay-assets.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"overlay-assets.js","sourceRoot":"","sources":["../../src/config/overlay-assets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAc,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAoB1C,SAAS,KAAK,CAAC,IAAY;IACzB,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,GAAW,EAAE,SAAoC;IAClE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3B,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3B,OAAO,WAAW,CAAC,GAAG,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;SAClC,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACjF,MAAM,UAAU,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAE7D,gFAAgF;AAChF,SAAS,gBAAgB,CAAC,QAAgB;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,SAAS,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAmC,CAAC;QACzF,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACtD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,QAAgB;IACrC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAChD,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO;QACL,SAAS;QACT,KAAK;QACL,OAAO,EAAE,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,UAAU,CAAC,CAAC;QAC/E,MAAM,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QACnD,YAAY,EAAE,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,UAAU,CAAC,CAAC;KAC9E,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAmB;IACxD,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IACvC,IAAI,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC;QAC1C,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC;QACzB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,GAAG,EAAU,EAAE,KAAK,EAAE,IAAI,GAAG,EAAU,EAAE,OAAO,EAAE,IAAI,GAAG,EAAU,EAAE,MAAM,EAAE,IAAI,GAAG,EAAU,EAAE,YAAY,EAAE,IAAI,GAAG,EAAU,EAAE,CAAC;IAEvJ,MAAM,MAAM,GAAmB,EAAE,CAAC;IAElC,6DAA6D;IAC7D,MAAM,kBAAkB,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC1D,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,kBAAkB,EAAE,MAAM,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU;YAClC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,cAAc,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;SAC9E,CAAC,CAAC;IACL,CAAC;IAED,wDAAwD;IACxD,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC;QACpF,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,kDAAkD;IAClD,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,0DAA0D;IAC1D,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC;QAC7E,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtG,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/config/overlay-bootstrap.d.ts

@@ -1,44 +0,0 @@
-/** `.gitignore` for the overlay so it can be its own private repo without
- *  leaking secrets. Everything under `secrets/` is ignored except the template. */
-export declare const OVERLAY_GITIGNORE: string;
-/** Placeholder `config.yaml` for a fresh overlay (no managed repos yet). */
-export declare const OVERLAY_CONFIG_PLACEHOLDER: string;
-/** Template `secrets/.env.example` — the only tracked file under `secrets/`.
- *  Mirrors the keys `npx lastlight setup` writes into `secrets/.env`. */
-export declare const OVERLAY_ENV_EXAMPLE: string;
-/** README dropped into a freshly scaffolded overlay. */
-export declare const OVERLAY_README: string;
-export interface GhStatus {
-    /** `gh` is on PATH. */
-    installed: boolean;
-    /** `gh auth status` succeeded — we can create repos. */
-    authed: boolean;
-    /** Authenticated GitHub login, when resolvable. */
-    login?: string;
-}
-/** Probe the GitHub CLI. Never throws — a missing/unauthed `gh` resolves to a
- *  status the callers fall back from (print manual commands instead). */
-export declare function detectGh(): Promise<GhStatus>;
-export interface ScaffoldResult {
-    /** Repo-relative paths of files this call created (existing files untouched). */
-    created: string[];
-}
-/**
- * Write the default overlay files into `instanceDir`, creating only what's
- * missing — never overwriting an existing file. Returns the relative paths
- * created so callers can report them.
- */
-export declare function scaffoldOverlayFiles(instanceDir: string): ScaffoldResult;
-export interface BootstrapOpts {
-    /** Pre-probed gh status (call {@link detectGh} once and pass it in). */
-    gh: GhStatus;
-    /** Non-interactive — skip prompts, just print the manual commands. */
-    yes?: boolean;
-}
-/**
- * Version `instanceDir` as a private git repo and (optionally) create + push a
- * GitHub repo for it. Idempotent: skips `git init` when already a repo, and
- * skips repo creation when an `origin` remote already exists. Falls back to
- * printing the manual commands whenever `gh` is unavailable or the user declines.
- */
-export declare function bootstrapOverlayRepo(instanceDir: string, opts: BootstrapOpts): Promise<void>;

package/dist/config/overlay-bootstrap.js

@@ -1,304 +0,0 @@
-/**
- * Shared bootstrap for the private deployment overlay (`instance/`).
- *
- * The overlay is a separate, private folder (typically its own GitHub repo)
- * holding this deployment's `config.yaml` + `secrets/` + optional asset
- * overrides. It's mounted read-only at `/app/instance` and selected via
- * `LASTLIGHT_OVERLAY_DIR`. On a clean server there's nothing to clone yet — so
- * this module can *create* one from scratch:
- *
- *  - {@link scaffoldOverlayFiles} — write the default files into a fresh overlay
- *    (never overwriting anything that already exists).
- *  - {@link detectGh} — probe the GitHub CLI for install + auth status.
- *  - {@link bootstrapOverlayRepo} — `git init` + initial commit, then offer to
- *    create + push a private GitHub repo (via `gh` when authed, otherwise print
- *    the exact git/GitHub commands to run by hand).
- *
- * Used by both setup entry points: the `lastlight setup` wizard (`src/setup.ts`)
- * and host-local `lastlight server setup` (`src/cli-server.ts`).
- */
-import { execFile, spawn } from "node:child_process";
-import { promisify } from "node:util";
-import fs from "node:fs";
-import path from "node:path";
-import * as p from "@clack/prompts";
-import chalk from "chalk";
-const exec = promisify(execFile);
-const dim = chalk.dim;
-const teal = chalk.hex("#1A7A8A");
-// ── templates ────────────────────────────────────────────────────────────────
-/** `.gitignore` for the overlay so it can be its own private repo without
- *  leaking secrets. Everything under `secrets/` is ignored except the template. */
-export const OVERLAY_GITIGNORE = [
-    "# Host-only secrets — never commit. Everything under secrets/ is ignored",
-    "# except the template.",
-    "secrets/*",
-    "!secrets/.env.example",
-    ".env",
-    "*.pem",
-    "",
-].join("\n");
-/** Placeholder `config.yaml` for a fresh overlay (no managed repos yet). */
-export const OVERLAY_CONFIG_PLACEHOLDER = [
-    "# Last Light — private deployment overlay config",
-    "# Merged over the public config/default.yaml at startup; arrays replace,",
-    "# maps deep-merge, env vars override. Restart the agent to apply:",
-    "#   docker compose restart agent  (or: lastlight server restart agent)",
-    "",
-    "managedRepos:",
-    "  []  # add owner/repo entries — the bot ignores repos not listed here",
-    "",
-    "# Pin which core version this instance runs. `lastlight server update|setup`",
-    "# checks core out at this git tag/ref and rebuilds; unset (or main/latest)",
-    "# tracks main. Bump + commit here to drive deploys from the overlay.",
-    "# deploy:",
-    "#   version: v0.10.6",
-    "",
-].join("\n");
-/** Template `secrets/.env.example` — the only tracked file under `secrets/`.
- *  Mirrors the keys `npx lastlight setup` writes into `secrets/.env`. */
-export const OVERLAY_ENV_EXAMPLE = [
-    "# ── Last Light — environment template ───────────────────────────",
-    "# Copy to secrets/.env and fill in. The whole instance/ folder is mounted",
-    "# read-only at /app/instance; the entrypoint reads secrets from",
-    "# /app/instance/secrets. secrets/.env and *.pem are gitignored.",
-    "",
-    "# ── Overlay (this deployment's private config + assets) ──",
-    "LASTLIGHT_OVERLAY_DIR=/app/instance",
-    "",
-    "# ── GitHub App (required) ────────────────────────────────",
-    "GITHUB_APP_ID=",
-    "# PEM lives at instance/secrets/app.pem; the entrypoint symlinks it to /app/app.pem.",
-    "GITHUB_APP_PRIVATE_KEY_PATH=./app.pem",
-    "GITHUB_APP_INSTALLATION_ID=",
-    "",
-    "# ── Webhook (required) — must match the GitHub App webhook secret ──",
-    "WEBHOOK_SECRET=",
-    "",
-    "# ── Domain (used by Caddy for TLS) ───────────────────────",
-    "DOMAIN=localhost",
-    "",
-    "# ── Model + provider API key ─────────────────────────────",
-    "LASTLIGHT_MODEL=anthropic/claude-sonnet-4-6",
-    "# Set the env var that matches your LASTLIGHT_MODEL's provider.",
-    "# The wizard-able registry (src/providers.ts): anthropic, openai, openrouter,",
-    "# google (GEMINI_API_KEY), mistral, groq, cerebras, xai, huggingface (HF_TOKEN),",
-    "# moonshotai, nvidia, fireworks, together, deepseek, zai, kimi-coding, minimax.",
-    "# ANTHROPIC_API_KEY=",
-    "# OPENAI_API_KEY=",
-    "# OPENROUTER_API_KEY=",
-    "",
-    "# ── Admin dashboard ──────────────────────────────────────",
-    "ADMIN_SECRET=",
-    "# ADMIN_PASSWORD=",
-    "",
-    "# ── Slack (optional) ─────────────────────────────────────",
-    "# SLACK_BOT_TOKEN=",
-    "# SLACK_APP_TOKEN=",
-    "# SLACK_DELIVERY_CHANNEL=",
-    "# SLACK_ALLOWED_USERS=",
-    "",
-].join("\n");
-/** README dropped into a freshly scaffolded overlay. */
-export const OVERLAY_README = [
-    "# lastlight-instance",
-    "",
-    "Private deployment overlay for [Last Light](https://github.com/nearform/lastlight).",
-    "Keeps deployment-specific config and secrets out of the public repo.",
-    "",
-    "Cloned into `instance/` next to the lastlight checkout's `docker-compose.yml`,",
-    "mounted read-only at `/app/instance`, selected via `LASTLIGHT_OVERLAY_DIR=/app/instance`.",
-    "",
-    "## Layout",
-    "",
-    "```",
-    "config.yaml            # overlay config — merged over public config/default.yaml",
-    "agent-context/*.md     # (optional) persona/rules overrides, merged by filename",
-    "workflows/*.yaml       # (optional) add or replace workflows by logical name",
-    "workflows/prompts/*.md # (optional) prompt overrides",
-    "skills/<name>/SKILL.md # (optional) skill overrides",
-    "secrets/               # host-only, gitignored: .env + GitHub App *.pem",
-    "  .env.example         # template (the only tracked file under secrets/)",
-    "```",
-    "",
-    "## First-time secrets",
-    "",
-    "```bash",
-    "cp secrets/.env.example secrets/.env   # then fill in keys, DOMAIN, etc.",
-    "cp /path/to/app.pem secrets/app.pem    # GitHub App private key",
-    "```",
-    "",
-    "Editing the overlay is **restart-only** (no image rebuild):",
-    "`git pull` then `lastlight server restart agent`.",
-    "",
-    "## Pinning the core version",
-    "",
-    "Add a `deploy.version` to `config.yaml` to pin which core release this",
-    "instance runs (a git tag/ref); unset — or `main`/`latest` — tracks `main`:",
-    "",
-    "```yaml",
-    "deploy:",
-    "  version: v0.10.6",
-    "```",
-    "",
-    "`lastlight server update` (and `server setup`) checks core out at that tag and",
-    "rebuilds. Bump + commit here and run `lastlight server update` on the host —",
-    "so this overlay repo is the single source of truth for the deployed version.",
-    "",
-].join("\n");
-/** Probe the GitHub CLI. Never throws — a missing/unauthed `gh` resolves to a
- *  status the callers fall back from (print manual commands instead). */
-export async function detectGh() {
-    try {
-        await exec("gh", ["--version"], { timeout: 10_000 });
-    }
-    catch {
-        return { installed: false, authed: false };
-    }
-    let authed = false;
-    try {
-        await exec("gh", ["auth", "status"], { timeout: 10_000 });
-        authed = true;
-    }
-    catch {
-        return { installed: true, authed: false };
-    }
-    let login;
-    try {
-        const { stdout } = await exec("gh", ["api", "user", "--jq", ".login"], { timeout: 10_000 });
-        login = stdout.trim() || undefined;
-    }
-    catch {
-        /* authed but couldn't read login — leave undefined */
-    }
-    return { installed: true, authed, login };
-}
-/**
- * Write the default overlay files into `instanceDir`, creating only what's
- * missing — never overwriting an existing file. Returns the relative paths
- * created so callers can report them.
- */
-export function scaffoldOverlayFiles(instanceDir) {
-    const created = [];
-    const secretsDir = path.join(instanceDir, "secrets");
-    fs.mkdirSync(secretsDir, { recursive: true });
-    const writeIfMissing = (rel, content) => {
-        const abs = path.join(instanceDir, rel);
-        if (fs.existsSync(abs))
-            return;
-        fs.writeFileSync(abs, content, { encoding: "utf8" });
-        created.push(rel);
-    };
-    writeIfMissing("config.yaml", OVERLAY_CONFIG_PLACEHOLDER);
-    writeIfMissing(".gitignore", OVERLAY_GITIGNORE);
-    writeIfMissing("README.md", OVERLAY_README);
-    writeIfMissing(path.join("secrets", ".env.example"), OVERLAY_ENV_EXAMPLE);
-    return { created };
-}
-/** Run a command with inherited stdio so the user sees native git/gh output. */
-function run(label, cmd, args, cwd) {
-    p.log.step(chalk.bold(label));
-    console.log(dim(`  $ ${cmd} ${args.join(" ")}`));
-    return new Promise((resolve, reject) => {
-        const child = spawn(cmd, args, { stdio: "inherit", cwd });
-        child.on("error", reject);
-        child.on("exit", (code) => code === 0 ? resolve() : reject(new Error(`${label} failed (exit ${code ?? "signal"})`)));
-    });
-}
-async function gitCaptureSoft(args, cwd) {
-    try {
-        const { stdout } = await exec("git", args, { cwd, timeout: 20_000 });
-        return stdout.trim();
-    }
-    catch {
-        return null;
-    }
-}
-function isGitRepo(dir) {
-    return fs.existsSync(path.join(dir, ".git"));
-}
-/** Print the exact commands to version + publish the overlay by hand. */
-function printManualHint(instanceDir, gh, needsInit) {
-    const slug = gh.login ? `${gh.login}/lastlight-instance` : "<owner>/lastlight-instance";
-    const lines = ["To version + publish this overlay yourself:"];
-    if (needsInit) {
-        lines.push(`  git -C ${instanceDir} init -b main`, `  git -C ${instanceDir} add -A`, `  git -C ${instanceDir} commit -m "Initial Last Light overlay"`);
-    }
-    if (gh.installed) {
-        lines.push(`  gh repo create ${slug} --private --source ${instanceDir} --remote origin --push`);
-    }
-    else {
-        lines.push(`  # create a PRIVATE repo on GitHub (e.g. ${slug}), then:`, `  git -C ${instanceDir} remote add origin git@github.com:${slug}.git`, `  git -C ${instanceDir} push -u origin main`);
-    }
-    p.log.info(lines.map((l, i) => (i === 0 ? l : dim(l))).join("\n  "));
-    p.log.info(dim("Secrets (secrets/.env, *.pem) stay gitignored. To match the prod deploy-key style,") +
-        "\n  " +
-        dim("clone via an SSH host alias, e.g. git@github-instance:<owner>/lastlight-instance.git."));
-}
-/**
- * Version `instanceDir` as a private git repo and (optionally) create + push a
- * GitHub repo for it. Idempotent: skips `git init` when already a repo, and
- * skips repo creation when an `origin` remote already exists. Falls back to
- * printing the manual commands whenever `gh` is unavailable or the user declines.
- */
-export async function bootstrapOverlayRepo(instanceDir, opts) {
-    let versioned = isGitRepo(instanceDir);
-    if (!versioned) {
-        if (opts.yes) {
-            printManualHint(instanceDir, opts.gh, true);
-            return;
-        }
-        const want = await p.confirm({
-            message: "Version instance/ as a private git repo now?",
-            initialValue: true,
-        });
-        if (p.isCancel(want) || !want) {
-            printManualHint(instanceDir, opts.gh, true);
-            return;
-        }
-        try {
-            await run("git init", "git", ["init", "-b", "main", instanceDir]);
-            await run("Stage overlay files", "git", ["-C", instanceDir, "add", "-A"]);
-            await run("Initial commit", "git", ["-C", instanceDir, "commit", "-m", "Initial Last Light overlay"]);
-            versioned = true;
-        }
-        catch (err) {
-            p.log.warn(`Couldn't auto-create the git repo: ${err.message}\n` +
-                "  (Is git's user.name / user.email configured?)");
-            printManualHint(instanceDir, opts.gh, !versioned);
-            return;
-        }
-    }
-    // Already (or now) a repo — does it already point somewhere?
-    const remotes = await gitCaptureSoft(["remote"], instanceDir);
-    if (remotes && remotes.split(/\s+/).includes("origin")) {
-        p.log.info("Overlay already has an 'origin' remote — leaving it as-is.");
-        return;
-    }
-    if (opts.gh.authed && !opts.yes) {
-        const want = await p.confirm({
-            message: "Create a private GitHub repo and push the overlay now?",
-            initialValue: true,
-        });
-        if (!p.isCancel(want) && want) {
-            const def = opts.gh.login ? `${opts.gh.login}/lastlight-instance` : "lastlight-instance";
-            const slug = await p.text({ message: "Repository (owner/name)", initialValue: def });
-            if (!p.isCancel(slug) && slug.trim()) {
-                try {
-                    await run("Create + push private repo", "gh", [
-                        "repo", "create", slug.trim(),
-                        "--private", "--source", instanceDir, "--remote", "origin", "--push",
-                    ]);
-                    p.log.success(`Pushed overlay to ${teal(slug.trim())} ${dim("(private)")}.`);
-                    return;
-                }
-                catch (err) {
-                    p.log.warn(`gh repo create failed: ${err.message}`);
-                    // fall through to the manual hint
-                }
-            }
-        }
-    }
-    printManualHint(instanceDir, opts.gh, false);
-}
-//# sourceMappingURL=overlay-bootstrap.js.map

package/dist/config/overlay-bootstrap.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"overlay-bootstrap.js","sourceRoot":"","sources":["../../src/config/overlay-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,CAAC,MAAM,gBAAgB,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AACjC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;AACtB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AAElC,gFAAgF;AAEhF;mFACmF;AACnF,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,0EAA0E;IAC1E,wBAAwB;IACxB,WAAW;IACX,uBAAuB;IACvB,MAAM;IACN,OAAO;IACP,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,4EAA4E;AAC5E,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,kDAAkD;IAClD,0EAA0E;IAC1E,mEAAmE;IACnE,wEAAwE;IACxE,EAAE;IACF,eAAe;IACf,wEAAwE;IACxE,EAAE;IACF,8EAA8E;IAC9E,4EAA4E;IAC5E,sEAAsE;IACtE,WAAW;IACX,sBAAsB;IACtB,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb;yEACyE;AACzE,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,oEAAoE;IACpE,2EAA2E;IAC3E,iEAAiE;IACjE,iEAAiE;IACjE,EAAE;IACF,6DAA6D;IAC7D,qCAAqC;IACrC,EAAE;IACF,6DAA6D;IAC7D,gBAAgB;IAChB,sFAAsF;IACtF,uCAAuC;IACvC,6BAA6B;IAC7B,EAAE;IACF,uEAAuE;IACvE,iBAAiB;IACjB,EAAE;IACF,6DAA6D;IAC7D,kBAAkB;IAClB,EAAE;IACF,6DAA6D;IAC7D,6CAA6C;IAC7C,iEAAiE;IACjE,+EAA+E;IAC/E,kFAAkF;IAClF,iFAAiF;IACjF,sBAAsB;IACtB,mBAAmB;IACnB,uBAAuB;IACvB,EAAE;IACF,6DAA6D;IAC7D,eAAe;IACf,mBAAmB;IACnB,EAAE;IACF,6DAA6D;IAC7D,oBAAoB;IACpB,oBAAoB;IACpB,2BAA2B;IAC3B,wBAAwB;IACxB,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,wDAAwD;AACxD,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,sBAAsB;IACtB,EAAE;IACF,qFAAqF;IACrF,sEAAsE;IACtE,EAAE;IACF,gFAAgF;IAChF,2FAA2F;IAC3F,EAAE;IACF,WAAW;IACX,EAAE;IACF,KAAK;IACL,kFAAkF;IAClF,iFAAiF;IACjF,8EAA8E;IAC9E,sDAAsD;IACtD,qDAAqD;IACrD,yEAAyE;IACzE,0EAA0E;IAC1E,KAAK;IACL,EAAE;IACF,uBAAuB;IACvB,EAAE;IACF,SAAS;IACT,0EAA0E;IAC1E,iEAAiE;IACjE,KAAK;IACL,EAAE;IACF,6DAA6D;IAC7D,mDAAmD;IACnD,EAAE;IACF,6BAA6B;IAC7B,EAAE;IACF,wEAAwE;IACxE,4EAA4E;IAC5E,EAAE;IACF,SAAS;IACT,SAAS;IACT,oBAAoB;IACpB,KAAK;IACL,EAAE;IACF,gFAAgF;IAChF,8EAA8E;IAC9E,8EAA8E;IAC9E,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAab;yEACyE;AACzE,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;IACD,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1D,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,KAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5F,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,sDAAsD;IACxD,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC5C,CAAC;AASD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACrD,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE9C,MAAM,cAAc,GAAG,CAAC,GAAW,EAAE,OAAe,EAAQ,EAAE;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACxC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO;QAC/B,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACrD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC,CAAC;IAEF,cAAc,CAAC,aAAa,EAAE,0BAA0B,CAAC,CAAC;IAC1D,cAAc,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;IAChD,cAAc,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC5C,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAE1E,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC;AAWD,gFAAgF;AAChF,SAAS,GAAG,CAAC,KAAa,EAAE,GAAW,EAAE,IAAc,EAAE,GAAY;IACnE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACjD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACxB,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,iBAAiB,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC,CACzF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAc,EAAE,GAAY;IACxD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACrE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,yEAAyE;AACzE,SAAS,eAAe,CAAC,WAAmB,EAAE,EAAY,EAAE,SAAkB;IAC5E,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,qBAAqB,CAAC,CAAC,CAAC,4BAA4B,CAAC;IACxF,MAAM,KAAK,GAAa,CAAC,6CAA6C,CAAC,CAAC;IACxE,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CACR,YAAY,WAAW,eAAe,EACtC,YAAY,WAAW,SAAS,EAChC,YAAY,WAAW,yCAAyC,CACjE,CAAC;IACJ,CAAC;IACD,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,oBAAoB,IAAI,uBAAuB,WAAW,yBAAyB,CAAC,CAAC;IAClG,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CACR,6CAA6C,IAAI,UAAU,EAC3D,YAAY,WAAW,qCAAqC,IAAI,MAAM,EACtE,YAAY,WAAW,sBAAsB,CAC9C,CAAC;IACJ,CAAC;IACD,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC,GAAG,CAAC,IAAI,CACR,GAAG,CAAC,oFAAoF,CAAC;QACvF,MAAM;QACN,GAAG,CAAC,uFAAuF,CAAC,CAC/F,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,WAAmB,EAAE,IAAmB;IACjF,IAAI,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IAEvC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC;YAC3B,OAAO,EAAE,8CAA8C;YACvD,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9B,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;YAClE,MAAM,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;YAC1E,MAAM,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,4BAA4B,CAAC,CAAC,CAAC;YACtG,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,CAAC,CAAC,GAAG,CAAC,IAAI,CACR,sCAAuC,GAAa,CAAC,OAAO,IAAI;gBAC9D,iDAAiD,CACpD,CAAC;YACF,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAC;IAC9D,IAAI,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;QACzE,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC;YAC3B,OAAO,EAAE,wDAAwD;YACjE,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,qBAAqB,CAAC,CAAC,CAAC,oBAAoB,CAAC;YACzF,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;YACrF,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBACrC,IAAI,CAAC;oBACH,MAAM,GAAG,CAAC,4BAA4B,EAAE,IAAI,EAAE;wBAC5C,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE;wBAC7B,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ;qBACrE,CAAC,CAAC;oBACH,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,qBAAqB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;oBAC7E,OAAO;gBACT,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,0BAA2B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;oBAC/D,kCAAkC;gBACpC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;AAC/C,CAAC"}

package/dist/connectors/github-webhook.d.ts

@@ -1,45 +0,0 @@
-import { EventEmitter } from "events";
-import { Hono } from "hono";
-import type { Connector } from "./types.js";
-export interface GitHubWebhookConfig {
-    /**
-     * Port the harness HTTP server listens on. Retained for compatibility with
-     * existing callers/tests; the connector no longer opens the listener itself
-     * — `main()` owns the shared Hono app + `serve()` lifecycle now.
-     */
-    port: number;
-    webhookSecret: string;
-    /** Bot login name to ignore self-events */
-    botLogin: string;
-    /**
-     * Shared Hono app to register `/webhooks/github` onto. When omitted, the
-     * connector creates its own app (used by unit tests that drive it via
-     * `honoApp.request(...)` standalone).
-     */
-    app?: Hono;
-    /** GitHub App MCP client for posting replies */
-    replyFn?: (owner: string, repo: string, issueNumber: number, body: string) => Promise<void>;
-}
-export declare class GitHubWebhookConnector extends EventEmitter implements Connector {
-    readonly name = "github";
-    private app;
-    private config;
-    constructor(config: GitHubWebhookConfig);
-    /**
-     * Expose the Hono app so the main server can mount additional routes
-     * (e.g., /api/run for the CLI trigger).
-     */
-    get honoApp(): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
-    private setupRoutes;
-    /**
-     * Apply an `installation` / `installation_repositories` event to the in-memory
-     * managed-repo list (src/managed-repos.ts). We apply the payload diff directly
-     * — the events carry the affected repos' `full_name`, so no API round-trip is
-     * needed. The list is seeded at boot; these keep it current between restarts.
-     */
-    private handleInstallationEvent;
-    private verifySignature;
-    private normalize;
-    start(): Promise<void>;
-    stop(): Promise<void>;
-}