orizu 0.5.19 → 0.5.21

package/dist/help.d.ts

@@ -0,0 +1,46 @@
+export interface CliOptionDoc {
+    name: string;
+    help: string;
+    required?: boolean;
+    repeatable?: boolean;
+    choices?: string[];
+}
+export interface CliCommandDoc {
+    path: string[];
+    usage: string;
+    summary: string;
+    group: string;
+    aliases?: string[][];
+    options?: CliOptionDoc[];
+    examples?: string[];
+}
+export declare const COMMAND_DOCS: CliCommandDoc[];
+export declare function findCommandDoc(args: string[]): CliCommandDoc | undefined;
+export declare function commandDocsWithPrefix(args: string[]): CliCommandDoc[];
+export declare function renderRootHelp(): string;
+export declare function renderGroupHelp(args: string[]): string;
+export declare function renderCommandHelp(doc: CliCommandDoc): string;
+export declare function renderHelpForArgs(args: string[]): string;
+export declare function getCapabilities(version: string): {
+    name: string;
+    version: string;
+    globalOptions: {
+        name: string;
+        help: string;
+    }[];
+    commands: {
+        name: string;
+        usage: string;
+        help: string;
+        group: string;
+        aliases: string[];
+        params: {
+            name: string;
+            help: string;
+            required: boolean;
+            repeatable: boolean;
+            choices: string[] | undefined;
+        }[];
+    }[];
+};
+//# sourceMappingURL=help.d.ts.map

package/dist/help.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"help.d.ts","sourceRoot":"","sources":["../src/help.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,CAAA;IACpB,OAAO,CAAC,EAAE,YAAY,EAAE,CAAA;IACxB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB;AAoCD,eAAO,MAAM,YAAY,EAAE,aAAa,EAumCvC,CAAA;AAUD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,aAAa,GAAG,SAAS,CAMxE;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,aAAa,EAAE,CAWrE;AAOD,wBAAgB,cAAc,IAAI,MAAM,CA0CvC;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAoBtD;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CA4B5D;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAgBxD;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;EAoB9C"}

package/dist/help.js

@@ -11,6 +11,7 @@ const GROUPS = [
     { name: 'Teams', summary: 'Manage teams and team memberships.' },
     { name: 'Projects', summary: 'Manage projects inside teams.' },
     { name: 'Prompts and judges', summary: 'Work with versioned prompt and judge artifacts.' },
+    { name: 'Instruction sets', summary: 'Inspect the project-scoped instruction-set control plane.' },
     { name: 'Report comments', summary: 'Review and mutate anchored report comments across prompt, optimization, and task reports.' },
     { name: 'Diff comments', summary: 'Export inline comments with recoverable prompt-diff context.' },
     { name: 'Scorers and runners', summary: 'Register scorers, push runnable artifacts, execute runners, and submit scores.' },
@@ -25,6 +26,44 @@ const GROUPS = [
     { name: 'Promotion manifests', summary: 'List, inspect, approve, reject, and idempotently apply promotion manifests.' },
 ];
 export const COMMAND_DOCS = [
+    { path: ['instructions', 'create'], aliases: [['instruction-sets', 'create']], usage: 'orizu instructions create <manifest> --project <team/project> [--runner-version <id>] [--model-config <identity>] [--json]', summary: 'Create an instruction set from a local manifest.', group: 'Instruction sets', options: [{ name: '--runner-version <id>', help: 'Pin the runner version for component prompt versions.' }, { name: '--model-config <identity>', help: 'Select the default model configuration.' }, { name: '--json', help: 'Print one JSON document.' }], examples: ['orizu instructions create ./orizu.instruction-set.json --project core/evals --model-config anthropic/claude-haiku'] },
+    { path: ['instructions', 'push'], aliases: [['instruction-sets', 'push']], usage: 'orizu instructions push <manifest> --project <team/project> [--set <slug-or-exact-name>] [--runner-version <id>] [--json]', summary: 'Push a new instruction-set profile version.', group: 'Instruction sets', options: [{ name: '--set <slug-or-exact-name>', help: 'Target the stable set handle when it differs from the manifest name.' }, { name: '--runner-version <id>', help: 'Pin the runner version for changed component prompt versions.' }, { name: '--json', help: 'Print one JSON document.' }], examples: ['orizu instructions push ./orizu.instruction-set.json --project core/evals --set planner'] },
+    {
+        path: ['instructions', 'list'],
+        aliases: [['instruction-sets', 'list']],
+        usage: 'orizu instructions list [--project <team/project>] [--status active|archived|all] [--json]',
+        summary: 'List instruction sets in a project.',
+        group: 'Instruction sets',
+        options: [{ name: '--project <team/project>', help: 'Project slug (defaults to configured context).' }, { name: '--status <active|archived|all>', help: 'Filter archived instruction sets.' }, { name: '--json', help: 'Print JSON.' }],
+        examples: ['orizu instructions list --project core/evals', 'orizu instructions list --status archived --json'],
+    },
+    {
+        path: ['instructions', 'show'],
+        aliases: [['instruction-sets', 'show']],
+        usage: 'orizu instructions show <set> [--project <team/project>] [--status active|archived|all] [--json]',
+        summary: 'Show an instruction set shape, default, and profile production state.',
+        group: 'Instruction sets',
+        options: [{ name: '--project <team/project>', help: 'Project slug (defaults to configured context).' }, { name: '--status <active|archived|all>', help: 'Filter archived instruction sets.' }, { name: '--json', help: 'Print JSON.' }],
+        examples: ['orizu instructions show research --project core/evals', 'orizu instructions show research --json'],
+    },
+    { path: ['instructions', 'profiles', 'new'], aliases: [['instruction-sets', 'profiles', 'new']], usage: 'orizu instructions profiles new <set> --project <team/project> --model-config <identity> [--json]', summary: 'Create a model-config profile seeded from the instruction-set default.', group: 'Instruction sets', options: [{ name: '--model-config <identity>', help: 'Model config identity for the new profile.', required: true }, { name: '--json', help: 'Print JSON.' }], examples: ['orizu instructions profiles new planner --project core/evals --model-config anthropic/claude-haiku'] },
+    { path: ['instructions', 'profiles', 'promote'], aliases: [['instruction-sets', 'profiles', 'promote']], usage: 'orizu instructions profiles promote <set> --project <team/project> --model-config <identity> --version <n> [--json]', summary: 'Move one profile version to production.', group: 'Instruction sets', options: [{ name: '--model-config <identity>', help: 'Profile model config.', required: true }, { name: '--version <n>', help: 'Profile version to promote.', required: true }, { name: '--json', help: 'Print JSON.' }], examples: ['orizu instructions profiles promote planner --project core/evals --model-config anthropic/claude-haiku --version 2'] },
+    { path: ['instructions', 'profiles', 'rollback'], aliases: [['instruction-sets', 'profiles', 'rollback']], usage: 'orizu instructions profiles rollback <set> --project <team/project> --model-config <identity> --to <n> [--json]', summary: 'Create a rollback version and move profile production to it.', group: 'Instruction sets', options: [{ name: '--model-config <identity>', help: 'Profile model config.', required: true }, { name: '--to <n>', help: 'Historical profile version to copy.', required: true }, { name: '--json', help: 'Print JSON.' }], examples: ['orizu instructions profiles rollback planner --project core/evals --model-config anthropic/claude-haiku --to 1'] },
+    { path: ['instructions', 'default', 'show'], aliases: [['instruction-sets', 'default', 'show']], usage: 'orizu instructions default show <set> --project <team/project> [--json]', summary: 'Show the instruction-set default and its resolution impact.', group: 'Instruction sets', options: [{ name: '--project <team/project>', help: 'Project slug.', required: true }, { name: '--json', help: 'Print JSON.' }], examples: ['orizu instructions default show planner --project core/evals'] },
+    { path: ['instructions', 'default', 'move'], aliases: [['instruction-sets', 'default', 'move']], usage: 'orizu instructions default move <set> --project <team/project> --model-config <identity> --version <n> [--json]', summary: 'Move the instruction-set default to a profile version.', group: 'Instruction sets', options: [{ name: '--project <team/project>', help: 'Project slug.', required: true }, { name: '--model-config <identity>', help: 'Target model config.', required: true }, { name: '--version <n>', help: 'Target profile version.', required: true }, { name: '--json', help: 'Print JSON.' }], examples: ['orizu instructions default move planner --project core/evals --model-config anthropic/claude-haiku --version 2'] },
+    { path: ['instructions', 'shape', 'add'], aliases: [['instruction-sets', 'shape', 'add']], usage: 'orizu instructions shape add <set> --project <team/project> --key <key> --from <manifest> [--json]', summary: 'Add one component key to every instruction-set profile.', group: 'Instruction sets', options: [{ name: '--project <team/project>', help: 'Project slug.', required: true }, { name: '--key <key>', help: 'Component key to add.', required: true }, { name: '--from <manifest>', help: 'Manifest containing the component body.', required: true }, { name: '--json', help: 'Print JSON.' }], examples: ['orizu instructions shape add planner --project core/evals --key skill --from planner.json'] },
+    { path: ['instructions', 'shape', 'remove'], aliases: [['instruction-sets', 'shape', 'remove']], usage: 'orizu instructions shape remove <set> --project <team/project> --key <key> [--json]', summary: 'Remove one component key from every instruction-set profile.', group: 'Instruction sets', options: [{ name: '--project <team/project>', help: 'Project slug.', required: true }, { name: '--key <key>', help: 'Component key to remove.', required: true }, { name: '--json', help: 'Print JSON.' }], examples: ['orizu instructions shape remove planner --project core/evals --key skill'] },
+    {
+        path: ['instructions', 'sync'],
+        aliases: [['instruction-sets', 'sync']],
+        usage: 'orizu instructions sync <set> --out <dir> [--model-config <identity>] [--project <team/project>] [--json]',
+        summary: 'Write an instruction set for offline runner loading.',
+        group: 'Instruction sets',
+        options: [{ name: '--out <dir>', help: 'Destination parent directory.', required: true }, { name: '--model-config <identity>', help: 'Sync only one profile plus default.' }, { name: '--project <team/project>', help: 'Project slug.' }, { name: '--json', help: 'Print source transport JSON.' }],
+        examples: ['orizu instructions sync planner --out ./instructions --project core/evals'],
+    },
+    { path: ['instructions', 'archive'], aliases: [['instruction-sets', 'archive']], usage: 'orizu instructions archive <slug-or-exact-name> --project <team/project> [--json]', summary: 'Archive an instruction set without changing resolution or sync.', group: 'Instruction sets', options: [{ name: '--project <team/project>', help: 'Project slug.', required: true }, { name: '--json', help: 'Print JSON.' }], examples: ['orizu instructions archive planner --project core/evals'] },
+    { path: ['instructions', 'restore'], aliases: [['instruction-sets', 'restore']], usage: 'orizu instructions restore <slug-or-exact-name> --project <team/project> [--json]', summary: 'Restore an archived instruction set.', group: 'Instruction sets', options: [{ name: '--project <team/project>', help: 'Project slug.', required: true }, { name: '--json', help: 'Print JSON.' }], examples: ['orizu instructions restore planner --project core/evals'] },
     {
         path: ['login'],
         usage: 'orizu login [--no-prompt-if-logged-in]',
@@ -317,39 +356,21 @@ export const COMMAND_DOCS = [
         summary: 'List prompt artifacts in a project.',
         group: 'Prompts and judges',
     },
-    {
-        path: ['prompts', 'archive'],
-        usage: 'orizu prompts archive <prompt-id-or-name> --project <team/project> [--json]',
-        summary: 'Mark a prompt artifact as archived.',
-        group: 'Prompts and judges',
-    },
-    {
-        path: ['prompts', 'restore'],
-        usage: 'orizu prompts restore <prompt-id-or-name> --project <team/project> [--json]',
-        summary: 'Restore an archived prompt artifact to active status.',
-        group: 'Prompts and judges',
-    },
     {
         path: ['prompts', 'pull'],
         usage: 'orizu prompts pull <prompt-id-or-name> --project <team/project> --out <dir> [--label <label> | --version <id>] [--json]',
         summary: 'Pull a prompt artifact version to a local directory.',
         group: 'Prompts and judges',
     },
-    {
-        path: ['prompts', 'push'],
-        usage: 'orizu prompts push <dir> [--runner-version <id>] [--project <team/project>] [--parent <version-id>] [--session <session-id>] [--report-file <path>] [--json]',
-        summary: 'Push a local prompt artifact directory as a new version (with --session: a commit-first git draft).',
-        group: 'Prompts and judges',
-    },
     {
         path: ['prompts', 'report', 'set'],
-        usage: 'orizu prompts report set --prompt <id-or-name> --project <team/project> (--version <n> | --version-id <id>) (--report <markdown|@file> | --report-file <path>) [--json]',
+        usage: 'orizu prompts report set --prompt <id-or-name> [--project <team/project>] (--version <n> | --version-id <id>) (--report <markdown|@file> | --report-file <path>) [--json]',
         summary: 'Upload or replace the Markdown report for one explicit prompt version.',
         group: 'Prompts and judges',
         aliases: [['prompts', 'report', 'upload']],
         options: [
             { name: '--prompt <id-or-name>', help: 'Prompt ID or name.', required: true },
-            { name: '--project <team/project>', help: 'Project slug containing the prompt.', required: true },
+            { name: '--project <team/project>', help: 'Project slug containing the prompt.' },
             { name: '--version <n>', help: 'Positive prompt version number.' },
             { name: '--version-id <id>', help: 'Explicit prompt version ID.' },
             { name: '--report <markdown|@file>', help: 'Inline Markdown or an @file reference.' },
@@ -364,7 +385,7 @@ export const COMMAND_DOCS = [
     {
         path: ['prompts', 'labels', 'set'],
         usage: 'orizu prompts labels set <prompt-name> <label> --version <version-id> [--project <team/project>] [--json]',
-        summary: 'Move or set a prompt label to a version.',
+        summary: 'Move or set a non-production prompt label; use instructions profiles promote for production.',
         group: 'Prompts and judges',
     },
     {
@@ -439,6 +460,12 @@ export const COMMAND_DOCS = [
         summary: 'Execute a scorer locally for a prompt version or optimization candidate.',
         group: 'Scorers and runners',
     },
+    {
+        path: ['scorers', 'verify-parity'],
+        usage: 'orizu scorers verify-parity --scorer-version <id> --dataset-version <id> --split-set <id> [--split <name>] --outputs <outputs.jsonl> --original <module:function> [--scorer-input-contract gepa|flat_row] [--scorer-candidate-field <row-field>] [--runner-dir <dir>] [--python <cmd>] [--tolerance <float>] [--limit <n>] [--json]',
+        summary: 'Prove a migrated scorer runner scores rows the same as the original Python metric.',
+        group: 'Scorers and runners',
+    },
     {
         path: ['scores', 'submit'],
         usage: 'orizu scores submit <results.jsonl|results.json> --scorer-version <id> (--subject-version <prompt-version-id> | --optimization-run <id> --candidate <id>) [--aggregate] [--dataset-version <id> --split-set <id> --split <name>] [--project <team/project>] [--json]',
@@ -511,6 +538,7 @@ export const COMMAND_DOCS = [
         summary: 'List optimization runs with explicit archive visibility.',
         group: 'Optimizations',
     },
+    { path: ['optimizations', 'promote'], usage: 'orizu optimizations promote <run-id> --candidate <id> [--label production] [--project <team/project>] [--json]', summary: 'Promote a selected optimization candidate.', group: 'Optimizations', options: [{ name: '--candidate <id>', help: 'Candidate to promote.', required: true }, { name: '--label production', help: 'Move the new tuple profile version to production.' }, { name: '--project <team/project>', help: 'Project slug (defaults to configured context).' }, { name: '--json', help: 'Print JSON.' }], examples: ['orizu optimizations promote <run-id> --candidate candidate-2 --label production'] },
     {
         path: ['optimizations', 'archive'],
         usage: 'orizu optimizations archive <run-id> [--project <team/project>] [--json]',
@@ -525,8 +553,8 @@ export const COMMAND_DOCS = [
     },
     {
         path: ['optimizations', 'run-gepa'],
-        usage: 'orizu optimizations run-gepa --project <team/project> --optimizer-version-id <id> --candidate-version-id <id> --runner-version-id <id> --candidate-runner-dir <dir> --scorer-version-id <id> --scorer-runner-version-id <id> --scorer-runner-dir <dir> [--scorer-input-contract gepa|flat_row] [--scorer-candidate-field <row-field>] [--allow-degenerate-seed] --dataset-version-id <id> --split-set-id <id> [--train-split train] [--val-split validation] [--budget auto|light|medium|heavy | --max-metric-calls <n> | --max-full-evals <n> | --max-iterations <n>] [--num-threads auto|N] [--reflection-retry-attempts N] [--reflection-http-timeout-seconds N] [--log-dir logs]',
-        summary: 'Run the bundled GEPA-style optimizer locally and stream events. Validates the scorer contract on the seed before iterating; judge runners built for flat-row score runs need --scorer-input-contract flat_row (ALI-1158).',
+        usage: 'orizu optimizations run-gepa --project <team/project> --optimizer-version-id <id> (--candidate-version-id <id> | --instruction-set <name> --model-config <identity> [--component-selector round-robin|all]) --runner-version-id <id> --candidate-runner-dir <dir> --scorer-version-id <id> --scorer-runner-version-id <id> --scorer-runner-dir <dir> [--engine official|legacy] [--scorer-input-contract gepa|flat_row] [--scorer-candidate-field <row-field>] [--allow-degenerate-seed] --dataset-version-id <id> --split-set-id <id> [--train-split train] [--val-split validation] [--budget auto|light|medium|heavy | --max-metric-calls <n> | --max-full-evals <n> | --max-iterations <n> | --max-candidate-proposals <n>] [--num-threads auto|N] [--reflection-retry-attempts N] [--reflection-http-timeout-seconds N] [--log-dir logs]',
+        summary: 'Run official GEPA locally and stream events; pass --engine legacy only for the frozen safety hatch. --instruction-set requires --model-config and cannot be combined with --candidate-version-id; round-robin updates one component-map entry per round and all updates every component. --max-candidate-proposals is official-engine-only. Validates the scorer contract on the seed before iterating; judge runners built for flat-row score runs need --scorer-input-contract flat_row (ALI-1158).',
         group: 'Optimizations',
     },
     {
@@ -1029,6 +1057,46 @@ export const COMMAND_DOCS = [
         ],
         examples: ['orizu connectors', 'orizu connectors status --project highlight/hip --json'],
     },
+    {
+        path: ['model-configs', 'create'],
+        usage: 'orizu model-configs create <provider/model> [--settings <json|@file>] [--name <name>] [--project <team/project>] [--json]',
+        summary: 'Create a provider-qualified model config with its first settings version.',
+        group: 'Model configs',
+        options: [{ name: '--settings <json|@file>', help: 'Optional JSON settings object or a JSON file; defaults to {}.' }, { name: '--name <name>', help: 'Optional display name.' }, { name: '--project <team/project>', help: 'Project that owns the config.' }, { name: '--json', help: 'Emit the machine-readable model config.' }],
+        examples: ['orizu model-configs create azure/gpt-5.4-mini --settings @settings.json'],
+    },
+    {
+        path: ['model-configs', 'list'],
+        usage: 'orizu model-configs list [--project <team/project>] [--json]',
+        summary: 'List model configs for a project.',
+        group: 'Model configs',
+        options: [{ name: '--project <team/project>', help: 'Project whose configs to list.' }, { name: '--json', help: 'Emit machine-readable model configs.' }],
+        examples: ['orizu model-configs list --project core/evals --json'],
+    },
+    {
+        path: ['model-configs', 'show'],
+        usage: 'orizu model-configs show <provider/model> [--project <team/project>] [--json]',
+        summary: 'Show a model config and its current settings version.',
+        group: 'Model configs',
+        options: [{ name: '--project <team/project>', help: 'Project that owns the config.' }, { name: '--json', help: 'Emit the machine-readable model config.' }],
+        examples: ['orizu model-configs show openai/gpt-5.4-mini'],
+    },
+    {
+        path: ['model-configs', 'settings', 'set'],
+        usage: 'orizu model-configs settings set <provider/model> --settings <json|@file> [--project <team/project>] [--json]',
+        summary: 'Add a settings version and advance the config current pointer.',
+        group: 'Model configs',
+        options: [{ name: '--settings <json|@file>', help: 'JSON settings object or a JSON file.', required: true }, { name: '--project <team/project>', help: 'Project that owns the config.' }, { name: '--json', help: 'Emit the machine-readable model config.' }],
+        examples: ["orizu model-configs settings set openai/gpt-5.4-mini --settings '{\"temperature\":0.2}'"],
+    },
+    {
+        path: ['model-configs', 'copy'],
+        usage: 'orizu model-configs copy <provider/model> --to <provider/model> [--project <team/project>] [--json]',
+        summary: 'Copy the current settings snapshot to a new provider-qualified config.',
+        group: 'Model configs',
+        options: [{ name: '--to <provider/model>', help: 'New provider-qualified config identity.', required: true }, { name: '--project <team/project>', help: 'Project that owns the config.' }, { name: '--json', help: 'Emit the machine-readable model config.' }],
+        examples: ['orizu model-configs copy openai/gpt-5.4-mini --to azure/gpt-5.4-mini'],
+    },
     {
         path: ['manifests', 'list'],
         usage: 'orizu manifests list [--project <team/project>] [--status <status>] [--json]',
@@ -1097,8 +1165,8 @@ export function commandDocsWithPrefix(args) {
     if (args.length === 0) {
         return COMMAND_DOCS;
     }
-    return COMMAND_DOCS.filter(doc => args.every((part, index) => doc.path[index] === part) &&
-        doc.path.length > args.length);
+    return COMMAND_DOCS.filter(doc => [doc.path, ...(doc.aliases || [])].some(path => args.every((part, index) => path[index] === part) &&
+        path.length > args.length));
 }
 function formatRows(rows, indent = '  ') {
     const width = Math.max(...rows.map(row => row[0].length));

package/dist/hosted-boot.d.ts

@@ -0,0 +1,273 @@
+/**
+ * `orizu internal hosted-boot` — the in-sandbox BOOT ENTRYPOINT for the DO-path
+ * hosted agent (ALI-1057). The session coordinator's Durable Object launches
+ * this DETACHED (`ORIZU_SANDBOX_ENTRYPOINT`, via nohup) once it has verified the
+ * pre-baked runtime marker; from here the sandbox bootstraps itself under the
+ * PULL model (ALI-1055): no operator writes its credentials, and no bearer or
+ * connector secret ever rests in Cloudflare.
+ *
+ * WHAT DIFFERS FROM THE OPERATOR PATH (packages/cli/src/hosted-session-cli.ts +
+ * hosted-bootstrap.ts) — and ONLY this:
+ *   (a) credentials are PULLED over HTTP at boot instead of the operator writing
+ *       a 0600 bearer file: the boot secret is exchanged for a fresh Orizu agent
+ *       bearer at ORIZU_AGENT_TOKEN_URL, and the connector env comes from
+ *       ORIZU_ENV_BUNDLE_URL (the 5A contract — connectors only, NO model key);
+ *   (b) the git credential helper runs in PULL MODE (hosted-runtime-assets.ts):
+ *       it GETs a fresh bearer per git op from the agent-token URL (boot-secret
+ *       auth) rather than reading a host-rotated 0600 file.
+ * Everything else — the clone via the credential helper, the loop, the event
+ * sink, redaction — is REUSED, not reimplemented.
+ *
+ * FROZEN ENV CONTRACT (workers/session-coordinator/src/bootstrap.ts
+ * `planSandboxEnv`). Required (fail-fast if any is missing):
+ *   ORIZU_BOOT_SECRET      the per-sandbox durable bootstrap secret;
+ *   ORIZU_AGENT_TOKEN_URL  {coordinator}/sessions/:id/agent-token (bearer pull);
+ *   ORIZU_ENV_BUNDLE_URL   {orizu}/api/coordinator/sessions/:id/env-bundle;
+ *   ORIZU_BASE_URL         the Orizu control-plane origin;
+ *   ORIZU_SESSION_ID       this session id.
+ * Present-but-optional in the contract, resolved from the control plane when
+ * absent: ORIZU_RUN_ID, ORIZU_WORKSPACE_ID (read back from the session), and the
+ * non-secret ANTHROPIC_API_KEY dummy placeholder (firewall brokers the real key).
+ */
+import { type HostedLoopContext, type HostedLoopResult } from './hosted-loop.js';
+export type BootFetch = (url: string, init?: RequestInit) => Promise<Response>;
+export declare const REQUIRED_BOOT_ENV_VARS: readonly ["ORIZU_BOOT_SECRET", "ORIZU_AGENT_TOKEN_URL", "ORIZU_ENV_BUNDLE_URL", "ORIZU_BASE_URL", "ORIZU_SESSION_ID"];
+export interface HostedBootEnv {
+    bootSecret: string;
+    agentTokenUrl: string;
+    /** {coordinator}/sessions/:id/boot-status — the ALI-1060 agent-liveness
+     *  callback, derived from agentTokenUrl (same boot-secret auth). */
+    bootStatusUrl: string;
+    envBundleUrl: string;
+    baseUrl: string;
+    sessionId: string;
+    /** Present in the contract only for resume flows; else resolved server-side. */
+    runId: string | null;
+    /** Rarely set by the DO (the start body carries no workspace id); read back
+     *  from the session when absent. */
+    workspaceId: string | null;
+    /** Non-secret dummy the firewall rewrites on egress — never a real key. */
+    anthropicDummyKey: string | null;
+}
+/** Validate the frozen env contract. A list of missing REQUIRED names means the
+ *  boot must FAIL FAST with a clear error (the DO records the non-zero exit). */
+export declare function resolveHostedBootEnv(env: Record<string, string | undefined>): {
+    ok: true;
+    value: HostedBootEnv;
+} | {
+    ok: false;
+    missing: string[];
+};
+/** The boot-status route is the agent-token route's sibling; swap the trailing
+ *  path segment. Falls back to appending when the shape is unexpected. */
+export declare function deriveBootStatusUrl(agentTokenUrl: string): string;
+/** Best-effort scrub + truncate for a reported failure reason: never leak the
+ *  boot secret (the one credential the boot always holds), and keep it short. */
+export declare function redactBootReason(reason: string, bootSecret: string): string;
+/**
+ * Report the boot outcome to the coordinator's boot-status route (ALI-1060),
+ * authed with the boot secret (same as the agent-token pull). Best-effort: the
+ * DO's own readiness-timeout is the backstop if this never lands, so a failed
+ * report must never mask the boot result. NEVER logs the secret.
+ */
+export declare function postBootStatus(opts: {
+    bootStatusUrl: string;
+    bootSecret: string;
+    /** 'ready' | 'failed' are the ALI-1060 liveness signals; 'complete' is the
+     *  ALI-1064 terminal signal — the loop finished (after auto-harvest), so the
+     *  DO ends the workspace session and stops instead of extending to 24h. */
+    status: 'ready' | 'failed' | 'complete';
+    runId: string | null;
+    reason?: string | null;
+    fetchImpl: BootFetch;
+    log?: (line: string) => void;
+}): Promise<void>;
+export interface PulledBearer {
+    token: string;
+    /** Epoch ms, or null when the response omitted a parseable expiry. */
+    expiresAtMs: number | null;
+}
+export interface PullAgentBearerOptions {
+    agentTokenUrl: string;
+    bootSecret: string;
+    fetchImpl: BootFetch;
+    /** Total attempts before giving up (the DO may still be arming). Default 5. */
+    attempts?: number;
+    /** Base backoff in ms (doubles each retry). Default 500. */
+    backoffMs?: number;
+    sleep?: (ms: number) => Promise<void>;
+    log?: (line: string) => void;
+}
+/**
+ * Exchange the boot secret for a fresh Orizu agent bearer at the coordinator's
+ * agent-token route (`GET`, `Authorization: Bearer <boot secret>` → 200
+ * `{token, tokenId, expiresAt}`). Retries with exponential backoff: the DO
+ * persists the boot-secret digest and serves this route DURING bootstrap, but a
+ * transient mint failure (control-plane blip) should not abort the whole boot.
+ * The secret is NEVER logged.
+ */
+export declare function pullAgentBearer(opts: PullAgentBearerOptions): Promise<PulledBearer>;
+export interface EnvBundleConnector {
+    ref: string;
+    envVar: string;
+    value: string;
+}
+export interface EnvBundle {
+    sessionId: string | null;
+    connectors: EnvBundleConnector[];
+    redactEnvVars: string[];
+}
+/**
+ * Pull the connector env bundle (5A contract): `GET` with the agent bearer → 200
+ * `{sessionId, connectors:[{ref,envVar,value}], redactEnvVars:[...]}`. The model
+ * key is DELIBERATELY absent (brokered at the firewall). Never logs a value.
+ */
+export declare function fetchEnvBundle(opts: {
+    envBundleUrl: string;
+    bearer: string;
+    fetchImpl: BootFetch;
+}): Promise<EnvBundle>;
+/**
+ * Export each connector `{envVar: value}` into the environment the loop/agent
+ * inherits, and REGISTER every redacted var on `ORIZU_INJECTED_ENV_VARS` — the
+ * exact hook the in-sandbox loop reads (`redactionListFromEnv`) to scrub these
+ * values from run events. Returns the merged redaction-var list.
+ */
+export declare function applyEnvBundle(bundle: EnvBundle, env: Record<string, string | undefined>): string[];
+export interface ResolvedSession {
+    workspaceId: string;
+    repoBranch: string;
+    task: string;
+    model: string | null;
+    reasoningEffort: string | null;
+    /** Session lifetime in minutes (from client_info), if the coordinator recorded
+     *  it — used to derive the per-prompt max-duration cap (ALI-1061). */
+    durationMinutes: number | null;
+    /** Most recent existing run id, if any (else the boot creates one). */
+    runId: string | null;
+}
+/** GET the session (agent-capable, RLS-scoped) to learn its workspace, branch,
+ *  task, and any existing run — the DO start body carries none of these. */
+export declare function resolveSession(opts: {
+    baseUrl: string;
+    sessionId: string;
+    bearer: string;
+    fetchImpl: BootFetch;
+}): Promise<ResolvedSession>;
+/** Reuse an existing run or start one with the AGENT bearer (actor_type='agent'),
+ *  exactly like the operator path's run-start step. */
+export declare function ensureRun(opts: {
+    baseUrl: string;
+    sessionId: string;
+    bearer: string;
+    fetchImpl: BootFetch;
+    existingRunId: string | null;
+    title?: string;
+}): Promise<string>;
+/** Mint a session_read repo token to learn the repo full name, then build the
+ *  GitHub clone URL (mirrors the operator path's `defaultResolveRepo`). */
+export declare function resolveRepo(opts: {
+    baseUrl: string;
+    workspaceId: string;
+    sessionId: string;
+    bearer: string;
+    fetchImpl: BootFetch;
+}): Promise<{
+    repoFullName: string;
+    cloneUrl: string;
+}>;
+export interface BootExecResult {
+    status: number;
+    stdout: string;
+    stderr: string;
+}
+export type BootExec = (cmd: string, args: string[], opts?: {
+    cwd?: string;
+}) => BootExecResult;
+export declare function assertSafeRunId(runId: string): void;
+export interface RunHostedBootOptions {
+    env: HostedBootEnv;
+    /** Mutable env map the loop/agent inherits (default: process.env). */
+    processEnv?: Record<string, string | undefined>;
+    /** Sandbox root the run dir + repo live under (default: process.cwd()). */
+    root?: string;
+    fetchImpl?: BootFetch;
+    exec?: BootExec;
+    /** File writer (default: atomic 0600 temp+rename). Injected in tests. */
+    writeFile?: (path: string, contents: string) => void;
+    /** File reader (default: readFileSync utf8). Injected in tests so the
+     *  bearer-provider read is backed by the same store as writeFile. */
+    readFile?: (path: string) => string;
+    /** Dir maker (default: recursive mkdir). Injected in tests. */
+    mkdirp?: (path: string) => void;
+    /** Run the loop (default: `runHostedLoop`). Injected in tests. */
+    runLoop?: (input: {
+        context: HostedLoopContext;
+        taskPrompt: string;
+        bearerProvider: () => string;
+        /** Verbatim secrets the loop's event redaction must scrub (ALI-1062: the
+         *  boot secret — bare hex, so no shape pattern would ever catch it). */
+        redactSecretsList: readonly string[];
+    }) => Promise<HostedLoopResult>;
+    now?: () => number;
+    log?: (line: string) => void;
+    /** Bearer-pull tuning (passed through to `pullAgentBearer`). */
+    bearerAttempts?: number;
+    bearerBackoffMs?: number;
+    sleep?: (ms: number) => Promise<void>;
+    /** ALI-1060: invoked once the run id + agent bearer are known (after
+     *  ensureRun), so a caller can report/mark on a LATER throw. */
+    onBootContext?: (ctx: {
+        runId: string;
+        bearer: string;
+    }) => void;
+}
+export interface HostedBootResult {
+    ok: boolean;
+    runId: string | null;
+    loopStatus: string | null;
+    error: string | null;
+}
+/**
+ * The full in-sandbox boot: validate → pull bearer → pull+apply env bundle →
+ * resolve session/run/repo → write the pull-mode credential assets → clone the
+ * session branch → launch the hosted loop (reused, in-process) with a bearer
+ * provider fed by the same pull-mode source. Returns the loop's terminal status.
+ */
+export declare function runHostedBoot(opts: RunHostedBootOptions): Promise<HostedBootResult>;
+export interface HostedBootCommandIo {
+    print: (line: string) => void;
+    printErr?: (line: string) => void;
+    json?: boolean;
+}
+/**
+ * Read the frozen env contract from the process env and run the boot. Fails fast
+ * (exit 1) with a clear message naming every missing required var. The DO records
+ * the exit code; run failures beyond the boot itself are recorded server-side.
+ */
+export declare function hostedBootCommand(io: HostedBootCommandIo): Promise<number>;
+/**
+ * Failure fan-out on a boot throw (ALI-1060): mark the run terminally `failed`
+ * (the operator path's agent-bearer terminal PATCH) and always signal the
+ * coordinator's boot-status route so the DO tears the sandbox down promptly.
+ * Best-effort throughout — the boot secret is scrubbed from the reported reason.
+ *
+ * PRE-BEARER failures (a throw before `onBootContext` — `pullAgentBearer` /
+ * `fetchEnvBundle` blew up, so `ctx` is null) still have a run id: the server
+ * PRE-CREATES it and injects ORIZU_RUN_ID. We attempt a SHORT bearer pull here
+ * so we can self-mark that run failed rather than leaving it `running` until the
+ * DO's readiness timeout. If even that pull fails, the DO backstop (boot-status
+ * failure now, readiness timeout otherwise) is the last line.
+ */
+export declare function reportBootFailure(opts: {
+    env: HostedBootEnv;
+    ctx: {
+        runId: string;
+        bearer: string;
+    } | null;
+    reason: string;
+    log: (line: string) => void;
+    /** Injectable transport (default: global fetch). Exposed for tests. */
+    fetchImpl?: BootFetch;
+}): Promise<void>;
+//# sourceMappingURL=hosted-boot.d.ts.map

package/dist/hosted-boot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-boot.d.ts","sourceRoot":"","sources":["../src/hosted-boot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAgBH,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACtB,MAAM,kBAAkB,CAAA;AAKzB,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AAe9E,eAAO,MAAM,sBAAsB,uHAMzB,CAAA;AAEV,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB;wEACoE;IACpE,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,gFAAgF;IAChF,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB;wCACoC;IACpC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,2EAA2E;IAC3E,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;CACjC;AAED;iFACiF;AACjF,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CA8BvE;AAED;0EAC0E;AAC1E,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAKjE;AASD;iFACiF;AACjF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAM3E;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB;;+EAE2E;IAC3E,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAA;IACvC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,SAAS,EAAE,SAAS,CAAA;IACpB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC7B,GAAG,OAAO,CAAC,IAAI,CAAC,CAehB;AAID,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,sEAAsE;IACtE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,SAAS,CAAA;IACpB,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC7B;AAED;;;;;;;GAOG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,YAAY,CAAC,CAgCzF;AAID,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,UAAU,EAAE,kBAAkB,EAAE,CAAA;IAChC,aAAa,EAAE,MAAM,EAAE,CAAA;CACxB;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,SAAS,CAAA;CACrB,GAAG,OAAO,CAAC,SAAS,CAAC,CAsBrB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM,EAAE,CAgBnG;AAID,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B;0EACsE;IACtE,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,uEAAuE;IACvE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AA0BD;4EAC4E;AAC5E,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,SAAS,CAAA;CACrB,GAAG,OAAO,CAAC,eAAe,CAAC,CAyB3B;AAED;uDACuD;AACvD,wBAAsB,SAAS,CAAC,IAAI,EAAE;IACpC,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,SAAS,CAAA;IACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC,MAAM,CAAC,CAclB;AAED;2EAC2E;AAC3E,wBAAsB,WAAW,CAAC,IAAI,EAAE;IACtC,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,SAAS,CAAA;CACrB,GAAG,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CA0DtD;AAID,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf;AACD,MAAM,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,cAAc,CAAA;AA2B/F,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAInD;AAQD,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,aAAa,CAAA;IAClB,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IAC/C,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,IAAI,CAAC,EAAE,QAAQ,CAAA;IACf,yEAAyE;IACzE,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAA;IACpD;yEACqE;IACrE,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACnC,+DAA+D;IAC/D,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC/B,kEAAkE;IAClE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE;QAChB,OAAO,EAAE,iBAAiB,CAAA;QAC1B,UAAU,EAAE,MAAM,CAAA;QAClB,cAAc,EAAE,MAAM,MAAM,CAAA;QAC5B;gFACwE;QACxE,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAA;KACrC,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC/B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC5B,gEAAgE;IAChE,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC;oEACgE;IAChE,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAA;CACjE;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAA;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAkQzF;AAyED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IACjC,IAAI,CAAC,EAAE,OAAO,CAAA;CACf;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,EAAE,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAsChF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,GAAG,EAAE,aAAa,CAAA;IAClB,GAAG,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IAC7C,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC3B,uEAAuE;IACvE,SAAS,CAAC,EAAE,SAAS,CAAA;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CA+ChB"}

package/dist/hosted-bootstrap-rehearsal.d.ts

@@ -0,0 +1,86 @@
+/**
+ * Self-contained rehearsal for the hosted bootstrap (ALI-925), extending the
+ * ALI-973 `daytona-slice-rehearsal` pattern.
+ *
+ * The whole `bootstrapHostedSandbox` flow runs against the local-sim provider
+ * with NO Daytona and NO GitHub: a REAL bare git repo backs the session branch,
+ * and a REAL HTTP broker (`hosted-broker-server.ts`) stands in for the Orizu
+ * control plane (per-repo token broker + RunAPI event ingest).
+ *
+ * The broker runs as a SEPARATE PROCESS on purpose: local-sim's `exec` blocks on
+ * `spawnSync`, and the in-sandbox credential helper it runs calls the broker over
+ * the network — an in-process server could not answer while the test thread is
+ * blocked. The broker journals events/tokens to files the rehearsal reads back.
+ */
+import { type SandboxProvider } from './sandbox-provider.js';
+import type { BrokerConfig } from './hosted-broker-server.js';
+import { type GitHttpConfig } from './hosted-git-http-server.js';
+export interface SpawnedBroker {
+    apiBaseUrl: string;
+    port: number;
+    stop: () => void;
+}
+/**
+ * Env keys the broker server reads (kept here so callers do not hand-roll them).
+ */
+export declare function brokerEnv(config: BrokerConfig): Record<string, string>;
+/**
+ * Spawn the broker server as its own process and resolve once it prints
+ * `LISTENING <port>` on stdout.
+ */
+export declare function spawnBrokerProcess(config: BrokerConfig): Promise<SpawnedBroker>;
+export interface SpawnedGitHttpServer {
+    baseUrl: string;
+    port: number;
+    stop: () => void;
+}
+/**
+ * Spawn the authenticated smart-HTTP git server as its own process (same
+ * separate-process rationale as the broker) and resolve once it prints
+ * `LISTENING <port>`. `baseUrl` is the clone URL root; append the repo segment.
+ */
+export declare function spawnGitHttpProcess(config: GitHttpConfig): Promise<SpawnedGitHttpServer>;
+export interface RecordedRehearsalEvent {
+    runId: string;
+    eventId: string;
+    sequence: number;
+    eventType: string;
+    payload: unknown;
+}
+export interface HostedBootstrapRehearsal {
+    apiBaseUrl: string;
+    bearer: string;
+    workspaceId: string;
+    sessionId: string;
+    runId: string;
+    sessionBranch: string;
+    repoFullName: string;
+    provider: SandboxProvider;
+    resolveCloneUrl: (repo: string) => string;
+    /** VCS host the helper is scoped to (the loopback git server). */
+    host: string;
+    /** Loopback hosts the helper may serve over plain HTTP (rehearsal only). */
+    insecureHttpHosts: readonly string[];
+    /** All run events the broker accepted, in arrival order. */
+    events: () => RecordedRehearsalEvent[];
+    /** Every token value the broker minted (for residue-sweep assertions). */
+    tokensIssued: () => string[];
+    /** Every Basic-auth password the git server received (proves password===token). */
+    basicAuthPasswords: () => string[];
+    cleanup: () => Promise<void>;
+}
+export interface RehearsalOptions {
+    bearer?: string;
+    keep?: boolean;
+    /** Seed `.orizu/setup.sh` onto the session branch (force-added past the
+     *  workbench `.orizu/` gitignore) so the setup-hook step has a hook to run. */
+    setupHookBody?: string;
+    /** Force the repo-token broker to a status (tests the 4xx credential path). */
+    repoTokenStatus?: number;
+    /** Force the run-events ingest to a status (tests the failure path). */
+    eventsStatus?: number;
+    /** Serve the full RunAPI + session + agent-token surface (P3.5 e2e). */
+    fullRunApi?: boolean;
+}
+export declare function createHostedBootstrapRehearsal(options?: RehearsalOptions): Promise<HostedBootstrapRehearsal>;
+//# sourceMappingURL=hosted-bootstrap-rehearsal.d.ts.map

package/dist/hosted-bootstrap-rehearsal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-bootstrap-rehearsal.d.ts","sourceRoot":"","sources":["../src/hosted-bootstrap-rehearsal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AASH,OAAO,EAA0B,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACpF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,EAAc,KAAK,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAuC5E,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,IAAI,CAAA;CACjB;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAkBtE;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CA0BrF;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,IAAI,CAAA;CACjB;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA0B9F;AAID,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,OAAO,CAAA;CACjB;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,eAAe,CAAA;IACzB,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACzC,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAA;IACZ,4EAA4E;IAC5E,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,4DAA4D;IAC5D,MAAM,EAAE,MAAM,sBAAsB,EAAE,CAAA;IACtC,0EAA0E;IAC1E,YAAY,EAAE,MAAM,MAAM,EAAE,CAAA;IAC5B,mFAAmF;IACnF,kBAAkB,EAAE,MAAM,MAAM,EAAE,CAAA;IAClC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,OAAO,CAAA;IACd;mFAC+E;IAC/E,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,+EAA+E;IAC/E,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,wEAAwE;IACxE,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAuBD,wBAAsB,8BAA8B,CAClD,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,wBAAwB,CAAC,CAqFnC"}