p-dev-harness 0.3.0

package/dist/setup/linear-webhook-secret.d.ts

@@ -0,0 +1,63 @@
+import { type LinearWebhookSummary } from "./linear-setup-client.js";
+export type LinearWebhookSecretMode = "automated" | "existing-unverified" | "manual-copy";
+export type LinearWebhookCandidateSource = "operator" | "reused-readable" | "generated" | "unreadable";
+export type LinearWebhookMutatePolicy = "setup" | "verify-only" | "verify-reconcile-url";
+export interface LinearWebhookUrlReconciliationResult {
+    attempted: boolean;
+    reconciled: boolean;
+    previousWebhookId?: string;
+    previousWebhookUrl?: string;
+    canonicalWebhookExists: boolean;
+    matchingPreviousWebhookFound: boolean;
+    manualSteps: string[];
+}
+export interface LinearWebhookSecretPlan {
+    mode: LinearWebhookSecretMode;
+    secret?: string;
+    matchingWebhook?: LinearWebhookSummary;
+    manualSteps: string[];
+    willGenerateOnApply?: boolean;
+}
+export interface LinearWebhookCandidateResolution {
+    secret?: string;
+    source: LinearWebhookCandidateSource;
+    matchingWebhook?: LinearWebhookSummary;
+    manualSteps: string[];
+}
+export declare function generateLinearWebhookSecret(): string;
+export declare function findMatchingLinearWebhook(input: {
+    webhooks: LinearWebhookSummary[];
+    webhookUrl: string;
+    linearTeamId?: string;
+}): LinearWebhookSummary | undefined;
+export declare function resolveLinearWebhookCandidateSecret(input: {
+    linearApiKey?: string;
+    webhookUrl: string;
+    linearTeamId?: string;
+    operatorSecret?: string;
+}): Promise<LinearWebhookCandidateResolution>;
+export declare function planLinearWebhookSecret(input: {
+    linearApiKey?: string;
+    webhookUrl: string;
+    linearTeamId?: string;
+}): Promise<LinearWebhookSecretPlan>;
+export declare function reconcileLinearWebhookUrlForVerification(input: {
+    linearApiKey: string;
+    linearTeamId?: string;
+    previousWebhookUrl: string;
+    canonicalWebhookUrl: string;
+    secret: string;
+}): Promise<LinearWebhookUrlReconciliationResult>;
+export declare function ensureLinearIssueWebhook(input: {
+    linearApiKey: string;
+    webhookUrl: string;
+    linearTeamId?: string;
+    secret: string;
+    mutatePolicy?: LinearWebhookMutatePolicy;
+}): Promise<{
+    webhook?: LinearWebhookSummary;
+    secret: string;
+    mode: LinearWebhookSecretMode;
+    manualSteps: string[];
+}>;
+//# sourceMappingURL=linear-webhook-secret.d.ts.map

package/dist/setup/linear-webhook-secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"linear-webhook-secret.d.ts","sourceRoot":"","sources":["../../src/setup/linear-webhook-secret.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,oBAAoB,EAC1B,MAAM,0BAA0B,CAAC;AAGlC,MAAM,MAAM,uBAAuB,GAC/B,WAAW,GACX,qBAAqB,GACrB,aAAa,CAAC;AAElB,MAAM,MAAM,4BAA4B,GACpC,UAAU,GACV,iBAAiB,GACjB,WAAW,GACX,YAAY,CAAC;AAEjB,MAAM,MAAM,yBAAyB,GACjC,OAAO,GACP,aAAa,GACb,sBAAsB,CAAC;AAE3B,MAAM,WAAW,oCAAoC;IACnD,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,sBAAsB,EAAE,OAAO,CAAC;IAChC,4BAA4B,EAAE,OAAO,CAAC;IACtC,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,uBAAuB,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,oBAAoB,CAAC;IACvC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,gCAAgC;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,4BAA4B,CAAC;IACrC,eAAe,CAAC,EAAE,oBAAoB,CAAC;IACvC,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,wBAAgB,2BAA2B,IAAI,MAAM,CAEpD;AAMD,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,QAAQ,EAAE,oBAAoB,EAAE,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,oBAAoB,GAAG,SAAS,CAcnC;AAED,wBAAsB,mCAAmC,CAAC,KAAK,EAAE;IAC/D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,gCAAgC,CAAC,CA2D5C;AAED,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAgDnC;AAED,wBAAsB,wCAAwC,CAAC,KAAK,EAAE;IACpE,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,oCAAoC,CAAC,CAiGhD;AAED,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,yBAAyB,CAAC;CAC1C,GAAG,OAAO,CAAC;IACV,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,uBAAuB,CAAC;IAC9B,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC,CA6HD"}

package/dist/setup/linear-webhook-secret.js

@@ -0,0 +1,335 @@
+import { randomBytes } from "node:crypto";
+import { createLinearIssueWebhook, createLinearSetupClient, listLinearWebhooks, updateLinearIssueWebhook, } from "./linear-setup-client.js";
+import { summarizeLinearWebhookReadiness } from "./linear-setup-plan.js";
+export function generateLinearWebhookSecret() {
+    return randomBytes(32).toString("hex");
+}
+function normalizeWebhookUrl(url) {
+    return url.trim().replace(/\/$/, "");
+}
+export function findMatchingLinearWebhook(input) {
+    const normalizedTarget = normalizeWebhookUrl(input.webhookUrl);
+    return input.webhooks.find((webhook) => {
+        const normalized = normalizeWebhookUrl(webhook.url);
+        const teamMatches = input.linearTeamId
+            ? webhook.teamId === input.linearTeamId
+            : true;
+        return (teamMatches &&
+            normalized === normalizedTarget &&
+            webhook.enabled &&
+            webhook.resourceTypes.includes("Issue"));
+    });
+}
+export async function resolveLinearWebhookCandidateSecret(input) {
+    const operatorSecret = input.operatorSecret?.trim();
+    if (operatorSecret) {
+        return {
+            secret: operatorSecret,
+            source: "operator",
+            manualSteps: [],
+        };
+    }
+    if (!input.linearApiKey?.trim()) {
+        return {
+            source: "generated",
+            manualSteps: [
+                "Add LINEAR_API_KEY in Step 1 before automated Linear webhook setup can run.",
+                "A webhook signing secret will be generated during apply and shown once if manual copy is required.",
+            ],
+        };
+    }
+    const client = createLinearSetupClient(input.linearApiKey);
+    const webhooks = await listLinearWebhooks(client);
+    const matchingWebhook = findMatchingLinearWebhook({
+        webhooks,
+        webhookUrl: input.webhookUrl,
+        linearTeamId: input.linearTeamId,
+    });
+    if (matchingWebhook) {
+        const knownSecret = matchingWebhook.secret?.trim();
+        if (knownSecret) {
+            return {
+                secret: knownSecret,
+                source: "reused-readable",
+                matchingWebhook: { ...matchingWebhook, secret: undefined },
+                manualSteps: [
+                    "A matching Linear Issue webhook exists. Apply will reuse its known signing secret for verification.",
+                ],
+            };
+        }
+        return {
+            source: "unreadable",
+            matchingWebhook: { ...matchingWebhook, secret: undefined },
+            manualSteps: [
+                "A matching Linear Issue webhook exists, but its signing secret cannot be read from the Linear API.",
+                "Update the Linear webhook signing secret manually to match Vercel LINEAR_WEBHOOK_SECRET, then retry verification.",
+                "Apply will not rotate the webhook repeatedly while the secret remains unreadable.",
+            ],
+        };
+    }
+    return {
+        secret: generateLinearWebhookSecret(),
+        source: "generated",
+        manualSteps: [
+            "Apply will create a Linear Issue webhook and write the signing secret to Vercel.",
+        ],
+    };
+}
+export async function planLinearWebhookSecret(input) {
+    if (!input.linearApiKey?.trim()) {
+        return {
+            mode: "manual-copy",
+            manualSteps: [
+                "Add LINEAR_API_KEY in Step 1 before automated Linear webhook setup can run.",
+                "A webhook signing secret will be generated during apply and shown once if manual copy is required.",
+            ],
+        };
+    }
+    const readiness = await summarizeLinearWebhookReadiness({
+        linearApiKey: input.linearApiKey,
+        webhookUrl: input.webhookUrl,
+        teamId: input.linearTeamId,
+    });
+    if (readiness.matchingWebhook) {
+        const knownSecret = readiness.matchingWebhook.secret?.trim();
+        if (knownSecret) {
+            return {
+                mode: "automated",
+                matchingWebhook: readiness.matchingWebhook,
+                willGenerateOnApply: false,
+                manualSteps: [
+                    "A matching Linear Issue webhook already exists. Apply will reuse its known signing secret for verification.",
+                ],
+            };
+        }
+        return {
+            mode: "existing-unverified",
+            matchingWebhook: readiness.matchingWebhook,
+            willGenerateOnApply: true,
+            manualSteps: [
+                "A matching Linear Issue webhook already exists, but its signing secret cannot be recovered.",
+                "Apply will attempt to rotate the existing webhook secret automatically once. If that fails, copy the generated secret into Linear manually.",
+            ],
+        };
+    }
+    return {
+        mode: "automated",
+        willGenerateOnApply: true,
+        manualSteps: [
+            "Apply will create a Linear Issue webhook and write the signing secret to Vercel.",
+        ],
+    };
+}
+export async function reconcileLinearWebhookUrlForVerification(input) {
+    const previousUrl = normalizeWebhookUrl(input.previousWebhookUrl);
+    const canonicalUrl = normalizeWebhookUrl(input.canonicalWebhookUrl);
+    if (!previousUrl || !canonicalUrl || previousUrl === canonicalUrl) {
+        return {
+            attempted: false,
+            reconciled: false,
+            canonicalWebhookExists: false,
+            matchingPreviousWebhookFound: false,
+            manualSteps: [],
+        };
+    }
+    const client = createLinearSetupClient(input.linearApiKey);
+    const webhooks = await listLinearWebhooks(client);
+    const previousWebhook = findMatchingLinearWebhook({
+        webhooks,
+        webhookUrl: previousUrl,
+        linearTeamId: input.linearTeamId,
+    });
+    const canonicalWebhook = findMatchingLinearWebhook({
+        webhooks,
+        webhookUrl: canonicalUrl,
+        linearTeamId: input.linearTeamId,
+    });
+    if (!previousWebhook) {
+        return {
+            attempted: true,
+            reconciled: false,
+            previousWebhookUrl: previousUrl,
+            canonicalWebhookExists: Boolean(canonicalWebhook),
+            matchingPreviousWebhookFound: false,
+            manualSteps: [
+                "No matching Linear Issue webhook was found at the previously stored webhook URL.",
+                "Create or update the Linear webhook manually to point at the canonical production URL, then retry verification.",
+            ],
+        };
+    }
+    if (canonicalWebhook) {
+        if (canonicalWebhook.id === previousWebhook.id) {
+            return {
+                attempted: true,
+                reconciled: true,
+                previousWebhookId: previousWebhook.id,
+                previousWebhookUrl: previousUrl,
+                canonicalWebhookExists: true,
+                matchingPreviousWebhookFound: true,
+                manualSteps: [],
+            };
+        }
+        return {
+            attempted: true,
+            reconciled: false,
+            previousWebhookId: previousWebhook.id,
+            previousWebhookUrl: previousUrl,
+            canonicalWebhookExists: true,
+            matchingPreviousWebhookFound: true,
+            manualSteps: [
+                "A separate Linear Issue webhook already exists at the canonical production URL.",
+                "Consolidate webhook configuration manually before retrying verification.",
+            ],
+        };
+    }
+    try {
+        await updateLinearIssueWebhook(client, {
+            webhookId: previousWebhook.id,
+            url: canonicalUrl,
+            secret: input.secret.trim(),
+        });
+        return {
+            attempted: true,
+            reconciled: true,
+            previousWebhookId: previousWebhook.id,
+            previousWebhookUrl: previousUrl,
+            canonicalWebhookExists: false,
+            matchingPreviousWebhookFound: true,
+            manualSteps: [],
+        };
+    }
+    catch {
+        return {
+            attempted: true,
+            reconciled: false,
+            previousWebhookId: previousWebhook.id,
+            previousWebhookUrl: previousUrl,
+            canonicalWebhookExists: false,
+            matchingPreviousWebhookFound: true,
+            manualSteps: [
+                "Could not update the existing Linear Issue webhook to the canonical production URL automatically.",
+                "Update the Linear webhook URL manually to match the canonical production URL, then retry verification.",
+            ],
+        };
+    }
+}
+export async function ensureLinearIssueWebhook(input) {
+    const mutatePolicy = input.mutatePolicy ?? "setup";
+    const client = createLinearSetupClient(input.linearApiKey);
+    const webhooks = await listLinearWebhooks(client);
+    const existing = findMatchingLinearWebhook({
+        webhooks,
+        webhookUrl: input.webhookUrl,
+        linearTeamId: input.linearTeamId,
+    });
+    if (existing) {
+        const knownSecret = existing.secret?.trim();
+        if (knownSecret === input.secret.trim()) {
+            return {
+                webhook: { ...existing, secret: undefined },
+                secret: input.secret,
+                mode: "automated",
+                manualSteps: [],
+            };
+        }
+        if (mutatePolicy === "verify-only") {
+            if (knownSecret) {
+                return {
+                    webhook: { ...existing, secret: undefined },
+                    secret: knownSecret,
+                    mode: "automated",
+                    manualSteps: [],
+                };
+            }
+            return {
+                webhook: { ...existing, secret: undefined },
+                secret: input.secret,
+                mode: "existing-unverified",
+                manualSteps: [
+                    "Matching Linear webhook exists, but its signing secret cannot be read from the Linear API.",
+                    "Update the Linear webhook signing secret manually to match Vercel LINEAR_WEBHOOK_SECRET, then retry verification.",
+                ],
+            };
+        }
+        try {
+            const updated = await updateLinearIssueWebhook(client, {
+                webhookId: existing.id,
+                url: input.webhookUrl,
+                secret: input.secret,
+            });
+            return {
+                webhook: { ...updated, secret: undefined },
+                secret: input.secret,
+                mode: "automated",
+                manualSteps: [],
+            };
+        }
+        catch {
+            return {
+                webhook: { ...existing, secret: undefined },
+                secret: input.secret,
+                mode: "existing-unverified",
+                manualSteps: [
+                    "Matching Linear webhook exists, but its signing secret could not be rotated automatically.",
+                    "Copy the generated webhook secret into the Linear webhook signing secret field, then retry verification.",
+                ],
+            };
+        }
+    }
+    if (mutatePolicy === "verify-only") {
+        return {
+            secret: input.secret,
+            mode: "manual-copy",
+            manualSteps: [
+                `Create a Linear Issue webhook pointing at ${input.webhookUrl}.`,
+                "Retry verification after the webhook exists and its signing secret matches Vercel.",
+            ],
+        };
+    }
+    if (mutatePolicy === "verify-reconcile-url") {
+        return {
+            secret: input.secret,
+            mode: "manual-copy",
+            manualSteps: [
+                `Create a Linear Issue webhook pointing at ${input.webhookUrl}.`,
+                "Retry verification after the webhook exists and its signing secret matches Vercel.",
+            ],
+        };
+    }
+    try {
+        const created = await createLinearIssueWebhook(client, {
+            url: input.webhookUrl,
+            teamId: input.linearTeamId,
+            label: "Harness webhook bridge",
+            secret: input.secret,
+        });
+        if (created.secret) {
+            return {
+                webhook: { ...created, secret: undefined },
+                secret: created.secret,
+                mode: "automated",
+                manualSteps: [],
+            };
+        }
+        return {
+            webhook: { ...created, secret: undefined },
+            secret: input.secret,
+            mode: "manual-copy",
+            manualSteps: [
+                "Linear webhook was created, but the signing secret was not returned by the API.",
+                "Copy the generated secret into the Linear webhook signing secret field.",
+            ],
+        };
+    }
+    catch {
+        return {
+            secret: input.secret,
+            mode: "manual-copy",
+            manualSteps: [
+                `Create a Linear Issue webhook pointing at ${input.webhookUrl}.`,
+                "Copy the generated webhook secret into Linear and confirm when complete.",
+            ],
+        };
+    }
+}
+//# sourceMappingURL=linear-webhook-secret.js.map

package/dist/setup/linear-webhook-secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"linear-webhook-secret.js","sourceRoot":"","sources":["../../src/setup/linear-webhook-secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,wBAAwB,GAEzB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AA2CzE,MAAM,UAAU,2BAA2B;IACzC,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAIzC;IACC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/D,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QACrC,MAAM,UAAU,GAAG,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,KAAK,CAAC,YAAY;YACpC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,YAAY;YACvC,CAAC,CAAC,IAAI,CAAC;QACT,OAAO,CACL,WAAW;YACX,UAAU,KAAK,gBAAgB;YAC/B,OAAO,CAAC,OAAO;YACf,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,CACxC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CAAC,KAKzD;IACC,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IACpD,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,UAAU;YAClB,WAAW,EAAE,EAAE;SAChB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC;QAChC,OAAO;YACL,MAAM,EAAE,WAAW;YACnB,WAAW,EAAE;gBACX,6EAA6E;gBAC7E,oGAAoG;aACrG;SACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,eAAe,GAAG,yBAAyB,CAAC;QAChD,QAAQ;QACR,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IAEH,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QACnD,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO;gBACL,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,iBAAiB;gBACzB,eAAe,EAAE,EAAE,GAAG,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE;gBAC1D,WAAW,EAAE;oBACX,qGAAqG;iBACtG;aACF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,MAAM,EAAE,YAAY;YACpB,eAAe,EAAE,EAAE,GAAG,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE;YAC1D,WAAW,EAAE;gBACX,oGAAoG;gBACpG,mHAAmH;gBACnH,mFAAmF;aACpF;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,2BAA2B,EAAE;QACrC,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE;YACX,kFAAkF;SACnF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAI7C;IACC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC;QAChC,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE;gBACX,6EAA6E;gBAC7E,oGAAoG;aACrG;SACF,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,+BAA+B,CAAC;QACtD,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,YAAY;KAC3B,CAAC,CAAC;IAEH,IAAI,SAAS,CAAC,eAAe,EAAE,CAAC;QAC9B,MAAM,WAAW,GAAG,SAAS,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QAC7D,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO;gBACL,IAAI,EAAE,WAAW;gBACjB,eAAe,EAAE,SAAS,CAAC,eAAe;gBAC1C,mBAAmB,EAAE,KAAK;gBAC1B,WAAW,EAAE;oBACX,6GAA6G;iBAC9G;aACF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,eAAe,EAAE,SAAS,CAAC,eAAe;YAC1C,mBAAmB,EAAE,IAAI;YACzB,WAAW,EAAE;gBACX,6FAA6F;gBAC7F,6IAA6I;aAC9I;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,mBAAmB,EAAE,IAAI;QACzB,WAAW,EAAE;YACX,kFAAkF;SACnF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAAC,KAM9D;IACC,MAAM,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAClE,MAAM,YAAY,GAAG,mBAAmB,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAEpE,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QAClE,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,UAAU,EAAE,KAAK;YACjB,sBAAsB,EAAE,KAAK;YAC7B,4BAA4B,EAAE,KAAK;YACnC,WAAW,EAAE,EAAE;SAChB,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,eAAe,GAAG,yBAAyB,CAAC;QAChD,QAAQ;QACR,UAAU,EAAE,WAAW;QACvB,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;QACjD,QAAQ;QACR,UAAU,EAAE,YAAY;QACxB,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IAEH,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO;YACL,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,KAAK;YACjB,kBAAkB,EAAE,WAAW;YAC/B,sBAAsB,EAAE,OAAO,CAAC,gBAAgB,CAAC;YACjD,4BAA4B,EAAE,KAAK;YACnC,WAAW,EAAE;gBACX,kFAAkF;gBAClF,iHAAiH;aAClH;SACF,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB,EAAE,CAAC;QACrB,IAAI,gBAAgB,CAAC,EAAE,KAAK,eAAe,CAAC,EAAE,EAAE,CAAC;YAC/C,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,IAAI;gBAChB,iBAAiB,EAAE,eAAe,CAAC,EAAE;gBACrC,kBAAkB,EAAE,WAAW;gBAC/B,sBAAsB,EAAE,IAAI;gBAC5B,4BAA4B,EAAE,IAAI;gBAClC,WAAW,EAAE,EAAE;aAChB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,KAAK;YACjB,iBAAiB,EAAE,eAAe,CAAC,EAAE;YACrC,kBAAkB,EAAE,WAAW;YAC/B,sBAAsB,EAAE,IAAI;YAC5B,4BAA4B,EAAE,IAAI;YAClC,WAAW,EAAE;gBACX,iFAAiF;gBACjF,0EAA0E;aAC3E;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,wBAAwB,CAAC,MAAM,EAAE;YACrC,SAAS,EAAE,eAAe,CAAC,EAAE;YAC7B,GAAG,EAAE,YAAY;YACjB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE;SAC5B,CAAC,CAAC;QACH,OAAO;YACL,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,IAAI;YAChB,iBAAiB,EAAE,eAAe,CAAC,EAAE;YACrC,kBAAkB,EAAE,WAAW;YAC/B,sBAAsB,EAAE,KAAK;YAC7B,4BAA4B,EAAE,IAAI;YAClC,WAAW,EAAE,EAAE;SAChB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,KAAK;YACjB,iBAAiB,EAAE,eAAe,CAAC,EAAE;YACrC,kBAAkB,EAAE,WAAW;YAC/B,sBAAsB,EAAE,KAAK;YAC7B,4BAA4B,EAAE,IAAI;YAClC,WAAW,EAAE;gBACX,mGAAmG;gBACnG,wGAAwG;aACzG;SACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAM9C;IAMC,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,OAAO,CAAC;IACnD,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,yBAAyB,CAAC;QACzC,QAAQ;QACR,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IAEH,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QAC5C,IAAI,WAAW,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACxC,OAAO;gBACL,OAAO,EAAE,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE;gBAC3C,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,IAAI,EAAE,WAAW;gBACjB,WAAW,EAAE,EAAE;aAChB,CAAC;QACJ,CAAC;QAED,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;YACnC,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO;oBACL,OAAO,EAAE,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE;oBAC3C,MAAM,EAAE,WAAW;oBACnB,IAAI,EAAE,WAAW;oBACjB,WAAW,EAAE,EAAE;iBAChB,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE;gBAC3C,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,IAAI,EAAE,qBAAqB;gBAC3B,WAAW,EAAE;oBACX,4FAA4F;oBAC5F,mHAAmH;iBACpH;aACF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE;gBACrD,SAAS,EAAE,QAAQ,CAAC,EAAE;gBACtB,GAAG,EAAE,KAAK,CAAC,UAAU;gBACrB,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE;gBAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,IAAI,EAAE,WAAW;gBACjB,WAAW,EAAE,EAAE;aAChB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,OAAO,EAAE,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE;gBAC3C,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,IAAI,EAAE,qBAAqB;gBAC3B,WAAW,EAAE;oBACX,4FAA4F;oBAC5F,0GAA0G;iBAC3G;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;QACnC,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE;gBACX,6CAA6C,KAAK,CAAC,UAAU,GAAG;gBAChE,oFAAoF;aACrF;SACF,CAAC;IACJ,CAAC;IAED,IAAI,YAAY,KAAK,sBAAsB,EAAE,CAAC;QAC5C,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE;gBACX,6CAA6C,KAAK,CAAC,UAAU,GAAG;gBAChE,oFAAoF;aACrF;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE;YACrD,GAAG,EAAE,KAAK,CAAC,UAAU;YACrB,MAAM,EAAE,KAAK,CAAC,YAAY;YAC1B,KAAK,EAAE,wBAAwB;YAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO;gBACL,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE;gBAC1C,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,WAAW;gBACjB,WAAW,EAAE,EAAE;aAChB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE;YAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE;gBACX,iFAAiF;gBACjF,yEAAyE;aAC1E;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE;gBACX,6CAA6C,KAAK,CAAC,UAAU,GAAG;gBAChE,0EAA0E;aAC3E;SACF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/setup/local-apply-actions.d.ts

@@ -0,0 +1,85 @@
+import { summarizeManagedKeyPresence } from "./env-merge.js";
+import { normalizeConfigFormInput, type LocalConfigFormInput } from "./config-local-editor.js";
+import type { SetupActionResult } from "./setup-actions.js";
+import { resolveLocalFilePaths, type SetupEnvInput } from "./setup-state.js";
+export interface LocalEnvFormInput {
+    harnessConfigPath?: string;
+    githubDispatchRepository?: string;
+    linearApiKey?: string;
+    cursorApiKey?: string;
+    githubToken?: string;
+    vercelToken?: string;
+}
+export interface LocalSetupFormPayload {
+    env: LocalEnvFormInput;
+    config: LocalConfigFormInput;
+}
+export interface LocalFileWritePlan {
+    envExists: boolean;
+    configExists: boolean;
+    envAction: "create" | "update";
+    configAction: "create" | "update";
+}
+export interface LocalFileBaselines {
+    envLocalPath: string;
+    configLocalPath: string;
+    envLocalHash: string;
+    configLocalHash: string;
+}
+export interface LocalSetupPreviewResult {
+    fingerprint: string;
+    plan: LocalFileWritePlan;
+    envPreview: string;
+    configPreview: string;
+    envKeyPresence: ReturnType<typeof summarizeManagedKeyPresence>;
+    envResult: SetupActionResult;
+    configResult: SetupActionResult;
+    validationError?: string;
+}
+export interface LocalSetupApplyResult {
+    envResult: SetupActionResult;
+    configResult: SetupActionResult;
+    plan: LocalFileWritePlan;
+}
+export interface LocalSetupApplyOptions {
+    cwd?: string;
+    payload: LocalSetupFormPayload;
+    confirmed: boolean;
+    fingerprint: string;
+}
+export declare function normalizeLocalSetupPayload(payload: LocalSetupFormPayload): {
+    envInput: SetupEnvInput;
+    configInput: ReturnType<typeof normalizeConfigFormInput>;
+};
+export declare function getLocalFileBaselines(paths: ReturnType<typeof resolveLocalFilePaths>): Promise<LocalFileBaselines>;
+export declare function computeConnectServicesFingerprint(env: LocalEnvFormInput, baselines: LocalFileBaselines, cwd?: string): string;
+export declare function computeLocalSetupFingerprint(payload: LocalSetupFormPayload, baselines: LocalFileBaselines, cwd?: string): string;
+export interface ConnectServicesEnvPreviewResult {
+    fingerprint: string;
+    envPreview: string;
+    envKeyPresence: ReturnType<typeof summarizeManagedKeyPresence>;
+    envResult: SetupActionResult;
+}
+export declare function previewConnectServicesEnv(options: {
+    cwd?: string;
+    env: LocalEnvFormInput;
+}): Promise<ConnectServicesEnvPreviewResult>;
+export declare function applyConnectServicesEnv(options: {
+    cwd?: string;
+    env: LocalEnvFormInput;
+    confirmed: boolean;
+    fingerprint: string;
+}): Promise<{
+    envResult: SetupActionResult;
+}>;
+export declare function previewLocalSetupFiles(options: {
+    cwd?: string;
+    payload: LocalSetupFormPayload;
+}): Promise<LocalSetupPreviewResult>;
+export declare function applyLocalSetupFiles(options: LocalSetupApplyOptions): Promise<LocalSetupApplyResult>;
+export declare function persistGithubDispatchRepository(options: {
+    cwd?: string;
+    githubDispatchRepository: string;
+    githubDispatchRepositoryId?: number;
+}): Promise<SetupActionResult>;
+//# sourceMappingURL=local-apply-actions.d.ts.map

package/dist/setup/local-apply-actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-apply-actions.d.ts","sourceRoot":"","sources":["../../src/setup/local-apply-actions.ts"],"names":[],"mappings":"AAEA,OAAO,EAQL,2BAA2B,EAC5B,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,wBAAwB,EAExB,KAAK,oBAAoB,EAC1B,MAAM,0BAA0B,CAAC;AAMlC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EACL,qBAAqB,EACrB,KAAK,aAAa,EACnB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,WAAW,iBAAiB;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,iBAAiB,CAAC;IACvB,MAAM,EAAE,oBAAoB,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,SAAS,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC/B,YAAY,EAAE,QAAQ,GAAG,QAAQ,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,kBAAkB,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,UAAU,CAAC,OAAO,2BAA2B,CAAC,CAAC;IAC/D,SAAS,EAAE,iBAAiB,CAAC;IAC7B,YAAY,EAAE,iBAAiB,CAAC;IAChC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,iBAAiB,CAAC;IAC7B,YAAY,EAAE,iBAAiB,CAAC;IAChC,IAAI,EAAE,kBAAkB,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,qBAAqB,CAAC;IAC/B,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AA0BD,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,qBAAqB,GAC7B;IACD,QAAQ,EAAE,aAAa,CAAC;IACxB,WAAW,EAAE,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC;CAC1D,CAKA;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,UAAU,CAAC,OAAO,qBAAqB,CAAC,GAC9C,OAAO,CAAC,kBAAkB,CAAC,CAY7B;AAiBD,wBAAgB,iCAAiC,CAC/C,GAAG,EAAE,iBAAiB,EACtB,SAAS,EAAE,kBAAkB,EAC7B,GAAG,CAAC,EAAE,MAAM,GACX,MAAM,CAcR;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,qBAAqB,EAC9B,SAAS,EAAE,kBAAkB,EAC7B,GAAG,CAAC,EAAE,MAAM,GACX,MAAM,CAeR;AAkDD,MAAM,WAAW,+BAA+B;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,UAAU,CAAC,OAAO,2BAA2B,CAAC,CAAC;IAC/D,SAAS,EAAE,iBAAiB,CAAC;CAC9B;AAED,wBAAsB,yBAAyB,CAAC,OAAO,EAAE;IACvD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,iBAAiB,CAAC;CACxB,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAiC3C;AAED,wBAAsB,uBAAuB,CAAC,OAAO,EAAE;IACrD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,iBAAiB,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,iBAAiB,CAAA;CAAE,CAAC,CAwC5C;AAED,wBAAsB,sBAAsB,CAAC,OAAO,EAAE;IACpD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,qBAAqB,CAAC;CAChC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAkEnC;AAED,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,qBAAqB,CAAC,CA4EhC;AAED,wBAAsB,+BAA+B,CAAC,OAAO,EAAE;IAC7D,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wBAAwB,EAAE,MAAM,CAAC;IACjC,0BAA0B,CAAC,EAAE,MAAM,CAAC;CACrC,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAsC7B"}