p-dev-harness 0.3.0

package/dist/setup/mock-target-workflow-finalization.js

@@ -0,0 +1,367 @@
+import { buildTargetWorkflowBranchName, } from "./target-workflow-setup.js";
+import { targetRepoSlugFromUrl } from "./harness-secret-setup.js";
+import { blockedCategoryMessage } from "./workflow-install-merge-errors.js";
+const runtimeByKey = new Map();
+function runtimeKey(targetRepoSlug, repoConfigId) {
+    return `${targetRepoSlug}:${repoConfigId}`;
+}
+function getRuntime(key) {
+    const existing = runtimeByKey.get(key);
+    if (existing) {
+        return existing;
+    }
+    const created = {
+        checksPollCount: 0,
+        verificationPollCount: 0,
+        mergeAttempts: 0,
+        branchUpdateAttempts: 0,
+    };
+    runtimeByKey.set(key, created);
+    return created;
+}
+export function resetMockWorkflowFinalizationRuntime() {
+    runtimeByKey.clear();
+}
+function baseResult(input) {
+    return {
+        repoConfigId: input.input.repoConfigId,
+        targetRepo: input.input.targetRepo,
+        targetRepoSlug: input.targetRepoSlug,
+        productionBranch: input.input.productionBranch,
+        branchName: input.branchName,
+        lifecycle: input.lifecycle,
+        blockedCategory: input.blockedCategory,
+        message: input.message,
+        prUrl: input.prUrl,
+        prNumber: input.prNumber,
+        validatedHeadSha: input.validatedHeadSha,
+        workflowStatus: input.workflowStatus,
+        canRetry: input.canRetry ?? false,
+        requiresGitHubIntervention: input.requiresGitHubIntervention ?? false,
+        advancedThisRequest: input.advancedThisRequest ?? true,
+        lockContended: false,
+    };
+}
+export function advanceMockTargetWorkflowFinalization(input) {
+    const targetRepoSlug = targetRepoSlugFromUrl(input.finalizeInput.targetRepo);
+    if (!targetRepoSlug) {
+        return baseResult({
+            input: input.finalizeInput,
+            targetRepoSlug: "<invalid>",
+            branchName: buildTargetWorkflowBranchName(input.finalizeInput.repoConfigId),
+            lifecycle: "blocked",
+            workflowStatus: "unknown",
+            message: "Invalid target repo URL.",
+            blockedCategory: "unexpected-pr-content",
+            requiresGitHubIntervention: true,
+        });
+    }
+    const branchName = input.finalizeInput.branchName ??
+        buildTargetWorkflowBranchName(input.finalizeInput.repoConfigId);
+    const scenario = input.scenario ?? {};
+    const runtime = getRuntime(runtimeKey(targetRepoSlug, input.finalizeInput.repoConfigId));
+    const existing = input.existingWorkflowContent;
+    let workflowStatus = "unknown";
+    if (existing === null || existing === undefined) {
+        workflowStatus = "missing";
+    }
+    else if (existing === input.intendedWorkflowContent) {
+        workflowStatus = "present";
+    }
+    else {
+        workflowStatus = "differs";
+    }
+    if (workflowStatus === "present") {
+        runtimeByKey.delete(runtimeKey(targetRepoSlug, input.finalizeInput.repoConfigId));
+        return baseResult({
+            input: input.finalizeInput,
+            targetRepoSlug,
+            branchName,
+            lifecycle: "complete",
+            workflowStatus: "present",
+            message: "Workflow installed on the production branch.",
+        });
+    }
+    const prUrl = input.finalizeInput.prUrl ??
+        scenario.prUrl ??
+        `https://github.com/${targetRepoSlug}/pull/${scenario.prNumber ?? 1}`;
+    const prNumber = scenario.prNumber ?? 1;
+    const headSha = scenario.headSha ?? "mock-head-sha";
+    if (scenario.unexpectedExtraFile) {
+        return baseResult({
+            input: input.finalizeInput,
+            targetRepoSlug,
+            branchName,
+            lifecycle: "blocked",
+            workflowStatus,
+            message: blockedCategoryMessage("unexpected-pr-content"),
+            prUrl,
+            prNumber,
+            validatedHeadSha: headSha,
+            blockedCategory: "unexpected-pr-content",
+            requiresGitHubIntervention: true,
+        });
+    }
+    if (scenario.workflowContentMismatch) {
+        return baseResult({
+            input: input.finalizeInput,
+            targetRepoSlug,
+            branchName,
+            lifecycle: "blocked",
+            workflowStatus,
+            message: blockedCategoryMessage("unexpected-pr-content"),
+            prUrl,
+            prNumber,
+            validatedHeadSha: headSha,
+            blockedCategory: "unexpected-pr-content",
+            requiresGitHubIntervention: true,
+        });
+    }
+    if (scenario.alreadyMerged) {
+        runtime.verificationPollCount += 1;
+        const lagSteps = scenario.verificationLagSteps ?? 0;
+        if (runtime.verificationPollCount > lagSteps) {
+            input.onProductionWorkflowUpdate?.(input.intendedWorkflowContent);
+            runtimeByKey.delete(runtimeKey(targetRepoSlug, input.finalizeInput.repoConfigId));
+            return baseResult({
+                input: input.finalizeInput,
+                targetRepoSlug,
+                branchName,
+                lifecycle: "complete",
+                workflowStatus: "present",
+                message: "Workflow installed on the production branch.",
+                prUrl,
+                prNumber,
+            });
+        }
+        return baseResult({
+            input: input.finalizeInput,
+            targetRepoSlug,
+            branchName,
+            lifecycle: "verifying",
+            workflowStatus,
+            message: "Verifying workflow on the production branch.",
+            prUrl,
+            prNumber,
+            canRetry: true,
+        });
+    }
+    if (scenario.checks === "failing") {
+        return baseResult({
+            input: input.finalizeInput,
+            targetRepoSlug,
+            branchName,
+            lifecycle: "blocked",
+            workflowStatus,
+            message: blockedCategoryMessage("checks-failing"),
+            prUrl,
+            prNumber,
+            validatedHeadSha: headSha,
+            blockedCategory: "checks-failing",
+            requiresGitHubIntervention: true,
+        });
+    }
+    if (scenario.checks === "pending") {
+        runtime.checksPollCount += 1;
+        if (runtime.checksPollCount < 2) {
+            return baseResult({
+                input: input.finalizeInput,
+                targetRepoSlug,
+                branchName,
+                lifecycle: "waiting-for-checks",
+                workflowStatus,
+                message: blockedCategoryMessage("checks-pending"),
+                prUrl,
+                prNumber,
+                validatedHeadSha: headSha,
+                blockedCategory: "checks-pending",
+            });
+        }
+    }
+    if (scenario.mergeableState === "unknown") {
+        return baseResult({
+            input: input.finalizeInput,
+            targetRepoSlug,
+            branchName,
+            lifecycle: "waiting-for-checks",
+            workflowStatus,
+            message: blockedCategoryMessage("mergeability-pending"),
+            prUrl,
+            prNumber,
+            validatedHeadSha: headSha,
+            blockedCategory: "mergeability-pending",
+        });
+    }
+    if (scenario.mergeableState === "behind") {
+        if (runtime.branchUpdateAttempts === 0) {
+            runtime.branchUpdateAttempts += 1;
+            return baseResult({
+                input: input.finalizeInput,
+                targetRepoSlug,
+                branchName,
+                lifecycle: "updating-branch",
+                workflowStatus,
+                message: blockedCategoryMessage("branch-behind"),
+                prUrl,
+                prNumber,
+                validatedHeadSha: headSha,
+            });
+        }
+        scenario.mergeableState = "clean";
+    }
+    if (scenario.mergeableState === "dirty") {
+        return baseResult({
+            input: input.finalizeInput,
+            targetRepoSlug,
+            branchName,
+            lifecycle: "blocked",
+            workflowStatus,
+            message: blockedCategoryMessage("merge-conflict"),
+            prUrl,
+            prNumber,
+            validatedHeadSha: headSha,
+            blockedCategory: "merge-conflict",
+            requiresGitHubIntervention: true,
+        });
+    }
+    if (scenario.mergeableState === "blocked") {
+        return baseResult({
+            input: input.finalizeInput,
+            targetRepoSlug,
+            branchName,
+            lifecycle: "blocked",
+            workflowStatus,
+            message: blockedCategoryMessage("review-required"),
+            prUrl,
+            prNumber,
+            validatedHeadSha: headSha,
+            blockedCategory: "review-required",
+            requiresGitHubIntervention: true,
+        });
+    }
+    runtime.lastValidatedHeadSha = headSha;
+    const mergeHeadSha = scenario.headShaChangesAfterValidation
+        ? "changed-head-sha"
+        : headSha;
+    if (runtime.mergeAttempts === 0) {
+        runtime.mergeAttempts += 1;
+        if (scenario.mergeResult === "permission-denied") {
+            return baseResult({
+                input: input.finalizeInput,
+                targetRepoSlug,
+                branchName,
+                lifecycle: "blocked",
+                workflowStatus,
+                message: blockedCategoryMessage("permission-denied"),
+                prUrl,
+                prNumber,
+                validatedHeadSha: headSha,
+                blockedCategory: "permission-denied",
+                requiresGitHubIntervention: true,
+            });
+        }
+        if (scenario.mergeResult === "review-required") {
+            return baseResult({
+                input: input.finalizeInput,
+                targetRepoSlug,
+                branchName,
+                lifecycle: "blocked",
+                workflowStatus,
+                message: blockedCategoryMessage("review-required"),
+                prUrl,
+                prNumber,
+                validatedHeadSha: headSha,
+                blockedCategory: "review-required",
+                requiresGitHubIntervention: true,
+            });
+        }
+        if (scenario.mergeResult === "conflict") {
+            return baseResult({
+                input: input.finalizeInput,
+                targetRepoSlug,
+                branchName,
+                lifecycle: "blocked",
+                workflowStatus,
+                message: blockedCategoryMessage("merge-conflict"),
+                prUrl,
+                prNumber,
+                validatedHeadSha: headSha,
+                blockedCategory: "merge-conflict",
+                requiresGitHubIntervention: true,
+            });
+        }
+        if (scenario.headShaChangesAfterValidation && mergeHeadSha !== headSha) {
+            return baseResult({
+                input: input.finalizeInput,
+                targetRepoSlug,
+                branchName,
+                lifecycle: "waiting-for-checks",
+                workflowStatus,
+                message: blockedCategoryMessage("mergeability-pending"),
+                prUrl,
+                prNumber,
+                validatedHeadSha: mergeHeadSha,
+                blockedCategory: "mergeability-pending",
+            });
+        }
+        runtime.verificationPollCount += 1;
+        const lagSteps = scenario.verificationLagSteps ?? 0;
+        if (runtime.verificationPollCount > lagSteps) {
+            const mergedContent = scenario.productionWorkflowAfterMerge ?? input.intendedWorkflowContent;
+            input.onProductionWorkflowUpdate?.(mergedContent);
+            if (mergedContent === input.intendedWorkflowContent) {
+                runtimeByKey.delete(runtimeKey(targetRepoSlug, input.finalizeInput.repoConfigId));
+                return baseResult({
+                    input: input.finalizeInput,
+                    targetRepoSlug,
+                    branchName,
+                    lifecycle: "complete",
+                    workflowStatus: "present",
+                    message: "Workflow installed on the production branch.",
+                    prUrl,
+                    prNumber,
+                    validatedHeadSha: headSha,
+                });
+            }
+            return baseResult({
+                input: input.finalizeInput,
+                targetRepoSlug,
+                branchName,
+                lifecycle: "blocked",
+                workflowStatus: "differs",
+                message: blockedCategoryMessage("verification-failed"),
+                prUrl,
+                prNumber,
+                validatedHeadSha: headSha,
+                blockedCategory: "verification-failed",
+                canRetry: true,
+                requiresGitHubIntervention: true,
+            });
+        }
+        return baseResult({
+            input: input.finalizeInput,
+            targetRepoSlug,
+            branchName,
+            lifecycle: "verifying",
+            workflowStatus,
+            message: "Verifying workflow on the production branch.",
+            prUrl,
+            prNumber,
+            validatedHeadSha: headSha,
+            canRetry: true,
+        });
+    }
+    return baseResult({
+        input: input.finalizeInput,
+        targetRepoSlug,
+        branchName,
+        lifecycle: "merging",
+        workflowStatus,
+        message: "Waiting for workflow install PR merge to complete.",
+        prUrl,
+        prNumber,
+        validatedHeadSha: headSha,
+        advancedThisRequest: false,
+    });
+}
+//# sourceMappingURL=mock-target-workflow-finalization.js.map

package/dist/setup/mock-target-workflow-finalization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-target-workflow-finalization.js","sourceRoot":"","sources":["../../src/setup/mock-target-workflow-finalization.ts"],"names":[],"mappings":"AACA,OAAO,EACL,6BAA6B,GAC9B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAOlE,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAyB5E,MAAM,YAAY,GAAG,IAAI,GAAG,EAAwC,CAAC;AAErE,SAAS,UAAU,CAAC,cAAsB,EAAE,YAAoB;IAC9D,OAAO,GAAG,cAAc,IAAI,YAAY,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG;QACd,eAAe,EAAE,CAAC;QAClB,qBAAqB,EAAE,CAAC;QACxB,aAAa,EAAE,CAAC;QAChB,oBAAoB,EAAE,CAAC;KACxB,CAAC;IACF,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,oCAAoC;IAClD,YAAY,CAAC,KAAK,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,UAAU,CAAC,KAcnB;IACC,OAAO;QACL,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY;QACtC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU;QAClC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB;QAC9C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK;QACjC,0BAA0B,EAAE,KAAK,CAAC,0BAA0B,IAAI,KAAK;QACrE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,IAAI,IAAI;QACtD,aAAa,EAAE,KAAK;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,KAMrD;IACC,MAAM,cAAc,GAAG,qBAAqB,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IAC7E,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,UAAU,CAAC;YAChB,KAAK,EAAE,KAAK,CAAC,aAAa;YAC1B,cAAc,EAAE,WAAW;YAC3B,UAAU,EAAE,6BAA6B,CAAC,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC;YAC3E,SAAS,EAAE,SAAS;YACpB,cAAc,EAAE,SAAS;YACzB,OAAO,EAAE,0BAA0B;YACnC,eAAe,EAAE,uBAAuB;YACxC,0BAA0B,EAAE,IAAI;SACjC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GACd,KAAK,CAAC,aAAa,CAAC,UAAU;QAC9B,6BAA6B,CAAC,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,UAAU,CACxB,UAAU,CAAC,cAAc,EAAE,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC,CAC7D,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,CAAC,uBAAuB,CAAC;IAC/C,IAAI,cAAc,GAAyB,SAAS,CAAC;IACrD,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChD,cAAc,GAAG,SAAS,CAAC;IAC7B,CAAC;SAAM,IAAI,QAAQ,KAAK,KAAK,CAAC,uBAAuB,EAAE,CAAC;QACtD,cAAc,GAAG,SAAS,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,cAAc,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,EAAE,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC;QAClF,OAAO,UAAU,CAAC;YAChB,KAAK,EAAE,KAAK,CAAC,aAAa;YAC1B,cAAc;YACd,UAAU;YACV,SAAS,EAAE,UAAU;YACrB,cAAc,EAAE,SAAS;YACzB,OAAO,EAAE,8CAA8C;SACxD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,KAAK,GACT,KAAK,CAAC,aAAa,CAAC,KAAK;QACzB,QAAQ,CAAC,KAAK;QACd,sBAAsB,cAAc,SAAS,QAAQ,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;IACxE,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,IAAI,eAAe,CAAC;IAEpD,IAAI,QAAQ,CAAC,mBAAmB,EAAE,CAAC;QACjC,OAAO,UAAU,CAAC;YAChB,KAAK,EAAE,KAAK,CAAC,aAAa;YAC1B,cAAc;YACd,UAAU;YACV,SAAS,EAAE,SAAS;YACpB,cAAc;YACd,OAAO,EAAE,sBAAsB,CAAC,uBAAuB,CAAC;YACxD,KAAK;YACL,QAAQ;YACR,gBAAgB,EAAE,OAAO;YACzB,eAAe,EAAE,uBAAuB;YACxC,0BAA0B,EAAE,IAAI;SACjC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,uBAAuB,EAAE,CAAC;QACrC,OAAO,UAAU,CAAC;YAChB,KAAK,EAAE,KAAK,CAAC,aAAa;YAC1B,cAAc;YACd,UAAU;YACV,SAAS,EAAE,SAAS;YACpB,cAAc;YACd,OAAO,EAAE,sBAAsB,CAAC,uBAAuB,CAAC;YACxD,KAAK;YACL,QAAQ;YACR,gBAAgB,EAAE,OAAO;YACzB,eAAe,EAAE,uBAAuB;YACxC,0BAA0B,EAAE,IAAI;SACjC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC3B,OAAO,CAAC,qBAAqB,IAAI,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,QAAQ,CAAC,oBAAoB,IAAI,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,qBAAqB,GAAG,QAAQ,EAAE,CAAC;YAC7C,KAAK,CAAC,0BAA0B,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAClE,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,EAAE,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC;YAClF,OAAO,UAAU,CAAC;gBAChB,KAAK,EAAE,KAAK,CAAC,aAAa;gBAC1B,cAAc;gBACd,UAAU;gBACV,SAAS,EAAE,UAAU;gBACrB,cAAc,EAAE,SAAS;gBACzB,OAAO,EAAE,8CAA8C;gBACvD,KAAK;gBACL,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QACD,OAAO,UAAU,CAAC;YAChB,KAAK,EAAE,KAAK,CAAC,aAAa;YAC1B,cAAc;YACd,UAAU;YACV,SAAS,EAAE,WAAW;YACtB,cAAc;YACd,OAAO,EAAE,8CAA8C;YACvD,KAAK;YACL,QAAQ;YACR,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,UAAU,CAAC;YAChB,KAAK,EAAE,KAAK,CAAC,aAAa;YAC1B,cAAc;YACd,UAAU;YACV,SAAS,EAAE,SAAS;YACpB,cAAc;YACd,OAAO,EAAE,sBAAsB,CAAC,gBAAgB,CAAC;YACjD,KAAK;YACL,QAAQ;YACR,gBAAgB,EAAE,OAAO;YACzB,eAAe,EAAE,gBAAgB;YACjC,0BAA0B,EAAE,IAAI;SACjC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,CAAC,eAAe,IAAI,CAAC,CAAC;QAC7B,IAAI,OAAO,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO,UAAU,CAAC;gBAChB,KAAK,EAAE,KAAK,CAAC,aAAa;gBAC1B,cAAc;gBACd,UAAU;gBACV,SAAS,EAAE,oBAAoB;gBAC/B,cAAc;gBACd,OAAO,EAAE,sBAAsB,CAAC,gBAAgB,CAAC;gBACjD,KAAK;gBACL,QAAQ;gBACR,gBAAgB,EAAE,OAAO;gBACzB,eAAe,EAAE,gBAAgB;aAClC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,UAAU,CAAC;YAChB,KAAK,EAAE,KAAK,CAAC,aAAa;YAC1B,cAAc;YACd,UAAU;YACV,SAAS,EAAE,oBAAoB;YAC/B,cAAc;YACd,OAAO,EAAE,sBAAsB,CAAC,sBAAsB,CAAC;YACvD,KAAK;YACL,QAAQ;YACR,gBAAgB,EAAE,OAAO;YACzB,eAAe,EAAE,sBAAsB;SACxC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,oBAAoB,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO,CAAC,oBAAoB,IAAI,CAAC,CAAC;YAClC,OAAO,UAAU,CAAC;gBAChB,KAAK,EAAE,KAAK,CAAC,aAAa;gBAC1B,cAAc;gBACd,UAAU;gBACV,SAAS,EAAE,iBAAiB;gBAC5B,cAAc;gBACd,OAAO,EAAE,sBAAsB,CAAC,eAAe,CAAC;gBAChD,KAAK;gBACL,QAAQ;gBACR,gBAAgB,EAAE,OAAO;aAC1B,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,CAAC,cAAc,GAAG,OAAO,CAAC;IACpC,CAAC;IAED,IAAI,QAAQ,CAAC,cAAc,KAAK,OAAO,EAAE,CAAC;QACxC,OAAO,UAAU,CAAC;YAChB,KAAK,EAAE,KAAK,CAAC,aAAa;YAC1B,cAAc;YACd,UAAU;YACV,SAAS,EAAE,SAAS;YACpB,cAAc;YACd,OAAO,EAAE,sBAAsB,CAAC,gBAAgB,CAAC;YACjD,KAAK;YACL,QAAQ;YACR,gBAAgB,EAAE,OAAO;YACzB,eAAe,EAAE,gBAAgB;YACjC,0BAA0B,EAAE,IAAI;SACjC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,UAAU,CAAC;YAChB,KAAK,EAAE,KAAK,CAAC,aAAa;YAC1B,cAAc;YACd,UAAU;YACV,SAAS,EAAE,SAAS;YACpB,cAAc;YACd,OAAO,EAAE,sBAAsB,CAAC,iBAAiB,CAAC;YAClD,KAAK;YACL,QAAQ;YACR,gBAAgB,EAAE,OAAO;YACzB,eAAe,EAAE,iBAAiB;YAClC,0BAA0B,EAAE,IAAI;SACjC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC;IACvC,MAAM,YAAY,GAAG,QAAQ,CAAC,6BAA6B;QACzD,CAAC,CAAC,kBAAkB;QACpB,CAAC,CAAC,OAAO,CAAC;IAEZ,IAAI,OAAO,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,aAAa,IAAI,CAAC,CAAC;QAC3B,IAAI,QAAQ,CAAC,WAAW,KAAK,mBAAmB,EAAE,CAAC;YACjD,OAAO,UAAU,CAAC;gBAChB,KAAK,EAAE,KAAK,CAAC,aAAa;gBAC1B,cAAc;gBACd,UAAU;gBACV,SAAS,EAAE,SAAS;gBACpB,cAAc;gBACd,OAAO,EAAE,sBAAsB,CAAC,mBAAmB,CAAC;gBACpD,KAAK;gBACL,QAAQ;gBACR,gBAAgB,EAAE,OAAO;gBACzB,eAAe,EAAE,mBAAmB;gBACpC,0BAA0B,EAAE,IAAI;aACjC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,QAAQ,CAAC,WAAW,KAAK,iBAAiB,EAAE,CAAC;YAC/C,OAAO,UAAU,CAAC;gBAChB,KAAK,EAAE,KAAK,CAAC,aAAa;gBAC1B,cAAc;gBACd,UAAU;gBACV,SAAS,EAAE,SAAS;gBACpB,cAAc;gBACd,OAAO,EAAE,sBAAsB,CAAC,iBAAiB,CAAC;gBAClD,KAAK;gBACL,QAAQ;gBACR,gBAAgB,EAAE,OAAO;gBACzB,eAAe,EAAE,iBAAiB;gBAClC,0BAA0B,EAAE,IAAI;aACjC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,QAAQ,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YACxC,OAAO,UAAU,CAAC;gBAChB,KAAK,EAAE,KAAK,CAAC,aAAa;gBAC1B,cAAc;gBACd,UAAU;gBACV,SAAS,EAAE,SAAS;gBACpB,cAAc;gBACd,OAAO,EAAE,sBAAsB,CAAC,gBAAgB,CAAC;gBACjD,KAAK;gBACL,QAAQ;gBACR,gBAAgB,EAAE,OAAO;gBACzB,eAAe,EAAE,gBAAgB;gBACjC,0BAA0B,EAAE,IAAI;aACjC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,QAAQ,CAAC,6BAA6B,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;YACvE,OAAO,UAAU,CAAC;gBAChB,KAAK,EAAE,KAAK,CAAC,aAAa;gBAC1B,cAAc;gBACd,UAAU;gBACV,SAAS,EAAE,oBAAoB;gBAC/B,cAAc;gBACd,OAAO,EAAE,sBAAsB,CAAC,sBAAsB,CAAC;gBACvD,KAAK;gBACL,QAAQ;gBACR,gBAAgB,EAAE,YAAY;gBAC9B,eAAe,EAAE,sBAAsB;aACxC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,CAAC,qBAAqB,IAAI,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,QAAQ,CAAC,oBAAoB,IAAI,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,qBAAqB,GAAG,QAAQ,EAAE,CAAC;YAC7C,MAAM,aAAa,GACjB,QAAQ,CAAC,4BAA4B,IAAI,KAAK,CAAC,uBAAuB,CAAC;YACzE,KAAK,CAAC,0BAA0B,EAAE,CAAC,aAAa,CAAC,CAAC;YAClD,IAAI,aAAa,KAAK,KAAK,CAAC,uBAAuB,EAAE,CAAC;gBACpD,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,EAAE,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC;gBAClF,OAAO,UAAU,CAAC;oBAChB,KAAK,EAAE,KAAK,CAAC,aAAa;oBAC1B,cAAc;oBACd,UAAU;oBACV,SAAS,EAAE,UAAU;oBACrB,cAAc,EAAE,SAAS;oBACzB,OAAO,EAAE,8CAA8C;oBACvD,KAAK;oBACL,QAAQ;oBACR,gBAAgB,EAAE,OAAO;iBAC1B,CAAC,CAAC;YACL,CAAC;YACD,OAAO,UAAU,CAAC;gBAChB,KAAK,EAAE,KAAK,CAAC,aAAa;gBAC1B,cAAc;gBACd,UAAU;gBACV,SAAS,EAAE,SAAS;gBACpB,cAAc,EAAE,SAAS;gBACzB,OAAO,EAAE,sBAAsB,CAAC,qBAAqB,CAAC;gBACtD,KAAK;gBACL,QAAQ;gBACR,gBAAgB,EAAE,OAAO;gBACzB,eAAe,EAAE,qBAAqB;gBACtC,QAAQ,EAAE,IAAI;gBACd,0BAA0B,EAAE,IAAI;aACjC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,UAAU,CAAC;YAChB,KAAK,EAAE,KAAK,CAAC,aAAa;YAC1B,cAAc;YACd,UAAU;YACV,SAAS,EAAE,WAAW;YACtB,cAAc;YACd,OAAO,EAAE,8CAA8C;YACvD,KAAK;YACL,QAAQ;YACR,gBAAgB,EAAE,OAAO;YACzB,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;QAChB,KAAK,EAAE,KAAK,CAAC,aAAa;QAC1B,cAAc;QACd,UAAU;QACV,SAAS,EAAE,SAAS;QACpB,cAAc;QACd,OAAO,EAAE,oDAAoD;QAC7D,KAAK;QACL,QAAQ;QACR,gBAAgB,EAAE,OAAO;QACzB,mBAAmB,EAAE,KAAK;KAC3B,CAAC,CAAC;AACL,CAAC"}

package/dist/setup/model-settings.d.ts

@@ -0,0 +1,17 @@
+import type { HarnessConfig } from "../config/types.js";
+export type CursorModelConfigSource = "agentProvider.model.id" | "defaultModel.id" | "code-default";
+export interface CursorModelSettingsSummary {
+    providerId: "cursor";
+    resolvedModelId: string;
+    configuredModelId?: string;
+    source: CursorModelConfigSource;
+    pinnedParams: ReadonlyArray<{
+        id: string;
+        value: string;
+    }>;
+    paramsControlledInCode: boolean;
+    policyNote: string;
+}
+export declare function summarizeCursorModelSettings(config?: HarnessConfig): CursorModelSettingsSummary;
+export declare function defaultCursorModelIdForSetup(): string;
+//# sourceMappingURL=model-settings.d.ts.map

package/dist/setup/model-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-settings.d.ts","sourceRoot":"","sources":["../../src/setup/model-settings.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAQxD,MAAM,MAAM,uBAAuB,GAC/B,wBAAwB,GACxB,iBAAiB,GACjB,cAAc,CAAC;AAEnB,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,QAAQ,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,uBAAuB,CAAC;IAChC,YAAY,EAAE,aAAa,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3D,sBAAsB,EAAE,OAAO,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,4BAA4B,CAC1C,MAAM,CAAC,EAAE,aAAa,GACrB,0BAA0B,CA0B5B;AAED,wBAAgB,4BAA4B,IAAI,MAAM,CAErD"}

package/dist/setup/model-settings.js

@@ -0,0 +1,46 @@
+import { DEFAULT_MODEL_ID } from "../config/defaults.js";
+import { resolveModel, resolveModelId, STANDARD_MODEL_PARAMS, } from "../cursor/model.js";
+export function summarizeCursorModelSettings(config) {
+    const resolvedConfig = config ?? emptyConfig();
+    const resolvedModelId = resolveModelId(resolvedConfig);
+    const resolvedModel = resolveModel(resolvedConfig);
+    let source = "code-default";
+    let configuredModelId;
+    if (resolvedConfig.agentProvider?.model?.id) {
+        source = "agentProvider.model.id";
+        configuredModelId = resolvedConfig.agentProvider.model.id;
+    }
+    else if (resolvedConfig.defaultModel?.id) {
+        source = "defaultModel.id";
+        configuredModelId = resolvedConfig.defaultModel.id;
+    }
+    return {
+        providerId: "cursor",
+        resolvedModelId,
+        configuredModelId,
+        source,
+        pinnedParams: resolvedModel.params ?? [...STANDARD_MODEL_PARAMS],
+        paramsControlledInCode: true,
+        policyNote: "Model ids are Cursor cloud agent selections. fast:false is pinned in code for cost control and is not user-editable in config.",
+    };
+}
+export function defaultCursorModelIdForSetup() {
+    return DEFAULT_MODEL_ID;
+}
+function emptyConfig() {
+    return {
+        version: 1,
+        orchestratorMarker: "harness-orchestrator-v1",
+        logDirectory: "runs",
+        repos: [
+            {
+                id: "target-app",
+                targetRepo: "https://github.com/owner/example-target-app",
+                baseBranch: "main",
+                productionBranch: "main",
+            },
+        ],
+        allowedTargetRepos: ["https://github.com/owner/example-target-app"],
+    };
+}
+//# sourceMappingURL=model-settings.js.map

package/dist/setup/model-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-settings.js","sourceRoot":"","sources":["../../src/setup/model-settings.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EACL,YAAY,EACZ,cAAc,EACd,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAiB5B,MAAM,UAAU,4BAA4B,CAC1C,MAAsB;IAEtB,MAAM,cAAc,GAAG,MAAM,IAAI,WAAW,EAAE,CAAC;IAC/C,MAAM,eAAe,GAAG,cAAc,CAAC,cAAc,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;IAEnD,IAAI,MAAM,GAA4B,cAAc,CAAC;IACrD,IAAI,iBAAqC,CAAC;IAE1C,IAAI,cAAc,CAAC,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC5C,MAAM,GAAG,wBAAwB,CAAC;QAClC,iBAAiB,GAAG,cAAc,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;IAC5D,CAAC;SAAM,IAAI,cAAc,CAAC,YAAY,EAAE,EAAE,EAAE,CAAC;QAC3C,MAAM,GAAG,iBAAiB,CAAC;QAC3B,iBAAiB,GAAG,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;IACrD,CAAC;IAED,OAAO;QACL,UAAU,EAAE,QAAQ;QACpB,eAAe;QACf,iBAAiB;QACjB,MAAM;QACN,YAAY,EAAE,aAAa,CAAC,MAAM,IAAI,CAAC,GAAG,qBAAqB,CAAC;QAChE,sBAAsB,EAAE,IAAI;QAC5B,UAAU,EACR,gIAAgI;KACnI,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC1C,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,SAAS,WAAW;IAClB,OAAO;QACL,OAAO,EAAE,CAAC;QACV,kBAAkB,EAAE,yBAAyB;QAC7C,YAAY,EAAE,MAAM;QACpB,KAAK,EAAE;YACL;gBACE,EAAE,EAAE,YAAY;gBAChB,UAAU,EAAE,6CAA6C;gBACzD,UAAU,EAAE,MAAM;gBAClB,gBAAgB,EAAE,MAAM;aACzB;SACF;QACD,kBAAkB,EAAE,CAAC,6CAA6C,CAAC;KACpE,CAAC;AACJ,CAAC"}

package/dist/setup/permission-model.d.ts

@@ -0,0 +1,46 @@
+export type SetupPermissionScope = "read-only" | "local-file-write" | "remote-read" | "remote-secret-write" | "remote-repo-write" | "cloud-workflow-trigger" | "linear-write";
+export type SetupConfirmationLevel = "none" | "standard" | "strong" | "high-risk";
+export interface SetupPermission {
+    scope: SetupPermissionScope;
+    confirmation: SetupConfirmationLevel;
+    manualAlternative: boolean;
+}
+export declare const SETUP_PERMISSIONS: {
+    readonly readOnly: {
+        readonly scope: "read-only";
+        readonly confirmation: "none";
+        readonly manualAlternative: false;
+    };
+    readonly localFileWrite: {
+        readonly scope: "local-file-write";
+        readonly confirmation: "standard";
+        readonly manualAlternative: true;
+    };
+    readonly remoteRead: {
+        readonly scope: "remote-read";
+        readonly confirmation: "standard";
+        readonly manualAlternative: true;
+    };
+    readonly remoteSecretWrite: {
+        readonly scope: "remote-secret-write";
+        readonly confirmation: "strong";
+        readonly manualAlternative: true;
+    };
+    readonly remoteRepoWrite: {
+        readonly scope: "remote-repo-write";
+        readonly confirmation: "strong";
+        readonly manualAlternative: true;
+    };
+    readonly cloudWorkflowTrigger: {
+        readonly scope: "cloud-workflow-trigger";
+        readonly confirmation: "strong";
+        readonly manualAlternative: true;
+    };
+    readonly linearWrite: {
+        readonly scope: "linear-write";
+        readonly confirmation: "high-risk";
+        readonly manualAlternative: true;
+    };
+};
+export declare function classifySetupPermission(scope: SetupPermissionScope): SetupPermission;
+//# sourceMappingURL=permission-model.d.ts.map

package/dist/setup/permission-model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-model.d.ts","sourceRoot":"","sources":["../../src/setup/permission-model.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oBAAoB,GAC5B,WAAW,GACX,kBAAkB,GAClB,aAAa,GACb,qBAAqB,GACrB,mBAAmB,GACnB,wBAAwB,GACxB,cAAc,CAAC;AAEnB,MAAM,MAAM,sBAAsB,GAC9B,MAAM,GACN,UAAU,GACV,QAAQ,GACR,WAAW,CAAC;AAEhB,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,oBAAoB,CAAC;IAC5B,YAAY,EAAE,sBAAsB,CAAC;IACrC,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoCsB,CAAC;AAErD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,oBAAoB,GAC1B,eAAe,CAiBjB"}

package/dist/setup/permission-model.js

@@ -0,0 +1,56 @@
+export const SETUP_PERMISSIONS = {
+    readOnly: {
+        scope: "read-only",
+        confirmation: "none",
+        manualAlternative: false,
+    },
+    localFileWrite: {
+        scope: "local-file-write",
+        confirmation: "standard",
+        manualAlternative: true,
+    },
+    remoteRead: {
+        scope: "remote-read",
+        confirmation: "standard",
+        manualAlternative: true,
+    },
+    remoteSecretWrite: {
+        scope: "remote-secret-write",
+        confirmation: "strong",
+        manualAlternative: true,
+    },
+    remoteRepoWrite: {
+        scope: "remote-repo-write",
+        confirmation: "strong",
+        manualAlternative: true,
+    },
+    cloudWorkflowTrigger: {
+        scope: "cloud-workflow-trigger",
+        confirmation: "strong",
+        manualAlternative: true,
+    },
+    linearWrite: {
+        scope: "linear-write",
+        confirmation: "high-risk",
+        manualAlternative: true,
+    },
+};
+export function classifySetupPermission(scope) {
+    switch (scope) {
+        case "read-only":
+            return SETUP_PERMISSIONS.readOnly;
+        case "local-file-write":
+            return SETUP_PERMISSIONS.localFileWrite;
+        case "remote-read":
+            return SETUP_PERMISSIONS.remoteRead;
+        case "remote-secret-write":
+            return SETUP_PERMISSIONS.remoteSecretWrite;
+        case "remote-repo-write":
+            return SETUP_PERMISSIONS.remoteRepoWrite;
+        case "cloud-workflow-trigger":
+            return SETUP_PERMISSIONS.cloudWorkflowTrigger;
+        case "linear-write":
+            return SETUP_PERMISSIONS.linearWrite;
+    }
+}
+//# sourceMappingURL=permission-model.js.map

package/dist/setup/permission-model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-model.js","sourceRoot":"","sources":["../../src/setup/permission-model.ts"],"names":[],"mappings":"AAqBA,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,QAAQ,EAAE;QACR,KAAK,EAAE,WAAW;QAClB,YAAY,EAAE,MAAM;QACpB,iBAAiB,EAAE,KAAK;KACzB;IACD,cAAc,EAAE;QACd,KAAK,EAAE,kBAAkB;QACzB,YAAY,EAAE,UAAU;QACxB,iBAAiB,EAAE,IAAI;KACxB;IACD,UAAU,EAAE;QACV,KAAK,EAAE,aAAa;QACpB,YAAY,EAAE,UAAU;QACxB,iBAAiB,EAAE,IAAI;KACxB;IACD,iBAAiB,EAAE;QACjB,KAAK,EAAE,qBAAqB;QAC5B,YAAY,EAAE,QAAQ;QACtB,iBAAiB,EAAE,IAAI;KACxB;IACD,eAAe,EAAE;QACf,KAAK,EAAE,mBAAmB;QAC1B,YAAY,EAAE,QAAQ;QACtB,iBAAiB,EAAE,IAAI;KACxB;IACD,oBAAoB,EAAE;QACpB,KAAK,EAAE,wBAAwB;QAC/B,YAAY,EAAE,QAAQ;QACtB,iBAAiB,EAAE,IAAI;KACxB;IACD,WAAW,EAAE;QACX,KAAK,EAAE,cAAc;QACrB,YAAY,EAAE,WAAW;QACzB,iBAAiB,EAAE,IAAI;KACxB;CACiD,CAAC;AAErD,MAAM,UAAU,uBAAuB,CACrC,KAA2B;IAE3B,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,WAAW;YACd,OAAO,iBAAiB,CAAC,QAAQ,CAAC;QACpC,KAAK,kBAAkB;YACrB,OAAO,iBAAiB,CAAC,cAAc,CAAC;QAC1C,KAAK,aAAa;YAChB,OAAO,iBAAiB,CAAC,UAAU,CAAC;QACtC,KAAK,qBAAqB;YACxB,OAAO,iBAAiB,CAAC,iBAAiB,CAAC;QAC7C,KAAK,mBAAmB;YACtB,OAAO,iBAAiB,CAAC,eAAe,CAAC;QAC3C,KAAK,wBAAwB;YAC3B,OAAO,iBAAiB,CAAC,oBAAoB,CAAC;QAChD,KAAK,cAAc;YACjB,OAAO,iBAAiB,CAAC,WAAW,CAAC;IACzC,CAAC;AACH,CAAC"}

package/dist/setup/redact-secrets.d.ts

@@ -0,0 +1,17 @@
+import type { SetupActionResult } from "./setup-actions.js";
+export declare function redactSecretEnvContent(content: string): string;
+export declare function redactKnownSecretValues(text: string, secrets: readonly string[]): string;
+export declare function collectEnvInputSecrets(input?: {
+    linearApiKey?: string;
+    cursorApiKey?: string;
+    githubToken?: string;
+    vercelToken?: string;
+}): string[];
+export declare function collectRemoteSecretInputs(input?: {
+    linearApiKey?: string;
+    cursorApiKey?: string;
+    githubToken?: string;
+    harnessConfigJsonB64?: string;
+}): string[];
+export declare function sanitizeSetupActionResult(result: SetupActionResult, knownSecrets?: readonly string[]): SetupActionResult;
+//# sourceMappingURL=redact-secrets.d.ts.map

package/dist/setup/redact-secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-secrets.d.ts","sourceRoot":"","sources":["../../src/setup/redact-secrets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAkB5D,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAM9D;AAED,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,SAAS,MAAM,EAAE,GACzB,MAAM,CASR;AAED,wBAAgB,sBAAsB,CAAC,KAAK,CAAC,EAAE;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,MAAM,EAAE,CAOX;AAED,wBAAgB,yBAAyB,CAAC,KAAK,CAAC,EAAE;IAChD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B,GAAG,MAAM,EAAE,CAOX;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,iBAAiB,EACzB,YAAY,GAAE,SAAS,MAAM,EAAO,GACnC,iBAAiB,CAanB"}

package/dist/setup/redact-secrets.js

@@ -0,0 +1,51 @@
+const SECRET_ENV_KEYS = [
+    "LINEAR_API_KEY",
+    "CURSOR_API_KEY",
+    "GITHUB_TOKEN",
+    "VERCEL_TOKEN",
+    "HARNESS_GITHUB_TOKEN",
+    "HARNESS_CONFIG_JSON_B64",
+    "LINEAR_WEBHOOK_SECRET",
+    "GITHUB_DISPATCH_TOKEN",
+];
+const SECRET_ASSIGNMENT_PATTERN = new RegExp(`^(${SECRET_ENV_KEYS.join("|")})=(.*)$`, "gm");
+export function redactSecretEnvContent(content) {
+    return content.replace(SECRET_ASSIGNMENT_PATTERN, (_match, key, value) => value.length > 0 ? `${key}=<redacted>` : `${key}=`);
+}
+export function redactKnownSecretValues(text, secrets) {
+    let redacted = text;
+    for (const secret of secrets) {
+        if (!secret) {
+            continue;
+        }
+        redacted = redacted.split(secret).join("<redacted>");
+    }
+    return redacted;
+}
+export function collectEnvInputSecrets(input) {
+    return [
+        input?.linearApiKey,
+        input?.cursorApiKey,
+        input?.githubToken,
+        input?.vercelToken,
+    ].filter((value) => Boolean(value));
+}
+export function collectRemoteSecretInputs(input) {
+    return [
+        input?.linearApiKey,
+        input?.cursorApiKey,
+        input?.githubToken,
+        input?.harnessConfigJsonB64,
+    ].filter((value) => Boolean(value));
+}
+export function sanitizeSetupActionResult(result, knownSecrets = []) {
+    const redactText = (text) => redactKnownSecretValues(redactSecretEnvContent(text), knownSecrets);
+    return {
+        ...result,
+        content: result.content ? redactText(result.content) : undefined,
+        reason: result.reason ? redactText(result.reason) : undefined,
+        logMessage: result.logMessage ? redactText(result.logMessage) : undefined,
+        manualInstructions: result.manualInstructions?.map((step) => redactText(step)),
+    };
+}
+//# sourceMappingURL=redact-secrets.js.map

package/dist/setup/redact-secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-secrets.js","sourceRoot":"","sources":["../../src/setup/redact-secrets.ts"],"names":[],"mappings":"AAEA,MAAM,eAAe,GAAG;IACtB,gBAAgB;IAChB,gBAAgB;IAChB,cAAc;IACd,cAAc;IACd,sBAAsB;IACtB,yBAAyB;IACzB,uBAAuB;IACvB,uBAAuB;CACf,CAAC;AAEX,MAAM,yBAAyB,GAAG,IAAI,MAAM,CAC1C,KAAK,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EACvC,IAAI,CACL,CAAC;AAEF,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,OAAO,OAAO,CAAC,OAAO,CACpB,yBAAyB,EACzB,CAAC,MAAM,EAAE,GAAW,EAAE,KAAa,EAAE,EAAE,CACrC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CACrD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,IAAY,EACZ,OAA0B;IAE1B,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,SAAS;QACX,CAAC;QACD,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAKtC;IACC,OAAO;QACL,KAAK,EAAE,YAAY;QACnB,KAAK,EAAE,YAAY;QACnB,KAAK,EAAE,WAAW;QAClB,KAAK,EAAE,WAAW;KACnB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAKzC;IACC,OAAO;QACL,KAAK,EAAE,YAAY;QACnB,KAAK,EAAE,YAAY;QACnB,KAAK,EAAE,WAAW;QAClB,KAAK,EAAE,oBAAoB;KAC5B,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,MAAyB,EACzB,eAAkC,EAAE;IAEpC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE,CAC1C,uBAAuB,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC;IAEtE,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QAChE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7D,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;QACzE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC1D,UAAU,CAAC,IAAI,CAAC,CACjB;KACF,CAAC;AACJ,CAAC"}