p-dev-harness 0.3.1 → 0.4.0

package/dist/cli/commands/resolve-route.js

@@ -1,4 +1,5 @@
 import { EXIT_CONFIG, EXIT_PLANNING_FAILURE, EXIT_RUN_FAILURE } from "../exit-codes.js";
+import { CloudConfigStaleError } from "../../config/assert-cloud-config-fingerprint.js";
 import { isDispatchPhase } from "../../runner/phase-args.js";
 import { resolveRoute, LinearAuthError } from "../../runner/resolve-route.js";
 import { ResolverError } from "../../resolver/errors.js";
@@ -52,6 +53,10 @@ export async function runResolveRouteCommand(options) {
         return 0;
     }
     catch (error) {
+        if (error instanceof CloudConfigStaleError) {
+            console.error(error.message);
+            return EXIT_CONFIG;
+        }
         if (error instanceof LinearAuthError) {
             console.error(error.message);
             return EXIT_PLANNING_FAILURE;

package/dist/cli/commands/resolve-route.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-route.js","sourceRoot":"","sources":["../../../src/cli/commands/resolve-route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAA6B,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACzG,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAUzD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAmC;IAEnC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC5C,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC;IACtC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,oBAAoB,KAAK,IAAI,CAAC,CAAC;QAC7C,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;YAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,KAAK;SACN,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;YAC7C,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;gBACnD,MAAM,KAAK,GAAG;oBACZ,aAAa,MAAM,CAAC,QAAQ,EAAE;oBAC9B,SAAS,MAAM,CAAC,KAAK,EAAE;oBACvB,kBAAkB,MAAM,CAAC,YAAY,EAAE;oBACvC,eAAe,MAAM,CAAC,UAAU,EAAE;oBAClC,eAAe,MAAM,CAAC,UAAU,EAAE;oBAClC,iBAAiB,MAAM,CAAC,YAAY,IAAI,EAAE,EAAE;oBAC5C,2BAA2B,MAAM,CAAC,qBAAqB,EAAE;oBACzD,cAAc,MAAM,CAAC,SAAS,EAAE;iBACjC,CAAC;gBACF,cAAc,CAAC,UAAU,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,SAAS,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,4BAA4B,MAAM,CAAC,qBAAqB,EAAE,CAAC,CAAC;YACxE,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,OAAO,CAAC,CAAC;QACX,CAAC;QAED,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;YACrC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7B,OAAO,qBAAqB,CAAC;QAC/B,CAAC;QACD,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;YACnC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7B,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACtE,OAAO,gBAAgB,CAAC;IAC1B,CAAC;AACH,CAAC"}
+{"version":3,"file":"resolve-route.js","sourceRoot":"","sources":["../../../src/cli/commands/resolve-route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,EAAE,qBAAqB,EAAE,MAAM,iDAAiD,CAAC;AACxF,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAA6B,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACzG,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAUzD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAmC;IAEnC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC5C,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC;IACtC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,oBAAoB,KAAK,IAAI,CAAC,CAAC;QAC7C,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;YAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,KAAK;SACN,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;YAC7C,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;gBACnD,MAAM,KAAK,GAAG;oBACZ,aAAa,MAAM,CAAC,QAAQ,EAAE;oBAC9B,SAAS,MAAM,CAAC,KAAK,EAAE;oBACvB,kBAAkB,MAAM,CAAC,YAAY,EAAE;oBACvC,eAAe,MAAM,CAAC,UAAU,EAAE;oBAClC,eAAe,MAAM,CAAC,UAAU,EAAE;oBAClC,iBAAiB,MAAM,CAAC,YAAY,IAAI,EAAE,EAAE;oBAC5C,2BAA2B,MAAM,CAAC,qBAAqB,EAAE;oBACzD,cAAc,MAAM,CAAC,SAAS,EAAE;iBACjC,CAAC;gBACF,cAAc,CAAC,UAAU,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,SAAS,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,4BAA4B,MAAM,CAAC,qBAAqB,EAAE,CAAC,CAAC;YACxE,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,OAAO,CAAC,CAAC;QACX,CAAC;QAED,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;YAC3C,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7B,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;YACrC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7B,OAAO,qBAAqB,CAAC;QAC/B,CAAC;QACD,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;YACnC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7B,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACtE,OAAO,gBAAgB,CAAC;IAC1B,CAAC;AACH,CAAC"}

package/dist/cli/commands/run.d.ts

@@ -5,6 +5,7 @@ export interface RunCommandOptions {
     dryRun?: boolean;
     fixturePath?: string;
     json?: boolean;
+    jsonOut?: string;
     phase?: RunPhaseArg;
     force?: boolean;
 }

package/dist/cli/commands/run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/run.ts"],"names":[],"mappings":"AACA,OAAO,EAAmB,KAAK,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAEjF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,wBAAsB,aAAa,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAuC/E"}
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/run.ts"],"names":[],"mappings":"AAMA,OAAO,EAAmB,KAAK,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAGjF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AASD,wBAAsB,aAAa,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAyE/E"}

package/dist/cli/commands/run.js

@@ -1,5 +1,10 @@
 import { EXIT_CONFIG } from "../exit-codes.js";
+import { buildFallbackRunManifest, writeJsonOutManifest, } from "../../artifacts/write-json-out-manifest.js";
+import { resolveRunGeneration } from "../../runner/run-generation.js";
 import { runOrchestrator } from "../../runner/orchestrator.js";
+async function writeRunJsonOut(jsonOut, manifest) {
+    await writeJsonOutManifest(jsonOut, manifest);
+}
 export async function runRunCommand(options) {
     if (!options.issueKey) {
         console.error("--issue <KEY> is required.");
@@ -9,19 +14,56 @@ export async function runRunCommand(options) {
         console.error("--fixture is only supported with --dry-run");
         return EXIT_CONFIG;
     }
-    const result = await runOrchestrator({
-        issueKey: options.issueKey,
-        configPath: options.configPath,
-        dryRun: options.dryRun,
-        fixturePath: options.fixturePath,
-        phase: options.dryRun ? "dry-run" : options.phase,
-        force: options.force,
-    });
-    if (options.json && result.manifest) {
-        console.log(JSON.stringify(result.manifest, null, 2));
+    const deliveryId = process.env.LINEAR_DELIVERY_ID ?? null;
+    const runGeneration = resolveRunGeneration();
+    let result;
+    try {
+        result = await runOrchestrator({
+            issueKey: options.issueKey,
+            configPath: options.configPath,
+            dryRun: options.dryRun,
+            fixturePath: options.fixturePath,
+            phase: options.dryRun ? "dry-run" : options.phase,
+            force: options.force,
+        });
+    }
+    catch (error) {
+        if (options.jsonOut) {
+            const fallback = buildFallbackRunManifest({
+                issueKey: options.issueKey,
+                errorClassification: "run_crash",
+                message: error instanceof Error ? error.message : String(error),
+                deliveryId,
+                runGeneration,
+            });
+            await writeRunJsonOut(options.jsonOut, fallback);
+        }
+        throw error;
+    }
+    const manifest = result.manifest;
+    if (options.jsonOut) {
+        if (manifest) {
+            await writeRunJsonOut(options.jsonOut, {
+                ...manifest,
+                deliveryId: manifest.deliveryId ?? deliveryId,
+                runGeneration: manifest.runGeneration ?? runGeneration,
+            });
+        }
+        else {
+            const fallback = buildFallbackRunManifest({
+                issueKey: options.issueKey,
+                errorClassification: "run_crash",
+                message: "Harness run finished without a manifest",
+                deliveryId,
+                runGeneration,
+            });
+            await writeRunJsonOut(options.jsonOut, fallback);
+        }
+    }
+    if (options.json && manifest) {
+        console.log(JSON.stringify(manifest, null, 2));
     }
-    else if (result.manifest && typeof result.manifest === "object") {
-        const manifest = result.manifest;
+    else if (manifest && typeof manifest === "object") {
         const label = manifest.dryRun ? "Dry run" : "Run";
         console.log(`${label} finished: ${manifest.finalOutcome}`);
         if (result.runDirectory) {

package/dist/cli/commands/run.js.map

@@ -1 +1 @@
-{"version":3,"file":"run.js","sourceRoot":"","sources":["../../../src/cli/commands/run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAoB,MAAM,8BAA8B,CAAC;AAYjF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA0B;IAC5D,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC5C,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,OAAO,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1E,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC5D,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;QACnC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK;QACjD,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;SAAM,IAAI,MAAM,CAAC,QAAQ,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAIvB,CAAC;QACF,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,cAAc,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;QAC3D,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,yBAAyB,QAAQ,CAAC,mBAAmB,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,QAAQ,CAAC;AACzB,CAAC"}
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../../src/cli/commands/run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EACL,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAoB,MAAM,8BAA8B,CAAC;AAcjF,KAAK,UAAU,eAAe,CAC5B,OAAe,EACf,QAAqB;IAErB,MAAM,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA0B;IAC5D,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC5C,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,OAAO,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1E,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC5D,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,CAAC;IAC1D,MAAM,aAAa,GAAG,oBAAoB,EAAE,CAAC;IAE7C,IAAI,MAAuE,CAAC;IAC5E,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,eAAe,CAAC;YAC7B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK;YACjD,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,wBAAwB,CAAC;gBACxC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,mBAAmB,EAAE,WAAW;gBAChC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC/D,UAAU;gBACV,aAAa;aACd,CAAC,CAAC;YACH,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAmC,CAAC;IAE5D,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE;gBACrC,GAAG,QAAQ;gBACX,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,UAAU;gBAC7C,aAAa,EAAE,QAAQ,CAAC,aAAa,IAAI,aAAa;aACvD,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAG,wBAAwB,CAAC;gBACxC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,mBAAmB,EAAE,WAAW;gBAChC,OAAO,EAAE,yCAAyC;gBAClD,UAAU;gBACV,aAAa;aACd,CAAC,CAAC;YACH,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC;SAAM,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,cAAc,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;QAC3D,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,yBAAyB,QAAQ,CAAC,mBAAmB,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,QAAQ,CAAC;AACzB,CAAC"}

package/dist/cli/commands/sync-managed-runner.d.ts

@@ -0,0 +1,7 @@
+export declare function runSyncManagedRunnerCommand(options: {
+    pDevHome?: string;
+    apply?: boolean;
+    cancelPending?: boolean;
+    json?: boolean;
+}): Promise<number>;
+//# sourceMappingURL=sync-managed-runner.d.ts.map

package/dist/cli/commands/sync-managed-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-managed-runner.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/sync-managed-runner.ts"],"names":[],"mappings":"AAmBA,wBAAsB,2BAA2B,CAAC,OAAO,EAAE;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,GAAG,OAAO,CAAC,MAAM,CAAC,CAqGlB"}

package/dist/cli/commands/sync-managed-runner.js

@@ -0,0 +1,89 @@
+import path from "node:path";
+import { loadHarnessDotenv } from "../../config/load-dotenv.js";
+import { EXIT_CONFIG, EXIT_RUN_FAILURE, EXIT_SUCCESS } from "../exit-codes.js";
+import { hasGithubTokenConfigured, loadGithubTokenFromEnvLocal, } from "../../setup/setup-github-auth.js";
+import { createLiveRunnerUpgradeProvider } from "../../setup/runner-upgrade-provider-live.js";
+import { tryCreateHarnessTestRunnerUpgradeProvider } from "../../setup/test-only-runner-upgrade-provider.js";
+import { RELEASE_SYNC_CANARY_POLL_INTERVAL_MS, RELEASE_SYNC_CANARY_POLL_TIMEOUT_MS, RELEASE_SYNC_OVERALL_TIMEOUT_MS, ReleaseSyncManagedRunnerError, runReleaseSyncManagedRunner, } from "../../setup/release-sync-managed-runner.js";
+import { RUNNER_UPGRADE_WORKER_PROVIDER_TIMEOUT_MS } from "../../setup/runner-upgrade-timeouts.js";
+import { resolveWorkspaceDir } from "../../p-dev/workspace.js";
+export async function runSyncManagedRunnerCommand(options) {
+    const resolved = resolveWorkspaceDir({
+        cliWorkspace: options.pDevHome,
+        envWorkspace: process.env.P_DEV_HOME,
+    });
+    const cwd = path.resolve(resolved.workspaceDir);
+    process.env.P_DEV_HOME = cwd;
+    loadHarnessDotenv(cwd);
+    const testProvider = await tryCreateHarnessTestRunnerUpgradeProvider();
+    let provider = testProvider;
+    if (!provider) {
+        const token = await loadGithubTokenFromEnvLocal({ cwd });
+        if (!hasGithubTokenConfigured(token)) {
+            console.error("release:sync-managed-runner failed: GITHUB_TOKEN is required in the target P_DEV_HOME .env.local");
+            return EXIT_CONFIG;
+        }
+        provider = createLiveRunnerUpgradeProvider(token, {
+            timeoutMs: RUNNER_UPGRADE_WORKER_PROVIDER_TIMEOUT_MS,
+        });
+    }
+    try {
+        const result = await runReleaseSyncManagedRunner(provider, {
+            cwd,
+            apply: options.apply === true,
+            cancelPending: options.cancelPending !== false,
+            overallTimeoutMs: RELEASE_SYNC_OVERALL_TIMEOUT_MS,
+            canaryPollIntervalMs: RELEASE_SYNC_CANARY_POLL_INTERVAL_MS,
+            canaryPollTimeoutMs: RELEASE_SYNC_CANARY_POLL_TIMEOUT_MS,
+        });
+        if (options.json) {
+            console.log(JSON.stringify(result, null, 2));
+        }
+        else {
+            console.log(`p-dev-home: ${cwd}`);
+            if (result.cancel?.cancelled) {
+                console.log(`cancelled pending upgrade (archived: ${result.cancel.archivedDir ?? "n/a"})`);
+                const evidence = result.cancel.remoteMutationEvidence;
+                console.log(`prior remote evidence: branch=${evidence.hadBranchName} pr=${evidence.hadPrUrl} canary=${evidence.hadCanaryRunUrl} codeUpdateComplete=${evidence.codeUpdateComplete}`);
+            }
+            console.log(`repo: ${result.repoSlug} (id ${result.repositoryId})`);
+            console.log(`packaged snapshot: ${result.packagedSnapshotContentId.slice(0, 12)}…`);
+            if (result.remoteSnapshotContentId) {
+                console.log(`remote snapshot: ${result.remoteSnapshotContentId.slice(0, 12)}…`);
+            }
+            console.log(`code update: ${result.codeUpdateSkippedBecauseAlreadyCurrent
+                ? "skipped (already current)"
+                : options.apply
+                    ? "applied"
+                    : "would apply"}`);
+            if (result.fingerprint) {
+                console.log(`HARNESS_CONFIG_FINGERPRINT: ${result.fingerprint}`);
+            }
+            if (result.canaryRunUrl) {
+                console.log(`canary: ${result.canaryRunUrl}`);
+            }
+            console.log(`phase: ${result.phase}`);
+            console.log(result.message);
+        }
+        return result.ok ? EXIT_SUCCESS : EXIT_RUN_FAILURE;
+    }
+    catch (error) {
+        if (error instanceof ReleaseSyncManagedRunnerError) {
+            if (options.json) {
+                console.log(JSON.stringify({
+                    ok: false,
+                    phase: error.phase,
+                    message: error.message,
+                }, null, 2));
+            }
+            else {
+                console.error(`release:sync-managed-runner failed at phase=${error.phase}: ${error.message}`);
+            }
+            return EXIT_RUN_FAILURE;
+        }
+        const message = error instanceof Error ? error.message : String(error);
+        console.error(`release:sync-managed-runner failed: ${message}`);
+        return EXIT_CONFIG;
+    }
+}
+//# sourceMappingURL=sync-managed-runner.js.map

package/dist/cli/commands/sync-managed-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-managed-runner.js","sourceRoot":"","sources":["../../../src/cli/commands/sync-managed-runner.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EACL,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,+BAA+B,EAAE,MAAM,6CAA6C,CAAC;AAC9F,OAAO,EAAE,yCAAyC,EAAE,MAAM,kDAAkD,CAAC;AAC7G,OAAO,EACL,oCAAoC,EACpC,mCAAmC,EACnC,+BAA+B,EAC/B,6BAA6B,EAC7B,2BAA2B,GAC5B,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,yCAAyC,EAAE,MAAM,wCAAwC,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,OAKjD;IACC,MAAM,QAAQ,GAAG,mBAAmB,CAAC;QACnC,YAAY,EAAE,OAAO,CAAC,QAAQ;QAC9B,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU;KACrC,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;IAC7B,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAEvB,MAAM,YAAY,GAAG,MAAM,yCAAyC,EAAE,CAAC;IACvE,IAAI,QAAQ,GAAG,YAAY,CAAC;IAC5B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,KAAK,CACX,kGAAkG,CACnG,CAAC;YACF,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,QAAQ,GAAG,+BAA+B,CAAC,KAAM,EAAE;YACjD,SAAS,EAAE,yCAAyC;SACrD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC,QAAQ,EAAE;YACzD,GAAG;YACH,KAAK,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI;YAC7B,aAAa,EAAE,OAAO,CAAC,aAAa,KAAK,KAAK;YAC9C,gBAAgB,EAAE,+BAA+B;YACjD,oBAAoB,EAAE,oCAAoC;YAC1D,mBAAmB,EAAE,mCAAmC;SACzD,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,EAAE,CAAC,CAAC;YAClC,IAAI,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CACT,wCAAwC,MAAM,CAAC,MAAM,CAAC,WAAW,IAAI,KAAK,GAAG,CAC9E,CAAC;gBACF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC;gBACtD,OAAO,CAAC,GAAG,CACT,iCAAiC,QAAQ,CAAC,aAAa,OAAO,QAAQ,CAAC,QAAQ,WAAW,QAAQ,CAAC,eAAe,uBAAuB,QAAQ,CAAC,kBAAkB,EAAE,CACvK,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,SAAS,MAAM,CAAC,QAAQ,QAAQ,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC;YACpE,OAAO,CAAC,GAAG,CACT,sBAAsB,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CACvE,CAAC;YACF,IAAI,MAAM,CAAC,uBAAuB,EAAE,CAAC;gBACnC,OAAO,CAAC,GAAG,CACT,oBAAoB,MAAM,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CACnE,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,GAAG,CACT,gBACE,MAAM,CAAC,sCAAsC;gBAC3C,CAAC,CAAC,2BAA2B;gBAC7B,CAAC,CAAC,OAAO,CAAC,KAAK;oBACb,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,aACR,EAAE,CACH,CAAC;YACF,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;YAChD,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,6BAA6B,EAAE,CAAC;YACnD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;oBACE,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,OAAO,EAAE,KAAK,CAAC,OAAO;iBACvB,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CACX,+CAA+C,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,OAAO,EAAE,CAC/E,CAAC;YACJ,CAAC;YACD,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,CAAC,KAAK,CAAC,uCAAuC,OAAO,EAAE,CAAC,CAAC;QAChE,OAAO,WAAW,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/cli/program.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"program.d.ts","sourceRoot":"","sources":["../../src/cli/program.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAepC,wBAAgB,aAAa,IAAI,OAAO,CAwLvC"}
+{"version":3,"file":"program.d.ts","sourceRoot":"","sources":["../../src/cli/program.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiBpC,wBAAgB,aAAa,IAAI,OAAO,CAqOvC"}

package/dist/cli/program.js

@@ -9,6 +9,8 @@ import { runResolveRouteCommand } from "./commands/resolve-route.js";
 import { runRedactOutputCommand } from "./commands/redact-output.js";
 import { runDiagnoseVercelBridgeCommand } from "./commands/diagnose-vercel-bridge.js";
 import { runOperatorInit } from "./commands/operator-init.js";
+import { runCanaryRunnerConfigCommand } from "./commands/canary-runner-config.js";
+import { runSyncManagedRunnerCommand } from "./commands/sync-managed-runner.js";
 export function createProgram() {
     const program = new Command();
     program
@@ -34,6 +36,7 @@ export function createProgram() {
         .option("--force", "Re-run planning even when idempotency markers exist", false)
         .option("--fixture <path>", "Load issue description from a local markdown fixture")
         .option("--json", "Print manifest JSON to stdout", false)
+        .option("--json-out <path>", "Write redacted manifest JSON to a file")
         .action(async (opts) => {
         const configPath = program.opts().config;
         const exitCode = await runRunCommand({
@@ -42,6 +45,7 @@ export function createProgram() {
             dryRun: opts.dryRun,
             fixturePath: opts.fixture,
             json: opts.json,
+            jsonOut: opts.jsonOut,
             phase: opts.phase,
             force: opts.force,
         });
@@ -117,6 +121,29 @@ export function createProgram() {
         });
         process.exitCode = exitCode;
     });
+    program
+        .command("canary-runner-config")
+        .description("Validate managed runner marker and cloud config fingerprint pairing")
+        .action(async () => {
+        const exitCode = await runCanaryRunnerConfigCommand();
+        process.exitCode = exitCode;
+    });
+    program
+        .command("sync-managed-runner")
+        .description("Release unblocker: sync one known managed harness runner, cloud config, and config canary")
+        .option("--p-dev-home <path>", "Operator workspace (P_DEV_HOME) containing .env.local and .harness/")
+        .option("--apply", "Perform remote sync (default is dry-run verification only)", false)
+        .option("--keep-pending", "Do not archive/clear an existing local runner-upgrade pending file", false)
+        .option("--json", "Print JSON result to stdout", false)
+        .action(async (opts) => {
+        const exitCode = await runSyncManagedRunnerCommand({
+            pDevHome: opts.pDevHome,
+            apply: opts.apply === true,
+            cancelPending: opts.keepPending !== true,
+            json: opts.json === true,
+        });
+        process.exitCode = exitCode;
+    });
     program
         .command("redact-output")
         .description("Read stdin and write redacted JSON or text to stdout")

package/dist/cli/program.js.map

@@ -1 +1 @@
-{"version":3,"file":"program.js","sourceRoot":"","sources":["../../src/cli/program.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,8BAA8B,EAAE,MAAM,sCAAsC,CAAC;AACtF,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAE9D,MAAM,UAAU,aAAa;IAC3B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAE9B,OAAO;SACJ,IAAI,CAAC,SAAS,CAAC;SACf,WAAW,CAAC,4CAA4C,CAAC;SACzD,MAAM,CACL,iBAAiB,EACjB,4EAA4E,EAC5E,qBAAqB,CACtB,CAAC;IAEJ,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,sDAAsD,CAAC;SACnE,MAAM,CACL,qBAAqB,EACrB,kEAAkE,EAClE,MAAM,CACP;SACA,MAAM,CAAC,KAAK,EAAE,OAA6B,EAAE,EAAE;QAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAsB,CAAC,MAAM,CAAC;QAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,oCAAoC,CAAC;SACjD,cAAc,CAAC,eAAe,EAAE,+BAA+B,CAAC;SAChE,MAAM,CAAC,WAAW,EAAE,wCAAwC,EAAE,KAAK,CAAC;SACpE,MAAM,CACL,iBAAiB,EACjB,cAAc,yBAAyB,gCAAgC,EACvE,MAAM,CACP;SACA,MAAM,CAAC,SAAS,EAAE,qDAAqD,EAAE,KAAK,CAAC;SAC/E,MAAM,CAAC,kBAAkB,EAAE,sDAAsD,CAAC;SAClF,MAAM,CAAC,QAAQ,EAAE,+BAA+B,EAAE,KAAK,CAAC;SACxD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAsB,CAAC,MAAM,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC;YACnC,QAAQ,EAAE,IAAI,CAAC,KAAK;YACpB,UAAU;YACV,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,IAAI,CAAC,OAAO;YACzB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;QACH,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,uCAAuC,CAAC;SACpD,cAAc,CAAC,cAAc,EAAE,mCAAmC,CAAC;SACnE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,0DAA0D,CAAC;SACvE,MAAM,CAAC,eAAe,EAAE,6BAA6B,CAAC;SACtD,MAAM,CAAC,eAAe,EAAE,+BAA+B,CAAC;SACxD,MAAM,CACL,0BAA0B,EAC1B,uDAAuD,CACxD;SACA,MAAM,CAAC,QAAQ,EAAE,wCAAwC,EAAE,KAAK,CAAC;SACjE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAsB,CAAC,MAAM,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC;YACtC,UAAU;YACV,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,QAAQ,EAAE,IAAI,CAAC,KAAK;YACpB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;QACH,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CAAC,4DAA4D,CAAC;SACzE,cAAc,CAAC,eAAe,EAAE,+BAA+B,CAAC;SAChE,MAAM,CACL,iBAAiB,EACjB,mBAAmB,8BAA8B,EAAE,EACnD,MAAM,CACP;SACA,MAAM,CAAC,QAAQ,EAAE,4BAA4B,EAAE,KAAK,CAAC;SACrD,MAAM,CACL,iBAAiB,EACjB,kDAAkD,EAClD,KAAK,CACN;SACA,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAsB,CAAC,MAAM,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC;YAC5C,QAAQ,EAAE,IAAI,CAAC,KAAK;YACpB,UAAU;YACV,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;QACH,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,iBAAiB,CAAC;SAC1B,WAAW,CAAC,0EAA0E,CAAC;SACvF,MAAM,CAAC,aAAa,EAAE,iCAAiC,CAAC;SACxD,MAAM,CAAC,eAAe,EAAE,sCAAsC,CAAC;SAC/D,MAAM,CACL,sBAAsB,EACtB,yDAAyD,CAC1D;SACA,MAAM,CACL,8BAA8B,EAC9B,sCAAsC,CACvC;SACA,MAAM,CAAC,aAAa,EAAE,wCAAwC,CAAC;SAC/D,MAAM,CAAC,WAAW,EAAE,+BAA+B,EAAE,KAAK,CAAC;SAC3D,MAAM,CAAC,SAAS,EAAE,gCAAgC,EAAE,KAAK,CAAC;SAC1D,MAAM,CAAC,QAAQ,EAAE,mCAAmC,EAAE,KAAK,CAAC;SAC5D,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAsB,CAAC,MAAM,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC;YAC9C,UAAU;YACV,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;QACH,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CAAC,sDAAsD,CAAC;SACnE,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,QAAQ,GAAG,MAAM,sBAAsB,EAAE,CAAC;QAChD,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,wBAAwB,CAAC;SACjC,WAAW,CACV,yFAAyF,CAC1F;SACA,MAAM,CACL,cAAc,EACd,2EAA2E,EAC3E,KAAK,CACN;SACA,MAAM,CAAC,KAAK,EAAE,IAA6B,EAAE,EAAE;QAC9C,MAAM,QAAQ,GAAG,MAAM,8BAA8B,CAAC;YACpD,SAAS,EAAE,IAAI,CAAC,SAAS,KAAK,IAAI;SACnC,CAAC,CAAC;QACH,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEL,MAAM,QAAQ,GAAG,OAAO;SACrB,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,wBAAwB,CAAC,CAAC;IAEzC,QAAQ;SACL,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,sEAAsE,CAAC;SACnF,MAAM,CAAC,SAAS,EAAE,gCAAgC,EAAE,KAAK,CAAC;SAC1D,MAAM,CAAC,KAAK,EAAE,IAAyB,EAAE,EAAE;QAC1C,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC;QACvE,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEL,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"program.js","sourceRoot":"","sources":["../../src/cli/program.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,8BAA8B,EAAE,MAAM,sCAAsC,CAAC;AACtF,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,EAAE,2BAA2B,EAAE,MAAM,mCAAmC,CAAC;AAEhF,MAAM,UAAU,aAAa;IAC3B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAE9B,OAAO;SACJ,IAAI,CAAC,SAAS,CAAC;SACf,WAAW,CAAC,4CAA4C,CAAC;SACzD,MAAM,CACL,iBAAiB,EACjB,4EAA4E,EAC5E,qBAAqB,CACtB,CAAC;IAEJ,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,sDAAsD,CAAC;SACnE,MAAM,CACL,qBAAqB,EACrB,kEAAkE,EAClE,MAAM,CACP;SACA,MAAM,CAAC,KAAK,EAAE,OAA6B,EAAE,EAAE;QAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAsB,CAAC,MAAM,CAAC;QAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,oCAAoC,CAAC;SACjD,cAAc,CAAC,eAAe,EAAE,+BAA+B,CAAC;SAChE,MAAM,CAAC,WAAW,EAAE,wCAAwC,EAAE,KAAK,CAAC;SACpE,MAAM,CACL,iBAAiB,EACjB,cAAc,yBAAyB,gCAAgC,EACvE,MAAM,CACP;SACA,MAAM,CAAC,SAAS,EAAE,qDAAqD,EAAE,KAAK,CAAC;SAC/E,MAAM,CAAC,kBAAkB,EAAE,sDAAsD,CAAC;SAClF,MAAM,CAAC,QAAQ,EAAE,+BAA+B,EAAE,KAAK,CAAC;SACxD,MAAM,CAAC,mBAAmB,EAAE,wCAAwC,CAAC;SACrE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAsB,CAAC,MAAM,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC;YACnC,QAAQ,EAAE,IAAI,CAAC,KAAK;YACpB,UAAU;YACV,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,IAAI,CAAC,OAAO;YACzB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;QACH,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,uCAAuC,CAAC;SACpD,cAAc,CAAC,cAAc,EAAE,mCAAmC,CAAC;SACnE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,0DAA0D,CAAC;SACvE,MAAM,CAAC,eAAe,EAAE,6BAA6B,CAAC;SACtD,MAAM,CAAC,eAAe,EAAE,+BAA+B,CAAC;SACxD,MAAM,CACL,0BAA0B,EAC1B,uDAAuD,CACxD;SACA,MAAM,CAAC,QAAQ,EAAE,wCAAwC,EAAE,KAAK,CAAC;SACjE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAsB,CAAC,MAAM,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC;YACtC,UAAU;YACV,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,QAAQ,EAAE,IAAI,CAAC,KAAK;YACpB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;QACH,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CAAC,4DAA4D,CAAC;SACzE,cAAc,CAAC,eAAe,EAAE,+BAA+B,CAAC;SAChE,MAAM,CACL,iBAAiB,EACjB,mBAAmB,8BAA8B,EAAE,EACnD,MAAM,CACP;SACA,MAAM,CAAC,QAAQ,EAAE,4BAA4B,EAAE,KAAK,CAAC;SACrD,MAAM,CACL,iBAAiB,EACjB,kDAAkD,EAClD,KAAK,CACN;SACA,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAsB,CAAC,MAAM,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC;YAC5C,QAAQ,EAAE,IAAI,CAAC,KAAK;YACpB,UAAU;YACV,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;QACH,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,iBAAiB,CAAC;SAC1B,WAAW,CAAC,0EAA0E,CAAC;SACvF,MAAM,CAAC,aAAa,EAAE,iCAAiC,CAAC;SACxD,MAAM,CAAC,eAAe,EAAE,sCAAsC,CAAC;SAC/D,MAAM,CACL,sBAAsB,EACtB,yDAAyD,CAC1D;SACA,MAAM,CACL,8BAA8B,EAC9B,sCAAsC,CACvC;SACA,MAAM,CAAC,aAAa,EAAE,wCAAwC,CAAC;SAC/D,MAAM,CAAC,WAAW,EAAE,+BAA+B,EAAE,KAAK,CAAC;SAC3D,MAAM,CAAC,SAAS,EAAE,gCAAgC,EAAE,KAAK,CAAC;SAC1D,MAAM,CAAC,QAAQ,EAAE,mCAAmC,EAAE,KAAK,CAAC;SAC5D,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAsB,CAAC,MAAM,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC;YAC9C,UAAU;YACV,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;QACH,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,sBAAsB,CAAC;SAC/B,WAAW,CAAC,qEAAqE,CAAC;SAClF,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,QAAQ,GAAG,MAAM,4BAA4B,EAAE,CAAC;QACtD,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,qBAAqB,CAAC;SAC9B,WAAW,CACV,2FAA2F,CAC5F;SACA,MAAM,CACL,qBAAqB,EACrB,qEAAqE,CACtE;SACA,MAAM,CACL,SAAS,EACT,4DAA4D,EAC5D,KAAK,CACN;SACA,MAAM,CACL,gBAAgB,EAChB,oEAAoE,EACpE,KAAK,CACN;SACA,MAAM,CAAC,QAAQ,EAAE,6BAA6B,EAAE,KAAK,CAAC;SACtD,MAAM,CAAC,KAAK,EAAE,IAKd,EAAE,EAAE;QACH,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC;YACjD,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK,KAAK,IAAI;YAC1B,aAAa,EAAE,IAAI,CAAC,WAAW,KAAK,IAAI;YACxC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,IAAI;SACzB,CAAC,CAAC;QACH,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CAAC,sDAAsD,CAAC;SACnE,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,QAAQ,GAAG,MAAM,sBAAsB,EAAE,CAAC;QAChD,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,wBAAwB,CAAC;SACjC,WAAW,CACV,yFAAyF,CAC1F;SACA,MAAM,CACL,cAAc,EACd,2EAA2E,EAC3E,KAAK,CACN;SACA,MAAM,CAAC,KAAK,EAAE,IAA6B,EAAE,EAAE;QAC9C,MAAM,QAAQ,GAAG,MAAM,8BAA8B,CAAC;YACpD,SAAS,EAAE,IAAI,CAAC,SAAS,KAAK,IAAI;SACnC,CAAC,CAAC;QACH,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEL,MAAM,QAAQ,GAAG,OAAO;SACrB,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,wBAAwB,CAAC,CAAC;IAEzC,QAAQ;SACL,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,sEAAsE,CAAC;SACnF,MAAM,CAAC,SAAS,EAAE,gCAAgC,EAAE,KAAK,CAAC;SAC1D,MAAM,CAAC,KAAK,EAAE,IAAyB,EAAE,EAAE;QAC1C,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC;QACvE,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEL,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/config/assert-cloud-config-fingerprint.d.ts

@@ -0,0 +1,10 @@
+export declare class CloudConfigStaleError extends Error {
+    readonly errorClassification: "cloud_config_stale";
+    constructor(message: string);
+}
+/**
+ * Fail before routing/execution when the Actions secret and paired fingerprint
+ * variable disagree. No-op outside GitHub Actions (or when skip env is set).
+ */
+export declare function assertCloudConfigFingerprintFromEnv(env?: NodeJS.ProcessEnv): void;
+//# sourceMappingURL=assert-cloud-config-fingerprint.d.ts.map

package/dist/config/assert-cloud-config-fingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assert-cloud-config-fingerprint.d.ts","sourceRoot":"","sources":["../../src/config/assert-cloud-config-fingerprint.ts"],"names":[],"mappings":"AAMA,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,mBAAmB,EAAG,oBAAoB,CAAU;gBAEjD,OAAO,EAAE,MAAM;CAI5B;AAED;;;GAGG;AACH,wBAAgB,mCAAmC,CACjD,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,IAAI,CAcN"}

package/dist/config/assert-cloud-config-fingerprint.js

@@ -0,0 +1,26 @@
+import { checkCloudConfigFingerprint, HARNESS_CONFIG_FINGERPRINT_VARIABLE, shouldEnforceCloudConfigFingerprint, } from "./cloud-config-fingerprint.js";
+export class CloudConfigStaleError extends Error {
+    errorClassification = "cloud_config_stale";
+    constructor(message) {
+        super(message);
+        this.name = "CloudConfigStaleError";
+    }
+}
+/**
+ * Fail before routing/execution when the Actions secret and paired fingerprint
+ * variable disagree. No-op outside GitHub Actions (or when skip env is set).
+ */
+export function assertCloudConfigFingerprintFromEnv(env = process.env) {
+    if (!shouldEnforceCloudConfigFingerprint(env)) {
+        return;
+    }
+    const result = checkCloudConfigFingerprint({
+        configJsonB64: env.HARNESS_CONFIG_JSON_B64,
+        expectedFingerprint: env[HARNESS_CONFIG_FINGERPRINT_VARIABLE],
+        enforce: true,
+    });
+    if (!result.ok) {
+        throw new CloudConfigStaleError(result.message);
+    }
+}
+//# sourceMappingURL=assert-cloud-config-fingerprint.js.map

package/dist/config/assert-cloud-config-fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assert-cloud-config-fingerprint.js","sourceRoot":"","sources":["../../src/config/assert-cloud-config-fingerprint.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,mCAAmC,EACnC,mCAAmC,GACpC,MAAM,+BAA+B,CAAC;AAEvC,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACrC,mBAAmB,GAAG,oBAA6B,CAAC;IAE7D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,mCAAmC,CACjD,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,CAAC,mCAAmC,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,2BAA2B,CAAC;QACzC,aAAa,EAAE,GAAG,CAAC,uBAAuB;QAC1C,mBAAmB,EAAE,GAAG,CAAC,mCAAmC,CAAC;QAC7D,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;AACH,CAAC"}

package/dist/config/cloud-config-fingerprint.d.ts

@@ -0,0 +1,26 @@
+/** Non-secret GitHub Actions repository variable paired with HARNESS_CONFIG_JSON_B64. */
+export declare const HARNESS_CONFIG_FINGERPRINT_VARIABLE = "HARNESS_CONFIG_FINGERPRINT";
+export declare function fingerprintHarnessConfigBytes(bytes: Buffer | string): string;
+export declare function fingerprintHarnessConfigJsonB64(b64: string): string;
+export type CloudConfigFingerprintCheckResult = {
+    ok: true;
+    fingerprint: string;
+} | {
+    ok: false;
+    errorClassification: "cloud_config_stale";
+    message: string;
+    decodedFingerprint: string | null;
+    expectedFingerprint: string | null;
+};
+/**
+ * Compare decoded HARNESS_CONFIG_JSON_B64 fingerprint against the paired
+ * repository variable. Fail closed when either side is missing or they differ.
+ */
+export declare function checkCloudConfigFingerprint(input: {
+    configJsonB64?: string | null;
+    expectedFingerprint?: string | null;
+    /** When false (local/dev), skip the check. */
+    enforce?: boolean;
+}): CloudConfigFingerprintCheckResult;
+export declare function shouldEnforceCloudConfigFingerprint(env?: NodeJS.ProcessEnv): boolean;
+//# sourceMappingURL=cloud-config-fingerprint.d.ts.map

package/dist/config/cloud-config-fingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-config-fingerprint.d.ts","sourceRoot":"","sources":["../../src/config/cloud-config-fingerprint.ts"],"names":[],"mappings":"AAEA,yFAAyF;AACzF,eAAO,MAAM,mCAAmC,+BAA+B,CAAC;AAEhF,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAE5E;AAED,wBAAgB,+BAA+B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAGnE;AAED,MAAM,MAAM,iCAAiC,GACzC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACjC;IACE,EAAE,EAAE,KAAK,CAAC;IACV,mBAAmB,EAAE,oBAAoB,CAAC;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC,CAAC;AAEN;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,8CAA8C;IAC9C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,GAAG,iCAAiC,CAgDpC;AAED,wBAAgB,mCAAmC,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAMjG"}

package/dist/config/cloud-config-fingerprint.js

@@ -0,0 +1,64 @@
+import { createHash } from "node:crypto";
+/** Non-secret GitHub Actions repository variable paired with HARNESS_CONFIG_JSON_B64. */
+export const HARNESS_CONFIG_FINGERPRINT_VARIABLE = "HARNESS_CONFIG_FINGERPRINT";
+export function fingerprintHarnessConfigBytes(bytes) {
+    return createHash("sha256").update(bytes).digest("hex");
+}
+export function fingerprintHarnessConfigJsonB64(b64) {
+    const bytes = Buffer.from(b64.trim(), "base64");
+    return fingerprintHarnessConfigBytes(bytes);
+}
+/**
+ * Compare decoded HARNESS_CONFIG_JSON_B64 fingerprint against the paired
+ * repository variable. Fail closed when either side is missing or they differ.
+ */
+export function checkCloudConfigFingerprint(input) {
+    if (input.enforce === false) {
+        return { ok: true, fingerprint: input.expectedFingerprint?.trim() || "" };
+    }
+    const b64 = input.configJsonB64?.trim() || "";
+    const expected = input.expectedFingerprint?.trim() || "";
+    if (!b64 && !expected) {
+        return { ok: true, fingerprint: "" };
+    }
+    if (!b64 || !expected) {
+        return {
+            ok: false,
+            errorClassification: "cloud_config_stale",
+            message: "cloud_config_stale: HARNESS_CONFIG_JSON_B64 and HARNESS_CONFIG_FINGERPRINT must both be present",
+            decodedFingerprint: b64 ? fingerprintHarnessConfigJsonB64(b64) : null,
+            expectedFingerprint: expected || null,
+        };
+    }
+    let decodedFingerprint;
+    try {
+        decodedFingerprint = fingerprintHarnessConfigJsonB64(b64);
+    }
+    catch {
+        return {
+            ok: false,
+            errorClassification: "cloud_config_stale",
+            message: "cloud_config_stale: HARNESS_CONFIG_JSON_B64 could not be decoded",
+            decodedFingerprint: null,
+            expectedFingerprint: expected,
+        };
+    }
+    if (decodedFingerprint !== expected) {
+        return {
+            ok: false,
+            errorClassification: "cloud_config_stale",
+            message: "cloud_config_stale: decoded harness config fingerprint does not match HARNESS_CONFIG_FINGERPRINT",
+            decodedFingerprint,
+            expectedFingerprint: expected,
+        };
+    }
+    return { ok: true, fingerprint: decodedFingerprint };
+}
+export function shouldEnforceCloudConfigFingerprint(env = process.env) {
+    if (env.HARNESS_SKIP_CLOUD_CONFIG_FINGERPRINT === "1") {
+        return false;
+    }
+    // Enforce in GitHub Actions when the secret is loaded from env.
+    return Boolean(env.GITHUB_ACTIONS === "true" && env.HARNESS_CONFIG_JSON_B64?.trim());
+}
+//# sourceMappingURL=cloud-config-fingerprint.js.map

package/dist/config/cloud-config-fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-config-fingerprint.js","sourceRoot":"","sources":["../../src/config/cloud-config-fingerprint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,yFAAyF;AACzF,MAAM,CAAC,MAAM,mCAAmC,GAAG,4BAA4B,CAAC;AAEhF,MAAM,UAAU,6BAA6B,CAAC,KAAsB;IAClE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,GAAW;IACzD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;IAChD,OAAO,6BAA6B,CAAC,KAAK,CAAC,CAAC;AAC9C,CAAC;AAYD;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAK3C;IACC,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,mBAAmB,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;IAC5E,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9C,MAAM,QAAQ,GAAG,KAAK,CAAC,mBAAmB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAEzD,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IACvC,CAAC;IAED,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,mBAAmB,EAAE,oBAAoB;YACzC,OAAO,EACL,iGAAiG;YACnG,kBAAkB,EAAE,GAAG,CAAC,CAAC,CAAC,+BAA+B,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;YACrE,mBAAmB,EAAE,QAAQ,IAAI,IAAI;SACtC,CAAC;IACJ,CAAC;IAED,IAAI,kBAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,kBAAkB,GAAG,+BAA+B,CAAC,GAAG,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAK;YACT,mBAAmB,EAAE,oBAAoB;YACzC,OAAO,EAAE,kEAAkE;YAC3E,kBAAkB,EAAE,IAAI;YACxB,mBAAmB,EAAE,QAAQ;SAC9B,CAAC;IACJ,CAAC;IAED,IAAI,kBAAkB,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,mBAAmB,EAAE,oBAAoB;YACzC,OAAO,EACL,kGAAkG;YACpG,kBAAkB;YAClB,mBAAmB,EAAE,QAAQ;SAC9B,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,MAAyB,OAAO,CAAC,GAAG;IACtF,IAAI,GAAG,CAAC,qCAAqC,KAAK,GAAG,EAAE,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,gEAAgE;IAChE,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,MAAM,IAAI,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE,CAAC,CAAC;AACvF,CAAC"}

package/dist/config/legacy-linear-top-level.d.ts

@@ -0,0 +1,16 @@
+import type { HarnessConfig, LinearAssociation } from "./types.js";
+/**
+ * Derive legacy top-level linear.* fields from associations.
+ * Only populate teamId/teamKey when exactly one unique team is configured.
+ * Never pick an arbitrary "first" team when multiple teams exist.
+ */
+export declare function deriveLegacyLinearTopLevel(input: {
+    workspaceId?: string;
+    associations: Array<Pick<LinearAssociation, "workspaceId" | "teamId" | "teamKey">>;
+}): {
+    workspaceId?: string;
+    teamId?: string;
+    teamKey?: string;
+};
+export declare function applyLegacyLinearTopLevelToConfig(config: HarnessConfig, workspaceId?: string): HarnessConfig["linear"];
+//# sourceMappingURL=legacy-linear-top-level.d.ts.map

package/dist/config/legacy-linear-top-level.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-linear-top-level.d.ts","sourceRoot":"","sources":["../../src/config/legacy-linear-top-level.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAMnE;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC;CACpF,GAAG;IACF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAgCA;AAED,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,aAAa,EACrB,WAAW,CAAC,EAAE,MAAM,GACnB,aAAa,CAAC,QAAQ,CAAC,CAazB"}

package/dist/config/legacy-linear-top-level.js

@@ -0,0 +1,42 @@
+import { resolveLinearAssociationsFromConfig, uniqueTeamIdsFromAssociations, } from "./resolve-linear-workspace.js";
+/**
+ * Derive legacy top-level linear.* fields from associations.
+ * Only populate teamId/teamKey when exactly one unique team is configured.
+ * Never pick an arbitrary "first" team when multiple teams exist.
+ */
+export function deriveLegacyLinearTopLevel(input) {
+    const workspaceIds = [
+        ...new Set([
+            input.workspaceId?.trim(),
+            ...input.associations.map((association) => association.workspaceId.trim()),
+        ].filter((value) => Boolean(value))),
+    ];
+    const teamIds = uniqueTeamIdsFromAssociations(input.associations);
+    const result = {};
+    if (workspaceIds.length === 1) {
+        result.workspaceId = workspaceIds[0];
+    }
+    if (teamIds.length === 1) {
+        const teamId = teamIds[0];
+        const sample = input.associations.find((association) => association.teamId === teamId);
+        result.teamId = teamId;
+        if (sample?.teamKey?.trim()) {
+            result.teamKey = sample.teamKey.trim();
+        }
+    }
+    return result;
+}
+export function applyLegacyLinearTopLevelToConfig(config, workspaceId) {
+    const associations = resolveLinearAssociationsFromConfig(config);
+    const derived = deriveLegacyLinearTopLevel({
+        workspaceId: workspaceId ?? config.linear?.workspaceId,
+        associations,
+    });
+    return {
+        ...config.linear,
+        workspaceId: derived.workspaceId,
+        teamId: derived.teamId,
+        teamKey: derived.teamKey,
+    };
+}
+//# sourceMappingURL=legacy-linear-top-level.js.map

package/dist/config/legacy-linear-top-level.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-linear-top-level.js","sourceRoot":"","sources":["../../src/config/legacy-linear-top-level.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mCAAmC,EACnC,6BAA6B,GAC9B,MAAM,+BAA+B,CAAC;AAEvC;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAG1C;IAKC,MAAM,YAAY,GAAG;QACnB,GAAG,IAAI,GAAG,CACR;YACE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE;YACzB,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;SAC3E,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CACrD;KACF,CAAC;IACF,MAAM,OAAO,GAAG,6BAA6B,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAClE,MAAM,MAAM,GAIR,EAAE,CAAC;IAEP,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,CAAC,WAAW,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,CACpC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,KAAK,MAAM,CAC/C,CAAC;QACF,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;QACvB,IAAI,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;YAC5B,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACzC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,MAAqB,EACrB,WAAoB;IAEpB,MAAM,YAAY,GAAG,mCAAmC,CAAC,MAAM,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,0BAA0B,CAAC;QACzC,WAAW,EAAE,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,WAAW;QACtD,YAAY;KACb,CAAC,CAAC;IAEH,OAAO;QACL,GAAG,MAAM,CAAC,MAAM;QAChB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC;AACJ,CAAC"}

package/dist/config/linear-association-gate.d.ts

@@ -0,0 +1,26 @@
+import type { HarnessConfig } from "./types.js";
+import type { ErrorClassification } from "../types/run.js";
+import { resolveLinearAssociationForIssue } from "./resolve-linear-workspace.js";
+export type LinearAssociationGateResult = {
+    ok: true;
+} | {
+    ok: false;
+    code: "linear_team_project_not_configured";
+    message: string;
+    errorClassification: ErrorClassification;
+};
+export declare function runLinearAssociationGate(input: {
+    config: HarnessConfig;
+    teamId?: string | null;
+    teamKey?: string | null;
+    teamName?: string | null;
+    projectId?: string | null;
+}): LinearAssociationGateResult;
+export declare function resolveAssociationTargetRepo(input: {
+    config: HarnessConfig;
+    teamId?: string | null;
+    teamKey?: string | null;
+    teamName?: string | null;
+    projectId?: string | null;
+}): ReturnType<typeof resolveLinearAssociationForIssue>;
+//# sourceMappingURL=linear-association-gate.d.ts.map

package/dist/config/linear-association-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"linear-association-gate.d.ts","sourceRoot":"","sources":["../../src/config/linear-association-gate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAGL,gCAAgC,EACjC,MAAM,+BAA+B,CAAC;AAEvC,MAAM,MAAM,2BAA2B,GACnC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IACE,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EAAE,oCAAoC,CAAC;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB,EAAE,mBAAmB,CAAC;CAC1C,CAAC;AAEN,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,GAAG,2BAA2B,CAqC9B;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,GAAG,UAAU,CAAC,OAAO,gCAAgC,CAAC,CAWtD"}