run402-mcp 4.103.0 → 4.104.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/docs/llms-sdk.txt +7 -7
- package/package.json +1 -1
- package/sdk/dist/namespaces/ai.d.ts +2 -2
- package/sdk/dist/namespaces/ai.d.ts.map +1 -1
- package/sdk/dist/namespaces/ai.js +4 -4
- package/sdk/dist/namespaces/ai.js.map +1 -1
- package/sdk/dist/namespaces/identity-links.types.d.ts +4 -4
- package/sdk/dist/namespaces/identity-links.types.d.ts.map +1 -1
- package/sdk/dist/namespaces/repos.d.ts +3 -3
- package/sdk/dist/namespaces/repos.js +5 -5
- package/sdk/dist/namespaces/repos.js.map +1 -1
- package/sdk/dist/namespaces/vouchers.d.ts +1 -1
- package/sdk/dist/namespaces/vouchers.d.ts.map +1 -1
- package/sdk/dist/node/vault-byo-config.js +1 -1
- package/sdk/dist/node/vault-deploy.d.ts +2 -2
- package/sdk/dist/node/vault-deploy.js +2 -2
- package/sdk/dist/node/vault-mirror.js +3 -3
- package/sdk/dist/node/vault-mirror.js.map +1 -1
- package/sdk/dist/node/wallets.d.ts.map +1 -1
- package/sdk/dist/node/wallets.js +3 -2
- package/sdk/dist/node/wallets.js.map +1 -1
package/dist/docs/llms-sdk.txt
CHANGED
|
@@ -1379,7 +1379,7 @@ demoteUser(id, email): Promise<void>
|
|
|
1379
1379
|
- `tier: "prototype" | "hobby" | "team" | null` — the organization's active tier.
|
|
1380
1380
|
- `advisories?: [{ type, summary, next_actions[] }]` — org-level advisories (recovery-event-reachability); present only when at least one applies. `type: "owner_unreachable"` means the owning organization resolves to zero verified notification recipients — mandatory recovery/security notifications (e.g. a mailbox suspension) currently reach nobody. The remedy rides `next_actions[]`: register and verify a person contact via `POST /agent/v1/contact` (`r.admin.setAgentContact`). Reachability is also machine-checkable on `r.me.status().reachability` (`{ reachable, verified_recipient_count, sources[], skipped_last_90d }`).
|
|
1381
1381
|
|
|
1382
|
-
`r.projects.list(opts?)` reads the named, domain-aware inventory (`GET /projects/v1`, project-findability). Each `ProjectSummary` carries `id`, `name`, `tier`, `site_url` (first claimed run402.com subdomain → else first custom domain → else null), `custom_domains[]`, `status` / `effective_status`, `organization_lifecycle_state`, `lease_perpetual`, `
|
|
1382
|
+
`r.projects.list(opts?)` reads the named, domain-aware inventory (`GET /projects/v1`, project-findability). Each `ProjectSummary` carries `id`, `name`, `tier`, `site_url` (first claimed run402.com subdomain → else first custom domain → else null), `custom_domains[]`, `status` / `effective_status`, `organization_lifecycle_state`, `lease_perpetual`, `org_id` (the owning org), `created_by` (provisioning principal), and `created_at`. The response is `{ projects, has_more?, next_cursor?, scope? }`. Membership-scoped by default — org-owned control plane: a wallet *authenticates* (SIWX signed from the provider; mandatory server-side) but does not *own* — this lists projects owned by orgs the wallet's resolved principal is an active member of, ∪ projects with an active per-project grant. Options: `{ org }` filters to one org (`?org_id`; authorize-before-reveal — non-member/guessed id → 403, non-UUID → 400), `{ limit, cursor }` paginate (`?limit` default 50 max 200, `?after`), and `{ all: true }` reads every project the caller can reach across all its orgs (`GET /agent/v1/me/projects`) — pass `{ all: true, token }` (a sign-in session token) for the person's account, else `all` uses the credential provider (a SIWX wallet reads its own slice) and echoes `scope` (`"principal"` or `"wallet"`). `all` + `org` together throws `LocalError` (mutually exclusive). `api_calls` / `storage_bytes` remain optional on `ProjectSummary` for back-compat but the named inventory does not populate them — read `r.projects.getUsage(id)` for live usage.
|
|
1383
1383
|
|
|
1384
1384
|
`r.projects.get(id)` is the authoritative single-project read (`GET /projects/v1/:id`, gateway `project.read`) — a `ProjectDetail` superset of a list row: `project_id`, `public_id`, `name`, `org_id`, `tier`, `effective_status`, `organization_lifecycle_state`, `site_url` (`| null`), `custom_domains[]`, `last_deploy` (`{ release_id, activated_at } | null`), `mailbox[]` (active addresses), `usage` (`{ api_calls, storage_bytes, api_calls_limit, storage_bytes_limit, storage_limit }` — `storage_limit` is the byte limit as a human string, e.g. `"250 MB"`), and `created_at`. Caller-authed (SIWX/control-plane, no project keys) and works without the project in the local project-key cache. It returns NO secrets — authorize-before-reveal means an unauthorized/guessed id throws `Unauthorized` (403, or `NotAuthorizedError` for an org-membership denial), never a not-found oracle. Use `r.credentials.projectKeys.status(...)` / `export(...)` for explicit local cache inspection or secret export. Scoped form: `(await r.project(id)).projects.get()`.
|
|
1385
1385
|
|
|
@@ -2218,7 +2218,7 @@ compact(opts?): Promise<VaultCompactResult>
|
|
|
2218
2218
|
prune(opts?): Promise<VaultPruneResult> // plan; pass { submit } with both verifier receipts to submit
|
|
2219
2219
|
verify(opts?: { persist? }): Promise<VaultVerifiedState> // persist defaults true; false walks + verifies the same way but writes neither local pin
|
|
2220
2220
|
fsck(opts?: { write?, mirror? }): Promise<VaultFsckResult> // repo-surface-consolidation D2/D3: `repos fsck`'s primitive — verify + materialize + explicit pin_before/pin_after/local_state_changed; write:false is the `--no-write` audit mode (computes the real answer, persists nothing); mirror:true also runs mirrorVerify and folds its report in
|
|
2221
|
-
deploy(opts): Promise<VaultDeployResult> // the
|
|
2221
|
+
deploy(opts): Promise<VaultDeployResult> // the vault-gated deploy (raw; takes an injected lane — see applyWithVault below)
|
|
2222
2222
|
restore({ target_dir, ... }): Promise<{ refs, generation }> // the clone-back path git-remote-run402 fetch drives; index-packs objects and leaves ref creation to the caller
|
|
2223
2223
|
scaffoldRemote({ repo_dir, org_id, project_id, remote_name?, remote_url? }): Promise<VaultScaffoldRemoteResult> // { name, url, created_repository, already_present, existing_url, reason } — D1: claims `origin` when free, falls back to `run402` when taken, never touches an existing remote either way
|
|
2224
2224
|
open(opts?): Promise<VaultHandle> // the raw protocol object, for ref transactions or repair
|
|
@@ -2317,7 +2317,7 @@ if (plan.allocation_needed) {
|
|
|
2317
2317
|
|
|
2318
2318
|
#### Deploying a vaulted project — `applyWithVault`
|
|
2319
2319
|
|
|
2320
|
-
`r.repos.deploy(...)` is the raw
|
|
2320
|
+
`r.repos.deploy(...)` is the raw vault-gated machine and takes an injected lane. `applyWithVault` (`@run402/sdk/node`) is the supplied one: it reads the project's `vault_policy`, and only a `required` project captures at all.
|
|
2321
2321
|
|
|
2322
2322
|
```ts
|
|
2323
2323
|
import { applyWithVault, run402 } from "@run402/sdk/node";
|
|
@@ -2562,7 +2562,7 @@ createCheckout(organizationId, checkout: { product: "balance_topup", amountUsdMi
|
|
|
2562
2562
|
setAutoRecharge(opts: { organizationId: string, enabled: boolean, threshold? }): Promise<void>
|
|
2563
2563
|
checkBalance(identifier): Promise<OrganizationDetail> // identifier = organization id (UUID) | wallet | email
|
|
2564
2564
|
getOrganization(identifier): Promise<OrganizationDetail>
|
|
2565
|
-
lookupOrganization(identifier): Promise<OrganizationDetail> // resolve wallet/email → organization (incl.
|
|
2565
|
+
lookupOrganization(identifier): Promise<OrganizationDetail> // resolve wallet/email → organization (incl. org_id)
|
|
2566
2566
|
balance(identifier): Promise<OrganizationDetail> // alias of checkBalance
|
|
2567
2567
|
history(identifier, limit?: number): Promise<BillingHistoryResult>
|
|
2568
2568
|
getHistory(identifier, limit?: number): Promise<BillingHistoryResult>
|
|
@@ -2623,7 +2623,7 @@ generateImage(opts: { prompt, aspect?, orgId? }): Promise<GenerateImageResult> /
|
|
|
2623
2623
|
|
|
2624
2624
|
`orgId` is the paying organization and is read only on the MPP Lightning
|
|
2625
2625
|
rail: a principal that belongs to several organizations is refused
|
|
2626
|
-
`ORGANIZATION_SELECTION_REQUIRED` (HTTP 400, `details.
|
|
2626
|
+
`ORGANIZATION_SELECTION_REQUIRED` (HTTP 400, `details.org_ids` lists
|
|
2627
2627
|
the candidates) unless the body names one; x402 and Tempo ignore it. When
|
|
2628
2628
|
`orgId` is omitted and the gateway answers that code, `generateImage` retries
|
|
2629
2629
|
**once** with the single candidate that matches a local context, most
|
|
@@ -2632,7 +2632,7 @@ deliberate first: the provider's current organization
|
|
|
2632
2632
|
project's cached owning `org_id`; only when neither names a candidate, a single
|
|
2633
2633
|
stored project's owning org. Zero or several matches re-throw the `ApiError`
|
|
2634
2634
|
with the same `code` and status, the candidates in the message and
|
|
2635
|
-
`details.
|
|
2635
|
+
`details.org_ids` (plus `details.matched_org_ids`), and
|
|
2636
2636
|
`nextActions` naming `--org <org_id>` / `run402 orgs use <org_id>`. An `orgId`
|
|
2637
2637
|
you passed is never second-guessed: the gateway's refusal is returned as-is.
|
|
2638
2638
|
Nothing is inferred from membership count alone.
|
|
@@ -2697,7 +2697,7 @@ calls through the allowance rail — no on-chain payment.
|
|
|
2697
2697
|
answer on purpose), `VOUCHER_EXPIRED` (410), `PROMO_LIMIT_REACHED` (403).
|
|
2698
2698
|
|
|
2699
2699
|
`RedeemVoucherResult` carries `amount_usd_micros`, the post-credit
|
|
2700
|
-
`balance_usd_micros`, `
|
|
2700
|
+
`balance_usd_micros`, `org_id`, `redeemed_at`, `already_redeemed`,
|
|
2701
2701
|
`promo_lifetime_ceiling_usd_micros` (the ceiling that applied — per issuer, so
|
|
2702
2702
|
a launch voucher from the platform has its own), and `next_actions[]` (usually
|
|
2703
2703
|
the tier the new balance now covers, with a ready-to-run `cli` string).
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "run402-mcp",
|
|
3
|
-
"version": "4.
|
|
3
|
+
"version": "4.104.1",
|
|
4
4
|
"packageManager": "npm@11.19.0",
|
|
5
5
|
"mcpName": "com.run402/mcp",
|
|
6
6
|
"description": "MCP server for Run402 — full-stack backend infrastructure for AI agents: Postgres, auth, storage, serverless functions and atomic deploys. Paid with x402/MPP. Includes $0.03 image generation.",
|
|
@@ -38,7 +38,7 @@ export interface GenerateImageOptions {
|
|
|
38
38
|
*
|
|
39
39
|
* When omitted and the gateway answers `ORGANIZATION_SELECTION_REQUIRED`,
|
|
40
40
|
* the SDK retries ONCE with the one candidate from
|
|
41
|
-
* `details.
|
|
41
|
+
* `details.org_ids` that matches a local context — the
|
|
42
42
|
* provider's active organization (`run402 orgs use`) or the active
|
|
43
43
|
* project's cached owning org, else any locally stored project's owning
|
|
44
44
|
* org. Zero or several matches surface the error with the candidate ids
|
|
@@ -49,7 +49,7 @@ export interface GenerateImageOptions {
|
|
|
49
49
|
}
|
|
50
50
|
/** The gateway's answer when a multi-org principal names no paying org on the Lightning rail. */
|
|
51
51
|
export declare const ORGANIZATION_SELECTION_REQUIRED = "ORGANIZATION_SELECTION_REQUIRED";
|
|
52
|
-
/** `details.
|
|
52
|
+
/** `details.org_ids` off an `ORGANIZATION_SELECTION_REQUIRED` error, else `[]`. */
|
|
53
53
|
export declare function organizationCandidatesFromError(err: unknown): string[];
|
|
54
54
|
export interface GenerateImageResult {
|
|
55
55
|
/** Base64-encoded bytes. */
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"ai.d.ts","sourceRoot":"","sources":["../../src/namespaces/ai.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAK9D,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE;QACX,MAAM,EAAE,OAAO,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,EAAE,MAAM,CAAC;QACxB,mBAAmB,EAAE,MAAM,CAAC;KAC7B,CAAC;CACH;AAED,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,UAAU,CAAC;AAG9D,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,iGAAiG;AACjG,eAAO,MAAM,+BAA+B,oCAAoC,CAAC;AAEjF,
|
|
1
|
+
{"version":3,"file":"ai.d.ts","sourceRoot":"","sources":["../../src/namespaces/ai.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAK9D,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE;QACX,MAAM,EAAE,OAAO,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,EAAE,MAAM,CAAC;QACxB,mBAAmB,EAAE,MAAM,CAAC;KAC7B,CAAC;CACH;AAED,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,UAAU,CAAC;AAG9D,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,iGAAiG;AACjG,eAAO,MAAM,+BAA+B,oCAAoC,CAAC;AAEjF,mFAAmF;AACnF,wBAAgB,+BAA+B,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,EAAE,CAOtE;AAED,MAAM,WAAW,mBAAmB;IAClC,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;OAQG;IACH,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACnC;AAED,qBAAa,EAAE;IACD,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAE3C,yEAAyE;IACnE,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAepF,mFAAmF;IAC7E,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAWxE,8DAA8D;IACxD,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAStD;;;;;OAKG;IACG,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAoB9E"}
|
|
@@ -7,13 +7,13 @@ import { requireProjectCredentials } from "../project-credentials.js";
|
|
|
7
7
|
const IMAGE_ASPECTS = ["square", "landscape", "portrait"];
|
|
8
8
|
/** The gateway's answer when a multi-org principal names no paying org on the Lightning rail. */
|
|
9
9
|
export const ORGANIZATION_SELECTION_REQUIRED = "ORGANIZATION_SELECTION_REQUIRED";
|
|
10
|
-
/** `details.
|
|
10
|
+
/** `details.org_ids` off an `ORGANIZATION_SELECTION_REQUIRED` error, else `[]`. */
|
|
11
11
|
export function organizationCandidatesFromError(err) {
|
|
12
12
|
if (!isRun402Error(err) || err.code !== ORGANIZATION_SELECTION_REQUIRED)
|
|
13
13
|
return [];
|
|
14
14
|
const details = err.details;
|
|
15
15
|
const ids = details && typeof details === "object" && !Array.isArray(details)
|
|
16
|
-
? details.
|
|
16
|
+
? details.org_ids
|
|
17
17
|
: undefined;
|
|
18
18
|
return Array.isArray(ids) ? ids.filter((id) => typeof id === "string" && id.length > 0) : [];
|
|
19
19
|
}
|
|
@@ -163,7 +163,7 @@ function organizationSelectionError(err, candidates, matches) {
|
|
|
163
163
|
{
|
|
164
164
|
type: "edit_request",
|
|
165
165
|
command: "run402 image generate \"<prompt>\" --org <org_id>",
|
|
166
|
-
why: "Name the paying organization on this call (SDK: generateImage({ orgId })). Candidates are in details.
|
|
166
|
+
why: "Name the paying organization on this call (SDK: generateImage({ orgId })). Candidates are in details.org_ids.",
|
|
167
167
|
},
|
|
168
168
|
{
|
|
169
169
|
type: "edit_request",
|
|
@@ -176,7 +176,7 @@ function organizationSelectionError(err, candidates, matches) {
|
|
|
176
176
|
...envelope,
|
|
177
177
|
message,
|
|
178
178
|
code: ORGANIZATION_SELECTION_REQUIRED,
|
|
179
|
-
details: { ...details,
|
|
179
|
+
details: { ...details, org_ids: candidates, matched_org_ids: matches },
|
|
180
180
|
next_actions: nextActions,
|
|
181
181
|
}, "generating image");
|
|
182
182
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"ai.js","sourceRoot":"","sources":["../../src/namespaces/ai.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAEnE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAgCtE,MAAM,aAAa,GAA2B,CAAC,QAAQ,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;AAqBlF,iGAAiG;AACjG,MAAM,CAAC,MAAM,+BAA+B,GAAG,iCAAiC,CAAC;AAEjF,
|
|
1
|
+
{"version":3,"file":"ai.js","sourceRoot":"","sources":["../../src/namespaces/ai.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAEnE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAgCtE,MAAM,aAAa,GAA2B,CAAC,QAAQ,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;AAqBlF,iGAAiG;AACjG,MAAM,CAAC,MAAM,+BAA+B,GAAG,iCAAiC,CAAC;AAEjF,mFAAmF;AACnF,MAAM,UAAU,+BAA+B,CAAC,GAAY;IAC1D,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,+BAA+B;QAAE,OAAO,EAAE,CAAC;IACnF,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,MAAM,GAAG,GAAG,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAC3E,CAAC,CAAE,OAAiC,CAAC,OAAO;QAC5C,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7G,CAAC;AAmBD,MAAM,OAAO,EAAE;IACgB;IAA7B,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,yEAAyE;IACzE,KAAK,CAAC,SAAS,CAAC,SAAiB,EAAE,IAAsB;QACvD,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;QAE5F,MAAM,IAAI,GAA2B,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QACtE,IAAI,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACrC,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAE9C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAkB,kBAAkB,EAAE;YAC9D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,WAAW,EAAE,EAAE;YAC3D,IAAI;YACJ,OAAO,EAAE,kBAAkB;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,IAAY;QAC5C,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC;QAE9F,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAiB,iBAAiB,EAAE;YAC5D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,WAAW,EAAE,EAAE;YAC3D,IAAI,EAAE,EAAE,IAAI,EAAE;YACd,OAAO,EAAE,oBAAoB;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,8DAA8D;IAC9D,KAAK,CAAC,KAAK,CAAC,SAAiB;QAC3B,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;QAE7F,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAgB,cAAc,EAAE;YACxD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,WAAW,EAAE,EAAE;YAC3D,OAAO,EAAE,mBAAmB;SAC7B,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAC,IAA0B;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC;QACvC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,UAAU,CAClB,0BAA0B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EACpD,kBAAkB,CACnB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,wDAAwD;YACxD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,+BAA+B,CAAC,GAAG,CAAC,CAAC;YAC1E,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,GAAG,CAAC;YACvC,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YACtE,IAAI,OAAO,CAAC,MAAM;gBAAE,OAAO,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/F,MAAM,0BAA0B,CAAC,GAAkB,EAAE,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;CACF;AAED,0EAA0E;AAC1E,4EAA4E;AAC5E,cAAc;AAEd,KAAK,UAAU,iBAAiB,CAC9B,MAAc,EACd,MAAc,EACd,MAAmB,EACnB,KAAyB;IAEzB,qEAAqE;IACrE,sEAAsE;IACtE,qEAAqE;IACrE,8BAA8B;IAC9B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAC1C,oBAAoB,EACpB,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAC/G,CAAC;IACF,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,sBAAsB,CACnC,MAAc,EACd,UAAoB;IAEpB,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5E,IAAI,SAAS;QAAE,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACpF,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QAC9F,IAAI,MAAM;YAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,sBAAsB,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACnF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACpF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACxE,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3D,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACpF,CAAC;AAED,KAAK,UAAU,YAAY,CAAI,IAAsC;IACnE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,EAAE,CAAC;QAC3B,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,MAAM,KAAK,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAA8B,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACtG,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED;;;;GAIG;AACH,SAAS,0BAA0B,CAAC,GAAgB,EAAE,UAAoB,EAAE,OAAiB;IAC3F,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QACnF,CAAC,CAAE,GAAG,CAAC,IAAgC;QACvC,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC1G,CAAC,CAAE,QAAQ,CAAC,OAAmC;QAC/C,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC;QAC/B,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,aAAa,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,0DAA0D;QAC5G,CAAC,CAAC,8GAA8G,CAAC;IACnH,MAAM,OAAO,GACX,kEAAkE,UAAU,CAAC,MAAM,iBAAiB;QACpG,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,MAAM,4EAA4E,GAAG,CAAC,MAAM,IAAI,GAAG,GAAG,CAAC;IAC3I,MAAM,WAAW,GAAiB;QAChC;YACE,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,mDAAmD;YAC5D,GAAG,EAAE,+GAA+G;SACrH;QACD;YACE,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,0BAA0B;YACnC,GAAG,EAAE,iFAAiF;SACvF;QACD,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAE,QAAQ,CAAC,YAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;KACzF,CAAC;IACF,OAAO,IAAI,QAAQ,CACjB,OAAO,EACP,GAAG,CAAC,MAAM,EACV;QACE,GAAG,QAAQ;QACX,OAAO;QACP,IAAI,EAAE,+BAA+B;QACrC,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,OAAO,EAAE;QACtE,YAAY,EAAE,WAAW;KAC1B,EACD,kBAAkB,CACnB,CAAC;AACJ,CAAC"}
|
|
@@ -41,25 +41,25 @@ export interface PrincipalSnapshot {
|
|
|
41
41
|
}
|
|
42
42
|
export type AuthoritySnapshot = {
|
|
43
43
|
kind: "organization_membership";
|
|
44
|
-
|
|
44
|
+
org_id: string;
|
|
45
45
|
membership_id: string;
|
|
46
46
|
role: string;
|
|
47
47
|
} | {
|
|
48
48
|
kind: "project_grant";
|
|
49
|
-
|
|
49
|
+
org_id: string;
|
|
50
50
|
project_id: string;
|
|
51
51
|
grant_id: string;
|
|
52
52
|
scope: string[];
|
|
53
53
|
} | {
|
|
54
54
|
kind: "grant_key";
|
|
55
|
-
|
|
55
|
+
org_id: string;
|
|
56
56
|
project_id: string;
|
|
57
57
|
grant_id: string;
|
|
58
58
|
grant_key_id: string;
|
|
59
59
|
scope: string[];
|
|
60
60
|
} | {
|
|
61
61
|
kind: "ci";
|
|
62
|
-
|
|
62
|
+
org_id: string;
|
|
63
63
|
project_id: string;
|
|
64
64
|
credential_id: string;
|
|
65
65
|
} | {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"identity-links.types.d.ts","sourceRoot":"","sources":["../../src/namespaces/identity-links.types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,4BAA4B;IAC3C,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EACV,+BAA+B,GAC/B,qCAAqC,GACrC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAClB,IAAI,EAAE,aAAa,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC7B,gBAAgB,EAAE,QAAQ,GAAG,SAAS,GAAG,oBAAoB,CAAC;IAC9D,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,OAAO,GAAG,OAAO,GAAG,IAAI,GAAG,QAAQ,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACpE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,iBAAiB,EAAE,4BAA4B,EAAE,CAAC;CACnD;AAED,MAAM,WAAW,iCAAiC;IAChD,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACrC,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,OAAO,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,QAAQ,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,OAAO,GAAG,OAAO,GAAG,IAAI,GAAG,QAAQ,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACpE,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,4BAA4B,EAAE,sBAAsB,EAAE,CAAC;CACxD;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,yBAAyB,CAAC;IAAC,
|
|
1
|
+
{"version":3,"file":"identity-links.types.d.ts","sourceRoot":"","sources":["../../src/namespaces/identity-links.types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,4BAA4B;IAC3C,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EACV,+BAA+B,GAC/B,qCAAqC,GACrC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAClB,IAAI,EAAE,aAAa,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC7B,gBAAgB,EAAE,QAAQ,GAAG,SAAS,GAAG,oBAAoB,CAAC;IAC9D,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,OAAO,GAAG,OAAO,GAAG,IAAI,GAAG,QAAQ,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACpE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,iBAAiB,EAAE,4BAA4B,EAAE,CAAC;CACnD;AAED,MAAM,WAAW,iCAAiC;IAChD,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACrC,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,OAAO,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,QAAQ,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,OAAO,GAAG,OAAO,GAAG,IAAI,GAAG,QAAQ,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACpE,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,4BAA4B,EAAE,sBAAsB,EAAE,CAAC;CACxD;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,yBAAyB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACxF;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GAChG;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GAClH;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GACzE;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC;AAE7C,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,CAAC,CAAC;IAClB,SAAS,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACpC,aAAa,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC5C,SAAS,EAAE,iBAAiB,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,qBAAqB;IACpC,0BAA0B,EAAE,MAAM,CAAC;IACnC,cAAc,EAAE,+BAA+B,CAAC;IAChD,UAAU,EAAE,QAAQ,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,UAAU,EAAE;QACV,UAAU,EAAE,oBAAoB,CAAC;QACjC,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAC3B,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC9C;AAED,MAAM,WAAW,6BAA8B,SAAQ,qBAAqB;IAC1E,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,uBAAuB;IACtC,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC7B,gBAAgB,EAAE,QAAQ,GAAG,SAAS,GAAG,oBAAoB,CAAC;IAC9D,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,cAAc,EAAE,OAAO,GAAG,OAAO,GAAG,IAAI,GAAG,QAAQ,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;KACrE,CAAC;IACF,mBAAmB,EAAE;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,cAAc,EAAE,OAAO,GAAG,OAAO,GAAG,IAAI,GAAG,QAAQ,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;KACrE,CAAC;IACF,WAAW,EAAE,YAAY,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAuB,SAAQ,uBAAuB;IACrE,cAAc,EAAE,+BAA+B,CAAC;IAChD,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB,EAAE,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,sCAAsC;IACrD,cAAc,EAAE,CAAC,CAAC;IAClB,kBAAkB,EAAE,uBAAuB,GAAG,qBAAqB,CAAC;IACpE,kBAAkB,EAAE,iBAAiB,CAAC;IACtC,cAAc,EAAE,iBAAiB,GAAG,wBAAwB,CAAC;IAC7D,aAAa,EAAE,iBAAiB,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAuB,SAAQ,uBAAuB;IACrE,cAAc,EAAE,qCAAqC,CAAC;IACtD,cAAc,EAAE,IAAI,CAAC;IACrB,gBAAgB,EAAE,IAAI,CAAC;IACvB,sBAAsB,EAAE,sCAAsC,CAAC;CAChE;AAED,sFAAsF;AACtF,MAAM,MAAM,iBAAiB,GAAG,sBAAsB,GAAG,sBAAsB,CAAC;AAEhF,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,4BAA4B,EAAE,CAAC;IAC/C,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B"}
|
|
@@ -1785,7 +1785,7 @@ export declare class Repos {
|
|
|
1785
1785
|
/**
|
|
1786
1786
|
* The capture-time copies a plain `git push` through the remote helper
|
|
1787
1787
|
* owes exactly as {@link capture} and {@link deploy} do: the opt-in mirror
|
|
1788
|
-
*
|
|
1788
|
+
* mirror write and, on a BYO vault, the signed-chain copy into the customer
|
|
1789
1789
|
* bucket (vault-byo-primary-bucket task 3.3). The helper publishes
|
|
1790
1790
|
* through `Vault.push` directly, so it calls this right after a
|
|
1791
1791
|
* generation lands. Same contract as the private hooks it composes:
|
|
@@ -2128,7 +2128,7 @@ export declare class Repos {
|
|
|
2128
2128
|
*/
|
|
2129
2129
|
access(options?: VaultHandleOptions): Promise<VaultAccessResult>;
|
|
2130
2130
|
/**
|
|
2131
|
-
* The
|
|
2131
|
+
* The vault-gated deploy: both lanes under one fresh `capture_id`, resolving
|
|
2132
2132
|
* to exactly one of five outcomes — `DEPLOYED_AND_VAULTED`,
|
|
2133
2133
|
* `DEPLOY_BLOCKED_PUSH_FAILED`, `DEPLOY_FAILED_VAULTED`,
|
|
2134
2134
|
* `DEPLOY_FAILED_UNVAULTED`, `DEPLOYED_UNVAULTED_OVERRIDE`.
|
|
@@ -2139,7 +2139,7 @@ export declare class Repos {
|
|
|
2139
2139
|
*
|
|
2140
2140
|
* `run402 deploy` is design D5's PRIMARY envelope-recipient reconcile hook
|
|
2141
2141
|
* ("the same 'one command every agent runs' argument that decided
|
|
2142
|
-
* deploy-implies-capture") and design D6's primary
|
|
2142
|
+
* deploy-implies-capture") and design D6's primary mirror-write trigger
|
|
2143
2143
|
* — both fire HERE, not inside {@link runVaultDeploy} itself, mirroring
|
|
2144
2144
|
* {@link capture}'s exact non-blocking contract: best-effort, NEVER throw,
|
|
2145
2145
|
* NEVER alter the deploy outcome already resolved above, reported BESIDE it
|
|
@@ -1582,7 +1582,7 @@ export class Repos {
|
|
|
1582
1582
|
...(options.checkpoint ? { checkpoint: true } : {}),
|
|
1583
1583
|
};
|
|
1584
1584
|
const result = await handle.vault.push(push).catch((e) => { throw this.#enrichEpochRotationRequired(e, handle.repo_id); });
|
|
1585
|
-
// Capture-time
|
|
1585
|
+
// Capture-time mirror-write hook: fires only when a
|
|
1586
1586
|
// mirror is configured; NEVER throws, NEVER alters the vault outcome
|
|
1587
1587
|
// above (already returned/committed) — a mirror failure is a named
|
|
1588
1588
|
// pending finding reported BESIDE the vault result, on its own field.
|
|
@@ -2682,7 +2682,7 @@ export class Repos {
|
|
|
2682
2682
|
next_actions: nextActions,
|
|
2683
2683
|
};
|
|
2684
2684
|
}
|
|
2685
|
-
/** Best-effort
|
|
2685
|
+
/** Best-effort mirror write: catches EVERYTHING, including the lazy module import itself, so a mirror problem can never surface as a `capture()` throw. */
|
|
2686
2686
|
/**
|
|
2687
2687
|
* `EPOCH_ROTATION_REQUIRED` (D193) is left THROWN — never swallowed into a
|
|
2688
2688
|
* silent auto-rotation — because this call site cannot legally decide the
|
|
@@ -2723,7 +2723,7 @@ export class Repos {
|
|
|
2723
2723
|
/**
|
|
2724
2724
|
* The capture-time copies a plain `git push` through the remote helper
|
|
2725
2725
|
* owes exactly as {@link capture} and {@link deploy} do: the opt-in mirror
|
|
2726
|
-
*
|
|
2726
|
+
* mirror write and, on a BYO vault, the signed-chain copy into the customer
|
|
2727
2727
|
* bucket (vault-byo-primary-bucket task 3.3). The helper publishes
|
|
2728
2728
|
* through `Vault.push` directly, so it calls this right after a
|
|
2729
2729
|
* generation lands. Same contract as the private hooks it composes:
|
|
@@ -3888,7 +3888,7 @@ export class Repos {
|
|
|
3888
3888
|
};
|
|
3889
3889
|
}
|
|
3890
3890
|
/**
|
|
3891
|
-
* The
|
|
3891
|
+
* The vault-gated deploy: both lanes under one fresh `capture_id`, resolving
|
|
3892
3892
|
* to exactly one of five outcomes — `DEPLOYED_AND_VAULTED`,
|
|
3893
3893
|
* `DEPLOY_BLOCKED_PUSH_FAILED`, `DEPLOY_FAILED_VAULTED`,
|
|
3894
3894
|
* `DEPLOY_FAILED_UNVAULTED`, `DEPLOYED_UNVAULTED_OVERRIDE`.
|
|
@@ -3899,7 +3899,7 @@ export class Repos {
|
|
|
3899
3899
|
*
|
|
3900
3900
|
* `run402 deploy` is design D5's PRIMARY envelope-recipient reconcile hook
|
|
3901
3901
|
* ("the same 'one command every agent runs' argument that decided
|
|
3902
|
-
* deploy-implies-capture") and design D6's primary
|
|
3902
|
+
* deploy-implies-capture") and design D6's primary mirror-write trigger
|
|
3903
3903
|
* — both fire HERE, not inside {@link runVaultDeploy} itself, mirroring
|
|
3904
3904
|
* {@link capture}'s exact non-blocking contract: best-effort, NEVER throw,
|
|
3905
3905
|
* NEVER alter the deploy outcome already resolved above, reported BESIDE it
|