sliccy 3.26.0 → 3.28.0

package/dist/node-server/_cloud_core/src/cone-config/index.d.ts

@@ -0,0 +1,77 @@
+export interface OAuthAccount {
+    providerId: string;
+    kind: 'oauth';
+    accessToken: string;
+    refreshToken?: string;
+    tokenExpiresAt?: number;
+    userName?: string;
+    baseUrl?: string;
+}
+export interface ApiKeyAccount {
+    providerId: string;
+    kind: 'apikey';
+    apiKey: string;
+    baseUrl?: string;
+    deployment?: string;
+    apiVersion?: string;
+}
+export type Account = OAuthAccount | ApiKeyAccount;
+export interface SecretEntry {
+    name: string;
+    value: string;
+    domains: string[];
+}
+export interface ConeConfig {
+    model: string;
+    accounts: Account[];
+    secrets: SecretEntry[];
+}
+export interface ConeConfigDelta {
+    model?: string;
+    upsert?: {
+        accounts?: Account[];
+        secrets?: SecretEntry[];
+    };
+    delete?: {
+        providerIds?: string[];
+        secretNames?: string[];
+    };
+}
+export interface ConeConfigIndex {
+    model: string;
+    accountProviderIds: string[];
+    accountMeta: Array<{
+        providerId: string;
+        kind: Account['kind'];
+        tokenExpiresAt?: number;
+    }>;
+    secretNames: string[];
+}
+/** Max serialized bundle size (bytes) accepted as a preboot env payload. */
+export declare const MAX_CONE_CONFIG_BYTES: number;
+export declare function validateConeConfig(input: unknown): ConeConfig;
+/**
+ * Validate an untrusted resume delta (the worker receives it as `unknown`).
+ * Nested accounts/secrets go through the same validators as a full bundle, so a
+ * malformed or newline-injecting entry is rejected at the boundary with a clear
+ * message rather than blowing up later inside mergeConeConfig.
+ */
+export declare function validateConeConfigDelta(input: unknown): ConeConfigDelta;
+export declare function mergeConeConfig(base: ConeConfig, delta: ConeConfigDelta): ConeConfig;
+/**
+ * Serialize flat secrets to the `NAME=value` / `NAME_DOMAINS=a,b` line format
+ * that node-server's EnvSecretStore reads. Values are written verbatim (no
+ * escaping — matching the existing parser), so secret names must be env-var
+ * identifiers and values/domains must be single-line (no newlines, and values
+ * must not break `NAME=value` parsing). Callers sanitize/validate inputs.
+ */
+export declare function serializeSecretsEnv(secrets: SecretEntry[]): string;
+export declare function bundleToFiles(cfg: ConeConfig): {
+    coneConfigJson: string;
+    secretsEnv: string;
+};
+export declare function bundleIndex(cfg: ConeConfig): ConeConfigIndex;
+/** Portable base64 of a UTF-8 string (worker/browser/node all have btoa+TextEncoder). */
+export declare function encodeBundleEnv(json: string): string;
+export declare function decodeBundleEnv(b64: string): string;
+//# sourceMappingURL=index.d.ts.map

package/dist/node-server/_cloud_core/src/cone-config/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cone-config/index.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,OAAO,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AACD,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AACD,MAAM,MAAM,OAAO,GAAG,YAAY,GAAG,aAAa,CAAC;AAEnD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,OAAO,EAAE,WAAW,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,WAAW,EAAE,CAAA;KAAE,CAAC;IAC3D,MAAM,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CAC7D;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,WAAW,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3F,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,4EAA4E;AAC5E,eAAO,MAAM,qBAAqB,QAAa,CAAC;AAMhD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAS7D;AA6DD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAiDvE;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,eAAe,GAAG,UAAU,CAYpF;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,CAOlE;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,UAAU,GAAG;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAM7F;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,UAAU,GAAG,eAAe,CAW5D;AAED,yFAAyF;AACzF,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQpD;AACD,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAInD"}

package/dist/node-server/_cloud_core/src/cone-config/index.js

@@ -0,0 +1,209 @@
+// Side-effect-free shared contract for cloud-cone configuration.
+// MUST NOT import e2b, node:*, or any runtime substrate — it is imported
+// by the browser webapp via the @slicc/cloud-core/cone-config subpath.
+/** Max serialized bundle size (bytes) accepted as a preboot env payload. */
+export const MAX_CONE_CONFIG_BYTES = 256 * 1024;
+function isStr(v) {
+    return typeof v === 'string';
+}
+export function validateConeConfig(input) {
+    if (!input || typeof input !== 'object')
+        throw new Error('cone-config: not an object');
+    const cfg = input;
+    if (!isStr(cfg.model))
+        throw new Error('cone-config: model must be a string');
+    if (!Array.isArray(cfg.accounts))
+        throw new Error('cone-config: accounts must be an array');
+    if (!Array.isArray(cfg.secrets))
+        throw new Error('cone-config: secrets must be an array');
+    const accounts = cfg.accounts.map((a) => validateAccount(a));
+    const secrets = cfg.secrets.map((s) => validateSecret(s));
+    return { model: cfg.model, accounts, secrets };
+}
+function validateAccount(a) {
+    if (!a || typeof a !== 'object')
+        throw new Error('cone-config: account not an object');
+    const acc = a;
+    if (!isStr(acc.providerId))
+        throw new Error('cone-config: account.providerId required');
+    if (!isStr(acc.kind))
+        throw new Error('cone-config: account.kind required');
+    if (acc.kind === 'oauth') {
+        if (!isStr(acc.accessToken))
+            throw new Error('cone-config: oauth account requires accessToken');
+        return {
+            providerId: acc.providerId,
+            kind: 'oauth',
+            accessToken: acc.accessToken,
+            ...(isStr(acc.refreshToken) ? { refreshToken: acc.refreshToken } : {}),
+            ...(typeof acc.tokenExpiresAt === 'number' ? { tokenExpiresAt: acc.tokenExpiresAt } : {}),
+            ...(isStr(acc.userName) ? { userName: acc.userName } : {}),
+            ...(isStr(acc.baseUrl) ? { baseUrl: acc.baseUrl } : {}),
+        };
+    }
+    if (acc.kind === 'apikey') {
+        if (!isStr(acc.apiKey))
+            throw new Error('cone-config: apikey account requires apiKey');
+        return {
+            providerId: acc.providerId,
+            kind: 'apikey',
+            apiKey: acc.apiKey,
+            ...(isStr(acc.baseUrl) ? { baseUrl: acc.baseUrl } : {}),
+            ...(isStr(acc.deployment) ? { deployment: acc.deployment } : {}),
+            ...(isStr(acc.apiVersion) ? { apiVersion: acc.apiVersion } : {}),
+        };
+    }
+    throw new Error(`cone-config: account.kind must be 'oauth' | 'apikey'`);
+}
+// secrets.env is line-based (NAME=value / NAME_DOMAINS=a,b) with no escaping,
+// so a newline/CR in a name or value would inject phantom lines on round-trip.
+// Names must be env-var identifiers; values and domains must be single-line.
+const ENV_NAME_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
+function hasNewline(v) {
+    return /[\r\n]/.test(v);
+}
+function validateSecret(s) {
+    if (!s || typeof s !== 'object')
+        throw new Error('cone-config: secret not an object');
+    const sec = s;
+    if (!isStr(sec.name))
+        throw new Error('cone-config: secret.name required');
+    if (!ENV_NAME_RE.test(sec.name)) {
+        throw new Error('cone-config: secret.name must be an env-var identifier ([A-Za-z_][A-Za-z0-9_]*)');
+    }
+    if (!isStr(sec.value))
+        throw new Error('cone-config: secret.value required');
+    if (hasNewline(sec.value))
+        throw new Error('cone-config: secret.value must be single-line');
+    if (!Array.isArray(sec.domains) || !sec.domains.every(isStr)) {
+        throw new Error('cone-config: secret.domains must be string[]');
+    }
+    if (sec.domains.some((d) => hasNewline(d) || d.includes(','))) {
+        throw new Error('cone-config: secret.domains entries must be single-line and comma-free');
+    }
+    return { name: sec.name, value: sec.value, domains: sec.domains };
+}
+/**
+ * Validate an untrusted resume delta (the worker receives it as `unknown`).
+ * Nested accounts/secrets go through the same validators as a full bundle, so a
+ * malformed or newline-injecting entry is rejected at the boundary with a clear
+ * message rather than blowing up later inside mergeConeConfig.
+ */
+export function validateConeConfigDelta(input) {
+    if (!input || typeof input !== 'object')
+        throw new Error('cone-config: delta not an object');
+    const d = input;
+    const out = {};
+    if (d.model !== undefined) {
+        if (!isStr(d.model))
+            throw new Error('cone-config: delta.model must be a string');
+        out.model = d.model;
+    }
+    if (d.upsert !== undefined) {
+        if (!d.upsert || typeof d.upsert !== 'object') {
+            throw new Error('cone-config: delta.upsert must be an object');
+        }
+        const up = d.upsert;
+        const upsert = {};
+        if (up.accounts !== undefined) {
+            if (!Array.isArray(up.accounts)) {
+                throw new Error('cone-config: delta.upsert.accounts must be an array');
+            }
+            upsert.accounts = up.accounts.map((a) => validateAccount(a));
+        }
+        if (up.secrets !== undefined) {
+            if (!Array.isArray(up.secrets)) {
+                throw new Error('cone-config: delta.upsert.secrets must be an array');
+            }
+            upsert.secrets = up.secrets.map((s) => validateSecret(s));
+        }
+        out.upsert = upsert;
+    }
+    if (d.delete !== undefined) {
+        if (!d.delete || typeof d.delete !== 'object') {
+            throw new Error('cone-config: delta.delete must be an object');
+        }
+        const del = d.delete;
+        const deletion = {};
+        if (del.providerIds !== undefined) {
+            if (!Array.isArray(del.providerIds) || !del.providerIds.every(isStr)) {
+                throw new Error('cone-config: delta.delete.providerIds must be string[]');
+            }
+            deletion.providerIds = del.providerIds;
+        }
+        if (del.secretNames !== undefined) {
+            if (!Array.isArray(del.secretNames) || !del.secretNames.every(isStr)) {
+                throw new Error('cone-config: delta.delete.secretNames must be string[]');
+            }
+            deletion.secretNames = del.secretNames;
+        }
+        out.delete = deletion;
+    }
+    return out;
+}
+export function mergeConeConfig(base, delta) {
+    const accounts = new Map(base.accounts.map((a) => [a.providerId, a]));
+    for (const a of delta.upsert?.accounts ?? [])
+        accounts.set(a.providerId, a);
+    for (const id of delta.delete?.providerIds ?? [])
+        accounts.delete(id);
+    const secrets = new Map(base.secrets.map((s) => [s.name, s]));
+    for (const s of delta.upsert?.secrets ?? [])
+        secrets.set(s.name, s);
+    for (const n of delta.delete?.secretNames ?? [])
+        secrets.delete(n);
+    return {
+        model: delta.model ?? base.model,
+        accounts: [...accounts.values()],
+        secrets: [...secrets.values()],
+    };
+}
+/**
+ * Serialize flat secrets to the `NAME=value` / `NAME_DOMAINS=a,b` line format
+ * that node-server's EnvSecretStore reads. Values are written verbatim (no
+ * escaping — matching the existing parser), so secret names must be env-var
+ * identifiers and values/domains must be single-line (no newlines, and values
+ * must not break `NAME=value` parsing). Callers sanitize/validate inputs.
+ */
+export function serializeSecretsEnv(secrets) {
+    const lines = [];
+    for (const s of secrets) {
+        lines.push(`${s.name}=${s.value}`);
+        lines.push(`${s.name}_DOMAINS=${s.domains.join(',')}`);
+    }
+    return lines.length ? lines.join('\n') + '\n' : '';
+}
+export function bundleToFiles(cfg) {
+    return {
+        // Secrets are excluded here and serialized separately into secretsEnv.
+        coneConfigJson: JSON.stringify({ model: cfg.model, accounts: cfg.accounts }),
+        secretsEnv: serializeSecretsEnv(cfg.secrets),
+    };
+}
+export function bundleIndex(cfg) {
+    return {
+        model: cfg.model,
+        accountProviderIds: cfg.accounts.map((a) => a.providerId),
+        accountMeta: cfg.accounts.map((a) => ({
+            providerId: a.providerId,
+            kind: a.kind,
+            tokenExpiresAt: a.kind === 'oauth' ? a.tokenExpiresAt : undefined,
+        })),
+        secretNames: cfg.secrets.map((s) => s.name),
+    };
+}
+/** Portable base64 of a UTF-8 string (worker/browser/node all have btoa+TextEncoder). */
+export function encodeBundleEnv(json) {
+    const bytes = new TextEncoder().encode(json);
+    let bin = '';
+    const CHUNK = 0x8000;
+    for (let i = 0; i < bytes.length; i += CHUNK) {
+        bin += String.fromCharCode(...bytes.subarray(i, i + CHUNK));
+    }
+    return btoa(bin);
+}
+export function decodeBundleEnv(b64) {
+    const bin = atob(b64);
+    const bytes = Uint8Array.from(bin, (c) => c.charCodeAt(0));
+    return new TextDecoder().decode(bytes);
+}

package/dist/node-server/_cloud_core/src/index.d.ts

@@ -1,3 +1,4 @@
+export * from './cone-config/index.js';
 export * from './errors.js';
 export type { KillConeDeps, KillConeResult } from './operations/kill.js';
 export { killCone } from './operations/kill.js';

package/dist/node-server/_cloud_core/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAGA,cAAc,aAAa,CAAC;AAC5B,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,YAAY,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAC/D,cAAc,cAAc,CAAC;AAC7B,YAAY,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,cAAc,gBAAgB,CAAC;AAC/B,cAAc,wBAAwB,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAQA,cAAc,wBAAwB,CAAC;AACvC,cAAc,aAAa,CAAC;AAC5B,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,YAAY,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAC/D,cAAc,cAAc,CAAC;AAC7B,YAAY,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,cAAc,gBAAgB,CAAC;AAC/B,cAAc,wBAAwB,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,cAAc,YAAY,CAAC"}

package/dist/node-server/_cloud_core/src/index.js

@@ -1,5 +1,11 @@
 // Public re-exports for the @slicc/cloud-core package.
 // Populated by subsequent tasks as we move code in.
+// Re-export the side-effect-free cone-config contract from the root too, so
+// Node/worker consumers (which go through node-server's inline-workspaces
+// packaging that only rewrites the bare '@slicc/cloud-core' specifier) can
+// import it from the root. The browser webapp must still import the
+// './cone-config' subpath to avoid pulling e2b into its bundle.
+export * from './cone-config/index.js';
 export * from './errors.js';
 export { killCone } from './operations/kill.js';
 export { listCones } from './operations/list.js';

package/dist/node-server/_cloud_core/src/operations/resume.d.ts

@@ -1,3 +1,4 @@
+import { type ConeConfigDelta, type ConeConfigIndex } from '../cone-config/index.js';
 import type { Registry } from '../registry.js';
 import type { SandboxSubstrate } from '../substrate.js';
 import type { ResumeResult } from '../types.js';
@@ -12,11 +13,23 @@ export interface ResumeConeOpts {
      * and BEFORE the leader-restart kick. Both CLI (cloud/resume.ts) and worker
      * (cloud-sessions-do.ts) pass this unconditionally now to inject a fresh IMS bearer. */
     refreshSecretsContents?: string;
+    /** Optional: merge delta into existing cone-config.json + secrets.env. */
+    coneConfigDelta?: ConeConfigDelta;
     pollIntervalMs?: number;
     pollTimeoutMs?: number;
     /** Skip the state check (NOT_FOUND + ALREADY_RUNNING). Used by the worker
      * after doing atomic cap-check + state-flip under DO lock. */
     skipStateCheck?: boolean;
 }
+/**
+ * Merge `delta` over the existing files; returns new file contents + names index.
+ * When `coneConfigJson` is null (a pre-feature cone), synthesizes a degenerate
+ * base from secrets.env.
+ */
+export declare function applyConeConfigDelta(coneConfigJson: string | null, secretsEnv: string, delta: ConeConfigDelta): {
+    coneConfigJson: string;
+    secretsEnv: string;
+    index: ConeConfigIndex;
+};
 export declare function resumeCone(deps: ResumeConeDeps, opts: ResumeConeOpts): Promise<ResumeResult>;
 //# sourceMappingURL=resume.d.ts.map

package/dist/node-server/_cloud_core/src/operations/resume.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resume.d.ts","sourceRoot":"","sources":["../../../src/operations/resume.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAiB,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;4FAEwF;IACxF,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;kEAC8D;IAC9D,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AASD,wBAAsB,UAAU,CAC9B,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,YAAY,CAAC,CA6EvB"}
+{"version":3,"file":"resume.d.ts","sourceRoot":"","sources":["../../../src/operations/resume.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,eAAe,EACpB,KAAK,eAAe,EAIrB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAiB,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;4FAEwF;IACxF,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,0EAA0E;IAC1E,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;kEAC8D;IAC9D,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAsCD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,MAAM,GAAG,IAAI,EAC7B,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,eAAe,GACrB;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,eAAe,CAAA;CAAE,CA2BxE;AAED,wBAAsB,UAAU,CAC9B,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,YAAY,CAAC,CA0GvB"}

package/dist/node-server/_cloud_core/src/operations/resume.js

@@ -1,3 +1,4 @@
+import { bundleIndex, bundleToFiles, mergeConeConfig, validateConeConfig, } from '../cone-config/index.js';
 import { CloudError } from '../errors.js';
 import { pollForRefreshedStatus } from '../polling.js';
 // curl writes its body to /dev/null and prints the HTTP status code on stdout.
@@ -5,6 +6,66 @@ import { pollForRefreshedStatus } from '../polling.js';
 // can distinguish "node-server not up yet" from "200/503 response received").
 // Therefore: no `|| true`; we parse status from stdout AND check exitCode.
 const KICK_CMD = 'curl -sS -X POST http://localhost:5710/api/leader-restart -o /dev/null -w "%{http_code}"';
+const DEFAULT_MODEL = 'adobe:claude-opus-4-6';
+function parseSecretsEnv(text) {
+    const domains = new Map();
+    for (const l of text.split('\n')) {
+        const eq = l.indexOf('=');
+        if (eq < 0)
+            continue;
+        const key = l.slice(0, eq);
+        if (key.endsWith('_DOMAINS')) {
+            domains.set(key.slice(0, -'_DOMAINS'.length), l
+                .slice(eq + 1)
+                .split(',')
+                .filter(Boolean));
+        }
+    }
+    const out = [];
+    for (const l of text.split('\n')) {
+        const eq = l.indexOf('=');
+        if (eq < 0)
+            continue;
+        const name = l.slice(0, eq);
+        if (name.endsWith('_DOMAINS'))
+            continue;
+        out.push({ name, value: l.slice(eq + 1), domains: domains.get(name) ?? [] });
+    }
+    return out;
+}
+/**
+ * Merge `delta` over the existing files; returns new file contents + names index.
+ * When `coneConfigJson` is null (a pre-feature cone), synthesizes a degenerate
+ * base from secrets.env.
+ */
+export function applyConeConfigDelta(coneConfigJson, secretsEnv, delta) {
+    let base;
+    if (coneConfigJson) {
+        let parsed;
+        try {
+            parsed = JSON.parse(coneConfigJson);
+        }
+        catch (err) {
+            // Distinguish a corrupt on-disk file from invalid data, so the surfaced
+            // error points at the right cause instead of an opaque SyntaxError.
+            throw new Error(`cone-config: corrupt /slicc/cone-config.json: ${err instanceof Error ? err.message : String(err)}`);
+        }
+        base = validateConeConfig({
+            model: parsed.model ?? DEFAULT_MODEL,
+            accounts: parsed.accounts ?? [],
+            secrets: parseSecretsEnv(secretsEnv),
+        });
+    }
+    else {
+        base = { model: DEFAULT_MODEL, accounts: [], secrets: parseSecretsEnv(secretsEnv) };
+    }
+    // Validate the MERGED result, not just the base: delta upserts arrive as
+    // unknown from the worker and are otherwise unvalidated, so this is where a
+    // newline-injecting secret value or bad name gets rejected before serialization.
+    const merged = validateConeConfig(mergeConeConfig(base, delta));
+    const files = bundleToFiles(merged);
+    return { ...files, index: bundleIndex(merged) };
+}
 export async function resumeCone(deps, opts) {
     // skipStateCheck is used by the worker after doing atomic cap-check + state-flip
     // under DO lock. CLI still wants the NOT_FOUND + ALREADY_RUNNING checks.
@@ -30,9 +91,35 @@ export async function resumeCone(deps, opts) {
     const baselineUpdatedAt = entry.lastJoinUpdatedAt;
     const baselineTrayId = entry.trayId;
     const handle = await deps.substrate.connect(entry.sandboxId);
-    // refreshSecretsContents: both CLI and worker pass this now to inject a fresh
-    // IMS bearer. Write to /slicc/secrets.env BEFORE the kick loop.
-    if (opts.refreshSecretsContents !== undefined) {
+    let resumeIndex;
+    // New: coneConfigDelta takes precedence — read existing files, merge, write both.
+    if (opts.coneConfigDelta) {
+        let existingConeConfig = null;
+        try {
+            existingConeConfig = await handle.readFile('/slicc/cone-config.json');
+        }
+        catch {
+            existingConeConfig = null;
+        }
+        let existingSecretsEnv = '';
+        try {
+            existingSecretsEnv = await handle.readFile('/slicc/secrets.env');
+        }
+        catch {
+            existingSecretsEnv = '';
+        }
+        const applied = applyConeConfigDelta(existingConeConfig, existingSecretsEnv, opts.coneConfigDelta);
+        await handle.writeFile('/slicc/secrets.env', applied.secretsEnv);
+        await handle.writeFile('/slicc/cone-config.json', applied.coneConfigJson);
+        // Reload the fetch-proxy masking so changed flat secrets take effect. Must
+        // succeed before the leader Page.reload — a silent failure here would leave
+        // the running cone with stale flat secrets while reporting resume success.
+        await reloadSecretsProxyUntilReady(handle);
+        resumeIndex = applied.index;
+    }
+    else if (opts.refreshSecretsContents !== undefined) {
+        // Legacy path: both CLI and worker pass this now to inject a fresh IMS bearer.
+        // Write to /slicc/secrets.env BEFORE the kick loop.
         await handle.writeFile('/slicc/secrets.env', opts.refreshSecretsContents);
     }
     // Kick the leader to recover from a possible onReconnectGaveUp state.
@@ -67,6 +154,7 @@ export async function resumeCone(deps, opts) {
         joinUrl: refreshed.joinUrl,
         trayRebuilt,
         ...(versionMismatch ? { versionMismatch } : {}),
+        coneConfigIndex: resumeIndex,
     };
 }
 async function kickLeaderUntilReady(handle) {
@@ -84,3 +172,29 @@ async function kickLeaderUntilReady(handle) {
     }
     return false;
 }
+const RELOAD_CMD = 'curl -sS -X POST http://localhost:5710/api/secrets/reload -o /dev/null -w "%{http_code}"';
+// Reload the node-server secret proxy, retrying the cold-start (503/connect)
+// window like the leader kick. Throws if it never succeeds — a stale fetch-proxy
+// would silently serve old flat secrets.
+async function reloadSecretsProxyUntilReady(handle) {
+    // Track why the last attempt didn't succeed so the exhaustion error is
+    // actionable (HTTP 503 cold-start vs. a connection-level curl failure).
+    let lastError = 'no attempt made';
+    for (let i = 0; i < 5; i++) {
+        const result = await handle.run(RELOAD_CMD);
+        if (result.exitCode === 0) {
+            const status = result.stdout.trim();
+            if (status === '200')
+                return;
+            if (status !== '503') {
+                throw new CloudError('INTERNAL', `/api/secrets/reload returned unexpected status ${status}`);
+            }
+            lastError = `HTTP ${status}`;
+        }
+        else {
+            lastError = `curl exit ${result.exitCode}: ${result.stderr.trim()}`;
+        }
+        await new Promise((r) => setTimeout(r, 1000));
+    }
+    throw new CloudError('INTERNAL', `Failed to reload secrets proxy after 5 retries (changed secrets may be stale; last: ${lastError})`);
+}

package/dist/node-server/_cloud_core/src/operations/start.d.ts

@@ -27,6 +27,9 @@ export interface StartConeOpts {
     /** Optional reservation ID from reserveSlot(); if provided, updates that
      * placeholder entry instead of appending a new one. */
     reservationId?: string;
+    /** Optional cone config JSON; injected as SLICC_CONE_CONFIG_B64 env and
+     * written to /slicc/cone-config.json after create. */
+    coneConfigJson?: string;
 }
 export interface StartConeDeps {
     substrate: SandboxSubstrate;

package/dist/node-server/_cloud_core/src/operations/start.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"start.d.ts","sourceRoot":"","sources":["../../../src/operations/start.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,KAAK,EAAiB,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,WAAW,aAAa;IAC5B;wEACoE;IACpE,WAAW,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,aAAa,EAAE,MAAM,CAAC;IACtB,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB;iEAC6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC;qEACiE;IACjE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,uDAAuD;IACvD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB;IACpB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;2DACuD;IACvD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,oDAAoD;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB,oCAAoC;IACpC,GAAG,CAAC,EAAE;QACJ,gBAAgB,EAAE,MAAM,CAAC;QACzB,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;IACF;;;2CAGuC;IACvC,eAAe,CAAC,EAAE,SAAS,EAAE,CAAC;CAC/B;AA6BD;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,aAAa,EACnB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC;IAAE,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC,CAwDpC;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAkJ9F"}
+{"version":3,"file":"start.d.ts","sourceRoot":"","sources":["../../../src/operations/start.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,KAAK,EAAiB,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,WAAW,aAAa;IAC5B;wEACoE;IACpE,WAAW,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,aAAa,EAAE,MAAM,CAAC;IACtB,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB;iEAC6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC;qEACiE;IACjE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,uDAAuD;IACvD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB;IACpB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;2DACuD;IACvD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;0DACsD;IACtD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,oDAAoD;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB,oCAAoC;IACpC,GAAG,CAAC,EAAE;QACJ,gBAAgB,EAAE,MAAM,CAAC;QACzB,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;IACF;;;2CAGuC;IACvC,eAAe,CAAC,EAAE,SAAS,EAAE,CAAC;CAC/B;AA6BD;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,aAAa,EACnB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC;IAAE,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC,CAwDpC;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAyJ9F"}

package/dist/node-server/_cloud_core/src/operations/start.js

@@ -1,3 +1,4 @@
+import { encodeBundleEnv } from '../cone-config/index.js';
 import { CloudError } from '../errors.js';
 import { pollCloudStatus } from '../polling.js';
 import { filterSecretsEnv } from '../secrets-filter.js';
@@ -98,6 +99,10 @@ export async function startCone(deps, opts) {
             autoPauseOnCap: opts.autoPauseOnCap ?? true,
             envVars: {
                 SLICC_TRAY_WORKER_BASE_URL: opts.workerBaseUrl,
+                SLICC_SECRETS_ENV_B64: encodeBundleEnv(safeSecrets),
+                ...(opts.coneConfigJson
+                    ? { SLICC_CONE_CONFIG_B64: encodeBundleEnv(opts.coneConfigJson) }
+                    : {}),
                 ...(opts.envs ?? {}),
             },
             metadata: {
@@ -166,6 +171,9 @@ export async function startCone(deps, opts) {
         //      because the page-side bootstrap polls /api/hosted-bootstrap after a 5s
         //      delay, by which time this writeFile has landed.
         await handle.writeFile('/slicc/secrets.env', safeSecrets);
+        if (opts.coneConfigJson) {
+            await handle.writeFile('/slicc/cone-config.json', opts.coneConfigJson);
+        }
         let status;
         try {
             status = await pollCloudStatus(handle, {

package/dist/node-server/_cloud_core/src/types.d.ts

@@ -1,3 +1,4 @@
+import type { ConeConfigIndex } from './cone-config/index.js';
 /**
  * Registry entry for a cloud-hosted cone (sandbox). Renamed from
  * CloudSessionEntry in node-server — the canonical name going forward is
@@ -47,6 +48,11 @@ export interface ConeEntry {
      * filtering and by CLI for tracking.
      */
     metadata?: Record<string, string>;
+    /**
+     * Names-only index of the cone's config bundle (model, account provider IDs,
+     * secret names). Persisted on the registry; NO secret values stored.
+     */
+    coneConfigIndex?: ConeConfigIndex;
 }
 /**
  * The shape persisted to `/tmp/slicc-join.json` inside the sandbox. Read by
@@ -80,6 +86,7 @@ export interface ResumeResult {
         running: string;
         local: string;
     };
+    coneConfigIndex?: ConeConfigIndex;
 }
 /**
  * Summary of a sandbox returned by substrate.list(). Minimal shape with ID,

package/dist/node-server/_cloud_core/src/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,sFAAsF;IACtF,SAAS,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,KAAK,EAAE,SAAS,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IAClD;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gFAAgF;IAChF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,eAAe,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACtD;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,SAAS,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,sFAAsF;IACtF,SAAS,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,KAAK,EAAE,SAAS,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IAClD;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC;;;OAGG;IACH,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gFAAgF;IAChF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,eAAe,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,SAAS,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC"}

package/dist/node-server/_cloud_core/tests/cone-config/cone-config.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cone-config.test.d.ts.map

package/dist/node-server/_cloud_core/tests/cone-config/cone-config.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cone-config.test.d.ts","sourceRoot":"","sources":["../../../tests/cone-config/cone-config.test.ts"],"names":[],"mappings":""}