toolhome 0.5.0

package/dist/server/cli-plane/allow-list.js

@@ -0,0 +1,28 @@
+/**
+ * Evaluate a CLI allow-list against an argv array before spawn.
+ *
+ * Rules are token patterns matched as a prefix of argv; `*` matches a single
+ * argv token. A deny rule match always rejects. When the allow list is
+ * non-empty, at least one allow rule must match. An empty allow list means the
+ * entry is explicitly trusted (same trust decision the Market makes for
+ * home-stdio entries).
+ */
+export function evaluateAllowList(argv, rules) {
+    for (const rule of rules.deny) {
+        if (ruleMatches(rule, argv)) {
+            return { verdict: 'deny', reason: `argv matches deny rule: ${rule.join(' ')}` };
+        }
+    }
+    if (rules.allow.length > 0) {
+        if (!rules.allow.some((rule) => ruleMatches(rule, argv))) {
+            return { verdict: 'deny', reason: 'argv does not match any allow rule' };
+        }
+    }
+    return { verdict: 'allow' };
+}
+function ruleMatches(rule, argv) {
+    if (argv.length < rule.length)
+        return false;
+    return rule.every((token, index) => token === '*' || token === argv[index]);
+}
+//# sourceMappingURL=allow-list.js.map

package/dist/server/cli-plane/allow-list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allow-list.js","sourceRoot":"","sources":["../../../src/cli-plane/allow-list.ts"],"names":[],"mappings":"AAIA;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAc,EAAE,KAAmB;IACnE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,2BAA2B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QAClF,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YACzD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,WAAW,CAAC,IAAkB,EAAE,IAAc;IACrD,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9E,CAAC"}

package/dist/server/cli-plane/cli-service.d.ts

@@ -0,0 +1,41 @@
+import type { CallRecorder } from '../observability/call-recorder.js';
+import type { Store } from '../storage/store.js';
+import type { CliExecFrame } from './frames.js';
+import { type CliExecInput, type CliRecord } from './models.js';
+import { type ExecOutcome } from './runner.js';
+/**
+ * Non-interactive enforcement variables injected into every CLI execution
+ * (docs/cli-hosting-research.md §2.5): CLIs otherwise page, prompt, and
+ * colorize unpredictably in a headless context.
+ */
+export declare const cliEnforcementEnv: Record<string, string>;
+export interface CliStatus {
+    installed: boolean | null;
+    version: string | null;
+    loggedIn: boolean;
+    lastCheckedAt: string;
+}
+export declare class CliService {
+    #private;
+    constructor(store: Store, recorder?: CallRecorder);
+    list(): CliRecord[];
+    get(id: string): CliRecord;
+    getBySlug(slug: string): CliRecord;
+    create(value: unknown): CliRecord;
+    update(id: string, value: unknown): CliRecord;
+    delete(id: string): void;
+    /**
+     * Validate an exec request before any process is spawned: record lookup,
+     * enabled check, argv shape (array only — never a shell string), and the
+     * allow-list verdict. Throws a structured AppError for 404/400/403 cases.
+     */
+    prepareExec(slug: string, body: unknown): {
+        record: CliRecord;
+        input: CliExecInput;
+    };
+    /** Run a prepared exec, streaming NDJSON frames, and audit it as an event. */
+    runExec(record: CliRecord, input: CliExecInput, emit: (frame: CliExecFrame) => void, signal?: AbortSignal): Promise<ExecOutcome>;
+    /** Run the CLI's declared probe in the same isolated context and parse it. */
+    status(slug: string): Promise<CliStatus>;
+}
+//# sourceMappingURL=cli-service.d.ts.map

package/dist/server/cli-plane/cli-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-service.d.ts","sourceRoot":"","sources":["../../../src/cli-plane/cli-service.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAEjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAKL,KAAK,YAAY,EAEjB,KAAK,SAAS,EACf,MAAM,aAAa,CAAC;AACrB,OAAO,EAAW,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AA2BxD;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAKpD,CAAC;AAEF,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,OAAO,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,qBAAa,UAAU;;IAIrB,YAAY,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,YAAY,EAGhD;IAED,IAAI,IAAI,SAAS,EAAE,CAElB;IAED,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,CAIzB;IAED,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAIjC;IAED,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,CAahC;IAED,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,SAAS,CA4B5C;IAED,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAUvB;IAED;;;;OAIG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG;QAAE,MAAM,EAAE,SAAS,CAAC;QAAC,KAAK,EAAE,YAAY,CAAA;KAAE,CAcnF;IAED,8EAA8E;IACxE,OAAO,CACX,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,EACnC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,WAAW,CAAC,CAuCtB;IAkCD,8EAA8E;IACxE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAqC7C;CAqDF"}

package/dist/server/cli-plane/cli-service.js

@@ -0,0 +1,282 @@
+import { existsSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { AppError } from '../domain/errors.js';
+import { materializeCliCredential, validateCliCredentialBindings, } from '../security/credential-materializer.js';
+import { evaluateAllowList } from './allow-list.js';
+import { assertCliRuntimeConfig, cliExecInputSchema, createCliInputSchema, updateCliInputSchema, } from './models.js';
+import { execCli } from './runner.js';
+import { parseProbeOutput } from './status.js';
+const secretArgNamePattern = /(?:token|secret|password|passwd|api[-_]?key|credential)/i;
+function redactArgv(argv) {
+    const redacted = [];
+    for (let index = 0; index < argv.length; index += 1) {
+        const argument = argv[index];
+        const equalIndex = argument.indexOf('=');
+        if (equalIndex > 0 && secretArgNamePattern.test(argument.slice(0, equalIndex))) {
+            redacted.push(`${argument.slice(0, equalIndex + 1)}[REDACTED]`);
+            continue;
+        }
+        if (argument.startsWith('-') && secretArgNamePattern.test(argument.replace(/^-+/, ''))) {
+            redacted.push(argument);
+            if (index + 1 < argv.length) {
+                redacted.push('[REDACTED]');
+                index += 1;
+            }
+            continue;
+        }
+        redacted.push(argument);
+    }
+    return redacted;
+}
+/**
+ * Non-interactive enforcement variables injected into every CLI execution
+ * (docs/cli-hosting-research.md §2.5): CLIs otherwise page, prompt, and
+ * colorize unpredictably in a headless context.
+ */
+export const cliEnforcementEnv = {
+    CI: 'true',
+    NO_COLOR: '1',
+    PAGER: 'cat',
+    TERM: 'dumb',
+};
+export class CliService {
+    #store;
+    #recorder;
+    constructor(store, recorder) {
+        this.#store = store;
+        this.#recorder = recorder ?? null;
+    }
+    list() {
+        return this.#store.listClis();
+    }
+    get(id) {
+        const record = this.#store.getCli(id);
+        if (!record)
+            throw new AppError('cli_not_found', 'CLI not found', 404);
+        return record;
+    }
+    getBySlug(slug) {
+        const record = this.#store.getCliBySlug(slug);
+        if (!record)
+            throw new AppError('cli_not_found', `CLI "${slug}" not found`, 404);
+        return record;
+    }
+    create(value) {
+        const input = createCliInputSchema.parse(value);
+        assertCliRuntimeConfig(input);
+        this.#assertCredential(input.credentialId, input.credentialBindings);
+        const record = this.#store.createCli(input);
+        this.#store.appendEvent({
+            level: 'info',
+            type: 'cli.created',
+            serverId: null,
+            message: `Created CLI ${record.slug}`,
+            detail: { slug: record.slug, executionMode: record.executionMode },
+        });
+        return record;
+    }
+    update(id, value) {
+        const current = this.get(id);
+        const input = updateCliInputSchema.parse(value);
+        const nextCredentialId = input.credentialId === undefined ? current.credentialId : input.credentialId;
+        const nextExecutionMode = input.executionMode ?? current.executionMode;
+        const nextAuthStrategy = input.authStrategy ?? current.authStrategy;
+        const nextContainerVolumes = input.containerVolumes ?? current.containerVolumes;
+        assertCliRuntimeConfig({
+            executionMode: nextExecutionMode,
+            authStrategy: nextAuthStrategy,
+            containerVolumes: nextContainerVolumes,
+        });
+        this.#assertCredential(nextCredentialId, input.credentialBindings === undefined
+            ? current.credentialBindings
+            : input.credentialBindings);
+        const record = this.#store.updateCli(id, input);
+        this.#store.appendEvent({
+            level: 'info',
+            type: 'cli.updated',
+            serverId: null,
+            message: `Updated CLI ${record.slug}`,
+            detail: { slug: record.slug },
+        });
+        return record;
+    }
+    delete(id) {
+        const current = this.get(id);
+        this.#store.deleteCli(id);
+        this.#store.appendEvent({
+            level: 'info',
+            type: 'cli.deleted',
+            serverId: null,
+            message: `Deleted CLI ${current.slug}`,
+            detail: { slug: current.slug },
+        });
+    }
+    /**
+     * Validate an exec request before any process is spawned: record lookup,
+     * enabled check, argv shape (array only — never a shell string), and the
+     * allow-list verdict. Throws a structured AppError for 404/400/403 cases.
+     */
+    prepareExec(slug, body) {
+        const record = this.getBySlug(slug);
+        if (!record.enabled) {
+            throw new AppError('cli_disabled', `CLI "${slug}" is disabled`, 403);
+        }
+        const input = cliExecInputSchema.parse(body);
+        const verdict = evaluateAllowList(input.argv, record.allowList);
+        if (verdict.verdict === 'deny') {
+            throw new AppError('cli_denied', `argv denied by allow-list: ${verdict.reason}`, 403);
+        }
+        // Resolve credentials before the NDJSON response starts so authorization and
+        // binding errors remain structured HTTP errors instead of stream frames.
+        this.#buildEnv(record);
+        return { record, input };
+    }
+    /** Run a prepared exec, streaming NDJSON frames, and audit it as an event. */
+    async runExec(record, input, emit, signal) {
+        const env = this.#buildEnv(record);
+        const outcome = await execCli({
+            command: record.command,
+            argv: input.argv,
+            env,
+            stdin: input.stdin ?? null,
+            timeoutMs: Math.min(record.timeoutMs, input.timeoutMs ?? record.timeoutMs),
+            maxOutputBytes: Math.min(record.maxOutputBytes, input.maxOutputBytes ?? record.maxOutputBytes),
+            executionMode: record.executionMode,
+            containerEnvKeys: record.executionMode === 'docker' ? this.#containerEnvKeys(record) : undefined,
+            containerVolumes: record.executionMode === 'docker' ? record.containerVolumes : undefined,
+            authStrategy: record.authStrategy,
+            entrypoint: record.entrypoint,
+        }, emit, signal);
+        this.#store.appendEvent({
+            level: 'info',
+            type: 'cli.exec',
+            serverId: null,
+            message: `${record.slug} ${redactArgv(input.argv).join(' ')}`,
+            detail: {
+                slug: record.slug,
+                argv: redactArgv(input.argv),
+                exitCode: outcome.code,
+                durationMs: outcome.durationMs,
+                result: outcome.result,
+                truncated: outcome.truncated,
+            },
+        });
+        this.#recordCall(record, input.argv, outcome);
+        return outcome;
+    }
+    /** Mirror the exec into the calls panel (fire-and-forget, same as MCP calls). */
+    #recordCall(record, argv, outcome) {
+        if (this.#recorder === null)
+            return;
+        const completedAt = new Date();
+        const status = outcome.result === 'ok'
+            ? 'success'
+            : outcome.result === 'timeout'
+                ? 'timeout'
+                : outcome.code === null
+                    ? 'rejected'
+                    : 'tool_error';
+        const draft = {
+            endpointType: 'cli',
+            principalKind: 'cli',
+            principalId: record.id,
+            serverId: null,
+            exposedToolName: record.slug,
+            upstreamToolName: redactArgv(argv).join(' '),
+            status,
+            errorType: status === 'success' ? null : outcome.result,
+            startedAt: new Date(completedAt.getTime() - outcome.durationMs).toISOString(),
+            completedAt: completedAt.toISOString(),
+            durationMs: Math.max(0, outcome.durationMs),
+        };
+        this.#recorder.record(draft);
+    }
+    /** Run the CLI's declared probe in the same isolated context and parse it. */
+    async status(slug) {
+        const record = this.getBySlug(slug);
+        const lastCheckedAt = new Date().toISOString();
+        if (record.probe === null) {
+            return { installed: null, version: null, loggedIn: false, lastCheckedAt };
+        }
+        let stdout = '';
+        const env = this.#buildEnv(record);
+        const outcome = await execCli({
+            command: record.executionMode === 'docker'
+                ? record.command
+                : this.#resolveHostProbe(record, record.probe),
+            argv: record.probe.args,
+            env,
+            stdin: null,
+            timeoutMs: Math.min(record.timeoutMs, 30_000),
+            maxOutputBytes: 64 * 1024,
+            executionMode: record.executionMode,
+            containerEnvKeys: record.executionMode === 'docker' ? this.#containerEnvKeys(record) : undefined,
+            containerVolumes: record.executionMode === 'docker' ? record.containerVolumes : undefined,
+            authStrategy: record.authStrategy,
+            entrypoint: record.executionMode === 'docker' ? record.probe.command : record.entrypoint,
+        }, (frame) => {
+            if (frame.type === 'stdout')
+                stdout += frame.data;
+        });
+        const parsed = parseProbeOutput(stdout);
+        return {
+            installed: outcome.code === 0,
+            version: parsed.version,
+            loggedIn: parsed.loggedIn,
+            lastCheckedAt,
+        };
+    }
+    /**
+     * Bare probe command names resolve next to the installed host binary; the
+     * market bin directory is not on the gateway process PATH.
+     */
+    #resolveHostProbe(record, probe) {
+        if (probe.command.includes('/') || !record.command.includes('/'))
+            return probe.command;
+        const candidate = join(dirname(record.command), probe.command);
+        return existsSync(candidate) ? candidate : probe.command;
+    }
+    #containerEnvKeys(record) {
+        const keys = new Set();
+        if (!record.interactive) {
+            for (const key of Object.keys(cliEnforcementEnv))
+                keys.add(key);
+        }
+        if (record.credentialId !== null) {
+            const payload = this.#store.getCredentialPayload(record.credentialId);
+            if (payload) {
+                for (const key of Object.keys(materializeCliCredential(payload, record.credentialBindings))) {
+                    keys.add(key);
+                }
+            }
+        }
+        return [...keys];
+    }
+    #buildEnv(record) {
+        const env = {};
+        for (const [name, value] of Object.entries(process.env)) {
+            if (value !== undefined)
+                env[name] = value;
+        }
+        if (!record.interactive) {
+            // interactive records opt out of the non-interactive enforcement vars
+            Object.assign(env, cliEnforcementEnv);
+        }
+        if (record.credentialId !== null) {
+            const payload = this.#store.getCredentialPayload(record.credentialId);
+            if (payload === null)
+                throw new AppError('credential_not_found', 'Credential not found', 400);
+            Object.assign(env, materializeCliCredential(payload, record.credentialBindings));
+        }
+        return env;
+    }
+    #assertCredential(credentialId, bindings) {
+        if (credentialId === null)
+            return;
+        const payload = this.#store.getCredentialPayload(credentialId);
+        if (!payload)
+            throw new AppError('credential_not_found', 'Credential not found', 400);
+        validateCliCredentialBindings(payload, bindings);
+    }
+}
+//# sourceMappingURL=cli-service.js.map

package/dist/server/cli-plane/cli-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-service.js","sourceRoot":"","sources":["../../../src/cli-plane/cli-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EACL,wBAAwB,EACxB,6BAA6B,GAC9B,MAAM,wCAAwC,CAAC;AAGhD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,GAIrB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,OAAO,EAAoB,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,MAAM,oBAAoB,GAAG,0DAA0D,CAAC;AAExF,SAAS,UAAU,CAAC,IAAc;IAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,UAAU,GAAG,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;YAC/E,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC;YAChE,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;YACvF,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxB,IAAI,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAC5B,KAAK,IAAI,CAAC,CAAC;YACb,CAAC;YACD,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA2B;IACvD,EAAE,EAAE,MAAM;IACV,QAAQ,EAAE,GAAG;IACb,KAAK,EAAE,KAAK;IACZ,IAAI,EAAE,MAAM;CACb,CAAC;AASF,MAAM,OAAO,UAAU;IACZ,MAAM,CAAQ;IACd,SAAS,CAAsB;IAExC,YAAY,KAAY,EAAE,QAAuB;QAC/C,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,SAAS,GAAG,QAAQ,IAAI,IAAI,CAAC;IACpC,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;IAChC,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,QAAQ,CAAC,eAAe,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;QACvE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,SAAS,CAAC,IAAY;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,QAAQ,CAAC,eAAe,EAAE,QAAQ,IAAI,aAAa,EAAE,GAAG,CAAC,CAAC;QACjF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,KAAc;QACnB,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChD,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YACtB,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,eAAe,MAAM,CAAC,IAAI,EAAE;YACrC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE;SACnE,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,EAAU,EAAE,KAAc;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,gBAAgB,GACpB,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;QAC/E,MAAM,iBAAiB,GAAG,KAAK,CAAC,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC;QACvE,MAAM,gBAAgB,GAAG,KAAK,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC;QACpE,MAAM,oBAAoB,GAAG,KAAK,CAAC,gBAAgB,IAAI,OAAO,CAAC,gBAAgB,CAAC;QAChF,sBAAsB,CAAC;YACrB,aAAa,EAAE,iBAAiB;YAChC,YAAY,EAAE,gBAAgB;YAC9B,gBAAgB,EAAE,oBAAoB;SACvC,CAAC,CAAC;QACH,IAAI,CAAC,iBAAiB,CACpB,gBAAgB,EAChB,KAAK,CAAC,kBAAkB,KAAK,SAAS;YACpC,CAAC,CAAC,OAAO,CAAC,kBAAkB;YAC5B,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAC7B,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YACtB,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,eAAe,MAAM,CAAC,IAAI,EAAE;YACrC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;SAC9B,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,EAAU;QACf,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YACtB,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,eAAe,OAAO,CAAC,IAAI,EAAE;YACtC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;SAC/B,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,WAAW,CAAC,IAAY,EAAE,IAAa;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,QAAQ,IAAI,eAAe,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAChE,IAAI,OAAO,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC/B,MAAM,IAAI,QAAQ,CAAC,YAAY,EAAE,8BAA8B,OAAO,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QACxF,CAAC;QACD,6EAA6E;QAC7E,yEAAyE;QACzE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACvB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,OAAO,CACX,MAAiB,EACjB,KAAmB,EACnB,IAAmC,EACnC,MAAoB;QAEpB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,OAAO,CAC3B;YACE,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG;YACH,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;YAC1B,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC;YAC1E,cAAc,EAAE,IAAI,CAAC,GAAG,CACtB,MAAM,CAAC,cAAc,EACrB,KAAK,CAAC,cAAc,IAAI,MAAM,CAAC,cAAc,CAC9C;YACD,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,gBAAgB,EACd,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;YAChF,gBAAgB,EAAE,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS;YACzF,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,EACD,IAAI,EACJ,MAAM,CACP,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YACtB,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;YAC7D,MAAM,EAAE;gBACN,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;gBAC5B,QAAQ,EAAE,OAAO,CAAC,IAAI;gBACtB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B;SACF,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,iFAAiF;IACjF,WAAW,CACT,MAAiB,EACjB,IAAc,EACd,OAAoE;QAEpE,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI;YAAE,OAAO;QACpC,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;QAC/B,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,KAAK,IAAI;YACrB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;gBAC5B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI;oBACrB,CAAC,CAAC,UAAU;oBACZ,CAAC,CAAC,YAAY,CAAC;QACvB,MAAM,KAAK,GAAkB;YAC3B,YAAY,EAAE,KAAK;YACnB,aAAa,EAAE,KAAK;YACpB,WAAW,EAAE,MAAM,CAAC,EAAE;YACtB,QAAQ,EAAE,IAAI;YACd,eAAe,EAAE,MAAM,CAAC,IAAI;YAC5B,gBAAgB,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAC5C,MAAM;YACN,SAAS,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;YACvD,SAAS,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;YAC7E,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE;YACtC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC;SAC5C,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,aAAa,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC/C,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1B,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;QAC5E,CAAC;QACD,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,OAAO,CAC3B;YACE,OAAO,EACL,MAAM,CAAC,aAAa,KAAK,QAAQ;gBAC/B,CAAC,CAAC,MAAM,CAAC,OAAO;gBAChB,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;YAClD,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;YACvB,GAAG;YACH,KAAK,EAAE,IAAI;YACX,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC;YAC7C,cAAc,EAAE,EAAE,GAAG,IAAI;YACzB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,gBAAgB,EACd,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;YAChF,gBAAgB,EAAE,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS;YACzF,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,UAAU,EAAE,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU;SACzF,EACD,CAAC,KAAK,EAAE,EAAE;YACR,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC;QACpD,CAAC,CACF,CAAC;QACF,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,aAAa;SACd,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,iBAAiB,CAAC,MAAiB,EAAE,KAAe;QAClD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,OAAO,CAAC;QACvF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/D,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;IAC3D,CAAC;IAED,iBAAiB,CAAC,MAAiB;QACjC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACxB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACtE,IAAI,OAAO,EAAE,CAAC;gBACZ,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAC3B,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAC7D,EAAE,CAAC;oBACF,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAChB,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACnB,CAAC;IAED,SAAS,CAAC,MAAiB;QACzB,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACxD,IAAI,KAAK,KAAK,SAAS;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC7C,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACxB,sEAAsE;YACtE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACtE,IAAI,OAAO,KAAK,IAAI;gBAAE,MAAM,IAAI,QAAQ,CAAC,sBAAsB,EAAE,sBAAsB,EAAE,GAAG,CAAC,CAAC;YAC9F,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,iBAAiB,CAAC,YAA2B,EAAE,QAAgC;QAC7E,IAAI,YAAY,KAAK,IAAI;YAAE,OAAO;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC/D,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,QAAQ,CAAC,sBAAsB,EAAE,sBAAsB,EAAE,GAAG,CAAC,CAAC;QACtF,6BAA6B,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC;CACF"}

package/dist/server/cli-plane/frames.d.ts

@@ -0,0 +1,26 @@
+/**
+ * NDJSON frames for the CLI exec stream (docs/cli-hosting-research.md §2.2).
+ *
+ * The stream is newline-delimited JSON: one `stdout`/`stderr` frame per chunk,
+ * terminated by a single `exit` frame carrying the real exit code, duration,
+ * and an explicit `timeout`/`error` result when the process did not exit
+ * normally.
+ */
+export type CliExecFrame = {
+    type: 'stdout';
+    data: string;
+} | {
+    type: 'stderr';
+    data: string;
+} | {
+    type: 'exit';
+    code: number | null;
+    durationMs: number;
+    result: 'ok' | 'error' | 'timeout';
+    truncated?: boolean;
+};
+export declare const cliNdjsonContentType = "application/x-ndjson";
+export declare function encodeFrame(frame: CliExecFrame): string;
+/** Parse a full NDJSON body into frames; throws on malformed input. */
+export declare function parseFrames(body: string): CliExecFrame[];
+//# sourceMappingURL=frames.d.ts.map

package/dist/server/cli-plane/frames.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frames.d.ts","sourceRoot":"","sources":["../../../src/cli-plane/frames.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChC;IACE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,IAAI,GAAG,OAAO,GAAG,SAAS,CAAC;IACnC,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEN,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAE3D,wBAAgB,WAAW,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAEvD;AAED,uEAAuE;AACvE,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,EAAE,CAKxD"}

package/dist/server/cli-plane/frames.js

@@ -0,0 +1,12 @@
+export const cliNdjsonContentType = 'application/x-ndjson';
+export function encodeFrame(frame) {
+    return `${JSON.stringify(frame)}\n`;
+}
+/** Parse a full NDJSON body into frames; throws on malformed input. */
+export function parseFrames(body) {
+    return body
+        .split('\n')
+        .filter((line) => line.trim() !== '')
+        .map((line) => JSON.parse(line));
+}
+//# sourceMappingURL=frames.js.map

package/dist/server/cli-plane/frames.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frames.js","sourceRoot":"","sources":["../../../src/cli-plane/frames.ts"],"names":[],"mappings":"AAmBA,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAE3D,MAAM,UAAU,WAAW,CAAC,KAAmB;IAC7C,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;AACtC,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,IAAI;SACR,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;SACpC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiB,CAAC,CAAC;AACrD,CAAC"}

package/dist/server/cli-plane/models.d.ts

@@ -0,0 +1,174 @@
+import { z } from 'zod';
+/**
+ * CLI plane record schemas (Form A of docs/cli-hosting-research.md).
+ *
+ * A CLI is a first-class entity: a command or container image plus a declarative
+ * allow-list, optional probe for status checks, and an optional Env Credential
+ * whose variables are injected into every execution.
+ */
+/** One argv rule: token patterns, where `*` matches a single argv token. */
+export declare const cliAllowRuleSchema: z.ZodArray<z.ZodString>;
+export declare const cliAllowListSchema: z.ZodObject<{
+    allow: z.ZodDefault<z.ZodArray<z.ZodArray<z.ZodString>>>;
+    deny: z.ZodDefault<z.ZodArray<z.ZodArray<z.ZodString>>>;
+}, z.core.$strip>;
+export declare const cliProbeSchema: z.ZodObject<{
+    command: z.ZodString;
+    args: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export declare const cliCredentialBindingsSchema: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+export declare const cliAuthStrategySchema: z.ZodDefault<z.ZodEnum<{
+    "azure-service-principal": "azure-service-principal";
+    none: "none";
+    "tailscale-auth-key": "tailscale-auth-key";
+}>>;
+export declare const cliRuntimeConfigSchema: z.ZodObject<{
+    executionMode: z.ZodEnum<{
+        docker: "docker";
+        host: "host";
+    }>;
+    authStrategy: z.ZodDefault<z.ZodEnum<{
+        "azure-service-principal": "azure-service-principal";
+        none: "none";
+        "tailscale-auth-key": "tailscale-auth-key";
+    }>>;
+    containerVolumes: z.ZodArray<z.ZodObject<{
+        source: z.ZodString;
+        target: z.ZodString;
+        readOnly: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const createCliInputSchema: z.ZodObject<{
+    slug: z.ZodString;
+    name: z.ZodString;
+    command: z.ZodString;
+    executionMode: z.ZodDefault<z.ZodEnum<{
+        docker: "docker";
+        host: "host";
+    }>>;
+    entrypoint: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    authStrategy: z.ZodDefault<z.ZodEnum<{
+        "azure-service-principal": "azure-service-principal";
+        none: "none";
+        "tailscale-auth-key": "tailscale-auth-key";
+    }>>;
+    containerVolumes: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        source: z.ZodString;
+        target: z.ZodString;
+        readOnly: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+    platform: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    allowList: z.ZodDefault<z.ZodObject<{
+        allow: z.ZodDefault<z.ZodArray<z.ZodArray<z.ZodString>>>;
+        deny: z.ZodDefault<z.ZodArray<z.ZodArray<z.ZodString>>>;
+    }, z.core.$strip>>;
+    interactive: z.ZodDefault<z.ZodBoolean>;
+    credentialId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    credentialBindings: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    probe: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+        command: z.ZodString;
+        args: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>>;
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    timeoutMs: z.ZodDefault<z.ZodNumber>;
+    maxOutputBytes: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const updateCliInputSchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    command: z.ZodOptional<z.ZodString>;
+    executionMode: z.ZodOptional<z.ZodEnum<{
+        docker: "docker";
+        host: "host";
+    }>>;
+    entrypoint: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    authStrategy: z.ZodOptional<z.ZodEnum<{
+        "azure-service-principal": "azure-service-principal";
+        none: "none";
+        "tailscale-auth-key": "tailscale-auth-key";
+    }>>;
+    containerVolumes: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        source: z.ZodString;
+        target: z.ZodString;
+        readOnly: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+    platform: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    allowList: z.ZodOptional<z.ZodObject<{
+        allow: z.ZodDefault<z.ZodArray<z.ZodArray<z.ZodString>>>;
+        deny: z.ZodDefault<z.ZodArray<z.ZodArray<z.ZodString>>>;
+    }, z.core.$strip>>;
+    interactive: z.ZodOptional<z.ZodBoolean>;
+    credentialId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    credentialBindings: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    probe: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        command: z.ZodString;
+        args: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    timeoutMs: z.ZodOptional<z.ZodNumber>;
+    maxOutputBytes: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export declare function assertCliRuntimeConfig(value: {
+    executionMode: 'host' | 'docker';
+    authStrategy: 'none' | 'azure-service-principal' | 'tailscale-auth-key';
+    containerVolumes: {
+        source: string;
+        target: string;
+        readOnly: boolean;
+    }[];
+}): void;
+export declare const cliRecordSchema: z.ZodObject<{
+    id: z.ZodUUID;
+    slug: z.ZodString;
+    name: z.ZodString;
+    command: z.ZodString;
+    executionMode: z.ZodEnum<{
+        docker: "docker";
+        host: "host";
+    }>;
+    entrypoint: z.ZodNullable<z.ZodString>;
+    authStrategy: z.ZodDefault<z.ZodEnum<{
+        "azure-service-principal": "azure-service-principal";
+        none: "none";
+        "tailscale-auth-key": "tailscale-auth-key";
+    }>>;
+    containerVolumes: z.ZodArray<z.ZodObject<{
+        source: z.ZodString;
+        target: z.ZodString;
+        readOnly: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    platform: z.ZodNullable<z.ZodString>;
+    allowList: z.ZodObject<{
+        allow: z.ZodDefault<z.ZodArray<z.ZodArray<z.ZodString>>>;
+        deny: z.ZodDefault<z.ZodArray<z.ZodArray<z.ZodString>>>;
+    }, z.core.$strip>;
+    interactive: z.ZodBoolean;
+    credentialId: z.ZodNullable<z.ZodString>;
+    credentialBindings: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    probe: z.ZodNullable<z.ZodObject<{
+        command: z.ZodString;
+        args: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+    enabled: z.ZodBoolean;
+    timeoutMs: z.ZodNumber;
+    maxOutputBytes: z.ZodNumber;
+    createdAt: z.ZodISODateTime;
+    updatedAt: z.ZodISODateTime;
+}, z.core.$strip>;
+/** Per-exec request body. `argv` is an array only — never a shell string. */
+export declare const cliExecInputSchema: z.ZodObject<{
+    argv: z.ZodArray<z.ZodString>;
+    stdin: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    timeoutMs: z.ZodOptional<z.ZodNumber>;
+    maxOutputBytes: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export type CliAllowRule = z.infer<typeof cliAllowRuleSchema>;
+export type CliAllowList = z.infer<typeof cliAllowListSchema>;
+export type CliCredentialBindings = z.infer<typeof cliCredentialBindingsSchema>;
+export type CliAuthStrategy = z.infer<typeof cliAuthStrategySchema>;
+export type CliContainerVolume = z.infer<typeof cliRecordSchema>['containerVolumes'][number];
+export type CliProbe = z.infer<typeof cliProbeSchema>;
+export type CliRecord = z.infer<typeof cliRecordSchema>;
+export type CreateCliInput = z.infer<typeof createCliInputSchema>;
+export type UpdateCliInput = z.infer<typeof updateCliInputSchema>;
+export type CliExecInput = z.infer<typeof cliExecInputSchema>;
+//# sourceMappingURL=models.d.ts.map

package/dist/server/cli-plane/models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../../src/cli-plane/models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;;;GAMG;AAEH,4EAA4E;AAC5E,eAAO,MAAM,kBAAkB,yBAAoC,CAAC;AAEpE,eAAO,MAAM,kBAAkB;;;iBAG7B,CAAC;AAEH,eAAO,MAAM,cAAc;;;iBAGzB,CAAC;AAGH,eAAO,MAAM,2BAA2B,qDAA+C,CAAC;AAOxF,eAAO,MAAM,qBAAqB;;;;GAA6C,CAAC;AAqBhF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;iBAgC/B,CAAC;AAEL,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmC7B,CAAC;AAEL,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAqB/B,CAAC;AAEH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,aAAa,EAAE,MAAM,GAAG,QAAQ,CAAC;IACjC,YAAY,EAAE,MAAM,GAAG,yBAAyB,GAAG,oBAAoB,CAAC;IACxE,gBAAgB,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;CAC3E,GAAG,IAAI,CAEP;AAED,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAoB1B,CAAC;AAEH,6EAA6E;AAC7E,eAAO,MAAM,kBAAkB;;;;;iBAU7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC7F,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AACtD,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACxD,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}