@ankhorage/deploy 0.8.0 → 0.10.0

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # @ankhorage/deploy
 
+## 0.10.0
+
+### Minor Changes
+
+- b10e259: Add the first-class `@ankhorage/deploy/cli` provider for category-root `ankh deploy` and `ankh plan deploy`, with dry-run planning, explicit runtime release context, host-owned confirmation, transient ENV credential mapping and offline safety coverage.
+
+## 0.9.0
+
+### Minor Changes
+
+- 5b892ae: Add the complete provider-neutral release lifecycle: canonical `deploy/release.json` authoring,
+  cross-target planning, Google Play and App Store rollout execution, read-back verification,
+  safe retry/resume, supported lifecycle controls, immutable release history, and intentional
+  public release APIs.
+
+  The project entrypoint now owns inspection, planning, execution, resume, and supported lifecycle controls while provider adapters remain internal.
+
 ## 0.8.0
 
 ### Minor Changes

package/README.md

@@ -3,7 +3,7 @@
 
 # @ankhorage/deploy
 
-![license: MIT](././paradox/badges/license.svg) ![npm: v0.7.0](././paradox/badges/npm.svg) ![runtime: bun](././paradox/badges/runtime.svg) ![typescript: strict](././paradox/badges/typescript.svg) ![eslint: checked](././paradox/badges/eslint.svg) ![prettier: checked](././paradox/badges/prettier.svg) ![build: checked](././paradox/badges/build.svg) ![tests: checked](././paradox/badges/tests.svg) ![docs: paradox](././paradox/badges/docs.svg)
+![license: MIT](././paradox/badges/license.svg) ![npm: v0.9.0](././paradox/badges/npm.svg) ![runtime: bun](././paradox/badges/runtime.svg) ![typescript: strict](././paradox/badges/typescript.svg) ![eslint: checked](././paradox/badges/eslint.svg) ![prettier: checked](././paradox/badges/prettier.svg) ![build: checked](././paradox/badges/build.svg) ![tests: checked](././paradox/badges/tests.svg) ![docs: paradox](././paradox/badges/docs.svg)
 
 Declarative deployment engine for Expo apps across web, iOS, and Android.
 
@@ -17,5 +17,9 @@ Declarative deployment engine for Expo apps across web, iOS, and Android.
 - [Export graph](././paradox/diagrams/export-graph.mmd)
 - [createDeploymentPlan sequence](././paradox/diagrams/sequences/create-deployment-plan.mmd)
 - [createProjectMonetizationPlan sequence](././paradox/diagrams/sequences/create-project-monetization-plan.mmd)
+- [createProjectReleaseHistoryRecord sequence](././paradox/diagrams/sequences/create-project-release-history-record.mmd)
+- [createReleaseCurrentRevision sequence](././paradox/diagrams/sequences/create-release-current-revision.mmd)
+- [createReleaseRevision sequence](././paradox/diagrams/sequences/create-release-revision.mmd)
+- [listReleaseLifecycleControls sequence](././paradox/diagrams/sequences/list-release-lifecycle-controls.mmd)
 - [readProjectDeploymentConfig sequence](././paradox/diagrams/sequences/read-project-deployment-config.mmd)
 - [resolveDeployProject sequence](././paradox/diagrams/sequences/resolve-deploy-project.mmd)

package/dist/cli/DeployCliEnvironment.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Transient environment inputs understood by `ankh deploy`.
+ *
+ * Google Play expects the complete service-account JSON string.
+ * App Store Connect expects JSON containing keyId, issuerId and privateKey.
+ * EAS expects the raw Expo access token.
+ */
+export declare const DEPLOY_CLI_ENVIRONMENT: {
+    readonly googlePlayServiceAccountJson: "ANKH_DEPLOY_GOOGLE_PLAY_SERVICE_ACCOUNT_JSON";
+    readonly appStoreConnectApiKeyJson: "ANKH_DEPLOY_APP_STORE_CONNECT_API_KEY_JSON";
+    readonly easToken: "ANKH_DEPLOY_EAS_TOKEN";
+};
+//# sourceMappingURL=DeployCliEnvironment.d.ts.map

package/dist/cli/DeployCliEnvironment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeployCliEnvironment.d.ts","sourceRoot":"","sources":["../../src/cli/DeployCliEnvironment.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB;;;;CAIzB,CAAC"}

package/dist/cli/DeployCliEnvironment.js

@@ -0,0 +1,13 @@
+/**
+ * Transient environment inputs understood by `ankh deploy`.
+ *
+ * Google Play expects the complete service-account JSON string.
+ * App Store Connect expects JSON containing keyId, issuerId and privateKey.
+ * EAS expects the raw Expo access token.
+ */
+export const DEPLOY_CLI_ENVIRONMENT = {
+    googlePlayServiceAccountJson: 'ANKH_DEPLOY_GOOGLE_PLAY_SERVICE_ACCOUNT_JSON',
+    appStoreConnectApiKeyJson: 'ANKH_DEPLOY_APP_STORE_CONNECT_API_KEY_JSON',
+    easToken: 'ANKH_DEPLOY_EAS_TOKEN',
+};
+//# sourceMappingURL=DeployCliEnvironment.js.map

package/dist/cli/DeployCliEnvironment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeployCliEnvironment.js","sourceRoot":"","sources":["../../src/cli/DeployCliEnvironment.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,4BAA4B,EAAE,8CAA8C;IAC5E,yBAAyB,EAAE,4CAA4C;IACvE,QAAQ,EAAE,uBAAuB;CACzB,CAAC","sourcesContent":["/**\n * Transient environment inputs understood by `ankh deploy`.\n *\n * Google Play expects the complete service-account JSON string.\n * App Store Connect expects JSON containing keyId, issuerId and privateKey.\n * EAS expects the raw Expo access token.\n */\nexport const DEPLOY_CLI_ENVIRONMENT = {\n  googlePlayServiceAccountJson: 'ANKH_DEPLOY_GOOGLE_PLAY_SERVICE_ACCOUNT_JSON',\n  appStoreConnectApiKeyJson: 'ANKH_DEPLOY_APP_STORE_CONNECT_API_KEY_JSON',\n  easToken: 'ANKH_DEPLOY_EAS_TOKEN',\n} as const;\n"]}

package/dist/cli/DeployCliInput.d.ts

@@ -0,0 +1,6 @@
+import type { AnkhCommandContext } from '@ankhorage/ankh';
+export interface DeployCliInput {
+    readonly argv: readonly string[];
+    readonly context: AnkhCommandContext;
+}
+//# sourceMappingURL=DeployCliInput.d.ts.map

package/dist/cli/DeployCliInput.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeployCliInput.d.ts","sourceRoot":"","sources":["../../src/cli/DeployCliInput.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAE1D,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;CACtC"}

package/dist/cli/DeployCliInput.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=DeployCliInput.js.map

package/dist/cli/DeployCliInput.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeployCliInput.js","sourceRoot":"","sources":["../../src/cli/DeployCliInput.ts"],"names":[],"mappings":"","sourcesContent":["import type { AnkhCommandContext } from '@ankhorage/ankh';\n\nexport interface DeployCliInput {\n  readonly argv: readonly string[];\n  readonly context: AnkhCommandContext;\n}\n"]}

package/dist/cli/DeployCliOptions.d.ts

@@ -0,0 +1,14 @@
+import type { AndroidDeploymentTrack } from '../index.js';
+export interface DeployCliOptions {
+    readonly projectRoot: string;
+    readonly dryRun: boolean;
+    readonly yes: boolean;
+    readonly format: 'human' | 'json';
+    readonly executionId?: string;
+    readonly androidTrack?: AndroidDeploymentTrack;
+    readonly androidBuildProfile?: string;
+    readonly iosBuildProfile?: string;
+    readonly webAlias?: string;
+    readonly webEnvironment?: string;
+}
+//# sourceMappingURL=DeployCliOptions.d.ts.map

package/dist/cli/DeployCliOptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeployCliOptions.d.ts","sourceRoot":"","sources":["../../src/cli/DeployCliOptions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,sBAAsB,CAAC;IAC/C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC"}

package/dist/cli/DeployCliOptions.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=DeployCliOptions.js.map

package/dist/cli/DeployCliOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeployCliOptions.js","sourceRoot":"","sources":["../../src/cli/DeployCliOptions.ts"],"names":[],"mappings":"","sourcesContent":["import type { AndroidDeploymentTrack } from '../index.js';\n\nexport interface DeployCliOptions {\n  readonly projectRoot: string;\n  readonly dryRun: boolean;\n  readonly yes: boolean;\n  readonly format: 'human' | 'json';\n  readonly executionId?: string;\n  readonly androidTrack?: AndroidDeploymentTrack;\n  readonly androidBuildProfile?: string;\n  readonly iosBuildProfile?: string;\n  readonly webAlias?: string;\n  readonly webEnvironment?: string;\n}\n"]}

package/dist/cli/DeployCliRuntime.d.ts

@@ -0,0 +1,9 @@
+import type { ReleasePlan } from '../index.js';
+import type { ExecuteProjectReleaseOptions, InspectProjectReleaseOptions, ProjectReleaseExecutionResult, ProjectReleaseInspection, ProjectReleaseInspectionResult } from '../project/index.js';
+export interface DeployCliRuntime {
+    inspectProjectRelease(options: InspectProjectReleaseOptions): Promise<ProjectReleaseInspectionResult>;
+    createProjectReleasePlan(inspection: ProjectReleaseInspection): ReleasePlan;
+    executeProjectRelease(options: ExecuteProjectReleaseOptions): Promise<ProjectReleaseExecutionResult>;
+    createExecutionId(): string;
+}
+//# sourceMappingURL=DeployCliRuntime.d.ts.map

package/dist/cli/DeployCliRuntime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeployCliRuntime.d.ts","sourceRoot":"","sources":["../../src/cli/DeployCliRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EACV,4BAA4B,EAC5B,4BAA4B,EAC5B,6BAA6B,EAC7B,wBAAwB,EACxB,8BAA8B,EAC/B,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,gBAAgB;IAC/B,qBAAqB,CACnB,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC3C,wBAAwB,CAAC,UAAU,EAAE,wBAAwB,GAAG,WAAW,CAAC;IAC5E,qBAAqB,CACnB,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAC1C,iBAAiB,IAAI,MAAM,CAAC;CAC7B"}

package/dist/cli/DeployCliRuntime.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=DeployCliRuntime.js.map

package/dist/cli/DeployCliRuntime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeployCliRuntime.js","sourceRoot":"","sources":["../../src/cli/DeployCliRuntime.ts"],"names":[],"mappings":"","sourcesContent":["import type { ReleasePlan } from '../index.js';\nimport type {\n  ExecuteProjectReleaseOptions,\n  InspectProjectReleaseOptions,\n  ProjectReleaseExecutionResult,\n  ProjectReleaseInspection,\n  ProjectReleaseInspectionResult,\n} from '../project/index.js';\n\nexport interface DeployCliRuntime {\n  inspectProjectRelease(\n    options: InspectProjectReleaseOptions,\n  ): Promise<ProjectReleaseInspectionResult>;\n  createProjectReleasePlan(inspection: ProjectReleaseInspection): ReleasePlan;\n  executeProjectRelease(\n    options: ExecuteProjectReleaseOptions,\n  ): Promise<ProjectReleaseExecutionResult>;\n  createExecutionId(): string;\n}\n"]}

package/dist/cli/createDeployCliAccess.d.ts

@@ -0,0 +1,4 @@
+import type { ProjectReleaseAccess } from '../project/index.js';
+import type { DeployCliOptions } from './DeployCliOptions.js';
+export declare function createDeployCliAccess(options: DeployCliOptions, env: Readonly<Record<string, string | undefined>>): ProjectReleaseAccess;
+//# sourceMappingURL=createDeployCliAccess.d.ts.map

package/dist/cli/createDeployCliAccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createDeployCliAccess.d.ts","sourceRoot":"","sources":["../../src/cli/createDeployCliAccess.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEhE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,gBAAgB,EACzB,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAChD,oBAAoB,CA6BtB"}

package/dist/cli/createDeployCliAccess.js

@@ -0,0 +1,65 @@
+import { DEPLOY_CLI_ENVIRONMENT } from './DeployCliEnvironment.js';
+export function createDeployCliAccess(options, env) {
+    const credentials = [];
+    const secrets = new Map();
+    addSecret(credentials, secrets, env, {
+        envName: DEPLOY_CLI_ENVIRONMENT.googlePlayServiceAccountJson,
+        id: 'env:google-play-service-account',
+        provider: 'google-play',
+        kind: 'service-account',
+    });
+    addSecret(credentials, secrets, env, {
+        envName: DEPLOY_CLI_ENVIRONMENT.appStoreConnectApiKeyJson,
+        id: 'env:app-store-connect-api-key',
+        provider: 'app-store-connect',
+        kind: 'api-key',
+    });
+    addSecret(credentials, secrets, env, {
+        envName: DEPLOY_CLI_ENVIRONMENT.easToken,
+        id: 'env:eas-token',
+        provider: 'eas',
+        kind: 'expo-token',
+    });
+    return {
+        credentials,
+        resolveSecret: (reference) => Promise.resolve(secrets.get(reference.id) ?? null),
+        ...androidAccess(options),
+        ...iosAccess(options),
+        ...webAccess(options),
+    };
+}
+function addSecret(credentials, secrets, env, input) {
+    const value = env[input.envName]?.trim();
+    if (value === undefined || value.length === 0)
+        return;
+    credentials.push({ id: input.id, provider: input.provider, kind: input.kind });
+    secrets.set(input.id, value);
+}
+function androidAccess(options) {
+    if (options.androidTrack === undefined)
+        return {};
+    return {
+        android: {
+            track: options.androidTrack,
+            ...(options.androidBuildProfile === undefined
+                ? {}
+                : { buildProfile: options.androidBuildProfile }),
+        },
+    };
+}
+function iosAccess(options) {
+    return options.iosBuildProfile === undefined
+        ? {}
+        : { ios: { buildProfile: options.iosBuildProfile } };
+}
+function webAccess(options) {
+    if (options.webAlias === undefined && options.webEnvironment === undefined)
+        return {};
+    return {
+        web: {
+            ...(options.webAlias === undefined ? {} : { alias: options.webAlias }),
+            ...(options.webEnvironment === undefined ? {} : { environment: options.webEnvironment }),
+        },
+    };
+}
+//# sourceMappingURL=createDeployCliAccess.js.map

package/dist/cli/createDeployCliAccess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createDeployCliAccess.js","sourceRoot":"","sources":["../../src/cli/createDeployCliAccess.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAGnE,MAAM,UAAU,qBAAqB,CACnC,OAAyB,EACzB,GAAiD;IAEjD,MAAM,WAAW,GAAoC,EAAE,CAAC;IACxD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE;QACnC,OAAO,EAAE,sBAAsB,CAAC,4BAA4B;QAC5D,EAAE,EAAE,iCAAiC;QACrC,QAAQ,EAAE,aAAa;QACvB,IAAI,EAAE,iBAAiB;KACxB,CAAC,CAAC;IACH,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE;QACnC,OAAO,EAAE,sBAAsB,CAAC,yBAAyB;QACzD,EAAE,EAAE,+BAA+B;QACnC,QAAQ,EAAE,mBAAmB;QAC7B,IAAI,EAAE,SAAS;KAChB,CAAC,CAAC;IACH,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE;QACnC,OAAO,EAAE,sBAAsB,CAAC,QAAQ;QACxC,EAAE,EAAE,eAAe;QACnB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,YAAY;KACnB,CAAC,CAAC;IAEH,OAAO;QACL,WAAW;QACX,aAAa,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;QAChF,GAAG,aAAa,CAAC,OAAO,CAAC;QACzB,GAAG,SAAS,CAAC,OAAO,CAAC;QACrB,GAAG,SAAS,CAAC,OAAO,CAAC;KACtB,CAAC;AACJ,CAAC;AASD,SAAS,SAAS,CAChB,WAA4C,EAC5C,OAA4B,EAC5B,GAAiD,EACjD,KAAkB;IAElB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC;IACzC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACtD,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,aAAa,CAAC,OAAyB;IAC9C,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAClD,OAAO;QACL,OAAO,EAAE;YACP,KAAK,EAAE,OAAO,CAAC,YAAY;YAC3B,GAAG,CAAC,OAAO,CAAC,mBAAmB,KAAK,SAAS;gBAC3C,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC;SACnD;KACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,OAAyB;IAC1C,OAAO,OAAO,CAAC,eAAe,KAAK,SAAS;QAC1C,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,SAAS,CAAC,OAAyB;IAC1C,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACtF,OAAO;QACL,GAAG,EAAE;YACH,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtE,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;SACzF;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type { DeploymentCredentialReference } from '../index.js';\nimport type { ProjectReleaseAccess } from '../project/index.js';\nimport { DEPLOY_CLI_ENVIRONMENT } from './DeployCliEnvironment.js';\nimport type { DeployCliOptions } from './DeployCliOptions.js';\n\nexport function createDeployCliAccess(\n  options: DeployCliOptions,\n  env: Readonly<Record<string, string | undefined>>,\n): ProjectReleaseAccess {\n  const credentials: DeploymentCredentialReference[] = [];\n  const secrets = new Map<string, string>();\n  addSecret(credentials, secrets, env, {\n    envName: DEPLOY_CLI_ENVIRONMENT.googlePlayServiceAccountJson,\n    id: 'env:google-play-service-account',\n    provider: 'google-play',\n    kind: 'service-account',\n  });\n  addSecret(credentials, secrets, env, {\n    envName: DEPLOY_CLI_ENVIRONMENT.appStoreConnectApiKeyJson,\n    id: 'env:app-store-connect-api-key',\n    provider: 'app-store-connect',\n    kind: 'api-key',\n  });\n  addSecret(credentials, secrets, env, {\n    envName: DEPLOY_CLI_ENVIRONMENT.easToken,\n    id: 'env:eas-token',\n    provider: 'eas',\n    kind: 'expo-token',\n  });\n\n  return {\n    credentials,\n    resolveSecret: (reference) => Promise.resolve(secrets.get(reference.id) ?? null),\n    ...androidAccess(options),\n    ...iosAccess(options),\n    ...webAccess(options),\n  };\n}\n\ninterface SecretInput {\n  readonly envName: string;\n  readonly id: string;\n  readonly provider: string;\n  readonly kind: string;\n}\n\nfunction addSecret(\n  credentials: DeploymentCredentialReference[],\n  secrets: Map<string, string>,\n  env: Readonly<Record<string, string | undefined>>,\n  input: SecretInput,\n): void {\n  const value = env[input.envName]?.trim();\n  if (value === undefined || value.length === 0) return;\n  credentials.push({ id: input.id, provider: input.provider, kind: input.kind });\n  secrets.set(input.id, value);\n}\n\nfunction androidAccess(options: DeployCliOptions): Pick<ProjectReleaseAccess, 'android'> {\n  if (options.androidTrack === undefined) return {};\n  return {\n    android: {\n      track: options.androidTrack,\n      ...(options.androidBuildProfile === undefined\n        ? {}\n        : { buildProfile: options.androidBuildProfile }),\n    },\n  };\n}\n\nfunction iosAccess(options: DeployCliOptions): Pick<ProjectReleaseAccess, 'ios'> {\n  return options.iosBuildProfile === undefined\n    ? {}\n    : { ios: { buildProfile: options.iosBuildProfile } };\n}\n\nfunction webAccess(options: DeployCliOptions): Pick<ProjectReleaseAccess, 'web'> {\n  if (options.webAlias === undefined && options.webEnvironment === undefined) return {};\n  return {\n    web: {\n      ...(options.webAlias === undefined ? {} : { alias: options.webAlias }),\n      ...(options.webEnvironment === undefined ? {} : { environment: options.webEnvironment }),\n    },\n  };\n}\n"]}

package/dist/cli/createDeployCliProvider.d.ts

@@ -0,0 +1,4 @@
+import type { AnkhRuntimeCommandProvider } from '@ankhorage/ankh';
+import type { DeployCliRuntime } from './DeployCliRuntime.js';
+export declare function createDeployCliProvider(runtime: DeployCliRuntime): AnkhRuntimeCommandProvider;
+//# sourceMappingURL=createDeployCliProvider.d.ts.map

package/dist/cli/createDeployCliProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createDeployCliProvider.d.ts","sourceRoot":"","sources":["../../src/cli/createDeployCliProvider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAGlE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAI9D,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,gBAAgB,GAAG,0BAA0B,CAiC7F"}

package/dist/cli/createDeployCliProvider.js

@@ -0,0 +1,35 @@
+import packageJson from '../../package.json';
+import { handleDeployCliCommand } from './handleDeployCliCommand.js';
+import { handleDeployCliPlan } from './handleDeployCliPlan.js';
+export function createDeployCliProvider(runtime) {
+    const command = {
+        path: [],
+        capability: 'deploy.execute',
+        summary: 'Inspect, plan and execute the authored project release',
+        examples: [
+            'ankh deploy',
+            'ankh deploy --dry-run',
+            'ankh deploy --yes --android-track production',
+        ],
+    };
+    return {
+        id: packageJson.name,
+        category: 'deploy',
+        version: packageJson.version,
+        capabilities: ['deploy.inspect', 'deploy.plan', 'deploy.execute'],
+        commands: [command],
+        handlers: [
+            {
+                path: [],
+                handler: (request) => handleDeployCliCommand({ argv: request.argv, context: request.context }, runtime),
+            },
+        ],
+        planningHandlers: [
+            {
+                path: [],
+                handler: (request) => handleDeployCliPlan({ argv: request.argv, context: request.context }, runtime),
+            },
+        ],
+    };
+}
+//# sourceMappingURL=createDeployCliProvider.js.map

package/dist/cli/createDeployCliProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createDeployCliProvider.js","sourceRoot":"","sources":["../../src/cli/createDeployCliProvider.ts"],"names":[],"mappings":"AAEA,OAAO,WAAW,MAAM,oBAAoB,CAAC;AAE7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,UAAU,uBAAuB,CAAC,OAAyB;IAC/D,MAAM,OAAO,GAAG;QACd,IAAI,EAAE,EAAE;QACR,UAAU,EAAE,gBAAgB;QAC5B,OAAO,EAAE,wDAAwD;QACjE,QAAQ,EAAE;YACR,aAAa;YACb,uBAAuB;YACvB,8CAA8C;SAC/C;KACO,CAAC;IAEX,OAAO;QACL,EAAE,EAAE,WAAW,CAAC,IAAI;QACpB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,YAAY,EAAE,CAAC,gBAAgB,EAAE,aAAa,EAAE,gBAAgB,CAAC;QACjE,QAAQ,EAAE,CAAC,OAAO,CAAC;QACnB,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,EAAE;gBACR,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CACnB,sBAAsB,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC;aACpF;SACF;QACD,gBAAgB,EAAE;YAChB;gBACE,IAAI,EAAE,EAAE;gBACR,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CACnB,mBAAmB,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC;aACjF;SACF;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type { AnkhRuntimeCommandProvider } from '@ankhorage/ankh';\n\nimport packageJson from '../../package.json';\nimport type { DeployCliRuntime } from './DeployCliRuntime.js';\nimport { handleDeployCliCommand } from './handleDeployCliCommand.js';\nimport { handleDeployCliPlan } from './handleDeployCliPlan.js';\n\nexport function createDeployCliProvider(runtime: DeployCliRuntime): AnkhRuntimeCommandProvider {\n  const command = {\n    path: [],\n    capability: 'deploy.execute',\n    summary: 'Inspect, plan and execute the authored project release',\n    examples: [\n      'ankh deploy',\n      'ankh deploy --dry-run',\n      'ankh deploy --yes --android-track production',\n    ],\n  } as const;\n\n  return {\n    id: packageJson.name,\n    category: 'deploy',\n    version: packageJson.version,\n    capabilities: ['deploy.inspect', 'deploy.plan', 'deploy.execute'],\n    commands: [command],\n    handlers: [\n      {\n        path: [],\n        handler: (request) =>\n          handleDeployCliCommand({ argv: request.argv, context: request.context }, runtime),\n      },\n    ],\n    planningHandlers: [\n      {\n        path: [],\n        handler: (request) =>\n          handleDeployCliPlan({ argv: request.argv, context: request.context }, runtime),\n      },\n    ],\n  };\n}\n"]}

package/dist/cli/defaultDeployCliRuntime.d.ts

@@ -0,0 +1,3 @@
+import type { DeployCliRuntime } from './DeployCliRuntime.js';
+export declare const defaultDeployCliRuntime: DeployCliRuntime;
+//# sourceMappingURL=defaultDeployCliRuntime.d.ts.map

package/dist/cli/defaultDeployCliRuntime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaultDeployCliRuntime.d.ts","sourceRoot":"","sources":["../../src/cli/defaultDeployCliRuntime.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,eAAO,MAAM,uBAAuB,EAAE,gBAOrC,CAAC"}

package/dist/cli/defaultDeployCliRuntime.js

@@ -0,0 +1,11 @@
+import { randomUUID } from 'node:crypto';
+import { createProjectReleasePlan, executeProjectRelease, inspectProjectRelease, } from '../project/index.js';
+export const defaultDeployCliRuntime = {
+    inspectProjectRelease,
+    createProjectReleasePlan,
+    executeProjectRelease,
+    createExecutionId() {
+        return `release-${randomUUID()}`;
+    },
+};
+//# sourceMappingURL=defaultDeployCliRuntime.js.map

package/dist/cli/defaultDeployCliRuntime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaultDeployCliRuntime.js","sourceRoot":"","sources":["../../src/cli/defaultDeployCliRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAG7B,MAAM,CAAC,MAAM,uBAAuB,GAAqB;IACvD,qBAAqB;IACrB,wBAAwB;IACxB,qBAAqB;IACrB,iBAAiB;QACf,OAAO,WAAW,UAAU,EAAE,EAAE,CAAC;IACnC,CAAC;CACF,CAAC","sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport {\n  createProjectReleasePlan,\n  executeProjectRelease,\n  inspectProjectRelease,\n} from '../project/index.js';\nimport type { DeployCliRuntime } from './DeployCliRuntime.js';\n\nexport const defaultDeployCliRuntime: DeployCliRuntime = {\n  inspectProjectRelease,\n  createProjectReleasePlan,\n  executeProjectRelease,\n  createExecutionId() {\n    return `release-${randomUUID()}`;\n  },\n};\n"]}

package/dist/cli/handleDeployCliCommand.d.ts

@@ -0,0 +1,5 @@
+import type { AnkhCliRunResult } from '@ankhorage/ankh';
+import type { DeployCliInput } from './DeployCliInput.js';
+import type { DeployCliRuntime } from './DeployCliRuntime.js';
+export declare function handleDeployCliCommand(input: DeployCliInput, runtime: DeployCliRuntime): Promise<AnkhCliRunResult>;
+//# sourceMappingURL=handleDeployCliCommand.d.ts.map

package/dist/cli/handleDeployCliCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handleDeployCliCommand.d.ts","sourceRoot":"","sources":["../../src/cli/handleDeployCliCommand.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAA0B,MAAM,iBAAiB,CAAC;AAGhF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAO9D,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,cAAc,EACrB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,gBAAgB,CAAC,CAoC3B"}

package/dist/cli/handleDeployCliCommand.js

@@ -0,0 +1,62 @@
+import { inspectDeployCliRelease } from './inspectDeployCliRelease.js';
+import { parseDeployCliOptions } from './parseDeployCliOptions.js';
+import { renderDeployCliExecution } from './renderDeployCliExecution.js';
+import { renderDeployCliFailure } from './renderDeployCliFailure.js';
+import { renderDeployCliPlan } from './renderDeployCliPlan.js';
+export async function handleDeployCliCommand(input, runtime) {
+    const parsed = parseDeployCliOptions(input.argv, input.context.cwd);
+    if (!parsed.ok)
+        return fail(input, `Deploy CLI: ${parsed.message}\n`);
+    const inspected = await inspectDeployCliRelease(parsed.options, input.context.env, runtime);
+    if (!inspected.ok)
+        return fail(input, renderDeployCliFailure(inspected.failure));
+    input.context.writeStdout(renderDeployCliPlan(inspected.inspection, inspected.plan, parsed.options.format));
+    const early = earlyResult(parsed.options, inspected.plan);
+    if (early !== null)
+        return early;
+    const confirmation = await confirmMutation(input, parsed.options, inspected.plan);
+    if (confirmation === 'declined') {
+        input.context.writeStderr('Deployment cancelled; no mutation was performed.\n');
+        return { exitCode: 0 };
+    }
+    if (confirmation !== 'confirmed') {
+        return fail(input, 'Deployment requires confirmation. Use --yes for explicit non-interactive approval or --dry-run to inspect only.\n');
+    }
+    const executionId = parsed.options.executionId ?? runtime.createExecutionId();
+    const executed = await runtime.executeProjectRelease({
+        ...inspected.access,
+        inspection: inspected.inspection,
+        plan: inspected.plan,
+        executionId,
+    });
+    if (!executed.ok)
+        return fail(input, renderDeployCliFailure(executed.failure));
+    input.context.writeStdout(renderDeployCliExecution(executed.execution, executionId, parsed.options.format));
+    return { exitCode: executed.execution.result.status === 'completed' ? 0 : 1 };
+}
+function earlyResult(options, plan) {
+    if (options.dryRun)
+        return { exitCode: plan.status === 'blocked' ? 1 : 0 };
+    if (plan.status === 'no-change')
+        return { exitCode: 0 };
+    if (plan.status === 'blocked')
+        return { exitCode: 1 };
+    if (plan.steps.length === 0)
+        return { exitCode: plan.status === 'waiting' ? 1 : 0 };
+    return null;
+}
+async function confirmMutation(input, options, plan) {
+    if (options.yes)
+        return 'confirmed';
+    const { interaction } = input.context;
+    if (interaction === undefined)
+        return 'unavailable';
+    const irreversible = plan.steps.filter((step) => step.irreversible).length;
+    const detail = irreversible === 0 ? '' : ` (${irreversible} irreversible)`;
+    return interaction.confirm(`Execute ${plan.steps.length} release step(s)${detail}?`);
+}
+function fail(input, message) {
+    input.context.writeStderr(message);
+    return { exitCode: 1 };
+}
+//# sourceMappingURL=handleDeployCliCommand.js.map

package/dist/cli/handleDeployCliCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handleDeployCliCommand.js","sourceRoot":"","sources":["../../src/cli/handleDeployCliCommand.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAqB,EACrB,OAAyB;IAEzB,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,KAAK,EAAE,eAAe,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC5F,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,KAAK,EAAE,sBAAsB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAEjF,KAAK,CAAC,OAAO,CAAC,WAAW,CACvB,mBAAmB,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CACjF,CAAC;IACF,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAEjC,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAClF,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;QAChC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,oDAAoD,CAAC,CAAC;QAChF,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IACD,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;QACjC,OAAO,IAAI,CACT,KAAK,EACL,mHAAmH,CACpH,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAC9E,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAAC;QACnD,GAAG,SAAS,CAAC,MAAM;QACnB,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,WAAW;KACZ,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,KAAK,EAAE,sBAAsB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/E,KAAK,CAAC,OAAO,CAAC,WAAW,CACvB,wBAAwB,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CACjF,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAChF,CAAC;AAED,SAAS,WAAW,CAAC,OAAyB,EAAE,IAAiB;IAC/D,IAAI,OAAO,CAAC,MAAM;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACxD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACtD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,KAAqB,EACrB,OAAyB,EACzB,IAAiB;IAEjB,IAAI,OAAO,CAAC,GAAG;QAAE,OAAO,WAAW,CAAC;IACpC,MAAM,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;IACtC,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IACpD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC;IAC3E,MAAM,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,YAAY,gBAAgB,CAAC;IAC3E,OAAO,WAAW,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,MAAM,mBAAmB,MAAM,GAAG,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,IAAI,CAAC,KAAqB,EAAE,OAAe;IAClD,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACnC,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AACzB,CAAC","sourcesContent":["import type { AnkhCliRunResult, AnkhConfirmationResult } from '@ankhorage/ankh';\n\nimport type { ReleasePlan } from '../index.js';\nimport type { DeployCliInput } from './DeployCliInput.js';\nimport type { DeployCliOptions } from './DeployCliOptions.js';\nimport type { DeployCliRuntime } from './DeployCliRuntime.js';\nimport { inspectDeployCliRelease } from './inspectDeployCliRelease.js';\nimport { parseDeployCliOptions } from './parseDeployCliOptions.js';\nimport { renderDeployCliExecution } from './renderDeployCliExecution.js';\nimport { renderDeployCliFailure } from './renderDeployCliFailure.js';\nimport { renderDeployCliPlan } from './renderDeployCliPlan.js';\n\nexport async function handleDeployCliCommand(\n  input: DeployCliInput,\n  runtime: DeployCliRuntime,\n): Promise<AnkhCliRunResult> {\n  const parsed = parseDeployCliOptions(input.argv, input.context.cwd);\n  if (!parsed.ok) return fail(input, `Deploy CLI: ${parsed.message}\\n`);\n  const inspected = await inspectDeployCliRelease(parsed.options, input.context.env, runtime);\n  if (!inspected.ok) return fail(input, renderDeployCliFailure(inspected.failure));\n\n  input.context.writeStdout(\n    renderDeployCliPlan(inspected.inspection, inspected.plan, parsed.options.format),\n  );\n  const early = earlyResult(parsed.options, inspected.plan);\n  if (early !== null) return early;\n\n  const confirmation = await confirmMutation(input, parsed.options, inspected.plan);\n  if (confirmation === 'declined') {\n    input.context.writeStderr('Deployment cancelled; no mutation was performed.\\n');\n    return { exitCode: 0 };\n  }\n  if (confirmation !== 'confirmed') {\n    return fail(\n      input,\n      'Deployment requires confirmation. Use --yes for explicit non-interactive approval or --dry-run to inspect only.\\n',\n    );\n  }\n\n  const executionId = parsed.options.executionId ?? runtime.createExecutionId();\n  const executed = await runtime.executeProjectRelease({\n    ...inspected.access,\n    inspection: inspected.inspection,\n    plan: inspected.plan,\n    executionId,\n  });\n  if (!executed.ok) return fail(input, renderDeployCliFailure(executed.failure));\n  input.context.writeStdout(\n    renderDeployCliExecution(executed.execution, executionId, parsed.options.format),\n  );\n  return { exitCode: executed.execution.result.status === 'completed' ? 0 : 1 };\n}\n\nfunction earlyResult(options: DeployCliOptions, plan: ReleasePlan): AnkhCliRunResult | null {\n  if (options.dryRun) return { exitCode: plan.status === 'blocked' ? 1 : 0 };\n  if (plan.status === 'no-change') return { exitCode: 0 };\n  if (plan.status === 'blocked') return { exitCode: 1 };\n  if (plan.steps.length === 0) return { exitCode: plan.status === 'waiting' ? 1 : 0 };\n  return null;\n}\n\nasync function confirmMutation(\n  input: DeployCliInput,\n  options: DeployCliOptions,\n  plan: ReleasePlan,\n): Promise<AnkhConfirmationResult> {\n  if (options.yes) return 'confirmed';\n  const { interaction } = input.context;\n  if (interaction === undefined) return 'unavailable';\n  const irreversible = plan.steps.filter((step) => step.irreversible).length;\n  const detail = irreversible === 0 ? '' : ` (${irreversible} irreversible)`;\n  return interaction.confirm(`Execute ${plan.steps.length} release step(s)${detail}?`);\n}\n\nfunction fail(input: DeployCliInput, message: string): AnkhCliRunResult {\n  input.context.writeStderr(message);\n  return { exitCode: 1 };\n}\n"]}

package/dist/cli/handleDeployCliPlan.d.ts

@@ -0,0 +1,5 @@
+import type { AnkhCommandPlan } from '@ankhorage/ankh';
+import type { DeployCliInput } from './DeployCliInput.js';
+import type { DeployCliRuntime } from './DeployCliRuntime.js';
+export declare function handleDeployCliPlan(input: DeployCliInput, runtime: DeployCliRuntime): Promise<AnkhCommandPlan>;
+//# sourceMappingURL=handleDeployCliPlan.d.ts.map

package/dist/cli/handleDeployCliPlan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handleDeployCliPlan.d.ts","sourceRoot":"","sources":["../../src/cli/handleDeployCliPlan.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAK9D,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,cAAc,EACrB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,eAAe,CAAC,CAM1B"}

package/dist/cli/handleDeployCliPlan.js

@@ -0,0 +1,22 @@
+import { inspectDeployCliRelease } from './inspectDeployCliRelease.js';
+import { mapDeployCliPlan } from './mapDeployCliPlan.js';
+import { parseDeployCliOptions } from './parseDeployCliOptions.js';
+export async function handleDeployCliPlan(input, runtime) {
+    const parsed = parseDeployCliOptions(input.argv, input.context.cwd);
+    if (!parsed.ok)
+        return failedPlan('DEPLOY_CLI_INVALID_ARGUMENT', parsed.message);
+    const result = await inspectDeployCliRelease(parsed.options, input.context.env, runtime);
+    if (!result.ok)
+        return failedPlan(result.failure.code, result.failure.message);
+    return mapDeployCliPlan(result.inspection, result.plan);
+}
+function failedPlan(code, message) {
+    return {
+        kind: 'ankh-command-plan',
+        version: 1,
+        title: 'Deploy release',
+        steps: [],
+        diagnostics: [{ code, message, severity: 'error' }],
+    };
+}
+//# sourceMappingURL=handleDeployCliPlan.js.map

package/dist/cli/handleDeployCliPlan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handleDeployCliPlan.js","sourceRoot":"","sources":["../../src/cli/handleDeployCliPlan.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAqB,EACrB,OAAyB;IAEzB,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC,6BAA6B,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACzF,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/E,OAAO,gBAAgB,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,OAAe;IAC/C,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,gBAAgB;QACvB,KAAK,EAAE,EAAE;QACT,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;KACpD,CAAC;AACJ,CAAC","sourcesContent":["import type { AnkhCommandPlan } from '@ankhorage/ankh';\n\nimport type { DeployCliInput } from './DeployCliInput.js';\nimport type { DeployCliRuntime } from './DeployCliRuntime.js';\nimport { inspectDeployCliRelease } from './inspectDeployCliRelease.js';\nimport { mapDeployCliPlan } from './mapDeployCliPlan.js';\nimport { parseDeployCliOptions } from './parseDeployCliOptions.js';\n\nexport async function handleDeployCliPlan(\n  input: DeployCliInput,\n  runtime: DeployCliRuntime,\n): Promise<AnkhCommandPlan> {\n  const parsed = parseDeployCliOptions(input.argv, input.context.cwd);\n  if (!parsed.ok) return failedPlan('DEPLOY_CLI_INVALID_ARGUMENT', parsed.message);\n  const result = await inspectDeployCliRelease(parsed.options, input.context.env, runtime);\n  if (!result.ok) return failedPlan(result.failure.code, result.failure.message);\n  return mapDeployCliPlan(result.inspection, result.plan);\n}\n\nfunction failedPlan(code: string, message: string): AnkhCommandPlan {\n  return {\n    kind: 'ankh-command-plan',\n    version: 1,\n    title: 'Deploy release',\n    steps: [],\n    diagnostics: [{ code, message, severity: 'error' }],\n  };\n}\n"]}

package/dist/cli/index.d.ts

@@ -0,0 +1,4 @@
+export { DEPLOY_CLI_ENVIRONMENT } from './DeployCliEnvironment.js';
+declare const provider: import("@ankhorage/ankh").AnkhRuntimeCommandProvider;
+export default provider;
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAEnE,QAAA,MAAM,QAAQ,sDAAmD,CAAC;AAElE,eAAe,QAAQ,CAAC"}

package/dist/cli/index.js

@@ -0,0 +1,6 @@
+import { createDeployCliProvider } from './createDeployCliProvider.js';
+import { defaultDeployCliRuntime } from './defaultDeployCliRuntime.js';
+export { DEPLOY_CLI_ENVIRONMENT } from './DeployCliEnvironment.js';
+const provider = createDeployCliProvider(defaultDeployCliRuntime);
+export default provider;
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAEnE,MAAM,QAAQ,GAAG,uBAAuB,CAAC,uBAAuB,CAAC,CAAC;AAElE,eAAe,QAAQ,CAAC","sourcesContent":["import { createDeployCliProvider } from './createDeployCliProvider.js';\nimport { defaultDeployCliRuntime } from './defaultDeployCliRuntime.js';\n\nexport { DEPLOY_CLI_ENVIRONMENT } from './DeployCliEnvironment.js';\n\nconst provider = createDeployCliProvider(defaultDeployCliRuntime);\n\nexport default provider;\n"]}

package/dist/cli/inspectDeployCliRelease.d.ts

@@ -0,0 +1,16 @@
+import type { DeploymentFailure, ReleasePlan } from '../index.js';
+import type { ProjectReleaseAccess, ProjectReleaseInspection } from '../project/index.js';
+import type { DeployCliOptions } from './DeployCliOptions.js';
+import type { DeployCliRuntime } from './DeployCliRuntime.js';
+type InspectionResult = {
+    readonly ok: true;
+    readonly access: ProjectReleaseAccess;
+    readonly inspection: ProjectReleaseInspection;
+    readonly plan: ReleasePlan;
+} | {
+    readonly ok: false;
+    readonly failure: DeploymentFailure;
+};
+export declare function inspectDeployCliRelease(options: DeployCliOptions, env: Readonly<Record<string, string | undefined>>, runtime: DeployCliRuntime): Promise<InspectionResult>;
+export {};
+//# sourceMappingURL=inspectDeployCliRelease.d.ts.map

package/dist/cli/inspectDeployCliRelease.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspectDeployCliRelease.d.ts","sourceRoot":"","sources":["../../src/cli/inspectDeployCliRelease.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,KAAK,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAE1F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,KAAK,gBAAgB,GACjB;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAC;IAC9C,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;CAC5B,GACD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,CAAC;AAEhE,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,gBAAgB,EACzB,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,EACjD,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,gBAAgB,CAAC,CAa3B"}

package/dist/cli/inspectDeployCliRelease.js

@@ -0,0 +1,17 @@
+import { createDeployCliAccess } from './createDeployCliAccess.js';
+export async function inspectDeployCliRelease(options, env, runtime) {
+    const access = createDeployCliAccess(options, env);
+    const result = await runtime.inspectProjectRelease({
+        projectRoot: options.projectRoot,
+        ...access,
+    });
+    if (!result.ok)
+        return result;
+    return {
+        ok: true,
+        access,
+        inspection: result.inspection,
+        plan: runtime.createProjectReleasePlan(result.inspection),
+    };
+}
+//# sourceMappingURL=inspectDeployCliRelease.js.map

package/dist/cli/inspectDeployCliRelease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspectDeployCliRelease.js","sourceRoot":"","sources":["../../src/cli/inspectDeployCliRelease.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAanE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAyB,EACzB,GAAiD,EACjD,OAAyB;IAEzB,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAAC;QACjD,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,GAAG,MAAM;KACV,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAC9B,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM;QACN,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,IAAI,EAAE,OAAO,CAAC,wBAAwB,CAAC,MAAM,CAAC,UAAU,CAAC;KAC1D,CAAC;AACJ,CAAC","sourcesContent":["import type { DeploymentFailure, ReleasePlan } from '../index.js';\nimport type { ProjectReleaseAccess, ProjectReleaseInspection } from '../project/index.js';\nimport { createDeployCliAccess } from './createDeployCliAccess.js';\nimport type { DeployCliOptions } from './DeployCliOptions.js';\nimport type { DeployCliRuntime } from './DeployCliRuntime.js';\n\ntype InspectionResult =\n  | {\n      readonly ok: true;\n      readonly access: ProjectReleaseAccess;\n      readonly inspection: ProjectReleaseInspection;\n      readonly plan: ReleasePlan;\n    }\n  | { readonly ok: false; readonly failure: DeploymentFailure };\n\nexport async function inspectDeployCliRelease(\n  options: DeployCliOptions,\n  env: Readonly<Record<string, string | undefined>>,\n  runtime: DeployCliRuntime,\n): Promise<InspectionResult> {\n  const access = createDeployCliAccess(options, env);\n  const result = await runtime.inspectProjectRelease({\n    projectRoot: options.projectRoot,\n    ...access,\n  });\n  if (!result.ok) return result;\n  return {\n    ok: true,\n    access,\n    inspection: result.inspection,\n    plan: runtime.createProjectReleasePlan(result.inspection),\n  };\n}\n"]}

package/dist/cli/mapDeployCliPlan.d.ts

@@ -0,0 +1,5 @@
+import type { AnkhCommandPlan } from '@ankhorage/ankh';
+import type { ReleasePlan } from '../index.js';
+import type { ProjectReleaseInspection } from '../project/index.js';
+export declare function mapDeployCliPlan(inspection: ProjectReleaseInspection, plan: ReleasePlan): AnkhCommandPlan;
+//# sourceMappingURL=mapDeployCliPlan.d.ts.map

package/dist/cli/mapDeployCliPlan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mapDeployCliPlan.d.ts","sourceRoot":"","sources":["../../src/cli/mapDeployCliPlan.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAEpE,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,wBAAwB,EACpC,IAAI,EAAE,WAAW,GAChB,eAAe,CA2BjB"}

package/dist/cli/mapDeployCliPlan.js

@@ -0,0 +1,29 @@
+export function mapDeployCliPlan(inspection, plan) {
+    return {
+        kind: 'ankh-command-plan',
+        version: 1,
+        title: `Deploy release ${inspection.desired.version}`,
+        steps: plan.steps.map((step) => ({
+            capability: 'deploy.execute',
+            dependsOn: step.dependsOn,
+            destructive: step.irreversible,
+            id: step.id,
+            label: `[${step.target}] ${step.operation}`,
+            providerId: '@ankhorage/deploy',
+            status: plan.status === 'blocked' ? 'blocked' : 'planned',
+        })),
+        diagnostics: [
+            ...plan.diagnostics.map((diagnostic) => ({
+                code: diagnostic.code,
+                message: diagnostic.message,
+                severity: diagnostic.severity,
+            })),
+            ...inspection.actions.map((action) => ({
+                code: action.code,
+                message: action.message,
+                severity: 'warning',
+            })),
+        ],
+    };
+}
+//# sourceMappingURL=mapDeployCliPlan.js.map

package/dist/cli/mapDeployCliPlan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mapDeployCliPlan.js","sourceRoot":"","sources":["../../src/cli/mapDeployCliPlan.ts"],"names":[],"mappings":"AAKA,MAAM,UAAU,gBAAgB,CAC9B,UAAoC,EACpC,IAAiB;IAEjB,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,kBAAkB,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE;QACrD,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/B,UAAU,EAAE,gBAAgB;YAC5B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,SAAS,EAAE;YAC3C,UAAU,EAAE,mBAAmB;YAC/B,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;SAC1D,CAAC,CAAC;QACH,WAAW,EAAE;YACX,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBACvC,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,QAAQ,EAAE,UAAU,CAAC,QAAQ;aAC9B,CAAC,CAAC;YACH,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACrC,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,QAAQ,EAAE,SAAkB;aAC7B,CAAC,CAAC;SACJ;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type { AnkhCommandPlan } from '@ankhorage/ankh';\n\nimport type { ReleasePlan } from '../index.js';\nimport type { ProjectReleaseInspection } from '../project/index.js';\n\nexport function mapDeployCliPlan(\n  inspection: ProjectReleaseInspection,\n  plan: ReleasePlan,\n): AnkhCommandPlan {\n  return {\n    kind: 'ankh-command-plan',\n    version: 1,\n    title: `Deploy release ${inspection.desired.version}`,\n    steps: plan.steps.map((step) => ({\n      capability: 'deploy.execute',\n      dependsOn: step.dependsOn,\n      destructive: step.irreversible,\n      id: step.id,\n      label: `[${step.target}] ${step.operation}`,\n      providerId: '@ankhorage/deploy',\n      status: plan.status === 'blocked' ? 'blocked' : 'planned',\n    })),\n    diagnostics: [\n      ...plan.diagnostics.map((diagnostic) => ({\n        code: diagnostic.code,\n        message: diagnostic.message,\n        severity: diagnostic.severity,\n      })),\n      ...inspection.actions.map((action) => ({\n        code: action.code,\n        message: action.message,\n        severity: 'warning' as const,\n      })),\n    ],\n  };\n}\n"]}

package/dist/cli/parseDeployCliOptions.d.ts

@@ -0,0 +1,11 @@
+import type { DeployCliOptions } from './DeployCliOptions.js';
+type ParseResult = {
+    readonly ok: true;
+    readonly options: DeployCliOptions;
+} | {
+    readonly ok: false;
+    readonly message: string;
+};
+export declare function parseDeployCliOptions(argv: readonly string[], cwd: string): ParseResult;
+export {};
+//# sourceMappingURL=parseDeployCliOptions.d.ts.map

package/dist/cli/parseDeployCliOptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parseDeployCliOptions.d.ts","sourceRoot":"","sources":["../../src/cli/parseDeployCliOptions.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAa9D,KAAK,WAAW,GACZ;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAA;CAAE,GACzD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAerD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,WAAW,CAgCvF"}