@ankhorage/deploy 0.9.0 → 0.11.0

package/dist/cli/redactDeployCliActions.d.ts

@@ -0,0 +1,3 @@
+import type { DeploymentRequiredAction } from '../index.js';
+export declare function redactDeployCliActions(actions: readonly DeploymentRequiredAction[], env: Readonly<Record<string, string | undefined>>): readonly DeploymentRequiredAction[];
+//# sourceMappingURL=redactDeployCliActions.d.ts.map

package/dist/cli/redactDeployCliActions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactDeployCliActions.d.ts","sourceRoot":"","sources":["../../src/cli/redactDeployCliActions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAG5D,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,SAAS,wBAAwB,EAAE,EAC5C,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAChD,SAAS,wBAAwB,EAAE,CAMrC"}

package/dist/cli/redactDeployCliActions.js

@@ -0,0 +1,9 @@
+import { redactDeployCliText } from './redactDeployCliText.js';
+export function redactDeployCliActions(actions, env) {
+    return actions.map((action) => ({
+        ...action,
+        message: redactDeployCliText(action.message, env),
+        ...('url' in action ? { url: redactDeployCliText(action.url, env) } : {}),
+    }));
+}
+//# sourceMappingURL=redactDeployCliActions.js.map

package/dist/cli/redactDeployCliActions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactDeployCliActions.js","sourceRoot":"","sources":["../../src/cli/redactDeployCliActions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,UAAU,sBAAsB,CACpC,OAA4C,EAC5C,GAAiD;IAEjD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9B,GAAG,MAAM;QACT,OAAO,EAAE,mBAAmB,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC;QACjD,GAAG,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,mBAAmB,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC,CAAC,CAAC;AACN,CAAC","sourcesContent":["import type { DeploymentRequiredAction } from '../index.js';\nimport { redactDeployCliText } from './redactDeployCliText.js';\n\nexport function redactDeployCliActions(\n  actions: readonly DeploymentRequiredAction[],\n  env: Readonly<Record<string, string | undefined>>,\n): readonly DeploymentRequiredAction[] {\n  return actions.map((action) => ({\n    ...action,\n    message: redactDeployCliText(action.message, env),\n    ...('url' in action ? { url: redactDeployCliText(action.url, env) } : {}),\n  }));\n}\n"]}

package/dist/cli/redactDeployCliFailure.d.ts

@@ -0,0 +1,3 @@
+import type { DeploymentFailure } from '../index.js';
+export declare function redactDeployCliFailure(failure: DeploymentFailure, env: Readonly<Record<string, string | undefined>>): DeploymentFailure;
+//# sourceMappingURL=redactDeployCliFailure.d.ts.map

package/dist/cli/redactDeployCliFailure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactDeployCliFailure.d.ts","sourceRoot":"","sources":["../../src/cli/redactDeployCliFailure.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGrD,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,iBAAiB,EAC1B,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAChD,iBAAiB,CAEnB"}

package/dist/cli/redactDeployCliFailure.js

@@ -0,0 +1,5 @@
+import { redactDeployCliText } from './redactDeployCliText.js';
+export function redactDeployCliFailure(failure, env) {
+    return { ...failure, message: redactDeployCliText(failure.message, env) };
+}
+//# sourceMappingURL=redactDeployCliFailure.js.map

package/dist/cli/redactDeployCliFailure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactDeployCliFailure.js","sourceRoot":"","sources":["../../src/cli/redactDeployCliFailure.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,UAAU,sBAAsB,CACpC,OAA0B,EAC1B,GAAiD;IAEjD,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;AAC5E,CAAC","sourcesContent":["import type { DeploymentFailure } from '../index.js';\nimport { redactDeployCliText } from './redactDeployCliText.js';\n\nexport function redactDeployCliFailure(\n  failure: DeploymentFailure,\n  env: Readonly<Record<string, string | undefined>>,\n): DeploymentFailure {\n  return { ...failure, message: redactDeployCliText(failure.message, env) };\n}\n"]}

package/dist/cli/redactDeployCliPlan.d.ts

@@ -0,0 +1,3 @@
+import type { ReleasePlan } from '../index.js';
+export declare function redactDeployCliPlan(plan: ReleasePlan, env: Readonly<Record<string, string | undefined>>): ReleasePlan;
+//# sourceMappingURL=redactDeployCliPlan.d.ts.map

package/dist/cli/redactDeployCliPlan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactDeployCliPlan.d.ts","sourceRoot":"","sources":["../../src/cli/redactDeployCliPlan.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG/C,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,WAAW,EACjB,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAChD,WAAW,CAQb"}

package/dist/cli/redactDeployCliPlan.js

@@ -0,0 +1,11 @@
+import { redactDeployCliText } from './redactDeployCliText.js';
+export function redactDeployCliPlan(plan, env) {
+    return {
+        ...plan,
+        diagnostics: plan.diagnostics.map((diagnostic) => ({
+            ...diagnostic,
+            message: redactDeployCliText(diagnostic.message, env),
+        })),
+    };
+}
+//# sourceMappingURL=redactDeployCliPlan.js.map

package/dist/cli/redactDeployCliPlan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactDeployCliPlan.js","sourceRoot":"","sources":["../../src/cli/redactDeployCliPlan.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,UAAU,mBAAmB,CACjC,IAAiB,EACjB,GAAiD;IAEjD,OAAO;QACL,GAAG,IAAI;QACP,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACjD,GAAG,UAAU;YACb,OAAO,EAAE,mBAAmB,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC;SACtD,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC","sourcesContent":["import type { ReleasePlan } from '../index.js';\nimport { redactDeployCliText } from './redactDeployCliText.js';\n\nexport function redactDeployCliPlan(\n  plan: ReleasePlan,\n  env: Readonly<Record<string, string | undefined>>,\n): ReleasePlan {\n  return {\n    ...plan,\n    diagnostics: plan.diagnostics.map((diagnostic) => ({\n      ...diagnostic,\n      message: redactDeployCliText(diagnostic.message, env),\n    })),\n  };\n}\n"]}

package/dist/cli/redactDeployCliText.d.ts

@@ -0,0 +1,2 @@
+export declare function redactDeployCliText(text: string, env: Readonly<Record<string, string | undefined>>): string;
+//# sourceMappingURL=redactDeployCliText.d.ts.map

package/dist/cli/redactDeployCliText.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactDeployCliText.d.ts","sourceRoot":"","sources":["../../src/cli/redactDeployCliText.ts"],"names":[],"mappings":"AAaA,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAChD,MAAM,CAGR"}

package/dist/cli/redactDeployCliText.js

@@ -0,0 +1,61 @@
+const SENSITIVE_KEYS = new Set([
+    'privateKey',
+    'private_key',
+    'clientSecret',
+    'client_secret',
+    'secret',
+    'token',
+    'access_token',
+    'refresh_token',
+    'password',
+    'passphrase',
+]);
+export function redactDeployCliText(text, env) {
+    const secrets = collectSecrets(env).sort((left, right) => right.length - left.length);
+    return secrets.reduce((result, secret) => replaceSecret(result, secret), text);
+}
+function collectSecrets(env) {
+    const secrets = new Set();
+    addSecret(env.ANKH_DEPLOY_GOOGLE_PLAY_SERVICE_ACCOUNT_JSON, secrets);
+    addSecret(env.ANKH_DEPLOY_APP_STORE_CONNECT_API_KEY_JSON, secrets);
+    addSecret(env.ANKH_DEPLOY_EAS_TOKEN, secrets);
+    return [...secrets];
+}
+function addSecret(rawValue, secrets) {
+    const raw = rawValue?.trim();
+    if (raw === undefined || raw.length === 0)
+        return;
+    secrets.add(raw);
+    collectJsonSecrets(raw, secrets);
+}
+function collectJsonSecrets(raw, secrets) {
+    try {
+        const parsed = JSON.parse(raw);
+        visitJson(parsed, secrets);
+    }
+    catch {
+        return;
+    }
+}
+function visitJson(value, secrets) {
+    if (Array.isArray(value)) {
+        value.forEach((item) => visitJson(item, secrets));
+        return;
+    }
+    if (!isRecord(value))
+        return;
+    for (const [key, child] of Object.entries(value)) {
+        if (SENSITIVE_KEYS.has(key) && typeof child === 'string' && child.length > 0) {
+            secrets.add(child);
+        }
+        visitJson(child, secrets);
+    }
+}
+function replaceSecret(text, secret) {
+    const escaped = JSON.stringify(secret).slice(1, -1);
+    return text.split(secret).join('[REDACTED]').split(escaped).join('[REDACTED]');
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=redactDeployCliText.js.map

package/dist/cli/redactDeployCliText.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactDeployCliText.js","sourceRoot":"","sources":["../../src/cli/redactDeployCliText.ts"],"names":[],"mappings":"AAAA,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,YAAY;IACZ,aAAa;IACb,cAAc;IACd,eAAe;IACf,QAAQ;IACR,OAAO;IACP,cAAc;IACd,eAAe;IACf,UAAU;IACV,YAAY;CACb,CAAC,CAAC;AAEH,MAAM,UAAU,mBAAmB,CACjC,IAAY,EACZ,GAAiD;IAEjD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACtF,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,cAAc,CAAC,GAAiD;IACvE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,SAAS,CAAC,GAAG,CAAC,4CAA4C,EAAE,OAAO,CAAC,CAAC;IACrE,SAAS,CAAC,GAAG,CAAC,0CAA0C,EAAE,OAAO,CAAC,CAAC;IACnE,SAAS,CAAC,GAAG,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,SAAS,CAAC,QAA4B,EAAE,OAAoB;IACnE,MAAM,GAAG,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAClD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjB,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW,EAAE,OAAoB;IAC3D,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,OAAoB;IACrD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO;IAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,MAAc;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC","sourcesContent":["const SENSITIVE_KEYS = new Set([\n  'privateKey',\n  'private_key',\n  'clientSecret',\n  'client_secret',\n  'secret',\n  'token',\n  'access_token',\n  'refresh_token',\n  'password',\n  'passphrase',\n]);\n\nexport function redactDeployCliText(\n  text: string,\n  env: Readonly<Record<string, string | undefined>>,\n): string {\n  const secrets = collectSecrets(env).sort((left, right) => right.length - left.length);\n  return secrets.reduce((result, secret) => replaceSecret(result, secret), text);\n}\n\nfunction collectSecrets(env: Readonly<Record<string, string | undefined>>): string[] {\n  const secrets = new Set<string>();\n  addSecret(env.ANKH_DEPLOY_GOOGLE_PLAY_SERVICE_ACCOUNT_JSON, secrets);\n  addSecret(env.ANKH_DEPLOY_APP_STORE_CONNECT_API_KEY_JSON, secrets);\n  addSecret(env.ANKH_DEPLOY_EAS_TOKEN, secrets);\n  return [...secrets];\n}\n\nfunction addSecret(rawValue: string | undefined, secrets: Set<string>): void {\n  const raw = rawValue?.trim();\n  if (raw === undefined || raw.length === 0) return;\n  secrets.add(raw);\n  collectJsonSecrets(raw, secrets);\n}\n\nfunction collectJsonSecrets(raw: string, secrets: Set<string>): void {\n  try {\n    const parsed: unknown = JSON.parse(raw);\n    visitJson(parsed, secrets);\n  } catch {\n    return;\n  }\n}\n\nfunction visitJson(value: unknown, secrets: Set<string>): void {\n  if (Array.isArray(value)) {\n    value.forEach((item) => visitJson(item, secrets));\n    return;\n  }\n  if (!isRecord(value)) return;\n  for (const [key, child] of Object.entries(value)) {\n    if (SENSITIVE_KEYS.has(key) && typeof child === 'string' && child.length > 0) {\n      secrets.add(child);\n    }\n    visitJson(child, secrets);\n  }\n}\n\nfunction replaceSecret(text: string, secret: string): string {\n  const escaped = JSON.stringify(secret).slice(1, -1);\n  return text.split(secret).join('[REDACTED]').split(escaped).join('[REDACTED]');\n}\n\nfunction isRecord(value: unknown): value is Readonly<Record<string, unknown>> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n"]}

package/dist/cli/renderDeployCliExecution.d.ts

@@ -0,0 +1,3 @@
+import type { ProjectReleaseExecution } from '../project/index.js';
+export declare function renderDeployCliExecution(execution: ProjectReleaseExecution, executionId: string): string;
+//# sourceMappingURL=renderDeployCliExecution.d.ts.map

package/dist/cli/renderDeployCliExecution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderDeployCliExecution.d.ts","sourceRoot":"","sources":["../../src/cli/renderDeployCliExecution.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAEnE,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,uBAAuB,EAClC,WAAW,EAAE,MAAM,GAClB,MAAM,CAkBR"}

package/dist/cli/renderDeployCliExecution.js

@@ -0,0 +1,19 @@
+export function renderDeployCliExecution(execution, executionId) {
+    const lines = [
+        `Execution: ${executionId}`,
+        `Result: ${execution.result.status}`,
+        `Current revision: ${execution.result.currentRevision}`,
+        `History recorded: ${execution.historyRecorded ? 'yes' : 'no'}`,
+    ];
+    if (execution.result.code !== undefined)
+        lines.push(`Code: ${execution.result.code}`);
+    if (execution.result.executedStepIds.length > 0) {
+        lines.push(`Executed steps: ${execution.result.executedStepIds.join(', ')}`);
+    }
+    if (execution.historyFailure !== undefined) {
+        lines.push(`History failure: ${execution.historyFailure.code}: ${execution.historyFailure.message}`);
+    }
+    lines.push('');
+    return lines.join('\n');
+}
+//# sourceMappingURL=renderDeployCliExecution.js.map

package/dist/cli/renderDeployCliExecution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderDeployCliExecution.js","sourceRoot":"","sources":["../../src/cli/renderDeployCliExecution.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,wBAAwB,CACtC,SAAkC,EAClC,WAAmB;IAEnB,MAAM,KAAK,GAAG;QACZ,cAAc,WAAW,EAAE;QAC3B,WAAW,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE;QACpC,qBAAqB,SAAS,CAAC,MAAM,CAAC,eAAe,EAAE;QACvD,qBAAqB,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;KAChE,CAAC;IACF,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACtF,IAAI,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,mBAAmB,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,SAAS,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAC3C,KAAK,CAAC,IAAI,CACR,oBAAoB,SAAS,CAAC,cAAc,CAAC,IAAI,KAAK,SAAS,CAAC,cAAc,CAAC,OAAO,EAAE,CACzF,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC","sourcesContent":["import type { ProjectReleaseExecution } from '../project/index.js';\n\nexport function renderDeployCliExecution(\n  execution: ProjectReleaseExecution,\n  executionId: string,\n): string {\n  const lines = [\n    `Execution: ${executionId}`,\n    `Result: ${execution.result.status}`,\n    `Current revision: ${execution.result.currentRevision}`,\n    `History recorded: ${execution.historyRecorded ? 'yes' : 'no'}`,\n  ];\n  if (execution.result.code !== undefined) lines.push(`Code: ${execution.result.code}`);\n  if (execution.result.executedStepIds.length > 0) {\n    lines.push(`Executed steps: ${execution.result.executedStepIds.join(', ')}`);\n  }\n  if (execution.historyFailure !== undefined) {\n    lines.push(\n      `History failure: ${execution.historyFailure.code}: ${execution.historyFailure.message}`,\n    );\n  }\n  lines.push('');\n  return lines.join('\\n');\n}\n"]}

package/dist/cli/renderDeployCliFailure.d.ts

@@ -0,0 +1,3 @@
+import type { DeploymentFailure } from '../index.js';
+export declare function renderDeployCliFailure(failure: DeploymentFailure): string;
+//# sourceMappingURL=renderDeployCliFailure.d.ts.map

package/dist/cli/renderDeployCliFailure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderDeployCliFailure.d.ts","sourceRoot":"","sources":["../../src/cli/renderDeployCliFailure.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM,CAMzE"}

package/dist/cli/renderDeployCliFailure.js

@@ -0,0 +1,6 @@
+export function renderDeployCliFailure(failure) {
+    const scope = [failure.target, failure.provider].filter((value) => value !== undefined);
+    const suffix = scope.length === 0 ? '' : ` (${scope.join(' | ')})`;
+    return `Deploy failed: ${failure.code}: ${failure.message}${suffix}\n`;
+}
+//# sourceMappingURL=renderDeployCliFailure.js.map

package/dist/cli/renderDeployCliFailure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderDeployCliFailure.js","sourceRoot":"","sources":["../../src/cli/renderDeployCliFailure.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,sBAAsB,CAAC,OAA0B;IAC/D,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CACrD,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,CAChD,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;IACnE,OAAO,kBAAkB,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,GAAG,MAAM,IAAI,CAAC;AACzE,CAAC","sourcesContent":["import type { DeploymentFailure } from '../index.js';\n\nexport function renderDeployCliFailure(failure: DeploymentFailure): string {\n  const scope = [failure.target, failure.provider].filter(\n    (value): value is string => value !== undefined,\n  );\n  const suffix = scope.length === 0 ? '' : ` (${scope.join(' | ')})`;\n  return `Deploy failed: ${failure.code}: ${failure.message}${suffix}\\n`;\n}\n"]}

package/dist/cli/renderDeployCliPlan.d.ts

@@ -0,0 +1,4 @@
+import type { ReleasePlan } from '../index.js';
+import type { ProjectReleaseInspection } from '../project/index.js';
+export declare function renderDeployCliPlan(inspection: ProjectReleaseInspection, plan: ReleasePlan): string;
+//# sourceMappingURL=renderDeployCliPlan.d.ts.map

package/dist/cli/renderDeployCliPlan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderDeployCliPlan.d.ts","sourceRoot":"","sources":["../../src/cli/renderDeployCliPlan.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAmB,MAAM,aAAa,CAAC;AAChE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAEpE,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,wBAAwB,EACpC,IAAI,EAAE,WAAW,GAChB,MAAM,CAyBR"}

package/dist/cli/renderDeployCliPlan.js

@@ -0,0 +1,39 @@
+export function renderDeployCliPlan(inspection, plan) {
+    const lines = [
+        `Release: ${inspection.desired.version}`,
+        `Targets: ${inspection.desired.targets.join(', ')}`,
+        `Revision: ${inspection.desired.revision}`,
+        `Plan status: ${plan.status}`,
+        '',
+        'Steps:',
+    ];
+    if (plan.steps.length === 0)
+        lines.push('  - none');
+    plan.steps.forEach((step, index) => lines.push(...renderStep(step, index)));
+    lines.push('', 'Diagnostics:');
+    if (plan.diagnostics.length === 0)
+        lines.push('  - none');
+    for (const diagnostic of plan.diagnostics) {
+        const target = diagnostic.target === undefined ? '' : ` [${diagnostic.target}]`;
+        lines.push(`  [${diagnostic.severity}]${target} ${diagnostic.code}: ${diagnostic.message}`);
+    }
+    lines.push('', 'Required actions:');
+    if (inspection.actions.length === 0)
+        lines.push('  - none');
+    for (const action of inspection.actions) {
+        const target = action.target === undefined ? '' : ` [${action.target}]`;
+        lines.push(`  ${action.type}${target} ${action.code}: ${action.message}`);
+    }
+    lines.push('');
+    return lines.join('\n');
+}
+function renderStep(step, index) {
+    return [
+        `  ${index + 1}. [${step.target}] ${step.operation}`,
+        `     id: ${step.id}`,
+        `     dependsOn: ${step.dependsOn.length === 0 ? 'none' : step.dependsOn.join(', ')}`,
+        `     irreversible: ${step.irreversible ? 'yes' : 'no'}`,
+        `     retry: ${step.retry}`,
+    ];
+}
+//# sourceMappingURL=renderDeployCliPlan.js.map

package/dist/cli/renderDeployCliPlan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderDeployCliPlan.js","sourceRoot":"","sources":["../../src/cli/renderDeployCliPlan.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,mBAAmB,CACjC,UAAoC,EACpC,IAAiB;IAEjB,MAAM,KAAK,GAAG;QACZ,YAAY,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE;QACxC,YAAY,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACnD,aAAa,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE;QAC1C,gBAAgB,IAAI,CAAC,MAAM,EAAE;QAC7B,EAAE;QACF,QAAQ;KACT,CAAC;IACF,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5E,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;IAC/B,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1D,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,MAAM,GAAG,CAAC;QAChF,KAAK,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,QAAQ,IAAI,MAAM,IAAI,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;IACpC,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5D,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,GAAG,CAAC;QACxE,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,IAAI,GAAG,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,UAAU,CAAC,IAAqB,EAAE,KAAa;IACtD,OAAO;QACL,KAAK,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,SAAS,EAAE;QACpD,YAAY,IAAI,CAAC,EAAE,EAAE;QACrB,mBAAmB,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACrF,sBAAsB,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;QACxD,eAAe,IAAI,CAAC,KAAK,EAAE;KAC5B,CAAC;AACJ,CAAC","sourcesContent":["import type { ReleasePlan, ReleasePlanStep } from '../index.js';\nimport type { ProjectReleaseInspection } from '../project/index.js';\n\nexport function renderDeployCliPlan(\n  inspection: ProjectReleaseInspection,\n  plan: ReleasePlan,\n): string {\n  const lines = [\n    `Release: ${inspection.desired.version}`,\n    `Targets: ${inspection.desired.targets.join(', ')}`,\n    `Revision: ${inspection.desired.revision}`,\n    `Plan status: ${plan.status}`,\n    '',\n    'Steps:',\n  ];\n  if (plan.steps.length === 0) lines.push('  - none');\n  plan.steps.forEach((step, index) => lines.push(...renderStep(step, index)));\n  lines.push('', 'Diagnostics:');\n  if (plan.diagnostics.length === 0) lines.push('  - none');\n  for (const diagnostic of plan.diagnostics) {\n    const target = diagnostic.target === undefined ? '' : ` [${diagnostic.target}]`;\n    lines.push(`  [${diagnostic.severity}]${target} ${diagnostic.code}: ${diagnostic.message}`);\n  }\n  lines.push('', 'Required actions:');\n  if (inspection.actions.length === 0) lines.push('  - none');\n  for (const action of inspection.actions) {\n    const target = action.target === undefined ? '' : ` [${action.target}]`;\n    lines.push(`  ${action.type}${target} ${action.code}: ${action.message}`);\n  }\n  lines.push('');\n  return lines.join('\\n');\n}\n\nfunction renderStep(step: ReleasePlanStep, index: number): string[] {\n  return [\n    `  ${index + 1}. [${step.target}] ${step.operation}`,\n    `     id: ${step.id}`,\n    `     dependsOn: ${step.dependsOn.length === 0 ? 'none' : step.dependsOn.join(', ')}`,\n    `     irreversible: ${step.irreversible ? 'yes' : 'no'}`,\n    `     retry: ${step.retry}`,\n  ];\n}\n"]}

package/dist/cli/writeDeployCliHuman.d.ts

@@ -0,0 +1,3 @@
+import type { DeployCliInput } from './DeployCliInput.js';
+export declare function writeDeployCliHuman(input: DeployCliInput, stream: 'stdout' | 'stderr', text: string): void;
+//# sourceMappingURL=writeDeployCliHuman.d.ts.map

package/dist/cli/writeDeployCliHuman.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeDeployCliHuman.d.ts","sourceRoot":"","sources":["../../src/cli/writeDeployCliHuman.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAG1D,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,cAAc,EACrB,MAAM,EAAE,QAAQ,GAAG,QAAQ,EAC3B,IAAI,EAAE,MAAM,GACX,IAAI,CAIN"}

package/dist/cli/writeDeployCliHuman.js

@@ -0,0 +1,9 @@
+import { redactDeployCliText } from './redactDeployCliText.js';
+export function writeDeployCliHuman(input, stream, text) {
+    const safe = redactDeployCliText(text, input.context.env);
+    if (stream === 'stdout')
+        input.context.writeStdout(safe);
+    else
+        input.context.writeStderr(safe);
+}
+//# sourceMappingURL=writeDeployCliHuman.js.map

package/dist/cli/writeDeployCliHuman.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeDeployCliHuman.js","sourceRoot":"","sources":["../../src/cli/writeDeployCliHuman.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,UAAU,mBAAmB,CACjC,KAAqB,EACrB,MAA2B,EAC3B,IAAY;IAEZ,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1D,IAAI,MAAM,KAAK,QAAQ;QAAE,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;;QACpD,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC","sourcesContent":["import type { DeployCliInput } from './DeployCliInput.js';\nimport { redactDeployCliText } from './redactDeployCliText.js';\n\nexport function writeDeployCliHuman(\n  input: DeployCliInput,\n  stream: 'stdout' | 'stderr',\n  text: string,\n): void {\n  const safe = redactDeployCliText(text, input.context.env);\n  if (stream === 'stdout') input.context.writeStdout(safe);\n  else input.context.writeStderr(safe);\n}\n"]}

package/dist/cli/writeDeployCliJson.d.ts

@@ -0,0 +1,4 @@
+import type { DeployCliInput } from './DeployCliInput.js';
+import type { DeployCliJsonEnvelope } from './DeployCliJsonEnvelope.js';
+export declare function writeDeployCliJson(input: DeployCliInput, envelope: DeployCliJsonEnvelope): void;
+//# sourceMappingURL=writeDeployCliJson.d.ts.map

package/dist/cli/writeDeployCliJson.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeDeployCliJson.d.ts","sourceRoot":"","sources":["../../src/cli/writeDeployCliJson.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAExE,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,qBAAqB,GAAG,IAAI,CAE/F"}

package/dist/cli/writeDeployCliJson.js

@@ -0,0 +1,4 @@
+export function writeDeployCliJson(input, envelope) {
+    input.context.writeStdout(`${JSON.stringify(envelope)}\n`);
+}
+//# sourceMappingURL=writeDeployCliJson.js.map

package/dist/cli/writeDeployCliJson.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeDeployCliJson.js","sourceRoot":"","sources":["../../src/cli/writeDeployCliJson.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,kBAAkB,CAAC,KAAqB,EAAE,QAA+B;IACvF,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC7D,CAAC","sourcesContent":["import type { DeployCliInput } from './DeployCliInput.js';\nimport type { DeployCliJsonEnvelope } from './DeployCliJsonEnvelope.js';\n\nexport function writeDeployCliJson(input: DeployCliInput, envelope: DeployCliJsonEnvelope): void {\n  input.context.writeStdout(`${JSON.stringify(envelope)}\\n`);\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ankhorage/deploy",
-  "version": "0.9.0",
+  "version": "0.11.0",
   "description": "Declarative deployment engine for Expo apps across web, iOS, and Android — build, provision, publish, and manage releases from one configuration.",
   "license": "MIT",
   "publishConfig": {
@@ -42,7 +42,12 @@
       "import": "./dist/project/index.js",
       "default": "./dist/project/index.js"
     },
-    "./package.json": "./package.json"
+    "./package.json": "./package.json",
+    "./cli": {
+      "types": "./dist/cli/index.d.ts",
+      "import": "./dist/cli/index.js",
+      "default": "./dist/cli/index.js"
+    }
   },
   "files": [
     "dist",
@@ -52,8 +57,12 @@
   ],
   "ankh": {
     "category": "deploy",
-    "provider": null,
-    "capabilities": []
+    "provider": "./dist/cli/index.js",
+    "capabilities": [
+      "deploy.inspect",
+      "deploy.plan",
+      "deploy.execute"
+    ]
   },
   "scripts": {
     "build": "rm -rf dist tsconfig.tsbuildinfo tsconfig.build.tsbuildinfo && bun x tsc -p tsconfig.build.json",
@@ -71,10 +80,11 @@
     "prepack": "bun run build"
   },
   "dependencies": {
-    "@ankhorage/contracts": "^7.5.0",
+    "@ankhorage/contracts": "^7.9.0",
     "google-auth-library": "^10.9.1"
   },
   "devDependencies": {
+    "@ankhorage/ankh": "^0.8.0",
     "@ankhorage/devtools": "^1.4.1",
     "@ankhorage/paradox": "^0.1.21",
     "@changesets/cli": "^2.31.0",