@astrale-os/cli 1.0.0-beta.1 → 1.0.0-beta.2

package/src/lib/__tests__/domain-publication.test.ts

@@ -0,0 +1,144 @@
+import { publication } from '@astrale-os/kernel-protocol'
+import { defineDomain } from '@astrale-os/sdk'
+import { issuer } from '@astrale-os/sdk/auth'
+import { createDeployment } from '@astrale-os/sdk/deployment'
+import { defineSchema } from '@astrale-os/sdk/schema/v1'
+import { describe, expect, test } from 'bun:test'
+
+import { fetchDomainPublication } from '../domain-publication'
+
+const ROOT = 'https://publication-reader.example.dev'
+const PUBLICATION_URL = `${ROOT}/.well-known/astrale/domain.json`
+const MAXIMUM_PUBLICATION_BYTES = 1024 * 1024
+const schema = defineSchema('publication-reader.example.dev', {})
+const definition = defineDomain({
+  schema,
+  handlers: { functions: {}, classes: {}, interfaces: {} },
+})
+const deployed = createDeployment({
+  definition,
+  issuer: issuer.accept(ROOT),
+  bundleHref: `${ROOT}/domain.bundle.json`,
+  bindings: { callables: [] },
+}).publication
+
+describe('Domain Publication reader', () => {
+  test('fetches only the canonical path with redirects disabled', async () => {
+    const requests: Array<{ readonly url: string; readonly redirect?: RequestRedirect }> = []
+    const fetch = async (input: RequestInfo | URL, init?: RequestInit): Promise<Response> => {
+      requests.push({ url: String(input), redirect: init?.redirect })
+      return Response.json(deployed)
+    }
+
+    await expect(fetchDomainPublication(`${ROOT}/`, undefined, fetch)).resolves.toEqual(deployed)
+    expect(requests).toEqual([{ url: PUBLICATION_URL, redirect: 'error' }])
+  })
+
+  test('propagates redirect rejection instead of accepting another target', async () => {
+    const fetch = async (_input: RequestInfo | URL, init?: RequestInit): Promise<Response> => {
+      expect(init?.redirect).toBe('error')
+      throw new TypeError('redirect rejected')
+    }
+
+    await expect(fetchDomainPublication(ROOT, undefined, fetch)).rejects.toThrow(
+      'redirect rejected',
+    )
+  })
+
+  test('stops at one MiB and cancels an over-limit response stream', async () => {
+    let pulls = 0
+    let cancelled = false
+    const body = new ReadableStream<Uint8Array>(
+      {
+        pull(controller) {
+          pulls += 1
+          if (pulls === 1) {
+            controller.enqueue(new Uint8Array(MAXIMUM_PUBLICATION_BYTES))
+            return
+          }
+          if (pulls === 2) {
+            controller.enqueue(Uint8Array.of(0))
+            return
+          }
+          controller.error(new Error('reader consumed beyond its byte limit'))
+        },
+        cancel() {
+          cancelled = true
+        },
+      },
+      { highWaterMark: 0 },
+    )
+    const fetch = async (): Promise<Response> => new Response(body)
+
+    await expect(fetchDomainPublication(ROOT, undefined, fetch)).rejects.toThrow(
+      `exceeded ${MAXIMUM_PUBLICATION_BYTES} bytes`,
+    )
+    expect(pulls).toBe(2)
+    expect(cancelled).toBe(true)
+  })
+
+  test('rejects an oversized Content-Length before pulling and cancels the body', async () => {
+    let pulls = 0
+    let cancelled = false
+    const body = new ReadableStream<Uint8Array>(
+      {
+        pull() {
+          pulls += 1
+        },
+        cancel() {
+          cancelled = true
+        },
+      },
+      { highWaterMark: 0 },
+    )
+    const fetch = async (): Promise<Response> =>
+      new Response(body, {
+        headers: { 'content-length': String(MAXIMUM_PUBLICATION_BYTES + 1) },
+      })
+
+    await expect(fetchDomainPublication(ROOT, undefined, fetch)).rejects.toThrow(
+      `exceeded ${MAXIMUM_PUBLICATION_BYTES} bytes`,
+    )
+    expect(pulls).toBe(0)
+    expect(cancelled).toBe(true)
+  })
+
+  test.each([
+    ['invalid UTF-8', Uint8Array.of(0xc3, 0x28), TypeError],
+    ['invalid JSON', new TextEncoder().encode('{'), SyntaxError],
+    ['invalid Publication', new TextEncoder().encode('{}'), publication.PublicationError],
+  ] as const)('rejects %s before returning a Publication', async (_label, bytes, Cause) => {
+    const fetch = async (): Promise<Response> => new Response(bytes)
+    const error = await rejection(fetchDomainPublication(ROOT, undefined, fetch))
+
+    expect(error.message).toBe(`GET ${PUBLICATION_URL} returned an invalid Domain Publication`)
+    expect(error.cause).toBeInstanceOf(Cause)
+  })
+
+  test.each([
+    `${ROOT}/nested`,
+    `${ROOT}?deployment=current`,
+    `${ROOT}#fragment`,
+    'https://user:secret@publication-reader.example.dev',
+    'ftp://publication-reader.example.dev',
+  ])('rejects a non-origin deployment URL before fetch: %s', async (input) => {
+    let called = false
+    const fetch = async (): Promise<Response> => {
+      called = true
+      return Response.json(deployed)
+    }
+
+    await expect(fetchDomainPublication(input, undefined, fetch)).rejects.toBeInstanceOf(TypeError)
+    expect(called).toBe(false)
+  })
+})
+
+async function rejection(input: Promise<unknown>): Promise<Error> {
+  try {
+    await input
+  } catch (cause) {
+    if (cause instanceof Error) return cause
+    throw new Error('Expected an Error rejection.', { cause })
+  }
+  throw new Error('Expected the promise to reject.')
+}

package/src/lib/__tests__/idp-session.test.ts

@@ -68,11 +68,29 @@ describe('ensureFreshSession', () => {
       expect(result.orgHintCalls).toBe(1)
       expect(server.refreshCount()).toBe(1)
       const session = await readSession()
+      expect(session.clientId).toBe('c_1')
       expect(session.refresh_token).toBe('rt-1')
       expect((session.tokens as Record<string, { access_token: string }>)[AUD].access_token).toBe(
         result.token as string,
       )
       expect(server.lastOrganizationId()).toBe('org_1')
+      expect(server.lastClientId()).toBe('c_1')
+    } finally {
+      await server.stop()
+    }
+  })
+
+  test('refreshes with the client that issued the session instead of the IdP default', async () => {
+    const server = rotationServer()
+    try {
+      await writeIdpConfig(server.url)
+      await writeSession({ clientId: 'c_session', expires_at: past() })
+
+      const result = await runDriver('ensure', { DRIVER_AUDIENCE: AUD })
+
+      expect(result.ok).toBe(true)
+      expect(server.lastClientId()).toBe('c_session')
+      expect((await readSession()).clientId).toBe('c_session')
     } finally {
       await server.stop()
     }
@@ -273,6 +291,7 @@ function rotationServer(opts?: {
 }): {
   url: string
   refreshCount: () => number
+  lastClientId: () => string | undefined
   lastOrganizationId: () => string | undefined
   stop: () => Promise<void>
 } {
@@ -280,6 +299,7 @@ function rotationServer(opts?: {
   // refresh token is invalid_grant.
   let current = 'rt-0'
   let count = 0
+  let lastClientId: string | undefined
   let lastOrgId: string | undefined
   const server = Bun.serve({
     port: 0,
@@ -300,6 +320,7 @@ function rotationServer(opts?: {
       if (opts?.delayMs) await new Promise((r) => setTimeout(r, opts.delayMs))
       count += 1
       current = `rt-${count}`
+      lastClientId = form.get('client_id') ?? undefined
       lastOrgId = form.get('organization_id') ?? undefined
       return Response.json({
         access_token: unsignedJwt({ aud: AUD, exp: futureEpoch() }),
@@ -312,6 +333,7 @@ function rotationServer(opts?: {
   return {
     url: `http://${server.hostname}:${server.port}`,
     refreshCount: () => count,
+    lastClientId: () => lastClientId,
     lastOrganizationId: () => lastOrgId,
     stop: () => server.stop(true),
   }

package/src/lib/__tests__/idp.test.ts

@@ -100,6 +100,7 @@ describe('IdP schemas and token helpers', () => {
       idp: 'workos',
       issuer: 'https://example.authkit.app',
       subject: 'user_123',
+      clientId: 'client_123',
       access_token: 'opaque-token',
       refresh_token: 'refresh-token',
       token_type: 'Bearer',
@@ -110,6 +111,7 @@ describe('IdP schemas and token helpers', () => {
     })
 
     expect(session.claims?.email).toBe('alice@example.com')
+    expect(session.clientId).toBe('client_123')
     expect(session.refresh_token).toBe('refresh-token')
   })
 

package/src/lib/__tests__/instance.test.ts

@@ -74,6 +74,12 @@ describe('InstanceStoreSchema', () => {
     expect(normalizeInstanceKernelUrl('https://testmarc.eu.astrale.ai/')).toBe(
       'https://testmarc.eu.astrale.ai/api',
     )
+    expect(normalizeInstanceKernelUrl('https://testmarc.eu.beta.astrale.ai')).toBe(
+      'https://testmarc.eu.beta.astrale.ai/api',
+    )
+    expect(normalizeInstanceKernelUrl('https://shell.beta.astrale.ai')).toBe(
+      'https://shell.beta.astrale.ai',
+    )
   })
 
   test('does not rewrite explicit kernel or non-managed URLs', () => {

package/src/lib/__tests__/studio-server-deps.test.ts

@@ -1,6 +1,6 @@
 import { describe, expect, test } from 'bun:test'
-import { readFileSync } from 'node:fs'
-import { join } from 'node:path'
+import { readFileSync, readdirSync, statSync } from 'node:fs'
+import { join, relative } from 'node:path'
 import { Project } from 'ts-morph'
 
 /**
@@ -19,6 +19,18 @@ import { Project } from 'ts-morph'
 
 const CLI_ROOT = new URL('../../../', import.meta.url).pathname
 
+interface PackageManifest {
+  dependencies?: Record<string, string>
+  scripts?: Record<string, string>
+}
+
+const cliPackage = JSON.parse(
+  readFileSync(join(CLI_ROOT, 'package.json'), 'utf8'),
+) as PackageManifest
+const studioPackage = JSON.parse(
+  readFileSync(join(CLI_ROOT, 'studio/package.json'), 'utf8'),
+) as PackageManifest
+
 /** Base package of a bare specifier: `@scope/pkg/sub` → `@scope/pkg`, `pkg/sub` → `pkg`. */
 function basePackage(spec: string): string {
   const parts = spec.split('/')
@@ -29,26 +41,33 @@ function isBuiltin(spec: string): boolean {
   return spec.startsWith('node:') || spec === 'bun' || spec.startsWith('bun:')
 }
 
+function runtimeFiles(directory: string): string[] {
+  return readdirSync(directory).flatMap((entry) => {
+    const path = join(directory, entry)
+    if (statSync(path).isDirectory()) return runtimeFiles(path)
+    return /\.(?:ts|tsx)$/.test(path) && !/\.test\.(?:ts|tsx)$/.test(path) ? [path] : []
+  })
+}
+
+const studioPath = (path: string) => relative(CLI_ROOT, path).replaceAll('\\', '/')
+
 describe('studio server runtime deps', () => {
-  const deps = new Set(
-    Object.keys(
-      (
-        JSON.parse(readFileSync(join(CLI_ROOT, 'package.json'), 'utf8')) as {
-          dependencies?: Record<string, string>
-        }
-      ).dependencies ?? {},
-    ),
-  )
+  const deps = new Set(Object.keys(cliPackage.dependencies ?? {}))
 
   const project = new Project({ skipAddingFilesFromTsConfig: true })
   project.addSourceFilesAtPaths([
     join(CLI_ROOT, 'studio/server/**/*.ts'),
+    join(CLI_ROOT, 'studio/server/**/*.tsx'),
     join(CLI_ROOT, 'studio/shared/**/*.ts'),
+    join(CLI_ROOT, 'studio/shared/**/*.tsx'),
   ])
+  const runtimeSourceFiles = project
+    .getSourceFiles()
+    .filter((sourceFile) => !/\.test\.(?:ts|tsx)$/.test(sourceFile.getBaseName()))
 
   // getImportStringLiterals covers static imports, re-exports, and dynamic import().
   const offenders: Record<string, string[]> = {}
-  for (const sf of project.getSourceFiles()) {
+  for (const sf of runtimeSourceFiles) {
     const specs = sf.getImportStringLiterals().map((l) => l.getLiteralValue())
     for (const spec of specs) {
       if (spec.startsWith('.') || spec.startsWith('/') || isBuiltin(spec)) continue
@@ -66,9 +85,27 @@ describe('studio server runtime deps', () => {
     ).toEqual({})
   })
 
-  test('parsed at least the known studio server files', () => {
-    // Guard against the glob silently matching nothing (which would make the
-    // invariant vacuously pass).
-    expect(project.getSourceFiles().length).toBeGreaterThan(10)
+  test('parses every shipped Studio server and shared runtime source', () => {
+    const expected = [
+      ...runtimeFiles(join(CLI_ROOT, 'studio/server')),
+      ...runtimeFiles(join(CLI_ROOT, 'studio/shared')),
+    ]
+      .map(studioPath)
+      .sort()
+    const parsed = runtimeSourceFiles
+      .map((sourceFile) => studioPath(sourceFile.getFilePath()))
+      .sort()
+
+    expect(parsed).toEqual(expected)
+  })
+})
+
+describe('studio test gate', () => {
+  test('the root and Studio suites include all client, server, and shared tests', () => {
+    expect(cliPackage.scripts?.test).toBe(
+      'bun test src studio/client/src studio/server studio/shared && node --test scripts/*.test.mjs',
+    )
+    expect(cliPackage.scripts?.['test:studio']).toBe('pnpm --dir studio test')
+    expect(studioPackage.scripts?.test).toBe('bun test client/src server shared')
   })
 })

package/src/lib/__tests__/update.test.ts

@@ -4,6 +4,8 @@ import { tmpdir } from 'node:os'
 import { join } from 'node:path'
 
 import {
+  DEFAULT_UPDATE_CHANNEL,
+  InstallMetadataSchema,
   releaseBase,
   shouldUpdate,
   updateAstrale,
@@ -84,6 +86,16 @@ async function makeInstall(
 }
 
 describe('update helpers', () => {
+  test('defaults missing install metadata to the beta channel', () => {
+    expect(DEFAULT_UPDATE_CHANNEL).toBe('beta')
+    expect(
+      InstallMetadataSchema.parse({
+        method: 'script',
+        bin: '/tmp/astrale',
+      }).channel,
+    ).toBe('beta')
+  })
+
   test('releaseBase resolves exact versions and channels', () => {
     const meta: InstallMetadata = {
       method: 'script',

package/src/lib/domain-publication.ts

@@ -0,0 +1,102 @@
+import { publication } from '@astrale-os/kernel-protocol'
+
+const MAXIMUM_PUBLICATION_BYTES = 1024 * 1024
+type FetchLike = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>
+
+/** Fetch and admit one canonical Domain Publication without following its bundle. */
+export async function fetchDomainPublication(
+  input: string,
+  signal?: AbortSignal,
+  fetchImpl: FetchLike = globalThis.fetch,
+): Promise<publication.Publication> {
+  const root = deploymentRoot(input)
+  const url = new URL(publication.PATH, root)
+  const response = await fetchImpl(url, {
+    redirect: 'error',
+    ...(signal === undefined ? {} : { signal }),
+  })
+  if (!response.ok) {
+    await cancel(response.body)
+    throw new Error(`GET ${url.href} → ${response.status}`)
+  }
+  const bytes = await readBounded(response, url)
+  try {
+    const source = new TextDecoder('utf-8', { fatal: true }).decode(bytes)
+    return publication.accept(JSON.parse(source) as unknown)
+  } catch (cause) {
+    throw new Error(`GET ${url.href} returned an invalid Domain Publication`, { cause })
+  }
+}
+
+async function readBounded(response: Response, url: URL): Promise<Uint8Array> {
+  const declared = response.headers.get('content-length')
+  if (
+    declared !== null &&
+    (!/^\d+$/u.test(declared) ||
+      !Number.isSafeInteger(Number(declared)) ||
+      Number(declared) > MAXIMUM_PUBLICATION_BYTES)
+  ) {
+    await cancel(response.body)
+    throw sizeError(url)
+  }
+  if (response.body === null) return new Uint8Array()
+
+  const reader = response.body.getReader()
+  const chunks: Uint8Array[] = []
+  let size = 0
+  let complete = false
+  try {
+    for (;;) {
+      const next = await reader.read()
+      if (next.done) {
+        complete = true
+        break
+      }
+      if (next.value.byteLength === 0) continue
+      if (next.value.byteLength > MAXIMUM_PUBLICATION_BYTES - size) {
+        throw sizeError(url)
+      }
+      chunks.push(next.value)
+      size += next.value.byteLength
+    }
+  } finally {
+    if (!complete) await reader.cancel().catch(() => undefined)
+    reader.releaseLock()
+  }
+
+  const bytes = new Uint8Array(size)
+  let offset = 0
+  for (const chunk of chunks) {
+    bytes.set(chunk, offset)
+    offset += chunk.byteLength
+  }
+  return bytes
+}
+
+function sizeError(url: URL): Error {
+  return new Error(`GET ${url.href} exceeded ${MAXIMUM_PUBLICATION_BYTES} bytes`)
+}
+
+async function cancel(body: ReadableStream<Uint8Array> | null): Promise<void> {
+  if (body !== null) await body.cancel().catch(() => undefined)
+}
+
+function deploymentRoot(input: string): URL {
+  let url: URL
+  try {
+    url = new URL(input)
+  } catch {
+    throw new TypeError(`Domain deployment URL is invalid: ${input}`)
+  }
+  if (
+    !['http:', 'https:'].includes(url.protocol) ||
+    url.username !== '' ||
+    url.password !== '' ||
+    url.search !== '' ||
+    url.hash !== '' ||
+    !['', '/'].includes(url.pathname)
+  ) {
+    throw new TypeError(`Domain deployment URL must be an HTTP(S) origin: ${input}`)
+  }
+  return new URL(url.origin)
+}

package/src/lib/idp.ts

@@ -145,6 +145,8 @@ export const IdpSessionSchema = z
     idp: z.string(),
     issuer: z.string().url(),
     subject: z.string(),
+    /** OAuth client that issued this session's refresh token. */
+    clientId: z.string().optional(),
     audience: z.string().optional(),
     organizationId: z.string().optional(),
     access_token: z.string(),
@@ -644,10 +646,11 @@ export async function refreshSession(
   if (!session.refresh_token)
     throw new Error(`IdP session for "${identityName}" has no refresh token`)
   const idp = await readIdpConfig(session.idp)
+  const clientId = requireClientId(idp, session.clientId)
   const params = new URLSearchParams({
     grant_type: 'refresh_token',
     refresh_token: session.refresh_token,
-    client_id: requireClientId(idp),
+    client_id: clientId,
   })
   const audience = opts.audience ?? session.audience
   if (audience) params.set('audience', audience)
@@ -674,6 +677,7 @@ export async function refreshSession(
   const expiresAt = tokenExpiresAt(token)
   const next: IdpSession = {
     ...session,
+    clientId,
     access_token: token.access_token,
     id_token: token.id_token ?? session.id_token,
     refresh_token: token.refresh_token ?? session.refresh_token,

package/src/lib/instance.ts

@@ -448,7 +448,12 @@ function isRegionRoutedInstanceRoot(url: URL): boolean {
   if (url.search || url.hash) return false
 
   const labels = url.hostname.toLowerCase().split('.')
-  return labels.length === 4 && labels[2] === 'astrale' && labels[3] === 'ai'
+  return (
+    (labels.length === 4 || labels.length === 5) &&
+    /^[a-z]{2}(?:-[a-z0-9]+)*$/u.test(labels[1] ?? '') &&
+    labels.at(-2) === 'astrale' &&
+    labels.at(-1) === 'ai'
+  )
 }
 
 function definedEntry(entry: AddInstanceOpts): AddInstanceOpts {

package/src/lib/login-flow.ts

@@ -7,7 +7,9 @@ import {
   normalizeTokenResponse,
   pollDeviceToken,
   readIdpConfigOrBuiltin,
+  readIdpSession,
   readIdpStore,
+  requireClientId,
   requestClientCredentials,
   requestDeviceAuthorization,
   saveIdpSession,
@@ -71,10 +73,17 @@ export type LoginResult = {
  */
 export async function loginViaIdp(opts: LoginFlowOpts): Promise<LoginResult> {
   const idpName = await resolveIdpName(opts.idp)
-  const idp = await readIdpConfigOrBuiltin(idpName, { clientId: opts.clientId, persist: true })
+  const previous = opts.name && !opts.clientId ? await readIdpSession(opts.name) : null
+  const savedClientId = previous?.idp === idpName ? previous.clientId : undefined
+  const requestedClientId = opts.clientId ?? savedClientId
+  const idp = await readIdpConfigOrBuiltin(idpName, {
+    clientId: requestedClientId,
+    persist: true,
+  })
+  const clientId = requireClientId(idp, requestedClientId)
   const scope = opts.scope ?? idp.client.scope ?? 'openid profile email offline_access'
 
-  const token = normalizeTokenResponse(await obtainToken(idp, opts, scope))
+  const token = normalizeTokenResponse(await obtainToken(idp, { ...opts, clientId }, scope))
   if (!token.access_token) throw new Error('IdP response did not include access_token')
   if (opts.audience && !tokenAudienceMatches(token.access_token, opts.audience)) {
     throw new Error(
@@ -83,7 +92,7 @@ export async function loginViaIdp(opts: LoginFlowOpts): Promise<LoginResult> {
   }
 
   const claims = decodeTokenClaims(token.id_token ?? token.access_token)
-  const subject = subjectFromToken(token, opts.clientId ?? idp.client.client_id ?? idpName)
+  const subject = subjectFromToken(token, clientId)
   const issuer = issuerFromToken(token, idp.metadata.issuer)
   const identityName = opts.name ?? identityNameFromClaims(claims, idpName)
   const session: IdpSession = {
@@ -91,6 +100,7 @@ export async function loginViaIdp(opts: LoginFlowOpts): Promise<LoginResult> {
     idp: idpName,
     issuer,
     subject,
+    clientId,
     audience: opts.audience,
     access_token: token.access_token,
     id_token: token.id_token,

package/src/lib/meta.ts

@@ -6,8 +6,8 @@
  * `jwks_uri`) and JWKS at `/.well-known/jwks.json`. These helpers probe
  * both to verify the issuer is alive and publishes at least one key.
  *
- * Domain workers may expose `/meta` for deployment drift detection; that is
- * outside this connect-only CLI surface.
+ * Domain deployment readiness uses the canonical Domain Publication; that is
+ * outside this issuer-connectivity helper.
  */
 
 import { IssuerUnreachableError } from '../errors'

package/src/lib/update.ts

@@ -9,11 +9,11 @@ import { INSTALL_PATH } from '../state/index'
 import { run } from './proc'
 
 const DEFAULT_REPO = 'astrale-os/cli'
-const DEFAULT_CHANNEL = 'alpha'
+export const DEFAULT_UPDATE_CHANNEL = 'beta'
 
 export const InstallMetadataSchema = z.object({
   method: z.literal('script'),
-  channel: z.string().min(1).default(DEFAULT_CHANNEL),
+  channel: z.string().min(1).default(DEFAULT_UPDATE_CHANNEL),
   version: z.string().min(1).optional(),
   repo: z.string().min(1).default(DEFAULT_REPO),
   bin: z.string().min(1),
@@ -162,7 +162,7 @@ export function releaseBase(
     const version = req.version.replace(/^cli\/v/, '').replace(/^v/, '')
     return `https://github.com/${repo}/releases/download/cli/v${version}`
   }
-  return `https://github.com/${repo}/releases/download/${req.channel ?? meta.channel ?? DEFAULT_CHANNEL}`
+  return `https://github.com/${repo}/releases/download/${req.channel ?? meta.channel ?? DEFAULT_UPDATE_CHANNEL}`
 }
 
 export async function fetchManifest(base: string): Promise<UpdateManifest> {
@@ -177,7 +177,7 @@ export function shouldUpdate(currentVersion: string, manifestVersion: string): b
 export async function updateAstrale(req: UpdateRequest): Promise<UpdateResult> {
   const meta = await readInstallMetadata(req.installPath)
   const currentVersion = meta.version ?? req.currentVersion
-  const channel = req.channel ?? meta.channel ?? DEFAULT_CHANNEL
+  const channel = req.channel ?? meta.channel ?? DEFAULT_UPDATE_CHANNEL
   const platform = req.platform ?? detectPlatform()
   const key = platformKey(platform)
   const base = releaseBase(meta, { channel, version: req.version })

package/src/program/__tests__/program.test.ts

@@ -187,7 +187,7 @@ describe('program composition', () => {
       'whoami',
     ])
     expect(createHash('sha256').update(JSON.stringify(surface)).digest('hex')).toBe(
-      'b21a8c98f0bb75432b460d4562c2d86f39ffb8e88349962e4611ccbf65fa9f73',
+      '44f78959867171661197043f5b47eb6d6890274090370e071d10f11b4204850d',
     )
   })
 

package/studio/client/dist/assets/{elk-api-D2xgMJvi.js → elk-api-lwhFo7vB.js}

@@ -1 +1 @@
-import{m as L}from"./index-LGSWRrk8.js";function S(y,b){for(var u=0;u<b.length;u++){const a=b[u];if(typeof a!="string"&&!Array.isArray(a)){for(const i in a)if(i!=="default"&&!(i in y)){const n=Object.getOwnPropertyDescriptor(a,i);n&&Object.defineProperty(y,i,n.get?n:{enumerable:!0,get:()=>a[i]})}}}return Object.freeze(Object.defineProperty(y,Symbol.toStringTag,{value:"Module"}))}function w(y){throw new Error('Could not dynamically require "'+y+'". Please configure the dynamicRequireTargets or/and ignoreDynamicRequires option of @rollup/plugin-commonjs appropriately for this require call to work.')}var O={exports:{}},j;function C(){return j||(j=1,(function(y,b){(function(u){y.exports=u()})(function(){return(function(){function u(a,i,n){function d(f,_){if(!i[f]){if(!a[f]){var h=typeof w=="function"&&w;if(!_&&h)return h(f,!0);if(g)return g(f,!0);var o=new Error("Cannot find module '"+f+"'");throw o.code="MODULE_NOT_FOUND",o}var e=i[f]={exports:{}};a[f][0].call(e.exports,function(r){var t=a[f][1][r];return d(t||r)},e,e.exports,u,a,i,n)}return i[f].exports}for(var g=typeof w=="function"&&w,m=0;m<n.length;m++)d(n[m]);return d}return u})()({1:[function(u,a,i){Object.defineProperty(i,"__esModule",{value:!0}),i.default=void 0;function n(o){"@babel/helpers - typeof";return n=typeof Symbol=="function"&&typeof Symbol.iterator=="symbol"?function(e){return typeof e}:function(e){return e&&typeof Symbol=="function"&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},n(o)}function d(o,e){if(!(o instanceof e))throw new TypeError("Cannot call a class as a function")}function g(o,e){for(var r=0;r<e.length;r++){var t=e[r];t.enumerable=t.enumerable||!1,t.configurable=!0,"value"in t&&(t.writable=!0),Object.defineProperty(o,f(t.key),t)}}function m(o,e,r){return e&&g(o.prototype,e),Object.defineProperty(o,"prototype",{writable:!1}),o}function f(o){var e=_(o,"string");return n(e)=="symbol"?e:e+""}function _(o,e){if(n(o)!="object"||!o)return o;var r=o[Symbol.toPrimitive];if(r!==void 0){var t=r.call(o,e);if(n(t)!="object")return t;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(o)}i.default=(function(){function o(){var e=this,r=arguments.length>0&&arguments[0]!==void 0?arguments[0]:{},t=r.defaultLayoutOptions,s=t===void 0?{}:t,l=r.algorithms,v=l===void 0?["layered","stress","mrtree","radial","force","disco","sporeOverlap","sporeCompaction","rectpacking"]:l,c=r.workerFactory,p=r.workerUrl;if(d(this,o),this.defaultLayoutOptions=s,this.initialized=!1,typeof p>"u"&&typeof c>"u")throw new Error("Cannot construct an ELK without both 'workerUrl' and 'workerFactory'.");var k=c;typeof p<"u"&&typeof c>"u"&&(k=function(M){return new Worker(M)});var E=k(p);if(typeof E.postMessage!="function")throw new TypeError("Created worker does not provide the required 'postMessage' function.");this.worker=new h(E),this.worker.postMessage({cmd:"register",algorithms:v}).then(function(P){return e.initialized=!0}).catch(console.err)}return m(o,[{key:"layout",value:function(r){var t=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},s=t.layoutOptions,l=s===void 0?this.defaultLayoutOptions:s,v=t.logging,c=v===void 0?!1:v,p=t.measureExecutionTime,k=p===void 0?!1:p;return r?this.worker.postMessage({cmd:"layout",graph:r,layoutOptions:l,options:{logging:c,measureExecutionTime:k}}):Promise.reject(new Error("Missing mandatory parameter 'graph'."))}},{key:"knownLayoutAlgorithms",value:function(){return this.worker.postMessage({cmd:"algorithms"})}},{key:"knownLayoutOptions",value:function(){return this.worker.postMessage({cmd:"options"})}},{key:"knownLayoutCategories",value:function(){return this.worker.postMessage({cmd:"categories"})}},{key:"terminateWorker",value:function(){this.worker&&this.worker.terminate()}}])})();var h=(function(){function o(e){var r=this;if(d(this,o),e===void 0)throw new Error("Missing mandatory parameter 'worker'.");this.resolvers={},this.worker=e,this.worker.onmessage=function(t){setTimeout(function(){r.receive(r,t)},0)}}return m(o,[{key:"postMessage",value:function(r){var t=this.id||0;this.id=t+1,r.id=t;var s=this;return new Promise(function(l,v){s.resolvers[t]=function(c,p){c?(s.convertGwtStyleError(c),v(c)):l(p)},s.worker.postMessage(r)})}},{key:"receive",value:function(r,t){var s=t.data,l=r.resolvers[s.id];l&&(delete r.resolvers[s.id],s.error?l(s.error):l(null,s.data))}},{key:"terminate",value:function(){this.worker&&this.worker.terminate()}},{key:"convertGwtStyleError",value:function(r){if(r){var t=r.__java$exception;t&&(t.cause&&t.cause.backingJsObject&&(r.cause=t.cause.backingJsObject,this.convertGwtStyleError(r.cause)),delete r.__java$exception)}}}])})()},{}],2:[function(u,a,i){var n=u("./elk-api.js").default;Object.defineProperty(a.exports,"__esModule",{value:!0}),a.exports=n,n.default=n},{"./elk-api.js":1}]},{},[2])(2)})})(O)),O.exports}var x=C();const A=L(x),q=S({__proto__:null,default:A},[x]);export{q as e};
+import{m as L}from"./index-BckHuAWk.js";function S(y,b){for(var u=0;u<b.length;u++){const a=b[u];if(typeof a!="string"&&!Array.isArray(a)){for(const i in a)if(i!=="default"&&!(i in y)){const n=Object.getOwnPropertyDescriptor(a,i);n&&Object.defineProperty(y,i,n.get?n:{enumerable:!0,get:()=>a[i]})}}}return Object.freeze(Object.defineProperty(y,Symbol.toStringTag,{value:"Module"}))}function w(y){throw new Error('Could not dynamically require "'+y+'". Please configure the dynamicRequireTargets or/and ignoreDynamicRequires option of @rollup/plugin-commonjs appropriately for this require call to work.')}var O={exports:{}},j;function C(){return j||(j=1,(function(y,b){(function(u){y.exports=u()})(function(){return(function(){function u(a,i,n){function d(f,_){if(!i[f]){if(!a[f]){var h=typeof w=="function"&&w;if(!_&&h)return h(f,!0);if(g)return g(f,!0);var o=new Error("Cannot find module '"+f+"'");throw o.code="MODULE_NOT_FOUND",o}var e=i[f]={exports:{}};a[f][0].call(e.exports,function(r){var t=a[f][1][r];return d(t||r)},e,e.exports,u,a,i,n)}return i[f].exports}for(var g=typeof w=="function"&&w,m=0;m<n.length;m++)d(n[m]);return d}return u})()({1:[function(u,a,i){Object.defineProperty(i,"__esModule",{value:!0}),i.default=void 0;function n(o){"@babel/helpers - typeof";return n=typeof Symbol=="function"&&typeof Symbol.iterator=="symbol"?function(e){return typeof e}:function(e){return e&&typeof Symbol=="function"&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},n(o)}function d(o,e){if(!(o instanceof e))throw new TypeError("Cannot call a class as a function")}function g(o,e){for(var r=0;r<e.length;r++){var t=e[r];t.enumerable=t.enumerable||!1,t.configurable=!0,"value"in t&&(t.writable=!0),Object.defineProperty(o,f(t.key),t)}}function m(o,e,r){return e&&g(o.prototype,e),Object.defineProperty(o,"prototype",{writable:!1}),o}function f(o){var e=_(o,"string");return n(e)=="symbol"?e:e+""}function _(o,e){if(n(o)!="object"||!o)return o;var r=o[Symbol.toPrimitive];if(r!==void 0){var t=r.call(o,e);if(n(t)!="object")return t;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(o)}i.default=(function(){function o(){var e=this,r=arguments.length>0&&arguments[0]!==void 0?arguments[0]:{},t=r.defaultLayoutOptions,s=t===void 0?{}:t,l=r.algorithms,v=l===void 0?["layered","stress","mrtree","radial","force","disco","sporeOverlap","sporeCompaction","rectpacking"]:l,c=r.workerFactory,p=r.workerUrl;if(d(this,o),this.defaultLayoutOptions=s,this.initialized=!1,typeof p>"u"&&typeof c>"u")throw new Error("Cannot construct an ELK without both 'workerUrl' and 'workerFactory'.");var k=c;typeof p<"u"&&typeof c>"u"&&(k=function(M){return new Worker(M)});var E=k(p);if(typeof E.postMessage!="function")throw new TypeError("Created worker does not provide the required 'postMessage' function.");this.worker=new h(E),this.worker.postMessage({cmd:"register",algorithms:v}).then(function(P){return e.initialized=!0}).catch(console.err)}return m(o,[{key:"layout",value:function(r){var t=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},s=t.layoutOptions,l=s===void 0?this.defaultLayoutOptions:s,v=t.logging,c=v===void 0?!1:v,p=t.measureExecutionTime,k=p===void 0?!1:p;return r?this.worker.postMessage({cmd:"layout",graph:r,layoutOptions:l,options:{logging:c,measureExecutionTime:k}}):Promise.reject(new Error("Missing mandatory parameter 'graph'."))}},{key:"knownLayoutAlgorithms",value:function(){return this.worker.postMessage({cmd:"algorithms"})}},{key:"knownLayoutOptions",value:function(){return this.worker.postMessage({cmd:"options"})}},{key:"knownLayoutCategories",value:function(){return this.worker.postMessage({cmd:"categories"})}},{key:"terminateWorker",value:function(){this.worker&&this.worker.terminate()}}])})();var h=(function(){function o(e){var r=this;if(d(this,o),e===void 0)throw new Error("Missing mandatory parameter 'worker'.");this.resolvers={},this.worker=e,this.worker.onmessage=function(t){setTimeout(function(){r.receive(r,t)},0)}}return m(o,[{key:"postMessage",value:function(r){var t=this.id||0;this.id=t+1,r.id=t;var s=this;return new Promise(function(l,v){s.resolvers[t]=function(c,p){c?(s.convertGwtStyleError(c),v(c)):l(p)},s.worker.postMessage(r)})}},{key:"receive",value:function(r,t){var s=t.data,l=r.resolvers[s.id];l&&(delete r.resolvers[s.id],s.error?l(s.error):l(null,s.data))}},{key:"terminate",value:function(){this.worker&&this.worker.terminate()}},{key:"convertGwtStyleError",value:function(r){if(r){var t=r.__java$exception;t&&(t.cause&&t.cause.backingJsObject&&(r.cause=t.cause.backingJsObject,this.convertGwtStyleError(r.cause)),delete r.__java$exception)}}}])})()},{}],2:[function(u,a,i){var n=u("./elk-api.js").default;Object.defineProperty(a.exports,"__esModule",{value:!0}),a.exports=n,n.default=n},{"./elk-api.js":1}]},{},[2])(2)})})(O)),O.exports}var x=C();const A=L(x),q=S({__proto__:null,default:A},[x]);export{q as e};