@celljs/cli 3.8.0 → 4.0.0

package/lib/deploy/cloud-api.d.ts

@@ -0,0 +1,58 @@
+import { CellError, type StandardSchema } from '@celljs/kit';
+/** What the clouds' API clients need from the outside world; tests replace it. */
+export interface CloudIo {
+    fetch(url: string, init: RequestInit): Promise<Response>;
+    sleep(ms: number): Promise<void>;
+    now(): Date;
+}
+export declare const DEFAULT_IO: CloudIo;
+/** An error answer of a cloud API, with the cloud's own code. */
+export declare class CloudApiError extends Error {
+    readonly status: number;
+    readonly code: string;
+    readonly requestId?: string | undefined;
+    constructor(status: number, code: string, message: string, requestId?: string | undefined);
+}
+export declare namespace CloudApi {
+    /** Sends a request; a network failure becomes CELL_DEPLOY_NETWORK. */
+    function send(io: CloudIo, url: string, init: RequestInit, cloud: string): Promise<Response>;
+    /** A failed API call as a CellError for people and agents. */
+    function failure(cloud: string, step: string, error: CloudApiError, hint?: string): CellError;
+    function poll<T>(io: CloudIo, read: () => Promise<T>, done: (value: T) => boolean, what: string, timeoutMs?: number): Promise<T>;
+}
+/** Credentials of each cloud, from the environment variables their own CLIs and SDKs read. */
+export declare namespace CloudCredentials {
+    function alibaba(env: NodeJS.ProcessEnv): {
+        accessKeyId: string;
+        accessKeySecret: string;
+        securityToken?: string;
+    } | undefined;
+    function tencent(env: NodeJS.ProcessEnv): {
+        secretId: string;
+        secretKey: string;
+        token?: string;
+    } | undefined;
+    /** `AWS_ACCESS_KEY_ID` / `AWS_SECRET_ACCESS_KEY`, else the `AWS_PROFILE` (or default) profile of ~/.aws/credentials. */
+    function aws(env: NodeJS.ProcessEnv, home?: string): {
+        accessKeyId: string;
+        secretAccessKey: string;
+        sessionToken?: string;
+    } | undefined;
+    function ini(text: string): Record<string, Record<string, string>>;
+    function missing(cloud: string, variables: string, more?: string): CellError;
+}
+type FieldType = 'string' | 'number' | 'boolean' | 'env' | readonly string[];
+/**
+ * A Standard Schema for the options of a preset (its field of cell.config.ts), without a
+ * validation library: known keys only, each of one type; `env` is a record of strings.
+ */
+export declare namespace PresetOptionsSchema {
+    function of(fields: Record<string, FieldType>): StandardSchema;
+}
+/** Names of cloud resources derived from the package name. */
+export declare namespace CloudNames {
+    /** Letters, digits and `-`, starting with a letter, at most `max` characters. */
+    function functionName(root: string, given: unknown, max?: number): string;
+}
+export {};
+//# sourceMappingURL=cloud-api.d.ts.map

package/lib/deploy/cloud-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-api.d.ts","sourceRoot":"","sources":["../../src/deploy/cloud-api.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7D,kFAAkF;AAClF,MAAM,WAAW,OAAO;IACpB,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzD,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,GAAG,IAAI,IAAI,CAAC;CACf;AAED,eAAO,MAAM,UAAU,EAAE,OAIxB,CAAC;AAEF,iEAAiE;AACjE,qBAAa,aAAc,SAAQ,KAAK;IAEhC,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM;IAErB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM;IAJ/B,YACa,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM,EACN,SAAS,CAAC,EAAE,MAAM,YAAA,EAG9B;CACJ;AAED,yBAAiB,QAAQ,CAAC;IACtB,sEAAsE;IACtE,SAAsB,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAWxG;IAED,8DAA8D;IAC9D,SAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAWnG;IAED,SAAsB,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,SAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAgB7I;CACJ;AAED,8FAA8F;AAC9F,yBAAiB,gBAAgB,CAAC;IAC9B,SAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAIpI;IAED,SAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAInH;IAED,wHAAwH;IACxH,SAAgB,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,SAAY,GAAG;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAYjJ;IAED,SAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAcxE;IAED,SAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,SAAK,GAAG,SAAS,CAM9E;CACJ;AAED,KAAK,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,KAAK,GAAG,SAAS,MAAM,EAAE,CAAC;AAE7E;;;GAGG;AACH,yBAAiB,mBAAmB,CAAC;IACjC,SAAgB,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,cAAc,CAoBpE;CAeJ;AAED,8DAA8D;AAC9D,yBAAiB,UAAU,CAAC;IACxB,iFAAiF;IACjF,SAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,SAAK,GAAG,MAAM,CAa3E;CACJ"}

package/lib/deploy/cloud-api.js

@@ -0,0 +1,189 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { CellError } from '@celljs/kit';
+export const DEFAULT_IO = {
+    fetch: (input, init) => fetch(input, init),
+    sleep: ms => new Promise(resolve => setTimeout(resolve, ms)),
+    now: () => new Date(),
+};
+/** An error answer of a cloud API, with the cloud's own code. */
+export class CloudApiError extends Error {
+    status;
+    code;
+    requestId;
+    constructor(status, code, message, requestId) {
+        super(message);
+        this.status = status;
+        this.code = code;
+        this.requestId = requestId;
+    }
+}
+export var CloudApi;
+(function (CloudApi) {
+    /** Sends a request; a network failure becomes CELL_DEPLOY_NETWORK. */
+    async function send(io, url, init, cloud) {
+        try {
+            return await io.fetch(url, init);
+        }
+        catch (cause) {
+            throw new CellError({
+                code: 'CELL_DEPLOY_NETWORK',
+                message: `Cannot reach ${new URL(url).host} (${cloud}): ${cause?.message ?? cause}`,
+                hint: 'Check the network connection and proxy settings of this machine, then deploy again.',
+                cause,
+            });
+        }
+    }
+    CloudApi.send = send;
+    /** A failed API call as a CellError for people and agents. */
+    function failure(cloud, step, error, hint) {
+        const auth = error.status === 401 || error.status === 403 || /auth|signature|accesskey|secret|credential|forbidden|denied|token/i.test(error.code);
+        return new CellError({
+            code: auth ? 'CELL_DEPLOY_UNAUTHORIZED' : 'CELL_DEPLOY_API_ERROR',
+            message: `${cloud} ${step} failed: [${error.code}] ${error.message}${error.requestId ? ` (request ${error.requestId})` : ''}`,
+            hint: hint ??
+                (auth
+                    ? 'Check that the credentials are valid and allowed to manage functions in this account and region.'
+                    : 'Fix what the cloud reports (see the code and message), then deploy again.'),
+        });
+    }
+    CloudApi.failure = failure;
+    async function poll(io, read, done, what, timeoutMs = 180_000) {
+        const started = io.now().getTime();
+        for (let delay = 1000;; delay = Math.min(delay * 1.5, 5000)) {
+            const value = await read();
+            if (done(value)) {
+                return value;
+            }
+            if (io.now().getTime() - started > timeoutMs) {
+                throw new CellError({
+                    code: 'CELL_DEPLOY_TIMEOUT',
+                    message: `Timed out after ${Math.round(timeoutMs / 1000)}s waiting for ${what}.`,
+                    hint: 'Look at the function in the console of the cloud; deploy again once it is ready.',
+                });
+            }
+            await io.sleep(delay);
+        }
+    }
+    CloudApi.poll = poll;
+})(CloudApi || (CloudApi = {}));
+/** Credentials of each cloud, from the environment variables their own CLIs and SDKs read. */
+export var CloudCredentials;
+(function (CloudCredentials) {
+    function alibaba(env) {
+        const accessKeyId = env.ALIBABA_CLOUD_ACCESS_KEY_ID;
+        const accessKeySecret = env.ALIBABA_CLOUD_ACCESS_KEY_SECRET;
+        return accessKeyId && accessKeySecret ? { accessKeyId, accessKeySecret, securityToken: env.ALIBABA_CLOUD_SECURITY_TOKEN || undefined } : undefined;
+    }
+    CloudCredentials.alibaba = alibaba;
+    function tencent(env) {
+        const secretId = env.TENCENTCLOUD_SECRET_ID;
+        const secretKey = env.TENCENTCLOUD_SECRET_KEY;
+        return secretId && secretKey ? { secretId, secretKey, token: env.TENCENTCLOUD_SESSION_TOKEN || undefined } : undefined;
+    }
+    CloudCredentials.tencent = tencent;
+    /** `AWS_ACCESS_KEY_ID` / `AWS_SECRET_ACCESS_KEY`, else the `AWS_PROFILE` (or default) profile of ~/.aws/credentials. */
+    function aws(env, home = homedir()) {
+        if (env.AWS_ACCESS_KEY_ID && env.AWS_SECRET_ACCESS_KEY) {
+            return { accessKeyId: env.AWS_ACCESS_KEY_ID, secretAccessKey: env.AWS_SECRET_ACCESS_KEY, sessionToken: env.AWS_SESSION_TOKEN || undefined };
+        }
+        const file = env.AWS_SHARED_CREDENTIALS_FILE ?? join(home, '.aws', 'credentials');
+        if (!existsSync(file)) {
+            return undefined;
+        }
+        const section = ini(readFileSync(file, 'utf8'))[env.AWS_PROFILE ?? 'default'];
+        return section?.aws_access_key_id && section.aws_secret_access_key
+            ? { accessKeyId: section.aws_access_key_id, secretAccessKey: section.aws_secret_access_key, sessionToken: section.aws_session_token }
+            : undefined;
+    }
+    CloudCredentials.aws = aws;
+    function ini(text) {
+        const sections = {};
+        let current;
+        for (const raw of text.split(/\r?\n/)) {
+            const line = raw.trim();
+            const header = /^\[\s*(?:profile\s+)?([^\]]+?)\s*\]$/.exec(line);
+            if (header) {
+                current = sections[header[1]] ??= {};
+            }
+            else if (current && /^[\w.-]+\s*=/.test(line)) {
+                const index = line.indexOf('=');
+                current[line.slice(0, index).trim()] = line.slice(index + 1).trim();
+            }
+        }
+        return sections;
+    }
+    CloudCredentials.ini = ini;
+    function missing(cloud, variables, more = '') {
+        return new CellError({
+            code: 'CELL_DEPLOY_CREDENTIALS_MISSING',
+            message: `No ${cloud} credentials: ${variables} are not set.`,
+            hint: `Set ${variables} in the environment of cell deploy (CI secrets, or your shell)${more}. cell deploy --dry-run works without them.`,
+        });
+    }
+    CloudCredentials.missing = missing;
+})(CloudCredentials || (CloudCredentials = {}));
+/**
+ * A Standard Schema for the options of a preset (its field of cell.config.ts), without a
+ * validation library: known keys only, each of one type; `env` is a record of strings.
+ */
+export var PresetOptionsSchema;
+(function (PresetOptionsSchema) {
+    function of(fields) {
+        return {
+            '~standard': {
+                version: 1,
+                vendor: 'cell',
+                validate: value => {
+                    if (typeof value !== 'object' || value === null || Array.isArray(value)) {
+                        return { issues: [{ message: 'must be an object' }] };
+                    }
+                    for (const [key, field] of Object.entries(value)) {
+                        const type = fields[key];
+                        const problem = type === undefined ? `unknown option; the options are ${Object.keys(fields).join(', ')}` : check(field, type);
+                        if (problem) {
+                            return { issues: [{ message: problem, path: [key] }] };
+                        }
+                    }
+                    return { value };
+                },
+            },
+        };
+    }
+    PresetOptionsSchema.of = of;
+    function check(value, type) {
+        if (Array.isArray(type)) {
+            return type.includes(value) ? undefined : `must be one of ${type.map(t => JSON.stringify(t)).join(', ')}`;
+        }
+        if (type === 'env') {
+            const ok = typeof value === 'object' && value !== null && !Array.isArray(value) && Object.values(value).every(v => typeof v === 'string');
+            return ok ? undefined : 'must be an object of strings';
+        }
+        if (type === 'number') {
+            return typeof value === 'number' && Number.isFinite(value) && value > 0 ? undefined : 'must be a positive number';
+        }
+        return typeof value === type ? undefined : `must be a ${type}`;
+    }
+})(PresetOptionsSchema || (PresetOptionsSchema = {}));
+/** Names of cloud resources derived from the package name. */
+export var CloudNames;
+(function (CloudNames) {
+    /** Letters, digits and `-`, starting with a letter, at most `max` characters. */
+    function functionName(root, given, max = 60) {
+        if (typeof given === 'string' && given) {
+            return given;
+        }
+        const file = join(root, 'package.json');
+        const pkg = existsSync(file) ? JSON.parse(readFileSync(file, 'utf8')).name : undefined;
+        const base = (pkg ?? 'cell-app')
+            .replace(/^@[^/]+\//, '')
+            .toLowerCase()
+            .replace(/[^a-z0-9-]+/g, '-')
+            .replace(/^[^a-z]+/, '')
+            .replace(/-+$/, '');
+        return (base || 'cell-app').slice(0, max).replace(/-+$/, '');
+    }
+    CloudNames.functionName = functionName;
+})(CloudNames || (CloudNames = {}));
+//# sourceMappingURL=cloud-api.js.map

package/lib/deploy/cloud-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-api.js","sourceRoot":"","sources":["../../src/deploy/cloud-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAuB,MAAM,aAAa,CAAC;AAS7D,MAAM,CAAC,MAAM,UAAU,GAAY;IAC/B,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC;IAC1C,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC5D,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;CACxB,CAAC;AAEF,iEAAiE;AACjE,MAAM,OAAO,aAAc,SAAQ,KAAK;IAEvB,MAAM;IACN,IAAI;IAEJ,SAAS;IAJtB,YACa,MAAc,EACd,IAAY,EACrB,OAAe,EACN,SAAkB;QAE3B,KAAK,CAAC,OAAO,CAAC,CAAC;sBALN,MAAM;oBACN,IAAI;yBAEJ,SAAS;IAGtB,CAAC;CACJ;AAED,MAAM,KAAW,QAAQ,CA8CxB;AA9CD,WAAiB,QAAQ;IACrB,sEAAsE;IAC/D,KAAK,UAAU,IAAI,CAAC,EAAW,EAAE,GAAW,EAAE,IAAiB,EAAE,KAAa;QACjF,IAAI,CAAC;YACD,OAAO,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,SAAS,CAAC;gBAChB,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,gBAAgB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,KAAK,MAAO,KAAe,EAAE,OAAO,IAAI,KAAK,EAAE;gBAC9F,IAAI,EAAE,qFAAqF;gBAC3F,KAAK;aACR,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAXqB,SAAA,IAAI,OAWzB,CAAA;IAED,8DAA8D;IAC9D,SAAgB,OAAO,CAAC,KAAa,EAAE,IAAY,EAAE,KAAoB,EAAE,IAAa;QACpF,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,oEAAoE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnJ,OAAO,IAAI,SAAS,CAAC;YACjB,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,uBAAuB;YACjE,OAAO,EAAE,GAAG,KAAK,IAAI,IAAI,aAAa,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC7H,IAAI,EACA,IAAI;gBACJ,CAAC,IAAI;oBACD,CAAC,CAAC,kGAAkG;oBACpG,CAAC,CAAC,2EAA2E,CAAC;SACzF,CAAC,CAAC;IACP,CAAC;IAXe,SAAA,OAAO,UAWtB,CAAA;IAEM,KAAK,UAAU,IAAI,CAAI,EAAW,EAAE,IAAsB,EAAE,IAA2B,EAAE,IAAY,EAAE,SAAS,GAAG,OAAO;QAC7H,MAAM,OAAO,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QACnC,KAAK,IAAI,KAAK,GAAG,IAAI,GAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;YAC3D,MAAM,KAAK,GAAG,MAAM,IAAI,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACd,OAAO,KAAK,CAAC;YACjB,CAAC;YACD,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,OAAO,GAAG,SAAS,EAAE,CAAC;gBAC3C,MAAM,IAAI,SAAS,CAAC;oBAChB,IAAI,EAAE,qBAAqB;oBAC3B,OAAO,EAAE,mBAAmB,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,iBAAiB,IAAI,GAAG;oBAChF,IAAI,EAAE,kFAAkF;iBAC3F,CAAC,CAAC;YACP,CAAC;YACD,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;IACL,CAAC;IAhBqB,SAAA,IAAI,OAgBzB,CAAA;AACL,CAAC,EA9CgB,QAAQ,KAAR,QAAQ,QA8CxB;AAED,8FAA8F;AAC9F,MAAM,KAAW,gBAAgB,CAmDhC;AAnDD,WAAiB,gBAAgB;IAC7B,SAAgB,OAAO,CAAC,GAAsB;QAC1C,MAAM,WAAW,GAAG,GAAG,CAAC,2BAA2B,CAAC;QACpD,MAAM,eAAe,GAAG,GAAG,CAAC,+BAA+B,CAAC;QAC5D,OAAO,WAAW,IAAI,eAAe,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,aAAa,EAAE,GAAG,CAAC,4BAA4B,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACvJ,CAAC;IAJe,iBAAA,OAAO,UAItB,CAAA;IAED,SAAgB,OAAO,CAAC,GAAsB;QAC1C,MAAM,QAAQ,GAAG,GAAG,CAAC,sBAAsB,CAAC;QAC5C,MAAM,SAAS,GAAG,GAAG,CAAC,uBAAuB,CAAC;QAC9C,OAAO,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,0BAA0B,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3H,CAAC;IAJe,iBAAA,OAAO,UAItB,CAAA;IAED,wHAAwH;IACxH,SAAgB,GAAG,CAAC,GAAsB,EAAE,IAAI,GAAG,OAAO,EAAE;QACxD,IAAI,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,qBAAqB,EAAE,CAAC;YACrD,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,iBAAiB,EAAE,eAAe,EAAE,GAAG,CAAC,qBAAqB,EAAE,YAAY,EAAE,GAAG,CAAC,iBAAiB,IAAI,SAAS,EAAE,CAAC;QAChJ,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,2BAA2B,IAAI,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;QAClF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,SAAS,CAAC,CAAC;QAC9E,OAAO,OAAO,EAAE,iBAAiB,IAAI,OAAO,CAAC,qBAAqB;YAC9D,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,iBAAiB,EAAE,eAAe,EAAE,OAAO,CAAC,qBAAqB,EAAE,YAAY,EAAE,OAAO,CAAC,iBAAiB,EAAE;YACrI,CAAC,CAAC,SAAS,CAAC;IACpB,CAAC;IAZe,iBAAA,GAAG,MAYlB,CAAA;IAED,SAAgB,GAAG,CAAC,IAAY;QAC5B,MAAM,QAAQ,GAA2C,EAAE,CAAC;QAC5D,IAAI,OAA2C,CAAC;QAChD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjE,IAAI,MAAM,EAAE,CAAC;gBACT,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;YACzC,CAAC;iBAAM,IAAI,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAChC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACxE,CAAC;QACL,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;IAde,iBAAA,GAAG,MAclB,CAAA;IAED,SAAgB,OAAO,CAAC,KAAa,EAAE,SAAiB,EAAE,IAAI,GAAG,EAAE;QAC/D,OAAO,IAAI,SAAS,CAAC;YACjB,IAAI,EAAE,iCAAiC;YACvC,OAAO,EAAE,MAAM,KAAK,iBAAiB,SAAS,eAAe;YAC7D,IAAI,EAAE,OAAO,SAAS,iEAAiE,IAAI,6CAA6C;SAC3I,CAAC,CAAC;IACP,CAAC;IANe,iBAAA,OAAO,UAMtB,CAAA;AACL,CAAC,EAnDgB,gBAAgB,KAAhB,gBAAgB,QAmDhC;AAID;;;GAGG;AACH,MAAM,KAAW,mBAAmB,CAoCnC;AApCD,WAAiB,mBAAmB;IAChC,SAAgB,EAAE,CAAC,MAAiC;QAChD,OAAO;YACH,WAAW,EAAE;gBACT,OAAO,EAAE,CAAC;gBACV,MAAM,EAAE,MAAM;gBACd,QAAQ,EAAE,KAAK,CAAC,EAAE;oBACd,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;wBACtE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC;oBAC1D,CAAC;oBACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;wBAC1E,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;wBACzB,MAAM,OAAO,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,mCAAmC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;wBAC9H,IAAI,OAAO,EAAE,CAAC;4BACV,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;wBAC3D,CAAC;oBACL,CAAC;oBACD,OAAO,EAAE,KAAK,EAAE,CAAC;gBACrB,CAAC;aACJ;SACJ,CAAC;IACN,CAAC;IApBe,oBAAA,EAAE,KAoBjB,CAAA;IAED,SAAS,KAAK,CAAC,KAAc,EAAE,IAAe;QAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxH,CAAC;QACD,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACjB,MAAM,EAAE,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;YAC1I,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,8BAA8B,CAAC;QAC3D,CAAC;QACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,2BAA2B,CAAC;QACtH,CAAC;QACD,OAAO,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,IAAI,EAAE,CAAC;IACnE,CAAC;AACL,CAAC,EApCgB,mBAAmB,KAAnB,mBAAmB,QAoCnC;AAED,8DAA8D;AAC9D,MAAM,KAAW,UAAU,CAgB1B;AAhBD,WAAiB,UAAU;IACvB,iFAAiF;IACjF,SAAgB,YAAY,CAAC,IAAY,EAAE,KAAc,EAAE,GAAG,GAAG,EAAE;QAC/D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9G,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,UAAU,CAAC;aAC3B,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;aACxB,WAAW,EAAE;aACb,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC;aAC5B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;aACvB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxB,OAAO,CAAC,IAAI,IAAI,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjE,CAAC;IAbe,WAAA,YAAY,eAa3B,CAAA;AACL,CAAC,EAhBgB,UAAU,KAAV,UAAU,QAgB1B"}

package/lib/deploy/code-package.d.ts

@@ -0,0 +1,15 @@
+/** The zip of a build output that function platforms take as code. */
+export declare class CodePackage {
+    readonly zip: Buffer;
+    readonly files: number;
+    protected constructor(zip: Buffer, files: number);
+    /** Every file of the output directory. */
+    static of(outDir: string): CodePackage;
+    get size(): number;
+    get base64(): string;
+    describe(): string;
+    /** Fails before uploading when the platform would reject the package. */
+    checkSize(limit: number, cloud: string, hint: string): void;
+    static bytes(n: number): string;
+}
+//# sourceMappingURL=code-package.d.ts.map

package/lib/deploy/code-package.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-package.d.ts","sourceRoot":"","sources":["../../src/deploy/code-package.ts"],"names":[],"mappings":"AAGA,sEAAsE;AACtE,qBAAa,WAAW;IAEhB,QAAQ,CAAC,GAAG,EAAE,MAAM;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM;IAF1B,SAAS,aACI,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACtB;IAEJ,0CAA0C;IAC1C,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAIrC;IAED,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED,QAAQ,IAAI,MAAM,CAEjB;IAED,yEAAyE;IACzE,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAQ1D;IAED,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE9B;CACJ"}

package/lib/deploy/code-package.js

@@ -0,0 +1,40 @@
+import { CellError } from '@celljs/kit';
+import { ZipWriter } from './zip-writer.js';
+/** The zip of a build output that function platforms take as code. */
+export class CodePackage {
+    zip;
+    files;
+    constructor(zip, files) {
+        this.zip = zip;
+        this.files = files;
+    }
+    /** Every file of the output directory. */
+    static of(outDir) {
+        const writer = new ZipWriter();
+        writer.addDirectory(outDir);
+        return new CodePackage(writer.toBuffer(), writer.files);
+    }
+    get size() {
+        return this.zip.length;
+    }
+    get base64() {
+        return this.zip.toString('base64');
+    }
+    describe() {
+        return `${CodePackage.bytes(this.size)} zipped, ${this.files} files`;
+    }
+    /** Fails before uploading when the platform would reject the package. */
+    checkSize(limit, cloud, hint) {
+        if (this.size > limit) {
+            throw new CellError({
+                code: 'CELL_DEPLOY_PACKAGE_TOO_LARGE',
+                message: `The code package is ${CodePackage.bytes(this.size)}; ${cloud} accepts at most ${CodePackage.bytes(limit)} in a direct upload.`,
+                hint,
+            });
+        }
+    }
+    static bytes(n) {
+        return n >= 1024 * 1024 ? `${(n / 1024 / 1024).toFixed(1)} MB` : `${Math.max(1, Math.round(n / 1024))} KB`;
+    }
+}
+//# sourceMappingURL=code-package.js.map

package/lib/deploy/code-package.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-package.js","sourceRoot":"","sources":["../../src/deploy/code-package.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,sEAAsE;AACtE,MAAM,OAAO,WAAW;IAEP,GAAG;IACH,KAAK;IAFlB,YACa,GAAW,EACX,KAAa;mBADb,GAAG;qBACH,KAAK;IACf,CAAC;IAEJ,0CAA0C;IAC1C,MAAM,CAAC,EAAE,CAAC,MAAc;QACpB,MAAM,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC/B,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,IAAI,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,IAAI;QACJ,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;IAC3B,CAAC;IAED,IAAI,MAAM;QACN,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED,QAAQ;QACJ,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,KAAK,QAAQ,CAAC;IACzE,CAAC;IAED,yEAAyE;IACzE,SAAS,CAAC,KAAa,EAAE,KAAa,EAAE,IAAY;QAChD,IAAI,IAAI,CAAC,IAAI,GAAG,KAAK,EAAE,CAAC;YACpB,MAAM,IAAI,SAAS,CAAC;gBAChB,IAAI,EAAE,+BAA+B;gBACrC,OAAO,EAAE,uBAAuB,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,oBAAoB,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,sBAAsB;gBACxI,IAAI;aACP,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,CAAS;QAClB,OAAO,CAAC,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC;IAC/G,CAAC;CACJ"}

package/lib/deploy/deploy-utils.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=deploy-utils.spec.d.ts.map

package/lib/deploy/deploy-utils.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-utils.spec.d.ts","sourceRoot":"","sources":["../../src/deploy/deploy-utils.spec.ts"],"names":[],"mappings":""}

package/lib/deploy/deploy-utils.spec.js

@@ -0,0 +1,56 @@
+import { describe, expect, it } from 'bun:test';
+import { execFileSync } from 'node:child_process';
+import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { RequestSigner } from './request-signer.js';
+import { ZipWriter } from './zip-writer.js';
+describe('RequestSigner', () => {
+    it('signs like the ACS3-HMAC-SHA256 example of Alibaba Cloud', () => {
+        const headers = RequestSigner.acs3({
+            method: 'POST',
+            host: 'ecs.cn-shanghai.aliyuncs.com',
+            path: '/',
+            query: { ImageId: 'win2019_1809_x64_dtc_zh-cn_40G_alibase_20230811.vhd', RegionId: 'cn-shanghai' },
+            action: 'RunInstances',
+            version: '2014-05-26',
+        }, { accessKeyId: 'YourAccessKeyId', accessKeySecret: 'YourAccessKeySecret' }, new Date('2023-10-26T10:22:32Z'), '3156853299f313e23d1673dc12e1703d');
+        expect(headers.authorization).toBe('ACS3-HMAC-SHA256 Credential=YourAccessKeyId,SignedHeaders=host;x-acs-action;x-acs-content-sha256;x-acs-date;x-acs-signature-nonce;x-acs-version,Signature=06563a9e1b43f5dfe96b81484da74bceab24a1d853912eee15083a6f0f3283c0');
+    });
+    it('signs like the get-vanilla example of AWS Signature Version 4', () => {
+        const headers = RequestSigner.sigv4({ method: 'GET', host: 'example.amazonaws.com', path: '/', service: 'service', region: 'us-east-1' }, { accessKeyId: 'AKIDEXAMPLE', secretAccessKey: 'wJalrXUtnFEMI/K7MDENG+bPxRfiCYEXAMPLEKEY' }, new Date('2015-08-30T12:36:00Z'));
+        expect(headers.authorization).toBe('AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20150830/us-east-1/service/aws4_request, SignedHeaders=host;x-amz-date, Signature=5fa00fa31553b73ebf1942676e86291e8372ff2a2260956d9b8aae1d763fbf31');
+    });
+    it('signs Tencent Cloud API 3.0 calls with the TC3 scope and headers', () => {
+        const headers = RequestSigner.tc3({ service: 'scf', host: 'scf.tencentcloudapi.com', action: 'GetFunction', version: '2018-04-16', region: 'ap-guangzhou', body: '{}' }, { secretId: 'AKIDEXAMPLE', secretKey: 'secret', token: 'tmp' }, new Date('2026-01-02T03:04:05Z'));
+        expect(headers).toMatchObject({
+            'x-tc-action': 'GetFunction',
+            'x-tc-timestamp': '1767323045',
+            'x-tc-region': 'ap-guangzhou',
+            'x-tc-token': 'tmp',
+            'content-type': 'application/json; charset=utf-8',
+        });
+        expect(headers.authorization).toMatch(/^TC3-HMAC-SHA256 Credential=AKIDEXAMPLE\/2026-01-02\/scf\/tc3_request, SignedHeaders=content-type;host, Signature=[0-9a-f]{64}$/);
+    });
+});
+describe('ZipWriter', () => {
+    it('writes archives that unzip restores, with file modes', () => {
+        const dir = mkdtempSync(join(tmpdir(), 'cell-zip-'));
+        try {
+            const zip = new ZipWriter().add('bootstrap', '#!/bin/bash\necho hi\n', 0o755).add('server/index.mjs', 'x'.repeat(5000)).add('empty.txt', '');
+            writeFileSync(join(dir, 'a.zip'), zip.toBuffer());
+            execFileSync('unzip', ['-q', 'a.zip', '-d', 'out'], { cwd: dir });
+            expect(execFileSync('sh', ['out/bootstrap'], { cwd: dir, encoding: 'utf8' })).toBe('hi\n');
+            expect(execFileSync('ls', ['-l', 'out/bootstrap'], { cwd: dir, encoding: 'utf8' })).toStartWith('-rwxr-xr-x');
+            expect(execFileSync('cat', ['out/server/index.mjs'], { cwd: dir, encoding: 'utf8' })).toBe('x'.repeat(5000));
+            expect(execFileSync('unzip', ['-t', 'a.zip'], { cwd: dir, encoding: 'utf8' })).toContain('No errors detected');
+        }
+        finally {
+            rmSync(dir, { recursive: true, force: true });
+        }
+    });
+    it('computes CRC-32', () => {
+        expect(ZipWriter.crc32(Buffer.from('123456789'))).toBe(0xcbf43926);
+    });
+});
+//# sourceMappingURL=deploy-utils.spec.js.map

package/lib/deploy/deploy-utils.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-utils.spec.js","sourceRoot":"","sources":["../../src/deploy/deploy-utils.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAChE,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAC9B;YACI,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,8BAA8B;YACpC,IAAI,EAAE,GAAG;YACT,KAAK,EAAE,EAAE,OAAO,EAAE,qDAAqD,EAAE,QAAQ,EAAE,aAAa,EAAE;YAClG,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,YAAY;SACxB,EACD,EAAE,WAAW,EAAE,iBAAiB,EAAE,eAAe,EAAE,qBAAqB,EAAE,EAC1E,IAAI,IAAI,CAAC,sBAAsB,CAAC,EAChC,kCAAkC,CACrC,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,CAC9B,4NAA4N,CAC/N,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACrE,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAC/B,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,EACpG,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,0CAA0C,EAAE,EAC3F,IAAI,IAAI,CAAC,sBAAsB,CAAC,CACnC,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,CAC9B,4LAA4L,CAC/L,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QACxE,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAC7B,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,EACrI,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAC9D,IAAI,IAAI,CAAC,sBAAsB,CAAC,CACnC,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC;YAC1B,aAAa,EAAE,aAAa;YAC5B,gBAAgB,EAAE,YAAY;YAC9B,aAAa,EAAE,cAAc;YAC7B,YAAY,EAAE,KAAK;YACnB,cAAc,EAAE,iCAAiC;SACpD,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,CACjC,iIAAiI,CACpI,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACvB,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC5D,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,SAAS,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,wBAAwB,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC7I,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YAClD,YAAY,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YAClE,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3F,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;YAC9G,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,sBAAsB,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7G,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACnH,CAAC;gBAAS,CAAC;YACP,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iBAAiB,EAAE,GAAG,EAAE;QACvB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/lib/deploy/deployer-registry.d.ts

@@ -0,0 +1,11 @@
+import { type Deployer } from '@celljs/kit';
+/** Deployers by name; a preset names the one that publishes its output (`Preset.deployer`). */
+export declare class DeployerRegistry {
+    protected readonly deployers: Map<string, Deployer>;
+    /** The deployers that come with the CLI. */
+    static builtin(): DeployerRegistry;
+    register(deployer: Deployer): this;
+    get names(): string[];
+    get(name: string): Deployer;
+}
+//# sourceMappingURL=deployer-registry.d.ts.map

package/lib/deploy/deployer-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployer-registry.d.ts","sourceRoot":"","sources":["../../src/deploy/deployer-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAOvD,+FAA+F;AAC/F,qBAAa,gBAAgB;IACzB,SAAS,CAAC,QAAQ,CAAC,SAAS,wBAA+B;IAE3D,4CAA4C;IAC5C,MAAM,CAAC,OAAO,IAAI,gBAAgB,CAEjC;IAED,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAUjC;IAED,IAAI,KAAK,IAAI,MAAM,EAAE,CAEpB;IAED,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAU1B;CACJ"}

package/lib/deploy/deployer-registry.js

@@ -0,0 +1,40 @@
+import { CellError } from '@celljs/kit';
+import { cloudflareDeployer } from '../preset/cloudflare/cloudflare-deployer.js';
+import { fcDeployer } from '../preset/fc/fc-deployer.js';
+import { lambdaDeployer } from '../preset/lambda/lambda-deployer.js';
+import { scfDeployer } from '../preset/scf/scf-deployer.js';
+import { vercelDeployer } from '../preset/vercel/vercel-deployer.js';
+/** Deployers by name; a preset names the one that publishes its output (`Preset.deployer`). */
+export class DeployerRegistry {
+    deployers = new Map();
+    /** The deployers that come with the CLI. */
+    static builtin() {
+        return new DeployerRegistry().register(cloudflareDeployer).register(fcDeployer).register(scfDeployer).register(lambdaDeployer).register(vercelDeployer);
+    }
+    register(deployer) {
+        if (this.deployers.has(deployer.name)) {
+            throw new CellError({
+                code: 'CELL_DEPLOYER_DUPLICATE',
+                message: `Deployer '${deployer.name}' is registered twice.`,
+                hint: 'Give the deployer another name.',
+            });
+        }
+        this.deployers.set(deployer.name, deployer);
+        return this;
+    }
+    get names() {
+        return [...this.deployers.keys()];
+    }
+    get(name) {
+        const deployer = this.deployers.get(name);
+        if (!deployer) {
+            throw new CellError({
+                code: 'CELL_DEPLOYER_NOT_FOUND',
+                message: `Unknown deployer '${name}'. Available: ${this.names.join(', ') || 'none'}.`,
+                hint: 'Use a preset whose deployer is available, or add the module that provides it.',
+            });
+        }
+        return deployer;
+    }
+}
+//# sourceMappingURL=deployer-registry.js.map

package/lib/deploy/deployer-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployer-registry.js","sourceRoot":"","sources":["../../src/deploy/deployer-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAiB,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAErE,+FAA+F;AAC/F,MAAM,OAAO,gBAAgB;IACN,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE3D,4CAA4C;IAC5C,MAAM,CAAC,OAAO;QACV,OAAO,IAAI,gBAAgB,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAC5J,CAAC;IAED,QAAQ,CAAC,QAAkB;QACvB,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,SAAS,CAAC;gBAChB,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,aAAa,QAAQ,CAAC,IAAI,wBAAwB;gBAC3D,IAAI,EAAE,iCAAiC;aAC1C,CAAC,CAAC;QACP,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,IAAI,KAAK;QACL,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,GAAG,CAAC,IAAY;QACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,MAAM,IAAI,SAAS,CAAC;gBAChB,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,qBAAqB,IAAI,iBAAiB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG;gBACrF,IAAI,EAAE,+EAA+E;aACxF,CAAC,CAAC;QACP,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;CACJ"}

package/lib/deploy/request-signer.d.ts

@@ -0,0 +1,51 @@
+export interface SignableRequest {
+    method: string;
+    host: string;
+    /** Path without the query, e.g. `/2023-03-30/functions/app`. */
+    path: string;
+    query?: Record<string, string>;
+    headers?: Record<string, string>;
+    body?: string;
+}
+/** RFC 3986 encoding, as the three clouds canonicalise paths and queries. */
+export declare function rfc3986(value: string): string;
+/**
+ * The request signatures of the cloud APIs Cell deploys to, written against their published
+ * algorithms (no SDKs): Alibaba Cloud ACS3-HMAC-SHA256, Tencent Cloud TC3-HMAC-SHA256 and AWS
+ * Signature Version 4. Each returns the headers to send, `Authorization` included.
+ */
+export declare namespace RequestSigner {
+    interface AlibabaCredentials {
+        accessKeyId: string;
+        accessKeySecret: string;
+        securityToken?: string;
+    }
+    function acs3(request: SignableRequest & {
+        action: string;
+        version: string;
+    }, credentials: AlibabaCredentials, now?: Date, nonce?: string): Record<string, string>;
+    interface TencentCredentials {
+        secretId: string;
+        secretKey: string;
+        token?: string;
+    }
+    /** A Tencent Cloud API 3.0 call: POST of JSON to `<service>.tencentcloudapi.com`. */
+    function tc3(request: {
+        service: string;
+        host: string;
+        action: string;
+        version: string;
+        region?: string;
+        body: string;
+    }, credentials: TencentCredentials, now?: Date): Record<string, string>;
+    interface AwsCredentials {
+        accessKeyId: string;
+        secretAccessKey: string;
+        sessionToken?: string;
+    }
+    function sigv4(request: SignableRequest & {
+        service: string;
+        region: string;
+    }, credentials: AwsCredentials, now?: Date): Record<string, string>;
+}
+//# sourceMappingURL=request-signer.d.ts.map

package/lib/deploy/request-signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-signer.d.ts","sourceRoot":"","sources":["../../src/deploy/request-signer.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,eAAe;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;CACjB;AAKD,6EAA6E;AAC7E,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE7C;AAwBD;;;;GAIG;AACH,yBAAiB,aAAa,CAAC;IAC3B,UAAiB,kBAAkB;QAC/B,WAAW,EAAE,MAAM,CAAC;QACpB,eAAe,EAAE,MAAM,CAAC;QACxB,aAAa,CAAC,EAAE,MAAM,CAAC;KAC1B;IAED,SAAgB,IAAI,CAChB,OAAO,EAAE,eAAe,GAAG;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAC9D,WAAW,EAAE,kBAAkB,EAC/B,GAAG,OAAa,EAChB,KAAK,SAAkC,GACxC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA8BxB;IAED,UAAiB,kBAAkB;QAC/B,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;KAClB;IAED,qFAAqF;IACrF,SAAgB,GAAG,CACf,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAC1G,WAAW,EAAE,kBAAkB,EAC/B,GAAG,OAAa,GACjB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAmBxB;IAED,UAAiB,cAAc;QAC3B,WAAW,EAAE,MAAM,CAAC;QACpB,eAAe,EAAE,MAAM,CAAC;QACxB,YAAY,CAAC,EAAE,MAAM,CAAC;KACzB;IAED,SAAgB,KAAK,CACjB,OAAO,EAAE,eAAe,GAAG;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAC9D,WAAW,EAAE,cAAc,EAC3B,GAAG,OAAa,GACjB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAoBxB;CACJ"}

package/lib/deploy/request-signer.js

@@ -0,0 +1,109 @@
+import { createHash, createHmac, randomBytes } from 'node:crypto';
+const sha256 = (data) => createHash('sha256').update(data).digest('hex');
+const hmac = (key, data) => createHmac('sha256', key).update(data).digest();
+/** RFC 3986 encoding, as the three clouds canonicalise paths and queries. */
+export function rfc3986(value) {
+    return encodeURIComponent(value).replace(/[!'()*]/g, c => `%${c.charCodeAt(0).toString(16).toUpperCase()}`);
+}
+function canonicalQuery(query = {}) {
+    return Object.keys(query)
+        .sort()
+        .map(key => `${rfc3986(key)}=${rfc3986(query[key])}`)
+        .join('&');
+}
+function canonicalPath(path) {
+    return path
+        .split('/')
+        .map(segment => rfc3986(decodeURIComponent(segment)))
+        .join('/');
+}
+/** Lowercased headers, sorted, as `name:value` lines and the list of their names. */
+function canonicalHeaders(headers) {
+    const entries = Object.entries(headers)
+        .map(([k, v]) => [k.toLowerCase(), String(v).trim()])
+        .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
+    return { lines: entries.map(([k, v]) => `${k}:${v}\n`).join(''), names: entries.map(([k]) => k).join(';') };
+}
+/**
+ * The request signatures of the cloud APIs Cell deploys to, written against their published
+ * algorithms (no SDKs): Alibaba Cloud ACS3-HMAC-SHA256, Tencent Cloud TC3-HMAC-SHA256 and AWS
+ * Signature Version 4. Each returns the headers to send, `Authorization` included.
+ */
+export var RequestSigner;
+(function (RequestSigner) {
+    function acs3(request, credentials, now = new Date(), nonce = randomBytes(16).toString('hex')) {
+        const body = request.body ?? '';
+        const headers = {
+            host: request.host,
+            'x-acs-action': request.action,
+            'x-acs-content-sha256': sha256(body),
+            'x-acs-date': now.toISOString().replace(/\.\d{3}Z$/, 'Z'),
+            'x-acs-signature-nonce': nonce,
+            'x-acs-version': request.version,
+            ...(credentials.securityToken ? { 'x-acs-security-token': credentials.securityToken } : {}),
+            ...(request.headers ?? {}),
+        };
+        const signed = canonicalHeaders(Object.fromEntries(Object.entries(headers).filter(([k]) => k === 'host' || k === 'content-type' || k.startsWith('x-acs-'))));
+        const canonical = [
+            request.method,
+            canonicalPath(request.path),
+            canonicalQuery(request.query),
+            signed.lines,
+            signed.names,
+            headers['x-acs-content-sha256'],
+        ].join('\n');
+        const signature = createHmac('sha256', credentials.accessKeySecret)
+            .update(`ACS3-HMAC-SHA256\n${sha256(canonical)}`)
+            .digest('hex');
+        return {
+            ...headers,
+            authorization: `ACS3-HMAC-SHA256 Credential=${credentials.accessKeyId},SignedHeaders=${signed.names},Signature=${signature}`,
+        };
+    }
+    RequestSigner.acs3 = acs3;
+    /** A Tencent Cloud API 3.0 call: POST of JSON to `<service>.tencentcloudapi.com`. */
+    function tc3(request, credentials, now = new Date()) {
+        const timestamp = Math.floor(now.getTime() / 1000);
+        const date = new Date(timestamp * 1000).toISOString().slice(0, 10);
+        const contentType = 'application/json; charset=utf-8';
+        const canonical = ['POST', '/', '', `content-type:${contentType}\nhost:${request.host}\n`, 'content-type;host', sha256(request.body)].join('\n');
+        const scope = `${date}/${request.service}/tc3_request`;
+        const toSign = ['TC3-HMAC-SHA256', String(timestamp), scope, sha256(canonical)].join('\n');
+        const key = hmac(hmac(hmac(`TC3${credentials.secretKey}`, date), request.service), 'tc3_request');
+        const signature = createHmac('sha256', key).update(toSign).digest('hex');
+        return {
+            authorization: `TC3-HMAC-SHA256 Credential=${credentials.secretId}/${scope}, SignedHeaders=content-type;host, Signature=${signature}`,
+            'content-type': contentType,
+            host: request.host,
+            'x-tc-action': request.action,
+            'x-tc-timestamp': String(timestamp),
+            'x-tc-version': request.version,
+            ...(request.region ? { 'x-tc-region': request.region } : {}),
+            ...(credentials.token ? { 'x-tc-token': credentials.token } : {}),
+        };
+    }
+    RequestSigner.tc3 = tc3;
+    function sigv4(request, credentials, now = new Date()) {
+        const amzDate = now.toISOString().replace(/[:-]|\.\d{3}/g, '');
+        const date = amzDate.slice(0, 8);
+        const body = request.body ?? '';
+        const headers = {
+            host: request.host,
+            'x-amz-date': amzDate,
+            ...(credentials.sessionToken ? { 'x-amz-security-token': credentials.sessionToken } : {}),
+            ...(request.headers ?? {}),
+        };
+        const signed = canonicalHeaders(headers);
+        const canonical = [request.method, canonicalPath(request.path), canonicalQuery(request.query), signed.lines, signed.names, sha256(body)].join('\n');
+        const scope = `${date}/${request.region}/${request.service}/aws4_request`;
+        const toSign = ['AWS4-HMAC-SHA256', amzDate, scope, sha256(canonical)].join('\n');
+        const key = hmac(hmac(hmac(hmac(`AWS4${credentials.secretAccessKey}`, date), request.region), request.service), 'aws4_request');
+        const signature = createHmac('sha256', key).update(toSign).digest('hex');
+        return {
+            ...headers,
+            authorization: `AWS4-HMAC-SHA256 Credential=${credentials.accessKeyId}/${scope}, SignedHeaders=${signed.names}, Signature=${signature}`,
+        };
+    }
+    RequestSigner.sigv4 = sigv4;
+})(RequestSigner || (RequestSigner = {}));
+//# sourceMappingURL=request-signer.js.map