@cmmd-center/forge 0.9.4 → 0.9.6

package/dist/{open-FIgTDosf.mjs → open-D8mGyWmt.mjs}

@@ -2,7 +2,7 @@
 
 import childProcess, { execFile } from "node:child_process";
 import fs from "node:fs";
-import os from "node:os";
+import $U from "node:os";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import process from "node:process";
@@ -49,7 +49,7 @@ function isInsideContainer() {
 //#region ../../node_modules/.bun/is-wsl@3.1.1/node_modules/is-wsl/index.js
 const isWsl = () => {
 	if (process.platform !== "linux") return false;
-	if (os.release().toLowerCase().includes("microsoft")) {
+	if ($U.release().toLowerCase().includes("microsoft")) {
 		if (isInsideContainer()) return false;
 		return true;
 	}
@@ -589,4 +589,4 @@ defineLazyProperty(apps, "safari", () => detectPlatformBinary({ darwin: "Safari"
 //#endregion
 export { apps, open as default, openApp };
 
-//# sourceMappingURL=open-FIgTDosf.mjs.map
+//# sourceMappingURL=open-D8mGyWmt.mjs.map

package/dist/runtimeBootstrap.cjs

@@ -2,7 +2,7 @@
 
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("./chunk-BhaIgcZK.cjs");
-const require_runtimeControlAuthority = require("./runtimeControlAuthority-Dx6Y5LPI.cjs");
+const require_runtimeControlAuthority = require("./runtimeControlAuthority-SNBF5Mjy.cjs");
 exports.bootstrapRuntimeControlAuthorityFromNarrowGrant = require_runtimeControlAuthority.bootstrapRuntimeControlAuthorityFromNarrowGrant;
 exports.setRuntimeGrantToken = require_runtimeControlAuthority.setRuntimeGrantToken;
 exports.verifyCmmdRuntimeTicket = require_runtimeControlAuthority.verifyCmmdRuntimeTicket;

package/dist/runtimeBootstrap.mjs

@@ -1,4 +1,4 @@
 #!/usr/bin/env node
 
-import { n as bootstrapRuntimeControlAuthorityFromNarrowGrant, s as verifyCmmdRuntimeTicket, u as setRuntimeGrantToken } from "./runtimeControlAuthority-Dm9z5ziU.mjs";
+import { n as bootstrapRuntimeControlAuthorityFromNarrowGrant, s as verifyCmmdRuntimeTicket, u as setRuntimeGrantToken } from "./runtimeControlAuthority-L85w5RTn.mjs";
 export { bootstrapRuntimeControlAuthorityFromNarrowGrant, setRuntimeGrantToken, verifyCmmdRuntimeTicket };

package/dist/{runtimeControlAuthority-Dm9z5ziU.mjs → runtimeControlAuthority-L85w5RTn.mjs}

@@ -249,13 +249,40 @@ const CONTROL_AUTHORITY_SCOPES = new Set(["heartbeat", "replication"]);
 var RuntimeControlAuthorityError = class extends Error {
 	status;
 	code;
+	/**
+	* Whether trying again could plausibly succeed.
+	*
+	* A restarting control plane and a wrong credential both fail here and need
+	* opposite responses: the first must be retried until the deploy finishes,
+	* the second must not be retried at all. Without this the caller cannot tell
+	* them apart and picks wrong in one direction or the other.
+	*/
+	retryable;
 	constructor(input) {
 		super(input.message);
 		this.name = "RuntimeControlAuthorityError";
 		this.status = input.status ?? null;
 		this.code = input.code;
+		this.retryable = input.retryable ?? false;
 	}
 };
+/** Longest body prefix quoted into an error message. */
+const CONTROL_AUTHORITY_BODY_PREVIEW = 180;
+/**
+* A short, credential-free description of a body that would not parse.
+*
+* The point is to identify the RESPONDER. A proxy error page says who it is in
+* its first line, and that one line is the whole difference between "CMMD is
+* redeploying" and a multi-hour dig through a guest.
+*
+* Redacted because this lands in logs and the responder is not always the one
+* we think it is: anything resembling a JWT or a long opaque token is stripped
+* rather than trusted to be harmless.
+*/
+function describeUnparsableBody(body) {
+	const collapsed = body.replace(/[A-Za-z0-9_-]{12,}\.[A-Za-z0-9_-]{12,}\.[A-Za-z0-9_-]{6,}/g, "<redacted-jwt>").replace(/[A-Za-z0-9_-]{40,}/g, "<redacted>").replace(/\s+/g, " ").trim();
+	return collapsed.length > CONTROL_AUTHORITY_BODY_PREVIEW ? `${collapsed.slice(0, CONTROL_AUTHORITY_BODY_PREVIEW)}…` : collapsed;
+}
 let authority = null;
 let bootstrapInFlight = null;
 function normalizedControlPlaneUrl(value) {
@@ -352,15 +379,18 @@ async function readControlAuthorityResponse(response) {
 	if (!response.ok) throw new RuntimeControlAuthorityError({
 		status: response.status,
 		code: "CMMD_RUNTIME_CONTROL_AUTHORITY_REJECTED",
+		retryable: response.status >= 500,
 		message: `CMMD runtime control authority request failed (${response.status}).`
 	});
+	const raw = await response.text().catch(() => "");
 	try {
-		return await response.json();
+		return JSON.parse(raw);
 	} catch {
 		throw new RuntimeControlAuthorityError({
 			status: response.status,
 			code: "CMMD_RUNTIME_CONTROL_AUTHORITY_INVALID_RESPONSE",
-			message: "CMMD runtime control authority returned invalid JSON."
+			retryable: true,
+			message: `CMMD runtime control authority returned ${response.status} with a non-JSON body (content-type: ${response.headers.get("content-type") ?? "none"}): ${describeUnparsableBody(raw) || "<empty>"}`
 		});
 	}
 }
@@ -502,4 +532,4 @@ async function sendRuntimeControlHeartbeat(input) {
 //#endregion
 export { verifyCmmdAuthRuntimeTicket as a, verifyCmmdRuntimeTicketRefreshProof as c, createReadOnceFileTokenAccessor as d, sendRuntimeControlHeartbeat as i, runtimeGrantToken as l, bootstrapRuntimeControlAuthorityFromNarrowGrant as n, verifyCmmdClaudeReadinessTicket as o, readRuntimeControlAuthority as r, verifyCmmdRuntimeTicket as s, bootstrapRuntimeControlAuthority as t, setRuntimeGrantToken as u };
 
-//# sourceMappingURL=runtimeControlAuthority-Dm9z5ziU.mjs.map
+//# sourceMappingURL=runtimeControlAuthority-L85w5RTn.mjs.map

package/dist/{runtimeControlAuthority-Dx6Y5LPI.cjs → runtimeControlAuthority-SNBF5Mjy.cjs}

@@ -250,13 +250,40 @@ const CONTROL_AUTHORITY_SCOPES = new Set(["heartbeat", "replication"]);
 var RuntimeControlAuthorityError = class extends Error {
 	status;
 	code;
+	/**
+	* Whether trying again could plausibly succeed.
+	*
+	* A restarting control plane and a wrong credential both fail here and need
+	* opposite responses: the first must be retried until the deploy finishes,
+	* the second must not be retried at all. Without this the caller cannot tell
+	* them apart and picks wrong in one direction or the other.
+	*/
+	retryable;
 	constructor(input) {
 		super(input.message);
 		this.name = "RuntimeControlAuthorityError";
 		this.status = input.status ?? null;
 		this.code = input.code;
+		this.retryable = input.retryable ?? false;
 	}
 };
+/** Longest body prefix quoted into an error message. */
+const CONTROL_AUTHORITY_BODY_PREVIEW = 180;
+/**
+* A short, credential-free description of a body that would not parse.
+*
+* The point is to identify the RESPONDER. A proxy error page says who it is in
+* its first line, and that one line is the whole difference between "CMMD is
+* redeploying" and a multi-hour dig through a guest.
+*
+* Redacted because this lands in logs and the responder is not always the one
+* we think it is: anything resembling a JWT or a long opaque token is stripped
+* rather than trusted to be harmless.
+*/
+function describeUnparsableBody(body) {
+	const collapsed = body.replace(/[A-Za-z0-9_-]{12,}\.[A-Za-z0-9_-]{12,}\.[A-Za-z0-9_-]{6,}/g, "<redacted-jwt>").replace(/[A-Za-z0-9_-]{40,}/g, "<redacted>").replace(/\s+/g, " ").trim();
+	return collapsed.length > CONTROL_AUTHORITY_BODY_PREVIEW ? `${collapsed.slice(0, CONTROL_AUTHORITY_BODY_PREVIEW)}…` : collapsed;
+}
 let authority = null;
 let bootstrapInFlight = null;
 function normalizedControlPlaneUrl(value) {
@@ -353,15 +380,18 @@ async function readControlAuthorityResponse(response) {
 	if (!response.ok) throw new RuntimeControlAuthorityError({
 		status: response.status,
 		code: "CMMD_RUNTIME_CONTROL_AUTHORITY_REJECTED",
+		retryable: response.status >= 500,
 		message: `CMMD runtime control authority request failed (${response.status}).`
 	});
+	const raw = await response.text().catch(() => "");
 	try {
-		return await response.json();
+		return JSON.parse(raw);
 	} catch {
 		throw new RuntimeControlAuthorityError({
 			status: response.status,
 			code: "CMMD_RUNTIME_CONTROL_AUTHORITY_INVALID_RESPONSE",
-			message: "CMMD runtime control authority returned invalid JSON."
+			retryable: true,
+			message: `CMMD runtime control authority returned ${response.status} with a non-JSON body (content-type: ${response.headers.get("content-type") ?? "none"}): ${describeUnparsableBody(raw) || "<empty>"}`
 		});
 	}
 }
@@ -568,4 +598,4 @@ Object.defineProperty(exports, "verifyCmmdRuntimeTicketRefreshProof", {
 	}
 });
 
-//# sourceMappingURL=runtimeControlAuthority-Dx6Y5LPI.cjs.map
+//# sourceMappingURL=runtimeControlAuthority-SNBF5Mjy.cjs.map

package/package.json

@@ -9,7 +9,7 @@
     "cmmd-forge": "dist/bin.mjs"
   },
   "type": "module",
-  "version": "0.9.4",
+  "version": "0.9.6",
   "engines": {
     "node": "^22.16 || ^23.11 || >=24.10"
   },