@contember/cli 2.2.0-alpha.1 → 2.2.0-alpha.10

package/dist/development/src/lib/admin/AdminClient.js

@@ -1,4 +1,5 @@
-import { maskToken } from "../maskToken.js";
+import { CliError, ExitCode } from "@contember/cli-common";
+import { toHttpTransportError, toTransportError } from "../errors/TransportError.js";
 class AdminClient {
   constructor(remoteProjectProvider) {
     this.remoteProjectProvider = remoteProjectProvider;
@@ -6,22 +7,41 @@ class AdminClient {
   async deploy(project, files) {
     const response = await this.execute("_deploy", "POST", { project, files });
     if (!response.ok) {
-      const project2 = this.remoteProjectProvider.get();
-      const maskedToken = maskToken(project2.token);
-      throw `Failed to deploy admin, POST request to ${project2.adminEndpoint}/_deploy with token ${maskedToken} returned status ${response.status} ${response.statusText}
-${await response.text()}`;
+      try {
+        await response.body?.cancel();
+      } catch {
+      }
+      throw toHttpTransportError(
+        { status: response.status, retryAfter: response.headers.get("retry-after") },
+        this.context("_deploy")
+      );
     }
   }
   async execute(path, method, body) {
     const project = this.remoteProjectProvider.get();
     if (!project.adminEndpoint) {
-      throw new Error("Admin endpoint not set");
+      throw new CliError("Admin endpoint not set", {
+        code: "ADMIN_ENDPOINT_NOT_SET",
+        exitCode: ExitCode.InputError
+      });
     }
-    return await fetch(`${project.adminEndpoint}/${path}`, {
-      method,
-      headers: { "Content-Type": "application/json", "Authorization": `Bearer ${project.token}` },
-      body: JSON.stringify(body)
-    });
+    try {
+      return await fetch(`${project.adminEndpoint}/${path}`, {
+        method,
+        headers: { "Content-Type": "application/json", "Authorization": `Bearer ${project.token}` },
+        body: JSON.stringify(body)
+      });
+    } catch (error) {
+      throw toTransportError(error, this.context(path));
+    }
+  }
+  context(path) {
+    const endpoint = this.remoteProjectProvider.get().adminEndpoint;
+    return {
+      service: "Admin API",
+      codePrefix: "ADMIN_API",
+      ...endpoint === void 0 ? {} : { url: `${endpoint}/${path}` }
+    };
   }
 }
 export {

package/dist/development/src/lib/admin/AdminClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"AdminClient.js","sources":["../../../../../../packages/cli/src/lib/admin/AdminClient.ts"],"sourcesContent":["import { maskToken } from '../maskToken.js'\nimport { RemoteProjectProvider } from '../project/RemoteProjectProvider.js'\n\nexport type AdminFiles = Array<{ path: string; data: string }>\nexport class AdminClient {\n\tconstructor(\n\t\tprivate readonly remoteProjectProvider: RemoteProjectProvider,\n\t) {\n\t}\n\n\tpublic async deploy(project: string | null, files: AdminFiles): Promise<void> {\n\t\tconst response = await this.execute('_deploy', 'POST', { project, files })\n\n\t\tif (!response.ok) {\n\t\t\tconst project = this.remoteProjectProvider.get()\n\t\t\tconst maskedToken = maskToken(project.token)\n\t\t\tthrow `Failed to deploy admin, POST request to ${project.adminEndpoint}/_deploy with token ${maskedToken} returned status ${response.status} ${response.statusText}\\n${await response\n\t\t\t\t.text()}`\n\t\t}\n\t}\n\n\tprivate async execute(path: string, method: string, body: any): Promise<Response> {\n\t\tconst project = this.remoteProjectProvider.get()\n\t\tif (!project.adminEndpoint) {\n\t\t\tthrow new Error('Admin endpoint not set')\n\t\t}\n\t\treturn await fetch(`${project.adminEndpoint}/${path}`, {\n\t\t\tmethod: method,\n\t\t\theaders: { 'Content-Type': 'application/json', 'Authorization': `Bearer ${project.token}` },\n\t\t\tbody: JSON.stringify(body),\n\t\t})\n\t}\n}\n"],"names":["project"],"mappings":";AAIO,MAAM,YAAY;AAAA,EACxB,YACkB,uBAChB;AADgB,SAAA,wBAAA;AAAA,EAElB;AAAA,EAEA,MAAa,OAAO,SAAwB,OAAkC;AAC7E,UAAM,WAAW,MAAM,KAAK,QAAQ,WAAW,QAAQ,EAAE,SAAS,OAAO;AAEzE,QAAI,CAAC,SAAS,IAAI;AACjB,YAAMA,WAAU,KAAK,sBAAsB,IAAA;AAC3C,YAAM,cAAc,UAAUA,SAAQ,KAAK;AAC3C,YAAM,2CAA2CA,SAAQ,aAAa,uBAAuB,WAAW,oBAAoB,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,EAAK,MAAM,SAC3K,KAAA,CAAM;AAAA,IACT;AAAA,EACD;AAAA,EAEA,MAAc,QAAQ,MAAc,QAAgB,MAA8B;AACjF,UAAM,UAAU,KAAK,sBAAsB,IAAA;AAC3C,QAAI,CAAC,QAAQ,eAAe;AAC3B,YAAM,IAAI,MAAM,wBAAwB;AAAA,IACzC;AACA,WAAO,MAAM,MAAM,GAAG,QAAQ,aAAa,IAAI,IAAI,IAAI;AAAA,MACtD;AAAA,MACA,SAAS,EAAE,gBAAgB,oBAAoB,iBAAiB,UAAU,QAAQ,KAAK,GAAA;AAAA,MACvF,MAAM,KAAK,UAAU,IAAI;AAAA,IAAA,CACzB;AAAA,EACF;AACD;"}
+{"version":3,"file":"AdminClient.js","sources":["../../../../../../packages/cli/src/lib/admin/AdminClient.ts"],"sourcesContent":["import { CliError, ExitCode } from '@contember/cli-common'\nimport { toHttpTransportError, toTransportError } from '../errors/TransportError.js'\nimport { RemoteProjectProvider } from '../project/RemoteProjectProvider.js'\n\nexport type AdminFiles = Array<{ path: string; data: string }>\ninterface AdminDeployRequest {\n\treadonly project: string | null\n\treadonly files: AdminFiles\n}\n\nexport class AdminClient {\n\tconstructor(\n\t\tprivate readonly remoteProjectProvider: RemoteProjectProvider,\n\t) {\n\t}\n\n\tpublic async deploy(project: string | null, files: AdminFiles): Promise<void> {\n\t\tconst response = await this.execute('_deploy', 'POST', { project, files })\n\n\t\tif (!response.ok) {\n\t\t\ttry {\n\t\t\t\tawait response.body?.cancel()\n\t\t\t} catch {\n\t\t\t\t// The HTTP classification is the primary error.\n\t\t\t}\n\t\t\tthrow toHttpTransportError(\n\t\t\t\t{ status: response.status, retryAfter: response.headers.get('retry-after') },\n\t\t\t\tthis.context('_deploy'),\n\t\t\t)\n\t\t}\n\t}\n\n\tprivate async execute(path: string, method: string, body: AdminDeployRequest): Promise<Response> {\n\t\tconst project = this.remoteProjectProvider.get()\n\t\tif (!project.adminEndpoint) {\n\t\t\tthrow new CliError('Admin endpoint not set', {\n\t\t\t\tcode: 'ADMIN_ENDPOINT_NOT_SET',\n\t\t\t\texitCode: ExitCode.InputError,\n\t\t\t})\n\t\t}\n\t\ttry {\n\t\t\treturn await fetch(`${project.adminEndpoint}/${path}`, {\n\t\t\t\tmethod,\n\t\t\t\theaders: { 'Content-Type': 'application/json', 'Authorization': `Bearer ${project.token}` },\n\t\t\t\tbody: JSON.stringify(body),\n\t\t\t})\n\t\t} catch (error) {\n\t\t\tthrow toTransportError(error, this.context(path))\n\t\t}\n\t}\n\n\tprivate context(path: string) {\n\t\tconst endpoint = this.remoteProjectProvider.get().adminEndpoint\n\t\treturn {\n\t\t\tservice: 'Admin API',\n\t\t\tcodePrefix: 'ADMIN_API',\n\t\t\t...(endpoint === undefined ? {} : { url: `${endpoint}/${path}` }),\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;AAUO,MAAM,YAAY;AAAA,EACxB,YACkB,uBAChB;AADgB,SAAA,wBAAA;AAAA,EAElB;AAAA,EAEA,MAAa,OAAO,SAAwB,OAAkC;AAC7E,UAAM,WAAW,MAAM,KAAK,QAAQ,WAAW,QAAQ,EAAE,SAAS,OAAO;AAEzE,QAAI,CAAC,SAAS,IAAI;AACjB,UAAI;AACH,cAAM,SAAS,MAAM,OAAA;AAAA,MACtB,QAAQ;AAAA,MAER;AACA,YAAM;AAAA,QACL,EAAE,QAAQ,SAAS,QAAQ,YAAY,SAAS,QAAQ,IAAI,aAAa,EAAA;AAAA,QACzE,KAAK,QAAQ,SAAS;AAAA,MAAA;AAAA,IAExB;AAAA,EACD;AAAA,EAEA,MAAc,QAAQ,MAAc,QAAgB,MAA6C;AAChG,UAAM,UAAU,KAAK,sBAAsB,IAAA;AAC3C,QAAI,CAAC,QAAQ,eAAe;AAC3B,YAAM,IAAI,SAAS,0BAA0B;AAAA,QAC5C,MAAM;AAAA,QACN,UAAU,SAAS;AAAA,MAAA,CACnB;AAAA,IACF;AACA,QAAI;AACH,aAAO,MAAM,MAAM,GAAG,QAAQ,aAAa,IAAI,IAAI,IAAI;AAAA,QACtD;AAAA,QACA,SAAS,EAAE,gBAAgB,oBAAoB,iBAAiB,UAAU,QAAQ,KAAK,GAAA;AAAA,QACvF,MAAM,KAAK,UAAU,IAAI;AAAA,MAAA,CACzB;AAAA,IACF,SAAS,OAAO;AACf,YAAM,iBAAiB,OAAO,KAAK,QAAQ,IAAI,CAAC;AAAA,IACjD;AAAA,EACD;AAAA,EAEQ,QAAQ,MAAc;AAC7B,UAAM,WAAW,KAAK,sBAAsB,IAAA,EAAM;AAClD,WAAO;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,MACZ,GAAI,aAAa,SAAY,CAAA,IAAK,EAAE,KAAK,GAAG,QAAQ,IAAI,IAAI,GAAA;AAAA,IAAG;AAAA,EAEjE;AACD;"}

package/dist/development/src/lib/admin/AdminDeployer.cjs

@@ -1,19 +1,21 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const cliCommon = require("@contember/cli-common");
 var __defProp = Object.defineProperty;
 var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
 var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
 class AdminDeployer {
-  constructor(remoteProjectProvider, adminClient, fs) {
+  constructor(remoteProjectProvider, adminClient, fs, output = new cliCommon.Output()) {
     this.remoteProjectProvider = remoteProjectProvider;
     this.adminClient = adminClient;
     this.fs = fs;
+    this.output = output;
     __publicField(this, "deploy", async ({ dir, root }) => {
-      console.log("Deploying admin...");
+      this.output.info("Deploying admin...");
       const files = await this.readAdminFiles(dir);
       const project = root ? null : this.remoteProjectProvider.get().name;
       await this.adminClient.deploy(project, files);
-      console.log(`Admin deployed (${files.length} files)`);
+      this.output.info(`Admin deployed (${files.length} files)`);
     });
     __publicField(this, "readAdminFiles", async (dir, prefix = "") => {
       const files = [];

package/dist/development/src/lib/admin/AdminDeployer.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"AdminDeployer.cjs","sources":["../../../../../../packages/cli/src/lib/admin/AdminDeployer.ts"],"sourcesContent":["import { AdminClient, AdminFiles } from './AdminClient.js'\nimport { FileSystem } from '../fs/FileSystem.js'\nimport { RemoteProjectProvider } from '../project/RemoteProjectProvider.js'\n\nexport class AdminDeployer {\n\tconstructor(\n\t\tprivate readonly remoteProjectProvider: RemoteProjectProvider,\n\t\tprivate readonly adminClient: AdminClient,\n\t\tprivate readonly fs: FileSystem,\n\t) {\n\t}\n\n\tpublic deploy = async ({ dir, root }: {\n\t\tdir: string\n\t\troot: boolean\n\t}) => {\n\t\tconsole.log('Deploying admin...')\n\t\tconst files = await this.readAdminFiles(dir)\n\t\tconst project = root ? null : this.remoteProjectProvider.get().name\n\n\t\t// in some cases you need deploy whole folder with custom build etc.\n\t\t// with root option you can build app on your own and simply deploy it with subprojects\n\t\tawait this.adminClient.deploy(project, files)\n\n\t\tconsole.log(`Admin deployed (${files.length} files)`)\n\t}\n\n\tprivate readAdminFiles = async (dir: string, prefix: string = ''): Promise<AdminFiles> => {\n\t\tconst files = []\n\t\tfor (const fileName of await this.fs.readDir(dir, { withFileTypes: true })) {\n\t\t\tif (fileName.isDirectory()) {\n\t\t\t\tconst subFiles = await this.readAdminFiles(`${dir}/${fileName.name}`, prefix + fileName.name + '/')\n\t\t\t\tfiles.push(...subFiles)\n\t\t\t} else if (fileName.isFile()) {\n\t\t\t\tfiles.push({\n\t\t\t\t\tpath: prefix + fileName.name,\n\t\t\t\t\tdata: (await this.fs.readFile(`${dir}/${fileName.name}`)).toString('base64'),\n\t\t\t\t})\n\t\t\t}\n\t\t}\n\n\t\treturn files\n\t}\n}\n"],"names":[],"mappings":";;;;;AAIO,MAAM,cAAc;AAAA,EAC1B,YACkB,uBACA,aACA,IAChB;AAHgB,SAAA,wBAAA;AACA,SAAA,cAAA;AACA,SAAA,KAAA;AAIlB,kBAAA,MAAO,UAAS,OAAO,EAAE,KAAK,WAGxB;AACL,cAAQ,IAAI,oBAAoB;AAChC,YAAM,QAAQ,MAAM,KAAK,eAAe,GAAG;AAC3C,YAAM,UAAU,OAAO,OAAO,KAAK,sBAAsB,MAAM;AAI/D,YAAM,KAAK,YAAY,OAAO,SAAS,KAAK;AAE5C,cAAQ,IAAI,mBAAmB,MAAM,MAAM,SAAS;AAAA,IACrD,CAAA;AAEA,kBAAA,MAAQ,kBAAiB,OAAO,KAAa,SAAiB,OAA4B;AACzF,YAAM,QAAQ,CAAA;AACd,iBAAW,YAAY,MAAM,KAAK,GAAG,QAAQ,KAAK,EAAE,eAAe,KAAA,CAAM,GAAG;AAC3E,YAAI,SAAS,eAAe;AAC3B,gBAAM,WAAW,MAAM,KAAK,eAAe,GAAG,GAAG,IAAI,SAAS,IAAI,IAAI,SAAS,SAAS,OAAO,GAAG;AAClG,gBAAM,KAAK,GAAG,QAAQ;AAAA,QACvB,WAAW,SAAS,UAAU;AAC7B,gBAAM,KAAK;AAAA,YACV,MAAM,SAAS,SAAS;AAAA,YACxB,OAAO,MAAM,KAAK,GAAG,SAAS,GAAG,GAAG,IAAI,SAAS,IAAI,EAAE,GAAG,SAAS,QAAQ;AAAA,UAAA,CAC3E;AAAA,QACF;AAAA,MACD;AAEA,aAAO;AAAA,IACR,CAAA;AAAA,EAhCA;AAiCD;;"}
+{"version":3,"file":"AdminDeployer.cjs","sources":["../../../../../../packages/cli/src/lib/admin/AdminDeployer.ts"],"sourcesContent":["import { AdminClient, AdminFiles } from './AdminClient.js'\nimport { FileSystem } from '../fs/FileSystem.js'\nimport { RemoteProjectProvider } from '../project/RemoteProjectProvider.js'\nimport { Output } from '@contember/cli-common'\n\nexport class AdminDeployer {\n\tconstructor(\n\t\tprivate readonly remoteProjectProvider: RemoteProjectProvider,\n\t\tprivate readonly adminClient: AdminClient,\n\t\tprivate readonly fs: FileSystem,\n\t\tprivate readonly output: Output = new Output(),\n\t) {\n\t}\n\n\tpublic deploy = async ({ dir, root }: {\n\t\tdir: string\n\t\troot: boolean\n\t}) => {\n\t\tthis.output.info('Deploying admin...')\n\t\tconst files = await this.readAdminFiles(dir)\n\t\tconst project = root ? null : this.remoteProjectProvider.get().name\n\n\t\t// in some cases you need deploy whole folder with custom build etc.\n\t\t// with root option you can build app on your own and simply deploy it with subprojects\n\t\tawait this.adminClient.deploy(project, files)\n\n\t\tthis.output.info(`Admin deployed (${files.length} files)`)\n\t}\n\n\tprivate readAdminFiles = async (dir: string, prefix: string = ''): Promise<AdminFiles> => {\n\t\tconst files = []\n\t\tfor (const fileName of await this.fs.readDir(dir, { withFileTypes: true })) {\n\t\t\tif (fileName.isDirectory()) {\n\t\t\t\tconst subFiles = await this.readAdminFiles(`${dir}/${fileName.name}`, prefix + fileName.name + '/')\n\t\t\t\tfiles.push(...subFiles)\n\t\t\t} else if (fileName.isFile()) {\n\t\t\t\tfiles.push({\n\t\t\t\t\tpath: prefix + fileName.name,\n\t\t\t\t\tdata: (await this.fs.readFile(`${dir}/${fileName.name}`)).toString('base64'),\n\t\t\t\t})\n\t\t\t}\n\t\t}\n\n\t\treturn files\n\t}\n}\n"],"names":["Output"],"mappings":";;;;;;AAKO,MAAM,cAAc;AAAA,EAC1B,YACkB,uBACA,aACA,IACA,SAAiB,IAAIA,UAAAA,UACrC;AAJgB,SAAA,wBAAA;AACA,SAAA,cAAA;AACA,SAAA,KAAA;AACA,SAAA,SAAA;AAIlB,kBAAA,MAAO,UAAS,OAAO,EAAE,KAAK,WAGxB;AACL,WAAK,OAAO,KAAK,oBAAoB;AACrC,YAAM,QAAQ,MAAM,KAAK,eAAe,GAAG;AAC3C,YAAM,UAAU,OAAO,OAAO,KAAK,sBAAsB,MAAM;AAI/D,YAAM,KAAK,YAAY,OAAO,SAAS,KAAK;AAE5C,WAAK,OAAO,KAAK,mBAAmB,MAAM,MAAM,SAAS;AAAA,IAC1D,CAAA;AAEA,kBAAA,MAAQ,kBAAiB,OAAO,KAAa,SAAiB,OAA4B;AACzF,YAAM,QAAQ,CAAA;AACd,iBAAW,YAAY,MAAM,KAAK,GAAG,QAAQ,KAAK,EAAE,eAAe,KAAA,CAAM,GAAG;AAC3E,YAAI,SAAS,eAAe;AAC3B,gBAAM,WAAW,MAAM,KAAK,eAAe,GAAG,GAAG,IAAI,SAAS,IAAI,IAAI,SAAS,SAAS,OAAO,GAAG;AAClG,gBAAM,KAAK,GAAG,QAAQ;AAAA,QACvB,WAAW,SAAS,UAAU;AAC7B,gBAAM,KAAK;AAAA,YACV,MAAM,SAAS,SAAS;AAAA,YACxB,OAAO,MAAM,KAAK,GAAG,SAAS,GAAG,GAAG,IAAI,SAAS,IAAI,EAAE,GAAG,SAAS,QAAQ;AAAA,UAAA,CAC3E;AAAA,QACF;AAAA,MACD;AAEA,aAAO;AAAA,IACR,CAAA;AAAA,EAhCA;AAiCD;;"}

package/dist/development/src/lib/admin/AdminDeployer.js

@@ -1,17 +1,19 @@
+import { Output } from "@contember/cli-common";
 var __defProp = Object.defineProperty;
 var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
 var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
 class AdminDeployer {
-  constructor(remoteProjectProvider, adminClient, fs) {
+  constructor(remoteProjectProvider, adminClient, fs, output = new Output()) {
     this.remoteProjectProvider = remoteProjectProvider;
     this.adminClient = adminClient;
     this.fs = fs;
+    this.output = output;
     __publicField(this, "deploy", async ({ dir, root }) => {
-      console.log("Deploying admin...");
+      this.output.info("Deploying admin...");
       const files = await this.readAdminFiles(dir);
       const project = root ? null : this.remoteProjectProvider.get().name;
       await this.adminClient.deploy(project, files);
-      console.log(`Admin deployed (${files.length} files)`);
+      this.output.info(`Admin deployed (${files.length} files)`);
     });
     __publicField(this, "readAdminFiles", async (dir, prefix = "") => {
       const files = [];

package/dist/development/src/lib/admin/AdminDeployer.js.map

@@ -1 +1 @@
-{"version":3,"file":"AdminDeployer.js","sources":["../../../../../../packages/cli/src/lib/admin/AdminDeployer.ts"],"sourcesContent":["import { AdminClient, AdminFiles } from './AdminClient.js'\nimport { FileSystem } from '../fs/FileSystem.js'\nimport { RemoteProjectProvider } from '../project/RemoteProjectProvider.js'\n\nexport class AdminDeployer {\n\tconstructor(\n\t\tprivate readonly remoteProjectProvider: RemoteProjectProvider,\n\t\tprivate readonly adminClient: AdminClient,\n\t\tprivate readonly fs: FileSystem,\n\t) {\n\t}\n\n\tpublic deploy = async ({ dir, root }: {\n\t\tdir: string\n\t\troot: boolean\n\t}) => {\n\t\tconsole.log('Deploying admin...')\n\t\tconst files = await this.readAdminFiles(dir)\n\t\tconst project = root ? null : this.remoteProjectProvider.get().name\n\n\t\t// in some cases you need deploy whole folder with custom build etc.\n\t\t// with root option you can build app on your own and simply deploy it with subprojects\n\t\tawait this.adminClient.deploy(project, files)\n\n\t\tconsole.log(`Admin deployed (${files.length} files)`)\n\t}\n\n\tprivate readAdminFiles = async (dir: string, prefix: string = ''): Promise<AdminFiles> => {\n\t\tconst files = []\n\t\tfor (const fileName of await this.fs.readDir(dir, { withFileTypes: true })) {\n\t\t\tif (fileName.isDirectory()) {\n\t\t\t\tconst subFiles = await this.readAdminFiles(`${dir}/${fileName.name}`, prefix + fileName.name + '/')\n\t\t\t\tfiles.push(...subFiles)\n\t\t\t} else if (fileName.isFile()) {\n\t\t\t\tfiles.push({\n\t\t\t\t\tpath: prefix + fileName.name,\n\t\t\t\t\tdata: (await this.fs.readFile(`${dir}/${fileName.name}`)).toString('base64'),\n\t\t\t\t})\n\t\t\t}\n\t\t}\n\n\t\treturn files\n\t}\n}\n"],"names":[],"mappings":";;;AAIO,MAAM,cAAc;AAAA,EAC1B,YACkB,uBACA,aACA,IAChB;AAHgB,SAAA,wBAAA;AACA,SAAA,cAAA;AACA,SAAA,KAAA;AAIlB,kBAAA,MAAO,UAAS,OAAO,EAAE,KAAK,WAGxB;AACL,cAAQ,IAAI,oBAAoB;AAChC,YAAM,QAAQ,MAAM,KAAK,eAAe,GAAG;AAC3C,YAAM,UAAU,OAAO,OAAO,KAAK,sBAAsB,MAAM;AAI/D,YAAM,KAAK,YAAY,OAAO,SAAS,KAAK;AAE5C,cAAQ,IAAI,mBAAmB,MAAM,MAAM,SAAS;AAAA,IACrD,CAAA;AAEA,kBAAA,MAAQ,kBAAiB,OAAO,KAAa,SAAiB,OAA4B;AACzF,YAAM,QAAQ,CAAA;AACd,iBAAW,YAAY,MAAM,KAAK,GAAG,QAAQ,KAAK,EAAE,eAAe,KAAA,CAAM,GAAG;AAC3E,YAAI,SAAS,eAAe;AAC3B,gBAAM,WAAW,MAAM,KAAK,eAAe,GAAG,GAAG,IAAI,SAAS,IAAI,IAAI,SAAS,SAAS,OAAO,GAAG;AAClG,gBAAM,KAAK,GAAG,QAAQ;AAAA,QACvB,WAAW,SAAS,UAAU;AAC7B,gBAAM,KAAK;AAAA,YACV,MAAM,SAAS,SAAS;AAAA,YACxB,OAAO,MAAM,KAAK,GAAG,SAAS,GAAG,GAAG,IAAI,SAAS,IAAI,EAAE,GAAG,SAAS,QAAQ;AAAA,UAAA,CAC3E;AAAA,QACF;AAAA,MACD;AAEA,aAAO;AAAA,IACR,CAAA;AAAA,EAhCA;AAiCD;"}
+{"version":3,"file":"AdminDeployer.js","sources":["../../../../../../packages/cli/src/lib/admin/AdminDeployer.ts"],"sourcesContent":["import { AdminClient, AdminFiles } from './AdminClient.js'\nimport { FileSystem } from '../fs/FileSystem.js'\nimport { RemoteProjectProvider } from '../project/RemoteProjectProvider.js'\nimport { Output } from '@contember/cli-common'\n\nexport class AdminDeployer {\n\tconstructor(\n\t\tprivate readonly remoteProjectProvider: RemoteProjectProvider,\n\t\tprivate readonly adminClient: AdminClient,\n\t\tprivate readonly fs: FileSystem,\n\t\tprivate readonly output: Output = new Output(),\n\t) {\n\t}\n\n\tpublic deploy = async ({ dir, root }: {\n\t\tdir: string\n\t\troot: boolean\n\t}) => {\n\t\tthis.output.info('Deploying admin...')\n\t\tconst files = await this.readAdminFiles(dir)\n\t\tconst project = root ? null : this.remoteProjectProvider.get().name\n\n\t\t// in some cases you need deploy whole folder with custom build etc.\n\t\t// with root option you can build app on your own and simply deploy it with subprojects\n\t\tawait this.adminClient.deploy(project, files)\n\n\t\tthis.output.info(`Admin deployed (${files.length} files)`)\n\t}\n\n\tprivate readAdminFiles = async (dir: string, prefix: string = ''): Promise<AdminFiles> => {\n\t\tconst files = []\n\t\tfor (const fileName of await this.fs.readDir(dir, { withFileTypes: true })) {\n\t\t\tif (fileName.isDirectory()) {\n\t\t\t\tconst subFiles = await this.readAdminFiles(`${dir}/${fileName.name}`, prefix + fileName.name + '/')\n\t\t\t\tfiles.push(...subFiles)\n\t\t\t} else if (fileName.isFile()) {\n\t\t\t\tfiles.push({\n\t\t\t\t\tpath: prefix + fileName.name,\n\t\t\t\t\tdata: (await this.fs.readFile(`${dir}/${fileName.name}`)).toString('base64'),\n\t\t\t\t})\n\t\t\t}\n\t\t}\n\n\t\treturn files\n\t}\n}\n"],"names":[],"mappings":";;;;AAKO,MAAM,cAAc;AAAA,EAC1B,YACkB,uBACA,aACA,IACA,SAAiB,IAAI,UACrC;AAJgB,SAAA,wBAAA;AACA,SAAA,cAAA;AACA,SAAA,KAAA;AACA,SAAA,SAAA;AAIlB,kBAAA,MAAO,UAAS,OAAO,EAAE,KAAK,WAGxB;AACL,WAAK,OAAO,KAAK,oBAAoB;AACrC,YAAM,QAAQ,MAAM,KAAK,eAAe,GAAG;AAC3C,YAAM,UAAU,OAAO,OAAO,KAAK,sBAAsB,MAAM;AAI/D,YAAM,KAAK,YAAY,OAAO,SAAS,KAAK;AAE5C,WAAK,OAAO,KAAK,mBAAmB,MAAM,MAAM,SAAS;AAAA,IAC1D,CAAA;AAEA,kBAAA,MAAQ,kBAAiB,OAAO,KAAa,SAAiB,OAA4B;AACzF,YAAM,QAAQ,CAAA;AACd,iBAAW,YAAY,MAAM,KAAK,GAAG,QAAQ,KAAK,EAAE,eAAe,KAAA,CAAM,GAAG;AAC3E,YAAI,SAAS,eAAe;AAC3B,gBAAM,WAAW,MAAM,KAAK,eAAe,GAAG,GAAG,IAAI,SAAS,IAAI,IAAI,SAAS,SAAS,OAAO,GAAG;AAClG,gBAAM,KAAK,GAAG,QAAQ;AAAA,QACvB,WAAW,SAAS,UAAU;AAC7B,gBAAM,KAAK;AAAA,YACV,MAAM,SAAS,SAAS;AAAA,YACxB,OAAO,MAAM,KAAK,GAAG,SAAS,GAAG,GAAG,IAAI,SAAS,IAAI,EAAE,GAAG,SAAS,QAAQ;AAAA,UAAA,CAC3E;AAAA,QACF;AAAA,MACD;AAEA,aAAO;AAAA,IACR,CAAA;AAAA,EAhCA;AAiCD;"}

package/dist/development/src/lib/errors/TransportError.cjs

@@ -0,0 +1,204 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const cliCommon = require("@contember/cli-common");
+const graphqlClient = require("@contember/graphql-client");
+const classifyHttpStatus = (status) => {
+  if (status === 401) {
+    return { kind: "forbidden", codeSuffix: "UNAUTHORIZED", exitCode: cliCommon.ExitCode.Forbidden };
+  }
+  if (status === 403) {
+    return { kind: "forbidden", codeSuffix: "FORBIDDEN", exitCode: cliCommon.ExitCode.Forbidden };
+  }
+  if (status === 404) {
+    return { kind: "not-found", codeSuffix: "NOT_FOUND", exitCode: cliCommon.ExitCode.NotFound };
+  }
+  if (status === 408) {
+    return { kind: "transient", codeSuffix: "TIMEOUT", exitCode: cliCommon.ExitCode.Transient };
+  }
+  if (status === 409) {
+    return { kind: "conflict", codeSuffix: "CONFLICT", exitCode: cliCommon.ExitCode.Conflict };
+  }
+  if (status === 425) {
+    return { kind: "transient", codeSuffix: "TOO_EARLY", exitCode: cliCommon.ExitCode.Transient };
+  }
+  if (status === 429) {
+    return { kind: "transient", codeSuffix: "RATE_LIMITED", exitCode: cliCommon.ExitCode.Transient };
+  }
+  if (status >= 500 && status <= 599) {
+    return { kind: "transient", codeSuffix: "SERVER_ERROR", exitCode: cliCommon.ExitCode.Transient };
+  }
+  if (status >= 400 && status <= 499) {
+    return { kind: "input", codeSuffix: "BAD_REQUEST", exitCode: cliCommon.ExitCode.InputError };
+  }
+  return { kind: "internal", codeSuffix: "HTTP_ERROR", exitCode: cliCommon.ExitCode.InternalError };
+};
+const toHttpTransportError = (response, context, cause) => {
+  const classification = classifyHttpStatus(response.status);
+  return new cliCommon.CliError(`${context.service} request failed with HTTP ${response.status}`, {
+    code: `${context.codePrefix}_${classification.codeSuffix}`,
+    exitCode: classification.exitCode,
+    details: createDetails(context, {
+      status: response.status,
+      retryAfter: sanitizeRetryAfter(response.retryAfter)
+    }),
+    cause: sanitizeCause(cause, context)
+  });
+};
+const toTransportError = (error, context) => {
+  if (error instanceof cliCommon.CliError) {
+    return error;
+  }
+  if (error instanceof graphqlClient.GraphQlClientError) {
+    return graphQlTransportError(error, context);
+  }
+  return new cliCommon.CliError(`${context.service} request failed: network error`, {
+    code: `${context.codePrefix}_UNREACHABLE`,
+    exitCode: cliCommon.ExitCode.Transient,
+    details: createDetails(context, { status: null }),
+    cause: sanitizeCause(error, context)
+  });
+};
+const graphQlTransportError = (error, context) => {
+  const graphQlCodes = extractGraphQlCodes(error);
+  const semantic = classifyGraphQlCodes(graphQlCodes);
+  if (semantic !== null) {
+    return createGraphQlError(error, context, semantic);
+  }
+  if (error.type === "aborted") {
+    return createGraphQlError(
+      error,
+      context,
+      { kind: "transient", codeSuffix: "ABORTED", exitCode: cliCommon.ExitCode.Transient }
+    );
+  }
+  if (error.type === "network error") {
+    return createGraphQlError(
+      error,
+      context,
+      { kind: "transient", codeSuffix: "UNREACHABLE", exitCode: cliCommon.ExitCode.Transient }
+    );
+  }
+  if (error.type === "invalid response body") {
+    return createGraphQlError(
+      error,
+      context,
+      { kind: "internal", codeSuffix: "INVALID_RESPONSE", exitCode: cliCommon.ExitCode.InternalError }
+    );
+  }
+  if (error.response !== void 0 && error.response.status >= 400) {
+    return createGraphQlError(error, context, classifyHttpStatus(error.response.status));
+  }
+  if (error.type === "server error") {
+    return createGraphQlError(
+      error,
+      context,
+      { kind: "transient", codeSuffix: "SERVER_ERROR", exitCode: cliCommon.ExitCode.Transient }
+    );
+  }
+  if (error.type === "unauthorized") {
+    return createGraphQlError(
+      error,
+      context,
+      { kind: "forbidden", codeSuffix: "UNAUTHORIZED", exitCode: cliCommon.ExitCode.Forbidden }
+    );
+  }
+  if (error.type === "forbidden") {
+    return createGraphQlError(
+      error,
+      context,
+      { kind: "forbidden", codeSuffix: "FORBIDDEN", exitCode: cliCommon.ExitCode.Forbidden }
+    );
+  }
+  return createGraphQlError(
+    error,
+    context,
+    { kind: "input", codeSuffix: error.type === "bad request" ? "BAD_REQUEST" : "ERROR", exitCode: cliCommon.ExitCode.InputError }
+  );
+};
+const createGraphQlError = (error, context, classification) => new cliCommon.CliError(`${context.service} request failed: ${describeFailure(classification.kind)}`, {
+  code: `${context.codePrefix}_${classification.codeSuffix}`,
+  exitCode: classification.exitCode,
+  details: createDetails(
+    { ...context, url: error.request.url },
+    {
+      type: error.type,
+      status: error.response?.status ?? null,
+      retryAfter: sanitizeRetryAfter(error.response?.headers.get("retry-after"))
+    }
+  ),
+  cause: sanitizeCause(error, context)
+});
+const describeFailure = (kind) => {
+  switch (kind) {
+    case "forbidden":
+      return "authentication or permission denied";
+    case "not-found":
+      return "resource not found";
+    case "conflict":
+      return "conflict";
+    case "transient":
+      return "temporary failure";
+    case "input":
+      return "request rejected";
+    case "internal":
+      return "invalid response";
+  }
+};
+const authGraphQlCodes = /* @__PURE__ */ new Set(["ForbiddenError", "FORBIDDEN", "UNAUTHENTICATED", "UNAUTHORIZED"]);
+const serverGraphQlCodes = /* @__PURE__ */ new Set(["INTERNAL_SERVER_ERROR", "InternalServerError"]);
+const classifyGraphQlCodes = (codes) => {
+  if (codes.some((code) => authGraphQlCodes.has(code))) {
+    return { kind: "forbidden", codeSuffix: "FORBIDDEN", exitCode: cliCommon.ExitCode.Forbidden };
+  }
+  if (codes.some((code) => serverGraphQlCodes.has(code))) {
+    return { kind: "transient", codeSuffix: "SERVER_ERROR", exitCode: cliCommon.ExitCode.Transient };
+  }
+  return null;
+};
+const extractGraphQlCodes = (error) => {
+  const values = error.errors ?? [];
+  return values.flatMap((value) => {
+    if (typeof value !== "object" || value === null || !("extensions" in value)) {
+      return [];
+    }
+    const extensions = value.extensions;
+    if (typeof extensions !== "object" || extensions === null || !("code" in extensions) || typeof extensions.code !== "string") {
+      return [];
+    }
+    return [extensions.code];
+  });
+};
+const createDetails = (context, values) => {
+  const safeUrl = context.url === void 0 ? void 0 : sanitizeUrl(context.url);
+  return {
+    status: values.status,
+    ...values.type === void 0 ? {} : { type: values.type },
+    ...safeUrl === void 0 ? {} : { url: safeUrl },
+    ...values.retryAfter === void 0 ? {} : { retryAfter: values.retryAfter }
+  };
+};
+const sanitizeUrl = (value) => {
+  try {
+    const url = new URL(value);
+    return `${url.protocol}//${url.host}${url.pathname}`;
+  } catch {
+    return void 0;
+  }
+};
+const sanitizeCause = (cause, context) => cause === void 0 ? void 0 : new Error(`${context.service} transport failure`);
+const sanitizeRetryAfter = (value) => {
+  if (value === void 0 || value === null) {
+    return void 0;
+  }
+  if (/^\d{1,10}$/.test(value)) {
+    return value;
+  }
+  if (/^(?:Mon|Tue|Wed|Thu|Fri|Sat|Sun), \d{2} (?:Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec) \d{4} \d{2}:\d{2}:\d{2} GMT$/.test(value)) {
+    return value;
+  }
+  return void 0;
+};
+exports.classifyHttpStatus = classifyHttpStatus;
+exports.toHttpTransportError = toHttpTransportError;
+exports.toTransportError = toTransportError;
+//# sourceMappingURL=TransportError.cjs.map

package/dist/development/src/lib/errors/TransportError.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"TransportError.cjs","sources":["../../../../../../packages/cli/src/lib/errors/TransportError.ts"],"sourcesContent":["import { CliError, ExitCode } from '@contember/cli-common'\nimport { GraphQlClientError, GraphQlErrorType } from '@contember/graphql-client'\n\nexport interface TransportErrorContext {\n\t/** Human-readable service name used in error messages. */\n\treadonly service: string\n\t/** Stable machine-readable prefix, for example `TENANT_API`. */\n\treadonly codePrefix: string\n\t/** Endpoint only. Credentials, query parameters, and fragments are removed. */\n\treadonly url?: string\n}\n\nexport type HttpErrorKind = 'forbidden' | 'not-found' | 'conflict' | 'transient' | 'input' | 'internal'\n\nexport interface HttpStatusClassification {\n\treadonly kind: HttpErrorKind\n\treadonly codeSuffix: string\n\treadonly exitCode: ExitCode\n}\n\nexport interface HttpErrorResponse {\n\treadonly status: number\n\treadonly retryAfter?: string | null\n}\n\n/** Classifies HTTP failures independently of any particular API client. */\nexport const classifyHttpStatus = (status: number): HttpStatusClassification => {\n\tif (status === 401) {\n\t\treturn { kind: 'forbidden', codeSuffix: 'UNAUTHORIZED', exitCode: ExitCode.Forbidden }\n\t}\n\tif (status === 403) {\n\t\treturn { kind: 'forbidden', codeSuffix: 'FORBIDDEN', exitCode: ExitCode.Forbidden }\n\t}\n\tif (status === 404) {\n\t\treturn { kind: 'not-found', codeSuffix: 'NOT_FOUND', exitCode: ExitCode.NotFound }\n\t}\n\tif (status === 408) {\n\t\treturn { kind: 'transient', codeSuffix: 'TIMEOUT', exitCode: ExitCode.Transient }\n\t}\n\tif (status === 409) {\n\t\treturn { kind: 'conflict', codeSuffix: 'CONFLICT', exitCode: ExitCode.Conflict }\n\t}\n\tif (status === 425) {\n\t\treturn { kind: 'transient', codeSuffix: 'TOO_EARLY', exitCode: ExitCode.Transient }\n\t}\n\tif (status === 429) {\n\t\treturn { kind: 'transient', codeSuffix: 'RATE_LIMITED', exitCode: ExitCode.Transient }\n\t}\n\tif (status >= 500 && status <= 599) {\n\t\treturn { kind: 'transient', codeSuffix: 'SERVER_ERROR', exitCode: ExitCode.Transient }\n\t}\n\tif (status >= 400 && status <= 499) {\n\t\treturn { kind: 'input', codeSuffix: 'BAD_REQUEST', exitCode: ExitCode.InputError }\n\t}\n\treturn { kind: 'internal', codeSuffix: 'HTTP_ERROR', exitCode: ExitCode.InternalError }\n}\n\n/** Creates a safe CLI error for a received HTTP failure without copying its body. */\nexport const toHttpTransportError = (\n\tresponse: HttpErrorResponse,\n\tcontext: TransportErrorContext,\n\tcause?: unknown,\n): CliError => {\n\tconst classification = classifyHttpStatus(response.status)\n\treturn new CliError(`${context.service} request failed with HTTP ${response.status}`, {\n\t\tcode: `${context.codePrefix}_${classification.codeSuffix}`,\n\t\texitCode: classification.exitCode,\n\t\tdetails: createDetails(context, {\n\t\t\tstatus: response.status,\n\t\t\tretryAfter: sanitizeRetryAfter(response.retryAfter),\n\t\t}),\n\t\tcause: sanitizeCause(cause, context),\n\t})\n}\n\n/**\n * Normalizes an error thrown by a transport call. Call this only at a transport boundary: a plain\n * thrown error is treated as a rejected network operation and is therefore retryable.\n */\nexport const toTransportError = (error: unknown, context: TransportErrorContext): CliError => {\n\tif (error instanceof CliError) {\n\t\treturn error\n\t}\n\tif (error instanceof GraphQlClientError) {\n\t\treturn graphQlTransportError(error, context)\n\t}\n\treturn new CliError(`${context.service} request failed: network error`, {\n\t\tcode: `${context.codePrefix}_UNREACHABLE`,\n\t\texitCode: ExitCode.Transient,\n\t\tdetails: createDetails(context, { status: null }),\n\t\tcause: sanitizeCause(error, context),\n\t})\n}\n\ninterface TransportErrorDetails {\n\treadonly type?: GraphQlErrorType\n\treadonly url?: string\n\treadonly status: number | null\n\treadonly retryAfter?: string\n}\n\nconst graphQlTransportError = (error: GraphQlClientError, context: TransportErrorContext): CliError => {\n\tconst graphQlCodes = extractGraphQlCodes(error)\n\tconst semantic = classifyGraphQlCodes(graphQlCodes)\n\tif (semantic !== null) {\n\t\treturn createGraphQlError(error, context, semantic)\n\t}\n\n\tif (error.type === 'aborted') {\n\t\treturn createGraphQlError(\n\t\t\terror,\n\t\t\tcontext,\n\t\t\t{ kind: 'transient', codeSuffix: 'ABORTED', exitCode: ExitCode.Transient },\n\t\t)\n\t}\n\tif (error.type === 'network error') {\n\t\treturn createGraphQlError(\n\t\t\terror,\n\t\t\tcontext,\n\t\t\t{ kind: 'transient', codeSuffix: 'UNREACHABLE', exitCode: ExitCode.Transient },\n\t\t)\n\t}\n\tif (error.type === 'invalid response body') {\n\t\treturn createGraphQlError(\n\t\t\terror,\n\t\t\tcontext,\n\t\t\t{ kind: 'internal', codeSuffix: 'INVALID_RESPONSE', exitCode: ExitCode.InternalError },\n\t\t)\n\t}\n\tif (error.response !== undefined && error.response.status >= 400) {\n\t\treturn createGraphQlError(error, context, classifyHttpStatus(error.response.status))\n\t}\n\tif (error.type === 'server error') {\n\t\treturn createGraphQlError(\n\t\t\terror,\n\t\t\tcontext,\n\t\t\t{ kind: 'transient', codeSuffix: 'SERVER_ERROR', exitCode: ExitCode.Transient },\n\t\t)\n\t}\n\tif (error.type === 'unauthorized') {\n\t\treturn createGraphQlError(\n\t\t\terror,\n\t\t\tcontext,\n\t\t\t{ kind: 'forbidden', codeSuffix: 'UNAUTHORIZED', exitCode: ExitCode.Forbidden },\n\t\t)\n\t}\n\tif (error.type === 'forbidden') {\n\t\treturn createGraphQlError(\n\t\t\terror,\n\t\t\tcontext,\n\t\t\t{ kind: 'forbidden', codeSuffix: 'FORBIDDEN', exitCode: ExitCode.Forbidden },\n\t\t)\n\t}\n\treturn createGraphQlError(\n\t\terror,\n\t\tcontext,\n\t\t{ kind: 'input', codeSuffix: error.type === 'bad request' ? 'BAD_REQUEST' : 'ERROR', exitCode: ExitCode.InputError },\n\t)\n}\n\nconst createGraphQlError = (\n\terror: GraphQlClientError,\n\tcontext: TransportErrorContext,\n\tclassification: HttpStatusClassification,\n): CliError =>\n\tnew CliError(`${context.service} request failed: ${describeFailure(classification.kind)}`, {\n\t\tcode: `${context.codePrefix}_${classification.codeSuffix}`,\n\t\texitCode: classification.exitCode,\n\t\tdetails: createDetails(\n\t\t\t{ ...context, url: error.request.url },\n\t\t\t{\n\t\t\t\ttype: error.type,\n\t\t\t\tstatus: error.response?.status ?? null,\n\t\t\t\tretryAfter: sanitizeRetryAfter(error.response?.headers.get('retry-after')),\n\t\t\t},\n\t\t),\n\t\tcause: sanitizeCause(error, context),\n\t})\n\nconst describeFailure = (kind: HttpErrorKind): string => {\n\tswitch (kind) {\n\t\tcase 'forbidden':\n\t\t\treturn 'authentication or permission denied'\n\t\tcase 'not-found':\n\t\t\treturn 'resource not found'\n\t\tcase 'conflict':\n\t\t\treturn 'conflict'\n\t\tcase 'transient':\n\t\t\treturn 'temporary failure'\n\t\tcase 'input':\n\t\t\treturn 'request rejected'\n\t\tcase 'internal':\n\t\t\treturn 'invalid response'\n\t}\n}\n\nconst authGraphQlCodes = new Set(['ForbiddenError', 'FORBIDDEN', 'UNAUTHENTICATED', 'UNAUTHORIZED'])\nconst serverGraphQlCodes = new Set(['INTERNAL_SERVER_ERROR', 'InternalServerError'])\n\nconst classifyGraphQlCodes = (codes: readonly string[]): HttpStatusClassification | null => {\n\tif (codes.some(code => authGraphQlCodes.has(code))) {\n\t\treturn { kind: 'forbidden', codeSuffix: 'FORBIDDEN', exitCode: ExitCode.Forbidden }\n\t}\n\tif (codes.some(code => serverGraphQlCodes.has(code))) {\n\t\treturn { kind: 'transient', codeSuffix: 'SERVER_ERROR', exitCode: ExitCode.Transient }\n\t}\n\treturn null\n}\n\nconst extractGraphQlCodes = (error: GraphQlClientError): readonly string[] => {\n\tconst values: readonly unknown[] = error.errors ?? []\n\treturn values.flatMap(value => {\n\t\tif (typeof value !== 'object' || value === null || !('extensions' in value)) {\n\t\t\treturn []\n\t\t}\n\t\tconst extensions = value.extensions\n\t\tif (typeof extensions !== 'object' || extensions === null || !('code' in extensions) || typeof extensions.code !== 'string') {\n\t\t\treturn []\n\t\t}\n\t\treturn [extensions.code]\n\t})\n}\n\nconst createDetails = (\n\tcontext: TransportErrorContext,\n\tvalues: Omit<TransportErrorDetails, 'url'>,\n): TransportErrorDetails => {\n\tconst safeUrl = context.url === undefined ? undefined : sanitizeUrl(context.url)\n\treturn {\n\t\tstatus: values.status,\n\t\t...(values.type === undefined ? {} : { type: values.type }),\n\t\t...(safeUrl === undefined ? {} : { url: safeUrl }),\n\t\t...(values.retryAfter === undefined ? {} : { retryAfter: values.retryAfter }),\n\t}\n}\n\nconst sanitizeUrl = (value: string): string | undefined => {\n\ttry {\n\t\tconst url = new URL(value)\n\t\treturn `${url.protocol}//${url.host}${url.pathname}`\n\t} catch {\n\t\treturn undefined\n\t}\n}\n\nconst sanitizeCause = (cause: unknown, context: TransportErrorContext): Error | undefined =>\n\tcause === undefined ? undefined : new Error(`${context.service} transport failure`)\n\nconst sanitizeRetryAfter = (value: string | null | undefined): string | undefined => {\n\tif (value === undefined || value === null) {\n\t\treturn undefined\n\t}\n\tif (/^\\d{1,10}$/.test(value)) {\n\t\treturn value\n\t}\n\tif (/^(?:Mon|Tue|Wed|Thu|Fri|Sat|Sun), \\d{2} (?:Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec) \\d{4} \\d{2}:\\d{2}:\\d{2} GMT$/.test(value)) {\n\t\treturn value\n\t}\n\treturn undefined\n}\n"],"names":["ExitCode","CliError","GraphQlClientError"],"mappings":";;;;AA0BO,MAAM,qBAAqB,CAAC,WAA6C;AAC/E,MAAI,WAAW,KAAK;AACnB,WAAO,EAAE,MAAM,aAAa,YAAY,gBAAgB,UAAUA,UAAAA,SAAS,UAAA;AAAA,EAC5E;AACA,MAAI,WAAW,KAAK;AACnB,WAAO,EAAE,MAAM,aAAa,YAAY,aAAa,UAAUA,UAAAA,SAAS,UAAA;AAAA,EACzE;AACA,MAAI,WAAW,KAAK;AACnB,WAAO,EAAE,MAAM,aAAa,YAAY,aAAa,UAAUA,UAAAA,SAAS,SAAA;AAAA,EACzE;AACA,MAAI,WAAW,KAAK;AACnB,WAAO,EAAE,MAAM,aAAa,YAAY,WAAW,UAAUA,UAAAA,SAAS,UAAA;AAAA,EACvE;AACA,MAAI,WAAW,KAAK;AACnB,WAAO,EAAE,MAAM,YAAY,YAAY,YAAY,UAAUA,UAAAA,SAAS,SAAA;AAAA,EACvE;AACA,MAAI,WAAW,KAAK;AACnB,WAAO,EAAE,MAAM,aAAa,YAAY,aAAa,UAAUA,UAAAA,SAAS,UAAA;AAAA,EACzE;AACA,MAAI,WAAW,KAAK;AACnB,WAAO,EAAE,MAAM,aAAa,YAAY,gBAAgB,UAAUA,UAAAA,SAAS,UAAA;AAAA,EAC5E;AACA,MAAI,UAAU,OAAO,UAAU,KAAK;AACnC,WAAO,EAAE,MAAM,aAAa,YAAY,gBAAgB,UAAUA,UAAAA,SAAS,UAAA;AAAA,EAC5E;AACA,MAAI,UAAU,OAAO,UAAU,KAAK;AACnC,WAAO,EAAE,MAAM,SAAS,YAAY,eAAe,UAAUA,UAAAA,SAAS,WAAA;AAAA,EACvE;AACA,SAAO,EAAE,MAAM,YAAY,YAAY,cAAc,UAAUA,UAAAA,SAAS,cAAA;AACzE;AAGO,MAAM,uBAAuB,CACnC,UACA,SACA,UACc;AACd,QAAM,iBAAiB,mBAAmB,SAAS,MAAM;AACzD,SAAO,IAAIC,UAAAA,SAAS,GAAG,QAAQ,OAAO,6BAA6B,SAAS,MAAM,IAAI;AAAA,IACrF,MAAM,GAAG,QAAQ,UAAU,IAAI,eAAe,UAAU;AAAA,IACxD,UAAU,eAAe;AAAA,IACzB,SAAS,cAAc,SAAS;AAAA,MAC/B,QAAQ,SAAS;AAAA,MACjB,YAAY,mBAAmB,SAAS,UAAU;AAAA,IAAA,CAClD;AAAA,IACD,OAAO,cAAc,OAAO,OAAO;AAAA,EAAA,CACnC;AACF;AAMO,MAAM,mBAAmB,CAAC,OAAgB,YAA6C;AAC7F,MAAI,iBAAiBA,UAAAA,UAAU;AAC9B,WAAO;AAAA,EACR;AACA,MAAI,iBAAiBC,cAAAA,oBAAoB;AACxC,WAAO,sBAAsB,OAAO,OAAO;AAAA,EAC5C;AACA,SAAO,IAAID,UAAAA,SAAS,GAAG,QAAQ,OAAO,kCAAkC;AAAA,IACvE,MAAM,GAAG,QAAQ,UAAU;AAAA,IAC3B,UAAUD,UAAAA,SAAS;AAAA,IACnB,SAAS,cAAc,SAAS,EAAE,QAAQ,MAAM;AAAA,IAChD,OAAO,cAAc,OAAO,OAAO;AAAA,EAAA,CACnC;AACF;AASA,MAAM,wBAAwB,CAAC,OAA2B,YAA6C;AACtG,QAAM,eAAe,oBAAoB,KAAK;AAC9C,QAAM,WAAW,qBAAqB,YAAY;AAClD,MAAI,aAAa,MAAM;AACtB,WAAO,mBAAmB,OAAO,SAAS,QAAQ;AAAA,EACnD;AAEA,MAAI,MAAM,SAAS,WAAW;AAC7B,WAAO;AAAA,MACN;AAAA,MACA;AAAA,MACA,EAAE,MAAM,aAAa,YAAY,WAAW,UAAUA,UAAAA,SAAS,UAAA;AAAA,IAAU;AAAA,EAE3E;AACA,MAAI,MAAM,SAAS,iBAAiB;AACnC,WAAO;AAAA,MACN;AAAA,MACA;AAAA,MACA,EAAE,MAAM,aAAa,YAAY,eAAe,UAAUA,UAAAA,SAAS,UAAA;AAAA,IAAU;AAAA,EAE/E;AACA,MAAI,MAAM,SAAS,yBAAyB;AAC3C,WAAO;AAAA,MACN;AAAA,MACA;AAAA,MACA,EAAE,MAAM,YAAY,YAAY,oBAAoB,UAAUA,UAAAA,SAAS,cAAA;AAAA,IAAc;AAAA,EAEvF;AACA,MAAI,MAAM,aAAa,UAAa,MAAM,SAAS,UAAU,KAAK;AACjE,WAAO,mBAAmB,OAAO,SAAS,mBAAmB,MAAM,SAAS,MAAM,CAAC;AAAA,EACpF;AACA,MAAI,MAAM,SAAS,gBAAgB;AAClC,WAAO;AAAA,MACN;AAAA,MACA;AAAA,MACA,EAAE,MAAM,aAAa,YAAY,gBAAgB,UAAUA,UAAAA,SAAS,UAAA;AAAA,IAAU;AAAA,EAEhF;AACA,MAAI,MAAM,SAAS,gBAAgB;AAClC,WAAO;AAAA,MACN;AAAA,MACA;AAAA,MACA,EAAE,MAAM,aAAa,YAAY,gBAAgB,UAAUA,UAAAA,SAAS,UAAA;AAAA,IAAU;AAAA,EAEhF;AACA,MAAI,MAAM,SAAS,aAAa;AAC/B,WAAO;AAAA,MACN;AAAA,MACA;AAAA,MACA,EAAE,MAAM,aAAa,YAAY,aAAa,UAAUA,UAAAA,SAAS,UAAA;AAAA,IAAU;AAAA,EAE7E;AACA,SAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA,EAAE,MAAM,SAAS,YAAY,MAAM,SAAS,gBAAgB,gBAAgB,SAAS,UAAUA,UAAAA,SAAS,WAAA;AAAA,EAAW;AAErH;AAEA,MAAM,qBAAqB,CAC1B,OACA,SACA,mBAEA,IAAIC,UAAAA,SAAS,GAAG,QAAQ,OAAO,oBAAoB,gBAAgB,eAAe,IAAI,CAAC,IAAI;AAAA,EAC1F,MAAM,GAAG,QAAQ,UAAU,IAAI,eAAe,UAAU;AAAA,EACxD,UAAU,eAAe;AAAA,EACzB,SAAS;AAAA,IACR,EAAE,GAAG,SAAS,KAAK,MAAM,QAAQ,IAAA;AAAA,IACjC;AAAA,MACC,MAAM,MAAM;AAAA,MACZ,QAAQ,MAAM,UAAU,UAAU;AAAA,MAClC,YAAY,mBAAmB,MAAM,UAAU,QAAQ,IAAI,aAAa,CAAC;AAAA,IAAA;AAAA,EAC1E;AAAA,EAED,OAAO,cAAc,OAAO,OAAO;AACpC,CAAC;AAEF,MAAM,kBAAkB,CAAC,SAAgC;AACxD,UAAQ,MAAA;AAAA,IACP,KAAK;AACJ,aAAO;AAAA,IACR,KAAK;AACJ,aAAO;AAAA,IACR,KAAK;AACJ,aAAO;AAAA,IACR,KAAK;AACJ,aAAO;AAAA,IACR,KAAK;AACJ,aAAO;AAAA,IACR,KAAK;AACJ,aAAO;AAAA,EAAA;AAEV;AAEA,MAAM,uCAAuB,IAAI,CAAC,kBAAkB,aAAa,mBAAmB,cAAc,CAAC;AACnG,MAAM,qBAAqB,oBAAI,IAAI,CAAC,yBAAyB,qBAAqB,CAAC;AAEnF,MAAM,uBAAuB,CAAC,UAA8D;AAC3F,MAAI,MAAM,KAAK,CAAA,SAAQ,iBAAiB,IAAI,IAAI,CAAC,GAAG;AACnD,WAAO,EAAE,MAAM,aAAa,YAAY,aAAa,UAAUD,UAAAA,SAAS,UAAA;AAAA,EACzE;AACA,MAAI,MAAM,KAAK,CAAA,SAAQ,mBAAmB,IAAI,IAAI,CAAC,GAAG;AACrD,WAAO,EAAE,MAAM,aAAa,YAAY,gBAAgB,UAAUA,UAAAA,SAAS,UAAA;AAAA,EAC5E;AACA,SAAO;AACR;AAEA,MAAM,sBAAsB,CAAC,UAAiD;AAC7E,QAAM,SAA6B,MAAM,UAAU,CAAA;AACnD,SAAO,OAAO,QAAQ,CAAA,UAAS;AAC9B,QAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,EAAE,gBAAgB,QAAQ;AAC5E,aAAO,CAAA;AAAA,IACR;AACA,UAAM,aAAa,MAAM;AACzB,QAAI,OAAO,eAAe,YAAY,eAAe,QAAQ,EAAE,UAAU,eAAe,OAAO,WAAW,SAAS,UAAU;AAC5H,aAAO,CAAA;AAAA,IACR;AACA,WAAO,CAAC,WAAW,IAAI;AAAA,EACxB,CAAC;AACF;AAEA,MAAM,gBAAgB,CACrB,SACA,WAC2B;AAC3B,QAAM,UAAU,QAAQ,QAAQ,SAAY,SAAY,YAAY,QAAQ,GAAG;AAC/E,SAAO;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,GAAI,OAAO,SAAS,SAAY,CAAA,IAAK,EAAE,MAAM,OAAO,KAAA;AAAA,IACpD,GAAI,YAAY,SAAY,CAAA,IAAK,EAAE,KAAK,QAAA;AAAA,IACxC,GAAI,OAAO,eAAe,SAAY,CAAA,IAAK,EAAE,YAAY,OAAO,WAAA;AAAA,EAAW;AAE7E;AAEA,MAAM,cAAc,CAAC,UAAsC;AAC1D,MAAI;AACH,UAAM,MAAM,IAAI,IAAI,KAAK;AACzB,WAAO,GAAG,IAAI,QAAQ,KAAK,IAAI,IAAI,GAAG,IAAI,QAAQ;AAAA,EACnD,QAAQ;AACP,WAAO;AAAA,EACR;AACD;AAEA,MAAM,gBAAgB,CAAC,OAAgB,YACtC,UAAU,SAAY,SAAY,IAAI,MAAM,GAAG,QAAQ,OAAO,oBAAoB;AAEnF,MAAM,qBAAqB,CAAC,UAAyD;AACpF,MAAI,UAAU,UAAa,UAAU,MAAM;AAC1C,WAAO;AAAA,EACR;AACA,MAAI,aAAa,KAAK,KAAK,GAAG;AAC7B,WAAO;AAAA,EACR;AACA,MAAI,2HAA2H,KAAK,KAAK,GAAG;AAC3I,WAAO;AAAA,EACR;AACA,SAAO;AACR;;;;"}

package/dist/development/src/lib/errors/TransportError.js

@@ -0,0 +1,204 @@
+import { CliError, ExitCode } from "@contember/cli-common";
+import { GraphQlClientError } from "@contember/graphql-client";
+const classifyHttpStatus = (status) => {
+  if (status === 401) {
+    return { kind: "forbidden", codeSuffix: "UNAUTHORIZED", exitCode: ExitCode.Forbidden };
+  }
+  if (status === 403) {
+    return { kind: "forbidden", codeSuffix: "FORBIDDEN", exitCode: ExitCode.Forbidden };
+  }
+  if (status === 404) {
+    return { kind: "not-found", codeSuffix: "NOT_FOUND", exitCode: ExitCode.NotFound };
+  }
+  if (status === 408) {
+    return { kind: "transient", codeSuffix: "TIMEOUT", exitCode: ExitCode.Transient };
+  }
+  if (status === 409) {
+    return { kind: "conflict", codeSuffix: "CONFLICT", exitCode: ExitCode.Conflict };
+  }
+  if (status === 425) {
+    return { kind: "transient", codeSuffix: "TOO_EARLY", exitCode: ExitCode.Transient };
+  }
+  if (status === 429) {
+    return { kind: "transient", codeSuffix: "RATE_LIMITED", exitCode: ExitCode.Transient };
+  }
+  if (status >= 500 && status <= 599) {
+    return { kind: "transient", codeSuffix: "SERVER_ERROR", exitCode: ExitCode.Transient };
+  }
+  if (status >= 400 && status <= 499) {
+    return { kind: "input", codeSuffix: "BAD_REQUEST", exitCode: ExitCode.InputError };
+  }
+  return { kind: "internal", codeSuffix: "HTTP_ERROR", exitCode: ExitCode.InternalError };
+};
+const toHttpTransportError = (response, context, cause) => {
+  const classification = classifyHttpStatus(response.status);
+  return new CliError(`${context.service} request failed with HTTP ${response.status}`, {
+    code: `${context.codePrefix}_${classification.codeSuffix}`,
+    exitCode: classification.exitCode,
+    details: createDetails(context, {
+      status: response.status,
+      retryAfter: sanitizeRetryAfter(response.retryAfter)
+    }),
+    cause: sanitizeCause(cause, context)
+  });
+};
+const toTransportError = (error, context) => {
+  if (error instanceof CliError) {
+    return error;
+  }
+  if (error instanceof GraphQlClientError) {
+    return graphQlTransportError(error, context);
+  }
+  return new CliError(`${context.service} request failed: network error`, {
+    code: `${context.codePrefix}_UNREACHABLE`,
+    exitCode: ExitCode.Transient,
+    details: createDetails(context, { status: null }),
+    cause: sanitizeCause(error, context)
+  });
+};
+const graphQlTransportError = (error, context) => {
+  const graphQlCodes = extractGraphQlCodes(error);
+  const semantic = classifyGraphQlCodes(graphQlCodes);
+  if (semantic !== null) {
+    return createGraphQlError(error, context, semantic);
+  }
+  if (error.type === "aborted") {
+    return createGraphQlError(
+      error,
+      context,
+      { kind: "transient", codeSuffix: "ABORTED", exitCode: ExitCode.Transient }
+    );
+  }
+  if (error.type === "network error") {
+    return createGraphQlError(
+      error,
+      context,
+      { kind: "transient", codeSuffix: "UNREACHABLE", exitCode: ExitCode.Transient }
+    );
+  }
+  if (error.type === "invalid response body") {
+    return createGraphQlError(
+      error,
+      context,
+      { kind: "internal", codeSuffix: "INVALID_RESPONSE", exitCode: ExitCode.InternalError }
+    );
+  }
+  if (error.response !== void 0 && error.response.status >= 400) {
+    return createGraphQlError(error, context, classifyHttpStatus(error.response.status));
+  }
+  if (error.type === "server error") {
+    return createGraphQlError(
+      error,
+      context,
+      { kind: "transient", codeSuffix: "SERVER_ERROR", exitCode: ExitCode.Transient }
+    );
+  }
+  if (error.type === "unauthorized") {
+    return createGraphQlError(
+      error,
+      context,
+      { kind: "forbidden", codeSuffix: "UNAUTHORIZED", exitCode: ExitCode.Forbidden }
+    );
+  }
+  if (error.type === "forbidden") {
+    return createGraphQlError(
+      error,
+      context,
+      { kind: "forbidden", codeSuffix: "FORBIDDEN", exitCode: ExitCode.Forbidden }
+    );
+  }
+  return createGraphQlError(
+    error,
+    context,
+    { kind: "input", codeSuffix: error.type === "bad request" ? "BAD_REQUEST" : "ERROR", exitCode: ExitCode.InputError }
+  );
+};
+const createGraphQlError = (error, context, classification) => new CliError(`${context.service} request failed: ${describeFailure(classification.kind)}`, {
+  code: `${context.codePrefix}_${classification.codeSuffix}`,
+  exitCode: classification.exitCode,
+  details: createDetails(
+    { ...context, url: error.request.url },
+    {
+      type: error.type,
+      status: error.response?.status ?? null,
+      retryAfter: sanitizeRetryAfter(error.response?.headers.get("retry-after"))
+    }
+  ),
+  cause: sanitizeCause(error, context)
+});
+const describeFailure = (kind) => {
+  switch (kind) {
+    case "forbidden":
+      return "authentication or permission denied";
+    case "not-found":
+      return "resource not found";
+    case "conflict":
+      return "conflict";
+    case "transient":
+      return "temporary failure";
+    case "input":
+      return "request rejected";
+    case "internal":
+      return "invalid response";
+  }
+};
+const authGraphQlCodes = /* @__PURE__ */ new Set(["ForbiddenError", "FORBIDDEN", "UNAUTHENTICATED", "UNAUTHORIZED"]);
+const serverGraphQlCodes = /* @__PURE__ */ new Set(["INTERNAL_SERVER_ERROR", "InternalServerError"]);
+const classifyGraphQlCodes = (codes) => {
+  if (codes.some((code) => authGraphQlCodes.has(code))) {
+    return { kind: "forbidden", codeSuffix: "FORBIDDEN", exitCode: ExitCode.Forbidden };
+  }
+  if (codes.some((code) => serverGraphQlCodes.has(code))) {
+    return { kind: "transient", codeSuffix: "SERVER_ERROR", exitCode: ExitCode.Transient };
+  }
+  return null;
+};
+const extractGraphQlCodes = (error) => {
+  const values = error.errors ?? [];
+  return values.flatMap((value) => {
+    if (typeof value !== "object" || value === null || !("extensions" in value)) {
+      return [];
+    }
+    const extensions = value.extensions;
+    if (typeof extensions !== "object" || extensions === null || !("code" in extensions) || typeof extensions.code !== "string") {
+      return [];
+    }
+    return [extensions.code];
+  });
+};
+const createDetails = (context, values) => {
+  const safeUrl = context.url === void 0 ? void 0 : sanitizeUrl(context.url);
+  return {
+    status: values.status,
+    ...values.type === void 0 ? {} : { type: values.type },
+    ...safeUrl === void 0 ? {} : { url: safeUrl },
+    ...values.retryAfter === void 0 ? {} : { retryAfter: values.retryAfter }
+  };
+};
+const sanitizeUrl = (value) => {
+  try {
+    const url = new URL(value);
+    return `${url.protocol}//${url.host}${url.pathname}`;
+  } catch {
+    return void 0;
+  }
+};
+const sanitizeCause = (cause, context) => cause === void 0 ? void 0 : new Error(`${context.service} transport failure`);
+const sanitizeRetryAfter = (value) => {
+  if (value === void 0 || value === null) {
+    return void 0;
+  }
+  if (/^\d{1,10}$/.test(value)) {
+    return value;
+  }
+  if (/^(?:Mon|Tue|Wed|Thu|Fri|Sat|Sun), \d{2} (?:Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec) \d{4} \d{2}:\d{2}:\d{2} GMT$/.test(value)) {
+    return value;
+  }
+  return void 0;
+};
+export {
+  classifyHttpStatus,
+  toHttpTransportError,
+  toTransportError
+};
+//# sourceMappingURL=TransportError.js.map

package/dist/development/src/lib/errors/TransportError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TransportError.js","sources":["../../../../../../packages/cli/src/lib/errors/TransportError.ts"],"sourcesContent":["import { CliError, ExitCode } from '@contember/cli-common'\nimport { GraphQlClientError, GraphQlErrorType } from '@contember/graphql-client'\n\nexport interface TransportErrorContext {\n\t/** Human-readable service name used in error messages. */\n\treadonly service: string\n\t/** Stable machine-readable prefix, for example `TENANT_API`. */\n\treadonly codePrefix: string\n\t/** Endpoint only. Credentials, query parameters, and fragments are removed. */\n\treadonly url?: string\n}\n\nexport type HttpErrorKind = 'forbidden' | 'not-found' | 'conflict' | 'transient' | 'input' | 'internal'\n\nexport interface HttpStatusClassification {\n\treadonly kind: HttpErrorKind\n\treadonly codeSuffix: string\n\treadonly exitCode: ExitCode\n}\n\nexport interface HttpErrorResponse {\n\treadonly status: number\n\treadonly retryAfter?: string | null\n}\n\n/** Classifies HTTP failures independently of any particular API client. */\nexport const classifyHttpStatus = (status: number): HttpStatusClassification => {\n\tif (status === 401) {\n\t\treturn { kind: 'forbidden', codeSuffix: 'UNAUTHORIZED', exitCode: ExitCode.Forbidden }\n\t}\n\tif (status === 403) {\n\t\treturn { kind: 'forbidden', codeSuffix: 'FORBIDDEN', exitCode: ExitCode.Forbidden }\n\t}\n\tif (status === 404) {\n\t\treturn { kind: 'not-found', codeSuffix: 'NOT_FOUND', exitCode: ExitCode.NotFound }\n\t}\n\tif (status === 408) {\n\t\treturn { kind: 'transient', codeSuffix: 'TIMEOUT', exitCode: ExitCode.Transient }\n\t}\n\tif (status === 409) {\n\t\treturn { kind: 'conflict', codeSuffix: 'CONFLICT', exitCode: ExitCode.Conflict }\n\t}\n\tif (status === 425) {\n\t\treturn { kind: 'transient', codeSuffix: 'TOO_EARLY', exitCode: ExitCode.Transient }\n\t}\n\tif (status === 429) {\n\t\treturn { kind: 'transient', codeSuffix: 'RATE_LIMITED', exitCode: ExitCode.Transient }\n\t}\n\tif (status >= 500 && status <= 599) {\n\t\treturn { kind: 'transient', codeSuffix: 'SERVER_ERROR', exitCode: ExitCode.Transient }\n\t}\n\tif (status >= 400 && status <= 499) {\n\t\treturn { kind: 'input', codeSuffix: 'BAD_REQUEST', exitCode: ExitCode.InputError }\n\t}\n\treturn { kind: 'internal', codeSuffix: 'HTTP_ERROR', exitCode: ExitCode.InternalError }\n}\n\n/** Creates a safe CLI error for a received HTTP failure without copying its body. */\nexport const toHttpTransportError = (\n\tresponse: HttpErrorResponse,\n\tcontext: TransportErrorContext,\n\tcause?: unknown,\n): CliError => {\n\tconst classification = classifyHttpStatus(response.status)\n\treturn new CliError(`${context.service} request failed with HTTP ${response.status}`, {\n\t\tcode: `${context.codePrefix}_${classification.codeSuffix}`,\n\t\texitCode: classification.exitCode,\n\t\tdetails: createDetails(context, {\n\t\t\tstatus: response.status,\n\t\t\tretryAfter: sanitizeRetryAfter(response.retryAfter),\n\t\t}),\n\t\tcause: sanitizeCause(cause, context),\n\t})\n}\n\n/**\n * Normalizes an error thrown by a transport call. Call this only at a transport boundary: a plain\n * thrown error is treated as a rejected network operation and is therefore retryable.\n */\nexport const toTransportError = (error: unknown, context: TransportErrorContext): CliError => {\n\tif (error instanceof CliError) {\n\t\treturn error\n\t}\n\tif (error instanceof GraphQlClientError) {\n\t\treturn graphQlTransportError(error, context)\n\t}\n\treturn new CliError(`${context.service} request failed: network error`, {\n\t\tcode: `${context.codePrefix}_UNREACHABLE`,\n\t\texitCode: ExitCode.Transient,\n\t\tdetails: createDetails(context, { status: null }),\n\t\tcause: sanitizeCause(error, context),\n\t})\n}\n\ninterface TransportErrorDetails {\n\treadonly type?: GraphQlErrorType\n\treadonly url?: string\n\treadonly status: number | null\n\treadonly retryAfter?: string\n}\n\nconst graphQlTransportError = (error: GraphQlClientError, context: TransportErrorContext): CliError => {\n\tconst graphQlCodes = extractGraphQlCodes(error)\n\tconst semantic = classifyGraphQlCodes(graphQlCodes)\n\tif (semantic !== null) {\n\t\treturn createGraphQlError(error, context, semantic)\n\t}\n\n\tif (error.type === 'aborted') {\n\t\treturn createGraphQlError(\n\t\t\terror,\n\t\t\tcontext,\n\t\t\t{ kind: 'transient', codeSuffix: 'ABORTED', exitCode: ExitCode.Transient },\n\t\t)\n\t}\n\tif (error.type === 'network error') {\n\t\treturn createGraphQlError(\n\t\t\terror,\n\t\t\tcontext,\n\t\t\t{ kind: 'transient', codeSuffix: 'UNREACHABLE', exitCode: ExitCode.Transient },\n\t\t)\n\t}\n\tif (error.type === 'invalid response body') {\n\t\treturn createGraphQlError(\n\t\t\terror,\n\t\t\tcontext,\n\t\t\t{ kind: 'internal', codeSuffix: 'INVALID_RESPONSE', exitCode: ExitCode.InternalError },\n\t\t)\n\t}\n\tif (error.response !== undefined && error.response.status >= 400) {\n\t\treturn createGraphQlError(error, context, classifyHttpStatus(error.response.status))\n\t}\n\tif (error.type === 'server error') {\n\t\treturn createGraphQlError(\n\t\t\terror,\n\t\t\tcontext,\n\t\t\t{ kind: 'transient', codeSuffix: 'SERVER_ERROR', exitCode: ExitCode.Transient },\n\t\t)\n\t}\n\tif (error.type === 'unauthorized') {\n\t\treturn createGraphQlError(\n\t\t\terror,\n\t\t\tcontext,\n\t\t\t{ kind: 'forbidden', codeSuffix: 'UNAUTHORIZED', exitCode: ExitCode.Forbidden },\n\t\t)\n\t}\n\tif (error.type === 'forbidden') {\n\t\treturn createGraphQlError(\n\t\t\terror,\n\t\t\tcontext,\n\t\t\t{ kind: 'forbidden', codeSuffix: 'FORBIDDEN', exitCode: ExitCode.Forbidden },\n\t\t)\n\t}\n\treturn createGraphQlError(\n\t\terror,\n\t\tcontext,\n\t\t{ kind: 'input', codeSuffix: error.type === 'bad request' ? 'BAD_REQUEST' : 'ERROR', exitCode: ExitCode.InputError },\n\t)\n}\n\nconst createGraphQlError = (\n\terror: GraphQlClientError,\n\tcontext: TransportErrorContext,\n\tclassification: HttpStatusClassification,\n): CliError =>\n\tnew CliError(`${context.service} request failed: ${describeFailure(classification.kind)}`, {\n\t\tcode: `${context.codePrefix}_${classification.codeSuffix}`,\n\t\texitCode: classification.exitCode,\n\t\tdetails: createDetails(\n\t\t\t{ ...context, url: error.request.url },\n\t\t\t{\n\t\t\t\ttype: error.type,\n\t\t\t\tstatus: error.response?.status ?? null,\n\t\t\t\tretryAfter: sanitizeRetryAfter(error.response?.headers.get('retry-after')),\n\t\t\t},\n\t\t),\n\t\tcause: sanitizeCause(error, context),\n\t})\n\nconst describeFailure = (kind: HttpErrorKind): string => {\n\tswitch (kind) {\n\t\tcase 'forbidden':\n\t\t\treturn 'authentication or permission denied'\n\t\tcase 'not-found':\n\t\t\treturn 'resource not found'\n\t\tcase 'conflict':\n\t\t\treturn 'conflict'\n\t\tcase 'transient':\n\t\t\treturn 'temporary failure'\n\t\tcase 'input':\n\t\t\treturn 'request rejected'\n\t\tcase 'internal':\n\t\t\treturn 'invalid response'\n\t}\n}\n\nconst authGraphQlCodes = new Set(['ForbiddenError', 'FORBIDDEN', 'UNAUTHENTICATED', 'UNAUTHORIZED'])\nconst serverGraphQlCodes = new Set(['INTERNAL_SERVER_ERROR', 'InternalServerError'])\n\nconst classifyGraphQlCodes = (codes: readonly string[]): HttpStatusClassification | null => {\n\tif (codes.some(code => authGraphQlCodes.has(code))) {\n\t\treturn { kind: 'forbidden', codeSuffix: 'FORBIDDEN', exitCode: ExitCode.Forbidden }\n\t}\n\tif (codes.some(code => serverGraphQlCodes.has(code))) {\n\t\treturn { kind: 'transient', codeSuffix: 'SERVER_ERROR', exitCode: ExitCode.Transient }\n\t}\n\treturn null\n}\n\nconst extractGraphQlCodes = (error: GraphQlClientError): readonly string[] => {\n\tconst values: readonly unknown[] = error.errors ?? []\n\treturn values.flatMap(value => {\n\t\tif (typeof value !== 'object' || value === null || !('extensions' in value)) {\n\t\t\treturn []\n\t\t}\n\t\tconst extensions = value.extensions\n\t\tif (typeof extensions !== 'object' || extensions === null || !('code' in extensions) || typeof extensions.code !== 'string') {\n\t\t\treturn []\n\t\t}\n\t\treturn [extensions.code]\n\t})\n}\n\nconst createDetails = (\n\tcontext: TransportErrorContext,\n\tvalues: Omit<TransportErrorDetails, 'url'>,\n): TransportErrorDetails => {\n\tconst safeUrl = context.url === undefined ? undefined : sanitizeUrl(context.url)\n\treturn {\n\t\tstatus: values.status,\n\t\t...(values.type === undefined ? {} : { type: values.type }),\n\t\t...(safeUrl === undefined ? {} : { url: safeUrl }),\n\t\t...(values.retryAfter === undefined ? {} : { retryAfter: values.retryAfter }),\n\t}\n}\n\nconst sanitizeUrl = (value: string): string | undefined => {\n\ttry {\n\t\tconst url = new URL(value)\n\t\treturn `${url.protocol}//${url.host}${url.pathname}`\n\t} catch {\n\t\treturn undefined\n\t}\n}\n\nconst sanitizeCause = (cause: unknown, context: TransportErrorContext): Error | undefined =>\n\tcause === undefined ? undefined : new Error(`${context.service} transport failure`)\n\nconst sanitizeRetryAfter = (value: string | null | undefined): string | undefined => {\n\tif (value === undefined || value === null) {\n\t\treturn undefined\n\t}\n\tif (/^\\d{1,10}$/.test(value)) {\n\t\treturn value\n\t}\n\tif (/^(?:Mon|Tue|Wed|Thu|Fri|Sat|Sun), \\d{2} (?:Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec) \\d{4} \\d{2}:\\d{2}:\\d{2} GMT$/.test(value)) {\n\t\treturn value\n\t}\n\treturn undefined\n}\n"],"names":[],"mappings":";;AA0BO,MAAM,qBAAqB,CAAC,WAA6C;AAC/E,MAAI,WAAW,KAAK;AACnB,WAAO,EAAE,MAAM,aAAa,YAAY,gBAAgB,UAAU,SAAS,UAAA;AAAA,EAC5E;AACA,MAAI,WAAW,KAAK;AACnB,WAAO,EAAE,MAAM,aAAa,YAAY,aAAa,UAAU,SAAS,UAAA;AAAA,EACzE;AACA,MAAI,WAAW,KAAK;AACnB,WAAO,EAAE,MAAM,aAAa,YAAY,aAAa,UAAU,SAAS,SAAA;AAAA,EACzE;AACA,MAAI,WAAW,KAAK;AACnB,WAAO,EAAE,MAAM,aAAa,YAAY,WAAW,UAAU,SAAS,UAAA;AAAA,EACvE;AACA,MAAI,WAAW,KAAK;AACnB,WAAO,EAAE,MAAM,YAAY,YAAY,YAAY,UAAU,SAAS,SAAA;AAAA,EACvE;AACA,MAAI,WAAW,KAAK;AACnB,WAAO,EAAE,MAAM,aAAa,YAAY,aAAa,UAAU,SAAS,UAAA;AAAA,EACzE;AACA,MAAI,WAAW,KAAK;AACnB,WAAO,EAAE,MAAM,aAAa,YAAY,gBAAgB,UAAU,SAAS,UAAA;AAAA,EAC5E;AACA,MAAI,UAAU,OAAO,UAAU,KAAK;AACnC,WAAO,EAAE,MAAM,aAAa,YAAY,gBAAgB,UAAU,SAAS,UAAA;AAAA,EAC5E;AACA,MAAI,UAAU,OAAO,UAAU,KAAK;AACnC,WAAO,EAAE,MAAM,SAAS,YAAY,eAAe,UAAU,SAAS,WAAA;AAAA,EACvE;AACA,SAAO,EAAE,MAAM,YAAY,YAAY,cAAc,UAAU,SAAS,cAAA;AACzE;AAGO,MAAM,uBAAuB,CACnC,UACA,SACA,UACc;AACd,QAAM,iBAAiB,mBAAmB,SAAS,MAAM;AACzD,SAAO,IAAI,SAAS,GAAG,QAAQ,OAAO,6BAA6B,SAAS,MAAM,IAAI;AAAA,IACrF,MAAM,GAAG,QAAQ,UAAU,IAAI,eAAe,UAAU;AAAA,IACxD,UAAU,eAAe;AAAA,IACzB,SAAS,cAAc,SAAS;AAAA,MAC/B,QAAQ,SAAS;AAAA,MACjB,YAAY,mBAAmB,SAAS,UAAU;AAAA,IAAA,CAClD;AAAA,IACD,OAAO,cAAc,OAAO,OAAO;AAAA,EAAA,CACnC;AACF;AAMO,MAAM,mBAAmB,CAAC,OAAgB,YAA6C;AAC7F,MAAI,iBAAiB,UAAU;AAC9B,WAAO;AAAA,EACR;AACA,MAAI,iBAAiB,oBAAoB;AACxC,WAAO,sBAAsB,OAAO,OAAO;AAAA,EAC5C;AACA,SAAO,IAAI,SAAS,GAAG,QAAQ,OAAO,kCAAkC;AAAA,IACvE,MAAM,GAAG,QAAQ,UAAU;AAAA,IAC3B,UAAU,SAAS;AAAA,IACnB,SAAS,cAAc,SAAS,EAAE,QAAQ,MAAM;AAAA,IAChD,OAAO,cAAc,OAAO,OAAO;AAAA,EAAA,CACnC;AACF;AASA,MAAM,wBAAwB,CAAC,OAA2B,YAA6C;AACtG,QAAM,eAAe,oBAAoB,KAAK;AAC9C,QAAM,WAAW,qBAAqB,YAAY;AAClD,MAAI,aAAa,MAAM;AACtB,WAAO,mBAAmB,OAAO,SAAS,QAAQ;AAAA,EACnD;AAEA,MAAI,MAAM,SAAS,WAAW;AAC7B,WAAO;AAAA,MACN;AAAA,MACA;AAAA,MACA,EAAE,MAAM,aAAa,YAAY,WAAW,UAAU,SAAS,UAAA;AAAA,IAAU;AAAA,EAE3E;AACA,MAAI,MAAM,SAAS,iBAAiB;AACnC,WAAO;AAAA,MACN;AAAA,MACA;AAAA,MACA,EAAE,MAAM,aAAa,YAAY,eAAe,UAAU,SAAS,UAAA;AAAA,IAAU;AAAA,EAE/E;AACA,MAAI,MAAM,SAAS,yBAAyB;AAC3C,WAAO;AAAA,MACN;AAAA,MACA;AAAA,MACA,EAAE,MAAM,YAAY,YAAY,oBAAoB,UAAU,SAAS,cAAA;AAAA,IAAc;AAAA,EAEvF;AACA,MAAI,MAAM,aAAa,UAAa,MAAM,SAAS,UAAU,KAAK;AACjE,WAAO,mBAAmB,OAAO,SAAS,mBAAmB,MAAM,SAAS,MAAM,CAAC;AAAA,EACpF;AACA,MAAI,MAAM,SAAS,gBAAgB;AAClC,WAAO;AAAA,MACN;AAAA,MACA;AAAA,MACA,EAAE,MAAM,aAAa,YAAY,gBAAgB,UAAU,SAAS,UAAA;AAAA,IAAU;AAAA,EAEhF;AACA,MAAI,MAAM,SAAS,gBAAgB;AAClC,WAAO;AAAA,MACN;AAAA,MACA;AAAA,MACA,EAAE,MAAM,aAAa,YAAY,gBAAgB,UAAU,SAAS,UAAA;AAAA,IAAU;AAAA,EAEhF;AACA,MAAI,MAAM,SAAS,aAAa;AAC/B,WAAO;AAAA,MACN;AAAA,MACA;AAAA,MACA,EAAE,MAAM,aAAa,YAAY,aAAa,UAAU,SAAS,UAAA;AAAA,IAAU;AAAA,EAE7E;AACA,SAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA,EAAE,MAAM,SAAS,YAAY,MAAM,SAAS,gBAAgB,gBAAgB,SAAS,UAAU,SAAS,WAAA;AAAA,EAAW;AAErH;AAEA,MAAM,qBAAqB,CAC1B,OACA,SACA,mBAEA,IAAI,SAAS,GAAG,QAAQ,OAAO,oBAAoB,gBAAgB,eAAe,IAAI,CAAC,IAAI;AAAA,EAC1F,MAAM,GAAG,QAAQ,UAAU,IAAI,eAAe,UAAU;AAAA,EACxD,UAAU,eAAe;AAAA,EACzB,SAAS;AAAA,IACR,EAAE,GAAG,SAAS,KAAK,MAAM,QAAQ,IAAA;AAAA,IACjC;AAAA,MACC,MAAM,MAAM;AAAA,MACZ,QAAQ,MAAM,UAAU,UAAU;AAAA,MAClC,YAAY,mBAAmB,MAAM,UAAU,QAAQ,IAAI,aAAa,CAAC;AAAA,IAAA;AAAA,EAC1E;AAAA,EAED,OAAO,cAAc,OAAO,OAAO;AACpC,CAAC;AAEF,MAAM,kBAAkB,CAAC,SAAgC;AACxD,UAAQ,MAAA;AAAA,IACP,KAAK;AACJ,aAAO;AAAA,IACR,KAAK;AACJ,aAAO;AAAA,IACR,KAAK;AACJ,aAAO;AAAA,IACR,KAAK;AACJ,aAAO;AAAA,IACR,KAAK;AACJ,aAAO;AAAA,IACR,KAAK;AACJ,aAAO;AAAA,EAAA;AAEV;AAEA,MAAM,uCAAuB,IAAI,CAAC,kBAAkB,aAAa,mBAAmB,cAAc,CAAC;AACnG,MAAM,qBAAqB,oBAAI,IAAI,CAAC,yBAAyB,qBAAqB,CAAC;AAEnF,MAAM,uBAAuB,CAAC,UAA8D;AAC3F,MAAI,MAAM,KAAK,CAAA,SAAQ,iBAAiB,IAAI,IAAI,CAAC,GAAG;AACnD,WAAO,EAAE,MAAM,aAAa,YAAY,aAAa,UAAU,SAAS,UAAA;AAAA,EACzE;AACA,MAAI,MAAM,KAAK,CAAA,SAAQ,mBAAmB,IAAI,IAAI,CAAC,GAAG;AACrD,WAAO,EAAE,MAAM,aAAa,YAAY,gBAAgB,UAAU,SAAS,UAAA;AAAA,EAC5E;AACA,SAAO;AACR;AAEA,MAAM,sBAAsB,CAAC,UAAiD;AAC7E,QAAM,SAA6B,MAAM,UAAU,CAAA;AACnD,SAAO,OAAO,QAAQ,CAAA,UAAS;AAC9B,QAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,EAAE,gBAAgB,QAAQ;AAC5E,aAAO,CAAA;AAAA,IACR;AACA,UAAM,aAAa,MAAM;AACzB,QAAI,OAAO,eAAe,YAAY,eAAe,QAAQ,EAAE,UAAU,eAAe,OAAO,WAAW,SAAS,UAAU;AAC5H,aAAO,CAAA;AAAA,IACR;AACA,WAAO,CAAC,WAAW,IAAI;AAAA,EACxB,CAAC;AACF;AAEA,MAAM,gBAAgB,CACrB,SACA,WAC2B;AAC3B,QAAM,UAAU,QAAQ,QAAQ,SAAY,SAAY,YAAY,QAAQ,GAAG;AAC/E,SAAO;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,GAAI,OAAO,SAAS,SAAY,CAAA,IAAK,EAAE,MAAM,OAAO,KAAA;AAAA,IACpD,GAAI,YAAY,SAAY,CAAA,IAAK,EAAE,KAAK,QAAA;AAAA,IACxC,GAAI,OAAO,eAAe,SAAY,CAAA,IAAK,EAAE,YAAY,OAAO,WAAA;AAAA,EAAW;AAE7E;AAEA,MAAM,cAAc,CAAC,UAAsC;AAC1D,MAAI;AACH,UAAM,MAAM,IAAI,IAAI,KAAK;AACzB,WAAO,GAAG,IAAI,QAAQ,KAAK,IAAI,IAAI,GAAG,IAAI,QAAQ;AAAA,EACnD,QAAQ;AACP,WAAO;AAAA,EACR;AACD;AAEA,MAAM,gBAAgB,CAAC,OAAgB,YACtC,UAAU,SAAY,SAAY,IAAI,MAAM,GAAG,QAAQ,OAAO,oBAAoB;AAEnF,MAAM,qBAAqB,CAAC,UAAyD;AACpF,MAAI,UAAU,UAAa,UAAU,MAAM;AAC1C,WAAO;AAAA,EACR;AACA,MAAI,aAAa,KAAK,KAAK,GAAG;AAC7B,WAAO;AAAA,EACR;AACA,MAAI,2HAA2H,KAAK,KAAK,GAAG;AAC3I,WAAO;AAAA,EACR;AACA,SAAO;AACR;"}

package/dist/development/src/lib/maskToken.cjs

@@ -1,5 +1,11 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const maskToken = (token) => token.replace(/^(\w{3}).+(\w{3})$/, "$1***$2");
+const recognizableToken = /^[A-Za-z0-9._~-]{12,}$/;
+const maskToken = (token) => {
+  if (!recognizableToken.test(token)) {
+    return "***";
+  }
+  return `${token.slice(0, 3)}***${token.slice(-3)}`;
+};
 exports.maskToken = maskToken;
 //# sourceMappingURL=maskToken.cjs.map