@cporter/sdk 0.1.0

package/README.md

@@ -0,0 +1,63 @@
+# @cporter/sdk
+
+Official TypeScript SDK for the [cPorter](../../README.md) deploy API. This is the shared
+core that [`@cporter/cli`](../cli), the [GitHub Action](../github-action), and the
+[MCP server](../mcp) are all built on — use it directly for programmatic deploys.
+
+Node ≥ 20, zero runtime dependencies (uses the platform `fetch`).
+
+## Install
+
+```bash
+pnpm add @cporter/sdk
+```
+
+## Usage
+
+```ts
+import { CporterClient, isSuccess } from '@cporter/sdk';
+
+const client = new CporterClient({
+  host: 'https://deploy.example.com',
+  token: process.env.CPORTER_TOKEN!, // cpk_…
+});
+
+// Verify the key first (optional)
+console.log(await client.whoami());
+
+// Upload + deploy (auto single/chunked by size), then wait for the result
+const deployment = await client.deployAndWait('my-site', {
+  artifactPath: './out.zip',
+  version: 'v1.2.3',
+  onProgress: (p) => console.log(p.phase),
+});
+
+if (!isSuccess(deployment.status)) {
+  throw new Error(`Deploy failed: ${deployment.status}`);
+}
+
+// Roll back to the previous release
+await client.rollback('my-site');
+```
+
+## API
+
+| Method | Purpose |
+| --- | --- |
+| `whoami()` | Verify the token; returns name, scopes, project binding. |
+| `deploy(project, opts)` | Upload artifact + create deployment. Picks single vs chunked upload by size. Returns the created (non-terminal) deployment. |
+| `waitForDeployment(project, id, opts)` | Poll until terminal (`success`/`failed`/`rolled_back`) or timeout. |
+| `deployAndWait(project, opts)` | `deploy` + `waitForDeployment` in one call. |
+| `getDeployment(project, id)` | Fetch current status. |
+| `rollback(project, { releaseId? })` | Roll back to previous or a given release. |
+
+Key behaviours:
+
+- **Integrity**: the SHA-256 is streamed from disk and sent as `sha256`; the server rejects
+  a mismatch with HTTP 422.
+- **Idempotency**: `idempotencyKey` defaults to the artifact SHA-256, so retrying the same
+  build returns the existing deployment instead of duplicating it.
+- **Large artifacts**: files over `chunkThresholdBytes` (default 100 MB) upload in chunks
+  automatically; force it with `chunked: true`.
+- **Errors**: non-2xx throws `CporterApiError` (`.status`, `.apiError`, `.body`); a poll
+  timeout throws `DeploymentTimeoutError`.

package/dist/client.d.ts

@@ -0,0 +1,99 @@
+import { type Deployment, type WhoAmI } from './types.js';
+export interface CporterClientOptions {
+    /** Base origin of the cPorter instance, e.g. `https://deploy.example.com`. */
+    host: string;
+    /** API key (`cpk_…`) — sent as a Bearer token. */
+    token: string;
+    /** API path prefix. Defaults to `/api/v1`. */
+    apiPrefix?: string;
+    /** Injectable fetch (for testing / custom agents). Defaults to global `fetch`. */
+    fetch?: typeof fetch;
+}
+export type UploadPhase = 'hashing' | 'uploading' | 'chunk' | 'complete';
+export interface UploadProgress {
+    phase: UploadPhase;
+    /** Bytes uploaded so far (chunked uploads only). */
+    uploadedBytes?: number;
+    totalBytes?: number;
+    /** 0-based index of the chunk just sent (chunked uploads only). */
+    chunkIndex?: number;
+    chunkCount?: number;
+}
+export interface DeployOptions {
+    /** Path to the artifact `.zip` on disk. */
+    artifactPath: string;
+    /** Optional human version label; the server falls back to the generated release id. */
+    version?: string;
+    /** Precomputed lowercase-hex SHA-256. Computed from the file when omitted. */
+    sha256?: string;
+    /**
+     * Idempotency key — replaying the same key returns the existing deployment (HTTP 200)
+     * instead of creating a new one. Defaults to the artifact's SHA-256.
+     */
+    idempotencyKey?: string;
+    /** Force chunked upload regardless of size. */
+    chunked?: boolean;
+    /** Size above which chunked upload is used automatically. */
+    chunkThresholdBytes?: number;
+    /** Chunk size for chunked uploads. */
+    chunkSizeBytes?: number;
+    onProgress?: (progress: UploadProgress) => void;
+    signal?: AbortSignal;
+}
+export interface WaitOptions {
+    /** Poll interval in ms. Default 3000. */
+    intervalMs?: number;
+    /** Give up after this many ms. Default 600000 (10 min). */
+    timeoutMs?: number;
+    /** Called on each poll with the latest deployment. */
+    onUpdate?: (deployment: Deployment) => void;
+    signal?: AbortSignal;
+}
+export interface RollbackOptions {
+    /** Target release id. Omit to roll back to the previous release. */
+    releaseId?: number;
+    signal?: AbortSignal;
+}
+/**
+ * Client for the cPorter deploy API. Wraps authentication, artifact upload (single or
+ * chunked), status polling, and rollback so callers never touch the raw HTTP contract.
+ *
+ * @example
+ * const client = new CporterClient({ host: 'https://deploy.example.com', token: 'cpk_…' });
+ * const dep = await client.deploy('my-site', { artifactPath: './out.zip' });
+ * const done = await client.waitForDeployment('my-site', dep.id);
+ */
+export declare class CporterClient {
+    private readonly baseUrl;
+    private readonly token;
+    private readonly fetchImpl;
+    constructor(options: CporterClientOptions);
+    /** Verify the token and inspect its scopes / project binding. */
+    whoami(signal?: AbortSignal): Promise<WhoAmI>;
+    /**
+     * Upload an artifact and create a deployment. Automatically picks single-request or
+     * chunked upload based on file size (override with `chunked` / `chunkThresholdBytes`).
+     * Returns the created deployment (still `queued`/`running`) — poll with
+     * {@link waitForDeployment} to await the terminal status.
+     */
+    deploy(project: string, options: DeployOptions): Promise<Deployment>;
+    private deploySingle;
+    private deployChunked;
+    /** Fetch a single deployment's current state. */
+    getDeployment(project: string, deploymentId: number, signal?: AbortSignal): Promise<Deployment>;
+    /**
+     * Poll a deployment until it reaches a terminal status (`success`/`failed`/`rolled_back`)
+     * or the timeout elapses. Returns the terminal deployment — inspect `.status` to tell
+     * success from failure; throws {@link DeploymentTimeoutError} on timeout.
+     */
+    waitForDeployment(project: string, deploymentId: number, options?: WaitOptions): Promise<Deployment>;
+    /** Convenience: deploy and wait for the result in one call. */
+    deployAndWait(project: string, options: DeployOptions & {
+        wait?: WaitOptions;
+    }): Promise<Deployment>;
+    /** Roll the project back to the previous (or a specified) release. */
+    rollback(project: string, options?: RollbackOptions): Promise<Deployment>;
+    /** Low-level request helper: attaches auth, parses `{ data }`, throws on non-2xx. */
+    private request;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAMA,OAAO,EAAc,KAAK,UAAU,EAAE,KAAK,MAAM,EAAE,MAAM,YAAY,CAAC;AAOtE,MAAM,WAAW,oBAAoB;IACnC,8EAA8E;IAC9E,IAAI,EAAE,MAAM,CAAC;IACb,kDAAkD;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,WAAW,GAAG,OAAO,GAAG,UAAU,CAAC;AAEzE,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,WAAW,CAAC;IACnB,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,2CAA2C;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,uFAAuF;IACvF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,6DAA6D;IAC7D,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,sCAAsC;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,cAAc,KAAK,IAAI,CAAC;IAChD,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,yCAAyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,UAAU,KAAK,IAAI,CAAC;IAC5C,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAoBD;;;;;;;;GAQG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAE7B,OAAO,EAAE,oBAAoB;IAazC,iEAAiE;IAC3D,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;IAInD;;;;;OAKG;IACG,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC;YAe5D,YAAY;YAwBZ,aAAa;IAyD3B,iDAAiD;IAC3C,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IAQrG;;;;OAIG;IACG,iBAAiB,CACrB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,WAAgB,GACxB,OAAO,CAAC,UAAU,CAAC;IAmBtB,+DAA+D;IACzD,aAAa,CACjB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,aAAa,GAAG;QAAE,IAAI,CAAC,EAAE,WAAW,CAAA;KAAE,GAC9C,OAAO,CAAC,UAAU,CAAC;IAKtB,sEAAsE;IAChE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB,GAAG,OAAO,CAAC,UAAU,CAAC;IAUnF,qFAAqF;YACvE,OAAO;CA8BtB"}

package/dist/client.js

@@ -0,0 +1,207 @@
+import { openAsBlob } from 'node:fs';
+import { open, stat } from 'node:fs/promises';
+import { basename } from 'node:path';
+import { CporterApiError, DeploymentTimeoutError } from './errors.js';
+import { sha256File } from './hash.js';
+import { isTerminal } from './types.js';
+/** Default: artifacts larger than this are uploaded in chunks instead of one request. */
+const DEFAULT_CHUNK_THRESHOLD_BYTES = 100 * 1024 * 1024; // 100 MB
+/** Default size of each raw chunk in a chunked upload. */
+const DEFAULT_CHUNK_SIZE_BYTES = 8 * 1024 * 1024; // 8 MB
+function sleep(ms, signal) {
+    return new Promise((resolve, reject) => {
+        if (signal?.aborted) {
+            reject(signal.reason ?? new Error('Aborted'));
+            return;
+        }
+        const timer = setTimeout(() => {
+            signal?.removeEventListener('abort', onAbort);
+            resolve();
+        }, ms);
+        const onAbort = () => {
+            clearTimeout(timer);
+            reject(signal?.reason ?? new Error('Aborted'));
+        };
+        signal?.addEventListener('abort', onAbort, { once: true });
+    });
+}
+/**
+ * Client for the cPorter deploy API. Wraps authentication, artifact upload (single or
+ * chunked), status polling, and rollback so callers never touch the raw HTTP contract.
+ *
+ * @example
+ * const client = new CporterClient({ host: 'https://deploy.example.com', token: 'cpk_…' });
+ * const dep = await client.deploy('my-site', { artifactPath: './out.zip' });
+ * const done = await client.waitForDeployment('my-site', dep.id);
+ */
+export class CporterClient {
+    baseUrl;
+    token;
+    fetchImpl;
+    constructor(options) {
+        if (!options.host)
+            throw new Error('CporterClient: `host` is required.');
+        if (!options.token)
+            throw new Error('CporterClient: `token` is required.');
+        const host = options.host.replace(/\/+$/, '');
+        const prefix = (options.apiPrefix ?? '/api/v1').replace(/\/+$/, '');
+        this.baseUrl = `${host}${prefix}`;
+        this.token = options.token;
+        this.fetchImpl = options.fetch ?? globalThis.fetch;
+        if (typeof this.fetchImpl !== 'function') {
+            throw new Error('CporterClient: no global `fetch` available (Node >= 20 required).');
+        }
+    }
+    /** Verify the token and inspect its scopes / project binding. */
+    async whoami(signal) {
+        return this.request('GET', '/whoami', { signal });
+    }
+    /**
+     * Upload an artifact and create a deployment. Automatically picks single-request or
+     * chunked upload based on file size (override with `chunked` / `chunkThresholdBytes`).
+     * Returns the created deployment (still `queued`/`running`) — poll with
+     * {@link waitForDeployment} to await the terminal status.
+     */
+    async deploy(project, options) {
+        const { size } = await stat(options.artifactPath);
+        options.onProgress?.({ phase: 'hashing', totalBytes: size });
+        const sha256 = options.sha256 ?? (await sha256File(options.artifactPath));
+        const idempotencyKey = options.idempotencyKey ?? sha256;
+        const threshold = options.chunkThresholdBytes ?? DEFAULT_CHUNK_THRESHOLD_BYTES;
+        const useChunked = options.chunked ?? size > threshold;
+        return useChunked
+            ? this.deployChunked(project, options, sha256, idempotencyKey, size)
+            : this.deploySingle(project, options, sha256, idempotencyKey, size);
+    }
+    async deploySingle(project, options, sha256, idempotencyKey, size) {
+        options.onProgress?.({ phase: 'uploading', totalBytes: size, uploadedBytes: 0 });
+        const blob = await openAsBlob(options.artifactPath);
+        const form = new FormData();
+        form.append('artifact', blob, basename(options.artifactPath));
+        form.append('sha256', sha256);
+        if (options.version)
+            form.append('version', options.version);
+        const deployment = await this.request('POST', `/projects/${encodeURIComponent(project)}/deployments`, { body: form, headers: { 'Idempotency-Key': idempotencyKey }, signal: options.signal });
+        options.onProgress?.({ phase: 'complete', totalBytes: size, uploadedBytes: size });
+        return deployment;
+    }
+    async deployChunked(project, options, sha256, idempotencyKey, size) {
+        const chunkSize = options.chunkSizeBytes ?? DEFAULT_CHUNK_SIZE_BYTES;
+        const chunkCount = Math.max(1, Math.ceil(size / chunkSize));
+        const base = `/projects/${encodeURIComponent(project)}/artifacts/uploads`;
+        const { upload_id: uploadId } = await this.request('POST', base, {
+            signal: options.signal,
+        });
+        let handle;
+        try {
+            handle = await open(options.artifactPath, 'r');
+            const buffer = Buffer.allocUnsafe(chunkSize);
+            let uploadedBytes = 0;
+            for (let index = 0; index < chunkCount; index++) {
+                const { bytesRead } = await handle.read(buffer, 0, chunkSize, index * chunkSize);
+                // Copy the exact slice — the shared buffer may be larger than the last chunk.
+                const chunk = Uint8Array.prototype.slice.call(buffer, 0, bytesRead);
+                await this.request('PUT', `${base}/${uploadId}/chunks/${index}`, {
+                    body: chunk,
+                    headers: { 'Content-Type': 'application/octet-stream' },
+                    signal: options.signal,
+                });
+                uploadedBytes += bytesRead;
+                options.onProgress?.({
+                    phase: 'chunk',
+                    chunkIndex: index,
+                    chunkCount,
+                    uploadedBytes,
+                    totalBytes: size,
+                });
+            }
+        }
+        finally {
+            await handle?.close();
+        }
+        const body = { sha256 };
+        if (options.version)
+            body.version = options.version;
+        const deployment = await this.request('POST', `${base}/${uploadId}/complete`, {
+            body: JSON.stringify(body),
+            headers: { 'Content-Type': 'application/json', 'Idempotency-Key': idempotencyKey },
+            signal: options.signal,
+        });
+        options.onProgress?.({ phase: 'complete', totalBytes: size, uploadedBytes: size });
+        return deployment;
+    }
+    /** Fetch a single deployment's current state. */
+    async getDeployment(project, deploymentId, signal) {
+        return this.request('GET', `/projects/${encodeURIComponent(project)}/deployments/${deploymentId}`, { signal });
+    }
+    /**
+     * Poll a deployment until it reaches a terminal status (`success`/`failed`/`rolled_back`)
+     * or the timeout elapses. Returns the terminal deployment — inspect `.status` to tell
+     * success from failure; throws {@link DeploymentTimeoutError} on timeout.
+     */
+    async waitForDeployment(project, deploymentId, options = {}) {
+        const intervalMs = options.intervalMs ?? 3000;
+        const timeoutMs = options.timeoutMs ?? 600_000;
+        const deadline = Date.now() + timeoutMs;
+        let latest = await this.getDeployment(project, deploymentId, options.signal);
+        options.onUpdate?.(latest);
+        while (!isTerminal(latest.status)) {
+            if (Date.now() >= deadline) {
+                throw new DeploymentTimeoutError(deploymentId, latest.status, timeoutMs);
+            }
+            await sleep(intervalMs, options.signal);
+            latest = await this.getDeployment(project, deploymentId, options.signal);
+            options.onUpdate?.(latest);
+        }
+        return latest;
+    }
+    /** Convenience: deploy and wait for the result in one call. */
+    async deployAndWait(project, options) {
+        const created = await this.deploy(project, options);
+        return this.waitForDeployment(project, created.id, options.wait);
+    }
+    /** Roll the project back to the previous (or a specified) release. */
+    async rollback(project, options = {}) {
+        const body = {};
+        if (options.releaseId != null)
+            body.release_id = options.releaseId;
+        return this.request('POST', `/projects/${encodeURIComponent(project)}/rollback`, {
+            body: JSON.stringify(body),
+            headers: { 'Content-Type': 'application/json' },
+            signal: options.signal,
+        });
+    }
+    /** Low-level request helper: attaches auth, parses `{ data }`, throws on non-2xx. */
+    async request(method, path, init = {}) {
+        const url = `${this.baseUrl}${path}`;
+        const response = await this.fetchImpl(url, {
+            method,
+            headers: {
+                Authorization: `Bearer ${this.token}`,
+                Accept: 'application/json',
+                ...init.headers,
+            },
+            body: init.body,
+            signal: init.signal,
+        });
+        const text = await response.text();
+        const parsed = text ? safeJsonParse(text) : undefined;
+        if (!response.ok) {
+            throw new CporterApiError(response.status, parsed ?? text, `${method} ${path}`);
+        }
+        // The API wraps successful payloads in `{ data: ... }`.
+        if (parsed && typeof parsed === 'object' && 'data' in parsed) {
+            return parsed.data;
+        }
+        return parsed;
+    }
+}
+function safeJsonParse(text) {
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return text;
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAmB,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,UAAU,EAAgC,MAAM,YAAY,CAAC;AAEtE,yFAAyF;AACzF,MAAM,6BAA6B,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,SAAS;AAClE,0DAA0D;AAC1D,MAAM,wBAAwB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;AA+DzD,SAAS,KAAK,CAAC,EAAU,EAAE,MAAoB;IAC7C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,aAAa;IACP,OAAO,CAAS;IAChB,KAAK,CAAS;IACd,SAAS,CAAe;IAEzC,YAAY,OAA6B;QACvC,IAAI,CAAC,OAAO,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACzE,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,OAAO,GAAG,GAAG,IAAI,GAAG,MAAM,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QACnD,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,KAAK,CAAC,MAAM,CAAC,MAAoB;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAS,KAAK,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,OAAsB;QAClD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAElD,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QAC1E,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,MAAM,CAAC;QAExD,MAAM,SAAS,GAAG,OAAO,CAAC,mBAAmB,IAAI,6BAA6B,CAAC;QAC/E,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,GAAG,SAAS,CAAC;QAEvD,OAAO,UAAU;YACf,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC;YACpE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACxE,CAAC;IAEO,KAAK,CAAC,YAAY,CACxB,OAAe,EACf,OAAsB,EACtB,MAAc,EACd,cAAsB,EACtB,IAAY;QAEZ,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;QAEjF,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9B,IAAI,OAAO,CAAC,OAAO;YAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAE7D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CACnC,MAAM,EACN,aAAa,kBAAkB,CAAC,OAAO,CAAC,cAAc,EACtD,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CACvF,CAAC;QACF,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACnF,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,OAAe,EACf,OAAsB,EACtB,MAAc,EACd,cAAsB,EACtB,IAAY;QAEZ,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC;QACrE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,aAAa,kBAAkB,CAAC,OAAO,CAAC,oBAAoB,CAAC;QAE1E,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAwB,MAAM,EAAE,IAAI,EAAE;YACtF,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;QAEH,IAAI,MAA8B,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YAC7C,IAAI,aAAa,GAAG,CAAC,CAAC;YACtB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC;gBAChD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,GAAG,SAAS,CAAC,CAAC;gBACjF,8EAA8E;gBAC9E,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;gBACpE,MAAM,IAAI,CAAC,OAAO,CAChB,KAAK,EACL,GAAG,IAAI,IAAI,QAAQ,WAAW,KAAK,EAAE,EACrC;oBACE,IAAI,EAAE,KAAK;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE;oBACvD,MAAM,EAAE,OAAO,CAAC,MAAM;iBACvB,CACF,CAAC;gBACF,aAAa,IAAI,SAAS,CAAC;gBAC3B,OAAO,CAAC,UAAU,EAAE,CAAC;oBACnB,KAAK,EAAE,OAAO;oBACd,UAAU,EAAE,KAAK;oBACjB,UAAU;oBACV,aAAa;oBACb,UAAU,EAAE,IAAI;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC;QACxB,CAAC;QAED,MAAM,IAAI,GAA2B,EAAE,MAAM,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QACpD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAa,MAAM,EAAE,GAAG,IAAI,IAAI,QAAQ,WAAW,EAAE;YACxF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,cAAc,EAAE;YAClF,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;QACH,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACnF,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,aAAa,CAAC,OAAe,EAAE,YAAoB,EAAE,MAAoB;QAC7E,OAAO,IAAI,CAAC,OAAO,CACjB,KAAK,EACL,aAAa,kBAAkB,CAAC,OAAO,CAAC,gBAAgB,YAAY,EAAE,EACtE,EAAE,MAAM,EAAE,CACX,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CACrB,OAAe,EACf,YAAoB,EACpB,UAAuB,EAAE;QAEzB,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC;QAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAExC,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7E,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;QAE3B,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,IAAI,sBAAsB,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAC3E,CAAC;YACD,MAAM,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACxC,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACzE,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,+DAA+D;IAC/D,KAAK,CAAC,aAAa,CACjB,OAAe,EACf,OAA+C;QAE/C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,QAAQ,CAAC,OAAe,EAAE,UAA2B,EAAE;QAC3D,MAAM,IAAI,GAA2B,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI;YAAE,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QACnE,OAAO,IAAI,CAAC,OAAO,CAAa,MAAM,EAAE,aAAa,kBAAkB,CAAC,OAAO,CAAC,WAAW,EAAE;YAC3F,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;IACL,CAAC;IAED,qFAAqF;IAC7E,KAAK,CAAC,OAAO,CACnB,MAAc,EACd,IAAY,EACZ,OAA0G,EAAE;QAE5G,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;YACzC,MAAM;YACN,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;gBACrC,MAAM,EAAE,kBAAkB;gBAC1B,GAAG,IAAI,CAAC,OAAO;aAChB;YACD,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,MAAM,GAAY,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE/D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,wDAAwD;QACxD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;YAC7D,OAAQ,MAAsB,CAAC,IAAI,CAAC;QACtC,CAAC;QACD,OAAO,MAAW,CAAC;IACrB,CAAC;CACF;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Error raised when the API returns a non-2xx response. Carries the HTTP status and the
+ * parsed body so callers can branch on, e.g., a 422 hash mismatch (`expected`/`actual`)
+ * or a 403 project-scope denial.
+ */
+export declare class CporterApiError extends Error {
+    readonly status: number;
+    readonly body: unknown;
+    /** Convenience: the `error` field the API puts on failures, when present. */
+    readonly apiError: string | undefined;
+    constructor(status: number, body: unknown, requestSummary: string);
+}
+/** Raised when a deployment does not reach a terminal status within the poll timeout. */
+export declare class DeploymentTimeoutError extends Error {
+    readonly deploymentId: number;
+    readonly lastStatus: string;
+    constructor(deploymentId: number, lastStatus: string, timeoutMs: number);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;gBAE1B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM;CAWlE;AAED,yFAAyF;AACzF,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAEhB,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAQxE"}

package/dist/errors.js

@@ -0,0 +1,33 @@
+/**
+ * Error raised when the API returns a non-2xx response. Carries the HTTP status and the
+ * parsed body so callers can branch on, e.g., a 422 hash mismatch (`expected`/`actual`)
+ * or a 403 project-scope denial.
+ */
+export class CporterApiError extends Error {
+    status;
+    body;
+    /** Convenience: the `error` field the API puts on failures, when present. */
+    apiError;
+    constructor(status, body, requestSummary) {
+        const apiError = body && typeof body === 'object' && 'error' in body && typeof body.error === 'string'
+            ? body.error
+            : undefined;
+        super(`cPorter API ${status} on ${requestSummary}${apiError ? `: ${apiError}` : ''}`);
+        this.name = 'CporterApiError';
+        this.status = status;
+        this.body = body;
+        this.apiError = apiError;
+    }
+}
+/** Raised when a deployment does not reach a terminal status within the poll timeout. */
+export class DeploymentTimeoutError extends Error {
+    deploymentId;
+    lastStatus;
+    constructor(deploymentId, lastStatus, timeoutMs) {
+        super(`Deployment #${deploymentId} did not finish within ${timeoutMs}ms (last status: ${lastStatus}).`);
+        this.name = 'DeploymentTimeoutError';
+        this.deploymentId = deploymentId;
+        this.lastStatus = lastStatus;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAC/B,MAAM,CAAS;IACf,IAAI,CAAU;IACvB,6EAA6E;IACpE,QAAQ,CAAqB;IAEtC,YAAY,MAAc,EAAE,IAAa,EAAE,cAAsB;QAC/D,MAAM,QAAQ,GACZ,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,IAAI,OAAQ,IAA2B,CAAC,KAAK,KAAK,QAAQ;YAC3G,CAAC,CAAE,IAA0B,CAAC,KAAK;YACnC,CAAC,CAAC,SAAS,CAAC;QAChB,KAAK,CAAC,eAAe,MAAM,OAAO,cAAc,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtF,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAED,yFAAyF;AACzF,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,YAAY,CAAS;IACrB,UAAU,CAAS;IAE5B,YAAY,YAAoB,EAAE,UAAkB,EAAE,SAAiB;QACrE,KAAK,CACH,eAAe,YAAY,0BAA0B,SAAS,oBAAoB,UAAU,IAAI,CACjG,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF"}

package/dist/hash.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Compute the lowercase hex SHA-256 of a file by streaming it — never loads the whole
+ * artifact into memory. This is the digest the API verifies against (`sha256` field);
+ * the CLI also reuses it as the default Idempotency-Key.
+ */
+export declare function sha256File(path: string): Promise<string>;
+//# sourceMappingURL=hash.d.ts.map

package/dist/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../src/hash.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAQxD"}

package/dist/hash.js

@@ -0,0 +1,17 @@
+import { createHash } from 'node:crypto';
+import { createReadStream } from 'node:fs';
+/**
+ * Compute the lowercase hex SHA-256 of a file by streaming it — never loads the whole
+ * artifact into memory. This is the digest the API verifies against (`sha256` field);
+ * the CLI also reuses it as the default Idempotency-Key.
+ */
+export function sha256File(path) {
+    return new Promise((resolve, reject) => {
+        const hash = createHash('sha256');
+        const stream = createReadStream(path);
+        stream.on('error', reject);
+        stream.on('data', (chunk) => hash.update(chunk));
+        stream.on('end', () => resolve(hash.digest('hex')));
+    });
+}
+//# sourceMappingURL=hash.js.map

package/dist/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../src/hash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAE3C;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @cporter/sdk — official TypeScript SDK for the cPorter deploy API.
+ *
+ * This is the shared core that the CLI, GitHub Action, and MCP server are built on.
+ * @see https://github.com/ (project repo) and docs/SPEC.md for the underlying API.
+ */
+export { CporterClient } from './client.js';
+export type { CporterClientOptions, DeployOptions, WaitOptions, RollbackOptions, UploadProgress, UploadPhase, } from './client.js';
+export { CporterApiError, DeploymentTimeoutError } from './errors.js';
+export { sha256File } from './hash.js';
+export { TERMINAL_STATUSES, isTerminal, isSuccess, type Deployment, type DeploymentStatus, type DeploymentTrigger, type DeploymentStep, type Release, type WhoAmI, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,YAAY,EACV,oBAAoB,EACpB,aAAa,EACb,WAAW,EACX,eAAe,EACf,cAAc,EACd,WAAW,GACZ,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EACL,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,OAAO,EACZ,KAAK,MAAM,GACZ,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,11 @@
+/**
+ * @cporter/sdk — official TypeScript SDK for the cPorter deploy API.
+ *
+ * This is the shared core that the CLI, GitHub Action, and MCP server are built on.
+ * @see https://github.com/ (project repo) and docs/SPEC.md for the underlying API.
+ */
+export { CporterClient } from './client.js';
+export { CporterApiError, DeploymentTimeoutError } from './errors.js';
+export { sha256File } from './hash.js';
+export { TERMINAL_STATUSES, isTerminal, isSuccess, } from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAS5C,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EACL,iBAAiB,EACjB,UAAU,EACV,SAAS,GAOV,MAAM,YAAY,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Wire types mirroring the cPorter API contract (apps/api, docs/SPEC.md §5–§7).
+ * The API wraps every payload in `{ "data": ... }`; these describe the unwrapped `data`.
+ */
+/** Deployment pipeline lifecycle (App\Enums\DeploymentStatus). */
+export type DeploymentStatus = 'queued' | 'running' | 'hooks_pending' | 'success' | 'failed' | 'rolled_back';
+/** How a deployment was triggered (App\Enums\DeploymentTrigger). */
+export type DeploymentTrigger = 'api' | 'webhook' | 'manual';
+/** Terminal statuses — polling stops once a deployment reaches one of these. */
+export declare const TERMINAL_STATUSES: readonly ["success", "failed", "rolled_back"];
+/** True once the deployment has stopped progressing (mirrors DeploymentStatus::isTerminal). */
+export declare function isTerminal(status: DeploymentStatus): boolean;
+/** True only when the deployment finished successfully. */
+export declare function isSuccess(status: DeploymentStatus): boolean;
+export interface Release {
+    id: number;
+    project_id: number;
+    artifact_id: number | null;
+    version: string;
+    path: string;
+    state: string;
+    created_at?: string | null;
+    updated_at?: string | null;
+}
+/** One pipeline step as recorded on the deployment (shape is engine-defined; kept loose). */
+export interface DeploymentStep {
+    name?: string;
+    status?: string;
+    [key: string]: unknown;
+}
+export interface Deployment {
+    id: number;
+    project_id: number;
+    release_id: number | null;
+    trigger: DeploymentTrigger;
+    status: DeploymentStatus;
+    steps: DeploymentStep[] | null;
+    actor: string | null;
+    idempotency_key: string | null;
+    started_at: string | null;
+    finished_at: string | null;
+    created_at?: string | null;
+    updated_at?: string | null;
+    /** Loaded relation (the API returns `->load('release')`). */
+    release?: Release | null;
+}
+/** Response of `GET /whoami` — lets a client verify its token before deploying. */
+export interface WhoAmI {
+    name: string;
+    scopes: string[];
+    project_id: number | null;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,kEAAkE;AAClE,MAAM,MAAM,gBAAgB,GACxB,QAAQ,GACR,SAAS,GACT,eAAe,GACf,SAAS,GACT,QAAQ,GACR,aAAa,CAAC;AAElB,oEAAoE;AACpE,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE7D,gFAAgF;AAChF,eAAO,MAAM,iBAAiB,+CAAgD,CAAC;AAE/E,+FAA+F;AAC/F,wBAAgB,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAE5D;AAED,2DAA2D;AAC3D,wBAAgB,SAAS,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAE3D;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,6FAA6F;AAC7F,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,iBAAiB,CAAC;IAC3B,MAAM,EAAE,gBAAgB,CAAC;IACzB,KAAK,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IAC/B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,6DAA6D;IAC7D,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CAC1B;AAED,mFAAmF;AACnF,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B"}

package/dist/types.js

@@ -0,0 +1,15 @@
+/**
+ * Wire types mirroring the cPorter API contract (apps/api, docs/SPEC.md §5–§7).
+ * The API wraps every payload in `{ "data": ... }`; these describe the unwrapped `data`.
+ */
+/** Terminal statuses — polling stops once a deployment reaches one of these. */
+export const TERMINAL_STATUSES = ['success', 'failed', 'rolled_back'];
+/** True once the deployment has stopped progressing (mirrors DeploymentStatus::isTerminal). */
+export function isTerminal(status) {
+    return TERMINAL_STATUSES.includes(status);
+}
+/** True only when the deployment finished successfully. */
+export function isSuccess(status) {
+    return status === 'success';
+}
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAcH,gFAAgF;AAChF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,aAAa,CAAU,CAAC;AAE/E,+FAA+F;AAC/F,MAAM,UAAU,UAAU,CAAC,MAAwB;IACjD,OAAQ,iBAAuC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACnE,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,SAAS,CAAC,MAAwB;IAChD,OAAO,MAAM,KAAK,SAAS,CAAC;AAC9B,CAAC"}

package/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "@cporter/sdk",
+  "version": "0.1.0",
+  "description": "Official TypeScript SDK for the cPorter deploy API — the shared core behind the CLI, GitHub Action, and MCP server.",
+  "type": "module",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ngocmy-spaces/cporter.git",
+    "directory": "packages/sdk"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "typescript": "^5.7.2"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  }
+}