@empire-builder-kit/nx 1.0.0-beta.9 → 1.0.0-rc.2

package/src/infrastructure-change/risk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk.js","sourceRoot":"","sources":["../../../../../packages/nx/src/infrastructure-change/risk.ts"],"names":[],"mappings":";;AA+TA,gEA8GC;AA7aD,sEAAyD;AAazD,MAAM,eAAe,GAAsD;IACzE,WAAW,EAAE,CAAC;IACd,mBAAmB,EAAE,CAAC;IACtB,mBAAmB,EAAE,CAAC;IACtB,uBAAuB,EAAE,CAAC;IAC1B,wBAAwB,EAAE,CAAC;IAC3B,yBAAyB,EAAE,CAAC;IAC5B,oBAAoB,EAAE,CAAC;IACvB,sBAAsB,EAAE,CAAC;IACzB,OAAO,EAAE,CAAC;CACX,CAAC;AAEF,MAAM,YAAY,GAEd;IACF,WAAW,EAAE,uBAAuB;IACpC,mBAAmB,EAAE,uBAAuB;IAC5C,mBAAmB,EAAE,QAAQ;IAC7B,uBAAuB,EAAE,QAAQ;IACjC,yBAAyB,EAAE,OAAO;IAClC,oBAAoB,EAAE,QAAQ;IAC9B,sBAAsB,EAAE,OAAO;IAC/B,wBAAwB,EAAE,QAAQ;IAClC,OAAO,EAAE,OAAO;CACjB,CAAC;AAEF,MAAM,qBAAqB,GACzB,kKAAkK,CAAC;AACrK,MAAM,gBAAgB,GACpB,iHAAiH,CAAC;AAEpH,SAAS,OAAO,CACd,SAAkC,EAClC,IAAY,EACZ,OAAe,EACf,QAA6C,EAC7C,YAAqB;IAErB,OAAO;QACL,KAAK,EAAE,SAAS;QAChB,IAAI;QACJ,WAAW,EAAE,YAAY,CAAC,SAAS,CAAC;QACpC,OAAO;QACP,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;QACvD,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;KACtE,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,SAAgD;IAEhD,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,oBAAoB;YACvB,OAAO,kDAAkD,CAAC;QAC5D,KAAK,sBAAsB;YACzB,OAAO,oDAAoD,CAAC;QAC9D,KAAK,wBAAwB;YAC3B,OAAO,6DAA6D,CAAC;QACvE,KAAK,SAAS;YACZ,OAAO,6DAA6D,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,QAA4C,EAC5C,MAAkC;IAElC,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACrC,OAAO;YACL,OAAO,CACL,SAAS,EACT,4BAA4B,EAC5B,kDAAkD,EAClD,QAAQ,CACT;SACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;QACtE,OAAO;YACL,OAAO,CACL,SAAS,EACT,uBAAuB,EACvB,6DAA6D,EAC7D,QAAQ,CACT;SACF,CAAC;IACJ,CAAC;IACD,IACE,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC;QACrE,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EACpD,CAAC;QACD,OAAO;YACL,OAAO,CACL,yBAAyB,EACzB,gCAAgC,EAChC,4CAA4C,EAC5C,QAAQ,CACT;SACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACvE,OAAO;YACL,OAAO,CACL,yBAAyB,EACzB,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,EACvE,sEAAsE,EACtE,QAAQ,CACT;SACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACjD,MAAM,aAAa,GAAG;YACpB,uBAAuB;YACvB,mBAAmB;YACnB,+BAA+B;SAChC,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAClC,OAAO;YACL,OAAO,CACL,oBAAoB,EACpB,aAAa;gBACX,CAAC,CAAC,4BAA4B;gBAC9B,CAAC,CAAC,gCAAgC,EACpC,aAAa;gBACX,CAAC,CAAC,4EAA4E;gBAC9E,CAAC,CAAC,oHAAoH,EACxH,QAAQ,CACT;YACD,GAAG,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS;gBAClC,CAAC,CAAC;oBACE,OAAO,CACL,uBAAuB,EACvB,0BAA0B,EAC1B,6DAA6D,EAC7D,QAAQ,CACT;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,QAAQ,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;YAC/C,OAAO;gBACL,OAAO,CACL,SAAS,EACT,8BAA8B,EAC9B,kFAAkF,EAClF,QAAQ,CACT;aACF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,CACL,uBAAuB,EACvB,uBAAuB,EACvB,8DAA8D,EAC9D,QAAQ,CACT;SACF,CAAC;IACJ,CAAC;IACD,MAAM,gBAAgB,GAAG,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;QACvE,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;YACvB,OAAO;gBACL,OAAO,CACL,SAAS,EACT,2BAA2B,EAC3B,2DAA2D,EAC3D,QAAQ,EACR,QAAQ,CAAC,IAAI,CACd;aACF,CAAC;QACJ,CAAC;QACD,IAAI,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,OAAO;gBACL,OAAO,CACL,SAAS,EACT,2BAA2B,EAC3B,gGAAgG,EAChG,QAAQ,EACR,QAAQ,CAAC,IAAI,CACd;aACF,CAAC;QACJ,CAAC;QACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,OAAO;gBACL,OAAO,CACL,wBAAwB,EACxB,4BAA4B,EAC5B,mDAAmD,EACnD,QAAQ,EACR,QAAQ,CAAC,IAAI,CACd;aACF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IACH,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,IACE,QAAQ,CAAC,SAAS,KAAK,QAAQ;QAC/B,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAC3D,CAAC;QACD,OAAO;YACL,OAAO,CACL,mBAAmB,EACnB,4BAA4B,EAC5B,yDAAyD,EACzD,QAAQ,CACT;SACF,CAAC;IACJ,CAAC;IACD,IACE,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;QACvD,CAAC,QAAQ,CAAC,SAAS,KAAK,QAAQ,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,EACpE,CAAC;QACD,OAAO;YACL,OAAO,CACL,wBAAwB,EACxB,+BAA+B,EAC/B,wDAAwD,EACxD,QAAQ,CACT;SACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO;YACL,OAAO,CACL,mBAAmB,EACnB,iBAAiB,EACjB,mEAAmE,EACnE,QAAQ,CACT;SACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAClC,OAAO;YACL,OAAO,CACL,mBAAmB,EACnB,eAAe,EACf,mEAAmE,EACnE,QAAQ,CACT;SACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,CACL,SAAS,EACT,gCAAgC,EAChC,iEAAiE,EACjE,QAAQ,CACT;KACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,UAAyC;IAEzC,IAAI,UAAU,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACrC,OAAO;YACL;gBACE,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,2BAA2B;gBACjC,WAAW,EAAE,OAAO;gBACpB,OAAO,EAAE,kDAAkD;gBAC3D,UAAU,EAAE,UAAU,CAAC,gBAAgB;aACxC;SACF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAkC,UAAU,CAAC,QAAQ;SAChE,MAAM,CACL,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAClB,WAAW,KAAK,OAAO,IAAI,WAAW,KAAK,kBAAkB,CAChE;SACA,GAAG,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9C,KAAK,EACH,WAAW,KAAK,kBAAkB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS;QACvE,IAAI,EAAE,uBAAuB,SAAS,EAAE;QACxC,WAAW,EAAE,OAAO;QACpB,OAAO,EACL,WAAW,KAAK,kBAAkB;YAChC,CAAC,CAAC,kDAAkD;YACpD,CAAC,CAAC,6DAA6D;QACnE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;QAC7D,UAAU,EAAE,UAAU,CAAC,gBAAgB;KACxC,CAAC,CAAC,CAAC;IACN,IAAI,UAAU,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QAC3C,QAAQ,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,oBAAoB;YAC3B,IAAI,EAAE,qBAAqB;YAC3B,WAAW,EAAE,QAAQ;YACrB,OAAO,EACL,oEAAoE;YACtE,UAAU,EAAE,UAAU,CAAC,gBAAgB;SACxC,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,UAAU,CAAC,YAAY,KAAK,iBAAiB,EAAE,CAAC;QACzD,QAAQ,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,4BAA4B;YAClC,WAAW,EAAE,OAAO;YACpB,OAAO,EAAE,gEAAgE;YACzE,UAAU,EAAE,UAAU,CAAC,gBAAgB;SACxC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,0BAA0B,CAAC,KAK1C;IACC,MAAM,QAAQ,GAAkC,EAAE,CAAC;IACnD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzB,QAAQ,CAAC,IAAI,CACX,OAAO,CACL,SAAS,EACT,iBAAiB,EACjB,iEAAiE,CAClE,CACF,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5C,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC;QAC/C,QAAQ,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC;YACvC,OAAO,EAAE,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC;YAC1C,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS;gBACnC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;YAC1C,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,cAAc,IAAI,EAAE,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;IAC/C,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAChD,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,EAAE,CAC9B,SAAS,KAAK,QAAQ;QACtB;YACE,uBAAuB;YACvB,mBAAmB;YACnB,+BAA+B;SAChC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAC3B,EAAE,CAAC;QACF,IACE,CAAC,WAAW,CAAC,IAAI,CACf,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,gBAAgB,KAAK,QAAQ,CAAC,SAAS,CAClE,EACD,CAAC;YACD,QAAQ,CAAC,IAAI,CACX,OAAO,CACL,SAAS,EACT,sCAAsC,EACtC,8DAA8D,EAC9D,QAAQ,CACT,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAAG;QACnB,GAAG,IAAI,GAAG,CACR,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACrB;gBACE,IAAI,CAAC,KAAK;gBACV,IAAI,CAAC,IAAI;gBACT,IAAI,CAAC,UAAU,IAAI,EAAE;gBACrB,IAAI,CAAC,YAAY,IAAI,EAAE;aACxB,CAAC,IAAI,CAAC,QAAQ,CAAC;YAChB,IAAI;SACL,CAAC,CACH,CAAC,MAAM,EAAE;KACX,CAAC,IAAI,CACJ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,IAAA,qCAAY,EAAC,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;QAC3D,IAAA,qCAAY,EAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CACtC,CAAC;IACF,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CACnC,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAChB,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC;QACpD,CAAC,CAAC,IAAI,CAAC,KAAK;QACZ,CAAC,CAAC,OAAO,EACb,WAAW,CACZ,CAAC;IACF,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YAClC,iBAAiB,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,KAAK,oBAAoB,EAAE,CAAC;YACxC,iBAAiB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,KAAK,yBAAyB,EAAE,CAAC;YAC7C,iBAAiB,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;YACjD,iBAAiB,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,KAAK,sBAAsB,EAAE,CAAC;YAC1C,iBAAiB,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,KAAK,wBAAwB,EAAE,CAAC;YAC5C,iBAAiB,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IACD,OAAO;QACL,SAAS;QACT,YAAY,EACV,KAAK,CAAC,IAAI,CAAC,QAAQ;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,WAAW,KAAK,OAAO,CAAC;QAClE,QAAQ,EAAE,YAAY;QACtB,iBAAiB,EAAE,CAAC,GAAG,iBAAiB,CAAC,CAAC,IAAI,EAAE;KACjD,CAAC;AACJ,CAAC"}

package/src/infrastructure-change/summary.d.ts

@@ -0,0 +1,20 @@
+import { type InfrastructureAuthorizationEvidenceV1, type InfrastructurePlanSummaryV1, type InfrastructurePlanV1, type InfrastructureWorkflowApprovalMode, type InfrastructureMutationAction } from './model.js';
+export interface InfrastructurePlanEvidenceV1 {
+    authorization: InfrastructureAuthorizationEvidenceV1;
+    plan: InfrastructurePlanV1;
+}
+export declare function isEnvironmentReviewerPendingAuthorization(authorization: InfrastructureAuthorizationEvidenceV1): boolean;
+export declare function computeInfrastructurePlanSummaryDigest(summary: Omit<InfrastructurePlanSummaryV1, 'summaryDigest'> | InfrastructurePlanSummaryV1): string;
+export declare function createInfrastructurePlanSummary(input: {
+    action: InfrastructureMutationAction;
+    approvalMode: InfrastructureWorkflowApprovalMode;
+    evidence: Readonly<Record<string, InfrastructurePlanEvidenceV1>>;
+    orderedProjects: readonly string[];
+    sourceCommit: string;
+    stage: string;
+}): InfrastructurePlanSummaryV1;
+export declare function revalidateInfrastructurePlanSummary(input: {
+    evidence: Readonly<Record<string, InfrastructurePlanEvidenceV1>>;
+    expectedDigest: string;
+    retained: InfrastructurePlanSummaryV1;
+}): InfrastructurePlanSummaryV1;

package/src/infrastructure-change/summary.js

@@ -0,0 +1,130 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isEnvironmentReviewerPendingAuthorization = isEnvironmentReviewerPendingAuthorization;
+exports.computeInfrastructurePlanSummaryDigest = computeInfrastructurePlanSummaryDigest;
+exports.createInfrastructurePlanSummary = createInfrastructurePlanSummary;
+exports.revalidateInfrastructurePlanSummary = revalidateInfrastructurePlanSummary;
+const canonical_json_1 = require("@empire-builder-kit/runtime/canonical-json");
+const model_js_1 = require("./model.js");
+function sha256(value) {
+    return (0, canonical_json_1.canonicalJsonSha256)(value, { omitUndefinedObjectValues: true });
+}
+function pendingEnvironmentReviewerAuthorization(authorization) {
+    return (authorization.approval === undefined &&
+        authorization.plannedMaterialDigest ===
+            authorization.recomputedMaterialDigest &&
+        authorization.sourceChangesSincePlan.length === 0 &&
+        authorization.validation.allowed === false &&
+        authorization.validation.outcome === 'plan-risk-blocked' &&
+        authorization.validation.findings.length === 1 &&
+        authorization.validation.findings[0]?.code === 'approval-missing');
+}
+function isEnvironmentReviewerPendingAuthorization(authorization) {
+    return pendingEnvironmentReviewerAuthorization(authorization);
+}
+function validateEvidence(evidence, expected) {
+    const { authorization, plan } = evidence;
+    if (plan.kind !== 'ebk-infrastructure-plan' ||
+        plan.schemaVersion !== model_js_1.INFRASTRUCTURE_CHANGE_SCHEMA_VERSION ||
+        plan.action !== expected.action ||
+        plan.projects.length !== 1 ||
+        plan.projects[0] !== expected.project ||
+        plan.sourceCommit !== expected.sourceCommit ||
+        plan.target.stage !== expected.stage ||
+        authorization.kind !== 'ebk-infrastructure-authorization' ||
+        authorization.schemaVersion !== model_js_1.INFRASTRUCTURE_CHANGE_SCHEMA_VERSION ||
+        authorization.action !== expected.action ||
+        authorization.recomputedMaterialDigest !== plan.materialDigest) {
+        throw new Error(`Infrastructure plan evidence for ${expected.project} does not match the protected plan summary scope.`);
+    }
+    const planClean = authorization.validation.allowed === true &&
+        authorization.validation.outcome === 'plan-clean' &&
+        authorization.validation.findings.length === 0 &&
+        authorization.approval !== undefined;
+    if (!planClean &&
+        !(expected.approvalMode === 'environment-reviewer' &&
+            pendingEnvironmentReviewerAuthorization(authorization))) {
+        throw new Error(`Infrastructure plan evidence for ${expected.project} is not authorized for ${expected.approvalMode}.`);
+    }
+}
+function summaryMaterial(summary) {
+    return summary;
+}
+function computeInfrastructurePlanSummaryDigest(summary) {
+    return sha256(summaryMaterial({
+        action: summary.action,
+        approvalMode: summary.approvalMode,
+        kind: summary.kind,
+        projects: summary.projects,
+        schemaVersion: summary.schemaVersion,
+        sourceCommit: summary.sourceCommit,
+        stage: summary.stage,
+    }));
+}
+function createInfrastructurePlanSummary(input) {
+    if (input.orderedProjects.length === 0 ||
+        new Set(input.orderedProjects).size !== input.orderedProjects.length) {
+        throw new Error('Infrastructure plan summary requires unique ordered projects.');
+    }
+    const evidenceProjects = Object.keys(input.evidence).sort();
+    const expectedProjects = [...input.orderedProjects].sort();
+    if (evidenceProjects.length !== expectedProjects.length ||
+        evidenceProjects.some((project, index) => project !== expectedProjects[index])) {
+        throw new Error('Infrastructure plan evidence must match the exact ordered project set.');
+    }
+    const projects = input.orderedProjects.map((project) => {
+        const evidence = input.evidence[project];
+        if (!evidence) {
+            throw new Error(`Infrastructure plan evidence is missing ${project}.`);
+        }
+        validateEvidence(evidence, {
+            action: input.action,
+            approvalMode: input.approvalMode,
+            project,
+            sourceCommit: input.sourceCommit,
+            stage: input.stage,
+        });
+        return {
+            authorizationDigest: sha256(evidence.authorization),
+            authorizationOutcome: evidence.authorization.validation.outcome,
+            materialDigest: evidence.plan.materialDigest,
+            planEvidenceDigest: sha256(evidence.plan),
+            project,
+        };
+    });
+    const withoutDigest = {
+        action: input.action,
+        approvalMode: input.approvalMode,
+        kind: 'ebk-infrastructure-plan-summary',
+        projects,
+        schemaVersion: model_js_1.INFRASTRUCTURE_CHANGE_SCHEMA_VERSION,
+        sourceCommit: input.sourceCommit,
+        stage: input.stage,
+    };
+    return {
+        ...withoutDigest,
+        summaryDigest: computeInfrastructurePlanSummaryDigest(withoutDigest),
+    };
+}
+function revalidateInfrastructurePlanSummary(input) {
+    if (input.retained.kind !== 'ebk-infrastructure-plan-summary' ||
+        input.retained.schemaVersion !== model_js_1.INFRASTRUCTURE_CHANGE_SCHEMA_VERSION ||
+        input.retained.summaryDigest !== input.expectedDigest ||
+        computeInfrastructurePlanSummaryDigest(input.retained) !==
+            input.retained.summaryDigest) {
+        throw new Error('Retained infrastructure plan summary digest is missing or stale.');
+    }
+    const recomputed = createInfrastructurePlanSummary({
+        action: input.retained.action,
+        approvalMode: input.retained.approvalMode,
+        evidence: input.evidence,
+        orderedProjects: input.retained.projects.map(({ project }) => project),
+        sourceCommit: input.retained.sourceCommit,
+        stage: input.retained.stage,
+    });
+    if (recomputed.summaryDigest !== input.retained.summaryDigest) {
+        throw new Error('Retained infrastructure plan evidence no longer matches the environment-reviewed digest.');
+    }
+    return recomputed;
+}
+//# sourceMappingURL=summary.js.map

package/src/infrastructure-change/summary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"summary.js","sourceRoot":"","sources":["../../../../../packages/nx/src/infrastructure-change/summary.ts"],"names":[],"mappings":";;AAkCA,8FAIC;AAsDD,wFAgBC;AAED,0EA6DC;AAED,kFA8BC;AA3MD,+EAAiF;AACjF,yCAOoB;AAOpB,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,IAAA,oCAAmB,EAAC,KAAK,EAAE,EAAE,yBAAyB,EAAE,IAAI,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,uCAAuC,CAC9C,aAAoD;IAEpD,OAAO,CACL,aAAa,CAAC,QAAQ,KAAK,SAAS;QACpC,aAAa,CAAC,qBAAqB;YACjC,aAAa,CAAC,wBAAwB;QACxC,aAAa,CAAC,sBAAsB,CAAC,MAAM,KAAK,CAAC;QACjD,aAAa,CAAC,UAAU,CAAC,OAAO,KAAK,KAAK;QAC1C,aAAa,CAAC,UAAU,CAAC,OAAO,KAAK,mBAAmB;QACxD,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC9C,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,kBAAkB,CAClE,CAAC;AACJ,CAAC;AAED,SAAgB,yCAAyC,CACvD,aAAoD;IAEpD,OAAO,uCAAuC,CAAC,aAAa,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,gBAAgB,CACvB,QAAsC,EACtC,QAMC;IAED,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC;IACzC,IACE,IAAI,CAAC,IAAI,KAAK,yBAAyB;QACvC,IAAI,CAAC,aAAa,KAAK,+CAAoC;QAC3D,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAC/B,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,OAAO;QACrC,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY;QAC3C,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;QACpC,aAAa,CAAC,IAAI,KAAK,kCAAkC;QACzD,aAAa,CAAC,aAAa,KAAK,+CAAoC;QACpE,aAAa,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QACxC,aAAa,CAAC,wBAAwB,KAAK,IAAI,CAAC,cAAc,EAC9D,CAAC;QACD,MAAM,IAAI,KAAK,CACb,oCAAoC,QAAQ,CAAC,OAAO,mDAAmD,CACxG,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GACb,aAAa,CAAC,UAAU,CAAC,OAAO,KAAK,IAAI;QACzC,aAAa,CAAC,UAAU,CAAC,OAAO,KAAK,YAAY;QACjD,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC9C,aAAa,CAAC,QAAQ,KAAK,SAAS,CAAC;IACvC,IACE,CAAC,SAAS;QACV,CAAC,CACC,QAAQ,CAAC,YAAY,KAAK,sBAAsB;YAChD,uCAAuC,CAAC,aAAa,CAAC,CACvD,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,oCAAoC,QAAQ,CAAC,OAAO,0BAA0B,QAAQ,CAAC,YAAY,GAAG,CACvG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,OAA2D;IAE3D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAgB,sCAAsC,CACpD,OAE+B;IAE/B,OAAO,MAAM,CACX,eAAe,CAAC;QACd,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAgB,+BAA+B,CAAC,KAO/C;IACC,IACE,KAAK,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;QAClC,IAAI,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,eAAe,CAAC,MAAM,EACpE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;IACJ,CAAC;IACD,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5D,MAAM,gBAAgB,GAAG,CAAC,GAAG,KAAK,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,IACE,gBAAgB,CAAC,MAAM,KAAK,gBAAgB,CAAC,MAAM;QACnD,gBAAgB,CAAC,IAAI,CACnB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,gBAAgB,CAAC,KAAK,CAAC,CACxD,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,gBAAgB,CAAC,QAAQ,EAAE;YACzB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,OAAO;YACP,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC;QACH,OAAO;YACL,mBAAmB,EAAE,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;YACnD,oBAAoB,EAAE,QAAQ,CAAC,aAAa,CAAC,UAAU,CAAC,OAAO;YAC/D,cAAc,EAAE,QAAQ,CAAC,IAAI,CAAC,cAAc;YAC5C,kBAAkB,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YACzC,OAAO;SACR,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,aAAa,GAAuD;QACxE,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,IAAI,EAAE,iCAAiC;QACvC,QAAQ;QACR,aAAa,EAAE,+CAAoC;QACnD,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC;IACF,OAAO;QACL,GAAG,aAAa;QAChB,aAAa,EAAE,sCAAsC,CAAC,aAAa,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,SAAgB,mCAAmC,CAAC,KAInD;IACC,IACE,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,iCAAiC;QACzD,KAAK,CAAC,QAAQ,CAAC,aAAa,KAAK,+CAAoC;QACrE,KAAK,CAAC,QAAQ,CAAC,aAAa,KAAK,KAAK,CAAC,cAAc;QACrD,sCAAsC,CAAC,KAAK,CAAC,QAAQ,CAAC;YACpD,KAAK,CAAC,QAAQ,CAAC,aAAa,EAC9B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,+BAA+B,CAAC;QACjD,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;QAC7B,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY;QACzC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC;QACtE,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY;QACzC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK;KAC5B,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,aAAa,KAAK,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CACb,0FAA0F,CAC3F,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/src/local-dev/context-discovery.d.ts

@@ -0,0 +1,2 @@
+import type { LocalDevContextDiscovery, LocalDevContextInput } from './local-context.js';
+export declare function discoverLocalDevContext(explicit: LocalDevContextInput, environment: NodeJS.ProcessEnv): Promise<LocalDevContextDiscovery>;

package/src/local-dev/context-discovery.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.discoverLocalDevContext = discoverLocalDevContext;
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+function configuredRegion(profile, environment) {
+    if (!profile)
+        return undefined;
+    const configuredPath = environment.AWS_CONFIG_FILE ??
+        (0, node_path_1.join)(environment.HOME ?? (0, node_os_1.homedir)(), '.aws', 'config');
+    if (!(0, node_path_1.isAbsolute)(configuredPath) || !(0, node_fs_1.existsSync)(configuredPath)) {
+        return undefined;
+    }
+    try {
+        if ((0, node_fs_1.statSync)(configuredPath).size > 1024 * 1024)
+            return undefined;
+        const section = profile === 'default' ? 'default' : `profile ${profile}`;
+        let active = '';
+        for (const rawLine of (0, node_fs_1.readFileSync)(configuredPath, 'utf8').split(/\r?\n/)) {
+            const line = rawLine.trim();
+            const header = /^\[([^\]]+)\]$/.exec(line);
+            if (header) {
+                active = header[1].trim();
+                continue;
+            }
+            if (active !== section || line.startsWith('#') || line.startsWith(';')) {
+                continue;
+            }
+            const region = /^region\s*=\s*([a-z0-9-]+)\s*$/i.exec(line);
+            if (region)
+                return region[1].toLowerCase();
+        }
+    }
+    catch {
+        // Discovery is advisory; explicit saved context remains authoritative.
+    }
+    return undefined;
+}
+async function discoverLocalDevContext(explicit, environment) {
+    const ambientProfile = environment.AWS_PROFILE?.trim();
+    const profile = explicit.profile ?? (ambientProfile || undefined);
+    const ambientRegions = [
+        environment.AWS_REGION?.trim(),
+        environment.AWS_DEFAULT_REGION?.trim(),
+    ].filter((value) => Boolean(value));
+    const uniqueRegions = [...new Set(ambientRegions)];
+    const region = explicit.region ??
+        (uniqueRegions.length === 1
+            ? uniqueRegions[0]
+            : uniqueRegions.length === 0
+                ? configuredRegion(profile, environment)
+                : undefined);
+    return {
+        ...(profile ? { profile } : {}),
+        ...(region ? { region } : {}),
+    };
+}
+//# sourceMappingURL=context-discovery.js.map

package/src/local-dev/context-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-discovery.js","sourceRoot":"","sources":["../../../../../packages/nx/src/local-dev/context-discovery.ts"],"names":[],"mappings":";;AA2CA,0DAsBC;AAjED,qCAA6D;AAC7D,qCAAkC;AAClC,yCAA6C;AAO7C,SAAS,gBAAgB,CACvB,OAA2B,EAC3B,WAA8B;IAE9B,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,cAAc,GAClB,WAAW,CAAC,eAAe;QAC3B,IAAA,gBAAI,EAAC,WAAW,CAAC,IAAI,IAAI,IAAA,iBAAO,GAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACxD,IAAI,CAAC,IAAA,sBAAU,EAAC,cAAc,CAAC,IAAI,CAAC,IAAA,oBAAU,EAAC,cAAc,CAAC,EAAE,CAAC;QAC/D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,IAAI,IAAA,kBAAQ,EAAC,cAAc,CAAC,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI;YAAE,OAAO,SAAS,CAAC;QAClE,MAAM,OAAO,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,OAAO,EAAE,CAAC;QACzE,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,MAAM,OAAO,IAAI,IAAA,sBAAY,EAAC,cAAc,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC1B,SAAS;YACX,CAAC;YACD,IAAI,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvE,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5D,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;IACzE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAEM,KAAK,UAAU,uBAAuB,CAC3C,QAA8B,EAC9B,WAA8B;IAE9B,MAAM,cAAc,GAAG,WAAW,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IACvD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,IAAI,CAAC,cAAc,IAAI,SAAS,CAAC,CAAC;IAClE,MAAM,cAAc,GAAG;QACrB,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE;QAC9B,WAAW,CAAC,kBAAkB,EAAE,IAAI,EAAE;KACvC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACrD,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;IACnD,MAAM,MAAM,GACV,QAAQ,CAAC,MAAM;QACf,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;YACzB,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;YAClB,CAAC,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;gBAC1B,CAAC,CAAC,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC;gBACxC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnB,OAAO;QACL,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9B,CAAC;AACJ,CAAC"}

package/src/local-dev/contract-validation.d.ts

@@ -0,0 +1,15 @@
+export declare const LOCAL_DEV_IDENTIFIER_PATTERN: RegExp;
+export declare const LOCAL_DEV_SLUG_PATTERN: RegExp;
+export declare const LOCAL_DEV_TOKEN_PATTERN: RegExp;
+export declare const LOCAL_DEV_SHA256_PATTERN: RegExp;
+export declare function isRecord(value: unknown): value is Record<string, unknown>;
+export declare function assertRecord(value: unknown, label: string): asserts value is Record<string, unknown>;
+export declare function assertExactProperties(value: Record<string, unknown>, required: readonly string[], optional: readonly string[], label: string): void;
+export declare function requireBoundedString(value: unknown, label: string, options?: {
+    maximumLength?: number;
+    pattern?: RegExp;
+}): string;
+export declare function requireInteger(value: unknown, label: string, minimum: number, maximum: number): number;
+export declare function requireIsoTimestamp(value: unknown, label: string): string;
+export declare function canonicalJson(value: unknown): string;
+export declare function sha256Digest(value: unknown): string;

package/src/local-dev/contract-validation.js

@@ -0,0 +1,84 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LOCAL_DEV_SHA256_PATTERN = exports.LOCAL_DEV_TOKEN_PATTERN = exports.LOCAL_DEV_SLUG_PATTERN = exports.LOCAL_DEV_IDENTIFIER_PATTERN = void 0;
+exports.isRecord = isRecord;
+exports.assertRecord = assertRecord;
+exports.assertExactProperties = assertExactProperties;
+exports.requireBoundedString = requireBoundedString;
+exports.requireInteger = requireInteger;
+exports.requireIsoTimestamp = requireIsoTimestamp;
+exports.canonicalJson = canonicalJson;
+exports.sha256Digest = sha256Digest;
+const canonical_json_1 = require("@empire-builder-kit/runtime/canonical-json");
+const errors_js_1 = require("./errors.js");
+exports.LOCAL_DEV_IDENTIFIER_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:@/-]{0,255}$/;
+exports.LOCAL_DEV_SLUG_PATTERN = /^[a-z0-9][a-z0-9-]{0,62}$/;
+exports.LOCAL_DEV_TOKEN_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/;
+exports.LOCAL_DEV_SHA256_PATTERN = /^[a-f0-9]{64}$/;
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function assertRecord(value, label) {
+    if (!isRecord(value)) {
+        throw new errors_js_1.LocalDevContractError('invalid-state', `${label} must be an object.`);
+    }
+}
+function assertExactProperties(value, required, optional, label) {
+    const allowed = new Set([...required, ...optional]);
+    const unknown = Object.keys(value).filter((key) => !allowed.has(key));
+    if (unknown.length > 0) {
+        throw new errors_js_1.LocalDevContractError('invalid-state', `${label} contains unsupported property ${unknown[0]}.`);
+    }
+    const missing = required.filter((key) => !(key in value));
+    if (missing.length > 0) {
+        throw new errors_js_1.LocalDevContractError('invalid-state', `${label} is missing required property ${missing[0]}.`);
+    }
+}
+function requireBoundedString(value, label, options = {}) {
+    if (typeof value !== 'string' ||
+        value.length === 0 ||
+        value !== value.trim()) {
+        throw new errors_js_1.LocalDevContractError('invalid-state', `${label} must be a non-empty trimmed string.`);
+    }
+    if (value.length > (options.maximumLength ?? 256)) {
+        throw new errors_js_1.LocalDevContractError('invalid-state', `${label} exceeds its maximum length.`);
+    }
+    for (const character of value) {
+        const codePoint = character.codePointAt(0) ?? 0;
+        if (codePoint <= 31 ||
+            (codePoint >= 127 && codePoint <= 159) ||
+            codePoint === 0x2028 ||
+            codePoint === 0x2029) {
+            throw new errors_js_1.LocalDevContractError('invalid-state', `${label} contains an unsafe control character.`);
+        }
+    }
+    if (options.pattern && !options.pattern.test(value)) {
+        throw new errors_js_1.LocalDevContractError('invalid-state', `${label} has an unsupported format.`);
+    }
+    return value;
+}
+function requireInteger(value, label, minimum, maximum) {
+    if (typeof value !== 'number' ||
+        !Number.isInteger(value) ||
+        value < minimum ||
+        value > maximum) {
+        throw new errors_js_1.LocalDevContractError('invalid-state', `${label} must be an integer from ${minimum} through ${maximum}.`);
+    }
+    return value;
+}
+function requireIsoTimestamp(value, label) {
+    const result = requireBoundedString(value, label, { maximumLength: 64 });
+    const timestamp = Date.parse(result);
+    if (!Number.isFinite(timestamp) ||
+        new Date(timestamp).toISOString() !== result) {
+        throw new errors_js_1.LocalDevContractError('invalid-state', `${label} must be a canonical UTC ISO timestamp.`);
+    }
+    return result;
+}
+function canonicalJson(value) {
+    return (0, canonical_json_1.canonicalJson)(value, { omitUndefinedObjectValues: true });
+}
+function sha256Digest(value) {
+    return (0, canonical_json_1.canonicalJsonSha256)(value, { omitUndefinedObjectValues: true });
+}
+//# sourceMappingURL=contract-validation.js.map

package/src/local-dev/contract-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-validation.js","sourceRoot":"","sources":["../../../../../packages/nx/src/local-dev/contract-validation.ts"],"names":[],"mappings":";;;AAaA,4BAEC;AAED,oCAUC;AAED,sDAqBC;AAED,oDA6CC;AAED,wCAkBC;AAED,kDAaC;AAED,sCAEC;AAED,oCAEC;AA5ID,+EAGoD;AAEpD,2CAAoD;AAEvC,QAAA,4BAA4B,GACvC,uCAAuC,CAAC;AAC7B,QAAA,sBAAsB,GAAG,2BAA2B,CAAC;AACrD,QAAA,uBAAuB,GAAG,qCAAqC,CAAC;AAChE,QAAA,wBAAwB,GAAG,gBAAgB,CAAC;AAEzD,SAAgB,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAgB,YAAY,CAC1B,KAAc,EACd,KAAa;IAEb,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,iCAAqB,CAC7B,eAAe,EACf,GAAG,KAAK,qBAAqB,CAC9B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,qBAAqB,CACnC,KAA8B,EAC9B,QAA2B,EAC3B,QAA2B,EAC3B,KAAa;IAEb,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACtE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,iCAAqB,CAC7B,eAAe,EACf,GAAG,KAAK,kCAAkC,OAAO,CAAC,CAAC,CAAC,GAAG,CACxD,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC;IAC1D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,iCAAqB,CAC7B,eAAe,EACf,GAAG,KAAK,iCAAiC,OAAO,CAAC,CAAC,CAAC,GAAG,CACvD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,oBAAoB,CAClC,KAAc,EACd,KAAa,EACb,UAGI,EAAE;IAEN,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,EACtB,CAAC;QACD,MAAM,IAAI,iCAAqB,CAC7B,eAAe,EACf,GAAG,KAAK,sCAAsC,CAC/C,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,iCAAqB,CAC7B,eAAe,EACf,GAAG,KAAK,8BAA8B,CACvC,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChD,IACE,SAAS,IAAI,EAAE;YACf,CAAC,SAAS,IAAI,GAAG,IAAI,SAAS,IAAI,GAAG,CAAC;YACtC,SAAS,KAAK,MAAM;YACpB,SAAS,KAAK,MAAM,EACpB,CAAC;YACD,MAAM,IAAI,iCAAqB,CAC7B,eAAe,EACf,GAAG,KAAK,wCAAwC,CACjD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,iCAAqB,CAC7B,eAAe,EACf,GAAG,KAAK,6BAA6B,CACtC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,cAAc,CAC5B,KAAc,EACd,KAAa,EACb,OAAe,EACf,OAAe;IAEf,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;QACxB,KAAK,GAAG,OAAO;QACf,KAAK,GAAG,OAAO,EACf,CAAC;QACD,MAAM,IAAI,iCAAqB,CAC7B,eAAe,EACf,GAAG,KAAK,4BAA4B,OAAO,YAAY,OAAO,GAAG,CAClE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,mBAAmB,CAAC,KAAc,EAAE,KAAa;IAC/D,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrC,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC3B,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,EAC5C,CAAC;QACD,MAAM,IAAI,iCAAqB,CAC7B,eAAe,EACf,GAAG,KAAK,yCAAyC,CAClD,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,aAAa,CAAC,KAAc;IAC1C,OAAO,IAAA,8BAAsB,EAAC,KAAK,EAAE,EAAE,yBAAyB,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,SAAgB,YAAY,CAAC,KAAc;IACzC,OAAO,IAAA,oCAAmB,EAAC,KAAK,EAAE,EAAE,yBAAyB,EAAE,IAAI,EAAE,CAAC,CAAC;AACzE,CAAC"}

package/src/local-dev/contracts.d.ts

@@ -1,4 +1,5 @@
 export declare const LOCAL_DEV_ADAPTER_VERSION: 1;
+export declare const LOCAL_DEV_ADAPTER_VERSION_V2: 2;
 export declare const GATEWAY_PROTOCOL_VERSION: 1;
 export declare const SESSION_MANIFEST_VERSION: 1;
 export type LocalDatabaseMode = 'deployed' | 'local' | 'none';
@@ -16,7 +17,15 @@ export interface WebLocalDevAdapterV1 {
     target: string;
     websocket: boolean;
 }
-export type LocalDevAdapter = WebLocalDevAdapterV1;
+export interface LocalDevLifecycleV2 {
+    cleanupScope: 'checkout-local-and-personal-stage';
+    cleanupTarget: string;
+}
+export interface WebLocalDevAdapterV2 extends Omit<WebLocalDevAdapterV1, 'adapterVersion'> {
+    adapterVersion: typeof LOCAL_DEV_ADAPTER_VERSION_V2;
+    lifecycle?: LocalDevLifecycleV2;
+}
+export type LocalDevAdapter = WebLocalDevAdapterV1 | WebLocalDevAdapterV2;
 export interface FleetRoute {
     adapter?: LocalDevAdapter;
     name: string;

package/src/local-dev/contracts.js

@@ -1,14 +1,16 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SESSION_MANIFEST_VERSION = exports.GATEWAY_PROTOCOL_VERSION = exports.LOCAL_DEV_ADAPTER_VERSION = void 0;
+exports.SESSION_MANIFEST_VERSION = exports.GATEWAY_PROTOCOL_VERSION = exports.LOCAL_DEV_ADAPTER_VERSION_V2 = exports.LOCAL_DEV_ADAPTER_VERSION = void 0;
 exports.validateLocalDevAdapter = validateLocalDevAdapter;
 exports.validateFleetAdapters = validateFleetAdapters;
 exports.LOCAL_DEV_ADAPTER_VERSION = 1;
+exports.LOCAL_DEV_ADAPTER_VERSION_V2 = 2;
 exports.GATEWAY_PROTOCOL_VERSION = 1;
 exports.SESSION_MANIFEST_VERSION = 1;
 const namePattern = /^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/;
 const environmentPattern = /^[A-Z][A-Z0-9_]*$/;
 const targetPattern = /^[a-zA-Z0-9][a-zA-Z0-9_-]*$/;
+const forbiddenCleanupTargetPattern = /(?:^|[-_])(?:deploy|migrate|migration|refresh|remove|retire|retirement|unlock)(?:$|[-_])/i;
 function requirePath(value, label) {
     if (typeof value !== 'string' ||
         !value.startsWith('/') ||
@@ -44,6 +46,7 @@ function validateLocalDevAdapter(value) {
         'databaseMode',
         'healthPath',
         'kind',
+        'lifecycle',
         'portEnvironment',
         'routePrefix',
         'target',
@@ -53,8 +56,13 @@ function validateLocalDevAdapter(value) {
     if (unknown.length > 0) {
         throw new Error(`Local-dev adapter has unknown member ${unknown[0]}.`);
     }
-    if (candidate.adapterVersion !== exports.LOCAL_DEV_ADAPTER_VERSION) {
-        throw new Error(`Local-dev adapter version must be ${exports.LOCAL_DEV_ADAPTER_VERSION}.`);
+    if (candidate.adapterVersion !== exports.LOCAL_DEV_ADAPTER_VERSION &&
+        candidate.adapterVersion !== exports.LOCAL_DEV_ADAPTER_VERSION_V2) {
+        throw new Error(`Local-dev adapter version must be ${exports.LOCAL_DEV_ADAPTER_VERSION} or ${exports.LOCAL_DEV_ADAPTER_VERSION_V2}.`);
+    }
+    if (candidate.adapterVersion === exports.LOCAL_DEV_ADAPTER_VERSION &&
+        candidate.lifecycle !== undefined) {
+        throw new Error('Local-dev adapter v1 does not support lifecycle.');
     }
     if (candidate.kind !== 'web') {
         throw new Error('Local-dev adapter kind must be web.');
@@ -94,8 +102,42 @@ function validateLocalDevAdapter(value) {
     if (routePrefix === '/') {
         throw new Error('Local-dev adapter routePrefix must identify a slice path.');
     }
-    return {
-        adapterVersion: exports.LOCAL_DEV_ADAPTER_VERSION,
+    let lifecycle;
+    if (candidate.adapterVersion === exports.LOCAL_DEV_ADAPTER_VERSION_V2) {
+        if (candidate.lifecycle !== undefined) {
+            if (!candidate.lifecycle ||
+                typeof candidate.lifecycle !== 'object' ||
+                Array.isArray(candidate.lifecycle)) {
+                throw new Error('Local-dev adapter lifecycle must be an object.');
+            }
+            const lifecycleCandidate = candidate.lifecycle;
+            const lifecycleUnknown = Object.keys(lifecycleCandidate).filter((key) => key !== 'cleanupScope' && key !== 'cleanupTarget');
+            if (lifecycleUnknown.length > 0) {
+                throw new Error(`Local-dev adapter lifecycle has unknown member ${lifecycleUnknown[0]}.`);
+            }
+            if (lifecycleCandidate.cleanupScope !== 'checkout-local-and-personal-stage') {
+                throw new Error('Local-dev adapter cleanupScope must be checkout-local-and-personal-stage.');
+            }
+            if (typeof lifecycleCandidate.cleanupTarget !== 'string' ||
+                !targetPattern.test(lifecycleCandidate.cleanupTarget)) {
+                throw new Error('Local-dev adapter cleanupTarget must be a valid Nx target name.');
+            }
+            if (forbiddenCleanupTargetPattern.test(lifecycleCandidate.cleanupTarget)) {
+                throw new Error(`Local-dev adapter cleanupTarget ${lifecycleCandidate.cleanupTarget} is outside bounded checkout-local and personal-stage cleanup.`);
+            }
+            lifecycle = {
+                cleanupScope: 'checkout-local-and-personal-stage',
+                cleanupTarget: lifecycleCandidate.cleanupTarget,
+            };
+        }
+        if (candidate.databaseMode === 'local' && !lifecycle) {
+            throw new Error('Local-dev adapter v2 with databaseMode local requires lifecycle cleanup.');
+        }
+        if (candidate.databaseMode !== 'local' && lifecycle) {
+            throw new Error('Local-dev adapter lifecycle cleanup is supported only for local database resources.');
+        }
+    }
+    const common = {
         ...(auth ? { auth } : {}),
         databaseMode: candidate.databaseMode,
         healthPath: requirePath(candidate.healthPath, 'Local-dev adapter healthPath'),
@@ -105,6 +147,16 @@ function validateLocalDevAdapter(value) {
         target: candidate.target,
         websocket: candidate.websocket,
     };
+    return candidate.adapterVersion === exports.LOCAL_DEV_ADAPTER_VERSION
+        ? {
+            adapterVersion: exports.LOCAL_DEV_ADAPTER_VERSION,
+            ...common,
+        }
+        : {
+            adapterVersion: exports.LOCAL_DEV_ADAPTER_VERSION_V2,
+            ...(lifecycle ? { lifecycle } : {}),
+            ...common,
+        };
 }
 function validateFleetAdapters(entries) {
     const adapters = new Map();

package/src/local-dev/contracts.js.map

@@ -1 +1 @@
-{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../../../../packages/nx/src/local-dev/contracts.ts"],"names":[],"mappings":";;;AA+DA,0DAsGC;AAED,sDAoBC;AA3LY,QAAA,yBAAyB,GAAG,CAAU,CAAC;AACvC,QAAA,wBAAwB,GAAG,CAAU,CAAC;AACtC,QAAA,wBAAwB,GAAG,CAAU,CAAC;AA6BnD,MAAM,WAAW,GAAG,iCAAiC,CAAC;AACtD,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AAC/C,MAAM,aAAa,GAAG,6BAA6B,CAAC;AAEpD,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa;IAChD,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QACtB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QACtB,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EACrB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9E,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa;IAClD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACvC,WAAW,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,KAAK,GAAG,CAAC,CACzC,CAAC;IACF,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oCAAoC,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,uBAAuB,CAAC,KAAc;IACpD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,gBAAgB;QAChB,MAAM;QACN,cAAc;QACd,YAAY;QACZ,MAAM;QACN,iBAAiB;QACjB,aAAa;QACb,QAAQ;QACR,WAAW;KACZ,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,wCAAwC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,SAAS,CAAC,cAAc,KAAK,iCAAyB,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,qCAAqC,iCAAyB,GAAG,CAClE,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,IACE,SAAS,CAAC,YAAY,KAAK,OAAO;QAClC,SAAS,CAAC,YAAY,KAAK,UAAU;QACrC,SAAS,CAAC,YAAY,KAAK,MAAM,EACjC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,IACE,OAAO,SAAS,CAAC,eAAe,KAAK,QAAQ;QAC7C,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,EACnD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,IACE,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ;QACpC,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EACrC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,OAAO,SAAS,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,IAAkC,CAAC;IACvC,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,aAAa,GAAG,SAAS,CAAC,IAA+B,CAAC;QAChE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,CACnD,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,eAAe,IAAI,GAAG,KAAK,aAAa,CAC1D,CAAC;QACF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,6CAA6C,WAAW,CAAC,CAAC,CAAC,GAAG,CAC/D,CAAC;QACJ,CAAC;QACD,IAAI,GAAG;YACL,aAAa,EAAE,aAAa,CAC1B,aAAa,CAAC,aAAa,EAC3B,sCAAsC,CACvC;YACD,WAAW,EAAE,aAAa,CACxB,aAAa,CAAC,WAAW,EACzB,oCAAoC,CACrC;SACF,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,WAAW,CAC7B,SAAS,CAAC,WAAW,EACrB,+BAA+B,CAChC,CAAC;IACF,IAAI,WAAW,KAAK,GAAG,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO;QACL,cAAc,EAAE,iCAAyB;QACzC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,UAAU,EAAE,WAAW,CACrB,SAAS,CAAC,UAAU,EACpB,8BAA8B,CAC/B;QACD,IAAI,EAAE,KAAK;QACX,eAAe,EAAE,SAAS,CAAC,eAAe;QAC1C,WAAW;QACX,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,SAAS,EAAE,SAAS,CAAC,SAAS;KAC/B,CAAC;AACJ,CAAC;AAED,SAAgB,qBAAqB,CACnC,OAAsD;IAEtD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,KAAK,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC;QAC7C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,mBAAmB,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,OAAO,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,yBAAyB,OAAO,CAAC,WAAW,wBAAwB,KAAK,QAAQ,IAAI,GAAG,CACzF,CAAC;QACJ,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACxC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../../../../packages/nx/src/local-dev/contracts.ts"],"names":[],"mappings":";;;AA+EA,0DAkLC;AAED,sDAoBC;AAvRY,QAAA,yBAAyB,GAAG,CAAU,CAAC;AACvC,QAAA,4BAA4B,GAAG,CAAU,CAAC;AAC1C,QAAA,wBAAwB,GAAG,CAAU,CAAC;AACtC,QAAA,wBAAwB,GAAG,CAAU,CAAC;AA0CnD,MAAM,WAAW,GAAG,iCAAiC,CAAC;AACtD,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AAC/C,MAAM,aAAa,GAAG,6BAA6B,CAAC;AACpD,MAAM,6BAA6B,GACjC,2FAA2F,CAAC;AAE9F,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa;IAChD,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QACtB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QACtB,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EACrB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9E,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa;IAClD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACvC,WAAW,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,KAAK,GAAG,CAAC,CACzC,CAAC;IACF,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oCAAoC,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,uBAAuB,CAAC,KAAc;IACpD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,gBAAgB;QAChB,MAAM;QACN,cAAc;QACd,YAAY;QACZ,MAAM;QACN,WAAW;QACX,iBAAiB;QACjB,aAAa;QACb,QAAQ;QACR,WAAW;KACZ,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,wCAAwC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC;IACD,IACE,SAAS,CAAC,cAAc,KAAK,iCAAyB;QACtD,SAAS,CAAC,cAAc,KAAK,oCAA4B,EACzD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,qCAAqC,iCAAyB,OAAO,oCAA4B,GAAG,CACrG,CAAC;IACJ,CAAC;IACD,IACE,SAAS,CAAC,cAAc,KAAK,iCAAyB;QACtD,SAAS,CAAC,SAAS,KAAK,SAAS,EACjC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,IACE,SAAS,CAAC,YAAY,KAAK,OAAO;QAClC,SAAS,CAAC,YAAY,KAAK,UAAU;QACrC,SAAS,CAAC,YAAY,KAAK,MAAM,EACjC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,IACE,OAAO,SAAS,CAAC,eAAe,KAAK,QAAQ;QAC7C,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,EACnD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,IACE,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ;QACpC,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EACrC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,OAAO,SAAS,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,IAAkC,CAAC;IACvC,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,aAAa,GAAG,SAAS,CAAC,IAA+B,CAAC;QAChE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,CACnD,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,eAAe,IAAI,GAAG,KAAK,aAAa,CAC1D,CAAC;QACF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,6CAA6C,WAAW,CAAC,CAAC,CAAC,GAAG,CAC/D,CAAC;QACJ,CAAC;QACD,IAAI,GAAG;YACL,aAAa,EAAE,aAAa,CAC1B,aAAa,CAAC,aAAa,EAC3B,sCAAsC,CACvC;YACD,WAAW,EAAE,aAAa,CACxB,aAAa,CAAC,WAAW,EACzB,oCAAoC,CACrC;SACF,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,WAAW,CAC7B,SAAS,CAAC,WAAW,EACrB,+BAA+B,CAChC,CAAC;IACF,IAAI,WAAW,KAAK,GAAG,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,SAA0C,CAAC;IAC/C,IAAI,SAAS,CAAC,cAAc,KAAK,oCAA4B,EAAE,CAAC;QAC9D,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACtC,IACE,CAAC,SAAS,CAAC,SAAS;gBACpB,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ;gBACvC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,EAClC,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,kBAAkB,GAAG,SAAS,CAAC,SAAoC,CAAC;YAC1E,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAC7D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,cAAc,IAAI,GAAG,KAAK,eAAe,CAC3D,CAAC;YACF,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CACb,kDAAkD,gBAAgB,CAAC,CAAC,CAAC,GAAG,CACzE,CAAC;YACJ,CAAC;YACD,IACE,kBAAkB,CAAC,YAAY,KAAK,mCAAmC,EACvE,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;YACJ,CAAC;YACD,IACE,OAAO,kBAAkB,CAAC,aAAa,KAAK,QAAQ;gBACpD,CAAC,aAAa,CAAC,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,EACrD,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;YACJ,CAAC;YACD,IACE,6BAA6B,CAAC,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,EACpE,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,mCAAmC,kBAAkB,CAAC,aAAa,gEAAgE,CACpI,CAAC;YACJ,CAAC;YACD,SAAS,GAAG;gBACV,YAAY,EAAE,mCAAmC;gBACjD,aAAa,EAAE,kBAAkB,CAAC,aAAa;aAChD,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,YAAY,KAAK,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,YAAY,KAAK,OAAO,IAAI,SAAS,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAiD;QAC3D,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,YAAY,EAAE,SAAS,CAAC,YAAiC;QACzD,UAAU,EAAE,WAAW,CACrB,SAAS,CAAC,UAAU,EACpB,8BAA8B,CAC/B;QACD,IAAI,EAAE,KAAK;QACX,eAAe,EAAE,SAAS,CAAC,eAAe;QAC1C,WAAW;QACX,MAAM,EAAE,SAAS,CAAC,MAAgB;QAClC,SAAS,EAAE,SAAS,CAAC,SAAoB;KAC1C,CAAC;IACF,OAAO,SAAS,CAAC,cAAc,KAAK,iCAAyB;QAC3D,CAAC,CAAC;YACE,cAAc,EAAE,iCAAyB;YACzC,GAAG,MAAM;SACV;QACH,CAAC,CAAC;YACE,cAAc,EAAE,oCAA4B;YAC5C,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,GAAG,MAAM;SACV,CAAC;AACR,CAAC;AAED,SAAgB,qBAAqB,CACnC,OAAsD;IAEtD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,KAAK,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC;QAC7C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,mBAAmB,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,OAAO,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,yBAAyB,OAAO,CAAC,WAAW,wBAAwB,KAAK,QAAQ,IAAI,GAAG,CACzF,CAAC;QACJ,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACxC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/src/local-dev/control-contract.d.ts

@@ -0,0 +1,67 @@
+export declare const FLEET_CONTROL_PROTOCOL_VERSION: 1;
+export declare const FLEET_CONTROL_REQUEST_MAX_BYTES: number;
+export declare const FLEET_CONTROL_CAPABILITY_BYTES = 32;
+export declare const FLEET_CONTROL_ACTIONS: readonly ["ping", "status", "submit", "operation-status", "shutdown"];
+export declare const FLEET_MUTATION_COMMANDS: readonly ["up", "down", "restart"];
+export type FleetControlAction = (typeof FLEET_CONTROL_ACTIONS)[number];
+export type FleetMutationCommand = (typeof FLEET_MUTATION_COMMANDS)[number];
+export interface FleetControlProtocolRange {
+    maximum: number;
+    minimum: number;
+}
+interface FleetControlRequestBase {
+    action: FleetControlAction;
+    capability: string;
+    protocol: FleetControlProtocolRange;
+    requestId: string;
+}
+export interface FleetControlPingRequest extends FleetControlRequestBase {
+    action: 'ping';
+}
+export interface FleetControlStatusRequest extends FleetControlRequestBase {
+    action: 'status';
+}
+export interface FleetControlSubmitRequest extends FleetControlRequestBase {
+    action: 'submit';
+    payload: {
+        command: FleetMutationCommand;
+        idempotencyKey: string;
+        selector: {
+            all: boolean;
+            slices: string[];
+        };
+    };
+}
+export interface FleetControlOperationStatusRequest extends FleetControlRequestBase {
+    action: 'operation-status';
+    payload: {
+        operationId: string;
+    };
+}
+export interface FleetControlShutdownRequest extends FleetControlRequestBase {
+    action: 'shutdown';
+    payload: {
+        idempotencyKey: string;
+    };
+}
+export type FleetControlRequest = FleetControlOperationStatusRequest | FleetControlPingRequest | FleetControlShutdownRequest | FleetControlStatusRequest | FleetControlSubmitRequest;
+export declare const FIXED_UNAUTHORIZED_CONTROL_RESPONSE: Readonly<{
+    error: "unauthorized";
+    ok: false;
+    protocolVersion: 1;
+}>;
+export declare class FleetControlUnauthorizedError extends Error {
+    readonly response: Readonly<{
+        error: "unauthorized";
+        ok: false;
+        protocolVersion: 1;
+    }>;
+    constructor();
+}
+export declare function negotiateFleetControlProtocol(range: FleetControlProtocolRange): typeof FLEET_CONTROL_PROTOCOL_VERSION;
+export declare function validateFleetControlRequest(value: unknown): FleetControlRequest;
+export declare function parseFleetControlLine(line: string | Buffer): FleetControlRequest;
+export declare function createFleetControlCapability(): string;
+export declare function digestFleetControlCapability(capability: unknown): string;
+export declare function authorizeFleetControlCapability(suppliedCapability: unknown, expectedDigest: string): void;
+export {};