@empire-builder-kit/nx 1.0.0-beta.9 → 1.0.0-rc.2

package/src/cli/blueprint-command.js

@@ -0,0 +1,63 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runBlueprintVerificationReview = runBlueprintVerificationReview;
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const blueprint_trust_git_js_1 = require("../supply-chain/blueprint-trust-git.js");
+const generated_blueprint_trust_command_js_1 = require("../supply-chain/generated-blueprint-trust-command.js");
+const blueprint_trust_process_js_1 = require("../supply-chain/blueprint-trust-process.js");
+function runBlueprintVerificationReview(workspaceRoot, io, spawn = node_child_process_1.spawnSync, parentAuthority = {}) {
+    (0, blueprint_trust_process_js_1.assertSafeBlueprintAuthorityParent)(parentAuthority.environment ?? process.env, parentAuthority.execArguments ?? process.execArgv);
+    const root = (0, node_fs_1.realpathSync)((0, node_path_1.resolve)(workspaceRoot));
+    const scriptPath = (0, node_path_1.join)(root, 'tools', 'blueprint-trust-check.mjs');
+    const scriptChild = (0, node_path_1.relative)(root, scriptPath);
+    const metadata = (0, node_fs_1.lstatSync)(scriptPath);
+    const source = (0, node_fs_1.readFileSync)(scriptPath, 'utf8');
+    const expected = (0, generated_blueprint_trust_command_js_1.renderBlueprintTrustCheckCommand)();
+    if (scriptChild === '..' ||
+        scriptChild.startsWith(`..${node_path_1.sep}`) ||
+        metadata.isSymbolicLink() ||
+        !metadata.isFile() ||
+        metadata.nlink !== 1 ||
+        metadata.size !== Buffer.byteLength(expected, 'utf8') ||
+        (0, node_fs_1.realpathSync)(scriptPath) !== scriptPath ||
+        source !== expected) {
+        throw new Error('Blueprint verification review requires the exact generated framework script.');
+    }
+    const authority = (0, blueprint_trust_git_js_1.inspectProtectedGitFileRefAuthority)({
+        current: Buffer.from(source, 'utf8'),
+        path: 'tools/blueprint-trust-check.mjs',
+        protectedRef: 'refs/remotes/origin/develop',
+        workspaceRoot: root,
+    });
+    if (authority.headCommit !== authority.protectedCommit) {
+        throw new Error('Blueprint verification review runs only at the exact protected develop commit.');
+    }
+    const result = spawn((0, node_fs_1.realpathSync)(process.execPath), [
+        '--input-type=module',
+        '-',
+        '--operation=adopt',
+        '--protected-branch=develop',
+        '--protected-ref=refs/remotes/origin/develop',
+        '--review-verification',
+        '--output=.ebk/evidence/supply-chain/blueprint-verification-review.json',
+    ], {
+        cwd: root,
+        encoding: 'utf8',
+        env: (0, blueprint_trust_process_js_1.controlledBlueprintTrustEnvironment)({ authorityEntry: true }),
+        input: source,
+        maxBuffer: 5 * 1024 * 1024,
+        shell: false,
+        timeout: 15 * 60 * 1_000,
+        windowsHide: true,
+    });
+    if (result.stdout)
+        io.stdout(result.stdout);
+    if (result.stderr)
+        io.stderr(result.stderr);
+    if (result.error)
+        throw result.error;
+    return result.status === 0 ? 0 : 1;
+}
+//# sourceMappingURL=blueprint-command.js.map

package/src/cli/blueprint-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blueprint-command.js","sourceRoot":"","sources":["../../../../../packages/nx/src/cli/blueprint-command.ts"],"names":[],"mappings":";;AAoCA,wEAsEC;AA1GD,2DAAsE;AACtE,qCAAgE;AAChE,yCAAyD;AAEzD,mFAA6F;AAC7F,+GAAwG;AACxG,2FAGoD;AA2BpD,SAAgB,8BAA8B,CAC5C,aAAqB,EACrB,EAAiC,EACjC,QAA8B,8BAAS,EACvC,kBAGI,EAAE;IAEN,IAAA,+DAAkC,EAChC,eAAe,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAC1C,eAAe,CAAC,aAAa,IAAI,OAAO,CAAC,QAAQ,CAClD,CAAC;IACF,MAAM,IAAI,GAAG,IAAA,sBAAY,EAAC,IAAA,mBAAO,EAAC,aAAa,CAAC,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,OAAO,EAAE,2BAA2B,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,IAAA,oBAAQ,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAA,mBAAS,EAAC,UAAU,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,IAAA,sBAAY,EAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,IAAA,uEAAgC,GAAE,CAAC;IACpD,IACE,WAAW,KAAK,IAAI;QACpB,WAAW,CAAC,UAAU,CAAC,KAAK,eAAG,EAAE,CAAC;QAClC,QAAQ,CAAC,cAAc,EAAE;QACzB,CAAC,QAAQ,CAAC,MAAM,EAAE;QAClB,QAAQ,CAAC,KAAK,KAAK,CAAC;QACpB,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;QACrD,IAAA,sBAAY,EAAC,UAAU,CAAC,KAAK,UAAU;QACvC,MAAM,KAAK,QAAQ,EACnB,CAAC;QACD,MAAM,IAAI,KAAK,CACb,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,IAAA,4DAAmC,EAAC;QACpD,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;QACpC,IAAI,EAAE,iCAAiC;QACvC,YAAY,EAAE,6BAA6B;QAC3C,aAAa,EAAE,IAAI;KACpB,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,UAAU,KAAK,SAAS,CAAC,eAAe,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAClB,IAAA,sBAAY,EAAC,OAAO,CAAC,QAAQ,CAAC,EAC9B;QACE,qBAAqB;QACrB,GAAG;QACH,mBAAmB;QACnB,4BAA4B;QAC5B,6CAA6C;QAC7C,uBAAuB;QACvB,wEAAwE;KACzE,EACD;QACE,GAAG,EAAE,IAAI;QACT,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,IAAA,gEAAmC,EAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QAClE,KAAK,EAAE,MAAM;QACb,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;QAC1B,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,KAAK;QACxB,WAAW,EAAE,IAAI;KAClB,CACF,CAAC;IACF,IAAI,MAAM,CAAC,MAAM;QAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,MAAM;QAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,KAAK;QAAE,MAAM,MAAM,CAAC,KAAK,CAAC;IACrC,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC"}

package/src/cli/bootstrap.d.ts

@@ -0,0 +1,31 @@
+#!/usr/bin/env node
+import { type SpawnSyncReturns } from 'node:child_process';
+interface BootstrapIo {
+    cwd?: string;
+    stderr?: (value: string) => void;
+    stdout?: (value: string) => void;
+}
+interface BootstrapDependencies {
+    environment?: NodeJS.ProcessEnv;
+    execArguments?: readonly string[];
+    launchBlueprint?: typeof launchBlueprintAuthority;
+    loadMain?: () => Promise<typeof import('./main.js')>;
+}
+type BlueprintAuthoritySpawn = (command: string, arguments_: readonly string[], options: {
+    cwd: string;
+    encoding: 'utf8';
+    env: NodeJS.ProcessEnv;
+    maxBuffer: number;
+    shell: false;
+    timeout: number;
+    windowsHide: true;
+}) => SpawnSyncReturns<string>;
+export declare function launchBlueprintAuthority(workspaceRoot: string, io: Required<Pick<BootstrapIo, 'stderr' | 'stdout'>>, parentAuthority?: {
+    environment?: NodeJS.ProcessEnv;
+    execArguments?: readonly string[];
+}, spawn?: BlueprintAuthoritySpawn, runtime?: {
+    childPath?: string;
+    nodeExecutable?: string;
+}): 0 | 1;
+export declare function runEbkBootstrap(arguments_: readonly string[], io?: BootstrapIo, dependencies?: BootstrapDependencies): Promise<0 | 1 | 2>;
+export {};

package/src/cli/bootstrap.js

@@ -0,0 +1,165 @@
+#!/usr/bin/env node
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.launchBlueprintAuthority = launchBlueprintAuthority;
+exports.runEbkBootstrap = runEbkBootstrap;
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const BLUEPRINT_HELP = `Usage: ebk blueprint <command>
+
+Commands:
+  verification-review  Execute protected Blueprint verification roots and retain receipts`;
+function safeMessage(error) {
+    return [...(error instanceof Error ? error.message : String(error))]
+        .map((character) => {
+        const codePoint = character.codePointAt(0) ?? 0;
+        return codePoint <= 0x1f || (codePoint >= 0x7f && codePoint <= 0x9f)
+            ? ' '
+            : character;
+    })
+        .join('')
+        .slice(0, 2_000);
+}
+const PRE_INTERPRETER_AUTHORITY_ENVIRONMENT = [
+    'BASH_ENV',
+    'DYLD_FRAMEWORK_PATH',
+    'DYLD_INSERT_LIBRARIES',
+    'DYLD_LIBRARY_PATH',
+    'ENV',
+    'LD_AUDIT',
+    'LD_LIBRARY_PATH',
+    'LD_PRELOAD',
+    'NODE_OPTIONS',
+    'PNPM_PACKAGE_NAME',
+    'PNPM_SCRIPT_SRC_DIR',
+    'npm_command',
+    'npm_config_argv',
+    'npm_config_user_agent',
+    'npm_execpath',
+    'npm_lifecycle_event',
+    'npm_lifecycle_script',
+    'npm_node_execpath',
+    'npm_package_json',
+];
+function assertSafeBlueprintLauncher(environment, execArguments) {
+    const unsafe = new Set(PRE_INTERPRETER_AUTHORITY_ENVIRONMENT.map((name) => name.toLowerCase()));
+    const active = Object.entries(environment)
+        .filter(([name, value]) => unsafe.has(name.toLowerCase()) && (value ?? '').trim().length > 0)
+        .map(([name]) => name)
+        .sort();
+    if (execArguments.length > 0 || active.length > 0) {
+        throw new Error(`Blueprint verification review refuses ambient launcher or pre-interpreter authority${active.length > 0 ? ` (${active.join(', ')})` : ''}.`);
+    }
+}
+function controlledBlueprintLauncherEnvironment() {
+    const node = (0, node_fs_1.realpathSync)(process.execPath);
+    const home = (0, node_os_1.userInfo)().homedir;
+    const temporary = (0, node_fs_1.realpathSync)((0, node_os_1.tmpdir)());
+    const systemRoot = process.env.SystemRoot ?? process.env.WINDIR;
+    if (!(0, node_path_1.isAbsolute)(node) ||
+        !(0, node_path_1.isAbsolute)(home) ||
+        !(0, node_path_1.isAbsolute)(temporary) ||
+        /[\0\r\n"]/u.test(node) ||
+        (process.platform === 'win32' &&
+            (typeof systemRoot !== 'string' ||
+                !(0, node_path_1.isAbsolute)(systemRoot) ||
+                /[\0\r\n"%!^&|<>]/u.test(systemRoot)))) {
+        throw new Error('Blueprint verification review cannot establish a controlled child process.');
+    }
+    const systemPath = process.platform === 'win32' && typeof systemRoot === 'string'
+        ? [(0, node_path_1.dirname)(node), (0, node_path_1.join)(systemRoot, 'System32')]
+        : [(0, node_path_1.dirname)(node), '/usr/bin', '/bin'];
+    return {
+        BASH_ENV: '',
+        CI: 'true',
+        DYLD_FRAMEWORK_PATH: '',
+        DYLD_INSERT_LIBRARIES: '',
+        DYLD_LIBRARY_PATH: '',
+        EBK_BLUEPRINT_AUTHORITY_CHILD: 'ebk-bootstrap-v1',
+        ENV: '',
+        HOME: home,
+        LD_AUDIT: '',
+        LD_LIBRARY_PATH: '',
+        LD_PRELOAD: '',
+        NODE_OPTIONS: '',
+        NODE_PATH: '',
+        PATH: systemPath.join(node_path_1.delimiter),
+        TEMP: temporary,
+        TMP: temporary,
+        TMPDIR: temporary,
+        USERPROFILE: home,
+        ...(process.platform === 'win32' && typeof systemRoot === 'string'
+            ? {
+                COMSPEC: (0, node_path_1.join)(systemRoot, 'System32', 'cmd.exe'),
+                PATHEXT: '.COM;.EXE;.BAT;.CMD',
+                SystemRoot: systemRoot,
+                WINDIR: systemRoot,
+            }
+            : {}),
+    };
+}
+function launchBlueprintAuthority(workspaceRoot, io, parentAuthority = {}, spawn = node_child_process_1.spawnSync, runtime = {}) {
+    assertSafeBlueprintLauncher(parentAuthority.environment ?? process.env, parentAuthority.execArguments ?? process.execArgv);
+    const node = (0, node_fs_1.realpathSync)(runtime.nodeExecutable ?? process.execPath);
+    const child = (0, node_fs_1.realpathSync)(runtime.childPath ?? (0, node_path_1.join)(__dirname, 'blueprint-authority.js'));
+    const metadata = (0, node_fs_1.lstatSync)(child);
+    if (!metadata.isFile() || metadata.isSymbolicLink()) {
+        throw new Error('Blueprint verification review requires its installed internal authority entry.');
+    }
+    const result = spawn(node, [child], {
+        cwd: (0, node_fs_1.realpathSync)(workspaceRoot),
+        encoding: 'utf8',
+        env: controlledBlueprintLauncherEnvironment(),
+        maxBuffer: 5 * 1024 * 1024,
+        shell: false,
+        timeout: 15 * 60 * 1_000,
+        windowsHide: true,
+    });
+    if (result.stdout)
+        io.stdout(result.stdout);
+    if (result.stderr)
+        io.stderr(result.stderr);
+    if (result.error)
+        throw result.error;
+    return result.status === 0 ? 0 : 1;
+}
+async function runEbkBootstrap(arguments_, io = {}, dependencies = {}) {
+    const output = {
+        stderr: io.stderr ?? ((value) => process.stderr.write(value)),
+        stdout: io.stdout ?? ((value) => process.stdout.write(value)),
+    };
+    if (arguments_[0] !== 'blueprint') {
+        const runtime = await (dependencies.loadMain ?? (() => Promise.resolve().then(() => require('./main.js'))))();
+        return runtime.runEbkCli(arguments_, io);
+    }
+    if (arguments_.length === 1 ||
+        (arguments_.length === 2 && arguments_[1] === '--help') ||
+        (arguments_.length === 3 &&
+            arguments_[1] === 'verification-review' &&
+            arguments_[2] === '--help')) {
+        output.stdout(`${BLUEPRINT_HELP}\n`);
+        return 0;
+    }
+    if (arguments_.length !== 2 || arguments_[1] !== 'verification-review') {
+        output.stderr('[invalid-input] ebk blueprint accepts only verification-review without options.\n');
+        return 2;
+    }
+    try {
+        return (dependencies.launchBlueprint ?? launchBlueprintAuthority)((0, node_fs_1.realpathSync)(io.cwd ?? process.cwd()), output, {
+            environment: dependencies.environment ?? process.env,
+            execArguments: dependencies.execArguments ?? process.execArgv,
+        });
+    }
+    catch (error) {
+        output.stderr(`[tool-internal-error] ${safeMessage(error)}\n`);
+        return 1;
+    }
+}
+if (require.main === module) {
+    void runEbkBootstrap(process.argv.slice(2)).then((code) => {
+        process.exitCode = code;
+    });
+}
+//# sourceMappingURL=bootstrap.js.map

package/src/cli/bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../../../../packages/nx/src/cli/bootstrap.ts"],"names":[],"mappings":";;;AAqJA,4DAqCC;AAED,0CA4CC;AAtOD,2DAAsE;AACtE,qCAAkD;AAClD,qCAA2C;AAC3C,yCAAiE;AA6BjE,MAAM,cAAc,GAAG;;;0FAGmE,CAAC;AAE3F,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,CAAC,GAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;SACjE,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QACjB,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO,SAAS,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,SAAS,IAAI,IAAI,CAAC;YAClE,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC;SACR,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,qCAAqC,GAAG;IAC5C,UAAU;IACV,qBAAqB;IACrB,uBAAuB;IACvB,mBAAmB;IACnB,KAAK;IACL,UAAU;IACV,iBAAiB;IACjB,YAAY;IACZ,cAAc;IACd,mBAAmB;IACnB,qBAAqB;IACrB,aAAa;IACb,iBAAiB;IACjB,uBAAuB;IACvB,cAAc;IACd,qBAAqB;IACrB,sBAAsB;IACtB,mBAAmB;IACnB,kBAAkB;CACV,CAAC;AAEX,SAAS,2BAA2B,CAClC,WAA8B,EAC9B,aAAgC;IAEhC,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,qCAAqC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CACxE,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;SACvC,MAAM,CACL,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAChB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CACpE;SACA,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;SACrB,IAAI,EAAE,CAAC;IACV,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,sFACE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAClD,GAAG,CACJ,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,sCAAsC;IAC7C,MAAM,IAAI,GAAG,IAAA,sBAAY,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAA,kBAAQ,GAAE,CAAC,OAAO,CAAC;IAChC,MAAM,SAAS,GAAG,IAAA,sBAAY,EAAC,IAAA,gBAAM,GAAE,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;IAChE,IACE,CAAC,IAAA,sBAAU,EAAC,IAAI,CAAC;QACjB,CAAC,IAAA,sBAAU,EAAC,IAAI,CAAC;QACjB,CAAC,IAAA,sBAAU,EAAC,SAAS,CAAC;QACtB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QACvB,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC3B,CAAC,OAAO,UAAU,KAAK,QAAQ;gBAC7B,CAAC,IAAA,sBAAU,EAAC,UAAU,CAAC;gBACvB,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GACd,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,UAAU,KAAK,QAAQ;QAC5D,CAAC,CAAC,CAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,EAAE,IAAA,gBAAI,EAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO;QACL,QAAQ,EAAE,EAAE;QACZ,EAAE,EAAE,MAAM;QACV,mBAAmB,EAAE,EAAE;QACvB,qBAAqB,EAAE,EAAE;QACzB,iBAAiB,EAAE,EAAE;QACrB,6BAA6B,EAAE,kBAAkB;QACjD,GAAG,EAAE,EAAE;QACP,IAAI,EAAE,IAAI;QACV,QAAQ,EAAE,EAAE;QACZ,eAAe,EAAE,EAAE;QACnB,UAAU,EAAE,EAAE;QACd,YAAY,EAAE,EAAE;QAChB,SAAS,EAAE,EAAE;QACb,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,qBAAS,CAAC;QAChC,IAAI,EAAE,SAAS;QACf,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,SAAS;QACjB,WAAW,EAAE,IAAI;QACjB,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,UAAU,KAAK,QAAQ;YAChE,CAAC,CAAC;gBACE,OAAO,EAAE,IAAA,gBAAI,EAAC,UAAU,EAAE,UAAU,EAAE,SAAS,CAAC;gBAChD,OAAO,EAAE,qBAAqB;gBAC9B,UAAU,EAAE,UAAU;gBACtB,MAAM,EAAE,UAAU;aACnB;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,SAAgB,wBAAwB,CACtC,aAAqB,EACrB,EAAoD,EACpD,kBAGI,EAAE,EACN,QAAiC,8BAAS,EAC1C,UAA2D,EAAE;IAE7D,2BAA2B,CACzB,eAAe,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAC1C,eAAe,CAAC,aAAa,IAAI,OAAO,CAAC,QAAQ,CAClD,CAAC;IACF,MAAM,IAAI,GAAG,IAAA,sBAAY,EAAC,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,IAAA,sBAAY,EACxB,OAAO,CAAC,SAAS,IAAI,IAAA,gBAAI,EAAC,SAAS,EAAE,wBAAwB,CAAC,CAC/D,CAAC;IACF,MAAM,QAAQ,GAAG,IAAA,mBAAS,EAAC,KAAK,CAAC,CAAC;IAClC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE;QAClC,GAAG,EAAE,IAAA,sBAAY,EAAC,aAAa,CAAC;QAChC,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,sCAAsC,EAAE;QAC7C,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;QAC1B,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,KAAK;QACxB,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM;QAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,MAAM;QAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,KAAK;QAAE,MAAM,MAAM,CAAC,KAAK,CAAC;IACrC,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAEM,KAAK,UAAU,eAAe,CACnC,UAA6B,EAC7B,KAAkB,EAAE,EACpB,eAAsC,EAAE;IAExC,MAAM,MAAM,GAAG;QACb,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrE,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;KACtE,CAAC;IACF,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,CACpB,YAAY,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,sCAAQ,WAAW,EAAC,CAAC,CACrD,EAAE,CAAC;QACJ,OAAO,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,IACE,UAAU,CAAC,MAAM,KAAK,CAAC;QACvB,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC;QACvD,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YACtB,UAAU,CAAC,CAAC,CAAC,KAAK,qBAAqB;YACvC,UAAU,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,EAC7B,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,GAAG,cAAc,IAAI,CAAC,CAAC;QACrC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,qBAAqB,EAAE,CAAC;QACvE,MAAM,CAAC,MAAM,CACX,mFAAmF,CACpF,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CAAC,YAAY,CAAC,eAAe,IAAI,wBAAwB,CAAC,CAC/D,IAAA,sBAAY,EAAC,EAAE,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,EACrC,MAAM,EACN;YACE,WAAW,EAAE,YAAY,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG;YACpD,aAAa,EAAE,YAAY,CAAC,aAAa,IAAI,OAAO,CAAC,QAAQ;SAC9D,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,CAAC,yBAAyB,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/D,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,KAAK,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACxD,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/src/cli/dev-command.d.ts

@@ -0,0 +1,92 @@
+import { type LocalDevContextInput } from '../local-dev/local-context.js';
+import { type AgentCliCommand } from './agent-command.js';
+export declare const EBK_AGENT_COMMANDS: readonly ["context", "handoff", "plan", "resume", "upgrade-preview"];
+export declare const EBK_DEV_COMMANDS: readonly ["configure", "doctor", "down", "logs", "prune", "ps", "restart", "setup", "status", "tail", "up"];
+export declare const EBK_SECRET_COMMANDS: readonly ["remove", "set"];
+export type CliHelpCommand = {
+    kind: 'help';
+    namespace?: 'agent' | 'dev' | 'secret';
+};
+export type CliVersionCommand = {
+    kind: 'version';
+};
+export interface DevSliceSelector {
+    all: boolean;
+    slices: string[];
+}
+interface DevCommandBase {
+    json: boolean;
+    kind: 'dev';
+}
+export interface DevConfigureCommand extends DevCommandBase {
+    command: 'configure';
+    clearDevelopmentRouterOrigin: boolean;
+    input: LocalDevContextInput;
+    show: boolean;
+}
+export interface DevSetupCommand extends DevCommandBase {
+    command: 'setup';
+    portless: boolean;
+    remove: boolean;
+    trust: boolean;
+    upgrade: boolean;
+}
+export interface DevUpCommand extends DevCommandBase {
+    command: 'up';
+    foreground: boolean;
+    initialContext: LocalDevContextInput;
+    noWait: boolean;
+    selector: DevSliceSelector;
+    sstMode: 'mono' | 'multiplexer';
+    timeoutMs?: number;
+}
+export interface DevLifecycleCommand extends DevCommandBase {
+    command: 'down' | 'restart';
+    noWait: boolean;
+    selector: DevSliceSelector;
+    timeoutMs?: number;
+}
+export interface DevStatusCommand extends DevCommandBase {
+    command: 'status';
+}
+export interface DevDoctorCommand extends DevCommandBase {
+    command: 'doctor';
+    environmentOnly: boolean;
+    refresh: boolean;
+}
+export interface DevLogsCommand extends DevCommandBase {
+    attempt?: number;
+    command: 'logs';
+    contains?: string;
+    correlationId?: string;
+    level?: 'debug' | 'error' | 'fatal' | 'info' | 'trace' | 'warn';
+    limit: number;
+    selector?: DevSliceSelector;
+    since?: string;
+    stream?: 'stderr' | 'stdout';
+    until?: string;
+}
+export interface DevTailCommand extends DevCommandBase {
+    command: 'tail';
+    level?: 'debug' | 'error' | 'fatal' | 'info' | 'trace' | 'warn';
+    lines: number;
+    selector?: DevSliceSelector;
+}
+export interface DevPsCommand extends DevCommandBase {
+    command: 'ps';
+}
+export interface DevPruneCommand extends DevCommandBase {
+    allStale: boolean;
+    command: 'prune';
+    fleetId?: string;
+}
+export type DevCliCommand = DevConfigureCommand | DevDoctorCommand | DevLifecycleCommand | DevLogsCommand | DevPruneCommand | DevPsCommand | DevSetupCommand | DevStatusCommand | DevTailCommand | DevUpCommand;
+export interface SecretCliCommand {
+    command: 'remove' | 'set';
+    kind: 'secret';
+    logicalName: string;
+    slice: string;
+}
+export type ParsedEbkCommand = AgentCliCommand | CliHelpCommand | CliVersionCommand | DevCliCommand | SecretCliCommand;
+export declare function parseEbkArguments(arguments_: readonly string[]): ParsedEbkCommand;
+export {};