@firestartr/cli 2.6.0-snapshot → 2.6.0-snapshot-2

package/build/packages/catalog_common/index.d.ts

@@ -1,4 +1,3 @@
-export { SimpleTokenizer } from './src/tokenizer';
 import { validateCron, isValidCron, getCronNextInterval } from './src/cron';
 export type { IBackstageProfile } from './src/types/backstage';
 export type { BranchStrategy } from './src/types/github';
@@ -105,6 +104,15 @@ declare const _default: {
     tokenizer: {
         SimpleTokenizer: typeof import("./src/tokenizer").SimpleTokenizer;
     };
+    codeowners: {
+        parse: typeof import("./src/codeowners").parse;
+        format: typeof import("./src/codeowners").format;
+        validate: typeof import("./src/codeowners").validate;
+        updateRule: typeof import("./src/codeowners").updateRule;
+        remove: typeof import("./src/codeowners").remove;
+        getOwners: typeof import("./src/codeowners").getOwners;
+        resolveRefs: typeof import("./src/codeowners").resolveRefs;
+    };
     cron: {
         validateCron: typeof validateCron;
         isValidCron: typeof isValidCron;

package/build/packages/catalog_common/src/codeowners/index.d.ts

@@ -0,0 +1,26 @@
+export interface CodeownersEntry {
+    type: 'rule' | 'comment' | 'blank';
+    pattern?: string;
+    owners?: string[];
+    raw: string;
+}
+export declare function parse(raw: string): CodeownersEntry[];
+export declare function format(entries: CodeownersEntry[]): string;
+export declare function validate(raw: string): {
+    valid: boolean;
+    errors: string[];
+};
+export declare function updateRule(entries: CodeownersEntry[], pattern: string, owners: string[]): CodeownersEntry[];
+export declare function remove(entries: CodeownersEntry[], pattern: string): CodeownersEntry[];
+export declare function getOwners(entries: CodeownersEntry[]): string[];
+export declare function resolveRefs(raw: string, replacements: Record<string, string>): string;
+declare const _default: {
+    parse: typeof parse;
+    format: typeof format;
+    validate: typeof validate;
+    updateRule: typeof updateRule;
+    remove: typeof remove;
+    getOwners: typeof getOwners;
+    resolveRefs: typeof resolveRefs;
+};
+export default _default;

package/build/packages/catalog_common/src/types/envvars.d.ts

@@ -25,11 +25,7 @@ export declare enum envVars {
     s3Bucket = "S3_BUCKET",
     s3Lock = "S3_LOCK",
     s3Region = "S3_REGION",
-    cdktfConfigFiles = "CDKTF_CONFIG_FILES",
     exclusionsYamlPath = "EXCLUSIONS_PATH",
-    cdktfEntityPath = "FIRESTARTR_CDKTF_ENTITY_PATH",
-    cdktfDepsPath = "FIRESTARTR_CDKTF_DEPS_PATH",
-    cdktfIsImport = "FIRESTARTR_CDKTF_IS_IMPORT",
     githubAppId = "GITHUB_APP_ID",
     githubAppInstallationId = "GITHUB_APP_INSTALLATION_ID",
     githubAppInstallationIdPrefapp = "GITHUB_APP_INSTALLATION_ID_PREFAPP",

package/build/packages/cdk8s_renderer/src/charts/catalog/tfWorkspaceChart.d.ts

@@ -1,7 +1,7 @@
 import { BaseCatalogChart } from './base';
 import { ApiObject, GroupVersionKind } from 'cdk8s';
 export declare class CatalogTFWorkspaceChart extends BaseCatalogChart {
-    template(): Promise<{
+    template(): {
         apiVersion: string;
         kind: string;
         metadata: {
@@ -32,7 +32,7 @@ export declare class CatalogTFWorkspaceChart extends BaseCatalogChart {
             };
             dependsOn: string[];
         };
-    }>;
+    };
     instanceApiObject(template: any): ApiObject;
     gvk(): GroupVersionKind;
 }

package/build/packages/cdk8s_renderer/src/normalizers/refValues.d.ts

@@ -1,18 +1,14 @@
 import { ICustomResourcePatch } from '../patches';
 import { Normalizer } from './base';
 export declare class RefValuesNormalizer extends Normalizer {
+    applicableProviders: string[];
+    __validate(_schema: any): Promise<boolean>;
     rsClaimRef: Function;
-    constructor();
-    normalize(values: any): Promise<{
-        values: any;
-        references: any[];
-    }>;
-    __patches(claim: any, previousCR: any): Promise<ICustomResourcePatch[]>;
-    __validate(): Promise<any>;
-    static applicableProviders: string[];
-    get applicableProviders(): string[];
+    __patches(claim: any, _previousCR: any): Promise<ICustomResourcePatch[]>;
 }
 export declare function replaceReferences(providerValues: any, resolveRef: Function, references?: Map<string, any>): Promise<{
-    values: any;
+    values: {
+        [key: string]: any;
+    };
     references: any[];
 }>;

package/build/packages/cdk8s_renderer/src/normalizers/tfworkspace.d.ts

@@ -6,8 +6,5 @@ export declare class TFWorkspaceNormalizer extends Normalizer {
     __validate(_schema: any): Promise<boolean>;
     __patches(claim: any, _previousCR: any): Promise<ICustomResourcePatch[]>;
 }
-export declare function normalizeModuleContent(tfRootModulePath: string, claim?: any, resolveRef?: Function): Promise<{
-    content: string;
-    references: any[];
-}>;
+export declare function normalizeModuleContent(tfRootModulePath: string): Promise<string>;
 export declare function validatek8sLimits(moduleContent: any): boolean;

package/build/packages/cdk8s_renderer/src/refsSorter/refsExtractor.d.ts

@@ -1,9 +1,6 @@
 import { RenderClaims } from '../renderer/types';
-export declare function extractRefs(renderClaims: RenderClaims, kind: string): Promise<any>;
-export declare function extractAllRefs(claimData: string): Promise<any[]>;
+export declare function extractRefs(renderClaims: RenderClaims, kind: string): any;
+export declare function extractAllRefs(claimData: string): any[];
 export declare function getGroupParentRef(parent: string, references?: any[]): any[];
-export declare function extractTfwpReferences(claim: any): Promise<{
-    tfworkspaceRefs: string[];
-    secretsClaimRefs: string[];
-}>;
+export declare function getTfWorkspacesRefs(values: any, references?: any[], secretsRefs?: any[]): any[][];
 export declare function getComponentVarsAndSecretsRefs(parsedClaim: any): string[];

package/build/packages/gh_provisioner/src/entities/base.d.ts

@@ -12,6 +12,11 @@ type PatchData = {
 };
 export { PatchOperations, PatchData };
 export declare abstract class Entity {
+    parent?: Entity;
+    _terraformHasRun?: boolean;
+    sessionId?: string;
+    sessionProjectPath?: string;
+    __ghProvisionerSessionWorkspaceInitialized?: boolean;
     static refResolver: RefResolver;
     static setRefResolver(refResolver: RefResolver): void;
     _cr: EntityCR;

package/build/packages/gh_provisioner/src/entities/ghrepo/helpers/branch_protections.d.ts

@@ -0,0 +1,7 @@
+import { EntityGHRepo } from '../';
+/**
+ * Adds branch protection config to the synthesized Terraform config,
+ * preserving legacy field semantics exactly (empty lists, explicit booleans, names).
+ * @param entity The EntityGHRepo instance
+ */
+export declare function provisionBranchProtections(entity: EntityGHRepo): void;

package/build/packages/gh_provisioner/src/entities/ghrepo/helpers/index.d.ts

@@ -4,3 +4,4 @@ export { provisionVariables } from './variables';
 export { provisionOIDCSubjectClaim } from './actions_oidc';
 export { provisionPermissions } from './teams';
 export { provisionLabels } from './labels';
+export { provisionBranchProtections } from './branch_protections';

package/build/packages/gh_provisioner/src/entities/ghrepo/index.d.ts

@@ -1,5 +1,6 @@
 import { Entity } from '../base';
 export declare class EntityGHRepo extends Entity {
+    private escapeTerraformBranchName;
     constructor(artifact: any);
     /**
      * Validation logic for GitHub Pages branch settings:

package/build/packages/gh_provisioner/src/tp_bridge.d.ts

@@ -1,6 +1,6 @@
 import { Entity } from './entities';
 export declare function runOnTerraform(entity: Entity, command: string, customArgs?: any[], opts?: any): Promise<any>;
-export declare function buildContext(entity: Entity): {
+export declare function buildContext(entity: Entity, reuseExistingProjectOverride?: boolean, importMode?: boolean): {
     type: string;
     inline: string;
     module: string;
@@ -12,4 +12,6 @@ export declare function buildContext(entity: Entity): {
     tfStatePath: string;
     references: {};
     projectPath: string;
+    reuseExistingProject: boolean;
+    importMode: boolean;
 };

package/build/packages/github/index.d.ts

@@ -32,8 +32,8 @@ declare const _default: {
         getOIDCRepo: typeof import("./src/repository").getOIDCRepo;
         addStatusCheck: typeof import("./src/repository").addStatusCheck;
         addCommitStatus: typeof import("./src/repository").addCommitStatus;
-        tryCreateRef: typeof import("./src/repository").tryCreateRef;
         getRepoIssuesLabels: typeof import("./src/repository").getRepoIssuesLabels;
+        isEmptyRepo: typeof import("./src/repository").isEmptyRepo;
     };
     team: {
         getTeamMembers: typeof import("./src/team").getTeamMembers;

package/build/packages/github/src/repository.d.ts

@@ -1322,12 +1322,12 @@ export declare function uploadFile(destinationPath: string, filePath: string, re
 export declare function deleteFile(path: string, repo: string, owner?: string, branch?: string, message?: string): Promise<void>;
 export declare function addStatusCheck(output: any, is_failure: boolean, head_sha: string, name: string, status: string, repo: string, owner?: string): Promise<void>;
 export declare function addCommitStatus(state: commitStatusState, sha: string, repo: string, owner?: string, target_url?: string, description?: string, context?: string): Promise<void>;
-export declare function tryCreateRef(ref: string, sha: string, repo: string, owner?: string): Promise<boolean>;
 export declare function getRepoIssuesLabels(owner: string, repo: string): Promise<{
     name: string;
     description: string;
     color: string;
 }[]>;
+export declare function isEmptyRepo(owner: string, name: string): Promise<boolean>;
 declare const _default: {
     listReleases: typeof listReleases;
     getReleaseByTag: typeof getReleaseByTag;
@@ -1344,7 +1344,7 @@ declare const _default: {
     getOIDCRepo: typeof getOIDCRepo;
     addStatusCheck: typeof addStatusCheck;
     addCommitStatus: typeof addCommitStatus;
-    tryCreateRef: typeof tryCreateRef;
     getRepoIssuesLabels: typeof getRepoIssuesLabels;
+    isEmptyRepo: typeof isEmptyRepo;
 };
 export default _default;

package/build/packages/importer/src/decanter/gh/github_repo.d.ts

@@ -1,6 +1,8 @@
 import { BranchStrategiesInitializer, GithubRepositoryOverrider, InitializerDefault } from 'cdk8s_renderer';
 import { GithubDecanter } from './base';
 export default class RepoGithubDecanter extends GithubDecanter {
+    __gatherIsEmpty(): Promise<void>;
+    __decantValidateNotEmpty(): void;
     githubTeams: any;
     constructor(data: any, org: string, githubTeams?: any);
     claimKind: string;

package/build/packages/operator/src/definitions.d.ts

@@ -1,6 +1,20 @@
+import type { Dependencies } from './resolver';
 export declare function getKindFromPlural(plural: string): any;
 export declare function getPluralFromKind(kind: string): string;
-import type { Dependencies } from './resolver';
+/**
+ * Helper to extract the canonical identity (metadata.uid) from a WorkItem or its item.
+ *
+ * Use this helper when you need a stable identity key for WorkItems, e.g. for
+ * in-memory deferred-scheduling bookkeeping.
+ *
+ * Note: other subsystems may still use kind/namespace/name keys; this helper is
+ * specifically intended for UID-based WorkItem identity.
+ * Any future change to identity logic MUST be made here and nowhere else.
+ *
+ * Returns undefined if .metadata.uid is missing so scheduler/bookkeeping paths
+ * can safely short-circuit instead of throwing and aborting an entire pass.
+ */
+export declare function getWorkItemIdentity(wi: WorkItem): string | undefined;
 export declare enum OperationType {
     RENAMED = "RENAMED",
     UPDATED = "UPDATED",

package/build/packages/operator/src/processItem.blocks.d.ts

@@ -0,0 +1,40 @@
+import type { WorkItem } from './definitions';
+/**
+ * Maximum number of blocked attempts allowed before an item is moved to the deferred segment.
+ * An item becomes deferred once its blocked-attempt count exceeds this value.
+ */
+export declare const MAX_BLOCKED_ATTEMPTS_BEFORE_DEFER = 5;
+export declare const SUPPORTED_PARENT_KINDS: Set<string>;
+/**
+ * Encapsulates all deferred-scheduling bookkeeping state for one scheduler queue.
+ * Instantiate once per queue (alongside processItemSlotsManager) inside loop().
+ */
+export declare class DeferredSchedulingBookkeeper {
+    private _blockedAttempts;
+    private _deferredEntryOrder;
+    private _deferredOrderCounter;
+    /**
+     * Returns true only for supported parent kinds AND only for deletion operations.
+     * Per spec Definition 2: applicable when operation is MARKED_TO_DELETION,
+     * or RETRY with metadata.deletionTimestamp set.
+     */
+    isDeferredSchedulingApplicable(item: WorkItem): boolean;
+    /**
+     * Increments block counter for item (only call when item has been detected as blocked).
+     * Returns new value. Promotes item to deferred segment if threshold crossed.
+     */
+    incrementBlockedAttempt(item: WorkItem): number;
+    getBlockedAttempts(item: WorkItem): number;
+    isDeferred(item: WorkItem): boolean;
+    getDeferredOrder(item: WorkItem): number | undefined;
+    removeBookkeeping(item: WorkItem): void;
+    /**
+     * Splits queue into non-deferred and deferred, preserving original order,
+     * but sorts deferred by stable insertion order.
+     */
+    partitionQueueByDeferred<T extends WorkItem>(queue: T[]): {
+        nonDeferred: T[];
+        deferred: T[];
+    };
+    clearAllBookkeeping(): void;
+}

package/build/packages/operator/src/processItem.d.ts

@@ -1,4 +1,5 @@
 import { WorkItem } from './informer';
+import { DeferredSchedulingBookkeeper } from './processItem.blocks';
 export declare function getQueueMetrics(): {
     nItems: number;
     nItemsFinished: number;
@@ -25,4 +26,4 @@ export declare function processItem(workItem: WorkItem): Promise<void>;
  * Periodically checks the queue for finished WorkItems and removes them
  * @param {WorkItem[]} queue - Queue of WorkItems
  */
-export declare function workItemGarbageCollector(queue: WorkItem[]): Promise<void>;
+export declare function workItemGarbageCollector(queue: WorkItem[], bookkeeper?: DeferredSchedulingBookkeeper): Promise<void>;

package/build/packages/operator/src/processItem.slot.d.ts

@@ -1,11 +1,11 @@
 import { WorkItem } from './definitions';
 import { ProcessItemSlotMetrics } from './metrics/processItem.slot.metrics';
-export declare function initProcessItemsSlots(nSlots: number, initMetrics?: boolean): ProcessItemSlots;
+export declare function initProcessItemsSlots(nSlots: number, initMetrics?: boolean, onWorkItemBlockedByHandler?: (workItem: WorkItem) => void): ProcessItemSlots;
 export declare class ProcessItemSlots {
     _slots: ProcessItemSlot[];
     _nSlots: number;
     _guardRails: GuardRails;
-    constructor(nSlots: number, initMetrics: boolean);
+    constructor(nSlots: number, initMetrics: boolean, onWorkItemBlockedByHandler?: (workItem: WorkItem) => void);
     getIdleSlots(): Generator<ProcessItemSlot, void, unknown>;
     allSlotsAreIdle(): boolean;
     isWorkItemBlocked(workItem: WorkItem): boolean;
@@ -24,16 +24,19 @@ export declare class ProcessItemSlot {
     _actions: {
         blockItem: (item: any) => void;
         unblockItem: (item: any) => void;
+        onWorkItemBlockedByHandler?: (workItem: WorkItem) => void;
     } | undefined;
     _metrics: ProcessItemSlotMetrics;
     constructor(id: number);
     set actions(actions: {
         blockItem: (item: any) => void;
         unblockItem: (item: any) => void;
+        onWorkItemBlockedByHandler?: (workItem: WorkItem) => void;
     });
     get actions(): {
         blockItem: (item: any) => void;
         unblockItem: (item: any) => void;
+        onWorkItemBlockedByHandler?: (workItem: WorkItem) => void;
     };
     get idle(): boolean;
     get id(): number;

package/build/packages/operator/src/tfm_mirrors.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Configures TFM Mirrors by reading env configuration and invoking warmupMirrors.
+ * Called at operator startup (from index.ts). Fails closed if initial warmup fails.
+ */
+export declare function configureTFMMirrors(): Promise<void>;

package/build/packages/terraform_provisioner/index.d.ts

@@ -1,5 +1,25 @@
-export { TFProjectManager } from './src';
+export { TFProjectManager, DEFAULT_MIRROR_WARMUP_LIST, initializeMirrors, } from './src';
 import type { ProcessHandler } from './src/process_handler';
+export interface WarmupMirrorsRefreshOptions {
+    enabled?: boolean;
+    runEvery?: number;
+    beforeRefresh?: () => Promise<void>;
+    onError?: (error: Error) => void | Promise<void>;
+}
+export interface WarmupMirrorsResult {
+    success: string[];
+    failed: {
+        repo: string;
+        error: string;
+    }[];
+    initializeRefresher: (runEvery: number, beforeRefresh?: () => Promise<void>, onError?: (error: Error) => void | Promise<void>) => {
+        stop: () => void;
+    };
+    refresher?: {
+        stop: () => void;
+    };
+}
+export declare function warmupMirrors(repos?: ReadonlyArray<string>, refreshOptions?: WarmupMirrorsRefreshOptions): Promise<WarmupMirrorsResult>;
 export declare function validateContext(context: any): void;
 export declare function run(): Promise<void>;
 export declare function runTerraformProvisioner(context: any, command?: string, streaming?: any, customArgs?: any, ctl?: ProcessHandler): Promise<any>;

package/build/packages/terraform_provisioner/src/index.d.ts

@@ -1,3 +1,5 @@
 import { TFProjectManager } from './project_tf';
 export { getRefNameFromKey, resolveRef } from './resolutor';
+export { DEFAULT_MIRROR_WARMUP_LIST, resolveMirroredModuleSource, } from './mirror-repos/index';
+export { initializeMirrors } from './mirror-repos';
 export { TFProjectManager };

package/build/packages/terraform_provisioner/src/mirror-repos/index.d.ts

@@ -0,0 +1,41 @@
+export declare const MIRROR_ROOT = "/tmp/tfm_mirrors/";
+/**
+ * Returns true if the mirror subsystem is enabled for this process
+ */
+export declare function areMirrorsEnabled(): boolean;
+export declare function enableMirrors(): void;
+export declare function getCanonicalRepoId(remoteUrl: string): string;
+export declare function deriveMirrorPath(remoteUrl: string): string;
+export declare function installMirrorForRepo(remoteUrl: string): Promise<string>;
+export declare function translateModuleSource(source: string): string;
+export declare function _getMirrorRegistry(): ReadonlyMap<string, string>;
+export declare function resetMirrorRegistry(): void;
+/**
+ * Refresh an existing git mirror by running 'git fetch --prune'.
+ * Throws if the mirror is invalid or the fetch fails.
+ */
+export declare function refreshMirror(mirrorPath: string): Promise<void>;
+export { initializeMirrors } from '../mirror-repos';
+/**
+ * Default repository list to be warmed up (mirrored) by the warmup API.
+ * Callers can supply their own repo list to extend or override this default.
+ */
+export declare const DEFAULT_MIRROR_WARMUP_LIST: ReadonlyArray<string>;
+/**
+ * Warmup function: Installs or updates mirrors for a provided repo list (default: DEFAULT_MIRROR_WARMUP_LIST).
+ * Returns a summary of success/failure for each repo.
+ */
+export declare function warmupMirrors(repos?: ReadonlyArray<string>): Promise<{
+    success: string[];
+    failed: {
+        repo: string;
+        error: string;
+    }[];
+}>;
+/**
+ * Resolves and installs a mirror for a git-backed Terraform root module source.
+ * If translation is possible (eligible git::...), returns a local mirror source,
+ * else returns the original source string unchanged.
+ * Wraps both detection & mirror install. See spec 002-mirror-tfm-usage.
+ */
+export declare function resolveMirroredModuleSource(source: string): Promise<string>;

package/build/packages/terraform_provisioner/src/mirror-repos.d.ts

@@ -0,0 +1,13 @@
+import { warmupMirrors, DEFAULT_MIRROR_WARMUP_LIST, refreshMirror, _getMirrorRegistry, getCanonicalRepoId, installMirrorForRepo, deriveMirrorPath, resetMirrorRegistry, MIRROR_ROOT, resolveMirroredModuleSource, translateModuleSource, enableMirrors, areMirrorsEnabled } from './mirror-repos/index';
+export { warmupMirrors, DEFAULT_MIRROR_WARMUP_LIST, refreshMirror, _getMirrorRegistry, getCanonicalRepoId, installMirrorForRepo, deriveMirrorPath, resetMirrorRegistry, MIRROR_ROOT, resolveMirroredModuleSource, translateModuleSource, enableMirrors, areMirrorsEnabled, };
+interface MirrorSummary {
+    success: string[];
+    failed: {
+        repo: string;
+        error: string;
+    }[];
+    initializeRefresher: (runEvery: number, beforeRefresh?: () => Promise<void>, onError?: (error: Error) => void | Promise<void>) => {
+        stop: () => void;
+    };
+}
+export declare function initializeMirrors(repos?: ReadonlyArray<string>): Promise<MirrorSummary>;

package/build/packages/terraform_provisioner/src/project_tf.d.ts

@@ -6,6 +6,9 @@ import { WriterAdditionalFiles } from './writer_additional_files';
 import { PassThrough } from 'stream';
 import type { ProcessHandler } from './process_handler';
 export declare class TFProjectManager {
+    tearUpProject(): Promise<void>;
+    ctx: any;
+    private _reuseActive;
     mainTfWriter: WriterMainTf;
     providerJsonWriter: WriterProviderJson;
     tfVarsJsonWriter: WriterTfVarsJson;

package/build/packages/terraform_provisioner/src/project_tf_remote.d.ts

@@ -6,7 +6,9 @@ import { WriterAdditionalFiles } from './writer_additional_files';
 import { PassThrough } from 'stream';
 import type { ProcessHandler } from './process_handler';
 export declare class TFProjectManagerRemote {
+    tearUpProject(): Promise<void>;
     writerTerraform: WriterTerraform;
+    private _reuseActive;
     providerJsonWriter: WriterProviderJson;
     tfVarsJsonWriter: WriterTfVarsJson;
     additionalFilesWriter: WriterAdditionalFiles;
@@ -24,7 +26,6 @@ export declare class TFProjectManagerRemote {
     getOutput(): any;
     setStreamCallbacks(fnData: Function, fnEnd: (...args: any[]) => void, reopen?: boolean): void;
     build(): Promise<void>;
-    __configGit(): Promise<void>;
     __init(): Promise<void>;
     __initFromModule(): Promise<void>;
     validate(): Promise<void>;

package/build/packages/terraform_provisioner/src/schema.d.ts

@@ -5,6 +5,11 @@ declare const _default: {
     type: string;
     required: string[];
     properties: {
+        reuseExistingProject: {
+            type: string;
+            description: string;
+            default: boolean;
+        };
         inline: {
             type: string;
         };

package/build/packages/terraform_provisioner/src/utils.d.ts

@@ -1,6 +1,20 @@
 /// <reference types="node" />
 import { PassThrough } from 'stream';
 import type { ProcessHandler } from './process_handler';
+export declare function shouldWriteProviderJson(ctx: any): Promise<boolean>;
+/**
+ * Compute the expected generated workspace files for Inline projects.
+ */
+export declare function computeInlineWorkspaceFiles(ctx: any): Promise<string[]>;
+/**
+ * Compute the expected generated workspace files for Remote projects.
+ */
+export declare function computeRemoteWorkspaceFiles(ctx: any): Promise<string[]>;
+/**
+ * Validate workspace structure: checks for existence of all required files/dirs.
+ * Returns array of missing paths (or [] if all exist).
+ */
+export declare function validateWorkspaceStructure(projectPath: string, expectedFiles: string[]): string[];
 export declare function validate(path: string, secrets: any[]): Promise<unknown>;
 export declare function init(path: string, secrets: any[], stream?: PassThrough, ctl?: ProcessHandler): Promise<unknown>;
 export declare function initFromModule(path: string, source: string, secrets: any[], stream?: PassThrough, ctl?: ProcessHandler): Promise<unknown>;
@@ -10,4 +24,22 @@ export declare function customCommand(path: string, secrets: any[], args: any[],
 export declare function destroy(path: string, secrets: any[], stream?: PassThrough, ctl?: ProcessHandler): Promise<unknown>;
 export declare function output(path: string, secrets: any[]): Promise<unknown>;
 export declare function tfExec(path: string, args: Array<string>, secrets: any[], extraArgs?: string[], stream?: PassThrough, ctl?: ProcessHandler): Promise<unknown>;
-export declare function configureGit(ghToken: string): Promise<unknown>;
+/**
+ * Clone a remote repository as a git bare mirror.
+ */
+export declare function gitCloneMirror(remoteUrl: string, mirrorPath: string): Promise<void>;
+/**
+ * Perform a git remote update on an existing mirror repo.
+ */
+export declare function gitRemoteUpdate(mirrorPath: string): Promise<void>;
+/**
+ * Run 'git fetch --prune' in a bare or mirror repository.
+ * Throws if the operation fails.
+ */
+export declare function gitFetchPrune(mirrorPath: string): Promise<void>;
+/**
+ * Single package-wide GitHub authentication config writer for repo mirrors and remote workflows.
+ * Writes the required url rewriting stanza to /home/node/.gitconfig based on the current org's GitHub App token.
+ * This is the ONLY allowed implementation of project git-auth per package specs.
+ */
+export declare function configGit(): Promise<void>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@firestartr/cli",
-  "version": "2.6.0-snapshot",
+  "version": "2.6.0-snapshot-2",
   "private": false,
   "description": "Commandline tool",
   "main": "build/main.js",

package/build/202.index.js

@@ -1,46 +0,0 @@
-export const id = 202;
-export const ids = [202];
-export const modules = {
-
-/***/ 66202:
-/***/ ((__unused_webpack_module, exports, __webpack_require__) => {
-
-
-Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.getMachineId = void 0;
-/*
- * Copyright The OpenTelemetry Authors
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *      https://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-const fs_1 = __webpack_require__(57147);
-const api_1 = __webpack_require__(78199);
-async function getMachineId() {
-    const paths = ['/etc/machine-id', '/var/lib/dbus/machine-id'];
-    for (const path of paths) {
-        try {
-            const result = await fs_1.promises.readFile(path, { encoding: 'utf8' });
-            return result.trim();
-        }
-        catch (e) {
-            api_1.diag.debug(`error reading machine id: ${e}`);
-        }
-    }
-    return undefined;
-}
-exports.getMachineId = getMachineId;
-//# sourceMappingURL=getMachineId-linux.js.map
-
-/***/ })
-
-};