@forgecart/cli 2.202610102045.0 → 2.202610110825.0

package/dist/src/sync/sync-dotenv.file.js

@@ -0,0 +1,95 @@
+import { createHash } from 'node:crypto';
+import { readFile, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { CliCredentialKey, } from '../authorization/type/cli-authorization.types.js';
+import { dotenvValue, mergeDotenv, merchantAssignments } from '../util/dotenv.util.js';
+/**
+ * The laptop's `.env`, as `forgecart sync` carries it (#2781). Only merchant
+ * lines travel — the platform's `FORGECART_*` keys never cross — and they
+ * travel under init's merge rule: a key is refreshed in place, every other line
+ * is kept verbatim, nothing is deleted.
+ *
+ * A push carries the merchant lines changed since they last travelled, so a
+ * key the workspace changed meanwhile is not overwritten by a stale copy; a
+ * pull takes the workspace's lines for every key the laptop has not changed
+ * since, beside the run's four credentials — the `.env` a fresh pull writes.
+ * What travelled is recorded as a digest per key, never the value.
+ */
+export class SyncDotenvFile {
+    path;
+    constructor(storefront) {
+        this.path = join(storefront, '.env');
+    }
+    /** The merchant lines a push carries — every one changed since `recorded` — and the digests to record once they land. */
+    async outgoing(recorded) {
+        const assignments = merchantAssignments((await this.read()).split('\n'));
+        const digests = this.digestsOf(assignments);
+        const lines = [...assignments]
+            .filter(([key]) => recorded?.[key] !== digests[key])
+            .map(([, line]) => line);
+        return { lines, digests };
+    }
+    /** How many of the workspace's merchant lines a pull would take — every key the laptop has not changed since `recorded`. */
+    async takeable(workspaceLines, recorded) {
+        const changed = this.changedSince(await this.read(), recorded);
+        const keys = [...merchantAssignments(workspaceLines).keys()];
+        return keys.filter((key) => !changed.has(key)).length;
+    }
+    /**
+     * Take the workspace's merchant lines — for every key the laptop has not
+     * changed since `recorded` — and the run's four credentials into `.env`,
+     * under init's merge rule. A key the laptop changed keeps the laptop's value
+     * and the digest it last travelled with, so the next push still carries it.
+     */
+    async take(workspaceLines, credentials, recorded) {
+        const existing = await this.read();
+        const changed = this.changedSince(existing, recorded);
+        const taken = [...merchantAssignments(workspaceLines)].filter(([key]) => !changed.has(key));
+        const managed = new Map([
+            ...this.credentialEntries(credentials),
+            ...taken.map(([key, line]) => [key, dotenvValue(line, key)]),
+        ]);
+        const next = mergeDotenv(existing, managed);
+        if (next !== existing)
+            await writeFile(this.path, next, 'utf8');
+        const merged = this.digestsOf(merchantAssignments(next.split('\n')));
+        const digests = {};
+        for (const [key, digest] of Object.entries(merged)) {
+            const recordedDigest = changed.has(key) ? recorded?.[key] : digest;
+            if (recordedDigest !== undefined)
+                digests[key] = recordedDigest;
+        }
+        return { taken: taken.length, digests };
+    }
+    /** The keys whose line differs from the one that last travelled — none before a first sync. */
+    changedSince(content, recorded) {
+        if (recorded === null)
+            return new Set();
+        const digests = this.digestsOf(merchantAssignments(content.split('\n')));
+        return new Set(Object.keys(digests).filter((key) => recorded[key] !== digests[key]));
+    }
+    /** The four credentials as `.env` assignments, in the order init writes them. */
+    credentialEntries(credentials) {
+        return [
+            [CliCredentialKey.CHANNEL_TOKEN, credentials.channelToken],
+            [CliCredentialKey.SHOP_API_URL, credentials.shopApiUrl],
+            [CliCredentialKey.ADMIN_SECRET, credentials.adminSecret],
+            [CliCredentialKey.ADMIN_API_URL, credentials.adminApiUrl],
+        ];
+    }
+    digestsOf(assignments) {
+        return Object.fromEntries([...assignments].map(([key, line]) => [key, createHash('sha256').update(line).digest('hex')]));
+    }
+    /** The `.env` text — empty when the storefront has none; any other failure propagates. */
+    async read() {
+        try {
+            return await readFile(this.path, 'utf8');
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return '';
+            throw error;
+        }
+    }
+}
+//# sourceMappingURL=sync-dotenv.file.js.map

package/dist/src/sync/sync-dotenv.file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-dotenv.file.js","sourceRoot":"","sources":["../../../src/sync/sync-dotenv.file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACL,gBAAgB,GAEjB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAIvF;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,cAAc;IACR,IAAI,CAAS;IAE9B,YAAY,UAAkB;QAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,yHAAyH;IACzH,KAAK,CAAC,QAAQ,CAAC,QAAiD;QAC9D,MAAM,WAAW,GAAG,mBAAmB,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,CAAC,GAAG,WAAW,CAAC;aAC3B,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;aACnD,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC5B,CAAC;IAED,4HAA4H;IAC5H,KAAK,CAAC,QAAQ,CACZ,cAAiC,EACjC,QAAiD;QAEjD,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,CAAC,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;IACxD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CACR,cAAiC,EACjC,WAA2B,EAC3B,QAAiD;QAEjD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,CAAC,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5F,MAAM,OAAO,GAAG,IAAI,GAAG,CAAiB;YACtC,GAAG,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC;YACtC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAoB,EAAE,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;SAC/E,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,IAAI,IAAI,KAAK,QAAQ;YAAE,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACnE,IAAI,cAAc,KAAK,SAAS;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC;QAClE,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;IAC1C,CAAC;IAED,+FAA+F;IACvF,YAAY,CAClB,OAAe,EACf,QAAiD;QAEjD,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,IAAI,GAAG,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzE,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACvF,CAAC;IAED,iFAAiF;IACzE,iBAAiB,CAAC,WAA2B;QACnD,OAAO;YACL,CAAC,gBAAgB,CAAC,aAAa,EAAE,WAAW,CAAC,YAAY,CAAC;YAC1D,CAAC,gBAAgB,CAAC,YAAY,EAAE,WAAW,CAAC,UAAU,CAAC;YACvD,CAAC,gBAAgB,CAAC,YAAY,EAAE,WAAW,CAAC,WAAW,CAAC;YACxD,CAAC,gBAAgB,CAAC,aAAa,EAAE,WAAW,CAAC,WAAW,CAAC;SAC1D,CAAC;IACJ,CAAC;IAEO,SAAS,CAAC,WAAwC;QACxD,OAAO,MAAM,CAAC,WAAW,CACvB,CAAC,GAAG,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAC9F,CAAC;IACJ,CAAC;IAED,0FAA0F;IAClF,KAAK,CAAC,IAAI;QAChB,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAClE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/dist/src/sync/sync-env.runner.d.ts

@@ -0,0 +1,29 @@
+import type { SyncEnvOptions } from './type/sync.types.js';
+/**
+ * `forgecart sync-env [name]` (#2781) — the workspace's side of `forgecart
+ * sync`, which the admin API runs in the pod: it reads the merchant lines of the
+ * storefront's `.env`, or, with `--merge`, merges the lines
+ * FORGECART_SYNC_ENV_LINES carries under init's merge rule, and prints ONE JSON
+ * report — the merchant lines as they stand, and how many keys the merge
+ * carried in. The platform's own `FORGECART_*` keys are never read out and
+ * never written: a laptop's never land, the pod's never leave.
+ */
+export declare class SyncEnvRunner {
+    private readonly name;
+    private readonly options;
+    /**
+     * @param name the storefront directory as given — the current directory when absent.
+     * @param options the run's flags.
+     */
+    constructor(name: string | undefined, options: SyncEnvOptions);
+    run(): Promise<void>;
+    /** The merchant keys the variable carries, keyed to their values — platform keys and other lines dropped. */
+    private incoming;
+    private parseLines;
+    private malformedMessage;
+    private merchantLines;
+    /** The report the admin API parses: ONE line of JSON on stdout. */
+    private report;
+    /** The `.env` text — empty when the storefront has none; any other failure propagates. */
+    private read;
+}

package/dist/src/sync/sync-env.runner.js

@@ -0,0 +1,95 @@
+import { readFile, writeFile } from 'node:fs/promises';
+import { join, resolve } from 'node:path';
+import { print } from '../output.js';
+import { dotenvValue, mergeDotenv, merchantAssignments } from '../util/dotenv.util.js';
+/**
+ * The variable a merge's lines arrive in — the pod records a command's line,
+ * never its environment, so the lines never land in a record.
+ */
+const SYNC_ENV_LINES_VARIABLE = 'FORGECART_SYNC_ENV_LINES';
+/**
+ * `forgecart sync-env [name]` (#2781) — the workspace's side of `forgecart
+ * sync`, which the admin API runs in the pod: it reads the merchant lines of the
+ * storefront's `.env`, or, with `--merge`, merges the lines
+ * FORGECART_SYNC_ENV_LINES carries under init's merge rule, and prints ONE JSON
+ * report — the merchant lines as they stand, and how many keys the merge
+ * carried in. The platform's own `FORGECART_*` keys are never read out and
+ * never written: a laptop's never land, the pod's never leave.
+ */
+export class SyncEnvRunner {
+    name;
+    options;
+    /**
+     * @param name the storefront directory as given — the current directory when absent.
+     * @param options the run's flags.
+     */
+    constructor(name, options) {
+        this.name = name;
+        this.options = options;
+    }
+    async run() {
+        const envPath = join(this.name ? resolve(process.cwd(), this.name) : process.cwd(), '.env');
+        const existing = await this.read(envPath);
+        if (this.options.merge !== true) {
+            this.report({ lines: this.merchantLines(existing), merged: 0 });
+            return;
+        }
+        const managed = this.incoming(process.env[SYNC_ENV_LINES_VARIABLE]);
+        if (managed.size === 0) {
+            this.report({ lines: this.merchantLines(existing), merged: 0 });
+            return;
+        }
+        const next = mergeDotenv(existing, managed);
+        if (next !== existing)
+            await writeFile(envPath, next, 'utf8');
+        this.report({ lines: this.merchantLines(next), merged: managed.size });
+    }
+    /** The merchant keys the variable carries, keyed to their values — platform keys and other lines dropped. */
+    incoming(raw) {
+        const lines = this.parseLines(raw);
+        return new Map([...merchantAssignments(lines)].map(([key, line]) => [
+            key,
+            dotenvValue(line, key),
+        ]));
+    }
+    parseLines(raw) {
+        if (raw === undefined)
+            throw new Error(this.malformedMessage());
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch (error) {
+            throw new Error(this.malformedMessage(), { cause: error });
+        }
+        if (!Array.isArray(parsed))
+            throw new Error(this.malformedMessage());
+        const items = parsed;
+        if (!items.every((item) => typeof item === 'string')) {
+            throw new Error(this.malformedMessage());
+        }
+        return items;
+    }
+    malformedMessage() {
+        return `--merge reads ${SYNC_ENV_LINES_VARIABLE}, which must hold a JSON list of KEY=value lines.`;
+    }
+    merchantLines(content) {
+        return [...merchantAssignments(content.split('\n')).values()];
+    }
+    /** The report the admin API parses: ONE line of JSON on stdout. */
+    report(report) {
+        print(JSON.stringify(report));
+    }
+    /** The `.env` text — empty when the storefront has none; any other failure propagates. */
+    async read(path) {
+        try {
+            return await readFile(path, 'utf8');
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return '';
+            throw error;
+        }
+    }
+}
+//# sourceMappingURL=sync-env.runner.js.map

package/dist/src/sync/sync-env.runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-env.runner.js","sourceRoot":"","sources":["../../../src/sync/sync-env.runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAIvF;;;GAGG;AACH,MAAM,uBAAuB,GAAG,0BAA0B,CAAC;AAE3D;;;;;;;;GAQG;AACH,MAAM,OAAO,aAAa;IAML;IACA;IANnB;;;OAGG;IACH,YACmB,IAAwB,EACxB,OAAuB;QADvB,SAAI,GAAJ,IAAI,CAAoB;QACxB,YAAO,GAAP,OAAO,CAAgB;IACvC,CAAC;IAEJ,KAAK,CAAC,GAAG;QACP,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;QAC5F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACpE,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,IAAI,IAAI,KAAK,QAAQ;YAAE,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,6GAA6G;IACrG,QAAQ,CAAC,GAAuB;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACnC,OAAO,IAAI,GAAG,CACZ,CAAC,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAoB,EAAE,CAAC;YACrE,GAAG;YACH,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC;SACvB,CAAC,CACH,CAAC;IACJ,CAAC;IAEO,UAAU,CAAC,GAAuB;QACxC,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAChE,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACrE,MAAM,KAAK,GAAc,MAAM,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,gBAAgB;QACtB,OAAO,iBAAiB,uBAAuB,mDAAmD,CAAC;IACrG,CAAC;IAEO,aAAa,CAAC,OAAe;QACnC,OAAO,CAAC,GAAG,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,mEAAmE;IAC3D,MAAM,CAAC,MAAqB;QAClC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAChC,CAAC;IAED,0FAA0F;IAClF,KAAK,CAAC,IAAI,CAAC,IAAY;QAC7B,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAClE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/dist/src/sync/sync-record.file.d.ts

@@ -0,0 +1,28 @@
+import type { SyncRecord } from './type/sync.types.js';
+/**
+ * The last sync of one storefront (#2781), kept in `.forgecart/sync/state.json`
+ * beside the private repository: the channel it ran against — a digest of the
+ * admin API and the channel token, never the token — the serving commit the
+ * laptop's tree last matched, and a digest of every merchant `.env` line as it
+ * last travelled. A record of another channel is no record: a storefront pointed
+ * at another channel syncs as a first sync.
+ */
+export declare class SyncRecordFile {
+    private readonly channel;
+    private readonly path;
+    /**
+     * @param storefront the storefront directory.
+     * @param channel the digest naming the channel this run syncs against.
+     */
+    constructor(storefront: string, channel: string);
+    /** This channel's last sync — null before the first, or after a sync against another channel. */
+    read(): Promise<SyncRecord | null>;
+    /** Record a sync that left the laptop on `servingSha`, with the `.env` lines as `env` digests them. */
+    write(servingSha: string, env: Readonly<Record<string, string>>): Promise<void>;
+    /** The record's fields, checked one by one: a file sync cannot read is an error naming it. */
+    private parse;
+    private parseEnv;
+    private unreadableMessage;
+    /** The record's text — null before the first sync; any other failure propagates. */
+    private readIfPresent;
+}

package/dist/src/sync/sync-record.file.js

@@ -0,0 +1,86 @@
+import { readFile, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { isJsonObject } from '../json.js';
+import { SYNC_STATE_PATH } from './sync-repository.js';
+/** The record's file, in the private state directory. */
+const RECORD_FILE = 'state.json';
+/** A commit id as git names one: lowercase hex digits — 40 of them (sha1) or 64 (sha256). */
+const COMMIT_ID = /^[0-9a-f]+$/;
+const COMMIT_ID_LENGTHS = new Set([40, 64]);
+/**
+ * The last sync of one storefront (#2781), kept in `.forgecart/sync/state.json`
+ * beside the private repository: the channel it ran against — a digest of the
+ * admin API and the channel token, never the token — the serving commit the
+ * laptop's tree last matched, and a digest of every merchant `.env` line as it
+ * last travelled. A record of another channel is no record: a storefront pointed
+ * at another channel syncs as a first sync.
+ */
+export class SyncRecordFile {
+    channel;
+    path;
+    /**
+     * @param storefront the storefront directory.
+     * @param channel the digest naming the channel this run syncs against.
+     */
+    constructor(storefront, channel) {
+        this.channel = channel;
+        this.path = join(storefront, ...SYNC_STATE_PATH, RECORD_FILE);
+    }
+    /** This channel's last sync — null before the first, or after a sync against another channel. */
+    async read() {
+        const raw = await this.readIfPresent();
+        if (raw === null)
+            return null;
+        const record = this.parse(raw);
+        return record.channel === this.channel ? record : null;
+    }
+    /** Record a sync that left the laptop on `servingSha`, with the `.env` lines as `env` digests them. */
+    async write(servingSha, env) {
+        const record = { channel: this.channel, servingSha, env: { ...env } };
+        await writeFile(this.path, `${JSON.stringify(record, null, 2)}\n`, 'utf8');
+    }
+    /** The record's fields, checked one by one: a file sync cannot read is an error naming it. */
+    parse(raw) {
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch (error) {
+            throw new Error(this.unreadableMessage(), { cause: error });
+        }
+        if (!isJsonObject(parsed))
+            throw new Error(this.unreadableMessage());
+        const { channel, servingSha, env } = parsed;
+        if (typeof channel !== 'string' || typeof servingSha !== 'string') {
+            throw new Error(this.unreadableMessage());
+        }
+        if (!COMMIT_ID_LENGTHS.has(servingSha.length) || !COMMIT_ID.test(servingSha)) {
+            throw new Error(this.unreadableMessage());
+        }
+        return { channel, servingSha, env: this.parseEnv(env) };
+    }
+    parseEnv(env) {
+        if (!isJsonObject(env))
+            throw new Error(this.unreadableMessage());
+        const entries = Object.entries(env);
+        if (!entries.every((entry) => typeof entry[1] === 'string')) {
+            throw new Error(this.unreadableMessage());
+        }
+        return Object.fromEntries(entries);
+    }
+    unreadableMessage() {
+        return `${this.path} is not a sync record sync can read; remove it to sync as a first sync.`;
+    }
+    /** The record's text — null before the first sync; any other failure propagates. */
+    async readIfPresent() {
+        try {
+            return await readFile(this.path, 'utf8');
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return null;
+            throw error;
+        }
+    }
+}
+//# sourceMappingURL=sync-record.file.js.map

package/dist/src/sync/sync-record.file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-record.file.js","sourceRoot":"","sources":["../../../src/sync/sync-record.file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGvD,yDAAyD;AACzD,MAAM,WAAW,GAAG,YAAY,CAAC;AAEjC,6FAA6F;AAC7F,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAEjE;;;;;;;GAOG;AACH,MAAM,OAAO,cAAc;IASN;IARF,IAAI,CAAS;IAE9B;;;OAGG;IACH,YACE,UAAkB,EACD,OAAe;QAAf,YAAO,GAAP,OAAO,CAAQ;QAEhC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,eAAe,EAAE,WAAW,CAAC,CAAC;IAChE,CAAC;IAED,iGAAiG;IACjG,KAAK,CAAC,IAAI;QACR,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,CAAC;IAED,uGAAuG;IACvG,KAAK,CAAC,KAAK,CAAC,UAAkB,EAAE,GAAqC;QACnE,MAAM,MAAM,GAAe,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,EAAE,CAAC;QAClF,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7E,CAAC;IAED,8FAA8F;IACtF,KAAK,CAAC,GAAW;QACvB,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACrE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;QAC5C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1D,CAAC;IAEO,QAAQ,CAAC,GAAY;QAC3B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAA6B,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YACvF,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAEO,iBAAiB;QACvB,OAAO,GAAG,IAAI,CAAC,IAAI,yEAAyE,CAAC;IAC/F,CAAC;IAED,oFAAoF;IAC5E,KAAK,CAAC,aAAa;QACzB,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACpE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/dist/src/sync/sync-repository.d.ts

@@ -0,0 +1,110 @@
+import { type SyncMaterialized, type SyncTreeChange } from './type/sync.types.js';
+/** Where sync keeps its private state, under the storefront's `.forgecart/` — which never travels. */
+export declare const SYNC_STATE_PATH: readonly [".forgecart", "sync"];
+/**
+ * The laptop's side of `forgecart sync` (#2781): a private bare git repository
+ * under `.forgecart/sync/`, its work tree the storefront. It snapshots the
+ * laptop's tree into its own index — the paths the board would carry, nothing
+ * the runtime keeps out of serving history — holds the serving commits the
+ * pulled bundles bring, writes a serving tree onto the laptop, and cuts the ONE
+ * commit a push sends as a git bundle on the serving tip.
+ *
+ * Every git run reads no system and no global config, and no `GIT_*` variable
+ * of the caller's: what travels never depends on the machine it runs on. The
+ * merchant's own repository, if the storefront is one, is never read or
+ * written.
+ */
+export declare class SyncRepository {
+    private readonly storefront;
+    private readonly stateDir;
+    private readonly gitDir;
+    constructor(storefront: string);
+    /**
+     * `git` must be on the PATH: sync keeps the laptop's tree in a git repository
+     * and moves it as git bundles. Refused by name, on exit 1.
+     */
+    static assertGitOnPath(): Promise<void>;
+    /**
+     * Create the private repository on first use, and (re)write the paths that
+     * never travel. `git init --bare` refuses a work tree, so it alone runs
+     * without the repository's own environment.
+     */
+    prepare(): Promise<void>;
+    /** The laptop's tree as it stands — every path that travels — written into the private index. */
+    snapshot(): Promise<string>;
+    /** Whether the private repository holds `sha` as a commit. */
+    hasCommit(sha: string): Promise<boolean>;
+    /** The tree with no entry — the base of a first sync. */
+    emptyTree(): Promise<string>;
+    /**
+     * Take a pulled bundle's serving branch into the private repository — git's
+     * own fetch from the bundle file, which checks every object it admits — and
+     * answer the serving commit it carried. The bundle file lives only as long
+     * as the fetch.
+     */
+    fetchBundle(bytes: Buffer): Promise<string>;
+    /** Keep `sha` — the recorded base — reachable whatever the serving branch does next. */
+    keepBase(sha: string): Promise<void>;
+    /** The tree of `commit` that travels: its own, without the platform's `.forgecart/`. */
+    travellingTree(commit: string): Promise<string>;
+    /** The paths `to` changes against `from`, path by path. */
+    changes(from: string, to: string): Promise<SyncTreeChange[]>;
+    /**
+     * Write the tree `to` onto the laptop, standing at `from`: every path `from`
+     * holds and `to` does not is removed, every path `to` adds or changes is
+     * written, and nothing else on the laptop — no ignored file, nothing that
+     * never travels — is touched. The private index then holds `to`, so every
+     * path of it stays tracked whatever the laptop's ignore rules say.
+     */
+    materialize(from: string, to: string): Promise<SyncMaterialized>;
+    /**
+     * The ONE commit a push sends: the laptop's tree on the serving tip `serving`,
+     * keeping the platform's `.forgecart/` the serving tree carries — the laptop's
+     * own never travels.
+     */
+    pushCommit(localTree: string, serving: string): Promise<string>;
+    /**
+     * `commit` as the git bundle a push sends: its one ref `refs/heads/serving`,
+     * its one prerequisite the serving tip `serving` it was cut on.
+     */
+    pushBundle(commit: string, serving: string): Promise<Buffer>;
+    /** The top-level entries of `tree`, in `ls-tree -z` form — the form `mktree -z` reads back. */
+    private topLevelEntries;
+    private makeTree;
+    /** An `ls-tree` entry's name: everything after its tab. */
+    private entryName;
+    /** A `diff-tree -z` record's status letter — the last word of its metadata. */
+    private changeKind;
+    /** Write `paths` of `tree` onto the laptop, replacing what stands there — through an index of its own. */
+    private checkOut;
+    /** Remove one file the laptop holds, and every directory the removal leaves empty. */
+    private removePath;
+    /** A directory's entries — null when it is gone. */
+    private entriesOf;
+    private exists;
+    /** A fresh bundle path in the private state directory, alive for one transfer. */
+    private spoolPath;
+    private excludeFile;
+    /** A one-line answer — an object id — without its newline. */
+    private line;
+    /**
+     * Run git on the private repository, the storefront its work tree. A non-zero
+     * exit is an error naming the command and git's own words — unless the
+     * caller reads it as an answer.
+     */
+    private git;
+    /** A git run that exited non-zero is an error naming the command and git's own words. */
+    private assertSucceeded;
+    private spawnGit;
+    /**
+     * The flags every run carries: byte-exact content, the work tree the bare
+     * repository is given, the paths that never travel as the only excludes
+     * besides the storefront's own `.gitignore`, and an identity for the carrier
+     * commit.
+     */
+    private gitFlags;
+    /** The repository's environment: the private repository, the storefront as its work tree, and `indexFile`. */
+    private repositoryEnv;
+    /** The caller's environment without any `GIT_*` variable, reading no system and no global config. */
+    private isolatedEnv;
+}