@geekmidas/cli 10.0.0-alpha.62 → 10.0.0-alpha.63

package/dist/deploy/public.d.cts

@@ -1,4 +1,7 @@
 import { $ as DeployEventError, Q as DeployEvent, _t as StateVersionConflict, at as DeployResult, bt as deployIdentity, ct as CredentialKinds, dt as MissingCredential, et as DeployEventType, ft as StoredCredentialsOptions, ht as StateLocked, it as AppDeployResult, lt as CredentialProvider, mt as storedCredentials, nt as ResourceChange, ot as Credential, pt as chainCredentials, rt as ResourceVia, st as CredentialKind, tt as DeployPhase, ut as CredentialRequest, yt as DeployIdentity, z as AnyDeployTarget } from "../types-DIA7Li-J.cjs";
+import { a as SandboxOutput, c as confineCwd, i as SandboxExecOptions, n as Sandbox, o as SandboxResult, r as SandboxCwdEscape, s as SecretNameInvalid, t as SECRETS_DIR_ENV } from "../sandbox-M8UnLhXE.cjs";
+import { i as ConfigLoadFailed, o as ConfigObjectNotSerializable } from "../config-CemHVcIr.cjs";
+import { n as ConstructsNotSerializable, t as ConstructDiscoveryFailed } from "../discover-B_IkPukx.cjs";
 import { a as TargetRuntimeMismatch, c as DeployTargetNotYetSupported, i as TargetPackageInvalid, l as UnknownDeployTarget, n as InvalidTargetOptions, o as ProviderRemoved, r as TargetEntryInvalid, s as TargetPackageNotFound, t as TargetRuntimeUndeclared } from "../runtime-Dn_n-29S.cjs";
 import { ConstructManifest } from "@geekmidas/manifest";
 import "@geekmidas/envkit/sniffer";
@@ -16,6 +19,176 @@ export declare const GKM_HOME_ENV = "GKM_HOME";
 /** The CLI's home: `GKM_HOME` if set, else `~/.gkm`. */
 export declare function gkmHome(env?: NodeJS.ProcessEnv): string;
 //#endregion
+//#region src/run.d.ts
+/** The program ran and exited unsuccessfully; its own output said why. */
+export declare class CommandFailed extends Error {
+  readonly command: string;
+  readonly args: readonly string[];
+  readonly exitCode: number | null;
+  readonly signal: NodeJS.Signals | null;
+  constructor(command: string, args: readonly string[], exitCode: number | null, signal: NodeJS.Signals | null);
+}
+/** The program ran past its timeout and was killed. */
+export declare class CommandTimedOut extends Error {
+  readonly command: string;
+  readonly args: readonly string[];
+  readonly timeoutMs: number;
+  constructor(command: string, args: readonly string[], timeoutMs: number);
+}
+//#endregion
+//#region src/sandbox/env.d.ts
+/**
+ * What of the host's environment a local sandbox passes on.
+ *
+ * An allowlist, not a denylist: a credential's variable has any name its
+ * owner chose (`DOKPLOY_TOKEN`, `AWS_SECRET_ACCESS_KEY`, `MY_VAULT_TOKEN`), so
+ * the only safe default is to name what a program needs to *run* and pass
+ * nothing else.
+ */
+/**
+ * Variables a command needs to find programs, write temp files, print in the
+ * user's locale and reach the network through the host's proxy — and nothing
+ * that authenticates as anyone.
+ *
+ * Deliberately left out:
+ * - `NODE_OPTIONS`: it can `--require` or `--import` code into every node
+ *   process, and CI often holds `--import tsx` there. A step that needs a
+ *   loader passes its own.
+ * - `NODE_AUTH_TOKEN`, `NPM_TOKEN`, `npm_config_*`: registry tokens
+ *   (`actions/setup-node` writes `NODE_AUTH_TOKEN`), which is why there is no
+ *   `NODE_*` wildcard.
+ * - `AWS_*`, `DOCKER_*`, `DOKPLOY_*`, `GITHUB_TOKEN`, `TURBO_TOKEN`, `GKM_*`:
+ *   credentials, or where the deploy keeps them.
+ * - `SHELL`, `EDITOR` and the rest of a login session: nothing here starts a
+ *   shell.
+ *
+ * Proxies are passed: behind one, nothing installs or builds without it. A
+ * proxy URL with a password in it reaches the command too — a host that keeps
+ * one there and builds code it does not trust should pass a sandbox of its
+ * own.
+ */
+export declare const SANDBOX_ENV_ALLOWLIST: readonly (string | RegExp)[];
+/**
+ * The allowlisted part of `source`, plus each of `extra` the host chose to
+ * pass on by name.
+ */
+export declare function allowlistedEnv(source?: NodeJS.ProcessEnv, extra?: readonly string[]): Record<string, string>;
+//#endregion
+//#region src/docker/templates.d.ts
+type PackageManager = 'pnpm' | 'npm' | 'yarn' | 'bun';
+//#endregion
+//#region src/sandbox/install.d.ts
+/** Long enough for a cold install of a large monorepo. */
+export declare const INSTALL_TIMEOUT_MS: number;
+interface InstallOptions {
+  /** The directory to install in. Defaults to the sandbox's root. */
+  cwd?: string;
+  /** Defaults to the one the lockfile above `cwd` names. */
+  packageManager?: PackageManager;
+  /**
+   * Skip every lifecycle script — dependencies' and the project's own —
+   * except those of {@link allowScripts}. Defaults to false: scripts run as
+   * a plain install runs them, under the package manager's own policy —
+   * npm 12 and pnpm 10 skip dependencies' scripts nobody approved.
+   */
+  ignoreScripts?: boolean;
+  /**
+   * With `ignoreScripts`, the packages whose scripts still run: rebuilt by
+   * name once the install is done.
+   */
+  allowScripts?: readonly string[];
+  /** Variables the install needs beyond the sandbox's own. */
+  env?: Readonly<Record<string, string>>;
+  /** Defaults to {@link INSTALL_TIMEOUT_MS}, for each command. */
+  timeoutMs?: number;
+  /** Where the package manager's output goes. Defaults to `inherit`. */
+  output?: SandboxOutput;
+  signal?: AbortSignal;
+}
+/** A name in `allowScripts` that is not a package name. */
+export declare class InstallAllowlistNameInvalid extends Error {
+  readonly packageName: string;
+  constructor(packageName: string);
+}
+/** The package manager has no way to run only some packages' scripts. */
+export declare class InstallScriptsAllowlistUnsupported extends Error {
+  readonly packageManager: string;
+  readonly allowScripts: readonly string[];
+  constructor(packageManager: string, allowScripts: readonly string[]);
+}
+/**
+ * Install the project's dependencies in `sandbox`.
+ *
+ * ```ts
+ * // A checkout nobody has reviewed: no scripts but esbuild's.
+ * await installDependencies(sandbox, {
+ *   ignoreScripts: true,
+ *   allowScripts: ['esbuild'],
+ * });
+ * ```
+ *
+ * Resolves with each command's result, in order — with its output when
+ * `output` is `capture`.
+ *
+ * @throws {CommandFailed} when the package manager exits unsuccessfully.
+ * @throws {InstallScriptsAllowlistUnsupported} for an allowlist the package
+ *   manager cannot honour, before anything is installed.
+ */
+export declare function installDependencies(sandbox: Sandbox, options?: InstallOptions): Promise<SandboxResult[]>;
+//#endregion
+//#region src/sandbox/local.d.ts
+interface LocalSandboxOptions {
+  /** The project. Every command runs at or below it. */
+  root: string;
+  /**
+   * `HOME` for every command. Defaults to the host's, because a build
+   * reuses the caches kept there — the pnpm store, corepack's package
+   * managers, turbo's cache — and a cold one re-downloads all of them.
+   * Point it at an empty directory to keep `~/.aws`, `~/.npmrc` and
+   * `~/.docker` out of reach of an SDK's default lookup — though, sharing
+   * the host's filesystem, a command that goes looking still finds them.
+   */
+  home?: string;
+  /**
+   * Host variables to pass on beyond the allowlist, by name — a remote
+   * cache's `TURBO_TOKEN`, for a build the host trusts with it.
+   */
+  passEnv?: readonly string[];
+  /** Where the allowlisted variables are read from. Defaults to `process.env`. */
+  hostEnv?: NodeJS.ProcessEnv;
+}
+/**
+ * A child process on this machine, as this user, with an allowlisted
+ * environment.
+ *
+ * What it withholds from the command: the host's environment beyond
+ * {@link SANDBOX_ENV_ALLOWLIST}, a shell, a working directory outside the
+ * project, and any time past the timeout. What it does not: the host's
+ * filesystem, which the command can read and write as the user running the
+ * deploy. So it is not `isolating`, and it is the default for projects the
+ * host already trusts — the developer's own, a team's own CI. Code nobody
+ * vetted belongs in a sandbox that is.
+ *
+ * A timed-out command is sent SIGTERM, then SIGKILL; processes it started
+ * itself are its to stop.
+ */
+export declare class LocalSandbox implements Sandbox {
+  readonly root: string;
+  readonly isolating = false;
+  readonly env: Readonly<Record<string, string>>;
+  constructor(options: LocalSandboxOptions);
+  exec(command: string, args: readonly string[], options: SandboxExecOptions): Promise<SandboxResult>;
+}
+//#endregion
+//#region src/sandbox/worker.d.ts
+/** A worker ended without the answer it exists to give. */
+export declare class SandboxWorkerFailed extends Error {
+  readonly step: string;
+  readonly exitCode: number | null;
+  readonly stderr: string;
+  constructor(step: string, exitCode: number | null, stderr: string);
+}
+//#endregion
 //#region src/deploy/deploy.d.ts
 /**
  * Where a run's progress lines go, besides its events. `@geekmidas/logger`'s
@@ -79,6 +252,18 @@ interface DeployInput {
    * default), its stderr, or nowhere.
    */
   childOutput?: 'inherit' | 'stderr' | 'ignore';
+  /**
+   * Where the project's own code runs: loading `gkm.config.ts`, discovering
+   * its constructs, sniffing each app's environment. Defaults to a
+   * `LocalSandbox` on the project — a child process here with an
+   * allowlisted environment, for a project the host trusts.
+   *
+   * A host deploying repositories it does not trust passes one that
+   * isolates — a container per build — and the config then reaches the
+   * deploy only as data. Credentials never enter a sandbox: they go from
+   * `credentials` to the steps that provision, push and release.
+   */
+  sandbox?: Sandbox;
 }
 /** A deploy in progress. */
 interface DeployRun extends AsyncIterable<DeployEvent> {
@@ -178,5 +363,5 @@ export declare class RegistryAmbiguous extends Error {
   constructor(registry: string, registryIds: readonly string[]);
 }
 //#endregion
-export { type AppDeployResult, type Credential, type CredentialKind, type CredentialKinds, type CredentialProvider, type CredentialRequest, type DeployEvent, type DeployEventError, type DeployEventType, type DeployIdentity, type DeployInput, type DeployLogger, type DeployPhase, type DeployResult, type DeployRun, DeployTargetNotYetSupported, InvalidTargetOptions, MissingCredential, ProviderRemoved, type ResourceChange, type ResourceVia, StateLocked, StateVersionConflict, type StoredCredentialsOptions, TargetEntryInvalid, TargetPackageInvalid, TargetPackageNotFound, TargetRuntimeMismatch, TargetRuntimeUndeclared, UnknownDeployTarget, chainCredentials, deployIdentity, storedCredentials };
+export { type AppDeployResult, ConfigLoadFailed, ConfigObjectNotSerializable, ConstructDiscoveryFailed, ConstructsNotSerializable, type Credential, type CredentialKind, type CredentialKinds, type CredentialProvider, type CredentialRequest, type DeployEvent, type DeployEventError, type DeployEventType, type DeployIdentity, type DeployInput, type DeployLogger, type DeployPhase, type DeployResult, type DeployRun, DeployTargetNotYetSupported, type InstallOptions, InvalidTargetOptions, type LocalSandboxOptions, MissingCredential, ProviderRemoved, type ResourceChange, type ResourceVia, SECRETS_DIR_ENV, type Sandbox, SandboxCwdEscape, type SandboxExecOptions, type SandboxOutput, type SandboxResult, SecretNameInvalid, StateLocked, StateVersionConflict, type StoredCredentialsOptions, TargetEntryInvalid, TargetPackageInvalid, TargetPackageNotFound, TargetRuntimeMismatch, TargetRuntimeUndeclared, UnknownDeployTarget, chainCredentials, confineCwd, deployIdentity, storedCredentials };
 //# sourceMappingURL=public.d.cts.map

package/dist/deploy/public.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"public.d.cts","names":[],"sources":["../../src/home.ts","../../src/deploy/deploy.ts","../../src/deploy/index.ts","../../src/deploy/orchestrate.ts","../../src/deploy/ownership.ts","../../src/deploy/registry.ts"],"mappings":";;;;;;;;;;;;;;qBAaa;;wBAGG,QAAQ,MAAK,OAAO;;;;;;;UCanB;EAChB,KAAK;EACL,KAAK;EACL,OAAO;;UAGS;;;;;EAKhB;;EAEA;;;;;EAKA;;;;;;EAMA,UAAU,eAAe;;EAEzB;;EAEA;;;;;;EAMA;;;;;;EAMA,cAAc;;EAEd,SAAS;;;;;;EAMT,SAAS;;;;;EAKT;;;;;EAKA;;;UAIgB,kBAAkB,cAAc;;;;;;WAMvC,QAAQ,QAAQ;;;;;;;;;;;;;;;;;;wBAqEV,OAAO,OAAO,cAAc;;;;qBCqV/B,4BAA4B;WAE9B;EADV,YACU,aACT;;;qBAWW,uBAAuB;WAEzB;WACA;WACA;EAHV,YACU,aACA,4BACA;;;;;qBCvcE,0BAA0B;WAE5B;WACA;EAFV,YACU,yBACA;;;qBAWE,yBAAyB;WAE3B;WACA;EAFV,YACU,eACA;;;qBAUE,uBAAuB;WAEzB;;WAEA;EAHV,YACU,gBAEA;;EAAA,kBACT;;;;;;;;qBC1EW,wBAAwB;WAE1B;WACA;WACA;;WAEA;EALV,YACU,qBACA,mBACA,kBAEA;;EAAA;;;;;qBChBE,8BAA8B;WACrB;EAArB,YAAqB;;;qBAUT,yBAAyB;WAChB;EAArB,YAAqB;;;qBAUT,0BAA0B;WAE5B;WACA;EAFV,YACU,kBACA"}
+{"version":3,"file":"public.d.cts","names":[],"sources":["../../src/home.ts","../../src/run.ts","../../src/sandbox/env.ts","../../src/docker/templates.ts","../../src/sandbox/install.ts","../../src/sandbox/local.ts","../../src/sandbox/worker.ts","../../src/deploy/deploy.ts","../../src/deploy/index.ts","../../src/deploy/orchestrate.ts","../../src/deploy/ownership.ts","../../src/deploy/registry.ts"],"mappings":";;;;;;;;;;;;;;;;;qBAaa;;wBAGG,QAAQ,MAAK,OAAO;;;;qBCuBvB,sBAAsB;WAExB;WACA;WACA;WACA,QAAQ,OAAO;EAJzB,YACU,iBACA,yBACA,yBACA,QAAQ,OAAO;;;qBAUb,wBAAwB;WAE1B;WACA;WACA;EAHV,YACU,iBACA,yBACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBC3BE,0CAA0C;;;;;wBAyDvC,eACf,SAAQ,OAAO,YACf,4BACE;;;KCvFS;;;;qBCeC;UAEI;;EAEhB;;EAEA,iBAAiB;;;;;;;EAOjB;;;;;EAKA;;EAEA,MAAM,SAAS;;EAEf;;EAEA,SAAS;EACT,SAAS;;;qBAIG,oCAAoC;WAC3B;EAArB,YAAqB;;;qBAWT,2CAA2C;WAE7C;WACA;EAFV,YACU,wBACA;;;;;;;;;;;;;;;;;;;;wBAqJW,oBACrB,SAAS,SACT,UAAS,iBACP,QAAQ;;;UCpMM;;EAEhB;;;;;;;;;EASA;;;;;EAKA;;EAEA,UAAU,OAAO;;;;;;;;;;;;;;;;;qBA0BL,wBAAwB;WAC3B;WACA;WACA,KAAK,SAAS;EAEvB,YAAY,SAAS;EAUf,KACL,iBACA,yBACA,SAAS,qBACP,QAAQ;;;;;qBCpBC,4BAA4B;WAE9B;WACA;WACA;EAHV,YACU,cACA,yBACA;;;;;;;;UCnCM;EAChB,KAAK;EACL,KAAK;EACL,OAAO;;UAGS;;;;;EAKhB;;EAEA;;;;;EAKA;;;;;;EAMA,UAAU,eAAe;;EAEzB;;EAEA;;;;;;EAMA;;;;;;EAMA,cAAc;;EAEd,SAAS;;;;;;EAMT,SAAS;;;;;EAKT;;;;;EAKA;;;;;;;;;;;;EAYA,UAAU;;;UAIM,kBAAkB,cAAc;;;;;;WAMvC,QAAQ,QAAQ;;;;;;;;;;;;;;;;;;wBAqEV,OAAO,OAAO,cAAc;;;;qBCuU/B,4BAA4B;WAE9B;EADV,YACU,aACT;;;qBAWW,uBAAuB;WAEzB;WACA;WACA;EAHV,YACU,aACA,4BACA;;;;;qBCvcE,0BAA0B;WAE5B;WACA;EAFV,YACU,yBACA;;;qBAWE,yBAAyB;WAE3B;WACA;EAFV,YACU,eACA;;;qBAUE,uBAAuB;WAEzB;;WAEA;EAHV,YACU,gBAEA;;EAAA,kBACT;;;;;;;;qBC1EW,wBAAwB;WAE1B;WACA;WACA;;WAEA;EALV,YACU,qBACA,mBACA,kBAEA;;EAAA;;;;;qBChBE,8BAA8B;WACrB;EAArB,YAAqB;;;qBAUT,yBAAyB;WAChB;EAArB,YAAqB;;;qBAUT,0BAA0B;WAE5B;WACA;EAFV,YACU,kBACA"}

package/dist/deploy/public.d.mts

@@ -1,4 +1,7 @@
+import { a as SandboxOutput, c as confineCwd, i as SandboxExecOptions, n as Sandbox, o as SandboxResult, r as SandboxCwdEscape, s as SecretNameInvalid, t as SECRETS_DIR_ENV } from "../sandbox-M8UnLhXE.mjs";
 import { $ as DeployEventError, Q as DeployEvent, _t as StateVersionConflict, at as DeployResult, bt as deployIdentity, ct as CredentialKinds, dt as MissingCredential, et as DeployEventType, ft as StoredCredentialsOptions, ht as StateLocked, it as AppDeployResult, lt as CredentialProvider, mt as storedCredentials, nt as ResourceChange, ot as Credential, pt as chainCredentials, rt as ResourceVia, st as CredentialKind, tt as DeployPhase, ut as CredentialRequest, yt as DeployIdentity, z as AnyDeployTarget } from "../types-CfLKGfC_.mjs";
+import { i as ConfigLoadFailed, o as ConfigObjectNotSerializable } from "../config-C2BUosLm.mjs";
+import { n as ConstructsNotSerializable, t as ConstructDiscoveryFailed } from "../discover-B6yPpvRV.mjs";
 import { a as TargetRuntimeMismatch, c as DeployTargetNotYetSupported, i as TargetPackageInvalid, l as UnknownDeployTarget, n as InvalidTargetOptions, o as ProviderRemoved, r as TargetEntryInvalid, s as TargetPackageNotFound, t as TargetRuntimeUndeclared } from "../runtime-CXPlkZzs.mjs";
 import { ConstructManifest } from "@geekmidas/manifest";
 import "@geekmidas/envkit/sniffer";
@@ -16,6 +19,176 @@ export declare const GKM_HOME_ENV = "GKM_HOME";
 /** The CLI's home: `GKM_HOME` if set, else `~/.gkm`. */
 export declare function gkmHome(env?: NodeJS.ProcessEnv): string;
 //#endregion
+//#region src/run.d.ts
+/** The program ran and exited unsuccessfully; its own output said why. */
+export declare class CommandFailed extends Error {
+  readonly command: string;
+  readonly args: readonly string[];
+  readonly exitCode: number | null;
+  readonly signal: NodeJS.Signals | null;
+  constructor(command: string, args: readonly string[], exitCode: number | null, signal: NodeJS.Signals | null);
+}
+/** The program ran past its timeout and was killed. */
+export declare class CommandTimedOut extends Error {
+  readonly command: string;
+  readonly args: readonly string[];
+  readonly timeoutMs: number;
+  constructor(command: string, args: readonly string[], timeoutMs: number);
+}
+//#endregion
+//#region src/sandbox/env.d.ts
+/**
+ * What of the host's environment a local sandbox passes on.
+ *
+ * An allowlist, not a denylist: a credential's variable has any name its
+ * owner chose (`DOKPLOY_TOKEN`, `AWS_SECRET_ACCESS_KEY`, `MY_VAULT_TOKEN`), so
+ * the only safe default is to name what a program needs to *run* and pass
+ * nothing else.
+ */
+/**
+ * Variables a command needs to find programs, write temp files, print in the
+ * user's locale and reach the network through the host's proxy — and nothing
+ * that authenticates as anyone.
+ *
+ * Deliberately left out:
+ * - `NODE_OPTIONS`: it can `--require` or `--import` code into every node
+ *   process, and CI often holds `--import tsx` there. A step that needs a
+ *   loader passes its own.
+ * - `NODE_AUTH_TOKEN`, `NPM_TOKEN`, `npm_config_*`: registry tokens
+ *   (`actions/setup-node` writes `NODE_AUTH_TOKEN`), which is why there is no
+ *   `NODE_*` wildcard.
+ * - `AWS_*`, `DOCKER_*`, `DOKPLOY_*`, `GITHUB_TOKEN`, `TURBO_TOKEN`, `GKM_*`:
+ *   credentials, or where the deploy keeps them.
+ * - `SHELL`, `EDITOR` and the rest of a login session: nothing here starts a
+ *   shell.
+ *
+ * Proxies are passed: behind one, nothing installs or builds without it. A
+ * proxy URL with a password in it reaches the command too — a host that keeps
+ * one there and builds code it does not trust should pass a sandbox of its
+ * own.
+ */
+export declare const SANDBOX_ENV_ALLOWLIST: readonly (string | RegExp)[];
+/**
+ * The allowlisted part of `source`, plus each of `extra` the host chose to
+ * pass on by name.
+ */
+export declare function allowlistedEnv(source?: NodeJS.ProcessEnv, extra?: readonly string[]): Record<string, string>;
+//#endregion
+//#region src/docker/templates.d.ts
+type PackageManager = 'pnpm' | 'npm' | 'yarn' | 'bun';
+//#endregion
+//#region src/sandbox/install.d.ts
+/** Long enough for a cold install of a large monorepo. */
+export declare const INSTALL_TIMEOUT_MS: number;
+interface InstallOptions {
+  /** The directory to install in. Defaults to the sandbox's root. */
+  cwd?: string;
+  /** Defaults to the one the lockfile above `cwd` names. */
+  packageManager?: PackageManager;
+  /**
+   * Skip every lifecycle script — dependencies' and the project's own —
+   * except those of {@link allowScripts}. Defaults to false: scripts run as
+   * a plain install runs them, under the package manager's own policy —
+   * npm 12 and pnpm 10 skip dependencies' scripts nobody approved.
+   */
+  ignoreScripts?: boolean;
+  /**
+   * With `ignoreScripts`, the packages whose scripts still run: rebuilt by
+   * name once the install is done.
+   */
+  allowScripts?: readonly string[];
+  /** Variables the install needs beyond the sandbox's own. */
+  env?: Readonly<Record<string, string>>;
+  /** Defaults to {@link INSTALL_TIMEOUT_MS}, for each command. */
+  timeoutMs?: number;
+  /** Where the package manager's output goes. Defaults to `inherit`. */
+  output?: SandboxOutput;
+  signal?: AbortSignal;
+}
+/** A name in `allowScripts` that is not a package name. */
+export declare class InstallAllowlistNameInvalid extends Error {
+  readonly packageName: string;
+  constructor(packageName: string);
+}
+/** The package manager has no way to run only some packages' scripts. */
+export declare class InstallScriptsAllowlistUnsupported extends Error {
+  readonly packageManager: string;
+  readonly allowScripts: readonly string[];
+  constructor(packageManager: string, allowScripts: readonly string[]);
+}
+/**
+ * Install the project's dependencies in `sandbox`.
+ *
+ * ```ts
+ * // A checkout nobody has reviewed: no scripts but esbuild's.
+ * await installDependencies(sandbox, {
+ *   ignoreScripts: true,
+ *   allowScripts: ['esbuild'],
+ * });
+ * ```
+ *
+ * Resolves with each command's result, in order — with its output when
+ * `output` is `capture`.
+ *
+ * @throws {CommandFailed} when the package manager exits unsuccessfully.
+ * @throws {InstallScriptsAllowlistUnsupported} for an allowlist the package
+ *   manager cannot honour, before anything is installed.
+ */
+export declare function installDependencies(sandbox: Sandbox, options?: InstallOptions): Promise<SandboxResult[]>;
+//#endregion
+//#region src/sandbox/local.d.ts
+interface LocalSandboxOptions {
+  /** The project. Every command runs at or below it. */
+  root: string;
+  /**
+   * `HOME` for every command. Defaults to the host's, because a build
+   * reuses the caches kept there — the pnpm store, corepack's package
+   * managers, turbo's cache — and a cold one re-downloads all of them.
+   * Point it at an empty directory to keep `~/.aws`, `~/.npmrc` and
+   * `~/.docker` out of reach of an SDK's default lookup — though, sharing
+   * the host's filesystem, a command that goes looking still finds them.
+   */
+  home?: string;
+  /**
+   * Host variables to pass on beyond the allowlist, by name — a remote
+   * cache's `TURBO_TOKEN`, for a build the host trusts with it.
+   */
+  passEnv?: readonly string[];
+  /** Where the allowlisted variables are read from. Defaults to `process.env`. */
+  hostEnv?: NodeJS.ProcessEnv;
+}
+/**
+ * A child process on this machine, as this user, with an allowlisted
+ * environment.
+ *
+ * What it withholds from the command: the host's environment beyond
+ * {@link SANDBOX_ENV_ALLOWLIST}, a shell, a working directory outside the
+ * project, and any time past the timeout. What it does not: the host's
+ * filesystem, which the command can read and write as the user running the
+ * deploy. So it is not `isolating`, and it is the default for projects the
+ * host already trusts — the developer's own, a team's own CI. Code nobody
+ * vetted belongs in a sandbox that is.
+ *
+ * A timed-out command is sent SIGTERM, then SIGKILL; processes it started
+ * itself are its to stop.
+ */
+export declare class LocalSandbox implements Sandbox {
+  readonly root: string;
+  readonly isolating = false;
+  readonly env: Readonly<Record<string, string>>;
+  constructor(options: LocalSandboxOptions);
+  exec(command: string, args: readonly string[], options: SandboxExecOptions): Promise<SandboxResult>;
+}
+//#endregion
+//#region src/sandbox/worker.d.ts
+/** A worker ended without the answer it exists to give. */
+export declare class SandboxWorkerFailed extends Error {
+  readonly step: string;
+  readonly exitCode: number | null;
+  readonly stderr: string;
+  constructor(step: string, exitCode: number | null, stderr: string);
+}
+//#endregion
 //#region src/deploy/deploy.d.ts
 /**
  * Where a run's progress lines go, besides its events. `@geekmidas/logger`'s
@@ -79,6 +252,18 @@ interface DeployInput {
    * default), its stderr, or nowhere.
    */
   childOutput?: 'inherit' | 'stderr' | 'ignore';
+  /**
+   * Where the project's own code runs: loading `gkm.config.ts`, discovering
+   * its constructs, sniffing each app's environment. Defaults to a
+   * `LocalSandbox` on the project — a child process here with an
+   * allowlisted environment, for a project the host trusts.
+   *
+   * A host deploying repositories it does not trust passes one that
+   * isolates — a container per build — and the config then reaches the
+   * deploy only as data. Credentials never enter a sandbox: they go from
+   * `credentials` to the steps that provision, push and release.
+   */
+  sandbox?: Sandbox;
 }
 /** A deploy in progress. */
 interface DeployRun extends AsyncIterable<DeployEvent> {
@@ -178,5 +363,5 @@ export declare class RegistryAmbiguous extends Error {
   constructor(registry: string, registryIds: readonly string[]);
 }
 //#endregion
-export { type AppDeployResult, type Credential, type CredentialKind, type CredentialKinds, type CredentialProvider, type CredentialRequest, type DeployEvent, type DeployEventError, type DeployEventType, type DeployIdentity, type DeployInput, type DeployLogger, type DeployPhase, type DeployResult, type DeployRun, DeployTargetNotYetSupported, InvalidTargetOptions, MissingCredential, ProviderRemoved, type ResourceChange, type ResourceVia, StateLocked, StateVersionConflict, type StoredCredentialsOptions, TargetEntryInvalid, TargetPackageInvalid, TargetPackageNotFound, TargetRuntimeMismatch, TargetRuntimeUndeclared, UnknownDeployTarget, chainCredentials, deployIdentity, storedCredentials };
+export { type AppDeployResult, ConfigLoadFailed, ConfigObjectNotSerializable, ConstructDiscoveryFailed, ConstructsNotSerializable, type Credential, type CredentialKind, type CredentialKinds, type CredentialProvider, type CredentialRequest, type DeployEvent, type DeployEventError, type DeployEventType, type DeployIdentity, type DeployInput, type DeployLogger, type DeployPhase, type DeployResult, type DeployRun, DeployTargetNotYetSupported, type InstallOptions, InvalidTargetOptions, type LocalSandboxOptions, MissingCredential, ProviderRemoved, type ResourceChange, type ResourceVia, SECRETS_DIR_ENV, type Sandbox, SandboxCwdEscape, type SandboxExecOptions, type SandboxOutput, type SandboxResult, SecretNameInvalid, StateLocked, StateVersionConflict, type StoredCredentialsOptions, TargetEntryInvalid, TargetPackageInvalid, TargetPackageNotFound, TargetRuntimeMismatch, TargetRuntimeUndeclared, UnknownDeployTarget, chainCredentials, confineCwd, deployIdentity, storedCredentials };
 //# sourceMappingURL=public.d.mts.map

package/dist/deploy/public.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"public.d.mts","names":[],"sources":["../../src/home.ts","../../src/deploy/deploy.ts","../../src/deploy/index.ts","../../src/deploy/orchestrate.ts","../../src/deploy/ownership.ts","../../src/deploy/registry.ts"],"mappings":";;;;;;;;;;;;;;qBAaa;;wBAGG,QAAQ,MAAK,OAAO;;;;;;;UCanB;EAChB,KAAK;EACL,KAAK;EACL,OAAO;;UAGS;;;;;EAKhB;;EAEA;;;;;EAKA;;;;;;EAMA,UAAU,eAAe;;EAEzB;;EAEA;;;;;;EAMA;;;;;;EAMA,cAAc;;EAEd,SAAS;;;;;;EAMT,SAAS;;;;;EAKT;;;;;EAKA;;;UAIgB,kBAAkB,cAAc;;;;;;WAMvC,QAAQ,QAAQ;;;;;;;;;;;;;;;;;;wBAqEV,OAAO,OAAO,cAAc;;;;qBCqV/B,4BAA4B;WAE9B;EADV,YACU,aACT;;;qBAWW,uBAAuB;WAEzB;WACA;WACA;EAHV,YACU,aACA,4BACA;;;;;qBCvcE,0BAA0B;WAE5B;WACA;EAFV,YACU,yBACA;;;qBAWE,yBAAyB;WAE3B;WACA;EAFV,YACU,eACA;;;qBAUE,uBAAuB;WAEzB;;WAEA;EAHV,YACU,gBAEA;;EAAA,kBACT;;;;;;;;qBC1EW,wBAAwB;WAE1B;WACA;WACA;;WAEA;EALV,YACU,qBACA,mBACA,kBAEA;;EAAA;;;;;qBChBE,8BAA8B;WACrB;EAArB,YAAqB;;;qBAUT,yBAAyB;WAChB;EAArB,YAAqB;;;qBAUT,0BAA0B;WAE5B;WACA;EAFV,YACU,kBACA"}
+{"version":3,"file":"public.d.mts","names":[],"sources":["../../src/home.ts","../../src/run.ts","../../src/sandbox/env.ts","../../src/docker/templates.ts","../../src/sandbox/install.ts","../../src/sandbox/local.ts","../../src/sandbox/worker.ts","../../src/deploy/deploy.ts","../../src/deploy/index.ts","../../src/deploy/orchestrate.ts","../../src/deploy/ownership.ts","../../src/deploy/registry.ts"],"mappings":";;;;;;;;;;;;;;;;;qBAaa;;wBAGG,QAAQ,MAAK,OAAO;;;;qBCuBvB,sBAAsB;WAExB;WACA;WACA;WACA,QAAQ,OAAO;EAJzB,YACU,iBACA,yBACA,yBACA,QAAQ,OAAO;;;qBAUb,wBAAwB;WAE1B;WACA;WACA;EAHV,YACU,iBACA,yBACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBC3BE,0CAA0C;;;;;wBAyDvC,eACf,SAAQ,OAAO,YACf,4BACE;;;KCvFS;;;;qBCeC;UAEI;;EAEhB;;EAEA,iBAAiB;;;;;;;EAOjB;;;;;EAKA;;EAEA,MAAM,SAAS;;EAEf;;EAEA,SAAS;EACT,SAAS;;;qBAIG,oCAAoC;WAC3B;EAArB,YAAqB;;;qBAWT,2CAA2C;WAE7C;WACA;EAFV,YACU,wBACA;;;;;;;;;;;;;;;;;;;;wBAqJW,oBACrB,SAAS,SACT,UAAS,iBACP,QAAQ;;;UCpMM;;EAEhB;;;;;;;;;EASA;;;;;EAKA;;EAEA,UAAU,OAAO;;;;;;;;;;;;;;;;;qBA0BL,wBAAwB;WAC3B;WACA;WACA,KAAK,SAAS;EAEvB,YAAY,SAAS;EAUf,KACL,iBACA,yBACA,SAAS,qBACP,QAAQ;;;;;qBCpBC,4BAA4B;WAE9B;WACA;WACA;EAHV,YACU,cACA,yBACA;;;;;;;;UCnCM;EAChB,KAAK;EACL,KAAK;EACL,OAAO;;UAGS;;;;;EAKhB;;EAEA;;;;;EAKA;;;;;;EAMA,UAAU,eAAe;;EAEzB;;EAEA;;;;;;EAMA;;;;;;EAMA,cAAc;;EAEd,SAAS;;;;;;EAMT,SAAS;;;;;EAKT;;;;;EAKA;;;;;;;;;;;;EAYA,UAAU;;;UAIM,kBAAkB,cAAc;;;;;;WAMvC,QAAQ,QAAQ;;;;;;;;;;;;;;;;;;wBAqEV,OAAO,OAAO,cAAc;;;;qBCuU/B,4BAA4B;WAE9B;EADV,YACU,aACT;;;qBAWW,uBAAuB;WAEzB;WACA;WACA;EAHV,YACU,aACA,4BACA;;;;;qBCvcE,0BAA0B;WAE5B;WACA;EAFV,YACU,yBACA;;;qBAWE,yBAAyB;WAE3B;WACA;EAFV,YACU,eACA;;;qBAUE,uBAAuB;WAEzB;;WAEA;EAHV,YACU,gBAEA;;EAAA,kBACT;;;;;;;;qBC1EW,wBAAwB;WAE1B;WACA;WACA;;WAEA;EALV,YACU,qBACA,mBACA,kBAEA;;EAAA;;;;;qBChBE,8BAA8B;WACrB;EAArB,YAAqB;;;qBAUT,yBAAyB;WAChB;EAArB,YAAqB;;;qBAUT,0BAA0B;WAE5B;WACA;EAFV,YACU,kBACA"}

package/dist/deploy/public.mjs

@@ -1,10 +1,138 @@
-import { M as StateVersionConflict, k as StateLocked } from "../sniffer-DHE2Nafd.mjs";
+import { B as LocalSandbox, H as allowlistedEnv, M as StateVersionConflict, U as CommandFailed, V as SANDBOX_ENV_ALLOWLIST, W as CommandTimedOut, k as StateLocked, u as detectPackageManager } from "../sniffer-aO_-s5vq.mjs";
 import { n as gkmHome, t as GKM_HOME_ENV } from "../home-GI7pJl1M.mjs";
+import { d as SandboxCwdEscape, f as SecretNameInvalid, h as confineCwd, n as ConstructsNotSerializable, o as SandboxWorkerFailed, t as ConstructDiscoveryFailed, u as SECRETS_DIR_ENV } from "../discover-BaT6bpnA.mjs";
+import { i as ConfigObjectNotSerializable, n as ConfigLoadFailed } from "../config-LKKCVCnC.mjs";
 import { a as UnknownDeployTarget, i as DeployTargetNotYetSupported } from "../define-CHBIEc5j.mjs";
 import { u as deployIdentity } from "../store-BS8A7NcA.mjs";
 import { i as TargetPackageNotFound, t as TargetRuntimeUndeclared } from "../runtime-DbakJS8u.mjs";
-import { i as TargetRuntimeMismatch, n as TargetEntryInvalid, r as TargetPackageInvalid, s as ProviderRemoved, t as InvalidTargetOptions } from "../resolve-CFCIkm7m.mjs";
-import { c as MissingCredential, i as UnknownDeployApps, l as chainCredentials, n as NoDeployableApps, r as RollbackFailed, u as storedCredentials } from "../terminal-ByZNjuig.mjs";
-import { t as deploy } from "../deploy-Cg9fae7a.mjs";
-import { d as RegistryNotFound, f as ProjectNotOwned, l as RegistryAmbiguous, n as MissingEnvVars, t as BackendDeployFailed, u as RegistryNotConfigured } from "../deploy-B7jvUORo.mjs";
-export { BackendDeployFailed, DeployTargetNotYetSupported, GKM_HOME_ENV, InvalidTargetOptions, MissingCredential, MissingEnvVars, NoDeployableApps, ProjectNotOwned, ProviderRemoved, RegistryAmbiguous, RegistryNotConfigured, RegistryNotFound, RollbackFailed, StateLocked, StateVersionConflict, TargetEntryInvalid, TargetPackageInvalid, TargetPackageNotFound, TargetRuntimeMismatch, TargetRuntimeUndeclared, UnknownDeployApps, UnknownDeployTarget, chainCredentials, deploy, deployIdentity, gkmHome, storedCredentials };
+import { i as TargetRuntimeMismatch, n as TargetEntryInvalid, r as TargetPackageInvalid, s as ProviderRemoved, t as InvalidTargetOptions } from "../resolve-B1T0hUaR.mjs";
+import { c as MissingCredential, i as UnknownDeployApps, l as chainCredentials, n as NoDeployableApps, r as RollbackFailed, u as storedCredentials } from "../terminal-gMxAo9Dj.mjs";
+import { t as deploy } from "../deploy-CGW-QY9D.mjs";
+import { d as RegistryNotFound, f as ProjectNotOwned, l as RegistryAmbiguous, n as MissingEnvVars, t as BackendDeployFailed, u as RegistryNotConfigured } from "../deploy-CG8bfFij.mjs";
+import { join, resolve } from "node:path";
+import { existsSync } from "node:fs";
+//#region src/sandbox/install.ts
+/**
+* Installing a project's dependencies in a sandbox, with or without their
+* lifecycle scripts.
+*
+* `postinstall` is the oldest way into a build machine: any package in the
+* lockfile — a dependency of a dependency — runs whatever it likes the moment
+* it is installed. For a build the host trusts that is how native modules get
+* built. For one it does not, the scripts are skipped, and the few packages
+* that genuinely need theirs (esbuild's binary, a database driver) are named
+* and rebuilt — with nothing but the sandbox's environment either way.
+*/
+/** Long enough for a cold install of a large monorepo. */
+const INSTALL_TIMEOUT_MS = 9e5;
+/** A name in `allowScripts` that is not a package name. */
+var InstallAllowlistNameInvalid = class extends Error {
+	packageName;
+	constructor(packageName) {
+		super(`'${packageName}' is not a package name, so its scripts cannot be allowed. Name the package as it appears in package.json — 'esbuild', '@prisma/client'.`);
+		this.packageName = packageName;
+		this.name = "InstallAllowlistNameInvalid";
+	}
+};
+/** The package manager has no way to run only some packages' scripts. */
+var InstallScriptsAllowlistUnsupported = class extends Error {
+	packageManager;
+	allowScripts;
+	constructor(packageManager, allowScripts) {
+		super(`${packageManager} cannot rebuild named packages after an install without scripts, so ${allowScripts.join(", ")} cannot be allowed theirs. Use pnpm, npm or Yarn 2+, or install with every script skipped.`);
+		this.packageManager = packageManager;
+		this.allowScripts = allowScripts;
+		this.name = "InstallScriptsAllowlistUnsupported";
+	}
+};
+/**
+* npm's package-name grammar, less a leading `-`: each name is an argument to
+* `rebuild`, and must never be read as a flag.
+*/
+const PACKAGE_NAME = /^(?:@[a-z0-9~][a-z0-9._~-]*\/)?[a-z0-9~][a-z0-9._~-]*$/;
+/**
+* The commands an install runs, in order. Exported for the tests, which
+* check each package manager's flags without installing with all four.
+*/
+function installCommands(packageManager, cwd, options = {}) {
+	const ignore = options.ignoreScripts ?? false;
+	const allow = ignore ? [...options.allowScripts ?? []] : [];
+	for (const name of allow) if (!PACKAGE_NAME.test(name)) throw new InstallAllowlistNameInvalid(name);
+	switch (packageManager) {
+		case "pnpm": return [["pnpm", [
+			"install",
+			"--frozen-lockfile",
+			...ignore ? ["--ignore-scripts"] : []
+		]], ...allow.length > 0 ? [["pnpm", [
+			"rebuild",
+			"--config.dangerouslyAllowAllBuilds=true",
+			...allow
+		]]] : []];
+		case "npm": return [["npm", [existsSync(join(cwd, "package-lock.json")) ? "ci" : "install", ...ignore ? ["--ignore-scripts"] : []]], ...allow.length > 0 ? [["npm", [
+			"rebuild",
+			"--dangerously-allow-all-scripts",
+			...allow
+		]]] : []];
+		case "yarn":
+			if (existsSync(join(cwd, ".yarnrc.yml"))) return [["yarn", [
+				"install",
+				"--immutable",
+				...ignore ? ["--mode=skip-build"] : []
+			]], ...allow.length > 0 ? [["yarn", ["rebuild", ...allow]]] : []];
+			if (allow.length > 0) throw new InstallScriptsAllowlistUnsupported("Yarn 1", allow);
+			return [["yarn", [
+				"install",
+				"--frozen-lockfile",
+				...ignore ? ["--ignore-scripts"] : []
+			]]];
+		case "bun":
+			if (allow.length > 0) throw new InstallScriptsAllowlistUnsupported("bun", allow);
+			return [["bun", [
+				"install",
+				"--frozen-lockfile",
+				...ignore ? ["--ignore-scripts"] : []
+			]]];
+	}
+}
+/**
+* Install the project's dependencies in `sandbox`.
+*
+* ```ts
+* // A checkout nobody has reviewed: no scripts but esbuild's.
+* await installDependencies(sandbox, {
+*   ignoreScripts: true,
+*   allowScripts: ['esbuild'],
+* });
+* ```
+*
+* Resolves with each command's result, in order — with its output when
+* `output` is `capture`.
+*
+* @throws {CommandFailed} when the package manager exits unsuccessfully.
+* @throws {InstallScriptsAllowlistUnsupported} for an allowlist the package
+*   manager cannot honour, before anything is installed.
+*/
+async function installDependencies(sandbox, options = {}) {
+	const cwd = options.cwd ?? sandbox.root;
+	const results = [];
+	const packageManager = options.packageManager ?? detectPackageManager(resolve(sandbox.root, cwd));
+	for (const [command, args] of installCommands(packageManager, resolve(sandbox.root, cwd), options)) {
+		const result = await sandbox.exec(command, args, {
+			cwd,
+			env: {
+				...sandbox.env,
+				...options.env
+			},
+			timeoutMs: options.timeoutMs ?? 9e5,
+			output: options.output ?? "inherit",
+			...options.signal ? { signal: options.signal } : {}
+		});
+		results.push(result);
+		if (result.exitCode !== 0) throw new CommandFailed(command, args, result.exitCode, result.signal);
+	}
+	return results;
+}
+//#endregion
+export { BackendDeployFailed, CommandFailed, CommandTimedOut, ConfigLoadFailed, ConfigObjectNotSerializable, ConstructDiscoveryFailed, ConstructsNotSerializable, DeployTargetNotYetSupported, GKM_HOME_ENV, INSTALL_TIMEOUT_MS, InstallAllowlistNameInvalid, InstallScriptsAllowlistUnsupported, InvalidTargetOptions, LocalSandbox, MissingCredential, MissingEnvVars, NoDeployableApps, ProjectNotOwned, ProviderRemoved, RegistryAmbiguous, RegistryNotConfigured, RegistryNotFound, RollbackFailed, SANDBOX_ENV_ALLOWLIST, SECRETS_DIR_ENV, SandboxCwdEscape, SandboxWorkerFailed, SecretNameInvalid, StateLocked, StateVersionConflict, TargetEntryInvalid, TargetPackageInvalid, TargetPackageNotFound, TargetRuntimeMismatch, TargetRuntimeUndeclared, UnknownDeployApps, UnknownDeployTarget, allowlistedEnv, chainCredentials, confineCwd, deploy, deployIdentity, gkmHome, installDependencies, storedCredentials };
+
+//# sourceMappingURL=public.mjs.map

package/dist/deploy/public.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"public.mjs","names":[],"sources":["../../src/sandbox/install.ts"],"sourcesContent":["/**\n * Installing a project's dependencies in a sandbox, with or without their\n * lifecycle scripts.\n *\n * `postinstall` is the oldest way into a build machine: any package in the\n * lockfile — a dependency of a dependency — runs whatever it likes the moment\n * it is installed. For a build the host trusts that is how native modules get\n * built. For one it does not, the scripts are skipped, and the few packages\n * that genuinely need theirs (esbuild's binary, a database driver) are named\n * and rebuilt — with nothing but the sandbox's environment either way.\n */\n\nimport { existsSync } from 'node:fs';\nimport { join, resolve } from 'node:path';\nimport { detectPackageManager, type PackageManager } from '../docker/templates';\nimport { CommandFailed } from '../run';\nimport type { Sandbox, SandboxOutput, SandboxResult } from './sandbox';\n\n/** Long enough for a cold install of a large monorepo. */\nexport const INSTALL_TIMEOUT_MS = 15 * 60_000;\n\nexport interface InstallOptions {\n\t/** The directory to install in. Defaults to the sandbox's root. */\n\tcwd?: string;\n\t/** Defaults to the one the lockfile above `cwd` names. */\n\tpackageManager?: PackageManager;\n\t/**\n\t * Skip every lifecycle script — dependencies' and the project's own —\n\t * except those of {@link allowScripts}. Defaults to false: scripts run as\n\t * a plain install runs them, under the package manager's own policy —\n\t * npm 12 and pnpm 10 skip dependencies' scripts nobody approved.\n\t */\n\tignoreScripts?: boolean;\n\t/**\n\t * With `ignoreScripts`, the packages whose scripts still run: rebuilt by\n\t * name once the install is done.\n\t */\n\tallowScripts?: readonly string[];\n\t/** Variables the install needs beyond the sandbox's own. */\n\tenv?: Readonly<Record<string, string>>;\n\t/** Defaults to {@link INSTALL_TIMEOUT_MS}, for each command. */\n\ttimeoutMs?: number;\n\t/** Where the package manager's output goes. Defaults to `inherit`. */\n\toutput?: SandboxOutput;\n\tsignal?: AbortSignal;\n}\n\n/** A name in `allowScripts` that is not a package name. */\nexport class InstallAllowlistNameInvalid extends Error {\n\tconstructor(readonly packageName: string) {\n\t\tsuper(\n\t\t\t`'${packageName}' is not a package name, so its scripts cannot be ` +\n\t\t\t\t'allowed. Name the package as it appears in package.json — ' +\n\t\t\t\t\"'esbuild', '@prisma/client'.\",\n\t\t);\n\t\tthis.name = 'InstallAllowlistNameInvalid';\n\t}\n}\n\n/** The package manager has no way to run only some packages' scripts. */\nexport class InstallScriptsAllowlistUnsupported extends Error {\n\tconstructor(\n\t\treadonly packageManager: string,\n\t\treadonly allowScripts: readonly string[],\n\t) {\n\t\tsuper(\n\t\t\t`${packageManager} cannot rebuild named packages after an install ` +\n\t\t\t\t`without scripts, so ${allowScripts.join(', ')} cannot be allowed ` +\n\t\t\t\t'theirs. Use pnpm, npm or Yarn 2+, or install with every script ' +\n\t\t\t\t'skipped.',\n\t\t);\n\t\tthis.name = 'InstallScriptsAllowlistUnsupported';\n\t}\n}\n\n/**\n * npm's package-name grammar, less a leading `-`: each name is an argument to\n * `rebuild`, and must never be read as a flag.\n */\nconst PACKAGE_NAME = /^(?:@[a-z0-9~][a-z0-9._~-]*\\/)?[a-z0-9~][a-z0-9._~-]*$/;\n\n/**\n * The commands an install runs, in order. Exported for the tests, which\n * check each package manager's flags without installing with all four.\n */\nexport function installCommands(\n\tpackageManager: PackageManager,\n\tcwd: string,\n\toptions: Pick<InstallOptions, 'ignoreScripts' | 'allowScripts'> = {},\n): [string, string[]][] {\n\tconst ignore = options.ignoreScripts ?? false;\n\tconst allow = ignore ? [...(options.allowScripts ?? [])] : [];\n\tfor (const name of allow) {\n\t\tif (!PACKAGE_NAME.test(name)) throw new InstallAllowlistNameInvalid(name);\n\t}\n\n\tswitch (packageManager) {\n\t\tcase 'pnpm':\n\t\t\treturn [\n\t\t\t\t[\n\t\t\t\t\t'pnpm',\n\t\t\t\t\t[\n\t\t\t\t\t\t'install',\n\t\t\t\t\t\t'--frozen-lockfile',\n\t\t\t\t\t\t...(ignore ? ['--ignore-scripts'] : []),\n\t\t\t\t\t],\n\t\t\t\t],\n\t\t\t\t// pnpm 10 builds no dependency it was not told to, even by name;\n\t\t\t\t// this command names exactly the ones allowed, so it may build\n\t\t\t\t// what it names.\n\t\t\t\t...(allow.length > 0\n\t\t\t\t\t? [\n\t\t\t\t\t\t\t[\n\t\t\t\t\t\t\t\t'pnpm',\n\t\t\t\t\t\t\t\t[\n\t\t\t\t\t\t\t\t\t'rebuild',\n\t\t\t\t\t\t\t\t\t'--config.dangerouslyAllowAllBuilds=true',\n\t\t\t\t\t\t\t\t\t...allow,\n\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t] as [string, string[]],\n\t\t\t\t\t\t]\n\t\t\t\t\t: []),\n\t\t\t];\n\t\tcase 'npm': {\n\t\t\tconst locked = existsSync(join(cwd, 'package-lock.json'));\n\t\t\treturn [\n\t\t\t\t[\n\t\t\t\t\t'npm',\n\t\t\t\t\t[locked ? 'ci' : 'install', ...(ignore ? ['--ignore-scripts'] : [])],\n\t\t\t\t],\n\t\t\t\t// npm 12 runs no dependency's install script its `allowScripts`\n\t\t\t\t// policy does not approve, rebuilt by name or not, and refuses\n\t\t\t\t// `--allow-scripts` on a project's command line. This command\n\t\t\t\t// names exactly the packages allowed, so it may run what it names.\n\t\t\t\t...(allow.length > 0\n\t\t\t\t\t? [\n\t\t\t\t\t\t\t[\n\t\t\t\t\t\t\t\t'npm',\n\t\t\t\t\t\t\t\t['rebuild', '--dangerously-allow-all-scripts', ...allow],\n\t\t\t\t\t\t\t] as [string, string[]],\n\t\t\t\t\t\t]\n\t\t\t\t\t: []),\n\t\t\t];\n\t\t}\n\t\tcase 'yarn': {\n\t\t\t// Yarn 2+ keeps a `.yarnrc.yml`; it skips builds by mode and can\n\t\t\t// rebuild by name. Yarn 1 can only skip them all.\n\t\t\tconst berry = existsSync(join(cwd, '.yarnrc.yml'));\n\t\t\tif (berry) {\n\t\t\t\treturn [\n\t\t\t\t\t[\n\t\t\t\t\t\t'yarn',\n\t\t\t\t\t\t[\n\t\t\t\t\t\t\t'install',\n\t\t\t\t\t\t\t'--immutable',\n\t\t\t\t\t\t\t...(ignore ? ['--mode=skip-build'] : []),\n\t\t\t\t\t\t],\n\t\t\t\t\t],\n\t\t\t\t\t...(allow.length > 0\n\t\t\t\t\t\t? [['yarn', ['rebuild', ...allow]] as [string, string[]]]\n\t\t\t\t\t\t: []),\n\t\t\t\t];\n\t\t\t}\n\t\t\tif (allow.length > 0) {\n\t\t\t\tthrow new InstallScriptsAllowlistUnsupported('Yarn 1', allow);\n\t\t\t}\n\t\t\treturn [\n\t\t\t\t[\n\t\t\t\t\t'yarn',\n\t\t\t\t\t[\n\t\t\t\t\t\t'install',\n\t\t\t\t\t\t'--frozen-lockfile',\n\t\t\t\t\t\t...(ignore ? ['--ignore-scripts'] : []),\n\t\t\t\t\t],\n\t\t\t\t],\n\t\t\t];\n\t\t}\n\t\tcase 'bun':\n\t\t\tif (allow.length > 0) {\n\t\t\t\tthrow new InstallScriptsAllowlistUnsupported('bun', allow);\n\t\t\t}\n\t\t\treturn [\n\t\t\t\t[\n\t\t\t\t\t'bun',\n\t\t\t\t\t[\n\t\t\t\t\t\t'install',\n\t\t\t\t\t\t'--frozen-lockfile',\n\t\t\t\t\t\t...(ignore ? ['--ignore-scripts'] : []),\n\t\t\t\t\t],\n\t\t\t\t],\n\t\t\t];\n\t}\n}\n\n/**\n * Install the project's dependencies in `sandbox`.\n *\n * ```ts\n * // A checkout nobody has reviewed: no scripts but esbuild's.\n * await installDependencies(sandbox, {\n *   ignoreScripts: true,\n *   allowScripts: ['esbuild'],\n * });\n * ```\n *\n * Resolves with each command's result, in order — with its output when\n * `output` is `capture`.\n *\n * @throws {CommandFailed} when the package manager exits unsuccessfully.\n * @throws {InstallScriptsAllowlistUnsupported} for an allowlist the package\n *   manager cannot honour, before anything is installed.\n */\nexport async function installDependencies(\n\tsandbox: Sandbox,\n\toptions: InstallOptions = {},\n): Promise<SandboxResult[]> {\n\tconst cwd = options.cwd ?? sandbox.root;\n\tconst results: SandboxResult[] = [];\n\tconst packageManager =\n\t\toptions.packageManager ?? detectPackageManager(resolve(sandbox.root, cwd));\n\n\tfor (const [command, args] of installCommands(\n\t\tpackageManager,\n\t\tresolve(sandbox.root, cwd),\n\t\toptions,\n\t)) {\n\t\tconst result = await sandbox.exec(command, args, {\n\t\t\tcwd,\n\t\t\tenv: { ...sandbox.env, ...options.env },\n\t\t\ttimeoutMs: options.timeoutMs ?? INSTALL_TIMEOUT_MS,\n\t\t\toutput: options.output ?? 'inherit',\n\t\t\t...(options.signal ? { signal: options.signal } : {}),\n\t\t});\n\t\tresults.push(result);\n\t\tif (result.exitCode !== 0) {\n\t\t\tthrow new CommandFailed(\n\t\t\t\tcommand,\n\t\t\t\targs,\n\t\t\t\tresult.exitCode,\n\t\t\t\tresult.signal as NodeJS.Signals | null,\n\t\t\t);\n\t\t}\n\t}\n\treturn results;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAmBA,MAAa,qBAAqB;;AA6BlC,IAAa,8BAAb,cAAiD,MAAM;CACjC;CAArB,YAAY,aAA8B;EACzC,MACC,IAAI,YAAY,yIAGjB;EALoB,KAAA,cAAA;EAMpB,KAAK,OAAO;CACb;AACD;;AAGA,IAAa,qCAAb,cAAwD,MAAM;CAEnD;CACA;CAFV,YACC,gBACA,cACC;EACD,MACC,GAAG,eAAe,sEACM,aAAa,KAAK,IAAI,EAAE,2FAGjD;EARS,KAAA,iBAAA;EACA,KAAA,eAAA;EAQT,KAAK,OAAO;CACb;AACD;;;;;AAMA,MAAM,eAAe;;;;;AAMrB,SAAgB,gBACf,gBACA,KACA,UAAkE,CAAC,GAC5C;CACvB,MAAM,SAAS,QAAQ,iBAAiB;CACxC,MAAM,QAAQ,SAAS,CAAC,GAAI,QAAQ,gBAAgB,CAAC,CAAE,IAAI,CAAC;CAC5D,KAAK,MAAM,QAAQ,OAClB,IAAI,CAAC,aAAa,KAAK,IAAI,GAAG,MAAM,IAAI,4BAA4B,IAAI;CAGzE,QAAQ,gBAAR;EACC,KAAK,QACJ,OAAO,CACN,CACC,QACA;GACC;GACA;GACA,GAAI,SAAS,CAAC,kBAAkB,IAAI,CAAC;EACtC,CACD,GAIA,GAAI,MAAM,SAAS,IAChB,CACA,CACC,QACA;GACC;GACA;GACA,GAAG;EACJ,CACD,CACD,IACC,CAAC,CACL;EACD,KAAK,OAEJ,OAAO,CACN,CACC,OACA,CAJa,WAAW,KAAK,KAAK,mBAAmB,CAI/C,IAAI,OAAO,WAAW,GAAI,SAAS,CAAC,kBAAkB,IAAI,CAAC,CAAE,CACpE,GAKA,GAAI,MAAM,SAAS,IAChB,CACA,CACC,OACA;GAAC;GAAW;GAAmC,GAAG;EAAK,CACxD,CACD,IACC,CAAC,CACL;EAED,KAAK;GAIJ,IADc,WAAW,KAAK,KAAK,aAAa,CACxC,GACP,OAAO,CACN,CACC,QACA;IACC;IACA;IACA,GAAI,SAAS,CAAC,mBAAmB,IAAI,CAAC;GACvC,CACD,GACA,GAAI,MAAM,SAAS,IAChB,CAAC,CAAC,QAAQ,CAAC,WAAW,GAAG,KAAK,CAAC,CAAuB,IACtD,CAAC,CACL;GAED,IAAI,MAAM,SAAS,GAClB,MAAM,IAAI,mCAAmC,UAAU,KAAK;GAE7D,OAAO,CACN,CACC,QACA;IACC;IACA;IACA,GAAI,SAAS,CAAC,kBAAkB,IAAI,CAAC;GACtC,CACD,CACD;EAED,KAAK;GACJ,IAAI,MAAM,SAAS,GAClB,MAAM,IAAI,mCAAmC,OAAO,KAAK;GAE1D,OAAO,CACN,CACC,OACA;IACC;IACA;IACA,GAAI,SAAS,CAAC,kBAAkB,IAAI,CAAC;GACtC,CACD,CACD;CACF;AACD;;;;;;;;;;;;;;;;;;;AAoBA,eAAsB,oBACrB,SACA,UAA0B,CAAC,GACA;CAC3B,MAAM,MAAM,QAAQ,OAAO,QAAQ;CACnC,MAAM,UAA2B,CAAC;CAClC,MAAM,iBACL,QAAQ,kBAAkB,qBAAqB,QAAQ,QAAQ,MAAM,GAAG,CAAC;CAE1E,KAAK,MAAM,CAAC,SAAS,SAAS,gBAC7B,gBACA,QAAQ,QAAQ,MAAM,GAAG,GACzB,OACD,GAAG;EACF,MAAM,SAAS,MAAM,QAAQ,KAAK,SAAS,MAAM;GAChD;GACA,KAAK;IAAE,GAAG,QAAQ;IAAK,GAAG,QAAQ;GAAI;GACtC,WAAW,QAAQ,aAAA;GACnB,QAAQ,QAAQ,UAAU;GAC1B,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;EACpD,CAAC;EACD,QAAQ,KAAK,MAAM;EACnB,IAAI,OAAO,aAAa,GACvB,MAAM,IAAI,cACT,SACA,MACA,OAAO,UACP,OAAO,MACR;CAEF;CACA,OAAO;AACR"}