@ggui-ai/cli 0.1.0-rc.1

package/dist/internal/artifact-publish.d.ts

@@ -0,0 +1,204 @@
+import { CognitoIdentityProviderClient } from '@aws-sdk/client-cognito-identity-provider';
+import { type RegistryTokenDocument } from './auth-cache.js';
+import { type AuthFlags } from './auth-strategy.js';
+/** Artifact-kind discriminator. Mirrors the manifest schema's
+ * `kind` field — passing a CLI verb's `kind` to the publish core lets
+ * it bail with a friendly redirect when the on-disk manifest doesn't
+ * match. */
+export type ArtifactKind = 'gadget' | 'blueprint';
+/**
+ * Shape of the resolved options the publish core consumes. Built from
+ * argv by {@link parseArtifactPublishFlags} so the core function is
+ * dependency-injectable for tests.
+ */
+export interface ArtifactPublishOptions {
+    /** CLI verb the operator typed — enforced against the manifest kind. */
+    readonly kind: ArtifactKind;
+    /** Override the registry URL — highest precedence. */
+    readonly registry?: string;
+    /** Skip the actual POST; run everything else. */
+    readonly dryRun: boolean;
+    /** Override the private-key path. */
+    readonly key?: string;
+    /**
+     * OIDC identity token for sigstore signing (public gadgets only).
+     * Mirrors cosign's `--identity-token` flag. If absent the CLI falls
+     * back through `GGUI_OIDC_TOKEN` → GH-Actions ambient → interactive.
+     * Ignored for private-gadget publishes (which sign with Ed25519).
+     */
+    readonly identityToken?: string;
+    /** Auth strategy + bearer token. `auth === undefined` → hosted auth. */
+    readonly auth?: AuthFlags;
+    /** Starting directory; defaults to `process.cwd()`. */
+    readonly cwd?: string;
+    /**
+     * Test seam: inject `fetch`. Production passes `globalThis.fetch`.
+     * Typed deliberately as the `fetch` global so tests use a real
+     * `Response` object without leaking through `any`.
+     */
+    readonly fetch?: typeof fetch;
+    /**
+     * Test seam: inject a hosted-auth identity-provider client. Production
+     * constructs one per call. Vendor-neutral parameter name; the AWS SDK
+     * type is reused without leaking the vendor through the parameter
+     * name — see the cloud-internal hosted-auth implementation below.
+     */
+    readonly hostedAuthClient?: Pick<CognitoIdentityProviderClient, 'send'>;
+    /**
+     * Test seam: prompt for username + password. Production reads
+     * stdin (TTY) — tests stub the function.
+     */
+    readonly prompt?: (label: string, opts?: {
+        hidden?: boolean;
+    }) => Promise<string>;
+    /** Test seam: write status lines. Production = process.stdout.write. */
+    readonly stdout?: (line: string) => void;
+    /** Test seam: write error lines. Production = process.stderr.write. */
+    readonly stderr?: (line: string) => void;
+    /**
+     * Test seam: clock. Returns unix epoch SECONDS. Production = Date.now()/1000.
+     */
+    readonly now?: () => number;
+}
+/** Discriminated result mirroring the patterns used by `runServe` /
+ * `runDev`. Tests + the CLI router branch on the discriminant. */
+export type PublishResult = {
+    readonly ok: true;
+    readonly exitCode: 0;
+    readonly success: PublishSuccess;
+} | {
+    readonly ok: false;
+    readonly exitCode: number;
+    readonly error: PublishError;
+};
+export interface PublishSuccess {
+    readonly artifactId: string;
+    readonly version: string;
+    readonly manifestUrl: string;
+    readonly bundleUrl?: string;
+    readonly signatureUrl?: string;
+    readonly installCommand: string;
+    readonly registryUrl: string;
+    readonly dryRun: boolean;
+}
+export type PublishError = {
+    readonly code: 'no_registry_resolved';
+    readonly message: string;
+} | {
+    readonly code: 'manifest_missing';
+    readonly message: string;
+} | {
+    readonly code: 'manifest_invalid';
+    readonly message: string;
+    readonly details?: string;
+} | {
+    readonly code: 'manifest_kind_mismatch';
+    readonly message: string;
+} | {
+    readonly code: 'bundle_failed';
+    readonly message: string;
+} | {
+    readonly code: 'auth_failed';
+    readonly message: string;
+} | {
+    readonly code: 'auth_config_missing';
+    readonly message: string;
+} | {
+    readonly code: 'key_missing';
+    readonly message: string;
+} | {
+    readonly code: 'oidc_resolution_failed';
+    readonly message: string;
+    /** Sub-code from the OIDC resolver — `no_token_available` / `github_actions_fetch_failed` / `interactive_failed`. */
+    readonly oidcCode?: string;
+} | {
+    readonly code: 'conformance_failed';
+    readonly message: string;
+    readonly issues?: ReadonlyArray<ConformanceIssue>;
+} | {
+    readonly code: 'publish_failed';
+    readonly message: string;
+    readonly httpStatus?: number;
+    readonly serverCode?: string;
+} | {
+    readonly code: 'publish_stubbed';
+    readonly message: string;
+};
+export interface ConformanceIssue {
+    readonly code: string;
+    readonly message: string;
+    readonly path?: string;
+}
+/**
+ * Parsed argv flags for the `ggui {gadget,blueprint} publish` subcommand.
+ * Returned by {@link parseArtifactPublishFlags}.
+ */
+export interface ParsedPublishFlags {
+    readonly registry?: string;
+    readonly dryRun: boolean;
+    readonly key?: string;
+    /** Parsed `--identity-token <jwt>` flag (sigstore / public gadgets). */
+    readonly identityToken?: string;
+    readonly auth?: AuthFlags;
+    readonly help: boolean;
+    readonly error?: string;
+}
+/**
+ * Build verb-specific help text. Takes the `kind` so the rendered
+ * lines say `ggui gadget publish` / `ggui blueprint publish` rather
+ * than a generic placeholder.
+ */
+export declare function buildPublishHelp(kind: ArtifactKind): string;
+/**
+ * Parse argv tail (excluding `ggui {gadget,blueprint} publish`) into
+ * flags. Pure — no IO. Returned `error` is a single-line
+ * operator-facing string. The `--auth` + `--token` flags are peeled
+ * out via {@link parseAuthFlags} so the publish flag loop stays
+ * focused on its own surface.
+ */
+export declare function parseArtifactPublishFlags(args: readonly string[]): ParsedPublishFlags;
+/**
+ * Run the publish flow. Pure entry point — all IO + network is
+ * threaded through injectable seams in `opts` so tests are
+ * deterministic.
+ *
+ * `opts.kind` is the verb the operator typed; manifest-kind mismatch
+ * (e.g. `ggui gadget publish` in a directory with `ggui.blueprint.json`)
+ * surfaces a friendly redirect at step 2 + exits non-zero.
+ */
+export declare function runArtifactPublish(opts: ArtifactPublishOptions): Promise<PublishResult>;
+interface RegistryResolution {
+    readonly ok: true;
+    readonly url: string;
+    readonly source: 'flag' | 'env' | 'ggui.json';
+}
+interface RegistryUnresolved {
+    readonly ok: false;
+    readonly message: string;
+}
+export declare function resolveRegistryUrl(opts: {
+    readonly flag?: string;
+    readonly env: NodeJS.ProcessEnv;
+    readonly cwd: string;
+}): RegistryResolution | RegistryUnresolved;
+export interface AuthSuccess {
+    readonly ok: true;
+    readonly token: RegistryTokenDocument;
+    readonly fromCache: boolean;
+}
+export interface AuthFailed {
+    readonly ok: false;
+    readonly error: Extract<PublishError, {
+        code: 'auth_failed' | 'auth_config_missing';
+    }>;
+}
+export declare function acquireHostedAuthJwt(opts: {
+    readonly registryUrl: string;
+    readonly env: NodeJS.ProcessEnv;
+    readonly cwd: string;
+    readonly hostedAuthClient?: Pick<CognitoIdentityProviderClient, 'send'>;
+    readonly prompt?: ArtifactPublishOptions['prompt'];
+    readonly now: () => number;
+}): Promise<AuthSuccess | AuthFailed>;
+export {};
+//# sourceMappingURL=artifact-publish.d.ts.map

package/dist/internal/artifact-publish.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-publish.d.ts","sourceRoot":"","sources":["../../src/internal/artifact-publish.ts"],"names":[],"mappings":"AA+DA,OAAO,EACL,6BAA6B,EAI9B,MAAM,2CAA2C,CAAC;AA0BnD,OAAO,EAIL,KAAK,qBAAqB,EAC3B,MAAM,iBAAiB,CAAC;AAQzB,OAAO,EAIL,KAAK,SAAS,EACf,MAAM,oBAAoB,CAAC;AAE5B;;;YAGY;AACZ,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,WAAW,CAAC;AAElD;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,sDAAsD;IACtD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,iDAAiD;IACjD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,qCAAqC;IACrC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,wEAAwE;IACxE,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;IAC1B,uDAAuD;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;IACxE;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAClF,wEAAwE;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,uEAAuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC;;OAEG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED;kEACkE;AAClE,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;CAAE,GAC7E;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;CAAE,CAAC;AAEpF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACnE;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1F;IAAE,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACrE;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAClE;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC1D;IACE,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,qHAAqH;IACrH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,gBAAgB,CAAC,CAAA;CAAE,GACpH;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GACzH;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAgC3D;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,kBAAkB,CAsErF;AAMD;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC,aAAa,CAAC,CAsPxB;AAMD,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,WAAW,CAAC;CAC/C;AAED,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB,GAAG,kBAAkB,GAAG,kBAAkB,CAsC1C;AA6MD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AACD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,aAAa,GAAG,qBAAqB,CAAA;KAAE,CAAC,CAAC;CACxF;AAyBD,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACnD,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;CAC5B,GAAG,OAAO,CAAC,WAAW,GAAG,UAAU,CAAC,CAgFpC"}