@guanjinke/artifact-client 1.5.1 → 1.6.0

package/dist/web/assets.js

@@ -0,0 +1,87 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assetFiles = exports.assetRoutes = void 0;
+exports.defaultAssetDirectory = defaultAssetDirectory;
+exports.loadAsset = loadAsset;
+exports.verifyAssets = verifyAssets;
+const fs = __importStar(require("fs/promises"));
+const path = __importStar(require("path"));
+exports.assetRoutes = {
+    '/': { file: 'index.html', contentType: 'text/html; charset=utf-8' },
+    '/index.html': { file: 'index.html', contentType: 'text/html; charset=utf-8' },
+    '/app.js': { file: 'app.js', contentType: 'text/javascript; charset=utf-8' },
+    '/styles.css': { file: 'styles.css', contentType: 'text/css; charset=utf-8' },
+    // The page declares this icon, so it must be served or every load logs a 404.
+    '/favicon.svg': { file: 'favicon.svg', contentType: 'image/svg+xml' },
+};
+/** Every file a complete `dist/web/static` build contains. */
+exports.assetFiles = ['index.html', 'app.js', 'styles.css', 'favicon.svg'];
+/** `dist/web/static` next to the compiled server. */
+function defaultAssetDirectory() {
+    return path.join(__dirname, 'static');
+}
+async function loadAsset(directory, route) {
+    const asset = exports.assetRoutes[route];
+    if (!asset)
+        return undefined;
+    try {
+        return { body: await fs.readFile(path.join(directory, asset.file)), contentType: asset.contentType };
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return undefined;
+        throw error;
+    }
+}
+/**
+ * Fail fast with an actionable message when the frontend was never built.
+ *
+ * `tsc` alone does not produce the bundle, so a server started from a
+ * partially built tree would otherwise serve 404s for its own page.
+ */
+async function verifyAssets(directory) {
+    for (const file of exports.assetFiles) {
+        try {
+            const stat = await fs.stat(path.join(directory, file));
+            if (!stat.isFile())
+                throw new Error('not a file');
+        }
+        catch {
+            throw new Error(`Web interface asset missing: ${path.join(directory, file)}. Run "npm run build" to build the web bundle.`);
+        }
+    }
+}
+//# sourceMappingURL=assets.js.map

package/dist/web/assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets.js","sourceRoot":"","sources":["../../src/web/assets.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuBA,sDAEC;AAED,8BASC;AAQD,oCASC;AArDD,gDAAkC;AAClC,2CAA6B;AAShB,QAAA,WAAW,GAA+B;IACrD,GAAG,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,0BAA0B,EAAE;IACpE,aAAa,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,0BAA0B,EAAE;IAC9E,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE;IAC5E,aAAa,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,yBAAyB,EAAE;IAC7E,8EAA8E;IAC9E,cAAc,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,eAAe,EAAE;CACtE,CAAC;AAEF,8DAA8D;AACjD,QAAA,UAAU,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,CAAU,CAAC;AAEzF,qDAAqD;AACrD,SAAgB,qBAAqB;IACnC,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AACxC,CAAC;AAEM,KAAK,UAAU,SAAS,CAAC,SAAiB,EAAE,KAAa;IAC9D,MAAM,KAAK,GAAG,mBAAW,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;IACvG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,YAAY,CAAC,SAAiB;IAClD,KAAK,MAAM,IAAI,IAAI,kBAAU,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,gDAAgD,CAAC,CAAC;QAC9H,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/web/http.d.ts

@@ -0,0 +1,41 @@
+import { IncomingMessage, ServerResponse } from 'http';
+/** A failure that should reach the caller as an HTTP status rather than a 500. */
+export declare class HttpError extends Error {
+    readonly status: number;
+    readonly allow?: string | undefined;
+    constructor(status: number, message: string, allow?: string | undefined);
+}
+/** Response headers shared by every reply; no CORS header is ever sent. */
+export declare function applySecurityHeaders(response: ServerResponse): void;
+export declare function sendJson(response: ServerResponse, status: number, payload: unknown, allow?: string): void;
+export declare function sendText(response: ServerResponse, status: number, text: string, contentType: string, extra?: Record<string, string>): void;
+/** First value of a possibly repeated header, or undefined. */
+export declare function header(request: IncomingMessage, name: string): string | undefined;
+/**
+ * Read a JSON object body.
+ *
+ * Only `application/json` is accepted, so a browser form (which can be posted
+ * cross-origin without a preflight) can never reach a state-changing handler.
+ * An oversized body is drained rather than aborted, so the caller still
+ * receives the 413 instead of a reset connection.
+ */
+export declare function readJson(request: IncomingMessage, limit: number): Promise<Record<string, unknown>>;
+export declare function requireString(body: Record<string, unknown>, field: string): string;
+export declare function optionalString(body: Record<string, unknown>, field: string): string | undefined;
+export declare function requireEnum<T extends string>(body: Record<string, unknown>, field: string, allowed: readonly T[]): T;
+export declare function optionalEnum<T extends string>(body: Record<string, unknown>, field: string, allowed: readonly T[]): T | undefined;
+export declare function requireOptionalInteger(body: Record<string, unknown>, field: string, min: number, max: number): number | undefined;
+export declare function optionalBoolean(body: Record<string, unknown>, field: string): boolean | undefined;
+/** A `string[]` field that also accepts a single whitespace/comma separated string. */
+export declare function requireStringList(body: Record<string, unknown>, field: string): string[];
+/**
+ * A `string[]` field that is passed through unsplit.
+ *
+ * Module *specs* must reach `parseModuleSpecs` verbatim: a spec carrying a local
+ * source (`dashboard=D:\my build\out.dll`) is split on commas only there, so a
+ * Windows path may contain spaces.
+ */
+export declare function requireRawStringList(body: Record<string, unknown>, field: string): string[];
+/** Same separator handling as the CLI's `--modules` values for plain module names. */
+export declare function splitList(value: string): string[];
+//# sourceMappingURL=http.d.ts.map

package/dist/web/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/web/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,MAAM,CAAC;AAEvD,kFAAkF;AAClF,qBAAa,SAAU,SAAQ,KAAK;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAmB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM;gBAAxD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAW,KAAK,CAAC,EAAE,MAAM,YAAA;CAC9E;AAED,2EAA2E;AAC3E,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,CAInE;AAED,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CASzG;AAED,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAK1I;AAED,+DAA+D;AAC/D,wBAAgB,MAAM,CAAC,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGjF;AAED;;;;;;;GAOG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAkBxG;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAIlF;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAK/F;AAED,wBAAgB,WAAW,CAAC,CAAC,SAAS,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAIpH;AAED,wBAAgB,YAAY,CAAC,CAAC,SAAS,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,GAAG,SAAS,CAGjI;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKjI;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAKjG;AAED,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAQxF;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAK3F;AAED,sFAAsF;AACtF,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAEjD"}

package/dist/web/http.js

@@ -0,0 +1,167 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HttpError = void 0;
+exports.applySecurityHeaders = applySecurityHeaders;
+exports.sendJson = sendJson;
+exports.sendText = sendText;
+exports.header = header;
+exports.readJson = readJson;
+exports.requireString = requireString;
+exports.optionalString = optionalString;
+exports.requireEnum = requireEnum;
+exports.optionalEnum = optionalEnum;
+exports.requireOptionalInteger = requireOptionalInteger;
+exports.optionalBoolean = optionalBoolean;
+exports.requireStringList = requireStringList;
+exports.requireRawStringList = requireRawStringList;
+exports.splitList = splitList;
+/** A failure that should reach the caller as an HTTP status rather than a 500. */
+class HttpError extends Error {
+    status;
+    allow;
+    constructor(status, message, allow) {
+        super(message);
+        this.status = status;
+        this.allow = allow;
+    }
+}
+exports.HttpError = HttpError;
+/** Response headers shared by every reply; no CORS header is ever sent. */
+function applySecurityHeaders(response) {
+    response.setHeader('X-Content-Type-Options', 'nosniff');
+    response.setHeader('Referrer-Policy', 'no-referrer');
+    response.setHeader('Cache-Control', 'no-store');
+}
+function sendJson(response, status, payload, allow) {
+    const body = Buffer.from(JSON.stringify(payload, null, 2) + '\n', 'utf8');
+    applySecurityHeaders(response);
+    response.writeHead(status, {
+        'Content-Type': 'application/json; charset=utf-8',
+        'Content-Length': body.length,
+        ...(allow ? { Allow: allow } : {}),
+    });
+    response.end(body);
+}
+function sendText(response, status, text, contentType, extra) {
+    const body = Buffer.from(text, 'utf8');
+    applySecurityHeaders(response);
+    response.writeHead(status, { 'Content-Type': contentType, 'Content-Length': body.length, ...extra });
+    response.end(body);
+}
+/** First value of a possibly repeated header, or undefined. */
+function header(request, name) {
+    const value = request.headers[name];
+    return Array.isArray(value) ? value[0] : value;
+}
+/**
+ * Read a JSON object body.
+ *
+ * Only `application/json` is accepted, so a browser form (which can be posted
+ * cross-origin without a preflight) can never reach a state-changing handler.
+ * An oversized body is drained rather than aborted, so the caller still
+ * receives the 413 instead of a reset connection.
+ */
+async function readJson(request, limit) {
+    const contentType = header(request, 'content-type') ?? '';
+    if (!contentType.toLowerCase().startsWith('application/json'))
+        throw new HttpError(415, 'Expected Content-Type: application/json.');
+    const chunks = [];
+    let size = 0;
+    let oversized = false;
+    for await (const chunk of request) {
+        const buffer = chunk;
+        size += buffer.length;
+        if (size > limit) {
+            oversized = true;
+            continue;
+        }
+        chunks.push(buffer);
+    }
+    if (oversized)
+        throw new HttpError(413, `Request body exceeds ${limit} bytes.`);
+    if (!size)
+        throw new HttpError(400, 'Expected a JSON object body.');
+    let parsed;
+    try {
+        parsed = JSON.parse(Buffer.concat(chunks).toString('utf8'));
+    }
+    catch {
+        throw new HttpError(400, 'Request body is not valid JSON.');
+    }
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+        throw new HttpError(400, 'Expected a JSON object body.');
+    return parsed;
+}
+function requireString(body, field) {
+    const value = body[field];
+    if (typeof value !== 'string' || value.trim() === '')
+        throw new HttpError(400, `"${field}" is required and must be a non-empty string.`);
+    return value.trim();
+}
+function optionalString(body, field) {
+    const value = body[field];
+    if (value === undefined || value === null)
+        return undefined;
+    if (typeof value !== 'string')
+        throw new HttpError(400, `"${field}" must be a string.`);
+    return value;
+}
+function requireEnum(body, field, allowed) {
+    const value = body[field];
+    if (typeof value !== 'string' || !allowed.includes(value))
+        throw new HttpError(400, `"${field}" must be one of: ${allowed.join(', ')}.`);
+    return value;
+}
+function optionalEnum(body, field, allowed) {
+    if (body[field] === undefined || body[field] === null)
+        return undefined;
+    return requireEnum(body, field, allowed);
+}
+function requireOptionalInteger(body, field, min, max) {
+    const value = body[field];
+    if (value === undefined || value === null)
+        return undefined;
+    if (typeof value !== 'number' || !Number.isInteger(value) || value < min || value > max)
+        throw new HttpError(400, `"${field}" must be an integer between ${min} and ${max}.`);
+    return value;
+}
+function optionalBoolean(body, field) {
+    const value = body[field];
+    if (value === undefined || value === null)
+        return undefined;
+    if (typeof value !== 'boolean')
+        throw new HttpError(400, `"${field}" must be a boolean.`);
+    return value;
+}
+/** A `string[]` field that also accepts a single whitespace/comma separated string. */
+function requireStringList(body, field) {
+    const value = body[field];
+    if (typeof value === 'string')
+        return splitList(value);
+    if (Array.isArray(value)) {
+        if (!value.every(entry => typeof entry === 'string'))
+            throw new HttpError(400, `"${field}" must contain strings only.`);
+        return value.flatMap(entry => splitList(entry));
+    }
+    throw new HttpError(400, `"${field}" is required and must be a string or an array of strings.`);
+}
+/**
+ * A `string[]` field that is passed through unsplit.
+ *
+ * Module *specs* must reach `parseModuleSpecs` verbatim: a spec carrying a local
+ * source (`dashboard=D:\my build\out.dll`) is split on commas only there, so a
+ * Windows path may contain spaces.
+ */
+function requireRawStringList(body, field) {
+    const value = body[field];
+    if (typeof value === 'string')
+        return [value];
+    if (Array.isArray(value) && value.every(entry => typeof entry === 'string'))
+        return value;
+    throw new HttpError(400, `"${field}" is required and must be a string or an array of strings.`);
+}
+/** Same separator handling as the CLI's `--modules` values for plain module names. */
+function splitList(value) {
+    return value.split(/[\s,]+/).map(entry => entry.trim()).filter(Boolean);
+}
+//# sourceMappingURL=http.js.map

package/dist/web/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/web/http.ts"],"names":[],"mappings":";;;AAQA,oDAIC;AAED,4BASC;AAED,4BAKC;AAGD,wBAGC;AAUD,4BAkBC;AAED,sCAIC;AAED,wCAKC;AAED,kCAIC;AAED,oCAGC;AAED,wDAKC;AAED,0CAKC;AAGD,8CAQC;AASD,oDAKC;AAGD,8BAEC;AAlID,kFAAkF;AAClF,MAAa,SAAU,SAAQ,KAAK;IACb;IAA0C;IAA/D,YAAqB,MAAc,EAAE,OAAe,EAAW,KAAc;QAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAA3E,WAAM,GAAN,MAAM,CAAQ;QAA4B,UAAK,GAAL,KAAK,CAAS;IAAoB,CAAC;CACnG;AAFD,8BAEC;AAED,2EAA2E;AAC3E,SAAgB,oBAAoB,CAAC,QAAwB;IAC3D,QAAQ,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;IACxD,QAAQ,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;IACrD,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;AAClD,CAAC;AAED,SAAgB,QAAQ,CAAC,QAAwB,EAAE,MAAc,EAAE,OAAgB,EAAE,KAAc;IACjG,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1E,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;QACzB,cAAc,EAAE,iCAAiC;QACjD,gBAAgB,EAAE,IAAI,CAAC,MAAM;QAC7B,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnC,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,SAAgB,QAAQ,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAY,EAAE,WAAmB,EAAE,KAA8B;IAClI,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,gBAAgB,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IACrG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,+DAA+D;AAC/D,SAAgB,MAAM,CAAC,OAAwB,EAAE,IAAY;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACjD,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,QAAQ,CAAC,OAAwB,EAAE,KAAa;IACpE,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC;IAC1D,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAC;IACpI,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,KAAe,CAAC;QAC/B,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC;QACtB,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;YAAC,SAAS,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,wBAAwB,KAAK,SAAS,CAAC,CAAC;IAChF,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,8BAA8B,CAAC,CAAC;IACpE,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC;IAAC,CAAC;IAC3I,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,8BAA8B,CAAC,CAAC;IAC7H,OAAO,MAAiC,CAAC;AAC3C,CAAC;AAED,SAAgB,aAAa,CAAC,IAA6B,EAAE,KAAa;IACxE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,IAAI,KAAK,+CAA+C,CAAC,CAAC;IACzI,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAgB,cAAc,CAAC,IAA6B,EAAE,KAAa;IACzE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,IAAI,KAAK,qBAAqB,CAAC,CAAC;IACxF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,WAAW,CAAmB,IAA6B,EAAE,KAAa,EAAE,OAAqB;IAC/G,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAE,OAA6B,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,IAAI,KAAK,qBAAqB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChK,OAAO,KAAU,CAAC;AACpB,CAAC;AAED,SAAgB,YAAY,CAAmB,IAA6B,EAAE,KAAa,EAAE,OAAqB;IAChH,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACxE,OAAO,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,SAAgB,sBAAsB,CAAC,IAA6B,EAAE,KAAa,EAAE,GAAW,EAAE,GAAW;IAC3G,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,GAAG,IAAI,KAAK,GAAG,GAAG;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,IAAI,KAAK,gCAAgC,GAAG,QAAQ,GAAG,GAAG,CAAC,CAAC;IAC9K,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,eAAe,CAAC,IAA6B,EAAE,KAAa;IAC1E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,IAAI,KAAK,sBAAsB,CAAC,CAAC;IAC1F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uFAAuF;AACvF,SAAgB,iBAAiB,CAAC,IAA6B,EAAE,KAAa;IAC5E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,IAAI,KAAK,8BAA8B,CAAC,CAAC;QACxH,OAAQ,KAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,IAAI,KAAK,4DAA4D,CAAC,CAAC;AAClG,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,oBAAoB,CAAC,IAA6B,EAAE,KAAa;IAC/E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QAAE,OAAO,KAAiB,CAAC;IACtG,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,IAAI,KAAK,4DAA4D,CAAC,CAAC;AAClG,CAAC;AAED,sFAAsF;AACtF,SAAgB,SAAS,CAAC,KAAa;IACrC,OAAO,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC1E,CAAC"}

package/dist/web/jobs.d.ts

@@ -0,0 +1,69 @@
+import { Provider } from './types';
+export type JobKind = 'create' | 'delete' | 'update' | 'lifecycle';
+export type JobStatus = 'queued' | 'running' | 'succeeded' | 'failed';
+export interface ProgressLine {
+    at: string;
+    message: string;
+}
+/** A job as returned by the HTTP API: never the live object, always a copy. */
+export interface JobSnapshot {
+    id: string;
+    kind: JobKind;
+    /** The environment name the job acts on (the new name for `create`). */
+    target: string;
+    provider?: Provider;
+    dryRun?: boolean;
+    status: JobStatus;
+    createdAt: string;
+    startedAt?: string;
+    finishedAt?: string;
+    progress: ProgressLine[];
+    /** True when old progress lines were dropped to bound memory. */
+    progressTruncated?: boolean;
+    result?: unknown;
+    error?: string;
+}
+export interface JobInput {
+    kind: JobKind;
+    target: string;
+    provider?: Provider;
+    dryRun?: boolean;
+}
+/**
+ * In-memory registry of long-running operations.
+ *
+ * Creating an environment downloads and assembles artifacts for minutes, so the
+ * HTTP API answers with a job id and the page polls it. Jobs are deliberately
+ * not persisted: they describe the work of this server process only, while the
+ * durable result (the environment registry and `<root>/environment.lock.json`)
+ * is written by the environment manager itself.
+ *
+ * Mutating jobs for the same environment are serialized here. `update-env`
+ * documents that it does not take the per-environment lifecycle lock, so a web
+ * update must never race a web start/stop/restart for the same environment.
+ */
+export declare class JobStore {
+    private readonly limit;
+    private readonly progressLimit;
+    private readonly jobs;
+    private readonly tails;
+    constructor(limit?: number, progressLimit?: number);
+    /**
+     * Queue `action` and return its snapshot immediately.
+     *
+     * The action receives a progress sink; its rejection is recorded on the job
+     * instead of propagating, because there is no request left to fail.
+     */
+    run<T>(input: JobInput, action: (progress: (line: string) => void) => Promise<T>): JobSnapshot;
+    get(id: string): JobSnapshot | undefined;
+    /** Newest first. */
+    list(): JobSnapshot[];
+    /** Resolves once no job is queued or running; used for a graceful shutdown. */
+    whenIdle(): Promise<void>;
+    busy(): boolean;
+    private append;
+    private snapshot;
+    /** Drop the oldest finished jobs first; a running job is never discarded. */
+    private prune;
+}
+//# sourceMappingURL=jobs.d.ts.map

package/dist/web/jobs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobs.d.ts","sourceRoot":"","sources":["../../src/web/jobs.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEnC,MAAM,MAAM,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,CAAC;AACnE,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEtE,MAAM,WAAW,YAAY;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAE7D,+EAA+E;AAC/E,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,OAAO,CAAC;IACd,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,iEAAiE;IACjE,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,QAAQ;IAAG,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE;AAMlG;;;;;;;;;;;;GAYG;AACH,qBAAa,QAAQ;IAGP,OAAO,CAAC,QAAQ,CAAC,KAAK;IAAO,OAAO,CAAC,QAAQ,CAAC,aAAa;IAFvE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA0B;IAC/C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAoC;gBAC7B,KAAK,SAAK,EAAmB,aAAa,SAAM;IAE7E;;;;;OAKG;IACH,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,WAAW;IAoC9F,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAKxC,oBAAoB;IACpB,IAAI,IAAI,WAAW,EAAE;IAIrB,+EAA+E;IACzE,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAI/B,IAAI,IAAI,OAAO;IAIf,OAAO,CAAC,MAAM;IAQd,OAAO,CAAC,QAAQ;IAIhB,6EAA6E;IAC7E,OAAO,CAAC,KAAK;CAOd"}

package/dist/web/jobs.js

@@ -0,0 +1,110 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JobStore = void 0;
+const crypto_1 = require("crypto");
+const message = (error) => (error instanceof Error ? error.message : String(error));
+/**
+ * In-memory registry of long-running operations.
+ *
+ * Creating an environment downloads and assembles artifacts for minutes, so the
+ * HTTP API answers with a job id and the page polls it. Jobs are deliberately
+ * not persisted: they describe the work of this server process only, while the
+ * durable result (the environment registry and `<root>/environment.lock.json`)
+ * is written by the environment manager itself.
+ *
+ * Mutating jobs for the same environment are serialized here. `update-env`
+ * documents that it does not take the per-environment lifecycle lock, so a web
+ * update must never race a web start/stop/restart for the same environment.
+ */
+class JobStore {
+    limit;
+    progressLimit;
+    jobs = new Map();
+    tails = new Map();
+    constructor(limit = 50, progressLimit = 400) {
+        this.limit = limit;
+        this.progressLimit = progressLimit;
+    }
+    /**
+     * Queue `action` and return its snapshot immediately.
+     *
+     * The action receives a progress sink; its rejection is recorded on the job
+     * instead of propagating, because there is no request left to fail.
+     */
+    run(input, action) {
+        const key = input.target.toLowerCase();
+        const job = {
+            id: (0, crypto_1.randomUUID)(),
+            kind: input.kind,
+            target: input.target,
+            ...(input.provider !== undefined ? { provider: input.provider } : {}),
+            ...(input.dryRun !== undefined ? { dryRun: input.dryRun } : {}),
+            status: 'queued',
+            createdAt: new Date().toISOString(),
+            progress: [],
+            progressTruncated: false,
+        };
+        this.jobs.set(job.id, job);
+        const previous = this.tails.get(key);
+        if (previous)
+            this.append(job, `Queued behind another operation on ${input.target}; mutations of one environment are serialized.`);
+        const started = (previous ?? Promise.resolve()).then(async () => {
+            job.status = 'running';
+            job.startedAt = new Date().toISOString();
+            try {
+                job.result = await action(line => this.append(job, line));
+                job.status = 'succeeded';
+            }
+            catch (error) {
+                job.error = message(error);
+                job.status = 'failed';
+            }
+            finally {
+                job.finishedAt = new Date().toISOString();
+                this.prune();
+            }
+        });
+        this.tails.set(key, started);
+        void started.then(() => { if (this.tails.get(key) === started)
+            this.tails.delete(key); });
+        this.prune();
+        return this.snapshot(job);
+    }
+    get(id) {
+        const job = this.jobs.get(id);
+        return job ? this.snapshot(job) : undefined;
+    }
+    /** Newest first. */
+    list() {
+        return [...this.jobs.values()].reverse().map(job => this.snapshot(job));
+    }
+    /** Resolves once no job is queued or running; used for a graceful shutdown. */
+    async whenIdle() {
+        while (this.busy())
+            await new Promise(resolve => setTimeout(resolve, 200));
+    }
+    busy() {
+        return [...this.jobs.values()].some(job => job.status === 'queued' || job.status === 'running');
+    }
+    append(job, line) {
+        if (job.progress.length >= this.progressLimit) {
+            job.progress.shift();
+            job.progressTruncated = true;
+        }
+        job.progress.push({ at: new Date().toISOString(), message: line });
+    }
+    snapshot(job) {
+        return { ...job, progress: job.progress.map(line => ({ ...line })), ...(job.progressTruncated ? { progressTruncated: true } : {}) };
+    }
+    /** Drop the oldest finished jobs first; a running job is never discarded. */
+    prune() {
+        while (this.jobs.size > this.limit) {
+            const oldest = [...this.jobs.values()].find(candidate => candidate.status === 'succeeded' || candidate.status === 'failed');
+            if (!oldest)
+                return;
+            this.jobs.delete(oldest.id);
+        }
+    }
+}
+exports.JobStore = JobStore;
+//# sourceMappingURL=jobs.js.map

package/dist/web/jobs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobs.js","sourceRoot":"","sources":["../../src/web/jobs.ts"],"names":[],"mappings":";;;AAAA,mCAAoC;AA+BpC,MAAM,OAAO,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAErG;;;;;;;;;;;;GAYG;AACH,MAAa,QAAQ;IAGU;IAA6B;IAFzC,IAAI,GAAG,IAAI,GAAG,EAAe,CAAC;IAC9B,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC1D,YAA6B,QAAQ,EAAE,EAAmB,gBAAgB,GAAG;QAAhD,UAAK,GAAL,KAAK,CAAK;QAAmB,kBAAa,GAAb,aAAa,CAAM;IAAG,CAAC;IAEjF;;;;;OAKG;IACH,GAAG,CAAI,KAAe,EAAE,MAAwD;QAC9E,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,GAAG,GAAQ;YACf,EAAE,EAAE,IAAA,mBAAU,GAAE;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,QAAQ,EAAE,EAAE;YACZ,iBAAiB,EAAE,KAAK;SACzB,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,QAAQ;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,sCAAsC,KAAK,CAAC,MAAM,gDAAgD,CAAC,CAAC;QACnI,MAAM,OAAO,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAC9D,GAAG,CAAC,MAAM,GAAG,SAAS,CAAC;YACvB,GAAG,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,GAAG,CAAC,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC1D,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC;YAC3B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,GAAG,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC3B,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC;YACxB,CAAC;oBAAS,CAAC;gBACT,GAAG,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC7B,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO;YAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1F,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9B,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9C,CAAC;IAED,oBAAoB;IACpB,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,QAAQ;QACZ,OAAO,IAAI,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAClG,CAAC;IAEO,MAAM,CAAC,GAAQ,EAAE,IAAY;QACnC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9C,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACrB,GAAG,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC/B,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IAEO,QAAQ,CAAC,GAAQ;QACvB,OAAO,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACtI,CAAC;IAED,6EAA6E;IACrE,KAAK;QACX,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,WAAW,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;YAC5H,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;CACF;AAtFD,4BAsFC"}

package/dist/web/providers.d.ts

@@ -0,0 +1,9 @@
+import { WebProviders } from './types';
+/**
+ * The web server's provider access.
+ *
+ * Credentials come from the same profile as the CLI (`afm az login` /
+ * `afm oss login`); the browser never sees or supplies them.
+ */
+export declare function storedProviders(): WebProviders;
+//# sourceMappingURL=providers.d.ts.map

package/dist/web/providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../src/web/providers.ts"],"names":[],"mappings":"AAEA,OAAO,EAAY,YAAY,EAAE,MAAM,SAAS,CAAC;AAEjD;;;;;GAKG;AACH,wBAAgB,eAAe,IAAI,YAAY,CAK9C"}

package/dist/web/providers.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.storedProviders = storedProviders;
+const stored_client_1 = require("../cli/stored-client");
+/**
+ * The web server's provider access.
+ *
+ * Credentials come from the same profile as the CLI (`afm az login` /
+ * `afm oss login`); the browser never sees or supplies them.
+ */
+function storedProviders() {
+    return {
+        available: stored_client_1.storedProviderAvailability,
+        client(provider) { return (0, stored_client_1.createStoredClient)(provider); },
+    };
+}
+//# sourceMappingURL=providers.js.map

package/dist/web/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../../src/web/providers.ts"],"names":[],"mappings":";;AAUA,0CAKC;AAfD,wDAAsF;AAItF;;;;;GAKG;AACH,SAAgB,eAAe;IAC7B,OAAO;QACL,SAAS,EAAE,0CAA0B;QACrC,MAAM,CAAC,QAAkB,IAAuB,OAAO,IAAA,kCAAkB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;KACvF,CAAC;AACJ,CAAC"}

package/dist/web/server.d.ts

@@ -0,0 +1,41 @@
+import { JobStore } from './jobs';
+import { WebManager, WebProviders, WebRegistry, WebStateInfo, WebUpdater } from './types';
+export interface WebServerOptions {
+    /** Secret required by every `/api` request. At least 16 characters. */
+    token: string;
+    /** 0 (default) lets the OS choose a free port. */
+    port?: number;
+    /** Loopback address to bind; the default is the only value the CLI exposes. */
+    host?: string;
+    assetsDirectory?: string;
+    manager?: WebManager;
+    updater?: WebUpdater;
+    registry?: WebRegistry;
+    providers?: WebProviders;
+    state?: () => WebStateInfo;
+    jobs?: JobStore;
+    maxBodyBytes?: number;
+    resolveRoot?: (name: string, requested: string | undefined, dryRun: boolean) => Promise<string>;
+}
+export interface RunningWebServer {
+    host: string;
+    port: number;
+    /** Page URL without the token. */
+    url: string;
+    /** Page URL with the token in the fragment, so it never reaches the server log. */
+    tokenUrl: string;
+    jobs: JobStore;
+    close(): Promise<void>;
+}
+/** The token lives in the URL fragment: fragments are not sent in requests. */
+export declare function tokenizedUrl(url: string, token: string): string;
+/**
+ * Start the local web interface.
+ *
+ * It binds loopback only, requires the token for every API call, rejects any
+ * request whose Host header is not one of its own loopback names (DNS
+ * rebinding) and never sends a CORS header, so a page on another origin can
+ * neither read a reply nor send the custom token header.
+ */
+export declare function startWebServer(options: WebServerOptions): Promise<RunningWebServer>;
+//# sourceMappingURL=server.d.ts.map

package/dist/web/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/web/server.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAElC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1F,MAAM,WAAW,gBAAgB;IAC/B,uEAAuE;IACvE,KAAK,EAAE,MAAM,CAAC;IACd,kDAAkD;IAClD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+EAA+E;IAC/E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,YAAY,CAAC;IAC3B,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACjG;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,mFAAmF;IACnF,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAID,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAuDzF"}