@harperfast/harper 5.2.0-alpha.4 → 5.2.0-alpha.6

package/dist/components/Application.d.ts

@@ -1,4 +1,6 @@
 import { type Logger } from '../utility/logging/logger.ts';
+import type { CredentialReference, ResolvedCredential, ResolvedRegistryCredential } from './secretOperations.ts';
+import { type ResolvedGitCredential } from './gitCredentialServer.ts';
 import { Readable } from 'node:stream';
 interface ApplicationConfig {
     package: string;
@@ -7,11 +9,7 @@ interface ApplicationConfig {
         timeout?: number;
         allowInstallScripts?: boolean;
     };
-    registryAuth?: {
-        registry: string;
-        secret: string;
-        scope?: string;
-    }[];
+    credentials?: CredentialReference[];
     [key: string]: unknown;
 }
 export declare class InvalidPackageIdentifierError extends TypeError {
@@ -26,10 +24,10 @@ export declare class InvalidInstallCommandError extends TypeError {
 export declare class InvalidInstallTimeoutError extends TypeError {
     constructor(applicationName: string, timeout: unknown);
 }
-export declare class InvalidRegistryAuthPropertyError extends TypeError {
-    constructor(applicationName: string, registryAuth: unknown);
+export declare class InvalidCredentialsPropertyError extends TypeError {
+    constructor(applicationName: string, credentials: unknown);
 }
-export declare class InvalidRegistryAuthEntryError extends TypeError {
+export declare class InvalidCredentialEntryError extends TypeError {
     constructor(applicationName: string);
 }
 export declare function assertApplicationConfig(applicationName: string, applicationConfig: Record<'package', unknown> & Record<string, unknown>): asserts applicationConfig is ApplicationConfig;
@@ -40,7 +38,20 @@ export declare function assertApplicationConfig(applicationName: string, applica
  * an unverified host key.
  */
 export declare function isSSHAuthFailure(stderr: string): boolean;
+interface GitReference {
+    cloneUrl: string;
+    committish?: string;
+}
+/**
+ * Parses a `git+ssh://…`/`git+https://…`/`git+http://…`/`git+file://…`/`git://…`, or hosted-git
+ * shorthand (`github:owner/repo`, `gitlab:owner/repo`, `bitbucket:owner/repo`, `gist:id`) package
+ * identifier into a plain clone URL and optional committish, without depending on npm's own git-spec
+ * parser (npm-package-arg/hosted-git-info aren't dependencies of this repo). Returns null for any
+ * other form.
+ */
+export declare function parseGitReference(packageIdentifier: string): GitReference | null;
 export declare const ASIDE_STAGING_DIR = ".deploy-aside";
+export declare const GIT_CREDENTIAL_HELPER_PATH: string;
 /**
  * Extract an application given payload (content of the application) or package (npm-compatible identifier to the application).
  *
@@ -80,7 +91,7 @@ interface ApplicationOptions {
         allowInstallScripts?: boolean;
     };
     onInstallLine?: OnInstallLine;
-    registryAuth?: RegistryAuthEntry[];
+    credentials?: ResolvedCredential[];
 }
 export declare class Application {
     #private;
@@ -96,10 +107,14 @@ export declare class Application {
     dirPath: string;
     logger: Logger;
     packageManagerPrefix: string;
-    registryAuth?: RegistryAuthEntry[];
+    registryCredentials?: ResolvedRegistryCredential[];
+    gitCredentials?: ResolvedGitCredential[];
     npmUserconfigPath?: string;
-    constructor({ name, payload, packageIdentifier, install, onInstallLine, registryAuth }: ApplicationOptions);
+    constructor({ name, payload, packageIdentifier, install, onInstallLine, credentials }: ApplicationOptions);
     writeTransientNpmrc(): Promise<void>;
+    get gitCredentialEnv(): Record<string, string> | undefined;
+    startGitCredentialSession(): Promise<void>;
+    cleanupGitCredentialSession(): Promise<void>;
     cleanupTransientNpmrc(): Promise<void>;
 }
 /**
@@ -131,13 +146,53 @@ export declare function prepareApplication(application: Application): Promise<vo
  * operations may conflict with each other (such as writing to the same directory).
  */
 export declare function installApplications(): Promise<void>;
-export interface RegistryAuthEntry {
-    registry: string;
-    token: string;
-    scope?: string;
-}
-export declare function buildNpmrcContent(registryAuth: RegistryAuthEntry[]): string;
-export declare function nonInteractiveSpawn(applicationName: string, command: string, args: string[], cwd: string, timeoutMs?: number, onLine?: (stream: 'stdout' | 'stderr', line: string) => void, npmUserconfigPath?: string): Promise<{
+/**
+ * Rewrite every occurrence of `sshDir` in an ssh `config` file's contents to `tempDir`, matching
+ * either slash direction per path segment (and case-insensitively on `win32`) rather than relying
+ * on the two strings being byte-identical.
+ *
+ * A plain string substitution (`sshConfig.split(sshDir).join(tempDir)`) doesn't hold
+ * cross-platform: ssh config files are frequently forward-slash even on Windows, while `sshDir`
+ * (built via `path.join`) is backslash there, so the split would silently never match; Windows
+ * paths are also case-insensitive. `sshDir` is split into segments on either separator *before*
+ * escaping, so escaping a regex-special character within a segment (e.g. a literal paren in a
+ * directory name) can't interact with the separator substitution. A trailing lookahead keeps
+ * `sshDir` from partial-matching a sibling directory whose name happens to start with it (e.g.
+ * `.../ssh` vs `.../sshhh`).
+ *
+ * Exported only so unit tests can pin the Windows-path behavior (mixed slash direction, case
+ * insensitivity) directly via the `platform` override, without needing to run on Windows.
+ */
+export declare function rewriteSshConfigPaths(sshConfig: string, sshDir: string, tempDir: string, platform?: string): string;
+/**
+ * Materialize the SSH deploy keys for the lifetime of a single git-over-SSH spawn.
+ *
+ * Keys are sealed at rest as `enc:v1:` envelopes (Harper Pro's `add_ssh_key`), but ssh needs a key
+ * *file*, so each key is decrypted into a fresh 0700 temp dir as a 0600 file and the ssh config is
+ * copied with its `IdentityFile` paths repointed at the transient copies. The caller removes the
+ * dir as soon as the spawn settles, so the plaintext never outlives the git invocation. Legacy
+ * plaintext keys (written before sealing, or on a node with no custody) are copied through
+ * unchanged, so this is a no-op for them beyond the temp dir.
+ *
+ * A key that cannot be decrypted — no custody registered on this node, an envelope sealed under a
+ * different cluster key, or a tampered envelope — is logged and skipped rather than failing the
+ * spawn: a deploy that doesn't need that key is unaffected, and one that does fails with the usual
+ * SSH auth error (see `isSSHAuthFailure`). No log or error message here carries key material or
+ * the envelope.
+ *
+ * @returns The `GIT_SSH_COMMAND` to use plus its cleanup, or undefined when no keys are configured.
+ */
+export declare function materializeGitSSH(): Promise<{
+    command: string;
+    cleanup: () => Promise<void>;
+} | undefined>;
+export declare function buildNpmrcContent(registryCredentials: ResolvedRegistryCredential[]): string;
+/**
+ * Run a command with the deploy's SSH key material materialized only for the duration of the
+ * spawn. The keys are decrypted to a transient 0700 dir (see `materializeGitSSH`) and removed as
+ * soon as the process settles — on success, failure, and timeout alike.
+ */
+export declare function nonInteractiveSpawn(applicationName: string, command: string, args: string[], cwd: string, timeoutMs?: number, onLine?: (stream: 'stdout' | 'stderr', line: string) => void, npmUserconfigPath?: string, gitCredentialEnv?: Record<string, string>): Promise<{
     stdout: string;
     stderr: string;
     code: number;