@hs-x/cli 0.1.0

package/dist/state-store.js

@@ -0,0 +1,89 @@
+import { Schema, schemas } from '@hs-x/types';
+export function createStateStore(deps) {
+    const ownerId = deps.pointer.ownerId;
+    const kv = deps.kv;
+    const readUnknownJson = async (key) => {
+        const raw = await kv.get(key);
+        if (raw === undefined)
+            return undefined;
+        return JSON.parse(raw);
+    };
+    const writeJson = async (key, value) => {
+        await kv.put(key, JSON.stringify(value));
+    };
+    return {
+        async getOwnerMeta() {
+            const value = await readUnknownJson(ownerMetaKey(ownerId));
+            return value === undefined
+                ? undefined
+                : Schema.decodeUnknownSync(schemas.LocalOwnerMeta)(value);
+        },
+        putOwnerMeta(meta) {
+            return writeJson(ownerMetaKey(ownerId), meta);
+        },
+        recordDeploy(entry) {
+            return writeJson(deployKey(ownerId, entry.projectId, entry.deployId), entry);
+        },
+        async getDeploy(input) {
+            const value = await readUnknownJson(deployKey(ownerId, input.projectId, input.deployId));
+            return value === undefined
+                ? undefined
+                : Schema.decodeUnknownSync(schemas.LocalDeployEntry)(value);
+        },
+        async listDeploys(input) {
+            const prefix = `owners/${ownerId}/projects/${input.projectId}/deploys/`;
+            const keys = await kv.list(prefix);
+            const entries = await Promise.all(keys.map(async (key) => {
+                const value = await readUnknownJson(key);
+                return value === undefined
+                    ? undefined
+                    : Schema.decodeUnknownSync(schemas.LocalDeployEntry)(value);
+            }));
+            return entries
+                .filter((entry) => entry !== undefined)
+                .sort((a, b) => (a.createdAt < b.createdAt ? 1 : -1));
+        },
+        async getActive(input) {
+            const value = await readUnknownJson(activeDeployKey(ownerId, input.projectId, input.environment));
+            return value === undefined
+                ? undefined
+                : Schema.decodeUnknownSync(schemas.LocalActiveDeploy)(value);
+        },
+        setActive(active) {
+            return writeJson(activeDeployKey(ownerId, active.projectId, active.environment), active);
+        },
+        async getBinding(input) {
+            const value = await readUnknownJson(bindingKey(ownerId, input.projectId, input.environment, input.hubSpotAppId));
+            return value === undefined
+                ? undefined
+                : Schema.decodeUnknownSync(schemas.LocalAppRuntimeBinding)(value);
+        },
+        putBinding(binding) {
+            return writeJson(bindingKey(ownerId, binding.projectId, binding.environment, String(binding.hubSpotAppId)), binding);
+        },
+        async listOwners() {
+            const keys = await kv.list('owners/');
+            return [...new Set(keys.map((key) => key.split('/')[1]).filter(isPresent))].sort();
+        },
+        async listProjects() {
+            const keys = await kv.list(`owners/${ownerId}/projects/`);
+            return [...new Set(keys.map((key) => key.split('/')[3]).filter(isPresent))].sort();
+        },
+    };
+}
+function isPresent(value) {
+    return value !== undefined && value.length > 0;
+}
+function ownerMetaKey(ownerId) {
+    return `owners/${ownerId}/meta`;
+}
+function activeDeployKey(ownerId, projectId, environment) {
+    return `owners/${ownerId}/projects/${projectId}/active/${environment}`;
+}
+function deployKey(ownerId, projectId, deployId) {
+    return `owners/${ownerId}/projects/${projectId}/deploys/${deployId}`;
+}
+function bindingKey(ownerId, projectId, environment, hubSpotAppId) {
+    return `owners/${ownerId}/projects/${projectId}/bindings/${environment}/${hubSpotAppId}`;
+}
+//# sourceMappingURL=state-store.js.map

package/dist/state-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-store.js","sourceRoot":"","sources":["../src/state-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAkC9C,MAAM,UAAU,gBAAgB,CAAC,IAGhC;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IACrC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;IACnB,MAAM,eAAe,GAAG,KAAK,EAAE,GAAW,EAAgC,EAAE;QAC1E,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACxC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,KAAK,EAAE,GAAW,EAAE,KAAc,EAAiB,EAAE;QACrE,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,YAAY;YAChB,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3D,OAAO,KAAK,KAAK,SAAS;gBACxB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,CAAC;QAC9D,CAAC;QACD,YAAY,CAAC,IAAI;YACf,OAAO,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;QAChD,CAAC;QACD,YAAY,CAAC,KAAK;YAChB,OAAO,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;QAC/E,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,KAAK;YACnB,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YACzF,OAAO,KAAK,KAAK,SAAS;gBACxB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,CAAC;QAChE,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,KAAK;YACrB,MAAM,MAAM,GAAG,UAAU,OAAO,aAAa,KAAK,CAAC,SAAS,WAAW,CAAC;YACxE,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBACrB,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;gBACzC,OAAO,KAAK,KAAK,SAAS;oBACxB,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,CAAC;YAChE,CAAC,CAAC,CACH,CAAC;YACF,OAAO,OAAO;iBACX,MAAM,CAAC,CAAC,KAAK,EAA6B,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;iBACjE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,KAAK;YACnB,MAAM,KAAK,GAAG,MAAM,eAAe,CACjC,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,CAC7D,CAAC;YACF,OAAO,KAAK,KAAK,SAAS;gBACxB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,CAAC;QACjE,CAAC;QACD,SAAS,CAAC,MAAM;YACd,OAAO,SAAS,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;QAC3F,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,KAAK;YACpB,MAAM,KAAK,GAAG,MAAM,eAAe,CACjC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,YAAY,CAAC,CAC5E,CAAC;YACF,OAAO,KAAK,KAAK,SAAS;gBACxB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,KAAK,CAAC,CAAC;QACtE,CAAC;QACD,UAAU,CAAC,OAAO;YAChB,OAAO,SAAS,CACd,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,EACzF,OAAO,CACR,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,UAAU;YACd,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrF,CAAC;QACD,KAAK,CAAC,YAAY;YAChB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,OAAO,YAAY,CAAC,CAAC;YAC1D,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrF,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB;IAC1C,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,UAAU,OAAO,OAAO,CAAC;AAClC,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,SAAiB,EAAE,WAAmB;IAC9E,OAAO,UAAU,OAAO,aAAa,SAAS,WAAW,WAAW,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,SAAS,CAAC,OAAe,EAAE,SAAiB,EAAE,QAAgB;IACrE,OAAO,UAAU,OAAO,aAAa,SAAS,YAAY,QAAQ,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,UAAU,CACjB,OAAe,EACf,SAAiB,EACjB,WAAmB,EACnB,YAA6B;IAE7B,OAAO,UAAU,OAAO,aAAa,SAAS,aAAa,WAAW,IAAI,YAAY,EAAE,CAAC;AAC3F,CAAC"}

package/dist/telemetry.d.ts

@@ -0,0 +1,13 @@
+export declare function emitCliTelemetry(input: {
+    readonly argv: readonly string[];
+    readonly commandArgv: readonly string[];
+    readonly command: string;
+    readonly exitCode: number;
+    readonly durationMs: number;
+}): Promise<void>;
+export declare function maybePrintTelemetryNotice(input: {
+    readonly argv: readonly string[];
+    readonly command: string;
+    readonly json: boolean;
+}): Promise<void>;
+//# sourceMappingURL=telemetry.d.ts.map

package/dist/telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AASA,wBAAsB,gBAAgB,CAAC,KAAK,EAAE;IAC5C,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,GAAG,OAAO,CAAC,IAAI,CAAC,CAkChB;AAED,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB,GAAG,OAAO,CAAC,IAAI,CAAC,CA4BhB"}

package/dist/telemetry.js

@@ -0,0 +1,129 @@
+import { mkdir, stat, writeFile } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { resolveControlPlaneUrl } from './config.js';
+import { CLI_VERSION } from './constants.js';
+import { getMachineId } from './machine-id.js';
+import { cachePath } from './paths.js';
+export async function emitCliTelemetry(input) {
+    if (!shouldSendTelemetry(input.argv))
+        return;
+    const endpoint = resolveTelemetryUrl(input.argv);
+    if (!endpoint)
+        return;
+    const subcommand = telemetrySubcommand(input.commandArgv);
+    const machineId = await getMachineId().catch(() => undefined);
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), 350);
+    try {
+        await fetch(endpoint, {
+            method: 'POST',
+            signal: controller.signal,
+            headers: { 'content-type': 'application/json', accept: 'application/json' },
+            body: JSON.stringify({
+                schema_version: 1,
+                event: 'cli.command',
+                cli_version: CLI_VERSION,
+                command: input.command,
+                ...(subcommand ? { subcommand } : {}),
+                ...(machineId ? { machine_id: machineId } : {}),
+                exit_code: input.exitCode,
+                duration_ms: input.durationMs,
+                mode: telemetryMode(input.argv),
+                os: process.platform,
+                arch: process.arch,
+                runtime: process.versions.bun ? 'bun' : 'node',
+                ci: process.env.CI === 'true' || process.env.CI === '1',
+            }),
+        });
+    }
+    catch {
+        // Telemetry is best-effort and must never affect CLI behavior.
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
+export async function maybePrintTelemetryNotice(input) {
+    if (input.json || input.argv.includes('--json-stream'))
+        return;
+    if (!shouldSendTelemetry(input.argv))
+        return;
+    if (input.command === 'help' ||
+        input.command === '--help' ||
+        input.command === '-h' ||
+        input.command === '--version' ||
+        input.command === '-v') {
+        return;
+    }
+    try {
+        const stamp = telemetryNoticeStampPath();
+        if (await pathExists(stamp))
+            return;
+        const machineId = await getMachineId().catch(() => undefined);
+        process.stderr.write(`\nhs-x sends anonymous usage telemetry (command name, exit code, duration, os/arch, machine_id).\n${machineId
+            ? `Machine id ${machineId} lets \`hs-x link\` later claim this machine's deploy history.\n`
+            : ''}Opt out with --no-telemetry, HSX_TELEMETRY_OPTOUT=1, or DO_NOT_TRACK=1.\n\n`);
+        await mkdir(dirname(stamp), { recursive: true });
+        await writeFile(stamp, `${new Date().toISOString()}\n`, 'utf8');
+    }
+    catch {
+        // Notice is best-effort; never affect CLI behavior.
+    }
+}
+function telemetryNoticeStampPath() {
+    const override = process.env.HSX_TELEMETRY_NOTICE_PATH;
+    if (override && override.length > 0)
+        return override;
+    return cachePath('telemetry-notice.stamp');
+}
+async function pathExists(path) {
+    try {
+        await stat(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function shouldSendTelemetry(argv) {
+    if (argv.includes('--no-telemetry'))
+        return false;
+    if (truthyEnv(process.env.HSX_TELEMETRY_DISABLED))
+        return false;
+    if (truthyEnv(process.env.HSX_TELEMETRY_OPTOUT))
+        return false;
+    if (truthyEnv(process.env.DO_NOT_TRACK))
+        return false;
+    if (truthyEnv(process.env.HSX_TELEMETRY_FORCE))
+        return true;
+    return !isSourceTreeCliRun();
+}
+function isSourceTreeCliRun() {
+    return process.argv.some((arg) => arg.includes('/packages/cli/src/bin/'));
+}
+function resolveTelemetryUrl(argv) {
+    const explicit = process.env.HSX_TELEMETRY_URL;
+    if (explicit && explicit.length > 0)
+        return explicit;
+    return new URL('/v1/telemetry/cli', resolveControlPlaneUrl(argv)).toString();
+}
+function telemetryMode(argv) {
+    if (argv.includes('--json'))
+        return 'json';
+    if (argv.includes('--json-stream'))
+        return 'ndjson';
+    const stderrIsTty = Boolean(process.stderr.isTTY);
+    if (!stderrIsTty || process.env.NO_COLOR === '1' || process.env.CI === 'true')
+        return 'plain';
+    return 'human';
+}
+function telemetrySubcommand(argv) {
+    const subcommand = argv[1];
+    if (!subcommand || subcommand.startsWith('-') || subcommand === 'help')
+        return undefined;
+    return subcommand;
+}
+function truthyEnv(value) {
+    return value === '1' || value === 'true' || value === 'yes';
+}
+//# sourceMappingURL=telemetry.js.map

package/dist/telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAIvC,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAMtC;IACC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO;IAC7C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,QAAQ;QAAE,OAAO;IACtB,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,MAAM,YAAY,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,QAAQ,EAAE;YACpB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE;YAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,cAAc,EAAE,CAAC;gBACjB,KAAK,EAAE,aAAa;gBACpB,WAAW,EAAE,WAAW;gBACxB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/C,SAAS,EAAE,KAAK,CAAC,QAAQ;gBACzB,WAAW,EAAE,KAAK,CAAC,UAAU;gBAC7B,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;gBAC/B,EAAE,EAAE,OAAO,CAAC,QAAQ;gBACpB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAG,OAAO,CAAC,QAA+C,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;gBACtF,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG;aACxD,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;IACjE,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAI/C;IACC,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO;IAC/D,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO;IAC7C,IACE,KAAK,CAAC,OAAO,KAAK,MAAM;QACxB,KAAK,CAAC,OAAO,KAAK,QAAQ;QAC1B,KAAK,CAAC,OAAO,KAAK,IAAI;QACtB,KAAK,CAAC,OAAO,KAAK,WAAW;QAC7B,KAAK,CAAC,OAAO,KAAK,IAAI,EACtB,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,wBAAwB,EAAE,CAAC;QACzC,IAAI,MAAM,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO;QACpC,MAAM,SAAS,GAAG,MAAM,YAAY,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qGACE,SAAS;YACP,CAAC,CAAC,cAAc,SAAS,kEAAkE;YAC3F,CAAC,CAAC,EACN,6EAA6E,CAC9E,CAAC;QACF,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,SAAS,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,oDAAoD;IACtD,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB;IAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IACvD,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACrD,OAAO,SAAS,CAAC,wBAAwB,CAAC,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAuB;IAClD,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,IAAI,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAAE,OAAO,KAAK,CAAC;IACtD,IAAI,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,OAAO,CAAC,kBAAkB,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAuB;IAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC/C,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACrD,OAAO,IAAI,GAAG,CAAC,mBAAmB,EAAE,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC/E,CAAC;AAED,SAAS,aAAa,CAAC,IAAuB;IAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,MAAM,CAAC;IAC3C,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO,QAAQ,CAAC;IACpD,MAAM,WAAW,GAAG,OAAO,CAAE,OAAO,CAAC,MAA6B,CAAC,KAAK,CAAC,CAAC;IAC1E,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC;IAC9F,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAuB;IAClD,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IACzF,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB;IAC1C,OAAO,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,KAAK,CAAC;AAC9D,CAAC"}

package/dist/tenant-state.d.ts

@@ -0,0 +1,69 @@
+import type { Schema, schemas } from '@hs-x/types';
+import { type StateStore } from './state-store.js';
+export interface TenantStateContext {
+    readonly pointer: Schema.Schema.Type<typeof schemas.CloudflarePointer>;
+    readonly stateStore: StateStore;
+}
+/**
+ * Ensure the tenant `hsx-state` KV namespace exists and return a state-store
+ * bound to this project's pointer. Provisions the namespace and writes
+ * `.hs-x/cloudflare.json` on first use. Cached per (root, cloudflareAccountId,
+ * apiToken, baseUrl) within a process.
+ *
+ * Requires CLOUDFLARE_API_TOKEN and CLOUDFLARE_ACCOUNT_ID (or the equivalent
+ * `--cloudflare-api-token` / `--cloudflare-account-id` flags) — same
+ * preconditions as a regular Cloudflare deploy.
+ */
+export declare function ensureTenantStateStore(input: {
+    readonly argv: readonly string[];
+    readonly root: string;
+}): Promise<TenantStateContext>;
+/**
+ * Preflight the credentials `ensureTenantStateStore` needs, WITHOUT provisioning
+ * anything. Call this before a Cloudflare deploy so a missing API token / account
+ * id fails fast — before any Worker is deployed — rather than after, when the
+ * Worker would already be live but the tenant-state write fails on the account
+ * id. Respects the same `.hs-x/cloudflare.json` account-id fallback as
+ * `ensureTenantStateStore`, so repeat deploys without re-exporting the account
+ * id are not falsely rejected.
+ */
+export declare function preflightTenantStateCredentials(input: {
+    readonly argv: readonly string[];
+    readonly root: string;
+}): Promise<void>;
+/**
+ * Read-only variant: returns undefined if `.hs-x/cloudflare.json` is missing,
+ * rather than provisioning a namespace. Use for commands like `rollback` that
+ * should fail clearly when there's no project state to operate on.
+ */
+export declare function loadTenantStateStore(input: {
+    readonly argv: readonly string[];
+    readonly root: string;
+}): Promise<TenantStateContext | undefined>;
+/**
+ * Idempotent rewrite of an owner prefix in tenant KV.
+ *
+ * Reads every key under `owners/{from}/`, writes the value under
+ * `owners/{to}/...`, then deletes the source. Schema values that carry a
+ * top-level `ownerId` are rewritten to the destination owner. Each step is
+ * safe to re-run:
+ *
+ *   - On retry after a crash between write and delete, both prefixes hold the
+ *     same data; we re-write (idempotent) and re-delete.
+ *   - If `to` already has a value at a given key (e.g. a partial prior run),
+ *     the new write wins and the `from` source is still removed.
+ *   - If `from` has no keys (e.g. the rewrite was already completed), this
+ *     returns an empty result without error — calling it twice is a no-op.
+ *
+ * Returns the list of rewritten (oldKey → newKey) pairs so the caller can
+ * report or notify control-plane.
+ */
+export declare function rewriteTenantOwnerPrefix(input: {
+    readonly kv: import('./cloudflare-kv.js').CloudflareKvClient;
+    readonly from: string;
+    readonly to: string;
+}): Promise<readonly {
+    readonly fromKey: string;
+    readonly toKey: string;
+}[]>;
+//# sourceMappingURL=tenant-state.d.ts.map

package/dist/tenant-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-state.d.ts","sourceRoot":"","sources":["../src/tenant-state.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAGnD,OAAO,EAAE,KAAK,UAAU,EAAoB,MAAM,kBAAkB,CAAC;AAErE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACvE,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC;AAID;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAAC,KAAK,EAAE;IAClD,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAgD9B;AAED;;;;;;;;GAQG;AACH,wBAAsB,+BAA+B,CAAC,KAAK,EAAE;IAC3D,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,IAAI,CAAC,CAUhB;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAsB1C;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IACpD,QAAQ,CAAC,EAAE,EAAE,OAAO,oBAAoB,EAAE,kBAAkB,CAAC;IAC7D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,SAAS;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAAE,CAAC,CAoB3E"}

package/dist/tenant-state.js

@@ -0,0 +1,161 @@
+import { createCloudflareKvClient, resolveCloudflareCredentials } from './cloudflare-kv.js';
+import { ensureCloudflarePointer, loadCloudflarePointer } from './cloudflare-pointer.js';
+import { createStateStore } from './state-store.js';
+const tenantStateStoreCache = new Map();
+/**
+ * Ensure the tenant `hsx-state` KV namespace exists and return a state-store
+ * bound to this project's pointer. Provisions the namespace and writes
+ * `.hs-x/cloudflare.json` on first use. Cached per (root, cloudflareAccountId,
+ * apiToken, baseUrl) within a process.
+ *
+ * Requires CLOUDFLARE_API_TOKEN and CLOUDFLARE_ACCOUNT_ID (or the equivalent
+ * `--cloudflare-api-token` / `--cloudflare-account-id` flags) — same
+ * preconditions as a regular Cloudflare deploy.
+ */
+export async function ensureTenantStateStore(input) {
+    const creds = resolveCloudflareCredentials(input.argv);
+    const { apiToken } = creds;
+    // Fall back to the account id recorded in .hs-x/cloudflare.json so repeat
+    // deploys don't need CLOUDFLARE_ACCOUNT_ID re-exported every time.
+    const cloudflareAccountId = creds.accountId ?? (await loadCloudflarePointer(input.root))?.cloudflareAccountId;
+    if (!apiToken || !cloudflareAccountId) {
+        throw new Error('Tenant state requires a Cloudflare API token and account id. Set CLOUDFLARE_API_TOKEN and CLOUDFLARE_ACCOUNT_ID, or pass --cloudflare-api-token / --cloudflare-account-id.');
+    }
+    const baseUrl = process.env.HSX_CLOUDFLARE_API_BASE_URL;
+    const cacheKey = JSON.stringify({
+        root: input.root,
+        cloudflareAccountId,
+        apiToken,
+        baseUrl,
+    });
+    const cached = tenantStateStoreCache.get(cacheKey);
+    if (cached)
+        return cached;
+    const bootstrapKv = createCloudflareKvClient({
+        accountId: cloudflareAccountId,
+        apiToken,
+        ...(baseUrl ? { baseUrl } : {}),
+    });
+    const namespace = await bootstrapKv.ensureNamespace('hsx-state');
+    const pointer = await ensureCloudflarePointer({
+        root: input.root,
+        cloudflareAccountId,
+        stateKvNamespaceId: namespace.id,
+        stateKvNamespaceName: namespace.title,
+    });
+    const context = {
+        pointer,
+        stateStore: createStateStore({
+            pointer,
+            kv: createCloudflareKvClient({
+                accountId: pointer.cloudflareAccountId,
+                apiToken,
+                namespaceId: pointer.stateKvNamespaceId,
+                ...(baseUrl ? { baseUrl } : {}),
+            }),
+        }),
+    };
+    tenantStateStoreCache.set(cacheKey, context);
+    return context;
+}
+/**
+ * Preflight the credentials `ensureTenantStateStore` needs, WITHOUT provisioning
+ * anything. Call this before a Cloudflare deploy so a missing API token / account
+ * id fails fast — before any Worker is deployed — rather than after, when the
+ * Worker would already be live but the tenant-state write fails on the account
+ * id. Respects the same `.hs-x/cloudflare.json` account-id fallback as
+ * `ensureTenantStateStore`, so repeat deploys without re-exporting the account
+ * id are not falsely rejected.
+ */
+export async function preflightTenantStateCredentials(input) {
+    const { apiToken, accountId } = resolveCloudflareCredentials(input.argv);
+    const cloudflareAccountId = accountId ?? (await loadCloudflarePointer(input.root))?.cloudflareAccountId;
+    if (!apiToken || !cloudflareAccountId) {
+        throw new Error('A Cloudflare deploy needs an API token and account id. Set CLOUDFLARE_API_TOKEN and ' +
+            'CLOUDFLARE_ACCOUNT_ID, or pass --cloudflare-api-token / --cloudflare-account-id, before deploying.');
+    }
+}
+/**
+ * Read-only variant: returns undefined if `.hs-x/cloudflare.json` is missing,
+ * rather than provisioning a namespace. Use for commands like `rollback` that
+ * should fail clearly when there's no project state to operate on.
+ */
+export async function loadTenantStateStore(input) {
+    const pointer = await loadCloudflarePointer(input.root);
+    if (!pointer)
+        return undefined;
+    const { apiToken } = resolveCloudflareCredentials(input.argv);
+    if (!apiToken) {
+        throw new Error('Reading tenant state requires CLOUDFLARE_API_TOKEN (or --cloudflare-api-token).');
+    }
+    const baseUrl = process.env.HSX_CLOUDFLARE_API_BASE_URL;
+    return {
+        pointer,
+        stateStore: createStateStore({
+            pointer,
+            kv: createCloudflareKvClient({
+                accountId: pointer.cloudflareAccountId,
+                apiToken,
+                namespaceId: pointer.stateKvNamespaceId,
+                ...(baseUrl ? { baseUrl } : {}),
+            }),
+        }),
+    };
+}
+/**
+ * Idempotent rewrite of an owner prefix in tenant KV.
+ *
+ * Reads every key under `owners/{from}/`, writes the value under
+ * `owners/{to}/...`, then deletes the source. Schema values that carry a
+ * top-level `ownerId` are rewritten to the destination owner. Each step is
+ * safe to re-run:
+ *
+ *   - On retry after a crash between write and delete, both prefixes hold the
+ *     same data; we re-write (idempotent) and re-delete.
+ *   - If `to` already has a value at a given key (e.g. a partial prior run),
+ *     the new write wins and the `from` source is still removed.
+ *   - If `from` has no keys (e.g. the rewrite was already completed), this
+ *     returns an empty result without error — calling it twice is a no-op.
+ *
+ * Returns the list of rewritten (oldKey → newKey) pairs so the caller can
+ * report or notify control-plane.
+ */
+export async function rewriteTenantOwnerPrefix(input) {
+    const fromPrefix = `owners/${input.from}/`;
+    const toPrefix = `owners/${input.to}/`;
+    const fromKeys = await input.kv.list(fromPrefix);
+    if (fromKeys.length === 0)
+        return [];
+    const rewritten = [];
+    for (const fromKey of fromKeys) {
+        const value = await input.kv.get(fromKey);
+        if (value === undefined)
+            continue;
+        const toKey = `${toPrefix}${fromKey.slice(fromPrefix.length)}`;
+        await input.kv.put(toKey, rewriteOwnerIdValue(value, input.from, input.to));
+        rewritten.push({ fromKey, toKey });
+    }
+    // Delete sources only after every write succeeded, so a mid-loop crash
+    // leaves both prefixes populated rather than losing data.
+    for (const { fromKey } of rewritten) {
+        await input.kv.delete(fromKey);
+    }
+    return rewritten;
+}
+function rewriteOwnerIdValue(value, from, to) {
+    try {
+        const parsed = JSON.parse(value);
+        if (typeof parsed === 'object' &&
+            parsed !== null &&
+            !Array.isArray(parsed) &&
+            parsed.ownerId === from) {
+            return JSON.stringify({ ...parsed, ownerId: to });
+        }
+    }
+    catch {
+        // Non-JSON values should not exist for tenant state, but keep the rewrite
+        // byte-preserving rather than failing an otherwise recoverable link.
+    }
+    return value;
+}
+//# sourceMappingURL=tenant-state.js.map

package/dist/tenant-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-state.js","sourceRoot":"","sources":["../src/tenant-state.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAC5F,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACzF,OAAO,EAAmB,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAOrE,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAA8B,CAAC;AAEpE;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAG5C;IACC,MAAM,KAAK,GAAG,4BAA4B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC3B,0EAA0E;IAC1E,mEAAmE;IACnE,MAAM,mBAAmB,GACvB,KAAK,CAAC,SAAS,IAAI,CAAC,MAAM,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,mBAAmB,CAAC;IACpF,IAAI,CAAC,QAAQ,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,4KAA4K,CAC7K,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;QAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,mBAAmB;QACnB,QAAQ;QACR,OAAO;KACR,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,WAAW,GAAG,wBAAwB,CAAC;QAC3C,SAAS,EAAE,mBAAmB;QAC9B,QAAQ;QACR,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC;QAC5C,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,mBAAmB;QACnB,kBAAkB,EAAE,SAAS,CAAC,EAAE;QAChC,oBAAoB,EAAE,SAAS,CAAC,KAAK;KACtC,CAAC,CAAC;IACH,MAAM,OAAO,GAAuB;QAClC,OAAO;QACP,UAAU,EAAE,gBAAgB,CAAC;YAC3B,OAAO;YACP,EAAE,EAAE,wBAAwB,CAAC;gBAC3B,SAAS,EAAE,OAAO,CAAC,mBAAmB;gBACtC,QAAQ;gBACR,WAAW,EAAE,OAAO,CAAC,kBAAkB;gBACvC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChC,CAAC;SACH,CAAC;KACH,CAAC;IACF,qBAAqB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAGrD;IACC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,4BAA4B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzE,MAAM,mBAAmB,GACvB,SAAS,IAAI,CAAC,MAAM,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,mBAAmB,CAAC;IAC9E,IAAI,CAAC,QAAQ,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,sFAAsF;YACpF,oGAAoG,CACvG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAG1C;IACC,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,EAAE,QAAQ,EAAE,GAAG,4BAA4B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;IACxD,OAAO;QACL,OAAO;QACP,UAAU,EAAE,gBAAgB,CAAC;YAC3B,OAAO;YACP,EAAE,EAAE,wBAAwB,CAAC;gBAC3B,SAAS,EAAE,OAAO,CAAC,mBAAmB;gBACtC,QAAQ;gBACR,WAAW,EAAE,OAAO,CAAC,kBAAkB;gBACvC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChC,CAAC;SACH,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAI9C;IACC,MAAM,UAAU,GAAG,UAAU,KAAK,CAAC,IAAI,GAAG,CAAC;IAC3C,MAAM,QAAQ,GAAG,UAAU,KAAK,CAAC,EAAE,GAAG,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACjD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAErC,MAAM,SAAS,GAAyC,EAAE,CAAC;IAC3D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,KAAK,GAAG,GAAG,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/D,MAAM,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5E,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,uEAAuE;IACvE,0DAA0D;IAC1D,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,SAAS,EAAE,CAAC;QACpC,MAAM,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa,EAAE,IAAY,EAAE,EAAU;IAClE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAY,CAAC;QAC5C,IACE,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,KAAK,IAAI;YACf,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACrB,MAAgC,CAAC,OAAO,KAAK,IAAI,EAClD,CAAC;YACD,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,qEAAqE;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/package.json

@@ -0,0 +1,38 @@
+{
+  "name": "@hs-x/cli",
+  "version": "0.1.0",
+  "description": "HS-X CLI — init, validate, connect, dev, deploy, promote, rollback, doctor, sync. Installs the `hs-x` command.",
+  "type": "module",
+  "bin": {
+    "hs-x": "./dist/bin/hs-x.js"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc -b",
+    "clean": "tsc -b --clean"
+  },
+  "dependencies": {
+    "@effect/cli": "0.75.1",
+    "@effect/platform": "0.96.1",
+    "@effect/platform-bun": "0.89.0",
+    "@hs-x/codegen": "0.1.0",
+    "@hs-x/hubspot": "0.1.0",
+    "@hs-x/hubspot-cli": "0.1.0",
+    "@hs-x/types": "0.1.0",
+    "@hs-x/validator": "0.1.0",
+    "effect": "^3.10.19"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "@hs-x/fixtures": "0.1.0",
+    "@types/node": "^25.8.0",
+    "@hs-x/control-plane": "0.1.0"
+  }
+}