@hs-x/cli 0.2.6 → 0.3.0

package/dist/link-preflight.js

@@ -0,0 +1,231 @@
+// ADR-022 T02 — no-mutation link continuity preflight.
+//
+// Before `hs-x link` rewrites ANYTHING for an already-installed project, this
+// preflight proves continuity is possible — with zero mutations. It reads:
+//
+//   1. the local v2 runtime binding record(s) under the claimed owner
+//      (every project / environment / HubSpot app),
+//   2. owner meta (corrupt state fails, absence is recorded, not fatal),
+//   3. the INSTALL_KV namespace for each binding (read-only Cloudflare
+//      metadata lookup: exists + id/name match),
+//   4. token-key custody resolvability + canary decryptability for each
+//      binding (via the T01 primitives — read-only, typed errors),
+//   5. the Worker names the active deploy records (what link must preserve).
+//
+// Success returns a deterministic, REDACTED plan: Worker names, KV namespace
+// ids, secret NAMES — never key bytes, never the sealed canary. Failure of any
+// check throws a typed `CliError` before the caller has mutated anything: no
+// control-plane registration, no Cloudflare writes, no store writes, no
+// binding rewrites. The journaled migration that CONSUMES this plan is T03.
+import { Schema, schemas } from '@hs-x/types';
+import { cliError } from './cli-error.js';
+import { createCloudflareKvClient } from './cloudflare-kv.js';
+import { resolveEscrowedTokenKey } from './token-key-custody.js';
+const LINK_PREFLIGHT_CODES = [
+    // INSTALL_KV namespace missing, or its id/name no longer match the binding.
+    'HSX_E_LINK_PREFLIGHT_NAMESPACE',
+    // Owner meta / binding / deploy records exist but do not parse or contradict
+    // their own storage key.
+    'HSX_E_LINK_PREFLIGHT_STATE_CORRUPT',
+    // Two bindings claim the same INSTALL_KV namespace or the same custody
+    // entry — the continuity plan cannot uniquely attribute the resource.
+    'HSX_E_LINK_PREFLIGHT_AMBIGUOUS',
+    // Continuity cannot be PROVEN (e.g. `worker-secret-only` custody) — the
+    // preflight fails closed rather than letting link proceed unproven.
+    'HSX_E_LINK_PREFLIGHT_UNPROVEN',
+];
+function preflightError(code, detail) {
+    // The bespoke link JSON renders only code+message, so the zero-mutation
+    // guarantee rides in the message text where every output mode shows it.
+    return cliError(code, `${detail} Link made no changes.`);
+}
+/**
+ * Read-only Cloudflare KV namespace metadata lookup:
+ * `GET /client/v4/accounts/{account}/storage/kv/namespaces/{id}`.
+ * `undefined` = the namespace does not exist. Transport / auth failures throw
+ * `HSX_E_API_NETWORK` (they are not evidence of a missing namespace).
+ */
+export async function fetchCloudflareKvNamespace(input) {
+    const fetchImpl = input.fetchImpl ?? fetch;
+    const response = await fetchImpl(new URL(`/client/v4/accounts/${encodeURIComponent(input.accountId)}/storage/kv/namespaces/${encodeURIComponent(input.namespaceId)}`, input.baseUrl ?? 'https://api.cloudflare.com'), { headers: { authorization: `Bearer ${input.apiToken}` } });
+    if (response.status === 404)
+        return undefined;
+    if (!response.ok) {
+        const detail = await response.text().catch(() => '');
+        throw cliError('HSX_E_API_NETWORK', `Cloudflare KV namespace lookup failed (${response.status})${detail ? `: ${detail.slice(0, 160)}` : ''}`);
+    }
+    const body = (await response.json().catch(() => undefined));
+    if (!body?.result?.id)
+        return undefined;
+    return { id: body.result.id, title: body.result.title ?? '' };
+}
+const BINDING_KEY_RE = /^owners\/([^/]+)\/projects\/([^/]+)\/bindings\/([^/]+)\/([^/]+)$/;
+/**
+ * Run the ADR-022 continuity preflight for one owner prefix. Read-only by
+ * construction: the KV surface exposes only get/list, the namespace lookup is
+ * a metadata GET, and custody resolution is the T01 read-only primitive.
+ * Throws typed `CliError`s (the link-preflight codes above, or the T01
+ * token-key-custody codes); returns the redacted plan on success.
+ */
+export async function runLinkPreflight(input) {
+    const priorOwnerId = input.priorOwnerId;
+    const kv = input.kv ?? makeReadOnlyKv(input);
+    const getNamespace = input.getNamespace ??
+        ((namespaceId) => fetchCloudflareKvNamespace({
+            accountId: input.pointer.cloudflareAccountId,
+            apiToken: requireApiToken(input.apiToken),
+            namespaceId,
+            ...(input.baseUrl ? { baseUrl: input.baseUrl } : {}),
+        }));
+    // ── 1. Owner meta: absence is recorded; corruption fails. ────────────────
+    const ownerMetaKey = `owners/${priorOwnerId}/meta`;
+    const rawOwnerMeta = await kv.get(ownerMetaKey);
+    let ownerMetaPresent = false;
+    if (rawOwnerMeta !== undefined) {
+        const meta = decodeOr(schemas.LocalOwnerMeta, rawOwnerMeta, ownerMetaKey);
+        if (meta.ownerId !== priorOwnerId) {
+            throw preflightError('HSX_E_LINK_PREFLIGHT_STATE_CORRUPT', `Owner meta at ${ownerMetaKey} names ownerId ${meta.ownerId}, not ${priorOwnerId}.`);
+        }
+        ownerMetaPresent = true;
+    }
+    // ── 2. Enumerate + decode every v2 binding record under the owner. ───────
+    const projectKeys = await kv.list(`owners/${priorOwnerId}/projects/`);
+    const bindingKeys = projectKeys.filter((key) => BINDING_KEY_RE.test(key)).sort();
+    const bindings = [];
+    for (const key of bindingKeys) {
+        const raw = await kv.get(key);
+        if (raw === undefined) {
+            throw preflightError('HSX_E_LINK_PREFLIGHT_STATE_CORRUPT', `Binding key ${key} is listed but has no readable value.`);
+        }
+        const record = decodeOr(schemas.LocalAppRuntimeBinding, raw, key);
+        const match = BINDING_KEY_RE.exec(key);
+        const [, keyOwner, keyProject, keyEnvironment, keyAppId] = match ?? [];
+        if (record.ownerId !== keyOwner ||
+            record.projectId !== keyProject ||
+            record.environment !== keyEnvironment ||
+            String(record.hubSpotAppId) !== keyAppId) {
+            throw preflightError('HSX_E_LINK_PREFLIGHT_STATE_CORRUPT', `Binding at ${key} contradicts its storage key (record identity: ${record.ownerId}/${record.projectId}/${record.environment}/${record.hubSpotAppId}).`);
+        }
+        bindings.push({ key, record });
+    }
+    // ── 3. Ambiguity: a namespace or custody entry claimed twice cannot be ───
+    //      uniquely attributed by the migration plan.
+    failOnDuplicate(bindings.map(({ key, record }) => ({ key, value: record.installKvNamespaceId })), 'INSTALL_KV namespace');
+    failOnDuplicate(bindings.flatMap(({ key, record }) => record.tokenKeyCustody.kind === 'escrowed'
+        ? [{ key, value: record.tokenKeyCustody.custodyId }]
+        : []), 'token-key custody entry');
+    // ── 4 + 5. Per binding: INSTALL_KV namespace + custody canary proof. ─────
+    const planBindings = [];
+    for (const { key, record } of bindings) {
+        const namespace = await getNamespace(record.installKvNamespaceId);
+        if (!namespace) {
+            throw preflightError('HSX_E_LINK_PREFLIGHT_NAMESPACE', `INSTALL_KV namespace ${record.installKvNamespaceId} (${record.installKvNamespaceName}) referenced by ${key} does not exist on Cloudflare account ${input.pointer.cloudflareAccountId}.`);
+        }
+        if (namespace.id !== record.installKvNamespaceId) {
+            throw preflightError('HSX_E_LINK_PREFLIGHT_NAMESPACE', `INSTALL_KV namespace lookup for ${record.installKvNamespaceId} returned a different id (${namespace.id}).`);
+        }
+        if (namespace.title !== record.installKvNamespaceName) {
+            throw preflightError('HSX_E_LINK_PREFLIGHT_NAMESPACE', `INSTALL_KV namespace ${record.installKvNamespaceId} is named "${namespace.title}" on Cloudflare but the binding at ${key} records "${record.installKvNamespaceName}".`);
+        }
+        if (record.tokenKeyCustody.kind !== 'escrowed') {
+            throw preflightError('HSX_E_LINK_PREFLIGHT_UNPROVEN', `The binding at ${key} records token-key custody "${record.tokenKeyCustody.kind}": the HSX_TOKEN_KEY exists only as the deployed Worker's write-only secret, so continuity cannot be proven from this machine.`);
+        }
+        // T01 read-only proof: retrieve the escrowed key and open the sealed
+        // canary. The key bytes are discarded immediately — the plan carries only
+        // the custody REFERENCE and the fact the proof succeeded.
+        await resolveEscrowedTokenKey({
+            custody: record.tokenKeyCustody,
+            ...(input.custodyAdapter ? { adapter: input.custodyAdapter } : {}),
+        });
+        planBindings.push({
+            projectId: record.projectId,
+            environment: record.environment,
+            hubSpotAppId: record.hubSpotAppId,
+            workerNames: await readActiveWorkerNames(kv, priorOwnerId, record),
+            installKvNamespaceId: record.installKvNamespaceId,
+            installKvNamespaceName: record.installKvNamespaceName,
+            tokenKeySecretName: record.tokenKeySecretName,
+            tokenKeyCustody: {
+                kind: 'escrowed',
+                mechanism: record.tokenKeyCustody.mechanism,
+                custodyId: record.tokenKeyCustody.custodyId,
+                canaryProven: true,
+            },
+        });
+    }
+    return {
+        plan: 'link-preflight',
+        schemaVersion: 1,
+        priorOwnerId,
+        ...(input.newOwnerId ? { newOwnerId: input.newOwnerId } : {}),
+        cloudflareAccountId: input.pointer.cloudflareAccountId,
+        stateKvNamespaceId: input.pointer.stateKvNamespaceId,
+        ownerMetaPresent,
+        bindings: planBindings,
+        checks: [
+            `owner-meta:${ownerMetaPresent ? 'present' : 'absent'}`,
+            `bindings:${planBindings.length}`,
+            'install-kv-namespaces:verified',
+            'token-key-custody:proven',
+            'worker-names:resolved',
+        ],
+    };
+}
+function requireApiToken(apiToken) {
+    if (!apiToken) {
+        throw cliError('HSX_E_INTERNAL', 'Link preflight needs a Cloudflare API token for read-only namespace lookups.');
+    }
+    return apiToken;
+}
+function makeReadOnlyKv(input) {
+    const client = createCloudflareKvClient({
+        accountId: input.pointer.cloudflareAccountId,
+        apiToken: requireApiToken(input.apiToken),
+        namespaceId: input.pointer.stateKvNamespaceId,
+        ...(input.baseUrl ? { baseUrl: input.baseUrl } : {}),
+    });
+    // Expose ONLY the read surface — the preflight cannot write by construction.
+    return {
+        get: (key) => client.get(key),
+        list: (prefix) => client.list(prefix),
+    };
+}
+function decodeOr(schema, raw, key) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        throw preflightError('HSX_E_LINK_PREFLIGHT_STATE_CORRUPT', `The record at ${key} is not valid JSON.`);
+    }
+    try {
+        return Schema.decodeUnknownSync(schema)(parsed);
+    }
+    catch (cause) {
+        throw preflightError('HSX_E_LINK_PREFLIGHT_STATE_CORRUPT', `The record at ${key} does not match its schema: ${cause instanceof Error ? cause.message.split('\n')[0] : String(cause)}.`);
+    }
+}
+function failOnDuplicate(entries, what) {
+    const seen = new Map();
+    for (const { key, value } of entries) {
+        const prior = seen.get(value);
+        if (prior !== undefined) {
+            throw preflightError('HSX_E_LINK_PREFLIGHT_AMBIGUOUS', `Bindings ${prior} and ${key} both claim ${what} ${value} — the continuity plan cannot uniquely attribute it.`);
+        }
+        seen.set(value, key);
+    }
+}
+async function readActiveWorkerNames(kv, ownerId, record) {
+    const activeKey = `owners/${ownerId}/projects/${record.projectId}/active/${record.environment}`;
+    const rawActive = await kv.get(activeKey);
+    if (rawActive === undefined)
+        return [];
+    const active = decodeOr(schemas.LocalActiveDeploy, rawActive, activeKey);
+    const deployKey = `owners/${ownerId}/projects/${record.projectId}/deploys/${active.deployId}`;
+    const rawDeploy = await kv.get(deployKey);
+    if (rawDeploy === undefined)
+        return [];
+    const deploy = decodeOr(schemas.LocalDeployEntry, rawDeploy, deployKey);
+    return deploy.workerNames;
+}
+//# sourceMappingURL=link-preflight.js.map

package/dist/link-preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"link-preflight.js","sourceRoot":"","sources":["../src/link-preflight.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,EAAE;AACF,sEAAsE;AACtE,oDAAoD;AACpD,yEAAyE;AACzE,uEAAuE;AACvE,iDAAiD;AACjD,wEAAwE;AACxE,mEAAmE;AACnE,6EAA6E;AAC7E,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,6EAA6E;AAC7E,wEAAwE;AACxE,4EAA4E;AAE5E,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAiB,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAA+B,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAK9F,MAAM,oBAAoB,GAAG;IAC3B,4EAA4E;IAC5E,gCAAgC;IAChC,6EAA6E;IAC7E,yBAAyB;IACzB,oCAAoC;IACpC,uEAAuE;IACvE,sEAAsE;IACtE,gCAAgC;IAChC,wEAAwE;IACxE,oEAAoE;IACpE,+BAA+B;CACvB,CAAC;AAGX,SAAS,cAAc,CAAC,IAA4B,EAAE,MAAc;IAClE,wEAAwE;IACxE,wEAAwE;IACxE,OAAO,QAAQ,CAAC,IAAI,EAAE,GAAG,MAAM,wBAAwB,CAAC,CAAC;AAC3D,CAAC;AA6CD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAMhD;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC;IAC3C,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC9B,IAAI,GAAG,CACL,uBAAuB,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,0BAA0B,kBAAkB,CACpG,KAAK,CAAC,WAAW,CAClB,EAAE,EACH,KAAK,CAAC,OAAO,IAAI,4BAA4B,CAC9C,EACD,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE,CAC3D,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACrD,MAAM,QAAQ,CACZ,mBAAmB,EACnB,0CAA0C,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACzG,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAE7C,CAAC;IACd,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,cAAc,GAAG,kEAAkE,CAAC;AAE1F;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAYtC;IACC,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACxC,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,YAAY,GAChB,KAAK,CAAC,YAAY;QAClB,CAAC,CAAC,WAAmB,EAAE,EAAE,CACvB,0BAA0B,CAAC;YACzB,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,mBAAmB;YAC5C,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC;YACzC,WAAW;YACX,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrD,CAAC,CAAC,CAAC;IAER,4EAA4E;IAC5E,MAAM,YAAY,GAAG,UAAU,YAAY,OAAO,CAAC;IACnD,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAChD,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;QAC1E,IAAI,IAAI,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;YAClC,MAAM,cAAc,CAClB,oCAAoC,EACpC,iBAAiB,YAAY,kBAAkB,IAAI,CAAC,OAAO,SAAS,YAAY,GAAG,CACpF,CAAC;QACJ,CAAC;QACD,gBAAgB,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED,4EAA4E;IAC5E,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,YAAY,YAAY,CAAC,CAAC;IACtE,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjF,MAAM,QAAQ,GAAwE,EAAE,CAAC;IACzF,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,cAAc,CAClB,oCAAoC,EACpC,eAAe,GAAG,uCAAuC,CAC1D,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,sBAAsB,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;QACvE,IACE,MAAM,CAAC,OAAO,KAAK,QAAQ;YAC3B,MAAM,CAAC,SAAS,KAAK,UAAU;YAC/B,MAAM,CAAC,WAAW,KAAK,cAAc;YACrC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ,EACxC,CAAC;YACD,MAAM,cAAc,CAClB,oCAAoC,EACpC,cAAc,GAAG,kDAAkD,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,YAAY,IAAI,CACvJ,CAAC;QACJ,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,4EAA4E;IAC5E,kDAAkD;IAClD,eAAe,CACb,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC,EAChF,sBAAsB,CACvB,CAAC;IACF,eAAe,CACb,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,CACnC,MAAM,CAAC,eAAe,CAAC,IAAI,KAAK,UAAU;QACxC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC;QACpD,CAAC,CAAC,EAAE,CACP,EACD,yBAAyB,CAC1B,CAAC;IAEF,4EAA4E;IAC5E,MAAM,YAAY,GAA+B,EAAE,CAAC;IACpD,KAAK,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAClE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,cAAc,CAClB,gCAAgC,EAChC,wBAAwB,MAAM,CAAC,oBAAoB,KAAK,MAAM,CAAC,sBAAsB,mBAAmB,GAAG,yCAAyC,KAAK,CAAC,OAAO,CAAC,mBAAmB,GAAG,CACzL,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,oBAAoB,EAAE,CAAC;YACjD,MAAM,cAAc,CAClB,gCAAgC,EAChC,mCAAmC,MAAM,CAAC,oBAAoB,6BAA6B,SAAS,CAAC,EAAE,IAAI,CAC5G,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,KAAK,KAAK,MAAM,CAAC,sBAAsB,EAAE,CAAC;YACtD,MAAM,cAAc,CAClB,gCAAgC,EAChC,wBAAwB,MAAM,CAAC,oBAAoB,cAAc,SAAS,CAAC,KAAK,sCAAsC,GAAG,aAAa,MAAM,CAAC,sBAAsB,IAAI,CACxK,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,eAAe,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/C,MAAM,cAAc,CAClB,+BAA+B,EAC/B,kBAAkB,GAAG,+BAA+B,MAAM,CAAC,eAAe,CAAC,IAAI,gIAAgI,CAChN,CAAC;QACJ,CAAC;QACD,qEAAqE;QACrE,0EAA0E;QAC1E,0DAA0D;QAC1D,MAAM,uBAAuB,CAAC;YAC5B,OAAO,EAAE,MAAM,CAAC,eAAe;YAC/B,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC,CAAC;QAEH,YAAY,CAAC,IAAI,CAAC;YAChB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,WAAW,EAAE,MAAM,qBAAqB,CAAC,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC;YAClE,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;YACjD,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;YACrD,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,eAAe,EAAE;gBACf,IAAI,EAAE,UAAU;gBAChB,SAAS,EAAE,MAAM,CAAC,eAAe,CAAC,SAAS;gBAC3C,SAAS,EAAE,MAAM,CAAC,eAAe,CAAC,SAAS;gBAC3C,YAAY,EAAE,IAAI;aACnB;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,aAAa,EAAE,CAAC;QAChB,YAAY;QACZ,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,mBAAmB,EAAE,KAAK,CAAC,OAAO,CAAC,mBAAmB;QACtD,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,kBAAkB;QACpD,gBAAgB;QAChB,QAAQ,EAAE,YAAY;QACtB,MAAM,EAAE;YACN,cAAc,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;YACvD,YAAY,YAAY,CAAC,MAAM,EAAE;YACjC,gCAAgC;YAChC,0BAA0B;YAC1B,uBAAuB;SACxB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,QAA4B;IACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,QAAQ,CACZ,gBAAgB,EAChB,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,KAIvB;IACC,MAAM,MAAM,GAAG,wBAAwB,CAAC;QACtC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,mBAAmB;QAC5C,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC;QACzC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,kBAAkB;QAC7C,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC,CAAC;IACH,6EAA6E;IAC7E,OAAO;QACL,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;QAC7B,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAO,MAA2B,EAAE,GAAW,EAAE,GAAW;IAC3E,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,cAAc,CAClB,oCAAoC,EACpC,iBAAiB,GAAG,qBAAqB,CAC1C,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,cAAc,CAClB,oCAAoC,EACpC,iBAAiB,GAAG,+BAA+B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAC5H,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,OAAoE,EACpE,IAAY;IAEZ,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,OAAO,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,cAAc,CAClB,gCAAgC,EAChC,YAAY,KAAK,QAAQ,GAAG,eAAe,IAAI,IAAI,KAAK,sDAAsD,CAC/G,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,EAA2B,EAC3B,OAAe,EACf,MAA8B;IAE9B,MAAM,SAAS,GAAG,UAAU,OAAO,aAAa,MAAM,CAAC,SAAS,WAAW,MAAM,CAAC,WAAW,EAAE,CAAC;IAChG,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,UAAU,OAAO,aAAa,MAAM,CAAC,SAAS,YAAY,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC9F,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,gBAAgB,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACxE,OAAO,MAAM,CAAC,WAAW,CAAC;AAC5B,CAAC"}

package/dist/local-project-picker.d.ts

@@ -0,0 +1,34 @@
+import type { SelectOptions } from './prompt.js';
+export interface LocalProjectCandidate {
+    readonly root: string;
+    readonly relativePath: string;
+    readonly name: string;
+    readonly marker: string;
+}
+export interface LocalProjectPickerPrompts {
+    readonly select: <T extends string>(options: SelectOptions<T>) => Promise<T | undefined>;
+}
+export declare class LocalProjectPickerCancelled extends Error {
+    constructor();
+}
+/**
+ * Discover local project roots beneath a workspace directory. The walk is
+ * deliberately bounded and never follows symlinks, generated directories, or
+ * archived test runs. Once a project marker is found, that directory is a leaf:
+ * generated/nested files inside an app cannot become duplicate candidates.
+ */
+export declare function discoverLocalProjects(input: {
+    readonly root: string;
+    readonly markers?: readonly string[];
+    readonly maxDepth?: number;
+    readonly maxDirectories?: number;
+    readonly excludedDirectories?: ReadonlySet<string>;
+}): Promise<readonly LocalProjectCandidate[]>;
+export declare function resolveLocalProject(input: {
+    readonly root: string;
+    readonly allowPrompt: boolean;
+    readonly markers?: readonly string[];
+    readonly message?: string;
+    readonly prompts?: LocalProjectPickerPrompts;
+}): Promise<LocalProjectCandidate | undefined>;
+//# sourceMappingURL=local-project-picker.d.ts.map

package/dist/local-project-picker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-project-picker.d.ts","sourceRoot":"","sources":["../src/local-project-picker.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAejD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,SAAS,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;CAC1F;AAED,qBAAa,2BAA4B,SAAQ,KAAK;;CAIrD;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACpD,GAAG,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC,CA+C5C;AAED,wBAAsB,mBAAmB,CAAC,KAAK,EAAE;IAC/C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,yBAAyB,CAAC;CAC9C,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAsB7C"}

package/dist/local-project-picker.js

@@ -0,0 +1,121 @@
+import { readFile, readdir } from 'node:fs/promises';
+import { basename, join, relative, resolve } from 'node:path';
+const DEFAULT_EXCLUDED_DIRECTORIES = new Set([
+    '.git',
+    '.hs-x',
+    '.next',
+    '.turbo',
+    '.wrangler',
+    'build',
+    'coverage',
+    'dist',
+    'node_modules',
+    'test-runs',
+]);
+export class LocalProjectPickerCancelled extends Error {
+    constructor() {
+        super('Cancelled.');
+    }
+}
+/**
+ * Discover local project roots beneath a workspace directory. The walk is
+ * deliberately bounded and never follows symlinks, generated directories, or
+ * archived test runs. Once a project marker is found, that directory is a leaf:
+ * generated/nested files inside an app cannot become duplicate candidates.
+ */
+export async function discoverLocalProjects(input) {
+    const workspaceRoot = resolve(input.root);
+    const markers = input.markers ?? ['hsx.config.ts'];
+    const maxDepth = input.maxDepth ?? 4;
+    const maxDirectories = input.maxDirectories ?? 500;
+    const excluded = input.excludedDirectories ?? DEFAULT_EXCLUDED_DIRECTORIES;
+    const queue = [
+        { directory: workspaceRoot, depth: 0 },
+    ];
+    const candidates = [];
+    let visited = 0;
+    while (queue.length > 0 && visited < maxDirectories) {
+        const current = queue.shift();
+        if (!current)
+            break;
+        visited += 1;
+        let entries;
+        try {
+            entries = await readdir(current.directory, { withFileTypes: true });
+        }
+        catch {
+            continue;
+        }
+        const names = new Set(entries.map((entry) => entry.name));
+        const marker = markers.find((name) => names.has(name));
+        if (marker) {
+            candidates.push({
+                root: current.directory,
+                relativePath: relative(workspaceRoot, current.directory) || '.',
+                name: await readCandidateName(current.directory, marker),
+                marker,
+            });
+            continue;
+        }
+        if (current.depth >= maxDepth)
+            continue;
+        for (const entry of entries.sort((left, right) => left.name.localeCompare(right.name))) {
+            if (!entry.isDirectory() || entry.isSymbolicLink() || excluded.has(entry.name))
+                continue;
+            queue.push({ directory: join(current.directory, entry.name), depth: current.depth + 1 });
+        }
+    }
+    return candidates.sort((left, right) => left.relativePath.localeCompare(right.relativePath) || left.name.localeCompare(right.name));
+}
+export async function resolveLocalProject(input) {
+    const projects = await discoverLocalProjects({
+        root: input.root,
+        ...(input.markers ? { markers: input.markers } : {}),
+    });
+    const direct = projects.find((project) => project.relativePath === '.');
+    if (direct)
+        return direct;
+    if (!input.allowPrompt)
+        return undefined;
+    if (projects.length === 0)
+        return undefined;
+    if (projects.length === 1)
+        return projects[0];
+    if (!input.prompts)
+        return undefined;
+    const selected = await input.prompts.select({
+        message: input.message ?? 'Which local project?',
+        options: projects.map((project) => ({
+            value: project.root,
+            label: project.name,
+            description: project.relativePath,
+        })),
+    });
+    if (selected === undefined)
+        throw new LocalProjectPickerCancelled();
+    return projects.find((project) => project.root === selected);
+}
+async function readCandidateName(root, marker) {
+    try {
+        const source = await readFile(join(root, marker), 'utf8');
+        if (marker === 'hsx.config.ts') {
+            const name = /\bname\s*:\s*["'`]([^"'`]+)["'`]/.exec(source)?.[1]?.trim();
+            if (name)
+                return name;
+        }
+        else if (marker === 'hsproject.json' || marker === 'migration.json') {
+            const parsed = JSON.parse(source);
+            const legacyApp = typeof parsed.legacyApp === 'object' && parsed.legacyApp !== null
+                ? parsed.legacyApp
+                : undefined;
+            const name = [parsed.name, parsed.appName, parsed.projectName, legacyApp?.name].find((value) => typeof value === 'string' && value.trim().length > 0);
+            if (name)
+                return name.trim();
+        }
+    }
+    catch {
+        // Fall back to the directory name for unreadable or malformed markers.
+    }
+    return basename(root);
+}
+//# sourceMappingURL=local-project-picker.js.map

package/dist/local-project-picker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-project-picker.js","sourceRoot":"","sources":["../src/local-project-picker.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAG9D,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAC;IAC3C,MAAM;IACN,OAAO;IACP,OAAO;IACP,QAAQ;IACR,WAAW;IACX,OAAO;IACP,UAAU;IACV,MAAM;IACN,cAAc;IACd,WAAW;CACZ,CAAC,CAAC;AAaH,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpD;QACE,KAAK,CAAC,YAAY,CAAC,CAAC;IACtB,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAM3C;IACC,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;IACrC,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,GAAG,CAAC;IACnD,MAAM,QAAQ,GAAG,KAAK,CAAC,mBAAmB,IAAI,4BAA4B,CAAC;IAC3E,MAAM,KAAK,GAAkE;QAC3E,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE;KACvC,CAAC;IACF,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,GAAG,cAAc,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO;YAAE,MAAM;QACpB,OAAO,IAAI,CAAC,CAAC;QAEb,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,IAAI,MAAM,EAAE,CAAC;YACX,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,OAAO,CAAC,SAAS;gBACvB,YAAY,EAAE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG;gBAC/D,IAAI,EAAE,MAAM,iBAAiB,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;gBACxD,MAAM;aACP,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,IAAI,OAAO,CAAC,KAAK,IAAI,QAAQ;YAAE,SAAS;QACxC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACvF,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YACzF,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC,IAAI,CACpB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAC7F,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAMzC;IACC,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC;QAC3C,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,KAAK,GAAG,CAAC,CAAC;IACxE,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,IAAI,CAAC,KAAK,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAErC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAC1C,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,sBAAsB;QAChD,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAClC,KAAK,EAAE,OAAO,CAAC,IAAI;YACnB,KAAK,EAAE,OAAO,CAAC,IAAI;YACnB,WAAW,EAAE,OAAO,CAAC,YAAY;SAClC,CAAC,CAAC;KACJ,CAAC,CAAC;IACH,IAAI,QAAQ,KAAK,SAAS;QAAE,MAAM,IAAI,2BAA2B,EAAE,CAAC;IACpE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;AAC/D,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,MAAc;IAC3D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1D,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,kCAAkC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YAC1E,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAC;QACxB,CAAC;aAAM,IAAI,MAAM,KAAK,gBAAgB,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;YACtE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAA4B,CAAC;YAC7D,MAAM,SAAS,GACb,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI;gBAC/D,CAAC,CAAE,MAAM,CAAC,SAAqC;gBAC/C,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,CAClF,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CACjF,CAAC;YACF,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;IACzE,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC"}

package/dist/logs-interactive.d.ts

@@ -0,0 +1,37 @@
+import type { SystemType } from '@hs-x/hubspot-cli';
+import { promptMultiSelect, promptSelect } from './prompt.js';
+export type InteractiveLogSource = 'all' | 'workers' | 'hubspot';
+export interface InteractiveLogsProject {
+    readonly id: string;
+    readonly displayName: string;
+}
+export interface InteractiveLogsSelection {
+    readonly projectId: string;
+    readonly source: InteractiveLogSource;
+    readonly systemTypes?: readonly SystemType[];
+    readonly sinceMinutes: number;
+    readonly follow: boolean;
+    readonly errorsOnly: boolean;
+}
+type Select = typeof promptSelect;
+type MultiSelect = typeof promptMultiSelect;
+export interface InteractiveLogsPromptInput {
+    readonly projects: readonly InteractiveLogsProject[];
+    readonly currentProjectId?: string;
+    /** A project already chosen by the shared operations picker. */
+    readonly selectedProjectId?: string;
+    /** Project whose HubSpot app binding is available from the current directory. */
+    readonly hubspotProjectId?: string;
+}
+export interface InteractiveLogsPromptDependencies {
+    readonly interactive?: boolean;
+    readonly select?: Select;
+    readonly multiSelect?: MultiSelect;
+}
+/**
+ * A short, progressive setup for a bare `hs-x logs`. Flags remain the complete,
+ * deterministic interface; this only chooses the initial view for a TTY.
+ */
+export declare function promptInteractiveLogsSelection(input: InteractiveLogsPromptInput, deps?: InteractiveLogsPromptDependencies): Promise<InteractiveLogsSelection | undefined>;
+export {};
+//# sourceMappingURL=logs-interactive.d.ts.map

package/dist/logs-interactive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs-interactive.d.ts","sourceRoot":"","sources":["../src/logs-interactive.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAGpD,OAAO,EAAiB,iBAAiB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE7E,MAAM,MAAM,oBAAoB,GAAG,KAAK,GAAG,SAAS,GAAG,SAAS,CAAC;AAEjE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IAC7C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;CAC9B;AAED,KAAK,MAAM,GAAG,OAAO,YAAY,CAAC;AAClC,KAAK,WAAW,GAAG,OAAO,iBAAiB,CAAC;AAE5C,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACrD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,gEAAgE;IAChE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,iFAAiF;IACjF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;CACpC;AAoBD;;;GAGG;AACH,wBAAsB,8BAA8B,CAClD,KAAK,EAAE,0BAA0B,EACjC,IAAI,GAAE,iCAAsC,GAC3C,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAqF/C"}

package/dist/logs-interactive.js

@@ -0,0 +1,110 @@
+import { HUBSPOT_LOG_SYSTEM_TYPES } from './hubspot-app-logs.js';
+import { ProjectPickerCancelled, resolveProjectSelection } from './project-picker.js';
+import { isInteractive, promptMultiSelect, promptSelect } from './prompt.js';
+const TYPE_LABELS = {
+    WEBHOOKS: { label: 'Webhooks', description: 'Webhook deliveries and failures' },
+    API_CALL: { label: 'API calls', description: 'App API requests' },
+    SERVERLESS_EXECUTION: { label: 'Serverless functions', description: 'Function executions' },
+    CRM_EXTENSIBILITY_CARD: { label: 'CRM cards', description: 'Modern CRM card activity' },
+    CRM_LEGACY_CARD: { label: 'Legacy CRM cards', description: 'Legacy card activity' },
+    EXTENSION_LOG: { label: 'Frontend logs', description: 'Production UI logger output' },
+    EXTENSION_RENDER: { label: 'Extension renders', description: 'UI extension render activity' },
+    APP_SETTINGS: { label: 'App settings', description: 'App settings activity' },
+    PROXY_EXECUTION: { label: 'Proxy executions', description: 'Proxy request activity' },
+    SERVERLESS_GATEWAY_EXECUTION: {
+        label: 'Serverless gateway',
+        description: 'Gateway execution activity',
+    },
+    ACCEPTANCE_TEST: { label: 'Acceptance tests', description: 'HubSpot acceptance-test activity' },
+    OAUTH_AUTHORIZATION: { label: 'OAuth', description: 'Authorization activity' },
+};
+/**
+ * A short, progressive setup for a bare `hs-x logs`. Flags remain the complete,
+ * deterministic interface; this only chooses the initial view for a TTY.
+ */
+export async function promptInteractiveLogsSelection(input, deps = {}) {
+    if (!(deps.interactive ?? isInteractive()))
+        return undefined;
+    const select = deps.select ?? promptSelect;
+    const multiSelect = deps.multiSelect ?? promptMultiSelect;
+    let projectId = input.selectedProjectId;
+    if (!projectId) {
+        try {
+            projectId = (await resolveProjectSelection({
+                accountId: '',
+                projects: input.projects,
+                ...(input.currentProjectId ? { localProjectId: input.currentProjectId } : {}),
+                allowPrompt: true,
+                prompts: { select },
+                message: 'Which project do you want logs for?',
+                promptWhenSingle: true,
+            })).id;
+        }
+        catch (error) {
+            if (error instanceof ProjectPickerCancelled)
+                return undefined;
+            throw error;
+        }
+    }
+    const hasLocalHubSpotBinding = input.hubspotProjectId === projectId;
+    const source = await select({
+        message: 'Where do you want to look?',
+        default: hasLocalHubSpotBinding ? 'all' : 'workers',
+        options: hasLocalHubSpotBinding
+            ? [
+                {
+                    value: 'all',
+                    label: 'Everything',
+                    description: 'Workers and HubSpot in one timeline',
+                },
+                { value: 'workers', label: 'Workers', description: 'HS-X runtime requests and logs' },
+                {
+                    value: 'hubspot',
+                    label: 'HubSpot',
+                    description: 'App, extension, webhook, and OAuth logs',
+                },
+            ]
+            : [
+                {
+                    value: 'workers',
+                    label: 'Workers',
+                    description: 'HubSpot app logs require that project’s local binding',
+                },
+            ],
+    });
+    if (!source)
+        return undefined;
+    let systemTypes;
+    if (source !== 'workers') {
+        systemTypes = await multiSelect({
+            message: 'Which HubSpot logs do you want to see?',
+            options: HUBSPOT_LOG_SYSTEM_TYPES.map((value) => ({ value, ...TYPE_LABELS[value] })),
+            initial: [...HUBSPOT_LOG_SYSTEM_TYPES],
+            minSelected: 1,
+        });
+        if (!systemTypes)
+            return undefined;
+    }
+    const view = await select({
+        message: 'What do you want to see?',
+        default: '15m',
+        options: [
+            { value: '15m', label: 'Last 15 minutes' },
+            { value: 'live', label: 'Live logs', description: 'Recent context, then keep following' },
+            { value: '60m', label: 'Last hour' },
+            { value: '1440m', label: 'Last 24 hours' },
+            { value: 'errors-60m', label: 'Errors in the last hour' },
+        ],
+    });
+    if (!view)
+        return undefined;
+    return {
+        projectId,
+        source,
+        ...(systemTypes ? { systemTypes } : {}),
+        sinceMinutes: view === '15m' || view === 'live' ? 15 : view === '1440m' ? 1440 : 60,
+        follow: view === 'live',
+        errorsOnly: view === 'errors-60m',
+    };
+}
+//# sourceMappingURL=logs-interactive.js.map

package/dist/logs-interactive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs-interactive.js","sourceRoot":"","sources":["../src/logs-interactive.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AACtF,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAoC7E,MAAM,WAAW,GAAiF;IAChG,QAAQ,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,iCAAiC,EAAE;IAC/E,QAAQ,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,kBAAkB,EAAE;IACjE,oBAAoB,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,WAAW,EAAE,qBAAqB,EAAE;IAC3F,sBAAsB,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,0BAA0B,EAAE;IACvF,eAAe,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,sBAAsB,EAAE;IACnF,aAAa,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,6BAA6B,EAAE;IACrF,gBAAgB,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,8BAA8B,EAAE;IAC7F,YAAY,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,uBAAuB,EAAE;IAC7E,eAAe,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,wBAAwB,EAAE;IACrF,4BAA4B,EAAE;QAC5B,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,4BAA4B;KAC1C;IACD,eAAe,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,kCAAkC,EAAE;IAC/F,mBAAmB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE;CAC/E,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,KAAiC,EACjC,OAA0C,EAAE;IAE5C,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,aAAa,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC;IAC3C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,iBAAiB,CAAC;IAE1D,IAAI,SAAS,GAAG,KAAK,CAAC,iBAAiB,CAAC;IACxC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,IAAI,CAAC;YACH,SAAS,GAAG,CACV,MAAM,uBAAuB,CAAC;gBAC5B,SAAS,EAAE,EAAE;gBACb,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7E,WAAW,EAAE,IAAI;gBACjB,OAAO,EAAE,EAAE,MAAM,EAAE;gBACnB,OAAO,EAAE,qCAAqC;gBAC9C,gBAAgB,EAAE,IAAI;aACvB,CAAC,CACH,CAAC,EAAE,CAAC;QACP,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,sBAAsB;gBAAE,OAAO,SAAS,CAAC;YAC9D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,sBAAsB,GAAG,KAAK,CAAC,gBAAgB,KAAK,SAAS,CAAC;IACpE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC;QAC1B,OAAO,EAAE,4BAA4B;QACrC,OAAO,EAAE,sBAAsB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QACnD,OAAO,EAAE,sBAAsB;YAC7B,CAAC,CAAC;gBACE;oBACE,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,YAAY;oBACnB,WAAW,EAAE,qCAAqC;iBACnD;gBACD,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,gCAAgC,EAAE;gBACrF;oBACE,KAAK,EAAE,SAAS;oBAChB,KAAK,EAAE,SAAS;oBAChB,WAAW,EAAE,yCAAyC;iBACvD;aACF;YACH,CAAC,CAAC;gBACE;oBACE,KAAK,EAAE,SAAS;oBAChB,KAAK,EAAE,SAAS;oBAChB,WAAW,EAAE,uDAAuD;iBACrE;aACF;KACN,CAAC,CAAC;IACH,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAE9B,IAAI,WAA8C,CAAC;IACnD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,WAAW,GAAG,MAAM,WAAW,CAAa;YAC1C,OAAO,EAAE,wCAAwC;YACjD,OAAO,EAAE,wBAAwB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACpF,OAAO,EAAE,CAAC,GAAG,wBAAwB,CAAC;YACtC,WAAW,EAAE,CAAC;SACf,CAAC,CAAC;QACH,IAAI,CAAC,WAAW;YAAE,OAAO,SAAS,CAAC;IACrC,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC;QACxB,OAAO,EAAE,0BAA0B;QACnC,OAAO,EAAE,KAAK;QACd,OAAO,EAAE;YACP,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE;YAC1C,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,qCAAqC,EAAE;YACzF,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE;YACpC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE;YAC1C,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,yBAAyB,EAAE;SAC1D;KACF,CAAC,CAAC;IACH,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAE5B,OAAO;QACL,SAAS;QACT,MAAM;QACN,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,YAAY,EAAE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QACnF,MAAM,EAAE,IAAI,KAAK,MAAM;QACvB,UAAU,EAAE,IAAI,KAAK,YAAY;KAClC,CAAC;AACJ,CAAC"}

package/dist/output-context.d.ts

@@ -0,0 +1,13 @@
+export interface CliOutputFlags {
+    readonly json: boolean;
+    readonly jsonStream: boolean;
+    readonly quiet: boolean;
+    readonly verbose: boolean;
+    readonly debug: boolean;
+}
+export declare function resolveCliOutputFlags(argv: readonly string[]): CliOutputFlags;
+export declare function withCliOutputFlags<T>(flags: CliOutputFlags, thunk: () => T): T;
+export declare function currentCliOutputFlags(): CliOutputFlags;
+export declare function currentReporterArgv(): readonly string[];
+export declare function isMachineOutput(): boolean;
+//# sourceMappingURL=output-context.d.ts.map

package/dist/output-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-context.d.ts","sourceRoot":"","sources":["../src/output-context.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAYD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,cAAc,CAQ7E;AAED,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAE9E;AAED,wBAAgB,qBAAqB,IAAI,cAAc,CAEtD;AAED,wBAAgB,mBAAmB,IAAI,SAAS,MAAM,EAAE,CAWvD;AAED,wBAAgB,eAAe,IAAI,OAAO,CAGzC"}

package/dist/output-context.js

@@ -0,0 +1,46 @@
+import { AsyncLocalStorage } from 'node:async_hooks';
+const DEFAULT_FLAGS = {
+    json: false,
+    jsonStream: false,
+    quiet: false,
+    verbose: false,
+    debug: false,
+};
+const storage = new AsyncLocalStorage();
+export function resolveCliOutputFlags(argv) {
+    return {
+        json: argv.includes('--json'),
+        jsonStream: argv.includes('--json-stream'),
+        quiet: argv.includes('--quiet') || argv.includes('-q'),
+        verbose: argv.includes('--verbose'),
+        debug: argv.includes('--debug'),
+    };
+}
+export function withCliOutputFlags(flags, thunk) {
+    return storage.run(flags, thunk);
+}
+export function currentCliOutputFlags() {
+    return storage.getStore() ?? DEFAULT_FLAGS;
+}
+export function currentReporterArgv() {
+    const flags = currentCliOutputFlags();
+    const argv = [];
+    // runCli rejects dual machine flags before command execution; reporters only
+    // ever receive one of these modes during a valid invocation.
+    if (flags.json)
+        argv.push('--json');
+    if (flags.jsonStream)
+        argv.push('--json-stream');
+    if (flags.quiet)
+        argv.push('--quiet');
+    if (flags.verbose)
+        argv.push('--verbose');
+    if (flags.debug)
+        argv.push('--debug');
+    return argv;
+}
+export function isMachineOutput() {
+    const flags = currentCliOutputFlags();
+    return flags.json || flags.jsonStream;
+}
+//# sourceMappingURL=output-context.js.map