@hypequery/cli 1.7.0 → 1.8.0

package/README.md

@@ -182,6 +182,28 @@ are still accepted for metadata-only validation.
 npx hypequery deployment:validate analytics/hypequery-deployment
 ```
 
+### `hypequery deployment:release`
+
+Prepares a deterministic release request from a verified deployment bundle and
+an explicit project/environment target. This command does not upload, authorize,
+or execute the release.
+
+```bash
+npx hypequery deployment:release analytics/hypequery-deployment \
+  --project my-project \
+  --environment production
+```
+
+The default output is `analytics/hypequery-deployment.release.json`. It is
+written beside the bundle because adding it inside the closed bundle would
+invalidate bundle verification.
+
+Options:
+
+- `--project <project>`: required target project identifier
+- `--environment <environment>`: required target environment identifier
+- `--output <path>`: release JSON path, default beside the bundle
+
 ## Non-interactive Setup
 
 For ClickHouse, `hypequery init --no-interactive` reads:

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAYpC,QAAA,MAAM,OAAO,SAAgB,CAAC;AAa9B,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;EAKpE;AA2JD,OAAO,EAAE,OAAO,EAAE,CAAC"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAcpC,QAAA,MAAM,OAAO,SAAgB,CAAC;AAa9B,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;EAKpE;AAsKD,OAAO,EAAE,OAAO,EAAE,CAAC"}

package/dist/cli.js

@@ -6,7 +6,7 @@ import { devCommand } from './commands/dev.js';
 import { generateCommand } from './commands/generate.js';
 import { generateDatasetsCommand } from './commands/generate-datasets.js';
 import { generateManifestCommand } from './commands/generate-manifest.js';
-import { buildDeploymentCommand, validateDeploymentCommand, } from './commands/deployment.js';
+import { buildDeploymentCommand, prepareDeploymentReleaseCommand, validateDeploymentCommand, } from './commands/deployment.js';
 const program = new Command();
 function getCliVersion() {
     try {
@@ -129,6 +129,15 @@ program
     .action(runCommand(async (artifact) => {
     await validateDeploymentCommand(artifact);
 }));
+program
+    .command('deployment:release <bundle>')
+    .description('Prepare a target-bound release from a verified deployment bundle')
+    .requiredOption('--project <project>', 'Target project identifier')
+    .requiredOption('--environment <environment>', 'Target environment identifier')
+    .option('-o, --output <path>', 'Release JSON path (default: beside the bundle)')
+    .action(runCommand(async (bundle, options) => {
+    await prepareDeploymentReleaseCommand(bundle, options);
+}));
 // Help command
 program
     .command('help [command]')
@@ -161,6 +170,7 @@ program.on('--help', () => {
     console.log('  hypequery generate:manifest analytics/api.ts --output analytics/hypequery-manifest.json');
     console.log('  hypequery deployment:build analytics/api.ts');
     console.log('  hypequery deployment:validate analytics/hypequery-deployment');
+    console.log('  hypequery deployment:release analytics/hypequery-deployment --project my-project --environment production');
     console.log('');
     console.log('Docs: https://hypequery.com/docs');
 });

package/dist/commands/deployment.d.ts

@@ -1,4 +1,4 @@
-import { type ProtocolDeploymentContract } from '@hypequery/protocol';
+import { type ProtocolDeploymentContract, type ProtocolDeploymentReleaseEnvelope } from '@hypequery/protocol';
 export interface BuildDeploymentOptions {
     bundleOutput?: string;
     output?: string;
@@ -9,6 +9,12 @@ export interface BuildDeploymentOptions {
     entrypointPrefix?: string;
     hashOutput?: string;
 }
+export interface PrepareDeploymentReleaseOptions {
+    project?: string;
+    environment?: string;
+    output?: string;
+}
 export declare function buildDeploymentCommand(apiPath: string | undefined, options?: BuildDeploymentOptions): Promise<ProtocolDeploymentContract>;
 export declare function validateDeploymentCommand(artifactPath: string | undefined): Promise<ProtocolDeploymentContract>;
+export declare function prepareDeploymentReleaseCommand(bundlePath: string | undefined, options?: PrepareDeploymentReleaseOptions): Promise<ProtocolDeploymentReleaseEnvelope>;
 //# sourceMappingURL=deployment.d.ts.map

package/dist/commands/deployment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../src/commands/deployment.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,0BAA0B,EAChC,MAAM,qBAAqB,CAAC;AAiB7B,MAAM,WAAW,sBAAsB;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAoDD,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,0BAA0B,CAAC,CAwIrC;AAED,wBAAsB,yBAAyB,CAC7C,YAAY,EAAE,MAAM,GAAG,SAAS,GAC/B,OAAO,CAAC,0BAA0B,CAAC,CA2ErC"}
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../src/commands/deployment.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,KAAK,0BAA0B,EAC/B,KAAK,iCAAiC,EACvC,MAAM,qBAAqB,CAAC;AAiB7B,MAAM,WAAW,sBAAsB;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAoDD,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,0BAA0B,CAAC,CAwIrC;AAED,wBAAsB,yBAAyB,CAC7C,YAAY,EAAE,MAAM,GAAG,SAAS,GAC/B,OAAO,CAAC,0BAA0B,CAAC,CA2ErC;AA0DD,wBAAsB,+BAA+B,CACnD,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,GAAE,+BAAoC,GAC5C,OAAO,CAAC,iCAAiC,CAAC,CA8C5C"}

package/dist/commands/deployment.js

@@ -1,7 +1,7 @@
 import { createHash } from 'node:crypto';
-import { mkdir, readFile, stat, writeFile } from 'node:fs/promises';
+import { lstat, mkdir, readFile, realpath, stat, writeFile } from 'node:fs/promises';
 import path from 'node:path';
-import { prepareProtocolDeploymentContract, } from '@hypequery/protocol';
+import { prepareProtocolDeploymentReleaseEnvelope, prepareProtocolDeploymentContract, } from '@hypequery/protocol';
 import { writeDeploymentBundle, verifyDeploymentBundle, readDeploymentRuntimeFile, } from '../utils/deployment-bundle.js';
 import { buildNodeRuntimeArtifact, getDeploymentRuntimeEntrypoints, } from '../utils/deployment-runtime-artifact.js';
 import { loadApiModule } from '../utils/load-api.js';
@@ -217,3 +217,100 @@ export async function validateDeploymentCommand(artifactPath) {
     logger.info(`Identity: ${digest}`);
     return contract;
 }
+function assertOutputOutsideBundle(bundlePath, outputPath) {
+    const bundle = path.resolve(bundlePath);
+    const output = path.resolve(outputPath);
+    const relative = path.relative(bundle, output);
+    const outside = relative === '..'
+        || relative.startsWith(`..${path.sep}`)
+        || path.isAbsolute(relative);
+    if (relative === '' || !outside) {
+        throw new Error('--output must be outside the closed deployment bundle directory.');
+    }
+}
+async function prospectiveRealPath(inputPath) {
+    let current = path.resolve(inputPath);
+    const missingSegments = [];
+    for (;;) {
+        try {
+            return path.join(await realpath(current), ...missingSegments);
+        }
+        catch (error) {
+            if (!(typeof error === 'object' && error !== null && 'code' in error
+                && error.code === 'ENOENT')) {
+                throw error;
+            }
+            try {
+                const stat = await lstat(current);
+                if (stat.isSymbolicLink()) {
+                    throw new Error('--output must not traverse a dangling symbolic link.');
+                }
+            }
+            catch (lstatError) {
+                if (!(typeof lstatError === 'object' && lstatError !== null && 'code' in lstatError
+                    && lstatError.code === 'ENOENT')) {
+                    throw lstatError;
+                }
+            }
+            const parent = path.dirname(current);
+            if (parent === current)
+                throw error;
+            missingSegments.unshift(path.basename(current));
+            current = parent;
+        }
+    }
+}
+async function assertOutputIsNotSymbolicLink(outputPath) {
+    try {
+        const outputStat = await lstat(outputPath);
+        if (outputStat.isSymbolicLink()) {
+            throw new Error('--output must not be a symbolic link.');
+        }
+    }
+    catch (error) {
+        if (!(typeof error === 'object' && error !== null && 'code' in error
+            && error.code === 'ENOENT')) {
+            throw error;
+        }
+    }
+}
+export async function prepareDeploymentReleaseCommand(bundlePath, options = {}) {
+    if (!bundlePath) {
+        throw new Error('Missing deployment bundle path.\n\n'
+            + 'Usage: hypequery deployment:release analytics/hypequery-deployment '
+            + '--project <project> --environment <environment>');
+    }
+    if (options.project === undefined) {
+        throw new Error('Missing required --project <project>.');
+    }
+    if (options.environment === undefined) {
+        throw new Error('Missing required --environment <environment>.');
+    }
+    const outputPath = options.output ?? `${bundlePath.replace(/[\\/]+$/, '')}.release.json`;
+    assertOutputOutsideBundle(bundlePath, outputPath);
+    let bundle;
+    try {
+        bundle = await verifyDeploymentBundle(bundlePath);
+    }
+    catch (error) {
+        throw new Error(`Cannot prepare a release from an invalid deployment bundle: ${bundlePath}\n\n`
+            + (error instanceof Error ? error.message : String(error)));
+    }
+    assertOutputOutsideBundle(bundle.directory, await prospectiveRealPath(outputPath));
+    const prepared = prepareProtocolDeploymentReleaseEnvelope({
+        kind: 'hypequery-deployment-release',
+        version: 1,
+        bundleIdentity: bundle.identity,
+        target: {
+            project: options.project,
+            environment: options.environment,
+        },
+    });
+    await mkdir(path.dirname(outputPath), { recursive: true });
+    await assertOutputIsNotSymbolicLink(outputPath);
+    await writeFile(outputPath, `${prepared.canonical}\n`, 'utf8');
+    logger.success(`Deployment release written to ${outputPath}`);
+    logger.info(`Release identity: ${prepared.identity}`);
+    logger.info(`Bundle identity: ${bundle.identity}`);
+    return prepared.release;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hypequery/cli",
-  "version": "1.7.0",
+  "version": "1.8.0",
   "description": "Command-line interface for hypequery",
   "license": "Apache-2.0",
   "type": "module",
@@ -19,7 +19,7 @@
     "open": "^10.0.0",
     "ora": "^8.0.1",
     "prompts": "^2.4.2",
-    "@hypequery/protocol": "0.4.0"
+    "@hypequery/protocol": "0.5.0"
   },
   "peerDependencies": {
     "@hypequery/clickhouse": "*",
@@ -37,7 +37,7 @@
     "typescript": "^5.7.3",
     "vitest": "^3.2.6",
     "@hypequery/clickhouse": "2.4.0",
-    "@hypequery/serve": "0.13.1"
+    "@hypequery/serve": "0.13.2"
   },
   "repository": {
     "type": "git",