@jigx/sdk-tools 1.1.0 → 1.2.0-next.2

package/README.md

@@ -23,7 +23,7 @@ On first `jigx deploy`, the CLI:
 2. Detects no **OrganizationBinding** in `<projectRoot>/jigx.json` and runs `jigx init` inline (Organization picker). Writes the binding to `jigx.json`.
 3. Builds, then deploys content to the prod environment.
 
-Subsequent deploys reuse both artifacts and skip straight to build + deploy. Pass `--env dev` on any command to target staging.
+Subsequent deploys reuse both artifacts and skip straight to build + deploy. Pass `--env dev` to target staging, `--env clf-dev` for the Cloudflare dev stamp, or `--env clf-prod` for the Cloudflare prod stamp.
 
 ## Commands
 
@@ -33,7 +33,7 @@ Subsequent deploys reuse both artifacts and skip straight to build + deploy. Pas
 | `jigx build` | Compiles `src/app.ts` into `build/output.json` plus the canonical Builder folder layout under `build/app/` for inspection. |
 | `jigx login` | Signs in to Cognito (interactive email + password) and caches a refresh token in `~/.jigx/refresh-tokens.json`. |
 | `jigx init` | Picks an Organization for the current environment and writes the binding to `<projectRoot>/jigx.json`. |
-| `jigx deploy` | Builds, then deploys content. Defaults to prod. Pass `--env dev` to target staging. Auto-runs `jigx login` and `jigx init` if needed (TTY only). |
+| `jigx deploy` | Builds, then deploys content. Defaults to prod. Pass `--env dev` for staging, `--env clf-dev` for the Cloudflare dev stamp, or `--env clf-prod` for the Cloudflare prod stamp. Auto-runs `jigx login` and `jigx init` if needed (TTY only). |
 | `jigx whoami` | Prints the live User identity and the project's Organization binding for the chosen environment. |
 | `jigx logout` | Clears cached refresh tokens for one env or all envs. |
 
@@ -62,8 +62,8 @@ See [ADR-0002](../../docs/adr/0002-sdk-tools-cognito-only-auth.md) for the ratio
 
 ### `Not authenticated. Run jigx login.`
 
-`~/.jigx/refresh-tokens.json` is missing or the cached refresh token has expired/been revoked. Run `jigx login` (add `--env dev` for staging) and retry.
+`~/.jigx/refresh-tokens.json` is missing or the cached refresh token has expired/been revoked. Run `jigx login` (add `--env dev` for staging or `--env clf-dev` for the Cloudflare dev stamp) and retry.
 
 ### `No Organization configured for env "<env>".`
 
-`<projectRoot>/jigx.json` has no binding for the requested environment. Run `jigx init` (add `--env dev` for staging, optionally `--org <id>` to skip the picker).
+`<projectRoot>/jigx.json` has no binding for the requested environment. Run `jigx init` (add `--env dev` for staging or `--env clf-dev` for the Cloudflare dev stamp, optionally `--org <id>` to skip the picker).

package/dist/auth/cognito-auth.d.ts

@@ -13,14 +13,35 @@ export interface SignInResult {
 export interface RefreshSessionOptions {
     readonly refreshToken: string;
     readonly environment: DeployEnvironment;
+    /**
+     * Username (email) the original session was issued to. Required by
+     * `amazon-cognito-identity-js` so it can locate the per-user storage keys
+     * before invoking the refresh.
+     */
     readonly username: string;
 }
 export interface RefreshSessionResult {
     readonly idToken: string;
+    /** ISO 8601 timestamp at which `idToken` expires. */
     readonly expiresAt: string;
 }
+/**
+ * Wraps `amazon-cognito-identity-js` for SRP password sign-in.
+ *
+ * Maps Cognito's `NotAuthorizedException` / `UserNotFoundException` to
+ * `InvalidCredentialsError` and any network/timeout failure to `NetworkError`,
+ * so the login command can render a single actionable message per failure
+ * mode without sniffing Cognito-specific error codes.
+ */
 export declare class CognitoAuth {
     signIn(options: SignInOptions): Promise<SignInResult>;
+    /**
+     * Reuses a cached refresh token to mint a new ID token without prompting.
+     *
+     * Surfaces refresh-token expiry/revocation as `RefreshExpiredError` so the
+     * caller can fall through to the no-credential path. Network/timeout
+     * failures map to `NetworkError`.
+     */
     refreshSession(options: RefreshSessionOptions): Promise<RefreshSessionResult>;
 }
 //# sourceMappingURL=cognito-auth.d.ts.map

package/dist/auth/cognito-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cognito-auth.d.ts","sourceRoot":"","sources":["../../src/auth/cognito-auth.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAS7D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAA;CACxC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAA;IAMvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IAExB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AA+FD,qBAAa,WAAW;IAChB,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CA4D1D;IASK,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA6ClF;CACF"}
+{"version":3,"file":"cognito-auth.d.ts","sourceRoot":"","sources":["../../src/auth/cognito-auth.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAS7D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAA;CACxC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAA;IACvC;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,qDAAqD;IACrD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAuFD;;;;;;;GAOG;AACH,qBAAa,WAAW;IAChB,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CA4D1D;IAED;;;;;;OAMG;IACG,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA6ClF;CACF"}

package/dist/auth/cognito-auth.js

@@ -22,6 +22,12 @@ function fullNameFromPayload(payload) {
     }
     return payload.email ?? '';
 }
+/**
+ * Wraps the plain-object failure that `amazon-cognito-identity-js` hands to
+ * `onFailure` so we can satisfy `prefer-promise-reject-errors` (only `Error`
+ * subclasses cross the rejection boundary) without losing the `code`/`name`
+ * the downstream checks depend on.
+ */
 class CognitoFailure extends Error {
     code;
     constructor(raw) {
@@ -62,6 +68,14 @@ function isCognitoNetworkFailure(error) {
     const code = cognitoErrorCode(error);
     return code === 'NetworkError' || code === 'NetworkingError' || code === 'TimeoutError';
 }
+/**
+ * Wraps `amazon-cognito-identity-js` for SRP password sign-in.
+ *
+ * Maps Cognito's `NotAuthorizedException` / `UserNotFoundException` to
+ * `InvalidCredentialsError` and any network/timeout failure to `NetworkError`,
+ * so the login command can render a single actionable message per failure
+ * mode without sniffing Cognito-specific error codes.
+ */
 export class CognitoAuth {
     async signIn(options) {
         const { email, password, environment } = options;
@@ -112,6 +126,13 @@ export class CognitoAuth {
             fullName: fullNameFromPayload(payload) || email,
         };
     }
+    /**
+     * Reuses a cached refresh token to mint a new ID token without prompting.
+     *
+     * Surfaces refresh-token expiry/revocation as `RefreshExpiredError` so the
+     * caller can fall through to the no-credential path. Network/timeout
+     * failures map to `NetworkError`.
+     */
     async refreshSession(options) {
         const { refreshToken, environment, username } = options;
         const { userPoolId, userPoolClientId } = COGNITO_CONFIG[environment];

package/dist/auth/cognito-auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"cognito-auth.js","sourceRoot":"","sources":["../../src/auth/cognito-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,WAAW,EACX,eAAe,GAEhB,MAAM,4BAA4B,CAAA;AAGnC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,YAAY,EACZ,mBAAmB,GACpB,MAAM,aAAa,CAAA;AAyCpB,SAAS,oBAAoB,CAAC,OAAe,EAAkB;IAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,mBAAmB,CAAC,gDAAgD,KAAK,CAAC,MAAM,IAAI,CAAC,CAAA;IACjG,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QAChE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAA;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,mBAAmB,CAC3B,4DAA4D,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACrH,CAAA;IACH,CAAC;AAAA,CACF;AAED,SAAS,mBAAmB,CAAC,OAAuB,EAAU;IAC5D,IAAI,OAAO,CAAC,IAAI;QAAE,OAAO,OAAO,CAAC,IAAI,CAAA;IACrC,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QAC9C,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC5E,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,IAAI,EAAE,CAAA;AAAA,CAC3B;AAQD,MAAM,cAAe,SAAQ,KAAK;IACvB,IAAI,CAAS;IAEtB,YAAY,GAAY,EAAE;QACxB,MAAM,GAAG,GACP,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAC5B,CAAC,CAAE,GAA0D;YAC7D,CAAC,CAAC,SAAS,CAAA;QACf,KAAK,CAAC,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QAClC,IAAI,CAAC,IAAI,GAAG,GAAG,EAAE,IAAI,IAAI,gBAAgB,CAAA;QACzC,IAAI,CAAC,IAAI,GAAG,GAAG,EAAE,IAAI,CAAA;IAAA,CACtB;CACF;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAsB;IAC5D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACzD,MAAM,GAAG,GAAG,KAAyC,CAAA;IACrD,OAAO,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAA;AAAA,CAC5B;AAED,SAAS,sBAAsB,CAAC,KAAc,EAAW;IACvD,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;IACpC,OAAO,IAAI,KAAK,wBAAwB,IAAI,IAAI,KAAK,uBAAuB,CAAA;AAAA,CAC7E;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAU;IACnD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAA;IAClD,MAAM,GAAG,GAAG,KAA6B,CAAA;IACzC,OAAO,GAAG,CAAC,OAAO,IAAI,EAAE,CAAA;AAAA,CACzB;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAW;IACjD,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;IACpC,IAAI,IAAI,KAAK,wBAAwB;QAAE,OAAO,KAAK,CAAA;IACnD,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;IACxD,OAAO,CACL,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAC7C,OAAO,CAAC,QAAQ,CAAC,gCAAgC,CAAC;QAClD,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAC7C,CAAA;AAAA,CACF;AAED,SAAS,uBAAuB,CAAC,KAAc,EAAW;IACxD,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;IACpC,OAAO,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,iBAAiB,IAAI,IAAI,KAAK,cAAc,CAAA;AAAA,CACxF;AAUD,MAAM,OAAO,WAAW;IACtB,KAAK,CAAC,MAAM,CAAC,OAAsB,EAAyB;QAC1D,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;QAChD,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,GAAG,cAAc,CAAC,WAAW,CAAC,CAAA;QAEpE,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC;YACnC,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,gBAAgB;SAC3B,CAAC,CAAA;QACF,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;QACxE,MAAM,qBAAqB,GAAG,IAAI,qBAAqB,CAAC;YACtD,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAA;QAEF,MAAM,OAAO,GAAG,MAAM,IAAI,OAAO,CAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;YACzE,WAAW,CAAC,gBAAgB,CAAC,qBAAqB,EAAE;gBAClD,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;oBACrB,OAAO,CAAC,MAAM,CAAC,CAAA;gBAAA,CAChB;gBACD,SAAS,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC;oBAC3B,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAA;gBAAA,CAC7D;gBACD,mBAAmB,EAAE,GAAG,EAAE,CAAC;oBACzB,MAAM,CACJ,IAAI,uBAAuB,CACzB,iGAAiG,CAClG,CACF,CAAA;gBAAA,CACF;aACF,CAAC,CAAA;QAAA,CACH,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC;YAC3B,IAAI,KAAK,YAAY,uBAAuB;gBAAE,MAAM,KAAK,CAAA;YACzD,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,YAAY,CACpB,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACpF,CAAA;YACH,CAAC;YACD,IAAI,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,uBAAuB,CAC/B,mGAAmG,CACpG,CAAA;YACH,CAAC;YACD,MAAM,IAAI,YAAY,CACpB,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACpF,CAAA;QAAA,CACF,CAAC,CAAA;QAEF,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,CAAA;QAClD,MAAM,YAAY,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,QAAQ,EAAE,CAAA;QACzD,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAA;QAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,IAAI,EAAE,CAAA;QAChC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,uBAAuB,CAAC,0DAA0D,CAAC,CAAA;QAC/F,CAAC;QACD,OAAO;YACL,OAAO;YACP,YAAY;YACZ,MAAM;YACN,QAAQ,EAAE,mBAAmB,CAAC,OAAO,CAAC,IAAI,KAAK;SAChD,CAAA;IAAA,CACF;IASD,KAAK,CAAC,cAAc,CAAC,OAA8B,EAAiC;QAClF,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;QACvD,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,GAAG,cAAc,CAAC,WAAW,CAAC,CAAA;QAEpE,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC;YACnC,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,gBAAgB;SAC3B,CAAC,CAAA;QACF,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC3E,MAAM,mBAAmB,GAAG,IAAI,mBAAmB,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAA;QAEnF,MAAM,OAAO,GAAG,MAAM,IAAI,OAAO,CAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;YACzE,WAAW,CAAC,cAAc,CACxB,mBAAmB,EACnB,CAAC,GAAY,EAAE,MAA0B,EAAE,EAAE,CAAC;gBAC5C,IAAI,GAAG,EAAE,CAAC;oBACR,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAA;oBAC5D,OAAM;gBACR,CAAC;gBACD,OAAO,CAAC,MAAM,CAAC,CAAA;YAAA,CAChB,CACF,CAAA;QAAA,CACF,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC;YAC3B,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,mBAAmB,CAC3B,yEAAyE,CAC1E,CAAA;YACH,CAAC;YACD,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,YAAY,CACpB,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACpF,CAAA;YACH,CAAC;YACD,IAAI,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,mBAAmB,CAAC,0DAA0D,CAAC,CAAA;YAC3F,CAAC;YACD,MAAM,IAAI,YAAY,CACpB,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACpF,CAAA;QAAA,CACF,CAAC,CAAA;QAEF,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,CAAA;QAClD,MAAM,gBAAgB,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE,CAAA;QAC7D,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAA;QACjE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;IAAA,CAC9B;CACF"}
+{"version":3,"file":"cognito-auth.js","sourceRoot":"","sources":["../../src/auth/cognito-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,WAAW,EACX,eAAe,GAEhB,MAAM,4BAA4B,CAAA;AAGnC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,YAAY,EACZ,mBAAmB,GACpB,MAAM,aAAa,CAAA;AAyCpB,SAAS,oBAAoB,CAAC,OAAe;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,mBAAmB,CAAC,gDAAgD,KAAK,CAAC,MAAM,IAAI,CAAC,CAAA;IACjG,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QAChE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAA;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,mBAAmB,CAC3B,4DAA4D,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACrH,CAAA;IACH,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAuB;IAClD,IAAI,OAAO,CAAC,IAAI;QAAE,OAAO,OAAO,CAAC,IAAI,CAAA;IACrC,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QAC9C,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC5E,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,IAAI,EAAE,CAAA;AAC5B,CAAC;AAED;;;;;GAKG;AACH,MAAM,cAAe,SAAQ,KAAK;IACvB,IAAI,CAAS;IAEtB,YAAY,GAAY;QACtB,MAAM,GAAG,GACP,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAC5B,CAAC,CAAE,GAA0D;YAC7D,CAAC,CAAC,SAAS,CAAA;QACf,KAAK,CAAC,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QAClC,IAAI,CAAC,IAAI,GAAG,GAAG,EAAE,IAAI,IAAI,gBAAgB,CAAA;QACzC,IAAI,CAAC,IAAI,GAAG,GAAG,EAAE,IAAI,CAAA;IACvB,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACzD,MAAM,GAAG,GAAG,KAAyC,CAAA;IACrD,OAAO,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAA;AAC7B,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;IACpC,OAAO,IAAI,KAAK,wBAAwB,IAAI,IAAI,KAAK,uBAAuB,CAAA;AAC9E,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAA;IAClD,MAAM,GAAG,GAAG,KAA6B,CAAA;IACzC,OAAO,GAAG,CAAC,OAAO,IAAI,EAAE,CAAA;AAC1B,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;IACpC,IAAI,IAAI,KAAK,wBAAwB;QAAE,OAAO,KAAK,CAAA;IACnD,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;IACxD,OAAO,CACL,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAC7C,OAAO,CAAC,QAAQ,CAAC,gCAAgC,CAAC;QAClD,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAC7C,CAAA;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;IACpC,OAAO,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,iBAAiB,IAAI,IAAI,KAAK,cAAc,CAAA;AACzF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,WAAW;IACtB,KAAK,CAAC,MAAM,CAAC,OAAsB;QACjC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;QAChD,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,GAAG,cAAc,CAAC,WAAW,CAAC,CAAA;QAEpE,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC;YACnC,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,gBAAgB;SAC3B,CAAC,CAAA;QACF,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;QACxE,MAAM,qBAAqB,GAAG,IAAI,qBAAqB,CAAC;YACtD,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAA;QAEF,MAAM,OAAO,GAAG,MAAM,IAAI,OAAO,CAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxE,WAAW,CAAC,gBAAgB,CAAC,qBAAqB,EAAE;gBAClD,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE;oBACpB,OAAO,CAAC,MAAM,CAAC,CAAA;gBACjB,CAAC;gBACD,SAAS,EAAE,CAAC,GAAY,EAAE,EAAE;oBAC1B,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAA;gBAC9D,CAAC;gBACD,mBAAmB,EAAE,GAAG,EAAE;oBACxB,MAAM,CACJ,IAAI,uBAAuB,CACzB,iGAAiG,CAClG,CACF,CAAA;gBACH,CAAC;aACF,CAAC,CAAA;QACJ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC1B,IAAI,KAAK,YAAY,uBAAuB;gBAAE,MAAM,KAAK,CAAA;YACzD,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,YAAY,CACpB,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACpF,CAAA;YACH,CAAC;YACD,IAAI,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,uBAAuB,CAC/B,mGAAmG,CACpG,CAAA;YACH,CAAC;YACD,MAAM,IAAI,YAAY,CACpB,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACpF,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,CAAA;QAClD,MAAM,YAAY,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,QAAQ,EAAE,CAAA;QACzD,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAA;QAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,IAAI,EAAE,CAAA;QAChC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,uBAAuB,CAAC,0DAA0D,CAAC,CAAA;QAC/F,CAAC;QACD,OAAO;YACL,OAAO;YACP,YAAY;YACZ,MAAM;YACN,QAAQ,EAAE,mBAAmB,CAAC,OAAO,CAAC,IAAI,KAAK;SAChD,CAAA;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,cAAc,CAAC,OAA8B;QACjD,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;QACvD,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,GAAG,cAAc,CAAC,WAAW,CAAC,CAAA;QAEpE,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC;YACnC,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,gBAAgB;SAC3B,CAAC,CAAA;QACF,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC3E,MAAM,mBAAmB,GAAG,IAAI,mBAAmB,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAA;QAEnF,MAAM,OAAO,GAAG,MAAM,IAAI,OAAO,CAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxE,WAAW,CAAC,cAAc,CACxB,mBAAmB,EACnB,CAAC,GAAY,EAAE,MAA0B,EAAE,EAAE;gBAC3C,IAAI,GAAG,EAAE,CAAC;oBACR,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAA;oBAC5D,OAAM;gBACR,CAAC;gBACD,OAAO,CAAC,MAAM,CAAC,CAAA;YACjB,CAAC,CACF,CAAA;QACH,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC1B,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,mBAAmB,CAC3B,yEAAyE,CAC1E,CAAA;YACH,CAAC;YACD,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,YAAY,CACpB,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACpF,CAAA;YACH,CAAC;YACD,IAAI,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,mBAAmB,CAAC,0DAA0D,CAAC,CAAA;YAC3F,CAAC;YACD,MAAM,IAAI,YAAY,CACpB,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACpF,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,CAAA;QAClD,MAAM,gBAAgB,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE,CAAA;QAC7D,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAA;QACjE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;IAC/B,CAAC;CACF"}

package/dist/auth/cognito-config.d.ts

@@ -1,4 +1,12 @@
 import type { DeployEnvironment } from '../deployer/index.js';
+/**
+ * Public Cognito + Strata REST constants per `DeployEnvironment`.
+ *
+ * Sibling to the `ENVIRONMENT_URLS` block in `deploy-to-strata.ts`. All values
+ * are public identifiers that the browser app embeds at build time — there is
+ * no secret here. Sourced from `@jigx/configuration/src/config/{dev-us-west-2,
+ * prod-us-east-1}.ts` in the private monorepo.
+ */
 export interface CognitoEnvironmentConfig {
     readonly userPoolId: string;
     readonly userPoolClientId: string;

package/dist/auth/cognito-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cognito-config.d.ts","sourceRoot":"","sources":["../../src/auth/cognito-config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAW7D,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,aAAa,EAAE,WAAW,GAAG,WAAW,CAAA;IACjD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAC/B;AAED,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,iBAAiB,EAAE,wBAAwB,CAe9E,CAAA"}
+{"version":3,"file":"cognito-config.d.ts","sourceRoot":"","sources":["../../src/auth/cognito-config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAE7D;;;;;;;GAOG;AAEH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,aAAa,EAAE,WAAW,GAAG,WAAW,CAAA;IACjD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAC/B;AAED,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,iBAAiB,EAAE,wBAAwB,CA6B9E,CAAA"}

package/dist/auth/cognito-config.js

@@ -6,6 +6,13 @@ export const COGNITO_CONFIG = {
         strataRestUrl: 'https://us-west-2.dev-api.jigx.com/v2.0',
         manageBaseUrl: 'https://manage-dev.jigx.com',
     },
+    'clf-dev': {
+        userPoolId: 'us-west-2_TD7N2X8jI',
+        userPoolClientId: '3fmgcm5oghvkqkve6pdgc4di6t',
+        cognitoRegion: 'us-west-2',
+        strataRestUrl: 'https://dev.jigx-api.dev/v2.0',
+        manageBaseUrl: 'https://manage-dev.jigx.com',
+    },
     prod: {
         userPoolId: 'us-east-1_sPI6yqUOC',
         userPoolClientId: '4d9brj8uakjpdthammcpnofil4',
@@ -13,5 +20,12 @@ export const COGNITO_CONFIG = {
         strataRestUrl: 'https://us-east-1.api.jigx.com/v2.0',
         manageBaseUrl: 'https://manage.jigx.com',
     },
+    'clf-prod': {
+        userPoolId: 'us-east-1_sPI6yqUOC',
+        userPoolClientId: '4d9brj8uakjpdthammcpnofil4',
+        cognitoRegion: 'us-east-1',
+        strataRestUrl: 'https://api.jigx.io/v2.0',
+        manageBaseUrl: 'https://manage.jigx.com',
+    },
 };
 //# sourceMappingURL=cognito-config.js.map

package/dist/auth/cognito-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"cognito-config.js","sourceRoot":"","sources":["../../src/auth/cognito-config.ts"],"names":[],"mappings":"AAmBA,MAAM,CAAC,MAAM,cAAc,GAAwD;IACjF,GAAG,EAAE;QACH,UAAU,EAAE,qBAAqB;QACjC,gBAAgB,EAAE,4BAA4B;QAC9C,aAAa,EAAE,WAAW;QAC1B,aAAa,EAAE,yCAAyC;QACxD,aAAa,EAAE,6BAA6B;KAC7C;IACD,IAAI,EAAE;QACJ,UAAU,EAAE,qBAAqB;QACjC,gBAAgB,EAAE,4BAA4B;QAC9C,aAAa,EAAE,WAAW;QAC1B,aAAa,EAAE,qCAAqC;QACpD,aAAa,EAAE,yBAAyB;KACzC;CACF,CAAA"}
+{"version":3,"file":"cognito-config.js","sourceRoot":"","sources":["../../src/auth/cognito-config.ts"],"names":[],"mappings":"AAmBA,MAAM,CAAC,MAAM,cAAc,GAAwD;IACjF,GAAG,EAAE;QACH,UAAU,EAAE,qBAAqB;QACjC,gBAAgB,EAAE,4BAA4B;QAC9C,aAAa,EAAE,WAAW;QAC1B,aAAa,EAAE,yCAAyC;QACxD,aAAa,EAAE,6BAA6B;KAC7C;IACD,SAAS,EAAE;QACT,UAAU,EAAE,qBAAqB;QACjC,gBAAgB,EAAE,4BAA4B;QAC9C,aAAa,EAAE,WAAW;QAC1B,aAAa,EAAE,+BAA+B;QAC9C,aAAa,EAAE,6BAA6B;KAC7C;IACD,IAAI,EAAE;QACJ,UAAU,EAAE,qBAAqB;QACjC,gBAAgB,EAAE,4BAA4B;QAC9C,aAAa,EAAE,WAAW;QAC1B,aAAa,EAAE,qCAAqC;QACpD,aAAa,EAAE,yBAAyB;KACzC;IACD,UAAU,EAAE;QACV,UAAU,EAAE,qBAAqB;QACjC,gBAAgB,EAAE,4BAA4B;QAC9C,aAAa,EAAE,WAAW;QAC1B,aAAa,EAAE,0BAA0B;QACzC,aAAa,EAAE,yBAAyB;KACzC;CACF,CAAA"}

package/dist/auth/credentials-store.d.ts

@@ -1,7 +1,15 @@
 import type { DeployEnvironment } from '../deployer/index.js';
+/**
+ * Cached Cognito refresh token entry in `~/.jigx/refresh-tokens.json`.
+ *
+ * `expiresAt` is best-effort — refresh tokens have a provider-set TTL we can
+ * only approximate. The file is written with `0o600` inside a `0o700` dir so
+ * the cached identity stays readable only by the owning OS user.
+ */
 export interface UserHomeRefreshToken {
     readonly refreshToken: string;
     readonly userId: string;
+    /** ISO 8601 best-effort timestamp of expiry. */
     readonly expiresAt: string;
 }
 export interface WriteUserHomeOptions {
@@ -10,13 +18,23 @@ export interface WriteUserHomeOptions {
     readonly refreshToken: string;
     readonly userId: string;
     readonly expiresAt: string;
+    /** Test seam — defaults to `os.homedir()`. */
     readonly homeDir?: string;
 }
 export interface ReadUserHomeOptions {
     readonly environment: DeployEnvironment;
     readonly userPoolId: string;
+    /** Test seam — defaults to `os.homedir()`. */
     readonly homeDir?: string;
 }
+/**
+ * Filesystem boundary for `~/.jigx/refresh-tokens.json`.
+ *
+ * Keeps the Cognito refresh token in the user's home directory at `0o600`
+ * inside a `0o700` dir, keyed by `<env>:<userPoolId>` so refresh tokens for
+ * different environments never collide. Surfaces schema-version mismatches as
+ * `CredentialsSchemaError`.
+ */
 export declare class CredentialsStore {
     writeUserHome(options: WriteUserHomeOptions): Promise<void>;
     readUserHome(options: ReadUserHomeOptions): Promise<UserHomeRefreshToken | null>;
@@ -25,10 +43,13 @@ export declare class CredentialsStore {
 export interface ClearUserHomeOptions {
     readonly environment: DeployEnvironment;
     readonly userPoolId: string;
+    /** Test seam — defaults to `os.homedir()`. */
     readonly homeDir?: string;
 }
 export interface ClearUserHomeResult {
+    /** `true` when an entry for this env+pool was actually present and removed. */
     readonly cleared: boolean;
+    /** `true` when the refresh-tokens.json file itself was deleted (no entries remained). */
     readonly fileDeleted: boolean;
 }
 //# sourceMappingURL=credentials-store.d.ts.map

package/dist/auth/credentials-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credentials-store.d.ts","sourceRoot":"","sources":["../../src/auth/credentials-store.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AA4B7D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IAEvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAqED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAA;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAE1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAA;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAE3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAC1B;AAUD,qBAAa,gBAAgB;IACrB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BhE;IAEK,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAKrF;IAEK,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAsB/E;CACF;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAA;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAE3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAElC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IAEzB,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;CAC9B"}
+{"version":3,"file":"credentials-store.d.ts","sourceRoot":"","sources":["../../src/auth/credentials-store.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAqB7D;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,gDAAgD;IAChD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAqED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAA;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,8CAA8C;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAA;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,8CAA8C;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED;;;;;;;GAOG;AACH,qBAAa,gBAAgB;IACrB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BhE;IAEK,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAKrF;IAEK,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAsB/E;CACF;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAA;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,8CAA8C;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,+EAA+E;IAC/E,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,yFAAyF;IACzF,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;CAC9B"}

package/dist/auth/credentials-store.js

@@ -57,9 +57,18 @@ async function readRefreshTokensFile(homeDir) {
 async function ensureRefreshTokensDir(homeDir) {
     const dir = path.join(homeDir, REFRESH_TOKENS_DIR);
     await mkdir(dir, { recursive: true, mode: REFRESH_TOKENS_DIR_MODE });
+    // Enforce mode even if the dir pre-existed with looser perms.
     await chmod(dir, REFRESH_TOKENS_DIR_MODE);
     return dir;
 }
+/**
+ * Filesystem boundary for `~/.jigx/refresh-tokens.json`.
+ *
+ * Keeps the Cognito refresh token in the user's home directory at `0o600`
+ * inside a `0o700` dir, keyed by `<env>:<userPoolId>` so refresh tokens for
+ * different environments never collide. Surfaces schema-version mismatches as
+ * `CredentialsSchemaError`.
+ */
 export class CredentialsStore {
     async writeUserHome(options) {
         const { homeDir = os.homedir(), environment, userPoolId, refreshToken, userId, expiresAt, } = options;
@@ -81,6 +90,7 @@ export class CredentialsStore {
             encoding: 'utf8',
             mode: REFRESH_TOKENS_FILE_MODE,
         });
+        // Ensure mode is enforced even if the file pre-existed with looser perms.
         await chmod(filePath, REFRESH_TOKENS_FILE_MODE);
     }
     async readUserHome(options) {

package/dist/auth/credentials-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"credentials-store.js","sourceRoot":"","sources":["../../src/auth/credentials-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACxE,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAG5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAEpD,SAAS,qBAAqB,CAAC,OAI9B,EAAU;IACT,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,GAAG,OAAO,CAAA;IAChE,IAAI,WAAW,GAAG,eAAe,EAAE,CAAC;QAClC,OAAO,GAAG,QAAQ,oDAAoD,WAAW,OAAO,eAAe,+CAA+C,CAAA;IACxJ,CAAC;IACD,OAAO,GAAG,QAAQ,mCAAmC,WAAW,cAAc,eAAe,IAAI,CAAA;AAAA,CAClG;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAW;IACpD,OAAO,CACL,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAChG,CAAA;AAAA,CACF;AAqBD,MAAM,6BAA6B,GAAG,CAAC,CAAA;AACvC,MAAM,kBAAkB,GAAG,OAAO,CAAA;AAClC,MAAM,uBAAuB,GAAG,KAAK,CAAA;AACrC,MAAM,mBAAmB,GAAG,qBAAqB,CAAA;AACjD,MAAM,wBAAwB,GAAG,KAAK,CAAA;AAEtC,SAAS,iBAAiB,CAAC,OAAe,EAAU;IAClD,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,CAAC,CAAA;AAAA,CACnE;AAED,SAAS,eAAe,CAAC,OAGxB,EAAU;IACT,OAAO,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,UAAU,EAAE,CAAA;AAAA,CACtD;AAED,KAAK,UAAU,qBAAqB,CAAC,OAAe,EAAqC;IACvF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAA;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAA;QACzC,IACE,MAAM,KAAK,IAAI;YACf,OAAO,MAAM,KAAK,QAAQ;YAC1B,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC;YACtB,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,EACrB,CAAC;YACD,MAAM,IAAI,sBAAsB,CAC9B,0BAA0B,iBAAiB,CAAC,OAAO,CAAC,iDAAiD,CACtG,CAAA;QACH,CAAC;QACD,MAAM,IAAI,GAAG,MAA2B,CAAA;QACxC,IAAI,IAAI,CAAC,OAAO,KAAK,6BAA6B,EAAE,CAAC;YACnD,MAAM,IAAI,sBAAsB,CAC9B,qBAAqB,CAAC;gBACpB,IAAI,EAAE,iBAAiB,CAAC,OAAO,CAAC;gBAChC,WAAW,EAAE,IAAI,CAAC,OAAO;gBACzB,eAAe,EAAE,6BAA6B;aAC/C,CAAC,CACH,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,mBAAmB,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QAC3C,IAAI,KAAK,YAAY,sBAAsB;YAAE,MAAM,KAAK,CAAA;QACxD,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YACjC,MAAM,IAAI,sBAAsB,CAC9B,0BAA0B,iBAAiB,CAAC,OAAO,CAAC,uBAAuB,KAAK,CAAC,OAAO,EAAE,CAC3F,CAAA;QACH,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;AAAA,CACF;AAED,KAAK,UAAU,sBAAsB,CAAC,OAAe,EAAmB;IACtE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAA;IAClD,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAA;IAEpE,MAAM,KAAK,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAA;IACzC,OAAO,GAAG,CAAA;AAAA,CACX;AA2BD,MAAM,OAAO,gBAAgB;IAC3B,KAAK,CAAC,aAAa,CAAC,OAA6B,EAAiB;QAChE,MAAM,EACJ,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,EACtB,WAAW,EACX,UAAU,EACV,YAAY,EACZ,MAAM,EACN,SAAS,GACV,GAAG,OAAO,CAAA;QACX,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAA;QAErC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAA;QACrD,MAAM,IAAI,GAAsB;YAC9B,OAAO,EAAE,6BAA6B;YACtC,MAAM,EAAE;gBACN,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,CAAC;gBAC3B,CAAC,eAAe,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE;oBAC9C,YAAY;oBACZ,MAAM;oBACN,SAAS;iBACV;aACF;SACF,CAAA;QACD,MAAM,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YAC9D,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,wBAAwB;SAC/B,CAAC,CAAA;QAEF,MAAM,KAAK,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAA;IAAA,CAChD;IAED,KAAK,CAAC,YAAY,CAAC,OAA4B,EAAwC;QACrF,MAAM,EAAE,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,OAAO,CAAA;QACnE,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAA;QACjD,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAA;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,IAAI,CAAA;IAAA,CACzE;IAED,KAAK,CAAC,aAAa,CAAC,OAA6B,EAAgC;QAC/E,MAAM,EAAE,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,OAAO,CAAA;QACnE,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAA;QACjD,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;QACxD,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAA;QACxD,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;QAExE,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,SAAS,EAAE,GAAG,IAAI,CAAC,MAAM,CAAA;QAErD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;QAC3C,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAA;QAC7C,CAAC;QAED,MAAM,IAAI,GAAsB,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;QAC7F,MAAM,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YAC9D,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,wBAAwB;SAC/B,CAAC,CAAA;QACF,MAAM,KAAK,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAA;QAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;IAAA,CAC7C;CACF"}
+{"version":3,"file":"credentials-store.js","sourceRoot":"","sources":["../../src/auth/credentials-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACxE,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAG5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAEpD,SAAS,qBAAqB,CAAC,OAI9B;IACC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,GAAG,OAAO,CAAA;IAChE,IAAI,WAAW,GAAG,eAAe,EAAE,CAAC;QAClC,OAAO,GAAG,QAAQ,oDAAoD,WAAW,OAAO,eAAe,+CAA+C,CAAA;IACxJ,CAAC;IACD,OAAO,GAAG,QAAQ,mCAAmC,WAAW,cAAc,eAAe,IAAI,CAAA;AACnG,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,OAAO,CACL,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAChG,CAAA;AACH,CAAC;AAqBD,MAAM,6BAA6B,GAAG,CAAC,CAAA;AACvC,MAAM,kBAAkB,GAAG,OAAO,CAAA;AAClC,MAAM,uBAAuB,GAAG,KAAK,CAAA;AACrC,MAAM,mBAAmB,GAAG,qBAAqB,CAAA;AACjD,MAAM,wBAAwB,GAAG,KAAK,CAAA;AAEtC,SAAS,iBAAiB,CAAC,OAAe;IACxC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,CAAC,CAAA;AACpE,CAAC;AAED,SAAS,eAAe,CAAC,OAGxB;IACC,OAAO,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,UAAU,EAAE,CAAA;AACvD,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,OAAe;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAA;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAA;QACzC,IACE,MAAM,KAAK,IAAI;YACf,OAAO,MAAM,KAAK,QAAQ;YAC1B,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC;YACtB,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,EACrB,CAAC;YACD,MAAM,IAAI,sBAAsB,CAC9B,0BAA0B,iBAAiB,CAAC,OAAO,CAAC,iDAAiD,CACtG,CAAA;QACH,CAAC;QACD,MAAM,IAAI,GAAG,MAA2B,CAAA;QACxC,IAAI,IAAI,CAAC,OAAO,KAAK,6BAA6B,EAAE,CAAC;YACnD,MAAM,IAAI,sBAAsB,CAC9B,qBAAqB,CAAC;gBACpB,IAAI,EAAE,iBAAiB,CAAC,OAAO,CAAC;gBAChC,WAAW,EAAE,IAAI,CAAC,OAAO;gBACzB,eAAe,EAAE,6BAA6B;aAC/C,CAAC,CACH,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,mBAAmB,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QAC3C,IAAI,KAAK,YAAY,sBAAsB;YAAE,MAAM,KAAK,CAAA;QACxD,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YACjC,MAAM,IAAI,sBAAsB,CAC9B,0BAA0B,iBAAiB,CAAC,OAAO,CAAC,uBAAuB,KAAK,CAAC,OAAO,EAAE,CAC3F,CAAA;QACH,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,OAAe;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAA;IAClD,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAA;IACpE,8DAA8D;IAC9D,MAAM,KAAK,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAA;IACzC,OAAO,GAAG,CAAA;AACZ,CAAC;AAmBD;;;;;;;GAOG;AACH,MAAM,OAAO,gBAAgB;IAC3B,KAAK,CAAC,aAAa,CAAC,OAA6B;QAC/C,MAAM,EACJ,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,EACtB,WAAW,EACX,UAAU,EACV,YAAY,EACZ,MAAM,EACN,SAAS,GACV,GAAG,OAAO,CAAA;QACX,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAA;QAErC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAA;QACrD,MAAM,IAAI,GAAsB;YAC9B,OAAO,EAAE,6BAA6B;YACtC,MAAM,EAAE;gBACN,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,CAAC;gBAC3B,CAAC,eAAe,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE;oBAC9C,YAAY;oBACZ,MAAM;oBACN,SAAS;iBACV;aACF;SACF,CAAA;QACD,MAAM,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YAC9D,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,wBAAwB;SAC/B,CAAC,CAAA;QACF,0EAA0E;QAC1E,MAAM,KAAK,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAA;IACjD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAA4B;QAC7C,MAAM,EAAE,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,OAAO,CAAA;QACnE,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAA;QACjD,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAA;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,IAAI,CAAA;IAC1E,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAA6B;QAC/C,MAAM,EAAE,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,OAAO,CAAA;QACnE,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAA;QACjD,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;QACxD,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAA;QACxD,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;QAExE,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,SAAS,EAAE,GAAG,IAAI,CAAC,MAAM,CAAA;QAErD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;QAC3C,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAA;QAC7C,CAAC;QAED,MAAM,IAAI,GAAsB,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;QAC7F,MAAM,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YAC9D,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,wBAAwB;SAC/B,CAAC,CAAA;QACF,MAAM,KAAK,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAA;QAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;IAC9C,CAAC;CACF"}

package/dist/auth/errors.d.ts

@@ -1,3 +1,9 @@
+/**
+ * Typed errors surfaced by the auth/ modules.
+ *
+ * Callers branch on these to render actionable messages rather than parse
+ * strings.
+ */
 export declare class InvalidCredentialsError extends Error {
     constructor(message: string);
 }
@@ -14,9 +20,19 @@ export declare class AuthHttpError extends Error {
 export declare class CredentialsSchemaError extends Error {
     constructor(message: string);
 }
+/**
+ * Cognito refused to refresh the cached session — the refresh token has
+ * expired or been revoked. Callers fall through to the no-credential path
+ * (TTY → re-prompt login; non-TTY → error).
+ */
 export declare class RefreshExpiredError extends Error {
     constructor(message: string);
 }
+/**
+ * The Cognito ID token was JWT-shaped but the payload section couldn't be
+ * decoded as base64url JSON. Distinguishes a malformed token from a
+ * structurally-valid token missing the `sub` claim.
+ */
 export declare class MalformedTokenError extends Error {
     constructor(message: string);
 }

package/dist/auth/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/auth/errors.ts"],"names":[],"mappings":"AAOA,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED,qBAAa,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IAEvB,YAAY,OAAO,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAIzE;CACF;AAED,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAOD,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAOD,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/auth/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED,qBAAa,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IAEvB,YAAY,OAAO,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAIzE;CACF;AAED,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED;;;;GAIG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED;;;;GAIG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF"}

package/dist/auth/errors.js

@@ -1,3 +1,9 @@
+/**
+ * Typed errors surfaced by the auth/ modules.
+ *
+ * Callers branch on these to render actionable messages rather than parse
+ * strings.
+ */
 export class InvalidCredentialsError extends Error {
     constructor(message) {
         super(message);
@@ -24,12 +30,22 @@ export class CredentialsSchemaError extends Error {
         this.name = 'CredentialsSchemaError';
     }
 }
+/**
+ * Cognito refused to refresh the cached session — the refresh token has
+ * expired or been revoked. Callers fall through to the no-credential path
+ * (TTY → re-prompt login; non-TTY → error).
+ */
 export class RefreshExpiredError extends Error {
     constructor(message) {
         super(message);
         this.name = 'RefreshExpiredError';
     }
 }
+/**
+ * The Cognito ID token was JWT-shaped but the payload section couldn't be
+ * decoded as base64url JSON. Distinguishes a malformed token from a
+ * structurally-valid token missing the `sub` claim.
+ */
 export class MalformedTokenError extends Error {
     constructor(message) {
         super(message);

package/dist/auth/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/auth/errors.ts"],"names":[],"mappings":"AAOA,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe,EAAE;QAC3B,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAA;IAAA,CACtC;CACF;AAED,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAe,EAAE;QAC3B,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;IAAA,CAC3B;CACF;AAED,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,MAAM,CAAQ;IAEvB,YAAY,OAA8D,EAAE;QAC1E,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACtB,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;QAC3B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;IAAA,CAC7B;CACF;AAED,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C,YAAY,OAAe,EAAE;QAC3B,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAA;IAAA,CACrC;CACF;AAOD,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAe,EAAE;QAC3B,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;IAAA,CAClC;CACF;AAOD,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAe,EAAE;QAC3B,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;IAAA,CAClC;CACF"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/auth/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAA;IACvC,CAAC;CACF;AAED,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;IAC5B,CAAC;CACF;AAED,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,MAAM,CAAQ;IAEvB,YAAY,OAA8D;QACxE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACtB,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;QAC3B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;IAC9B,CAAC;CACF;AAED,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAA;IACtC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;IACnC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;IACnC,CAAC;CACF"}

package/dist/auth/identity-client.d.ts

@@ -13,6 +13,15 @@ export interface GetMeResult {
     readonly email: string;
     readonly organizations: readonly OrganizationSummary[];
 }
+/**
+ * One-method Strata REST client for `GET /strata/users/me`.
+ *
+ * Sends a Cognito idToken as `Authorization: Bearer <idToken>` plus the
+ * `x-client-type: sdk-tools` marker. Returns the User identity and the
+ * Organizations the User can access on the chosen environment. Surfaces
+ * 4xx/5xx as `AuthHttpError` (status preserved) and network failures as
+ * `NetworkError` so callers can render actionable errors.
+ */
 export declare class IdentityClient {
     getMe(options: GetMeOptions): Promise<GetMeResult>;
 }

package/dist/auth/identity-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identity-client.d.ts","sourceRoot":"","sources":["../../src/auth/identity-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAI7D,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAA;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,aAAa,EAAE,SAAS,mBAAmB,EAAE,CAAA;CACvD;AAiDD,qBAAa,cAAc;IACnB,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CA8CvD;CACF"}
+{"version":3,"file":"identity-client.d.ts","sourceRoot":"","sources":["../../src/auth/identity-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAI7D,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAA;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,aAAa,EAAE,SAAS,mBAAmB,EAAE,CAAA;CACvD;AAwCD;;;;;;;;GAQG;AACH,qBAAa,cAAc;IACnB,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CA8CvD;CACF"}

package/dist/auth/identity-client.js

@@ -22,6 +22,15 @@ async function readBody(response) {
         return '';
     }
 }
+/**
+ * One-method Strata REST client for `GET /strata/users/me`.
+ *
+ * Sends a Cognito idToken as `Authorization: Bearer <idToken>` plus the
+ * `x-client-type: sdk-tools` marker. Returns the User identity and the
+ * Organizations the User can access on the chosen environment. Surfaces
+ * 4xx/5xx as `AuthHttpError` (status preserved) and network failures as
+ * `NetworkError` so callers can render actionable errors.
+ */
 export class IdentityClient {
     async getMe(options) {
         const { environment, idToken } = options;

package/dist/auth/identity-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"identity-client.js","sourceRoot":"","sources":["../../src/auth/identity-client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAmCzD,MAAM,kBAAkB,GAAG,EAAE,eAAe,EAAE,WAAW,EAAW,CAAA;AAEpE,SAAS,KAAK,CAAC,aAAqB,EAAU;IAC5C,OAAO,GAAG,aAAa,kBAAkB,CAAA;AAAA,CAC1C;AAED,SAAS,eAAe,CAAC,MAAqB,EAAsB;IAClE,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;IACrF,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAA;IAC7B,IAAI,MAAM,CAAC,IAAI;QAAE,OAAO,MAAM,CAAC,IAAI,CAAA;IACnC,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,KAAK,CAAA;IACrC,OAAO,SAAS,CAAA;AAAA,CACjB;AAED,KAAK,UAAU,QAAQ,CAAC,QAAkB,EAAmB;IAC3D,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AAAA,CACF;AAWD,MAAM,OAAO,cAAc;IACzB,KAAK,CAAC,KAAK,CAAC,OAAqB,EAAwB;QACvD,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,OAAO,CAAA;QACxC,MAAM,EAAE,aAAa,EAAE,GAAG,cAAc,CAAC,WAAW,CAAC,CAAA;QAErD,IAAI,QAAkB,CAAA;QACtB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE;gBAC3C,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,EAAE,EAAE,GAAG,kBAAkB,EAAE;aACvE,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,YAAY,CACpB,yBAAyB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAClF,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACrC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,aAAa,CAAC;gBACtB,OAAO,EAAE,iBAAiB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;gBAC1F,MAAM,EAAE,QAAQ,CAAC,MAAM;aACxB,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAkB,CAAA;QAC9D,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,aAAa,CAAC;gBACtB,OAAO,EAAE,qDAAqD,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;gBAClF,MAAM,EAAE,QAAQ,CAAC,MAAM;aACxB,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;QACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,aAAa,CAAC;gBACtB,OAAO,EAAE,4EAA4E,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;gBACzG,MAAM,EAAE,QAAQ,CAAC,MAAM;aACxB,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,IAAI,EAAE,CAAA;QAC1C,MAAM,aAAa,GAA0B,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;aACjE,MAAM,CAAC,CAAC,KAAK,EAAuC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;aAC1F,GAAG,CAAC,CAAC,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/B,cAAc;YACd,gBAAgB,EAAE,GAAG,CAAC,IAAI;SAC3B,CAAC,CAAC,CAAA;QACL,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,aAAa,EAAE,CAAA;IAAA,CACrF;CACF"}
+{"version":3,"file":"identity-client.js","sourceRoot":"","sources":["../../src/auth/identity-client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAmCzD,MAAM,kBAAkB,GAAG,EAAE,eAAe,EAAE,WAAW,EAAW,CAAA;AAEpE,SAAS,KAAK,CAAC,aAAqB;IAClC,OAAO,GAAG,aAAa,kBAAkB,CAAA;AAC3C,CAAC;AAED,SAAS,eAAe,CAAC,MAAqB;IAC5C,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;IACrF,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAA;IAC7B,IAAI,MAAM,CAAC,IAAI;QAAE,OAAO,MAAM,CAAC,IAAI,CAAA;IACnC,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,KAAK,CAAA;IACrC,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAkB;IACxC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,cAAc;IACzB,KAAK,CAAC,KAAK,CAAC,OAAqB;QAC/B,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,OAAO,CAAA;QACxC,MAAM,EAAE,aAAa,EAAE,GAAG,cAAc,CAAC,WAAW,CAAC,CAAA;QAErD,IAAI,QAAkB,CAAA;QACtB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE;gBAC3C,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,EAAE,EAAE,GAAG,kBAAkB,EAAE;aACvE,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,YAAY,CACpB,yBAAyB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAClF,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACrC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,aAAa,CAAC;gBACtB,OAAO,EAAE,iBAAiB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;gBAC1F,MAAM,EAAE,QAAQ,CAAC,MAAM;aACxB,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAkB,CAAA;QAC9D,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,aAAa,CAAC;gBACtB,OAAO,EAAE,qDAAqD,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;gBAClF,MAAM,EAAE,QAAQ,CAAC,MAAM;aACxB,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;QACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,aAAa,CAAC;gBACtB,OAAO,EAAE,4EAA4E,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;gBACzG,MAAM,EAAE,QAAQ,CAAC,MAAM;aACxB,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,IAAI,EAAE,CAAA;QAC1C,MAAM,aAAa,GAA0B,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;aACjE,MAAM,CAAC,CAAC,KAAK,EAAuC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;aAC1F,GAAG,CAAC,CAAC,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/B,cAAc;YACd,gBAAgB,EAAE,GAAG,CAAC,IAAI;SAC3B,CAAC,CAAC,CAAA;QACL,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,aAAa,EAAE,CAAA;IACtF,CAAC;CACF"}

package/dist/auth/jigx-config-store.d.ts

@@ -1,4 +1,9 @@
 import type { DeployEnvironment } from '../deployer/index.js';
+/**
+ * Per-environment binding stored in `<projectRoot>/jigx.json`.
+ *
+ * Holds only non-secret metadata so the file is intentionally committable.
+ */
 export interface JigxConfigEnvironment {
     readonly organizationId: string;
 }
@@ -18,6 +23,14 @@ export interface JigxConfig {
     readonly version: number;
     readonly environments: Partial<Record<DeployEnvironment, JigxConfigEnvironment>>;
 }
+/**
+ * Filesystem boundary for `<projectRoot>/jigx.json`.
+ *
+ * The file holds the per-environment Organization binding and is intentionally
+ * committable — no secrets, default file permissions. Surfaces schema-version
+ * mismatches as `CredentialsSchemaError` so a future-newer file fails loudly
+ * instead of silently mis-parsing.
+ */
 export declare class JigxConfigStore {
     read(options: ReadOptions): Promise<JigxConfig | null>;
     getEnvironment(options: GetEnvironmentOptions): Promise<JigxConfigEnvironment | null>;

package/dist/auth/jigx-config-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jigx-config-store.d.ts","sourceRoot":"","sources":["../../src/auth/jigx-config-store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAQ7D,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAChC;AAoED,UAAU,WAAW;IACnB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAED,UAAU,qBAAqB;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAA;CACxC;AAED,UAAU,qBAAqB;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAA;IACvC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAChC;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,CAAC,CAAA;CACjF;AAUD,qBAAa,eAAe;IACpB,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAG3D;IAEK,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAK1F;IAEK,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAWlE;CACF"}
+{"version":3,"file":"jigx-config-store.d.ts","sourceRoot":"","sources":["../../src/auth/jigx-config-store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAG7D;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAChC;AAoED,UAAU,WAAW;IACnB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAED,UAAU,qBAAqB;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAA;CACxC;AAED,UAAU,qBAAqB;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAA;IACvC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAChC;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,CAAC,CAAA;CACjF;AAED;;;;;;;GAOG;AACH,qBAAa,eAAe;IACpB,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAG3D;IAEK,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAK1F;IAEK,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAWlE;CACF"}

package/dist/auth/jigx-config-store.js

@@ -48,6 +48,14 @@ async function readJigxConfigFile(projectRoot) {
         throw error;
     }
 }
+/**
+ * Filesystem boundary for `<projectRoot>/jigx.json`.
+ *
+ * The file holds the per-environment Organization binding and is intentionally
+ * committable — no secrets, default file permissions. Surfaces schema-version
+ * mismatches as `CredentialsSchemaError` so a future-newer file fails loudly
+ * instead of silently mis-parsing.
+ */
 export class JigxConfigStore {
     async read(options) {
         const { projectRoot } = options;

package/dist/auth/jigx-config-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"jigx-config-store.js","sourceRoot":"","sources":["../../src/auth/jigx-config-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACtD,OAAO,IAAI,MAAM,WAAW,CAAA;AAG5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAWpD,MAAM,0BAA0B,GAAG,CAAC,CAAA;AACpC,MAAM,gBAAgB,GAAG,WAAW,CAAA;AAOpC,SAAS,cAAc,CAAC,WAAmB,EAAU;IACnD,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAA;AAAA,CAChD;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAW;IACpD,OAAO,CACL,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAChG,CAAA;AAAA,CACF;AAED,SAAS,qBAAqB,CAAC,OAI9B,EAAU;IACT,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,GAAG,OAAO,CAAA;IAChE,IAAI,WAAW,GAAG,eAAe,EAAE,CAAC;QAClC,OAAO,GAAG,QAAQ,oDAAoD,WAAW,OAAO,eAAe,+CAA+C,CAAA;IACxJ,CAAC;IACD,OAAO,GAAG,QAAQ,mCAAmC,WAAW,cAAc,eAAe,IAAI,CAAA;AAAA,CAClG;AAED,KAAK,UAAU,kBAAkB,CAAC,WAAmB,EAAkC;IACrF,MAAM,QAAQ,GAAG,cAAc,CAAC,WAAW,CAAC,CAAA;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAA;QACzC,IACE,MAAM,KAAK,IAAI;YACf,OAAO,MAAM,KAAK,QAAQ;YAC1B,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC;YACtB,CAAC,CAAC,cAAc,IAAI,MAAM,CAAC,EAC3B,CAAC;YACD,MAAM,IAAI,sBAAsB,CAC9B,GAAG,QAAQ,uDAAuD,CACnE,CAAA;QACH,CAAC;QACD,MAAM,IAAI,GAAG,MAAwB,CAAA;QACrC,IAAI,IAAI,CAAC,OAAO,KAAK,0BAA0B,EAAE,CAAC;YAChD,MAAM,IAAI,sBAAsB,CAC9B,qBAAqB,CAAC;gBACpB,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,IAAI,CAAC,OAAO;gBACzB,eAAe,EAAE,0BAA0B;aAC5C,CAAC,CACH,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,mBAAmB,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QAC3C,IAAI,KAAK,YAAY,sBAAsB;YAAE,MAAM,KAAK,CAAA;QACxD,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YACjC,MAAM,IAAI,sBAAsB,CAAC,GAAG,QAAQ,uBAAuB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;QACrF,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;AAAA,CACF;AA8BD,MAAM,OAAO,eAAe;IAC1B,KAAK,CAAC,IAAI,CAAC,OAAoB,EAA8B;QAC3D,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;QAC/B,OAAO,kBAAkB,CAAC,WAAW,CAAC,CAAA;IAAA,CACvC;IAED,KAAK,CAAC,cAAc,CAAC,OAA8B,EAAyC;QAC1F,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;QAC5C,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAA;QAClD,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAA;QACtB,OAAO,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,IAAI,CAAA;IAAA,CAC9C;IAED,KAAK,CAAC,cAAc,CAAC,OAA8B,EAAiB;QAClE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,OAAO,CAAA;QAC5D,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAA;QACtD,MAAM,IAAI,GAAmB;YAC3B,OAAO,EAAE,0BAA0B;YACnC,YAAY,EAAE;gBACZ,GAAG,CAAC,QAAQ,EAAE,YAAY,IAAI,EAAE,CAAC;gBACjC,CAAC,WAAW,CAAC,EAAE,EAAE,cAAc,EAAE;aAClC;SACF,CAAA;QACD,MAAM,SAAS,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAAA,CAC3F;CACF"}
+{"version":3,"file":"jigx-config-store.js","sourceRoot":"","sources":["../../src/auth/jigx-config-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACtD,OAAO,IAAI,MAAM,WAAW,CAAA;AAG5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAWpD,MAAM,0BAA0B,GAAG,CAAC,CAAA;AACpC,MAAM,gBAAgB,GAAG,WAAW,CAAA;AAOpC,SAAS,cAAc,CAAC,WAAmB;IACzC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAA;AACjD,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,OAAO,CACL,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAChG,CAAA;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,OAI9B;IACC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,GAAG,OAAO,CAAA;IAChE,IAAI,WAAW,GAAG,eAAe,EAAE,CAAC;QAClC,OAAO,GAAG,QAAQ,oDAAoD,WAAW,OAAO,eAAe,+CAA+C,CAAA;IACxJ,CAAC;IACD,OAAO,GAAG,QAAQ,mCAAmC,WAAW,cAAc,eAAe,IAAI,CAAA;AACnG,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,WAAmB;IACnD,MAAM,QAAQ,GAAG,cAAc,CAAC,WAAW,CAAC,CAAA;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAA;QACzC,IACE,MAAM,KAAK,IAAI;YACf,OAAO,MAAM,KAAK,QAAQ;YAC1B,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC;YACtB,CAAC,CAAC,cAAc,IAAI,MAAM,CAAC,EAC3B,CAAC;YACD,MAAM,IAAI,sBAAsB,CAC9B,GAAG,QAAQ,uDAAuD,CACnE,CAAA;QACH,CAAC;QACD,MAAM,IAAI,GAAG,MAAwB,CAAA;QACrC,IAAI,IAAI,CAAC,OAAO,KAAK,0BAA0B,EAAE,CAAC;YAChD,MAAM,IAAI,sBAAsB,CAC9B,qBAAqB,CAAC;gBACpB,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,IAAI,CAAC,OAAO;gBACzB,eAAe,EAAE,0BAA0B;aAC5C,CAAC,CACH,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,mBAAmB,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QAC3C,IAAI,KAAK,YAAY,sBAAsB;YAAE,MAAM,KAAK,CAAA;QACxD,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YACjC,MAAM,IAAI,sBAAsB,CAAC,GAAG,QAAQ,uBAAuB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;QACrF,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAsBD;;;;;;;GAOG;AACH,MAAM,OAAO,eAAe;IAC1B,KAAK,CAAC,IAAI,CAAC,OAAoB;QAC7B,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;QAC/B,OAAO,kBAAkB,CAAC,WAAW,CAAC,CAAA;IACxC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAA8B;QACjD,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;QAC5C,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAA;QAClD,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAA;QACtB,OAAO,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,IAAI,CAAA;IAC/C,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAA8B;QACjD,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,OAAO,CAAA;QAC5D,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAA;QACtD,MAAM,IAAI,GAAmB;YAC3B,OAAO,EAAE,0BAA0B;YACnC,YAAY,EAAE;gBACZ,GAAG,CAAC,QAAQ,EAAE,YAAY,IAAI,EAAE,CAAC;gBACjC,CAAC,WAAW,CAAC,EAAE,EAAE,cAAc,EAAE;aAClC;SACF,CAAA;QACD,MAAM,SAAS,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC5F,CAAC;CACF"}

package/dist/builder/build.d.ts

@@ -1,4 +1,5 @@
 export interface BuildOptions {
+    /** Absolute path of the Application project (the directory containing `src/app.ts`). */
     readonly projectRoot: string;
 }
 export interface BuildResult {
@@ -8,5 +9,12 @@ export interface BuildResult {
     readonly outputSizeBytes: number;
     readonly buildTimeMs: number;
 }
+/**
+ * Builds an Application project's `src/app.ts` and writes the deploy artifact
+ * `build/output.json` plus the canonical Builder folder layout under
+ * `build/app/` (`index.jigx` + 9 folder kinds).
+ *
+ * Expects a named export `app` whose `.build()` returns the Application config object.
+ */
 export declare function build(options: BuildOptions): Promise<BuildResult>;
 //# sourceMappingURL=build.d.ts.map

package/dist/builder/build.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../src/builder/build.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,YAAY;IAE3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;IACpC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAaD,wBAAsB,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAiDvE"}
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../src/builder/build.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,YAAY;IAC3B,wFAAwF;IACxF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;IACpC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAMD;;;;;;GAMG;AACH,wBAAsB,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAiDvE"}

package/dist/builder/build.js

@@ -3,6 +3,13 @@ import path from 'node:path';
 import { pathToFileURL } from 'node:url';
 import { tsImport } from 'tsx/esm/api';
 import { extractToFolder, isPlainObject } from './extract-to-folder.js';
+/**
+ * Builds an Application project's `src/app.ts` and writes the deploy artifact
+ * `build/output.json` plus the canonical Builder folder layout under
+ * `build/app/` (`index.jigx` + 9 folder kinds).
+ *
+ * Expects a named export `app` whose `.build()` returns the Application config object.
+ */
 export async function build(options) {
     const { projectRoot } = options;
     const startTime = Date.now();

package/dist/builder/build.js.map

@@ -1 +1 @@
-{"version":3,"file":"build.js","sourceRoot":"","sources":["../../src/builder/build.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AA0BvE,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,OAAqB,EAAwB;IACvE,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;IAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;IAE5D,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,mCAAmC,SAAS,wEAAwE,CACrH,CAAA;IACH,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAc,CAAA;IAC/F,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAA;IAC9B,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CACb,sBAAsB,SAAS,6FAA6F,CAC7H,CAAA;IACH,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAA;IACpC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,+CAA+C,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,WAAW,EAAE,CAC3G,CAAA;IACH,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAA;IAEzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;IAChD,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE1C,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;IACzD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IACjD,MAAM,SAAS,CAAC,cAAc,EAAE,UAAU,EAAE,MAAM,CAAC,CAAA;IAEnD,MAAM,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IACtD,MAAM,aAAa,GAAG,MAAM,eAAe,CAAC;QAC1C,WAAW,EAAE,KAAK;QAClB,cAAc,EAAE,mBAAmB;KACpC,CAAC,CAAA;IAEF,OAAO;QACL,cAAc;QACd,mBAAmB;QACnB,cAAc,EAAE,aAAa,CAAC,KAAK,CAAC,MAAM;QAC1C,eAAe,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC;QACtD,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;KACpC,CAAA;AAAA,CACF"}
+{"version":3,"file":"build.js","sourceRoot":"","sources":["../../src/builder/build.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAmBvE;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,OAAqB;IAC/C,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;IAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;IAE5D,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,mCAAmC,SAAS,wEAAwE,CACrH,CAAA;IACH,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAc,CAAA;IAC/F,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAA;IAC9B,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CACb,sBAAsB,SAAS,6FAA6F,CAC7H,CAAA;IACH,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAA;IACpC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,+CAA+C,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,WAAW,EAAE,CAC3G,CAAA;IACH,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAA;IAEzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;IAChD,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE1C,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;IACzD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IACjD,MAAM,SAAS,CAAC,cAAc,EAAE,UAAU,EAAE,MAAM,CAAC,CAAA;IAEnD,MAAM,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IACtD,MAAM,aAAa,GAAG,MAAM,eAAe,CAAC;QAC1C,WAAW,EAAE,KAAK;QAClB,cAAc,EAAE,mBAAmB;KACpC,CAAC,CAAA;IAEF,OAAO;QACL,cAAc;QACd,mBAAmB;QACnB,cAAc,EAAE,aAAa,CAAC,KAAK,CAAC,MAAM;QAC1C,eAAe,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC;QACtD,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;KACpC,CAAA;AACH,CAAC"}

package/dist/builder/extract-to-folder.d.ts

@@ -1,11 +1,29 @@
 interface ExtractToFolderOptions {
+    /** Built Application object (typically from `ApplicationBuilder.build()`). */
     readonly application: Record<string, unknown>;
+    /** Absolute path of the destination directory; created if missing. */
     readonly destinationDir: string;
 }
 interface ExtractToFolderResult {
+    /** Absolute paths of every file written, including `index.jigx`. */
     readonly files: readonly string[];
 }
 export declare function isPlainObject(value: unknown): value is Record<string, unknown>;
+/**
+ * Decompose a built Application into the canonical Builder folder layout.
+ *
+ * Mirrors `@jigx/management-shared`'s `downloadUserSolution` decomposition so
+ * the output opens in the Builder UI without surprises. Pure dependencies
+ * (`yaml`, `node:fs/promises`, `node:path`); no `@jigx/management-shared`,
+ * `@jigx/runtime`, or `@jigx/agent-service` imports.
+ *
+ * Each folder kind is always created. Each entity writes to
+ * `{folderKind}/{id}.jigx` with its `{kind}Id` stripped when it matches the
+ * filename. `scripts.expressions[name]` writes raw to
+ * `scripts/expressions/{name}` (the key already includes `.js`). `index.jigx`
+ * holds the remaining root metadata after folder kinds, `$private`, and
+ * `runtimeSchemaVersion` are removed.
+ */
 export declare function extractToFolder(options: ExtractToFolderOptions): Promise<ExtractToFolderResult>;
 export {};
 //# sourceMappingURL=extract-to-folder.d.ts.map

package/dist/builder/extract-to-folder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extract-to-folder.d.ts","sourceRoot":"","sources":["../../src/builder/extract-to-folder.ts"],"names":[],"mappings":"AA8FA,UAAU,sBAAsB;IAE9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAE7C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAChC;AAED,UAAU,qBAAqB;IAE7B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAClC;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAE9E;AAmCD,wBAAsB,eAAe,CACnC,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,qBAAqB,CAAC,CA0EhC"}
+{"version":3,"file":"extract-to-folder.d.ts","sourceRoot":"","sources":["../../src/builder/extract-to-folder.ts"],"names":[],"mappings":"AA8FA,UAAU,sBAAsB;IAC9B,8EAA8E;IAC9E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7C,sEAAsE;IACtE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAChC;AAED,UAAU,qBAAqB;IAC7B,oEAAoE;IACpE,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAClC;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAE9E;AAoBD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,qBAAqB,CAAC,CA0EhC"}