@m2-ai/lattice-cli 0.0.0-stage → 0.8.7

package/dist/apply-merge.test.js

@@ -0,0 +1,123 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs_1 = require("fs");
+const os_1 = require("os");
+const path_1 = require("path");
+const node_test_1 = __importDefault(require("node:test"));
+const strict_1 = __importDefault(require("node:assert/strict"));
+const index_1 = require("./index");
+const originalLog = console.log;
+const originalError = console.error;
+function suppressConsole() {
+    console.log = () => { };
+    console.error = () => { };
+}
+function restoreConsole() {
+    console.log = originalLog;
+    console.error = originalError;
+}
+function createTempRepo(projectType = 'nextjs', strictnessPreset = 'startup') {
+    const dir = (0, fs_1.mkdtempSync)((0, path_1.join)((0, os_1.tmpdir)(), `lattice-apply-${projectType}-`));
+    const latticeDir = (0, path_1.join)(dir, '.lattice');
+    (0, fs_1.mkdirSync)(latticeDir, { recursive: true });
+    (0, fs_1.writeFileSync)((0, path_1.join)(latticeDir, 'config.json'), JSON.stringify({
+        projectType,
+        strictnessPreset,
+    }, null, 2));
+    return dir;
+}
+async function withTempRepo(fn, projectType = 'nextjs', strictnessPreset = 'startup') {
+    const dir = createTempRepo(projectType, strictnessPreset);
+    const previousCwd = process.cwd();
+    suppressConsole();
+    process.chdir(dir);
+    try {
+        await fn(dir);
+    }
+    finally {
+        process.chdir(previousCwd);
+        restoreConsole();
+        (0, fs_1.rmSync)(dir, { recursive: true, force: true });
+    }
+}
+(0, node_test_1.default)('update/apply preserves user content around generated instruction files', async () => {
+    await withTempRepo(async (dir) => {
+        await (0, index_1.generate)('.lattice/pack');
+        await (0, index_1.apply)('.lattice/pack', '.');
+        const filesToCustomize = [
+            'AGENTS.md',
+            'CLAUDE.md',
+            'docs/rules/codex.md',
+            '.cursor/rules.md',
+            '.github/copilot-instructions.md',
+            '.github/instructions/lattice-core.instructions.md',
+        ];
+        for (const file of filesToCustomize) {
+            const filePath = (0, path_1.join)(dir, file);
+            const current = (0, fs_1.readFileSync)(filePath, 'utf-8');
+            (0, fs_1.writeFileSync)(filePath, `# Team note for ${file}\n\n${current}\n\n# Footer note for ${file}\n`, 'utf-8');
+        }
+        await (0, index_1.generate)('.lattice/pack-refresh');
+        await (0, index_1.apply)('.lattice/pack-refresh', '.');
+        for (const file of filesToCustomize) {
+            const refreshed = (0, fs_1.readFileSync)((0, path_1.join)(dir, file), 'utf-8');
+            strict_1.default.match(refreshed, new RegExp(`# Team note for ${file.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}`));
+            strict_1.default.match(refreshed, new RegExp(`# Footer note for ${file.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}`));
+            strict_1.default.equal((refreshed.match(/\x3c!-- LATTICE:START/g) || []).length, 1);
+            strict_1.default.equal((refreshed.match(/\x3c!-- LATTICE:END -->/g) || []).length, 1);
+        }
+    });
+});
+(0, node_test_1.default)('update/apply backs up user-authored instruction files without markers', async () => {
+    await withTempRepo(async (dir) => {
+        await (0, index_1.generate)('.lattice/pack');
+        const customFiles = [
+            ['AGENTS.md', '# My hand-written agents file\n'],
+            ['CLAUDE.md', '# My hand-written claude file\n'],
+            ['docs/rules/codex.md', '# My hand-written codex file\n'],
+            ['.cursor/rules.md', '# My hand-written cursor rules\n'],
+            ['.github/copilot-instructions.md', '# My hand-written copilot instructions\n'],
+            ['.github/instructions/lattice-core.instructions.md', '---\napplyTo: "**/*.ts"\n---\n# My hand-written path instructions\n'],
+        ];
+        for (const [file, content] of customFiles) {
+            const filePath = (0, path_1.join)(dir, file);
+            (0, fs_1.mkdirSync)((0, path_1.dirname)(filePath), { recursive: true });
+            (0, fs_1.writeFileSync)(filePath, content, 'utf-8');
+        }
+        await (0, index_1.apply)('.lattice/pack', '.');
+        for (const [file, content] of customFiles) {
+            const filePath = (0, path_1.join)(dir, file);
+            const backupPath = `${filePath}.user-backup`;
+            strict_1.default.equal((0, fs_1.existsSync)(backupPath), true);
+            strict_1.default.equal((0, fs_1.readFileSync)(backupPath, 'utf-8'), content);
+            strict_1.default.match((0, fs_1.readFileSync)(filePath, 'utf-8'), /\x3c!-- LATTICE:START/);
+        }
+    });
+});
+(0, node_test_1.default)('update/apply migrates lattice-managed expo audit scripts without clobbering custom commands', async () => {
+    await withTempRepo(async (dir) => {
+        (0, fs_1.writeFileSync)((0, path_1.join)(dir, 'package.json'), JSON.stringify({
+            name: 'temp-expo-repo',
+            private: true,
+            scripts: {
+                audit: 'npm audit --audit-level=moderate',
+                lint: 'eslint .',
+            },
+        }, null, 2) + '\n', 'utf-8');
+        await (0, index_1.generate)('.lattice/pack');
+        await (0, index_1.apply)('.lattice/pack', '.');
+        const migrated = JSON.parse((0, fs_1.readFileSync)((0, path_1.join)(dir, 'package.json'), 'utf-8'));
+        strict_1.default.equal(migrated.scripts.audit, 'npm audit --audit-level=high');
+        strict_1.default.equal(migrated.scripts.lint, 'eslint .');
+        migrated.scripts.audit = 'pnpm audit --audit-level=critical';
+        (0, fs_1.writeFileSync)((0, path_1.join)(dir, 'package.json'), JSON.stringify(migrated, null, 2) + '\n', 'utf-8');
+        await (0, index_1.generate)('.lattice/pack-refresh');
+        await (0, index_1.apply)('.lattice/pack-refresh', '.');
+        const preserved = JSON.parse((0, fs_1.readFileSync)((0, path_1.join)(dir, 'package.json'), 'utf-8'));
+        strict_1.default.equal(preserved.scripts.audit, 'pnpm audit --audit-level=critical');
+    }, 'expo-eas', 'enterprise');
+});
+//# sourceMappingURL=apply-merge.test.js.map

package/dist/apply-merge.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-merge.test.js","sourceRoot":"","sources":["../src/apply-merge.test.ts"],"names":[],"mappings":";;;;;AAAA,2BAA6F;AAC7F,2BAA4B;AAC5B,+BAAqC;AACrC,0DAA6B;AAC7B,gEAAwC;AACxC,mCAA0C;AAE1C,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;AAChC,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC;AAEpC,SAAS,eAAe;IACtB,OAAO,CAAC,GAAG,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;IACvB,OAAO,CAAC,KAAK,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC;IAC1B,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC;AAChC,CAAC;AAED,SAAS,cAAc,CACrB,cAAqC,QAAQ,EAC7C,mBAAqD,SAAS;IAE9D,MAAM,GAAG,GAAG,IAAA,gBAAW,EAAC,IAAA,WAAI,EAAC,IAAA,WAAM,GAAE,EAAE,iBAAiB,WAAW,GAAG,CAAC,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,IAAA,WAAI,EAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACzC,IAAA,cAAS,EAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,IAAA,kBAAa,EACX,IAAA,WAAI,EAAC,UAAU,EAAE,aAAa,CAAC,EAC/B,IAAI,CAAC,SAAS,CACZ;QACE,WAAW;QACX,gBAAgB;KACjB,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,EAAkC,EAClC,cAAqC,QAAQ,EAC7C,mBAAqD,SAAS;IAE9D,MAAM,GAAG,GAAG,cAAc,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAElC,eAAe,EAAE,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEnB,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3B,cAAc,EAAE,CAAC;QACjB,IAAA,WAAM,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,IAAA,mBAAI,EAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;IACxF,MAAM,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC/B,MAAM,IAAA,gBAAQ,EAAC,eAAe,CAAC,CAAC;QAChC,MAAM,IAAA,aAAK,EAAC,eAAe,EAAE,GAAG,CAAC,CAAC;QAElC,MAAM,gBAAgB,GAAG;YACvB,WAAW;YACX,WAAW;YACX,qBAAqB;YACrB,kBAAkB;YAClB,iCAAiC;YACjC,mDAAmD;SACpD,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACjC,MAAM,OAAO,GAAG,IAAA,iBAAY,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAChD,IAAA,kBAAa,EACX,QAAQ,EACR,mBAAmB,IAAI,OAAO,OAAO,yBAAyB,IAAI,IAAI,EACtE,OAAO,CACR,CAAC;QACJ,CAAC;QAED,MAAM,IAAA,gBAAQ,EAAC,uBAAuB,CAAC,CAAC;QACxC,MAAM,IAAA,aAAK,EAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;QAE1C,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;YACpC,MAAM,SAAS,GAAG,IAAA,iBAAY,EAAC,IAAA,WAAI,EAAC,GAAG,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YACzD,gBAAM,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,MAAM,CAAC,mBAAmB,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YACtG,gBAAM,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,MAAM,CAAC,qBAAqB,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YACxG,gBAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,wBAAwB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC1E,gBAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,0BAA0B,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;IACvF,MAAM,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC/B,MAAM,IAAA,gBAAQ,EAAC,eAAe,CAAC,CAAC;QAEhC,MAAM,WAAW,GAA4B;YAC3C,CAAC,WAAW,EAAE,iCAAiC,CAAC;YAChD,CAAC,WAAW,EAAE,iCAAiC,CAAC;YAChD,CAAC,qBAAqB,EAAE,gCAAgC,CAAC;YACzD,CAAC,kBAAkB,EAAE,kCAAkC,CAAC;YACxD,CAAC,iCAAiC,EAAE,0CAA0C,CAAC;YAC/E,CAAC,mDAAmD,EAAE,qEAAqE,CAAC;SAC7H,CAAC;QAEF,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,WAAW,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACjC,IAAA,cAAS,EAAC,IAAA,cAAO,EAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,IAAA,kBAAa,EAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,IAAA,aAAK,EAAC,eAAe,EAAE,GAAG,CAAC,CAAC;QAElC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,WAAW,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACjC,MAAM,UAAU,GAAG,GAAG,QAAQ,cAAc,CAAC;YAE7C,gBAAM,CAAC,KAAK,CAAC,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;YAC3C,gBAAM,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,UAAU,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;YACzD,gBAAM,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,uBAAuB,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,6FAA6F,EAAE,KAAK,IAAI,EAAE;IAC7G,MAAM,YAAY,CAChB,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,IAAA,kBAAa,EACX,IAAA,WAAI,EAAC,GAAG,EAAE,cAAc,CAAC,EACzB,IAAI,CAAC,SAAS,CACZ;YACE,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE;gBACP,KAAK,EAAE,kCAAkC;gBACzC,IAAI,EAAE,UAAU;aACjB;SACF,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,EACR,OAAO,CACR,CAAC;QAEF,MAAM,IAAA,gBAAQ,EAAC,eAAe,CAAC,CAAC;QAChC,MAAM,IAAA,aAAK,EAAC,eAAe,EAAE,GAAG,CAAC,CAAC;QAElC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,IAAA,WAAI,EAAC,GAAG,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAC9E,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,8BAA8B,CAAC,CAAC;QACrE,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAEhD,QAAQ,CAAC,OAAO,CAAC,KAAK,GAAG,mCAAmC,CAAC;QAC7D,IAAA,kBAAa,EAAC,IAAA,WAAI,EAAC,GAAG,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;QAE5F,MAAM,IAAA,gBAAQ,EAAC,uBAAuB,CAAC,CAAC;QACxC,MAAM,IAAA,aAAK,EAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;QAE1C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,IAAA,WAAI,EAAC,GAAG,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/E,gBAAM,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,mCAAmC,CAAC,CAAC;IAC7E,CAAC,EACD,UAAU,EACV,YAAY,CACb,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/bundle-download.d.ts

@@ -0,0 +1,23 @@
+import type { ClientRequest, IncomingMessage } from 'node:http';
+export interface BundleManifest {
+    version: string;
+    name?: string;
+    description?: string;
+    config: {
+        projectType: 'nextjs' | 'expo-eas';
+        strictnessPreset: 'startup' | 'pro' | 'enterprise';
+        [key: string]: unknown;
+    };
+    files: Record<string, string>;
+}
+export type BundleRequester = (url: URL, onResponse: (response: IncomingMessage) => void) => ClientRequest;
+export interface BundleDownloadOptions {
+    requester?: BundleRequester;
+    maxRedirects?: number;
+    maxResponseBytes?: number;
+    timeoutMs?: number;
+}
+export declare function redactBundleUrlArguments(args: string[]): string[];
+export declare function redactBundleUrlsInText(value: string, args: string[]): string;
+export declare function downloadBundle(value: string, options?: BundleDownloadOptions): Promise<BundleManifest>;
+//# sourceMappingURL=bundle-download.d.ts.map

package/dist/bundle-download.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-download.d.ts","sourceRoot":"","sources":["../src/bundle-download.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEhE,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE;QACN,WAAW,EAAE,QAAQ,GAAG,UAAU,CAAC;QACnC,gBAAgB,EAAE,SAAS,GAAG,KAAK,GAAG,YAAY,CAAC;QACnD,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,IAAI,KAAK,aAAa,CAAC;AAE3G,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAOD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CASjE;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAS5E;AAkCD,wBAAsB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,qBAA0B,GAAG,OAAO,CAAC,cAAc,CAAC,CA4GhH"}

package/dist/bundle-download.js

@@ -0,0 +1,180 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.redactBundleUrlArguments = redactBundleUrlArguments;
+exports.redactBundleUrlsInText = redactBundleUrlsInText;
+exports.downloadBundle = downloadBundle;
+const node_https_1 = require("node:https");
+const DEFAULT_MAX_REDIRECTS = 5;
+const DEFAULT_MAX_RESPONSE_BYTES = 10 * 1024 * 1024;
+const DEFAULT_TIMEOUT_MS = 30_000;
+const REDIRECT_STATUSES = new Set([301, 302, 303, 307, 308]);
+function redactBundleUrlArguments(args) {
+    const redacted = [...args];
+    for (let index = 0; index < redacted.length; index += 1) {
+        if (redacted[index] === '--bundle' && index + 1 < redacted.length) {
+            redacted[index + 1] = '<bundle-value>';
+            index += 1;
+        }
+    }
+    return redacted;
+}
+function redactBundleUrlsInText(value, args) {
+    let redacted = value;
+    for (let index = 0; index < args.length; index += 1) {
+        if (args[index] === '--bundle' && args[index + 1]) {
+            redacted = redacted.split(args[index + 1]).join('<bundle-value>');
+            index += 1;
+        }
+    }
+    return redacted;
+}
+function validateHttpsUrl(value) {
+    let parsed;
+    try {
+        parsed = value instanceof URL ? new URL(value.href) : new URL(value);
+    }
+    catch {
+        throw new Error('Custom bundle URL is invalid.');
+    }
+    if (parsed.protocol !== 'https:') {
+        throw new Error('Custom bundle downloads require HTTPS.');
+    }
+    if (parsed.username || parsed.password) {
+        throw new Error('Custom bundle URLs must not contain credentials.');
+    }
+    return parsed;
+}
+function parseManifest(body) {
+    let manifest;
+    try {
+        manifest = JSON.parse(body.toString('utf8'));
+    }
+    catch {
+        throw new Error('Failed to parse bundle: response is not valid JSON.');
+    }
+    if (!manifest.version)
+        throw new Error('Failed to parse bundle: Bundle missing "version" field.');
+    if (!manifest.config?.projectType)
+        throw new Error('Failed to parse bundle: Bundle missing "config.projectType" field.');
+    if (!manifest.config?.strictnessPreset)
+        throw new Error('Failed to parse bundle: Bundle missing "config.strictnessPreset" field.');
+    if (!manifest.files || typeof manifest.files !== 'object' || Array.isArray(manifest.files)) {
+        throw new Error('Failed to parse bundle: Bundle missing "files" object.');
+    }
+    return manifest;
+}
+async function downloadBundle(value, options = {}) {
+    const initialUrl = validateHttpsUrl(value);
+    const requester = options.requester || ((url, onResponse) => (0, node_https_1.get)(url, onResponse));
+    const maxRedirects = options.maxRedirects ?? DEFAULT_MAX_REDIRECTS;
+    const maxResponseBytes = options.maxResponseBytes ?? DEFAULT_MAX_RESPONSE_BYTES;
+    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    if (!Number.isInteger(maxRedirects) || maxRedirects < 0)
+        throw new Error('Invalid bundle redirect limit.');
+    if (!Number.isInteger(maxResponseBytes) || maxResponseBytes < 1)
+        throw new Error('Invalid bundle response limit.');
+    if (!Number.isInteger(timeoutMs) || timeoutMs < 1)
+        throw new Error('Invalid bundle timeout.');
+    async function fetchUrl(currentUrl, redirectCount) {
+        return new Promise((resolve, reject) => {
+            let settled = false;
+            let activeResponse;
+            let deadline;
+            let request;
+            const stopTransport = () => {
+                if (activeResponse && !activeResponse.destroyed)
+                    activeResponse.destroy();
+                if (request && !request.destroyed)
+                    request.destroy();
+            };
+            const fail = (message) => {
+                if (settled)
+                    return;
+                settled = true;
+                if (deadline)
+                    clearTimeout(deadline);
+                stopTransport();
+                reject(new Error(message));
+            };
+            request = requester(currentUrl, (response) => {
+                activeResponse = response;
+                const status = response.statusCode || 0;
+                if (REDIRECT_STATUSES.has(status)) {
+                    const location = response.headers.location;
+                    if (!location) {
+                        fail(`Failed to download bundle: HTTP ${status} redirect has no location.`);
+                        return;
+                    }
+                    if (redirectCount >= maxRedirects) {
+                        fail(`Failed to download bundle: exceeded ${maxRedirects} redirects.`);
+                        return;
+                    }
+                    let redirectUrl;
+                    try {
+                        redirectUrl = validateHttpsUrl(new URL(location, currentUrl));
+                    }
+                    catch (error) {
+                        fail(error instanceof Error ? error.message : 'Custom bundle redirect is invalid.');
+                        return;
+                    }
+                    settled = true;
+                    if (deadline)
+                        clearTimeout(deadline);
+                    stopTransport();
+                    fetchUrl(redirectUrl, redirectCount + 1).then(resolve, reject);
+                    return;
+                }
+                if (status !== 200) {
+                    fail(`Failed to download bundle: HTTP ${status}.`);
+                    return;
+                }
+                const contentLength = Number(response.headers['content-length'] || 0);
+                if (Number.isFinite(contentLength) && contentLength > maxResponseBytes) {
+                    fail(`Failed to download bundle: response exceeds ${maxResponseBytes} bytes.`);
+                    return;
+                }
+                const chunks = [];
+                let totalBytes = 0;
+                response.on('data', (chunk) => {
+                    if (settled)
+                        return;
+                    const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+                    totalBytes += buffer.length;
+                    if (totalBytes > maxResponseBytes) {
+                        response.destroy();
+                        fail(`Failed to download bundle: response exceeds ${maxResponseBytes} bytes.`);
+                        return;
+                    }
+                    chunks.push(buffer);
+                });
+                response.on('end', () => {
+                    if (settled)
+                        return;
+                    try {
+                        const manifest = parseManifest(Buffer.concat(chunks));
+                        settled = true;
+                        if (deadline)
+                            clearTimeout(deadline);
+                        resolve(manifest);
+                    }
+                    catch (error) {
+                        fail(error instanceof Error ? error.message : 'Failed to parse bundle.');
+                    }
+                });
+                response.on('aborted', () => fail('Failed to download bundle: response was interrupted.'));
+                response.on('error', () => fail('Failed to download bundle: response failed.'));
+            });
+            if (settled) {
+                if (!request.destroyed)
+                    request.destroy();
+                return;
+            }
+            request.on('error', () => fail('Failed to download bundle before a response was received.'));
+            deadline = setTimeout(() => {
+                fail(`Bundle download timed out (${timeoutMs}ms).`);
+            }, timeoutMs);
+        });
+    }
+    return fetchUrl(initialUrl, 0);
+}
+//# sourceMappingURL=bundle-download.js.map

package/dist/bundle-download.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-download.js","sourceRoot":"","sources":["../src/bundle-download.ts"],"names":[],"mappings":";;AA6BA,4DASC;AAED,wDASC;AAkCD,wCA4GC;AA/LD,2CAA6C;AAwB7C,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,MAAM,0BAA0B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACpD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAE7D,SAAgB,wBAAwB,CAAC,IAAc;IACrD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAC3B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACxD,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,UAAU,IAAI,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;YAClE,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,gBAAgB,CAAC;YACvC,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,sBAAsB,CAAC,KAAa,EAAE,IAAc;IAClE,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,UAAU,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;YAClD,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAClE,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAmB;IAC3C,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,QAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAmB,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAClG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACzH,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB;QAAE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IACnI,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAEM,KAAK,UAAU,cAAc,CAAC,KAAa,EAAE,UAAiC,EAAE;IACrF,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,CAAC,IAAA,gBAAQ,EAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;IACxF,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,qBAAqB,CAAC;IACnE,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;IAChF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAE1D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC3G,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACnH,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAE9F,KAAK,UAAU,QAAQ,CAAC,UAAe,EAAE,aAAqB;QAC5D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,cAA2C,CAAC;YAChD,IAAI,QAAoC,CAAC;YACzC,IAAI,OAAkC,CAAC;YACvC,MAAM,aAAa,GAAG,GAAG,EAAE;gBACzB,IAAI,cAAc,IAAI,CAAC,cAAc,CAAC,SAAS;oBAAE,cAAc,CAAC,OAAO,EAAE,CAAC;gBAC1E,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS;oBAAE,OAAO,CAAC,OAAO,EAAE,CAAC;YACvD,CAAC,CAAC;YACF,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,EAAE;gBAC/B,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,QAAQ;oBAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;gBACrC,aAAa,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAC7B,CAAC,CAAC;YAEF,OAAO,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE;gBAC3C,cAAc,GAAG,QAAQ,CAAC;gBAC1B,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC;gBACxC,IAAI,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;oBAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,IAAI,CAAC,mCAAmC,MAAM,4BAA4B,CAAC,CAAC;wBAC5E,OAAO;oBACT,CAAC;oBACD,IAAI,aAAa,IAAI,YAAY,EAAE,CAAC;wBAClC,IAAI,CAAC,uCAAuC,YAAY,aAAa,CAAC,CAAC;wBACvE,OAAO;oBACT,CAAC;oBAED,IAAI,WAAgB,CAAC;oBACrB,IAAI,CAAC;wBACH,WAAW,GAAG,gBAAgB,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;oBAChE,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAI,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC;wBACpF,OAAO;oBACT,CAAC;oBACD,OAAO,GAAG,IAAI,CAAC;oBACf,IAAI,QAAQ;wBAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;oBACrC,aAAa,EAAE,CAAC;oBAChB,QAAQ,CAAC,WAAW,EAAE,aAAa,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBAC/D,OAAO;gBACT,CAAC;gBAED,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;oBACnB,IAAI,CAAC,mCAAmC,MAAM,GAAG,CAAC,CAAC;oBACnD,OAAO;gBACT,CAAC;gBAED,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;gBACtE,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,gBAAgB,EAAE,CAAC;oBACvE,IAAI,CAAC,+CAA+C,gBAAgB,SAAS,CAAC,CAAC;oBAC/E,OAAO;gBACT,CAAC;gBAED,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,IAAI,UAAU,GAAG,CAAC,CAAC;gBACnB,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;oBAC7C,IAAI,OAAO;wBAAE,OAAO;oBACpB,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACnE,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC;oBAC5B,IAAI,UAAU,GAAG,gBAAgB,EAAE,CAAC;wBAClC,QAAQ,CAAC,OAAO,EAAE,CAAC;wBACnB,IAAI,CAAC,+CAA+C,gBAAgB,SAAS,CAAC,CAAC;wBAC/E,OAAO;oBACT,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACtB,CAAC,CAAC,CAAC;gBACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACtB,IAAI,OAAO;wBAAE,OAAO;oBACpB,IAAI,CAAC;wBACH,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;wBACtD,OAAO,GAAG,IAAI,CAAC;wBACf,IAAI,QAAQ;4BAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;wBACrC,OAAO,CAAC,QAAQ,CAAC,CAAC;oBACpB,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAI,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC;oBAC3E,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC,CAAC;gBAC3F,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC,CAAC;YAClF,CAAC,CAAC,CAAC;YAEH,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,OAAO,CAAC,SAAS;oBAAE,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC1C,OAAO;YACT,CAAC;YACD,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC,CAAC;YAC7F,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;gBACzB,IAAI,CAAC,8BAA8B,SAAS,MAAM,CAAC,CAAC;YACtD,CAAC,EAAE,SAAS,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;AACjC,CAAC"}

package/dist/bundle-download.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=bundle-download.test.d.ts.map

package/dist/bundle-download.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-download.test.d.ts","sourceRoot":"","sources":["../src/bundle-download.test.ts"],"names":[],"mappings":""}

package/dist/bundle-download.test.js

@@ -0,0 +1,200 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const strict_1 = __importDefault(require("node:assert/strict"));
+const node_child_process_1 = require("node:child_process");
+const node_events_1 = require("node:events");
+const promises_1 = require("node:fs/promises");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const node_stream_1 = require("node:stream");
+const node_test_1 = __importDefault(require("node:test"));
+const bundle_download_js_1 = require("./bundle-download.js");
+const VALID_BUNDLE = JSON.stringify({
+    version: '1.0.0',
+    name: 'fixture',
+    config: { projectType: 'nextjs', strictnessPreset: 'startup' },
+    files: { 'README.md': '# Fixture\n' },
+});
+function fakeRequester(routes, calls, resumed, destroyed = []) {
+    return (url, onResponse) => {
+        calls.push(url.href);
+        const route = routes[url.href];
+        strict_1.default.ok(route, `Unexpected request: ${url.href}`);
+        const request = new node_events_1.EventEmitter();
+        request.destroy = (() => request);
+        request.setTimeout = ((_, callback) => {
+            if (route.timeout && callback)
+                queueMicrotask(callback);
+            return request;
+        });
+        if (!route.timeout) {
+            queueMicrotask(() => {
+                const stream = new node_stream_1.PassThrough();
+                const response = stream;
+                response.statusCode = route.status ?? 200;
+                response.headers = route.headers || {};
+                const originalResume = response.resume.bind(response);
+                response.resume = (() => {
+                    resumed.push(url.href);
+                    return originalResume();
+                });
+                const originalDestroy = response.destroy.bind(response);
+                response.destroy = ((error) => {
+                    destroyed.push(url.href);
+                    return originalDestroy(error);
+                });
+                onResponse(response);
+                stream.end(route.body || '');
+            });
+        }
+        return request;
+    };
+}
+(0, node_test_1.default)('rejects HTTP and credential-bearing bundle URLs before any request', async () => {
+    let requests = 0;
+    const requester = () => {
+        requests += 1;
+        throw new Error('requester must not run');
+    };
+    await strict_1.default.rejects((0, bundle_download_js_1.downloadBundle)('http://example.test/bundle.json', { requester }), /require HTTPS/);
+    await strict_1.default.rejects((0, bundle_download_js_1.downloadBundle)('https://user:secret@example.test/bundle.json', { requester }), (error) => {
+        strict_1.default.match(error.message, /must not contain credentials/);
+        strict_1.default.doesNotMatch(error.message, /user|secret/);
+        return true;
+    });
+    strict_1.default.equal(requests, 0);
+});
+(0, node_test_1.default)('redacts bundle URL values from failure-report arguments and text', () => {
+    const secretUrl = 'https://user:secret@example.test/bundle.json';
+    const args = ['setup', '--bundle', secretUrl, '--debug'];
+    strict_1.default.deepEqual((0, bundle_download_js_1.redactBundleUrlArguments)(args), ['setup', '--bundle', '<bundle-value>', '--debug']);
+    strict_1.default.equal((0, bundle_download_js_1.redactBundleUrlsInText)(`Rejected ${secretUrl}`, args), 'Rejected <bundle-value>');
+});
+(0, node_test_1.default)('CLI rejects uppercase credential-bearing HTTPS without exposing userinfo in output or its failure report', async () => {
+    const cwd = await (0, promises_1.mkdtemp)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'lattice-bundle-redaction-'));
+    const secretUrl = 'HTTPS://synthetic-user:synthetic-secret@example.invalid/bundle.json';
+    try {
+        const cliPath = (0, node_path_1.join)(__dirname, 'index.js');
+        const result = (0, node_child_process_1.spawnSync)(process.execPath, [cliPath, 'setup', '--bundle', secretUrl, '--debug'], {
+            cwd,
+            encoding: 'utf8',
+            timeout: 10_000,
+        });
+        strict_1.default.equal(result.status, 1);
+        const output = `${result.stdout}${result.stderr}`;
+        strict_1.default.match(output, /setup --bundle <custom-url>/);
+        strict_1.default.doesNotMatch(output, /synthetic-user|synthetic-secret|example\.invalid/);
+        const reportPath = (0, node_path_1.join)(cwd, '.lattice', 'failure-report.json');
+        const reportText = await (0, promises_1.readFile)(reportPath, 'utf8');
+        strict_1.default.doesNotMatch(reportText, /synthetic-user|synthetic-secret|example\.invalid/);
+        const report = JSON.parse(reportText);
+        strict_1.default.deepEqual(report.argv, ['setup', '--bundle', '<bundle-value>', '--debug']);
+        strict_1.default.match(report.errorMessage, /must not contain credentials/);
+    }
+    finally {
+        await (0, promises_1.rm)(cwd, { recursive: true, force: true });
+    }
+});
+(0, node_test_1.default)('rejects an HTTPS-to-HTTP redirect before the insecure request and closes the response', async () => {
+    const calls = [];
+    const resumed = [];
+    const destroyed = [];
+    const requester = fakeRequester({
+        'https://example.test/start': { status: 302, headers: { location: 'http://example.test/bundle.json' } },
+    }, calls, resumed, destroyed);
+    await strict_1.default.rejects((0, bundle_download_js_1.downloadBundle)('https://example.test/start', { requester }), /require HTTPS/);
+    strict_1.default.deepEqual(calls, ['https://example.test/start']);
+    strict_1.default.deepEqual(resumed, []);
+    strict_1.default.deepEqual(destroyed, ['https://example.test/start']);
+});
+(0, node_test_1.default)('follows a relative HTTPS redirect and preserves manifest validation', async () => {
+    const calls = [];
+    const resumed = [];
+    const destroyed = [];
+    const requester = fakeRequester({
+        'https://example.test/start': { status: 307, headers: { location: '/bundle.json' } },
+        'https://example.test/bundle.json': { body: VALID_BUNDLE },
+    }, calls, resumed, destroyed);
+    const bundle = await (0, bundle_download_js_1.downloadBundle)('https://example.test/start', { requester });
+    strict_1.default.equal(bundle.name, 'fixture');
+    strict_1.default.deepEqual(calls, ['https://example.test/start', 'https://example.test/bundle.json']);
+    (0, strict_1.default)(destroyed.includes('https://example.test/start'));
+    const invalidRequester = fakeRequester({
+        'https://example.test/invalid': { body: JSON.stringify({ version: '1.0.0', files: {} }) },
+    }, [], []);
+    await strict_1.default.rejects((0, bundle_download_js_1.downloadBundle)('https://example.test/invalid', { requester: invalidRequester }), /config\.projectType/);
+});
+(0, node_test_1.default)('enforces finite redirect and response-body limits', async () => {
+    const redirectCalls = [];
+    const redirectRequester = fakeRequester({
+        'https://example.test/loop': { status: 302, headers: { location: '/loop' } },
+    }, redirectCalls, []);
+    await strict_1.default.rejects((0, bundle_download_js_1.downloadBundle)('https://example.test/loop', { requester: redirectRequester, maxRedirects: 2 }), /exceeded 2 redirects/);
+    strict_1.default.equal(redirectCalls.length, 3);
+    const bodyRequester = fakeRequester({
+        'https://example.test/large': { body: VALID_BUNDLE },
+    }, [], []);
+    await strict_1.default.rejects((0, bundle_download_js_1.downloadBundle)('https://example.test/large', { requester: bodyRequester, maxResponseBytes: 16 }), /exceeds 16 bytes/);
+});
+(0, node_test_1.default)('uses an absolute deadline even when the response keeps sending data', async () => {
+    let requestDestroyed = false;
+    let responseDestroyed = false;
+    const requester = (_url, onResponse) => {
+        const request = new node_events_1.EventEmitter();
+        let response;
+        request.destroy = (() => {
+            requestDestroyed = true;
+            response?.destroy();
+            return request;
+        });
+        request.setTimeout = (() => request);
+        queueMicrotask(() => {
+            response = new node_stream_1.PassThrough();
+            const incoming = response;
+            incoming.statusCode = 200;
+            incoming.headers = {};
+            incoming.once('close', () => {
+                responseDestroyed = true;
+            });
+            onResponse(incoming);
+            const interval = setInterval(() => response?.write('x'), 5);
+            response.once('close', () => clearInterval(interval));
+        });
+        return request;
+    };
+    await strict_1.default.rejects((0, bundle_download_js_1.downloadBundle)('https://example.test/slow-drip', { requester, timeoutMs: 25 }), /timed out \(25ms\)/);
+    strict_1.default.equal(requestDestroyed, true);
+    strict_1.default.equal(responseDestroyed, true);
+});
+(0, node_test_1.default)('destroys the response and request when Content-Length is already oversized', async () => {
+    let requestDestroyed = false;
+    let responseDestroyed = false;
+    const requester = (_url, onResponse) => {
+        const request = new node_events_1.EventEmitter();
+        request.destroy = (() => {
+            requestDestroyed = true;
+            return request;
+        });
+        request.setTimeout = (() => request);
+        queueMicrotask(() => {
+            const stream = new node_stream_1.PassThrough();
+            const response = stream;
+            response.statusCode = 200;
+            response.headers = { 'content-length': '999' };
+            const originalDestroy = response.destroy.bind(response);
+            response.destroy = ((error) => {
+                responseDestroyed = true;
+                return originalDestroy(error);
+            });
+            onResponse(response);
+        });
+        return request;
+    };
+    await strict_1.default.rejects((0, bundle_download_js_1.downloadBundle)('https://example.test/oversized', { requester, maxResponseBytes: 16 }), /exceeds 16 bytes/);
+    strict_1.default.equal(requestDestroyed, true);
+    strict_1.default.equal(responseDestroyed, true);
+});
+//# sourceMappingURL=bundle-download.test.js.map

package/dist/bundle-download.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-download.test.js","sourceRoot":"","sources":["../src/bundle-download.test.ts"],"names":[],"mappings":";;;;;AAAA,gEAAwC;AACxC,2DAA+C;AAC/C,6CAA2C;AAC3C,+CAAyD;AAEzD,qCAAiC;AACjC,yCAAiC;AACjC,6CAA0C;AAC1C,0DAA6B;AAC7B,6DAK8B;AAE9B,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC;IAClC,OAAO,EAAE,OAAO;IAChB,IAAI,EAAE,SAAS;IACf,MAAM,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,gBAAgB,EAAE,SAAS,EAAE;IAC9D,KAAK,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE;CACtC,CAAC,CAAC;AASH,SAAS,aAAa,CAAC,MAA6B,EAAE,KAAe,EAAE,OAAiB,EAAE,YAAsB,EAAE;IAChH,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE;QACzB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,gBAAM,CAAC,EAAE,CAAC,KAAK,EAAE,uBAAuB,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,0BAAY,EAAmB,CAAC;QACpD,OAAO,CAAC,OAAO,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,CAA6B,CAAC;QAC9D,OAAO,CAAC,UAAU,GAAG,CAAC,CAAC,CAAS,EAAE,QAAqB,EAAE,EAAE;YACzD,IAAI,KAAK,CAAC,OAAO,IAAI,QAAQ;gBAAE,cAAc,CAAC,QAAQ,CAAC,CAAC;YACxD,OAAO,OAAO,CAAC;QACjB,CAAC,CAAgC,CAAC;QAElC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,cAAc,CAAC,GAAG,EAAE;gBAClB,MAAM,MAAM,GAAG,IAAI,yBAAW,EAAE,CAAC;gBACjC,MAAM,QAAQ,GAAG,MAAoC,CAAC;gBACtD,QAAQ,CAAC,UAAU,GAAG,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC;gBAC1C,QAAQ,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;gBACvC,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACtD,QAAQ,CAAC,MAAM,GAAG,CAAC,GAAG,EAAE;oBACtB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACvB,OAAO,cAAc,EAAE,CAAC;gBAC1B,CAAC,CAA8B,CAAC;gBAChC,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACxD,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,KAAa,EAAE,EAAE;oBACpC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACzB,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;gBAChC,CAAC,CAA+B,CAAC;gBACjC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACrB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YAC/B,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;AACJ,CAAC;AAED,IAAA,mBAAI,EAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;IACpF,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,SAAS,GAAoB,GAAG,EAAE;QACtC,QAAQ,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC,CAAC;IACF,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,mCAAc,EAAC,iCAAiC,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,eAAe,CAAC,CAAC;IACxG,MAAM,gBAAM,CAAC,OAAO,CAClB,IAAA,mCAAc,EAAC,8CAA8C,EAAE,EAAE,SAAS,EAAE,CAAC,EAC7E,CAAC,KAAY,EAAE,EAAE;QACf,gBAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;QAC5D,gBAAM,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC,CACF,CAAC;IACF,gBAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;AAC5B,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,kEAAkE,EAAE,GAAG,EAAE;IAC5E,MAAM,SAAS,GAAG,8CAA8C,CAAC;IACjE,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACzD,gBAAM,CAAC,SAAS,CAAC,IAAA,6CAAwB,EAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC,CAAC;IACrG,gBAAM,CAAC,KAAK,CACV,IAAA,2CAAsB,EAAC,YAAY,SAAS,EAAE,EAAE,IAAI,CAAC,EACrD,yBAAyB,CAC1B,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,0GAA0G,EAAE,KAAK,IAAI,EAAE;IAC1H,MAAM,GAAG,GAAG,MAAM,IAAA,kBAAO,EAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,2BAA2B,CAAC,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,qEAAqE,CAAC;IACxF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAA,8BAAS,EAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE;YAC/F,GAAG;YACH,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QACH,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAClD,gBAAM,CAAC,KAAK,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;QACpD,gBAAM,CAAC,YAAY,CAAC,MAAM,EAAE,kDAAkD,CAAC,CAAC;QAEhF,MAAM,UAAU,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,UAAU,EAAE,qBAAqB,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,MAAM,IAAA,mBAAQ,EAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACtD,gBAAM,CAAC,YAAY,CAAC,UAAU,EAAE,kDAAkD,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAA6C,CAAC;QAClF,gBAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC,CAAC;QAClF,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,8BAA8B,CAAC,CAAC;IACpE,CAAC;YAAS,CAAC;QACT,MAAM,IAAA,aAAE,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;IACvG,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,aAAa,CAAC;QAC9B,4BAA4B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,iCAAiC,EAAE,EAAE;KACxG,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAE9B,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,mCAAc,EAAC,4BAA4B,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,eAAe,CAAC,CAAC;IACnG,gBAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,4BAA4B,CAAC,CAAC,CAAC;IACxD,gBAAM,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC9B,gBAAM,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,4BAA4B,CAAC,CAAC,CAAC;AAC9D,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;IACrF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,aAAa,CAAC;QAC9B,4BAA4B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE;QACpF,kCAAkC,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;KAC3D,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAE9B,MAAM,MAAM,GAAG,MAAM,IAAA,mCAAc,EAAC,4BAA4B,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IACjF,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACrC,gBAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,4BAA4B,EAAE,kCAAkC,CAAC,CAAC,CAAC;IAC5F,IAAA,gBAAM,EAAC,SAAS,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC,CAAC;IAEzD,MAAM,gBAAgB,GAAG,aAAa,CAAC;QACrC,8BAA8B,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE;KAC1F,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACX,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,mCAAc,EAAC,8BAA8B,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,EAAE,qBAAqB,CAAC,CAAC;AAC/H,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;IACnE,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,iBAAiB,GAAG,aAAa,CAAC;QACtC,2BAA2B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;KAC7E,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;IACtB,MAAM,gBAAM,CAAC,OAAO,CAClB,IAAA,mCAAc,EAAC,2BAA2B,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,EAC9F,sBAAsB,CACvB,CAAC;IACF,gBAAM,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAEtC,MAAM,aAAa,GAAG,aAAa,CAAC;QAClC,4BAA4B,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;KACrD,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACX,MAAM,gBAAM,CAAC,OAAO,CAClB,IAAA,mCAAc,EAAC,4BAA4B,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,EAChG,kBAAkB,CACnB,CAAC;AAEJ,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;IACrF,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,MAAM,SAAS,GAAoB,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE;QACtD,MAAM,OAAO,GAAG,IAAI,0BAAY,EAAmB,CAAC;QACpD,IAAI,QAAiC,CAAC;QACtC,OAAO,CAAC,OAAO,GAAG,CAAC,GAAG,EAAE;YACtB,gBAAgB,GAAG,IAAI,CAAC;YACxB,QAAQ,EAAE,OAAO,EAAE,CAAC;YACpB,OAAO,OAAO,CAAC;QACjB,CAAC,CAA6B,CAAC;QAC/B,OAAO,CAAC,UAAU,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,CAAgC,CAAC;QACpE,cAAc,CAAC,GAAG,EAAE;YAClB,QAAQ,GAAG,IAAI,yBAAW,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,QAAsC,CAAC;YACxD,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;YAC1B,QAAQ,CAAC,OAAO,GAAG,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;gBAC1B,iBAAiB,GAAG,IAAI,CAAC;YAC3B,CAAC,CAAC,CAAC;YACH,UAAU,CAAC,QAAQ,CAAC,CAAC;YACrB,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAC5D,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,MAAM,gBAAM,CAAC,OAAO,CAClB,IAAA,mCAAc,EAAC,gCAAgC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAC9E,oBAAoB,CACrB,CAAC;IACF,gBAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;IACrC,gBAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;AACxC,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;IAC5F,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,MAAM,SAAS,GAAoB,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE;QACtD,MAAM,OAAO,GAAG,IAAI,0BAAY,EAAmB,CAAC;QACpD,OAAO,CAAC,OAAO,GAAG,CAAC,GAAG,EAAE;YACtB,gBAAgB,GAAG,IAAI,CAAC;YACxB,OAAO,OAAO,CAAC;QACjB,CAAC,CAA6B,CAAC;QAC/B,OAAO,CAAC,UAAU,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,CAAgC,CAAC;QACpE,cAAc,CAAC,GAAG,EAAE;YAClB,MAAM,MAAM,GAAG,IAAI,yBAAW,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,MAAoC,CAAC;YACtD,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;YAC1B,QAAQ,CAAC,OAAO,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;YAC/C,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxD,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,KAAa,EAAE,EAAE;gBACpC,iBAAiB,GAAG,IAAI,CAAC;gBACzB,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC,CAA+B,CAAC;YACjC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,MAAM,gBAAM,CAAC,OAAO,CAClB,IAAA,mCAAc,EAAC,gCAAgC,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,EACrF,kBAAkB,CACnB,CAAC;IACF,gBAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;IACrC,gBAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;AACxC,CAAC,CAAC,CAAC"}

package/dist/bundle-rollback.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=bundle-rollback.test.d.ts.map

package/dist/bundle-rollback.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-rollback.test.d.ts","sourceRoot":"","sources":["../src/bundle-rollback.test.ts"],"names":[],"mappings":""}