@mesh-tech/mesh-cli 0.20.2 → 0.20.4

package/dist/bin/mesh.d.ts

@@ -1,14 +1,2 @@
 #!/usr/bin/env node
-/**
- * mesh - CLI for Mesh Lab development utilities
- *
- * The command tree itself lives in `src/program.ts` so `mesh docs
- * cli-reference` can walk it without running the CLI. This file is only the
- * runner: resolve the version, build the program, parse.
- *
- * For the command list, run `mesh --help` or read the generated reference
- * (`docs/portal/generated/cli-reference.md`) — a hand-maintained list in this
- * header is exactly the kind of prose that goes stale.
- */
 export {};
-//# sourceMappingURL=mesh.d.ts.map

package/dist/bin/mesh.js

@@ -2005,7 +2005,7 @@ function buildSquatterError(tenant, squatted, detail) {
     `    mesh vpn -t ${tenant} tunnel down --stop    # tear down mesh-owned runners + daemon`,
     `    lsof -nP -iTCP:${first} -sTCP:LISTEN        # identify what still holds the port`,
     `  then stop that process and re-run.`,
-    // Port blocks are a 63-bucket hash (MESH-2375), so a DIFFERENT tenant's
+    // Port blocks are a 63-bucket hash, so a DIFFERENT tenant's
     // runner can collide onto this block — in which case the `down` above is a
     // no-op and only lsof identifies the real owner.
     `  (If lsof names another mesh runner, it belongs to a different tenant \u2014 tear that one down instead.)`
@@ -2373,13 +2373,13 @@ async function ensureForwarders(state) {
   const runnerAlive = prior?.managed === "launchd" ? fs8.existsSync(launchAgentPath(state.tenant)) : pidAlive(prior?.supervisorPid);
   if (prior && runnerAlive && tunnelTargetsEqual(prior.tunnels, state.tunnels) && // A prior supervisor spawned for a DIFFERENT SOCKS port still binds the same
   // local ports but dials a dead upstream — reusing it silently strands every
-  // tunnel (MESH-2169). The port must match, and the runner must PROVE it is
+  // tunnel. The port must match, and the runner must PROVE it is
   // ours via the ownership handshake (liveness ≠ ownership — a port answering
   // a dial can be another session's SSM tunnel or an orphaned runner, #2991).
   // Poll briefly rather than sample once: `ports-not-listening` during the
   // runner's own rebind window and `no-control-answer` under load are
   // transient, and a single miss here would tear down a healthy runner SHARED
-  // by every concurrent session on the tenant (MESH-2014). This branch is
+  // by every concurrent session on the tenant. This branch is
   // only reached when the runner is alive with matching targets, so the
   // retry costs nothing on cold-start or genuinely-dead paths.
   prior.socksPort === state.socksPort && (await awaitOwnership(state.tenant, expected, 1e3)).ok) {
@@ -6183,7 +6183,7 @@ var init_hub_roles = __esm({
 
 // libs/api-registry/src/index.ts
 import { z } from "zod";
-var rateLimitSpecSchema, rateLimitDefaultsSchema, integrationHealthSchema, apiSurfaceSchema, apiRegistryEntrySchema, integrationStatusSchema;
+var rateLimitSpecSchema, rateLimitDefaultsSchema, integrationHealthSchema, apiSurfaceKindSchema, apiSurfaceSchema, apiRegistryEntrySchema, integrationStatusSchema;
 var init_src = __esm({
   "libs/api-registry/src/index.ts"() {
     "use strict";
@@ -6197,6 +6197,7 @@ var init_src = __esm({
       z.object({ op: z.string().trim().min(1) }),
       z.object({ unavailable: z.string().trim().min(1) })
     ]);
+    apiSurfaceKindSchema = z.enum(["app", "vendor"]);
     apiSurfaceSchema = z.object({
       http: z.object({ url: z.string().min(1) }).optional(),
       nexus: z.object({ endpoint: z.string().min(1), taskQueue: z.string().min(1) }).optional()
@@ -6204,6 +6205,7 @@ var init_src = __esm({
     apiRegistryEntrySchema = z.object({
       schemaVersion: z.number().int().positive().default(1),
       name: z.string().min(1),
+      kind: apiSurfaceKindSchema.optional(),
       provider: z.string().optional(),
       version: z.string().optional(),
       title: z.string().optional(),
@@ -8387,7 +8389,7 @@ async function probeTunnelHealth(tunnels) {
       // sees exactly what a dependent service would. Use the connection-HOLDS
       // probe, not a bare accept: a forwarder binds its local port even when its
       // upstream leg is dead (a dropped SSM session, or a Tailscale SOCKS bridge
-      // dialing a stale port — MESH-2169), so "port accepts" would report a dead
+      // dialing a stale port), so "port accepts" would report a dead
       // tunnel as healthy. Holding briefly catches the accept-then-close teardown.
       reachable: await probeConnectionHolds(
         tun.host === "localhost" ? "127.0.0.1" : tun.host,
@@ -8945,7 +8947,7 @@ async function startServices(sessionName, appRoot, devOutput, headless, awsEnv,
       // wins over the tmux session env, the placeholder would clobber the
       // real token injected above — silently 401ing tenant-scoped Hub views.
       ...devUserVars,
-      // Per-worktree Temporal task-queue isolation (MESH-2013 Slice 2): agent
+      // Per-worktree Temporal task-queue isolation: agent
       // workers/apps append this to their task-queue names so concurrent
       // worktrees don't steal each other's workflow tasks. Empty on the primary
       // checkout → omitted → unchanged historical behavior.
@@ -9597,7 +9599,7 @@ function registerDevCommand(program2) {
     }
     if (options.mock || options.externals) {
       logWarn(
-        "--externals/--mock is local-mode only for now (tethered dev outputs do not carry external declarations yet \u2014 MESH-1885). Continuing without them."
+        "--externals/--mock is local-mode only for now (tethered dev outputs do not carry external declarations yet). Continuing without them."
       );
     }
     const stack = detectStack(appRoot, resolveStackOption(options));
@@ -13528,7 +13530,7 @@ function formatStaleDepsError(mismatches) {
   lines.push(
     "",
     "  A stale node_modules makes pulumi evaluate OLD component code and can plan to",
-    "  DELETE resources the current code would keep (MESH-2266). Fix:",
+    "  DELETE resources the current code would keep. Fix:",
     "",
     "      pnpm install",
     "",
@@ -15807,7 +15809,7 @@ function assembleHubEnv(session, sessionEnv, opts) {
   }
   if (!forwarded.DEV_USER_TOKEN_URL) {
     notes.push(
-      "Dev session predates the per-session token-server (MESH-2039) \u2014 starting a dedicated one so tokens stay fresh past ~1h."
+      "Dev session predates the per-session token-server \u2014 starting a dedicated one so tokens stay fresh past ~1h."
     );
   }
   const temporalAddress = sessionEnv.TEMPORAL_ADDRESS ?? (session.state.devOutput.tunnels["temporal"] ? tunnelClientAddress(session.state.devOutput.tunnels["temporal"]) : (
@@ -16314,7 +16316,7 @@ function resolvePublisherRoleArn({
   const resolved = roleArnFlag || ssmArn;
   if (!resolved) {
     throw new Error(
-      "No publisher role: pass --role or ensure the registry stack exported publisherRoleArn (MESH-2168)."
+      "No publisher role: pass --role or ensure the registry stack exported publisherRoleArn."
     );
   }
   return resolved;
@@ -17588,13 +17590,13 @@ import * as os10 from "os";
 import * as path39 from "path";
 function shimScript() {
   return `#!/bin/sh
-# mesh \u2014 canonical launcher shim (installed by \`mesh install-shim\`, MESH-2261).
+# mesh \u2014 canonical launcher shim (installed by \`mesh install-shim\`).
 # Walks up from the current directory to the nearest workspace mesh CLI and runs
 # it. That resolves to bin/mesh.mjs, which runs the CLI from TypeScript source \u2014
 # so this always runs the LOCAL source of whatever worktree/app you are in, with
 # no build step. Nothing here is version-pinned; do not edit by hand.
 #
-# Outside a workspace it hands off to a globally installed mesh CLI (MESH-2869).
+# Outside a workspace it hands off to a globally installed mesh CLI.
 # Without that hand-off the shim shadows \`npm i -g @mesh-tech/mesh-cli\` on the
 # PATH and \`mesh login\` is unreachable from the home directory \u2014 which is the
 # very first thing a new developer runs.
@@ -19768,7 +19770,7 @@ function registerStackCommand(program2) {
     false
   ).option(
     "--parent-zone <zone>",
-    "With --platform: parent DNS zone for the env zone (mesh:dns.public.parentZone) \u2014 platform hostnames become {sub}.{env}.{parentZone} (e.g. hub.dmb-dev.mesh.meshtech.io), so personal stacks never collide on DNS"
+    "With --platform: parent DNS zone for the env zone (mesh:dns.public.parentZone) \u2014 platform hostnames become {sub}.{env}.{parentZone} (e.g. hub.<env>.<parentZone>), so personal stacks never collide on DNS"
   ).action(async (opts) => {
     const appRoot = findAppRoot(process.cwd());
     if (!appRoot) {