@mesh-tech/mesh-cli 0.35.2 → 0.37.0

package/dist/bin/mesh.auth-preflight-JFKL4Y4X.js

@@ -0,0 +1,48 @@
+import {
+  REGISTRY_LOGIN_FIX,
+  REGISTRY_LOGIN_FIX_AWS,
+  SSO_LOGIN_FIX,
+  SSO_SESSION_SNIPPET,
+  appUsesMeshPackages,
+  awsConfigHasProfile,
+  classifyRegistryPreflight,
+  classifyRegistryStatus,
+  findUnscopedCodeArtifactRegistry,
+  homeNpmrcPath,
+  isExpiredAwsTokenMessage,
+  isNpmAuthError,
+  isNpmAuthErrorText,
+  npmrcAuthKeyForEndpoint,
+  parseNpmrcRegistryAuth,
+  parseSsoSessionNames,
+  probeRegistryToken,
+  readAwsConfig,
+  registryLoginFix,
+  registryPreflight,
+  stripUnscopedCodeArtifactRegistry,
+  upsertNpmrcLines
+} from "./mesh.chunk-5A5OFSYR.js";
+export {
+  REGISTRY_LOGIN_FIX,
+  REGISTRY_LOGIN_FIX_AWS,
+  SSO_LOGIN_FIX,
+  SSO_SESSION_SNIPPET,
+  appUsesMeshPackages,
+  awsConfigHasProfile,
+  classifyRegistryPreflight,
+  classifyRegistryStatus,
+  findUnscopedCodeArtifactRegistry,
+  homeNpmrcPath,
+  isExpiredAwsTokenMessage,
+  isNpmAuthError,
+  isNpmAuthErrorText,
+  npmrcAuthKeyForEndpoint,
+  parseNpmrcRegistryAuth,
+  parseSsoSessionNames,
+  probeRegistryToken,
+  readAwsConfig,
+  registryLoginFix,
+  registryPreflight,
+  stripUnscopedCodeArtifactRegistry,
+  upsertNpmrcLines
+};

package/dist/bin/mesh.auth-preflight-JFKL4Y4X.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": [],
+  "mappings": "",
+  "names": []
+}

package/dist/bin/mesh.capture-history-A4IAVVIR.js

@@ -0,0 +1,38 @@
+// packages/mesh-cli/src/utils/capture-history.ts
+import { historyToJSON } from "@temporalio/common/lib/proto-utils.js";
+function isPayload(value) {
+  return value != null && typeof value === "object" && "metadata" in value && "data" in value;
+}
+async function decryptHistoryPayloads(node, decrypt) {
+  if (node == null || typeof node !== "object") return 0;
+  if (isPayload(node)) {
+    const inner = await decrypt(node);
+    if (inner === null) return 0;
+    node.metadata = inner.metadata ?? {};
+    node.data = inner.data ?? new Uint8Array(0);
+    return 1;
+  }
+  let count = 0;
+  if (Array.isArray(node)) {
+    for (const item of node) count += await decryptHistoryPayloads(item, decrypt);
+  } else {
+    for (const value of Object.values(node)) {
+      count += await decryptHistoryPayloads(value, decrypt);
+    }
+  }
+  return count;
+}
+async function serializeHistoryToFixture(events, decrypter) {
+  let decryptedPayloads = 0;
+  if (decrypter) {
+    for (const event of events) {
+      decryptedPayloads += await decryptHistoryPayloads(event, decrypter);
+    }
+  }
+  const fixture = JSON.parse(historyToJSON({ events }));
+  return { fixture, eventCount: events.length, decryptedPayloads };
+}
+export {
+  decryptHistoryPayloads,
+  serializeHistoryToFixture
+};

package/dist/bin/mesh.capture-history-A4IAVVIR.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../src/utils/capture-history.ts"],
+  "mappings": ";AA2BA,SAAS,qBAAqB;AAc9B,SAAS,UAAU,OAAyC;AAC1D,SACE,SAAS,QACT,OAAO,UAAU,YACjB,cAAc,SACd,UAAU;AAEd;AAaA,eAAsB,uBACpB,MACA,SACiB;AACjB,MAAI,QAAQ,QAAQ,OAAO,SAAS,SAAU,QAAO;AAErD,MAAI,UAAU,IAAI,GAAG;AACnB,UAAM,QAAQ,MAAM,QAAQ,IAAkB;AAC9C,QAAI,UAAU,KAAM,QAAO;AAE3B,SAAK,WAAW,MAAM,YAAY,CAAC;AACnC,SAAK,OAAO,MAAM,QAAQ,IAAI,WAAW,CAAC;AAC1C,WAAO;AAAA,EACT;AAEA,MAAI,QAAQ;AACZ,MAAI,MAAM,QAAQ,IAAI,GAAG;AACvB,eAAW,QAAQ,KAAM,UAAS,MAAM,uBAAuB,MAAM,OAAO;AAAA,EAC9E,OAAO;AACL,eAAW,SAAS,OAAO,OAAO,IAA+B,GAAG;AAClE,eAAS,MAAM,uBAAuB,OAAO,OAAO;AAAA,IACtD;AAAA,EACF;AACA,SAAO;AACT;AA2BA,eAAsB,0BACpB,QACA,WACwB;AACxB,MAAI,oBAAoB;AACxB,MAAI,WAAW;AACb,eAAW,SAAS,QAAQ;AAC1B,2BAAqB,MAAM,uBAAuB,OAAO,SAAS;AAAA,IACpE;AAAA,EACF;AAEA,QAAM,UAAU,KAAK,MAAM,cAAc,EAAE,OAAO,CAAU,CAAC;AAC7D,SAAO,EAAE,SAAS,YAAY,OAAO,QAAQ,kBAAkB;AACjE;",
+  "names": []
+}

package/dist/bin/mesh.chunk-5A5OFSYR.js

@@ -0,0 +1,187 @@
+// packages/mesh-cli/src/utils/auth-preflight.ts
+import * as fs from "fs";
+import * as os from "os";
+import * as path from "path";
+var REGISTRY_LOGIN_FIX = "mesh registry login";
+var REGISTRY_LOGIN_FIX_AWS = "mesh registry login --profile mesh-dev";
+function registryLoginFix() {
+  return REGISTRY_LOGIN_FIX;
+}
+var SSO_LOGIN_FIX = "aws sso login --sso-session=mesh   # or: pnpm sso";
+var SSO_SESSION_SNIPPET = `[sso-session mesh]
+sso_start_url = https://trabian.awsapps.com/start
+sso_region = us-east-1
+sso_registration_scopes = sso:account:access`;
+function homeNpmrcPath() {
+  return path.join(os.homedir(), ".npmrc");
+}
+function parseNpmrcRegistryAuth(content) {
+  for (const line of content.split("\n")) {
+    const match = line.trim().match(/^\/\/([^:]*\.codeartifact\.[^:]*):_authToken=(.+)$/);
+    if (match && match[1] && match[2]) {
+      const endpoint = `https://${match[1]}${match[1].endsWith("/") ? "" : "/"}`;
+      return { endpoint, token: match[2].trim() };
+    }
+  }
+  return null;
+}
+function findUnscopedCodeArtifactRegistry(content) {
+  for (const line of content.split("\n")) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith(";") || trimmed.startsWith("#")) continue;
+    const match = trimmed.match(/^registry\s*=\s*(\S+)$/);
+    if (!match || !match[1]) continue;
+    if (isCodeArtifactRegistryUrl(match[1])) return line;
+  }
+  return null;
+}
+function isCodeArtifactRegistryUrl(value) {
+  try {
+    return new URL(value).hostname.includes(".codeartifact.");
+  } catch {
+    return value.includes(".codeartifact.");
+  }
+}
+function stripUnscopedCodeArtifactRegistry(content) {
+  const offender = findUnscopedCodeArtifactRegistry(content);
+  if (offender === null) return { content, removed: null };
+  const kept = content.split("\n").filter((line) => findUnscopedCodeArtifactRegistry(line) === null);
+  return { content: kept.join("\n"), removed: offender };
+}
+function npmrcAuthKeyForEndpoint(endpoint) {
+  const withoutScheme = endpoint.replace(/^https?:\/\//, "");
+  return `//${withoutScheme.endsWith("/") ? withoutScheme : `${withoutScheme}/`}`;
+}
+function upsertNpmrcLines(content, entries) {
+  let lines = content.length ? content.split("\n") : [];
+  const trailingNewline = content.endsWith("\n");
+  if (trailingNewline) lines = lines.slice(0, -1);
+  for (const { key, value } of entries) {
+    const line = `${key}=${value}`;
+    const idx = lines.findIndex((l) => {
+      const trimmed = l.trim();
+      if (!trimmed || trimmed.startsWith(";") || trimmed.startsWith("#")) return false;
+      const eq = trimmed.indexOf("=");
+      return eq > 0 && trimmed.slice(0, eq).trim() === key;
+    });
+    if (idx >= 0) lines[idx] = line;
+    else lines.push(line);
+  }
+  return lines.join("\n") + "\n";
+}
+function classifyRegistryStatus(status) {
+  return status === 401 || status === 403 ? "expired" : "fresh";
+}
+async function probeRegistryToken(opts) {
+  const npmrcPath = opts?.npmrcPath ?? homeNpmrcPath();
+  const timeoutMs = opts?.timeoutMs ?? 8e3;
+  const fetchFn = opts?.fetchFn ?? fetch;
+  let auth = null;
+  try {
+    auth = parseNpmrcRegistryAuth(fs.readFileSync(npmrcPath, "utf-8"));
+  } catch {
+  }
+  if (!auth) return { state: "missing" };
+  try {
+    const res = await fetchFn(`${auth.endpoint}${encodeURIComponent("@mesh-tech/hub")}`, {
+      method: "GET",
+      headers: { authorization: `Bearer ${auth.token}` },
+      signal: AbortSignal.timeout(timeoutMs)
+    });
+    const state = classifyRegistryStatus(res.status);
+    return state === "expired" ? { state, detail: `registry answered HTTP ${res.status} for an authenticated request` } : { state };
+  } catch (err) {
+    return {
+      state: "unreachable",
+      detail: err instanceof Error ? err.message : String(err)
+    };
+  }
+}
+function classifyRegistryPreflight(probe, session) {
+  const email = session?.email;
+  const fix = "mesh init";
+  if (probe.state === "fresh") return { state: "valid", email, fix };
+  return { state: probe.state, email, fix, detail: probe.detail };
+}
+async function registryPreflight(opts) {
+  const probe = await probeRegistryToken(opts);
+  let session = null;
+  try {
+    const { readRegistrySession } = await import("./mesh.registry-identity-2HSGQGJC.js");
+    session = readRegistrySession();
+  } catch {
+  }
+  return classifyRegistryPreflight(probe, session);
+}
+function isNpmAuthErrorText(text) {
+  return /\bE?40[13]\b|unauthenticated|unable to authenticate|authentication (required|failed)/i.test(
+    text
+  );
+}
+function isNpmAuthError(err) {
+  const e = err;
+  const text = [e?.stderr, e?.message].map((v) => v === null || v === void 0 ? "" : String(v)).join("\n");
+  return isNpmAuthErrorText(text);
+}
+function isExpiredAwsTokenMessage(message) {
+  return /expired|invalid.*(security )?token|token.*(is )?invalid|no credential|could not load credentials|could not be found|sso session/i.test(
+    message
+  );
+}
+function parseSsoSessionNames(content) {
+  const names = [];
+  for (const line of content.split("\n")) {
+    const match = line.trim().match(/^\[sso-session\s+([^\]]+)\]$/);
+    if (match && match[1]) names.push(match[1].trim());
+  }
+  return names;
+}
+function awsConfigHasProfile(content, profile) {
+  const pattern = new RegExp(
+    `^\\[(?:profile\\s+)?${profile.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}\\]$`
+  );
+  return content.split("\n").some((line) => pattern.test(line.trim()));
+}
+function readAwsConfig() {
+  const file = process.env.AWS_CONFIG_FILE ?? path.join(os.homedir(), ".aws", "config");
+  try {
+    return fs.readFileSync(file, "utf-8");
+  } catch {
+    return "";
+  }
+}
+function appUsesMeshPackages(appRoot) {
+  try {
+    const pkg = JSON.parse(fs.readFileSync(path.join(appRoot, "package.json"), "utf-8"));
+    return [pkg.dependencies, pkg.devDependencies, pkg.optionalDependencies].some(
+      (deps) => deps && Object.keys(deps).some((name) => name.startsWith("@mesh-tech/"))
+    );
+  } catch {
+    return false;
+  }
+}
+
+export {
+  REGISTRY_LOGIN_FIX,
+  REGISTRY_LOGIN_FIX_AWS,
+  registryLoginFix,
+  SSO_LOGIN_FIX,
+  SSO_SESSION_SNIPPET,
+  homeNpmrcPath,
+  parseNpmrcRegistryAuth,
+  findUnscopedCodeArtifactRegistry,
+  stripUnscopedCodeArtifactRegistry,
+  npmrcAuthKeyForEndpoint,
+  upsertNpmrcLines,
+  classifyRegistryStatus,
+  probeRegistryToken,
+  classifyRegistryPreflight,
+  registryPreflight,
+  isNpmAuthErrorText,
+  isNpmAuthError,
+  isExpiredAwsTokenMessage,
+  parseSsoSessionNames,
+  awsConfigHasProfile,
+  readAwsConfig,
+  appUsesMeshPackages
+};

package/dist/bin/mesh.chunk-5A5OFSYR.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../src/utils/auth-preflight.ts"],
+  "mappings": ";AAYA,YAAY,QAAQ;AACpB,YAAY,QAAQ;AACpB,YAAY,UAAU;AAWf,IAAM,qBAAqB;AAU3B,IAAM,yBAAyB;AAU/B,SAAS,mBAA2B;AACzC,SAAO;AACT;AAGO,IAAM,gBAAgB;AAOtB,IAAM,sBAAsB;AAAA;AAAA;AAAA;AAiB5B,SAAS,gBAAwB;AACtC,SAAY,UAAQ,WAAQ,GAAG,QAAQ;AACzC;AAcO,SAAS,uBAAuB,SAA2C;AAChF,aAAW,QAAQ,QAAQ,MAAM,IAAI,GAAG;AACtC,UAAM,QAAQ,KAAK,KAAK,EAAE,MAAM,oDAAoD;AACpF,QAAI,SAAS,MAAM,CAAC,KAAK,MAAM,CAAC,GAAG;AACjC,YAAM,WAAW,WAAW,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,KAAK,GAAG;AACxE,aAAO,EAAE,UAAU,OAAO,MAAM,CAAC,EAAE,KAAK,EAAE;AAAA,IAC5C;AAAA,EACF;AACA,SAAO;AACT;AAqBO,SAAS,iCAAiC,SAAgC;AAC/E,aAAW,QAAQ,QAAQ,MAAM,IAAI,GAAG;AACtC,UAAM,UAAU,KAAK,KAAK;AAE1B,QAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,KAAK,QAAQ,WAAW,GAAG,EAAG;AAEpE,UAAM,QAAQ,QAAQ,MAAM,wBAAwB;AACpD,QAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAG;AACzB,QAAI,0BAA0B,MAAM,CAAC,CAAC,EAAG,QAAO;AAAA,EAClD;AACA,SAAO;AACT;AAGA,SAAS,0BAA0B,OAAwB;AACzD,MAAI;AACF,WAAO,IAAI,IAAI,KAAK,EAAE,SAAS,SAAS,gBAAgB;AAAA,EAC1D,QAAQ;AAGN,WAAO,MAAM,SAAS,gBAAgB;AAAA,EACxC;AACF;AAQO,SAAS,kCAAkC,SAGhD;AACA,QAAM,WAAW,iCAAiC,OAAO;AACzD,MAAI,aAAa,KAAM,QAAO,EAAE,SAAS,SAAS,KAAK;AAEvD,QAAM,OAAO,QACV,MAAM,IAAI,EACV,OAAO,CAAC,SAAS,iCAAiC,IAAI,MAAM,IAAI;AAEnE,SAAO,EAAE,SAAS,KAAK,KAAK,IAAI,GAAG,SAAS,SAAS;AACvD;AAWO,SAAS,wBAAwB,UAA0B;AAChE,QAAM,gBAAgB,SAAS,QAAQ,gBAAgB,EAAE;AACzD,SAAO,KAAK,cAAc,SAAS,GAAG,IAAI,gBAAgB,GAAG,aAAa,GAAG;AAC/E;AAWO,SAAS,iBACd,SACA,SACQ;AACR,MAAI,QAAQ,QAAQ,SAAS,QAAQ,MAAM,IAAI,IAAI,CAAC;AACpD,QAAM,kBAAkB,QAAQ,SAAS,IAAI;AAC7C,MAAI,gBAAiB,SAAQ,MAAM,MAAM,GAAG,EAAE;AAE9C,aAAW,EAAE,KAAK,MAAM,KAAK,SAAS;AACpC,UAAM,OAAO,GAAG,GAAG,IAAI,KAAK;AAC5B,UAAM,MAAM,MAAM,UAAU,CAAC,MAAM;AACjC,YAAM,UAAU,EAAE,KAAK;AACvB,UAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,KAAK,QAAQ,WAAW,GAAG,EAAG,QAAO;AAC3E,YAAM,KAAK,QAAQ,QAAQ,GAAG;AAC9B,aAAO,KAAK,KAAK,QAAQ,MAAM,GAAG,EAAE,EAAE,KAAK,MAAM;AAAA,IACnD,CAAC;AACD,QAAI,OAAO,EAAG,OAAM,GAAG,IAAI;AAAA,QACtB,OAAM,KAAK,IAAI;AAAA,EACtB;AAEA,SAAO,MAAM,KAAK,IAAI,IAAI;AAC5B;AASO,SAAS,uBAAuB,QAAqC;AAG1E,SAAO,WAAW,OAAO,WAAW,MAAM,YAAY;AACxD;AAWA,eAAsB,mBAAmB,MAId;AACzB,QAAM,YAAY,MAAM,aAAa,cAAc;AACnD,QAAM,YAAY,MAAM,aAAa;AACrC,QAAM,UAAU,MAAM,WAAW;AAEjC,MAAI,OAAiC;AACrC,MAAI;AACF,WAAO,uBAA0B,gBAAa,WAAW,OAAO,CAAC;AAAA,EACnE,QAAQ;AAAA,EAER;AACA,MAAI,CAAC,KAAM,QAAO,EAAE,OAAO,UAAU;AAErC,MAAI;AACF,UAAM,MAAM,MAAM,QAAQ,GAAG,KAAK,QAAQ,GAAG,mBAAmB,gBAAgB,CAAC,IAAI;AAAA,MACnF,QAAQ;AAAA,MACR,SAAS,EAAE,eAAe,UAAU,KAAK,KAAK,GAAG;AAAA,MACjD,QAAQ,YAAY,QAAQ,SAAS;AAAA,IACvC,CAAC;AACD,UAAM,QAAQ,uBAAuB,IAAI,MAAM;AAC/C,WAAO,UAAU,YACb,EAAE,OAAO,QAAQ,0BAA0B,IAAI,MAAM,gCAAgC,IACrF,EAAE,MAAM;AAAA,EACd,SAAS,KAAK;AACZ,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,IACzD;AAAA,EACF;AACF;AAyBO,SAAS,0BACd,OACA,SACmB;AACnB,QAAM,QAAQ,SAAS;AACvB,QAAM,MAAM;AACZ,MAAI,MAAM,UAAU,QAAS,QAAO,EAAE,OAAO,SAAS,OAAO,IAAI;AACjE,SAAO,EAAE,OAAO,MAAM,OAAO,OAAO,KAAK,QAAQ,MAAM,OAAO;AAChE;AAUA,eAAsB,kBAAkB,MAIT;AAC7B,QAAM,QAAQ,MAAM,mBAAmB,IAAI;AAC3C,MAAI,UAAoC;AACxC,MAAI;AACF,UAAM,EAAE,oBAAoB,IAAI,MAAM,OAAO,sCAAwB;AACrE,cAAU,oBAAoB;AAAA,EAChC,QAAQ;AAAA,EAER;AACA,SAAO,0BAA0B,OAAO,OAAO;AACjD;AAOO,SAAS,mBAAmB,MAAuB;AACxD,SAAO,wFAAwF;AAAA,IAC7F;AAAA,EACF;AACF;AAGO,SAAS,eAAe,KAAuB;AACpD,QAAM,IAAI;AACV,QAAM,OAAO,CAAC,GAAG,QAAQ,GAAG,OAAO,EAChC,IAAI,CAAC,MAAO,MAAM,QAAQ,MAAM,SAAY,KAAK,OAAO,CAAC,CAAE,EAC3D,KAAK,IAAI;AACZ,SAAO,mBAAmB,IAAI;AAChC;AAGO,SAAS,yBAAyB,SAA0B;AACjE,SAAO,mIAAmI;AAAA,IACxI;AAAA,EACF;AACF;AAOO,SAAS,qBAAqB,SAA2B;AAC9D,QAAM,QAAkB,CAAC;AACzB,aAAW,QAAQ,QAAQ,MAAM,IAAI,GAAG;AACtC,UAAM,QAAQ,KAAK,KAAK,EAAE,MAAM,8BAA8B;AAC9D,QAAI,SAAS,MAAM,CAAC,EAAG,OAAM,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC;AAAA,EACnD;AACA,SAAO;AACT;AAGO,SAAS,oBAAoB,SAAiB,SAA0B;AAC7E,QAAM,UAAU,IAAI;AAAA,IAClB,uBAAuB,QAAQ,QAAQ,uBAAuB,MAAM,CAAC;AAAA,EACvE;AACA,SAAO,QAAQ,MAAM,IAAI,EAAE,KAAK,CAAC,SAAS,QAAQ,KAAK,KAAK,KAAK,CAAC,CAAC;AACrE;AAGO,SAAS,gBAAwB;AACtC,QAAM,OAAO,QAAQ,IAAI,mBAAwB,UAAQ,WAAQ,GAAG,QAAQ,QAAQ;AACpF,MAAI;AACF,WAAU,gBAAa,MAAM,OAAO;AAAA,EACtC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOO,SAAS,oBAAoB,SAA0B;AAC5D,MAAI;AACF,UAAM,MAAM,KAAK,MAAS,gBAAkB,UAAK,SAAS,cAAc,GAAG,OAAO,CAAC;AAKnF,WAAO,CAAC,IAAI,cAAc,IAAI,iBAAiB,IAAI,oBAAoB,EAAE;AAAA,MACvE,CAAC,SAAS,QAAQ,OAAO,KAAK,IAAI,EAAE,KAAK,CAAC,SAAS,KAAK,WAAW,aAAa,CAAC;AAAA,IACnF;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;",
+  "names": []
+}