@noodleseed/one 0.153.0 → 0.154.0

package/dist/commands/app-purge-reconciliation-args.d.ts

@@ -0,0 +1,28 @@
+import type { CliFailure } from './shared.js';
+export type AppPurgeReconciliationArgs = {
+    readonly action: 'preview';
+    readonly output: string;
+    readonly service?: string;
+    readonly authToken?: string;
+    readonly json: boolean;
+} | {
+    readonly action: 'apply';
+    readonly approvedPreview: string;
+    readonly releaseSha: string;
+    readonly approvalReference: string;
+    readonly recoveryCheckpoint: string;
+    readonly reason: string;
+    readonly idempotencyKey: string;
+    readonly yes: true;
+    readonly service?: string;
+    readonly authToken?: string;
+    readonly json: boolean;
+};
+export declare function parseAppPurgeReconciliationArgs(rest: readonly string[]): {
+    readonly ok: true;
+    readonly args: AppPurgeReconciliationArgs;
+} | {
+    readonly ok: false;
+    readonly error: CliFailure;
+};
+//# sourceMappingURL=app-purge-reconciliation-args.d.ts.map

package/dist/commands/app-purge-reconciliation-args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-purge-reconciliation-args.d.ts","sourceRoot":"","sources":["../../src/commands/app-purge-reconciliation-args.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,MAAM,0BAA0B,GAClC;IACE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;IACnB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB,CAAC;AAiBN,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,SAAS,MAAM,EAAE,GAErB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,0BAA0B,CAAA;CAAE,GAChE;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,CAmDrD"}

package/dist/commands/app-purge-reconciliation-args.js

@@ -0,0 +1,124 @@
+import { isAbsolute } from 'node:path';
+import { AppPurgeReconciliationApplyRequestSchema } from '@noodle-borg/wire-contracts';
+import { EXIT } from './output.js';
+const APPLY_EVIDENCE_SCHEMA = AppPurgeReconciliationApplyRequestSchema.pick({
+    releaseSha: true,
+    approvalReference: true,
+    recoveryCheckpoint: true,
+    reason: true,
+    idempotencyKey: true,
+    confirmed: true,
+});
+export function parseAppPurgeReconciliationArgs(rest) {
+    const action = rest[0];
+    if (action !== 'preview' && action !== 'apply') {
+        return failure('app-purge requires preview or apply');
+    }
+    const parsed = parseFlags(rest.slice(1), action);
+    if (!parsed.ok)
+        return parsed;
+    const common = {
+        ...(parsed.flags.values.has('--service')
+            ? { service: parsed.flags.values.get('--service') }
+            : {}),
+        ...(parsed.flags.values.has('--auth-token')
+            ? { authToken: parsed.flags.values.get('--auth-token') }
+            : {}),
+        json: parsed.flags.json,
+    };
+    if (action === 'preview') {
+        const output = parsed.flags.values.get('--output');
+        if (output === undefined || !isAbsolute(output)) {
+            return failure('--output must be an absolute path');
+        }
+        return { ok: true, args: { action, output, ...common } };
+    }
+    if (!parsed.flags.yes)
+        return failure('--yes is required for apply');
+    const approvedPreview = parsed.flags.values.get('--approved-preview');
+    if (approvedPreview === undefined || !isAbsolute(approvedPreview)) {
+        return failure('--approved-preview must be an absolute path');
+    }
+    const evidence = APPLY_EVIDENCE_SCHEMA.safeParse({
+        releaseSha: parsed.flags.values.get('--release-sha'),
+        approvalReference: parsed.flags.values.get('--approval-reference'),
+        recoveryCheckpoint: parsed.flags.values.get('--recovery-checkpoint'),
+        reason: parsed.flags.values.get('--reason'),
+        idempotencyKey: parsed.flags.values.get('--idempotency-key'),
+        confirmed: true,
+    });
+    if (!evidence.success)
+        return failure('apply evidence is missing or invalid');
+    return {
+        ok: true,
+        args: {
+            action,
+            approvedPreview,
+            releaseSha: evidence.data.releaseSha,
+            approvalReference: evidence.data.approvalReference,
+            recoveryCheckpoint: evidence.data.recoveryCheckpoint,
+            reason: evidence.data.reason,
+            idempotencyKey: evidence.data.idempotencyKey,
+            yes: true,
+            ...common,
+        },
+    };
+}
+function parseFlags(rest, action) {
+    const allowed = action === 'preview'
+        ? new Set(['--output', '--service', '--auth-token'])
+        : new Set([
+            '--approved-preview',
+            '--release-sha',
+            '--approval-reference',
+            '--recovery-checkpoint',
+            '--reason',
+            '--idempotency-key',
+            '--service',
+            '--auth-token',
+        ]);
+    const values = new Map();
+    let json = false;
+    let yes = false;
+    for (let index = 0; index < rest.length; index++) {
+        const flag = rest[index];
+        if (flag === '--json') {
+            if (json)
+                return failure('--json may be supplied once');
+            json = true;
+            continue;
+        }
+        if (flag === '--yes' && action === 'apply') {
+            if (yes)
+                return failure('--yes may be supplied once');
+            yes = true;
+            continue;
+        }
+        if (flag === undefined || !allowed.has(flag)) {
+            return failure('unknown or inapplicable argument');
+        }
+        const value = rest[index + 1];
+        if (value === undefined || value.length === 0 || value.startsWith('--')) {
+            return failure(`a value for ${flag} is required`);
+        }
+        if (values.has(flag))
+            return failure(`${flag} may be supplied once`);
+        values.set(flag, value);
+        index++;
+    }
+    return { ok: true, flags: { values, json, yes } };
+}
+function failure(message) {
+    return {
+        ok: false,
+        error: {
+            code: 'usage',
+            message,
+            cause: 'The service app-purge command or one of its arguments is invalid.',
+            fix: 'Use a fresh preview artifact and provide every required apply evidence flag.',
+            next: 'noodle service app-purge preview --output <absolute-path>',
+            exitCode: EXIT.USAGE,
+        },
+    };
+}
+//# sourceMappingURL=app-purge-reconciliation-args.js.map

package/dist/commands/app-purge-reconciliation-args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-purge-reconciliation-args.js","sourceRoot":"","sources":["../../src/commands/app-purge-reconciliation-args.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,wCAAwC,EAAE,MAAM,6BAA6B,CAAC;AACvF,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AA+BnC,MAAM,qBAAqB,GAAG,wCAAwC,CAAC,IAAI,CAAC;IAC1E,UAAU,EAAE,IAAI;IAChB,iBAAiB,EAAE,IAAI;IACvB,kBAAkB,EAAE,IAAI;IACxB,MAAM,EAAE,IAAI;IACZ,cAAc,EAAE,IAAI;IACpB,SAAS,EAAE,IAAI;CAChB,CAAC,CAAC;AAEH,MAAM,UAAU,+BAA+B,CAC7C,IAAuB;IAIvB,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QAC/C,OAAO,OAAO,CAAC,qCAAqC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAC9B,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;YACtC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAW,EAAE;YAC7D,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC;YACzC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAW,EAAE;YAClE,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;KACxB,CAAC;IACF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,OAAO,OAAO,CAAC,mCAAmC,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG;QAAE,OAAO,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACrE,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACtE,IAAI,eAAe,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QAClE,OAAO,OAAO,CAAC,6CAA6C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,SAAS,CAAC;QAC/C,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC;QACpD,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC;QAClE,kBAAkB,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC;QACpE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QAC3C,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAC5D,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,sCAAsC,CAAC,CAAC;IAC9E,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACJ,MAAM;YACN,eAAe;YACf,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU;YACpC,iBAAiB,EAAE,QAAQ,CAAC,IAAI,CAAC,iBAAiB;YAClD,kBAAkB,EAAE,QAAQ,CAAC,IAAI,CAAC,kBAAkB;YACpD,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM;YAC5B,cAAc,EAAE,QAAQ,CAAC,IAAI,CAAC,cAAc;YAC5C,GAAG,EAAE,IAAI;YACT,GAAG,MAAM;SACV;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CACjB,IAAuB,EACvB,MAA2B;IAI3B,MAAM,OAAO,GACX,MAAM,KAAK,SAAS;QAClB,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;QACpD,CAAC,CAAC,IAAI,GAAG,CAAC;YACN,oBAAoB;YACpB,eAAe;YACf,sBAAsB;YACtB,uBAAuB;YACvB,UAAU;YACV,mBAAmB;YACnB,WAAW;YACX,cAAc;SACf,CAAC,CAAC;IACT,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,IAAI,IAAI;gBAAE,OAAO,OAAO,CAAC,6BAA6B,CAAC,CAAC;YACxD,IAAI,GAAG,IAAI,CAAC;YACZ,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,OAAO,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YAC3C,IAAI,GAAG;gBAAE,OAAO,OAAO,CAAC,4BAA4B,CAAC,CAAC;YACtD,GAAG,GAAG,IAAI,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,OAAO,OAAO,CAAC,kCAAkC,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACxE,OAAO,OAAO,CAAC,eAAe,IAAI,cAAc,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC,GAAG,IAAI,uBAAuB,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACxB,KAAK,EAAE,CAAC;IACV,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,OAAO,CAAC,OAAe;IAC9B,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,OAAO;YACP,KAAK,EAAE,mEAAmE;YAC1E,GAAG,EAAE,8EAA8E;YACnF,IAAI,EAAE,2DAA2D;YACjE,QAAQ,EAAE,IAAI,CAAC,KAAK;SACrB;KACF,CAAC;AACJ,CAAC"}

package/dist/commands/app-purge-reconciliation-files.d.ts

@@ -0,0 +1,8 @@
+import { type AppPurgeReconciliationPreviewArtifactV1 } from '@noodle-borg/wire-contracts';
+/** Create a new approved-preview artifact without overwriting or following caller-controlled links. */
+export declare function writeAppPurgeReconciliationPreview(path: string, value: unknown): Promise<void>;
+/** Read one bounded approved artifact from its opened descriptor and reproduce its checksum. */
+export declare function readAppPurgeReconciliationPreview(path: string): Promise<AppPurgeReconciliationPreviewArtifactV1>;
+/** Strict schema plus canonical SHA-256 verification shared by service and file boundaries. */
+export declare function validateAppPurgeReconciliationPreview(value: unknown): AppPurgeReconciliationPreviewArtifactV1;
+//# sourceMappingURL=app-purge-reconciliation-files.d.ts.map

package/dist/commands/app-purge-reconciliation-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-purge-reconciliation-files.d.ts","sourceRoot":"","sources":["../../src/commands/app-purge-reconciliation-files.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,uCAAuC,EAE7C,MAAM,6BAA6B,CAAC;AAIrC,uGAAuG;AACvG,wBAAsB,kCAAkC,CACtD,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,IAAI,CAAC,CAiCf;AAED,gGAAgG;AAChG,wBAAsB,iCAAiC,CACrD,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,uCAAuC,CAAC,CA6BlD;AAED,+FAA+F;AAC/F,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,OAAO,GACb,uCAAuC,CAQzC"}

package/dist/commands/app-purge-reconciliation-files.js

@@ -0,0 +1,109 @@
+import { createHash } from 'node:crypto';
+import { constants, link, lstat, mkdtemp, open, rmdir, unlink } from 'node:fs/promises';
+import { dirname, isAbsolute, join } from 'node:path';
+import { AppPurgeReconciliationPreviewArtifactSchema, appPurgeReconciliationChecksumPayload, } from '@noodle-borg/wire-contracts';
+const MAX_PREVIEW_BYTES = 256 * 1024;
+/** Create a new approved-preview artifact without overwriting or following caller-controlled links. */
+export async function writeAppPurgeReconciliationPreview(path, value) {
+    const artifact = validateAppPurgeReconciliationPreview(value);
+    if (!isAbsolute(path))
+        throw previewWriteFailure();
+    const bytes = Buffer.from(`${JSON.stringify(artifact)}\n`, 'utf8');
+    if (bytes.byteLength > MAX_PREVIEW_BYTES)
+        throw previewWriteFailure();
+    let stagingDirectory;
+    let stagingPath;
+    let handle;
+    try {
+        stagingDirectory = await mkdtemp(join(dirname(path), '.noodle-app-purge-preview-'));
+        const stagingDirectoryStat = await lstat(stagingDirectory);
+        if (!stagingDirectoryStat.isDirectory() || (stagingDirectoryStat.mode & 0o077) !== 0) {
+            throw previewWriteFailure();
+        }
+        stagingPath = join(stagingDirectory, 'artifact.json');
+        handle = await open(stagingPath, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
+        const stat = await handle.stat();
+        if (!stat.isFile() || !isExactMode(Number(stat.mode)))
+            throw previewWriteFailure();
+        await handle.writeFile(bytes);
+        await handle.sync();
+        await handle.close();
+        handle = undefined;
+        await link(stagingPath, path);
+    }
+    catch {
+        await handle?.close().catch(() => undefined);
+        throw previewWriteFailure();
+    }
+    finally {
+        await cleanPrivateStagingPath(stagingPath, stagingDirectory);
+    }
+}
+/** Read one bounded approved artifact from its opened descriptor and reproduce its checksum. */
+export async function readAppPurgeReconciliationPreview(path) {
+    if (!isAbsolute(path))
+        throw previewReadFailure();
+    let handle;
+    try {
+        handle = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+    }
+    catch {
+        throw previewReadFailure();
+    }
+    try {
+        const stat = await handle.stat();
+        if (!stat.isFile() || !isExactMode(stat.mode) || stat.size > MAX_PREVIEW_BYTES) {
+            throw previewReadFailure();
+        }
+        const buffer = Buffer.alloc(MAX_PREVIEW_BYTES + 1);
+        let bytesRead = 0;
+        while (bytesRead < buffer.byteLength) {
+            const read = await handle.read(buffer, bytesRead, buffer.byteLength - bytesRead, bytesRead);
+            if (read.bytesRead === 0)
+                break;
+            bytesRead += read.bytesRead;
+        }
+        if (bytesRead > MAX_PREVIEW_BYTES)
+            throw previewReadFailure();
+        return validateAppPurgeReconciliationPreview(JSON.parse(buffer.subarray(0, bytesRead).toString('utf8')));
+    }
+    catch {
+        throw previewReadFailure();
+    }
+    finally {
+        await handle.close();
+    }
+}
+/** Strict schema plus canonical SHA-256 verification shared by service and file boundaries. */
+export function validateAppPurgeReconciliationPreview(value) {
+    const artifact = AppPurgeReconciliationPreviewArtifactSchema.parse(value);
+    const { checksum, ...unsigned } = artifact;
+    const actual = `sha256:${createHash('sha256')
+        .update(appPurgeReconciliationChecksumPayload(unsigned))
+        .digest('hex')}`;
+    if (checksum !== actual)
+        throw previewReadFailure();
+    return artifact;
+}
+function isExactMode(mode) {
+    return (mode & 0o7777) === 0o600;
+}
+async function cleanPrivateStagingPath(stagingPath, stagingDirectory) {
+    if (stagingPath !== undefined)
+        await unlink(stagingPath).catch(() => undefined);
+    if (stagingDirectory !== undefined)
+        await rmdir(stagingDirectory).catch(() => undefined);
+}
+class AppPurgePreviewFileError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'AppPurgePreviewFileError';
+    }
+}
+function previewWriteFailure() {
+    return new AppPurgePreviewFileError('The preview artifact could not be written safely.');
+}
+function previewReadFailure() {
+    return new AppPurgePreviewFileError('The approved preview artifact is invalid.');
+}
+//# sourceMappingURL=app-purge-reconciliation-files.js.map

package/dist/commands/app-purge-reconciliation-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-purge-reconciliation-files.js","sourceRoot":"","sources":["../../src/commands/app-purge-reconciliation-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EACL,2CAA2C,EAE3C,qCAAqC,GACtC,MAAM,6BAA6B,CAAC;AAErC,MAAM,iBAAiB,GAAG,GAAG,GAAG,IAAI,CAAC;AAErC,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,IAAY,EACZ,KAAc;IAEd,MAAM,QAAQ,GAAG,qCAAqC,CAAC,KAAK,CAAC,CAAC;IAC9D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,mBAAmB,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnE,IAAI,KAAK,CAAC,UAAU,GAAG,iBAAiB;QAAE,MAAM,mBAAmB,EAAE,CAAC;IACtE,IAAI,gBAAoC,CAAC;IACzC,IAAI,WAA+B,CAAC;IACpC,IAAI,MAAoD,CAAC;IACzD,IAAI,CAAC;QACH,gBAAgB,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,4BAA4B,CAAC,CAAC,CAAC;QACpF,MAAM,oBAAoB,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC3D,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,IAAI,CAAC,oBAAoB,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACrF,MAAM,mBAAmB,EAAE,CAAC;QAC9B,CAAC;QACD,WAAW,GAAG,IAAI,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;QACtD,MAAM,GAAG,MAAM,IAAI,CACjB,WAAW,EACX,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAChF,KAAK,CACN,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,mBAAmB,EAAE,CAAC;QACnF,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,GAAG,SAAS,CAAC;QACnB,MAAM,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,mBAAmB,EAAE,CAAC;IAC9B,CAAC;YAAS,CAAC;QACT,MAAM,uBAAuB,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,IAAY;IAEZ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,kBAAkB,EAAE,CAAC;IAClD,IAAI,MAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,kBAAkB,EAAE,CAAC;IAC7B,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,iBAAiB,EAAE,CAAC;YAC/E,MAAM,kBAAkB,EAAE,CAAC;QAC7B,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC;QACnD,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,OAAO,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,EAAE,SAAS,CAAC,CAAC;YAC5F,IAAI,IAAI,CAAC,SAAS,KAAK,CAAC;gBAAE,MAAM;YAChC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC;QAC9B,CAAC;QACD,IAAI,SAAS,GAAG,iBAAiB;YAAE,MAAM,kBAAkB,EAAE,CAAC;QAC9D,OAAO,qCAAqC,CAC1C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAC3D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,kBAAkB,EAAE,CAAC;IAC7B,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,qCAAqC,CACnD,KAAc;IAEd,MAAM,QAAQ,GAAG,2CAA2C,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1E,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC;IAC3C,MAAM,MAAM,GAAG,UAAU,UAAU,CAAC,QAAQ,CAAC;SAC1C,MAAM,CAAC,qCAAqC,CAAC,QAAQ,CAAC,CAAC;SACvD,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACnB,IAAI,QAAQ,KAAK,MAAM;QAAE,MAAM,kBAAkB,EAAE,CAAC;IACpD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,KAAK,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,WAA+B,EAC/B,gBAAoC;IAEpC,IAAI,WAAW,KAAK,SAAS;QAAE,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAChF,IAAI,gBAAgB,KAAK,SAAS;QAAE,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,wBAAyB,SAAQ,KAAK;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED,SAAS,mBAAmB;IAC1B,OAAO,IAAI,wBAAwB,CAAC,mDAAmD,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO,IAAI,wBAAwB,CAAC,2CAA2C,CAAC,CAAC;AACnF,CAAC"}

package/dist/commands/app-purge-reconciliation-ops.d.ts

@@ -0,0 +1,3 @@
+import type { ConfigLocation } from '../config.js';
+export declare function runAppPurgeReconciliation(rest: readonly string[], env: NodeJS.ProcessEnv, home: ConfigLocation): Promise<number>;
+//# sourceMappingURL=app-purge-reconciliation-ops.d.ts.map

package/dist/commands/app-purge-reconciliation-ops.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-purge-reconciliation-ops.d.ts","sourceRoot":"","sources":["../../src/commands/app-purge-reconciliation-ops.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAiBnD,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,MAAM,CAAC,CAoBjB"}

package/dist/commands/app-purge-reconciliation-ops.js

@@ -0,0 +1,190 @@
+import { AppPurgeReconciliationApplyRequestSchema, AppPurgeReconciliationClientResponseSchema, AppPurgeReconciliationErrorCodeSchema, AppPurgeReconciliationPreviewRequestSchema, } from '@noodle-borg/wire-contracts';
+import { resolveControlPlaneToken, ServiceRequestError, serviceJson } from '../control-plane.js';
+import { parseAppPurgeReconciliationArgs, } from './app-purge-reconciliation-args.js';
+import { readAppPurgeReconciliationPreview, validateAppPurgeReconciliationPreview, writeAppPurgeReconciliationPreview, } from './app-purge-reconciliation-files.js';
+import { EXIT, printJsonOk } from './output.js';
+import { authRequired, printCliFailure } from './shared.js';
+const COMMAND = 'service app-purge';
+const DEFINITE_APPLY_REJECTION_STATUSES = new Set([400, 401, 403, 404, 409, 415]);
+export async function runAppPurgeReconciliation(rest, env, home) {
+    const parsed = parseAppPurgeReconciliationArgs(rest);
+    const json = rest.includes('--json');
+    if (!parsed.ok)
+        return printCliFailure(COMMAND, parsed.error, json);
+    const args = parsed.args;
+    try {
+        const resolved = await resolveControlPlaneToken({
+            serviceFlag: args.service,
+            authFlag: args.authToken,
+            env,
+            home,
+        });
+        if (resolved.token === undefined)
+            return printCliFailure(COMMAND, authRequired(), args.json);
+        const root = `${resolved.serviceUrl}/v1/service/app-purge-reconciliation`;
+        return args.action === 'preview'
+            ? await runPreview(args, root, resolved.token)
+            : await runApply(args, root, resolved.token);
+    }
+    catch (error) {
+        return printCliFailure(COMMAND, appPurgeFailure(error), args.json);
+    }
+}
+async function runPreview(args, root, token) {
+    const request = AppPurgeReconciliationPreviewRequestSchema.parse({ schemaVersion: 1 });
+    const response = AppPurgeReconciliationClientResponseSchema.parse(await serviceJson(`${root}/preview`, token, {
+        method: 'POST',
+        redirect: 'manual',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify(request),
+    }));
+    if (!('artifact' in response))
+        throw new Error('unexpected app purge response');
+    const artifact = validateAppPurgeReconciliationPreview(response.artifact);
+    await writeAppPurgeReconciliationPreview(args.output, artifact);
+    const safe = {
+        artifactPath: args.output,
+        candidateCount: artifact.candidateCount,
+        checksum: artifact.checksum,
+        releaseSha: artifact.releaseSha,
+        expiresAt: artifact.expiresAt,
+        truncated: artifact.truncated,
+    };
+    if (args.json)
+        printJsonOk({ appPurge: safe });
+    else {
+        console.log(`Preview artifact: ${safe.artifactPath}`);
+        console.log(`Candidates: ${safe.candidateCount}`);
+        console.log(`Checksum: ${safe.checksum}`);
+        console.log(`Release SHA: ${safe.releaseSha}`);
+        console.log(`Expires at: ${safe.expiresAt}`);
+        console.log(`Truncated: ${safe.truncated}`);
+    }
+    return EXIT.OK;
+}
+async function runApply(args, root, token) {
+    const preview = await readAppPurgeReconciliationPreview(args.approvedPreview);
+    if (preview.releaseSha !== args.releaseSha) {
+        throw new Error('approved preview release does not match apply evidence');
+    }
+    const request = AppPurgeReconciliationApplyRequestSchema.parse({
+        schemaVersion: 1,
+        preview,
+        releaseSha: args.releaseSha,
+        approvalReference: args.approvalReference,
+        recoveryCheckpoint: args.recoveryCheckpoint,
+        reason: args.reason,
+        idempotencyKey: args.idempotencyKey,
+        confirmed: true,
+    });
+    let rawResponse;
+    try {
+        rawResponse = await serviceJson(`${root}/apply`, token, {
+            method: 'POST',
+            redirect: 'manual',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify(request),
+        });
+    }
+    catch (error) {
+        if (error instanceof ServiceRequestError &&
+            DEFINITE_APPLY_REJECTION_STATUSES.has(error.status)) {
+            throw error;
+        }
+        throw new AppPurgeApplyOutcomeUnknownError(!(error instanceof ServiceRequestError) || error.status === 0);
+    }
+    let response;
+    try {
+        response = AppPurgeReconciliationClientResponseSchema.parse(rawResponse);
+        if (!('result' in response))
+            throw new Error('unexpected app purge response');
+        if (response.result.previewChecksum !== preview.checksum ||
+            response.result.releaseSha !== args.releaseSha ||
+            response.result.candidateCount !== preview.candidateCount ||
+            response.result.deletedCount !== preview.candidateCount) {
+            throw new Error('app purge result does not match the approved preview');
+        }
+    }
+    catch {
+        throw new AppPurgeApplyOutcomeUnknownError(false);
+    }
+    const safe = {
+        operationId: response.result.operationId,
+        previewChecksum: response.result.previewChecksum,
+        releaseSha: response.result.releaseSha,
+        candidateCount: response.result.candidateCount,
+        deletedCount: response.result.deletedCount,
+        appliedAt: response.result.appliedAt,
+        replayed: response.replayed,
+    };
+    if (args.json)
+        printJsonOk({ appPurge: safe });
+    else {
+        console.log(`Operation ID: ${safe.operationId}`);
+        console.log(`Preview checksum: ${safe.previewChecksum}`);
+        console.log(`Release SHA: ${safe.releaseSha}`);
+        console.log(`Candidates: ${safe.candidateCount}`);
+        console.log(`Deleted: ${safe.deletedCount}`);
+        console.log(`Applied at: ${safe.appliedAt}`);
+        console.log(`Replayed: ${safe.replayed}`);
+    }
+    return EXIT.OK;
+}
+function appPurgeFailure(error) {
+    if (error instanceof AppPurgeApplyOutcomeUnknownError) {
+        return {
+            code: 'app_purge_apply_outcome_unknown',
+            message: 'The app purge apply outcome could not be confirmed.',
+            cause: 'The apply request was sent, but no valid result was received; it may have committed.',
+            fix: 'Replay the exact apply command with the same approved artifact, evidence, and idempotency key. Do not create a new preview or change any input.',
+            next: 'Replay the exact original command unchanged with the same approved artifact, evidence, and idempotency key.',
+            exitCode: error.unreachable ? EXIT.UNREACHABLE : EXIT.FAILURE,
+        };
+    }
+    if (error instanceof ServiceRequestError) {
+        const auth = error.status === 401 || error.status === 403;
+        const unavailable = error.status === 0;
+        const code = AppPurgeReconciliationErrorCodeSchema.safeParse(error.code);
+        return {
+            code: auth
+                ? 'auth_failed'
+                : unavailable
+                    ? 'service_unreachable'
+                    : code.success
+                        ? code.data
+                        : 'app_purge_service_error',
+            message: auth
+                ? 'The app purge reconciliation request was not authorized.'
+                : unavailable
+                    ? 'The app purge reconciliation service could not be reached.'
+                    : 'The app purge reconciliation request failed.',
+            cause: auth
+                ? 'The authenticated operator is not authorized for this private operation.'
+                : unavailable
+                    ? 'The control-plane service could not be reached.'
+                    : 'The service rejected the request or its current state no longer matches the preview.',
+            fix: auth
+                ? 'Sign in again and confirm the required super-admin authorization.'
+                : 'Stop, inspect the service state, and create a fresh preview before retrying changed input.',
+            next: auth ? 'noodle login' : 'noodle service app-purge preview --output <absolute-path>',
+            exitCode: auth ? EXIT.AUTH : unavailable ? EXIT.UNREACHABLE : EXIT.FAILURE,
+        };
+    }
+    return {
+        code: 'app_purge_artifact_invalid',
+        message: 'The app purge reconciliation artifact or response is invalid.',
+        cause: 'The bounded reconciliation contract could not be validated or stored safely.',
+        fix: 'Stop and create a new preview artifact at a new absolute path.',
+        next: 'noodle service app-purge preview --output <absolute-path>',
+        exitCode: EXIT.FAILURE,
+    };
+}
+class AppPurgeApplyOutcomeUnknownError extends Error {
+    unreachable;
+    constructor(unreachable) {
+        super('The app purge apply outcome is unknown.');
+        this.unreachable = unreachable;
+        this.name = 'AppPurgeApplyOutcomeUnknownError';
+    }
+}
+//# sourceMappingURL=app-purge-reconciliation-ops.js.map

package/dist/commands/app-purge-reconciliation-ops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-purge-reconciliation-ops.js","sourceRoot":"","sources":["../../src/commands/app-purge-reconciliation-ops.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wCAAwC,EACxC,0CAA0C,EAC1C,qCAAqC,EACrC,0CAA0C,GAC3C,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACjG,OAAO,EAEL,+BAA+B,GAChC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,iCAAiC,EACjC,qCAAqC,EACrC,kCAAkC,GACnC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,YAAY,EAAmB,eAAe,EAAE,MAAM,aAAa,CAAC;AAE7E,MAAM,OAAO,GAAG,mBAAmB,CAAC;AACpC,MAAM,iCAAiC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAElF,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAuB,EACvB,GAAsB,EACtB,IAAoB;IAEpB,MAAM,MAAM,GAAG,+BAA+B,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC;YAC9C,WAAW,EAAE,IAAI,CAAC,OAAO;YACzB,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,GAAG;YACH,IAAI;SACL,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,eAAe,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7F,MAAM,IAAI,GAAG,GAAG,QAAQ,CAAC,UAAU,sCAAsC,CAAC;QAC1E,OAAO,IAAI,CAAC,MAAM,KAAK,SAAS;YAC9B,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC;YAC9C,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,eAAe,CAAC,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,IAAyE,EACzE,IAAY,EACZ,KAAa;IAEb,MAAM,OAAO,GAAG,0CAA0C,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,0CAA0C,CAAC,KAAK,CAC/D,MAAM,WAAW,CAAU,GAAG,IAAI,UAAU,EAAE,KAAK,EAAE;QACnD,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;KAC9B,CAAC,CACH,CAAC;IACF,IAAI,CAAC,CAAC,UAAU,IAAI,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAChF,MAAM,QAAQ,GAAG,qCAAqC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1E,MAAM,kCAAkC,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG;QACX,YAAY,EAAE,IAAI,CAAC,MAAM;QACzB,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC9B,CAAC;IACF,IAAI,IAAI,CAAC,IAAI;QAAE,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;SAC1C,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC,EAAE,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,IAAuE,EACvE,IAAY,EACZ,KAAa;IAEb,MAAM,OAAO,GAAG,MAAM,iCAAiC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC9E,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,OAAO,GAAG,wCAAwC,CAAC,KAAK,CAAC;QAC7D,aAAa,EAAE,CAAC;QAChB,OAAO;QACP,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC;IACH,IAAI,WAAoB,CAAC;IACzB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,WAAW,CAAU,GAAG,IAAI,QAAQ,EAAE,KAAK,EAAE;YAC/D,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,KAAK,YAAY,mBAAmB;YACpC,iCAAiC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EACnD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,gCAAgC,CACxC,CAAC,CAAC,KAAK,YAAY,mBAAmB,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,QAA6E,CAAC;IAClF,IAAI,CAAC;QACH,QAAQ,GAAG,0CAA0C,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACzE,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC9E,IACE,QAAQ,CAAC,MAAM,CAAC,eAAe,KAAK,OAAO,CAAC,QAAQ;YACpD,QAAQ,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU;YAC9C,QAAQ,CAAC,MAAM,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc;YACzD,QAAQ,CAAC,MAAM,CAAC,YAAY,KAAK,OAAO,CAAC,cAAc,EACvD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,gCAAgC,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,IAAI,GAAG;QACX,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW;QACxC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,eAAe;QAChD,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU;QACtC,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc;QAC9C,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY;QAC1C,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;QACpC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;KAC5B,CAAC;IACF,IAAI,IAAI,CAAC,IAAI;QAAE,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;SAC1C,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,IAAI,CAAC,EAAE,CAAC;AACjB,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,YAAY,gCAAgC,EAAE,CAAC;QACtD,OAAO;YACL,IAAI,EAAE,iCAAiC;YACvC,OAAO,EAAE,qDAAqD;YAC9D,KAAK,EAAE,sFAAsF;YAC7F,GAAG,EAAE,iJAAiJ;YACtJ,IAAI,EAAE,6GAA6G;YACnH,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO;SAC9D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC;QAC1D,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,qCAAqC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzE,OAAO;YACL,IAAI,EAAE,IAAI;gBACR,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,WAAW;oBACX,CAAC,CAAC,qBAAqB;oBACvB,CAAC,CAAC,IAAI,CAAC,OAAO;wBACZ,CAAC,CAAC,IAAI,CAAC,IAAI;wBACX,CAAC,CAAC,yBAAyB;YACjC,OAAO,EAAE,IAAI;gBACX,CAAC,CAAC,0DAA0D;gBAC5D,CAAC,CAAC,WAAW;oBACX,CAAC,CAAC,4DAA4D;oBAC9D,CAAC,CAAC,8CAA8C;YACpD,KAAK,EAAE,IAAI;gBACT,CAAC,CAAC,0EAA0E;gBAC5E,CAAC,CAAC,WAAW;oBACX,CAAC,CAAC,iDAAiD;oBACnD,CAAC,CAAC,sFAAsF;YAC5F,GAAG,EAAE,IAAI;gBACP,CAAC,CAAC,mEAAmE;gBACrE,CAAC,CAAC,4FAA4F;YAChG,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,2DAA2D;YACzF,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO;SAC3E,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,+DAA+D;QACxE,KAAK,EAAE,8EAA8E;QACrF,GAAG,EAAE,gEAAgE;QACrE,IAAI,EAAE,2DAA2D;QACjE,QAAQ,EAAE,IAAI,CAAC,OAAO;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,gCAAiC,SAAQ,KAAK;IAC7B;IAArB,YAAqB,WAAoB;QACvC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAD9B,gBAAW,GAAX,WAAW,CAAS;QAEvC,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;IACjD,CAAC;CACF"}

package/dist/commands/billing-ops.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"billing-ops.d.ts","sourceRoot":"","sources":["../../src/commands/billing-ops.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAiBnD,gDAAgD;AAChD,wBAAsB,UAAU,CAC9B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,MAAM,CAAC,CA+DjB"}
+{"version":3,"file":"billing-ops.d.ts","sourceRoot":"","sources":["../../src/commands/billing-ops.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAkBnD,gDAAgD;AAChD,wBAAsB,UAAU,CAC9B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,MAAM,CAAC,CAqEjB"}

package/dist/commands/billing-ops.js

@@ -4,6 +4,7 @@ import { runBillingMigrationApply } from './billing-apply-ops.js';
 import { runBillingEnforcement } from './billing-enforcement-ops.js';
 import { runBillingMetering } from './billing-metering-ops.js';
 import { mappingFileFailure, readMappingRequest } from './billing-migration-files.js';
+import { runBillingOrganizationTransfer } from './billing-org-transfer-ops.js';
 import { runBillingAccounts, runBillingOrg } from './billing-read-ops.js';
 import { EXIT, printJsonOk } from './output.js';
 import { printCliFailure, serviceFailure } from './shared.js';
@@ -12,8 +13,14 @@ export async function runBilling(rest, env, home) {
     const json = rest.includes('--json');
     if (rest[0] === 'accounts')
         return runBillingAccounts(rest.slice(1), env, home);
+    if (rest[0] === 'org' && rest[1] === 'transfer') {
+        return runBillingOrganizationTransfer('customer', rest.slice(2), env, home);
+    }
     if (rest[0] === 'org')
         return runBillingOrg(rest.slice(1), env, home);
+    if (rest[0] === 'administration' && rest[1] === 'transfer') {
+        return runBillingOrganizationTransfer('super_admin', rest.slice(2), env, home);
+    }
     if (rest[0] === 'enforcement')
         return runBillingEnforcement(rest.slice(1), env, home);
     if (rest[0] === 'metering')

package/dist/commands/billing-ops.js.map

@@ -1 +1 @@
-{"version":3,"file":"billing-ops.js","sourceRoot":"","sources":["../../src/commands/billing-ops.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,iDAAiD,EAAE,MAAM,6BAA6B,CAAC;AAEhG,OAAO,EAAE,wBAAwB,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AACtF,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAmB,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAS/E,gDAAgD;AAChD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAuB,EACvB,GAAsB,EACtB,IAAoB;IAEpB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU;QAAE,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK;QAAE,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACtE,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,aAAa;QAAE,OAAO,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACtF,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU;QAAE,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;QACnD,OAAO,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QACrD,OAAO,eAAe,CAAC,SAAS,EAAE,YAAY,EAAE,EAAE,IAAI,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,eAAe,CAAC,2BAA2B,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACxF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC;QAC9C,WAAW,EAAE,IAAI,CAAC,OAAO;QACzB,QAAQ,EAAE,IAAI,CAAC,SAAS;QACxB,GAAG;QACH,IAAI;KACL,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,eAAe,CAAC,2BAA2B,EAAE,YAAY,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,OAAsC,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,eAAe,CACpB,2BAA2B,EAC3B,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EACpC,IAAI,CAAC,IAAI,CACV,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,iDAAiD,CAAC,KAAK,CAClE,MAAM,WAAW,CACf,GAAG,QAAQ,CAAC,UAAU,gDAAgD,EACtE,QAAQ,CAAC,KAAK,EACd;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CACF,CACF,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAqC,CAAC;QAC3D,IAAI,IAAI,CAAC,IAAI;YAAE,WAAW,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;;YACjE,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,eAAe,CACpB,2BAA2B,EAC3B,cAAc,CACZ,2BAA2B,EAC3B,KAAK,EACL,wDAAwD,CACzD,EACD,IAAI,CAAC,IAAI,CACV,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAsC,EAAE,IAAwB;IACzF,OAAO,CAAC,GAAG,CAAC,8BAA8B,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,oCAAoC,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CACT,+BAA+B,OAAO,CAAC,WAAW,CAAC,YAAY,wDAAwD,CACxH,CAAC;IACF,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACzB,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,iDAAiD,IAAI,IAAI,gBAAgB,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,gBAAgB,CACvB,IAAuB;IAIvB,IAAI,IAAwB,CAAC;IAC7B,IAAI,OAA2B,CAAC;IAChC,IAAI,SAA6B,CAAC;IAClC,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,GAAG,KAAK,QAAQ;YAAE,IAAI,GAAG,IAAI,CAAC;aAC7B,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;YAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAC9B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,yBAAyB,CAAC,EAAE,CAAC;YACvE,CAAC;YACD,IAAI,GAAG,KAAK,QAAQ;gBAAE,IAAI,GAAG,KAAK,CAAC;iBAC9B,IAAI,GAAG,KAAK,WAAW;gBAAE,OAAO,GAAG,KAAK,CAAC;;gBACzC,SAAS,GAAG,KAAK,CAAC;YACvB,KAAK,EAAE,CAAC;QACV,CAAC;;YAAM,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,qBAAqB,GAAG,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACJ,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,IAAI;SACL;KACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,OAAO,GAAG,6CAA6C;IAC3E,OAAO;QACL,IAAI,EAAE,OAAO;QACb,OAAO;QACP,KAAK,EAAE,yDAAyD;QAChE,GAAG,EAAE,mEAAmE;QACxE,IAAI,EAAE,mEAAmE;QACzE,QAAQ,EAAE,IAAI,CAAC,KAAK;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY;IACnB,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,0CAA0C;QACnD,KAAK,EAAE,4CAA4C;QACnD,GAAG,EAAE,yCAAyC;QAC9C,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,IAAI,CAAC,IAAI;KACpB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"billing-ops.js","sourceRoot":"","sources":["../../src/commands/billing-ops.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,iDAAiD,EAAE,MAAM,6BAA6B,CAAC;AAEhG,OAAO,EAAE,wBAAwB,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AACtF,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAmB,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAS/E,gDAAgD;AAChD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAuB,EACvB,GAAsB,EACtB,IAAoB;IAEpB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU;QAAE,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;QAChD,OAAO,8BAA8B,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK;QAAE,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACtE,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,gBAAgB,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;QAC3D,OAAO,8BAA8B,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,aAAa;QAAE,OAAO,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACtF,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU;QAAE,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;QACnD,OAAO,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QACrD,OAAO,eAAe,CAAC,SAAS,EAAE,YAAY,EAAE,EAAE,IAAI,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,eAAe,CAAC,2BAA2B,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACxF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC;QAC9C,WAAW,EAAE,IAAI,CAAC,OAAO;QACzB,QAAQ,EAAE,IAAI,CAAC,SAAS;QACxB,GAAG;QACH,IAAI;KACL,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,eAAe,CAAC,2BAA2B,EAAE,YAAY,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,OAAsC,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,eAAe,CACpB,2BAA2B,EAC3B,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EACpC,IAAI,CAAC,IAAI,CACV,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,iDAAiD,CAAC,KAAK,CAClE,MAAM,WAAW,CACf,GAAG,QAAQ,CAAC,UAAU,gDAAgD,EACtE,QAAQ,CAAC,KAAK,EACd;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CACF,CACF,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAqC,CAAC;QAC3D,IAAI,IAAI,CAAC,IAAI;YAAE,WAAW,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;;YACjE,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,eAAe,CACpB,2BAA2B,EAC3B,cAAc,CACZ,2BAA2B,EAC3B,KAAK,EACL,wDAAwD,CACzD,EACD,IAAI,CAAC,IAAI,CACV,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAsC,EAAE,IAAwB;IACzF,OAAO,CAAC,GAAG,CAAC,8BAA8B,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,oCAAoC,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CACT,+BAA+B,OAAO,CAAC,WAAW,CAAC,YAAY,wDAAwD,CACxH,CAAC;IACF,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACzB,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,iDAAiD,IAAI,IAAI,gBAAgB,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,gBAAgB,CACvB,IAAuB;IAIvB,IAAI,IAAwB,CAAC;IAC7B,IAAI,OAA2B,CAAC;IAChC,IAAI,SAA6B,CAAC;IAClC,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,GAAG,KAAK,QAAQ;YAAE,IAAI,GAAG,IAAI,CAAC;aAC7B,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;YAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAC9B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,yBAAyB,CAAC,EAAE,CAAC;YACvE,CAAC;YACD,IAAI,GAAG,KAAK,QAAQ;gBAAE,IAAI,GAAG,KAAK,CAAC;iBAC9B,IAAI,GAAG,KAAK,WAAW;gBAAE,OAAO,GAAG,KAAK,CAAC;;gBACzC,SAAS,GAAG,KAAK,CAAC;YACvB,KAAK,EAAE,CAAC;QACV,CAAC;;YAAM,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,qBAAqB,GAAG,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACJ,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,IAAI;SACL;KACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,OAAO,GAAG,6CAA6C;IAC3E,OAAO;QACL,IAAI,EAAE,OAAO;QACb,OAAO;QACP,KAAK,EAAE,yDAAyD;QAChE,GAAG,EAAE,mEAAmE;QACxE,IAAI,EAAE,mEAAmE;QACzE,QAAQ,EAAE,IAAI,CAAC,KAAK;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY;IACnB,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,0CAA0C;QACnD,KAAK,EAAE,4CAA4C;QACnD,GAAG,EAAE,yCAAyC;QAC9C,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,IAAI,CAAC,IAAI;KACpB,CAAC;AACJ,CAAC"}

package/dist/commands/billing-org-transfer-files.d.ts

@@ -0,0 +1,12 @@
+import { type BillingOrganizationTransferArtifact, type BillingOrganizationTransferAuthorityPath } from '@noodle-borg/wire-contracts';
+/** Refuse caller-controlled links and special files before a preview request is made. */
+export declare function assertBillingTransferArtifactDestination(path: string): Promise<void>;
+/** Install an already-synced private artifact without replacing a raced directory entry. */
+export declare function installBillingTransferArtifactNoReplace(temporaryPath: string, destinationPath: string): Promise<void>;
+/** Write private reviewed evidence through a same-directory, exclusive temporary file. */
+export declare function writeBillingTransferArtifact(path: string, artifact: BillingOrganizationTransferArtifact): Promise<void>;
+/** Read strict private evidence from an opened descriptor without following a symlink. */
+export declare function readBillingTransferArtifact<TAuthority extends BillingOrganizationTransferAuthorityPath>(path: string, authorityPath: TAuthority): Promise<Extract<BillingOrganizationTransferArtifact, {
+    readonly authorityPath: TAuthority;
+}>>;
+//# sourceMappingURL=billing-org-transfer-files.d.ts.map

package/dist/commands/billing-org-transfer-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing-org-transfer-files.d.ts","sourceRoot":"","sources":["../../src/commands/billing-org-transfer-files.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,KAAK,mCAAmC,EAExC,KAAK,wCAAwC,EAC9C,MAAM,6BAA6B,CAAC;AAIrC,yFAAyF;AACzF,wBAAsB,wCAAwC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ1F;AAED,4FAA4F;AAC5F,wBAAsB,uCAAuC,CAC3D,aAAa,EAAE,MAAM,EACrB,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,IAAI,CAAC,CAmBf;AAED,0FAA0F;AAC1F,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,mCAAmC,GAC5C,OAAO,CAAC,IAAI,CAAC,CA0Bf;AAED,0FAA0F;AAC1F,wBAAsB,2BAA2B,CAC/C,UAAU,SAAS,wCAAwC,EAE3D,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,UAAU,GACxB,OAAO,CACR,OAAO,CACL,mCAAmC,EACnC;IACE,QAAQ,CAAC,aAAa,EAAE,UAAU,CAAC;CACpC,CACF,CACF,CAyBA"}