@openge/forge-release-vercel 0.0.0-stage → 0.1.0-rc.0

package/dist/node/config.js

@@ -0,0 +1,83 @@
+import { record, ReleaseError } from './errors.js';
+function invalid(field) { throw new ReleaseError('CONFIG_INVALID', { field }); }
+function object(value, keys, field) {
+    const result = record(value);
+    if (value === null || typeof value !== 'object' || Array.isArray(value)
+        || Object.keys(result).some(key => !keys.includes(key)) || keys.some(key => !(key in result)))
+        invalid(field);
+    return result;
+}
+function text(value, field, pattern = /./u) {
+    if (typeof value !== 'string' || value.length === 0 || value.length > 2048
+        || [...value].some(char => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127) || !pattern.test(value))
+        invalid(field);
+    return value;
+}
+function integer(value, maximum, field) {
+    if (!Number.isSafeInteger(value) || typeof value !== 'number' || value <= 0 || value > maximum)
+        invalid(field);
+    return value;
+}
+function commands(value, field) {
+    if (!Array.isArray(value) || value.length === 0 || value.length > 32)
+        invalid(field);
+    return value.map((item) => {
+        const itemRecord = record(item);
+        if (Object.keys(itemRecord).some(key => !['command', 'args', 'timeoutMs'].includes(key)))
+            invalid(field);
+        const command = text(itemRecord.command, `${field}.command`);
+        if (command.startsWith('-') || /\.(?:cmd|bat)$/iu.test(command))
+            invalid(`${field}.command`);
+        if (itemRecord.args !== undefined && (!Array.isArray(itemRecord.args) || itemRecord.args.length > 128
+            || itemRecord.args.some((arg) => typeof arg !== 'string' || arg.length > 8192 || arg.includes(String.fromCharCode(0)))))
+            invalid(`${field}.args`);
+        return { command, ...(itemRecord.args === undefined ? {} : { args: [...itemRecord.args] }),
+            ...(itemRecord.timeoutMs === undefined ? {} : { timeoutMs: integer(itemRecord.timeoutMs, 3_600_000, `${field}.timeoutMs`) }) };
+    });
+}
+export function validateReleaseConfig(value) {
+    const root = object(value, ['schemaVersion', 'git', 'vercel', 'checks', 'acceptance', 'buildInfo', 'limits'], 'config');
+    if (root.schemaVersion !== 1)
+        invalid('schemaVersion');
+    const git = object(root.git, ['remote', 'repository', 'developmentBranch', 'releaseBranch'], 'git');
+    const branch = (value, field) => {
+        const result = text(value, field, /^[a-zA-Z0-9][a-zA-Z0-9._/-]*$/u);
+        if (result.includes('..') || result.includes('//') || result.includes('@{') || result.endsWith('.')
+            || result.endsWith('/') || result.endsWith('.lock') || result.split('/').some(part => part.startsWith('.')))
+            invalid(field);
+        return result;
+    };
+    const developmentBranch = branch(git.developmentBranch, 'git.developmentBranch');
+    const releaseBranch = branch(git.releaseBranch, 'git.releaseBranch');
+    if (developmentBranch === releaseBranch)
+        invalid('git.releaseBranch');
+    const vercel = object(root.vercel, ['teamId', 'projectId', 'productionUrl'], 'vercel');
+    const productionUrl = text(vercel.productionUrl, 'vercel.productionUrl');
+    let url;
+    try {
+        url = new URL(productionUrl);
+    }
+    catch {
+        return invalid('vercel.productionUrl');
+    }
+    if (url.protocol !== 'https:' || url.username || url.password || url.port || url.search || url.hash
+        || url.pathname !== '/' || productionUrl.replace(/\/$/u, '') !== url.origin)
+        invalid('vercel.productionUrl');
+    const build = object(root.buildInfo, ['path', 'revisionField'], 'buildInfo');
+    const path = text(build.path, 'buildInfo.path', /^\/[a-zA-Z0-9/_.-]+$/u);
+    if (path.startsWith('//') || path.split('/').includes('..'))
+        invalid('buildInfo.path');
+    const limits = object(root.limits, ['commandMs', 'deploymentMs', 'pollMs', 'requestMs', 'maxOutputBytes'], 'limits');
+    const deploymentMs = integer(limits.deploymentMs, 3_600_000, 'limits.deploymentMs');
+    return { schemaVersion: 1,
+        git: { remote: text(git.remote, 'git.remote', /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/u),
+            repository: text(git.repository, 'git.repository'), developmentBranch, releaseBranch },
+        vercel: { teamId: text(vercel.teamId, 'vercel.teamId', /^team_[a-zA-Z0-9]+$/u),
+            projectId: text(vercel.projectId, 'vercel.projectId', /^prj_[a-zA-Z0-9]+$/u), productionUrl },
+        checks: commands(root.checks, 'checks'), acceptance: commands(root.acceptance, 'acceptance'),
+        buildInfo: { path, revisionField: text(build.revisionField, 'buildInfo.revisionField', /^[a-zA-Z][a-zA-Z0-9_]*$/u) },
+        limits: { commandMs: integer(limits.commandMs, 3_600_000, 'limits.commandMs'), deploymentMs,
+            pollMs: integer(limits.pollMs, deploymentMs, 'limits.pollMs'), requestMs: integer(limits.requestMs, 300_000, 'limits.requestMs'),
+            maxOutputBytes: integer(limits.maxOutputBytes, 1_048_576, 'limits.maxOutputBytes') } };
+}
+//# sourceMappingURL=config.js.map

package/dist/node/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/node/config.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEnD,SAAS,OAAO,CAAC,KAAa,IAAW,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AAC/F,SAAS,MAAM,CAAC,KAAc,EAAE,IAAuB,EAAE,KAAa;IACpE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WAClE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAChH,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,SAAS,IAAI,CAAC,KAAc,EAAE,KAAa,EAAE,OAAO,GAAG,IAAI;IACzD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI;WACrE,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5H,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,OAAO,CAAC,KAAc,EAAE,OAAe,EAAE,KAAa;IAC7D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,OAAO;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/G,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;IAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACrF,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAa,EAAE,EAAE;QACjC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACzG,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,KAAK,UAAU,CAAC,CAAC;QAC7D,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC;QAC7F,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG;eAChG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC;QAC7J,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,UAAU,CAAC,IAAgB,CAAC,EAAE,CAAC;YACpG,GAAG,CAAC,UAAU,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,KAAK,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC;IACnI,CAAC,CAAC,CAAC;AACL,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;IACxH,IAAI,IAAI,CAAC,aAAa,KAAK,CAAC;QAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,mBAAmB,EAAE,eAAe,CAAC,EAAE,KAAK,CAAC,CAAC;IACpG,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,KAAa,EAAE,EAAE;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,gCAAgC,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;eAC9F,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9H,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;IACjF,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;IACrE,IAAI,iBAAiB,KAAK,aAAa;QAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,eAAe,CAAC,EAAE,QAAQ,CAAC,CAAC;IACvF,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;IACzE,IAAI,GAAQ,CAAC;IAAC,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAAC,CAAC;IACrG,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;WAC9F,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,MAAM;QAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC/G,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,WAAW,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,gBAAgB,EAAE,uBAAuB,CAAC,CAAC;IACzE,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,CAAC,EAAE,QAAQ,CAAC,CAAC;IACrH,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;IACpF,OAAO,EAAE,aAAa,EAAE,CAAC;QACvB,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,+BAA+B,CAAC;YAC5E,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,gBAAgB,CAAC,EAAE,iBAAiB,EAAE,aAAa,EAAE;QACxF,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,sBAAsB,CAAC;YAC5E,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,kBAAkB,EAAE,qBAAqB,CAAC,EAAE,aAAa,EAAE;QAC/F,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC;QAC5F,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,yBAAyB,EAAE,0BAA0B,CAAC,EAAE;QACpH,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,kBAAkB,CAAC,EAAE,YAAY;YACzF,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,eAAe,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,kBAAkB,CAAC;YAChI,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,EAAE,uBAAuB,CAAC,EAAE,EAAE,CAAC;AAC7F,CAAC"}

package/dist/node/errors.d.ts

@@ -0,0 +1,10 @@
+import type { ReleaseErrorCode } from '../contracts.js';
+export declare class ReleaseError extends Error {
+    readonly code: ReleaseErrorCode;
+    readonly details: Readonly<Record<string, unknown>>;
+    constructor(code: ReleaseErrorCode, details?: Readonly<Record<string, unknown>>);
+}
+export declare function redact(text: string): string;
+export declare function assertActive(signal: AbortSignal | undefined): void;
+export declare function record(value: unknown): Record<string, unknown>;
+//# sourceMappingURL=errors.d.ts.map

package/dist/node/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/node/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAExD,qBAAa,YAAa,SAAQ,KAAK;IACzB,QAAQ,CAAC,IAAI,EAAE,gBAAgB;IAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAA3E,IAAI,EAAE,gBAAgB,EAAW,OAAO,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAM;CAGtG;AACD,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAI3C;AACD,wBAAgB,YAAY,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAElE;AACD,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAE9D"}

package/dist/node/errors.js

@@ -0,0 +1,23 @@
+export class ReleaseError extends Error {
+    code;
+    details;
+    constructor(code, details = {}) {
+        super(code);
+        this.code = code;
+        this.details = details;
+        this.name = 'ReleaseError';
+    }
+}
+export function redact(text) {
+    return text.replace(/(bearer\s+)[^\s"']+/giu, '$1[REDACTED]')
+        .replace(/((?:token|password|secret|authorization|api[_-]?key)["']?\s*[:=]\s*["']?)[^\s"',}]+/giu, '$1[REDACTED]')
+        .replace(/(https?:\/\/)[^/@\s]+@/giu, '$1[REDACTED]@');
+}
+export function assertActive(signal) {
+    if (signal?.aborted)
+        throw new ReleaseError('CANCELLED');
+}
+export function record(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value) ? value : {};
+}
+//# sourceMappingURL=errors.js.map

package/dist/node/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/node/errors.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,YAAa,SAAQ,KAAK;IAChB;IAAiC;IAAtD,YAAqB,IAAsB,EAAW,UAA6C,EAAE;QACnG,KAAK,CAAC,IAAI,CAAC,CAAC;QADO,SAAI,GAAJ,IAAI,CAAkB;QAAW,YAAO,GAAP,OAAO,CAAwC;QACtF,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC1C,CAAC;CACF;AACD,MAAM,UAAU,MAAM,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,OAAO,CAAC,wBAAwB,EAAE,cAAc,CAAC;SAC1D,OAAO,CAAC,wFAAwF,EAAE,cAAc,CAAC;SACjH,OAAO,CAAC,2BAA2B,EAAE,eAAe,CAAC,CAAC;AAC3D,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,MAA+B;IAC1D,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,YAAY,CAAC,WAAW,CAAC,CAAC;AAC3D,CAAC;AACD,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtH,CAAC"}

package/dist/node/execution.d.ts

@@ -0,0 +1,20 @@
+import type { ReleaseCheck, ReleaseConfig, ReleaseErrorCode, ReleaseStep } from '../contracts.js';
+export declare function resolveInvocation(command: string, args: readonly string[]): {
+    command: string;
+    args: readonly string[];
+};
+export declare function vercelInvocation(args: readonly string[]): {
+    command: string;
+    args: readonly string[];
+};
+export declare class Execution {
+    readonly cwd: string;
+    readonly config: Pick<ReleaseConfig, 'limits'>;
+    readonly signal: AbortSignal | undefined;
+    readonly steps: ReleaseStep[];
+    private readonly runner;
+    constructor(cwd: string, config: Pick<ReleaseConfig, 'limits'>, signal: AbortSignal | undefined, steps: ReleaseStep[]);
+    run(name: string, check: ReleaseCheck, errorCode: ReleaseErrorCode, values?: Readonly<Record<string, string>>, signal?: AbortSignal | undefined, captureStep?: boolean, onOutput?: (text: string) => void): Promise<string>;
+    git(args: readonly string[]): Promise<string>;
+}
+//# sourceMappingURL=execution.d.ts.map

package/dist/node/execution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution.d.ts","sourceRoot":"","sources":["../../src/node/execution.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAIlG,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAmBxH;AACD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAGtG;AACD,qBAAa,SAAS;IAQR,QAAQ,CAAC,GAAG,EAAE,MAAM;IAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS;IACxH,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE;IAR/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAMpB;gBACkB,GAAG,EAAE,MAAM,EAAW,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAW,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/G,KAAK,EAAE,WAAW,EAAE;IACzB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EACjH,MAAM,0BAAc,EAAE,WAAW,UAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IA8B/F,GAAG,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;CAG9C"}

package/dist/node/execution.js

@@ -0,0 +1,94 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { delimiter, dirname, resolve, win32 } from 'node:path';
+import { createNodeCommandRunner } from '@openge/forge-command-runner/node';
+import { createPosixProcessControl, createWindowsProcessControl } from '@openge/forge-process-control-node';
+import { assertActive, redact, ReleaseError } from './errors.js';
+import { LiveOutput } from './live-output.js';
+export function resolveInvocation(command, args) {
+    if (command === 'node')
+        return { command: process.execPath, args };
+    if (process.platform !== 'win32' || !['pnpm', 'npm'].includes(command))
+        return { command, args };
+    if (command === 'pnpm' && process.env.npm_execpath?.endsWith('pnpm.cjs') && existsSync(process.env.npm_execpath)) {
+        return { command: process.execPath, args: [process.env.npm_execpath, ...args] };
+    }
+    for (const directory of (process.env.PATH ?? '').split(delimiter).filter(Boolean)) {
+        if (command === 'npm') {
+            const path = resolve(directory, 'node_modules/npm/bin/npm-cli.js');
+            if (existsSync(path))
+                return { command: process.execPath, args: [path, ...args] };
+        }
+        else {
+            const shim = resolve(directory, 'pnpm.cmd');
+            if (!existsSync(shim))
+                continue;
+            const match = /%~dp0([^"\r\n]*?pnpm\.cjs)/iu.exec(readFileSync(shim, 'utf8'));
+            const path = match?.[1] === undefined ? undefined : win32.join(dirname(shim), match[1]);
+            if (path && existsSync(path))
+                return { command: process.execPath, args: [path, ...args] };
+        }
+    }
+    throw new ReleaseError('COMMAND_FAILED', { executable: command, reason: 'JS_CLI_UNAVAILABLE' });
+}
+export function vercelInvocation(args) {
+    const require = createRequire(import.meta.url);
+    return { command: process.execPath, args: [resolve(dirname(require.resolve('vercel/package.json')), 'dist/vc.js'), ...args] };
+}
+export class Execution {
+    cwd;
+    config;
+    signal;
+    steps;
+    runner = createNodeCommandRunner({
+        platform: process.platform === 'win32' ? 'win32' : 'posix',
+        processControl: process.platform === 'win32' ? createWindowsProcessControl({ listenerBackend: 'netstat' })
+            : createPosixProcessControl({ listenerBackend: 'lsof' }),
+        terminationPolicy: { mode: 'force' }, terminationTimeoutMs: 5000,
+        identityAcquisition: { timeoutMs: 2000, pollIntervalMs: 20 },
+    });
+    constructor(cwd, config, signal, steps) {
+        this.cwd = cwd;
+        this.config = config;
+        this.signal = signal;
+        this.steps = steps;
+    }
+    async run(name, check, errorCode, values, signal = this.signal, captureStep = true, onOutput) {
+        assertActive(signal);
+        const invocation = resolveInvocation(check.command, check.args ?? []);
+        const live = onOutput === undefined ? undefined : new LiveOutput(this.config.limits.maxOutputBytes, onOutput);
+        const result = await this.runner.run({ ...invocation, cwd: this.cwd,
+            environment: { mode: 'inherit', values: { GIT_TERMINAL_PROMPT: '0', VERCEL_TELEMETRY_DISABLED: '1', ...values } },
+            output: { mode: 'capture', maxBytesPerStream: this.config.limits.maxOutputBytes, overflow: 'truncate' },
+            timeoutMs: Math.min(check.timeoutMs ?? this.config.limits.commandMs, this.config.limits.commandMs),
+            ...(signal === undefined ? {} : { signal }),
+        }, live === undefined ? undefined : event => {
+            if (event.type === 'stdout' || event.type === 'stderr')
+                live.write(event.type, event.chunk);
+        });
+        live?.finish();
+        const stdout = redact(new TextDecoder().decode(result.stdout));
+        const stderr = redact(new TextDecoder().decode(result.stderr));
+        const ok = result.exitCode === 0 && result.terminationReason === 'exit';
+        if (captureStep)
+            this.steps.push({ name, ok, durationMs: result.durationMs,
+                stdout, stderr, exitCode: result.exitCode, truncated: !!result.stdoutTruncated || !!result.stderrTruncated });
+        assertActive(signal);
+        if (result.terminationReason === 'timeout')
+            throw new ReleaseError('COMMAND_TIMEOUT', { step: name });
+        if (!ok) {
+            if (errorCode === 'VERCEL_API' && /(?:no existing credentials|not authenticated|log ?in|unauthorized|invalid token|authentication)/iu.test(stdout + stderr)) {
+                throw new ReleaseError('AUTH_REQUIRED');
+            }
+            throw new ReleaseError(errorCode, { step: name, exitCode: result.exitCode, termination: result.terminationReason,
+                ...(errorCode === 'GIT_FAILED' ? { stdout, stderr, truncated: !!result.stdoutTruncated || !!result.stderrTruncated } : {}) });
+        }
+        if (!captureStep && (result.stdoutTruncated || result.stderrTruncated))
+            throw new ReleaseError(errorCode, { reason: 'OUTPUT_LIMIT', step: name });
+        return stdout.trim();
+    }
+    git(args) {
+        return this.run('git', { command: 'git', args }, 'GIT_FAILED', undefined, this.signal, false);
+    }
+}
+//# sourceMappingURL=execution.js.map

package/dist/node/execution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution.js","sourceRoot":"","sources":["../../src/node/execution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AAE5G,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,IAAuB;IACxE,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;IACnE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACjG,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QACjH,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;IAClF,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAClF,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,EAAE,iCAAiC,CAAC,CAAC;YACnE,IAAI,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACpF,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,SAAS;YAChC,MAAM,KAAK,GAAG,8BAA8B,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YAC9E,MAAM,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACxF,IAAI,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QAC5F,CAAC;IACH,CAAC;IACD,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;AAClG,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,IAAuB;IACtD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,EAAE,YAAY,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;AAChI,CAAC;AACD,MAAM,OAAO,SAAS;IAQC;IAAsB;IAAgD;IAChF;IARM,MAAM,GAAG,uBAAuB,CAAC;QAChD,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;QAC1D,cAAc,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC;YACxG,CAAC,CAAC,yBAAyB,CAAC,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1D,iBAAiB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,oBAAoB,EAAE,IAAI;QAChE,mBAAmB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE;KAC7D,CAAC,CAAC;IACH,YAAqB,GAAW,EAAW,MAAqC,EAAW,MAA+B,EAC/G,KAAoB;QADV,QAAG,GAAH,GAAG,CAAQ;QAAW,WAAM,GAAN,MAAM,CAA+B;QAAW,WAAM,GAAN,MAAM,CAAyB;QAC/G,UAAK,GAAL,KAAK,CAAe;IAAG,CAAC;IACnC,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,KAAmB,EAAE,SAA2B,EAAE,MAAyC,EACjH,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,EAAE,QAAiC;QAC3E,YAAY,CAAC,MAAM,CAAC,CAAC;QACrB,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QAC9G,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG;YACjE,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,mBAAmB,EAAE,GAAG,EAAE,yBAAyB,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,EAAE;YACjH,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE;YACvG,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;YAClG,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;SAC5C,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;YAC1C,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9F,CAAC,CAAC,CAAC;QACH,IAAI,EAAE,MAAM,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,iBAAiB,KAAK,MAAM,CAAC;QACxE,IAAI,WAAW;YAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU;gBACxE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;QAChH,YAAY,CAAC,MAAM,CAAC,CAAC;QACrB,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS;YAAE,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACtG,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,IAAI,SAAS,KAAK,YAAY,IAAI,mGAAmG,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;gBAC5J,MAAM,IAAI,YAAY,CAAC,eAAe,CAAC,CAAC;YAC1C,CAAC;YACD,MAAM,IAAI,YAAY,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,iBAAiB;gBAC9G,GAAG,CAAC,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClI,CAAC;QACD,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAClJ,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IACD,GAAG,CAAC,IAAuB;QACzB,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAChG,CAAC;CACF"}

package/dist/node/git-source.d.ts

@@ -0,0 +1,10 @@
+import type { ReleaseConfig } from '../contracts.js';
+export interface LinkedRepository {
+    readonly type: string;
+    readonly id: string;
+    readonly host?: string;
+    readonly workspaceId?: string;
+}
+export declare function linkedRepository(project: Record<string, unknown>, config: ReleaseConfig): LinkedRepository;
+export declare function assertGitSource(value: unknown, linked: LinkedRepository, config: ReleaseConfig, sha: string): void;
+//# sourceMappingURL=git-source.d.ts.map

package/dist/node/git-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-source.d.ts","sourceRoot":"","sources":["../../src/node/git-source.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAIrD,MAAM,WAAW,gBAAgB;IAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE;AAevI,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,aAAa,GAAG,gBAAgB,CAmB1G;AACD,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAMlH"}

package/dist/node/git-source.js

@@ -0,0 +1,64 @@
+import { record, ReleaseError } from './errors.js';
+import { normalizeRepository } from './git.js';
+function sourceError(reason) { throw new ReleaseError('DEPLOYMENT_SOURCE', { reason }); }
+function identifier(value) {
+    if ((typeof value !== 'string' && typeof value !== 'number') || String(value).length === 0)
+        sourceError('REPOSITORY_ID');
+    return String(value);
+}
+function component(value) {
+    if (typeof value !== 'string' || !/^[a-zA-Z0-9_.-]+$/u.test(value))
+        sourceError('REPOSITORY_NAME');
+    return value;
+}
+function normalizeHost(value) {
+    if (typeof value !== 'string' || !/^[a-zA-Z0-9.-]+(?::\d+)?$/u.test(value))
+        sourceError('GIT_HOST');
+    try {
+        return new URL(`https://${value}`).host.toLowerCase();
+    }
+    catch {
+        return sourceError('GIT_HOST');
+    }
+}
+export function linkedRepository(project, config) {
+    const link = record(project.link);
+    if (link.productionBranch !== config.git.releaseBranch)
+        sourceError('PRODUCTION_BRANCH');
+    let repository, id, workspaceId, host;
+    const type = String(link.type);
+    if (['github', 'github-limited', 'github-custom-host'].includes(type)) {
+        const repositoryHost = type === 'github-custom-host' ? normalizeHost(link.host) : 'github.com';
+        if (type === 'github-custom-host')
+            host = repositoryHost;
+        repository = `${repositoryHost}/${component(link.org)}/${component(link.repo)}`;
+        id = identifier(link.repoId);
+    }
+    else if (type === 'gitlab') {
+        if (typeof link.projectUrl !== 'string' || !/^https?:\/\//u.test(link.projectUrl))
+            sourceError('REPOSITORY_URL');
+        repository = normalizeRepository(link.projectUrl, '.');
+        id = identifier(link.projectId);
+    }
+    else if (type === 'bitbucket') {
+        repository = `bitbucket.org/${component(link.owner)}/${component(link.slug)}`;
+        id = identifier(link.uuid);
+        workspaceId = identifier(link.workspaceUuid);
+    }
+    else
+        return sourceError('GIT_PROVIDER');
+    if (normalizeRepository(repository, '.') !== normalizeRepository(config.git.repository, '.'))
+        sourceError('PROJECT_REPOSITORY');
+    return { type, id, ...(host === undefined ? {} : { host }), ...(workspaceId === undefined ? {} : { workspaceId }) };
+}
+export function assertGitSource(value, linked, config, sha) {
+    const source = record(value);
+    if (source.type !== linked.type || source.sha !== sha || source.ref !== config.git.releaseBranch)
+        sourceError('GIT_SOURCE');
+    if (linked.host !== undefined && normalizeHost(source.host) !== linked.host)
+        sourceError('GIT_SOURCE_HOST');
+    const id = linked.type === 'gitlab' ? source.projectId : linked.type === 'bitbucket' ? source.repoUuid : source.repoId;
+    if (identifier(id) !== linked.id || (linked.workspaceId !== undefined && source.workspaceUuid !== linked.workspaceId))
+        sourceError('GIT_SOURCE_REPOSITORY');
+}
+//# sourceMappingURL=git-source.js.map

package/dist/node/git-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-source.js","sourceRoot":"","sources":["../../src/node/git-source.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAG/C,SAAS,WAAW,CAAC,MAAc,IAAW,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;AACxG,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,WAAW,CAAC,eAAe,CAAC,CAAC;IACzH,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AACD,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,WAAW,CAAC,iBAAiB,CAAC,CAAC;IACnG,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,WAAW,CAAC,UAAU,CAAC,CAAC;IACpG,IAAI,CAAC;QAAC,OAAO,IAAI,GAAG,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IAAC,CAAC;IAC9D,MAAM,CAAC;QAAC,OAAO,WAAW,CAAC,UAAU,CAAC,CAAC;IAAC,CAAC;AAC3C,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,OAAgC,EAAE,MAAqB;IACtF,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,IAAI,CAAC,gBAAgB,KAAK,MAAM,CAAC,GAAG,CAAC,aAAa;QAAE,WAAW,CAAC,mBAAmB,CAAC,CAAC;IACzF,IAAI,UAAkB,EAAE,EAAU,EAAE,WAA+B,EAAE,IAAwB,CAAC;IAC9F,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,QAAQ,EAAE,gBAAgB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtE,MAAM,cAAc,GAAG,IAAI,KAAK,oBAAoB,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;QAC/F,IAAI,IAAI,KAAK,oBAAoB;YAAE,IAAI,GAAG,cAAc,CAAC;QACzD,UAAU,GAAG,GAAG,cAAc,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChF,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;SAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,WAAW,CAAC,gBAAgB,CAAC,CAAC;QACjH,UAAU,GAAG,mBAAmB,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAAC,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1F,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QAChC,UAAU,GAAG,iBAAiB,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9E,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAC,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC3E,CAAC;;QAAM,OAAO,WAAW,CAAC,cAAc,CAAC,CAAC;IAC1C,IAAI,mBAAmB,CAAC,UAAU,EAAE,GAAG,CAAC,KAAK,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC;QAAE,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAChI,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;AACtH,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,MAAwB,EAAE,MAAqB,EAAE,GAAW;IAC1G,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,aAAa;QAAE,WAAW,CAAC,YAAY,CAAC,CAAC;IAC5H,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,IAAI;QAAE,WAAW,CAAC,iBAAiB,CAAC,CAAC;IAC5G,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;IACvH,IAAI,UAAU,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC,WAAW,CAAC;QAAE,WAAW,CAAC,uBAAuB,CAAC,CAAC;AAC9J,CAAC"}

package/dist/node/git.d.ts

@@ -0,0 +1,8 @@
+import type { ReleaseConfig } from '../contracts.js';
+import type { Execution } from './execution.js';
+export declare function normalizeRepository(value: string, cwd: string): string;
+export declare function assertRepository(execution: Execution, config: ReleaseConfig): Promise<void>;
+export declare function assertCandidate(execution: Execution, config: ReleaseConfig, sha?: string): Promise<string>;
+export declare function remoteRefs(execution: Execution, config: ReleaseConfig): Promise<Record<string, string>>;
+export declare function fetchAndAssertFastForward(execution: Execution, config: ReleaseConfig, sha: string): Promise<Record<string, string>>;
+//# sourceMappingURL=git.d.ts.map

package/dist/node/git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../src/node/git.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAErD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAYtE;AACD,wBAAsB,gBAAgB,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAajG;AACD,wBAAsB,eAAe,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAOhH;AACD,wBAAsB,UAAU,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAU7G;AACD,wBAAsB,yBAAyB,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAYzI"}

package/dist/node/git.js

@@ -0,0 +1,76 @@
+import { isAbsolute, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { ReleaseError } from './errors.js';
+export function normalizeRepository(value, cwd) {
+    const input = value.trim().replaceAll('\\', '/').replace(/\/$/u, '');
+    if (isAbsolute(input) || input.startsWith('./') || input.startsWith('../'))
+        return resolve(cwd, input).replaceAll('\\', '/');
+    if (input.startsWith('file://'))
+        return resolve(fileURLToPath(input)).replaceAll('\\', '/');
+    const scp = /^(?:[^@/]+@)?([^:/]+):(.+)$/u.exec(input);
+    if (!input.includes('://') && scp && !/^[^/:]+:\d+\//u.test(input))
+        return `${scp[1]?.toLowerCase()}/${scp[2]?.replace(/\.git$/iu, '')}`;
+    if (input.includes('://')) {
+        const url = new URL(input);
+        if (url.password || (['http:', 'https:'].includes(url.protocol) && url.username) || url.search || url.hash)
+            throw new ReleaseError('GIT_REPOSITORY');
+        return `${url.host.toLowerCase()}${url.pathname}`.replace(/\.git$/iu, '');
+    }
+    return input.replace(/\.git$/iu, '');
+}
+export async function assertRepository(execution, config) {
+    const root = await execution.git(['rev-parse', '--show-toplevel']);
+    if (resolve(root) !== resolve(execution.cwd))
+        throw new ReleaseError('GIT_REPOSITORY', { reason: 'ROOT_MISMATCH' });
+    const remote = config.git.remote.replaceAll('.', '\\.');
+    const urls = await execution.git(['config', '--get-regexp', `^remote\\.${remote}\\.(url|pushurl)$`]);
+    const entries = urls.split(/\r?\n/u).map(line => /^(\S+)\s+(.+)$/u.exec(line));
+    const fetch = entries.filter(entry => entry?.[1]?.endsWith('.url')).map(entry => entry?.[2] ?? '');
+    const explicitPush = entries.filter(entry => entry?.[1]?.endsWith('.pushurl')).map(entry => entry?.[2] ?? '');
+    const push = explicitPush.length === 0 ? fetch : explicitPush;
+    const expected = normalizeRepository(config.git.repository, execution.cwd);
+    if ([fetch, push].some(values => values.length !== 1 || normalizeRepository(values[0] ?? '', execution.cwd) !== expected)) {
+        throw new ReleaseError('GIT_REPOSITORY', { reason: 'REMOTE_MISMATCH' });
+    }
+}
+export async function assertCandidate(execution, config, sha) {
+    if (await execution.git(['branch', '--show-current']) !== config.git.developmentBranch)
+        throw new ReleaseError('GIT_BRANCH');
+    const head = await execution.git(['rev-parse', 'HEAD']);
+    const dirty = await execution.git(['status', '--porcelain=v1', '--untracked-files=all']);
+    if (sha !== undefined && (head !== sha || dirty !== ''))
+        throw new ReleaseError('CANDIDATE_CHANGED');
+    if (dirty !== '')
+        throw new ReleaseError('GIT_DIRTY');
+    return head;
+}
+export async function remoteRefs(execution, config) {
+    const branches = [config.git.developmentBranch, config.git.releaseBranch];
+    const output = await execution.git(['ls-remote', '--refs', config.git.remote, ...branches.map(branch => `refs/heads/${branch}`)]);
+    const result = {};
+    for (const line of output.split(/\r?\n/u)) {
+        const [sha, ref] = line.split(/\s+/u);
+        if (sha && /^[a-f0-9]{40}$/u.test(sha) && ref)
+            result[ref.replace('refs/heads/', '')] = sha;
+    }
+    if (branches.some(branch => !result[branch]))
+        throw new ReleaseError('GIT_DIVERGED', { reason: 'REMOTE_BRANCH_MISSING' });
+    return result;
+}
+export async function fetchAndAssertFastForward(execution, config, sha) {
+    await assertRepository(execution, config);
+    await execution.git(['fetch', '--no-tags', config.git.remote, `refs/heads/${config.git.developmentBranch}`, `refs/heads/${config.git.releaseBranch}`]);
+    const refs = await remoteRefs(execution, config);
+    for (const branch of [config.git.developmentBranch, config.git.releaseBranch]) {
+        try {
+            await execution.git(['merge-base', '--is-ancestor', refs[branch] ?? '', sha]);
+        }
+        catch (error) {
+            if (error instanceof ReleaseError && error.code === 'GIT_FAILED' && error.details.exitCode === 1)
+                throw new ReleaseError('GIT_DIVERGED', { branch });
+            throw error;
+        }
+    }
+    return refs;
+}
+//# sourceMappingURL=git.js.map

package/dist/node/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/node/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,GAAW;IAC5D,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrE,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC7H,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5F,MAAM,GAAG,GAAG,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC;IACzI,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;YAAE,MAAM,IAAI,YAAY,CAAC,gBAAgB,CAAC,CAAC;QACrJ,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AACvC,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,SAAoB,EAAE,MAAqB;IAChF,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACnE,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IACpH,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,aAAa,MAAM,mBAAmB,CAAC,CAAC,CAAC;IACrG,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACnG,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9G,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC;IAC9D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;IAC3E,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,SAAS,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC1H,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAoB,EAAE,MAAqB,EAAE,GAAY;IAC7F,IAAI,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,iBAAiB;QAAE,MAAM,IAAI,YAAY,CAAC,YAAY,CAAC,CAAC;IAC7H,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,gBAAgB,EAAE,uBAAuB,CAAC,CAAC,CAAC;IACzF,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,KAAK,KAAK,EAAE,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,mBAAmB,CAAC,CAAC;IACrG,IAAI,KAAK,KAAK,EAAE;QAAE,MAAM,IAAI,YAAY,CAAC,WAAW,CAAC,CAAC;IACtD,OAAO,IAAI,CAAC;AACd,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,SAAoB,EAAE,MAAqB;IAC1E,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,cAAc,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAClI,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC;IAC9F,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAC1H,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,SAAoB,EAAE,MAAqB,EAAE,GAAW;IACtG,MAAM,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,cAAc,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IACvJ,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACjD,KAAK,MAAM,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9E,IAAI,CAAC;YAAC,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAAC,CAAC;QACtF,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,CAAC;gBAAE,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACrJ,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/node/live-output.d.ts

@@ -0,0 +1,9 @@
+export declare class LiveOutput {
+    readonly emit: (text: string) => void;
+    private readonly streams;
+    constructor(maxBytes: number, emit: (text: string) => void);
+    write(stream: 'stdout' | 'stderr', bytes: Uint8Array): void;
+    finish(): void;
+    private flush;
+}
+//# sourceMappingURL=live-output.d.ts.map

package/dist/node/live-output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-output.d.ts","sourceRoot":"","sources":["../../src/node/live-output.ts"],"names":[],"mappings":"AAGA,qBAAa,UAAU;IAES,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI;IADnE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2C;gBACvD,QAAQ,EAAE,MAAM,EAAW,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI;IAInE,KAAK,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI;IAS3D,MAAM,IAAI,IAAI;IAKd,OAAO,CAAC,KAAK;CAOd"}

package/dist/node/live-output.js

@@ -0,0 +1,40 @@
+import { redact } from './errors.js';
+export class LiveOutput {
+    emit;
+    streams;
+    constructor(maxBytes, emit) {
+        this.emit = emit;
+        const stream = () => ({ decoder: new TextDecoder(), remainingInput: maxBytes, remainingOutput: maxBytes, pending: '' });
+        this.streams = { stdout: stream(), stderr: stream() };
+    }
+    write(stream, bytes) {
+        const state = this.streams[stream];
+        const accepted = bytes.subarray(0, state.remainingInput);
+        state.remainingInput -= accepted.byteLength;
+        state.pending += state.decoder.decode(accepted, { stream: true });
+        const last = Math.max(state.pending.lastIndexOf('\n'), state.pending.lastIndexOf('\r'));
+        if (last >= 0) {
+            this.flush(state, state.pending.slice(0, last + 1));
+            state.pending = state.pending.slice(last + 1);
+        }
+        if (state.remainingInput === 0) {
+            this.flush(state, state.pending);
+            state.pending = '';
+        }
+    }
+    finish() {
+        for (const state of Object.values(this.streams)) {
+            this.flush(state, state.pending);
+            state.pending = '';
+        }
+    }
+    flush(state, text) {
+        const bytes = new TextEncoder().encode(redact(text));
+        const accepted = bytes.subarray(0, state.remainingOutput);
+        state.remainingOutput -= accepted.byteLength;
+        const output = new TextDecoder().decode(accepted, { stream: true });
+        if (output)
+            this.emit(output);
+    }
+}
+//# sourceMappingURL=live-output.js.map

package/dist/node/live-output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-output.js","sourceRoot":"","sources":["../../src/node/live-output.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC,MAAM,OAAO,UAAU;IAEkB;IADtB,OAAO,CAA2C;IACnE,YAAY,QAAgB,EAAW,IAA4B;QAA5B,SAAI,GAAJ,IAAI,CAAwB;QACjE,MAAM,MAAM,GAAG,GAAgB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,WAAW,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QACrI,IAAI,CAAC,OAAO,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;IACxD,CAAC;IACD,KAAK,CAAC,MAA2B,EAAE,KAAiB;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QACzD,KAAK,CAAC,cAAc,IAAI,QAAQ,CAAC,UAAU,CAAC;QAC5C,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QACxF,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;YAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAAC,CAAC;QACtH,IAAI,KAAK,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC;QAAC,CAAC;IAC3F,CAAC;IACD,MAAM;QACJ,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC;QACvD,CAAC;IACH,CAAC;IACO,KAAK,CAAC,KAAkB,EAAE,IAAY;QAC5C,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;QAC1D,KAAK,CAAC,eAAe,IAAI,QAAQ,CAAC,UAAU,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,IAAI,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;CACF"}

package/dist/node/lock.d.ts

@@ -0,0 +1,6 @@
+export interface OwnedLock {
+    assertOwned(): Promise<void>;
+    release(): Promise<void>;
+}
+export declare function acquireLock(path: string): Promise<OwnedLock>;
+//# sourceMappingURL=lock.d.ts.map

package/dist/node/lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.d.ts","sourceRoot":"","sources":["../../src/node/lock.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,SAAS;IACxB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AACD,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAgBlE"}

package/dist/node/lock.js

@@ -0,0 +1,32 @@
+import { randomUUID } from 'node:crypto';
+import { mkdir, open, readFile, unlink } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { ReleaseError } from './errors.js';
+export async function acquireLock(path) {
+    await mkdir(dirname(path), { recursive: true });
+    const owner = JSON.stringify({ pid: process.pid, token: randomUUID(), startedAt: new Date().toISOString() });
+    let handle;
+    try {
+        handle = await open(path, 'wx');
+    }
+    catch (error) {
+        if (error && typeof error === 'object' && 'code' in error && error.code === 'EEXIST')
+            throw new ReleaseError('LOCKED', { path });
+        throw error;
+    }
+    try {
+        await handle.writeFile(owner, 'utf8');
+    }
+    catch (error) {
+        await handle.close();
+        await unlink(path);
+        throw error;
+    }
+    await handle.close();
+    const assertOwned = async () => {
+        if (await readFile(path, 'utf8') !== owner)
+            throw new ReleaseError('LOCK_OWNERSHIP', { path });
+    };
+    return { assertOwned, release: async () => { await assertOwned(); await unlink(path); } };
+}
+//# sourceMappingURL=lock.js.map

package/dist/node/lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.js","sourceRoot":"","sources":["../../src/node/lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAM3C,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY;IAC5C,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC7G,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QAAC,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAAC,CAAC;IACxC,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACjI,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAC9C,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IACxE,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACrB,MAAM,WAAW,GAAG,KAAK,IAAI,EAAE;QAC7B,IAAI,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,KAAK;YAAE,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACjG,CAAC,CAAC;IACF,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,WAAW,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5F,CAAC"}

package/dist/node/release.d.ts

@@ -0,0 +1,3 @@
+import type { ReleaseReport, RunReleaseOptions } from '../contracts.js';
+export declare function runRelease(options: RunReleaseOptions): Promise<ReleaseReport>;
+//# sourceMappingURL=release.d.ts.map

package/dist/node/release.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"release.d.ts","sourceRoot":"","sources":["../../src/node/release.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAuD,aAAa,EAAe,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAiB1I,wBAAsB,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC,CAmGnF"}