@package-broker/cli 0.19.8 → 2.0.0-rc.2

package/dist/commands/sqlite.js

@@ -0,0 +1,76 @@
+import { ORG_SLUG_PATTERN } from '@package-broker/core/db/organization';
+import { DbError } from '@package-broker/core/db/errors';
+import { isoTimestamp, systemClock, ulid } from '@package-broker/core/ids';
+import { MigrationLockedError } from '@package-broker/db-sqlite/migrations/lock';
+import { migrate, MigrationChecksumError } from '@package-broker/db-sqlite/migrations/runner';
+import { createOrganizationBootstrap } from '@package-broker/db-sqlite/repositories/organization';
+import { openBetterSqliteExecutor } from '@package-broker/runtime-node/db/better-sqlite3-executor';
+import { BuiltManifestError, loadBuiltMigrations, routesAreValid } from './built-manifest.js';
+function reportError(error) {
+    const name = error?.name;
+    const message = error?.message;
+    const text = typeof name === 'string' && typeof message === 'string'
+        ? `${name}: ${message}`
+        : `Error: ${String(error)}`;
+    console.error(text.replace(/[\r\n]+/g, ' '));
+}
+export async function runMigrateSqlite(o) {
+    try {
+        const sources = await loadBuiltMigrations(o.outDir);
+        if (!(await routesAreValid(o.outDir)))
+            return 2;
+        const opened = openBetterSqliteExecutor(o.file);
+        try {
+            const result = await migrate(opened.executor, sources, { holder: ulid(), dryRun: o.dryRun });
+            console.log(JSON.stringify(result));
+            return 0;
+        }
+        finally {
+            await opened.close();
+        }
+    }
+    catch (error) {
+        reportError(error);
+        if (error instanceof MigrationChecksumError ||
+            (error instanceof BuiltManifestError &&
+                /checksum does not match the file/.test(error.message)))
+            return 3;
+        if (error instanceof MigrationLockedError ||
+            (error instanceof DbError && error.kind === 'busy'))
+            return 4;
+        return 1;
+    }
+}
+export async function runBootstrapSqlite(o) {
+    if (!ORG_SLUG_PATTERN.test(o.slug)) {
+        reportError(new TypeError(`invalid organization slug ${JSON.stringify(o.slug)}`));
+        return 2;
+    }
+    try {
+        const opened = openBetterSqliteExecutor(o.file);
+        try {
+            const result = await createOrganizationBootstrap(opened.executor).bootstrap({
+                id: ulid(),
+                slug: o.slug,
+                name: o.name,
+                now: isoTimestamp(systemClock.now()),
+            });
+            if (!result.created && result.slug !== o.slug) {
+                reportError(Object.assign(new Error(`organization already bootstrapped as ${result.slug}`), {
+                    name: 'AlreadyBootstrapped',
+                }));
+                return 5;
+            }
+            console.log(JSON.stringify(result));
+            return 0;
+        }
+        finally {
+            await opened.close();
+        }
+    }
+    catch (error) {
+        reportError(error);
+        return 1;
+    }
+}
+//# sourceMappingURL=sqlite.js.map

package/dist/commands/sqlite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite.js","sourceRoot":"","sources":["../../src/commands/sqlite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,gCAAgC,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAC9F,OAAO,EAAE,2BAA2B,EAAE,MAAM,qDAAqD,CAAC;AAClG,OAAO,EAAE,wBAAwB,EAAE,MAAM,yDAAyD,CAAC;AACnG,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE9F,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,IAAI,GAAI,KAA+C,EAAE,IAAI,CAAC;IACpE,MAAM,OAAO,GAAI,KAAkD,EAAE,OAAO,CAAC;IAC7E,MAAM,IAAI,GACR,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,QAAQ;QACrD,CAAC,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE;QACvB,CAAC,CAAC,UAAU,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,CAItC;IACC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7F,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,CAAC;QACX,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,WAAW,CAAC,KAAK,CAAC,CAAC;QACnB,IACE,KAAK,YAAY,sBAAsB;YACvC,CAAC,KAAK,YAAY,kBAAkB;gBAClC,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAEzD,OAAO,CAAC,CAAC;QACX,IACE,KAAK,YAAY,oBAAoB;YACrC,CAAC,KAAK,YAAY,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;YAEnD,OAAO,CAAC,CAAC;QACX,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,CAIxC;IACC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,WAAW,CAAC,IAAI,SAAS,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAClF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC;gBAC1E,EAAE,EAAE,IAAI,EAAE;gBACV,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,GAAG,EAAE,YAAY,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC;aACrC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC9C,WAAW,CACT,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE;oBAC9E,IAAI,EAAE,qBAAqB;iBAC5B,CAAC,CACH,CAAC;gBACF,OAAO,CAAC,CAAC;YACX,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,CAAC;QACX,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,WAAW,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}

package/dist/import/client.d.ts

@@ -0,0 +1,71 @@
+import { type ParsedManifest } from '@package-broker/core/import/manifest';
+import { type CredentialKind } from '@package-broker/core/sources/credentials';
+export declare class ImportClientError extends Error {
+    readonly code: string;
+    readonly exitCode: number;
+    readonly retryAfterMs?: number | undefined;
+    constructor(code: string, exitCode: number, message: string, retryAfterMs?: number | undefined);
+}
+export declare function localError(code: string, message: string): ImportClientError;
+export declare function brokerOrigin(value: string): string;
+export declare function importManifest(text: string): Promise<{
+    manifest: ParsedManifest;
+    canonical: string;
+    hash: string;
+}>;
+export declare const RUN_STATES: readonly ["planned", "applying", "failed", "applied", "verifying", "verified", "rolled_back", "cancelled"];
+export interface CredentialState {
+    readonly sourceRef: string;
+    readonly bound: boolean;
+}
+export interface RunStatus {
+    readonly id: string;
+    readonly state: (typeof RUN_STATES)[number];
+    readonly planHash: string | null;
+    readonly approvedAt: string | null;
+    readonly acceptedAt: string | null;
+    readonly credentialWindowUntil: string | null;
+    readonly credentials: readonly CredentialState[];
+}
+/** Sources exist only once apply has run; the server refuses uploads before that. */
+export declare const UPLOAD_STATES: ReadonlySet<RunStatus['state']>;
+export declare function uploadsAccepted(status: RunStatus, nowMs: number): boolean;
+export interface CredentialBinding {
+    readonly external_ref: string;
+    readonly credential_ref: string;
+    readonly kind: CredentialKind;
+}
+export type CredentialResolver = (reference: string) => Promise<string>;
+export declare function object(value: unknown): value is Record<string, unknown>;
+export declare function timestamp(value: unknown): value is string;
+export declare function runId(value: string): string;
+export declare class ImportClient {
+    readonly origin: string;
+    private readonly token;
+    private readonly fetcher;
+    private readonly now;
+    constructor(options: {
+        broker: string;
+        token: string;
+        fetch?: typeof fetch;
+        now?: () => number;
+    });
+    private request;
+    submit(canonical: string, key: string): Promise<{
+        id: string;
+        planHash: string;
+        state: 'planned';
+        replayed: boolean;
+    }>;
+    status(id: string, deadline?: number): Promise<RunStatus>;
+    verify(id: string, deadline?: number): Promise<void>;
+    /**
+     * Uploads material for every manifest source the broker reports unbound, re-reading the run
+     * before each upload so a rerun after a partial failure skips sources bound meanwhile.
+     */
+    credentials(id: string, manifest: ParsedManifest, bindings: readonly CredentialBinding[], resolve: CredentialResolver): Promise<{
+        uploaded: number;
+        skipped: number;
+    }>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/import/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/import/client.ts"],"names":[],"mappings":"AAEA,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,0CAA0C,CAAC;AAElD,qBAAa,iBAAkB,SAAQ,KAAK;IAExC,QAAQ,CAAC,IAAI,EAAE,MAAM;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM;IAEzB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM;gBAHrB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EACzB,OAAO,EAAE,MAAM,EACN,YAAY,CAAC,EAAE,MAAM,YAAA;CAKjC;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,iBAAiB,CAE3E;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAoBlD;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM;;;;GAahD;AAED,eAAO,MAAM,UAAU,4GASb,CAAC;AACX,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AACD,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,QAAQ,CAAC,WAAW,EAAE,SAAS,eAAe,EAAE,CAAC;CAClD;AAED,qFAAqF;AACrF,eAAO,MAAM,aAAa,EAAE,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,CAIxD,CAAC;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAOzE;AACD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;CAC/B;AACD,MAAM,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAExE,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEvE;AACD,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAOzD;AAqBD,wBAAgB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAG3C;AAsCD,qBAAa,YAAY;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAe;IACvC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;gBAEvB,OAAO,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;QACrB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;KACpB;YASa,OAAO;IAyEf,MAAM,CACV,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IAgC3E,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAwBzD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1D;;;OAGG;IACG,WAAW,CACf,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,SAAS,iBAAiB,EAAE,EACtC,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAuIlD"}

package/dist/import/client.js

@@ -0,0 +1,348 @@
+import { API_ERROR_CODES } from '@package-broker/core/api/response';
+import { isUlid } from '@package-broker/core/ids';
+import { canonicalManifest, MAX_MANIFEST_BYTES, parseManifest, planHash, } from '@package-broker/core/import/manifest';
+import { parseCredentialMaterial, } from '@package-broker/core/sources/credentials';
+export class ImportClientError extends Error {
+    code;
+    exitCode;
+    retryAfterMs;
+    constructor(code, exitCode, message, retryAfterMs) {
+        super(message);
+        this.code = code;
+        this.exitCode = exitCode;
+        this.retryAfterMs = retryAfterMs;
+        this.name = 'ImportClientError';
+    }
+}
+export function localError(code, message) {
+    return new ImportClientError(code, 2, message);
+}
+export function brokerOrigin(value) {
+    try {
+        const url = new URL(value);
+        if ((url.protocol !== 'https:' && !(url.protocol === 'http:' && url.hostname === 'localhost')) ||
+            url.username ||
+            url.password ||
+            url.pathname !== '/' ||
+            url.search ||
+            url.hash ||
+            ![url.origin, `${url.origin}/`].includes(value))
+            throw new Error();
+        return url.origin;
+    }
+    catch {
+        throw localError('invalid_origin', 'Use a bare HTTPS broker origin (HTTP is allowed only for localhost).');
+    }
+}
+export async function importManifest(text) {
+    let raw;
+    try {
+        raw = JSON.parse(text);
+    }
+    catch {
+        throw localError('invalid_manifest', 'Invalid import manifest.');
+    }
+    const parsed = parseManifest(raw);
+    if (!parsed.ok)
+        throw localError('invalid_manifest', 'Invalid import manifest.');
+    const canonical = canonicalManifest(parsed.data);
+    if (Buffer.byteLength(canonical) > MAX_MANIFEST_BYTES)
+        throw localError('manifest_too_large', 'The manifest exceeds the single-run limit.');
+    return { manifest: parsed.data, canonical, hash: await planHash(parsed.data) };
+}
+export const RUN_STATES = [
+    'planned',
+    'applying',
+    'failed',
+    'applied',
+    'verifying',
+    'verified',
+    'rolled_back',
+    'cancelled',
+];
+const WINDOW_MARGIN_MS = 5000;
+/** Sources exist only once apply has run; the server refuses uploads before that. */
+export const UPLOAD_STATES = new Set([
+    'applied',
+    'verifying',
+    'verified',
+]);
+export function uploadsAccepted(status, nowMs) {
+    return (status.approvedAt !== null &&
+        status.credentialWindowUntil !== null &&
+        UPLOAD_STATES.has(status.state) &&
+        Date.parse(status.credentialWindowUntil) > nowMs + WINDOW_MARGIN_MS);
+}
+export function object(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+export function timestamp(value) {
+    return (typeof value === 'string' &&
+        /^\d{4}-\d\d-\d\dT\d\d:\d\d:\d\d\.\d{3}Z$/.test(value) &&
+        Number.isFinite(Date.parse(value)) &&
+        new Date(value).toISOString() === value);
+}
+function hash(value) {
+    return typeof value === 'string' && /^[a-f0-9]{64}$/.test(value);
+}
+function nullableDate(value) {
+    return value === null || timestamp(value);
+}
+function credentialStates(value) {
+    return (Array.isArray(value) &&
+        value.length <= 10000 &&
+        value.every((entry) => object(entry) &&
+            typeof entry.sourceRef === 'string' &&
+            typeof entry.bound === 'boolean' &&
+            Object.keys(entry).length === 2) &&
+        new Set(value.map((entry) => entry.sourceRef)).size === value.length);
+}
+export function runId(value) {
+    if (!isUlid(value))
+        throw localError('invalid_run', 'Invalid import run ID.');
+    return value;
+}
+const incompatible = () => new ImportClientError('incompatible_response', 1, 'The broker returned an incompatible import response.');
+const unknownOutcome = () => new ImportClientError('outcome_unknown', 6, 'Outcome unknown; check the run in the UI before retrying.');
+// Credential summaries repeat only a subset of manifest content; allow room for the run DTO.
+const MAX_STATUS_BYTES = MAX_MANIFEST_BYTES + 65536;
+const waitTimeout = () => new ImportClientError('wait_timeout', 3, 'Import status wait timed out.');
+async function readResponse(response, maxBytes) {
+    if (response.body === null)
+        throw incompatible();
+    const reader = response.body.getReader();
+    const chunks = [];
+    let bytes = 0;
+    try {
+        while (true) {
+            const chunk = await reader.read();
+            if (chunk.done)
+                break;
+            bytes += chunk.value.byteLength;
+            if (bytes > maxBytes)
+                throw incompatible();
+            chunks.push(chunk.value);
+        }
+        return JSON.parse(Buffer.concat(chunks).toString('utf8'));
+    }
+    finally {
+        await reader.cancel().catch(() => undefined);
+    }
+}
+export class ImportClient {
+    origin;
+    token;
+    fetcher;
+    now;
+    constructor(options) {
+        this.origin = brokerOrigin(options.broker);
+        if (!options.token || !/^[\x21-\x7e]+$/.test(options.token))
+            throw localError('invalid_token', 'Provide PB_IMPORT_TOKEN or --token-file.');
+        this.token = options.token;
+        this.fetcher = options.fetch ?? fetch;
+        this.now = options.now ?? Date.now;
+    }
+    async request(path, method, body, key, deadline) {
+        const remaining = deadline === undefined ? 30000 : deadline - this.now();
+        if (remaining <= 0)
+            throw waitTimeout();
+        const signal = AbortSignal.timeout(Math.min(30000, remaining));
+        const mutating = method !== 'GET';
+        let response;
+        let data;
+        try {
+            response = await this.fetcher(new URL(`/_pb/import-runs${path}`, this.origin), {
+                method,
+                redirect: 'error',
+                signal,
+                headers: {
+                    authorization: `Bearer ${this.token}`,
+                    accept: 'application/json',
+                    ...(body === undefined ? {} : { 'content-type': 'application/json' }),
+                    ...(key === undefined ? {} : { 'idempotency-key': key }),
+                },
+                ...(body === undefined ? {} : { body }),
+            });
+            if (deadline !== undefined && this.now() >= deadline)
+                throw waitTimeout();
+            if (response.status === 204) {
+                if (method === 'GET' || path === '')
+                    throw incompatible();
+                return { data: null, headers: response.headers };
+            }
+            if (response.status === 429)
+                void response.body?.cancel().catch(() => undefined);
+            else
+                data = await readResponse(response, method === 'GET' ? MAX_STATUS_BYTES : 65536);
+        }
+        catch {
+            if (deadline !== undefined &&
+                (this.now() >= deadline || (remaining <= 30000 && signal.aborted)))
+                throw waitTimeout();
+            throw mutating
+                ? unknownOutcome()
+                : new ImportClientError('request_failed', 1, 'Could not read broker response.');
+        }
+        if (deadline !== undefined && this.now() >= deadline)
+            throw waitTimeout();
+        if (!response.ok) {
+            if (response.status === 429) {
+                const header = response.headers.get('retry-after');
+                const seconds = header !== null && /^\d+$/.test(header) ? Number(header) : NaN;
+                const delay = Number.isFinite(seconds)
+                    ? seconds * 1000
+                    : header === null
+                        ? 1000
+                        : Date.parse(header) - this.now();
+                const retryAfterMs = Number.isFinite(delay) ? Math.max(1000, delay) : 1000;
+                throw new ImportClientError('rate_limited', 1, 'Rate limited; retry later.', retryAfterMs);
+            }
+            const envelope = object(data) && object(data.error) ? data.error : null;
+            const code = envelope?.code;
+            if (typeof code === 'string' && Object.hasOwn(API_ERROR_CODES, code)) {
+                const known = code;
+                throw new ImportClientError(known, 1, API_ERROR_CODES[known].message);
+            }
+            throw new ImportClientError('request_failed', 1, 'Broker request refused.');
+        }
+        if ((path === '' && response.status !== 201) ||
+            (method === 'GET' && response.status !== 200) ||
+            (method !== 'GET' && path !== ''))
+            throw mutating ? unknownOutcome() : incompatible();
+        return { data, headers: response.headers };
+    }
+    async submit(canonical, key) {
+        if (!/^[A-Za-z0-9_-]{1,128}$/.test(key))
+            throw localError('invalid_key', 'Invalid idempotency key.');
+        let answer;
+        try {
+            answer = await this.request('', 'POST', canonical, key);
+        }
+        catch (error) {
+            if (error instanceof ImportClientError && error.code === 'idempotency_mismatch')
+                throw new ImportClientError('idempotency_mismatch', 1, 'The broker already holds a different manifest under this receipt key; reconcile the run in the UI and submit with a new receipt.');
+            throw error;
+        }
+        const { data, headers } = answer;
+        if (!object(data) ||
+            typeof data.id !== 'string' ||
+            !isUlid(data.id) ||
+            !hash(data.planHash) ||
+            data.state !== 'planned')
+            throw unknownOutcome();
+        return {
+            id: data.id,
+            planHash: data.planHash,
+            state: 'planned',
+            replayed: headers.get('idempotent-replayed') === 'true',
+        };
+    }
+    async status(id, deadline) {
+        const { data } = await this.request(`/${runId(id)}`, 'GET', undefined, undefined, deadline);
+        if (!object(data) ||
+            data.id !== id ||
+            !RUN_STATES.includes(data.state) ||
+            !(data.planHash === null || hash(data.planHash)) ||
+            !nullableDate(data.approvedAt) ||
+            !nullableDate(data.acceptedAt) ||
+            !nullableDate(data.credentialWindowUntil) ||
+            !credentialStates(data.credentials))
+            throw incompatible();
+        return {
+            id,
+            state: data.state,
+            planHash: data.planHash,
+            approvedAt: data.approvedAt,
+            acceptedAt: data.acceptedAt,
+            credentialWindowUntil: data.credentialWindowUntil,
+            credentials: data.credentials.map(({ sourceRef, bound }) => ({ sourceRef, bound })),
+        };
+    }
+    async verify(id, deadline) {
+        await this.request(`/${runId(id)}/verify`, 'POST', undefined, undefined, deadline);
+    }
+    /**
+     * Uploads material for every manifest source the broker reports unbound, re-reading the run
+     * before each upload so a rerun after a partial failure skips sources bound meanwhile.
+     */
+    async credentials(id, manifest, bindings, resolve) {
+        runId(id);
+        const sources = manifest.items.filter((item) => item.type === 'source' && item.credential_ref !== null);
+        if (sources.some((source) => source.external_ref === '.' || source.external_ref === '..'))
+            throw localError('invalid_external_ref', 'Credential source reference cannot be a dot segment.');
+        if (sources.some((source) => source.type === 'source' && source.credential_ref === 'env:PB_IMPORT_TOKEN'))
+            throw localError('invalid_credential_ref', 'The broker token cannot be used as a source credential.');
+        const byRef = new Map();
+        for (const binding of bindings) {
+            const source = sources.find((item) => item.external_ref === binding.external_ref);
+            if (source?.type !== 'source' ||
+                source.credential_ref !== binding.credential_ref ||
+                byRef.has(binding.external_ref))
+                throw localError('credential_binding_mismatch', 'Credential bindings must match manifest source entries exactly.');
+            if (!['http_basic', 'bearer', 'header', 'query', 'github_app', 'npm_token', 'ssh_key'].includes(binding.kind) ||
+                (binding.kind === 'query' && source.source_type !== 'composer_repository') ||
+                (binding.kind === 'github_app' &&
+                    (source.source_type !== 'vcs' ||
+                        source.project !== null ||
+                        !('provider' in source.config) ||
+                        source.config.provider !== 'github')))
+                throw localError('invalid_credential_kind', 'Credential kind is incompatible with the manifest source.');
+            byRef.set(binding.external_ref, binding);
+        }
+        const expectedHash = await planHash(manifest);
+        const expectedRefs = sources.map((item) => item.external_ref).sort();
+        const ready = async () => {
+            const status = await this.status(id);
+            if (status.planHash !== expectedHash)
+                throw localError('plan_hash_mismatch', 'The local manifest does not match the broker plan.');
+            const reported = status.credentials.map((entry) => entry.sourceRef).sort();
+            if (reported.length !== expectedRefs.length ||
+                reported.some((ref, index) => ref !== expectedRefs[index]))
+                throw incompatible();
+            return status;
+        };
+        const assertOpen = (status) => {
+            if (status.approvedAt === null)
+                throw new ImportClientError('not_ready', 3, 'The credential window opens when the run is approved; approve and apply it in the UI first.');
+            if (status.credentialWindowUntil === null)
+                throw new ImportClientError('credential_window_closed', 1, 'The credential window for this run is closed; bind the remaining credentials in the UI.');
+            if (!UPLOAD_STATES.has(status.state))
+                throw new ImportClientError('not_ready', 3, 'Wait for apply to finish in the UI before uploading credentials.');
+            if (!uploadsAccepted(status, this.now()))
+                throw new ImportClientError('credential_window_closed', 1, 'The credential window for this run is closing; bind the remaining credentials in the UI.');
+        };
+        let status = await ready();
+        const pending = status.credentials.filter((entry) => !entry.bound);
+        if (pending.length === 0)
+            return { uploaded: 0, skipped: status.credentials.length };
+        assertOpen(status);
+        if (pending.some((entry) => !byRef.has(entry.sourceRef)))
+            throw localError('credential_binding_missing', 'Supply a credential kind for every source the broker reports unbound.');
+        let uploaded = 0;
+        for (const [index, entry] of pending.entries()) {
+            if (index > 0) {
+                status = await ready();
+                if (status.credentials.some((item) => item.sourceRef === entry.sourceRef && item.bound))
+                    continue;
+                assertOpen(status);
+            }
+            const binding = byRef.get(entry.sourceRef);
+            let material;
+            try {
+                material = await resolve(binding.credential_ref);
+                if (Buffer.byteLength(material) > 16384)
+                    throw new Error();
+                parseCredentialMaterial(binding.kind, material);
+            }
+            catch {
+                throw localError('credential_resolution_failed', 'Could not resolve valid credential material.');
+            }
+            if (!uploadsAccepted(status, this.now()))
+                throw new ImportClientError('credential_window_closed', 1, 'The credential window for this run is closing; bind the remaining credentials in the UI.');
+            await this.request(`/${id}/credentials/${encodeURIComponent(binding.external_ref)}`, 'PUT', JSON.stringify({ kind: binding.kind, material }));
+            uploaded++;
+        }
+        return { uploaded, skipped: status.credentials.length - uploaded };
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/import/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/import/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,QAAQ,GAET,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,uBAAuB,GAExB,MAAM,0CAA0C,CAAC;AAElD,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAE/B;IACA;IAEA;IAJX,YACW,IAAY,EACZ,QAAgB,EACzB,OAAe,EACN,YAAqB;QAE9B,KAAK,CAAC,OAAO,CAAC,CAAC;QALN,SAAI,GAAJ,IAAI,CAAQ;QACZ,aAAQ,GAAR,QAAQ,CAAQ;QAEhB,iBAAY,GAAZ,YAAY,CAAS;QAG9B,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,OAAe;IACtD,OAAO,IAAI,iBAAiB,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,IACE,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC;YAC1F,GAAG,CAAC,QAAQ;YACZ,GAAG,CAAC,QAAQ;YACZ,GAAG,CAAC,QAAQ,KAAK,GAAG;YACpB,GAAG,CAAC,MAAM;YACV,GAAG,CAAC,IAAI;YACR,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YAE/C,MAAM,IAAI,KAAK,EAAE,CAAC;QACpB,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,UAAU,CACd,gBAAgB,EAChB,sEAAsE,CACvE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY;IAC/C,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,UAAU,CAAC,kBAAkB,EAAE,0BAA0B,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,UAAU,CAAC,kBAAkB,EAAE,0BAA0B,CAAC,CAAC;IACjF,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,kBAAkB;QACnD,MAAM,UAAU,CAAC,oBAAoB,EAAE,4CAA4C,CAAC,CAAC;IACvF,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;AACjF,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,SAAS;IACT,UAAU;IACV,QAAQ;IACR,SAAS;IACT,WAAW;IACX,UAAU;IACV,aAAa;IACb,WAAW;CACH,CAAC;AAcX,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,qFAAqF;AACrF,MAAM,CAAC,MAAM,aAAa,GAAoC,IAAI,GAAG,CAAC;IACpE,SAAS;IACT,WAAW;IACX,UAAU;CACX,CAAC,CAAC;AACH,MAAM,UAAU,eAAe,CAAC,MAAiB,EAAE,KAAa;IAC9D,OAAO,CACL,MAAM,CAAC,UAAU,KAAK,IAAI;QAC1B,MAAM,CAAC,qBAAqB,KAAK,IAAI;QACrC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB,CAAC,GAAG,KAAK,GAAG,gBAAgB,CACpE,CAAC;AACJ,CAAC;AAQD,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AACD,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,0CAA0C,CAAC,IAAI,CAAC,KAAK,CAAC;QACtD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CACxC,CAAC;AACJ,CAAC;AACD,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AACD,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,KAAK,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC;AAC5C,CAAC;AACD,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,KAAK,CAAC,MAAM,IAAI,KAAK;QACrB,KAAK,CAAC,KAAK,CACT,CAAC,KAAK,EAAE,EAAE,CACR,MAAM,CAAC,KAAK,CAAC;YACb,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YACnC,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS;YAChC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAClC;QACD,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAsB,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CACtF,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,KAAK,CAAC,KAAa;IACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,UAAU,CAAC,aAAa,EAAE,wBAAwB,CAAC,CAAC;IAC9E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,YAAY,GAAG,GAAG,EAAE,CACxB,IAAI,iBAAiB,CACnB,uBAAuB,EACvB,CAAC,EACD,sDAAsD,CACvD,CAAC;AACJ,MAAM,cAAc,GAAG,GAAG,EAAE,CAC1B,IAAI,iBAAiB,CACnB,iBAAiB,EACjB,CAAC,EACD,2DAA2D,CAC5D,CAAC;AAEJ,6FAA6F;AAC7F,MAAM,gBAAgB,GAAG,kBAAkB,GAAG,KAAK,CAAC;AACpD,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,IAAI,iBAAiB,CAAC,cAAc,EAAE,CAAC,EAAE,+BAA+B,CAAC,CAAC;AAEpG,KAAK,UAAU,YAAY,CAAC,QAAkB,EAAE,QAAgB;IAC9D,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;QAAE,MAAM,YAAY,EAAE,CAAC;IACjD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,KAAK,CAAC,IAAI;gBAAE,MAAM;YACtB,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;YAChC,IAAI,KAAK,GAAG,QAAQ;gBAAE,MAAM,YAAY,EAAE,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;IACvE,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,MAAM,OAAO,YAAY;IACd,MAAM,CAAS;IACP,KAAK,CAAS;IACd,OAAO,CAAe;IACtB,GAAG,CAAe;IAEnC,YAAY,OAKX;QACC,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YACzD,MAAM,UAAU,CAAC,eAAe,EAAE,0CAA0C,CAAC,CAAC;QAChF,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;QACtC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACrC,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,IAAY,EACZ,MAA8B,EAC9B,IAAa,EACb,GAAY,EACZ,QAAiB;QAEjB,MAAM,SAAS,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzE,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM,WAAW,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,MAAM,KAAK,KAAK,CAAC;QAClC,IAAI,QAAkB,CAAC;QACvB,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,mBAAmB,IAAI,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC7E,MAAM;gBACN,QAAQ,EAAE,OAAO;gBACjB,MAAM;gBACN,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;oBACrC,MAAM,EAAE,kBAAkB;oBAC1B,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;oBACrE,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC;iBACzD;gBACD,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;aACxC,CAAC,CAAC;YACH,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,MAAM,WAAW,EAAE,CAAC;YAC1E,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,IAAI,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,EAAE;oBAAE,MAAM,YAAY,EAAE,CAAC;gBAC1D,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;YACnD,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBAAE,KAAK,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;;gBAC5E,IAAI,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACxF,CAAC;QAAC,MAAM,CAAC;YACP,IACE,QAAQ,KAAK,SAAS;gBACtB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,IAAI,CAAC,SAAS,IAAI,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;gBAElE,MAAM,WAAW,EAAE,CAAC;YACtB,MAAM,QAAQ;gBACZ,CAAC,CAAC,cAAc,EAAE;gBAClB,CAAC,CAAC,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,CAAC,EAAE,iCAAiC,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YAAE,MAAM,WAAW,EAAE,CAAC;QAC1E,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACnD,MAAM,OAAO,GAAG,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;gBAC/E,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;oBACpC,CAAC,CAAC,OAAO,GAAG,IAAI;oBAChB,CAAC,CAAC,MAAM,KAAK,IAAI;wBACf,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACtC,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC3E,MAAM,IAAI,iBAAiB,CAAC,cAAc,EAAE,CAAC,EAAE,4BAA4B,EAAE,YAAY,CAAC,CAAC;YAC7F,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;YACxE,MAAM,IAAI,GAAG,QAAQ,EAAE,IAAI,CAAC;YAC5B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,EAAE,CAAC;gBACrE,MAAM,KAAK,GAAG,IAAoC,CAAC;gBACnD,MAAM,IAAI,iBAAiB,CAAC,KAAK,EAAE,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;YACxE,CAAC;YACD,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,CAAC,EAAE,yBAAyB,CAAC,CAAC;QAC9E,CAAC;QACD,IACE,CAAC,IAAI,KAAK,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC;YACxC,CAAC,MAAM,KAAK,KAAK,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC;YAC7C,CAAC,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,EAAE,CAAC;YAEjC,MAAM,QAAQ,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;QACrD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,MAAM,CACV,SAAiB,EACjB,GAAW;QAEX,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC;YACrC,MAAM,UAAU,CAAC,aAAa,EAAE,0BAA0B,CAAC,CAAC;QAC9D,IAAI,MAAoD,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,iBAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB;gBAC7E,MAAM,IAAI,iBAAiB,CACzB,sBAAsB,EACtB,CAAC,EACD,kIAAkI,CACnI,CAAC;YACJ,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QACjC,IACE,CAAC,MAAM,CAAC,IAAI,CAAC;YACb,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ;YAC3B,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAChB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;YACpB,IAAI,CAAC,KAAK,KAAK,SAAS;YAExB,MAAM,cAAc,EAAE,CAAC;QACzB,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,KAAK,MAAM;SACxD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,QAAiB;QACxC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC5F,IACE,CAAC,MAAM,CAAC,IAAI,CAAC;YACb,IAAI,CAAC,EAAE,KAAK,EAAE;YACd,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,KAA2B,CAAC;YACtD,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAChD,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC;YAC9B,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC;YAC9B,CAAC,YAAY,CAAC,IAAI,CAAC,qBAAqB,CAAC;YACzC,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC;YAEnC,MAAM,YAAY,EAAE,CAAC;QACvB,OAAO;YACL,EAAE;YACF,KAAK,EAAE,IAAI,CAAC,KAA2B;YACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;YACjD,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;SACpF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,QAAiB;QACxC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACrF,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CACf,EAAU,EACV,QAAwB,EACxB,QAAsC,EACtC,OAA2B;QAE3B,KAAK,CAAC,EAAE,CAAC,CAAC;QACV,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CACnC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,CACjE,CAAC;QACF,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,KAAK,GAAG,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC;YACvF,MAAM,UAAU,CACd,sBAAsB,EACtB,sDAAsD,CACvD,CAAC;QACJ,IACE,OAAO,CAAC,IAAI,CACV,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,cAAc,KAAK,qBAAqB,CACxF;YAED,MAAM,UAAU,CACd,wBAAwB,EACxB,yDAAyD,CAC1D,CAAC;QACJ,MAAM,KAAK,GAAG,IAAI,GAAG,EAA6B,CAAC;QACnD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;YAClF,IACE,MAAM,EAAE,IAAI,KAAK,QAAQ;gBACzB,MAAM,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc;gBAChD,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC;gBAE/B,MAAM,UAAU,CACd,6BAA6B,EAC7B,iEAAiE,CAClE,CAAC;YACJ,IACE,CAAC,CAAC,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,QAAQ,CACzF,OAAO,CAAC,IAAI,CACb;gBACD,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,WAAW,KAAK,qBAAqB,CAAC;gBAC1E,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY;oBAC5B,CAAC,MAAM,CAAC,WAAW,KAAK,KAAK;wBAC3B,MAAM,CAAC,OAAO,KAAK,IAAI;wBACvB,CAAC,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC;wBAC9B,MAAM,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;gBAEzC,MAAM,UAAU,CACd,yBAAyB,EACzB,2DAA2D,CAC5D,CAAC;YACJ,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;QACrE,MAAM,KAAK,GAAG,KAAK,IAAwB,EAAE;YAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACrC,IAAI,MAAM,CAAC,QAAQ,KAAK,YAAY;gBAClC,MAAM,UAAU,CACd,oBAAoB,EACpB,oDAAoD,CACrD,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3E,IACE,QAAQ,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM;gBACvC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,YAAY,CAAC,KAAK,CAAC,CAAC;gBAE1D,MAAM,YAAY,EAAE,CAAC;YACvB,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,UAAU,GAAG,CAAC,MAAiB,EAAE,EAAE;YACvC,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI;gBAC5B,MAAM,IAAI,iBAAiB,CACzB,WAAW,EACX,CAAC,EACD,6FAA6F,CAC9F,CAAC;YACJ,IAAI,MAAM,CAAC,qBAAqB,KAAK,IAAI;gBACvC,MAAM,IAAI,iBAAiB,CACzB,0BAA0B,EAC1B,CAAC,EACD,yFAAyF,CAC1F,CAAC;YACJ,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;gBAClC,MAAM,IAAI,iBAAiB,CACzB,WAAW,EACX,CAAC,EACD,kEAAkE,CACnE,CAAC;YACJ,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;gBACtC,MAAM,IAAI,iBAAiB,CACzB,0BAA0B,EAC1B,CAAC,EACD,0FAA0F,CAC3F,CAAC;QACN,CAAC,CAAC;QACF,IAAI,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;QACrF,UAAU,CAAC,MAAM,CAAC,CAAC;QACnB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,UAAU,CACd,4BAA4B,EAC5B,uEAAuE,CACxE,CAAC;QACJ,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAC/C,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBACd,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC;gBACvB,IAAI,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC;oBACrF,SAAS;gBACX,UAAU,CAAC,MAAM,CAAC,CAAC;YACrB,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAE,CAAC;YAC5C,IAAI,QAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;gBACjD,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,KAAK;oBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;gBAC3D,uBAAuB,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAClD,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,UAAU,CACd,8BAA8B,EAC9B,8CAA8C,CAC/C,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;gBACtC,MAAM,IAAI,iBAAiB,CACzB,0BAA0B,EAC1B,CAAC,EACD,0FAA0F,CAC3F,CAAC;YACJ,MAAM,IAAI,CAAC,OAAO,CAChB,IAAI,EAAE,gBAAgB,kBAAkB,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAChE,KAAK,EACL,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CACjD,CAAC;YACF,QAAQ,EAAE,CAAC;QACb,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;IACrE,CAAC;CACF"}

package/dist/import/credential-refs.d.ts

@@ -0,0 +1,2 @@
+export declare function isCredentialReference(ref: string): boolean;
+//# sourceMappingURL=credential-refs.d.ts.map

package/dist/import/credential-refs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-refs.d.ts","sourceRoot":"","sources":["../../src/import/credential-refs.ts"],"names":[],"mappings":"AAMA,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAkB1D"}

package/dist/import/credential-refs.js

@@ -0,0 +1,22 @@
+import { isCredentialValue } from '@package-broker/core/audit/redact';
+const ENV_REF = /^env:[A-Z_][A-Z0-9_]{0,127}$/;
+const TOKEN_ENV_PREFIXES = ['AKIA', 'ASIA', 'GHP_', 'GHO_', 'GHS_', 'GITHUB_PAT_', 'XOX', 'GLPAT'];
+const ABSOLUTE_PATH = /^(?:\/|[A-Za-z]:[\\/])/;
+export function isCredentialReference(ref) {
+    if (/\p{Cc}/u.test(ref))
+        return false;
+    if (ref.startsWith('env:')) {
+        const name = ref.slice(4);
+        return (ENV_REF.test(ref) &&
+            !TOKEN_ENV_PREFIXES.some((prefix) => name.startsWith(prefix)) &&
+            !isCredentialValue(name));
+    }
+    if (!ref.startsWith('file:'))
+        return false;
+    const path = ref.slice(5);
+    return (ABSOLUTE_PATH.test(path) &&
+        !path.split(/[\\/]/).includes('..') &&
+        Buffer.byteLength(path) <= 1024 &&
+        !isCredentialValue(path));
+}
+//# sourceMappingURL=credential-refs.js.map

package/dist/import/credential-refs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-refs.js","sourceRoot":"","sources":["../../src/import/credential-refs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAEtE,MAAM,OAAO,GAAG,8BAA8B,CAAC;AAC/C,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AACnG,MAAM,aAAa,GAAG,wBAAwB,CAAC;AAE/C,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,OAAO,CACL,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;YACjB,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC7D,CAAC,iBAAiB,CAAC,IAAI,CAAC,CACzB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1B,OAAO,CACL,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QACxB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI;QAC/B,CAAC,iBAAiB,CAAC,IAAI,CAAC,CACzB,CAAC;AACJ,CAAC"}

package/dist/import/cutover.d.ts

@@ -0,0 +1,64 @@
+export interface ComposerResult {
+    readonly exitCode: number | null;
+    readonly errorCode?: string;
+    readonly signal?: string;
+    readonly stdout: string;
+    readonly stderr: string;
+}
+export type ComposerRunner = (args: readonly string[], options: {
+    readonly cwd: string;
+    readonly env: NodeJS.ProcessEnv;
+    readonly shell: false;
+    readonly signal?: AbortSignal;
+    readonly timeout?: number;
+}) => Promise<ComposerResult>;
+export interface CutoverOptions {
+    readonly projectDir: string;
+    readonly oldRepository: string;
+    readonly newRepository: string;
+    readonly oldAuthEnv: string;
+    readonly newAuthEnv: string;
+    readonly historicLocks?: readonly string[];
+    readonly composer?: ComposerRunner;
+    readonly timeoutSeconds?: number;
+}
+declare const MESSAGES: {
+    readonly passed: "Composer cutover check passed.";
+    readonly resolution_difference: "Composer lock resolutions differ.";
+    readonly old_dist_host: "New repository lock still uses the old repository host.";
+    readonly update_failed: "Composer lock update failed.";
+    readonly install_failed: "Composer install failed.";
+    readonly historic_failed: "Historic lock check failed.";
+    readonly composer_v2_required: "Composer v2 is required; install Composer v2 and make it available on PATH.";
+    readonly invalid_input: "Supply a project, HTTP(S) repository URLs and named authentication environment variables.";
+    readonly repository_match: "Exactly one repository entry must match the old repository URL.";
+    readonly input_unreadable: "Could not read valid Composer project or historic lock files.";
+    readonly local_failed: "Could not prepare, read or remove temporary Composer files.";
+};
+type Code = keyof typeof MESSAGES;
+export interface CutoverResult {
+    readonly exitCode: 0 | 1 | 2;
+    readonly code: Code;
+    readonly message: string;
+    readonly counts: {
+        readonly old: number;
+        readonly new: number;
+    };
+    readonly differences: readonly string[];
+    readonly distOnly: readonly string[];
+    readonly oldHostPackages: readonly string[];
+    readonly diagnostics: readonly {
+        readonly step: 'version' | 'update' | 'install';
+        readonly exitCode: number | null;
+        readonly errorCode?: string;
+        readonly signal?: string;
+    }[];
+    readonly historic: readonly {
+        readonly index: number;
+        readonly ok: boolean;
+        readonly missingPackages: readonly string[];
+    }[];
+}
+export declare function runCutoverCheck(options: CutoverOptions): Promise<CutoverResult>;
+export {};
+//# sourceMappingURL=cutover.d.ts.map

package/dist/import/cutover.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cutover.d.ts","sourceRoot":"","sources":["../../src/import/cutover.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,cAAc,GAAG,CAC3B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE;IACP,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B,KACE,OAAO,CAAC,cAAc,CAAC,CAAC;AAE7B,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,QAAA,MAAM,QAAQ;;;;;;;;;;;;CAcJ,CAAC;AACX,KAAK,IAAI,GAAG,MAAM,OAAO,QAAQ,CAAC;AAElC,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAChE,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,WAAW,EAAE,SAAS;QAC7B,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;QAChD,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;KAC1B,EAAE,CAAC;IACJ,QAAQ,CAAC,QAAQ,EAAE,SAAS;QAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;QACrB,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;KAC7C,EAAE,CAAC;CACL;AAiPD,wBAAsB,eAAe,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CA8RrF"}