@salesforce/source-deploy-retrieve 13.11.0 → 13.12.0-compute.5

package/lib/src/client/transports/computeAppTransport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"computeAppTransport.js","sourceRoot":"","sources":["../../../../src/client/transports/computeAppTransport.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;;;;AAEH,yCAAiC;AACjC,0DAAiC;AACjC,2CAA8D;AAE9D,sDAAmE;AAEnE,oCAAyD;AAQzD,+DAAwG;AASxG,MAAM,QAAQ,GAAG,yBAAyB,CAAC;AAE3C,SAAS,kBAAkB,CAAC,SAA0B,EAAE,OAAkB;IACxE,MAAM,UAAU,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,QAAQ,CAAC;IACxD,OAAO,IAAA,gBAAI,EAAC,UAAU,EAAE,qCAAyB,EAAE,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;AACvG,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,UAAsB,EACtB,IAAY,EACZ,MAAc;IAEd,MAAM,IAAI,GAAG,IAAI,mBAAQ,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE;QAC5B,QAAQ,EAAE,0BAA0B;QACpC,WAAW,EAAE,kBAAkB;KAChC,CAAC,CAAC;IAEH,OAAO,UAAU,CAAC,OAAO,CAA8B;QACrD,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,QAAQ;QACb,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE;QACtB,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,8DAA8D;AAC9D,4EAA4E;AAC5E,+EAA+E;AAC/E,2EAA2E;AAC3E,KAAK,UAAU,cAAc,CAAC,UAAsB,EAAE,WAAmB;IACvE,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,CACnC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,oBAAoB,kBAAkB,CAAC,WAAW,CAAC,uBAAuB,EAAE,EAClG,EAAE,QAAQ,EAAE,QAAQ,EAAE,CACvB,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,GAAG,0CAAoB,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,iDAAiD,0CAAoB,kBAAkB,CAAC,CAAC;IAC3G,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED,MAAa,mBAAmB;IACd,IAAI,GAAG,YAAY,CAAC;IACnB,MAAM,GAAG,aAAM,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAC;IAEtE,kDAAkD;IAC3C,QAAQ;QACb,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAC1D,CAAC;IAEM,OAAO,CAAC,SAA0B;QACvC,OAAO,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,KAAK,IAAI,CAAC,IAAI,CAAC;IAC5D,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,OAAyB;QACjD,MAAM,aAAa,GAAmB,EAAE,CAAC;QACzC,MAAM,gBAAgB,GAA+B,EAAE,CAAC;QACxD,KAAK,gBAAS,CAAC,WAAW,EAAE,CAAC,aAAa,CAAC;YACzC,SAAS,EAAE,2BAA2B;YACtC,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QACH,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;gBACvC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;gBAEpG,4CAA4C;gBAC5C,MAAM,MAAM,GAAG,MAAM,IAAA,0CAAoB,EAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;gBACjF,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,iCAAiC,EACjC,SAAS,CAAC,QAAQ,EAClB,MAAM,CAAC,MAAM,CAAC,MAAM,EACpB,MAAM,CAAC,SAAS,CACjB,CAAC;gBAEF,4CAA4C;gBAC5C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;gBACzF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;gBAEjF,aAAa,CAAC,IAAI,CAAC;oBACjB,QAAQ,EAAE,SAAS,CAAC,QAAQ;oBAC5B,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI;oBACzB,KAAK,EAAE,uBAAe,CAAC,OAAO;oBAC9B,QAAQ,EAAE,SAAS,CAAC,OAAO;iBAC5B,CAAC,CAAC;gBACH,gBAAgB,CAAC,IAAI,CAAC;oBACpB,cAAc,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK;oBACrC,SAAS,EAAE,UAAU,SAAS,CAAC,QAAQ,EAAE;oBACzC,MAAM,EAAE,WAAW;iBACpB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,aAAa,CAAC,IAAI,CAAC;oBACjB,QAAQ,EAAE,SAAS,CAAC,QAAQ;oBAC5B,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI;oBACzB,KAAK,EAAE,uBAAe,CAAC,MAAM;oBAC7B,QAAQ,EAAE,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,GAAG,IAAI,EAAE;oBAClD,KAAK,EAAG,GAAa,CAAC,OAAO;oBAC7B,WAAW,EAAE,OAAO;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACjF,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,OAAyB;QAClD,MAAM,aAAa,GAAmB,EAAE,CAAC;QACzC,KAAK,gBAAS,CAAC,WAAW,EAAE,CAAC,aAAa,CAAC;YACzC,SAAS,EAAE,8BAA8B;YACzC,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QACH,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACpG,MAAM,aAAa,GAAG,WAAW;oBAC/B,CAAC,CAAC,OAAO,CAAC,cAAc;wBACpB,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;yBAC7F,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC;oBAClD,CAAC,CAAC,SAAS,CAAC;gBACd,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,WAAW,IAAI,CAAC,aAAa,EAAE,CAAC;oBACxD,MAAM,IAAI,KAAK,CAAC,gCAAgC,WAAW,iBAAiB,SAAS,CAAC,QAAQ,IAAI,CAAC,CAAC;gBACtG,CAAC;gBACD,MAAM,WAAW,GACf,SAAS,CAAC,OAAO;oBACjB,CAAC,aAAa,IAAI,OAAO,CAAC,MAAM;wBAC9B,CAAC,CAAC,IAAA,gBAAI,EACF,aAAa,EAAE,SAAS,IAAI,aAAa,EAAE,IAAI,IAAI,OAAO,CAAC,MAAO,EAClE,SAAS,CAAC,IAAI,CAAC,aAAa,EAC5B,SAAS,CAAC,QAAQ,CACnB;wBACH,CAAC,CAAC,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;gBACtD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;gBAE/F,4CAA4C;gBAC5C,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;gBAC5E,4CAA4C;gBAC5C,MAAM,QAAQ,GAAG,MAAM,IAAA,yCAAmB,EAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBAChE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;gBAExG,aAAa,CAAC,IAAI,CAAC;oBACjB,QAAQ,EAAE,SAAS,CAAC,QAAQ;oBAC5B,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI;oBACzB,KAAK,EAAE,uBAAe,CAAC,OAAO;oBAC9B,QAAQ,EAAE,WAAW;iBACtB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,aAAa,CAAC,IAAI,CAAC;oBACjB,QAAQ,EAAE,SAAS,CAAC,QAAQ;oBAC5B,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI;oBACzB,KAAK,EAAE,uBAAe,CAAC,MAAM;oBAC7B,QAAQ,EAAE,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,GAAG,IAAI,EAAE;oBAClD,KAAK,EAAG,GAAa,CAAC,OAAO;oBAC7B,WAAW,EAAE,OAAO;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAC1D,CAAC;IAED,kDAAkD;IAC1C,sBAAsB,CAC5B,SAA0B;QAE1B,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACvB,MAAM,IAAI,cAAO,CACf,oDAAoD,SAAS,CAAC,QAAQ,GAAG,EACzE,yBAAyB,CAC1B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,kDAAkD;IAC1C,gBAAgB,CAAC,aAA6B,EAAE,SAAiB;QACvE,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,uBAAe,CAAC,MAAM,CAAC,CAAC;QACjF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjG,MAAM,KAAK,GAAG,IAAI,cAAO,CACvB,mBAAmB,SAAS,eAAe,OAAO,EAAE,EACpD,aAAa,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAC3E,CAAC;YACF,KAAK,CAAC,IAAI,GAAG,aAAa,CAAC;YAC3B,MAAM,KAAK,CAAC;QACd,CAAC;QAED,OAAO,EAAE,aAAa,EAAE,CAAC;IAC3B,CAAC;CACF;AAlJD,kDAkJC"}

package/lib/src/client/transports/computeSourceBundle.d.ts

@@ -0,0 +1,10 @@
+export declare const MAX_COMPRESSED_BYTES: number;
+export type PackagedBundle = {
+    buffer: Buffer;
+    fileCount: number;
+};
+export type UnpackedBundle = {
+    fileCount: number;
+};
+export declare function packageComputeBundle(appDir: string, name: string): Promise<PackagedBundle>;
+export declare function unpackComputeBundle(buffer: Buffer, appDir: string): Promise<UnpackedBundle>;

package/lib/src/client/transports/computeSourceBundle.js

@@ -0,0 +1,293 @@
+"use strict";
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_COMPRESSED_BYTES = void 0;
+exports.packageComputeBundle = packageComputeBundle;
+exports.unpackComputeBundle = unpackComputeBundle;
+const promises_1 = require("node:fs/promises");
+const node_path_1 = require("node:path");
+const node_zlib_1 = require("node:zlib");
+const consumers_1 = require("node:stream/consumers");
+const tarStream = __importStar(require("tar-stream"));
+const core_1 = require("@salesforce/core");
+const forceIgnore_1 = require("../../resolve/forceIgnore");
+const logger = core_1.Logger.childFromRoot('computeSourceBundle');
+// Compute source bundles are app source, not dependency caches or compiled artifacts.
+// Cap the gzip layer and the tar entries retained in memory when unpacking.
+exports.MAX_COMPRESSED_BYTES = 40 * 1024 * 1024;
+const MAX_TAR_BYTES = 64 * 1024 * 1024;
+const MAX_ENTRY_BYTES = 16 * 1024 * 1024;
+const MAX_TOTAL_ENTRY_BYTES = 40 * 1024 * 1024;
+const MAX_ENTRIES = 1000;
+// Upload shape: deployment-bundle.tar.gz containing api-spec.yaml plus a
+// nested source.tar.gz with the app's source files. Downloads return only that
+// source.tar.gz (see unpackComputeBundle).
+async function packageComputeBundle(appDir, name) {
+    const apiSpecPath = (0, node_path_1.join)(appDir, 'api-spec.yaml');
+    try {
+        await (0, promises_1.access)(apiSpecPath);
+    }
+    catch {
+        throw new core_1.SfError(`ComputeApp '${name}' is missing required api-spec.yaml in ${appDir}`, 'MissingApiSpec');
+    }
+    const metaFileName = `${name}.computeApp-meta.xml`;
+    const excluded = new Set([metaFileName, '.forceignore']);
+    // Both files are consumed at build/runtime, so a broad .forceignore must not
+    // remove them from the nested source archive.
+    const alwaysIncluded = new Set(['api-spec.yaml', 'project.toml']);
+    const forceIgnore = forceIgnore_1.ForceIgnore.findAndCreate(appDir);
+    const sourceRelativePaths = await listFilesRecursive(appDir, (file) => !excluded.has(file) && (alwaysIncluded.has(file) || forceIgnore.accepts((0, node_path_1.join)(appDir, file))));
+    logger.debug('packaging %s: %d files after exclusions/.forceignore', appDir, sourceRelativePaths.length);
+    const apiSpec = await (0, promises_1.readFile)(apiSpecPath);
+    if (apiSpec.length > MAX_ENTRY_BYTES) {
+        throw new Error(`Compute source bundle: api-spec.yaml entry size limit (${MAX_ENTRY_BYTES} bytes) exceeded`);
+    }
+    let sourceBytes = 0;
+    for (const relativePath of sourceRelativePaths) {
+        // eslint-disable-next-line no-await-in-loop
+        const { size } = await (0, promises_1.lstat)((0, node_path_1.join)(appDir, relativePath));
+        if (size > MAX_ENTRY_BYTES) {
+            throw new Error(`Compute source bundle: entry size limit (${MAX_ENTRY_BYTES} bytes) exceeded for ${relativePath}`);
+        }
+        sourceBytes += size;
+        if (sourceBytes > MAX_TOTAL_ENTRY_BYTES) {
+            throw new Error(`Compute source bundle: total size limit (${MAX_TOTAL_ENTRY_BYTES} bytes) exceeded`);
+        }
+    }
+    const sourceEntries = await Promise.all(sourceRelativePaths.map(async (relativePath) => ({
+        name: relativePath,
+        data: await (0, promises_1.readFile)((0, node_path_1.join)(appDir, relativePath)),
+    })));
+    // The source may change between stat and read; check actual bytes before assembling.
+    if (sourceEntries.some(({ data }) => data.length > MAX_ENTRY_BYTES)) {
+        throw new Error(`Compute source bundle: entry size limit (${MAX_ENTRY_BYTES} bytes) exceeded`);
+    }
+    if (sourceEntries.reduce((total, { data }) => total + data.length, 0) > MAX_TOTAL_ENTRY_BYTES) {
+        throw new Error(`Compute source bundle: total size limit (${MAX_TOTAL_ENTRY_BYTES} bytes) exceeded`);
+    }
+    const sourceTarGz = await tarGzip(sourceEntries);
+    if (sourceTarGz.length > exports.MAX_COMPRESSED_BYTES) {
+        throw new Error(`Compute source bundle: source.tar.gz entry size limit (${exports.MAX_COMPRESSED_BYTES} bytes) exceeded`);
+    }
+    if (apiSpec.length + sourceTarGz.length > MAX_TOTAL_ENTRY_BYTES) {
+        throw new Error(`Compute source bundle: outer total size limit (${MAX_TOTAL_ENTRY_BYTES} bytes) exceeded`);
+    }
+    const buffer = await tarGzip([
+        { name: 'api-spec.yaml', data: apiSpec },
+        { name: 'source.tar.gz', data: sourceTarGz },
+    ]);
+    if (buffer.length > exports.MAX_COMPRESSED_BYTES) {
+        throw new Error(`Compute source bundle: compressed size limit (${exports.MAX_COMPRESSED_BYTES} bytes) exceeded`);
+    }
+    logger.debug('packaged %s into %d bytes (%d files)', appDir, buffer.length, sourceEntries.length);
+    return { buffer, fileCount: sourceEntries.length };
+}
+// Download shape: a flat source.tar.gz of the latest build's source files,
+// which already include api-spec.yaml and project.toml.
+async function unpackComputeBundle(buffer, appDir) {
+    const entries = await untarGzip(buffer);
+    const names = Object.keys(entries);
+    if (names.length === 0) {
+        throw new Error('Malformed compute source bundle: archive contains no files');
+    }
+    const resolvedAppDir = (0, node_path_1.resolve)(appDir);
+    const files = Object.entries(entries).map(([relativePath, data]) => {
+        const filePath = (0, node_path_1.resolve)(appDir, relativePath);
+        // tar-slip guard: reject entries that escape appDir
+        if (!filePath.startsWith(resolvedAppDir + node_path_1.sep)) {
+            throw new Error(`Malformed compute source bundle: unsafe entry path "${relativePath}"`);
+        }
+        return { filePath, data };
+    });
+    // Check every output path before writing so a rejected entry leaves the app directory untouched.
+    await rejectSymlinks(resolvedAppDir);
+    await Promise.all(files.map(({ filePath }) => rejectSymlinks(filePath)));
+    await (0, promises_1.mkdir)(appDir, { recursive: true });
+    // Settle every write before reporting a failure so no write is still in flight when the caller sees the error.
+    const writes = await Promise.allSettled(files.map(async ({ filePath, data }) => {
+        await (0, promises_1.mkdir)((0, node_path_1.dirname)(filePath), { recursive: true });
+        await rejectSymlinks(filePath);
+        await (0, promises_1.writeFile)(filePath, data);
+    }));
+    const failed = writes.find((write) => write.status === 'rejected');
+    if (failed)
+        throw failed.reason;
+    return { fileCount: names.length };
+}
+async function rejectSymlinks(filePath) {
+    let current = (0, node_path_1.resolve)(filePath);
+    const root = (0, node_path_1.parse)(current).root;
+    // The filesystem root is trusted; inspect every component beneath it, including
+    // ancestors of an already-existing app or output file.
+    while (current !== root) {
+        try {
+            // eslint-disable-next-line no-await-in-loop
+            const stat = await (0, promises_1.lstat)(current);
+            if (stat.isSymbolicLink()) {
+                // macOS exposes /var as a system alias for /private/var. Do not reject
+                // ordinary output paths in its temporary directory for that alias.
+                // eslint-disable-next-line no-await-in-loop
+                if (!(process.platform === 'darwin' && current === '/var' && (await (0, promises_1.realpath)(current)) === '/private/var')) {
+                    throw new Error(`Malformed compute source bundle: symlink in output path "${current}"`);
+                }
+            }
+        }
+        catch (err) {
+            if (err.code !== 'ENOENT')
+                throw err;
+        }
+        current = (0, node_path_1.dirname)(current);
+    }
+}
+function untarGzip(buffer) {
+    return new Promise((resolveEntries, reject) => {
+        if (buffer.length > exports.MAX_COMPRESSED_BYTES) {
+            reject(new Error(`Malformed compute source bundle: compressed size limit (${exports.MAX_COMPRESSED_BYTES} bytes) exceeded`));
+            return;
+        }
+        let decompressed;
+        try {
+            decompressed = (0, node_zlib_1.gunzipSync)(buffer, { maxOutputLength: MAX_TAR_BYTES });
+        }
+        catch (err) {
+            reject(new Error(err.code === 'ERR_BUFFER_TOO_LARGE'
+                ? `Malformed compute source bundle: decompressed size limit (${MAX_TAR_BYTES} bytes) exceeded`
+                : 'Malformed compute source bundle: not a valid gzip archive'));
+            return;
+        }
+        const entries = {};
+        const extract = tarStream.extract();
+        let entryCount = 0;
+        let totalBytes = 0;
+        extract.on('entry', (header, stream, next) => {
+            // Archives made by system tar list directories; files below them create those paths when written.
+            if (header.type === 'directory') {
+                stream.on('end', next);
+                stream.resume();
+                return;
+            }
+            if (header.type && header.type !== 'file' && header.type !== 'contiguous-file') {
+                reject(new Error(`Malformed compute source bundle: unsupported ${header.type} entry "${header.name}"`));
+                extract.destroy();
+                return;
+            }
+            entryCount++;
+            if (entryCount > MAX_ENTRIES) {
+                reject(new Error(`Malformed compute source bundle: entry count limit (${MAX_ENTRIES}) exceeded`));
+                extract.destroy();
+                return;
+            }
+            if ((header.size && header.size > MAX_ENTRY_BYTES) ||
+                (header.size && totalBytes + header.size > MAX_TOTAL_ENTRY_BYTES)) {
+                reject(new Error(`Malformed compute source bundle: entry size limit (${MAX_ENTRY_BYTES} bytes) or total size limit (${MAX_TOTAL_ENTRY_BYTES} bytes) exceeded`));
+                extract.destroy();
+                return;
+            }
+            const chunks = [];
+            stream.on('data', (chunk) => {
+                totalBytes += chunk.length;
+                if (totalBytes > MAX_TOTAL_ENTRY_BYTES) {
+                    reject(new Error(`Malformed compute source bundle: total size limit (${MAX_TOTAL_ENTRY_BYTES} bytes) exceeded`));
+                    extract.destroy();
+                    return;
+                }
+                chunks.push(chunk);
+            });
+            stream.on('end', () => {
+                entries[header.name] = Buffer.concat(chunks);
+                next();
+            });
+            stream.on('error', reject);
+            stream.resume();
+        });
+        extract.on('finish', () => resolveEntries(entries));
+        extract.on('error', () => reject(new Error('Malformed compute source bundle: not a valid tar archive')));
+        extract.end(decompressed);
+    });
+}
+async function tarGzip(entries) {
+    const pack = tarStream.pack();
+    // Pipe BEFORE writing entries to avoid deadlock: pack is a Readable with
+    // a 16KB highWaterMark — without a consumer attached, backpressure stalls
+    // the entry callbacks once buffered bytes exceed the threshold.
+    const gzippedBufferPromise = (0, consumers_1.buffer)(pack.pipe((0, node_zlib_1.createGzip)()));
+    await entries.reduce((previous, { name, data }) => previous.then(async () => new Promise((resolveEntry, reject) => {
+        pack.entry({ name, size: data.length }, data, (err) => (err ? reject(err) : resolveEntry()));
+    })), Promise.resolve());
+    pack.finalize();
+    return gzippedBufferPromise;
+}
+async function listFilesRecursive(base, accepts) {
+    const files = [];
+    async function walk(dir) {
+        const entries = await (0, promises_1.readdir)(dir, { withFileTypes: true });
+        for (const entry of entries) {
+            if (entry.name.startsWith('.'))
+                continue;
+            const full = (0, node_path_1.join)(dir, entry.name);
+            if (entry.isDirectory()) {
+                // eslint-disable-next-line no-await-in-loop
+                await walk(full);
+            }
+            else if (entry.isFile()) {
+                const file = (0, node_path_1.relative)(base, full).split(node_path_1.sep).join('/');
+                if (accepts(file)) {
+                    if (files.length === MAX_ENTRIES) {
+                        throw new Error(`Compute source bundle: entry count limit (${MAX_ENTRIES}) exceeded`);
+                    }
+                    files.push(file);
+                }
+            }
+        }
+    }
+    await walk(base);
+    return files;
+}
+//# sourceMappingURL=computeSourceBundle.js.map

package/lib/src/client/transports/computeSourceBundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"computeSourceBundle.js","sourceRoot":"","sources":["../../../../src/client/transports/computeSourceBundle.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCH,oDAuEC;AAID,kDAiCC;AA1ID,+CAAgG;AAChG,yCAAyE;AACzE,yCAAmD;AACnD,qDAAiE;AACjE,sDAAwC;AACxC,2CAAmD;AACnD,2DAAwD;AAExD,MAAM,MAAM,GAAG,aAAM,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAC;AAE3D,sFAAsF;AACtF,4EAA4E;AAC/D,QAAA,oBAAoB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACrD,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACvC,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACzC,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC/C,MAAM,WAAW,GAAG,IAAI,CAAC;AAWzB,yEAAyE;AACzE,+EAA+E;AAC/E,2CAA2C;AACpC,KAAK,UAAU,oBAAoB,CAAC,MAAc,EAAE,IAAY;IACrE,MAAM,WAAW,GAAG,IAAA,gBAAI,EAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,IAAA,iBAAM,EAAC,WAAW,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAO,CAAC,eAAe,IAAI,0CAA0C,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAC7G,CAAC;IAED,MAAM,YAAY,GAAG,GAAG,IAAI,sBAAsB,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;IACzD,6EAA6E;IAC7E,8CAA8C;IAC9C,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,yBAAW,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAEtD,MAAM,mBAAmB,GAAG,MAAM,kBAAkB,CAClD,MAAM,EACN,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC,IAAA,gBAAI,EAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CACvG,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,sDAAsD,EAAE,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAEzG,MAAM,OAAO,GAAG,MAAM,IAAA,mBAAQ,EAAC,WAAW,CAAC,CAAC;IAC5C,IAAI,OAAO,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,0DAA0D,eAAe,kBAAkB,CAAC,CAAC;IAC/G,CAAC;IACD,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,KAAK,MAAM,YAAY,IAAI,mBAAmB,EAAE,CAAC;QAC/C,4CAA4C;QAC5C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAA,gBAAK,EAAC,IAAA,gBAAI,EAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;QACzD,IAAI,IAAI,GAAG,eAAe,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,4CAA4C,eAAe,wBAAwB,YAAY,EAAE,CAClG,CAAC;QACJ,CAAC;QACD,WAAW,IAAI,IAAI,CAAC;QACpB,IAAI,WAAW,GAAG,qBAAqB,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,4CAA4C,qBAAqB,kBAAkB,CAAC,CAAC;QACvG,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,CACrC,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,MAAM,IAAA,mBAAQ,EAAC,IAAA,gBAAI,EAAC,MAAM,EAAE,YAAY,CAAC,CAAC;KACjD,CAAC,CAAC,CACJ,CAAC;IACF,qFAAqF;IACrF,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,4CAA4C,eAAe,kBAAkB,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,qBAAqB,EAAE,CAAC;QAC9F,MAAM,IAAI,KAAK,CAAC,4CAA4C,qBAAqB,kBAAkB,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IACjD,IAAI,WAAW,CAAC,MAAM,GAAG,4BAAoB,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,0DAA0D,4BAAoB,kBAAkB,CAAC,CAAC;IACpH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,kDAAkD,qBAAqB,kBAAkB,CAAC,CAAC;IAC7G,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC;QAC3B,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE;QACxC,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,EAAE;KAC7C,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,GAAG,4BAAoB,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,iDAAiD,4BAAoB,kBAAkB,CAAC,CAAC;IAC3G,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAElG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,CAAC,MAAM,EAAE,CAAC;AACrD,CAAC;AAED,2EAA2E;AAC3E,wDAAwD;AACjD,KAAK,UAAU,mBAAmB,CAAC,MAAc,EAAE,MAAc;IACtE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,cAAc,GAAG,IAAA,mBAAO,EAAC,MAAM,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE;QACjE,MAAM,QAAQ,GAAG,IAAA,mBAAO,EAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC/C,oDAAoD;QACpD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,cAAc,GAAG,eAAG,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,uDAAuD,YAAY,GAAG,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IACH,iGAAiG;IACjG,MAAM,cAAc,CAAC,cAAc,CAAC,CAAC;IACrC,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAEzE,MAAM,IAAA,gBAAK,EAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,+GAA+G;IAC/G,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CACrC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE;QACrC,MAAM,IAAA,gBAAK,EAAC,IAAA,mBAAO,EAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,IAAA,oBAAS,EAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC,CACH,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAkC,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;IACnG,IAAI,MAAM;QAAE,MAAM,MAAM,CAAC,MAAM,CAAC;IAEhC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,QAAgB;IAC5C,IAAI,OAAO,GAAG,IAAA,mBAAO,EAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAA,iBAAK,EAAC,OAAO,CAAC,CAAC,IAAI,CAAC;IACjC,gFAAgF;IAChF,uDAAuD;IACvD,OAAO,OAAO,KAAK,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,4CAA4C;YAC5C,MAAM,IAAI,GAAG,MAAM,IAAA,gBAAK,EAAC,OAAO,CAAC,CAAC;YAClC,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC1B,uEAAuE;gBACvE,mEAAmE;gBACnE,4CAA4C;gBAC5C,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,KAAK,MAAM,IAAI,CAAC,MAAM,IAAA,mBAAQ,EAAC,OAAO,CAAC,CAAC,KAAK,cAAc,CAAC,EAAE,CAAC;oBAC3G,MAAM,IAAI,KAAK,CAAC,4DAA4D,OAAO,GAAG,CAAC,CAAC;gBAC1F,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC;QAClE,CAAC;QACD,OAAO,GAAG,IAAA,mBAAO,EAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,MAAc;IAC/B,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE;QAC5C,IAAI,MAAM,CAAC,MAAM,GAAG,4BAAoB,EAAE,CAAC;YACzC,MAAM,CACJ,IAAI,KAAK,CAAC,2DAA2D,4BAAoB,kBAAkB,CAAC,CAC7G,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,YAAoB,CAAC;QACzB,IAAI,CAAC;YACH,YAAY,GAAG,IAAA,sBAAU,EAAC,MAAM,EAAE,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC,CAAC;QACxE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CACJ,IAAI,KAAK,CACN,GAA6B,CAAC,IAAI,KAAK,sBAAsB;gBAC5D,CAAC,CAAC,6DAA6D,aAAa,kBAAkB;gBAC9F,CAAC,CAAC,2DAA2D,CAChE,CACF,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YAC3C,kGAAkG;YAClG,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAChC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBACvB,MAAM,CAAC,MAAM,EAAE,CAAC;gBAChB,OAAO;YACT,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBAC/E,MAAM,CAAC,IAAI,KAAK,CAAC,gDAAgD,MAAM,CAAC,IAAI,WAAW,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;gBACxG,OAAO,CAAC,OAAO,EAAE,CAAC;gBAClB,OAAO;YACT,CAAC;YACD,UAAU,EAAE,CAAC;YACb,IAAI,UAAU,GAAG,WAAW,EAAE,CAAC;gBAC7B,MAAM,CAAC,IAAI,KAAK,CAAC,uDAAuD,WAAW,YAAY,CAAC,CAAC,CAAC;gBAClG,OAAO,CAAC,OAAO,EAAE,CAAC;gBAClB,OAAO;YACT,CAAC;YACD,IACE,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,GAAG,eAAe,CAAC;gBAC9C,CAAC,MAAM,CAAC,IAAI,IAAI,UAAU,GAAG,MAAM,CAAC,IAAI,GAAG,qBAAqB,CAAC,EACjE,CAAC;gBACD,MAAM,CACJ,IAAI,KAAK,CACP,sDAAsD,eAAe,gCAAgC,qBAAqB,kBAAkB,CAC7I,CACF,CAAC;gBACF,OAAO,CAAC,OAAO,EAAE,CAAC;gBAClB,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAc,EAAE,EAAE;gBACnC,UAAU,IAAK,KAAgB,CAAC,MAAM,CAAC;gBACvC,IAAI,UAAU,GAAG,qBAAqB,EAAE,CAAC;oBACvC,MAAM,CACJ,IAAI,KAAK,CAAC,sDAAsD,qBAAqB,kBAAkB,CAAC,CACzG,CAAC;oBACF,OAAO,CAAC,OAAO,EAAE,CAAC;oBAClB,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;YAC/B,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACpB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC7C,IAAI,EAAE,CAAC;YACT,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC3B,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;QACpD,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC,CAAC,CAAC;QACzG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,OAAsD;IAC3E,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IAE9B,yEAAyE;IACzE,0EAA0E;IAC1E,gEAAgE;IAChE,MAAM,oBAAoB,GAAG,IAAA,kBAAc,EAAC,IAAI,CAAC,IAAI,CAAC,IAAA,sBAAU,GAAE,CAAC,CAAC,CAAC;IAErE,MAAM,OAAO,CAAC,MAAM,CAClB,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAC3B,QAAQ,CAAC,IAAI,CACX,KAAK,IAAI,EAAE,CACT,IAAI,OAAO,CAAO,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE;QACzC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IAC/F,CAAC,CAAC,CACL,EACH,OAAO,CAAC,OAAO,EAAE,CAClB,CAAC;IACF,IAAI,CAAC,QAAQ,EAAE,CAAC;IAChB,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,IAAY,EAAE,OAAkC;IAChF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,UAAU,IAAI,CAAC,GAAW;QAC7B,MAAM,OAAO,GAAG,MAAM,IAAA,kBAAO,EAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YACzC,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,4CAA4C;gBAC5C,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,IAAA,oBAAQ,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,eAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACvD,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAClB,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;wBACjC,MAAM,IAAI,KAAK,CAAC,6CAA6C,WAAW,YAAY,CAAC,CAAC;oBACxF,CAAC;oBACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,KAAK,CAAC;AACf,CAAC"}

package/lib/src/client/transports/index.d.ts

@@ -0,0 +1,2 @@
+export type { TransportPlan, TransportPlanComponent, TransportPlanPhase, TransportStageEvent, } from './transportPipeline';
+export type { TransportOperationResult } from './types';

package/lib/src/client/transports/index.js

@@ -0,0 +1,18 @@
+"use strict";
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=index.js.map

package/lib/src/client/transports/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/client/transports/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG"}

package/lib/src/client/transports/transportCoordinator.d.ts

@@ -0,0 +1,20 @@
+import { RequestStatus } from '../types';
+import { DeployResult } from '../metadataApiDeploy';
+import { RetrieveResult } from '../metadataApiRetrieve';
+import { TransportContext } from './types';
+import { TransportGroup, TransportPipeline } from './transportPipeline';
+type TransportOperation = 'deploy' | 'retrieve';
+type TransportResult = DeployResult | RetrieveResult;
+export declare class TransportCoordinator {
+    private readonly pipeline;
+    private readonly groups;
+    private readonly context;
+    private readonly operation;
+    private beforeMetadataResults;
+    private readonly beforeAdded;
+    private readonly afterStarted;
+    constructor(pipeline: TransportPipeline, groups: TransportGroup[], context: TransportContext, operation: TransportOperation);
+    runBeforeMetadata(): Promise<void>;
+    processResult(result: TransportResult, status: RequestStatus): Promise<void>;
+}
+export {};

package/lib/src/client/transports/transportCoordinator.js

@@ -0,0 +1,82 @@
+"use strict";
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TransportCoordinator = void 0;
+const componentSet_1 = require("../../collections/componentSet");
+const types_1 = require("../types");
+const metadataApiRetrieve_1 = require("../metadataApiRetrieve");
+class TransportCoordinator {
+    pipeline;
+    groups;
+    context;
+    operation;
+    beforeMetadataResults = {
+        fileResponses: [],
+        asyncHandles: [],
+        operationResults: [],
+    };
+    beforeAdded = new WeakSet();
+    afterStarted = new WeakSet();
+    constructor(pipeline, groups, context, operation) {
+        this.pipeline = pipeline;
+        this.groups = groups;
+        this.context = context;
+        this.operation = operation;
+    }
+    async runBeforeMetadata() {
+        const result = await this.pipeline.runBeforeMetadata(this.context, this.groups, this.operation);
+        this.beforeMetadataResults = result;
+    }
+    async processResult(result, status) {
+        if (!this.beforeAdded.has(result)) {
+            this.beforeAdded.add(result);
+            result.addTransportResults(this.beforeMetadataResults.fileResponses, this.beforeMetadataResults.asyncHandles, this.beforeMetadataResults.operationResults);
+        }
+        if (status !== types_1.RequestStatus.Succeeded)
+            return;
+        if (this.afterStarted.has(result))
+            return;
+        this.afterStarted.add(result);
+        if (this.operation === 'retrieve' && result instanceof metadataApiRetrieve_1.RetrieveResult) {
+            const extracted = result.components.getSourceComponents().toArray();
+            const extractedByKey = new Map(extracted.map((component) => [`${component.type.name}#${component.fullName}`, component]));
+            for (const group of this.groups) {
+                const named = new Set(group.components
+                    .filter((component) => component.fullName !== componentSet_1.ComponentSet.WILDCARD)
+                    .map((component) => `${component.type.name}#${component.fullName}`));
+                // a wildcard member (`Type:*`) resolves to every component of that type the org returned
+                group.components = group.components.flatMap((component) => {
+                    const key = `${component.type.name}#${component.fullName}`;
+                    if (component.fullName !== componentSet_1.ComponentSet.WILDCARD)
+                        return [extractedByKey.get(key) ?? component];
+                    return extracted.filter((candidate) => {
+                        const candidateKey = `${candidate.type.name}#${candidate.fullName}`;
+                        if (candidate.type.name !== component.type.name || named.has(candidateKey))
+                            return false;
+                        named.add(candidateKey);
+                        return true;
+                    });
+                });
+            }
+        }
+        const groups = this.groups.filter((group) => group.components.length > 0);
+        const afterMetadataResults = await this.pipeline.runAfterMetadata(this.context, groups, this.operation);
+        result.addTransportResults(afterMetadataResults.fileResponses, afterMetadataResults.asyncHandles, afterMetadataResults.operationResults);
+    }
+}
+exports.TransportCoordinator = TransportCoordinator;
+//# sourceMappingURL=transportCoordinator.js.map

package/lib/src/client/transports/transportCoordinator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transportCoordinator.js","sourceRoot":"","sources":["../../../../src/client/transports/transportCoordinator.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AAEH,iEAA8D;AAC9D,oCAAyC;AAEzC,gEAAwD;AAOxD,MAAa,oBAAoB;IAUZ;IACA;IACA;IACA;IAZX,qBAAqB,GAA4B;QACvD,aAAa,EAAE,EAAE;QACjB,YAAY,EAAE,EAAE;QAChB,gBAAgB,EAAE,EAAE;KACrB,CAAC;IACe,WAAW,GAAG,IAAI,OAAO,EAAmB,CAAC;IAC7C,YAAY,GAAG,IAAI,OAAO,EAAmB,CAAC;IAE/D,YACmB,QAA2B,EAC3B,MAAwB,EACxB,OAAyB,EACzB,SAA6B;QAH7B,aAAQ,GAAR,QAAQ,CAAmB;QAC3B,WAAM,GAAN,MAAM,CAAkB;QACxB,YAAO,GAAP,OAAO,CAAkB;QACzB,cAAS,GAAT,SAAS,CAAoB;IAC7C,CAAC;IAEG,KAAK,CAAC,iBAAiB;QAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAChG,IAAI,CAAC,qBAAqB,GAAG,MAAM,CAAC;IACtC,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,MAAuB,EAAE,MAAqB;QACvE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC7B,MAAM,CAAC,mBAAmB,CACxB,IAAI,CAAC,qBAAqB,CAAC,aAAa,EACxC,IAAI,CAAC,qBAAqB,CAAC,YAAY,EACvC,IAAI,CAAC,qBAAqB,CAAC,gBAAgB,CAC5C,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,KAAK,qBAAa,CAAC,SAAS;YAAE,OAAO;QAC/C,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO;QAC1C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAE9B,IAAI,IAAI,CAAC,SAAS,KAAK,UAAU,IAAI,MAAM,YAAY,oCAAc,EAAE,CAAC;YACtE,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC,OAAO,EAAE,CAAC;YACpE,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,SAAS,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,CAAC,CAAC,CAC1F,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChC,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,KAAK,CAAC,UAAU;qBACb,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,2BAAY,CAAC,QAAQ,CAAC;qBACnE,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC,CACtE,CAAC;gBACF,yFAAyF;gBACzF,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE;oBACxD,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;oBAC3D,IAAI,SAAS,CAAC,QAAQ,KAAK,2BAAY,CAAC,QAAQ;wBAAE,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,CAAC;oBAChG,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE;wBACpC,MAAM,YAAY,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;wBACpE,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;4BAAE,OAAO,KAAK,CAAC;wBACzF,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;wBACxB,OAAO,IAAI,CAAC;oBACd,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC1E,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACxG,MAAM,CAAC,mBAAmB,CACxB,oBAAoB,CAAC,aAAa,EAClC,oBAAoB,CAAC,YAAY,EACjC,oBAAoB,CAAC,gBAAgB,CACtC,CAAC;IACJ,CAAC;CACF;AAnED,oDAmEC"}

package/lib/src/client/transports/transportPipeline.d.ts

@@ -0,0 +1,55 @@
+import type { DestructiveChangesType } from '../../collections/types';
+import { TransportName } from '../../registry/types';
+import { SourceComponent } from '../../resolve/sourceComponent';
+import { FileResponse } from '../types';
+import { AsyncTransportHandle, TransportContext, TransportOperationResult, TransportProvider } from './types';
+export type TransportGroup = {
+    transport: TransportProvider;
+    components: SourceComponent[];
+};
+export type GroupedComponents = {
+    metadataApi: SourceComponent[];
+    transports: TransportGroup[];
+};
+export type TransportPlan = {
+    phases: TransportPlanPhase[];
+};
+export type TransportPlanPhase = {
+    phase: 'before-metadata' | 'metadata-api' | 'after-metadata';
+    label: string;
+    endpoint: string;
+    components: TransportPlanComponent[];
+};
+export type TransportPlanComponent = {
+    fullName: string;
+    type: string;
+    /** Set when the component is deleted by the metadata API instead of deployed. */
+    destructiveChangesType?: DestructiveChangesType;
+};
+export type TransportPipelineResult = {
+    fileResponses: FileResponse[];
+    asyncHandles: AsyncTransportHandle[];
+    operationResults: TransportOperationResult[];
+};
+export type TransportStageEvent = {
+    transportName: TransportName;
+    label: string;
+    operation: 'deploy' | 'retrieve';
+    stage: 'start' | 'complete' | 'error';
+    componentCount: number;
+    componentNames: string[];
+    errorMessage?: string;
+};
+export declare class TransportPipeline {
+    private readonly transports;
+    private readonly logger;
+    constructor(transports?: TransportProvider[]);
+    static withBuiltinTransports(): TransportPipeline;
+    groupByTransport(components: SourceComponent[]): GroupedComponents;
+    explain(components: SourceComponent[], operation?: 'deploy' | 'retrieve'): TransportPlan;
+    runBeforeMetadata(context: TransportContext, groups: TransportGroup[], operation?: 'deploy' | 'retrieve'): Promise<TransportPipelineResult>;
+    runAfterMetadata(context: TransportContext, groups: TransportGroup[], operation?: 'deploy' | 'retrieve'): Promise<TransportPipelineResult>;
+    hasTransports(components: SourceComponent[]): boolean;
+    private findTransportFor;
+    private runTransportGroups;
+}