@simplysf/simply-cicd-core 0.2.2 → 0.4.0

package/lib/sfPackages.js

@@ -0,0 +1,185 @@
+/*
+ * Copyright (c) 2026, SimplySF.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { Org, SfProject } from '@salesforce/core';
+import { Duration } from '@salesforce/kit';
+import { installPackageDependencies as installPackageDependenciesCore, } from '@simplysf/simply-package-core';
+import { PackageVersion, SubscriberPackageVersion } from '@salesforce/packaging';
+import { logger } from './logger.js';
+/**
+ * Adapts the library's progress callbacks onto this package's logger. Step boundaries become info
+ * lines; in-flight status (which fires on every poll) is logged only when its text changes.
+ */
+function loggerProgress() {
+    let lastStatus;
+    return {
+        info: (message) => logger.info(message),
+        warn: (message) => logger.warn(message),
+        stepStart: (message) => {
+            lastStatus = undefined;
+            logger.info(message);
+        },
+        stepStatus: (message) => {
+            if (message !== lastStatus) {
+                lastStatus = message;
+                logger.info(message);
+            }
+        },
+        stepStop: (message) => {
+            if (message) {
+                logger.warn(message);
+            }
+        },
+    };
+}
+/**
+ * Installs the Salesforce package dependencies defined in `sfdx-project.json` into the target org,
+ * in-process via `@simplysf/simply-package-core`. The org must already be authenticated; every
+ * confirmation is auto-approved, as befits a pipeline.
+ *
+ * @returns The install outcome for every resolved dependency, including the ones skipped.
+ */
+export async function installPackageDependencies(config = {}) {
+    const { alias, wait = '120', installType = 'Upgrade', upgradeType = 'Mixed' } = config;
+    logger.info('Installing packaged dependencies...');
+    try {
+        const org = await Org.create({ aliasOrUsername: alias });
+        const project = await SfProject.resolve();
+        const results = await installPackageDependenciesCore({
+            project,
+            targetOrgConnection: org.getConnection(),
+            apexCompile: 'package',
+            installType,
+            upgradeType,
+            wait: Duration.minutes(parseInt(wait, 10)),
+            progress: loggerProgress(),
+        });
+        logger.success('Packaged dependencies installed successfully.');
+        return results;
+    }
+    catch (error) {
+        logger.error('Failed to install packaged dependencies.');
+        logger.error(String(error));
+        throw error;
+    }
+}
+/** @returns The install results that upgraded an already-installed package. */
+function upgradedEntries(installResults) {
+    return installResults.filter((entry) => entry.Status === 'Installed' &&
+        Boolean(entry.ExistingSubscriberPackageVersionId) &&
+        entry.ExistingSubscriberPackageVersionId !== entry.SubscriberPackageVersionId);
+}
+/**
+ * The Dev Hub's report for one package version: what `sf package version report --json` returns,
+ * including the computed `Version` (`major.minor.patch.build`), `Tag`, `Description` and
+ * `CodeCoverage`.
+ *
+ * Unlike the CLI, `CodeCoverage` is `null` (not `'N/A'`) for a version that skipped validation or
+ * belongs to an org-dependent package.
+ *
+ * @param packageVersionId - A `04t` subscriber package version ID (or `05i` package version ID).
+ * @param devHubAliasOrUsername - The Dev Hub that owns the package. Must already be authenticated.
+ * @throws {SfError} If the Dev Hub can't be resolved or the version doesn't exist.
+ */
+export async function getPackageVersionReport(packageVersionId, devHubAliasOrUsername) {
+    const devHub = await Org.create({ aliasOrUsername: devHubAliasOrUsername });
+    const packageVersion = new PackageVersion({
+        connection: devHub.getConnection(),
+        project: undefined,
+        idOrAlias: packageVersionId,
+    });
+    return packageVersion.report();
+}
+/**
+ * The packages installed in an org, shaped like `sf package installed list --json`'s result rows.
+ *
+ * @param aliasOrUsername - The org to inspect. Must already be authenticated.
+ */
+export async function listInstalledPackages(aliasOrUsername) {
+    const org = await Org.create({ aliasOrUsername });
+    const installed = await SubscriberPackageVersion.installedList(org.getConnection());
+    return installed.map((row) => ({
+        Id: row.Id,
+        SubscriberPackageId: row.SubscriberPackageId,
+        ...(row.SubscriberPackage
+            ? {
+                SubscriberPackageName: row.SubscriberPackage.Name,
+                SubscriberPackageNamespace: row.SubscriberPackage.NamespacePrefix,
+            }
+            : {}),
+        ...(row.SubscriberPackageVersion
+            ? {
+                SubscriberPackageVersionId: row.SubscriberPackageVersion.Id,
+                SubscriberPackageVersionName: row.SubscriberPackageVersion.Name,
+                SubscriberPackageVersionNumber: [
+                    row.SubscriberPackageVersion.MajorVersion,
+                    row.SubscriberPackageVersion.MinorVersion,
+                    row.SubscriberPackageVersion.PatchVersion,
+                    row.SubscriberPackageVersion.BuildNumber,
+                ].join('.'),
+            }
+            : {}),
+    }));
+}
+/** {@link getPackageVersionReport}, but warns and returns `undefined` on failure. */
+async function reportPackageVersion(subscriberPackageVersionId, packagingDevhub) {
+    try {
+        return await getPackageVersionReport(subscriberPackageVersionId, packagingDevhub);
+    }
+    catch (error) {
+        logger.warn(`Could not get package version report for ${subscriberPackageVersionId}: ${error.message}`);
+        return undefined;
+    }
+}
+/**
+ * For every package an {@link installPackageDependencies} run upgraded, fetches the previous and
+ * target version's `sf package version report` (for the origin commit SHA and pipeline URL). A
+ * package whose version report can't be resolved is skipped with a warning rather than failing the
+ * whole deployment — this data only feeds a later notification.
+ */
+export async function resolveUpgradedPackages(installResults, config) {
+    const upgraded = upgradedEntries(installResults);
+    if (upgraded.length === 0) {
+        return [];
+    }
+    const { packagingDevhub } = config;
+    if (!packagingDevhub) {
+        logger.warn('No --packaging-devhub given. Skipping origin lookup for upgraded packages.');
+        return [];
+    }
+    const upgradedPackages = [];
+    for (const entry of upgraded) {
+        // eslint-disable-next-line no-await-in-loop -- each package's prev/target reports are fetched concurrently, but packages themselves are processed one at a time
+        const [prevReport, targetReport] = await Promise.all([
+            reportPackageVersion(entry.ExistingSubscriberPackageVersionId, packagingDevhub),
+            reportPackageVersion(entry.SubscriberPackageVersionId, packagingDevhub),
+        ]);
+        if (!prevReport || !targetReport) {
+            continue;
+        }
+        upgradedPackages.push({
+            packageName: entry.PackageName,
+            prevVersionId: entry.ExistingSubscriberPackageVersionId,
+            prevVersionNumber: prevReport.Version,
+            prevTag: prevReport.Tag,
+            targetVersionId: entry.SubscriberPackageVersionId,
+            targetVersionNumber: targetReport.Version,
+            targetTag: targetReport.Tag,
+            targetDescription: targetReport.Description,
+        });
+    }
+    return upgradedPackages;
+}
+//# sourceMappingURL=sfPackages.js.map

package/lib/sfPackages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sfPackages.js","sourceRoot":"","sources":["../src/sfPackages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EACL,0BAA0B,IAAI,8BAA8B,GAK7D,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAmC,MAAM,uBAAuB,CAAC;AAClH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAiBrC;;;GAGG;AACH,SAAS,cAAc;IACrB,IAAI,UAA8B,CAAC;IAEnC,OAAO;QACL,IAAI,EAAE,CAAC,OAAO,EAAQ,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;QAC7C,IAAI,EAAE,CAAC,OAAO,EAAQ,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;QAC7C,SAAS,EAAE,CAAC,OAAO,EAAQ,EAAE;YAC3B,UAAU,GAAG,SAAS,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;QACD,UAAU,EAAE,CAAC,OAAO,EAAQ,EAAE;YAC5B,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;gBAC3B,UAAU,GAAG,OAAO,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QACD,QAAQ,EAAE,CAAC,OAAO,EAAQ,EAAE;YAC1B,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,SAA2C,EAAE;IAE7C,MAAM,EAAE,KAAK,EAAE,IAAI,GAAG,KAAK,EAAE,WAAW,GAAG,SAAS,EAAE,WAAW,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC;IAEvF,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;QAE1C,MAAM,OAAO,GAAG,MAAM,8BAA8B,CAAC;YACnD,OAAO;YACP,mBAAmB,EAAE,GAAG,CAAC,aAAa,EAAE;YACxC,WAAW,EAAE,SAAS;YACtB,WAAW;YACX,WAAW;YACX,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC1C,QAAQ,EAAE,cAAc,EAAE;SAC3B,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC;QAChE,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5B,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAOD,+EAA+E;AAC/E,SAAS,eAAe,CAAC,cAAkC;IACzD,OAAO,cAAc,CAAC,MAAM,CAC1B,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,MAAM,KAAK,WAAW;QAC5B,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC;QACjD,KAAK,CAAC,kCAAkC,KAAK,KAAK,CAAC,0BAA0B,CAChF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,gBAAwB,EACxB,qBAA6B;IAE7B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,eAAe,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC5E,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC;QACxC,UAAU,EAAE,MAAM,CAAC,aAAa,EAAE;QAClC,OAAO,EAAE,SAAS;QAClB,SAAS,EAAE,gBAAgB;KAC5B,CAAC,CAAC;IACH,OAAO,cAAc,CAAC,MAAM,EAAE,CAAC;AACjC,CAAC;AAcD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,eAAuB;IACjE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC;IACpF,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7B,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;QAC5C,GAAG,CAAC,GAAG,CAAC,iBAAiB;YACvB,CAAC,CAAC;gBACE,qBAAqB,EAAE,GAAG,CAAC,iBAAiB,CAAC,IAAI;gBACjD,0BAA0B,EAAE,GAAG,CAAC,iBAAiB,CAAC,eAAe;aAClE;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,GAAG,CAAC,wBAAwB;YAC9B,CAAC,CAAC;gBACE,0BAA0B,EAAE,GAAG,CAAC,wBAAwB,CAAC,EAAE;gBAC3D,4BAA4B,EAAE,GAAG,CAAC,wBAAwB,CAAC,IAAI;gBAC/D,8BAA8B,EAAE;oBAC9B,GAAG,CAAC,wBAAwB,CAAC,YAAY;oBACzC,GAAG,CAAC,wBAAwB,CAAC,YAAY;oBACzC,GAAG,CAAC,wBAAwB,CAAC,YAAY;oBACzC,GAAG,CAAC,wBAAwB,CAAC,WAAW;iBACzC,CAAC,IAAI,CAAC,GAAG,CAAC;aACZ;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC,CAAC;AACN,CAAC;AAED,qFAAqF;AACrF,KAAK,UAAU,oBAAoB,CACjC,0BAAkC,EAClC,eAAuB;IAEvB,IAAI,CAAC;QACH,OAAO,MAAM,uBAAuB,CAAC,0BAA0B,EAAE,eAAe,CAAC,CAAC;IACpF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,4CAA4C,0BAA0B,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QACnH,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,cAAkC,EAClC,MAAqC;IAErC,MAAM,QAAQ,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;IACjD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,CAAC;IACnC,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;QAC1F,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,gBAAgB,GAAsB,EAAE,CAAC;IAE/C,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,gKAAgK;QAChK,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACnD,oBAAoB,CAAC,KAAK,CAAC,kCAAkC,EAAE,eAAe,CAAC;YAC/E,oBAAoB,CAAC,KAAK,CAAC,0BAA0B,EAAE,eAAe,CAAC;SACxE,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,IAAI,CAAC,YAAY,EAAE,CAAC;YACjC,SAAS;QACX,CAAC;QAED,gBAAgB,CAAC,IAAI,CAAC;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,aAAa,EAAE,KAAK,CAAC,kCAAkC;YACvD,iBAAiB,EAAE,UAAU,CAAC,OAAO;YACrC,OAAO,EAAE,UAAU,CAAC,GAAG;YACvB,eAAe,EAAE,KAAK,CAAC,0BAA0B;YACjD,mBAAmB,EAAE,YAAY,CAAC,OAAO;YACzC,SAAS,EAAE,YAAY,CAAC,GAAG;YAC3B,iBAAiB,EAAE,YAAY,CAAC,WAAW;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,OAAO,gBAAgB,CAAC;AAC1B,CAAC"}

package/lib/sfPlugins.d.ts

@@ -0,0 +1,11 @@
+/** Installs a Salesforce CLI plugin. */
+export declare function installPlugin(plugin: string, debug?: boolean, cwd?: string): Promise<void>;
+/** Installs all plugins listed in the `deploymentPlugins` array of the `.sfdevrc` file, plus this package's defaults. */
+export declare function installDeploymentPlugins(debug?: boolean, cwd?: string): Promise<void>;
+/**
+ * Automatically configures the trusted unsigned plugin allowlist for both the modern `sf` and
+ * legacy `sfdx` CLI configurations, to prevent interactive installation prompts.
+ */
+export declare function configureTrustedPublishers(debug?: boolean): void;
+/** Installs the `@syntax-syllogism/flow-delta` plugin globally via npm. */
+export declare function installFlowDeltaPlugin(debug?: boolean): Promise<void>;

package/lib/sfPlugins.js

@@ -0,0 +1,134 @@
+/*
+ * Copyright (c) 2026, SimplySF.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { execa } from 'execa';
+import { DEFAULT_DEPLOYMENT_PLUGINS } from './config/defaultDeploymentPlugins.js';
+import { TRUSTED_PLUGINS } from './config/trustedPlugins.js';
+import { runSf } from './exec/sfCli.js';
+import { logger } from './logger.js';
+/** Installs a Salesforce CLI plugin. */
+export async function installPlugin(plugin, debug = false, cwd = process.cwd()) {
+    logger.info(`Installing ${plugin} plugin...`);
+    try {
+        configureTrustedPublishers(debug);
+        await runSf(['plugins', 'install', plugin], { stdio: 'pipe', cwd });
+        logger.success(`Successfully installed ${plugin} plugin.`);
+    }
+    catch (error) {
+        logger.error(`Failed to install ${plugin} plugin.`);
+        logger.error(String(error));
+        throw error;
+    }
+}
+/** Installs all plugins listed in the `deploymentPlugins` array of the `.sfdevrc` file, plus this package's defaults. */
+export async function installDeploymentPlugins(debug = false, cwd = process.cwd()) {
+    const sfdevrcPath = path.join(cwd, '.sfdevrc');
+    let projectPlugins = [];
+    if (fs.existsSync(sfdevrcPath)) {
+        const sfdevrc = JSON.parse(fs.readFileSync(sfdevrcPath, 'utf8'));
+        if (Array.isArray(sfdevrc.deploymentPlugins)) {
+            projectPlugins = sfdevrc.deploymentPlugins;
+        }
+        else if (debug) {
+            logger.debug('No deploymentPlugins array found in .sfdevrc. Skipping project-specific plugins.');
+        }
+    }
+    else if (debug) {
+        logger.debug('No .sfdevrc file found. Skipping project-specific plugins.');
+    }
+    const allPlugins = [...new Set([...DEFAULT_DEPLOYMENT_PLUGINS, ...projectPlugins])];
+    if (allPlugins.length === 0) {
+        if (debug) {
+            logger.debug('No deployment plugins to install.');
+        }
+        return;
+    }
+    const { stdout } = await runSf(['plugins'], { cwd });
+    const installedPlugins = stdout.split('\n').map((line) => line.split(' ')[0]);
+    for (const plugin of allPlugins) {
+        if (!installedPlugins.includes(plugin)) {
+            // eslint-disable-next-line no-await-in-loop
+            await installPlugin(plugin, debug, cwd);
+        }
+        else if (debug) {
+            logger.debug(`${plugin} is already installed. Skipping.`);
+        }
+    }
+}
+/**
+ * Automatically configures the trusted unsigned plugin allowlist for both the modern `sf` and
+ * legacy `sfdx` CLI configurations, to prevent interactive installation prompts.
+ */
+export function configureTrustedPublishers(debug = false) {
+    const homeDir = os.homedir();
+    if (!homeDir) {
+        logger.warn('Could not determine user home directory. Skipping trusted publisher configuration.');
+        return;
+    }
+    const configDirs = [path.join(homeDir, '.config', 'sf'), path.join(homeDir, '.config', 'sfdx')];
+    for (const configDir of configDirs) {
+        const allowListPath = path.join(configDir, 'unsignedPluginAllowList.json');
+        try {
+            if (!fs.existsSync(configDir)) {
+                fs.mkdirSync(configDir, { recursive: true });
+            }
+            let currentAllowList = [];
+            if (fs.existsSync(allowListPath)) {
+                try {
+                    const content = fs.readFileSync(allowListPath, 'utf8');
+                    const parsed = JSON.parse(content);
+                    currentAllowList = Array.isArray(parsed) ? parsed : [];
+                }
+                catch {
+                    logger.warn(`Failed to parse existing allowlist at ${allowListPath}. Overwriting.`);
+                }
+            }
+            let modified = false;
+            for (const plugin of TRUSTED_PLUGINS) {
+                if (!currentAllowList.includes(plugin)) {
+                    currentAllowList.push(plugin);
+                    modified = true;
+                }
+            }
+            if (modified) {
+                fs.writeFileSync(allowListPath, JSON.stringify(currentAllowList, null, 2), 'utf8');
+                if (debug) {
+                    logger.debug(`Configured trusted plugins in ${allowListPath}`);
+                }
+            }
+        }
+        catch (error) {
+            logger.warn(`Failed to configure trusted publisher allowlist at ${configDir}: ${error.message}`);
+        }
+    }
+}
+/** Installs the `@syntax-syllogism/flow-delta` plugin globally via npm. */
+export async function installFlowDeltaPlugin(debug = false) {
+    logger.info('Installing @syntax-syllogism/flow-delta via npm...');
+    try {
+        configureTrustedPublishers(debug);
+        await execa('npm', ['install', '@syntax-syllogism/flow-delta', '--global'], { stdio: 'pipe' });
+        logger.success('Successfully installed @syntax-syllogism/flow-delta plugin.');
+    }
+    catch (error) {
+        logger.error('Failed to install @syntax-syllogism/flow-delta plugin.');
+        logger.error(String(error));
+        throw error;
+    }
+}
+//# sourceMappingURL=sfPlugins.js.map

package/lib/sfPlugins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sfPlugins.js","sourceRoot":"","sources":["../src/sfPlugins.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC9B,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,wCAAwC;AACxC,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAc,EAAE,KAAK,GAAG,KAAK,EAAE,MAAc,OAAO,CAAC,GAAG,EAAE;IAC5F,MAAM,CAAC,IAAI,CAAC,cAAc,MAAM,YAAY,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,0BAA0B,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,KAAK,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACpE,MAAM,CAAC,OAAO,CAAC,0BAA0B,MAAM,UAAU,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,qBAAqB,MAAM,UAAU,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5B,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAMD,yHAAyH;AACzH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAAK,GAAG,KAAK,EAAE,MAAc,OAAO,CAAC,GAAG,EAAE;IACvF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC/C,IAAI,cAAc,GAAa,EAAE,CAAC;IAElC,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAY,CAAC;QAC5E,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC7C,cAAc,GAAG,OAAO,CAAC,iBAA6B,CAAC;QACzD,CAAC;aAAM,IAAI,KAAK,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,CAAC,kFAAkF,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;SAAM,IAAI,KAAK,EAAE,CAAC;QACjB,MAAM,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,0BAA0B,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IAE5F,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACpD,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACrD,MAAM,gBAAgB,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE9E,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;QAChC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,4CAA4C;YAC5C,MAAM,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1C,CAAC;aAAM,IAAI,KAAK,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,kCAAkC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAK,GAAG,KAAK;IACtD,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,oFAAoF,CAAC,CAAC;QAClG,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAEhG,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,8BAA8B,CAAC,CAAC;QAC3E,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC9B,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/C,CAAC;YAED,IAAI,gBAAgB,GAAa,EAAE,CAAC;YACpC,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;oBACvD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBAC5C,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,MAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,CAAC,IAAI,CAAC,yCAAyC,aAAa,gBAAgB,CAAC,CAAC;gBACtF,CAAC;YACH,CAAC;YAED,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;gBACrC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBACvC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAC9B,QAAQ,GAAG,IAAI,CAAC;gBAClB,CAAC;YACH,CAAC;YAED,IAAI,QAAQ,EAAE,CAAC;gBACb,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;gBACnF,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,KAAK,CAAC,iCAAiC,aAAa,EAAE,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,sDAAsD,SAAS,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9G,CAAC;IACH,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAK,GAAG,KAAK;IACxD,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,0BAA0B,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,8BAA8B,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/F,MAAM,CAAC,OAAO,CAAC,6DAA6D,CAAC,CAAC;IAChF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5B,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/lib/sfdxDependabot/dependabotRun.d.ts

@@ -0,0 +1,95 @@
+import type { VcsProject, VcsProvider } from '../vcs/index.js';
+import type { UpdateSfdxProjectResult } from './updater.js';
+export type ResolvePackageDetailsResult = {
+    packageName: string;
+    packageVersion: string;
+};
+/** Queries the DevHub for a released subscriber package version's name and semantic version. */
+export declare function resolvePackageDetails(devhubUsername: string, subscriberPackageVersionId: string): Promise<ResolvePackageDetailsResult>;
+export type FilterProjectOptions = {
+    upstreamProjectPath?: string;
+    upstreamProjectId?: string;
+    skipArchived?: boolean;
+    skipForks?: boolean;
+    allowlist?: string;
+    denylist?: string;
+};
+export type FilterProjectResult = {
+    keep: boolean;
+    reason?: string;
+};
+/** Decides whether a discovered project should be scanned, per the upstream/archived/fork/allow-deny rules. */
+export declare function filterProject(project: VcsProject, options?: FilterProjectOptions): FilterProjectResult;
+/** Splits the comma-separated label option into the label list the VCS provider expects. */
+export declare function splitLabels(labels: string | undefined): string[] | undefined;
+export type GenerateMrDescriptionInput = {
+    packageName: string;
+    oldVersions: string[];
+    packageVersion: string;
+    subscriberPackageVersionId: string;
+    /** The platform's word for a proposed change, from `VcsProvider.terminology`. */
+    changeRequest?: string;
+};
+/** Renders the markdown description body for a dependency-bump change request. */
+export declare function generateMrDescription({ packageName, oldVersions, packageVersion, subscriberPackageVersionId, changeRequest, }: GenerateMrDescriptionInput): string;
+export type SfdxDependabotSummary = {
+    packageName: string;
+    packageVersion: string;
+    subscriberPackageVersionId: string;
+    projectsDiscovered: number;
+    projectsEligible: number;
+    projectsUpdated: number;
+    mergeRequestsCreated: number;
+    mergeRequestsAlreadyOpen: number;
+    alreadyCurrent: number;
+    noDependencyFound: number;
+    missingSfdxProjectFile: number;
+    skipped: number;
+    failed: number;
+    dryRun: boolean;
+};
+export type ResolvedOptions = {
+    vcsHost?: string;
+    vcsApiUrl?: string;
+    vcsToken: string;
+    rootGroupId: string;
+    subscriberPackageVersionId: string;
+    devhubUsername: string;
+    dryRun: boolean;
+    projectAllowlist: string;
+    projectDenylist: string;
+    skipArchived: boolean;
+    skipForks: boolean;
+    branchPrefix: string;
+    changeRequestLabels: string;
+    failOnError: boolean;
+    maxProjects?: number;
+};
+export type SfdxDependabotCounters = {
+    projectsUpdated: number;
+    mergeRequestsCreated: number;
+    mergeRequestsAlreadyOpen: number;
+    alreadyCurrent: number;
+    noDependencyFound: number;
+    missingSfdxProjectFile: number;
+    skipped: number;
+    failed: number;
+};
+/** Applies the `--max-projects` safety cap, returning the trimmed list and how many extra projects that skipped. */
+export declare function applyMaxProjectsLimit(filteredProjects: VcsProject[], maxProjects: number | undefined): {
+    projectsToProcess: VcsProject[];
+    additionalSkipped: number;
+};
+/** Discovers all projects under the root group and applies the upstream/archived/fork/allow-deny filters. */
+export declare function discoverEligibleProjects(vcsProvider: VcsProvider, rootGroupId: string, options: ResolvedOptions): Promise<{
+    allProjects: VcsProject[];
+    filteredProjects: VcsProject[];
+    skippedCount: number;
+}>;
+/**
+ * Processes a single eligible project: reads its `sfdx-project.json`, checks its opt-in status,
+ * and (unless already current, not opted in, or a dry run) opens or updates a merge request.
+ */
+export declare function processProject(project: VcsProject, vcsProvider: VcsProvider, options: ResolvedOptions, packageName: string, packageVersion: string, counters: SfdxDependabotCounters): Promise<void>;
+/** Creates/reuses the update branch, commits the dependency bump if needed, and opens/updates the merge request. */
+export declare function applyProjectUpdate(project: VcsProject, vcsProvider: VcsProvider, options: ResolvedOptions, packageName: string, packageVersion: string, branchName: string, updateResult: UpdateSfdxProjectResult, counters: SfdxDependabotCounters): Promise<void>;