@telorun/cli 0.61.0 → 0.63.0

package/dist/manifest-freshness.js

@@ -0,0 +1,261 @@
+import { isOciRef, parseOciRef } from "@telorun/analyzer";
+import { defaultTransportRegistry } from "@telorun/kernel/transports";
+import * as fs from "fs/promises";
+import * as path from "path";
+import { fileURLToPath, pathToFileURL } from "url";
+/** Sits beside `.validated.json` inside `<cacheRoot>/manifests/`. */
+const ORIGINS_FILE = ".origins.json";
+const ORIGINS_VERSION = 1;
+/**
+ * True when `ref` names an OCI artifact by a **tag** rather than by content —
+ * the only case a cached manifest can silently go stale.
+ *
+ * A `sha256:` *reference* addresses the OCI manifest directly and is immutable.
+ * A tag the publisher can repoint is not, unless something else verifies the
+ * bytes — which is what {@link isPinnedOciRef} covers separately, because the
+ * pin does not survive into a resolved graph.
+ */
+export function isOciTagRef(ref) {
+    if (!isOciRef(ref))
+        return false;
+    try {
+        return !parseOciRef(ref).reference.includes(":");
+    }
+    catch {
+        // An unparseable ref is not something this pass can revalidate; the loader
+        // will report it as a resolution failure in its own right.
+        return false;
+    }
+}
+/** True when `ref` carries Telo's inline `#sha256-…` pin, which the cache source
+ *  and the OCI transport both verify the manifest bytes against on every read.
+ *  A moved tag therefore cannot be served undetected, so no `HEAD` is needed.
+ *
+ *  This must be asked of the ref **as authored**: `OciTransport` strips the
+ *  fragment when it builds a module's canonical source, so a network-resolved
+ *  graph no longer remembers that the import was pinned. */
+export function isPinnedOciRef(ref) {
+    if (!isOciRef(ref))
+        return false;
+    try {
+        return Boolean(parseOciRef(ref).integrity);
+    }
+    catch {
+        return false;
+    }
+}
+/** Identity under which a mutable ref's origin digest is recorded:
+ *  `host/repo@tag`, independent of scheme spelling. */
+export function originKey(ref) {
+    const { host, repo, reference } = parseOciRef(ref);
+    return `${host}/${repo}@${reference}`;
+}
+/**
+ * Whether a cached manifest for `ref` may be served to `check` at all.
+ *
+ * The cache maps three key shapes, and only two of them address content that
+ * cannot change under the key:
+ *
+ *  - `oci` — the reference is either a `sha256:` digest or a tag. A tag is
+ *    mutable, which is what {@link revalidateMutableOciRefs} exists to catch,
+ *    so both are cacheable and freshness is settled separately.
+ *  - `registry` — `<path>@<version>`, always version-segmented. A published
+ *    version is immutable by convention, the same assumption npm makes, so
+ *    these are served without revalidation. This is a deliberate policy call,
+ *    not a gap: the registry origin has no cheap freshness probe (`digest()`
+ *    downloads the manifest to hash it), so revalidating would cost exactly
+ *    what re-fetching costs and buy nothing.
+ *  - `url` — an arbitrary HTTP(S) import. Its key carries **no version
+ *    segment**: one URL is one path forever, so a cached copy would be served
+ *    for the lifetime of the directory no matter what the server now returns.
+ *    `check` therefore never reads these from the cache and always re-fetches.
+ *    That costs one request — exactly what revalidating would cost, since
+ *    `RegistryTransport.digest` is a full GET — so the honest option is also
+ *    the cheap one. `telo run` keeps caching them; changing that is a separate
+ *    decision about `run`'s freshness model, not a property of this pass.
+ */
+export function isCacheableForCheck(ref, registryUrl) {
+    return defaultTransportRegistry(registryUrl).cacheCoords(ref)?.transport !== "url";
+}
+/**
+ * Wraps a manifest source and records which request URLs it actually served,
+ * and from which file on disk.
+ *
+ * The freshness pass needs both halves, and neither survives into the loaded
+ * graph: once the cache serves a manifest the graph's canonical source is a
+ * `file://` URL, so the `oci://` ref that asked for it is gone. Recording at
+ * the source is also what makes a *relative* import inside an OCI module work
+ * here — the loader resolves it to an absolute `oci://` ref before `read()`,
+ * so this map holds the absolute ref even though no manifest ever spelled it.
+ */
+export class RecordingCacheSource {
+    inner;
+    registryUrl;
+    /** Request URL → absolute path of the cache file that answered it. */
+    served = new Map();
+    constructor(inner, registryUrl) {
+        this.inner = inner;
+        this.registryUrl = registryUrl;
+    }
+    supports(url) {
+        return isCacheableForCheck(url, this.registryUrl) && this.inner.supports(url);
+    }
+    async read(url) {
+        const result = await this.inner.read(url);
+        // The cache always answers with a `file://` URL; anything else means the
+        // wrapped source is not disk-backed, and there is no cache file to record.
+        if (result.source.startsWith("file://")) {
+            this.served.set(url, fileURLToPath(result.source));
+        }
+        return result;
+    }
+    resolveRelative(base, relative) {
+        return this.inner.resolveRelative(base, relative);
+    }
+}
+/**
+ * Read the recorded origin digests for one cache root.
+ *
+ * A missing, unreadable, or version-mismatched record yields an empty map,
+ * which makes every cached mutable ref count as *unverified* and therefore
+ * stale. That is the conservative direction — the failure mode is one extra
+ * fetch, never serving a manifest whose tag has moved. It is a cache miss in
+ * the same sense `LocalManifestCacheSource` treats a failed `stat`, not a
+ * suppressed error.
+ */
+export async function readOriginDigests(manifestsDir) {
+    let raw;
+    try {
+        raw = await fs.readFile(path.join(manifestsDir, ORIGINS_FILE), "utf-8");
+    }
+    catch {
+        return new Map();
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return new Map();
+    }
+    if (parsed?.version !== ORIGINS_VERSION || typeof parsed.digests !== "object") {
+        return new Map();
+    }
+    return new Map(Object.entries(parsed.digests));
+}
+/** Persist origin digests, merging over whatever the record already held so a
+ *  check of one entry never drops another's. */
+export async function writeOriginDigests(manifestsDir, digests) {
+    if (digests.size === 0)
+        return;
+    const merged = new Map([...(await readOriginDigests(manifestsDir)), ...digests]);
+    const record = {
+        version: ORIGINS_VERSION,
+        digests: Object.fromEntries([...merged].sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))),
+    };
+    await fs.mkdir(manifestsDir, { recursive: true });
+    await fs.writeFile(path.join(manifestsDir, ORIGINS_FILE), `${JSON.stringify(record, null, 2)}\n`, "utf-8");
+}
+/**
+ * Revalidate every **mutable** OCI ref this graph resolved, with one `HEAD` per
+ * repository reference.
+ *
+ * `check` is the correctness command, so it must not report a clean bill of
+ * health against a manifest whose tag has since moved. But re-pulling every
+ * import to find that out is what made it slow, and a pinned ref — which is
+ * what `telo install` writes and what every published manifest carries — needs
+ * no network at all: its bytes are verified against the inline hash. So the
+ * cost falls only on unpinned tags, and only one round trip each, against the
+ * four a full re-pull would take.
+ *
+ * A ref fetched over the network during this load is fresh by construction and
+ * is only recorded, never revalidated.
+ */
+export async function revalidateMutableOciRefs(graph, served, 
+/** Recorded origin digests per cache root (keyed by its `manifests` dir). A
+ *  cached manifest is judged against the record of the root it was served
+ *  from, which is not necessarily the root this entry writes to: one loader
+ *  serves every input path, so a hit may land in a sibling's cache. */
+originsByRoot, registryUrl, 
+/** Digests already probed earlier in this invocation, keyed as {@link originKey}.
+ *  A tag verified once in a process is verified for the whole run, so checking
+ *  twenty manifests that share an import issues one `HEAD`, not twenty.
+ *  Mutated in place so later paths see what earlier ones learned. */
+verified = new Map()) {
+    const recordFor = (cacheFile) => {
+        let best;
+        for (const root of originsByRoot.keys()) {
+            if (!cacheFile.startsWith(root + path.sep))
+                continue;
+            if (!best || root.length > best.length)
+                best = root;
+        }
+        return (best && originsByRoot.get(best)) || new Map();
+    };
+    // A module's canonical source loses the `#sha256-` pin, so pinning has to be
+    // read off the refs as authored. Collect every authored ref that reached each
+    // canonical source; one pinned edge is enough, since edges sharing a canonical
+    // source resolved the same tag and its bytes were verified against that pin.
+    const pinnedSources = new Set();
+    for (const [, edges] of graph.importEdges) {
+        for (const [, edge] of edges) {
+            if (isPinnedOciRef(edge.targetRef))
+                pinnedSources.add(edge.targetSource);
+        }
+    }
+    // Cache hits record the request URL, which keeps its pin — and is the only
+    // place a relative import's absolute `oci://` ref survives.
+    const cacheFileToRequest = new Map();
+    for (const [url, cacheFile] of served) {
+        cacheFileToRequest.set(pathToFileURL(cacheFile).href, url);
+    }
+    const targets = new Map();
+    // Restricted to modules this graph actually reached — a shared loader carries
+    // entries from previously-checked paths too.
+    for (const source of graph.modules.keys()) {
+        const request = cacheFileToRequest.get(source);
+        const ref = request ?? source;
+        if (!isOciTagRef(ref))
+            continue;
+        if (isPinnedOciRef(ref) || pinnedSources.has(source))
+            continue;
+        const key = originKey(ref);
+        // The same tag reached twice can only differ in whether a copy sat on disk;
+        // the cache-served one is what a staleness verdict has to act on.
+        if (targets.get(key)?.cacheFile)
+            continue;
+        targets.set(key, {
+            ref,
+            ...(request ? { cacheFile: fileURLToPath(source) } : {}),
+        });
+    }
+    if (targets.size === 0)
+        return { staleFiles: [], digests: new Map() };
+    const transports = defaultTransportRegistry(registryUrl);
+    const resolved = await Promise.all([...targets.entries()].map(async ([key, target]) => {
+        const already = verified.get(key);
+        if (already !== undefined)
+            return [key, already];
+        const digest = await transports.digest(target.ref);
+        if (digest)
+            verified.set(key, digest);
+        return [key, digest];
+    }));
+    const staleFiles = [];
+    const digests = new Map();
+    for (const [key, digest] of resolved) {
+        if (digest)
+            digests.set(key, digest);
+        const target = targets.get(key);
+        if (!target?.cacheFile)
+            continue;
+        // A tag that no longer resolves (`null`) is stale too — dropping the cached
+        // copy lets the reload surface the real resolution failure instead of
+        // quietly analyzing a version the registry no longer publishes.
+        if (digest && recordFor(target.cacheFile).get(key) === digest)
+            continue;
+        staleFiles.push(target.cacheFile);
+    }
+    return { staleFiles, digests };
+}
+//# sourceMappingURL=manifest-freshness.js.map

package/dist/manifest-freshness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-freshness.js","sourceRoot":"","sources":["../src/manifest-freshness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAyC,MAAM,mBAAmB,CAAC;AAEjG,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,KAAK,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAEnD,qEAAqE;AACrE,MAAM,YAAY,GAAG,eAAe,CAAC;AACrC,MAAM,eAAe,GAAG,CAAC,CAAC;AAQ1B;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;QAC3E,2DAA2D;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;4DAM4D;AAC5D,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;uDACuD;AACvD,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACnD,OAAO,GAAG,IAAI,IAAI,IAAI,IAAI,SAAS,EAAE,CAAC;AACxC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW,EAAE,WAAmB;IAClE,OAAO,wBAAwB,CAAC,WAAW,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,SAAS,KAAK,KAAK,CAAC;AACrF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,oBAAoB;IAKZ;IACA;IALnB,sEAAsE;IAC7D,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE5C,YACmB,KAA+B,EAC/B,WAAmB;QADnB,UAAK,GAAL,KAAK,CAA0B;QAC/B,gBAAW,GAAX,WAAW,CAAQ;IACnC,CAAC;IAEJ,QAAQ,CAAC,GAAW;QAClB,OAAO,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAW;QACpB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1C,yEAAyE;QACzE,2EAA2E;QAC3E,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,eAAe,CAAC,IAAY,EAAE,QAAgB;QAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACpD,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,YAAoB;IAC1D,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;IACD,IAAI,MAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;IACD,IAAI,MAAM,EAAE,OAAO,KAAK,eAAe,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC9E,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;gDACgD;AAChD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,YAAoB,EACpB,OAA4B;IAE5B,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO;IAC/B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,iBAAiB,CAAC,YAAY,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;IACjF,MAAM,MAAM,GAAkB;QAC5B,OAAO,EAAE,eAAe;QACxB,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAC1F,CAAC;IACF,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,EACrC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACtC,OAAO,CACR,CAAC;AACJ,CAAC;AAUD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAAkB,EAClB,MAA2B;AAC3B;;;uEAGuE;AACvE,aAA+C,EAC/C,WAAmB;AACnB;;;qEAGqE;AACrE,WAAgC,IAAI,GAAG,EAAE;IAEzC,MAAM,SAAS,GAAG,CAAC,SAAiB,EAAuB,EAAE;QAC3D,IAAI,IAAwB,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;gBAAE,SAAS;YACrD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM;gBAAE,IAAI,GAAG,IAAI,CAAC;QACtD,CAAC;QACD,OAAO,CAAC,IAAI,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;IACxD,CAAC,CAAC;IAEF,6EAA6E;IAC7E,8EAA8E;IAC9E,+EAA+E;IAC/E,6EAA6E;IAC7E,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;YAC7B,IAAI,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC;gBAAE,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,4DAA4D;IAC5D,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACrD,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,MAAM,EAAE,CAAC;QACtC,kBAAkB,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+C,CAAC;IACvE,8EAA8E;IAC9E,6CAA6C;IAC7C,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,OAAO,IAAI,MAAM,CAAC;QAC9B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;YAAE,SAAS;QAChC,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QAC/D,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC3B,4EAA4E;QAC5E,kEAAkE;QAClE,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,SAAS;YAAE,SAAS;QAC1C,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;YACf,GAAG;YACH,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;IAEtE,MAAM,UAAU,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE;QACjD,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAU,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,MAAM;YAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAU,CAAC;IAChC,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACrC,IAAI,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,EAAE,SAAS;YAAE,SAAS;QACjC,4EAA4E;QAC5E,sEAAsE;QACtE,gEAAgE;QAChE,IAAI,MAAM,IAAI,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,MAAM;YAAE,SAAS;QACxE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@telorun/cli",
-  "version": "0.61.0",
+  "version": "0.63.0",
   "description": "Telo CLI - Command-line interface for the Telo runtime.",
   "keywords": [
     "telo",
@@ -34,12 +34,12 @@
     "dist"
   ],
   "dependencies": {
-    "@telorun/analyzer": "0.49.0",
+    "@telorun/analyzer": "0.50.0",
     "@telorun/glob": "0.2.0",
-    "@telorun/ide-support": "0.7.9",
-    "@telorun/kernel": "0.61.0",
-    "@telorun/sdk": "0.61.0",
-    "@telorun/templating": "0.11.0",
+    "@telorun/ide-support": "0.8.0",
+    "@telorun/kernel": "0.63.0",
+    "@telorun/sdk": "0.63.0",
+    "@telorun/templating": "0.11.1",
     "dotenv": "^17.4.0",
     "packageurl-js": "^2.0.1",
     "semver": "^7.7.3",