@tenderprompt/accounts 0.2.0

package/README.md

@@ -0,0 +1,84 @@
+# `@tenderprompt/accounts`
+
+Project-scoped developer CLI for merchant-owned Tender Accounts applications.
+
+The package exposes `tender-accounts`. It delegates framework work to commands committed by the merchant repository, verifies the resulting portable artifact, and submits exact preview deliveries without exposing Cloudflare authority. Developer credentials are intentionally unable to publish production.
+
+## Installation
+
+The package is not published to the public npm registry during the prototype stage. Install a reviewed package tarball as a development dependency:
+
+```sh
+npm install --save-dev ./tenderprompt-accounts-0.2.0.tgz
+```
+
+After registry publication, the equivalent command will be:
+
+```sh
+npm install --save-dev @tenderprompt/accounts
+```
+
+## Create a new application
+
+The optional starter creates a merchant-owned two-service repository: a stable Shopify authentication gateway plus an independently deployable React portal connected through `PORTAL_UI`. It does not install dependencies, initialize Git, link projects, contact Tender, or write credentials.
+
+Inspect the plan first, then create it in an empty directory:
+
+```sh
+npx tender-accounts init --name "Acme customer account" --directory ./acme-account --dry-run --json
+npx tender-accounts init --name "Acme customer account" --directory ./acme-account --json
+```
+
+The starter includes:
+
+- Shopify Customer Account public-client authentication with S256 PKCE;
+- HttpOnly, exact-host shopper sessions stored in application D1;
+- a service-bound React portal with no customer tokens or confidential bindings;
+- local Wrangler configuration and an explicit signed-out HTTP development state;
+- independent `tender-accounts.json` contracts for gateway and portal;
+- immutable artifact packers, tests, `AGENTS.md`, and the bundled agent skill.
+
+Existing applications do not need the starter. Add the repository contract below and keep the merchant's current framework and architecture.
+
+## Repository contract
+
+Commit `tender-accounts.json` at the root of each independently deployable app:
+
+```json
+{
+  "schema": "tender.accounts-cli/v1",
+  "commands": {
+    "dev": "npm run dev",
+    "check": "npm run check",
+    "package": "npm run pack:tender"
+  },
+  "artifactDirectory": ".tender/artifacts/current",
+  "returnPath": "/account"
+}
+```
+
+Keep `.tender/` and `.dev.vars` ignored. A merchant administrator creates a short-lived credential scoped to one or more permitted projects. Store it locally as:
+
+```dotenv
+TENDER_ACCOUNTS_TOKEN=ta_agent_...
+```
+
+In a monorepo, one ignored `.dev.vars` at the Git root can serve app commands invoked with `--cwd`; the CLI never searches beyond that repository boundary.
+
+Link the checkout once, then use the normal loop:
+
+```sh
+npx tender-accounts link --json
+npx tender-accounts doctor --json
+npx tender-accounts preview --dry-run --json
+npx tender-accounts preview --json
+```
+
+Install the bundled agent skill into a repository:
+
+```sh
+npx tender-accounts skill install --agent codex --json
+npx tender-accounts skill install --agent claude --json
+```
+
+Run `npx tender-accounts --help` for the complete, layered command reference.

package/dist/api.d.ts

@@ -0,0 +1,27 @@
+import type { AgentPrincipal, ArtifactSubmissionResponse, DeveloperDeliveryResponse } from "./contracts.js";
+export declare class AgentApiClient {
+    private readonly baseUrl;
+    private readonly token;
+    private readonly fetcher;
+    constructor(baseUrl: string, token: string, fetcher?: typeof fetch);
+    whoami(): Promise<AgentPrincipal>;
+    createSubmission(projectId: string, input: {
+        idempotencyKey: string;
+        envelope: unknown;
+    }): Promise<ArtifactSubmissionResponse>;
+    uploadFile(submissionId: string, fileIndex: number, bytes: Uint8Array): Promise<unknown>;
+    finalizeSubmission(submissionId: string): Promise<ArtifactSubmissionResponse>;
+    createDelivery(projectId: string, input: {
+        submissionId: string;
+        idempotencyKey: string;
+    }): Promise<DeveloperDeliveryResponse>;
+    delivery(deliveryId: string): Promise<DeveloperDeliveryResponse>;
+    retryDelivery(deliveryId: string): Promise<unknown>;
+    previewSession(deliveryId: string, returnPath: string): Promise<{
+        url: string;
+        grantId: string;
+        expiresAt: number;
+    }>;
+    private json;
+}
+//# sourceMappingURL=api.d.ts.map

package/dist/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,0BAA0B,EAC1B,yBAAyB,EAC1B,MAAM,gBAAgB,CAAC;AAGxB,qBAAa,cAAc;IAEvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAH1B,YACmB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,OAAO,KAAa,EAC5C;IAEJ,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC,CAEhC;IAED,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAK7H;IAED,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAOvF;IAED,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAE5E;IAED,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAK7H;IAED,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAE/D;IAED,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAElD;IAED,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAKnH;YAEa,IAAI;CAsBnB"}

package/dist/api.js

@@ -0,0 +1,73 @@
+import { CliApiError } from "./errors.js";
+export class AgentApiClient {
+    baseUrl;
+    token;
+    fetcher;
+    constructor(baseUrl, token, fetcher = fetch) {
+        this.baseUrl = baseUrl;
+        this.token = token;
+        this.fetcher = fetcher;
+    }
+    whoami() {
+        return this.json("/v1/whoami");
+    }
+    createSubmission(projectId, input) {
+        return this.json(`/v1/projects/${encodeURIComponent(projectId)}/artifact-submissions`, {
+            method: "POST",
+            body: JSON.stringify(input),
+        });
+    }
+    uploadFile(submissionId, fileIndex, bytes) {
+        const body = bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength);
+        return this.json(`/v1/artifact-submissions/${encodeURIComponent(submissionId)}/files/${fileIndex}`, {
+            method: "PUT",
+            headers: { "content-type": "application/octet-stream" },
+            body,
+        });
+    }
+    finalizeSubmission(submissionId) {
+        return this.json(`/v1/artifact-submissions/${encodeURIComponent(submissionId)}/finalize`, { method: "POST" });
+    }
+    createDelivery(projectId, input) {
+        return this.json(`/v1/projects/${encodeURIComponent(projectId)}/deliveries`, {
+            method: "POST",
+            body: JSON.stringify(input),
+        });
+    }
+    delivery(deliveryId) {
+        return this.json(`/v1/deliveries/${encodeURIComponent(deliveryId)}`);
+    }
+    retryDelivery(deliveryId) {
+        return this.json(`/v1/deliveries/${encodeURIComponent(deliveryId)}/retry`, { method: "POST" });
+    }
+    previewSession(deliveryId, returnPath) {
+        return this.json(`/v1/deliveries/${encodeURIComponent(deliveryId)}/preview-session`, {
+            method: "POST",
+            body: JSON.stringify({ returnPath }),
+        });
+    }
+    async json(path, init = {}) {
+        const headers = new Headers(init.headers);
+        headers.set("accept", "application/json");
+        headers.set("authorization", `Bearer ${this.token}`);
+        if (typeof init.body === "string")
+            headers.set("content-type", "application/json");
+        const response = await this.fetcher(new URL(path, this.baseUrl), { ...init, headers, redirect: "error" });
+        let value;
+        try {
+            value = await response.json();
+        }
+        catch {
+            throw new CliApiError("invalid_api_response", `Tender Accounts returned HTTP ${response.status} without JSON.`);
+        }
+        if (!response.ok) {
+            const error = isRecord(value) && isRecord(value.error) ? value.error : null;
+            throw new CliApiError(typeof error?.code === "string" ? error.code : "api_request_failed", typeof error?.message === "string" ? error.message : `Tender Accounts returned HTTP ${response.status}.`, typeof error?.requestId === "string" ? error.requestId : response.headers.get("x-request-id") ?? undefined);
+        }
+        return value;
+    }
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=api.js.map

package/dist/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,OAAO,cAAc;IAEN,OAAO;IACP,KAAK;IACL,OAAO;IAH1B,YACmB,OAAe,EACf,KAAa,EACb,OAAO,GAAiB,KAAK;uBAF7B,OAAO;qBACP,KAAK;uBACL,OAAO;IACvB,CAAC;IAEJ,MAAM;QACJ,OAAO,IAAI,CAAC,IAAI,CAAiB,YAAY,CAAC,CAAC;IACjD,CAAC;IAED,gBAAgB,CAAC,SAAiB,EAAE,KAAoD;QACtF,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,kBAAkB,CAAC,SAAS,CAAC,uBAAuB,EAAE;YACrF,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,YAAoB,EAAE,SAAiB,EAAE,KAAiB;QACnE,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAgB,CAAC;QACtG,OAAO,IAAI,CAAC,IAAI,CAAC,4BAA4B,kBAAkB,CAAC,YAAY,CAAC,UAAU,SAAS,EAAE,EAAE;YAClG,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE;YACvD,IAAI;SACL,CAAC,CAAC;IACL,CAAC;IAED,kBAAkB,CAAC,YAAoB;QACrC,OAAO,IAAI,CAAC,IAAI,CAAC,4BAA4B,kBAAkB,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAChH,CAAC;IAED,cAAc,CAAC,SAAiB,EAAE,KAAuD;QACvF,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,kBAAkB,CAAC,SAAS,CAAC,aAAa,EAAE;YAC3E,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,UAAkB;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,aAAa,CAAC,UAAkB;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,kBAAkB,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACjG,CAAC;IAED,cAAc,CAAC,UAAkB,EAAE,UAAkB;QACnD,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,kBAAkB,CAAC,UAAU,CAAC,kBAAkB,EAAE;YACnF,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,CAAC;SACrC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,IAAI,CAAI,IAAY,EAAE,IAAI,GAAgB,EAAE;QACxD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACrD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QACnF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1G,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE,iCAAiC,QAAQ,CAAC,MAAM,gBAAgB,CAAC,CAAC;QAClH,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5E,MAAM,IAAI,WAAW,CACnB,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,EACnE,OAAO,KAAK,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iCAAiC,QAAQ,CAAC,MAAM,GAAG,EACxG,OAAO,KAAK,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS,CAC3G,CAAC;QACJ,CAAC;QACD,OAAO,KAAU,CAAC;IACpB,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/artifact.d.ts

@@ -0,0 +1,8 @@
+import { type BuildEnvelope, type VerifiedArtifact } from "./contracts.js";
+export declare function verifyArtifact(directory: string): Promise<VerifiedArtifact>;
+export declare function labelLocalArtifact(artifact: VerifiedArtifact, input: {
+    gitRevision: string;
+    dirty: boolean;
+}): Promise<VerifiedArtifact>;
+export declare function parseBuildEnvelope(value: string): BuildEnvelope;
+//# sourceMappingURL=artifact.d.ts.map

package/dist/artifact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact.d.ts","sourceRoot":"","sources":["../src/artifact.ts"],"names":[],"mappings":"AAGA,OAAO,EAKL,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACtB,MAAM,gBAAgB,CAAC;AAQxB,wBAAsB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAiCjF;AAED,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,gBAAgB,EAC1B,KAAK,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAC7C,OAAO,CAAC,gBAAgB,CAAC,CAM3B;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,CA2D/D"}

package/dist/artifact.js

@@ -0,0 +1,205 @@
+import { createHash } from "node:crypto";
+import { writeFile } from "node:fs/promises";
+import { resolve } from "node:path";
+import { BUILD_ENVELOPE_FILENAME, BUILD_ENVELOPE_SCHEMA, } from "./contracts.js";
+import { CliError } from "./errors.js";
+import { readBoundedFile, safeArtifactPath } from "./files.js";
+const MAX_ENVELOPE_BYTES = 1024 * 1024;
+const MAX_FILE_BYTES = 25 * 1024 * 1024;
+const MAX_TOTAL_BYTES = 50 * 1024 * 1024;
+export async function verifyArtifact(directory) {
+    const root = resolve(directory);
+    const envelopePath = resolve(root, BUILD_ENVELOPE_FILENAME);
+    const envelopeText = new TextDecoder("utf8", { fatal: true }).decode(await readBoundedFile(envelopePath, MAX_ENVELOPE_BYTES));
+    const envelope = parseBuildEnvelope(envelopeText);
+    const descriptors = [
+        { path: "worker.mjs", descriptor: envelope.manifest.module },
+        ...envelope.manifest.files.map((descriptor) => ({ path: `assets/${descriptor.path}`, descriptor })),
+    ];
+    let totalBytes = 0;
+    for (const { path, descriptor } of descriptors) {
+        const bytes = await readBoundedFile(safeArtifactPath(root, path), Math.min(descriptor.bytes, MAX_FILE_BYTES));
+        if (bytes.byteLength !== descriptor.bytes || sha256(bytes) !== descriptor.sha256) {
+            throw new CliError("artifact_integrity_failed", `Artifact bytes do not match the retained descriptor for ${path}.`);
+        }
+        totalBytes += bytes.byteLength;
+    }
+    if (totalBytes > MAX_TOTAL_BYTES) {
+        throw new CliError("artifact_too_large", "The artifact exceeds the 50 MiB developer-delivery limit.");
+    }
+    const calculatedBundleDigest = sha256(Buffer.from(JSON.stringify(artifactContentLedger(envelope.manifest))));
+    if (calculatedBundleDigest !== envelope.bundleDigest) {
+        throw new CliError("artifact_integrity_failed", "The artifact manifest does not match its bundle digest.");
+    }
+    return {
+        directory: root,
+        envelopePath,
+        envelope,
+        fileCount: descriptors.length,
+        totalBytes,
+    };
+}
+export async function labelLocalArtifact(artifact, input) {
+    if (!input.dirty)
+        return artifact;
+    const sourceRevision = `local-${input.gitRevision.slice(0, 12)}-${artifact.envelope.bundleDigest.slice(0, 12)}`;
+    const envelope = { ...artifact.envelope, sourceRevision };
+    await writeFile(artifact.envelopePath, `${JSON.stringify(envelope, null, 2)}\n`, "utf8");
+    return { ...artifact, envelope };
+}
+export function parseBuildEnvelope(value) {
+    let candidate;
+    try {
+        candidate = JSON.parse(value);
+    }
+    catch {
+        throw new CliError("artifact_envelope_invalid", "The artifact build envelope is not valid JSON.");
+    }
+    if (!isRecord(candidate) || candidate.schema !== BUILD_ENVELOPE_SCHEMA || !isRecord(candidate.manifest)) {
+        throw new CliError("artifact_envelope_invalid", `The artifact must use ${BUILD_ENVELOPE_SCHEMA}.`);
+    }
+    const sourceRevision = requiredSourceRevision(candidate.sourceRevision);
+    const bundleDigest = requiredDigest(candidate.bundleDigest, "bundle digest");
+    const manifest = candidate.manifest;
+    if (manifest.schema !== "tender.account-artifact/v1" || !isRecord(manifest.app) || !isRecord(manifest.runtime)) {
+        throw new CliError("artifact_manifest_invalid", "The artifact manifest uses an unsupported shape.");
+    }
+    if (manifest.app.fixture === true) {
+        throw new CliError("artifact_manifest_invalid", "Merchant artifacts cannot identify themselves as platform fixtures.");
+    }
+    const app = {
+        ...manifest.app,
+        slug: requiredString(manifest.app.slug, "app slug"),
+        label: requiredString(manifest.app.label, "app label"),
+        version: requiredString(manifest.app.version, "app version"),
+        fixture: false,
+    };
+    const runtime = {
+        ...manifest.runtime,
+        kind: requiredString(manifest.runtime.kind, "runtime kind"),
+        assetPrefix: requiredString(manifest.runtime.assetPrefix, "asset prefix"),
+    };
+    if (runtime.kind !== "worker" && runtime.kind !== "worker-assets") {
+        throw new CliError("artifact_manifest_invalid", "Developer delivery requires a compiled Worker module.");
+    }
+    if (runtime.assetPrefix !== `/_tenant-artifacts/${bundleDigest}`) {
+        throw new CliError("artifact_manifest_invalid", "The artifact asset prefix does not match its bundle digest.");
+    }
+    const module = artifactModule(manifest.module);
+    const files = artifactFiles(manifest.files);
+    if (!Array.isArray(manifest.resources) || !Array.isArray(manifest.services)) {
+        throw new CliError("artifact_manifest_invalid", "The artifact resource and service declarations must be arrays.");
+    }
+    const secrets = manifest.secrets === undefined ? undefined : secretNames(manifest.secrets);
+    return {
+        schema: BUILD_ENVELOPE_SCHEMA,
+        sourceRevision,
+        bundleDigest,
+        manifest: {
+            ...manifest,
+            schema: "tender.account-artifact/v1",
+            app,
+            runtime,
+            module,
+            files,
+            resources: manifest.resources,
+            services: manifest.services,
+            ...(secrets === undefined ? {} : { secrets }),
+        },
+    };
+}
+function artifactModule(value) {
+    if (!isRecord(value) || value.path !== "worker.mjs" || value.contentType !== "application/javascript+module") {
+        throw new CliError("artifact_manifest_invalid", "The artifact Worker module descriptor is missing or invalid.");
+    }
+    return {
+        path: "worker.mjs",
+        sha256: requiredDigest(value.sha256, "Worker module digest"),
+        bytes: requiredBytes(value.bytes, "Worker module bytes"),
+        contentType: "application/javascript+module",
+    };
+}
+function artifactFiles(value) {
+    if (!Array.isArray(value) || value.length > 249) {
+        throw new CliError("artifact_manifest_invalid", "The artifact public file list is invalid.");
+    }
+    const result = [];
+    let previous = "";
+    for (const candidate of value) {
+        if (!isRecord(candidate))
+            throw new CliError("artifact_manifest_invalid", "An artifact file descriptor is invalid.");
+        const path = requiredString(candidate.path, "artifact path");
+        if (!isSafePath(path) || (previous && path.localeCompare(previous) <= 0)) {
+            throw new CliError("artifact_manifest_invalid", "Artifact paths must be safe, unique, and sorted.");
+        }
+        result.push({
+            path,
+            sha256: requiredDigest(candidate.sha256, `digest for ${path}`),
+            bytes: requiredBytes(candidate.bytes, `bytes for ${path}`, true),
+        });
+        previous = path;
+    }
+    return result;
+}
+function secretNames(value) {
+    if (!Array.isArray(value) || value.length > 32) {
+        throw new CliError("artifact_manifest_invalid", "The artifact secret declaration list is invalid.");
+    }
+    const result = [];
+    let previous = "";
+    for (const candidate of value) {
+        if (typeof candidate !== "string" || !/^[A-Z][A-Z0-9_]{2,63}$/u.test(candidate)
+            || candidate.startsWith("TENDER_") || candidate === "ASSETS"
+            || (previous && candidate.localeCompare(previous) <= 0)) {
+            throw new CliError("artifact_manifest_invalid", "Artifact secret names must be safe, unique, and sorted.");
+        }
+        result.push(candidate);
+        previous = candidate;
+    }
+    return result;
+}
+function artifactContentLedger(manifest) {
+    if (manifest.databaseSchema !== undefined) {
+        return { module: manifest.module, files: manifest.files, databaseSchema: manifest.databaseSchema };
+    }
+    return { module: manifest.module, files: manifest.files };
+}
+function requiredSourceRevision(value) {
+    if (typeof value !== "string" || value.length < 7 || value.length > 128
+        || !/^[A-Za-z0-9][A-Za-z0-9._-]*$/u.test(value)) {
+        throw new CliError("artifact_envelope_invalid", "The artifact source revision is invalid.");
+    }
+    return value;
+}
+function requiredString(value, label) {
+    if (typeof value !== "string" || value.length === 0 || value.length > 512) {
+        throw new CliError("artifact_manifest_invalid", `The ${label} is invalid.`);
+    }
+    return value;
+}
+function requiredDigest(value, label) {
+    const digest = requiredString(value, label).toLowerCase();
+    if (!/^[a-f0-9]{64}$/u.test(digest))
+        throw new CliError("artifact_manifest_invalid", `The ${label} is invalid.`);
+    return digest;
+}
+function requiredBytes(value, label, allowZero = false) {
+    if (typeof value !== "number" || !Number.isSafeInteger(value)
+        || value < (allowZero ? 0 : 1) || value > MAX_FILE_BYTES) {
+        throw new CliError("artifact_manifest_invalid", `The ${label} is invalid.`);
+    }
+    return value;
+}
+function isSafePath(value) {
+    return value.length <= 512 && !value.startsWith("/") && !value.endsWith("/")
+        && !value.includes("\\") && !value.includes("%")
+        && value.split("/").every((segment) => segment.length > 0 && segment !== "." && segment !== ".."
+            && /^[A-Za-z0-9][A-Za-z0-9._-]*$/u.test(segment));
+}
+function sha256(value) {
+    return createHash("sha256").update(value).digest("hex");
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=artifact.js.map

package/dist/artifact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact.js","sourceRoot":"","sources":["../src/artifact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,uBAAuB,EACvB,qBAAqB,GAKtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE/D,MAAM,kBAAkB,GAAG,IAAI,GAAG,IAAI,CAAC;AACvC,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACxC,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEzC,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAiB;IACpD,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAClE,MAAM,eAAe,CAAC,YAAY,EAAE,kBAAkB,CAAC,CACxD,CAAC;IACF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,WAAW,GAAgE;QAC/E,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE;QAC5D,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,UAAU,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;KACpG,CAAC;IACF,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,WAAW,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC;QAC9G,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;YACjF,MAAM,IAAI,QAAQ,CAAC,2BAA2B,EAAE,2DAA2D,IAAI,GAAG,CAAC,CAAC;QACtH,CAAC;QACD,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC;IACjC,CAAC;IACD,IAAI,UAAU,GAAG,eAAe,EAAE,CAAC;QACjC,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAE,2DAA2D,CAAC,CAAC;IACxG,CAAC;IACD,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7G,IAAI,sBAAsB,KAAK,QAAQ,CAAC,YAAY,EAAE,CAAC;QACrD,MAAM,IAAI,QAAQ,CAAC,2BAA2B,EAAE,yDAAyD,CAAC,CAAC;IAC7G,CAAC;IACD,OAAO;QACL,SAAS,EAAE,IAAI;QACf,YAAY;QACZ,QAAQ;QACR,SAAS,EAAE,WAAW,CAAC,MAAM;QAC7B,UAAU;KACX,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAA0B,EAC1B,KAA8C;IAE9C,IAAI,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,QAAQ,CAAC;IAClC,MAAM,cAAc,GAAG,SAAS,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAChH,MAAM,QAAQ,GAAG,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC1D,MAAM,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzF,OAAO,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,IAAI,SAAkB,CAAC;IACvB,IAAI,CAAC;QACH,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAAC,2BAA2B,EAAE,gDAAgD,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,qBAAqB,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxG,MAAM,IAAI,QAAQ,CAAC,2BAA2B,EAAE,yBAAyB,qBAAqB,GAAG,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,cAAc,GAAG,sBAAsB,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IACxE,MAAM,YAAY,GAAG,cAAc,CAAC,SAAS,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;IACpC,IAAI,QAAQ,CAAC,MAAM,KAAK,4BAA4B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/G,MAAM,IAAI,QAAQ,CAAC,2BAA2B,EAAE,kDAAkD,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAClC,MAAM,IAAI,QAAQ,CAAC,2BAA2B,EAAE,qEAAqE,CAAC,CAAC;IACzH,CAAC;IACD,MAAM,GAAG,GAAG;QACV,GAAG,QAAQ,CAAC,GAAG;QACf,IAAI,EAAE,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC;QACnD,KAAK,EAAE,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC;QACtD,OAAO,EAAE,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC;QAC5D,OAAO,EAAE,KAAK;KACf,CAAC;IACF,MAAM,OAAO,GAAG;QACd,GAAG,QAAQ,CAAC,OAAO;QACnB,IAAI,EAAE,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC;QAC3D,WAAW,EAAE,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC;KAC1E,CAAC;IACF,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QAClE,MAAM,IAAI,QAAQ,CAAC,2BAA2B,EAAE,uDAAuD,CAAC,CAAC;IAC3G,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,sBAAsB,YAAY,EAAE,EAAE,CAAC;QACjE,MAAM,IAAI,QAAQ,CAAC,2BAA2B,EAAE,6DAA6D,CAAC,CAAC;IACjH,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,QAAQ,CAAC,2BAA2B,EAAE,gEAAgE,CAAC,CAAC;IACpH,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC3F,OAAO;QACL,MAAM,EAAE,qBAAqB;QAC7B,cAAc;QACd,YAAY;QACZ,QAAQ,EAAE;YACR,GAAG,QAAQ;YACX,MAAM,EAAE,4BAA4B;YACpC,GAAG;YACH,OAAO;YACP,MAAM;YACN,KAAK;YACL,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;SAC9C;KACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,WAAW,KAAK,+BAA+B,EAAE,CAAC;QAC7G,MAAM,IAAI,QAAQ,CAAC,2BAA2B,EAAE,8DAA8D,CAAC,CAAC;IAClH,CAAC;IACD,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,sBAAsB,CAAC;QAC5D,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,qBAAqB,CAAC;QACxD,WAAW,EAAE,+BAA+B;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAChD,MAAM,IAAI,QAAQ,CAAC,2BAA2B,EAAE,2CAA2C,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,MAAM,GAA6B,EAAE,CAAC;IAC5C,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,2BAA2B,EAAE,yCAAyC,CAAC,CAAC;QACrH,MAAM,IAAI,GAAG,cAAc,CAAC,SAAS,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,QAAQ,CAAC,2BAA2B,EAAE,kDAAkD,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI;YACJ,MAAM,EAAE,cAAc,CAAC,SAAS,CAAC,MAAM,EAAE,cAAc,IAAI,EAAE,CAAC;YAC9D,KAAK,EAAE,aAAa,CAAC,SAAS,CAAC,KAAK,EAAE,aAAa,IAAI,EAAE,EAAE,IAAI,CAAC;SACjE,CAAC,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,QAAQ,CAAC,2BAA2B,EAAE,kDAAkD,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,SAAS,CAAC;eACxE,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,SAAS,KAAK,QAAQ;eACzD,CAAC,QAAQ,IAAI,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,QAAQ,CAAC,2BAA2B,EAAE,yDAAyD,CAAC,CAAC;QAC7G,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvB,QAAQ,GAAG,SAAS,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAmC;IAChE,IAAI,QAAQ,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,CAAC;IACrG,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;WAChE,CAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,QAAQ,CAAC,2BAA2B,EAAE,0CAA0C,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC1E,MAAM,IAAI,QAAQ,CAAC,2BAA2B,EAAE,OAAO,KAAK,cAAc,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,2BAA2B,EAAE,OAAO,KAAK,cAAc,CAAC,CAAC;IACjH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa,EAAE,SAAS,GAAG,KAAK;IACrE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;WACtD,KAAK,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,cAAc,EAAE,CAAC;QAC7D,MAAM,IAAI,QAAQ,CAAC,2BAA2B,EAAE,OAAO,KAAK,cAAc,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;WACvE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;WAC7C,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI;eAC3F,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,MAAM,CAAC,KAAiB;IAC/B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+import { runCli } from "./main.js";
+process.exitCode = await runCli(process.argv.slice(2));
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAEnC,OAAO,CAAC,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/contracts.d.ts

@@ -0,0 +1,96 @@
+export declare const CLI_CONFIG_SCHEMA: "tender.accounts-cli/v1";
+export declare const CLI_LINK_SCHEMA: "tender.accounts-link/v1";
+export declare const BUILD_ENVELOPE_SCHEMA: "tender.external-app-build/v1";
+export declare const BUILD_ENVELOPE_FILENAME: "tender-accounts-build.json";
+export interface ProjectConfig {
+    schema: typeof CLI_CONFIG_SCHEMA;
+    commands: {
+        dev?: string;
+        check: string;
+        package: string;
+    };
+    artifactDirectory: string;
+    returnPath: string;
+}
+export interface ProjectLink {
+    schema: typeof CLI_LINK_SCHEMA;
+    projectId: string;
+    apiUrl: string;
+}
+export interface AgentProject {
+    projectId: string;
+    role: "developer" | "viewer";
+}
+export interface AgentPrincipal {
+    schema: "tender.agent-principal/v1";
+    credentialId: string;
+    tenantId: string;
+    ownerEmail: string;
+    label: string;
+    projects: AgentProject[];
+}
+export interface ArtifactFileDescriptor {
+    path: string;
+    sha256: string;
+    bytes: number;
+}
+export interface ArtifactModuleDescriptor extends ArtifactFileDescriptor {
+    path: "worker.mjs";
+    contentType: "application/javascript+module";
+}
+export interface BuildEnvelope {
+    schema: typeof BUILD_ENVELOPE_SCHEMA;
+    sourceRevision: string;
+    bundleDigest: string;
+    manifest: Record<string, unknown> & {
+        schema: "tender.account-artifact/v1";
+        app: Record<string, unknown> & {
+            slug: string;
+            label: string;
+            version: string;
+            fixture: boolean;
+        };
+        runtime: Record<string, unknown> & {
+            kind: string;
+            assetPrefix: string;
+        };
+        module: ArtifactModuleDescriptor;
+        files: ArtifactFileDescriptor[];
+        resources: unknown[];
+        services: unknown[];
+        secrets?: string[];
+        databaseSchema?: unknown;
+    };
+}
+export interface VerifiedArtifact {
+    directory: string;
+    envelopePath: string;
+    envelope: BuildEnvelope;
+    fileCount: number;
+    totalBytes: number;
+}
+export interface ArtifactSubmissionResponse {
+    id: string;
+    status: "uploading" | "ready" | "failed";
+    releaseId: string | null;
+    files: Array<{
+        index: number;
+        path: string;
+        bytes: number;
+        uploaded: boolean;
+    }>;
+}
+export interface DeveloperDeliveryResponse {
+    id: string;
+    projectId?: string;
+    workflow: {
+        id: string;
+        status: "requested" | "running" | "succeeded" | "failed";
+        result: Record<string, unknown> | null;
+        error: {
+            code: string;
+            message: string;
+        } | null;
+    };
+}
+//# sourceMappingURL=contracts.d.ts.map

package/dist/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../src/contracts.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,iBAAiB,EAAG,wBAAiC,CAAC;AACnE,eAAO,MAAM,eAAe,EAAG,yBAAkC,CAAC;AAClE,eAAO,MAAM,qBAAqB,EAAG,8BAAuC,CAAC;AAC7E,eAAO,MAAM,uBAAuB,EAAG,4BAAqC,CAAC;AAE7E,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,OAAO,iBAAiB,CAAC;IACjC,QAAQ,EAAE;QACR,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,OAAO,eAAe,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,WAAW,GAAG,QAAQ,CAAC;CAC9B;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,2BAA2B,CAAC;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,YAAY,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,wBAAyB,SAAQ,sBAAsB;IACtE,IAAI,EAAE,YAAY,CAAC;IACnB,WAAW,EAAE,+BAA+B,CAAC;CAC9C;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,OAAO,qBAAqB,CAAC;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAClC,MAAM,EAAE,4BAA4B,CAAC;QACrC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,OAAO,CAAA;SAAE,CAAC;QAClG,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC;QACzE,MAAM,EAAE,wBAAwB,CAAC;QACjC,KAAK,EAAE,sBAAsB,EAAE,CAAC;QAChC,SAAS,EAAE,OAAO,EAAE,CAAC;QACrB,QAAQ,EAAE,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QACnB,cAAc,CAAC,EAAE,OAAO,CAAC;KAC1B,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,aAAa,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,WAAW,GAAG,OAAO,GAAG,QAAQ,CAAC;IACzC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACjF;AAED,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE;QACR,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;QACzD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QACvC,KAAK,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;KACjD,CAAC;CACH"}

package/dist/contracts.js

@@ -0,0 +1,5 @@
+export const CLI_CONFIG_SCHEMA = "tender.accounts-cli/v1";
+export const CLI_LINK_SCHEMA = "tender.accounts-link/v1";
+export const BUILD_ENVELOPE_SCHEMA = "tender.external-app-build/v1";
+export const BUILD_ENVELOPE_FILENAME = "tender-accounts-build.json";
+//# sourceMappingURL=contracts.js.map

package/dist/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../src/contracts.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,iBAAiB,GAAG,wBAAiC,CAAC;AACnE,MAAM,CAAC,MAAM,eAAe,GAAG,yBAAkC,CAAC;AAClE,MAAM,CAAC,MAAM,qBAAqB,GAAG,8BAAuC,CAAC;AAC7E,MAAM,CAAC,MAAM,uBAAuB,GAAG,4BAAqC,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,10 @@
+export declare class CliError extends Error {
+    readonly code: string;
+    readonly hint?: string | undefined;
+    constructor(code: string, message: string, hint?: string | undefined);
+}
+export declare class CliApiError extends CliError {
+    readonly requestId?: string | undefined;
+    constructor(code: string, message: string, requestId?: string | undefined);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,QAAS,SAAQ,KAAK;IAE/B,QAAQ,CAAC,IAAI,EAAE,MAAM;IAErB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;IAHxB,YACW,IAAI,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM,EACN,IAAI,CAAC,EAAE,MAAM,YAAA,EAIvB;CACF;AAED,qBAAa,WAAY,SAAQ,QAAQ;IAIrC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM;IAH7B,YACE,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACN,SAAS,CAAC,EAAE,MAAM,YAAA,EAI5B;CACF"}

package/dist/errors.js

@@ -0,0 +1,19 @@
+export class CliError extends Error {
+    code;
+    hint;
+    constructor(code, message, hint) {
+        super(message);
+        this.code = code;
+        this.hint = hint;
+        this.name = "CliError";
+    }
+}
+export class CliApiError extends CliError {
+    requestId;
+    constructor(code, message, requestId) {
+        super(code, message);
+        this.requestId = requestId;
+        this.name = "CliApiError";
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,QAAS,SAAQ,KAAK;IAEtB,IAAI;IAEJ,IAAI;IAHf,YACW,IAAY,EACrB,OAAe,EACN,IAAa;QAEtB,KAAK,CAAC,OAAO,CAAC,CAAC;oBAJN,IAAI;oBAEJ,IAAI;QAGb,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED,MAAM,OAAO,WAAY,SAAQ,QAAQ;IAI5B,SAAS;IAHpB,YACE,IAAY,EACZ,OAAe,EACN,SAAkB;QAE3B,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;yBAFZ,SAAS;QAGlB,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF"}

package/dist/files.d.ts

@@ -0,0 +1,21 @@
+import { type ProjectConfig, type ProjectLink } from "./contracts.js";
+export interface ProjectContext {
+    root: string;
+    configPath: string;
+    config: ProjectConfig;
+    linkPath: string;
+    link: ProjectLink | null;
+}
+export declare function loadProjectContext(startDirectory: string): Promise<ProjectContext>;
+export declare function parseProjectConfig(value: string): ProjectConfig;
+export declare function parseProjectLink(value: string): ProjectLink;
+export declare function writeProjectLink(root: string, link: ProjectLink): Promise<string>;
+export declare function readToken(root: string, environment: NodeJS.ProcessEnv, stdin?: NodeJS.ReadableStream): Promise<string>;
+export declare function validateToken(value: string): string;
+export declare function normalizeApiUrl(value: unknown): string;
+export declare function resolveArtifactDirectory(context: ProjectContext): string;
+export declare function readBoundedFile(path: string, maximumBytes: number): Promise<Uint8Array>;
+export declare function pathExists(path: string): Promise<boolean>;
+export declare function safeArtifactPath(root: string, path: string): string;
+export declare function requiredProjectId(value: unknown): string;
+//# sourceMappingURL=files.d.ts.map

package/dist/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../src/files.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,WAAW,EACjB,MAAM,gBAAgB,CAAC;AAMxB,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;CAC1B;AAED,wBAAsB,kBAAkB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAYxF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,CAoB/D;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,CAU3D;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAkBvF;AAED,wBAAsB,SAAS,CAC7B,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,CAAC,UAAU,EAC9B,KAAK,CAAC,EAAE,MAAM,CAAC,cAAc,GAC5B,OAAO,CAAC,MAAM,CAAC,CAyBjB;AAgBD,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMnD;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAgBtD;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM,CAIxE;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAoB7F;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQ/D;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAOnE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAKxD"}