@vendure/cloud-config 0.0.0

package/dist/secrets.d.ts

@@ -0,0 +1,14 @@
+import { CloudConfigError } from "./errors.js";
+type LiteralOnly<T extends string> = T & (string extends T ? never : unknown);
+export declare function secret<T extends string>(name: LiteralOnly<T>): string;
+export declare function listDeclaredSecrets(): string[];
+export declare function listMissingSecrets(): string[];
+export declare class MissingSecretsError extends CloudConfigError {
+    readonly names: readonly string[];
+    constructor(names: readonly string[]);
+}
+export declare function assertNoMissingSecrets(): void;
+export declare function redactSecrets(text: string): string;
+export declare function resetSecretsForTesting(): void;
+export {};
+//# sourceMappingURL=secrets.d.ts.map

package/dist/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AA8B/C,KAAK,WAAW,CAAC,CAAC,SAAS,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,SAAS,CAAC,GAAG,KAAK,GAAG,OAAO,CAAC,CAAC;AAgB9E,wBAAgB,MAAM,CAAC,CAAC,SAAS,MAAM,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,MAAM,CAuBrE;AAID,wBAAgB,mBAAmB,IAAI,MAAM,EAAE,CAE9C;AAID,wBAAgB,kBAAkB,IAAI,MAAM,EAAE,CAI7C;AAED,qBAAa,mBAAoB,SAAQ,gBAAgB;IACvD,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;gBAEtB,KAAK,EAAE,SAAS,MAAM,EAAE;CAWrC;AAED,wBAAgB,sBAAsB,IAAI,IAAI,CAG7C;AAWD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CASlD;AAMD,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C"}

package/dist/secrets.js

@@ -0,0 +1,109 @@
+import { CloudConfigError } from "./errors.js";
+// Registered for the same reason the config handle's symbol is (ADR-0043, ADR-0045): a second
+// copy of this package in the tree would otherwise keep a second registry, and the entrypoint
+// would read a declared set missing whatever the other copy resolved. The peer dependency
+// makes two copies hard to arrive at; this makes them survivable.
+const REGISTRY = Symbol.for("vendure-cloud.secret-registry");
+function registry() {
+    const global = globalThis;
+    const existing = global[REGISTRY];
+    if (existing !== undefined)
+        return existing;
+    const created = { declared: new Map() };
+    global[REGISTRY] = created;
+    return created;
+}
+// Reads a customer-supplied value, registers the name, and returns a plain string.
+//
+// Values arrive as ordinary environment variables (ADR-0030): the ECS task execution role
+// fetches the environment's Secrets Manager document at task start, so by the time this runs
+// there is nothing to fetch and nothing asynchronous to wait for. This is a read helper over
+// `process.env`, not a second delivery mechanism.
+//
+// Resolving eagerly and returning a plain string rather than a lazy reference is what keeps
+// third-party plugin options typed `string` working. A wrapper type would leak into every
+// option signature that ever holds a secret.
+//
+// A missing name is recorded rather than thrown here, so that `defineCloudConfig` can fail
+// once naming all of them. Throwing on the first would make a configuration with four unset
+// secrets take four deploys to fix.
+export function secret(name) {
+    // Trimmed before anything else looks at it, so that what is tested for emptiness, what is
+    // registered for redaction, and what the caller receives are all the same string.
+    //
+    // The value that arrives is whatever the environment holds, and a credential picks up
+    // surrounding whitespace easily — a trailing newline out of a file-based secret store or a
+    // `.env` loader is the usual way. That corrupted value fails in the same place an empty one
+    // would, inside a payment call rather than at boot, which is the failure this helper exists
+    // to move earlier. Treating " " as unset while handing back " sk-live-123\n" intact would
+    // catch the rarer half of that and miss the common half.
+    //
+    // Only the ends are affected. A multi-line value keeps its interior exactly — ADR-0030 notes
+    // that customers routinely put private keys and service-account JSON in these variables, and
+    // a PEM body survives this untouched.
+    const value = process.env[name]?.trim();
+    if (value === undefined || value === "") {
+        registry().declared.set(name, undefined);
+        // The boot fails before anything reads this, so the value is never used. It is a string
+        // so that the signature does not have to admit undefined for every caller.
+        return "";
+    }
+    registry().declared.set(name, value);
+    return value;
+}
+// The entrypoint's accessor, after composition. Exactly the names passed to `secret()`,
+// whether or not each one resolved, in the order they were passed.
+export function listDeclaredSecrets() {
+    return [...registry().declared.keys()];
+}
+// The names that were asked for and are not set. CLO-417 reports these against an
+// environment; `defineCloudConfig` refuses to boot on them.
+export function listMissingSecrets() {
+    return [...registry().declared]
+        .filter(([, value]) => value === undefined)
+        .map(([name]) => name);
+}
+export class MissingSecretsError extends CloudConfigError {
+    names;
+    constructor(names) {
+        const list = names.map((name) => `  - ${name}`).join("\n");
+        const one = names.length === 1;
+        const secrets = one ? "secret" : "secrets";
+        const isAre = one ? "is" : "are";
+        const itThem = one ? "it" : "them";
+        super(`Vendure Cloud: this configuration reads ${names.length} ${secrets} that ${isAre} not set on this environment.\n\n${list}\n\n  Set ${itThem} with \`vcloud env set <NAME> <value>\` and deploy again.\n  A value that is set but empty or surrounded by whitespace counts as unset.\n`);
+        this.names = names;
+    }
+}
+export function assertNoMissingSecrets() {
+    const missing = listMissingSecrets();
+    if (missing.length > 0)
+        throw new MissingSecretsError(missing);
+}
+// Replaces every resolved secret value wherever it appears in a string. The platform logger
+// runs its output through this, which is the hook `process.env` gives no equivalent of: a
+// value read straight out of `process.env` is an ordinary string that nothing can recognise
+// once it reaches a log line.
+//
+// Longest first, so a secret that contains another secret is replaced whole rather than
+// leaving the shorter one's placeholder embedded in it. `split`/`join` rather than a regular
+// expression, because a secret can contain any character and escaping it is one more thing to
+// get wrong.
+export function redactSecrets(text) {
+    const values = [...registry().declared]
+        .filter((entry) => entry[1] !== undefined)
+        .sort(([, left], [, right]) => right.length - left.length);
+    let redacted = text;
+    for (const [name, value] of values) {
+        redacted = redacted.split(value).join(`[redacted: ${name}]`);
+    }
+    return redacted;
+}
+// Deliberately not re-exported from `index.ts`. The registry it clears is shared across every
+// copy of this package in the process, so a customer reaching this would be clearing
+// redaction and missing-secret state registered by code that is not theirs. This package's
+// own suite imports it from this module directly, which is all it was ever needed for.
+export function resetSecretsForTesting() {
+    registry().declared.clear();
+}
+//# sourceMappingURL=secrets.js.map

package/dist/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,8FAA8F;AAC9F,8FAA8F;AAC9F,0FAA0F;AAC1F,kEAAkE;AAClE,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;AAU7D,SAAS,QAAQ;IACf,MAAM,MAAM,GAAG,UAAqC,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAA0B,CAAC;IAC9D,MAAM,OAAO,GAAmB,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;IACxD,MAAM,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC;IAC3B,OAAO,OAAO,CAAC;AACjB,CAAC;AASD,mFAAmF;AACnF,EAAE;AACF,0FAA0F;AAC1F,6FAA6F;AAC7F,6FAA6F;AAC7F,kDAAkD;AAClD,EAAE;AACF,4FAA4F;AAC5F,0FAA0F;AAC1F,6CAA6C;AAC7C,EAAE;AACF,2FAA2F;AAC3F,4FAA4F;AAC5F,oCAAoC;AACpC,MAAM,UAAU,MAAM,CAAmB,IAAoB;IAC3D,0FAA0F;IAC1F,kFAAkF;IAClF,EAAE;IACF,sFAAsF;IACtF,2FAA2F;IAC3F,4FAA4F;IAC5F,4FAA4F;IAC5F,0FAA0F;IAC1F,yDAAyD;IACzD,EAAE;IACF,6FAA6F;IAC7F,6FAA6F;IAC7F,sCAAsC;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;IACxC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACxC,QAAQ,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACzC,wFAAwF;QACxF,2EAA2E;QAC3E,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,QAAQ,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wFAAwF;AACxF,mEAAmE;AACnE,MAAM,UAAU,mBAAmB;IACjC,OAAO,CAAC,GAAG,QAAQ,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,kFAAkF;AAClF,4DAA4D;AAC5D,MAAM,UAAU,kBAAkB;IAChC,OAAO,CAAC,GAAG,QAAQ,EAAE,CAAC,QAAQ,CAAC;SAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;SAC1C,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,OAAO,mBAAoB,SAAQ,gBAAgB;IAC9C,KAAK,CAAoB;IAElC,YAAY,KAAwB;QAClC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QACjC,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QACnC,KAAK,CACH,2CAA2C,KAAK,CAAC,MAAM,IAAI,OAAO,SAAS,KAAK,oCAAoC,IAAI,aAAa,MAAM,2IAA2I,CACvR,CAAC;QACF,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED,MAAM,UAAU,sBAAsB;IACpC,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,OAAO,CAAC,CAAC;AACjE,CAAC;AAED,4FAA4F;AAC5F,0FAA0F;AAC1F,4FAA4F;AAC5F,8BAA8B;AAC9B,EAAE;AACF,wFAAwF;AACxF,6FAA6F;AAC7F,8FAA8F;AAC9F,aAAa;AACb,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,EAAE,CAAC,QAAQ,CAAC;SACpC,MAAM,CAAC,CAAC,KAAK,EAA6B,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;SACpE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7D,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QACnC,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,cAAc,IAAI,GAAG,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8FAA8F;AAC9F,qFAAqF;AACrF,2FAA2F;AAC3F,uFAAuF;AACvF,MAAM,UAAU,sBAAsB;IACpC,QAAQ,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;AAC9B,CAAC"}

package/dist/stack.d.ts

@@ -0,0 +1,3 @@
+export declare function toFilePath(fileName: string): string | undefined;
+export declare function stackFrameFiles(boundary: (...args: never[]) => unknown, limit: number): (string | undefined)[];
+//# sourceMappingURL=stack.d.ts.map

package/dist/stack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack.d.ts","sourceRoot":"","sources":["../src/stack.ts"],"names":[],"mappings":"AAsBA,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAS/D;AAKD,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,OAAO,EACvC,KAAK,EAAE,MAAM,GACZ,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,CAoBxB"}

package/dist/stack.js

@@ -0,0 +1,58 @@
+import { isAbsolute } from "node:path";
+import { fileURLToPath } from "node:url";
+// Reading the call stack is how two features here find out where code came from:
+// `defineVendureExtension` takes the file that declared an extension, so a relative
+// `migrations` glob resolves against it, and the outbound-host check takes every frame, so a
+// call can be attributed to the extension that made it. Both want the same two things, and
+// both get them wrong in slightly different ways when each keeps its own copy.
+//
+// Installing our own `prepareStackTrace` does more than give us the frames.
+// `source-map-support` and Node's `--enable-source-maps` both work by replacing that hook, and
+// both would hand back the original `.ts` path. The runtime image runs
+// `node --enable-source-maps` (`apps/vc-builder/src/runtime.ts`), so without this a glob would
+// resolve against a source tree the image does not ship, and an attribution would be measured
+// against a directory that is not the one the code was loaded from.
+// ESM frames carry a file URL and CommonJS frames carry a path, and Bun reports a path for
+// both. Anything else — `node:internal/...`, a `data:` URL, `<anonymous>` from an eval — is
+// not a file on disk and resolves nothing.
+//
+// `isAbsolute` rather than "contains a separator": a specifier like
+// `node:internal/deps/undici/undici` contains one and is still not a file.
+export function toFilePath(fileName) {
+    if (fileName.startsWith("file://")) {
+        try {
+            return fileURLToPath(fileName);
+        }
+        catch {
+            return undefined;
+        }
+    }
+    return isAbsolute(fileName) ? fileName : undefined;
+}
+// The file each frame above `boundary` came from, nearest first. A frame that names no file
+// on disk is kept as `undefined` rather than dropped, so a caller that wants specifically the
+// first frame — as `defineVendureExtension` does — cannot silently be handed the second.
+export function stackFrameFiles(boundary, limit) {
+    const previousPrepare = Error.prepareStackTrace;
+    const previousLimit = Error.stackTraceLimit;
+    try {
+        // Some test runners and instrumentation set `Error.stackTraceLimit` to zero, which yields
+        // no frames at all.
+        Error.stackTraceLimit = Math.max(previousLimit, limit);
+        Error.prepareStackTrace = (_error, frames) => frames;
+        const holder = {};
+        Error.captureStackTrace(holder, boundary);
+        const frames = holder.stack;
+        if (!Array.isArray(frames))
+            return [];
+        return frames.map((frame) => {
+            const fileName = frame?.getFileName?.();
+            return typeof fileName === "string" ? toFilePath(fileName) : undefined;
+        });
+    }
+    finally {
+        Error.prepareStackTrace = previousPrepare;
+        Error.stackTraceLimit = previousLimit;
+    }
+}
+//# sourceMappingURL=stack.js.map

package/dist/stack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack.js","sourceRoot":"","sources":["../src/stack.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,iFAAiF;AACjF,oFAAoF;AACpF,6FAA6F;AAC7F,2FAA2F;AAC3F,+EAA+E;AAC/E,EAAE;AACF,4EAA4E;AAC5E,+FAA+F;AAC/F,uEAAuE;AACvE,+FAA+F;AAC/F,8FAA8F;AAC9F,oEAAoE;AAEpE,2FAA2F;AAC3F,4FAA4F;AAC5F,2CAA2C;AAC3C,EAAE;AACF,oEAAoE;AACpE,2EAA2E;AAC3E,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED,4FAA4F;AAC5F,8FAA8F;AAC9F,yFAAyF;AACzF,MAAM,UAAU,eAAe,CAC7B,QAAuC,EACvC,KAAa;IAEb,MAAM,eAAe,GAAG,KAAK,CAAC,iBAAiB,CAAC;IAChD,MAAM,aAAa,GAAG,KAAK,CAAC,eAAe,CAAC;IAC5C,IAAI,CAAC;QACH,0FAA0F;QAC1F,oBAAoB;QACpB,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QACvD,KAAK,CAAC,iBAAiB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC;QACrD,MAAM,MAAM,GAAwB,EAAE,CAAC;QACvC,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QACtC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAC1B,MAAM,QAAQ,GAAY,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;YACjD,OAAO,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzE,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,iBAAiB,GAAG,eAAe,CAAC;QAC1C,KAAK,CAAC,eAAe,GAAG,aAAa,CAAC;IACxC,CAAC;AACH,CAAC"}

package/dist/superseded-plugins.d.ts

@@ -0,0 +1,19 @@
+import { CloudConfigError } from "./errors.js";
+import { type ExtensionOfPlugin, type PluginLike } from "./plugin-attribution.js";
+export interface SupersededPlugin {
+    plugin: string;
+    replacement: string;
+    reason: string;
+}
+export declare const SUPERSEDED_PLUGINS: readonly SupersededPlugin[];
+export declare function findSupersededPlugin(name: string): SupersededPlugin | undefined;
+export interface SupersededPluginDeclaration {
+    superseded: SupersededPlugin;
+    extension?: string;
+}
+export declare class SupersededPluginDeclaredError extends CloudConfigError {
+    readonly declarations: readonly SupersededPluginDeclaration[];
+    constructor(declarations: readonly SupersededPluginDeclaration[]);
+}
+export declare function assertNoSupersededPluginDeclared(plugins: readonly PluginLike[], extensionOf?: ExtensionOfPlugin): void;
+//# sourceMappingURL=superseded-plugins.d.ts.map

package/dist/superseded-plugins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"superseded-plugins.d.ts","sourceRoot":"","sources":["../src/superseded-plugins.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,KAAK,iBAAiB,EAAE,KAAK,UAAU,EAAc,MAAM,yBAAyB,CAAC;AAkB9F,MAAM,WAAW,gBAAgB;IAI/B,MAAM,EAAE,MAAM,CAAC;IAGf,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAWD,eAAO,MAAM,kBAAkB,EAAE,SAAS,gBAAgB,EAAqB,CAAC;AAEhF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAE/E;AAED,MAAM,WAAW,2BAA2B;IAC1C,UAAU,EAAE,gBAAgB,CAAC;IAI7B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,6BAA8B,SAAQ,gBAAgB;IACjE,QAAQ,CAAC,YAAY,EAAE,SAAS,2BAA2B,EAAE,CAAC;gBAElD,YAAY,EAAE,SAAS,2BAA2B,EAAE;CAiBjE;AAED,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,SAAS,UAAU,EAAE,EAC9B,WAAW,GAAE,iBAA6B,GACzC,IAAI,CAUN"}

package/dist/superseded-plugins.js

@@ -0,0 +1,41 @@
+import { CloudConfigError } from "./errors.js";
+import { pluginName } from "./plugin-attribution.js";
+const SUPERSEDED_SPECS = [
+    {
+        plugin: "DashboardPlugin",
+        replacement: "CloudDashboardPlugin",
+        reason: "Vendure Cloud serves the Dashboard itself, from a directory that only exists inside the runtime image. CloudDashboardPlugin keeps the route and supplies the rest.",
+    },
+];
+export const SUPERSEDED_PLUGINS = SUPERSEDED_SPECS;
+export function findSupersededPlugin(name) {
+    return SUPERSEDED_PLUGINS.find((superseded) => superseded.plugin === name);
+}
+export class SupersededPluginDeclaredError extends CloudConfigError {
+    declarations;
+    constructor(declarations) {
+        const detail = declarations
+            .map(({ superseded, extension }) => {
+            const where = extension === undefined
+                ? superseded.plugin
+                : `${superseded.plugin}, in the Vendure Extension "${extension}",`;
+            return `  ${where} is supplied by Vendure Cloud.\n    ${superseded.reason}\n    Use ${superseded.replacement} instead.`;
+        })
+            .join("\n\n");
+        super(`Vendure Cloud: this configuration declares ${declarations.length} plugin${declarations.length === 1 ? "" : "s"} that the platform supplies. Refusing to boot.\n\n${detail}\n`);
+        this.declarations = declarations;
+    }
+}
+export function assertNoSupersededPluginDeclared(plugins, extensionOf = new Map()) {
+    const declarations = [];
+    for (const plugin of plugins) {
+        const superseded = findSupersededPlugin(pluginName(plugin));
+        if (!superseded)
+            continue;
+        declarations.push({ superseded, extension: extensionOf.get(plugin)?.id });
+    }
+    if (declarations.length > 0) {
+        throw new SupersededPluginDeclaredError(declarations);
+    }
+}
+//# sourceMappingURL=superseded-plugins.js.map

package/dist/superseded-plugins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"superseded-plugins.js","sourceRoot":"","sources":["../src/superseded-plugins.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAA2C,UAAU,EAAE,MAAM,yBAAyB,CAAC;AA6B9F,MAAM,gBAAgB,GAAG;IACvB;QACE,MAAM,EAAE,iBAAiB;QACzB,WAAW,EAAE,sBAAsB;QACnC,MAAM,EACJ,oKAAoK;KACvK;CAC6C,CAAC;AAEjD,MAAM,CAAC,MAAM,kBAAkB,GAAgC,gBAAgB,CAAC;AAEhF,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;AAC7E,CAAC;AAUD,MAAM,OAAO,6BAA8B,SAAQ,gBAAgB;IACxD,YAAY,CAAyC;IAE9D,YAAY,YAAoD;QAC9D,MAAM,MAAM,GAAG,YAAY;aACxB,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE;YACjC,MAAM,KAAK,GACT,SAAS,KAAK,SAAS;gBACrB,CAAC,CAAC,UAAU,CAAC,MAAM;gBACnB,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,+BAA+B,SAAS,IAAI,CAAC;YACvE,OAAO,KAAK,KAAK,uCAAuC,UAAU,CAAC,MAAM,aAAa,UAAU,CAAC,WAAW,WAAW,CAAC;QAC1H,CAAC,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,CAAC;QAChB,KAAK,CACH,8CAA8C,YAAY,CAAC,MAAM,UAC/D,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACnC,qDAAqD,MAAM,IAAI,CAChE,CAAC;QACF,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACnC,CAAC;CACF;AAED,MAAM,UAAU,gCAAgC,CAC9C,OAA8B,EAC9B,cAAiC,IAAI,GAAG,EAAE;IAE1C,MAAM,YAAY,GAAkC,EAAE,CAAC;IACvD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,oBAAoB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,YAAY,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,6BAA6B,CAAC,YAAY,CAAC,CAAC;IACxD,CAAC;AACH,CAAC"}

package/dist/vendure-extension.d.ts

@@ -0,0 +1,38 @@
+import type { VendureConfig } from "@vendure/core";
+import { CloudConfigError } from "./errors.js";
+import type { PluginLike } from "./plugin-attribution.js";
+export type VendurePluginEntry = NonNullable<VendureConfig["plugins"]>[number];
+declare const EXTENSION: unique symbol;
+export interface VendureExtensionInput {
+    id: string;
+    plugins: readonly VendurePluginEntry[];
+    migrations?: readonly string[];
+    outboundHosts?: readonly string[];
+}
+export interface VendureExtension {
+    readonly [EXTENSION]: true;
+    readonly id: string;
+    readonly plugins: readonly VendurePluginEntry[];
+    readonly migrations: readonly string[];
+    readonly outboundHosts: readonly string[];
+    readonly declaredIn: string | undefined;
+}
+export type CloudPluginEntry = VendurePluginEntry | VendureExtension;
+export declare class InvalidVendureExtensionError extends CloudConfigError {
+}
+export declare class DuplicateVendureExtensionIdError extends CloudConfigError {
+    readonly id: string;
+    constructor(id: string);
+}
+export declare function defineVendureExtension(extension: VendureExtensionInput): VendureExtension;
+export declare function isVendureExtension(value: unknown): value is VendureExtension;
+export declare function resolveMigrationGlob(extension: VendureExtension, glob: string): string;
+export declare function resolveExtensionMigrations(extension: VendureExtension): string[];
+export interface FlattenedPlugins {
+    readonly plugins: readonly VendurePluginEntry[];
+    readonly extensions: readonly VendureExtension[];
+    readonly extensionOf: ReadonlyMap<PluginLike, VendureExtension>;
+}
+export declare function flattenVendureExtensions(entries: readonly CloudPluginEntry[]): FlattenedPlugins;
+export {};
+//# sourceMappingURL=vendure-extension.d.ts.map

package/dist/vendure-extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vendure-extension.d.ts","sourceRoot":"","sources":["../src/vendure-extension.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAI1D,MAAM,MAAM,kBAAkB,GAAG,WAAW,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAK/E,QAAA,MAAM,SAAS,eAAgD,CAAC;AAMhE,MAAM,WAAW,qBAAqB;IAIpC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAIvC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAE/B,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAGhD,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAI1C,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAMD,MAAM,MAAM,gBAAgB,GAAG,kBAAkB,GAAG,gBAAgB,CAAC;AAErE,qBAAa,4BAA6B,SAAQ,gBAAgB;CAAG;AAErE,qBAAa,gCAAiC,SAAQ,gBAAgB;IACpE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;gBAER,EAAE,EAAE,MAAM;CAMvB;AAuBD,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,qBAAqB,GAAG,gBAAgB,CA4BzF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAE5E;AASD,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAQtF;AAED,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAEhF;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAChD,QAAQ,CAAC,UAAU,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACjD,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;CACjE;AASD,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,GAAG,gBAAgB,CAyB/F"}

package/dist/vendure-extension.js

@@ -0,0 +1,111 @@
+import { dirname, isAbsolute, resolve } from "node:path";
+import { CloudConfigError } from "./errors.js";
+import { stackFrameFiles } from "./stack.js";
+// Registered for the same reason the config handle's symbol is (ADR-0043): a second copy of
+// this package in the tree would otherwise produce extensions that `defineCloudConfig`
+// silently treats as plugins, and core would be handed an object it cannot configure.
+const EXTENSION = Symbol.for("vendure-cloud.vendure-extension");
+export class InvalidVendureExtensionError extends CloudConfigError {
+}
+export class DuplicateVendureExtensionIdError extends CloudConfigError {
+    id;
+    constructor(id) {
+        super(`Vendure Cloud: the Vendure Extension id "${id}" is declared more than once in this configuration.\n  An id identifies one extension, so that a boot message can name the extension a plugin came from.\n  Give each extension its own id, and declare each extension once.\n`);
+        this.id = id;
+    }
+}
+// ADR-0047's one mechanical trap: `migrations: ['./migrations/*.js']` written in a package's
+// own index means that package's directory, not the directory of the configuration file that
+// referenced it. `defineVendureExtension` reads the declaring file off the call stack. It
+// does not take `import.meta.url` as an argument, so an author has nothing to pass. An author
+// who copies a declaration into another file and leaves the old value behind gets a glob that
+// matches nothing and raises nothing. Reading the call stack also works whichever module
+// system the build emits, including CommonJS output, where `import.meta` is unavailable.
+//
+// Installing our own `prepareStackTrace` does more than give us the frames.
+// `source-map-support` and Node's `--enable-source-maps` both work by replacing that
+// hook, and both would hand back the original `.ts` path. The runtime image runs
+// `node --enable-source-maps` (`apps/vc-builder/src/runtime.ts`), so without this the glob
+// would resolve against a source tree that the image does not ship. Replacing the hook
+// bypasses them and yields the emitted file, which is what the migrations sit beside.
+function declaringFile(boundary) {
+    // The first frame specifically, not the first that happens to name a file: a caller that is
+    // not a file on disk has no declaring file, and taking the next frame down would silently
+    // hand back whichever of our own callers happened to be beneath it.
+    return stackFrameFiles(boundary, 2)[0];
+}
+export function defineVendureExtension(extension) {
+    const { id } = extension;
+    if (typeof id !== "string" || id.trim() === "" || /\s/.test(id)) {
+        throw new InvalidVendureExtensionError(`Vendure Cloud: a Vendure Extension needs an id, and ${JSON.stringify(id)} is not one.\n  Give it a short stable name with no spaces, such as 'acme.erp'.\n`);
+    }
+    const migrations = [...(extension.migrations ?? [])];
+    const declaredIn = declaringFile(defineVendureExtension);
+    // Raised at definition time rather than when the glob is read. A runtime that cannot report
+    // the declaring file then fails on its first run, instead of producing a migration glob that
+    // matches nothing.
+    if (declaredIn === undefined && migrations.some((glob) => !isAbsolute(glob))) {
+        throw new InvalidVendureExtensionError(`Vendure Cloud: the Vendure Extension "${id}" declares migrations as relative globs, and this runtime does not report the file that declared them.\n  A relative glob is relative to that file, so it cannot be resolved. Write them as absolute paths instead.\n`);
+    }
+    return Object.freeze({
+        [EXTENSION]: true,
+        id,
+        plugins: Object.freeze([...extension.plugins]),
+        migrations: Object.freeze(migrations),
+        outboundHosts: Object.freeze([...(extension.outboundHosts ?? [])]),
+        declaredIn,
+    });
+}
+export function isVendureExtension(value) {
+    return typeof value === "object" && value !== null && EXTENSION in value;
+}
+// String path resolution only; `loadExtensionMigrations` in `migrations.ts` is what reads
+// what the result matches. Recording which extension owns each applied migration on the
+// Deployment row is the other half of ADR-0048 and is CLO-423.
+//
+// Singular as well as plural because the loader reports a glob that matched nothing by the
+// text the author wrote, and pairing that text back up with a positional result would be
+// index arithmetic that can be got wrong.
+export function resolveMigrationGlob(extension, glob) {
+    if (isAbsolute(glob))
+        return glob;
+    if (extension.declaredIn === undefined) {
+        throw new InvalidVendureExtensionError(`Vendure Cloud: cannot resolve the migrations glob "${glob}" declared by the Vendure Extension "${extension.id}", because the file that declared it is unknown.\n`);
+    }
+    return resolve(dirname(extension.declaredIn), glob);
+}
+export function resolveExtensionMigrations(extension) {
+    return extension.migrations.map((glob) => resolveMigrationGlob(extension, glob));
+}
+// Turns the array a customer wrote — plugins and extensions mixed — into the flat array core
+// takes, in declaration order, and records which extension each plugin came from so
+// `recordPlatformFieldWrites` can name both.
+//
+// A plugin declared by two extensions maps to the first that declared it. Attribution is
+// per plugin class, because that is where core keeps the configuration function, so there is
+// no finer answer available here. Detecting that overlap at all is CLO-418.
+export function flattenVendureExtensions(entries) {
+    const plugins = [];
+    const extensions = [];
+    const extensionOf = new Map();
+    const seenIds = new Set();
+    for (const entry of entries) {
+        if (!isVendureExtension(entry)) {
+            plugins.push(entry);
+            continue;
+        }
+        if (seenIds.has(entry.id)) {
+            throw new DuplicateVendureExtensionIdError(entry.id);
+        }
+        seenIds.add(entry.id);
+        extensions.push(entry);
+        for (const plugin of entry.plugins) {
+            plugins.push(plugin);
+            if (!extensionOf.has(plugin)) {
+                extensionOf.set(plugin, entry);
+            }
+        }
+    }
+    return { plugins, extensions, extensionOf };
+}
+//# sourceMappingURL=vendure-extension.js.map

package/dist/vendure-extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vendure-extension.js","sourceRoot":"","sources":["../src/vendure-extension.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAO7C,4FAA4F;AAC5F,uFAAuF;AACvF,sFAAsF;AACtF,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;AAwChE,MAAM,OAAO,4BAA6B,SAAQ,gBAAgB;CAAG;AAErE,MAAM,OAAO,gCAAiC,SAAQ,gBAAgB;IAC3D,EAAE,CAAS;IAEpB,YAAY,EAAU;QACpB,KAAK,CACH,4CAA4C,EAAE,gOAAgO,CAC/Q,CAAC;QACF,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;CACF;AAED,6FAA6F;AAC7F,6FAA6F;AAC7F,0FAA0F;AAC1F,8FAA8F;AAC9F,8FAA8F;AAC9F,yFAAyF;AACzF,yFAAyF;AACzF,EAAE;AACF,4EAA4E;AAC5E,qFAAqF;AACrF,iFAAiF;AACjF,2FAA2F;AAC3F,uFAAuF;AACvF,sFAAsF;AACtF,SAAS,aAAa,CAAC,QAAuC;IAC5D,4FAA4F;IAC5F,0FAA0F;IAC1F,oEAAoE;IACpE,OAAO,eAAe,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,SAAgC;IACrE,MAAM,EAAE,EAAE,EAAE,GAAG,SAAS,CAAC;IACzB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,4BAA4B,CACpC,uDAAuD,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,mFAAmF,CAC7J,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,aAAa,CAAC,sBAAsB,CAAC,CAAC;IAEzD,4FAA4F;IAC5F,6FAA6F;IAC7F,mBAAmB;IACnB,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,4BAA4B,CACpC,yCAAyC,EAAE,uNAAuN,CACnQ,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,CAAC,SAAS,CAAC,EAAE,IAAI;QACjB,EAAE;QACF,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAC9C,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;QACrC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC;QAClE,UAAU;KACF,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,SAAS,IAAI,KAAK,CAAC;AAC3E,CAAC;AAED,0FAA0F;AAC1F,wFAAwF;AACxF,+DAA+D;AAC/D,EAAE;AACF,2FAA2F;AAC3F,yFAAyF;AACzF,0CAA0C;AAC1C,MAAM,UAAU,oBAAoB,CAAC,SAA2B,EAAE,IAAY;IAC5E,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,SAAS,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,IAAI,4BAA4B,CACpC,sDAAsD,IAAI,wCAAwC,SAAS,CAAC,EAAE,oDAAoD,CACnK,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,SAA2B;IACpE,OAAO,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;AACnF,CAAC;AAQD,6FAA6F;AAC7F,oFAAoF;AACpF,6CAA6C;AAC7C,EAAE;AACF,yFAAyF;AACzF,6FAA6F;AAC7F,4EAA4E;AAC5E,MAAM,UAAU,wBAAwB,CAAC,OAAoC;IAC3E,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,MAAM,UAAU,GAAuB,EAAE,CAAC;IAC1C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAgC,CAAC;IAC5D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,gCAAgC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtB,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;AAC9C,CAAC"}

package/package.json

@@ -0,0 +1,64 @@
+{
+  "name": "@vendure/cloud-config",
+  "version": "0.0.0",
+  "type": "module",
+  "description": "The Cloud Config interface a Vendure Cloud application is written against.",
+  "license": "MIT",
+  "homepage": "https://github.com/vendurehq/cloud/tree/main/packages/cloud-config#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/vendurehq/cloud.git",
+    "directory": "packages/cloud-config"
+  },
+  "bugs": {
+    "url": "https://github.com/vendurehq/cloud/issues"
+  },
+  "keywords": [
+    "vendure",
+    "vendure-cloud",
+    "ecommerce",
+    "configuration"
+  ],
+  "engines": {
+    "node": ">=20.19.0 <21 || >=22.12.0"
+  },
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit -p tsconfig.test.json",
+    "lint": "biome lint ./src ./test",
+    "format": "biome format --write ./src ./test",
+    "check": "biome check ./src ./test",
+    "test": "vitest run",
+    "test:all": "vitest run"
+  },
+  "dependencies": {
+    "reflect-metadata": "^0.2.2",
+    "tinyglobby": "^0.2.15"
+  },
+  "peerDependencies": {
+    "@vendure/core": "^3.7.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.20.0",
+    "@vendure-cloud/tsconfig": "workspace:*",
+    "@vendure/core": "3.7.2",
+    "typescript": "catalog:",
+    "vitest": "^3.2.6"
+  }
+}