@vendure/cloud-config 0.4.0 → 0.5.0-dev.20261016123507.ge07a06e

package/dist/migrations.js

@@ -1,29 +1,24 @@
 import { createRequire } from "node:module";
 import { extname } from "node:path";
 import { pathToFileURL } from "node:url";
-// The second runtime dependency of a package customers install, so: Node's own `fs.glob`
-// landed in 22.2.0 and is absent from Node 20, which `SUPPORTED_NODE_MAJORS` offers as a Cloud
-// Runtime and which is this package's `engines` floor. Hand-rolling the matcher is worse than
-// a dependency, because a glob that fails to match is a migration that never runs and that
-// surfaces as schema drift on a customer's database rather than as an error. tinyglobby over
-// `fast-glob` or `glob` for size — three packages against roughly ten. It also extends the
-// module graph ADR-0049 bars top-level await from, which the CommonJS half of
-// `managed-build.test.ts` is what checks.
+// Node's `fs.glob` is absent from Node 20, which `SUPPORTED_NODE_MAJORS` offers and `engines`
+// allows. A hand-rolled matcher that misses a file means a migration never runs, which shows up as
+// schema drift and not as an error. tinyglobby over `fast-glob` or `glob` for size: three packages
+// against roughly ten. It extends the module graph ADR-0049 bars top-level await from, which the
+// CommonJS half of `managed-build.test.ts` checks.
 import { glob } from "tinyglobby";
 import { CloudConfigError } from "./errors.js";
 import { resolveMigrationGlob } from "./vendure-extension.js";
-// Any message here long enough to exceed `published-output.test.ts`'s emitted-line cap — which
-// reads a long line as evidence that the build minified the package — is written as a line per
-// line and joined, because biome's `useTemplate` refuses the other way of breaking one up. The
-// trailing empty entry is the message's own closing newline. Shorter messages elsewhere in this
-// package stay single template literals rather than being converted to match.
+// A message long enough to exceed the emitted-line cap in `published-output.test.ts`, which reads a
+// long line as evidence of minification, is written as one entry per line and joined, because
+// biome's `useTemplate` refuses string concatenation. The trailing empty entry is the closing
+// newline.
 function message(lines) {
     return [...lines, ""].join("\n");
 }
-// Raised for a glob that contributed no migrations, which is two different states and used to
-// be reported as one. A glob matching nothing at all is a wrong path; a glob matching files
-// none of which is a migration is a glob that is too wide. Telling a customer "it matches
-// nothing" in the second case sends them looking for a typo that is not there.
+// Raised for a glob that contributed no migrations. A glob matching nothing is a wrong path; a glob
+// matching files none of which is a migration is too wide, and saying "it matches nothing" there
+// sends the customer looking for a typo.
 export class MigrationGlobMatchedNoMigrationsError extends CloudConfigError {
     extensionId;
     pattern;
@@ -51,18 +46,15 @@ export class MigrationGlobMatchedNoMigrationsError extends CloudConfigError {
         this.matchedFiles = matchedFiles;
     }
 }
-// Capped, because a wide glob over a build output directory can match a great many files and
-// an error message that prints all of them is not one anybody reads.
+// Capped because a wide glob over a build directory can match a great many files.
 function describeFiles(files) {
     const shown = files.slice(0, 3).join(", ");
     return files.length > 3 ? `${shown}, and ${files.length - 3} more` : shown;
 }
-// `isMigrationClass` takes every exported function, because that is as far as a runtime value
-// can be read and is what TypeORM does. Not every function can be constructed: an arrow
-// function exported from a migrations file — a shared helper, which is exactly what people
-// leave in a migrations directory — throws `TypeError: X is not a constructor`. Without this
-// that reaches the customer raw, naming neither the extension nor the file, which is the one
-// failure path here that had no message of its own.
+// `isMigrationClass` accepts every exported function, as TypeORM does, but not every function can
+// be constructed. An exported arrow function, such as a shared helper left in a migrations
+// directory, throws `TypeError: X is not a constructor`, which without this error names neither the
+// extension nor the file.
 export class MigrationNotConstructibleError extends CloudConfigError {
     extensionId;
     exportName;
@@ -93,34 +85,28 @@ export class InvalidMigrationNameError extends CloudConfigError {
         this.migrationName = migrationName;
     }
 }
-// TypeORM's own list, from `importClassesFromDirectories` in 0.3.30: a glob's matches are
-// filtered to these suffixes before anything is imported. Restated because the glob is
-// resolved here now and never reaches that function, and a customer who wrote
-// `./migrations/*` would otherwise have us importing the source map beside each migration.
+// TypeORM's list from `importClassesFromDirectories` in 0.3.30: matches are filtered to these
+// suffixes before import. The glob is resolved here and never reaches that function, so without the
+// filter `./migrations/*` would import the source map beside each migration.
 const MIGRATION_FILE_SUFFIXES = [".js", ".mjs", ".cjs", ".ts", ".mts", ".cts"];
-// TypeORM drops `.d.ts` and does not consider the other two spellings. A declaration file is
-// never a migration whichever suffix it carries, so all three are dropped here.
+// TypeORM drops `.d.ts` only. A declaration file is never a migration, so all three are dropped.
 const DECLARATION_FILE_SUFFIXES = [".d.ts", ".d.mts", ".d.cts"];
-// The suffixes above that need a compiler before they can be read. See `importMigrationFile`.
+// The suffixes above that need a compiler to be read. See `importMigrationFile`.
 const TYPESCRIPT_FILE_SUFFIXES = [".ts", ".mts", ".cts"];
 function isMigrationFile(file) {
     if (DECLARATION_FILE_SUFFIXES.some((suffix) => file.endsWith(suffix)))
         return false;
     return MIGRATION_FILE_SUFFIXES.some((suffix) => file.endsWith(suffix));
 }
-// Loading one migration file, by whichever route can actually read it.
+// A managed build matches emitted JavaScript and `import()` is enough. Running from source needs
+// more: `vendure dev` starts its processes through the project's TypeScript compiler, which
+// registers against the CommonJS loader, and a dynamic `import()` goes to the ESM loader and never
+// reaches it. Node's type stripping covers that only from 22.18, and this package supports 20.19
+// and 22.12, so in between the migration chain would be unreadable and the schema silently not
+// built.
 //
-// A managed build matches emitted JavaScript and `import()` is the whole answer. Running from
-// source is what makes this more than one line: `vendure dev` starts its processes through the
-// project's TypeScript compiler, which registers itself against the CommonJS loader, and a dynamic
-// `import()` goes to the ESM loader instead and never reaches it. Node's own type stripping covers
-// that gap only from 22.18, and this package supports 20.19 and 22.12, so on the versions in
-// between the migration chain would be unreadable and the schema would silently not be built.
-//
-// The hook is looked up rather than tried, so a migration that throws while it loads reports its
-// own error once instead of being run twice and reported as a resolution failure. Only TypeScript
-// takes this route: emitted JavaScript is loaded exactly as it was before, because that is the path
-// a deploy uses and nothing about it needed changing.
+// The hook is looked up and not tried, so a migration that throws while loading reports its own
+// error once instead of running twice and being reported as a resolution failure.
 async function importMigrationFile(file) {
     const suffix = extname(file);
     if (TYPESCRIPT_FILE_SUFFIXES.includes(suffix)) {
@@ -131,21 +117,17 @@ async function importMigrationFile(file) {
     }
     return import(pathToFileURL(file).href);
 }
-// Every function is taken, which is what TypeORM does and is as far as either of us can tell
-// from a value at runtime. A migrations file that also exports a helper has that helper read
-// as a migration, and which refusal it reaches depends on what kind of function it is: a
-// `function` declaration constructs and fails `InvalidMigrationNameError` on its name, and an
-// arrow function cannot be constructed at all and fails `MigrationNotConstructibleError`.
+// Every function is taken, as TypeORM does. A helper exported from a migrations file is read as a
+// migration: a `function` declaration constructs and fails `InvalidMigrationNameError` on its name,
+// and an arrow function fails `MigrationNotConstructibleError`.
 function isMigrationClass(value) {
     return typeof value === "function";
 }
-// The walk `importClassesFromDirectories` does over what a migration file exported. It has to
-// be a walk rather than a read of the module's named exports, because a file emitted as
-// CommonJS is seen through `import()` as a namespace whose `default` is the whole
-// `module.exports` object, so its classes sit one level down — and are then reachable twice,
-// once through `default` and once through the named re-export Node synthesizes. `seen`
-// collapses that second sighting, and terminates on an export that refers to itself, which
-// TypeORM's version does not.
+// The walk `importClassesFromDirectories` does over what a migration file exported. A file emitted
+// as CommonJS is seen through `import()` as a namespace whose `default` is the whole
+// `module.exports`, so its classes sit one level down and are reachable twice, through `default`
+// and through the named re-export Node synthesizes. `seen` collapses the second sighting and
+// terminates on an export that refers to itself, which TypeORM's version does not.
 function collectMigrationClasses(exported, seen, into) {
     if (isMigrationClass(exported)) {
         if (seen.has(exported))
@@ -157,24 +139,20 @@ function collectMigrationClasses(exported, seen, into) {
     if (typeof exported !== "object" || exported === null || seen.has(exported))
         return;
     seen.add(exported);
-    // Arrays included: `Object.values` yields their elements, so `export default [A, B]` is
-    // read without a branch of its own.
+    // `Object.values` yields array elements too, so `export default [A, B]` needs no separate branch.
     for (const value of Object.values(exported)) {
         collectMigrationClasses(value, seen, into);
     }
 }
-// `MigrationExecutor.getMigrations` reads `migration.name || migration.constructor.name` from
-// an *instance* — `DataSource` constructs every migration class before the executor sees one
-// — and parses the timestamp out of the last 13 characters of that string. Both are mirrored
-// rather than approximated. Reading the static class name instead is the same answer for
-// every migration that does not declare `name`, and a different one for every migration that
-// does, and in that case the ledger, this order and the ownership snapshot would disagree
+// `MigrationExecutor.getMigrations` reads `migration.name || migration.constructor.name` from an
+// instance, since `DataSource` constructs every migration class first, and parses the timestamp
+// from the last 13 characters. Both are mirrored: the static class name differs for a migration
+// that declares `name`, and the ledger, this order and the ownership snapshot would then disagree
 // about what the migration is called.
 //
-// This is a second construction rather than a free one: TypeORM builds its own instance of the
-// same class when the DataSource starts, so a migration whose constructor has side effects runs
-// them twice. Migration constructors are empty in everything Vendure's own tooling generates,
-// and the alternative is an identity that can disagree with the ledger, which is worse.
+// This is a second construction: TypeORM builds its own instance when the DataSource starts, so a
+// constructor with side effects runs twice. Migration constructors are empty in everything
+// Vendure's tooling generates.
 function identify(migration, extension, file) {
     let instance;
     try {
@@ -185,9 +163,8 @@ function identify(migration, extension, file) {
     }
     const name = instance.name || instance.constructor.name;
     const timestamp = Number.parseInt(name.slice(-13), 10);
-    // TypeORM's guard is `!timestamp || isNaN(timestamp)`: it rejects a name that parses to
-    // nothing and a name that parses to zero. `<= 0` is the same two cases, because a class
-    // name cannot contain a minus sign for `parseInt` to read.
+    // TypeORM's guard is `!timestamp || isNaN(timestamp)`. `<= 0` covers the same cases, since a
+    // class name cannot contain a minus sign.
     if (Number.isNaN(timestamp) || timestamp <= 0) {
         throw new InvalidMigrationNameError(extension.id, name, file);
     }
@@ -199,23 +176,19 @@ async function loadOneExtension(extension) {
     const seenExports = new Set();
     for (const pattern of extension.migrations) {
         const resolved = resolveMigrationGlob(extension, pattern);
-        // `expandDirectories` off, so a glob means exactly what the customer wrote instead of
-        // silently acquiring a `/**/*` when it happens to name a directory.
-        // Sorted so that neither what gets imported first nor what an error message lists depends
-        // on the order the directory happened to be walked in. The sort that decides execution is
-        // the one in `loadExtensionMigrations`; this one only keeps the steps before it
-        // reproducible.
+        // `expandDirectories` is off so a glob means what the customer wrote and does not gain a
+        // `/**/*` when it names a directory. Sorted so import order and error messages do not depend on
+        // directory walk order; the sort that decides execution is in `loadExtensionMigrations`.
         const matched = (await glob(resolved, { absolute: true, onlyFiles: true, expandDirectories: false })).sort();
         const files = matched.filter(isMigrationFile);
-        // `matched` rather than `files`, so the message can tell a wrong path apart from a glob
-        // whose every match was filtered out as not being a migration file.
+        // `matched`, not `files`, so the message can tell a wrong path from a glob whose matches were
+        // all filtered out.
         if (files.length === 0) {
             throw new MigrationGlobMatchedNoMigrationsError(extension.id, pattern, resolved, matched);
         }
         for (const file of files) {
-            // A second glob in the same extension matching a file the first already matched adds
-            // nothing. Across extensions the file is imported once by the module cache but claimed
-            // twice, which is a real ownership collision rather than an overlap, and is left for
+            // A second glob in the same extension matching an already matched file adds nothing. Across
+            // extensions the file is imported once but claimed twice, a real ownership collision left for
             // TypeORM to reject by name.
             if (importedFiles.has(file))
                 continue;
@@ -231,21 +204,18 @@ async function loadOneExtension(extension) {
     }
     return loaded;
 }
-// ADR-0048 part 2. TypeORM sorts the whole migration set by timestamp and
-// `Array.prototype.sort` is stable, so migrations carrying equal timestamps run in whatever
-// order the array it was handed holds them. Today that array comes from `glob.sync`, which
-// does not sort, so a tie resolves by filesystem walk order and can differ between the
-// customer's machine and the managed build. The order below is a value computed here instead.
+// ADR-0048 part 2. TypeORM sorts the whole set by timestamp and `Array.prototype.sort` is stable,
+// so migrations with equal timestamps run in the order of the array handed over. That array comes
+// from `glob.sync`, which does not sort, so a tie resolves by filesystem walk order and can differ
+// between the customer's machine and the managed build. The order below is computed here.
 //
-// **Ordering across extensions is not a contract and this does not make it one.** An
-// extension cannot declare that it must migrate after another; extensions own their own
-// tables and the coupling is unsupported. The keys exist so a tie resolves the same way
-// everywhere, not so a dependency can be expressed.
+// Ordering across extensions is not a contract. An extension cannot declare that it migrates after
+// another; extensions own their tables and the coupling is unsupported. The keys only make a tie
+// resolve the same way everywhere.
 export async function loadExtensionMigrations(extensions) {
     const found = [];
-    // Serial rather than concurrent. The work is a handful of directory reads and the module
-    // cache absorbs the rest, and a concurrent version would have to sort its results back into
-    // declaration order before the tie-break below could read it.
+    // Serial: the work is a handful of directory reads, and a concurrent version would have to sort
+    // its results back into declaration order before the tie-break below.
     for (const [declarationOrder, extension] of extensions.entries()) {
         for (const loaded of await loadOneExtension(extension)) {
             found.push({ loaded, declarationOrder });
@@ -255,19 +225,15 @@ export async function loadExtensionMigrations(extensions) {
         if (a.loaded.timestamp !== b.loaded.timestamp) {
             return a.loaded.timestamp - b.loaded.timestamp;
         }
-        // Not load-bearing as this function is written: the array is built by walking the
-        // extensions in declaration order and `sort` is stable, so the key agrees with the order
-        // the entries are already in. It is written out because ADR-0048 makes the order a value
-        // we computed rather than one we inherited, and because loading the extensions
-        // concurrently — the obvious future change to the loop above — would take the input order
-        // away without any test noticing.
+        // Not load-bearing as written: entries are built in declaration order and `sort` is stable. It
+        // is explicit because ADR-0048 makes the order a computed value, and loading extensions
+        // concurrently would remove the input order without any test noticing.
         if (a.declarationOrder !== b.declarationOrder) {
             return a.declarationOrder - b.declarationOrder;
         }
-        // Codepoint comparison rather than `localeCompare`, which reads the runtime's locale and
-        // would order the same two migrations differently on two machines — the one thing this
-        // whole function exists to stop. A tie that survives all three keys is two migrations
-        // with one ledger identity, which TypeORM's own duplicate check rejects by name.
+        // Codepoint comparison, because `localeCompare` reads the runtime's locale and would order the
+        // same two migrations differently on two machines. A tie surviving all three keys is two
+        // migrations with one ledger identity, which TypeORM's duplicate check rejects by name.
         if (a.loaded.name < b.loaded.name)
             return -1;
         return a.loaded.name > b.loaded.name ? 1 : 0;

package/dist/migrations.js.map

@@ -1 +1 @@
-{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../src/migrations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,yFAAyF;AACzF,+FAA+F;AAC/F,8FAA8F;AAC9F,2FAA2F;AAC3F,6FAA6F;AAC7F,2FAA2F;AAC3F,8EAA8E;AAC9E,0CAA0C;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAyB,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAgCrF,+FAA+F;AAC/F,+FAA+F;AAC/F,+FAA+F;AAC/F,gGAAgG;AAChG,8EAA8E;AAC9E,SAAS,OAAO,CAAC,KAAe;IAC9B,OAAO,CAAC,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,8FAA8F;AAC9F,4FAA4F;AAC5F,0FAA0F;AAC1F,+EAA+E;AAC/E,MAAM,OAAO,qCAAsC,SAAQ,gBAAgB;IAChE,WAAW,CAAS;IACpB,OAAO,CAAS;IAChB,QAAQ,CAAS;IACjB,YAAY,CAAoB;IAEzC,YAAY,WAAmB,EAAE,OAAe,EAAE,QAAgB,EAAE,YAAsB;QACxF,MAAM,QAAQ,GAAG,yCAAyC,WAAW,mCAAmC,OAAO,GAAG,CAAC;QACnH,MAAM,YAAY,GAAG,sEAAsE,QAAQ,IAAI,CAAC;QACxG,KAAK,CACH,YAAY,CAAC,MAAM,KAAK,CAAC;YACvB,CAAC,CAAC,OAAO,CAAC;gBACN,GAAG,QAAQ,2BAA2B;gBACtC,YAAY;gBACZ,sMAAsM;gBACtM,qCAAqC;aACtC,CAAC;YACJ,CAAC,CAAC,OAAO,CAAC;gBACN,GAAG,QAAQ,qBAAqB,YAAY,CAAC,MAAM,mCAAmC;gBACtF,YAAY;gBACZ,sBAAsB,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,kDAAkD,aAAa,CAAC,YAAY,CAAC,EAAE;gBACvI,yEAAyE;aAC1E,CAAC,CACP,CAAC;QACF,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACnC,CAAC;CACF;AAED,6FAA6F;AAC7F,qEAAqE;AACrE,SAAS,aAAa,CAAC,KAAe;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,KAAK,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;AAC7E,CAAC;AAED,8FAA8F;AAC9F,wFAAwF;AACxF,2FAA2F;AAC3F,6FAA6F;AAC7F,6FAA6F;AAC7F,oDAAoD;AACpD,MAAM,OAAO,8BAA+B,SAAQ,gBAAgB;IACzD,WAAW,CAAS;IACpB,UAAU,CAAS;IAE5B,YAAY,WAAmB,EAAE,UAAkB,EAAE,IAAY,EAAE,KAAc;QAC/E,KAAK,CACH,OAAO,CAAC;YACN,yCAAyC,WAAW,8BAA8B,UAAU,kCAAkC;YAC9H,iBAAiB,IAAI,GAAG;YACxB,uKAAuK;YACvK,uGAAuG;SACxG,CAAC,CACH,CAAC;QACF,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED,MAAM,OAAO,yBAA0B,SAAQ,gBAAgB;IACpD,WAAW,CAAS;IACpB,aAAa,CAAS;IAE/B,YAAY,WAAmB,EAAE,aAAqB,EAAE,IAAY;QAClE,KAAK,CACH,OAAO,CAAC;YACN,yCAAyC,WAAW,iCAAiC,aAAa,uCAAuC;YACzI,iBAAiB,IAAI,GAAG;YACxB,2JAA2J;YAC3J,yGAAyG;YACzG,kKAAkK;SACnK,CAAC,CACH,CAAC;QACF,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;CACF;AAED,0FAA0F;AAC1F,uFAAuF;AACvF,8EAA8E;AAC9E,2FAA2F;AAC3F,MAAM,uBAAuB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAE/E,6FAA6F;AAC7F,gFAAgF;AAChF,MAAM,yBAAyB,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAEhE,8FAA8F;AAC9F,MAAM,wBAAwB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAEzD,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACpF,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,uEAAuE;AACvE,EAAE;AACF,8FAA8F;AAC9F,+FAA+F;AAC/F,mGAAmG;AACnG,mGAAmG;AACnG,6FAA6F;AAC7F,8FAA8F;AAC9F,EAAE;AACF,iGAAiG;AACjG,kGAAkG;AAClG,oGAAoG;AACpG,sDAAsD;AACtD,KAAK,UAAU,mBAAmB,CAAC,IAAY;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,wBAAwB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,OAAO,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC;YACrD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,6FAA6F;AAC7F,6FAA6F;AAC7F,yFAAyF;AACzF,8FAA8F;AAC9F,0FAA0F;AAC1F,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC;AACrC,CAAC;AAED,8FAA8F;AAC9F,wFAAwF;AACxF,kFAAkF;AAClF,6FAA6F;AAC7F,uFAAuF;AACvF,2FAA2F;AAC3F,8BAA8B;AAC9B,SAAS,uBAAuB,CAAC,QAAiB,EAAE,IAAiB,EAAE,IAAsB;IAC3F,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO;QAC/B,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpB,OAAO;IACT,CAAC;IACD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO;IACpF,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnB,wFAAwF;IACxF,oCAAoC;IACpC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,uBAAuB,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,8FAA8F;AAC9F,6FAA6F;AAC7F,6FAA6F;AAC7F,yFAAyF;AACzF,6FAA6F;AAC7F,0FAA0F;AAC1F,sCAAsC;AACtC,EAAE;AACF,+FAA+F;AAC/F,gGAAgG;AAChG,8FAA8F;AAC9F,wFAAwF;AACxF,SAAS,QAAQ,CAAC,SAAyB,EAAE,SAA2B,EAAE,IAAY;IACpF,IAAI,QAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,SAAS,EAAE,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,8BAA8B,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC;IACxD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACvD,wFAAwF;IACxF,wFAAwF;IACxF,2DAA2D;IAC3D,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,yBAAyB,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,SAA2B;IACzD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAEtC,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC1D,sFAAsF;QACtF,oEAAoE;QACpE,0FAA0F;QAC1F,0FAA0F;QAC1F,gFAAgF;QAChF,gBAAgB;QAChB,MAAM,OAAO,GAAG,CACd,MAAM,IAAI,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CACpF,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAE9C,wFAAwF;QACxF,oEAAoE;QACpE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,qCAAqC,CAAC,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5F,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,qFAAqF;YACrF,uFAAuF;YACvF,qFAAqF;YACrF,6BAA6B;YAC7B,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YACtC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAExB,MAAM,QAAQ,GAAY,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAqB,EAAE,CAAC;YACrC,uBAAuB,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YACxD,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;gBAChC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;gBACjE,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,0EAA0E;AAC1E,4FAA4F;AAC5F,2FAA2F;AAC3F,uFAAuF;AACvF,8FAA8F;AAC9F,EAAE;AACF,qFAAqF;AACrF,wFAAwF;AACxF,wFAAwF;AACxF,oDAAoD;AACpD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,UAAuC;IAEvC,MAAM,KAAK,GAA4D,EAAE,CAAC;IAE1E,yFAAyF;IACzF,4FAA4F;IAC5F,8DAA8D;IAC9D,KAAK,MAAM,CAAC,gBAAgB,EAAE,SAAS,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QACjE,KAAK,MAAM,MAAM,IAAI,MAAM,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;YACvD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAClB,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,KAAK,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC9C,OAAO,CAAC,CAAC,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;QACjD,CAAC;QACD,kFAAkF;QAClF,yFAAyF;QACzF,yFAAyF;QACzF,+EAA+E;QAC/E,0FAA0F;QAC1F,kCAAkC;QAClC,IAAI,CAAC,CAAC,gBAAgB,KAAK,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC9C,OAAO,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC,gBAAgB,CAAC;QACjD,CAAC;QACD,yFAAyF;QACzF,uFAAuF;QACvF,sFAAsF;QACtF,iFAAiF;QACjF,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC"}
+{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../src/migrations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,8FAA8F;AAC9F,mGAAmG;AACnG,mGAAmG;AACnG,iGAAiG;AACjG,mDAAmD;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAyB,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAyBrF,oGAAoG;AACpG,8FAA8F;AAC9F,8FAA8F;AAC9F,WAAW;AACX,SAAS,OAAO,CAAC,KAAe;IAC9B,OAAO,CAAC,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,oGAAoG;AACpG,iGAAiG;AACjG,yCAAyC;AACzC,MAAM,OAAO,qCAAsC,SAAQ,gBAAgB;IAChE,WAAW,CAAS;IACpB,OAAO,CAAS;IAChB,QAAQ,CAAS;IACjB,YAAY,CAAoB;IAEzC,YAAY,WAAmB,EAAE,OAAe,EAAE,QAAgB,EAAE,YAAsB;QACxF,MAAM,QAAQ,GAAG,yCAAyC,WAAW,mCAAmC,OAAO,GAAG,CAAC;QACnH,MAAM,YAAY,GAAG,sEAAsE,QAAQ,IAAI,CAAC;QACxG,KAAK,CACH,YAAY,CAAC,MAAM,KAAK,CAAC;YACvB,CAAC,CAAC,OAAO,CAAC;gBACN,GAAG,QAAQ,2BAA2B;gBACtC,YAAY;gBACZ,sMAAsM;gBACtM,qCAAqC;aACtC,CAAC;YACJ,CAAC,CAAC,OAAO,CAAC;gBACN,GAAG,QAAQ,qBAAqB,YAAY,CAAC,MAAM,mCAAmC;gBACtF,YAAY;gBACZ,sBAAsB,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,kDAAkD,aAAa,CAAC,YAAY,CAAC,EAAE;gBACvI,yEAAyE;aAC1E,CAAC,CACP,CAAC;QACF,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACnC,CAAC;CACF;AAED,kFAAkF;AAClF,SAAS,aAAa,CAAC,KAAe;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,KAAK,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;AAC7E,CAAC;AAED,kGAAkG;AAClG,2FAA2F;AAC3F,oGAAoG;AACpG,0BAA0B;AAC1B,MAAM,OAAO,8BAA+B,SAAQ,gBAAgB;IACzD,WAAW,CAAS;IACpB,UAAU,CAAS;IAE5B,YAAY,WAAmB,EAAE,UAAkB,EAAE,IAAY,EAAE,KAAc;QAC/E,KAAK,CACH,OAAO,CAAC;YACN,yCAAyC,WAAW,8BAA8B,UAAU,kCAAkC;YAC9H,iBAAiB,IAAI,GAAG;YACxB,uKAAuK;YACvK,uGAAuG;SACxG,CAAC,CACH,CAAC;QACF,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED,MAAM,OAAO,yBAA0B,SAAQ,gBAAgB;IACpD,WAAW,CAAS;IACpB,aAAa,CAAS;IAE/B,YAAY,WAAmB,EAAE,aAAqB,EAAE,IAAY;QAClE,KAAK,CACH,OAAO,CAAC;YACN,yCAAyC,WAAW,iCAAiC,aAAa,uCAAuC;YACzI,iBAAiB,IAAI,GAAG;YACxB,2JAA2J;YAC3J,yGAAyG;YACzG,kKAAkK;SACnK,CAAC,CACH,CAAC;QACF,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;CACF;AAED,8FAA8F;AAC9F,oGAAoG;AACpG,6EAA6E;AAC7E,MAAM,uBAAuB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAE/E,iGAAiG;AACjG,MAAM,yBAAyB,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAEhE,iFAAiF;AACjF,MAAM,wBAAwB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAEzD,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACpF,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,iGAAiG;AACjG,4FAA4F;AAC5F,mGAAmG;AACnG,iGAAiG;AACjG,+FAA+F;AAC/F,SAAS;AACT,EAAE;AACF,gGAAgG;AAChG,kFAAkF;AAClF,KAAK,UAAU,mBAAmB,CAAC,IAAY;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,wBAAwB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,OAAO,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC;YACrD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,kGAAkG;AAClG,oGAAoG;AACpG,gEAAgE;AAChE,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC;AACrC,CAAC;AAED,mGAAmG;AACnG,qFAAqF;AACrF,iGAAiG;AACjG,6FAA6F;AAC7F,mFAAmF;AACnF,SAAS,uBAAuB,CAAC,QAAiB,EAAE,IAAiB,EAAE,IAAsB;IAC3F,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO;QAC/B,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpB,OAAO;IACT,CAAC;IACD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO;IACpF,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnB,kGAAkG;IAClG,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,uBAAuB,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,gGAAgG;AAChG,gGAAgG;AAChG,kGAAkG;AAClG,sCAAsC;AACtC,EAAE;AACF,kGAAkG;AAClG,2FAA2F;AAC3F,+BAA+B;AAC/B,SAAS,QAAQ,CAAC,SAAyB,EAAE,SAA2B,EAAE,IAAY;IACpF,IAAI,QAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,SAAS,EAAE,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,8BAA8B,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC;IACxD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACvD,6FAA6F;IAC7F,0CAA0C;IAC1C,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,yBAAyB,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,SAA2B;IACzD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAEtC,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC1D,yFAAyF;QACzF,gGAAgG;QAChG,yFAAyF;QACzF,MAAM,OAAO,GAAG,CACd,MAAM,IAAI,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CACpF,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAE9C,8FAA8F;QAC9F,oBAAoB;QACpB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,qCAAqC,CAAC,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5F,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,4FAA4F;YAC5F,8FAA8F;YAC9F,6BAA6B;YAC7B,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YACtC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAExB,MAAM,QAAQ,GAAY,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAqB,EAAE,CAAC;YACrC,uBAAuB,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YACxD,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;gBAChC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;gBACjE,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kGAAkG;AAClG,kGAAkG;AAClG,mGAAmG;AACnG,0FAA0F;AAC1F,EAAE;AACF,mGAAmG;AACnG,iGAAiG;AACjG,mCAAmC;AACnC,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,UAAuC;IAEvC,MAAM,KAAK,GAA4D,EAAE,CAAC;IAE1E,gGAAgG;IAChG,sEAAsE;IACtE,KAAK,MAAM,CAAC,gBAAgB,EAAE,SAAS,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QACjE,KAAK,MAAM,MAAM,IAAI,MAAM,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;YACvD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAClB,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,KAAK,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC9C,OAAO,CAAC,CAAC,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;QACjD,CAAC;QACD,+FAA+F;QAC/F,wFAAwF;QACxF,uEAAuE;QACvE,IAAI,CAAC,CAAC,gBAAgB,KAAK,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC9C,OAAO,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC,gBAAgB,CAAC;QACjD,CAAC;QACD,+FAA+F;QAC/F,yFAAyF;QACzF,wFAAwF;QACxF,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC"}

package/dist/outbound-hosts.d.ts

@@ -10,6 +10,12 @@ export interface OutboundHostCheckOptions {
     readonly extensions: readonly VendureExtension[];
     readonly report?: UndeclaredHostReporter;
 }
+export type ParsedOutboundHost = {
+    readonly host: string;
+} | {
+    readonly problem: string;
+};
+export declare function parseOutboundHost(value: unknown): ParsedOutboundHost;
 type Uninstall = () => void;
 export declare function installOutboundHostCheck(options: OutboundHostCheckOptions): Uninstall;
 export {};

package/dist/outbound-hosts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"outbound-hosts.d.ts","sourceRoot":"","sources":["../src/outbound-hosts.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAa/D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,sBAAsB,GAAG,CAAC,MAAM,EAAE,oBAAoB,KAAK,IAAI,CAAC;AAE5E,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAGjD,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC;CAC1C;AAmKD,KAAK,SAAS,GAAG,MAAM,IAAI,CAAC;AAQ5B,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,wBAAwB,GAAG,SAAS,CAwErF"}
+{"version":3,"file":"outbound-hosts.d.ts","sourceRoot":"","sources":["../src/outbound-hosts.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAW/D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,sBAAsB,GAAG,CAAC,MAAM,EAAE,oBAAoB,KAAK,IAAI,CAAC;AAE5E,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAGjD,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC;CAC1C;AAwCD,MAAM,MAAM,kBAAkB,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAM1F,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CA8BpE;AAoJD,KAAK,SAAS,GAAG,MAAM,IAAI,CAAC;AAO5B,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,wBAAwB,GAAG,SAAS,CAqErF"}

package/dist/outbound-hosts.js

@@ -1,25 +1,91 @@
 import { createRequire } from "node:module";
+import { isIP } from "node:net";
 import { dirname, sep } from "node:path";
-import { fileURLToPath } from "node:url";
+import { domainToASCII, fileURLToPath } from "node:url";
 import { stackFrameFiles } from "./stack.js";
-// A hostname as declared and as dialled, compared the way DNS does: case-insensitively, and
-// ignoring the trailing dot of a fully qualified name. Matching is exact — there is no
-// wildcard and no implied subdomain, because "declared api.acme.com" allowing
-// "evil.api.acme.com" would be a surprise in the direction that matters.
+// A hostname as declared and as dialled, compared the way DNS does: case-insensitively, in
+// Punycode, and ignoring the trailing dot of a fully qualified name. Matching is exact, with no
+// wildcard or implied subdomain, so declaring "api.acme.com" does not allow "evil.api.acme.com".
+//
+// Declared and dialled hosts both pass through `asciiHost`, so the two cannot drift apart. What is
+// not a domain, such as an IPv6 address, is compared lowercased.
 function normalizeHost(host) {
-    return host.trim().toLowerCase().replace(/\.$/, "");
+    return asciiHost(host) || host.trim().replace(/\.$/, "").toLowerCase();
+}
+// `domainToASCII` applies the WHATWG host parser, which `new URL(...).hostname` also uses, so a
+// host from request options compares equal to the same host taken from a URL. It lowercases the
+// name and converts an internationalised one to Punycode. It rewrites a numeric IPv4 form such as
+// 2130706433 as an address, and returns an empty string for what is not a domain, including a name
+// ending in a numeric label. One trailing dot is dropped because it spells the same fully
+// qualified name.
+function asciiHost(host) {
+    return domainToASCII(host.trim().replace(/\.$/, ""));
+}
+// Names of a local or private network rather than a public service: RFC 6761 (localhost),
+// RFC 6762 (local, and the private-use names in its appendix G), RFC 8375 (home.arpa). `internal`
+// also covers the cloud metadata names metadata.google.internal and *.ec2.internal.
+const NON_PUBLIC_SUFFIXES = [
+    "localhost",
+    "localdomain",
+    "local",
+    "internal",
+    "intranet",
+    "private",
+    "corp",
+    "home",
+    "lan",
+    "home.arpa",
+];
+const DNS_LABEL = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
+// A declaration as the check compares it, or why it is not a public hostname. Syntax only: a public
+// name can still resolve to a private address, and nothing here resolves it.
+//
+// A problem never quotes the value, because a URL pasted into the list can carry credentials.
+export function parseOutboundHost(value) {
+    if (typeof value !== "string")
+        return { problem: "is not a string" };
+    const trimmed = value.trim();
+    if (trimmed === "")
+        return { problem: "is empty" };
+    if (trimmed.includes("://"))
+        return { problem: "is a URL. Declare only its hostname" };
+    if (trimmed.includes("@")) {
+        return { problem: "contains a user name or credentials. Declare only the hostname" };
+    }
+    if (/[/?#]/.test(trimmed))
+        return { problem: "contains a path. Declare only the hostname" };
+    if (isIP(trimmed.replace(/^\[(.*)\]$/, "$1")) !== 0) {
+        return { problem: "is an IP address. Declare the service's public hostname instead" };
+    }
+    if (trimmed.includes(":"))
+        return { problem: "contains a port. Declare only the hostname" };
+    if (trimmed.includes("*")) {
+        return { problem: "is a wildcard. Matching is exact, so declare each hostname" };
+    }
+    const host = asciiHost(trimmed);
+    if (host !== "" && isIP(host) !== 0) {
+        return { problem: "is an IP address. Declare the service's public hostname instead" };
+    }
+    const labels = host.split(".");
+    if (host === "" || host.length > 253 || !labels.every((label) => DNS_LABEL.test(label))) {
+        return { problem: "is not a valid hostname" };
+    }
+    if (labels.length < 2)
+        return { problem: "is not a fully qualified public hostname" };
+    if (NON_PUBLIC_SUFFIXES.some((suffix) => host === suffix || host.endsWith(`.${suffix}`))) {
+        return { problem: "names a local or private network, not a public service" };
+    }
+    return { host };
 }
-// How far down the stack to look for an extension. A plugin calling out through a client
-// library sits under however many frames that library adds, and 30 covers the ones measured
-// here with room to spare; past that the call is left unattributed rather than searched for
-// indefinitely, because reading a deep stack is the expensive part of this check.
+// How far down the stack to look for an extension. A client library adds frames between a plugin
+// and the call, and 30 covers the cases measured. Past that the call is left unattributed, because
+// reading a deep stack is the expensive part of this check.
 const ATTRIBUTION_FRAME_LIMIT = 30;
 // This file's own directory, so its frames can be skipped when reading the stack.
 const selfDirectory = dirname(fileURLToPath(import.meta.url));
-// Which extension made the call, read from the stack. Same technique as
-// `defineVendureExtension`'s declaring-file trap and for the same reason: our own
-// `prepareStackTrace` is installed so that `--enable-source-maps` cannot rewrite the frames
-// back to `.ts` paths the image does not ship.
+// Which extension made the call, read from the stack. Like `defineVendureExtension`'s
+// declaring-file trap, it installs its own `prepareStackTrace` so `--enable-source-maps` cannot
+// rewrite frames back to `.ts` paths the image does not ship.
 function attribute(state, boundary) {
     for (const path of stackFrameFiles(boundary, ATTRIBUTION_FRAME_LIMIT)) {
         if (path === undefined || path.startsWith(selfDirectory))
@@ -30,7 +96,7 @@ function attribute(state, boundary) {
     }
     return undefined;
 }
-// The message ADR-0028 specifies, verbatim in shape:
+// The message shape ADR-0028 specifies:
 //
 //   Extension acme.erp attempted outbound access to api.other-erp.example.
 //   Declared outbound hosts: erp.acme.com
@@ -40,34 +106,35 @@ function formatReport(host, extension) {
     const declared = declaredHosts.length > 0
         ? `Declared outbound hosts: ${declaredHosts.join(", ")}`
         : "It declares no outbound hosts.";
+    // A host `defineVendureExtension` would refuse cannot be declared, so the report does not suggest
+    // declaring it.
+    const parsed = parseOutboundHost(host);
+    const remedy = "host" in parsed
+        ? "Add the host to the extension's outboundHosts to silence it."
+        : `${host} cannot be declared: it ${parsed.problem}.`;
     return {
         host,
         extensionId: extension?.id,
         declaredHosts,
-        message: `Vendure Cloud: ${subject} attempted outbound access to ${host}.\n${declared}\n  This is reported, not blocked. Add the host to the extension's outboundHosts to silence it.`,
+        message: `Vendure Cloud: ${subject} attempted outbound access to ${host}.\n${declared}\n  This is reported, not blocked. ${remedy}`,
     };
 }
 function check(state, rawHost) {
     if (rawHost === undefined || rawHost === "")
         return;
     const host = normalizeHost(rawHost);
-    // The fast path, and the reason an allowed call costs one Set lookup rather than a captured
-    // stack. Its cost is that an extension reaching a host another extension declared is not
-    // reported. That is accepted: this is a hygiene control, and one acceptance criterion on
-    // CLO-412 is that an allowed call carries no measurable per-request cost. Attributing every
-    // call would mean capturing a stack on every request to satisfy a control that a single
-    // line of code can bypass anyway.
+    // Fast path: an allowed call costs a normalisation, one Set lookup and no captured stack (CLO-412
+    // requires no measurable per-request cost). An extension reaching a host another extension
+    // declared goes unreported, which a hygiene control accepts.
     if (state.declaredAnywhere.has(host))
         return;
     const extension = attribute(state, check);
-    // Nothing on the stack belongs to an extension, so there is no declaration this call is
-    // measured against. Vendure core's own traffic, the database driver's, and a library called
-    // from platform code all land here, and reporting them would drown the signal.
+    // Nothing on the stack belongs to an extension. Core's own traffic, the database driver's and
+    // libraries called from platform code land here, and reporting them would drown the signal.
     if (extension === undefined)
         return;
-    // The extension declared nothing, so it opted out of the check. CLO-412 records the
-    // reasoning: reading "declared nothing" as "may reach nothing" would report against every
-    // extension in existence today, and a report that fires on everything is not read.
+    // An extension that declared nothing opted out. Reading that as "may reach nothing" would report
+    // against every existing extension (CLO-412).
     if (extension.outboundHosts.length === 0)
         return;
     const seen = `${extension.id}\u0000${host}`;
@@ -84,9 +151,8 @@ function hostFromUrl(value) {
         return undefined;
     }
 }
-// `fetch` takes a string, a URL, or a Request. Reading `.url` off the third rather than
-// naming `Request`, because the DOM lib is not in this package's types and the shape is the
-// only part that matters.
+// `fetch` takes a string, a URL, or a Request. `.url` is read off the third by shape because the
+// DOM lib is not in this package's types.
 function hostFromFetchInput(input) {
     if (typeof input === "string")
         return hostFromUrl(input);
@@ -101,14 +167,11 @@ function hostFromFetchInput(input) {
 }
 function hostFromRequestArguments(args, depth = 0) {
     for (const argument of args) {
-        // `Socket.prototype.connect` is reached with Node's own normalised argument list, which is
-        // an array holding the options object and the callback, so the options are one level down
-        // rather than in the position a direct caller would put them.
+        // `Socket.prototype.connect` receives Node's normalised argument list, an array holding the
+        // options object and the callback, so the options sit one level down.
         //
-        // Bounded at the single level Node actually produces, because this runs on the caller's
-        // arguments before Node has validated them. Anything deeper is a caller passing something
-        // strange, and a self-referencing array would otherwise exhaust the stack inside a check
-        // whose whole job is to watch without getting in the way.
+        // Bounded at that single level because this runs on the caller's arguments before Node
+        // validates them; a self-referencing array would otherwise exhaust the stack.
         if (Array.isArray(argument)) {
             if (depth >= 1)
                 continue;
@@ -136,12 +199,11 @@ function hostFromRequestArguments(args, depth = 0) {
     }
     return undefined;
 }
-// Installed by the platform entrypoint, and by `vendure dev`, so the check behaves the same
-// in both. Returns the function that undoes it, which is what the tests use and what an
-// entrypoint would call on shutdown.
+// Installed by the platform entrypoint and by `vendure dev`. Returns the function that undoes it,
+// for tests and entrypoint shutdown.
 //
-// Nothing is patched at all when no extension declares a host, so an application that has not
-// adopted the field pays nothing and cannot be affected by a bug in here.
+// Nothing is patched when no extension declares a host, so an application that has not adopted the
+// field pays nothing.
 export function installOutboundHostCheck(options) {
     const declaring = options.extensions.filter((extension) => extension.outboundHosts.length > 0);
     if (declaring.length === 0)
@@ -175,20 +237,17 @@ export function installOutboundHostCheck(options) {
             globalThis.fetch = originalFetch;
         });
     }
-    // Everything that is not `fetch` is caught one level lower, at the socket, because that is
-    // the only interception point that behaves the same under both module systems — which is an
-    // acceptance criterion on CLO-412 rather than a preference.
+    // Everything but `fetch` is caught at the socket, the only interception point that behaves the
+    // same under both module systems (CLO-412).
     //
-    // Replacing `net.connect` and `http.request` on the module object does not work. An ES
-    // module's named import is a snapshot of the binding taken when the module was linked, so
-    // `import { connect } from "node:net"` keeps calling the original however the module object
-    // is rewritten afterwards, while a CommonJS caller doing `require("node:net").connect` sees
-    // the replacement. That is the same control behaving differently in the two module systems,
-    // and it silently covers only half of them.
+    // Replacing `net.connect` and `http.request` on the module object covers only half of them: an ES
+    // module's named import is a snapshot of the binding taken at link time, so
+    // `import { connect } from "node:net"` keeps calling the original, while a CommonJS
+    // `require("node:net").connect` sees the replacement.
     //
-    // `net.Socket.prototype.connect` has no such split. `net.connect`, `net.createConnection`,
-    // `http.request`, `https.request` and the global `fetch` all end at a Socket, and the method
-    // is looked up on the prototype at call time whoever reached it.
+    // `net.connect`, `net.createConnection`, `http.request`, `https.request` and the global `fetch`
+    // all end at a Socket, and `net.Socket.prototype.connect` is looked up at call time whoever
+    // reached it.
     const require = createRequire(import.meta.url);
     const net = require("node:net");
     const socketPrototype = net.Socket.prototype;