@vendure/cloud 0.0.0 → 0.3.0

package/dist/cli/lib/contract/wire-types.d.ts

@@ -0,0 +1,47 @@
+export type VcEnvironmentType = "dev" | "uat" | "staging" | "production";
+export type IdentityEnvironmentType = "DEVELOPMENT" | "STAGING" | "PRODUCTION";
+export type RuntimeIntent = "STARTED" | "STOPPED";
+export type RuntimeState = "NOT_PROVISIONED" | "STARTED" | "STOPPED" | "PARTIAL" | "UNKNOWN";
+export type DeploymentApplicationSource = "SOURCE_BUILD" | "PREBUILT_IMAGES";
+export interface EnvironmentSummaryResponse {
+    id: string;
+    name: string;
+    slug: string;
+    type: IdentityEnvironmentType;
+    desiredStateType: VcEnvironmentType;
+    branch: string | null;
+    projectId: string;
+    organizationId: string;
+    platformApexDomain: string | null;
+    platformHostname: string | null;
+    createdAt: string;
+    updatedAt: string;
+    status: string | null;
+    runtimeHealth: string;
+    runtimeIntent: RuntimeIntent | null;
+    runtimeState: RuntimeState;
+    lastDeployedAt: string | null;
+}
+export type DeploymentSummaryAction = {
+    action: "create" | "update";
+    label: string;
+    isApplication: boolean;
+};
+export type DeploymentSummaryResourceRef = {
+    label: string;
+};
+export type DeploymentSummaryCleanupFailure = DeploymentSummaryResourceRef & {
+    error: string;
+};
+export type DeploymentSummaryCleanup = {
+    deleted: DeploymentSummaryResourceRef[];
+    failures: DeploymentSummaryCleanupFailure[];
+};
+export type DeploymentSummary = {
+    actions: DeploymentSummaryAction[];
+    cleanup: DeploymentSummaryCleanup;
+};
+export type ProtectedResource = {
+    label: string;
+};
+//# sourceMappingURL=wire-types.d.ts.map

package/dist/cli/lib/contract/wire-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire-types.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/contract/wire-types.ts"],"names":[],"mappings":"AAYA,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,YAAY,CAAC;AAEzE,MAAM,MAAM,uBAAuB,GAAG,aAAa,GAAG,SAAS,GAAG,YAAY,CAAC;AAE/E,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,SAAS,CAAC;AAElD,MAAM,MAAM,YAAY,GAAG,iBAAiB,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;AAE7F,MAAM,MAAM,2BAA2B,GAAG,cAAc,GAAG,iBAAiB,CAAC;AAE7E,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,uBAAuB,CAAC;IAC9B,gBAAgB,EAAE,iBAAiB,CAAC;IACpC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IAIvB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAIlC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,aAAa,GAAG,IAAI,CAAC;IACpC,YAAY,EAAE,YAAY,CAAC;IAC3B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,OAAO,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG,4BAA4B,GAAG;IAC3E,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,OAAO,EAAE,4BAA4B,EAAE,CAAC;IACxC,QAAQ,EAAE,+BAA+B,EAAE,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,uBAAuB,EAAE,CAAC;IACnC,OAAO,EAAE,wBAAwB,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,KAAK,EAAE,MAAM,CAAC;CACf,CAAC"}

package/dist/cli/lib/contract/wire-types.js

@@ -0,0 +1,13 @@
+// Mirrors the response shapes from `@vendure-cloud/api-types` and `@vendure-cloud/environment-state`
+// that the CLI foundation reads. See ./README.md for why this package cannot import them, including
+// as types.
+//
+// Every type here is reachable from `src/cli/index.ts`, either by name or as the type of a field on
+// `Environment` or `Deployment`. A family never imports this file directly.
+//
+// Types are erased, so nothing here survives to runtime for a test to compare. The guard is instead
+// a compile-time one: `test/cli-contract-parity.test.ts` asserts each of these is exactly the type
+// the real package declares, so a field or union member added upstream fails `typecheck` rather than
+// becoming a value the CLI's own type says cannot happen.
+export {};
+//# sourceMappingURL=wire-types.js.map

package/dist/cli/lib/contract/wire-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire-types.js","sourceRoot":"","sources":["../../../../src/cli/lib/contract/wire-types.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,oGAAoG;AACpG,YAAY;AACZ,EAAE;AACF,oGAAoG;AACpG,4EAA4E;AAC5E,EAAE;AACF,oGAAoG;AACpG,mGAAmG;AACnG,qGAAqG;AACrG,0DAA0D"}

package/dist/cli/lib/contract/wire-values.d.ts

@@ -0,0 +1,6 @@
+export declare const DEPLOYMENT_ID_LENGTH = 36;
+export declare const DEPLOYMENT_ID_PREFIX_MIN_LENGTH = 8;
+export declare const DEPLOYMENT_ID_PREFIX_MAX_LENGTH: number;
+export declare const DEPLOYMENT_ID_PREFIX_PATTERN: RegExp;
+export declare function formatBytes(sizeBytes: number): string;
+//# sourceMappingURL=wire-values.d.ts.map

package/dist/cli/lib/contract/wire-values.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire-values.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/contract/wire-values.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,eAAO,MAAM,+BAA+B,IAAI,CAAC;AAEjD,eAAO,MAAM,+BAA+B,QAA2B,CAAC;AACxE,eAAO,MAAM,4BAA4B,QAAkB,CAAC;AAK5D,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAKrD"}

package/dist/cli/lib/contract/wire-values.js

@@ -0,0 +1,21 @@
+// Mirrors the loose values in `@vendure-cloud/api-types`'s `index.ts` that the hosted CLI reads at
+// runtime. See ./README.md for why this package cannot import them, and
+// `test/cli-contract-parity.test.ts` for what keeps the two answering the same.
+export const DEPLOYMENT_ID_LENGTH = 36;
+export const DEPLOYMENT_ID_PREFIX_MIN_LENGTH = 8;
+// A 36-character value is a full UUID and must bypass prefix resolution.
+export const DEPLOYMENT_ID_PREFIX_MAX_LENGTH = DEPLOYMENT_ID_LENGTH - 1;
+export const DEPLOYMENT_ID_PREFIX_PATTERN = /^[0-9a-f-]+$/i;
+// Decimal (SI) units. The CLI and the dashboard render the same backup and seed sizes to the same
+// person — two copies drifted once already, and binary units made a 10 GB backup read as
+// "9536.7 MB" on one surface and "10.0 GB" on the other.
+export function formatBytes(sizeBytes) {
+    if (sizeBytes >= 1_000_000_000)
+        return `${(sizeBytes / 1_000_000_000).toFixed(1)} GB`;
+    if (sizeBytes >= 1_000_000)
+        return `${(sizeBytes / 1_000_000).toFixed(0)} MB`;
+    if (sizeBytes >= 1_000)
+        return `${(sizeBytes / 1_000).toFixed(0)} kB`;
+    return `${sizeBytes} B`;
+}
+//# sourceMappingURL=wire-values.js.map

package/dist/cli/lib/contract/wire-values.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire-values.js","sourceRoot":"","sources":["../../../../src/cli/lib/contract/wire-values.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,wEAAwE;AACxE,gFAAgF;AAEhF,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AACvC,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC;AACjD,yEAAyE;AACzE,MAAM,CAAC,MAAM,+BAA+B,GAAG,oBAAoB,GAAG,CAAC,CAAC;AACxE,MAAM,CAAC,MAAM,4BAA4B,GAAG,eAAe,CAAC;AAE5D,kGAAkG;AAClG,yFAAyF;AACzF,yDAAyD;AACzD,MAAM,UAAU,WAAW,CAAC,SAAiB;IAC3C,IAAI,SAAS,IAAI,aAAa;QAAE,OAAO,GAAG,CAAC,SAAS,GAAG,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IACtF,IAAI,SAAS,IAAI,SAAS;QAAE,OAAO,GAAG,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAC9E,IAAI,SAAS,IAAI,KAAK;QAAE,OAAO,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IACtE,OAAO,GAAG,SAAS,IAAI,CAAC;AAC1B,CAAC"}

package/dist/cli/lib/dotenv.d.ts

@@ -0,0 +1,2 @@
+export declare function parseDotEnv(content: string): Record<string, string>;
+//# sourceMappingURL=dotenv.d.ts.map

package/dist/cli/lib/dotenv.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dotenv.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/dotenv.ts"],"names":[],"mappings":"AAOA,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAkBnE"}

package/dist/cli/lib/dotenv.js

@@ -0,0 +1,28 @@
+// Reading a `.env` file's assignments.
+//
+// One implementation on the shared boundary because two families need it: the VC Project
+// configuration family's `env import` reads a file the customer names, and the VC Deployment
+// family's environment-variable preflight reads the one beside the application.
+//
+// TODO: handle `export KEY=value` form (direnv, shell-sourced files)
+export function parseDotEnv(content) {
+    const vars = {};
+    for (const line of content.split("\n")) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith("#"))
+            continue;
+        const eqIndex = trimmed.indexOf("=");
+        if (eqIndex === -1)
+            continue;
+        const key = trimmed.slice(0, eqIndex).trim();
+        let value = trimmed.slice(eqIndex + 1).trim();
+        if ((value.startsWith('"') && value.endsWith('"')) ||
+            (value.startsWith("'") && value.endsWith("'"))) {
+            value = value.slice(1, -1);
+        }
+        if (key)
+            vars[key] = value;
+    }
+    return vars;
+}
+//# sourceMappingURL=dotenv.js.map

package/dist/cli/lib/dotenv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dotenv.js","sourceRoot":"","sources":["../../../src/cli/lib/dotenv.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,EAAE;AACF,yFAAyF;AACzF,6FAA6F;AAC7F,gFAAgF;AAChF,EAAE;AACF,qEAAqE;AACrE,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,OAAO,KAAK,CAAC,CAAC;YAAE,SAAS;QAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,GAAG;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC7B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/cli/lib/env-file.d.ts

@@ -0,0 +1,2 @@
+export declare function loadProjectEnvFile(): void;
+//# sourceMappingURL=env-file.d.ts.map

package/dist/cli/lib/env-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-file.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/env-file.ts"],"names":[],"mappings":"AAaA,wBAAgB,kBAAkB,IAAI,IAAI,CASzC"}

package/dist/cli/lib/env-file.js

@@ -0,0 +1,26 @@
+let loaded = false;
+// Loads `.env` from the working directory, the way the standalone `vcloud` program does at startup.
+//
+// It matters here because the hosted CLI does not get it for free. `vcloud` calls this once in its
+// entry point, so every command sees `VENDURE_CLOUD_API_URL` and `VENDURE_CLOUD_TOKEN` from a
+// project's `.env` — which is how a developer points the CLI at the development control plane. The
+// Vendure CLI host only loads `dotenv` when a command reads the Vendure config file, and a hosted
+// Cloud command does not, so without this the same `.env` would be ignored under `vendure` and the
+// command would quietly talk to production instead.
+//
+// Called once per process rather than once per command: a second call would re-read the file, and
+// two commands in one process is a test rather than a customer.
+export function loadProjectEnvFile() {
+    if (loaded)
+        return;
+    loaded = true;
+    if (typeof process.loadEnvFile !== "function")
+        return;
+    try {
+        process.loadEnvFile();
+    }
+    catch {
+        // No `.env` in the working directory, which is the ordinary case.
+    }
+}
+//# sourceMappingURL=env-file.js.map

package/dist/cli/lib/env-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-file.js","sourceRoot":"","sources":["../../../src/cli/lib/env-file.ts"],"names":[],"mappings":"AAAA,IAAI,MAAM,GAAG,KAAK,CAAC;AAEnB,oGAAoG;AACpG,EAAE;AACF,mGAAmG;AACnG,8FAA8F;AAC9F,mGAAmG;AACnG,kGAAkG;AAClG,mGAAmG;AACnG,oDAAoD;AACpD,EAAE;AACF,kGAAkG;AAClG,gEAAgE;AAChE,MAAM,UAAU,kBAAkB;IAChC,IAAI,MAAM;QAAE,OAAO;IACnB,MAAM,GAAG,IAAI,CAAC;IACd,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,UAAU;QAAE,OAAO;IACtD,IAAI,CAAC;QACH,OAAO,CAAC,WAAW,EAAE,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;IACpE,CAAC;AACH,CAAC"}

package/dist/cli/lib/env-preflight.d.ts

@@ -0,0 +1,24 @@
+import type { ApiClient } from "./api-client.js";
+export declare function isPlatformManagedKey(key: string): boolean;
+export declare function scanEnvRefs(content: string): Map<string, boolean>;
+export declare function collectExpectedEnvKeys(appPath: string): string[];
+export declare function findMissingEnvVars(params: {
+    expected: readonly string[];
+    defined: ReadonlySet<string>;
+}): string[];
+export type EnvPreflightResult = {
+    status: "checked";
+    missing: string[];
+} | {
+    status: "not-checked";
+    reason: string;
+};
+export declare function resolveEnvVarPreflight(params: {
+    client: Pick<ApiClient, "get">;
+    environmentId: string;
+    appPath: string;
+}): Promise<EnvPreflightResult>;
+export declare function runEnvVarPreflight(client: Pick<ApiClient, "get">, environmentId: string): Promise<EnvPreflightResult>;
+export declare function formatEnvPreflightSkipped(reason: string): string;
+export declare function formatMissingEnvVarsWarning(missing: readonly string[], environmentSlug: string): string;
+//# sourceMappingURL=env-preflight.d.ts.map

package/dist/cli/lib/env-preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-preflight.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/env-preflight.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAsDjD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAGzD;AAMD,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAgBjE;AAKD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAuChE;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC9B,GAAG,MAAM,EAAE,CAIX;AAMD,MAAM,MAAM,kBAAkB,GAC1B;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,GACxC;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAK9C,wBAAsB,sBAAsB,CAAC,MAAM,EAAE;IACnD,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAsB9B;AAMD,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAC9B,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,kBAAkB,CAAC,CAc7B;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAKhE;AAED,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,eAAe,EAAE,MAAM,GACtB,MAAM,CAUR"}

package/dist/cli/lib/env-preflight.js

@@ -0,0 +1,265 @@
+import { readFileSync, readdirSync, statSync } from "node:fs";
+import { extname, join } from "node:path";
+import { appDirSchema } from "./contract/build-settings.js";
+import { parseDotEnv } from "./dotenv.js";
+import { cloudInvocation } from "./invocation.js";
+import { findProjectRoot } from "./project-link.js";
+// Environment-variable preflight for `deploy` and `deploy plan`: which variables the local app
+// directory appears to need, and which of those the target VC Environment does not have.
+//
+// The only contract it consumes is the `appDir` rule from `./contract/build-settings.js`. That
+// import pulls in `zod`, so this module is reached only through `await import(...)` from a
+// command's `run`. `test/cli-published-surface.test.ts` fails if loading the CLI plugin reaches it.
+// Env vars the platform injects itself. We never warn about these — the
+// customer isn't expected to set them, and on a first-ever deploy they aren't
+// yet persisted on the environment to subtract. Hand-mirrored from what the
+// control plane's managed env var manifest emits for the datastore, cache,
+// object-storage and search integrations. Keep it in step by hand — or replace
+// it with a control-plane managed-keys endpoint (CLO-251).
+const MANAGED_ENV_KEY_PREFIXES = ["DB_", "REDIS_", "TYPESENSE_", "MINIO_"];
+const MANAGED_ENV_KEYS = new Set(["DATABASE_URL", "ASSET_UPLOAD_DIR", "PGSSLMODE"]);
+// Conventional runtime keys the Node runtime or host defines, or that are
+// universally defaulted locally. Not platform-managed, but warning about
+// them is noise rather than a missing-config signal (e.g. NODE_ENV parked in a
+// customer `.env`, or PORT which the server always reads with a fallback).
+const CONVENTIONAL_ENV_KEYS = new Set(["NODE_ENV", "PORT"]);
+// `.env` only. An `.env.example` lists the names a developer has to supply, so
+// a name in one is not evidence that the deployed app reads it. A repository
+// that keeps one per package holds every unrelated service's configuration in
+// them, and reading them all reports the lot as the customer's own (CLO-532).
+const DOTENV_FILENAMES = new Set([".env"]);
+const SOURCE_EXTENSIONS = new Set([".ts", ".mts", ".cts", ".js", ".mjs", ".cjs"]);
+const SKIPPED_DIRECTORIES = new Set([
+    ".git",
+    ".turbo",
+    "__mocks__",
+    "__tests__",
+    "build",
+    "dist",
+    "e2e",
+    "node_modules",
+]);
+// Specs sit beside the source they cover in most repositories, so excluding
+// directories is not enough to keep their fixtures out of the list.
+const TEST_FILENAME_PATTERN = /\.(?:spec|test)\.[cm]?[jt]s$/;
+const MAX_DEPTH = 8;
+const MAX_SOURCE_FILES = 2000;
+const MAX_SOURCE_FILE_BYTES = 1_000_000;
+export function isPlatformManagedKey(key) {
+    if (MANAGED_ENV_KEYS.has(key) || CONVENTIONAL_ENV_KEYS.has(key))
+        return true;
+    return MANAGED_ENV_KEY_PREFIXES.some((p) => key.startsWith(p));
+}
+// Regex sweep for `process.env.FOO`, `process.env["FOO"]`, `process.env['FOO']`.
+// Deliberately no AST: this misses destructuring and computed keys, which is the
+// accepted 80% line. Returns each referenced key mapped to whether *any*
+// occurrence has an inline fallback (`|| ...` / `?? ...`) and so won't crash.
+export function scanEnvRefs(content) {
+    const refs = new Map();
+    // The trailing `(\|\||\?\?)?` captures an inline fallback right after the
+    // reference; `?.` optional chaining is not one, so it stays undefined there.
+    const re = /process\.env(?:\.([A-Za-z_$][\w$]*)|\[\s*(['"])([A-Za-z_$][\w$]*)\2\s*\])\s*(\|\||\?\?)?/g;
+    let match = re.exec(content);
+    while (match !== null) {
+        const key = match[1] ?? match[3];
+        if (key) {
+            const hasFallback = match[4] !== undefined;
+            refs.set(key, (refs.get(key) ?? false) || hasFallback);
+        }
+        match = re.exec(content);
+    }
+    return refs;
+}
+// Keys the app plausibly needs: declared in a `.env` file, or referenced in
+// source that is not a test. A reference with an inline fallback is dropped —
+// the code already defaults it, so a missing value won't crash the boot.
+export function collectExpectedEnvKeys(appPath) {
+    const dotEnvKeys = new Set();
+    const sourceRefs = new Map();
+    let filesScanned = 0;
+    const visit = (dir, depth) => {
+        if (depth > MAX_DEPTH)
+            return;
+        let entries;
+        try {
+            entries = readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            if (entry.isDirectory()) {
+                if (!SKIPPED_DIRECTORIES.has(entry.name))
+                    visit(join(dir, entry.name), depth + 1);
+                continue;
+            }
+            if (!entry.isFile())
+                continue;
+            const path = join(dir, entry.name);
+            if (DOTENV_FILENAMES.has(entry.name)) {
+                for (const key of readDotEnvKeys(path))
+                    dotEnvKeys.add(key);
+                continue;
+            }
+            if (filesScanned >= MAX_SOURCE_FILES)
+                continue;
+            if (!SOURCE_EXTENSIONS.has(extname(entry.name)))
+                continue;
+            if (TEST_FILENAME_PATTERN.test(entry.name))
+                continue;
+            filesScanned++;
+            mergeRefs(sourceRefs, readSourceRefs(path));
+        }
+    };
+    visit(appPath, 0);
+    const expected = [];
+    for (const key of new Set([...dotEnvKeys, ...sourceRefs.keys()])) {
+        if (sourceRefs.get(key) === true)
+            continue;
+        expected.push(key);
+    }
+    return expected.sort();
+}
+export function findMissingEnvVars(params) {
+    return params.expected
+        .filter((key) => !params.defined.has(key) && !isPlatformManagedKey(key))
+        .sort();
+}
+// Orchestrates the check: scan the app directory, fetch the keys already set on
+// the environment, return the referenced-but-unset ones. Best-effort — an I/O
+// failure ends the check rather than blocking a deploy.
+export async function resolveEnvVarPreflight(params) {
+    if (!isDirectory(params.appPath)) {
+        return {
+            status: "not-checked",
+            reason: `the recorded app directory is not present at ${params.appPath}`,
+        };
+    }
+    const expected = collectExpectedEnvKeys(params.appPath);
+    if (expected.length === 0)
+        return { status: "checked", missing: [] };
+    let defined;
+    try {
+        const vars = await params.client.get(`/environments/${params.environmentId}/env-vars`);
+        defined = new Set(vars.map((v) => v.key));
+    }
+    catch {
+        return {
+            status: "not-checked",
+            reason: "the variables already set on this environment could not be read",
+        };
+    }
+    return { status: "checked", missing: findMissingEnvVars({ expected, defined }) };
+}
+// Command-facing entry point: resolves the project root the same way the rest
+// of the CLI resolves context (walking up to the project link, falling back to
+// the working directory), narrows it to the app directory the deploy builds,
+// then runs the check. Keeps that policy in one place.
+export async function runEnvVarPreflight(client, environmentId) {
+    const appDir = await fetchAppDir(client, environmentId);
+    if (appDir === null) {
+        return {
+            status: "not-checked",
+            reason: "the app directory recorded for this environment could not be read",
+        };
+    }
+    const projectRoot = findProjectRoot() ?? process.cwd();
+    return resolveEnvVarPreflight({
+        client,
+        environmentId,
+        appPath: appDir === "" ? projectRoot : join(projectRoot, appDir),
+    });
+}
+export function formatEnvPreflightSkipped(reason) {
+    return [
+        `The check for missing environment variables did not run: ${reason}.`,
+        "Nothing here says whether this environment has the variables your app needs.",
+    ].join("\n");
+}
+export function formatMissingEnvVarsWarning(missing, environmentSlug) {
+    const lines = [
+        `These variables appear in your app directory but are not set in this environment (${environmentSlug}):`,
+        ...missing.map((key) => `  ${key}`),
+        "",
+        "The check reads the app directory's `.env` and searches its source for `process.env`. A",
+        "text search can name a variable the deployed app never reads and miss one it does. Add",
+        `the ones your app needs with \`${cloudInvocation()} env add <KEY>\`, then re-run the deploy.`,
+    ];
+    return lines.join("\n");
+}
+// The repository-relative app directory, read from the environment's Source
+// Build Settings. `vcloud deploy` takes no directory of its own: `vcloud init
+// --app-dir` and `vcloud config build set --app-dir` record it there, and the
+// managed build reads it from there too.
+//
+// A path means scan that directory. `""` means the app is at the repository
+// root. `null` means the setting could not be read, which is not the same as an
+// app at the root: scanning the root in that case reports every sibling app's
+// variables as the customer's own.
+async function fetchAppDir(client, environmentId) {
+    try {
+        const response = await client.get(`/environments/${environmentId}/source-build-settings`);
+        return readAppDir(response);
+    }
+    catch {
+        return null;
+    }
+}
+// The response is untrusted and its `appDir` is joined onto a local path, so an
+// absolute path or a `..` segment would send the scan outside the project root.
+// A value the schema would not accept is read as unknown.
+//
+// Only the field rule is borrowed from the settings schema. The object schema is strict, so parsing
+// the whole document would fail this read outright the first time the control plane adds a setting
+// a released CLI has never heard of.
+function readAppDir(response) {
+    if (!isRecord(response))
+        return null;
+    const settings = response.settings;
+    if (!isRecord(settings))
+        return null;
+    // Absent is a real answer: the schema omits `appDir` for an app at the root.
+    const appDir = settings.appDir;
+    if (appDir === undefined || appDir === null || appDir === "")
+        return "";
+    const parsed = appDirSchema.safeParse(appDir);
+    if (!parsed.success || parsed.data === undefined)
+        return null;
+    return parsed.data;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isDirectory(path) {
+    try {
+        return statSync(path).isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+function readDotEnvKeys(path) {
+    try {
+        return Object.keys(parseDotEnv(readFileSync(path, "utf-8")));
+    }
+    catch {
+        return [];
+    }
+}
+function readSourceRefs(path) {
+    try {
+        const content = readFileSync(path, "utf-8");
+        if (content.length > MAX_SOURCE_FILE_BYTES)
+            return new Map();
+        return scanEnvRefs(content);
+    }
+    catch {
+        return new Map();
+    }
+}
+function mergeRefs(target, source) {
+    for (const [key, hasFallback] of source) {
+        target.set(key, (target.get(key) ?? false) || hasFallback);
+    }
+}
+//# sourceMappingURL=env-preflight.js.map

package/dist/cli/lib/env-preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-preflight.js","sourceRoot":"","sources":["../../../src/cli/lib/env-preflight.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGpD,+FAA+F;AAC/F,yFAAyF;AACzF,EAAE;AACF,+FAA+F;AAC/F,2FAA2F;AAC3F,oGAAoG;AAEpG,wEAAwE;AACxE,8EAA8E;AAC9E,4EAA4E;AAC5E,2EAA2E;AAC3E,+EAA+E;AAC/E,2DAA2D;AAC3D,MAAM,wBAAwB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;AAC3E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,kBAAkB,EAAE,WAAW,CAAC,CAAC,CAAC;AAEpF,0EAA0E;AAC1E,yEAAyE;AACzE,+EAA+E;AAC/E,2EAA2E;AAC3E,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AAE5D,+EAA+E;AAC/E,6EAA6E;AAC7E,8EAA8E;AAC9E,8EAA8E;AAC9E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3C,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAClF,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,MAAM;IACN,QAAQ;IACR,WAAW;IACX,WAAW;IACX,OAAO;IACP,MAAM;IACN,KAAK;IACL,cAAc;CACf,CAAC,CAAC;AAEH,4EAA4E;AAC5E,oEAAoE;AACpE,MAAM,qBAAqB,GAAG,8BAA8B,CAAC;AAE7D,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,qBAAqB,GAAG,SAAS,CAAC;AAExC,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,iFAAiF;AACjF,iFAAiF;AACjF,yEAAyE;AACzE,8EAA8E;AAC9E,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAmB,CAAC;IACxC,0EAA0E;IAC1E,6EAA6E;IAC7E,MAAM,EAAE,GACN,2FAA2F,CAAC;IAC9F,IAAI,KAAK,GAA2B,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,OAAO,KAAK,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;YAC3C,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,WAAW,CAAC,CAAC;QACzD,CAAC;QACD,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4EAA4E;AAC5E,8EAA8E;AAC9E,yEAAyE;AACzE,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC9C,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,KAAa,EAAQ,EAAE;QACjD,IAAI,KAAK,GAAG,SAAS;YAAE,OAAO;QAC9B,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAClF,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,SAAS;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,KAAK,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC;oBAAE,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC5D,SAAS;YACX,CAAC;YACD,IAAI,YAAY,IAAI,gBAAgB;gBAAE,SAAS;YAC/C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAE,SAAS;YAC1D,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YACrD,YAAY,EAAE,CAAC;YACf,SAAS,CAAC,UAAU,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAElB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,UAAU,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACjE,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI;YAAE,SAAS;QAC3C,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAGlC;IACC,OAAO,MAAM,CAAC,QAAQ;SACnB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;SACvE,IAAI,EAAE,CAAC;AACZ,CAAC;AAUD,gFAAgF;AAChF,8EAA8E;AAC9E,wDAAwD;AACxD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAI5C;IACC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,gDAAgD,MAAM,CAAC,OAAO,EAAE;SACzE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrE,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAClC,iBAAiB,MAAM,CAAC,aAAa,WAAW,CACjD,CAAC;QACF,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,iEAAiE;SAC1E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,kBAAkB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AACnF,CAAC;AAED,8EAA8E;AAC9E,+EAA+E;AAC/E,6EAA6E;AAC7E,uDAAuD;AACvD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAA8B,EAC9B,aAAqB;IAErB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACxD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,mEAAmE;SAC5E,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,eAAe,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACvD,OAAO,sBAAsB,CAAC;QAC5B,MAAM;QACN,aAAa;QACb,OAAO,EAAE,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC;KACjE,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAAc;IACtD,OAAO;QACL,4DAA4D,MAAM,GAAG;QACrE,8EAA8E;KAC/E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,OAA0B,EAC1B,eAAuB;IAEvB,MAAM,KAAK,GAAG;QACZ,qFAAqF,eAAe,IAAI;QACxG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;QACnC,EAAE;QACF,yFAAyF;QACzF,wFAAwF;QACxF,kCAAkC,eAAe,EAAE,2CAA2C;KAC/F,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,4EAA4E;AAC5E,8EAA8E;AAC9E,8EAA8E;AAC9E,yCAAyC;AACzC,EAAE;AACF,4EAA4E;AAC5E,gFAAgF;AAChF,8EAA8E;AAC9E,mCAAmC;AACnC,KAAK,UAAU,WAAW,CACxB,MAA8B,EAC9B,aAAqB;IAErB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAC/B,iBAAiB,aAAa,wBAAwB,CACvD,CAAC;QACF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,gFAAgF;AAChF,0DAA0D;AAC1D,EAAE;AACF,oGAAoG;AACpG,mGAAmG;AACnG,qCAAqC;AACrC,SAAS,UAAU,CAAC,QAAiB;IACnC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAErC,6EAA6E;IAC7E,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAExE,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC9D,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5C,IAAI,OAAO,CAAC,MAAM,GAAG,qBAAqB;YAAE,OAAO,IAAI,GAAG,EAAE,CAAC;QAC7D,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,MAA4B,EAAE,MAA4B;IAC3E,KAAK,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,MAAM,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,WAAW,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC"}

package/dist/cli/lib/error-output.d.ts

@@ -0,0 +1,3 @@
+export { formatInlineUserFacingErrorReason, formatUserFacingErrorDetails, } from "./contract/public-error-details.js";
+export type { DeploymentResourceLabelContext } from "./contract/deployment-resource-labels.js";
+//# sourceMappingURL=error-output.d.ts.map

package/dist/cli/lib/error-output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-output.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/error-output.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iCAAiC,EACjC,4BAA4B,GAC7B,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EAAE,8BAA8B,EAAE,MAAM,0CAA0C,CAAC"}

package/dist/cli/lib/error-output.js

@@ -0,0 +1,2 @@
+export { formatInlineUserFacingErrorReason, formatUserFacingErrorDetails, } from "./contract/public-error-details.js";
+//# sourceMappingURL=error-output.js.map

package/dist/cli/lib/error-output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-output.js","sourceRoot":"","sources":["../../../src/cli/lib/error-output.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iCAAiC,EACjC,4BAA4B,GAC7B,MAAM,oCAAoC,CAAC"}

package/dist/cli/lib/errors.d.ts

@@ -0,0 +1,37 @@
+import { type ForeignCredential } from "./contract/foreign-credentials.js";
+export declare class ApiError extends Error {
+    readonly status: number;
+    readonly body: unknown;
+    constructor(status: number, body: unknown);
+}
+export declare class ForeignCredentialError extends Error {
+    readonly kind: ForeignCredential;
+    constructor(kind: ForeignCredential);
+}
+export declare class SessionRefreshError extends Error {
+    constructor(message?: string, options?: {
+        cause?: unknown;
+    });
+}
+export declare class RefreshTokenRejectedError extends SessionRefreshError {
+    constructor(options?: {
+        cause?: unknown;
+    });
+}
+export declare class RefreshUnavailableError extends SessionRefreshError {
+    constructor(options?: {
+        cause?: unknown;
+    });
+}
+export declare class SessionUnstorableError extends SessionRefreshError {
+    readonly directory: string;
+    constructor(directory: string, options?: {
+        cause?: unknown;
+    });
+}
+export declare function toSessionRefreshError(error: unknown): SessionRefreshError;
+export declare function formatCommandErrorMessage(error: unknown): string;
+export declare function reportCommandError(error: unknown, options?: {
+    json?: boolean;
+}): number;
+//# sourceMappingURL=errors.d.ts.map

package/dist/cli/lib/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/errors.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,iBAAiB,EAEvB,MAAM,mCAAmC,CAAC;AAK3C,qBAAa,QAAS,SAAQ,KAAK;aAEf,MAAM,EAAE,MAAM;aACd,IAAI,EAAE,OAAO;gBADb,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,OAAO;CAKhC;AAID,qBAAa,sBAAuB,SAAQ,KAAK;IACnC,QAAQ,CAAC,IAAI,EAAE,iBAAiB;gBAAvB,IAAI,EAAE,iBAAiB;CAI7C;AAQD,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,OAAO,GAAE,MAAsC,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI3F;AAKD,qBAAa,yBAA0B,SAAQ,mBAAmB;gBACpD,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAO1C;AAID,qBAAa,uBAAwB,SAAQ,mBAAmB;gBAClD,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAO1C;AAKD,qBAAa,sBAAuB,SAAQ,mBAAmB;IAE3D,QAAQ,CAAC,SAAS,EAAE,MAAM;gBAAjB,SAAS,EAAE,MAAM,EAC1B,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAQhC;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CAKzE;AAID,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAwBhE;AAKD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,MAAM,CAS3F"}