@vendure/cloud 0.2.0 → 0.3.0

package/dist/cli/lib/contract/public-error-details.js

@@ -0,0 +1,248 @@
+// Mirrors the read half of `@vendure-cloud/api-types`'s `public-error-details.ts`. See ./README.md
+// for why this package cannot import it, and `test/cli-contract-parity.test.ts` for what keeps the
+// two answering the same.
+//
+// The write half stays where it is. `trustedPublicErrorDetails`, `providerPublicErrorDetails` and
+// `statusTokenPublicErrorDetails` are how the control plane records an error, and nothing in the
+// CLI records one.
+//
+// The `PublicErrorDetails` brand is not mirrored either. It marks a value as safe to persist and
+// return, which is a claim only the writer can make; here these strings are display output. Two
+// separately declared brands would also be distinct types that never unify, which is worse than
+// not having one.
+import { formatDeploymentResourceLabel, } from "./deployment-resource-labels.js";
+// Signatures of raw infrastructure-provider prose: a versioned provider API
+// path, a retired provider's name, or its API host.
+//
+// Denylist, not vocabulary — same rule as KNOWN_RESOURCE_KINDS below. Nothing
+// emits the retired vendor token any more, but `formatUserFacingErrorDetails`
+// runs on READ over every persisted `errorDetails` row, and rows written before
+// the execution backend was removed (CLO-294) still contain it. Dropping the
+// alternative would echo those rows verbatim instead of describing them.
+// Detection is internal; the scrubbed OUTPUT never names a provider.
+const PROVIDER_DETAIL_RE = /\/v\d+\/(?:teams|projects|orgs|accounts)\/|\bNorthflank\b|https?:\/\/api\.northflank\.com/i;
+const SAFE_PROVIDER_MESSAGES = [
+    /^(?:volume )?(?:is )?(?:still )?(?:attached|in use)\.?$/i,
+    /^(?:service|resource) (?:failed(?: permanently)?|not found|in use)\.?$/i,
+    /^(?:job|request) failed\.?$/i,
+    /^(?:name )?already exists\.?$/i,
+    /^project-level quota exceeded\.?$/i,
+];
+// Denylist, not vocabulary: a kind listed here is recognised so the line is
+// relabelled instead of echoed. Retired kinds stay in the set on purpose —
+// dropping one only lets an old stored error line through unscrubbed.
+const KNOWN_RESOURCE_KINDS = new Set([
+    "Addon",
+    "Condition",
+    "DeploymentService",
+    "EnvVar",
+    "JobRun",
+    "ManualJob",
+    "Project",
+    "SecretGroup",
+    "Subdomain",
+    "Template",
+    "TemplateArguments",
+    "Volume",
+    "Workflow",
+]);
+// Only unambiguous generated refs belong here. Common words such as
+// "database" and "server" may be ordinary application-error prefixes.
+const KNOWN_RESOURCE_REF_LABELS = {
+    migrationRun: "Migration job",
+    searchSecrets: "Search",
+    searchVolume: "Search data",
+    userSecrets: "Environment variables",
+};
+export function formatUserFacingErrorDetails(error, context) {
+    const details = error
+        .split(/\r?\n/)
+        .map((line) => formatUserFacingErrorLine(line, context))
+        .join("\n");
+    return details || "Operation failed";
+}
+export function formatInlineUserFacingErrorReason(error, context) {
+    return formatUserFacingErrorDetails(error, context).replace(/\s*\n\s*/g, "; ");
+}
+function formatUserFacingErrorLine(rawLine, context) {
+    const line = rawLine.trim();
+    if (!line)
+        return rawLine;
+    // The vendor alternative is the shape the removed teardown path actually
+    // persisted; the neutral one is what a replacement backend would write.
+    if (/^Timed out waiting for deleted (?:Northflank|provider) resources to disappear\b/i.test(line)) {
+        return "Timed out waiting for deleted resources to disappear.";
+    }
+    const rollout = formatDeploymentRolloutLine(line);
+    if (rollout)
+        return rollout;
+    const resourceFailure = formatResourceFailure(line, context);
+    if (resourceFailure)
+        return resourceFailure;
+    const refFailure = formatResourceRefFailure(line, context);
+    if (refFailure)
+        return refFailure;
+    return formatErrorMessage(line, context);
+}
+function formatResourceFailure(line, context) {
+    if (!context)
+        return null;
+    const match = line.match(/^([A-Za-z][A-Za-z0-9]*)(?:\s+([^:]+)|:([^:]+)):\s*(.*)$/);
+    if (!match)
+        return null;
+    const kind = match[1];
+    const name = match[2] ?? match[3];
+    if (!kind || !name || !KNOWN_RESOURCE_KINDS.has(kind))
+        return null;
+    const label = formatDeploymentResourceLabel({ kind, name }, context) ?? "Resource";
+    return `${label}: ${formatErrorMessage(match[4] ?? "failed", context)}`;
+}
+function formatResourceRefFailure(line, context) {
+    const match = line.match(/^([A-Za-z][A-Za-z0-9_-]*):\s*(.*)$/);
+    if (!match)
+        return null;
+    const ref = match[1];
+    if (!ref)
+        return null;
+    const label = labelForResourceRef(ref);
+    if (!label)
+        return null;
+    return `${label}: ${formatErrorMessage(match[2] ?? "failed", context)}`;
+}
+function labelForResourceRef(ref) {
+    if (ref in KNOWN_RESOURCE_REF_LABELS)
+        return KNOWN_RESOURCE_REF_LABELS[ref] ?? null;
+    if (ref.startsWith("dep-"))
+        return `Service ${ref.slice("dep-".length)}`;
+    if (ref.startsWith("domain-"))
+        return "Domain routing";
+    if (ref.startsWith("secrets-")) {
+        return `Environment variables for ${ref.slice("secrets-".length)}`;
+    }
+    return null;
+}
+// Rollout vocabulary from the removed orchestrator. Same denylist reasoning as
+// KNOWN_RESOURCE_KINDS and PROVIDER_DETAIL_RE: nothing writes these lines any
+// more, but they are already stored in `deployments` and `teardowns`, and
+// `formatUserFacingErrorDetails` runs on READ. Without the branch the prose
+// matches no scrubber and is echoed verbatim, third-party noun included.
+function formatDeploymentRolloutLine(line) {
+    if (/^Template run exceeded timeout\b/i.test(line)) {
+        return "Deployment rollout timed out; cleanup was requested.";
+    }
+    if (/^Template run\b/i.test(line))
+        return "Deployment rollout failed";
+    return null;
+}
+function formatErrorMessage(message, context) {
+    // `NF: ` is a prefix only the removed writer produced, so this branch is dead
+    // for anything written from now on — but it keeps every already-persisted row
+    // on the default-deny path instead of echoing arbitrary provider prose.
+    const withoutPrefix = message.replace(/^NF:\s*/i, "").trim();
+    if (withoutPrefix !== message.trim())
+        return scrubProviderMessage(withoutPrefix, context);
+    if (PROVIDER_DETAIL_RE.test(message) || containsStructuredError(message)) {
+        const providerMessage = extractProviderBodyMessage(message);
+        if (!providerMessage)
+            return "Provider request failed";
+        return scrubProviderMessage(providerMessage, context);
+    }
+    return scrubGeneratedResourceNames(message.trim(), context);
+}
+function containsStructuredError(message) {
+    const start = message.indexOf("{");
+    const end = message.lastIndexOf("}");
+    if (start === -1 || end <= start)
+        return false;
+    try {
+        const value = JSON.parse(message.slice(start, end + 1));
+        return value !== null && typeof value === "object";
+    }
+    catch {
+        return false;
+    }
+}
+function extractProviderBodyMessage(message) {
+    const start = message.indexOf("{");
+    const end = message.lastIndexOf("}");
+    if (start !== -1) {
+        try {
+            if (end > start) {
+                return findNestedErrorMessage(JSON.parse(message.slice(start, end + 1)));
+            }
+        }
+        catch {
+            // Fall through to the narrow malformed-body extractor.
+        }
+        const malformed = message.slice(start);
+        const match = malformed.match(/"(?:message|error)"\s*:\s*("(?:\\.|[^"\\])*")/);
+        if (match?.[1]) {
+            try {
+                return JSON.parse(match[1]);
+            }
+            catch {
+                return null;
+            }
+        }
+    }
+    return null;
+}
+function findNestedErrorMessage(value) {
+    if (typeof value === "string")
+        return value;
+    if (!value || typeof value !== "object")
+        return null;
+    if (Array.isArray(value)) {
+        for (const item of value) {
+            const message = findNestedErrorMessage(item);
+            if (message)
+                return message;
+        }
+        return null;
+    }
+    const record = value;
+    for (const key of ["message", "error", "detail", "data"]) {
+        const message = findNestedErrorMessage(record[key]);
+        if (message)
+            return message;
+    }
+    return null;
+}
+// Default-deny. Provider prose is untrusted: unless it matches one of the
+// short, id-free phrases we have vetted, it is described rather than echoed.
+function scrubProviderMessage(message, context) {
+    // Retired rollout shapes, kept for the same reason as formatDeploymentRolloutLine:
+    // these reach here nested inside a stored provider body or behind the `NF:`
+    // prefix, where the line-level branch above never sees them.
+    //
+    // One retired shape was deliberately NOT kept: the removed template engine's
+    // `Payload validation failed after resolving inputs. "deployment.external.imagePath"
+    // is required.`, which used to render as "required container image is missing".
+    // It is not a denylist branch — nothing leaks without it, the message falls
+    // through to the default-deny below and reads "Provider request failed" — and
+    // the advice it carried ("push an image") is not actionable while there is no
+    // build backend to produce one (CLO-347). A stored row from before the
+    // decommission gets the generic wording rather than an instruction the
+    // customer cannot follow. Restore the branch with the build pipeline.
+    if (/^template cleanup failed\.?$/i.test(message))
+        return "cleanup failed";
+    if (/\btemplate run\b.*\b(?:failed|failure|error|timed out)\b/i.test(message)) {
+        return "Deployment rollout failed";
+    }
+    const scrubbed = scrubGeneratedResourceNames(message, context);
+    if (SAFE_PROVIDER_MESSAGES.some((pattern) => pattern.test(scrubbed)))
+        return scrubbed;
+    return "Provider request failed";
+}
+function scrubGeneratedResourceNames(message, context) {
+    if (!context)
+        return message;
+    const projectEnvironmentId = `${context.projectSlug}-${context.environmentSlug}`;
+    return message
+        .replace(new RegExp(`${escapeRegExp(projectEnvironmentId)}-[A-Za-z0-9_.-]+`, "g"), "resource")
+        .replace(new RegExp(`\\b${escapeRegExp(projectEnvironmentId)}\\b`, "g"), "environment");
+}
+function escapeRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+//# sourceMappingURL=public-error-details.js.map

package/dist/cli/lib/contract/public-error-details.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-error-details.js","sourceRoot":"","sources":["../../../../src/cli/lib/contract/public-error-details.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,mGAAmG;AACnG,0BAA0B;AAC1B,EAAE;AACF,kGAAkG;AAClG,iGAAiG;AACjG,mBAAmB;AACnB,EAAE;AACF,iGAAiG;AACjG,gGAAgG;AAChG,gGAAgG;AAChG,kBAAkB;AAElB,OAAO,EAEL,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AAEzC,4EAA4E;AAC5E,oDAAoD;AACpD,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,6EAA6E;AAC7E,yEAAyE;AACzE,qEAAqE;AACrE,MAAM,kBAAkB,GACtB,4FAA4F,CAAC;AAC/F,MAAM,sBAAsB,GAAG;IAC7B,0DAA0D;IAC1D,yEAAyE;IACzE,8BAA8B;IAC9B,gCAAgC;IAChC,oCAAoC;CACrC,CAAC;AAEF,4EAA4E;AAC5E,2EAA2E;AAC3E,sEAAsE;AACtE,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,OAAO;IACP,WAAW;IACX,mBAAmB;IACnB,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,SAAS;IACT,aAAa;IACb,WAAW;IACX,UAAU;IACV,mBAAmB;IACnB,QAAQ;IACR,UAAU;CACX,CAAC,CAAC;AAEH,oEAAoE;AACpE,sEAAsE;AACtE,MAAM,yBAAyB,GAA2B;IACxD,YAAY,EAAE,eAAe;IAC7B,aAAa,EAAE,QAAQ;IACvB,YAAY,EAAE,aAAa;IAC3B,WAAW,EAAE,uBAAuB;CACrC,CAAC;AAEF,MAAM,UAAU,4BAA4B,CAC1C,KAAa,EACb,OAAwC;IAExC,MAAM,OAAO,GAAG,KAAK;SAClB,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,yBAAyB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;SACvD,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,OAAO,IAAI,kBAAkB,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,KAAa,EACb,OAAwC;IAExC,OAAO,4BAA4B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,yBAAyB,CAChC,OAAe,EACf,OAAwC;IAExC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,IAAI;QAAE,OAAO,OAAO,CAAC;IAE1B,yEAAyE;IACzE,wEAAwE;IACxE,IACE,kFAAkF,CAAC,IAAI,CAAC,IAAI,CAAC,EAC7F,CAAC;QACD,OAAO,uDAAuD,CAAC;IACjE,CAAC;IAED,MAAM,OAAO,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAE5B,MAAM,eAAe,GAAG,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7D,IAAI,eAAe;QAAE,OAAO,eAAe,CAAC;IAE5C,MAAM,UAAU,GAAG,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3D,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAElC,OAAO,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,qBAAqB,CAC5B,IAAY,EACZ,OAAwC;IAExC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;IACpF,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnE,MAAM,KAAK,GAAG,6BAA6B,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,IAAI,UAAU,CAAC;IACnF,OAAO,GAAG,KAAK,KAAK,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;AAC1E,CAAC;AAED,SAAS,wBAAwB,CAC/B,IAAY,EACZ,OAAwC;IAExC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC/D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACrB,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,GAAG,KAAK,KAAK,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;AAC1E,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,IAAI,GAAG,IAAI,yBAAyB;QAAE,OAAO,yBAAyB,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IACpF,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,WAAW,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IACzE,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACvD,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,OAAO,6BAA6B,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAC/E,8EAA8E;AAC9E,0EAA0E;AAC1E,4EAA4E;AAC5E,yEAAyE;AACzE,SAAS,2BAA2B,CAAC,IAAY;IAC/C,IAAI,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,sDAAsD,CAAC;IAChE,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,2BAA2B,CAAC;IACtE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe,EAAE,OAAwC;IACnF,8EAA8E;IAC9E,8EAA8E;IAC9E,wEAAwE;IACxE,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7D,IAAI,aAAa,KAAK,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,oBAAoB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAE1F,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;QACzE,MAAM,eAAe,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,eAAe;YAAE,OAAO,yBAAyB,CAAC;QACvD,OAAO,oBAAoB,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,2BAA2B,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAe;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,GAAG,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,CAAY,CAAC;QACnE,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,OAAe;IACjD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,GAAG,KAAK,EAAE,CAAC;gBAChB,OAAO,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,CAAY,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;QACzD,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC/E,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAW,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC;QAC9B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;QACzD,MAAM,OAAO,GAAG,sBAAsB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACpD,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,0EAA0E;AAC1E,6EAA6E;AAC7E,SAAS,oBAAoB,CAAC,OAAe,EAAE,OAAwC;IACrF,mFAAmF;IACnF,4EAA4E;IAC5E,6DAA6D;IAC7D,EAAE;IACF,6EAA6E;IAC7E,qFAAqF;IACrF,gFAAgF;IAChF,4EAA4E;IAC5E,8EAA8E;IAC9E,8EAA8E;IAC9E,uEAAuE;IACvE,uEAAuE;IACvE,sEAAsE;IACtE,IAAI,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,gBAAgB,CAAC;IAC3E,IAAI,2DAA2D,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,OAAO,2BAA2B,CAAC;IACrC,CAAC;IACD,MAAM,QAAQ,GAAG,2BAA2B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/D,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IACtF,OAAO,yBAAyB,CAAC;AACnC,CAAC;AAED,SAAS,2BAA2B,CAClC,OAAe,EACf,OAAwC;IAExC,IAAI,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC;IAC7B,MAAM,oBAAoB,GAAG,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IACjF,OAAO,OAAO;SACX,OAAO,CAAC,IAAI,MAAM,CAAC,GAAG,YAAY,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,GAAG,CAAC,EAAE,UAAU,CAAC;SAC7F,OAAO,CAAC,IAAI,MAAM,CAAC,MAAM,YAAY,CAAC,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC"}

package/dist/cli/lib/contract/runtime-operations.d.ts

@@ -0,0 +1,87 @@
+import type { RuntimeIntent, RuntimeState } from "./wire-types.js";
+export declare const RuntimeOperationAction: {
+    readonly STOP: "STOP";
+    readonly START: "START";
+    readonly RESTART: "RESTART";
+};
+export type RuntimeOperationAction = (typeof RuntimeOperationAction)[keyof typeof RuntimeOperationAction];
+export declare const RuntimeOperationStatus: {
+    readonly QUEUED: "QUEUED";
+    readonly RUNNING: "RUNNING";
+    readonly SUCCEEDED: "SUCCEEDED";
+    readonly PARTIAL: "PARTIAL";
+    readonly FAILED: "FAILED";
+};
+export type RuntimeOperationStatus = (typeof RuntimeOperationStatus)[keyof typeof RuntimeOperationStatus];
+export declare const RUNTIME_SERVICE_STATES: readonly ["NOT_PROVISIONED", "STARTED", "STOPPED", "UNKNOWN"];
+export type RuntimeServiceState = (typeof RUNTIME_SERVICE_STATES)[number];
+export declare const RUNTIME_ACTIVITIES: readonly ["AWAKE", "ASLEEP"];
+export type RuntimeActivity = (typeof RUNTIME_ACTIVITIES)[number];
+export declare const RUNTIME_SERVICE_RESULT_OUTCOMES: readonly ["IN_PROGRESS", "SUCCEEDED", "NO_CHANGE", "FAILED"];
+export type RuntimeServiceResultOutcome = (typeof RUNTIME_SERVICE_RESULT_OUTCOMES)[number];
+export declare const TERMINAL_RUNTIME_OPERATION_STATUSES: readonly ["SUCCEEDED", "PARTIAL", "FAILED"];
+export declare function isTerminalRuntimeOperationStatus(status: string): boolean;
+export declare const RUNTIME_OPERATION_INTERRUPTED_REASON = "Resource operation was interrupted with an unknown outcome.";
+export declare const RUNTIME_OPERATION_TIMEOUT_MS: number;
+export declare const RUNTIME_SERVICE_KEYS: readonly ["server", "worker"];
+export type RuntimeServiceKey = (typeof RUNTIME_SERVICE_KEYS)[number];
+export declare const RUNTIME_RESOURCE_KEYS: readonly ["server", "worker", "database", "redis"];
+export type RuntimeResourceKey = (typeof RUNTIME_RESOURCE_KEYS)[number];
+export interface RuntimeResourceResult {
+    resource: RuntimeResourceKey;
+    service?: RuntimeServiceKey;
+    outcome: RuntimeServiceResultOutcome;
+    state: RuntimeServiceState;
+    errorDetails: string | null;
+}
+export interface RuntimeServiceResult extends Omit<RuntimeResourceResult, "resource" | "service"> {
+    service: RuntimeServiceKey;
+}
+export declare function runtimeResultResource(result: RuntimeResourceResult): RuntimeResourceKey | null;
+export interface RuntimeOperationResponse {
+    id: string;
+    environmentId: string;
+    action: RuntimeOperationAction;
+    status: RuntimeOperationStatus;
+    runtimeIntent: RuntimeIntent | null;
+    runtimeState: RuntimeState;
+    results: RuntimeResourceResult[] | null;
+    errorDetails: string | null;
+    startedAt: string | null;
+    completedAt: string | null;
+    createdAt: string;
+}
+export interface CreateRuntimeOperationRequest {
+    action: RuntimeOperationAction;
+    resources?: RuntimeResourceKey[];
+}
+export interface RuntimeServiceStatus {
+    service: RuntimeServiceKey;
+    state: RuntimeServiceState;
+    health: string | null;
+}
+export interface RuntimeResource {
+    name: RuntimeResourceKey;
+    category: "SERVICE" | "DATASTORE";
+    type: "server" | "worker" | "postgresql" | "redis";
+    runtimeState: RuntimeServiceState;
+    health: "HEALTHY" | "DEGRADED" | "UNKNOWN" | null;
+    activity: RuntimeActivity | null;
+    stateReason: string | null;
+    observedAt: string | null;
+    supportedActions: RuntimeOperationAction[];
+    configuration: {
+        version?: string;
+        replicas?: number;
+        storageGb?: number;
+        region?: string;
+    };
+    lastOperation: {
+        id: string;
+        action: RuntimeOperationAction;
+        status: RuntimeOperationStatus;
+        outcome: RuntimeServiceResultOutcome;
+        completedAt: string | null;
+    } | null;
+}
+//# sourceMappingURL=runtime-operations.d.ts.map

package/dist/cli/lib/contract/runtime-operations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-operations.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/contract/runtime-operations.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEnE,eAAO,MAAM,sBAAsB;;;;CAIzB,CAAC;AACX,MAAM,MAAM,sBAAsB,GAChC,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,OAAO,sBAAsB,CAAC,CAAC;AAEvE,eAAO,MAAM,sBAAsB;;;;;;CAMzB,CAAC;AACX,MAAM,MAAM,sBAAsB,GAChC,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,OAAO,sBAAsB,CAAC,CAAC;AAEvE,eAAO,MAAM,sBAAsB,+DAAgE,CAAC;AACpG,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAK1E,eAAO,MAAM,kBAAkB,8BAA+B,CAAC;AAC/D,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE,eAAO,MAAM,+BAA+B,8DAKlC,CAAC;AACX,MAAM,MAAM,2BAA2B,GAAG,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;AAK3F,eAAO,MAAM,mCAAmC,6CAItC,CAAC;AAEX,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAExE;AAKD,eAAO,MAAM,oCAAoC,gEACc,CAAC;AAKhE,eAAO,MAAM,4BAA4B,QAAc,CAAC;AAExD,eAAO,MAAM,oBAAoB,+BAAgC,CAAC;AAClE,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,eAAO,MAAM,qBAAqB,oDAAqD,CAAC;AACxF,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,OAAO,EAAE,2BAA2B,CAAC;IACrC,KAAK,EAAE,mBAAmB,CAAC;IAC3B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,oBAAqB,SAAQ,IAAI,CAAC,qBAAqB,EAAE,UAAU,GAAG,SAAS,CAAC;IAC/F,OAAO,EAAE,iBAAiB,CAAC;CAC5B;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,GAAG,kBAAkB,GAAG,IAAI,CAM9F;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,sBAAsB,CAAC;IAC/B,MAAM,EAAE,sBAAsB,CAAC;IAC/B,aAAa,EAAE,aAAa,GAAG,IAAI,CAAC;IACpC,YAAY,EAAE,YAAY,CAAC;IAC3B,OAAO,EAAE,qBAAqB,EAAE,GAAG,IAAI,CAAC;IACxC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,sBAAsB,CAAC;IAC/B,SAAS,CAAC,EAAE,kBAAkB,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,KAAK,EAAE,mBAAmB,CAAC;IAC3B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,kBAAkB,CAAC;IACzB,QAAQ,EAAE,SAAS,GAAG,WAAW,CAAC;IAGlC,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,YAAY,GAAG,OAAO,CAAC;IACnD,YAAY,EAAE,mBAAmB,CAAC;IAClC,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,IAAI,CAAC;IAGlD,QAAQ,EAAE,eAAe,GAAG,IAAI,CAAC;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,gBAAgB,EAAE,sBAAsB,EAAE,CAAC;IAI3C,aAAa,EAAE;QACb,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,aAAa,EAAE;QACb,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,sBAAsB,CAAC;QAC/B,MAAM,EAAE,sBAAsB,CAAC;QAC/B,OAAO,EAAE,2BAA2B,CAAC;QACrC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,GAAG,IAAI,CAAC;CACV"}

package/dist/cli/lib/contract/runtime-operations.js

@@ -0,0 +1,67 @@
+// Mirrors the half of `@vendure-cloud/api-types`'s `runtime-operations.ts` that the hosted runtime
+// commands read. See ./README.md for why this package cannot import it, including as types.
+//
+// `test/cli-contract-drift.test.ts` compares these declarations with the originals as text, and
+// `test/cli-contract-parity.test.ts` runs the values and guards against the real ones.
+//
+// The three vocabularies the CLI only needs as a set of members — service state, activity and
+// service result outcome — are written as a `const` array plus a derived type rather than as the
+// original's `const` object, so the parity suite has something to hold up against the real one at
+// runtime. `RuntimeOperationAction` and `RuntimeOperationStatus` keep the object form because call
+// sites read their members by name.
+//
+// The write half is not here. Nothing in the CLI records a runtime operation; it starts one and
+// reads what came back.
+export const RuntimeOperationAction = {
+    STOP: "STOP",
+    START: "START",
+    RESTART: "RESTART",
+};
+export const RuntimeOperationStatus = {
+    QUEUED: "QUEUED",
+    RUNNING: "RUNNING",
+    SUCCEEDED: "SUCCEEDED",
+    PARTIAL: "PARTIAL",
+    FAILED: "FAILED",
+};
+export const RUNTIME_SERVICE_STATES = ["NOT_PROVISIONED", "STARTED", "STOPPED", "UNKNOWN"];
+// Whether a started runtime service has a task running at this instant, as a dimension of its own
+// rather than a fifth `RuntimeState` value (ADR-0029). It is meaningful only while VC Runtime State
+// is `STARTED`.
+export const RUNTIME_ACTIVITIES = ["AWAKE", "ASLEEP"];
+export const RUNTIME_SERVICE_RESULT_OUTCOMES = [
+    "IN_PROGRESS",
+    "SUCCEEDED",
+    "NO_CHANGE",
+    "FAILED",
+];
+// Statuses after which an operation never changes again. Shared because every
+// consumer that follows an operation has to know when to stop following it, and
+// a hand-kept copy silently keeps polling forever when a status is added.
+export const TERMINAL_RUNTIME_OPERATION_STATUSES = [
+    RuntimeOperationStatus.SUCCEEDED,
+    RuntimeOperationStatus.PARTIAL,
+    RuntimeOperationStatus.FAILED,
+];
+export function isTerminalRuntimeOperationStatus(status) {
+    return TERMINAL_RUNTIME_OPERATION_STATUSES.includes(status);
+}
+// A resource whose operation died between the pre-flight checkpoint and the
+// provider's answer. The distinction matters: it is not a failed restart, it is a
+// restart with no known result, so no surface may report it as either.
+export const RUNTIME_OPERATION_INTERRUPTED_REASON = "Resource operation was interrupted with an unknown outcome.";
+// How long a client follows an operation before handing it back to the user. The
+// server allows five minutes per resource, so anything shorter abandons work that
+// is still legitimately running.
+export const RUNTIME_OPERATION_TIMEOUT_MS = 15 * 60_000;
+export const RUNTIME_SERVICE_KEYS = ["server", "worker"];
+export const RUNTIME_RESOURCE_KEYS = ["server", "worker", "database", "redis"];
+export function runtimeResultResource(result) {
+    if (RUNTIME_RESOURCE_KEYS.some((key) => key === result.resource))
+        return result.resource;
+    if (result.service && RUNTIME_SERVICE_KEYS.some((key) => key === result.service)) {
+        return result.service;
+    }
+    return null;
+}
+//# sourceMappingURL=runtime-operations.js.map

package/dist/cli/lib/contract/runtime-operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-operations.js","sourceRoot":"","sources":["../../../../src/cli/lib/contract/runtime-operations.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,4FAA4F;AAC5F,EAAE;AACF,gGAAgG;AAChG,uFAAuF;AACvF,EAAE;AACF,8FAA8F;AAC9F,iGAAiG;AACjG,kGAAkG;AAClG,mGAAmG;AACnG,oCAAoC;AACpC,EAAE;AACF,gGAAgG;AAChG,wBAAwB;AAIxB,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;CACV,CAAC;AAIX,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;CACR,CAAC;AAIX,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,iBAAiB,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAU,CAAC;AAGpG,kGAAkG;AAClG,oGAAoG;AACpG,gBAAgB;AAChB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAU,CAAC;AAG/D,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,aAAa;IACb,WAAW;IACX,WAAW;IACX,QAAQ;CACA,CAAC;AAGX,8EAA8E;AAC9E,gFAAgF;AAChF,0EAA0E;AAC1E,MAAM,CAAC,MAAM,mCAAmC,GAAG;IACjD,sBAAsB,CAAC,SAAS;IAChC,sBAAsB,CAAC,OAAO;IAC9B,sBAAsB,CAAC,MAAM;CACrB,CAAC;AAEX,MAAM,UAAU,gCAAgC,CAAC,MAAc;IAC7D,OAAQ,mCAAyD,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACrF,CAAC;AAED,4EAA4E;AAC5E,kFAAkF;AAClF,uEAAuE;AACvE,MAAM,CAAC,MAAM,oCAAoC,GAC/C,6DAA6D,CAAC;AAEhE,iFAAiF;AACjF,kFAAkF;AAClF,iCAAiC;AACjC,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,GAAG,MAAM,CAAC;AAExD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAGlE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAU,CAAC;AAexF,MAAM,UAAU,qBAAqB,CAAC,MAA6B;IACjE,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;IACzF,IAAI,MAAM,CAAC,OAAO,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACjF,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/cli/lib/contract/seeds.d.ts

@@ -0,0 +1,31 @@
+import { z } from "zod";
+export declare const SEED_CONTENT_TYPE = "application/gzip";
+export declare const SEED_UPLOAD_PRECONDITION_HEADER = "if-none-match";
+export declare const SEED_UPLOAD_PRECONDITION_VALUE = "*";
+export interface StoredSeed {
+    name: string;
+    sizeBytes: number;
+    updatedAt: string;
+}
+export interface SeedUploadTicket {
+    name: string;
+    uploadUrl: string;
+}
+export interface SeedApplyResult {
+    operationId: string;
+}
+export declare const SEED_APPLY_STATUSES: readonly ["pending", "success", "failure"];
+export type SeedApplyStatusValue = (typeof SEED_APPLY_STATUSES)[number];
+export interface SeedApplyStatus {
+    operationId: string;
+    status: SeedApplyStatusValue;
+    errorDetails?: string | null;
+}
+export interface SeedDeletionResult {
+    name: string;
+    deleted: true;
+}
+export declare const VC_IDENTIFIER_PATTERN: RegExp;
+export declare const seedArtifactRefSchema: z.ZodString;
+export declare function isValidSeedName(value: string): boolean;
+//# sourceMappingURL=seeds.d.ts.map

package/dist/cli/lib/contract/seeds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seeds.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/contract/seeds.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,eAAO,MAAM,iBAAiB,qBAAqB,CAAC;AAMpD,eAAO,MAAM,+BAA+B,kBAAkB,CAAC;AAC/D,eAAO,MAAM,8BAA8B,MAAM,CAAC;AAElD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAKD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAKD,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,mBAAmB,4CAA6C,CAAC;AAC9E,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExE,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,oBAAoB,CAAC;IAG7B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,IAAI,CAAC;CACf;AAKD,eAAO,MAAM,qBAAqB,QAA+B,CAAC;AAElE,eAAO,MAAM,qBAAqB,aAK2D,CAAC;AAQ9F,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAGtD"}

package/dist/cli/lib/contract/seeds.js

@@ -0,0 +1,43 @@
+// Mirrors the named-seed wire contract: the constants and shapes from `@vendure-cloud/api-types`'s
+// `index.ts`, and the seed-name rule from `@vendure-cloud/environment-state`. See ./README.md for
+// why this package cannot import either, including as types.
+//
+// `SeedApplyStatus.errorDetails` is typed `string` where the original carries the
+// `PublicErrorDetails` brand, for the reason ./README.md gives.
+//
+// This file imports `zod`, so a command reaches it from inside its `run` through `await import(...)`
+// rather than from the module that declares the command tree. `test/cli-published-surface.test.ts`
+// fails if loading the CLI plugin reaches `zod`.
+import { z } from "zod";
+// Seed artifacts are gzipped plain-SQL. This MIME type is a wire contract, not
+// display copy: the presigned upload URL is signed with it, and the client's PUT
+// must send the exact same Content-Type or the signed request is rejected.
+export const SEED_CONTENT_TYPE = "application/gzip";
+// The presigned upload URL is create-only — signed with a conditional-write header
+// so an upload never silently replaces an existing seed. The client PUT must echo
+// this exact header and value; an already-existing object is rejected by storage
+// with HTTP 412, which is what `seed push` renders as a name already taken.
+export const SEED_UPLOAD_PRECONDITION_HEADER = "if-none-match";
+export const SEED_UPLOAD_PRECONDITION_VALUE = "*";
+export const SEED_APPLY_STATUSES = ["pending", "success", "failure"];
+// The shared "lowercase, hyphen-separated identifier" shape. Named for the shape,
+// not one use, so it can back regions, env slugs and seed refs without any of them
+// pretending to be a region.
+export const VC_IDENTIFIER_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+export const seedArtifactRefSchema = z
+    .string()
+    .trim()
+    .min(1)
+    .max(63)
+    .regex(VC_IDENTIFIER_PATTERN, "Seed ref must be a lowercase, hyphen-separated identifier.");
+// A seed name is exactly a seed artifact ref (the two are the same identifier);
+// the on-demand seed CLI (CLO-219) validates `push`/`rm`/`apply` names against this.
+// The schema `.trim()`s, so a padded value like " x " would parse successfully to a
+// different string than was passed in — the object key would then not match the
+// name the caller thinks they used. Require the value to already be canonical
+// (parse succeeds AND produced no change) so validation and the value used agree.
+export function isValidSeedName(value) {
+    const parsed = seedArtifactRefSchema.safeParse(value);
+    return parsed.success && parsed.data === value;
+}
+//# sourceMappingURL=seeds.js.map

package/dist/cli/lib/contract/seeds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seeds.js","sourceRoot":"","sources":["../../../../src/cli/lib/contract/seeds.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,kGAAkG;AAClG,6DAA6D;AAC7D,EAAE;AACF,kFAAkF;AAClF,gEAAgE;AAChE,EAAE;AACF,qGAAqG;AACrG,mGAAmG;AACnG,iDAAiD;AAEjD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,+EAA+E;AAC/E,iFAAiF;AACjF,2EAA2E;AAC3E,MAAM,CAAC,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAEpD,mFAAmF;AACnF,kFAAkF;AAClF,iFAAiF;AACjF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,+BAA+B,GAAG,eAAe,CAAC;AAC/D,MAAM,CAAC,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAuBlD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAU,CAAC;AAgB9E,kFAAkF;AAClF,mFAAmF;AACnF,6BAA6B;AAC7B,MAAM,CAAC,MAAM,qBAAqB,GAAG,4BAA4B,CAAC;AAElE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CAAC,qBAAqB,EAAE,4DAA4D,CAAC,CAAC;AAE9F,gFAAgF;AAChF,qFAAqF;AACrF,oFAAoF;AACpF,gFAAgF;AAChF,8EAA8E;AAC9E,kFAAkF;AAClF,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtD,OAAO,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC;AACjD,CAAC"}

package/dist/cli/lib/contract/source-repository.d.ts

@@ -0,0 +1,73 @@
+export declare const SOURCE_REPOSITORY_LINK_STATUSES: readonly ["ACTIVE", "DISCONNECTED"];
+export type SourceRepositoryLinkStatus = (typeof SOURCE_REPOSITORY_LINK_STATUSES)[number];
+export declare const SOURCE_BRANCH_MAPPING_STATUSES: readonly ["ACTIVE", "INACTIVE"];
+export type SourceBranchMappingStatus = (typeof SOURCE_BRANCH_MAPPING_STATUSES)[number];
+export declare const SOURCE_TRIGGER_STATUSES: readonly ["SUCCESS", "FAILED", "QUEUED"];
+export type SourceTriggerStatus = (typeof SOURCE_TRIGGER_STATUSES)[number];
+export declare const SOURCE_TRIGGER_REASONS: readonly ["PUSH", "ACTIVE_DEPLOYMENT", "DISCONNECTED", "PRE_DEPLOY_FAILED", "GITHUB_UNAVAILABLE", "DEPLOYMENT_CREATED"];
+export type SourceTriggerReason = (typeof SOURCE_TRIGGER_REASONS)[number];
+export declare const SOURCE_DISCONNECT_REASONS: readonly ["REPOSITORY_ACCESS_REMOVED", "REPOSITORY_DELETED", "INSTALLATION_DELETED", "INSTALLATION_REMOVED"];
+export type SourceDisconnectReason = (typeof SOURCE_DISCONNECT_REASONS)[number];
+export interface SourceRepositorySummary {
+    githubRepositoryId: string;
+    owner: string;
+    name: string;
+    fullName: string;
+    defaultBranch: string;
+    cloneUrl: string;
+    vcsInstallationId: string;
+}
+export interface SourceRepositoryLinkDetails {
+    id: string;
+    projectId: string;
+    organizationId: string;
+    vcsInstallationId: string;
+    githubRepositoryId: string;
+    owner: string;
+    name: string;
+    defaultBranch: string;
+    cloneUrl: string;
+    status: SourceRepositoryLinkStatus;
+    disconnectedReason: SourceDisconnectReason | null;
+    disconnectedAt: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface SourceBranchMappingDetails {
+    id: string;
+    environmentId: string;
+    organizationId: string;
+    sourceRepositoryLinkId: string;
+    branch: string;
+    status: SourceBranchMappingStatus;
+    lastTriggerStatus: SourceTriggerStatus | null;
+    lastTriggerReason: SourceTriggerReason | null;
+    lastTriggerError: string | null;
+    lastTriggerCommitSha: string | null;
+    lastTriggerAt: string | null;
+    lastTriggeredDeploymentId: string | null;
+    desiredCommitSha: string | null;
+    desiredCommitMessage: string | null;
+    desiredCommitAt: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface ManualSourceTriggerResult {
+    deploymentId: string;
+}
+export declare const VCS_LINK_SESSION_STATUSES: readonly ["PENDING", "COMPLETED", "EXPIRED"];
+export type VcsLinkSessionStatusValue = (typeof VCS_LINK_SESSION_STATUSES)[number];
+export interface VcsInstallationSummary {
+    id: string;
+    githubAccountLogin: string;
+    githubAccountType: string;
+}
+export interface VcsLinkSessionResponse {
+    sessionId: string;
+    installUrl: string;
+}
+export interface VcsLinkSessionStatus {
+    status: VcsLinkSessionStatusValue;
+    installation?: VcsInstallationSummary | null;
+}
+//# sourceMappingURL=source-repository.d.ts.map

package/dist/cli/lib/contract/source-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-repository.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/contract/source-repository.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,+BAA+B,qCAAsC,CAAC;AACnF,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1F,eAAO,MAAM,8BAA8B,iCAAkC,CAAC;AAC9E,MAAM,MAAM,yBAAyB,GAAG,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC;AAExF,eAAO,MAAM,uBAAuB,0CAA2C,CAAC;AAChF,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3E,eAAO,MAAM,sBAAsB,yHAOzB,CAAC;AACX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1E,eAAO,MAAM,yBAAyB,8GAK5B,CAAC;AACX,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhF,MAAM,WAAW,uBAAuB;IACtC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,0BAA0B,CAAC;IACnC,kBAAkB,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAClD,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,yBAAyB,CAAC;IAClC,iBAAiB,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC9C,iBAAiB,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC9C,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,yBAAyB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,yBAAyB;IACxC,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,eAAO,MAAM,yBAAyB,8CAA+C,CAAC;AACtF,MAAM,MAAM,yBAAyB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnF,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,yBAAyB,CAAC;IAClC,YAAY,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;CAC9C"}

package/dist/cli/lib/contract/source-repository.js

@@ -0,0 +1,31 @@
+// Mirrors the Source Repository Link, branch mapping and repository-install shapes from
+// `@vendure-cloud/api-types`'s `index.ts`. See ./README.md for why this package cannot import them,
+// including as types.
+//
+// Two command families read this file: `deploy` and `deploy --source` render a branch mapping and
+// the result of a manual trigger, and the `source` and `init` flows read the whole install
+// conversation. It holds the read side only — the request bodies stay in `@vendure-cloud/api-types`
+// with the control plane that validates them.
+//
+// Each vocabulary is a `const` array plus a derived type where the original is a bare union, so a
+// call site can enumerate the members and `test/cli-contract-parity.test.ts` can hold the derived
+// type up against the real one.
+export const SOURCE_REPOSITORY_LINK_STATUSES = ["ACTIVE", "DISCONNECTED"];
+export const SOURCE_BRANCH_MAPPING_STATUSES = ["ACTIVE", "INACTIVE"];
+export const SOURCE_TRIGGER_STATUSES = ["SUCCESS", "FAILED", "QUEUED"];
+export const SOURCE_TRIGGER_REASONS = [
+    "PUSH",
+    "ACTIVE_DEPLOYMENT",
+    "DISCONNECTED",
+    "PRE_DEPLOY_FAILED",
+    "GITHUB_UNAVAILABLE",
+    "DEPLOYMENT_CREATED",
+];
+export const SOURCE_DISCONNECT_REASONS = [
+    "REPOSITORY_ACCESS_REMOVED",
+    "REPOSITORY_DELETED",
+    "INSTALLATION_DELETED",
+    "INSTALLATION_REMOVED",
+];
+export const VCS_LINK_SESSION_STATUSES = ["PENDING", "COMPLETED", "EXPIRED"];
+//# sourceMappingURL=source-repository.js.map

package/dist/cli/lib/contract/source-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-repository.js","sourceRoot":"","sources":["../../../../src/cli/lib/contract/source-repository.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,oGAAoG;AACpG,sBAAsB;AACtB,EAAE;AACF,kGAAkG;AAClG,2FAA2F;AAC3F,oGAAoG;AACpG,8CAA8C;AAC9C,EAAE;AACF,kGAAkG;AAClG,kGAAkG;AAClG,gCAAgC;AAEhC,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,QAAQ,EAAE,cAAc,CAAU,CAAC;AAGnF,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAU,CAAC;AAG9E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAGhF,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,MAAM;IACN,mBAAmB;IACnB,cAAc;IACd,mBAAmB;IACnB,oBAAoB;IACpB,oBAAoB;CACZ,CAAC;AAGX,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,2BAA2B;IAC3B,oBAAoB;IACpB,sBAAsB;IACtB,sBAAsB;CACd,CAAC;AAsDX,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAU,CAAC"}