@vendure/cloud 0.3.2 → 0.5.0-dev.20261014172655.g652e750

package/dist/cli/lib/cli-login.js

@@ -0,0 +1,155 @@
+import { createRequire } from "node:module";
+import { getApiUrl } from "./config.js";
+import { assertLoginPairing } from "./console-pairing.js";
+import { CliLoginError, CliLoginFailure } from "./errors.js";
+import { AUTH_LOGIN_COMMAND } from "./invocation.js";
+import { logger } from "./logger.js";
+export const CORE_ERROR_FAILURES = [
+    ["NotLoggedInError", CliLoginFailure.NOT_LOGGED_IN],
+    ["SessionRejectedError", CliLoginFailure.SESSION_REJECTED],
+    ["ReauthenticationRequiredError", CliLoginFailure.REAUTHENTICATION_REQUIRED],
+    ["SessionLockUnavailableError", CliLoginFailure.LOCK_UNAVAILABLE],
+    ["SessionUnstorableError", CliLoginFailure.UNSTORABLE],
+    ["SessionRefreshUnavailableError", CliLoginFailure.REFRESH_UNAVAILABLE],
+];
+let loaded;
+export function loadCliLogin() {
+    if (!loaded) {
+        loaded = fromCoreModule(requireCoreAuth());
+    }
+    return loaded;
+}
+// A token for the control plane `getApiUrl` names, from the Vendure CLI login.
+export async function getUserAccessToken() {
+    const login = loadCliLogin();
+    const consoleApiUrl = login.consoleApiUrl();
+    assertLoginPairing(getApiUrl(), consoleApiUrl);
+    let token;
+    try {
+        token = await login.getAccessToken();
+    }
+    catch (error) {
+        throw toCliLoginError(login, error);
+    }
+    if (!token) {
+        throw new CliLoginError(CliLoginFailure.NOT_LOGGED_IN, notLoggedInMessage(consoleApiUrl));
+    }
+    return token;
+}
+// One renewal after a 401. Core reuses a token another process already rotated, so concurrent
+// commands spend the single-use refresh token once.
+export async function refreshUserAccessToken(failedAccessToken) {
+    const login = loadCliLogin();
+    try {
+        return await login.refreshAccessToken(failedAccessToken);
+    }
+    catch (error) {
+        throw toCliLoginError(login, error);
+    }
+}
+function toCliLoginError(login, error) {
+    if (error instanceof CliLoginError)
+        return error;
+    const failure = login.classify(error);
+    if (failure === CliLoginFailure.UNCLASSIFIED || !(error instanceof Error)) {
+        logger.debug({ error }, "The Vendure CLI login failed for an unclassified reason");
+        return new CliLoginError(CliLoginFailure.UNCLASSIFIED, `Could not use your Vendure CLI login. Run \`${AUTH_LOGIN_COMMAND}\` to sign in again.`, { cause: error });
+    }
+    return new CliLoginError(failure, customerMessage(login, failure, error), { cause: error });
+}
+// Core's messages name the next step. Two can name the identity provider, which customer-facing
+// copy must not, so those are reworded and core's error stays the cause.
+function customerMessage(login, failure, error) {
+    if (failure === CliLoginFailure.REAUTHENTICATION_REQUIRED) {
+        const code = "code" in error && typeof error.code === "string" ? ` (${error.code})` : "";
+        return `Your organization requires you to sign in again${code}. Run \`${AUTH_LOGIN_COMMAND}\`.`;
+    }
+    if (failure === CliLoginFailure.NOT_LOGGED_IN) {
+        return notLoggedInMessage(login.consoleApiUrl());
+    }
+    if (failure === CliLoginFailure.REFRESH_UNAVAILABLE) {
+        return `Could not reach the authentication service to renew your CLI session. Your login was kept, so run the command again. If it keeps failing, run \`${AUTH_LOGIN_COMMAND}\`.`;
+    }
+    return error.message;
+}
+function notLoggedInMessage(consoleApiUrl) {
+    return `No Vendure CLI login for ${consoleApiUrl}. Run \`${AUTH_LOGIN_COMMAND}\` to sign in, or use a Vendure Cloud API key with --token or VENDURE_CLOUD_TOKEN.`;
+}
+function fromCoreModule(core) {
+    return {
+        getAccessToken: async () => {
+            const token = await core.getAccessToken();
+            if (token === undefined || typeof token === "string")
+                return token;
+            throw new Error("@vendure/cli returned an access token that is not a string.");
+        },
+        refreshAccessToken: async (failedAccessToken) => {
+            const token = await core.refreshAccessToken(failedAccessToken);
+            if (typeof token === "string" && token.length > 0)
+                return token;
+            throw new Error("@vendure/cli returned a renewed access token that is not a string.");
+        },
+        consoleApiUrl: () => {
+            const status = core.readAuthStatus();
+            if (isRecord(status) && typeof status.consoleApiUrl === "string") {
+                return status.consoleApiUrl;
+            }
+            throw new Error("@vendure/cli did not report which Vendure Console it signs in to.");
+        },
+        classify: (error) => {
+            for (const [errorClass, failure] of core.errorClasses) {
+                if (error instanceof errorClass)
+                    return failure;
+            }
+            return CliLoginFailure.UNCLASSIFIED;
+        },
+    };
+}
+// The copy beside this package belongs to the host that loaded the plugin, in both activation
+// scopes. A project's own copy can differ from the core that ran `vendure auth login`, so the
+// working directory is only a fallback. A copy without the login API is skipped.
+function requireCoreAuth() {
+    for (const base of [import.meta.url, `${process.cwd()}/package.json`]) {
+        let candidate;
+        try {
+            candidate = createRequire(base)("@vendure/cli");
+        }
+        catch {
+            continue;
+        }
+        const core = readCoreAuth(candidate);
+        if (core)
+            return core;
+    }
+    throw new CliLoginError(CliLoginFailure.UNCLASSIFIED, `Vendure Cloud commands sign in through the Vendure CLI login, which this installation of @vendure/cli does not provide. Install the @vendure/cli version that @vendure/cloud lists as its peer, then run \`${AUTH_LOGIN_COMMAND}\`.`);
+}
+function readCoreAuth(candidate) {
+    if (!isRecord(candidate))
+        return undefined;
+    const { getAccessToken, refreshAccessToken, readAuthStatus } = candidate;
+    if (typeof getAccessToken !== "function" ||
+        typeof refreshAccessToken !== "function" ||
+        typeof readAuthStatus !== "function") {
+        return undefined;
+    }
+    const errorClasses = [];
+    for (const [name, failure] of CORE_ERROR_FAILURES) {
+        const errorClass = candidate[name];
+        if (!isErrorClass(errorClass))
+            return undefined;
+        errorClasses.push([errorClass, failure]);
+    }
+    return {
+        getAccessToken: () => Promise.resolve(getAccessToken()),
+        refreshAccessToken: (failedAccessToken) => Promise.resolve(refreshAccessToken(failedAccessToken)),
+        readAuthStatus: () => readAuthStatus(),
+        errorClasses,
+    };
+}
+function isErrorClass(value) {
+    return typeof value === "function" && value.prototype instanceof Error;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null;
+}
+//# sourceMappingURL=cli-login.js.map

package/dist/cli/lib/cli-login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-login.js","sourceRoot":"","sources":["../../../src/cli/lib/cli-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAuBrC,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,CAAC,kBAAkB,EAAE,eAAe,CAAC,aAAa,CAAC;IACnD,CAAC,sBAAsB,EAAE,eAAe,CAAC,gBAAgB,CAAC;IAC1D,CAAC,+BAA+B,EAAE,eAAe,CAAC,yBAAyB,CAAC;IAC5E,CAAC,6BAA6B,EAAE,eAAe,CAAC,gBAAgB,CAAC;IACjE,CAAC,wBAAwB,EAAE,eAAe,CAAC,UAAU,CAAC;IACtD,CAAC,gCAAgC,EAAE,eAAe,CAAC,mBAAmB,CAAC;CAC/D,CAAC;AAEX,IAAI,MAA4B,CAAC;AAEjC,MAAM,UAAU,YAAY;IAC1B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,cAAc,CAAC,eAAe,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC;IAC5C,kBAAkB,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;IAC/C,IAAI,KAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,aAAa,CAAC,eAAe,CAAC,aAAa,EAAE,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8FAA8F;AAC9F,oDAAoD;AACpD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,iBAAyB;IACpE,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAe,EAAE,KAAc;IACtD,IAAI,KAAK,YAAY,aAAa;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,eAAe,CAAC,YAAY,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QAC1E,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,yDAAyD,CAAC,CAAC;QACnF,OAAO,IAAI,aAAa,CACtB,eAAe,CAAC,YAAY,EAC5B,+CAA+C,kBAAkB,sBAAsB,EACvF,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,aAAa,CAAC,OAAO,EAAE,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAC9F,CAAC;AAED,gGAAgG;AAChG,yEAAyE;AACzE,SAAS,eAAe,CAAC,KAAe,EAAE,OAAwB,EAAE,KAAY;IAC9E,IAAI,OAAO,KAAK,eAAe,CAAC,yBAAyB,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,OAAO,kDAAkD,IAAI,WAAW,kBAAkB,KAAK,CAAC;IAClG,CAAC;IACD,IAAI,OAAO,KAAK,eAAe,CAAC,aAAa,EAAE,CAAC;QAC9C,OAAO,kBAAkB,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,OAAO,KAAK,eAAe,CAAC,mBAAmB,EAAE,CAAC;QACpD,OAAO,mJAAmJ,kBAAkB,KAAK,CAAC;IACpL,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC;AACvB,CAAC;AAED,SAAS,kBAAkB,CAAC,aAAqB;IAC/C,OAAO,4BAA4B,aAAa,WAAW,kBAAkB,oFAAoF,CAAC;AACpK,CAAC;AAED,SAAS,cAAc,CAAC,IAAoB;IAC1C,OAAO;QACL,cAAc,EAAE,KAAK,IAAI,EAAE;YACzB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC1C,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;QACD,kBAAkB,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;YAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;YAC/D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACxF,CAAC;QACD,aAAa,EAAE,GAAG,EAAE;YAClB,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YACrC,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;gBACjE,OAAO,MAAM,CAAC,aAAa,CAAC;YAC9B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF,CAAC;QACD,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;YAClB,KAAK,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtD,IAAI,KAAK,YAAY,UAAU;oBAAE,OAAO,OAAO,CAAC;YAClD,CAAC;YACD,OAAO,eAAe,CAAC,YAAY,CAAC;QACtC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,8FAA8F;AAC9F,iFAAiF;AACjF,SAAS,eAAe;IACtB,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,CAAC;QACtE,IAAI,SAAkB,CAAC;QACvB,IAAI,CAAC;YACH,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IACD,MAAM,IAAI,aAAa,CACrB,eAAe,CAAC,YAAY,EAC5B,8MAA8M,kBAAkB,KAAK,CACtO,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,SAAkB;IACtC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,EAAE,cAAc,EAAE,kBAAkB,EAAE,cAAc,EAAE,GAAG,SAAS,CAAC;IACzE,IACE,OAAO,cAAc,KAAK,UAAU;QACpC,OAAO,kBAAkB,KAAK,UAAU;QACxC,OAAO,cAAc,KAAK,UAAU,EACpC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,YAAY,GAAkD,EAAE,CAAC;IACvE,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,mBAAmB,EAAE,CAAC;QAClD,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;YAAE,OAAO,SAAS,CAAC;QAChD,YAAY,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO;QACL,cAAc,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QACvD,kBAAkB,EAAE,CAAC,iBAAiB,EAAE,EAAE,CACxC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;QACxD,cAAc,EAAE,GAAG,EAAE,CAAC,cAAc,EAAE;QACtC,YAAY;KACb,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,OAAO,KAAK,KAAK,UAAU,IAAI,KAAK,CAAC,SAAS,YAAY,KAAK,CAAC;AACzE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC"}

package/dist/cli/lib/cloud-api-url.d.ts

@@ -0,0 +1,2 @@
+export declare const DEFAULT_CLOUD_API_URL = "https://api.cloud.vendure.io";
+//# sourceMappingURL=cloud-api-url.d.ts.map

package/dist/cli/lib/cloud-api-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-api-url.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/cloud-api-url.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,qBAAqB,iCAAiC,CAAC"}

package/dist/cli/lib/cloud-api-url.js

@@ -0,0 +1,3 @@
+// The production control plane, which a command reaches when `VENDURE_CLOUD_API_URL` is unset.
+export const DEFAULT_CLOUD_API_URL = "https://api.cloud.vendure.io";
+//# sourceMappingURL=cloud-api-url.js.map

package/dist/cli/lib/cloud-api-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-api-url.js","sourceRoot":"","sources":["../../../src/cli/lib/cloud-api-url.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,MAAM,CAAC,MAAM,qBAAqB,GAAG,8BAA8B,CAAC"}

package/dist/cli/lib/commit.d.ts

@@ -0,0 +1,4 @@
+import type { SourceBranchMappingDetails } from "./contract/source-repository.js";
+export declare function shortSha(sha: string): string;
+export declare function pendingCommitSha(mapping: SourceBranchMappingDetails): string | null;
+//# sourceMappingURL=commit.d.ts.map

package/dist/cli/lib/commit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commit.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/commit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAKlF,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE5C;AAQD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,0BAA0B,GAAG,MAAM,GAAG,IAAI,CASnF"}

package/dist/cli/lib/commit.js

@@ -0,0 +1,21 @@
+// Reading commits off a branch mapping, for the two command families that show them.
+// The first seven characters, which is how a commit is written everywhere a customer reads one.
+export function shortSha(sha) {
+    return sha.slice(0, 7);
+}
+// The commit a mapping wants deployed that no successful trigger has deployed, or null when the
+// mapping is up to date. Anything other than a success on that exact SHA leaves it pending, so a
+// failed or queued trigger still counts.
+//
+// Falsiness, not `=== null`: the mapping is a `client.get<T>` cast, so a control plane that omits
+// the field would return `undefined` from a function declaring `string | null`.
+export function pendingCommitSha(mapping) {
+    if (!mapping.desiredCommitSha)
+        return null;
+    if (mapping.lastTriggerStatus === "SUCCESS" &&
+        mapping.lastTriggerCommitSha === mapping.desiredCommitSha) {
+        return null;
+    }
+    return mapping.desiredCommitSha;
+}
+//# sourceMappingURL=commit.js.map

package/dist/cli/lib/commit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commit.js","sourceRoot":"","sources":["../../../src/cli/lib/commit.ts"],"names":[],"mappings":"AAEA,qFAAqF;AAErF,gGAAgG;AAChG,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACzB,CAAC;AAED,gGAAgG;AAChG,iGAAiG;AACjG,yCAAyC;AACzC,EAAE;AACF,kGAAkG;AAClG,gFAAgF;AAChF,MAAM,UAAU,gBAAgB,CAAC,OAAmC;IAClE,IAAI,CAAC,OAAO,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC;IAC3C,IACE,OAAO,CAAC,iBAAiB,KAAK,SAAS;QACvC,OAAO,CAAC,oBAAoB,KAAK,OAAO,CAAC,gBAAgB,EACzD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,OAAO,CAAC,gBAAgB,CAAC;AAClC,CAAC"}

package/dist/cli/lib/config-revisions.d.ts

@@ -0,0 +1,9 @@
+import type { ApiClient } from "./api-client.js";
+import type { ConfigRevisionKeyChange, ConfigRevisionStatusResponse } from "./types.js";
+export declare function fetchConfigRevisionStatus(client: ApiClient, environmentId: string): Promise<ConfigRevisionStatusResponse>;
+export declare function formatConfigRevisionChanges(changes: readonly ConfigRevisionKeyChange[]): string;
+export declare function formatConfigRevisionHeader(status: ConfigRevisionStatusResponse): string | null;
+export declare function formatSavedConfigRevision(status: ConfigRevisionStatusResponse, invocation: string): string | null;
+export declare function describeSavedConfiguration(client: ApiClient, environmentId: string, invocation: string): Promise<string>;
+export declare function parseConfigRevisionOption(value: string): number | "latest";
+//# sourceMappingURL=config-revisions.d.ts.map

package/dist/cli/lib/config-revisions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-revisions.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/config-revisions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,KAAK,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAIxF,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,SAAS,EACjB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,4BAA4B,CAAC,CAIvC;AAED,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,SAAS,uBAAuB,EAAE,GAAG,MAAM,CAE/F;AAKD,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,4BAA4B,GAAG,MAAM,GAAG,IAAI,CAM9F;AAGD,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,4BAA4B,EACpC,UAAU,EAAE,MAAM,GACjB,MAAM,GAAG,IAAI,CAMf;AAKD,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,SAAS,EACjB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,CAYjB;AAID,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,CAQ1E"}

package/dist/cli/lib/config-revisions.js

@@ -0,0 +1,52 @@
+import { logger } from "./logger.js";
+// What a VC Environment's saved variables say against what its services run. Key names only: the
+// control plane never returns a value from this route.
+export function fetchConfigRevisionStatus(client, environmentId) {
+    return client.get(`/environments/${environmentId}/config-revisions`);
+}
+export function formatConfigRevisionChanges(changes) {
+    return changes.map((change) => `${change.key} ${change.change}`).join(", ");
+}
+// One line for `env list`: the revision the services run, or the revision waiting to be deployed.
+// A save that changed nothing appends a revision without making anything pending, so the deployed
+// revision is the applied one, not the latest.
+export function formatConfigRevisionHeader(status) {
+    if (status.pending && status.latest) {
+        const running = status.applied ? `deployed: ${status.applied.number}` : "none deployed yet";
+        return `Configuration revision ${status.latest.number} is pending (${running})`;
+    }
+    return status.applied ? `Configuration revision ${status.applied.number} (deployed)` : null;
+}
+// What the CLI says after a write: the revision it created, and that nothing running has changed.
+export function formatSavedConfigRevision(status, invocation) {
+    if (!status.latest)
+        return null;
+    if (!status.pending) {
+        return `Saved as configuration revision ${status.latest.number}, which changes nothing the services run, so there is nothing to deploy.`;
+    }
+    return `Saved as configuration revision ${status.latest.number}. Running services are unchanged until you run \`${invocation} deploy\` (in a script, \`${invocation} deploy --config-revision ${status.latest.number}\`).`;
+}
+// The sentence a write command ends on. The write has already succeeded when this runs, so a
+// failure to read the revision it created is logged and answered with the plain sentence instead of
+// failing the command.
+export async function describeSavedConfiguration(client, environmentId, invocation) {
+    try {
+        const status = await fetchConfigRevisionStatus(client, environmentId);
+        return (formatSavedConfigRevision(status, invocation) ?? `Run \`${invocation} deploy\` to apply.`);
+    }
+    catch (error) {
+        logger.warn(`Could not read the configuration revision after a save: ${error instanceof Error ? error.message : String(error)}`);
+        return `Run \`${invocation} deploy\` to apply.`;
+    }
+}
+// `--config-revision`: a revision number, or "latest", which the caller resolves against the control
+// plane so a revision saved a moment later is not applied by mistake.
+export function parseConfigRevisionOption(value) {
+    if (value === "latest")
+        return value;
+    if (!/^[1-9][0-9]*$/.test(value)) {
+        throw new Error(`--config-revision takes a revision number or "latest", but received "${value}".`);
+    }
+    return Number(value);
+}
+//# sourceMappingURL=config-revisions.js.map

package/dist/cli/lib/config-revisions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-revisions.js","sourceRoot":"","sources":["../../../src/cli/lib/config-revisions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC,iGAAiG;AACjG,uDAAuD;AACvD,MAAM,UAAU,yBAAyB,CACvC,MAAiB,EACjB,aAAqB;IAErB,OAAO,MAAM,CAAC,GAAG,CACf,iBAAiB,aAAa,mBAAmB,CAClD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,OAA2C;IACrF,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9E,CAAC;AAED,kGAAkG;AAClG,kGAAkG;AAClG,+CAA+C;AAC/C,MAAM,UAAU,0BAA0B,CAAC,MAAoC;IAC7E,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC;QAC5F,OAAO,0BAA0B,MAAM,CAAC,MAAM,CAAC,MAAM,gBAAgB,OAAO,GAAG,CAAC;IAClF,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,MAAM,CAAC,OAAO,CAAC,MAAM,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9F,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,yBAAyB,CACvC,MAAoC,EACpC,UAAkB;IAElB,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,mCAAmC,MAAM,CAAC,MAAM,CAAC,MAAM,0EAA0E,CAAC;IAC3I,CAAC;IACD,OAAO,mCAAmC,MAAM,CAAC,MAAM,CAAC,MAAM,oDAAoD,UAAU,6BAA6B,UAAU,6BAA6B,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC;AAC7N,CAAC;AAED,6FAA6F;AAC7F,oGAAoG;AACpG,uBAAuB;AACvB,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,MAAiB,EACjB,aAAqB,EACrB,UAAkB;IAElB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACtE,OAAO,CACL,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,SAAS,UAAU,qBAAqB,CAC1F,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CACT,2DAA2D,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACpH,CAAC;QACF,OAAO,SAAS,UAAU,qBAAqB,CAAC;IAClD,CAAC;AACH,CAAC;AAED,qGAAqG;AACrG,sEAAsE;AACtE,MAAM,UAAU,yBAAyB,CAAC,KAAa;IACrD,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,wEAAwE,KAAK,IAAI,CAClF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC"}

package/dist/cli/lib/config.d.ts

@@ -1,7 +1,3 @@
 export declare const CONFIG_DIR: string;
-export declare const AUTH_FILE: string;
-export declare const REFRESH_LOCK_FILE: string;
-export declare const WORKOS_DEVICE_AUTHORIZE_URL = "https://api.workos.com/user_management/authorize/device";
-export declare const WORKOS_AUTHENTICATE_URL = "https://api.workos.com/user_management/authenticate";
 export declare function getApiUrl(): string;
 //# sourceMappingURL=config.d.ts.map

package/dist/cli/lib/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/config.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,UAAU,QAAoC,CAAC;AAC5D,eAAO,MAAM,SAAS,QAAgC,CAAC;AACvD,eAAO,MAAM,iBAAiB,QAAmC,CAAC;AAElE,eAAO,MAAM,2BAA2B,4DACmB,CAAC;AAC5D,eAAO,MAAM,uBAAuB,wDAAwD,CAAC;AAE7F,wBAAgB,SAAS,IAAI,MAAM,CAElC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/config.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,UAAU,QAAoC,CAAC;AAE5D,wBAAgB,SAAS,IAAI,MAAM,CAElC"}

package/dist/cli/lib/config.js

@@ -1,11 +1,9 @@
 import { homedir } from "node:os";
 import { join } from "node:path";
+import { DEFAULT_CLOUD_API_URL } from "./cloud-api-url.js";
+// Holds `context.json`, the VC Environment selected for each VC Project.
 export const CONFIG_DIR = join(homedir(), ".vendure-cloud");
-export const AUTH_FILE = join(CONFIG_DIR, "auth.json");
-export const REFRESH_LOCK_FILE = join(CONFIG_DIR, "refresh.lock");
-export const WORKOS_DEVICE_AUTHORIZE_URL = "https://api.workos.com/user_management/authorize/device";
-export const WORKOS_AUTHENTICATE_URL = "https://api.workos.com/user_management/authenticate";
 export function getApiUrl() {
-    return process.env.VENDURE_CLOUD_API_URL || "https://api.cloud.vendure.io";
+    return process.env.VENDURE_CLOUD_API_URL || DEFAULT_CLOUD_API_URL;
 }
 //# sourceMappingURL=config.js.map

package/dist/cli/lib/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/cli/lib/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,gBAAgB,CAAC,CAAC;AAC5D,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AACvD,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,2BAA2B,GACtC,yDAAyD,CAAC;AAC5D,MAAM,CAAC,MAAM,uBAAuB,GAAG,qDAAqD,CAAC;AAE7F,MAAM,UAAU,SAAS;IACvB,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,8BAA8B,CAAC;AAC7E,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/cli/lib/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,yEAAyE;AACzE,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,gBAAgB,CAAC,CAAC;AAE5D,MAAM,UAAU,SAAS;IACvB,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,qBAAqB,CAAC;AACpE,CAAC"}

package/dist/cli/lib/console-pairing.d.ts

@@ -0,0 +1,2 @@
+export declare function assertLoginPairing(cloudApiUrl: string, consoleApiUrl: string): void;
+//# sourceMappingURL=console-pairing.d.ts.map

package/dist/cli/lib/console-pairing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"console-pairing.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/console-pairing.ts"],"names":[],"mappings":"AAuBA,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI,CA4BnF"}

package/dist/cli/lib/console-pairing.js

@@ -0,0 +1,58 @@
+import { DEFAULT_CLOUD_API_URL } from "./cloud-api-url.js";
+import { LoginPairingError } from "./errors.js";
+import { AUTH_LOGIN_COMMAND } from "./invocation.js";
+// Which Vendure Console each control plane accepts a Vendure CLI login from. A control plane
+// rejects a token from any other Console, so a mismatch is reported before the token leaves the
+// machine. The token also signs in to Console, so a control plane that is neither listed here nor
+// on loopback gets none. API keys never reach this check.
+const PRODUCTION_CONSOLE_API_ORIGIN = "https://api.vendure.io";
+const STAGING_CONSOLE_API_ORIGIN = "https://staging.api.vendure.io";
+const HOSTED_CONTROL_PLANES = [
+    {
+        cloudApiOrigin: new URL(DEFAULT_CLOUD_API_URL).origin,
+        consoleApiOrigin: PRODUCTION_CONSOLE_API_ORIGIN,
+    },
+    { cloudApiOrigin: "https://api.cloud.vendure.dev", consoleApiOrigin: STAGING_CONSOLE_API_ORIGIN },
+];
+// The hostnames `@vendure/cli` treats as a local Console.
+const LOOPBACK_HOSTNAMES = ["localhost", "127.0.0.1", "[::1]"];
+export function assertLoginPairing(cloudApiUrl, consoleApiUrl) {
+    const cloud = parseUrl(cloudApiUrl);
+    if (!cloud) {
+        throw new LoginPairingError(`VENDURE_CLOUD_API_URL is not a valid URL: ${cloudApiUrl}`);
+    }
+    const consoleApi = parseUrl(consoleApiUrl);
+    const consoleOrigin = consoleApi?.origin ?? consoleApiUrl;
+    const consoleIsLoopback = consoleApi !== undefined && isLoopback(consoleApi);
+    if (isLoopback(cloud)) {
+        // A local control plane verifies logins against the staging identity environment or a local
+        // Console, never production.
+        if (consoleOrigin === STAGING_CONSOLE_API_ORIGIN || consoleIsLoopback)
+            return;
+        throw new LoginPairingError(`A local Vendure Cloud control plane accepts a login from the staging Vendure Console or a local one, not from ${consoleOrigin}. Set VENDURE_CONSOLE_API_URL=${STAGING_CONSOLE_API_ORIGIN} and run \`${AUTH_LOGIN_COMMAND}\`.`);
+    }
+    const hosted = HOSTED_CONTROL_PLANES.find((entry) => entry.cloudApiOrigin === cloud.origin);
+    if (!hosted) {
+        throw new LoginPairingError(`Vendure Cloud does not send your Vendure CLI login to ${cloud.origin}. Unset VENDURE_CLOUD_API_URL, or use a Vendure Cloud API key with --token or VENDURE_CLOUD_TOKEN.`);
+    }
+    if (consoleOrigin === hosted.consoleApiOrigin)
+        return;
+    throw new LoginPairingError(`Vendure Cloud at ${cloud.origin} accepts a login from the Vendure Console at ${hosted.consoleApiOrigin}, but your Vendure CLI login is for ${consoleOrigin}. ${consoleAdvice(hosted.consoleApiOrigin)} and run \`${AUTH_LOGIN_COMMAND}\`.`);
+}
+function consoleAdvice(consoleApiOrigin) {
+    return consoleApiOrigin === PRODUCTION_CONSOLE_API_ORIGIN
+        ? "Unset VENDURE_CONSOLE_API_URL"
+        : `Set VENDURE_CONSOLE_API_URL=${consoleApiOrigin}`;
+}
+function isLoopback(url) {
+    return LOOPBACK_HOSTNAMES.includes(url.hostname);
+}
+function parseUrl(value) {
+    try {
+        return new URL(value);
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=console-pairing.js.map

package/dist/cli/lib/console-pairing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"console-pairing.js","sourceRoot":"","sources":["../../../src/cli/lib/console-pairing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,6FAA6F;AAC7F,gGAAgG;AAChG,kGAAkG;AAClG,0DAA0D;AAE1D,MAAM,6BAA6B,GAAG,wBAAwB,CAAC;AAC/D,MAAM,0BAA0B,GAAG,gCAAgC,CAAC;AAEpE,MAAM,qBAAqB,GAAwE;IACjG;QACE,cAAc,EAAE,IAAI,GAAG,CAAC,qBAAqB,CAAC,CAAC,MAAM;QACrD,gBAAgB,EAAE,6BAA6B;KAChD;IACD,EAAE,cAAc,EAAE,+BAA+B,EAAE,gBAAgB,EAAE,0BAA0B,EAAE;CAClG,CAAC;AAEF,0DAA0D;AAC1D,MAAM,kBAAkB,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;AAE/D,MAAM,UAAU,kBAAkB,CAAC,WAAmB,EAAE,aAAqB;IAC3E,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,iBAAiB,CAAC,6CAA6C,WAAW,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC3C,MAAM,aAAa,GAAG,UAAU,EAAE,MAAM,IAAI,aAAa,CAAC;IAC1D,MAAM,iBAAiB,GAAG,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;IAE7E,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,4FAA4F;QAC5F,6BAA6B;QAC7B,IAAI,aAAa,KAAK,0BAA0B,IAAI,iBAAiB;YAAE,OAAO;QAC9E,MAAM,IAAI,iBAAiB,CACzB,iHAAiH,aAAa,iCAAiC,0BAA0B,cAAc,kBAAkB,KAAK,CAC/N,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5F,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,iBAAiB,CACzB,yDAAyD,KAAK,CAAC,MAAM,oGAAoG,CAC1K,CAAC;IACJ,CAAC;IACD,IAAI,aAAa,KAAK,MAAM,CAAC,gBAAgB;QAAE,OAAO;IACtD,MAAM,IAAI,iBAAiB,CACzB,oBAAoB,KAAK,CAAC,MAAM,gDAAgD,MAAM,CAAC,gBAAgB,uCAAuC,aAAa,KAAK,aAAa,CAAC,MAAM,CAAC,gBAAgB,CAAC,cAAc,kBAAkB,KAAK,CAC5O,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,gBAAwB;IAC7C,OAAO,gBAAgB,KAAK,6BAA6B;QACvD,CAAC,CAAC,+BAA+B;QACjC,CAAC,CAAC,+BAA+B,gBAAgB,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,UAAU,CAAC,GAAQ;IAC1B,OAAO,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/cli/lib/contract/backup-schedule-reasons.d.ts

@@ -0,0 +1,4 @@
+import type { BackupScheduleExclusion } from "./database.js";
+export declare const BACKUP_SCHEDULE_EXCLUSION_DESCRIPTIONS: Record<BackupScheduleExclusion, string>;
+export declare function describeBackupScheduleExclusion(reason: BackupScheduleExclusion): string;
+//# sourceMappingURL=backup-schedule-reasons.d.ts.map

package/dist/cli/lib/contract/backup-schedule-reasons.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-schedule-reasons.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/contract/backup-schedule-reasons.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAK7D,eAAO,MAAM,sCAAsC,EAAE,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAK1F,CAAC;AAEF,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,uBAAuB,GAAG,MAAM,CAIvF"}

package/dist/cli/lib/contract/backup-schedule-reasons.js

@@ -0,0 +1,13 @@
+// Why a VC Environment receives no scheduled dump, in the words a customer reads. The wire carries
+// the code so a client can act on each case, and the descriptions state the reason instead of
+// leaving an empty list.
+export const BACKUP_SCHEDULE_EXCLUSION_DESCRIPTIONS = {
+    "non-production": "This environment receives no scheduled backups. Scheduled backups run for production environments only.",
+    "not-deployed": "This environment has no provisioned database, so no scheduled backup runs for it yet.",
+};
+export function describeBackupScheduleExclusion(reason) {
+    // A control plane ahead of this client can send a code with no description here.
+    const description = BACKUP_SCHEDULE_EXCLUSION_DESCRIPTIONS[reason];
+    return description ?? `This environment receives no scheduled backups (${reason}).`;
+}
+//# sourceMappingURL=backup-schedule-reasons.js.map

package/dist/cli/lib/contract/backup-schedule-reasons.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-schedule-reasons.js","sourceRoot":"","sources":["../../../../src/cli/lib/contract/backup-schedule-reasons.ts"],"names":[],"mappings":"AAIA,mGAAmG;AACnG,8FAA8F;AAC9F,yBAAyB;AACzB,MAAM,CAAC,MAAM,sCAAsC,GAA4C;IAC7F,gBAAgB,EACd,yGAAyG;IAC3G,cAAc,EACZ,uFAAuF;CAC1F,CAAC;AAEF,MAAM,UAAU,+BAA+B,CAAC,MAA+B;IAC7E,iFAAiF;IACjF,MAAM,WAAW,GAAuB,sCAAsC,CAAC,MAAM,CAAC,CAAC;IACvF,OAAO,WAAW,IAAI,mDAAmD,MAAM,IAAI,CAAC;AACtF,CAAC"}

package/dist/cli/lib/contract/build-settings.d.ts

@@ -14,7 +14,7 @@ export interface ResolvedBuildSettings {
 declare const appDirSchema: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
 export { appDirSchema };
 export declare const sourceBuildSettingsSchema: z.ZodObject<{
-    nodeVersion: z.ZodOptional<z.ZodLiteral<20 | 22 | 24>>;
+    nodeVersion: z.ZodOptional<z.ZodLiteral<22 | 20 | 24>>;
     packageManager: z.ZodOptional<z.ZodEnum<{
         bun: "bun";
         pnpm: "pnpm";

package/dist/cli/lib/contract/build-settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build-settings.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/contract/build-settings.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,gBAAgB,yCAA0C,CAAC;AACxE,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D,eAAO,MAAM,qBAAqB,uBAAwB,CAAC;AAC3D,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AACxE,eAAO,MAAM,kBAAkB,EAAE,kBAAuB,CAAC;AAEzD,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,kBAAkB,CAAC;IAChC,cAAc,EAAE,cAAc,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAyBD,QAAA,MAAM,YAAY,wDAQwC,CAAC;AAM3D,OAAO,EAAE,YAAY,EAAE,CAAC;AAOxB,eAAO,MAAM,yBAAyB;;;;;;;;;;;kBAQ3B,CAAC;AAEZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,qBAAqB,EAAE,qBAAqB,GAAG,IAAI,CAAC;CACrD"}
+{"version":3,"file":"build-settings.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/contract/build-settings.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,gBAAgB,yCAA0C,CAAC;AACxE,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D,eAAO,MAAM,qBAAqB,uBAAwB,CAAC;AAC3D,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AACxE,eAAO,MAAM,kBAAkB,EAAE,kBAAuB,CAAC;AAEzD,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,kBAAkB,CAAC;IAChC,cAAc,EAAE,cAAc,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAyBD,QAAA,MAAM,YAAY,wDAQwC,CAAC;AAI3D,OAAO,EAAE,YAAY,EAAE,CAAC;AAOxB,eAAO,MAAM,yBAAyB;;;;;;;;;;;kBAQ3B,CAAC;AAEZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,qBAAqB,EAAE,qBAAqB,GAAG,IAAI,CAAC;CACrD"}

package/dist/cli/lib/contract/build-settings.js

@@ -2,22 +2,18 @@
 // catalogs it validates against from `@vendure-cloud/builder-contract`, and the response
 // `@vendure-cloud/api-types` wraps it in. See ./README.md for why this package cannot import any of
 // them, including as types.
+// Three readers share the rule. `config build set` parses a whole settings document for its
+// bounds and wording. `init`'s local build detection reads the two catalogs and the default Node
+// major. `deploy`'s environment-variable preflight borrows `sourceBuildSettingsSchema.shape.appDir`
+// to check an `appDir` before joining it onto a local path. Only the field is borrowed: the object
+// schema is strict, so parsing all of it would fail when the control plane adds a setting this CLI
+// does not know.
 //
-// Three readers, which is why the rule lives here once. `config build set` parses a whole settings
-// document for its bounds and its wording (CLO-685); `init`'s local build detection reads the two
-// catalogs and the default Node major to propose settings for a repository; and `deploy`'s
-// environment-variable preflight borrows a single field from the same schema —
-// `sourceBuildSettingsSchema.shape.appDir` — to decide whether an `appDir` the control plane
-// returned is safe to join onto a local path. Only the field is borrowed: the object schema is
-// strict, so parsing the whole of it would fail that read outright the first time the control plane
-// adds a setting a released CLI has never heard of.
+// `resolvedBuildSettingsSchema` is not mirrored. A client renders resolved settings and never
+// parses them.
 //
-// `resolvedBuildSettingsSchema` is deliberately not mirrored. Resolved settings are rendered, never
-// parsed by a client, so the type comes across and the schema does not.
-//
-// This file imports `zod`, so a command reaches it from inside its `run` through `await import(...)`
-// rather than from the module that declares the command tree. `test/cli-published-surface.test.ts`
-// fails if loading the CLI plugin reaches `zod`.
+// This file imports `zod`, so a command reaches it through `await import(...)` inside its `run`.
+// `test/cli-published-surface.test.ts` fails if loading the CLI plugin reaches `zod`.
 import { z } from "zod";
 export const PACKAGE_MANAGERS = ["bun", "pnpm", "yarn", "npm"];
 export const SUPPORTED_NODE_MAJORS = [20, 22, 24];
@@ -52,10 +48,8 @@ const appDirSchema = z
     error: "appDir must be a repo-relative path without '..' segments",
 })
     .transform((directory) => directory.replace(/\/+$/, ""));
-// Exported through a statement rather than on the declaration above, so the declaration stays
-// character-identical to the original — which is private there — and `test/cli-contract-drift.test.ts`
-// can keep comparing it as text. Named because `config build set` and `deploy`'s preflight both
-// reach for the field rule on its own, and one of them would otherwise re-derive it.
+// Exported in a separate statement so the declaration stays character-identical to the original,
+// which `test/cli-contract-drift.test.ts` compares as text.
 export { appDirSchema };
 const systemPackagesSchema = z
     .array(aptPackageNameSchema)

package/dist/cli/lib/contract/build-settings.js.map

@@ -1 +1 @@
-{"version":3,"file":"build-settings.js","sourceRoot":"","sources":["../../../../src/cli/lib/contract/build-settings.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,yFAAyF;AACzF,oGAAoG;AACpG,4BAA4B;AAC5B,EAAE;AACF,mGAAmG;AACnG,kGAAkG;AAClG,2FAA2F;AAC3F,+EAA+E;AAC/E,6FAA6F;AAC7F,+FAA+F;AAC/F,oGAAoG;AACpG,oDAAoD;AACpD,EAAE;AACF,oGAAoG;AACpG,wEAAwE;AACxE,EAAE;AACF,qGAAqG;AACrG,mGAAmG;AACnG,iDAAiD;AAEjD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAU,CAAC;AAGxE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAU,CAAC;AAE3D,MAAM,CAAC,MAAM,kBAAkB,GAAuB,EAAE,CAAC;AAUzD,MAAM,oBAAoB,GAAG,CAAC;KAC3B,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,wBAAwB,CAAC,CAAC;AAEnC,SAAS,mBAAmB,CAAC,KAAa;IACxC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IAChD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,kBAAkB,GAAG,CAAC;KACzB,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE;IAClD,KAAK,EAAE,kDAAkD;CAC1D,CAAC,CAAC;AAEL,MAAM,YAAY,GAAG,CAAC;KACnB,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,KAAK,CAAC,oBAAoB,CAAC;KAC3B,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;IACzF,KAAK,EAAE,2DAA2D;CACnE,CAAC;KACD,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;AAE3D,8FAA8F;AAC9F,uGAAuG;AACvG,gGAAgG;AAChG,qFAAqF;AACrF,OAAO,EAAE,YAAY,EAAE,CAAC;AAExB,MAAM,oBAAoB,GAAG,CAAC;KAC3B,KAAK,CAAC,oBAAoB,CAAC;KAC3B,GAAG,CAAC,EAAE,CAAC;KACP,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAE1D,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IACxD,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;IACnD,YAAY,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IAC3C,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE;IAC/B,cAAc,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CAChD,CAAC;KACD,MAAM,EAAE,CAAC"}
+{"version":3,"file":"build-settings.js","sourceRoot":"","sources":["../../../../src/cli/lib/contract/build-settings.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,yFAAyF;AACzF,oGAAoG;AACpG,4BAA4B;AAC5B,4FAA4F;AAC5F,iGAAiG;AACjG,oGAAoG;AACpG,mGAAmG;AACnG,mGAAmG;AACnG,iBAAiB;AACjB,EAAE;AACF,8FAA8F;AAC9F,eAAe;AACf,EAAE;AACF,iGAAiG;AACjG,sFAAsF;AAEtF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAU,CAAC;AAGxE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAU,CAAC;AAE3D,MAAM,CAAC,MAAM,kBAAkB,GAAuB,EAAE,CAAC;AAUzD,MAAM,oBAAoB,GAAG,CAAC;KAC3B,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,wBAAwB,CAAC,CAAC;AAEnC,SAAS,mBAAmB,CAAC,KAAa;IACxC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IAChD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,kBAAkB,GAAG,CAAC;KACzB,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE;IAClD,KAAK,EAAE,kDAAkD;CAC1D,CAAC,CAAC;AAEL,MAAM,YAAY,GAAG,CAAC;KACnB,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,KAAK,CAAC,oBAAoB,CAAC;KAC3B,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;IACzF,KAAK,EAAE,2DAA2D;CACnE,CAAC;KACD,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;AAE3D,iGAAiG;AACjG,4DAA4D;AAC5D,OAAO,EAAE,YAAY,EAAE,CAAC;AAExB,MAAM,oBAAoB,GAAG,CAAC;KAC3B,KAAK,CAAC,oBAAoB,CAAC;KAC3B,GAAG,CAAC,EAAE,CAAC;KACP,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAE1D,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IACxD,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;IACnD,YAAY,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IAC3C,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE;IAC/B,cAAc,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CAChD,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/cli/lib/contract/database.d.ts

@@ -1,9 +1,12 @@
 export declare const DATABASE_BACKUP_KINDS: readonly ["manual", "scheduled", "safety"];
 export type DatabaseBackupKind = (typeof DATABASE_BACKUP_KINDS)[number];
+export type ScheduledDatabaseBackupTier = "daily" | "weekly";
+export type DatabaseBackupTier = ScheduledDatabaseBackupTier | "recovery";
 export interface DatabaseBackup {
     id: string;
     status: string;
     kind: DatabaseBackupKind;
+    tier: DatabaseBackupTier;
     createdAt: string;
     completedAt: string | null;
     sizeBytes: number | null;
@@ -31,6 +34,22 @@ export interface RestoreResult {
     safetyBackupId: string;
     deadlineAt: string;
 }
+export type BackupScheduleDay = "Sunday" | "Monday" | "Tuesday" | "Wednesday" | "Thursday" | "Friday" | "Saturday";
+export interface BackupScheduleEntry {
+    tier: ScheduledDatabaseBackupTier;
+    day: BackupScheduleDay | null;
+    startsAt: string;
+    timeZone: string;
+    retentionDays: number;
+}
+export type BackupScheduleExclusion = "non-production" | "not-deployed";
+export type BackupSchedule = {
+    scheduled: true;
+    entries: BackupScheduleEntry[];
+} | {
+    scheduled: false;
+    reason: BackupScheduleExclusion;
+};
 export interface TunnelTicket {
     ticket: string;
     expiresAt: string;

package/dist/cli/lib/contract/database.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/contract/database.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,qBAAqB,4CAA6C,CAAC;AAChF,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExE,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,kBAAkB,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAG9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAID,eAAO,MAAM,yBAAyB,uDAAwD,CAAC;AAC/F,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAO/E,eAAO,MAAM,uBAAuB,0EAM1B,CAAC;AACX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,qBAAqB,CAAC;IAC9B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAIxB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,KAAK,EAAE,oBAAoB,CAAC;IAC5B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAG3B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAG1B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IAKvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE;QACR,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,OAAO,CAAC;KACrB,CAAC;CACH;AAED,eAAO,MAAM,2BAA2B,cAAc,CAAC;AACvD,eAAO,MAAM,4BAA4B,aAAqD,CAAC"}
+{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/contract/database.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,qBAAqB,4CAA6C,CAAC;AAChF,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAIxE,MAAM,MAAM,2BAA2B,GAAG,OAAO,GAAG,QAAQ,CAAC;AAC7D,MAAM,MAAM,kBAAkB,GAAG,2BAA2B,GAAG,UAAU,CAAC;AAE1E,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,kBAAkB,CAAC;IAEzB,IAAI,EAAE,kBAAkB,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAE9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,eAAO,MAAM,yBAAyB,uDAAwD,CAAC;AAC/F,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAK/E,eAAO,MAAM,uBAAuB,0EAM1B,CAAC;AACX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,qBAAqB,CAAC;IAC9B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAExB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,KAAK,EAAE,oBAAoB,CAAC;IAC5B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAE3B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAG1B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IAGvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAID,MAAM,MAAM,iBAAiB,GACzB,QAAQ,GACR,QAAQ,GACR,SAAS,GACT,WAAW,GACX,UAAU,GACV,QAAQ,GACR,UAAU,CAAC;AAEf,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,2BAA2B,CAAC;IAClC,GAAG,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,uBAAuB,GAAG,gBAAgB,GAAG,cAAc,CAAC;AAExE,MAAM,MAAM,cAAc,GACtB;IAAE,SAAS,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,mBAAmB,EAAE,CAAA;CAAE,GACnD;IAAE,SAAS,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,uBAAuB,CAAA;CAAE,CAAC;AAE1D,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE;QACR,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,OAAO,CAAC;KACrB,CAAC;CACH;AAED,eAAO,MAAM,2BAA2B,cAAc,CAAC;AACvD,eAAO,MAAM,4BAA4B,aAAqD,CAAC"}

package/dist/cli/lib/contract/database.js

@@ -2,21 +2,15 @@
 // `index.ts` that the hosted data commands read. See ./README.md for why this package cannot import
 // them, including as types.
 //
-// `DatabaseRestore.errorDetails` is the one field that is not a copy: the original types it with
-// the `PublicErrorDetails` brand and this types it `string`, for the reason ./README.md gives — the
-// brand is a claim only the writer can make, and the CLI only renders these strings.
-// A backup's kind is a fixed set the CLI filters and labels by, so it is a `const` array here where
-// the original is a bare union: an array is something `test/cli-contract-parity.test.ts` can hold
-// up against the real type at compile time and the members stay readable at runtime.
+// `DatabaseRestore.errorDetails` is not a copy: the original uses the `PublicErrorDetails` brand
+// and this types it `string`, for the reason ./README.md gives.
+// A `const` array here where the original is a bare union, so `test/cli-contract-parity.test.ts`
+// can compare it with the real type at compile time and the members exist at runtime.
 export const DATABASE_BACKUP_KINDS = ["manual", "scheduled", "safety"];
-// A restore's own lifecycle, and the vocabulary `DB_OPERATION_SUCCESS_STATUS` and
-// `DB_OPERATION_FAILED_STATUSES` below already sort into "keep waiting" and "stop".
 export const DATABASE_RESTORE_STATUSES = ["queued", "running", "completed", "failed"];
-// Which half of the operation is running, which `status` cannot say and a customer watching a
-// destructive operation for an hour needs to know. A restore is two long tasks back to back: the
-// mandatory Safety Backup, then the load itself. Only the second one has touched their data, so
-// "still taking the safety backup" and "restoring" are different answers to "can I still cancel
-// this safely" (CLO-499).
+// Which half of a restore is running, which `status` cannot say. The Safety Backup runs first and
+// only the load touches customer data, so a customer needs the phase to know whether cancelling is
+// still safe (CLO-499).
 export const DATABASE_RESTORE_PHASES = [
     "queued",
     "safety-backup",

package/dist/cli/lib/contract/database.js.map

@@ -1 +1 @@
-{"version":3,"file":"database.js","sourceRoot":"","sources":["../../../../src/cli/lib/contract/database.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,oGAAoG;AACpG,4BAA4B;AAC5B,EAAE;AACF,iGAAiG;AACjG,oGAAoG;AACpG,qFAAqF;AAErF,oGAAoG;AACpG,kGAAkG;AAClG,qFAAqF;AACrF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAU,CAAC;AAiBhF,kFAAkF;AAClF,oFAAoF;AACpF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAU,CAAC;AAG/F,8FAA8F;AAC9F,iGAAiG;AACjG,gGAAgG;AAChG,gGAAgG;AAChG,0BAA0B;AAC1B,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,QAAQ;IACR,eAAe;IACf,WAAW;IACX,WAAW;IACX,QAAQ;CACA,CAAC;AA4CX,MAAM,CAAC,MAAM,2BAA2B,GAAG,WAAW,CAAC;AACvD,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC"}
+{"version":3,"file":"database.js","sourceRoot":"","sources":["../../../../src/cli/lib/contract/database.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,oGAAoG;AACpG,4BAA4B;AAC5B,EAAE;AACF,iGAAiG;AACjG,gEAAgE;AAEhE,iGAAiG;AACjG,sFAAsF;AACtF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAU,CAAC;AAuBhF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAU,CAAC;AAG/F,kGAAkG;AAClG,mGAAmG;AACnG,wBAAwB;AACxB,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,QAAQ;IACR,eAAe;IACf,WAAW;IACX,WAAW;IACX,QAAQ;CACA,CAAC;AAgEX,MAAM,CAAC,MAAM,2BAA2B,GAAG,WAAW,CAAC;AACvD,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC"}

package/dist/cli/lib/contract/deployment-resource-labels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deployment-resource-labels.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/contract/deployment-resource-labels.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,8BAA8B;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAqBD,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,4BAA4B,EACtC,OAAO,EAAE,8BAA8B,GACtC,MAAM,GAAG,IAAI,CAuCf"}
+{"version":3,"file":"deployment-resource-labels.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/contract/deployment-resource-labels.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,8BAA8B;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAqBD,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,4BAA4B,EACtC,OAAO,EAAE,8BAA8B,GACtC,MAAM,GAAG,IAAI,CAmCf"}