@vendure/cloud 0.3.2 → 0.5.0-dev.20261014172655.g652e750

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vendure/cloud",
-  "version": "0.3.2",
+  "version": "0.5.0-dev.20261014172655.g652e750",
   "type": "module",
   "description": "The package a Vendure Cloud application installs. Re-exports the Cloud Config interface and the platform-supplied plugins.",
   "license": "MIT",
@@ -31,7 +31,6 @@
     "cliPlugin": "./dist/cli-plugin.js",
     "cliCommands": [
       "init",
-      "login",
       "context",
       "use",
       "project",
@@ -48,11 +47,7 @@
       "backup",
       "restore",
       "tunnel",
-      "seed",
-      "org",
-      "key",
-      "whoami",
-      "logout"
+      "key"
     ]
   },
   "exports": {
@@ -77,7 +72,8 @@
     "README.md"
   ],
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "tag": "dev"
   },
   "scripts": {
     "build": "tsc",
@@ -94,13 +90,15 @@
   "dependencies": {
     "@clack/prompts": "^0.11.0",
     "@vendure/asset-server-plugin": "^3.7.0",
-    "@vendure/cloud-config": "0.3.2",
+    "@vendure/cloud-config": "0.5.0-dev.20261014172655.g652e750",
     "picocolors": "^1.1.0",
     "pino": "^10.3.1",
+    "wrap-ansi": "^10.0.1",
     "zod": "^4.0.0"
   },
   "peerDependencies": {
-    "@vendure/cli": "3.8.0-minor-202609071236",
+    "@dbos-inc/dbos-sdk": "^4.27.6",
+    "@vendure/cli": "3.8.0",
     "@vendure/core": "^3.7.0",
     "@vendure/dashboard": "^3.7.0",
     "ioredis": "^5.3.2",
@@ -109,9 +107,15 @@
     "vite": "^7.3.1"
   },
   "peerDependenciesMeta": {
+    "@dbos-inc/dbos-sdk": {
+      "optional": true
+    },
     "@vendure/cli": {
       "optional": true
     },
+    "@vendure/core": {
+      "optional": true
+    },
     "@vendure/dashboard": {
       "optional": true
     },
@@ -129,18 +133,20 @@
     }
   },
   "devDependencies": {
+    "@dbos-inc/dbos-sdk": "4.27.6",
     "@types/node": "^22.20.1",
     "@types/pg": "^8.15.5",
     "@vendure-cloud/api-types": "workspace:*",
     "@vendure-cloud/environment-state": "workspace:*",
     "@vendure-cloud/tsconfig": "workspace:*",
-    "@vendure/asset-server-plugin": "3.7.2",
-    "@vendure/core": "3.7.2",
-    "@vendure/dashboard": "3.7.2",
+    "@vendure/asset-server-plugin": "3.7.3",
+    "@vendure/core": "3.7.3",
+    "@vendure/dashboard": "3.7.3",
     "ioredis": "^5.11.1",
     "pg": "8.22.0",
     "typeorm": "^0.3.30",
     "typescript": "catalog:",
     "vitest": "^3.2.6"
-  }
+  },
+  "gitHead": "652e7506f4aefd79a05bb85e8e9f7e7559506938"
 }

package/dist/cli/commands/identity-context/login.d.ts

@@ -1,2 +0,0 @@
-export declare function login(): Promise<number | undefined>;
-//# sourceMappingURL=login.d.ts.map

package/dist/cli/commands/identity-context/login.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/identity-context/login.ts"],"names":[],"mappings":"AAyCA,wBAAsB,KAAK,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA8GzD"}

package/dist/cli/commands/identity-context/login.js

@@ -1,158 +0,0 @@
-import * as prompts from "@clack/prompts";
-import { API_AUTH_CONFIG_TIMEOUT_MS, WORKOS_AUTHENTICATE_URL, WORKOS_AUTH_REQUEST_TIMEOUT_MS, WORKOS_DEVICE_AUTHORIZE_URL, cloudInvocation, createApiClient, exchangeRefreshToken, getApiUrl, openBrowser, readAuthConfig, sleep, withSessionLock, writeAuthConfig, } from "../../index.js";
-// Answers with an exit code rather than setting `process.exitCode`: the host exits with whatever a
-// command action returns. A login that was cancelled at the organization picker saved nothing and
-// left the account signed out, so a script must not read it as a completed login.
-export async function login() {
-    prompts.intro("Vendure Cloud Login");
-    const existing = readAuthConfig();
-    if (existing) {
-        const shouldContinue = await prompts.confirm({
-            initialValue: false,
-            message: `Already logged in as ${existing.user.email}. Continue and re-authenticate?`,
-        });
-        if (prompts.isCancel(shouldContinue) || !shouldContinue) {
-            prompts.outro("Login cancelled.");
-            return undefined;
-        }
-    }
-    const apiUrl = getApiUrl();
-    const publicClient = createApiClient({ baseUrl: apiUrl });
-    const { workosClientId } = await publicClient.get("/auth/cli-config");
-    const deviceResponse = await fetchWorkos(WORKOS_DEVICE_AUTHORIZE_URL, {
-        method: "POST",
-        headers: { "content-type": "application/x-www-form-urlencoded" },
-        body: new URLSearchParams({ client_id: workosClientId }),
-    }, API_AUTH_CONFIG_TIMEOUT_MS);
-    if (!deviceResponse.ok) {
-        throw new Error("Failed to start device authorization flow");
-    }
-    const device = (await deviceResponse.json());
-    prompts.note(`Your code: ${device.user_code}\n\nIf the browser doesn't open, visit:\n${device.verification_uri_complete}`, "Open the URL in your browser to authenticate");
-    openBrowser(device.verification_uri_complete);
-    const spinner = prompts.spinner();
-    spinner.start("Waiting for authentication...");
-    let token;
-    try {
-        token = await pollForToken(workosClientId, device.device_code, device.interval, device.expires_in);
-    }
-    catch (error) {
-        spinner.stop("Authentication failed.");
-        throw error;
-    }
-    spinner.stop("Authenticated!");
-    const userName = [token.user.first_name, token.user.last_name].filter(Boolean).join(" ") || null;
-    const authedClient = createApiClient({ baseUrl: apiUrl, token: token.access_token });
-    const orgs = await authedClient.get("/auth/organizations");
-    if (orgs.length === 0) {
-        throw new Error("No organization is set up for your account. Contact support to get started.");
-    }
-    const activeOrg = await resolveActiveOrganization(orgs, token.organization_id);
-    if (!activeOrg) {
-        // Nothing was saved and the account is not signed in, so a caller must not read this exit as a
-        // completed login.
-        prompts.outro("Login cancelled.");
-        return 1;
-    }
-    // The device-flow token is scoped to WorkOS's default org for this user. If they picked (or only
-    // have) a different org, re-mint the token scoped to it so its `org_id` + `permissions` claims
-    // match the active org — otherwise permissioned calls 403 against the "wrong" org's claims.
-    //
-    // Under the session lock: the re-mint spends a single-use refresh token, and the write must not
-    // interleave with a concurrent command's refresh writing its rotated pair over this brand-new
-    // session.
-    await withSessionLock(async () => {
-        let accessToken = token.access_token;
-        let refreshToken = token.refresh_token;
-        try {
-            const pair = await exchangeRefreshToken(token.refresh_token, activeOrg.workosOrgId);
-            accessToken = pair.accessToken;
-            refreshToken = pair.refreshToken;
-        }
-        catch {
-            // The re-mint failed (network blip, authentication service hiccup). Persist the device-flow
-            // tokens anyway so the user lands logged in rather than stranded with a consumed token and
-            // no config. The session is just unscoped (default org) until they retry — `org switch`
-            // re-mints.
-            prompts.log.warn(`Signed in, but couldn't scope your session to ${activeOrg.name}. Run \`${cloudInvocation()} org switch\` to finish scoping.`);
-        }
-        writeAuthConfig({
-            accessToken,
-            refreshToken,
-            user: { id: token.user.id, email: token.user.email, name: userName },
-            activeOrganizationId: activeOrg.id,
-            organizations: orgs,
-        });
-    });
-    prompts.outro(`Logged in as ${token.user.email} (org: ${activeOrg.name})`);
-    return undefined;
-}
-// The browser step already asks a multi-organization user which organization to sign in to, and
-// reports it back as an external organization id. Honouring that answer stops the CLI asking the
-// same question again, and lets a login finish where there is no terminal to answer a prompt. The
-// picker is only reached when the browser sent no organization, or named one this account can no
-// longer see. Returns null when the user cancels the picker.
-async function resolveActiveOrganization(orgs, browserOrganizationId) {
-    const fromBrowser = browserOrganizationId
-        ? orgs.find((org) => org.workosOrgId === browserOrganizationId)
-        : undefined;
-    if (fromBrowser) {
-        return fromBrowser;
-    }
-    if (orgs.length === 1) {
-        return orgs[0];
-    }
-    if (!process.stdin.isTTY) {
-        throw new Error(`Could not tell which organization this session belongs to. Run \`${cloudInvocation()} login\` again in an interactive terminal and choose one.`);
-    }
-    const selected = await prompts.select({
-        message: "Select an organization:",
-        options: orgs.map((org) => ({ value: org, label: `${org.name} (${org.slug})` })),
-    });
-    return prompts.isCancel(selected) ? null : selected;
-}
-async function pollForToken(clientId, deviceCode, initialInterval, expiresIn) {
-    const deadline = Date.now() + expiresIn * 1000;
-    let pollInterval = initialInterval;
-    while (Date.now() < deadline) {
-        await sleep(pollInterval * 1000);
-        const response = await fetchWorkos(WORKOS_AUTHENTICATE_URL, {
-            method: "POST",
-            headers: { "content-type": "application/json" },
-            body: JSON.stringify({
-                client_id: clientId,
-                device_code: deviceCode,
-                grant_type: "urn:ietf:params:oauth:grant-type:device_code",
-            }),
-        }, WORKOS_AUTH_REQUEST_TIMEOUT_MS);
-        if (response.ok) {
-            return response.json();
-        }
-        const body = (await response.json().catch(() => ({})));
-        const error = typeof body.error === "string" ? body.error : undefined;
-        if (error === "authorization_pending") {
-            continue;
-        }
-        if (error === "slow_down") {
-            pollInterval += 1;
-            continue;
-        }
-        if (error === "expired_token") {
-            throw new Error("Device code expired. Please try again.");
-        }
-        throw new Error(`Authentication failed: ${error || response.statusText}`);
-    }
-    throw new Error("Device code expired. Please try again.");
-}
-async function fetchWorkos(url, init, timeoutMs) {
-    try {
-        return await fetch(url, {
-            ...init,
-            signal: AbortSignal.timeout(timeoutMs),
-        });
-    }
-    catch (error) {
-        throw new Error("Could not reach the authentication service. Check your connection and try again.", { cause: error });
-    }
-}
-//# sourceMappingURL=login.js.map

package/dist/cli/commands/identity-context/login.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"login.js","sourceRoot":"","sources":["../../../../src/cli/commands/identity-context/login.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EACL,0BAA0B,EAE1B,uBAAuB,EACvB,8BAA8B,EAC9B,2BAA2B,EAC3B,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,SAAS,EACT,WAAW,EACX,cAAc,EACd,KAAK,EACL,eAAe,EACf,eAAe,GAChB,MAAM,gBAAgB,CAAC;AAsBxB,mGAAmG;AACnG,kGAAkG;AAClG,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,KAAK;IACzB,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAErC,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;IAClC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC;YAC3C,YAAY,EAAE,KAAK;YACnB,OAAO,EAAE,wBAAwB,QAAQ,CAAC,IAAI,CAAC,KAAK,iCAAiC;SACtF,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACxD,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAClC,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,YAAY,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1D,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,YAAY,CAAC,GAAG,CAA6B,kBAAkB,CAAC,CAAC;IAElG,MAAM,cAAc,GAAG,MAAM,WAAW,CACtC,2BAA2B,EAC3B;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,eAAe,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;KACzD,EACD,0BAA0B,CAC3B,CAAC;IACF,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,CAAuB,CAAC;IAEnE,OAAO,CAAC,IAAI,CACV,cAAc,MAAM,CAAC,SAAS,4CAA4C,MAAM,CAAC,yBAAyB,EAAE,EAC5G,8CAA8C,CAC/C,CAAC;IAEF,WAAW,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;IAE9C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAClC,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAE/C,IAAI,KAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,YAAY,CACxB,cAAc,EACd,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,UAAU,CAClB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACvC,MAAM,KAAK,CAAC;IACd,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAE/B,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IAEjG,MAAM,YAAY,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;IACrF,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAqB,qBAAqB,CAAC,CAAC;IAE/E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAC/E,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,+FAA+F;QAC/F,mBAAmB;QACnB,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,iGAAiG;IACjG,+FAA+F;IAC/F,4FAA4F;IAC5F,EAAE;IACF,gGAAgG;IAChG,8FAA8F;IAC9F,WAAW;IACX,MAAM,eAAe,CAAC,KAAK,IAAI,EAAE;QAC/B,IAAI,WAAW,GAAG,KAAK,CAAC,YAAY,CAAC;QACrC,IAAI,YAAY,GAAG,KAAK,CAAC,aAAa,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,aAAa,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;YACpF,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;YAC/B,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,4FAA4F;YAC5F,2FAA2F;YAC3F,wFAAwF;YACxF,YAAY;YACZ,OAAO,CAAC,GAAG,CAAC,IAAI,CACd,iDAAiD,SAAS,CAAC,IAAI,WAAW,eAAe,EAAE,kCAAkC,CAC9H,CAAC;QACJ,CAAC;QAED,eAAe,CAAC;YACd,WAAW;YACX,YAAY;YACZ,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE;YACpE,oBAAoB,EAAE,SAAS,CAAC,EAAE;YAClC,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,KAAK,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,KAAK,UAAU,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC;IAC3E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,gGAAgG;AAChG,iGAAiG;AACjG,kGAAkG;AAClG,iGAAiG;AACjG,6DAA6D;AAC7D,KAAK,UAAU,yBAAyB,CACtC,IAAwB,EACxB,qBAAyC;IAEzC,MAAM,WAAW,GAAG,qBAAqB;QACvC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,qBAAqB,CAAC;QAC/D,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,oEAAoE,eAAe,EAAE,2DAA2D,CACjJ,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAmB;QACtD,OAAO,EAAE,yBAAyB;QAClC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;KACjF,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;AACtD,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,QAAgB,EAChB,UAAkB,EAClB,eAAuB,EACvB,SAAiB;IAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC;IAC/C,IAAI,YAAY,GAAG,eAAe,CAAC;IAEnC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;QAEjC,MAAM,QAAQ,GAAG,MAAM,WAAW,CAChC,uBAAuB,EACvB;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,SAAS,EAAE,QAAQ;gBACnB,WAAW,EAAE,UAAU;gBACvB,UAAU,EAAE,8CAA8C;aAC3D,CAAC;SACH,EACD,8BAA8B,CAC/B,CAAC;QAEF,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,QAAQ,CAAC,IAAI,EAAkC,CAAC;QACzD,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA4B,CAAC;QAClF,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAEtE,IAAI,KAAK,KAAK,uBAAuB,EAAE,CAAC;YACtC,SAAS;QACX,CAAC;QACD,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;YAC1B,YAAY,IAAI,CAAC,CAAC;YAClB,SAAS;QACX,CAAC;QACD,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,IAAiB,EAAE,SAAiB;IAC1E,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE;YACtB,GAAG,IAAI;YACP,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;SACvC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,kFAAkF,EAClF,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/cli/commands/identity-context/logout.d.ts

@@ -1,2 +0,0 @@
-export declare function logout(): Promise<void>;
-//# sourceMappingURL=logout.d.ts.map

package/dist/cli/commands/identity-context/logout.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"logout.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/identity-context/logout.ts"],"names":[],"mappings":"AAGA,wBAAsB,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAQ5C"}

package/dist/cli/commands/identity-context/logout.js

@@ -1,12 +0,0 @@
-import * as prompts from "@clack/prompts";
-import { clearAuthConfig, readAuthConfig } from "../../index.js";
-export async function logout() {
-    const existing = readAuthConfig();
-    if (!existing) {
-        prompts.log.info("Not currently logged in.");
-        return;
-    }
-    clearAuthConfig();
-    prompts.log.success("Logged out successfully.");
-}
-//# sourceMappingURL=logout.js.map

package/dist/cli/commands/identity-context/logout.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"logout.js","sourceRoot":"","sources":["../../../../src/cli/commands/identity-context/logout.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEjE,MAAM,CAAC,KAAK,UAAU,MAAM;IAC1B,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;IAClC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IACD,eAAe,EAAE,CAAC;IAClB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;AAClD,CAAC"}

package/dist/cli/commands/identity-context/org-switch.d.ts

@@ -1,3 +0,0 @@
-import { type CloudCommandInput } from "../../index.js";
-export declare function switchOrganization({ globals, }: CloudCommandInput): Promise<number | undefined>;
-//# sourceMappingURL=org-switch.d.ts.map

package/dist/cli/commands/identity-context/org-switch.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"org-switch.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/identity-context/org-switch.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,iBAAiB,EAMvB,MAAM,gBAAgB,CAAC;AAExB,wBAAsB,kBAAkB,CAAC,EACvC,OAAO,GACR,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA2EjD"}

package/dist/cli/commands/identity-context/org-switch.js

@@ -1,71 +0,0 @@
-import * as prompts from "@clack/prompts";
-import { cloudInvocation, createAuthenticatedClient, readAuthConfig, resolveCredential, rotateActiveOrganization, } from "../../index.js";
-export async function switchOrganization({ globals, }) {
-    // This command re-mints and rewrites the stored login, so it only ever operates on that
-    // credential. An API key is already scoped to a single organization and owns no session to
-    // rewrite — say so rather than acting on a credential the caller did not name.
-    if (resolveCredential(globals)?.kind === "apiKey") {
-        throw new Error(`\`${cloudInvocation()} org switch\` changes the organization of your stored login. An API key is scoped to one organization and cannot be switched.`);
-    }
-    const config = readAuthConfig();
-    if (!config) {
-        prompts.log.warn(`Not logged in. Run \`${cloudInvocation()} login\` to authenticate.`);
-        // The exit code is returned, not assigned to `process.exitCode`; see `defineCloudCommand`.
-        return 1;
-    }
-    // Re-fetch the membership list rather than trusting the stored copy: it gives us the up-to-date
-    // set (membership can change between logins) and, crucially, the `workosOrgId` needed to re-mint
-    // the token — older configs were persisted before that field existed. createAuthenticatedClient
-    // wires the 401-retry refresh so an expired stored token self-heals here.
-    const client = createAuthenticatedClient(globals);
-    const organizations = await client.get("/auth/organizations");
-    if (organizations.length <= 1) {
-        prompts.log.info("You only belong to one organization.");
-        return undefined;
-    }
-    const selected = await prompts.select({
-        message: "Select an organization:",
-        options: organizations.map((org) => ({
-            value: org.id,
-            label: `${org.name} (${org.slug})`,
-            hint: org.id === config.activeOrganizationId ? "current" : undefined,
-        })),
-    });
-    if (prompts.isCancel(selected)) {
-        prompts.log.info("Switch cancelled.");
-        return undefined;
-    }
-    const target = organizations.find((o) => o.id === selected);
-    if (!target) {
-        throw new Error("Selected organization not found.");
-    }
-    // Re-mint the access token scoped to the chosen org so its `org_id` + `permissions` claims
-    // match. Flipping `activeOrganizationId` alone would leave the JWT scoped to the previous org
-    // and 403 every permissioned call. rotateActiveOrganization does the exchange and the write as
-    // one locked unit so it cannot double-spend the refresh token against a concurrent command, or
-    // overwrite that command's rotation with a stale snapshot.
-    const spinner = prompts.spinner();
-    spinner.start(`Switching to ${target.name}...`);
-    try {
-        await rotateActiveOrganization({
-            organizationId: target.id,
-            workosOrgId: target.workosOrgId,
-            organizations,
-        });
-    }
-    catch (error) {
-        spinner.stop("Switch failed.");
-        // The config is never half-written: rotateActiveOrganization persists the new pair and the new
-        // active org in one atomic replace, or not at all, so a failed switch cannot strand the user
-        // between orgs.
-        //
-        // It can still end the session outright. If the re-mint comes back with the refresh token
-        // rejected, that token is dead no matter which command found out, and the stored credentials
-        // go with it — the user has to log in again. Every other failure leaves the existing session
-        // intact.
-        throw error;
-    }
-    spinner.stop(`Switched to ${target.name} (${target.slug}).`);
-    return undefined;
-}
-//# sourceMappingURL=org-switch.js.map

package/dist/cli/commands/identity-context/org-switch.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"org-switch.js","sourceRoot":"","sources":["../../../../src/cli/commands/identity-context/org-switch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAGL,eAAe,EACf,yBAAyB,EACzB,cAAc,EACd,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AAExB,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EACvC,OAAO,GACW;IAClB,wFAAwF;IACxF,2FAA2F;IAC3F,+EAA+E;IAC/E,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,KAAK,eAAe,EAAE,+HAA+H,CACtJ,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,wBAAwB,eAAe,EAAE,2BAA2B,CAAC,CAAC;QACvF,2FAA2F;QAC3F,OAAO,CAAC,CAAC;IACX,CAAC;IAED,gGAAgG;IAChG,iGAAiG;IACjG,gGAAgG;IAChG,0EAA0E;IAC1E,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,GAAG,CAAqB,qBAAqB,CAAC,CAAC;IAElF,IAAI,aAAa,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QACzD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC;QACpC,OAAO,EAAE,yBAAyB;QAClC,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACnC,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,GAAG;YAClC,IAAI,EAAE,GAAG,CAAC,EAAE,KAAK,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;SACrE,CAAC,CAAC;KACJ,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACtC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,2FAA2F;IAC3F,8FAA8F;IAC9F,+FAA+F;IAC/F,+FAA+F;IAC/F,2DAA2D;IAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAClC,OAAO,CAAC,KAAK,CAAC,gBAAgB,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,wBAAwB,CAAC;YAC7B,cAAc,EAAE,MAAM,CAAC,EAAE;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,aAAa;SACd,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC/B,+FAA+F;QAC/F,6FAA6F;QAC7F,gBAAgB;QAChB,EAAE;QACF,0FAA0F;QAC1F,6FAA6F;QAC7F,6FAA6F;QAC7F,UAAU;QACV,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;IAC7D,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/cli/commands/identity-context/whoami.d.ts

@@ -1,3 +0,0 @@
-import { type CloudCommandInput } from "../../index.js";
-export declare function whoami({ globals }: CloudCommandInput): Promise<number | undefined>;
-//# sourceMappingURL=whoami.d.ts.map

package/dist/cli/commands/identity-context/whoami.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"whoami.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/identity-context/whoami.ts"],"names":[],"mappings":"AACA,OAAO,EAIL,KAAK,iBAAiB,EAOvB,MAAM,gBAAgB,CAAC;AASxB,wBAAsB,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAkBxF"}

package/dist/cli/commands/identity-context/whoami.js

@@ -1,80 +0,0 @@
-import * as prompts from "@clack/prompts";
-import { cloudInvocation, createApiClient, getApiUrl, readAuthConfig, refreshAccessToken, resolveCredential, } from "../../index.js";
-export async function whoami({ globals }) {
-    const credential = resolveCredential(globals);
-    if (!credential) {
-        prompts.log.warn(`Not logged in. Run \`${cloudInvocation()} login\` to authenticate.`);
-        // The exit code is returned, not assigned to `process.exitCode`; see `defineCloudCommand`.
-        return 1;
-    }
-    // `/auth/me` echoes the credential's own resolved identity, so it reports what the credential is
-    // rather than what local config claims.
-    const me = await createWhoamiClient(credential).get("/auth/me");
-    if (credential.kind === "apiKey") {
-        reportApiKey(me);
-        return undefined;
-    }
-    reportSession(me, readAuthConfig());
-    return undefined;
-}
-// Not `createAuthenticatedClient`: whoami is the command you run to find out why the others are
-// refusing, so a session with no active organization has to reach `/auth/me` rather than be turned
-// away locally.
-function createWhoamiClient(credential) {
-    if (credential.kind === "apiKey") {
-        return createApiClient({ baseUrl: getApiUrl(), apiKey: credential.token });
-    }
-    return createApiClient({
-        baseUrl: getApiUrl(),
-        token: credential.token,
-        organizationId: credential.organizationId ?? undefined,
-        // Only a token that came from the stored session has a refresh token behind it, and this is
-        // that token.
-        onUnauthorized: (failedToken) => refreshAccessToken(failedToken),
-    });
-}
-// An API key authenticates an organization, not a person, so there is no user to report and no
-// local session to compare against.
-function reportApiKey(me) {
-    prompts.log.info("Auth:  API key");
-    if (me.dbOrganization?.slug) {
-        prompts.log.info(`Org:   ${me.dbOrganization.slug}`);
-    }
-    else {
-        prompts.log.warn("This API key does not resolve to an organization.");
-    }
-}
-function reportSession(me, authConfig) {
-    const email = me.dbUser?.email ?? "Unknown";
-    prompts.log.info(`Email: ${email}`);
-    if (authConfig?.user.name) {
-        prompts.log.info(`Name:  ${authConfig.user.name}`);
-    }
-    // The org the token is actually scoped to, taken from the token's own `org_id` claim. We do NOT
-    // report the org recorded in local config: config can drift from the token, and reporting config
-    // state would hide that drift. That masking is exactly what made the CLO-124 split-state bug so
-    // hard to diagnose. Map the WorkOS org_id to a friendly name via the stored membership list;
-    // fall back to the raw id if it isn't in the list (e.g. a token scoped to an org added since
-    // last login).
-    if (me.org_id) {
-        const tokenOrg = authConfig?.organizations.find((o) => o.workosOrgId === me.org_id);
-        prompts.log.info(`Org:   ${tokenOrg ? `${tokenOrg.name} (${me.org_id})` : me.org_id}`);
-        if (me.role) {
-            prompts.log.info(`Role:  ${me.role}`);
-        }
-    }
-    else {
-        // The token carries no org scope — e.g. a device-flow token whose org-scoped re-mint failed
-        // during login (see CLO-124 fallback). Say so explicitly rather than printing Email/Name and
-        // falling silent.
-        prompts.log.warn(`Your session has no organization scope. Run \`${cloudInvocation()} org switch\` to scope it.`);
-    }
-    // Surface a drift between the token's org and the CLI's "active" org rather than silently
-    // trusting config. Post-CLO-124 this shouldn't happen via login/org switch, but a stale token or
-    // hand-edited config still could.
-    const activeOrg = authConfig?.organizations.find((o) => o.id === authConfig.activeOrganizationId);
-    if (activeOrg && me.org_id && activeOrg.workosOrgId !== me.org_id) {
-        prompts.log.warn(`Your token is scoped to a different organization than your active org (${activeOrg.name}). Run \`${cloudInvocation()} org switch\` to re-scope.`);
-    }
-}
-//# sourceMappingURL=whoami.js.map

package/dist/cli/commands/identity-context/whoami.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"whoami.js","sourceRoot":"","sources":["../../../../src/cli/commands/identity-context/whoami.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAKL,eAAe,EACf,eAAe,EACf,SAAS,EACT,cAAc,EACd,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AASxB,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,EAAE,OAAO,EAAqB;IACzD,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,wBAAwB,eAAe,EAAE,2BAA2B,CAAC,CAAC;QACvF,2FAA2F;QAC3F,OAAO,CAAC,CAAC;IACX,CAAC;IAED,iGAAiG;IACjG,wCAAwC;IACxC,MAAM,EAAE,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC,GAAG,CAAiB,UAAU,CAAC,CAAC;IAEhF,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACjC,YAAY,CAAC,EAAE,CAAC,CAAC;QACjB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,aAAa,CAAC,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;IACpC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,gGAAgG;AAChG,mGAAmG;AACnG,gBAAgB;AAChB,SAAS,kBAAkB,CAAC,UAAyB;IACnD,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO,eAAe,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,eAAe,CAAC;QACrB,OAAO,EAAE,SAAS,EAAE;QACpB,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,cAAc,EAAE,UAAU,CAAC,cAAc,IAAI,SAAS;QACtD,4FAA4F;QAC5F,cAAc;QACd,cAAc,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC;KACjE,CAAC,CAAC;AACL,CAAC;AAED,+FAA+F;AAC/F,oCAAoC;AACpC,SAAS,YAAY,CAAC,EAAkB;IACtC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACnC,IAAI,EAAE,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,EAAkB,EAAE,UAA6B;IACtE,MAAM,KAAK,GAAG,EAAE,CAAC,MAAM,EAAE,KAAK,IAAI,SAAS,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC;IACpC,IAAI,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,gGAAgG;IAChG,iGAAiG;IACjG,gGAAgG;IAChG,6FAA6F;IAC7F,6FAA6F;IAC7F,eAAe;IACf,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;QACd,MAAM,QAAQ,GAAG,UAAU,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC;QACpF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QACvF,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;SAAM,CAAC;QACN,4FAA4F;QAC5F,6FAA6F;QAC7F,kBAAkB;QAClB,OAAO,CAAC,GAAG,CAAC,IAAI,CACd,iDAAiD,eAAe,EAAE,4BAA4B,CAC/F,CAAC;IACJ,CAAC;IAED,0FAA0F;IAC1F,iGAAiG;IACjG,kCAAkC;IAClC,MAAM,SAAS,GAAG,UAAU,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,oBAAoB,CAAC,CAAC;IAClG,IAAI,SAAS,IAAI,EAAE,CAAC,MAAM,IAAI,SAAS,CAAC,WAAW,KAAK,EAAE,CAAC,MAAM,EAAE,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,IAAI,CACd,0EAA0E,SAAS,CAAC,IAAI,YAAY,eAAe,EAAE,4BAA4B,CAClJ,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/cli/lib/file-lock.d.ts

@@ -1,23 +0,0 @@
-export interface FileLockOptions {
-    staleMs: number;
-    waitMs: number;
-    pollMs?: number;
-    onWait?: () => void;
-    waitNoticeMs?: number;
-}
-/**
- * Best-effort advisory mutex between concurrent `vcloud` processes, built on
- * the atomicity of `open(O_CREAT | O_EXCL)`.
- *
- * "Best effort" is the important part: if the lock cannot be taken (wait
- * exhausted, read-only config dir, unsupported filesystem) `fn` still runs,
- * unserialized. It removes the common race; it does not guarantee exclusion.
- *
- * `fn` therefore receives whether the lock was actually held. Anything whose
- * consequences are unacceptable when two processes do it at once — in this
- * codebase, discarding stored credentials — must be gated on that flag, and
- * the caller needs a recovery path for the unlocked case. Ignoring the flag is
- * how you get a mutex that reads as exclusive but silently isn't.
- */
-export declare function withFileLock<T>(lockFile: string, options: FileLockOptions, fn: (held: boolean) => Promise<T>): Promise<T>;
-//# sourceMappingURL=file-lock.d.ts.map

package/dist/cli/lib/file-lock.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"file-lock.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/file-lock.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,eAAe;IAI9B,OAAO,EAAE,MAAM,CAAC;IAEhB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAIhB,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAKD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAClC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,eAAe,EACxB,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,GAChC,OAAO,CAAC,CAAC,CAAC,CASZ"}

package/dist/cli/lib/file-lock.js

@@ -1,121 +0,0 @@
-import { randomBytes } from "node:crypto";
-import { mkdirSync, readFileSync, statSync, unlinkSync, writeFileSync } from "node:fs";
-import { dirname } from "node:path";
-import { logger } from "./logger.js";
-import { sleep } from "./sleep.js";
-const DEFAULT_POLL_MS = 50;
-const DEFAULT_WAIT_NOTICE_MS = 2_000;
-/**
- * Best-effort advisory mutex between concurrent `vcloud` processes, built on
- * the atomicity of `open(O_CREAT | O_EXCL)`.
- *
- * "Best effort" is the important part: if the lock cannot be taken (wait
- * exhausted, read-only config dir, unsupported filesystem) `fn` still runs,
- * unserialized. It removes the common race; it does not guarantee exclusion.
- *
- * `fn` therefore receives whether the lock was actually held. Anything whose
- * consequences are unacceptable when two processes do it at once — in this
- * codebase, discarding stored credentials — must be gated on that flag, and
- * the caller needs a recovery path for the unlocked case. Ignoring the flag is
- * how you get a mutex that reads as exclusive but silently isn't.
- */
-export async function withFileLock(lockFile, options, fn) {
-    const owner = await acquireLock(lockFile, options);
-    try {
-        return await fn(owner !== null);
-    }
-    finally {
-        if (owner) {
-            releaseLock(lockFile, owner);
-        }
-    }
-}
-async function acquireLock(lockFile, options) {
-    const owner = `${process.pid}-${randomBytes(8).toString("hex")}`;
-    const startedAt = Date.now();
-    const deadline = startedAt + options.waitMs;
-    const noticeAt = startedAt + (options.waitNoticeMs ?? DEFAULT_WAIT_NOTICE_MS);
-    let noticed = false;
-    // The guarded work writes into this directory anyway, but the lock is taken
-    // first — on a fresh machine it would otherwise ENOENT and run unlocked.
-    try {
-        mkdirSync(dirname(lockFile), { recursive: true });
-    }
-    catch (error) {
-        logger.debug({ lockFile, error }, "Could not create lock directory; continuing unlocked");
-        return null;
-    }
-    while (true) {
-        try {
-            writeFileSync(lockFile, owner, { flag: "wx", mode: 0o600 });
-            return owner;
-        }
-        catch (error) {
-            if (errorCode(error) !== "EEXIST") {
-                logger.debug({ lockFile, error }, "Could not create lock file; continuing unlocked");
-                return null;
-            }
-        }
-        if (isStale(lockFile, options.staleMs)) {
-            logger.debug({ lockFile }, "Breaking stale lock");
-            removeLock(lockFile);
-            continue;
-        }
-        if (Date.now() >= deadline) {
-            logger.debug({ lockFile }, "Lock wait exhausted; continuing unlocked");
-            return null;
-        }
-        if (!noticed && options.onWait && Date.now() >= noticeAt) {
-            noticed = true;
-            notifyWaiting(options.onWait, lockFile);
-        }
-        await sleep(options.pollMs ?? DEFAULT_POLL_MS);
-    }
-}
-// Progress reporting must never be what stops the guarded work from running —
-// the sink is usually stderr, and a closed pipe raises EPIPE.
-function notifyWaiting(onWait, lockFile) {
-    try {
-        onWait();
-    }
-    catch (error) {
-        logger.debug({ lockFile, error }, "Wait notice failed");
-    }
-}
-function releaseLock(lockFile, owner) {
-    // Only drop the lock while we still hold it: another process may have
-    // broken ours as stale and taken its own.
-    try {
-        if (readFileSync(lockFile, "utf-8") !== owner) {
-            return;
-        }
-    }
-    catch {
-        return;
-    }
-    removeLock(lockFile);
-}
-function isStale(lockFile, staleMs) {
-    try {
-        return statSync(lockFile).mtimeMs < Date.now() - staleMs;
-    }
-    catch {
-        // Gone between the failed create and this stat — treat as free and retry.
-        return false;
-    }
-}
-function removeLock(lockFile) {
-    try {
-        unlinkSync(lockFile);
-    }
-    catch {
-        // Another process already removed it.
-    }
-}
-function errorCode(error) {
-    if (error instanceof Error && "code" in error && typeof error.code === "string") {
-        return error.code;
-    }
-    return undefined;
-}
-//# sourceMappingURL=file-lock.js.map

package/dist/cli/lib/file-lock.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"file-lock.js","sourceRoot":"","sources":["../../../src/cli/lib/file-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAiBnC,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAErC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,OAAwB,EACxB,EAAiC;IAEjC,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IAClC,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,EAAE,CAAC;YACV,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,OAAwB;IACnE,MAAM,KAAK,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IAC5C,MAAM,QAAQ,GAAG,SAAS,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC,CAAC;IAC9E,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,4EAA4E;IAC5E,yEAAyE;IACzE,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,sDAAsD,CAAC,CAAC;QAC1F,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,aAAa,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5D,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAClC,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,iDAAiD,CAAC,CAAC;gBACrF,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,EAAE,qBAAqB,CAAC,CAAC;YAClD,UAAU,CAAC,QAAQ,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,EAAE,0CAA0C,CAAC,CAAC;YACvE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YACzD,OAAO,GAAG,IAAI,CAAC;YACf,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,8DAA8D;AAC9D,SAAS,aAAa,CAAC,MAAkB,EAAE,QAAgB;IACzD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,oBAAoB,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,KAAa;IAClD,sEAAsE;IACtE,0CAA0C;IAC1C,IAAI,CAAC;QACH,IAAI,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,KAAK,EAAE,CAAC;YAC9C,OAAO;QACT,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,UAAU,CAAC,QAAQ,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,OAAO,CAAC,QAAgB,EAAE,OAAe;IAChD,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB;IAClC,IAAI,CAAC;QACH,UAAU,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAChF,OAAO,KAAK,CAAC,IAAI,CAAC;IACpB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}