@vendure/cloud 0.4.0 → 0.5.0-dev.20261014172655.g652e750

package/dist/cli/lib/env-preflight.js

@@ -1,32 +1,27 @@
 import { readFileSync, readdirSync, statSync } from "node:fs";
-import { extname, join } from "node:path";
+import { extname, join, relative } from "node:path";
 import { appDirSchema } from "./contract/build-settings.js";
-import { parseDotEnv } from "./dotenv.js";
-import { cloudInvocation } from "./invocation.js";
+import { DotEnvSyntaxError, parseDotEnv } from "./dotenv.js";
+import { CLOUD_INVOCATION } from "./invocation.js";
 import { findProjectRoot } from "./project-link.js";
+import { readUtf8 } from "./utf8.js";
 // Environment-variable preflight for `deploy` and `deploy plan`: which variables the local app
 // directory appears to need, and which of those the target VC Environment does not have.
-//
-// The only contract it consumes is the `appDir` rule from `./contract/build-settings.js`. That
-// import pulls in `zod`, so this module is reached only through `await import(...)` from a
-// command's `run`. `test/cli-published-surface.test.ts` fails if loading the CLI plugin reaches it.
-// Env vars the platform injects itself. We never warn about these — the
-// customer isn't expected to set them, and on a first-ever deploy they aren't
-// yet persisted on the environment to subtract. Hand-mirrored from what the
-// control plane's managed env var manifest emits for the datastore, cache,
-// object-storage and search integrations. Keep it in step by hand — or replace
-// it with a control-plane managed-keys endpoint (CLO-251).
+// Its `appDir` import pulls in `zod`, so a command's `run` reaches this module only through
+// `await import(...)`. `test/cli-published-surface.test.ts` fails if loading the CLI plugin
+// reaches it.
+// Env vars the platform injects itself. The customer is not expected to set them, and on a
+// first-ever deploy they are not yet persisted on the environment to subtract. Hand-mirrored from
+// the control plane's managed env var manifest for the datastore, cache, object-storage and
+// search integrations (CLO-251 tracks a managed-keys endpoint).
 const MANAGED_ENV_KEY_PREFIXES = ["DB_", "REDIS_", "TYPESENSE_", "MINIO_"];
 const MANAGED_ENV_KEYS = new Set(["DATABASE_URL", "ASSET_UPLOAD_DIR", "PGSSLMODE"]);
-// Conventional runtime keys the Node runtime or host defines, or that are
-// universally defaulted locally. Not platform-managed, but warning about
-// them is noise rather than a missing-config signal (e.g. NODE_ENV parked in a
-// customer `.env`, or PORT which the server always reads with a fallback).
+// Runtime keys that Node or the host defines or that default locally, such as NODE_ENV in a
+// customer `.env` or PORT, which the server reads with a fallback. Warning about them is noise.
 const CONVENTIONAL_ENV_KEYS = new Set(["NODE_ENV", "PORT"]);
-// `.env` only. An `.env.example` lists the names a developer has to supply, so
-// a name in one is not evidence that the deployed app reads it. A repository
-// that keeps one per package holds every unrelated service's configuration in
-// them, and reading them all reports the lot as the customer's own (CLO-532).
+// `.env` only. A name in `.env.example` is not evidence the deployed app reads it, and a repository
+// with one per package would report every unrelated service's configuration as the customer's
+// own (CLO-532).
 const DOTENV_FILENAMES = new Set([".env"]);
 const SOURCE_EXTENSIONS = new Set([".ts", ".mts", ".cts", ".js", ".mjs", ".cjs"]);
 const SKIPPED_DIRECTORIES = new Set([
@@ -39,25 +34,28 @@ const SKIPPED_DIRECTORIES = new Set([
     "e2e",
     "node_modules",
 ]);
-// Specs sit beside the source they cover in most repositories, so excluding
-// directories is not enough to keep their fixtures out of the list.
+// Specs sit beside their source in most repositories, so excluding directories does not keep their
+// fixtures out of the list.
 const TEST_FILENAME_PATTERN = /\.(?:spec|test)\.[cm]?[jt]s$/;
 const MAX_DEPTH = 8;
 const MAX_SOURCE_FILES = 2000;
 const MAX_SOURCE_FILE_BYTES = 1_000_000;
+const MAX_DIAGNOSTIC_PATH_LENGTH = 200;
+const MAX_DIAGNOSTIC_KEY_LENGTH = 64;
+class LocalDotEnvPreflightError extends Error {
+}
 export function isPlatformManagedKey(key) {
     if (MANAGED_ENV_KEYS.has(key) || CONVENTIONAL_ENV_KEYS.has(key))
         return true;
     return MANAGED_ENV_KEY_PREFIXES.some((p) => key.startsWith(p));
 }
-// Regex sweep for `process.env.FOO`, `process.env["FOO"]`, `process.env['FOO']`.
-// Deliberately no AST: this misses destructuring and computed keys, which is the
-// accepted 80% line. Returns each referenced key mapped to whether *any*
-// occurrence has an inline fallback (`|| ...` / `?? ...`) and so won't crash.
+// Regex sweep for `process.env.FOO`, `process.env["FOO"]` and `process.env['FOO']`. It misses
+// destructuring and computed keys. Maps each key to whether any occurrence has an inline fallback
+// (`|| ...` / `?? ...`).
 export function scanEnvRefs(content) {
     const refs = new Map();
-    // The trailing `(\|\||\?\?)?` captures an inline fallback right after the
-    // reference; `?.` optional chaining is not one, so it stays undefined there.
+    // The trailing `(\|\||\?\?)?` captures an inline fallback right after the reference; `?.` is not
+    // one, so it stays undefined there.
     const re = /process\.env(?:\.([A-Za-z_$][\w$]*)|\[\s*(['"])([A-Za-z_$][\w$]*)\2\s*\])\s*(\|\||\?\?)?/g;
     let match = re.exec(content);
     while (match !== null) {
@@ -70,10 +68,10 @@ export function scanEnvRefs(content) {
     }
     return refs;
 }
-// Keys the app plausibly needs: declared in a `.env` file, or referenced in
-// source that is not a test. A reference with an inline fallback is dropped —
-// the code already defaults it, so a missing value won't crash the boot.
+// Keys declared in a `.env` file or referenced in non-test source. A reference with an inline
+// fallback is dropped because a missing value will not crash the boot.
 export function collectExpectedEnvKeys(appPath) {
+    const projectRoot = findProjectRoot(appPath) ?? appPath;
     const dotEnvKeys = new Set();
     const sourceRefs = new Map();
     let filesScanned = 0;
@@ -97,7 +95,7 @@ export function collectExpectedEnvKeys(appPath) {
                 continue;
             const path = join(dir, entry.name);
             if (DOTENV_FILENAMES.has(entry.name)) {
-                for (const key of readDotEnvKeys(path))
+                for (const key of readDotEnvKeys(path, projectRoot))
                     dotEnvKeys.add(key);
                 continue;
             }
@@ -125,9 +123,8 @@ export function findMissingEnvVars(params) {
         .filter((key) => !params.defined.has(key) && !isPlatformManagedKey(key))
         .sort();
 }
-// Orchestrates the check: scan the app directory, fetch the keys already set on
-// the environment, return the referenced-but-unset ones. Best-effort — an I/O
-// failure ends the check rather than blocking a deploy.
+// Scans the app directory, fetches the keys already set on the environment, and returns the
+// referenced-but-unset ones. An I/O failure ends the check without blocking a deploy.
 export async function resolveEnvVarPreflight(params) {
     if (!isDirectory(params.appPath)) {
         return {
@@ -135,13 +132,28 @@ export async function resolveEnvVarPreflight(params) {
             reason: `the recorded app directory is not present at ${params.appPath}`,
         };
     }
-    const expected = collectExpectedEnvKeys(params.appPath);
+    let expected;
+    try {
+        expected = collectExpectedEnvKeys(params.appPath);
+    }
+    catch (error) {
+        return {
+            status: "not-checked",
+            reason: error instanceof LocalDotEnvPreflightError
+                ? error.message
+                : "the local environment-variable check could not finish",
+        };
+    }
     if (expected.length === 0)
         return { status: "checked", missing: [] };
     let defined;
     try {
         const vars = await params.client.get(`/environments/${params.environmentId}/env-vars`);
         defined = new Set(vars.map((v) => v.key));
+        for (const key of params.heldBack?.added ?? [])
+            defined.delete(key);
+        for (const key of params.heldBack?.removed ?? [])
+            defined.add(key);
     }
     catch {
         return {
@@ -151,11 +163,10 @@ export async function resolveEnvVarPreflight(params) {
     }
     return { status: "checked", missing: findMissingEnvVars({ expected, defined }) };
 }
-// Command-facing entry point: resolves the project root the same way the rest
-// of the CLI resolves context (walking up to the project link, falling back to
-// the working directory), narrows it to the app directory the deploy builds,
-// then runs the check. Keeps that policy in one place.
-export async function runEnvVarPreflight(client, environmentId) {
+// Command-facing entry point: resolves the project root (walking up to the project link, falling
+// back to the working directory), narrows it to the app directory the deploy builds, then runs the
+// check.
+export async function runEnvVarPreflight(client, environmentId, heldBack) {
     const appDir = await fetchAppDir(client, environmentId);
     if (appDir === null) {
         return {
@@ -168,6 +179,7 @@ export async function runEnvVarPreflight(client, environmentId) {
         client,
         environmentId,
         appPath: appDir === "" ? projectRoot : join(projectRoot, appDir),
+        heldBack,
     });
 }
 export function formatEnvPreflightSkipped(reason) {
@@ -183,19 +195,14 @@ export function formatMissingEnvVarsWarning(missing, environmentSlug) {
         "",
         "The check reads the app directory's `.env` and searches its source for `process.env`. A",
         "text search can name a variable the deployed app never reads and miss one it does. Add",
-        `the ones your app needs with \`${cloudInvocation()} env add <KEY>\`, then re-run the deploy.`,
+        `the ones your app needs with \`${CLOUD_INVOCATION} env add <KEY>\`, then re-run the deploy.`,
     ];
     return lines.join("\n");
 }
-// The repository-relative app directory, read from the environment's Source
-// Build Settings. `vcloud deploy` takes no directory of its own: `vcloud init
-// --app-dir` and `vcloud config build set --app-dir` record it there, and the
-// managed build reads it from there too.
-//
-// A path means scan that directory. `""` means the app is at the repository
-// root. `null` means the setting could not be read, which is not the same as an
-// app at the root: scanning the root in that case reports every sibling app's
-// variables as the customer's own.
+// The repository-relative app directory from the environment's Source Build Settings, where
+// `vendure init --app-dir` and `vendure config build set --app-dir` record it. A path means scan
+// that directory. `""` means the app is at the repository root. `null` means the setting could not
+// be read; scanning the root then would report every sibling app's variables as the customer's own.
 async function fetchAppDir(client, environmentId) {
     try {
         const response = await client.get(`/environments/${environmentId}/source-build-settings`);
@@ -205,13 +212,11 @@ async function fetchAppDir(client, environmentId) {
         return null;
     }
 }
-// The response is untrusted and its `appDir` is joined onto a local path, so an
-// absolute path or a `..` segment would send the scan outside the project root.
-// A value the schema would not accept is read as unknown.
-//
-// Only the field rule is borrowed from the settings schema. The object schema is strict, so parsing
-// the whole document would fail this read outright the first time the control plane adds a setting
-// a released CLI has never heard of.
+// The response is untrusted and `appDir` is joined onto a local path, so an absolute path or a `..`
+// segment would send the scan outside the project root. A value the schema rejects is read as
+// unknown.
+// Only the field rule is borrowed. The object schema is strict, so parsing the whole document would
+// fail when the control plane adds a setting a released CLI does not know.
 function readAppDir(response) {
     if (!isRecord(response))
         return null;
@@ -238,13 +243,36 @@ function isDirectory(path) {
         return false;
     }
 }
-function readDotEnvKeys(path) {
+function readDotEnvKeys(path, projectRoot) {
     try {
-        return Object.keys(parseDotEnv(readFileSync(path, "utf-8")));
+        return Object.keys(parseDotEnv(readUtf8(path, "A local .env file")));
     }
-    catch {
-        return [];
+    catch (error) {
+        const file = formatDiagnosticToken(relative(projectRoot, path), MAX_DIAGNOSTIC_PATH_LENGTH);
+        let problem = "could not be read or parsed as UTF-8 text";
+        if (error instanceof DotEnvSyntaxError &&
+            Number.isSafeInteger(error.line) &&
+            error.line > 0 &&
+            (error.key === undefined || (typeof error.key === "string" && /^[\w.-]+$/.test(error.key)))) {
+            problem =
+                error.key === undefined
+                    ? `has an invalid assignment at line ${error.line}`
+                    : `has quotes that do not enclose the whole value at line ${error.line} for key ${formatDiagnosticToken(error.key, MAX_DIAGNOSTIC_KEY_LENGTH)}`;
+        }
+        throw new LocalDotEnvPreflightError(`the local .env file ${file} ${problem}`);
+    }
+}
+function formatDiagnosticToken(value, maximumLength) {
+    let result = '"';
+    for (const character of value) {
+        const encoded = JSON.stringify(character)
+            .slice(1, -1)
+            .replace(/[^\x20-\x7e]/g, (unit) => `\\u${unit.charCodeAt(0).toString(16).padStart(4, "0")}`);
+        if (result.length + encoded.length + 4 > maximumLength)
+            return `${result}..."`;
+        result += encoded;
     }
+    return `${result}"`;
 }
 function readSourceRefs(path) {
     try {

package/dist/cli/lib/env-preflight.js.map

@@ -1 +1 @@
-{"version":3,"file":"env-preflight.js","sourceRoot":"","sources":["../../../src/cli/lib/env-preflight.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGpD,+FAA+F;AAC/F,yFAAyF;AACzF,EAAE;AACF,+FAA+F;AAC/F,2FAA2F;AAC3F,oGAAoG;AAEpG,wEAAwE;AACxE,8EAA8E;AAC9E,4EAA4E;AAC5E,2EAA2E;AAC3E,+EAA+E;AAC/E,2DAA2D;AAC3D,MAAM,wBAAwB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;AAC3E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,kBAAkB,EAAE,WAAW,CAAC,CAAC,CAAC;AAEpF,0EAA0E;AAC1E,yEAAyE;AACzE,+EAA+E;AAC/E,2EAA2E;AAC3E,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AAE5D,+EAA+E;AAC/E,6EAA6E;AAC7E,8EAA8E;AAC9E,8EAA8E;AAC9E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3C,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAClF,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,MAAM;IACN,QAAQ;IACR,WAAW;IACX,WAAW;IACX,OAAO;IACP,MAAM;IACN,KAAK;IACL,cAAc;CACf,CAAC,CAAC;AAEH,4EAA4E;AAC5E,oEAAoE;AACpE,MAAM,qBAAqB,GAAG,8BAA8B,CAAC;AAE7D,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,qBAAqB,GAAG,SAAS,CAAC;AAExC,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,iFAAiF;AACjF,iFAAiF;AACjF,yEAAyE;AACzE,8EAA8E;AAC9E,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAmB,CAAC;IACxC,0EAA0E;IAC1E,6EAA6E;IAC7E,MAAM,EAAE,GACN,2FAA2F,CAAC;IAC9F,IAAI,KAAK,GAA2B,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,OAAO,KAAK,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;YAC3C,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,WAAW,CAAC,CAAC;QACzD,CAAC;QACD,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4EAA4E;AAC5E,8EAA8E;AAC9E,yEAAyE;AACzE,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC9C,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,KAAa,EAAQ,EAAE;QACjD,IAAI,KAAK,GAAG,SAAS;YAAE,OAAO;QAC9B,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAClF,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,SAAS;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,KAAK,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC;oBAAE,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC5D,SAAS;YACX,CAAC;YACD,IAAI,YAAY,IAAI,gBAAgB;gBAAE,SAAS;YAC/C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAE,SAAS;YAC1D,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YACrD,YAAY,EAAE,CAAC;YACf,SAAS,CAAC,UAAU,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAElB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,UAAU,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACjE,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI;YAAE,SAAS;QAC3C,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAGlC;IACC,OAAO,MAAM,CAAC,QAAQ;SACnB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;SACvE,IAAI,EAAE,CAAC;AACZ,CAAC;AAUD,gFAAgF;AAChF,8EAA8E;AAC9E,wDAAwD;AACxD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAI5C;IACC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,gDAAgD,MAAM,CAAC,OAAO,EAAE;SACzE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrE,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAClC,iBAAiB,MAAM,CAAC,aAAa,WAAW,CACjD,CAAC;QACF,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,iEAAiE;SAC1E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,kBAAkB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AACnF,CAAC;AAED,8EAA8E;AAC9E,+EAA+E;AAC/E,6EAA6E;AAC7E,uDAAuD;AACvD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAA8B,EAC9B,aAAqB;IAErB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACxD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,mEAAmE;SAC5E,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,eAAe,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACvD,OAAO,sBAAsB,CAAC;QAC5B,MAAM;QACN,aAAa;QACb,OAAO,EAAE,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC;KACjE,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAAc;IACtD,OAAO;QACL,4DAA4D,MAAM,GAAG;QACrE,8EAA8E;KAC/E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,OAA0B,EAC1B,eAAuB;IAEvB,MAAM,KAAK,GAAG;QACZ,qFAAqF,eAAe,IAAI;QACxG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;QACnC,EAAE;QACF,yFAAyF;QACzF,wFAAwF;QACxF,kCAAkC,eAAe,EAAE,2CAA2C;KAC/F,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,4EAA4E;AAC5E,8EAA8E;AAC9E,8EAA8E;AAC9E,yCAAyC;AACzC,EAAE;AACF,4EAA4E;AAC5E,gFAAgF;AAChF,8EAA8E;AAC9E,mCAAmC;AACnC,KAAK,UAAU,WAAW,CACxB,MAA8B,EAC9B,aAAqB;IAErB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAC/B,iBAAiB,aAAa,wBAAwB,CACvD,CAAC;QACF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,gFAAgF;AAChF,0DAA0D;AAC1D,EAAE;AACF,oGAAoG;AACpG,mGAAmG;AACnG,qCAAqC;AACrC,SAAS,UAAU,CAAC,QAAiB;IACnC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAErC,6EAA6E;IAC7E,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAExE,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC9D,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5C,IAAI,OAAO,CAAC,MAAM,GAAG,qBAAqB;YAAE,OAAO,IAAI,GAAG,EAAE,CAAC;QAC7D,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,MAA4B,EAAE,MAA4B;IAC3E,KAAK,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,MAAM,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,WAAW,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC"}
+{"version":3,"file":"env-preflight.js","sourceRoot":"","sources":["../../../src/cli/lib/env-preflight.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAEpD,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,+FAA+F;AAC/F,yFAAyF;AACzF,4FAA4F;AAC5F,4FAA4F;AAC5F,cAAc;AAEd,2FAA2F;AAC3F,kGAAkG;AAClG,4FAA4F;AAC5F,gEAAgE;AAChE,MAAM,wBAAwB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;AAC3E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,kBAAkB,EAAE,WAAW,CAAC,CAAC,CAAC;AAEpF,4FAA4F;AAC5F,gGAAgG;AAChG,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AAE5D,oGAAoG;AACpG,8FAA8F;AAC9F,iBAAiB;AACjB,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3C,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAClF,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,MAAM;IACN,QAAQ;IACR,WAAW;IACX,WAAW;IACX,OAAO;IACP,MAAM;IACN,KAAK;IACL,cAAc;CACf,CAAC,CAAC;AAEH,mGAAmG;AACnG,4BAA4B;AAC5B,MAAM,qBAAqB,GAAG,8BAA8B,CAAC;AAE7D,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,qBAAqB,GAAG,SAAS,CAAC;AACxC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AACvC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAErC,MAAM,yBAA0B,SAAQ,KAAK;CAAG;AAEhD,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,8FAA8F;AAC9F,kGAAkG;AAClG,yBAAyB;AACzB,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAmB,CAAC;IACxC,iGAAiG;IACjG,oCAAoC;IACpC,MAAM,EAAE,GACN,2FAA2F,CAAC;IAC9F,IAAI,KAAK,GAA2B,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,OAAO,KAAK,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;YAC3C,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,WAAW,CAAC,CAAC;QACzD,CAAC;QACD,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8FAA8F;AAC9F,uEAAuE;AACvE,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC;IACxD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC9C,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,KAAa,EAAQ,EAAE;QACjD,IAAI,KAAK,GAAG,SAAS;YAAE,OAAO;QAC9B,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAClF,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,SAAS;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,KAAK,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC;oBAAE,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACzE,SAAS;YACX,CAAC;YACD,IAAI,YAAY,IAAI,gBAAgB;gBAAE,SAAS;YAC/C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAE,SAAS;YAC1D,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YACrD,YAAY,EAAE,CAAC;YACf,SAAS,CAAC,UAAU,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAElB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,UAAU,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACjE,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI;YAAE,SAAS;QAC3C,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAGlC;IACC,OAAO,MAAM,CAAC,QAAQ;SACnB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;SACvE,IAAI,EAAE,CAAC;AACZ,CAAC;AAiBD,4FAA4F;AAC5F,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAK5C;IACC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,gDAAgD,MAAM,CAAC,OAAO,EAAE;SACzE,CAAC;IACJ,CAAC;IACD,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,MAAM,EACJ,KAAK,YAAY,yBAAyB;gBACxC,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,uDAAuD;SAC9D,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrE,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAClC,iBAAiB,MAAM,CAAC,aAAa,WAAW,CACjD,CAAC;QACF,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;YAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,iEAAiE;SAC1E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,kBAAkB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AACnF,CAAC;AAED,iGAAiG;AACjG,mGAAmG;AACnG,SAAS;AACT,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAA8B,EAC9B,aAAqB,EACrB,QAAuB;IAEvB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACxD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,mEAAmE;SAC5E,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,eAAe,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACvD,OAAO,sBAAsB,CAAC;QAC5B,MAAM;QACN,aAAa;QACb,OAAO,EAAE,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC;QAChE,QAAQ;KACT,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAAc;IACtD,OAAO;QACL,4DAA4D,MAAM,GAAG;QACrE,8EAA8E;KAC/E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,OAA0B,EAC1B,eAAuB;IAEvB,MAAM,KAAK,GAAG;QACZ,qFAAqF,eAAe,IAAI;QACxG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;QACnC,EAAE;QACF,yFAAyF;QACzF,wFAAwF;QACxF,kCAAkC,gBAAgB,2CAA2C;KAC9F,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,4FAA4F;AAC5F,iGAAiG;AACjG,mGAAmG;AACnG,oGAAoG;AACpG,KAAK,UAAU,WAAW,CACxB,MAA8B,EAC9B,aAAqB;IAErB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAC/B,iBAAiB,aAAa,wBAAwB,CACvD,CAAC;QACF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,8FAA8F;AAC9F,WAAW;AACX,oGAAoG;AACpG,2EAA2E;AAC3E,SAAS,UAAU,CAAC,QAAiB;IACnC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAErC,6EAA6E;IAC7E,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAExE,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC9D,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,WAAmB;IACvD,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,qBAAqB,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,0BAA0B,CAAC,CAAC;QAC5F,IAAI,OAAO,GAAG,2CAA2C,CAAC;QAC1D,IACE,KAAK,YAAY,iBAAiB;YAClC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;YAChC,KAAK,CAAC,IAAI,GAAG,CAAC;YACd,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAC3F,CAAC;YACD,OAAO;gBACL,KAAK,CAAC,GAAG,KAAK,SAAS;oBACrB,CAAC,CAAC,qCAAqC,KAAK,CAAC,IAAI,EAAE;oBACnD,CAAC,CAAC,0DAA0D,KAAK,CAAC,IAAI,YAAY,qBAAqB,CAAC,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC,EAAE,CAAC;QACtJ,CAAC;QACD,MAAM,IAAI,yBAAyB,CAAC,uBAAuB,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;IAChF,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa,EAAE,aAAqB;IACjE,IAAI,MAAM,GAAG,GAAG,CAAC;IACjB,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;aACtC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;aACZ,OAAO,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAChG,IAAI,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,aAAa;YAAE,OAAO,GAAG,MAAM,MAAM,CAAC;QAC/E,MAAM,IAAI,OAAO,CAAC;IACpB,CAAC;IACD,OAAO,GAAG,MAAM,GAAG,CAAC;AACtB,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5C,IAAI,OAAO,CAAC,MAAM,GAAG,qBAAqB;YAAE,OAAO,IAAI,GAAG,EAAE,CAAC;QAC7D,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,MAA4B,EAAE,MAA4B;IAC3E,KAAK,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,MAAM,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,WAAW,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC"}

package/dist/cli/lib/errors.d.ts

@@ -2,64 +2,32 @@ import { type ForeignCredential } from "./contract/foreign-credentials.js";
 export declare class ApiError extends Error {
     readonly status: number;
     readonly body: unknown;
-    constructor(status: number, body: unknown);
+    readonly credentialKind?: "apiKey" | "userLogin" | undefined;
+    constructor(status: number, body: unknown, credentialKind?: "apiKey" | "userLogin" | undefined);
 }
 export declare class ForeignCredentialError extends Error {
     readonly kind: ForeignCredential;
     constructor(kind: ForeignCredential);
 }
-export declare class SessionRefreshError extends Error {
-    constructor(message?: string, options?: {
+export declare const CliLoginFailure: {
+    readonly NOT_LOGGED_IN: "notLoggedIn";
+    readonly SESSION_REJECTED: "sessionRejected";
+    readonly REAUTHENTICATION_REQUIRED: "reauthenticationRequired";
+    readonly LOCK_UNAVAILABLE: "lockUnavailable";
+    readonly UNSTORABLE: "unstorable";
+    readonly REFRESH_UNAVAILABLE: "refreshUnavailable";
+    readonly UNCLASSIFIED: "unclassified";
+};
+export type CliLoginFailure = (typeof CliLoginFailure)[keyof typeof CliLoginFailure];
+export declare class CliLoginError extends Error {
+    readonly failure: CliLoginFailure;
+    constructor(failure: CliLoginFailure, message: string, options?: {
         cause?: unknown;
     });
 }
-export declare class RefreshTokenRejectedError extends SessionRefreshError {
-    constructor(options?: {
-        cause?: unknown;
-    });
-}
-export declare class RefreshUnavailableError extends SessionRefreshError {
-    constructor(options?: {
-        cause?: unknown;
-    });
-}
-export declare class SessionUnstorableError extends SessionRefreshError {
-    readonly directory: string;
-    constructor(directory: string, options?: {
-        cause?: unknown;
-    });
-}
-/**
- * The command that re-establishes the shared Console session on this machine.
- *
- * It belongs to Vendure Platform rather than to Cloud, and it is named literally rather than
- * through `cloudInvocation()` for that reason. Platform's own messages name the same command, so a
- * person following either tool's advice runs one thing. Cloud never mints a Console session: the
- * browser approval that produces one is Platform's, and telling someone to run a Cloud login here
- * would send them to a second sign-in this whole feature exists to remove.
- */
-export declare const CONSOLE_LINK_COMMAND = "vendure console link";
-export declare class ConsoleSessionRejectedError extends SessionRefreshError {
-    constructor(options?: {
-        cause?: unknown;
-    });
-}
-export declare class ConsoleSessionNotAcceptedError extends SessionRefreshError {
-    constructor(options?: {
-        cause?: unknown;
-    });
-}
-export declare class ConsoleSessionUnavailableError extends SessionRefreshError {
-    constructor(options?: {
-        cause?: unknown;
-    });
-}
-export declare class ConsoleSessionLockUnavailableError extends SessionRefreshError {
-    constructor(options?: {
-        cause?: unknown;
-    });
+export declare class LoginPairingError extends Error {
+    constructor(message: string);
 }
-export declare function toSessionRefreshError(error: unknown): SessionRefreshError;
 export declare function formatCommandErrorMessage(error: unknown): string;
 export declare function reportCommandError(error: unknown, options?: {
     json?: boolean;

package/dist/cli/lib/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/errors.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,iBAAiB,EAEvB,MAAM,mCAAmC,CAAC;AAK3C,qBAAa,QAAS,SAAQ,KAAK;aAEf,MAAM,EAAE,MAAM;aACd,IAAI,EAAE,OAAO;gBADb,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,OAAO;CAKhC;AAID,qBAAa,sBAAuB,SAAQ,KAAK;IACnC,QAAQ,CAAC,IAAI,EAAE,iBAAiB;gBAAvB,IAAI,EAAE,iBAAiB;CAI7C;AAQD,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,OAAO,GAAE,MAAsC,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI3F;AAKD,qBAAa,yBAA0B,SAAQ,mBAAmB;gBACpD,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAO1C;AAID,qBAAa,uBAAwB,SAAQ,mBAAmB;gBAClD,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAO1C;AAKD,qBAAa,sBAAuB,SAAQ,mBAAmB;IAE3D,QAAQ,CAAC,SAAS,EAAE,MAAM;gBAAjB,SAAS,EAAE,MAAM,EAC1B,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAQhC;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAI3D,qBAAa,2BAA4B,SAAQ,mBAAmB;gBACtD,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAO1C;AAMD,qBAAa,8BAA+B,SAAQ,mBAAmB;gBACzD,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAO1C;AAKD,qBAAa,8BAA+B,SAAQ,mBAAmB;gBACzD,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAO1C;AAKD,qBAAa,kCAAmC,SAAQ,mBAAmB;gBAC7D,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI1C;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CAKzE;AAID,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAwBhE;AAKD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,MAAM,CAS3F"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/errors.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,iBAAiB,EAEvB,MAAM,mCAAmC,CAAC;AAO3C,qBAAa,QAAS,SAAQ,KAAK;aAEf,MAAM,EAAE,MAAM;aACd,IAAI,EAAE,OAAO;aAEb,cAAc,CAAC,EAAE,QAAQ,GAAG,WAAW;gBAHvC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,OAAO,EAEb,cAAc,CAAC,EAAE,QAAQ,GAAG,WAAW,YAAA;CAK1D;AAID,qBAAa,sBAAuB,SAAQ,KAAK;IACnC,QAAQ,CAAC,IAAI,EAAE,iBAAiB;gBAAvB,IAAI,EAAE,iBAAiB;CAI7C;AAGD,eAAO,MAAM,eAAe;;;;;;;;CAQlB,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,OAAO,eAAe,CAAC,CAAC;AAErF,qBAAa,aAAc,SAAQ,KAAK;IAEpC,QAAQ,CAAC,OAAO,EAAE,eAAe;gBAAxB,OAAO,EAAE,eAAe,EACjC,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAKhC;AAID,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,OAAO,EAAE,MAAM;CAI5B;AAID,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CA2BhE;AAID,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,MAAM,CAS3F"}

package/dist/cli/lib/errors.js

@@ -1,16 +1,21 @@
-import * as prompts from "@clack/prompts";
 import { ZodError } from "zod";
 import { foreignCredentialRefusal, } from "./contract/foreign-credentials.js";
+import { isPermissionDeniedBody } from "./contract/permission-denied.js";
 import { formatInlineUserFacingErrorReason } from "./error-output.js";
-import { cloudInvocation, underCurrentInvocation } from "./invocation.js";
+import { AUTH_LOGIN_COMMAND, AUTH_STATUS_COMMAND } from "./invocation.js";
 import { logger } from "./logger.js";
+import { output } from "./terminal-output.js";
 export class ApiError extends Error {
     status;
     body;
-    constructor(status, body) {
+    credentialKind;
+    constructor(status, body, 
+    // Which credential the refused request ran under, when the client knows it.
+    credentialKind) {
         super(`API request failed with status ${status}`);
         this.status = status;
         this.body = body;
+        this.credentialKind = credentialKind;
         this.name = "ApiError";
     }
 }
@@ -19,114 +24,52 @@ export class ApiError extends Error {
 export class ForeignCredentialError extends Error {
     kind;
     constructor(kind) {
-        super(underCurrentInvocation(foreignCredentialRefusal(kind)));
+        super(foreignCredentialRefusal(kind));
         this.kind = kind;
         this.name = "ForeignCredentialError";
     }
 }
-// Built when it is thrown rather than held as a constant, because it names the program the customer
-// ran and the compatibility executable names itself after this module has already been loaded.
-function sessionRefreshFailedMessage() {
-    return `Could not refresh the CLI session. Run \`${cloudInvocation()} login\` to re-authenticate.`;
-}
-export class SessionRefreshError extends Error {
-    constructor(message = sessionRefreshFailedMessage(), options) {
+// Why the Vendure CLI login supplied no token. Each kind needs a different next step.
+export const CliLoginFailure = {
+    NOT_LOGGED_IN: "notLoggedIn",
+    SESSION_REJECTED: "sessionRejected",
+    REAUTHENTICATION_REQUIRED: "reauthenticationRequired",
+    LOCK_UNAVAILABLE: "lockUnavailable",
+    UNSTORABLE: "unstorable",
+    REFRESH_UNAVAILABLE: "refreshUnavailable",
+    UNCLASSIFIED: "unclassified",
+};
+export class CliLoginError extends Error {
+    failure;
+    constructor(failure, message, options) {
         super(message, options);
-        this.name = "SessionRefreshError";
-    }
-}
-// The authentication service rejected the stored refresh token outright — it was revoked, expired,
-// or already consumed. Definitive: the stored credentials are worthless and only a fresh login
-// recovers.
-export class RefreshTokenRejectedError extends SessionRefreshError {
-    constructor(options) {
-        super(`Your CLI session has expired. Run \`${cloudInvocation()} login\` to re-authenticate.`, options);
-        this.name = "RefreshTokenRejectedError";
-    }
-}
-// The refresh could not be completed — network failure, timeout, or an unhealthy service.
-// Transient: the stored refresh token may still be valid, so credentials must survive.
-export class RefreshUnavailableError extends SessionRefreshError {
-    constructor(options) {
-        super(`Could not reach the authentication service to refresh your CLI session. Check your connection and try again — run \`${cloudInvocation()} login\` if it keeps failing.`, options);
-        this.name = "RefreshUnavailableError";
-    }
-}
-// The renewed session could not be stored. A refresh token is single-use, so a write that fails
-// after the exchange leaves the consumed token as the machine's only credential; this is raised
-// before the exchange instead, and nothing on disk was touched.
-export class SessionUnstorableError extends SessionRefreshError {
-    directory;
-    constructor(directory, options) {
-        super(`Cannot save a renewed CLI session to ${directory}. Your stored login was left as it is, so nothing was lost. Check that the directory is writable and has free space, then run the command again.`, options);
-        this.directory = directory;
-        this.name = "SessionUnstorableError";
-    }
-}
-/**
- * The command that re-establishes the shared Console session on this machine.
- *
- * It belongs to Vendure Platform rather than to Cloud, and it is named literally rather than
- * through `cloudInvocation()` for that reason. Platform's own messages name the same command, so a
- * person following either tool's advice runs one thing. Cloud never mints a Console session: the
- * browser approval that produces one is Platform's, and telling someone to run a Cloud login here
- * would send them to a second sign-in this whole feature exists to remove.
- */
-export const CONSOLE_LINK_COMMAND = "vendure console link";
-// Console refused the stored refresh grant, or the shared session is no longer on disk. Definitive:
-// only a fresh browser approval recovers, and that approval is Platform's to run.
-export class ConsoleSessionRejectedError extends SessionRefreshError {
-    constructor(options) {
-        super(`Your Vendure Console session has expired. Run \`${CONSOLE_LINK_COMMAND}\` and sign in, or run \`${cloudInvocation()} login\` to use a Vendure Cloud login instead.`, options);
-        this.name = "ConsoleSessionRejectedError";
+        this.failure = failure;
+        this.name = "CliLoginError";
     }
 }
-// The control plane refused a Console session that has not expired. Renewing it would rotate a
-// credential another Vendure product owns and change nothing about the refusal, so the session is
-// left exactly as it is. The usual cause is a deployment that accepts no Console session, or a
-// Console account with no Vendure Cloud organization behind it.
-export class ConsoleSessionNotAcceptedError extends SessionRefreshError {
-    constructor(options) {
-        super(`Vendure Cloud did not accept your Vendure Console session. Your session was left as it is. Run \`${cloudInvocation()} whoami\` to see how you are signed in, or \`${cloudInvocation()} login\` to use a Vendure Cloud login instead.`, options);
-        this.name = "ConsoleSessionNotAcceptedError";
+// The Vendure CLI login is for a Vendure Console the target control plane does not accept. Thrown
+// before the token leaves the machine.
+export class LoginPairingError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "LoginPairingError";
     }
 }
-// The renewal could not be completed: Console was unreachable, answered a status that judges
-// nothing, or answered something this build cannot read. Transient, so the stored session survives
-// and the next attempt gets a straight answer.
-export class ConsoleSessionUnavailableError extends SessionRefreshError {
-    constructor(options) {
-        super("Could not reach Vendure Console to renew your session. Check your connection and try again.", options);
-        this.name = "ConsoleSessionUnavailableError";
-    }
-}
-// The Console session lock could not be taken. It says nothing about the session, so nothing is
-// refreshed, written or removed. Reporting it as "no session" would send a person to the browser to
-// sign in over a session that is fine and is being renewed as they are asked.
-export class ConsoleSessionLockUnavailableError extends SessionRefreshError {
-    constructor(options) {
-        super("Another Vendure process is using the Console session. Try again.", options);
-        this.name = "ConsoleSessionLockUnavailableError";
-    }
-}
-export function toSessionRefreshError(error) {
-    if (error instanceof SessionRefreshError) {
-        return error;
-    }
-    return new SessionRefreshError(sessionRefreshFailedMessage(), { cause: error });
-}
-// What the customer is told a failure was. Separated from writing it so the same classification
-// serves the terminal and `--json`, and so it can be asserted without a process that exits.
+// Classifies a failure for the terminal and `--json`, separate from writing it so tests need no
+// process that exits.
 export function formatCommandErrorMessage(error) {
     if (error instanceof ApiError && error.status === 401) {
-        // Deliberately non-destructive: a 401 here already survived one refresh-and-retry, and the
-        // stored refresh token may still be valid (a revoked org membership, a mis-scoped token, or a
-        // bad `--token` all land here). Only an outright rejected refresh token clears credentials —
-        // see `refreshAccessToken`.
-        return `Session expired. Run \`${cloudInvocation()} login\` to re-authenticate.`;
+        // This 401 survived one renewal, so the credential itself was rejected. Nothing is cleared.
+        if (error.credentialKind === "apiKey") {
+            return "Vendure Cloud did not accept the API key passed with --token or VENDURE_CLOUD_TOKEN. Check that it has not been revoked.";
+        }
+        if (error.credentialKind === "userLogin") {
+            return `Vendure Cloud did not accept your Vendure CLI login. Run \`${AUTH_STATUS_COMMAND}\` to check it, and sign in again with \`${AUTH_LOGIN_COMMAND}\`.`;
+        }
+        return `Vendure Cloud did not accept the credential. Check the API key passed with --token or VENDURE_CLOUD_TOKEN, or run \`${AUTH_STATUS_COMMAND}\` and sign in again with \`${AUTH_LOGIN_COMMAND}\`.`;
     }
-    if (error instanceof SessionRefreshError) {
-        return error.message;
+    if (error instanceof ApiError && error.status === 403 && isPermissionDeniedBody(error.body)) {
+        return `You do not have permission for this action. It requires \`${error.body.requiredPermission}\`. Ask an administrator of your Vendure Cloud organization to grant it.`;
     }
     if (error instanceof ApiError) {
         return `API error (${error.status}): ${formatApiErrorBody(error.body)}`;
@@ -142,9 +85,8 @@ export function formatCommandErrorMessage(error) {
     }
     return "Unknown command error.";
 }
-// Reports the failure and answers with the process exit code it earns. It does not exit: the
-// Vendure CLI host calls `process.exit` with whatever a command action returns, and a command that
-// exited itself would take that decision away from the host mid-run.
+// Reports the failure and returns the process exit code. It does not exit: the Vendure CLI host
+// calls `process.exit` with whatever a command action returns.
 export function reportCommandError(error, options = {}) {
     logger.error({ error: error instanceof Error ? errorForLog(error) : error }, "Command failed");
     const message = formatCommandErrorMessage(error);
@@ -152,7 +94,7 @@ export function reportCommandError(error, options = {}) {
         process.stderr.write(`${JSON.stringify({ error: { message } })}\n`);
         return 1;
     }
-    prompts.log.error(message);
+    output.error(message);
     return 1;
 }
 function errorForLog(error) {
@@ -165,9 +107,8 @@ function errorForLog(error) {
         ...(cause === undefined ? {} : { cause }),
     };
 }
-// NestJS wraps thrown HttpExceptions as `{ message, error, statusCode }`. Surface just the message
-// (or the array of messages for ValidationPipe failures) so the operator sees the actionable text,
-// not the envelope.
+// NestJS wraps thrown HttpExceptions as `{ message, error, statusCode }`. Surface the message (or
+// the array of messages for ValidationPipe failures), not the envelope.
 function formatApiErrorBody(body) {
     if (typeof body === "string")
         return formatApiErrorMessage(body);