@vendure/cloud 0.4.0 → 0.5.0-dev.20261014172655.g652e750

package/dist/cli/lib/console-session.js

@@ -1,235 +0,0 @@
-import { discardConsoleCredential, isConsoleCredentialExpired, readConsoleCredential, writeConsoleCredential, } from "./console-credential.js";
-import { consoleOrigins } from "./console-origins.js";
-import { withConsoleSessionLock } from "./console-session-lock.js";
-import { ConsoleSessionNotAcceptedError, ConsoleSessionRejectedError, ConsoleSessionUnavailableError, } from "./errors.js";
-import { logger } from "./logger.js";
-// Reusing the Console CLI Session that Vendure Platform already obtained for this person, so a
-// developer who signed in during `vendure console link` does not approve a second login for Cloud.
-//
-// Cloud never mints one of these. It reads the stored session, refreshes it when it has expired,
-// and presents the access token to the control plane, which resolves the identity behind it
-// server-side against Console. Nothing here decodes the token or trusts what the file claims about
-// who the person is.
-const TOKEN_PATH = "/v1/auth/cli/token";
-/**
- * The deadline covers reading the answer as well as getting it. A server that sends headers and
- * then stops sending would otherwise hold the session lock for as long as it liked, and the lock's
- * stale budget is set from this bound.
- */
-const TOKEN_REQUEST_TIMEOUT_MS = 10_000;
-/** What Console names a grant it will not honour again. */
-const GRANT_REFUSED_CODE = "cli_session.invalid_grant";
-const MAX_TOKEN_LIFETIME_SECONDS = 365 * 24 * 60 * 60;
-/**
- * Whether this machine may reuse the shared Vendure Console CLI Session for Cloud commands.
- *
- * Off unless the variable is set, and the control plane refuses a Console session unless it has
- * been configured to reach Console, so both ends of CLO-641 default to the behaviour that shipped
- * before it. The switch is one a person sets rather than something inferred from the presence of a
- * file another tool wrote: finding a credential is not the same as being told to use it, and a
- * machine that turned this on by itself would change which account a command runs under.
- *
- * It lives here rather than in `config.ts` because a machine with the feature off must not even
- * read the Console credential, and keeping the switch beside the reader is what makes that
- * obvious at the one call site that checks it.
- */
-export function isSharedConsoleSessionEnabled() {
-    const value = process.env.VENDURE_CLOUD_SHARED_CONSOLE_SESSION;
-    return value === "1" || value === "true";
-}
-/**
- * The stored Console session, or `undefined` when this machine has none to reuse.
- *
- * Synchronous, because it sits on the credential-resolution path that every command runs through
- * before it does any work. An expired session is still returned: it may carry a refresh token, and
- * the renewal happens on the first 401 through the same retry the stored Cloud login uses.
- */
-export function resolveConsoleSession(options = {}) {
-    const credential = readConsoleCredential(options);
-    if (!credential) {
-        return undefined;
-    }
-    return {
-        accessToken: credential.accessToken,
-        expired: isConsoleCredentialExpired(credential, options.now?.() ?? new Date()),
-        refreshable: credential.refreshToken !== undefined,
-    };
-}
-let activeRefresh = null;
-/**
- * Renew the shared session and return the fresh access token.
- *
- * Deduplicated twice, for the same reason the stored Cloud login is. This promise collapses the
- * concurrent calls of one process, and the session lock underneath it serializes the token request
- * against every other process on the machine, Cloud and Platform alike. Neither is enough alone:
- * this one knows nothing about the other tool, and the lock cannot see a second client inside this
- * process that is already waiting on it.
- */
-export function refreshConsoleSession(failedAccessToken, options = {}) {
-    if (activeRefresh) {
-        return activeRefresh;
-    }
-    activeRefresh = withConsoleSessionLock({ home: options.home }, () => refreshUnderLock(failedAccessToken, options)).finally(() => {
-        activeRefresh = null;
-    });
-    return activeRefresh;
-}
-async function refreshUnderLock(failedAccessToken, options) {
-    // Read again now that the lock is held. Waiting for it is the usual way to find out that another
-    // process has already refreshed, and by then the pair read before the wait is the stale copy.
-    let credential = readConsoleCredential(options);
-    if (!credential) {
-        throw new ConsoleSessionRejectedError();
-    }
-    if (credential.accessToken !== failedAccessToken) {
-        if (!isConsoleCredentialExpired(credential, currentTime(options))) {
-            logger.debug("Another process already refreshed the Console session; reusing its access token");
-            return credential.accessToken;
-        }
-    }
-    else if (!isConsoleCredentialExpired(credential, currentTime(options))) {
-        // The token that was refused is still the stored one and it has not expired, so whatever the
-        // control plane objected to, it was not the age of this token. Spending the grant would rotate
-        // a credential another Vendure product owns, on every failing command, and buy a retry that is
-        // refused for the same reason. A 401 is not by itself evidence that a session needs renewing.
-        logger.debug("Console session was refused while still valid; not spending the refresh grant");
-        throw new ConsoleSessionNotAcceptedError();
-    }
-    for (let attempt = 0;; attempt++) {
-        const spent = credential.refreshToken;
-        if (!spent) {
-            throw new ConsoleSessionRejectedError();
-        }
-        try {
-            const renewed = await requestToken(credential.apiOrigin, spent, options);
-            writeConsoleCredential({
-                schemaVersion: 2,
-                origin: credential.origin,
-                apiOrigin: credential.apiOrigin,
-                accessToken: renewed.accessToken,
-                expiresAt: renewed.expiresAt,
-                ...(renewed.refreshToken ? { refreshToken: renewed.refreshToken } : {}),
-            }, { home: options.home });
-            return renewed.accessToken;
-        }
-        catch (error) {
-            // A transient failure says nothing about the refresh token, so the credential survives it
-            // untouched. One retry, and only against a token somebody else rotated in, is enough to hand
-            // over the race. A second refusal is reported rather than acted on: it refuses a token this
-            // process took from a store another participant was still moving, which is not the proof the
-            // first refusal is.
-            if (attempt > 0 || !(error instanceof ConsoleSessionRejectedError)) {
-                throw error;
-            }
-            const latest = readConsoleCredential(options);
-            if (latest?.refreshToken && latest.refreshToken !== spent) {
-                logger.debug("Console refresh token was spent by another process; using its replacement");
-                if (!isConsoleCredentialExpired(latest, currentTime(options))) {
-                    return latest.accessToken;
-                }
-                credential = latest;
-                continue;
-            }
-            // The store still holds the token that was just refused, and the lock was held across both
-            // the refusal and this read, so nothing can have rotated it in between. The session is over.
-            discardConsoleCredential({ home: options.home });
-            throw error;
-        }
-    }
-}
-async function requestToken(storedApiOrigin, refreshToken, options) {
-    // Re-checked rather than taken from the file. The origin was validated when the credential was
-    // read, and validating it again here means no path reaches `fetch` with a URL that skipped the
-    // check.
-    const { apiOrigin } = consoleOrigins({ apiOrigin: storedApiOrigin });
-    const fetchImpl = options.fetch ?? globalThis.fetch;
-    let response;
-    try {
-        response = await fetchImpl(`${apiOrigin}${TOKEN_PATH}`, {
-            method: "POST",
-            redirect: "error",
-            signal: AbortSignal.timeout(TOKEN_REQUEST_TIMEOUT_MS),
-            headers: { accept: "application/json", "content-type": "application/json" },
-            body: JSON.stringify({ grant_type: "refresh_token", refresh_token: refreshToken }),
-        });
-    }
-    catch (error) {
-        throw new ConsoleSessionUnavailableError({ cause: error });
-    }
-    if (!response.ok) {
-        throw (await refusesTheGrant(response))
-            ? new ConsoleSessionRejectedError()
-            : new ConsoleSessionUnavailableError({
-                cause: new Error(`Vendure Console answered the token request with ${response.status}.`),
-            });
-    }
-    let body;
-    try {
-        body = await response.json();
-    }
-    catch (error) {
-        throw new ConsoleSessionUnavailableError({ cause: error });
-    }
-    return toRenewedSession(body, refreshToken, currentTime(options));
-}
-/**
- * Whether Console judged the grant itself and refused it.
- *
- * The status alone does not say. A 404 from an API origin pointed at the wrong host, a 403 from a
- * proxy in front of Console, and a 401 from a gateway that wants a credential of its own are all
- * 4xx, and none of them is Console reporting a spent refresh token. Console names that case in the
- * body, so the body decides, and everything else leaves the stored credential alone.
- */
-async function refusesTheGrant(response) {
-    if (response.status < 400 || response.status >= 500) {
-        return false;
-    }
-    try {
-        const value = JSON.parse(await response.text());
-        if (!value || typeof value !== "object" || !("code" in value)) {
-            return false;
-        }
-        const { code } = value;
-        return code === GRANT_REFUSED_CODE;
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * Validate the token response. An unreadable expiry is a failure rather than an assumed default: a
- * session treated as valid for longer than it is fails later, where the cause is no longer visible.
- */
-function toRenewedSession(value, presentedRefreshToken, now) {
-    const body = value;
-    if (typeof body?.access_token !== "string" || !body.access_token) {
-        throw new ConsoleSessionUnavailableError({
-            cause: new Error("Vendure Console returned no access token."),
-        });
-    }
-    if (body.token_type !== "Bearer") {
-        throw new ConsoleSessionUnavailableError({
-            cause: new Error("Vendure Console returned an unsupported token type."),
-        });
-    }
-    if (typeof body.expires_in !== "number" ||
-        !Number.isInteger(body.expires_in) ||
-        body.expires_in <= 0 ||
-        body.expires_in > MAX_TOKEN_LIFETIME_SECONDS) {
-        throw new ConsoleSessionUnavailableError({
-            cause: new Error("Vendure Console returned no usable token expiry."),
-        });
-    }
-    const refreshToken = typeof body.refresh_token === "string" && body.refresh_token
-        ? body.refresh_token
-        : presentedRefreshToken;
-    return {
-        accessToken: body.access_token,
-        expiresAt: new Date(now.getTime() + body.expires_in * 1000).toISOString(),
-        refreshToken,
-    };
-}
-function currentTime(options) {
-    return options.now?.() ?? new Date();
-}
-//# sourceMappingURL=console-session.js.map

package/dist/cli/lib/console-session.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"console-session.js","sourceRoot":"","sources":["../../../src/cli/lib/console-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,wBAAwB,EACxB,0BAA0B,EAC1B,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EACL,8BAA8B,EAC9B,2BAA2B,EAC3B,8BAA8B,GAC/B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,+FAA+F;AAC/F,mGAAmG;AACnG,EAAE;AACF,iGAAiG;AACjG,4FAA4F;AAC5F,mGAAmG;AACnG,qBAAqB;AAErB,MAAM,UAAU,GAAG,oBAAoB,CAAC;AAExC;;;;GAIG;AACH,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAExC,2DAA2D;AAC3D,MAAM,kBAAkB,GAAG,2BAA2B,CAAC;AAEvD,MAAM,0BAA0B,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAOtD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,6BAA6B;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC;IAC/D,OAAO,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,MAAM,CAAC;AAC3C,CAAC;AAUD;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAA4D,EAAE;IAE9D,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,OAAO,EAAE,0BAA0B,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;QAC9E,WAAW,EAAE,UAAU,CAAC,YAAY,KAAK,SAAS;KACnD,CAAC;AACJ,CAAC;AAED,IAAI,aAAa,GAA2B,IAAI,CAAC;AAEjD;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CACnC,iBAAqC,EACrC,UAAiC,EAAE;IAEnC,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,aAAa,GAAG,sBAAsB,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAClE,gBAAgB,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAC7C,CAAC,OAAO,CAAC,GAAG,EAAE;QACb,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,iBAAqC,EACrC,OAA8B;IAE9B,iGAAiG;IACjG,8FAA8F;IAC9F,IAAI,UAAU,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,2BAA2B,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,UAAU,CAAC,WAAW,KAAK,iBAAiB,EAAE,CAAC;QACjD,IAAI,CAAC,0BAA0B,CAAC,UAAU,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAClE,MAAM,CAAC,KAAK,CACV,iFAAiF,CAClF,CAAC;YACF,OAAO,UAAU,CAAC,WAAW,CAAC;QAChC,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,0BAA0B,CAAC,UAAU,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACzE,6FAA6F;QAC7F,+FAA+F;QAC/F,+FAA+F;QAC/F,8FAA8F;QAC9F,MAAM,CAAC,KAAK,CAAC,+EAA+E,CAAC,CAAC;QAC9F,MAAM,IAAI,8BAA8B,EAAE,CAAC;IAC7C,CAAC;IAED,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,2BAA2B,EAAE,CAAC;QAC1C,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YACzE,sBAAsB,CACpB;gBACE,aAAa,EAAE,CAAC;gBAChB,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxE,EACD,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CACvB,CAAC;YACF,OAAO,OAAO,CAAC,WAAW,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,0FAA0F;YAC1F,6FAA6F;YAC7F,4FAA4F;YAC5F,6FAA6F;YAC7F,oBAAoB;YACpB,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,YAAY,2BAA2B,CAAC,EAAE,CAAC;gBACnE,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,MAAM,EAAE,YAAY,IAAI,MAAM,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;gBAC1D,MAAM,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC;gBAC1F,IAAI,CAAC,0BAA0B,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;oBAC9D,OAAO,MAAM,CAAC,WAAW,CAAC;gBAC5B,CAAC;gBACD,UAAU,GAAG,MAAM,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,2FAA2F;YAC3F,6FAA6F;YAC7F,wBAAwB,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YACjD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAQD,KAAK,UAAU,YAAY,CACzB,eAAuB,EACvB,YAAoB,EACpB,OAA8B;IAE9B,+FAA+F;IAC/F,+FAA+F;IAC/F,SAAS;IACT,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACpD,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,SAAS,GAAG,UAAU,EAAE,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,wBAAwB,CAAC;YACrD,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;SACnF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,8BAA8B,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,CAAC,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;YACrC,CAAC,CAAC,IAAI,2BAA2B,EAAE;YACnC,CAAC,CAAC,IAAI,8BAA8B,CAAC;gBACjC,KAAK,EAAE,IAAI,KAAK,CAAC,mDAAmD,QAAQ,CAAC,MAAM,GAAG,CAAC;aACxF,CAAC,CAAC;IACT,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,8BAA8B,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,gBAAgB,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,eAAe,CAAC,QAAkB;IAC/C,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,EAAE,CAAC;YAC9D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,GAAG,KAA0B,CAAC;QAC5C,OAAO,IAAI,KAAK,kBAAkB,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CACvB,KAAc,EACd,qBAA6B,EAC7B,GAAS;IAET,MAAM,IAAI,GAAG,KAKZ,CAAC;IACF,IAAI,OAAO,IAAI,EAAE,YAAY,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACjE,MAAM,IAAI,8BAA8B,CAAC;YACvC,KAAK,EAAE,IAAI,KAAK,CAAC,2CAA2C,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,8BAA8B,CAAC;YACvC,KAAK,EAAE,IAAI,KAAK,CAAC,qDAAqD,CAAC;SACxE,CAAC,CAAC;IACL,CAAC;IACD,IACE,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACnC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,UAAU,IAAI,CAAC;QACpB,IAAI,CAAC,UAAU,GAAG,0BAA0B,EAC5C,CAAC;QACD,MAAM,IAAI,8BAA8B,CAAC;YACvC,KAAK,EAAE,IAAI,KAAK,CAAC,kDAAkD,CAAC;SACrE,CAAC,CAAC;IACL,CAAC;IACD,MAAM,YAAY,GAChB,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa;QAC1D,CAAC,CAAC,IAAI,CAAC,aAAa;QACpB,CAAC,CAAC,qBAAqB,CAAC;IAC5B,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;QACzE,YAAY;KACb,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAA8B;IACjD,OAAO,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;AACvC,CAAC"}

package/dist/cli/lib/file-lock.d.ts

@@ -1,23 +0,0 @@
-export interface FileLockOptions {
-    staleMs: number;
-    waitMs: number;
-    pollMs?: number;
-    onWait?: () => void;
-    waitNoticeMs?: number;
-}
-/**
- * Best-effort advisory mutex between concurrent `vcloud` processes, built on
- * the atomicity of `open(O_CREAT | O_EXCL)`.
- *
- * "Best effort" is the important part: if the lock cannot be taken (wait
- * exhausted, read-only config dir, unsupported filesystem) `fn` still runs,
- * unserialized. It removes the common race; it does not guarantee exclusion.
- *
- * `fn` therefore receives whether the lock was actually held. Anything whose
- * consequences are unacceptable when two processes do it at once — in this
- * codebase, discarding stored credentials — must be gated on that flag, and
- * the caller needs a recovery path for the unlocked case. Ignoring the flag is
- * how you get a mutex that reads as exclusive but silently isn't.
- */
-export declare function withFileLock<T>(lockFile: string, options: FileLockOptions, fn: (held: boolean) => Promise<T>): Promise<T>;
-//# sourceMappingURL=file-lock.d.ts.map

package/dist/cli/lib/file-lock.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"file-lock.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/file-lock.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,eAAe;IAI9B,OAAO,EAAE,MAAM,CAAC;IAEhB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAIhB,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAKD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAClC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,eAAe,EACxB,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,GAChC,OAAO,CAAC,CAAC,CAAC,CASZ"}

package/dist/cli/lib/file-lock.js

@@ -1,121 +0,0 @@
-import { randomBytes } from "node:crypto";
-import { mkdirSync, readFileSync, statSync, unlinkSync, writeFileSync } from "node:fs";
-import { dirname } from "node:path";
-import { logger } from "./logger.js";
-import { sleep } from "./sleep.js";
-const DEFAULT_POLL_MS = 50;
-const DEFAULT_WAIT_NOTICE_MS = 2_000;
-/**
- * Best-effort advisory mutex between concurrent `vcloud` processes, built on
- * the atomicity of `open(O_CREAT | O_EXCL)`.
- *
- * "Best effort" is the important part: if the lock cannot be taken (wait
- * exhausted, read-only config dir, unsupported filesystem) `fn` still runs,
- * unserialized. It removes the common race; it does not guarantee exclusion.
- *
- * `fn` therefore receives whether the lock was actually held. Anything whose
- * consequences are unacceptable when two processes do it at once — in this
- * codebase, discarding stored credentials — must be gated on that flag, and
- * the caller needs a recovery path for the unlocked case. Ignoring the flag is
- * how you get a mutex that reads as exclusive but silently isn't.
- */
-export async function withFileLock(lockFile, options, fn) {
-    const owner = await acquireLock(lockFile, options);
-    try {
-        return await fn(owner !== null);
-    }
-    finally {
-        if (owner) {
-            releaseLock(lockFile, owner);
-        }
-    }
-}
-async function acquireLock(lockFile, options) {
-    const owner = `${process.pid}-${randomBytes(8).toString("hex")}`;
-    const startedAt = Date.now();
-    const deadline = startedAt + options.waitMs;
-    const noticeAt = startedAt + (options.waitNoticeMs ?? DEFAULT_WAIT_NOTICE_MS);
-    let noticed = false;
-    // The guarded work writes into this directory anyway, but the lock is taken
-    // first — on a fresh machine it would otherwise ENOENT and run unlocked.
-    try {
-        mkdirSync(dirname(lockFile), { recursive: true });
-    }
-    catch (error) {
-        logger.debug({ lockFile, error }, "Could not create lock directory; continuing unlocked");
-        return null;
-    }
-    while (true) {
-        try {
-            writeFileSync(lockFile, owner, { flag: "wx", mode: 0o600 });
-            return owner;
-        }
-        catch (error) {
-            if (errorCode(error) !== "EEXIST") {
-                logger.debug({ lockFile, error }, "Could not create lock file; continuing unlocked");
-                return null;
-            }
-        }
-        if (isStale(lockFile, options.staleMs)) {
-            logger.debug({ lockFile }, "Breaking stale lock");
-            removeLock(lockFile);
-            continue;
-        }
-        if (Date.now() >= deadline) {
-            logger.debug({ lockFile }, "Lock wait exhausted; continuing unlocked");
-            return null;
-        }
-        if (!noticed && options.onWait && Date.now() >= noticeAt) {
-            noticed = true;
-            notifyWaiting(options.onWait, lockFile);
-        }
-        await sleep(options.pollMs ?? DEFAULT_POLL_MS);
-    }
-}
-// Progress reporting must never be what stops the guarded work from running —
-// the sink is usually stderr, and a closed pipe raises EPIPE.
-function notifyWaiting(onWait, lockFile) {
-    try {
-        onWait();
-    }
-    catch (error) {
-        logger.debug({ lockFile, error }, "Wait notice failed");
-    }
-}
-function releaseLock(lockFile, owner) {
-    // Only drop the lock while we still hold it: another process may have
-    // broken ours as stale and taken its own.
-    try {
-        if (readFileSync(lockFile, "utf-8") !== owner) {
-            return;
-        }
-    }
-    catch {
-        return;
-    }
-    removeLock(lockFile);
-}
-function isStale(lockFile, staleMs) {
-    try {
-        return statSync(lockFile).mtimeMs < Date.now() - staleMs;
-    }
-    catch {
-        // Gone between the failed create and this stat — treat as free and retry.
-        return false;
-    }
-}
-function removeLock(lockFile) {
-    try {
-        unlinkSync(lockFile);
-    }
-    catch {
-        // Another process already removed it.
-    }
-}
-function errorCode(error) {
-    if (error instanceof Error && "code" in error && typeof error.code === "string") {
-        return error.code;
-    }
-    return undefined;
-}
-//# sourceMappingURL=file-lock.js.map

package/dist/cli/lib/file-lock.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"file-lock.js","sourceRoot":"","sources":["../../../src/cli/lib/file-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAiBnC,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAErC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,OAAwB,EACxB,EAAiC;IAEjC,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IAClC,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,EAAE,CAAC;YACV,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,OAAwB;IACnE,MAAM,KAAK,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IAC5C,MAAM,QAAQ,GAAG,SAAS,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC,CAAC;IAC9E,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,4EAA4E;IAC5E,yEAAyE;IACzE,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,sDAAsD,CAAC,CAAC;QAC1F,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,aAAa,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5D,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAClC,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,iDAAiD,CAAC,CAAC;gBACrF,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,EAAE,qBAAqB,CAAC,CAAC;YAClD,UAAU,CAAC,QAAQ,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,EAAE,0CAA0C,CAAC,CAAC;YACvE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YACzD,OAAO,GAAG,IAAI,CAAC;YACf,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,8DAA8D;AAC9D,SAAS,aAAa,CAAC,MAAkB,EAAE,QAAgB;IACzD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,oBAAoB,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,KAAa;IAClD,sEAAsE;IACtE,0CAA0C;IAC1C,IAAI,CAAC;QACH,IAAI,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,KAAK,EAAE,CAAC;YAC9C,OAAO;QACT,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,UAAU,CAAC,QAAQ,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,OAAO,CAAC,QAAgB,EAAE,OAAe;IAChD,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB;IAClC,IAAI,CAAC;QACH,UAAU,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAChF,OAAO,KAAK,CAAC,IAAI,CAAC;IACpB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}