@vendure/cloud 0.4.0 → 0.5.0-dev.20261016123507.ge07a06e

package/dist/cli/lib/console-credential.js

@@ -1,164 +0,0 @@
-import { existsSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync, } from "node:fs";
-import { homedir } from "node:os";
-import { join } from "node:path";
-import { consoleOrigins } from "./console-origins.js";
-import { pairedConsoleOrigins } from "./console-pairing.js";
-import { logger } from "./logger.js";
-/**
- * Treat a session as expired slightly early, so a token that passes this check and then expires
- * while the request is in flight does not surface as a failure somewhere further down.
- */
-const EXPIRY_SKEW_MS = 60_000;
-/** `~/.vendure`. Not `~/.vendure-cloud`: this credential belongs to Console, not to Cloud. */
-export function consoleConfigDir(home = homedir()) {
-    return join(home, ".vendure");
-}
-export function consoleCredentialPath(home = homedir()) {
-    return join(consoleConfigDir(home), "console-credentials.json");
-}
-/**
- * The stored credential, or `undefined`.
- *
- * Every failure reads as "no credential": a missing file, an unreadable one, malformed JSON, a
- * schema version this build does not know, a session issued by a different Console, an untrusted
- * origin named by the caller, and a machine whose control plane names no trusted Console. The
- * answer to all of them is the same, which is that this machine has no shared session to reuse, and
- * the caller falls back to the Cloud login it had before. Nothing here throws, including for a
- * caller that names an origin this build does not trust.
- *
- * Expiry is deliberately not checked here. An expired credential may still carry a usable refresh
- * token, so that decision belongs to the caller.
- *
- * A caller that names neither origin gets the Console its control plane pairs with, so the reader
- * exported at the CLI boundary resolves the same Console as the session path (CLO-641).
- */
-export function readConsoleCredential(location = {}) {
-    const expected = expectedOrigins(location);
-    if (!expected) {
-        return undefined;
-    }
-    const { appOrigin, apiOrigin } = expected;
-    let raw;
-    try {
-        raw = readFileSync(consoleCredentialPath(location.home), "utf-8");
-    }
-    catch {
-        return undefined;
-    }
-    let value;
-    try {
-        value = JSON.parse(raw);
-    }
-    catch {
-        return undefined;
-    }
-    if (!isStoredConsoleCredential(value)) {
-        return undefined;
-    }
-    // Both halves have to match. A token minted against a local development Console must never be
-    // replayed against production, and the app origin alone does not say which API issued it.
-    if (!originsMatch(value.origin, appOrigin) || !originsMatch(value.apiOrigin, apiOrigin)) {
-        // Named because it is the one case with a usable session on disk behind it.
-        logger.debug({ storedApiOrigin: value.apiOrigin, expectedApiOrigin: apiOrigin }, "Ignoring a Console session another Console issued");
-        return undefined;
-    }
-    return { ...value, origin: appOrigin, apiOrigin };
-}
-function expectedOrigins(location) {
-    if (location.appOrigin === undefined && location.apiOrigin === undefined) {
-        return pairedConsoleOrigins();
-    }
-    try {
-        return consoleOrigins(location);
-    }
-    catch (error) {
-        // Same answer as an untrusted `VENDURE_CLOUD_CONSOLE_API_URL`: no Console can be named, so
-        // there is no session to read. A raw throw from here would pass the `ConsoleSession*Error`
-        // taxonomy that every caller on the refresh path handles.
-        logger.debug({ error }, "Untrusted Console origins named by the caller; ignoring the session");
-        return undefined;
-    }
-}
-// Compared as origins rather than as strings, so a stored trailing slash or an explicit default
-// port is the same credential. An unparseable stored value is not this file's to repair.
-function originsMatch(stored, expected) {
-    try {
-        return new URL(stored).origin === expected;
-    }
-    catch {
-        return false;
-    }
-}
-function isStoredConsoleCredential(value) {
-    if (!value || typeof value !== "object") {
-        return false;
-    }
-    const candidate = value;
-    return (candidate.schemaVersion === 2 &&
-        typeof candidate.origin === "string" &&
-        !!candidate.origin &&
-        typeof candidate.apiOrigin === "string" &&
-        !!candidate.apiOrigin &&
-        typeof candidate.accessToken === "string" &&
-        !!candidate.accessToken &&
-        typeof candidate.expiresAt === "string" &&
-        !!candidate.expiresAt &&
-        (candidate.refreshToken === undefined ||
-            (typeof candidate.refreshToken === "string" && !!candidate.refreshToken)));
-}
-/** Whether the access token is past its expiry, counting the skew. */
-export function isConsoleCredentialExpired(credential, now) {
-    const expiresAt = Date.parse(credential.expiresAt);
-    if (Number.isNaN(expiresAt)) {
-        // An expiry this build cannot read is not a session it can vouch for.
-        return true;
-    }
-    return expiresAt - EXPIRY_SKEW_MS <= now.getTime();
-}
-/**
- * Replace the stored credential.
- *
- * Only the refresh path calls this, and only while holding the session lock. Written through a
- * temporary file and a rename, so a reader never sees half a token: a plain write truncates in
- * place, and a crash inside it leaves unparseable JSON where a rotated refresh token used to be.
- */
-export function writeConsoleCredential(credential, location = {}) {
-    const directory = consoleConfigDir(location.home);
-    const destination = consoleCredentialPath(location.home);
-    mkdirSync(directory, { recursive: true, mode: 0o700 });
-    const temporary = `${destination}.${process.pid}.tmp`;
-    try {
-        writeFileSync(temporary, `${JSON.stringify(credential, null, 2)}\n`, { mode: 0o600 });
-        renameSync(temporary, destination);
-    }
-    catch (error) {
-        try {
-            unlinkSync(temporary);
-        }
-        catch {
-            // The write may have failed before the temporary file existed at all.
-        }
-        throw error;
-    }
-}
-/**
- * Remove the stored credential.
- *
- * The one caller is a refresh that Console refused, under the lock, against a refresh token that
- * is still the stored one. Nothing else may reach it: a credential removed on a guess sends a
- * person to the browser to log in over a session that was fine.
- */
-export function discardConsoleCredential(location = {}) {
-    const path = consoleCredentialPath(location.home);
-    if (!existsSync(path)) {
-        return;
-    }
-    try {
-        unlinkSync(path);
-    }
-    catch {
-        // Another participant removed it first, or it is not ours to remove. Either way the session is
-        // gone as far as this process is concerned.
-    }
-}
-//# sourceMappingURL=console-credential.js.map

package/dist/cli/lib/console-credential.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"console-credential.js","sourceRoot":"","sources":["../../../src/cli/lib/console-credential.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAuB,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AA4BrC;;;GAGG;AACH,MAAM,cAAc,GAAG,MAAM,CAAC;AAE9B,8FAA8F;AAC9F,MAAM,UAAU,gBAAgB,CAAC,OAAe,OAAO,EAAE;IACvD,OAAO,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe,OAAO,EAAE;IAC5D,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,0BAA0B,CAAC,CAAC;AAClE,CAAC;AAQD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,qBAAqB,CACnC,WAAsC,EAAE;IAExC,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;IAC1C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,8FAA8F;IAC9F,0FAA0F;IAC1F,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;QACxF,4EAA4E;QAC5E,MAAM,CAAC,KAAK,CACV,EAAE,eAAe,EAAE,KAAK,CAAC,SAAS,EAAE,iBAAiB,EAAE,SAAS,EAAE,EAClE,mDAAmD,CACpD,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,eAAe,CAAC,QAAmC;IAC1D,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACzE,OAAO,oBAAoB,EAAE,CAAC;IAChC,CAAC;IACD,IAAI,CAAC;QACH,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,2FAA2F;QAC3F,2FAA2F;QAC3F,0DAA0D;QAC1D,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,qEAAqE,CAAC,CAAC;QAC/F,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,gGAAgG;AAChG,yFAAyF;AACzF,SAAS,YAAY,CAAC,MAAc,EAAE,QAAgB;IACpD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAC/C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,KAAyC,CAAC;IAC5D,OAAO,CACL,SAAS,CAAC,aAAa,KAAK,CAAC;QAC7B,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ;QACpC,CAAC,CAAC,SAAS,CAAC,MAAM;QAClB,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ;QACvC,CAAC,CAAC,SAAS,CAAC,SAAS;QACrB,OAAO,SAAS,CAAC,WAAW,KAAK,QAAQ;QACzC,CAAC,CAAC,SAAS,CAAC,WAAW;QACvB,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ;QACvC,CAAC,CAAC,SAAS,CAAC,SAAS;QACrB,CAAC,SAAS,CAAC,YAAY,KAAK,SAAS;YACnC,CAAC,OAAO,SAAS,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAC5E,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,0BAA0B,CACxC,UAAmC,EACnC,GAAS;IAET,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5B,sEAAsE;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,SAAS,GAAG,cAAc,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;AACrD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAAmC,EACnC,WAAoD,EAAE;IAEtD,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzD,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,GAAG,WAAW,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACtD,IAAI,CAAC;QACH,aAAa,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtF,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,UAAU,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;QACxE,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,WAAoD,EAAE;IAEtD,MAAM,IAAI,GAAG,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,UAAU,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,+FAA+F;QAC/F,4CAA4C;IAC9C,CAAC;AACH,CAAC"}

package/dist/cli/lib/console-origins.d.ts

@@ -1,30 +0,0 @@
-/** The Console web app. Cloud never opens it; the origin identifies which Console issued a token. */
-export declare const DEFAULT_CONSOLE_APP_ORIGIN = "https://console.vendure.io";
-/** The Console API. Cloud calls its token endpoint to refresh a shared session. */
-export declare const DEFAULT_CONSOLE_API_ORIGIN = "https://api.vendure.io";
-export declare const STAGING_CONSOLE_API_ORIGIN = "https://staging.api.vendure.io";
-export interface ConsoleOrigins {
-    appOrigin: string;
-    apiOrigin: string;
-}
-/** The two pairs by name, so a caller or a fixture never restates one of the four literals. */
-export declare const DEFAULT_CONSOLE_ORIGINS: ConsoleOrigins;
-export declare const STAGING_CONSOLE_ORIGINS: ConsoleOrigins;
-/** Exported so a caller deciding what a loopback URL pairs with uses this same list. */
-export declare function isLoopback(hostname: string): boolean;
-/** The Console web app origin. Loopback is allowed for local development and tests. */
-export declare function consoleAppOrigin(value?: string): string;
-/** The Console API origin a token request may call. */
-export declare function consoleApiOrigin(value?: string): string;
-/**
- * Select a matching app and API pair.
- *
- * Naming one staging origin selects the other, so a developer cannot half-configure themselves
- * onto production. An explicit mixed pair is refused rather than silently corrected, because
- * neither half is more likely to be the mistake.
- */
-export declare function consoleOrigins(options: {
-    appOrigin?: string;
-    apiOrigin?: string;
-}): ConsoleOrigins;
-//# sourceMappingURL=console-origins.d.ts.map

package/dist/cli/lib/console-origins.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"console-origins.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/console-origins.ts"],"names":[],"mappings":"AAeA,qGAAqG;AACrG,eAAO,MAAM,0BAA0B,+BAA+B,CAAC;AAEvE,mFAAmF;AACnF,eAAO,MAAM,0BAA0B,2BAA2B,CAAC;AAGnE,eAAO,MAAM,0BAA0B,mCAAmC,CAAC;AAE3E,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,+FAA+F;AAC/F,eAAO,MAAM,uBAAuB,EAAE,cAGrC,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,cAGrC,CAAC;AAKF,wFAAwF;AACxF,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEpD;AA0BD,uFAAuF;AACvF,wBAAgB,gBAAgB,CAAC,KAAK,GAAE,MAAmC,GAAG,MAAM,CAEnF;AAED,uDAAuD;AACvD,wBAAgB,gBAAgB,CAAC,KAAK,GAAE,MAAmC,GAAG,MAAM,CAEnF;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,cAAc,CAmBjB"}

package/dist/cli/lib/console-origins.js

@@ -1,87 +0,0 @@
-// The Console origins this machine may talk to, and the pairing rule between them.
-//
-// A vendored fork of `test/fixtures/console-auth/upstream/origins.ts` from
-// `vendurehq/vendure-platform@0d09dfd2`, adapted for this repository's quoting and formatting and
-// carrying no Cloud-specific logic. Local to this copy, and to be kept when syncing upstream: the
-// `export` on `STAGING_CONSOLE_API_ORIGIN`, `isLoopback` and the two origin-pair constants, which
-// exist so `console-pairing.ts` and its fixtures name a Console without restating its literals. Both tools have to agree on these origins exactly: the pair is
-// recorded in the credential file, and a disagreement reads as "no credential" on one side and a
-// usable session on the other. `test/cli-console-origins.test.ts` pins the cases upstream's README
-// names.
-//
-// The checks past the host list matter as much as the list. A URL carrying a path, a query, a
-// fragment, or credentials is a URL built to be appended to, and each of those points a request
-// somewhere else while the hostname still reads correctly.
-/** The Console web app. Cloud never opens it; the origin identifies which Console issued a token. */
-export const DEFAULT_CONSOLE_APP_ORIGIN = "https://console.vendure.io";
-/** The Console API. Cloud calls its token endpoint to refresh a shared session. */
-export const DEFAULT_CONSOLE_API_ORIGIN = "https://api.vendure.io";
-const STAGING_CONSOLE_APP_ORIGIN = "https://staging.console.vendure.io";
-export const STAGING_CONSOLE_API_ORIGIN = "https://staging.api.vendure.io";
-/** The two pairs by name, so a caller or a fixture never restates one of the four literals. */
-export const DEFAULT_CONSOLE_ORIGINS = {
-    appOrigin: DEFAULT_CONSOLE_APP_ORIGIN,
-    apiOrigin: DEFAULT_CONSOLE_API_ORIGIN,
-};
-export const STAGING_CONSOLE_ORIGINS = {
-    appOrigin: STAGING_CONSOLE_APP_ORIGIN,
-    apiOrigin: STAGING_CONSOLE_API_ORIGIN,
-};
-const TRUSTED_APP_HOSTS = ["console.vendure.io", "staging.console.vendure.io"];
-const TRUSTED_API_HOSTS = ["api.vendure.io", "staging.api.vendure.io"];
-/** Exported so a caller deciding what a loopback URL pairs with uses this same list. */
-export function isLoopback(hostname) {
-    return ["localhost", "127.0.0.1", "::1"].includes(hostname) || hostname.endsWith(".localhost");
-}
-function trustedOrigin(value, trustedHosts, subject) {
-    let url;
-    try {
-        url = new URL(value);
-    }
-    catch {
-        throw new Error(`The ${subject} URL is invalid.`);
-    }
-    const trustedRemote = trustedHosts.includes(url.hostname);
-    const loopback = isLoopback(url.hostname);
-    if ((!trustedRemote && !loopback) ||
-        (trustedRemote && url.protocol !== "https:") ||
-        (loopback && !["http:", "https:"].includes(url.protocol)) ||
-        url.username ||
-        url.password ||
-        url.pathname !== "/" ||
-        url.search ||
-        url.hash) {
-        throw new Error(`The ${subject} URL is not trusted.`);
-    }
-    return url.origin;
-}
-/** The Console web app origin. Loopback is allowed for local development and tests. */
-export function consoleAppOrigin(value = DEFAULT_CONSOLE_APP_ORIGIN) {
-    return trustedOrigin(value, TRUSTED_APP_HOSTS, "Vendure Console");
-}
-/** The Console API origin a token request may call. */
-export function consoleApiOrigin(value = DEFAULT_CONSOLE_API_ORIGIN) {
-    return trustedOrigin(value, TRUSTED_API_HOSTS, "Vendure Console API");
-}
-/**
- * Select a matching app and API pair.
- *
- * Naming one staging origin selects the other, so a developer cannot half-configure themselves
- * onto production. An explicit mixed pair is refused rather than silently corrected, because
- * neither half is more likely to be the mistake.
- */
-export function consoleOrigins(options) {
-    const explicitApp = options.appOrigin === undefined ? undefined : consoleAppOrigin(options.appOrigin);
-    const apiOrigin = consoleApiOrigin(options.apiOrigin ??
-        (explicitApp === STAGING_CONSOLE_APP_ORIGIN ? STAGING_CONSOLE_API_ORIGIN : undefined));
-    const appOrigin = explicitApp ??
-        (apiOrigin === STAGING_CONSOLE_API_ORIGIN
-            ? STAGING_CONSOLE_APP_ORIGIN
-            : DEFAULT_CONSOLE_APP_ORIGIN);
-    if ((appOrigin === DEFAULT_CONSOLE_APP_ORIGIN && apiOrigin === STAGING_CONSOLE_API_ORIGIN) ||
-        (appOrigin === STAGING_CONSOLE_APP_ORIGIN && apiOrigin === DEFAULT_CONSOLE_API_ORIGIN)) {
-        throw new Error("The Vendure Console app and API origins must belong to the same environment.");
-    }
-    return { appOrigin, apiOrigin };
-}
-//# sourceMappingURL=console-origins.js.map

package/dist/cli/lib/console-origins.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"console-origins.js","sourceRoot":"","sources":["../../../src/cli/lib/console-origins.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,EAAE;AACF,2EAA2E;AAC3E,kGAAkG;AAClG,kGAAkG;AAClG,kGAAkG;AAClG,+JAA+J;AAC/J,iGAAiG;AACjG,mGAAmG;AACnG,SAAS;AACT,EAAE;AACF,8FAA8F;AAC9F,gGAAgG;AAChG,2DAA2D;AAE3D,qGAAqG;AACrG,MAAM,CAAC,MAAM,0BAA0B,GAAG,4BAA4B,CAAC;AAEvE,mFAAmF;AACnF,MAAM,CAAC,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AAEnE,MAAM,0BAA0B,GAAG,oCAAoC,CAAC;AACxE,MAAM,CAAC,MAAM,0BAA0B,GAAG,gCAAgC,CAAC;AAO3E,+FAA+F;AAC/F,MAAM,CAAC,MAAM,uBAAuB,GAAmB;IACrD,SAAS,EAAE,0BAA0B;IACrC,SAAS,EAAE,0BAA0B;CACtC,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAmB;IACrD,SAAS,EAAE,0BAA0B;IACrC,SAAS,EAAE,0BAA0B;CACtC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,oBAAoB,EAAE,4BAA4B,CAAC,CAAC;AAC/E,MAAM,iBAAiB,GAAG,CAAC,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;AAEvE,wFAAwF;AACxF,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,OAAO,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,YAAsB,EAAE,OAAe;IAC3E,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,OAAO,OAAO,kBAAkB,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,aAAa,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1C,IACE,CAAC,CAAC,aAAa,IAAI,CAAC,QAAQ,CAAC;QAC7B,CAAC,aAAa,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAC5C,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzD,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,QAAQ,KAAK,GAAG;QACpB,GAAG,CAAC,MAAM;QACV,GAAG,CAAC,IAAI,EACR,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,OAAO,OAAO,sBAAsB,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,gBAAgB,CAAC,QAAgB,0BAA0B;IACzE,OAAO,aAAa,CAAC,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;AACpE,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,gBAAgB,CAAC,QAAgB,0BAA0B;IACzE,OAAO,aAAa,CAAC,KAAK,EAAE,iBAAiB,EAAE,qBAAqB,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,OAG9B;IACC,MAAM,WAAW,GACf,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpF,MAAM,SAAS,GAAG,gBAAgB,CAChC,OAAO,CAAC,SAAS;QACf,CAAC,WAAW,KAAK,0BAA0B,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,SAAS,CAAC,CACxF,CAAC;IACF,MAAM,SAAS,GACb,WAAW;QACX,CAAC,SAAS,KAAK,0BAA0B;YACvC,CAAC,CAAC,0BAA0B;YAC5B,CAAC,CAAC,0BAA0B,CAAC,CAAC;IAClC,IACE,CAAC,SAAS,KAAK,0BAA0B,IAAI,SAAS,KAAK,0BAA0B,CAAC;QACtF,CAAC,SAAS,KAAK,0BAA0B,IAAI,SAAS,KAAK,0BAA0B,CAAC,EACtF,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAClC,CAAC"}

package/dist/cli/lib/console-session-lock.d.ts

@@ -1,39 +0,0 @@
-/**
- * How long a lock file may sit untouched before another participant may take it over.
- *
- * A holder touches its own lock while it works, so this measures a holder that has stopped rather
- * than one that is slow.
- */
-export declare const CONSOLE_SESSION_LOCK_STALE_MS = 30000;
-/**
- * How long to wait for a lock somebody else holds.
- *
- * Never shorter than the stale budget. A waiter that gave up sooner could give up while the holder
- * is dead but not yet stale, and then "I gave up waiting" would stop meaning "the holder is gone".
- */
-export declare const CONSOLE_SESSION_LOCK_WAIT_MS = 30000;
-/** The lock file, beside the credential it guards. */
-export declare function consoleSessionLockPath(home?: string): string;
-export interface ConsoleSessionLockOptions {
-    /** Overrides `os.homedir()`. Tests point this at a temporary directory. */
-    home?: string;
-    /**
-     * The budgets belong to the protocol rather than to a caller. They are open here so a test can
-     * drive the stale and give-up paths without waiting half a minute for each one. A `waitMs` below
-     * `staleMs` is raised, because the protocol does not allow the shorter of the two.
-     */
-    staleMs?: number;
-    waitMs?: number;
-    pollMs?: number;
-}
-/**
- * Run `work` while holding the Console session lock.
- *
- * Every step that spends a refresh token or rewrites the credential file goes through here,
- * including the ones in the other tool. Guarding only some of the call sites leaves the double
- * spend reachable through the rest.
- *
- * The lock is not reentrant.
- */
-export declare function withConsoleSessionLock<T>(options: ConsoleSessionLockOptions, work: () => Promise<T>): Promise<T>;
-//# sourceMappingURL=console-session-lock.d.ts.map

package/dist/cli/lib/console-session-lock.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"console-session-lock.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/console-session-lock.ts"],"names":[],"mappings":"AAkCA;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,QAAS,CAAC;AAEpD;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,QAAS,CAAC;AAInD,sDAAsD;AACtD,wBAAgB,sBAAsB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,MAAM,WAAW,yBAAyB;IACxC,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAYD;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CAAC,CAAC,EAC5C,OAAO,EAAE,yBAAyB,EAClC,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACrB,OAAO,CAAC,CAAC,CAAC,CASZ"}

package/dist/cli/lib/console-session-lock.js

@@ -1,235 +0,0 @@
-import { randomUUID } from "node:crypto";
-import { link, mkdir, open, readFile, rename, stat, unlink, utimes } from "node:fs/promises";
-import { join } from "node:path";
-import { setTimeout as sleep } from "node:timers/promises";
-import { consoleConfigDir } from "./console-credential.js";
-import { ConsoleSessionLockUnavailableError } from "./errors.js";
-import { logger } from "./logger.js";
-// The cross-process lock guarding `~/.vendure/console-credentials.json`.
-//
-// Console rotates the refresh token on use and refuses the spent one, so two processes that refresh
-// together leave one of them with nothing, and a stale pair written back over a live one ends a
-// session that was working. Two processes are ordinary here: `vendure dev` runs for hours while
-// Cloud commands run in another terminal.
-//
-// **This is a vendored fork, not a second implementation.** It is
-// `test/fixtures/console-auth/upstream/session-lock.ts` from
-// `vendurehq/vendure-platform@0d09dfd2`, adapted only in what this repository requires: double
-// quotes, this project's formatting, `ConsoleSessionLockUnavailableError` in place of a bare
-// `Error`, and a debug line on the release path. The algorithm, the constants and the reasoning are
-// upstream's. Forking rather than importing is what upstream's README asks for, because the two
-// tools ship on separate release trains, and there is no published build to depend on: nothing has
-// been released to that repository's `major` dist-tag.
-//
-// The fork is what makes the drift dangerous, so two things guard it. `cli-console-session-lock.integration.test.ts`
-// pins the values both processes must agree on against the vendored copy, and runs that copy in a
-// second process against this one over a single credential file. That proves the fork still
-// cooperates with its original. It does not prove two independent implementations agree, and
-// nothing here should be read as claiming it does.
-//
-// This is not `file-lock.ts`. That lock guards `~/.vendure-cloud/refresh.lock`, is best-effort by
-// design, and runs the guarded work anyway when it cannot be taken. Neither property is allowed
-// here: a participant that runs unlocked is a participant that is not in the protocol.
-/**
- * How long a lock file may sit untouched before another participant may take it over.
- *
- * A holder touches its own lock while it works, so this measures a holder that has stopped rather
- * than one that is slow.
- */
-export const CONSOLE_SESSION_LOCK_STALE_MS = 30_000;
-/**
- * How long to wait for a lock somebody else holds.
- *
- * Never shorter than the stale budget. A waiter that gave up sooner could give up while the holder
- * is dead but not yet stale, and then "I gave up waiting" would stop meaning "the holder is gone".
- */
-export const CONSOLE_SESSION_LOCK_WAIT_MS = 30_000;
-const CONSOLE_SESSION_LOCK_POLL_MS = 50;
-/** The lock file, beside the credential it guards. */
-export function consoleSessionLockPath(home) {
-    return join(consoleConfigDir(home), "console-credentials.lock");
-}
-/**
- * Run `work` while holding the Console session lock.
- *
- * Every step that spends a refresh token or rewrites the credential file goes through here,
- * including the ones in the other tool. Guarding only some of the call sites leaves the double
- * spend reachable through the rest.
- *
- * The lock is not reentrant.
- */
-export async function withConsoleSessionLock(options, work) {
-    const lock = await acquire(options);
-    const beat = heartbeat(lock, options.staleMs ?? CONSOLE_SESSION_LOCK_STALE_MS);
-    try {
-        return await work();
-    }
-    finally {
-        clearInterval(beat);
-        await release(lock);
-    }
-}
-/**
- * Say the holder is still here, by touching the lock while the work runs.
- *
- * Without it the stale budget measures how long the work takes rather than whether the holder is
- * alive, so a hold that runs long on a loaded machine is broken while it is still working and two
- * processes refresh at once. A third of the budget leaves two missed beats before anyone may act
- * on the silence.
- */
-function heartbeat(lock, staleMs) {
-    const beat = setInterval(() => {
-        void (async () => {
-            // Only ours. A lock broken and taken over while this holder was working belongs to
-            // somebody else, and beating on their behalf would keep their lock alive after they let
-            // it go.
-            const current = await readLockFile(lock.path);
-            if (current?.token !== lock.token)
-                return;
-            const when = new Date();
-            await utimes(lock.path, when, when);
-        })().catch(() => undefined);
-    }, Math.max(1, Math.round(staleMs / 3)));
-    // A lock is never a reason to keep the process running.
-    beat.unref();
-    return beat;
-}
-async function acquire(options) {
-    const path = consoleSessionLockPath(options.home);
-    const staleMs = options.staleMs ?? CONSOLE_SESSION_LOCK_STALE_MS;
-    const waitMs = Math.max(options.waitMs ?? CONSOLE_SESSION_LOCK_WAIT_MS, staleMs);
-    const pollMs = options.pollMs ?? CONSOLE_SESSION_LOCK_POLL_MS;
-    const token = randomUUID();
-    const deadline = Date.now() + waitMs;
-    await mkdir(consoleConfigDir(options.home), { recursive: true, mode: 0o700 });
-    const takeOver = async () => {
-        if (!(await breakIfStale(path, staleMs)))
-            return undefined;
-        return (await create(path, token)) ? { path, token } : undefined;
-    };
-    for (;;) {
-        if (await create(path, token))
-            return { path, token };
-        const taken = await takeOver();
-        if (taken)
-            return taken;
-        // Checked on every pass, including one that broke a lock. A state where `create` reports
-        // `EEXIST` while the lock itself cannot be read, such as a dangling symlink on the path, is
-        // otherwise a loop with no exit.
-        if (Date.now() >= deadline) {
-            // The lock can cross the stale boundary while the checks above are reading it, so it gets
-            // one last look. Without it a waiter that spent its whole budget can still walk away from a
-            // dead holder.
-            const last = await takeOver();
-            if (last)
-                return last;
-            throw new ConsoleSessionLockUnavailableError();
-        }
-        await sleep(pollMs);
-    }
-}
-/**
- * Create the lock file, or report that somebody else holds it.
- *
- * `wx` is the whole mechanism: the create either wins or fails with `EEXIST`, with no window in
- * between. The body records who took it, which is what makes releasing and breaking safe, and
- * gives a person looking at a stuck lock a pid to check.
- */
-async function create(path, token) {
-    let handle;
-    try {
-        handle = await open(path, "wx", 0o600);
-    }
-    catch (error) {
-        const { code } = error;
-        if (code === "EEXIST")
-            return false;
-        throw new ConsoleSessionLockUnavailableError({ cause: error });
-    }
-    try {
-        const body = { token, pid: process.pid, acquiredAt: new Date().toISOString() };
-        await handle.writeFile(`${JSON.stringify(body)}\n`, "utf8");
-        return true;
-    }
-    catch (error) {
-        await unlink(path).catch(() => undefined);
-        throw new ConsoleSessionLockUnavailableError({ cause: error });
-    }
-    finally {
-        await handle.close().catch(() => undefined);
-    }
-}
-/**
- * Take a lock whose holder has stopped touching it out of the way. Reports whether the path is
- * worth another create attempt.
- */
-async function breakIfStale(path, staleMs) {
-    const before = await readLockFile(path);
-    if (!before)
-        return true;
-    // `Date.now()` counts whole milliseconds while `mtimeMs` carries a fraction, so an untouched
-    // lock written in the same millisecond a waiter started reads as younger than that waiter's own
-    // clock says it is. Floor it: both sides then measure in the same units, and a waiter that has
-    // spent its whole budget can always break what it spent the budget on.
-    if (Date.now() - Math.floor(before.mtimeMs) < staleMs)
-        return false;
-    // Move the lock aside rather than unlink it. `rename` is one operation, so one waiter moves this
-    // file and the rest get `ENOENT` and go back to creating. Unlinking by path would let a second
-    // waiter, still holding its reading of a file the first waiter has already removed, delete the
-    // fresh lock the first waiter created in its place and leave two holders.
-    const aside = `${path}.${randomUUID()}`;
-    try {
-        await rename(path, aside);
-    }
-    catch {
-        return true;
-    }
-    const moved = await readLockFile(aside);
-    if (moved && moved.token !== before.token) {
-        // Somebody took the lock between the read above and the rename, so what moved is their live
-        // lock and not the dead one. Put it back. `link` fails rather than overwrite, and a failure
-        // means a third lock is already there, at which point the holder whose lock was moved has lost
-        // it whatever happens next.
-        await link(aside, path).catch(() => undefined);
-    }
-    await unlink(aside).catch(() => undefined);
-    return true;
-}
-/**
- * Give up the lock.
- *
- * A lock carrying somebody else's token is not ours to remove: ours was already broken as stale
- * and the file belongs to whoever took it. Releasing it would let a third process in while the
- * second one writes.
- */
-async function release(lock) {
-    const current = await readLockFile(lock.path);
-    if (current?.token !== lock.token) {
-        logger.debug("Console session lock was taken over while held; leaving it alone");
-        return;
-    }
-    await unlink(lock.path).catch(() => undefined);
-}
-async function readLockFile(path) {
-    try {
-        const info = await stat(path);
-        let token;
-        try {
-            const value = JSON.parse(await readFile(path, "utf8"));
-            if (value && typeof value === "object" && "token" in value) {
-                const { token: candidate } = value;
-                if (typeof candidate === "string")
-                    token = candidate;
-            }
-        }
-        catch {
-            // A lock written by something older, or caught mid-write. It still holds the lock; it just
-            // cannot prove ownership, so it can only ever be removed by the stale path.
-        }
-        return { token, mtimeMs: info.mtimeMs };
-    }
-    catch {
-        return undefined;
-    }
-}
-//# sourceMappingURL=console-session-lock.js.map

package/dist/cli/lib/console-session-lock.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"console-session-lock.js","sourceRoot":"","sources":["../../../src/cli/lib/console-session-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC7F,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,kCAAkC,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,yEAAyE;AACzE,EAAE;AACF,oGAAoG;AACpG,gGAAgG;AAChG,gGAAgG;AAChG,0CAA0C;AAC1C,EAAE;AACF,kEAAkE;AAClE,6DAA6D;AAC7D,+FAA+F;AAC/F,6FAA6F;AAC7F,oGAAoG;AACpG,gGAAgG;AAChG,mGAAmG;AACnG,uDAAuD;AACvD,EAAE;AACF,qHAAqH;AACrH,kGAAkG;AAClG,4FAA4F;AAC5F,6FAA6F;AAC7F,mDAAmD;AACnD,EAAE;AACF,kGAAkG;AAClG,gGAAgG;AAChG,uFAAuF;AAEvF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAEnD,MAAM,4BAA4B,GAAG,EAAE,CAAC;AAExC,sDAAsD;AACtD,MAAM,UAAU,sBAAsB,CAAC,IAAa;IAClD,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,0BAA0B,CAAC,CAAC;AAClE,CAAC;AAyBD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAkC,EAClC,IAAsB;IAEtB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,IAAI,6BAA6B,CAAC,CAAC;IAC/E,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,SAAS,CAAC,IAAc,EAAE,OAAe;IAChD,MAAM,IAAI,GAAG,WAAW,CACtB,GAAG,EAAE;QACH,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,mFAAmF;YACnF,wFAAwF;YACxF,SAAS;YACT,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,OAAO,EAAE,KAAK,KAAK,IAAI,CAAC,KAAK;gBAAE,OAAO;YAC1C,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACtC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CACrC,CAAC;IACF,wDAAwD;IACxD,IAAI,CAAC,KAAK,EAAE,CAAC;IACb,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,OAAkC;IACvD,MAAM,IAAI,GAAG,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,6BAA6B,CAAC;IACjE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,4BAA4B,EAAE,OAAO,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,4BAA4B,CAAC;IAC9D,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IACrC,MAAM,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAE9E,MAAM,QAAQ,GAAG,KAAK,IAAmC,EAAE;QACzD,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QAC3D,OAAO,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,CAAC,CAAC;IAEF,SAAS,CAAC;QACR,IAAI,MAAM,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC/B,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,yFAAyF;QACzF,4FAA4F;QAC5F,iCAAiC;QACjC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC3B,0FAA0F;YAC1F,4FAA4F;YAC5F,eAAe;YACf,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;YAC9B,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAC;YACtB,MAAM,IAAI,kCAAkC,EAAE,CAAC;QACjD,CAAC;QACD,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,MAAM,CAAC,IAAY,EAAE,KAAa;IAC/C,IAAI,MAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,IAAI,EAAE,GAAG,KAA8B,CAAC;QAChD,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACpC,MAAM,IAAI,kCAAkC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QAC/E,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,IAAI,kCAAkC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACjE,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,OAAe;IACvD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,6FAA6F;IAC7F,gGAAgG;IAChG,+FAA+F;IAC/F,uEAAuE;IACvE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO;QAAE,OAAO,KAAK,CAAC;IAEpE,iGAAiG;IACjG,+FAA+F;IAC/F,+FAA+F;IAC/F,0EAA0E;IAC1E,MAAM,KAAK,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,EAAE,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;QAC1C,4FAA4F;QAC5F,4FAA4F;QAC5F,+FAA+F;QAC/F,4BAA4B;QAC5B,MAAM,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,OAAO,CAAC,IAAc;IACnC,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,OAAO,EAAE,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACjF,OAAO;IACT,CAAC;IACD,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,KAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YAChE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;gBAC3D,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,KAA2B,CAAC;gBACzD,IAAI,OAAO,SAAS,KAAK,QAAQ;oBAAE,KAAK,GAAG,SAAS,CAAC;YACvD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,2FAA2F;YAC3F,4EAA4E;QAC9E,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/cli/lib/console-session.d.ts

@@ -1,47 +0,0 @@
-import { type ConsoleCredentialLocation } from "./console-credential.js";
-export interface ConsoleSessionOptions extends ConsoleCredentialLocation {
-    fetch?: typeof globalThis.fetch;
-    now?: () => Date;
-}
-/**
- * Whether this machine may reuse the shared Vendure Console CLI Session for Cloud commands.
- *
- * Off unless the variable is set, and the control plane refuses a Console session unless it has
- * been configured to reach Console, so both ends of CLO-641 default to the behaviour that shipped
- * before it. The switch is one a person sets rather than something inferred from the presence of a
- * file another tool wrote: finding a credential is not the same as being told to use it, and a
- * machine that turned this on by itself would change which account a command runs under.
- *
- * It lives here rather than in `config.ts` because a machine with the feature off must not even
- * read the Console credential, and keeping the switch beside the reader is what makes that
- * obvious at the one call site that checks it.
- */
-export declare function isSharedConsoleSessionEnabled(): boolean;
-export interface ResolvedConsoleSession {
-    accessToken: string;
-    /** Whether the access token is past its expiry, counting the skew. */
-    expired: boolean;
-    /** Whether an expired session can be renewed without a browser. */
-    refreshable: boolean;
-}
-/**
- * The stored Console session, or `undefined` when this machine has none to reuse.
- *
- * Synchronous, because it sits on the credential-resolution path that every command runs through
- * before it does any work. An expired session is still returned: it may carry a refresh token, and
- * the renewal happens on the first 401 through the same retry the stored Cloud login uses.
- */
-export declare function resolveConsoleSession(options?: ConsoleCredentialLocation & {
-    now?: () => Date;
-}): ResolvedConsoleSession | undefined;
-/**
- * Renew the shared session and return the fresh access token.
- *
- * Deduplicated twice, for the same reason the stored Cloud login is. This promise collapses the
- * concurrent calls of one process, and the session lock underneath it serializes the token request
- * against every other process on the machine, Cloud and Platform alike. Neither is enough alone:
- * this one knows nothing about the other tool, and the lock cannot see a second client inside this
- * process that is already waiting on it.
- */
-export declare function refreshConsoleSession(failedAccessToken: string | undefined, options?: ConsoleSessionOptions): Promise<string>;
-//# sourceMappingURL=console-session.d.ts.map

package/dist/cli/lib/console-session.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"console-session.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/console-session.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,yBAAyB,EAK/B,MAAM,yBAAyB,CAAC;AAgCjC,MAAM,WAAW,qBAAsB,SAAQ,yBAAyB;IACtE,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAChC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,6BAA6B,IAAI,OAAO,CAGvD;AAED,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,OAAO,EAAE,OAAO,CAAC;IACjB,mEAAmE;IACnE,WAAW,EAAE,OAAO,CAAC;CACtB;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,yBAAyB,GAAG;IAAE,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;CAAO,GAC7D,sBAAsB,GAAG,SAAS,CAUpC;AAID;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,iBAAiB,EAAE,MAAM,GAAG,SAAS,EACrC,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,MAAM,CAAC,CAUjB"}