@voltro/cli 0.35.0 → 0.37.0

package/dist/{codemodRunner-BnFq3Fgu.js → codemodRunner-cyqu5oxr.js}

@@ -5066,7 +5066,37 @@ var x = (e, t, n) => {
 		"",
 		"The read is issued at most once per key per process, off the commit path."
 	].join("\n")
-}), Gr = (e) => /RunStepStatus/.test(e) || /['"]succeeded['"]/.test(e) && /['"]waiting['"]/.test(e) && /RunStep|runStep|flow/i.test(e), q = [
+}), Gr = (e) => /RunStepStatus/.test(e) || /['"]succeeded['"]/.test(e) && /['"]waiting['"]/.test(e) && /RunStep|runStep|flow/i.test(e), Kr = C({
+	version: "0.35.0",
+	id: "0.35.0/04_flow-run-step-skipped",
+	title: "A flow run step can now be 'skipped' — handle it where you render a run timeline",
+	kind: "manual",
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Gr(e.getFullText())),
+	note: (/* @__PURE__ */ "A FLOW RUN STEP CAN NOW BE 'skipped'.((`when:` on a flow step gates it on a prior value, and a step whose condition(is false is SKIPPED rather than run. That is a sixth member of(`RunStepStatus`, so an exhaustive switch over it no longer compiles, and a(lookup keyed by status now has a hole.((WHAT TO DO:((1) FIND IT. Anywhere you render or branch on a run step status — a timeline(   component, a status badge map, a progress calculation.((2) DECIDE WHAT A SKIPPED STEP LOOKS LIKE. It is NOT a failure and NOT a(   success: it did not run, on purpose, and it produced no output. The(   step carries `skipReason` — the rendered condition, e.g.(   `{{mode}} equals \"full\"` — so the timeline can say WHY.((3) DO NOT DEFAULT IT TO INVISIBLE. Dropping the row compiles and reads fine(   in review, and it reproduces exactly the problem `skipReason` exists to(   prevent: a step that vanished is indistinguishable from a step nobody(   declared, which is the first thing a user reports as a bug.((A PROGRESS COUNT probably needs a second look too: `succeeded / total` now(under-reports a completed run that skipped a step. Counting(`succeeded + skipped` against the total is usually what was meant.((If your app does not render a flow timeline, there is nothing to do — this(note fires on any file that names the status type or its literals.".split("(")).join("\n")
+}), qr = C({
+	version: "0.35.0",
+	id: "0.35.0/05_declared-schema-drops-runtime-flags",
+	title: "The declared schema no longer reads `CDC` / `VOLTRO_UNDO` / `VOLTRO_TRACING_PERSIST`",
+	kind: "manual",
+	appliesTo: () => !0,
+	note: (/* @__PURE__ */ "The set of framework tables your app DECLARES is hashed into the schema(fingerprint. A pre-deploy `voltro db apply` records that hash; every serving(container recomputes it and refuses to boot if it differs. Until this release(three RUNTIME flags fed into that set:((    CDC=0                       removed `_voltro_cdc_offsets`(    VOLTRO_UNDO=on              added   `_voltro_undo_log`(    VOLTRO_TRACING_PERSIST=all  added   `_voltro_traces`((All three read as pure runtime knobs, so they tend to live on the PODS and(not on the pre-upgrade migrate Job — which is a green migrate followed by(every pod in CrashLoopBackOff. This was reported against a Helm deployment(where `CDC: \"0\"` was in all three overlays' pod blocks and none of their(jobs; it had been latent for months and would have fired on the next deploy.((WHAT YOU MUST DO — only if you set one of these to turn a table ON in(production:((  * `VOLTRO_UNDO=on` in production  → add to app.config.ts:(        export default { schema: { undo: true }, … }(  * `VOLTRO_TRACING_PERSIST` keeping trace history in production → add:(        export default { schema: { traces: true }, … }((    Without the declaration, `voltro serve` now REFUSES to boot and names the(    field. That refusal is the point: before, the same configuration either(    wrote to a table nobody created or produced a fingerprint the migrate job(    could not reproduce.((    Turning capture OFF still needs no declaration and never will — a declared(    table nobody writes to is harmless. Only turning it ON is a schema claim.((WHAT HAPPENS WITHOUT ANY ACTION:((  * On mariadb or mssql you will see ONE additive `create-table` in your next(    plan: `_voltro_cdc_offsets` is now declared by the DIALECT rather than by(    `CDC`, so it exists whether or not that process drives CDC. It is an(    offsets table — a handful of rows — and the alternative was leaving a(    runtime flag able to split your fleet.(  * On postgres/sqlite nothing changes: those dialects have no offsets table.((AND ONE THING WORTH DOING ANYWAY: if you are upgrading a deployment that has(a separate migrate job, diff that job's `env:` against your pods' once. The(framework can now guarantee its OWN tables do not depend on a runtime flag;(it cannot make the same guarantee for a plugin's `extendSchema.tables`, which(is app code and may read anything. A `prod-mismatch` refusal now prints which(tables this process decided and from which input, so the comparison is quick.".split("(")).join("\n")
+}), q = "session_expired", Jr = C({
+	version: "0.35.1",
+	id: "0.35.1/01_unauthorized-replaces-session-expired",
+	title: "A 401 is `code: 'unauthorized'`; the vault's own failure is `'credential_unusable'`",
+	kind: "transform",
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => e.getFullText().includes(q)),
+	transform: ({ project: e, log: t }) => {
+		let n = [];
+		for (let t of e.getSourceFiles()) {
+			if (!t.getFullText().includes(q)) continue;
+			let e = !1;
+			for (let n of t.getDescendantsOfKind(11)) n.getLiteralValue() === q && (n.setLiteralValue("unauthorized"), e = !0);
+			e && n.push(t.getFilePath());
+		}
+		n.length !== 0 && t(`rewrote '${q}' to 'unauthorized' in ${n.length} file(s).\n  A 401 now means only "the credential was refused" — expired, revoked, wrong\n  scope and MALFORMED all produce that status, and the old name asserted the\n  first one. If a rewritten branch was meant to catch a credential your\n  CONNECTION VAULT could not produce (no grant, revoked grant, failed refresh),\n  change it to 'credential_unusable' — that is the code the vault raises, and it\n  is the one where re-auth is genuinely the right action.\n  A health check that logs the user out on this code should read 'unauthorized'\n  as "ask again", not as "the session is gone".\n` + n.map((e) => `    ${e}`).join("\n"));
+	}
+}), Yr = /\(\s*\{[^}]*\.\.\./, Xr = /\bquery\??\.?\(\s*['"`]/, J = [
 	ge,
 	_e,
 	ye,
@@ -5165,23 +5195,69 @@ var x = (e, t, n) => {
 	Ir,
 	Hr,
 	Wr,
+	Kr,
+	qr,
+	Jr,
 	C({
-		version: "0.35.0",
-		id: "0.35.0/04_flow-run-step-skipped",
-		title: "A flow run step can now be 'skipped' — handle it where you render a run timeline",
+		version: "0.37.0",
+		id: "0.37.0/01_procedure-input-rejects-undeclared-fields",
+		title: "a procedure input rejects a field it does not declare (it used to drop it)",
 		kind: "manual",
-		appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Gr(e.getFullText())),
-		note: (/* @__PURE__ */ "A FLOW RUN STEP CAN NOW BE 'skipped'.((`when:` on a flow step gates it on a prior value, and a step whose condition(is false is SKIPPED rather than run. That is a sixth member of(`RunStepStatus`, so an exhaustive switch over it no longer compiles, and a(lookup keyed by status now has a hole.((WHAT TO DO:((1) FIND IT. Anywhere you render or branch on a run step status — a timeline(   component, a status badge map, a progress calculation.((2) DECIDE WHAT A SKIPPED STEP LOOKS LIKE. It is NOT a failure and NOT a(   success: it did not run, on purpose, and it produced no output. The(   step carries `skipReason` — the rendered condition, e.g.(   `{{mode}} equals \"full\"` — so the timeline can say WHY.((3) DO NOT DEFAULT IT TO INVISIBLE. Dropping the row compiles and reads fine(   in review, and it reproduces exactly the problem `skipReason` exists to(   prevent: a step that vanished is indistinguishable from a step nobody(   declared, which is the first thing a user reports as a bug.((A PROGRESS COUNT probably needs a second look too: `succeeded / total` now(under-reports a completed run that skipped a step. Counting(`succeeded + skipped` against the total is usually what was meant.((If your app does not render a flow timeline, there is nothing to do — this(note fires on any file that names the status type or its literals.".split("(")).join("\n")
-	}),
-	C({
-		version: "0.35.0",
-		id: "0.35.0/05_declared-schema-drops-runtime-flags",
-		title: "The declared schema no longer reads `CDC` / `VOLTRO_UNDO` / `VOLTRO_TRACING_PERSIST`",
-		kind: "manual",
-		appliesTo: () => !0,
-		note: (/* @__PURE__ */ "The set of framework tables your app DECLARES is hashed into the schema(fingerprint. A pre-deploy `voltro db apply` records that hash; every serving(container recomputes it and refuses to boot if it differs. Until this release(three RUNTIME flags fed into that set:((    CDC=0                       removed `_voltro_cdc_offsets`(    VOLTRO_UNDO=on              added   `_voltro_undo_log`(    VOLTRO_TRACING_PERSIST=all  added   `_voltro_traces`((All three read as pure runtime knobs, so they tend to live on the PODS and(not on the pre-upgrade migrate Job — which is a green migrate followed by(every pod in CrashLoopBackOff. This was reported against a Helm deployment(where `CDC: \"0\"` was in all three overlays' pod blocks and none of their(jobs; it had been latent for months and would have fired on the next deploy.((WHAT YOU MUST DO — only if you set one of these to turn a table ON in(production:((  * `VOLTRO_UNDO=on` in production  → add to app.config.ts:(        export default { schema: { undo: true }, … }(  * `VOLTRO_TRACING_PERSIST` keeping trace history in production → add:(        export default { schema: { traces: true }, … }((    Without the declaration, `voltro serve` now REFUSES to boot and names the(    field. That refusal is the point: before, the same configuration either(    wrote to a table nobody created or produced a fingerprint the migrate job(    could not reproduce.((    Turning capture OFF still needs no declaration and never will — a declared(    table nobody writes to is harmless. Only turning it ON is a schema claim.((WHAT HAPPENS WITHOUT ANY ACTION:((  * On mariadb or mssql you will see ONE additive `create-table` in your next(    plan: `_voltro_cdc_offsets` is now declared by the DIALECT rather than by(    `CDC`, so it exists whether or not that process drives CDC. It is an(    offsets table — a handful of rows — and the alternative was leaving a(    runtime flag able to split your fleet.(  * On postgres/sqlite nothing changes: those dialects have no offsets table.((AND ONE THING WORTH DOING ANYWAY: if you are upgrading a deployment that has(a separate migrate job, diff that job's `env:` against your pods' once. The(framework can now guarantee its OWN tables do not depend on a runtime flag;(it cannot make the same guarantee for a plugin's `extendSchema.tables`, which(is app code and may read anything. A `prod-mismatch` refusal now prints which(tables this process decided and from which input, so the comparison is quick.".split("(")).join("\n")
+		appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
+			let t = e.getFullText();
+			return Yr.test(t) || Xr.test(t) || w("query").test(t);
+		}),
+		note: [
+			"A procedure call whose input carries a field the schema does not declare",
+			"now fails with a ParseError naming the field. Before this release the",
+			"field was DISCARDED and the call ran with what was left.",
+			"",
+			"The measurement that caused it — a consumer's root layout:",
+			"",
+			"    query?.('userSettings.list', { employeeId })",
+			"",
+			"That procedure declares `userId` / `userIdIn`. The payload decoded to `{}`,",
+			"which for a LIST query is not a narrower filter — it is NO filter. An admin",
+			"was served a different user's settings row, and nothing logged anything.",
+			"",
+			"WHAT TO DO",
+			"",
+			"1. Run your test suite and your app against a dev build. A wrong field now",
+			"   surfaces as a ParseError that NAMES the key and lists the accepted ones,",
+			"   so each one is a one-line read rather than an investigation.",
+			"",
+			"2. Look at every SPREAD into a procedure input:",
+			"",
+			"       await api.orders.list({ ...filters, limit })",
+			"",
+			"   This is the construct the change is aimed at. The keys come from a value,",
+			"   so nobody reading the call site can see what is being sent — which is",
+			"   exactly the condition under which a stray key survived unnoticed.",
+			"",
+			"3. If a spread legitimately carries more than the procedure declares, narrow",
+			"   it at the call site (`{ status: filters.status, limit }`) rather than",
+			"   widening the input schema. Widening restores the silent drop under a",
+			"   different name: the field is accepted and still does nothing.",
+			"",
+			"WHAT DOES NOT CHANGE",
+			"",
+			"  • A DECLARED field, including every optional one, decodes exactly as",
+			"    before. An empty input to a procedure that declares none is still fine.",
+			"  • Nested objects and union members follow the same rule — that is the",
+			"    point, since a filter object one level down is the commoner spelling.",
+			"  • A non-object input (a scalar, a void input) is unaffected; there is no",
+			"    excess property for it to have.",
+			"",
+			"WHY IT IS NOT A WARNING",
+			"",
+			"The decoder cannot tell a projection field from a FILTER field. Dropping an",
+			"unknown `include` costs a caller some data; dropping an unknown `tenantId`",
+			"hands them somebody else's. Since nothing at decode time distinguishes the",
+			"two, the only safe direction is to refuse — and a warning would have to be",
+			"read by someone, in a log, after the wrong rows were already served."
+		].join("\n")
 	})
-], J = /* @__PURE__ */ new Set([
+], Y = /* @__PURE__ */ new Set([
 	"node_modules",
 	".git",
 	"dist",
@@ -5193,12 +5269,12 @@ var x = (e, t, n) => {
 	".turbo",
 	".cache",
 	".output"
-]), Kr = () => [...[...J].map((e) => `**/${e}/**`), "**/.voltro-*/**"], Y = /(?:from|import)\s*\(?\s*['"]([^'"]+)['"]|require\s*\(\s*['"]([^'"]+)['"]\s*\)/g, X = /\.(?:tsx?|jsx?|mjs|cjs)$/, qr = (e) => m(e).replace(X, ""), Jr = (e) => {
+]), Zr = () => [...[...Y].map((e) => `**/${e}/**`), "**/.voltro-*/**"], X = /(?:from|import)\s*\(?\s*['"]([^'"]+)['"]|require\s*\(\s*['"]([^'"]+)['"]\s*\)/g, Z = /\.(?:tsx?|jsx?|mjs|cjs)$/, Qr = (e) => m(e).replace(Z, ""), $r = (e) => {
 	let t = e.split("/").filter((e) => e.length > 0).pop();
 	if (t === void 0 || t === "." || t === "..") return;
-	let n = t.replace(X, "");
+	let n = t.replace(Z, "");
 	return n.length > 0 ? n : void 0;
-}, Yr = (e) => {
+}, ei = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		let e;
@@ -5207,57 +5283,57 @@ var x = (e, t, n) => {
 		} catch {
 			continue;
 		}
-		Y.lastIndex = 0;
-		for (let r = Y.exec(e); r !== null; r = Y.exec(e)) {
-			let e = Jr(r[1] ?? r[2] ?? "");
+		X.lastIndex = 0;
+		for (let r = X.exec(e); r !== null; r = X.exec(e)) {
+			let e = $r(r[1] ?? r[2] ?? "");
 			if (e === void 0) continue;
 			let i = t.get(e);
 			i === void 0 ? t.set(e, /* @__PURE__ */ new Set([n])) : i.add(n);
 		}
 	}
 	return t;
-}, Xr = (e, t) => {
+}, ti = (e, t) => {
 	let n = new Set(e);
-	for (let r of e) for (let e of [qr(r), m(h(r))]) {
+	for (let r of e) for (let e of [Qr(r), m(h(r))]) {
 		let r = t.get(e);
 		if (r !== void 0) for (let e of r) n.add(e);
 	}
 	return n;
-}, Zr = [
+}, ni = [
 	"**/*.ts",
 	"**/*.tsx",
 	"!**/node_modules/**",
 	"!**/dist/**",
 	"!**/.framework/**",
 	"!**/*.d.ts"
-], Z = (e, t, n = ei) => {
+], Q = (e, t, n = ai) => {
 	let r = /* @__PURE__ */ new Set();
-	for (let e of t) for (let t of e.scope ?? Zr) r.add(t);
+	for (let e of t) for (let t of e.scope ?? ni) r.add(t);
 	let i = n(e);
 	if (i !== void 0) {
-		let t = [...r].filter((e) => !e.startsWith("!")).map((e) => $r(e)), n = [...r].filter((e) => e.startsWith("!")).map((e) => $r(e.slice(1))), a = [...J], o = [];
+		let t = [...r].filter((e) => !e.startsWith("!")).map((e) => ii(e)), n = [...r].filter((e) => e.startsWith("!")).map((e) => ii(e.slice(1))), a = [...Y], o = [];
 		for (let r of i) {
 			if (a.some((e) => r === e || r.startsWith(`${e}/`) || r.includes(`/${e}/`)) || !t.some((e) => e(r)) || n.some((e) => e(r))) continue;
 			let i = g(e, r);
 			v(i) && o.push(i);
 		}
-		return Qr(o.length, e), o;
+		return ri(o.length, e), o;
 	}
 	let a = oe([...r], {
 		cwd: e,
 		absolute: !0,
 		expandDirectories: !1,
 		followSymbolicLinks: !1,
-		ignore: [...Kr()]
+		ignore: [...Zr()]
 	});
-	return Qr(a.length, e), a;
-}, Qr = (e, t) => {
-	let n = ti();
+	return ri(a.length, e), a;
+}, ri = (e, t) => {
+	let n = oi();
 	if (!(e <= n)) throw Error(`voltro update: the codemod scan matched ${e} files under ${t}, past the ${n} ceiling.\n  Every matched file is parsed into one ts-morph project, so the heap needed grows with\n  this number — past the ceiling it runs out of memory, and V8 aborts without naming a\n  limit, which is why this stops here instead. Three ways out, in order:\n    • put non-source directories in .gitignore (inside a git repo the scan then never\n      sees them at all — a build cache, a data dump, a virtualenv),\n    • run \`voltro update\` from the app directory rather than the workspace root, or\n    • take one codemod at a time: \`voltro update --dry-run\` lists the ids, then\n      \`voltro update --codemods-only --only <id>\` runs a single one.\n  If every one of those files really is source this pass must rewrite, raise the ceiling\n  with VOLTRO_CODEMOD_MAX_FILES and give node room: NODE_OPTIONS=--max-old-space-size=8192.`);
-}, $r = (e) => {
+}, ii = (e) => {
 	let t = e.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*\*\//g, "\0").replace(/\*\*/g, ".*").replace(/\*/g, "[^/]*").replace(/\u0000/g, "(?:.*/)?").replace(/\\\{([^}]*)\\\}/g, (e, t) => `(?:${t.split(",").join("|")})`);
 	return (e) => RegExp(`^${t}$`).test(e);
-}, ei = (e) => {
+}, ai = (e) => {
 	try {
 		let t = re("git", [
 			"ls-files",
@@ -5278,17 +5354,17 @@ var x = (e, t, n) => {
 	} catch {
 		return;
 	}
-}, ti = () => {
+}, oi = () => {
 	let e = Number(process.env.VOLTRO_CODEMOD_MAX_FILES);
 	return Number.isInteger(e) && e > 0 ? e : 2e4;
-}, Q = (e, t) => {
+}, $ = (e, t) => {
 	let n = e.split(".").map(Number), r = t.split(".").map(Number);
 	for (let e = 0; e < 3; e++) {
 		let t = (n[e] ?? 0) - (r[e] ?? 0);
 		if (t !== 0) return t;
 	}
 	return 0;
-}, ni = (e, t, n = q) => n.filter((n) => Q(e, n.version) < 0 && Q(n.version, t) <= 0).slice().sort(he), $ = (e, t, n = () => {}) => {
+}, si = (e, t, n = J) => n.filter((n) => $(e, n.version) < 0 && $(n.version, t) <= 0).slice().sort(he), ci = (e, t, n = () => {}) => {
 	let r = [], i = [], a = [];
 	for (let o of t) {
 		if (!(!o.appliesTo || o.appliesTo({ project: e }))) {
@@ -5334,8 +5410,8 @@ var x = (e, t, n) => {
 		manual: i,
 		skipped: a
 	};
-}, ri = async (e) => {
-	let t = e.log ?? (() => {}), n = ni(e.from, e.to, e.codemods ?? q), r = e.only === void 0 || e.only.length === 0 ? n : (() => {
+}, li = async (e) => {
+	let t = e.log ?? (() => {}), n = si(e.from, e.to, e.codemods ?? J), r = e.only === void 0 || e.only.length === 0 ? n : (() => {
 		let t = n.filter((t) => e.only.includes(t.id)), r = e.only.filter((e) => !n.some((t) => t.id === e));
 		if (r.length > 0) throw Error(`voltro update --only: no codemod in ${e.from} → ${e.to} has id ${r.map((e) => `"${e}"`).join(", ")}.\n  Available for this jump:\n${n.map((e) => `    ${e.id}`).join("\n")}`);
 		return t;
@@ -5354,15 +5430,15 @@ var x = (e, t, n) => {
 			baseUrl: i.baseUrl,
 			paths: i.paths
 		} }
-	}), o, s = Z(e.root, r), c = r.filter((e) => e.needsImporters === !0 && e.scope !== void 0), l = [], u = [], d = [], p = c.length > 0 ? Yr(Z(e.root, [{
+	}), o, s = Q(e.root, r), c = r.filter((e) => e.needsImporters === !0 && e.scope !== void 0), l = [], u = [], d = [], p = c.length > 0 ? ei(Q(e.root, [{
 		...c[0],
-		scope: Zr
+		scope: ni
 	}])) : void 0;
 	for (let n of r) {
 		if (c.includes(n)) {
-			let r = a(), i = Z(e.root, [n]);
-			for (let e of Xr(i, p)) v(e) && r.addSourceFileAtPath(e);
-			let s = $(r, [n], t);
+			let r = a(), i = Q(e.root, [n]);
+			for (let e of ti(i, p)) v(e) && r.addSourceFileAtPath(e);
+			let s = ci(r, [n], t);
 			e.dryRun || await r.save(), l.push(...s.applied), u.push(...s.manual), d.push(...s.skipped), o = void 0;
 			continue;
 		}
@@ -5371,7 +5447,7 @@ var x = (e, t, n) => {
 			for (let t of s) v(t) && e.addSourceFileAtPath(t);
 			return e;
 		})();
-		let r = $(o, [n], t);
+		let r = ci(o, [n], t);
 		e.dryRun || await o.save(), l.push(...r.applied), u.push(...r.manual), d.push(...r.skipped);
 	}
 	return {
@@ -5381,4 +5457,4 @@ var x = (e, t, n) => {
 	};
 };
 //#endregion
-export { C as i, ri as n, J as r, Q as t };
+export { C as i, li as n, Y as r, $ as t };