everything-dev 1.51.3 → 1.51.6

package/dist/infra/planner.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"planner.mjs","names":[],"sources":["../../src/infra/planner.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { resolve } from \"node:path\";\nimport { Effect } from \"effect\";\nimport { PortAllocator } from \"../app\";\nimport {\n  buildDatabaseConfigs,\n  buildOriginMap,\n  buildRedisConfigs,\n  type DatabaseSecretConfig,\n  getSecretGroups,\n  loadPortState,\n  type RedisSecretConfig,\n  savePortState,\n} from \"../cli/infra\";\nimport { buildDescription } from \"../service-descriptor\";\nimport type { RuntimeConfig } from \"../types\";\nimport type {\n  ClaimRecord,\n  CliPorts,\n  ComposeModelPlan,\n  DatabasePlan,\n  InfraInput,\n  InfraPlan,\n  RedisPlan,\n  ResolvedPorts,\n  RuntimeLaunchSpec,\n  ServiceDescriptorPlan,\n} from \"./types\";\nimport { InfraError } from \"./types\";\n\nconst DEFAULT_HOST_PORT = 3000;\nconst DEFAULT_API_PORT = 3001;\nconst DEFAULT_AUTH_PORT = 3002;\nconst DEFAULT_UI_PORT = 3003;\nconst DEFAULT_PLUGIN_PORT_START = 3010;\nconst POSTGRES_USER = \"everythingdev\";\nconst POSTGRES_PASSWORD = \"everythingdev\";\n\nexport function workspaceKey(configDir: string): string {\n  const hash = createHash(\"sha256\").update(resolve(configDir)).digest(\"hex\");\n  return hash.slice(0, 12);\n}\n\nfunction normalizeCliPorts(input: InfraInput[\"cli\"]): CliPorts {\n  return {\n    host: input.port,\n    api: input.apiPort,\n    auth: input.authPort,\n    ui: input.uiPort,\n    uiSsr: undefined,\n    pluginsStart: input.pluginPortStart,\n    plugins: input.plugins,\n  };\n}\n\ninterface AllocateServicesResult {\n  ports: ResolvedPorts;\n  claims: ClaimRecord[];\n  devPortsState: { host: number; api: number; auth: number; ui: number; pluginPortStart: number };\n}\n\nfunction allocateServices(\n  cliPorts: CliPorts,\n  plugins: Record<\n    string,\n    { source: string; localPath?: string; ui?: { source: string; localPath?: string } }\n  >,\n  configDir: string,\n): Effect.Effect<AllocateServicesResult, InfraError, PortAllocator> {\n  return Effect.gen(function* () {\n    const wKey = workspaceKey(configDir);\n    const persisted = loadPortState(configDir).devPorts;\n    const allocator = yield* PortAllocator;\n\n    const hostPort = yield* allocator.pickAvailable(\n      cliPorts.host ?? persisted?.host ?? DEFAULT_HOST_PORT,\n    );\n\n    const apiPort = yield* allocator.pickAvailable(\n      cliPorts.api ?? persisted?.api ?? DEFAULT_API_PORT,\n    );\n\n    const authPort = yield* allocator.pickAvailable(\n      cliPorts.auth ?? persisted?.auth ?? DEFAULT_AUTH_PORT,\n    );\n\n    const uiPort = yield* allocator.pickAvailable(cliPorts.ui ?? persisted?.ui ?? DEFAULT_UI_PORT);\n\n    const uiSsrPort = yield* allocator.pickAvailable(cliPorts.uiSsr ?? uiPort + 1);\n\n    const pluginApiPorts: Record<string, number> = {};\n    const pluginUiPorts: Record<string, number> = {};\n\n    const pluginKeys = Object.keys(plugins).sort();\n    const pluginStart =\n      cliPorts.pluginsStart ?? persisted?.pluginPortStart ?? DEFAULT_PLUGIN_PORT_START;\n    let nextPluginPort = pluginStart;\n    for (const pluginId of pluginKeys) {\n      const pluginCfg = plugins[pluginId];\n      const preferred = cliPorts.plugins?.[pluginId]?.api ?? nextPluginPort;\n      const pluginPort = yield* allocator.pickAvailable(preferred);\n      pluginApiPorts[pluginId] = pluginPort;\n      nextPluginPort = pluginPort + 1;\n\n      if (\n        pluginCfg?.source === \"local\" &&\n        pluginCfg?.localPath &&\n        pluginCfg?.ui?.source === \"local\"\n      ) {\n        const uiPreferred = cliPorts.plugins?.[pluginId]?.ui ?? nextPluginPort;\n        const pluginUiPort = yield* allocator.pickAvailable(uiPreferred);\n        pluginUiPorts[pluginId] = pluginUiPort;\n        nextPluginPort = pluginUiPort + 1;\n      }\n    }\n\n    const resolved: ResolvedPorts = {\n      host: hostPort,\n      api: apiPort,\n      auth: authPort,\n      ui: uiPort,\n      uiSsr: uiSsrPort,\n      plugins: Object.fromEntries(\n        Object.entries(pluginApiPorts).map(([k, v]) => [k, { api: v, ui: pluginUiPorts[k] }]),\n      ),\n      postgres: {},\n      redis: {},\n    };\n\n    const devPortsState = {\n      host: hostPort,\n      api: apiPort,\n      auth: authPort,\n      ui: uiPort,\n      pluginPortStart: pluginStart,\n    };\n\n    const claimPorts: Record<string, number> = {\n      host: hostPort,\n      api: apiPort,\n      auth: authPort,\n      ui: uiPort,\n      uiSsr: uiSsrPort,\n    };\n    for (const [id, port] of Object.entries(pluginApiPorts)) {\n      claimPorts[`plugin:${id}`] = port;\n    }\n    for (const [id, port] of Object.entries(pluginUiPorts)) {\n      claimPorts[`plugin-ui:${id}`] = port;\n    }\n\n    const claim: ClaimRecord = {\n      resourceKey: `workspace:${wKey}`,\n      pid: process.pid,\n      configDir,\n      ports: claimPorts,\n      startedAt: Date.now(),\n    };\n\n    return { ports: resolved, claims: [claim], devPortsState };\n  }).pipe(\n    Effect.mapError(\n      (portErr) =>\n        new InfraError({\n          phase: \"allocate-services\",\n          message: `Port allocation failed: ${String(portErr)}`,\n          cause: portErr,\n        }),\n    ),\n  );\n}\n\nfunction allocateDatabases(\n  runtimeConfig: RuntimeConfig,\n  configDir: string,\n): Effect.Effect<\n  {\n    postgres: Record<string, number>;\n    redis: Record<string, number>;\n    dbs: DatabasePlan[];\n    redisPlans: RedisPlan[];\n  },\n  InfraError,\n  PortAllocator\n> {\n  return Effect.gen(function* () {\n    const persisted = loadPortState(configDir);\n    const groups = getSecretGroups(runtimeConfig);\n    const allSecrets = groups.flatMap((group) => group.secrets);\n    const originMap = buildOriginMap(configDir, runtimeConfig);\n    const allocator = yield* PortAllocator;\n\n    const infraDatabases: DatabaseSecretConfig[] = yield* Effect.sync(() =>\n      buildDatabaseConfigs(allSecrets, originMap, { ...persisted.postgresPorts }),\n    );\n    const infraRedis: RedisSecretConfig[] = yield* Effect.sync(() =>\n      buildRedisConfigs(allSecrets, originMap, { ...persisted.redisPorts }),\n    );\n\n    const postgres: Record<string, number> = {};\n    const dbs: DatabasePlan[] = [];\n    for (const db of infraDatabases) {\n      const port = yield* allocator.pickAvailable(db.port);\n      postgres[db.slug] = port;\n      dbs.push({\n        secret: db.secret,\n        slug: db.slug,\n        port,\n        dbName: db.databaseName,\n        containerName: db.containerName,\n        volumeName: db.volumeName,\n        url: `postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@localhost:${port}/${db.slug}_db`,\n      });\n    }\n\n    const redis: Record<string, number> = {};\n    const redisPlans: RedisPlan[] = [];\n    for (const r of infraRedis) {\n      const port = yield* allocator.pickAvailable(r.port);\n      redis[r.slug] = port;\n      redisPlans.push({\n        secret: r.secret,\n        slug: r.slug,\n        port,\n        containerName: r.containerName,\n        volumeName: r.volumeName,\n        url: `redis://localhost:${port}`,\n      });\n    }\n\n    return { postgres, redis, dbs, redisPlans };\n  }).pipe(\n    Effect.mapError(\n      (portErr) =>\n        new InfraError({\n          phase: \"allocate-databases\",\n          message: `Database port allocation failed: ${String(portErr)}`,\n          cause: portErr,\n        }),\n    ),\n  );\n}\n\nexport function buildServiceDescriptors(\n  runtimeConfig: RuntimeConfig,\n  resolvedPorts: ResolvedPorts,\n): ServiceDescriptorPlan[] {\n  const descriptors: ServiceDescriptorPlan[] = [];\n\n  if (runtimeConfig.host) {\n    const isLocal = runtimeConfig.host.source === \"local\";\n    descriptors.push({\n      key: \"host\",\n      source: runtimeConfig.host.source,\n      url: isLocal ? `http://localhost:${resolvedPorts.host}` : runtimeConfig.host.url,\n      port: isLocal ? resolvedPorts.host : undefined,\n      localPath: isLocal ? runtimeConfig.host.localPath : undefined,\n    });\n  }\n\n  if (runtimeConfig.api) {\n    const isLocal = runtimeConfig.api.source === \"local\";\n    descriptors.push({\n      key: \"api\",\n      source: runtimeConfig.api.source,\n      url: isLocal ? `http://localhost:${resolvedPorts.api}` : runtimeConfig.api.url,\n      port: isLocal ? resolvedPorts.api : undefined,\n      localPath: isLocal ? runtimeConfig.api.localPath : undefined,\n    });\n  }\n\n  if (runtimeConfig.auth) {\n    const isLocal = runtimeConfig.auth.source === \"local\";\n    descriptors.push({\n      key: \"auth\",\n      source: runtimeConfig.auth.source,\n      url: isLocal ? `http://localhost:${resolvedPorts.auth}` : runtimeConfig.auth.url,\n      port: isLocal ? resolvedPorts.auth : undefined,\n      localPath: isLocal ? runtimeConfig.auth.localPath : undefined,\n    });\n  }\n\n  if (runtimeConfig.ui) {\n    const isLocal = runtimeConfig.ui.source === \"local\";\n    descriptors.push({\n      key: \"ui\",\n      source: runtimeConfig.ui.source,\n      url: isLocal ? `http://localhost:${resolvedPorts.ui}` : runtimeConfig.ui.url,\n      port: isLocal ? resolvedPorts.ui : undefined,\n      localPath: isLocal ? runtimeConfig.ui.localPath : undefined,\n    });\n    if (isLocal && resolvedPorts.uiSsr) {\n      descriptors.push({\n        key: \"ui-ssr\",\n        source: \"local\",\n        url: `http://localhost:${resolvedPorts.uiSsr}`,\n        port: resolvedPorts.uiSsr,\n        localPath: runtimeConfig.ui.localPath,\n      });\n    }\n  }\n\n  if (runtimeConfig.plugins) {\n    for (const [pluginId, pluginCfg] of Object.entries(runtimeConfig.plugins)) {\n      const pluginIsLocal = pluginCfg.source === \"local\";\n      const p = resolvedPorts.plugins[pluginId];\n      if (pluginIsLocal && p?.api) {\n        descriptors.push({\n          key: `plugin:${pluginId}`,\n          source: \"local\",\n          url: `http://localhost:${p.api}`,\n          port: p.api,\n          localPath: pluginCfg.localPath,\n        });\n      }\n      if (!pluginIsLocal && pluginCfg.url) {\n        descriptors.push({\n          key: `plugin:${pluginId}`,\n          source: \"remote\",\n          url: pluginCfg.url,\n          port: undefined,\n          localPath: undefined,\n        });\n      }\n      if (pluginIsLocal && p?.ui && pluginCfg.ui?.source === \"local\") {\n        descriptors.push({\n          key: `plugin-ui:${pluginId}`,\n          source: \"local\",\n          url: `http://localhost:${p.ui}`,\n          port: p.ui,\n          localPath: pluginCfg.ui?.localPath,\n        });\n      }\n    }\n  }\n\n  return descriptors;\n}\n\nexport function buildLaunchSpec(\n  runtimeConfig: RuntimeConfig,\n  resolvedPorts: ResolvedPorts,\n): RuntimeLaunchSpec {\n  const hostPort =\n    runtimeConfig.host?.source === \"local\" ? resolvedPorts.host : runtimeConfig.host?.port;\n  const corsOrigin = hostPort ? `http://localhost:${hostPort}` : `http://localhost:3000`;\n\n  return {\n    port: resolvedPorts.host,\n    hostUrl: runtimeConfig.host?.url,\n    corsOrigin,\n    env: {\n      ...(resolvedPorts.host ? { PORT: String(resolvedPorts.host) } : {}),\n      ...(resolvedPorts.api ? { API_PORT: String(resolvedPorts.api) } : {}),\n      ...(resolvedPorts.ui ? { UI_PORT: String(resolvedPorts.ui) } : {}),\n      ...(resolvedPorts.auth ? { AUTH_PORT: String(resolvedPorts.auth) } : {}),\n    },\n    runtimeConfig,\n  };\n}\n\nexport function buildComposeModel(dbs: DatabasePlan[], redisPlans: RedisPlan[]): ComposeModelPlan {\n  return { databases: dbs, redis: redisPlans };\n}\n\nexport function buildEnvGenerated(\n  resolvedPorts: ResolvedPorts,\n  dbs: DatabasePlan[],\n  redisPlans: RedisPlan[],\n): Record<string, string> {\n  const env: Record<string, string> = {};\n\n  if (resolvedPorts.host) {\n    env.CORS_ORIGIN = `http://localhost:${resolvedPorts.host}`;\n  }\n\n  for (const db of dbs) {\n    env[db.secret] = db.url;\n  }\n  for (const r of redisPlans) {\n    env[r.secret] = r.url;\n  }\n\n  return env;\n}\n\nexport function planInfra(input: InfraInput): Effect.Effect<InfraPlan, InfraError, PortAllocator> {\n  return Effect.gen(function* () {\n    const cliPorts = normalizeCliPorts(input.cli);\n    const wKey = workspaceKey(input.configDir);\n\n    const plugins = (input.bosConfig.plugins ?? {}) as Record<\n      string,\n      { source: string; localPath?: string; ui?: { source: string; localPath?: string } }\n    >;\n\n    const {\n      ports: svcPorts,\n      claims,\n      devPortsState,\n    } = yield* allocateServices(cliPorts, plugins, input.configDir);\n\n    const {\n      dbs,\n      redisPlans,\n      postgres: pgPorts,\n      redis: rdPorts,\n    } = yield* allocateDatabases(input.bosConfig, input.configDir);\n\n    const resolvedPorts: ResolvedPorts = {\n      ...svcPorts,\n      postgres: pgPorts,\n      redis: rdPorts,\n    };\n\n    // Write merged state once after all allocations succeed\n    // Skip persistence for regression tests / ephemeral runs\n    if (process.env.BOS_NO_PERSIST_PORTS !== \"1\") {\n      savePortState(input.configDir, {\n        postgresPorts: pgPorts,\n        redisPorts: rdPorts,\n        devPorts: devPortsState,\n      });\n    }\n\n    const hostIsLocal = input.bosConfig.host?.source === \"local\";\n    const apiIsLocal = input.bosConfig.api?.source === \"local\";\n    const uiIsLocal = input.bosConfig.ui?.source === \"local\";\n    const authIsLocal = input.bosConfig.auth?.source === \"local\";\n    const assignedRuntimeConfig: RuntimeConfig = {\n      ...input.bosConfig,\n      host: resolvedPorts.host\n        ? {\n            ...input.bosConfig.host,\n            port: resolvedPorts.host,\n            url: `http://localhost:${resolvedPorts.host}`,\n            remoteUrl: !hostIsLocal\n              ? (input.bosConfig.host.remoteUrl ?? input.bosConfig.host.url)\n              : undefined,\n          }\n        : input.bosConfig.host,\n      api:\n        apiIsLocal && resolvedPorts.api\n          ? {\n              ...input.bosConfig.api,\n              port: resolvedPorts.api,\n              url: `http://localhost:${resolvedPorts.api}`,\n            }\n          : input.bosConfig.api,\n      ui:\n        uiIsLocal && resolvedPorts.ui\n          ? {\n              ...input.bosConfig.ui,\n              port: resolvedPorts.ui,\n              url: `http://localhost:${resolvedPorts.ui}`,\n            }\n          : input.bosConfig.ui,\n      auth:\n        authIsLocal && resolvedPorts.auth && input.bosConfig.auth\n          ? {\n              ...input.bosConfig.auth,\n              port: resolvedPorts.auth,\n              url: `http://localhost:${resolvedPorts.auth}`,\n            }\n          : input.bosConfig.auth,\n      plugins: input.bosConfig.plugins\n        ? Object.fromEntries(\n            Object.entries(input.bosConfig.plugins).map(([id, p]) => {\n              const pluginPort = resolvedPorts.plugins[id];\n              if (p.source === \"local\" && pluginPort?.api) {\n                return [\n                  id,\n                  { ...p, port: pluginPort.api, url: `http://localhost:${pluginPort.api}` },\n                ];\n              }\n              return [id, p];\n            }),\n          )\n        : undefined,\n    };\n\n    const serviceDescriptors = buildServiceDescriptors(input.bosConfig, resolvedPorts);\n\n    const launch = buildLaunchSpec(input.bosConfig, resolvedPorts);\n    const composeModel = buildComposeModel(dbs, redisPlans);\n    const envGenerated = buildEnvGenerated(resolvedPorts, dbs, redisPlans);\n\n    const packages = serviceDescriptors.map((d) => d.key);\n    const descriptionMap = new Map(serviceDescriptors.map((d) => [d.key, d]));\n    const description = buildDescription(descriptionMap);\n\n    const orchestrator = {\n      packages,\n      env: {},\n      description,\n      port: resolvedPorts.host,\n      interactive: input.cli.interactive,\n    };\n\n    return {\n      workspaceKey: wKey,\n      cliPorts,\n      resolvedPorts,\n      runtimeConfig: assignedRuntimeConfig,\n      launch,\n      description,\n      serviceDescriptors: new Map(serviceDescriptors.map((d) => [d.key, d])),\n      envGenerated,\n      composeModel,\n      claims,\n      orchestrator,\n    };\n  });\n}\n"],"mappings":";;;;;;;;;AA8BA,MAAM,oBAAoB;AAC1B,MAAM,mBAAmB;AACzB,MAAM,oBAAoB;AAC1B,MAAM,kBAAkB;AACxB,MAAM,4BAA4B;AAClC,MAAM,gBAAgB;AACtB,MAAM,oBAAoB;AAE1B,SAAgB,aAAa,WAA2B;AAEtD,QADa,WAAW,SAAS,CAAC,OAAO,QAAQ,UAAU,CAAC,CAAC,OAAO,MACzD,CAAC,MAAM,GAAG,GAAG;;AAG1B,SAAS,kBAAkB,OAAoC;AAC7D,QAAO;EACL,MAAM,MAAM;EACZ,KAAK,MAAM;EACX,MAAM,MAAM;EACZ,IAAI,MAAM;EACV,OAAO;EACP,cAAc,MAAM;EACpB,SAAS,MAAM;EAChB;;AASH,SAAS,iBACP,UACA,SAIA,WACkE;AAClE,QAAO,OAAO,IAAI,aAAa;EAC7B,MAAM,OAAO,aAAa,UAAU;EACpC,MAAM,YAAY,cAAc,UAAU,CAAC;EAC3C,MAAM,YAAY,OAAO;EAEzB,MAAM,WAAW,OAAO,UAAU,cAChC,SAAS,QAAQ,WAAW,QAAQ,kBACrC;EAED,MAAM,UAAU,OAAO,UAAU,cAC/B,SAAS,OAAO,WAAW,OAAO,iBACnC;EAED,MAAM,WAAW,OAAO,UAAU,cAChC,SAAS,QAAQ,WAAW,QAAQ,kBACrC;EAED,MAAM,SAAS,OAAO,UAAU,cAAc,SAAS,MAAM,WAAW,MAAM,gBAAgB;EAE9F,MAAM,YAAY,OAAO,UAAU,cAAc,SAAS,SAAS,SAAS,EAAE;EAE9E,MAAM,iBAAyC,EAAE;EACjD,MAAM,gBAAwC,EAAE;EAEhD,MAAM,aAAa,OAAO,KAAK,QAAQ,CAAC,MAAM;EAC9C,MAAM,cACJ,SAAS,gBAAgB,WAAW,mBAAmB;EACzD,IAAI,iBAAiB;AACrB,OAAK,MAAM,YAAY,YAAY;GACjC,MAAM,YAAY,QAAQ;GAC1B,MAAM,YAAY,SAAS,UAAU,WAAW,OAAO;GACvD,MAAM,aAAa,OAAO,UAAU,cAAc,UAAU;AAC5D,kBAAe,YAAY;AAC3B,oBAAiB,aAAa;AAE9B,OACE,WAAW,WAAW,WACtB,WAAW,aACX,WAAW,IAAI,WAAW,SAC1B;IACA,MAAM,cAAc,SAAS,UAAU,WAAW,MAAM;IACxD,MAAM,eAAe,OAAO,UAAU,cAAc,YAAY;AAChE,kBAAc,YAAY;AAC1B,qBAAiB,eAAe;;;EAIpC,MAAM,WAA0B;GAC9B,MAAM;GACN,KAAK;GACL,MAAM;GACN,IAAI;GACJ,OAAO;GACP,SAAS,OAAO,YACd,OAAO,QAAQ,eAAe,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,GAAG;IAAE,KAAK;IAAG,IAAI,cAAc;IAAI,CAAC,CAAC,CACtF;GACD,UAAU,EAAE;GACZ,OAAO,EAAE;GACV;EAED,MAAM,gBAAgB;GACpB,MAAM;GACN,KAAK;GACL,MAAM;GACN,IAAI;GACJ,iBAAiB;GAClB;EAED,MAAM,aAAqC;GACzC,MAAM;GACN,KAAK;GACL,MAAM;GACN,IAAI;GACJ,OAAO;GACR;AACD,OAAK,MAAM,CAAC,IAAI,SAAS,OAAO,QAAQ,eAAe,CACrD,YAAW,UAAU,QAAQ;AAE/B,OAAK,MAAM,CAAC,IAAI,SAAS,OAAO,QAAQ,cAAc,CACpD,YAAW,aAAa,QAAQ;AAWlC,SAAO;GAAE,OAAO;GAAU,QAAQ,CAAC;IAPjC,aAAa,aAAa;IAC1B,KAAK,QAAQ;IACb;IACA,OAAO;IACP,WAAW,KAAK,KAAK;IAGiB,CAAC;GAAE;GAAe;GAC1D,CAAC,KACD,OAAO,UACJ,YACC,IAAI,WAAW;EACb,OAAO;EACP,SAAS,2BAA2B,OAAO,QAAQ;EACnD,OAAO;EACR,CAAC,CACL,CACF;;AAGH,SAAS,kBACP,eACA,WAUA;AACA,QAAO,OAAO,IAAI,aAAa;EAC7B,MAAM,YAAY,cAAc,UAAU;EAE1C,MAAM,aADS,gBAAgB,cACN,CAAC,SAAS,UAAU,MAAM,QAAQ;EAC3D,MAAM,YAAY,eAAe,WAAW,cAAc;EAC1D,MAAM,YAAY,OAAO;EAEzB,MAAM,iBAAyC,OAAO,OAAO,WAC3D,qBAAqB,YAAY,WAAW,EAAE,GAAG,UAAU,eAAe,CAAC,CAC5E;EACD,MAAM,aAAkC,OAAO,OAAO,WACpD,kBAAkB,YAAY,WAAW,EAAE,GAAG,UAAU,YAAY,CAAC,CACtE;EAED,MAAM,WAAmC,EAAE;EAC3C,MAAM,MAAsB,EAAE;AAC9B,OAAK,MAAM,MAAM,gBAAgB;GAC/B,MAAM,OAAO,OAAO,UAAU,cAAc,GAAG,KAAK;AACpD,YAAS,GAAG,QAAQ;AACpB,OAAI,KAAK;IACP,QAAQ,GAAG;IACX,MAAM,GAAG;IACT;IACA,QAAQ,GAAG;IACX,eAAe,GAAG;IAClB,YAAY,GAAG;IACf,KAAK,cAAc,cAAc,GAAG,kBAAkB,aAAa,KAAK,GAAG,GAAG,KAAK;IACpF,CAAC;;EAGJ,MAAM,QAAgC,EAAE;EACxC,MAAM,aAA0B,EAAE;AAClC,OAAK,MAAM,KAAK,YAAY;GAC1B,MAAM,OAAO,OAAO,UAAU,cAAc,EAAE,KAAK;AACnD,SAAM,EAAE,QAAQ;AAChB,cAAW,KAAK;IACd,QAAQ,EAAE;IACV,MAAM,EAAE;IACR;IACA,eAAe,EAAE;IACjB,YAAY,EAAE;IACd,KAAK,qBAAqB;IAC3B,CAAC;;AAGJ,SAAO;GAAE;GAAU;GAAO;GAAK;GAAY;GAC3C,CAAC,KACD,OAAO,UACJ,YACC,IAAI,WAAW;EACb,OAAO;EACP,SAAS,oCAAoC,OAAO,QAAQ;EAC5D,OAAO;EACR,CAAC,CACL,CACF;;AAGH,SAAgB,wBACd,eACA,eACyB;CACzB,MAAM,cAAuC,EAAE;AAE/C,KAAI,cAAc,MAAM;EACtB,MAAM,UAAU,cAAc,KAAK,WAAW;AAC9C,cAAY,KAAK;GACf,KAAK;GACL,QAAQ,cAAc,KAAK;GAC3B,KAAK,UAAU,oBAAoB,cAAc,SAAS,cAAc,KAAK;GAC7E,MAAM,UAAU,cAAc,OAAO;GACrC,WAAW,UAAU,cAAc,KAAK,YAAY;GACrD,CAAC;;AAGJ,KAAI,cAAc,KAAK;EACrB,MAAM,UAAU,cAAc,IAAI,WAAW;AAC7C,cAAY,KAAK;GACf,KAAK;GACL,QAAQ,cAAc,IAAI;GAC1B,KAAK,UAAU,oBAAoB,cAAc,QAAQ,cAAc,IAAI;GAC3E,MAAM,UAAU,cAAc,MAAM;GACpC,WAAW,UAAU,cAAc,IAAI,YAAY;GACpD,CAAC;;AAGJ,KAAI,cAAc,MAAM;EACtB,MAAM,UAAU,cAAc,KAAK,WAAW;AAC9C,cAAY,KAAK;GACf,KAAK;GACL,QAAQ,cAAc,KAAK;GAC3B,KAAK,UAAU,oBAAoB,cAAc,SAAS,cAAc,KAAK;GAC7E,MAAM,UAAU,cAAc,OAAO;GACrC,WAAW,UAAU,cAAc,KAAK,YAAY;GACrD,CAAC;;AAGJ,KAAI,cAAc,IAAI;EACpB,MAAM,UAAU,cAAc,GAAG,WAAW;AAC5C,cAAY,KAAK;GACf,KAAK;GACL,QAAQ,cAAc,GAAG;GACzB,KAAK,UAAU,oBAAoB,cAAc,OAAO,cAAc,GAAG;GACzE,MAAM,UAAU,cAAc,KAAK;GACnC,WAAW,UAAU,cAAc,GAAG,YAAY;GACnD,CAAC;AACF,MAAI,WAAW,cAAc,MAC3B,aAAY,KAAK;GACf,KAAK;GACL,QAAQ;GACR,KAAK,oBAAoB,cAAc;GACvC,MAAM,cAAc;GACpB,WAAW,cAAc,GAAG;GAC7B,CAAC;;AAIN,KAAI,cAAc,QAChB,MAAK,MAAM,CAAC,UAAU,cAAc,OAAO,QAAQ,cAAc,QAAQ,EAAE;EACzE,MAAM,gBAAgB,UAAU,WAAW;EAC3C,MAAM,IAAI,cAAc,QAAQ;AAChC,MAAI,iBAAiB,GAAG,IACtB,aAAY,KAAK;GACf,KAAK,UAAU;GACf,QAAQ;GACR,KAAK,oBAAoB,EAAE;GAC3B,MAAM,EAAE;GACR,WAAW,UAAU;GACtB,CAAC;AAEJ,MAAI,CAAC,iBAAiB,UAAU,IAC9B,aAAY,KAAK;GACf,KAAK,UAAU;GACf,QAAQ;GACR,KAAK,UAAU;GACf,MAAM;GACN,WAAW;GACZ,CAAC;AAEJ,MAAI,iBAAiB,GAAG,MAAM,UAAU,IAAI,WAAW,QACrD,aAAY,KAAK;GACf,KAAK,aAAa;GAClB,QAAQ;GACR,KAAK,oBAAoB,EAAE;GAC3B,MAAM,EAAE;GACR,WAAW,UAAU,IAAI;GAC1B,CAAC;;AAKR,QAAO;;AAGT,SAAgB,gBACd,eACA,eACmB;CACnB,MAAM,WACJ,cAAc,MAAM,WAAW,UAAU,cAAc,OAAO,cAAc,MAAM;CACpF,MAAM,aAAa,WAAW,oBAAoB,aAAa;AAE/D,QAAO;EACL,MAAM,cAAc;EACpB,SAAS,cAAc,MAAM;EAC7B;EACA,KAAK;GACH,GAAI,cAAc,OAAO,EAAE,MAAM,OAAO,cAAc,KAAK,EAAE,GAAG,EAAE;GAClE,GAAI,cAAc,MAAM,EAAE,UAAU,OAAO,cAAc,IAAI,EAAE,GAAG,EAAE;GACpE,GAAI,cAAc,KAAK,EAAE,SAAS,OAAO,cAAc,GAAG,EAAE,GAAG,EAAE;GACjE,GAAI,cAAc,OAAO,EAAE,WAAW,OAAO,cAAc,KAAK,EAAE,GAAG,EAAE;GACxE;EACD;EACD;;AAGH,SAAgB,kBAAkB,KAAqB,YAA2C;AAChG,QAAO;EAAE,WAAW;EAAK,OAAO;EAAY;;AAG9C,SAAgB,kBACd,eACA,KACA,YACwB;CACxB,MAAM,MAA8B,EAAE;AAEtC,KAAI,cAAc,KAChB,KAAI,cAAc,oBAAoB,cAAc;AAGtD,MAAK,MAAM,MAAM,IACf,KAAI,GAAG,UAAU,GAAG;AAEtB,MAAK,MAAM,KAAK,WACd,KAAI,EAAE,UAAU,EAAE;AAGpB,QAAO;;AAGT,SAAgB,UAAU,OAAwE;AAChG,QAAO,OAAO,IAAI,aAAa;EAC7B,MAAM,WAAW,kBAAkB,MAAM,IAAI;EAC7C,MAAM,OAAO,aAAa,MAAM,UAAU;EAO1C,MAAM,EACJ,OAAO,UACP,QACA,kBACE,OAAO,iBAAiB,UATX,MAAM,UAAU,WAAW,EAAE,EASC,MAAM,UAAU;EAE/D,MAAM,EACJ,KACA,YACA,UAAU,SACV,OAAO,YACL,OAAO,kBAAkB,MAAM,WAAW,MAAM,UAAU;EAE9D,MAAM,gBAA+B;GACnC,GAAG;GACH,UAAU;GACV,OAAO;GACR;AAID,MAAI,QAAQ,IAAI,yBAAyB,IACvC,eAAc,MAAM,WAAW;GAC7B,eAAe;GACf,YAAY;GACZ,UAAU;GACX,CAAC;EAGJ,MAAM,cAAc,MAAM,UAAU,MAAM,WAAW;EACrD,MAAM,aAAa,MAAM,UAAU,KAAK,WAAW;EACnD,MAAM,YAAY,MAAM,UAAU,IAAI,WAAW;EACjD,MAAM,cAAc,MAAM,UAAU,MAAM,WAAW;EACrD,MAAM,wBAAuC;GAC3C,GAAG,MAAM;GACT,MAAM,cAAc,OAChB;IACE,GAAG,MAAM,UAAU;IACnB,MAAM,cAAc;IACpB,KAAK,oBAAoB,cAAc;IACvC,WAAW,CAAC,cACP,MAAM,UAAU,KAAK,aAAa,MAAM,UAAU,KAAK,MACxD;IACL,GACD,MAAM,UAAU;GACpB,KACE,cAAc,cAAc,MACxB;IACE,GAAG,MAAM,UAAU;IACnB,MAAM,cAAc;IACpB,KAAK,oBAAoB,cAAc;IACxC,GACD,MAAM,UAAU;GACtB,IACE,aAAa,cAAc,KACvB;IACE,GAAG,MAAM,UAAU;IACnB,MAAM,cAAc;IACpB,KAAK,oBAAoB,cAAc;IACxC,GACD,MAAM,UAAU;GACtB,MACE,eAAe,cAAc,QAAQ,MAAM,UAAU,OACjD;IACE,GAAG,MAAM,UAAU;IACnB,MAAM,cAAc;IACpB,KAAK,oBAAoB,cAAc;IACxC,GACD,MAAM,UAAU;GACtB,SAAS,MAAM,UAAU,UACrB,OAAO,YACL,OAAO,QAAQ,MAAM,UAAU,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO;IACvD,MAAM,aAAa,cAAc,QAAQ;AACzC,QAAI,EAAE,WAAW,WAAW,YAAY,IACtC,QAAO,CACL,IACA;KAAE,GAAG;KAAG,MAAM,WAAW;KAAK,KAAK,oBAAoB,WAAW;KAAO,CAC1E;AAEH,WAAO,CAAC,IAAI,EAAE;KACd,CACH,GACD;GACL;EAED,MAAM,qBAAqB,wBAAwB,MAAM,WAAW,cAAc;EAElF,MAAM,SAAS,gBAAgB,MAAM,WAAW,cAAc;EAC9D,MAAM,eAAe,kBAAkB,KAAK,WAAW;EACvD,MAAM,eAAe,kBAAkB,eAAe,KAAK,WAAW;EAEtE,MAAM,WAAW,mBAAmB,KAAK,MAAM,EAAE,IAAI;EAErD,MAAM,cAAc,iBAAiB,IADV,IAAI,mBAAmB,KAAK,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CACrB,CAAC;EAEpD,MAAM,eAAe;GACnB;GACA,KAAK,EAAE;GACP;GACA,MAAM,cAAc;GACpB,aAAa,MAAM,IAAI;GACxB;AAED,SAAO;GACL,cAAc;GACd;GACA;GACA,eAAe;GACf;GACA;GACA,oBAAoB,IAAI,IAAI,mBAAmB,KAAK,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;GACtE;GACA;GACA;GACA;GACD;GACD"}
+{"version":3,"file":"planner.mjs","names":[],"sources":["../../src/infra/planner.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { resolve } from \"node:path\";\nimport { Effect } from \"effect\";\nimport { PortAllocator } from \"../app\";\nimport {\n  buildDatabaseConfigs,\n  buildOriginMap,\n  buildRedisConfigs,\n  type DatabaseSecretConfig,\n  getSecretGroups,\n  loadPortState,\n  type RedisSecretConfig,\n  savePortState,\n} from \"../cli/infra\";\nimport { buildDescription } from \"../service-descriptor\";\nimport type { RuntimeConfig } from \"../types\";\nimport type {\n  ClaimRecord,\n  CliPorts,\n  ComposeModelPlan,\n  DatabasePlan,\n  InfraInput,\n  InfraPlan,\n  RedisPlan,\n  ResolvedPorts,\n  RuntimeLaunchSpec,\n  ServiceDescriptorPlan,\n} from \"./types\";\nimport { InfraError } from \"./types\";\n\nconst DEFAULT_HOST_PORT = 3000;\nconst DEFAULT_API_PORT = 3001;\nconst DEFAULT_AUTH_PORT = 3002;\nconst DEFAULT_UI_PORT = 3003;\nconst DEFAULT_PLUGIN_PORT_START = 3010;\nconst POSTGRES_USER = \"everythingdev\";\nconst POSTGRES_PASSWORD = \"everythingdev\";\n\nexport function workspaceKey(configDir: string): string {\n  const hash = createHash(\"sha256\").update(resolve(configDir)).digest(\"hex\");\n  return hash.slice(0, 12);\n}\n\nfunction normalizeCliPorts(input: InfraInput[\"cli\"]): CliPorts {\n  return {\n    host: input.port,\n    api: input.apiPort,\n    auth: input.authPort,\n    ui: input.uiPort,\n    uiSsr: undefined,\n    pluginsStart: input.pluginPortStart,\n    plugins: input.plugins,\n  };\n}\n\ninterface AllocateServicesResult {\n  ports: ResolvedPorts;\n  claims: ClaimRecord[];\n  devPortsState: { host: number; api: number; auth: number; ui: number; pluginPortStart: number };\n}\n\nfunction allocateServices(\n  cliPorts: CliPorts,\n  plugins: Record<\n    string,\n    { source: string; localPath?: string; ui?: { source: string; localPath?: string } }\n  >,\n  configDir: string,\n): Effect.Effect<AllocateServicesResult, InfraError, PortAllocator> {\n  return Effect.gen(function* () {\n    const wKey = workspaceKey(configDir);\n    const persisted = loadPortState(configDir).devPorts;\n    const allocator = yield* PortAllocator;\n\n    const hostPort = yield* allocator.pickAvailable(\n      cliPorts.host ?? persisted?.host ?? DEFAULT_HOST_PORT,\n    );\n\n    const apiPort = yield* allocator.pickAvailable(\n      cliPorts.api ?? persisted?.api ?? DEFAULT_API_PORT,\n    );\n\n    const authPort = yield* allocator.pickAvailable(\n      cliPorts.auth ?? persisted?.auth ?? DEFAULT_AUTH_PORT,\n    );\n\n    const uiPort = yield* allocator.pickAvailable(cliPorts.ui ?? persisted?.ui ?? DEFAULT_UI_PORT);\n\n    const uiSsrPort = yield* allocator.pickAvailable(cliPorts.uiSsr ?? uiPort + 1);\n\n    const pluginApiPorts: Record<string, number> = {};\n    const pluginUiPorts: Record<string, number> = {};\n\n    const pluginKeys = Object.keys(plugins).sort();\n    const pluginStart =\n      cliPorts.pluginsStart ?? persisted?.pluginPortStart ?? DEFAULT_PLUGIN_PORT_START;\n    let nextPluginPort = pluginStart;\n    for (const pluginId of pluginKeys) {\n      const pluginCfg = plugins[pluginId];\n      const preferred = cliPorts.plugins?.[pluginId]?.api ?? nextPluginPort;\n      const pluginPort = yield* allocator.pickAvailable(preferred);\n      pluginApiPorts[pluginId] = pluginPort;\n      nextPluginPort = pluginPort + 1;\n\n      if (\n        pluginCfg?.source === \"local\" &&\n        pluginCfg?.localPath &&\n        pluginCfg?.ui?.source === \"local\"\n      ) {\n        const uiPreferred = cliPorts.plugins?.[pluginId]?.ui ?? nextPluginPort;\n        const pluginUiPort = yield* allocator.pickAvailable(uiPreferred);\n        pluginUiPorts[pluginId] = pluginUiPort;\n        nextPluginPort = pluginUiPort + 1;\n      }\n    }\n\n    const resolved: ResolvedPorts = {\n      host: hostPort,\n      api: apiPort,\n      auth: authPort,\n      ui: uiPort,\n      uiSsr: uiSsrPort,\n      plugins: Object.fromEntries(\n        Object.entries(pluginApiPorts).map(([k, v]) => [k, { api: v, ui: pluginUiPorts[k] }]),\n      ),\n      postgres: {},\n      redis: {},\n    };\n\n    const devPortsState = {\n      host: hostPort,\n      api: apiPort,\n      auth: authPort,\n      ui: uiPort,\n      pluginPortStart: pluginStart,\n    };\n\n    const claimPorts: Record<string, number> = {\n      host: hostPort,\n      api: apiPort,\n      auth: authPort,\n      ui: uiPort,\n      uiSsr: uiSsrPort,\n    };\n    for (const [id, port] of Object.entries(pluginApiPorts)) {\n      claimPorts[`plugin:${id}`] = port;\n    }\n    for (const [id, port] of Object.entries(pluginUiPorts)) {\n      claimPorts[`plugin-ui:${id}`] = port;\n    }\n\n    const claim: ClaimRecord = {\n      resourceKey: `workspace:${wKey}`,\n      pid: process.pid,\n      configDir,\n      ports: claimPorts,\n      startedAt: Date.now(),\n    };\n\n    return { ports: resolved, claims: [claim], devPortsState };\n  }).pipe(\n    Effect.mapError(\n      (portErr) =>\n        new InfraError({\n          phase: \"allocate-services\",\n          message: `Port allocation failed: ${String(portErr)}`,\n          cause: portErr,\n        }),\n    ),\n  );\n}\n\nfunction allocateDatabases(\n  runtimeConfig: RuntimeConfig,\n  configDir: string,\n): Effect.Effect<\n  {\n    postgres: Record<string, number>;\n    redis: Record<string, number>;\n    dbs: DatabasePlan[];\n    redisPlans: RedisPlan[];\n  },\n  InfraError,\n  PortAllocator\n> {\n  return Effect.gen(function* () {\n    const persisted = loadPortState(configDir);\n    const groups = getSecretGroups(runtimeConfig);\n    const allSecrets = groups.flatMap((group) => group.secrets);\n    const originMap = buildOriginMap(configDir, runtimeConfig);\n    const allocator = yield* PortAllocator;\n\n    const infraDatabases: DatabaseSecretConfig[] = yield* Effect.sync(() =>\n      buildDatabaseConfigs(allSecrets, originMap, { ...persisted.postgresPorts }),\n    );\n    const infraRedis: RedisSecretConfig[] = yield* Effect.sync(() =>\n      buildRedisConfigs(allSecrets, originMap, { ...persisted.redisPorts }),\n    );\n\n    const postgres: Record<string, number> = {};\n    const dbs: DatabasePlan[] = [];\n    for (const db of infraDatabases) {\n      const port = yield* allocator.pickAvailable(db.port);\n      postgres[db.slug] = port;\n      dbs.push({\n        secret: db.secret,\n        slug: db.slug,\n        port,\n        dbName: db.databaseName,\n        containerName: db.containerName,\n        volumeName: db.volumeName,\n        url: `postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@localhost:${port}/${db.slug}_db`,\n      });\n    }\n\n    const redis: Record<string, number> = {};\n    const redisPlans: RedisPlan[] = [];\n    for (const r of infraRedis) {\n      const port = yield* allocator.pickAvailable(r.port);\n      redis[r.slug] = port;\n      redisPlans.push({\n        secret: r.secret,\n        slug: r.slug,\n        port,\n        containerName: r.containerName,\n        volumeName: r.volumeName,\n        url: `redis://localhost:${port}`,\n      });\n    }\n\n    return { postgres, redis, dbs, redisPlans };\n  }).pipe(\n    Effect.mapError(\n      (portErr) =>\n        new InfraError({\n          phase: \"allocate-databases\",\n          message: `Database port allocation failed: ${String(portErr)}`,\n          cause: portErr,\n        }),\n    ),\n  );\n}\n\nexport function buildServiceDescriptors(\n  runtimeConfig: RuntimeConfig,\n  resolvedPorts: ResolvedPorts,\n): ServiceDescriptorPlan[] {\n  const descriptors: ServiceDescriptorPlan[] = [];\n\n  if (runtimeConfig.host) {\n    const isLocal = runtimeConfig.host.source === \"local\";\n    descriptors.push({\n      key: \"host\",\n      source: runtimeConfig.host.source,\n      url: isLocal ? `http://localhost:${resolvedPorts.host}` : runtimeConfig.host.url,\n      port: isLocal ? resolvedPorts.host : undefined,\n      localPath: isLocal ? runtimeConfig.host.localPath : undefined,\n    });\n  }\n\n  if (runtimeConfig.api) {\n    const isLocal = runtimeConfig.api.source === \"local\";\n    descriptors.push({\n      key: \"api\",\n      source: runtimeConfig.api.source,\n      url: isLocal ? `http://localhost:${resolvedPorts.api}` : runtimeConfig.api.url,\n      port: isLocal ? resolvedPorts.api : undefined,\n      localPath: isLocal ? runtimeConfig.api.localPath : undefined,\n    });\n  }\n\n  if (runtimeConfig.auth) {\n    const isLocal = runtimeConfig.auth.source === \"local\";\n    descriptors.push({\n      key: \"auth\",\n      source: runtimeConfig.auth.source,\n      url: isLocal ? `http://localhost:${resolvedPorts.auth}` : runtimeConfig.auth.url,\n      port: isLocal ? resolvedPorts.auth : undefined,\n      localPath: isLocal ? runtimeConfig.auth.localPath : undefined,\n    });\n  }\n\n  if (runtimeConfig.ui) {\n    const isLocal = runtimeConfig.ui.source === \"local\";\n    descriptors.push({\n      key: \"ui\",\n      source: runtimeConfig.ui.source,\n      url: isLocal ? `http://localhost:${resolvedPorts.ui}` : runtimeConfig.ui.url,\n      port: isLocal ? resolvedPorts.ui : undefined,\n      localPath: isLocal ? runtimeConfig.ui.localPath : undefined,\n    });\n    if (isLocal && resolvedPorts.uiSsr) {\n      descriptors.push({\n        key: \"ui-ssr\",\n        source: \"local\",\n        url: `http://localhost:${resolvedPorts.uiSsr}`,\n        port: resolvedPorts.uiSsr,\n        localPath: runtimeConfig.ui.localPath,\n      });\n    }\n  }\n\n  if (runtimeConfig.plugins) {\n    for (const [pluginId, pluginCfg] of Object.entries(runtimeConfig.plugins)) {\n      const pluginIsLocal = pluginCfg.source === \"local\";\n      const p = resolvedPorts.plugins[pluginId];\n      if (pluginIsLocal && p?.api) {\n        descriptors.push({\n          key: `plugin:${pluginId}`,\n          source: \"local\",\n          url: `http://localhost:${p.api}`,\n          port: p.api,\n          localPath: pluginCfg.localPath,\n        });\n      }\n      if (!pluginIsLocal && pluginCfg.url) {\n        descriptors.push({\n          key: `plugin:${pluginId}`,\n          source: \"remote\",\n          url: pluginCfg.url,\n          port: undefined,\n          localPath: undefined,\n        });\n      }\n      if (pluginIsLocal && p?.ui && pluginCfg.ui?.source === \"local\") {\n        descriptors.push({\n          key: `plugin-ui:${pluginId}`,\n          source: \"local\",\n          url: `http://localhost:${p.ui}`,\n          port: p.ui,\n          localPath: pluginCfg.ui?.localPath,\n        });\n      }\n    }\n  }\n\n  return descriptors;\n}\n\nexport function buildLaunchSpec(\n  runtimeConfig: RuntimeConfig,\n  resolvedPorts: ResolvedPorts,\n): RuntimeLaunchSpec {\n  const hostPort =\n    runtimeConfig.host?.source === \"local\" ? resolvedPorts.host : runtimeConfig.host?.port;\n  const corsOrigin = hostPort ? `http://localhost:${hostPort}` : `http://localhost:3000`;\n\n  return {\n    port: resolvedPorts.host,\n    hostUrl: runtimeConfig.host?.url,\n    corsOrigin,\n    env: {\n      ...(resolvedPorts.host ? { PORT: String(resolvedPorts.host) } : {}),\n      ...(resolvedPorts.api ? { API_PORT: String(resolvedPorts.api) } : {}),\n      ...(resolvedPorts.ui ? { UI_PORT: String(resolvedPorts.ui) } : {}),\n      ...(resolvedPorts.auth ? { AUTH_PORT: String(resolvedPorts.auth) } : {}),\n    },\n    runtimeConfig,\n  };\n}\n\nexport function buildComposeModel(dbs: DatabasePlan[], redisPlans: RedisPlan[]): ComposeModelPlan {\n  return { databases: dbs, redis: redisPlans };\n}\n\nexport function buildEnvGenerated(\n  resolvedPorts: ResolvedPorts,\n  dbs: DatabasePlan[],\n  redisPlans: RedisPlan[],\n): Record<string, string> {\n  const env: Record<string, string> = {};\n\n  if (resolvedPorts.host) {\n    env.CORS_ORIGIN = `http://localhost:${resolvedPorts.host}`;\n  }\n\n  for (const db of dbs) {\n    env[db.secret] = db.url;\n  }\n  for (const r of redisPlans) {\n    env[r.secret] = r.url;\n  }\n\n  return env;\n}\n\nexport function planInfra(input: InfraInput): Effect.Effect<InfraPlan, InfraError, PortAllocator> {\n  return Effect.gen(function* () {\n    const cliPorts = normalizeCliPorts(input.cli);\n    const wKey = workspaceKey(input.configDir);\n\n    const plugins = (input.bosConfig.plugins ?? {}) as Record<\n      string,\n      { source: string; localPath?: string; ui?: { source: string; localPath?: string } }\n    >;\n\n    const {\n      ports: svcPorts,\n      claims,\n      devPortsState,\n    } = yield* allocateServices(cliPorts, plugins, input.configDir);\n\n    const {\n      dbs,\n      redisPlans,\n      postgres: pgPorts,\n      redis: rdPorts,\n    } = yield* allocateDatabases(input.bosConfig, input.configDir);\n\n    const resolvedPorts: ResolvedPorts = {\n      ...svcPorts,\n      postgres: pgPorts,\n      redis: rdPorts,\n    };\n\n    // Write merged state once after all allocations succeed\n    // Skip persistence for regression tests / ephemeral runs\n    if (process.env.BOS_NO_PERSIST_PORTS !== \"1\") {\n      savePortState(input.configDir, {\n        postgresPorts: pgPorts,\n        redisPorts: rdPorts,\n        devPorts: devPortsState,\n      });\n    }\n\n    const hostIsLocal = input.bosConfig.host?.source === \"local\";\n    const apiIsLocal = input.bosConfig.api?.source === \"local\";\n    const uiIsLocal = input.bosConfig.ui?.source === \"local\";\n    const authIsLocal = input.bosConfig.auth?.source === \"local\";\n    const assignedRuntimeConfig: RuntimeConfig = {\n      ...input.bosConfig,\n      host: resolvedPorts.host\n        ? {\n            ...input.bosConfig.host,\n            port: resolvedPorts.host,\n            url: `http://localhost:${resolvedPorts.host}`,\n            remoteUrl: !hostIsLocal\n              ? (input.bosConfig.host.remoteUrl ?? input.bosConfig.host.url)\n              : undefined,\n          }\n        : input.bosConfig.host,\n      api:\n        apiIsLocal && resolvedPorts.api\n          ? {\n              ...input.bosConfig.api,\n              port: resolvedPorts.api,\n              url: `http://localhost:${resolvedPorts.api}`,\n            }\n          : input.bosConfig.api,\n      ui:\n        uiIsLocal && resolvedPorts.ui\n          ? {\n              ...input.bosConfig.ui,\n              port: resolvedPorts.ui,\n              url: `http://localhost:${resolvedPorts.ui}`,\n            }\n          : input.bosConfig.ui,\n      auth:\n        authIsLocal && resolvedPorts.auth && input.bosConfig.auth\n          ? {\n              ...input.bosConfig.auth,\n              port: resolvedPorts.auth,\n              url: `http://localhost:${resolvedPorts.auth}`,\n            }\n          : input.bosConfig.auth,\n      plugins: input.bosConfig.plugins\n        ? Object.fromEntries(\n            Object.entries(input.bosConfig.plugins).map(([id, p]) => {\n              const pluginPort = resolvedPorts.plugins[id];\n              if (p.source === \"local\" && pluginPort?.api) {\n                return [\n                  id,\n                  { ...p, port: pluginPort.api, url: `http://localhost:${pluginPort.api}` },\n                ];\n              }\n              return [id, p];\n            }),\n          )\n        : undefined,\n    };\n\n    const serviceDescriptors = buildServiceDescriptors(input.bosConfig, resolvedPorts);\n\n    const launch = buildLaunchSpec(input.bosConfig, resolvedPorts);\n    const composeModel = buildComposeModel(dbs, redisPlans);\n    const envGenerated = buildEnvGenerated(resolvedPorts, dbs, redisPlans);\n\n    const packages = serviceDescriptors.map((d) => d.key);\n    const descriptionMap = new Map(serviceDescriptors.map((d) => [d.key, d]));\n    const description = buildDescription(descriptionMap);\n\n    const orchestrator = {\n      packages,\n      env: {},\n      description,\n      port: resolvedPorts.host,\n      interactive: input.cli.interactive,\n    };\n\n    return {\n      workspaceKey: wKey,\n      cliPorts,\n      resolvedPorts,\n      runtimeConfig: assignedRuntimeConfig,\n      launch,\n      description,\n      serviceDescriptors: new Map(serviceDescriptors.map((d) => [d.key, d])),\n      envGenerated,\n      composeModel,\n      claims,\n      orchestrator,\n    };\n  });\n}\n"],"mappings":";;;;;;;;;AA8BA,MAAM,oBAAoB;AAC1B,MAAM,mBAAmB;AACzB,MAAM,oBAAoB;AAC1B,MAAM,kBAAkB;AACxB,MAAM,4BAA4B;AAClC,MAAM,gBAAgB;AACtB,MAAM,oBAAoB;AAE1B,SAAgB,aAAa,WAA2B;CAEtD,OADa,WAAW,QAAQ,CAAC,CAAC,OAAO,QAAQ,SAAS,CAAC,CAAC,CAAC,OAAO,KAC1D,CAAC,CAAC,MAAM,GAAG,EAAE;AACzB;AAEA,SAAS,kBAAkB,OAAoC;CAC7D,OAAO;EACL,MAAM,MAAM;EACZ,KAAK,MAAM;EACX,MAAM,MAAM;EACZ,IAAI,MAAM;EACV,OAAO;EACP,cAAc,MAAM;EACpB,SAAS,MAAM;CACjB;AACF;AAQA,SAAS,iBACP,UACA,SAIA,WACkE;CAClE,OAAO,OAAO,IAAI,aAAa;EAC7B,MAAM,OAAO,aAAa,SAAS;EACnC,MAAM,YAAY,cAAc,SAAS,CAAC,CAAC;EAC3C,MAAM,YAAY,OAAO;EAEzB,MAAM,WAAW,OAAO,UAAU,cAChC,SAAS,QAAQ,WAAW,QAAQ,iBACtC;EAEA,MAAM,UAAU,OAAO,UAAU,cAC/B,SAAS,OAAO,WAAW,OAAO,gBACpC;EAEA,MAAM,WAAW,OAAO,UAAU,cAChC,SAAS,QAAQ,WAAW,QAAQ,iBACtC;EAEA,MAAM,SAAS,OAAO,UAAU,cAAc,SAAS,MAAM,WAAW,MAAM,eAAe;EAE7F,MAAM,YAAY,OAAO,UAAU,cAAc,SAAS,SAAS,SAAS,CAAC;EAE7E,MAAM,iBAAyC,CAAC;EAChD,MAAM,gBAAwC,CAAC;EAE/C,MAAM,aAAa,OAAO,KAAK,OAAO,CAAC,CAAC,KAAK;EAC7C,MAAM,cACJ,SAAS,gBAAgB,WAAW,mBAAmB;EACzD,IAAI,iBAAiB;EACrB,KAAK,MAAM,YAAY,YAAY;GACjC,MAAM,YAAY,QAAQ;GAC1B,MAAM,YAAY,SAAS,UAAU,SAAS,EAAE,OAAO;GACvD,MAAM,aAAa,OAAO,UAAU,cAAc,SAAS;GAC3D,eAAe,YAAY;GAC3B,iBAAiB,aAAa;GAE9B,IACE,WAAW,WAAW,WACtB,WAAW,aACX,WAAW,IAAI,WAAW,SAC1B;IACA,MAAM,cAAc,SAAS,UAAU,SAAS,EAAE,MAAM;IACxD,MAAM,eAAe,OAAO,UAAU,cAAc,WAAW;IAC/D,cAAc,YAAY;IAC1B,iBAAiB,eAAe;GAClC;EACF;EAEA,MAAM,WAA0B;GAC9B,MAAM;GACN,KAAK;GACL,MAAM;GACN,IAAI;GACJ,OAAO;GACP,SAAS,OAAO,YACd,OAAO,QAAQ,cAAc,CAAC,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,GAAG;IAAE,KAAK;IAAG,IAAI,cAAc;GAAG,CAAC,CAAC,CACtF;GACA,UAAU,CAAC;GACX,OAAO,CAAC;EACV;EAEA,MAAM,gBAAgB;GACpB,MAAM;GACN,KAAK;GACL,MAAM;GACN,IAAI;GACJ,iBAAiB;EACnB;EAEA,MAAM,aAAqC;GACzC,MAAM;GACN,KAAK;GACL,MAAM;GACN,IAAI;GACJ,OAAO;EACT;EACA,KAAK,MAAM,CAAC,IAAI,SAAS,OAAO,QAAQ,cAAc,GACpD,WAAW,UAAU,QAAQ;EAE/B,KAAK,MAAM,CAAC,IAAI,SAAS,OAAO,QAAQ,aAAa,GACnD,WAAW,aAAa,QAAQ;EAWlC,OAAO;GAAE,OAAO;GAAU,QAAQ,CAAC;IAPjC,aAAa,aAAa;IAC1B,KAAK,QAAQ;IACb;IACA,OAAO;IACP,WAAW,KAAK,IAAI;GAGiB,CAAC;GAAG;EAAc;CAC3D,CAAC,CAAC,CAAC,KACD,OAAO,UACJ,YACC,IAAI,WAAW;EACb,OAAO;EACP,SAAS,2BAA2B,OAAO,OAAO;EAClD,OAAO;CACT,CAAC,CACL,CACF;AACF;AAEA,SAAS,kBACP,eACA,WAUA;CACA,OAAO,OAAO,IAAI,aAAa;EAC7B,MAAM,YAAY,cAAc,SAAS;EAEzC,MAAM,aADS,gBAAgB,aACP,CAAC,CAAC,SAAS,UAAU,MAAM,OAAO;EAC1D,MAAM,YAAY,eAAe,WAAW,aAAa;EACzD,MAAM,YAAY,OAAO;EAEzB,MAAM,iBAAyC,OAAO,OAAO,WAC3D,qBAAqB,YAAY,WAAW,EAAE,GAAG,UAAU,cAAc,CAAC,CAC5E;EACA,MAAM,aAAkC,OAAO,OAAO,WACpD,kBAAkB,YAAY,WAAW,EAAE,GAAG,UAAU,WAAW,CAAC,CACtE;EAEA,MAAM,WAAmC,CAAC;EAC1C,MAAM,MAAsB,CAAC;EAC7B,KAAK,MAAM,MAAM,gBAAgB;GAC/B,MAAM,OAAO,OAAO,UAAU,cAAc,GAAG,IAAI;GACnD,SAAS,GAAG,QAAQ;GACpB,IAAI,KAAK;IACP,QAAQ,GAAG;IACX,MAAM,GAAG;IACT;IACA,QAAQ,GAAG;IACX,eAAe,GAAG;IAClB,YAAY,GAAG;IACf,KAAK,cAAc,cAAc,GAAG,kBAAkB,aAAa,KAAK,GAAG,GAAG,KAAK;GACrF,CAAC;EACH;EAEA,MAAM,QAAgC,CAAC;EACvC,MAAM,aAA0B,CAAC;EACjC,KAAK,MAAM,KAAK,YAAY;GAC1B,MAAM,OAAO,OAAO,UAAU,cAAc,EAAE,IAAI;GAClD,MAAM,EAAE,QAAQ;GAChB,WAAW,KAAK;IACd,QAAQ,EAAE;IACV,MAAM,EAAE;IACR;IACA,eAAe,EAAE;IACjB,YAAY,EAAE;IACd,KAAK,qBAAqB;GAC5B,CAAC;EACH;EAEA,OAAO;GAAE;GAAU;GAAO;GAAK;EAAW;CAC5C,CAAC,CAAC,CAAC,KACD,OAAO,UACJ,YACC,IAAI,WAAW;EACb,OAAO;EACP,SAAS,oCAAoC,OAAO,OAAO;EAC3D,OAAO;CACT,CAAC,CACL,CACF;AACF;AAEA,SAAgB,wBACd,eACA,eACyB;CACzB,MAAM,cAAuC,CAAC;CAE9C,IAAI,cAAc,MAAM;EACtB,MAAM,UAAU,cAAc,KAAK,WAAW;EAC9C,YAAY,KAAK;GACf,KAAK;GACL,QAAQ,cAAc,KAAK;GAC3B,KAAK,UAAU,oBAAoB,cAAc,SAAS,cAAc,KAAK;GAC7E,MAAM,UAAU,cAAc,OAAO;GACrC,WAAW,UAAU,cAAc,KAAK,YAAY;EACtD,CAAC;CACH;CAEA,IAAI,cAAc,KAAK;EACrB,MAAM,UAAU,cAAc,IAAI,WAAW;EAC7C,YAAY,KAAK;GACf,KAAK;GACL,QAAQ,cAAc,IAAI;GAC1B,KAAK,UAAU,oBAAoB,cAAc,QAAQ,cAAc,IAAI;GAC3E,MAAM,UAAU,cAAc,MAAM;GACpC,WAAW,UAAU,cAAc,IAAI,YAAY;EACrD,CAAC;CACH;CAEA,IAAI,cAAc,MAAM;EACtB,MAAM,UAAU,cAAc,KAAK,WAAW;EAC9C,YAAY,KAAK;GACf,KAAK;GACL,QAAQ,cAAc,KAAK;GAC3B,KAAK,UAAU,oBAAoB,cAAc,SAAS,cAAc,KAAK;GAC7E,MAAM,UAAU,cAAc,OAAO;GACrC,WAAW,UAAU,cAAc,KAAK,YAAY;EACtD,CAAC;CACH;CAEA,IAAI,cAAc,IAAI;EACpB,MAAM,UAAU,cAAc,GAAG,WAAW;EAC5C,YAAY,KAAK;GACf,KAAK;GACL,QAAQ,cAAc,GAAG;GACzB,KAAK,UAAU,oBAAoB,cAAc,OAAO,cAAc,GAAG;GACzE,MAAM,UAAU,cAAc,KAAK;GACnC,WAAW,UAAU,cAAc,GAAG,YAAY;EACpD,CAAC;EACD,IAAI,WAAW,cAAc,OAC3B,YAAY,KAAK;GACf,KAAK;GACL,QAAQ;GACR,KAAK,oBAAoB,cAAc;GACvC,MAAM,cAAc;GACpB,WAAW,cAAc,GAAG;EAC9B,CAAC;CAEL;CAEA,IAAI,cAAc,SAChB,KAAK,MAAM,CAAC,UAAU,cAAc,OAAO,QAAQ,cAAc,OAAO,GAAG;EACzE,MAAM,gBAAgB,UAAU,WAAW;EAC3C,MAAM,IAAI,cAAc,QAAQ;EAChC,IAAI,iBAAiB,GAAG,KACtB,YAAY,KAAK;GACf,KAAK,UAAU;GACf,QAAQ;GACR,KAAK,oBAAoB,EAAE;GAC3B,MAAM,EAAE;GACR,WAAW,UAAU;EACvB,CAAC;EAEH,IAAI,CAAC,iBAAiB,UAAU,KAC9B,YAAY,KAAK;GACf,KAAK,UAAU;GACf,QAAQ;GACR,KAAK,UAAU;GACf,MAAM;GACN,WAAW;EACb,CAAC;EAEH,IAAI,iBAAiB,GAAG,MAAM,UAAU,IAAI,WAAW,SACrD,YAAY,KAAK;GACf,KAAK,aAAa;GAClB,QAAQ;GACR,KAAK,oBAAoB,EAAE;GAC3B,MAAM,EAAE;GACR,WAAW,UAAU,IAAI;EAC3B,CAAC;CAEL;CAGF,OAAO;AACT;AAEA,SAAgB,gBACd,eACA,eACmB;CACnB,MAAM,WACJ,cAAc,MAAM,WAAW,UAAU,cAAc,OAAO,cAAc,MAAM;CACpF,MAAM,aAAa,WAAW,oBAAoB,aAAa;CAE/D,OAAO;EACL,MAAM,cAAc;EACpB,SAAS,cAAc,MAAM;EAC7B;EACA,KAAK;GACH,GAAI,cAAc,OAAO,EAAE,MAAM,OAAO,cAAc,IAAI,EAAE,IAAI,CAAC;GACjE,GAAI,cAAc,MAAM,EAAE,UAAU,OAAO,cAAc,GAAG,EAAE,IAAI,CAAC;GACnE,GAAI,cAAc,KAAK,EAAE,SAAS,OAAO,cAAc,EAAE,EAAE,IAAI,CAAC;GAChE,GAAI,cAAc,OAAO,EAAE,WAAW,OAAO,cAAc,IAAI,EAAE,IAAI,CAAC;EACxE;EACA;CACF;AACF;AAEA,SAAgB,kBAAkB,KAAqB,YAA2C;CAChG,OAAO;EAAE,WAAW;EAAK,OAAO;CAAW;AAC7C;AAEA,SAAgB,kBACd,eACA,KACA,YACwB;CACxB,MAAM,MAA8B,CAAC;CAErC,IAAI,cAAc,MAChB,IAAI,cAAc,oBAAoB,cAAc;CAGtD,KAAK,MAAM,MAAM,KACf,IAAI,GAAG,UAAU,GAAG;CAEtB,KAAK,MAAM,KAAK,YACd,IAAI,EAAE,UAAU,EAAE;CAGpB,OAAO;AACT;AAEA,SAAgB,UAAU,OAAwE;CAChG,OAAO,OAAO,IAAI,aAAa;EAC7B,MAAM,WAAW,kBAAkB,MAAM,GAAG;EAC5C,MAAM,OAAO,aAAa,MAAM,SAAS;EAOzC,MAAM,EACJ,OAAO,UACP,QACA,kBACE,OAAO,iBAAiB,UATX,MAAM,UAAU,WAAW,CAAC,GASE,MAAM,SAAS;EAE9D,MAAM,EACJ,KACA,YACA,UAAU,SACV,OAAO,YACL,OAAO,kBAAkB,MAAM,WAAW,MAAM,SAAS;EAE7D,MAAM,gBAA+B;GACnC,GAAG;GACH,UAAU;GACV,OAAO;EACT;EAIA,IAAI,QAAQ,IAAI,yBAAyB,KACvC,cAAc,MAAM,WAAW;GAC7B,eAAe;GACf,YAAY;GACZ,UAAU;EACZ,CAAC;EAGH,MAAM,cAAc,MAAM,UAAU,MAAM,WAAW;EACrD,MAAM,aAAa,MAAM,UAAU,KAAK,WAAW;EACnD,MAAM,YAAY,MAAM,UAAU,IAAI,WAAW;EACjD,MAAM,cAAc,MAAM,UAAU,MAAM,WAAW;EACrD,MAAM,wBAAuC;GAC3C,GAAG,MAAM;GACT,MAAM,cAAc,OAChB;IACE,GAAG,MAAM,UAAU;IACnB,MAAM,cAAc;IACpB,KAAK,oBAAoB,cAAc;IACvC,WAAW,CAAC,cACP,MAAM,UAAU,KAAK,aAAa,MAAM,UAAU,KAAK,MACxD;GACN,IACA,MAAM,UAAU;GACpB,KACE,cAAc,cAAc,MACxB;IACE,GAAG,MAAM,UAAU;IACnB,MAAM,cAAc;IACpB,KAAK,oBAAoB,cAAc;GACzC,IACA,MAAM,UAAU;GACtB,IACE,aAAa,cAAc,KACvB;IACE,GAAG,MAAM,UAAU;IACnB,MAAM,cAAc;IACpB,KAAK,oBAAoB,cAAc;GACzC,IACA,MAAM,UAAU;GACtB,MACE,eAAe,cAAc,QAAQ,MAAM,UAAU,OACjD;IACE,GAAG,MAAM,UAAU;IACnB,MAAM,cAAc;IACpB,KAAK,oBAAoB,cAAc;GACzC,IACA,MAAM,UAAU;GACtB,SAAS,MAAM,UAAU,UACrB,OAAO,YACL,OAAO,QAAQ,MAAM,UAAU,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO;IACvD,MAAM,aAAa,cAAc,QAAQ;IACzC,IAAI,EAAE,WAAW,WAAW,YAAY,KACtC,OAAO,CACL,IACA;KAAE,GAAG;KAAG,MAAM,WAAW;KAAK,KAAK,oBAAoB,WAAW;IAAM,CAC1E;IAEF,OAAO,CAAC,IAAI,CAAC;GACf,CAAC,CACH,IACA;EACN;EAEA,MAAM,qBAAqB,wBAAwB,MAAM,WAAW,aAAa;EAEjF,MAAM,SAAS,gBAAgB,MAAM,WAAW,aAAa;EAC7D,MAAM,eAAe,kBAAkB,KAAK,UAAU;EACtD,MAAM,eAAe,kBAAkB,eAAe,KAAK,UAAU;EAErE,MAAM,WAAW,mBAAmB,KAAK,MAAM,EAAE,GAAG;EAEpD,MAAM,cAAc,iBAAiB,IADV,IAAI,mBAAmB,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC,CACrB,CAAC;EAEnD,MAAM,eAAe;GACnB;GACA,KAAK,CAAC;GACN;GACA,MAAM,cAAc;GACpB,aAAa,MAAM,IAAI;EACzB;EAEA,OAAO;GACL,cAAc;GACd;GACA;GACA,eAAe;GACf;GACA;GACA,oBAAoB,IAAI,IAAI,mBAAmB,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;GACrE;GACA;GACA;GACA;EACF;CACF,CAAC;AACH"}

package/dist/infra/preflight.cjs

@@ -1,4 +1,3 @@
-const require_runtime = require('../_virtual/_rolldown/runtime.cjs');
 let effect = require("effect");
 let node_net = require("node:net");
 

package/dist/infra/preflight.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"preflight.cjs","names":["Effect"],"sources":["../../src/infra/preflight.ts"],"sourcesContent":["import { createConnection } from \"node:net\";\nimport { Effect } from \"effect\";\n\nexport interface PreflightTarget {\n  secret: string;\n  host: string;\n  port: number;\n  kind: \"postgres\" | \"redis\";\n  url: string;\n}\n\nexport interface PreflightFailure {\n  secret: string;\n  host: string;\n  port: number;\n  error: string;\n}\n\nfunction parseLocalUrl(url: string): { host: string; port: number } | null {\n  try {\n    const match = url.match(/:\\/\\/([^:/]+):(\\d+)/);\n    if (!match) return null;\n    const host = match[1];\n    const port = Number.parseInt(match[2], 10);\n    if (Number.isNaN(port)) return null;\n    if (host !== \"localhost\" && host !== \"127.0.0.1\") return null;\n    return { host, port };\n  } catch {\n    return null;\n  }\n}\n\nfunction checkTcpReachable(host: string, port: number, timeoutMs = 2000): Effect.Effect<boolean> {\n  return Effect.async<boolean>((resume) => {\n    const socket = createConnection({ host, port });\n    const timer = setTimeout(() => {\n      socket.destroy();\n      resume(Effect.succeed(false));\n    }, timeoutMs);\n\n    socket.once(\"connect\", () => {\n      clearTimeout(timer);\n      socket.destroy();\n      resume(Effect.succeed(true));\n    });\n\n    socket.once(\"error\", () => {\n      clearTimeout(timer);\n      socket.destroy();\n      resume(Effect.succeed(false));\n    });\n  });\n}\n\nfunction checkPgConnection(url: string): Effect.Effect<boolean> {\n  return Effect.gen(function* () {\n    const reachable = yield* checkTcpReachable(\n      new URL(url).hostname,\n      Number(new URL(url).port) || 5432,\n      4000,\n    );\n    if (!reachable) return false;\n\n    try {\n      const { Pool } = yield* Effect.promise(() => import(\"pg\"));\n      const pool = new Pool({ connectionString: url, connectionTimeoutMillis: 3000 });\n      const client = yield* Effect.promise(() => pool.connect().then((c) => ({ client: c, pool })));\n      try {\n        yield* Effect.promise(() => client.client.query(\"SELECT 1\"));\n        return true;\n      } finally {\n        client.client.release();\n        yield* Effect.promise(() => client.pool.end().catch(() => {}));\n      }\n    } catch {\n      return false;\n    }\n  });\n}\n\nfunction preflightTargetsFromEnv(env: Record<string, string>): PreflightTarget[] {\n  const targets: PreflightTarget[] = [];\n  for (const [secret, value] of Object.entries(env)) {\n    if (!value) continue;\n    if (secret.endsWith(\"_DATABASE_URL\")) {\n      const parsed = parseLocalUrl(value);\n      if (parsed) {\n        targets.push({\n          secret,\n          host: parsed.host,\n          port: parsed.port,\n          kind: \"postgres\",\n          url: value,\n        });\n      }\n    } else if (secret.endsWith(\"_REDIS_URL\")) {\n      const parsed = parseLocalUrl(value);\n      if (parsed) {\n        targets.push({ secret, host: parsed.host, port: parsed.port, kind: \"redis\", url: value });\n      }\n    }\n  }\n  return targets;\n}\n\nexport function preflightLocalInfra(\n  env: Record<string, string>,\n  overrides?: Record<string, string>,\n): Effect.Effect<PreflightFailure[], never> {\n  const merged = overrides ? { ...env, ...overrides } : env;\n  const targets = preflightTargetsFromEnv(merged);\n  if (targets.length === 0) return Effect.succeed([]);\n\n  return Effect.forEach(\n    targets,\n    (target) =>\n      Effect.gen(function* () {\n        if (target.kind === \"postgres\") {\n          const ok = yield* checkPgConnection(target.url);\n          if (ok) return null;\n          const tcpOk = yield* checkTcpReachable(target.host, target.port);\n          const pluginContext = target.secret.endsWith(\"_DATABASE_URL\")\n            ? ` The plugin for ${target.secret} runs inside the local host process, so this DB must be reachable. Run \\`docker compose up -d --wait\\` to start local Postgres/Redis.`\n            : \"\";\n          if (tcpOk) {\n            return {\n              secret: target.secret,\n              host: target.host,\n              port: target.port,\n              error: `${target.secret} at ${target.host}:${target.port} is reachable but Postgres connection failed. Check credentials and database name.${pluginContext}`,\n            } satisfies PreflightFailure;\n          }\n          return {\n            secret: target.secret,\n            host: target.host,\n            port: target.port,\n            error: `${target.secret} points to ${target.host}:${target.port} but nothing is listening.${pluginContext}`,\n          } satisfies PreflightFailure;\n        }\n\n        const reachable = yield* checkTcpReachable(target.host, target.port);\n        if (reachable) return null;\n        return {\n          secret: target.secret,\n          host: target.host,\n          port: target.port,\n          error: `${target.secret} points to ${target.host}:${target.port} but nothing is listening`,\n        } satisfies PreflightFailure;\n      }),\n    { concurrency: \"unbounded\" },\n  ).pipe(Effect.map((results) => results.filter((r): r is PreflightFailure => r !== null)));\n}\n"],"mappings":";;;;;AAkBA,SAAS,cAAc,KAAoD;AACzE,KAAI;EACF,MAAM,QAAQ,IAAI,MAAM,sBAAsB;AAC9C,MAAI,CAAC,MAAO,QAAO;EACnB,MAAM,OAAO,MAAM;EACnB,MAAM,OAAO,OAAO,SAAS,MAAM,IAAI,GAAG;AAC1C,MAAI,OAAO,MAAM,KAAK,CAAE,QAAO;AAC/B,MAAI,SAAS,eAAe,SAAS,YAAa,QAAO;AACzD,SAAO;GAAE;GAAM;GAAM;SACf;AACN,SAAO;;;AAIX,SAAS,kBAAkB,MAAc,MAAc,YAAY,KAA8B;AAC/F,QAAOA,cAAO,OAAgB,WAAW;EACvC,MAAM,wCAA0B;GAAE;GAAM;GAAM,CAAC;EAC/C,MAAM,QAAQ,iBAAiB;AAC7B,UAAO,SAAS;AAChB,UAAOA,cAAO,QAAQ,MAAM,CAAC;KAC5B,UAAU;AAEb,SAAO,KAAK,iBAAiB;AAC3B,gBAAa,MAAM;AACnB,UAAO,SAAS;AAChB,UAAOA,cAAO,QAAQ,KAAK,CAAC;IAC5B;AAEF,SAAO,KAAK,eAAe;AACzB,gBAAa,MAAM;AACnB,UAAO,SAAS;AAChB,UAAOA,cAAO,QAAQ,MAAM,CAAC;IAC7B;GACF;;AAGJ,SAAS,kBAAkB,KAAqC;AAC9D,QAAOA,cAAO,IAAI,aAAa;AAM7B,MAAI,EAAC,OALoB,kBACvB,IAAI,IAAI,IAAI,CAAC,UACb,OAAO,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,MAC7B,IACD,EACe,QAAO;AAEvB,MAAI;GACF,MAAM,EAAE,SAAS,OAAOA,cAAO,mDAAc,qCAAa;GAC1D,MAAM,OAAO,IAAI,KAAK;IAAE,kBAAkB;IAAK,yBAAyB;IAAM,CAAC;GAC/E,MAAM,SAAS,OAAOA,cAAO,cAAc,KAAK,SAAS,CAAC,MAAM,OAAO;IAAE,QAAQ;IAAG;IAAM,EAAE,CAAC;AAC7F,OAAI;AACF,WAAOA,cAAO,cAAc,OAAO,OAAO,MAAM,WAAW,CAAC;AAC5D,WAAO;aACC;AACR,WAAO,OAAO,SAAS;AACvB,WAAOA,cAAO,cAAc,OAAO,KAAK,KAAK,CAAC,YAAY,GAAG,CAAC;;UAE1D;AACN,UAAO;;GAET;;AAGJ,SAAS,wBAAwB,KAAgD;CAC/E,MAAM,UAA6B,EAAE;AACrC,MAAK,MAAM,CAAC,QAAQ,UAAU,OAAO,QAAQ,IAAI,EAAE;AACjD,MAAI,CAAC,MAAO;AACZ,MAAI,OAAO,SAAS,gBAAgB,EAAE;GACpC,MAAM,SAAS,cAAc,MAAM;AACnC,OAAI,OACF,SAAQ,KAAK;IACX;IACA,MAAM,OAAO;IACb,MAAM,OAAO;IACb,MAAM;IACN,KAAK;IACN,CAAC;aAEK,OAAO,SAAS,aAAa,EAAE;GACxC,MAAM,SAAS,cAAc,MAAM;AACnC,OAAI,OACF,SAAQ,KAAK;IAAE;IAAQ,MAAM,OAAO;IAAM,MAAM,OAAO;IAAM,MAAM;IAAS,KAAK;IAAO,CAAC;;;AAI/F,QAAO;;AAGT,SAAgB,oBACd,KACA,WAC0C;CAE1C,MAAM,UAAU,wBADD,YAAY;EAAE,GAAG;EAAK,GAAG;EAAW,GAAG,IACP;AAC/C,KAAI,QAAQ,WAAW,EAAG,QAAOA,cAAO,QAAQ,EAAE,CAAC;AAEnD,QAAOA,cAAO,QACZ,UACC,WACCA,cAAO,IAAI,aAAa;AACtB,MAAI,OAAO,SAAS,YAAY;AAE9B,OAAI,OADc,kBAAkB,OAAO,IAAI,CACvC,QAAO;GACf,MAAM,QAAQ,OAAO,kBAAkB,OAAO,MAAM,OAAO,KAAK;GAChE,MAAM,gBAAgB,OAAO,OAAO,SAAS,gBAAgB,GACzD,mBAAmB,OAAO,OAAO,yIACjC;AACJ,OAAI,MACF,QAAO;IACL,QAAQ,OAAO;IACf,MAAM,OAAO;IACb,MAAM,OAAO;IACb,OAAO,GAAG,OAAO,OAAO,MAAM,OAAO,KAAK,GAAG,OAAO,KAAK,oFAAoF;IAC9I;AAEH,UAAO;IACL,QAAQ,OAAO;IACf,MAAM,OAAO;IACb,MAAM,OAAO;IACb,OAAO,GAAG,OAAO,OAAO,aAAa,OAAO,KAAK,GAAG,OAAO,KAAK,4BAA4B;IAC7F;;AAIH,MAAI,OADqB,kBAAkB,OAAO,MAAM,OAAO,KAAK,CACrD,QAAO;AACtB,SAAO;GACL,QAAQ,OAAO;GACf,MAAM,OAAO;GACb,MAAM,OAAO;GACb,OAAO,GAAG,OAAO,OAAO,aAAa,OAAO,KAAK,GAAG,OAAO,KAAK;GACjE;GACD,EACJ,EAAE,aAAa,aAAa,CAC7B,CAAC,KAAKA,cAAO,KAAK,YAAY,QAAQ,QAAQ,MAA6B,MAAM,KAAK,CAAC,CAAC"}
+{"version":3,"file":"preflight.cjs","names":["Effect"],"sources":["../../src/infra/preflight.ts"],"sourcesContent":["import { createConnection } from \"node:net\";\nimport { Effect } from \"effect\";\n\nexport interface PreflightTarget {\n  secret: string;\n  host: string;\n  port: number;\n  kind: \"postgres\" | \"redis\";\n  url: string;\n}\n\nexport interface PreflightFailure {\n  secret: string;\n  host: string;\n  port: number;\n  error: string;\n}\n\nfunction parseLocalUrl(url: string): { host: string; port: number } | null {\n  try {\n    const match = url.match(/:\\/\\/([^:/]+):(\\d+)/);\n    if (!match) return null;\n    const host = match[1];\n    const port = Number.parseInt(match[2], 10);\n    if (Number.isNaN(port)) return null;\n    if (host !== \"localhost\" && host !== \"127.0.0.1\") return null;\n    return { host, port };\n  } catch {\n    return null;\n  }\n}\n\nfunction checkTcpReachable(host: string, port: number, timeoutMs = 2000): Effect.Effect<boolean> {\n  return Effect.async<boolean>((resume) => {\n    const socket = createConnection({ host, port });\n    const timer = setTimeout(() => {\n      socket.destroy();\n      resume(Effect.succeed(false));\n    }, timeoutMs);\n\n    socket.once(\"connect\", () => {\n      clearTimeout(timer);\n      socket.destroy();\n      resume(Effect.succeed(true));\n    });\n\n    socket.once(\"error\", () => {\n      clearTimeout(timer);\n      socket.destroy();\n      resume(Effect.succeed(false));\n    });\n  });\n}\n\nfunction checkPgConnection(url: string): Effect.Effect<boolean> {\n  return Effect.gen(function* () {\n    const reachable = yield* checkTcpReachable(\n      new URL(url).hostname,\n      Number(new URL(url).port) || 5432,\n      4000,\n    );\n    if (!reachable) return false;\n\n    try {\n      const { Pool } = yield* Effect.promise(() => import(\"pg\"));\n      const pool = new Pool({ connectionString: url, connectionTimeoutMillis: 3000 });\n      const client = yield* Effect.promise(() => pool.connect().then((c) => ({ client: c, pool })));\n      try {\n        yield* Effect.promise(() => client.client.query(\"SELECT 1\"));\n        return true;\n      } finally {\n        client.client.release();\n        yield* Effect.promise(() => client.pool.end().catch(() => {}));\n      }\n    } catch {\n      return false;\n    }\n  });\n}\n\nfunction preflightTargetsFromEnv(env: Record<string, string>): PreflightTarget[] {\n  const targets: PreflightTarget[] = [];\n  for (const [secret, value] of Object.entries(env)) {\n    if (!value) continue;\n    if (secret.endsWith(\"_DATABASE_URL\")) {\n      const parsed = parseLocalUrl(value);\n      if (parsed) {\n        targets.push({\n          secret,\n          host: parsed.host,\n          port: parsed.port,\n          kind: \"postgres\",\n          url: value,\n        });\n      }\n    } else if (secret.endsWith(\"_REDIS_URL\")) {\n      const parsed = parseLocalUrl(value);\n      if (parsed) {\n        targets.push({ secret, host: parsed.host, port: parsed.port, kind: \"redis\", url: value });\n      }\n    }\n  }\n  return targets;\n}\n\nexport function preflightLocalInfra(\n  env: Record<string, string>,\n  overrides?: Record<string, string>,\n): Effect.Effect<PreflightFailure[], never> {\n  const merged = overrides ? { ...env, ...overrides } : env;\n  const targets = preflightTargetsFromEnv(merged);\n  if (targets.length === 0) return Effect.succeed([]);\n\n  return Effect.forEach(\n    targets,\n    (target) =>\n      Effect.gen(function* () {\n        if (target.kind === \"postgres\") {\n          const ok = yield* checkPgConnection(target.url);\n          if (ok) return null;\n          const tcpOk = yield* checkTcpReachable(target.host, target.port);\n          const pluginContext = target.secret.endsWith(\"_DATABASE_URL\")\n            ? ` The plugin for ${target.secret} runs inside the local host process, so this DB must be reachable. Run \\`docker compose up -d --wait\\` to start local Postgres/Redis.`\n            : \"\";\n          if (tcpOk) {\n            return {\n              secret: target.secret,\n              host: target.host,\n              port: target.port,\n              error: `${target.secret} at ${target.host}:${target.port} is reachable but Postgres connection failed. Check credentials and database name.${pluginContext}`,\n            } satisfies PreflightFailure;\n          }\n          return {\n            secret: target.secret,\n            host: target.host,\n            port: target.port,\n            error: `${target.secret} points to ${target.host}:${target.port} but nothing is listening.${pluginContext}`,\n          } satisfies PreflightFailure;\n        }\n\n        const reachable = yield* checkTcpReachable(target.host, target.port);\n        if (reachable) return null;\n        return {\n          secret: target.secret,\n          host: target.host,\n          port: target.port,\n          error: `${target.secret} points to ${target.host}:${target.port} but nothing is listening`,\n        } satisfies PreflightFailure;\n      }),\n    { concurrency: \"unbounded\" },\n  ).pipe(Effect.map((results) => results.filter((r): r is PreflightFailure => r !== null)));\n}\n"],"mappings":";;;;AAkBA,SAAS,cAAc,KAAoD;CACzE,IAAI;EACF,MAAM,QAAQ,IAAI,MAAM,qBAAqB;EAC7C,IAAI,CAAC,OAAO,OAAO;EACnB,MAAM,OAAO,MAAM;EACnB,MAAM,OAAO,OAAO,SAAS,MAAM,IAAI,EAAE;EACzC,IAAI,OAAO,MAAM,IAAI,GAAG,OAAO;EAC/B,IAAI,SAAS,eAAe,SAAS,aAAa,OAAO;EACzD,OAAO;GAAE;GAAM;EAAK;CACtB,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,kBAAkB,MAAc,MAAc,YAAY,KAA8B;CAC/F,OAAOA,cAAO,OAAgB,WAAW;EACvC,MAAM,wCAA0B;GAAE;GAAM;EAAK,CAAC;EAC9C,MAAM,QAAQ,iBAAiB;GAC7B,OAAO,QAAQ;GACf,OAAOA,cAAO,QAAQ,KAAK,CAAC;EAC9B,GAAG,SAAS;EAEZ,OAAO,KAAK,iBAAiB;GAC3B,aAAa,KAAK;GAClB,OAAO,QAAQ;GACf,OAAOA,cAAO,QAAQ,IAAI,CAAC;EAC7B,CAAC;EAED,OAAO,KAAK,eAAe;GACzB,aAAa,KAAK;GAClB,OAAO,QAAQ;GACf,OAAOA,cAAO,QAAQ,KAAK,CAAC;EAC9B,CAAC;CACH,CAAC;AACH;AAEA,SAAS,kBAAkB,KAAqC;CAC9D,OAAOA,cAAO,IAAI,aAAa;EAM7B,IAAI,EAAC,OALoB,kBACvB,IAAI,IAAI,GAAG,CAAC,CAAC,UACb,OAAO,IAAI,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,MAC7B,GACF,IACgB,OAAO;EAEvB,IAAI;GACF,MAAM,EAAE,SAAS,OAAOA,cAAO,mDAAc,oCAAY;GACzD,MAAM,OAAO,IAAI,KAAK;IAAE,kBAAkB;IAAK,yBAAyB;GAAK,CAAC;GAC9E,MAAM,SAAS,OAAOA,cAAO,cAAc,KAAK,QAAQ,CAAC,CAAC,MAAM,OAAO;IAAE,QAAQ;IAAG;GAAK,EAAE,CAAC;GAC5F,IAAI;IACF,OAAOA,cAAO,cAAc,OAAO,OAAO,MAAM,UAAU,CAAC;IAC3D,OAAO;GACT,UAAU;IACR,OAAO,OAAO,QAAQ;IACtB,OAAOA,cAAO,cAAc,OAAO,KAAK,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;GAC/D;EACF,QAAQ;GACN,OAAO;EACT;CACF,CAAC;AACH;AAEA,SAAS,wBAAwB,KAAgD;CAC/E,MAAM,UAA6B,CAAC;CACpC,KAAK,MAAM,CAAC,QAAQ,UAAU,OAAO,QAAQ,GAAG,GAAG;EACjD,IAAI,CAAC,OAAO;EACZ,IAAI,OAAO,SAAS,eAAe,GAAG;GACpC,MAAM,SAAS,cAAc,KAAK;GAClC,IAAI,QACF,QAAQ,KAAK;IACX;IACA,MAAM,OAAO;IACb,MAAM,OAAO;IACb,MAAM;IACN,KAAK;GACP,CAAC;EAEL,OAAO,IAAI,OAAO,SAAS,YAAY,GAAG;GACxC,MAAM,SAAS,cAAc,KAAK;GAClC,IAAI,QACF,QAAQ,KAAK;IAAE;IAAQ,MAAM,OAAO;IAAM,MAAM,OAAO;IAAM,MAAM;IAAS,KAAK;GAAM,CAAC;EAE5F;CACF;CACA,OAAO;AACT;AAEA,SAAgB,oBACd,KACA,WAC0C;CAE1C,MAAM,UAAU,wBADD,YAAY;EAAE,GAAG;EAAK,GAAG;CAAU,IAAI,GACR;CAC9C,IAAI,QAAQ,WAAW,GAAG,OAAOA,cAAO,QAAQ,CAAC,CAAC;CAElD,OAAOA,cAAO,QACZ,UACC,WACCA,cAAO,IAAI,aAAa;EACtB,IAAI,OAAO,SAAS,YAAY;GAE9B,IAAI,OADc,kBAAkB,OAAO,GAAG,GACtC,OAAO;GACf,MAAM,QAAQ,OAAO,kBAAkB,OAAO,MAAM,OAAO,IAAI;GAC/D,MAAM,gBAAgB,OAAO,OAAO,SAAS,eAAe,IACxD,mBAAmB,OAAO,OAAO,yIACjC;GACJ,IAAI,OACF,OAAO;IACL,QAAQ,OAAO;IACf,MAAM,OAAO;IACb,MAAM,OAAO;IACb,OAAO,GAAG,OAAO,OAAO,MAAM,OAAO,KAAK,GAAG,OAAO,KAAK,oFAAoF;GAC/I;GAEF,OAAO;IACL,QAAQ,OAAO;IACf,MAAM,OAAO;IACb,MAAM,OAAO;IACb,OAAO,GAAG,OAAO,OAAO,aAAa,OAAO,KAAK,GAAG,OAAO,KAAK,4BAA4B;GAC9F;EACF;EAGA,IAAI,OADqB,kBAAkB,OAAO,MAAM,OAAO,IAAI,GACpD,OAAO;EACtB,OAAO;GACL,QAAQ,OAAO;GACf,MAAM,OAAO;GACb,MAAM,OAAO;GACb,OAAO,GAAG,OAAO,OAAO,aAAa,OAAO,KAAK,GAAG,OAAO,KAAK;EAClE;CACF,CAAC,GACH,EAAE,aAAa,YAAY,CAC7B,CAAC,CAAC,KAAKA,cAAO,KAAK,YAAY,QAAQ,QAAQ,MAA6B,MAAM,IAAI,CAAC,CAAC;AAC1F"}

package/dist/infra/preflight.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"preflight.mjs","names":[],"sources":["../../src/infra/preflight.ts"],"sourcesContent":["import { createConnection } from \"node:net\";\nimport { Effect } from \"effect\";\n\nexport interface PreflightTarget {\n  secret: string;\n  host: string;\n  port: number;\n  kind: \"postgres\" | \"redis\";\n  url: string;\n}\n\nexport interface PreflightFailure {\n  secret: string;\n  host: string;\n  port: number;\n  error: string;\n}\n\nfunction parseLocalUrl(url: string): { host: string; port: number } | null {\n  try {\n    const match = url.match(/:\\/\\/([^:/]+):(\\d+)/);\n    if (!match) return null;\n    const host = match[1];\n    const port = Number.parseInt(match[2], 10);\n    if (Number.isNaN(port)) return null;\n    if (host !== \"localhost\" && host !== \"127.0.0.1\") return null;\n    return { host, port };\n  } catch {\n    return null;\n  }\n}\n\nfunction checkTcpReachable(host: string, port: number, timeoutMs = 2000): Effect.Effect<boolean> {\n  return Effect.async<boolean>((resume) => {\n    const socket = createConnection({ host, port });\n    const timer = setTimeout(() => {\n      socket.destroy();\n      resume(Effect.succeed(false));\n    }, timeoutMs);\n\n    socket.once(\"connect\", () => {\n      clearTimeout(timer);\n      socket.destroy();\n      resume(Effect.succeed(true));\n    });\n\n    socket.once(\"error\", () => {\n      clearTimeout(timer);\n      socket.destroy();\n      resume(Effect.succeed(false));\n    });\n  });\n}\n\nfunction checkPgConnection(url: string): Effect.Effect<boolean> {\n  return Effect.gen(function* () {\n    const reachable = yield* checkTcpReachable(\n      new URL(url).hostname,\n      Number(new URL(url).port) || 5432,\n      4000,\n    );\n    if (!reachable) return false;\n\n    try {\n      const { Pool } = yield* Effect.promise(() => import(\"pg\"));\n      const pool = new Pool({ connectionString: url, connectionTimeoutMillis: 3000 });\n      const client = yield* Effect.promise(() => pool.connect().then((c) => ({ client: c, pool })));\n      try {\n        yield* Effect.promise(() => client.client.query(\"SELECT 1\"));\n        return true;\n      } finally {\n        client.client.release();\n        yield* Effect.promise(() => client.pool.end().catch(() => {}));\n      }\n    } catch {\n      return false;\n    }\n  });\n}\n\nfunction preflightTargetsFromEnv(env: Record<string, string>): PreflightTarget[] {\n  const targets: PreflightTarget[] = [];\n  for (const [secret, value] of Object.entries(env)) {\n    if (!value) continue;\n    if (secret.endsWith(\"_DATABASE_URL\")) {\n      const parsed = parseLocalUrl(value);\n      if (parsed) {\n        targets.push({\n          secret,\n          host: parsed.host,\n          port: parsed.port,\n          kind: \"postgres\",\n          url: value,\n        });\n      }\n    } else if (secret.endsWith(\"_REDIS_URL\")) {\n      const parsed = parseLocalUrl(value);\n      if (parsed) {\n        targets.push({ secret, host: parsed.host, port: parsed.port, kind: \"redis\", url: value });\n      }\n    }\n  }\n  return targets;\n}\n\nexport function preflightLocalInfra(\n  env: Record<string, string>,\n  overrides?: Record<string, string>,\n): Effect.Effect<PreflightFailure[], never> {\n  const merged = overrides ? { ...env, ...overrides } : env;\n  const targets = preflightTargetsFromEnv(merged);\n  if (targets.length === 0) return Effect.succeed([]);\n\n  return Effect.forEach(\n    targets,\n    (target) =>\n      Effect.gen(function* () {\n        if (target.kind === \"postgres\") {\n          const ok = yield* checkPgConnection(target.url);\n          if (ok) return null;\n          const tcpOk = yield* checkTcpReachable(target.host, target.port);\n          const pluginContext = target.secret.endsWith(\"_DATABASE_URL\")\n            ? ` The plugin for ${target.secret} runs inside the local host process, so this DB must be reachable. Run \\`docker compose up -d --wait\\` to start local Postgres/Redis.`\n            : \"\";\n          if (tcpOk) {\n            return {\n              secret: target.secret,\n              host: target.host,\n              port: target.port,\n              error: `${target.secret} at ${target.host}:${target.port} is reachable but Postgres connection failed. Check credentials and database name.${pluginContext}`,\n            } satisfies PreflightFailure;\n          }\n          return {\n            secret: target.secret,\n            host: target.host,\n            port: target.port,\n            error: `${target.secret} points to ${target.host}:${target.port} but nothing is listening.${pluginContext}`,\n          } satisfies PreflightFailure;\n        }\n\n        const reachable = yield* checkTcpReachable(target.host, target.port);\n        if (reachable) return null;\n        return {\n          secret: target.secret,\n          host: target.host,\n          port: target.port,\n          error: `${target.secret} points to ${target.host}:${target.port} but nothing is listening`,\n        } satisfies PreflightFailure;\n      }),\n    { concurrency: \"unbounded\" },\n  ).pipe(Effect.map((results) => results.filter((r): r is PreflightFailure => r !== null)));\n}\n"],"mappings":";;;;AAkBA,SAAS,cAAc,KAAoD;AACzE,KAAI;EACF,MAAM,QAAQ,IAAI,MAAM,sBAAsB;AAC9C,MAAI,CAAC,MAAO,QAAO;EACnB,MAAM,OAAO,MAAM;EACnB,MAAM,OAAO,OAAO,SAAS,MAAM,IAAI,GAAG;AAC1C,MAAI,OAAO,MAAM,KAAK,CAAE,QAAO;AAC/B,MAAI,SAAS,eAAe,SAAS,YAAa,QAAO;AACzD,SAAO;GAAE;GAAM;GAAM;SACf;AACN,SAAO;;;AAIX,SAAS,kBAAkB,MAAc,MAAc,YAAY,KAA8B;AAC/F,QAAO,OAAO,OAAgB,WAAW;EACvC,MAAM,SAAS,iBAAiB;GAAE;GAAM;GAAM,CAAC;EAC/C,MAAM,QAAQ,iBAAiB;AAC7B,UAAO,SAAS;AAChB,UAAO,OAAO,QAAQ,MAAM,CAAC;KAC5B,UAAU;AAEb,SAAO,KAAK,iBAAiB;AAC3B,gBAAa,MAAM;AACnB,UAAO,SAAS;AAChB,UAAO,OAAO,QAAQ,KAAK,CAAC;IAC5B;AAEF,SAAO,KAAK,eAAe;AACzB,gBAAa,MAAM;AACnB,UAAO,SAAS;AAChB,UAAO,OAAO,QAAQ,MAAM,CAAC;IAC7B;GACF;;AAGJ,SAAS,kBAAkB,KAAqC;AAC9D,QAAO,OAAO,IAAI,aAAa;AAM7B,MAAI,EAAC,OALoB,kBACvB,IAAI,IAAI,IAAI,CAAC,UACb,OAAO,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,MAC7B,IACD,EACe,QAAO;AAEvB,MAAI;GACF,MAAM,EAAE,SAAS,OAAO,OAAO,cAAc,OAAO,oCAAM;GAC1D,MAAM,OAAO,IAAI,KAAK;IAAE,kBAAkB;IAAK,yBAAyB;IAAM,CAAC;GAC/E,MAAM,SAAS,OAAO,OAAO,cAAc,KAAK,SAAS,CAAC,MAAM,OAAO;IAAE,QAAQ;IAAG;IAAM,EAAE,CAAC;AAC7F,OAAI;AACF,WAAO,OAAO,cAAc,OAAO,OAAO,MAAM,WAAW,CAAC;AAC5D,WAAO;aACC;AACR,WAAO,OAAO,SAAS;AACvB,WAAO,OAAO,cAAc,OAAO,KAAK,KAAK,CAAC,YAAY,GAAG,CAAC;;UAE1D;AACN,UAAO;;GAET;;AAGJ,SAAS,wBAAwB,KAAgD;CAC/E,MAAM,UAA6B,EAAE;AACrC,MAAK,MAAM,CAAC,QAAQ,UAAU,OAAO,QAAQ,IAAI,EAAE;AACjD,MAAI,CAAC,MAAO;AACZ,MAAI,OAAO,SAAS,gBAAgB,EAAE;GACpC,MAAM,SAAS,cAAc,MAAM;AACnC,OAAI,OACF,SAAQ,KAAK;IACX;IACA,MAAM,OAAO;IACb,MAAM,OAAO;IACb,MAAM;IACN,KAAK;IACN,CAAC;aAEK,OAAO,SAAS,aAAa,EAAE;GACxC,MAAM,SAAS,cAAc,MAAM;AACnC,OAAI,OACF,SAAQ,KAAK;IAAE;IAAQ,MAAM,OAAO;IAAM,MAAM,OAAO;IAAM,MAAM;IAAS,KAAK;IAAO,CAAC;;;AAI/F,QAAO;;AAGT,SAAgB,oBACd,KACA,WAC0C;CAE1C,MAAM,UAAU,wBADD,YAAY;EAAE,GAAG;EAAK,GAAG;EAAW,GAAG,IACP;AAC/C,KAAI,QAAQ,WAAW,EAAG,QAAO,OAAO,QAAQ,EAAE,CAAC;AAEnD,QAAO,OAAO,QACZ,UACC,WACC,OAAO,IAAI,aAAa;AACtB,MAAI,OAAO,SAAS,YAAY;AAE9B,OAAI,OADc,kBAAkB,OAAO,IAAI,CACvC,QAAO;GACf,MAAM,QAAQ,OAAO,kBAAkB,OAAO,MAAM,OAAO,KAAK;GAChE,MAAM,gBAAgB,OAAO,OAAO,SAAS,gBAAgB,GACzD,mBAAmB,OAAO,OAAO,yIACjC;AACJ,OAAI,MACF,QAAO;IACL,QAAQ,OAAO;IACf,MAAM,OAAO;IACb,MAAM,OAAO;IACb,OAAO,GAAG,OAAO,OAAO,MAAM,OAAO,KAAK,GAAG,OAAO,KAAK,oFAAoF;IAC9I;AAEH,UAAO;IACL,QAAQ,OAAO;IACf,MAAM,OAAO;IACb,MAAM,OAAO;IACb,OAAO,GAAG,OAAO,OAAO,aAAa,OAAO,KAAK,GAAG,OAAO,KAAK,4BAA4B;IAC7F;;AAIH,MAAI,OADqB,kBAAkB,OAAO,MAAM,OAAO,KAAK,CACrD,QAAO;AACtB,SAAO;GACL,QAAQ,OAAO;GACf,MAAM,OAAO;GACb,MAAM,OAAO;GACb,OAAO,GAAG,OAAO,OAAO,aAAa,OAAO,KAAK,GAAG,OAAO,KAAK;GACjE;GACD,EACJ,EAAE,aAAa,aAAa,CAC7B,CAAC,KAAK,OAAO,KAAK,YAAY,QAAQ,QAAQ,MAA6B,MAAM,KAAK,CAAC,CAAC"}
+{"version":3,"file":"preflight.mjs","names":[],"sources":["../../src/infra/preflight.ts"],"sourcesContent":["import { createConnection } from \"node:net\";\nimport { Effect } from \"effect\";\n\nexport interface PreflightTarget {\n  secret: string;\n  host: string;\n  port: number;\n  kind: \"postgres\" | \"redis\";\n  url: string;\n}\n\nexport interface PreflightFailure {\n  secret: string;\n  host: string;\n  port: number;\n  error: string;\n}\n\nfunction parseLocalUrl(url: string): { host: string; port: number } | null {\n  try {\n    const match = url.match(/:\\/\\/([^:/]+):(\\d+)/);\n    if (!match) return null;\n    const host = match[1];\n    const port = Number.parseInt(match[2], 10);\n    if (Number.isNaN(port)) return null;\n    if (host !== \"localhost\" && host !== \"127.0.0.1\") return null;\n    return { host, port };\n  } catch {\n    return null;\n  }\n}\n\nfunction checkTcpReachable(host: string, port: number, timeoutMs = 2000): Effect.Effect<boolean> {\n  return Effect.async<boolean>((resume) => {\n    const socket = createConnection({ host, port });\n    const timer = setTimeout(() => {\n      socket.destroy();\n      resume(Effect.succeed(false));\n    }, timeoutMs);\n\n    socket.once(\"connect\", () => {\n      clearTimeout(timer);\n      socket.destroy();\n      resume(Effect.succeed(true));\n    });\n\n    socket.once(\"error\", () => {\n      clearTimeout(timer);\n      socket.destroy();\n      resume(Effect.succeed(false));\n    });\n  });\n}\n\nfunction checkPgConnection(url: string): Effect.Effect<boolean> {\n  return Effect.gen(function* () {\n    const reachable = yield* checkTcpReachable(\n      new URL(url).hostname,\n      Number(new URL(url).port) || 5432,\n      4000,\n    );\n    if (!reachable) return false;\n\n    try {\n      const { Pool } = yield* Effect.promise(() => import(\"pg\"));\n      const pool = new Pool({ connectionString: url, connectionTimeoutMillis: 3000 });\n      const client = yield* Effect.promise(() => pool.connect().then((c) => ({ client: c, pool })));\n      try {\n        yield* Effect.promise(() => client.client.query(\"SELECT 1\"));\n        return true;\n      } finally {\n        client.client.release();\n        yield* Effect.promise(() => client.pool.end().catch(() => {}));\n      }\n    } catch {\n      return false;\n    }\n  });\n}\n\nfunction preflightTargetsFromEnv(env: Record<string, string>): PreflightTarget[] {\n  const targets: PreflightTarget[] = [];\n  for (const [secret, value] of Object.entries(env)) {\n    if (!value) continue;\n    if (secret.endsWith(\"_DATABASE_URL\")) {\n      const parsed = parseLocalUrl(value);\n      if (parsed) {\n        targets.push({\n          secret,\n          host: parsed.host,\n          port: parsed.port,\n          kind: \"postgres\",\n          url: value,\n        });\n      }\n    } else if (secret.endsWith(\"_REDIS_URL\")) {\n      const parsed = parseLocalUrl(value);\n      if (parsed) {\n        targets.push({ secret, host: parsed.host, port: parsed.port, kind: \"redis\", url: value });\n      }\n    }\n  }\n  return targets;\n}\n\nexport function preflightLocalInfra(\n  env: Record<string, string>,\n  overrides?: Record<string, string>,\n): Effect.Effect<PreflightFailure[], never> {\n  const merged = overrides ? { ...env, ...overrides } : env;\n  const targets = preflightTargetsFromEnv(merged);\n  if (targets.length === 0) return Effect.succeed([]);\n\n  return Effect.forEach(\n    targets,\n    (target) =>\n      Effect.gen(function* () {\n        if (target.kind === \"postgres\") {\n          const ok = yield* checkPgConnection(target.url);\n          if (ok) return null;\n          const tcpOk = yield* checkTcpReachable(target.host, target.port);\n          const pluginContext = target.secret.endsWith(\"_DATABASE_URL\")\n            ? ` The plugin for ${target.secret} runs inside the local host process, so this DB must be reachable. Run \\`docker compose up -d --wait\\` to start local Postgres/Redis.`\n            : \"\";\n          if (tcpOk) {\n            return {\n              secret: target.secret,\n              host: target.host,\n              port: target.port,\n              error: `${target.secret} at ${target.host}:${target.port} is reachable but Postgres connection failed. Check credentials and database name.${pluginContext}`,\n            } satisfies PreflightFailure;\n          }\n          return {\n            secret: target.secret,\n            host: target.host,\n            port: target.port,\n            error: `${target.secret} points to ${target.host}:${target.port} but nothing is listening.${pluginContext}`,\n          } satisfies PreflightFailure;\n        }\n\n        const reachable = yield* checkTcpReachable(target.host, target.port);\n        if (reachable) return null;\n        return {\n          secret: target.secret,\n          host: target.host,\n          port: target.port,\n          error: `${target.secret} points to ${target.host}:${target.port} but nothing is listening`,\n        } satisfies PreflightFailure;\n      }),\n    { concurrency: \"unbounded\" },\n  ).pipe(Effect.map((results) => results.filter((r): r is PreflightFailure => r !== null)));\n}\n"],"mappings":";;;;AAkBA,SAAS,cAAc,KAAoD;CACzE,IAAI;EACF,MAAM,QAAQ,IAAI,MAAM,qBAAqB;EAC7C,IAAI,CAAC,OAAO,OAAO;EACnB,MAAM,OAAO,MAAM;EACnB,MAAM,OAAO,OAAO,SAAS,MAAM,IAAI,EAAE;EACzC,IAAI,OAAO,MAAM,IAAI,GAAG,OAAO;EAC/B,IAAI,SAAS,eAAe,SAAS,aAAa,OAAO;EACzD,OAAO;GAAE;GAAM;EAAK;CACtB,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,kBAAkB,MAAc,MAAc,YAAY,KAA8B;CAC/F,OAAO,OAAO,OAAgB,WAAW;EACvC,MAAM,SAAS,iBAAiB;GAAE;GAAM;EAAK,CAAC;EAC9C,MAAM,QAAQ,iBAAiB;GAC7B,OAAO,QAAQ;GACf,OAAO,OAAO,QAAQ,KAAK,CAAC;EAC9B,GAAG,SAAS;EAEZ,OAAO,KAAK,iBAAiB;GAC3B,aAAa,KAAK;GAClB,OAAO,QAAQ;GACf,OAAO,OAAO,QAAQ,IAAI,CAAC;EAC7B,CAAC;EAED,OAAO,KAAK,eAAe;GACzB,aAAa,KAAK;GAClB,OAAO,QAAQ;GACf,OAAO,OAAO,QAAQ,KAAK,CAAC;EAC9B,CAAC;CACH,CAAC;AACH;AAEA,SAAS,kBAAkB,KAAqC;CAC9D,OAAO,OAAO,IAAI,aAAa;EAM7B,IAAI,EAAC,OALoB,kBACvB,IAAI,IAAI,GAAG,CAAC,CAAC,UACb,OAAO,IAAI,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,MAC7B,GACF,IACgB,OAAO;EAEvB,IAAI;GACF,MAAM,EAAE,SAAS,OAAO,OAAO,cAAc,OAAO,mCAAK;GACzD,MAAM,OAAO,IAAI,KAAK;IAAE,kBAAkB;IAAK,yBAAyB;GAAK,CAAC;GAC9E,MAAM,SAAS,OAAO,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC,MAAM,OAAO;IAAE,QAAQ;IAAG;GAAK,EAAE,CAAC;GAC5F,IAAI;IACF,OAAO,OAAO,cAAc,OAAO,OAAO,MAAM,UAAU,CAAC;IAC3D,OAAO;GACT,UAAU;IACR,OAAO,OAAO,QAAQ;IACtB,OAAO,OAAO,cAAc,OAAO,KAAK,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;GAC/D;EACF,QAAQ;GACN,OAAO;EACT;CACF,CAAC;AACH;AAEA,SAAS,wBAAwB,KAAgD;CAC/E,MAAM,UAA6B,CAAC;CACpC,KAAK,MAAM,CAAC,QAAQ,UAAU,OAAO,QAAQ,GAAG,GAAG;EACjD,IAAI,CAAC,OAAO;EACZ,IAAI,OAAO,SAAS,eAAe,GAAG;GACpC,MAAM,SAAS,cAAc,KAAK;GAClC,IAAI,QACF,QAAQ,KAAK;IACX;IACA,MAAM,OAAO;IACb,MAAM,OAAO;IACb,MAAM;IACN,KAAK;GACP,CAAC;EAEL,OAAO,IAAI,OAAO,SAAS,YAAY,GAAG;GACxC,MAAM,SAAS,cAAc,KAAK;GAClC,IAAI,QACF,QAAQ,KAAK;IAAE;IAAQ,MAAM,OAAO;IAAM,MAAM,OAAO;IAAM,MAAM;IAAS,KAAK;GAAM,CAAC;EAE5F;CACF;CACA,OAAO;AACT;AAEA,SAAgB,oBACd,KACA,WAC0C;CAE1C,MAAM,UAAU,wBADD,YAAY;EAAE,GAAG;EAAK,GAAG;CAAU,IAAI,GACR;CAC9C,IAAI,QAAQ,WAAW,GAAG,OAAO,OAAO,QAAQ,CAAC,CAAC;CAElD,OAAO,OAAO,QACZ,UACC,WACC,OAAO,IAAI,aAAa;EACtB,IAAI,OAAO,SAAS,YAAY;GAE9B,IAAI,OADc,kBAAkB,OAAO,GAAG,GACtC,OAAO;GACf,MAAM,QAAQ,OAAO,kBAAkB,OAAO,MAAM,OAAO,IAAI;GAC/D,MAAM,gBAAgB,OAAO,OAAO,SAAS,eAAe,IACxD,mBAAmB,OAAO,OAAO,yIACjC;GACJ,IAAI,OACF,OAAO;IACL,QAAQ,OAAO;IACf,MAAM,OAAO;IACb,MAAM,OAAO;IACb,OAAO,GAAG,OAAO,OAAO,MAAM,OAAO,KAAK,GAAG,OAAO,KAAK,oFAAoF;GAC/I;GAEF,OAAO;IACL,QAAQ,OAAO;IACf,MAAM,OAAO;IACb,MAAM,OAAO;IACb,OAAO,GAAG,OAAO,OAAO,aAAa,OAAO,KAAK,GAAG,OAAO,KAAK,4BAA4B;GAC9F;EACF;EAGA,IAAI,OADqB,kBAAkB,OAAO,MAAM,OAAO,IAAI,GACpD,OAAO;EACtB,OAAO;GACL,QAAQ,OAAO;GACf,MAAM,OAAO;GACb,MAAM,OAAO;GACb,OAAO,GAAG,OAAO,OAAO,aAAa,OAAO,KAAK,GAAG,OAAO,KAAK;EAClE;CACF,CAAC,GACH,EAAE,aAAa,YAAY,CAC7B,CAAC,CAAC,KAAK,OAAO,KAAK,YAAY,QAAQ,QAAQ,MAA6B,MAAM,IAAI,CAAC,CAAC;AAC1F"}

package/dist/infra/types.cjs

@@ -1,4 +1,3 @@
-const require_runtime = require('../_virtual/_rolldown/runtime.cjs');
 let effect = require("effect");
 
 //#region src/infra/types.ts

package/dist/infra/types.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"types.cjs","names":["Data"],"sources":["../../src/infra/types.ts"],"sourcesContent":["import { Data } from \"effect\";\nimport type { AppOrchestrator } from \"../service-descriptor\";\nimport type { RuntimeConfig } from \"../types\";\n\nexport interface CliPorts {\n  host?: number;\n  api?: number;\n  auth?: number;\n  ui?: number;\n  uiSsr?: number;\n  pluginsStart?: number;\n  plugins?: Record<string, { api?: number; ui?: number }>;\n}\n\nexport interface ResolvedPorts {\n  host?: number;\n  api?: number;\n  auth?: number;\n  ui?: number;\n  uiSsr?: number;\n  plugins: Record<string, { api?: number; ui?: number }>;\n  postgres: Record<string, number>;\n  redis: Record<string, number>;\n}\n\nexport interface RuntimeLaunchSpec {\n  port?: number;\n  hostUrl?: string;\n  corsOrigin?: string;\n  trustedOrigins?: string[];\n  env: Record<string, string>;\n  runtimeConfig: RuntimeConfig;\n}\n\nexport interface ClaimRecord {\n  resourceKey: string;\n  pid: number;\n  configDir: string;\n  ports: Record<string, number>;\n  startedAt: number;\n}\n\nexport interface InfraPlan {\n  workspaceKey: string;\n  cliPorts: CliPorts;\n  resolvedPorts: ResolvedPorts;\n  runtimeConfig: RuntimeConfig;\n  launch: RuntimeLaunchSpec;\n  description: string;\n  serviceDescriptors: Map<string, ServiceDescriptorPlan>;\n  envGenerated: Record<string, string>;\n  composeModel: ComposeModelPlan;\n  claims: ClaimRecord[];\n  orchestrator: AppOrchestrator;\n}\n\nexport interface ServiceDescriptorPlan {\n  key: string;\n  source: \"local\" | \"remote\";\n  url: string;\n  port?: number;\n  localPath?: string;\n}\n\nexport interface ComposeModelPlan {\n  databases: DatabasePlan[];\n  redis: RedisPlan[];\n}\n\nexport interface DatabasePlan {\n  secret: string;\n  slug: string;\n  port: number;\n  dbName: string;\n  containerName: string;\n  volumeName: string;\n  url: string;\n}\n\nexport interface RedisPlan {\n  secret: string;\n  slug: string;\n  port: number;\n  containerName: string;\n  volumeName: string;\n  url: string;\n}\n\nexport type InfraPhase =\n  | \"resolve-config\"\n  | \"allocate-services\"\n  | \"allocate-databases\"\n  | \"claim\"\n  | \"materialize-env\"\n  | \"materialize-compose\"\n  | \"launch\";\n\nexport class InfraError extends Data.TaggedError(\"InfraError\")<{\n  phase: InfraPhase;\n  message: string;\n  cause?: unknown;\n}> {}\n\nexport interface InfraInput {\n  configDir: string;\n  bosConfig: RuntimeConfig;\n  cli: {\n    port?: number;\n    apiPort?: number;\n    authPort?: number;\n    uiPort?: number;\n    pluginPortStart?: number;\n    plugins?: Record<string, { api?: number; ui?: number }>;\n    ssr?: boolean;\n    proxy?: boolean;\n    hostSource?: \"local\" | \"remote\";\n    uiSource?: \"local\" | \"remote\";\n    apiSource?: \"local\" | \"remote\";\n    authSource?: \"local\" | \"remote\";\n    interactive?: boolean;\n  };\n}\n"],"mappings":";;;;AAiGA,IAAa,aAAb,cAAgCA,YAAK,YAAY,aAAa,CAI3D"}
+{"version":3,"file":"types.cjs","names":["Data"],"sources":["../../src/infra/types.ts"],"sourcesContent":["import { Data } from \"effect\";\nimport type { AppOrchestrator } from \"../service-descriptor\";\nimport type { RuntimeConfig } from \"../types\";\n\nexport interface CliPorts {\n  host?: number;\n  api?: number;\n  auth?: number;\n  ui?: number;\n  uiSsr?: number;\n  pluginsStart?: number;\n  plugins?: Record<string, { api?: number; ui?: number }>;\n}\n\nexport interface ResolvedPorts {\n  host?: number;\n  api?: number;\n  auth?: number;\n  ui?: number;\n  uiSsr?: number;\n  plugins: Record<string, { api?: number; ui?: number }>;\n  postgres: Record<string, number>;\n  redis: Record<string, number>;\n}\n\nexport interface RuntimeLaunchSpec {\n  port?: number;\n  hostUrl?: string;\n  corsOrigin?: string;\n  trustedOrigins?: string[];\n  env: Record<string, string>;\n  runtimeConfig: RuntimeConfig;\n}\n\nexport interface ClaimRecord {\n  resourceKey: string;\n  pid: number;\n  configDir: string;\n  ports: Record<string, number>;\n  startedAt: number;\n}\n\nexport interface InfraPlan {\n  workspaceKey: string;\n  cliPorts: CliPorts;\n  resolvedPorts: ResolvedPorts;\n  runtimeConfig: RuntimeConfig;\n  launch: RuntimeLaunchSpec;\n  description: string;\n  serviceDescriptors: Map<string, ServiceDescriptorPlan>;\n  envGenerated: Record<string, string>;\n  composeModel: ComposeModelPlan;\n  claims: ClaimRecord[];\n  orchestrator: AppOrchestrator;\n}\n\nexport interface ServiceDescriptorPlan {\n  key: string;\n  source: \"local\" | \"remote\";\n  url: string;\n  port?: number;\n  localPath?: string;\n}\n\nexport interface ComposeModelPlan {\n  databases: DatabasePlan[];\n  redis: RedisPlan[];\n}\n\nexport interface DatabasePlan {\n  secret: string;\n  slug: string;\n  port: number;\n  dbName: string;\n  containerName: string;\n  volumeName: string;\n  url: string;\n}\n\nexport interface RedisPlan {\n  secret: string;\n  slug: string;\n  port: number;\n  containerName: string;\n  volumeName: string;\n  url: string;\n}\n\nexport type InfraPhase =\n  | \"resolve-config\"\n  | \"allocate-services\"\n  | \"allocate-databases\"\n  | \"claim\"\n  | \"materialize-env\"\n  | \"materialize-compose\"\n  | \"launch\";\n\nexport class InfraError extends Data.TaggedError(\"InfraError\")<{\n  phase: InfraPhase;\n  message: string;\n  cause?: unknown;\n}> {}\n\nexport interface InfraInput {\n  configDir: string;\n  bosConfig: RuntimeConfig;\n  cli: {\n    port?: number;\n    apiPort?: number;\n    authPort?: number;\n    uiPort?: number;\n    pluginPortStart?: number;\n    plugins?: Record<string, { api?: number; ui?: number }>;\n    ssr?: boolean;\n    proxy?: boolean;\n    hostSource?: \"local\" | \"remote\";\n    uiSource?: \"local\" | \"remote\";\n    apiSource?: \"local\" | \"remote\";\n    authSource?: \"local\" | \"remote\";\n    interactive?: boolean;\n  };\n}\n"],"mappings":";;;AAiGA,IAAa,aAAb,cAAgCA,YAAK,YAAY,YAAY,CAAC,CAI3D,CAAC"}

package/dist/infra/types.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"types.mjs","names":[],"sources":["../../src/infra/types.ts"],"sourcesContent":["import { Data } from \"effect\";\nimport type { AppOrchestrator } from \"../service-descriptor\";\nimport type { RuntimeConfig } from \"../types\";\n\nexport interface CliPorts {\n  host?: number;\n  api?: number;\n  auth?: number;\n  ui?: number;\n  uiSsr?: number;\n  pluginsStart?: number;\n  plugins?: Record<string, { api?: number; ui?: number }>;\n}\n\nexport interface ResolvedPorts {\n  host?: number;\n  api?: number;\n  auth?: number;\n  ui?: number;\n  uiSsr?: number;\n  plugins: Record<string, { api?: number; ui?: number }>;\n  postgres: Record<string, number>;\n  redis: Record<string, number>;\n}\n\nexport interface RuntimeLaunchSpec {\n  port?: number;\n  hostUrl?: string;\n  corsOrigin?: string;\n  trustedOrigins?: string[];\n  env: Record<string, string>;\n  runtimeConfig: RuntimeConfig;\n}\n\nexport interface ClaimRecord {\n  resourceKey: string;\n  pid: number;\n  configDir: string;\n  ports: Record<string, number>;\n  startedAt: number;\n}\n\nexport interface InfraPlan {\n  workspaceKey: string;\n  cliPorts: CliPorts;\n  resolvedPorts: ResolvedPorts;\n  runtimeConfig: RuntimeConfig;\n  launch: RuntimeLaunchSpec;\n  description: string;\n  serviceDescriptors: Map<string, ServiceDescriptorPlan>;\n  envGenerated: Record<string, string>;\n  composeModel: ComposeModelPlan;\n  claims: ClaimRecord[];\n  orchestrator: AppOrchestrator;\n}\n\nexport interface ServiceDescriptorPlan {\n  key: string;\n  source: \"local\" | \"remote\";\n  url: string;\n  port?: number;\n  localPath?: string;\n}\n\nexport interface ComposeModelPlan {\n  databases: DatabasePlan[];\n  redis: RedisPlan[];\n}\n\nexport interface DatabasePlan {\n  secret: string;\n  slug: string;\n  port: number;\n  dbName: string;\n  containerName: string;\n  volumeName: string;\n  url: string;\n}\n\nexport interface RedisPlan {\n  secret: string;\n  slug: string;\n  port: number;\n  containerName: string;\n  volumeName: string;\n  url: string;\n}\n\nexport type InfraPhase =\n  | \"resolve-config\"\n  | \"allocate-services\"\n  | \"allocate-databases\"\n  | \"claim\"\n  | \"materialize-env\"\n  | \"materialize-compose\"\n  | \"launch\";\n\nexport class InfraError extends Data.TaggedError(\"InfraError\")<{\n  phase: InfraPhase;\n  message: string;\n  cause?: unknown;\n}> {}\n\nexport interface InfraInput {\n  configDir: string;\n  bosConfig: RuntimeConfig;\n  cli: {\n    port?: number;\n    apiPort?: number;\n    authPort?: number;\n    uiPort?: number;\n    pluginPortStart?: number;\n    plugins?: Record<string, { api?: number; ui?: number }>;\n    ssr?: boolean;\n    proxy?: boolean;\n    hostSource?: \"local\" | \"remote\";\n    uiSource?: \"local\" | \"remote\";\n    apiSource?: \"local\" | \"remote\";\n    authSource?: \"local\" | \"remote\";\n    interactive?: boolean;\n  };\n}\n"],"mappings":";;;AAiGA,IAAa,aAAb,cAAgC,KAAK,YAAY,aAAa,CAI3D"}
+{"version":3,"file":"types.mjs","names":[],"sources":["../../src/infra/types.ts"],"sourcesContent":["import { Data } from \"effect\";\nimport type { AppOrchestrator } from \"../service-descriptor\";\nimport type { RuntimeConfig } from \"../types\";\n\nexport interface CliPorts {\n  host?: number;\n  api?: number;\n  auth?: number;\n  ui?: number;\n  uiSsr?: number;\n  pluginsStart?: number;\n  plugins?: Record<string, { api?: number; ui?: number }>;\n}\n\nexport interface ResolvedPorts {\n  host?: number;\n  api?: number;\n  auth?: number;\n  ui?: number;\n  uiSsr?: number;\n  plugins: Record<string, { api?: number; ui?: number }>;\n  postgres: Record<string, number>;\n  redis: Record<string, number>;\n}\n\nexport interface RuntimeLaunchSpec {\n  port?: number;\n  hostUrl?: string;\n  corsOrigin?: string;\n  trustedOrigins?: string[];\n  env: Record<string, string>;\n  runtimeConfig: RuntimeConfig;\n}\n\nexport interface ClaimRecord {\n  resourceKey: string;\n  pid: number;\n  configDir: string;\n  ports: Record<string, number>;\n  startedAt: number;\n}\n\nexport interface InfraPlan {\n  workspaceKey: string;\n  cliPorts: CliPorts;\n  resolvedPorts: ResolvedPorts;\n  runtimeConfig: RuntimeConfig;\n  launch: RuntimeLaunchSpec;\n  description: string;\n  serviceDescriptors: Map<string, ServiceDescriptorPlan>;\n  envGenerated: Record<string, string>;\n  composeModel: ComposeModelPlan;\n  claims: ClaimRecord[];\n  orchestrator: AppOrchestrator;\n}\n\nexport interface ServiceDescriptorPlan {\n  key: string;\n  source: \"local\" | \"remote\";\n  url: string;\n  port?: number;\n  localPath?: string;\n}\n\nexport interface ComposeModelPlan {\n  databases: DatabasePlan[];\n  redis: RedisPlan[];\n}\n\nexport interface DatabasePlan {\n  secret: string;\n  slug: string;\n  port: number;\n  dbName: string;\n  containerName: string;\n  volumeName: string;\n  url: string;\n}\n\nexport interface RedisPlan {\n  secret: string;\n  slug: string;\n  port: number;\n  containerName: string;\n  volumeName: string;\n  url: string;\n}\n\nexport type InfraPhase =\n  | \"resolve-config\"\n  | \"allocate-services\"\n  | \"allocate-databases\"\n  | \"claim\"\n  | \"materialize-env\"\n  | \"materialize-compose\"\n  | \"launch\";\n\nexport class InfraError extends Data.TaggedError(\"InfraError\")<{\n  phase: InfraPhase;\n  message: string;\n  cause?: unknown;\n}> {}\n\nexport interface InfraInput {\n  configDir: string;\n  bosConfig: RuntimeConfig;\n  cli: {\n    port?: number;\n    apiPort?: number;\n    authPort?: number;\n    uiPort?: number;\n    pluginPortStart?: number;\n    plugins?: Record<string, { api?: number; ui?: number }>;\n    ssr?: boolean;\n    proxy?: boolean;\n    hostSource?: \"local\" | \"remote\";\n    uiSource?: \"local\" | \"remote\";\n    apiSource?: \"local\" | \"remote\";\n    authSource?: \"local\" | \"remote\";\n    interactive?: boolean;\n  };\n}\n"],"mappings":";;;AAiGA,IAAa,aAAb,cAAgC,KAAK,YAAY,YAAY,CAAC,CAI3D,CAAC"}

package/dist/integrity.cjs

@@ -1,5 +1,4 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_runtime = require('./_virtual/_rolldown/runtime.cjs');
 const require_http_client = require('./http-client.cjs');
 const require_fastkv = require('./fastkv.cjs');
 let node_fs = require("node:fs");

package/dist/integrity.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"integrity.cjs","names":["fetchResponse","fetchBosConfigFromFastKv"],"sources":["../src/integrity.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { readFileSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { fetchBosConfigFromFastKv } from \"./fastkv\";\nimport { fetchResponse } from \"./http-client\";\n\nconst DEFAULT_MAX_SRI_RESPONSE_BYTES = 20 * 1024 * 1024;\n\ninterface SriUrlOptions {\n  resolveEntryUrl?: boolean;\n  maxBytes?: number;\n}\n\nexport function computeSriHash(content: string | Buffer): string {\n  return `sha384-${createHash(\"sha384\").update(content).digest(\"base64\")}`;\n}\n\nfunction resolveSriTargetUrl(url: string, options?: SriUrlOptions): string {\n  return options?.resolveEntryUrl === false ? url : resolveEntryUrl(url);\n}\n\nfunction getMaxSriResponseBytes(options?: SriUrlOptions): number {\n  return options?.maxBytes ?? DEFAULT_MAX_SRI_RESPONSE_BYTES;\n}\n\nasync function computeSriHashFromResponse(\n  response: Response,\n  url: string,\n  options?: SriUrlOptions,\n): Promise<string> {\n  const maxBytes = getMaxSriResponseBytes(options);\n  const contentLengthHeader = response.headers.get(\"content-length\");\n\n  if (contentLengthHeader) {\n    const contentLength = Number(contentLengthHeader);\n    if (Number.isFinite(contentLength) && contentLength > maxBytes) {\n      throw new Error(\n        `[SRI] Response for ${url} exceeds max size of ${maxBytes} bytes (${contentLength})`,\n      );\n    }\n  }\n\n  if (!response.body) {\n    throw new Error(`[SRI] Missing response body for ${url}`);\n  }\n\n  const hash = createHash(\"sha384\");\n  const reader = response.body.getReader();\n  let totalBytes = 0;\n\n  while (true) {\n    const { done, value } = await reader.read();\n    if (done) {\n      break;\n    }\n\n    totalBytes += value.byteLength;\n    if (totalBytes > maxBytes) {\n      await reader.cancel();\n      throw new Error(\n        `[SRI] Response for ${url} exceeds max size of ${maxBytes} bytes (${totalBytes})`,\n      );\n    }\n\n    hash.update(value);\n  }\n\n  return `sha384-${hash.digest(\"base64\")}`;\n}\n\nexport async function computeSriHashForUrl(\n  url: string,\n  options?: SriUrlOptions,\n): Promise<string | null> {\n  try {\n    const entryUrl = resolveSriTargetUrl(url, options);\n\n    const response = await fetchResponse(entryUrl, { timeout: \"30 seconds\" });\n    if (!response.ok) {\n      console.warn(`[SRI] Failed to fetch ${entryUrl}: ${response.status} ${response.statusText}`);\n      return null;\n    }\n    return await computeSriHashFromResponse(response, entryUrl, options);\n  } catch (error) {\n    console.warn(\n      `[SRI] Error computing integrity for ${url}:`,\n      error instanceof Error ? error.message : error,\n    );\n    return null;\n  }\n}\n\nexport function resolveEntryUrl(url: string): string {\n  if (url.endsWith(\"/remoteEntry.js\")) return url;\n  if (url.endsWith(\"/mf-manifest.json\"))\n    return `${url.replace(/\\/mf-manifest\\.json$/, \"\")}/remoteEntry.js`;\n  return `${url.replace(/\\/$/, \"\")}/remoteEntry.js`;\n}\n\nexport async function verifySriForUrl(\n  url: string,\n  expectedIntegrity: string,\n  options?: SriUrlOptions,\n): Promise<void> {\n  const entryUrl = resolveSriTargetUrl(url, options);\n\n  const response = await fetchResponse(entryUrl, { timeout: \"30 seconds\" });\n  if (!response.ok) {\n    console.warn(`[SRI] Failed to fetch ${entryUrl} for verification: ${response.status}`);\n    return;\n  }\n\n  const computed = await computeSriHashFromResponse(response, entryUrl, options);\n\n  if (computed !== expectedIntegrity) {\n    throw new Error(\n      `[SRI] Integrity check failed for ${entryUrl}\\n  Expected: ${expectedIntegrity}\\n  Computed: ${computed}`,\n    );\n  }\n}\n\nexport class IntegrityRegistry {\n  private hashes = new Map<string, string>();\n\n  register(url: string, integrity: string): void {\n    this.hashes.set(url, integrity);\n  }\n\n  registerEntry(baseUrl: string, integrity: string): void {\n    this.hashes.set(resolveEntryUrl(baseUrl), integrity);\n  }\n\n  get(url: string): string | undefined {\n    return this.hashes.get(url);\n  }\n\n  has(url: string): boolean {\n    return this.hashes.has(url);\n  }\n\n  entries(): IterableIterator<[string, string]> {\n    return this.hashes.entries();\n  }\n}\n\nfunction extractIntegrityHashes(config: Record<string, unknown>): Map<string, string> {\n  const hashes = new Map<string, string>();\n  const app = config.app as Record<string, Record<string, unknown>> | undefined;\n  const plugins = config.plugins as Record<string, Record<string, unknown>> | undefined;\n\n  if (app) {\n    for (const [, entry] of Object.entries(app)) {\n      if (entry?.integrity && entry?.production) {\n        hashes.set(resolveEntryUrl(entry.production as string), entry.integrity as string);\n      }\n    }\n  }\n\n  if (plugins) {\n    for (const [, entry] of Object.entries(plugins)) {\n      if (entry?.integrity && entry?.production) {\n        hashes.set(resolveEntryUrl(entry.production as string), entry.integrity as string);\n      }\n    }\n  }\n\n  return hashes;\n}\n\nexport async function verifyConfigAgainstChain(\n  localConfig: Record<string, unknown>,\n  bosUrl: string,\n): Promise<{ verified: boolean; mismatches: string[] }> {\n  const mismatches: string[] = [];\n\n  let chainConfig: Record<string, unknown>;\n  try {\n    chainConfig = await fetchBosConfigFromFastKv<Record<string, unknown>>(bosUrl);\n  } catch (error) {\n    console.warn(\n      `[Attestation] Failed to fetch on-chain config: ${error instanceof Error ? error.message : String(error)}`,\n    );\n    return { verified: false, mismatches: [\"chain-fetch-failed\"] };\n  }\n\n  const localHashes = extractIntegrityHashes(localConfig);\n  const chainHashes = extractIntegrityHashes(chainConfig);\n\n  for (const [url, chainHash] of chainHashes) {\n    const localHash = localHashes.get(url);\n    if (localHash && localHash !== chainHash) {\n      mismatches.push(url);\n      console.error(\n        `[Attestation] Integrity mismatch for ${url}\\n  Local: ${localHash}\\n  Chain: ${chainHash}`,\n      );\n    }\n  }\n\n  if (mismatches.length === 0 && localHashes.size > 0) {\n    console.log(\n      `[Attestation] Local config verified against on-chain anchor (${localHashes.size} entries checked)`,\n    );\n  }\n\n  return { verified: mismatches.length === 0, mismatches };\n}\n\nexport interface DeployResultEntry {\n  url: string;\n  integrity?: string;\n  urlField: string;\n  integrityField?: string;\n}\n\nfunction setNestedPath(obj: Record<string, unknown>, dottedPath: string, value: unknown): void {\n  const keys = dottedPath.split(\".\");\n  let current = obj;\n  for (let i = 0; i < keys.length - 1; i += 1) {\n    const key = keys[i]!;\n    if (current[key] === undefined || current[key] === null || typeof current[key] !== \"object\") {\n      current[key] = {};\n    }\n    current = current[key] as Record<string, unknown>;\n  }\n  current[keys[keys.length - 1]!] = value;\n}\n\nfunction deleteNestedPath(obj: Record<string, unknown>, dottedPath: string): void {\n  const keys = dottedPath.split(\".\");\n  let current = obj;\n  for (let i = 0; i < keys.length - 1; i += 1) {\n    const key = keys[i]!;\n    if (current[key] === undefined || typeof current[key] !== \"object\") return;\n    current = current[key] as Record<string, unknown>;\n  }\n  delete current[keys[keys.length - 1]!];\n}\n\nexport function reportDeployResult(opts: {\n  url: string;\n  integrity?: string | null;\n  bosConfigPath: string;\n  urlField: string;\n  integrityField?: string;\n}): void {\n  console.log(\n    `[BOS_DEPLOY] url=${opts.url} urlField=${opts.urlField} integrityField=${opts.integrityField ?? \"\"} integrity=${opts.integrity ?? \"\"}`,\n  );\n\n  try {\n    const config = JSON.parse(readFileSync(opts.bosConfigPath, \"utf8\")) as Record<string, unknown>;\n    setNestedPath(config, opts.urlField, opts.url);\n    if (opts.integrityField) {\n      if (opts.integrity) {\n        setNestedPath(config, opts.integrityField, opts.integrity);\n      } else {\n        deleteNestedPath(config, opts.integrityField);\n      }\n    }\n    writeFileSync(opts.bosConfigPath, `${JSON.stringify(config, null, 2)}\\n`);\n    console.log(`   ✅ Updated bos.config.json: ${opts.urlField}`);\n    if (opts.integrityField && opts.integrity) {\n      console.log(`   ✅ Updated bos.config.json: ${opts.integrityField}`);\n    }\n  } catch (err) {\n    console.error(\"   ❌ Failed to update bos.config.json:\", (err as Error).message);\n  }\n}\n\nexport function parseDeployLines(output: string): DeployResultEntry[] {\n  const results: DeployResultEntry[] = [];\n  for (const line of output.split(\"\\n\")) {\n    if (!line.includes(\"[BOS_DEPLOY]\")) continue;\n    const urlMatch = line.match(/url=(\\S+)/);\n    const urlFieldMatch = line.match(/urlField=(\\S+)/);\n    if (!urlMatch || !urlFieldMatch) continue;\n    const integrityFieldMatch = line.match(/integrityField=(\\S+)/);\n    const integrityMatch = line.match(/integrity=(\\S+)/);\n    results.push({\n      url: urlMatch[1],\n      urlField: urlFieldMatch[1],\n      integrityField: integrityFieldMatch?.[1] || undefined,\n      integrity: integrityMatch?.[1] || undefined,\n    });\n  }\n  return results;\n}\n\nexport function applyDeployResults(\n  config: Record<string, unknown>,\n  results: DeployResultEntry[],\n): Record<string, unknown> {\n  const merged = structuredClone(config);\n  for (const result of results) {\n    setNestedPath(merged, result.urlField, result.url);\n    if (result.integrityField) {\n      if (result.integrity) {\n        setNestedPath(merged, result.integrityField, result.integrity);\n      } else {\n        deleteNestedPath(merged, result.integrityField);\n      }\n    }\n  }\n  return merged;\n}\n\nexport function findPluginKey(bosConfigPath: string, pluginDir: string): string | null {\n  const config = JSON.parse(readFileSync(bosConfigPath, \"utf8\")) as Record<string, unknown>;\n  const plugins = config.plugins as Record<string, Record<string, unknown>> | undefined;\n  if (!plugins) return null;\n  const configRoot = join(bosConfigPath, \"..\");\n  const normalizedPluginDir = pluginDir.replace(/\\\\/g, \"/\").replace(/\\/+$/, \"\");\n  for (const [key, plugin] of Object.entries(plugins)) {\n    const dev = plugin?.development;\n    if (typeof dev !== \"string\" || !dev.startsWith(\"local:\")) continue;\n    const resolved = join(configRoot, dev.slice(\"local:\".length))\n      .replace(/\\\\/g, \"/\")\n      .replace(/\\/+$/, \"\");\n    if (resolved === normalizedPluginDir) return key;\n  }\n  return null;\n}\n"],"mappings":";;;;;;;;;AAMA,MAAM,iCAAiC,KAAK,OAAO;AAOnD,SAAgB,eAAe,SAAkC;AAC/D,QAAO,sCAAqB,SAAS,CAAC,OAAO,QAAQ,CAAC,OAAO,SAAS;;AAGxE,SAAS,oBAAoB,KAAa,SAAiC;AACzE,QAAO,SAAS,oBAAoB,QAAQ,MAAM,gBAAgB,IAAI;;AAGxE,SAAS,uBAAuB,SAAiC;AAC/D,QAAO,SAAS,YAAY;;AAG9B,eAAe,2BACb,UACA,KACA,SACiB;CACjB,MAAM,WAAW,uBAAuB,QAAQ;CAChD,MAAM,sBAAsB,SAAS,QAAQ,IAAI,iBAAiB;AAElE,KAAI,qBAAqB;EACvB,MAAM,gBAAgB,OAAO,oBAAoB;AACjD,MAAI,OAAO,SAAS,cAAc,IAAI,gBAAgB,SACpD,OAAM,IAAI,MACR,sBAAsB,IAAI,uBAAuB,SAAS,UAAU,cAAc,GACnF;;AAIL,KAAI,CAAC,SAAS,KACZ,OAAM,IAAI,MAAM,mCAAmC,MAAM;CAG3D,MAAM,mCAAkB,SAAS;CACjC,MAAM,SAAS,SAAS,KAAK,WAAW;CACxC,IAAI,aAAa;AAEjB,QAAO,MAAM;EACX,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,MAAM;AAC3C,MAAI,KACF;AAGF,gBAAc,MAAM;AACpB,MAAI,aAAa,UAAU;AACzB,SAAM,OAAO,QAAQ;AACrB,SAAM,IAAI,MACR,sBAAsB,IAAI,uBAAuB,SAAS,UAAU,WAAW,GAChF;;AAGH,OAAK,OAAO,MAAM;;AAGpB,QAAO,UAAU,KAAK,OAAO,SAAS;;AAGxC,eAAsB,qBACpB,KACA,SACwB;AACxB,KAAI;EACF,MAAM,WAAW,oBAAoB,KAAK,QAAQ;EAElD,MAAM,WAAW,MAAMA,kCAAc,UAAU,EAAE,SAAS,cAAc,CAAC;AACzE,MAAI,CAAC,SAAS,IAAI;AAChB,WAAQ,KAAK,yBAAyB,SAAS,IAAI,SAAS,OAAO,GAAG,SAAS,aAAa;AAC5F,UAAO;;AAET,SAAO,MAAM,2BAA2B,UAAU,UAAU,QAAQ;UAC7D,OAAO;AACd,UAAQ,KACN,uCAAuC,IAAI,IAC3C,iBAAiB,QAAQ,MAAM,UAAU,MAC1C;AACD,SAAO;;;AAIX,SAAgB,gBAAgB,KAAqB;AACnD,KAAI,IAAI,SAAS,kBAAkB,CAAE,QAAO;AAC5C,KAAI,IAAI,SAAS,oBAAoB,CACnC,QAAO,GAAG,IAAI,QAAQ,wBAAwB,GAAG,CAAC;AACpD,QAAO,GAAG,IAAI,QAAQ,OAAO,GAAG,CAAC;;AAGnC,eAAsB,gBACpB,KACA,mBACA,SACe;CACf,MAAM,WAAW,oBAAoB,KAAK,QAAQ;CAElD,MAAM,WAAW,MAAMA,kCAAc,UAAU,EAAE,SAAS,cAAc,CAAC;AACzE,KAAI,CAAC,SAAS,IAAI;AAChB,UAAQ,KAAK,yBAAyB,SAAS,qBAAqB,SAAS,SAAS;AACtF;;CAGF,MAAM,WAAW,MAAM,2BAA2B,UAAU,UAAU,QAAQ;AAE9E,KAAI,aAAa,kBACf,OAAM,IAAI,MACR,oCAAoC,SAAS,gBAAgB,kBAAkB,gBAAgB,WAChG;;AAIL,IAAa,oBAAb,MAA+B;CAC7B,AAAQ,yBAAS,IAAI,KAAqB;CAE1C,SAAS,KAAa,WAAyB;AAC7C,OAAK,OAAO,IAAI,KAAK,UAAU;;CAGjC,cAAc,SAAiB,WAAyB;AACtD,OAAK,OAAO,IAAI,gBAAgB,QAAQ,EAAE,UAAU;;CAGtD,IAAI,KAAiC;AACnC,SAAO,KAAK,OAAO,IAAI,IAAI;;CAG7B,IAAI,KAAsB;AACxB,SAAO,KAAK,OAAO,IAAI,IAAI;;CAG7B,UAA8C;AAC5C,SAAO,KAAK,OAAO,SAAS;;;AAIhC,SAAS,uBAAuB,QAAsD;CACpF,MAAM,yBAAS,IAAI,KAAqB;CACxC,MAAM,MAAM,OAAO;CACnB,MAAM,UAAU,OAAO;AAEvB,KAAI,KACF;OAAK,MAAM,GAAG,UAAU,OAAO,QAAQ,IAAI,CACzC,KAAI,OAAO,aAAa,OAAO,WAC7B,QAAO,IAAI,gBAAgB,MAAM,WAAqB,EAAE,MAAM,UAAoB;;AAKxF,KAAI,SACF;OAAK,MAAM,GAAG,UAAU,OAAO,QAAQ,QAAQ,CAC7C,KAAI,OAAO,aAAa,OAAO,WAC7B,QAAO,IAAI,gBAAgB,MAAM,WAAqB,EAAE,MAAM,UAAoB;;AAKxF,QAAO;;AAGT,eAAsB,yBACpB,aACA,QACsD;CACtD,MAAM,aAAuB,EAAE;CAE/B,IAAI;AACJ,KAAI;AACF,gBAAc,MAAMC,wCAAkD,OAAO;UACtE,OAAO;AACd,UAAQ,KACN,kDAAkD,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GACzG;AACD,SAAO;GAAE,UAAU;GAAO,YAAY,CAAC,qBAAqB;GAAE;;CAGhE,MAAM,cAAc,uBAAuB,YAAY;CACvD,MAAM,cAAc,uBAAuB,YAAY;AAEvD,MAAK,MAAM,CAAC,KAAK,cAAc,aAAa;EAC1C,MAAM,YAAY,YAAY,IAAI,IAAI;AACtC,MAAI,aAAa,cAAc,WAAW;AACxC,cAAW,KAAK,IAAI;AACpB,WAAQ,MACN,wCAAwC,IAAI,aAAa,UAAU,aAAa,YACjF;;;AAIL,KAAI,WAAW,WAAW,KAAK,YAAY,OAAO,EAChD,SAAQ,IACN,gEAAgE,YAAY,KAAK,mBAClF;AAGH,QAAO;EAAE,UAAU,WAAW,WAAW;EAAG;EAAY;;AAU1D,SAAS,cAAc,KAA8B,YAAoB,OAAsB;CAC7F,MAAM,OAAO,WAAW,MAAM,IAAI;CAClC,IAAI,UAAU;AACd,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,SAAS,GAAG,KAAK,GAAG;EAC3C,MAAM,MAAM,KAAK;AACjB,MAAI,QAAQ,SAAS,UAAa,QAAQ,SAAS,QAAQ,OAAO,QAAQ,SAAS,SACjF,SAAQ,OAAO,EAAE;AAEnB,YAAU,QAAQ;;AAEpB,SAAQ,KAAK,KAAK,SAAS,MAAO;;AAGpC,SAAS,iBAAiB,KAA8B,YAA0B;CAChF,MAAM,OAAO,WAAW,MAAM,IAAI;CAClC,IAAI,UAAU;AACd,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,SAAS,GAAG,KAAK,GAAG;EAC3C,MAAM,MAAM,KAAK;AACjB,MAAI,QAAQ,SAAS,UAAa,OAAO,QAAQ,SAAS,SAAU;AACpE,YAAU,QAAQ;;AAEpB,QAAO,QAAQ,KAAK,KAAK,SAAS;;AAGpC,SAAgB,mBAAmB,MAM1B;AACP,SAAQ,IACN,oBAAoB,KAAK,IAAI,YAAY,KAAK,SAAS,kBAAkB,KAAK,kBAAkB,GAAG,aAAa,KAAK,aAAa,KACnI;AAED,KAAI;EACF,MAAM,SAAS,KAAK,gCAAmB,KAAK,eAAe,OAAO,CAAC;AACnE,gBAAc,QAAQ,KAAK,UAAU,KAAK,IAAI;AAC9C,MAAI,KAAK,eACP,KAAI,KAAK,UACP,eAAc,QAAQ,KAAK,gBAAgB,KAAK,UAAU;MAE1D,kBAAiB,QAAQ,KAAK,eAAe;AAGjD,6BAAc,KAAK,eAAe,GAAG,KAAK,UAAU,QAAQ,MAAM,EAAE,CAAC,IAAI;AACzE,UAAQ,IAAI,iCAAiC,KAAK,WAAW;AAC7D,MAAI,KAAK,kBAAkB,KAAK,UAC9B,SAAQ,IAAI,iCAAiC,KAAK,iBAAiB;UAE9D,KAAK;AACZ,UAAQ,MAAM,0CAA2C,IAAc,QAAQ;;;AAInF,SAAgB,iBAAiB,QAAqC;CACpE,MAAM,UAA+B,EAAE;AACvC,MAAK,MAAM,QAAQ,OAAO,MAAM,KAAK,EAAE;AACrC,MAAI,CAAC,KAAK,SAAS,eAAe,CAAE;EACpC,MAAM,WAAW,KAAK,MAAM,YAAY;EACxC,MAAM,gBAAgB,KAAK,MAAM,iBAAiB;AAClD,MAAI,CAAC,YAAY,CAAC,cAAe;EACjC,MAAM,sBAAsB,KAAK,MAAM,uBAAuB;EAC9D,MAAM,iBAAiB,KAAK,MAAM,kBAAkB;AACpD,UAAQ,KAAK;GACX,KAAK,SAAS;GACd,UAAU,cAAc;GACxB,gBAAgB,sBAAsB,MAAM;GAC5C,WAAW,iBAAiB,MAAM;GACnC,CAAC;;AAEJ,QAAO;;AAGT,SAAgB,mBACd,QACA,SACyB;CACzB,MAAM,SAAS,gBAAgB,OAAO;AACtC,MAAK,MAAM,UAAU,SAAS;AAC5B,gBAAc,QAAQ,OAAO,UAAU,OAAO,IAAI;AAClD,MAAI,OAAO,eACT,KAAI,OAAO,UACT,eAAc,QAAQ,OAAO,gBAAgB,OAAO,UAAU;MAE9D,kBAAiB,QAAQ,OAAO,eAAe;;AAIrD,QAAO;;AAGT,SAAgB,cAAc,eAAuB,WAAkC;CAErF,MAAM,UADS,KAAK,gCAAmB,eAAe,OAAO,CACvC,CAAC;AACvB,KAAI,CAAC,QAAS,QAAO;CACrB,MAAM,iCAAkB,eAAe,KAAK;CAC5C,MAAM,sBAAsB,UAAU,QAAQ,OAAO,IAAI,CAAC,QAAQ,QAAQ,GAAG;AAC7E,MAAK,MAAM,CAAC,KAAK,WAAW,OAAO,QAAQ,QAAQ,EAAE;EACnD,MAAM,MAAM,QAAQ;AACpB,MAAI,OAAO,QAAQ,YAAY,CAAC,IAAI,WAAW,SAAS,CAAE;AAI1D,0BAHsB,YAAY,IAAI,MAAM,EAAgB,CAAC,CAC1D,QAAQ,OAAO,IAAI,CACnB,QAAQ,QAAQ,GACP,KAAK,oBAAqB,QAAO;;AAE/C,QAAO"}
+{"version":3,"file":"integrity.cjs","names":["fetchResponse","fetchBosConfigFromFastKv"],"sources":["../src/integrity.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { readFileSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { fetchBosConfigFromFastKv } from \"./fastkv\";\nimport { fetchResponse } from \"./http-client\";\n\nconst DEFAULT_MAX_SRI_RESPONSE_BYTES = 20 * 1024 * 1024;\n\ninterface SriUrlOptions {\n  resolveEntryUrl?: boolean;\n  maxBytes?: number;\n}\n\nexport function computeSriHash(content: string | Buffer): string {\n  return `sha384-${createHash(\"sha384\").update(content).digest(\"base64\")}`;\n}\n\nfunction resolveSriTargetUrl(url: string, options?: SriUrlOptions): string {\n  return options?.resolveEntryUrl === false ? url : resolveEntryUrl(url);\n}\n\nfunction getMaxSriResponseBytes(options?: SriUrlOptions): number {\n  return options?.maxBytes ?? DEFAULT_MAX_SRI_RESPONSE_BYTES;\n}\n\nasync function computeSriHashFromResponse(\n  response: Response,\n  url: string,\n  options?: SriUrlOptions,\n): Promise<string> {\n  const maxBytes = getMaxSriResponseBytes(options);\n  const contentLengthHeader = response.headers.get(\"content-length\");\n\n  if (contentLengthHeader) {\n    const contentLength = Number(contentLengthHeader);\n    if (Number.isFinite(contentLength) && contentLength > maxBytes) {\n      throw new Error(\n        `[SRI] Response for ${url} exceeds max size of ${maxBytes} bytes (${contentLength})`,\n      );\n    }\n  }\n\n  if (!response.body) {\n    throw new Error(`[SRI] Missing response body for ${url}`);\n  }\n\n  const hash = createHash(\"sha384\");\n  const reader = response.body.getReader();\n  let totalBytes = 0;\n\n  while (true) {\n    const { done, value } = await reader.read();\n    if (done) {\n      break;\n    }\n\n    totalBytes += value.byteLength;\n    if (totalBytes > maxBytes) {\n      await reader.cancel();\n      throw new Error(\n        `[SRI] Response for ${url} exceeds max size of ${maxBytes} bytes (${totalBytes})`,\n      );\n    }\n\n    hash.update(value);\n  }\n\n  return `sha384-${hash.digest(\"base64\")}`;\n}\n\nexport async function computeSriHashForUrl(\n  url: string,\n  options?: SriUrlOptions,\n): Promise<string | null> {\n  try {\n    const entryUrl = resolveSriTargetUrl(url, options);\n\n    const response = await fetchResponse(entryUrl, { timeout: \"30 seconds\" });\n    if (!response.ok) {\n      console.warn(`[SRI] Failed to fetch ${entryUrl}: ${response.status} ${response.statusText}`);\n      return null;\n    }\n    return await computeSriHashFromResponse(response, entryUrl, options);\n  } catch (error) {\n    console.warn(\n      `[SRI] Error computing integrity for ${url}:`,\n      error instanceof Error ? error.message : error,\n    );\n    return null;\n  }\n}\n\nexport function resolveEntryUrl(url: string): string {\n  if (url.endsWith(\"/remoteEntry.js\")) return url;\n  if (url.endsWith(\"/mf-manifest.json\"))\n    return `${url.replace(/\\/mf-manifest\\.json$/, \"\")}/remoteEntry.js`;\n  return `${url.replace(/\\/$/, \"\")}/remoteEntry.js`;\n}\n\nexport async function verifySriForUrl(\n  url: string,\n  expectedIntegrity: string,\n  options?: SriUrlOptions,\n): Promise<void> {\n  const entryUrl = resolveSriTargetUrl(url, options);\n\n  const response = await fetchResponse(entryUrl, { timeout: \"30 seconds\" });\n  if (!response.ok) {\n    console.warn(`[SRI] Failed to fetch ${entryUrl} for verification: ${response.status}`);\n    return;\n  }\n\n  const computed = await computeSriHashFromResponse(response, entryUrl, options);\n\n  if (computed !== expectedIntegrity) {\n    throw new Error(\n      `[SRI] Integrity check failed for ${entryUrl}\\n  Expected: ${expectedIntegrity}\\n  Computed: ${computed}`,\n    );\n  }\n}\n\nexport class IntegrityRegistry {\n  private hashes = new Map<string, string>();\n\n  register(url: string, integrity: string): void {\n    this.hashes.set(url, integrity);\n  }\n\n  registerEntry(baseUrl: string, integrity: string): void {\n    this.hashes.set(resolveEntryUrl(baseUrl), integrity);\n  }\n\n  get(url: string): string | undefined {\n    return this.hashes.get(url);\n  }\n\n  has(url: string): boolean {\n    return this.hashes.has(url);\n  }\n\n  entries(): IterableIterator<[string, string]> {\n    return this.hashes.entries();\n  }\n}\n\nfunction extractIntegrityHashes(config: Record<string, unknown>): Map<string, string> {\n  const hashes = new Map<string, string>();\n  const app = config.app as Record<string, Record<string, unknown>> | undefined;\n  const plugins = config.plugins as Record<string, Record<string, unknown>> | undefined;\n\n  if (app) {\n    for (const [, entry] of Object.entries(app)) {\n      if (entry?.integrity && entry?.production) {\n        hashes.set(resolveEntryUrl(entry.production as string), entry.integrity as string);\n      }\n    }\n  }\n\n  if (plugins) {\n    for (const [, entry] of Object.entries(plugins)) {\n      if (entry?.integrity && entry?.production) {\n        hashes.set(resolveEntryUrl(entry.production as string), entry.integrity as string);\n      }\n    }\n  }\n\n  return hashes;\n}\n\nexport async function verifyConfigAgainstChain(\n  localConfig: Record<string, unknown>,\n  bosUrl: string,\n): Promise<{ verified: boolean; mismatches: string[] }> {\n  const mismatches: string[] = [];\n\n  let chainConfig: Record<string, unknown>;\n  try {\n    chainConfig = await fetchBosConfigFromFastKv<Record<string, unknown>>(bosUrl);\n  } catch (error) {\n    console.warn(\n      `[Attestation] Failed to fetch on-chain config: ${error instanceof Error ? error.message : String(error)}`,\n    );\n    return { verified: false, mismatches: [\"chain-fetch-failed\"] };\n  }\n\n  const localHashes = extractIntegrityHashes(localConfig);\n  const chainHashes = extractIntegrityHashes(chainConfig);\n\n  for (const [url, chainHash] of chainHashes) {\n    const localHash = localHashes.get(url);\n    if (localHash && localHash !== chainHash) {\n      mismatches.push(url);\n      console.error(\n        `[Attestation] Integrity mismatch for ${url}\\n  Local: ${localHash}\\n  Chain: ${chainHash}`,\n      );\n    }\n  }\n\n  if (mismatches.length === 0 && localHashes.size > 0) {\n    console.log(\n      `[Attestation] Local config verified against on-chain anchor (${localHashes.size} entries checked)`,\n    );\n  }\n\n  return { verified: mismatches.length === 0, mismatches };\n}\n\nexport interface DeployResultEntry {\n  url: string;\n  integrity?: string;\n  urlField: string;\n  integrityField?: string;\n}\n\nfunction setNestedPath(obj: Record<string, unknown>, dottedPath: string, value: unknown): void {\n  const keys = dottedPath.split(\".\");\n  let current = obj;\n  for (let i = 0; i < keys.length - 1; i += 1) {\n    const key = keys[i]!;\n    if (current[key] === undefined || current[key] === null || typeof current[key] !== \"object\") {\n      current[key] = {};\n    }\n    current = current[key] as Record<string, unknown>;\n  }\n  current[keys[keys.length - 1]!] = value;\n}\n\nfunction deleteNestedPath(obj: Record<string, unknown>, dottedPath: string): void {\n  const keys = dottedPath.split(\".\");\n  let current = obj;\n  for (let i = 0; i < keys.length - 1; i += 1) {\n    const key = keys[i]!;\n    if (current[key] === undefined || typeof current[key] !== \"object\") return;\n    current = current[key] as Record<string, unknown>;\n  }\n  delete current[keys[keys.length - 1]!];\n}\n\nexport function reportDeployResult(opts: {\n  url: string;\n  integrity?: string | null;\n  bosConfigPath: string;\n  urlField: string;\n  integrityField?: string;\n}): void {\n  console.log(\n    `[BOS_DEPLOY] url=${opts.url} urlField=${opts.urlField} integrityField=${opts.integrityField ?? \"\"} integrity=${opts.integrity ?? \"\"}`,\n  );\n\n  try {\n    const config = JSON.parse(readFileSync(opts.bosConfigPath, \"utf8\")) as Record<string, unknown>;\n    setNestedPath(config, opts.urlField, opts.url);\n    if (opts.integrityField) {\n      if (opts.integrity) {\n        setNestedPath(config, opts.integrityField, opts.integrity);\n      } else {\n        deleteNestedPath(config, opts.integrityField);\n      }\n    }\n    writeFileSync(opts.bosConfigPath, `${JSON.stringify(config, null, 2)}\\n`);\n    console.log(`   ✅ Updated bos.config.json: ${opts.urlField}`);\n    if (opts.integrityField && opts.integrity) {\n      console.log(`   ✅ Updated bos.config.json: ${opts.integrityField}`);\n    }\n  } catch (err) {\n    console.error(\"   ❌ Failed to update bos.config.json:\", (err as Error).message);\n  }\n}\n\nexport function parseDeployLines(output: string): DeployResultEntry[] {\n  const results: DeployResultEntry[] = [];\n  for (const line of output.split(\"\\n\")) {\n    if (!line.includes(\"[BOS_DEPLOY]\")) continue;\n    const urlMatch = line.match(/url=(\\S+)/);\n    const urlFieldMatch = line.match(/urlField=(\\S+)/);\n    if (!urlMatch || !urlFieldMatch) continue;\n    const integrityFieldMatch = line.match(/integrityField=(\\S+)/);\n    const integrityMatch = line.match(/integrity=(\\S+)/);\n    results.push({\n      url: urlMatch[1],\n      urlField: urlFieldMatch[1],\n      integrityField: integrityFieldMatch?.[1] || undefined,\n      integrity: integrityMatch?.[1] || undefined,\n    });\n  }\n  return results;\n}\n\nexport function applyDeployResults(\n  config: Record<string, unknown>,\n  results: DeployResultEntry[],\n): Record<string, unknown> {\n  const merged = structuredClone(config);\n  for (const result of results) {\n    setNestedPath(merged, result.urlField, result.url);\n    if (result.integrityField) {\n      if (result.integrity) {\n        setNestedPath(merged, result.integrityField, result.integrity);\n      } else {\n        deleteNestedPath(merged, result.integrityField);\n      }\n    }\n  }\n  return merged;\n}\n\nexport function findPluginKey(bosConfigPath: string, pluginDir: string): string | null {\n  const config = JSON.parse(readFileSync(bosConfigPath, \"utf8\")) as Record<string, unknown>;\n  const plugins = config.plugins as Record<string, Record<string, unknown>> | undefined;\n  if (!plugins) return null;\n  const configRoot = join(bosConfigPath, \"..\");\n  const normalizedPluginDir = pluginDir.replace(/\\\\/g, \"/\").replace(/\\/+$/, \"\");\n  for (const [key, plugin] of Object.entries(plugins)) {\n    const dev = plugin?.development;\n    if (typeof dev !== \"string\" || !dev.startsWith(\"local:\")) continue;\n    const resolved = join(configRoot, dev.slice(\"local:\".length))\n      .replace(/\\\\/g, \"/\")\n      .replace(/\\/+$/, \"\");\n    if (resolved === normalizedPluginDir) return key;\n  }\n  return null;\n}\n"],"mappings":";;;;;;;;AAMA,MAAM,iCAAiC,KAAK,OAAO;AAOnD,SAAgB,eAAe,SAAkC;CAC/D,OAAO,sCAAqB,QAAQ,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,OAAO,QAAQ;AACvE;AAEA,SAAS,oBAAoB,KAAa,SAAiC;CACzE,OAAO,SAAS,oBAAoB,QAAQ,MAAM,gBAAgB,GAAG;AACvE;AAEA,SAAS,uBAAuB,SAAiC;CAC/D,OAAO,SAAS,YAAY;AAC9B;AAEA,eAAe,2BACb,UACA,KACA,SACiB;CACjB,MAAM,WAAW,uBAAuB,OAAO;CAC/C,MAAM,sBAAsB,SAAS,QAAQ,IAAI,gBAAgB;CAEjE,IAAI,qBAAqB;EACvB,MAAM,gBAAgB,OAAO,mBAAmB;EAChD,IAAI,OAAO,SAAS,aAAa,KAAK,gBAAgB,UACpD,MAAM,IAAI,MACR,sBAAsB,IAAI,uBAAuB,SAAS,UAAU,cAAc,EACpF;CAEJ;CAEA,IAAI,CAAC,SAAS,MACZ,MAAM,IAAI,MAAM,mCAAmC,KAAK;CAG1D,MAAM,mCAAkB,QAAQ;CAChC,MAAM,SAAS,SAAS,KAAK,UAAU;CACvC,IAAI,aAAa;CAEjB,OAAO,MAAM;EACX,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;EAC1C,IAAI,MACF;EAGF,cAAc,MAAM;EACpB,IAAI,aAAa,UAAU;GACzB,MAAM,OAAO,OAAO;GACpB,MAAM,IAAI,MACR,sBAAsB,IAAI,uBAAuB,SAAS,UAAU,WAAW,EACjF;EACF;EAEA,KAAK,OAAO,KAAK;CACnB;CAEA,OAAO,UAAU,KAAK,OAAO,QAAQ;AACvC;AAEA,eAAsB,qBACpB,KACA,SACwB;CACxB,IAAI;EACF,MAAM,WAAW,oBAAoB,KAAK,OAAO;EAEjD,MAAM,WAAW,MAAMA,kCAAc,UAAU,EAAE,SAAS,aAAa,CAAC;EACxE,IAAI,CAAC,SAAS,IAAI;GAChB,QAAQ,KAAK,yBAAyB,SAAS,IAAI,SAAS,OAAO,GAAG,SAAS,YAAY;GAC3F,OAAO;EACT;EACA,OAAO,MAAM,2BAA2B,UAAU,UAAU,OAAO;CACrE,SAAS,OAAO;EACd,QAAQ,KACN,uCAAuC,IAAI,IAC3C,iBAAiB,QAAQ,MAAM,UAAU,KAC3C;EACA,OAAO;CACT;AACF;AAEA,SAAgB,gBAAgB,KAAqB;CACnD,IAAI,IAAI,SAAS,iBAAiB,GAAG,OAAO;CAC5C,IAAI,IAAI,SAAS,mBAAmB,GAClC,OAAO,GAAG,IAAI,QAAQ,wBAAwB,EAAE,EAAE;CACpD,OAAO,GAAG,IAAI,QAAQ,OAAO,EAAE,EAAE;AACnC;AAEA,eAAsB,gBACpB,KACA,mBACA,SACe;CACf,MAAM,WAAW,oBAAoB,KAAK,OAAO;CAEjD,MAAM,WAAW,MAAMA,kCAAc,UAAU,EAAE,SAAS,aAAa,CAAC;CACxE,IAAI,CAAC,SAAS,IAAI;EAChB,QAAQ,KAAK,yBAAyB,SAAS,qBAAqB,SAAS,QAAQ;EACrF;CACF;CAEA,MAAM,WAAW,MAAM,2BAA2B,UAAU,UAAU,OAAO;CAE7E,IAAI,aAAa,mBACf,MAAM,IAAI,MACR,oCAAoC,SAAS,gBAAgB,kBAAkB,gBAAgB,UACjG;AAEJ;AAEA,IAAa,oBAAb,MAA+B;CAC7B,AAAQ,yBAAS,IAAI,IAAoB;CAEzC,SAAS,KAAa,WAAyB;EAC7C,KAAK,OAAO,IAAI,KAAK,SAAS;CAChC;CAEA,cAAc,SAAiB,WAAyB;EACtD,KAAK,OAAO,IAAI,gBAAgB,OAAO,GAAG,SAAS;CACrD;CAEA,IAAI,KAAiC;EACnC,OAAO,KAAK,OAAO,IAAI,GAAG;CAC5B;CAEA,IAAI,KAAsB;EACxB,OAAO,KAAK,OAAO,IAAI,GAAG;CAC5B;CAEA,UAA8C;EAC5C,OAAO,KAAK,OAAO,QAAQ;CAC7B;AACF;AAEA,SAAS,uBAAuB,QAAsD;CACpF,MAAM,yBAAS,IAAI,IAAoB;CACvC,MAAM,MAAM,OAAO;CACnB,MAAM,UAAU,OAAO;CAEvB,IAAI,KACF;OAAK,MAAM,GAAG,UAAU,OAAO,QAAQ,GAAG,GACxC,IAAI,OAAO,aAAa,OAAO,YAC7B,OAAO,IAAI,gBAAgB,MAAM,UAAoB,GAAG,MAAM,SAAmB;CAErF;CAGF,IAAI,SACF;OAAK,MAAM,GAAG,UAAU,OAAO,QAAQ,OAAO,GAC5C,IAAI,OAAO,aAAa,OAAO,YAC7B,OAAO,IAAI,gBAAgB,MAAM,UAAoB,GAAG,MAAM,SAAmB;CAErF;CAGF,OAAO;AACT;AAEA,eAAsB,yBACpB,aACA,QACsD;CACtD,MAAM,aAAuB,CAAC;CAE9B,IAAI;CACJ,IAAI;EACF,cAAc,MAAMC,wCAAkD,MAAM;CAC9E,SAAS,OAAO;EACd,QAAQ,KACN,kDAAkD,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GACzG;EACA,OAAO;GAAE,UAAU;GAAO,YAAY,CAAC,oBAAoB;EAAE;CAC/D;CAEA,MAAM,cAAc,uBAAuB,WAAW;CACtD,MAAM,cAAc,uBAAuB,WAAW;CAEtD,KAAK,MAAM,CAAC,KAAK,cAAc,aAAa;EAC1C,MAAM,YAAY,YAAY,IAAI,GAAG;EACrC,IAAI,aAAa,cAAc,WAAW;GACxC,WAAW,KAAK,GAAG;GACnB,QAAQ,MACN,wCAAwC,IAAI,aAAa,UAAU,aAAa,WAClF;EACF;CACF;CAEA,IAAI,WAAW,WAAW,KAAK,YAAY,OAAO,GAChD,QAAQ,IACN,gEAAgE,YAAY,KAAK,kBACnF;CAGF,OAAO;EAAE,UAAU,WAAW,WAAW;EAAG;CAAW;AACzD;AASA,SAAS,cAAc,KAA8B,YAAoB,OAAsB;CAC7F,MAAM,OAAO,WAAW,MAAM,GAAG;CACjC,IAAI,UAAU;CACd,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,SAAS,GAAG,KAAK,GAAG;EAC3C,MAAM,MAAM,KAAK;EACjB,IAAI,QAAQ,SAAS,UAAa,QAAQ,SAAS,QAAQ,OAAO,QAAQ,SAAS,UACjF,QAAQ,OAAO,CAAC;EAElB,UAAU,QAAQ;CACpB;CACA,QAAQ,KAAK,KAAK,SAAS,MAAO;AACpC;AAEA,SAAS,iBAAiB,KAA8B,YAA0B;CAChF,MAAM,OAAO,WAAW,MAAM,GAAG;CACjC,IAAI,UAAU;CACd,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,SAAS,GAAG,KAAK,GAAG;EAC3C,MAAM,MAAM,KAAK;EACjB,IAAI,QAAQ,SAAS,UAAa,OAAO,QAAQ,SAAS,UAAU;EACpE,UAAU,QAAQ;CACpB;CACA,OAAO,QAAQ,KAAK,KAAK,SAAS;AACpC;AAEA,SAAgB,mBAAmB,MAM1B;CACP,QAAQ,IACN,oBAAoB,KAAK,IAAI,YAAY,KAAK,SAAS,kBAAkB,KAAK,kBAAkB,GAAG,aAAa,KAAK,aAAa,IACpI;CAEA,IAAI;EACF,MAAM,SAAS,KAAK,gCAAmB,KAAK,eAAe,MAAM,CAAC;EAClE,cAAc,QAAQ,KAAK,UAAU,KAAK,GAAG;EAC7C,IAAI,KAAK,gBACP,IAAI,KAAK,WACP,cAAc,QAAQ,KAAK,gBAAgB,KAAK,SAAS;OAEzD,iBAAiB,QAAQ,KAAK,cAAc;EAGhD,2BAAc,KAAK,eAAe,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE,GAAG;EACxE,QAAQ,IAAI,iCAAiC,KAAK,UAAU;EAC5D,IAAI,KAAK,kBAAkB,KAAK,WAC9B,QAAQ,IAAI,iCAAiC,KAAK,gBAAgB;CAEtE,SAAS,KAAK;EACZ,QAAQ,MAAM,0CAA2C,IAAc,OAAO;CAChF;AACF;AAEA,SAAgB,iBAAiB,QAAqC;CACpE,MAAM,UAA+B,CAAC;CACtC,KAAK,MAAM,QAAQ,OAAO,MAAM,IAAI,GAAG;EACrC,IAAI,CAAC,KAAK,SAAS,cAAc,GAAG;EACpC,MAAM,WAAW,KAAK,MAAM,WAAW;EACvC,MAAM,gBAAgB,KAAK,MAAM,gBAAgB;EACjD,IAAI,CAAC,YAAY,CAAC,eAAe;EACjC,MAAM,sBAAsB,KAAK,MAAM,sBAAsB;EAC7D,MAAM,iBAAiB,KAAK,MAAM,iBAAiB;EACnD,QAAQ,KAAK;GACX,KAAK,SAAS;GACd,UAAU,cAAc;GACxB,gBAAgB,sBAAsB,MAAM;GAC5C,WAAW,iBAAiB,MAAM;EACpC,CAAC;CACH;CACA,OAAO;AACT;AAEA,SAAgB,mBACd,QACA,SACyB;CACzB,MAAM,SAAS,gBAAgB,MAAM;CACrC,KAAK,MAAM,UAAU,SAAS;EAC5B,cAAc,QAAQ,OAAO,UAAU,OAAO,GAAG;EACjD,IAAI,OAAO,gBACT,IAAI,OAAO,WACT,cAAc,QAAQ,OAAO,gBAAgB,OAAO,SAAS;OAE7D,iBAAiB,QAAQ,OAAO,cAAc;CAGpD;CACA,OAAO;AACT;AAEA,SAAgB,cAAc,eAAuB,WAAkC;CAErF,MAAM,UADS,KAAK,gCAAmB,eAAe,MAAM,CACvC,CAAC,CAAC;CACvB,IAAI,CAAC,SAAS,OAAO;CACrB,MAAM,iCAAkB,eAAe,IAAI;CAC3C,MAAM,sBAAsB,UAAU,QAAQ,OAAO,GAAG,CAAC,CAAC,QAAQ,QAAQ,EAAE;CAC5E,KAAK,MAAM,CAAC,KAAK,WAAW,OAAO,QAAQ,OAAO,GAAG;EACnD,MAAM,MAAM,QAAQ;EACpB,IAAI,OAAO,QAAQ,YAAY,CAAC,IAAI,WAAW,QAAQ,GAAG;EAI1D,wBAHsB,YAAY,IAAI,MAAM,CAAe,CAAC,CAAC,CAC1D,QAAQ,OAAO,GAAG,CAAC,CACnB,QAAQ,QAAQ,EACR,MAAM,qBAAqB,OAAO;CAC/C;CACA,OAAO;AACT"}

package/dist/integrity.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"integrity.d.cts","names":[],"sources":["../src/integrity.ts"],"mappings":";UAQU,aAAA;EACR,eAAA;EACA,QAAA;AAAA;AAAA,iBAGc,cAAA,CAAe,OAAA,WAAkB,MAAA;AAAA,iBAyD3B,oBAAA,CACpB,GAAA,UACA,OAAA,GAAU,aAAA,GACT,OAAA;AAAA,iBAmBa,eAAA,CAAgB,GAAA;AAAA,iBAOV,eAAA,CACpB,GAAA,UACA,iBAAA,UACA,OAAA,GAAU,aAAA,GACT,OAAA;AAAA,cAkBU,iBAAA;EAAA,QACH,MAAA;EAER,QAAA,CAAS,GAAA,UAAa,SAAA;EAItB,aAAA,CAAc,OAAA,UAAiB,SAAA;EAI/B,GAAA,CAAI,GAAA;EAIJ,GAAA,CAAI,GAAA;EAIJ,OAAA,CAAA,GAAW,gBAAA;AAAA;AAAA,iBA6BS,wBAAA,CACpB,WAAA,EAAa,MAAA,mBACb,MAAA,WACC,OAAA;EAAU,QAAA;EAAmB,UAAA;AAAA;AAAA,UAmCf,iBAAA;EACf,GAAA;EACA,SAAA;EACA,QAAA;EACA,cAAA;AAAA;AAAA,iBA2Bc,kBAAA,CAAmB,IAAA;EACjC,GAAA;EACA,SAAA;EACA,aAAA;EACA,QAAA;EACA,cAAA;AAAA;AAAA,iBA0Bc,gBAAA,CAAiB,MAAA,WAAiB,iBAAA;AAAA,iBAmBlC,kBAAA,CACd,MAAA,EAAQ,MAAA,mBACR,OAAA,EAAS,iBAAA,KACR,MAAA;AAAA,iBAea,aAAA,CAAc,aAAA,UAAuB,SAAA"}
+{"version":3,"file":"integrity.d.cts","names":[],"sources":["../src/integrity.ts"],"mappings":";UAQU;EACR;EACA;;iBAGc,eAAe,kBAAkB;iBAyD3B,qBACpB,aACA,UAAU,gBACT;iBAmBa,gBAAgB;iBAOV,gBACpB,aACA,2BACA,UAAU,gBACT;cAkBU;UACH;EAER,SAAS,aAAa;EAItB,cAAc,iBAAiB;EAI/B,IAAI;EAIJ,IAAI;EAIJ,WAAW;;iBA6BS,yBACpB,aAAa,yBACb,iBACC;EAAU;EAAmB;;UAmCf;EACf;EACA;EACA;EACA;;iBA2Bc,mBAAmB;EACjC;EACA;EACA;EACA;EACA;;iBA0Bc,iBAAiB,iBAAiB;iBAmBlC,mBACd,QAAQ,yBACR,SAAS,sBACR;iBAea,cAAc,uBAAuB"}

package/dist/integrity.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"integrity.d.mts","names":[],"sources":["../src/integrity.ts"],"mappings":";UAQU,aAAA;EACR,eAAA;EACA,QAAA;AAAA;AAAA,iBAGc,cAAA,CAAe,OAAA,WAAkB,MAAA;AAAA,iBAyD3B,oBAAA,CACpB,GAAA,UACA,OAAA,GAAU,aAAA,GACT,OAAA;AAAA,iBAmBa,eAAA,CAAgB,GAAA;AAAA,iBAOV,eAAA,CACpB,GAAA,UACA,iBAAA,UACA,OAAA,GAAU,aAAA,GACT,OAAA;AAAA,cAkBU,iBAAA;EAAA,QACH,MAAA;EAER,QAAA,CAAS,GAAA,UAAa,SAAA;EAItB,aAAA,CAAc,OAAA,UAAiB,SAAA;EAI/B,GAAA,CAAI,GAAA;EAIJ,GAAA,CAAI,GAAA;EAIJ,OAAA,CAAA,GAAW,gBAAA;AAAA;AAAA,iBA6BS,wBAAA,CACpB,WAAA,EAAa,MAAA,mBACb,MAAA,WACC,OAAA;EAAU,QAAA;EAAmB,UAAA;AAAA;AAAA,UAmCf,iBAAA;EACf,GAAA;EACA,SAAA;EACA,QAAA;EACA,cAAA;AAAA;AAAA,iBA2Bc,kBAAA,CAAmB,IAAA;EACjC,GAAA;EACA,SAAA;EACA,aAAA;EACA,QAAA;EACA,cAAA;AAAA;AAAA,iBA0Bc,gBAAA,CAAiB,MAAA,WAAiB,iBAAA;AAAA,iBAmBlC,kBAAA,CACd,MAAA,EAAQ,MAAA,mBACR,OAAA,EAAS,iBAAA,KACR,MAAA;AAAA,iBAea,aAAA,CAAc,aAAA,UAAuB,SAAA"}
+{"version":3,"file":"integrity.d.mts","names":[],"sources":["../src/integrity.ts"],"mappings":";UAQU;EACR;EACA;;iBAGc,eAAe,kBAAkB;iBAyD3B,qBACpB,aACA,UAAU,gBACT;iBAmBa,gBAAgB;iBAOV,gBACpB,aACA,2BACA,UAAU,gBACT;cAkBU;UACH;EAER,SAAS,aAAa;EAItB,cAAc,iBAAiB;EAI/B,IAAI;EAIJ,IAAI;EAIJ,WAAW;;iBA6BS,yBACpB,aAAa,yBACb,iBACC;EAAU;EAAmB;;UAmCf;EACf;EACA;EACA;EACA;;iBA2Bc,mBAAmB;EACjC;EACA;EACA;EACA;EACA;;iBA0Bc,iBAAiB,iBAAiB;iBAmBlC,mBACd,QAAQ,yBACR,SAAS,sBACR;iBAea,cAAc,uBAAuB"}

package/dist/integrity.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"integrity.mjs","names":[],"sources":["../src/integrity.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { readFileSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { fetchBosConfigFromFastKv } from \"./fastkv\";\nimport { fetchResponse } from \"./http-client\";\n\nconst DEFAULT_MAX_SRI_RESPONSE_BYTES = 20 * 1024 * 1024;\n\ninterface SriUrlOptions {\n  resolveEntryUrl?: boolean;\n  maxBytes?: number;\n}\n\nexport function computeSriHash(content: string | Buffer): string {\n  return `sha384-${createHash(\"sha384\").update(content).digest(\"base64\")}`;\n}\n\nfunction resolveSriTargetUrl(url: string, options?: SriUrlOptions): string {\n  return options?.resolveEntryUrl === false ? url : resolveEntryUrl(url);\n}\n\nfunction getMaxSriResponseBytes(options?: SriUrlOptions): number {\n  return options?.maxBytes ?? DEFAULT_MAX_SRI_RESPONSE_BYTES;\n}\n\nasync function computeSriHashFromResponse(\n  response: Response,\n  url: string,\n  options?: SriUrlOptions,\n): Promise<string> {\n  const maxBytes = getMaxSriResponseBytes(options);\n  const contentLengthHeader = response.headers.get(\"content-length\");\n\n  if (contentLengthHeader) {\n    const contentLength = Number(contentLengthHeader);\n    if (Number.isFinite(contentLength) && contentLength > maxBytes) {\n      throw new Error(\n        `[SRI] Response for ${url} exceeds max size of ${maxBytes} bytes (${contentLength})`,\n      );\n    }\n  }\n\n  if (!response.body) {\n    throw new Error(`[SRI] Missing response body for ${url}`);\n  }\n\n  const hash = createHash(\"sha384\");\n  const reader = response.body.getReader();\n  let totalBytes = 0;\n\n  while (true) {\n    const { done, value } = await reader.read();\n    if (done) {\n      break;\n    }\n\n    totalBytes += value.byteLength;\n    if (totalBytes > maxBytes) {\n      await reader.cancel();\n      throw new Error(\n        `[SRI] Response for ${url} exceeds max size of ${maxBytes} bytes (${totalBytes})`,\n      );\n    }\n\n    hash.update(value);\n  }\n\n  return `sha384-${hash.digest(\"base64\")}`;\n}\n\nexport async function computeSriHashForUrl(\n  url: string,\n  options?: SriUrlOptions,\n): Promise<string | null> {\n  try {\n    const entryUrl = resolveSriTargetUrl(url, options);\n\n    const response = await fetchResponse(entryUrl, { timeout: \"30 seconds\" });\n    if (!response.ok) {\n      console.warn(`[SRI] Failed to fetch ${entryUrl}: ${response.status} ${response.statusText}`);\n      return null;\n    }\n    return await computeSriHashFromResponse(response, entryUrl, options);\n  } catch (error) {\n    console.warn(\n      `[SRI] Error computing integrity for ${url}:`,\n      error instanceof Error ? error.message : error,\n    );\n    return null;\n  }\n}\n\nexport function resolveEntryUrl(url: string): string {\n  if (url.endsWith(\"/remoteEntry.js\")) return url;\n  if (url.endsWith(\"/mf-manifest.json\"))\n    return `${url.replace(/\\/mf-manifest\\.json$/, \"\")}/remoteEntry.js`;\n  return `${url.replace(/\\/$/, \"\")}/remoteEntry.js`;\n}\n\nexport async function verifySriForUrl(\n  url: string,\n  expectedIntegrity: string,\n  options?: SriUrlOptions,\n): Promise<void> {\n  const entryUrl = resolveSriTargetUrl(url, options);\n\n  const response = await fetchResponse(entryUrl, { timeout: \"30 seconds\" });\n  if (!response.ok) {\n    console.warn(`[SRI] Failed to fetch ${entryUrl} for verification: ${response.status}`);\n    return;\n  }\n\n  const computed = await computeSriHashFromResponse(response, entryUrl, options);\n\n  if (computed !== expectedIntegrity) {\n    throw new Error(\n      `[SRI] Integrity check failed for ${entryUrl}\\n  Expected: ${expectedIntegrity}\\n  Computed: ${computed}`,\n    );\n  }\n}\n\nexport class IntegrityRegistry {\n  private hashes = new Map<string, string>();\n\n  register(url: string, integrity: string): void {\n    this.hashes.set(url, integrity);\n  }\n\n  registerEntry(baseUrl: string, integrity: string): void {\n    this.hashes.set(resolveEntryUrl(baseUrl), integrity);\n  }\n\n  get(url: string): string | undefined {\n    return this.hashes.get(url);\n  }\n\n  has(url: string): boolean {\n    return this.hashes.has(url);\n  }\n\n  entries(): IterableIterator<[string, string]> {\n    return this.hashes.entries();\n  }\n}\n\nfunction extractIntegrityHashes(config: Record<string, unknown>): Map<string, string> {\n  const hashes = new Map<string, string>();\n  const app = config.app as Record<string, Record<string, unknown>> | undefined;\n  const plugins = config.plugins as Record<string, Record<string, unknown>> | undefined;\n\n  if (app) {\n    for (const [, entry] of Object.entries(app)) {\n      if (entry?.integrity && entry?.production) {\n        hashes.set(resolveEntryUrl(entry.production as string), entry.integrity as string);\n      }\n    }\n  }\n\n  if (plugins) {\n    for (const [, entry] of Object.entries(plugins)) {\n      if (entry?.integrity && entry?.production) {\n        hashes.set(resolveEntryUrl(entry.production as string), entry.integrity as string);\n      }\n    }\n  }\n\n  return hashes;\n}\n\nexport async function verifyConfigAgainstChain(\n  localConfig: Record<string, unknown>,\n  bosUrl: string,\n): Promise<{ verified: boolean; mismatches: string[] }> {\n  const mismatches: string[] = [];\n\n  let chainConfig: Record<string, unknown>;\n  try {\n    chainConfig = await fetchBosConfigFromFastKv<Record<string, unknown>>(bosUrl);\n  } catch (error) {\n    console.warn(\n      `[Attestation] Failed to fetch on-chain config: ${error instanceof Error ? error.message : String(error)}`,\n    );\n    return { verified: false, mismatches: [\"chain-fetch-failed\"] };\n  }\n\n  const localHashes = extractIntegrityHashes(localConfig);\n  const chainHashes = extractIntegrityHashes(chainConfig);\n\n  for (const [url, chainHash] of chainHashes) {\n    const localHash = localHashes.get(url);\n    if (localHash && localHash !== chainHash) {\n      mismatches.push(url);\n      console.error(\n        `[Attestation] Integrity mismatch for ${url}\\n  Local: ${localHash}\\n  Chain: ${chainHash}`,\n      );\n    }\n  }\n\n  if (mismatches.length === 0 && localHashes.size > 0) {\n    console.log(\n      `[Attestation] Local config verified against on-chain anchor (${localHashes.size} entries checked)`,\n    );\n  }\n\n  return { verified: mismatches.length === 0, mismatches };\n}\n\nexport interface DeployResultEntry {\n  url: string;\n  integrity?: string;\n  urlField: string;\n  integrityField?: string;\n}\n\nfunction setNestedPath(obj: Record<string, unknown>, dottedPath: string, value: unknown): void {\n  const keys = dottedPath.split(\".\");\n  let current = obj;\n  for (let i = 0; i < keys.length - 1; i += 1) {\n    const key = keys[i]!;\n    if (current[key] === undefined || current[key] === null || typeof current[key] !== \"object\") {\n      current[key] = {};\n    }\n    current = current[key] as Record<string, unknown>;\n  }\n  current[keys[keys.length - 1]!] = value;\n}\n\nfunction deleteNestedPath(obj: Record<string, unknown>, dottedPath: string): void {\n  const keys = dottedPath.split(\".\");\n  let current = obj;\n  for (let i = 0; i < keys.length - 1; i += 1) {\n    const key = keys[i]!;\n    if (current[key] === undefined || typeof current[key] !== \"object\") return;\n    current = current[key] as Record<string, unknown>;\n  }\n  delete current[keys[keys.length - 1]!];\n}\n\nexport function reportDeployResult(opts: {\n  url: string;\n  integrity?: string | null;\n  bosConfigPath: string;\n  urlField: string;\n  integrityField?: string;\n}): void {\n  console.log(\n    `[BOS_DEPLOY] url=${opts.url} urlField=${opts.urlField} integrityField=${opts.integrityField ?? \"\"} integrity=${opts.integrity ?? \"\"}`,\n  );\n\n  try {\n    const config = JSON.parse(readFileSync(opts.bosConfigPath, \"utf8\")) as Record<string, unknown>;\n    setNestedPath(config, opts.urlField, opts.url);\n    if (opts.integrityField) {\n      if (opts.integrity) {\n        setNestedPath(config, opts.integrityField, opts.integrity);\n      } else {\n        deleteNestedPath(config, opts.integrityField);\n      }\n    }\n    writeFileSync(opts.bosConfigPath, `${JSON.stringify(config, null, 2)}\\n`);\n    console.log(`   ✅ Updated bos.config.json: ${opts.urlField}`);\n    if (opts.integrityField && opts.integrity) {\n      console.log(`   ✅ Updated bos.config.json: ${opts.integrityField}`);\n    }\n  } catch (err) {\n    console.error(\"   ❌ Failed to update bos.config.json:\", (err as Error).message);\n  }\n}\n\nexport function parseDeployLines(output: string): DeployResultEntry[] {\n  const results: DeployResultEntry[] = [];\n  for (const line of output.split(\"\\n\")) {\n    if (!line.includes(\"[BOS_DEPLOY]\")) continue;\n    const urlMatch = line.match(/url=(\\S+)/);\n    const urlFieldMatch = line.match(/urlField=(\\S+)/);\n    if (!urlMatch || !urlFieldMatch) continue;\n    const integrityFieldMatch = line.match(/integrityField=(\\S+)/);\n    const integrityMatch = line.match(/integrity=(\\S+)/);\n    results.push({\n      url: urlMatch[1],\n      urlField: urlFieldMatch[1],\n      integrityField: integrityFieldMatch?.[1] || undefined,\n      integrity: integrityMatch?.[1] || undefined,\n    });\n  }\n  return results;\n}\n\nexport function applyDeployResults(\n  config: Record<string, unknown>,\n  results: DeployResultEntry[],\n): Record<string, unknown> {\n  const merged = structuredClone(config);\n  for (const result of results) {\n    setNestedPath(merged, result.urlField, result.url);\n    if (result.integrityField) {\n      if (result.integrity) {\n        setNestedPath(merged, result.integrityField, result.integrity);\n      } else {\n        deleteNestedPath(merged, result.integrityField);\n      }\n    }\n  }\n  return merged;\n}\n\nexport function findPluginKey(bosConfigPath: string, pluginDir: string): string | null {\n  const config = JSON.parse(readFileSync(bosConfigPath, \"utf8\")) as Record<string, unknown>;\n  const plugins = config.plugins as Record<string, Record<string, unknown>> | undefined;\n  if (!plugins) return null;\n  const configRoot = join(bosConfigPath, \"..\");\n  const normalizedPluginDir = pluginDir.replace(/\\\\/g, \"/\").replace(/\\/+$/, \"\");\n  for (const [key, plugin] of Object.entries(plugins)) {\n    const dev = plugin?.development;\n    if (typeof dev !== \"string\" || !dev.startsWith(\"local:\")) continue;\n    const resolved = join(configRoot, dev.slice(\"local:\".length))\n      .replace(/\\\\/g, \"/\")\n      .replace(/\\/+$/, \"\");\n    if (resolved === normalizedPluginDir) return key;\n  }\n  return null;\n}\n"],"mappings":";;;;;;;AAMA,MAAM,iCAAiC,KAAK,OAAO;AAOnD,SAAgB,eAAe,SAAkC;AAC/D,QAAO,UAAU,WAAW,SAAS,CAAC,OAAO,QAAQ,CAAC,OAAO,SAAS;;AAGxE,SAAS,oBAAoB,KAAa,SAAiC;AACzE,QAAO,SAAS,oBAAoB,QAAQ,MAAM,gBAAgB,IAAI;;AAGxE,SAAS,uBAAuB,SAAiC;AAC/D,QAAO,SAAS,YAAY;;AAG9B,eAAe,2BACb,UACA,KACA,SACiB;CACjB,MAAM,WAAW,uBAAuB,QAAQ;CAChD,MAAM,sBAAsB,SAAS,QAAQ,IAAI,iBAAiB;AAElE,KAAI,qBAAqB;EACvB,MAAM,gBAAgB,OAAO,oBAAoB;AACjD,MAAI,OAAO,SAAS,cAAc,IAAI,gBAAgB,SACpD,OAAM,IAAI,MACR,sBAAsB,IAAI,uBAAuB,SAAS,UAAU,cAAc,GACnF;;AAIL,KAAI,CAAC,SAAS,KACZ,OAAM,IAAI,MAAM,mCAAmC,MAAM;CAG3D,MAAM,OAAO,WAAW,SAAS;CACjC,MAAM,SAAS,SAAS,KAAK,WAAW;CACxC,IAAI,aAAa;AAEjB,QAAO,MAAM;EACX,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,MAAM;AAC3C,MAAI,KACF;AAGF,gBAAc,MAAM;AACpB,MAAI,aAAa,UAAU;AACzB,SAAM,OAAO,QAAQ;AACrB,SAAM,IAAI,MACR,sBAAsB,IAAI,uBAAuB,SAAS,UAAU,WAAW,GAChF;;AAGH,OAAK,OAAO,MAAM;;AAGpB,QAAO,UAAU,KAAK,OAAO,SAAS;;AAGxC,eAAsB,qBACpB,KACA,SACwB;AACxB,KAAI;EACF,MAAM,WAAW,oBAAoB,KAAK,QAAQ;EAElD,MAAM,WAAW,MAAM,cAAc,UAAU,EAAE,SAAS,cAAc,CAAC;AACzE,MAAI,CAAC,SAAS,IAAI;AAChB,WAAQ,KAAK,yBAAyB,SAAS,IAAI,SAAS,OAAO,GAAG,SAAS,aAAa;AAC5F,UAAO;;AAET,SAAO,MAAM,2BAA2B,UAAU,UAAU,QAAQ;UAC7D,OAAO;AACd,UAAQ,KACN,uCAAuC,IAAI,IAC3C,iBAAiB,QAAQ,MAAM,UAAU,MAC1C;AACD,SAAO;;;AAIX,SAAgB,gBAAgB,KAAqB;AACnD,KAAI,IAAI,SAAS,kBAAkB,CAAE,QAAO;AAC5C,KAAI,IAAI,SAAS,oBAAoB,CACnC,QAAO,GAAG,IAAI,QAAQ,wBAAwB,GAAG,CAAC;AACpD,QAAO,GAAG,IAAI,QAAQ,OAAO,GAAG,CAAC;;AAGnC,eAAsB,gBACpB,KACA,mBACA,SACe;CACf,MAAM,WAAW,oBAAoB,KAAK,QAAQ;CAElD,MAAM,WAAW,MAAM,cAAc,UAAU,EAAE,SAAS,cAAc,CAAC;AACzE,KAAI,CAAC,SAAS,IAAI;AAChB,UAAQ,KAAK,yBAAyB,SAAS,qBAAqB,SAAS,SAAS;AACtF;;CAGF,MAAM,WAAW,MAAM,2BAA2B,UAAU,UAAU,QAAQ;AAE9E,KAAI,aAAa,kBACf,OAAM,IAAI,MACR,oCAAoC,SAAS,gBAAgB,kBAAkB,gBAAgB,WAChG;;AAIL,IAAa,oBAAb,MAA+B;CAC7B,AAAQ,yBAAS,IAAI,KAAqB;CAE1C,SAAS,KAAa,WAAyB;AAC7C,OAAK,OAAO,IAAI,KAAK,UAAU;;CAGjC,cAAc,SAAiB,WAAyB;AACtD,OAAK,OAAO,IAAI,gBAAgB,QAAQ,EAAE,UAAU;;CAGtD,IAAI,KAAiC;AACnC,SAAO,KAAK,OAAO,IAAI,IAAI;;CAG7B,IAAI,KAAsB;AACxB,SAAO,KAAK,OAAO,IAAI,IAAI;;CAG7B,UAA8C;AAC5C,SAAO,KAAK,OAAO,SAAS;;;AAIhC,SAAS,uBAAuB,QAAsD;CACpF,MAAM,yBAAS,IAAI,KAAqB;CACxC,MAAM,MAAM,OAAO;CACnB,MAAM,UAAU,OAAO;AAEvB,KAAI,KACF;OAAK,MAAM,GAAG,UAAU,OAAO,QAAQ,IAAI,CACzC,KAAI,OAAO,aAAa,OAAO,WAC7B,QAAO,IAAI,gBAAgB,MAAM,WAAqB,EAAE,MAAM,UAAoB;;AAKxF,KAAI,SACF;OAAK,MAAM,GAAG,UAAU,OAAO,QAAQ,QAAQ,CAC7C,KAAI,OAAO,aAAa,OAAO,WAC7B,QAAO,IAAI,gBAAgB,MAAM,WAAqB,EAAE,MAAM,UAAoB;;AAKxF,QAAO;;AAGT,eAAsB,yBACpB,aACA,QACsD;CACtD,MAAM,aAAuB,EAAE;CAE/B,IAAI;AACJ,KAAI;AACF,gBAAc,MAAM,yBAAkD,OAAO;UACtE,OAAO;AACd,UAAQ,KACN,kDAAkD,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GACzG;AACD,SAAO;GAAE,UAAU;GAAO,YAAY,CAAC,qBAAqB;GAAE;;CAGhE,MAAM,cAAc,uBAAuB,YAAY;CACvD,MAAM,cAAc,uBAAuB,YAAY;AAEvD,MAAK,MAAM,CAAC,KAAK,cAAc,aAAa;EAC1C,MAAM,YAAY,YAAY,IAAI,IAAI;AACtC,MAAI,aAAa,cAAc,WAAW;AACxC,cAAW,KAAK,IAAI;AACpB,WAAQ,MACN,wCAAwC,IAAI,aAAa,UAAU,aAAa,YACjF;;;AAIL,KAAI,WAAW,WAAW,KAAK,YAAY,OAAO,EAChD,SAAQ,IACN,gEAAgE,YAAY,KAAK,mBAClF;AAGH,QAAO;EAAE,UAAU,WAAW,WAAW;EAAG;EAAY;;AAU1D,SAAS,cAAc,KAA8B,YAAoB,OAAsB;CAC7F,MAAM,OAAO,WAAW,MAAM,IAAI;CAClC,IAAI,UAAU;AACd,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,SAAS,GAAG,KAAK,GAAG;EAC3C,MAAM,MAAM,KAAK;AACjB,MAAI,QAAQ,SAAS,UAAa,QAAQ,SAAS,QAAQ,OAAO,QAAQ,SAAS,SACjF,SAAQ,OAAO,EAAE;AAEnB,YAAU,QAAQ;;AAEpB,SAAQ,KAAK,KAAK,SAAS,MAAO;;AAGpC,SAAS,iBAAiB,KAA8B,YAA0B;CAChF,MAAM,OAAO,WAAW,MAAM,IAAI;CAClC,IAAI,UAAU;AACd,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,SAAS,GAAG,KAAK,GAAG;EAC3C,MAAM,MAAM,KAAK;AACjB,MAAI,QAAQ,SAAS,UAAa,OAAO,QAAQ,SAAS,SAAU;AACpE,YAAU,QAAQ;;AAEpB,QAAO,QAAQ,KAAK,KAAK,SAAS;;AAGpC,SAAgB,mBAAmB,MAM1B;AACP,SAAQ,IACN,oBAAoB,KAAK,IAAI,YAAY,KAAK,SAAS,kBAAkB,KAAK,kBAAkB,GAAG,aAAa,KAAK,aAAa,KACnI;AAED,KAAI;EACF,MAAM,SAAS,KAAK,MAAM,aAAa,KAAK,eAAe,OAAO,CAAC;AACnE,gBAAc,QAAQ,KAAK,UAAU,KAAK,IAAI;AAC9C,MAAI,KAAK,eACP,KAAI,KAAK,UACP,eAAc,QAAQ,KAAK,gBAAgB,KAAK,UAAU;MAE1D,kBAAiB,QAAQ,KAAK,eAAe;AAGjD,gBAAc,KAAK,eAAe,GAAG,KAAK,UAAU,QAAQ,MAAM,EAAE,CAAC,IAAI;AACzE,UAAQ,IAAI,iCAAiC,KAAK,WAAW;AAC7D,MAAI,KAAK,kBAAkB,KAAK,UAC9B,SAAQ,IAAI,iCAAiC,KAAK,iBAAiB;UAE9D,KAAK;AACZ,UAAQ,MAAM,0CAA2C,IAAc,QAAQ;;;AAInF,SAAgB,iBAAiB,QAAqC;CACpE,MAAM,UAA+B,EAAE;AACvC,MAAK,MAAM,QAAQ,OAAO,MAAM,KAAK,EAAE;AACrC,MAAI,CAAC,KAAK,SAAS,eAAe,CAAE;EACpC,MAAM,WAAW,KAAK,MAAM,YAAY;EACxC,MAAM,gBAAgB,KAAK,MAAM,iBAAiB;AAClD,MAAI,CAAC,YAAY,CAAC,cAAe;EACjC,MAAM,sBAAsB,KAAK,MAAM,uBAAuB;EAC9D,MAAM,iBAAiB,KAAK,MAAM,kBAAkB;AACpD,UAAQ,KAAK;GACX,KAAK,SAAS;GACd,UAAU,cAAc;GACxB,gBAAgB,sBAAsB,MAAM;GAC5C,WAAW,iBAAiB,MAAM;GACnC,CAAC;;AAEJ,QAAO;;AAGT,SAAgB,mBACd,QACA,SACyB;CACzB,MAAM,SAAS,gBAAgB,OAAO;AACtC,MAAK,MAAM,UAAU,SAAS;AAC5B,gBAAc,QAAQ,OAAO,UAAU,OAAO,IAAI;AAClD,MAAI,OAAO,eACT,KAAI,OAAO,UACT,eAAc,QAAQ,OAAO,gBAAgB,OAAO,UAAU;MAE9D,kBAAiB,QAAQ,OAAO,eAAe;;AAIrD,QAAO;;AAGT,SAAgB,cAAc,eAAuB,WAAkC;CAErF,MAAM,UADS,KAAK,MAAM,aAAa,eAAe,OAAO,CACvC,CAAC;AACvB,KAAI,CAAC,QAAS,QAAO;CACrB,MAAM,aAAa,KAAK,eAAe,KAAK;CAC5C,MAAM,sBAAsB,UAAU,QAAQ,OAAO,IAAI,CAAC,QAAQ,QAAQ,GAAG;AAC7E,MAAK,MAAM,CAAC,KAAK,WAAW,OAAO,QAAQ,QAAQ,EAAE;EACnD,MAAM,MAAM,QAAQ;AACpB,MAAI,OAAO,QAAQ,YAAY,CAAC,IAAI,WAAW,SAAS,CAAE;AAI1D,MAHiB,KAAK,YAAY,IAAI,MAAM,EAAgB,CAAC,CAC1D,QAAQ,OAAO,IAAI,CACnB,QAAQ,QAAQ,GACP,KAAK,oBAAqB,QAAO;;AAE/C,QAAO"}
+{"version":3,"file":"integrity.mjs","names":[],"sources":["../src/integrity.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { readFileSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { fetchBosConfigFromFastKv } from \"./fastkv\";\nimport { fetchResponse } from \"./http-client\";\n\nconst DEFAULT_MAX_SRI_RESPONSE_BYTES = 20 * 1024 * 1024;\n\ninterface SriUrlOptions {\n  resolveEntryUrl?: boolean;\n  maxBytes?: number;\n}\n\nexport function computeSriHash(content: string | Buffer): string {\n  return `sha384-${createHash(\"sha384\").update(content).digest(\"base64\")}`;\n}\n\nfunction resolveSriTargetUrl(url: string, options?: SriUrlOptions): string {\n  return options?.resolveEntryUrl === false ? url : resolveEntryUrl(url);\n}\n\nfunction getMaxSriResponseBytes(options?: SriUrlOptions): number {\n  return options?.maxBytes ?? DEFAULT_MAX_SRI_RESPONSE_BYTES;\n}\n\nasync function computeSriHashFromResponse(\n  response: Response,\n  url: string,\n  options?: SriUrlOptions,\n): Promise<string> {\n  const maxBytes = getMaxSriResponseBytes(options);\n  const contentLengthHeader = response.headers.get(\"content-length\");\n\n  if (contentLengthHeader) {\n    const contentLength = Number(contentLengthHeader);\n    if (Number.isFinite(contentLength) && contentLength > maxBytes) {\n      throw new Error(\n        `[SRI] Response for ${url} exceeds max size of ${maxBytes} bytes (${contentLength})`,\n      );\n    }\n  }\n\n  if (!response.body) {\n    throw new Error(`[SRI] Missing response body for ${url}`);\n  }\n\n  const hash = createHash(\"sha384\");\n  const reader = response.body.getReader();\n  let totalBytes = 0;\n\n  while (true) {\n    const { done, value } = await reader.read();\n    if (done) {\n      break;\n    }\n\n    totalBytes += value.byteLength;\n    if (totalBytes > maxBytes) {\n      await reader.cancel();\n      throw new Error(\n        `[SRI] Response for ${url} exceeds max size of ${maxBytes} bytes (${totalBytes})`,\n      );\n    }\n\n    hash.update(value);\n  }\n\n  return `sha384-${hash.digest(\"base64\")}`;\n}\n\nexport async function computeSriHashForUrl(\n  url: string,\n  options?: SriUrlOptions,\n): Promise<string | null> {\n  try {\n    const entryUrl = resolveSriTargetUrl(url, options);\n\n    const response = await fetchResponse(entryUrl, { timeout: \"30 seconds\" });\n    if (!response.ok) {\n      console.warn(`[SRI] Failed to fetch ${entryUrl}: ${response.status} ${response.statusText}`);\n      return null;\n    }\n    return await computeSriHashFromResponse(response, entryUrl, options);\n  } catch (error) {\n    console.warn(\n      `[SRI] Error computing integrity for ${url}:`,\n      error instanceof Error ? error.message : error,\n    );\n    return null;\n  }\n}\n\nexport function resolveEntryUrl(url: string): string {\n  if (url.endsWith(\"/remoteEntry.js\")) return url;\n  if (url.endsWith(\"/mf-manifest.json\"))\n    return `${url.replace(/\\/mf-manifest\\.json$/, \"\")}/remoteEntry.js`;\n  return `${url.replace(/\\/$/, \"\")}/remoteEntry.js`;\n}\n\nexport async function verifySriForUrl(\n  url: string,\n  expectedIntegrity: string,\n  options?: SriUrlOptions,\n): Promise<void> {\n  const entryUrl = resolveSriTargetUrl(url, options);\n\n  const response = await fetchResponse(entryUrl, { timeout: \"30 seconds\" });\n  if (!response.ok) {\n    console.warn(`[SRI] Failed to fetch ${entryUrl} for verification: ${response.status}`);\n    return;\n  }\n\n  const computed = await computeSriHashFromResponse(response, entryUrl, options);\n\n  if (computed !== expectedIntegrity) {\n    throw new Error(\n      `[SRI] Integrity check failed for ${entryUrl}\\n  Expected: ${expectedIntegrity}\\n  Computed: ${computed}`,\n    );\n  }\n}\n\nexport class IntegrityRegistry {\n  private hashes = new Map<string, string>();\n\n  register(url: string, integrity: string): void {\n    this.hashes.set(url, integrity);\n  }\n\n  registerEntry(baseUrl: string, integrity: string): void {\n    this.hashes.set(resolveEntryUrl(baseUrl), integrity);\n  }\n\n  get(url: string): string | undefined {\n    return this.hashes.get(url);\n  }\n\n  has(url: string): boolean {\n    return this.hashes.has(url);\n  }\n\n  entries(): IterableIterator<[string, string]> {\n    return this.hashes.entries();\n  }\n}\n\nfunction extractIntegrityHashes(config: Record<string, unknown>): Map<string, string> {\n  const hashes = new Map<string, string>();\n  const app = config.app as Record<string, Record<string, unknown>> | undefined;\n  const plugins = config.plugins as Record<string, Record<string, unknown>> | undefined;\n\n  if (app) {\n    for (const [, entry] of Object.entries(app)) {\n      if (entry?.integrity && entry?.production) {\n        hashes.set(resolveEntryUrl(entry.production as string), entry.integrity as string);\n      }\n    }\n  }\n\n  if (plugins) {\n    for (const [, entry] of Object.entries(plugins)) {\n      if (entry?.integrity && entry?.production) {\n        hashes.set(resolveEntryUrl(entry.production as string), entry.integrity as string);\n      }\n    }\n  }\n\n  return hashes;\n}\n\nexport async function verifyConfigAgainstChain(\n  localConfig: Record<string, unknown>,\n  bosUrl: string,\n): Promise<{ verified: boolean; mismatches: string[] }> {\n  const mismatches: string[] = [];\n\n  let chainConfig: Record<string, unknown>;\n  try {\n    chainConfig = await fetchBosConfigFromFastKv<Record<string, unknown>>(bosUrl);\n  } catch (error) {\n    console.warn(\n      `[Attestation] Failed to fetch on-chain config: ${error instanceof Error ? error.message : String(error)}`,\n    );\n    return { verified: false, mismatches: [\"chain-fetch-failed\"] };\n  }\n\n  const localHashes = extractIntegrityHashes(localConfig);\n  const chainHashes = extractIntegrityHashes(chainConfig);\n\n  for (const [url, chainHash] of chainHashes) {\n    const localHash = localHashes.get(url);\n    if (localHash && localHash !== chainHash) {\n      mismatches.push(url);\n      console.error(\n        `[Attestation] Integrity mismatch for ${url}\\n  Local: ${localHash}\\n  Chain: ${chainHash}`,\n      );\n    }\n  }\n\n  if (mismatches.length === 0 && localHashes.size > 0) {\n    console.log(\n      `[Attestation] Local config verified against on-chain anchor (${localHashes.size} entries checked)`,\n    );\n  }\n\n  return { verified: mismatches.length === 0, mismatches };\n}\n\nexport interface DeployResultEntry {\n  url: string;\n  integrity?: string;\n  urlField: string;\n  integrityField?: string;\n}\n\nfunction setNestedPath(obj: Record<string, unknown>, dottedPath: string, value: unknown): void {\n  const keys = dottedPath.split(\".\");\n  let current = obj;\n  for (let i = 0; i < keys.length - 1; i += 1) {\n    const key = keys[i]!;\n    if (current[key] === undefined || current[key] === null || typeof current[key] !== \"object\") {\n      current[key] = {};\n    }\n    current = current[key] as Record<string, unknown>;\n  }\n  current[keys[keys.length - 1]!] = value;\n}\n\nfunction deleteNestedPath(obj: Record<string, unknown>, dottedPath: string): void {\n  const keys = dottedPath.split(\".\");\n  let current = obj;\n  for (let i = 0; i < keys.length - 1; i += 1) {\n    const key = keys[i]!;\n    if (current[key] === undefined || typeof current[key] !== \"object\") return;\n    current = current[key] as Record<string, unknown>;\n  }\n  delete current[keys[keys.length - 1]!];\n}\n\nexport function reportDeployResult(opts: {\n  url: string;\n  integrity?: string | null;\n  bosConfigPath: string;\n  urlField: string;\n  integrityField?: string;\n}): void {\n  console.log(\n    `[BOS_DEPLOY] url=${opts.url} urlField=${opts.urlField} integrityField=${opts.integrityField ?? \"\"} integrity=${opts.integrity ?? \"\"}`,\n  );\n\n  try {\n    const config = JSON.parse(readFileSync(opts.bosConfigPath, \"utf8\")) as Record<string, unknown>;\n    setNestedPath(config, opts.urlField, opts.url);\n    if (opts.integrityField) {\n      if (opts.integrity) {\n        setNestedPath(config, opts.integrityField, opts.integrity);\n      } else {\n        deleteNestedPath(config, opts.integrityField);\n      }\n    }\n    writeFileSync(opts.bosConfigPath, `${JSON.stringify(config, null, 2)}\\n`);\n    console.log(`   ✅ Updated bos.config.json: ${opts.urlField}`);\n    if (opts.integrityField && opts.integrity) {\n      console.log(`   ✅ Updated bos.config.json: ${opts.integrityField}`);\n    }\n  } catch (err) {\n    console.error(\"   ❌ Failed to update bos.config.json:\", (err as Error).message);\n  }\n}\n\nexport function parseDeployLines(output: string): DeployResultEntry[] {\n  const results: DeployResultEntry[] = [];\n  for (const line of output.split(\"\\n\")) {\n    if (!line.includes(\"[BOS_DEPLOY]\")) continue;\n    const urlMatch = line.match(/url=(\\S+)/);\n    const urlFieldMatch = line.match(/urlField=(\\S+)/);\n    if (!urlMatch || !urlFieldMatch) continue;\n    const integrityFieldMatch = line.match(/integrityField=(\\S+)/);\n    const integrityMatch = line.match(/integrity=(\\S+)/);\n    results.push({\n      url: urlMatch[1],\n      urlField: urlFieldMatch[1],\n      integrityField: integrityFieldMatch?.[1] || undefined,\n      integrity: integrityMatch?.[1] || undefined,\n    });\n  }\n  return results;\n}\n\nexport function applyDeployResults(\n  config: Record<string, unknown>,\n  results: DeployResultEntry[],\n): Record<string, unknown> {\n  const merged = structuredClone(config);\n  for (const result of results) {\n    setNestedPath(merged, result.urlField, result.url);\n    if (result.integrityField) {\n      if (result.integrity) {\n        setNestedPath(merged, result.integrityField, result.integrity);\n      } else {\n        deleteNestedPath(merged, result.integrityField);\n      }\n    }\n  }\n  return merged;\n}\n\nexport function findPluginKey(bosConfigPath: string, pluginDir: string): string | null {\n  const config = JSON.parse(readFileSync(bosConfigPath, \"utf8\")) as Record<string, unknown>;\n  const plugins = config.plugins as Record<string, Record<string, unknown>> | undefined;\n  if (!plugins) return null;\n  const configRoot = join(bosConfigPath, \"..\");\n  const normalizedPluginDir = pluginDir.replace(/\\\\/g, \"/\").replace(/\\/+$/, \"\");\n  for (const [key, plugin] of Object.entries(plugins)) {\n    const dev = plugin?.development;\n    if (typeof dev !== \"string\" || !dev.startsWith(\"local:\")) continue;\n    const resolved = join(configRoot, dev.slice(\"local:\".length))\n      .replace(/\\\\/g, \"/\")\n      .replace(/\\/+$/, \"\");\n    if (resolved === normalizedPluginDir) return key;\n  }\n  return null;\n}\n"],"mappings":";;;;;;;AAMA,MAAM,iCAAiC,KAAK,OAAO;AAOnD,SAAgB,eAAe,SAAkC;CAC/D,OAAO,UAAU,WAAW,QAAQ,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,OAAO,QAAQ;AACvE;AAEA,SAAS,oBAAoB,KAAa,SAAiC;CACzE,OAAO,SAAS,oBAAoB,QAAQ,MAAM,gBAAgB,GAAG;AACvE;AAEA,SAAS,uBAAuB,SAAiC;CAC/D,OAAO,SAAS,YAAY;AAC9B;AAEA,eAAe,2BACb,UACA,KACA,SACiB;CACjB,MAAM,WAAW,uBAAuB,OAAO;CAC/C,MAAM,sBAAsB,SAAS,QAAQ,IAAI,gBAAgB;CAEjE,IAAI,qBAAqB;EACvB,MAAM,gBAAgB,OAAO,mBAAmB;EAChD,IAAI,OAAO,SAAS,aAAa,KAAK,gBAAgB,UACpD,MAAM,IAAI,MACR,sBAAsB,IAAI,uBAAuB,SAAS,UAAU,cAAc,EACpF;CAEJ;CAEA,IAAI,CAAC,SAAS,MACZ,MAAM,IAAI,MAAM,mCAAmC,KAAK;CAG1D,MAAM,OAAO,WAAW,QAAQ;CAChC,MAAM,SAAS,SAAS,KAAK,UAAU;CACvC,IAAI,aAAa;CAEjB,OAAO,MAAM;EACX,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;EAC1C,IAAI,MACF;EAGF,cAAc,MAAM;EACpB,IAAI,aAAa,UAAU;GACzB,MAAM,OAAO,OAAO;GACpB,MAAM,IAAI,MACR,sBAAsB,IAAI,uBAAuB,SAAS,UAAU,WAAW,EACjF;EACF;EAEA,KAAK,OAAO,KAAK;CACnB;CAEA,OAAO,UAAU,KAAK,OAAO,QAAQ;AACvC;AAEA,eAAsB,qBACpB,KACA,SACwB;CACxB,IAAI;EACF,MAAM,WAAW,oBAAoB,KAAK,OAAO;EAEjD,MAAM,WAAW,MAAM,cAAc,UAAU,EAAE,SAAS,aAAa,CAAC;EACxE,IAAI,CAAC,SAAS,IAAI;GAChB,QAAQ,KAAK,yBAAyB,SAAS,IAAI,SAAS,OAAO,GAAG,SAAS,YAAY;GAC3F,OAAO;EACT;EACA,OAAO,MAAM,2BAA2B,UAAU,UAAU,OAAO;CACrE,SAAS,OAAO;EACd,QAAQ,KACN,uCAAuC,IAAI,IAC3C,iBAAiB,QAAQ,MAAM,UAAU,KAC3C;EACA,OAAO;CACT;AACF;AAEA,SAAgB,gBAAgB,KAAqB;CACnD,IAAI,IAAI,SAAS,iBAAiB,GAAG,OAAO;CAC5C,IAAI,IAAI,SAAS,mBAAmB,GAClC,OAAO,GAAG,IAAI,QAAQ,wBAAwB,EAAE,EAAE;CACpD,OAAO,GAAG,IAAI,QAAQ,OAAO,EAAE,EAAE;AACnC;AAEA,eAAsB,gBACpB,KACA,mBACA,SACe;CACf,MAAM,WAAW,oBAAoB,KAAK,OAAO;CAEjD,MAAM,WAAW,MAAM,cAAc,UAAU,EAAE,SAAS,aAAa,CAAC;CACxE,IAAI,CAAC,SAAS,IAAI;EAChB,QAAQ,KAAK,yBAAyB,SAAS,qBAAqB,SAAS,QAAQ;EACrF;CACF;CAEA,MAAM,WAAW,MAAM,2BAA2B,UAAU,UAAU,OAAO;CAE7E,IAAI,aAAa,mBACf,MAAM,IAAI,MACR,oCAAoC,SAAS,gBAAgB,kBAAkB,gBAAgB,UACjG;AAEJ;AAEA,IAAa,oBAAb,MAA+B;CAC7B,AAAQ,yBAAS,IAAI,IAAoB;CAEzC,SAAS,KAAa,WAAyB;EAC7C,KAAK,OAAO,IAAI,KAAK,SAAS;CAChC;CAEA,cAAc,SAAiB,WAAyB;EACtD,KAAK,OAAO,IAAI,gBAAgB,OAAO,GAAG,SAAS;CACrD;CAEA,IAAI,KAAiC;EACnC,OAAO,KAAK,OAAO,IAAI,GAAG;CAC5B;CAEA,IAAI,KAAsB;EACxB,OAAO,KAAK,OAAO,IAAI,GAAG;CAC5B;CAEA,UAA8C;EAC5C,OAAO,KAAK,OAAO,QAAQ;CAC7B;AACF;AAEA,SAAS,uBAAuB,QAAsD;CACpF,MAAM,yBAAS,IAAI,IAAoB;CACvC,MAAM,MAAM,OAAO;CACnB,MAAM,UAAU,OAAO;CAEvB,IAAI,KACF;OAAK,MAAM,GAAG,UAAU,OAAO,QAAQ,GAAG,GACxC,IAAI,OAAO,aAAa,OAAO,YAC7B,OAAO,IAAI,gBAAgB,MAAM,UAAoB,GAAG,MAAM,SAAmB;CAErF;CAGF,IAAI,SACF;OAAK,MAAM,GAAG,UAAU,OAAO,QAAQ,OAAO,GAC5C,IAAI,OAAO,aAAa,OAAO,YAC7B,OAAO,IAAI,gBAAgB,MAAM,UAAoB,GAAG,MAAM,SAAmB;CAErF;CAGF,OAAO;AACT;AAEA,eAAsB,yBACpB,aACA,QACsD;CACtD,MAAM,aAAuB,CAAC;CAE9B,IAAI;CACJ,IAAI;EACF,cAAc,MAAM,yBAAkD,MAAM;CAC9E,SAAS,OAAO;EACd,QAAQ,KACN,kDAAkD,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GACzG;EACA,OAAO;GAAE,UAAU;GAAO,YAAY,CAAC,oBAAoB;EAAE;CAC/D;CAEA,MAAM,cAAc,uBAAuB,WAAW;CACtD,MAAM,cAAc,uBAAuB,WAAW;CAEtD,KAAK,MAAM,CAAC,KAAK,cAAc,aAAa;EAC1C,MAAM,YAAY,YAAY,IAAI,GAAG;EACrC,IAAI,aAAa,cAAc,WAAW;GACxC,WAAW,KAAK,GAAG;GACnB,QAAQ,MACN,wCAAwC,IAAI,aAAa,UAAU,aAAa,WAClF;EACF;CACF;CAEA,IAAI,WAAW,WAAW,KAAK,YAAY,OAAO,GAChD,QAAQ,IACN,gEAAgE,YAAY,KAAK,kBACnF;CAGF,OAAO;EAAE,UAAU,WAAW,WAAW;EAAG;CAAW;AACzD;AASA,SAAS,cAAc,KAA8B,YAAoB,OAAsB;CAC7F,MAAM,OAAO,WAAW,MAAM,GAAG;CACjC,IAAI,UAAU;CACd,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,SAAS,GAAG,KAAK,GAAG;EAC3C,MAAM,MAAM,KAAK;EACjB,IAAI,QAAQ,SAAS,UAAa,QAAQ,SAAS,QAAQ,OAAO,QAAQ,SAAS,UACjF,QAAQ,OAAO,CAAC;EAElB,UAAU,QAAQ;CACpB;CACA,QAAQ,KAAK,KAAK,SAAS,MAAO;AACpC;AAEA,SAAS,iBAAiB,KAA8B,YAA0B;CAChF,MAAM,OAAO,WAAW,MAAM,GAAG;CACjC,IAAI,UAAU;CACd,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,SAAS,GAAG,KAAK,GAAG;EAC3C,MAAM,MAAM,KAAK;EACjB,IAAI,QAAQ,SAAS,UAAa,OAAO,QAAQ,SAAS,UAAU;EACpE,UAAU,QAAQ;CACpB;CACA,OAAO,QAAQ,KAAK,KAAK,SAAS;AACpC;AAEA,SAAgB,mBAAmB,MAM1B;CACP,QAAQ,IACN,oBAAoB,KAAK,IAAI,YAAY,KAAK,SAAS,kBAAkB,KAAK,kBAAkB,GAAG,aAAa,KAAK,aAAa,IACpI;CAEA,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,aAAa,KAAK,eAAe,MAAM,CAAC;EAClE,cAAc,QAAQ,KAAK,UAAU,KAAK,GAAG;EAC7C,IAAI,KAAK,gBACP,IAAI,KAAK,WACP,cAAc,QAAQ,KAAK,gBAAgB,KAAK,SAAS;OAEzD,iBAAiB,QAAQ,KAAK,cAAc;EAGhD,cAAc,KAAK,eAAe,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE,GAAG;EACxE,QAAQ,IAAI,iCAAiC,KAAK,UAAU;EAC5D,IAAI,KAAK,kBAAkB,KAAK,WAC9B,QAAQ,IAAI,iCAAiC,KAAK,gBAAgB;CAEtE,SAAS,KAAK;EACZ,QAAQ,MAAM,0CAA2C,IAAc,OAAO;CAChF;AACF;AAEA,SAAgB,iBAAiB,QAAqC;CACpE,MAAM,UAA+B,CAAC;CACtC,KAAK,MAAM,QAAQ,OAAO,MAAM,IAAI,GAAG;EACrC,IAAI,CAAC,KAAK,SAAS,cAAc,GAAG;EACpC,MAAM,WAAW,KAAK,MAAM,WAAW;EACvC,MAAM,gBAAgB,KAAK,MAAM,gBAAgB;EACjD,IAAI,CAAC,YAAY,CAAC,eAAe;EACjC,MAAM,sBAAsB,KAAK,MAAM,sBAAsB;EAC7D,MAAM,iBAAiB,KAAK,MAAM,iBAAiB;EACnD,QAAQ,KAAK;GACX,KAAK,SAAS;GACd,UAAU,cAAc;GACxB,gBAAgB,sBAAsB,MAAM;GAC5C,WAAW,iBAAiB,MAAM;EACpC,CAAC;CACH;CACA,OAAO;AACT;AAEA,SAAgB,mBACd,QACA,SACyB;CACzB,MAAM,SAAS,gBAAgB,MAAM;CACrC,KAAK,MAAM,UAAU,SAAS;EAC5B,cAAc,QAAQ,OAAO,UAAU,OAAO,GAAG;EACjD,IAAI,OAAO,gBACT,IAAI,OAAO,WACT,cAAc,QAAQ,OAAO,gBAAgB,OAAO,SAAS;OAE7D,iBAAiB,QAAQ,OAAO,cAAc;CAGpD;CACA,OAAO;AACT;AAEA,SAAgB,cAAc,eAAuB,WAAkC;CAErF,MAAM,UADS,KAAK,MAAM,aAAa,eAAe,MAAM,CACvC,CAAC,CAAC;CACvB,IAAI,CAAC,SAAS,OAAO;CACrB,MAAM,aAAa,KAAK,eAAe,IAAI;CAC3C,MAAM,sBAAsB,UAAU,QAAQ,OAAO,GAAG,CAAC,CAAC,QAAQ,QAAQ,EAAE;CAC5E,KAAK,MAAM,CAAC,KAAK,WAAW,OAAO,QAAQ,OAAO,GAAG;EACnD,MAAM,MAAM,QAAQ;EACpB,IAAI,OAAO,QAAQ,YAAY,CAAC,IAAI,WAAW,QAAQ,GAAG;EAI1D,IAHiB,KAAK,YAAY,IAAI,MAAM,CAAe,CAAC,CAAC,CAC1D,QAAQ,OAAO,GAAG,CAAC,CACnB,QAAQ,QAAQ,EACR,MAAM,qBAAqB,OAAO;CAC/C;CACA,OAAO;AACT"}

package/dist/internal/manifest-normalizer.cjs

@@ -1,4 +1,3 @@
-const require_runtime = require('../_virtual/_rolldown/runtime.cjs');
 let node_fs = require("node:fs");
 let node_path = require("node:path");
 let glob = require("glob");
@@ -45,7 +44,7 @@ function loadManifestNormalizationSpec(sourceRootDir) {
 	};
 }
 function normalizeDependencyMap(map, spec, options) {
-	const catalogPackages = new Set([...FRAMEWORK_PACKAGES, ...CATALOG_TOOL_PACKAGES]);
+	const catalogPackages = /* @__PURE__ */ new Set([...FRAMEWORK_PACKAGES, ...CATALOG_TOOL_PACKAGES]);
 	let modified = false;
 	for (const [name, version] of Object.entries(map)) {
 		if (options.preserveCatalogRefs && catalogPackages.has(name)) {
@@ -156,5 +155,6 @@ async function normalizePackageManifestsInTree(opts) {
 
 //#endregion
 exports.loadManifestNormalizationSpec = loadManifestNormalizationSpec;
+exports.normalizePackageManifest = normalizePackageManifest;
 exports.normalizePackageManifestsInTree = normalizePackageManifestsInTree;
 //# sourceMappingURL=manifest-normalizer.cjs.map

package/dist/internal/manifest-normalizer.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"manifest-normalizer.cjs","names":[],"sources":["../../src/internal/manifest-normalizer.ts"],"sourcesContent":["import { cpSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from \"node:fs\";\nimport { dirname, join, relative, sep } from \"node:path\";\nimport { glob } from \"glob\";\n\nconst FRAMEWORK_PACKAGES = [\"every-plugin\", \"everything-dev\"] as const;\n\nconst CATALOG_TOOL_PACKAGES = [\n  \"@rspack/core\",\n  \"@rspack/cli\",\n  \"@rsbuild/core\",\n  \"@rsbuild/plugin-react\",\n  \"@module-federation/enhanced\",\n  \"@module-federation/node\",\n  \"@module-federation/rsbuild-plugin\",\n  \"@module-federation/runtime-core\",\n  \"@module-federation/sdk\",\n  \"@module-federation/dts-plugin\",\n] as const;\n\ntype PackageJson = Record<string, unknown>;\n\ntype NormalizationSpec = {\n  rootCatalog: Record<string, string>;\n  frameworkVersions: Record<string, string>;\n};\n\ntype NormalizeManifestOptions = {\n  resolveCatalogRefs: boolean;\n  preserveCatalogRefs?: boolean;\n  excludeFrameworkWorkspaces?: boolean;\n  removeWorkspaceDeps?: string[];\n  removeWorkspaces?: boolean;\n  removePublishScripts?: boolean;\n};\n\nexport type NormalizeTreeOptions = NormalizeManifestOptions & {\n  sourceRootDir: string;\n  targetDir: string;\n};\n\nfunction readJson<T>(filePath: string): T {\n  return JSON.parse(readFileSync(filePath, \"utf-8\")) as T;\n}\n\nfunction extractExactVersion(input: string | undefined): string | null {\n  if (!input) return null;\n  const match = input.match(/\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?/);\n  return match ? match[0] : null;\n}\n\nfunction writeJson(filePath: string, value: PackageJson) {\n  writeFileSync(filePath, `${JSON.stringify(value, null, 2)}\\n`);\n}\n\nexport function loadManifestNormalizationSpec(sourceRootDir: string): NormalizationSpec {\n  const rootPackage = readJson<PackageJson>(join(sourceRootDir, \"package.json\"));\n  const rootCatalog = {\n    ...(((rootPackage.workspaces as { catalog?: Record<string, string> } | undefined)?.catalog ??\n      {}) as Record<string, string>),\n  };\n  const frameworkVersions: Record<string, string> = {};\n\n  for (const packageName of FRAMEWORK_PACKAGES) {\n    const sourcePackagePath = join(sourceRootDir, \"packages\", packageName, \"package.json\");\n    const localPackagePath = join(import.meta.dirname, \"..\", \"..\", packageName, \"package.json\");\n    const packageVersion = existsSync(localPackagePath)\n      ? readJson<{ version: string }>(localPackagePath).version\n      : existsSync(sourcePackagePath)\n        ? readJson<{ version: string }>(sourcePackagePath).version\n        : extractExactVersion(rootCatalog[packageName]);\n\n    if (!packageVersion) {\n      throw new Error(`Could not resolve version for ${packageName}`);\n    }\n\n    frameworkVersions[packageName] = packageVersion;\n    rootCatalog[packageName] = `^${packageVersion}`;\n  }\n\n  return { rootCatalog, frameworkVersions };\n}\n\nfunction normalizeDependencyMap(\n  map: Record<string, string>,\n  spec: NormalizationSpec,\n  options: NormalizeManifestOptions,\n) {\n  const catalogPackages = new Set<string>([...FRAMEWORK_PACKAGES, ...CATALOG_TOOL_PACKAGES]);\n\n  let modified = false;\n\n  for (const [name, version] of Object.entries(map)) {\n    if (options.preserveCatalogRefs && catalogPackages.has(name)) {\n      if (version !== \"catalog:\") {\n        map[name] = \"catalog:\";\n        modified = true;\n      }\n      continue;\n    }\n\n    if (version === \"workspace:*\") {\n      const frameworkVersion = spec.frameworkVersions[name];\n      if (frameworkVersion) {\n        map[name] = `^${frameworkVersion}`;\n        modified = true;\n        continue;\n      }\n\n      if (options.removeWorkspaceDeps?.includes(name)) {\n        delete map[name];\n        modified = true;\n      }\n      continue;\n    }\n\n    if (options.resolveCatalogRefs && version.startsWith(\"catalog:\")) {\n      const resolved = spec.rootCatalog[name];\n      if (resolved) {\n        map[name] = resolved;\n        modified = true;\n      }\n    }\n  }\n\n  return modified;\n}\n\nexport function normalizePackageManifest(\n  pkg: PackageJson,\n  spec: NormalizationSpec,\n  options: NormalizeManifestOptions,\n) {\n  let modified = false;\n\n  for (const depField of [\"dependencies\", \"devDependencies\", \"peerDependencies\"]) {\n    const deps = pkg[depField];\n    if (!deps || typeof deps !== \"object\") continue;\n    if (normalizeDependencyMap(deps as Record<string, string>, spec, options)) {\n      modified = true;\n    }\n  }\n\n  if (pkg.workspaces && typeof pkg.workspaces === \"object\") {\n    const workspaces = pkg.workspaces as {\n      packages?: string[];\n      catalog?: Record<string, string>;\n    };\n\n    if (options.excludeFrameworkWorkspaces && Array.isArray(workspaces.packages)) {\n      const nextPackages = workspaces.packages.filter(\n        (entry) => !FRAMEWORK_PACKAGES.some((name) => entry === `packages/${name}`),\n      );\n      if (nextPackages.length !== workspaces.packages.length) {\n        workspaces.packages = nextPackages;\n        modified = true;\n      }\n    }\n\n    if (workspaces.catalog && typeof workspaces.catalog === \"object\") {\n      for (const [name, version] of Object.entries(workspaces.catalog)) {\n        const resolved = spec.rootCatalog[name];\n        if (resolved && resolved !== version) {\n          workspaces.catalog[name] = resolved;\n          modified = true;\n          continue;\n        }\n\n        if (version === \"workspace:*\" && spec.frameworkVersions[name]) {\n          workspaces.catalog[name] = `^${spec.frameworkVersions[name]}`;\n          modified = true;\n        }\n      }\n    }\n  }\n\n  if (options.removeWorkspaces && \"workspaces\" in pkg) {\n    delete pkg.workspaces;\n    modified = true;\n  }\n\n  if (options.removePublishScripts && pkg.scripts && typeof pkg.scripts === \"object\") {\n    const scripts = pkg.scripts as Record<string, string>;\n    let scriptsModified = false;\n    for (const key of [\"prepublishOnly\", \"prepack\", \"prepare\", \"postpack\"]) {\n      if (key in scripts) {\n        delete scripts[key];\n        scriptsModified = true;\n      }\n    }\n    if (scriptsModified) {\n      modified = true;\n      if (Object.keys(scripts).length === 0) {\n        delete pkg.scripts;\n      }\n    }\n  }\n\n  return modified;\n}\n\nexport async function normalizePackageManifestsInTree(opts: NormalizeTreeOptions) {\n  const spec = loadManifestNormalizationSpec(opts.sourceRootDir);\n  const files = await glob(\"**/package.json\", {\n    cwd: opts.targetDir,\n    nodir: true,\n    dot: false,\n    absolute: true,\n    ignore: [\"**/node_modules/**\"],\n  });\n\n  const updatedFiles: string[] = [];\n\n  for (const filePath of files) {\n    const pkg = readJson<PackageJson>(filePath);\n    if (normalizePackageManifest(pkg, spec, opts)) {\n      writeJson(filePath, pkg);\n      updatedFiles.push(filePath);\n    }\n  }\n\n  return updatedFiles;\n}\n\nfunction shouldCopyPackageFile(sourceDir: string, filePath: string) {\n  const relPath = relative(sourceDir, filePath);\n  if (!relPath) return true;\n  const segments = relPath.split(sep);\n  return !segments.includes(\"node_modules\") && !segments.includes(\"tests\");\n}\n\nfunction stripDevelopmentExports(pkg: PackageJson) {\n  const exports = pkg.exports;\n  if (!exports || typeof exports !== \"object\") return;\n\n  for (const key of Object.keys(exports as Record<string, unknown>)) {\n    const entry = (exports as Record<string, unknown>)[key];\n    if (entry && typeof entry === \"object\") {\n      delete (entry as Record<string, unknown>).development;\n    }\n  }\n}\n\nexport function stageReleasePackage(opts: {\n  repoRoot: string;\n  packageName: string;\n  outDir: string;\n}) {\n  const sourceDir = join(opts.repoRoot, \"packages\", opts.packageName);\n\n  rmSync(opts.outDir, { recursive: true, force: true });\n  mkdirSync(dirname(opts.outDir), { recursive: true });\n  cpSync(sourceDir, opts.outDir, {\n    recursive: true,\n    filter: (filePath) => shouldCopyPackageFile(sourceDir, filePath),\n  });\n  rmSync(join(opts.outDir, \"tests\"), { recursive: true, force: true });\n\n  const packageJsonPath = join(opts.outDir, \"package.json\");\n  const spec = loadManifestNormalizationSpec(opts.repoRoot);\n  const pkg = readJson<PackageJson>(packageJsonPath);\n\n  normalizePackageManifest(pkg, spec, {\n    resolveCatalogRefs: true,\n    preserveCatalogRefs: false,\n    removeWorkspaces: true,\n    removePublishScripts: true,\n  });\n\n  stripDevelopmentExports(pkg);\n\n  writeJson(packageJsonPath, pkg);\n}\n\nexport function stageReleasePackages(opts: {\n  repoRoot: string;\n  outDir: string;\n  packageNames?: string[];\n}) {\n  const packageNames = opts.packageNames ?? [...FRAMEWORK_PACKAGES];\n  rmSync(opts.outDir, { recursive: true, force: true });\n  mkdirSync(opts.outDir, { recursive: true });\n\n  for (const packageName of packageNames) {\n    stageReleasePackage({\n      repoRoot: opts.repoRoot,\n      packageName,\n      outDir: join(opts.outDir, packageName),\n    });\n  }\n}\n"],"mappings":";;;;;;AAIA,MAAM,qBAAqB,CAAC,gBAAgB,iBAAiB;AAE7D,MAAM,wBAAwB;CAC5B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;AAuBD,SAAS,SAAY,UAAqB;AACxC,QAAO,KAAK,gCAAmB,UAAU,QAAQ,CAAC;;AAGpD,SAAS,oBAAoB,OAA0C;AACrE,KAAI,CAAC,MAAO,QAAO;CACnB,MAAM,QAAQ,MAAM,MAAM,oCAAoC;AAC9D,QAAO,QAAQ,MAAM,KAAK;;AAG5B,SAAS,UAAU,UAAkB,OAAoB;AACvD,4BAAc,UAAU,GAAG,KAAK,UAAU,OAAO,MAAM,EAAE,CAAC,IAAI;;AAGhE,SAAgB,8BAA8B,eAA0C;CAEtF,MAAM,cAAc,EAClB,GAFkB,6BAA2B,eAAe,eAAe,CAE1D,CAAC,YAAiE,WACjF,EAAE,EACL;CACD,MAAM,oBAA4C,EAAE;AAEpD,MAAK,MAAM,eAAe,oBAAoB;EAC5C,MAAM,wCAAyB,eAAe,YAAY,aAAa,eAAe;EACtF,MAAM,kDAA6C,MAAM,MAAM,aAAa,eAAe;EAC3F,MAAM,yCAA4B,iBAAiB,GAC/C,SAA8B,iBAAiB,CAAC,kCACrC,kBAAkB,GAC3B,SAA8B,kBAAkB,CAAC,UACjD,oBAAoB,YAAY,aAAa;AAEnD,MAAI,CAAC,eACH,OAAM,IAAI,MAAM,iCAAiC,cAAc;AAGjE,oBAAkB,eAAe;AACjC,cAAY,eAAe,IAAI;;AAGjC,QAAO;EAAE;EAAa;EAAmB;;AAG3C,SAAS,uBACP,KACA,MACA,SACA;CACA,MAAM,kBAAkB,IAAI,IAAY,CAAC,GAAG,oBAAoB,GAAG,sBAAsB,CAAC;CAE1F,IAAI,WAAW;AAEf,MAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,IAAI,EAAE;AACjD,MAAI,QAAQ,uBAAuB,gBAAgB,IAAI,KAAK,EAAE;AAC5D,OAAI,YAAY,YAAY;AAC1B,QAAI,QAAQ;AACZ,eAAW;;AAEb;;AAGF,MAAI,YAAY,eAAe;GAC7B,MAAM,mBAAmB,KAAK,kBAAkB;AAChD,OAAI,kBAAkB;AACpB,QAAI,QAAQ,IAAI;AAChB,eAAW;AACX;;AAGF,OAAI,QAAQ,qBAAqB,SAAS,KAAK,EAAE;AAC/C,WAAO,IAAI;AACX,eAAW;;AAEb;;AAGF,MAAI,QAAQ,sBAAsB,QAAQ,WAAW,WAAW,EAAE;GAChE,MAAM,WAAW,KAAK,YAAY;AAClC,OAAI,UAAU;AACZ,QAAI,QAAQ;AACZ,eAAW;;;;AAKjB,QAAO;;AAGT,SAAgB,yBACd,KACA,MACA,SACA;CACA,IAAI,WAAW;AAEf,MAAK,MAAM,YAAY;EAAC;EAAgB;EAAmB;EAAmB,EAAE;EAC9E,MAAM,OAAO,IAAI;AACjB,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AACvC,MAAI,uBAAuB,MAAgC,MAAM,QAAQ,CACvE,YAAW;;AAIf,KAAI,IAAI,cAAc,OAAO,IAAI,eAAe,UAAU;EACxD,MAAM,aAAa,IAAI;AAKvB,MAAI,QAAQ,8BAA8B,MAAM,QAAQ,WAAW,SAAS,EAAE;GAC5E,MAAM,eAAe,WAAW,SAAS,QACtC,UAAU,CAAC,mBAAmB,MAAM,SAAS,UAAU,YAAY,OAAO,CAC5E;AACD,OAAI,aAAa,WAAW,WAAW,SAAS,QAAQ;AACtD,eAAW,WAAW;AACtB,eAAW;;;AAIf,MAAI,WAAW,WAAW,OAAO,WAAW,YAAY,SACtD,MAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,WAAW,QAAQ,EAAE;GAChE,MAAM,WAAW,KAAK,YAAY;AAClC,OAAI,YAAY,aAAa,SAAS;AACpC,eAAW,QAAQ,QAAQ;AAC3B,eAAW;AACX;;AAGF,OAAI,YAAY,iBAAiB,KAAK,kBAAkB,OAAO;AAC7D,eAAW,QAAQ,QAAQ,IAAI,KAAK,kBAAkB;AACtD,eAAW;;;;AAMnB,KAAI,QAAQ,oBAAoB,gBAAgB,KAAK;AACnD,SAAO,IAAI;AACX,aAAW;;AAGb,KAAI,QAAQ,wBAAwB,IAAI,WAAW,OAAO,IAAI,YAAY,UAAU;EAClF,MAAM,UAAU,IAAI;EACpB,IAAI,kBAAkB;AACtB,OAAK,MAAM,OAAO;GAAC;GAAkB;GAAW;GAAW;GAAW,CACpE,KAAI,OAAO,SAAS;AAClB,UAAO,QAAQ;AACf,qBAAkB;;AAGtB,MAAI,iBAAiB;AACnB,cAAW;AACX,OAAI,OAAO,KAAK,QAAQ,CAAC,WAAW,EAClC,QAAO,IAAI;;;AAKjB,QAAO;;AAGT,eAAsB,gCAAgC,MAA4B;CAChF,MAAM,OAAO,8BAA8B,KAAK,cAAc;CAC9D,MAAM,QAAQ,qBAAW,mBAAmB;EAC1C,KAAK,KAAK;EACV,OAAO;EACP,KAAK;EACL,UAAU;EACV,QAAQ,CAAC,qBAAqB;EAC/B,CAAC;CAEF,MAAM,eAAyB,EAAE;AAEjC,MAAK,MAAM,YAAY,OAAO;EAC5B,MAAM,MAAM,SAAsB,SAAS;AAC3C,MAAI,yBAAyB,KAAK,MAAM,KAAK,EAAE;AAC7C,aAAU,UAAU,IAAI;AACxB,gBAAa,KAAK,SAAS;;;AAI/B,QAAO"}
+{"version":3,"file":"manifest-normalizer.cjs","names":[],"sources":["../../src/internal/manifest-normalizer.ts"],"sourcesContent":["import { cpSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from \"node:fs\";\nimport { dirname, join, relative, sep } from \"node:path\";\nimport { glob } from \"glob\";\n\nconst FRAMEWORK_PACKAGES = [\"every-plugin\", \"everything-dev\"] as const;\n\nconst CATALOG_TOOL_PACKAGES = [\n  \"@rspack/core\",\n  \"@rspack/cli\",\n  \"@rsbuild/core\",\n  \"@rsbuild/plugin-react\",\n  \"@module-federation/enhanced\",\n  \"@module-federation/node\",\n  \"@module-federation/rsbuild-plugin\",\n  \"@module-federation/runtime-core\",\n  \"@module-federation/sdk\",\n  \"@module-federation/dts-plugin\",\n] as const;\n\ntype PackageJson = Record<string, unknown>;\n\ntype NormalizationSpec = {\n  rootCatalog: Record<string, string>;\n  frameworkVersions: Record<string, string>;\n};\n\ntype NormalizeManifestOptions = {\n  resolveCatalogRefs: boolean;\n  preserveCatalogRefs?: boolean;\n  excludeFrameworkWorkspaces?: boolean;\n  removeWorkspaceDeps?: string[];\n  removeWorkspaces?: boolean;\n  removePublishScripts?: boolean;\n};\n\nexport type NormalizeTreeOptions = NormalizeManifestOptions & {\n  sourceRootDir: string;\n  targetDir: string;\n};\n\nfunction readJson<T>(filePath: string): T {\n  return JSON.parse(readFileSync(filePath, \"utf-8\")) as T;\n}\n\nfunction extractExactVersion(input: string | undefined): string | null {\n  if (!input) return null;\n  const match = input.match(/\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?/);\n  return match ? match[0] : null;\n}\n\nfunction writeJson(filePath: string, value: PackageJson) {\n  writeFileSync(filePath, `${JSON.stringify(value, null, 2)}\\n`);\n}\n\nexport function loadManifestNormalizationSpec(sourceRootDir: string): NormalizationSpec {\n  const rootPackage = readJson<PackageJson>(join(sourceRootDir, \"package.json\"));\n  const rootCatalog = {\n    ...(((rootPackage.workspaces as { catalog?: Record<string, string> } | undefined)?.catalog ??\n      {}) as Record<string, string>),\n  };\n  const frameworkVersions: Record<string, string> = {};\n\n  for (const packageName of FRAMEWORK_PACKAGES) {\n    const sourcePackagePath = join(sourceRootDir, \"packages\", packageName, \"package.json\");\n    const localPackagePath = join(import.meta.dirname, \"..\", \"..\", packageName, \"package.json\");\n    const packageVersion = existsSync(localPackagePath)\n      ? readJson<{ version: string }>(localPackagePath).version\n      : existsSync(sourcePackagePath)\n        ? readJson<{ version: string }>(sourcePackagePath).version\n        : extractExactVersion(rootCatalog[packageName]);\n\n    if (!packageVersion) {\n      throw new Error(`Could not resolve version for ${packageName}`);\n    }\n\n    frameworkVersions[packageName] = packageVersion;\n    rootCatalog[packageName] = `^${packageVersion}`;\n  }\n\n  return { rootCatalog, frameworkVersions };\n}\n\nfunction normalizeDependencyMap(\n  map: Record<string, string>,\n  spec: NormalizationSpec,\n  options: NormalizeManifestOptions,\n) {\n  const catalogPackages = new Set<string>([...FRAMEWORK_PACKAGES, ...CATALOG_TOOL_PACKAGES]);\n\n  let modified = false;\n\n  for (const [name, version] of Object.entries(map)) {\n    if (options.preserveCatalogRefs && catalogPackages.has(name)) {\n      if (version !== \"catalog:\") {\n        map[name] = \"catalog:\";\n        modified = true;\n      }\n      continue;\n    }\n\n    if (version === \"workspace:*\") {\n      const frameworkVersion = spec.frameworkVersions[name];\n      if (frameworkVersion) {\n        map[name] = `^${frameworkVersion}`;\n        modified = true;\n        continue;\n      }\n\n      if (options.removeWorkspaceDeps?.includes(name)) {\n        delete map[name];\n        modified = true;\n      }\n      continue;\n    }\n\n    if (options.resolveCatalogRefs && version.startsWith(\"catalog:\")) {\n      const resolved = spec.rootCatalog[name];\n      if (resolved) {\n        map[name] = resolved;\n        modified = true;\n      }\n    }\n  }\n\n  return modified;\n}\n\nexport function normalizePackageManifest(\n  pkg: PackageJson,\n  spec: NormalizationSpec,\n  options: NormalizeManifestOptions,\n) {\n  let modified = false;\n\n  for (const depField of [\"dependencies\", \"devDependencies\", \"peerDependencies\"]) {\n    const deps = pkg[depField];\n    if (!deps || typeof deps !== \"object\") continue;\n    if (normalizeDependencyMap(deps as Record<string, string>, spec, options)) {\n      modified = true;\n    }\n  }\n\n  if (pkg.workspaces && typeof pkg.workspaces === \"object\") {\n    const workspaces = pkg.workspaces as {\n      packages?: string[];\n      catalog?: Record<string, string>;\n    };\n\n    if (options.excludeFrameworkWorkspaces && Array.isArray(workspaces.packages)) {\n      const nextPackages = workspaces.packages.filter(\n        (entry) => !FRAMEWORK_PACKAGES.some((name) => entry === `packages/${name}`),\n      );\n      if (nextPackages.length !== workspaces.packages.length) {\n        workspaces.packages = nextPackages;\n        modified = true;\n      }\n    }\n\n    if (workspaces.catalog && typeof workspaces.catalog === \"object\") {\n      for (const [name, version] of Object.entries(workspaces.catalog)) {\n        const resolved = spec.rootCatalog[name];\n        if (resolved && resolved !== version) {\n          workspaces.catalog[name] = resolved;\n          modified = true;\n          continue;\n        }\n\n        if (version === \"workspace:*\" && spec.frameworkVersions[name]) {\n          workspaces.catalog[name] = `^${spec.frameworkVersions[name]}`;\n          modified = true;\n        }\n      }\n    }\n  }\n\n  if (options.removeWorkspaces && \"workspaces\" in pkg) {\n    delete pkg.workspaces;\n    modified = true;\n  }\n\n  if (options.removePublishScripts && pkg.scripts && typeof pkg.scripts === \"object\") {\n    const scripts = pkg.scripts as Record<string, string>;\n    let scriptsModified = false;\n    for (const key of [\"prepublishOnly\", \"prepack\", \"prepare\", \"postpack\"]) {\n      if (key in scripts) {\n        delete scripts[key];\n        scriptsModified = true;\n      }\n    }\n    if (scriptsModified) {\n      modified = true;\n      if (Object.keys(scripts).length === 0) {\n        delete pkg.scripts;\n      }\n    }\n  }\n\n  return modified;\n}\n\nexport async function normalizePackageManifestsInTree(opts: NormalizeTreeOptions) {\n  const spec = loadManifestNormalizationSpec(opts.sourceRootDir);\n  const files = await glob(\"**/package.json\", {\n    cwd: opts.targetDir,\n    nodir: true,\n    dot: false,\n    absolute: true,\n    ignore: [\"**/node_modules/**\"],\n  });\n\n  const updatedFiles: string[] = [];\n\n  for (const filePath of files) {\n    const pkg = readJson<PackageJson>(filePath);\n    if (normalizePackageManifest(pkg, spec, opts)) {\n      writeJson(filePath, pkg);\n      updatedFiles.push(filePath);\n    }\n  }\n\n  return updatedFiles;\n}\n\nfunction shouldCopyPackageFile(sourceDir: string, filePath: string) {\n  const relPath = relative(sourceDir, filePath);\n  if (!relPath) return true;\n  const segments = relPath.split(sep);\n  return !segments.includes(\"node_modules\") && !segments.includes(\"tests\");\n}\n\nfunction stripDevelopmentExports(pkg: PackageJson) {\n  const exports = pkg.exports;\n  if (!exports || typeof exports !== \"object\") return;\n\n  for (const key of Object.keys(exports as Record<string, unknown>)) {\n    const entry = (exports as Record<string, unknown>)[key];\n    if (entry && typeof entry === \"object\") {\n      delete (entry as Record<string, unknown>).development;\n    }\n  }\n}\n\nexport function stageReleasePackage(opts: {\n  repoRoot: string;\n  packageName: string;\n  outDir: string;\n}) {\n  const sourceDir = join(opts.repoRoot, \"packages\", opts.packageName);\n\n  rmSync(opts.outDir, { recursive: true, force: true });\n  mkdirSync(dirname(opts.outDir), { recursive: true });\n  cpSync(sourceDir, opts.outDir, {\n    recursive: true,\n    filter: (filePath) => shouldCopyPackageFile(sourceDir, filePath),\n  });\n  rmSync(join(opts.outDir, \"tests\"), { recursive: true, force: true });\n\n  const packageJsonPath = join(opts.outDir, \"package.json\");\n  const spec = loadManifestNormalizationSpec(opts.repoRoot);\n  const pkg = readJson<PackageJson>(packageJsonPath);\n\n  normalizePackageManifest(pkg, spec, {\n    resolveCatalogRefs: true,\n    preserveCatalogRefs: false,\n    removeWorkspaces: true,\n    removePublishScripts: true,\n  });\n\n  stripDevelopmentExports(pkg);\n\n  writeJson(packageJsonPath, pkg);\n}\n\nexport function stageReleasePackages(opts: {\n  repoRoot: string;\n  outDir: string;\n  packageNames?: string[];\n}) {\n  const packageNames = opts.packageNames ?? [...FRAMEWORK_PACKAGES];\n  rmSync(opts.outDir, { recursive: true, force: true });\n  mkdirSync(opts.outDir, { recursive: true });\n\n  for (const packageName of packageNames) {\n    stageReleasePackage({\n      repoRoot: opts.repoRoot,\n      packageName,\n      outDir: join(opts.outDir, packageName),\n    });\n  }\n}\n"],"mappings":";;;;;AAIA,MAAM,qBAAqB,CAAC,gBAAgB,gBAAgB;AAE5D,MAAM,wBAAwB;CAC5B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAuBA,SAAS,SAAY,UAAqB;CACxC,OAAO,KAAK,gCAAmB,UAAU,OAAO,CAAC;AACnD;AAEA,SAAS,oBAAoB,OAA0C;CACrE,IAAI,CAAC,OAAO,OAAO;CACnB,MAAM,QAAQ,MAAM,MAAM,mCAAmC;CAC7D,OAAO,QAAQ,MAAM,KAAK;AAC5B;AAEA,SAAS,UAAU,UAAkB,OAAoB;CACvD,2BAAc,UAAU,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,EAAE,GAAG;AAC/D;AAEA,SAAgB,8BAA8B,eAA0C;CAEtF,MAAM,cAAc,EAClB,GAFkB,6BAA2B,eAAe,cAAc,CAE1D,CAAC,CAAC,YAAiE,WACjF,CAAC,EACL;CACA,MAAM,oBAA4C,CAAC;CAEnD,KAAK,MAAM,eAAe,oBAAoB;EAC5C,MAAM,wCAAyB,eAAe,YAAY,aAAa,cAAc;EACrF,MAAM,kDAA6C,MAAM,MAAM,aAAa,cAAc;EAC1F,MAAM,yCAA4B,gBAAgB,IAC9C,SAA8B,gBAAgB,CAAC,CAAC,kCACrC,iBAAiB,IAC1B,SAA8B,iBAAiB,CAAC,CAAC,UACjD,oBAAoB,YAAY,YAAY;EAElD,IAAI,CAAC,gBACH,MAAM,IAAI,MAAM,iCAAiC,aAAa;EAGhE,kBAAkB,eAAe;EACjC,YAAY,eAAe,IAAI;CACjC;CAEA,OAAO;EAAE;EAAa;CAAkB;AAC1C;AAEA,SAAS,uBACP,KACA,MACA,SACA;CACA,MAAM,kCAAkB,IAAI,IAAY,CAAC,GAAG,oBAAoB,GAAG,qBAAqB,CAAC;CAEzF,IAAI,WAAW;CAEf,KAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,GAAG,GAAG;EACjD,IAAI,QAAQ,uBAAuB,gBAAgB,IAAI,IAAI,GAAG;GAC5D,IAAI,YAAY,YAAY;IAC1B,IAAI,QAAQ;IACZ,WAAW;GACb;GACA;EACF;EAEA,IAAI,YAAY,eAAe;GAC7B,MAAM,mBAAmB,KAAK,kBAAkB;GAChD,IAAI,kBAAkB;IACpB,IAAI,QAAQ,IAAI;IAChB,WAAW;IACX;GACF;GAEA,IAAI,QAAQ,qBAAqB,SAAS,IAAI,GAAG;IAC/C,OAAO,IAAI;IACX,WAAW;GACb;GACA;EACF;EAEA,IAAI,QAAQ,sBAAsB,QAAQ,WAAW,UAAU,GAAG;GAChE,MAAM,WAAW,KAAK,YAAY;GAClC,IAAI,UAAU;IACZ,IAAI,QAAQ;IACZ,WAAW;GACb;EACF;CACF;CAEA,OAAO;AACT;AAEA,SAAgB,yBACd,KACA,MACA,SACA;CACA,IAAI,WAAW;CAEf,KAAK,MAAM,YAAY;EAAC;EAAgB;EAAmB;CAAkB,GAAG;EAC9E,MAAM,OAAO,IAAI;EACjB,IAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;EACvC,IAAI,uBAAuB,MAAgC,MAAM,OAAO,GACtE,WAAW;CAEf;CAEA,IAAI,IAAI,cAAc,OAAO,IAAI,eAAe,UAAU;EACxD,MAAM,aAAa,IAAI;EAKvB,IAAI,QAAQ,8BAA8B,MAAM,QAAQ,WAAW,QAAQ,GAAG;GAC5E,MAAM,eAAe,WAAW,SAAS,QACtC,UAAU,CAAC,mBAAmB,MAAM,SAAS,UAAU,YAAY,MAAM,CAC5E;GACA,IAAI,aAAa,WAAW,WAAW,SAAS,QAAQ;IACtD,WAAW,WAAW;IACtB,WAAW;GACb;EACF;EAEA,IAAI,WAAW,WAAW,OAAO,WAAW,YAAY,UACtD,KAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,WAAW,OAAO,GAAG;GAChE,MAAM,WAAW,KAAK,YAAY;GAClC,IAAI,YAAY,aAAa,SAAS;IACpC,WAAW,QAAQ,QAAQ;IAC3B,WAAW;IACX;GACF;GAEA,IAAI,YAAY,iBAAiB,KAAK,kBAAkB,OAAO;IAC7D,WAAW,QAAQ,QAAQ,IAAI,KAAK,kBAAkB;IACtD,WAAW;GACb;EACF;CAEJ;CAEA,IAAI,QAAQ,oBAAoB,gBAAgB,KAAK;EACnD,OAAO,IAAI;EACX,WAAW;CACb;CAEA,IAAI,QAAQ,wBAAwB,IAAI,WAAW,OAAO,IAAI,YAAY,UAAU;EAClF,MAAM,UAAU,IAAI;EACpB,IAAI,kBAAkB;EACtB,KAAK,MAAM,OAAO;GAAC;GAAkB;GAAW;GAAW;EAAU,GACnE,IAAI,OAAO,SAAS;GAClB,OAAO,QAAQ;GACf,kBAAkB;EACpB;EAEF,IAAI,iBAAiB;GACnB,WAAW;GACX,IAAI,OAAO,KAAK,OAAO,CAAC,CAAC,WAAW,GAClC,OAAO,IAAI;EAEf;CACF;CAEA,OAAO;AACT;AAEA,eAAsB,gCAAgC,MAA4B;CAChF,MAAM,OAAO,8BAA8B,KAAK,aAAa;CAC7D,MAAM,QAAQ,qBAAW,mBAAmB;EAC1C,KAAK,KAAK;EACV,OAAO;EACP,KAAK;EACL,UAAU;EACV,QAAQ,CAAC,oBAAoB;CAC/B,CAAC;CAED,MAAM,eAAyB,CAAC;CAEhC,KAAK,MAAM,YAAY,OAAO;EAC5B,MAAM,MAAM,SAAsB,QAAQ;EAC1C,IAAI,yBAAyB,KAAK,MAAM,IAAI,GAAG;GAC7C,UAAU,UAAU,GAAG;GACvB,aAAa,KAAK,QAAQ;EAC5B;CACF;CAEA,OAAO;AACT"}

package/dist/internal/manifest-normalizer.mjs

@@ -44,7 +44,7 @@ function loadManifestNormalizationSpec(sourceRootDir) {
 	};
 }
 function normalizeDependencyMap(map, spec, options) {
-	const catalogPackages = new Set([...FRAMEWORK_PACKAGES, ...CATALOG_TOOL_PACKAGES]);
+	const catalogPackages = /* @__PURE__ */ new Set([...FRAMEWORK_PACKAGES, ...CATALOG_TOOL_PACKAGES]);
 	let modified = false;
 	for (const [name, version] of Object.entries(map)) {
 		if (options.preserveCatalogRefs && catalogPackages.has(name)) {
@@ -154,5 +154,5 @@ async function normalizePackageManifestsInTree(opts) {
 }
 
 //#endregion
-export { loadManifestNormalizationSpec, normalizePackageManifestsInTree };
+export { loadManifestNormalizationSpec, normalizePackageManifest, normalizePackageManifestsInTree };
 //# sourceMappingURL=manifest-normalizer.mjs.map