everything-dev 1.53.2 → 2.0.0-rc.1

package/dist/deploy-diff.cjs

@@ -0,0 +1,119 @@
+const require_rollback = require('./rollback.cjs');
+let node_fs = require("node:fs");
+let node_path = require("node:path");
+let node_crypto = require("node:crypto");
+
+//#region src/deploy-diff.ts
+const BUNDLE_BASE_PATTERN = /\/bundles\/([^/]+)\/([^/]+)\/([^/]+)\/$/;
+function workspaceKeyOfBase(base) {
+	const match = BUNDLE_BASE_PATTERN.exec(`${base.replace(/\/$/, "")}/`);
+	return match ? match[3] : null;
+}
+/** The sha384 SRI the storage route would compute for these bytes. */
+function localObjectIntegrity(bytes) {
+	return `sha384-${(0, node_crypto.createHash)("sha384").update(bytes).digest("base64")}`;
+}
+function localSriMap(files) {
+	return Object.fromEntries(files.map((file) => [file.path, localObjectIntegrity(file.bytes)]));
+}
+const deployStatePath = (configDir) => (0, node_path.join)(configDir, ".bos", "deploy-state.json");
+function readDeployState(configDir) {
+	const path = deployStatePath(configDir);
+	if (!(0, node_fs.existsSync)(path)) return {
+		version: 1,
+		apps: {}
+	};
+	try {
+		const parsed = JSON.parse((0, node_fs.readFileSync)(path, "utf8"));
+		if (parsed.version !== 1 || typeof parsed.apps !== "object" || parsed.apps === null) return {
+			version: 1,
+			apps: {}
+		};
+		return {
+			version: 1,
+			apps: parsed.apps
+		};
+	} catch {
+		return {
+			version: 1,
+			apps: {}
+		};
+	}
+}
+function writeDeployState(configDir, state) {
+	const path = deployStatePath(configDir);
+	(0, node_fs.mkdirSync)((0, node_path.dirname)(path), { recursive: true });
+	(0, node_fs.writeFileSync)(path, `${JSON.stringify(state, null, 2)}\n`);
+}
+function upsertDeployStatePins(configDir, account, gateway, pins) {
+	const state = readDeployState(configDir);
+	const appKey = `${account}/${gateway}`;
+	state.apps[appKey] = {
+		...state.apps[appKey] ?? {},
+		...pins
+	};
+	writeDeployState(configDir, state);
+}
+/** Previous pins by workspace key, from the local deploy-state pointer. */
+function pinsFromDeployState(configDir, account, gateway) {
+	return readDeployState(configDir).apps[`${account}/${gateway}`] ?? {};
+}
+/** Previous pins by workspace key, from the published config's slot pins. */
+function pinsFromPublishedConfig(config, account, gateway) {
+	const pins = {};
+	for (const ref of require_rollback.collectSlotPinRefs(config)) {
+		const workspace = workspaceKeyOfBase(ref.base);
+		const nsMatch = BUNDLE_BASE_PATTERN.exec(`${ref.base.replace(/\/$/, "")}/`);
+		if (!workspace || !nsMatch || nsMatch[1] !== account || nsMatch[2] !== gateway) continue;
+		pins[workspace] = ref.pin;
+	}
+	return pins;
+}
+function diffWorkspaceFiles(files, localSri, prevFiles) {
+	const upload = [];
+	let skipped = 0;
+	for (const file of files) {
+		if (prevFiles[file.path] !== void 0 && prevFiles[file.path] === localSri[file.path]) {
+			skipped += 1;
+			continue;
+		}
+		upload.push(file);
+	}
+	return {
+		upload,
+		skipped
+	};
+}
+/**
+* The manifest's merged per-file map for this deploy: uploaded files carry the
+* server-computed SRI from the upload response; skipped files carry the
+* previous manifest's server-computed SRI (byte-identical to the local hash by
+* the skip decision). Files that left the dist carry nothing.
+*/
+function mergedFileIntegrity(files, uploadedIntegrity, prevFiles) {
+	const merged = {};
+	for (const file of files) {
+		const uploaded = uploadedIntegrity[file.path];
+		if (uploaded) {
+			merged[file.path] = uploaded;
+			continue;
+		}
+		const carried = prevFiles?.[file.path];
+		if (carried) merged[file.path] = carried;
+	}
+	return merged;
+}
+
+//#endregion
+exports.BUNDLE_BASE_PATTERN = BUNDLE_BASE_PATTERN;
+exports.diffWorkspaceFiles = diffWorkspaceFiles;
+exports.localObjectIntegrity = localObjectIntegrity;
+exports.localSriMap = localSriMap;
+exports.mergedFileIntegrity = mergedFileIntegrity;
+exports.pinsFromDeployState = pinsFromDeployState;
+exports.pinsFromPublishedConfig = pinsFromPublishedConfig;
+exports.readDeployState = readDeployState;
+exports.upsertDeployStatePins = upsertDeployStatePins;
+exports.workspaceKeyOfBase = workspaceKeyOfBase;
+exports.writeDeployState = writeDeployState;
+//# sourceMappingURL=deploy-diff.cjs.map

package/dist/deploy-diff.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-diff.cjs","names":["createHash","join","existsSync","readFileSync","dirname","collectSlotPinRefs"],"sources":["../src/deploy-diff.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { collectSlotPinRefs } from \"./rollback\";\nimport type { DistFile } from \"./storage-upload\";\nimport type { BosConfigInput } from \"./types\";\n\n/**\n * Differential bundle uploads (skip-unchanged): the previous deploy's version\n * manifest carries the dist's full per-file SRI map (`files`), so the next\n * deploy hashes its local dist, diffs against that map, and re-uploads only\n * new or changed files. Content-hashed dist filenames make an unchanged chunk\n * byte-identical, so a typical redeploy ships a handful of files instead of\n * the whole tree.\n *\n * Correctness: a skip requires (path, sha384) to match the previous\n * **server-computed** SRI map — client hashes decide only what to skip; the\n * published manifest keeps carrying the server-computed values. Any failure\n * to resolve the previous map (no pointer, fetch failed, SRI mismatch, manifest\n * predates `files`) degrades to a full upload.\n */\n\nexport interface PreviousPin {\n  manifest: string;\n  integrity: string;\n}\n\nexport interface DeployStateFile {\n  version: 1;\n  /** key: `<account>/<gateway>`, then workspace key → pin */\n  apps: Record<string, Record<string, PreviousPin>>;\n}\n\nexport const BUNDLE_BASE_PATTERN = /\\/bundles\\/([^/]+)\\/([^/]+)\\/([^/]+)\\/$/;\n\nexport function workspaceKeyOfBase(base: string): string | null {\n  const match = BUNDLE_BASE_PATTERN.exec(`${base.replace(/\\/$/, \"\")}/`);\n  return match ? match[3]! : null;\n}\n\n/** The sha384 SRI the storage route would compute for these bytes. */\nexport function localObjectIntegrity(bytes: Uint8Array): string {\n  return `sha384-${createHash(\"sha384\").update(bytes).digest(\"base64\")}`;\n}\n\nexport function localSriMap(files: DistFile[]): Record<string, string> {\n  return Object.fromEntries(files.map((file) => [file.path, localObjectIntegrity(file.bytes)]));\n}\n\nconst deployStatePath = (configDir: string) => join(configDir, \".bos\", \"deploy-state.json\");\n\nexport function readDeployState(configDir: string): DeployStateFile {\n  const path = deployStatePath(configDir);\n  if (!existsSync(path)) return { version: 1, apps: {} };\n  try {\n    const parsed = JSON.parse(readFileSync(path, \"utf8\")) as Partial<DeployStateFile>;\n    if (parsed.version !== 1 || typeof parsed.apps !== \"object\" || parsed.apps === null) {\n      return { version: 1, apps: {} };\n    }\n    return { version: 1, apps: parsed.apps as DeployStateFile[\"apps\"] };\n  } catch {\n    return { version: 1, apps: {} };\n  }\n}\n\nexport function writeDeployState(configDir: string, state: DeployStateFile): void {\n  const path = deployStatePath(configDir);\n  mkdirSync(dirname(path), { recursive: true });\n  writeFileSync(path, `${JSON.stringify(state, null, 2)}\\n`);\n}\n\nexport function upsertDeployStatePins(\n  configDir: string,\n  account: string,\n  gateway: string,\n  pins: Record<string, PreviousPin>,\n): void {\n  const state = readDeployState(configDir);\n  const appKey = `${account}/${gateway}`;\n  state.apps[appKey] = { ...(state.apps[appKey] ?? {}), ...pins };\n  writeDeployState(configDir, state);\n}\n\n/** Previous pins by workspace key, from the local deploy-state pointer. */\nexport function pinsFromDeployState(\n  configDir: string,\n  account: string,\n  gateway: string,\n): Record<string, PreviousPin> {\n  return readDeployState(configDir).apps[`${account}/${gateway}`] ?? {};\n}\n\n/** Previous pins by workspace key, from the published config's slot pins. */\nexport function pinsFromPublishedConfig(\n  config: BosConfigInput,\n  account: string,\n  gateway: string,\n): Record<string, PreviousPin> {\n  const pins: Record<string, PreviousPin> = {};\n  for (const ref of collectSlotPinRefs(config)) {\n    const workspace = workspaceKeyOfBase(ref.base);\n    const nsMatch = BUNDLE_BASE_PATTERN.exec(`${ref.base.replace(/\\/$/, \"\")}/`);\n    if (!workspace || !nsMatch || nsMatch[1] !== account || nsMatch[2] !== gateway) continue;\n    pins[workspace] = ref.pin;\n  }\n  return pins;\n}\n\nexport interface WorkspaceDiff {\n  /** files that must be uploaded (new or changed) */\n  upload: DistFile[];\n  /** number of files skipped because the previous manifest holds identical bytes */\n  skipped: number;\n}\n\nexport function diffWorkspaceFiles(\n  files: DistFile[],\n  localSri: Record<string, string>,\n  prevFiles: Record<string, string>,\n): WorkspaceDiff {\n  const upload: DistFile[] = [];\n  let skipped = 0;\n  for (const file of files) {\n    if (prevFiles[file.path] !== undefined && prevFiles[file.path] === localSri[file.path]) {\n      skipped += 1;\n      continue;\n    }\n    upload.push(file);\n  }\n  return { upload, skipped };\n}\n\n/**\n * The manifest's merged per-file map for this deploy: uploaded files carry the\n * server-computed SRI from the upload response; skipped files carry the\n * previous manifest's server-computed SRI (byte-identical to the local hash by\n * the skip decision). Files that left the dist carry nothing.\n */\nexport function mergedFileIntegrity(\n  files: DistFile[],\n  uploadedIntegrity: Record<string, string>,\n  prevFiles: Record<string, string> | undefined,\n): Record<string, string> {\n  const merged: Record<string, string> = {};\n  for (const file of files) {\n    const uploaded = uploadedIntegrity[file.path];\n    if (uploaded) {\n      merged[file.path] = uploaded;\n      continue;\n    }\n    const carried = prevFiles?.[file.path];\n    if (carried) merged[file.path] = carried;\n  }\n  return merged;\n}\n"],"mappings":";;;;;;AAiCA,MAAa,sBAAsB;AAEnC,SAAgB,mBAAmB,MAA6B;CAC9D,MAAM,QAAQ,oBAAoB,KAAK,GAAG,KAAK,QAAQ,OAAO,EAAE,EAAE,EAAE;CACpE,OAAO,QAAQ,MAAM,KAAM;AAC7B;;AAGA,SAAgB,qBAAqB,OAA2B;CAC9D,OAAO,cAAUA,wBAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,QAAQ;AACrE;AAEA,SAAgB,YAAY,OAA2C;CACrE,OAAO,OAAO,YAAY,MAAM,KAAK,SAAS,CAAC,KAAK,MAAM,qBAAqB,KAAK,KAAK,CAAC,CAAC,CAAC;AAC9F;AAEA,MAAM,mBAAmB,kBAAsBC,gBAAK,WAAW,QAAQ,mBAAmB;AAE1F,SAAgB,gBAAgB,WAAoC;CAClE,MAAM,OAAO,gBAAgB,SAAS;CACtC,IAAI,KAACC,oBAAW,IAAI,GAAG,OAAO;EAAE,SAAS;EAAG,MAAM,CAAC;CAAE;CACrD,IAAI;EACF,MAAM,SAAS,KAAK,UAAMC,sBAAa,MAAM,MAAM,CAAC;EACpD,IAAI,OAAO,YAAY,KAAK,OAAO,OAAO,SAAS,YAAY,OAAO,SAAS,MAC7E,OAAO;GAAE,SAAS;GAAG,MAAM,CAAC;EAAE;EAEhC,OAAO;GAAE,SAAS;GAAG,MAAM,OAAO;EAAgC;CACpE,QAAQ;EACN,OAAO;GAAE,SAAS;GAAG,MAAM,CAAC;EAAE;CAChC;AACF;AAEA,SAAgB,iBAAiB,WAAmB,OAA8B;CAChF,MAAM,OAAO,gBAAgB,SAAS;CACtC,2BAAUC,mBAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;CAC5C,2BAAc,MAAM,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,EAAE,GAAG;AAC3D;AAEA,SAAgB,sBACd,WACA,SACA,SACA,MACM;CACN,MAAM,QAAQ,gBAAgB,SAAS;CACvC,MAAM,SAAS,GAAG,QAAQ,GAAG;CAC7B,MAAM,KAAK,UAAU;EAAE,GAAI,MAAM,KAAK,WAAW,CAAC;EAAI,GAAG;CAAK;CAC9D,iBAAiB,WAAW,KAAK;AACnC;;AAGA,SAAgB,oBACd,WACA,SACA,SAC6B;CAC7B,OAAO,gBAAgB,SAAS,CAAC,CAAC,KAAK,GAAG,QAAQ,GAAG,cAAc,CAAC;AACtE;;AAGA,SAAgB,wBACd,QACA,SACA,SAC6B;CAC7B,MAAM,OAAoC,CAAC;CAC3C,KAAK,MAAM,OAAOC,oCAAmB,MAAM,GAAG;EAC5C,MAAM,YAAY,mBAAmB,IAAI,IAAI;EAC7C,MAAM,UAAU,oBAAoB,KAAK,GAAG,IAAI,KAAK,QAAQ,OAAO,EAAE,EAAE,EAAE;EAC1E,IAAI,CAAC,aAAa,CAAC,WAAW,QAAQ,OAAO,WAAW,QAAQ,OAAO,SAAS;EAChF,KAAK,aAAa,IAAI;CACxB;CACA,OAAO;AACT;AASA,SAAgB,mBACd,OACA,UACA,WACe;CACf,MAAM,SAAqB,CAAC;CAC5B,IAAI,UAAU;CACd,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,UAAU,KAAK,UAAU,UAAa,UAAU,KAAK,UAAU,SAAS,KAAK,OAAO;GACtF,WAAW;GACX;EACF;EACA,OAAO,KAAK,IAAI;CAClB;CACA,OAAO;EAAE;EAAQ;CAAQ;AAC3B;;;;;;;AAQA,SAAgB,oBACd,OACA,mBACA,WACwB;CACxB,MAAM,SAAiC,CAAC;CACxC,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,WAAW,kBAAkB,KAAK;EACxC,IAAI,UAAU;GACZ,OAAO,KAAK,QAAQ;GACpB;EACF;EACA,MAAM,UAAU,YAAY,KAAK;EACjC,IAAI,SAAS,OAAO,KAAK,QAAQ;CACnC;CACA,OAAO;AACT"}

package/dist/deploy-diff.mjs

@@ -0,0 +1,109 @@
+import { collectSlotPinRefs } from "./rollback.mjs";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { createHash } from "node:crypto";
+
+//#region src/deploy-diff.ts
+const BUNDLE_BASE_PATTERN = /\/bundles\/([^/]+)\/([^/]+)\/([^/]+)\/$/;
+function workspaceKeyOfBase(base) {
+	const match = BUNDLE_BASE_PATTERN.exec(`${base.replace(/\/$/, "")}/`);
+	return match ? match[3] : null;
+}
+/** The sha384 SRI the storage route would compute for these bytes. */
+function localObjectIntegrity(bytes) {
+	return `sha384-${createHash("sha384").update(bytes).digest("base64")}`;
+}
+function localSriMap(files) {
+	return Object.fromEntries(files.map((file) => [file.path, localObjectIntegrity(file.bytes)]));
+}
+const deployStatePath = (configDir) => join(configDir, ".bos", "deploy-state.json");
+function readDeployState(configDir) {
+	const path = deployStatePath(configDir);
+	if (!existsSync(path)) return {
+		version: 1,
+		apps: {}
+	};
+	try {
+		const parsed = JSON.parse(readFileSync(path, "utf8"));
+		if (parsed.version !== 1 || typeof parsed.apps !== "object" || parsed.apps === null) return {
+			version: 1,
+			apps: {}
+		};
+		return {
+			version: 1,
+			apps: parsed.apps
+		};
+	} catch {
+		return {
+			version: 1,
+			apps: {}
+		};
+	}
+}
+function writeDeployState(configDir, state) {
+	const path = deployStatePath(configDir);
+	mkdirSync(dirname(path), { recursive: true });
+	writeFileSync(path, `${JSON.stringify(state, null, 2)}\n`);
+}
+function upsertDeployStatePins(configDir, account, gateway, pins) {
+	const state = readDeployState(configDir);
+	const appKey = `${account}/${gateway}`;
+	state.apps[appKey] = {
+		...state.apps[appKey] ?? {},
+		...pins
+	};
+	writeDeployState(configDir, state);
+}
+/** Previous pins by workspace key, from the local deploy-state pointer. */
+function pinsFromDeployState(configDir, account, gateway) {
+	return readDeployState(configDir).apps[`${account}/${gateway}`] ?? {};
+}
+/** Previous pins by workspace key, from the published config's slot pins. */
+function pinsFromPublishedConfig(config, account, gateway) {
+	const pins = {};
+	for (const ref of collectSlotPinRefs(config)) {
+		const workspace = workspaceKeyOfBase(ref.base);
+		const nsMatch = BUNDLE_BASE_PATTERN.exec(`${ref.base.replace(/\/$/, "")}/`);
+		if (!workspace || !nsMatch || nsMatch[1] !== account || nsMatch[2] !== gateway) continue;
+		pins[workspace] = ref.pin;
+	}
+	return pins;
+}
+function diffWorkspaceFiles(files, localSri, prevFiles) {
+	const upload = [];
+	let skipped = 0;
+	for (const file of files) {
+		if (prevFiles[file.path] !== void 0 && prevFiles[file.path] === localSri[file.path]) {
+			skipped += 1;
+			continue;
+		}
+		upload.push(file);
+	}
+	return {
+		upload,
+		skipped
+	};
+}
+/**
+* The manifest's merged per-file map for this deploy: uploaded files carry the
+* server-computed SRI from the upload response; skipped files carry the
+* previous manifest's server-computed SRI (byte-identical to the local hash by
+* the skip decision). Files that left the dist carry nothing.
+*/
+function mergedFileIntegrity(files, uploadedIntegrity, prevFiles) {
+	const merged = {};
+	for (const file of files) {
+		const uploaded = uploadedIntegrity[file.path];
+		if (uploaded) {
+			merged[file.path] = uploaded;
+			continue;
+		}
+		const carried = prevFiles?.[file.path];
+		if (carried) merged[file.path] = carried;
+	}
+	return merged;
+}
+
+//#endregion
+export { BUNDLE_BASE_PATTERN, diffWorkspaceFiles, localObjectIntegrity, localSriMap, mergedFileIntegrity, pinsFromDeployState, pinsFromPublishedConfig, readDeployState, upsertDeployStatePins, workspaceKeyOfBase, writeDeployState };
+//# sourceMappingURL=deploy-diff.mjs.map

package/dist/deploy-diff.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-diff.mjs","names":[],"sources":["../src/deploy-diff.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { collectSlotPinRefs } from \"./rollback\";\nimport type { DistFile } from \"./storage-upload\";\nimport type { BosConfigInput } from \"./types\";\n\n/**\n * Differential bundle uploads (skip-unchanged): the previous deploy's version\n * manifest carries the dist's full per-file SRI map (`files`), so the next\n * deploy hashes its local dist, diffs against that map, and re-uploads only\n * new or changed files. Content-hashed dist filenames make an unchanged chunk\n * byte-identical, so a typical redeploy ships a handful of files instead of\n * the whole tree.\n *\n * Correctness: a skip requires (path, sha384) to match the previous\n * **server-computed** SRI map — client hashes decide only what to skip; the\n * published manifest keeps carrying the server-computed values. Any failure\n * to resolve the previous map (no pointer, fetch failed, SRI mismatch, manifest\n * predates `files`) degrades to a full upload.\n */\n\nexport interface PreviousPin {\n  manifest: string;\n  integrity: string;\n}\n\nexport interface DeployStateFile {\n  version: 1;\n  /** key: `<account>/<gateway>`, then workspace key → pin */\n  apps: Record<string, Record<string, PreviousPin>>;\n}\n\nexport const BUNDLE_BASE_PATTERN = /\\/bundles\\/([^/]+)\\/([^/]+)\\/([^/]+)\\/$/;\n\nexport function workspaceKeyOfBase(base: string): string | null {\n  const match = BUNDLE_BASE_PATTERN.exec(`${base.replace(/\\/$/, \"\")}/`);\n  return match ? match[3]! : null;\n}\n\n/** The sha384 SRI the storage route would compute for these bytes. */\nexport function localObjectIntegrity(bytes: Uint8Array): string {\n  return `sha384-${createHash(\"sha384\").update(bytes).digest(\"base64\")}`;\n}\n\nexport function localSriMap(files: DistFile[]): Record<string, string> {\n  return Object.fromEntries(files.map((file) => [file.path, localObjectIntegrity(file.bytes)]));\n}\n\nconst deployStatePath = (configDir: string) => join(configDir, \".bos\", \"deploy-state.json\");\n\nexport function readDeployState(configDir: string): DeployStateFile {\n  const path = deployStatePath(configDir);\n  if (!existsSync(path)) return { version: 1, apps: {} };\n  try {\n    const parsed = JSON.parse(readFileSync(path, \"utf8\")) as Partial<DeployStateFile>;\n    if (parsed.version !== 1 || typeof parsed.apps !== \"object\" || parsed.apps === null) {\n      return { version: 1, apps: {} };\n    }\n    return { version: 1, apps: parsed.apps as DeployStateFile[\"apps\"] };\n  } catch {\n    return { version: 1, apps: {} };\n  }\n}\n\nexport function writeDeployState(configDir: string, state: DeployStateFile): void {\n  const path = deployStatePath(configDir);\n  mkdirSync(dirname(path), { recursive: true });\n  writeFileSync(path, `${JSON.stringify(state, null, 2)}\\n`);\n}\n\nexport function upsertDeployStatePins(\n  configDir: string,\n  account: string,\n  gateway: string,\n  pins: Record<string, PreviousPin>,\n): void {\n  const state = readDeployState(configDir);\n  const appKey = `${account}/${gateway}`;\n  state.apps[appKey] = { ...(state.apps[appKey] ?? {}), ...pins };\n  writeDeployState(configDir, state);\n}\n\n/** Previous pins by workspace key, from the local deploy-state pointer. */\nexport function pinsFromDeployState(\n  configDir: string,\n  account: string,\n  gateway: string,\n): Record<string, PreviousPin> {\n  return readDeployState(configDir).apps[`${account}/${gateway}`] ?? {};\n}\n\n/** Previous pins by workspace key, from the published config's slot pins. */\nexport function pinsFromPublishedConfig(\n  config: BosConfigInput,\n  account: string,\n  gateway: string,\n): Record<string, PreviousPin> {\n  const pins: Record<string, PreviousPin> = {};\n  for (const ref of collectSlotPinRefs(config)) {\n    const workspace = workspaceKeyOfBase(ref.base);\n    const nsMatch = BUNDLE_BASE_PATTERN.exec(`${ref.base.replace(/\\/$/, \"\")}/`);\n    if (!workspace || !nsMatch || nsMatch[1] !== account || nsMatch[2] !== gateway) continue;\n    pins[workspace] = ref.pin;\n  }\n  return pins;\n}\n\nexport interface WorkspaceDiff {\n  /** files that must be uploaded (new or changed) */\n  upload: DistFile[];\n  /** number of files skipped because the previous manifest holds identical bytes */\n  skipped: number;\n}\n\nexport function diffWorkspaceFiles(\n  files: DistFile[],\n  localSri: Record<string, string>,\n  prevFiles: Record<string, string>,\n): WorkspaceDiff {\n  const upload: DistFile[] = [];\n  let skipped = 0;\n  for (const file of files) {\n    if (prevFiles[file.path] !== undefined && prevFiles[file.path] === localSri[file.path]) {\n      skipped += 1;\n      continue;\n    }\n    upload.push(file);\n  }\n  return { upload, skipped };\n}\n\n/**\n * The manifest's merged per-file map for this deploy: uploaded files carry the\n * server-computed SRI from the upload response; skipped files carry the\n * previous manifest's server-computed SRI (byte-identical to the local hash by\n * the skip decision). Files that left the dist carry nothing.\n */\nexport function mergedFileIntegrity(\n  files: DistFile[],\n  uploadedIntegrity: Record<string, string>,\n  prevFiles: Record<string, string> | undefined,\n): Record<string, string> {\n  const merged: Record<string, string> = {};\n  for (const file of files) {\n    const uploaded = uploadedIntegrity[file.path];\n    if (uploaded) {\n      merged[file.path] = uploaded;\n      continue;\n    }\n    const carried = prevFiles?.[file.path];\n    if (carried) merged[file.path] = carried;\n  }\n  return merged;\n}\n"],"mappings":";;;;;;AAiCA,MAAa,sBAAsB;AAEnC,SAAgB,mBAAmB,MAA6B;CAC9D,MAAM,QAAQ,oBAAoB,KAAK,GAAG,KAAK,QAAQ,OAAO,EAAE,EAAE,EAAE;CACpE,OAAO,QAAQ,MAAM,KAAM;AAC7B;;AAGA,SAAgB,qBAAqB,OAA2B;CAC9D,OAAO,UAAU,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,QAAQ;AACrE;AAEA,SAAgB,YAAY,OAA2C;CACrE,OAAO,OAAO,YAAY,MAAM,KAAK,SAAS,CAAC,KAAK,MAAM,qBAAqB,KAAK,KAAK,CAAC,CAAC,CAAC;AAC9F;AAEA,MAAM,mBAAmB,cAAsB,KAAK,WAAW,QAAQ,mBAAmB;AAE1F,SAAgB,gBAAgB,WAAoC;CAClE,MAAM,OAAO,gBAAgB,SAAS;CACtC,IAAI,CAAC,WAAW,IAAI,GAAG,OAAO;EAAE,SAAS;EAAG,MAAM,CAAC;CAAE;CACrD,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;EACpD,IAAI,OAAO,YAAY,KAAK,OAAO,OAAO,SAAS,YAAY,OAAO,SAAS,MAC7E,OAAO;GAAE,SAAS;GAAG,MAAM,CAAC;EAAE;EAEhC,OAAO;GAAE,SAAS;GAAG,MAAM,OAAO;EAAgC;CACpE,QAAQ;EACN,OAAO;GAAE,SAAS;GAAG,MAAM,CAAC;EAAE;CAChC;AACF;AAEA,SAAgB,iBAAiB,WAAmB,OAA8B;CAChF,MAAM,OAAO,gBAAgB,SAAS;CACtC,UAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;CAC5C,cAAc,MAAM,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,EAAE,GAAG;AAC3D;AAEA,SAAgB,sBACd,WACA,SACA,SACA,MACM;CACN,MAAM,QAAQ,gBAAgB,SAAS;CACvC,MAAM,SAAS,GAAG,QAAQ,GAAG;CAC7B,MAAM,KAAK,UAAU;EAAE,GAAI,MAAM,KAAK,WAAW,CAAC;EAAI,GAAG;CAAK;CAC9D,iBAAiB,WAAW,KAAK;AACnC;;AAGA,SAAgB,oBACd,WACA,SACA,SAC6B;CAC7B,OAAO,gBAAgB,SAAS,CAAC,CAAC,KAAK,GAAG,QAAQ,GAAG,cAAc,CAAC;AACtE;;AAGA,SAAgB,wBACd,QACA,SACA,SAC6B;CAC7B,MAAM,OAAoC,CAAC;CAC3C,KAAK,MAAM,OAAO,mBAAmB,MAAM,GAAG;EAC5C,MAAM,YAAY,mBAAmB,IAAI,IAAI;EAC7C,MAAM,UAAU,oBAAoB,KAAK,GAAG,IAAI,KAAK,QAAQ,OAAO,EAAE,EAAE,EAAE;EAC1E,IAAI,CAAC,aAAa,CAAC,WAAW,QAAQ,OAAO,WAAW,QAAQ,OAAO,SAAS;EAChF,KAAK,aAAa,IAAI;CACxB;CACA,OAAO;AACT;AASA,SAAgB,mBACd,OACA,UACA,WACe;CACf,MAAM,SAAqB,CAAC;CAC5B,IAAI,UAAU;CACd,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,UAAU,KAAK,UAAU,UAAa,UAAU,KAAK,UAAU,SAAS,KAAK,OAAO;GACtF,WAAW;GACX;EACF;EACA,OAAO,KAAK,IAAI;CAClB;CACA,OAAO;EAAE;EAAQ;CAAQ;AAC3B;;;;;;;AAQA,SAAgB,oBACd,OACA,mBACA,WACwB;CACxB,MAAM,SAAiC,CAAC;CACxC,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,WAAW,kBAAkB,KAAK;EACxC,IAAI,UAAU;GACZ,OAAO,KAAK,QAAQ;GACpB;EACF;EACA,MAAM,UAAU,YAAY,KAAK;EACjC,IAAI,SAAS,OAAO,KAAK,QAAQ;CACnC;CACA,OAAO;AACT"}

package/dist/descriptor/constructors.cjs

@@ -0,0 +1,49 @@
+const require_schema = require('./schema.cjs');
+const require_resolve = require('./resolve.cjs');
+
+//#region src/descriptor/constructors.ts
+/**
+* The authored App — returns a pure, Zod-validated, serializable descriptor.
+* Constructors never execute app code (the descriptor IS the deployment plan);
+* resolution and deployment consume it as data.
+*/
+function App(input) {
+	return require_schema.AppDescriptorSchema.parse(input);
+}
+/** The app.api slot. */
+function API(input) {
+	return require_schema.ApiRefSchema.parse(input);
+}
+/** The app.ui slot. */
+function UI(input) {
+	return require_schema.UiRefSchema.parse(input);
+}
+/**
+* Attach another App — by local workspace path (`Plugin("auth").path("plugins/auth")`)
+* or by published module reference (`Plugin("auth").extends("bos://…")`).
+* The attachment's `name` (the plugin's package name, e.g.
+* `@everything-dev/auth-plugin`) may differ from the registry key; pass it
+* through `extra` to override.
+*/
+function Plugin(name) {
+	return {
+		path: (dir, extra) => require_schema.AttachmentRefSchema.parse({
+			name,
+			...extra,
+			path: dir
+		}),
+		extends: (ref, extra) => require_schema.AttachmentRefSchema.parse({
+			name,
+			...extra,
+			extends: ref
+		})
+	};
+}
+
+//#endregion
+exports.API = API;
+exports.App = App;
+exports.Plugin = Plugin;
+exports.UI = UI;
+exports.applyDevOverlay = require_resolve.applyDevOverlay;
+//# sourceMappingURL=constructors.cjs.map

package/dist/descriptor/constructors.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"constructors.cjs","names":["AppDescriptorSchema","ApiRefSchema","UiRefSchema","AttachmentRefSchema"],"sources":["../../src/descriptor/constructors.ts"],"sourcesContent":["import type {\n  ApiInput,\n  ApiRef,\n  AppDescriptor,\n  AppInput,\n  AttachmentInput,\n  AttachmentRef,\n  UiInput,\n  UiRef,\n} from \"./schema\";\nimport { ApiRefSchema, AppDescriptorSchema, AttachmentRefSchema, UiRefSchema } from \"./schema\";\n\n/**\n * The authored App — returns a pure, Zod-validated, serializable descriptor.\n * Constructors never execute app code (the descriptor IS the deployment plan);\n * resolution and deployment consume it as data.\n */\nexport function App(input: AppInput): AppDescriptor {\n  return AppDescriptorSchema.parse(input);\n}\n\n/** The app.api slot. */\nexport function API(input: ApiInput): ApiRef {\n  return ApiRefSchema.parse(input);\n}\n\n/** The app.ui slot. */\nexport function UI(input: UiInput): UiRef {\n  return UiRefSchema.parse(input);\n}\n\n/**\n * Attach another App — by local workspace path (`Plugin(\"auth\").path(\"plugins/auth\")`)\n * or by published module reference (`Plugin(\"auth\").extends(\"bos://…\")`).\n * The attachment's `name` (the plugin's package name, e.g.\n * `@everything-dev/auth-plugin`) may differ from the registry key; pass it\n * through `extra` to override.\n */\nexport function Plugin<K extends string>(\n  name: K,\n): {\n  path: (dir: string, extra?: Omit<AttachmentInput, \"path\">) => AttachmentRef;\n  extends: (ref: string, extra?: Omit<AttachmentInput, \"extends\">) => AttachmentRef;\n} {\n  return {\n    path: (dir, extra) => AttachmentRefSchema.parse({ name, ...extra, path: dir }),\n    extends: (ref, extra) => AttachmentRefSchema.parse({ name, ...extra, extends: ref }),\n  };\n}\nexport { applyDevOverlay } from \"./resolve\";\n"],"mappings":";;;;;;;;;AAiBA,SAAgB,IAAI,OAAgC;CAClD,OAAOA,mCAAoB,MAAM,KAAK;AACxC;;AAGA,SAAgB,IAAI,OAAyB;CAC3C,OAAOC,4BAAa,MAAM,KAAK;AACjC;;AAGA,SAAgB,GAAG,OAAuB;CACxC,OAAOC,2BAAY,MAAM,KAAK;AAChC;;;;;;;;AASA,SAAgB,OACd,MAIA;CACA,OAAO;EACL,OAAO,KAAK,UAAUC,mCAAoB,MAAM;GAAE;GAAM,GAAG;GAAO,MAAM;EAAI,CAAC;EAC7E,UAAU,KAAK,UAAUA,mCAAoB,MAAM;GAAE;GAAM,GAAG;GAAO,SAAS;EAAI,CAAC;CACrF;AACF"}

package/dist/descriptor/constructors.d.cts

@@ -0,0 +1,27 @@
+import { ApiInput, ApiRef, AppDescriptor, AppInput, AttachmentInput, AttachmentRef, UiInput, UiRef } from "./schema.cjs";
+import { applyDevOverlay } from "./resolve.cjs";
+//#region src/descriptor/constructors.d.ts
+/**
+ * The authored App — returns a pure, Zod-validated, serializable descriptor.
+ * Constructors never execute app code (the descriptor IS the deployment plan);
+ * resolution and deployment consume it as data.
+ */
+declare function App(input: AppInput): AppDescriptor;
+/** The app.api slot. */
+declare function API(input: ApiInput): ApiRef;
+/** The app.ui slot. */
+declare function UI(input: UiInput): UiRef;
+/**
+ * Attach another App — by local workspace path (`Plugin("auth").path("plugins/auth")`)
+ * or by published module reference (`Plugin("auth").extends("bos://…")`).
+ * The attachment's `name` (the plugin's package name, e.g.
+ * `@everything-dev/auth-plugin`) may differ from the registry key; pass it
+ * through `extra` to override.
+ */
+declare function Plugin<K extends string>(name: K): {
+  path: (dir: string, extra?: Omit<AttachmentInput, "path">) => AttachmentRef;
+  extends: (ref: string, extra?: Omit<AttachmentInput, "extends">) => AttachmentRef;
+};
+//#endregion
+export { API, App, Plugin, UI, applyDevOverlay };
+//# sourceMappingURL=constructors.d.cts.map

package/dist/descriptor/constructors.d.mts

@@ -0,0 +1,27 @@
+import { ApiInput, ApiRef, AppDescriptor, AppInput, AttachmentInput, AttachmentRef, UiInput, UiRef } from "./schema.mjs";
+import { applyDevOverlay } from "./resolve.mjs";
+//#region src/descriptor/constructors.d.ts
+/**
+ * The authored App — returns a pure, Zod-validated, serializable descriptor.
+ * Constructors never execute app code (the descriptor IS the deployment plan);
+ * resolution and deployment consume it as data.
+ */
+declare function App(input: AppInput): AppDescriptor;
+/** The app.api slot. */
+declare function API(input: ApiInput): ApiRef;
+/** The app.ui slot. */
+declare function UI(input: UiInput): UiRef;
+/**
+ * Attach another App — by local workspace path (`Plugin("auth").path("plugins/auth")`)
+ * or by published module reference (`Plugin("auth").extends("bos://…")`).
+ * The attachment's `name` (the plugin's package name, e.g.
+ * `@everything-dev/auth-plugin`) may differ from the registry key; pass it
+ * through `extra` to override.
+ */
+declare function Plugin<K extends string>(name: K): {
+  path: (dir: string, extra?: Omit<AttachmentInput, "path">) => AttachmentRef;
+  extends: (ref: string, extra?: Omit<AttachmentInput, "extends">) => AttachmentRef;
+};
+//#endregion
+export { API, App, Plugin, UI, applyDevOverlay };
+//# sourceMappingURL=constructors.d.mts.map

package/dist/descriptor/constructors.mjs

@@ -0,0 +1,45 @@
+import { ApiRefSchema, AppDescriptorSchema, AttachmentRefSchema, UiRefSchema } from "./schema.mjs";
+import { applyDevOverlay } from "./resolve.mjs";
+
+//#region src/descriptor/constructors.ts
+/**
+* The authored App — returns a pure, Zod-validated, serializable descriptor.
+* Constructors never execute app code (the descriptor IS the deployment plan);
+* resolution and deployment consume it as data.
+*/
+function App(input) {
+	return AppDescriptorSchema.parse(input);
+}
+/** The app.api slot. */
+function API(input) {
+	return ApiRefSchema.parse(input);
+}
+/** The app.ui slot. */
+function UI(input) {
+	return UiRefSchema.parse(input);
+}
+/**
+* Attach another App — by local workspace path (`Plugin("auth").path("plugins/auth")`)
+* or by published module reference (`Plugin("auth").extends("bos://…")`).
+* The attachment's `name` (the plugin's package name, e.g.
+* `@everything-dev/auth-plugin`) may differ from the registry key; pass it
+* through `extra` to override.
+*/
+function Plugin(name) {
+	return {
+		path: (dir, extra) => AttachmentRefSchema.parse({
+			name,
+			...extra,
+			path: dir
+		}),
+		extends: (ref, extra) => AttachmentRefSchema.parse({
+			name,
+			...extra,
+			extends: ref
+		})
+	};
+}
+
+//#endregion
+export { API, App, Plugin, UI, applyDevOverlay };
+//# sourceMappingURL=constructors.mjs.map

package/dist/descriptor/constructors.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"constructors.mjs","names":[],"sources":["../../src/descriptor/constructors.ts"],"sourcesContent":["import type {\n  ApiInput,\n  ApiRef,\n  AppDescriptor,\n  AppInput,\n  AttachmentInput,\n  AttachmentRef,\n  UiInput,\n  UiRef,\n} from \"./schema\";\nimport { ApiRefSchema, AppDescriptorSchema, AttachmentRefSchema, UiRefSchema } from \"./schema\";\n\n/**\n * The authored App — returns a pure, Zod-validated, serializable descriptor.\n * Constructors never execute app code (the descriptor IS the deployment plan);\n * resolution and deployment consume it as data.\n */\nexport function App(input: AppInput): AppDescriptor {\n  return AppDescriptorSchema.parse(input);\n}\n\n/** The app.api slot. */\nexport function API(input: ApiInput): ApiRef {\n  return ApiRefSchema.parse(input);\n}\n\n/** The app.ui slot. */\nexport function UI(input: UiInput): UiRef {\n  return UiRefSchema.parse(input);\n}\n\n/**\n * Attach another App — by local workspace path (`Plugin(\"auth\").path(\"plugins/auth\")`)\n * or by published module reference (`Plugin(\"auth\").extends(\"bos://…\")`).\n * The attachment's `name` (the plugin's package name, e.g.\n * `@everything-dev/auth-plugin`) may differ from the registry key; pass it\n * through `extra` to override.\n */\nexport function Plugin<K extends string>(\n  name: K,\n): {\n  path: (dir: string, extra?: Omit<AttachmentInput, \"path\">) => AttachmentRef;\n  extends: (ref: string, extra?: Omit<AttachmentInput, \"extends\">) => AttachmentRef;\n} {\n  return {\n    path: (dir, extra) => AttachmentRefSchema.parse({ name, ...extra, path: dir }),\n    extends: (ref, extra) => AttachmentRefSchema.parse({ name, ...extra, extends: ref }),\n  };\n}\nexport { applyDevOverlay } from \"./resolve\";\n"],"mappings":";;;;;;;;;AAiBA,SAAgB,IAAI,OAAgC;CAClD,OAAO,oBAAoB,MAAM,KAAK;AACxC;;AAGA,SAAgB,IAAI,OAAyB;CAC3C,OAAO,aAAa,MAAM,KAAK;AACjC;;AAGA,SAAgB,GAAG,OAAuB;CACxC,OAAO,YAAY,MAAM,KAAK;AAChC;;;;;;;;AASA,SAAgB,OACd,MAIA;CACA,OAAO;EACL,OAAO,KAAK,UAAU,oBAAoB,MAAM;GAAE;GAAM,GAAG;GAAO,MAAM;EAAI,CAAC;EAC7E,UAAU,KAAK,UAAU,oBAAoB,MAAM;GAAE;GAAM,GAAG;GAAO,SAAS;EAAI,CAAC;CACrF;AACF"}

package/dist/descriptor/index.cjs

@@ -0,0 +1,24 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_schema = require('./schema.cjs');
+const require_resolve = require('./resolve.cjs');
+const require_constructors = require('./constructors.cjs');
+const require_serialize = require('./serialize.cjs');
+
+exports.API = require_constructors.API;
+exports.ATTACHMENT_FIELDS = require_resolve.ATTACHMENT_FIELDS;
+exports.ApiRefSchema = require_schema.ApiRefSchema;
+exports.App = require_constructors.App;
+exports.AppDescriptorSchema = require_schema.AppDescriptorSchema;
+exports.AttachmentRefSchema = require_schema.AttachmentRefSchema;
+exports.HostRefSchema = require_schema.HostRefSchema;
+exports.PipelineFieldsSchema = require_schema.PipelineFieldsSchema;
+exports.Plugin = require_constructors.Plugin;
+exports.SLOT_INPUT_FIELDS = require_resolve.SLOT_INPUT_FIELDS;
+exports.UI = require_constructors.UI;
+exports.UiRefSchema = require_schema.UiRefSchema;
+exports.applyDevOverlay = require_resolve.applyDevOverlay;
+exports.configInputToDescriptor = require_resolve.configInputToDescriptor;
+exports.resolveApp = require_resolve.resolveApp;
+exports.resolveApps = require_resolve.resolveApps;
+exports.serializeAppDescriptorSource = require_serialize.serializeAppDescriptorSource;
+exports.toConfigInput = require_resolve.toConfigInput;

package/dist/descriptor/index.d.cts

@@ -0,0 +1,5 @@
+import { ApiInput, ApiRef, ApiRefSchema, AppDescriptor, AppDescriptorSchema, AppInput, AppRegistry, AttachmentInput, AttachmentRef, AttachmentRefSchema, HostInput, HostRef, HostRefSchema, PipelineFields, PipelineFieldsSchema, UiInput, UiRef, UiRefSchema } from "./schema.cjs";
+import { ATTACHMENT_FIELDS, AppDeployEntry, DeployMap, SLOT_INPUT_FIELDS, applyDevOverlay, configInputToDescriptor, resolveApp, resolveApps, toConfigInput } from "./resolve.cjs";
+import { API, App, Plugin, UI } from "./constructors.cjs";
+import { serializeAppDescriptorSource } from "./serialize.cjs";
+export { API, ATTACHMENT_FIELDS, ApiInput, ApiRef, ApiRefSchema, App, AppDeployEntry, AppDescriptor, AppDescriptorSchema, AppInput, AppRegistry, AttachmentInput, AttachmentRef, AttachmentRefSchema, DeployMap, HostInput, HostRef, HostRefSchema, PipelineFields, PipelineFieldsSchema, Plugin, SLOT_INPUT_FIELDS, UI, UiInput, UiRef, UiRefSchema, applyDevOverlay, configInputToDescriptor, resolveApp, resolveApps, serializeAppDescriptorSource, toConfigInput };

package/dist/descriptor/index.d.mts

@@ -0,0 +1,5 @@
+import { ApiInput, ApiRef, ApiRefSchema, AppDescriptor, AppDescriptorSchema, AppInput, AppRegistry, AttachmentInput, AttachmentRef, AttachmentRefSchema, HostInput, HostRef, HostRefSchema, PipelineFields, PipelineFieldsSchema, UiInput, UiRef, UiRefSchema } from "./schema.mjs";
+import { ATTACHMENT_FIELDS, AppDeployEntry, DeployMap, SLOT_INPUT_FIELDS, applyDevOverlay, configInputToDescriptor, resolveApp, resolveApps, toConfigInput } from "./resolve.mjs";
+import { API, App, Plugin, UI } from "./constructors.mjs";
+import { serializeAppDescriptorSource } from "./serialize.mjs";
+export { API, ATTACHMENT_FIELDS, ApiInput, ApiRef, ApiRefSchema, App, AppDeployEntry, AppDescriptor, AppDescriptorSchema, AppInput, AppRegistry, AttachmentInput, AttachmentRef, AttachmentRefSchema, DeployMap, HostInput, HostRef, HostRefSchema, PipelineFields, PipelineFieldsSchema, Plugin, SLOT_INPUT_FIELDS, UI, UiInput, UiRef, UiRefSchema, applyDevOverlay, configInputToDescriptor, resolveApp, resolveApps, serializeAppDescriptorSource, toConfigInput };

package/dist/descriptor/index.mjs

@@ -0,0 +1,6 @@
+import { ApiRefSchema, AppDescriptorSchema, AttachmentRefSchema, HostRefSchema, PipelineFieldsSchema, UiRefSchema } from "./schema.mjs";
+import { ATTACHMENT_FIELDS, SLOT_INPUT_FIELDS, applyDevOverlay, configInputToDescriptor, resolveApp, resolveApps, toConfigInput } from "./resolve.mjs";
+import { API, App, Plugin, UI } from "./constructors.mjs";
+import { serializeAppDescriptorSource } from "./serialize.mjs";
+
+export { API, ATTACHMENT_FIELDS, ApiRefSchema, App, AppDescriptorSchema, AttachmentRefSchema, HostRefSchema, PipelineFieldsSchema, Plugin, SLOT_INPUT_FIELDS, UI, UiRefSchema, applyDevOverlay, configInputToDescriptor, resolveApp, resolveApps, serializeAppDescriptorSource, toConfigInput };