primitive-admin 1.1.0-alpha.9 → 1.2.0-alpha.0

package/dist/src/lib/function-typecheck.js

@@ -0,0 +1,370 @@
+/**
+ * Typechecking a function's sources against the declarations `config push`
+ * generates — #3331.
+ *
+ * The push already owns all three parts of the program: it writes
+ * `functions/primitive-db-types.d.ts`, `primitive-functions.d.ts`,
+ * `primitive-function-types.d.ts` and `primitive-document-types.d.ts`, it
+ * scaffolds (and repairs) the `functions/tsconfig.json` that loads them, and it
+ * builds the bundle. Until this file it never asked the compiler anything: the
+ * same invocation that wrote the declaration that would have caught a broken
+ * function shipped it anyway. That is not hypothetical — an app upgrading to
+ * the alpha that made `ctx.user` nullable (#3279) had a live function reading
+ * `ctx.user.userId`, and the push that regenerated the declaration shipped it
+ * unchanged.
+ *
+ * ── What the program is ──────────────────────────────────────────────────
+ *
+ * Exactly what `tsc -p functions/tsconfig.json --noEmit` would compile, with
+ * one difference that matters: the generated declarations are read from the
+ * PLAN rather than from disk. `--dry-run` writes nothing, and a fresh clone has
+ * nothing written yet, so a checker that read the disk would either refuse
+ * every function for a missing module or — worse — pass code against a STALE
+ * declaration, which is the exact failure #3279 produced. The overlay is the
+ * whole point of the fix: the code is held to the declarations this push
+ * generates, no earlier ones.
+ *
+ * Everything else is the tree's own: the tsconfig an author may adjust decides
+ * the compiler options (`strict`, `lib`, their own `paths`), because that file
+ * is what their editor and their CI `tsc` read, and a push that judged by
+ * different options would refuse code their editor calls fine.
+ *
+ * ── Why per function ─────────────────────────────────────────────────────
+ *
+ * The push loop applies each `functions/<key>.toml` independently and records
+ * one failure row per function, so one broken function must not refuse the
+ * others in the tree. The program is built ONCE and the diagnostics are asked
+ * for file by file: a function's files are the in-tree sources its bundle build
+ * read PLUS everything those pull in through the type graph, so a shared
+ * helper's error is attributed to every function that imports it, which is the
+ * honest answer — each of them is broken.
+ *
+ * The type graph rather than the bundle's inputs because the two differ exactly
+ * where this check matters: esbuild erases `import type` without ever reading
+ * the file, so a helper that only declares types never reaches push's source
+ * list, and a broken alias there resolves to `any` and takes the function's
+ * whole typing down with it (SO3331-002).
+ *
+ * A file the tsconfig does not sweep in is added as a root rather than skipped:
+ * a narrowed `include` must not silently turn the check off for the code the
+ * push is about to ship.
+ */
+import { createRequire } from "module";
+import { existsSync } from "fs";
+import { join, resolve, sep } from "path";
+import { FUNCTIONS_TSCONFIG_FILE, SDK_MODULE_SPECIFIER, planFunctionTypeArtifacts, renderFunctionsTsconfig, } from "./function-db-types.js";
+import { FunctionSchemaCodegenError } from "./function-schema-codegen.js";
+/** The flag that skips the check, named wherever the refusal is read. */
+export const TYPECHECK_SKIP_FLAG = "--no-typecheck";
+/**
+ * "Could not find a declaration file for module 'x'" (7016) and "Cannot find
+ * module 'x' or its corresponding type declarations" (2307).
+ */
+const MODULE_TYPE_DIAGNOSTIC_CODES = new Set([2307, 7016]);
+/**
+ * Is this diagnostic about an npm package's own types rather than about the
+ * code push is shipping?
+ *
+ * A function may import any package that is INSTALLED: esbuild resolves it and
+ * inlines it into the bundle. A config tree is not an npm project, so its
+ * author cannot answer "try `npm i --save-dev @types/…`" there at all —
+ * refusing the push over it would block correct code that ships correctly, for
+ * a fact about a third party. So an installed package's missing or absent
+ * declaration is not a refusal.
+ *
+ * Installed is the whole of it, and has to be checked rather than assumed: a
+ * package that is not there is a misspelling or a missing dependency, and it is
+ * only the VALUE imports the bundle build proved resolve. `import type { X }
+ * from "mising-package"` is erased by esbuild without ever being looked up, and
+ * left unreported it would put `any` through the code push ships — the failure
+ * this check exists to catch (SO3331-003). So the exemption asks module
+ * resolution whether the package exists on disk at all, with `allowJs` so that
+ * a package shipping only JavaScript counts as found.
+ *
+ * `primitive-functions` is exempt from the exemption, and has to be: it is the
+ * module push itself declares, so its failing to resolve means the program
+ * never loaded the generated augmentations — and a check that silently passed
+ * everything would be worse than no check at all. A relative or absolute import
+ * is never exempt; those are the tree's own files.
+ */
+function isThirdPartyModuleDiagnostic(ts, diagnostic, isInstalledPackage) {
+    if (!MODULE_TYPE_DIAGNOSTIC_CODES.has(diagnostic?.code))
+        return false;
+    const text = ts.flattenDiagnosticMessageText(diagnostic.messageText, " ");
+    const specifier = /module '([^']+)'/.exec(text)?.[1];
+    if (!specifier || specifier === SDK_MODULE_SPECIFIER)
+        return false;
+    if (specifier.startsWith(".") || specifier.startsWith("/"))
+        return false;
+    const containingFile = diagnostic?.file?.fileName;
+    if (typeof containingFile !== "string")
+        return false;
+    return isInstalledPackage(specifier, containingFile);
+}
+/** The CLI's own TypeScript, which is the one that wrote the declarations. */
+function loadTypeScript() {
+    const require = createRequire(import.meta.url);
+    return require("typescript");
+}
+/**
+ * Build the checker for a config tree, or say why there is none.
+ *
+ * Nothing to check when the tree has no `functions/` directory — the same test
+ * the artifact plan makes, and the same answer: a tree with no functions needs
+ * no compiler wiring.
+ */
+export function createFunctionTypechecker(configDir, options = {}) {
+    const functionsDir = join(configDir, "functions");
+    if (!existsSync(functionsDir))
+        return { checker: null, warnings: [] };
+    let ts;
+    try {
+        ts = (options.loadTypeScript ?? loadTypeScript)();
+    }
+    catch (err) {
+        return {
+            checker: null,
+            warnings: [
+                "Function sources were not typechecked: the typescript compiler could " +
+                    `not be loaded (${err?.message ?? String(err)}).`,
+            ],
+        };
+    }
+    // The declarations THIS push generates, in memory. They may not be on disk
+    // (a dry run, a fresh clone) and what is on disk may be stale.
+    //
+    // A malformed schema in ONE `functions/*.toml` makes the whole plan
+    // unrenderable (#3281), and that must not take the push down with it: the
+    // file's own push already refuses it by name and the rest of the tree lands.
+    // With no declarations to judge against there is nothing honest left to check
+    // — what is on disk is by definition the stale set this fix exists to
+    // distrust — so say so once and check nothing (SO3331-001).
+    const overlay = new Map();
+    try {
+        for (const artifact of planFunctionTypeArtifacts(configDir)) {
+            overlay.set(resolve(artifact.absolute), artifact.contents);
+        }
+    }
+    catch (err) {
+        if (!(err instanceof FunctionSchemaCodegenError))
+            throw err;
+        return {
+            checker: null,
+            warnings: [
+                "Function sources were not typechecked: the declarations this push " +
+                    `generates could not be rendered (${err.message}).`,
+            ],
+        };
+    }
+    const readFile = (path) => {
+        const planned = overlay.get(resolve(path));
+        if (planned !== undefined)
+            return planned;
+        return ts.sys.readFile(path);
+    };
+    const fileExists = (path) => overlay.has(resolve(path)) || ts.sys.fileExists(path);
+    const tsconfigPath = join(functionsDir, FUNCTIONS_TSCONFIG_FILE);
+    // The plan writes a tsconfig only when one is missing or its wiring is; an
+    // author's own file is read from disk. A tree with neither is checked against
+    // the scaffold, so the answer does not depend on whether push wrote it yet.
+    const tsconfigText = readFile(tsconfigPath) ??
+        (existsSync(tsconfigPath) ? undefined : renderFunctionsTsconfig());
+    if (tsconfigText === undefined) {
+        return {
+            checker: null,
+            warnings: [
+                `Function sources were not typechecked: ${FUNCTIONS_TSCONFIG_FILE} could not be read.`,
+            ],
+        };
+    }
+    const warnings = [];
+    const parsedJson = ts.parseConfigFileTextToJson(tsconfigPath, tsconfigText);
+    if (parsedJson.error) {
+        return {
+            checker: null,
+            warnings: [
+                `Function sources were not typechecked: functions/${FUNCTIONS_TSCONFIG_FILE} is not readable as JSON.`,
+            ],
+        };
+    }
+    const parseHost = {
+        useCaseSensitiveFileNames: ts.sys.useCaseSensitiveFileNames,
+        readDirectory: ts.sys.readDirectory,
+        fileExists,
+        readFile,
+    };
+    const parsed = ts.parseJsonConfigFileContent(parsedJson.config, parseHost, functionsDir, undefined, tsconfigPath);
+    // A tsconfig the compiler itself objects to is reported once and the check
+    // still runs on the options it could make sense of: silence here is how a
+    // program nothing loads passes for a program that found nothing wrong.
+    for (const diagnostic of parsed.errors ?? []) {
+        warnings.push(`functions/${FUNCTIONS_TSCONFIG_FILE}: ` +
+            ts.flattenDiagnosticMessageText(diagnostic.messageText, " "));
+    }
+    const formatHost = {
+        getCanonicalFileName: (fileName) => fileName,
+        getCurrentDirectory: () => functionsDir,
+        getNewLine: () => "\n",
+    };
+    // Module resolution over the same overlay the program reads, so an import of
+    // `primitive-functions` lands on the planned declaration rather than on
+    // whatever is (or is not) on disk.
+    const resolutionHost = {
+        fileExists,
+        readFile,
+        useCaseSensitiveFileNames: ts.sys.useCaseSensitiveFileNames,
+        realpath: ts.sys.realpath,
+        getCurrentDirectory: () => functionsDir,
+        getDirectories: ts.sys.getDirectories,
+        directoryExists: ts.sys.directoryExists,
+    };
+    const resolveModule = (specifier, containingFile, options) => ts.resolveModuleName(specifier, containingFile, options, resolutionHost)
+        .resolvedModule;
+    /** Does this bare specifier name a package that is actually installed? */
+    const installedPackages = new Map();
+    const isInstalledPackage = (specifier, containingFile) => {
+        const key = `${specifier}${containingFile}`;
+        const cached = installedPackages.get(key);
+        if (cached !== undefined)
+            return cached;
+        // `allowJs` so a package shipping only JavaScript — the case the exemption
+        // is for — resolves, and `noImplicitAny: false` so the lookup answers
+        // "found" rather than re-raising the diagnostic being classified.
+        const resolved = resolveModule(specifier, containingFile, {
+            ...parsed.options,
+            allowJs: true,
+            checkJs: false,
+            noImplicitAny: false,
+        });
+        const installed = resolved !== undefined;
+        installedPackages.set(key, installed);
+        return installed;
+    };
+    /**
+     * Is this an in-tree file of the author's, as opposed to a dependency?
+     *
+     * A package's own declarations are not this check's business (see
+     * {@link isThirdPartyModuleDiagnostic}), and neither are the generated ones —
+     * an error in those is a push bug, not something the author's push can act
+     * on.
+     */
+    const treeRoot = resolve(configDir);
+    const isTreeSource = (path) => path.startsWith(treeRoot.endsWith(sep) ? treeRoot : treeRoot + sep) &&
+        !path.split(sep).includes("node_modules") &&
+        !overlay.has(path);
+    /**
+     * The in-tree files one source pulls in — INCLUDING the type-only imports
+     * esbuild erases, which is why this walks the graph itself instead of
+     * trusting the bundle's input list (SO3331-002).
+     */
+    const importsOf = new Map();
+    const localImports = (path) => {
+        const cached = importsOf.get(path);
+        if (cached !== undefined)
+            return cached;
+        const found = [];
+        const text = readFile(path);
+        if (text !== undefined) {
+            for (const imported of ts.preProcessFile(text, true, true).importedFiles) {
+                const target = resolveModule(imported.fileName, path, parsed.options)
+                    ?.resolvedFileName;
+                if (target === undefined)
+                    continue;
+                const resolved = resolve(target);
+                if (isTreeSource(resolved))
+                    found.push(resolved);
+            }
+        }
+        importsOf.set(path, found);
+        return found;
+    };
+    /** A function's sources and everything their types reach, in tree order. */
+    const typeGraph = (entries) => {
+        const seen = new Set();
+        const files = [];
+        const queue = [...entries];
+        while (queue.length > 0) {
+            const path = queue.shift();
+            if (seen.has(path))
+                continue;
+            seen.add(path);
+            files.push(path);
+            queue.push(...localImports(path));
+        }
+        return files;
+    };
+    const roots = new Set((parsed.fileNames ?? []).map((file) => resolve(file)));
+    // Every generated declaration is a root whether or not the tsconfig's globs
+    // would have found it on disk — the augmentations are the point of the check.
+    for (const [path] of overlay) {
+        if (path.endsWith(".d.ts"))
+            roots.add(path);
+    }
+    let program = null;
+    const buildProgram = () => {
+        const host = ts.createCompilerHost(parsed.options, true);
+        const getSourceFile = host.getSourceFile.bind(host);
+        host.readFile = readFile;
+        host.fileExists = fileExists;
+        host.getSourceFile = (fileName, languageVersion, onError, shouldCreate) => {
+            const planned = overlay.get(resolve(fileName));
+            if (planned !== undefined) {
+                return ts.createSourceFile(fileName, planned, languageVersion, true);
+            }
+            return getSourceFile(fileName, languageVersion, onError, shouldCreate);
+        };
+        return ts.createProgram({
+            rootNames: [...roots],
+            options: parsed.options,
+            host,
+        });
+    };
+    const checker = {
+        check(functionKey, sources) {
+            const paths = typeGraph(sources.map((source) => resolve(configDir, source)));
+            // A source the tsconfig's `include` misses is added rather than skipped:
+            // this is code the push is about to ship.
+            let added = false;
+            for (const path of paths) {
+                if (!roots.has(path)) {
+                    roots.add(path);
+                    added = true;
+                }
+            }
+            if (program === null || added)
+                program = buildProgram();
+            const diagnostics = [];
+            for (const path of paths) {
+                const sourceFile = program.getSourceFile(path);
+                if (!sourceFile)
+                    continue;
+                for (const diagnostic of [
+                    ...program.getSyntacticDiagnostics(sourceFile),
+                    ...program.getSemanticDiagnostics(sourceFile),
+                ]) {
+                    if (isThirdPartyModuleDiagnostic(ts, diagnostic, isInstalledPackage))
+                        continue;
+                    diagnostics.push(diagnostic);
+                }
+            }
+            if (diagnostics.length === 0)
+                return null;
+            const formatted = ts
+                .formatDiagnostics(diagnostics, formatHost)
+                .replace(/\n+$/, "");
+            return {
+                diagnostics: formatted,
+                message: `function '${functionKey}' does not typecheck against the ` +
+                    "declarations `config push` generates:\n" +
+                    formatted
+                        .split("\n")
+                        .map((line) => `    ${line}`)
+                        .join("\n") +
+                    "\n    Reproduce with `tsc -p functions/tsconfig.json --noEmit`; " +
+                    `push with ${TYPECHECK_SKIP_FLAG} to ship it unchecked.`,
+            };
+        },
+    };
+    return { checker, warnings };
+}
+//# sourceMappingURL=function-typecheck.js.map

package/dist/src/lib/function-typecheck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"function-typecheck.js","sourceRoot":"","sources":["../../../src/lib/function-typecheck.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAE1E,yEAAyE;AACzE,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAkCpD;;;GAGG;AACH,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAE3D;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,SAAS,4BAA4B,CACnC,EAAO,EACP,UAAe,EACf,kBAA0E;IAE1E,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,MAAM,IAAI,GAAG,EAAE,CAAC,4BAA4B,CAAC,UAAU,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,oBAAoB;QAAE,OAAO,KAAK,CAAC;IACnE,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACzE,MAAM,cAAc,GAAG,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC;IAClD,IAAI,OAAO,cAAc,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACrD,OAAO,kBAAkB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;AACvD,CAAC;AAED,8EAA8E;AAC9E,SAAS,cAAc;IACrB,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,OAAO,OAAO,CAAC,YAAY,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACvC,SAAiB,EACjB,UAAoC,EAAE;IAEtC,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAEtE,IAAI,EAAO,CAAC;IACZ,IAAI,CAAC;QACH,EAAE,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,cAAc,CAAC,EAAE,CAAC;IACpD,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE;gBACR,uEAAuE;oBACrE,kBAAkB,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI;aACpD;SACF,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,+DAA+D;IAC/D,EAAE;IACF,oEAAoE;IACpE,0EAA0E;IAC1E,6EAA6E;IAC7E,8EAA8E;IAC9E,sEAAsE;IACtE,4DAA4D;IAC5D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,IAAI,CAAC;QACH,KAAK,MAAM,QAAQ,IAAI,yBAAyB,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5D,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,CAAC,CAAC,GAAG,YAAY,0BAA0B,CAAC;YAAE,MAAM,GAAG,CAAC;QAC5D,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE;gBACR,oEAAoE;oBAClE,oCAAoC,GAAG,CAAC,OAAO,IAAI;aACtD;SACF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAsB,EAAE;QACpD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QAC1C,OAAO,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,IAAY,EAAW,EAAE,CAC3C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAExD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC;IACjE,2EAA2E;IAC3E,8EAA8E;IAC9E,4EAA4E;IAC5E,MAAM,YAAY,GAChB,QAAQ,CAAC,YAAY,CAAC;QACtB,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB,EAAE,CAAC,CAAC;IACrE,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE;gBACR,0CAA0C,uBAAuB,qBAAqB;aACvF;SACF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,UAAU,GAAG,EAAE,CAAC,yBAAyB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAC5E,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE;gBACR,oDAAoD,uBAAuB,2BAA2B;aACvG;SACF,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG;QAChB,yBAAyB,EAAE,EAAE,CAAC,GAAG,CAAC,yBAAyB;QAC3D,aAAa,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa;QACnC,UAAU;QACV,QAAQ;KACT,CAAC;IACF,MAAM,MAAM,GAAG,EAAE,CAAC,0BAA0B,CAC1C,UAAU,CAAC,MAAM,EACjB,SAAS,EACT,YAAY,EACZ,SAAS,EACT,YAAY,CACb,CAAC;IACF,2EAA2E;IAC3E,0EAA0E;IAC1E,uEAAuE;IACvE,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QAC7C,QAAQ,CAAC,IAAI,CACX,aAAa,uBAAuB,IAAI;YACtC,EAAE,CAAC,4BAA4B,CAAC,UAAU,CAAC,WAAW,EAAE,GAAG,CAAC,CAC/D,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG;QACjB,oBAAoB,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,QAAQ;QACpD,mBAAmB,EAAE,GAAG,EAAE,CAAC,YAAY;QACvC,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI;KACvB,CAAC;IAEF,6EAA6E;IAC7E,wEAAwE;IACxE,mCAAmC;IACnC,MAAM,cAAc,GAAG;QACrB,UAAU;QACV,QAAQ;QACR,yBAAyB,EAAE,EAAE,CAAC,GAAG,CAAC,yBAAyB;QAC3D,QAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ;QACzB,mBAAmB,EAAE,GAAG,EAAE,CAAC,YAAY;QACvC,cAAc,EAAE,EAAE,CAAC,GAAG,CAAC,cAAc;QACrC,eAAe,EAAE,EAAE,CAAC,GAAG,CAAC,eAAe;KACxC,CAAC;IACF,MAAM,aAAa,GAAG,CAAC,SAAiB,EAAE,cAAsB,EAAE,OAAY,EAAE,EAAE,CAChF,EAAE,CAAC,iBAAiB,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,cAAc,CAAC;SACrE,cAAc,CAAC;IAEpB,0EAA0E;IAC1E,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAmB,CAAC;IACrD,MAAM,kBAAkB,GAAG,CAAC,SAAiB,EAAE,cAAsB,EAAW,EAAE;QAChF,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,cAAc,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,2EAA2E;QAC3E,sEAAsE;QACtE,kEAAkE;QAClE,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,EAAE,cAAc,EAAE;YACxD,GAAG,MAAM,CAAC,OAAO;YACjB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,KAAK;SACrB,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,QAAQ,KAAK,SAAS,CAAC;QACzC,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACtC,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF;;;;;;;OAOG;IACH,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACpC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAW,EAAE,CAC7C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,GAAG,GAAG,CAAC;QACnE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;QACzC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAErB;;;;OAIG;IACH,MAAM,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC9C,MAAM,YAAY,GAAG,CAAC,IAAY,EAAY,EAAE;QAC9C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,KAAK,MAAM,QAAQ,IAAI,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;gBACzE,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC;oBACnE,EAAE,gBAAgB,CAAC;gBACrB,IAAI,MAAM,KAAK,SAAS;oBAAE,SAAS;gBACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;gBACjC,IAAI,YAAY,CAAC,QAAQ,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,4EAA4E;IAC5E,MAAM,SAAS,GAAG,CAAC,OAA0B,EAAY,EAAE;QACzD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;QAC3B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;YAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC7B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAC9D,CAAC;IACF,4EAA4E;IAC5E,8EAA8E;IAC9E,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,OAAO,GAAQ,IAAI,CAAC;IACxB,MAAM,YAAY,GAAG,GAAQ,EAAE;QAC7B,MAAM,IAAI,GAAG,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,aAAa,GAAG,CACnB,QAAgB,EAChB,eAAoB,EACpB,OAAY,EACZ,YAAiB,EACjB,EAAE;YACF,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC/C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;YACvE,CAAC;YACD,OAAO,aAAa,CAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QACzE,CAAC,CAAC;QACF,OAAO,EAAE,CAAC,aAAa,CAAC;YACtB,SAAS,EAAE,CAAC,GAAG,KAAK,CAAC;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI;SACL,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,OAAO,GAAwB;QACnC,KAAK,CAAC,WAAW,EAAE,OAAO;YACxB,MAAM,KAAK,GAAG,SAAS,CACrB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CACpD,CAAC;YACF,yEAAyE;YACzE,0CAA0C;YAC1C,IAAI,KAAK,GAAG,KAAK,CAAC;YAClB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAChB,KAAK,GAAG,IAAI,CAAC;gBACf,CAAC;YACH,CAAC;YACD,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK;gBAAE,OAAO,GAAG,YAAY,EAAE,CAAC;YAExD,MAAM,WAAW,GAAU,EAAE,CAAC;YAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;gBAC/C,IAAI,CAAC,UAAU;oBAAE,SAAS;gBAC1B,KAAK,MAAM,UAAU,IAAI;oBACvB,GAAG,OAAO,CAAC,uBAAuB,CAAC,UAAU,CAAC;oBAC9C,GAAG,OAAO,CAAC,sBAAsB,CAAC,UAAU,CAAC;iBAC9C,EAAE,CAAC;oBACF,IAAI,4BAA4B,CAAC,EAAE,EAAE,UAAU,EAAE,kBAAkB,CAAC;wBAClE,SAAS;oBACX,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;YACD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAE1C,MAAM,SAAS,GAAG,EAAE;iBACjB,iBAAiB,CAAC,WAAW,EAAE,UAAU,CAAC;iBAC1C,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACvB,OAAO;gBACL,WAAW,EAAE,SAAS;gBACtB,OAAO,EACL,aAAa,WAAW,mCAAmC;oBAC3D,yCAAyC;oBACzC,SAAS;yBACN,KAAK,CAAC,IAAI,CAAC;yBACX,GAAG,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC;yBACpC,IAAI,CAAC,IAAI,CAAC;oBACb,kEAAkE;oBAClE,aAAa,mBAAmB,wBAAwB;aAC3D,CAAC;QACJ,CAAC;KACF,CAAC;IAEF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC"}

package/dist/src/lib/function-versions.d.ts

@@ -0,0 +1,122 @@
+/**
+ * What `primitive functions configs` and `functions activate` render — #3462.
+ *
+ * Pure: every function here takes the server's JSON and answers strings or
+ * rows. The table's shape, the trigger summary, the activate output and the
+ * three messages `config pull` and `config diff` gained are all decisions about
+ * what an operator is told, and they are decided once here so they can be put
+ * to a test without a server or a spawned CLI.
+ */
+/** First twelve hex of a hash, or `-`. Enough to compare two by eye. */
+export declare function shortHash(value: unknown): string;
+/**
+ * The version's triggers, as one cell.
+ *
+ * `webhook`, `cron×2`, joined by `+`, `-` for a version that declares none. A
+ * server that predates a trigger kind sends no key for it, which reads as none
+ * rather than as an error.
+ */
+export declare function triggerSummary(triggers: unknown): string;
+export interface FunctionVersionRow {
+    configId: string;
+    createdAt: string;
+    active: string;
+    content: string;
+    envelope: string;
+    triggers: string;
+    by: string;
+}
+/**
+ * One row per version, in the order the server sent them (newest first).
+ *
+ * #3482 — there is no MODE cell. The config says nothing about how a function
+ * runs, so every version takes both verbs and a per-version column would say
+ * the same thing on every row of every function.
+ */
+export declare function functionVersionRows(items: unknown[]): FunctionVersionRow[];
+/**
+ * `Activated <date> by <adminId>` for the active version, from the header.
+ *
+ * A header written before #3462 carries neither field. It reads `unknown` — the
+ * pointer was moved by a push that did not record it, and saying so is better
+ * than naming an actor nobody verified.
+ */
+export declare function activatedLine(record: {
+    activeConfigActivatedAt?: unknown;
+    activeConfigActivatedBy?: unknown;
+}, formatDate: (value: string) => string): string;
+/** The `Version <id> (content <hash>)` line beneath `Key`. */
+export declare function versionLine(record: {
+    activeConfigId?: unknown;
+    contentHash?: unknown;
+}): string;
+/**
+ * `Newer version: <configId>, pushed <date>`, or null when the active version
+ * IS the newest.
+ *
+ * Read off the listing's first page: the route answers newest first, so one row
+ * is enough to know whether the function is rolled back.
+ */
+export declare function newerVersionLine(newest: {
+    configId?: unknown;
+    createdAt?: unknown;
+} | null | undefined, activeConfigId: unknown, formatDate: (value: string) => string): string | null;
+export interface ActivationAnswer {
+    configId?: unknown;
+    contentHash?: unknown;
+    createdAt?: unknown;
+    activated?: unknown;
+    previousConfigId?: unknown;
+    activatedAt?: unknown;
+    activatedBy?: unknown;
+}
+/**
+ * What `functions activate` prints.
+ *
+ * The already-active answer is its OWN sentence rather than the happy one with
+ * different numbers: the operator asked for a change and got none, and the
+ * thing that DID happen (the trigger rows were re-checked) is what they need to
+ * know.
+ */
+export declare function activationOutput(answer: ActivationAnswer, formatDate: (value: string) => string): {
+    headline: string;
+    lines: Array<[string, string]>;
+    changed: boolean;
+};
+/**
+ * What `functions activate` prints when the server refuses — D3462-004's
+ * "the server's message and code".
+ *
+ * The sentence is what an operator reads; the code is the stable identifier a
+ * script branches on, and it does not appear in the sentence. An archived
+ * function, an archived version, a held delete lease and a pointer another
+ * writer moved each owe a different next move, and the client parses `code`
+ * out of the body into its own field — so printing the message alone put it
+ * out of reach. The two 404s answer `{ error }` and nothing else, so the
+ * parenthetical is omitted rather than invented.
+ */
+export declare function activationRefusalLine(err: {
+    message?: unknown;
+    code?: unknown;
+}): string;
+/** The confirmation an activation asks for unless `-y`. */
+export declare function activationPrompt(functionId: string, configId: string): string;
+/**
+ * What `config pull` adds when the version it just wrote is not the newest.
+ *
+ * Pull writes the ACTIVE version's bytes, which is right — the tree should
+ * describe what runs — but on a rolled-back function that silently discards a
+ * newer version's code from the tree, so the line names both and both remedies.
+ */
+export declare function pullNewerVersionLine(functionKey: string, activeConfigId: string, newest: {
+    configId?: unknown;
+    createdAt?: unknown;
+}, formatDate: (value: string) => string): string;
+/**
+ * The hint `config diff` uses when the tree matches a version that exists and
+ * is simply not the active one.
+ *
+ * Without it the generic hint ("the built bundle or a source file differs")
+ * sends an operator looking for an edit they did not make.
+ */
+export declare function rollbackDiffHint(newestConfigId: string, activeConfigId: string): string;