pyric-tools 0.1.0-alpha.7

package/dist/deploy/functions/spec.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Public types for `FunctionsDeployHandler`. One handler call deploys
+ * one or more HTTP-triggered Cloud Functions Gen 2 from a single
+ * source directory; each function gets its own per-function config.
+ */
+export type DeployFunctionsResult = {
+    success: true;
+    data: DeployFunctionsSuccess;
+} | {
+    success: false;
+    error: DeployFunctionsError;
+};
+export interface DeployFunctionsSuccess {
+    /** One entry per function in the input. Order preserved. */
+    deployed: DeployedFunction[];
+}
+export interface DeployedFunction {
+    id: string;
+    region: string;
+    /** Full Cloud Run URI the function listens on. */
+    uri: string;
+    /** Whether public invocation was granted (post PR 3 — `false` until then). */
+    publicInvoker: boolean;
+}
+export interface DeployFunctionsError {
+    code: FunctionsErrorCode;
+    message: string;
+    recoverable: boolean;
+    /** When set, the function index that triggered the failure. Earlier
+     *  functions in the array may have deployed successfully. */
+    functionIndex?: number;
+}
+export type FunctionsErrorCode = 'INVALID_INPUT' | 'PERMISSION_DENIED' | 'SOURCE_BUNDLE_FAILED' | 'UPLOAD_URL_FAILED' | 'UPLOAD_FAILED' | 'CREATE_FAILED' | 'UPDATE_FAILED' | 'OPERATION_TIMED_OUT' | 'OPERATION_FAILED' | 'IAM_GRANT_FAILED' | 'NETWORK_ERROR';
+/**
+ * Per-function deploy config. Required: `id` and `entryPoint`.
+ * Other fields fall back to Cloud Functions Gen 2 defaults.
+ */
+export interface FunctionDeployConfig {
+    /** Function id. URL-safe; matches the rewrite's `functionId`. */
+    id: string;
+    /** Exported symbol the runtime invokes. e.g. `stitchProxy`. */
+    entryPoint: string;
+    /** Default `us-central1`. */
+    region?: string;
+    /**
+     * Default derived from the source `package.json`'s `engines.node`,
+     * fallback `nodejs22`. Pass to override explicitly (e.g. `nodejs20`).
+     */
+    runtime?: string;
+    /** e.g. `256Mi`, `512Mi`, `1Gi`. Default `256Mi`. */
+    memory?: string;
+    /** Default `60`. Cloud Functions max is 3600. */
+    timeoutSeconds?: number;
+    /** Default `0`. Set non-zero to keep instances warm. */
+    minInstances?: number;
+    /** Default `100`. */
+    maxInstances?: number;
+    /**
+     * `'public'` adds an IAM binding that grants `roles/run.invoker`
+     * to `allUsers` after the function is live. `'private'` skips the
+     * grant — the function is reachable only by Hosting rewrites and
+     * other authenticated callers. Default `'private'`.
+     *
+     * NOTE: PR 2 ships with `invoker: 'public'` raising
+     * `IAM_GRANT_FAILED` because the grant lives in PR 3.
+     */
+    invoker?: 'public' | 'private';
+}
+//# sourceMappingURL=spec.d.ts.map

package/dist/deploy/functions/spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec.d.ts","sourceRoot":"","sources":["../../../src/deploy/functions/spec.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,MAAM,qBAAqB,GAC7B;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,sBAAsB,CAAA;CAAE,GAC/C;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,oBAAoB,CAAA;CAAE,CAAC;AAEpD,MAAM,WAAW,sBAAsB;IACrC,4DAA4D;IAC5D,QAAQ,EAAE,gBAAgB,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,GAAG,EAAE,MAAM,CAAC;IACZ,8EAA8E;IAC9E,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,kBAAkB,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB;iEAC6D;IAC7D,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,kBAAkB,GAC1B,eAAe,GACf,mBAAmB,GACnB,sBAAsB,GACtB,mBAAmB,GACnB,eAAe,GACf,eAAe,GACf,eAAe,GACf,qBAAqB,GACrB,kBAAkB,GAClB,kBAAkB,GAClB,eAAe,CAAC;AAEpB;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,iEAAiE;IACjE,EAAE,EAAE,MAAM,CAAC;IACX,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB,6BAA6B;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wDAAwD;IACxD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qBAAqB;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;CAChC"}

package/dist/deploy/functions/spec.js

@@ -0,0 +1,7 @@
+/**
+ * Public types for `FunctionsDeployHandler`. One handler call deploys
+ * one or more HTTP-triggered Cloud Functions Gen 2 from a single
+ * source directory; each function gets its own per-function config.
+ */
+export {};
+//# sourceMappingURL=spec.js.map

package/dist/deploy/functions/spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec.js","sourceRoot":"","sources":["../../../src/deploy/functions/spec.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/deploy/functions/types.d.ts

@@ -0,0 +1,50 @@
+/** Internal types mirroring the Cloud Functions Gen 2 REST API. */
+export interface UploadUrlResponse {
+    /** Signed PUT URL valid ~30 minutes. */
+    uploadUrl: string;
+    /** Pass back into the function's `buildConfig.source.storageSource`. */
+    storageSource: StorageSource;
+}
+export interface StorageSource {
+    bucket: string;
+    object: string;
+    /** Optional generation number; present in production responses. */
+    generation?: string;
+}
+export interface FunctionResource {
+    /** `projects/{p}/locations/{r}/functions/{id}` */
+    name: string;
+    state?: 'STATE_UNSPECIFIED' | 'ACTIVE' | 'FAILED' | 'DEPLOYING' | 'DELETING' | 'UNKNOWN';
+    buildConfig?: BuildConfig;
+    serviceConfig?: ServiceConfig;
+}
+export interface BuildConfig {
+    runtime: string;
+    entryPoint: string;
+    source: {
+        storageSource: StorageSource;
+    };
+}
+export interface ServiceConfig {
+    /** Cloud Run URI the function listens on. */
+    uri?: string;
+    serviceAccountEmail?: string;
+    availableMemory?: string;
+    timeoutSeconds?: number;
+    minInstanceCount?: number;
+    maxInstanceCount?: number;
+}
+/** Long-running operation as returned by `cloudfunctions.googleapis.com/v2`. */
+export interface Operation {
+    /** `operations/{operationId}` or `projects/{p}/locations/{r}/operations/{operationId}`. */
+    name: string;
+    done?: boolean;
+    metadata?: Record<string, unknown>;
+    response?: FunctionResource;
+    error?: {
+        code: number;
+        message: string;
+        details?: unknown[];
+    };
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/deploy/functions/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/deploy/functions/types.ts"],"names":[],"mappings":"AAAA,mEAAmE;AAEnE,MAAM,WAAW,iBAAiB;IAChC,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,aAAa,EAAE,aAAa,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,mBAAmB,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,CAAC;IACzF,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE;QAAE,aAAa,EAAE,aAAa,CAAA;KAAE,CAAC;CAC1C;AAED,MAAM,WAAW,aAAa;IAC5B,6CAA6C;IAC7C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,gFAAgF;AAChF,MAAM,WAAW,SAAS;IACxB,2FAA2F;IAC3F,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC;KACrB,CAAC;CACH"}

package/dist/deploy/functions/types.js

@@ -0,0 +1,3 @@
+/** Internal types mirroring the Cloud Functions Gen 2 REST API. */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/deploy/functions/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/deploy/functions/types.ts"],"names":[],"mappings":"AAAA,mEAAmE"}

package/dist/deploy/hosting/channels.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Hosting preview channels. The Hosting REST API exposes
+ *   POST /v1beta1/projects/-/sites/{siteId}/channels?channelId={id}
+ * to create a channel (firebase-tools `createChannel`,
+ * clones/firebase-tools/src/hosting/api.ts:332-345) and
+ *   GET /v1beta1/projects/-/sites/{siteId}/channels/{id}
+ * to read one back (`getChannel`, api.ts:274-290). A channel carries
+ * its own preview URL (`site--channelId-<hash>.web.app`) and an
+ * `expireTime` — both come from the server; we never synthesize the
+ * URL hash locally.
+ *
+ * `ensureChannel` is the idempotent create-or-get used by the deploy
+ * path: 409 ALREADY_EXISTS is success (mirrors `ensureHostingSite`
+ * in sites.ts), and we re-read the existing channel so callers
+ * always get the real `url` + `expireTime`.
+ */
+/**
+ * Default channel TTL: 7 days, as a protobuf Duration string.
+ * Mirrors firebase-tools' DEFAULT_DURATION (7 * Duration.DAY ms,
+ * clones/firebase-tools/src/hosting/expireUtils.ts:32) serialized
+ * the way createChannel sends it: `${ttlMillis / 1000}s`
+ * (clones/firebase-tools/src/hosting/api.ts:340).
+ */
+export declare const DEFAULT_CHANNEL_TTL = "604800s";
+/** Subset of the Channel resource we consume (api.ts:61-91). */
+export interface ChannelResource {
+    /** `projects/{p}/sites/{siteId}/channels/{channelId}` */
+    name: string;
+    /** Preview URL, e.g. `https://site--pr-1-abc123de.web.app`. */
+    url: string;
+    /** RFC3339 timestamp the channel auto-deletes at. */
+    expireTime?: string;
+}
+export type EnsureChannelResult = {
+    kind: 'created';
+    channelId: string;
+    channel: ChannelResource;
+} | {
+    kind: 'existed';
+    channelId: string;
+    channel: ChannelResource;
+} | {
+    kind: 'invalid_id';
+    channelId: string;
+    message: string;
+} | {
+    kind: 'permission_denied';
+    message: string;
+} | {
+    kind: 'http_error';
+    status: number;
+    body: string;
+} | {
+    kind: 'network_error';
+    message: string;
+};
+export interface EnsureChannelInput {
+    siteId: string;
+    /** Channel id (becomes part of `<site>--<channelId>-<hash>.web.app`). */
+    channelId: string;
+    /**
+     * TTL as a protobuf Duration string (e.g. `'604800s'`). Defaults to
+     * 7 days. Applied on CREATE only — an existing channel keeps its
+     * TTL (firebase-tools PATCHes the ttl of existing channels,
+     * api.ts:352-365; deferred here).
+     */
+    ttl?: string;
+    accessToken: string;
+}
+export declare function ensureChannel(input: EnsureChannelInput): Promise<EnsureChannelResult>;
+/**
+ * Sanitize a git branch name into a Hosting channel id:
+ * lowercase, `[a-z0-9-]` only (every other char becomes `-`), runs
+ * of `-` collapsed, trimmed to 63 chars, leading/trailing `-`
+ * stripped. Returns `''` when nothing survives (caller must treat
+ * that as "no derivable id").
+ */
+export declare function sanitizeChannelId(branch: string): string;
+export type ParsedChannelTtl = {
+    ok: true;
+    ttl: string;
+} | {
+    ok: false;
+    message: string;
+};
+/**
+ * Parse a `--channel-ttl` flag (`30m` / `12h` / `7d`) into a protobuf
+ * Duration string. Grammar + 30d cap mirror firebase-tools'
+ * `calculateChannelExpireTTL` (clones/firebase-tools/src/hosting/
+ * expireUtils.ts:7,27,41-54).
+ */
+export declare function parseChannelTtl(flag: string): ParsedChannelTtl;
+//# sourceMappingURL=channels.d.ts.map

package/dist/deploy/hosting/channels.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels.d.ts","sourceRoot":"","sources":["../../../src/deploy/hosting/channels.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,YAAY,CAAC;AAE7C,gEAAgE;AAChE,MAAM,WAAW,eAAe;IAC9B,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,GAAG,EAAE,MAAM,CAAC;IACZ,qDAAqD;IACrD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,GAChE;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,GAChE;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC9C;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/C,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAsC3F;AAqCD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAOxD;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACzB;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAMnC;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAa9D"}

package/dist/deploy/hosting/channels.js

@@ -0,0 +1,134 @@
+/**
+ * Hosting preview channels. The Hosting REST API exposes
+ *   POST /v1beta1/projects/-/sites/{siteId}/channels?channelId={id}
+ * to create a channel (firebase-tools `createChannel`,
+ * clones/firebase-tools/src/hosting/api.ts:332-345) and
+ *   GET /v1beta1/projects/-/sites/{siteId}/channels/{id}
+ * to read one back (`getChannel`, api.ts:274-290). A channel carries
+ * its own preview URL (`site--channelId-<hash>.web.app`) and an
+ * `expireTime` — both come from the server; we never synthesize the
+ * URL hash locally.
+ *
+ * `ensureChannel` is the idempotent create-or-get used by the deploy
+ * path: 409 ALREADY_EXISTS is success (mirrors `ensureHostingSite`
+ * in sites.ts), and we re-read the existing channel so callers
+ * always get the real `url` + `expireTime`.
+ */
+const HOSTING_API = 'https://firebasehosting.googleapis.com/v1beta1';
+/**
+ * Default channel TTL: 7 days, as a protobuf Duration string.
+ * Mirrors firebase-tools' DEFAULT_DURATION (7 * Duration.DAY ms,
+ * clones/firebase-tools/src/hosting/expireUtils.ts:32) serialized
+ * the way createChannel sends it: `${ttlMillis / 1000}s`
+ * (clones/firebase-tools/src/hosting/api.ts:340).
+ */
+export const DEFAULT_CHANNEL_TTL = '604800s';
+export async function ensureChannel(input) {
+    const base = channelsUrl(input.siteId);
+    const createUrl = `${base}?channelId=${encodeURIComponent(input.channelId)}`;
+    const headers = {
+        Authorization: `Bearer ${input.accessToken}`,
+        'Content-Type': 'application/json',
+    };
+    let res;
+    try {
+        res = await fetch(createUrl, {
+            method: 'POST',
+            headers,
+            // Body shape pinned by createChannel (api.ts:338-340): `{ ttl }`.
+            body: JSON.stringify({ ttl: input.ttl ?? DEFAULT_CHANNEL_TTL }),
+        });
+    }
+    catch (e) {
+        return { kind: 'network_error', message: e instanceof Error ? e.message : String(e) };
+    }
+    if (res.ok) {
+        const channel = (await res.json());
+        return { kind: 'created', channelId: input.channelId, channel };
+    }
+    const text = await res.text().catch(() => '');
+    if (res.status === 409) {
+        // ALREADY_EXISTS — idempotent success. Re-read the channel so the
+        // caller still gets the real preview url + expireTime.
+        return getExistingChannel(input, headers.Authorization);
+    }
+    if (res.status === 400) {
+        return { kind: 'invalid_id', channelId: input.channelId, message: text || 'invalid channel id' };
+    }
+    if (res.status === 403) {
+        return {
+            kind: 'permission_denied',
+            message: `Hosting denied channel creation — service account needs roles/firebasehosting.admin: ${text}`,
+        };
+    }
+    return { kind: 'http_error', status: res.status, body: text };
+}
+async function getExistingChannel(input, authorization) {
+    // GET /projects/-/sites/{site}/channels/{channelId} (api.ts:274-290).
+    const url = `${channelsUrl(input.siteId)}/${encodeURIComponent(input.channelId)}`;
+    let res;
+    try {
+        res = await fetch(url, { headers: { Authorization: authorization } });
+    }
+    catch (e) {
+        return { kind: 'network_error', message: e instanceof Error ? e.message : String(e) };
+    }
+    if (res.ok) {
+        const channel = (await res.json());
+        return { kind: 'existed', channelId: input.channelId, channel };
+    }
+    const text = await res.text().catch(() => '');
+    if (res.status === 403) {
+        return {
+            kind: 'permission_denied',
+            message: `Hosting denied channel read — service account needs roles/firebasehosting.admin: ${text}`,
+        };
+    }
+    return { kind: 'http_error', status: res.status, body: text };
+}
+function channelsUrl(siteId) {
+    // Channels live under the project-scoped collection; `-` lets the
+    // server infer the project from the (globally unique) site id —
+    // same convention firebase-tools uses (api.ts:339).
+    return `${HOSTING_API}/projects/-/sites/${encodeURIComponent(siteId)}/channels`;
+}
+// ─── CLI sugar: branch-derived channel ids + TTL flag parsing ────────
+/**
+ * Sanitize a git branch name into a Hosting channel id:
+ * lowercase, `[a-z0-9-]` only (every other char becomes `-`), runs
+ * of `-` collapsed, trimmed to 63 chars, leading/trailing `-`
+ * stripped. Returns `''` when nothing survives (caller must treat
+ * that as "no derivable id").
+ */
+export function sanitizeChannelId(branch) {
+    return branch
+        .toLowerCase()
+        .replace(/[^a-z0-9-]/g, '-')
+        .replace(/-+/g, '-')
+        .slice(0, 63)
+        .replace(/^-+|-+$/g, '');
+}
+const DURATION_REGEX = /^(\d+)([hdm])$/;
+const SECONDS = { m: 60, h: 60 * 60, d: 24 * 60 * 60 };
+const MAX_TTL_SECONDS = 30 * 24 * 60 * 60;
+/**
+ * Parse a `--channel-ttl` flag (`30m` / `12h` / `7d`) into a protobuf
+ * Duration string. Grammar + 30d cap mirror firebase-tools'
+ * `calculateChannelExpireTTL` (clones/firebase-tools/src/hosting/
+ * expireUtils.ts:7,27,41-54).
+ */
+export function parseChannelTtl(flag) {
+    const match = DURATION_REGEX.exec(flag);
+    if (!match) {
+        return { ok: false, message: `--channel-ttl must be a duration like 30m, 12h or 7d (got '${flag}')` };
+    }
+    const seconds = parseInt(match[1], 10) * SECONDS[match[2]];
+    if (!Number.isFinite(seconds) || seconds <= 0) {
+        return { ok: false, message: `failed to parse --channel-ttl '${flag}'` };
+    }
+    if (seconds > MAX_TTL_SECONDS) {
+        return { ok: false, message: `--channel-ttl may not exceed 30d (got '${flag}')` };
+    }
+    return { ok: true, ttl: `${seconds}s` };
+}
+//# sourceMappingURL=channels.js.map

package/dist/deploy/hosting/channels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels.js","sourceRoot":"","sources":["../../../src/deploy/hosting/channels.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,GAAG,gDAAgD,CAAC;AAErE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAAC;AAkC7C,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAyB;IAC3D,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,GAAG,IAAI,cAAc,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;IAC7E,MAAM,OAAO,GAAG;QACd,aAAa,EAAE,UAAU,KAAK,CAAC,WAAW,EAAE;QAC5C,cAAc,EAAE,kBAAkB;KACnC,CAAC;IACF,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO;YACP,kEAAkE;YAClE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,mBAAmB,EAAE,CAAC;SAChE,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAoB,CAAC;QACtD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9C,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,kEAAkE;QAClE,uDAAuD;QACvD,OAAO,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,IAAI,oBAAoB,EAAE,CAAC;IACnG,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,wFAAwF,IAAI,EAAE;SACxG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,KAAyB,EACzB,aAAqB;IAErB,sEAAsE;IACtE,MAAM,GAAG,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;IAClF,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAoB,CAAC;QACtD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9C,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,oFAAoF,IAAI,EAAE;SACpG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,kEAAkE;IAClE,gEAAgE;IAChE,oDAAoD;IACpD,OAAO,GAAG,WAAW,qBAAqB,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC;AAClF,CAAC;AAED,wEAAwE;AAExE;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,OAAO,MAAM;SACV,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACZ,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC;AAMD,MAAM,cAAc,GAAG,gBAAgB,CAAC;AACxC,MAAM,OAAO,GAA2B,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC;AAC/E,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,8DAA8D,IAAI,IAAI,EAAE,CAAC;IACxG,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAE,CAAE,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,kCAAkC,IAAI,GAAG,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,OAAO,GAAG,eAAe,EAAE,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,0CAA0C,IAAI,IAAI,EAAE,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,OAAO,GAAG,EAAE,CAAC;AAC1C,CAAC"}

package/dist/deploy/hosting/config.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Translate a firebase.json hosting block (`HostingJsonConfig`, the
+ * public API shape) into the `versions.create` request's `config`
+ * (the REST `ServingConfig`). Mirrors firebase-tools' convertConfig
+ * (clones/firebase-tools/src/deploy/hosting/convertConfig.ts) minus
+ * the backend (functions/Run) endpoint validation — Hosting itself
+ * re-validates rewrite targets at finalize time, which core.ts maps
+ * to REWRITE_TARGET_NOT_FOUND.
+ *
+ * Pure mapping, isolated here so tests can pin every request body
+ * against convertConfig.ts without spinning up the full deploy.
+ *
+ * Contract (parity plan "Done means"): every key is either supported,
+ * rejected with a clear reason (dynamicLinks → sunset, pinTag →
+ * deferred), or warned about — NEVER silently dropped.
+ */
+import type { HostingJsonConfig } from './spec.js';
+import type { VersionConfig } from './types.js';
+export type BuildVersionConfigResult = {
+    ok: true;
+    config: VersionConfig;
+    warnings: string[];
+} | {
+    ok: false;
+    message: string;
+};
+export declare function buildVersionConfig(hosting?: HostingJsonConfig): BuildVersionConfigResult;
+//# sourceMappingURL=config.d.ts.map

package/dist/deploy/hosting/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/deploy/hosting/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAEV,iBAAiB,EAIlB,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EACV,aAAa,EAKd,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,wBAAwB,GAChC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GACvD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AA4BnC,wBAAgB,kBAAkB,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,wBAAwB,CA6FxF"}