pyric-tools 0.1.0-alpha.7

package/dist/deploy/hosting/gzip.d.ts

@@ -0,0 +1,11 @@
+/**
+ * gzip via `CompressionStream('gzip')`. Built-in in Node 20+ and
+ * every modern browser, so no Node/browser split is needed.
+ *
+ * Hosting requires `Content-Type: application/octet-stream` for the
+ * upload step and the manifest hash MUST be the SHA-256 of the
+ * gzipped bytes — not the raw bytes — so this helper is the one
+ * normalization point.
+ */
+export declare function gzip(bytes: Uint8Array): Promise<Uint8Array>;
+//# sourceMappingURL=gzip.d.ts.map

package/dist/deploy/hosting/gzip.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gzip.d.ts","sourceRoot":"","sources":["../../../src/deploy/hosting/gzip.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,wBAAsB,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CASjE"}

package/dist/deploy/hosting/gzip.js

@@ -0,0 +1,20 @@
+/**
+ * gzip via `CompressionStream('gzip')`. Built-in in Node 20+ and
+ * every modern browser, so no Node/browser split is needed.
+ *
+ * Hosting requires `Content-Type: application/octet-stream` for the
+ * upload step and the manifest hash MUST be the SHA-256 of the
+ * gzipped bytes — not the raw bytes — so this helper is the one
+ * normalization point.
+ */
+export async function gzip(bytes) {
+    const cs = new CompressionStream('gzip');
+    const writer = cs.writable.getWriter();
+    // TS 5.7's `Uint8Array<TBuffer>` generic doesn't unify with the
+    // writer's `BufferSource` overload; runtime accepts a Uint8Array.
+    void writer.write(bytes);
+    void writer.close();
+    const buf = await new Response(cs.readable).arrayBuffer();
+    return new Uint8Array(buf);
+}
+//# sourceMappingURL=gzip.js.map

package/dist/deploy/hosting/gzip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gzip.js","sourceRoot":"","sources":["../../../src/deploy/hosting/gzip.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,KAAiB;IAC1C,MAAM,EAAE,GAAG,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;IACvC,gEAAgE;IAChE,kEAAkE;IAClE,KAAK,MAAM,CAAC,KAAK,CAAC,KAAqB,CAAC,CAAC;IACzC,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;IACpB,MAAM,GAAG,GAAG,MAAM,IAAI,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC"}

package/dist/deploy/hosting/hash.d.ts

@@ -0,0 +1,6 @@
+/**
+ * SHA-256 → lowercase hex via `globalThis.crypto.subtle`. Built into
+ * Node 20+ and every browser, so no Node/browser split is needed.
+ */
+export declare function sha256Hex(bytes: Uint8Array): Promise<string>;
+//# sourceMappingURL=hash.d.ts.map

package/dist/deploy/hosting/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../../../src/deploy/hosting/hash.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAsB,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAWlE"}

package/dist/deploy/hosting/hash.js

@@ -0,0 +1,17 @@
+/**
+ * SHA-256 → lowercase hex via `globalThis.crypto.subtle`. Built into
+ * Node 20+ and every browser, so no Node/browser split is needed.
+ */
+export async function sha256Hex(bytes) {
+    // TS 5.7+ models `Uint8Array<TBuffer>` as a generic; WebCrypto's
+    // `BufferSource` requires `ArrayBuffer` specifically. The runtime
+    // is identical — cast at the boundary.
+    const digest = await globalThis.crypto.subtle.digest('SHA-256', bytes);
+    const view = new Uint8Array(digest);
+    let out = '';
+    for (let i = 0; i < view.length; i++) {
+        out += view[i].toString(16).padStart(2, '0');
+    }
+    return out;
+}
+//# sourceMappingURL=hash.js.map

package/dist/deploy/hosting/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../../../src/deploy/hosting/hash.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAiB;IAC/C,iEAAiE;IACjE,kEAAkE;IAClE,uCAAuC;IACvC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAqB,CAAC,CAAC;IACvF,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/deploy/hosting/sites.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Hosting site provisioning. The Hosting REST API exposes
+ *   POST /v1beta1/projects/{projectId}/sites?siteId={id}
+ * to create a new site within a project. Multi-site projects use
+ * this — the default site (matching the project id) is auto-
+ * provisioned, but additional named sites must be created
+ * explicitly. Without a site, `versions.create` returns 404.
+ *
+ * Site id rules (per Hosting docs):
+ *   - 3 to 30 characters
+ *   - lowercase letters, digits, hyphens
+ *   - must start and end with a letter or digit
+ *   - **globally unique** across all Firebase projects (because the
+ *     id maps to `<siteId>.web.app`)
+ *
+ * We don't pre-validate the id locally — let Hosting reject
+ * malformed ids with its own error so we don't drift from the
+ * server's evolving rule set.
+ */
+export type CreateSiteResult = {
+    kind: 'ok';
+    site: HostingSiteResource;
+} | {
+    kind: 'already_exists';
+    siteId: string;
+} | {
+    kind: 'invalid_id';
+    siteId: string;
+    message: string;
+} | {
+    kind: 'permission_denied';
+    message: string;
+} | {
+    kind: 'http_error';
+    status: number;
+    body: string;
+} | {
+    kind: 'network_error';
+    message: string;
+};
+export interface HostingSiteResource {
+    /** `projects/{projectNumber}/sites/{siteId}` */
+    name: string;
+    /** Default URL Hosting will serve on (e.g. `https://my-site.web.app`). */
+    defaultUrl?: string;
+    type?: 'DEFAULT_SITE' | 'USER_SITE' | 'TYPE_UNSPECIFIED';
+    appId?: string;
+}
+export interface CreateHostingSiteInput {
+    projectId: string;
+    /** Globally-unique site id. Becomes `<siteId>.web.app`. */
+    siteId: string;
+    /** Optional Firebase web app id to associate with the site. */
+    appId?: string;
+    accessToken: string;
+}
+export declare function createHostingSite(input: CreateHostingSiteInput): Promise<CreateSiteResult>;
+/**
+ * Convenience wrapper: create-or-get-existing. Treats `already_exists`
+ * as success, returning the existing site's name. Useful for
+ * idempotent deploy scripts that want "ensure this site is
+ * provisioned" rather than "create exactly once".
+ */
+export declare function ensureHostingSite(input: CreateHostingSiteInput): Promise<EnsureSiteResult>;
+export type EnsureSiteResult = {
+    kind: 'created';
+    siteId: string;
+    site: HostingSiteResource;
+} | {
+    kind: 'existed';
+    siteId: string;
+} | Exclude<CreateSiteResult, {
+    kind: 'ok';
+} | {
+    kind: 'already_exists';
+}>;
+//# sourceMappingURL=sites.d.ts.map

package/dist/deploy/hosting/sites.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sites.d.ts","sourceRoot":"","sources":["../../../src/deploy/hosting/sites.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,mBAAmB,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC9C;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/C,MAAM,WAAW,mBAAmB;IAClC,gDAAgD;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,cAAc,GAAG,WAAW,GAAG,kBAAkB,CAAC;IACzD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,MAAM,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,gBAAgB,CAAC,CAkC3B;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,gBAAgB,CAAC,CAS3B;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,mBAAmB,CAAA;CAAE,GAC9D;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnC,OAAO,CAAC,gBAAgB,EAAE;IAAE,IAAI,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,gBAAgB,CAAA;CAAE,CAAC,CAAC"}

package/dist/deploy/hosting/sites.js

@@ -0,0 +1,73 @@
+/**
+ * Hosting site provisioning. The Hosting REST API exposes
+ *   POST /v1beta1/projects/{projectId}/sites?siteId={id}
+ * to create a new site within a project. Multi-site projects use
+ * this — the default site (matching the project id) is auto-
+ * provisioned, but additional named sites must be created
+ * explicitly. Without a site, `versions.create` returns 404.
+ *
+ * Site id rules (per Hosting docs):
+ *   - 3 to 30 characters
+ *   - lowercase letters, digits, hyphens
+ *   - must start and end with a letter or digit
+ *   - **globally unique** across all Firebase projects (because the
+ *     id maps to `<siteId>.web.app`)
+ *
+ * We don't pre-validate the id locally — let Hosting reject
+ * malformed ids with its own error so we don't drift from the
+ * server's evolving rule set.
+ */
+const HOSTING_API = 'https://firebasehosting.googleapis.com/v1beta1';
+export async function createHostingSite(input) {
+    const url = `${HOSTING_API}/projects/${encodeURIComponent(input.projectId)}/sites?siteId=${encodeURIComponent(input.siteId)}`;
+    const body = input.appId ? JSON.stringify({ appId: input.appId }) : '{}';
+    let res;
+    try {
+        res = await fetch(url, {
+            method: 'POST',
+            headers: {
+                Authorization: `Bearer ${input.accessToken}`,
+                'Content-Type': 'application/json',
+            },
+            body,
+        });
+    }
+    catch (e) {
+        return { kind: 'network_error', message: e instanceof Error ? e.message : String(e) };
+    }
+    if (res.ok) {
+        const site = (await res.json());
+        return { kind: 'ok', site };
+    }
+    const text = await res.text().catch(() => '');
+    if (res.status === 409) {
+        return { kind: 'already_exists', siteId: input.siteId };
+    }
+    if (res.status === 400) {
+        return { kind: 'invalid_id', siteId: input.siteId, message: text || 'invalid site id' };
+    }
+    if (res.status === 403) {
+        return {
+            kind: 'permission_denied',
+            message: `Hosting denied site creation — service account needs roles/firebasehosting.admin: ${text}`,
+        };
+    }
+    return { kind: 'http_error', status: res.status, body: text };
+}
+/**
+ * Convenience wrapper: create-or-get-existing. Treats `already_exists`
+ * as success, returning the existing site's name. Useful for
+ * idempotent deploy scripts that want "ensure this site is
+ * provisioned" rather than "create exactly once".
+ */
+export async function ensureHostingSite(input) {
+    const result = await createHostingSite(input);
+    if (result.kind === 'ok') {
+        return { kind: 'created', siteId: input.siteId, site: result.site };
+    }
+    if (result.kind === 'already_exists') {
+        return { kind: 'existed', siteId: input.siteId };
+    }
+    return result;
+}
+//# sourceMappingURL=sites.js.map

package/dist/deploy/hosting/sites.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sites.js","sourceRoot":"","sources":["../../../src/deploy/hosting/sites.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,WAAW,GAAG,gDAAgD,CAAC;AA4BrE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAA6B;IAE7B,MAAM,GAAG,GAAG,GAAG,WAAW,aAAa,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,iBAAiB,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;IAC9H,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzE,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,KAAK,CAAC,WAAW,EAAE;gBAC5C,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI;SACL,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAC;QACvD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9C,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC1D,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,iBAAiB,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,qFAAqF,IAAI,EAAE;SACrG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAA6B;IAE7B,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACrC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/deploy/hosting/spec.d.ts

@@ -0,0 +1,140 @@
+/**
+ * Public types for `HostingDeployHandler`. The five Hosting REST
+ * calls (create-version → populate-files → upload-each → finalize →
+ * release) collapse to one outcome — any non-recoverable failure
+ * aborts the rest.
+ */
+export type DeployHostingResult = {
+    success: true;
+    data: DeployHostingSuccess;
+} | {
+    success: false;
+    error: DeployHostingError;
+};
+export interface DeployHostingSuccess {
+    siteId: string;
+    /** Full resource name: `sites/{siteId}/versions/{versionId}` */
+    versionName: string;
+    /** Full resource name: `sites/{siteId}/releases/{releaseId}` */
+    releaseName: string;
+    /** Number of files declared in the manifest. */
+    fileCount: number;
+    /**
+     * Number of files actually uploaded to GCS. Less than `fileCount`
+     * when Hosting already had matching content hashes from a prior
+     * version (server-side dedup via `uploadRequiredHashes`).
+     */
+    uploadedCount: number;
+    /** Public URL the release will be reachable at once propagation completes. */
+    hostingUrl: string;
+    /** Preview-channel id, present only when this was a channel deploy. */
+    channelId?: string;
+    /**
+     * Preview URL (`https://<site>--<channelId>-<hash>.web.app`), read
+     * from the channel resource's `url` — the hash is server-assigned
+     * and never synthesized locally.
+     */
+    channelUrl?: string;
+    /** RFC3339 timestamp the channel auto-deletes at (channel deploys only). */
+    channelExpireTime?: string;
+    /**
+     * Non-fatal config translation warnings (unknown hosting keys,
+     * keys handled by other inputs). Never silently dropped — the
+     * "warn loudly" contract from the parity plan.
+     */
+    configWarnings?: string[];
+}
+export interface DeployHostingError {
+    code: HostingErrorCode;
+    message: string;
+    recoverable: boolean;
+}
+export type HostingErrorCode = 'INVALID_INPUT' | 'PERMISSION_DENIED' | 'SITE_NOT_FOUND' | 'CREATE_VERSION_FAILED' | 'POPULATE_FAILED' | 'UPLOAD_FAILED' | 'FINALIZE_FAILED' | 'RELEASE_FAILED'
+/**
+ * Hosting only validates rewrite targets (functions / Cloud Run
+ * services) at FINALIZE time, not on `versions.create`. A 400 at
+ * finalize that names a missing function maps to this code so the
+ * caller can distinguish "I deployed before the function existed"
+ * from generic finalize failures.
+ */
+ | 'REWRITE_TARGET_NOT_FOUND'
+/**
+ * Provisioning the preview channel failed before any version was
+ * created (the channel is ensured first so a bad channel id fails
+ * fast, with nothing uploaded). 403/network keep their generic
+ * codes; this covers invalid ids and other channel-API failures.
+ */
+ | 'CHANNEL_FAILED' | 'NETWORK_ERROR';
+/**
+ * Pattern selector shared by rewrites / redirects / headers. `source`
+ * and `glob` are interchangeable spellings of a Hosting glob
+ * (firebaseConfig.ts:59); `regex` is RE2.
+ */
+export type HostingSource = {
+    glob: string;
+} | {
+    source: string;
+} | {
+    regex: string;
+};
+/**
+ * One firebase.json rewrite (firebaseConfig.ts:65-88). Exactly one
+ * target: static `destination`, `function` (legacy string or object
+ * form), or Cloud Run. `dynamicLinks` is rejected at build time
+ * (product sunset) and `pinTag` is deferred (Track C) — both kept in
+ * the type so configs naming them produce a CLEAR error instead of a
+ * type-level mystery.
+ */
+export type HostingRewriteJson = HostingSource & ({
+    destination: string;
+} | {
+    function: string;
+    region?: string;
+} | {
+    function: {
+        functionId: string;
+        region?: string;
+        pinTag?: boolean;
+    };
+} | {
+    run: {
+        serviceId: string;
+        region?: string;
+        pinTag?: boolean;
+    };
+} | {
+    dynamicLinks: boolean;
+});
+/** One firebase.json redirect (firebaseConfig.ts:61-64). */
+export type HostingRedirectJson = HostingSource & {
+    destination: string;
+    /** HTTP status code. Omitted → Hosting serves 301. */
+    type?: number;
+};
+/** One firebase.json headers entry (firebaseConfig.ts:90-95). */
+export type HostingHeaderJson = HostingSource & {
+    headers: {
+        key: string;
+        value: string;
+    }[];
+};
+/**
+ * The serving-config subset of a firebase.json hosting entry
+ * (firebaseConfig.ts:120-135 `HostingBase`). `public` / `site` /
+ * `target` / `ignore` are deploy-mechanics keys consumed by other
+ * inputs (`localDir`/`files`, `siteId`, `ignore`) — passing them here
+ * yields a warning, never a silent drop. Unknown keys also warn.
+ */
+export interface HostingJsonConfig {
+    rewrites?: HostingRewriteJson[];
+    redirects?: HostingRedirectJson[];
+    headers?: HostingHeaderJson[];
+    cleanUrls?: boolean;
+    trailingSlash?: boolean;
+    appAssociation?: 'AUTO' | 'NONE';
+    i18n?: {
+        root: string;
+    };
+    [key: string]: unknown;
+}
+//# sourceMappingURL=spec.d.ts.map

package/dist/deploy/hosting/spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec.d.ts","sourceRoot":"","sources":["../../../src/deploy/hosting/spec.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,MAAM,mBAAmB,GAC3B;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,oBAAoB,CAAA;CAAE,GAC7C;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAElD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,MAAM,gBAAgB,GACxB,eAAe,GACf,mBAAmB,GACnB,gBAAgB,GAChB,uBAAuB,GACvB,iBAAiB,GACjB,eAAe,GACf,iBAAiB,GACjB,gBAAgB;AAClB;;;;;;GAMG;GACD,0BAA0B;AAC5B;;;;;GAKG;GACD,gBAAgB,GAChB,eAAe,CAAC;AAUpB;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtF;;;;;;;GAOG;AACH,MAAM,MAAM,kBAAkB,GAAG,aAAa,GAC5C,CACI;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,GACvB;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,QAAQ,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CAAE,GACvE;IAAE,GAAG,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CAAE,GACjE;IAAE,YAAY,EAAE,OAAO,CAAA;CAAE,CAC5B,CAAC;AAEJ,4DAA4D;AAC5D,MAAM,MAAM,mBAAmB,GAAG,aAAa,GAAG;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,iEAAiE;AACjE,MAAM,MAAM,iBAAiB,GAAG,aAAa,GAAG;IAC9C,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC3C,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAChC,SAAS,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAClC,OAAO,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC9B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACjC,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB"}

package/dist/deploy/hosting/spec.js

@@ -0,0 +1,8 @@
+/**
+ * Public types for `HostingDeployHandler`. The five Hosting REST
+ * calls (create-version → populate-files → upload-each → finalize →
+ * release) collapse to one outcome — any non-recoverable failure
+ * aborts the rest.
+ */
+export {};
+//# sourceMappingURL=spec.js.map

package/dist/deploy/hosting/spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec.js","sourceRoot":"","sources":["../../../src/deploy/hosting/spec.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/deploy/hosting/types.d.ts

@@ -0,0 +1,71 @@
+/** Internal types mirroring the Firebase Hosting REST API responses. */
+export interface VersionResource {
+    /** Full resource name: `sites/{siteId}/versions/{versionId}`. */
+    name: string;
+    status?: 'CREATED' | 'FINALIZED' | 'DELETED' | 'EXPIRED';
+}
+export interface PopulateFilesResponse {
+    /**
+     * Hashes the server still needs uploaded. Hashes already present
+     * from a prior version are absent — the inter-version dedup we
+     * benefit from for free.
+     */
+    uploadRequiredHashes?: string[];
+    uploadUrl: string;
+}
+export interface ReleaseResource {
+    /** Full resource name: `sites/{siteId}/releases/{releaseId}`. */
+    name: string;
+}
+/**
+ * `config` body shape for `POST /sites/{siteId}/versions` — the REST
+ * `ServingConfig` (clones/firebase-tools/src/hosting/api.ts:154-162).
+ * Every supported firebase.json hosting key translates into exactly
+ * one field here; the translation lives in `config.ts`.
+ */
+export interface VersionConfig {
+    rewrites?: VersionRewriteEntry[];
+    redirects?: VersionRedirectEntry[];
+    headers?: VersionHeaderEntry[];
+    cleanUrls?: boolean;
+    /** REST spells firebase.json's boolean `trailingSlash` as ADD/REMOVE (api.ts:159). */
+    trailingSlashBehavior?: 'ADD' | 'REMOVE';
+    appAssociation?: 'AUTO' | 'NONE';
+    i18n?: {
+        root: string;
+    };
+}
+/** REST pattern selector (api.ts:128) — exactly one of glob | regex. */
+export type VersionHasPattern = {
+    glob: string;
+} | {
+    regex: string;
+};
+/**
+ * REST rewrite (api.ts:145-152). Hosting v1beta1 takes the function
+ * as a SCALAR (function id) with the optional region as a sibling
+ * `functionRegion` field — not as a nested object. Run rewrites take
+ * `{ serviceId, region }` (region required — defaulted client-side,
+ * convertConfig.ts:252).
+ */
+export type VersionRewriteEntry = VersionHasPattern & ({
+    path: string;
+} | {
+    function: string;
+    functionRegion?: string;
+} | {
+    run: {
+        serviceId: string;
+        region: string;
+    };
+});
+/** REST redirect (api.ts:135-138). `statusCode` omitted → server serves 301. */
+export type VersionRedirectEntry = VersionHasPattern & {
+    location: string;
+    statusCode?: number;
+};
+/** REST headers entry (api.ts:130-133) — a MAP, not the firebase.json array. */
+export type VersionHeaderEntry = VersionHasPattern & {
+    headers: Record<string, string>;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/deploy/hosting/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/deploy/hosting/types.ts"],"names":[],"mappings":"AAAA,wEAAwE;AAExE,MAAM,WAAW,eAAe;IAC9B,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;CAC1D;AAED,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACjC,SAAS,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACnC,OAAO,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC/B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,sFAAsF;IACtF,qBAAqB,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC;IACzC,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACjC,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACzB;AAED,wEAAwE;AACxE,MAAM,MAAM,iBAAiB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAErE;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG,iBAAiB,GACjD,CACI;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,GAAG,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CACjD,CAAC;AAEJ,gFAAgF;AAChF,MAAM,MAAM,oBAAoB,GAAG,iBAAiB,GAAG;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,gFAAgF;AAChF,MAAM,MAAM,kBAAkB,GAAG,iBAAiB,GAAG;IACnD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC,CAAC"}

package/dist/deploy/hosting/types.js

@@ -0,0 +1,3 @@
+/** Internal types mirroring the Firebase Hosting REST API responses. */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/deploy/hosting/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/deploy/hosting/types.ts"],"names":[],"mappings":"AAAA,wEAAwE"}

package/dist/deploy/hosting/walk.d.ts

@@ -0,0 +1,31 @@
+export interface WalkedFile {
+    /** Hosting path: leading `/`, forward slashes. */
+    path: string;
+    bytes: Uint8Array;
+}
+/**
+ * Globs every deploy ignores, before user config — firebase-tools
+ * hard-codes these in its walker (listFiles.ts:8).
+ */
+export declare const BASE_IGNORE_GLOBS: string[];
+/**
+ * Default `ignore` applied when firebase.json doesn't set one —
+ * firebase-tools writes exactly this list into every scaffolded
+ * firebase.json (clones/firebase-tools/src/init/features/hosting/
+ * index.ts:20 `DEFAULT_IGNORES`).
+ */
+export declare const DEFAULT_IGNORE_GLOBS: string[];
+export declare function walkDir(localDir: string, ignore?: string[]): WalkedFile[];
+export interface IgnoreMatcher {
+    /** True when a file's relative POSIX path matches any ignore glob. */
+    ignoresFile(relPath: string): boolean;
+    /**
+     * True when an entire directory subtree can be skipped — only
+     * patterns ending in `/**` qualify (glob's `childrenIgnored`);
+     * plain patterns filter files without pruning the walk.
+     */
+    ignoresChildren(relDir: string): boolean;
+}
+/** Compile ignore globs into a matcher. Exported for tests. */
+export declare function compileIgnoreGlobs(patterns: string[]): IgnoreMatcher;
+//# sourceMappingURL=walk.d.ts.map

package/dist/deploy/hosting/walk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"walk.d.ts","sourceRoot":"","sources":["../../../src/deploy/hosting/walk.ts"],"names":[],"mappings":"AA0BA,MAAM,WAAW,UAAU;IACzB,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,UAAU,CAAC;CACnB;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB,UAI7B,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,UAAmD,CAAC;AAErF,wBAAgB,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,UAAU,EAAE,CAKzE;AA+BD,MAAM,WAAW,aAAa;IAC5B,sEAAsE;IACtE,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IACtC;;;;OAIG;IACH,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1C;AAED,+DAA+D;AAC/D,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,aAAa,CAepE"}