sf-decomposer 7.1.1 → 7.3.0

package/CHANGELOG.md

@@ -5,6 +5,20 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [7.3.0](https://github.com/mcarvin8/sf-decomposer/compare/v7.2.0...v7.3.0) (2026-08-24)
+
+
+### Features
+
+* **action:** add a GitHub Action wrapping decompose/recompose/verify ([#572](https://github.com/mcarvin8/sf-decomposer/issues/572)) ([b32391d](https://github.com/mcarvin8/sf-decomposer/commit/b32391dff7dd2d77868b4a67cc70f7563dd1e55b))
+
+## [7.2.0](https://github.com/mcarvin8/sf-decomposer/compare/v7.1.1...v7.2.0) (2026-08-24)
+
+
+### Features
+
+* **metadata:** vendor SDR registry to drop runtime dependency ([#568](https://github.com/mcarvin8/sf-decomposer/issues/568)) ([76285e8](https://github.com/mcarvin8/sf-decomposer/commit/76285e850b3b4fe0b0732bf7de14d7b7dd056999))
+
 ## [7.1.1](https://github.com/mcarvin8/sf-decomposer/compare/v7.1.0...v7.1.1) (2026-08-18)
 
 

package/README.md

@@ -8,7 +8,10 @@
 [![Mutation testing badge](https://img.shields.io/endpoint?style=flat&url=https%3A%2F%2Fbadge-api.stryker-mutator.io%2Fgithub.com%2Fmcarvin8%2Fsf-decomposer%2Fmain)](https://dashboard.stryker-mutator.io/reports/github.com/mcarvin8/sf-decomposer/main)
 [![Performance](https://img.shields.io/badge/Performance-Dashboard-58a6ff)](https://mcarvin8.github.io/sf-decomposer/dev/bench/runtime/)
 
-A Salesforce CLI plugin that **decomposes** large metadata XML files into smaller, version-control–friendly files (XML, JSON, YAML, JSON5), and **recomposes** them back into deployment-ready metadata.
+**Decomposes** large Salesforce metadata XML files into smaller, version-control–friendly files (XML, JSON, YAML, JSON5), and **recomposes** them back into deployment-ready metadata — as a Salesforce CLI plugin, or as a GitHub Action that needs neither the CLI nor a plugin install.
+
+- Using the Salesforce CLI? Start at [Setup](#setup).
+- Running this in CI without the CLI? Skip straight to [GitHub Action](#github-action).
 
 <!-- TABLE OF CONTENTS -->
 <details>
@@ -20,8 +23,9 @@ A Salesforce CLI plugin that **decomposes** large metadata XML files into smalle
   - [3. Configure .forceignore](#3-configure-forceignore)
   - [4. Configure Hooks](#4-configure-hooks-recommended)
 - [Daily Workflow](#daily-workflow)
+- [Commands](#commands)
+- [GitHub Action](#github-action)
 - [Reference](#reference)
-  - [Commands](#commands)
   - [Decompose Strategies](#decompose-strategies)
   - [Supported Metadata](#supported-metadata)
   - [Manifest-scoped Runs](#manifest-scoped-runs)
@@ -134,142 +138,252 @@ Pass `-x manifest/package.xml` to both `decompose` and `recompose` (and `deploy`
 
 ---
 
-## Reference
-
-### Commands
+## Commands
 
-| Command                   | Description                                                                       |
-|---------------------------|-----------------------------------------------------------------------------------|
-| `sf decomposer decompose` | Decompose metadata in package directories into smaller files.                     |
-| `sf decomposer recompose` | Recompose decomposed files back into deployment-ready metadata.                   |
-| `sf decomposer verify`    | Round-trip check: disassemble + reassemble each parent XML in isolation and diff. |
+<!-- commands -->
+* [`sf decomposer decompose`](#sf-decomposer-decompose)
+* [`sf decomposer recompose`](#sf-decomposer-recompose)
+* [`sf decomposer verify`](#sf-decomposer-verify)
 
-#### sf decomposer decompose
+## `sf decomposer decompose`
 
-Decomposes metadata in all local package directories (from `sfdx-project.json`) into smaller files.
+Decomposes the metadata files created by retrievals.
 
 ```
 USAGE
-  $ sf decomposer decompose [-m <value>] [-x <value>] [-f <value>] [-i <value>] [-s <value>] [--prepurge --postpurge -p -c --update-forceignore --json]
+  $ sf decomposer decompose [--json] [--flags-dir <value>] [-m <value>...] [-x <value>] [--prepurge] [--postpurge] [-f
+    xml|json|yaml|json5] [-i <value>...] [-s unique-id|grouped-by-tag] [-p] [-c] [--update-forceignore]
+    [--update-gitattributes]
 
 FLAGS
-  -m, --metadata-type=<value>             Metadata suffix to process (e.g. flow, labels). Repeatable. Optional when --manifest is provided.
-  -x, --manifest=<value>                  Path to a package.xml manifest. When provided, only the components listed in the manifest are decomposed.
-  -f, --format=<value>                    Output format: xml | yaml | json | json5 [default: xml]
-  -i, --ignore-package-directory=<value>  Package directory to skip (as in sfdx-project.json). Repeatable.
-  -s, --strategy=<value>                  unique-id | grouped-by-tag [default: unique-id]
-  --prepurge                              Remove existing decomposed files before decomposing [default: false]
-  --postpurge                             Remove original metadata files after decomposing [default: false]
-  -p, --decompose-nested-permissions      With grouped-by-tag, further decompose permission set and muting permission set object/field permissions
-  -c, --config                            Load all settings from .sfdecomposer.config.json in the repo root. Supplies metadataSuffixes, manifest, and all run-wide options; CLI flags take precedence. Makes -m and -x optional when the config defines them. [default: false]
-  --update-forceignore                    Automatically add decomposed file paths to .forceignore after successful decomposition [default: false]
-  --update-gitattributes                  Automatically add root metadata file patterns to .gitattributes after successful decomposition [default: false]
+  -c, --config
+      Load all settings from .sfdecomposer.config.json in the repo root. When set, all top-level fields (metadataSuffixes,
+      manifest, prePurge, postPurge, decomposedFormat, strategy, ignorePackageDirectories, decomposeNestedPermissions,
+      updateForceignore, updateGitattributes) and the "overrides" array are applied. Explicit CLI flags take precedence
+      over config values. Makes --metadata-type and --manifest optional when either is defined in the config.
+
+  -f, --format=<option>
+      [default: xml] File format for the decomposed files.
+      <options: xml|json|yaml|json5>
+
+  -i, --ignore-package-directory=<value>...
+      Ignore a package directory.
+
+  -m, --metadata-type=<value>...
+      The metadata suffix to process, such as 'flow', 'labels', etc. Required unless --manifest is provided.
+
+  -p, --decompose-nested-permissions
+      Additionally decompose object and field permissions on a permission set when strategy is set to "grouped-by-tag".
+
+  -s, --strategy=<option>
+      [default: unique-id] Strategy to follow when decomposing files.
+      <options: unique-id|grouped-by-tag>
+
+  -x, --manifest=<value>
+      Path to a package.xml manifest file. When provided, only the metadata listed in the manifest is decomposed. If
+      --metadata-type is also provided, the intersection of the two is used.
+
+  --postpurge
+      Purge the original files after decomposing them.
+
+  --prepurge
+      Purge directories of pre-existing decomposed files.
+
+  --update-forceignore
+      Automatically add decomposed file paths to .forceignore after successful decomposition.
+
+  --update-gitattributes
+      Automatically add root metadata file patterns to .gitattributes after successful decomposition, suppressing noisy
+      diffs on recomposed files while keeping them tracked for tools like sfdx-git-delta.
 
 GLOBAL FLAGS
-  --json  Output as JSON.
-```
+  --flags-dir=<value>  Import flag values from a directory.
+  --json               Format output as json.
 
-> At least one of `--metadata-type`, `--manifest`, or `--config` (with `metadataSuffixes` or `manifest` in the config) is required.
+DESCRIPTION
+  Decomposes the metadata files created by retrievals.
 
-**Examples**
+  Decompose large metadata files into smaller files.
 
-```bash
-# Decompose flows (XML), purge before/after
-sf decomposer decompose -m "flow" -f "xml" --prepurge --postpurge
+  You should run this after you retrieve metadata from an org.
 
-# Decompose flows and labels in YAML
-sf decomposer decompose -m "flow" -m "labels" -f "yaml" --prepurge --postpurge
+EXAMPLES
+  `sf decomposer decompose -m "flow" -f "xml" --prepurge --postpurge`
 
-# Decompose flows, excluding the force-app package
-sf decomposer decompose -m "flow" -i "force-app"
+  `sf decomposer decompose -m "flow" -m "labels" -f "xml" --prepurge --postpurge`
 
-# Decompose only the components listed in a manifest
-sf decomposer decompose -x "manifest/package.xml" --prepurge
+  `sf decomposer decompose -m "flow" -f "xml" -i "force-app"`
 
-# Restrict a manifest run to a single metadata type
-sf decomposer decompose -x "manifest/package.xml" -m "permissionset"
+  `sf decomposer decompose -x "manifest/package.xml" --postpurge`
 
-# Use config file for all options (no CLI flags needed)
-sf decomposer decompose --config
+  `sf decomposer decompose -x "manifest/package.xml" -m "flow"`
 ```
 
-#### sf decomposer recompose
+_See code: [src/commands/decomposer/decompose.ts](https://github.com/mcarvin8/sf-decomposer/blob/v7.3.0/src/commands/decomposer/decompose.ts)_
+
+## `sf decomposer recompose`
 
-Recomposes decomposed files into deployment-compatible metadata.
+Recomposes the files created by the `decompose` command before deployments.
 
 ```
 USAGE
-  $ sf decomposer recompose [-m <value>] [-x <value>] [-i <value>] [-c --postpurge --json]
+  $ sf decomposer recompose [--json] [--flags-dir <value>] [-m <value>...] [-x <value>] [--postpurge] [-i <value>...]
+  [-c]
 
 FLAGS
-  -m, --metadata-type=<value>             Metadata suffix to process (e.g. flow, labels). Repeatable. Optional when --manifest or --config is provided.
-  -x, --manifest=<value>                  Path to a package.xml manifest. When provided, only the components listed in the manifest are recomposed.
-  -i, --ignore-package-directory=<value>  Package directory to skip. Repeatable.
-  --postpurge                             Remove decomposed files after recomposing [default: false]
-  -c, --config                            Load all settings from .sfdecomposer.config.json in the repo root. Supplies metadataSuffixes, manifest, and postPurge; CLI flags take precedence. Makes -m and -x optional when the config defines them. [default: false]
+  -c, --config                               Load all settings from .sfdecomposer.config.json in the repo root. When
+                                             set, top-level fields (metadataSuffixes, manifest, postPurge,
+                                             ignorePackageDirectories) are applied. Explicit CLI flags take precedence
+                                             over config values. Makes --metadata-type and --manifest optional when
+                                             either is defined in the config.
+  -i, --ignore-package-directory=<value>...  Ignore a package directory.
+  -m, --metadata-type=<value>...             The metadata suffix to process, such as 'flow', 'labels', etc. Required
+                                             unless --manifest is provided.
+  -x, --manifest=<value>                     Path to a package.xml manifest file. When provided, only the metadata
+                                             listed in the manifest is recomposed. If --metadata-type is also provided,
+                                             the intersection of the two is used.
+      --postpurge                            Purge the decomposed files after recomposing them.
 
 GLOBAL FLAGS
-  --json  Output as JSON.
-```
+  --flags-dir=<value>  Import flag values from a directory.
+  --json               Format output as json.
 
-> At least one of `--metadata-type`, `--manifest`, or `--config` (with `metadataSuffixes` or `manifest` in the config) is required.
+DESCRIPTION
+  Recomposes the files created by the `decompose` command before deployments.
 
-**Examples**
+  Recompose the decomposed files into deployment-compatible metadata files.
 
-```bash
-sf decomposer recompose -m "flow" --postpurge
-sf decomposer recompose -m "flow" -i "force-app"
+  You should run this before you deploy decomposed metadata to an org.
 
-# Recompose only the components listed in a deploy manifest before deploying
-sf decomposer recompose -x "manifest/package.xml"
-sf project deploy start -x "manifest/package.xml"
+EXAMPLES
+  `sf decomposer recompose -m "flow" --postpurge`
+
+  `sf decomposer recompose -m "flow" -i "force-app"`
+
+  `sf decomposer recompose -x "manifest/package.xml" --postpurge`
 
-# Use config file for all options (no CLI flags needed)
-sf decomposer recompose --config
+  `sf decomposer recompose -x "manifest/package.xml" -m "flow"`
 ```
 
-#### sf decomposer verify
+_See code: [src/commands/decomposer/recompose.ts](https://github.com/mcarvin8/sf-decomposer/blob/v7.3.0/src/commands/decomposer/recompose.ts)_
 
-Non-destructive round-trip check: disassembles and reassembles each parent metadata XML file in an isolated temp directory, then compares the reconstructed XML against the original using **structural XML equality** (sibling and attribute order are ignored). Exits non-zero on any drift; your working tree is never modified.
+## `sf decomposer verify`
 
-> RECOMMENDATION: Set `RUST_LOG=off` in your environment variables to remove rust crate noise on the verify command.
+Round-trip verify that decompose followed by recompose preserves your metadata byte-for-byte.
 
 ```
 USAGE
-  $ sf decomposer verify [-m <value>] [-x <value>] [-f <value>] [-i <value>] [-s <value>] [-p -c --json]
+  $ sf decomposer verify [--json] [--flags-dir <value>] [-m <value>...] [-x <value>] [-f xml|json|yaml|json5] [-i
+    <value>...] [-s unique-id|grouped-by-tag] [-p] [-c]
 
 FLAGS
-  -m, --metadata-type=<value>             Metadata suffix to verify (e.g. flow, labels). Repeatable. Optional when --manifest is provided.
-  -x, --manifest=<value>                  Path to a package.xml manifest. When provided, only the components listed in the manifest are verified.
-  -f, --format=<value>                    Output format used for the round-trip decompose: xml | yaml | json | json5 [default: xml]
-  -i, --ignore-package-directory=<value>  Package directory to skip. Repeatable.
-  -s, --strategy=<value>                  unique-id | grouped-by-tag [default: unique-id]
-  -p, --decompose-nested-permissions      With grouped-by-tag, further decompose permission set and muting permission set object/field permissions.
-  -c, --config                            Load all settings from .sfdecomposer.config.json in the repo root. Supplies metadataSuffixes, manifest, and all run-wide options; CLI flags take precedence. Makes -m and -x optional when the config defines them. [default: false]
+  -c, --config
+      Load all settings from .sfdecomposer.config.json in the repo root. When set, all top-level fields (metadataSuffixes,
+      manifest, decomposedFormat, strategy, ignorePackageDirectories, decomposeNestedPermissions) and the "overrides"
+      array are applied. Explicit CLI flags take precedence over config values. Makes --metadata-type and --manifest
+      optional when either is defined in the config.
+
+  -f, --format=<option>
+      [default: xml] File format to decompose into for the round-trip check.
+      <options: xml|json|yaml|json5>
+
+  -i, --ignore-package-directory=<value>...
+      Ignore a package directory.
+
+  -m, --metadata-type=<value>...
+      The metadata suffix to verify, such as 'flow', 'labels', etc. Required unless --manifest is provided.
+
+  -p, --decompose-nested-permissions
+      Additionally decompose object and field permissions on a permission set when strategy is set to "grouped-by-tag".
+
+  -s, --strategy=<option>
+      [default: unique-id] Strategy to follow when decomposing files for the round-trip check.
+      <options: unique-id|grouped-by-tag>
+
+  -x, --manifest=<value>
+      Path to a package.xml manifest file. When provided, only the metadata listed in the manifest is verified. If
+      --metadata-type is also provided, the intersection of the two is used.
 
 GLOBAL FLAGS
-  --json  Output as JSON.
+  --flags-dir=<value>  Import flag values from a directory.
+  --json               Format output as json.
+
+DESCRIPTION
+  Round-trip verify that decompose followed by recompose preserves your metadata byte-for-byte.
+
+  For every parent metadata XML file belonging to the requested metadata types, disassembles and
+  reassembles it in an isolated temp directory using the same flags and `.sfdecomposer.config.json`
+  overrides you would use in production, then compares the reconstructed XML against the original.
+  Comparison is **structural** (sibling and attribute order are ignored, matching how Salesforce
+  treats metadata). The command never modifies your working tree.
+
+  Files where the only delta is ordering are surfaced as informational notices ("reordered") and do
+  not fail the run. Genuine semantic differences are reported as drift and exit non-zero, which
+  makes the command suitable as a CI gate before committing strategy, format, or override changes.
+
+EXAMPLES
+  `sf decomposer verify -m "permissionset" -f "xml"`
+
+  `sf decomposer verify -m "permissionset" -m "profile" -s "grouped-by-tag" -p`
+
+  `sf decomposer verify -x "manifest/package.xml" --config`
 ```
 
-> At least one of `--metadata-type`, `--manifest`, or `--config` (with `metadataSuffixes` or `manifest` in the config) is required.
+_See code: [src/commands/decomposer/verify.ts](https://github.com/mcarvin8/sf-decomposer/blob/v7.3.0/src/commands/decomposer/verify.ts)_
+<!-- commandsstop -->
 
-**Examples**
+---
 
-```bash
-# Verify two metadata types round-trip cleanly with defaults
-sf decomposer verify -m "permissionset" -m "profile"
+## GitHub Action
 
-# Verify a different strategy + nested-perms split before committing the change
-sf decomposer verify -m "permissionset" -s "grouped-by-tag" -p
+`decompose`, `recompose`, and `verify` are also available as a GitHub Action — a container action, so it needs **no Salesforce CLI and no `sf-decomposer` plugin install**. One action, dispatched by a `mode` input, mirrors the three CLI commands one-for-one: same flags (as inputs), same `.sfdecomposer.config.json` support via `config: true`.
 
-# CI gate: verify just the components in a deploy manifest, using the repo-root config
-sf decomposer verify -x "manifest/package.xml" --config
+```yaml
+- uses: actions/checkout@v7
+
+- name: Decompose retrieved metadata
+  uses: mcarvin8/sf-decomposer@v7
+  with:
+    mode: decompose
+    metadata-type: |
+      permissionset
+      flow
+    postpurge: 'true'
+
+- name: Verify the round trip before merging
+  uses: mcarvin8/sf-decomposer@v7
+  with:
+    mode: verify
+    config: 'true'
 ```
 
-Files whose **only** delta is sibling or attribute ordering are reported as informational notices, not drift. Salesforce treats metadata as order-agnostic, so the deploy is safe — the notice warns that committing the post-recompose output will show a git diff even though the metadata is functionally identical.
+Or point it at an existing `.sfdecomposer.config.json` for either step instead of listing flags: `with: { mode: decompose, config: 'true' }`.
+
+**Inputs** (all optional except `mode`; multi-value inputs are newline-separated, matching `actions/checkout`'s own multiline convention):
+
+| Input                          | Used by              | Description                                                                       |
+|--------------------------------|----------------------|-----------------------------------------------------------------------------------|
+| `mode`                         | all                  | `decompose`, `recompose`, or `verify`.                                            |
+| `metadata-type`                | all                  | Metadata suffix(es) to process, one per line.                                     |
+| `manifest`                     | all                  | Path to a package.xml manifest to scope the run to.                               |
+| `ignore-package-directory`     | all                  | Package director(y/ies) to skip, one per line.                                    |
+| `config`                       | all                  | Read settings from `.sfdecomposer.config.json`, same as the CLI's `--config`.     |
+| `format`                       | decompose, verify    | `xml`, `json`, `json5`, or `yaml`. Default `xml`.                                 |
+| `strategy`                     | decompose, verify    | `unique-id` or `grouped-by-tag`. Default `unique-id`.                             |
+| `decompose-nested-permissions` | decompose, verify    | With `grouped-by-tag`, further decompose permission set object/field permissions. |
+| `prepurge`                     | decompose            | Remove existing decomposed files before decomposing.                              |
+| `postpurge`                    | decompose, recompose | After decompose, remove originals; after recompose, remove decomposed files.      |
+| `update-forceignore`           | decompose            | Append decomposed file patterns to `.forceignore`.                                |
+| `update-gitattributes`         | decompose            | Mark decomposed files as generated in `.gitattributes`.                           |
+
+**Outputs:** `metadata` (newline-separated list of processed suffixes), `types-count`; `verify` additionally sets `drift-count` and `reordered-count`, and fails the step when `drift-count` is greater than 0.
+
+See [`action.yml`](action.yml) for the full input/output reference.
 
 ---
 
+## Reference
+
 ### Decompose Strategies
 
 Two primary strategies control how nested XML elements are split on disk. Both round-trip deterministically and can be mixed across types — or even across components of the same type — via the `overrides` array (see [CONFIGURATION.md](CONFIGURATION.md)). When switching strategies for an existing component, pass `--prepurge` (or `prePurge: true`) to remove leftover files from the prior strategy before writing new ones.
@@ -430,9 +544,9 @@ permissionsets/
 
 ### Supported Metadata
 
-All parent and child metadata types from this plugin's version of **@salesforce/source-deploy-retrieve** (SDR) are supported, except where noted below. Child types (e.g. `field`, `listView`, `validationRule`) resolve via their parent in the SDR registry and behave like any other type — most are leaf-only and will be skipped non-fatally if their files contain no nested repeatable elements (the Rust disassembler logs a skip at `RUST_LOG=error`, but the CLI does not fail).
+All parent and child metadata types from this plugin's vendored copy of the [@salesforce/source-deploy-retrieve](https://github.com/forcedotcom/source-deploy-retrieve) (SDR) metadata registry are supported, except where noted below. Child types (e.g. `field`, `listView`, `validationRule`) resolve via their parent in the registry and behave like any other type — most are leaf-only and will be skipped non-fatally if their files contain no nested repeatable elements (the Rust disassembler logs a skip at `RUST_LOG=error`, but the CLI does not fail).
 
-Use the metadata **suffix** for `-m` / `--metadata-type`, as in [SDR's metadataRegistry.json](https://github.com/forcedotcom/source-deploy-retrieve/blob/main/src/registry/metadataRegistry.json), or infer from the file name: `*.{suffix}-meta.xml`.
+Use the metadata **suffix** for `-m` / `--metadata-type`, as in the vendored [`metadataRegistry.json`](src/metadata/registry/metadataRegistry.json) (synced weekly from upstream SDR — see [`sync-metadata-registry.yml`](.github/workflows/sync-metadata-registry.yml)), or infer from the file name: `*.{suffix}-meta.xml`.
 
 | Metadata Type                 | CLI value                     | Notes                                                                                                                                                                                                                                                                                                                 |
 |-------------------------------|-------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
@@ -627,7 +741,7 @@ Error (1): sfdx-project.json not found in any parent directory.
 
 #### Package Directories Not Found for Given Metadata Type
 
-This plugin relies on the @salesforce/source-deploy-retrieve metadata registry to map each metadata type to its expected directory name.
+This plugin relies on a vendored snapshot of the @salesforce/source-deploy-retrieve metadata registry to map each metadata type to its expected directory name.
 
 If you provide a metadata type whose corresponding directory does not exist in any of your package directories, the plugin will fail with:
 
@@ -661,7 +775,7 @@ Example `WARN` (CustomApplication where four `actionOverrides` siblings shared t
 ### Built With
 
 - [config-disassembler-node](https://github.com/mcarvin8/config-disassembler-node) – Disassemble XML (and other config formats) into smaller, manageable files and reassemble when needed. Node.js + Rust (NAPI-RS).
-- [@salesforce/source-deploy-retrieve](https://github.com/forcedotcom/source-deploy-retrieve) – JavaScript toolkit for working with Salesforce metadata.
+- [@salesforce/source-deploy-retrieve](https://github.com/forcedotcom/source-deploy-retrieve) – Source of the vendored metadata registry (`src/metadata/registry/metadataRegistry.json`), synced weekly. Not a runtime dependency — this plugin ships its own minimal registry lookup and package.xml parser instead.
 
 ---
 

package/lib/action/decompose.d.ts

@@ -0,0 +1 @@
+export declare function runDecompose(): Promise<void>;

package/lib/action/decompose.js

@@ -0,0 +1,57 @@
+'use strict';
+import * as core from '@actions/core';
+import { decomposeMetadataTypes } from '../core/decomposeMetadataTypes.js';
+import { loadConfigFile, parseConfigSuffixes, resolveDefaultConfigPath, validateConfigManifest, } from '../helpers/configOverrides.js';
+import { multilineInput, optionalInput, requireMetadataTypesOrManifest } from './inputs.js';
+export async function runDecompose() {
+    let metadataTypes = multilineInput('metadata-type');
+    let manifest = optionalInput('manifest');
+    let ignoreDirs = multilineInput('ignore-package-directory');
+    let format = optionalInput('format') ?? 'xml';
+    let strategy = optionalInput('strategy') ?? 'unique-id';
+    let prepurge = core.getBooleanInput('prepurge');
+    let postpurge = core.getBooleanInput('postpurge');
+    let decomposeNestedPerms = core.getBooleanInput('decompose-nested-permissions');
+    let updateForceignore = core.getBooleanInput('update-forceignore');
+    let updateGitattributes = core.getBooleanInput('update-gitattributes');
+    let overrides;
+    if (core.getBooleanInput('config')) {
+        const config = await loadConfigFile(await resolveDefaultConfigPath());
+        metadataTypes ??= parseConfigSuffixes(config.metadataSuffixes);
+        const configManifest = !manifest ? config.manifest : undefined;
+        manifest ??= config.manifest;
+        ignoreDirs ??= parseConfigSuffixes(config.ignorePackageDirectories);
+        format = optionalInput('format') ?? config.decomposedFormat ?? 'xml';
+        strategy = optionalInput('strategy') ?? config.strategy ?? 'unique-id';
+        prepurge = prepurge || (config.prePurge ?? false);
+        postpurge = postpurge || (config.postPurge ?? false);
+        decomposeNestedPerms = decomposeNestedPerms || (config.decomposeNestedPermissions ?? false);
+        updateForceignore = updateForceignore || (config.updateForceignore ?? false);
+        updateGitattributes = updateGitattributes || (config.updateGitattributes ?? false);
+        overrides = config.overrides;
+        manifest = await validateConfigManifest({
+            configManifest,
+            metadataTypes,
+            manifest,
+            warn: (msg) => core.warning(msg),
+        });
+    }
+    requireMetadataTypesOrManifest(metadataTypes, manifest);
+    const result = await decomposeMetadataTypes({
+        metadataTypes,
+        prepurge,
+        postpurge,
+        format,
+        ignoreDirs,
+        strategy,
+        decomposeNestedPerms,
+        manifest,
+        overrides,
+        updateForceignore,
+        updateGitattributes,
+        log: (msg) => core.info(msg),
+    });
+    core.setOutput('metadata', result.metadata.join('\n'));
+    core.setOutput('types-count', result.metadata.length);
+}
+//# sourceMappingURL=decompose.js.map

package/lib/action/decompose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decompose.js","sourceRoot":"","sources":["../../src/action/decompose.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,KAAK,IAAI,MAAM,eAAe,CAAC;AAEtC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,8BAA8B,EAAE,MAAM,aAAa,CAAC;AAE5F,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,IAAI,aAAa,GAAG,cAAc,CAAC,eAAe,CAAC,CAAC;IACpD,IAAI,QAAQ,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,UAAU,GAAG,cAAc,CAAC,0BAA0B,CAAC,CAAC;IAC5D,IAAI,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC;IAC9C,IAAI,QAAQ,GAAG,aAAa,CAAC,UAAU,CAAC,IAAI,WAAW,CAAC;IACxD,IAAI,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;IAClD,IAAI,oBAAoB,GAAG,IAAI,CAAC,eAAe,CAAC,8BAA8B,CAAC,CAAC;IAChF,IAAI,iBAAiB,GAAG,IAAI,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC;IACnE,IAAI,mBAAmB,GAAG,IAAI,CAAC,eAAe,CAAC,sBAAsB,CAAC,CAAC;IACvE,IAAI,SAAS,CAAC;IAEd,IAAI,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,wBAAwB,EAAE,CAAC,CAAC;QACtE,aAAa,KAAK,mBAAmB,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC/D,MAAM,cAAc,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC;QAC7B,UAAU,KAAK,mBAAmB,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;QACpE,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,gBAAgB,IAAI,KAAK,CAAC;QACrE,QAAQ,GAAG,aAAa,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,QAAQ,IAAI,WAAW,CAAC;QACvE,QAAQ,GAAG,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC;QAClD,SAAS,GAAG,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;QACrD,oBAAoB,GAAG,oBAAoB,IAAI,CAAC,MAAM,CAAC,0BAA0B,IAAI,KAAK,CAAC,CAAC;QAC5F,iBAAiB,GAAG,iBAAiB,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,KAAK,CAAC,CAAC;QAC7E,mBAAmB,GAAG,mBAAmB,IAAI,CAAC,MAAM,CAAC,mBAAmB,IAAI,KAAK,CAAC,CAAC;QACnF,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAE7B,QAAQ,GAAG,MAAM,sBAAsB,CAAC;YACtC,cAAc;YACd,aAAa;YACb,QAAQ;YACR,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;SACjC,CAAC,CAAC;IACL,CAAC;IAED,8BAA8B,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAExD,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC;QAC1C,aAAa;QACb,QAAQ;QACR,SAAS;QACT,MAAM;QACN,UAAU;QACV,QAAQ;QACR,oBAAoB;QACpB,QAAQ;QACR,SAAS;QACT,iBAAiB;QACjB,mBAAmB;QACnB,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;KAC7B,CAAC,CAAC;IAEH,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACxD,CAAC"}

package/lib/action/index.d.ts

@@ -0,0 +1 @@
+export {};

package/lib/action/index.js

@@ -0,0 +1,4 @@
+'use strict';
+import { run } from './main.js';
+void run();
+//# sourceMappingURL=index.js.map

package/lib/action/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/action/index.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEhC,KAAK,GAAG,EAAE,CAAC"}

package/lib/action/inputs.d.ts

@@ -0,0 +1,3 @@
+export declare function multilineInput(name: string): string[] | undefined;
+export declare function optionalInput(name: string): string | undefined;
+export declare function requireMetadataTypesOrManifest(metadataTypes: string[] | undefined, manifest: string | undefined): void;

package/lib/action/inputs.js

@@ -0,0 +1,19 @@
+'use strict';
+import * as core from '@actions/core';
+export function multilineInput(name) {
+    const values = core
+        .getMultilineInput(name)
+        .map((line) => line.trim())
+        .filter((line) => line.length > 0);
+    return values.length > 0 ? values : undefined;
+}
+export function optionalInput(name) {
+    const value = core.getInput(name);
+    return value === '' ? undefined : value;
+}
+export function requireMetadataTypesOrManifest(metadataTypes, manifest) {
+    if (!metadataTypes?.length && !manifest) {
+        throw new Error("Either the 'metadata-type' or 'manifest' input must be set, or 'config' must be true with a config file that specifies metadataSuffixes or manifest.");
+    }
+}
+//# sourceMappingURL=inputs.js.map

package/lib/action/inputs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inputs.js","sourceRoot":"","sources":["../../src/action/inputs.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,KAAK,IAAI,MAAM,eAAe,CAAC;AAEtC,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,MAAM,GAAG,IAAI;SAChB,iBAAiB,CAAC,IAAI,CAAC;SACvB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,aAAmC,EACnC,QAA4B;IAE5B,IAAI,CAAC,aAAa,EAAE,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,sJAAsJ,CACvJ,CAAC;IACJ,CAAC;AACH,CAAC"}

package/lib/action/main.d.ts

@@ -0,0 +1 @@
+export declare function run(): Promise<void>;

package/lib/action/main.js

@@ -0,0 +1,26 @@
+'use strict';
+import * as core from '@actions/core';
+import { runDecompose } from './decompose.js';
+import { runRecompose } from './recompose.js';
+import { runVerify } from './verify.js';
+export async function run() {
+    try {
+        const mode = core.getInput('mode', { required: true });
+        if (mode === 'decompose') {
+            await runDecompose();
+        }
+        else if (mode === 'recompose') {
+            await runRecompose();
+        }
+        else if (mode === 'verify') {
+            await runVerify();
+        }
+        else {
+            core.setFailed(`Invalid mode "${mode}". Expected "decompose", "recompose", or "verify".`);
+        }
+    }
+    catch (error) {
+        core.setFailed(error instanceof Error ? error.message : String(error));
+    }
+}
+//# sourceMappingURL=main.js.map

package/lib/action/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/action/main.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,KAAK,IAAI,MAAM,eAAe,CAAC;AAEtC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,MAAM,CAAC,KAAK,UAAU,GAAG;IACvB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAEvD,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YACzB,MAAM,YAAY,EAAE,CAAC;QACvB,CAAC;aAAM,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YAChC,MAAM,YAAY,EAAE,CAAC;QACvB,CAAC;aAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,SAAS,EAAE,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,SAAS,CAAC,iBAAiB,IAAI,oDAAoD,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,SAAS,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACzE,CAAC;AACH,CAAC"}

package/lib/action/recompose.d.ts

@@ -0,0 +1 @@
+export declare function runRecompose(): Promise<void>;

package/lib/action/recompose.js

@@ -0,0 +1,36 @@
+'use strict';
+import * as core from '@actions/core';
+import { recomposeMetadataTypes } from '../core/recomposeMetadataTypes.js';
+import { loadConfigFile, parseConfigSuffixes, resolveDefaultConfigPath, validateConfigManifest, } from '../helpers/configOverrides.js';
+import { multilineInput, optionalInput, requireMetadataTypesOrManifest } from './inputs.js';
+export async function runRecompose() {
+    let metadataTypes = multilineInput('metadata-type');
+    let manifest = optionalInput('manifest');
+    let ignoreDirs = multilineInput('ignore-package-directory');
+    let postpurge = core.getBooleanInput('postpurge');
+    if (core.getBooleanInput('config')) {
+        const config = await loadConfigFile(await resolveDefaultConfigPath());
+        metadataTypes ??= parseConfigSuffixes(config.metadataSuffixes);
+        const configManifest = !manifest ? config.manifest : undefined;
+        manifest ??= config.manifest;
+        ignoreDirs ??= parseConfigSuffixes(config.ignorePackageDirectories);
+        postpurge = postpurge || (config.postPurge ?? false);
+        manifest = await validateConfigManifest({
+            configManifest,
+            metadataTypes,
+            manifest,
+            warn: (msg) => core.warning(msg),
+        });
+    }
+    requireMetadataTypesOrManifest(metadataTypes, manifest);
+    const result = await recomposeMetadataTypes({
+        metadataTypes,
+        postpurge,
+        ignoreDirs,
+        manifest,
+        log: (msg) => core.info(msg),
+    });
+    core.setOutput('metadata', result.metadata.join('\n'));
+    core.setOutput('types-count', result.metadata.length);
+}
+//# sourceMappingURL=recompose.js.map

package/lib/action/recompose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recompose.js","sourceRoot":"","sources":["../../src/action/recompose.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,KAAK,IAAI,MAAM,eAAe,CAAC;AAEtC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,8BAA8B,EAAE,MAAM,aAAa,CAAC;AAE5F,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,IAAI,aAAa,GAAG,cAAc,CAAC,eAAe,CAAC,CAAC;IACpD,IAAI,QAAQ,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,UAAU,GAAG,cAAc,CAAC,0BAA0B,CAAC,CAAC;IAC5D,IAAI,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;IAElD,IAAI,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,wBAAwB,EAAE,CAAC,CAAC;QACtE,aAAa,KAAK,mBAAmB,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC/D,MAAM,cAAc,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC;QAC7B,UAAU,KAAK,mBAAmB,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;QACpE,SAAS,GAAG,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;QAErD,QAAQ,GAAG,MAAM,sBAAsB,CAAC;YACtC,cAAc;YACd,aAAa;YACb,QAAQ;YACR,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;SACjC,CAAC,CAAC;IACL,CAAC;IAED,8BAA8B,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAExD,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC;QAC1C,aAAa;QACb,SAAS;QACT,UAAU;QACV,QAAQ;QACR,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;KAC7B,CAAC,CAAC;IAEH,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACxD,CAAC"}

package/lib/action/verify.d.ts

@@ -0,0 +1 @@
+export declare function runVerify(): Promise<void>;