sfdx-git-delta 6.41.2 → 6.43.0

package/lib/utils/changeSet.js

@@ -0,0 +1,257 @@
+'use strict';
+import { ChangeKind, ManifestTarget, } from '../types/handlerResult.js';
+const RENAME_KEY_SEPARATOR = '\0';
+const renameKey = (from, to) => `${from}${RENAME_KEY_SEPARATOR}${to}`;
+/**
+ * Domain object that collects every component change observed in a diff and
+ * derives the views consumed downstream:
+ *   - Package manifest (`ManifestTarget.Package` entries + rename targets)
+ *   - Destructive manifest (`ManifestTarget.DestructiveChanges` entries +
+ *     rename sources — minus entries that also appear in the Package view)
+ *   - Per-kind bucket map (used for the JSON review manifest)
+ *
+ * `ManifestTarget` and `ChangeKind` are orthogonal. A single ManifestElement
+ * can be (target=Package, changeKind=Delete) — this happens when InFileHandler
+ * treats a deleted container file as an addition to preserve surviving
+ * sub-elements. The xml manifests MUST route on `target` (the deployment
+ * contract); `changeKind` only drives the review-oriented JSON bucket.
+ *
+ * Insertion goes through `add` for single-component changes and
+ * `recordRename` for rename pairs. Views are pure projections.
+ */
+export default class ChangeSet {
+    byTarget = {
+        [ManifestTarget.Package]: new Map(),
+        [ManifestTarget.DestructiveChanges]: new Map(),
+    };
+    byKind = {
+        [ChangeKind.Add]: new Map(),
+        [ChangeKind.Modify]: new Map(),
+        [ChangeKind.Delete]: new Map(),
+    };
+    renames = new Map();
+    static from(elements) {
+        const set = new ChangeSet();
+        for (const element of elements) {
+            set.addElement(element);
+        }
+        return set;
+    }
+    // Precise insertion — respects the full (target, changeKind) discriminator.
+    // Callers that know both axes use this; the handler pipeline feeds
+    // ManifestElements through `from()`.
+    addElement(element) {
+        this._addToManifest(this.byTarget[element.target], element.type, element.member);
+        this._addToManifest(this.byKind[element.changeKind], element.type, element.member);
+    }
+    // Diagnostic / test-only: reconstructs the (target, type, member, changeKind)
+    // tuples by joining byTarget × byKind on (type, member). Production diff
+    // lines never insert the same (type, member) under two different changeKind
+    // values, so the join is unambiguous in practice. Production code should
+    // use forPackageManifest / forDestructiveManifest / byChangeKind for the
+    // indexed views — this method exists only so tests can list inserted
+    // elements without paying a per-addElement push in the hot path.
+    toElements() {
+        const targets = [
+            ManifestTarget.Package,
+            ManifestTarget.DestructiveChanges,
+        ];
+        const kinds = [
+            ChangeKind.Add,
+            ChangeKind.Modify,
+            ChangeKind.Delete,
+        ];
+        const out = [];
+        for (const target of targets) {
+            for (const [type, members] of this.byTarget[target]) {
+                for (const member of members) {
+                    let kind;
+                    for (const k of kinds) {
+                        if (this.byKind[k].get(type)?.has(member)) {
+                            kind = k;
+                            break;
+                        }
+                    }
+                    /* v8 ignore next -- defensive: addElement always pairs byTarget and byKind, so every (type, member) in byTarget has a corresponding byKind entry */
+                    if (kind !== undefined) {
+                        out.push({ target, type, member, changeKind: kind });
+                    }
+                }
+            }
+        }
+        return out;
+    }
+    // Convenience for callers (mostly tests) that operate under the standard
+    // convention: Add/Modify target Package, Delete targets DestructiveChanges.
+    // Production handlers that diverge from this convention (e.g. InFileHandler
+    // treating a deleted container as an addition) MUST use addElement instead.
+    add(kind, type, member) {
+        const target = kind === ChangeKind.Delete
+            ? ManifestTarget.DestructiveChanges
+            : ManifestTarget.Package;
+        this.addElement({ target, type, member, changeKind: kind });
+    }
+    recordRename(type, from, to) {
+        if (from === to)
+            return;
+        if (!this.renames.has(type)) {
+            this.renames.set(type, new Map());
+        }
+        this.renames.get(type).set(renameKey(from, to), { from, to });
+    }
+    // Folds another ChangeSet's entries into this one. Used to combine
+    // per-handler / per-collector outputs into a single project-wide view.
+    // Mutates `this`; `other` is left untouched so the source can stay
+    // referentially shared if a caller needs the snapshot it represents.
+    merge(other) {
+        for (const target of [
+            ManifestTarget.Package,
+            ManifestTarget.DestructiveChanges,
+        ]) {
+            for (const [type, members] of other.byTarget[target]) {
+                for (const member of members) {
+                    this._addToManifest(this.byTarget[target], type, member);
+                }
+            }
+        }
+        for (const kind of [
+            ChangeKind.Add,
+            ChangeKind.Modify,
+            ChangeKind.Delete,
+        ]) {
+            for (const [type, members] of other.byKind[kind]) {
+                for (const member of members) {
+                    this._addToManifest(this.byKind[kind], type, member);
+                }
+            }
+        }
+        for (const [type, pairs] of other.renames) {
+            for (const { from, to } of pairs.values()) {
+                this.recordRename(type, from, to);
+            }
+        }
+    }
+    forPackageManifest() {
+        return this._unionByType([
+            this.byTarget[ManifestTarget.Package],
+            this._renameTargetsByType(),
+        ]);
+    }
+    forDestructiveManifest() {
+        const baseDeletes = this._unionByType([
+            this.byTarget[ManifestTarget.DestructiveChanges],
+            this._renameSourcesByType(),
+        ]);
+        return this._subtractByType(baseDeletes, this.forPackageManifest());
+    }
+    byChangeKind() {
+        // Rename participants move to the Rename bucket so every entry lives in
+        // exactly one user-visible bucket.
+        // Delete subtracts Add ∪ Modify (cancelled deletions) and rename sources.
+        const targets = this._renameTargetsByType();
+        const sources = this._renameSourcesByType();
+        return {
+            [ChangeKind.Add]: this._subtractByType(this.byKind[ChangeKind.Add], targets),
+            // Clone so callers that mutate the returned Modify view cannot corrupt
+            // ChangeSet internal state. Add and Delete buckets are already new
+            // Map instances returned by _subtractByType.
+            [ChangeKind.Modify]: this._cloneManifest(this.byKind[ChangeKind.Modify]),
+            [ChangeKind.Delete]: this._subtractByType(this.byKind[ChangeKind.Delete], this._unionByType([
+                this.byKind[ChangeKind.Add],
+                this.byKind[ChangeKind.Modify],
+                sources,
+            ])),
+            [ChangeKind.Rename]: this._cloneRenames(),
+        };
+    }
+    _addToManifest(manifest, type, member) {
+        if (!manifest.has(type)) {
+            manifest.set(type, new Set());
+        }
+        manifest.get(type).add(member);
+    }
+    _cloneManifest(manifest) {
+        const clone = new Map();
+        for (const [type, members] of manifest) {
+            clone.set(type, new Set(members));
+        }
+        return clone;
+    }
+    // `recordRename` always inserts at least one pair per type key, so the
+    // inner Set is non-empty by construction. No size check needed.
+    _renameTargetsByType() {
+        const result = new Map();
+        for (const [type, pairs] of this.renames) {
+            const members = new Set();
+            for (const { to } of pairs.values())
+                members.add(to);
+            result.set(type, members);
+        }
+        return result;
+    }
+    _renameSourcesByType() {
+        const result = new Map();
+        for (const [type, pairs] of this.renames) {
+            const members = new Set();
+            for (const { from } of pairs.values())
+                members.add(from);
+            result.set(type, members);
+        }
+        return result;
+    }
+    _cloneRenames() {
+        const clone = new Map();
+        for (const [type, pairs] of this.renames) {
+            clone.set(type, new Map(pairs));
+        }
+        return clone;
+    }
+    _unionByType(manifests) {
+        const result = new Map();
+        for (const manifest of manifests) {
+            for (const [type, members] of manifest) {
+                const existing = result.get(type);
+                if (existing) {
+                    for (const member of members)
+                        existing.add(member);
+                }
+                else {
+                    result.set(type, new Set(members));
+                }
+            }
+        }
+        return result;
+    }
+    _subtractByType(base, minus) {
+        const result = new Map();
+        for (const [type, members] of base) {
+            const cancellers = minus.get(type);
+            const remaining = new Set();
+            for (const member of members) {
+                if (!cancellers?.has(member)) {
+                    remaining.add(member);
+                }
+            }
+            if (remaining.size > 0) {
+                result.set(type, remaining);
+            }
+        }
+        return result;
+    }
+}
+export const emptyResult = () => ({
+    changes: new ChangeSet(),
+    copies: [],
+    warnings: [],
+});
+export const mergeResults = (...results) => {
+    const merged = new ChangeSet();
+    for (const r of results)
+        merged.merge(r.changes);
+    return {
+        changes: merged,
+        copies: results.flatMap(r => r.copies),
+        warnings: results.flatMap(r => r.warnings),
+    };
+};
+//# sourceMappingURL=changeSet.js.map

package/lib/utils/changeSet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"changeSet.js","sourceRoot":"","sources":["../../src/utils/changeSet.ts"],"names":[],"mappings":"AAAA,YAAY,CAAA;AAEZ,OAAO,EAEL,UAAU,EAEV,cAAc,GACf,MAAM,2BAA2B,CAAA;AAUlC,MAAM,oBAAoB,GAAG,IAAI,CAAA;AACjC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAU,EAAE,EAAE,CAC7C,GAAG,IAAI,GAAG,oBAAoB,GAAG,EAAE,EAAE,CAAA;AAEvC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,OAAO,OAAO,SAAS;IACX,QAAQ,GAAqC;QAC5D,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,IAAI,GAAG,EAAE;QACnC,CAAC,cAAc,CAAC,kBAAkB,CAAC,EAAE,IAAI,GAAG,EAAE;KAC/C,CAAA;IACgB,MAAM,GAA8B;QACnD,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE;QAC3B,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,GAAG,EAAE;QAC9B,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,GAAG,EAAE;KAC/B,CAAA;IACgB,OAAO,GAAiB,IAAI,GAAG,EAAE,CAAA;IAElD,MAAM,CAAC,IAAI,CAAC,QAAoC;QAC9C,MAAM,GAAG,GAAG,IAAI,SAAS,EAAE,CAAA;QAC3B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;QACzB,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,4EAA4E;IAC5E,mEAAmE;IACnE,qCAAqC;IACrC,UAAU,CAAC,OAAwB;QACjC,IAAI,CAAC,cAAc,CACjB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAC7B,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,MAAM,CACf,CAAA;QACD,IAAI,CAAC,cAAc,CACjB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAC/B,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,MAAM,CACf,CAAA;IACH,CAAC;IAED,8EAA8E;IAC9E,yEAAyE;IACzE,4EAA4E;IAC5E,yEAAyE;IACzE,yEAAyE;IACzE,qEAAqE;IACrE,iEAAiE;IACjE,UAAU;QACR,MAAM,OAAO,GAAG;YACd,cAAc,CAAC,OAAO;YACtB,cAAc,CAAC,kBAAkB;SACzB,CAAA;QACV,MAAM,KAAK,GAAG;YACZ,UAAU,CAAC,GAAG;YACd,UAAU,CAAC,MAAM;YACjB,UAAU,CAAC,MAAM;SACT,CAAA;QACV,MAAM,GAAG,GAAsB,EAAE,CAAA;QACjC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;oBAC7B,IAAI,IAAyB,CAAA;oBAC7B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;wBACtB,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;4BAC1C,IAAI,GAAG,CAAC,CAAA;4BACR,MAAK;wBACP,CAAC;oBACH,CAAC;oBACD,oJAAoJ;oBACpJ,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;wBACvB,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;oBACtD,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,yEAAyE;IACzE,4EAA4E;IAC5E,4EAA4E;IAC5E,4EAA4E;IAC5E,GAAG,CAAC,IAAa,EAAE,IAAY,EAAE,MAAc;QAC7C,MAAM,MAAM,GACV,IAAI,KAAK,UAAU,CAAC,MAAM;YACxB,CAAC,CAAC,cAAc,CAAC,kBAAkB;YACnC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAA;QAC5B,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7D,CAAC;IAED,YAAY,CAAC,IAAY,EAAE,IAAY,EAAE,EAAU;QACjD,IAAI,IAAI,KAAK,EAAE;YAAE,OAAM;QACvB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,CAAA;QACnC,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;IAChE,CAAC;IAED,mEAAmE;IACnE,uEAAuE;IACvE,mEAAmE;IACnE,qEAAqE;IACrE,KAAK,CAAC,KAAgB;QACpB,KAAK,MAAM,MAAM,IAAI;YACnB,cAAc,CAAC,OAAO;YACtB,cAAc,CAAC,kBAAkB;SACzB,EAAE,CAAC;YACX,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;oBAC7B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;gBAC1D,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI;YACjB,UAAU,CAAC,GAAG;YACd,UAAU,CAAC,MAAM;YACjB,UAAU,CAAC,MAAM;SACT,EAAE,CAAC;YACX,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;oBAC7B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;gBACtD,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAC1C,KAAK,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1C,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;YACnC,CAAC;QACH,CAAC;IACH,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,YAAY,CAAC;YACvB,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC;YACrC,IAAI,CAAC,oBAAoB,EAAE;SAC5B,CAAC,CAAA;IACJ,CAAC;IAED,sBAAsB;QACpB,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC;YACpC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,kBAAkB,CAAC;YAChD,IAAI,CAAC,oBAAoB,EAAE;SAC5B,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAA;IACrE,CAAC;IAED,YAAY;QAMV,wEAAwE;QACxE,mCAAmC;QACnC,0EAA0E;QAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAA;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAA;QAC3C,OAAO;YACL,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,eAAe,CACpC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAC3B,OAAO,CACR;YACD,uEAAuE;YACvE,mEAAmE;YACnE,6CAA6C;YAC7C,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACxE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,eAAe,CACvC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAC9B,IAAI,CAAC,YAAY,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;gBAC3B,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;gBAC9B,OAAO;aACR,CAAC,CACH;YACD,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE;SAC1C,CAAA;IACH,CAAC;IAEO,cAAc,CACpB,QAAkB,EAClB,IAAY,EACZ,MAAc;QAEd,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,CAAA;QAC/B,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACjC,CAAC;IAEO,cAAc,CAAC,QAAkB;QACvC,MAAM,KAAK,GAAa,IAAI,GAAG,EAAE,CAAA;QACjC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;YACvC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;QACnC,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,uEAAuE;IACvE,gEAAgE;IACxD,oBAAoB;QAC1B,MAAM,MAAM,GAAa,IAAI,GAAG,EAAE,CAAA;QAClC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;YACjC,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,KAAK,CAAC,MAAM,EAAE;gBAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACpD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAC3B,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAEO,oBAAoB;QAC1B,MAAM,MAAM,GAAa,IAAI,GAAG,EAAE,CAAA;QAClC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;YACjC,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,EAAE;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YACxD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAC3B,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAEO,aAAa;QACnB,MAAM,KAAK,GAAiB,IAAI,GAAG,EAAE,CAAA;QACrC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACzC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;QACjC,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAEO,YAAY,CAAC,SAA8B;QACjD,MAAM,MAAM,GAAa,IAAI,GAAG,EAAE,CAAA;QAClC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;gBACjC,IAAI,QAAQ,EAAE,CAAC;oBACb,KAAK,MAAM,MAAM,IAAI,OAAO;wBAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;gBACpD,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;gBACpC,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAEO,eAAe,CAAC,IAAc,EAAE,KAAe;QACrD,MAAM,MAAM,GAAa,IAAI,GAAG,EAAE,CAAA;QAClC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;YACnC,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAClC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAA;YACnC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC7B,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;gBACvB,CAAC;YACH,CAAC;YACD,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;YAC7B,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;CACF;AAOD,MAAM,CAAC,MAAM,WAAW,GAAG,GAAkB,EAAE,CAAC,CAAC;IAC/C,OAAO,EAAE,IAAI,SAAS,EAAE;IACxB,MAAM,EAAE,EAAqB;IAC7B,QAAQ,EAAE,EAAa;CACxB,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAG,OAAwB,EAAiB,EAAE;IACzE,MAAM,MAAM,GAAG,IAAI,SAAS,EAAE,CAAA;IAC9B,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IAChD,OAAO;QACL,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QACtC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;KAC3C,CAAA;AACH,CAAC,CAAA"}

package/lib/utils/configValidator.d.ts

@@ -10,6 +10,7 @@ export default class ConfigValidator {
     constructor(work: Work);
     protected _validateGitSha(): Promise<string[]>;
     validateConfig(): Promise<void>;
+    protected _validateChangesManifest(): Promise<string[]>;
     protected _handleDefault(): Promise<void>;
     protected _getApiVersion(): Promise<void>;
     protected _apiVersionDefault(): Promise<void>;

package/lib/utils/configValidator.js

@@ -1,5 +1,6 @@
 'use strict';
 import { __decorate } from "tslib";
+import { stat } from 'node:fs/promises';
 import { join } from 'node:path/posix';
 import { SfProject } from '@salesforce/core';
 import GitAdapter from '../adapter/GitAdapter.js';
@@ -42,21 +43,57 @@ export default class ConfigValidator {
     }
     async validateConfig() {
         this._sanitizeConfig();
-        const [, repoExists, gitErrors] = await Promise.all([
+        const [, repoExists, gitErrors, changesManifestErrors] = await Promise.all([
             this._handleDefault(),
             pathExists(join(this.config.repo, GIT_FOLDER)),
             this._validateGitSha(),
+            this._validateChangesManifest(),
         ]);
         const errors = [];
         if (!repoExists) {
             errors.push(this.message.getMessage('error.PathIsNotGit', [this.config.repo]));
         }
         pushAll(errors, gitErrors);
+        pushAll(errors, changesManifestErrors);
         if (errors.length > 0) {
             throw new ConfigError(errors.join(', '));
         }
         await this.gitAdapter.configureRepository();
     }
+    // oclif cannot natively validate --changes-manifest (it uses a string flag
+    // to allow the bare form). Replicate meaningful checks: if the path already
+    // exists it must be a regular file; otherwise ENOENT is fine because
+    // fs-extra's outputFile creates the parent directory at write time.
+    async _validateChangesManifest() {
+        const target = this.config.changesManifest;
+        if (!target)
+            return [];
+        try {
+            const stats = await stat(target);
+            if (!stats.isFile()) {
+                return [
+                    this.message.getMessage('error.ChangesManifestNotAFile', [target]),
+                ];
+            }
+        }
+        catch (error) {
+            // fs/promises stat always rejects with ErrnoException; narrow through
+            // an `instanceof Error` guard to keep `unknown` discipline, then read
+            // the POSIX code to distinguish "doesn't exist yet" from real failures.
+            const code = error instanceof Error
+                ? error.code
+                : undefined;
+            if (code !== 'ENOENT') {
+                return [
+                    this.message.getMessage('error.ChangesManifestStatFailed', [
+                        target,
+                        getErrorMessage(error),
+                    ]),
+                ];
+            }
+        }
+        return [];
+    }
     async _handleDefault() {
         await this._getApiVersion();
         await this._apiVersionDefault();
@@ -104,6 +141,7 @@ export default class ConfigValidator {
         this.config.include = sanitizePath(this.config.include);
         this.config.includeDestructive = sanitizePath(this.config.includeDestructive);
         this.config.additionalMetadataRegistryPath = sanitizePath(this.config.additionalMetadataRegistryPath);
+        this.config.changesManifest = sanitizePath(this.config.changesManifest);
     }
 }
 __decorate([

package/lib/utils/configValidator.js.map

@@ -1 +1 @@
-{"version":3,"file":"configValidator.js","sourceRoot":"","sources":["../../src/utils/configValidator.ts"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AACZ,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AAEtC,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAE5C,OAAO,UAAU,MAAM,0BAA0B,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACxD,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAA;AAG1E,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AACzC,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAC9D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AACvD,OAAO,EAAE,GAAG,EAAE,MAAM,uBAAuB,CAAA;AAC3C,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAGpD,MAAM,QAAQ,GAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;AAElD,MAAM,CAAC,OAAO,OAAO,eAAe;IAKH;IAJZ,MAAM,CAAQ;IACd,UAAU,CAAY;IACtB,OAAO,CAAgB;IAE1C,YAA+B,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;QACvC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QACzB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACrD,IAAI,CAAC,OAAO,GAAG,IAAI,cAAc,EAAE,CAAA;IACrC,CAAC;IAES,KAAK,CAAC,eAAe;QAC7B,MAAM,MAAM,GAAa,EAAE,CAAA;QAE3B,MAAM,OAAO,CAAC,GAAG,CACf,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAC,YAAY,EAAC,EAAE;YAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;YAC1C,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;YACtE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CACV,IAAI,CAAA,qBAAqB,YAAY,QAAQ,QAAQ,6BAA6B,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CACjH,CAAA;gBACD,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,4BAA4B,EAAE;oBACpD,YAAY;oBACZ,QAAQ;iBACT,CAAC,CACH,CAAA;YACH,CAAC;QACH,CAAC,CAAC,CACH,CAAA;QAED,OAAO,MAAM,CAAA;IACf,CAAC;IAGY,AAAN,KAAK,CAAC,cAAc;QACzB,IAAI,CAAC,eAAe,EAAE,CAAA;QAEtB,MAAM,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAClD,IAAI,CAAC,cAAc,EAAE;YACrB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAC9C,IAAI,CAAC,eAAe,EAAE;SACvB,CAAC,CAAA;QAEF,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,oBAAoB,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAClE,CAAA;QACH,CAAC;QACD,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QAE1B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QAC1C,CAAC;QAED,MAAM,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAA;IAC7C,CAAC;IAES,KAAK,CAAC,cAAc;QAC5B,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC3B,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAA;IACjC,CAAC;IAES,KAAK,CAAC,cAAc;QAC5B,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS;YAAE,OAAM;QAEhD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YAC3D,MAAM,iBAAiB,GAAG,SAAS;iBAChC,gBAAgB,EAAE;iBAClB,WAAW,EAAE,CAAC,gBAAgB,CAAA;YACjC,IAAI,iBAAiB,EAAE,CAAC;gBACtB,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,QAAQ,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAA;YAC1D,CAAC;QACH,CAAC;QAAC,OAAO,EAAE,EAAE,CAAC;YACZ,MAAM,CAAC,KAAK,CACV,IAAI,CAAA,kDAAkD,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,EAAE,EAAE,CACjF,CAAA;QACH,CAAC;IACH,CAAC;IAES,KAAK,CAAC,kBAAkB;QAChC,MAAM,aAAa,GAAG,MAAM,yBAAyB,EAAE,CAAA;QAEvD,IACE,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS;YACpC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,aAAa,EACtC,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CACrB,IAAI,KAAK,CACP,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,8BAA8B,EAAE;gBACtD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;gBAC9B,MAAM,CAAC,aAAa,CAAC;aACtB,CAAC,CACH,CACF,CAAA;YACD,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,aAAa,CAAA;QACxC,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1E,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,aAAa,CAAA;YACtC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CACrB,IAAI,KAAK,CACP,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,6BAA6B,EAAE;gBACrD,MAAM,CAAC,aAAa,CAAC;aACtB,CAAC,CACH,CACF,CAAA;QACH,CAAC;IACH,CAAC;IAES,eAAe;QACvB,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAE,CAAA;QAClD,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAE,CAAC,CAAA;QAC5E,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAE,CAAA;QACtD,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACrD,IAAI,CAAC,MAAM,CAAC,iBAAiB,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAA;QAC3E,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACvD,IAAI,CAAC,MAAM,CAAC,kBAAkB,GAAG,YAAY,CAC3C,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAC/B,CAAA;QACD,IAAI,CAAC,MAAM,CAAC,8BAA8B,GAAG,YAAY,CACvD,IAAI,CAAC,MAAM,CAAC,8BAA8B,CAC3C,CAAA;IACH,CAAC;CACF;AA5Fc;IADZ,GAAG;qDAuBH"}
+{"version":3,"file":"configValidator.js","sourceRoot":"","sources":["../../src/utils/configValidator.ts"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AACZ,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AAEtC,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAE5C,OAAO,UAAU,MAAM,0BAA0B,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACxD,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAA;AAG1E,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AACzC,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAC9D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AACvD,OAAO,EAAE,GAAG,EAAE,MAAM,uBAAuB,CAAA;AAC3C,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAGpD,MAAM,QAAQ,GAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;AAElD,MAAM,CAAC,OAAO,OAAO,eAAe;IAKH;IAJZ,MAAM,CAAQ;IACd,UAAU,CAAY;IACtB,OAAO,CAAgB;IAE1C,YAA+B,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;QACvC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QACzB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACrD,IAAI,CAAC,OAAO,GAAG,IAAI,cAAc,EAAE,CAAA;IACrC,CAAC;IAES,KAAK,CAAC,eAAe;QAC7B,MAAM,MAAM,GAAa,EAAE,CAAA;QAE3B,MAAM,OAAO,CAAC,GAAG,CACf,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAC,YAAY,EAAC,EAAE;YAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;YAC1C,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;YACtE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CACV,IAAI,CAAA,qBAAqB,YAAY,QAAQ,QAAQ,6BAA6B,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CACjH,CAAA;gBACD,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,4BAA4B,EAAE;oBACpD,YAAY;oBACZ,QAAQ;iBACT,CAAC,CACH,CAAA;YACH,CAAC;QACH,CAAC,CAAC,CACH,CAAA;QAED,OAAO,MAAM,CAAA;IACf,CAAC;IAGY,AAAN,KAAK,CAAC,cAAc;QACzB,IAAI,CAAC,eAAe,EAAE,CAAA;QAEtB,MAAM,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,qBAAqB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACzE,IAAI,CAAC,cAAc,EAAE;YACrB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAC9C,IAAI,CAAC,eAAe,EAAE;YACtB,IAAI,CAAC,wBAAwB,EAAE;SAChC,CAAC,CAAA;QAEF,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,oBAAoB,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAClE,CAAA;QACH,CAAC;QACD,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QAC1B,OAAO,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;QAEtC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QAC1C,CAAC;QAED,MAAM,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAA;IAC7C,CAAC;IAED,2EAA2E;IAC3E,4EAA4E;IAC5E,qEAAqE;IACrE,oEAAoE;IAC1D,KAAK,CAAC,wBAAwB;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAA;QAC1C,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,CAAA;QACtB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAA;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACpB,OAAO;oBACL,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,+BAA+B,EAAE,CAAC,MAAM,CAAC,CAAC;iBACnE,CAAA;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,sEAAsE;YACtE,sEAAsE;YACtE,wEAAwE;YACxE,MAAM,IAAI,GACR,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAE,KAA+B,CAAC,IAAI;gBACvC,CAAC,CAAC,SAAS,CAAA;YACf,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,OAAO;oBACL,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,iCAAiC,EAAE;wBACzD,MAAM;wBACN,eAAe,CAAC,KAAK,CAAC;qBACvB,CAAC;iBACH,CAAA;YACH,CAAC;QACH,CAAC;QACD,OAAO,EAAE,CAAA;IACX,CAAC;IAES,KAAK,CAAC,cAAc;QAC5B,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC3B,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAA;IACjC,CAAC;IAES,KAAK,CAAC,cAAc;QAC5B,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS;YAAE,OAAM;QAEhD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YAC3D,MAAM,iBAAiB,GAAG,SAAS;iBAChC,gBAAgB,EAAE;iBAClB,WAAW,EAAE,CAAC,gBAAgB,CAAA;YACjC,IAAI,iBAAiB,EAAE,CAAC;gBACtB,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,QAAQ,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAA;YAC1D,CAAC;QACH,CAAC;QAAC,OAAO,EAAE,EAAE,CAAC;YACZ,MAAM,CAAC,KAAK,CACV,IAAI,CAAA,kDAAkD,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,EAAE,EAAE,CACjF,CAAA;QACH,CAAC;IACH,CAAC;IAES,KAAK,CAAC,kBAAkB;QAChC,MAAM,aAAa,GAAG,MAAM,yBAAyB,EAAE,CAAA;QAEvD,IACE,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS;YACpC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,aAAa,EACtC,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CACrB,IAAI,KAAK,CACP,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,8BAA8B,EAAE;gBACtD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;gBAC9B,MAAM,CAAC,aAAa,CAAC;aACtB,CAAC,CACH,CACF,CAAA;YACD,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,aAAa,CAAA;QACxC,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1E,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,aAAa,CAAA;YACtC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CACrB,IAAI,KAAK,CACP,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,6BAA6B,EAAE;gBACrD,MAAM,CAAC,aAAa,CAAC;aACtB,CAAC,CACH,CACF,CAAA;QACH,CAAC;IACH,CAAC;IAES,eAAe;QACvB,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAE,CAAA;QAClD,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAE,CAAC,CAAA;QAC5E,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAE,CAAA;QACtD,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACrD,IAAI,CAAC,MAAM,CAAC,iBAAiB,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAA;QAC3E,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACvD,IAAI,CAAC,MAAM,CAAC,kBAAkB,GAAG,YAAY,CAC3C,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAC/B,CAAA;QACD,IAAI,CAAC,MAAM,CAAC,8BAA8B,GAAG,YAAY,CACvD,IAAI,CAAC,MAAM,CAAC,8BAA8B,CAC3C,CAAA;QACD,IAAI,CAAC,MAAM,CAAC,eAAe,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;IACzE,CAAC;CACF;AAjIc;IADZ,GAAG;qDAyBH"}

package/lib/utils/gitLfsHelper.js

@@ -3,10 +3,18 @@ import { sep } from 'node:path/posix';
 import { UTF8_ENCODING } from '../constant/fsConstants.js';
 import { GIT_FOLDER } from '../constant/gitConstants.js';
 const LFS_HEADER = Buffer.from('version https://git-lfs');
+// LFS object ids are sha256 hex — 64 lowercase [0-9a-f] characters. The
+// regex guards against traversal via a crafted pointer (e.g. "oid
+// sha256:../../etc/passwd") that would otherwise resolve under the repo
+// root via join().
+const LFS_OID_PATTERN = /^[a-f0-9]{64}$/;
 export const isLFS = (content) => content.subarray(0, LFS_HEADER.length).equals(LFS_HEADER);
 export const getLFSObjectContentPath = (bufferContent) => {
     const content = bufferContent.toString(UTF8_ENCODING);
-    const oid = content.split(/\n/)[1].split(':')[1];
+    const oid = content.split(/\n/)[1]?.split(':')[1] ?? '';
+    if (!LFS_OID_PATTERN.test(oid)) {
+        throw new Error('Invalid LFS oid');
+    }
     return [
         GIT_FOLDER,
         'lfs',

package/lib/utils/gitLfsHelper.js.map

@@ -1 +1 @@
-{"version":3,"file":"gitLfsHelper.js","sourceRoot":"","sources":["../../src/utils/gitLfsHelper.ts"],"names":[],"mappings":"AAAA,YAAY,CAAA;AACZ,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAA;AAErC,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAExD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAA;AAEzD,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,OAAe,EAAW,EAAE,CAChD,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;AAE3D,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,aAAqB,EAAU,EAAE;IACvE,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAA;IACrD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAChD,OAAO;QACL,UAAU;QACV,KAAK;QACL,SAAS;QACT,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACf,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACf,GAAG;KACJ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACb,CAAC,CAAA"}
+{"version":3,"file":"gitLfsHelper.js","sourceRoot":"","sources":["../../src/utils/gitLfsHelper.ts"],"names":[],"mappings":"AAAA,YAAY,CAAA;AACZ,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAA;AAErC,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAExD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAA;AACzD,wEAAwE;AACxE,kEAAkE;AAClE,wEAAwE;AACxE,mBAAmB;AACnB,MAAM,eAAe,GAAG,gBAAgB,CAAA;AAExC,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,OAAe,EAAW,EAAE,CAChD,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;AAE3D,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,aAAqB,EAAU,EAAE;IACvE,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAA;IACrD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACvD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,OAAO;QACL,UAAU;QACV,KAAK;QACL,SAAS;QACT,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACf,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACf,GAAG;KACJ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACb,CAAC,CAAA"}

package/lib/utils/metadataDiff/index.d.ts

@@ -0,0 +1,28 @@
+import type { Writable } from 'node:stream';
+import type { Config } from '../../types/config.js';
+import type { SharedFileMetadata } from '../../types/metadata.js';
+import { type CompareEntry } from './streamingDiff.js';
+import { type RootCapture } from './xmlEventReader.js';
+export type DiffOutcome = {
+    manifests: {
+        added: CompareEntry[];
+        modified: CompareEntry[];
+        deleted: CompareEntry[];
+    };
+    hasAnyChanges: boolean;
+    isEmpty: boolean;
+    writer?: (out: Writable) => Promise<void>;
+};
+/**
+ * Streaming metadata diff engine. `run(path)` parses both revisions of
+ * the given file via the streaming xmlEventReader, runs the two-pass
+ * StreamingDiff engine, and returns manifests + an optional writer
+ * closure that emits pruned XML on demand.
+ */
+export default class MetadataDiff {
+    private readonly config;
+    private readonly inFileAttributes;
+    constructor(config: Config, inFileAttributes: Map<string, SharedFileMetadata>);
+    run(path: string): Promise<DiffOutcome>;
+}
+export type { CompareEntry, RootCapture };

package/lib/utils/metadataDiff/index.js

@@ -0,0 +1,57 @@
+'use strict';
+import { __decorate } from "tslib";
+import { readPathFromGit } from '../fsHelper.js';
+import { log } from '../LoggingDecorator.js';
+import { StreamingDiff } from './streamingDiff.js';
+import { parseFromSideSwallowing, parseToSidePropagating, } from './xmlEventReader.js';
+/**
+ * Streaming metadata diff engine. `run(path)` parses both revisions of
+ * the given file via the streaming xmlEventReader, runs the two-pass
+ * StreamingDiff engine, and returns manifests + an optional writer
+ * closure that emits pruned XML on demand.
+ */
+export default class MetadataDiff {
+    config;
+    inFileAttributes;
+    constructor(config, inFileAttributes) {
+        this.config = config;
+        this.inFileAttributes = inFileAttributes;
+    }
+    async run(path) {
+        // Ordering mirrors the historical compare() behavior (to first, then
+        // from) so tests relying on mockResolvedValueOnce sequencing keep
+        // working and so readPathFromGit retries stay consistent under the same
+        // GitAdapter queue discipline.
+        const toSource = await readPathFromGit({ path, oid: this.config.to }, this.config);
+        const fromSource = await readPathFromGit({ path, oid: this.config.from }, this.config);
+        const engine = new StreamingDiff(this.inFileAttributes, this.config.generateDelta);
+        await parseFromSideSwallowing(fromSource, engine.onFromElement);
+        // Deleted files have an empty to-side; legacy parseXmlFileToJson
+        // silently returned {}, so MetadataComparator saw "no children" and
+        // emitted every from-side element as deleted. The strict to-side
+        // parser throws on empty input, so we short-circuit here: an empty
+        // toSource means there are no children to classify, and the engine's
+        // drainDeletions pass naturally records every from-side element as
+        // deleted. No rootCapture is produced — InFileHandler doesn't need
+        // one for a delete-only file and the writer is gated on hasAnyChanges.
+        const rootCapture = toSource
+            ? await parseToSidePropagating(toSource, engine.onToElement)
+            : null;
+        const outcome = engine.finalize();
+        const writer = engine.buildWriter(rootCapture);
+        return {
+            manifests: {
+                added: outcome.added,
+                modified: outcome.modified,
+                deleted: outcome.deleted,
+            },
+            hasAnyChanges: outcome.hasAnyChanges,
+            isEmpty: outcome.isEmpty,
+            ...(writer ? { writer } : {}),
+        };
+    }
+}
+__decorate([
+    log
+], MetadataDiff.prototype, "run", null);
+//# sourceMappingURL=index.js.map

package/lib/utils/metadataDiff/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/utils/metadataDiff/index.ts"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAKZ,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAAE,GAAG,EAAE,MAAM,wBAAwB,CAAA;AAC5C,OAAO,EAAqB,aAAa,EAAE,MAAM,oBAAoB,CAAA;AACrE,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GAEvB,MAAM,qBAAqB,CAAA;AAe5B;;;;;GAKG;AACH,MAAM,CAAC,OAAO,OAAO,YAAY;IAEZ;IACA;IAFnB,YACmB,MAAc,EACd,gBAAiD;QADjD,WAAM,GAAN,MAAM,CAAQ;QACd,qBAAgB,GAAhB,gBAAgB,CAAiC;IACjE,CAAC;IAGE,AAAN,KAAK,CAAC,GAAG,CAAC,IAAY;QACpB,qEAAqE;QACrE,kEAAkE;QAClE,wEAAwE;QACxE,+BAA+B;QAC/B,MAAM,QAAQ,GAAG,MAAM,eAAe,CACpC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,EAC7B,IAAI,CAAC,MAAM,CACZ,CAAA;QACD,MAAM,UAAU,GAAG,MAAM,eAAe,CACtC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAC/B,IAAI,CAAC,MAAM,CACZ,CAAA;QAED,MAAM,MAAM,GAAG,IAAI,aAAa,CAC9B,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,MAAM,CAAC,aAAa,CAC1B,CAAA;QACD,MAAM,uBAAuB,CAAC,UAAU,EAAE,MAAM,CAAC,aAAa,CAAC,CAAA;QAC/D,iEAAiE;QACjE,oEAAoE;QACpE,iEAAiE;QACjE,mEAAmE;QACnE,qEAAqE;QACrE,mEAAmE;QACnE,mEAAmE;QACnE,uEAAuE;QACvE,MAAM,WAAW,GAAuB,QAAQ;YAC9C,CAAC,CAAC,MAAM,sBAAsB,CAAC,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC;YAC5D,CAAC,CAAC,IAAI,CAAA;QACR,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAA;QACjC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAA;QAC9C,OAAO;YACL,SAAS,EAAE;gBACT,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;aACzB;YACD,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B,CAAA;IACH,CAAC;CACF;AA3CO;IADL,GAAG;uCA2CH"}

package/lib/utils/metadataDiff/streamingDiff.d.ts

@@ -0,0 +1,68 @@
+import type { Writable } from 'node:stream';
+import type { ManifestElement } from '../../types/handlerResult.js';
+import type { SharedFileMetadata } from '../../types/metadata.js';
+import type { RootCapture, SubTypeElementHandler } from './xmlEventReader.js';
+export declare const CARDINALITY_SAFETY_LIMIT = 100000;
+export type CompareEntry = Pick<ManifestElement, 'type' | 'member'>;
+export type StreamingDiffResult = {
+    added: CompareEntry[];
+    modified: CompareEntry[];
+    deleted: CompareEntry[];
+    hasAnyChanges: boolean;
+    isEmpty: boolean;
+    writer?: (out: Writable) => Promise<void>;
+};
+/**
+ * Two-pass streaming diff engine. Pass 1 consumes from-side elements into
+ * per-bucket indexes; Pass 2 classifies to-side elements, emitting manifest
+ * entries (added/modified/deleted) and retaining survivors in prunedBySubType
+ * for later writer-driven output. Deferred buckets (array / object / keyless
+ * / unknown) drain at end of pass.
+ *
+ * Memory bound, per DESIGN.md \xc2\xa75.3: keyed subType indexes shrink during
+ * Pass 2 as matches drain, so peak on that bucket is O(changed_keyed_count).
+ * Deferred buckets (array/object/keyless/unknown) hold every to-side element
+ * of those subTypes until end-of-pass — they are O(element_count) per
+ * subType, capped by CARDINALITY_SAFETY_LIMIT. The writer closure then
+ * captures prunedBySubType and keeps it reachable until the IOExecutor
+ * invokes the writer or the HandlerResult is GC'd.
+ *
+ * The writer closure is not thread-safe against reuse: run() instantiates a
+ * fresh StreamingDiff per call and the writer is expected to fire at most
+ * once. Calling it twice is safe but produces the same bytes.
+ */
+export declare class StreamingDiff {
+    private readonly attributes;
+    private readonly generateDelta;
+    private readonly passOne;
+    private readonly passTwo;
+    private readonly prunedBySubType;
+    private readonly toSubTypeOrder;
+    private readonly seenSubTypes;
+    private readonly added;
+    private readonly modified;
+    private readonly deleted;
+    private hasAnyChanges;
+    constructor(attributes: Map<string, SharedFileMetadata>, generateDelta: boolean);
+    onFromElement: SubTypeElementHandler;
+    onToElement: SubTypeElementHandler;
+    private trackToOrder;
+    finalize(): Pick<StreamingDiffResult, 'added' | 'modified' | 'deleted' | 'hasAnyChanges' | 'isEmpty'>;
+    buildWriter(rootCapture: RootCapture | null): ((out: Writable) => Promise<void>) | undefined;
+    private collectRootChildren;
+    private classifyKeyedElement;
+    private recordAdded;
+    private recordModified;
+    private isPackageable;
+    private xmlNameOf;
+    private retainSubTypeElement;
+    private drainArrays;
+    private drainObjectFingerprints;
+    private drainKeyless;
+    private drainUnknown;
+    private drainDeletions;
+    private recordDeleted;
+    private appendBounded;
+    private appendObjectFingerprint;
+    private guardCardinality;
+}