@akanjs/cli 3.0.2 → 3.1.0-rc.1

package/.build-stamp

@@ -1 +1 @@
-ed6c6a9442699bc1b0b2b6ddbe72d0cdd440f78e0d21be5e06bc85a7790491eb
+ee31653f86d9a17de2cf6fbfbfb3f585db1d135b4d2fa1dceaa1e6faee5fa437

package/{CodeAgent-szbjv4gv.js → CodeAgent-kyprmy06.js}

@@ -1,8 +1,8 @@
 // @bun
 import {
   CodeAgent2
-} from "./index-jb0hmt3k.js";
-import"./index-xwprn9nr.js";
+} from "./index-krq7btbt.js";
+import"./index-rtct7d43.js";
 import"./index-7md2g9vw.js";
 export {
   CodeAgent2 as CodeAgent

package/{CodeTui-5nw86ab6.js → CodeTui-21mtze3j.js}

@@ -4,7 +4,7 @@ import {
   McpServerConfig,
   McpTokenStore,
   McpSignIn
-} from "./index-xwprn9nr.js";
+} from "./index-rtct7d43.js";
 import {
   CodeTuiLines2,
   CodeTuiAgents2,

package/{TunnelShare-cwh9ezsm.js → TunnelShare-q4jq08qg.js}

@@ -1,8 +1,8 @@
 // @bun
 import {
   TunnelShare2
-} from "./index-2wc41k5w.js";
-import"./index-94s080qm.js";
+} from "./index-56d2g8ms.js";
+import"./index-pgj2rt78.js";
 import"./index-52w0fvh8.js";
 export {
   TunnelShare2 as TunnelShare

package/{agent.command-np1dffkb.js → agent.command-f3gsc1gd.js}

@@ -2,16 +2,16 @@
 import {
   Workspace,
   command
-} from "./index-q6ft9fkc.js";
+} from "./index-6jjtnhkw.js";
 import"./index-52w0fvh8.js";
-import"./index-50wb2a26.js";
+import"./index-55mynnqs.js";
 import"./index-hj6w4ka1.js";
-import"./index-h9ht6s60.js";
-import"./index-zyw622y1.js";
+import"./index-05g3jayg.js";
+import"./index-2mx692qq.js";
 import"./index-zzvvc845.js";
 import {
   AgentScript
-} from "./index-1gs9g12n.js";
+} from "./index-v29746vb.js";
 
 // pkgs/@akanjs/cli/agent/agent.command.ts
 class AgentCommand extends command("agent", [AgentScript], ({ public: target }) => ({

package/akanCode.js

@@ -28,7 +28,7 @@ import {
   CodeMailbox2,
   CodeSessionFork2,
   CodeAgent2
-} from "./index-jb0hmt3k.js";
+} from "./index-krq7btbt.js";
 import {
   akanCodeDefaultModel2,
   akanCodeModel2,
@@ -39,7 +39,7 @@ import {
 import {
   SubagentPool2,
   akanCodePaths2
-} from "./index-xwprn9nr.js";
+} from "./index-rtct7d43.js";
 import"./index-7md2g9vw.js";
 import {
   CodeAgentRpcHost2

package/{application.command-gk69v1xs.js → application.command-5s780vnz.js}

@@ -6,19 +6,20 @@ import {
   Exec,
   Workspace,
   command
-} from "./index-q6ft9fkc.js";
+} from "./index-6jjtnhkw.js";
 import"./index-52w0fvh8.js";
-import"./index-50wb2a26.js";
-import {
-  getMobileTargetChoices
-} from "./index-jk9xnck6.js";
+import"./index-55mynnqs.js";
+import"./index-1w2qaee2.js";
 import"./index-k9rrten6.js";
-import"./index-1bjkfvm9.js";
+import"./index-c1x0be5j.js";
 import {
   ApplicationScript
-} from "./index-nwd6qzvv.js";
+} from "./index-jx4bzvwg.js";
 import"./index-7md2g9vw.js";
-import"./index-50jjwg8y.js";
+import"./index-qt22xstj.js";
+import {
+  getMobileTargetChoices
+} from "./index-q958tqqg.js";
 
 // pkgs/@akanjs/cli/application/application.command.ts
 var mobileTargetOption = {
@@ -31,6 +32,8 @@ var deviceOption = {
   default: ""
 };
 var teamOption = { flag: "T", desc: "Apple team id the signing is narrowed to", default: "" };
+var signDesc = "sign with the identity AKAN_NATIVE_MACOS_* / AKAN_NATIVE_WINDOWS_* names (without it the env signs nothing)";
+var notarizeDesc = "macOS: upload the signed app to Apple's notary service (takes --sign)";
 var devEnvs = ["local", "debug", "develop", "main"];
 var buildEnvOption = { enum: devEnvs, desc: "backend environment", default: "debug" };
 var startEnvOption = {
@@ -93,11 +96,14 @@ class ApplicationCommand extends command("application", [ApplicationScript], ({
       runtimeDir
     });
   }),
-  build: target({ short: true, desc: "Build the application for production (frontend + backend)" }).with(App).option("write", Boolean, { desc: "write code generation", default: true }).option("fast", Boolean, { desc: "fast build", default: false }).option("quiet", Boolean, { desc: "hide build progress output", default: false }).exec(async function(app, write, fast, quiet) {
-    await this.applicationScript.build(app, { write, fast, quiet });
+  build: target({ short: true, desc: "Build the application for production (frontend + backend)" }).with(App).option("write", Boolean, { desc: "write code generation", default: true }).option("fast", Boolean, { desc: "fast build", default: false }).option("quiet", Boolean, { desc: "hide build progress output", default: false }).option("profile", String, {
+    desc: "server env profile: bundle env/env.server.<env>.<profile>.ts in place of the environment's own file",
+    nullable: true
+  }).exec(async function(app, write, fast, quiet, profile) {
+    await this.applicationScript.build(app, { write, fast, quiet, profile: profile ?? undefined });
   }),
-  typecheck: target({ short: true, desc: "Typecheck the application" }).with(App).option("write", Boolean, { desc: "write code generation", default: true }).option("clean", Boolean, { desc: "clear typecheck cache before running", default: false }).option("incremental", Boolean, { desc: "reuse TypeScript incremental cache", default: true }).exec(async function(app, write, clean, incremental) {
-    await this.applicationScript.typecheck(app, { write, clean, incremental });
+  typecheck: target({ short: true, desc: "Typecheck an app or a library, its tests and specs included" }).with(Exec).option("write", Boolean, { desc: "write code generation", default: true }).option("clean", Boolean, { desc: "clear typecheck cache before running", default: false }).option("incremental", Boolean, { desc: "reuse TypeScript incremental cache", default: true }).option("tests", Boolean, { desc: "check its *.test.ts / *.spec.ts too, which nothing imports", default: true }).exec(async function(exec, write, clean, incremental, tests) {
+    await this.applicationScript.typecheck(exec, { write, clean, incremental, tests });
   }),
   test: target({ desc: "Prepare and test an app, library, or package" }).with(Exec).option("write", Boolean, { desc: "write code generation", default: true }).exec(async function(exec, write) {
     await this.applicationScript.test(exec, { write });
@@ -115,13 +121,15 @@ class ApplicationCommand extends command("application", [ApplicationScript], ({
     desc: "the CPU the app runs on, arm64 or x64 of this OS (default this computer's); a macOS app is arm64 only",
     enum: ["arm64", "x64"],
     nullable: true
-  }).option("write", Boolean, { desc: "write code generation", default: true }).exec(async function(app, target, env, debug, installer, arch, write) {
+  }).option("sign", Boolean, { desc: signDesc, default: false }).option("notarize", Boolean, { desc: notarizeDesc, default: false }).option("write", Boolean, { desc: "write code generation", default: true }).exec(async function(app, target, env, debug, installer, arch, sign, notarize, write) {
     await this.applicationScript.buildDesktop(app, {
       target,
       env,
       profile: debug ? "debug" : "release",
       installer,
       write,
+      ...sign ? { sign } : {},
+      ...notarize ? { notarize } : {},
       ...arch ? { arch } : {}
     });
   }),
@@ -183,7 +191,7 @@ class ApplicationCommand extends command("application", [ApplicationScript], ({
     });
   }),
   packUpdate: target({
-    desc: "Pack an unsigned over-the-air update of the mobile web bundle, for the signer to publish"
+    desc: "Pack an unsigned over-the-air update of the mobile web bundle for a signer; records it in <out>/pack.json, exits 2 when --against needs a new store build"
   }).with(App).option("platform", String, { enum: ["ios", "android"], desc: "the app it updates" }).option("target", String, mobileTargetOption).option("env", String, releaseEnvOption).option("out", String, {
     desc: "output folder (default: dist/native/<app>/<target>/updates/<platform>)",
     nullable: true
@@ -214,11 +222,25 @@ class ApplicationCommand extends command("application", [ApplicationScript], ({
   }).option("target", String, mobileTargetOption).option("env", String, releaseEnvOption).option("channel", String, {
     desc: "the manifest to publish to (default: the target's updates.channel, else --env)",
     nullable: true
-  }).option("write", Boolean, { desc: "write code generation", default: true }).option("allowLocalRelease", Boolean, { flag: "l", desc: "allow release with --env local", default: false }).exec(async function(app, platform, target, env, channel, write, allowLocalRelease) {
+  }).option("upload", String, {
+    desc: "s3://<bucket>/<prefix> the release goes to, its manifests last (credentials: S3_* or AWS_* env)",
+    nullable: true
+  }).option("arch", String, {
+    desc: "desktop: the CPU of the apps it updates, arm64 or x64 of this OS (default this computer's)",
+    enum: ["arm64", "x64"],
+    nullable: true
+  }).option("sign", Boolean, {
+    desc: `${signDesc}; a signed app takes only a release signed the same way`,
+    default: false
+  }).option("notarize", Boolean, { desc: notarizeDesc, default: false }).option("write", Boolean, { desc: "write code generation", default: true }).option("allowLocalRelease", Boolean, { flag: "l", desc: "allow release with --env local", default: false }).exec(async function(app, platform, target, env, channel, upload, arch, sign, notarize, write, allowLocalRelease) {
     await this.applicationScript.publishUpdate(app, platform, {
       target,
       env,
+      ...sign ? { sign } : {},
+      ...notarize ? { notarize } : {},
       ...channel ? { channel } : {},
+      ...upload ? { upload } : {},
+      ...arch ? { arch } : {},
       write,
       allowLocalRelease
     });

package/{applicationBuildRunner-wx09n9g6.js → applicationBuildRunner-1yaqsrdq.js}

@@ -1,50 +1,92 @@
 // @bun
 import {
+  ServerEnvProfile,
   Spinner
-} from "./index-50wb2a26.js";
-import"./index-gtjgnv36.js";
+} from "./index-55mynnqs.js";
+import"./index-aprt7pkz.js";
 import {
   AllRoutesBuilder,
   CsrArtifactBuilder,
   FontPruner,
   precompressArtifacts,
   SsrBaseArtifactBuilder
-} from "./index-z750gk1j.js";
+} from "./index-c2yrsxdh.js";
 import"./index-52w0fvh8.js";
 import"./index-n68jx79w.js";
+import {
+  ProjectTypecheck2
+} from "./index-6w0rbr9d.js";
 
 // pkgs/@akanjs/devkit/applicationBuildRunner.ts
-import { mkdir, rm } from "fs/promises";
 import path2 from "path";
 
 // pkgs/@akanjs/devkit/transforms/serverEnvPlugin.ts
 import { existsSync, realpathSync } from "fs";
 import path from "path";
 var escapeRegExp = (value) => value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-var createServerEnvPlugin = ({ envDir, environment, environments }) => {
+var createServerEnvPlugin = ({
+  envDir,
+  environment,
+  environments,
+  profile,
+  onLibEnv
+}) => {
   const others = [...new Set(environments)].filter((name) => name !== environment);
   const dirs = new Set([path.resolve(envDir), existsSync(envDir) ? realpathSync.native(envDir) : envDir]);
-  const names = others.map(escapeRegExp).join("|");
-  const filter = new RegExp(`^(?:${[...dirs].map(escapeRegExp).join("|")})[\\\\/]env\\.server\\.(?:${names})\\.ts$`);
+  const folder = `^(?:${[...dirs].map(escapeRegExp).join("|")})[\\\\/]env\\.server\\.`;
+  const filter = new RegExp(`${folder}(?:${others.map(escapeRegExp).join("|")})\\.ts$`);
+  const own = new RegExp(`${folder}${escapeRegExp(environment)}\\.ts$`);
+  const libEnvs = new Map;
+  const libEnv = async (file) => {
+    const profileFile = ServerEnvProfile.profileFileOf(file, profile ?? "");
+    const libRoot = path.dirname(path.dirname(file));
+    if (await Bun.file(profileFile).exists()) {
+      const secrets = ServerEnvProfile.secretPaths(await ServerEnvProfile.evaluate(profileFile, libRoot));
+      if (secrets.length)
+        throw new Error(`${profileFile} holds secret-named values, which the "${profile}" bundle carries to every computer it runs on: ${secrets.join(", ")}.`);
+      onLibEnv?.(file, { profileFile: true, stripped: [] });
+      return { loader: "ts", contents: await Bun.file(profileFile).text() };
+    }
+    const { exports } = new Bun.Transpiler({ loader: "ts" }).scan(await Bun.file(file).text());
+    if (exports.some((name) => name !== "env"))
+      throw new Error(`${file} exports ${exports.join(", ")}: a "${profile}" build carries only a lib env's \`env\`, so give the lib ${path.basename(profileFile)}.`);
+    const { value, stripped } = ServerEnvProfile.strip(await ServerEnvProfile.evaluate(file, libRoot));
+    onLibEnv?.(file, { profileFile: false, stripped });
+    return { loader: "js", contents: `export const env = ${JSON.stringify(value ?? {})};
+` };
+  };
   return {
     name: "akan-server-env",
     setup(build) {
-      if (!others.length)
-        return;
-      build.onLoad({ filter }, async (args) => {
-        const name = path.basename(args.path, ".ts").slice("env.server.".length);
-        const { exports } = new Bun.Transpiler({ loader: "ts" }).scan(await Bun.file(args.path).text());
-        const message = `env/env.server.${name}.ts is not in this build: \`akan build\` bundles the server env of AKAN_PUBLIC_ENV=${environment} alone, the environment its image runs. To run ${name}, build for it: AKAN_PUBLIC_ENV=${name} in the workspace's .env, which outranks the shell, or --env ${name} on a desktop or mobile build.`;
-        return {
-          loader: "js",
-          contents: [
-            `const refuse = () => { throw new Error(${JSON.stringify(message)}); };`,
-            "const unbuilt = new Proxy({}, { get: refuse, has: refuse, ownKeys: refuse, getOwnPropertyDescriptor: refuse });",
-            `export { ${exports.map((exported) => `unbuilt as ${JSON.stringify(exported)}`).join(", ")} };`
-          ].join(`
+      if (profile)
+        build.onLoad({ filter: own }, async (args) => ({
+          loader: "ts",
+          contents: await Bun.file(path.join(path.dirname(args.path), `env.server.${environment}.${profile}.ts`)).text()
+        }));
+      if (others.length)
+        build.onLoad({ filter }, async (args) => {
+          const name = path.basename(args.path, ".ts").slice("env.server.".length);
+          const { exports } = new Bun.Transpiler({ loader: "ts" }).scan(await Bun.file(args.path).text());
+          const message = `env/env.server.${name}.ts is not in this build: \`akan build\` bundles the server env of AKAN_PUBLIC_ENV=${environment} alone, the environment its image runs. To run ${name}, build for it: AKAN_PUBLIC_ENV=${name} in the workspace's .env, which outranks the shell, or --env ${name} on a desktop or mobile build.`;
+          return {
+            loader: "js",
+            contents: [
+              `const refuse = () => { throw new Error(${JSON.stringify(message)}); };`,
+              "const unbuilt = new Proxy({}, { get: refuse, has: refuse, ownKeys: refuse, getOwnPropertyDescriptor: refuse });",
+              `export { ${exports.map((exported) => `unbuilt as ${JSON.stringify(exported)}`).join(", ")} };`
+            ].join(`
 `)
-        };
-      });
+          };
+        });
+      if (profile)
+        build.onLoad({ filter: /[\\/]env[\\/]env\.server\.[A-Za-z0-9-]+\.ts$/ }, async (args) => {
+          const name = path.basename(args.path, ".ts").slice("env.server.".length);
+          if (dirs.has(path.dirname(args.path)) || name === "type" || name === "example")
+            return { loader: "ts", contents: await Bun.file(args.path).text() };
+          if (!libEnvs.has(args.path))
+            libEnvs.set(args.path, libEnv(args.path));
+          return await libEnvs.get(args.path);
+        });
     }
   };
 };
@@ -72,31 +114,36 @@ var SSR_RENDER_EXTERNALS = [
   "react-server-dom-webpack/client.browser"
 ];
 var AKAN_BACKEND_MINIFY = { whitespace: true, syntax: true, identifiers: false };
-var AKAN_OPTIONAL_BACKEND_EXTERNALS = [
-  "@libsql/client",
-  "bullmq",
-  "ioredis",
-  "postgres",
-  "protobufjs"
-];
+var AKAN_OPTIONAL_BACKEND_EXTERNALS = ["bullmq", "ioredis", "postgres", "protobufjs"];
 
 class ApplicationBuildRunner {
   #app;
   #fast;
   #reporter;
   #environment;
+  #profile;
   #spinner;
   #startedAt = Date.now();
   #phases = [];
-  constructor(app, { fast = false, reporter, environment } = {}) {
+  constructor(app, { fast = false, reporter, environment, profile } = {}) {
     this.#app = app;
     this.#fast = fast;
     this.#reporter = reporter;
     this.#environment = environment;
+    this.#profile = profile;
+  }
+  get #envDir() {
+    return path2.join(this.#app.cwdPath, "env");
   }
   async build({ spinner = false } = {}) {
     this.#spinner = spinner;
-    const { web, assets } = await this.#app.getConfig();
+    const { web, assets, baseDevEnv } = await this.#app.getConfig();
+    if (this.#profile)
+      await ServerEnvProfile.assertShippable({
+        envDir: this.#envDir,
+        environment: this.#environment ?? baseDevEnv.env,
+        profile: this.#profile
+      });
     await this.#runPhase("prepare", "Preparing output directory", () => this.#app.prepareCommand("build"));
     if (!this.#fast)
       await this.#runPhase("typecheck", "Typechecking", () => this.typecheck());
@@ -114,12 +161,21 @@ class ApplicationBuildRunner {
     };
   }
   async typecheck(options = {}) {
-    const { clean = false, incremental = true } = options;
     await this.#app.getPageKeys({ refresh: true });
-    const { typecheckDir, tsconfigPath } = await this.#writeTypecheckTsconfig(incremental);
-    if (clean)
-      await rm(path2.join(typecheckDir, "tsconfig.tsbuildinfo"), { force: true });
-    await this.#checkProjectInChildProcess(tsconfigPath);
+    const typecheck = new ProjectTypecheck2(this.#app.cwdPath, this.#app.workspace.workspaceRoot, this.#app.getCommandEnv());
+    const libPageIncludes = (await this.#app.getPageRoots()).filter((root) => root.keyPrefix).flatMap((root) => {
+      const rel = path2.relative(typecheck.typecheckDir, root.realDir).split(path2.sep).join("/");
+      return [`${rel}/**/*.ts`, `${rel}/**/*.tsx`];
+    });
+    await typecheck.run([
+      "../../main.ts",
+      "../../server.ts",
+      "../../client.ts",
+      "../../page/**/*.ts",
+      "../../page/**/*.tsx",
+      ...libPageIncludes,
+      "../../../../pkgs/akanjs/*/types/**/*.d.ts"
+    ], options);
   }
   async#runPhase(id, label, task, summarize) {
     this.#reporter?.phaseStart?.({ id, label });
@@ -166,6 +222,24 @@ class ApplicationBuildRunner {
     const suffix = dirty.exitCode === 0 && dirty.stdout.toString().trim() ? "-dirty" : "";
     return `${sha.stdout.toString().trim()}${suffix}`;
   }
+  #serverEnv = null;
+  #warnedLibEnvs = new Set;
+  #serverEnvPlugin(baseEnv, branches) {
+    this.#serverEnv ??= createServerEnvPlugin({
+      envDir: this.#envDir,
+      environment: this.#environment ?? baseEnv,
+      environments: ["local", "testing", ...branches],
+      profile: this.#profile,
+      onLibEnv: (file, { profileFile, stripped }) => {
+        if (profileFile || !stripped.length || this.#warnedLibEnvs.has(file))
+          return;
+        this.#warnedLibEnvs.add(file);
+        const lib = path2.relative(this.#app.workspace.workspaceRoot, file);
+        this.#app.logger.warn(`${lib}: the "${this.#profile}" build leaves out ${stripped.join(", ")}. Give the lib ${path2.basename(ServerEnvProfile.profileFileOf(file, this.#profile ?? ""))} to say what this profile runs with.`);
+      }
+    });
+    return this.#serverEnv;
+  }
   async#buildBackend() {
     const { externalLibs, web, baseDevEnv, branches } = await this.#app.getConfig();
     const backendEntryPoints = [`${this.#app.cwdPath}/main.ts`, `${this.#app.cwdPath}/server.ts`];
@@ -180,11 +254,7 @@ class ApplicationBuildRunner {
       naming: { entry: "[name].[ext]", chunk: "chunk-[hash].[ext]" },
       define: { "process.env.NODE_ENV": JSON.stringify("production") }
     };
-    const serverEnvPlugin = createServerEnvPlugin({
-      envDir: path2.join(this.#app.cwdPath, "env"),
-      environment: this.#environment ?? baseDevEnv.env,
-      environments: ["local", "testing", ...branches]
-    });
+    const serverEnvPlugin = this.#serverEnvPlugin(baseDevEnv.env, branches);
     const backendConfig = {
       ...sharedConfig,
       plugins: [this.#createExternalSpecifiersPlugin(externalLibs), serverEnvPlugin]
@@ -251,71 +321,13 @@ void run().catch((error) => {
       this.#app.log(`[cli] no route files under ${this.#app.cwdPath}/page \u2014 skipping SSR build`);
       return null;
     }
-    const base = await new SsrBaseArtifactBuilder(this.#app, "build").build();
+    const { baseDevEnv, branches } = await this.#app.getConfig();
+    const base = await new SsrBaseArtifactBuilder(this.#app, "build", {
+      serverEnv: this.#serverEnvPlugin(baseDevEnv.env, branches)
+    }).build();
     const allRoutes = await new AllRoutesBuilder(this.#app, base.artifact, "build").build();
     return { base, allRoutes };
   }
-  async#writeTypecheckTsconfig(incremental) {
-    const typecheckDir = path2.join(this.#app.cwdPath, ".akan", "typecheck");
-    await mkdir(typecheckDir, { recursive: true });
-    const libPageIncludes = (await this.#app.getPageRoots()).filter((root) => root.keyPrefix).flatMap((root) => {
-      const rel = path2.relative(typecheckDir, root.realDir).split(path2.sep).join("/");
-      return [`${rel}/**/*.ts`, `${rel}/**/*.tsx`];
-    });
-    const tsconfig = {
-      extends: "../../tsconfig.json",
-      compilerOptions: {
-        noEmit: true,
-        incremental,
-        tsBuildInfoFile: "./tsconfig.tsbuildinfo"
-      },
-      include: [
-        "../../main.ts",
-        "../../server.ts",
-        "../../client.ts",
-        "../../page/**/*.ts",
-        "../../page/**/*.tsx",
-        ...libPageIncludes,
-        "../../../../pkgs/akanjs/*/types/**/*.d.ts"
-      ],
-      references: []
-    };
-    const tsconfigPath = path2.join(typecheckDir, "tsconfig.json");
-    await Bun.write(tsconfigPath, `${JSON.stringify(tsconfig, null, 2)}
-`);
-    return { typecheckDir, tsconfigPath };
-  }
-  async#checkProjectInChildProcess(tsconfigPath) {
-    const entry = await this.#resolveTypecheckWorkerEntry();
-    const proc = Bun.spawn([process.execPath, entry], {
-      cwd: this.#app.workspace.workspaceRoot,
-      env: this.#app.getCommandEnv({
-        AKAN_COMMAND_TYPE: "typecheck",
-        AKAN_TYPECHECK_TSCONFIG: tsconfigPath
-      }),
-      stdout: "pipe",
-      stderr: "pipe"
-    });
-    const [stdout, stderr, exitCode] = await Promise.all([
-      new Response(proc.stdout).text(),
-      new Response(proc.stderr).text(),
-      proc.exited
-    ]);
-    if (exitCode !== 0)
-      throw new Error((stderr || stdout).trim() || `Typecheck failed with exit code ${exitCode}`);
-  }
-  async#resolveTypecheckWorkerEntry() {
-    const candidates = [
-      path2.join(this.#app.workspace.workspaceRoot, "pkgs/@akanjs/devkit/typecheck/typecheck.proc.ts"),
-      path2.join(this.#app.workspace.workspaceRoot, "node_modules/@akanjs/devkit/typecheck/typecheck.proc.ts"),
-      path2.join(import.meta.dir, "typecheck.proc.js"),
-      path2.join(import.meta.dir, "typecheck.proc.ts")
-    ];
-    for (const candidate of candidates)
-      if (await Bun.file(candidate).exists())
-        return candidate;
-    throw new Error(`[cli] typecheck worker entry not found; looked in: ${candidates.join(", ")}`);
-  }
   async#buildOrThrow(label, config) {
     const result = await Bun.build(config);
     if (!result.success)

package/buildBatch.proc.js

@@ -6,7 +6,7 @@ import {
   resolveSsrPageEntriesForApp,
   WorkspaceExecutor,
   AppExecutor
-} from "./index-50wb2a26.js";
+} from "./index-55mynnqs.js";
 import {
   computeRouteSeedIndex,
   saveRouteSeedIndex,
@@ -14,14 +14,14 @@ import {
   PagesBundleBuilder,
   CsrDevBundler,
   SsrDevBundler
-} from "./index-gtjgnv36.js";
+} from "./index-aprt7pkz.js";
 import"./index-52w0fvh8.js";
 import {
   CsrArtifactBuilder,
   CssCompiler,
   FontOptimizer,
   SsrBaseArtifactBuilder
-} from "./index-z750gk1j.js";
+} from "./index-c2yrsxdh.js";
 import"./index-n68jx79w.js";
 
 // pkgs/@akanjs/devkit/incrementalBuilder/buildBatch.proc.ts
@@ -44,6 +44,8 @@ class BuildBatch {
       await this.#buildBase();
     if (this.#request.needs.includes("csr"))
       await this.#buildCsr();
+    if (this.#request.needs.includes("shell"))
+      await this.#buildShell();
     if (this.#request.needs.includes("ssr"))
       await this.#buildSsrRegistry();
     if (this.#request.needs.includes("css"))
@@ -77,7 +79,7 @@ class BuildBatch {
     const message = ApplicationBuildReporter.formatError(err, this.#request.workspaceRoot);
     this.#logger.error(`${label} failed: ${message}`);
     this.#result.errors[need] = message;
-    if (need !== "base")
+    if (need !== "base" && need !== "shell")
       this.#emitStatus(need, message);
   }
   async#buildBase() {
@@ -103,8 +105,17 @@ class BuildBatch {
       this.#fail("csr", "csr-rebundle", err);
     }
   }
+  async#buildShell() {
+    const started = Date.now();
+    try {
+      await new CsrArtifactBuilder(this.#app, "start", "en", { cssAssets: this.#request.cssAssets }).build();
+      this.#logger.verbose(`csr-shell ok (${Date.now() - started}ms)`);
+    } catch (err) {
+      this.#fail("shell", "csr-shell", err);
+    }
+  }
   async#rebuildCsrArtifact(started) {
-    await new CsrArtifactBuilder(this.#app).build();
+    await new CsrArtifactBuilder(this.#app, "start", "en", { cssAssets: this.#request.cssAssets }).build();
     this.#logger.verbose(`csr-rebundle ok (${Date.now() - started}ms)`);
     if (this.#request.changedFiles.length === 0)
       return;