@akanjs/devkit 3.1.0-rc.2 → 3.1.0-rc.21

package/mobile/updateUploader.ts

@@ -1,7 +1,7 @@
 import { readdir } from "node:fs/promises";
 import path from "node:path";
 import type { UpdateEnvelope, UpdateManifest } from "@akanjs/native/api";
-import { isRecord } from "akanjs/common";
+import { isRecord, trimTrailingSlashes } from "akanjs/common";
 import { UpdatePackFolder } from "./updatePackFolder";
 
 /** What the uploader needs of an S3 client; Bun.S3Client is one. */
@@ -32,9 +32,9 @@ export class UpdateUploader {
 
   /** `s3://bucket/prefix`: the credentials and endpoint come from S3_* (or AWS_*) in the environment. */
   static parseTarget(target: string): { bucket: string; prefix: string } {
-    const match = /^s3:\/\/([^/]+)\/?(.*)$/.exec(target.trim());
+    const match = /^s3:\/\/([^/]+)(?:\/(.*))?$/.exec(target.trim());
     if (!match?.[1]) throw new Error(`--upload takes s3://<bucket>/<prefix>, not ${JSON.stringify(target)}.`);
-    return { bucket: match[1], prefix: (match[2] ?? "").replace(/\/+$/, "") };
+    return { bucket: match[1], prefix: trimTrailingSlashes(match[2] ?? "") };
   }
 
   static order(files: string[]): { releases: string[]; manifests: string[] } {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akanjs/devkit",
-  "version": "3.1.0-rc.2",
+  "version": "3.1.0-rc.21",
   "sourceType": "module",
   "type": "module",
   "publishConfig": {
@@ -40,31 +40,31 @@
     "./*": "./*.ts"
   },
   "dependencies": {
-    "@earendil-works/chord": "0.86.1",
-    "@earendil-works/pi-agent-core": "0.86.1",
-    "@earendil-works/pi-ai": "0.86.1",
-    "@earendil-works/pi-coding-agent": "0.86.1",
-    "@earendil-works/pi-telemetry": "0.86.1",
-    "@earendil-works/pi-tui": "0.86.1",
-    "@inquirer/prompts": "^8.4.3",
-    "@tailwindcss/node": "^4.3.0",
-    "akanjs": "3.1.0-rc.2",
-    "chalk": "^5.6.2",
-    "commander": "^14.0.3",
-    "dayjs": "^1.11.20",
-    "fontaine": "^0.8.0",
+    "@earendil-works/pi-agent-core": "1.3.0",
+    "@earendil-works/pi-ai": "1.3.0",
+    "@earendil-works/pi-codemode": "1.3.0",
+    "@earendil-works/pi-coding-agent": "1.3.0",
+    "@earendil-works/pi-mcp": "1.3.0",
+    "@earendil-works/pi-tui": "1.3.0",
+    "@inquirer/prompts": "^8.7.3",
+    "@tailwindcss/node": "^4.3.3",
+    "akanjs": "3.1.0-rc.21",
+    "chalk": "^6.0.1",
+    "commander": "^15.0.0",
+    "dayjs": "^1.11.23",
+    "fontaine": "^1.0.1",
     "fonteditor-core": "^2.6.3",
-    "ignore": "^7.0.5",
-    "ora": "^9.4.0",
+    "ignore": "^7.0.12",
+    "ora": "^9.4.1",
     "ssh2": "^1.17.0",
-    "subset-font": "^2.5.0",
+    "subset-font": "^2.9.0",
     "tailwind-scrollbar": "^4.0.2",
-    "tailwindcss": "^4.3.0",
-    "typebox": "1.1.38",
+    "tailwindcss": "^4.3.3",
+    "typebox": "1.3.37",
     "typescript": "^6.0.3"
   },
   "peerDependencies": {
-    "react": "19.3.0"
+    "react": "19.3.1"
   },
   "peerDependenciesMeta": {
     "react": {

package/piDependencyPins.test.ts

@@ -2,31 +2,24 @@ import { describe, expect, test } from "bun:test";
 import path from "node:path";
 import type { PackageJson } from "@akanjs/devkit/types";
 
-//? A published install reads neither pi's npm-shrinkwrap.json nor our overrides, so PackageRunner re-declares pi's
-//? sibling pins (a floating 0.80.x once broke every global install); this keeps them equal to the shrinkwrap.
+//? PackageRunner re-declares pi's sibling pins because neither our `overrides` nor pi's own ranges reach a
+//? consumer's install. The source of truth is pi's `dependencies`: since 1.3.0 it pins every sibling exactly, where
+//? 0.86.1 floated `^0.86.1` and only the (now removed) `npm-shrinkwrap.json` held the resolved version.
 
 const repoRoot = path.resolve(import.meta.dir, "../../..");
 const piName = "@earendil-works/pi-coding-agent";
 const piDir = `${repoRoot}/node_modules/${piName}`;
 const publishedPackages = ["pkgs/@akanjs/devkit/package.json", "pkgs/@akanjs/cli/package.json"];
 
-interface Shrinkwrap {
-  packages: Record<string, { version?: string }>;
-}
-
 const readJson = async <T>(file: string) => (await Bun.file(file).json()) as T;
 
-const shrinkwrappedPins = async () => {
-  const { packages } = await readJson<Shrinkwrap>(`${piDir}/npm-shrinkwrap.json`);
-  // Top-level entries only: a nested `node_modules/` key is another package's placement, not ours to pin.
-  const entries = Object.entries(packages)
-    .filter(([key]) => /^node_modules\/@earendil-works\/[^/]+$/.test(key))
-    .map(([key, entry]) => [key.replace(/^node_modules\//, ""), entry.version ?? ""] as const);
-  return Object.fromEntries(entries);
+const siblingEntries = async () => {
+  const { dependencies = {} } = await readJson<PackageJson>(`${piDir}/package.json`);
+  return Object.entries(dependencies).filter(([name]) => /^@earendil-works\/[^/]+$/.test(name));
 };
 
 describe("pi dependency pins", () => {
-  test("the shrinkwrap read here belongs to the coding agent we publish", async () => {
+  test("the package read here belongs to the coding agent we publish", async () => {
     const installed = await readJson<PackageJson>(`${piDir}/package.json`);
     for (const file of publishedPackages) {
       const { dependencies = {} } = await readJson<PackageJson>(`${repoRoot}/${file}`);
@@ -34,13 +27,19 @@ describe("pi dependency pins", () => {
     }
   });
 
-  test("every sibling pi package is published at the version the coding agent shrinkwrapped", async () => {
-    const pins = await shrinkwrappedPins();
-    expect(Object.keys(pins).length).toBeGreaterThan(0);
+  test("the coding agent pins each sibling exactly", async () => {
+    const siblings = await siblingEntries();
+    expect(siblings.length).toBeGreaterThan(0);
+    const floating = siblings.filter(([, version]) => !/^\d+\.\d+\.\d+/.test(version));
+    expect(floating).toEqual([]);
+  });
+
+  test("every sibling pi package is published at the version the coding agent pins", async () => {
+    const siblings = await siblingEntries();
     for (const file of publishedPackages) {
       const { dependencies = {} } = await readJson<PackageJson>(`${repoRoot}/${file}`);
-      const declared = Object.fromEntries(Object.keys(pins).map((name) => [name, dependencies[name]]));
-      expect({ file, ...declared }).toEqual({ file, ...pins });
+      const declared = Object.fromEntries(siblings.map(([name]) => [name, dependencies[name]]));
+      expect({ file, ...declared }).toEqual({ file, ...Object.fromEntries(siblings) });
     }
   });
 });

package/platformTest/LinuxDockerTarget.ts

@@ -19,9 +19,10 @@ export class LinuxDockerTarget extends PlatformTestTarget {
   }
 
   //* No compiler in the image: with one, ssh2 builds its native addon and Bun panics loading it (oven-sh/bun#18546).
+  //* apt goes over https: a captive portal answers plain http with its splash page, which apt reports as unsigned.
   static readonly dockerfile = [
     `FROM oven/bun:${Bun.version}-slim`,
-    "RUN apt-get update && apt-get install -y --no-install-recommends git ca-certificates procps lsof && rm -rf /var/lib/apt/lists/*",
+    "RUN sed -i 's|http://|https://|g' /etc/apt/sources.list.d/debian.sources && apt-get update && apt-get install -y --no-install-recommends git ca-certificates procps lsof && rm -rf /var/lib/apt/lists/*",
   ].join("\n");
 
   get image() {

package/platformTest/PlatformTestTarget.ts

@@ -108,14 +108,16 @@ export abstract class PlatformTestTarget {
     const logPath = this.#logPath(context, "install");
     const install = await this.exec("bun install --frozen-lockfile", logPath, PlatformTestTarget.installIdleMs);
     if (install.exitCode === 0) return;
-    const failedScripts = [...install.output.matchAll(/(?:pre|post)?install script from "([^"]+)" exited/g)].map(
-      (match) => match[1] ?? "",
-    );
+    const failedPackages = [
+      ...install.output.matchAll(
+        /(?:pre|post)?install script from "([^"]+)" exited|failed to link binaries for package: (@?[^@\s]+)@/g,
+      ),
+    ].map((match) => match[1] ?? match[2] ?? "");
     const tolerable =
-      failedScripts.length > 0 && failedScripts.every((pkg) => this.tolerateScriptFailures.includes(pkg));
+      failedPackages.length > 0 && failedPackages.every((pkg) => this.tolerateScriptFailures.includes(pkg));
     if (!tolerable) throw new Error(`bun install failed — see ${logPath}`);
     //* A failed lifecycle script makes bun skip linking the root `.bin`; a second pass without scripts links it.
-    envWarnings.push(`install script failed for ${failedScripts.join(", ")} — tolerated on ${this.platform}`);
+    envWarnings.push(`install failed for ${failedPackages.join(", ")} — tolerated on ${this.platform}`);
     const relink = await this.exec(
       "bun install --frozen-lockfile --ignore-scripts",
       this.#logPath(context, "install-relink"),

package/platformTest/WindowsSshTarget.ts

@@ -9,7 +9,8 @@ export class WindowsSshTarget extends PlatformTestTarget {
   static readonly utmctlPath = "/Applications/UTM.app/Contents/MacOS/utmctl";
   static readonly defaultWorkRoot = "C:\\akan-test";
   //* arm64 has neither a sharp@0.32 prebuilt nor a Chrome for puppeteer's postinstall; x64 users get both.
-  static readonly defaultTolerateScriptFailures = ["sharp", "puppeteer"];
+  //* Nor a msgpackr-extract prebuilt: bun deletes it when node-gyp fails, racing the link of msgpackr's bins.
+  static readonly defaultTolerateScriptFailures = ["sharp", "puppeteer", "msgpackr"];
   static readonly #runDirPattern = "^\\d{8}-\\d{6}$";
   static readonly #keptRuns = 2;
 

package/qualityScanner.ts

@@ -215,7 +215,7 @@ export class AkanQualityScanner {
       if (!(await isDirectory(absoluteTargetRoot))) continue;
       await this.#walkTargetFiles(workspaceRoot, absoluteTargetRoot, ignoreFilter, files);
     }
-    return files.sort();
+    return files.sort((a, b) => (a < b ? -1 : a > b ? 1 : 0));
   }
 
   async #readGitIgnore(workspaceRoot: string) {

package/recipeScanner.test.ts

@@ -48,7 +48,10 @@ export default function Page() {
 describe("scanRecipes", () => {
   test("detects framework recipes with full variant surface", () => {
     const recipes = scanRecipes([{ path: "recipe.ts", content: FRAMEWORK, importFrom: "akanjs/ui" }]);
-    expect(recipes.map((r) => r.name).sort()).toEqual(["badgeRecipe", "buttonRecipe"]);
+    expect(recipes.map((r) => r.name).sort((a, b) => (a < b ? -1 : a > b ? 1 : 0))).toEqual([
+      "badgeRecipe",
+      "buttonRecipe",
+    ]);
 
     const button = byName(recipes, "buttonRecipe");
     expect(button?.importFrom).toBe("akanjs/ui");
@@ -91,7 +94,10 @@ describe("scanRecipes", () => {
       { path: "a.ts", content: src, importFrom: "@a" },
       { path: "b.ts", content: `export const other = recipe(tv({ base: "c" }));`, importFrom: "@b" },
     ]);
-    expect(recipes.map((r) => `${r.name}@${r.importFrom}`).sort()).toEqual(["other@@b", "shown@@a"]);
+    expect(recipes.map((r) => `${r.name}@${r.importFrom}`).sort((a, b) => (a < b ? -1 : a > b ? 1 : 0))).toEqual([
+      "other@@b",
+      "shown@@a",
+    ]);
   });
 });
 
@@ -154,7 +160,7 @@ describe("collectRecipeSources", () => {
     expect(
       scanRecipes(sources)
         .map((r) => r.name)
-        .sort(),
+        .sort((a, b) => (a < b ? -1 : a > b ? 1 : 0)),
     ).toEqual(["appBox", "appCard"]);
   });
 

package/scanInfo.ts

@@ -1,3 +1,4 @@
+import { createHash } from "node:crypto";
 import path from "node:path";
 import type {
   AppConfigResult,
@@ -113,7 +114,7 @@ async function assertScanConvention(exec: AppExecutor | LibExecutor, libRoot: {
   if (violations.length > 0) {
     throw new Error(
       `[scan-convention]\n${violations
-        .sort()
+        .sort((a, b) => (a < b ? -1 : a > b ? 1 : 0))
         .map((violation) => `- ${violation}`)
         .join("\n")}`,
     );
@@ -295,11 +296,19 @@ class ScanInfo {
 }
 
 export const isAkanFrameworkDependency = (dep: string) => dep === "akanjs" || dep.startsWith("akanjs/");
+export interface MigrationScanEntry {
+  id: string;
+  checksum: string;
+}
+
 export class AppInfo extends ScanInfo {
+  static readonly migrationDir = "script/migration";
+  static readonly #migrationIdRe = /^\d{12}_[A-Za-z][A-Za-z0-9]*$/;
   readonly type = "app";
   readonly exec: AppExecutor;
   readonly akanConfig: AppConfigResult;
   readonly libDeps: string[];
+  readonly migrations: MigrationScanEntry[];
 
   static appInfos = new Map<string, AppInfo>();
   static async fromExecutor(exec: AppExecutor, options: { refresh?: boolean } = {}) {
@@ -314,17 +323,21 @@ export class AppInfo extends ScanInfo {
         LibInfo.libInfos.set(libName, await LibInfo.fromExecutor(libExecutor));
       }),
     );
-    const libDeps = await AppInfo.#getAllLibDeps(exec, scanResult.libDeps);
-    const appInfo = new AppInfo(exec, scanResult as AppScanResult, libDeps);
+    const [libDeps, migrations] = await Promise.all([
+      AppInfo.#getAllLibDeps(exec, scanResult.libDeps),
+      AppInfo.scanMigrations(exec),
+    ]);
+    const appInfo = new AppInfo(exec, scanResult as AppScanResult, libDeps, migrations);
     AppInfo.appInfos.set(exec.name, appInfo);
     return appInfo;
   }
 
-  constructor(exec: AppExecutor, scanResult: AppScanResult, libDeps: string[]) {
+  constructor(exec: AppExecutor, scanResult: AppScanResult, libDeps: string[], migrations: MigrationScanEntry[] = []) {
     super(scanResult);
     this.exec = exec;
     this.akanConfig = scanResult.akanConfig;
     this.libDeps = libDeps;
+    this.migrations = migrations;
   }
   override getScanResult(): AppScanResult {
     return this.scanResult as AppScanResult;
@@ -334,6 +347,26 @@ export class AppInfo extends ScanInfo {
     (this.scanResult as AppScanResult).routes = routes;
   }
 
+  //* Line endings and a BOM dropped: an editor or autocrlf would otherwise record another checksum for the same script.
+  static async scanMigrations(exec: AppExecutor) {
+    const files = (await exec.readdir(AppInfo.migrationDir)).filter(
+      (file) => file.endsWith(".ts") && !/\.(test|spec|d)\.ts$/.test(file),
+    );
+    return await Promise.all(
+      files.map(async (file) => {
+        const id = file.slice(0, -".ts".length);
+        if (!AppInfo.#migrationIdRe.test(id))
+          throw new Error(
+            `${AppInfo.migrationDir}/${file}: a migration is named <yyyyMMddHHmm>_<camelName>.ts; create one with \`akan create-migration\``,
+          );
+        const source = (await exec.readFile(`${AppInfo.migrationDir}/${file}`))
+          .replace(/^\uFEFF/, "")
+          .replaceAll("\r\n", "\n");
+        return { id, checksum: createHash("sha256").update(source).digest("hex") };
+      }),
+    );
+  }
+
   static async #getAllLibDeps(exec: AppExecutor, libDeps: string[], libSet = new Set<string>()) {
     await Promise.all(
       libDeps.map(async (libName) => {

package/subspaceClone.ts

@@ -221,19 +221,20 @@ export class SubspaceClone {
 
   // An allowlist, not a filter, so no secret can reach a customer's clone; `AKAN_PUBLIC_*` ships in every bundle anyway.
   #localEnv() {
-    const { serveDomain } = WorkspaceExecutor.getBaseDevEnv();
+    const { serveDomain, defaulted = [] } = WorkspaceExecutor.getBaseDevEnv();
     return {
       AKAN_WORKSPACE_ID: "local",
       AKAN_PUBLIC_REPO_NAME: this.#declaration.name,
-      AKAN_PUBLIC_SERVE_DOMAIN: serveDomain,
+      //? Written down, the local default would read as chosen and pass the clone's build check for a real environment.
+      ...(defaulted.includes("AKAN_PUBLIC_SERVE_DOMAIN") ? {} : { AKAN_PUBLIC_SERVE_DOMAIN: serveDomain }),
       AKAN_PUBLIC_ENV: "local",
       AKAN_PUBLIC_OPERATION_MODE: "local",
       AKAN_PUBLIC_LOG_LEVEL: "warn",
     };
   }
 
-  // The CLI needs a `.env` to recognise a workspace root and none arrives with the slice. Excluded through
-  // `.git/info/exclude`, not the copied `.gitignore`, so it can never be committed to the customer's repo.
+  // No `.env` arrives with the slice, and the clone runs under the customer's repo name in a local env. Excluded
+  // through `.git/info/exclude`, not the copied `.gitignore`, so it can never be committed to the customer's repo.
   async #writeLocalEnv() {
     const excludePath = path.join(this.#clonePath, ".git/info/exclude");
     const exclude = (await FileSys.fileExists(excludePath)) ? await FileSys.readText(excludePath) : "";

package/testHelpers.ts

@@ -80,6 +80,8 @@ export const createFakeExecutor = <Extra extends object = object>(
 export const makeCliTempWorkspace = async (parentDir = os.tmpdir()) => {
   await mkdir(parentDir, { recursive: true });
   const root = await mkdtemp(path.join(parentDir, "akan-cli-"));
+  //? The CLI recognises a workspace root by an apps/, libs/ or pkgs/ folder beside package.json and tsconfig.json.
+  await mkdir(path.join(root, "apps"));
   await writeText(path.join(root, ".gitignore"), "");
   await writeText(
     path.join(root, ".env"),

package/transforms/barrelImportsPlugin.ts

@@ -195,7 +195,7 @@ const resolvePackageExport = (exportsMap: Record<string, ExportValue> | undefine
     if (!subpath.startsWith(prefix) || !subpath.endsWith(suffix)) continue;
     const wildcard = subpath.slice(prefix.length, subpath.length - suffix.length);
     const resolved = resolveExportValue(value);
-    if (resolved) return resolved.replace("*", wildcard);
+    if (resolved) return resolved.split("*").join(wildcard);
   }
 
   return null;

package/transforms/browserDirnamePlugin.test.ts

@@ -0,0 +1,88 @@
+import { describe, expect, test } from "bun:test";
+import { realpathSync } from "node:fs";
+import path from "node:path";
+import { tempDirs, writeText } from "../testHelpers";
+import { createBrowserDirnamePlugin } from "./browserDirnamePlugin";
+
+const makeTempRoot = tempDirs("akan-devkit-browser-dirname-");
+
+const build = async (entry: string) => {
+  const result = await Bun.build({
+    entrypoints: [entry],
+    target: "browser",
+    minify: true,
+    plugins: [createBrowserDirnamePlugin()],
+  });
+  expect(result.success).toBe(true);
+  return (await Promise.all(result.outputs.map((output) => output.text()))).join("\n");
+};
+
+describe("createBrowserDirnamePlugin", () => {
+  test("gives a vendor module its path from node_modules on, never the absolute one", async () => {
+    const root = await makeTempRoot();
+    await writeText(path.join(root, "node_modules/cjsdep/package.json"), '{ "name": "cjsdep", "main": "index.js" }\n');
+    await writeText(
+      path.join(root, "node_modules/cjsdep/index.js"),
+      "module.exports = { dir: __dirname, file: __filename };\n",
+    );
+    await writeText(
+      path.join(root, "node_modules/esmdep/package.json"),
+      '{ "name": "esmdep", "type": "module", "main": "index.js" }\n',
+    );
+    await writeText(
+      path.join(root, "node_modules/esmdep/index.js"),
+      // biome-ignore lint/suspicious/noTemplateCurlyInString: the fixture module's own source holds a template literal
+      'export const dir = typeof __dirname !== "undefined" ? `${__dirname}/` : "browser";\n',
+    );
+    await writeText(path.join(root, "node_modules/esmdep/legacy.cjs"), "module.exports = __filename;\n");
+    const entry = path.join(root, "entry.ts");
+    await writeText(
+      entry,
+      'import cjs from "cjsdep";\nimport { dir } from "esmdep";\nimport legacy from "esmdep/legacy.cjs";\nconsole.info(cjs, dir, legacy);\n',
+    );
+
+    const output = await build(entry);
+
+    expect(output).not.toContain(root);
+    expect(output).not.toContain(realpathSync(root));
+    expect(output).toContain('"/node_modules/cjsdep"');
+    expect(output).toContain('"/node_modules/cjsdep/index.js"');
+    expect(output).toContain('"/node_modules/esmdep/"');
+    expect(output).toContain('"/node_modules/esmdep/legacy.cjs"');
+  });
+
+  test("leaves a module's own __dirname binding alone", async () => {
+    const root = await makeTempRoot();
+    await writeText(path.join(root, "node_modules/owndep/package.json"), '{ "name": "owndep", "main": "index.js" }\n');
+    await writeText(
+      path.join(root, "node_modules/owndep/index.js"),
+      'const __dirname = "own-binding";\nmodule.exports = __dirname;\n',
+    );
+    const entry = path.join(root, "entry.ts");
+    await writeText(entry, 'import own from "owndep";\nconsole.info(own);\n');
+
+    const output = await build(entry);
+
+    expect(output).toContain('"own-binding"');
+    expect(output).not.toContain("/node_modules/owndep");
+  });
+
+  //? `define` would leak here: Bun applies it to the server modules a macro runs, which then read `/`.
+  test("keeps the real __dirname in the modules a macro runs", async () => {
+    const root = await makeTempRoot();
+    await writeText(path.join(root, "node_modules/fsdep/package.json"), '{ "name": "fsdep", "main": "index.js" }\n');
+    await writeText(path.join(root, "node_modules/fsdep/marker.txt"), "beside-me\n");
+    await writeText(
+      path.join(root, "node_modules/fsdep/index.js"),
+      'const fs = require("node:fs");\nmodule.exports = () => fs.readFileSync(__dirname + "/marker.txt", "utf8").trim();\n',
+    );
+    await writeText(
+      path.join(root, "macro.ts"),
+      'import readMarker from "fsdep";\nexport const marker = () => readMarker();\n',
+    );
+    const entry = path.join(root, "entry.ts");
+    await writeText(entry, 'import { marker } from "./macro" with { type: "macro" };\nconsole.info(marker());\n');
+
+    expect(await build(entry)).toContain('"beside-me"');
+  });
+});

package/transforms/browserDirnamePlugin.ts

@@ -0,0 +1,25 @@
+import path from "node:path";
+import type { BunPlugin } from "bun";
+
+const vendorScript = /[\\/]node_modules[\\/].+\.[cm]?js$/;
+
+//* Bun's browser build declares `__dirname` / `__filename` in each module naming them as the absolute path it read the
+//* module from, so a CSR bundle carried the checkout location and its hash moved with it. A vendor module gets its path
+//* from `node_modules` on instead. Not `define`: Bun applies that to the modules a macro imports and runs, where a
+//* server module reading files beside itself would read `/`, while a plugin never sees the macro graph.
+export const createBrowserDirnamePlugin = (): BunPlugin => ({
+  name: "akan-browser-dirname",
+  setup(build) {
+    build.onLoad({ filter: vendorScript }, async (args) => {
+      const source = await Bun.file(args.path).text();
+      if (!source.includes("__dirname") && !source.includes("__filename")) return undefined;
+      const posixPath = args.path.replaceAll("\\", "/");
+      const filename = posixPath.slice(posixPath.indexOf("/node_modules/"));
+      const define = { __dirname: JSON.stringify(path.posix.dirname(filename)), __filename: JSON.stringify(filename) };
+      return {
+        loader: "js",
+        contents: new Bun.Transpiler({ loader: "js", target: "browser", define }).transformSync(source),
+      };
+    });
+  },
+});

package/transforms/rscUseClientTransform.ts

@@ -2,9 +2,9 @@ import path from "node:path";
 import ts from "typescript";
 import { loaderFor } from "./moduleSyntax";
 
-const USE_CLIENT_RE = /^\s*(?:\/\*[\s\S]*?\*\/\s*|\/\/[^\n]*\n\s*)*["']use client["']/;
+const USE_CLIENT_RE = /^\s*(?:\/\*[^*]*\*+(?:[^/*][^*]*\*+)*\/\s*|\/\/[^\n]*\n\s*)*["']use client["']/;
 const IMPLICIT_ROOT_LAYOUT_RE =
-  /[/\\]\.akan[/\\]generated[/\\](?:implicit-root-layout|root-layouts[/\\].*__root_layout)\.(tsx|ts|jsx|js)$/;
+  /[/\\]\.akan[/\\]generated[/\\](?:implicit-root-layout|root-layouts[/\\][^/\\]*__root_layout)\.(tsx|ts|jsx|js)$/;
 const STAR_REEXPORT_HINT_RE = /\bexport\s*\*\s*from\b/;
 
 export interface UseClientTransformArgs {

package/transforms/transforms.test.ts

@@ -4,7 +4,12 @@ import { ApplicationBuildReporter } from "../applicationBuildReporter";
 import { tempDirs, writeText as write } from "../testHelpers";
 import { BarrelAnalyzer, type BarrelExportTarget } from "./barrelAnalyzer";
 import { rewriteBarrelImports } from "./barrelImportsPlugin";
-import { scanUseClientExports, toClientReferencePath, transformUseClient } from "./rscUseClientTransform";
+import {
+  hasUseClientDirective,
+  scanUseClientExports,
+  toClientReferencePath,
+  transformUseClient,
+} from "./rscUseClientTransform";
 import { createUseClientBundlePlugin } from "./useClientBundlePlugin";
 
 const makeTempRoot = tempDirs("akan-devkit-transform-");
@@ -27,6 +32,12 @@ describe("transformUseClient", () => {
     ).toBeNull();
   });
 
+  test("reads the directive through the leading comments only, in linear time", () => {
+    expect(hasUseClientDirective('/* a */\n// b /* c\n/** d **/\n"use client";')).toBe(true);
+    expect(hasUseClientDirective('/* a */ x /* b */ "use client";')).toBe(false);
+    expect(hasUseClientDirective(`${"/* a */\n".repeat(40)}export const value = 1;`)).toBe(false);
+  });
+
   test("a client module with no exports stays server code and is not reported as a client module", () => {
     const reported: string[] = [];
     const onClientModule = (file: string) => reported.push(file);
@@ -93,7 +104,12 @@ describe('export * in a "use client" module', () => {
       "export const text = \"export * from './a string'\";",
       "",
     ].join("\n");
-    expect(scanUseClientExports(shapes, file).sort()).toEqual(["LeaveInfo", "Voc", "ns", "text"]);
+    expect(scanUseClientExports(shapes, file).sort((a, b) => (a < b ? -1 : a > b ? 1 : 0))).toEqual([
+      "LeaveInfo",
+      "Voc",
+      "ns",
+      "text",
+    ]);
     expect(scanUseClientExports('export * from "./a";\nexport const X = 1;\n', file)).toEqual(["X"]);
     const stub = transformUseClient(shapes, { path: file, workspaceRoot: "/repo" });
     expect(stub).toContain("export const LeaveInfo = registerClientReference");

package/transforms/tsconfigPackageResolver.test.ts

@@ -167,6 +167,15 @@ describe("createTsconfigPackageResolver — node_modules fallback", () => {
     expect((await resolve("akanjs/signal"))?.entryFile).toBe(entryFile);
   });
 
+  test("substitutes every * of a wildcard target, as Node does", async () => {
+    const root = await makeTempRoot();
+    await writePackageJson(root, "akanjs", { exports: { "./*": "./*/*.js" } });
+    const entryFile = await write(root, "node_modules/akanjs/signal/signal.js");
+    const resolve = await resolverFor(root, {});
+
+    expect((await resolve("akanjs/signal"))?.entryFile).toBe(entryFile);
+  });
+
   test("resolves a scoped package subpath", async () => {
     // Vendor-neutral on purpose: `packageExports.test.ts` reads every `"@akanjs/devkit/<x>"` literal here as an import.
     const root = await makeTempRoot();

package/types.ts

@@ -44,4 +44,5 @@ export interface BaseDevEnv {
   env: "testing" | "debug" | "develop" | "main" | "local";
   portOffset: number;
   appName?: string | undefined;
+  defaulted?: ("AKAN_PUBLIC_REPO_NAME" | "AKAN_PUBLIC_SERVE_DOMAIN")[];
 }

package/workflow/artifacts.ts

@@ -205,7 +205,7 @@ const syncStateSlug = (target: string) =>
   target
     .trim()
     .replace(/[^a-zA-Z0-9]+/g, "-")
-    .replace(/^-+|-+$/g, "")
+    .replace(/^-|-$/g, "")
     .toLowerCase();
 
 export const workflowSyncStatePath = (target: string) => `${workflowSyncDir}/${syncStateSlug(target) || "target"}.json`;

package/workflow/rolloutGate.test.ts

@@ -56,7 +56,11 @@ describe("tooling rollout gate", () => {
       }),
     );
 
-    expect(violations.map((violation) => `${violation.packageName}:${violation.status}`).sort()).toEqual([
+    expect(
+      violations
+        .map((violation) => `${violation.packageName}:${violation.status}`)
+        .sort((a, b) => (a < b ? -1 : a > b ? 1 : 0)),
+    ).toEqual([
       "@ttsc/graph:reference-only",
       "ast-grep:experiment-only",
       "recast:experiment-only",

package/workflow/source.ts

@@ -32,7 +32,7 @@ export const sourceFile = (sys: Sys, path: string, action: PrimitiveChangedFile[
 export const moduleComponentName = (moduleName: string) =>
   moduleName
     .replace(/[-_]+/g, " ")
-    .replace(/(?:^|\s+)([a-zA-Z0-9])/g, (_, char: string) => char.toUpperCase())
+    .replace(/(?<=^|\s)[a-zA-Z0-9]/g, (char) => char.toUpperCase())
     .replace(/\s+/g, "");
 
 export const moduleSourcePaths = (moduleName: string) => {
@@ -768,7 +768,7 @@ export const insertTemplateField = ({
 
 export const ensureEnumImport = (content: string) => {
   if (content.includes("enumOf")) return content;
-  const baseImport = /import \{ ([^}]+) \} from "akanjs\/base";/.exec(content);
+  const baseImport = /import \{ ([^{}]+) \} from "akanjs\/base";/.exec(content);
   if (baseImport) {
     const names = baseImport[1]?.split(",").map((name) => name.trim()) ?? [];
     return content.replace(baseImport[0], `import { ${[...names, "enumOf"].sort().join(", ")} } from "akanjs/base";`);