@allstak/wizard 0.1.4 → 0.1.5

package/dist/sourcemaps/vite.js

@@ -1,9 +1,10 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { resolve } from 'node:path';
 import { patchJsModule, ensureImport, removeImport } from '../patchers/js-ast.js';
-import { appendManagedBlock, removeManagedSourceBlock } from '../patchers/source-block.js';
-const PKG = '@allstak/js/vite';
-const PKG_NAMED = 'allstakVitePlugin';
+import { removeManagedSourceBlock } from '../patchers/source-block.js';
+const PKG = '@allstak/react/vite';
+const LEGACY_PKG = '@allstak/js/vite';
+const PKG_NAMED = 'allstakSourcemaps';
 function locate(projectRoot) {
     for (const c of ['vite.config.ts', 'vite.config.mjs', 'vite.config.js']) {
         const full = resolve(projectRoot, c);
@@ -26,16 +27,18 @@ export const viteSourceMapProvider = {
         await patchJsModule(tx, cfg, (mod) => {
             ensureImport(mod, { from: PKG, named: [PKG_NAMED] });
         });
-        await appendManagedBlock(tx, cfg, [
-            `// allstak-wizard: ensure the plugin is in your vite plugins array, e.g.:`,
-            `//   plugins: [react(), ${PKG_NAMED}({ apiKey: process.env.ALLSTAK_API_KEY, project: '${ctx.project}' })]`,
-        ].join('\n'), { style: 'slash', validateJs: true });
+        const src = readFileSync(cfg, 'utf8');
+        const next = ensureVitePluginConfigured(src, ctx);
+        if (next !== src) {
+            await tx.write(cfg, next);
+        }
     },
     async unwire(ctx, tx) {
         const cfg = locate(ctx.projectRoot);
         if (!cfg)
             return;
         await patchJsModule(tx, cfg, (mod) => removeImport(mod, PKG));
+        await patchJsModule(tx, cfg, (mod) => removeImport(mod, LEGACY_PKG));
         await removeManagedSourceBlock(tx, cfg, 'slash');
     },
     async status(ctx) {
@@ -43,10 +46,10 @@ export const viteSourceMapProvider = {
         if (!cfg)
             return { provider: 'vite', state: 'missing', configFile: null };
         const src = readFileSync(cfg, 'utf8');
-        const wired = src.includes(PKG);
+        const wired = src.includes(PKG) || src.includes(LEGACY_PKG);
         if (!wired)
             return { provider: 'vite', state: 'missing', configFile: cfg };
-        if (!src.includes(PKG_NAMED)) {
+        if (!src.includes(PKG_NAMED) && !src.includes('allstakVitePlugin')) {
             return {
                 provider: 'vite',
                 state: 'drifted',
@@ -54,7 +57,87 @@ export const viteSourceMapProvider = {
                 reason: `${PKG} imported but ${PKG_NAMED} not referenced — plugin may not be invoked`,
             };
         }
+        if (!/plugins\s*:\s*\[[\s\S]*allstak(?:Sourcemaps|VitePlugin)\s*\(/.test(src)) {
+            return {
+                provider: 'vite',
+                state: 'drifted',
+                configFile: cfg,
+                reason: 'source-map helper is imported but not present in the Vite plugins array',
+            };
+        }
+        if (!/build\s*:\s*\{[\s\S]*sourcemap\s*:\s*true/.test(src)) {
+            return {
+                provider: 'vite',
+                state: 'drifted',
+                configFile: cfg,
+                reason: 'Vite build.sourcemap is not enabled',
+            };
+        }
         return { provider: 'vite', state: 'wired', configFile: cfg };
     },
 };
+function ensureVitePluginConfigured(src, ctx) {
+    let next = src;
+    if (!next.includes(`${PKG_NAMED}(`)) {
+        next = insertIntoPluginsArray(next, [
+            `${PKG_NAMED}({`,
+            `      release: process.env.ALLSTAK_RELEASE ?? '${ctx.release ?? ''}',`,
+            `      token: process.env.ALLSTAK_UPLOAD_TOKEN,`,
+            `      dist: process.env.ALLSTAK_DIST ?? 'web',`,
+            `      silent: process.env.CI !== 'true',`,
+            `    })`,
+        ].join('\n    '));
+    }
+    next = ensureSourcemapEnabled(next);
+    return next;
+}
+function insertIntoPluginsArray(src, pluginExpr) {
+    const match = /plugins\s*:\s*\[/.exec(src);
+    if (!match || match.index === undefined)
+        return src;
+    const open = src.indexOf('[', match.index);
+    const close = findMatching(src, open, '[', ']');
+    if (close < 0)
+        return src;
+    const beforeClose = src.slice(0, close).trimEnd();
+    const needsComma = !beforeClose.endsWith('[') && !beforeClose.endsWith(',');
+    const insertion = `${needsComma ? ',' : ''}\n    ${pluginExpr},`;
+    return `${src.slice(0, close)}${insertion}${src.slice(close)}`;
+}
+function ensureSourcemapEnabled(src) {
+    if (/build\s*:\s*\{[\s\S]*sourcemap\s*:\s*true/.test(src))
+        return src;
+    const match = /build\s*:\s*\{/.exec(src);
+    if (!match || match.index === undefined)
+        return src;
+    const open = src.indexOf('{', match.index);
+    return `${src.slice(0, open + 1)}\n    sourcemap: true,${src.slice(open + 1)}`;
+}
+function findMatching(src, openIndex, openChar, closeChar) {
+    if (openIndex < 0 || src[openIndex] !== openChar)
+        return -1;
+    let depth = 0;
+    let quote = null;
+    for (let i = openIndex; i < src.length; i += 1) {
+        const ch = src[i];
+        const prev = src[i - 1];
+        if (quote) {
+            if (ch === quote && prev !== '\\')
+                quote = null;
+            continue;
+        }
+        if (ch === '"' || ch === "'" || ch === '`') {
+            quote = ch;
+            continue;
+        }
+        if (ch === openChar)
+            depth += 1;
+        if (ch === closeChar) {
+            depth -= 1;
+            if (depth === 0)
+                return i;
+        }
+    }
+    return -1;
+}
 //# sourceMappingURL=vite.js.map

package/dist/sourcemaps/vite.js.map

@@ -1 +1 @@
-{"version":3,"file":"vite.js","sourceRoot":"","sources":["../../src/sourcemaps/vite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAE3F,MAAM,GAAG,GAAG,kBAAkB,CAAC;AAC/B,MAAM,SAAS,GAAG,mBAAmB,CAAC;AAEtC,SAAS,MAAM,CAAC,WAAmB;IACjC,KAAK,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACrC,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACpC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAsB;IACtD,EAAE,EAAE,MAAM;IACV,KAAK,EAAE,wBAAwB;IAC/B,aAAa,EAAE,GAAG;IAElB,KAAK,CAAC,MAAM,CAAC,GAAG;QACd,OAAO,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE;QAChB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,MAAM,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE;YACnC,YAAY,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QACH,MAAM,kBAAkB,CACtB,EAAE,EACF,GAAG,EACH;YACE,2EAA2E;YAC3E,2BAA2B,SAAS,qDAAqD,GAAG,CAAC,OAAO,OAAO;SAC5G,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CACrC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE;QAClB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,MAAM,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9D,MAAM,wBAAwB,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAG;QACd,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAC1E,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;QAC3E,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,SAAS;gBAChB,UAAU,EAAE,GAAG;gBACf,MAAM,EAAE,GAAG,GAAG,iBAAiB,SAAS,6CAA6C;aACtF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IAC/D,CAAC;CACF,CAAC"}
+{"version":3,"file":"vite.js","sourceRoot":"","sources":["../../src/sourcemaps/vite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAClF,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAEvE,MAAM,GAAG,GAAG,qBAAqB,CAAC;AAClC,MAAM,UAAU,GAAG,kBAAkB,CAAC;AACtC,MAAM,SAAS,GAAG,mBAAmB,CAAC;AAEtC,SAAS,MAAM,CAAC,WAAmB;IACjC,KAAK,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACrC,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACpC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAsB;IACtD,EAAE,EAAE,MAAM;IACV,KAAK,EAAE,wBAAwB;IAC/B,aAAa,EAAE,GAAG;IAElB,KAAK,CAAC,MAAM,CAAC,GAAG;QACd,OAAO,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE;QAChB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,MAAM,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE;YACnC,YAAY,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAClD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE;QAClB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,MAAM,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9D,MAAM,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;QACrE,MAAM,wBAAwB,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAG;QACd,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAC1E,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC5D,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;QAC3E,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACnE,OAAO;gBACL,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,SAAS;gBAChB,UAAU,EAAE,GAAG;gBACf,MAAM,EAAE,GAAG,GAAG,iBAAiB,SAAS,6CAA6C;aACtF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,8DAA8D,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9E,OAAO;gBACL,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,SAAS;gBAChB,UAAU,EAAE,GAAG;gBACf,MAAM,EAAE,yEAAyE;aAClF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,2CAA2C,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3D,OAAO;gBACL,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,SAAS;gBAChB,UAAU,EAAE,GAAG;gBACf,MAAM,EAAE,qCAAqC;aAC9C,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IAC/D,CAAC;CACF,CAAC;AAEF,SAAS,0BAA0B,CAAC,GAAW,EAAE,GAAgC;IAC/E,IAAI,IAAI,GAAG,GAAG,CAAC;IACf,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,SAAS,GAAG,CAAC,EAAE,CAAC;QACpC,IAAI,GAAG,sBAAsB,CAAC,IAAI,EAAE;YAClC,GAAG,SAAS,IAAI;YAChB,kDAAkD,GAAG,CAAC,OAAO,IAAI,EAAE,IAAI;YACvE,gDAAgD;YAChD,gDAAgD;YAChD,0CAA0C;YAC1C,QAAQ;SACT,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAW,EAAE,UAAkB;IAC7D,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IACpD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAChD,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAC1B,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;IAClD,MAAM,UAAU,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,UAAU,GAAG,CAAC;IACjE,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAW;IACzC,IAAI,2CAA2C,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACtE,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IACpD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,yBAAyB,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC;AACjF,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,SAAiB,EAAE,QAAgB,EAAE,SAAiB;IACvF,IAAI,SAAS,GAAG,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAA2B,IAAI,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,EAAE,KAAK,KAAK,IAAI,IAAI,KAAK,IAAI;gBAAE,KAAK,GAAG,IAAI,CAAC;YAChD,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC3C,KAAK,GAAG,EAAE,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,QAAQ;YAAE,KAAK,IAAI,CAAC,CAAC;QAChC,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,KAAK,IAAI,CAAC,CAAC;YACX,IAAI,KAAK,KAAK,CAAC;gBAAE,OAAO,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC"}

package/docs/architecture/v02-sourcemaps-e2e-spec.md

@@ -8,7 +8,7 @@ against the live backend. This spec documents what v0.2 must add.
 
 ## What works today (v0.1.x)
 
-- `vite` provider: AST-injects `import { allstakVitePlugin } from '@allstak/js/vite'` and adds a managed-block hint.
+- `vite` provider: imports `allstakSourcemaps` from `@allstak/react/vite`, adds it to the real Vite `plugins` array, and enables `build.sourcemap`.
 - `next` provider: managed-block hint pointing the user at `withAllStak`.
 - `webpack` provider: managed-block hint only.
 - `metro` provider: intentionally inert; `detect()` returns false.

package/docs/beta/expo.md

@@ -0,0 +1,69 @@
+# Expo (React Native)
+
+**Stability:** internal experimental. Managed workflow only. The wizard refuses to run on
+projects that have already prebuilt to native (i.e. an `ios/` or `android/`
+directory at the project root) — bare-via-prebuild has too many failure
+modes for an unattended patcher and remains `unsupported` in v0.1.
+
+## What you get
+
+- `@allstak/react-native` installed.
+- `.env` populated with `ALLSTAK_API_KEY` (and the standard companions).
+- `app.json` gets the AllStak Expo plugin appended to `expo.plugins[]`
+  (idempotent — re-running does not duplicate the entry).
+- `App.tsx` gets:
+  - An AST-injected `import { AllStakProvider } from '@allstak/react-native'`.
+  - A managed-block hint reminding you to wrap your root component in
+    `<AllStakProvider>…</AllStakProvider>`.
+- `app.config.{js,ts}` gets the same managed-block hint if it exists.
+
+## Run
+
+```bash
+npx @allstak/wizard@beta -i expo
+```
+
+## Compatibility
+
+- `expo >= 50`. Older versions refused with `E_UNSUPPORTED_VERSION`.
+- `react-native >= 0.73`.
+- **Managed workflow only.** Bare/prebuilt projects (`ios/` or `android/`
+  present) are refused with a clear error. To use AllStak in a bare RN
+  app, follow the SDK README directly — the wizard will not patch native
+  Xcode/Gradle config in v0.1.
+
+## Wiring `<AllStakProvider>`
+
+The wizard cannot safely AST-edit your component tree (App.tsx shapes
+vary too much — function/class/forwardRef/HOC). It places a managed-block
+hint and you wire the provider yourself:
+
+```tsx
+import { AllStakProvider } from '@allstak/react-native';
+
+export default function App() {
+  return (
+    <AllStakProvider apiKey={process.env.EXPO_PUBLIC_ALLSTAK_API_KEY}>
+      {/* your app */}
+    </AllStakProvider>
+  );
+}
+```
+
+`doctor` reports `warn` on `provider-wired` until the live call is detected
+(comments inside the managed-block hint are stripped before matching, so
+the example above does not produce a false positive).
+
+## Capabilities the wizard does NOT claim
+
+- **No source-map upload wiring.** Metro source-maps are deferred to v0.2
+  (no-op `skip` in `doctor`).
+- **No native edits.** No Podfile / Gradle / Info.plist / AndroidManifest
+  changes. EAS Build users get the plugin reference in `app.json` and Expo
+  takes care of the rest.
+
+## Verify
+
+```bash
+npx @allstak/wizard@beta doctor -i expo
+```

package/docs/beta/fastify.md

@@ -0,0 +1,62 @@
+# Fastify
+
+**Stability:** internal experimental. AST-safe import (ESM only) + managed-block hint.
+The wizard branches on module system: ESM entries get an AST-injected
+`import { allstakFastify }`; CJS entries get the managed-block hint only
+(the wizard does NOT inject `require()` calls, which interact badly with
+top-of-file conditional/dynamic require patterns).
+
+## What you get
+
+- `@allstak/fastify` installed.
+- `.env` populated with `ALLSTAK_API_KEY`.
+- Entry file (resolved from `package.json:scripts.start`,
+  `package.json:main`, or conventional `src/server.{ts,js,mjs}` /
+  `src/index.{ts,js,mjs}`):
+  - **ESM** (`type: module` / `.mjs` / `import` syntax in the file):
+    AST-injected import.
+  - **CJS**: import skipped, hint-only.
+  - Both: a managed-block hint demonstrating
+    `app.register(allstakFastify, { ... })`.
+
+## Run
+
+```bash
+npx @allstak/wizard@beta -i fastify
+```
+
+## Compatibility
+
+- `fastify >= 4`. Older versions refused with `E_UNSUPPORTED_VERSION`.
+
+## Wiring `app.register`
+
+```ts
+import Fastify from 'fastify';
+import { allstakFastify } from '@allstak/fastify';
+
+const app = Fastify({ logger: true });
+await app.register(allstakFastify, {
+  apiKey: process.env.ALLSTAK_API_KEY,
+});
+// … your routes
+await app.listen({ port: 3000 });
+```
+
+`doctor` reports `warn` on `plugin-registered` until a non-comment
+`app.register(allstakFastify, ...)` call is detected (line comments
+are stripped before matching so the wizard's own hint does not satisfy
+the check).
+
+## Capabilities the wizard does NOT claim
+
+- **No source-map upload wiring.** Deferred to v0.2.
+- **No CJS AST patching.** CJS users wire the `require(...)` and
+  `app.register(...)` calls per the managed-block hint.
+- **No bundler integration** (esbuild/tsup/etc.) — out of scope for v0.1.
+
+## Verify
+
+```bash
+npx @allstak/wizard@beta doctor -i fastify
+```

package/docs/beta/known-limitations.md

@@ -1,4 +1,4 @@
-# Known limitations (public beta)
+# Known limitations
 
 This page is the **honest** list of what the wizard does and doesn't do
 today. Read it before making the wizard part of a critical onboarding
@@ -9,29 +9,25 @@ path.
 | Integration | Stability | Notes |
 |-------------|-----------|-------|
 | `react` (Vite or CRA) | ✅ stable | Validated end-to-end; dogfooded against `admin-web` and `web`. |
-| `next` (13+, app + pages router) | 🟡 beta | Implementation complete; production-build validation in progress. |
+| `next` (13/14/15, app + pages router) | ✅ stable | Disposable live-backend certification passed for App Router 15 and pages-router onboarding; Edge Runtime and Server Actions are not certified. |
 | `js` (vanilla Node) | ✅ stable | Validated end-to-end. |
+| `expo` (managed workflow, ≥50) | internal experimental | Hidden from normal public setup; requires `--experimental`. Real device/emulator runtime proof is incomplete. |
+| `nestjs` (≥9) | internal experimental | Runtime SDK fail-open is verified, but wizard auto-wiring is not Stable. Requires `--experimental`. |
+| `fastify` (≥4) | internal experimental | Runtime SDK fail-open is verified, but wizard auto-wiring is not Stable. Requires `--experimental`. |
 
 Everything else is `experimental` (refuses without `--experimental`) or
 `unsupported` (refuses always).
 
-## Explicitly NOT supported in beta
+## Explicitly NOT supported
 
 | Target | Why |
 |--------|-----|
 | **Astro** | The wizard's framework detector falls through to `js`, which writes env vars but does not wire Astro middleware. Real Astro support is on the v0.2 roadmap. Until then: do the setup manually following the SDK README. |
-| **Bare React Native** | Podfile + Gradle patching cannot be validated without iOS sim + Android emulator builds. The wizard refuses with `E_UNSUPPORTED_FRAMEWORK`. Use the Expo path (config plugin) if you can; otherwise follow the manual setup. |
+| **Bare React Native** | Podfile + Gradle patching cannot be validated without iOS sim + Android emulator builds. The wizard refuses with `E_UNSUPPORTED_FRAMEWORK`. Use the Expo managed path if you can; otherwise follow the manual setup. |
+| **Expo prebuilt / bare-via-prebuild** | If `ios/` or `android/` already exist, the wizard refuses (same reason as bare RN). Run `expo prebuild --clean` later if you need native edits, but the wizard will not patch the native projects in v0.1. |
+| **NestJS / Fastify auto-registration** | Wizard injects the import + a managed-block hint. It does NOT mutate `bootstrap()` to call `useGlobalFilters` or `app.register` — entry-point shapes vary too widely (factories, hybrid apps, custom adapters) and the blast radius is too high. `doctor` reports `warn` until you wire the call yourself. |
 | **Flutter source maps** | The Flutter SDK itself does not yet ship source-map upload tooling. Wizard's Flutter integration is `experimental` and only writes env vars. |
-| **Backend SDK auto-wiring** (NestJS, Fastify, OTel, Spring Boot, Django, Flask, Rails, .NET, Go, PHP) | Each is `experimental`. Install + env-var writing is supported under `--experimental`; framework wiring is NOT — too many entry-point shapes to AST-patch safely without per-framework fixture validation. v0.2 roadmap. |
-
-## Java self-hosted: blocked by SDK
-
-`allstak-java-sdk` currently hardcodes its host to `https://api.allstak.sa`.
-Until the SDK adds a configurable `host` field on `AllStakConfig`, the
-wizard's `--host` / `--ingest-host` flags are a **no-op for Java users**.
-The wizard will warn when `-i java` runs against a non-default host.
-
-Tracking spec: `docs/architecture/v02-java-host-fix-spec.md`.
+| **Backend SDK auto-wiring** (OTel, Spring Boot, Django, Flask, Rails, .NET, Go, PHP) | Each is `experimental`. Install + env-var writing is supported under `--experimental`; framework wiring is NOT — too many entry-point shapes to AST-patch safely without per-framework fixture validation. v0.2 roadmap. |
 
 ## Auth specifics
 
@@ -74,6 +70,10 @@ Tracking spec: `docs/architecture/v02-java-host-fix-spec.md`.
 - React + CRA onboarding flows (without source-map upload — manual wiring).
 - Vanilla Node entry-point patching.
 - Next.js with manual `next.config.js` follow-up.
+- Expo managed workflow (`app.json` plugin entry + provider hint).
+- NestJS / Fastify install + env wiring + managed-block hint, with a manual
+  `useGlobalFilters` / `app.register` call as documented in the per-framework
+  beta page.
 - All commands in their `--dry-run` form (no disk writes anywhere).
 - `restore` / snapshot inspection (read-only ops).
 

package/docs/beta/nestjs.md

@@ -0,0 +1,69 @@
+# NestJS
+
+**Stability:** internal experimental. AST-safe import + managed-block hint. The wizard
+does NOT auto-mutate `bootstrap()` to call `app.useGlobalFilters(...)` —
+Nest entry shapes vary too much (factory functions, custom adapters,
+hybrid microservice apps) and registration mid-bootstrap has high blast
+radius. The wizard places the import and a hint; you wire the call.
+
+## What you get
+
+- `@allstak/nestjs` installed.
+- `.env` populated with `ALLSTAK_API_KEY`.
+- `src/main.ts` (or the entry pointed to by `package.json:scripts.start`)
+  gets:
+  - An AST-injected
+    `import { AllStakNestExceptionFilter, AllStakNestInterceptor } from '@allstak/nestjs'`.
+  - A managed-block hint demonstrating the registration call inside
+    a `//`-comment block. `doctor` strips line comments before
+    matching the live registration, so the hint itself does not
+    produce a false-positive `pass`.
+
+## Run
+
+```bash
+npx @allstak/wizard@beta -i nestjs
+```
+
+## Compatibility
+
+- `@nestjs/core >= 9`. Older versions refused with `E_UNSUPPORTED_VERSION`.
+
+## Wiring `useGlobalFilters` / `useGlobalInterceptors`
+
+Inside your `bootstrap()` after `NestFactory.create(...)`:
+
+```ts
+import { NestFactory } from '@nestjs/core';
+import {
+  AllStakNestExceptionFilter,
+  AllStakNestInterceptor,
+} from '@allstak/nestjs';
+import { AppModule } from './app.module';
+
+async function bootstrap() {
+  const app = await NestFactory.create(AppModule);
+  app.useGlobalFilters(new AllStakNestExceptionFilter());
+  app.useGlobalInterceptors(new AllStakNestInterceptor());
+  await app.listen(3000);
+}
+bootstrap();
+```
+
+`doctor` reports `warn` on `filter-registered` until at least one of
+`useGlobalFilters(...AllStakNestExceptionFilter` or
+`useGlobalInterceptors(...AllStakNestInterceptor` is detected in
+non-comment source.
+
+## Capabilities the wizard does NOT claim
+
+- **No source-map upload wiring.** Deferred to v0.2.
+- **No registration-call auto-injection.** See the rationale above.
+- **No microservice / hybrid-app wiring.** The hint targets the standard
+  HTTP bootstrap; for hybrid apps register filters per-microservice.
+
+## Verify
+
+```bash
+npx @allstak/wizard@beta doctor -i nestjs
+```

package/docs/beta/next.md

@@ -1,14 +1,14 @@
 # Next.js
 
-**Stability:** `beta`. Implementation complete and unit-tested. The wizard
-emits a one-line warning on use because end-to-end integration testing
-against Next 13/14/15 production builds is still in progress.
+**Stability:** stable. Runtime fail-open behavior and disposable live-backend
+certification have passed for supported Next.js paths. Edge Runtime and Server
+Actions are not certified.
 
 ## What you get
 
-- `@allstak/next@beta` + `@allstak/js` installed.
+- `@allstak/next` + `@allstak/js` installed.
 - `.env.local` populated with **both** `ALLSTAK_API_KEY` and `ALLSTAK_DSN`
-  (the beta SDK still accepts `ALLSTAK_DSN` during the env-var transition).
+  (`ALLSTAK_DSN` is still written during the env-var transition).
 - `instrumentation.ts` created at the project root if missing, otherwise a
   managed-block hint appended to the existing one. The wizard does NOT
   modify the body of an existing `register()` function.
@@ -62,13 +62,12 @@ The wizard does NOT auto-mutate `next.config.*` for you — Next configs use
 many factory shapes (`module.exports = (phase, { defaultConfig }) => …`) and
 auto-mutation has too high a blast-radius. Follow the managed-block hint.
 
-## Known beta-tier limitations
+## Known limitations
 
 - Live `doctor --live-probe` works for Next-emitted events only when your
   Next app runs in a place the wizard can reach. (No magic — the SDK posts
   to `/ingest/v1/errors` and the wizard polls `/api/v1/errors`.)
-- Source-map upload roundtrip not yet validated end-to-end (wizard's job is
-  to wire the plugin; the SDK + dashboard own upload + symbolication).
+- Edge Runtime and Server Actions are not certified.
 
 ## Verify
 

package/docs/beta/react.md

@@ -9,8 +9,9 @@ against AllStak `admin-web` and `web` packages.
 - `.env.local` (Vite) or `.env` (CRA) populated with `ALLSTAK_API_KEY`,
   `ALLSTAK_HOST`, `ALLSTAK_ENVIRONMENT`, and (if configured) `ALLSTAK_RELEASE`.
 - `AllStakProvider` import added to your entry file via AST mutation.
-- Managed-block hint guiding you to wrap `<App />` in the provider.
-- For Vite projects: `@allstak/js/vite` plugin import added to `vite.config.*`.
+- Root render tree wrapped with a guarded `AllStakRoot` component when the
+  wizard recognizes a standard `createRoot(...).render(...)` entry.
+- For Vite projects: `@allstak/react/vite` source-map helper is added to `vite.config.*`.
 
 ## Run
 
@@ -35,24 +36,32 @@ npx @allstak/wizard@beta -i react -y --api-key $ALLSTAK_API_KEY \
 
 ## Wiring the provider
 
-The wizard injects the import but **does not** rewrite your `ReactDOM.createRoot`
-call — too risky across CRA / Vite / RN-Web variants. Wrap your app
-manually:
+For standard Vite/CRA entry files, the wizard rewrites the root render tree:
 
 ```tsx
+import type { ReactNode } from 'react';
 import { AllStakProvider } from '@allstak/react';
 
+function AllStakRoot({ children }: { children: ReactNode }) {
+  const apiKey = import.meta.env.VITE_ALLSTAK_API_KEY;
+  if (!apiKey) return <>{children}</>;
+  return (
+    <AllStakProvider apiKey={apiKey} environment="production">
+      {children}
+    </AllStakProvider>
+  );
+}
+
 ReactDOM.createRoot(document.getElementById('root')!).render(
-  <AllStakProvider
-    apiKey={import.meta.env?.VITE_ALLSTAK_API_KEY ?? process.env.ALLSTAK_API_KEY}
-    environment="production"
-    release={import.meta.env?.VITE_GIT_SHA}
-  >
+  <AllStakRoot>
     <App />
-  </AllStakProvider>,
+  </AllStakRoot>,
 );
 ```
 
+If the wizard cannot safely identify the render call, it leaves a manual-review
+hint instead of risking a broken app.
+
 ## Verify
 
 ```bash
@@ -69,9 +78,8 @@ npx @allstak/wizard@beta doctor -i react --live-probe \
 
 ## Idempotent
 
-Re-running `init` produces byte-identical output. The wizard wraps every
-patch in `// >>> allstak-wizard:v1` markers so subsequent runs replace the
-managed block instead of duplicating it.
+Re-running `init` is idempotent. The wizard detects existing
+`AllStakProvider`/`AllStakRoot` setup and does not double-wrap the tree.
 
 ## Uninstall
 
@@ -79,5 +87,5 @@ managed block instead of duplicating it.
 npx @allstak/wizard@beta uninstall -i react
 ```
 
-Removes the `@allstak/react` and `@allstak/js` deps, strips the AST import,
+Removes the `@allstak/react` dependency, strips the AST import,
 deletes the managed env block, and unwires the Vite plugin.

package/docs/beta/reliability.md

@@ -0,0 +1,33 @@
+# SDK Reliability and Fail-Open Behavior
+
+AllStak SDKs must be fail-open. A customer application must keep running when
+AllStak ingest is slow, down, rate-limited, under maintenance, or unreachable.
+
+Default runtime guarantees for wizard-generated integrations:
+
+- SDK initialization should not block app startup.
+- Runtime telemetry delivery is best-effort and should not throw into customer code.
+- Browser and mobile telemetry uses short timeouts, bounded memory queues, and drops telemetry before it can harm app performance.
+- Server middleware should never wait on AllStak before returning the customer response.
+- HTTP instrumentation must preserve the original request behavior. If telemetry capture fails, the customer request still succeeds or fails only because of the customer system.
+- AllStak ingest endpoints are ignored by instrumentation to prevent recursive telemetry loops.
+- Source-map upload and setup-doctor failures affect CI only when the developer explicitly configures a fail-on-error build mode.
+
+Operational behavior during AllStak incidents:
+
+- DNS/TLS/connectivity failures are swallowed internally.
+- 5xx and 503 maintenance responses back off and eventually drop telemetry.
+- 429 responses should back off and avoid retry storms.
+- Queue overflow drops telemetry rather than growing memory without bounds.
+- Debug logging is opt-in. Normal applications should not see noisy AllStak transport errors.
+
+Current public status:
+
+- Stable runtime SDKs with fail-open certification: JavaScript, React, Next.js runtime, Java/Spring, Python, and Go.
+- Runtime SDKs with useful work but incomplete Stable proof are internal experimental only and must not appear as normal public supported SDKs.
+- React Native/Expo remains internal experimental until real SDK-generated mobile request continuity, emulator/device runtime proof, and mobile session timeline proof are complete.
+- Laravel/PHP is hidden from public Stable status. Plain PHP cannot provide the same async worker guarantees without framework/deferred queue fixtures, and Laravel middleware fixtures are not yet certified.
+- Flutter is hidden from public Stable status until HTTP wrapper, native crash, lifecycle hook, and app-runtime fail-open fixtures pass.
+- Non-JS OpenTelemetry bridges were not found in this SDK workspace. They must not be advertised as supported.
+
+When in doubt, the wizard and docs must prefer data loss over application risk.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@allstak/wizard",
-  "version": "0.1.4",
-  "description": "AllStak SDK installation and configuration wizard (public beta). Auto-installs and wires the right @allstak/* SDK for React, Next.js, and Node — with deterministic rollback, persistent snapshots, and a real-event doctor.",
+  "version": "0.1.5",
+  "description": "AllStak SDK installation and configuration wizard. Lists public Stable runtimes, fully/assisted-wires JS, React, and Next.js, and keeps manual-light server SDK setup honest.",
   "type": "module",
   "bin": {
     "allstak-wizard": "./dist/cli.js"
@@ -41,6 +41,14 @@
       "types": "./dist/snapshot/store.d.ts",
       "import": "./dist/snapshot/store.js"
     },
+    "./security-snapshot": {
+      "types": "./dist/security-snapshot/index.d.ts",
+      "import": "./dist/security-snapshot/index.js"
+    },
+    "./certification": {
+      "types": "./dist/certification/index.d.ts",
+      "import": "./dist/certification/index.js"
+    },
     "./config": {
       "types": "./dist/config/index.d.ts",
       "import": "./dist/config/index.js"
@@ -65,7 +73,7 @@
   "scripts": {
     "build": "tsc -p tsconfig.json",
     "type-check": "tsc -p tsconfig.json --noEmit",
-    "test": "node --test --test-concurrency=1 --import tsx test/markers.test.mts test/transaction.test.mts test/patchers.test.mts test/detect.test.mts test/integration-react.test.mts test/integration-next.test.mts test/integration-js.test.mts test/snapshot.test.mts test/compat.test.mts test/lifecycle.test.mts test/sourcemaps.test.mts test/migrations.test.mts test/output.test.mts test/config.test.mts test/credentials.test.mts test/restore.test.mts test/error-codes.test.mts test/telemetry.test.mts test/config-migrations.test.mts",
+    "test": "node --test --test-concurrency=1 --import tsx test/markers.test.mts test/transaction.test.mts test/patchers.test.mts test/detect.test.mts test/security-snapshot.test.mts test/certification.test.mts test/integration-react.test.mts test/integration-next.test.mts test/integration-js.test.mts test/integration-expo.test.mts test/integration-nestjs.test.mts test/integration-fastify.test.mts test/integration-java.test.mts test/integration-php.test.mts test/integration-python.test.mts test/integration-go.test.mts test/snapshot.test.mts test/compat.test.mts test/lifecycle.test.mts test/sourcemaps.test.mts test/migrations.test.mts test/output.test.mts test/config.test.mts test/credentials.test.mts test/restore.test.mts test/error-codes.test.mts test/telemetry.test.mts test/config-migrations.test.mts test/sensitive-data-masking.test.mts",
     "test:integration": "node --test --test-concurrency=1 --import tsx test/integration-*.test.mts",
     "wizard": "tsx src/cli.ts",
     "prepublishOnly": "npm run type-check && npm run test && npm run build"