@biffo/cli 0.103.1 → 0.103.3

package/dist/index.js

@@ -2029,9 +2029,7 @@ function pluginModuleSource(cwd, name) {
   return isFirstPartyPlugin(cwd, name) ? FIRST_PARTY_TERRAFORM(name) : THIRD_PARTY_TERRAFORM(name);
 }
 function listWireablePlugins(cwd) {
-  const copied = listPluginModules(cwd);
-  const firstParty = firstPartyPluginNames(cwd);
-  return [.../* @__PURE__ */ new Set([...copied, ...firstParty])].sort();
+  return listPluginModules(cwd).filter((name) => !isFirstPartyPlugin(cwd, name)).sort();
 }
 function firstPartyPluginNames(cwd) {
   const dir = join10(cwd, "services", "_plugins");
@@ -2217,8 +2215,7 @@ function syncPluginTerraform(cwd) {
   const skippedEnvironments = listUnwirableEnvironments(cwd);
   const changedPaths = [];
   const rendered = plugins.map((name) => {
-    const firstParty = isFirstPartyPlugin(cwd, name);
-    const moduleDir = firstParty ? join10(cwd, "services", "_plugins", name, "terraform") : join10(cwd, "modules", "plugins", name);
+    const moduleDir = join10(cwd, "modules", "plugins", name);
     return {
       name,
       declaredVariables: declaredVariables(moduleDir),
@@ -6627,8 +6624,8 @@ function printEntry(entry) {
 }
 
 // src/commands/plugin-install.ts
-import { cpSync as cpSync3, existsSync as existsSync24, mkdirSync as mkdirSync9, readFileSync as readFileSync18, statSync as statSync6 } from "fs";
-import { basename, join as join25, relative as relative3, resolve as resolve12 } from "path";
+import { cpSync as cpSync3, existsSync as existsSync25, mkdirSync as mkdirSync9, readFileSync as readFileSync19, statSync as statSync6 } from "fs";
+import { basename, join as join26, relative as relative3, resolve as resolve12 } from "path";
 import chalk15 from "chalk";
 import { Command as Command15 } from "commander";
 
@@ -6674,6 +6671,120 @@ var PluginMigrationsAdapter = class {
   }
 };
 
+// src/lib/plugin-workspace-sources.ts
+import { existsSync as existsSync24, readdirSync as readdirSync12, readFileSync as readFileSync18, writeFileSync as writeFileSync9 } from "fs";
+import { join as join25 } from "path";
+function readTomlStringArray(text, key) {
+  const open = new RegExp(`^${key}\\s*=\\s*\\[`, "m").exec(text);
+  if (!open) return [];
+  const start = open.index + open[0].length;
+  let depth = 1;
+  let inString = false;
+  let quote = "";
+  let end = -1;
+  for (let i = start; i < text.length; i++) {
+    const c = text[i];
+    if (inString) {
+      if (c === quote) inString = false;
+    } else if (c === '"' || c === "'") {
+      inString = true;
+      quote = c;
+    } else if (c === "[") {
+      depth++;
+    } else if (c === "]") {
+      depth--;
+      if (depth === 0) {
+        end = i;
+        break;
+      }
+    }
+  }
+  if (end === -1) return [];
+  const body = text.slice(start, end);
+  return [...body.matchAll(/["']([^"']+)["']/g)].map((m) => m[1]);
+}
+function readProjectName(text) {
+  let inProject = false;
+  for (const line of text.split("\n")) {
+    const trimmed = line.trim();
+    if (trimmed.startsWith("[")) {
+      inProject = trimmed === "[project]";
+      continue;
+    }
+    if (inProject) {
+      const m = /^name\s*=\s*["']([^"']+)["']/.exec(trimmed);
+      if (m) return m[1];
+    }
+  }
+  return null;
+}
+function readDependencyNames(text) {
+  return readTomlStringArray(text, "dependencies").map((dep) => /^\s*([A-Za-z0-9._-]+)/.exec(dep)?.[1] ?? "").filter(Boolean);
+}
+function workspaceMemberNames(instanceRoot) {
+  const rootPyproject = join25(instanceRoot, "pyproject.toml");
+  if (!existsSync24(rootPyproject)) return /* @__PURE__ */ new Set();
+  const text = readFileSync18(rootPyproject, "utf8");
+  const members = readTomlStringArray(text, "members");
+  const excluded = new Set(readTomlStringArray(text, "exclude"));
+  const dirs = [];
+  for (const member of members) {
+    if (member.endsWith("/*")) {
+      const base = member.slice(0, -2);
+      let entries;
+      try {
+        entries = readdirSync12(join25(instanceRoot, base), { withFileTypes: true });
+      } catch {
+        continue;
+      }
+      for (const entry of entries) {
+        const rel = `${base}/${entry.name}`;
+        if (entry.isDirectory() && !entry.name.startsWith(".") && !excluded.has(rel)) dirs.push(rel);
+      }
+    } else if (!excluded.has(member)) {
+      dirs.push(member);
+    }
+  }
+  const names = /* @__PURE__ */ new Set();
+  for (const dir of dirs) {
+    const pp = join25(instanceRoot, dir, "pyproject.toml");
+    if (!existsSync24(pp)) continue;
+    const name = readProjectName(readFileSync18(pp, "utf8"));
+    if (name) names.add(name);
+  }
+  return names;
+}
+function existingWorkspaceSources(text) {
+  return new Set(
+    [...text.matchAll(/^\s*([A-Za-z0-9._-]+)\s*=\s*\{[^}]*\bworkspace\b/gm)].map((m) => m[1])
+  );
+}
+function ensureWorkspaceSources(pluginPyprojectPath, memberNames) {
+  if (!existsSync24(pluginPyprojectPath) || memberNames.size === 0) return [];
+  const text = readFileSync18(pluginPyprojectPath, "utf8");
+  const already = existingWorkspaceSources(text);
+  const toAdd = readDependencyNames(text).filter((n) => memberNames.has(n) && !already.has(n));
+  if (toAdd.length === 0) return [];
+  const lines = toAdd.map((n) => `${n} = { workspace = true }`);
+  const header = /^\[tool\.uv\.sources\]\s*$/m.exec(text);
+  let updated;
+  if (header) {
+    const insertAt = header.index + header[0].length;
+    updated = `${text.slice(0, insertAt)}
+${lines.join("\n")}${text.slice(insertAt)}`;
+  } else {
+    const sep4 = text.endsWith("\n") ? "" : "\n";
+    updated = `${text}${sep4}
+# Vendored into this instance by \`biffo plugin install\`: resolve dependencies the
+# instance's uv workspace provides as members from the workspace, not PyPI.
+[tool.uv.sources]
+${lines.join("\n")}
+`;
+  }
+  writeFileSync9(pluginPyprojectPath, updated);
+  return toAdd;
+}
+
 // src/commands/plugin-install.ts
 var TARGET_PATTERN = /^([a-z][a-z0-9-]*)@(\d+\.\d+)$/;
 var pluginInstallCommand = new Command15("install").description(
@@ -6716,14 +6827,14 @@ var LOCAL_COPY_EXCLUDES = /* @__PURE__ */ new Set([
   ".terraform"
 ]);
 function resolveLocalPlugin(localPath) {
-  if (!existsSync24(localPath)) {
+  if (!existsSync25(localPath)) {
     throw new Error(`--local path does not exist: ${localPath}`);
   }
   if (!statSync6(localPath).isDirectory()) {
     throw new Error(`--local path is not a directory: ${localPath}`);
   }
-  const manifestPath = join25(localPath, "biffo.plugin.json");
-  if (!existsSync24(manifestPath)) {
+  const manifestPath = join26(localPath, "biffo.plugin.json");
+  if (!existsSync25(manifestPath)) {
     throw new Error(
       `${localPath} does not contain a biffo.plugin.json manifest at its root \u2014 is it a plugin directory? (Scaffold one with \`biffo plugin create <name>\`.)`
     );
@@ -6749,8 +6860,8 @@ function parsePluginTarget(target) {
 async function cloneAndValidatePlugin(entry, git) {
   const tmpDir = await git.cloneToTemp(entry.repo, `biffo-plugin-${entry.name}`);
   try {
-    const manifestPath = join25(tmpDir, "biffo.plugin.json");
-    if (!existsSync24(manifestPath)) {
+    const manifestPath = join26(tmpDir, "biffo.plugin.json");
+    if (!existsSync25(manifestPath)) {
       throw new Error(
         `Plugin repo ${entry.repo} does not contain a biffo.plugin.json manifest at its root.`
       );
@@ -6778,8 +6889,8 @@ async function runPluginInstall(target, options, deps) {
       `Nothing to install. Pass a registry target (e.g. \`biffo plugin install acme-crm@1.0\`) or a local plugin directory (\`biffo plugin install --local services/acme-crm\`).`
     );
   }
-  const servicesDir = join25(options.cwd, "services");
-  if (!existsSync24(servicesDir)) {
+  const servicesDir = join26(options.cwd, "services");
+  if (!existsSync25(servicesDir)) {
     throw new Error(
       `${servicesDir} does not exist \u2014 is ${options.cwd} the root of a Biffo project checkout?`
     );
@@ -6797,10 +6908,10 @@ async function runPluginInstall(target, options, deps) {
   }
   const pluginName = entry ? entry.name : source.name;
   const relTargetDir = pluginDir(pluginName, "third-party");
-  const targetDir = join25(options.cwd, relTargetDir);
-  const modulesDir = join25(options.cwd, "modules", "plugins", pluginName);
+  const targetDir = join26(options.cwd, relTargetDir);
+  const modulesDir = join26(options.cwd, "modules", "plugins", pluginName);
   const inTreeSource = options.local !== void 0 && resolve12(options.local) === resolve12(targetDir);
-  if (existsSync24(targetDir) && !inTreeSource) {
+  if (existsSync25(targetDir) && !inTreeSource) {
     throw new Error(
       `Plugin '${pluginName}' is already installed at ${relTargetDir}/. Remove it first, or wait for a future 'biffo plugin upgrade' command.`
     );
@@ -6842,9 +6953,18 @@ async function runPluginInstall(target, options, deps) {
       });
       log.success(`Installed plugin source at ${relTargetDir}/`);
     }
+    const pluginPyproject = join26(targetDir, "pyproject.toml");
+    if (existsSync25(pluginPyproject)) {
+      const sourced = ensureWorkspaceSources(pluginPyproject, workspaceMemberNames(options.cwd));
+      if (sourced.length > 0) {
+        log.info(
+          `Sourced ${sourced.join(", ")} from the workspace in ${relTargetDir}/pyproject.toml (the instance provides it as a workspace member).`
+        );
+      }
+    }
     const stagePaths = [relTargetDir];
-    const tfSourceDir = join25(targetDir, "terraform");
-    if (existsSync24(tfSourceDir)) {
+    const tfSourceDir = join26(targetDir, "terraform");
+    if (existsSync25(tfSourceDir)) {
       mkdirSync9(modulesDir, { recursive: true });
       cpSync3(tfSourceDir, modulesDir, { recursive: true });
       stagePaths.push(`modules/plugins/${pluginName}`);
@@ -6923,7 +7043,7 @@ async function runPluginInstall(target, options, deps) {
 }
 function parseManifestFile(path) {
   try {
-    return JSON.parse(readFileSync18(path, "utf8"));
+    return JSON.parse(readFileSync19(path, "utf8"));
   } catch (err) {
     throw new Error(`Could not parse ${path} as JSON: ${err.message}`);
   }
@@ -6960,8 +7080,8 @@ function printDryRun4(entry, source, relTargetDir, inTreeSource) {
 }
 
 // src/commands/plugin-list.ts
-import { existsSync as existsSync25, readFileSync as readFileSync19 } from "fs";
-import { join as join26, resolve as resolve13 } from "path";
+import { existsSync as existsSync26, readFileSync as readFileSync20 } from "fs";
+import { join as join27, resolve as resolve13 } from "path";
 import chalk16 from "chalk";
 import { Command as Command16 } from "commander";
 var pluginListCommand = new Command16("list").description("List plugins installed in this project checkout").option("--cwd <path>", "Project root to scan (defaults to the current directory)").action(async (options) => {
@@ -6974,8 +7094,8 @@ var pluginListCommand = new Command16("list").description("List plugins installe
   }
 });
 async function runPluginList(options) {
-  const servicesDir = join26(options.cwd, "services");
-  if (!existsSync25(servicesDir)) {
+  const servicesDir = join27(options.cwd, "services");
+  if (!existsSync26(servicesDir)) {
     throw new Error(
       `${servicesDir} does not exist \u2014 is ${options.cwd} the root of a Biffo project checkout?`
     );
@@ -6983,7 +7103,7 @@ async function runPluginList(options) {
   const plugins = [];
   for (const location of findInstalledPlugins(options.cwd)) {
     try {
-      const manifest = validateManifest(JSON.parse(readFileSync19(location.manifestPath, "utf8")));
+      const manifest = validateManifest(JSON.parse(readFileSync20(location.manifestPath, "utf8")));
       plugins.push({
         name: manifest.name,
         version: manifest.version,
@@ -7020,8 +7140,8 @@ async function runPluginList(options) {
 }
 
 // src/commands/plugin-sync-migrations.ts
-import { existsSync as existsSync26 } from "fs";
-import { join as join27, relative as relative4, resolve as resolve14 } from "path";
+import { existsSync as existsSync27 } from "fs";
+import { join as join28, relative as relative4, resolve as resolve14 } from "path";
 import chalk17 from "chalk";
 import { Command as Command17 } from "commander";
 var pluginSyncMigrationsCommand = new Command17("sync-migrations").description(
@@ -7042,11 +7162,11 @@ var pluginSyncMigrationsCommand = new Command17("sync-migrations").description(
   }
 );
 async function runPluginSyncMigrations(name, options, deps) {
-  const servicesDir = join27(options.cwd, "services");
-  if (!existsSync26(servicesDir)) {
+  const servicesDir = join28(options.cwd, "services");
+  if (!existsSync27(servicesDir)) {
     throw new Error(`${servicesDir} does not exist \u2014 is ${options.cwd} a Biffo project checkout?`);
   }
-  if (name && !existsSync26(join27(servicesDir, name, "biffo.plugin.json"))) {
+  if (name && !existsSync27(join28(servicesDir, name, "biffo.plugin.json"))) {
     throw new Error(`Plugin '${name}' is not installed at services/${name}/.`);
   }
   if (options.dryRun) {
@@ -7082,8 +7202,8 @@ async function runPluginSyncMigrations(name, options, deps) {
 }
 
 // src/commands/plugin-uninstall.ts
-import { existsSync as existsSync27, readFileSync as readFileSync20, rmSync as rmSync8 } from "fs";
-import { join as join28, resolve as resolve15 } from "path";
+import { existsSync as existsSync28, readFileSync as readFileSync21, rmSync as rmSync8 } from "fs";
+import { join as join29, resolve as resolve15 } from "path";
 import chalk18 from "chalk";
 import { Command as Command18 } from "commander";
 import inquirer6 from "inquirer";
@@ -7115,16 +7235,16 @@ async function runPluginUninstall(name, options, deps) {
   if (!NAME_PATTERN2.test(name)) {
     throw new Error(`Invalid plugin name '${name}'. Expected a lowercase kebab-case slug.`);
   }
-  const servicesDir = join28(options.cwd, "services");
-  if (!existsSync27(servicesDir)) {
+  const servicesDir = join29(options.cwd, "services");
+  if (!existsSync28(servicesDir)) {
     throw new Error(
       `${servicesDir} does not exist \u2014 is ${options.cwd} the root of a Biffo project checkout?`
     );
   }
-  const targetDir = join28(servicesDir, name);
-  if (!existsSync27(targetDir)) {
-    const firstParty = join28(servicesDir, FIRST_PARTY_PLUGINS_DIR, name);
-    if (existsSync27(firstParty)) {
+  const targetDir = join29(servicesDir, name);
+  if (!existsSync28(targetDir)) {
+    const firstParty = join29(servicesDir, FIRST_PARTY_PLUGINS_DIR, name);
+    if (existsSync28(firstParty)) {
       throw new Error(
         `Plugin '${name}' is a first-party plugin at ${pluginDir(name, "first-party")}/, which is template-owned \u2014 \`biffo core upgrade\` would restore it on the next upgrade. Disable it instead by removing '${name}' from \`enabled_plugins\` in infra/environments/<env>/main.tf and re-applying.`
       );
@@ -7132,9 +7252,9 @@ async function runPluginUninstall(name, options, deps) {
     throw new Error(`Plugin '${name}' is not installed at services/${name}/.`);
   }
   const version = readInstalledVersion(targetDir);
-  const modulesDir = join28(options.cwd, "modules", "plugins", name);
+  const modulesDir = join29(options.cwd, "modules", "plugins", name);
   const stagePaths = [`services/${name}`];
-  if (existsSync27(modulesDir)) {
+  if (existsSync28(modulesDir)) {
     stagePaths.push(`modules/plugins/${name}`);
   }
   if (options.dryRun) {
@@ -7156,7 +7276,7 @@ async function runPluginUninstall(name, options, deps) {
   }
   rmSync8(targetDir, { recursive: true, force: true });
   log.success(`Removed services/${name}/`);
-  if (existsSync27(modulesDir)) {
+  if (existsSync28(modulesDir)) {
     rmSync8(modulesDir, { recursive: true, force: true });
     log.success(`Removed modules/plugins/${name}/`);
     const wiring = syncPluginTerraform(options.cwd);
@@ -7193,10 +7313,10 @@ async function runPluginUninstall(name, options, deps) {
   }
 }
 function readInstalledVersion(targetDir) {
-  const manifestPath = join28(targetDir, "biffo.plugin.json");
-  if (!existsSync27(manifestPath)) return void 0;
+  const manifestPath = join29(targetDir, "biffo.plugin.json");
+  if (!existsSync28(manifestPath)) return void 0;
   try {
-    return validateManifest(JSON.parse(readFileSync20(manifestPath, "utf8"))).version;
+    return validateManifest(JSON.parse(readFileSync21(manifestPath, "utf8"))).version;
   } catch {
     return void 0;
   }
@@ -7229,8 +7349,8 @@ function printDryRun5(name, version, stagePaths, keepData) {
 }
 
 // src/commands/plugin-upgrade.ts
-import { cpSync as cpSync4, existsSync as existsSync28, mkdirSync as mkdirSync10, readFileSync as readFileSync21, rmSync as rmSync9 } from "fs";
-import { join as join29, relative as relative5, resolve as resolve16 } from "path";
+import { cpSync as cpSync4, existsSync as existsSync29, mkdirSync as mkdirSync10, readFileSync as readFileSync22, rmSync as rmSync9 } from "fs";
+import { join as join30, relative as relative5, resolve as resolve16 } from "path";
 import chalk19 from "chalk";
 import { Command as Command19 } from "commander";
 import inquirer7 from "inquirer";
@@ -7255,14 +7375,14 @@ var pluginUpgradeCommand = new Command19("upgrade").description(
 });
 async function runPluginUpgrade(target, options, deps) {
   const { name, minor } = parsePluginTarget(target);
-  const servicesDir = join29(options.cwd, "services");
-  if (!existsSync28(servicesDir)) {
+  const servicesDir = join30(options.cwd, "services");
+  if (!existsSync29(servicesDir)) {
     throw new Error(
       `${servicesDir} does not exist \u2014 is ${options.cwd} the root of a Biffo project checkout?`
     );
   }
-  const targetDir = join29(servicesDir, name);
-  if (!existsSync28(targetDir)) {
+  const targetDir = join30(servicesDir, name);
+  if (!existsSync29(targetDir)) {
     throw new Error(
       `Plugin '${name}' is not installed at services/${name}/. Use 'biffo plugin install ${name}@${minor}' instead.`
     );
@@ -7276,7 +7396,7 @@ async function runPluginUpgrade(target, options, deps) {
       `Plugin declares required_core_version '${entry.required_core_version}'. The CLI cannot verify this against your deployment \u2014 the Core API exposes no version endpoint and services/api/pyproject.toml's version is a static placeholder, not a real release marker. Confirm compatibility yourself before deploying.`
     );
   }
-  const modulesDir = join29(options.cwd, "modules", "plugins", entry.name);
+  const modulesDir = join30(options.cwd, "modules", "plugins", entry.name);
   if (options.dryRun) {
     printDryRun6(entry, currentVersion);
     return;
@@ -7309,11 +7429,11 @@ async function runPluginUpgrade(target, options, deps) {
     cpSync4(tmpDir, targetDir, { recursive: true });
     log.success(`Upgraded plugin source at services/${entry.name}/`);
     const stagePaths = [`services/${entry.name}`];
-    if (existsSync28(modulesDir)) {
+    if (existsSync29(modulesDir)) {
       rmSync9(modulesDir, { recursive: true, force: true });
     }
-    const tfSourceDir = join29(targetDir, "terraform");
-    if (existsSync28(tfSourceDir)) {
+    const tfSourceDir = join30(targetDir, "terraform");
+    if (existsSync29(tfSourceDir)) {
       mkdirSync10(modulesDir, { recursive: true });
       cpSync4(tfSourceDir, modulesDir, { recursive: true });
       stagePaths.push(`modules/plugins/${entry.name}`);
@@ -7347,10 +7467,10 @@ async function runPluginUpgrade(target, options, deps) {
   }
 }
 function readInstalledVersion2(targetDir) {
-  const manifestPath = join29(targetDir, "biffo.plugin.json");
-  if (!existsSync28(manifestPath)) return void 0;
+  const manifestPath = join30(targetDir, "biffo.plugin.json");
+  if (!existsSync29(manifestPath)) return void 0;
   try {
-    return validateManifest(JSON.parse(readFileSync21(manifestPath, "utf8"))).version;
+    return validateManifest(JSON.parse(readFileSync22(manifestPath, "utf8"))).version;
   } catch {
     return void 0;
   }
@@ -7379,14 +7499,14 @@ function printDryRun6(entry, currentVersion) {
 }
 
 // src/commands/plugin-wire.ts
-import { existsSync as existsSync30, readFileSync as readFileSync23 } from "fs";
+import { existsSync as existsSync31, readFileSync as readFileSync24 } from "fs";
 import { resolve as resolve17 } from "path";
 import chalk20 from "chalk";
 import { Command as Command20 } from "commander";
 
 // src/lib/plugin-origin.ts
-import { existsSync as existsSync29, readFileSync as readFileSync22, writeFileSync as writeFileSync9 } from "fs";
-import { join as join30 } from "path";
+import { existsSync as existsSync30, readFileSync as readFileSync23, writeFileSync as writeFileSync10 } from "fs";
+import { join as join31 } from "path";
 var PLUGIN_API_TFVARS = "plugin-apis.auto.tfvars.json";
 var SIBLINGS_TFVARS = "siblings.auto.tfvars.json";
 function upsertPluginApiOrigin(existing, entry) {
@@ -7396,9 +7516,9 @@ function serializePluginApiRegistry(origins) {
   return JSON.stringify({ plugin_api_origins: origins }, null, 2) + "\n";
 }
 function readArray(path, key) {
-  if (!existsSync29(path)) return [];
+  if (!existsSync30(path)) return [];
   try {
-    const parsed = JSON.parse(readFileSync22(path, "utf8"));
+    const parsed = JSON.parse(readFileSync23(path, "utf8"));
     const arr = parsed[key];
     return Array.isArray(arr) ? arr : [];
   } catch {
@@ -7406,19 +7526,19 @@ function readArray(path, key) {
   }
 }
 function registerUserFacingPlugin(cwd, environment, reg) {
-  const envDir = join30(cwd, "infra", "environments", environment);
-  const apiPath = join30(envDir, PLUGIN_API_TFVARS);
-  const siblingPath = join30(envDir, SIBLINGS_TFVARS);
+  const envDir = join31(cwd, "infra", "environments", environment);
+  const apiPath = join31(envDir, PLUGIN_API_TFVARS);
+  const siblingPath = join31(envDir, SIBLINGS_TFVARS);
   const apis = upsertPluginApiOrigin(readArray(apiPath, "plugin_api_origins"), {
     name: reg.name,
     function_url_domain: reg.functionUrlDomain
   });
-  writeFileSync9(apiPath, serializePluginApiRegistry(apis));
+  writeFileSync10(apiPath, serializePluginApiRegistry(apis));
   const siblings = upsertSiblingOrigin(readArray(siblingPath, "sibling_origins"), {
     name: reg.name,
     bucket_regional_domain: reg.bucketRegionalDomain
   });
-  writeFileSync9(siblingPath, serializeRegistry(siblings));
+  writeFileSync10(siblingPath, serializeRegistry(siblings));
   return [
     `infra/environments/${environment}/${PLUGIN_API_TFVARS}`,
     `infra/environments/${environment}/${SIBLINGS_TFVARS}`
@@ -7499,7 +7619,7 @@ var pluginWireCommand = new Command20("wire").description(
 );
 async function resolveConfig4(options) {
   if (options.config) {
-    const raw = JSON.parse(readFileSync23(resolve17(options.config), "utf8"));
+    const raw = JSON.parse(readFileSync24(resolve17(options.config), "utf8"));
     const result = BiffoConfigSchema.safeParse(raw);
     if (!result.success) {
       log.error(`Invalid config at ${options.config}:`);
@@ -7519,8 +7639,8 @@ async function resolveConfig4(options) {
     return cfg;
   }
   const localConfigPath = resolve17(process.cwd(), "biffo.config.json");
-  if (existsSync30(localConfigPath)) {
-    const raw = JSON.parse(readFileSync23(localConfigPath, "utf8"));
+  if (existsSync31(localConfigPath)) {
+    const raw = JSON.parse(readFileSync24(localConfigPath, "utf8"));
     const result = BiffoConfigSchema.safeParse(raw);
     if (result.success) return result.data;
     if (isTemplatePlaceholderConfig(raw)) {
@@ -7555,7 +7675,7 @@ pluginCommand.addCommand(pluginInfoCommand);
 import { Command as Command23 } from "commander";
 
 // src/commands/sibling-check-identity.ts
-import { existsSync as existsSync31, readFileSync as readFileSync24 } from "fs";
+import { existsSync as existsSync32, readFileSync as readFileSync25 } from "fs";
 import { resolve as resolve18 } from "path";
 import chalk21 from "chalk";
 import { Command as Command22 } from "commander";
@@ -7749,7 +7869,7 @@ async function fetchPublishedIdentity(portalUrl) {
 }
 async function resolveConfig5(options) {
   if (options.config) {
-    const raw = JSON.parse(readFileSync24(resolve18(options.config), "utf8"));
+    const raw = JSON.parse(readFileSync25(resolve18(options.config), "utf8"));
     const result = BiffoConfigSchema.safeParse(raw);
     if (!result.success) {
       log.error(`Invalid config at ${options.config}:`);
@@ -7769,8 +7889,8 @@ async function resolveConfig5(options) {
     return cfg;
   }
   const localConfigPath = resolve18(process.cwd(), "biffo.config.json");
-  if (existsSync31(localConfigPath)) {
-    const raw = JSON.parse(readFileSync24(localConfigPath, "utf8"));
+  if (existsSync32(localConfigPath)) {
+    const raw = JSON.parse(readFileSync25(localConfigPath, "utf8"));
     const result = BiffoConfigSchema.safeParse(raw);
     if (result.success) return result.data;
     if (isTemplatePlaceholderConfig(raw)) {
@@ -7839,8 +7959,8 @@ async function runOwnershipCheck(argv) {
     const { stdout } = await execa5("git", ["diff", "--cached", "--name-status"], { cwd: root });
     ({ changed: changedFiles, deleted: deletedFiles } = parseNameStatus(stdout));
     if (messageFile) {
-      const { readFileSync: readFileSync26, existsSync: existsSync33 } = await import("fs");
-      if (existsSync33(messageFile)) commitMessage = readFileSync26(messageFile, "utf8");
+      const { readFileSync: readFileSync27, existsSync: existsSync34 } = await import("fs");
+      if (existsSync34(messageFile)) commitMessage = readFileSync27(messageFile, "utf8");
     }
   } else {
     const base = process.env["GITHUB_BASE_REF"] ?? args[0];
@@ -7944,8 +8064,8 @@ ${BOLD}If the divergence is deliberate${OFF}
 import { execa as execa6 } from "execa";
 
 // src/lib/plugin-terraform-guard.ts
-import { existsSync as existsSync32, readFileSync as readFileSync25, readdirSync as readdirSync12 } from "fs";
-import { dirname as dirname9, join as join31, relative as relative6, sep as sep3 } from "path";
+import { existsSync as existsSync33, readFileSync as readFileSync26, readdirSync as readdirSync13 } from "fs";
+import { dirname as dirname9, join as join32, relative as relative6, sep as sep3 } from "path";
 var SKIP_DIRS = /* @__PURE__ */ new Set(["node_modules", ".git", ".worktrees", "dist", ".venv", "__pycache__"]);
 var PLUGIN_MANIFEST_FILE2 = "biffo.plugin.json";
 function findPluginManifests(root) {
@@ -7953,16 +8073,16 @@ function findPluginManifests(root) {
   const walk = (dir) => {
     let entries;
     try {
-      entries = readdirSync12(dir, { withFileTypes: true });
+      entries = readdirSync13(dir, { withFileTypes: true });
     } catch {
       return;
     }
     for (const entry of entries) {
       if (entry.isDirectory()) {
         if (SKIP_DIRS.has(entry.name)) continue;
-        walk(join31(dir, entry.name));
+        walk(join32(dir, entry.name));
       } else if (entry.isFile() && entry.name === PLUGIN_MANIFEST_FILE2) {
-        found.push(relative6(root, join31(dir, entry.name)).split(sep3).join("/"));
+        found.push(relative6(root, join32(dir, entry.name)).split(sep3).join("/"));
       }
     }
   };
@@ -7972,7 +8092,7 @@ function findPluginManifests(root) {
 function readSubscriptions(absManifestPath) {
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync25(absManifestPath, "utf8"));
+    parsed = JSON.parse(readFileSync26(absManifestPath, "utf8"));
   } catch {
     return null;
   }
@@ -7987,14 +8107,14 @@ function readSubscriptions(absManifestPath) {
 }
 function checkPluginTerraform(root) {
   const violations = [];
-  const coreManifest = existsSync32(join31(root, CORE_MANIFEST_FILE)) ? readCoreManifest(root) : null;
+  const coreManifest = existsSync33(join32(root, CORE_MANIFEST_FILE)) ? readCoreManifest(root) : null;
   for (const manifest of findPluginManifests(root)) {
     if (coreManifest && !isTemplateOwned(manifest, coreManifest)) continue;
-    const absManifest = join31(root, manifest);
+    const absManifest = join32(root, manifest);
     const subscriptions = readSubscriptions(absManifest);
     if (subscriptions === null) continue;
     const pluginDir2 = dirname9(absManifest);
-    if (existsSync32(join31(pluginDir2, "terraform"))) continue;
+    if (existsSync33(join32(pluginDir2, "terraform"))) continue;
     const relPluginDir = relative6(root, pluginDir2).split(sep3).join("/");
     violations.push({
       manifest,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@biffo/cli",
-  "version": "0.103.1",
+  "version": "0.103.3",
   "description": "Biffo project scaffolding CLI",
   "license": "MIT",
   "type": "module",