@biffo/cli 0.58.1 → 0.59.0

package/core.version

@@ -1 +1 @@
-0.58.1
+0.59.0

package/dist/index.js

@@ -7,6 +7,7 @@ import { Command as Command23 } from "commander";
 import { Command as Command4 } from "commander";
 
 // src/commands/core-diff.ts
+import { existsSync as existsSync3 } from "fs";
 import { join as join3, resolve } from "path";
 import chalk2 from "chalk";
 import { Command } from "commander";
@@ -148,6 +149,7 @@ function computeCoreDiff(templateRoot, instanceRoot, manifest) {
 }
 
 // src/lib/core-version.ts
+import { execFileSync } from "child_process";
 import { existsSync as existsSync2, readFileSync as readFileSync2, writeFileSync } from "fs";
 import { dirname as dirname2, join as join2, parse as parsePath } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
@@ -225,6 +227,19 @@ function serializeInstanceCoreVersion(version) {
 function writeInstanceCoreVersion(cwd, version) {
   writeFileSync(join2(cwd, INSTANCE_CORE_FILE), serializeInstanceCoreVersion(version));
 }
+function latestCoreVersionFromTags(repo, git = defaultTagRunner) {
+  let out;
+  try {
+    out = git(["-C", repo, "tag", "--list", "core-v*"]);
+  } catch {
+    return null;
+  }
+  const versions = out.split("\n").map((line) => line.trim()).filter((line) => line.startsWith(CORE_TAG_PREFIX)).map((tag) => tag.slice(CORE_TAG_PREFIX.length)).filter((v) => SEMVER.test(v));
+  if (versions.length === 0) return null;
+  return versions.sort(compareCoreVersions).at(-1) ?? null;
+}
+var CORE_TAG_PREFIX = "core-v";
+var defaultTagRunner = (args) => execFileSync("git", args, { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] });
 
 // src/lib/logger.ts
 import chalk from "chalk";
@@ -257,7 +272,7 @@ var coreDiffCommand = new Command("diff").description(
 async function runCoreDiff(options) {
   const templateRoot = options.templateRoot ?? resolveTemplateRoot({ guidance: MISSING_TEMPLATE_ROOT_GUIDANCE });
   const manifest = readCoreManifest(templateRoot);
-  const templateVersion = readCoreVersionFile(join3(templateRoot, "core.version"));
+  const templateVersion = latestCoreVersionFromTags(templateRoot) ?? (existsSync3(join3(templateRoot, CORE_VERSION_FILE)) ? readCoreVersionFile(join3(templateRoot, CORE_VERSION_FILE)) : "(unreleased)");
   const instanceVersion = readInstanceCoreVersion(options.cwd);
   const diff = computeCoreDiff(templateRoot, options.cwd, manifest);
   const total = diff.added.length + diff.removed.length + diff.modified.length;
@@ -337,6 +352,7 @@ async function runCoreStatus(options) {
 
 // src/commands/core-upgrade.ts
 import { execSync as execSync2 } from "child_process";
+import { existsSync as existsSync10 } from "fs";
 import { join as join11, resolve as resolve3 } from "path";
 import chalk4 from "chalk";
 import { execa as execa3 } from "execa";
@@ -344,7 +360,7 @@ import { Command as Command3 } from "commander";
 
 // src/adapters/git/index.ts
 import { randomUUID } from "crypto";
-import { existsSync as existsSync3, mkdtempSync, rmSync } from "fs";
+import { existsSync as existsSync4, mkdtempSync, rmSync } from "fs";
 import { tmpdir } from "os";
 import { join as join4 } from "path";
 import { execa } from "execa";
@@ -383,7 +399,7 @@ var GitAdapter = class {
       throw new Error(`Failed to clone ${repoUrl}: ${err.message}`);
     }
     const gitDir = join4(dir, ".git");
-    if (existsSync3(gitDir)) rmSync(gitDir, { recursive: true, force: true });
+    if (existsSync4(gitDir)) rmSync(gitDir, { recursive: true, force: true });
     return dir;
   }
   /**
@@ -1168,7 +1184,7 @@ var GitHubAdapter = class {
 
 // src/lib/core-migrations.ts
 import { createHash } from "crypto";
-import { existsSync as existsSync4, mkdirSync, readFileSync as readFileSync3, readdirSync as readdirSync2, writeFileSync as writeFileSync2 } from "fs";
+import { existsSync as existsSync5, mkdirSync, readFileSync as readFileSync3, readdirSync as readdirSync2, writeFileSync as writeFileSync2 } from "fs";
 import { dirname as dirname3, join as join5 } from "path";
 var MIGRATIONS_VERSIONS_DIR = "services/api/migrations/versions";
 var REVISION_RE = /^(revision\b[^=\n]*=\s*)(.+)$/m;
@@ -1208,7 +1224,7 @@ function parseMigration(file, content) {
   return { file, revision, downRevision, content };
 }
 function readMigrations(versionsDir) {
-  if (!existsSync4(versionsDir)) return [];
+  if (!existsSync5(versionsDir)) return [];
   return readdirSync2(versionsDir).filter((f) => f.endsWith(".py") && f !== "__init__.py").sort().map((f) => parseMigration(f, readFileSync3(join5(versionsDir, f), "utf8")));
 }
 function rechainMigration(content, revision, downRevision) {
@@ -1444,7 +1460,7 @@ function applyMigrationCarry(instanceDir, plan) {
   const written = [];
   for (const e of plan.entries) {
     const abs = join5(instanceDir, e.path);
-    if (existsSync4(abs)) {
+    if (existsSync5(abs)) {
       throw new Error(`Refusing to overwrite an existing migration: ${e.path}`);
     }
     mkdirSync(dirname3(abs), { recursive: true });
@@ -1455,7 +1471,7 @@ function applyMigrationCarry(instanceDir, plan) {
 }
 
 // src/lib/core-upgrade.ts
-import { existsSync as existsSync5, mkdirSync as mkdirSync2, mkdtempSync as mkdtempSync2, readFileSync as readFileSync4, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync2, mkdtempSync as mkdtempSync2, readFileSync as readFileSync4, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "fs";
 import { tmpdir as tmpdir2 } from "os";
 import { dirname as dirname4, join as join6 } from "path";
 import { execa as execa2 } from "execa";
@@ -1558,7 +1574,7 @@ function applyUpgradePlan(instanceDir, plan) {
   for (const e of plan.entries) {
     const abs = join6(instanceDir, e.path);
     if (e.status === "removed") {
-      if (existsSync5(abs)) {
+      if (existsSync6(abs)) {
         rmSync2(abs);
         deleted.push(e.path);
       }
@@ -1585,7 +1601,7 @@ function upgradeBranchName(from, to) {
 }
 
 // src/lib/core-template-trees.ts
-import { execFileSync } from "child_process";
+import { execFileSync as execFileSync2 } from "child_process";
 import { mkdtempSync as mkdtempSync3, rmSync as rmSync3 } from "fs";
 import { tmpdir as tmpdir3 } from "os";
 import { join as join7 } from "path";
@@ -1593,7 +1609,7 @@ function coreTag(version) {
   parseCoreVersion(version);
   return `core-v${version}`;
 }
-var defaultGit = (args) => execFileSync("git", args, { encoding: "utf8" });
+var defaultGit = (args) => execFileSync2("git", args, { encoding: "utf8" });
 function tagExists(repo, tag, git) {
   try {
     git(["-C", repo, "rev-parse", "-q", "--verify", `refs/tags/${tag}`]);
@@ -1619,7 +1635,7 @@ function materializeTemplateAtTag(repo, version, git = defaultGit) {
   const tarball = join7(dir, ".tree.tar");
   try {
     git(["-C", repo, "archive", "--format=tar", "-o", tarball, tag]);
-    execFileSync("tar", ["-x", "-f", tarball, "-C", dir]);
+    execFileSync2("tar", ["-x", "-f", tarball, "-C", dir]);
     rmSync3(tarball, { force: true });
   } catch (err) {
     rmSync3(dir, { recursive: true, force: true });
@@ -1629,7 +1645,7 @@ function materializeTemplateAtTag(repo, version, git = defaultGit) {
 }
 
 // src/lib/breaking-changes.ts
-import { existsSync as existsSync6, readFileSync as readFileSync5 } from "fs";
+import { existsSync as existsSync7, readFileSync as readFileSync5 } from "fs";
 import { join as join8 } from "path";
 var UPGRADE_GUIDE_PATH = "docs/guides/core-upgrade.md";
 var SECTION_HEADING = "## Breaking changes by version";
@@ -1656,7 +1672,7 @@ function parseBreakingChanges(guide) {
 }
 function readBreakingChanges(templateRoot) {
   const path = join8(templateRoot, UPGRADE_GUIDE_PATH);
-  if (!existsSync6(path)) return [];
+  if (!existsSync7(path)) return [];
   return parseBreakingChanges(readFileSync5(path, "utf8"));
 }
 function breakingChangesBetween(from, to, entries) {
@@ -1674,7 +1690,7 @@ var GLOBAL_DISPATCH_WORKFLOW_PATHS = [
 ];
 
 // src/lib/plugin-terraform-wiring.ts
-import { existsSync as existsSync7, mkdirSync as mkdirSync3, readFileSync as readFileSync6, readdirSync as readdirSync3, rmSync as rmSync4, writeFileSync as writeFileSync4 } from "fs";
+import { existsSync as existsSync8, mkdirSync as mkdirSync3, readFileSync as readFileSync6, readdirSync as readdirSync3, rmSync as rmSync4, writeFileSync as writeFileSync4 } from "fs";
 import { join as join9 } from "path";
 var TEMPLATE_MODULE_DIR = "_template";
 var DEFAULT_PLUGIN_HANDLER = "src.lambda.main.handler";
@@ -1705,7 +1721,7 @@ function listPluginModules(cwd) {
 var FIRST_PARTY_TERRAFORM = (name) => `../../../services/_plugins/${name}/terraform`;
 var THIRD_PARTY_TERRAFORM = (name) => `../../../modules/plugins/${name}`;
 function isFirstPartyPlugin(cwd, name) {
-  return existsSync7(join9(cwd, "services", "_plugins", name, "terraform", "main.tf"));
+  return existsSync8(join9(cwd, "services", "_plugins", name, "terraform", "main.tf"));
 }
 function pluginModuleSource(cwd, name) {
   return isFirstPartyPlugin(cwd, name) ? FIRST_PARTY_TERRAFORM(name) : THIRD_PARTY_TERRAFORM(name);
@@ -1738,7 +1754,7 @@ function listEnvironments(cwd) {
     return [];
   }
   return entries.filter((e) => {
-    if (!e.isDirectory() || !existsSync7(join9(dir, e.name, "main.tf"))) return false;
+    if (!e.isDirectory() || !existsSync8(join9(dir, e.name, "main.tf"))) return false;
     return declaredVariables(join9(dir, e.name)).has("enabled_plugins");
   }).map((e) => e.name).sort();
 }
@@ -1751,7 +1767,7 @@ function listUnwirableEnvironments(cwd) {
     return [];
   }
   return entries.filter(
-    (e) => e.isDirectory() && existsSync7(join9(dir, e.name, "main.tf")) && !declaredVariables(join9(dir, e.name)).has("enabled_plugins")
+    (e) => e.isDirectory() && existsSync8(join9(dir, e.name, "main.tf")) && !declaredVariables(join9(dir, e.name)).has("enabled_plugins")
   ).map((e) => e.name).sort();
 }
 function declaredVariables(moduleDir) {
@@ -1860,7 +1876,7 @@ function syncPluginTerraform(cwd) {
         [tfPath, `${relBase}/${GENERATED_TF_FILE}`],
         [tfvarsPath, `${relBase}/${GENERATED_TFVARS_FILE}`]
       ]) {
-        if (existsSync7(abs)) {
+        if (existsSync8(abs)) {
           rmSync4(abs);
           changedPaths.push(rel);
         }
@@ -1876,7 +1892,7 @@ function syncPluginTerraform(cwd) {
 }
 
 // src/lib/lockfile-refresh.ts
-import { existsSync as existsSync8 } from "fs";
+import { existsSync as existsSync9 } from "fs";
 import { join as join10 } from "path";
 var LOCKFILE_TRIGGERS = [
   {
@@ -1900,7 +1916,7 @@ function lockfilesNeedingRefresh(changedPaths, instanceDir, triggers = LOCKFILE_
   const locked = changedPaths.filter((p) => !isForeignManifest(p));
   return triggers.filter((t) => {
     const touched = locked.some((p) => p === t.manifest || p.endsWith(`/${t.manifest}`));
-    return touched && existsSync8(join10(instanceDir, t.lockfile));
+    return touched && existsSync9(join10(instanceDir, t.lockfile));
   });
 }
 async function refreshLockfiles(instanceDir, triggers, run) {
@@ -1993,9 +2009,9 @@ async function runCoreUpgradeResolved(options, deps, cleanups) {
   let toVersion;
   if (options.theirsDir) {
     theirsDir = options.theirsDir;
-    toVersion = readCoreVersionFile(join11(theirsDir, "core.version"));
+    toVersion = versionOfCheckout(theirsDir, options.toVersion);
   } else {
-    const workingVersion = readCoreVersionFile(join11(templateRepo, "core.version"));
+    const workingVersion = latestCoreVersion(templateRepo);
     toVersion = options.toVersion ?? workingVersion;
     if (toVersion === workingVersion) {
       theirsDir = templateRepo;
@@ -2009,7 +2025,7 @@ async function runCoreUpgradeResolved(options, deps, cleanups) {
   let fromVersion;
   if (options.baseDir) {
     baseDir = options.baseDir;
-    fromVersion = readCoreVersionFile(join11(baseDir, "core.version"));
+    fromVersion = versionOfCheckout(baseDir, void 0);
   } else {
     if (instanceVersion === null) {
       throw new Error(
@@ -2293,6 +2309,23 @@ function printBreakingChanges(breaking, applying) {
     );
   }
 }
+function versionOfCheckout(dir, explicit) {
+  if (explicit) return explicit;
+  const file = join11(dir, CORE_VERSION_FILE);
+  if (existsSync10(file)) return readCoreVersionFile(file);
+  throw new Error(
+    `Cannot determine the core version of ${dir}: it has no ${CORE_VERSION_FILE}, and a checkout supplied explicitly is not resolved from a tag. Pass --to to state which version this tree is.`
+  );
+}
+function latestCoreVersion(repo) {
+  const fromTags = latestCoreVersionFromTags(repo);
+  if (fromTags) return fromTags;
+  const file = join11(repo, CORE_VERSION_FILE);
+  if (existsSync10(file)) return readCoreVersionFile(file);
+  throw new Error(
+    `Cannot determine the template's core version: ${repo} has no core-v* tags and no ${CORE_VERSION_FILE}. Fetch tags (\`git fetch --tags\`) or pass --to explicitly.`
+  );
+}
 
 // src/commands/core.ts
 var coreCommand = new Command4("core").description(
@@ -2306,7 +2339,7 @@ coreCommand.addCommand(coreUpgradeCommand);
 import { Command as Command8 } from "commander";
 
 // src/commands/data-apply.ts
-import { existsSync as existsSync10, readFileSync as readFileSync8 } from "fs";
+import { existsSync as existsSync12, readFileSync as readFileSync8 } from "fs";
 import { resolve as resolve4 } from "path";
 import chalk5 from "chalk";
 import { Command as Command5 } from "commander";
@@ -2757,7 +2790,7 @@ function isTemplatePlaceholderConfig(raw) {
 
 // src/lib/session.ts
 import {
-  existsSync as existsSync9,
+  existsSync as existsSync11,
   mkdirSync as mkdirSync4,
   readdirSync as readdirSync4,
   readFileSync as readFileSync7,
@@ -2782,7 +2815,7 @@ function sessionPath(projectName) {
 }
 function loadSession(projectName) {
   const path = sessionPath(projectName);
-  if (!existsSync9(path)) return null;
+  if (!existsSync11(path)) return null;
   try {
     return JSON.parse(readFileSync7(path, "utf8"));
   } catch {
@@ -2791,12 +2824,12 @@ function loadSession(projectName) {
 }
 function findLatestSession() {
   const dir = sessionsDir();
-  if (!existsSync9(dir)) return null;
+  if (!existsSync11(dir)) return null;
   const files = readdirSync4(dir).filter((f) => f.endsWith(".json"));
   if (files.length === 0) return null;
   const sorted = files.map((f) => {
     const fullPath = join12(dir, f);
-    const mtime = existsSync9(fullPath) ? statSync(fullPath).mtimeMs : -1;
+    const mtime = existsSync11(fullPath) ? statSync(fullPath).mtimeMs : -1;
     return { f, mtime };
   }).sort((a, b) => b.mtime - a.mtime);
   try {
@@ -2807,7 +2840,7 @@ function findLatestSession() {
 }
 function saveSession(session) {
   const dir = sessionsDir();
-  if (!existsSync9(dir)) mkdirSync4(dir, { recursive: true });
+  if (!existsSync11(dir)) mkdirSync4(dir, { recursive: true });
   const name = session.config.project?.name ?? "unknown";
   const prior = loadSession(name);
   if (prior) {
@@ -2829,19 +2862,19 @@ function markStepComplete(session, step) {
 }
 function deleteSession(projectName) {
   const path = sessionPath(projectName);
-  if (existsSync9(path)) rmSync5(path);
+  if (existsSync11(path)) rmSync5(path);
 }
 function projectsDir() {
   return process.env["BIFFO_PROJECTS_DIR"] ?? join12(homedir(), ".biffo", "projects");
 }
 function saveProjectConfig(config) {
   const dir = projectsDir();
-  if (!existsSync9(dir)) mkdirSync4(dir, { recursive: true });
+  if (!existsSync11(dir)) mkdirSync4(dir, { recursive: true });
   writeFileSync5(join12(dir, `${config.project.name}.json`), JSON.stringify(config, null, 2));
 }
 function loadProjectConfig(name) {
   const path = join12(projectsDir(), `${name}.json`);
-  if (!existsSync9(path)) return null;
+  if (!existsSync11(path)) return null;
   try {
     const result = BiffoConfigSchema.safeParse(JSON.parse(readFileSync7(path, "utf8")));
     return result.success ? result.data : null;
@@ -2851,11 +2884,11 @@ function loadProjectConfig(name) {
 }
 function deleteProjectConfig(name) {
   const path = join12(projectsDir(), `${name}.json`);
-  if (existsSync9(path)) rmSync5(path);
+  if (existsSync11(path)) rmSync5(path);
 }
 function listProjectConfigs() {
   const dir = projectsDir();
-  if (!existsSync9(dir)) return [];
+  if (!existsSync11(dir)) return [];
   return readdirSync4(dir).filter((f) => f.endsWith(".json")).flatMap((f) => {
     try {
       const result = BiffoConfigSchema.safeParse(JSON.parse(readFileSync7(join12(dir, f), "utf8")));
@@ -2947,7 +2980,7 @@ async function resolveConfig(options) {
     return cfg;
   }
   const localConfigPath = resolve4(process.cwd(), "biffo.config.json");
-  if (existsSync10(localConfigPath)) {
+  if (existsSync12(localConfigPath)) {
     const raw = JSON.parse(readFileSync8(localConfigPath, "utf8"));
     const result = BiffoConfigSchema.safeParse(raw);
     if (result.success) return result.data;
@@ -2994,7 +3027,7 @@ async function resolveConfig(options) {
 
 // src/commands/data-import.ts
 import { execSync as execSync3 } from "child_process";
-import { cpSync, existsSync as existsSync11, mkdirSync as mkdirSync5, readdirSync as readdirSync5, statSync as statSync2 } from "fs";
+import { cpSync, existsSync as existsSync13, mkdirSync as mkdirSync5, readdirSync as readdirSync5, statSync as statSync2 } from "fs";
 import { join as join13, resolve as resolve5 } from "path";
 import chalk6 from "chalk";
 import { Command as Command6 } from "commander";
@@ -3036,18 +3069,18 @@ async function runDataImport(name, options, deps) {
     );
   }
   const servicesDir = join13(options.cwd, "services");
-  if (!existsSync11(servicesDir)) {
+  if (!existsSync13(servicesDir)) {
     throw new Error(
       `${servicesDir} does not exist \u2014 is ${options.cwd} the root of a Biffo project checkout?`
     );
   }
   const targetDir = join13(options.cwd, "db", "imports", name);
-  if (existsSync11(targetDir)) {
+  if (existsSync13(targetDir)) {
     throw new Error(
       `DDL import '${name}' is already present at db/imports/${name}/. Remove it first to re-import.`
     );
   }
-  const isLocalDir = existsSync11(options.source) && statSync2(options.source).isDirectory();
+  const isLocalDir = existsSync13(options.source) && statSync2(options.source).isDirectory();
   let sourceDir;
   let cleanupClone = null;
   if (isLocalDir) {
@@ -3062,7 +3095,7 @@ async function runDataImport(name, options, deps) {
     sourceDir = options.path ? join13(tmpDir, options.path) : tmpDir;
   }
   try {
-    if (!existsSync11(sourceDir)) {
+    if (!existsSync13(sourceDir)) {
       throw new Error(`Source directory does not exist: ${sourceDir}`);
     }
     const sqlFiles = readdirSync5(sourceDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".sql")).map((entry) => entry.name).sort();
@@ -3139,7 +3172,7 @@ function printDryRun(name, sqlFiles) {
 }
 
 // src/commands/data-list.ts
-import { existsSync as existsSync12, readdirSync as readdirSync6 } from "fs";
+import { existsSync as existsSync14, readdirSync as readdirSync6 } from "fs";
 import { join as join14, resolve as resolve6 } from "path";
 import chalk7 from "chalk";
 import { Command as Command7 } from "commander";
@@ -3154,7 +3187,7 @@ var dataListCommand = new Command7("list").description("List DDL imports vendore
 });
 async function runDataList(options) {
   const importsDir = join14(options.cwd, "db", "imports");
-  if (!existsSync12(importsDir)) {
+  if (!existsSync14(importsDir)) {
     console.log(chalk7.dim("\n  No DDL imports in this checkout.\n"));
     return;
   }
@@ -3191,7 +3224,7 @@ dataCommand.addCommand(dataListCommand);
 
 // src/commands/deploy.ts
 import { execSync as execSync4 } from "child_process";
-import { existsSync as existsSync13, readFileSync as readFileSync9 } from "fs";
+import { existsSync as existsSync15, readFileSync as readFileSync9 } from "fs";
 import { resolve as resolve7 } from "path";
 import chalk8 from "chalk";
 import { Command as Command9 } from "commander";
@@ -3565,7 +3598,7 @@ async function resolveConfig2(options) {
     return cfg;
   }
   const localConfigPath = resolve7(process.cwd(), "biffo.config.json");
-  if (existsSync13(localConfigPath)) {
+  if (existsSync15(localConfigPath)) {
     const raw = JSON.parse(readFileSync9(localConfigPath, "utf8"));
     const result = BiffoConfigSchema.safeParse(raw);
     if (result.success) return result.data;
@@ -4117,7 +4150,7 @@ import { Command as Command12 } from "commander";
 import inquirer5 from "inquirer";
 
 // src/lib/build-freshness.ts
-import { existsSync as existsSync14, readdirSync as readdirSync7, statSync as statSync3 } from "fs";
+import { existsSync as existsSync16, readdirSync as readdirSync7, statSync as statSync3 } from "fs";
 import { dirname as dirname5, join as join15, relative as relative2, sep as sep2 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 var SKIP_ENV_VAR = "BIFFO_SKIP_BUILD_FRESHNESS_CHECK";
@@ -4141,7 +4174,7 @@ function checkBuildFreshness(options = {}) {
     };
   }
   const srcDir = join15(packageRoot, "src");
-  if (!existsSync14(srcDir)) {
+  if (!existsSync16(srcDir)) {
     return {
       status: "skipped",
       reason: "no src/ alongside dist/ \u2014 this is a shipped package",
@@ -4149,7 +4182,7 @@ function checkBuildFreshness(options = {}) {
     };
   }
   const entry = join15(distDir, "index.js");
-  if (!existsSync14(entry)) {
+  if (!existsSync16(entry)) {
     return { status: "skipped", reason: `${entry} not found`, newerSources: [] };
   }
   const builtAt = statSync3(entry).mtimeMs;
@@ -4212,7 +4245,7 @@ function collectSourceFiles(srcDir) {
 function findPackageRoot(from) {
   let dir = from;
   for (; ; ) {
-    if (existsSync14(join15(dir, "package.json"))) return dir;
+    if (existsSync16(join15(dir, "package.json"))) return dir;
     const parent = dirname5(dir);
     if (parent === dir) return null;
     dir = parent;
@@ -4226,7 +4259,7 @@ function isInside(parent, child) {
 
 // src/lib/credentials.ts
 import { execSync as execSync6 } from "child_process";
-import { existsSync as existsSync15, readFileSync as readFileSync11 } from "fs";
+import { existsSync as existsSync17, readFileSync as readFileSync11 } from "fs";
 import { homedir as homedir2 } from "os";
 import { join as join16 } from "path";
 import { GetCallerIdentityCommand as GetCallerIdentityCommand2, STSClient as STSClient2 } from "@aws-sdk/client-sts";
@@ -4410,7 +4443,7 @@ function discoverAwsProfiles() {
   const files = [join16(homedir2(), ".aws", "credentials"), join16(homedir2(), ".aws", "config")];
   const profiles = /* @__PURE__ */ new Set();
   for (const file of files) {
-    if (!existsSync15(file)) continue;
+    if (!existsSync17(file)) continue;
     const content = readFileSync11(file, "utf8");
     for (const match of content.matchAll(/^\s*\[([^\]]+)\]\s*$/gm)) {
       const section = match[1]?.trim();
@@ -4501,7 +4534,7 @@ var SiblingConfigSchema = z4.object({
 
 // src/lib/sibling-session.ts
 import {
-  existsSync as existsSync16,
+  existsSync as existsSync18,
   mkdirSync as mkdirSync6,
   readdirSync as readdirSync8,
   readFileSync as readFileSync12,
@@ -4519,7 +4552,7 @@ function sessionPath2(projectName) {
 }
 function loadSiblingSession(projectName) {
   const path = sessionPath2(projectName);
-  if (!existsSync16(path)) return null;
+  if (!existsSync18(path)) return null;
   try {
     return JSON.parse(readFileSync12(path, "utf8"));
   } catch {
@@ -4528,7 +4561,7 @@ function loadSiblingSession(projectName) {
 }
 function saveSiblingSession(session) {
   const dir = sessionsDir2();
-  if (!existsSync16(dir)) mkdirSync6(dir, { recursive: true });
+  if (!existsSync18(dir)) mkdirSync6(dir, { recursive: true });
   const name = session.config.project?.name ?? "unknown";
   const prior = loadSiblingSession(name);
   if (prior) {
@@ -4550,11 +4583,11 @@ function markSiblingStepComplete(session, step) {
 }
 function deleteSiblingSession(projectName) {
   const path = sessionPath2(projectName);
-  if (existsSync16(path)) rmSync6(path);
+  if (existsSync18(path)) rmSync6(path);
 }
 
 // src/commands/sibling-create.ts
-import { cpSync as cpSync2, existsSync as existsSync17, mkdirSync as mkdirSync7, mkdtempSync as mkdtempSync4, readFileSync as readFileSync13, writeFileSync as writeFileSync7 } from "fs";
+import { cpSync as cpSync2, existsSync as existsSync19, mkdirSync as mkdirSync7, mkdtempSync as mkdtempSync4, readFileSync as readFileSync13, writeFileSync as writeFileSync7 } from "fs";
 import { tmpdir as tmpdir4 } from "os";
 import { dirname as dirname6, join as join19, resolve as resolve9 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
@@ -4618,7 +4651,7 @@ async function runSiblingCreateCommand(name, options) {
     printDryRun2(config, coreConfig, options.templateRoot);
     return;
   }
-  if (!existsSync17(options.templateRoot)) {
+  if (!existsSync19(options.templateRoot)) {
     throw new Error(`Sibling template not found at ${options.templateRoot}`);
   }
   let session = null;
@@ -4892,7 +4925,7 @@ async function pushSkeleton(git, skeletonRoot, cloneUrl, config, coreConfig, git
   }
 }
 function writeSiblingTemplate(templateRoot, targetDir, config, context) {
-  if (!existsSync17(templateRoot)) {
+  if (!existsSync19(templateRoot)) {
     throw new Error(`Sibling template not found at ${templateRoot}`);
   }
   cpSync2(templateRoot, targetDir, { recursive: true });
@@ -5098,7 +5131,7 @@ function defaultSiblingTemplateRoot() {
   let dir = start;
   for (; ; ) {
     const candidate = join19(dir, "_skeletons", "sibling-template");
-    if (existsSync17(candidate)) return candidate;
+    if (existsSync19(candidate)) return candidate;
     const parent = dirname6(dir);
     if (parent === dir) break;
     dir = parent;
@@ -5555,14 +5588,14 @@ async function promptForConfig(awsAccountId, awsRegion, awsProfile) {
 import { Command as Command20 } from "commander";
 
 // src/commands/plugin-create.ts
-import { existsSync as existsSync20, readFileSync as readFileSync16 } from "fs";
+import { existsSync as existsSync22, readFileSync as readFileSync16 } from "fs";
 import { dirname as dirname8, join as join22, resolve as resolve11 } from "path";
 import { fileURLToPath as fileURLToPath5 } from "url";
 import chalk13 from "chalk";
 import { Command as Command13 } from "commander";
 
 // src/lib/plugin-locations.ts
-import { existsSync as existsSync18, readdirSync as readdirSync10 } from "fs";
+import { existsSync as existsSync20, readdirSync as readdirSync10 } from "fs";
 import { join as join20 } from "path";
 var FIRST_PARTY_PLUGINS_DIR = "_plugins";
 var PLUGIN_MANIFEST_FILE = "biffo.plugin.json";
@@ -5570,13 +5603,13 @@ function pluginDir(name, channel) {
   return channel === "first-party" ? `services/${FIRST_PARTY_PLUGINS_DIR}/${name}` : `services/${name}`;
 }
 function scanDir(absDir, relDir, channel) {
-  if (!existsSync18(absDir)) return [];
+  if (!existsSync20(absDir)) return [];
   const found = [];
   for (const entry of readdirSync10(absDir, { withFileTypes: true })) {
     if (!entry.isDirectory()) continue;
     if (channel === "third-party" && entry.name === FIRST_PARTY_PLUGINS_DIR) continue;
     const manifestPath = join20(absDir, entry.name, PLUGIN_MANIFEST_FILE);
-    if (!existsSync18(manifestPath)) continue;
+    if (!existsSync20(manifestPath)) continue;
     found.push({
       dirName: entry.name,
       relDir: `${relDir}/${entry.name}`,
@@ -5751,7 +5784,7 @@ function validateManifest(raw) {
 // src/lib/plugin-scaffold.ts
 import {
   copyFileSync,
-  existsSync as existsSync19,
+  existsSync as existsSync21,
   mkdirSync as mkdirSync8,
   readFileSync as readFileSync15,
   readdirSync as readdirSync11,
@@ -5810,10 +5843,10 @@ function applySubstitutions(text, names) {
 }
 var BINARY_EXTENSIONS = /\.(png|jpe?g|gif|ico|woff2?|ttf|zip|gz)$/i;
 function scaffoldPlugin(skeletonRoot, destDir, names) {
-  if (!existsSync19(skeletonRoot)) {
+  if (!existsSync21(skeletonRoot)) {
     throw new Error(`Plugin skeleton not found at ${skeletonRoot}`);
   }
-  if (!existsSync19(join21(skeletonRoot, "terraform"))) {
+  if (!existsSync21(join21(skeletonRoot, "terraform"))) {
     throw new Error(
       `Plugin skeleton at ${skeletonRoot} has no terraform/ directory. Refusing to scaffold a plugin that cannot receive events (issue #194) \u2014 the skeleton is broken.`
     );
@@ -5861,7 +5894,7 @@ function findSkeletonRoot(startDir, skeleton) {
   let dir = startDir;
   for (; ; ) {
     const candidate = join21(dir, "_skeletons", skeleton);
-    if (existsSync19(candidate)) return candidate;
+    if (existsSync21(candidate)) return candidate;
     const parent = dirname7(dir);
     if (parent === dir) return null;
     dir = parent;
@@ -5898,7 +5931,7 @@ var pluginCreateCommand = new Command13("create").description("Scaffold a new pl
 );
 async function runPluginCreate(name, options, deps) {
   const names = deriveNames(name);
-  const isInstance = existsSync20(join22(options.cwd, INSTANCE_CORE_FILE));
+  const isInstance = existsSync22(join22(options.cwd, INSTANCE_CORE_FILE));
   if (options.firstParty && isInstance) {
     throw new Error(
       `--first-party scaffolds into services/_plugins/, which is template-owned: \`biffo core upgrade\` three-way-merges it against the template on every upgrade, and the template has no '${names.slug}'. This checkout is a Biffo instance (${INSTANCE_CORE_FILE} is present), so your plugin belongs in the user-owned ${pluginDir(names.slug, "third-party")}/ \u2014 re-run without --first-party.`
@@ -5908,17 +5941,17 @@ async function runPluginCreate(name, options, deps) {
   const relDir = pluginDir(names.slug, channel);
   const destDir = join22(options.cwd, relDir);
   const servicesDir = join22(options.cwd, "services");
-  if (!existsSync20(servicesDir)) {
+  if (!existsSync22(servicesDir)) {
     throw new Error(
       `${servicesDir} does not exist \u2014 is ${options.cwd} the root of a Biffo project checkout?`
     );
   }
-  if (existsSync20(destDir)) {
+  if (existsSync22(destDir)) {
     throw new Error(`${relDir}/ already exists. Choose a different name, or remove it first.`);
   }
   const here = dirname8(fileURLToPath5(import.meta.url));
   const skeletonRoot = options.skeletonRoot ?? findSkeletonRoot(here, "plugin-template") ?? join22(options.cwd, "_skeletons", "plugin-template");
-  if (!existsSync20(skeletonRoot)) {
+  if (!existsSync22(skeletonRoot)) {
     throw new Error(
       `Could not find the plugin skeleton (_skeletons/plugin-template/). Pass --skeleton <path> to point at it explicitly.`
     );
@@ -6124,7 +6157,7 @@ function printEntry(entry) {
 }
 
 // src/commands/plugin-install.ts
-import { cpSync as cpSync3, existsSync as existsSync21, mkdirSync as mkdirSync9, readFileSync as readFileSync17, statSync as statSync5 } from "fs";
+import { cpSync as cpSync3, existsSync as existsSync23, mkdirSync as mkdirSync9, readFileSync as readFileSync17, statSync as statSync5 } from "fs";
 import { basename, join as join24, relative as relative3, resolve as resolve12 } from "path";
 import chalk15 from "chalk";
 import { Command as Command15 } from "commander";
@@ -6213,14 +6246,14 @@ var LOCAL_COPY_EXCLUDES = /* @__PURE__ */ new Set([
   ".terraform"
 ]);
 function resolveLocalPlugin(localPath) {
-  if (!existsSync21(localPath)) {
+  if (!existsSync23(localPath)) {
     throw new Error(`--local path does not exist: ${localPath}`);
   }
   if (!statSync5(localPath).isDirectory()) {
     throw new Error(`--local path is not a directory: ${localPath}`);
   }
   const manifestPath = join24(localPath, "biffo.plugin.json");
-  if (!existsSync21(manifestPath)) {
+  if (!existsSync23(manifestPath)) {
     throw new Error(
       `${localPath} does not contain a biffo.plugin.json manifest at its root \u2014 is it a plugin directory? (Scaffold one with \`biffo plugin create <name>\`.)`
     );
@@ -6247,7 +6280,7 @@ async function cloneAndValidatePlugin(entry, git) {
   const tmpDir = await git.cloneToTemp(entry.repo, `biffo-plugin-${entry.name}`);
   try {
     const manifestPath = join24(tmpDir, "biffo.plugin.json");
-    if (!existsSync21(manifestPath)) {
+    if (!existsSync23(manifestPath)) {
       throw new Error(
         `Plugin repo ${entry.repo} does not contain a biffo.plugin.json manifest at its root.`
       );
@@ -6276,7 +6309,7 @@ async function runPluginInstall(target, options, deps) {
     );
   }
   const servicesDir = join24(options.cwd, "services");
-  if (!existsSync21(servicesDir)) {
+  if (!existsSync23(servicesDir)) {
     throw new Error(
       `${servicesDir} does not exist \u2014 is ${options.cwd} the root of a Biffo project checkout?`
     );
@@ -6297,7 +6330,7 @@ async function runPluginInstall(target, options, deps) {
   const targetDir = join24(options.cwd, relTargetDir);
   const modulesDir = join24(options.cwd, "modules", "plugins", pluginName);
   const inTreeSource = options.local !== void 0 && resolve12(options.local) === resolve12(targetDir);
-  if (existsSync21(targetDir) && !inTreeSource) {
+  if (existsSync23(targetDir) && !inTreeSource) {
     throw new Error(
       `Plugin '${pluginName}' is already installed at ${relTargetDir}/. Remove it first, or wait for a future 'biffo plugin upgrade' command.`
     );
@@ -6341,7 +6374,7 @@ async function runPluginInstall(target, options, deps) {
     }
     const stagePaths = [relTargetDir];
     const tfSourceDir = join24(targetDir, "terraform");
-    if (existsSync21(tfSourceDir)) {
+    if (existsSync23(tfSourceDir)) {
       mkdirSync9(modulesDir, { recursive: true });
       cpSync3(tfSourceDir, modulesDir, { recursive: true });
       stagePaths.push(`modules/plugins/${pluginName}`);
@@ -6435,7 +6468,7 @@ function printDryRun4(entry, source, relTargetDir, inTreeSource) {
 }
 
 // src/commands/plugin-list.ts
-import { existsSync as existsSync22, readFileSync as readFileSync18 } from "fs";
+import { existsSync as existsSync24, readFileSync as readFileSync18 } from "fs";
 import { join as join25, resolve as resolve13 } from "path";
 import chalk16 from "chalk";
 import { Command as Command16 } from "commander";
@@ -6450,7 +6483,7 @@ var pluginListCommand = new Command16("list").description("List plugins installe
 });
 async function runPluginList(options) {
   const servicesDir = join25(options.cwd, "services");
-  if (!existsSync22(servicesDir)) {
+  if (!existsSync24(servicesDir)) {
     throw new Error(
       `${servicesDir} does not exist \u2014 is ${options.cwd} the root of a Biffo project checkout?`
     );
@@ -6495,7 +6528,7 @@ async function runPluginList(options) {
 }
 
 // src/commands/plugin-sync-migrations.ts
-import { existsSync as existsSync23 } from "fs";
+import { existsSync as existsSync25 } from "fs";
 import { join as join26, relative as relative4, resolve as resolve14 } from "path";
 import chalk17 from "chalk";
 import { Command as Command17 } from "commander";
@@ -6518,10 +6551,10 @@ var pluginSyncMigrationsCommand = new Command17("sync-migrations").description(
 );
 async function runPluginSyncMigrations(name, options, deps) {
   const servicesDir = join26(options.cwd, "services");
-  if (!existsSync23(servicesDir)) {
+  if (!existsSync25(servicesDir)) {
     throw new Error(`${servicesDir} does not exist \u2014 is ${options.cwd} a Biffo project checkout?`);
   }
-  if (name && !existsSync23(join26(servicesDir, name, "biffo.plugin.json"))) {
+  if (name && !existsSync25(join26(servicesDir, name, "biffo.plugin.json"))) {
     throw new Error(`Plugin '${name}' is not installed at services/${name}/.`);
   }
   if (options.dryRun) {
@@ -6557,7 +6590,7 @@ async function runPluginSyncMigrations(name, options, deps) {
 }
 
 // src/commands/plugin-uninstall.ts
-import { existsSync as existsSync24, readFileSync as readFileSync19, rmSync as rmSync7 } from "fs";
+import { existsSync as existsSync26, readFileSync as readFileSync19, rmSync as rmSync7 } from "fs";
 import { join as join27, resolve as resolve15 } from "path";
 import chalk18 from "chalk";
 import { Command as Command18 } from "commander";
@@ -6591,15 +6624,15 @@ async function runPluginUninstall(name, options, deps) {
     throw new Error(`Invalid plugin name '${name}'. Expected a lowercase kebab-case slug.`);
   }
   const servicesDir = join27(options.cwd, "services");
-  if (!existsSync24(servicesDir)) {
+  if (!existsSync26(servicesDir)) {
     throw new Error(
       `${servicesDir} does not exist \u2014 is ${options.cwd} the root of a Biffo project checkout?`
     );
   }
   const targetDir = join27(servicesDir, name);
-  if (!existsSync24(targetDir)) {
+  if (!existsSync26(targetDir)) {
     const firstParty = join27(servicesDir, FIRST_PARTY_PLUGINS_DIR, name);
-    if (existsSync24(firstParty)) {
+    if (existsSync26(firstParty)) {
       throw new Error(
         `Plugin '${name}' is a first-party plugin at ${pluginDir(name, "first-party")}/, which is template-owned \u2014 \`biffo core upgrade\` would restore it on the next upgrade. Disable it instead by removing '${name}' from \`enabled_plugins\` in infra/environments/<env>/main.tf and re-applying.`
       );
@@ -6609,7 +6642,7 @@ async function runPluginUninstall(name, options, deps) {
   const version = readInstalledVersion(targetDir);
   const modulesDir = join27(options.cwd, "modules", "plugins", name);
   const stagePaths = [`services/${name}`];
-  if (existsSync24(modulesDir)) {
+  if (existsSync26(modulesDir)) {
     stagePaths.push(`modules/plugins/${name}`);
   }
   if (options.dryRun) {
@@ -6631,7 +6664,7 @@ async function runPluginUninstall(name, options, deps) {
   }
   rmSync7(targetDir, { recursive: true, force: true });
   log.success(`Removed services/${name}/`);
-  if (existsSync24(modulesDir)) {
+  if (existsSync26(modulesDir)) {
     rmSync7(modulesDir, { recursive: true, force: true });
     log.success(`Removed modules/plugins/${name}/`);
     const wiring = syncPluginTerraform(options.cwd);
@@ -6669,7 +6702,7 @@ async function runPluginUninstall(name, options, deps) {
 }
 function readInstalledVersion(targetDir) {
   const manifestPath = join27(targetDir, "biffo.plugin.json");
-  if (!existsSync24(manifestPath)) return void 0;
+  if (!existsSync26(manifestPath)) return void 0;
   try {
     return validateManifest(JSON.parse(readFileSync19(manifestPath, "utf8"))).version;
   } catch {
@@ -6704,7 +6737,7 @@ function printDryRun5(name, version, stagePaths, keepData) {
 }
 
 // src/commands/plugin-upgrade.ts
-import { cpSync as cpSync4, existsSync as existsSync25, mkdirSync as mkdirSync10, readFileSync as readFileSync20, rmSync as rmSync8 } from "fs";
+import { cpSync as cpSync4, existsSync as existsSync27, mkdirSync as mkdirSync10, readFileSync as readFileSync20, rmSync as rmSync8 } from "fs";
 import { join as join28, relative as relative5, resolve as resolve16 } from "path";
 import chalk19 from "chalk";
 import { Command as Command19 } from "commander";
@@ -6731,13 +6764,13 @@ var pluginUpgradeCommand = new Command19("upgrade").description(
 async function runPluginUpgrade(target, options, deps) {
   const { name, minor } = parsePluginTarget(target);
   const servicesDir = join28(options.cwd, "services");
-  if (!existsSync25(servicesDir)) {
+  if (!existsSync27(servicesDir)) {
     throw new Error(
       `${servicesDir} does not exist \u2014 is ${options.cwd} the root of a Biffo project checkout?`
     );
   }
   const targetDir = join28(servicesDir, name);
-  if (!existsSync25(targetDir)) {
+  if (!existsSync27(targetDir)) {
     throw new Error(
       `Plugin '${name}' is not installed at services/${name}/. Use 'biffo plugin install ${name}@${minor}' instead.`
     );
@@ -6784,11 +6817,11 @@ async function runPluginUpgrade(target, options, deps) {
     cpSync4(tmpDir, targetDir, { recursive: true });
     log.success(`Upgraded plugin source at services/${entry.name}/`);
     const stagePaths = [`services/${entry.name}`];
-    if (existsSync25(modulesDir)) {
+    if (existsSync27(modulesDir)) {
       rmSync8(modulesDir, { recursive: true, force: true });
     }
     const tfSourceDir = join28(targetDir, "terraform");
-    if (existsSync25(tfSourceDir)) {
+    if (existsSync27(tfSourceDir)) {
       mkdirSync10(modulesDir, { recursive: true });
       cpSync4(tfSourceDir, modulesDir, { recursive: true });
       stagePaths.push(`modules/plugins/${entry.name}`);
@@ -6823,7 +6856,7 @@ async function runPluginUpgrade(target, options, deps) {
 }
 function readInstalledVersion2(targetDir) {
   const manifestPath = join28(targetDir, "biffo.plugin.json");
-  if (!existsSync25(manifestPath)) return void 0;
+  if (!existsSync27(manifestPath)) return void 0;
   try {
     return validateManifest(JSON.parse(readFileSync20(manifestPath, "utf8"))).version;
   } catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@biffo/cli",
-  "version": "0.58.1",
+  "version": "0.59.0",
   "description": "Biffo project scaffolding CLI",
   "license": "MIT",
   "type": "module",