@bitmagic/cli 0.1.61 → 0.1.62-dev.1

package/dist/project/context.d.ts

@@ -16,6 +16,15 @@ export interface ProjectMetadata {
      * documents for `defaultEnvironment`, and the reason this module must not import that table.
      */
     environment?: string;
+    /**
+     * Which agent tools this project is set up for. Absent on projects scaffolded before the field
+     * existed, which reads as the always-present set — see scaffold/agent-targets.ts.
+     *
+     * Typed `string[]` rather than `AgentId[]` for the same reason `environment` is typed `string`:
+     * this file is hand-editable, so a narrow type here would be a claim the parser cannot back.
+     * `readRecordedAgents` does the narrowing, and reports what it dropped.
+     */
+    agents?: string[];
 }
 export interface ProjectContext {
     root: string;
@@ -70,5 +79,9 @@ export declare function readProjectGameIdOrNull(startDir?: string): string | und
 /**
  * Resolves a tool from the PROJECT's node_modules, never the CLI's. The scaffold pins its own
  * typescript and vite; running a different copy would type-check against the wrong compiler.
+ *
+ * Windows gets `<name>.cmd` (or a real `<name>.exe`) rather than the extensionless file, which is
+ * a POSIX shell script there and spawns ENOENT. Run whatever this returns through
+ * `spawn-bin.ts` — a `.cmd` additionally needs a shell, and that is the one place that knows it.
  */
-export declare function projectBin(root: string, name: string): string;
+export declare function projectBin(root: string, name: string, platform?: string): string;

package/dist/project/context.js

@@ -20,7 +20,10 @@ const REQUIRED_STRING_FIELDS = [
  * review found a bare cast let malformed data through unnoticed.
  */
 function findMissingField(value) {
-    return REQUIRED_STRING_FIELDS.find((field) => typeof value[field] !== 'string' || value[field].length === 0);
+    return REQUIRED_STRING_FIELDS.find((field) => {
+        const entry = value[field];
+        return typeof entry !== 'string' || entry.length === 0;
+    });
 }
 /**
  * The nearest ancestor of `startDir` (itself included) holding `fileName`, or null at the root.
@@ -141,10 +144,20 @@ export function readProjectGameIdOrNull(startDir = process.cwd()) {
 /**
  * Resolves a tool from the PROJECT's node_modules, never the CLI's. The scaffold pins its own
  * typescript and vite; running a different copy would type-check against the wrong compiler.
+ *
+ * Windows gets `<name>.cmd` (or a real `<name>.exe`) rather than the extensionless file, which is
+ * a POSIX shell script there and spawns ENOENT. Run whatever this returns through
+ * `spawn-bin.ts` — a `.cmd` additionally needs a shell, and that is the one place that knows it.
  */
-export function projectBin(root, name) {
-    const binary = path.join(root, 'node_modules', '.bin', name);
-    if (!fs.existsSync(binary)) {
+export function projectBin(root, name, platform = process.platform) {
+    const dir = path.join(root, 'node_modules', '.bin');
+    // Order matters only in the impossible case of both existing; `.cmd` is what every package
+    // manager writes for a JS bin, so it is the one to prefer.
+    const candidates = platform === 'win32'
+        ? [`${name}.cmd`, `${name}.exe`, name]
+        : [name];
+    const binary = candidates.map((file) => path.join(dir, file)).find((file) => fs.existsSync(file));
+    if (binary === undefined) {
         // Names the project's OWN package manager: telling a pnpm project to run `npm install`
         // installs the tree under a different linker, and the next build fails on module
         // resolution instead — a worse failure than the one this message is trying to fix.

package/dist/project/context.js.map

@@ -1 +1 @@
-{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/project/context.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,gGAAgG;AAChG,4CAA4C;AAC5C,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AA2B/E,MAAM,MAAM,GAAG,eAAe,CAAC;AAE/B,MAAM,sBAAsB,GAA8B;IACxD,QAAQ;IACR,eAAe;IACf,OAAO;IACP,UAAU;CACX,CAAC;AAEF;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,KAA8B;IACtD,OAAO,sBAAsB,CAAC,IAAI,CAChC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAK,KAAK,CAAC,KAAK,CAAY,CAAC,MAAM,KAAK,CAAC,CACrF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAgB,EAChB,WAAmB,OAAO,CAAC,GAAG,EAAE;IAEhC,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,SAAS,CAAC;QACR,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,WAAmB,OAAO,CAAC,GAAG,EAAE;IACpE,OAAO,sBAAsB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAClD,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,eAAe,CAAC,WAAmB,OAAO,CAAC,GAAG,EAAE;IAC9D,MAAM,IAAI,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,QAAQ,CAChB,MAAM,MAAM,aAAa,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B;YACzE,8EAA8E,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,yDAAyD,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,qCAAqC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAiC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,WAAmB,OAAO,CAAC,GAAG,EAAE;IACjE,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,YAAY,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,eAAe,YAAY,GAAG,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAoC,EAAE,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CAAC,WAAmB,OAAO,CAAC,GAAG,EAAE;IACrE,MAAM,IAAI,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC;IAC3C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,QAAQ,CAChB,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,uDAAuD,CAClF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,WAAmB,OAAO,CAAC,GAAG,EAAE;IACtE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACpC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,IAAY;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,uFAAuF;QACvF,iFAAiF;QACjF,mFAAmF;QACnF,MAAM,IAAI,QAAQ,CAChB,iBAAiB,IAAI,qCAAqC;cACtD,SAAS,iBAAiB,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,SAAS,IAAI,SAAS,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/project/context.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,gGAAgG;AAChG,4CAA4C;AAC5C,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAoC/E,MAAM,MAAM,GAAG,eAAe,CAAC;AAE/B,MAAM,sBAAsB,GAA8B;IACxD,QAAQ;IACR,eAAe;IACf,OAAO;IACP,UAAU;CACX,CAAC;AAEF;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,KAA8B;IACtD,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAgB,EAChB,WAAmB,OAAO,CAAC,GAAG,EAAE;IAEhC,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,SAAS,CAAC;QACR,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,WAAmB,OAAO,CAAC,GAAG,EAAE;IACpE,OAAO,sBAAsB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAClD,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,eAAe,CAAC,WAAmB,OAAO,CAAC,GAAG,EAAE;IAC9D,MAAM,IAAI,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,QAAQ,CAChB,MAAM,MAAM,aAAa,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B;YACzE,8EAA8E,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,yDAAyD,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,qCAAqC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAiC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,WAAmB,OAAO,CAAC,GAAG,EAAE;IACjE,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,YAAY,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,eAAe,YAAY,GAAG,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAoC,EAAE,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CAAC,WAAmB,OAAO,CAAC,GAAG,EAAE;IACrE,MAAM,IAAI,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC;IAC3C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,QAAQ,CAChB,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,uDAAuD,CAClF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,WAAmB,OAAO,CAAC,GAAG,EAAE;IACtE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACpC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,IAAY,EAAE,WAAmB,OAAO,CAAC,QAAQ;IACxF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;IACpD,2FAA2F;IAC3F,2DAA2D;IAC3D,MAAM,UAAU,GAAG,QAAQ,KAAK,OAAO;QACrC,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,EAAE,GAAG,IAAI,MAAM,EAAE,IAAI,CAAC;QACtC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACX,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAClG,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,uFAAuF;QACvF,iFAAiF;QACjF,mFAAmF;QACnF,MAAM,IAAI,QAAQ,CAChB,iBAAiB,IAAI,qCAAqC;cACtD,SAAS,iBAAiB,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,SAAS,IAAI,SAAS,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/project/package-manager.js

@@ -12,9 +12,9 @@
  * Kept in `project/` rather than inside a command, because both `commands/upgrade.ts` and
  * `project/context.ts` need it and a command module must not be imported from `project/`.
  */
-import { spawnSync } from 'child_process';
 import * as fs from 'fs';
 import * as path from 'path';
+import { spawnPathCommandSync } from './spawn-bin.js';
 /**
  * Decide from the project's lockfile. npm is the fallback: it is what ships with Node, so it is
  * the right guess for a tree with no lockfile at all — one assembled by hand, or one whose
@@ -53,7 +53,7 @@ export function installAllCommand(manager) {
     return `${manager} install`;
 }
 function respondsToVersion(command) {
-    const result = spawnSync(command, ['--version'], { stdio: 'ignore' });
+    const result = spawnPathCommandSync(command, ['--version'], { stdio: 'ignore' });
     return result.error === undefined && result.status === 0;
 }
 /**

package/dist/project/package-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"package-manager.js","sourceRoot":"","sources":["../../src/project/package-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAI7B;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IACpE,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAC/D,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,OAAuB,EAAE,GAAY,EAAE,KAAe;IAC/E,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,YAAY,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;IAC1E,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,YAAY,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;IAC/E,OAAO,eAAe,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;AAC5D,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB,CAAC,OAAuB;IACvD,OAAO,GAAG,OAAO,UAAU,CAAC;AAC9B,CAAC;AAKD,SAAS,iBAAiB,CAAC,OAAe;IACxC,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtE,OAAO,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAsB,iBAAiB;IAC7E,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;AACxC,CAAC"}
+{"version":3,"file":"package-manager.js","sourceRoot":"","sources":["../../src/project/package-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAItD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IACpE,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAC/D,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,OAAuB,EAAE,GAAY,EAAE,KAAe;IAC/E,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,YAAY,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;IAC1E,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,YAAY,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;IAC/E,OAAO,eAAe,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;AAC5D,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB,CAAC,OAAuB;IACvD,OAAO,GAAG,OAAO,UAAU,CAAC;AAC9B,CAAC;AAKD,SAAS,iBAAiB,CAAC,OAAe;IACxC,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjF,OAAO,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAsB,iBAAiB;IAC7E,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;AACxC,CAAC"}

package/dist/project/spawn-bin.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Running a binary out of the project's `node_modules/.bin` — on Windows as well as POSIX.
+ *
+ * ── Why this is not just `spawn(bin, args)` ──────────────────────────────────────────────────
+ *
+ * `node_modules/.bin/tsc` is a POSIX shell script. Windows cannot execute it: every package
+ * manager writes a `tsc.cmd` next to it for that platform, and handing the extensionless path to
+ * `spawnSync` there fails with ENOENT before tsc is ever reached. `projectBin` picks the right
+ * file; this module runs it.
+ *
+ * Picking the `.cmd` is only half of it. Since the CVE-2024-27980 fix (Node 18.20.2 / 20.12.2),
+ * spawning a `.cmd` or `.bat` WITHOUT `shell: true` throws EINVAL — the shell is now mandatory for
+ * those, not an alternative to naming them. So on Windows the command and every argument are
+ * quoted for `cmd.exe` and the spawn is a shell spawn. `"` needs no escape because Windows forbids
+ * it in a path, and our own arguments are flags and paths; a literal `%` in a path can still be
+ * eaten by cmd's variable expansion, which has no command-line escape and which no Bitmagic path
+ * has ever contained.
+ *
+ * The shell brings one more consequence, which `stopChild` exists for: the child is `cmd.exe`, and
+ * killing it leaves the vite or tsc it launched running — holding `--strictPort` against the next
+ * `bitmagic dev`. Windows kills the tree instead.
+ *
+ * `spawnPathCommandSync` is the same defect one step out: a package manager looked up on PATH is
+ * `npm.cmd`/`pnpm.cmd` on Windows, and `spawnSync('pnpm', …)` there fails the same ENOENT way.
+ */
+import { spawnSync, type ChildProcess, type SpawnOptions, type SpawnSyncOptions } from 'child_process';
+/** How to hand a `.bin` entry to `child_process` on one platform. */
+export interface BinInvocation {
+    command: string;
+    args: string[];
+    shell: boolean;
+}
+/**
+ * Pure, so the Windows shape is testable from any machine — the same split `openerFor` uses.
+ *
+ * Only `.cmd`/`.bat` take the shell. A `.exe` (some packages ship a real one) and the POSIX
+ * extensionless script are executables the OS can launch directly, and routing those through
+ * cmd.exe would add the orphaned-child problem for nothing.
+ */
+export declare function binInvocation(bin: string, args: readonly string[], platform?: string): BinInvocation;
+/** `spawnSync` for a project binary. Same return value, so callers read `error`/`status` as before. */
+export declare function spawnBinSync(bin: string, args: readonly string[], options: SpawnSyncOptions): ReturnType<typeof spawnSync>;
+/** `spawn` for a project binary. Same `ChildProcess`, but stop it with `stopChild`, not `kill`. */
+export declare function spawnBin(bin: string, args: readonly string[], options: SpawnOptions): ChildProcess;
+/**
+ * Stops a child started by `spawnBin`, including anything it started.
+ *
+ * On Windows that child is the `cmd.exe` wrapper, so `kill` alone would orphan the real server;
+ * `taskkill /T` takes the tree.
+ *
+ * Throws whatever `kill` throws, exactly as the bare `child.kill('SIGTERM')` this replaced did —
+ * `killQuietly` in forge/voxelize-session.ts reports that rather than losing the command to it,
+ * and swallowing it here would silently take that report away.
+ */
+export declare function stopChild(child: ChildProcess, platform?: string): void;
+/**
+ * Runs a command looked up on PATH — a package manager, not a project binary.
+ *
+ * On Windows `npm`, `pnpm` and `yarn` are all `.cmd` shims, and `CreateProcess` (which is what a
+ * non-shell spawn ends at) cannot execute a batch file however it was named. cmd.exe resolves the
+ * PATHEXT extension itself, so the shell does double duty here: it finds the shim AND it is the
+ * `shell: true` the batch file needs anyway.
+ *
+ * An absolute path is spawned directly. `self-install.ts` runs npm as `process.execPath
+ * npm-cli.js` — a real executable with nothing for a shell to add.
+ */
+export declare function pathCommandInvocation(command: string, args: readonly string[], platform?: string): BinInvocation;
+/** `spawnSync` for a PATH command. Same return value, so callers read `error`/`status` as before. */
+export declare function spawnPathCommandSync(command: string, args: readonly string[], options: SpawnSyncOptions): ReturnType<typeof spawnSync>;

package/dist/project/spawn-bin.js

@@ -0,0 +1,96 @@
+/**
+ * Running a binary out of the project's `node_modules/.bin` — on Windows as well as POSIX.
+ *
+ * ── Why this is not just `spawn(bin, args)` ──────────────────────────────────────────────────
+ *
+ * `node_modules/.bin/tsc` is a POSIX shell script. Windows cannot execute it: every package
+ * manager writes a `tsc.cmd` next to it for that platform, and handing the extensionless path to
+ * `spawnSync` there fails with ENOENT before tsc is ever reached. `projectBin` picks the right
+ * file; this module runs it.
+ *
+ * Picking the `.cmd` is only half of it. Since the CVE-2024-27980 fix (Node 18.20.2 / 20.12.2),
+ * spawning a `.cmd` or `.bat` WITHOUT `shell: true` throws EINVAL — the shell is now mandatory for
+ * those, not an alternative to naming them. So on Windows the command and every argument are
+ * quoted for `cmd.exe` and the spawn is a shell spawn. `"` needs no escape because Windows forbids
+ * it in a path, and our own arguments are flags and paths; a literal `%` in a path can still be
+ * eaten by cmd's variable expansion, which has no command-line escape and which no Bitmagic path
+ * has ever contained.
+ *
+ * The shell brings one more consequence, which `stopChild` exists for: the child is `cmd.exe`, and
+ * killing it leaves the vite or tsc it launched running — holding `--strictPort` against the next
+ * `bitmagic dev`. Windows kills the tree instead.
+ *
+ * `spawnPathCommandSync` is the same defect one step out: a package manager looked up on PATH is
+ * `npm.cmd`/`pnpm.cmd` on Windows, and `spawnSync('pnpm', …)` there fails the same ENOENT way.
+ */
+import { spawn, spawnSync } from 'child_process';
+/** cmd.exe treats everything inside double quotes literally, and a path can never contain one. */
+function quoteForCmd(value) {
+    return `"${value}"`;
+}
+/**
+ * Pure, so the Windows shape is testable from any machine — the same split `openerFor` uses.
+ *
+ * Only `.cmd`/`.bat` take the shell. A `.exe` (some packages ship a real one) and the POSIX
+ * extensionless script are executables the OS can launch directly, and routing those through
+ * cmd.exe would add the orphaned-child problem for nothing.
+ */
+export function binInvocation(bin, args, platform = process.platform) {
+    const isBatch = /\.(cmd|bat)$/i.test(bin);
+    if (platform !== 'win32' || !isBatch)
+        return { command: bin, args: [...args], shell: false };
+    return { command: quoteForCmd(bin), args: args.map(quoteForCmd), shell: true };
+}
+/** `spawnSync` for a project binary. Same return value, so callers read `error`/`status` as before. */
+export function spawnBinSync(bin, args, options) {
+    const invocation = binInvocation(bin, args);
+    return spawnSync(invocation.command, invocation.args, { ...options, shell: invocation.shell });
+}
+/** `spawn` for a project binary. Same `ChildProcess`, but stop it with `stopChild`, not `kill`. */
+export function spawnBin(bin, args, options) {
+    const invocation = binInvocation(bin, args);
+    return spawn(invocation.command, invocation.args, { ...options, shell: invocation.shell });
+}
+/**
+ * Stops a child started by `spawnBin`, including anything it started.
+ *
+ * On Windows that child is the `cmd.exe` wrapper, so `kill` alone would orphan the real server;
+ * `taskkill /T` takes the tree.
+ *
+ * Throws whatever `kill` throws, exactly as the bare `child.kill('SIGTERM')` this replaced did —
+ * `killQuietly` in forge/voxelize-session.ts reports that rather than losing the command to it,
+ * and swallowing it here would silently take that report away.
+ */
+export function stopChild(child, platform = process.platform) {
+    if (platform === 'win32' && typeof child.pid === 'number') {
+        const killed = spawnSync('taskkill', ['/pid', String(child.pid), '/T', '/F'], { stdio: 'ignore' });
+        // Only fall through to `kill` when taskkill itself could not run (missing, or the pid was
+        // already reaped). A successful taskkill has nothing left to signal.
+        if (!killed.error && killed.status === 0)
+            return;
+    }
+    child.kill('SIGTERM');
+}
+/**
+ * Runs a command looked up on PATH — a package manager, not a project binary.
+ *
+ * On Windows `npm`, `pnpm` and `yarn` are all `.cmd` shims, and `CreateProcess` (which is what a
+ * non-shell spawn ends at) cannot execute a batch file however it was named. cmd.exe resolves the
+ * PATHEXT extension itself, so the shell does double duty here: it finds the shim AND it is the
+ * `shell: true` the batch file needs anyway.
+ *
+ * An absolute path is spawned directly. `self-install.ts` runs npm as `process.execPath
+ * npm-cli.js` — a real executable with nothing for a shell to add.
+ */
+export function pathCommandInvocation(command, args, platform = process.platform) {
+    const bare = !command.includes('/') && !command.includes('\\');
+    if (platform !== 'win32' || !bare)
+        return { command, args: [...args], shell: false };
+    return { command: quoteForCmd(command), args: args.map(quoteForCmd), shell: true };
+}
+/** `spawnSync` for a PATH command. Same return value, so callers read `error`/`status` as before. */
+export function spawnPathCommandSync(command, args, options) {
+    const invocation = pathCommandInvocation(command, args);
+    return spawnSync(invocation.command, invocation.args, { ...options, shell: invocation.shell });
+}
+//# sourceMappingURL=spawn-bin.js.map

package/dist/project/spawn-bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn-bin.js","sourceRoot":"","sources":["../../src/project/spawn-bin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,KAAK,EAAE,SAAS,EAA+D,MAAM,eAAe,CAAC;AAS9G,kGAAkG;AAClG,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,IAAI,KAAK,GAAG,CAAC;AACtB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAW,EACX,IAAuB,EACvB,WAAmB,OAAO,CAAC,QAAQ;IAEnC,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,QAAQ,KAAK,OAAO,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC7F,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACjF,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,YAAY,CAC1B,GAAW,EACX,IAAuB,EACvB,OAAyB;IAEzB,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5C,OAAO,SAAS,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;AACjG,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,QAAQ,CACtB,GAAW,EACX,IAAuB,EACvB,OAAqB;IAErB,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5C,OAAO,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;AAC7F,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,SAAS,CAAC,KAAmB,EAAE,WAAmB,OAAO,CAAC,QAAQ;IAChF,IAAI,QAAQ,KAAK,OAAO,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnG,0FAA0F;QAC1F,qEAAqE;QACrE,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;IACnD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACxB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,IAAuB,EACvB,WAAmB,OAAO,CAAC,QAAQ;IAEnC,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/D,IAAI,QAAQ,KAAK,OAAO,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACrF,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACrF,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,IAAuB,EACvB,OAAyB;IAEzB,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACxD,OAAO,SAAS,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;AACjG,CAAC"}

package/dist/publish/bundle.js

@@ -1,9 +1,9 @@
 import { createHash } from 'crypto';
-import { spawnSync } from 'child_process';
 import * as fs from 'fs';
 import * as path from 'path';
 import { CliError } from '../errors.js';
 import { projectBin } from '../project/context.js';
+import { spawnBinSync } from '../project/spawn-bin.js';
 import { computeFingerprint } from './fingerprint.js';
 /**
  * The configs the scaffold vendors alongside `engine/`, one per bundle mode.
@@ -82,7 +82,7 @@ export function runBuild(root, engineVersion, options = {}) {
             'vendor it (your game code is not touched), then build again.', 1);
     }
     const tsc = projectBin(root, 'tsc');
-    const compile = spawnSync(tsc, [], { cwd: root, stdio: 'inherit' });
+    const compile = spawnBinSync(tsc, [], { cwd: root, stdio: 'inherit' });
     if (compile.error)
         throw new CliError(`Could not run the TypeScript compiler: ${compile.error.message}`, 1);
     if (compile.status !== 0)
@@ -90,7 +90,7 @@ export function runBuild(root, engineVersion, options = {}) {
     const { dir, htmlPath } = buildBundlePaths(root);
     fs.mkdirSync(dir, { recursive: true });
     const vite = projectBin(root, 'vite');
-    const bundle = spawnSync(vite, ['build', '--config', configFile, '--outDir', dir, '--emptyOutDir'], {
+    const bundle = spawnBinSync(vite, ['build', '--config', configFile, '--outDir', dir, '--emptyOutDir'], {
         cwd: root,
         stdio: 'inherit',
     });

package/dist/publish/bundle.js.map

@@ -1 +1 @@
-{"version":3,"file":"bundle.js","sourceRoot":"","sources":["../../src/publish/bundle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,wBAAwB,CAAC;AAC5D,MAAM,CAAC,MAAM,8BAA8B,GAAG,mCAAmC,CAAC;AAElF,sDAAsD;AACtD,MAAM,UAAU,gBAAgB,CAAC,UAAmB;IAClD,OAAO,UAAU,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,mBAAmB,CAAC;AAC3E,CAAC;AA0BD,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAClD,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,CAAC;AACxG,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,QAAuB;IACtE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACrD,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,+FAA+F;IAC/F,0FAA0F;IAC1F,iGAAiG;IACjG,gGAAgG;IAChG,2EAA2E;IAC3E,OAAO,CACL,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ;WAChC,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ;WACjC,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;WAC3B,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;WAC5B,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CACjC,CAAC;AACJ,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;QAClG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACrC,OAAO,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,QAAQ,CACtB,IAAY,EACZ,aAAqB,EACrB,UAAoC,EAAE;IAEtC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC;IAC/C,MAAM,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,QAAQ,CAChB,uBAAuB,UAAU,iDAAiD;YAChF,0FAA0F;YAC1F,8DAA8D,EAChE,CAAC,CACF,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACpE,IAAI,OAAO,CAAC,KAAK;QAAE,MAAM,IAAI,QAAQ,CAAC,0CAA0C,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5G,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC;IAE/F,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACjD,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,eAAe,CAAC,EAAE;QAClG,GAAG,EAAE,IAAI;QACT,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,KAAK;QAAE,MAAM,IAAI,QAAQ,CAAC,uBAAuB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACvF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;IAE7F,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,QAAQ,CAAC,qBAAqB,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,WAAW,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC;IACpG,CAAC;IAED,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAkB;QAC9B,aAAa;QACb,WAAW,EAAE,kBAAkB,CAAC,IAAI,CAAC;QACrC,UAAU;QACV,KAAK,EAAE,QAAQ,CAAC,UAAU;QAC1B,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAC3D,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAClC,CAAC;IACF,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACnC,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"bundle.js","sourceRoot":"","sources":["../../src/publish/bundle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,wBAAwB,CAAC;AAC5D,MAAM,CAAC,MAAM,8BAA8B,GAAG,mCAAmC,CAAC;AAElF,sDAAsD;AACtD,MAAM,UAAU,gBAAgB,CAAC,UAAmB;IAClD,OAAO,UAAU,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,mBAAmB,CAAC;AAC3E,CAAC;AA0BD,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAClD,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,CAAC;AACxG,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,QAAuB;IACtE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACrD,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,+FAA+F;IAC/F,0FAA0F;IAC1F,iGAAiG;IACjG,gGAAgG;IAChG,2EAA2E;IAC3E,OAAO,CACL,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ;WAChC,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ;WACjC,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;WAC3B,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;WAC5B,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CACjC,CAAC;AACJ,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;QAClG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACrC,OAAO,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,QAAQ,CACtB,IAAY,EACZ,aAAqB,EACrB,UAAoC,EAAE;IAEtC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC;IAC/C,MAAM,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,QAAQ,CAChB,uBAAuB,UAAU,iDAAiD;YAChF,0FAA0F;YAC1F,8DAA8D,EAChE,CAAC,CACF,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,KAAK;QAAE,MAAM,IAAI,QAAQ,CAAC,0CAA0C,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5G,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC;IAE/F,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACjD,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,eAAe,CAAC,EAAE;QACrG,GAAG,EAAE,IAAI;QACT,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,KAAK;QAAE,MAAM,IAAI,QAAQ,CAAC,uBAAuB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACvF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;IAE7F,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,QAAQ,CAAC,qBAAqB,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,WAAW,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC;IACpG,CAAC;IAED,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAkB;QAC9B,aAAa;QACb,WAAW,EAAE,kBAAkB,CAAC,IAAI,CAAC;QACrC,UAAU;QACV,KAAK,EAAE,QAAQ,CAAC,UAAU;QAC1B,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAC3D,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAClC,CAAC;IACF,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACnC,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/scaffold/agent-targets.d.ts

@@ -0,0 +1,126 @@
+/**
+ * Which agent tools a project is set up for, and where each one looks for its skills.
+ *
+ * The GDK is a bring-your-own-agent product, but for most of its life the scaffold wrote to
+ * `.claude/skills/` and nothing else — so a creator on Cursor, Codex or Kiro received a directory of
+ * skill files their agent never opened, and `bitmagic upgrade`, the only route by which an existing
+ * project learns about a new CLI capability, kept refreshing files nobody read.
+ *
+ * ── Why `.agents/skills/` is unconditional ───────────────────────────────────────────────────────
+ *
+ * Cursor, Codex, GitHub Copilot, Cline and OpenCode all load `.agents/skills/` by themselves, and
+ * all of them read the root `AGENTS.md` this scaffold already writes. So writing that one directory
+ * into every project supports five agents with no flag to pass and no environment to sniff — which
+ * is the whole point, because neither of the alternatives survives contact:
+ *
+ *   - Detection cannot be built honestly. `../telemetry/command-context.ts` states the policy —
+ *     an agent gets a marker here only once that marker is verified against the real thing, because
+ *     a guessed variable never fires and misleads whoever reads the table next — and `CLAUDECODE` is
+ *     the only marker anyone has verified. An `init` run by Cursor's agent proves nothing, so
+ *     detection-as-default would silently produce a Cursor-less project.
+ *   - A required flag cannot be relied on either. The GDK bootstrap that runs `bitmagic init` is
+ *     read BY the agent, so it could pass its own id — but nothing upgrades an installed copy of
+ *     that bootstrap (see `agent-plugin/README.md`), so a creator on last month's copy would get
+ *     nothing, and the failure is silent.
+ *
+ * What is left for this table is therefore narrow: agents that read a VENDOR directory and nothing
+ * else. Claude Code (`.claude/skills/`) is one, and it is unconditional too — every project on disk
+ * today has that directory, and an upgrade that stopped writing it would be the first destructive
+ * thing the command has ever done. Kiro (`.kiro/skills/`) is the other, and it is the only reason
+ * `--agent` exists: an unasked-for `.kiro/` is pure noise in a project that does not use Kiro.
+ *
+ * ── Why the directory, not the agent, is the unit ────────────────────────────────────────────────
+ *
+ * Four agents map onto three directories, so every caller works in terms of the deduped set of
+ * DIRECTORIES (`skillDirsFor`). Writing per agent instead would put the same files into
+ * `.agents/skills/` twice for a creator who named both Cursor and Codex.
+ */
+export type AgentId = 'claude-code' | 'cursor' | 'codex' | 'kiro';
+export interface AgentTarget {
+    id: AgentId;
+    /** How the agent is named in output a creator reads. */
+    label: string;
+    /**
+     * The agent's own skills directory, or absent when it reads `SHARED_SKILLS_DIR` itself — in which
+     * case there is nothing to write for it and `--agent <id>` is a no-op we report rather than
+     * refuse. Relative to the project root, POSIX-separated.
+     */
+    skillsDir?: string;
+    /** Where this agent reads its startup instructions. Output copy only; nothing branches on it. */
+    instructions: string;
+}
+/**
+ * The directory every agent following the AGENTS.md / agent-skills convention reads by itself.
+ * Written into every project whatever agent scaffolded it — see the file header.
+ */
+export declare const SHARED_SKILLS_DIR = ".agents/skills";
+/**
+ * Declaration order is output order, so the file set a project receives is a function of WHICH
+ * agents were selected and not of how they were typed.
+ */
+export declare const AGENT_TARGETS: readonly AgentTarget[];
+export declare const AGENT_IDS: readonly AgentId[];
+/**
+ * In every project's set, and not removable.
+ *
+ * `--agent` adds; it never takes away. Both of the unconditional directories are already on disk in
+ * every existing project (`.claude/skills/`) or are what makes five agents work for free
+ * (`.agents/skills/`), and `upgrade` has never deleted a file under a skills directory.
+ */
+export declare const ALWAYS_AGENTS: readonly AgentId[];
+/**
+ * `--agent`'s help text, shared by `init` and `upgrade` so the two cannot describe the same flag
+ * differently. It names what the flag is FOR, because the honest answer is "usually nothing": the
+ * default already covers every agent but Kiro.
+ */
+export declare const AGENT_FLAG_DESCRIPTION: string;
+export declare function isAgentId(value: unknown): value is AgentId;
+export declare function agentTarget(id: AgentId): AgentTarget;
+/** In table order, each agent once. */
+export declare function dedupeAgents(agents: readonly AgentId[]): AgentId[];
+/**
+ * "Cursor", "Cursor and Codex", "Cursor, Codex and Kiro" — for a sentence a creator reads, not a
+ * list a parser does. Exported because the scaffolded AGENTS.md joins its skills directories the
+ * same way, and two hand-written copies of this join is how the two come to punctuate differently.
+ */
+export declare function joinWithAnd(items: readonly string[]): string;
+/** The agents named, in table order, as a clause for a sentence a creator reads. */
+export declare function agentLabels(agents: readonly AgentId[]): string;
+/**
+ * `--agent kiro,cursor` → `['cursor', 'kiro']`, unioned with the always-present set.
+ *
+ * Comma-separated rather than a repeatable flag because citty's string args are single-valued. An
+ * unknown id is a hard error naming the valid ones: a typo that silently scaffolded the default set
+ * would look like the flag working, and the creator would find out when their agent loaded nothing.
+ */
+export declare function parseAgentFlag(raw: string | undefined): AgentId[];
+/** The `agents` field of a `bitmagic.json`, keeping only ids this CLI recognises. */
+export declare function readRecordedAgents(value: unknown): AgentId[];
+/** Values in a project's `agents` field that this CLI does not recognise — reported, never fatal. */
+export declare function unrecognisedAgents(value: unknown): string[];
+/**
+ * The directories to write, deduped and in a stable order, always starting with the shared one.
+ *
+ * A duplicate here would double-write a file and list its path twice in `UpgradeResult.replaced`,
+ * so the dedupe is load-bearing rather than tidiness: `--agent cursor,codex` names two agents that
+ * share a directory.
+ */
+export declare function skillDirsFor(agents: readonly AgentId[]): string[];
+/**
+ * The directory `AGENTS.md` names when it cross-references a skill.
+ *
+ * Every project has more than one copy of the shipped skills, but `AGENTS.md` is ONE file at the
+ * root read by every agent in the project, so it has to name a single path — and the only honest
+ * choice is the one that exists in every project and that most agents load from. Its Layout section
+ * names the other copies, so a Claude Code reader still learns where its own loader looks.
+ */
+export declare const PRIMARY_SKILLS_DIR = ".agents/skills";
+/**
+ * The agents named by `--agent` that this scaffold writes nothing extra for, because the directory
+ * and the instructions file they read are already unconditional.
+ *
+ * Accepting such a flag and explaining it beats refusing one a creator reasonably typed.
+ */
+export declare function noOpAgents(agents: readonly AgentId[]): AgentId[];
+/** Which agents load a given skills directory, as a clause for a sentence the creator reads. */
+export declare function describeSkillsDir(dir: string): string;