@coreframe/scripts 0.1.38 → 0.1.40

package/dist/coreframe.d.ts

@@ -12,7 +12,8 @@ declare const coreframeCli: Partial<import("cmd-ts/dist/cjs/argparser").Register
       args: {
         file: string;
         id: string;
-        alt: string;
+        alt: string | undefined;
+        pack: string | undefined;
         variantWidths: number[] | undefined;
         json: boolean;
       };
@@ -20,22 +21,26 @@ declare const coreframeCli: Partial<import("cmd-ts/dist/cjs/argparser").Register
       command: "build";
       args: {
         id: string | undefined;
+        pack: string | undefined;
         json: boolean;
       };
     } | {
       command: "check";
       args: {
         fix: boolean;
+        pack: string | undefined;
         json: boolean;
       };
     } | {
       command: "publish";
       args: {
+        pack: string | undefined;
         json: boolean;
       };
     } | {
       command: "status";
       args: {
+        pack: string | undefined;
         json: boolean;
       };
     };
@@ -98,6 +103,7 @@ declare const coreframeCli: Partial<import("cmd-ts/dist/cjs/argparser").Register
   } | {
     command: "dev";
     args: {
+      debug: "managed-dev-overlay" | undefined;
       https: boolean;
       host: string | undefined;
       managed: boolean;
@@ -212,7 +218,8 @@ declare const coreframeCli: Partial<import("cmd-ts/dist/cjs/argparser").Register
     args: {
       file: string;
       id: string;
-      alt: string;
+      alt: string | undefined;
+      pack: string | undefined;
       variantWidths: number[] | undefined;
       json: boolean;
     };
@@ -220,22 +227,26 @@ declare const coreframeCli: Partial<import("cmd-ts/dist/cjs/argparser").Register
     command: "build";
     args: {
       id: string | undefined;
+      pack: string | undefined;
       json: boolean;
     };
   } | {
     command: "check";
     args: {
       fix: boolean;
+      pack: string | undefined;
       json: boolean;
     };
   } | {
     command: "publish";
     args: {
+      pack: string | undefined;
       json: boolean;
     };
   } | {
     command: "status";
     args: {
+      pack: string | undefined;
       json: boolean;
     };
   };
@@ -298,6 +309,7 @@ declare const coreframeCli: Partial<import("cmd-ts/dist/cjs/argparser").Register
 } | {
   command: "dev";
   args: {
+    debug: "managed-dev-overlay" | undefined;
     https: boolean;
     host: string | undefined;
     managed: boolean;

package/dist/coreframe.js

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-import{assertAssetCredentialProfile as e,configureAssetCredentials as t}from"./assets/credentials.js";import{addAsset as n,buildAssets as r,checkAssets as i,printAssetResult as a,publishAssets as o}from"./assets/workflows.js";import"./assets.js";import{runDrizzleKitCommand as s}from"./db/drizzle-kit.js";import{seedLocalDb as c}from"./db/seed.js";import{migrateLocalDb as l}from"./db/migrate.js";import{resetLocalDb as u}from"./db/reset.js";import{setupLocalDb as d}from"./db/setup.js";import{ensureLocalDb as f}from"./db/ensure.js";import{formatDbErrorMessage as p}from"./db/error.js";import{migrateHeldMigrations as m}from"./db/migrate-held.js";import{checkSchemaPush as h}from"./db/schema-check.js";import{rotateAccessTokenSigningSecret as g}from"./deploy/access-token-secret.js";import{deployEnvironments as _,tauriReleasePlatforms as v}from"./deploy/config.js";import{discoverStagingUrl as y,reassignStagingHostname as b}from"./staging.js";import{discardPendingWorkerSecret as x,inspectWorkerEnvironment as S,queueWorkerSecret as C}from"./worker-environment.js";import{deployProject as w}from"./deploy.js";import{checkDeployMigrations as T}from"./deploy/check-migrations.js";import{devPlatforms as E,runDevServer as ee}from"./dev.js";import{validateRecipeName as D}from"./recipes/manifest.js";import{ensureTemplateRemote as O}from"./upgrade/ensure-template-remote.js";import{applyRecipe as k,printAppliedRecipe as A}from"./recipes/apply.js";import{listRecipes as j,printRecipeCatalog as M}from"./recipes/list.js";import{run as N}from"./runner.js";import{typecheckProject as P}from"./typecheck.js";import{checkUpgradeSkillCurrent as F}from"./upgrade/check-skill-current.js";import{fastForwardTemplateFiles as I}from"./upgrade/fast-forward-template-files.js";import{syncCoreframePackages as L}from"./upgrade/sync-coreframe-packages.js";import*as R from"@clack/prompts";import{array as z,command as B,extendType as V,flag as H,multioption as U,number as W,oneOf as G,option as K,optional as q,positional as J,rest as Y,string as X,subcommands as Z}from"cmd-ts";const Q=[`Cookies and sessions are origin-scoped.`,`Exact-host passkeys may require re-registration unless a stable eligible parent RP ID was configured in advance.`,`External OAuth callbacks such as Google may need updating.`,`Database data and private backend resources are unchanged.`],te=V(X,{displayName:`widths`,description:`Comma-separated responsive variant widths.`,async from(e){let t=e.split(`,`).map(e=>Number(e));if(t.length===0||t.some(e=>!Number.isInteger(e)||e<=0)||t.some((e,n)=>n>0&&e<=t[n-1]))throw Error(`Widths must be positive, unique, strictly ascending integers.`);return t}}),ne=V(X,{displayName:`recipe`,description:`Coreframe recipe name, such as yam-db.`,async from(e){return D(e)}}),$=Z({name:`coreframe`,cmds:{assets:Z({name:`assets`,cmds:{configure:B({name:`configure`,description:`Store a Backblaze B2 asset key in the operating system credential store.`,args:{profile:J({type:V(X,{displayName:`profile`,async from(t){return e(t)}}),displayName:`profile`,description:`Credential profile named by coreframe.config.ts.`})},handler:async({profile:e})=>{let n=await R.text({message:`Backblaze B2 application key ID`,validate:e=>e?.trim()?void 0:`The application key ID is required.`});if(R.isCancel(n))throw Error(`Asset credential configuration was cancelled.`);let r=await R.password({message:`Backblaze B2 application key`,validate:e=>e?void 0:`The application key is required.`});if(R.isCancel(r))throw Error(`Asset credential configuration was cancelled.`);await t({applicationKey:r,applicationKeyId:n.trim(),profile:e}),console.log(`Stored Coreframe asset credential profile "${e}".`)}}),add:B({name:`add`,args:{file:J({type:X,displayName:`file`,description:`Source image to add to the asset library.`}),id:K({long:`id`,type:X,description:`Logical asset ID, such as blog/my-post/hero.`}),alt:K({long:`alt`,type:X,description:`Required alt text for the asset.`}),variantWidths:K({long:`widths`,type:q(te),description:`Generate exactly these comma-separated widths instead of the default ladder.`}),json:H({long:`json`,description:`Print machine-readable JSON.`,defaultValue:()=>!1})},handler:async({alt:e,file:t,id:r,json:i,variantWidths:o})=>a(await n({alt:e,file:t,id:r,variantWidths:o}),i)}),build:B({name:`build`,args:{id:K({long:`id`,type:q(X),description:`Build only one logical asset ID.`}),json:H({long:`json`,description:`Print machine-readable JSON.`,defaultValue:()=>!1})},handler:async({id:e,json:t})=>a(await r({id:e}),t)}),check:B({name:`check`,args:{fix:H({long:`fix`,description:`Build missing generated variants when possible.`,defaultValue:()=>!1}),json:H({long:`json`,description:`Print machine-readable JSON.`,defaultValue:()=>!1})},handler:async({fix:e,json:t})=>{let n=await i({fix:e});a(n,t),n.ok||(process.exitCode=1)}}),publish:B({name:`publish`,args:{json:H({long:`json`,description:`Print machine-readable JSON.`,defaultValue:()=>!1})},handler:async({json:e})=>{let t=await o();a(t,e),t.ok||(process.exitCode=1)}}),status:B({name:`status`,args:{json:H({long:`json`,description:`Print machine-readable JSON.`,defaultValue:()=>!1})},handler:async({json:e})=>{let t=await i();a(t,e),t.ok||(process.exitCode=1)}})}}),deploy:B({name:`deploy`,args:{environment:J({type:G(_),displayName:`environment`,description:`Deploy to the staging or production environment.`}),runMigrations:H({long:`run-migrations`,description:`Run pending deploy-safe database migrations before deploying.`,defaultValue:()=>!1}),skipMigrations:H({long:`skip-migrations`,description:`Deploy without running pending deploy-safe database migrations.`,defaultValue:()=>!1}),skipPostDeployChecks:H({long:`skip-post-deploy-checks`,description:`Skip post-deploy checks after Cloudflare deployment.`,defaultValue:()=>!1}),tauriLocalPlatforms:U({long:`tauri-local-platform`,type:z(G(v)),description:`Build one Tauri release platform locally. Repeat for multiple platforms.`,defaultValue:()=>[]}),tauriWorkflowName:K({long:`tauri-workflow-name`,type:q(X),description:`GitHub Actions workflow file or name for remote Tauri release builds.`}),tauriWorkflowPlatforms:U({long:`tauri-workflow-platform`,type:z(G(v)),description:`Build one Tauri release platform with GitHub Actions. Repeat for multiple platforms.`,defaultValue:()=>[]}),tauriWorkflowRef:K({long:`tauri-workflow-ref`,type:q(X),description:`Git ref used when dispatching remote Tauri release builds.`}),yes:H({long:`yes`,short:`y`,description:`Approve the production deployment confirmation.`,defaultValue:()=>!1})},handler:({environment:e,runMigrations:t,skipMigrations:n,skipPostDeployChecks:r,tauriLocalPlatforms:i,tauriWorkflowName:a,tauriWorkflowPlatforms:o,tauriWorkflowRef:s,yes:c})=>w([e,...t?[`--run-migrations`]:[],...n?[`--skip-migrations`]:[],...r?[`--skip-post-deploy-checks`]:[],...i.flatMap(e=>[`--tauri-local-platform`,e]),...a?[`--tauri-workflow-name`,a]:[],...o.flatMap(e=>[`--tauri-workflow-platform`,e]),...s?[`--tauri-workflow-ref`,s]:[],...c?[`--yes`]:[]])}),staging:Z({name:`staging`,cmds:{reassign:B({name:`reassign`,args:{json:H({long:`json`,description:`Print machine-readable JSON.`,defaultValue:()=>!1})},handler:async({json:e})=>{let t=await b();if(e){console.log(JSON.stringify({...t,notices:Q}));return}console.log(t.url),console.error(`Staging hostname reassigned. ${Q.join(` `)}`)}}),url:B({name:`url`,args:{json:H({long:`json`,description:`Print machine-readable JSON.`,defaultValue:()=>!1})},handler:async({json:e})=>{let t=await y();console.log(e?JSON.stringify({url:t}):t)}})}}),secrets:Z({name:`secrets`,cmds:{"rotate-access-token":B({name:`rotate-access-token`,args:{environment:J({type:G(_),displayName:`environment`,description:`Worker environment whose access JWTs should be invalidated.`}),yes:H({long:`yes`,short:`y`,description:`Confirm immediate signing-secret replacement and invalidation of outstanding access JWTs.`,defaultValue:()=>!1})},handler:async({environment:e,yes:t})=>{if(!t)throw Error(`Access-token signing-secret rotation requires --yes because it immediately invalidates outstanding access JWTs.`);await g({environment:e}),console.log(`Rotated Coreframe access-token signing material for ${e}. Clients must remint outstanding access JWTs.`)}}),status:B({name:`status`,args:{environment:J({type:q(G(_)),displayName:`environment`,description:`Inspect staging, production, or both when omitted.`}),json:H({long:`json`,description:`Print machine-readable JSON.`,defaultValue:()=>!1})},handler:async({environment:e,json:t})=>{let n=await S({environment:e});console.log(t?JSON.stringify(n):re(n))}}),set:B({name:`set`,args:{environment:J({type:G(_),displayName:`environment`,description:`Worker environment to update on its next deploy.`}),name:J({type:X,displayName:`name`,description:`Declared Worker secret name.`})},handler:async({environment:e,name:t})=>{await C({environment:e,name:t,value:await ie(t)}),console.log(`Queued ${t} for ${e}. Run coreframe deploy ${e} to apply.`)}}),discard:B({name:`discard`,args:{environment:J({type:G(_),displayName:`environment`,description:`Worker environment with a queued secret update.`}),name:J({type:X,displayName:`name`,description:`Declared Worker secret name.`})},handler:async({environment:e,name:t})=>{let n=await x({environment:e,name:t});console.log(n?`Discarded the queued ${t} update for ${e}.`:`No ${t} update is queued for ${e}.`)}})}}),typecheck:B({name:`typecheck`,args:{},handler:P}),dev:B({name:`dev`,args:{https:H({long:`https`,description:`Serve the web app over locally trusted HTTPS.`,defaultValue:()=>!1}),host:K({long:`host`,type:q(X),description:`Host address for the web development server.`}),managed:H({long:`managed`,description:`Run managed checkout synchronization even without an interactive terminal.`,defaultValue:()=>!1}),noManaged:H({long:`no-managed`,description:`Run without managed checkout synchronization for this invocation.`,defaultValue:()=>!1}),platform:J({type:q(G(E)),displayName:`platform`,description:`Development target platform. Defaults to web.`}),device:J({type:q(X),displayName:`device`,description:`Device name or ID for iOS or Android development.`}),port:K({long:`port`,type:q(W),description:`Port for the web development server.`}),verbose:H({long:`verbose`,description:`Show the full native development output.`,defaultValue:()=>!1})},handler:({device:e,host:t,https:n,managed:r,noManaged:i,platform:a,port:o,verbose:s})=>ee({device:e,host:t,https:n,managed:r,noManaged:i,platform:a??`web`,verbose:s,webPort:o})}),upgrade:Z({name:`upgrade`,cmds:{"ensure-template-remote":B({name:`ensure-template-remote`,args:{remote:K({long:`remote`,type:X,defaultValue:()=>`template`,description:`Remote name to ensure.`}),noFetch:H({long:`no-fetch`,description:`Do not fetch the remote after ensuring it exists.`,defaultValue:()=>!1})},handler:({noFetch:e,remote:t})=>O({fetch:!e,remote:t})}),"check-skill-current":B({name:`check-skill-current`,args:{target:K({long:`target`,type:X,description:`Target Coreframe template git ref.`}),apply:H({long:`apply`,description:`Replace the local upgrade skill with the target version when it differs.`,defaultValue:()=>!1})},handler:({apply:e,target:t})=>{process.exitCode=F({apply:e,target:t})}}),"fast-forward-template-files":B({name:`fast-forward-template-files`,args:{target:K({long:`target`,type:X,description:`Target Coreframe template git ref.`}),base:K({long:`base`,type:q(X),description:`Previous Coreframe template git ref. Defaults to package.json engines.coreframe.`}),apply:H({long:`apply`,description:`Write clean fast-forwards to the worktree.`,defaultValue:()=>!1})},handler:({apply:e,base:t,target:n})=>I({apply:e,base:t,target:n})}),"sync-coreframe-packages":B({name:`sync-coreframe-packages`,args:{target:K({long:`target`,type:X,description:`Target Coreframe template git ref.`}),apply:H({long:`apply`,description:`Update existing published Coreframe dependency specifications.`,defaultValue:()=>!1})},handler:({apply:e,target:t})=>L({apply:e,target:t})})}}),recipes:Z({name:`recipes`,cmds:{apply:B({name:`apply`,args:{recipe:J({type:ne,displayName:`recipe`,description:`Recipe to prepare and apply.`}),target:K({long:`target`,type:q(X),description:`Coreframe Git ref. Defaults to package.json engines.coreframe.`}),remote:K({long:`remote`,type:X,defaultValue:()=>`template`,description:`Coreframe Git remote name.`}),noFetch:H({long:`no-fetch`,description:`Use already-fetched recipe refs without fetching the remote.`,defaultValue:()=>!1})},handler:({noFetch:e,recipe:t,remote:n,target:r})=>A(k({fetch:!e,name:t,remote:n,target:r}))}),list:B({name:`list`,args:{target:K({long:`target`,type:q(X),description:`Coreframe Git ref. Defaults to package.json engines.coreframe.`}),remote:K({long:`remote`,type:X,defaultValue:()=>`template`,description:`Coreframe Git remote name.`}),noFetch:H({long:`no-fetch`,description:`Use already-fetched recipe refs without fetching the remote.`,defaultValue:()=>!1})},handler:({noFetch:e,remote:t,target:n})=>M(j({fetch:!e,remote:t,target:n}))})}}),db:Z({name:`db`,cmds:{ensure:B({name:`ensure`,args:{},handler:f}),generate:B({name:`generate`,args:{args:Y({displayName:`drizzle-kit args`,description:`Additional arguments passed to drizzle-kit generate.`})},handler:({args:e})=>s(`generate`,e)}),migrate:B({name:`migrate`,args:{args:Y({displayName:`drizzle-kit args`,description:`Additional arguments passed to drizzle-kit migrate.`})},handler:({args:e})=>s(`migrate`,e)}),"migrate-held":B({name:`migrate-held`,args:{confirm:K({long:`confirm`,type:q(G([`run-held-migrations`])),description:`Required confirmation value for held migrations.`})},handler:({confirm:e})=>m({argv:e?[`--confirm=${e}`]:[]})}),"migrate-local":B({name:`migrate-local`,args:{},handler:l}),"migrations-check":B({name:`migrations-check`,args:{},handler:T}),reset:B({name:`reset`,args:{},handler:u}),seed:B({name:`seed`,args:{},handler:()=>c()}),"schema-check":B({name:`schema-check`,args:{seed:H({long:`seed`,description:`Run the configured project seed against the throwaway database.`,defaultValue:()=>!1})},handler:({seed:e})=>h({seed:e})}),setup:B({name:`setup`,args:{},handler:()=>d()}),studio:B({name:`studio`,args:{args:Y({displayName:`drizzle-kit args`,description:`Additional arguments passed to drizzle-kit studio.`})},handler:({args:e})=>s(`studio`,e)})}})}});import.meta.main&&N($,{formatMessage:process.argv[2]===`db`?p:void 0});function re(e){if(e.entries.length===0)return`No Worker environment values are declared in coreframe.config.ts.`;let t=e.entries.map(e=>[e.name,e.kind,e.local===`override`?`override`:`built-in default`,e.deployed.staging.replaceAll(`_`,` `),e.deployed.production.replaceAll(`_`,` `)]),n=[`Name`,`Kind`,`Local`,`Staging`,`Production`],r=n.map((e,n)=>Math.max(e.length,...t.map(e=>e[n].length))),i=e=>e.map((e,t)=>e.padEnd(r[t])).join(`  `).trimEnd();return[i(n),i(r.map(e=>`-`.repeat(e))),...t].join(`
-`)}async function ie(e){if(!process.stdin.isTTY){let e=``;for await(let t of process.stdin)e+=t.toString();return e.replace(/\r?\n$/,``)}let t=await R.password({message:`Enter the new value for ${e}`});if(R.isCancel(t))throw R.cancel(`Secret update cancelled.`),Error(`Secret update cancelled.`);return t}export{$ as coreframeCli};
+import{assertAssetCredentialProfile as e,configureAssetCredentials as t}from"./assets/credentials.js";import{addAsset as n,buildAssets as r,checkAssets as i,printAssetResult as a,publishAssets as o}from"./assets/workflows.js";import"./assets.js";import{runDrizzleKitCommand as s}from"./db/drizzle-kit.js";import{seedLocalDb as c}from"./db/seed.js";import{migrateLocalDb as l}from"./db/migrate.js";import{resetLocalDb as u}from"./db/reset.js";import{setupLocalDb as d}from"./db/setup.js";import{ensureLocalDb as f}from"./db/ensure.js";import{formatDbErrorMessage as p}from"./db/error.js";import{migrateHeldMigrations as m}from"./db/migrate-held.js";import{checkSchemaPush as h}from"./db/schema-check.js";import{rotateAccessTokenSigningSecret as g}from"./deploy/access-token-secret.js";import{deployEnvironments as _,tauriReleasePlatforms as v}from"./deploy/config.js";import{discoverStagingUrl as y,reassignStagingHostname as b}from"./staging.js";import{discardPendingWorkerSecret as ee,inspectWorkerEnvironment as te,queueWorkerSecret as x}from"./worker-environment.js";import{deployProject as S}from"./deploy.js";import{checkDeployMigrations as C}from"./deploy/check-migrations.js";import{devDebugFeatures as ne,devPlatforms as w,runDevServer as re}from"./dev.js";import{validateRecipeName as ie}from"./recipes/manifest.js";import{ensureTemplateRemote as T}from"./upgrade/ensure-template-remote.js";import{applyRecipe as E,printAppliedRecipe as D}from"./recipes/apply.js";import{listRecipes as O,printRecipeCatalog as k}from"./recipes/list.js";import{run as A}from"./runner.js";import{typecheckProject as j}from"./typecheck.js";import{checkUpgradeSkillCurrent as M}from"./upgrade/check-skill-current.js";import{fastForwardTemplateFiles as N}from"./upgrade/fast-forward-template-files.js";import{syncCoreframePackages as P}from"./upgrade/sync-coreframe-packages.js";import*as F from"@clack/prompts";import{array as I,command as L,extendType as R,flag as z,multioption as B,number as V,oneOf as H,option as U,optional as W,positional as G,rest as K,string as q,subcommands as J}from"cmd-ts";const Y=R(H(ne),{displayName:`feature`,from:async e=>e}),X=[`Cookies and sessions are origin-scoped.`,`Exact-host passkeys may require re-registration unless a stable eligible parent RP ID was configured in advance.`,`External OAuth callbacks such as Google may need updating.`,`Database data and private backend resources are unchanged.`],Z=[`Use a B2 Multi-Bucket Application Key restricted to the configured private source and public generated-assets buckets.`,`Required capabilities: listAllBucketNames, readFiles, and writeFiles.`,`Deletion, bucket-management, and key-management capabilities are not needed.`].join(` `),ae=R(q,{displayName:`widths`,description:`Comma-separated responsive variant widths.`,async from(e){let t=e.split(`,`).map(e=>Number(e));if(t.length===0||t.some(e=>!Number.isInteger(e)||e<=0)||t.some((e,n)=>n>0&&e<=t[n-1]))throw Error(`Widths must be positive, unique, strictly ascending integers.`);return t}}),oe=R(q,{displayName:`recipe`,description:`Coreframe recipe name, such as yam-db.`,async from(e){return ie(e)}}),se=R(q,{displayName:`profile`,async from(t){return e(t)}}),Q=R(q,{displayName:`pack`,description:`Asset pack name, such as training-videos.`,async from(e){if(!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(e))throw Error(`Asset pack names must use lowercase hyphen-separated segments.`);return e}}),$=J({name:`coreframe`,cmds:{assets:J({name:`assets`,cmds:{configure:L({name:`configure`,description:`Store a Backblaze B2 asset key in the operating system credential store. ${Z}`,args:{profile:G({type:se,displayName:`profile`,description:`Credential profile named by coreframe.config.ts.`})},handler:async({profile:e})=>{F.note(Z,`Required B2 key access`);let n=await F.text({message:`Backblaze B2 application key ID`,validate:e=>e?.trim()?void 0:`The application key ID is required.`});if(F.isCancel(n))throw Error(`Asset credential configuration was cancelled.`);let r=await F.password({message:`Backblaze B2 application key`,validate:e=>e?void 0:`The application key is required.`});if(F.isCancel(r))throw Error(`Asset credential configuration was cancelled.`);await t({applicationKey:r,applicationKeyId:n.trim(),profile:e}),console.log(`Stored Coreframe asset credential profile "${e}".`)}}),add:L({name:`add`,args:{file:G({type:q,displayName:`file`,description:`Source raster image, SVG, MP3, MP4, or Lottie JSON to add to the asset library.`}),id:U({long:`id`,type:q,description:`Logical asset ID, such as blog/my-post/hero.`}),alt:U({long:`alt`,type:W(q),description:`Required alt text for raster image and SVG assets.`}),pack:U({long:`pack`,type:W(Q),description:`Place the asset in a named, lazily loaded pack.`}),variantWidths:U({long:`widths`,type:W(ae),description:`Generate exactly these raster-image widths instead of the default ladder.`}),json:z({long:`json`,description:`Print machine-readable JSON.`,defaultValue:()=>!1})},handler:async({alt:e,file:t,id:r,json:i,pack:o,variantWidths:s})=>a(await n({alt:e,file:t,id:r,pack:o,variantWidths:s}),i)}),build:L({name:`build`,args:{id:U({long:`id`,type:W(q),description:`Build only one logical asset ID.`}),pack:U({long:`pack`,type:W(Q),description:`Build only one named asset pack.`}),json:z({long:`json`,description:`Print machine-readable JSON.`,defaultValue:()=>!1})},handler:async({id:e,json:t,pack:n})=>a(await r({id:e,pack:n}),t)}),check:L({name:`check`,args:{fix:z({long:`fix`,description:`Migrate asset state and build missing generated output when possible.`,defaultValue:()=>!1}),pack:U({long:`pack`,type:W(Q),description:`Check only one named asset pack.`}),json:z({long:`json`,description:`Print machine-readable JSON.`,defaultValue:()=>!1})},handler:async({fix:e,json:t,pack:n})=>{let r=await i({fix:e,pack:n});a(r,t),r.ok||(process.exitCode=1)}}),publish:L({name:`publish`,args:{pack:U({long:`pack`,type:W(Q),description:`Publish only one named asset pack.`}),json:z({long:`json`,description:`Print machine-readable JSON.`,defaultValue:()=>!1})},handler:async({json:e,pack:t})=>{let n=await o({pack:t});a(n,e),n.ok||(process.exitCode=1)}}),status:L({name:`status`,args:{pack:U({long:`pack`,type:W(Q),description:`Report status for only one named asset pack.`}),json:z({long:`json`,description:`Print machine-readable JSON.`,defaultValue:()=>!1})},handler:async({json:e,pack:t})=>{let n=await i({pack:t});a(n,e),n.ok||(process.exitCode=1)}})}}),deploy:L({name:`deploy`,args:{environment:G({type:H(_),displayName:`environment`,description:`Deploy to the staging or production environment.`}),runMigrations:z({long:`run-migrations`,description:`Run pending deploy-safe database migrations before deploying.`,defaultValue:()=>!1}),skipMigrations:z({long:`skip-migrations`,description:`Deploy without running pending deploy-safe database migrations.`,defaultValue:()=>!1}),skipPostDeployChecks:z({long:`skip-post-deploy-checks`,description:`Skip post-deploy checks after Cloudflare deployment.`,defaultValue:()=>!1}),tauriLocalPlatforms:B({long:`tauri-local-platform`,type:I(H(v)),description:`Build one Tauri release platform locally. Repeat for multiple platforms.`,defaultValue:()=>[]}),tauriWorkflowName:U({long:`tauri-workflow-name`,type:W(q),description:`GitHub Actions workflow file or name for remote Tauri release builds.`}),tauriWorkflowPlatforms:B({long:`tauri-workflow-platform`,type:I(H(v)),description:`Build one Tauri release platform with GitHub Actions. Repeat for multiple platforms.`,defaultValue:()=>[]}),tauriWorkflowRef:U({long:`tauri-workflow-ref`,type:W(q),description:`Git ref used when dispatching remote Tauri release builds.`}),yes:z({long:`yes`,short:`y`,description:`Approve the production deployment confirmation.`,defaultValue:()=>!1})},handler:({environment:e,runMigrations:t,skipMigrations:n,skipPostDeployChecks:r,tauriLocalPlatforms:i,tauriWorkflowName:a,tauriWorkflowPlatforms:o,tauriWorkflowRef:s,yes:c})=>S([e,...t?[`--run-migrations`]:[],...n?[`--skip-migrations`]:[],...r?[`--skip-post-deploy-checks`]:[],...i.flatMap(e=>[`--tauri-local-platform`,e]),...a?[`--tauri-workflow-name`,a]:[],...o.flatMap(e=>[`--tauri-workflow-platform`,e]),...s?[`--tauri-workflow-ref`,s]:[],...c?[`--yes`]:[]])}),staging:J({name:`staging`,cmds:{reassign:L({name:`reassign`,args:{json:z({long:`json`,description:`Print machine-readable JSON.`,defaultValue:()=>!1})},handler:async({json:e})=>{let t=await b();if(e){console.log(JSON.stringify({...t,notices:X}));return}console.log(t.url),console.error(`Staging hostname reassigned. ${X.join(` `)}`)}}),url:L({name:`url`,args:{json:z({long:`json`,description:`Print machine-readable JSON.`,defaultValue:()=>!1})},handler:async({json:e})=>{let t=await y();console.log(e?JSON.stringify({url:t}):t)}})}}),secrets:J({name:`secrets`,cmds:{"rotate-access-token":L({name:`rotate-access-token`,args:{environment:G({type:H(_),displayName:`environment`,description:`Worker environment whose access JWTs should be invalidated.`}),yes:z({long:`yes`,short:`y`,description:`Confirm immediate signing-secret replacement and invalidation of outstanding access JWTs.`,defaultValue:()=>!1})},handler:async({environment:e,yes:t})=>{if(!t)throw Error(`Access-token signing-secret rotation requires --yes because it immediately invalidates outstanding access JWTs.`);await g({environment:e}),console.log(`Rotated Coreframe access-token signing material for ${e}. Clients must remint outstanding access JWTs.`)}}),status:L({name:`status`,args:{environment:G({type:W(H(_)),displayName:`environment`,description:`Inspect staging, production, or both when omitted.`}),json:z({long:`json`,description:`Print machine-readable JSON.`,defaultValue:()=>!1})},handler:async({environment:e,json:t})=>{let n=await te({environment:e});console.log(t?JSON.stringify(n):ce(n))}}),set:L({name:`set`,args:{environment:G({type:H(_),displayName:`environment`,description:`Worker environment to update on its next deploy.`}),name:G({type:q,displayName:`name`,description:`Declared Worker secret name.`})},handler:async({environment:e,name:t})=>{await x({environment:e,name:t,value:await le(t)}),console.log(`Queued ${t} for ${e}. Run coreframe deploy ${e} to apply.`)}}),discard:L({name:`discard`,args:{environment:G({type:H(_),displayName:`environment`,description:`Worker environment with a queued secret update.`}),name:G({type:q,displayName:`name`,description:`Declared Worker secret name.`})},handler:async({environment:e,name:t})=>{let n=await ee({environment:e,name:t});console.log(n?`Discarded the queued ${t} update for ${e}.`:`No ${t} update is queued for ${e}.`)}})}}),typecheck:L({name:`typecheck`,args:{},handler:j}),dev:L({name:`dev`,args:{debug:U({long:`debug`,type:W(Y),description:`Launch a development feature in isolated debug mode.`}),https:z({long:`https`,description:`Serve the web app over locally trusted HTTPS.`,defaultValue:()=>!1}),host:U({long:`host`,type:W(q),description:`Host address for the web development server.`}),managed:z({long:`managed`,description:`Run managed checkout synchronization even without an interactive terminal.`,defaultValue:()=>!1}),noManaged:z({long:`no-managed`,description:`Run without managed checkout synchronization for this invocation.`,defaultValue:()=>!1}),platform:G({type:W(H(w)),displayName:`platform`,description:`Development target platform. Defaults to web.`}),device:G({type:W(q),displayName:`device`,description:`Device name or ID for iOS or Android development.`}),port:U({long:`port`,type:W(V),description:`Port for the web development server.`}),verbose:z({long:`verbose`,description:`Show the full native development output.`,defaultValue:()=>!1})},handler:({debug:e,device:t,host:n,https:r,managed:i,noManaged:a,platform:o,port:s,verbose:c})=>re({debug:e,device:t,host:n,https:r,managed:i,noManaged:a,platform:o??`web`,verbose:c,webPort:s})}),upgrade:J({name:`upgrade`,cmds:{"ensure-template-remote":L({name:`ensure-template-remote`,args:{remote:U({long:`remote`,type:q,defaultValue:()=>`template`,description:`Remote name to ensure.`}),noFetch:z({long:`no-fetch`,description:`Do not fetch the remote after ensuring it exists.`,defaultValue:()=>!1})},handler:({noFetch:e,remote:t})=>T({fetch:!e,remote:t})}),"check-skill-current":L({name:`check-skill-current`,args:{target:U({long:`target`,type:q,description:`Target Coreframe template git ref.`}),apply:z({long:`apply`,description:`Replace the local upgrade skill with the target version when it differs.`,defaultValue:()=>!1})},handler:({apply:e,target:t})=>{process.exitCode=M({apply:e,target:t})}}),"fast-forward-template-files":L({name:`fast-forward-template-files`,args:{target:U({long:`target`,type:q,description:`Target Coreframe template git ref.`}),base:U({long:`base`,type:W(q),description:`Previous Coreframe template git ref. Defaults to package.json engines.coreframe.`}),apply:z({long:`apply`,description:`Write clean fast-forwards to the worktree.`,defaultValue:()=>!1})},handler:({apply:e,base:t,target:n})=>N({apply:e,base:t,target:n})}),"sync-coreframe-packages":L({name:`sync-coreframe-packages`,args:{target:U({long:`target`,type:q,description:`Target Coreframe template git ref.`}),apply:z({long:`apply`,description:`Update existing published Coreframe dependency specifications.`,defaultValue:()=>!1})},handler:({apply:e,target:t})=>P({apply:e,target:t})})}}),recipes:J({name:`recipes`,cmds:{apply:L({name:`apply`,args:{recipe:G({type:oe,displayName:`recipe`,description:`Recipe to prepare and apply.`}),target:U({long:`target`,type:W(q),description:`Coreframe Git ref. Defaults to package.json engines.coreframe.`}),remote:U({long:`remote`,type:q,defaultValue:()=>`template`,description:`Coreframe Git remote name.`}),noFetch:z({long:`no-fetch`,description:`Use already-fetched recipe refs without fetching the remote.`,defaultValue:()=>!1})},handler:({noFetch:e,recipe:t,remote:n,target:r})=>D(E({fetch:!e,name:t,remote:n,target:r}))}),list:L({name:`list`,args:{target:U({long:`target`,type:W(q),description:`Coreframe Git ref. Defaults to package.json engines.coreframe.`}),remote:U({long:`remote`,type:q,defaultValue:()=>`template`,description:`Coreframe Git remote name.`}),noFetch:z({long:`no-fetch`,description:`Use already-fetched recipe refs without fetching the remote.`,defaultValue:()=>!1})},handler:({noFetch:e,remote:t,target:n})=>k(O({fetch:!e,remote:t,target:n}))})}}),db:J({name:`db`,cmds:{ensure:L({name:`ensure`,args:{},handler:f}),generate:L({name:`generate`,args:{args:K({displayName:`drizzle-kit args`,description:`Additional arguments passed to drizzle-kit generate.`})},handler:({args:e})=>s(`generate`,e)}),migrate:L({name:`migrate`,args:{args:K({displayName:`drizzle-kit args`,description:`Additional arguments passed to drizzle-kit migrate.`})},handler:({args:e})=>s(`migrate`,e)}),"migrate-held":L({name:`migrate-held`,args:{confirm:U({long:`confirm`,type:W(H([`run-held-migrations`])),description:`Required confirmation value for held migrations.`})},handler:({confirm:e})=>m({argv:e?[`--confirm=${e}`]:[]})}),"migrate-local":L({name:`migrate-local`,args:{},handler:l}),"migrations-check":L({name:`migrations-check`,args:{},handler:C}),reset:L({name:`reset`,args:{},handler:u}),seed:L({name:`seed`,args:{},handler:()=>c()}),"schema-check":L({name:`schema-check`,args:{seed:z({long:`seed`,description:`Run the configured project seed against the throwaway database.`,defaultValue:()=>!1})},handler:({seed:e})=>h({seed:e})}),setup:L({name:`setup`,args:{},handler:()=>d()}),studio:L({name:`studio`,args:{args:K({displayName:`drizzle-kit args`,description:`Additional arguments passed to drizzle-kit studio.`})},handler:({args:e})=>s(`studio`,e)})}})}});import.meta.main&&A($,{formatMessage:process.argv[2]===`db`?p:void 0});function ce(e){if(e.entries.length===0)return`No Worker environment values are declared in coreframe.config.ts.`;let t=e.entries.map(e=>[e.name,e.kind,e.local===`override`?`override`:`built-in default`,e.deployed.staging.replaceAll(`_`,` `),e.deployed.production.replaceAll(`_`,` `)]),n=[`Name`,`Kind`,`Local`,`Staging`,`Production`],r=n.map((e,n)=>Math.max(e.length,...t.map(e=>e[n].length))),i=e=>e.map((e,t)=>e.padEnd(r[t])).join(`  `).trimEnd();return[i(n),i(r.map(e=>`-`.repeat(e))),...t].join(`
+`)}async function le(e){if(!process.stdin.isTTY){let e=``;for await(let t of process.stdin)e+=t.toString();return e.replace(/\r?\n$/,``)}let t=await F.password({message:`Enter the new value for ${e}`});if(F.isCancel(t))throw F.cancel(`Secret update cancelled.`),Error(`Secret update cancelled.`);return t}export{$ as coreframeCli};

package/dist/db/local-postgres.js

@@ -1 +1 @@
-import{readProjectConfig as e}from"../config.js";import{fs as t,os as n}from"../environment.js";import{createProjectPostgresDrizzleDatabase as r}from"./project.js";import i from"node:path";import{startPostgres as a}from"local-postgres";import{PostgresDataDirInUseError as o,stopPostgresDataDir as s}from"local-postgres/core";const c=`COREFRAME_LOCAL_POSTGRES`,l=`coreframe`,u={name:`coreframe`,password:`coreframe`};var d=class extends Error{dataDir;pid;constructor(e,t,n){super(`PostgreSQL is already running for this project (PID ${t}). Stop the other top-level \`coreframe dev\` process before starting another.`,n),this.name=`ProjectPostgresAlreadyRunningError`,this.dataDir=e,this.pid=t}};async function f({config:n,cwd:r=process.cwd(),env:o=process.env,failIfRunning:s=!1,postgresOutput:c}={}){if(o.COREFRAME_LOCAL_POSTGRES===`1`||((n??await e({cwd:r})).database?.dialect??`postgres`)!==`postgres`)return v(o);let f=i.resolve(r,`.coreframe/postgres`),p=await y(f);if(p){if(s)throw new d(f,p.pid);return v(b(o,f,p))}let m=i.join(f,`postgres.log`);await t.rm(m,{force:!0});let h;try{h=await a({dataDir:f,database:l,postgresOutput:c??{filePath:m},postgres:{strategy:`prefer-local`},superuser:u})}catch(e){throw await x(e,c?void 0:m)}return _(o,h)}async function p({dataDir:e,pid:t}){await s({dataDir:e,expectedPid:t})}async function m({config:r,cwd:o=process.cwd(),env:s=process.env}={}){let c=(r??await e({cwd:o})).database?.dialect??`postgres`;if(c!==`postgres`)throw Error(`Temporary schema push checks require PostgreSQL, but this project uses ${c}.`);let d=await t.mkdtemp(i.join(n.tmpdir(),`coreframe-schema-check-`));try{let e=_(s,await a({dataDir:d,database:l,postgresOutput:`ignore`,postgres:{strategy:`prefer-local`},superuser:u}));return{env:e.env,async[Symbol.asyncDispose](){try{await e[Symbol.asyncDispose]()}finally{await t.rm(d,{force:!0,recursive:!0})}}}}catch(e){throw await t.rm(d,{force:!0,recursive:!0}),e}}function h(e,t){return{...e,...t,[c]:`1`}}async function g({env:e=process.env}={}){let t=C(e);return r({env:{...e,DATABASE_URL:t}})}function _(e,t){return{env:h(e,t.env),async[Symbol.asyncDispose](){await t[Symbol.asyncDispose]()}}}function v(e){return{env:e,async[Symbol.asyncDispose](){}}}async function y(e){let r;try{r=await t.readFile(i.join(e,`postmaster.pid`),`utf8`)}catch{return}let[a,,,o,,s]=r.split(/\r?\n/),c=Number(a);if(!Number.isSafeInteger(c)||c<=0)return;try{n.kill(c,0)}catch(e){if(!S(e)||e.code!==`EPERM`)return}let l=Number(o);if(!Number.isSafeInteger(l)||l<=0||l>65535||!s)throw Error(`Cannot read connection details for PostgreSQL process ${c} from ${e}.`);return{host:s,pid:c,port:l}}function b(e,t,{host:n,port:r}){let i=new URL(`postgresql://${n}:${r}/${l}`);return i.username=u.name,i.password=u.password,h(e,{DATABASE_URL:i.href,PGDATA:t,PGDATABASE:l,PGHOST:n,PGPASSWORD:u.password,PGPORT:String(r),PGUSER:u.name})}async function x(e,n){if(e instanceof o)return new d(e.dataDir,e.pid,{cause:e});let r=e instanceof Error?e.message:String(e),i;if(n)try{i=(await t.readFile(n,`utf8`)).trim()||void 0}catch{}let a=i?`\n\nPostgreSQL output:\n${i}`:``,s=n?`\n\nPostgreSQL log: ${n}`:``;return Error(`Local PostgreSQL failed to start: ${r}${a}${s}`,{cause:e})}function S(e){return e instanceof Error}function C(e=process.env){let t=e.DATABASE_URL||w(e);if(!t)throw Error(`DATABASE_URL or PGDATABASE, PGHOST, PGPORT, and PGUSER are required.`);return t}function w(e){let{PGDATABASE:t,PGHOST:n,PGPASSWORD:r,PGPORT:i,PGUSER:a}=e;if(!t||!n||!i||!a)return;let o=new URL(`postgresql://${n}:${i}/${t}`);return o.username=a,r&&(o.password=r),o.href}export{c as LOCAL_POSTGRES_ENV_FLAG,d as ProjectPostgresAlreadyRunningError,g as createLocalPostgresDb,h as createLocalPostgresEnv,C as getLocalPostgresConnectionString,f as startProjectPostgres,m as startTemporaryProjectPostgres,p as stopProjectPostgres};
+import{readProjectConfig as e}from"../config.js";import{fs as t,os as n}from"../environment.js";import{createProjectPostgresDrizzleDatabase as r}from"./project.js";import i from"node:path";import{startPostgres as a}from"local-postgres";import{PostgresDataDirInUseError as o,stopPostgresDataDir as s}from"local-postgres/core";const c=`COREFRAME_LOCAL_POSTGRES`,l=`coreframe`,u=2e3,d=4e3,f=new Map,p={name:`coreframe`,password:`coreframe`};var m=class extends Error{dataDir;pid;constructor(e,t,n){super(`PostgreSQL is already running for this project (PID ${t}). Stop the other top-level \`coreframe dev\` process before starting another.`,n),this.name=`ProjectPostgresAlreadyRunningError`,this.dataDir=e,this.pid=t}};async function h({config:n,cwd:r=process.cwd(),env:o=process.env,failIfRunning:s=!1,postgresOutput:c}={}){if(o.COREFRAME_LOCAL_POSTGRES===`1`||((n??await e({cwd:r})).database?.dialect??`postgres`)!==`postgres`)return w(o);let d=i.resolve(r,`.coreframe/postgres`),f=await T(d);if(f){if(s)throw new m(d,f.pid);return w(E(o,d,f))}let h=i.join(d,`postgres.log`);await t.rm(h,{force:!0});let g;try{g=await a({dataDir:d,database:l,postgresOutput:c??{filePath:h},postgres:{strategy:`prefer-local`},stopTimeoutMs:u,superuser:p})}catch(e){throw await D(e,c?void 0:h)}return b(o,g)}async function g({dataDir:e,pid:t}){let n=`${e}\0${t}`,r=f.get(n);if(r){await r;return}let i=S(e,t);f.set(n,i);try{await i}finally{f.get(n)===i&&f.delete(n)}}async function _({config:r,cwd:o=process.cwd(),env:s=process.env}={}){let c=(r??await e({cwd:o})).database?.dialect??`postgres`;if(c!==`postgres`)throw Error(`Temporary schema push checks require PostgreSQL, but this project uses ${c}.`);let d=await t.mkdtemp(i.join(n.tmpdir(),`coreframe-schema-check-`));try{let e=b(s,await a({dataDir:d,database:l,postgresOutput:`ignore`,postgres:{strategy:`prefer-local`},stopTimeoutMs:u,superuser:p}));return{env:e.env,async[Symbol.asyncDispose](){await e[Symbol.asyncDispose](),await t.rm(d,{force:!0,recursive:!0})}}}catch(e){throw await C(d,e),e}}function v(e,t){return{...e,...t,[c]:`1`}}async function y({env:e=process.env}={}){let t=k(e);return r({env:{...e,DATABASE_URL:t}})}function b(e,t){let n;return{env:v(e,t.env),async[Symbol.asyncDispose](){n??=x(t),await n}}}async function x(e){let t;try{await e[Symbol.asyncDispose]()}catch(e){t=e}if(e.pid===void 0){if(t)throw t;return}try{await s({dataDir:e.dataDir,expectedPid:e.pid,mode:`immediate`,timeoutMs:d})}catch(n){throw t?AggregateError([t,n],`Failed to stop PostgreSQL process ${e.pid}.`):n}}async function S(e,t){try{await s({dataDir:e,expectedPid:t,mode:`fast`,timeoutMs:d})}catch(n){try{await s({dataDir:e,expectedPid:t,mode:`immediate`,timeoutMs:d})}catch(e){throw AggregateError([n,e],`Failed to stop PostgreSQL process ${t}.`)}}}async function C(e,n){try{await s({dataDir:e,mode:`immediate`,timeoutMs:d})}catch(t){throw AggregateError([n,t],`Temporary PostgreSQL failed to start and could not be stopped for ${e}.`)}await t.rm(e,{force:!0,recursive:!0})}function w(e){return{env:e,async[Symbol.asyncDispose](){}}}async function T(e){let r;try{r=await t.readFile(i.join(e,`postmaster.pid`),`utf8`)}catch{return}let[a,,,o,,s]=r.split(/\r?\n/),c=Number(a);if(!Number.isSafeInteger(c)||c<=0)return;try{n.kill(c,0)}catch(e){if(!O(e)||e.code!==`EPERM`)return}let l=Number(o);if(!Number.isSafeInteger(l)||l<=0||l>65535||!s)throw Error(`Cannot read connection details for PostgreSQL process ${c} from ${e}.`);return{host:s,pid:c,port:l}}function E(e,t,{host:n,port:r}){let i=new URL(`postgresql://${n}:${r}/${l}`);return i.username=p.name,i.password=p.password,v(e,{DATABASE_URL:i.href,PGDATA:t,PGDATABASE:l,PGHOST:n,PGPASSWORD:p.password,PGPORT:String(r),PGUSER:p.name})}async function D(e,n){if(e instanceof o)return new m(e.dataDir,e.pid,{cause:e});let r=e instanceof Error?e.message:String(e),i;if(n)try{i=(await t.readFile(n,`utf8`)).trim()||void 0}catch{}let a=i?`\n\nPostgreSQL output:\n${i}`:``,s=n?`\n\nPostgreSQL log: ${n}`:``;return Error(`Local PostgreSQL failed to start: ${r}${a}${s}`,{cause:e})}function O(e){return e instanceof Error}function k(e=process.env){let t=e.DATABASE_URL||A(e);if(!t)throw Error(`DATABASE_URL or PGDATABASE, PGHOST, PGPORT, and PGUSER are required.`);return t}function A(e){let{PGDATABASE:t,PGHOST:n,PGPASSWORD:r,PGPORT:i,PGUSER:a}=e;if(!t||!n||!i||!a)return;let o=new URL(`postgresql://${n}:${i}/${t}`);return o.username=a,r&&(o.password=r),o.href}export{c as LOCAL_POSTGRES_ENV_FLAG,m as ProjectPostgresAlreadyRunningError,y as createLocalPostgresDb,v as createLocalPostgresEnv,k as getLocalPostgresConnectionString,h as startProjectPostgres,_ as startTemporaryProjectPostgres,g as stopProjectPostgres};

package/dist/db/migrate-held.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import{createProjectDeployDatabase as e}from"./project.js";import{collectHeldMigrationFiles as t,formatMigrationList as n}from"../deploy/migrations.js";import{readFile as r}from"node:fs/promises";import{createHash as i}from"node:crypto";const a=`--confirm=run-held-migrations`,o=[`-- Held migration:`,`-- Safe after:`,`-- Verification:`];async function s({argv:i=process.argv.slice(2),env:o=process.env}={}){let s=await t();if(console.log(`Held migration files:`),console.log(n(s)),!i.includes(a))throw Error(`Held migrations require explicit confirmation. Re-run with ${a}.`);if(s.length===0){console.log(`No held migrations to run.`);return}let d=await e({env:o});try{await u(d);for(let e of s){let t=await r(e.path,`utf8`);c(t,e.relativePath);let n=l(t),i=await d.execute(f(d.dialect,e.id));if(i.rows.length===1){if(i.rows[0]?.sha256!==n)throw Error(`Held migration ${e.relativePath} changed after it was applied.`);console.log(`Skipping already-applied held migration ${e.relativePath}`);continue}console.log(`Applying held migration ${e.relativePath}`),await h(d,async r=>{await r.execute(t),await r.execute(p(d.dialect,e.id,n))})}}finally{await d.close?.()}}function c(e,t){let n=o.filter(t=>!e.includes(t));if(n.length>0)throw Error(`${t} is missing held migration header fields: ${n.join(`, `)}`)}function l(e){return i(`sha256`).update(e).digest(`hex`)}async function u(e){for(let t of d(e.dialect))await e.execute(t)}function d(e){switch(e){case`postgres`:return[`create schema if not exists drizzle`,`create table if not exists drizzle.__held_migrations (
+import{createProjectDeployDatabase as e}from"./project.js";import{collectHeldMigrationFiles as t,formatMigrationList as n}from"../deploy/migrations.js";import{createHash as r}from"node:crypto";import{readFile as i}from"node:fs/promises";const a=`--confirm=run-held-migrations`,o=[`-- Held migration:`,`-- Safe after:`,`-- Verification:`];async function s({argv:r=process.argv.slice(2),env:o=process.env}={}){let s=await t();if(console.log(`Held migration files:`),console.log(n(s)),!r.includes(a))throw Error(`Held migrations require explicit confirmation. Re-run with ${a}.`);if(s.length===0){console.log(`No held migrations to run.`);return}let d=await e({env:o});try{await u(d);for(let e of s){let t=await i(e.path,`utf8`);c(t,e.relativePath);let n=l(t),r=await d.execute(f(d.dialect,e.id));if(r.rows.length===1){if(r.rows[0]?.sha256!==n)throw Error(`Held migration ${e.relativePath} changed after it was applied.`);console.log(`Skipping already-applied held migration ${e.relativePath}`);continue}console.log(`Applying held migration ${e.relativePath}`),await h(d,async r=>{await r.execute(t),await r.execute(p(d.dialect,e.id,n))})}}finally{await d.close?.()}}function c(e,t){let n=o.filter(t=>!e.includes(t));if(n.length>0)throw Error(`${t} is missing held migration header fields: ${n.join(`, `)}`)}function l(e){return r(`sha256`).update(e).digest(`hex`)}async function u(e){for(let t of d(e.dialect))await e.execute(t)}function d(e){switch(e){case`postgres`:return[`create schema if not exists drizzle`,`create table if not exists drizzle.__held_migrations (
           id text primary key,
           sha256 text not null,
           applied_at timestamptz not null default now()

package/dist/deploy/access-token-secret.js

@@ -1 +1 @@
-import e,{SubprocessError as t}from"nano-spawn";import{randomBytes as n}from"node:crypto";const r=`COREFRAME_ACCESS_TOKEN_SECRET`;async function i({cwd:e=process.cwd(),environment:t,generateSecret:n=s,listSecretNames:i=c}){try{if((await i(t,e)).includes(`COREFRAME_ACCESS_TOKEN_SECRET`))return{provisioned:!1}}catch(e){if(!u(e))throw Error(`Could not inspect the ${t} Worker before provisioning ${r}. Refusing to risk replacing an existing signing secret.`,{cause:e})}return{provisioned:!0,value:n()}}async function a({cwd:e=process.cwd(),environment:t,listSecretNames:n=c}){if(!(await n(t,e)).includes(`COREFRAME_ACCESS_TOKEN_SECRET`))throw Error(`Cloudflare deployed the ${t} Worker without ${r}.`)}async function o({cwd:e=process.cwd(),environment:t,generateSecret:n=s,listSecretNames:i=c,writeSecret:o=l}){await o(t,r,n(),e),await a({cwd:e,environment:t,listSecretNames:i})}function s(){return n(32).toString(`base64url`)}async function c(t,n){let{stdout:r}=await e(`pnpm`,[`exec`,`wrangler`,`secret`,`list`,`--env`,t,`--format`,`json`],{cwd:n,stdin:`ignore`}),i=JSON.parse(r);if(!Array.isArray(i))throw Error(`Wrangler returned an invalid Worker secret list.`);return i.flatMap(e=>e&&typeof e==`object`&&`name`in e&&typeof e.name==`string`?[e.name]:[])}async function l(t,n,r,i){await e(`pnpm`,[`exec`,`wrangler`,`secret`,`put`,n,`--env`,t],{cwd:i,stdin:{string:r},stdout:`inherit`,stderr:`inherit`})}function u(e){return e instanceof t&&e.stderr.includes(`not found`)&&e.stderr.includes("If this is a new Worker, run `wrangler deploy` first")}export{r as accessTokenSigningSecretName,s as generateAccessTokenSigningSecret,i as prepareAccessTokenSigningSecret,o as rotateAccessTokenSigningSecret,a as verifyAccessTokenSigningSecret};
+import{randomBytes as e}from"node:crypto";import t,{SubprocessError as n}from"nano-spawn";const r=`COREFRAME_ACCESS_TOKEN_SECRET`;async function i({cwd:e=process.cwd(),environment:t,generateSecret:n=s,listSecretNames:i=c}){try{if((await i(t,e)).includes(`COREFRAME_ACCESS_TOKEN_SECRET`))return{provisioned:!1}}catch(e){if(!u(e))throw Error(`Could not inspect the ${t} Worker before provisioning ${r}. Refusing to risk replacing an existing signing secret.`,{cause:e})}return{provisioned:!0,value:n()}}async function a({cwd:e=process.cwd(),environment:t,listSecretNames:n=c}){if(!(await n(t,e)).includes(`COREFRAME_ACCESS_TOKEN_SECRET`))throw Error(`Cloudflare deployed the ${t} Worker without ${r}.`)}async function o({cwd:e=process.cwd(),environment:t,generateSecret:n=s,listSecretNames:i=c,writeSecret:o=l}){await o(t,r,n(),e),await a({cwd:e,environment:t,listSecretNames:i})}function s(){return e(32).toString(`base64url`)}async function c(e,n){let{stdout:r}=await t(`pnpm`,[`exec`,`wrangler`,`secret`,`list`,`--env`,e,`--format`,`json`],{cwd:n,stdin:`ignore`}),i=JSON.parse(r);if(!Array.isArray(i))throw Error(`Wrangler returned an invalid Worker secret list.`);return i.flatMap(e=>e&&typeof e==`object`&&`name`in e&&typeof e.name==`string`?[e.name]:[])}async function l(e,n,r,i){await t(`pnpm`,[`exec`,`wrangler`,`secret`,`put`,n,`--env`,e],{cwd:i,stdin:{string:r},stdout:`inherit`,stderr:`inherit`})}function u(e){return e instanceof n&&e.stderr.includes(`not found`)&&e.stderr.includes("If this is a new Worker, run `wrangler deploy` first")}export{r as accessTokenSigningSecretName,s as generateAccessTokenSigningSecret,i as prepareAccessTokenSigningSecret,o as rotateAccessTokenSigningSecret,a as verifyAccessTokenSigningSecret};

package/dist/deploy/tauri-release.js

@@ -1 +1 @@
-import{tauriReleasePlatforms as e}from"./config.js";import{access as t,cp as n,mkdir as r,readFile as i,rm as a,stat as o,writeFile as s}from"node:fs/promises";import{basename as c,dirname as l,join as u,relative as d,resolve as f,sep as p}from"node:path";import m from"nano-spawn";import{randomUUID as h}from"node:crypto";import{constants as g}from"node:fs";import{setTimeout as _}from"node:timers/promises";import{glob as v}from"tinyglobby";const y={android:{artifactGlobs:[`src-tauri/target/**/*.sig`,`src-tauri/gen/android/**/*.sig`],buildArgs:[`tauri`,`android`,`build`,`--target`,`aarch64-linux-android`],targetTriple:`aarch64-linux-android`,updatePlatform:`android-aarch64`},ios:{artifactGlobs:[`src-tauri/target/**/*.sig`,`src-tauri/gen/apple/**/*.sig`],buildArgs:[`tauri`,`ios`,`build`,`--target`,`aarch64-apple-ios`],targetTriple:`aarch64-apple-ios`,updatePlatform:`ios-aarch64`},linux:{artifactGlobs:[`src-tauri/target/x86_64-unknown-linux-gnu/release/bundle/**/*.sig`,`src-tauri/target/release/bundle/**/*.sig`,`src-tauri/target/**/release/bundle/**/*.sig`],buildArgs:[`tauri`,`build`,`--target`,`x86_64-unknown-linux-gnu`,`--`,`--locked`],targetTriple:`x86_64-unknown-linux-gnu`,updatePlatform:`linux-x86_64`},macos:{artifactGlobs:[`src-tauri/target/aarch64-apple-darwin/release/bundle/**/*.sig`,`src-tauri/target/release/bundle/**/*.sig`,`src-tauri/target/**/release/bundle/**/*.sig`],buildArgs:[`tauri`,`build`,`--target`,`aarch64-apple-darwin`,`--`,`--locked`],targetTriple:`aarch64-apple-darwin`,updatePlatform:`darwin-aarch64`},windows:{artifactGlobs:[`src-tauri/target/x86_64-pc-windows-msvc/release/bundle/**/*.sig`,`src-tauri/target/release/bundle/**/*.sig`,`src-tauri/target/**/release/bundle/**/*.sig`],buildArgs:[`tauri`,`build`,`--target`,`x86_64-pc-windows-msvc`,`--`,`--locked`],targetTriple:`x86_64-pc-windows-msvc`,updatePlatform:`windows-x86_64`}};function b(e){return e?e.split(/[,\s]+/u).filter(Boolean).map(e=>x(e)):[]}function x(t){if(X(t))return t;throw Error(`Invalid Tauri release platform "${t}". Expected one of: ${e.join(`, `)}.`)}function S({args:e,config:t={},env:n}){let r=Y([...t.localPlatforms??[],...b(n.TAURI_RELEASE_LOCAL_PLATFORMS),...e.tauriLocalPlatforms]),i=Y([...t.workflowPlatforms??[],...b(n.TAURI_RELEASE_WORKFLOW_PLATFORMS),...e.tauriWorkflowPlatforms]),a=r.filter(e=>i.includes(e));if(a.length>0)throw Error(`Build each Tauri release platform either locally or through the workflow, not both: ${a.join(`, `)}.`);return{artifactDownloadDir:n.TAURI_RELEASE_ARTIFACT_DOWNLOAD_DIR??t.artifactDownloadDir??`.coreframe/tauri-artifacts`,b2ApplicationKey:n.B2_APPLICATION_KEY??n.B2_SECRET_ACCESS_KEY,b2ApplicationKeyId:n.B2_APPLICATION_KEY_ID??n.B2_KEY_ID??n.B2_ACCESS_KEY_ID,b2Bucket:t.b2Bucket??n.B2_BUCKET,enabled:r.length>0||i.length>0,latestManifestPath:n.TAURI_RELEASE_LATEST_MANIFEST_PATH??t.latestManifestPath??`latest.json`,localPlatforms:r,platform:L(t.platform,n),publicBaseUrl:t.publicBaseUrl??n.TAURI_RELEASE_PUBLIC_BASE_URL??n.UPDATE_PUBLIC_BASE_URL,publicPathPrefix:n.TAURI_RELEASE_PUBLIC_PATH_PREFIX??t.publicPathPrefix??n.UPDATE_PUBLIC_PATH_PREFIX??``,releaseNotesPath:n.TAURI_RELEASE_NOTES_FILE??t.releaseNotesPath,releasePath:n.TAURI_RELEASE_PATH??t.releasePath??"releases/${version}",releaseUploadDir:n.TAURI_RELEASE_UPLOAD_DIR??t.releaseUploadDir??`release-upload`,signingPrivateKey:n.TAURI_SIGNING_PRIVATE_KEY,workflowName:e.tauriWorkflowName??n.TAURI_RELEASE_WORKFLOW_NAME??t.workflowName??`tauri-release-artifacts.yml`,workflowPlatforms:i,workflowPollIntervalMs:J(n.TAURI_RELEASE_WORKFLOW_POLL_SECONDS,`TAURI_RELEASE_WORKFLOW_POLL_SECONDS`)*1e3||t.workflowPollIntervalMs||15e3,workflowRef:e.tauriWorkflowRef??n.TAURI_RELEASE_WORKFLOW_REF??t.workflowRef,workflowTimeoutMs:J(n.TAURI_RELEASE_WORKFLOW_TIMEOUT_MINUTES,`TAURI_RELEASE_WORKFLOW_TIMEOUT_MINUTES`)*6e4||t.workflowTimeoutMs||36e5}}async function C(e,t=process.cwd()){if(!e.enabled)return;let n=[[`TAURI_RELEASE_PUBLIC_BASE_URL`,e.publicBaseUrl],[`B2_APPLICATION_KEY_ID`,e.b2ApplicationKeyId],[`B2_APPLICATION_KEY`,e.b2ApplicationKey],[`B2_BUCKET`,e.b2Bucket]].flatMap(([e,t])=>t?[]:[e]);if(n.length>0)throw Error(`Missing required Tauri release configuration: ${n.join(`, `)}`);try{new URL(e.publicBaseUrl)}catch{throw Error(`Invalid TAURI_RELEASE_PUBLIC_BASE_URL: ${e.publicBaseUrl}`)}let r=u(t,`src-tauri/tauri.conf.json`);if(!await Z(r))throw Error(`Tauri release platforms were requested, but src-tauri/tauri.conf.json does not exist.`);if(w(await i(r,`utf8`),r),e.localPlatforms.length>0&&!e.signingPrivateKey)throw Error(`TAURI_SIGNING_PRIVATE_KEY is required for local Tauri release builds.`);e.workflowPlatforms.length>0&&await m(`gh`,[`workflow`,`view`,e.workflowName,`--ref`,e.workflowRef??await H()],{stdin:`ignore`}),await m(`b2`,[`version`],{stdin:`ignore`})}function w(e,t=`src-tauri/tauri.conf.json`){let n=JSON.parse(e).identifier;if(typeof n!=`string`||n===`com.example`||n.startsWith(`com.example.`))throw Error(`${t} must use an organization-owned reverse-domain identifier before building release artifacts.`);return n}async function T(e,t,n=process.cwd()){if(!e.enabled)return{files:[]};let r=u(n,`src-tauri/tauri.conf.json`),a=u(n,`src-tauri/Cargo.toml`),o=u(n,`src-tauri/Cargo.lock`),c=await i(r,`utf8`),l=await i(a,`utf8`),d=z(l,a),f=[{path:r,source:c},{path:a,source:l}],p=[],m=JSON.parse(c);if(m.version=t,m.bundle={...m.bundle??{},createUpdaterArtifacts:!0},p.push({path:r,source:`${JSON.stringify(m,null,2)}\n`}),p.push({path:a,source:B(l,d,t,a)}),await Z(o)){let e=await i(o,`utf8`);f.push({path:o,source:e}),p.push({path:o,source:V(e,d,t,o)})}for(let e of p)await s(e.path,e.source);return{files:f}}async function E(e){for(let t of e.files)await s(t.path,t.source)}async function D({env:e,plan:t,releaseName:n,version:r}){if(!t.enabled)return;await U(t.artifactDownloadDir),await U(t.releaseUploadDir);let i=t.workflowPlatforms.length>0?await j({plan:t,releaseName:n,version:r}):void 0;for(let n of t.localPlatforms)await P(n,t,e);if(i){let e=await M(t,i.runNameMarker);await m(`gh`,[`run`,`download`,String(e),`--dir`,t.artifactDownloadDir],{stdio:`inherit`})}return A({plan:t,version:r})}async function O(e,t){await m(`b2`,[`account`,`authorize`,e.b2ApplicationKeyId,e.b2ApplicationKey],{stdin:`ignore`});let n=(await v(`**/*`,{cwd:t.uploadDir,onlyFiles:!0})).sort((e,n)=>e===t.manifestPath?1:n===t.manifestPath?-1:e.localeCompare(n));for(let r of n)await m(`b2`,[`file`,`upload`,e.b2Bucket,u(t.uploadDir,r),r],{stdin:`ignore`}),console.log(`Uploaded ${r}`)}function k({artifacts:e,notes:t,pubDate:n=new Date,version:r}){return{...t?{notes:t}:{},platforms:Object.fromEntries(e.map(e=>[e.updatePlatform,{signature:e.signature,url:e.url}])),pub_date:n.toISOString(),version:r}}async function A({plan:e,version:t}){let a=q(e.publicPathPrefix,G(e.releasePath,t)),o=q(e.publicPathPrefix,e.latestManifestPath),d=[...e.localPlatforms,...e.workflowPlatforms],f=[];for(let o of d){let s=e.platform[o],d=e.localPlatforms.includes(o)?`.`:u(e.artifactDownloadDir,`tauri-${o}-${t}`),p=await F({globs:e.localPlatforms.includes(o)?s.artifactGlobs:[`**/*.sig`],sourceRoot:d,version:t}),m=q(a,s.updatePlatform),h=q(m,c(p.artifactPath)),g=q(m,c(p.signaturePath)),_=u(e.releaseUploadDir,...h.split(`/`)),v=u(e.releaseUploadDir,...g.split(`/`)),y=(await i(p.signaturePath,`utf8`)).trim();await r(l(_),{recursive:!0}),await n(p.artifactPath,_),await n(p.signaturePath,v),f.push({signature:y,updatePlatform:s.updatePlatform,url:K(e.publicBaseUrl,h)})}let p=k({artifacts:f,notes:e.releaseNotesPath?await i(e.releaseNotesPath,`utf8`):void 0,version:t}),m=u(e.releaseUploadDir,...o.split(`/`));return await r(l(m),{recursive:!0}),await s(m,`${JSON.stringify(p,null,2)}\n`),{manifestPath:o,uploadDir:e.releaseUploadDir}}async function j({plan:t,releaseName:n,version:r}){let i=t.workflowRef??await H(),a=`coreframe-${Date.now()}-${h().slice(0,8)}`;return await m(`gh`,[`workflow`,`run`,t.workflowName,`--ref`,i,`-f`,`release_name=${n}`,`-f`,`run_id=${a}`,`-f`,`version=${r}`,...e.flatMap(e=>[`-f`,`${e}=${t.workflowPlatforms.includes(e)?`true`:`false`}`])],{stdin:`ignore`}),{runNameMarker:a}}async function M(e,t){let n=Date.now()+e.workflowTimeoutMs;for(;Date.now()<n;){let n=await N(e,t);if(n?.status===`completed`){if(n.conclusion===`success`)return n.databaseId;throw Error(`Tauri release workflow ${n.databaseId} finished with ${n.conclusion}.`)}await _(e.workflowPollIntervalMs)}throw Error(`Timed out waiting for Tauri release workflow after ${Math.round(e.workflowTimeoutMs/6e4)} minutes.`)}async function N(e,t){let{stdout:n}=await m(`gh`,[`run`,`list`,`--workflow`,e.workflowName,`--event`,`workflow_dispatch`,`--json`,`conclusion,databaseId,displayTitle,status`,`--limit`,`50`],{stdin:`ignore`});return JSON.parse(n).find(e=>e.displayTitle.includes(t))}async function P(e,t,n){await m(`pnpm`,t.platform[e].buildArgs,{env:n,stdio:`inherit`})}async function F({globs:e,sourceRoot:t,version:n}){let r=await v(e,{cwd:t,absolute:!0,onlyFiles:!0}),i=[];for(let e of r){let t=e.replace(/\.sig$/u,``);await Q(t)&&i.push({artifactPath:t,signaturePath:e})}if(i.length===0)throw Error(`Could not find a Tauri updater artifact and .sig pair under ${t}.`);return i.sort((e,t)=>{let r=I(e.artifactPath,n);return I(t.artifactPath,n)-r||e.artifactPath.localeCompare(t.artifactPath)})[0]}function I(e,t){let n=0;return e.includes(t)&&(n+=100),/\.(app\.tar\.gz|AppImage\.tar\.gz|zip)$/u.test(e)&&(n+=10),/\.(exe|msi|dmg|AppImage|deb|rpm|apk|aab|ipa)$/u.test(e)&&(n+=5),n}function L(t={},n){return Object.fromEntries(e.map(e=>{let r=t[e]??{},i={...y[e],...r},a=n[`TAURI_RELEASE_${e.toUpperCase()}_TARGET_TRIPLE`],o=n[`TAURI_RELEASE_${e.toUpperCase()}_UPDATE_PLATFORM`],s=a??i.targetTriple,c=r.buildArgs?r.buildArgs:R(e,s);return[e,{...i,artifactGlobs:i.artifactGlobs??y[e].artifactGlobs,buildArgs:c,targetTriple:s,updatePlatform:o??i.updatePlatform}]}))}function R(e,t){return e===`android`?[`tauri`,`android`,`build`,`--target`,t]:e===`ios`?[`tauri`,`ios`,`build`,`--target`,t]:[`tauri`,`build`,`--target`,t,`--`,`--locked`]}function z(e,t){let n=/^\[package\][\s\S]*?^name = "(?<name>[^"]+)"/mu.exec(e);if(!n?.groups?.name)throw Error(`${t} is missing a [package] name.`);return n.groups.name}function B(e,t,n,r){let i=RegExp(`(^\\[package\\][\\s\\S]*?^name = "${$(t)}"[\\s\\S]*?^version = ")[^"]+(")`,`mu`),a=e.replace(i,`$1${n}$2`);if(a===e)throw Error(`${r} is missing a package version for ${t}.`);return a}function V(e,t,n,r){let i=RegExp(`(\\[\\[package\\]\\]\\nname = "${$(t)}"\\nversion = ")[^"]+(")`,`u`),a=e.replace(i,`$1${n}$2`);if(a===e)throw Error(`${r} is missing a package lock entry for ${t}.`);return a}async function H(){let{stdout:e}=await m(`git`,[`rev-parse`,`--abbrev-ref`,`HEAD`],{stdin:`ignore`}),t=e.trim();if(t!==`HEAD`)return t;let{stdout:n}=await m(`git`,[`rev-parse`,`HEAD`],{stdin:`ignore`});return n.trim()}async function U(e){W(e),await a(e,{force:!0,recursive:!0}),await r(e,{recursive:!0})}function W(e){let t=f(e),n=d(process.cwd(),t).split(p).join(`/`);if(n===``||n===`.`||n.startsWith(`../`)||n===`src-tauri`||n.startsWith(`src-tauri/`)||n===`tauri`||n.startsWith(`tauri/`))throw Error(`Refusing to reset unsafe Tauri release directory: ${e}`)}function G(e,t){return e.replaceAll("${version}",t)}function K(e,t){let n=new URL(e),r=q(n.pathname.replace(/\/+$/u,``),t);return n.pathname=r.startsWith(`/`)?r:`/${r}`,n.toString()}function q(...e){return e.flatMap(e=>e.split(`/`)).map(e=>e.trim()).filter(Boolean).join(`/`)}function J(e,t){if(!e)return 0;let n=Number(e);if(!Number.isInteger(n)||n<=0)throw Error(`${t} must be a positive integer.`);return n}function Y(e){return[...new Set(e)]}function X(t){return e.includes(t)}async function Z(e){try{return await t(e,g.F_OK),!0}catch{return!1}}async function Q(e){try{return(await o(e)).isFile()}catch{return!1}}function $(e){return e.replace(/[.*+?^${}()|[\]\\]/gu,`\\$&`)}export{A as createTauriReleaseUpload,k as createTauriUpdateManifest,x as parseTauriReleasePlatform,b as parseTauriReleasePlatformList,D as prepareTauriRelease,S as resolveTauriReleasePlan,E as restoreTauriReleaseMetadata,O as uploadTauriReleaseToB2,w as validateTauriReleaseIdentifier,C as validateTauriReleasePlan,T as writeTauriReleaseMetadata};
+import{tauriReleasePlatforms as e}from"./config.js";import{randomUUID as t}from"node:crypto";import{access as n,cp as r,mkdir as i,readFile as a,rm as o,stat as s,writeFile as c}from"node:fs/promises";import{basename as l,dirname as u,join as d,relative as f,resolve as p,sep as m}from"node:path";import h from"nano-spawn";import{constants as g}from"node:fs";import{setTimeout as _}from"node:timers/promises";import{glob as v}from"tinyglobby";const y={android:{artifactGlobs:[`src-tauri/target/**/*.sig`,`src-tauri/gen/android/**/*.sig`],buildArgs:[`tauri`,`android`,`build`,`--target`,`aarch64-linux-android`],targetTriple:`aarch64-linux-android`,updatePlatform:`android-aarch64`},ios:{artifactGlobs:[`src-tauri/target/**/*.sig`,`src-tauri/gen/apple/**/*.sig`],buildArgs:[`tauri`,`ios`,`build`,`--target`,`aarch64-apple-ios`],targetTriple:`aarch64-apple-ios`,updatePlatform:`ios-aarch64`},linux:{artifactGlobs:[`src-tauri/target/x86_64-unknown-linux-gnu/release/bundle/**/*.sig`,`src-tauri/target/release/bundle/**/*.sig`,`src-tauri/target/**/release/bundle/**/*.sig`],buildArgs:[`tauri`,`build`,`--target`,`x86_64-unknown-linux-gnu`,`--`,`--locked`],targetTriple:`x86_64-unknown-linux-gnu`,updatePlatform:`linux-x86_64`},macos:{artifactGlobs:[`src-tauri/target/aarch64-apple-darwin/release/bundle/**/*.sig`,`src-tauri/target/release/bundle/**/*.sig`,`src-tauri/target/**/release/bundle/**/*.sig`],buildArgs:[`tauri`,`build`,`--target`,`aarch64-apple-darwin`,`--`,`--locked`],targetTriple:`aarch64-apple-darwin`,updatePlatform:`darwin-aarch64`},windows:{artifactGlobs:[`src-tauri/target/x86_64-pc-windows-msvc/release/bundle/**/*.sig`,`src-tauri/target/release/bundle/**/*.sig`,`src-tauri/target/**/release/bundle/**/*.sig`],buildArgs:[`tauri`,`build`,`--target`,`x86_64-pc-windows-msvc`,`--`,`--locked`],targetTriple:`x86_64-pc-windows-msvc`,updatePlatform:`windows-x86_64`}};function b(e){return e?e.split(/[,\s]+/u).filter(Boolean).map(e=>x(e)):[]}function x(t){if(X(t))return t;throw Error(`Invalid Tauri release platform "${t}". Expected one of: ${e.join(`, `)}.`)}function S({args:e,config:t={},env:n}){let r=Y([...t.localPlatforms??[],...b(n.TAURI_RELEASE_LOCAL_PLATFORMS),...e.tauriLocalPlatforms]),i=Y([...t.workflowPlatforms??[],...b(n.TAURI_RELEASE_WORKFLOW_PLATFORMS),...e.tauriWorkflowPlatforms]),a=r.filter(e=>i.includes(e));if(a.length>0)throw Error(`Build each Tauri release platform either locally or through the workflow, not both: ${a.join(`, `)}.`);return{artifactDownloadDir:n.TAURI_RELEASE_ARTIFACT_DOWNLOAD_DIR??t.artifactDownloadDir??`.coreframe/tauri-artifacts`,b2ApplicationKey:n.B2_APPLICATION_KEY??n.B2_SECRET_ACCESS_KEY,b2ApplicationKeyId:n.B2_APPLICATION_KEY_ID??n.B2_KEY_ID??n.B2_ACCESS_KEY_ID,b2Bucket:t.b2Bucket??n.B2_BUCKET,enabled:r.length>0||i.length>0,latestManifestPath:n.TAURI_RELEASE_LATEST_MANIFEST_PATH??t.latestManifestPath??`latest.json`,localPlatforms:r,platform:L(t.platform,n),publicBaseUrl:t.publicBaseUrl??n.TAURI_RELEASE_PUBLIC_BASE_URL??n.UPDATE_PUBLIC_BASE_URL,publicPathPrefix:n.TAURI_RELEASE_PUBLIC_PATH_PREFIX??t.publicPathPrefix??n.UPDATE_PUBLIC_PATH_PREFIX??``,releaseNotesPath:n.TAURI_RELEASE_NOTES_FILE??t.releaseNotesPath,releasePath:n.TAURI_RELEASE_PATH??t.releasePath??"releases/${version}",releaseUploadDir:n.TAURI_RELEASE_UPLOAD_DIR??t.releaseUploadDir??`release-upload`,signingPrivateKey:n.TAURI_SIGNING_PRIVATE_KEY,workflowName:e.tauriWorkflowName??n.TAURI_RELEASE_WORKFLOW_NAME??t.workflowName??`tauri-release-artifacts.yml`,workflowPlatforms:i,workflowPollIntervalMs:J(n.TAURI_RELEASE_WORKFLOW_POLL_SECONDS,`TAURI_RELEASE_WORKFLOW_POLL_SECONDS`)*1e3||t.workflowPollIntervalMs||15e3,workflowRef:e.tauriWorkflowRef??n.TAURI_RELEASE_WORKFLOW_REF??t.workflowRef,workflowTimeoutMs:J(n.TAURI_RELEASE_WORKFLOW_TIMEOUT_MINUTES,`TAURI_RELEASE_WORKFLOW_TIMEOUT_MINUTES`)*6e4||t.workflowTimeoutMs||36e5}}async function C(e,t=process.cwd()){if(!e.enabled)return;let n=[[`TAURI_RELEASE_PUBLIC_BASE_URL`,e.publicBaseUrl],[`B2_APPLICATION_KEY_ID`,e.b2ApplicationKeyId],[`B2_APPLICATION_KEY`,e.b2ApplicationKey],[`B2_BUCKET`,e.b2Bucket]].flatMap(([e,t])=>t?[]:[e]);if(n.length>0)throw Error(`Missing required Tauri release configuration: ${n.join(`, `)}`);try{new URL(e.publicBaseUrl)}catch{throw Error(`Invalid TAURI_RELEASE_PUBLIC_BASE_URL: ${e.publicBaseUrl}`)}let r=d(t,`src-tauri/tauri.conf.json`);if(!await Z(r))throw Error(`Tauri release platforms were requested, but src-tauri/tauri.conf.json does not exist.`);if(w(await a(r,`utf8`),r),e.localPlatforms.length>0&&!e.signingPrivateKey)throw Error(`TAURI_SIGNING_PRIVATE_KEY is required for local Tauri release builds.`);e.workflowPlatforms.length>0&&await h(`gh`,[`workflow`,`view`,e.workflowName,`--ref`,e.workflowRef??await H()],{stdin:`ignore`}),await h(`b2`,[`version`],{stdin:`ignore`})}function w(e,t=`src-tauri/tauri.conf.json`){let n=JSON.parse(e).identifier;if(typeof n!=`string`||n===`com.example`||n.startsWith(`com.example.`))throw Error(`${t} must use an organization-owned reverse-domain identifier before building release artifacts.`);return n}async function T(e,t,n=process.cwd()){if(!e.enabled)return{files:[]};let r=d(n,`src-tauri/tauri.conf.json`),i=d(n,`src-tauri/Cargo.toml`),o=d(n,`src-tauri/Cargo.lock`),s=await a(r,`utf8`),l=await a(i,`utf8`),u=z(l,i),f=[{path:r,source:s},{path:i,source:l}],p=[],m=JSON.parse(s);if(m.version=t,m.bundle={...m.bundle??{},createUpdaterArtifacts:!0},p.push({path:r,source:`${JSON.stringify(m,null,2)}\n`}),p.push({path:i,source:B(l,u,t,i)}),await Z(o)){let e=await a(o,`utf8`);f.push({path:o,source:e}),p.push({path:o,source:V(e,u,t,o)})}for(let e of p)await c(e.path,e.source);return{files:f}}async function E(e){for(let t of e.files)await c(t.path,t.source)}async function D({env:e,plan:t,releaseName:n,version:r}){if(!t.enabled)return;await U(t.artifactDownloadDir),await U(t.releaseUploadDir);let i=t.workflowPlatforms.length>0?await j({plan:t,releaseName:n,version:r}):void 0;for(let n of t.localPlatforms)await P(n,t,e);if(i){let e=await M(t,i.runNameMarker);await h(`gh`,[`run`,`download`,String(e),`--dir`,t.artifactDownloadDir],{stdio:`inherit`})}return A({plan:t,version:r})}async function O(e,t){await h(`b2`,[`account`,`authorize`,e.b2ApplicationKeyId,e.b2ApplicationKey],{stdin:`ignore`});let n=(await v(`**/*`,{cwd:t.uploadDir,onlyFiles:!0})).sort((e,n)=>e===t.manifestPath?1:n===t.manifestPath?-1:e.localeCompare(n));for(let r of n)await h(`b2`,[`file`,`upload`,e.b2Bucket,d(t.uploadDir,r),r],{stdin:`ignore`}),console.log(`Uploaded ${r}`)}function k({artifacts:e,notes:t,pubDate:n=new Date,version:r}){return{...t?{notes:t}:{},platforms:Object.fromEntries(e.map(e=>[e.updatePlatform,{signature:e.signature,url:e.url}])),pub_date:n.toISOString(),version:r}}async function A({plan:e,version:t}){let n=q(e.publicPathPrefix,G(e.releasePath,t)),o=q(e.publicPathPrefix,e.latestManifestPath),s=[...e.localPlatforms,...e.workflowPlatforms],f=[];for(let o of s){let s=e.platform[o],c=e.localPlatforms.includes(o)?`.`:d(e.artifactDownloadDir,`tauri-${o}-${t}`),p=await F({globs:e.localPlatforms.includes(o)?s.artifactGlobs:[`**/*.sig`],sourceRoot:c,version:t}),m=q(n,s.updatePlatform),h=q(m,l(p.artifactPath)),g=q(m,l(p.signaturePath)),_=d(e.releaseUploadDir,...h.split(`/`)),v=d(e.releaseUploadDir,...g.split(`/`)),y=(await a(p.signaturePath,`utf8`)).trim();await i(u(_),{recursive:!0}),await r(p.artifactPath,_),await r(p.signaturePath,v),f.push({signature:y,updatePlatform:s.updatePlatform,url:K(e.publicBaseUrl,h)})}let p=k({artifacts:f,notes:e.releaseNotesPath?await a(e.releaseNotesPath,`utf8`):void 0,version:t}),m=d(e.releaseUploadDir,...o.split(`/`));return await i(u(m),{recursive:!0}),await c(m,`${JSON.stringify(p,null,2)}\n`),{manifestPath:o,uploadDir:e.releaseUploadDir}}async function j({plan:n,releaseName:r,version:i}){let a=n.workflowRef??await H(),o=`coreframe-${Date.now()}-${t().slice(0,8)}`;return await h(`gh`,[`workflow`,`run`,n.workflowName,`--ref`,a,`-f`,`release_name=${r}`,`-f`,`run_id=${o}`,`-f`,`version=${i}`,...e.flatMap(e=>[`-f`,`${e}=${n.workflowPlatforms.includes(e)?`true`:`false`}`])],{stdin:`ignore`}),{runNameMarker:o}}async function M(e,t){let n=Date.now()+e.workflowTimeoutMs;for(;Date.now()<n;){let n=await N(e,t);if(n?.status===`completed`){if(n.conclusion===`success`)return n.databaseId;throw Error(`Tauri release workflow ${n.databaseId} finished with ${n.conclusion}.`)}await _(e.workflowPollIntervalMs)}throw Error(`Timed out waiting for Tauri release workflow after ${Math.round(e.workflowTimeoutMs/6e4)} minutes.`)}async function N(e,t){let{stdout:n}=await h(`gh`,[`run`,`list`,`--workflow`,e.workflowName,`--event`,`workflow_dispatch`,`--json`,`conclusion,databaseId,displayTitle,status`,`--limit`,`50`],{stdin:`ignore`});return JSON.parse(n).find(e=>e.displayTitle.includes(t))}async function P(e,t,n){await h(`pnpm`,t.platform[e].buildArgs,{env:n,stdio:`inherit`})}async function F({globs:e,sourceRoot:t,version:n}){let r=await v(e,{cwd:t,absolute:!0,onlyFiles:!0}),i=[];for(let e of r){let t=e.replace(/\.sig$/u,``);await Q(t)&&i.push({artifactPath:t,signaturePath:e})}if(i.length===0)throw Error(`Could not find a Tauri updater artifact and .sig pair under ${t}.`);return i.sort((e,t)=>{let r=I(e.artifactPath,n);return I(t.artifactPath,n)-r||e.artifactPath.localeCompare(t.artifactPath)})[0]}function I(e,t){let n=0;return e.includes(t)&&(n+=100),/\.(app\.tar\.gz|AppImage\.tar\.gz|zip)$/u.test(e)&&(n+=10),/\.(exe|msi|dmg|AppImage|deb|rpm|apk|aab|ipa)$/u.test(e)&&(n+=5),n}function L(t={},n){return Object.fromEntries(e.map(e=>{let r=t[e]??{},i={...y[e],...r},a=n[`TAURI_RELEASE_${e.toUpperCase()}_TARGET_TRIPLE`],o=n[`TAURI_RELEASE_${e.toUpperCase()}_UPDATE_PLATFORM`],s=a??i.targetTriple,c=r.buildArgs?r.buildArgs:R(e,s);return[e,{...i,artifactGlobs:i.artifactGlobs??y[e].artifactGlobs,buildArgs:c,targetTriple:s,updatePlatform:o??i.updatePlatform}]}))}function R(e,t){return e===`android`?[`tauri`,`android`,`build`,`--target`,t]:e===`ios`?[`tauri`,`ios`,`build`,`--target`,t]:[`tauri`,`build`,`--target`,t,`--`,`--locked`]}function z(e,t){let n=/^\[package\][\s\S]*?^name = "(?<name>[^"]+)"/mu.exec(e);if(!n?.groups?.name)throw Error(`${t} is missing a [package] name.`);return n.groups.name}function B(e,t,n,r){let i=RegExp(`(^\\[package\\][\\s\\S]*?^name = "${$(t)}"[\\s\\S]*?^version = ")[^"]+(")`,`mu`),a=e.replace(i,`$1${n}$2`);if(a===e)throw Error(`${r} is missing a package version for ${t}.`);return a}function V(e,t,n,r){let i=RegExp(`(\\[\\[package\\]\\]\\nname = "${$(t)}"\\nversion = ")[^"]+(")`,`u`),a=e.replace(i,`$1${n}$2`);if(a===e)throw Error(`${r} is missing a package lock entry for ${t}.`);return a}async function H(){let{stdout:e}=await h(`git`,[`rev-parse`,`--abbrev-ref`,`HEAD`],{stdin:`ignore`}),t=e.trim();if(t!==`HEAD`)return t;let{stdout:n}=await h(`git`,[`rev-parse`,`HEAD`],{stdin:`ignore`});return n.trim()}async function U(e){W(e),await o(e,{force:!0,recursive:!0}),await i(e,{recursive:!0})}function W(e){let t=p(e),n=f(process.cwd(),t).split(m).join(`/`);if(n===``||n===`.`||n.startsWith(`../`)||n===`src-tauri`||n.startsWith(`src-tauri/`)||n===`tauri`||n.startsWith(`tauri/`))throw Error(`Refusing to reset unsafe Tauri release directory: ${e}`)}function G(e,t){return e.replaceAll("${version}",t)}function K(e,t){let n=new URL(e),r=q(n.pathname.replace(/\/+$/u,``),t);return n.pathname=r.startsWith(`/`)?r:`/${r}`,n.toString()}function q(...e){return e.flatMap(e=>e.split(`/`)).map(e=>e.trim()).filter(Boolean).join(`/`)}function J(e,t){if(!e)return 0;let n=Number(e);if(!Number.isInteger(n)||n<=0)throw Error(`${t} must be a positive integer.`);return n}function Y(e){return[...new Set(e)]}function X(t){return e.includes(t)}async function Z(e){try{return await n(e,g.F_OK),!0}catch{return!1}}async function Q(e){try{return(await s(e)).isFile()}catch{return!1}}function $(e){return e.replace(/[.*+?^${}()|[\]\\]/gu,`\\$&`)}export{A as createTauriReleaseUpload,k as createTauriUpdateManifest,x as parseTauriReleasePlatform,b as parseTauriReleasePlatformList,D as prepareTauriRelease,S as resolveTauriReleasePlan,E as restoreTauriReleaseMetadata,O as uploadTauriReleaseToB2,w as validateTauriReleaseIdentifier,C as validateTauriReleasePlan,T as writeTauriReleaseMetadata};

package/dist/dev-lock.js

@@ -1 +1 @@
-import{link as e,mkdir as t,readFile as n,unlink as r,writeFile as i}from"node:fs/promises";import a from"node:path";import{randomUUID as o}from"node:crypto";import*as s from"@clack/prompts";import c from"node:process";const l={isRunning:h,stop(e){try{c.kill(e,`SIGTERM`)}catch(e){if(!v(e))throw e}},waitForExit:g};async function u({confirmStop:n=f,cwd:s=c.cwd(),interactive:u=c.stdin.isTTY===!0,pid:p=c.pid,processes:h=l}={}){let g=a.resolve(s,`.coreframe/dev.lock`),v={pid:p,token:o()},y=`${JSON.stringify(v)}\n`,b=`${g}.${v.token}.tmp`,x=!1;await t(a.dirname(g),{recursive:!0}),await i(b,y,{flag:`wx`,mode:384});try{for(;;){try{return await e(b,g),{async release(){await m(g,y)},takeoverApproved:x}}catch(e){if(!_(e))throw e}let t=await d({confirmStop:n,file:g,interactive:u,processes:h});if(t===void 0)return;x||=t}}finally{await r(b).catch(()=>void 0)}}async function d({confirmStop:e,file:t,interactive:n,processes:r}){let i=await p(t);if(!i||!r.isRunning(i.owner.pid))return await m(t,i?.source),!1;if(!n)throw Error(`Coreframe dev is already running for this project (PID ${i.owner.pid}). Stop it before starting another.`);if(await e(i.owner.pid))return r.stop(i.owner.pid),await r.waitForExit(i.owner.pid),await m(t,i.source),!0}async function f(e){let t=await s.confirm({initialValue:!1,message:`Coreframe dev is already running for this project (PID ${e}). Stop it and start here?`});return s.isCancel(t)||!t?(s.cancel(`Keeping the existing Coreframe dev process.`),!1):!0}async function p(e){try{let t=await n(e,`utf8`),r=JSON.parse(t);return!Number.isSafeInteger(r.pid)||Number(r.pid)<=0||!r.token?void 0:{owner:r,source:t}}catch{return}}async function m(e,t){let i=await n(e,`utf8`).catch(()=>void 0);(t===void 0||i===t)&&await r(e).catch(()=>void 0)}function h(e){try{return c.kill(e,0),!0}catch(e){return!v(e)}}async function g(e){let t=Date.now()+1e4;for(;h(e);){if(Date.now()>=t)throw Error(`Coreframe dev process ${e} did not stop within 10 seconds.`);await new Promise(e=>setTimeout(e,50))}}function _(e){return y(e)&&e.code===`EEXIST`}function v(e){return y(e)&&e.code===`ESRCH`}function y(e){return e instanceof Error}export{u as acquireDevLock};
+import{randomUUID as e}from"node:crypto";import{link as t,mkdir as n,readFile as r,unlink as i,writeFile as a}from"node:fs/promises";import o from"node:path";import*as s from"@clack/prompts";import c from"node:process";const l={isRunning:h,stop(e){try{c.kill(e,`SIGTERM`)}catch(e){if(!v(e))throw e}},waitForExit:g};async function u({confirmStop:r=f,cwd:s=c.cwd(),interactive:u=c.stdin.isTTY===!0,pid:p=c.pid,processes:h=l}={}){let g=o.resolve(s,`.coreframe/dev.lock`),v={pid:p,token:e()},y=`${JSON.stringify(v)}\n`,b=`${g}.${v.token}.tmp`,x=!1;await n(o.dirname(g),{recursive:!0}),await a(b,y,{flag:`wx`,mode:384});try{for(;;){try{return await t(b,g),{async release(){await m(g,y)},takeoverApproved:x}}catch(e){if(!_(e))throw e}let e=await d({confirmStop:r,file:g,interactive:u,processes:h});if(e===void 0)return;x||=e}}finally{await i(b).catch(()=>void 0)}}async function d({confirmStop:e,file:t,interactive:n,processes:r}){let i=await p(t);if(!i||!r.isRunning(i.owner.pid))return await m(t,i?.source),!1;if(!n)throw Error(`Coreframe dev is already running for this project (PID ${i.owner.pid}). Stop it before starting another.`);if(await e(i.owner.pid))return r.stop(i.owner.pid),await r.waitForExit(i.owner.pid),await m(t,i.source),!0}async function f(e){let t=await s.confirm({initialValue:!1,message:`Coreframe dev is already running for this project (PID ${e}). Stop it and start here?`});return s.isCancel(t)||!t?(s.cancel(`Keeping the existing Coreframe dev process.`),!1):!0}async function p(e){try{let t=await r(e,`utf8`),n=JSON.parse(t);return!Number.isSafeInteger(n.pid)||Number(n.pid)<=0||!n.token?void 0:{owner:n,source:t}}catch{return}}async function m(e,t){let n=await r(e,`utf8`).catch(()=>void 0);(t===void 0||n===t)&&await i(e).catch(()=>void 0)}function h(e){try{return c.kill(e,0),!0}catch(e){return!v(e)}}async function g(e){let t=Date.now()+1e4;for(;h(e);){if(Date.now()>=t)throw Error(`Coreframe dev process ${e} did not stop within 10 seconds.`);await new Promise(e=>setTimeout(e,50))}}function _(e){return y(e)&&e.code===`EEXIST`}function v(e){return y(e)&&e.code===`ESRCH`}function y(e){return e instanceof Error}export{u as acquireDevLock};

package/dist/dev.d.ts

@@ -3,6 +3,7 @@ import { CoreframeConfig } from "./config.js";
 //#region dev.d.ts
 type DevServerOptions = {
   cwd?: string;
+  debug?: DevDebugFeature;
   device?: string;
   env?: NodeJS.ProcessEnv;
   host?: string | true;
@@ -16,10 +17,14 @@ type DevServerOptions = {
   webPort?: number;
 };
 declare const devPlatforms: readonly ["web", "desktop", "ios", "android"];
+declare const devDebugFeatures: readonly ["managed-dev-overlay"];
+declare const managedDevOverlayDebugEnv = "VITE_COREFRAME_MANAGED_DEV_OVERLAY_DEBUG";
 type DevPlatform = "android" | "desktop" | "ios" | "web";
+type DevDebugFeature = (typeof devDebugFeatures)[number];
 declare function resolveDevPlatforms(config: CoreframeConfig): DevPlatform[];
 declare function runDevServer({
   cwd,
+  debug,
   device,
   env,
   host,
@@ -33,4 +38,4 @@ declare function runDevServer({
   webPort
 }?: DevServerOptions): Promise<void>;
 //#endregion
-export { DevPlatform, DevServerOptions, devPlatforms, resolveDevPlatforms, runDevServer };
+export { DevDebugFeature, DevPlatform, DevServerOptions, devDebugFeatures, devPlatforms, managedDevOverlayDebugEnv, resolveDevPlatforms, runDevServer };

package/dist/dev.js

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-import{readProjectConfig as e}from"./config.js";import{fs as t,net as n}from"./environment.js";import{ProjectPostgresAlreadyRunningError as r,startProjectPostgres as i,stopProjectPostgres as a}from"./db/local-postgres.js";import o from"./_virtual/_@oxc-project_runtime@0.138.0/helpers/esm/usingCtx.js";import{resolveMobileDevHost as s,selectMobileDevDevice as c}from"./dev-device.js";import{devHttpsCertEnv as l,devHttpsKeyEnv as u,prepareDevHttps as d}from"./dev-https.js";import{acquireDevLock as f}from"./dev-lock.js";import{managedDevEnv as p}from"./managed-dev-protocol.js";import{isManagedDevCheckout as m,isPrimaryCheckout as ee}from"./managed-dev.js";import{createTauriDevOutput as te}from"./tauri-dev-output.js";import h from"node:path";import g from"nano-spawn";import*as _ from"@clack/prompts";import v from"node:process";import*as ne from"node:readline";import{createPrefixStream as y,supervise as b}from"procband";const x=[`web`,`desktop`,`ios`,`android`];function S(e){let t=e.dev?.platforms??[`web`];for(let e of t)if(!x.includes(e))throw Error(`Invalid development platform "${String(e)}". Expected one of: ${x.join(`, `)}.`);return[...new Set(t)]}const C=h.resolve(`node_modules`,`.bin`),w=v.platform===`win32`?`pnpm.cmd`:`pnpm`,T=v.platform===`win32`?`portless.cmd`:`portless`,E=v.platform===`win32`?`react-router.cmd`:`react-router`,D=v.platform===`win32`?`turso.cmd`:`turso`;async function O({cwd:r=v.cwd(),device:i,env:a=v.env,host:x,https:S=!1,input:O=v.stdin,interactive:N=v.stdin.isTTY===!0,managed:P=!1,noManaged:F=!1,platform:I=`web`,verbose:L=!1,webPort:R}={}){let z=a.PATH??a.Path??``,B=I===`web`?M(R??a.COREFRAME_WEB_PORT):void 0,V,H,U,W=!1,G=a;if(P&&F)throw Error(`Cannot use --managed and --no-managed together.`);if(S&&I!==`web`)throw Error(`Local HTTPS is only supported for the web development platform.`);if(i!==void 0&&I!==`ios`&&I!==`android`)throw Error(`A device name or ID is only supported for iOS or Android development.`);if(I===`web`&&a.TAURI_ENV_PLATFORM!==void 0&&a.COREFRAME_TAURI_DEV!==`1`){let e=a.TAURI_ENV_PLATFORM===`ios`||a.TAURI_ENV_PLATFORM===`android`?a.TAURI_ENV_PLATFORM:`desktop`;throw Error(`Direct Tauri development is not supported. Run \`pnpm dev ${e}\` instead.`)}let K=await f({cwd:r,interactive:N});if(K)try{let f=I===`ios`||I===`android`?I:void 0,M=f?await c({env:a,interactive:N,platform:f,target:i}):void 0,R=f&&M?await s({device:M,host:x,interactive:N,platform:f}):void 0,J=R?!0:x,Y=await e({cwd:r}),X=I===`web`&&a.PORTLESS!==`0`&&a.TAURI_ENV_PLATFORM===void 0&&await ee(r),Z=S&&!X?await d({cwd:r}):void 0;G={...a,...I===`web`?void 0:{COREFRAME_TAURI_DEV:`1`,TAURI_ENV_PLATFORM:ie(I),...R?{TAURI_DEV_HOST:R}:void 0},...Z?{[l]:Z.cert,[u]:Z.key}:void 0};let Q=async()=>{let e=!1,t=N?ne.createInterface({input:O}):void 0;t?.on(`line`,t=>{t.trim().toLowerCase()!==`r`||!U||e||(e=!0,U.kill(`SIGTERM`)?_.log.info(`Restarting the Vite development server.`):e=!1)}),t&&_.log.info(`Press r + Enter to restart the Vite development server.`);try{for(;;){e=!1,U=b({name:`web`,command:X?T:E,args:X?ae({host:J,port:B}):j({host:J,port:B}),cwd:r,env:{...G,CLOUDFLARE_ENV:`development`,PATH:C+h.delimiter+z}}),await U.wait();let t=U;if(U=void 0,!e){W||await t.expectSuccess();return}}}finally{t?.close()}},$=async()=>{if(I===`web`){await Q();return}let e=Q().then(()=>{if(!W)throw Error(`The Vite development server stopped while Tauri was still running.`)}),t,n;if(I===`ios`&&!L){n=y({label:`ios`}),n.pipe(v.stdout,{end:!1});try{t=await te({output:n}),_.log.info(`Full iOS log: ${t.logFile}`)}catch{n.end(),n=void 0,_.log.warn(`Could not create the temporary iOS log; showing full Tauri output.`)}}V=g(w,re(I,M?.name,R),{cwd:r,env:a,stdio:t?[`inherit`,`pipe`,`pipe`]:`inherit`});let i=t?.consume(V),o=V.catch(async e=>{throw W||(await i,await t?.reportFailure()),e});try{await Promise.race([e,o])}finally{W=!0,U?.kill(`SIGTERM`),(await V.nodeChildProcess.catch(()=>void 0))?.kill(`SIGTERM`),await Promise.allSettled([e,V,i]),await t?.close(),n?.end(),V=void 0}};if((P||N&&!F)&&await m(r)&&(G={...G,[p]:`1`}),Y.database?.dialect===`sqlite`){let e=await n.getAvailablePort(),i=h.resolve(r,`.coreframe`),o=h.join(i,`turso.db`);await t.mkdir(i,{recursive:!0}),G={...G,TURSO_DATABASE_URL:`http://127.0.0.1:${e}`,TURSO_AUTH_TOKEN:`dev`},H=b({name:`turso`,command:D,args:[`dev`,`--port`,String(e),`--db-file`,o],cwd:r,env:a}),await H.waitFor(`listening`),await b({name:`db`,command:w,args:[`db`,`ensure`],cwd:r,env:G,prefix:!1}).expectSuccess()}if(A(Y)){let e=y({label:`postgres`});e.pipe(v.stdout,{end:!1});try{try{var q=o();let t=await k({config:Y,cwd:r,env:G,failIfRunning:!0,interactive:N,postgresOutput:e,takeoverApproved:K.takeoverApproved});if(!t)return;q.a(t),G=t.env,await b({name:`db`,command:w,args:[`db`,`ensure`],cwd:r,env:G,prefix:!1}).expectSuccess(),await $()}catch(e){q.e=e}finally{await q.d()}}finally{e.end()}return}await $()}finally{W=!0,U?.kill(`SIGTERM`),(await V?.nodeChildProcess.catch(()=>void 0))?.kill(`SIGTERM`),H&&H.kill(`SIGTERM`),await K.release()}}async function k({interactive:e,takeoverApproved:t,...n}){try{return await i(n)}catch(o){if(!(o instanceof r)||!e)throw o;if(!t){let e=await _.confirm({initialValue:!1,message:`PostgreSQL is already running for this project (PID ${o.pid}). Stop it and start here?`});if(_.isCancel(e)||!e){_.cancel(`Keeping the existing PostgreSQL process.`);return}}return await a(o),i(n)}}function A(e){return(e.database?.dialect??`postgres`)===`postgres`}function re(e,t,n){return[`exec`,`tauri`,...e===`desktop`?[]:[e],`dev`,`--config`,JSON.stringify({build:{beforeDevCommand:``}}),...n===void 0?[]:[`--host=${n}`],...t===void 0?[]:[t]]}function ie(e){return e===`desktop`?v.platform===`win32`?`windows`:v.platform:e}function j({host:e,port:t}){return[`dev`,...e===void 0?[]:[`--host`,e===!0?`0.0.0.0`:e],...t===void 0?[]:[`--port`,String(t)]]}function ae({host:e,port:t}){return[`run`,...t===void 0?[]:[`--app-port`,String(t)],`react-router`,...j({host:e,port:void 0})]}function M(e){if(e===void 0)return;let t=Number(e);if(!Number.isInteger(t)||t<=0||t>65535)throw Error(`COREFRAME_WEB_PORT must be a valid TCP port.`);return t}export{x as devPlatforms,S as resolveDevPlatforms,O as runDevServer};
+import{readProjectConfig as e}from"./config.js";import{fs as t,net as n}from"./environment.js";import{ProjectPostgresAlreadyRunningError as r,startProjectPostgres as i,stopProjectPostgres as a}from"./db/local-postgres.js";import{resolveMobileDevHost as o,selectMobileDevDevice as s}from"./dev-device.js";import{devHttpsCertEnv as ee,devHttpsKeyEnv as c,prepareDevHttps as l}from"./dev-https.js";import{acquireDevLock as u}from"./dev-lock.js";import{managedDevEnv as te}from"./managed-dev-protocol.js";import{isManagedDevCheckout as d,isPrimaryCheckout as ne}from"./managed-dev.js";import{createTauriDevOutput as f}from"./tauri-dev-output.js";import p from"node:path";import re from"nano-spawn";import*as m from"@clack/prompts";import h from"node:process";import*as ie from"node:readline";import{createPrefixStream as g,supervise as _}from"procband";const v=[`web`,`desktop`,`ios`,`android`],y=[`managed-dev-overlay`],b=`VITE_COREFRAME_MANAGED_DEV_OVERLAY_DEBUG`;function x(e){let t=e.dev?.platforms??[`web`];for(let e of t)if(!v.includes(e))throw Error(`Invalid development platform "${String(e)}". Expected one of: ${v.join(`, `)}.`);return[...new Set(t)]}const S=p.resolve(`node_modules`,`.bin`),C=h.platform===`win32`?`pnpm.cmd`:`pnpm`,ae=h.platform===`win32`?`portless.cmd`:`portless`,oe=h.platform===`win32`?`react-router.cmd`:`react-router`,se=h.platform===`win32`?`turso.cmd`:`turso`;async function w({cwd:r=h.cwd(),debug:i,device:a,env:v=h.env,host:y,https:x=!1,input:w=h.stdin,interactive:M=h.stdin.isTTY===!0,managed:N=!1,noManaged:P=!1,platform:F=`web`,verbose:I=!1,webPort:L}={}){let R=v.PATH??v.Path??``,z=F===`web`?j(L??v.COREFRAME_WEB_PORT):void 0,B,V,H,U,W,G=!1,K,q=v;if(N&&P)throw Error(`Cannot use --managed and --no-managed together.`);if(i===`managed-dev-overlay`&&N)throw Error(`Cannot use --managed with --debug managed-dev-overlay.`);if(x&&F!==`web`)throw Error(`Local HTTPS is only supported for the web development platform.`);if(a!==void 0&&F!==`ios`&&F!==`android`)throw Error(`A device name or ID is only supported for iOS or Android development.`);if(F===`web`&&v.TAURI_ENV_PLATFORM!==void 0&&v.COREFRAME_TAURI_DEV!==`1`){let e=v.TAURI_ENV_PLATFORM===`ios`||v.TAURI_ENV_PLATFORM===`android`?v.TAURI_ENV_PLATFORM:`desktop`;throw Error(`Direct Tauri development is not supported. Run \`pnpm dev ${e}\` instead.`)}let J=await u({cwd:r,interactive:M});if(!J)return;let Y=()=>{G||(G=!0,V?.kill(`SIGTERM`),W?.kill(`SIGTERM`),B?.nodeChildProcess.then(e=>e.kill(`SIGTERM`)).catch(()=>void 0),U?.kill(`SIGTERM`))},X=[`SIGINT`,`SIGTERM`].map(e=>{let t=()=>{K??=e,Y()};return h.on(e,t),{handler:t,signal:e}}),Z=async e=>{let t=_(e);V=t;try{await t.expectSuccess()}catch(e){if(!G)throw e}finally{V===t&&(V=void 0)}};try{let u=F===`ios`||F===`android`?F:void 0,T=u?await s({env:v,interactive:M,platform:u,target:a}):void 0,j=u&&T?await o({device:T,host:y,interactive:M,platform:u}):void 0,L=j?!0:y,V=await e({cwd:r}),K=F===`web`&&v.PORTLESS!==`0`&&v.TAURI_ENV_PLATFORM===void 0&&await ne(r),X=x&&!K?await l({cwd:r}):void 0;q={...v,...i===`managed-dev-overlay`?{[b]:`1`}:void 0,...F===`web`?void 0:{COREFRAME_TAURI_DEV:`1`,TAURI_ENV_PLATFORM:k(F),...j?{TAURI_DEV_HOST:j}:void 0},...X?{[ee]:X.cert,[c]:X.key}:void 0};let Q=async()=>{let e=!1,t=M?ie.createInterface({input:w}):void 0;t?.on(`line`,t=>{t.trim().toLowerCase()!==`r`||!W||e||(e=!0,W.kill(`SIGTERM`)?m.log.info(`Restarting the Vite development server.`):e=!1)}),t&&m.log.info(`Press r + Enter to restart the Vite development server.`);try{for(;;){e=!1,W=_({name:`web`,command:K?ae:oe,args:K?ce({host:L,port:z}):A({host:L,port:z}),cwd:r,env:{...q,CLOUDFLARE_ENV:`development`,PATH:S+p.delimiter+R}}),await W.wait();let t=W;if(W=void 0,!e){G||await t.expectSuccess();return}}}finally{t?.close()}},$=async()=>{if(F===`web`){await Q();return}let e=Q().then(()=>{if(!G)throw Error(`The Vite development server stopped while Tauri was still running.`)}),t,n;if(F===`ios`&&!I){n=g({label:`ios`}),n.pipe(h.stdout,{end:!1});try{t=await f({output:n}),m.log.info(`Full iOS log: ${t.logFile}`)}catch{n.end(),n=void 0,m.log.warn(`Could not create the temporary iOS log; showing full Tauri output.`)}}B=re(C,O(F,T?.name,j),{cwd:r,env:v,stdio:t?[`inherit`,`pipe`,`pipe`]:`inherit`});let i=t?.consume(B),a=B.catch(async e=>{throw G||(await i,await t?.reportFailure()),e});try{await Promise.race([e,a])}finally{Y(),await Promise.allSettled([e,B,i]),await t?.close(),n?.end(),B=void 0}};if(i!==`managed-dev-overlay`&&(N||M&&!P)&&await d(r)&&(q={...q,[te]:`1`}),G)return;if(V.database?.dialect===`sqlite`){let e=await n.getAvailablePort(),i=p.resolve(r,`.coreframe`),a=p.join(i,`turso.db`);if(await t.mkdir(i,{recursive:!0}),q={...q,TURSO_DATABASE_URL:`http://127.0.0.1:${e}`,TURSO_AUTH_TOKEN:`dev`},U=_({name:`turso`,command:se,args:[`dev`,`--port`,String(e),`--db-file`,a],cwd:r,env:v}),await U.waitFor(`listening`),await Z({name:`db`,command:C,args:[`db`,`ensure`],cwd:r,env:q,prefix:!1}),G)return}if(D(V)){let e=g({label:`postgres`});e.pipe(h.stdout,{end:!1});try{let t=await E({config:V,cwd:r,env:q,failIfRunning:!0,interactive:M,isStopping:()=>G,postgresOutput:e,takeoverApproved:J.takeoverApproved});if(!t)return;H=t,q=t.env;try{G||await Z({name:`db`,command:C,args:[`db`,`ensure`],cwd:r,env:q,prefix:!1}),G||await $()}finally{await t[Symbol.asyncDispose](),H===t&&(H=void 0)}}finally{e.end()}return}await $()}finally{Y();let e;try{await H?.[Symbol.asyncDispose]()}catch(t){e=t}finally{for(let{handler:e,signal:t}of X)h.off(t,e);K&&(h.exitCode??=K===`SIGINT`?130:143)}T(e),await J.release()}}function T(e){if(e)throw e}async function E({interactive:e,isStopping:t,takeoverApproved:n,...o}){try{return await i(o)}catch(s){if(!(s instanceof r)||!e)throw s;if(!n){let e=await m.confirm({initialValue:!1,message:`PostgreSQL is already running for this project (PID ${s.pid}). Stop it and start here?`});if(m.isCancel(e)||!e){m.cancel(`Keeping the existing PostgreSQL process.`);return}}return await a(s),t()?void 0:i(o)}}function D(e){return(e.database?.dialect??`postgres`)===`postgres`}function O(e,t,n){return[`exec`,`tauri`,...e===`desktop`?[]:[e],`dev`,`--config`,JSON.stringify({build:{beforeDevCommand:``}}),...n===void 0?[]:[`--host=${n}`],...t===void 0?[]:[t]]}function k(e){return e===`desktop`?h.platform===`win32`?`windows`:h.platform:e}function A({host:e,port:t}){return[`dev`,...e===void 0?[]:[`--host`,e===!0?`0.0.0.0`:e],...t===void 0?[]:[`--port`,String(t)]]}function ce({host:e,port:t}){return[`run`,...t===void 0?[]:[`--app-port`,String(t)],`react-router`,...A({host:e,port:void 0})]}function j(e){if(e===void 0)return;let t=Number(e);if(!Number.isInteger(t)||t<=0||t>65535)throw Error(`COREFRAME_WEB_PORT must be a valid TCP port.`);return t}export{y as devDebugFeatures,v as devPlatforms,b as managedDevOverlayDebugEnv,x as resolveDevPlatforms,w as runDevServer};

package/dist/environment.d.ts

@@ -1,6 +1,6 @@
 import { access, chmod, mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
-import { homedir, networkInterfaces, tmpdir } from "node:os";
 import { readFileSync } from "node:fs";
+import { homedir, networkInterfaces, tmpdir } from "node:os";
 
 //#region environment.d.ts
 declare const fs: {

package/dist/environment.js

@@ -1 +1 @@
-import{access as e,chmod as t,mkdir as n,mkdtemp as r,readFile as i,rm as a,writeFile as o}from"node:fs/promises";import{homedir as s,networkInterfaces as c,tmpdir as l}from"node:os";import u from"node:process";import{readFileSync as d}from"node:fs";import{createServer as f}from"node:net";const p={access:e,chmod:t,mkdir:n,mkdtemp:r,readFile:i,readFileSync:d,rm:a,writeFile:o},m={getAvailablePort:g},h={homedir:s,kill:u.kill,networkInterfaces:c,tmpdir:l};async function g(){let e=f();try{await new Promise((t,n)=>{e.once(`error`,n),e.listen(0,`127.0.0.1`,t)});let t=e.address();if(!t||typeof t==`string`)throw Error(`Could not allocate an available TCP port.`);return t.port}finally{e.listening&&await new Promise((t,n)=>{e.close(e=>e?n(e):t())})}}export{p as fs,m as net,h as os};
+import{access as e,chmod as t,mkdir as n,mkdtemp as r,readFile as i,rm as a,writeFile as o}from"node:fs/promises";import{readFileSync as s}from"node:fs";import{homedir as c,networkInterfaces as l,tmpdir as u}from"node:os";import d from"node:process";import{createServer as f}from"node:net";const p={access:e,chmod:t,mkdir:n,mkdtemp:r,readFile:i,readFileSync:s,rm:a,writeFile:o},m={getAvailablePort:g},h={homedir:c,kill:d.kill,networkInterfaces:l,tmpdir:u};async function g(){let e=f();try{await new Promise((t,n)=>{e.once(`error`,n),e.listen(0,`127.0.0.1`,t)});let t=e.address();if(!t||typeof t==`string`)throw Error(`Could not allocate an available TCP port.`);return t.port}finally{e.listening&&await new Promise((t,n)=>{e.close(e=>e?n(e):t())})}}export{p as fs,m as net,h as os};

package/dist/managed-dev-protocol.d.ts

@@ -38,6 +38,7 @@ type ManagedDevSetupFailure = {
 type ManagedDevStatus = {
   busy?: string;
   checks?: ManagedDevChecks;
+  codexCompletion?: ManagedDevCodexCompletion;
   currentCommit?: string;
   draft?: ManagedDevDraft;
   message?: string;
@@ -48,6 +49,9 @@ type ManagedDevStatus = {
   warnings: string[];
 };
 type ManagedDevAction = {
+  id: string;
+  type: "acknowledge-codex";
+} | {
   type: "apply";
   fingerprint?: string;
   message?: string;
@@ -75,13 +79,23 @@ type ManagedDevAction = {
 type ManagedDevActionResult = {
   status: ManagedDevStatus;
 };
+type ManagedDevCodexMessage = {
+  kind: "agent" | "thought" | "user";
+  text: string;
+};
+type ManagedDevCodexCompletion = {
+  finalMessage: string;
+  id: string;
+  messages: ManagedDevCodexMessage[];
+};
 type ManagedDevCodexEvent = {
+  message: ManagedDevCodexMessage;
   phase: "start";
 } | {
-  phase: "stderr";
-  text: string;
+  message: ManagedDevCodexMessage;
+  phase: "message";
 } | {
-  message: string;
+  finalMessage: string;
   phase: "complete";
 } | {
   phase: "error";
@@ -101,4 +115,4 @@ type ManagedDevStatusResponse = {
   status: ManagedDevStatus;
 };
 //#endregion
-export { ManagedDevAction, ManagedDevActionRequest, ManagedDevActionResponse, ManagedDevActionResult, ManagedDevCheck, ManagedDevChecks, ManagedDevCodexEvent, ManagedDevCodexResponse, ManagedDevDraft, ManagedDevSetupFailure, ManagedDevStatus, ManagedDevStatusResponse, ManagedDevTarget, managedDevEnv, managedDevEvents };
+export { ManagedDevAction, ManagedDevActionRequest, ManagedDevActionResponse, ManagedDevActionResult, ManagedDevCheck, ManagedDevChecks, ManagedDevCodexCompletion, ManagedDevCodexEvent, ManagedDevCodexMessage, ManagedDevCodexResponse, ManagedDevDraft, ManagedDevSetupFailure, ManagedDevStatus, ManagedDevStatusResponse, ManagedDevTarget, managedDevEnv, managedDevEvents };

package/dist/managed-dev.js

@@ -1,4 +1,4 @@
-import{access as e,copyFile as t,mkdir as n,mkdtemp as r,open as i,readFile as a,realpath as o,rm as s,unlink as c,writeFile as l}from"node:fs/promises";import u from"node:path";import d,{SubprocessError as f}from"nano-spawn";import{pathToFileURL as p}from"node:url";import{createHash as m,randomBytes as h}from"node:crypto";import g from"node:process";import{constants as _,watch as v}from"node:fs";import{resolve as y}from"import-meta-resolve";const b=`refs/heads/main`,x=`refs/heads/dev`,ee=`refs/remotes/origin/main`,S=/^[a-z][a-z0-9-]*(?:\([^)]+\))?!?:\s+\S/i,C=`coreframe-managed-dev-setup-failure.json`;async function w(e=g.cwd()){let t=await k(e);return t.primary&&t.branch===`main`&&t.head===t.main}async function T(e=g.cwd()){try{let{commonDir:t,gitDir:n}=await E(e);return n===t}catch{return!1}}async function E(e){let t=await o(await K(e,[`rev-parse`,`--show-toplevel`])),n=await o(e),r=u.resolve(n,await K(e,[`rev-parse`,`--git-dir`])),i=u.resolve(n,await K(e,[`rev-parse`,`--git-common-dir`]));return{commonDir:i,gitDir:r,primary:t===n&&r===i}}async function D({config:e,cwd:t=g.cwd(),env:n=g.env,onRestart:r=()=>void 0,onStatusChange:i=()=>void 0,remoteCheckInterval:a=6e4,runCheck:o=e=>se(t,n,e),watchState:s=ne}){let f=n,p={mode:`waiting`,warnings:[]},m=!1,h=!1,_=!1,v=!1,y,w,T,E,D,O=[],A,N,P=Promise.resolve(),F=()=>{m||i(p)},I=async({fetch:e=!1}={})=>{if(!(!h||m||!w)){if(_){v=!0;return}try{let[n,r,i]=await Promise.all([K(t,[`rev-parse`,`--abbrev-ref`,`HEAD`]),K(t,[`rev-parse`,`HEAD`]),K(t,[`rev-parse`,b])]);if(n!==`main`||r!==i){p={message:`Managed synchronization is paused until the primary checkout is back on local main.`,mode:`waiting`,warnings:[]};return}r!==y&&(y=r,A=void 0);let a=await j(t);if(a.tracked||a.untracked.length>0){p={...p,currentCommit:y,draft:a,message:void 0,mode:`managed`,proposal:B(a.fingerprint),target:void 0};return}e&&await q(t,[`remote`,`get-url`,`origin`])&&await G(t,[`fetch`,`origin`,`+refs/heads/main:${ee}`]);let o=await q(t,[`rev-parse`,x]),s=await q(t,[`rev-parse`,ee]),c=[...s?[{commit:s,source:`upstream`}]:[],...o?[{commit:o,source:`dev`}]:[]],l;for(let e of c)if(!await _e(t,e.commit,y)){l=e;break}p={...p,currentCommit:y,draft:void 0,message:void 0,mode:`managed`,proposal:void 0,target:l===void 0?void 0:await me(t,l.commit,l.source)}}catch(e){p={...p,message:Z(e),warnings:[Z(e)]}}finally{F()}}},L=()=>{clearTimeout(D),D=setTimeout(()=>void I(),50),D.unref()},R=e=>{let t=async()=>{let t=[{command:`pnpm typecheck`,status:`running`},{command:`pnpm test`,status:`pending`}],n=()=>{p={...p,checks:{commit:e,commands:structuredClone(t)}},F()};n();for(let[e,r]of[`typecheck`,`test`].entries()){e>0&&(t[e].status=`running`,n());try{await o(r),t[e].status=`passed`}catch(n){t[e].status=`failed`,t[e].output=ce(n)}n()}};P=P.then(t,t)},ue=async()=>{if(h||m)return;let e=await k(t);if(!e.primary){p={message:`Managed development only runs from the primary checkout.`,mode:`unmanaged`,warnings:[]},F();return}if(e.branch!==`main`||e.head!==e.main){let t=`Managed development requires the primary checkout on local main; current branch is ${e.branch??`detached HEAD`}.`;console.warn(`Coreframe managed development disabled: ${t}`),p={message:t,mode:`unmanaged`,warnings:[]},F();return}T=u.join(e.commonDir,`coreframe-managed-dev.lock`),await he(T),await q(t,[`rev-parse`,`--verify`,x])||await G(t,[`branch`,`dev`,e.head]),w=e,y=e.head,h=!0,p={currentCommit:e.head,mode:`managed`,setupFailure:await te(e.commonDir,e.head),warnings:[]},F(),O=await s(e,L),E=setInterval(()=>void I({fetch:!0}),a),E.unref(),await I(),I({fetch:!0})},de=async(e,{onCodexEvent:n=()=>void 0}={})=>{if(!h||p.mode!==`managed`)throw Error(`Managed development is not active.`);if(_)throw Error(`Another managed development action is already running.`);_=!0,p={...p,busy:ye(e),message:void 0},F();try{if(e.type===`reject`)p={...p,draft:void 0,proposal:void 0};else if(e.type===`prepare`){let r=z(e.target),i=await j(t);i.tracked||i.untracked.length>0?p={...p,draft:i,proposal:B(i.fingerprint)}:await U({onCodexEvent:n,source:r.source,target:e.target})}else if(e.type===`message`){let n=await V(e.fingerprint,e.untracked),r=B(n.fingerprint);if(r===void 0){try{if(N??=ie(`codex`,f),!await N)throw Error("Codex CLI is not installed or is unavailable on PATH. Install it with `npm install -g @openai/codex`, then restart the dev server.");r=await re(t,f,n.context)}catch(e){r=``,p={...p,warnings:[...p.warnings,`Codex could not generate a commit message: ${Z(e)}`]}}A={fingerprint:n.fingerprint,message:r}}p={...p,draft:n,proposal:r}}else if(e.type===`commit`){let t=await H(e);p={...p,currentCommit:t,draft:void 0,message:void 0,proposal:void 0,target:void 0},L()}else if(e.type===`retry-install`)await be();else if(e.type===`reset-database`)await xe();else{let r=z(e.target),i=await j(t);if(i.tracked||i.untracked.length>0){if(!e.fingerprint||!e.untracked)throw Error(`Refresh requires the current working-tree confirmation.`);if(await V(e.fingerprint,e.untracked),!e.message||!S.test(Y(e.message)))throw Error(`Enter a commit message with a valid Conventional Commits header.`)}await U({fingerprint:e.fingerprint,message:e.message,onCodexEvent:n,source:r.source,target:e.target,untracked:e.untracked})}}finally{_=!1,p={...p,busy:void 0},F(),v&&(v=!1,L())}return{status:p}},z=e=>{if(!p.target||p.target.commit!==e)throw Error(`The offered update changed. Review the latest target before refreshing.`);return p.target},B=e=>A?.fingerprint===e?A.message:void 0,V=async(e,n)=>{let r=await j(t);if(r.fingerprint!==e)throw A=void 0,Error(`Working-tree changes changed; generate a new commit message.`);if(!ve(r.untracked,n))throw Error(`Include every untracked file or remove it before refreshing.`);return r},H=async({fingerprint:e,message:n,untracked:r})=>{let i=await V(e,r);if(!n||!S.test(Y(n)))throw Error(`Enter a commit message with a valid Conventional Commits header.`);await G(t,[`add`,`--update`]),i.untracked.length>0&&await G(t,[`add`,`--`,...r]),await G(t,[`commit`,`--message`,n],{env:{GIT_EDITOR:`true`}});let a=await K(t,[`rev-parse`,`HEAD`]);return y=a,A=void 0,a},U=async({fingerprint:e,message:n,onCodexEvent:r=()=>void 0,source:i,target:a,untracked:o=[]})=>{z(a);let s=await K(t,[`rev-parse`,`HEAD`]),c,l,u=await j(t);if(u.tracked||u.untracked.length>0){if(!e||u.fingerprint!==e||!ve(u.untracked,o))throw Error(`Working-tree changes changed; review them before refreshing.`);await G(t,[`add`,`--update`]),o.length>0&&await G(t,[`add`,`--`,...o]),await G(t,[`commit`,`--message`,n],{env:{GIT_EDITOR:`true`}}),c=await K(t,[`rev-parse`,`HEAD`]),y=c,l=`refs/coreframe/recovery/${Date.now()}-${c.slice(0,12)}`,await G(t,[`update-ref`,l,c])}let d=c??s,m;try{if(m=await ae({cwd:t,env:f,localMain:d,onCodexEvent:r,source:i,target:a}),await K(t,[`rev-parse`,`HEAD`])!==d)throw Error(`HEAD changed while the accepted update was being prepared.`);if(await K(t,[`rev-parse`,b])!==d)throw Error(`Local main changed while the accepted update was being prepared.`);await oe(t,m,d),y=m.commit,await G(t,[`reset`,`--hard`,m.commit]);let e=J(await K(t,[`diff`,`--name-only`,`-z`,s,m.commit]));A=void 0,l&&await G(t,[`update-ref`,`-d`,l]),p={...p,currentCommit:m.commit,draft:void 0,proposal:void 0,setupFailure:void 0,target:void 0},await W({installDependencies:fe(e),restartRequired:pe(e)})}catch(e){e instanceof M&&(v=!0);let t=l?` Recovery commit: ${l}.`:``;throw p={...p,currentCommit:y,message:`${Z(e)}${t}`},e}},W=async({installDependencies:n,restartRequired:i})=>{let a=y;if(n)try{await Ce([`install`,`--frozen-lockfile`])}catch(e){await Q({command:`pnpm install --frozen-lockfile`,commit:a,error:e,message:`The project was synchronized, but dependency installation failed. Fix the package or lockfile issue, then retry the install.`,restartRequired:i,stage:`dependencies`});return}try{await le({config:e,cwd:t,env:f})}catch(e){await Q({command:`pnpm db migrate`,commit:a,error:e,message:`The project was synchronized, but its database migration failed. The previous database was restored. Reset the database to recreate it, apply migrations, and rerun seed scripts.`,restartRequired:i,stage:`migration`});return}await $(),R(a),i&&r()},be=async()=>{let e=Se(`dependencies`);await $(),await W({installDependencies:!0,restartRequired:e.restartRequired})},xe=async()=>{let e=Se(`migration`);try{await Ce([`db`,`setup`])}catch(t){await Q({command:`pnpm db setup`,commit:e.commit,error:t,message:`The project remains synchronized, but the database reset failed. Review the diagnostics, fix the reported problem, and try the reset again.`,restartRequired:e.restartRequired,stage:`migration`});return}await $(),R(e.commit),e.restartRequired&&r()},Se=e=>{if(!p.setupFailure||p.setupFailure.stage!==e)throw Error(`There is no failed ${e} setup step to recover.`);return p.setupFailure},Ce=async e=>{await d(X(),e,{cwd:t,env:f})},Q=async({command:e,commit:t,error:n,message:r,restartRequired:i,stage:a})=>{let o=ce(n).slice(-1e5),s={command:e,commit:t,message:r,output:o,restartRequired:i,stage:a};p={...p,setupFailure:s,target:void 0},console.error(`Coreframe managed development setup failed (${e}): ${r}\n${o}`);let c=we();c&&await l(c,`${JSON.stringify(s)}\n`,{mode:384}).catch(e=>{console.warn(`Could not persist the managed-development setup failure: ${Z(e)}`)})},$=async()=>{p={...p,setupFailure:void 0};let e=we();e&&await c(e).catch(e=>{e instanceof Error&&`code`in e&&e.code===`ENOENT`||console.warn(`Could not clear the managed-development setup failure: ${Z(e)}`)})},we=()=>w?u.join(w.commonDir,C):void 0;return{action:de,activate:ue,getStatus:()=>p,async close(){if(!m){m=!0,clearInterval(E),clearTimeout(D);for(let e of O)e.close();await ge(T)}}}}async function te(e,t){let n=u.join(e,C);try{let e=JSON.parse(await a(n,`utf8`));if(O(e)&&e.commit===t)return e}catch(e){if(e instanceof Error&&`code`in e&&e.code===`ENOENT`)return;console.warn(`Could not read the managed-development setup failure: ${Z(e)}`)}await c(n).catch(()=>void 0)}function O(e){if(!e||typeof e!=`object`)return!1;let t=e;return(t.command===`pnpm db migrate`||t.command===`pnpm db setup`||t.command===`pnpm install --frozen-lockfile`)&&typeof t.commit==`string`&&typeof t.message==`string`&&typeof t.output==`string`&&typeof t.restartRequired==`boolean`&&(t.stage===`dependencies`||t.stage===`migration`)}async function k(e){let t=await E(e);return{branch:A(await K(e,[`rev-parse`,`--abbrev-ref`,`HEAD`])),commonDir:t.commonDir,gitDir:t.gitDir,head:await K(e,[`rev-parse`,`HEAD`]),main:await K(e,[`rev-parse`,b]),primary:t.primary}}function A(e){return e===`HEAD`?void 0:e}async function ne(e,t){let n=[e.gitDir,u.join(e.commonDir,`refs`,`heads`)],r=[];for(let e of n)try{r.push(v(e,{persistent:!1},t))}catch{}return r}async function j(e){let[t,n,r]=await Promise.all([K(e,[`status`,`--porcelain`,`--untracked-files=no`]),K(e,[`diff`,`HEAD`,`--binary`]),K(e,[`ls-files`,`--others`,`--exclude-standard`,`-z`])]),i=J(r).sort(),o=m(`sha256`).update(n),s=[`Tracked changes:`,n];for(let t of i){let n=await a(u.join(e,t));o.update(t).update(n),s.push(`\nUntracked file: ${t}\n`,n.toString(`utf8`))}return{context:s.join(`
-`),fingerprint:o.digest(`hex`),tracked:t.length>0,untracked:i}}async function re(e,t,n){let{stdout:r}=await d(`codex`,[`exec`,`--ephemeral`,`--ignore-user-config`,`--sandbox`,`read-only`,`--cd`,e,`Return only a concise Conventional Commits message for the supplied working-tree changes. Use a body only when it adds material context.`],{cwd:e,env:t,stderr:`ignore`,stdin:{string:n}});return r.trim().replace(/^```(?:text)?\s*|\s*```$/g,``)}async function ie(t,n){let r=n.PATH??n.Path??n.path??``,i=g.platform===`win32`?(n.PATHEXT??`.COM;.EXE;.BAT;.CMD`).split(`;`):[``];for(let n of r.split(u.delimiter))for(let r of i)try{return await e(u.join(n||`.`,`${t}${r}`),_.X_OK),!0}catch{}return!1}var M=class extends Error{constructor(){super(`Local dev advanced while this update was being prepared. Nothing was changed. Review the latest update and try again.`)}};async function ae({cwd:e,env:t,localMain:r,onCodexEvent:i,source:a,target:o}){if(a===`dev`&&await _e(e,r,o))return{commit:o,devTarget:o};let c=u.resolve(e,await K(e,[`rev-parse`,`--git-common-dir`])),l=u.join(c,`coreframe-managed-dev`);await n(l,{recursive:!0});let d=h(8).toString(`hex`),f=u.join(l,`integration-${d}`);try{let n=a===`dev`?o:r,s=a===`dev`?r:o;if(await G(e,[`worktree`,`add`,`--detach`,f,n]),r!==o){let e=await q(f,[`merge-base`,r,o]);await N(f,t,e?[`rebase`,`--onto`,s,e]:[`rebase`,`--root`,`--onto`,s],`rebase`,i)}return{commit:await K(f,[`rev-parse`,`HEAD`]),devTarget:a===`dev`?o:void 0}}finally{await G(e,[`worktree`,`remove`,`--force`,f]).catch(()=>void 0),await s(f,{force:!0,recursive:!0})}}async function oe(e,t,n){let r=[`start`,`update ${b} ${t.commit} ${n}`];t.devTarget&&r.push(t.devTarget===t.commit?`verify ${x} ${t.devTarget}`:`update ${x} ${t.commit} ${t.devTarget}`),r.push(`prepare`,`commit`);try{await d(`git`,[`update-ref`,`--stdin`],{cwd:e,stdin:{string:`${r.join(`
-`)}\n`}})}catch(r){if(t.devTarget)try{let[r,i]=await Promise.all([K(e,[`rev-parse`,b]),q(e,[`rev-parse`,x])]);if(r===n&&i!==t.devTarget)throw new M}catch(e){if(e instanceof M)throw e}throw r}}async function N(e,t,n,r,i){try{await G(e,n,{env:{GIT_EDITOR:`true`}});return}catch(n){let a=await I(e);if(a.length===0)throw n;try{for(;a.length>0;){await P(e,t,r,a,i),await G(e,[`diff`,`--check`]),await G(e,[`add`,`--all`]);let n=await I(e);if(n.length>0)throw Error(`Codex left unresolved paths: ${n.join(`, `)}`);try{await G(e,[r,`--continue`],{env:{GIT_EDITOR:`true`}})}catch(t){if(a=await I(e),a.length===0)throw t;continue}a=await I(e)}return}catch(t){throw await G(e,[r,`--abort`]).catch(()=>void 0),Error(`Codex could not resolve ${r} conflicts: ${Z(t)}`)}}}async function P(e,t,n,r,i){i({phase:`start`});let a=d(`codex`,[`exec`,`--ephemeral`,`--ignore-user-config`,`--sandbox`,`workspace-write`,`--cd`,e,`Resolve the current Git ${n} conflicts cleanly. Edit only files needed for the resolution, preserve intended behavior from both sides, remove all conflict markers, and do not stage files or run Git continuation commands. Conflicted paths: ${r.join(`, `)}`],{cwd:e,env:t,stdin:`ignore`}),o=[];try{await Promise.all([F(a.stdout,e=>o.push(e)),F(a.stderr,e=>i({phase:`stderr`,text:`${e}\n`}))])}catch(e){throw i({phase:`error`}),e}i({message:o.join(`
-`).trim(),phase:`complete`})}async function F(e,t){for await(let n of e)t(n)}async function I(e){return J(await K(e,[`diff`,`--name-only`,`--diff-filter=U`,`-z`]))}async function se(e,t,n){await d(X(),[n],{cwd:e,env:t})}function ce(e){if(e instanceof f){let t=e.output.trim();if(t)return t}return Z(e)}async function le({config:e,cwd:t,env:n}){if(!e.database)return;let r=await L({config:e,cwd:t,env:n});try{await d(X(),[`db`,`migrate`],{cwd:t,env:n})}catch(e){throw await r.restore(),e}await r.discard().catch(e=>{console.warn(`Could not remove the managed-development database snapshot: ${Z(e)}`)}),await s(r.directory,{force:!0,recursive:!0})}async function L({config:e,cwd:i,env:a}){let o=u.join(i,`.coreframe`,`managed-dev-backups`);await n(o,{recursive:!0});let c=await r(u.join(o,`refresh-`));if(e.database?.dialect===`sqlite`){let e=[`turso.db`,`turso.db-wal`,`turso.db-shm`],n=new Set;for(let t of e)await R(u.join(i,`.coreframe`,t),u.join(c,t))&&n.add(t);return{directory:c,async discard(){},async restore(){for(let r of e){let e=u.join(i,`.coreframe`,r);n.has(r)?await t(u.join(c,r),e):await s(e,{force:!0})}}}}if(!a.DATABASE_URL)throw Error(`DATABASE_URL is required to snapshot local PostgreSQL.`);let l=await ue(i);if(l)return de({directory:c,connectionString:a.DATABASE_URL,postgres:l});let f=u.join(c,`database.dump`),p=U(a,a.DATABASE_URL);return await d(`pg_dump`,[`--format=custom`,`--file`,f],{cwd:i,env:p,stdin:`ignore`}),{directory:c,async discard(){},async restore(){await d(`pg_restore`,[`--clean`,`--if-exists`,`--no-owner`,`--dbname`,p.PGDATABASE,f],{cwd:i,env:p,stdin:`ignore`})}}}async function R(e,n){try{return await t(e,n),!0}catch(e){if(!(e instanceof Error&&`code`in e&&e.code===`ENOENT`))throw e;return!1}}async function ue(e){let t=JSON.parse(await a(u.join(e,`package.json`),`utf8`));if(!(!t.dependencies?.pg&&!t.devDependencies?.pg&&!t.optionalDependencies?.pg))try{return await import(y(`pg`,p(u.join(e,`package.json`)).href))}catch(e){if(e instanceof Error&&`code`in e&&e.code===`ERR_MODULE_NOT_FOUND`)return;throw e}}async function de({directory:e,connectionString:t,postgres:n}){let r=new URL(t),i=decodeURIComponent(r.pathname.slice(1));if(!i)throw Error(`DATABASE_URL must name a PostgreSQL database to snapshot.`);let a=`coreframe_backup_${h(6).toString(`hex`)}`,o=`${a}_failed`,s=new URL(r);s.pathname=i===`postgres`?`/template1`:`/postgres`;let c=new n.Client({connectionString:s.href});await c.connect();try{await B(c,i,!1),await V(c,i),await c.query(`CREATE DATABASE ${H(a)} WITH TEMPLATE ${H(i)}`),await B(c,a,!0)}finally{await B(c,i,!0).catch(()=>void 0),await c.end()}return{directory:e,async discard(){await z(n,s.href,async e=>{await V(e,a),await e.query(`DROP DATABASE ${H(a)}`)})},async restore(){await z(n,s.href,async e=>{await B(e,i,!1),await V(e,i),await e.query(`ALTER DATABASE ${H(i)} RENAME TO ${H(o)}`);try{await e.query(`ALTER DATABASE ${H(a)} RENAME TO ${H(i)}`)}catch(t){throw await e.query(`ALTER DATABASE ${H(o)} RENAME TO ${H(i)}`).catch(()=>void 0),await B(e,i,!0).catch(()=>void 0),t}await V(e,o),await e.query(`DROP DATABASE ${H(o)}`)})}}}async function z(e,t,n){let r=new e.Client({connectionString:t});await r.connect();try{return await n(r)}finally{await r.end()}}async function B(e,t,n){await e.query(`ALTER DATABASE ${H(t)} ALLOW_CONNECTIONS ${n?`true`:`false`}`)}async function V(e,t){await e.query(`SELECT pg_terminate_backend(pid) FROM pg_stat_activity WHERE datname = $1 AND pid <> pg_backend_pid()`,[t])}function H(e){return`"${e.replaceAll(`"`,`""`)}"`}function U(e,t){let n=new URL(t);return{...e,PGDATABASE:decodeURIComponent(n.pathname.slice(1)),PGHOST:n.hostname,PGPASSWORD:decodeURIComponent(n.password),PGPORT:n.port||`5432`,PGUSER:decodeURIComponent(n.username)}}function fe(e){return e.some(e=>u.basename(e)===`package.json`||u.basename(e).endsWith(`lock.yaml`)||u.basename(e)===`pnpm-workspace.yaml`)}function pe(e){return e.some(e=>fe([e])||/(^|\/)(vite|coreframe|tsconfig|drizzle)\.[^/]+$/.test(e)||/(^|\/)(drizzle|scripts|src\/api|tauri)(\/|$)/.test(e))}async function me(e,t,n){return{commit:t,shortCommit:t.slice(0,12),source:n,subject:await K(e,[`show`,`-s`,`--format=%s`,t])}}async function he(e){try{let t=await i(e,`wx`);await t.writeFile(`${g.pid}\n`),await t.close()}catch(t){if(!(t instanceof Error&&`code`in t&&t.code===`EEXIST`))throw t;let n=(await a(e,`utf8`).catch(()=>`unknown`)).trim(),r=Number(n);if(Number.isInteger(r)&&!W(r)){await c(e).catch(()=>void 0),await he(e);return}throw Error(`Managed development is already owned by PID ${n}.`)}}function W(e){try{return g.kill(e,0),!0}catch(e){return!(e instanceof Error&&`code`in e&&e.code===`ESRCH`)}}async function ge(e){e&&(await a(e,`utf8`).catch(()=>void 0))?.trim()===String(g.pid)&&await c(e).catch(()=>void 0)}async function G(e,t,{env:n}={}){return d(`git`,t,{cwd:e,env:n,stdin:`ignore`})}async function K(e,t){return(await G(e,t)).stdout.trim()}async function q(e,t){try{return await K(e,t)||void 0}catch(e){if(e instanceof f&&e.exitCode&&e.exitCode>0)return;throw e}}async function _e(e,t,n){try{return await G(e,[`merge-base`,`--is-ancestor`,t,n]),!0}catch(e){if(e instanceof f&&e.exitCode===1)return!1;throw e}}function ve(e,t){return e.length===t.length&&[...e].sort().every((e,n)=>e===[...t].sort()[n])}function J(e){return e.split(`\0`).filter(Boolean)}function Y(e){return e.split(/\r?\n/,1)[0]??``}function ye(e){return e.type===`message`?`Generating commit message`:e.type===`commit`?`Committing local changes`:e.type===`apply`?`Integrating accepted update`:e.type===`prepare`?`Reviewing working tree`:e.type===`retry-install`?`Retrying dependency installation`:e.type===`reset-database`?`Resetting local database`:`Aborting refresh`}function X(){return g.platform===`win32`?`pnpm.cmd`:`pnpm`}function Z(e){return e instanceof Error?e.message:String(e)}export{w as isManagedDevCheckout,T as isPrimaryCheckout,D as startManagedDevSession};
+import{createHash as e,randomBytes as t}from"node:crypto";import{access as n,copyFile as r,mkdir as i,mkdtemp as a,open as o,readFile as s,realpath as c,rm as l,unlink as u,writeFile as d}from"node:fs/promises";import f from"node:path";import p,{SubprocessError as m}from"nano-spawn";import{pathToFileURL as h}from"node:url";import{constants as g,watch as _}from"node:fs";import v from"node:process";import{resolve as y}from"import-meta-resolve";const b=`refs/heads/main`,x=`refs/heads/dev`,ee=`refs/remotes/origin/main`,te=/^[a-z][a-z0-9-]*(?:\([^)]+\))?!?:\s+\S/i,S=`coreframe-managed-dev-codex-completion.json`,C=`coreframe-managed-dev-setup-failure.json`;async function w(e=v.cwd()){let t=await ae(e);return t.primary&&t.branch===`main`&&t.head===t.main}async function T(e=v.cwd()){try{let{commonDir:t,gitDir:n}=await E(e);return n===t}catch{return!1}}async function E(e){let t=await c(await q(e,[`rev-parse`,`--show-toplevel`])),n=await c(e),r=f.resolve(n,await q(e,[`rev-parse`,`--git-dir`])),i=f.resolve(n,await q(e,[`rev-parse`,`--git-common-dir`]));return{commonDir:i,gitDir:r,primary:t===n&&r===i}}async function D({config:e,cwd:n=v.cwd(),env:r=v.env,onRestart:i=()=>void 0,onStatusChange:a=()=>void 0,remoteCheckInterval:o=6e4,runCheck:s=e=>de(n,r,e),watchState:c=oe}){let l=r,m={mode:`waiting`,warnings:[]},h=!1,g=!1,_=!1,y=!1,w,T,E,D,O,k=[],A,j,P=Promise.resolve(),F=()=>{h||a(m)},I=async({fetch:e=!1}={})=>{if(!(!g||h||!T)){if(_){y=!0;return}try{let[t,r,i]=await Promise.all([q(n,[`rev-parse`,`--abbrev-ref`,`HEAD`]),q(n,[`rev-parse`,`HEAD`]),q(n,[`rev-parse`,b])]);if(t!==`main`||r!==i){m={message:`Managed synchronization is paused until the primary checkout is back on local main.`,mode:`waiting`,warnings:[]};return}r!==w&&(w=r,A=void 0);let a=await M(n);if(a.tracked||a.untracked.length>0){m={...m,currentCommit:w,draft:a,message:void 0,mode:`managed`,proposal:V(a.fingerprint),target:void 0};return}e&&await J(n,[`remote`,`get-url`,`origin`])&&await K(n,[`fetch`,`origin`,`+refs/heads/main:${ee}`]);let o=await J(n,[`rev-parse`,x]),s=await J(n,[`rev-parse`,ee]),c=[...s?[{commit:s,source:`upstream`}]:[],...o?[{commit:o,source:`dev`}]:[]],l;for(let e of c)if(!await Se(n,e.commit,w)){l=e;break}m={...m,currentCommit:w,draft:void 0,message:void 0,mode:`managed`,proposal:void 0,target:l===void 0?void 0:await ve(n,l.commit,l.source)}}catch(e){m={...m,message:Z(e),warnings:[Z(e)]}}finally{F()}}},L=()=>{clearTimeout(O),O=setTimeout(()=>void I(),50),O.unref()},R=e=>{let t=async()=>{let t=[{command:`pnpm typecheck`,status:`running`},{command:`pnpm test`,status:`pending`}],n=()=>{m={...m,checks:{commit:e,commands:structuredClone(t)}},F()};n();for(let[e,r]of[`typecheck`,`test`].entries()){e>0&&(t[e].status=`running`,n());try{await s(r),t[e].status=`passed`}catch(n){t[e].status=`failed`,t[e].output=fe(n)}n()}};P=P.then(t,t)},z=async()=>{if(g||h)return;let e=await ae(n);if(!e.primary){m={message:`Managed development only runs from the primary checkout.`,mode:`unmanaged`,warnings:[]},F();return}if(e.branch!==`main`||e.head!==e.main){let t=`Managed development requires the primary checkout on local main; current branch is ${e.branch??`detached HEAD`}.`;console.warn(`Coreframe managed development disabled: ${t}`),m={message:t,mode:`unmanaged`,warnings:[]},F();return}E=f.join(e.commonDir,`coreframe-managed-dev.lock`),await ye(E),await J(n,[`rev-parse`,`--verify`,x])||await K(n,[`branch`,`dev`,e.head]),T=e,w=e.head,g=!0,m={codexCompletion:await ne(e.commonDir),currentCommit:e.head,mode:`managed`,setupFailure:await ie(e.commonDir,e.head),warnings:[]},F(),k=await c(e,L),D=setInterval(()=>void I({fetch:!0}),o),D.unref(),await I(),I({fetch:!0})},me=async(e,{onCodexEvent:t=()=>void 0}={})=>{if(!g||m.mode!==`managed`)throw Error(`Managed development is not active.`);if(_)throw Error(`Another managed development action is already running.`);let r=[],i,a=e=>{e.phase===`start`||e.phase===`message`?r.push(e.message):e.phase===`complete`&&(i=e.finalMessage),t(e)};_=!0,m={...m,busy:Te(e),message:void 0},F();try{if(e.type===`acknowledge-codex`)m.codexCompletion?.id===e.id&&await Ae();else if(e.type===`reject`)m={...m,draft:void 0,proposal:void 0};else if(e.type===`prepare`){let t=B(e.target),r=await M(n);r.tracked||r.untracked.length>0?m={...m,draft:r,proposal:V(r.fingerprint)}:await W({onCodexEvent:a,source:t.source,target:e.target})}else if(e.type===`message`){let t=await H(e.fingerprint,e.untracked),r=V(t.fingerprint);if(r===void 0){try{if(j??=ce(`codex`,l),!await j)throw Error("Codex CLI is not installed or is unavailable on PATH. Install it with `npm install -g @openai/codex`, then restart the dev server.");r=await se(n,l,t.context)}catch(e){r=``,m={...m,warnings:[...m.warnings,`Codex could not generate a commit message: ${Z(e)}`]}}A={fingerprint:t.fingerprint,message:r}}m={...m,draft:t,proposal:r}}else if(e.type===`commit`){let t=await U(e);m={...m,currentCommit:t,draft:void 0,message:void 0,proposal:void 0,target:void 0},L()}else if(e.type===`retry-install`)await he();else if(e.type===`reset-database`)await be();else{let t=B(e.target),r=await M(n);if(r.tracked||r.untracked.length>0){if(!e.fingerprint||!e.untracked)throw Error(`Refresh requires the current working-tree confirmation.`);if(await H(e.fingerprint,e.untracked),!e.message||!te.test(we(e.message)))throw Error(`Enter a commit message with a valid Conventional Commits header.`)}await W({fingerprint:e.fingerprint,message:e.message,onCodexEvent:a,source:t.source,target:e.target,untracked:e.untracked})}}finally{_=!1,m={...m,busy:void 0},F(),y&&(y=!1,L())}return i&&await ke(i,r),{status:m}},B=e=>{if(!m.target||m.target.commit!==e)throw Error(`The offered update changed. Review the latest target before refreshing.`);return m.target},V=e=>A?.fingerprint===e?A.message:void 0,H=async(e,t)=>{let r=await M(n);if(r.fingerprint!==e)throw A=void 0,Error(`Working-tree changes changed; generate a new commit message.`);if(!Ce(r.untracked,t))throw Error(`Include every untracked file or remove it before refreshing.`);return r},U=async({fingerprint:e,message:t,untracked:r})=>{let i=await H(e,r);if(!t||!te.test(we(t)))throw Error(`Enter a commit message with a valid Conventional Commits header.`);await K(n,[`add`,`--update`]),i.untracked.length>0&&await K(n,[`add`,`--`,...r]),await K(n,[`commit`,`--message`,t],{env:{GIT_EDITOR:`true`}});let a=await q(n,[`rev-parse`,`HEAD`]);return w=a,A=void 0,a},W=async({fingerprint:e,message:t,onCodexEvent:r=()=>void 0,source:i,target:a,untracked:o=[]})=>{B(a);let s=await q(n,[`rev-parse`,`HEAD`]),c,u,d=await M(n);if(d.tracked||d.untracked.length>0){if(!e||d.fingerprint!==e||!Ce(d.untracked,o))throw Error(`Working-tree changes changed; review them before refreshing.`);await K(n,[`add`,`--update`]),o.length>0&&await K(n,[`add`,`--`,...o]),await K(n,[`commit`,`--message`,t],{env:{GIT_EDITOR:`true`}}),c=await q(n,[`rev-parse`,`HEAD`]),w=c,u=`refs/coreframe/recovery/${Date.now()}-${c.slice(0,12)}`,await K(n,[`update-ref`,u,c])}let f=c??s,p;try{if(p=await le({cwd:n,env:l,localMain:f,onCodexEvent:r,source:i,target:a}),await q(n,[`rev-parse`,`HEAD`])!==f)throw Error(`HEAD changed while the accepted update was being prepared.`);if(await q(n,[`rev-parse`,b])!==f)throw Error(`Local main changed while the accepted update was being prepared.`);await ue(n,p,f),w=p.commit,await K(n,[`reset`,`--hard`,p.commit]);let e=Y(await q(n,[`diff`,`--name-only`,`-z`,s,p.commit]));A=void 0,u&&await K(n,[`update-ref`,`-d`,u]),m={...m,currentCommit:p.commit,draft:void 0,proposal:void 0,setupFailure:void 0,target:void 0},await G({installDependencies:ge(e),restartRequired:_e(e)})}catch(e){e instanceof N&&(y=!0);let t=u?` Recovery commit: ${u}.`:``;throw m={...m,currentCommit:w,message:`${Z(e)}${t}`},e}},G=async({installDependencies:t,restartRequired:r})=>{let a=w;if(t)try{await De([`install`,`--frozen-lockfile`])}catch(e){await Q({command:`pnpm install --frozen-lockfile`,commit:a,error:e,message:`The project was synchronized, but dependency installation failed. Fix the package or lockfile issue, then retry the install.`,restartRequired:r,stage:`dependencies`});return}try{await pe({config:e,cwd:n,env:l})}catch(e){await Q({command:`pnpm db migrate`,commit:a,error:e,message:`The project was synchronized, but its database migration failed. The previous database was restored. Reset the database to recreate it, apply migrations, and rerun seed scripts.`,restartRequired:r,stage:`migration`});return}await $(),R(a),r&&i()},he=async()=>{let e=Ee(`dependencies`);await $(),await G({installDependencies:!0,restartRequired:e.restartRequired})},be=async()=>{let e=Ee(`migration`);try{await De([`db`,`setup`])}catch(t){await Q({command:`pnpm db setup`,commit:e.commit,error:t,message:`The project remains synchronized, but the database reset failed. Review the diagnostics, fix the reported problem, and try the reset again.`,restartRequired:e.restartRequired,stage:`migration`});return}await $(),R(e.commit),e.restartRequired&&i()},Ee=e=>{if(!m.setupFailure||m.setupFailure.stage!==e)throw Error(`There is no failed ${e} setup step to recover.`);return m.setupFailure},De=async e=>{await p(X(),e,{cwd:n,env:l})},Q=async({command:e,commit:t,error:n,message:r,restartRequired:i,stage:a})=>{let o=fe(n).slice(-1e5),s={command:e,commit:t,message:r,output:o,restartRequired:i,stage:a};m={...m,setupFailure:s,target:void 0},console.error(`Coreframe managed development setup failed (${e}): ${r}\n${o}`);let c=Oe();c&&await d(c,`${JSON.stringify(s)}\n`,{mode:384}).catch(e=>{console.warn(`Could not persist the managed-development setup failure: ${Z(e)}`)})},$=async()=>{m={...m,setupFailure:void 0};let e=Oe();e&&await u(e).catch(e=>{e instanceof Error&&`code`in e&&e.code===`ENOENT`||console.warn(`Could not clear the managed-development setup failure: ${Z(e)}`)})},Oe=()=>T?f.join(T.commonDir,C):void 0,ke=async(e,n)=>{let r={finalMessage:e,id:t(16).toString(`hex`),messages:re(n)};m={...m,codexCompletion:r},T&&await d(f.join(T.commonDir,S),`${JSON.stringify(r)}\n`,{mode:384}).catch(e=>{console.warn(`Could not persist the managed-development Codex result: ${Z(e)}`)}),F()},Ae=async()=>{m={...m,codexCompletion:void 0},T&&await u(f.join(T.commonDir,S)).catch(e=>{if(!(e instanceof Error&&`code`in e&&e.code===`ENOENT`))throw e})};return{action:me,activate:z,getStatus:()=>m,async close(){if(!h){h=!0,clearInterval(D),clearTimeout(O);for(let e of k)e.close();await xe(E)}}}}async function ne(e){let t=f.join(e,S);try{let e=JSON.parse(await s(t,`utf8`));if(O(e))return e}catch(e){if(e instanceof Error&&`code`in e&&e.code===`ENOENT`)return;console.warn(`Could not read the managed-development Codex result: ${Z(e)}`)}await u(t).catch(()=>void 0)}function O(e){if(!e||typeof e!=`object`)return!1;let t=e;return typeof t.finalMessage==`string`&&typeof t.id==`string`&&Array.isArray(t.messages)&&t.messages.every(k)}function k(e){if(!e||typeof e!=`object`)return!1;let t=e;return(t.kind===`agent`||t.kind===`thought`||t.kind===`user`)&&typeof t.text==`string`}function re(e){let t=new Set(e.filter(e=>e.kind===`user`)),n=[...t].reduce((e,t)=>e+t.text.length,0),r=!1;for(let i of[...e].reverse())if(i.kind!==`user`){if(n+i.text.length>1e5&&r)break;t.add(i),r=!0,n+=i.text.length}return e.filter(e=>t.has(e))}async function ie(e,t){let n=f.join(e,C);try{let e=JSON.parse(await s(n,`utf8`));if(A(e)&&e.commit===t)return e}catch(e){if(e instanceof Error&&`code`in e&&e.code===`ENOENT`)return;console.warn(`Could not read the managed-development setup failure: ${Z(e)}`)}await u(n).catch(()=>void 0)}function A(e){if(!e||typeof e!=`object`)return!1;let t=e;return(t.command===`pnpm db migrate`||t.command===`pnpm db setup`||t.command===`pnpm install --frozen-lockfile`)&&typeof t.commit==`string`&&typeof t.message==`string`&&typeof t.output==`string`&&typeof t.restartRequired==`boolean`&&(t.stage===`dependencies`||t.stage===`migration`)}async function ae(e){let t=await E(e);return{branch:j(await q(e,[`rev-parse`,`--abbrev-ref`,`HEAD`])),commonDir:t.commonDir,gitDir:t.gitDir,head:await q(e,[`rev-parse`,`HEAD`]),main:await q(e,[`rev-parse`,b]),primary:t.primary}}function j(e){return e===`HEAD`?void 0:e}async function oe(e,t){let n=[e.gitDir,f.join(e.commonDir,`refs`,`heads`)],r=[];for(let e of n)try{r.push(_(e,{persistent:!1},t))}catch{}return r}async function M(t){let[n,r,i]=await Promise.all([q(t,[`status`,`--porcelain`,`--untracked-files=no`]),q(t,[`diff`,`HEAD`,`--binary`]),q(t,[`ls-files`,`--others`,`--exclude-standard`,`-z`])]),a=Y(i).sort(),o=e(`sha256`).update(r),c=[`Tracked changes:`,r];for(let e of a){let n=await s(f.join(t,e));o.update(e).update(n),c.push(`\nUntracked file: ${e}\n`,n.toString(`utf8`))}return{context:c.join(`
+`),fingerprint:o.digest(`hex`),tracked:n.length>0,untracked:a}}async function se(e,t,n){let{stdout:r}=await p(`codex`,[`exec`,`--ephemeral`,`--ignore-user-config`,`--sandbox`,`read-only`,`--cd`,e,`Return only a concise Conventional Commits message for the supplied working-tree changes. Use a body only when it adds material context.`],{cwd:e,env:t,stderr:`ignore`,stdin:{string:n}});return r.trim().replace(/^```(?:text)?\s*|\s*```$/g,``)}async function ce(e,t){let r=t.PATH??t.Path??t.path??``,i=v.platform===`win32`?(t.PATHEXT??`.COM;.EXE;.BAT;.CMD`).split(`;`):[``];for(let t of r.split(f.delimiter))for(let r of i)try{return await n(f.join(t||`.`,`${e}${r}`),g.X_OK),!0}catch{}return!1}var N=class extends Error{constructor(){super(`Local dev advanced while this update was being prepared. Nothing was changed. Review the latest update and try again.`)}};async function le({cwd:e,env:n,localMain:r,onCodexEvent:a,source:o,target:s}){if(o===`dev`&&await Se(e,r,s))return{commit:s,devTarget:s};let c=f.resolve(e,await q(e,[`rev-parse`,`--git-common-dir`])),u=f.join(c,`coreframe-managed-dev`);await i(u,{recursive:!0});let d=t(8).toString(`hex`),p=f.join(u,`integration-${d}`);try{let t=o===`dev`?s:r,i=o===`dev`?r:s;if(await K(e,[`worktree`,`add`,`--detach`,p,t]),r!==s){let e=await J(p,[`merge-base`,r,s]);await P(p,n,e?[`rebase`,`--onto`,i,e]:[`rebase`,`--root`,`--onto`,i],`rebase`,a)}return{commit:await q(p,[`rev-parse`,`HEAD`]),devTarget:o===`dev`?s:void 0}}finally{await K(e,[`worktree`,`remove`,`--force`,p]).catch(()=>void 0),await l(p,{force:!0,recursive:!0})}}async function ue(e,t,n){let r=[`start`,`update ${b} ${t.commit} ${n}`];t.devTarget&&r.push(t.devTarget===t.commit?`verify ${x} ${t.devTarget}`:`update ${x} ${t.commit} ${t.devTarget}`),r.push(`prepare`,`commit`);try{await p(`git`,[`update-ref`,`--stdin`],{cwd:e,stdin:{string:`${r.join(`
+`)}\n`}})}catch(r){if(t.devTarget)try{let[r,i]=await Promise.all([q(e,[`rev-parse`,b]),J(e,[`rev-parse`,x])]);if(r===n&&i!==t.devTarget)throw new N}catch(e){if(e instanceof N)throw e}throw r}}async function P(e,t,n,r,i){try{await K(e,n,{env:{GIT_EDITOR:`true`}});return}catch(n){let a=await R(e);if(a.length===0)throw n;try{for(;a.length>0;){await F(e,t,r,a,i),await K(e,[`diff`,`--check`]),await K(e,[`add`,`--all`]);let n=await R(e);if(n.length>0)throw Error(`Codex left unresolved paths: ${n.join(`, `)}`);try{await K(e,[r,`--continue`],{env:{GIT_EDITOR:`true`}})}catch(t){if(a=await R(e),a.length===0)throw t;continue}a=await R(e)}return}catch(t){throw await K(e,[r,`--abort`]).catch(()=>void 0),Error(`Codex could not resolve ${r} conflicts: ${Z(t)}`)}}}async function F(e,t,n,r,i){let a=`Resolve the current Git ${n} conflicts cleanly. Edit only files needed for the resolution, preserve intended behavior from both sides, remove all conflict markers, and do not stage files or run Git continuation commands. Conflicted paths: ${r.join(`, `)}`;i({message:{kind:`user`,text:a},phase:`start`});let o=p(`codex`,[`exec`,`--ephemeral`,`--ignore-user-config`,`--json`,`--config`,`model_reasoning_effort="low"`,`--sandbox`,`workspace-write`,`--cd`,e,a],{cwd:e,env:t,stdin:`ignore`}),s=``,c=[];try{await Promise.all([L(o.stdout,e=>{let t=I(e);t&&(t.kind===`agent`&&(s=t.text),i({message:t,phase:`message`}))}),L(o.stderr,e=>c.push(e))])}catch(e){i({phase:`error`});let t=c.join(`
+`).trim();throw t?Error(`${Z(e)}\n${t}`):e}i({finalMessage:s||`Codex resolved the conflicts.`,phase:`complete`})}function I(e){let t;try{t=JSON.parse(e)}catch{throw Error(`Codex emitted invalid JSONL output.`)}if(!t||typeof t!=`object`)return;let n=t.item;if(t.type!==`item.completed`||!n||typeof n!=`object`)return;let{text:r,type:i}=n;if(!(typeof r!=`string`||!r.trim())){if(i===`reasoning`)return{kind:`thought`,text:r};if(i===`agent_message`)return{kind:`agent`,text:r}}}async function L(e,t){for await(let n of e)t(n)}async function R(e){return Y(await q(e,[`diff`,`--name-only`,`--diff-filter=U`,`-z`]))}async function de(e,t,n){await p(X(),[n],{cwd:e,env:t})}function fe(e){if(e instanceof m){let t=e.output.trim();if(t)return t}return Z(e)}async function pe({config:e,cwd:t,env:n}){if(!e.database)return;let r=await z({config:e,cwd:t,env:n});try{await p(X(),[`db`,`migrate`],{cwd:t,env:n})}catch(e){throw await r.restore(),e}await r.discard().catch(e=>{console.warn(`Could not remove the managed-development database snapshot: ${Z(e)}`)}),await l(r.directory,{force:!0,recursive:!0})}async function z({config:e,cwd:t,env:n}){let o=f.join(t,`.coreframe`,`managed-dev-backups`);await i(o,{recursive:!0});let s=await a(f.join(o,`refresh-`));if(e.database?.dialect===`sqlite`){let e=[`turso.db`,`turso.db-wal`,`turso.db-shm`],n=new Set;for(let r of e)await me(f.join(t,`.coreframe`,r),f.join(s,r))&&n.add(r);return{directory:s,async discard(){},async restore(){for(let i of e){let e=f.join(t,`.coreframe`,i);n.has(i)?await r(f.join(s,i),e):await l(e,{force:!0})}}}}if(!n.DATABASE_URL)throw Error(`DATABASE_URL is required to snapshot local PostgreSQL.`);let c=await B(t);if(c)return V({directory:s,connectionString:n.DATABASE_URL,postgres:c});let u=f.join(s,`database.dump`),d=he(n,n.DATABASE_URL);return await p(`pg_dump`,[`--format=custom`,`--file`,u],{cwd:t,env:d,stdin:`ignore`}),{directory:s,async discard(){},async restore(){await p(`pg_restore`,[`--clean`,`--if-exists`,`--no-owner`,`--dbname`,d.PGDATABASE,u],{cwd:t,env:d,stdin:`ignore`})}}}async function me(e,t){try{return await r(e,t),!0}catch(e){if(!(e instanceof Error&&`code`in e&&e.code===`ENOENT`))throw e;return!1}}async function B(e){let t=JSON.parse(await s(f.join(e,`package.json`),`utf8`));if(!(!t.dependencies?.pg&&!t.devDependencies?.pg&&!t.optionalDependencies?.pg))try{return await import(y(`pg`,h(f.join(e,`package.json`)).href))}catch(e){if(e instanceof Error&&`code`in e&&e.code===`ERR_MODULE_NOT_FOUND`)return;throw e}}async function V({directory:e,connectionString:n,postgres:r}){let i=new URL(n),a=decodeURIComponent(i.pathname.slice(1));if(!a)throw Error(`DATABASE_URL must name a PostgreSQL database to snapshot.`);let o=`coreframe_backup_${t(6).toString(`hex`)}`,s=`${o}_failed`,c=new URL(i);c.pathname=a===`postgres`?`/template1`:`/postgres`;let l=new r.Client({connectionString:c.href});await l.connect();try{await U(l,a,!1),await W(l,a),await l.query(`CREATE DATABASE ${G(o)} WITH TEMPLATE ${G(a)}`),await U(l,o,!0)}finally{await U(l,a,!0).catch(()=>void 0),await l.end()}return{directory:e,async discard(){await H(r,c.href,async e=>{await W(e,o),await e.query(`DROP DATABASE ${G(o)}`)})},async restore(){await H(r,c.href,async e=>{await U(e,a,!1),await W(e,a),await e.query(`ALTER DATABASE ${G(a)} RENAME TO ${G(s)}`);try{await e.query(`ALTER DATABASE ${G(o)} RENAME TO ${G(a)}`)}catch(t){throw await e.query(`ALTER DATABASE ${G(s)} RENAME TO ${G(a)}`).catch(()=>void 0),await U(e,a,!0).catch(()=>void 0),t}await W(e,s),await e.query(`DROP DATABASE ${G(s)}`)})}}}async function H(e,t,n){let r=new e.Client({connectionString:t});await r.connect();try{return await n(r)}finally{await r.end()}}async function U(e,t,n){await e.query(`ALTER DATABASE ${G(t)} ALLOW_CONNECTIONS ${n?`true`:`false`}`)}async function W(e,t){await e.query(`SELECT pg_terminate_backend(pid) FROM pg_stat_activity WHERE datname = $1 AND pid <> pg_backend_pid()`,[t])}function G(e){return`"${e.replaceAll(`"`,`""`)}"`}function he(e,t){let n=new URL(t);return{...e,PGDATABASE:decodeURIComponent(n.pathname.slice(1)),PGHOST:n.hostname,PGPASSWORD:decodeURIComponent(n.password),PGPORT:n.port||`5432`,PGUSER:decodeURIComponent(n.username)}}function ge(e){return e.some(e=>f.basename(e)===`package.json`||f.basename(e).endsWith(`lock.yaml`)||f.basename(e)===`pnpm-workspace.yaml`)}function _e(e){return e.some(e=>ge([e])||/(^|\/)(vite|coreframe|tsconfig|drizzle)\.[^/]+$/.test(e)||/(^|\/)(drizzle|scripts|src\/api|tauri)(\/|$)/.test(e))}async function ve(e,t,n){return{commit:t,shortCommit:t.slice(0,12),source:n,subject:await q(e,[`show`,`-s`,`--format=%s`,t])}}async function ye(e){try{let t=await o(e,`wx`);await t.writeFile(`${v.pid}\n`),await t.close()}catch(t){if(!(t instanceof Error&&`code`in t&&t.code===`EEXIST`))throw t;let n=(await s(e,`utf8`).catch(()=>`unknown`)).trim(),r=Number(n);if(Number.isInteger(r)&&!be(r)){await u(e).catch(()=>void 0),await ye(e);return}throw Error(`Managed development is already owned by PID ${n}.`)}}function be(e){try{return v.kill(e,0),!0}catch(e){return!(e instanceof Error&&`code`in e&&e.code===`ESRCH`)}}async function xe(e){e&&(await s(e,`utf8`).catch(()=>void 0))?.trim()===String(v.pid)&&await u(e).catch(()=>void 0)}async function K(e,t,{env:n}={}){return p(`git`,t,{cwd:e,env:n,stdin:`ignore`})}async function q(e,t){return(await K(e,t)).stdout.trim()}async function J(e,t){try{return await q(e,t)||void 0}catch(e){if(e instanceof m&&e.exitCode&&e.exitCode>0)return;throw e}}async function Se(e,t,n){try{return await K(e,[`merge-base`,`--is-ancestor`,t,n]),!0}catch(e){if(e instanceof m&&e.exitCode===1)return!1;throw e}}function Ce(e,t){return e.length===t.length&&[...e].sort().every((e,n)=>e===[...t].sort()[n])}function Y(e){return e.split(`\0`).filter(Boolean)}function we(e){return e.split(/\r?\n/,1)[0]??``}function Te(e){return e.type===`acknowledge-codex`?`Acknowledging Codex result`:e.type===`message`?`Generating commit message`:e.type===`commit`?`Committing local changes`:e.type===`apply`?`Integrating accepted update`:e.type===`prepare`?`Reviewing working tree`:e.type===`retry-install`?`Retrying dependency installation`:e.type===`reset-database`?`Resetting local database`:`Aborting refresh`}function X(){return v.platform===`win32`?`pnpm.cmd`:`pnpm`}function Z(e){return e instanceof Error?e.message:String(e)}export{w as isManagedDevCheckout,T as isPrimaryCheckout,D as startManagedDevSession};

package/dist/runner.js

@@ -1 +1 @@
-import{join as e}from"node:path";import{tmpdir as t}from"node:os";import*as n from"cmd-ts";import{mkdtempSync as r,writeFileSync as i}from"node:fs";import{inspect as a}from"node:util";function o(n,{formatMessage:a,temporaryDirectory:o=t(),write:s=e=>console.error(e)}={}){let u=f(n),d=m(c(n,a),u);try{let t=e(r(e(o,`coreframe-error-`)),`error.log`);return i(t,`${m(l(n),u)}\n`,{mode:384}),s(`Error: ${d}\nFull diagnostic: ${t}`),t}catch{s(`Error: ${d}\nThe full diagnostic could not be written to the temporary directory.`);return}}function s(e,t={}){let r=typeof e==`function`?e:()=>n.run(n.binary(e),process.argv),i=!1,a=e=>{i||(i=!0,o(e,t),process.exit(1))};process.once(`uncaughtException`,a),process.once(`unhandledRejection`,a),Promise.resolve().then(r).catch(a)}function c(e,t){try{return t?.(e)||(e instanceof Error?e.message:String(e)).split(/\r?\n/,1)[0]||`Unknown error`}catch{return`Unknown error`}}function l(e){try{let t=u(e);if(!(e instanceof Error)||!d(t))return a(t,{customInspect:!1,depth:10});let n=typeof t.stack==`string`?t.stack:`${e.name}: ${e.message}`;return delete t.name,delete t.message,delete t.stack,`${n}${Reflect.ownKeys(t).length?`\n${a(t,{customInspect:!1,depth:10})}`:``}`}catch{return`The thrown value could not be inspected.`}}function u(e,t=new WeakMap){if((typeof e!=`object`||!e)&&typeof e!=`function`)return e;let n=e,r=t.get(n);if(r)return r;if(typeof e==`function`)return`[Function${e.name?`: ${e.name}`:``}]`;let i=Array.isArray(e)?[]:{};t.set(n,i),e instanceof Error&&(i.name=e.name,i.message=e.message,i.stack=e.stack??`${e.name}: ${e.message}`);for(let r of Reflect.ownKeys(n)){if(typeof r!=`string`||r.toLowerCase()===`env`||Array.isArray(e)&&r===`length`||e instanceof Error&&(r===`name`||r===`message`||r===`stack`))continue;let a=Object.getOwnPropertyDescriptor(n,r);!a||!(`value`in a)||Object.defineProperty(i,r,{configurable:!0,enumerable:!0,value:u(a.value,t),writable:!0})}return i}function d(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function f(e,t=new WeakSet){let n=new Set;function r(e){if((typeof e!=`object`||!e)&&typeof e!=`function`)return;let i=e;if(!t.has(i)){t.add(i);for(let e of Reflect.ownKeys(i)){if(typeof e!=`string`)continue;let t=Object.getOwnPropertyDescriptor(i,e);!t||!(`value`in t)||(e.toLowerCase()===`env`?p(t.value,n):r(t.value))}}}try{r(e)}catch{}return n}function p(e,t){if(!(typeof e!=`object`||!e))for(let n of Reflect.ownKeys(e)){let r=Object.getOwnPropertyDescriptor(e,n);r&&`value`in r&&typeof r.value==`string`&&r.value&&t.add(r.value)}}function m(e,t){return[...t].sort((e,t)=>t.length-e.length).reduce((e,t)=>e.replaceAll(t,`[redacted environment value]`),e)}export{o as reportCliError,s as run};
+import{join as e}from"node:path";import{mkdtempSync as t,writeFileSync as n}from"node:fs";import{tmpdir as r}from"node:os";import*as i from"cmd-ts";import{inspect as a}from"node:util";function o(i,{formatMessage:a,temporaryDirectory:o=r(),write:s=e=>console.error(e)}={}){let u=f(i),d=m(c(i,a),u);try{let r=e(t(e(o,`coreframe-error-`)),`error.log`);return n(r,`${m(l(i),u)}\n`,{mode:384}),s(`Error: ${d}\nFull diagnostic: ${r}`),r}catch{s(`Error: ${d}\nThe full diagnostic could not be written to the temporary directory.`);return}}function s(e,t={}){let n=typeof e==`function`?e:()=>i.run(i.binary(e),process.argv),r=!1,a=e=>{r||(r=!0,o(e,t),process.exit(1))};process.once(`uncaughtException`,a),process.once(`unhandledRejection`,a),Promise.resolve().then(n).catch(a)}function c(e,t){try{return t?.(e)||(e instanceof Error?e.message:String(e)).split(/\r?\n/,1)[0]||`Unknown error`}catch{return`Unknown error`}}function l(e){try{let t=u(e);if(!(e instanceof Error)||!d(t))return a(t,{customInspect:!1,depth:10});let n=typeof t.stack==`string`?t.stack:`${e.name}: ${e.message}`;return delete t.name,delete t.message,delete t.stack,`${n}${Reflect.ownKeys(t).length?`\n${a(t,{customInspect:!1,depth:10})}`:``}`}catch{return`The thrown value could not be inspected.`}}function u(e,t=new WeakMap){if((typeof e!=`object`||!e)&&typeof e!=`function`)return e;let n=e,r=t.get(n);if(r)return r;if(typeof e==`function`)return`[Function${e.name?`: ${e.name}`:``}]`;let i=Array.isArray(e)?[]:{};t.set(n,i),e instanceof Error&&(i.name=e.name,i.message=e.message,i.stack=e.stack??`${e.name}: ${e.message}`);for(let r of Reflect.ownKeys(n)){if(typeof r!=`string`||r.toLowerCase()===`env`||Array.isArray(e)&&r===`length`||e instanceof Error&&(r===`name`||r===`message`||r===`stack`))continue;let a=Object.getOwnPropertyDescriptor(n,r);!a||!(`value`in a)||Object.defineProperty(i,r,{configurable:!0,enumerable:!0,value:u(a.value,t),writable:!0})}return i}function d(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function f(e,t=new WeakSet){let n=new Set;function r(e){if((typeof e!=`object`||!e)&&typeof e!=`function`)return;let i=e;if(!t.has(i)){t.add(i);for(let e of Reflect.ownKeys(i)){if(typeof e!=`string`)continue;let t=Object.getOwnPropertyDescriptor(i,e);!t||!(`value`in t)||(e.toLowerCase()===`env`?p(t.value,n):r(t.value))}}}try{r(e)}catch{}return n}function p(e,t){if(!(typeof e!=`object`||!e))for(let n of Reflect.ownKeys(e)){let r=Object.getOwnPropertyDescriptor(e,n);r&&`value`in r&&typeof r.value==`string`&&r.value&&t.add(r.value)}}function m(e,t){return[...t].sort((e,t)=>t.length-e.length).reduce((e,t)=>e.replaceAll(t,`[redacted environment value]`),e)}export{o as reportCliError,s as run};

package/dist/tauri-dev-output.js

@@ -1,2 +1,2 @@
-import{mkdtemp as e}from"node:fs/promises";import t from"node:path";import{tmpdir as n}from"node:os";import{createWriteStream as r}from"node:fs";import{stripVTControlCharacters as i}from"node:util";import{once as a}from"node:events";import{finished as o}from"node:stream/promises";async function s({output:i,temporaryDirectory:o=n()}){let s=await e(t.join(o,`coreframe-ios-dev-`)),l=t.join(s,`tauri.log`),u=r(l,{flags:`wx`,mode:384});return await a(u,`open`),new c(l,u,i)}var c=class{logFile;closed=!1;failureLines=[];log;output;runtime=!1;showInstalledBundleId=!1;constructor(e,t,n){this.logFile=e,this.log=t,this.output=n}async consume(e){try{for await(let t of e)await d(this.log,`${t}\n`),this.rememberFailureLine(t),this.shouldShow(t)&&await d(this.output,`${t}\n`)}catch{}}async reportFailure(){await d(this.output,`iOS development failed. Recent diagnostic output:
-`);for(let e of this.failureLines)await d(this.output,`${e}\n`);await d(this.output,`Full iOS log: ${this.logFile}\n`)}async close(){this.closed||(this.closed=!0,this.log.end(),await o(this.log))}shouldShow(e){let t=i(e).trim();if(t===`Building app...`)return this.runtime=!1,!0;if(l(t))return!1;if(t.startsWith(`Launched application with `))return this.runtime=!0,!0;if(this.runtime)return!0;if(t===`App installed:`)return this.showInstalledBundleId=!0,!0;if(this.showInstalledBundleId){if(t.length===0)return!1;if(this.showInstalledBundleId=!1,t.startsWith(`• bundleID:`))return!0}return/^(Archiving app|Exporting app|Extracting IPA|Deploying app to device|Pairing with device)\.\.\.$/u.test(t)||/^\*\* BUILD (?:SUCCEEDED|FAILED) \*\*$/u.test(t)||/^(?:Compiling|Checking|Finished)\b/u.test(t)||/^(?:Warn|Error)\b/u.test(t)||/(?:^|:\d+:\d+: )(?:warning|error)(?:\[[^\]]+\])?:/iu.test(t)||/^(?:fatal:|thread .+ panicked|Failed to |No device found\.|The following build commands failed:|command \[.+\] exited)/iu.test(t)||/^Info Watching\b/u.test(t)||/^note: run with RUST_BACKTRACE=/u.test(t)}rememberFailureLine(e){u(i(e).trim())||(this.failureLines.push(e),this.failureLines.length>40&&this.failureLines.shift())}};function l(e){return e.startsWith(`--- xcodebuild: WARNING: Using the first of multiple matching destinations:`)||/^Failed to load provisioning param(?:e)?ter list due to error:/u.test(e)||e==="`devicectl manage create` may support a reduced set of arguments."||/(?:^|\/)idevicesyslog$/u.test(e)}function u(e){return e.length===0||e.startsWith(`export `)||e.startsWith(`inflating:`)||e.startsWith(`Archive:`)||e.startsWith(`cd `)||e.startsWith(`/bin/sh -c `)||e.startsWith(`Command line invocation:`)||e.startsWith(`Build settings from command line:`)}async function d(e,t){e.write(t)||await a(e,`drain`)}export{s as createTauriDevOutput};
+import{mkdtemp as e}from"node:fs/promises";import t from"node:path";import{createWriteStream as n}from"node:fs";import{tmpdir as r}from"node:os";import{finished as i}from"node:stream/promises";import{stripVTControlCharacters as a}from"node:util";import{once as o}from"node:events";async function s({output:i,temporaryDirectory:a=r()}){let s=await e(t.join(a,`coreframe-ios-dev-`)),l=t.join(s,`tauri.log`),u=n(l,{flags:`wx`,mode:384});return await o(u,`open`),new c(l,u,i)}var c=class{logFile;closed=!1;failureLines=[];log;output;runtime=!1;showInstalledBundleId=!1;constructor(e,t,n){this.logFile=e,this.log=t,this.output=n}async consume(e){try{for await(let t of e)await d(this.log,`${t}\n`),this.rememberFailureLine(t),this.shouldShow(t)&&await d(this.output,`${t}\n`)}catch{}}async reportFailure(){await d(this.output,`iOS development failed. Recent diagnostic output:
+`);for(let e of this.failureLines)await d(this.output,`${e}\n`);await d(this.output,`Full iOS log: ${this.logFile}\n`)}async close(){this.closed||(this.closed=!0,this.log.end(),await i(this.log))}shouldShow(e){let t=a(e).trim();if(t===`Building app...`)return this.runtime=!1,!0;if(l(t))return!1;if(t.startsWith(`Launched application with `))return this.runtime=!0,!0;if(this.runtime)return!0;if(t===`App installed:`)return this.showInstalledBundleId=!0,!0;if(this.showInstalledBundleId){if(t.length===0)return!1;if(this.showInstalledBundleId=!1,t.startsWith(`• bundleID:`))return!0}return/^(Archiving app|Exporting app|Extracting IPA|Deploying app to device|Pairing with device)\.\.\.$/u.test(t)||/^\*\* BUILD (?:SUCCEEDED|FAILED) \*\*$/u.test(t)||/^(?:Compiling|Checking|Finished)\b/u.test(t)||/^(?:Warn|Error)\b/u.test(t)||/(?:^|:\d+:\d+: )(?:warning|error)(?:\[[^\]]+\])?:/iu.test(t)||/^(?:fatal:|thread .+ panicked|Failed to |No device found\.|The following build commands failed:|command \[.+\] exited)/iu.test(t)||/^Info Watching\b/u.test(t)||/^note: run with RUST_BACKTRACE=/u.test(t)}rememberFailureLine(e){u(a(e).trim())||(this.failureLines.push(e),this.failureLines.length>40&&this.failureLines.shift())}};function l(e){return e.startsWith(`--- xcodebuild: WARNING: Using the first of multiple matching destinations:`)||/^Failed to load provisioning param(?:e)?ter list due to error:/u.test(e)||e==="`devicectl manage create` may support a reduced set of arguments."||/(?:^|\/)idevicesyslog$/u.test(e)}function u(e){return e.length===0||e.startsWith(`export `)||e.startsWith(`inflating:`)||e.startsWith(`Archive:`)||e.startsWith(`cd `)||e.startsWith(`/bin/sh -c `)||e.startsWith(`Command line invocation:`)||e.startsWith(`Build settings from command line:`)}async function d(e,t){e.write(t)||await o(e,`drain`)}export{s as createTauriDevOutput};