@devdogsuga/devtools 0.1.32 → 0.1.34

package/dist/{cli-CZKkNHK5.js → cli-Bb-Lzg-l.js}

@@ -1,10 +1,10 @@
 import { a as cliName } from "./failure-log-BBPGejQv.js";
-import { C as catalog, E as renderHelp, S as unwrap, T as renderCommandList, a as recordResolved, b as explain, c as probeEnvironment, d as nonEmpty, f as resolveDbConnection, i as recordEnteredTier, l as flagValue, m as sessionLabel, n as runMenu, o as reproducibleCommand, p as sessionIsLocal, r as beginInvocation, s as describeEnvironment, t as bareGroupStartPath, u as positionals, v as bail, w as helpPath, x as explainError, y as errorMessage } from "./menu-CQBsQRgH.js";
+import { C as catalog, E as renderHelp, S as unwrap, T as renderCommandList, a as recordResolved, b as explain, c as probeEnvironment, d as nonEmpty, f as resolveDbConnection, i as recordEnteredTier, l as flagValue, m as sessionLabel, n as runMenu, o as reproducibleCommand, p as sessionIsLocal, r as beginInvocation, s as describeEnvironment, t as bareGroupStartPath, u as positionals, v as bail, w as helpPath, x as explainError, y as errorMessage } from "./menu-DnqlX22U.js";
 import { _ as dryRunKind, c as reportRuns, f as supabase, g as runInGroup, h as reportRan, l as run$1, s as dbPush, u as runWithStderr, v as isDryRun, x as wouldRunLine } from "./supabase-project-0knM0mqd.js";
 import { a as ownVersion, n as discoverRepoRoot, r as findRepoRoot } from "./root-C2OmZDwD.js";
 import { i as loadEnvSession, n as loadEnv, r as loadEnvLoad, t as getEnvSync } from "./peers-RBplwovA.js";
-import { d as hasYes, f as isNonInteractive, n as captureDevtoolsError, o as initDevtoolsTelemetry, r as devtoolsEnvironment, t as captureDevtoolsDeprecation } from "./telemetry-C4foD8MD.js";
-import { a as loadRegistry, i as assertRegistryLoaded, r as scopedProcessEnv, t as createTemporaryWranglerEnv } from "./local-env-D8HC2JK_.js";
+import { d as hasYes, f as isNonInteractive, n as captureDevtoolsError, o as initDevtoolsTelemetry, r as devtoolsEnvironment, t as captureDevtoolsDeprecation } from "./telemetry-El7OainP.js";
+import { n as assertRegistryLoaded, r as loadRegistry, t as scopedProcessEnv } from "./local-env-hH4encfD.js";
 import { t as runStackCommand } from "./stack-BynCgRVS.js";
 import { cancel, confirm, intro, isCancel, log, multiselect, note, outro, password, select, spinner, text } from "@clack/prompts";
 import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
@@ -53,15 +53,6 @@ const DONE = "Done.";
 * entry re-routes a credential behind a reviewer gate, so the reviewer of that
 * change should have to touch this file and say so out loud.
 */
-/** `sandbox`'s runtime manifest declares exactly these four; none may be
-* storable, or `deploy secrets-file` would upload a long-lived secret to the
-* internet-facing proxy Worker. */
-const SANDBOX_RUNTIME_KEYS = [
-	"DEPLOY_ENV",
-	"PLATFORM_REST_URL",
-	"SANDBOX_PROXY_TOKEN",
-	"SANDBOX_SENTRY_DSN"
-];
 /** Public per-environment values the local stack also supplies. `localStack`
 * describes development only; staging and production have no stack to supply
 * these, so they must still reach a deploy. */
@@ -83,8 +74,7 @@ async function checkEnv(root) {
 		for (const other of rest) if (JSON.stringify(other.meta) !== JSON.stringify(first.meta)) problems.push(`${key} is declared by both "${first.source}" and "${other.source}" with diverging metadata. Duplicates must agree on every field, doc string included.`);
 		for (const entry of entries) if (entry.meta.doc.trim().length === 0) problems.push(`${key} (declared by "${entry.source}") has an empty doc.`);
 	}
-	const everyEntry = [...registry.values()].flat();
-	const shipped = everyEntry.filter((e) => e.source === "study-group-finder");
+	const shipped = [...registry.values()].flat().filter((e) => e.source === "study-group-finder");
 	if (shipped.length === 0) problems.push("No variables are declared by \"study-group-finder\"; the no-secrets-in-the-binary check would be vacuous.");
 	for (const entry of shipped) if (entry.meta.secrecy !== "public") problems.push(`${entry.key} is in the study-group-finder runtime manifest with secrecy "${entry.meta.secrecy}". Move it to the "study-group-finder:tooling" manifest or make it public.`);
 	const storable = new Set(env.storableKeys());
@@ -92,9 +82,6 @@ async function checkEnv(root) {
 	const never = env.neverStoreKeys();
 	const minted = env.mintedKeys();
 	const narrowed = env.narrowedKeys();
-	const sandbox = everyEntry.filter((e) => e.source === "sandbox");
-	if (JSON.stringify(sandbox.map((e) => e.key).sort()) !== JSON.stringify(SANDBOX_RUNTIME_KEYS)) problems.push(`The sandbox runtime manifest declares [${sandbox.map((e) => e.key).sort().join(", ")}], not [${SANDBOX_RUNTIME_KEYS.join(", ")}].`);
-	for (const entry of sandbox) if (storable.has(entry.key)) problems.push(`${entry.key} is declared by the sandbox runtime manifest and is storable, so \`deploy secrets-file\` would upload it to the proxy Worker. Move it to the "sandbox:tooling" manifest if the deploy needs it rather than the Worker.`);
 	for (const [key, entries] of registry) if (key.startsWith("GITHUB_") && entries.some((e) => e.meta.scope === "environment")) problems.push(`${key} is environment-scoped but starts with GITHUB_, which GitHub reserves. Rename it (the App credentials use GH_*).`);
 	for (const key of never) {
 		if (storable.has(key)) problems.push(`${key} is never-store yet appears in storableKeys().`);
@@ -116,7 +103,7 @@ async function checkEnv(root) {
 		[
 			"minted",
 			minted,
-			["SANDBOX_PROXY_TOKEN"]
+			[]
 		],
 		[
 			"narrowed",
@@ -308,9 +295,6 @@ function workerPaths() {
 * both call that reusable workflow), so exactly one `matrix.include` block is
 * expected.
 */
-/** Worker apps that ship a `wrangler.jsonc` but are deliberately left out of
-* the automated deploy matrix (see `deploy-app.yaml`'s own comment). */
-const NOT_IN_DEPLOY_MATRIX = ["sandbox"];
 /** The `packages:` glob list from `pnpm-workspace.yaml`, e.g. `["apps/*",
 * "packages/*", "docs"]`. Stops at the next top-level (column-0) key. */
 function workspaceGlobs(yamlText) {
@@ -392,8 +376,7 @@ function checkWorkers(root) {
 	}
 	const blocks = deployMatrixApps(readFileSync(deployApp, "utf8"));
 	if (blocks.length !== 1) problems.push(`deploy-app.yaml should define its deploy matrix once; found ${blocks.length}.`);
-	const deployed = apps.filter((app) => !NOT_IN_DEPLOY_MATRIX.includes(app));
-	for (const block of blocks) if (!sameSet(block, deployed)) problems.push(`deploy-app.yaml's matrix is [${block.join(", ")}]; workers.json implies [${deployed.join(", ")}] (minus ${NOT_IN_DEPLOY_MATRIX.join(", ")}).`);
+	for (const block of blocks) if (!sameSet(block, apps)) problems.push(`deploy-app.yaml's matrix is [${block.join(", ")}]; workers.json lists [${apps.join(", ")}].`);
 	return problems;
 }
 //#endregion
@@ -818,7 +801,7 @@ function discoverWranglerConfigs() {
 * Imports every app's `cloudflare/scheduled.ts` and returns the parsed
 * `CRON_ROUTES` for each app that has one.
 *
-* `apps/sandbox` has no scheduled.ts and no crons; absent is not an error.
+* An app with no scheduled.ts has no crons; absent is not an error.
 */
 async function discoverCronMaps() {
 	const results = [];
@@ -2228,7 +2211,6 @@ const SECTION_ORDER = [
 	"platform",
 	"schedule-builder",
 	"study-group-finder",
-	"sandbox",
 	"supabase",
 	"devtools"
 ];
@@ -2236,7 +2218,6 @@ const SECTION_LABELS = {
 	platform: "platform (apps/platform/src/env.ts)",
 	"schedule-builder": "schedule-builder (apps/schedule-builder/src/env.ts)",
 	"study-group-finder": "study-group-finder (apps/study-group-finder/env.ts)",
-	sandbox: "sandbox — a dormant Worker's bindings; nothing provisions or deploys it from the platform side any more (apps/sandbox/env.ts)",
 	supabase: "supabase — read by config.toml and the Supabase CLI (supabase/env.ts)",
 	devtools: "devtools — operator tooling, no app reads these (@devdogsuga/devtools)"
 };
@@ -2245,13 +2226,12 @@ function sectionOf(source) {
 	return source.split(":")[0];
 }
 /**
-* The sections a development init may narrow to: the four apps.
+* The sections a development init may narrow to: the three apps.
 *
 * Order is the PICKER's order, not the file's (that is `SECTION_ORDER`, fixed
 * so `.env.example` stays byte-stable). The two projects most contributors
 * join come first; `platform` follows as the shared auth infrastructure you
-* depend on but rarely edit, and `sandbox` last as the dormant one almost
-* nobody touches.
+* depend on but rarely edit.
 *
 * `supabase` is NOT here and NOT optional. It is the shared database and auth
 * layer every app runs against, so any selection implies it (the caller adds
@@ -2262,8 +2242,7 @@ function sectionOf(source) {
 const APP_SECTIONS = [
 	"schedule-builder",
 	"study-group-finder",
-	"platform",
-	"sandbox"
+	"platform"
 ];
 /**
 * Every declared key belonging to one of the chosen sections.
@@ -2522,8 +2501,7 @@ async function resolveSections(apps) {
 	const APP_HINTS = {
 		"schedule-builder": "the DogDays course-schedule planner (Next.js)",
 		"study-group-finder": "the Dog Pack study-group app (Flutter)",
-		platform: "shared auth server — needed only if you run it locally for sign-in; usually you don't edit it",
-		sandbox: "dormant Worker — no platform integration left; almost never touched"
+		platform: "shared auth server — needed only if you run it locally for sign-in; usually you don't edit it"
 	};
 	const chosen = unwrap(await multiselect({
 		message: "Which projects are you working on? (The shared Supabase stack is always included; re-run init later to add more.)",
@@ -5184,7 +5162,7 @@ async function runDev(plan, filters, rest, tierEnv) {
 		"run",
 		"build"
 	], tierEnv, { final: false });
-	const { scopedProcessEnv } = await import("./local-env-DrBCXqD8.js");
+	const { scopedProcessEnv } = await import("./local-env-CR3McKHZ.js");
 	const environment = {
 		...process.env,
 		...tierEnv
@@ -5632,8 +5610,7 @@ async function runSetup() {
 		if (sections) chosenApps = [
 			"schedule-builder",
 			"study-group-finder",
-			"platform",
-			"sandbox"
+			"platform"
 		].filter((app) => sections.has(app));
 		writeFileSync(env, renderInit("development", (/* @__PURE__ */ new Date()).toISOString().slice(0, 10), sections), { flag: "wx" });
 		log.success("Created .env (same as `pnpm devtools env init`)");
@@ -5819,11 +5796,6 @@ const handleSetup = async () => {
 * `dist/` output, so on a fresh clone `vinext build` fails to load
 * `next.config.ts` without them.
 */
-/** Apps deployed without a framework build: Wrangler bundles `main` itself. */
-const NO_FRAMEWORK_BUILD = /* @__PURE__ */ new Set(["sandbox"]);
-function needsFrameworkBuild(app) {
-	return !NO_FRAMEWORK_BUILD.has(app);
-}
 function workspaceDepsBuildCommand(app) {
 	return [
 		"-r",
@@ -5941,18 +5913,6 @@ async function waitForLocalWorkflow(workflowName, instanceId, port, options = {}
 	process.stderr.write(`devtools workflows run: Workflow ${instanceId} did not finish within ${Math.round(timeoutMs / 6e4)} minutes.\n`);
 	return 1;
 }
-function wranglerDevArgs(app, port) {
-	return [
-		"--filter",
-		app,
-		"exec",
-		"wrangler",
-		"dev",
-		"--port",
-		port,
-		"--show-interactive-dev-session=false"
-	];
-}
 /** `vinext dev` bound to loopback, where `isWranglerDevRunning` probes. */
 function vinextDevArgs(app, port) {
 	return [
@@ -6058,7 +6018,7 @@ async function startTemporaryWrangler(app, requestedPort) {
 		process.stdout.write(`Port ${requestedPort} is in use; starting the temporary dev session on ${free} instead.\n`);
 		port = String(free);
 	}
-	const runtime = needsFrameworkBuild(app) ? "vinext dev" : "Wrangler";
+	const runtime = "vinext dev";
 	process.stdout.write(`Preparing and starting a temporary ${runtime} session for ${app} on port ${port}…\n`);
 	let loaded;
 	try {
@@ -6075,16 +6035,11 @@ async function startTemporaryWrangler(app, requestedPort) {
 		process.stderr.write(`devtools workflows: building ${app}'s workspace dependencies failed (exit ${buildCode}); not starting ${runtime}.\n`);
 		return null;
 	}
-	const runtimeEnv = needsFrameworkBuild(app) ? void 0 : await createTemporaryWranglerEnv(app, loaded.env);
-	const child = spawn("pnpm", runtimeEnv ? [
-		...wranglerDevArgs(app, port),
-		"--env-file",
-		runtimeEnv.path
-	] : vinextDevArgs(app, port), {
+	const child = spawn("pnpm", vinextDevArgs(app, port), {
 		cwd: findRepoRoot(),
 		stdio: "inherit",
 		detached: process.platform !== "win32",
-		...runtimeEnv ? {} : { env: await scopedProcessEnv(app, loaded.env, "development") }
+		env: await scopedProcessEnv(app, loaded.env, "development")
 	});
 	let startupError;
 	child.once("error", (error) => {
@@ -6096,19 +6051,16 @@ async function startTemporaryWrangler(app, requestedPort) {
 			process.stdout.write(`${runtime} is ready.\n`);
 			const stopOnParentExit = () => {
 				signalProcessGroup(child, "SIGTERM");
-				runtimeEnv?.remove();
 			};
 			process.once("exit", stopOnParentExit);
 			return {
 				stop: async () => {
 					process.off("exit", stopOnParentExit);
 					await stopTemporaryWrangler(child);
-					runtimeEnv?.remove();
 				},
 				forceStop: () => {
 					process.off("exit", stopOnParentExit);
 					signalProcessGroup(child, "SIGKILL");
-					runtimeEnv?.remove();
 				},
 				port
 			};
@@ -6116,13 +6068,11 @@ async function startTemporaryWrangler(app, requestedPort) {
 		if (startupError || child.exitCode !== null || child.signalCode !== null) {
 			const how = startupError ? `: ${startupError.message}` : child.signalCode !== null ? ` (killed by ${child.signalCode}).` : ` (exit ${child.exitCode}).`;
 			process.stderr.write(`devtools workflows run: ${runtime} stopped before it became ready${how}\n`);
-			runtimeEnv?.remove();
 			return null;
 		}
 		await setTimeout$1(250);
 	}
 	await stopTemporaryWrangler(child);
-	runtimeEnv?.remove();
 	process.stderr.write(`devtools workflows run: ${runtime} did not become ready on port ${port} within ${WRANGLER_READY_TIMEOUT_MS / 6e4} minutes.\n`);
 	return null;
 }

package/dist/launch.js

@@ -1,9 +1,9 @@
 import { a as cliName, t as installFailureLog } from "./failure-log-BBPGejQv.js";
-import { C as catalog, S as unwrap, _ as setMenuEnvHook, d as nonEmpty, g as realEnvEntryDeps, h as enterSessionEnvironment, t as bareGroupStartPath, w as helpPath, y as errorMessage } from "./menu-CQBsQRgH.js";
+import { C as catalog, S as unwrap, _ as setMenuEnvHook, d as nonEmpty, g as realEnvEntryDeps, h as enterSessionEnvironment, t as bareGroupStartPath, w as helpPath, y as errorMessage } from "./menu-DnqlX22U.js";
 import { b as setDryRun, m as formatCommand, v as isDryRun, y as resolveDryRun } from "./supabase-project-0knM0mqd.js";
 import { n as discoverRepoRoot, r as findRepoRoot, t as RepoNotFoundError } from "./root-C2OmZDwD.js";
 import { i as loadEnvSession, r as loadEnvLoad } from "./peers-RBplwovA.js";
-import { d as hasYes, f as isNonInteractive, m as stripTierFlag, n as captureDevtoolsError, o as initDevtoolsTelemetry, p as stripNoEnvFlag, s as lastSentryEventId } from "./telemetry-C4foD8MD.js";
+import { d as hasYes, f as isNonInteractive, m as stripTierFlag, n as captureDevtoolsError, o as initDevtoolsTelemetry, p as stripNoEnvFlag, s as lastSentryEventId } from "./telemetry-El7OainP.js";
 import { confirm, select } from "@clack/prompts";
 //#region ../cli-core/src/session.ts
 /**
@@ -166,7 +166,7 @@ async function startStack() {
 * post-tier-resolution path.
 */
 async function dispatch(argv) {
-	const { main } = await import("./cli-CZKkNHK5.js");
+	const { main } = await import("./cli-Bb-Lzg-l.js");
 	try {
 		await main(argv);
 	} catch (err) {

package/dist/local-env-CR3McKHZ.js

@@ -0,0 +1,2 @@
+import { t as scopedProcessEnv } from "./local-env-hH4encfD.js";
+export { scopedProcessEnv };

package/dist/{local-env-D8HC2JK_.js → local-env-hH4encfD.js}

@@ -1,9 +1,8 @@
 import { i as ownPackageDir, r as findRepoRoot } from "./root-C2OmZDwD.js";
 import { a as repoPeerUrl, n as loadEnv, t as getEnvSync } from "./peers-RBplwovA.js";
 import { register } from "node:module";
-import { existsSync, mkdtempSync, readdirSync, rmSync, writeFileSync } from "node:fs";
+import { existsSync, readdirSync } from "node:fs";
 import { join } from "node:path";
-import { tmpdir } from "node:os";
 import { pathToFileURL } from "node:url";
 //#region ../cli-core/src/repo/peer-redirect.ts
 /**
@@ -117,16 +116,12 @@ async function importRepoTs(absolutePath) {
 * Most workspace packages declare nothing, so "no env.ts found" means
 * not-a-manifest rather than an error.
 *
-* ⚠️ `apps/sandbox` was once listed here as having no manifest ON PURPOSE, on
-* the grounds that a Worker reads bindings that arrive as a function argument
-* rather than `process.env`. That premise is still true and the conclusion
-* drawn from it was still wrong: a manifest is also the only thing that routes
-* a credential to a deployed environment and the only thing that tells
-* `env audit` a Worker secret is supposed to be there. Without one,
-* `SANDBOX_PROXY_TOKEN`, minted at deploy time and therefore in no Bitwarden
-* project by design, was reported as an orphan, i.e. as safe for the §3.6 prune
-* path to delete. `apps/sandbox/env.ts` exists now, and states that reasoning
-* at length.
+* ⚠️ A Worker still needs a manifest, even though its bindings arrive as a
+* function argument rather than `process.env`: a manifest is the only thing
+* that routes a credential to a deployed environment and the only thing that
+* tells `env audit` a Worker secret is supposed to be there. Without one, a
+* minted secret (in no Bitwarden project by design) is reported as an orphan,
+* i.e. as safe for the §3.6 prune path to delete.
 */
 /**
 * The single in-flight (or settled) load.
@@ -245,12 +240,6 @@ function manifestIn(dir) {
 }
 //#endregion
 //#region src/cf/local-env.ts
-function renderWranglerEnvFile(keys, environment) {
-	return keys.flatMap((key) => {
-		const value = environment[key];
-		return value === void 0 ? [] : [`${key}='${value}'`];
-	}).join("\n") + "\n";
-}
 /** The app's declared keys, deduped and sorted, from the given entries or the
 * loaded registry.
 *
@@ -303,49 +292,5 @@ async function scopedProcessEnv(app, environment, tier, entries) {
 	scoped.CLOUDFLARE_INCLUDE_PROCESS_ENV = "true";
 	return scoped;
 }
-/** Writes the mode-0600 `.dev.vars` into a fresh private temp directory. */
-function materializeEnvFile(keys, environment) {
-	const directory = mkdtempSync(join(tmpdir(), "devtools-wrangler-env-"));
-	const path = join(directory, ".dev.vars");
-	writeFileSync(path, renderWranglerEnvFile(keys, environment), {
-		encoding: "utf8",
-		mode: 384
-	});
-	return {
-		directory,
-		path
-	};
-}
-/**
-* Create an app-scoped, mode-0600 env file for a local Worker runtime whose
-* lifetime a single bracket callback cannot express.
-*
-* ⚠️ KEPT DELIBERATELY, not an oversight: `workflows/commands.ts` holds this
-* file open across a long-lived `wrangler dev` child process, and in the
-* `workflows run` temporary-session path that span crosses a `finally` that
-* is unrelated to starting Wrangler at all — it also triggers a Workflow and
-* polls for its completion before the session stops. Squeezing that into a
-* single `withWranglerEnv` callback would mean merging two previously
-* independent concerns (spinning up a dev session; triggering-and-waiting)
-* into one control path, which is a real redesign of a 700-line orchestrator,
-* not a mechanical bracket swap — and duplicating this function's
-* retry/readiness loop across a bracket-shaped variant just to convert the
-* `workflows serve` half would fragment one shared, tested implementation
-* into two for no behavioural gain.
-*
-* `env` mirrors `withWranglerEnv`'s `options.env`: pass a tier's loaded map to
-* materialize a scoped file from THAT tier rather than the inherited process
-* environment; omit it to keep today's behavior.
-*/
-async function createTemporaryWranglerEnv(app, env) {
-	const { directory, path } = materializeEnvFile(await scopedKeys(app), env ?? process.env);
-	return {
-		path,
-		remove: () => rmSync(directory, {
-			recursive: true,
-			force: true
-		})
-	};
-}
 //#endregion
-export { loadRegistry as a, assertRegistryLoaded as i, renderWranglerEnvFile as n, scopedProcessEnv as r, createTemporaryWranglerEnv as t };
+export { assertRegistryLoaded as n, loadRegistry as r, scopedProcessEnv as t };

package/dist/{menu-CQBsQRgH.js → menu-DnqlX22U.js}

@@ -2,7 +2,7 @@ import { c as YES, i as suppressFailureLog, l as createCatalog, o as JSON_FLAG,
 import { a as listContainerNames, i as foreignStackProjectId, n as containerPrefix, o as readProjectId, p as supabaseCapture, r as foreignStackMessage, t as STACK_API_PORT } from "./supabase-project-0knM0mqd.js";
 import { r as findRepoRoot } from "./root-C2OmZDwD.js";
 import { n as loadEnv, r as loadEnvLoad } from "./peers-RBplwovA.js";
-import { c as reportDevtoolsError, f as isNonInteractive } from "./telemetry-C4foD8MD.js";
+import { c as reportDevtoolsError, f as isNonInteractive } from "./telemetry-El7OainP.js";
 import { cancel, confirm, isCancel, log, note, select, text } from "@clack/prompts";
 import { existsSync } from "node:fs";
 import { writeFile } from "node:fs/promises";

package/dist/{telemetry-C4foD8MD.js → telemetry-El7OainP.js}

@@ -78,8 +78,8 @@ function stripTierFlag(argv) {
 //#region ../cli-core/src/telemetry.ts
 /**
 * devtools' own Sentry wiring — the CLI is a consumer of
-* `@devdogsuga/telemetry` like `apps/platform`, `apps/schedule-builder`, and
-* `apps/sandbox`, but on `@sentry/node` rather than a framework SDK: a CLI
+* `@devdogsuga/telemetry` like `apps/platform` and `apps/schedule-builder`,
+* but on `@sentry/node` rather than a framework SDK: a CLI
 * process starts, runs one command, and exits, with none of a server's
 * request lifecycle for a framework integration to hook into.
 *

package/dist/telemetry.js

@@ -1,2 +1,2 @@
-import { a as hasRealCaller, c as reportDevtoolsError, i as devtoolsTelemetryEnabled, l as reportDevtoolsFailure, n as captureDevtoolsError, o as initDevtoolsTelemetry, r as devtoolsEnvironment, s as lastSentryEventId, t as captureDevtoolsDeprecation, u as resolveDevtoolsDsn } from "./telemetry-C4foD8MD.js";
+import { a as hasRealCaller, c as reportDevtoolsError, i as devtoolsTelemetryEnabled, l as reportDevtoolsFailure, n as captureDevtoolsError, o as initDevtoolsTelemetry, r as devtoolsEnvironment, s as lastSentryEventId, t as captureDevtoolsDeprecation, u as resolveDevtoolsDsn } from "./telemetry-El7OainP.js";
 export { captureDevtoolsDeprecation, captureDevtoolsError, devtoolsEnvironment, devtoolsTelemetryEnabled, hasRealCaller, initDevtoolsTelemetry, lastSentryEventId, reportDevtoolsError, reportDevtoolsFailure, resolveDevtoolsDsn };

package/env.ts

@@ -96,7 +96,22 @@ declare({
       doc:
         "A Sentry organization auth token. Deploys use it to create each " +
         "release and upload its source maps, and the smoke test uses it to " +
-        "read cron check-ins. One token serves every environment.",
+        "confirm the release landed. One token serves every environment.",
+      scope: "environment",
+      secrecy: "secret",
+      commented: true,
+    }),
+    // Read only by `deploy prune-monitors`, in its own step's `env:`: an
+    // organization token (above) can neither list nor delete Crons monitors,
+    // and one that can delete monitors and alert rules org-wide should not
+    // sit in every step of the deploy job. Without it, pruning is skipped
+    // with a notice.
+    SENTRY_MONITORS_TOKEN: define(z.string().min(1).optional(), {
+      doc:
+        "A Sentry internal integration token with Alerts: Read & Write and " +
+        "nothing else. The production deploy uses it to delete the Crons " +
+        "monitors an app no longer declares, which would otherwise alert " +
+        "on missed check-ins forever.",
       scope: "environment",
       secrecy: "secret",
       commented: true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devdogsuga/devtools",
-  "version": "0.1.32",
+  "version": "0.1.34",
   "private": false,
   "type": "module",
   "description": "Contributor CLI for a DevDogsUGA checkout: the real tools with the session's tier filled in, a menu over them, and the checks CI runs. Ships built JS; run via `pnpm dlx @devdogsuga/devtools` (or the `devtools` bin once installed) from inside a DevDogsUGA clone.",
@@ -31,7 +31,7 @@
     "tsx": "^4.23.12",
     "typescript": "^6.0.3",
     "zod": "4.4.3",
-    "@devdogsuga/telemetry": "0.1.3"
+    "@devdogsuga/telemetry": "0.1.4"
   },
   "peerDependencies": {
     "@devdogsuga/db": "*",
@@ -53,8 +53,8 @@
     "vitest": "^4.1.11",
     "@devdogsuga/cli-core": "0.0.0",
     "@devdogsuga/config": "0.1.2",
-    "@devdogsuga/env": "0.1.5",
-    "@devdogsuga/db": "0.1.3"
+    "@devdogsuga/db": "0.1.3",
+    "@devdogsuga/env": "0.1.5"
   },
   "scripts": {
     "build": "tsdown && node scripts/write-build-info.mjs && node ../../scripts/check-bundle-imports.mjs",

package/dist/local-env-DrBCXqD8.js

@@ -1,2 +0,0 @@
-import { r as scopedProcessEnv } from "./local-env-D8HC2JK_.js";
-export { scopedProcessEnv };