@devdogsuga/devtools 0.1.50 → 0.1.51-next.527

package/dist/{menu-DYQ-Dd-O.js → menu-DjE4EZKO.js}

@@ -1,12 +1,11 @@
-import { c as YES, d as positionals, i as suppressFailureLog, l as createCatalog, o as JSON_FLAG, s as SCOPES } from "./failure-log-DOt6E3hS.js";
-import { a as listContainerNames, i as foreignStackProjectId, n as containerPrefix, o as readProjectId, p as supabaseCapture, r as foreignStackMessage, t as STACK_API_PORT } from "./supabase-project-C93xRFkN.js";
-import { r as findRepoRoot } from "./root-CjPWNkBu.js";
-import { c as devdogsugaRootOrNull, n as loadEnv, p as resolveLayout, r as loadEnvLoad } from "./peers-DvUH5VxX.js";
-import { c as reportDevtoolsError, f as isNonInteractive } from "./telemetry-C07-ioHm.js";
+import { d as JSON_FLAG, f as SCOPES, g as positionals, m as createCatalog, p as YES, r as findRepoRoot, s as suppressFailureLog } from "./root-CsocfxnK.js";
+import { E as resolveLayout, _ as loadEnvLoad, a as listContainerNames, g as loadEnv, i as foreignStackProjectId, n as containerPrefix, o as readProjectId, p as supabaseCapture, r as foreignStackMessage, t as STACK_API_PORT, x as devdogsugaRootOrNull } from "./supabase-project-BoJKMCxL.js";
+import { c as reportDevtoolsError, f as isNonInteractive } from "./telemetry-BKFDtzXI.js";
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, join, resolve } from "node:path";
+import { z } from "zod";
 import { cancel, confirm, isCancel, log, note, select, text } from "@clack/prompts";
-import { existsSync } from "node:fs";
 import { writeFile } from "node:fs/promises";
-import { join } from "node:path";
 import { execFileSync } from "node:child_process";
 //#region ../cli-core/src/help.ts
 /**
@@ -479,6 +478,67 @@ const jobsCommand = {
 	]
 };
 //#endregion
+//#region src/moderation/catalog.ts
+const TO = {
+	flag: "--to",
+	value: "<url>",
+	summary: "The receiver's URL. Defaults to the local Edge Function, http://127.0.0.1:54321/functions/v1/platform-moderation."
+};
+const SECRET = {
+	flag: "--secret",
+	value: "<whsec_...>",
+	summary: "The signing secret the receiver verifies with. Defaults to $PLATFORM_MODERATION_SECRET, then the well-known sample secret."
+};
+const moderationCommand = {
+	name: "moderation",
+	title: "Test a Report & Block receiver",
+	summary: "Send signed moderation messages to your app's receiver.",
+	hint: "send one action, or run the conformance samples",
+	subcommands: [{
+		name: "send",
+		title: "Send one signed action",
+		summary: "Send one signed moderation action to a receiver.",
+		hint: "like a moderator's decision, without the platform",
+		envFree: true,
+		noEnv: true,
+		options: [
+			TO,
+			SECRET,
+			{
+				flag: "--content-type",
+				value: "<type>",
+				summary: "For content.* actions. Defaults to session."
+			},
+			{
+				flag: "--content-ref",
+				value: "<id>",
+				summary: "For content.* actions: your row's id. Defaults to a sample id."
+			},
+			{
+				flag: "--user",
+				value: "<uuid>",
+				summary: "For user.* actions: the platform user id. Defaults to a sample id."
+			},
+			{
+				flag: "--replay",
+				summary: "Send the same message twice. The second must be ignored."
+			},
+			{
+				flag: "--stale",
+				summary: "Date the decision a minute in the past, as a late retry would. A receiver that has seen a newer decision must ignore it."
+			}
+		]
+	}, {
+		name: "samples",
+		title: "Run the conformance samples",
+		summary: "Send the conformance sequence and check each answer.",
+		hint: "pass or fail",
+		envFree: true,
+		noEnv: true,
+		options: [TO, SECRET]
+	}]
+};
+//#endregion
 //#region src/roles/catalog.ts
 /**
 * `roles`' place in the command tree: declaration only, nothing here runs.
@@ -542,122 +602,6 @@ const oauthCommand = {
 		}
 	]
 };
-//#endregion
-//#region src/passthrough/catalog.ts
-const supabaseCommand = {
-	name: "supabase",
-	dryRun: "handled",
-	summary: "Run the Supabase CLI against the session's tier.",
-	hint: "fills in --db-url / --project-ref; the rest is yours",
-	surface: "cli-only"
-};
-const wranglerCommand = {
-	name: "wrangler",
-	dryRun: "handled",
-	summary: "Run Wrangler with the session's env.",
-	hint: "everything after the name goes to wrangler",
-	surface: "cli-only"
-};
-const drizzleKitCommand = {
-	name: "drizzle-kit",
-	dryRun: "handled",
-	summary: "Run drizzle-kit with the session's env.",
-	hint: "run it from the app that owns the config",
-	surface: "cli-only"
-};
-const psqlCommand = {
-	name: "psql",
-	dryRun: "handled",
-	summary: "Run psql against the session's database.",
-	hint: "connects with the tier's DB_URL unless you say otherwise",
-	surface: "cli-only"
-};
-//#endregion
-//#region src/preset/catalog.ts
-/**
-* The Supabase jobs' places in the command tree: declaration only, nothing
-* here runs. The handlers live in `commands.ts` beside it.
-*
-* Each sequences several tool calls (or asks a question between them) and
-* prints the commands it ran. They were once subcommands of `preset`; now each
-* is a top-level command under its own name, so the menu's first screen can
-* offer them directly. `preset` is refused with the new name (`cli.ts`'s
-* `RETIRED`).
-*/
-const restartStackCommand = {
-	name: "restart-stack",
-	title: "Restart local Supabase",
-	dryRun: "handled",
-	summary: "Restart the local Supabase stack.",
-	hint: "supabase stop, then start; picks up config.toml",
-	scope: "machine",
-	when: "instance-running"
-};
-const newMigrationCommand = {
-	name: "new-migration",
-	title: "Create a new migration",
-	dryRun: "handled",
-	summary: "Create an empty migration for an app's schema.",
-	hint: "supabase migration new <schema>_<description>",
-	scope: "repo",
-	options: [{
-		flag: "--app",
-		value: "<slug>",
-		summary: "Whose schema. Asked for when absent."
-	}]
-};
-const applyMigrationsCommand = {
-	name: "apply-migrations",
-	title: "Apply migrations to the database",
-	dryRun: "handled",
-	summary: "Apply new migrations to the session's database.",
-	hint: "supabase db push, then offers types:db",
-	scope: "endpoint",
-	options: [YES]
-};
-const pushConfigCommand = {
-	name: "push-config",
-	title: "Push Supabase settings",
-	dryRun: "handled",
-	summary: "Push config.toml to the session's hosted project.",
-	hint: "shows the diff first; the local stack reads it on restart",
-	scope: "endpoint",
-	options: [YES]
-};
-//#endregion
-//#region src/run/catalog.ts
-/**
-* The three flags every `run` task takes.
-*
-* None carries a `prompt`, and that is the point rather than an omission.
-* `run` opens a multiselect of the apps defining the task, so a wizard that
-* asked "every package?", "which filter?" and "which tier?" up front would
-* ask the same question three times and let the answers disagree. `--tier`
-* is promptless for a different reason than `--filter`/`--all`, though: it is
-* not a question `run` asks itself elsewhere (unlike `jobs run`'s own
-* `--tier`, which opens a live picker) — it is a scripting input with no
-* wizard equivalent, the same category `--json` sits in. `--help` still
-* documents all three, which is where someone scripting this will look.
-*
-* Same reasoning as `VAULT_TARGET` above: the command owns the question, so the
-* tree declares the flag and stays quiet.
-*/
-const RUN_OPTIONS = [
-	{
-		flag: "--filter",
-		value: "<pkg>",
-		summary: "Limit to a package. pnpm's own flag; skips the question."
-	},
-	{
-		flag: "--all",
-		summary: "Every package, unfiltered, with nothing asked."
-	},
-	{
-		flag: "--tier",
-		value: "<t>",
-		summary: "Load a tier's env into the run. CLI-only; never prompted."
-	}
-];
 const catalog = createCatalog({
 	usage: "pnpm devtools",
 	commonTasks: [
@@ -685,56 +629,52 @@ const catalog = createCatalog({
 					hint: "pnpm -F <package> run <script>"
 				},
 				oauthCommand,
-				doctorCommand,
-				{
-					name: "run",
-					dryRun: "handled",
-					summary: "Run a pnpm workspace task, asking which apps first.",
-					hint: "deprecated: pnpm -r run <task>",
-					surface: "cli-only",
-					deprecated: "Use `pnpm -r run <task>` for every package or `pnpm -F <app> <task>` for one. It still runs, and each use is reported so it can be removed (TASK-404).",
-					subcommands: [
-						{
-							name: "build",
-							summary: "Compile every package an app needs.",
-							options: RUN_OPTIONS
-						},
-						{
-							name: "dev",
-							summary: "Start the development servers.",
-							options: RUN_OPTIONS
-						},
-						{
-							name: "typecheck",
-							summary: "Run tsc across the workspace.",
-							options: RUN_OPTIONS
-						},
-						{
-							name: "lint",
-							summary: "Run ESLint across the workspace.",
-							options: RUN_OPTIONS
-						},
-						{
-							name: "lint:fix",
-							summary: "Run ESLint and write what it can fix.",
-							options: RUN_OPTIONS
-						},
-						{
-							name: "test",
-							summary: "Run the unit tests.",
-							options: RUN_OPTIONS
-						}
-					]
-				}
+				doctorCommand
 			]
 		},
 		{
 			title: "Supabase",
 			commands: [
-				restartStackCommand,
-				newMigrationCommand,
-				applyMigrationsCommand,
-				pushConfigCommand
+				{
+					name: "restart-stack",
+					title: "Restart local Supabase",
+					dryRun: "handled",
+					summary: "Restart the local Supabase stack.",
+					hint: "supabase stop, then start; picks up config.toml",
+					scope: "machine",
+					when: "instance-running"
+				},
+				{
+					name: "new-migration",
+					title: "Create a new migration",
+					dryRun: "handled",
+					summary: "Create an empty migration for an app's schema.",
+					hint: "supabase migration new <schema>_<description>",
+					scope: "repo",
+					options: [{
+						flag: "--app",
+						value: "<slug>",
+						summary: "Whose schema. Asked for when absent."
+					}]
+				},
+				{
+					name: "apply-migrations",
+					title: "Apply migrations to the database",
+					dryRun: "handled",
+					summary: "Apply new migrations to the session's database.",
+					hint: "supabase db push, then offers types:db",
+					scope: "endpoint",
+					options: [YES]
+				},
+				{
+					name: "push-config",
+					title: "Push Supabase settings",
+					dryRun: "handled",
+					summary: "Push config.toml to the session's hosted project.",
+					hint: "shows the diff first; the local stack reads it on restart",
+					scope: "endpoint",
+					options: [YES]
+				}
 			]
 		},
 		{
@@ -743,15 +683,43 @@ const catalog = createCatalog({
 		},
 		{
 			title: "Configuration & integrations",
-			commands: [envCommand, rolesCommand]
+			commands: [
+				envCommand,
+				rolesCommand,
+				moderationCommand
+			]
 		},
 		{
 			title: "The real tools",
 			commands: [
-				supabaseCommand,
-				wranglerCommand,
-				drizzleKitCommand,
-				psqlCommand
+				{
+					name: "supabase",
+					dryRun: "handled",
+					summary: "Run the Supabase CLI against the session's tier.",
+					hint: "fills in --db-url / --project-ref; the rest is yours",
+					surface: "cli-only"
+				},
+				{
+					name: "wrangler",
+					dryRun: "handled",
+					summary: "Run Wrangler with the session's env.",
+					hint: "everything after the name goes to wrangler",
+					surface: "cli-only"
+				},
+				{
+					name: "drizzle-kit",
+					dryRun: "handled",
+					summary: "Run drizzle-kit with the session's env.",
+					hint: "run it from the app that owns the config",
+					surface: "cli-only"
+				},
+				{
+					name: "psql",
+					dryRun: "handled",
+					summary: "Run psql against the session's database.",
+					hint: "connects with the tier's DB_URL unless you say otherwise",
+					surface: "cli-only"
+				}
 			]
 		},
 		{
@@ -761,6 +729,335 @@ const catalog = createCatalog({
 	]
 });
 //#endregion
+//#region src/product/catalog.ts
+/**
+* The command tree devtools shows inside a product repository (one with a
+* `devtools.config.json`): declaration only, nothing here runs. The handlers
+* are in `commands.ts`.
+*
+* Smaller than the platform's tree on purpose. A product has no tiers, no env
+* registry and no workspace of Workers, so everything about those is absent
+* rather than present and refusing.
+*/
+const TARGET_OPTIONS = [{
+	flag: "--local",
+	summary: "Use the Docker stack on this machine."
+}, {
+	flag: "--hosted",
+	summary: "Use your own hosted project (from .env.tooling)."
+}];
+const productSetupCommand = {
+	name: "setup",
+	title: "Set up this checkout",
+	summary: "Your own database (Docker or a hosted project), the schema, the types and sign in.",
+	hint: "run this first",
+	envFree: true,
+	options: [
+		...TARGET_OPTIONS,
+		{
+			flag: "--download-types",
+			summary: "Fetch the types CI built for your schema instead of generating them."
+		},
+		{
+			flag: "--skip-oauth",
+			summary: "Leave \"Sign in with DevDogs\" for later (`devtools oauth`)."
+		},
+		{
+			flag: "--yes",
+			summary: "Allow the schema sync to drop things in your database."
+		}
+	]
+};
+const productDoctorCommand = {
+	name: "doctor",
+	title: "Check my setup",
+	summary: "Docker, the pinned Supabase CLI, .env, the database and the types.",
+	dryRun: "read-only",
+	envFree: true
+};
+const productDbCommand = {
+	name: "db",
+	summary: "Keep your development database and generated types in step with supabase/schemas.",
+	envFree: true,
+	subcommands: [
+		{
+			name: "sync",
+			title: "Apply the schema to my database",
+			summary: "Diff supabase/schemas against what your database has had applied, and apply the difference.",
+			envFree: true,
+			dryRun: "handled",
+			options: [
+				...TARGET_OPTIONS,
+				{
+					flag: "--rebuild",
+					summary: "Reset the local database and start over from the schema, then register sign in again."
+				},
+				{
+					flag: "--yes",
+					summary: "Allow changes that drop tables or columns."
+				}
+			]
+		},
+		{
+			name: "types",
+			title: "Generate the database types",
+			summary: "Generate (or download) the types for the current schema. Never committed.",
+			envFree: true,
+			dryRun: "handled",
+			options: [
+				...TARGET_OPTIONS,
+				{
+					flag: "--download",
+					summary: "Download the types CI built for this exact schema, with no database needed."
+				},
+				{
+					flag: "--pack",
+					value: "<file>",
+					summary: "Also pack the generated output into a .tgz release asset (CI)."
+				}
+			]
+		},
+		{
+			name: "hash",
+			summary: "Print the schema hash that names the generated types.",
+			surface: "cli-only",
+			envFree: true,
+			dryRun: "read-only"
+		}
+	]
+};
+const productDevDataCommand = {
+	name: "dev-data",
+	title: "Fill my database with sample data",
+	summary: "Run the product's dev-data SQL for the member who signed in, in one transaction.",
+	hint: "after your first sign in",
+	envFree: true,
+	dryRun: "handled",
+	options: [...TARGET_OPTIONS, {
+		flag: "--member",
+		value: "<email|id>",
+		summary: "Seed for this user instead of the latest DevDogs sign in."
+	}]
+};
+const productCatalog = createCatalog({
+	usage: "devtools",
+	commonTasks: [
+		["setup", "Prepare this checkout"],
+		["db sync", "Apply supabase/schemas to your database"],
+		["db types --download", "Get the generated types without a database"],
+		["dev-data", "Fill your database with sample data"],
+		["doctor", "Check the setup"]
+	],
+	groups: [
+		{
+			title: "Get started",
+			commands: [
+				productSetupCommand,
+				productDoctorCommand,
+				oauthCommand
+			]
+		},
+		{
+			title: "Database",
+			commands: [productDbCommand, productDevDataCommand]
+		},
+		{
+			title: "Report & Block",
+			commands: [moderationCommand]
+		},
+		{
+			title: "The real tools",
+			commands: [{
+				name: "supabase",
+				summary: "The Supabase CLI at the version this product is pinned to.",
+				hint: "start, status, stop, ...",
+				surface: "cli-only",
+				envFree: true,
+				dryRun: "handled"
+			}]
+		},
+		{
+			title: "CI",
+			commands: [{
+				name: "check",
+				summary: "Structural checks over the checkout, for CI.",
+				surface: "cli-only",
+				envFree: true,
+				noEnv: true,
+				dryRun: "read-only",
+				subcommands: [{
+					name: "env-example",
+					summary: ".env.example holds public values only: it ships in the app.",
+					surface: "cli-only",
+					envFree: true,
+					noEnv: true
+				}]
+			}, completionsCommand]
+		}
+	]
+});
+//#endregion
+//#region src/active.ts
+let product = false;
+/** Switches to the product tree. Called by `launch()`; tests reset it. */
+function setProductMode(on) {
+	product = on;
+}
+function isProductMode() {
+	return product;
+}
+function activeCatalog() {
+	return product ? productCatalog : catalog;
+}
+//#endregion
+//#region src/product/config.ts
+/**
+* `devtools.config.json`: what makes a repository a product devtools knows how
+* to set up (DogDays, DogPack, and any future one).
+*
+* The file sits at the repo root. Its presence is what switches devtools into
+* product mode: a smaller command set (`setup`, `db sync`, `db types`,
+* `dev-data`, `oauth`) that needs no tiers, no env registry and no workspace.
+* The platform repository has no such file and keeps the full CLI.
+*
+* Nothing in the file is secret. Secrets live in `.env.tooling`, which is
+* git-ignored; the public configuration the app reads at run time lives in
+* `.env`, written from `.env.example`.
+*/
+const CONFIG_FILE = "devtools.config.json";
+const relativePath = z.string().min(1).refine((p) => !p.startsWith("/") && !p.includes(".."), { message: "must be a relative path inside the repository" });
+const typesSchema = z.discriminatedUnion("kind", [z.object({
+	kind: z.literal("typescript"),
+	/** The generated `.ts` file. Git-ignored. */
+	out: relativePath
+}), z.object({
+	kind: z.literal("supadart"),
+	/** The directory supadart writes models to. Git-ignored. */
+	out: relativePath,
+	/** supadart's own config, whose `output` must match `out`. */
+	config: relativePath.default("supadart.yaml")
+})]);
+const productConfigSchema = z.object({
+	$schema: z.string().optional(),
+	/** Lowercase id: `dogdays`. Names the generated-types assets. */
+	product: z.string().regex(/^[a-z][a-z0-9-]*$/),
+	/** Display name: `DogDays`. */
+	name: z.string().min(1),
+	supabase: z.object({
+		/** The directory holding `config.toml` and `schemas/`. */
+		dir: relativePath.default("supabase"),
+		/** The Supabase CLI version this product is built with. Part of the types hash. */
+		version: z.string().regex(/^\d+\.\d+\.\d+$/, "an exact version, 2.117.0"),
+		/** Schemas that hold the product's tables, for type generation. */
+		schemas: z.array(z.string().min(1)).min(1)
+	}),
+	env: z.object({
+		/** The committed manifest: public keys only. */
+		example: relativePath.default(".env.example"),
+		/** What the app reads. Git-ignored. */
+		file: relativePath.default(".env"),
+		/** Secrets the tooling needs (`DB_URL`, `SECRET_KEY`). Git-ignored. */
+		tooling: relativePath.default(".env.tooling"),
+		/** Which `.env` keys receive the project's URL and publishable key. */
+		keys: z.object({
+			url: z.string().default("SUPABASE_URL"),
+			publishableKey: z.string().default("SUPABASE_PUBLISHABLE_KEY")
+		}).default({
+			url: "SUPABASE_URL",
+			publishableKey: "SUPABASE_PUBLISHABLE_KEY"
+		})
+	}).default({
+		example: ".env.example",
+		file: ".env",
+		tooling: ".env.tooling",
+		keys: {
+			url: "SUPABASE_URL",
+			publishableKey: "SUPABASE_PUBLISHABLE_KEY"
+		}
+	}),
+	types: typesSchema,
+	/** Where CI publishes generated types, for `db types --download`. */
+	generatedTypes: z.object({
+		/** `DevDogsUGA/DogDays`. */
+		repo: z.string().regex(/^[\w.-]+\/[\w.-]+$/),
+		tag: z.string().default("generated-types")
+	}).optional(),
+	oauth: z.object({ 
+	/**
+	* App return addresses to allow on the project (`dev.dogpack://login-callback`,
+	* `http://localhost:3000/auth/callback`). Added to `uri_allow_list` on a
+	* hosted project; for local Docker they belong in `supabase/config.toml`.
+	*/
+redirectUris: z.array(z.string()).default([]) }).default({ redirectUris: [] }),
+	/** `dev-data`: a SQL file that fills a development database. */
+	devData: z.object({
+		file: relativePath,
+		/** One line for `--help`. */
+		summary: z.string().optional()
+	}).optional(),
+	/** What `setup` prints as the last step. */
+	runHint: z.string().optional(),
+	/** Databases `dev-data` must never touch. */
+	production: z.object({ 
+	/** Hosted project refs and vanity names: `dogpack`, `abcdefghij`. */
+projects: z.array(z.string()).default([]) }).default({ projects: [] })
+});
+var ProductConfigError = class extends Error {
+	file;
+	constructor(message, file) {
+		super(message);
+		this.file = file;
+		this.name = "ProductConfigError";
+	}
+};
+/** The directory holding `devtools.config.json`, searching upward from `from`. */
+function findProductRoot(from = process.cwd()) {
+	let dir = resolve(from);
+	for (;;) {
+		if (existsSync(join(dir, "devtools.config.json"))) return dir;
+		const parent = dirname(dir);
+		if (parent === dir) return null;
+		dir = parent;
+	}
+}
+function parseProductConfig(text, file) {
+	let json;
+	try {
+		json = JSON.parse(text);
+	} catch (err) {
+		throw new ProductConfigError(`${file} is not valid JSON: ${err instanceof Error ? err.message : String(err)}`, file);
+	}
+	const result = productConfigSchema.safeParse(json);
+	if (!result.success) throw new ProductConfigError(`${file} is not valid:\n${result.error.issues.map((i) => `  ${i.path.join(".") || "(root)"}: ${i.message}`).join("\n")}`, file);
+	return result.data;
+}
+function loadProductConfig(root) {
+	const file = join(root, CONFIG_FILE);
+	return parseProductConfig(readFileSync(file, "utf8"), file);
+}
+function productAt(root) {
+	const config = loadProductConfig(root);
+	const supabaseDir = join(root, config.supabase.dir);
+	return {
+		root,
+		config,
+		paths: {
+			supabaseDir,
+			schemasDir: join(supabaseDir, "schemas"),
+			migrationsDir: join(supabaseDir, "migrations"),
+			envExample: join(root, config.env.example),
+			envFile: join(root, config.env.file),
+			toolingFile: join(root, config.env.tooling),
+			stateFile: join(root, ".devtools", "state.json")
+		}
+	};
+}
+/** The product the working directory belongs to, or null outside one. */
+function currentProduct(from = process.cwd()) {
+	const root = findProductRoot(from);
+	return root === null ? null : productAt(root);
+}
+//#endregion
 //#region ../cli-core/src/db/generated-env.ts
 /**
 * Regenerating `.env.generated` from a Supabase stack that is ALREADY
@@ -772,7 +1069,7 @@ const catalog = createCatalog({
 * except `.env.generated` (the connection block `startLocalStack`,
 * the CLI's `db/stack.ts`, writes) only ever lands in the workspace that actually ran
 * it. Left alone, this checkout sees port 54321 listening with the file
-* missing, and `@devdogsuga/env/load`'s `selectEnvFiles` either warns (an
+* missing, and `env-runtime/load`'s `selectEnvFiles` either warns (an
 * unqualified session) or throws `LocalStackOfflineError` (an explicit
 * `development:local` one) — both of which used to mean the contributor
 * ran `supabase status -o env > .env.generated` by hand.
@@ -793,9 +1090,9 @@ const catalog = createCatalog({
 * otherwise just repeat "nothing is listening" advice for a port that very
 * much has something listening on it.
 */
-/** The file this module writes and checks — see `@devdogsuga/env/load`'s
+/** The file this module writes and checks — see `env-runtime/load`'s
 *  `GENERATED_FILE`, duplicated as a literal rather than imported so this
-*  module never has to load the `@devdogsuga/env` peer just for one
+*  module never has to load the `@devdogsuga/sdk/env` peer just for one
 *  constant. Keep in sync if that constant's value ever changes. */
 const GENERATED_FILE = ".env.generated";
 /**
@@ -846,7 +1143,7 @@ async function ensureGeneratedEnvFile(tier, devDatabase, deps) {
 * The production wiring for `EnsureGeneratedEnvDeps`, shared by
 * `../env-entry.ts` (via `realEnvEntryDeps`) and `../stack.ts`'s `db
 * status`. `probeLocalStack` is passed in rather than resolved here because
-* both callers already hold the loaded `@devdogsuga/env/load` peer their
+* both callers already hold the loaded `env-runtime/load` peer their
 * own dispatch needs anyway — resolving it again here would mean two
 * different copies of the same optional peer in play.
 */
@@ -1681,4 +1978,4 @@ async function runMenu(catalog, dispatch, env = probeEnvironment(), options = {}
 	return dispatch(chosen.argv);
 }
 //#endregion
-export { helpPath as C, catalog as S, renderHelp as T, bail as _, recordEnteredTier as a, explainError as b, describeEnvironment as c, resolveDbConnection as d, sessionIsLocal as f, setMenuEnvHook as g, realEnvEntryDeps as h, beginInvocation as i, probeEnvironment as l, enterSessionEnvironment as m, bareGroupStartPath as n, recordResolved as o, sessionLabel as p, runMenu as r, reproducibleCommand as s, bareGroupStartFlags as t, nonEmpty as u, errorMessage as v, renderCommandList as w, unwrap as x, explain as y };
+export { renderCommandList as A, currentProduct as C, setProductMode as D, isProductMode as E, catalog as O, ProductConfigError as S, activeCatalog as T, bail as _, recordEnteredTier as a, explainError as b, describeEnvironment as c, resolveDbConnection as d, sessionIsLocal as f, setMenuEnvHook as g, realEnvEntryDeps as h, beginInvocation as i, renderHelp as j, helpPath as k, probeEnvironment as l, enterSessionEnvironment as m, bareGroupStartPath as n, recordResolved as o, sessionLabel as p, runMenu as r, reproducibleCommand as s, bareGroupStartFlags as t, nonEmpty as u, errorMessage as v, findProductRoot as w, unwrap as x, explain as y };