@dreamboard-games/cli 0.1.30-alpha.1 → 0.1.30-alpha.10

package/dist/agent-verifier/chunk-RHI6S4SU.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/services/project/workspace-dependencies.ts","../../src/services/project/dependency-tooling-messages.ts"],"sourcesContent":["import crypto from \"node:crypto\";\nimport { spawn } from \"node:child_process\";\nimport { EventEmitter } from \"node:events\";\nimport { existsSync } from \"node:fs\";\nimport { mkdir, lstat, readFile, rm, writeFile } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport type { Readable } from \"node:stream\";\nimport { fileURLToPath } from \"node:url\";\nimport {\n  buildDependencyPreparationFailureMessage,\n  buildMissingDependencyToolingMessage,\n  buildMissingGeneratedLockfileMessage,\n  buildPackageLockConflictMessage,\n} from \"./dependency-tooling-messages.js\";\nimport { FRAMEWORK_PNPM_OVERRIDES } from \"./framework-dependencies.js\";\n\ntype LockfileGenerationOptions = Record<string, never>;\n\ntype PackageJsonShape = {\n  packageManager?: string;\n  dependencies?: Record<string, string>;\n  devDependencies?: Record<string, string>;\n  optionalDependencies?: Record<string, string>;\n  peerDependencies?: Record<string, string>;\n  pnpm?: Record<string, unknown>;\n};\n\ntype DependencyInstallMetadata = {\n  dependencyFingerprint: string;\n  installedAt: string;\n  packageManager: string;\n};\n\ntype LockfileCommand = {\n  binary: string;\n  args: string[];\n};\n\nexport type WorkspaceDependencyReconciliationResult = {\n  required: boolean;\n  installed: boolean;\n  lockfileGenerated: boolean;\n  packageManagerNormalized: boolean;\n  fingerprint: string | null;\n};\n\nconst MODULE_DIR = path.dirname(fileURLToPath(import.meta.url));\nconst CLI_ROOT = path.resolve(MODULE_DIR, \"../../..\");\nconst REPO_ROOT = path.resolve(CLI_ROOT, \"../..\");\nconst REPO_PACKAGE_JSON_PATH = path.join(REPO_ROOT, \"package.json\");\nconst DEFAULT_PACKAGE_MANAGER = \"pnpm@10.4.1\";\nconst SDK_PACKAGE_NAME = \"@dreamboard-games/sdk\";\nconst SDK_REQUIRED_DIST_FILES = [\n  \"dist/index.d.ts\",\n  \"dist/index.js\",\n  \"dist/types.d.ts\",\n  \"dist/types.js\",\n  \"dist/ui.d.ts\",\n  \"dist/ui.js\",\n  \"dist/runtime.d.ts\",\n  \"dist/runtime.js\",\n] as const;\nconst DEPENDENCY_INSTALL_METADATA_PATH_SEGMENTS = [\n  \".dreamboard\",\n  \"dependency-install.json\",\n] as const;\n\nclass LockfileGenerationError extends Error {\n  constructor(\n    readonly binary: string,\n    readonly details: {\n      code?: number | null;\n      stdout: string;\n      stderr: string;\n      cause?: Error;\n    },\n  ) {\n    super(buildLockfileGenerationErrorMessage(binary, details), {\n      cause: details.cause,\n    });\n    this.name = \"LockfileGenerationError\";\n  }\n}\n\nexport async function generatePnpmLockfile(\n  projectRoot: string,\n  _options: LockfileGenerationOptions = {},\n): Promise<boolean> {\n  await ensurePackageManagerNormalized(projectRoot);\n  await assertNoNpmLockfileConflict(projectRoot);\n  await runPackageManagerCommand(projectRoot, {\n    args: [\n      \"install\",\n      \"--ignore-workspace\",\n      \"--lockfile-only\",\n      \"--config.shared-workspace-lockfile=false\",\n    ],\n  });\n  await assertPnpmLockfilePresent(projectRoot);\n  return true;\n}\n\nexport async function installWorkspaceDependencies(\n  projectRoot: string,\n  _options: LockfileGenerationOptions = {},\n): Promise<boolean> {\n  const result = await reconcileWorkspaceDependencies(projectRoot);\n  return result.required;\n}\n\nexport async function reconcileWorkspaceDependencies(\n  projectRoot: string,\n): Promise<WorkspaceDependencyReconciliationResult> {\n  const packageJsonPath = path.join(projectRoot, \"package.json\");\n  if (!(await pathExists(packageJsonPath))) {\n    return {\n      required: false,\n      installed: false,\n      lockfileGenerated: false,\n      packageManagerNormalized: false,\n      fingerprint: null,\n    };\n  }\n\n  await assertNoNpmLockfileConflict(projectRoot);\n  const packageManagerNormalized =\n    await ensurePackageManagerNormalized(projectRoot);\n  const pnpmLockfilePath = path.join(projectRoot, \"pnpm-lock.yaml\");\n  const nodeModulesPath = path.join(projectRoot, \"node_modules\");\n  const metadataPath = path.join(\n    projectRoot,\n    ...DEPENDENCY_INSTALL_METADATA_PATH_SEGMENTS,\n  );\n\n  let lockfileGenerated = false;\n  let installed = false;\n  const metadata = await readJsonFile<DependencyInstallMetadata>(metadataPath);\n  const lockfileExists = await pathExists(pnpmLockfilePath);\n\n  if (!lockfileExists) {\n    await runPackageManagerCommand(projectRoot, {\n      args: [\n        \"install\",\n        \"--ignore-workspace\",\n        \"--config.shared-workspace-lockfile=false\",\n      ],\n    });\n    lockfileGenerated = true;\n    installed = true;\n  }\n\n  await assertPnpmLockfilePresent(projectRoot);\n  let fingerprint = await fingerprintInstallManifest({\n    packageJsonPath,\n    lockfilePath: pnpmLockfilePath,\n  });\n  const hasValidInstalledDeps =\n    (await pathExists(nodeModulesPath)) &&\n    (await hasValidInstalledDependencies({\n      packageJsonPath,\n      nodeModulesPath,\n    }));\n  const shouldInstall =\n    !installed &&\n    (metadata?.dependencyFingerprint !== fingerprint || !hasValidInstalledDeps);\n\n  if (shouldInstall) {\n    await rm(nodeModulesPath, { recursive: true, force: true });\n    await runPackageManagerCommand(projectRoot, {\n      args: [\n        \"install\",\n        \"--ignore-workspace\",\n        \"--config.shared-workspace-lockfile=false\",\n      ],\n    });\n    installed = true;\n    fingerprint = await fingerprintInstallManifest({\n      packageJsonPath,\n      lockfilePath: pnpmLockfilePath,\n    });\n  }\n\n  if (installed || packageManagerNormalized || !metadata) {\n    await mkdir(path.dirname(metadataPath), { recursive: true });\n    await writeJsonFile(metadataPath, {\n      dependencyFingerprint: fingerprint,\n      installedAt: new Date().toISOString(),\n      packageManager: await readRepoPackageManager(),\n    } satisfies DependencyInstallMetadata);\n  }\n\n  return {\n    required: true,\n    installed,\n    lockfileGenerated,\n    packageManagerNormalized,\n    fingerprint,\n  };\n}\n\nasync function assertNoNpmLockfileConflict(projectRoot: string): Promise<void> {\n  const packageLockPath = path.join(projectRoot, \"package-lock.json\");\n  const pnpmLockPath = path.join(projectRoot, \"pnpm-lock.yaml\");\n  if (\n    (await pathExists(packageLockPath)) &&\n    !(await pathExists(pnpmLockPath))\n  ) {\n    throw new Error(buildPackageLockConflictMessage());\n  }\n}\n\nasync function assertPnpmLockfilePresent(projectRoot: string): Promise<void> {\n  const pnpmLockfilePath = path.join(projectRoot, \"pnpm-lock.yaml\");\n  if (!(await pathExists(pnpmLockfilePath))) {\n    throw new Error(buildMissingGeneratedLockfileMessage());\n  }\n}\n\nasync function ensurePackageManagerNormalized(\n  projectRoot: string,\n): Promise<boolean> {\n  const packageJsonPath = path.join(projectRoot, \"package.json\");\n  const packageJsonContent = await readFile(packageJsonPath, \"utf8\");\n  const packageJson = JSON.parse(packageJsonContent) as PackageJsonShape;\n  const packageManager = await readRepoPackageManager();\n  const nextPackageJson: PackageJsonShape = {\n    ...packageJson,\n    packageManager,\n    pnpm: mergePnpmConfig(packageJson.pnpm),\n  };\n  const normalizedPackageJson = `${JSON.stringify(nextPackageJson, null, 2)}\\n`;\n  if (normalizedPackageJson === packageJsonContent) {\n    return false;\n  }\n  await writeFile(packageJsonPath, normalizedPackageJson, \"utf8\");\n  return true;\n}\n\nfunction mergePnpmConfig(\n  existingPnpm: Record<string, unknown> | undefined,\n): Record<string, unknown> {\n  const existingOverrides =\n    existingPnpm?.overrides &&\n    typeof existingPnpm.overrides === \"object\" &&\n    !Array.isArray(existingPnpm.overrides)\n      ? (existingPnpm.overrides as Record<string, unknown>)\n      : {};\n  return {\n    ...(existingPnpm ?? {}),\n    overrides: {\n      ...existingOverrides,\n      ...FRAMEWORK_PNPM_OVERRIDES,\n    },\n  };\n}\n\nasync function fingerprintInstallManifest(options: {\n  packageJsonPath: string;\n  lockfilePath: string;\n}): Promise<string> {\n  const packageJson = await readFile(options.packageJsonPath, \"utf8\");\n  const lockfile = await readFile(options.lockfilePath, \"utf8\");\n  const packageManager = await readRepoPackageManager();\n  return fingerprintContent([\n    packageJson,\n    lockfile,\n    `packageManager:${packageManager}`,\n  ]);\n}\n\nasync function hasValidInstalledDependencies(options: {\n  packageJsonPath: string;\n  nodeModulesPath: string;\n}): Promise<boolean> {\n  const packageJson = await readJsonFile<PackageJsonShape>(\n    options.packageJsonPath,\n  );\n  if (!packageJson) {\n    return false;\n  }\n\n  const directDependencyNames = new Set<string>();\n  for (const field of [\n    \"dependencies\",\n    \"devDependencies\",\n    \"optionalDependencies\",\n  ] as const) {\n    for (const packageName of Object.keys(packageJson[field] ?? {})) {\n      directDependencyNames.add(packageName);\n    }\n  }\n\n  if (directDependencyNames.size === 0) {\n    return true;\n  }\n\n  for (const packageName of directDependencyNames) {\n    const packageRoot = path.join(\n      options.nodeModulesPath,\n      ...packageName.split(\"/\"),\n    );\n    if (!(await pathExists(path.join(packageRoot, \"package.json\")))) {\n      return false;\n    }\n    if (\n      packageName === SDK_PACKAGE_NAME &&\n      !(await hasInstalledSdkDistFiles(packageRoot))\n    ) {\n      return false;\n    }\n  }\n\n  return true;\n}\n\nasync function hasInstalledSdkDistFiles(packageRoot: string): Promise<boolean> {\n  for (const relativePath of SDK_REQUIRED_DIST_FILES) {\n    if (!(await pathExists(path.join(packageRoot, relativePath)))) {\n      return false;\n    }\n  }\n  return true;\n}\n\nfunction hasExactPnpmVersion(value?: string): boolean {\n  return /^pnpm@\\d+\\.\\d+\\.\\d+(?:[-+][0-9A-Za-z.-]+)?$/.test(value ?? \"\");\n}\n\nasync function readRepoPackageManager(): Promise<string> {\n  const packageJson = await readJsonFile<PackageJsonShape>(\n    REPO_PACKAGE_JSON_PATH,\n  );\n  const packageManager = packageJson?.packageManager?.trim();\n  return hasExactPnpmVersion(packageManager)\n    ? packageManager!\n    : DEFAULT_PACKAGE_MANAGER;\n}\n\nfunction fingerprintContent(parts: string[]): string {\n  return crypto\n    .createHash(\"sha256\")\n    .update(parts.join(\"\\n---\\n\"))\n    .digest(\"hex\");\n}\n\nfunction resolvePnpmInstallInvocation(installArgs: readonly string[]): {\n  command: string;\n  args: string[];\n} {\n  const corepackPath = path.join(path.dirname(process.execPath), \"corepack\");\n  if (existsSync(corepackPath)) {\n    return { command: corepackPath, args: [\"pnpm\", ...installArgs] };\n  }\n  return { command: \"pnpm\", args: [...installArgs] };\n}\n\nasync function runPackageManagerCommand(\n  projectRoot: string,\n  command: { args: string[] },\n): Promise<void> {\n  const invocation = resolvePnpmInstallInvocation(command.args);\n  await runLockfileCommand(projectRoot, {\n    binary: invocation.command,\n    args: invocation.args,\n  });\n}\n\nasync function runLockfileCommand(\n  projectRoot: string,\n  command: LockfileCommand,\n): Promise<void> {\n  await new Promise<void>((resolve, reject) => {\n    const child = spawn(command.binary, command.args, {\n      cwd: projectRoot,\n      env: process.env,\n      stdio: [\"ignore\", \"pipe\", \"pipe\"],\n    });\n\n    let stdout = \"\";\n    let stderr = \"\";\n\n    bindStream(child.stdout, (chunk) => {\n      stdout += chunk.toString();\n    });\n    bindStream(child.stderr, (chunk) => {\n      stderr += chunk.toString();\n    });\n\n    child.on(\"error\", (cause) => {\n      reject(\n        new LockfileGenerationError(command.binary, {\n          stdout,\n          stderr,\n          cause,\n        }),\n      );\n    });\n    child.on(\"close\", (code) => {\n      if (code === 0) {\n        resolve();\n        return;\n      }\n      reject(\n        new LockfileGenerationError(command.binary, {\n          code,\n          stdout,\n          stderr,\n        }),\n      );\n    });\n  });\n}\n\nfunction buildLockfileGenerationErrorMessage(\n  binary: string,\n  details: {\n    code?: number | null;\n    stdout: string;\n    stderr: string;\n    cause?: Error;\n  },\n): string {\n  if (details.cause) {\n    const errnoError = details.cause as NodeJS.ErrnoException;\n    const binaryName = path.basename(binary).toLowerCase();\n    if (\n      errnoError.code === \"ENOENT\" &&\n      (binaryName === \"pnpm\" ||\n        binaryName === \"pnpm.cmd\" ||\n        binaryName === \"corepack\" ||\n        binaryName === \"corepack.exe\")\n    ) {\n      return buildMissingDependencyToolingMessage();\n    }\n    return `Failed to start ${binary} for Dreamboard dependency reconciliation. ${details.cause.message}`;\n  }\n\n  const output = [details.stdout.trim(), details.stderr.trim()]\n    .filter((chunk) => chunk.length > 0)\n    .join(\"\\n\");\n\n  return buildDependencyPreparationFailureMessage({\n    exitCode: details.code,\n    output,\n  });\n}\n\nasync function pathExists(targetPath: string): Promise<boolean> {\n  try {\n    await lstat(targetPath);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nasync function readJsonFile<T>(filePath: string): Promise<T | null> {\n  try {\n    return JSON.parse(await readFile(filePath, \"utf8\")) as T;\n  } catch {\n    return null;\n  }\n}\n\nasync function writeJsonFile(filePath: string, value: unknown): Promise<void> {\n  await writeFile(filePath, `${JSON.stringify(value, null, 2)}\\n`, \"utf8\");\n}\n\nfunction bindStream(\n  stream: Readable | EventEmitter | null | undefined,\n  onData: (chunk: Buffer | string) => void,\n): void {\n  stream?.on(\"data\", onData);\n}\n","import { DEFAULT_WEB_BASE_URL } from \"../../constants.js\";\n\nexport const DEPENDENCY_SETUP_DOCS_PATH = \"/docs/reference/dependency-setup\";\nexport const DEPENDENCY_SETUP_DOCS_URL = `${DEFAULT_WEB_BASE_URL}${DEPENDENCY_SETUP_DOCS_PATH}`;\n\nexport function buildMissingDependencyToolingMessage(): string {\n  return [\n    \"Dreamboard needs dependency tooling to finish `dreamboard sync`.\",\n    \"Use Node 24+ with Corepack enabled, then run `dreamboard sync` again.\",\n    \"If Corepack is unavailable on this machine, install pnpm globally with `npm install -g pnpm`.\",\n    `Help: ${DEPENDENCY_SETUP_DOCS_URL}`,\n  ].join(\"\\n\");\n}\n\nexport function buildPackageLockConflictMessage(): string {\n  return [\n    \"Dreamboard manages workspace dependencies during `dreamboard sync`.\",\n    \"This workspace has an npm lockfile that conflicts with Dreamboard-managed dependencies.\",\n    \"Remove `package-lock.json` and run `dreamboard sync` again.\",\n    `Help: ${DEPENDENCY_SETUP_DOCS_URL}`,\n  ].join(\"\\n\");\n}\n\nexport function buildMissingGeneratedLockfileMessage(): string {\n  return [\n    \"Dreamboard could not finish preparing workspace dependencies during `dreamboard sync`.\",\n    \"Diagnostic: `pnpm-lock.yaml` was not created.\",\n    `Help: ${DEPENDENCY_SETUP_DOCS_URL}`,\n  ].join(\"\\n\");\n}\n\nexport function buildDependencyPreparationFailureMessage(options: {\n  output?: string;\n  exitCode?: number | null;\n}): string {\n  const details = options.output?.trim();\n  return [\n    `Dreamboard could not finish preparing workspace dependencies during \\`dreamboard sync\\`${options.exitCode != null ? ` (exit code ${options.exitCode})` : \"\"}.`,\n    details ? `Diagnostic output:\\n${details}` : null,\n    `Help: ${DEPENDENCY_SETUP_DOCS_URL}`,\n  ]\n    .filter(Boolean)\n    .join(\"\\n\");\n}\n"],"mappings":";;;;;;;;;AAAA,OAAO,YAAY;AACnB,SAAS,aAAa;AACtB,OAA6B;AAC7B,SAAS,kBAAkB;AAC3B,SAAS,OAAO,OAAO,UAAU,IAAI,iBAAiB;AACtD,OAAO,UAAU;AAEjB,SAAS,qBAAqB;;;ACLvB,IAAM,6BAA6B;AACnC,IAAM,4BAA4B,GAAG,oBAAoB,GAAG,0BAA0B;AAEtF,SAAS,uCAA+C;AAC7D,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS,yBAAyB;AAAA,EACpC,EAAE,KAAK,IAAI;AACb;AAEO,SAAS,kCAA0C;AACxD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS,yBAAyB;AAAA,EACpC,EAAE,KAAK,IAAI;AACb;AAEO,SAAS,uCAA+C;AAC7D,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,SAAS,yBAAyB;AAAA,EACpC,EAAE,KAAK,IAAI;AACb;AAEO,SAAS,yCAAyC,SAG9C;AACT,QAAM,UAAU,QAAQ,QAAQ,KAAK;AACrC,SAAO;AAAA,IACL,0FAA0F,QAAQ,YAAY,OAAO,eAAe,QAAQ,QAAQ,MAAM,EAAE;AAAA,IAC5J,UAAU;AAAA,EAAuB,OAAO,KAAK;AAAA,IAC7C,SAAS,yBAAyB;AAAA,EACpC,EACG,OAAO,OAAO,EACd,KAAK,IAAI;AACd;;;ADGA,IAAM,aAAa,KAAK,QAAQ,cAAc,YAAY,GAAG,CAAC;AAC9D,IAAM,WAAW,KAAK,QAAQ,YAAY,UAAU;AACpD,IAAM,YAAY,KAAK,QAAQ,UAAU,OAAO;AAChD,IAAM,yBAAyB,KAAK,KAAK,WAAW,cAAc;AAClE,IAAM,0BAA0B;AAChC,IAAM,mBAAmB;AACzB,IAAM,0BAA0B;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACA,IAAM,4CAA4C;AAAA,EAChD;AAAA,EACA;AACF;AAEA,IAAM,0BAAN,cAAsC,MAAM;AAAA,EAC1C,YACW,QACA,SAMT;AACA,UAAM,oCAAoC,QAAQ,OAAO,GAAG;AAAA,MAC1D,OAAO,QAAQ;AAAA,IACjB,CAAC;AAVQ;AACA;AAUT,SAAK,OAAO;AAAA,EACd;AAAA,EAZW;AAAA,EACA;AAYb;AAEA,eAAsB,qBACpB,aACA,WAAsC,CAAC,GACrB;AAClB,QAAM,+BAA+B,WAAW;AAChD,QAAM,4BAA4B,WAAW;AAC7C,QAAM,yBAAyB,aAAa;AAAA,IAC1C,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF,CAAC;AACD,QAAM,0BAA0B,WAAW;AAC3C,SAAO;AACT;AAEA,eAAsB,6BACpB,aACA,WAAsC,CAAC,GACrB;AAClB,QAAM,SAAS,MAAM,+BAA+B,WAAW;AAC/D,SAAO,OAAO;AAChB;AAEA,eAAsB,+BACpB,aACkD;AAClD,QAAM,kBAAkB,KAAK,KAAK,aAAa,cAAc;AAC7D,MAAI,CAAE,MAAM,WAAW,eAAe,GAAI;AACxC,WAAO;AAAA,MACL,UAAU;AAAA,MACV,WAAW;AAAA,MACX,mBAAmB;AAAA,MACnB,0BAA0B;AAAA,MAC1B,aAAa;AAAA,IACf;AAAA,EACF;AAEA,QAAM,4BAA4B,WAAW;AAC7C,QAAM,2BACJ,MAAM,+BAA+B,WAAW;AAClD,QAAM,mBAAmB,KAAK,KAAK,aAAa,gBAAgB;AAChE,QAAM,kBAAkB,KAAK,KAAK,aAAa,cAAc;AAC7D,QAAM,eAAe,KAAK;AAAA,IACxB;AAAA,IACA,GAAG;AAAA,EACL;AAEA,MAAI,oBAAoB;AACxB,MAAI,YAAY;AAChB,QAAM,WAAW,MAAM,aAAwC,YAAY;AAC3E,QAAM,iBAAiB,MAAM,WAAW,gBAAgB;AAExD,MAAI,CAAC,gBAAgB;AACnB,UAAM,yBAAyB,aAAa;AAAA,MAC1C,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF,CAAC;AACD,wBAAoB;AACpB,gBAAY;AAAA,EACd;AAEA,QAAM,0BAA0B,WAAW;AAC3C,MAAI,cAAc,MAAM,2BAA2B;AAAA,IACjD;AAAA,IACA,cAAc;AAAA,EAChB,CAAC;AACD,QAAM,wBACH,MAAM,WAAW,eAAe,KAChC,MAAM,8BAA8B;AAAA,IACnC;AAAA,IACA;AAAA,EACF,CAAC;AACH,QAAM,gBACJ,CAAC,cACA,UAAU,0BAA0B,eAAe,CAAC;AAEvD,MAAI,eAAe;AACjB,UAAM,GAAG,iBAAiB,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAC1D,UAAM,yBAAyB,aAAa;AAAA,MAC1C,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF,CAAC;AACD,gBAAY;AACZ,kBAAc,MAAM,2BAA2B;AAAA,MAC7C;AAAA,MACA,cAAc;AAAA,IAChB,CAAC;AAAA,EACH;AAEA,MAAI,aAAa,4BAA4B,CAAC,UAAU;AACtD,UAAM,MAAM,KAAK,QAAQ,YAAY,GAAG,EAAE,WAAW,KAAK,CAAC;AAC3D,UAAM,cAAc,cAAc;AAAA,MAChC,uBAAuB;AAAA,MACvB,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,gBAAgB,MAAM,uBAAuB;AAAA,IAC/C,CAAqC;AAAA,EACvC;AAEA,SAAO;AAAA,IACL,UAAU;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAe,4BAA4B,aAAoC;AAC7E,QAAM,kBAAkB,KAAK,KAAK,aAAa,mBAAmB;AAClE,QAAM,eAAe,KAAK,KAAK,aAAa,gBAAgB;AAC5D,MACG,MAAM,WAAW,eAAe,KACjC,CAAE,MAAM,WAAW,YAAY,GAC/B;AACA,UAAM,IAAI,MAAM,gCAAgC,CAAC;AAAA,EACnD;AACF;AAEA,eAAe,0BAA0B,aAAoC;AAC3E,QAAM,mBAAmB,KAAK,KAAK,aAAa,gBAAgB;AAChE,MAAI,CAAE,MAAM,WAAW,gBAAgB,GAAI;AACzC,UAAM,IAAI,MAAM,qCAAqC,CAAC;AAAA,EACxD;AACF;AAEA,eAAe,+BACb,aACkB;AAClB,QAAM,kBAAkB,KAAK,KAAK,aAAa,cAAc;AAC7D,QAAM,qBAAqB,MAAM,SAAS,iBAAiB,MAAM;AACjE,QAAM,cAAc,KAAK,MAAM,kBAAkB;AACjD,QAAM,iBAAiB,MAAM,uBAAuB;AACpD,QAAM,kBAAoC;AAAA,IACxC,GAAG;AAAA,IACH;AAAA,IACA,MAAM,gBAAgB,YAAY,IAAI;AAAA,EACxC;AACA,QAAM,wBAAwB,GAAG,KAAK,UAAU,iBAAiB,MAAM,CAAC,CAAC;AAAA;AACzE,MAAI,0BAA0B,oBAAoB;AAChD,WAAO;AAAA,EACT;AACA,QAAM,UAAU,iBAAiB,uBAAuB,MAAM;AAC9D,SAAO;AACT;AAEA,SAAS,gBACP,cACyB;AACzB,QAAM,oBACJ,cAAc,aACd,OAAO,aAAa,cAAc,YAClC,CAAC,MAAM,QAAQ,aAAa,SAAS,IAChC,aAAa,YACd,CAAC;AACP,SAAO;AAAA,IACL,GAAI,gBAAgB,CAAC;AAAA,IACrB,WAAW;AAAA,MACT,GAAG;AAAA,MACH,GAAG;AAAA,IACL;AAAA,EACF;AACF;AAEA,eAAe,2BAA2B,SAGtB;AAClB,QAAM,cAAc,MAAM,SAAS,QAAQ,iBAAiB,MAAM;AAClE,QAAM,WAAW,MAAM,SAAS,QAAQ,cAAc,MAAM;AAC5D,QAAM,iBAAiB,MAAM,uBAAuB;AACpD,SAAO,mBAAmB;AAAA,IACxB;AAAA,IACA;AAAA,IACA,kBAAkB,cAAc;AAAA,EAClC,CAAC;AACH;AAEA,eAAe,8BAA8B,SAGxB;AACnB,QAAM,cAAc,MAAM;AAAA,IACxB,QAAQ;AAAA,EACV;AACA,MAAI,CAAC,aAAa;AAChB,WAAO;AAAA,EACT;AAEA,QAAM,wBAAwB,oBAAI,IAAY;AAC9C,aAAW,SAAS;AAAA,IAClB;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAAY;AACV,eAAW,eAAe,OAAO,KAAK,YAAY,KAAK,KAAK,CAAC,CAAC,GAAG;AAC/D,4BAAsB,IAAI,WAAW;AAAA,IACvC;AAAA,EACF;AAEA,MAAI,sBAAsB,SAAS,GAAG;AACpC,WAAO;AAAA,EACT;AAEA,aAAW,eAAe,uBAAuB;AAC/C,UAAM,cAAc,KAAK;AAAA,MACvB,QAAQ;AAAA,MACR,GAAG,YAAY,MAAM,GAAG;AAAA,IAC1B;AACA,QAAI,CAAE,MAAM,WAAW,KAAK,KAAK,aAAa,cAAc,CAAC,GAAI;AAC/D,aAAO;AAAA,IACT;AACA,QACE,gBAAgB,oBAChB,CAAE,MAAM,yBAAyB,WAAW,GAC5C;AACA,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AACT;AAEA,eAAe,yBAAyB,aAAuC;AAC7E,aAAW,gBAAgB,yBAAyB;AAClD,QAAI,CAAE,MAAM,WAAW,KAAK,KAAK,aAAa,YAAY,CAAC,GAAI;AAC7D,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,OAAyB;AACpD,SAAO,8CAA8C,KAAK,SAAS,EAAE;AACvE;AAEA,eAAe,yBAA0C;AACvD,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,EACF;AACA,QAAM,iBAAiB,aAAa,gBAAgB,KAAK;AACzD,SAAO,oBAAoB,cAAc,IACrC,iBACA;AACN;AAEA,SAAS,mBAAmB,OAAyB;AACnD,SAAO,OACJ,WAAW,QAAQ,EACnB,OAAO,MAAM,KAAK,SAAS,CAAC,EAC5B,OAAO,KAAK;AACjB;AAEA,SAAS,6BAA6B,aAGpC;AACA,QAAM,eAAe,KAAK,KAAK,KAAK,QAAQ,QAAQ,QAAQ,GAAG,UAAU;AACzE,MAAI,WAAW,YAAY,GAAG;AAC5B,WAAO,EAAE,SAAS,cAAc,MAAM,CAAC,QAAQ,GAAG,WAAW,EAAE;AAAA,EACjE;AACA,SAAO,EAAE,SAAS,QAAQ,MAAM,CAAC,GAAG,WAAW,EAAE;AACnD;AAEA,eAAe,yBACb,aACA,SACe;AACf,QAAM,aAAa,6BAA6B,QAAQ,IAAI;AAC5D,QAAM,mBAAmB,aAAa;AAAA,IACpC,QAAQ,WAAW;AAAA,IACnB,MAAM,WAAW;AAAA,EACnB,CAAC;AACH;AAEA,eAAe,mBACb,aACA,SACe;AACf,QAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,UAAM,QAAQ,MAAM,QAAQ,QAAQ,QAAQ,MAAM;AAAA,MAChD,KAAK;AAAA,MACL,KAAK,QAAQ;AAAA,MACb,OAAO,CAAC,UAAU,QAAQ,MAAM;AAAA,IAClC,CAAC;AAED,QAAI,SAAS;AACb,QAAI,SAAS;AAEb,eAAW,MAAM,QAAQ,CAAC,UAAU;AAClC,gBAAU,MAAM,SAAS;AAAA,IAC3B,CAAC;AACD,eAAW,MAAM,QAAQ,CAAC,UAAU;AAClC,gBAAU,MAAM,SAAS;AAAA,IAC3B,CAAC;AAED,UAAM,GAAG,SAAS,CAAC,UAAU;AAC3B;AAAA,QACE,IAAI,wBAAwB,QAAQ,QAAQ;AAAA,UAC1C;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AACD,UAAM,GAAG,SAAS,CAAC,SAAS;AAC1B,UAAI,SAAS,GAAG;AACd,gBAAQ;AACR;AAAA,MACF;AACA;AAAA,QACE,IAAI,wBAAwB,QAAQ,QAAQ;AAAA,UAC1C;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AACH;AAEA,SAAS,oCACP,QACA,SAMQ;AACR,MAAI,QAAQ,OAAO;AACjB,UAAM,aAAa,QAAQ;AAC3B,UAAM,aAAa,KAAK,SAAS,MAAM,EAAE,YAAY;AACrD,QACE,WAAW,SAAS,aACnB,eAAe,UACd,eAAe,cACf,eAAe,cACf,eAAe,iBACjB;AACA,aAAO,qCAAqC;AAAA,IAC9C;AACA,WAAO,mBAAmB,MAAM,8CAA8C,QAAQ,MAAM,OAAO;AAAA,EACrG;AAEA,QAAM,SAAS,CAAC,QAAQ,OAAO,KAAK,GAAG,QAAQ,OAAO,KAAK,CAAC,EACzD,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC,EAClC,KAAK,IAAI;AAEZ,SAAO,yCAAyC;AAAA,IAC9C,UAAU,QAAQ;AAAA,IAClB;AAAA,EACF,CAAC;AACH;AAEA,eAAe,WAAW,YAAsC;AAC9D,MAAI;AACF,UAAM,MAAM,UAAU;AACtB,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,aAAgB,UAAqC;AAClE,MAAI;AACF,WAAO,KAAK,MAAM,MAAM,SAAS,UAAU,MAAM,CAAC;AAAA,EACpD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,cAAc,UAAkB,OAA+B;AAC5E,QAAM,UAAU,UAAU,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,GAAM,MAAM;AACzE;AAEA,SAAS,WACP,QACA,QACM;AACN,UAAQ,GAAG,QAAQ,MAAM;AAC3B;","names":[]}

package/dist/agent-verifier/{chunk-MINCYHXN.mjs → chunk-TAEQKBJB.mjs}

@@ -104,3 +104,4 @@ export {
   atomicWriteFile,
   withFileLock
 };
+//# sourceMappingURL=chunk-TAEQKBJB.mjs.map

package/dist/agent-verifier/chunk-TAEQKBJB.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utils/atomic-file.ts"],"sourcesContent":["/**\n * Primitives for safely mutating local state files owned by the CLI.\n *\n * Two guarantees:\n * - Writes are atomic-ish: we stage the payload in a sibling temp file with\n *   the target permissions, fsync the contents, then `rename` over the target.\n *   On POSIX `rename` within the same directory is atomic; on Windows it is\n *   atomic within the same volume which is always the case for files we write\n *   inside `~/.dreamboard`.\n * - We refuse to clobber a file with an empty payload. The original bug that\n *   wiped refresh tokens on a failing `sync`/`compile` hinged on `undefined`\n *   JSON values being persisted and reloaded as `{}`. Forbidding empty\n *   writes here removes that entire failure mode at the primitive level.\n *\n * Additionally, `withFileLock` provides a cross-process advisory lock built on\n * `O_CREAT | O_EXCL` so that parallel CLI invocations (e.g. `dreamboard sync`\n * running while `dreamboard compile` is in flight) serialize around mutations\n * of the same credential state.\n */\n\nimport { constants as fsConstants, promises as fs, type Stats } from \"node:fs\";\nimport path from \"node:path\";\nimport crypto from \"node:crypto\";\n\nexport type AtomicWriteOptions = {\n  /** File mode applied to the written file (default: 0o600). */\n  mode?: number;\n  /** Call `fsync` on the temp file before renaming. Default: true. */\n  fsync?: boolean;\n};\n\nexport async function atomicWriteFile(\n  targetPath: string,\n  contents: string,\n  options: AtomicWriteOptions = {},\n): Promise<void> {\n  if (contents.length === 0) {\n    throw new Error(\n      `Refusing to atomicWriteFile an empty payload to ${targetPath}`,\n    );\n  }\n  const mode = options.mode ?? 0o600;\n  const shouldFsync = options.fsync ?? true;\n  const dir = path.dirname(targetPath);\n  await fs.mkdir(dir, { recursive: true });\n\n  const suffix = crypto.randomBytes(6).toString(\"hex\");\n  const tmpPath = `${targetPath}.tmp-${process.pid}-${suffix}`;\n\n  const fh = await fs.open(\n    tmpPath,\n    fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL,\n    mode,\n  );\n  try {\n    await fh.writeFile(contents, \"utf8\");\n    try {\n      await fh.chmod(mode);\n    } catch {\n      // Some filesystems (e.g. network volumes, Windows) refuse chmod.\n      // Ignoring here is safe: the `open` call above already created the\n      // file with the requested mode on systems that honor it.\n    }\n    if (shouldFsync) {\n      try {\n        await fh.sync();\n      } catch {\n        // Best-effort. Not all backends (tmpfs on some platforms) support fsync.\n      }\n    }\n  } finally {\n    await fh.close();\n  }\n\n  try {\n    await fs.rename(tmpPath, targetPath);\n  } catch (err) {\n    await fs.unlink(tmpPath).catch(() => undefined);\n    throw err;\n  }\n}\n\nexport type FileLockOptions = {\n  /** Max number of acquisition attempts before giving up. Default: 100. */\n  retries?: number;\n  /** Minimum backoff between retries in ms. Default: 20. */\n  minDelayMs?: number;\n  /** Maximum backoff between retries in ms. Default: 200. */\n  maxDelayMs?: number;\n  /**\n   * A lockfile older than this is considered stale and forcibly removed.\n   * Guards against crashed processes leaving a permanent lock. Default: 30s.\n   */\n  staleMs?: number;\n};\n\nexport async function withFileLock<T>(\n  lockPath: string,\n  fn: () => Promise<T>,\n  options: FileLockOptions = {},\n): Promise<T> {\n  const retries = options.retries ?? 100;\n  const minDelayMs = options.minDelayMs ?? 20;\n  const maxDelayMs = options.maxDelayMs ?? 200;\n  const staleMs = options.staleMs ?? 30_000;\n\n  await fs.mkdir(path.dirname(lockPath), { recursive: true });\n\n  let attempt = 0;\n  let acquired = false;\n  while (!acquired) {\n    try {\n      const fh = await fs.open(\n        lockPath,\n        fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL,\n        0o600,\n      );\n      await fh.writeFile(`${process.pid}\\n`, \"utf8\");\n      await fh.close();\n      acquired = true;\n      break;\n    } catch (err) {\n      const code = (err as NodeJS.ErrnoException).code;\n      if (code !== \"EEXIST\") {\n        throw err;\n      }\n    }\n\n    let stat: Stats | null = null;\n    try {\n      stat = await fs.stat(lockPath);\n    } catch {\n      continue;\n    }\n    if (stat !== null) {\n      const ageMs = Date.now() - stat.mtimeMs;\n      if (ageMs > staleMs) {\n        await fs.unlink(lockPath).catch(() => undefined);\n        continue;\n      }\n    }\n\n    attempt += 1;\n    if (attempt >= retries) {\n      throw new Error(\n        `Timed out acquiring file lock at ${lockPath} after ${retries} attempts.`,\n      );\n    }\n    const jitter = Math.floor(\n      Math.random() * Math.max(1, maxDelayMs - minDelayMs),\n    );\n    await new Promise((resolve) => setTimeout(resolve, minDelayMs + jitter));\n  }\n\n  try {\n    return await fn();\n  } finally {\n    await fs.unlink(lockPath).catch(() => undefined);\n  }\n}\n"],"mappings":";;;AAoBA,SAAS,aAAa,aAAa,YAAY,UAAsB;AACrE,OAAO,UAAU;AACjB,OAAO,YAAY;AASnB,eAAsB,gBACpB,YACA,UACA,UAA8B,CAAC,GAChB;AACf,MAAI,SAAS,WAAW,GAAG;AACzB,UAAM,IAAI;AAAA,MACR,mDAAmD,UAAU;AAAA,IAC/D;AAAA,EACF;AACA,QAAM,OAAO,QAAQ,QAAQ;AAC7B,QAAM,cAAc,QAAQ,SAAS;AACrC,QAAM,MAAM,KAAK,QAAQ,UAAU;AACnC,QAAM,GAAG,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;AAEvC,QAAM,SAAS,OAAO,YAAY,CAAC,EAAE,SAAS,KAAK;AACnD,QAAM,UAAU,GAAG,UAAU,QAAQ,QAAQ,GAAG,IAAI,MAAM;AAE1D,QAAM,KAAK,MAAM,GAAG;AAAA,IAClB;AAAA,IACA,YAAY,WAAW,YAAY,UAAU,YAAY;AAAA,IACzD;AAAA,EACF;AACA,MAAI;AACF,UAAM,GAAG,UAAU,UAAU,MAAM;AACnC,QAAI;AACF,YAAM,GAAG,MAAM,IAAI;AAAA,IACrB,QAAQ;AAAA,IAIR;AACA,QAAI,aAAa;AACf,UAAI;AACF,cAAM,GAAG,KAAK;AAAA,MAChB,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,UAAE;AACA,UAAM,GAAG,MAAM;AAAA,EACjB;AAEA,MAAI;AACF,UAAM,GAAG,OAAO,SAAS,UAAU;AAAA,EACrC,SAAS,KAAK;AACZ,UAAM,GAAG,OAAO,OAAO,EAAE,MAAM,MAAM,MAAS;AAC9C,UAAM;AAAA,EACR;AACF;AAgBA,eAAsB,aACpB,UACA,IACA,UAA2B,CAAC,GAChB;AACZ,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,UAAU,QAAQ,WAAW;AAEnC,QAAM,GAAG,MAAM,KAAK,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AAE1D,MAAI,UAAU;AACd,MAAI,WAAW;AACf,SAAO,CAAC,UAAU;AAChB,QAAI;AACF,YAAM,KAAK,MAAM,GAAG;AAAA,QAClB;AAAA,QACA,YAAY,WAAW,YAAY,UAAU,YAAY;AAAA,QACzD;AAAA,MACF;AACA,YAAM,GAAG,UAAU,GAAG,QAAQ,GAAG;AAAA,GAAM,MAAM;AAC7C,YAAM,GAAG,MAAM;AACf,iBAAW;AACX;AAAA,IACF,SAAS,KAAK;AACZ,YAAM,OAAQ,IAA8B;AAC5C,UAAI,SAAS,UAAU;AACrB,cAAM;AAAA,MACR;AAAA,IACF;AAEA,QAAI,OAAqB;AACzB,QAAI;AACF,aAAO,MAAM,GAAG,KAAK,QAAQ;AAAA,IAC/B,QAAQ;AACN;AAAA,IACF;AACA,QAAI,SAAS,MAAM;AACjB,YAAM,QAAQ,KAAK,IAAI,IAAI,KAAK;AAChC,UAAI,QAAQ,SAAS;AACnB,cAAM,GAAG,OAAO,QAAQ,EAAE,MAAM,MAAM,MAAS;AAC/C;AAAA,MACF;AAAA,IACF;AAEA,eAAW;AACX,QAAI,WAAW,SAAS;AACtB,YAAM,IAAI;AAAA,QACR,oCAAoC,QAAQ,UAAU,OAAO;AAAA,MAC/D;AAAA,IACF;AACA,UAAM,SAAS,KAAK;AAAA,MAClB,KAAK,OAAO,IAAI,KAAK,IAAI,GAAG,aAAa,UAAU;AAAA,IACrD;AACA,UAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,aAAa,MAAM,CAAC;AAAA,EACzE;AAEA,MAAI;AACF,WAAO,MAAM,GAAG;AAAA,EAClB,UAAE;AACA,UAAM,GAAG,OAAO,QAAQ,EAAE,MAAM,MAAM,MAAS;AAAA,EACjD;AACF;","names":[]}

package/dist/agent-verifier/{chunk-7E65UQLY.mjs → chunk-TLYGTHXU.mjs}

@@ -2,10 +2,10 @@
 import {
   ensureProjectSdk,
   loadRemoteProjectIdentity
-} from "./chunk-EOQIV6PS.mjs";
+} from "./chunk-YR664DJX.mjs";
 import {
   updateProjectState
-} from "./chunk-4WD3YU2E.mjs";
+} from "./chunk-3IJBOLGT.mjs";
 
 // src/services/project/remote-project.ts
 async function resolveRemoteProject(options) {
@@ -36,3 +36,4 @@ async function resolveRemoteProject(options) {
 export {
   resolveRemoteProject
 };
+//# sourceMappingURL=chunk-TLYGTHXU.mjs.map

package/dist/agent-verifier/chunk-TLYGTHXU.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/services/project/remote-project.ts"],"sourcesContent":["import type { Project } from \"@dreamboard-games/api-client\";\nimport { updateProjectState } from \"../../config/project-config.js\";\nimport type { ProjectConfig, ResolvedConfig } from \"../../types.js\";\nimport {\n  ensureProjectSdk,\n  loadRemoteProjectIdentity,\n  type RemoteProjectIdentity,\n} from \"../api/index.js\";\n\nexport type ResolvedRemoteProject = {\n  identity: RemoteProjectIdentity;\n  project: Project;\n  projectConfig: ProjectConfig;\n};\n\nexport async function resolveRemoteProject(options: {\n  projectRoot: string;\n  projectConfig: ProjectConfig;\n  config: Pick<ResolvedConfig, \"apiBaseUrl\" | \"webBaseUrl\">;\n  updateAlias?: boolean;\n}): Promise<ResolvedRemoteProject> {\n  const identity = await loadRemoteProjectIdentity();\n  const project = await ensureProjectSdk({\n    projectId: options.projectConfig.projectId,\n    slug: options.projectConfig.slug,\n    updateAlias: options.updateAlias,\n  });\n  const nextProjectConfig: ProjectConfig = {\n    ...options.projectConfig,\n    slug: project.slug,\n    deploymentId: identity.deploymentId,\n    ownerScopeId: identity.ownerScopeId,\n    bindingKey: identity.bindingKey,\n    remoteHeadDigest: project.head?.revisionDigest,\n    apiBaseUrl: options.config.apiBaseUrl,\n    webBaseUrl: options.config.webBaseUrl,\n  };\n\n  await updateProjectState(options.projectRoot, nextProjectConfig);\n\n  return {\n    identity,\n    project,\n    projectConfig: nextProjectConfig,\n  };\n}\n"],"mappings":";;;;;;;;;;AAeA,eAAsB,qBAAqB,SAKR;AACjC,QAAM,WAAW,MAAM,0BAA0B;AACjD,QAAM,UAAU,MAAM,iBAAiB;AAAA,IACrC,WAAW,QAAQ,cAAc;AAAA,IACjC,MAAM,QAAQ,cAAc;AAAA,IAC5B,aAAa,QAAQ;AAAA,EACvB,CAAC;AACD,QAAM,oBAAmC;AAAA,IACvC,GAAG,QAAQ;AAAA,IACX,MAAM,QAAQ;AAAA,IACd,cAAc,SAAS;AAAA,IACvB,cAAc,SAAS;AAAA,IACvB,YAAY,SAAS;AAAA,IACrB,kBAAkB,QAAQ,MAAM;AAAA,IAChC,YAAY,QAAQ,OAAO;AAAA,IAC3B,YAAY,QAAQ,OAAO;AAAA,EAC7B;AAEA,QAAM,mBAAmB,QAAQ,aAAa,iBAAiB;AAE/D,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,eAAe;AAAA,EACjB;AACF;","names":[]}

package/dist/agent-verifier/{chunk-EIQWDQWJ.mjs → chunk-UWJIZML3.mjs}

@@ -1,30 +1,28 @@
 #!/usr/bin/env node
-import {
-  hashContent,
-  materializeManifest,
-  writeManifestSource
-} from "./chunk-SYPLYRGB.mjs";
 import {
   atomicWriteFile
-} from "./chunk-MINCYHXN.mjs";
+} from "./chunk-TAEQKBJB.mjs";
 import {
+  hashContent,
   isAllowedGamePath,
-  isAuthoritativeGeneratedPath,
-  isLibraryPath
-} from "./chunk-U6OJN7XS.mjs";
+  isDynamicGeneratedPath,
+  isLibraryPath,
+  materializeManifest,
+  writeManifestSource
+} from "./chunk-6XRC5PWB.mjs";
 import {
   readJsonFile,
   readTextFile,
   readTextFileIfExists,
   writeTextFile
-} from "./chunk-LM3OZLZG.mjs";
+} from "./chunk-IAYRNVUC.mjs";
 import {
   LOCAL_IGNORE_DIRS,
   MANIFEST_FILE,
   PROJECT_DIR_NAME,
   RULE_FILE,
   SNAPSHOT_FILE
-} from "./chunk-SHUMAVAP.mjs";
+} from "./chunk-M7UVBANQ.mjs";
 
 // src/services/project/local-files.ts
 import { readdir, unlink } from "fs/promises";
@@ -119,7 +117,7 @@ async function writeSnapshotFromFiles(rootDir, files) {
   };
   for (const [filePath, content] of Object.entries(files)) {
     if (filePath.startsWith(`${PROJECT_DIR_NAME}/`)) continue;
-    if (isAuthoritativeGeneratedPath(filePath)) continue;
+    if (isDynamicGeneratedPath(filePath)) continue;
     snapshot.files[filePath] = hashContent(content);
   }
   const snapshotPath = path.join(rootDir, PROJECT_DIR_NAME, SNAPSHOT_FILE);
@@ -144,7 +142,7 @@ async function getLocalDiff(rootDir) {
   for (const [filePath, content] of Object.entries(files)) {
     if (filePath.startsWith(`${PROJECT_DIR_NAME}/`)) continue;
     if (isIgnorableLocalDiffPath(filePath)) continue;
-    if (isAuthoritativeGeneratedPath(filePath)) continue;
+    if (isDynamicGeneratedPath(filePath)) continue;
     currentHashes[filePath] = hashContent(content);
   }
   const modified = [];
@@ -160,7 +158,7 @@ async function getLocalDiff(rootDir) {
   }
   for (const filePath of Object.keys(snapshot.files)) {
     if (isIgnorableLocalDiffPath(filePath)) continue;
-    if (isAuthoritativeGeneratedPath(filePath)) continue;
+    if (isDynamicGeneratedPath(filePath)) continue;
     if (!currentHashes[filePath]) {
       deleted.push(filePath);
     }
@@ -184,3 +182,4 @@ export {
   writeSnapshotFromFiles,
   getLocalDiff
 };
+//# sourceMappingURL=chunk-UWJIZML3.mjs.map

package/dist/agent-verifier/chunk-UWJIZML3.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/services/project/local-files.ts"],"sourcesContent":["import { readdir, unlink } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport type { GameTopologyManifest } from \"@dreamboard-games/sdk/types\";\nimport {\n  PROJECT_DIR_NAME,\n  MANIFEST_FILE,\n  RULE_FILE,\n  SNAPSHOT_FILE,\n  LOCAL_IGNORE_DIRS,\n} from \"../../constants.js\";\nimport type { Snapshot } from \"../../types.js\";\nimport {\n  readJsonFile,\n  readTextFile,\n  readTextFileIfExists,\n  writeTextFile,\n} from \"../../utils/fs.js\";\nimport { atomicWriteFile } from \"../../utils/atomic-file.js\";\nimport { hashContent } from \"../../utils/crypto.js\";\nimport {\n  computeManifestHash,\n  materializeManifest,\n  writeManifestSource,\n} from \"./manifest-authoring.js\";\nimport {\n  isAllowedGamePath as isAllowedPathFromOwnership,\n  isDynamicGeneratedPath,\n  isLibraryPath as isLibraryPathFromOwnership,\n} from \"./scaffold-ownership.js\";\n\n/**\n * Returns true when a path is inside the canonical game project structure.\n * Anything outside app/, ui/, shared/, or the known root files is rejected.\n */\nexport function isAllowedGamePath(filePath: string): boolean {\n  return isAllowedPathFromOwnership(filePath);\n}\n\nexport function isLibraryPath(filePath: string): boolean {\n  return isLibraryPathFromOwnership(filePath);\n}\n\ntype WriteDecision = \"write\" | \"skip\";\n\n/**\n * Decide whether a file from the scaffold response should be written to disk.\n *\n * - Library files     → always overwrite (they are fully generated).\n * - Everything else   → only write if the file does not yet exist or is empty\n *                        locally (first-time seeding; preserves user edits).\n */\nfunction shouldWriteScaffoldFile(\n  filePath: string,\n  existingContent: string | null,\n): WriteDecision {\n  if (isLibraryPath(filePath)) return \"write\";\n  const hasContent =\n    existingContent !== null && existingContent.trim().length > 0;\n  return hasContent ? \"skip\" : \"write\";\n}\n\nexport async function writeSourceFiles(\n  rootDir: string,\n  files: Record<string, string | null>,\n): Promise<void> {\n  for (const [relativePath, content] of Object.entries(files)) {\n    if (content === null || content === undefined) continue;\n    const filePath = path.join(rootDir, relativePath);\n    await writeTextFile(filePath, content);\n  }\n}\n\nexport interface ScaffoldWriteResult {\n  written: string[];\n  skipped: string[];\n}\n\n/**\n * Write scaffold files using local-merge logic.\n *\n * - Library files are always overwritten.\n * - User-owned files (phases, components, etc.) are only written when the\n *   local file does not exist or is empty.  Files with content are skipped\n *   so user edits are never lost.\n *\n * Returns lists of files that were written (and actually changed) and files\n * that were skipped because a non-empty local copy already exists.\n */\nexport async function writeScaffoldFiles(\n  rootDir: string,\n  files: Record<string, string | null>,\n): Promise<ScaffoldWriteResult> {\n  const written: string[] = [];\n  const skipped: string[] = [];\n\n  for (const [relativePath, content] of Object.entries(files)) {\n    if (content === null || content === undefined) continue;\n\n    const fullPath = path.join(rootDir, relativePath);\n    const existingContent = await readTextFileIfExists(fullPath);\n\n    const decision = shouldWriteScaffoldFile(relativePath, existingContent);\n\n    if (decision === \"skip\") {\n      skipped.push(relativePath);\n      continue;\n    }\n\n    await writeTextFile(fullPath, content);\n\n    if (existingContent !== content) {\n      written.push(relativePath);\n    }\n  }\n\n  written.sort();\n  skipped.sort();\n  return { written, skipped };\n}\n\nexport async function removeExtraneousFiles(\n  rootDir: string,\n  keep: Set<string>,\n): Promise<void> {\n  const localFiles = await collectLocalFiles(rootDir);\n  for (const filePath of Object.keys(localFiles)) {\n    if (filePath === MANIFEST_FILE || filePath === RULE_FILE) continue;\n    if (!keep.has(filePath)) {\n      await unlink(path.join(rootDir, filePath));\n    }\n  }\n}\n\nexport async function collectLocalFiles(\n  rootDir: string,\n): Promise<Record<string, string>> {\n  const result: Record<string, string> = {};\n  await walkDir(rootDir, rootDir, result);\n  return result;\n}\n\nexport async function walkDir(\n  rootDir: string,\n  currentDir: string,\n  result: Record<string, string>,\n): Promise<void> {\n  const entries = await readdir(currentDir, { withFileTypes: true });\n  for (const entry of entries) {\n    if (entry.isDirectory()) {\n      if (LOCAL_IGNORE_DIRS.has(entry.name)) continue;\n      await walkDir(rootDir, path.join(currentDir, entry.name), result);\n    } else if (entry.isFile()) {\n      const filePath = path.join(currentDir, entry.name);\n      const relativePath = path.relative(rootDir, filePath);\n      result[relativePath] = await readTextFile(filePath);\n    }\n  }\n}\n\nexport async function writeManifest(\n  rootDir: string,\n  manifest: GameTopologyManifest,\n): Promise<void> {\n  await writeManifestSource(rootDir, manifest);\n}\n\nexport async function writeRule(\n  rootDir: string,\n  ruleText: string,\n): Promise<void> {\n  const filePath = path.join(rootDir, RULE_FILE);\n  await writeTextFile(filePath, ruleText);\n}\n\nexport async function loadManifest(\n  rootDir: string,\n): Promise<GameTopologyManifest> {\n  return materializeManifest(rootDir);\n}\n\nexport { computeManifestHash };\n\nexport async function loadRule(rootDir: string): Promise<string> {\n  const filePath = path.join(rootDir, RULE_FILE);\n  return readTextFile(filePath);\n}\n\nexport async function writeSnapshot(rootDir: string): Promise<void> {\n  const files = await collectLocalFiles(rootDir);\n  await writeSnapshotFromFiles(rootDir, files);\n}\n\nexport async function writeSnapshotFromFiles(\n  rootDir: string,\n  files: Record<string, string>,\n): Promise<void> {\n  const snapshot: Snapshot = {\n    files: {},\n  };\n\n  for (const [filePath, content] of Object.entries(files)) {\n    if (filePath.startsWith(`${PROJECT_DIR_NAME}/`)) continue;\n    if (isDynamicGeneratedPath(filePath)) continue;\n    snapshot.files[filePath] = hashContent(content);\n  }\n\n  const snapshotPath = path.join(rootDir, PROJECT_DIR_NAME, SNAPSHOT_FILE);\n  // Atomic write: a crash mid-snapshot (e.g. user kills a long `dreamboard\n  // sync`) must not leave `.dreamboard/snapshot.json` truncated, or\n  // `getLocalDiff` will silently report everything as \"added\" on the\n  // next run and force a full re-sync.\n  await atomicWriteFile(\n    snapshotPath,\n    `${JSON.stringify(snapshot, null, 2)}\\n`,\n    { mode: 0o644 },\n  );\n}\n\nfunction isIgnorableLocalDiffPath(filePath: string): boolean {\n  return (\n    filePath.startsWith(\"test/generated/\") ||\n    filePath.startsWith(\".playwright-cli/\")\n  );\n}\n\nexport async function getLocalDiff(rootDir: string): Promise<{\n  modified: string[];\n  added: string[];\n  deleted: string[];\n}> {\n  const snapshotPath = path.join(rootDir, PROJECT_DIR_NAME, SNAPSHOT_FILE);\n  const snapshot = await readJsonFile<Snapshot>(snapshotPath).catch(() => null);\n  if (!snapshot) {\n    return { modified: [], added: [], deleted: [] };\n  }\n\n  const files = await collectLocalFiles(rootDir);\n  const currentHashes: Record<string, string> = {};\n\n  for (const [filePath, content] of Object.entries(files)) {\n    if (filePath.startsWith(`${PROJECT_DIR_NAME}/`)) continue;\n    if (isIgnorableLocalDiffPath(filePath)) continue;\n    if (isDynamicGeneratedPath(filePath)) continue;\n    currentHashes[filePath] = hashContent(content);\n  }\n\n  const modified: string[] = [];\n  const added: string[] = [];\n  const deleted: string[] = [];\n\n  for (const [filePath, hash] of Object.entries(currentHashes)) {\n    const prevHash = snapshot.files[filePath];\n    if (!prevHash) {\n      added.push(filePath);\n    } else if (prevHash !== hash) {\n      modified.push(filePath);\n    }\n  }\n\n  for (const filePath of Object.keys(snapshot.files)) {\n    if (isIgnorableLocalDiffPath(filePath)) continue;\n    if (isDynamicGeneratedPath(filePath)) continue;\n    if (!currentHashes[filePath]) {\n      deleted.push(filePath);\n    }\n  }\n\n  return { modified, added, deleted };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,SAAS,cAAc;AAChC,OAAO,UAAU;AAiCV,SAASA,mBAAkB,UAA2B;AAC3D,SAAO,kBAA2B,QAAQ;AAC5C;AAEO,SAASC,eAAc,UAA2B;AACvD,SAAO,cAA2B,QAAQ;AAC5C;AAWA,SAAS,wBACP,UACA,iBACe;AACf,MAAIA,eAAc,QAAQ,EAAG,QAAO;AACpC,QAAM,aACJ,oBAAoB,QAAQ,gBAAgB,KAAK,EAAE,SAAS;AAC9D,SAAO,aAAa,SAAS;AAC/B;AAEA,eAAsB,iBACpB,SACA,OACe;AACf,aAAW,CAAC,cAAc,OAAO,KAAK,OAAO,QAAQ,KAAK,GAAG;AAC3D,QAAI,YAAY,QAAQ,YAAY,OAAW;AAC/C,UAAM,WAAW,KAAK,KAAK,SAAS,YAAY;AAChD,UAAM,cAAc,UAAU,OAAO;AAAA,EACvC;AACF;AAkBA,eAAsB,mBACpB,SACA,OAC8B;AAC9B,QAAM,UAAoB,CAAC;AAC3B,QAAM,UAAoB,CAAC;AAE3B,aAAW,CAAC,cAAc,OAAO,KAAK,OAAO,QAAQ,KAAK,GAAG;AAC3D,QAAI,YAAY,QAAQ,YAAY,OAAW;AAE/C,UAAM,WAAW,KAAK,KAAK,SAAS,YAAY;AAChD,UAAM,kBAAkB,MAAM,qBAAqB,QAAQ;AAE3D,UAAM,WAAW,wBAAwB,cAAc,eAAe;AAEtE,QAAI,aAAa,QAAQ;AACvB,cAAQ,KAAK,YAAY;AACzB;AAAA,IACF;AAEA,UAAM,cAAc,UAAU,OAAO;AAErC,QAAI,oBAAoB,SAAS;AAC/B,cAAQ,KAAK,YAAY;AAAA,IAC3B;AAAA,EACF;AAEA,UAAQ,KAAK;AACb,UAAQ,KAAK;AACb,SAAO,EAAE,SAAS,QAAQ;AAC5B;AAEA,eAAsB,sBACpB,SACA,MACe;AACf,QAAM,aAAa,MAAM,kBAAkB,OAAO;AAClD,aAAW,YAAY,OAAO,KAAK,UAAU,GAAG;AAC9C,QAAI,aAAa,iBAAiB,aAAa,UAAW;AAC1D,QAAI,CAAC,KAAK,IAAI,QAAQ,GAAG;AACvB,YAAM,OAAO,KAAK,KAAK,SAAS,QAAQ,CAAC;AAAA,IAC3C;AAAA,EACF;AACF;AAEA,eAAsB,kBACpB,SACiC;AACjC,QAAM,SAAiC,CAAC;AACxC,QAAM,QAAQ,SAAS,SAAS,MAAM;AACtC,SAAO;AACT;AAEA,eAAsB,QACpB,SACA,YACA,QACe;AACf,QAAM,UAAU,MAAM,QAAQ,YAAY,EAAE,eAAe,KAAK,CAAC;AACjE,aAAW,SAAS,SAAS;AAC3B,QAAI,MAAM,YAAY,GAAG;AACvB,UAAI,kBAAkB,IAAI,MAAM,IAAI,EAAG;AACvC,YAAM,QAAQ,SAAS,KAAK,KAAK,YAAY,MAAM,IAAI,GAAG,MAAM;AAAA,IAClE,WAAW,MAAM,OAAO,GAAG;AACzB,YAAM,WAAW,KAAK,KAAK,YAAY,MAAM,IAAI;AACjD,YAAM,eAAe,KAAK,SAAS,SAAS,QAAQ;AACpD,aAAO,YAAY,IAAI,MAAM,aAAa,QAAQ;AAAA,IACpD;AAAA,EACF;AACF;AAEA,eAAsB,cACpB,SACA,UACe;AACf,QAAM,oBAAoB,SAAS,QAAQ;AAC7C;AAEA,eAAsB,UACpB,SACA,UACe;AACf,QAAM,WAAW,KAAK,KAAK,SAAS,SAAS;AAC7C,QAAM,cAAc,UAAU,QAAQ;AACxC;AAEA,eAAsB,aACpB,SAC+B;AAC/B,SAAO,oBAAoB,OAAO;AACpC;AAIA,eAAsB,SAAS,SAAkC;AAC/D,QAAM,WAAW,KAAK,KAAK,SAAS,SAAS;AAC7C,SAAO,aAAa,QAAQ;AAC9B;AAEA,eAAsB,cAAc,SAAgC;AAClE,QAAM,QAAQ,MAAM,kBAAkB,OAAO;AAC7C,QAAM,uBAAuB,SAAS,KAAK;AAC7C;AAEA,eAAsB,uBACpB,SACA,OACe;AACf,QAAM,WAAqB;AAAA,IACzB,OAAO,CAAC;AAAA,EACV;AAEA,aAAW,CAAC,UAAU,OAAO,KAAK,OAAO,QAAQ,KAAK,GAAG;AACvD,QAAI,SAAS,WAAW,GAAG,gBAAgB,GAAG,EAAG;AACjD,QAAI,uBAAuB,QAAQ,EAAG;AACtC,aAAS,MAAM,QAAQ,IAAI,YAAY,OAAO;AAAA,EAChD;AAEA,QAAM,eAAe,KAAK,KAAK,SAAS,kBAAkB,aAAa;AAKvE,QAAM;AAAA,IACJ;AAAA,IACA,GAAG,KAAK,UAAU,UAAU,MAAM,CAAC,CAAC;AAAA;AAAA,IACpC,EAAE,MAAM,IAAM;AAAA,EAChB;AACF;AAEA,SAAS,yBAAyB,UAA2B;AAC3D,SACE,SAAS,WAAW,iBAAiB,KACrC,SAAS,WAAW,kBAAkB;AAE1C;AAEA,eAAsB,aAAa,SAIhC;AACD,QAAM,eAAe,KAAK,KAAK,SAAS,kBAAkB,aAAa;AACvE,QAAM,WAAW,MAAM,aAAuB,YAAY,EAAE,MAAM,MAAM,IAAI;AAC5E,MAAI,CAAC,UAAU;AACb,WAAO,EAAE,UAAU,CAAC,GAAG,OAAO,CAAC,GAAG,SAAS,CAAC,EAAE;AAAA,EAChD;AAEA,QAAM,QAAQ,MAAM,kBAAkB,OAAO;AAC7C,QAAM,gBAAwC,CAAC;AAE/C,aAAW,CAAC,UAAU,OAAO,KAAK,OAAO,QAAQ,KAAK,GAAG;AACvD,QAAI,SAAS,WAAW,GAAG,gBAAgB,GAAG,EAAG;AACjD,QAAI,yBAAyB,QAAQ,EAAG;AACxC,QAAI,uBAAuB,QAAQ,EAAG;AACtC,kBAAc,QAAQ,IAAI,YAAY,OAAO;AAAA,EAC/C;AAEA,QAAM,WAAqB,CAAC;AAC5B,QAAM,QAAkB,CAAC;AACzB,QAAM,UAAoB,CAAC;AAE3B,aAAW,CAAC,UAAU,IAAI,KAAK,OAAO,QAAQ,aAAa,GAAG;AAC5D,UAAM,WAAW,SAAS,MAAM,QAAQ;AACxC,QAAI,CAAC,UAAU;AACb,YAAM,KAAK,QAAQ;AAAA,IACrB,WAAW,aAAa,MAAM;AAC5B,eAAS,KAAK,QAAQ;AAAA,IACxB;AAAA,EACF;AAEA,aAAW,YAAY,OAAO,KAAK,SAAS,KAAK,GAAG;AAClD,QAAI,yBAAyB,QAAQ,EAAG;AACxC,QAAI,uBAAuB,QAAQ,EAAG;AACtC,QAAI,CAAC,cAAc,QAAQ,GAAG;AAC5B,cAAQ,KAAK,QAAQ;AAAA,IACvB;AAAA,EACF;AAEA,SAAO,EAAE,UAAU,OAAO,QAAQ;AACpC;","names":["isAllowedGamePath","isLibraryPath"]}

package/dist/agent-verifier/{chunk-CJEEA6NJ.mjs → chunk-VLOIZDR6.mjs}

@@ -1,20 +1,17 @@
 #!/usr/bin/env node
 import {
   REDUCER_TESTING_TYPES_WRAPPER_CONTENT
-} from "./chunk-2GBBP27W.mjs";
+} from "./chunk-F2DIOJJZ.mjs";
 import {
-  IS_PUBLISHED_BUILD,
-  loadProjectConfig
-} from "./chunk-4WD3YU2E.mjs";
+  IS_PUBLISHED_BUILD
+} from "./chunk-KK47X7RV.mjs";
 import {
+  isDynamicSeedPath,
   materializeManifest
-} from "./chunk-SYPLYRGB.mjs";
+} from "./chunk-6XRC5PWB.mjs";
 import {
   resolveCliRepoRoot
-} from "./chunk-6UUJEYDV.mjs";
-import {
-  isDynamicSeedPath
-} from "./chunk-U6OJN7XS.mjs";
+} from "./chunk-QBAF7EYR.mjs";
 import {
   ensureDir,
   exists,
@@ -22,17 +19,15 @@ import {
   readTextFile,
   readTextFileIfExists,
   writeTextFile
-} from "./chunk-LM3OZLZG.mjs";
+} from "./chunk-IAYRNVUC.mjs";
 import {
   FRAMEWORK_PNPM_OVERRIDES,
   FRAMEWORK_REACT_DEPENDENCIES,
   FRAMEWORK_ZOD_VERSION
-} from "./chunk-RBDDIIPM.mjs";
+} from "./chunk-ZEELHSY3.mjs";
 import {
-  MANIFEST_TYPECHECK_CONFIG_FILE,
-  PROJECT_CONFIG_FILE,
-  PROJECT_DIR_NAME
-} from "./chunk-SHUMAVAP.mjs";
+  MANIFEST_TYPECHECK_CONFIG_FILE
+} from "./chunk-M7UVBANQ.mjs";
 
 // src/services/project/static-scaffold.ts
 import { existsSync, readFileSync } from "fs";
@@ -528,24 +523,12 @@ async function getDynamicStaticEntries(projectRoot, mode, options = {}) {
   }
   return entries;
 }
-async function readProjectLocalMaintainerRegistry(projectRoot) {
-  const projectConfigPath = path.join(
-    projectRoot,
-    PROJECT_DIR_NAME,
-    PROJECT_CONFIG_FILE
-  );
-  if (!await exists(projectConfigPath)) {
-    return null;
-  }
-  const projectConfig = await loadProjectConfig(projectRoot);
-  return projectConfig.localMaintainerRegistry ?? null;
-}
 async function getExpectedStaticEntries(projectRoot) {
   const entries = [
-    ...await getStaticAssetEntries(),
-    ...await getDynamicStaticEntries(projectRoot, "update", {
-      localMaintainerRegistry: await readProjectLocalMaintainerRegistry(projectRoot)
-    })
+    ...(await getStaticAssetEntries()).filter(
+      (entry) => entry.targetPath !== ".npmrc"
+    ),
+    ...await getDynamicStaticEntries(projectRoot, "update")
   ];
   entries.sort(
     (left, right) => left.targetPath.localeCompare(right.targetPath)
@@ -728,3 +711,4 @@ export {
   resolveStaticAssetRoot,
   resolveSdkDependencyRange
 };
+//# sourceMappingURL=chunk-VLOIZDR6.mjs.map

package/dist/agent-verifier/chunk-VLOIZDR6.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/services/project/static-scaffold.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { readdir, readFile, rm, rmdir, unlink } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport type { GameTopologyManifest } from \"@dreamboard-games/sdk/types\";\nimport { IS_PUBLISHED_BUILD } from \"../../build-target.js\";\nimport { REDUCER_TESTING_TYPES_WRAPPER_CONTENT } from \"../../templates/testing-types-content.js\";\nimport {\n  MANIFEST_TYPECHECK_CONFIG_FILE,\n  PROJECT_CONFIG_FILE,\n  PROJECT_DIR_NAME,\n} from \"../../constants.js\";\nimport type { LocalMaintainerRegistryConfig } from \"../../types.js\";\nimport {\n  ensureDir,\n  exists,\n  readJsonFile,\n  readTextFile,\n  readTextFileIfExists,\n  writeTextFile,\n} from \"../../utils/fs.js\";\nimport { resolveCliRepoRoot } from \"../../utils/repo-root.js\";\nimport { materializeManifest } from \"./manifest-authoring.js\";\nimport { isDynamicSeedPath } from \"./scaffold-ownership.js\";\nimport {\n  FRAMEWORK_PNPM_OVERRIDES,\n  FRAMEWORK_REACT_DEPENDENCIES,\n  FRAMEWORK_ZOD_VERSION,\n} from \"./framework-dependencies.js\";\n\ntype StaticScaffoldMode = \"new\" | \"update\";\ntype StaticAssetEntry = {\n  targetPath: string;\n  content: string;\n};\ntype StaticScaffoldOptions = {\n  localMaintainerRegistry?: LocalMaintainerRegistryConfig | null;\n};\ntype RootPackageJsonShape = {\n  private?: boolean;\n  packageManager?: string;\n  scripts?: Record<string, string>;\n  dependencies?: Record<string, string>;\n  devDependencies?: Record<string, string>;\n  optionalDependencies?: Record<string, string>;\n  peerDependencies?: Record<string, string>;\n  overrides?: Record<string, unknown>;\n  pnpm?: Record<string, unknown>;\n  [key: string]: unknown;\n};\n\nconst DREAMBOARD_SYNC_COMMAND = \"dreamboard sync\";\nconst DREAMBOARD_GITIGNORE_BLOCK = [\n  \"# Dreamboard local state\",\n  \".dreamboard/state.json\",\n  \".dreamboard/snapshot.json\",\n  \".dreamboard/dev/\",\n  \".dreamboard/generated/\",\n  \"\",\n].join(\"\\n\");\nconst TESTING_TYPES_STUB =\n  \"export function defineScenario(scenario) { return scenario; }\\n\";\nconst GENERATED_TESTING_TYPES_PREFIX = \"// Generated by dreamboard\";\nconst GENERATED_SCENARIO_PREFIX = \"// Generated by dreamboard scaffold.\";\nconst LEGACY_DREAMBOARD_COMPONENT_INDEX_CONTENT = `export {\n  ErrorBoundary,\n  type ErrorBoundaryProps,\n} from \"@dreamboard-games/sdk/ui\";\nexport { PluginRuntime, type PluginRuntimeProps } from \"@dreamboard-games/sdk/runtime\";\n`;\nconst OLD_LEGACY_DREAMBOARD_COMPONENT_INDEX_CONTENT = [\n  \"export {\",\n  \"  ErrorBoundary,\",\n  \"  PluginRuntime,\",\n  \"  type ErrorBoundaryProps,\",\n  \"  type PluginRuntimeProps,\",\n  `} from \"@dreamboard/ui-${\"sdk\"}\";`,\n  \"\",\n].join(\"\\n\");\nconst OLD_PUBLIC_DREAMBOARD_COMPONENT_INDEX_CONTENT = [\n  \"export {\",\n  \"  ErrorBoundary,\",\n  \"  PluginRuntime,\",\n  \"  type ErrorBoundaryProps,\",\n  \"  type PluginRuntimeProps,\",\n  `} from \"@dreamboard-games/ui-${\"sdk\"}\";`,\n  \"\",\n].join(\"\\n\");\nconst INITIAL_SCENARIO_CONTENT = `${GENERATED_SCENARIO_PREFIX}\nimport { defineScenario } from \"../testing-types\";\n\nexport default defineScenario({\n  id: \"smoke-initial-turn\",\n  description:\n    \"Sanity check that the scaffolded workspace boots into its initial phase.\",\n  from: \"initial-turn\",\n  when: async () => undefined,\n  then: ({ expect, interactions, players, state }) => {\n    const playerIds = players();\n    expect(playerIds).toHaveLength(playerIds.length);\n    expect(playerIds.length).toBeGreaterThanOrEqual(1);\n    expect(state()).toBe(\"setup\");\n    for (const playerId of playerIds) {\n      expect(interactions(playerId)).toEqual([]);\n    }\n  },\n});\n`;\nconst STATIC_ASSET_ROOT = resolveStaticAssetRoot();\nconst SDK_PACKAGE_PATHS = {\n  \"@dreamboard-games/sdk\": [\"packages\", \"sdk\", \"package.json\"],\n} as const;\nconst DEFAULT_SDK_DEPENDENCY_RANGES = {\n  \"@dreamboard-games/sdk\": \"0.4.0-alpha.0\",\n} as const;\nconst SDK_DEPENDENCY_RANGES = {\n  \"@dreamboard-games/sdk\": resolveSdkDependencyRange(\"@dreamboard-games/sdk\"),\n} as const;\n\nconst FRAMEWORK_SCRIPTS = {\n  dev: \"dreamboard dev\",\n  \"test:ui\":\n    \"tsx --tsconfig test/tsconfig.tsx-runtime.json --test test/ui/**/*.test.tsx\",\n  typecheck: `tsc --noEmit -p ${MANIFEST_TYPECHECK_CONFIG_FILE} && tsc --noEmit -p app/tsconfig.json && tsc --noEmit -p ui/tsconfig.json`,\n  \"typecheck:manifest\": `tsc --noEmit -p ${MANIFEST_TYPECHECK_CONFIG_FILE}`,\n  \"typecheck:app\": \"tsc --noEmit -p app/tsconfig.json\",\n  \"typecheck:ui\": \"tsc --noEmit -p ui/tsconfig.json\",\n} as const;\nconst SHARED_DEPENDENCIES = {\n  ...FRAMEWORK_REACT_DEPENDENCIES,\n} as const;\nconst ROOT_APP_DEPENDENCIES = {\n  zod: FRAMEWORK_ZOD_VERSION,\n} as const;\nconst SHARED_DEV_DEPENDENCIES = {\n  typescript: \"^5.9.2\",\n  \"@types/node\": \"^24.5.2\",\n  \"@types/react\": \"^19.0.0\",\n  \"@types/react-dom\": \"^19.0.0\",\n  csstype: \"^3.1.3\",\n  tsx: \"^4.20.5\",\n} as const;\n\nexport async function scaffoldStaticWorkspace(\n  projectRoot: string,\n  mode: StaticScaffoldMode,\n  options: StaticScaffoldOptions = {},\n): Promise<void> {\n  await writeFrameworkStaticFiles(projectRoot, mode, options);\n  await ensureDreamboardGitignore(projectRoot);\n  await writeManifestTypecheckTsconfig(\n    path.join(projectRoot, MANIFEST_TYPECHECK_CONFIG_FILE),\n  );\n  await removeLegacyVendoredSdkPaths(projectRoot);\n  await removeLegacyDreamboardComponentPath(projectRoot);\n\n  const testDir = path.join(projectRoot, \"test\");\n  const basesDir = path.join(testDir, \"bases\");\n  const scenariosDir = path.join(testDir, \"scenarios\");\n  const generatedDir = path.join(testDir, \"generated\");\n\n  await ensureDir(basesDir);\n  await ensureDir(scenariosDir);\n  await ensureDir(generatedDir);\n\n  await writeTestReadme(path.join(testDir, \"README.md\"));\n  await writeGeneratedTestingStubs(generatedDir, mode);\n  const initialTestPlayerCount = await inferInitialTestPlayerCount(projectRoot);\n  await writeInitialBase(\n    path.join(basesDir, \"initial-turn.base.ts\"),\n    mode,\n    initialTestPlayerCount,\n  );\n  await writeInitialScenario(\n    path.join(scenariosDir, \"smoke-initial-turn.scenario.ts\"),\n    mode,\n  );\n  await writeTestingTypes(path.join(testDir, \"testing-types.ts\"), mode);\n  await writeTestTsconfig(path.join(testDir, \"tsconfig.json\"));\n\n  const staleDtsPath = path.join(testDir, \"testing-types.d.ts\");\n  if (await exists(staleDtsPath)) {\n    await unlink(staleDtsPath);\n  }\n  const staleBaseScenariosPath = path.join(testDir, \"base-scenarios.json\");\n  if (await exists(staleBaseScenariosPath)) {\n    await unlink(staleBaseScenariosPath);\n  }\n\n  await migrateLegacyScenarioImports(projectRoot);\n}\n\nasync function ensureDreamboardGitignore(projectRoot: string): Promise<void> {\n  const gitignorePath = path.join(projectRoot, \".gitignore\");\n  const existing = await readTextFileIfExists(gitignorePath);\n  if (existing?.includes(\".dreamboard/state.json\")) {\n    return;\n  }\n  await writeTextFile(\n    gitignorePath,\n    `${existing ? `${existing.trimEnd()}\\n\\n` : \"\"}${DREAMBOARD_GITIGNORE_BLOCK}`,\n  );\n}\n\nexport async function assertCliStaticScaffoldComplete(\n  projectRoot: string,\n  deletedPaths: readonly string[] = [],\n): Promise<void> {\n  const expectedEntries = await getExpectedStaticEntries(projectRoot);\n  const missingOrBlankPaths: string[] = [];\n\n  for (const entry of expectedEntries) {\n    const fullPath = path.join(projectRoot, entry.targetPath);\n    const content = await readTextFileIfExists(fullPath);\n\n    if (content === null || content.trim().length === 0) {\n      missingOrBlankPaths.push(entry.targetPath);\n    }\n  }\n\n  const staticPaths = new Set(expectedEntries.map((entry) => entry.targetPath));\n  const deletedStaticPaths = deletedPaths\n    .map(normalizeProjectPath)\n    .filter((filePath) => staticPaths.has(filePath))\n    .sort();\n\n  if (missingOrBlankPaths.length === 0 && deletedStaticPaths.length === 0) {\n    return;\n  }\n\n  const problems: string[] = [];\n  if (missingOrBlankPaths.length > 0) {\n    problems.push(\n      `missing or blank: ${summarizePaths(missingOrBlankPaths.sort())}`,\n    );\n  }\n  if (deletedStaticPaths.length > 0) {\n    problems.push(`deleted: ${summarizePaths(deletedStaticPaths)}`);\n  }\n\n  throw new Error(\n    `CLI static scaffold is incomplete (${problems.join(\"; \")}). Run \\`${DREAMBOARD_SYNC_COMMAND}\\` to refresh the scaffold before compiling.`,\n  );\n}\n\nasync function writeFrameworkStaticFiles(\n  projectRoot: string,\n  mode: StaticScaffoldMode,\n  options: StaticScaffoldOptions,\n): Promise<void> {\n  const assetEntries = await getStaticAssetEntries();\n\n  for (const entry of assetEntries) {\n    const fullPath = path.join(projectRoot, entry.targetPath);\n    // Dynamic seed files are user-customizable: only write them on first\n    // scaffold; preserve existing content on subsequent updates.\n    if (mode === \"update\" && isDynamicSeedPath(entry.targetPath)) {\n      const existing = await readTextFileIfExists(fullPath);\n      if (existing !== null && existing.trim().length > 0) {\n        continue;\n      }\n    }\n    await writeTextFile(fullPath, entry.content);\n  }\n\n  for (const entry of await getDynamicStaticEntries(\n    projectRoot,\n    mode,\n    options,\n  )) {\n    await writeTextFile(\n      path.join(projectRoot, entry.targetPath),\n      entry.content,\n    );\n  }\n\n  if (!options.localMaintainerRegistry) {\n    await rm(path.join(projectRoot, \".npmrc\"), { force: true });\n  }\n}\n\nasync function removeLegacyVendoredSdkPaths(\n  projectRoot: string,\n): Promise<void> {\n  await rm(path.join(projectRoot, \"app\", \"sdk\"), {\n    recursive: true,\n    force: true,\n  });\n  await rm(path.join(projectRoot, \"ui\", \"sdk\"), {\n    recursive: true,\n    force: true,\n  });\n}\n\nasync function removeLegacyDreamboardComponentPath(\n  projectRoot: string,\n): Promise<void> {\n  const legacyDirPath = path.join(\n    projectRoot,\n    \"ui\",\n    \"components\",\n    \"dreamboard\",\n  );\n  const legacyIndexPath = path.join(legacyDirPath, \"index.ts\");\n  const existing = await readTextFileIfExists(legacyIndexPath);\n\n  const removableLegacyContents = new Set([\n    LEGACY_DREAMBOARD_COMPONENT_INDEX_CONTENT.trim(),\n    OLD_LEGACY_DREAMBOARD_COMPONENT_INDEX_CONTENT.trim(),\n    OLD_PUBLIC_DREAMBOARD_COMPONENT_INDEX_CONTENT.trim(),\n  ]);\n\n  if (existing === null || !removableLegacyContents.has(existing.trim())) {\n    return;\n  }\n\n  await unlink(legacyIndexPath);\n  const remainingEntries = await readdir(legacyDirPath).catch(() => []);\n  if (remainingEntries.length === 0) {\n    await rmdir(legacyDirPath);\n  }\n}\n\nasync function writeTestReadme(filePath: string): Promise<void> {\n  await writeTextFile(\n    filePath,\n    \"# Dreamboard Test Workspace\\n\\nTypeScript bases live in `test/bases/*.base.ts` and scenarios live in `test/scenarios/*.scenario.ts`.\\n\\n1. Define reusable seeded bases with `defineBase({ id, seed, players, setupProfileId?, setup })`.\\n2. Define scenarios with `defineScenario({ id, from, when, then })`.\\n3. Scenario assertions can read `players()`, `state()`, `view(playerId)`, and `interactions(playerId)`.\\n4. Generate deterministic base snapshots: `dreamboard test generate`.\\n5. Run tests: `dreamboard test run`.\\n\\nImport test helpers from `../testing-types`.\\n\\nGenerated artifacts are written to `test/generated/*` and should not be edited manually.\\n\",\n  );\n}\n\nasync function writeInitialBase(\n  filePath: string,\n  mode: StaticScaffoldMode,\n  players: number,\n): Promise<void> {\n  if (mode === \"update\") {\n    return;\n  }\n\n  await writeTextFile(\n    filePath,\n    `import { defineBase } from \"../testing-types\";\n\nexport default defineBase({\n  id: \"initial-turn\",\n  seed: 1337,\n  players: ${players},\n  setup: async () => undefined,\n});\n`,\n  );\n}\n\nasync function writeInitialScenario(\n  filePath: string,\n  mode: StaticScaffoldMode,\n): Promise<void> {\n  if (mode === \"new\") {\n    await writeTextFile(filePath, INITIAL_SCENARIO_CONTENT);\n    return;\n  }\n\n  const existing = await readTextFileIfExists(filePath);\n  if (\n    existing === null ||\n    existing.trim().length === 0 ||\n    existing === INITIAL_SCENARIO_CONTENT\n  ) {\n    await writeTextFile(filePath, INITIAL_SCENARIO_CONTENT);\n  }\n}\n\nasync function writeTestingTypes(\n  filePath: string,\n  mode: StaticScaffoldMode,\n): Promise<void> {\n  if (mode === \"new\") {\n    await writeTextFile(filePath, REDUCER_TESTING_TYPES_WRAPPER_CONTENT);\n    return;\n  }\n\n  const existing = await readTextFileIfExists(filePath);\n  if (shouldRefreshGeneratedTestingTypes(existing)) {\n    await writeTextFile(filePath, REDUCER_TESTING_TYPES_WRAPPER_CONTENT);\n  }\n}\n\nasync function writeGeneratedTestingStubs(\n  generatedDir: string,\n  mode: StaticScaffoldMode,\n): Promise<void> {\n  const header = \"// Generated by dreamboard scaffold. Do not edit by hand.\\n\";\n  await writeGeneratedTestingStubFile(\n    path.join(generatedDir, \"base-states.generated.ts\"),\n    `${header}export const BASE_STATES = {} as const;\\nexport const BASE_STATES_CONTRACT_FINGERPRINT = undefined;\\n`,\n    mode,\n  );\n  await writeGeneratedTestingStubFile(\n    path.join(generatedDir, \"base-states.generated.d.ts\"),\n    `${header}export declare const BASE_STATES: Record<string, unknown>;\\nexport declare const BASE_STATES_CONTRACT_FINGERPRINT: string | undefined;\\n`,\n    mode,\n  );\n  await writeGeneratedTestingStubFile(\n    path.join(generatedDir, \"testing-contract.ts\"),\n    `${header}export type BaseId = string;\\nexport type GameView = unknown;\\nexport type InteractionId = string;\\nexport type InteractionParamsOf<_Id extends string> = Record<string, unknown>;\\nexport type PhaseName = string;\\nexport type PlayerId = string;\\nexport type RejectionCode = string;\\nexport type StateName = string;\\nexport type TestRunner = \"reducer\" | \"remote\" | \"browser\";\\nexport type ViewByPhase = Record<string, GameView>;\\nexport type WorkspaceStageName<_Phase extends string = string> = string;\\nexport type Expectation = { [matcher: string]: (...args: unknown[]) => unknown; not: Expectation };\\nexport type ExpectFn = (actual: unknown) => Expectation;\\nexport type InteractionExplanation = { interactionId: string; phase: string; step: string | null; availability: \"available\" | \"notYourTurn\" | \"wrongPhase\" | \"wrongStep\" | \"blocked\"; rules: readonly { ruleId: string; outcome: \"passed\" | \"failed\" | \"notEvaluated\"; errorCode?: string; message?: string; }[]; actor: { required: readonly string[]; playerIsActor: boolean }; inputs: readonly { key: string; kind: string; eligibleCount: number | \"lazy\"; }[]; };\\nexport interface InteractionDescriptorFor<Id extends string = string> { interactionId: Id; [key: string]: unknown; }\\nexport interface ScenarioGameApi { start(): Promise<void>; submit<Id extends InteractionId>(playerId: PlayerId, interactionId: Id, params?: InteractionParamsOf<Id>): Promise<void>; }\\nexport interface BaseContext { game: ScenarioGameApi; players(): readonly PlayerId[]; seat(index: number): PlayerId; }\\nexport interface SharedScenarioContext { game: ScenarioGameApi; players(): readonly PlayerId[]; seat(index: number): PlayerId; state(): StateName; view(playerId: PlayerId): GameView; interactions(playerId: PlayerId): readonly InteractionDescriptorFor[]; explain(playerId: PlayerId, interactionId: InteractionId): InteractionExplanation; expect: ExpectFn; }\\nexport type ScenarioContext<Phase extends PhaseName | undefined = undefined> = Omit<SharedScenarioContext, \"state\" | \"view\"> & { state(): Phase extends PhaseName ? Phase : StateName; view(playerId: PlayerId): Phase extends PhaseName ? ViewByPhase[Phase] : GameView; };\\nexport type ScenarioThenContext<_Runners extends readonly TestRunner[] = readonly [\"reducer\"], Phase extends PhaseName | undefined = undefined> = ScenarioContext<Phase>;\\nexport interface BaseDefinition { id: string; seed?: number; players?: number; setupProfileId?: string; extends?: BaseId | string; setup: (ctx: BaseContext) => void | Promise<void>; }\\nexport interface ScenarioDefinition<Runners extends readonly TestRunner[] = readonly [\"reducer\"], Phase extends PhaseName | undefined = undefined> { id: string; description?: string; from: BaseId | string; runners?: Runners; phase?: Phase; stage?: Phase extends PhaseName ? WorkspaceStageName<Phase> : never; when: (ctx: ScenarioContext<Phase>) => void | Promise<void>; then: (ctx: ScenarioThenContext<Runners, Phase>) => void | Promise<void>; }\\n`,\n    mode,\n  );\n  await writeGeneratedTestingStubFile(\n    path.join(generatedDir, \"scenario-manifest.generated.ts\"),\n    `${header}export const SCENARIO_MANIFEST = [] as const;\\n`,\n    mode,\n  );\n}\n\nasync function writeGeneratedTestingStubFile(\n  filePath: string,\n  content: string,\n  mode: StaticScaffoldMode,\n): Promise<void> {\n  if (mode === \"new\") {\n    await writeTextFile(filePath, content);\n    return;\n  }\n\n  const existing = await readTextFileIfExists(filePath);\n  if (\n    existing === null ||\n    existing.trim().length === 0 ||\n    existing.startsWith(GENERATED_SCENARIO_PREFIX)\n  ) {\n    await writeTextFile(filePath, content);\n  }\n}\n\nasync function writeTestTsconfig(filePath: string): Promise<void> {\n  await writeTextFile(\n    filePath,\n    `${JSON.stringify(\n      {\n        compilerOptions: {\n          target: \"ES2022\",\n          module: \"ESNext\",\n          moduleResolution: \"bundler\",\n          strict: true,\n          esModuleInterop: true,\n          skipLibCheck: true,\n          noEmit: true,\n        },\n        include: [\n          \"./**/*.ts\",\n          \"./**/*.d.ts\",\n          \"../shared/**/*.ts\",\n          \"../shared/**/*.d.ts\",\n        ],\n      },\n      null,\n      2,\n    )}\\n`,\n  );\n}\n\nasync function writeManifestTypecheckTsconfig(filePath: string): Promise<void> {\n  await writeTextFile(\n    filePath,\n    `${JSON.stringify(\n      {\n        compilerOptions: {\n          target: \"ES2022\",\n          module: \"ESNext\",\n          moduleResolution: \"bundler\",\n          strict: true,\n          esModuleInterop: true,\n          skipLibCheck: true,\n          noEmit: true,\n          allowImportingTsExtensions: true,\n        },\n        include: [\"./manifest.ts\"],\n      },\n      null,\n      2,\n    )}\\n`,\n  );\n}\n\nexport async function migrateLegacyScenarioImports(\n  projectRoot: string,\n): Promise<void> {\n  const scenariosRoot = path.join(projectRoot, \"test\", \"scenarios\");\n  if (!(await exists(scenariosRoot))) return;\n\n  const scenarioFiles = await collectScenarioFiles(scenariosRoot);\n  for (const filePath of scenarioFiles) {\n    const content = await readTextFile(filePath);\n    if (!content.includes(\"@dreamboard/cli/testing\")) continue;\n\n    const relativeToTestingTypes = normalizeImportPath(\n      path.relative(\n        path.dirname(filePath),\n        path.join(projectRoot, \"test\", \"testing-types\"),\n      ),\n    );\n\n    const migrated = content\n      .replaceAll('\"@dreamboard/cli/testing\"', `\"${relativeToTestingTypes}\"`)\n      .replaceAll(\"'@dreamboard/cli/testing'\", `'${relativeToTestingTypes}'`);\n\n    if (migrated !== content) {\n      await writeTextFile(filePath, migrated);\n    }\n  }\n}\n\nfunction shouldRefreshGeneratedTestingTypes(\n  existingContent: string | null,\n): boolean {\n  if (existingContent === null || existingContent.trim().length === 0) {\n    return true;\n  }\n  if (existingContent === TESTING_TYPES_STUB) {\n    return true;\n  }\n  return existingContent.startsWith(GENERATED_TESTING_TYPES_PREFIX);\n}\n\nasync function inferInitialTestPlayerCount(\n  projectRoot: string,\n): Promise<number> {\n  const manifestPath = path.join(projectRoot, \"manifest.ts\");\n  if (!(await exists(manifestPath))) {\n    return 4;\n  }\n\n  try {\n    const manifest = await materializeManifest(projectRoot);\n    return manifest.players.optimalPlayers ?? manifest.players.minPlayers ?? 4;\n  } catch {\n    return 4;\n  }\n}\n\nasync function collectScenarioFiles(rootDir: string): Promise<string[]> {\n  const files: string[] = [];\n  const stack = [rootDir];\n\n  while (stack.length > 0) {\n    const dir = stack.pop();\n    if (!dir) continue;\n\n    const entries = await readdir(dir, { withFileTypes: true });\n    for (const entry of entries) {\n      const fullPath = path.join(dir, entry.name);\n      if (entry.isDirectory()) {\n        stack.push(fullPath);\n      } else if (entry.isFile() && entry.name.endsWith(\".ts\")) {\n        files.push(fullPath);\n      }\n    }\n  }\n\n  return files;\n}\n\nexport function resolveStaticAssetRoot(\n  importUrl: string = import.meta.url,\n): string {\n  const candidates = [\n    fileURLToPath(new URL(\"../../scaffold/assets/static/\", importUrl)),\n    fileURLToPath(new URL(\"./scaffold/assets/static/\", importUrl)),\n    fileURLToPath(new URL(\"../scaffold/assets/static/\", importUrl)),\n  ];\n\n  for (const candidate of candidates) {\n    if (existsSync(candidate)) {\n      return candidate;\n    }\n  }\n\n  throw new Error(\n    `Unable to locate CLI static scaffold assets. Checked: ${candidates.join(\", \")}`,\n  );\n}\n\nasync function getStaticAssetEntries(): Promise<StaticAssetEntry[]> {\n  const files = await walkFiles(STATIC_ASSET_ROOT);\n  const entries: StaticAssetEntry[] = [];\n\n  for (const filePath of files) {\n    const targetPath = normalizeProjectPath(\n      path.relative(STATIC_ASSET_ROOT, filePath),\n    );\n    entries.push({\n      targetPath,\n      content: await readFile(filePath, \"utf8\"),\n    });\n  }\n\n  entries.sort((left, right) =>\n    left.targetPath.localeCompare(right.targetPath),\n  );\n  return entries;\n}\n\nasync function getDynamicStaticEntries(\n  projectRoot: string,\n  mode: StaticScaffoldMode,\n  options: StaticScaffoldOptions = {},\n): Promise<StaticAssetEntry[]> {\n  const entries: StaticAssetEntry[] = [\n    {\n      targetPath: \"package.json\",\n      content: await buildRootPackageJson(projectRoot, mode, options),\n    },\n    {\n      targetPath: \"ui/package.json\",\n      content: buildUiPackageJson(),\n    },\n  ];\n\n  if (options.localMaintainerRegistry) {\n    entries.push({\n      targetPath: \".npmrc\",\n      content: buildWorkspaceNpmrc(options.localMaintainerRegistry.registryUrl),\n    });\n  }\n\n  return entries;\n}\n\nasync function getExpectedStaticEntries(\n  projectRoot: string,\n): Promise<StaticAssetEntry[]> {\n  const entries = [\n    ...(await getStaticAssetEntries()).filter(\n      (entry) => entry.targetPath !== \".npmrc\",\n    ),\n    ...(await getDynamicStaticEntries(projectRoot, \"update\")),\n  ];\n  entries.sort((left, right) =>\n    left.targetPath.localeCompare(right.targetPath),\n  );\n  return entries;\n}\n\nasync function walkFiles(rootDir: string): Promise<string[]> {\n  const files: string[] = [];\n  const stack = [rootDir];\n\n  while (stack.length > 0) {\n    const currentDir = stack.pop();\n    if (!currentDir) continue;\n\n    const entries = await readdir(currentDir, { withFileTypes: true });\n    for (const entry of entries) {\n      const fullPath = path.join(currentDir, entry.name);\n      if (entry.isDirectory()) {\n        stack.push(fullPath);\n      } else if (entry.isFile()) {\n        files.push(fullPath);\n      }\n    }\n  }\n\n  files.sort((left, right) => left.localeCompare(right));\n  return files;\n}\n\nasync function buildRootPackageJson(\n  projectRoot: string,\n  mode: StaticScaffoldMode,\n  options: StaticScaffoldOptions,\n): Promise<string> {\n  const sdkPackageRanges = {\n    ...SDK_DEPENDENCY_RANGES,\n    ...(options.localMaintainerRegistry?.packages ?? {}),\n  };\n  const packageJsonPath = path.join(projectRoot, \"package.json\");\n  const existingPackageJson =\n    mode === \"update\" && (await exists(packageJsonPath))\n      ? await readJsonFile<RootPackageJsonShape>(packageJsonPath)\n      : null;\n  const {\n    dreamboardFrameworkVersion: _legacyFrameworkVersion,\n    ...existingPackageJsonWithoutLegacyVersion\n  } = existingPackageJson ?? {};\n  const frameworkDependencies = {\n    \"@dreamboard-games/sdk\":\n      sdkPackageRanges[\"@dreamboard-games/sdk\"] ??\n      SDK_DEPENDENCY_RANGES[\"@dreamboard-games/sdk\"],\n    ...SHARED_DEPENDENCIES,\n    ...ROOT_APP_DEPENDENCIES,\n  };\n  const frameworkDevDependencies = {\n    ...SHARED_DEV_DEPENDENCIES,\n  };\n  const nextPackageJson: RootPackageJsonShape = {\n    ...existingPackageJsonWithoutLegacyVersion,\n    private: true,\n    scripts: {\n      ...(existingPackageJson?.scripts ?? {}),\n      ...FRAMEWORK_SCRIPTS,\n    },\n    dependencies: {\n      ...(existingPackageJson?.dependencies ?? {}),\n      ...frameworkDependencies,\n    },\n    devDependencies: {\n      ...(existingPackageJson?.devDependencies ?? {}),\n      ...frameworkDevDependencies,\n    },\n    pnpm: mergePnpmConfig(existingPackageJson?.pnpm),\n  };\n  return `${JSON.stringify(nextPackageJson, null, 2)}\\n`;\n}\n\nfunction mergePnpmConfig(\n  existingPnpm: Record<string, unknown> | undefined,\n): Record<string, unknown> {\n  const existingOverrides =\n    existingPnpm?.overrides &&\n    typeof existingPnpm.overrides === \"object\" &&\n    !Array.isArray(existingPnpm.overrides)\n      ? (existingPnpm.overrides as Record<string, unknown>)\n      : {};\n  return {\n    ...(existingPnpm ?? {}),\n    overrides: {\n      ...existingOverrides,\n      ...FRAMEWORK_PNPM_OVERRIDES,\n    },\n  };\n}\n\nfunction buildWorkspaceNpmrc(registryUrl: string): string {\n  return `@dreamboard-games:registry=${registryUrl}\\n`;\n}\n\nfunction buildUiPackageJson(): string {\n  return `${JSON.stringify(\n    {\n      private: true,\n      dependencies: SHARED_DEPENDENCIES,\n      devDependencies: SHARED_DEV_DEPENDENCIES,\n    },\n    null,\n    2,\n  )}\\n`;\n}\n\nfunction readPackageVersion(\n  packageJsonPath: string,\n  packageName: string,\n): string | null {\n  const packageJson = JSON.parse(readFileSync(packageJsonPath, \"utf8\")) as {\n    version?: unknown;\n  };\n\n  if (\n    typeof packageJson.version !== \"string\" ||\n    packageJson.version.trim().length === 0\n  ) {\n    return null;\n  }\n\n  return `^${packageJson.version.trim()}`;\n}\n\nfunction findNearestPackageJsonPath(\n  importMetaUrl: string = import.meta.url,\n): string | null {\n  let current = path.dirname(fileURLToPath(importMetaUrl));\n\n  while (true) {\n    const candidate = path.join(current, \"package.json\");\n    if (existsSync(candidate)) {\n      return candidate;\n    }\n\n    const parent = path.dirname(current);\n    if (parent === current) {\n      return null;\n    }\n    current = parent;\n  }\n}\n\nfunction isSourceCheckoutCliPackageJsonPath(\n  packageJsonPath: string,\n  importMetaUrl: string = import.meta.url,\n): boolean {\n  try {\n    return (\n      path.resolve(packageJsonPath) ===\n      path.join(\n        resolveCliRepoRoot(importMetaUrl),\n        \"apps\",\n        \"dreamboard-cli\",\n        \"package.json\",\n      )\n    );\n  } catch {\n    return false;\n  }\n}\n\nfunction readPackagedSdkDependencyRange(\n  packageName: keyof typeof SDK_PACKAGE_PATHS,\n  importMetaUrl: string = import.meta.url,\n): string | null {\n  const packageJsonPath = findNearestPackageJsonPath(importMetaUrl);\n  if (!packageJsonPath) {\n    return null;\n  }\n\n  const packageJson = JSON.parse(readFileSync(packageJsonPath, \"utf8\")) as {\n    dependencies?: Record<string, unknown>;\n  };\n\n  const packagedRange = packageJson.dependencies?.[packageName];\n  if (\n    typeof packagedRange !== \"string\" ||\n    packagedRange.trim().length === 0 ||\n    packagedRange.startsWith(\"workspace:\") ||\n    packagedRange.startsWith(\"link:\") ||\n    (packagedRange.startsWith(\"file:\") &&\n      !IS_PUBLISHED_BUILD &&\n      isSourceCheckoutCliPackageJsonPath(packageJsonPath, importMetaUrl))\n  ) {\n    return null;\n  }\n\n  return packagedRange.trim();\n}\n\n/**\n * Local Verdaccio snapshot pins (`x.y.z-local.<timestamp>.<fingerprint>`) are\n * only resolvable on the maintainer machine that published them. Scaffolded\n * workspaces must always start from a registry-publishable version, so\n * normalize any inherited snapshot pin to its public base version.\n */\nfunction stripLocalSnapshotSuffix(range: string): string {\n  return range.replace(/-local\\..*$/, \"\");\n}\n\nexport function resolveSdkDependencyRange(\n  packageName: keyof typeof SDK_PACKAGE_PATHS,\n  importMetaUrl: string = import.meta.url,\n): string {\n  const packagedRange = readPackagedSdkDependencyRange(\n    packageName,\n    importMetaUrl,\n  );\n  if (packagedRange) {\n    return stripLocalSnapshotSuffix(packagedRange);\n  }\n\n  try {\n    const repoRoot = resolveCliRepoRoot(importMetaUrl);\n    const packageJsonPath = path.join(\n      repoRoot,\n      ...SDK_PACKAGE_PATHS[packageName],\n    );\n    const repoRange = readPackageVersion(packageJsonPath, packageName);\n    if (repoRange) {\n      return stripLocalSnapshotSuffix(repoRange);\n    }\n  } catch {\n    // Published installs do not include the monorepo layout.\n  }\n\n  return DEFAULT_SDK_DEPENDENCY_RANGES[packageName];\n}\n\nfunction normalizeImportPath(relativePath: string): string {\n  const normalized = relativePath.replaceAll(\"\\\\\", \"/\");\n  if (normalized.startsWith(\".\")) return normalized;\n  return `./${normalized}`;\n}\n\nfunction normalizeProjectPath(filePath: string): string {\n  return filePath.replace(/^\\.\\//, \"\").replace(/^\\/+/, \"\").replace(/\\\\/g, \"/\");\n}\n\nfunction summarizePaths(paths: readonly string[]): string {\n  const maxShown = 5;\n  const shown = paths.slice(0, maxShown).join(\", \");\n  if (paths.length <= maxShown) return shown;\n  return `${shown}, and ${paths.length - maxShown} more`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,YAAY,oBAAoB;AACzC,SAAS,SAAS,UAAU,IAAI,OAAO,cAAc;AACrD,OAAO,UAAU;AACjB,SAAS,qBAAqB;AAgD9B,IAAM,0BAA0B;AAChC,IAAM,6BAA6B;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,EAAE,KAAK,IAAI;AACX,IAAM,qBACJ;AACF,IAAM,iCAAiC;AACvC,IAAM,4BAA4B;AAClC,IAAM,4CAA4C;AAAA;AAAA;AAAA;AAAA;AAAA;AAMlD,IAAM,gDAAgD;AAAA,EACpD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,0BAA0B,KAAK;AAAA,EAC/B;AACF,EAAE,KAAK,IAAI;AACX,IAAM,gDAAgD;AAAA,EACpD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,gCAAgC,KAAK;AAAA,EACrC;AACF,EAAE,KAAK,IAAI;AACX,IAAM,2BAA2B,GAAG,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAoB7D,IAAM,oBAAoB,uBAAuB;AACjD,IAAM,oBAAoB;AAAA,EACxB,yBAAyB,CAAC,YAAY,OAAO,cAAc;AAC7D;AACA,IAAM,gCAAgC;AAAA,EACpC,yBAAyB;AAC3B;AACA,IAAM,wBAAwB;AAAA,EAC5B,yBAAyB,0BAA0B,uBAAuB;AAC5E;AAEA,IAAM,oBAAoB;AAAA,EACxB,KAAK;AAAA,EACL,WACE;AAAA,EACF,WAAW,mBAAmB,8BAA8B;AAAA,EAC5D,sBAAsB,mBAAmB,8BAA8B;AAAA,EACvE,iBAAiB;AAAA,EACjB,gBAAgB;AAClB;AACA,IAAM,sBAAsB;AAAA,EAC1B,GAAG;AACL;AACA,IAAM,wBAAwB;AAAA,EAC5B,KAAK;AACP;AACA,IAAM,0BAA0B;AAAA,EAC9B,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,SAAS;AAAA,EACT,KAAK;AACP;AAEA,eAAsB,wBACpB,aACA,MACA,UAAiC,CAAC,GACnB;AACf,QAAM,0BAA0B,aAAa,MAAM,OAAO;AAC1D,QAAM,0BAA0B,WAAW;AAC3C,QAAM;AAAA,IACJ,KAAK,KAAK,aAAa,8BAA8B;AAAA,EACvD;AACA,QAAM,6BAA6B,WAAW;AAC9C,QAAM,oCAAoC,WAAW;AAErD,QAAM,UAAU,KAAK,KAAK,aAAa,MAAM;AAC7C,QAAM,WAAW,KAAK,KAAK,SAAS,OAAO;AAC3C,QAAM,eAAe,KAAK,KAAK,SAAS,WAAW;AACnD,QAAM,eAAe,KAAK,KAAK,SAAS,WAAW;AAEnD,QAAM,UAAU,QAAQ;AACxB,QAAM,UAAU,YAAY;AAC5B,QAAM,UAAU,YAAY;AAE5B,QAAM,gBAAgB,KAAK,KAAK,SAAS,WAAW,CAAC;AACrD,QAAM,2BAA2B,cAAc,IAAI;AACnD,QAAM,yBAAyB,MAAM,4BAA4B,WAAW;AAC5E,QAAM;AAAA,IACJ,KAAK,KAAK,UAAU,sBAAsB;AAAA,IAC1C;AAAA,IACA;AAAA,EACF;AACA,QAAM;AAAA,IACJ,KAAK,KAAK,cAAc,gCAAgC;AAAA,IACxD;AAAA,EACF;AACA,QAAM,kBAAkB,KAAK,KAAK,SAAS,kBAAkB,GAAG,IAAI;AACpE,QAAM,kBAAkB,KAAK,KAAK,SAAS,eAAe,CAAC;AAE3D,QAAM,eAAe,KAAK,KAAK,SAAS,oBAAoB;AAC5D,MAAI,MAAM,OAAO,YAAY,GAAG;AAC9B,UAAM,OAAO,YAAY;AAAA,EAC3B;AACA,QAAM,yBAAyB,KAAK,KAAK,SAAS,qBAAqB;AACvE,MAAI,MAAM,OAAO,sBAAsB,GAAG;AACxC,UAAM,OAAO,sBAAsB;AAAA,EACrC;AAEA,QAAM,6BAA6B,WAAW;AAChD;AAEA,eAAe,0BAA0B,aAAoC;AAC3E,QAAM,gBAAgB,KAAK,KAAK,aAAa,YAAY;AACzD,QAAM,WAAW,MAAM,qBAAqB,aAAa;AACzD,MAAI,UAAU,SAAS,wBAAwB,GAAG;AAChD;AAAA,EACF;AACA,QAAM;AAAA,IACJ;AAAA,IACA,GAAG,WAAW,GAAG,SAAS,QAAQ,CAAC;AAAA;AAAA,IAAS,EAAE,GAAG,0BAA0B;AAAA,EAC7E;AACF;AAEA,eAAsB,gCACpB,aACA,eAAkC,CAAC,GACpB;AACf,QAAM,kBAAkB,MAAM,yBAAyB,WAAW;AAClE,QAAM,sBAAgC,CAAC;AAEvC,aAAW,SAAS,iBAAiB;AACnC,UAAM,WAAW,KAAK,KAAK,aAAa,MAAM,UAAU;AACxD,UAAM,UAAU,MAAM,qBAAqB,QAAQ;AAEnD,QAAI,YAAY,QAAQ,QAAQ,KAAK,EAAE,WAAW,GAAG;AACnD,0BAAoB,KAAK,MAAM,UAAU;AAAA,IAC3C;AAAA,EACF;AAEA,QAAM,cAAc,IAAI,IAAI,gBAAgB,IAAI,CAAC,UAAU,MAAM,UAAU,CAAC;AAC5E,QAAM,qBAAqB,aACxB,IAAI,oBAAoB,EACxB,OAAO,CAAC,aAAa,YAAY,IAAI,QAAQ,CAAC,EAC9C,KAAK;AAER,MAAI,oBAAoB,WAAW,KAAK,mBAAmB,WAAW,GAAG;AACvE;AAAA,EACF;AAEA,QAAM,WAAqB,CAAC;AAC5B,MAAI,oBAAoB,SAAS,GAAG;AAClC,aAAS;AAAA,MACP,qBAAqB,eAAe,oBAAoB,KAAK,CAAC,CAAC;AAAA,IACjE;AAAA,EACF;AACA,MAAI,mBAAmB,SAAS,GAAG;AACjC,aAAS,KAAK,YAAY,eAAe,kBAAkB,CAAC,EAAE;AAAA,EAChE;AAEA,QAAM,IAAI;AAAA,IACR,sCAAsC,SAAS,KAAK,IAAI,CAAC,YAAY,uBAAuB;AAAA,EAC9F;AACF;AAEA,eAAe,0BACb,aACA,MACA,SACe;AACf,QAAM,eAAe,MAAM,sBAAsB;AAEjD,aAAW,SAAS,cAAc;AAChC,UAAM,WAAW,KAAK,KAAK,aAAa,MAAM,UAAU;AAGxD,QAAI,SAAS,YAAY,kBAAkB,MAAM,UAAU,GAAG;AAC5D,YAAM,WAAW,MAAM,qBAAqB,QAAQ;AACpD,UAAI,aAAa,QAAQ,SAAS,KAAK,EAAE,SAAS,GAAG;AACnD;AAAA,MACF;AAAA,IACF;AACA,UAAM,cAAc,UAAU,MAAM,OAAO;AAAA,EAC7C;AAEA,aAAW,SAAS,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAAG;AACD,UAAM;AAAA,MACJ,KAAK,KAAK,aAAa,MAAM,UAAU;AAAA,MACvC,MAAM;AAAA,IACR;AAAA,EACF;AAEA,MAAI,CAAC,QAAQ,yBAAyB;AACpC,UAAM,GAAG,KAAK,KAAK,aAAa,QAAQ,GAAG,EAAE,OAAO,KAAK,CAAC;AAAA,EAC5D;AACF;AAEA,eAAe,6BACb,aACe;AACf,QAAM,GAAG,KAAK,KAAK,aAAa,OAAO,KAAK,GAAG;AAAA,IAC7C,WAAW;AAAA,IACX,OAAO;AAAA,EACT,CAAC;AACD,QAAM,GAAG,KAAK,KAAK,aAAa,MAAM,KAAK,GAAG;AAAA,IAC5C,WAAW;AAAA,IACX,OAAO;AAAA,EACT,CAAC;AACH;AAEA,eAAe,oCACb,aACe;AACf,QAAM,gBAAgB,KAAK;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,kBAAkB,KAAK,KAAK,eAAe,UAAU;AAC3D,QAAM,WAAW,MAAM,qBAAqB,eAAe;AAE3D,QAAM,0BAA0B,oBAAI,IAAI;AAAA,IACtC,0CAA0C,KAAK;AAAA,IAC/C,8CAA8C,KAAK;AAAA,IACnD,8CAA8C,KAAK;AAAA,EACrD,CAAC;AAED,MAAI,aAAa,QAAQ,CAAC,wBAAwB,IAAI,SAAS,KAAK,CAAC,GAAG;AACtE;AAAA,EACF;AAEA,QAAM,OAAO,eAAe;AAC5B,QAAM,mBAAmB,MAAM,QAAQ,aAAa,EAAE,MAAM,MAAM,CAAC,CAAC;AACpE,MAAI,iBAAiB,WAAW,GAAG;AACjC,UAAM,MAAM,aAAa;AAAA,EAC3B;AACF;AAEA,eAAe,gBAAgB,UAAiC;AAC9D,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAe,iBACb,UACA,MACA,SACe;AACf,MAAI,SAAS,UAAU;AACrB;AAAA,EACF;AAEA,QAAM;AAAA,IACJ;AAAA,IACA;AAAA;AAAA;AAAA;AAAA;AAAA,aAKS,OAAO;AAAA;AAAA;AAAA;AAAA,EAIlB;AACF;AAEA,eAAe,qBACb,UACA,MACe;AACf,MAAI,SAAS,OAAO;AAClB,UAAM,cAAc,UAAU,wBAAwB;AACtD;AAAA,EACF;AAEA,QAAM,WAAW,MAAM,qBAAqB,QAAQ;AACpD,MACE,aAAa,QACb,SAAS,KAAK,EAAE,WAAW,KAC3B,aAAa,0BACb;AACA,UAAM,cAAc,UAAU,wBAAwB;AAAA,EACxD;AACF;AAEA,eAAe,kBACb,UACA,MACe;AACf,MAAI,SAAS,OAAO;AAClB,UAAM,cAAc,UAAU,qCAAqC;AACnE;AAAA,EACF;AAEA,QAAM,WAAW,MAAM,qBAAqB,QAAQ;AACpD,MAAI,mCAAmC,QAAQ,GAAG;AAChD,UAAM,cAAc,UAAU,qCAAqC;AAAA,EACrE;AACF;AAEA,eAAe,2BACb,cACA,MACe;AACf,QAAM,SAAS;AACf,QAAM;AAAA,IACJ,KAAK,KAAK,cAAc,0BAA0B;AAAA,IAClD,GAAG,MAAM;AAAA;AAAA;AAAA,IACT;AAAA,EACF;AACA,QAAM;AAAA,IACJ,KAAK,KAAK,cAAc,4BAA4B;AAAA,IACpD,GAAG,MAAM;AAAA;AAAA;AAAA,IACT;AAAA,EACF;AACA,QAAM;AAAA,IACJ,KAAK,KAAK,cAAc,qBAAqB;AAAA,IAC7C,GAAG,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IACT;AAAA,EACF;AACA,QAAM;AAAA,IACJ,KAAK,KAAK,cAAc,gCAAgC;AAAA,IACxD,GAAG,MAAM;AAAA;AAAA,IACT;AAAA,EACF;AACF;AAEA,eAAe,8BACb,UACA,SACA,MACe;AACf,MAAI,SAAS,OAAO;AAClB,UAAM,cAAc,UAAU,OAAO;AACrC;AAAA,EACF;AAEA,QAAM,WAAW,MAAM,qBAAqB,QAAQ;AACpD,MACE,aAAa,QACb,SAAS,KAAK,EAAE,WAAW,KAC3B,SAAS,WAAW,yBAAyB,GAC7C;AACA,UAAM,cAAc,UAAU,OAAO;AAAA,EACvC;AACF;AAEA,eAAe,kBAAkB,UAAiC;AAChE,QAAM;AAAA,IACJ;AAAA,IACA,GAAG,KAAK;AAAA,MACN;AAAA,QACE,iBAAiB;AAAA,UACf,QAAQ;AAAA,UACR,QAAQ;AAAA,UACR,kBAAkB;AAAA,UAClB,QAAQ;AAAA,UACR,iBAAiB;AAAA,UACjB,cAAc;AAAA,UACd,QAAQ;AAAA,QACV;AAAA,QACA,SAAS;AAAA,UACP;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA;AAAA,EACH;AACF;AAEA,eAAe,+BAA+B,UAAiC;AAC7E,QAAM;AAAA,IACJ;AAAA,IACA,GAAG,KAAK;AAAA,MACN;AAAA,QACE,iBAAiB;AAAA,UACf,QAAQ;AAAA,UACR,QAAQ;AAAA,UACR,kBAAkB;AAAA,UAClB,QAAQ;AAAA,UACR,iBAAiB;AAAA,UACjB,cAAc;AAAA,UACd,QAAQ;AAAA,UACR,4BAA4B;AAAA,QAC9B;AAAA,QACA,SAAS,CAAC,eAAe;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA;AAAA,EACH;AACF;AAEA,eAAsB,6BACpB,aACe;AACf,QAAM,gBAAgB,KAAK,KAAK,aAAa,QAAQ,WAAW;AAChE,MAAI,CAAE,MAAM,OAAO,aAAa,EAAI;AAEpC,QAAM,gBAAgB,MAAM,qBAAqB,aAAa;AAC9D,aAAW,YAAY,eAAe;AACpC,UAAM,UAAU,MAAM,aAAa,QAAQ;AAC3C,QAAI,CAAC,QAAQ,SAAS,yBAAyB,EAAG;AAElD,UAAM,yBAAyB;AAAA,MAC7B,KAAK;AAAA,QACH,KAAK,QAAQ,QAAQ;AAAA,QACrB,KAAK,KAAK,aAAa,QAAQ,eAAe;AAAA,MAChD;AAAA,IACF;AAEA,UAAM,WAAW,QACd,WAAW,6BAA6B,IAAI,sBAAsB,GAAG,EACrE,WAAW,6BAA6B,IAAI,sBAAsB,GAAG;AAExE,QAAI,aAAa,SAAS;AACxB,YAAM,cAAc,UAAU,QAAQ;AAAA,IACxC;AAAA,EACF;AACF;AAEA,SAAS,mCACP,iBACS;AACT,MAAI,oBAAoB,QAAQ,gBAAgB,KAAK,EAAE,WAAW,GAAG;AACnE,WAAO;AAAA,EACT;AACA,MAAI,oBAAoB,oBAAoB;AAC1C,WAAO;AAAA,EACT;AACA,SAAO,gBAAgB,WAAW,8BAA8B;AAClE;AAEA,eAAe,4BACb,aACiB;AACjB,QAAM,eAAe,KAAK,KAAK,aAAa,aAAa;AACzD,MAAI,CAAE,MAAM,OAAO,YAAY,GAAI;AACjC,WAAO;AAAA,EACT;AAEA,MAAI;AACF,UAAM,WAAW,MAAM,oBAAoB,WAAW;AACtD,WAAO,SAAS,QAAQ,kBAAkB,SAAS,QAAQ,cAAc;AAAA,EAC3E,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,qBAAqB,SAAoC;AACtE,QAAM,QAAkB,CAAC;AACzB,QAAM,QAAQ,CAAC,OAAO;AAEtB,SAAO,MAAM,SAAS,GAAG;AACvB,UAAM,MAAM,MAAM,IAAI;AACtB,QAAI,CAAC,IAAK;AAEV,UAAM,UAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;AAC1D,eAAW,SAAS,SAAS;AAC3B,YAAM,WAAW,KAAK,KAAK,KAAK,MAAM,IAAI;AAC1C,UAAI,MAAM,YAAY,GAAG;AACvB,cAAM,KAAK,QAAQ;AAAA,MACrB,WAAW,MAAM,OAAO,KAAK,MAAM,KAAK,SAAS,KAAK,GAAG;AACvD,cAAM,KAAK,QAAQ;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEO,SAAS,uBACd,YAAoB,YAAY,KACxB;AACR,QAAM,aAAa;AAAA,IACjB,cAAc,IAAI,IAAI,iCAAiC,SAAS,CAAC;AAAA,IACjE,cAAc,IAAI,IAAI,6BAA6B,SAAS,CAAC;AAAA,IAC7D,cAAc,IAAI,IAAI,8BAA8B,SAAS,CAAC;AAAA,EAChE;AAEA,aAAW,aAAa,YAAY;AAClC,QAAI,WAAW,SAAS,GAAG;AACzB,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,IAAI;AAAA,IACR,yDAAyD,WAAW,KAAK,IAAI,CAAC;AAAA,EAChF;AACF;AAEA,eAAe,wBAAqD;AAClE,QAAM,QAAQ,MAAM,UAAU,iBAAiB;AAC/C,QAAM,UAA8B,CAAC;AAErC,aAAW,YAAY,OAAO;AAC5B,UAAM,aAAa;AAAA,MACjB,KAAK,SAAS,mBAAmB,QAAQ;AAAA,IAC3C;AACA,YAAQ,KAAK;AAAA,MACX;AAAA,MACA,SAAS,MAAM,SAAS,UAAU,MAAM;AAAA,IAC1C,CAAC;AAAA,EACH;AAEA,UAAQ;AAAA,IAAK,CAAC,MAAM,UAClB,KAAK,WAAW,cAAc,MAAM,UAAU;AAAA,EAChD;AACA,SAAO;AACT;AAEA,eAAe,wBACb,aACA,MACA,UAAiC,CAAC,GACL;AAC7B,QAAM,UAA8B;AAAA,IAClC;AAAA,MACE,YAAY;AAAA,MACZ,SAAS,MAAM,qBAAqB,aAAa,MAAM,OAAO;AAAA,IAChE;AAAA,IACA;AAAA,MACE,YAAY;AAAA,MACZ,SAAS,mBAAmB;AAAA,IAC9B;AAAA,EACF;AAEA,MAAI,QAAQ,yBAAyB;AACnC,YAAQ,KAAK;AAAA,MACX,YAAY;AAAA,MACZ,SAAS,oBAAoB,QAAQ,wBAAwB,WAAW;AAAA,IAC1E,CAAC;AAAA,EACH;AAEA,SAAO;AACT;AAEA,eAAe,yBACb,aAC6B;AAC7B,QAAM,UAAU;AAAA,IACd,IAAI,MAAM,sBAAsB,GAAG;AAAA,MACjC,CAAC,UAAU,MAAM,eAAe;AAAA,IAClC;AAAA,IACA,GAAI,MAAM,wBAAwB,aAAa,QAAQ;AAAA,EACzD;AACA,UAAQ;AAAA,IAAK,CAAC,MAAM,UAClB,KAAK,WAAW,cAAc,MAAM,UAAU;AAAA,EAChD;AACA,SAAO;AACT;AAEA,eAAe,UAAU,SAAoC;AAC3D,QAAM,QAAkB,CAAC;AACzB,QAAM,QAAQ,CAAC,OAAO;AAEtB,SAAO,MAAM,SAAS,GAAG;AACvB,UAAM,aAAa,MAAM,IAAI;AAC7B,QAAI,CAAC,WAAY;AAEjB,UAAM,UAAU,MAAM,QAAQ,YAAY,EAAE,eAAe,KAAK,CAAC;AACjE,eAAW,SAAS,SAAS;AAC3B,YAAM,WAAW,KAAK,KAAK,YAAY,MAAM,IAAI;AACjD,UAAI,MAAM,YAAY,GAAG;AACvB,cAAM,KAAK,QAAQ;AAAA,MACrB,WAAW,MAAM,OAAO,GAAG;AACzB,cAAM,KAAK,QAAQ;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,KAAK,CAAC,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;AACrD,SAAO;AACT;AAEA,eAAe,qBACb,aACA,MACA,SACiB;AACjB,QAAM,mBAAmB;AAAA,IACvB,GAAG;AAAA,IACH,GAAI,QAAQ,yBAAyB,YAAY,CAAC;AAAA,EACpD;AACA,QAAM,kBAAkB,KAAK,KAAK,aAAa,cAAc;AAC7D,QAAM,sBACJ,SAAS,YAAa,MAAM,OAAO,eAAe,IAC9C,MAAM,aAAmC,eAAe,IACxD;AACN,QAAM;AAAA,IACJ,4BAA4B;AAAA,IAC5B,GAAG;AAAA,EACL,IAAI,uBAAuB,CAAC;AAC5B,QAAM,wBAAwB;AAAA,IAC5B,yBACE,iBAAiB,uBAAuB,KACxC,sBAAsB,uBAAuB;AAAA,IAC/C,GAAG;AAAA,IACH,GAAG;AAAA,EACL;AACA,QAAM,2BAA2B;AAAA,IAC/B,GAAG;AAAA,EACL;AACA,QAAM,kBAAwC;AAAA,IAC5C,GAAG;AAAA,IACH,SAAS;AAAA,IACT,SAAS;AAAA,MACP,GAAI,qBAAqB,WAAW,CAAC;AAAA,MACrC,GAAG;AAAA,IACL;AAAA,IACA,cAAc;AAAA,MACZ,GAAI,qBAAqB,gBAAgB,CAAC;AAAA,MAC1C,GAAG;AAAA,IACL;AAAA,IACA,iBAAiB;AAAA,MACf,GAAI,qBAAqB,mBAAmB,CAAC;AAAA,MAC7C,GAAG;AAAA,IACL;AAAA,IACA,MAAM,gBAAgB,qBAAqB,IAAI;AAAA,EACjD;AACA,SAAO,GAAG,KAAK,UAAU,iBAAiB,MAAM,CAAC,CAAC;AAAA;AACpD;AAEA,SAAS,gBACP,cACyB;AACzB,QAAM,oBACJ,cAAc,aACd,OAAO,aAAa,cAAc,YAClC,CAAC,MAAM,QAAQ,aAAa,SAAS,IAChC,aAAa,YACd,CAAC;AACP,SAAO;AAAA,IACL,GAAI,gBAAgB,CAAC;AAAA,IACrB,WAAW;AAAA,MACT,GAAG;AAAA,MACH,GAAG;AAAA,IACL;AAAA,EACF;AACF;AAEA,SAAS,oBAAoB,aAA6B;AACxD,SAAO,8BAA8B,WAAW;AAAA;AAClD;AAEA,SAAS,qBAA6B;AACpC,SAAO,GAAG,KAAK;AAAA,IACb;AAAA,MACE,SAAS;AAAA,MACT,cAAc;AAAA,MACd,iBAAiB;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAAA;AACH;AAEA,SAAS,mBACP,iBACA,aACe;AACf,QAAM,cAAc,KAAK,MAAM,aAAa,iBAAiB,MAAM,CAAC;AAIpE,MACE,OAAO,YAAY,YAAY,YAC/B,YAAY,QAAQ,KAAK,EAAE,WAAW,GACtC;AACA,WAAO;AAAA,EACT;AAEA,SAAO,IAAI,YAAY,QAAQ,KAAK,CAAC;AACvC;AAEA,SAAS,2BACP,gBAAwB,YAAY,KACrB;AACf,MAAI,UAAU,KAAK,QAAQ,cAAc,aAAa,CAAC;AAEvD,SAAO,MAAM;AACX,UAAM,YAAY,KAAK,KAAK,SAAS,cAAc;AACnD,QAAI,WAAW,SAAS,GAAG;AACzB,aAAO;AAAA,IACT;AAEA,UAAM,SAAS,KAAK,QAAQ,OAAO;AACnC,QAAI,WAAW,SAAS;AACtB,aAAO;AAAA,IACT;AACA,cAAU;AAAA,EACZ;AACF;AAEA,SAAS,mCACP,iBACA,gBAAwB,YAAY,KAC3B;AACT,MAAI;AACF,WACE,KAAK,QAAQ,eAAe,MAC5B,KAAK;AAAA,MACH,mBAAmB,aAAa;AAAA,MAChC;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EAEJ,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,+BACP,aACA,gBAAwB,YAAY,KACrB;AACf,QAAM,kBAAkB,2BAA2B,aAAa;AAChE,MAAI,CAAC,iBAAiB;AACpB,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,KAAK,MAAM,aAAa,iBAAiB,MAAM,CAAC;AAIpE,QAAM,gBAAgB,YAAY,eAAe,WAAW;AAC5D,MACE,OAAO,kBAAkB,YACzB,cAAc,KAAK,EAAE,WAAW,KAChC,cAAc,WAAW,YAAY,KACrC,cAAc,WAAW,OAAO,KAC/B,cAAc,WAAW,OAAO,KAC/B,CAAC,sBACD,mCAAmC,iBAAiB,aAAa,GACnE;AACA,WAAO;AAAA,EACT;AAEA,SAAO,cAAc,KAAK;AAC5B;AAQA,SAAS,yBAAyB,OAAuB;AACvD,SAAO,MAAM,QAAQ,eAAe,EAAE;AACxC;AAEO,SAAS,0BACd,aACA,gBAAwB,YAAY,KAC5B;AACR,QAAM,gBAAgB;AAAA,IACpB;AAAA,IACA;AAAA,EACF;AACA,MAAI,eAAe;AACjB,WAAO,yBAAyB,aAAa;AAAA,EAC/C;AAEA,MAAI;AACF,UAAM,WAAW,mBAAmB,aAAa;AACjD,UAAM,kBAAkB,KAAK;AAAA,MAC3B;AAAA,MACA,GAAG,kBAAkB,WAAW;AAAA,IAClC;AACA,UAAM,YAAY,mBAAmB,iBAAiB,WAAW;AACjE,QAAI,WAAW;AACb,aAAO,yBAAyB,SAAS;AAAA,IAC3C;AAAA,EACF,QAAQ;AAAA,EAER;AAEA,SAAO,8BAA8B,WAAW;AAClD;AAEA,SAAS,oBAAoB,cAA8B;AACzD,QAAM,aAAa,aAAa,WAAW,MAAM,GAAG;AACpD,MAAI,WAAW,WAAW,GAAG,EAAG,QAAO;AACvC,SAAO,KAAK,UAAU;AACxB;AAEA,SAAS,qBAAqB,UAA0B;AACtD,SAAO,SAAS,QAAQ,SAAS,EAAE,EAAE,QAAQ,QAAQ,EAAE,EAAE,QAAQ,OAAO,GAAG;AAC7E;AAEA,SAAS,eAAe,OAAkC;AACxD,QAAM,WAAW;AACjB,QAAM,QAAQ,MAAM,MAAM,GAAG,QAAQ,EAAE,KAAK,IAAI;AAChD,MAAI,MAAM,UAAU,SAAU,QAAO;AACrC,SAAO,GAAG,KAAK,SAAS,MAAM,SAAS,QAAQ;AACjD;","names":[]}

package/dist/agent-verifier/{chunk-HJFQDSTU.mjs → chunk-W2MDP5ZN.mjs}

@@ -2,14 +2,14 @@
 import {
   atomicWriteFile,
   withFileLock
-} from "./chunk-MINCYHXN.mjs";
+} from "./chunk-TAEQKBJB.mjs";
 import {
   ensureDir,
   readJsonFile
-} from "./chunk-LM3OZLZG.mjs";
+} from "./chunk-IAYRNVUC.mjs";
 import {
   PROJECT_DIR_NAME
-} from "./chunk-SHUMAVAP.mjs";
+} from "./chunk-M7UVBANQ.mjs";
 
 // src/config/global-config.ts
 import os2 from "os";
@@ -118,7 +118,7 @@ async function defaultBackendResolver() {
   if (!useKeychain) {
     return fileCredentialBackend;
   }
-  const { tryKeychainBackend } = await import("./keychain-backend-TNOPQV3Z.mjs");
+  const { tryKeychainBackend } = await import("./keychain-backend-A3MRWLPF.mjs");
   const keychain = await tryKeychainBackend();
   if (keychain.available) {
     return keychain.backend;
@@ -127,7 +127,7 @@ async function defaultBackendResolver() {
 }
 async function readCredentialBackendPreference() {
   try {
-    const { loadGlobalConfig: loadGlobalConfig2 } = await import("./global-config-WX3ZZIVU.mjs");
+    const { loadGlobalConfig: loadGlobalConfig2 } = await import("./global-config-XHL7BCKN.mjs");
     const config = await loadGlobalConfig2();
     return config.credentialBackend === "keychain";
   } catch {
@@ -223,3 +223,4 @@ export {
   loadGlobalConfig,
   saveGlobalConfig
 };
+//# sourceMappingURL=chunk-W2MDP5ZN.mjs.map

package/dist/agent-verifier/chunk-W2MDP5ZN.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/config/global-config.ts","../../src/config/credential-store.ts"],"sourcesContent":["import os from \"node:os\";\nimport path from \"node:path\";\nimport type { CredentialBackendPreference, GlobalConfig } from \"../types.js\";\nimport { PROJECT_DIR_NAME } from \"../constants.js\";\nimport { ensureDir, readJsonFile } from \"../utils/fs.js\";\nimport { atomicWriteFile } from \"../utils/atomic-file.js\";\nimport { getCredentialFilePath } from \"./credential-store.js\";\n\nfunction normalizeCredentialBackend(\n  value: unknown,\n): CredentialBackendPreference | undefined {\n  if (value === \"file\" || value === \"keychain\") return value;\n  // Tolerate unknown / malformed values rather than refusing to load the\n  // whole config - an unrecognised backend name should degrade to \"use\n  // the default\" instead of locking the user out of their CLI.\n  return undefined;\n}\n\nexport function getGlobalConfigPath(): string {\n  return path.join(os.homedir(), PROJECT_DIR_NAME, \"config.json\");\n}\n\n/**\n * Path to the on-disk credential file used by the file backend of\n * `CredentialStore`. Re-exported here to avoid circular / ad-hoc imports\n * in UI surface (`auth status`, `config show`, etc).\n */\nexport function getGlobalAuthPath(): string {\n  return getCredentialFilePath();\n}\n\n/**\n * Load non-credential CLI configuration.\n *\n * Note: this function used to also load `authToken` / `refreshToken`\n * from `auth.json` and flatten them onto `GlobalConfig`. That shape\n * enabled the refresh-token-wipe bug: `saveGlobalConfig({ ...config })`\n * without explicit auth fields erased the stored refresh token.\n *\n * Credentials are now owned exclusively by `CredentialStore`. Callers\n * that need them must import `getCredentials()` directly.\n */\nexport async function loadGlobalConfig(): Promise<GlobalConfig> {\n  const config = await readJsonFile<GlobalConfig>(getGlobalConfigPath()).catch(\n    () => ({}) as GlobalConfig,\n  );\n  return {\n    environment: config.environment,\n    credentialBackend: normalizeCredentialBackend(config.credentialBackend),\n  };\n}\n\n/**\n * Persist non-credential CLI configuration.\n *\n * This function cannot write credentials, by construction: the\n * `GlobalConfig` type has no credential fields. Credentials must be\n * persisted through `setCredentials` / `clearCredentials` from\n * `credential-store.ts`.\n */\nexport async function saveGlobalConfig(config: GlobalConfig): Promise<void> {\n  const configDir = path.join(os.homedir(), PROJECT_DIR_NAME);\n  await ensureDir(configDir);\n  const normalized: GlobalConfig = {\n    environment: config.environment,\n    credentialBackend: normalizeCredentialBackend(config.credentialBackend),\n  };\n  await atomicWriteFile(\n    getGlobalConfigPath(),\n    `${JSON.stringify(normalized, null, 2)}\\n`,\n    { mode: 0o600 },\n  );\n}\n","/**\n * Single writer for the long-lived Dreamboard session credentials.\n *\n * Design invariants (enforced at the type level and tested in\n * `credential-store.test.ts`):\n *\n * 1. This module is the ONLY place in the CLI that writes credentials to\n *    disk or the OS keychain. `global-config.ts` used to own both the\n *    config and the credentials via `saveGlobalConfig`, which made it\n *    trivial to wipe a refresh token by accident. The `GlobalConfig` type\n *    no longer carries credentials, so attempting to persist one through\n *    the config path is a type error.\n *\n * 2. The mutating surface is intentionally narrow:\n *      - `setCredentials(c)` for refreshable sessions (both tokens present)\n *      - `setAccessOnlySession(accessToken)` for the `auth set` / `config set\n *        --token` power-user path, which has no refresh token by\n *        construction\n *      - `clearCredentials()` wipes the file entirely\n *    There is no \"partial update\" API. `Credentials` requires both\n *    `accessToken` and `refreshToken`, so it is impossible to persist a\n *    half-populated refreshable session.\n *\n * 3. Writes go through `atomicWriteFile` + `withFileLock`, so a crash or\n *    interrupt during `dreamboard sync`/`compile` cannot leave `auth.json`\n *    truncated, and parallel CLI invocations cannot clobber each other's\n *    rotated refresh tokens.\n *\n * 4. The on-disk JSON shape for the file backend is kept backward\n *    compatible: we continue to read/write `authToken` + `refreshToken`\n *    so existing users are not forced to log in again after this change.\n *    A newer `accessToken` key is also accepted for read to ease any\n *    future format bump.\n *\n * 5. The file backend is the default. The OS keychain is opt-in via\n *    `credentialBackend: \"keychain\"` in `~/.dreamboard/config.json`\n *    because on macOS the first keychain write triggers a login-password\n *    prompt, and re-prompts whenever the executing Node binary's code\n *    signature changes (e.g. after an `nvm`/`volta` upgrade). Users who\n *    want encrypted-at-rest storage can opt in explicitly; everyone else\n *    gets a zero-prompt experience.\n */\n\nimport os from \"node:os\";\nimport path from \"node:path\";\nimport { promises as fs } from \"node:fs\";\nimport { PROJECT_DIR_NAME } from \"../constants.js\";\nimport {\n  atomicWriteFile,\n  withFileLock,\n  type FileLockOptions,\n} from \"../utils/atomic-file.js\";\n\n/** Fully refreshable session: both tokens required. */\nexport type Credentials = {\n  readonly accessToken: string;\n  readonly refreshToken: string;\n  readonly tokenExpiresAt?: string;\n  readonly clerkOAuthIssuer?: string;\n  readonly clerkOAuthClientId?: string;\n  readonly clerkOAuthTokenUrl?: string;\n  readonly environment?: string;\n};\n\n/**\n * Raw on-disk snapshot. Either or both fields may be present. The refresh\n * coordinator only acts on snapshots that have both tokens populated.\n */\nexport type StoredSessionSnapshot = {\n  readonly accessToken?: string;\n  readonly refreshToken?: string;\n  readonly tokenExpiresAt?: string;\n  readonly clerkOAuthIssuer?: string;\n  readonly clerkOAuthClientId?: string;\n  readonly clerkOAuthTokenUrl?: string;\n  readonly environment?: string;\n};\n\nexport type CredentialBackendName = \"file\" | \"keychain\";\n\nexport type CredentialBackend = {\n  readonly name: CredentialBackendName;\n  read(): Promise<StoredSessionSnapshot | null>;\n  writeFull(creds: Credentials): Promise<void>;\n  writeAccessOnly(accessToken: string): Promise<void>;\n  clear(): Promise<void>;\n};\n\nexport type CredentialLockOps = {\n  readonly backendName: CredentialBackendName;\n  read(): Promise<StoredSessionSnapshot | null>;\n  writeFull(creds: Credentials): Promise<void>;\n  writeAccessOnly(accessToken: string): Promise<void>;\n  clear(): Promise<void>;\n};\n\ntype DiskShape = Partial<{\n  accessToken: string;\n  authToken: string;\n  refreshToken: string;\n  tokenExpiresAt: string;\n  clerkOAuthIssuer: string;\n  clerkOAuthClientId: string;\n  clerkOAuthTokenUrl: string;\n  environment: string;\n}>;\n\nexport function getCredentialFilePath(): string {\n  return path.join(os.homedir(), PROJECT_DIR_NAME, \"auth.json\");\n}\n\nfunction getCredentialLockPath(): string {\n  return `${getCredentialFilePath()}.lock`;\n}\n\nasync function fileRead(): Promise<StoredSessionSnapshot | null> {\n  const filePath = getCredentialFilePath();\n  let data: string;\n  try {\n    data = await fs.readFile(filePath, \"utf8\");\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code === \"ENOENT\") return null;\n    throw err;\n  }\n  if (data.trim().length === 0) {\n    return null;\n  }\n  let parsed: DiskShape;\n  try {\n    parsed = JSON.parse(data) as DiskShape;\n  } catch {\n    return null;\n  }\n  const accessToken = parsed.accessToken ?? parsed.authToken;\n  const refreshToken = parsed.refreshToken;\n  if (!accessToken && !refreshToken) return null;\n  return {\n    accessToken: accessToken || undefined,\n    refreshToken: refreshToken || undefined,\n    tokenExpiresAt: parsed.tokenExpiresAt || undefined,\n    clerkOAuthIssuer: parsed.clerkOAuthIssuer || undefined,\n    clerkOAuthClientId: parsed.clerkOAuthClientId || undefined,\n    clerkOAuthTokenUrl: parsed.clerkOAuthTokenUrl || undefined,\n    environment: parsed.environment || undefined,\n  };\n}\n\nasync function writeFilePayload(payload: DiskShape): Promise<void> {\n  await atomicWriteFile(\n    getCredentialFilePath(),\n    `${JSON.stringify(payload, null, 2)}\\n`,\n    { mode: 0o600 },\n  );\n}\n\nasync function fileWriteFull(creds: Credentials): Promise<void> {\n  if (!creds.accessToken || !creds.refreshToken) {\n    throw new Error(\n      \"Refusing to persist credentials with an empty accessToken or refreshToken.\",\n    );\n  }\n  await writeFilePayload({\n    authToken: creds.accessToken,\n    refreshToken: creds.refreshToken,\n    tokenExpiresAt: creds.tokenExpiresAt,\n    clerkOAuthIssuer: creds.clerkOAuthIssuer,\n    clerkOAuthClientId: creds.clerkOAuthClientId,\n    clerkOAuthTokenUrl: creds.clerkOAuthTokenUrl,\n    environment: creds.environment,\n  });\n}\n\nasync function fileWriteAccessOnly(accessToken: string): Promise<void> {\n  if (!accessToken) {\n    throw new Error(\"Refusing to persist an empty access token.\");\n  }\n  await writeFilePayload({ authToken: accessToken });\n}\n\nasync function fileClear(): Promise<void> {\n  const filePath = getCredentialFilePath();\n  try {\n    await fs.unlink(filePath);\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code !== \"ENOENT\") throw err;\n  }\n}\n\nexport const fileCredentialBackend: CredentialBackend = {\n  name: \"file\",\n  read: fileRead,\n  writeFull: fileWriteFull,\n  writeAccessOnly: fileWriteAccessOnly,\n  clear: fileClear,\n};\n\nexport type BackendResolver = () =>\n  | CredentialBackend\n  | Promise<CredentialBackend>;\n\nlet cachedBackend: CredentialBackend | null = null;\nlet migrationCompleted = false;\nlet backendResolver: BackendResolver = defaultBackendResolver;\n\n/**\n * Default resolver precedence:\n *\n *   1. `DREAMBOARD_CREDENTIAL_BACKEND` env var (debugging / CI override).\n *        - \"file\"     -> force file\n *        - \"keychain\" -> force keychain (falls back to file if the native\n *                        module or the OS keyring is unavailable)\n *        - \"auto\"     -> same as unset (use config)\n *        - unknown    -> throw so typos fail loud\n *   2. `credentialBackend` in `~/.dreamboard/config.json`.\n *        - \"keychain\" -> opt in to the OS keychain (with file fallback)\n *        - \"file\" / unset / malformed -> file\n *   3. Default: file backend.\n *\n * Keychain is opt-in because on macOS the OS login-keychain prompts for\n * the user's password the first time a new binary tries to write to an\n * item, and re-prompts whenever the Node binary signature changes. We\n * would rather ship a zero-prompt default and let users who care about\n * encrypted-at-rest storage enable it.\n *\n * The resolver is async because the keychain probe requires a dynamic\n * `@napi-rs/keyring` import.\n */\nasync function defaultBackendResolver(): Promise<CredentialBackend> {\n  const override = (process.env.DREAMBOARD_CREDENTIAL_BACKEND ?? \"\")\n    .trim()\n    .toLowerCase();\n  if (override === \"file\") {\n    return fileCredentialBackend;\n  }\n  if (override && override !== \"keychain\" && override !== \"auto\") {\n    // Fail loud on typos rather than silently falling back: this env\n    // var exists specifically for users who are debugging auth issues\n    // and need to know their override took effect.\n    throw new Error(\n      `Unknown DREAMBOARD_CREDENTIAL_BACKEND value \"${override}\" (expected \"file\", \"keychain\", or \"auto\").`,\n    );\n  }\n\n  const useKeychain =\n    override === \"keychain\" || (await readCredentialBackendPreference());\n  if (!useKeychain) {\n    return fileCredentialBackend;\n  }\n\n  const { tryKeychainBackend } = await import(\"./keychain-backend.js\");\n  const keychain = await tryKeychainBackend();\n  if (keychain.available) {\n    return keychain.backend;\n  }\n  // The user explicitly asked for keychain but the platform can't\n  // provide one (no libsecret on Linux, missing native module, etc).\n  // Silently degrade to the file backend so the CLI stays usable; the\n  // active backend is still visible through `dreamboard auth status`.\n  return fileCredentialBackend;\n}\n\nasync function readCredentialBackendPreference(): Promise<boolean> {\n  try {\n    // Dynamic import to avoid a top-level cycle with `global-config.ts`\n    // (which imports `getCredentialFilePath` from this module). Using\n    // the async path keeps the cycle purely lazy.\n    const { loadGlobalConfig } = await import(\"./global-config.js\");\n    const config = await loadGlobalConfig();\n    return config.credentialBackend === \"keychain\";\n  } catch {\n    // If the config file is unreadable or the dynamic import fails\n    // (e.g. during early bootstrap), fall back to the file-backed\n    // default rather than crashing credential lookups.\n    return false;\n  }\n}\n\n/**\n * Override which backend is used. Tests use this to inject in-memory\n * backends; production code uses the default keychain-first resolver.\n */\nexport function setCredentialBackendResolver(resolver: BackendResolver): void {\n  backendResolver = resolver;\n  cachedBackend = null;\n  migrationCompleted = false;\n}\n\nexport async function getCredentialBackend(): Promise<CredentialBackend> {\n  if (cachedBackend === null) {\n    cachedBackend = await backendResolver();\n    // One-time migration: if we resolved to a non-file backend and\n    // `auth.json` still has credentials from the old layout, copy them\n    // over and remove the file. We only do this when the new backend is\n    // empty, so repeated migrations cannot stomp a newer keychain\n    // session with a stale file session.\n    if (!migrationCompleted && cachedBackend.name !== \"file\") {\n      await migrateFromFileBackendIfNeeded(cachedBackend);\n    }\n    migrationCompleted = true;\n  }\n  return cachedBackend;\n}\n\nasync function migrateFromFileBackendIfNeeded(\n  target: CredentialBackend,\n): Promise<void> {\n  try {\n    const [onDisk, onTarget] = await Promise.all([\n      fileCredentialBackend.read(),\n      target.read(),\n    ]);\n    if (!onDisk) return;\n    if (onTarget) {\n      // Target already has a session - the user has already migrated.\n      // Remove the file so it cannot get re-used accidentally.\n      await fileCredentialBackend.clear();\n      return;\n    }\n    if (onDisk.accessToken && onDisk.refreshToken) {\n      await target.writeFull({\n        accessToken: onDisk.accessToken,\n        refreshToken: onDisk.refreshToken,\n      });\n    } else if (onDisk.accessToken) {\n      await target.writeAccessOnly(onDisk.accessToken);\n    } else {\n      return;\n    }\n    await fileCredentialBackend.clear();\n  } catch {\n    // Migration is best-effort. A failure here should not block CLI\n    // operation; on next run the file backend is still consulted\n    // directly because the keychain backend's `read` returns null and\n    // callers fall through to \"missing session\" → login prompt.\n  }\n}\n\nexport async function getActiveCredentialBackendName(): Promise<CredentialBackendName> {\n  const backend = await getCredentialBackend();\n  return backend.name;\n}\n\n/** Loose read: returns whatever is on disk, including access-only sessions. */\nexport async function getStoredSession(): Promise<StoredSessionSnapshot | null> {\n  const backend = await getCredentialBackend();\n  return backend.read();\n}\n\n/** Strict read: returns a refreshable pair, or null if either token is missing. */\nexport async function getCredentials(): Promise<Credentials | null> {\n  const snapshot = await getStoredSession();\n  if (!snapshot) return null;\n  const { accessToken, refreshToken } = snapshot;\n  if (!accessToken || !refreshToken) return null;\n  return { accessToken, refreshToken };\n}\n\nexport async function setCredentials(creds: Credentials): Promise<void> {\n  await withFileLock(getCredentialLockPath(), async () => {\n    const backend = await getCredentialBackend();\n    await backend.writeFull(creds);\n  });\n}\n\nexport async function setAccessOnlySession(accessToken: string): Promise<void> {\n  await withFileLock(getCredentialLockPath(), async () => {\n    const backend = await getCredentialBackend();\n    await backend.writeAccessOnly(accessToken);\n  });\n}\n\nexport async function clearCredentials(): Promise<void> {\n  await withFileLock(getCredentialLockPath(), async () => {\n    const backend = await getCredentialBackend();\n    await backend.clear();\n  });\n}\n\n/**\n * Run `fn` while holding the cross-process credential lock. `fn` receives\n * an ops handle that reads/writes the active backend without re-acquiring\n * the lock (avoiding deadlock).\n *\n * This is the only correct way to perform a read-modify-write on stored\n * credentials (e.g. CLI refresh rotation) in the presence of\n * concurrent CLI invocations.\n */\nexport async function withCredentialLock<T>(\n  fn: (ops: CredentialLockOps) => Promise<T>,\n  options?: FileLockOptions,\n): Promise<T> {\n  return withFileLock(\n    getCredentialLockPath(),\n    async () => {\n      const backend = await getCredentialBackend();\n      const ops: CredentialLockOps = {\n        backendName: backend.name,\n        read: () => backend.read(),\n        writeFull: (creds) => backend.writeFull(creds),\n        writeAccessOnly: (accessToken) => backend.writeAccessOnly(accessToken),\n        clear: () => backend.clear(),\n      };\n      return fn(ops);\n    },\n    options,\n  );\n}\n\n/** Test-only reset of module state. Not exported through the barrel. */\nexport function _resetCredentialStoreForTests(): void {\n  cachedBackend = null;\n  migrationCompleted = false;\n  backendResolver = defaultBackendResolver;\n}\n"],"mappings":";;;;;;;;;;;;;;AAAA,OAAOA,SAAQ;AACf,OAAOC,WAAU;;;AC0CjB,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,SAAS,YAAY,UAAU;AA8DxB,SAAS,wBAAgC;AAC9C,SAAO,KAAK,KAAK,GAAG,QAAQ,GAAG,kBAAkB,WAAW;AAC9D;AAEA,SAAS,wBAAgC;AACvC,SAAO,GAAG,sBAAsB,CAAC;AACnC;AAEA,eAAe,WAAkD;AAC/D,QAAM,WAAW,sBAAsB;AACvC,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,GAAG,SAAS,UAAU,MAAM;AAAA,EAC3C,SAAS,KAAK;AACZ,QAAK,IAA8B,SAAS,SAAU,QAAO;AAC7D,UAAM;AAAA,EACR;AACA,MAAI,KAAK,KAAK,EAAE,WAAW,GAAG;AAC5B,WAAO;AAAA,EACT;AACA,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,IAAI;AAAA,EAC1B,QAAQ;AACN,WAAO;AAAA,EACT;AACA,QAAM,cAAc,OAAO,eAAe,OAAO;AACjD,QAAM,eAAe,OAAO;AAC5B,MAAI,CAAC,eAAe,CAAC,aAAc,QAAO;AAC1C,SAAO;AAAA,IACL,aAAa,eAAe;AAAA,IAC5B,cAAc,gBAAgB;AAAA,IAC9B,gBAAgB,OAAO,kBAAkB;AAAA,IACzC,kBAAkB,OAAO,oBAAoB;AAAA,IAC7C,oBAAoB,OAAO,sBAAsB;AAAA,IACjD,oBAAoB,OAAO,sBAAsB;AAAA,IACjD,aAAa,OAAO,eAAe;AAAA,EACrC;AACF;AAEA,eAAe,iBAAiB,SAAmC;AACjE,QAAM;AAAA,IACJ,sBAAsB;AAAA,IACtB,GAAG,KAAK,UAAU,SAAS,MAAM,CAAC,CAAC;AAAA;AAAA,IACnC,EAAE,MAAM,IAAM;AAAA,EAChB;AACF;AAEA,eAAe,cAAc,OAAmC;AAC9D,MAAI,CAAC,MAAM,eAAe,CAAC,MAAM,cAAc;AAC7C,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,QAAM,iBAAiB;AAAA,IACrB,WAAW,MAAM;AAAA,IACjB,cAAc,MAAM;AAAA,IACpB,gBAAgB,MAAM;AAAA,IACtB,kBAAkB,MAAM;AAAA,IACxB,oBAAoB,MAAM;AAAA,IAC1B,oBAAoB,MAAM;AAAA,IAC1B,aAAa,MAAM;AAAA,EACrB,CAAC;AACH;AAEA,eAAe,oBAAoB,aAAoC;AACrE,MAAI,CAAC,aAAa;AAChB,UAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D;AACA,QAAM,iBAAiB,EAAE,WAAW,YAAY,CAAC;AACnD;AAEA,eAAe,YAA2B;AACxC,QAAM,WAAW,sBAAsB;AACvC,MAAI;AACF,UAAM,GAAG,OAAO,QAAQ;AAAA,EAC1B,SAAS,KAAK;AACZ,QAAK,IAA8B,SAAS,SAAU,OAAM;AAAA,EAC9D;AACF;AAEO,IAAM,wBAA2C;AAAA,EACtD,MAAM;AAAA,EACN,MAAM;AAAA,EACN,WAAW;AAAA,EACX,iBAAiB;AAAA,EACjB,OAAO;AACT;AAMA,IAAI,gBAA0C;AAC9C,IAAI,qBAAqB;AACzB,IAAI,kBAAmC;AAyBvC,eAAe,yBAAqD;AAClE,QAAM,YAAY,QAAQ,IAAI,iCAAiC,IAC5D,KAAK,EACL,YAAY;AACf,MAAI,aAAa,QAAQ;AACvB,WAAO;AAAA,EACT;AACA,MAAI,YAAY,aAAa,cAAc,aAAa,QAAQ;AAI9D,UAAM,IAAI;AAAA,MACR,gDAAgD,QAAQ;AAAA,IAC1D;AAAA,EACF;AAEA,QAAM,cACJ,aAAa,cAAe,MAAM,gCAAgC;AACpE,MAAI,CAAC,aAAa;AAChB,WAAO;AAAA,EACT;AAEA,QAAM,EAAE,mBAAmB,IAAI,MAAM,OAAO,iCAAuB;AACnE,QAAM,WAAW,MAAM,mBAAmB;AAC1C,MAAI,SAAS,WAAW;AACtB,WAAO,SAAS;AAAA,EAClB;AAKA,SAAO;AACT;AAEA,eAAe,kCAAoD;AACjE,MAAI;AAIF,UAAM,EAAE,kBAAAC,kBAAiB,IAAI,MAAM,OAAO,8BAAoB;AAC9D,UAAM,SAAS,MAAMA,kBAAiB;AACtC,WAAO,OAAO,sBAAsB;AAAA,EACtC,QAAQ;AAIN,WAAO;AAAA,EACT;AACF;AAYA,eAAsB,uBAAmD;AACvE,MAAI,kBAAkB,MAAM;AAC1B,oBAAgB,MAAM,gBAAgB;AAMtC,QAAI,CAAC,sBAAsB,cAAc,SAAS,QAAQ;AACxD,YAAM,+BAA+B,aAAa;AAAA,IACpD;AACA,yBAAqB;AAAA,EACvB;AACA,SAAO;AACT;AAEA,eAAe,+BACb,QACe;AACf,MAAI;AACF,UAAM,CAAC,QAAQ,QAAQ,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC3C,sBAAsB,KAAK;AAAA,MAC3B,OAAO,KAAK;AAAA,IACd,CAAC;AACD,QAAI,CAAC,OAAQ;AACb,QAAI,UAAU;AAGZ,YAAM,sBAAsB,MAAM;AAClC;AAAA,IACF;AACA,QAAI,OAAO,eAAe,OAAO,cAAc;AAC7C,YAAM,OAAO,UAAU;AAAA,QACrB,aAAa,OAAO;AAAA,QACpB,cAAc,OAAO;AAAA,MACvB,CAAC;AAAA,IACH,WAAW,OAAO,aAAa;AAC7B,YAAM,OAAO,gBAAgB,OAAO,WAAW;AAAA,IACjD,OAAO;AACL;AAAA,IACF;AACA,UAAM,sBAAsB,MAAM;AAAA,EACpC,QAAQ;AAAA,EAKR;AACF;AAQA,eAAsB,mBAA0D;AAC9E,QAAM,UAAU,MAAM,qBAAqB;AAC3C,SAAO,QAAQ,KAAK;AACtB;AAWA,eAAsB,eAAe,OAAmC;AACtE,QAAM,aAAa,sBAAsB,GAAG,YAAY;AACtD,UAAM,UAAU,MAAM,qBAAqB;AAC3C,UAAM,QAAQ,UAAU,KAAK;AAAA,EAC/B,CAAC;AACH;;;ADlWA,SAAS,2BACP,OACyC;AACzC,MAAI,UAAU,UAAU,UAAU,WAAY,QAAO;AAIrD,SAAO;AACT;AAEO,SAAS,sBAA8B;AAC5C,SAAOC,MAAK,KAAKC,IAAG,QAAQ,GAAG,kBAAkB,aAAa;AAChE;AAOO,SAAS,oBAA4B;AAC1C,SAAO,sBAAsB;AAC/B;AAaA,eAAsB,mBAA0C;AAC9D,QAAM,SAAS,MAAM,aAA2B,oBAAoB,CAAC,EAAE;AAAA,IACrE,OAAO,CAAC;AAAA,EACV;AACA,SAAO;AAAA,IACL,aAAa,OAAO;AAAA,IACpB,mBAAmB,2BAA2B,OAAO,iBAAiB;AAAA,EACxE;AACF;AAUA,eAAsB,iBAAiB,QAAqC;AAC1E,QAAM,YAAYD,MAAK,KAAKC,IAAG,QAAQ,GAAG,gBAAgB;AAC1D,QAAM,UAAU,SAAS;AACzB,QAAM,aAA2B;AAAA,IAC/B,aAAa,OAAO;AAAA,IACpB,mBAAmB,2BAA2B,OAAO,iBAAiB;AAAA,EACxE;AACA,QAAM;AAAA,IACJ,oBAAoB;AAAA,IACpB,GAAG,KAAK,UAAU,YAAY,MAAM,CAAC,CAAC;AAAA;AAAA,IACtC,EAAE,MAAM,IAAM;AAAA,EAChB;AACF;","names":["os","path","loadGlobalConfig","path","os"]}

package/dist/agent-verifier/{chunk-CEDUHGNH.mjs → chunk-XKCJBIRY.mjs}

@@ -2,7 +2,7 @@
 import {
   createRepoLocalPackageResolutionPlugin,
   resolveCliRepoRoot
-} from "./chunk-6UUJEYDV.mjs";
+} from "./chunk-QBAF7EYR.mjs";
 
 // src/utils/ts-module-loader.ts
 import { mkdtemp, rm, writeFile } from "fs/promises";
@@ -72,3 +72,4 @@ export {
   bundleTypeScriptModuleText,
   importTypeScriptModule
 };
+//# sourceMappingURL=chunk-XKCJBIRY.mjs.map

package/dist/agent-verifier/chunk-XKCJBIRY.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utils/ts-module-loader.ts"],"sourcesContent":["import { mkdtemp, rm, writeFile } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport path from \"node:path\";\nimport { pathToFileURL } from \"node:url\";\nimport { build } from \"esbuild\";\nimport { resolveCliRepoRoot } from \"./repo-root.js\";\nimport { createRepoLocalPackageResolutionPlugin } from \"./repo-local-package-resolution.js\";\n\nconst ESBUILD_EXTERNALS = [\n  \"playwright\",\n  \"playwright-core\",\n  \"chromium-bidi\",\n  \"electron\",\n];\n\nfunction resolveSourceCheckoutBuildContext(): {\n  nodePaths: string[];\n  plugins: ReturnType<typeof createRepoLocalPackageResolutionPlugin>[];\n} {\n  try {\n    const repoRoot = resolveCliRepoRoot(import.meta.url);\n    return {\n      nodePaths: [\n        path.join(repoRoot, \"apps\", \"dreamboard-cli\", \"node_modules\"),\n        path.join(repoRoot, \"node_modules\"),\n      ],\n      plugins: [createRepoLocalPackageResolutionPlugin({ repoRoot })],\n    };\n  } catch {\n    return {\n      nodePaths: [path.join(process.cwd(), \"node_modules\")],\n      plugins: [],\n    };\n  }\n}\n\nexport async function bundleTypeScriptModuleText(\n  entryPath: string,\n  options: { external?: readonly string[] } = {},\n): Promise<string> {\n  const sourceCheckoutContext = resolveSourceCheckoutBuildContext();\n  const result = await build({\n    entryPoints: [entryPath],\n    bundle: true,\n    format: \"esm\",\n    platform: \"node\",\n    target: \"node24\",\n    sourcemap: \"inline\",\n    external: [...ESBUILD_EXTERNALS, ...(options.external ?? [])],\n    nodePaths: sourceCheckoutContext.nodePaths,\n    plugins: sourceCheckoutContext.plugins,\n    write: false,\n  });\n\n  const output = result.outputFiles?.[0];\n  if (!output) {\n    throw new Error(`Failed to bundle TypeScript module '${entryPath}'.`);\n  }\n  return output.text;\n}\n\nexport async function importTypeScriptModule<T>(entryPath: string): Promise<T> {\n  const tempDir = await mkdtemp(path.join(tmpdir(), \"dreamboard-ts-module-\"));\n  const outfile = path.join(\n    tempDir,\n    `${path.basename(entryPath).replace(/\\.[^.]+$/u, \"\")}.mjs`,\n  );\n\n  try {\n    const bundledText = await bundleTypeScriptModuleText(entryPath);\n    await writeFile(outfile, bundledText);\n\n    return (await import(pathToFileURL(outfile).href)) as T;\n  } finally {\n    await rm(tempDir, { recursive: true, force: true });\n  }\n}\n"],"mappings":";;;;;;;AAAA,SAAS,SAAS,IAAI,iBAAiB;AACvC,SAAS,cAAc;AACvB,OAAO,UAAU;AACjB,SAAS,qBAAqB;AAC9B,SAAS,aAAa;AAItB,IAAM,oBAAoB;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,SAAS,oCAGP;AACA,MAAI;AACF,UAAM,WAAW,mBAAmB,YAAY,GAAG;AACnD,WAAO;AAAA,MACL,WAAW;AAAA,QACT,KAAK,KAAK,UAAU,QAAQ,kBAAkB,cAAc;AAAA,QAC5D,KAAK,KAAK,UAAU,cAAc;AAAA,MACpC;AAAA,MACA,SAAS,CAAC,uCAAuC,EAAE,SAAS,CAAC,CAAC;AAAA,IAChE;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,MACL,WAAW,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,cAAc,CAAC;AAAA,MACpD,SAAS,CAAC;AAAA,IACZ;AAAA,EACF;AACF;AAEA,eAAsB,2BACpB,WACA,UAA4C,CAAC,GAC5B;AACjB,QAAM,wBAAwB,kCAAkC;AAChE,QAAM,SAAS,MAAM,MAAM;AAAA,IACzB,aAAa,CAAC,SAAS;AAAA,IACvB,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,WAAW;AAAA,IACX,UAAU,CAAC,GAAG,mBAAmB,GAAI,QAAQ,YAAY,CAAC,CAAE;AAAA,IAC5D,WAAW,sBAAsB;AAAA,IACjC,SAAS,sBAAsB;AAAA,IAC/B,OAAO;AAAA,EACT,CAAC;AAED,QAAM,SAAS,OAAO,cAAc,CAAC;AACrC,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,uCAAuC,SAAS,IAAI;AAAA,EACtE;AACA,SAAO,OAAO;AAChB;AAEA,eAAsB,uBAA0B,WAA+B;AAC7E,QAAM,UAAU,MAAM,QAAQ,KAAK,KAAK,OAAO,GAAG,uBAAuB,CAAC;AAC1E,QAAM,UAAU,KAAK;AAAA,IACnB;AAAA,IACA,GAAG,KAAK,SAAS,SAAS,EAAE,QAAQ,aAAa,EAAE,CAAC;AAAA,EACtD;AAEA,MAAI;AACF,UAAM,cAAc,MAAM,2BAA2B,SAAS;AAC9D,UAAM,UAAU,SAAS,WAAW;AAEpC,WAAQ,MAAM,OAAO,cAAc,OAAO,EAAE;AAAA,EAC9C,UAAE;AACA,UAAM,GAAG,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EACpD;AACF;","names":[]}

package/dist/agent-verifier/{chunk-VYJTHSYR.mjs → chunk-YDIOW2BO.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   importTypeScriptModule
-} from "./chunk-CEDUHGNH.mjs";
+} from "./chunk-XKCJBIRY.mjs";
 
 // src/services/project/reducer-contract-preflight.ts
 import path from "path";
@@ -42,3 +42,4 @@ async function assertReducerContractPreflight(projectRoot) {
 export {
   assertReducerContractPreflight
 };
+//# sourceMappingURL=chunk-YDIOW2BO.mjs.map

package/dist/agent-verifier/chunk-YDIOW2BO.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/services/project/reducer-contract-preflight.ts"],"sourcesContent":["import path from \"node:path\";\nimport { importTypeScriptModule } from \"../../utils/ts-module-loader.js\";\n\nconst GAME_CONTRACT_ENTRY_PATH = path.join(\"app\", \"game-contract.ts\");\n\nfunction normalizeErrorMessage(error: unknown): string {\n  const rawMessage =\n    error instanceof Error ? error.message : String(error ?? \"Unknown error\");\n  return (\n    rawMessage\n      .split(\"\\n\")\n      .map((line) => line.trim())\n      .find(Boolean)\n      ?.replace(/^Error:\\s*/u, \"\") ?? \"Unknown error\"\n  );\n}\n\nfunction isManifestScopedIdBrandingError(message: string): boolean {\n  return (\n    message.includes(\"defineGameContract:\") &&\n    message.includes(\"manifest-scoped\") &&\n    (message.includes(\"uses a raw z.string()\") ||\n      message.includes(\"uses z.array(z.string())\"))\n  );\n}\n\nexport async function assertReducerContractPreflight(\n  projectRoot: string,\n): Promise<void> {\n  const entryPath = path.join(projectRoot, GAME_CONTRACT_ENTRY_PATH);\n\n  try {\n    await importTypeScriptModule(entryPath);\n  } catch (error) {\n    const message = normalizeErrorMessage(error);\n    if (isManifestScopedIdBrandingError(message)) {\n      throw new Error(\n        [\n          `Dreamboard could not validate \\`${GAME_CONTRACT_ENTRY_PATH}\\` during \\`dreamboard sync\\`.`,\n          \"This happens because a state field name looks like a manifest-scoped id, but the schema uses a plain string instead of the manifest-backed id schema.\",\n          \"Workaround: use `gameContract.schemas.<id>` (or `manifest.ids.<id>`) for manifest ids. If the field is intentionally free-form text, rename it so it does not look like a manifest id field.\",\n          `Original error: ${message}`,\n        ].join(\" \"),\n      );\n    }\n\n    throw new Error(\n      [\n        `Dreamboard could not validate \\`${GAME_CONTRACT_ENTRY_PATH}\\` during \\`dreamboard sync\\`.`,\n        \"Fix the authored reducer contract module so it can be imported locally, then run `dreamboard sync` again.\",\n        `Original error: ${message}`,\n      ].join(\" \"),\n    );\n  }\n}\n"],"mappings":";;;;;;AAAA,OAAO,UAAU;AAGjB,IAAM,2BAA2B,KAAK,KAAK,OAAO,kBAAkB;AAEpE,SAAS,sBAAsB,OAAwB;AACrD,QAAM,aACJ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,SAAS,eAAe;AAC1E,SACE,WACG,MAAM,IAAI,EACV,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,KAAK,OAAO,GACX,QAAQ,eAAe,EAAE,KAAK;AAEtC;AAEA,SAAS,gCAAgC,SAA0B;AACjE,SACE,QAAQ,SAAS,qBAAqB,KACtC,QAAQ,SAAS,iBAAiB,MACjC,QAAQ,SAAS,uBAAuB,KACvC,QAAQ,SAAS,0BAA0B;AAEjD;AAEA,eAAsB,+BACpB,aACe;AACf,QAAM,YAAY,KAAK,KAAK,aAAa,wBAAwB;AAEjE,MAAI;AACF,UAAM,uBAAuB,SAAS;AAAA,EACxC,SAAS,OAAO;AACd,UAAM,UAAU,sBAAsB,KAAK;AAC3C,QAAI,gCAAgC,OAAO,GAAG;AAC5C,YAAM,IAAI;AAAA,QACR;AAAA,UACE,mCAAmC,wBAAwB;AAAA,UAC3D;AAAA,UACA;AAAA,UACA,mBAAmB,OAAO;AAAA,QAC5B,EAAE,KAAK,GAAG;AAAA,MACZ;AAAA,IACF;AAEA,UAAM,IAAI;AAAA,MACR;AAAA,QACE,mCAAmC,wBAAwB;AAAA,QAC3D;AAAA,QACA,mBAAmB,OAAO;AAAA,MAC5B,EAAE,KAAK,GAAG;AAAA,IACZ;AAAA,EACF;AACF;","names":[]}

package/dist/agent-verifier/{chunk-MRCUP5SW.mjs → chunk-YE7UAO3T.mjs}

@@ -126,3 +126,4 @@ export {
   updateProjectLocalMaintainerRegistry,
   sanitizeProjectLocalMaintainerRegistry
 };
+//# sourceMappingURL=chunk-YE7UAO3T.mjs.map

package/dist/agent-verifier/chunk-YE7UAO3T.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/services/project/project-state.ts"],"sourcesContent":["import type {\n  LocalMaintainerRegistryConfig,\n  LocalMaintainerRegistryPackages,\n  LocalMaintainerSdkPackageName,\n  ProjectAuthoringState,\n  ProjectCompileAttempt,\n  ProjectCompileState,\n  ProjectConfig,\n  ProjectPendingAuthoringSync,\n} from \"../../types.js\";\n\nconst LOCAL_MAINTAINER_SDK_PACKAGE_NAMES = [\n  \"@dreamboard-games/api-client\",\n  \"@dreamboard-games/sdk\",\n] as const satisfies readonly LocalMaintainerSdkPackageName[];\n\nexport function getProjectAuthoringState(\n  projectConfig: ProjectConfig,\n): ProjectAuthoringState {\n  return projectConfig.authoring ?? {};\n}\n\nexport function getProjectPendingAuthoringSync(\n  projectConfig: ProjectConfig,\n): ProjectPendingAuthoringSync | undefined {\n  return getProjectAuthoringState(projectConfig).pendingSync;\n}\n\nexport function getProjectCompileState(\n  projectConfig: ProjectConfig,\n): ProjectCompileState {\n  return projectConfig.compile ?? {};\n}\n\nexport function getProjectLocalMaintainerRegistry(\n  projectConfig: ProjectConfig,\n): LocalMaintainerRegistryConfig | undefined {\n  return projectConfig.localMaintainerRegistry;\n}\n\nexport function updateProjectAuthoringState(\n  projectConfig: ProjectConfig,\n  authoring: ProjectAuthoringState,\n): ProjectConfig {\n  return {\n    ...projectConfig,\n    authoring: {\n      ...getProjectAuthoringState(projectConfig),\n      ...authoring,\n    },\n  };\n}\n\nexport function setProjectPendingAuthoringSync(\n  projectConfig: ProjectConfig,\n  pendingSync: ProjectPendingAuthoringSync,\n): ProjectConfig {\n  return updateProjectAuthoringState(projectConfig, {\n    pendingSync,\n  });\n}\n\nexport function clearProjectPendingAuthoringSync(\n  projectConfig: ProjectConfig,\n): ProjectConfig {\n  const authoring = getProjectAuthoringState(projectConfig);\n  if (!authoring.pendingSync) {\n    return projectConfig;\n  }\n\n  const { pendingSync: _pendingSync, ...rest } = authoring;\n  return {\n    ...projectConfig,\n    authoring: rest,\n  };\n}\n\nexport function finalizeProjectPendingAuthoringSync(\n  projectConfig: ProjectConfig,\n): ProjectConfig {\n  const authoring = getProjectAuthoringState(projectConfig);\n  const pendingSync = authoring.pendingSync;\n  if (!pendingSync) {\n    return projectConfig;\n  }\n\n  return updateProjectAuthoringState(\n    clearProjectPendingAuthoringSync(projectConfig),\n    {\n      authoringStateId:\n        pendingSync.phase === \"authoring_state_created\"\n          ? pendingSync.authoringStateId\n          : authoring.authoringStateId,\n      revisionDigest: pendingSync.revisionDigest ?? authoring.revisionDigest,\n      sourceRevisionId: pendingSync.sourceRevisionId,\n      sourceTreeHash: pendingSync.sourceTreeHash,\n      manifestId: pendingSync.manifestId,\n      manifestContentHash: pendingSync.manifestContentHash,\n      localManifestContentHash: pendingSync.localManifestContentHash,\n      ruleId: pendingSync.ruleId,\n    },\n  );\n}\n\nexport function updateProjectCompileState(\n  projectConfig: ProjectConfig,\n  compile: ProjectCompileState,\n): ProjectConfig {\n  return {\n    ...projectConfig,\n    compile: {\n      ...getProjectCompileState(projectConfig),\n      ...compile,\n    },\n  };\n}\n\nexport function setLatestCompileAttempt(\n  projectConfig: ProjectConfig,\n  attempt: ProjectCompileAttempt,\n): ProjectConfig {\n  return updateProjectCompileState(projectConfig, {\n    ...getProjectCompileState(projectConfig),\n    latestAttempt: attempt,\n    latestSuccessful:\n      attempt.status === \"successful\" && attempt.resultId\n        ? {\n            resultId: attempt.resultId,\n            authoringStateId: attempt.authoringStateId,\n            revisionDigest: attempt.revisionDigest,\n          }\n        : getProjectCompileState(projectConfig).latestSuccessful,\n  });\n}\n\nexport function clearProjectCompileState(\n  projectConfig: ProjectConfig,\n): ProjectConfig {\n  return {\n    ...projectConfig,\n    compile: {},\n  };\n}\n\nexport function updateProjectLocalMaintainerRegistry(\n  projectConfig: ProjectConfig,\n  localMaintainerRegistry: LocalMaintainerRegistryConfig | undefined,\n): ProjectConfig {\n  return {\n    ...projectConfig,\n    localMaintainerRegistry: sanitizeProjectLocalMaintainerRegistry(\n      localMaintainerRegistry,\n    ),\n  };\n}\n\nexport function sanitizeProjectLocalMaintainerRegistry(\n  localMaintainerRegistry: LocalMaintainerRegistryConfig | undefined,\n): LocalMaintainerRegistryConfig | undefined {\n  if (!localMaintainerRegistry) return undefined;\n\n  const packages: Partial<LocalMaintainerRegistryPackages> = {};\n  for (const packageName of LOCAL_MAINTAINER_SDK_PACKAGE_NAMES) {\n    const version = localMaintainerRegistry.packages[packageName];\n    if (version) {\n      packages[packageName] = version;\n    }\n  }\n\n  return {\n    ...localMaintainerRegistry,\n    packages: packages as LocalMaintainerRegistryPackages,\n  };\n}\n"],"mappings":";;;AAWA,IAAM,qCAAqC;AAAA,EACzC;AAAA,EACA;AACF;AAEO,SAAS,yBACd,eACuB;AACvB,SAAO,cAAc,aAAa,CAAC;AACrC;AAEO,SAAS,+BACd,eACyC;AACzC,SAAO,yBAAyB,aAAa,EAAE;AACjD;AAEO,SAAS,uBACd,eACqB;AACrB,SAAO,cAAc,WAAW,CAAC;AACnC;AAEO,SAAS,kCACd,eAC2C;AAC3C,SAAO,cAAc;AACvB;AAEO,SAAS,4BACd,eACA,WACe;AACf,SAAO;AAAA,IACL,GAAG;AAAA,IACH,WAAW;AAAA,MACT,GAAG,yBAAyB,aAAa;AAAA,MACzC,GAAG;AAAA,IACL;AAAA,EACF;AACF;AAEO,SAAS,+BACd,eACA,aACe;AACf,SAAO,4BAA4B,eAAe;AAAA,IAChD;AAAA,EACF,CAAC;AACH;AAEO,SAAS,iCACd,eACe;AACf,QAAM,YAAY,yBAAyB,aAAa;AACxD,MAAI,CAAC,UAAU,aAAa;AAC1B,WAAO;AAAA,EACT;AAEA,QAAM,EAAE,aAAa,cAAc,GAAG,KAAK,IAAI;AAC/C,SAAO;AAAA,IACL,GAAG;AAAA,IACH,WAAW;AAAA,EACb;AACF;AAEO,SAAS,oCACd,eACe;AACf,QAAM,YAAY,yBAAyB,aAAa;AACxD,QAAM,cAAc,UAAU;AAC9B,MAAI,CAAC,aAAa;AAChB,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,iCAAiC,aAAa;AAAA,IAC9C;AAAA,MACE,kBACE,YAAY,UAAU,4BAClB,YAAY,mBACZ,UAAU;AAAA,MAChB,gBAAgB,YAAY,kBAAkB,UAAU;AAAA,MACxD,kBAAkB,YAAY;AAAA,MAC9B,gBAAgB,YAAY;AAAA,MAC5B,YAAY,YAAY;AAAA,MACxB,qBAAqB,YAAY;AAAA,MACjC,0BAA0B,YAAY;AAAA,MACtC,QAAQ,YAAY;AAAA,IACtB;AAAA,EACF;AACF;AAEO,SAAS,0BACd,eACA,SACe;AACf,SAAO;AAAA,IACL,GAAG;AAAA,IACH,SAAS;AAAA,MACP,GAAG,uBAAuB,aAAa;AAAA,MACvC,GAAG;AAAA,IACL;AAAA,EACF;AACF;AAEO,SAAS,wBACd,eACA,SACe;AACf,SAAO,0BAA0B,eAAe;AAAA,IAC9C,GAAG,uBAAuB,aAAa;AAAA,IACvC,eAAe;AAAA,IACf,kBACE,QAAQ,WAAW,gBAAgB,QAAQ,WACvC;AAAA,MACE,UAAU,QAAQ;AAAA,MAClB,kBAAkB,QAAQ;AAAA,MAC1B,gBAAgB,QAAQ;AAAA,IAC1B,IACA,uBAAuB,aAAa,EAAE;AAAA,EAC9C,CAAC;AACH;AAEO,SAAS,yBACd,eACe;AACf,SAAO;AAAA,IACL,GAAG;AAAA,IACH,SAAS,CAAC;AAAA,EACZ;AACF;AAEO,SAAS,qCACd,eACA,yBACe;AACf,SAAO;AAAA,IACL,GAAG;AAAA,IACH,yBAAyB;AAAA,MACvB;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,uCACd,yBAC2C;AAC3C,MAAI,CAAC,wBAAyB,QAAO;AAErC,QAAM,WAAqD,CAAC;AAC5D,aAAW,eAAe,oCAAoC;AAC5D,UAAM,UAAU,wBAAwB,SAAS,WAAW;AAC5D,QAAI,SAAS;AACX,eAAS,WAAW,IAAI;AAAA,IAC1B;AAAA,EACF;AAEA,SAAO;AAAA,IACL,GAAG;AAAA,IACH;AAAA,EACF;AACF;","names":[]}