@empire-builder-kit/nx 1.0.0-beta.4

package/src/blueprints/transitions.d.ts

@@ -0,0 +1,20 @@
+import type { BlueprintManifest, BlueprintMigrationDeclaration } from './manifest.js';
+export interface BlueprintIdentity {
+    name: string;
+    version: string;
+}
+export type BlueprintTransitionResult = {
+    compatibilityLine: string;
+    kind: 'compatible';
+} | {
+    compatibilityLine: string;
+    kind: 'manual-succession';
+    migration: BlueprintMigrationDeclaration;
+} | {
+    availableMigrations: BlueprintMigrationDeclaration[];
+    compatibilityLine: string;
+    kind: 'blocked';
+    reason: 'ambiguous-migrations' | 'blueprint-identity-change' | 'source-range-mismatch' | 'undeclared';
+};
+export declare function blueprintCompatibilityLine(version: string): string;
+export declare function classifyBlueprintTransition(current: BlueprintIdentity, target: BlueprintManifest): BlueprintTransitionResult;

package/src/blueprints/transitions.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.blueprintCompatibilityLine = blueprintCompatibilityLine;
+exports.classifyBlueprintTransition = classifyBlueprintTransition;
+const semver_1 = require("semver");
+function blueprintCompatibilityLine(version) {
+    const parsed = (0, semver_1.parse)(version);
+    if (!parsed) {
+        throw new Error(`Blueprint version ${version} is not valid SemVer.`);
+    }
+    return parsed.major === 0 ? `0.${parsed.minor}.x` : `${parsed.major}.x`;
+}
+function classifyBlueprintTransition(current, target) {
+    const currentVersion = (0, semver_1.parse)(current.version);
+    const targetVersion = (0, semver_1.parse)(target.version);
+    if (!currentVersion) {
+        throw new Error(`Recorded Blueprint version ${current.version} is not valid SemVer.`);
+    }
+    if (!targetVersion) {
+        throw new Error(`Requested Blueprint version ${target.version} is not valid SemVer.`);
+    }
+    const compatibilityLine = blueprintCompatibilityLine(current.version);
+    if (current.name !== target.name) {
+        return {
+            availableMigrations: target.migrations ?? [],
+            compatibilityLine,
+            kind: 'blocked',
+            reason: 'blueprint-identity-change',
+        };
+    }
+    const compatible = currentVersion.major === targetVersion.major &&
+        (currentVersion.major !== 0 ||
+            currentVersion.minor === targetVersion.minor);
+    if (compatible)
+        return { compatibilityLine, kind: 'compatible' };
+    const migrations = target.migrations ?? [];
+    if (migrations.length === 0) {
+        return {
+            availableMigrations: [],
+            compatibilityLine,
+            kind: 'blocked',
+            reason: 'undeclared',
+        };
+    }
+    const matches = migrations.filter((migration) => migration.to === target.version &&
+        (0, semver_1.satisfies)(current.version, migration.from, { includePrerelease: true }));
+    if (matches.length === 1) {
+        return {
+            compatibilityLine,
+            kind: 'manual-succession',
+            migration: matches[0],
+        };
+    }
+    return {
+        availableMigrations: migrations,
+        compatibilityLine,
+        kind: 'blocked',
+        reason: matches.length > 1 ? 'ambiguous-migrations' : 'source-range-mismatch',
+    };
+}
+//# sourceMappingURL=transitions.js.map

package/src/blueprints/transitions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transitions.js","sourceRoot":"","sources":["../../../../../packages/nx/src/blueprints/transitions.ts"],"names":[],"mappings":";;AAgCA,gEAMC;AAED,kEA2DC;AAnGD,mCAA0C;AAgC1C,SAAgB,0BAA0B,CAAC,OAAe;IACxD,MAAM,MAAM,GAAG,IAAA,cAAK,EAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,qBAAqB,OAAO,uBAAuB,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,IAAI,CAAC;AAC1E,CAAC;AAED,SAAgB,2BAA2B,CACzC,OAA0B,EAC1B,MAAyB;IAEzB,MAAM,cAAc,GAAG,IAAA,cAAK,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,IAAA,cAAK,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,8BAA8B,OAAO,CAAC,OAAO,uBAAuB,CACrE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,+BAA+B,MAAM,CAAC,OAAO,uBAAuB,CACrE,CAAC;IACJ,CAAC;IACD,MAAM,iBAAiB,GAAG,0BAA0B,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,OAAO;YACL,mBAAmB,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;YAC5C,iBAAiB;YACjB,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,2BAA2B;SACpC,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GACd,cAAc,CAAC,KAAK,KAAK,aAAa,CAAC,KAAK;QAC5C,CAAC,cAAc,CAAC,KAAK,KAAK,CAAC;YACzB,cAAc,CAAC,KAAK,KAAK,aAAa,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,UAAU;QAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAEjE,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;IAC3C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,mBAAmB,EAAE,EAAE;YACvB,iBAAiB;YACjB,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,YAAY;SACrB,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAC/B,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,OAAO;QAC/B,IAAA,kBAAS,EAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAC1E,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,iBAAiB;YACjB,IAAI,EAAE,mBAAmB;YACzB,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;SACtB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,mBAAmB,EAAE,UAAU;QAC/B,iBAAiB;QACjB,IAAI,EAAE,SAAS;QACf,MAAM,EACJ,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,uBAAuB;KACxE,CAAC;AACJ,CAAC"}

package/src/executors/deploy/deploy.d.ts

@@ -0,0 +1,4 @@
+import type { PromiseExecutor } from '@nx/devkit';
+import { type SstLifecycleOptions } from '../sst-lifecycle/run-sst-command.js';
+declare const executor: PromiseExecutor<SstLifecycleOptions>;
+export default executor;

package/src/executors/deploy/deploy.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const run_sst_command_js_1 = require("../sst-lifecycle/run-sst-command.js");
+const executor = (options, context) => (0, run_sst_command_js_1.runSstCommand)('deploy', options, context);
+exports.default = executor;
+//# sourceMappingURL=deploy.js.map

package/src/executors/deploy/deploy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy.js","sourceRoot":"","sources":["../../../../../../packages/nx/src/executors/deploy/deploy.ts"],"names":[],"mappings":";;AACA,4EAG6C;AAE7C,MAAM,QAAQ,GAAyC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAC1E,IAAA,kCAAa,EAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAE5C,kBAAe,QAAQ,CAAC"}

package/src/executors/dev/dev.d.ts

@@ -0,0 +1,4 @@
+import type { PromiseExecutor } from '@nx/devkit';
+import { type SstLifecycleOptions } from '../sst-lifecycle/run-sst-command.js';
+declare const executor: PromiseExecutor<SstLifecycleOptions>;
+export default executor;

package/src/executors/dev/dev.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const run_sst_command_js_1 = require("../sst-lifecycle/run-sst-command.js");
+const executor = (options, context) => (0, run_sst_command_js_1.runSstCommand)('dev', options, context);
+exports.default = executor;
+//# sourceMappingURL=dev.js.map

package/src/executors/dev/dev.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.js","sourceRoot":"","sources":["../../../../../../packages/nx/src/executors/dev/dev.ts"],"names":[],"mappings":";;AACA,4EAG6C;AAE7C,MAAM,QAAQ,GAAyC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAC1E,IAAA,kCAAa,EAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAEzC,kBAAe,QAAQ,CAAC"}

package/src/executors/dev-doctor/dev-doctor.d.ts

@@ -0,0 +1,18 @@
+import { type ExecutorContext, type PromiseExecutor } from '@nx/devkit';
+interface DevDoctorOptions {
+    appData?: string;
+    hostname?: string;
+    stage?: string;
+}
+export interface DevDoctorResult {
+    certificateExpires?: string;
+    gateway: 'missing' | 'ready';
+    hostname: string;
+    portless: 'configured' | 'not-configured';
+    resolver: readonly string[];
+    tls: 'missing' | 'ready';
+    trust: 'missing' | 'ready';
+}
+export declare function inspectLocalDevelopment(options: DevDoctorOptions, context: Pick<ExecutorContext, 'projectName' | 'root'>): Promise<DevDoctorResult>;
+declare const executor: PromiseExecutor<DevDoctorOptions>;
+export default executor;

package/src/executors/dev-doctor/dev-doctor.js

@@ -0,0 +1,145 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.inspectLocalDevelopment = inspectLocalDevelopment;
+const devkit_1 = require("@nx/devkit");
+const node_child_process_1 = require("node:child_process");
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const gateway_js_1 = require("../../local-dev/gateway.js");
+const identity_js_1 = require("../../local-dev/identity.js");
+const tls_js_1 = require("../../local-dev/tls.js");
+function inspectCertificateTrust(rootCertificatePath, intermediateCertificatePath, leafCertificatePath, hostname) {
+    try {
+        if ((0, node_os_1.platform)() === 'darwin') {
+            (0, node_child_process_1.execFileSync)('security', [
+                'verify-cert',
+                '-L',
+                '-q',
+                '-c',
+                leafCertificatePath,
+                '-c',
+                intermediateCertificatePath,
+                '-p',
+                'ssl',
+                '-n',
+                hostname,
+            ], { stdio: 'pipe' });
+            return 'ready';
+        }
+        const expected = new node_crypto_1.X509Certificate((0, node_fs_1.readFileSync)(rootCertificatePath))
+            .fingerprint256;
+        if ((0, node_os_1.platform)() === 'win32') {
+            (0, node_child_process_1.execFileSync)('certutil', [
+                '-user',
+                '-store',
+                'Root',
+                new node_crypto_1.X509Certificate((0, node_fs_1.readFileSync)(rootCertificatePath)).fingerprint.replace(/:/g, ''),
+            ], { stdio: 'pipe' });
+            return 'ready';
+        }
+        const pem = (0, node_child_process_1.execFileSync)('certutil', [
+            '-L',
+            '-d',
+            `sql:${(0, node_path_1.join)((0, node_os_1.homedir)(), '.pki', 'nssdb')}`,
+            '-n',
+            'Empire Builder Kit Local Root',
+            '-a',
+        ], { encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] });
+        return new node_crypto_1.X509Certificate(pem).fingerprint256 === expected
+            ? 'ready'
+            : 'missing';
+    }
+    catch {
+        return 'missing';
+    }
+}
+async function inspectLocalDevelopment(options, context) {
+    const hostname = options.hostname?.trim() ||
+        (0, identity_js_1.createFleetHostname)((0, identity_js_1.createFleetId)({
+            checkoutPath: context.root,
+            stage: options.stage ?? 'personal',
+            workspaceName: context.projectName ?? 'workspace',
+        }));
+    const resolver = await (0, identity_js_1.resolveFleetHostname)(hostname);
+    const paths = (0, tls_js_1.localTlsPaths)(options.appData);
+    if (!(0, node_fs_1.existsSync)(paths.rootCertificate) ||
+        !(0, node_fs_1.existsSync)(paths.leafCertificate) ||
+        !(0, node_fs_1.existsSync)(paths.leafKey) ||
+        !(0, node_fs_1.existsSync)(paths.capability)) {
+        return {
+            gateway: 'missing',
+            hostname,
+            portless: 'not-configured',
+            resolver,
+            tls: 'missing',
+            trust: 'missing',
+        };
+    }
+    (0, tls_js_1.assertPrivateKeyPermissions)(paths.leafKey);
+    (0, tls_js_1.assertPrivateKeyPermissions)(paths.intermediateKey);
+    const certificate = new node_crypto_1.X509Certificate((0, node_fs_1.readFileSync)(paths.leafCertificate));
+    if (!certificate.checkHost(hostname)) {
+        throw new Error(`EBK gateway certificate does not cover ${hostname}. Rerun dev-setup --upgrade --trust with the matching hostSuffix.`);
+    }
+    if (certificate.validToDate.getTime() <= Date.now()) {
+        throw new Error(`EBK gateway certificate expired at ${certificate.validTo}.`);
+    }
+    let gateway = 'missing';
+    try {
+        await (0, gateway_js_1.sendGatewayCommand)(paths.gatewaySocket, {
+            action: 'heartbeat',
+            capability: (0, node_fs_1.readFileSync)(paths.capability, 'utf8').trim(),
+            hostname,
+            sessionId: '__doctor__',
+        });
+    }
+    catch (error) {
+        // A healthy gateway rejects the deliberately absent doctor session. A
+        // connection failure means the gateway itself is unavailable.
+        if (error instanceof Error &&
+            error.message.includes('no matching registration')) {
+            gateway = 'ready';
+        }
+    }
+    return {
+        certificateExpires: certificate.validTo,
+        gateway,
+        hostname,
+        portless: (() => {
+            try {
+                const state = JSON.parse((0, node_fs_1.readFileSync)(paths.gatewayState, 'utf8'));
+                return state.portless ? 'configured' : 'not-configured';
+            }
+            catch {
+                return 'not-configured';
+            }
+        })(),
+        resolver,
+        tls: 'ready',
+        trust: inspectCertificateTrust(paths.rootCertificate, paths.intermediateCertificate, paths.leafCertificate, hostname),
+    };
+}
+const executor = async (options, context) => {
+    try {
+        const result = await inspectLocalDevelopment(options, context);
+        devkit_1.logger.info(`[dev-doctor] ${JSON.stringify(result, null, 2)}`);
+        if (result.tls === 'missing') {
+            devkit_1.logger.warn('Run dev-setup, inspect the generated root, then explicitly rerun with --trust.');
+        }
+        if (result.gateway === 'missing') {
+            devkit_1.logger.warn('The portless gateway is unavailable; HTTPS explicit-port fallback remains possible because resolver validation passed.');
+        }
+        if (result.trust === 'missing') {
+            devkit_1.logger.warn('The EBK root is not trusted in the detected user/browser trust store. Review it and run dev-setup --trust explicitly.');
+        }
+        return { success: result.tls === 'ready' && result.trust === 'ready' };
+    }
+    catch (error) {
+        devkit_1.logger.error(`[dev-doctor] ${error instanceof Error ? error.message : String(error)}`);
+        return { success: false };
+    }
+};
+exports.default = executor;
+//# sourceMappingURL=dev-doctor.js.map

package/src/executors/dev-doctor/dev-doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-doctor.js","sourceRoot":"","sources":["../../../../../../packages/nx/src/executors/dev-doctor/dev-doctor.ts"],"names":[],"mappings":";;AAoGA,0DAoFC;AAxLD,uCAAgF;AAChF,2DAAkD;AAClD,6CAA8C;AAC9C,qCAAmD;AACnD,qCAA4C;AAC5C,yCAAiC;AACjC,2DAGoC;AACpC,6DAIqC;AACrC,mDAGgC;AAkBhC,SAAS,uBAAuB,CAC9B,mBAA2B,EAC3B,2BAAmC,EACnC,mBAA2B,EAC3B,QAAgB;IAEhB,IAAI,CAAC;QACH,IAAI,IAAA,kBAAQ,GAAE,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAA,iCAAY,EACV,UAAU,EACV;gBACE,aAAa;gBACb,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,mBAAmB;gBACnB,IAAI;gBACJ,2BAA2B;gBAC3B,IAAI;gBACJ,KAAK;gBACL,IAAI;gBACJ,QAAQ;aACT,EACD,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB,CAAC;YACF,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,6BAAe,CAAC,IAAA,sBAAY,EAAC,mBAAmB,CAAC,CAAC;aACpE,cAAc,CAAC;QAClB,IAAI,IAAA,kBAAQ,GAAE,KAAK,OAAO,EAAE,CAAC;YAC3B,IAAA,iCAAY,EACV,UAAU,EACV;gBACE,OAAO;gBACP,QAAQ;gBACR,MAAM;gBACN,IAAI,6BAAe,CACjB,IAAA,sBAAY,EAAC,mBAAmB,CAAC,CAClC,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;aAChC,EACD,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB,CAAC;YACF,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,GAAG,GAAG,IAAA,iCAAY,EACtB,UAAU,EACV;YACE,IAAI;YACJ,IAAI;YACJ,OAAO,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;YACzC,IAAI;YACJ,+BAA+B;YAC/B,IAAI;SACL,EACD,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CACxD,CAAC;QACF,OAAO,IAAI,6BAAe,CAAC,GAAG,CAAC,CAAC,cAAc,KAAK,QAAQ;YACzD,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,uBAAuB,CAC3C,OAAyB,EACzB,OAAsD;IAEtD,MAAM,QAAQ,GACZ,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE;QACxB,IAAA,iCAAmB,EACjB,IAAA,2BAAa,EAAC;YACZ,YAAY,EAAE,OAAO,CAAC,IAAI;YAC1B,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,UAAU;YAClC,aAAa,EAAE,OAAO,CAAC,WAAW,IAAI,WAAW;SAClD,CAAC,CACH,CAAC;IACJ,MAAM,QAAQ,GAAG,MAAM,IAAA,kCAAoB,EAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,IAAA,sBAAa,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C,IACE,CAAC,IAAA,oBAAU,EAAC,KAAK,CAAC,eAAe,CAAC;QAClC,CAAC,IAAA,oBAAU,EAAC,KAAK,CAAC,eAAe,CAAC;QAClC,CAAC,IAAA,oBAAU,EAAC,KAAK,CAAC,OAAO,CAAC;QAC1B,CAAC,IAAA,oBAAU,EAAC,KAAK,CAAC,UAAU,CAAC,EAC7B,CAAC;QACD,OAAO;YACL,OAAO,EAAE,SAAS;YAClB,QAAQ;YACR,QAAQ,EAAE,gBAAgB;YAC1B,QAAQ;YACR,GAAG,EAAE,SAAS;YACd,KAAK,EAAE,SAAS;SACjB,CAAC;IACJ,CAAC;IACD,IAAA,oCAA2B,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAA,oCAA2B,EAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,IAAI,6BAAe,CAAC,IAAA,sBAAY,EAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;IAC7E,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,0CAA0C,QAAQ,mEAAmE,CACtH,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CACb,sCAAsC,WAAW,CAAC,OAAO,GAAG,CAC7D,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,GAA+B,SAAS,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,IAAA,+BAAkB,EAAsB,KAAK,CAAC,aAAa,EAAE;YACjE,MAAM,EAAE,WAAW;YACnB,UAAU,EAAE,IAAA,sBAAY,EAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE;YACzD,QAAQ;YACR,SAAS,EAAE,YAAY;SACxB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,sEAAsE;QACtE,8DAA8D;QAC9D,IACE,KAAK,YAAY,KAAK;YACtB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAClD,CAAC;YACD,OAAO,GAAG,OAAO,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO;QACL,kBAAkB,EAAE,WAAW,CAAC,OAAO;QACvC,OAAO;QACP,QAAQ;QACR,QAAQ,EAAE,CAAC,GAAG,EAAE;YACd,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,CAEhE,CAAC;gBACF,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC;YAC1D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,gBAAgB,CAAC;YAC1B,CAAC;QACH,CAAC,CAAC,EAAE;QACJ,QAAQ;QACR,GAAG,EAAE,OAAO;QACZ,KAAK,EAAE,uBAAuB,CAC5B,KAAK,CAAC,eAAe,EACrB,KAAK,CAAC,uBAAuB,EAC7B,KAAK,CAAC,eAAe,EACrB,QAAQ,CACT;KACF,CAAC;AACJ,CAAC;AAED,MAAM,QAAQ,GAAsC,KAAK,EACvD,OAAO,EACP,OAAO,EACP,EAAE;IACF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/D,eAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,eAAM,CAAC,IAAI,CACT,gFAAgF,CACjF,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACjC,eAAM,CAAC,IAAI,CACT,wHAAwH,CACzH,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,eAAM,CAAC,IAAI,CACT,uHAAuH,CACxH,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,KAAK,OAAO,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;IACzE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CACV,gBAAgB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACzE,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC,CAAC;AAEF,kBAAe,QAAQ,CAAC"}

package/src/executors/dev-doctor/schema.json

@@ -0,0 +1,17 @@
+{
+  "$schema": "https://json-schema.org/schema",
+  "version": 2,
+  "title": "Empire Builder Kit local development doctor",
+  "description": "Inspect resolver, certificate, key-permission, and gateway health without mutation.",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "appData": { "type": "string" },
+    "hostname": { "type": "string" },
+    "stage": {
+      "type": "string",
+      "pattern": "^[a-z0-9][a-z0-9-]*$",
+      "default": "personal"
+    }
+  }
+}

package/src/executors/dev-setup/dev-setup.d.ts

@@ -0,0 +1,11 @@
+import { type PromiseExecutor } from '@nx/devkit';
+interface DevSetupOptions {
+    appData?: string;
+    hostSuffix?: string;
+    portless?: boolean;
+    remove?: boolean;
+    trust?: boolean;
+    upgrade?: boolean;
+}
+declare const executor: PromiseExecutor<DevSetupOptions>;
+export default executor;