@forgecart/cli 2.202608221935.0 → 2.202608300703.0

package/dist/src/cli.js

@@ -1,28 +1,9 @@
-import * as fs from 'node:fs';
-import * as path from 'node:path';
-import { fileURLToPath } from 'node:url';
 import { Command } from 'commander';
 import { createInitCommand } from './commands/init.js';
 import { createDeleteCommand, createDeployCommand, createEnvCommand, createInitApplicationCommand, createListCommand, createLogsCommand, createScaleCommand, createStatusCommand, createWhoamiCommand, } from './commands/placeholders.js';
+import { createRefreshCommand } from './commands/refresh.js';
 import { printError } from './output.js';
-/**
- * Resolve the package manifest from this module's location. The depth differs
- * by layout — `src/cli.ts` (dev) sits one level below the package root,
- * `dist/src/cli.js` (published) two — and `dist/` never contains a
- * `package.json`, so the first existing candidate is always the right one.
- */
-function readPackageVersion() {
-    const here = path.dirname(fileURLToPath(import.meta.url));
-    const candidates = [
-        path.join(here, '..', 'package.json'),
-        path.join(here, '..', '..', 'package.json'),
-    ];
-    const manifest = candidates.find((candidate) => fs.existsSync(candidate));
-    if (!manifest) {
-        throw new Error(`package.json not found near ${here}; cannot resolve the CLI version.`);
-    }
-    return JSON.parse(fs.readFileSync(manifest, 'utf-8')).version;
-}
+import { readPackageVersion } from './version.js';
 /**
  * CLI version, read from `package.json` (the single source of truth) so the
  * `--version` output can never drift from the published version.
@@ -42,6 +23,7 @@ export function createProgram() {
         .description('CLI for scaffolding and operating ForgeCart channel storefronts')
         .version(CLI_VERSION);
     program.addCommand(createInitCommand());
+    program.addCommand(createRefreshCommand());
     program.addCommand(createInitApplicationCommand());
     program.addCommand(createDeployCommand());
     program.addCommand(createListCommand());

package/dist/src/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,4BAA4B,EAC5B,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC;;;;;GAKG;AACH,SAAS,kBAAkB;IACzB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC;KAC5C,CAAC;IACF,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,mCAAmC,CAAC,CAAC;IAC1F,CAAC;IACD,OAAQ,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAyB,CAAC,OAAO,CAAC;AACzF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,kBAAkB,EAAE,CAAC;AAEhD;;;;;;GAMG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAE9B,OAAO;SACJ,IAAI,CAAC,WAAW,CAAC;SACjB,WAAW,CAAC,iEAAiE,CAAC;SAC9E,OAAO,CAAC,WAAW,CAAC,CAAC;IAExB,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACxC,OAAO,CAAC,UAAU,CAAC,4BAA4B,EAAE,CAAC,CAAC;IACnD,OAAO,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACxC,OAAO,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACxC,OAAO,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACzC,OAAO,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACvC,OAAO,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAE1C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,OAAiB,OAAO,CAAC,IAAI;IACrD,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,UAAU,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC;QAChC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,4BAA4B,EAC5B,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,kBAAkB,EAAE,CAAC;AAEhD;;;;;;GAMG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAE9B,OAAO;SACJ,IAAI,CAAC,WAAW,CAAC;SACjB,WAAW,CAAC,iEAAiE,CAAC;SAC9E,OAAO,CAAC,WAAW,CAAC,CAAC;IAExB,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACxC,OAAO,CAAC,UAAU,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAC3C,OAAO,CAAC,UAAU,CAAC,4BAA4B,EAAE,CAAC,CAAC;IACnD,OAAO,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACxC,OAAO,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACxC,OAAO,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACzC,OAAO,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACvC,OAAO,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAE1C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,OAAiB,OAAO,CAAC,IAAI;IACrD,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,UAAU,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC;QAChC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/src/commands/__test__/cli-harness.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Shared black-box harness for the CLI command specs.
+ *
+ * We run the BUILT CLI (the artifact that ships to npm) against a temp dir and
+ * assert on its outputs, rather than importing the source: the package is ESM
+ * (`import.meta.url`, `.js` import specifiers) and the repo's jest transform is
+ * CJS, so importing the source would break. Spawning the real binary also
+ * verifies what users actually get. The `test` target dependsOn `build`, so
+ * `dist/bin/forgecart.js` exists when these run.
+ */
+export declare const CLI: string;
+/** The bundled storefront template the built CLI scaffolds from. */
+export declare const TEMPLATE_SRC: string;
+export interface CliRun {
+    status: number | null;
+    /** Combined stdout+stderr, for message assertions. */
+    out: string;
+    /** stdout alone, for `--json` report parsing. */
+    stdout: string;
+}
+export declare function runCli(args: string[], cwd: string, envOverrides?: Record<string, string>): CliRun;

package/dist/src/commands/__test__/cli-harness.js

@@ -0,0 +1,29 @@
+import { spawnSync } from 'node:child_process';
+import { resolve } from 'node:path';
+/**
+ * Shared black-box harness for the CLI command specs.
+ *
+ * We run the BUILT CLI (the artifact that ships to npm) against a temp dir and
+ * assert on its outputs, rather than importing the source: the package is ESM
+ * (`import.meta.url`, `.js` import specifiers) and the repo's jest transform is
+ * CJS, so importing the source would break. Spawning the real binary also
+ * verifies what users actually get. The `test` target dependsOn `build`, so
+ * `dist/bin/forgecart.js` exists when these run.
+ */
+export const CLI = resolve(__dirname, '..', '..', '..', 'dist', 'bin', 'forgecart.js');
+/** The bundled storefront template the built CLI scaffolds from. */
+export const TEMPLATE_SRC = resolve(__dirname, '..', '..', '..', 'templates', 'storefront');
+export function runCli(args, cwd, envOverrides = {}) {
+    // Hermetic by default: a WORKSPACE_TEMPLATE_DIR exported in the developer's
+    // shell must not flip the cold-path tests into the warmed path.
+    const env = { ...process.env };
+    delete env.WORKSPACE_TEMPLATE_DIR;
+    Object.assign(env, envOverrides);
+    const result = spawnSync(process.execPath, [CLI, ...args], { cwd, encoding: 'utf8', env });
+    return {
+        status: result.status,
+        out: `${result.stdout ?? ''}${result.stderr ?? ''}`,
+        stdout: result.stdout ?? '',
+    };
+}
+//# sourceMappingURL=cli-harness.js.map

package/dist/src/commands/__test__/cli-harness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-harness.js","sourceRoot":"","sources":["../../../../src/commands/__test__/cli-harness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;AAEvF,oEAAoE;AACpE,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;AAU5F,MAAM,UAAU,MAAM,CACpB,IAAc,EACd,GAAW,EACX,eAAuC,EAAE;IAEzC,4EAA4E;IAC5E,gEAAgE;IAChE,MAAM,GAAG,GAAuC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACnE,OAAO,GAAG,CAAC,sBAAsB,CAAC;IAClC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAEjC,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3F,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE;QACnD,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;KAC5B,CAAC;AACJ,CAAC"}

package/dist/src/commands/init.d.ts

@@ -51,6 +51,13 @@ export interface InitOptions {
      */
     configOnly?: boolean;
 }
+/**
+ * Absolute path to the bundled storefront scaffold.
+ *
+ * At runtime this file lives at `<pkg>/dist/src/commands/init.js`, so the
+ * `templates/` directory shipped alongside `dist/` is three levels up.
+ */
+export declare function getStorefrontTemplateDir(): string;
 /**
  * Run `forgecart init`.
  *

package/dist/src/commands/init.js

@@ -3,6 +3,8 @@ import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { Command } from 'commander';
 import { print } from '../output.js';
+import { readPackageVersion } from '../version.js';
+import { writeTemplateManifest } from './template-manifest.js';
 /** Default shop API base. Overridable via `--api-url`. */
 export const DEFAULT_SHOP_API_URL = 'https://api.forgecart.com';
 /**
@@ -28,7 +30,7 @@ export const DEPS_READY_MARKER_PATH = '.forgecart/deps-ready.json';
  * At runtime this file lives at `<pkg>/dist/src/commands/init.js`, so the
  * `templates/` directory shipped alongside `dist/` is three levels up.
  */
-function getStorefrontTemplateDir() {
+export function getStorefrontTemplateDir() {
     const here = dirname(fileURLToPath(import.meta.url));
     return resolve(here, '..', '..', '..', 'templates', 'storefront');
 }
@@ -123,35 +125,99 @@ function buildConfig(channelToken, options) {
         storefrontPath: '.',
     };
 }
-/** Build the `.env` contents for the storefront SDK clients. */
-function buildEnv(channelToken, options) {
-    const lines = [
-        `FORGECART_CHANNEL_TOKEN=${channelToken}`,
-        `FORGECART_SHOP_API_URL=${options.apiUrl}`,
-    ];
+/**
+ * The platform-owned `.env` keys this invocation manages, in canonical render
+ * order. Conditional keys (browser URL, admin secret) enter the map only when
+ * their flag is present — an existing line for an unprovided key is
+ * workspace-owned for THIS run and survives untouched (#1123: the prewarmed
+ * config-only path re-runs init on every provisioning drive, and a drive that
+ * omits `--admin-secret` must not strip a secret an earlier drive wrote).
+ */
+function buildPlatformEnv(channelToken, options) {
+    const entries = new Map();
+    entries.set('FORGECART_CHANNEL_TOKEN', channelToken);
+    entries.set('FORGECART_SHOP_API_URL', options.apiUrl);
     const browserApiUrl = options.browserApiUrl?.trim();
     if (browserApiUrl) {
-        lines.push(`FORGECART_SHOP_API_BROWSER_URL=${browserApiUrl}`);
+        entries.set('FORGECART_SHOP_API_BROWSER_URL', browserApiUrl);
     }
     const secret = options.adminSecret?.trim();
     if (secret) {
-        lines.push(`FORGECART_ADMIN_SECRET=${secret}`);
+        entries.set('FORGECART_ADMIN_SECRET', secret);
+    }
+    return entries;
+}
+/**
+ * Merge the platform-owned keys into an existing `.env`, preserving every
+ * other line — merchant keys, comments, ordering — verbatim (#1123: a
+ * wholesale rewrite wiped the demo store's DEMO_* config on three
+ * provisioning drives). Platform keys are refreshed in place at their
+ * existing position; duplicates collapse onto the first occurrence; managed
+ * keys with no existing line append in canonical order. Trailing blank lines
+ * normalize to the single final newline. An empty `existing` renders the
+ * canonical fresh `.env`, byte-identical to the pre-merge scaffold output.
+ */
+function mergeEnv(existing, channelToken, options) {
+    const platform = buildPlatformEnv(channelToken, options);
+    const refreshed = new Set();
+    const merged = [];
+    for (const line of existing.split('\n')) {
+        const out = refreshPlatformLine(line, platform, refreshed);
+        if (out !== null) {
+            merged.push(out);
+        }
+    }
+    while (merged.length > 0 && merged[merged.length - 1] === '') {
+        merged.pop();
+    }
+    for (const [key, value] of platform) {
+        if (!refreshed.has(key)) {
+            merged.push(`${key}=${value}`);
+        }
+    }
+    merged.push('');
+    return merged.join('\n');
+}
+/**
+ * Map one existing `.env` line through the merge: workspace-owned lines pass
+ * through verbatim, a managed platform key refreshes in place on first sight,
+ * and its later duplicates drop (null).
+ */
+function refreshPlatformLine(line, platform, refreshed) {
+    const key = /^([A-Z][A-Z0-9_]*)=/.exec(line)?.[1];
+    if (!key || !platform.has(key))
+        return line;
+    if (refreshed.has(key))
+        return null;
+    refreshed.add(key);
+    return `${key}=${platform.get(key) ?? ''}`;
+}
+/** Read a file that may legitimately not exist yet; any other failure propagates. */
+async function readFileIfPresent(path) {
+    try {
+        return await readFile(path, 'utf8');
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return '';
+        throw error;
     }
-    lines.push('');
-    return lines.join('\n');
 }
 /**
  * Write the per-channel config the storefront reads at runtime: `.forgecart/
  * config.json` (channel token, api url, app flag) and `.env` (the SDK
  * client env). Shared by the full scaffold and the `--config-only` serve-in-place
  * path, so both write byte-identical config — the only difference is whether the
- * template tree was copied first.
+ * template tree was copied first. `config.json` is pure platform state and is
+ * rewritten wholesale; `.env` is merge-preserved (#1123 — see mergeEnv).
  */
 async function writeChannelConfig(targetDir, channelToken, options) {
     const configDir = join(targetDir, '.forgecart');
     await mkdir(configDir, { recursive: true });
     await writeFile(join(configDir, 'config.json'), `${JSON.stringify(buildConfig(channelToken, options), null, 2)}\n`, 'utf8');
-    await writeFile(join(targetDir, '.env'), buildEnv(channelToken, options), 'utf8');
+    const envPath = join(targetDir, '.env');
+    const existingEnv = await readFileIfPresent(envPath);
+    await writeFile(envPath, mergeEnv(existingEnv, channelToken, options), 'utf8');
 }
 /** Print the post-scaffold next steps. */
 function printNextSteps(targetDir, application, depsInstalled) {
@@ -224,6 +290,9 @@ export async function runInit(name, options) {
     }
     await writeChannelConfig(targetDir, channelToken, options);
     await writeDepsReadyMarker(targetDir, plan);
+    // Inventory the render for `forgecart refresh` (#1116) — hashed from the
+    // plan's template dir, the exact bytes the copy above landed.
+    await writeTemplateManifest(targetDir, plan.templateDir, readPackageVersion());
     printNextSteps(name ?? '.', options.application ?? false, plan.source === 'warmed');
 }
 /** Build the `init [name]` command. */

package/dist/src/commands/init.js.map

@@ -1 +1 @@
-{"version":3,"file":"init.js","sourceRoot":"","sources":["../../../src/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAErC,0DAA0D;AAC1D,MAAM,CAAC,MAAM,oBAAoB,GAAG,2BAA2B,CAAC;AAEhE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AAEnE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,4BAA4B,CAAC;AAmEnE;;;;;GAKG;AACH,SAAS,wBAAwB;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;AACpE,CAAC;AAED,kDAAkD;AAClD,KAAK,UAAU,WAAW,CAAC,IAAY;IACrC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,qDAAqD;AACrD,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,sBAAsB,CAAC,YAAoB;IACxD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,mBAAmB,CAAC,kBAA0B;IAC3D,MAAM,OAAO,GAAiB,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAErF,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAC1D,IAAI,CAAC,SAAS;QAAE,OAAO,OAAO,CAAC;IAC/B,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,SAAS,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IAEpD,MAAM,oBAAoB,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAC7D,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,oBAAoB,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IAE/D,MAAM,cAAc,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;IACrF,MAAM,eAAe,GAAG,MAAM,sBAAsB,CAClD,IAAI,CAAC,kBAAkB,EAAE,cAAc,CAAC,CACzC,CAAC;IACF,IAAI,CAAC,cAAc,IAAI,CAAC,eAAe,IAAI,cAAc,KAAK,eAAe,EAAE,CAAC;QAC9E,OAAO;YACL,MAAM,EAAE,6BAA6B;YACrC,WAAW,EAAE,kBAAkB;YAC/B,oBAAoB;SACrB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,oBAAoB,CAAC,SAAiB,EAAE,IAAkB;IACvE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG;QACb,UAAU,EAAE,IAAI,CAAC,WAAW;QAC5B,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACnC,CAAC;IACF,MAAM,SAAS,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC9E,CAAC;AAED,kDAAkD;AAClD,SAAS,WAAW,CAAC,YAAoB,EAAE,OAAoB;IAC7D,OAAO;QACL,OAAO,EAAE,KAAK;QACd,YAAY;QACZ,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,cAAc,EAAE,OAAO,CAAC,WAAW,IAAI,KAAK;QAC5C,cAAc,EAAE,GAAG;KACpB,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,SAAS,QAAQ,CAAC,YAAoB,EAAE,OAAoB;IAC1D,MAAM,KAAK,GAAG;QACZ,2BAA2B,YAAY,EAAE;QACzC,0BAA0B,OAAO,CAAC,MAAM,EAAE;KAC3C,CAAC;IACF,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;IACpD,IAAI,aAAa,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,kCAAkC,aAAa,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,CAAC,IAAI,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,kBAAkB,CAC/B,SAAiB,EACjB,YAAoB,EACpB,OAAoB;IAEpB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAChD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,SAAS,CACb,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAC9B,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAClE,MAAM,CACP,CAAC;IACF,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;AACpF,CAAC;AAED,0CAA0C;AAC1C,SAAS,cAAc,CAAC,SAAiB,EAAE,WAAoB,EAAE,aAAsB;IACrF,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,KAAK,CACH,aAAa;QACX,CAAC,CAAC,2FAA2F;QAC7F,CAAC,CAAC,qCAAqC,CAC1C,CAAC;IACF,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,KAAK,CAAC,aAAa,CAAC,CAAC;IACrB,KAAK,CAAC,QAAQ,SAAS,EAAE,CAAC,CAAC;IAC3B,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,KAAK,CAAC,eAAe,CAAC,CAAC;IACzB,CAAC;IACD,KAAK,CAAC,eAAe,CAAC,CAAC;IACvB,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,CACH,2EAA2E;YACzE,0BAA0B,CAC7B,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,CAAC;IACZ,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,SAAS,eAAe,CAAC,SAAiB;IACxC,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,KAAK,CAAC,kFAAkF,CAAC,CAAC;IAC1F,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,KAAK,CAAC,aAAa,CAAC,CAAC;IACrB,KAAK,CAAC,QAAQ,SAAS,EAAE,CAAC,CAAC;IAC3B,KAAK,CAAC,eAAe,CAAC,CAAC;IACvB,KAAK,CAAC,EAAE,CAAC,CAAC;AACZ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAwB,EAAE,OAAoB;IAC1E,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAEtE,gFAAgF;IAChF,0EAA0E;IAC1E,+EAA+E;IAC/E,kFAAkF;IAClF,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CACb,oDAAoD,SAAS,2BAA2B,CACzF,CAAC;QACJ,CAAC;QACD,MAAM,kBAAkB,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;QAC3D,eAAe,CAAC,SAAS,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,wBAAwB,EAAE,CAAC;IAC/C,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,oCAAoC,WAAW,GAAG,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,MAAM,KAAK,6BAA6B,EAAE,CAAC;QAClD,MAAM,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE;YACnE,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,kBAAkB,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,oBAAoB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAE5C,cAAc,CAAC,IAAI,IAAI,GAAG,EAAE,OAAO,CAAC,WAAW,IAAI,KAAK,EAAE,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;AACtF,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;SACvB,WAAW,CAAC,yDAAyD,CAAC;SACtE,QAAQ,CAAC,QAAQ,EAAE,2DAA2D,CAAC;SAC/E,MAAM,CAAC,qBAAqB,EAAE,oCAAoC,CAAC;SACnE,MAAM,CACL,yBAAyB,EACzB,8EAA8E,CAC/E;SACA,MAAM,CACL,iBAAiB,EACjB,yDAAyD,EACzD,oBAAoB,CACrB;SACA,MAAM,CACL,yBAAyB,EACzB,2IAA2I,CAC5I;SACA,MAAM,CAAC,mBAAmB,EAAE,uDAAuD,CAAC;SACpF,MAAM,CACL,eAAe,EACf,+FAA+F,CAChG;SACA,MAAM,CAAC,KAAK,EAAE,IAAwB,EAAE,OAAoB,EAAE,EAAE;QAC/D,MAAM,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../../src/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,0DAA0D;AAC1D,MAAM,CAAC,MAAM,oBAAoB,GAAG,2BAA2B,CAAC;AAEhE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AAEnE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,4BAA4B,CAAC;AAmEnE;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB;IACtC,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;AACpE,CAAC;AAED,kDAAkD;AAClD,KAAK,UAAU,WAAW,CAAC,IAAY;IACrC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,qDAAqD;AACrD,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,sBAAsB,CAAC,YAAoB;IACxD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,mBAAmB,CAAC,kBAA0B;IAC3D,MAAM,OAAO,GAAiB,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAErF,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAC1D,IAAI,CAAC,SAAS;QAAE,OAAO,OAAO,CAAC;IAC/B,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,SAAS,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IAEpD,MAAM,oBAAoB,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAC7D,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,oBAAoB,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IAE/D,MAAM,cAAc,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;IACrF,MAAM,eAAe,GAAG,MAAM,sBAAsB,CAClD,IAAI,CAAC,kBAAkB,EAAE,cAAc,CAAC,CACzC,CAAC;IACF,IAAI,CAAC,cAAc,IAAI,CAAC,eAAe,IAAI,cAAc,KAAK,eAAe,EAAE,CAAC;QAC9E,OAAO;YACL,MAAM,EAAE,6BAA6B;YACrC,WAAW,EAAE,kBAAkB;YAC/B,oBAAoB;SACrB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,oBAAoB,CAAC,SAAiB,EAAE,IAAkB;IACvE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG;QACb,UAAU,EAAE,IAAI,CAAC,WAAW;QAC5B,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACnC,CAAC;IACF,MAAM,SAAS,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC9E,CAAC;AAED,kDAAkD;AAClD,SAAS,WAAW,CAAC,YAAoB,EAAE,OAAoB;IAC7D,OAAO;QACL,OAAO,EAAE,KAAK;QACd,YAAY;QACZ,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,cAAc,EAAE,OAAO,CAAC,WAAW,IAAI,KAAK;QAC5C,cAAc,EAAE,GAAG;KACpB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,YAAoB,EAAE,OAAoB;IAClE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,YAAY,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;IACpD,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE,aAAa,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,QAAQ,CAAC,QAAgB,EAAE,YAAoB,EAAE,OAAoB;IAC5E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,mBAAmB,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC3D,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QAC7D,MAAM,CAAC,GAAG,EAAE,CAAC;IACf,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;QACpC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAC1B,IAAY,EACZ,QAA6B,EAC7B,SAAsB;IAEtB,MAAM,GAAG,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,GAAG,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;AAC7C,CAAC;AAED,qFAAqF;AACrF,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAC3C,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAClE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,kBAAkB,CAC/B,SAAiB,EACjB,YAAoB,EACpB,OAAoB;IAEpB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAChD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,SAAS,CACb,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAC9B,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAClE,MAAM,CACP,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;AACjF,CAAC;AAED,0CAA0C;AAC1C,SAAS,cAAc,CAAC,SAAiB,EAAE,WAAoB,EAAE,aAAsB;IACrF,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,KAAK,CACH,aAAa;QACX,CAAC,CAAC,2FAA2F;QAC7F,CAAC,CAAC,qCAAqC,CAC1C,CAAC;IACF,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,KAAK,CAAC,aAAa,CAAC,CAAC;IACrB,KAAK,CAAC,QAAQ,SAAS,EAAE,CAAC,CAAC;IAC3B,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,KAAK,CAAC,eAAe,CAAC,CAAC;IACzB,CAAC;IACD,KAAK,CAAC,eAAe,CAAC,CAAC;IACvB,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,CACH,2EAA2E;YACzE,0BAA0B,CAC7B,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,CAAC;IACZ,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,SAAS,eAAe,CAAC,SAAiB;IACxC,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,KAAK,CAAC,kFAAkF,CAAC,CAAC;IAC1F,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,KAAK,CAAC,aAAa,CAAC,CAAC;IACrB,KAAK,CAAC,QAAQ,SAAS,EAAE,CAAC,CAAC;IAC3B,KAAK,CAAC,eAAe,CAAC,CAAC;IACvB,KAAK,CAAC,EAAE,CAAC,CAAC;AACZ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAwB,EAAE,OAAoB;IAC1E,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAEtE,gFAAgF;IAChF,0EAA0E;IAC1E,+EAA+E;IAC/E,kFAAkF;IAClF,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CACb,oDAAoD,SAAS,2BAA2B,CACzF,CAAC;QACJ,CAAC;QACD,MAAM,kBAAkB,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;QAC3D,eAAe,CAAC,SAAS,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,wBAAwB,EAAE,CAAC;IAC/C,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,oCAAoC,WAAW,GAAG,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,MAAM,KAAK,6BAA6B,EAAE,CAAC;QAClD,MAAM,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE;YACnE,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,kBAAkB,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,oBAAoB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC5C,yEAAyE;IACzE,8DAA8D;IAC9D,MAAM,qBAAqB,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAE/E,cAAc,CAAC,IAAI,IAAI,GAAG,EAAE,OAAO,CAAC,WAAW,IAAI,KAAK,EAAE,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;AACtF,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;SACvB,WAAW,CAAC,yDAAyD,CAAC;SACtE,QAAQ,CAAC,QAAQ,EAAE,2DAA2D,CAAC;SAC/E,MAAM,CAAC,qBAAqB,EAAE,oCAAoC,CAAC;SACnE,MAAM,CACL,yBAAyB,EACzB,8EAA8E,CAC/E;SACA,MAAM,CACL,iBAAiB,EACjB,yDAAyD,EACzD,oBAAoB,CACrB;SACA,MAAM,CACL,yBAAyB,EACzB,2IAA2I,CAC5I;SACA,MAAM,CAAC,mBAAmB,EAAE,uDAAuD,CAAC;SACpF,MAAM,CACL,eAAe,EACf,+FAA+F,CAChG;SACA,MAAM,CAAC,KAAK,EAAE,IAAwB,EAAE,OAAoB,EAAE,EAAE;QAC/D,MAAM,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/src/commands/refresh.d.ts

@@ -0,0 +1,40 @@
+import { Command } from 'commander';
+/**
+ * `forgecart refresh` (#1116) — re-render the platform-owned template files
+ * of an EXISTING workspace from the CLI's bundled template, under the
+ * file-ownership partition:
+ *
+ *  - a platform file whose content still matches its manifest hash (pristine
+ *    since generation) re-renders to the current template;
+ *  - a platform file that DIVERGED from its manifest hash was edited in the
+ *    workspace — conflict: skipped and flagged, never clobbered;
+ *  - a file the template does not ship is workspace-owned and never touched;
+ *  - `.env` and `.forgecart/` are outside refresh's jurisdiction entirely
+ *    (channel config rides `init`'s own write paths; `.env` rides the #1123
+ *    preserve-and-merge).
+ *
+ * Workspaces generated before the manifest existed cannot prove pristineness,
+ * so every divergent file refuses by default; `--adopt <relpath>` takes the
+ * template version for explicitly reviewed paths. The refresh always (re)writes
+ * the manifest, so a pre-manifest workspace becomes precise after its first
+ * refresh. The JSON report (`--json`) is the machine seam the provisioning
+ * orchestrator parses.
+ */
+interface RefreshOptions {
+    json?: boolean;
+    adopt?: string[];
+}
+/** Per-file verdicts, in report shape. */
+export interface RefreshReport {
+    rendered: string[];
+    conflicts: string[];
+    adopted: string[];
+    upToDate: string[];
+    /** True when package.json was re-rendered — the driver must re-install. */
+    dependenciesChanged: boolean;
+}
+/** Run `forgecart refresh`. */
+export declare function runRefresh(name: string | undefined, options: RefreshOptions): Promise<void>;
+/** Build the `refresh [name]` command. */
+export declare function createRefreshCommand(): Command;
+export {};

package/dist/src/commands/refresh.js

@@ -0,0 +1,147 @@
+import { mkdir, readFile, stat, writeFile } from 'node:fs/promises';
+import { dirname, join, resolve } from 'node:path';
+import { Command } from 'commander';
+import { print } from '../output.js';
+import { readPackageVersion } from '../version.js';
+import { getStorefrontTemplateDir } from './init.js';
+import { TEMPLATE_MANIFEST_RELPATH, TEMPLATE_MANIFEST_SCHEMA_VERSION, hashContent, listTemplateFiles, readTemplateManifest, } from './template-manifest.js';
+/** True if the path exists and is a regular file. */
+async function isFile(path) {
+    try {
+        return (await stat(path)).isFile();
+    }
+    catch {
+        return false;
+    }
+}
+/** Read file bytes; null when absent (any other failure propagates). */
+async function readBytesIfPresent(path) {
+    try {
+        return await readFile(path);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return null;
+        throw error;
+    }
+}
+/**
+ * Decide one file's fate. `recordedHash` is the manifest's inventory entry
+ * (undefined on pre-manifest workspaces and template-added files).
+ */
+function decideFile(workspaceHash, templateHash, recordedHash, adopt) {
+    if (workspaceHash === null)
+        return 'rendered';
+    if (workspaceHash === templateHash)
+        return 'upToDate';
+    if (adopt)
+        return 'adopted';
+    if (recordedHash !== undefined && workspaceHash === recordedHash)
+        return 'rendered';
+    return 'conflict';
+}
+/**
+ * Judge one template file against the workspace and apply the write when the
+ * verdict says so. Returns the verdict plus the template hash the manifest
+ * update needs.
+ */
+async function refreshTemplateFile(targetDir, templateDir, relpath, recordedHash, adopt) {
+    const templateBytes = await readFile(join(templateDir, ...relpath.split('/')));
+    const templateHash = hashContent(templateBytes);
+    const workspacePath = join(targetDir, ...relpath.split('/'));
+    const workspaceBytes = await readBytesIfPresent(workspacePath);
+    const verdict = decideFile(workspaceBytes === null ? null : hashContent(workspaceBytes), templateHash, recordedHash, adopt);
+    if (verdict === 'rendered' || verdict === 'adopted') {
+        await mkdir(dirname(workspacePath), { recursive: true });
+        await writeFile(workspacePath, templateBytes);
+    }
+    return { verdict, templateHash };
+}
+/**
+ * Fold one file's verdict into the report and the next manifest: bucket the
+ * relpath, flip the install flag when package.json was (re)written, and
+ * record the inventory entry.
+ */
+function recordVerdict(report, nextFiles, relpath, verdict, templateHash, recordedHash) {
+    if (relpath === 'package.json' && (verdict === 'rendered' || verdict === 'adopted')) {
+        report.dependenciesChanged = true;
+    }
+    report[verdict === 'conflict' ? 'conflicts' : verdict].push(relpath);
+    const nextHash = nextManifestHash(verdict, templateHash, recordedHash);
+    if (nextHash !== undefined) {
+        nextFiles[relpath] = nextHash;
+    }
+}
+/**
+ * The next manifest entry for a file: written/current files record the
+ * template hash; a conflict keeps its previous inventory (or stays
+ * uninventoried), so it keeps conflicting until adopted.
+ */
+function nextManifestHash(verdict, templateHash, recordedHash) {
+    if (verdict === 'conflict')
+        return recordedHash;
+    return templateHash;
+}
+/** Run `forgecart refresh`. */
+export async function runRefresh(name, options) {
+    const targetDir = name ? resolve(process.cwd(), name) : process.cwd();
+    if (!(await isFile(join(targetDir, 'package.json')))) {
+        throw new Error(`refresh requires an existing storefront at ${targetDir} (no package.json found).`);
+    }
+    const templateDir = getStorefrontTemplateDir();
+    const manifest = await readTemplateManifest(targetDir);
+    const adoptSet = new Set(options.adopt ?? []);
+    const report = {
+        rendered: [],
+        conflicts: [],
+        adopted: [],
+        upToDate: [],
+        dependenciesChanged: false,
+    };
+    const nextFiles = {};
+    for (const relpath of await listTemplateFiles(templateDir)) {
+        const recordedHash = manifest?.files[relpath];
+        const { verdict, templateHash } = await refreshTemplateFile(targetDir, templateDir, relpath, recordedHash, adoptSet.has(relpath));
+        recordVerdict(report, nextFiles, relpath, verdict, templateHash, recordedHash);
+    }
+    const nextManifest = {
+        schemaVersion: TEMPLATE_MANIFEST_SCHEMA_VERSION,
+        templateVersion: readPackageVersion(),
+        generatedAt: new Date().toISOString(),
+        files: nextFiles,
+    };
+    await mkdir(join(targetDir, '.forgecart'), { recursive: true });
+    await writeFile(join(targetDir, ...TEMPLATE_MANIFEST_RELPATH.split('/')), `${JSON.stringify(nextManifest, null, 2)}\n`, 'utf8');
+    if (options.json) {
+        print(JSON.stringify(report));
+        return;
+    }
+    printSummary(report);
+}
+function printSummary(report) {
+    print(`Refreshed ${String(report.rendered.length)} platform file(s).`);
+    if (report.adopted.length > 0) {
+        print(`Adopted ${String(report.adopted.length)} file(s) onto the template version.`);
+    }
+    if (report.conflicts.length > 0) {
+        print('Conflicts (workspace-edited platform files, left untouched):');
+        for (const relpath of report.conflicts) {
+            print(`  ${relpath}  (re-run with --adopt ${relpath} to take the template version)`);
+        }
+    }
+    if (report.dependenciesChanged) {
+        print('package.json changed — run your package manager install before the next dev boot.');
+    }
+}
+/** Build the `refresh [name]` command. */
+export function createRefreshCommand() {
+    return new Command('refresh')
+        .description('Re-render platform-owned template files onto an existing storefront (workspace-owned files survive; edited platform files flag as conflicts)')
+        .argument('[name]', 'Target directory name (defaults to the current directory)')
+        .option('--adopt <relpath...>', 'Take the template version of specific flagged files (reviewed adoption)')
+        .option('--json', 'Print a machine-readable JSON report instead of the human summary')
+        .action(async (name, options) => {
+        await runRefresh(name, options);
+    });
+}
+//# sourceMappingURL=refresh.js.map

package/dist/src/commands/refresh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh.js","sourceRoot":"","sources":["../../../src/commands/refresh.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,OAAO,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EACL,yBAAyB,EACzB,gCAAgC,EAChC,WAAW,EACX,iBAAiB,EACjB,oBAAoB,GAErB,MAAM,wBAAwB,CAAC;AAwChC,qDAAqD;AACrD,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,KAAK,UAAU,kBAAkB,CAAC,IAAY;IAC5C,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CACjB,aAA4B,EAC5B,YAAoB,EACpB,YAAgC,EAChC,KAAc;IAEd,IAAI,aAAa,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC;IAC9C,IAAI,aAAa,KAAK,YAAY;QAAE,OAAO,UAAU,CAAC;IACtD,IAAI,KAAK;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,YAAY,KAAK,SAAS,IAAI,aAAa,KAAK,YAAY;QAAE,OAAO,UAAU,CAAC;IACpF,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,mBAAmB,CAChC,SAAiB,EACjB,WAAmB,EACnB,OAAe,EACf,YAAgC,EAChC,KAAc;IAEd,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/E,MAAM,YAAY,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;IAChD,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7D,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAE/D,MAAM,OAAO,GAAG,UAAU,CACxB,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,cAAc,CAAC,EAC5D,YAAY,EACZ,YAAY,EACZ,KAAK,CACN,CAAC;IACF,IAAI,OAAO,KAAK,UAAU,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACpD,MAAM,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,SAAS,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CACpB,MAAqB,EACrB,SAAiC,EACjC,OAAe,EACf,OAAoB,EACpB,YAAoB,EACpB,YAAgC;IAEhC,IAAI,OAAO,KAAK,cAAc,IAAI,CAAC,OAAO,KAAK,UAAU,IAAI,OAAO,KAAK,SAAS,CAAC,EAAE,CAAC;QACpF,MAAM,CAAC,mBAAmB,GAAG,IAAI,CAAC;IACpC,CAAC;IACD,MAAM,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAErE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IACvE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,SAAS,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC;IAChC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CACvB,OAAoB,EACpB,YAAoB,EACpB,YAAgC;IAEhC,IAAI,OAAO,KAAK,UAAU;QAAE,OAAO,YAAY,CAAC;IAChD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,+BAA+B;AAC/B,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAwB,EAAE,OAAuB;IAChF,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IACtE,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,8CAA8C,SAAS,2BAA2B,CACnF,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,wBAAwB,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAE9C,MAAM,MAAM,GAAkB;QAC5B,QAAQ,EAAE,EAAE;QACZ,SAAS,EAAE,EAAE;QACb,OAAO,EAAE,EAAE;QACX,QAAQ,EAAE,EAAE;QACZ,mBAAmB,EAAE,KAAK;KAC3B,CAAC;IACF,MAAM,SAAS,GAA2B,EAAE,CAAC;IAE7C,KAAK,MAAM,OAAO,IAAI,MAAM,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3D,MAAM,YAAY,GAAG,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,mBAAmB,CACzD,SAAS,EACT,WAAW,EACX,OAAO,EACP,YAAY,EACZ,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CACtB,CAAC;QACF,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,YAAY,GAAqB;QACrC,aAAa,EAAE,gCAAgC;QAC/C,eAAe,EAAE,kBAAkB,EAAE;QACrC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,KAAK,EAAE,SAAS;KACjB,CAAC;IACF,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,MAAM,SAAS,CACb,IAAI,CAAC,SAAS,EAAE,GAAG,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EACxD,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAC5C,MAAM,CACP,CAAC;IAEF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9B,OAAO;IACT,CAAC;IACD,YAAY,CAAC,MAAM,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,YAAY,CAAC,MAAqB;IACzC,KAAK,CAAC,aAAa,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACvE,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,WAAW,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,qCAAqC,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,8DAA8D,CAAC,CAAC;QACtE,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACvC,KAAK,CAAC,KAAK,OAAO,0BAA0B,OAAO,gCAAgC,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC/B,KAAK,CAAC,mFAAmF,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,OAAO,CAAC,SAAS,CAAC;SAC1B,WAAW,CACV,8IAA8I,CAC/I;SACA,QAAQ,CAAC,QAAQ,EAAE,2DAA2D,CAAC;SAC/E,MAAM,CACL,sBAAsB,EACtB,yEAAyE,CAC1E;SACA,MAAM,CAAC,QAAQ,EAAE,mEAAmE,CAAC;SACrF,MAAM,CAAC,KAAK,EAAE,IAAwB,EAAE,OAAuB,EAAE,EAAE;QAClE,MAAM,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/src/commands/template-manifest.d.ts

@@ -0,0 +1,38 @@
+/**
+ * The template manifest — the file-ownership partition's source of truth
+ * (#1116). Written by `forgecart init` when it renders the template, read by
+ * `forgecart refresh` to distinguish platform-owned files (inventoried here;
+ * re-render when unmodified since generation) from workspace-owned state
+ * (everything else; never touched) and from agent-EDITED platform files
+ * (inventoried but diverged; conflict — skip and flag, never clobber).
+ */
+export declare const TEMPLATE_MANIFEST_RELPATH = ".forgecart/template-manifest.json";
+export interface TemplateManifest {
+    schemaVersion: number;
+    /** The CLI version whose bundled template rendered this workspace. */
+    templateVersion: string;
+    generatedAt: string;
+    /** posix relpath → sha256 hex of the rendered content. */
+    files: Record<string, string>;
+}
+export declare const TEMPLATE_MANIFEST_SCHEMA_VERSION = 1;
+/** sha256 hex of file content — the manifest's and refresh's shared hash. */
+export declare function hashContent(content: Buffer | string): string;
+/**
+ * List the template's files as posix relpaths, depth-first, with the ignore
+ * set applied to top-level names (both shipped entries are top-level dirs;
+ * nested paths inherit their root's verdict).
+ */
+export declare function listTemplateFiles(templateDir: string): Promise<string[]>;
+/**
+ * Inventory the just-rendered template into the workspace's manifest. Hashes
+ * the TEMPLATE side of the copy — the bytes that actually landed — so a
+ * later refresh can prove per-file pristineness.
+ */
+export declare function writeTemplateManifest(targetDir: string, templateDir: string, templateVersion: string): Promise<void>;
+/**
+ * Read a workspace's manifest. Absent OR unreadable → null: the workspace is
+ * treated as pre-manifest, where refresh refuses every divergent file until
+ * explicitly adopted — the safe direction for a corrupt inventory too.
+ */
+export declare function readTemplateManifest(targetDir: string): Promise<TemplateManifest | null>;

package/dist/src/commands/template-manifest.js

@@ -0,0 +1,116 @@
+import { createHash } from 'node:crypto';
+import { readFile, readdir, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+/**
+ * The template manifest — the file-ownership partition's source of truth
+ * (#1116). Written by `forgecart init` when it renders the template, read by
+ * `forgecart refresh` to distinguish platform-owned files (inventoried here;
+ * re-render when unmodified since generation) from workspace-owned state
+ * (everything else; never touched) and from agent-EDITED platform files
+ * (inventoried but diverged; conflict — skip and flag, never clobber).
+ */
+export const TEMPLATE_MANIFEST_RELPATH = '.forgecart/template-manifest.json';
+export const TEMPLATE_MANIFEST_SCHEMA_VERSION = 1;
+/**
+ * Top-level names never inventoried: dependency trees and build caches are
+ * runtime state, `.forgecart/` and `.env` are per-channel config owned by
+ * `init`'s own write paths (`.env` by the #1123 merge), never by refresh.
+ */
+const ALWAYS_IGNORED = ['node_modules', '.next', '.forgecart', '.env'];
+/** sha256 hex of file content — the manifest's and refresh's shared hash. */
+export function hashContent(content) {
+    return createHash('sha256').update(content).digest('hex');
+}
+/**
+ * The template's exclusion set: `.forgecartignore` entries (one top-level
+ * name per line, `#` comments) unioned with the always-ignored names. The
+ * ignore file predates this module; parsing it here makes it live.
+ */
+async function readIgnoreSet(templateDir) {
+    const ignored = new Set(ALWAYS_IGNORED);
+    let raw = '';
+    try {
+        raw = await readFile(join(templateDir, '.forgecartignore'), 'utf8');
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+    }
+    for (const line of raw.split('\n')) {
+        const entry = line.trim();
+        if (entry && !entry.startsWith('#')) {
+            ignored.add(entry);
+        }
+    }
+    return ignored;
+}
+/**
+ * List the template's files as posix relpaths, depth-first, with the ignore
+ * set applied to top-level names (both shipped entries are top-level dirs;
+ * nested paths inherit their root's verdict).
+ */
+export async function listTemplateFiles(templateDir) {
+    const ignored = await readIgnoreSet(templateDir);
+    const files = [];
+    await walk(templateDir, '', ignored, files);
+    return files.sort((a, b) => a.localeCompare(b));
+}
+async function walk(dir, relPrefix, ignored, out) {
+    const entries = await readdir(dir, { withFileTypes: true });
+    for (const entry of entries) {
+        if (relPrefix === '' && ignored.has(entry.name))
+            continue;
+        const rel = relPrefix === '' ? entry.name : `${relPrefix}/${entry.name}`;
+        if (entry.isDirectory()) {
+            await walk(join(dir, entry.name), rel, ignored, out);
+            continue;
+        }
+        if (entry.isFile()) {
+            out.push(rel);
+        }
+    }
+}
+/**
+ * Inventory the just-rendered template into the workspace's manifest. Hashes
+ * the TEMPLATE side of the copy — the bytes that actually landed — so a
+ * later refresh can prove per-file pristineness.
+ */
+export async function writeTemplateManifest(targetDir, templateDir, templateVersion) {
+    const files = {};
+    for (const relpath of await listTemplateFiles(templateDir)) {
+        files[relpath] = hashContent(await readFile(join(templateDir, ...relpath.split('/'))));
+    }
+    const manifest = {
+        schemaVersion: TEMPLATE_MANIFEST_SCHEMA_VERSION,
+        templateVersion,
+        generatedAt: new Date().toISOString(),
+        files,
+    };
+    await writeFile(join(targetDir, ...TEMPLATE_MANIFEST_RELPATH.split('/')), `${JSON.stringify(manifest, null, 2)}\n`, 'utf8');
+}
+/**
+ * Read a workspace's manifest. Absent OR unreadable → null: the workspace is
+ * treated as pre-manifest, where refresh refuses every divergent file until
+ * explicitly adopted — the safe direction for a corrupt inventory too.
+ */
+export async function readTemplateManifest(targetDir) {
+    let raw;
+    try {
+        raw = await readFile(join(targetDir, ...TEMPLATE_MANIFEST_RELPATH.split('/')), 'utf8');
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return null;
+        throw error;
+    }
+    try {
+        const parsed = JSON.parse(raw);
+        if (parsed.schemaVersion !== TEMPLATE_MANIFEST_SCHEMA_VERSION)
+            return null;
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=template-manifest.js.map

package/dist/src/commands/template-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template-manifest.js","sourceRoot":"","sources":["../../../src/commands/template-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,mCAAmC,CAAC;AAW7E,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC;AAElD;;;;GAIG;AACH,MAAM,cAAc,GAAG,CAAC,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;AAEvE,6EAA6E;AAC7E,MAAM,UAAU,WAAW,CAAC,OAAwB;IAClD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,aAAa,CAAC,WAAmB;IAC9C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;IACxC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,WAAmB;IACzD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC5C,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,IAAI,CACjB,GAAW,EACX,SAAiB,EACjB,OAAoB,EACpB,GAAa;IAEb,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,SAAS,KAAK,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QAC1D,MAAM,GAAG,GAAG,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACzE,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACrD,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAAiB,EACjB,WAAmB,EACnB,eAAuB;IAEvB,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,KAAK,MAAM,OAAO,IAAI,MAAM,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3D,KAAK,CAAC,OAAO,CAAC,GAAG,WAAW,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,QAAQ,GAAqB;QACjC,aAAa,EAAE,gCAAgC;QAC/C,eAAe;QACf,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,KAAK;KACN,CAAC;IACF,MAAM,SAAS,CACb,IAAI,CAAC,SAAS,EAAE,GAAG,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EACxD,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACxC,MAAM,CACP,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAAiB;IAC1D,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACzF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;QACnD,IAAI,MAAM,CAAC,aAAa,KAAK,gCAAgC;YAAE,OAAO,IAAI,CAAC;QAC3E,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/src/version.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Read the CLI's own version from `package.json` — the single source of truth,
+ * so `--version` output and the template manifest's `templateVersion` can
+ * never drift from the published version.
+ *
+ * Resolution: at runtime this module lives at `<pkg>/dist/<file>.js` (or one
+ * directory deeper for `dist/commands/*`), and the tsc build does not copy
+ * `package.json`, so the first existing candidate is always the right one.
+ */
+export declare function readPackageVersion(): string;

package/dist/src/version.js

@@ -0,0 +1,25 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { fileURLToPath } from 'node:url';
+/**
+ * Read the CLI's own version from `package.json` — the single source of truth,
+ * so `--version` output and the template manifest's `templateVersion` can
+ * never drift from the published version.
+ *
+ * Resolution: at runtime this module lives at `<pkg>/dist/<file>.js` (or one
+ * directory deeper for `dist/commands/*`), and the tsc build does not copy
+ * `package.json`, so the first existing candidate is always the right one.
+ */
+export function readPackageVersion() {
+    const here = path.dirname(fileURLToPath(import.meta.url));
+    const candidates = [
+        path.join(here, '..', 'package.json'),
+        path.join(here, '..', '..', 'package.json'),
+    ];
+    const manifest = candidates.find((candidate) => fs.existsSync(candidate));
+    if (!manifest) {
+        throw new Error(`package.json not found near ${here}; cannot resolve the CLI version.`);
+    }
+    return JSON.parse(fs.readFileSync(manifest, 'utf-8')).version;
+}
+//# sourceMappingURL=version.js.map

package/dist/src/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/version.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC;KAC5C,CAAC;IACF,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,mCAAmC,CAAC,CAAC;IAC1F,CAAC;IACD,OAAQ,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAyB,CAAC,OAAO,CAAC;AACzF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forgecart/cli",
-  "version": "2.202608221935.0",
+  "version": "2.202608300703.0",
   "type": "module",
   "description": "CLI for scaffolding and operating ForgeCart channel storefronts",
   "bin": {

package/templates/storefront/src/lib/shop-session.ts

@@ -42,21 +42,34 @@ export interface ShopSessionConfig {
 
 const SESSION_MIRROR_COOKIE = 'forgecart-session-client';
 
+/**
+ * Browser-readable mirror of the httpOnly `forgecart-visitor` cookie,
+ * minted by the middleware (#1079 P1). Its value rides the SDK's
+ * `forgecart-visitor` WS connection-params header so visitor-subject
+ * experiment goals stamp server-side.
+ */
+const VISITOR_MIRROR_COOKIE = 'forgecart-visitor-client';
+
 let config: ShopSessionConfig | null = null;
 let client: ForgeCartShopClient | null = null;
 let syncedToken: string | null = null;
 
-/** Read the session mirror cookie (null outside the browser or when absent). */
-export function readMirrorSession(): string | null {
+/** Read a JS-visible mirror cookie (null outside the browser or when absent). */
+function readMirrorCookie(name: string): string | null {
   if (typeof document === 'undefined') return null;
   const entry = document.cookie
     .split('; ')
-    .find((candidate) => candidate.startsWith(`${SESSION_MIRROR_COOKIE}=`));
+    .find((candidate) => candidate.startsWith(`${name}=`));
   if (!entry) return null;
-  const value = decodeURIComponent(entry.slice(SESSION_MIRROR_COOKIE.length + 1));
+  const value = decodeURIComponent(entry.slice(name.length + 1));
   return value.length > 0 ? value : null;
 }
 
+/** Read the session mirror cookie (null outside the browser or when absent). */
+export function readMirrorSession(): string | null {
+  return readMirrorCookie(SESSION_MIRROR_COOKIE);
+}
+
 /** Arm the singleton with the channel coordinates (idempotent; provider mount). */
 export function initShopSession(next: ShopSessionConfig): void {
   config = next;
@@ -77,6 +90,11 @@ function ensureClient(): ForgeCartShopClient {
     client = new ForgeCartShopClient({
       endpoint: config.apiUrl,
       channelToken: config.channelToken,
+      // The visitor mirror is minted by the middleware before any page can
+      // mount the provider, so it is present on every real navigation; when
+      // it is somehow absent the client simply sends no visitor header and
+      // visitor-subject goals stay unstamped (never guess — #1079).
+      visitorId: readMirrorCookie(VISITOR_MIRROR_COOKIE) ?? undefined,
     });
     const existing = readMirrorSession();
     if (existing) {

package/templates/storefront/src/middleware.ts

@@ -15,6 +15,16 @@ import { uuidv7 } from 'uuidv7';
  *  - Mint ONLY when the cookie is absent. An identified visitor's response
  *    carries NO `Set-Cookie` at all — re-sending it on every response would
  *    make every page uncacheable for shared caches.
+ *  - The key is DUAL-HOMED (#1079 P1, deliberate posture change): the
+ *    canonical `forgecart-visitor` cookie stays httpOnly (server reads:
+ *    `getVariant()`'s assignment, header forwarding), and a byte-identical
+ *    NON-httpOnly mirror `forgecart-visitor-client` (the
+ *    `forgecart-session-client` pattern) exposes it to browser JS so the
+ *    SDK can send it in WS connection params — visitor-subject goal events
+ *    are unattributable without it. The id is a UUIDv7, not a secret, and
+ *    the httpOnly original stays authoritative: a missing or tampered
+ *    mirror is re-synced FROM it (one extra `Set-Cookie` response per
+ *    legacy visitor, then the steady state is Set-Cookie-free again).
  *  - Zero fetches, zero environment reads: the workspace-pod prewarm boots
  *    this dev server with no `.env`, and the middleware must be inert
  *    to that (it never crashes a request, env or not).
@@ -48,6 +58,14 @@ import { uuidv7 } from 'uuidv7';
 
 const VISITOR_COOKIE_NAME = 'forgecart-visitor';
 
+/**
+ * Browser-readable mirror of {@link VISITOR_COOKIE_NAME} (#1079 P1) — same
+ * value, same lifetime, NOT httpOnly. Read by the shop-session SDK
+ * bootstrap and sent as the `forgecart-visitor` WS connection-params
+ * header. Never read server-side: the httpOnly original is authoritative.
+ */
+const VISITOR_MIRROR_COOKIE_NAME = 'forgecart-visitor-client';
+
 /** 400 days — Chrome's upper bound on cookie lifetime (RFC 6265bis). */
 const VISITOR_COOKIE_MAX_AGE_SECONDS = 400 * 24 * 60 * 60;
 
@@ -149,8 +167,15 @@ function mergeForcedEntries(request: NextRequest): string | null {
 
 export function middleware(request: NextRequest): NextResponse {
   const forcedEntryValue = mergeForcedEntries(request);
-  const mintVisitor = !request.cookies.has(VISITOR_COOKIE_NAME);
-  if (!forcedEntryValue && !mintVisitor) {
+  const storedVisitorId = request.cookies.get(VISITOR_COOKIE_NAME)?.value;
+  const mintVisitor = !storedVisitorId;
+  // Mirror sync (#1079 P1): absent on every pre-mirror visitor's first
+  // request back, and re-synced whenever it disagrees with the httpOnly
+  // original (client JS can rewrite it — the original is authoritative).
+  // `mintVisitor` implies a sync: a fresh id is written to BOTH homes.
+  const syncMirror =
+    mintVisitor || request.cookies.get(VISITOR_MIRROR_COOKIE_NAME)?.value !== storedVisitorId;
+  if (!forcedEntryValue && !syncMirror) {
     return NextResponse.next();
   }
 
@@ -175,14 +200,27 @@ export function middleware(request: NextRequest): NextResponse {
     response = NextResponse.next();
   }
 
-  if (mintVisitor) {
-    // `secure` is honored on https (deployed storefronts) and on localhost;
-    // browsers may drop it on other plain-http dev hosts — acceptable, since a
-    // stable visitor identity is a production concern, not a preview one.
+  if (syncMirror) {
+    const visitorId = storedVisitorId ?? uuidv7();
+    if (mintVisitor) {
+      // `secure` is honored on https (deployed storefronts) and on localhost;
+      // browsers may drop it on other plain-http dev hosts — acceptable, since a
+      // stable visitor identity is a production concern, not a preview one.
+      response.cookies.set({
+        name: VISITOR_COOKIE_NAME,
+        value: visitorId,
+        httpOnly: true,
+        secure: true,
+        sameSite: 'lax',
+        maxAge: VISITOR_COOKIE_MAX_AGE_SECONDS,
+        path: '/',
+      });
+    }
+    // Deliberately NOT httpOnly — see VISITOR_MIRROR_COOKIE_NAME.
     response.cookies.set({
-      name: VISITOR_COOKIE_NAME,
-      value: uuidv7(),
-      httpOnly: true,
+      name: VISITOR_MIRROR_COOKIE_NAME,
+      value: visitorId,
+      httpOnly: false,
       secure: true,
       sameSite: 'lax',
       maxAge: VISITOR_COOKIE_MAX_AGE_SECONDS,