@hearthlog/tooling 0.1.3 → 0.1.5

package/bin/hearthlog.mjs

@@ -2,7 +2,7 @@
 // The `hearthlog` command: runs the TypeScript tools through tsx. `build`, `init`, `export`, `check-module`, `lock`, `artifact`, and
 // `gallery-public:build` start before a site has generated files (or write their own), so they run alone; the
 // `apple:*` commands run the build and then the tools of `@hearthlog/native` (a dependency of the site, not of this
-// package); `ensure`, `deploy`, `deploy-ledger`, and `split` run the build and then a deploy tool; every other
+// package); `ensure`, `deploy`, and `deploy-ledger` run the build and then a deploy tool; every other
 // command goes to the CLI.
 import { spawnSync } from 'node:child_process';
 import { createRequire } from 'node:module';
@@ -33,7 +33,7 @@ if (native) {
 
 // The deploy tools read the site's generated files, so each starts with the build (which does nothing when they are
 // current). They work from a tenant repository because they run from this package, not from the host's scripts.
-const deployTools = { ensure: 'deploy/ensure-tenant.ts', deploy: 'deploy/deploy-tenant.ts', 'deploy-ledger': 'deploy/deploy-ledger.ts', split: 'deploy/split-tenant.ts' };
+const deployTools = { ensure: 'deploy/ensure-tenant.ts', deploy: 'deploy/deploy-tenant.ts', 'deploy-ledger': 'deploy/deploy-ledger.ts' };
 if (deployTools[command]) {
     const site = rest[rest.indexOf('--site') + 1];
     const env = { ...process.env, ...(rest.includes('--site') && site ? { VITE_STOR_TENANT: site } : {}) };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hearthlog/tooling",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "license": "AGPL-3.0-only",
   "repository": {
     "type": "git",
@@ -28,7 +28,7 @@
   },
   "dependencies": {
     "tsx": "^4.23.15",
-    "@hearthlog/contracts": "0.1.3"
+    "@hearthlog/contracts": "0.1.5"
   },
   "bin": {
     "hearthlog": "./bin/hearthlog.mjs"

package/src/check/check-layers.ts

@@ -12,9 +12,10 @@
 import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
 import { dirname, join, matchesGlob, relative, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
-import { hostRoot } from "../root.js";
+import { PLATFORM_ROOT } from "../root.js";
 
-const ROOT = hostRoot();
+// Layers are a property of the platform's packages, wherever the check runs from.
+const ROOT = PLATFORM_ROOT;
 const IMPORT = /(?:^|[^\w$.])(?:import|export)\s[^'"]*?from\s+['"]([^'"]+)['"]|import\(\s*['"]([^'"]+)['"]\s*\)|^\s*import\s+['"]([^'"]+)['"]/gm;
 
 export interface LayerConfig {

package/src/check/check-modules.ts

@@ -17,7 +17,7 @@
 import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
 import { dirname, join, relative, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
-import { hostRoot } from "../root.js";
+import { hostRoot, PLATFORM_ROOT } from "../root.js";
 
 const ROOT = hostRoot();
 const SOURCE = /\.(ts|svelte|js)$/;
@@ -89,6 +89,15 @@ export async function loadModuleDomain(root = ROOT): Promise<ModuleDomain> {
     };
 }
 
+/**
+ * The directories a check reads, each with the root it is under: the given ones under the host, or by default the host's
+ * own and the platform's (which are the same checkout unless the host is a site beside the platform's packages).
+ */
+function scanned(root: string, platform: string, given: string[] | undefined, host: string[], platformDirectories: string[]): Array<[string, string]> {
+    if (given) return given.map((directory) => [root, directory]);
+    return [...host.map((directory): [string, string] => [root, directory]), ...platformDirectories.map((directory): [string, string] => [platform, directory])];
+}
+
 const escapeRegExp = (value: string) => value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 
 /**
@@ -99,8 +108,10 @@ const escapeRegExp = (value: string) => value.replace(/[.*+?^${}()|[\]\\]/g, "\\
  */
 export function coreNamesNoDomain(
     root = ROOT,
-    directories = ["worker", "ledger/src", "packages/tooling/src/host", "packages/cloudflare/src", "packages/ledger/src", "packages/ledger-admin/src", "packages/contracts/src", "packages/runtime/src", "packages/ui/src"],
+    directories?: string[],
     domain: ModuleDomain = { names: [], eventTypes: [] },
+    /** The platform checkout, when it is not the host (`directories` are then the host's, under `root`). */
+    platform = root,
 ): string[] {
     const modulesDirectory = join(root, "modules");
     const featureIds = (existsSync(modulesDirectory) ? readdirSync(modulesDirectory) : []).flatMap((name) => {
@@ -113,16 +124,16 @@ export function coreNamesNoDomain(
     const quoted = quotedNames.length ? new RegExp(`(["'\`])(${quotedNames.map(escapeRegExp).join("|")})\\1`) : null;
     const events = domain.eventTypes.length ? new RegExp(`\\b(${domain.eventTypes.map(escapeRegExp).join("|")})\\b`) : null;
     const problems: string[] = [];
-    for (const directory of directories) {
-        for (const file of files(join(root, directory))) {
+    for (const [base, directory] of scanned(root, platform, directories, ["ledger/src"], ["packages/tooling/src/host", "packages/cloudflare/src", "packages/ledger/src", "packages/contracts/src", "packages/runtime/src", "packages/ui/src"])) {
+        for (const file of files(join(base, directory))) {
             if (/\.generated\.ts$|\.test\.ts$|\.d\.ts$|[\\/]generated\.ts$|worker-configuration/.test(file) || file.includes(`${sep}generated${sep}`) || file.includes(`${sep}(modules)${sep}`)) continue;
             readFileSync(file, "utf8").split("\n").forEach((line, index) => {
                 // Comments may use a domain as an example.
                 if (/^\s*(\*|\/\/|\/\*)/.test(line)) return;
                 const name = quoted?.exec(line);
-                if (name) problems.push(`${relative(root, file)}:${index + 1}: the core names ${name[1]}${name[2]}${name[1]}`);
+                if (name) problems.push(`${relative(base, file)}:${index + 1}: the core names ${name[1]}${name[2]}${name[1]}`);
                 const event = events?.exec(line);
-                if (event) problems.push(`${relative(root, file)}:${index + 1}: the core names the event type ${event[1]}`);
+                if (event) problems.push(`${relative(base, file)}:${index + 1}: the core names the event type ${event[1]}`);
             });
         }
     }
@@ -135,16 +146,16 @@ export function coreNamesNoDomain(
  * to one would break the day the file is no longer in this tree. The SDK facade, which still reaches
  * into `src/lib` by relative path, and the generated files themselves are exempt.
  */
-export function directGeneratedImports(root = ROOT, directories = ["src", "worker", "ledger", "scripts", "calendar-public", "packages/tooling/src", "packages/cloudflare/src", "packages/ledger/src", "packages/ledger-admin/src", "packages/contracts/src", "packages/runtime/src", "packages/ui/src"]): string[] {
+export function directGeneratedImports(root = ROOT, directories?: string[], platform = root): string[] {
     const problems: string[] = [];
     const generatedFile = /(^|[\\/])[\w-]+\.generated(\.js|\.ts)?$|(^|[\\/])tenant[\\/]generated(\.js|\.ts)?$/;
-    for (const directory of directories) {
-        for (const file of files(join(root, directory))) {
+    for (const [base, directory] of scanned(root, platform, directories, ["src", "ledger"], ["scripts", "packages/tooling/src", "packages/cloudflare/src", "packages/ledger/src", "packages/contracts/src", "packages/runtime/src", "packages/ui/src"])) {
+        for (const file of files(join(base, directory))) {
             // The scripts' own tests write fixture files whose text looks like imports, and the generators emit import lines.
             if (/\.generated\.ts$|[\\/]generated\.ts$/.test(file) || file.includes(`${sep}generated${sep}`) || file.includes(`${sep}(modules)${sep}`) || ((directory === "scripts" || directory === "packages/tooling/src") && /\.test\.ts$|(compose-modules|generate-[a-z-]+)\.ts$/.test(file))) continue;
             for (const specifier of specifiers(file)) {
                 if ((specifier.startsWith(".") || specifier.startsWith("#lib")) && generatedFile.test(specifier)) {
-                    problems.push(`${relative(root, file)}: "${specifier}" is a generated file (import it through #generated/*)`);
+                    problems.push(`${relative(base, file)}: "${specifier}" is a generated file (import it through #generated/*)`);
                 }
             }
         }
@@ -152,7 +163,7 @@ export function directGeneratedImports(root = ROOT, directories = ["src", "worke
     return problems;
 }
 
-export function checkBoundaries(root = ROOT, domain?: ModuleDomain): string[] {
+export function checkBoundaries(root = ROOT, domain?: ModuleDomain, platform = root): string[] {
     const problems: string[] = [];
     const modulesDirectory = join(root, "modules");
     // A platform workspace or a tenant repository has no modules directory.
@@ -174,21 +185,22 @@ export function checkBoundaries(root = ROOT, domain?: ModuleDomain): string[] {
         }
     }
     const generated = /\.generated\.ts$|[\\/]\(modules\)[\\/]/;
-    for (const directory of ["src", "worker", "packages"]) {
-        for (const file of files(join(root, directory))) {
+    for (const [base, directory] of scanned(root, platform, undefined, ["src"], ["packages"])) {
+        for (const file of files(join(base, directory))) {
             if (generated.test(file)) continue;
             for (const specifier of specifiers(file)) {
-                if (specifier.startsWith("@hearthlog/module-")) problems.push(`${relative(root, file)}: the core imports a module ("${specifier}")`);
+                if (specifier.startsWith("@hearthlog/module-")) problems.push(`${relative(base, file)}: the core imports a module ("${specifier}")`);
             }
         }
     }
-    problems.push(...coreNamesNoDomain(root, undefined, domain));
-    problems.push(...directGeneratedImports(root));
+    problems.push(...coreNamesNoDomain(root, undefined, domain, platform));
+    problems.push(...directGeneratedImports(root, undefined, platform));
     return problems;
 }
 
 if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
-    const problems = checkBoundaries(ROOT, await loadModuleDomain(ROOT));
+    // The host (its modules, its own code, the generated catalog) and the platform's packages may be different checkouts.
+    const problems = checkBoundaries(ROOT, await loadModuleDomain(ROOT), PLATFORM_ROOT);
     if (problems.length) {
         console.error(`Module boundaries are broken:\n  - ${problems.join("\n  - ")}`);
         process.exitCode = 1;

package/src/check/check-tenant-config.ts

@@ -186,7 +186,7 @@ for (const stack of stackNames) {
     if (JSON.stringify(feedSites) !== JSON.stringify(expectedSites)) problems.push(`${label}: the feed Worker should bind ${expectedSites.join(", ")}`);
     // A site on its own stack has a public Gallery Worker only when it ships the Gallery; the shared stack always has one.
     const ownSite = stack === "shared" ? undefined : sites.find((site) => site.id === stack)!;
-    if ((!ownSite || ownSite.features.includes("gallery")) && read("gallery-public").name !== siteInfrastructure.galleryPublicWorker) problems.push(`${label}: the public Gallery Worker should be named ${siteInfrastructure.galleryPublicWorker}`);
+    if ((!ownSite || (ownSite.features as readonly string[]).includes("gallery")) && read("gallery-public").name !== siteInfrastructure.galleryPublicWorker) problems.push(`${label}: the public Gallery Worker should be named ${siteInfrastructure.galleryPublicWorker}`);
 }
 
 for (const site of sites) problems.push(...(await moduleLockProblems(site)));

package/src/compose/compose-modules.ts

@@ -12,7 +12,7 @@
  *              gitignored `.generated/` by `pnpm build:generated`, which runs
  *              this first because everything else reads it. A site's modules
  *              are the ones in its `tenants/<id>/modules.lock.json`.
- *   (default)  The routes of one tenant (VITE_STOR_TENANT, default "st"):
+ *   (default)  The routes of one tenant (VITE_STOR_TENANT, default the host's only site, else "st"):
  *              thin wrappers in the gitignored `src/routes/(modules)/` for
  *              the modules whose features the tenant enables, so a tenant
  *              without a module ships none of its pages.
@@ -27,7 +27,7 @@ import { dirname, join, relative, resolve, sep } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { isDeepStrictEqual } from "node:util";
 import { CORE_ROUTE_PATHS } from "../host/core-routes.js";
-import { hostRoot } from "../root.js";
+import { activeSiteId, hostRoot } from "../root.js";
 
 import { findCollisions, validateManifest, type ModuleManifest } from "@hearthlog/contracts";
 
@@ -91,13 +91,13 @@ export function installedModuleDirectories(root = REPOSITORY_ROOT): string[] {
 }
 
 /**
- * The modules a host has: those in its `modules/` folder (a checkout that develops them) and the packages
- * it installs (a site that uses them). Given a directory, only that folder is scanned.
+ * The modules a host has: those in its `modules/` folder (a checkout that develops them, or a link to one) and
+ * the packages it installs (a site that uses them). Given a directory, only that folder is scanned.
  */
 export function loadModules(directory?: string): LoadedModule[] {
     const scanned = (folder: string): string[] => existsSync(folder)
         ? readdirSync(folder, { withFileTypes: true })
-            .filter((entry) => entry.isDirectory() && existsSync(join(folder, entry.name, "hearthlog.module.json")))
+            .filter((entry) => (entry.isDirectory() || entry.isSymbolicLink()) && existsSync(join(folder, entry.name, "hearthlog.module.json")))
             .map((entry) => join(folder, entry.name))
         : [];
     const directories = directory !== undefined ? scanned(directory) : [...scanned(MODULES_DIRECTORY), ...installedModuleDirectories()];
@@ -448,7 +448,7 @@ export async function generateCatalog({ siteId, all = false, check = false }: Ca
 async function composeRoutes(): Promise<void> {
     const modules = loadModules();
     checkComposition(modules);
-    const siteId = process.env.VITE_STOR_TENANT?.trim() || "st";
+    const siteId = activeSiteId();
     const { loadTenantConfig, siteById } = await import("../tenants/tenant-config.js");
     const { sites } = await loadTenantConfig(undefined, { only: siteId });
     const site = siteById(sites, siteId);
@@ -477,7 +477,7 @@ async function composeRoutes(): Promise<void> {
 
 export async function main(argv = process.argv.slice(2)): Promise<void> {
     const site = argv.indexOf("--site");
-    const siteId = (site >= 0 ? argv[site + 1] : undefined) ?? (process.env.VITE_STOR_TENANT?.trim() || "st");
+    const siteId = (site >= 0 ? argv[site + 1] : undefined) ?? activeSiteId();
     if (argv.includes("--catalog")) await generateCatalog({ siteId, all: argv.includes("--all"), check: argv.includes("--check") });
     else await composeRoutes();
 }

package/src/compose/module-scaffold.ts

@@ -18,6 +18,7 @@ import { fileURLToPath } from "node:url";
 
 import { MODULE_API_VERSION } from "@hearthlog/contracts";
 
+import { PLATFORM_ROOT } from "../root.js";
 import { REPOSITORY_ROOT } from "../tenants/tenant-config.js";
 
 const TEMPLATE = join(dirname(fileURLToPath(import.meta.url)), "..", "..", "templates", "module");
@@ -92,10 +93,10 @@ export const load = ({ url }: { url: URL }) => deferLocalPage(url, {}, async ()
 `,
         "README.md": `# ${label}
 
-A module for the stor platform. It reaches the app only through \`@hearthlog/sdk\`; see
-\`docs/modules.md\` in the platform repository for what a module may declare (pages, entities,
-repositories, gateway code, startup code, attention badges) and \`pnpm check:modules\` for the
-boundary it enforces.
+A module for the Hearthlog platform. It reaches the app only through \`@hearthlog/sdk\`; the
+\`ModuleManifest\` type in \`@hearthlog/contracts\` documents what a module may declare (pages, entities,
+repositories, gateway code, startup code, attention badges), and \`pnpm check:modules\` enforces the
+boundary.
 `,
     };
 }
@@ -138,7 +139,8 @@ export function exportModule(modulesDirectory: string, name: string, out: string
     if (manifest.dependencies && Object.keys(manifest.dependencies).length === 0) delete manifest.dependencies;
     delete manifest.private;
     manifest.license = "AGPL-3.0-only";
-    const root = JSON.parse(readFileSync(join(REPOSITORY_ROOT, "package.json"), "utf8")) as { devDependencies?: Record<string, string>; packageManager?: string };
+    // The repository the module leaves: its pnpm and test tooling, and its license.
+    const root = JSON.parse(readFileSync(join(PLATFORM_ROOT, "package.json"), "utf8")) as { devDependencies?: Record<string, string>; packageManager?: string };
     const publishable = {
         ...manifest,
         repository: { type: "git", url: `git+https://github.com/hearthlog/hearthlog-module-${name}.git` },
@@ -160,7 +162,7 @@ export function exportModule(modulesDirectory: string, name: string, out: string
     writeFileSync(join(out, "pnpm-workspace.yaml"), "onlyBuiltDependencies:\n  - esbuild\n");
     copyFileSync(join(TEMPLATE, "ci.yml.tmpl"), join(out, ".github", "workflows", "ci.yml"));
     copyFileSync(join(TEMPLATE, "release.yml.tmpl"), join(out, ".github", "workflows", "release.yml"));
-    cpSync(join(REPOSITORY_ROOT, "LICENSE"), join(out, "LICENSE"));
+    cpSync(join(PLATFORM_ROOT, "LICENSE"), join(out, "LICENSE"));
     const readme = join(out, "README.md");
     const existing = existsSync(readme) ? readFileSync(readme, "utf8").trimEnd() : `# ${title(name)}`;
     writeFileSync(readme, `${existing}\n\n## Status\n\nIt installs against \`@hearthlog/sdk\` ${platformRange}.\n\n\`\`\`bash\npnpm install\npnpm test   # generates a site that enables this module, installs it, builds it, then runs the unit tests\n\`\`\`\n\nRelease: set \`version\` in \`package.json\`, commit, and push the tag \`v<version>\`; the release workflow publishes with provenance after approval.\n`);

package/src/deploy/deploy-tenant.ts

@@ -130,7 +130,7 @@ export async function deploySite(options: Options): Promise<void> {
 async function deployOwnPublicWorkers(site: ResolvedSite, dryRun: boolean, skipBuild: boolean): Promise<void> {
 	if (!site.deployment) return;
 	const args = ["deploy", ...(dryRun ? ["--dry-run"] : [])];
-	if (site.features.includes("gallery")) {
+	if ((site.features as readonly string[]).includes("gallery")) {
 		if (skipBuild) {
 			// A release built elsewhere carries its Worker bundle; only the configs are written here.
 			await generateHostConfigs(site.id);

package/src/generate/build-generated.ts

@@ -17,7 +17,7 @@
  *
  *   pnpm build:generated [--site <id>] [--all-modules] [--check] [--force]
  *
- * The site defaults to VITE_STOR_TENANT, then "st". `--all-modules` writes the catalog of every installed
+ * The site defaults to VITE_STOR_TENANT, then the host's only site, then "st". `--all-modules` writes the catalog of every installed
  * module and nothing else (`pnpm lock:modules` reads it). `--check` fails when the outputs are stale.
  */
 
@@ -29,7 +29,7 @@ import { fileURLToPath } from "node:url";
 
 import { generateCatalog, GENERATED_DIRECTORY, loadModules, modulesInLock, siteDirectory } from "../compose/compose-modules.js";
 import { packageDirectory } from "../host/write-host.js";
-import { hostRoot } from "../root.js";
+import { activeSiteId, hostRoot } from "../root.js";
 
 const ROOT = hostRoot();
 const STATE_PATH = join(GENERATED_DIRECTORY, ".build.json");
@@ -153,7 +153,7 @@ export async function build(options: BuildOptions): Promise<"built" | "current">
 
 async function main(argv: string[]): Promise<void> {
     const site = argv.indexOf("--site");
-    const siteId = (site >= 0 ? argv[site + 1] : undefined) ?? (process.env.VITE_STOR_TENANT?.trim() || "st");
+    const siteId = (site >= 0 ? argv[site + 1] : undefined) ?? activeSiteId();
     const outcome = await build({ siteId, all: argv.includes("--all-modules"), check: argv.includes("--check"), force: argv.includes("--force") });
     if (outcome === "current" && !argv.includes("--quiet")) console.log(`Generated files are current for ${siteId}.`);
 }

package/src/generate/generate-tenant.ts

@@ -4,7 +4,7 @@
  *
  * Resolves one site from tenants.json and emits the runtime module the
  * browser app consumes, plus the tenant-branded app shell. The site is
- * selected with VITE_STOR_TENANT (default: "st").
+ * selected with VITE_STOR_TENANT (default: the host's only site, else "st").
  *
  * Usage: VITE_STOR_TENANT=bravo pnpm build:generated
  *
@@ -27,6 +27,7 @@ import {
 } from "../tenants/tenant-config.js";
 import { generateHostConfigs } from "../tenants/host-configs.js";
 import { generateTenantWranglerConfigs } from "../tenants/wrangler-config.js";
+import { activeSiteId } from "../root.js";
 import { brandMarkMaskUrl, wordmarkParts } from "@hearthlog/contracts/tenant/brand";
 import {
     themeVariablesCss,
@@ -137,7 +138,7 @@ if (/%%BRAND_[A-Z_]+%%/.test(brandable)) {
 }
 
 if (process.env.STOR_SKIP_TENANT_GENERATION !== "1") {
-    await generateTenant(process.env.VITE_STOR_TENANT?.trim() || "st", {
+    await generateTenant(activeSiteId(), {
         generateWranglerConfigs: process.env.STOR_WRANGLER_CONFIGS !== "0",
     });
 }

package/src/host/write-host.ts

@@ -19,7 +19,7 @@ import { createRequire } from "node:module";
 import { dirname, join, relative, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
 
-import { hostRoot } from "../root.js";
+import { activeSiteId, hostRoot } from "../root.js";
 import { CORE_ROUTE_FILES } from "./core-routes.js";
 
 const ROOT = hostRoot();
@@ -112,7 +112,7 @@ export async function writeHost(siteId: string): Promise<void> {
 }
 
 if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
-    writeHost(process.env.VITE_STOR_TENANT?.trim() || "st").catch((error: unknown) => {
+    writeHost(activeSiteId()).catch((error: unknown) => {
         console.error(error instanceof Error ? error.message : String(error));
         process.exitCode = 1;
     });

package/src/root.ts

@@ -1,5 +1,35 @@
-import { existsSync } from "node:fs";
+import { existsSync, readdirSync, readFileSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+/**
+ * The platform checkout this tooling runs from: the repository with `packages/`, `scripts/`, and the license. Only the
+ * repository's own checks and exports use it; everything a site owns is under `hostRoot()`.
+ */
+export const PLATFORM_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "../../..");
+
+/**
+ * The site a build works on: `VITE_STOR_TENANT` when it is set, otherwise the host's only site (a repository
+ * made by `hearthlog init` or `hearthlog export` holds one), otherwise "st", the development site of the platform.
+ */
+export function activeSiteId(root: string = hostRoot()): string {
+    const named = process.env.VITE_STOR_TENANT?.trim();
+    if (named) return named;
+    const sites = new Set<string>();
+    const tenants = join(root, "tenants");
+    if (existsSync(tenants)) {
+        for (const entry of readdirSync(tenants, { withFileTypes: true })) {
+            if (entry.isDirectory() && existsSync(join(tenants, entry.name, "tenant.json"))) sites.add(entry.name);
+        }
+    }
+    try {
+        const listed = (JSON.parse(readFileSync(join(root, "tenants.json"), "utf8")) as { sites?: Array<{ id?: unknown }> }).sites ?? [];
+        for (const site of listed) if (typeof site.id === "string") sites.add(site.id);
+    } catch {
+        // No tenants.json, or one the tenant configuration check reports: the directories decide.
+    }
+    return sites.size === 1 ? [...sites][0]! : "st";
+}
 
 /**
  * The repository a command works on: the nearest directory, from the working directory upward, that

package/src/tenants/host-configs.ts

@@ -81,7 +81,7 @@ export async function generateHostConfigs(stack: Stack): Promise<string[]> {
         infrastructure = infrastructureFor(site, shared);
         ledgerAccount = site.deployment.accountId;
         calendarSites = [site.id];
-        gallery = site.features.includes("gallery");
+        gallery = (site.features as readonly string[]).includes("gallery");
     } else if (calendarSites.length === 0) {
         return written;
     }

package/src/tenants/tenant-config.ts

@@ -105,7 +105,7 @@ export interface InfrastructureDefinition {
     ledgerAdminEmail: string;
     /** Shared Cloudflare Access team origin pushed to every site Worker. */
     accessTeamDomain: string;
-    /** The Cloudflare account that holds the shared stack; `tenant:split declare` pins a moved site to it. */
+    /** The Cloudflare account that holds the shared stack. */
     accountId?: string;
     /** Browser application and team-wide SSO lifetimes, in whole hours. */
     accessSessionDuration?: string;

package/src/vite/config.ts

@@ -10,6 +10,7 @@ import { readFileSync } from 'node:fs';
 import { execFileSync } from 'node:child_process';
 import { join, resolve } from 'node:path';
 import { localGatewayOriginAllowed, readLocalLedgerCredentialSync } from '../dev/local-development.js';
+import { activeSiteId } from '../root.js';
 import {
 	e2eLedgerStubPlugin,
 	localAiDecisionsPlugin,
@@ -21,7 +22,17 @@ import {
 	localReceivedInvoiceFilesPlugin,
 } from './dev-plugins.js';
 
-import { defineConfig, type ProxyOptions, type UserConfig } from 'vite';
+import { defineConfig, searchForWorkspaceRoot, type ProxyOptions, type UserConfig } from 'vite';
+
+/** The `@hearthlog/*` packages the site depends on (the platform and its modules). */
+function hearthlogDependencies(): string[] {
+	try {
+		const manifest = JSON.parse(readFileSync('package.json', 'utf8')) as { dependencies?: Record<string, string>; devDependencies?: Record<string, string> };
+		return Object.keys({ ...manifest.dependencies, ...manifest.devDependencies }).filter((name) => name.startsWith('@hearthlog/') && name !== '@hearthlog/generated');
+	} catch {
+		return [];
+	}
+}
 
 function installedVersion(name: string): string {
 	try {
@@ -65,7 +76,10 @@ const buildTimestamp = process.env.STOR_BUILD_TIMESTAMP?.trim() || new Date().to
 // Tenant build selection: VITE_STOR_TENANT=bravo writes the site into
 // build/bravo (matching wrangler env.bravo assets.directory). The default
 // tenant keeps the historical ./build output used by the top-level Worker.
-const tenantId = process.env.VITE_STOR_TENANT?.trim() || 'st';
+// Without VITE_STOR_TENANT a host with one site builds that site; the value is
+// set here so the plugins and `import.meta.env` (the service worker) agree.
+const tenantId = activeSiteId();
+process.env.VITE_STOR_TENANT = tenantId;
 const buildDirectory = process.env.STOR_BUILD_OUTPUT_ROOT?.trim() ||
 	(tenantId === 'st' ? 'build' : `build/${tenantId}`);
 const svelteKitOutDir = process.env.STOR_SVELTEKIT_OUT_DIR?.trim() || '.svelte-kit';
@@ -228,8 +242,9 @@ return defineConfig(({ command, mode }): UserConfig => {
 		},
 		server: {
 			...devServerProxy,
-			// Module and SDK sources live outside src/; Kit's default list omits them.
-			fs: { allow: [resolve('modules'), resolve('packages')] }
+			// Module and SDK sources live outside src/; Kit's default list omits them. In a workspace the platform's packages
+			// are linked from outside the site, so the workspace root is allowed too.
+			fs: { allow: [resolve('modules'), resolve('packages'), searchForWorkspaceRoot(process.cwd())] }
 		},
 		resolve: {
 			alias: {
@@ -293,7 +308,9 @@ return defineConfig(({ command, mode }): UserConfig => {
 		},
 	],
 	optimizeDeps: {
-		exclude: ['sqlocal', 'microlighter']
+		// The platform and the modules ship Svelte and TypeScript source; installed from the registry they sit in node_modules,
+		// where the dependency scan cannot resolve their relative imports. They are compiled with the site, not pre-bundled.
+		exclude: ['sqlocal', 'microlighter', ...hearthlogDependencies()]
 	},
 	build: {
 		// Bundle Microlighter's lazy grammars, which Vite skips in dependencies by default.

package/src/vite/vite-plugin-tenant-manifest.ts

@@ -9,6 +9,7 @@
 import type { Plugin } from 'vite';
 
 import { themeVariablesFor } from '../../../contracts/src/tenant/theme.js';
+import { activeSiteId } from '../root.js';
 import { loadTenantConfig, siteById } from '../tenants/tenant-config.js';
 
 const MANIFEST_PATH = '/manifest.webmanifest';
@@ -40,7 +41,7 @@ async function manifestJson(siteId: string): Promise<string> {
 }
 
 export function tenantManifestPlugin(): Plugin {
-    const siteId = process.env.VITE_STOR_TENANT?.trim() || 'st';
+    const siteId = activeSiteId();
     return {
         name: 'tenant-manifest',
         configureServer(server) {