@hogsend/cli 0.0.1

package/LICENSE

@@ -0,0 +1,93 @@
+Elastic License 2.0 (ELv2)
+
+Copyright 2025 Doug Silkstone and Hogsend contributors
+
+## Acceptance
+
+By using the software, you agree to all of the terms and conditions below.
+
+## Copyright License
+
+The licensor grants you a non-exclusive, royalty-free, worldwide,
+non-sublicensable, non-transferable license to use, copy, distribute, make
+available, and prepare derivative works of the software, in each case subject to
+the limitations and conditions below.
+
+## Limitations
+
+You may not provide the software to third parties as a hosted or managed
+service, where the service provides users with access to any substantial set of
+the features or functionality of the software.
+
+You may not move, change, disable, or circumvent the license key functionality
+in the software, and you may not remove or obscure any functionality in the
+software that is protected by the license key.
+
+You may not alter, remove, or obscure any licensing, copyright, or other notices
+of the licensor in the software. Any use of the licensor's trademarks is subject
+to applicable law.
+
+## Patents
+
+The licensor grants you a license, under any patent claims the licensor can
+license, or becomes able to license, to make, have made, use, sell, offer for
+sale, import and have imported the software, in each case subject to the
+limitations and conditions in this license. This license does not cover any
+patent claims that you cause to be infringed by modifications or additions to
+the software. If you or your company make any written claim that the software
+infringes or contributes to infringement of any patent, your patent license for
+the software granted under these terms ends immediately. If your company makes
+such a claim, your patent license ends immediately for work on behalf of your
+company.
+
+## Notices
+
+You must ensure that anyone who gets a copy of any part of the software from you
+also gets a copy of these terms.
+
+If you modify the software, you must include in any modified copies of the
+software prominent notices stating that you have modified the software.
+
+## No Other Rights
+
+These terms do not imply any licenses other than those expressly granted in
+these terms.
+
+## Termination
+
+If you use the software in violation of these terms, such use is not licensed,
+and your licenses will automatically terminate. If the licensor provides you
+with a notice of your violation, and you cease all violation of this license no
+later than 30 days after you receive that notice, your licenses will be
+reinstated retroactively. However, if you violate these terms after such
+reinstatement, any additional violation of these terms will cause your licenses
+to terminate automatically and permanently.
+
+## No Liability
+
+*As far as the law allows, the software comes as is, without any warranty or
+condition, and the licensor will not be liable to you for any damages arising out
+of these terms or the use or nature of the software, under any kind of legal
+claim.*
+
+## Definitions
+
+The **licensor** is the entity offering these terms, and the **software** is the
+software the licensor makes available under these terms, including any portion
+of it.
+
+**you** refers to the individual or entity agreeing to these terms.
+
+**your company** is any legal entity, sole proprietorship, or other kind of
+organization that you work for, plus all organizations that have control over,
+are under the control of, or are under common control with that organization.
+**control** means ownership of substantially all the assets of an entity, or the
+power to direct its management and policies by vote, contract, or otherwise.
+Control can be direct or indirect.
+
+**your licenses** are all the licenses granted to you for the software under
+these terms.
+
+**use** means anything you do with the software requiring one of your licenses.
+
+**trademark** means trademarks, service marks, and similar rights.

package/dist/bin.js

@@ -0,0 +1,231 @@
+#!/usr/bin/env node
+
+// src/bin.ts
+import { existsSync as existsSync2, realpathSync } from "fs";
+import { createRequire } from "module";
+import { dirname, join as join2, sep as sep2 } from "path";
+import { parseArgs } from "util";
+
+// src/eject.ts
+import { existsSync } from "fs";
+import { cp, readFile, rm, stat, writeFile } from "fs/promises";
+import { basename, join, relative, sep } from "path";
+var EjectError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "EjectError";
+  }
+};
+var EXCLUDED_NAMES = /* @__PURE__ */ new Set([
+  "node_modules",
+  "dist",
+  ".turbo",
+  ".changeset",
+  "CHANGELOG.md"
+]);
+async function readPackageJson(file) {
+  const raw = await readFile(file, "utf8");
+  return JSON.parse(raw);
+}
+async function writePackageJson(file, value) {
+  await writeFile(file, `${JSON.stringify(value, null, 2)}
+`, "utf8");
+}
+async function eject(opts) {
+  const { pkg, consumerRoot, sourceDir, force = false } = opts;
+  const vendorName = basename(pkg);
+  const vendorPath = join(consumerRoot, "vendor", vendorName);
+  const consumerPkgPath = join(consumerRoot, "package.json");
+  const consumerPkg = await readPackageJson(consumerPkgPath);
+  let depMap;
+  let depSpecBefore;
+  if (consumerPkg.dependencies?.[pkg] !== void 0) {
+    depMap = "dependencies";
+    depSpecBefore = consumerPkg.dependencies[pkg];
+  } else if (consumerPkg.devDependencies?.[pkg] !== void 0) {
+    depMap = "devDependencies";
+    depSpecBefore = consumerPkg.devDependencies[pkg];
+  }
+  if (!depMap || depSpecBefore === void 0) {
+    throw new EjectError(
+      `${pkg} is not a dependency of the consumer package.json`
+    );
+  }
+  if (existsSync(vendorPath)) {
+    if (!force) {
+      throw new EjectError(
+        `vendor/${vendorName} already exists; pass --force to overwrite`
+      );
+    }
+    await rm(vendorPath, { recursive: true, force: true });
+  }
+  let copiedFiles = 0;
+  await cp(sourceDir, vendorPath, {
+    recursive: true,
+    filter: (source) => {
+      const rel = relative(sourceDir, source);
+      if (rel === "") {
+        return true;
+      }
+      const segments = rel.split(sep);
+      const name = basename(rel);
+      if (segments.some((segment) => EXCLUDED_NAMES.has(segment))) {
+        return false;
+      }
+      if (name.endsWith(".test.ts")) {
+        return false;
+      }
+      return true;
+    }
+  });
+  copiedFiles = await countFiles(vendorPath);
+  const vendoredPkgPath = join(vendorPath, "package.json");
+  const vendoredPkg = await readPackageJson(vendoredPkgPath);
+  if (vendoredPkg.private === true) {
+    delete vendoredPkg.private;
+  }
+  await writePackageJson(vendoredPkgPath, vendoredPkg);
+  const depSpecAfter = `file:./vendor/${vendorName}`;
+  consumerPkg[depMap][pkg] = depSpecAfter;
+  await writePackageJson(consumerPkgPath, consumerPkg);
+  return {
+    pkg,
+    vendorPath,
+    depSpecBefore,
+    depSpecAfter,
+    copiedFiles,
+    followUp: "pnpm install"
+  };
+}
+async function countFiles(dir) {
+  const { readdir } = await import("fs/promises");
+  let count = 0;
+  const entries = await readdir(dir, { withFileTypes: true });
+  for (const entry of entries) {
+    const full = join(dir, entry.name);
+    if (entry.isDirectory()) {
+      count += await countFiles(full);
+    } else if (entry.isFile()) {
+      count += 1;
+    } else {
+      const info = await stat(full);
+      if (info.isFile()) {
+        count += 1;
+      }
+    }
+  }
+  return count;
+}
+
+// src/bin.ts
+var USAGE = `hogsend \u2014 Hogsend project CLI
+
+Usage:
+  hogsend eject <package> [--force] [--cwd <dir>]
+
+Commands:
+  eject <package>   Copy a @hogsend/* package's source into vendor/<name> and
+                    rewrite the consumer dependency to file:./vendor/<name>.
+                    Every other dependency keeps upgrading via pnpm up.
+
+Options:
+  --force           Overwrite an existing vendor/<name>.
+  --cwd <dir>       Consumer repo root (defaults to the current directory).
+  -h, --help        Show this help.
+
+After ejecting, run: pnpm install`;
+var RED = "\x1B[31m";
+var RESET = "\x1B[0m";
+function fail(message) {
+  process.stderr.write(`${RED}error${RESET} ${message}
+`);
+  process.exit(1);
+}
+function resolveSourceDir(pkg, consumerRoot) {
+  const direct = join2(consumerRoot, "node_modules", pkg, "package.json");
+  if (existsSync2(direct)) {
+    return dirname(realpathSync(direct));
+  }
+  const require2 = createRequire(`${consumerRoot}${sep2}`);
+  try {
+    const entry = require2.resolve(pkg);
+    let dir = dirname(entry);
+    while (dir !== dirname(dir)) {
+      const candidate = join2(dir, "package.json");
+      if (existsSync2(candidate)) {
+        return dir;
+      }
+      dir = dirname(dir);
+    }
+  } catch {
+  }
+  fail(
+    `cannot resolve ${pkg} from ${consumerRoot}. Is it installed? Run pnpm install first.`
+  );
+}
+async function runEject(args) {
+  const { values, positionals } = parseArgs({
+    args,
+    allowPositionals: true,
+    options: {
+      force: { type: "boolean", default: false },
+      cwd: { type: "string" },
+      help: { type: "boolean", short: "h", default: false }
+    }
+  });
+  if (values.help) {
+    process.stdout.write(`${USAGE}
+`);
+    return;
+  }
+  const pkg = positionals[0];
+  if (!pkg) {
+    fail("eject requires a package name, e.g. hogsend eject @hogsend/engine");
+  }
+  const consumerRoot = values.cwd ?? process.cwd();
+  const sourceDir = resolveSourceDir(pkg, consumerRoot);
+  try {
+    const result = await eject({
+      pkg,
+      consumerRoot,
+      sourceDir,
+      force: values.force
+    });
+    process.stdout.write(
+      `Ejected ${result.pkg}
+  copied ${result.copiedFiles} files -> ${result.vendorPath}
+  dependency ${result.depSpecBefore} -> ${result.depSpecAfter}
+
+Now run: ${result.followUp}
+`
+    );
+  } catch (error) {
+    if (error instanceof EjectError) {
+      fail(error.message);
+    }
+    throw error;
+  }
+}
+async function main() {
+  const [command, ...rest] = process.argv.slice(2);
+  if (!command || command === "--help" || command === "-h") {
+    process.stdout.write(`${USAGE}
+`);
+    return;
+  }
+  switch (command) {
+    case "eject":
+      await runEject(rest);
+      break;
+    default:
+      fail(`unknown command "${command}"
+
+${USAGE}`);
+  }
+}
+main().catch((error) => {
+  process.stderr.write(`${RED}error${RESET} ${String(error)}
+`);
+  process.exit(1);
+});
+//# sourceMappingURL=bin.js.map

package/dist/bin.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/bin.ts","../src/eject.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { existsSync, realpathSync } from \"node:fs\";\nimport { createRequire } from \"node:module\";\nimport { dirname, join, sep } from \"node:path\";\nimport { parseArgs } from \"node:util\";\nimport { EjectError, eject } from \"./eject.js\";\n\nconst USAGE = `hogsend — Hogsend project CLI\n\nUsage:\n  hogsend eject <package> [--force] [--cwd <dir>]\n\nCommands:\n  eject <package>   Copy a @hogsend/* package's source into vendor/<name> and\n                    rewrite the consumer dependency to file:./vendor/<name>.\n                    Every other dependency keeps upgrading via pnpm up.\n\nOptions:\n  --force           Overwrite an existing vendor/<name>.\n  --cwd <dir>       Consumer repo root (defaults to the current directory).\n  -h, --help        Show this help.\n\nAfter ejecting, run: pnpm install`;\n\nconst RED = \"\\x1b[31m\";\nconst RESET = \"\\x1b[0m\";\n\nfunction fail(message: string): never {\n  process.stderr.write(`${RED}error${RESET} ${message}\\n`);\n  process.exit(1);\n}\n\n/**\n * Resolves the on-disk source directory for an installed package from the\n * consumer root. Works for pnpm's `.pnpm` layout and workspace symlinks.\n *\n * Strategy 1 (primary): probe `<consumerRoot>/node_modules/<pkg>/package.json`\n * directly, following the symlink to its real location. This is the common\n * layout and — unlike `require.resolve(\"<pkg>/package.json\")` — is NOT blocked\n * by the package's `exports` map (most packages don't expose `./package.json`).\n *\n * Strategy 2 (fallback): resolve the package's main entry via `createRequire`\n * and walk up to the nearest directory that contains a package.json whose\n * `name` matches.\n */\nfunction resolveSourceDir(pkg: string, consumerRoot: string): string {\n  const direct = join(consumerRoot, \"node_modules\", pkg, \"package.json\");\n  if (existsSync(direct)) {\n    // realpath follows pnpm/workspace symlinks to the actual source dir.\n    return dirname(realpathSync(direct));\n  }\n\n  const require = createRequire(`${consumerRoot}${sep}`);\n  try {\n    // Resolving the entry point works even when `./package.json` is not an\n    // exported subpath; we then walk up to the package root.\n    const entry = require.resolve(pkg);\n    let dir = dirname(entry);\n    while (dir !== dirname(dir)) {\n      const candidate = join(dir, \"package.json\");\n      if (existsSync(candidate)) {\n        return dir;\n      }\n      dir = dirname(dir);\n    }\n  } catch {\n    // fall through to the failure below\n  }\n\n  fail(\n    `cannot resolve ${pkg} from ${consumerRoot}. Is it installed? Run pnpm install first.`,\n  );\n}\n\nasync function runEject(args: string[]): Promise<void> {\n  const { values, positionals } = parseArgs({\n    args,\n    allowPositionals: true,\n    options: {\n      force: { type: \"boolean\", default: false },\n      cwd: { type: \"string\" },\n      help: { type: \"boolean\", short: \"h\", default: false },\n    },\n  });\n\n  if (values.help) {\n    process.stdout.write(`${USAGE}\\n`);\n    return;\n  }\n\n  const pkg = positionals[0];\n  if (!pkg) {\n    fail(\"eject requires a package name, e.g. hogsend eject @hogsend/engine\");\n  }\n\n  const consumerRoot = values.cwd ?? process.cwd();\n  const sourceDir = resolveSourceDir(pkg, consumerRoot);\n\n  try {\n    const result = await eject({\n      pkg,\n      consumerRoot,\n      sourceDir,\n      force: values.force,\n    });\n    process.stdout.write(\n      `Ejected ${result.pkg}\\n` +\n        `  copied ${result.copiedFiles} files -> ${result.vendorPath}\\n` +\n        `  dependency ${result.depSpecBefore} -> ${result.depSpecAfter}\\n` +\n        `\\nNow run: ${result.followUp}\\n`,\n    );\n  } catch (error) {\n    if (error instanceof EjectError) {\n      fail(error.message);\n    }\n    throw error;\n  }\n}\n\nasync function main(): Promise<void> {\n  const [command, ...rest] = process.argv.slice(2);\n\n  if (!command || command === \"--help\" || command === \"-h\") {\n    process.stdout.write(`${USAGE}\\n`);\n    return;\n  }\n\n  switch (command) {\n    case \"eject\":\n      await runEject(rest);\n      break;\n    default:\n      fail(`unknown command \"${command}\"\\n\\n${USAGE}`);\n  }\n}\n\nmain().catch((error) => {\n  process.stderr.write(`${RED}error${RESET} ${String(error)}\\n`);\n  process.exit(1);\n});\n","import { existsSync } from \"node:fs\";\nimport { cp, readFile, rm, stat, writeFile } from \"node:fs/promises\";\nimport { basename, join, relative, sep } from \"node:path\";\n\n/** Options for {@link eject}. */\nexport interface EjectOptions {\n  /** Scoped package name to eject, e.g. \"@hogsend/engine\". */\n  pkg: string;\n  /** Consumer repo root (the dir containing the consumer package.json). */\n  consumerRoot: string;\n  /**\n   * Where the package source currently lives (the workspace/registry copy).\n   * In-monorepo: <repoRoot>/packages/<name>. In a scaffolded app it is the\n   * resolved node_modules path. The caller resolves this; eject() never\n   * guesses it.\n   */\n  sourceDir: string;\n  /** Overwrite an existing vendor/<name>. */\n  force?: boolean;\n}\n\n/** Result of a successful {@link eject}. */\nexport interface EjectResult {\n  pkg: string;\n  /** Absolute path to vendor/<name>. */\n  vendorPath: string;\n  /** The dep spec before the rewrite, e.g. \"workspace:^\". */\n  depSpecBefore: string;\n  /** The dep spec after the rewrite, \"file:./vendor/<name>\". */\n  depSpecAfter: string;\n  /** Number of files copied into vendor/<name>. */\n  copiedFiles: number;\n  /** The install command the operator must run next. */\n  followUp: string;\n}\n\n/** Typed failure thrown by {@link eject} for expected, user-facing errors. */\nexport class EjectError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"EjectError\";\n  }\n}\n\n/** Directory/file names excluded from the vendor copy. */\nconst EXCLUDED_NAMES = new Set([\n  \"node_modules\",\n  \"dist\",\n  \".turbo\",\n  \".changeset\",\n  \"CHANGELOG.md\",\n]);\n\ninterface PackageJson {\n  private?: boolean;\n  dependencies?: Record<string, string>;\n  devDependencies?: Record<string, string>;\n  [key: string]: unknown;\n}\n\ntype DepMap = \"dependencies\" | \"devDependencies\";\n\nasync function readPackageJson(file: string): Promise<PackageJson> {\n  const raw = await readFile(file, \"utf8\");\n  return JSON.parse(raw) as PackageJson;\n}\n\nasync function writePackageJson(\n  file: string,\n  value: PackageJson,\n): Promise<void> {\n  await writeFile(file, `${JSON.stringify(value, null, 2)}\\n`, \"utf8\");\n}\n\n/**\n * Pure eject: copies a single package's source into the consumer's\n * `vendor/<name>` and rewrites only that consumer dependency to a\n * `file:./vendor/<name>` link. Every other dependency is left untouched, so\n * the rest of the `@hogsend/*` set keeps upgrading via `pnpm up`.\n *\n * This function performs filesystem operations only — it never runs an install\n * and never resolves `sourceDir` itself, which keeps it hermetically testable.\n */\nexport async function eject(opts: EjectOptions): Promise<EjectResult> {\n  const { pkg, consumerRoot, sourceDir, force = false } = opts;\n\n  // 1. Resolve names.\n  const vendorName = basename(pkg);\n  const vendorPath = join(consumerRoot, \"vendor\", vendorName);\n\n  // 2. Validate the consumer dependency exists (before any side effects).\n  const consumerPkgPath = join(consumerRoot, \"package.json\");\n  const consumerPkg = await readPackageJson(consumerPkgPath);\n  let depMap: DepMap | undefined;\n  let depSpecBefore: string | undefined;\n  if (consumerPkg.dependencies?.[pkg] !== undefined) {\n    depMap = \"dependencies\";\n    depSpecBefore = consumerPkg.dependencies[pkg];\n  } else if (consumerPkg.devDependencies?.[pkg] !== undefined) {\n    depMap = \"devDependencies\";\n    depSpecBefore = consumerPkg.devDependencies[pkg];\n  }\n  if (!depMap || depSpecBefore === undefined) {\n    throw new EjectError(\n      `${pkg} is not a dependency of the consumer package.json`,\n    );\n  }\n\n  // 3. Guard the vendor dir.\n  if (existsSync(vendorPath)) {\n    if (!force) {\n      throw new EjectError(\n        `vendor/${vendorName} already exists; pass --force to overwrite`,\n      );\n    }\n    await rm(vendorPath, { recursive: true, force: true });\n  }\n\n  // 4. Copy source with an exclude filter. Returning false for a directory\n  //    prunes the whole subtree (Node 22 fs.cp filter semantics).\n  let copiedFiles = 0;\n  await cp(sourceDir, vendorPath, {\n    recursive: true,\n    filter: (source) => {\n      const rel = relative(sourceDir, source);\n      if (rel === \"\") {\n        return true;\n      }\n      const segments = rel.split(sep);\n      const name = basename(rel);\n      // Exclude any path segment that is an excluded name (prunes subtrees).\n      if (segments.some((segment) => EXCLUDED_NAMES.has(segment))) {\n        return false;\n      }\n      if (name.endsWith(\".test.ts\")) {\n        return false;\n      }\n      return true;\n    },\n  });\n\n  // Count copied files (directories excluded) for the result summary.\n  copiedFiles = await countFiles(vendorPath);\n\n  // 5. Sanitize the vendored package.json.\n  const vendoredPkgPath = join(vendorPath, \"package.json\");\n  const vendoredPkg = await readPackageJson(vendoredPkgPath);\n  if (vendoredPkg.private === true) {\n    delete vendoredPkg.private;\n  }\n  await writePackageJson(vendoredPkgPath, vendoredPkg);\n\n  // 6. Rewrite the consumer dep in place (preserving key order).\n  const depSpecAfter = `file:./vendor/${vendorName}`;\n  // biome-ignore lint/style/noNonNullAssertion: depMap validated above.\n  consumerPkg[depMap]![pkg] = depSpecAfter;\n  await writePackageJson(consumerPkgPath, consumerPkg);\n\n  // 7. Return the result.\n  return {\n    pkg,\n    vendorPath,\n    depSpecBefore,\n    depSpecAfter,\n    copiedFiles,\n    followUp: \"pnpm install\",\n  };\n}\n\n/** Recursively counts regular files under a directory. */\nasync function countFiles(dir: string): Promise<number> {\n  const { readdir } = await import(\"node:fs/promises\");\n  let count = 0;\n  const entries = await readdir(dir, { withFileTypes: true });\n  for (const entry of entries) {\n    const full = join(dir, entry.name);\n    if (entry.isDirectory()) {\n      count += await countFiles(full);\n    } else if (entry.isFile()) {\n      count += 1;\n    } else {\n      const info = await stat(full);\n      if (info.isFile()) {\n        count += 1;\n      }\n    }\n  }\n  return count;\n}\n"],"mappings":";;;AACA,SAAS,cAAAA,aAAY,oBAAoB;AACzC,SAAS,qBAAqB;AAC9B,SAAS,SAAS,QAAAC,OAAM,OAAAC,YAAW;AACnC,SAAS,iBAAiB;;;ACJ1B,SAAS,kBAAkB;AAC3B,SAAS,IAAI,UAAU,IAAI,MAAM,iBAAiB;AAClD,SAAS,UAAU,MAAM,UAAU,WAAW;AAmCvC,IAAM,aAAN,cAAyB,MAAM;AAAA,EACpC,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAGA,IAAM,iBAAiB,oBAAI,IAAI;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAWD,eAAe,gBAAgB,MAAoC;AACjE,QAAM,MAAM,MAAM,SAAS,MAAM,MAAM;AACvC,SAAO,KAAK,MAAM,GAAG;AACvB;AAEA,eAAe,iBACb,MACA,OACe;AACf,QAAM,UAAU,MAAM,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,GAAM,MAAM;AACrE;AAWA,eAAsB,MAAM,MAA0C;AACpE,QAAM,EAAE,KAAK,cAAc,WAAW,QAAQ,MAAM,IAAI;AAGxD,QAAM,aAAa,SAAS,GAAG;AAC/B,QAAM,aAAa,KAAK,cAAc,UAAU,UAAU;AAG1D,QAAM,kBAAkB,KAAK,cAAc,cAAc;AACzD,QAAM,cAAc,MAAM,gBAAgB,eAAe;AACzD,MAAI;AACJ,MAAI;AACJ,MAAI,YAAY,eAAe,GAAG,MAAM,QAAW;AACjD,aAAS;AACT,oBAAgB,YAAY,aAAa,GAAG;AAAA,EAC9C,WAAW,YAAY,kBAAkB,GAAG,MAAM,QAAW;AAC3D,aAAS;AACT,oBAAgB,YAAY,gBAAgB,GAAG;AAAA,EACjD;AACA,MAAI,CAAC,UAAU,kBAAkB,QAAW;AAC1C,UAAM,IAAI;AAAA,MACR,GAAG,GAAG;AAAA,IACR;AAAA,EACF;AAGA,MAAI,WAAW,UAAU,GAAG;AAC1B,QAAI,CAAC,OAAO;AACV,YAAM,IAAI;AAAA,QACR,UAAU,UAAU;AAAA,MACtB;AAAA,IACF;AACA,UAAM,GAAG,YAAY,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EACvD;AAIA,MAAI,cAAc;AAClB,QAAM,GAAG,WAAW,YAAY;AAAA,IAC9B,WAAW;AAAA,IACX,QAAQ,CAAC,WAAW;AAClB,YAAM,MAAM,SAAS,WAAW,MAAM;AACtC,UAAI,QAAQ,IAAI;AACd,eAAO;AAAA,MACT;AACA,YAAM,WAAW,IAAI,MAAM,GAAG;AAC9B,YAAM,OAAO,SAAS,GAAG;AAEzB,UAAI,SAAS,KAAK,CAAC,YAAY,eAAe,IAAI,OAAO,CAAC,GAAG;AAC3D,eAAO;AAAA,MACT;AACA,UAAI,KAAK,SAAS,UAAU,GAAG;AAC7B,eAAO;AAAA,MACT;AACA,aAAO;AAAA,IACT;AAAA,EACF,CAAC;AAGD,gBAAc,MAAM,WAAW,UAAU;AAGzC,QAAM,kBAAkB,KAAK,YAAY,cAAc;AACvD,QAAM,cAAc,MAAM,gBAAgB,eAAe;AACzD,MAAI,YAAY,YAAY,MAAM;AAChC,WAAO,YAAY;AAAA,EACrB;AACA,QAAM,iBAAiB,iBAAiB,WAAW;AAGnD,QAAM,eAAe,iBAAiB,UAAU;AAEhD,cAAY,MAAM,EAAG,GAAG,IAAI;AAC5B,QAAM,iBAAiB,iBAAiB,WAAW;AAGnD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,UAAU;AAAA,EACZ;AACF;AAGA,eAAe,WAAW,KAA8B;AACtD,QAAM,EAAE,QAAQ,IAAI,MAAM,OAAO,aAAkB;AACnD,MAAI,QAAQ;AACZ,QAAM,UAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;AAC1D,aAAW,SAAS,SAAS;AAC3B,UAAM,OAAO,KAAK,KAAK,MAAM,IAAI;AACjC,QAAI,MAAM,YAAY,GAAG;AACvB,eAAS,MAAM,WAAW,IAAI;AAAA,IAChC,WAAW,MAAM,OAAO,GAAG;AACzB,eAAS;AAAA,IACX,OAAO;AACL,YAAM,OAAO,MAAM,KAAK,IAAI;AAC5B,UAAI,KAAK,OAAO,GAAG;AACjB,iBAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;;;ADrLA,IAAM,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAiBd,IAAM,MAAM;AACZ,IAAM,QAAQ;AAEd,SAAS,KAAK,SAAwB;AACpC,UAAQ,OAAO,MAAM,GAAG,GAAG,QAAQ,KAAK,IAAI,OAAO;AAAA,CAAI;AACvD,UAAQ,KAAK,CAAC;AAChB;AAeA,SAAS,iBAAiB,KAAa,cAA8B;AACnE,QAAM,SAASC,MAAK,cAAc,gBAAgB,KAAK,cAAc;AACrE,MAAIC,YAAW,MAAM,GAAG;AAEtB,WAAO,QAAQ,aAAa,MAAM,CAAC;AAAA,EACrC;AAEA,QAAMC,WAAU,cAAc,GAAG,YAAY,GAAGC,IAAG,EAAE;AACrD,MAAI;AAGF,UAAM,QAAQD,SAAQ,QAAQ,GAAG;AACjC,QAAI,MAAM,QAAQ,KAAK;AACvB,WAAO,QAAQ,QAAQ,GAAG,GAAG;AAC3B,YAAM,YAAYF,MAAK,KAAK,cAAc;AAC1C,UAAIC,YAAW,SAAS,GAAG;AACzB,eAAO;AAAA,MACT;AACA,YAAM,QAAQ,GAAG;AAAA,IACnB;AAAA,EACF,QAAQ;AAAA,EAER;AAEA;AAAA,IACE,kBAAkB,GAAG,SAAS,YAAY;AAAA,EAC5C;AACF;AAEA,eAAe,SAAS,MAA+B;AACrD,QAAM,EAAE,QAAQ,YAAY,IAAI,UAAU;AAAA,IACxC;AAAA,IACA,kBAAkB;AAAA,IAClB,SAAS;AAAA,MACP,OAAO,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,MACzC,KAAK,EAAE,MAAM,SAAS;AAAA,MACtB,MAAM,EAAE,MAAM,WAAW,OAAO,KAAK,SAAS,MAAM;AAAA,IACtD;AAAA,EACF,CAAC;AAED,MAAI,OAAO,MAAM;AACf,YAAQ,OAAO,MAAM,GAAG,KAAK;AAAA,CAAI;AACjC;AAAA,EACF;AAEA,QAAM,MAAM,YAAY,CAAC;AACzB,MAAI,CAAC,KAAK;AACR,SAAK,mEAAmE;AAAA,EAC1E;AAEA,QAAM,eAAe,OAAO,OAAO,QAAQ,IAAI;AAC/C,QAAM,YAAY,iBAAiB,KAAK,YAAY;AAEpD,MAAI;AACF,UAAM,SAAS,MAAM,MAAM;AAAA,MACzB;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO,OAAO;AAAA,IAChB,CAAC;AACD,YAAQ,OAAO;AAAA,MACb,WAAW,OAAO,GAAG;AAAA,WACP,OAAO,WAAW,aAAa,OAAO,UAAU;AAAA,eAC5C,OAAO,aAAa,OAAO,OAAO,YAAY;AAAA;AAAA,WAChD,OAAO,QAAQ;AAAA;AAAA,IACjC;AAAA,EACF,SAAS,OAAO;AACd,QAAI,iBAAiB,YAAY;AAC/B,WAAK,MAAM,OAAO;AAAA,IACpB;AACA,UAAM;AAAA,EACR;AACF;AAEA,eAAe,OAAsB;AACnC,QAAM,CAAC,SAAS,GAAG,IAAI,IAAI,QAAQ,KAAK,MAAM,CAAC;AAE/C,MAAI,CAAC,WAAW,YAAY,YAAY,YAAY,MAAM;AACxD,YAAQ,OAAO,MAAM,GAAG,KAAK;AAAA,CAAI;AACjC;AAAA,EACF;AAEA,UAAQ,SAAS;AAAA,IACf,KAAK;AACH,YAAM,SAAS,IAAI;AACnB;AAAA,IACF;AACE,WAAK,oBAAoB,OAAO;AAAA;AAAA,EAAQ,KAAK,EAAE;AAAA,EACnD;AACF;AAEA,KAAK,EAAE,MAAM,CAAC,UAAU;AACtB,UAAQ,OAAO,MAAM,GAAG,GAAG,QAAQ,KAAK,IAAI,OAAO,KAAK,CAAC;AAAA,CAAI;AAC7D,UAAQ,KAAK,CAAC;AAChB,CAAC;","names":["existsSync","join","sep","join","existsSync","require","sep"]}

package/dist/index.js

@@ -0,0 +1,115 @@
+// src/eject.ts
+import { existsSync } from "fs";
+import { cp, readFile, rm, stat, writeFile } from "fs/promises";
+import { basename, join, relative, sep } from "path";
+var EjectError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "EjectError";
+  }
+};
+var EXCLUDED_NAMES = /* @__PURE__ */ new Set([
+  "node_modules",
+  "dist",
+  ".turbo",
+  ".changeset",
+  "CHANGELOG.md"
+]);
+async function readPackageJson(file) {
+  const raw = await readFile(file, "utf8");
+  return JSON.parse(raw);
+}
+async function writePackageJson(file, value) {
+  await writeFile(file, `${JSON.stringify(value, null, 2)}
+`, "utf8");
+}
+async function eject(opts) {
+  const { pkg, consumerRoot, sourceDir, force = false } = opts;
+  const vendorName = basename(pkg);
+  const vendorPath = join(consumerRoot, "vendor", vendorName);
+  const consumerPkgPath = join(consumerRoot, "package.json");
+  const consumerPkg = await readPackageJson(consumerPkgPath);
+  let depMap;
+  let depSpecBefore;
+  if (consumerPkg.dependencies?.[pkg] !== void 0) {
+    depMap = "dependencies";
+    depSpecBefore = consumerPkg.dependencies[pkg];
+  } else if (consumerPkg.devDependencies?.[pkg] !== void 0) {
+    depMap = "devDependencies";
+    depSpecBefore = consumerPkg.devDependencies[pkg];
+  }
+  if (!depMap || depSpecBefore === void 0) {
+    throw new EjectError(
+      `${pkg} is not a dependency of the consumer package.json`
+    );
+  }
+  if (existsSync(vendorPath)) {
+    if (!force) {
+      throw new EjectError(
+        `vendor/${vendorName} already exists; pass --force to overwrite`
+      );
+    }
+    await rm(vendorPath, { recursive: true, force: true });
+  }
+  let copiedFiles = 0;
+  await cp(sourceDir, vendorPath, {
+    recursive: true,
+    filter: (source) => {
+      const rel = relative(sourceDir, source);
+      if (rel === "") {
+        return true;
+      }
+      const segments = rel.split(sep);
+      const name = basename(rel);
+      if (segments.some((segment) => EXCLUDED_NAMES.has(segment))) {
+        return false;
+      }
+      if (name.endsWith(".test.ts")) {
+        return false;
+      }
+      return true;
+    }
+  });
+  copiedFiles = await countFiles(vendorPath);
+  const vendoredPkgPath = join(vendorPath, "package.json");
+  const vendoredPkg = await readPackageJson(vendoredPkgPath);
+  if (vendoredPkg.private === true) {
+    delete vendoredPkg.private;
+  }
+  await writePackageJson(vendoredPkgPath, vendoredPkg);
+  const depSpecAfter = `file:./vendor/${vendorName}`;
+  consumerPkg[depMap][pkg] = depSpecAfter;
+  await writePackageJson(consumerPkgPath, consumerPkg);
+  return {
+    pkg,
+    vendorPath,
+    depSpecBefore,
+    depSpecAfter,
+    copiedFiles,
+    followUp: "pnpm install"
+  };
+}
+async function countFiles(dir) {
+  const { readdir } = await import("fs/promises");
+  let count = 0;
+  const entries = await readdir(dir, { withFileTypes: true });
+  for (const entry of entries) {
+    const full = join(dir, entry.name);
+    if (entry.isDirectory()) {
+      count += await countFiles(full);
+    } else if (entry.isFile()) {
+      count += 1;
+    } else {
+      const info = await stat(full);
+      if (info.isFile()) {
+        count += 1;
+      }
+    }
+  }
+  return count;
+}
+export {
+  EjectError,
+  eject
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/eject.ts"],"sourcesContent":["import { existsSync } from \"node:fs\";\nimport { cp, readFile, rm, stat, writeFile } from \"node:fs/promises\";\nimport { basename, join, relative, sep } from \"node:path\";\n\n/** Options for {@link eject}. */\nexport interface EjectOptions {\n  /** Scoped package name to eject, e.g. \"@hogsend/engine\". */\n  pkg: string;\n  /** Consumer repo root (the dir containing the consumer package.json). */\n  consumerRoot: string;\n  /**\n   * Where the package source currently lives (the workspace/registry copy).\n   * In-monorepo: <repoRoot>/packages/<name>. In a scaffolded app it is the\n   * resolved node_modules path. The caller resolves this; eject() never\n   * guesses it.\n   */\n  sourceDir: string;\n  /** Overwrite an existing vendor/<name>. */\n  force?: boolean;\n}\n\n/** Result of a successful {@link eject}. */\nexport interface EjectResult {\n  pkg: string;\n  /** Absolute path to vendor/<name>. */\n  vendorPath: string;\n  /** The dep spec before the rewrite, e.g. \"workspace:^\". */\n  depSpecBefore: string;\n  /** The dep spec after the rewrite, \"file:./vendor/<name>\". */\n  depSpecAfter: string;\n  /** Number of files copied into vendor/<name>. */\n  copiedFiles: number;\n  /** The install command the operator must run next. */\n  followUp: string;\n}\n\n/** Typed failure thrown by {@link eject} for expected, user-facing errors. */\nexport class EjectError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"EjectError\";\n  }\n}\n\n/** Directory/file names excluded from the vendor copy. */\nconst EXCLUDED_NAMES = new Set([\n  \"node_modules\",\n  \"dist\",\n  \".turbo\",\n  \".changeset\",\n  \"CHANGELOG.md\",\n]);\n\ninterface PackageJson {\n  private?: boolean;\n  dependencies?: Record<string, string>;\n  devDependencies?: Record<string, string>;\n  [key: string]: unknown;\n}\n\ntype DepMap = \"dependencies\" | \"devDependencies\";\n\nasync function readPackageJson(file: string): Promise<PackageJson> {\n  const raw = await readFile(file, \"utf8\");\n  return JSON.parse(raw) as PackageJson;\n}\n\nasync function writePackageJson(\n  file: string,\n  value: PackageJson,\n): Promise<void> {\n  await writeFile(file, `${JSON.stringify(value, null, 2)}\\n`, \"utf8\");\n}\n\n/**\n * Pure eject: copies a single package's source into the consumer's\n * `vendor/<name>` and rewrites only that consumer dependency to a\n * `file:./vendor/<name>` link. Every other dependency is left untouched, so\n * the rest of the `@hogsend/*` set keeps upgrading via `pnpm up`.\n *\n * This function performs filesystem operations only — it never runs an install\n * and never resolves `sourceDir` itself, which keeps it hermetically testable.\n */\nexport async function eject(opts: EjectOptions): Promise<EjectResult> {\n  const { pkg, consumerRoot, sourceDir, force = false } = opts;\n\n  // 1. Resolve names.\n  const vendorName = basename(pkg);\n  const vendorPath = join(consumerRoot, \"vendor\", vendorName);\n\n  // 2. Validate the consumer dependency exists (before any side effects).\n  const consumerPkgPath = join(consumerRoot, \"package.json\");\n  const consumerPkg = await readPackageJson(consumerPkgPath);\n  let depMap: DepMap | undefined;\n  let depSpecBefore: string | undefined;\n  if (consumerPkg.dependencies?.[pkg] !== undefined) {\n    depMap = \"dependencies\";\n    depSpecBefore = consumerPkg.dependencies[pkg];\n  } else if (consumerPkg.devDependencies?.[pkg] !== undefined) {\n    depMap = \"devDependencies\";\n    depSpecBefore = consumerPkg.devDependencies[pkg];\n  }\n  if (!depMap || depSpecBefore === undefined) {\n    throw new EjectError(\n      `${pkg} is not a dependency of the consumer package.json`,\n    );\n  }\n\n  // 3. Guard the vendor dir.\n  if (existsSync(vendorPath)) {\n    if (!force) {\n      throw new EjectError(\n        `vendor/${vendorName} already exists; pass --force to overwrite`,\n      );\n    }\n    await rm(vendorPath, { recursive: true, force: true });\n  }\n\n  // 4. Copy source with an exclude filter. Returning false for a directory\n  //    prunes the whole subtree (Node 22 fs.cp filter semantics).\n  let copiedFiles = 0;\n  await cp(sourceDir, vendorPath, {\n    recursive: true,\n    filter: (source) => {\n      const rel = relative(sourceDir, source);\n      if (rel === \"\") {\n        return true;\n      }\n      const segments = rel.split(sep);\n      const name = basename(rel);\n      // Exclude any path segment that is an excluded name (prunes subtrees).\n      if (segments.some((segment) => EXCLUDED_NAMES.has(segment))) {\n        return false;\n      }\n      if (name.endsWith(\".test.ts\")) {\n        return false;\n      }\n      return true;\n    },\n  });\n\n  // Count copied files (directories excluded) for the result summary.\n  copiedFiles = await countFiles(vendorPath);\n\n  // 5. Sanitize the vendored package.json.\n  const vendoredPkgPath = join(vendorPath, \"package.json\");\n  const vendoredPkg = await readPackageJson(vendoredPkgPath);\n  if (vendoredPkg.private === true) {\n    delete vendoredPkg.private;\n  }\n  await writePackageJson(vendoredPkgPath, vendoredPkg);\n\n  // 6. Rewrite the consumer dep in place (preserving key order).\n  const depSpecAfter = `file:./vendor/${vendorName}`;\n  // biome-ignore lint/style/noNonNullAssertion: depMap validated above.\n  consumerPkg[depMap]![pkg] = depSpecAfter;\n  await writePackageJson(consumerPkgPath, consumerPkg);\n\n  // 7. Return the result.\n  return {\n    pkg,\n    vendorPath,\n    depSpecBefore,\n    depSpecAfter,\n    copiedFiles,\n    followUp: \"pnpm install\",\n  };\n}\n\n/** Recursively counts regular files under a directory. */\nasync function countFiles(dir: string): Promise<number> {\n  const { readdir } = await import(\"node:fs/promises\");\n  let count = 0;\n  const entries = await readdir(dir, { withFileTypes: true });\n  for (const entry of entries) {\n    const full = join(dir, entry.name);\n    if (entry.isDirectory()) {\n      count += await countFiles(full);\n    } else if (entry.isFile()) {\n      count += 1;\n    } else {\n      const info = await stat(full);\n      if (info.isFile()) {\n        count += 1;\n      }\n    }\n  }\n  return count;\n}\n"],"mappings":";AAAA,SAAS,kBAAkB;AAC3B,SAAS,IAAI,UAAU,IAAI,MAAM,iBAAiB;AAClD,SAAS,UAAU,MAAM,UAAU,WAAW;AAmCvC,IAAM,aAAN,cAAyB,MAAM;AAAA,EACpC,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAGA,IAAM,iBAAiB,oBAAI,IAAI;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAWD,eAAe,gBAAgB,MAAoC;AACjE,QAAM,MAAM,MAAM,SAAS,MAAM,MAAM;AACvC,SAAO,KAAK,MAAM,GAAG;AACvB;AAEA,eAAe,iBACb,MACA,OACe;AACf,QAAM,UAAU,MAAM,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,GAAM,MAAM;AACrE;AAWA,eAAsB,MAAM,MAA0C;AACpE,QAAM,EAAE,KAAK,cAAc,WAAW,QAAQ,MAAM,IAAI;AAGxD,QAAM,aAAa,SAAS,GAAG;AAC/B,QAAM,aAAa,KAAK,cAAc,UAAU,UAAU;AAG1D,QAAM,kBAAkB,KAAK,cAAc,cAAc;AACzD,QAAM,cAAc,MAAM,gBAAgB,eAAe;AACzD,MAAI;AACJ,MAAI;AACJ,MAAI,YAAY,eAAe,GAAG,MAAM,QAAW;AACjD,aAAS;AACT,oBAAgB,YAAY,aAAa,GAAG;AAAA,EAC9C,WAAW,YAAY,kBAAkB,GAAG,MAAM,QAAW;AAC3D,aAAS;AACT,oBAAgB,YAAY,gBAAgB,GAAG;AAAA,EACjD;AACA,MAAI,CAAC,UAAU,kBAAkB,QAAW;AAC1C,UAAM,IAAI;AAAA,MACR,GAAG,GAAG;AAAA,IACR;AAAA,EACF;AAGA,MAAI,WAAW,UAAU,GAAG;AAC1B,QAAI,CAAC,OAAO;AACV,YAAM,IAAI;AAAA,QACR,UAAU,UAAU;AAAA,MACtB;AAAA,IACF;AACA,UAAM,GAAG,YAAY,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EACvD;AAIA,MAAI,cAAc;AAClB,QAAM,GAAG,WAAW,YAAY;AAAA,IAC9B,WAAW;AAAA,IACX,QAAQ,CAAC,WAAW;AAClB,YAAM,MAAM,SAAS,WAAW,MAAM;AACtC,UAAI,QAAQ,IAAI;AACd,eAAO;AAAA,MACT;AACA,YAAM,WAAW,IAAI,MAAM,GAAG;AAC9B,YAAM,OAAO,SAAS,GAAG;AAEzB,UAAI,SAAS,KAAK,CAAC,YAAY,eAAe,IAAI,OAAO,CAAC,GAAG;AAC3D,eAAO;AAAA,MACT;AACA,UAAI,KAAK,SAAS,UAAU,GAAG;AAC7B,eAAO;AAAA,MACT;AACA,aAAO;AAAA,IACT;AAAA,EACF,CAAC;AAGD,gBAAc,MAAM,WAAW,UAAU;AAGzC,QAAM,kBAAkB,KAAK,YAAY,cAAc;AACvD,QAAM,cAAc,MAAM,gBAAgB,eAAe;AACzD,MAAI,YAAY,YAAY,MAAM;AAChC,WAAO,YAAY;AAAA,EACrB;AACA,QAAM,iBAAiB,iBAAiB,WAAW;AAGnD,QAAM,eAAe,iBAAiB,UAAU;AAEhD,cAAY,MAAM,EAAG,GAAG,IAAI;AAC5B,QAAM,iBAAiB,iBAAiB,WAAW;AAGnD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,UAAU;AAAA,EACZ;AACF;AAGA,eAAe,WAAW,KAA8B;AACtD,QAAM,EAAE,QAAQ,IAAI,MAAM,OAAO,aAAkB;AACnD,MAAI,QAAQ;AACZ,QAAM,UAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;AAC1D,aAAW,SAAS,SAAS;AAC3B,UAAM,OAAO,KAAK,KAAK,MAAM,IAAI;AACjC,QAAI,MAAM,YAAY,GAAG;AACvB,eAAS,MAAM,WAAW,IAAI;AAAA,IAChC,WAAW,MAAM,OAAO,GAAG;AACzB,eAAS;AAAA,IACX,OAAO;AACL,YAAM,OAAO,MAAM,KAAK,IAAI;AAC5B,UAAI,KAAK,OAAO,GAAG;AACjB,iBAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;","names":[]}

package/package.json

@@ -0,0 +1,45 @@
+{
+  "name": "@hogsend/cli",
+  "version": "0.0.1",
+  "type": "module",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/dougwithseismic/hogsend.git",
+    "directory": "packages/cli"
+  },
+  "main": "./src/index.ts",
+  "types": "./src/index.ts",
+  "bin": {
+    "hogsend": "./dist/bin.js"
+  },
+  "exports": {
+    ".": "./src/index.ts",
+    "./eject": "./src/eject.ts"
+  },
+  "files": [
+    "dist",
+    "src",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "@types/node": "^25.9.1",
+    "tsup": "^8.5.1",
+    "tsx": "^4.22.4",
+    "vitest": "^4.1.7",
+    "@repo/typescript-config": "0.0.0"
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "scripts": {
+    "build": "tsup",
+    "check-types": "tsc --noEmit",
+    "lint": "biome check .",
+    "clean": "rm -rf node_modules dist .turbo",
+    "test": "vitest run"
+  }
+}

package/src/__tests__/eject.test.ts

@@ -0,0 +1,163 @@
+import { existsSync } from "node:fs";
+import { mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+import { eject } from "../eject.js";
+
+const PKG = "@hogsend/engine";
+
+let root: string;
+let sourceDir: string;
+let consumerRoot: string;
+
+async function writeJson(file: string, value: unknown): Promise<void> {
+  await writeFile(file, `${JSON.stringify(value, null, 2)}\n`, "utf8");
+}
+
+async function readJson<T = Record<string, unknown>>(file: string): Promise<T> {
+  return JSON.parse(await readFile(file, "utf8")) as T;
+}
+
+async function fabricateSource(): Promise<void> {
+  await mkdir(join(sourceDir, "src", "lib"), { recursive: true });
+  await mkdir(join(sourceDir, "node_modules"), { recursive: true });
+  await mkdir(join(sourceDir, "dist"), { recursive: true });
+  await writeJson(join(sourceDir, "package.json"), {
+    name: "@hogsend/engine",
+    version: "0.0.1",
+    private: true,
+    type: "module",
+    exports: { ".": "./src/index.ts" },
+    dependencies: { "@hogsend/core": "workspace:^" },
+  });
+  await writeFile(join(sourceDir, "src", "index.ts"), "export {};\n", "utf8");
+  await writeFile(
+    join(sourceDir, "src", "lib", "db.ts"),
+    "export const db = 1;\n",
+    "utf8",
+  );
+  await writeFile(
+    join(sourceDir, "src", "foo.test.ts"),
+    "// a test file\n",
+    "utf8",
+  );
+  await writeFile(
+    join(sourceDir, "node_modules", "junk.js"),
+    "module.exports = {};\n",
+    "utf8",
+  );
+  await writeFile(join(sourceDir, "dist", "old.js"), "// stale\n", "utf8");
+}
+
+async function fabricateConsumer(
+  deps: Record<string, string> = {
+    "@hogsend/engine": "workspace:^",
+    "@hogsend/core": "workspace:^",
+  },
+): Promise<void> {
+  await mkdir(consumerRoot, { recursive: true });
+  await writeJson(join(consumerRoot, "package.json"), {
+    name: "consumer-app",
+    version: "0.0.0",
+    type: "module",
+    dependencies: deps,
+  });
+}
+
+beforeEach(async () => {
+  root = await mkdtemp(join(tmpdir(), "hogsend-eject-"));
+  sourceDir = join(root, "src-pkg");
+  consumerRoot = join(root, "consumer");
+  await fabricateSource();
+  await fabricateConsumer();
+});
+
+afterEach(async () => {
+  await rm(root, { recursive: true, force: true });
+});
+
+describe("eject", () => {
+  it("copies the right files into vendor/<name>", async () => {
+    await eject({ pkg: PKG, consumerRoot, sourceDir });
+    expect(
+      existsSync(join(consumerRoot, "vendor", "engine", "src", "index.ts")),
+    ).toBe(true);
+    expect(
+      existsSync(join(consumerRoot, "vendor", "engine", "src", "lib", "db.ts")),
+    ).toBe(true);
+    expect(
+      existsSync(join(consumerRoot, "vendor", "engine", "package.json")),
+    ).toBe(true);
+  });
+
+  it("honors excludes (node_modules, dist, *.test.ts)", async () => {
+    await eject({ pkg: PKG, consumerRoot, sourceDir });
+    expect(
+      existsSync(join(consumerRoot, "vendor", "engine", "node_modules")),
+    ).toBe(false);
+    expect(existsSync(join(consumerRoot, "vendor", "engine", "dist"))).toBe(
+      false,
+    );
+    expect(
+      existsSync(join(consumerRoot, "vendor", "engine", "src", "foo.test.ts")),
+    ).toBe(false);
+  });
+
+  it("rewrites only the target consumer dep, leaving others untouched", async () => {
+    await eject({ pkg: PKG, consumerRoot, sourceDir });
+    const pkg = await readJson(join(consumerRoot, "package.json"));
+    const deps = pkg.dependencies as Record<string, string>;
+    expect(deps["@hogsend/engine"]).toBe("file:./vendor/engine");
+    expect(deps["@hogsend/core"]).toBe("workspace:^");
+  });
+
+  it("sanitizes the vendored package.json", async () => {
+    await eject({ pkg: PKG, consumerRoot, sourceDir });
+    const vendored = await readJson(
+      join(consumerRoot, "vendor", "engine", "package.json"),
+    );
+    expect("private" in vendored).toBe(false);
+    expect(vendored.name).toBe("@hogsend/engine");
+    const deps = vendored.dependencies as Record<string, string>;
+    expect(deps["@hogsend/core"]).toBe("workspace:^");
+  });
+
+  it("returns the expected result shape", async () => {
+    const result = await eject({ pkg: PKG, consumerRoot, sourceDir });
+    expect(result.depSpecBefore).toBe("workspace:^");
+    expect(result.depSpecAfter).toBe("file:./vendor/engine");
+    expect(result.followUp).toBe("pnpm install");
+    expect(result.copiedFiles).toBeGreaterThanOrEqual(3);
+    expect(result.vendorPath).toBe(join(consumerRoot, "vendor", "engine"));
+    expect(result.pkg).toBe(PKG);
+  });
+
+  it("refuses to clobber an existing vendor dir without force", async () => {
+    await eject({ pkg: PKG, consumerRoot, sourceDir });
+    await expect(eject({ pkg: PKG, consumerRoot, sourceDir })).rejects.toThrow(
+      /already exists/,
+    );
+  });
+
+  it("overwrites with force and drops files removed from source", async () => {
+    await eject({ pkg: PKG, consumerRoot, sourceDir });
+    // Remove a file from source between runs.
+    await rm(join(sourceDir, "src", "lib", "db.ts"));
+    await eject({ pkg: PKG, consumerRoot, sourceDir, force: true });
+    expect(
+      existsSync(join(consumerRoot, "vendor", "engine", "src", "lib", "db.ts")),
+    ).toBe(false);
+    expect(
+      existsSync(join(consumerRoot, "vendor", "engine", "src", "index.ts")),
+    ).toBe(true);
+  });
+
+  it("errors loudly when the package is not a dependency", async () => {
+    await fabricateConsumer({ "@hogsend/core": "workspace:^" });
+    await expect(eject({ pkg: PKG, consumerRoot, sourceDir })).rejects.toThrow(
+      /not a dependency/,
+    );
+    expect(existsSync(join(consumerRoot, "vendor"))).toBe(false);
+  });
+});

package/src/bin.ts

@@ -0,0 +1,140 @@
+#!/usr/bin/env node
+import { existsSync, realpathSync } from "node:fs";
+import { createRequire } from "node:module";
+import { dirname, join, sep } from "node:path";
+import { parseArgs } from "node:util";
+import { EjectError, eject } from "./eject.js";
+
+const USAGE = `hogsend — Hogsend project CLI
+
+Usage:
+  hogsend eject <package> [--force] [--cwd <dir>]
+
+Commands:
+  eject <package>   Copy a @hogsend/* package's source into vendor/<name> and
+                    rewrite the consumer dependency to file:./vendor/<name>.
+                    Every other dependency keeps upgrading via pnpm up.
+
+Options:
+  --force           Overwrite an existing vendor/<name>.
+  --cwd <dir>       Consumer repo root (defaults to the current directory).
+  -h, --help        Show this help.
+
+After ejecting, run: pnpm install`;
+
+const RED = "\x1b[31m";
+const RESET = "\x1b[0m";
+
+function fail(message: string): never {
+  process.stderr.write(`${RED}error${RESET} ${message}\n`);
+  process.exit(1);
+}
+
+/**
+ * Resolves the on-disk source directory for an installed package from the
+ * consumer root. Works for pnpm's `.pnpm` layout and workspace symlinks.
+ *
+ * Strategy 1 (primary): probe `<consumerRoot>/node_modules/<pkg>/package.json`
+ * directly, following the symlink to its real location. This is the common
+ * layout and — unlike `require.resolve("<pkg>/package.json")` — is NOT blocked
+ * by the package's `exports` map (most packages don't expose `./package.json`).
+ *
+ * Strategy 2 (fallback): resolve the package's main entry via `createRequire`
+ * and walk up to the nearest directory that contains a package.json whose
+ * `name` matches.
+ */
+function resolveSourceDir(pkg: string, consumerRoot: string): string {
+  const direct = join(consumerRoot, "node_modules", pkg, "package.json");
+  if (existsSync(direct)) {
+    // realpath follows pnpm/workspace symlinks to the actual source dir.
+    return dirname(realpathSync(direct));
+  }
+
+  const require = createRequire(`${consumerRoot}${sep}`);
+  try {
+    // Resolving the entry point works even when `./package.json` is not an
+    // exported subpath; we then walk up to the package root.
+    const entry = require.resolve(pkg);
+    let dir = dirname(entry);
+    while (dir !== dirname(dir)) {
+      const candidate = join(dir, "package.json");
+      if (existsSync(candidate)) {
+        return dir;
+      }
+      dir = dirname(dir);
+    }
+  } catch {
+    // fall through to the failure below
+  }
+
+  fail(
+    `cannot resolve ${pkg} from ${consumerRoot}. Is it installed? Run pnpm install first.`,
+  );
+}
+
+async function runEject(args: string[]): Promise<void> {
+  const { values, positionals } = parseArgs({
+    args,
+    allowPositionals: true,
+    options: {
+      force: { type: "boolean", default: false },
+      cwd: { type: "string" },
+      help: { type: "boolean", short: "h", default: false },
+    },
+  });
+
+  if (values.help) {
+    process.stdout.write(`${USAGE}\n`);
+    return;
+  }
+
+  const pkg = positionals[0];
+  if (!pkg) {
+    fail("eject requires a package name, e.g. hogsend eject @hogsend/engine");
+  }
+
+  const consumerRoot = values.cwd ?? process.cwd();
+  const sourceDir = resolveSourceDir(pkg, consumerRoot);
+
+  try {
+    const result = await eject({
+      pkg,
+      consumerRoot,
+      sourceDir,
+      force: values.force,
+    });
+    process.stdout.write(
+      `Ejected ${result.pkg}\n` +
+        `  copied ${result.copiedFiles} files -> ${result.vendorPath}\n` +
+        `  dependency ${result.depSpecBefore} -> ${result.depSpecAfter}\n` +
+        `\nNow run: ${result.followUp}\n`,
+    );
+  } catch (error) {
+    if (error instanceof EjectError) {
+      fail(error.message);
+    }
+    throw error;
+  }
+}
+
+async function main(): Promise<void> {
+  const [command, ...rest] = process.argv.slice(2);
+
+  if (!command || command === "--help" || command === "-h") {
+    process.stdout.write(`${USAGE}\n`);
+    return;
+  }
+
+  switch (command) {
+    case "eject":
+      await runEject(rest);
+      break;
+    default:
+      fail(`unknown command "${command}"\n\n${USAGE}`);
+  }
+}
+
+main().catch((error) => {
+  process.stderr.write(`${RED}error${RESET} ${String(error)}\n`);
+  process.exit(1);
+});

package/src/eject.ts

@@ -0,0 +1,189 @@
+import { existsSync } from "node:fs";
+import { cp, readFile, rm, stat, writeFile } from "node:fs/promises";
+import { basename, join, relative, sep } from "node:path";
+
+/** Options for {@link eject}. */
+export interface EjectOptions {
+  /** Scoped package name to eject, e.g. "@hogsend/engine". */
+  pkg: string;
+  /** Consumer repo root (the dir containing the consumer package.json). */
+  consumerRoot: string;
+  /**
+   * Where the package source currently lives (the workspace/registry copy).
+   * In-monorepo: <repoRoot>/packages/<name>. In a scaffolded app it is the
+   * resolved node_modules path. The caller resolves this; eject() never
+   * guesses it.
+   */
+  sourceDir: string;
+  /** Overwrite an existing vendor/<name>. */
+  force?: boolean;
+}
+
+/** Result of a successful {@link eject}. */
+export interface EjectResult {
+  pkg: string;
+  /** Absolute path to vendor/<name>. */
+  vendorPath: string;
+  /** The dep spec before the rewrite, e.g. "workspace:^". */
+  depSpecBefore: string;
+  /** The dep spec after the rewrite, "file:./vendor/<name>". */
+  depSpecAfter: string;
+  /** Number of files copied into vendor/<name>. */
+  copiedFiles: number;
+  /** The install command the operator must run next. */
+  followUp: string;
+}
+
+/** Typed failure thrown by {@link eject} for expected, user-facing errors. */
+export class EjectError extends Error {
+  constructor(message: string) {
+    super(message);
+    this.name = "EjectError";
+  }
+}
+
+/** Directory/file names excluded from the vendor copy. */
+const EXCLUDED_NAMES = new Set([
+  "node_modules",
+  "dist",
+  ".turbo",
+  ".changeset",
+  "CHANGELOG.md",
+]);
+
+interface PackageJson {
+  private?: boolean;
+  dependencies?: Record<string, string>;
+  devDependencies?: Record<string, string>;
+  [key: string]: unknown;
+}
+
+type DepMap = "dependencies" | "devDependencies";
+
+async function readPackageJson(file: string): Promise<PackageJson> {
+  const raw = await readFile(file, "utf8");
+  return JSON.parse(raw) as PackageJson;
+}
+
+async function writePackageJson(
+  file: string,
+  value: PackageJson,
+): Promise<void> {
+  await writeFile(file, `${JSON.stringify(value, null, 2)}\n`, "utf8");
+}
+
+/**
+ * Pure eject: copies a single package's source into the consumer's
+ * `vendor/<name>` and rewrites only that consumer dependency to a
+ * `file:./vendor/<name>` link. Every other dependency is left untouched, so
+ * the rest of the `@hogsend/*` set keeps upgrading via `pnpm up`.
+ *
+ * This function performs filesystem operations only — it never runs an install
+ * and never resolves `sourceDir` itself, which keeps it hermetically testable.
+ */
+export async function eject(opts: EjectOptions): Promise<EjectResult> {
+  const { pkg, consumerRoot, sourceDir, force = false } = opts;
+
+  // 1. Resolve names.
+  const vendorName = basename(pkg);
+  const vendorPath = join(consumerRoot, "vendor", vendorName);
+
+  // 2. Validate the consumer dependency exists (before any side effects).
+  const consumerPkgPath = join(consumerRoot, "package.json");
+  const consumerPkg = await readPackageJson(consumerPkgPath);
+  let depMap: DepMap | undefined;
+  let depSpecBefore: string | undefined;
+  if (consumerPkg.dependencies?.[pkg] !== undefined) {
+    depMap = "dependencies";
+    depSpecBefore = consumerPkg.dependencies[pkg];
+  } else if (consumerPkg.devDependencies?.[pkg] !== undefined) {
+    depMap = "devDependencies";
+    depSpecBefore = consumerPkg.devDependencies[pkg];
+  }
+  if (!depMap || depSpecBefore === undefined) {
+    throw new EjectError(
+      `${pkg} is not a dependency of the consumer package.json`,
+    );
+  }
+
+  // 3. Guard the vendor dir.
+  if (existsSync(vendorPath)) {
+    if (!force) {
+      throw new EjectError(
+        `vendor/${vendorName} already exists; pass --force to overwrite`,
+      );
+    }
+    await rm(vendorPath, { recursive: true, force: true });
+  }
+
+  // 4. Copy source with an exclude filter. Returning false for a directory
+  //    prunes the whole subtree (Node 22 fs.cp filter semantics).
+  let copiedFiles = 0;
+  await cp(sourceDir, vendorPath, {
+    recursive: true,
+    filter: (source) => {
+      const rel = relative(sourceDir, source);
+      if (rel === "") {
+        return true;
+      }
+      const segments = rel.split(sep);
+      const name = basename(rel);
+      // Exclude any path segment that is an excluded name (prunes subtrees).
+      if (segments.some((segment) => EXCLUDED_NAMES.has(segment))) {
+        return false;
+      }
+      if (name.endsWith(".test.ts")) {
+        return false;
+      }
+      return true;
+    },
+  });
+
+  // Count copied files (directories excluded) for the result summary.
+  copiedFiles = await countFiles(vendorPath);
+
+  // 5. Sanitize the vendored package.json.
+  const vendoredPkgPath = join(vendorPath, "package.json");
+  const vendoredPkg = await readPackageJson(vendoredPkgPath);
+  if (vendoredPkg.private === true) {
+    delete vendoredPkg.private;
+  }
+  await writePackageJson(vendoredPkgPath, vendoredPkg);
+
+  // 6. Rewrite the consumer dep in place (preserving key order).
+  const depSpecAfter = `file:./vendor/${vendorName}`;
+  // biome-ignore lint/style/noNonNullAssertion: depMap validated above.
+  consumerPkg[depMap]![pkg] = depSpecAfter;
+  await writePackageJson(consumerPkgPath, consumerPkg);
+
+  // 7. Return the result.
+  return {
+    pkg,
+    vendorPath,
+    depSpecBefore,
+    depSpecAfter,
+    copiedFiles,
+    followUp: "pnpm install",
+  };
+}
+
+/** Recursively counts regular files under a directory. */
+async function countFiles(dir: string): Promise<number> {
+  const { readdir } = await import("node:fs/promises");
+  let count = 0;
+  const entries = await readdir(dir, { withFileTypes: true });
+  for (const entry of entries) {
+    const full = join(dir, entry.name);
+    if (entry.isDirectory()) {
+      count += await countFiles(full);
+    } else if (entry.isFile()) {
+      count += 1;
+    } else {
+      const info = await stat(full);
+      if (info.isFile()) {
+        count += 1;
+      }
+    }
+  }
+  return count;
+}

package/src/index.ts

@@ -0,0 +1,7 @@
+// @hogsend/cli — programmatic entry. The `hogsend` bin lives in ./bin.ts.
+export {
+  EjectError,
+  type EjectOptions,
+  type EjectResult,
+  eject,
+} from "./eject.js";