@hublo/sentinel 1.2.0-alpha.11 → 1.2.0-alpha.13

package/dist/bin/sentinel.js

@@ -22,7 +22,7 @@ import {
   registerAdapters,
   resolve,
   resolveBin
-} from "../chunk-6VOQDDZD.js";
+} from "../chunk-X675OYUC.js";
 
 // bin/sentinel.ts
 import { program } from "commander";

package/dist/{chunk-6VOQDDZD.js → chunk-X675OYUC.js}

@@ -67,19 +67,6 @@ function resolve(target, preset, runner) {
   return matching[0];
 }
 
-// src/core/base-adapter.ts
-var BaseAdapter = class {
-  inspect(_ctx) {
-    throw new Error(`${this.runner}: --inspect not implemented yet`);
-  }
-  report(_ctx) {
-    throw new Error(`${this.runner}: --report not implemented yet`);
-  }
-  status(_ctx) {
-    throw new Error(`${this.runner}: --status not implemented yet`);
-  }
-};
-
 // src/shared/package-json.ts
 import { existsSync, readFileSync } from "fs";
 import { basename, dirname, join } from "path";
@@ -132,6 +119,19 @@ function moduleName(dir) {
   return readNxProjectName(dir) ?? (declared === void 0 ? basename(dir) : declared);
 }
 
+// src/core/base-adapter.ts
+var BaseAdapter = class {
+  inspect(_ctx) {
+    throw new Error(`${this.runner}: --inspect not implemented yet`);
+  }
+  report(_ctx) {
+    throw new Error(`${this.runner}: --report not implemented yet`);
+  }
+  status(_ctx) {
+    throw new Error(`${this.runner}: --status not implemented yet`);
+  }
+};
+
 // src/core/domain.ts
 var VERBS = ["run", "inspect", "init", "migrate", "report", "status"];
 var TARGETS = [
@@ -165,11 +165,263 @@ function palette(stream) {
   };
 }
 
+// src/roles/build/nest/nx-target.ts
+import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
+import { join as join2, relative } from "path";
+var DEPRECATED_NX_BUILDER = "@nx/webpack:webpack";
+var TRANSLATABLE_WEBPACK_CONFIG = "tools/webpack-configs/update.webpack.config.js";
+var readProjectJson = (cwd) => {
+  const path = join2(cwd, "project.json");
+  if (!existsSync2(path)) return void 0;
+  try {
+    return JSON.parse(readFileSync2(path, "utf8"));
+  } catch {
+    return void 0;
+  }
+};
+function webpackBuildTarget(cwd) {
+  const project = readProjectJson(cwd);
+  const target = project?.targets?.build;
+  if (target?.executor !== DEPRECATED_NX_BUILDER) return void 0;
+  const { outputPath, main, webpackConfig } = target.options ?? {};
+  if (typeof project?.name !== "string" || typeof outputPath !== "string" || typeof main !== "string" || typeof webpackConfig !== "string") {
+    return void 0;
+  }
+  return {
+    project: project.name,
+    outputPath,
+    main,
+    webpackConfig,
+    configurations: target.configurations
+  };
+}
+function refusalFor(cwd, target) {
+  if (workspaceRootFor(cwd, target) === void 0) {
+    return `this service's build target declares \`main: ${target.main}\`, which does not place this directory inside a workspace. Every value the config needs is derived from that path, so a wrong one would resolve \`workspaceRoot\` to the service itself and leave the alias table resolving nothing. Nothing was written.`;
+  }
+  if (target.webpackConfig !== TRANSLATABLE_WEBPACK_CONFIG) {
+    return `this service builds with ${target.webpackConfig}, not the shared ${TRANSLATABLE_WEBPACK_CONFIG} this preset reproduces. Its own config adds loaders or rules the preset has no equivalent for, and translating it anyway would produce a build that succeeds and a service that fails later. Read that file, decide what the Vite config needs, and write it by hand. Nothing was written.`;
+  }
+  const live = liveFileReplacements(cwd, target);
+  if (live.length > 0) {
+    return `this service's production configuration replaces ${live.join(", ")}, and those files exist. The preset has no equivalent, so translating the target would drop a real substitution. Nothing was written.`;
+  }
+  return void 0;
+}
+function liveFileReplacements(cwd, target) {
+  const workspaceRoot = workspaceRootFor(cwd, target);
+  if (workspaceRoot === void 0) return [];
+  const configurations = target.configurations ?? {};
+  const live = [];
+  for (const configuration of Object.values(configurations)) {
+    for (const replacement of configuration.fileReplacements ?? []) {
+      const exists = existsSync2(join2(workspaceRoot, replacement.replace)) || existsSync2(join2(workspaceRoot, replacement.with));
+      if (exists) live.push(replacement.replace);
+    }
+  }
+  return live;
+}
+function workspaceRootFor(cwd, target) {
+  const moduleRoot = target.main.replace(/\/src\/.*$/, "");
+  if (moduleRoot === target.main || !cwd.endsWith(moduleRoot)) return void 0;
+  return cwd.slice(0, cwd.length - moduleRoot.length - 1);
+}
+function workspaceRootHops(cwd, target) {
+  const root = workspaceRootFor(cwd, target);
+  if (root === void 0) {
+    throw new Error(`sentinel build(nest): cannot place ${cwd} in a workspace from ${target.main}`);
+  }
+  const rel = relative(root, cwd);
+  return rel === "" ? 0 : rel.split(/[\\/]/).length;
+}
+
+// src/roles/build/read-adoption.ts
+import { existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
+import { join as join3 } from "path";
+
+// src/roles/build/presets/requirements.json
+var requirements_default = {
+  svelte: {
+    why: "sentinel ships Vite 8, and @sveltejs/vite-plugin-svelte caps at Vite 6 until its major 7",
+    requires: {
+      "@sveltejs/vite-plugin-svelte": "7.0.0",
+      svelte: "5.46.4"
+    }
+  }
+};
+
+// src/roles/build/presets/toolchain.json
+var toolchain_default = {
+  $comment: "The build toolchain sentinel owns. One table, because three places used to hold parts of it: the list to remove from a module's package.json, the list of import specifiers to rewrite, and the map from a default import to the name sentinel re-exports it under. A package added to one and not the others gives a removal with no rewrite, or an import pointing at a package the module no longer declares.",
+  owned: [
+    {
+      package: "vite",
+      specifier: "vite",
+      named: ["defineConfig", "loadEnv", "mergeConfig"],
+      types: [
+        "Plugin",
+        "PluginOption",
+        "SassPreprocessorOptions",
+        "UserConfig",
+        "UserConfigExport"
+      ],
+      why: "the bundler itself. `defineConfig`, `loadEnv` and `mergeConfig` are what every config in this repo imports from it, and the types travel with them: a config importing PluginOption from a package it no longer declares builds but does not typecheck."
+    },
+    {
+      package: "@vitejs/plugin-react",
+      specifier: "@vitejs/plugin-react",
+      default: "react",
+      why: "the React transform. Bound to the Vite that runs it, so it has to come from the same install."
+    },
+    {
+      package: "@tailwindcss/vite",
+      specifier: "@tailwindcss/vite",
+      default: "tailwindcss",
+      why: "the Tailwind pipeline, identical in all three front apps."
+    },
+    {
+      package: "vite-plugin-svgr",
+      specifier: "vite-plugin-svgr",
+      default: "svgr",
+      why: "SVG as components, identical in all three front apps."
+    },
+    {
+      package: "nitro",
+      specifier: "nitro/vite",
+      named: ["nitro"],
+      why: "the SSR server. Note the package and the import specifier differ, which is exactly the kind of split that made three separate lists disagree."
+    }
+  ],
+  add: [
+    {
+      package: "@hublo/sentinel",
+      why: "the module now gets its toolchain from here, so it declares it. Pinned by the installer rather than by us: `--init` writes the dependency, `pnpm install` resolves it."
+    }
+  ],
+  $notOwned: {
+    "@rolldown/plugin-babel": "declared by career and host-admin themselves, not at the root. It supports LocatorJS, a development convenience gated on LOCATORJS=true, not shared build infrastructure. Removing it would remove a feature from two teams, which is their call and must not ride along inside an adoption.",
+    "@locator/babel-jsx": "same, and same owners.",
+    "@tanstack/react-start": "a framework the apps code against: 48 source files import it directly.",
+    "@tanstack/router-plugin": "generates the app's own route tree.",
+    "vite-bundle-analyzer": "at the root at 1.3.7 and imported nowhere, the only mention being a commented-out line in host-admin. Not a candidate to re-export, a candidate to delete from the root."
+  }
+};
+
+// src/roles/build/preset-data.ts
+var REQUIREMENTS = requirements_default;
+var OWNED_PACKAGES = toolchain_default.owned;
+
+// src/roles/build/config-policy.ts
+var COMPANION_CONFIG_FILES = [
+  "vitest.config.ts",
+  "vitest.config.mts",
+  "vitest.config.js",
+  "vitest.config.mjs"
+];
+var BUILD_CONFIG_FILES = [
+  "vite.config.ts",
+  "vite.config.mts",
+  "vite.config.js",
+  "vite.config.mjs"
+];
+var BUILD_PRESET_SPECIFIERS = {
+  react: "@hublo/sentinel/build/react",
+  nest: "@hublo/sentinel/build/nest"
+};
+var BUILD_PRESET_SPECIFIER = BUILD_PRESET_SPECIFIERS.react;
+var BUILD_SCRIPT_NAME = "build";
+var SENTINEL_BUILD_COMMAND = "sentinel --run --build --";
+var DEV_SCRIPT_NAME = "serve";
+var SENTINEL_DEV_COMMAND = "sentinel --run --dev";
+function buildTarget() {
+  return {
+    [BUILD_SCRIPT_NAME]: {
+      cache: true,
+      inputs: ["default", "^default", ...BUILD_CONFIG_FILES.map((name) => `{projectRoot}/${name}`)]
+    }
+  };
+}
+var SENTINEL_OWNED_BUILD_PACKAGES = OWNED_PACKAGES.map(
+  (entry) => entry.package
+);
+
+// src/roles/build/read-adoption.ts
+var NOT_ADOPTED = (configFile, unreadable = null) => ({
+  configFile,
+  preset: null,
+  adopted: false,
+  conformant: false,
+  drift: [],
+  ownDeclarations: [],
+  unreadable
+});
+function buildConfigFile(cwd) {
+  return BUILD_CONFIG_FILES.find((name) => existsSync3(join3(cwd, name)));
+}
+function importsSpecifier(source, specifier) {
+  const escaped = specifier.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  return new RegExp(`(?:from|import)\\s*\\(?\\s*['"\`]${escaped}(?:/[^'"\`]*)?['"\`]`).test(source);
+}
+function importsPreset(source) {
+  return Object.values(BUILD_PRESET_SPECIFIERS).some(
+    (specifier) => importsSpecifier(source, specifier)
+  );
+}
+var REACT_PLUGIN_SPECIFIERS = ["@vitejs/plugin-react", "@tanstack/react-start"];
+function declaredBuildPreset(cwd) {
+  const source = readBuildConfigSource(cwd);
+  if (source === void 0) {
+    if (buildConfigFile(cwd) !== void 0) return void 0;
+    return webpackBuildTarget(cwd) === void 0 ? void 0 : "nest";
+  }
+  if (importsSpecifier(source, BUILD_PRESET_SPECIFIERS.nest)) return "nest";
+  if (importsPreset(source)) return "react";
+  return REACT_PLUGIN_SPECIFIERS.some((specifier) => importsSpecifier(source, specifier)) ? "react" : void 0;
+}
+function readBuildConfigSource(cwd) {
+  const configFile = buildConfigFile(cwd);
+  if (!configFile) return void 0;
+  try {
+    return readFileSync3(join3(cwd, configFile), "utf8");
+  } catch {
+    return void 0;
+  }
+}
+function readBuildAdoption(cwd) {
+  const configFile = buildConfigFile(cwd);
+  if (!configFile) return NOT_ADOPTED(null);
+  let source;
+  try {
+    source = readFileSync3(join3(cwd, configFile), "utf8");
+  } catch (error) {
+    return NOT_ADOPTED(configFile, error instanceof Error ? error.message : String(error));
+  }
+  if (!importsPreset(source)) return NOT_ADOPTED(configFile);
+  const manifest = readProjectPackageJson(cwd);
+  const declared = { ...manifest.dependencies, ...manifest.devDependencies };
+  const ownDeclarations = SENTINEL_OWNED_BUILD_PACKAGES.filter((name) => name in declared).map(
+    (name) => ({ name, version: declared[name] })
+  );
+  return {
+    configFile,
+    // Read from the config rather than assumed: the two presets are adopted the same way and
+    // reporting the wrong one would make `--inspect` lie about what a module builds.
+    preset: declaredBuildPreset(cwd) ?? "react",
+    adopted: true,
+    conformant: ownDeclarations.length === 0,
+    drift: ownDeclarations.map(
+      ({ name, version }) => `declares ${name}@${version} of its own; sentinel owns it, and two copies in one build give the plugins a different Vite than the one running them`
+    ),
+    ownDeclarations,
+    unreadable: null
+  };
+}
+
 // src/roles/build/adapters/vite/vite-role.adapter.ts
 import { spawnSync } from "child_process";
 
 // src/core/config/tool-args.ts
-import { existsSync as existsSync2 } from "fs";
+import { existsSync as existsSync4 } from "fs";
 import { isAbsolute, resolve as resolve2 } from "path";
 function splitToolArgs(cwd, toolArgs = [], { valueFlags = [] } = {}) {
   const takesValue = new Set(valueFlags);
@@ -179,7 +431,7 @@ function splitToolArgs(cwd, toolArgs = [], { valueFlags = [] } = {}) {
   for (const arg of toolArgs) {
     const looksLikeOption = arg.startsWith("-");
     const target = isAbsolute(arg) ? arg : resolve2(cwd, arg);
-    if (!previousTakesValue && !looksLikeOption && existsSync2(target)) paths.push(arg);
+    if (!previousTakesValue && !looksLikeOption && existsSync4(target)) paths.push(arg);
     else options.push(arg);
     previousTakesValue = !arg.includes("=") && takesValue.has(arg);
   }
@@ -187,15 +439,15 @@ function splitToolArgs(cwd, toolArgs = [], { valueFlags = [] } = {}) {
 }
 
 // src/shared/resolve-bin.ts
-import { existsSync as existsSync3 } from "fs";
+import { existsSync as existsSync5 } from "fs";
 import { createRequire } from "module";
-import { delimiter, dirname as dirname2, join as join2 } from "path";
+import { delimiter, dirname as dirname2, join as join4 } from "path";
 var require2 = createRequire(import.meta.url);
 function resolveBin(fromDir, name) {
   let dir = fromDir;
   for (; ; ) {
-    const candidate = join2(dir, "node_modules", ".bin", name);
-    if (existsSync3(candidate)) return candidate;
+    const candidate = join4(dir, "node_modules", ".bin", name);
+    if (existsSync5(candidate)) return candidate;
     const parent = dirname2(dir);
     if (parent === dir) return void 0;
     dir = parent;
@@ -207,8 +459,8 @@ function binFromOwnInstall(packageName, binName) {
     const bin = require2(manifest).bin;
     const relative6 = typeof bin === "string" ? bin : bin?.[binName];
     if (!relative6) return void 0;
-    const executable = join2(dirname2(manifest), relative6);
-    return existsSync3(executable) ? executable : void 0;
+    const executable = join4(dirname2(manifest), relative6);
+    return existsSync5(executable) ? executable : void 0;
   } catch {
     return void 0;
   }
@@ -224,8 +476,8 @@ import { existsSync as existsSync8, readFileSync as readFileSync6 } from "fs";
 import { join as join8 } from "path";
 
 // src/core/config/existing-command.ts
-import { readFileSync as readFileSync3 } from "fs";
-import { join as join4 } from "path";
+import { readFileSync as readFileSync5 } from "fs";
+import { join as join6 } from "path";
 
 // src/shared/jsonc.ts
 import { parse, printParseErrorCode } from "jsonc-parser";
@@ -240,11 +492,11 @@ function parseJsonc(text, source = "config") {
 }
 
 // src/core/config/manifest.ts
-import { existsSync as existsSync4, readFileSync as readFileSync2 } from "fs";
-import { basename as basename2, join as join3 } from "path";
+import { existsSync as existsSync6, readFileSync as readFileSync4 } from "fs";
+import { basename as basename2, join as join5 } from "path";
 function moduleScripts(cwd) {
   try {
-    const pkg = JSON.parse(readFileSync2(join3(cwd, "package.json"), "utf8"));
+    const pkg = JSON.parse(readFileSync4(join5(cwd, "package.json"), "utf8"));
     return pkg.scripts ?? {};
   } catch {
     return {};
@@ -252,7 +504,7 @@ function moduleScripts(cwd) {
 }
 function moduleName2(cwd) {
   try {
-    const pkg = JSON.parse(readFileSync2(join3(cwd, "package.json"), "utf8"));
+    const pkg = JSON.parse(readFileSync4(join5(cwd, "package.json"), "utf8"));
     return pkg.name;
   } catch {
     return void 0;
@@ -272,7 +524,7 @@ function manifestOperation(cwd, scripts) {
     scripts,
     devDependencies: { [own.name]: isSelfAdoption(cwd) ? "link:." : own.version }
   };
-  if (existsSync4(join3(cwd, "package.json"))) {
+  if (existsSync6(join5(cwd, "package.json"))) {
     return { kind: "merge-json", path: "package.json", value };
   }
   return {
@@ -287,7 +539,7 @@ function nxTargetCommand(cwd, target) {
   let project;
   try {
     project = parseJsonc(
-      readFileSync3(join4(cwd, "project.json"), "utf8"),
+      readFileSync5(join6(cwd, "project.json"), "utf8"),
       "project.json"
     );
   } catch {
@@ -318,14 +570,14 @@ function existingCommand(cwd, target) {
 }
 
 // src/core/config/nx-target.ts
-import { existsSync as existsSync5 } from "fs";
-import { join as join5 } from "path";
+import { existsSync as existsSync7 } from "fs";
+import { join as join7 } from "path";
 function nxTargetOperations(options) {
   const { cwd, targets } = options;
   const names = Object.keys(targets);
   if (names.length === 0) return [];
   const operations = [];
-  if (existsSync5(join5(cwd, "project.json"))) {
+  if (existsSync7(join7(cwd, "project.json"))) {
     operations.push({
       kind: "remove-json-keys",
       path: "project.json",
@@ -382,112 +634,6 @@ function keepsOtherCommands(script, sentinelCommand) {
   return script.split(SEGMENT_SEPARATOR).filter((_, index) => !isSeparatorAt(index)).some((segment) => segment.trim() !== "" && segment.trim() !== sentinelCommand);
 }
 
-// src/roles/build/presets/requirements.json
-var requirements_default = {
-  svelte: {
-    why: "sentinel ships Vite 8, and @sveltejs/vite-plugin-svelte caps at Vite 6 until its major 7",
-    requires: {
-      "@sveltejs/vite-plugin-svelte": "7.0.0",
-      svelte: "5.46.4"
-    }
-  }
-};
-
-// src/roles/build/presets/toolchain.json
-var toolchain_default = {
-  $comment: "The build toolchain sentinel owns. One table, because three places used to hold parts of it: the list to remove from a module's package.json, the list of import specifiers to rewrite, and the map from a default import to the name sentinel re-exports it under. A package added to one and not the others gives a removal with no rewrite, or an import pointing at a package the module no longer declares.",
-  owned: [
-    {
-      package: "vite",
-      specifier: "vite",
-      named: ["defineConfig", "loadEnv", "mergeConfig"],
-      types: [
-        "Plugin",
-        "PluginOption",
-        "SassPreprocessorOptions",
-        "UserConfig",
-        "UserConfigExport"
-      ],
-      why: "the bundler itself. `defineConfig`, `loadEnv` and `mergeConfig` are what every config in this repo imports from it, and the types travel with them: a config importing PluginOption from a package it no longer declares builds but does not typecheck."
-    },
-    {
-      package: "@vitejs/plugin-react",
-      specifier: "@vitejs/plugin-react",
-      default: "react",
-      why: "the React transform. Bound to the Vite that runs it, so it has to come from the same install."
-    },
-    {
-      package: "@tailwindcss/vite",
-      specifier: "@tailwindcss/vite",
-      default: "tailwindcss",
-      why: "the Tailwind pipeline, identical in all three front apps."
-    },
-    {
-      package: "vite-plugin-svgr",
-      specifier: "vite-plugin-svgr",
-      default: "svgr",
-      why: "SVG as components, identical in all three front apps."
-    },
-    {
-      package: "nitro",
-      specifier: "nitro/vite",
-      named: ["nitro"],
-      why: "the SSR server. Note the package and the import specifier differ, which is exactly the kind of split that made three separate lists disagree."
-    }
-  ],
-  add: [
-    {
-      package: "@hublo/sentinel",
-      why: "the module now gets its toolchain from here, so it declares it. Pinned by the installer rather than by us: `--init` writes the dependency, `pnpm install` resolves it."
-    }
-  ],
-  $notOwned: {
-    "@rolldown/plugin-babel": "declared by career and host-admin themselves, not at the root. It supports LocatorJS, a development convenience gated on LOCATORJS=true, not shared build infrastructure. Removing it would remove a feature from two teams, which is their call and must not ride along inside an adoption.",
-    "@locator/babel-jsx": "same, and same owners.",
-    "@tanstack/react-start": "a framework the apps code against: 48 source files import it directly.",
-    "@tanstack/router-plugin": "generates the app's own route tree.",
-    "vite-bundle-analyzer": "at the root at 1.3.7 and imported nowhere, the only mention being a commented-out line in host-admin. Not a candidate to re-export, a candidate to delete from the root."
-  }
-};
-
-// src/roles/build/preset-data.ts
-var REQUIREMENTS = requirements_default;
-var OWNED_PACKAGES = toolchain_default.owned;
-
-// src/roles/build/config-policy.ts
-var COMPANION_CONFIG_FILES = [
-  "vitest.config.ts",
-  "vitest.config.mts",
-  "vitest.config.js",
-  "vitest.config.mjs"
-];
-var BUILD_CONFIG_FILES = [
-  "vite.config.ts",
-  "vite.config.mts",
-  "vite.config.js",
-  "vite.config.mjs"
-];
-var BUILD_PRESET_SPECIFIERS = {
-  react: "@hublo/sentinel/build/react",
-  nest: "@hublo/sentinel/build/nest"
-};
-var BUILD_PRESET_SPECIFIER = BUILD_PRESET_SPECIFIERS.react;
-var BUILD_SCRIPT_NAME = "build";
-var SENTINEL_BUILD_COMMAND = "sentinel --run --build --";
-var DEV_SCRIPT_NAME = "serve";
-var SENTINEL_DEV_COMMAND = "sentinel --run --dev";
-function buildTarget() {
-  return {
-    [BUILD_SCRIPT_NAME]: {
-      cache: true,
-      inputs: ["default", "^default", ...BUILD_CONFIG_FILES.map((name) => `{projectRoot}/${name}`)]
-    }
-  };
-}
-var SENTINEL_OWNED_BUILD_PACKAGES = OWNED_PACKAGES.map(
-  (entry) => entry.package
-);
-
 // src/roles/build/dev-script.ts
 var CHAIN = " -- ";
 var VITE_TOKEN = /(^|\s|\/)vite(\s|$)/;
@@ -504,84 +650,12 @@ function composeDevScript(existing, command) {
   if (at === -1) return existing;
   const rest = (chunks[at] ?? "").replace(/^.*?(^|\s|\/)vite(\s|$)/, "");
   const options = appOptions(rest);
-  chunks[at] = options === "" ? command : `${command} -- ${options}`;
+  chunks[at] = options === "" ? `${command} --` : `${command} -- ${options}`;
   return chunks.join(CHAIN);
 }
 
 // src/roles/build/nest/adopt.ts
 import { relative as relative2 } from "path";
-
-// src/roles/build/nest/nx-target.ts
-import { existsSync as existsSync6, readFileSync as readFileSync4 } from "fs";
-import { join as join6, relative } from "path";
-var DEPRECATED_NX_BUILDER = "@nx/webpack:webpack";
-var TRANSLATABLE_WEBPACK_CONFIG = "tools/webpack-configs/update.webpack.config.js";
-var readProjectJson = (cwd) => {
-  const path = join6(cwd, "project.json");
-  if (!existsSync6(path)) return void 0;
-  try {
-    return JSON.parse(readFileSync4(path, "utf8"));
-  } catch {
-    return void 0;
-  }
-};
-function webpackBuildTarget(cwd) {
-  const project = readProjectJson(cwd);
-  const target = project?.targets?.build;
-  if (target?.executor !== DEPRECATED_NX_BUILDER) return void 0;
-  const { outputPath, main, webpackConfig } = target.options ?? {};
-  if (typeof project?.name !== "string" || typeof outputPath !== "string" || typeof main !== "string" || typeof webpackConfig !== "string") {
-    return void 0;
-  }
-  return {
-    project: project.name,
-    outputPath,
-    main,
-    webpackConfig,
-    configurations: target.configurations
-  };
-}
-function refusalFor(cwd, target) {
-  if (workspaceRootFor(cwd, target) === void 0) {
-    return `this service's build target declares \`main: ${target.main}\`, which does not place this directory inside a workspace. Every value the config needs is derived from that path, so a wrong one would resolve \`workspaceRoot\` to the service itself and leave the alias table resolving nothing. Nothing was written.`;
-  }
-  if (target.webpackConfig !== TRANSLATABLE_WEBPACK_CONFIG) {
-    return `this service builds with ${target.webpackConfig}, not the shared ${TRANSLATABLE_WEBPACK_CONFIG} this preset reproduces. Its own config adds loaders or rules the preset has no equivalent for, and translating it anyway would produce a build that succeeds and a service that fails later. Read that file, decide what the Vite config needs, and write it by hand. Nothing was written.`;
-  }
-  const live = liveFileReplacements(cwd, target);
-  if (live.length > 0) {
-    return `this service's production configuration replaces ${live.join(", ")}, and those files exist. The preset has no equivalent, so translating the target would drop a real substitution. Nothing was written.`;
-  }
-  return void 0;
-}
-function liveFileReplacements(cwd, target) {
-  const workspaceRoot = workspaceRootFor(cwd, target);
-  if (workspaceRoot === void 0) return [];
-  const configurations = target.configurations ?? {};
-  const live = [];
-  for (const configuration of Object.values(configurations)) {
-    for (const replacement of configuration.fileReplacements ?? []) {
-      const exists = existsSync6(join6(workspaceRoot, replacement.replace)) || existsSync6(join6(workspaceRoot, replacement.with));
-      if (exists) live.push(replacement.replace);
-    }
-  }
-  return live;
-}
-function workspaceRootFor(cwd, target) {
-  const moduleRoot = target.main.replace(/\/src\/.*$/, "");
-  if (moduleRoot === target.main || !cwd.endsWith(moduleRoot)) return void 0;
-  return cwd.slice(0, cwd.length - moduleRoot.length - 1);
-}
-function workspaceRootHops(cwd, target) {
-  const root = workspaceRootFor(cwd, target);
-  if (root === void 0) {
-    throw new Error(`sentinel build(nest): cannot place ${cwd} in a workspace from ${target.main}`);
-  }
-  const rel = relative(root, cwd);
-  return rel === "" ? 0 : rel.split(/[\\/]/).length;
-}
-
-// src/roles/build/nest/adopt.ts
 var NEST_CONFIG_FILE = "vite.config.mts";
 function nestConfigSource(cwd, target) {
   const hops = workspaceRootHops(cwd, target);
@@ -628,80 +702,6 @@ function nestAdoptionOperations(cwd, target) {
   ];
 }
 
-// src/roles/build/read-adoption.ts
-import { existsSync as existsSync7, readFileSync as readFileSync5 } from "fs";
-import { join as join7 } from "path";
-var NOT_ADOPTED = (configFile, unreadable = null) => ({
-  configFile,
-  preset: null,
-  adopted: false,
-  conformant: false,
-  drift: [],
-  ownDeclarations: [],
-  unreadable
-});
-function buildConfigFile(cwd) {
-  return BUILD_CONFIG_FILES.find((name) => existsSync7(join7(cwd, name)));
-}
-function importsSpecifier(source, specifier) {
-  const escaped = specifier.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  return new RegExp(`(?:from|import)\\s*\\(?\\s*['"\`]${escaped}(?:/[^'"\`]*)?['"\`]`).test(source);
-}
-function importsPreset(source) {
-  return Object.values(BUILD_PRESET_SPECIFIERS).some(
-    (specifier) => importsSpecifier(source, specifier)
-  );
-}
-var REACT_PLUGIN_SPECIFIERS = ["@vitejs/plugin-react", "@tanstack/react-start"];
-function declaredBuildPreset(cwd) {
-  const source = readBuildConfigSource(cwd);
-  if (source === void 0) {
-    if (buildConfigFile(cwd) !== void 0) return void 0;
-    return webpackBuildTarget(cwd) === void 0 ? void 0 : "nest";
-  }
-  if (importsSpecifier(source, BUILD_PRESET_SPECIFIERS.nest)) return "nest";
-  if (importsPreset(source)) return "react";
-  return REACT_PLUGIN_SPECIFIERS.some((specifier) => importsSpecifier(source, specifier)) ? "react" : void 0;
-}
-function readBuildConfigSource(cwd) {
-  const configFile = buildConfigFile(cwd);
-  if (!configFile) return void 0;
-  try {
-    return readFileSync5(join7(cwd, configFile), "utf8");
-  } catch {
-    return void 0;
-  }
-}
-function readBuildAdoption(cwd) {
-  const configFile = buildConfigFile(cwd);
-  if (!configFile) return NOT_ADOPTED(null);
-  let source;
-  try {
-    source = readFileSync5(join7(cwd, configFile), "utf8");
-  } catch (error) {
-    return NOT_ADOPTED(configFile, error instanceof Error ? error.message : String(error));
-  }
-  if (!importsPreset(source)) return NOT_ADOPTED(configFile);
-  const manifest = readProjectPackageJson(cwd);
-  const declared = { ...manifest.dependencies, ...manifest.devDependencies };
-  const ownDeclarations = SENTINEL_OWNED_BUILD_PACKAGES.filter((name) => name in declared).map(
-    (name) => ({ name, version: declared[name] })
-  );
-  return {
-    configFile,
-    // Read from the config rather than assumed: the two presets are adopted the same way and
-    // reporting the wrong one would make `--inspect` lie about what a module builds.
-    preset: declaredBuildPreset(cwd) ?? "react",
-    adopted: true,
-    conformant: ownDeclarations.length === 0,
-    drift: ownDeclarations.map(
-      ({ name, version }) => `declares ${name}@${version} of its own; sentinel owns it, and two copies in one build give the plugins a different Vite than the one running them`
-    ),
-    ownDeclarations,
-    unreadable: null
-  };
-}
-
 // src/roles/build/requirements.ts
 function atLeast(declared, needed) {
   const parse2 = (value) => value.replace(/^[\^~>=<\s]+/, "").split("-")[0].split(".").map((part) => Number.parseInt(part, 10) || 0);
@@ -858,9 +858,9 @@ function buildScripts(cwd) {
     const own2 = moduleName(cwd);
     scripts[DEV_SCRIPT_NAME] = composeDevScript(
       existingDev,
-      // Trailing `--` for the same reason as the build script: whatever the caller appends
-      // reaches Vite, not sentinel's parser. It goes after `--module`, which is sentinel's own.
-      `${selfCommand(cwd, "--run --dev") ?? SENTINEL_DEV_COMMAND} --module ${own2} --`
+      // No trailing `--` here: `composeDevScript` owns the separator, and adding one on both
+      // sides produced `-- --`, handing Vite an argument nobody wrote.
+      `${selfCommand(cwd, "--run --dev") ?? SENTINEL_DEV_COMMAND} --module ${own2}`
     );
   }
   return scripts;
@@ -1112,6 +1112,12 @@ var ViteDevAdapter = class extends ViteRoleAdapter {
    * wrong correction, it added friction to a command that already produced the right result.
    */
   plan(context) {
+    if (declaredBuildPreset(context.cwd) === "nest" || webpackBuildTarget(context.cwd)) {
+      return {
+        operations: [],
+        skipped: `a Nest service has no dev server, so --dev has nothing to adopt here. Its build is \`sentinel --init --build\`, and it runs as a Node process afterwards.`
+      };
+    }
     const planned = super.plan(context);
     if (planned.operations.length === 0) return planned;
     return {
@@ -6412,12 +6418,12 @@ export {
   declaredPresetFor,
   availableTargets,
   resolve,
-  BaseAdapter,
-  resolveBin,
   readOwnVersion,
   readProjectPackageJson,
   moduleName,
   buildConfigFile,
+  BaseAdapter,
+  resolveBin,
   VERBS,
   TARGETS,
   LONG_RUNNING_TARGETS,
@@ -6433,4 +6439,4 @@ export {
   detectFramework,
   dispatch
 };
-//# sourceMappingURL=chunk-6VOQDDZD.js.map
+//# sourceMappingURL=chunk-X675OYUC.js.map

package/dist/index.js

@@ -7,7 +7,7 @@ import {
   registerAdapters,
   resolve,
   setDefaultRunner
-} from "./chunk-6VOQDDZD.js";
+} from "./chunk-X675OYUC.js";
 export {
   BaseAdapter,
   all,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hublo/sentinel",
-  "version": "1.2.0-alpha.11",
+  "version": "1.2.0-alpha.13",
   "description": "One CLI that guards code health across Hublo repos: shared lint/typescript/build/test presets, static & dynamic analysis, and architecture checks.",
   "type": "module",
   "license": "MIT",