@hublo/sentinel 1.2.0-alpha.2 → 1.2.0-alpha.21

package/dist/{chunk-SA2RMTVI.js → chunk-RKVGZNJ7.js}

@@ -67,22 +67,9 @@ function resolve(target, preset, runner) {
   return matching[0];
 }
 
-// src/core/base-adapter.ts
-var BaseAdapter = class {
-  inspect(_ctx) {
-    throw new Error(`${this.runner}: --inspect not implemented yet`);
-  }
-  report(_ctx) {
-    throw new Error(`${this.runner}: --report not implemented yet`);
-  }
-  status(_ctx) {
-    throw new Error(`${this.runner}: --status not implemented yet`);
-  }
-};
-
 // src/shared/package-json.ts
 import { existsSync, readFileSync } from "fs";
-import { dirname, join } from "path";
+import { basename, dirname, join } from "path";
 import { fileURLToPath } from "url";
 function readOwnPackage() {
   let dir = dirname(fileURLToPath(import.meta.url));
@@ -127,6 +114,23 @@ function readNxProjectName(dir) {
     return void 0;
   }
 }
+function moduleName(dir) {
+  const declared = readProjectPackageJson(dir).name;
+  return readNxProjectName(dir) ?? (declared === void 0 ? basename(dir) : declared);
+}
+
+// src/core/base-adapter.ts
+var BaseAdapter = class {
+  inspect(_ctx) {
+    throw new Error(`${this.runner}: --inspect not implemented yet`);
+  }
+  report(_ctx) {
+    throw new Error(`${this.runner}: --report not implemented yet`);
+  }
+  status(_ctx) {
+    throw new Error(`${this.runner}: --status not implemented yet`);
+  }
+};
 
 // src/core/domain.ts
 var VERBS = ["run", "inspect", "init", "migrate", "report", "status"];
@@ -161,11 +165,273 @@ function palette(stream) {
   };
 }
 
+// src/roles/build/nest/nx-target.ts
+import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
+import { join as join2, relative } from "path";
+var DEPRECATED_NX_BUILDER = "@nx/webpack:webpack";
+var TRANSLATABLE_WEBPACK_CONFIG = "tools/webpack-configs/update.webpack.config.js";
+var readProjectJson = (cwd) => {
+  const path = join2(cwd, "project.json");
+  if (!existsSync2(path)) return void 0;
+  try {
+    return JSON.parse(readFileSync2(path, "utf8"));
+  } catch {
+    return void 0;
+  }
+};
+function webpackBuildTarget(cwd) {
+  const project = readProjectJson(cwd);
+  const target = project?.targets?.build;
+  if (target?.executor !== DEPRECATED_NX_BUILDER) return void 0;
+  const { outputPath, main, webpackConfig, transformers, assets } = target.options ?? {};
+  if (typeof project?.name !== "string" || typeof outputPath !== "string" || typeof main !== "string" || typeof webpackConfig !== "string") {
+    return void 0;
+  }
+  return {
+    project: project.name,
+    outputPath,
+    main,
+    webpackConfig,
+    configurations: target.configurations,
+    transformers,
+    assets
+  };
+}
+function refusalFor(cwd, target) {
+  if (workspaceRootFor(cwd, target) === void 0) {
+    return `this service's build target declares \`main: ${target.main}\`, which does not place this directory inside a workspace. Every value the config needs is derived from that path, so a wrong one would resolve \`workspaceRoot\` to the service itself and leave the alias table resolving nothing. Nothing was written.`;
+  }
+  if (target.webpackConfig !== TRANSLATABLE_WEBPACK_CONFIG) {
+    return `this service builds with ${target.webpackConfig}, not the shared ${TRANSLATABLE_WEBPACK_CONFIG} this preset reproduces. Its own config adds loaders or rules the preset has no equivalent for, and translating it anyway would produce a build that succeeds and a service that fails later. Read that file, decide what the Vite config needs, and write it by hand. Nothing was written.`;
+  }
+  const live = liveFileReplacements(cwd, target);
+  if (live.length > 0) {
+    return `this service's production configuration replaces ${live.join(", ")}, and those files exist. The preset has no equivalent, so translating the target would drop a real substitution. Nothing was written.`;
+  }
+  return void 0;
+}
+function liveFileReplacements(cwd, target) {
+  const workspaceRoot = workspaceRootFor(cwd, target);
+  if (workspaceRoot === void 0) return [];
+  const configurations = target.configurations ?? {};
+  const live = [];
+  for (const configuration of Object.values(configurations)) {
+    for (const replacement of configuration.fileReplacements ?? []) {
+      const exists = existsSync2(join2(workspaceRoot, replacement.replace)) || existsSync2(join2(workspaceRoot, replacement.with));
+      if (exists) live.push(replacement.replace);
+    }
+  }
+  return live;
+}
+function workspaceRootFor(cwd, target) {
+  const moduleRoot = target.main.replace(/\/src\/.*$/, "");
+  if (moduleRoot === target.main || !cwd.endsWith(moduleRoot)) return void 0;
+  return cwd.slice(0, cwd.length - moduleRoot.length - 1);
+}
+function workspaceRootHops(cwd, target) {
+  const root = workspaceRootFor(cwd, target);
+  if (root === void 0) {
+    throw new Error(`sentinel build(nest): cannot place ${cwd} in a workspace from ${target.main}`);
+  }
+  const rel = relative(root, cwd);
+  return rel === "" ? 0 : rel.split(/[\\/]/).length;
+}
+
+// src/roles/build/read-adoption.ts
+import { existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
+import { join as join3 } from "path";
+
+// src/roles/build/presets/requirements.json
+var requirements_default = {
+  svelte: {
+    why: "sentinel ships Vite 8, and @sveltejs/vite-plugin-svelte caps at Vite 6 until its major 7",
+    requires: {
+      "@sveltejs/vite-plugin-svelte": "7.0.0",
+      svelte: "5.46.4"
+    }
+  }
+};
+
+// src/roles/build/presets/toolchain.json
+var toolchain_default = {
+  $comment: "The build toolchain sentinel owns. One table, because three places used to hold parts of it: the list to remove from a module's package.json, the list of import specifiers to rewrite, and the map from a default import to the name sentinel re-exports it under. A package added to one and not the others gives a removal with no rewrite, or an import pointing at a package the module no longer declares.",
+  owned: [
+    {
+      package: "vite",
+      specifier: "vite",
+      named: ["defineConfig", "loadEnv", "mergeConfig"],
+      types: [
+        "Plugin",
+        "PluginOption",
+        "SassPreprocessorOptions",
+        "UserConfig",
+        "UserConfigExport"
+      ],
+      why: "the bundler itself. `defineConfig`, `loadEnv` and `mergeConfig` are what every config in this repo imports from it, and the types travel with them: a config importing PluginOption from a package it no longer declares builds but does not typecheck."
+    },
+    {
+      package: "@vitejs/plugin-react",
+      specifier: "@vitejs/plugin-react",
+      default: "react",
+      why: "the React transform. Bound to the Vite that runs it, so it has to come from the same install."
+    },
+    {
+      package: "@tailwindcss/vite",
+      specifier: "@tailwindcss/vite",
+      default: "tailwindcss",
+      why: "the Tailwind pipeline, identical in all three front apps."
+    },
+    {
+      package: "vite-plugin-svgr",
+      specifier: "vite-plugin-svgr",
+      default: "svgr",
+      why: "SVG as components, identical in all three front apps."
+    },
+    {
+      package: "nitro",
+      specifier: "nitro/vite",
+      named: ["nitro"],
+      why: "the SSR server. Note the package and the import specifier differ, which is exactly the kind of split that made three separate lists disagree."
+    }
+  ],
+  add: [
+    {
+      package: "@hublo/sentinel",
+      why: "the module now gets its toolchain from here, so it declares it. Pinned by the installer rather than by us: `--init` writes the dependency, `pnpm install` resolves it."
+    }
+  ],
+  $notOwned: {
+    "@rolldown/plugin-babel": "declared by career and host-admin themselves, not at the root. It supports LocatorJS, a development convenience gated on LOCATORJS=true, not shared build infrastructure. Removing it would remove a feature from two teams, which is their call and must not ride along inside an adoption.",
+    "@locator/babel-jsx": "same, and same owners.",
+    "@tanstack/react-start": "a framework the apps code against: 48 source files import it directly.",
+    "@tanstack/router-plugin": "generates the app's own route tree.",
+    "vite-bundle-analyzer": "at the root at 1.3.7 and imported nowhere, the only mention being a commented-out line in host-admin. Not a candidate to re-export, a candidate to delete from the root."
+  }
+};
+
+// src/roles/build/preset-data.ts
+var REQUIREMENTS = requirements_default;
+var OWNED_PACKAGES = toolchain_default.owned;
+
+// src/roles/build/config-policy.ts
+var COMPANION_CONFIG_FILES = [
+  "vitest.config.ts",
+  "vitest.config.mts",
+  "vitest.config.js",
+  "vitest.config.mjs"
+];
+var BUILD_CONFIG_FILES = [
+  "vite.config.ts",
+  "vite.config.mts",
+  "vite.config.js",
+  "vite.config.mjs"
+];
+var BUILD_PRESET_SPECIFIERS = {
+  react: "@hublo/sentinel/build/react",
+  nest: "@hublo/sentinel/build/nest"
+};
+var BUILD_PRESET_SPECIFIER = BUILD_PRESET_SPECIFIERS.react;
+var BUILD_SCRIPT_NAME = "build";
+var SENTINEL_BUILD_COMMAND = "sentinel --run --build --";
+var DEV_SCRIPT_NAME = "serve";
+var SENTINEL_DEV_COMMAND = "sentinel --run --dev";
+var BUILD_OUTPUT_CANDIDATES = ["dist", ".output", "build"];
+function buildTarget(options) {
+  const { moduleName: moduleName3, configFiles = BUILD_CONFIG_FILES, outputs } = options;
+  return {
+    [BUILD_SCRIPT_NAME]: {
+      executor: "nx:run-commands",
+      options: {
+        command: `pnpm --filter ${moduleName3} run ${BUILD_SCRIPT_NAME}`,
+        forwardAllArgs: false
+      },
+      cache: true,
+      inputs: ["default", "^default", ...configFiles.map((name) => `{projectRoot}/${name}`)],
+      outputs: [...outputs]
+    }
+  };
+}
+var SENTINEL_OWNED_BUILD_PACKAGES = OWNED_PACKAGES.map(
+  (entry) => entry.package
+);
+
+// src/roles/build/read-adoption.ts
+var NOT_ADOPTED = (configFile, unreadable = null) => ({
+  configFile,
+  preset: null,
+  adopted: false,
+  conformant: false,
+  drift: [],
+  ownDeclarations: [],
+  unreadable
+});
+function buildConfigFile(cwd) {
+  return BUILD_CONFIG_FILES.find((name) => existsSync3(join3(cwd, name)));
+}
+function importsSpecifier(source, specifier) {
+  const escaped = specifier.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  return new RegExp(`(?:from|import)\\s*\\(?\\s*['"\`]${escaped}(?:/[^'"\`]*)?['"\`]`).test(source);
+}
+function importsPreset(source) {
+  return Object.values(BUILD_PRESET_SPECIFIERS).some(
+    (specifier) => importsSpecifier(source, specifier)
+  );
+}
+var REACT_PLUGIN_SPECIFIERS = ["@vitejs/plugin-react", "@tanstack/react-start"];
+function declaredBuildPreset(cwd) {
+  const source = readBuildConfigSource(cwd);
+  if (source === void 0) {
+    if (buildConfigFile(cwd) !== void 0) return void 0;
+    return webpackBuildTarget(cwd) === void 0 ? void 0 : "nest";
+  }
+  if (importsSpecifier(source, BUILD_PRESET_SPECIFIERS.nest)) return "nest";
+  if (importsPreset(source)) return "react";
+  return REACT_PLUGIN_SPECIFIERS.some((specifier) => importsSpecifier(source, specifier)) ? "react" : void 0;
+}
+function readBuildConfigSource(cwd) {
+  const configFile = buildConfigFile(cwd);
+  if (!configFile) return void 0;
+  try {
+    return readFileSync3(join3(cwd, configFile), "utf8");
+  } catch {
+    return void 0;
+  }
+}
+function readBuildAdoption(cwd) {
+  const configFile = buildConfigFile(cwd);
+  if (!configFile) return NOT_ADOPTED(null);
+  let source;
+  try {
+    source = readFileSync3(join3(cwd, configFile), "utf8");
+  } catch (error) {
+    return NOT_ADOPTED(configFile, error instanceof Error ? error.message : String(error));
+  }
+  if (!importsPreset(source)) return NOT_ADOPTED(configFile);
+  const manifest = readProjectPackageJson(cwd);
+  const declared = { ...manifest.dependencies, ...manifest.devDependencies };
+  const ownDeclarations = SENTINEL_OWNED_BUILD_PACKAGES.filter((name) => name in declared).map(
+    (name) => ({ name, version: declared[name] })
+  );
+  return {
+    configFile,
+    // Read from the config rather than assumed: the two presets are adopted the same way and
+    // reporting the wrong one would make `--inspect` lie about what a module builds.
+    preset: declaredBuildPreset(cwd) ?? "react",
+    adopted: true,
+    conformant: ownDeclarations.length === 0,
+    drift: ownDeclarations.map(
+      ({ name, version }) => `declares ${name}@${version} of its own; sentinel owns it, and two copies in one build give the plugins a different Vite than the one running them`
+    ),
+    ownDeclarations,
+    unreadable: null
+  };
+}
+
 // src/roles/build/adapters/vite/vite-role.adapter.ts
 import { spawnSync } from "child_process";
 
 // src/core/config/tool-args.ts
-import { existsSync as existsSync2 } from "fs";
+import { existsSync as existsSync4 } from "fs";
 import { isAbsolute, resolve as resolve2 } from "path";
 function splitToolArgs(cwd, toolArgs = [], { valueFlags = [] } = {}) {
   const takesValue = new Set(valueFlags);
@@ -175,7 +441,7 @@ function splitToolArgs(cwd, toolArgs = [], { valueFlags = [] } = {}) {
   for (const arg of toolArgs) {
     const looksLikeOption = arg.startsWith("-");
     const target = isAbsolute(arg) ? arg : resolve2(cwd, arg);
-    if (!previousTakesValue && !looksLikeOption && existsSync2(target)) paths.push(arg);
+    if (!previousTakesValue && !looksLikeOption && existsSync4(target)) paths.push(arg);
     else options.push(arg);
     previousTakesValue = !arg.includes("=") && takesValue.has(arg);
   }
@@ -183,15 +449,15 @@ function splitToolArgs(cwd, toolArgs = [], { valueFlags = [] } = {}) {
 }
 
 // src/shared/resolve-bin.ts
-import { existsSync as existsSync3 } from "fs";
+import { existsSync as existsSync5 } from "fs";
 import { createRequire } from "module";
-import { delimiter, dirname as dirname2, join as join2 } from "path";
+import { delimiter, dirname as dirname2, join as join4 } from "path";
 var require2 = createRequire(import.meta.url);
 function resolveBin(fromDir, name) {
   let dir = fromDir;
   for (; ; ) {
-    const candidate = join2(dir, "node_modules", ".bin", name);
-    if (existsSync3(candidate)) return candidate;
+    const candidate = join4(dir, "node_modules", ".bin", name);
+    if (existsSync5(candidate)) return candidate;
     const parent = dirname2(dir);
     if (parent === dir) return void 0;
     dir = parent;
@@ -201,10 +467,10 @@ function binFromOwnInstall(packageName, binName) {
   try {
     const manifest = require2.resolve(`${packageName}/package.json`);
     const bin = require2(manifest).bin;
-    const relative4 = typeof bin === "string" ? bin : bin?.[binName];
-    if (!relative4) return void 0;
-    const executable = join2(dirname2(manifest), relative4);
-    return existsSync3(executable) ? executable : void 0;
+    const relative5 = typeof bin === "string" ? bin : bin?.[binName];
+    if (!relative5) return void 0;
+    const executable = join4(dirname2(manifest), relative5);
+    return existsSync5(executable) ? executable : void 0;
   } catch {
     return void 0;
   }
@@ -216,12 +482,12 @@ function binSearchPath(cwd) {
 }
 
 // src/roles/build/plan.ts
-import { existsSync as existsSync7, readFileSync as readFileSync5 } from "fs";
-import { basename as basename2, join as join7 } from "path";
+import { existsSync as existsSync9, readFileSync as readFileSync7 } from "fs";
+import { join as join9 } from "path";
 
 // src/core/config/existing-command.ts
-import { readFileSync as readFileSync3 } from "fs";
-import { join as join4 } from "path";
+import { readFileSync as readFileSync5 } from "fs";
+import { join as join6 } from "path";
 
 // src/shared/jsonc.ts
 import { parse, printParseErrorCode } from "jsonc-parser";
@@ -236,45 +502,48 @@ function parseJsonc(text, source = "config") {
 }
 
 // src/core/config/manifest.ts
-import { existsSync as existsSync4, readFileSync as readFileSync2 } from "fs";
-import { basename, join as join3 } from "path";
+import { existsSync as existsSync6, readFileSync as readFileSync4 } from "fs";
+import { basename as basename2, join as join5 } from "path";
 function moduleScripts(cwd) {
   try {
-    const pkg = JSON.parse(readFileSync2(join3(cwd, "package.json"), "utf8"));
+    const pkg = JSON.parse(readFileSync4(join5(cwd, "package.json"), "utf8"));
     return pkg.scripts ?? {};
   } catch {
     return {};
   }
 }
-function moduleName(cwd) {
+function moduleName2(cwd) {
   try {
-    const pkg = JSON.parse(readFileSync2(join3(cwd, "package.json"), "utf8"));
+    const pkg = JSON.parse(readFileSync4(join5(cwd, "package.json"), "utf8"));
     return pkg.name;
   } catch {
     return void 0;
   }
 }
 function isSelfAdoption(cwd) {
-  return moduleName(cwd) === readOwnPackage().name;
+  return moduleName2(cwd) === readOwnPackage().name;
 }
 function selfCommand(cwd, flags) {
   const own = readOwnPackage();
   if (!isSelfAdoption(cwd) || !own.bin) return void 0;
   return `node ${own.bin.replace(/^\.\//, "")} ${flags}`;
 }
+function adoptedPackageName(cwd) {
+  return readProjectPackageJson(cwd).name ?? readNxProjectName(cwd) ?? basename2(cwd);
+}
 function manifestOperation(cwd, scripts) {
   const own = readOwnPackage();
   const value = {
     scripts,
     devDependencies: { [own.name]: isSelfAdoption(cwd) ? "link:." : own.version }
   };
-  if (existsSync4(join3(cwd, "package.json"))) {
+  if (existsSync6(join5(cwd, "package.json"))) {
     return { kind: "merge-json", path: "package.json", value };
   }
   return {
     kind: "merge-json",
     path: "package.json",
-    value: { name: readNxProjectName(cwd) ?? basename(cwd), private: true, ...value }
+    value: { name: adoptedPackageName(cwd), private: true, ...value }
   };
 }
 
@@ -283,7 +552,7 @@ function nxTargetCommand(cwd, target) {
   let project;
   try {
     project = parseJsonc(
-      readFileSync3(join4(cwd, "project.json"), "utf8"),
+      readFileSync5(join6(cwd, "project.json"), "utf8"),
       "project.json"
     );
   } catch {
@@ -314,25 +583,26 @@ function existingCommand(cwd, target) {
 }
 
 // src/core/config/nx-target.ts
-import { existsSync as existsSync5 } from "fs";
-import { join as join5 } from "path";
+import { existsSync as existsSync7 } from "fs";
+import { join as join7 } from "path";
+function nxTargetMetadataOperations(options) {
+  const { targets } = options;
+  if (Object.keys(targets).length === 0) return [];
+  return [{ kind: "merge-json", path: "package.json", value: { nx: { targets } } }];
+}
 function nxTargetOperations(options) {
   const { cwd, targets } = options;
   const names = Object.keys(targets);
   if (names.length === 0) return [];
   const operations = [];
-  if (existsSync5(join5(cwd, "project.json"))) {
+  if (existsSync7(join7(cwd, "project.json"))) {
     operations.push({
       kind: "remove-json-keys",
       path: "project.json",
       keys: names.map((name) => ["targets", name])
     });
   }
-  operations.push({
-    kind: "merge-json",
-    path: "package.json",
-    value: { nx: { targets } }
-  });
+  operations.push(...nxTargetMetadataOperations(options));
   return operations;
 }
 
@@ -378,108 +648,6 @@ function keepsOtherCommands(script, sentinelCommand) {
   return script.split(SEGMENT_SEPARATOR).filter((_, index) => !isSeparatorAt(index)).some((segment) => segment.trim() !== "" && segment.trim() !== sentinelCommand);
 }
 
-// src/roles/build/presets/requirements.json
-var requirements_default = {
-  svelte: {
-    why: "sentinel ships Vite 8, and @sveltejs/vite-plugin-svelte caps at Vite 6 until its major 7",
-    requires: {
-      "@sveltejs/vite-plugin-svelte": "7.0.0",
-      svelte: "5.46.4"
-    }
-  }
-};
-
-// src/roles/build/presets/toolchain.json
-var toolchain_default = {
-  $comment: "The build toolchain sentinel owns. One table, because three places used to hold parts of it: the list to remove from a module's package.json, the list of import specifiers to rewrite, and the map from a default import to the name sentinel re-exports it under. A package added to one and not the others gives a removal with no rewrite, or an import pointing at a package the module no longer declares.",
-  owned: [
-    {
-      package: "vite",
-      specifier: "vite",
-      named: ["defineConfig", "loadEnv", "mergeConfig"],
-      types: [
-        "Plugin",
-        "PluginOption",
-        "SassPreprocessorOptions",
-        "UserConfig",
-        "UserConfigExport"
-      ],
-      why: "the bundler itself. `defineConfig`, `loadEnv` and `mergeConfig` are what every config in this repo imports from it, and the types travel with them: a config importing PluginOption from a package it no longer declares builds but does not typecheck."
-    },
-    {
-      package: "@vitejs/plugin-react",
-      specifier: "@vitejs/plugin-react",
-      default: "react",
-      why: "the React transform. Bound to the Vite that runs it, so it has to come from the same install."
-    },
-    {
-      package: "@tailwindcss/vite",
-      specifier: "@tailwindcss/vite",
-      default: "tailwindcss",
-      why: "the Tailwind pipeline, identical in all three front apps."
-    },
-    {
-      package: "vite-plugin-svgr",
-      specifier: "vite-plugin-svgr",
-      default: "svgr",
-      why: "SVG as components, identical in all three front apps."
-    },
-    {
-      package: "nitro",
-      specifier: "nitro/vite",
-      named: ["nitro"],
-      why: "the SSR server. Note the package and the import specifier differ, which is exactly the kind of split that made three separate lists disagree."
-    }
-  ],
-  add: [
-    {
-      package: "@hublo/sentinel",
-      why: "the module now gets its toolchain from here, so it declares it. Pinned by the installer rather than by us: `--init` writes the dependency, `pnpm install` resolves it."
-    }
-  ],
-  $notOwned: {
-    "@rolldown/plugin-babel": "declared by career and host-admin themselves, not at the root. It supports LocatorJS, a development convenience gated on LOCATORJS=true, not shared build infrastructure. Removing it would remove a feature from two teams, which is their call and must not ride along inside an adoption.",
-    "@locator/babel-jsx": "same, and same owners.",
-    "@tanstack/react-start": "a framework the apps code against: 48 source files import it directly.",
-    "@tanstack/router-plugin": "generates the app's own route tree.",
-    "vite-bundle-analyzer": "at the root at 1.3.7 and imported nowhere, the only mention being a commented-out line in host-admin. Not a candidate to re-export, a candidate to delete from the root."
-  }
-};
-
-// src/roles/build/preset-data.ts
-var REQUIREMENTS = requirements_default;
-var OWNED_PACKAGES = toolchain_default.owned;
-
-// src/roles/build/config-policy.ts
-var COMPANION_CONFIG_FILES = [
-  "vitest.config.ts",
-  "vitest.config.mts",
-  "vitest.config.js",
-  "vitest.config.mjs"
-];
-var BUILD_CONFIG_FILES = [
-  "vite.config.ts",
-  "vite.config.mts",
-  "vite.config.js",
-  "vite.config.mjs"
-];
-var BUILD_PRESET_SPECIFIER = "@hublo/sentinel/build/react";
-var BUILD_SCRIPT_NAME = "build";
-var SENTINEL_BUILD_COMMAND = "sentinel --run --build";
-var DEV_SCRIPT_NAME = "serve";
-var SENTINEL_DEV_COMMAND = "sentinel --run --dev";
-function buildTarget() {
-  return {
-    [BUILD_SCRIPT_NAME]: {
-      cache: true,
-      inputs: ["default", "^default", ...BUILD_CONFIG_FILES.map((name) => `{projectRoot}/${name}`)]
-    }
-  };
-}
-var SENTINEL_OWNED_BUILD_PACKAGES = OWNED_PACKAGES.map(
-  (entry) => entry.package
-);
-
 // src/roles/build/dev-script.ts
 var CHAIN = " -- ";
 var VITE_TOKEN = /(^|\s|\/)vite(\s|$)/;
@@ -496,73 +664,43 @@ function composeDevScript(existing, command) {
   if (at === -1) return existing;
   const rest = (chunks[at] ?? "").replace(/^.*?(^|\s|\/)vite(\s|$)/, "");
   const options = appOptions(rest);
-  chunks[at] = options === "" ? command : `${command} -- ${options}`;
+  chunks[at] = options === "" ? `${command} --` : `${command} -- ${options}`;
   return chunks.join(CHAIN);
 }
 
-// src/roles/build/read-adoption.ts
-import { existsSync as existsSync6, readFileSync as readFileSync4 } from "fs";
-import { join as join6 } from "path";
-var NOT_ADOPTED = (configFile, unreadable = null) => ({
-  configFile,
-  preset: null,
-  adopted: false,
-  conformant: false,
-  drift: [],
-  ownDeclarations: [],
-  unreadable
-});
-function buildConfigFile(cwd) {
-  return BUILD_CONFIG_FILES.find((name) => existsSync6(join6(cwd, name)));
-}
-function importsSpecifier(source, specifier) {
-  const escaped = specifier.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  return new RegExp(`(?:from|import)\\s*\\(?\\s*['"\`]${escaped}(?:/[^'"\`]*)?['"\`]`).test(source);
-}
-function importsPreset(source) {
-  return importsSpecifier(source, BUILD_PRESET_SPECIFIER);
+// src/roles/build/nest/adopt.ts
+import { existsSync as existsSync8, readFileSync as readFileSync6 } from "fs";
+import { join as join8 } from "path";
+var NEST_CONFIG_FILE = "vite.config.mts";
+function nestConfigSource(cwd, target) {
+  const hops = workspaceRootHops(cwd, target);
+  const up = Array.from({ length: hops }, () => "..").join("/");
+  const carried = (name, value) => value === void 0 || value.length === 0 ? "" : `  ${name}: ${JSON.stringify(value)},
+`;
+  return `import path from 'node:path'
+
+import { nestService } from '${BUILD_PRESET_SPECIFIERS.nest}'
+
+export default nestService({
+  project: '${target.project}',
+  root: __dirname,
+  workspaceRoot: path.resolve(__dirname, '${up}'),
+  outDir: '${target.outputPath}',
+${carried("transformers", target.transformers)}${carried("assets", target.assets)}})
+`;
 }
-var REACT_PLUGIN_SPECIFIERS = ["@vitejs/plugin-react", "@tanstack/react-start"];
-function declaredBuildPreset(cwd) {
-  const source = readBuildConfigSource(cwd);
-  if (source === void 0) return void 0;
-  return REACT_PLUGIN_SPECIFIERS.some((specifier) => importsSpecifier(source, specifier)) ? "react" : void 0;
+function nestBuildOutputs(target) {
+  return [`{workspaceRoot}/${target.outputPath}`];
 }
-function readBuildConfigSource(cwd) {
-  const configFile = buildConfigFile(cwd);
-  if (!configFile) return void 0;
-  try {
-    return readFileSync4(join6(cwd, configFile), "utf8");
-  } catch {
-    return void 0;
-  }
+var OUT_DIR_IN_CONFIG = /^\s*outDir:\s*'([^']+)'/m;
+function nestOutputsFromConfig(cwd) {
+  const configPath = join8(cwd, NEST_CONFIG_FILE);
+  if (!existsSync8(configPath)) return void 0;
+  const outDir = OUT_DIR_IN_CONFIG.exec(readFileSync6(configPath, "utf8"))?.[1];
+  return outDir === void 0 ? void 0 : [`{workspaceRoot}/${outDir}`];
 }
-function readBuildAdoption(cwd) {
-  const configFile = buildConfigFile(cwd);
-  if (!configFile) return NOT_ADOPTED(null);
-  let source;
-  try {
-    source = readFileSync4(join6(cwd, configFile), "utf8");
-  } catch (error) {
-    return NOT_ADOPTED(configFile, error instanceof Error ? error.message : String(error));
-  }
-  if (!importsPreset(source)) return NOT_ADOPTED(configFile);
-  const manifest = readProjectPackageJson(cwd);
-  const declared = { ...manifest.dependencies, ...manifest.devDependencies };
-  const ownDeclarations = SENTINEL_OWNED_BUILD_PACKAGES.filter((name) => name in declared).map(
-    (name) => ({ name, version: declared[name] })
-  );
-  return {
-    configFile,
-    preset: "react",
-    adopted: true,
-    conformant: ownDeclarations.length === 0,
-    drift: ownDeclarations.map(
-      ({ name, version }) => `declares ${name}@${version} of its own; sentinel owns it, and two copies in one build give the plugins a different Vite than the one running them`
-    ),
-    ownDeclarations,
-    unreadable: null
-  };
+function nestAdoptionOperations(cwd, target) {
+  return [{ kind: "write", path: NEST_CONFIG_FILE, contents: nestConfigSource(cwd, target) }];
 }
 
 // src/roles/build/requirements.ts
@@ -593,32 +731,31 @@ function describeUnmet(preset, unmet) {
   return `the build role does not apply to this module yet: ${list}. ${entry?.why ?? ""}. Nothing was written. Raise those versions, check the module still builds and its tests still pass, then re-run \`sentinel --init --build\`.`;
 }
 
-// src/roles/build/rewrite-imports.ts
+// src/core/config/rewrite-imports.ts
 import { parseSync } from "oxc-parser";
-var MOVED_SPECIFIERS = new Set(OWNED_PACKAGES.map((entry) => entry.specifier));
+var movedSpecifiers = (toolchain) => new Set(toolchain.owned.map((entry) => entry.specifier));
 function esmBlocker(fileName, packageType) {
   if (/\.(mts|mjs)$/.test(fileName)) return void 0;
   if (packageType === "module") return void 0;
   return `sentinel is ESM only, and this module does not declare \`"type": "module"\`, so Vite would load ${fileName} as CommonJS and fail to require it. Add \`"type": "module"\` to this module's package.json, or rename the config to \`${fileName.replace(/\.(ts|js)$/, ".m$1")}\`, then run this again.`;
 }
-var DEFAULT_EXPORT_NAMES = Object.fromEntries(
-  OWNED_PACKAGES.filter((entry) => entry.default !== void 0).map((entry) => [
-    entry.specifier,
-    entry.default
-  ])
+var defaultExportNames = (toolchain) => Object.fromEntries(
+  toolchain.owned.filter((entry) => entry.default !== void 0).map((entry) => [entry.specifier, entry.default])
 );
-function renderImport(bindings) {
+function renderImport(bindings, presetSpecifier) {
   const render = (list) => list.map((b) => b.exported === b.local ? b.exported : `${b.exported} as ${b.local}`).sort((left, right) => left.localeCompare(right)).join(", ");
   const values = bindings.filter((b) => !b.typeOnly);
   const types = bindings.filter((b) => b.typeOnly);
   const lines = [];
-  if (values.length > 0) lines.push(`import { ${render(values)} } from '${BUILD_PRESET_SPECIFIER}'`);
+  if (values.length > 0) lines.push(`import { ${render(values)} } from '${presetSpecifier}'`);
   if (types.length > 0) {
-    lines.push(`import type { ${render(types)} } from '${BUILD_PRESET_SPECIFIER}'`);
+    lines.push(`import type { ${render(types)} } from '${presetSpecifier}'`);
   }
   return lines.join("\n");
 }
-function rewriteBuildImports(source, fileName = "vite.config.ts") {
+function rewriteToolchainImports(toolchain, source, fileName) {
+  const moved = movedSpecifiers(toolchain);
+  const defaults = defaultExportNames(toolchain);
   const { program, errors } = parseSync(fileName, source, { sourceType: "module" });
   if (errors.length > 0) {
     return {
@@ -629,10 +766,10 @@ function rewriteBuildImports(source, fileName = "vite.config.ts") {
   const imports = program.body.filter(
     (node) => node.type === "ImportDeclaration"
   );
-  if (imports.some((node) => node.source.value === BUILD_PRESET_SPECIFIER)) {
+  if (imports.some((node) => node.source.value === toolchain.presetSpecifier)) {
     return { kind: "unchanged", why: "this config already imports its toolchain from sentinel" };
   }
-  const moving = imports.filter((node) => MOVED_SPECIFIERS.has(node.source.value));
+  const moving = imports.filter((node) => moved.has(node.source.value));
   if (moving.length === 0) {
     return {
       kind: "unchanged",
@@ -649,7 +786,7 @@ function rewriteBuildImports(source, fileName = "vite.config.ts") {
     for (const spec of specifiers) {
       const typeOnly = node.importKind === "type" || spec.importKind === "type";
       if (spec.type === "ImportDefaultSpecifier") {
-        const exported = DEFAULT_EXPORT_NAMES[from];
+        const exported = defaults[from];
         if (!exported) {
           return {
             kind: "blocked",
@@ -681,7 +818,7 @@ function rewriteBuildImports(source, fileName = "vite.config.ts") {
     const after = out.slice(span.end).match(/^\r?\n/)?.[0].length ?? 0;
     out = out.slice(0, span.start) + out.slice(span.end + after);
   }
-  out = out.slice(0, first.start) + renderImport(bindings) + out.slice(first.end);
+  out = out.slice(0, first.start) + renderImport(bindings, toolchain.presetSpecifier) + out.slice(first.end);
   return {
     kind: "rewritten",
     source: out,
@@ -689,7 +826,19 @@ function rewriteBuildImports(source, fileName = "vite.config.ts") {
   };
 }
 
+// src/roles/build/rewrite-imports.ts
+var BUILD_TOOLCHAIN = {
+  presetSpecifier: BUILD_PRESET_SPECIFIER,
+  owned: OWNED_PACKAGES
+};
+function rewriteBuildImports(source, fileName = "vite.config.ts") {
+  return rewriteToolchainImports(BUILD_TOOLCHAIN, source, fileName);
+}
+
 // src/roles/build/plan.ts
+function candidateOutputs() {
+  return BUILD_OUTPUT_CANDIDATES.map((name) => `{projectRoot}/${name}`);
+}
 function ownedBuildDependencies(cwd) {
   const manifest = readProjectPackageJson(cwd);
   const keys = [];
@@ -718,9 +867,11 @@ function buildScripts(cwd) {
   };
   const existingDev = existingCommand(cwd, DEV_SCRIPT_NAME);
   if (existingDev !== void 0) {
-    const own2 = basename2(cwd);
+    const own2 = moduleName(cwd);
     scripts[DEV_SCRIPT_NAME] = composeDevScript(
       existingDev,
+      // No trailing `--` here: `composeDevScript` owns the separator, and adding one on both
+      // sides produced `-- --`, handing Vite an argument nobody wrote.
       `${selfCommand(cwd, "--run --dev") ?? SENTINEL_DEV_COMMAND} --module ${own2}`
     );
   }
@@ -735,54 +886,69 @@ function plan(context) {
   if (unmet.length > 0) {
     return { operations: [], skipped: describeUnmet(context.preset, unmet) };
   }
-  if (declaredBuildPreset(context.cwd) === void 0 && buildConfigFile(context.cwd) !== void 0) {
+  const declaredPreset2 = declaredBuildPreset(context.cwd);
+  const configFile = buildConfigFile(context.cwd);
+  if (declaredPreset2 === void 0 && configFile !== void 0) {
+    return {
+      operations: [],
+      skipped: `this module has a Vite config, but it builds neither a React app (no @vitejs/plugin-react or @tanstack/react-start) nor a Nest service (no ${BUILD_PRESET_SPECIFIERS.nest}). Those are the two families this role serves.`
+    };
+  }
+  const webpackTarget = webpackBuildTarget(context.cwd);
+  if (declaredBuildPreset(context.cwd) === "nest" || webpackTarget !== void 0) {
+    return planNestService(context, webpackTarget);
+  }
+  if (configFile === void 0) {
     return {
       operations: [],
-      skipped: `this module has a Vite config, but it does not build a React app (no @vitejs/plugin-react or @tanstack/react-start in it). The build role ships a React preset only.`
+      skipped: `no Vite config in this module, so there is nothing to point at sentinel. This role moves an existing config's imports; it does not introduce a bundler. If this module builds another way (38 services here build through \`@nx/webpack\`), the build role does not apply to it.`
     };
   }
+  return planReactApp(context, configFile);
+}
+function planReactApp(context, configFile) {
   const notes = [];
   const operations = [];
-  const configFile = buildConfigFile(context.cwd);
-  if (configFile === void 0) {
+  const notEsm = esmBlocker(configFile, readProjectPackageJson(context.cwd).type);
+  if (notEsm !== void 0) return { operations: [], skipped: notEsm };
+  const rewrite = rewriteBuildImports(readConfigSource(context.cwd, configFile), configFile);
+  if (rewrite.kind === "blocked") {
     return {
       operations: [],
-      skipped: `no Vite config in this module, so there is nothing to point at sentinel. This role moves an existing config's imports; it does not introduce a bundler. If this module builds another way (38 projects here build through \`@nx/webpack\`), the build role does not apply to it.`
+      skipped: `${configFile} could not be pointed at sentinel, so nothing was written: ${rewrite.why}. Nothing here is broken; this needs a look before the role applies.`
     };
-  } else {
-    const notEsm = esmBlocker(configFile, readProjectPackageJson(context.cwd).type);
-    if (notEsm !== void 0) return { operations: [], skipped: notEsm };
-    const rewrite = rewriteBuildImports(readConfigSource(context.cwd, configFile), configFile);
-    if (rewrite.kind === "blocked") {
-      return {
-        operations: [],
-        skipped: `${configFile} could not be pointed at sentinel, so nothing was written: ${rewrite.why}. Nothing here is broken; this needs a look before the role applies.`
-      };
-    }
-    if (rewrite.kind === "rewritten") {
-      operations.push({ kind: "write", path: configFile, contents: rewrite.source });
-    }
-    for (const name of COMPANION_CONFIG_FILES) {
-      const source = readConfigSource(context.cwd, name);
-      if (source === "") continue;
-      const companion = rewriteBuildImports(source, name);
-      if (companion.kind === "rewritten") {
-        operations.push({ kind: "write", path: name, contents: companion.source });
-        notes.push(`${name} now imports ${companion.moved.join(", ")} from sentinel too.`);
-      } else if (companion.kind === "blocked") {
-        notes.push(
-          `${name} imports the toolchain and could NOT be pointed at sentinel: ${companion.why}. It will stop resolving when the workspace root drops these packages, and it will fail your TESTS rather than your build.`
-        );
-      }
-    }
-    if (rewrite.kind === "rewritten") {
+  }
+  if (rewrite.kind === "rewritten") {
+    operations.push({ kind: "write", path: configFile, contents: rewrite.source });
+  }
+  for (const name of COMPANION_CONFIG_FILES) {
+    const source = readConfigSource(context.cwd, name);
+    if (source === "") continue;
+    const companion = rewriteBuildImports(source, name);
+    if (companion.kind === "rewritten") {
+      operations.push({ kind: "write", path: name, contents: companion.source });
+      notes.push(`${name} now imports ${companion.moved.join(", ")} from sentinel too.`);
+    } else if (companion.kind === "blocked") {
       notes.push(
-        `${configFile} now imports ${rewrite.moved.join(", ")} from \`${BUILD_PRESET_SPECIFIER}\`. Only the import lines changed: every attribute, alias and path is untouched, so this build produces what it produced before.`
+        `${name} imports the toolchain and could NOT be pointed at sentinel: ${companion.why}. It will stop resolving when the workspace root drops these packages, and it will fail your TESTS rather than your build.`
       );
     }
   }
+  if (rewrite.kind === "rewritten") {
+    notes.push(
+      `${configFile} now imports ${rewrite.moved.join(", ")} from \`${BUILD_PRESET_SPECIFIER}\`. Only the import lines changed: every attribute, alias and path is untouched, so this build produces what it produced before.`
+    );
+  }
   operations.push(manifestOperation(context.cwd, buildScripts(context.cwd)));
-  operations.push(...nxTargetOperations({ cwd: context.cwd, targets: buildTarget() }));
+  operations.push(
+    ...nxTargetOperations({
+      cwd: context.cwd,
+      targets: buildTarget({
+        moduleName: adoptedPackageName(context.cwd),
+        outputs: candidateOutputs()
+      })
+    })
+  );
   const owned = ownedBuildDependencies(context.cwd);
   if (owned.length > 0) {
     operations.push({ kind: "remove-json-keys", path: "package.json", keys: owned });
@@ -792,10 +958,44 @@ function plan(context) {
   }
   return { operations, notes };
 }
+function planNestService(context, webpackTarget) {
+  const outputs = webpackTarget === void 0 ? nestOutputsFromConfig(context.cwd) : nestBuildOutputs(webpackTarget);
+  if (outputs === void 0) {
+    return {
+      operations: [],
+      blocked: `${NEST_CONFIG_FILE} does not declare an \`outDir\`, so sentinel cannot say where this service's build lands. Declaring an nx target without it would cache the build and restore nothing from that cache. Nothing was written.`
+    };
+  }
+  const metadata = [
+    ...nxTargetOperations({
+      cwd: context.cwd,
+      targets: buildTarget({
+        moduleName: adoptedPackageName(context.cwd),
+        configFiles: [NEST_CONFIG_FILE],
+        outputs
+      })
+    }),
+    manifestOperation(context.cwd, { [BUILD_SCRIPT_NAME]: SENTINEL_BUILD_COMMAND })
+  ];
+  if (webpackTarget === void 0) return { operations: metadata };
+  const refusal = refusalFor(context.cwd, webpackTarget);
+  if (refusal !== void 0) return { operations: [], blocked: refusal };
+  const dropped = Object.keys(webpackTarget.configurations ?? {});
+  return {
+    operations: [...nestAdoptionOperations(context.cwd, webpackTarget), ...metadata],
+    notes: [
+      `wrote ${NEST_CONFIG_FILE} and pointed the nx build target at sentinel. The target stays \`nx:run-commands\` with \`forwardAllArgs: false\`, so the image's \`--generatePackageJson\` still works and the Dockerfile needs no change.`,
+      ...dropped.length > 0 ? [
+        `dropped the \`${dropped.join("`, `")}\` configuration${dropped.length > 1 ? "s" : ""} from the build target: its fileReplacements point at files that do not exist, so it replaced nothing. A live one would have blocked this instead.`
+      ] : [],
+      `verify with \`nx run ${webpackTarget.project}:generate-swagger-file\` and \`git diff --exit-code\`: it runs the built bundle, so it proves the service boots AND that its published contract did not move.`
+    ]
+  };
+}
 function readConfigSource(cwd, configFile) {
-  if (!existsSync7(join7(cwd, configFile))) return "";
+  if (!existsSync9(join9(cwd, configFile))) return "";
   try {
-    return readFileSync5(join7(cwd, configFile), "utf8");
+    return readFileSync7(join9(cwd, configFile), "utf8");
   } catch {
     return "";
   }
@@ -835,11 +1035,17 @@ var ViteRoleAdapter = class extends BaseAdapter {
    * resolution let it run at all — filtering here would give "no adapter for preset svelte",
    * which tells nobody what to do about it.
    *
-   * Nest, node and tools are genuinely declined: there is nothing to bundle, and no version
-   * would change that.
+   * Nest it now serves too, through `@hublo/sentinel/build/nest`. It used to be declined on the
+   * grounds that "there is nothing to bundle", which was never true: those 38 services bundle
+   * with webpack. What changed is that Nx v24 removes the `@nx/webpack:webpack` executor and
+   * the `composePlugins` / `withNx` helpers their shared config is built on, and nx's own
+   * migration generator refuses every one of them because they use `@nx/js:node`
+   * (nrwl/nx#36389). So the way out runs through here.
+   *
+   * `node` and `tools` remain genuinely declined: nothing under them bundles at all.
    */
   appliesTo(preset) {
-    return preset === "react" || preset === "svelte";
+    return preset === "react" || preset === "svelte" || preset === "nest";
   }
   /**
    * `react`, read from the module's Vite config rather than from its dependencies.
@@ -892,60 +1098,279 @@ var ViteRoleAdapter = class extends BaseAdapter {
         `using the MODULE's vite, not sentinel's. An adopted config gets its plugins from sentinel, and two copies of Vite fail in ways that never mention a version. Remove vite from this module's package.json.`
       );
     }
-    return { kind: "ready", vite: bin };
+    return { kind: "ready", vite: bin };
+  }
+  /**
+   * Run Vite with the caller's own arguments after `--`, and report what happened.
+   *
+   * `whenSignalled` is the only difference between the two targets here, and it is a real one:
+   * a build killed by a signal did not produce a bundle, while a dev server killed by Ctrl-C
+   * did exactly what the developer asked.
+   */
+  spawnVite(ctx, vite, argv, whenSignalled) {
+    const { options, paths } = splitToolArgs(ctx.cwd, ctx.toolArgs, {
+      valueFlags: VITE_VALUE_FLAGS
+    });
+    const result = spawnSync(vite, [...argv, ...options, ...paths], {
+      cwd: ctx.cwd,
+      stdio: "inherit"
+    });
+    if (result.error) {
+      this.say(`could not run vite (${result.error.message})`);
+      return { ok: false, code: 1 };
+    }
+    const code = result.status ?? whenSignalled;
+    return { ok: code === 0, code };
+  }
+  /** One prefix for every message this role emits, so they cannot drift apart. */
+  say(message) {
+    process.stderr.write(`sentinel ${this.label}(vite): ${message}
+`);
+  }
+};
+
+// src/roles/build/adapters/vite/vite-dev.adapter.ts
+var ViteDevAdapter = class extends ViteRoleAdapter {
+  target = "dev";
+  get label() {
+    return "dev";
+  }
+  /**
+   * `--init --dev` does the same thing as `--init --build`, and now says so.
+   *
+   * The shared plan is deliberate (see `ViteRoleAdapter.plan`): one plan writes both scripts,
+   * because adopting one without the other leaves the module half-migrated. What was missing
+   * was only the telling: the run printed a message about the build and nothing about `serve`,
+   * so a developer could believe the dev server had been adopted on its own. Refusing was the
+   * wrong correction, it added friction to a command that already produced the right result.
+   */
+  plan(context) {
+    if (declaredBuildPreset(context.cwd) === "nest" || webpackBuildTarget(context.cwd)) {
+      return {
+        operations: [],
+        skipped: `a Nest service has no dev server, so --dev has nothing to adopt here. Its build is \`sentinel --init --build\`, and it runs as a Node process afterwards.`
+      };
+    }
+    const planned = super.plan(context);
+    if (planned.operations.length === 0) return planned;
+    return {
+      ...planned,
+      notes: [
+        ...planned.notes ?? [],
+        "--init --dev adopts the build too: one plan writes both `build` and `serve`."
+      ]
+    };
+  }
+  /**
+   * Start the dev server. It does not return until stopped, so there is no verdict to report
+   * beyond the exit code the developer's own Ctrl-C produces.
+   *
+   * No `prebuild` here, unlike `--run --build`: the artefact this repo generates before a build
+   * is produced by the watcher that WRAPS this command (`run-with-runtime-artifact-watch`), and
+   * running it again would race the watcher that is about to own the file.
+   *
+   * No subcommand either. `vite`, `vite dev` and `vite serve` all start the server, and the
+   * bare form is the one every version accepts.
+   */
+  async run(ctx) {
+    const ready = this.prepare(ctx);
+    if (ready.kind === "stop") return ready.result;
+    return this.spawnVite(ctx, ready.vite, [], 0);
+  }
+};
+
+// src/roles/build/declared-outputs.ts
+import { existsSync as existsSync11, statSync } from "fs";
+import { join as join11 } from "path";
+
+// src/core/workspace-prep.ts
+import { existsSync as existsSync10, readFileSync as readFileSync8, writeFileSync } from "fs";
+import { dirname as dirname3, join as join10, relative as relative2 } from "path";
+
+// src/core/settings.ts
+var WORKSPACE_ROOT_MARKER = "nx.json";
+var DEFAULT_MAX_DIAGNOSTICS = 100;
+
+// src/core/workspace-prep.ts
+var OVERRIDE_KEY = "i18next>typescript";
+var NATIVE_TS_ALIAS = "@typescript/native";
+var WORKSPACE_YAML = "pnpm-workspace.yaml";
+var RELEASE_AGE_KEY = "minimumReleaseAgeExclude";
+var LIST_ITEM = /^(\s*)-\s+(.*?)\s*$/;
+function findWorkspaceRoot(startDir) {
+  let dir = startDir;
+  for (; ; ) {
+    if (existsSync10(join10(dir, WORKSPACE_ROOT_MARKER))) return dir;
+    const parent = dirname3(dir);
+    if (parent === dir) return void 0;
+    dir = parent;
+  }
+}
+function declaredNativeTs(pkg) {
+  const spec = pkg.dependencies?.[NATIVE_TS_ALIAS] ?? pkg.devDependencies?.[NATIVE_TS_ALIAS];
+  if (!spec) return void 0;
+  const version = spec.slice(spec.lastIndexOf("@") + 1).replace(/^[\^~>=<\s]+/, "");
+  return version || void 0;
+}
+function ensureI18nextSingleton(root, dryRun) {
+  const pkgPath = join10(root, "package.json");
+  if (!existsSync10(pkgPath)) return void 0;
+  const pkg = JSON.parse(readFileSync8(pkgPath, "utf8"));
+  const want = declaredNativeTs(pkg);
+  if (!want) return void 0;
+  const have = pkg.pnpm?.overrides?.[OVERRIDE_KEY];
+  if (have === want) return void 0;
+  if (dryRun) return `would pin ${OVERRIDE_KEY} to ${want} (i18next singleton)`;
+  pkg.pnpm ??= {};
+  pkg.pnpm.overrides ??= {};
+  pkg.pnpm.overrides[OVERRIDE_KEY] = want;
+  writeFileSync(pkgPath, JSON.stringify(pkg, null, 2) + "\n");
+  return `pinned ${OVERRIDE_KEY} to ${want} in package.json (i18next singleton)`;
+}
+function ensureReleaseAgeAllowList(root, dryRun) {
+  const yamlPath = join10(root, WORKSPACE_YAML);
+  if (!existsSync10(yamlPath)) return void 0;
+  const own = readOwnPackage().name;
+  const lines = readFileSync8(yamlPath, "utf8").split("\n");
+  const keyIdx = lines.findIndex((line) => line.replace(/\s+$/, "") === `${RELEASE_AGE_KEY}:`);
+  if (keyIdx === -1) return void 0;
+  let lastItemIdx = keyIdx;
+  let indent = "  ";
+  for (let i = keyIdx + 1; i < lines.length; i++) {
+    const match = lines[i]?.match(LIST_ITEM);
+    if (!match) break;
+    indent = match[1] ?? indent;
+    lastItemIdx = i;
+    if ((match[2] ?? "").replace(/^['"]|['"]$/g, "") === own) return void 0;
+  }
+  if (dryRun) return `would allow-list ${own} under ${RELEASE_AGE_KEY}`;
+  lines.splice(lastItemIdx + 1, 0, `${indent}- '${own}'`);
+  writeFileSync(yamlPath, lines.join("\n"));
+  return `allow-listed ${own} under ${RELEASE_AGE_KEY} in ${WORKSPACE_YAML}`;
+}
+var PRETTIER_IGNORE = ".prettierignore";
+var EXCLUSION_HEADER = "# @hublo/sentinel: modules formatted by oxfmt, not by the root Prettier";
+var ROOT_PRETTIER_CONFIGS = [
+  ".prettierrc",
+  ".prettierrc.json",
+  ".prettierrc.json5",
+  ".prettierrc.yml",
+  ".prettierrc.yaml",
+  ".prettierrc.js",
+  ".prettierrc.cjs",
+  ".prettierrc.mjs",
+  "prettier.config.js",
+  "prettier.config.cjs",
+  "prettier.config.mjs"
+];
+function ensureFormatterExclusion(root, moduleDir, dryRun) {
+  const rel = relative2(root, moduleDir).replaceAll("\\", "/");
+  if (rel === "" || rel.startsWith("..")) return void 0;
+  const ignorePath = join10(root, PRETTIER_IGNORE);
+  const hasPrettier = existsSync10(ignorePath) || ROOT_PRETTIER_CONFIGS.some((name) => existsSync10(join10(root, name)));
+  if (!hasPrettier) return void 0;
+  const pattern = `/${rel}/`;
+  const existing = existsSync10(ignorePath) ? readFileSync8(ignorePath, "utf8") : "";
+  const lines = existing.split("\n");
+  if (lines.some((line) => line.trim().replace(/\/$/, "") === pattern.replace(/\/$/, ""))) {
+    return void 0;
+  }
+  if (dryRun) return `would exclude ${rel} from the root Prettier (${PRETTIER_IGNORE})`;
+  const headerIdx = lines.findIndex((line) => line.trim() === EXCLUSION_HEADER);
+  if (headerIdx === -1) {
+    const prefix = existing.trim() === "" ? "" : `${existing.replace(/\n*$/, "")}
+
+`;
+    writeFileSync(ignorePath, `${prefix}${EXCLUSION_HEADER}
+${pattern}
+`);
+  } else {
+    let end = headerIdx + 1;
+    while (end < lines.length && lines[end]?.trim().startsWith("/")) end += 1;
+    const managed = [...lines.slice(headerIdx + 1, end), pattern].sort();
+    writeFileSync(
+      ignorePath,
+      [...lines.slice(0, headerIdx + 1), ...managed, ...lines.slice(end)].join("\n")
+    );
+  }
+  return `excluded ${rel} from the root Prettier (${PRETTIER_IGNORE}): it formats itself now`;
+}
+function ensureWorkspacePrep(opts) {
+  const dryRun = Boolean(opts.dryRun);
+  return [
+    ensureI18nextSingleton(opts.root, dryRun),
+    ensureReleaseAgeAllowList(opts.root, dryRun),
+    opts.formattedModule === void 0 ? void 0 : ensureFormatterExclusion(opts.root, opts.formattedModule, dryRun)
+  ].filter((message) => message !== void 0);
+}
+function inspectWorkspacePrep(root) {
+  const entries = [];
+  let pkg = {};
+  const pkgPath = join10(root, "package.json");
+  if (existsSync10(pkgPath)) {
+    try {
+      pkg = JSON.parse(readFileSync8(pkgPath, "utf8"));
+    } catch {
+      pkg = {};
+    }
   }
-  /**
-   * Run Vite with the caller's own arguments after `--`, and report what happened.
-   *
-   * `whenSignalled` is the only difference between the two targets here, and it is a real one:
-   * a build killed by a signal did not produce a bundle, while a dev server killed by Ctrl-C
-   * did exactly what the developer asked.
-   */
-  spawnVite(ctx, vite, argv, whenSignalled) {
-    const { options, paths } = splitToolArgs(ctx.cwd, ctx.toolArgs, {
-      valueFlags: VITE_VALUE_FLAGS
-    });
-    const result = spawnSync(vite, [...argv, ...options, ...paths], {
-      cwd: ctx.cwd,
-      stdio: "inherit"
+  const pinned = pkg.pnpm?.overrides?.[OVERRIDE_KEY];
+  if (pinned !== void 0) {
+    const stillForks = declaredNativeTs(pkg);
+    entries.push({
+      rule: `package.json \u2192 pnpm.overrides.${OVERRIDE_KEY}`,
+      reason: stillForks === void 0 ? `pinned to ${pinned}, but the root no longer declares ${NATIVE_TS_ALIAS}, so nothing forks any more. This override is now dead config and can be removed.` : `pinned to ${pinned}, matching the second TypeScript the root declares (${NATIVE_TS_ALIAS}). It re-resolves i18next for EVERY module that depends on it, not only adopted ones. It retires with the second TypeScript.`
     });
-    if (result.error) {
-      this.say(`could not run vite (${result.error.message})`);
-      return { ok: false, code: 1 };
-    }
-    const code = result.status ?? whenSignalled;
-    return { ok: code === 0, code };
   }
-  /** One prefix for every message this role emits, so they cannot drift apart. */
-  say(message) {
-    process.stderr.write(`sentinel ${this.label}(vite): ${message}
-`);
+  const own = readOwnPackage().name;
+  const yamlPath = join10(root, WORKSPACE_YAML);
+  if (existsSync10(yamlPath)) {
+    const yaml = readFileSync8(yamlPath, "utf8");
+    const listed = new RegExp(`^\\s*-\\s*['"]?${own.replace("/", "\\/")}['"]?\\s*$`, "m").test(yaml);
+    if (listed) {
+      const gated = new RegExp(`^\\s*minimumReleaseAge\\s*:`, "m").test(yaml);
+      entries.push({
+        rule: `${WORKSPACE_YAML} \u2192 ${RELEASE_AGE_KEY}: ${own}`,
+        reason: gated ? `${own} is exempt from this workspace's release-age gate, so a freshly published version installs instead of being held. That is a standing exemption from a supply-chain control: the exposure is one bump wide, since the version is pinned and the lockfile carries its integrity, so a re-publish of the same version does not pass. Retire it once a bump can simply wait out the window.` : `${own} is allow-listed, but this workspace no longer sets minimumReleaseAge, so there is no gate to be exempt from. This entry is now dead config and can be removed.`
+      });
+    }
   }
-};
+  return entries;
+}
 
-// src/roles/build/adapters/vite/vite-dev.adapter.ts
-var ViteDevAdapter = class extends ViteRoleAdapter {
-  target = "dev";
-  get label() {
-    return "dev";
+// src/roles/build/declared-outputs.ts
+function declaredBuildTarget(cwd) {
+  return readProjectPackageJson(cwd).nx?.targets?.[BUILD_SCRIPT_NAME];
+}
+function resolveOutputToken(token, cwd) {
+  if (token.startsWith("{projectRoot}/")) return join11(cwd, token.slice("{projectRoot}/".length));
+  if (token.startsWith("{workspaceRoot}/")) {
+    const root = findWorkspaceRoot(cwd);
+    return root === void 0 ? void 0 : join11(root, token.slice("{workspaceRoot}/".length));
   }
-  /**
-   * Start the dev server. It does not return until stopped, so there is no verdict to report
-   * beyond the exit code the developer's own Ctrl-C produces.
-   *
-   * No `prebuild` here, unlike `--run --build`: the artefact this repo generates before a build
-   * is produced by the watcher that WRAPS this command (`run-with-runtime-artifact-watch`), and
-   * running it again would race the watcher that is about to own the file.
-   *
-   * No subcommand either. `vite`, `vite dev` and `vite serve` all start the server, and the
-   * bare form is the one every version accepts.
-   */
-  async run(ctx) {
-    const ready = this.prepare(ctx);
-    if (ready.kind === "stop") return ready.result;
-    return this.spawnVite(ctx, ready.vite, [], 0);
+  return join11(cwd, token);
+}
+function writtenSince(path, startedAt) {
+  if (!existsSync11(path)) return false;
+  try {
+    return statSync(path).mtimeMs >= startedAt;
+  } catch {
+    return true;
   }
-};
+}
+function outputsProblem(cwd, startedAt) {
+  const target = declaredBuildTarget(cwd);
+  if (target === void 0) return void 0;
+  const declared = target.outputs ?? [];
+  if (declared.length === 0) {
+    if (target.cache !== true) return void 0;
+    return `this module's nx build target sets \`cache: true\` and declares no \`outputs\`, so nx will cache this build and restore nothing from it: the next cache hit reports success and leaves no build on disk. Add the directory this build writes to under \`nx.targets.${BUILD_SCRIPT_NAME}.outputs\` in package.json, or re-run \`sentinel --init --build\`, which declares it.`;
+  }
+  const resolved = declared.map((token) => ({ token, path: resolveOutputToken(token, cwd) })).filter((entry) => entry.path !== void 0);
+  if (resolved.length === 0) return void 0;
+  if (resolved.some((entry) => writtenSince(entry.path, startedAt))) return void 0;
+  return `the build wrote nothing to any of the directories this module declares as its nx \`outputs\` (${declared.join(", ")}), so nx would cache this build and restore an empty result from it. Whatever directory the build DID write to belongs in \`nx.targets.${BUILD_SCRIPT_NAME}.outputs\` in package.json. The build itself succeeded; only its cache declaration is wrong.`;
+}
 
 // src/roles/build/prerequisite.ts
 import { spawnSync as spawnSync2 } from "child_process";
@@ -995,7 +1420,15 @@ var ViteAdapter = class extends ViteRoleAdapter {
       );
       return { ok: false, code: prerequisite.code };
     }
-    return this.spawnVite(ctx, ready.vite, ["build"], 1);
+    const startedAt = Date.now();
+    const result = await this.spawnVite(ctx, ready.vite, ["build"], 1);
+    if (!result.ok) return result;
+    const problem = outputsProblem(ctx.cwd, startedAt);
+    if (problem !== void 0) {
+      this.say(problem);
+      return { ok: false, code: 1 };
+    }
+    return result;
   }
   /**
    * What this module builds with, WITHOUT loading its config.
@@ -1067,12 +1500,12 @@ function registerBuild() {
 
 // src/roles/format/adapters/oxfmt/oxfmt.adapter.ts
 import { spawnSync as spawnSync3 } from "child_process";
-import { existsSync as existsSync12, readFileSync as readFileSync11 } from "fs";
-import { join as join14 } from "path";
+import { existsSync as existsSync15, readFileSync as readFileSync13 } from "fs";
+import { join as join17 } from "path";
 
 // src/core/config/has-source.ts
 import { readdirSync } from "fs";
-import { extname, join as join8, relative } from "path";
+import { extname, join as join12, relative as relative3 } from "path";
 var SKIP_DIRECTORIES = /* @__PURE__ */ new Set([
   "node_modules",
   "dist",
@@ -1123,7 +1556,7 @@ function hasSourceFiles(cwd, extensions) {
     }
     for (const entry of entries) {
       if (entry.isDirectory()) {
-        if (!SKIP_DIRECTORIES.has(entry.name)) queue.push(join8(dir, entry.name));
+        if (!SKIP_DIRECTORIES.has(entry.name)) queue.push(join12(dir, entry.name));
         continue;
       }
       if (wanted.has(extname(entry.name))) return true;
@@ -1144,12 +1577,12 @@ function listSourceFiles(cwd, extensions) {
       continue;
     }
     for (const entry of entries) {
-      const full = join8(dir, entry.name);
+      const full = join12(dir, entry.name);
       if (entry.isDirectory()) {
         if (!SKIP_DIRECTORIES.has(entry.name)) queue.push(full);
         continue;
       }
-      if (wanted.has(extname(entry.name))) found.push(relative(cwd, full));
+      if (wanted.has(extname(entry.name))) found.push(relative3(cwd, full));
     }
   }
   return found;
@@ -1157,161 +1590,9 @@ function listSourceFiles(cwd, extensions) {
 
 // src/core/named-scope.ts
 var TOLERATE_EMPTY_FLAG = "--no-error-on-unmatched-pattern";
-function scopeFlags(paths) {
-  return paths.length > 0 ? [TOLERATE_EMPTY_FLAG] : [];
-}
-
-// src/core/settings.ts
-var WORKSPACE_ROOT_MARKER = "nx.json";
-var DEFAULT_MAX_DIAGNOSTICS = 100;
-
-// src/core/workspace-prep.ts
-import { existsSync as existsSync8, readFileSync as readFileSync6, writeFileSync } from "fs";
-import { dirname as dirname3, join as join9, relative as relative2 } from "path";
-var OVERRIDE_KEY = "i18next>typescript";
-var NATIVE_TS_ALIAS = "@typescript/native";
-var WORKSPACE_YAML = "pnpm-workspace.yaml";
-var RELEASE_AGE_KEY = "minimumReleaseAgeExclude";
-var LIST_ITEM = /^(\s*)-\s+(.*?)\s*$/;
-function findWorkspaceRoot(startDir) {
-  let dir = startDir;
-  for (; ; ) {
-    if (existsSync8(join9(dir, WORKSPACE_ROOT_MARKER))) return dir;
-    const parent = dirname3(dir);
-    if (parent === dir) return void 0;
-    dir = parent;
-  }
-}
-function declaredNativeTs(pkg) {
-  const spec = pkg.dependencies?.[NATIVE_TS_ALIAS] ?? pkg.devDependencies?.[NATIVE_TS_ALIAS];
-  if (!spec) return void 0;
-  const version = spec.slice(spec.lastIndexOf("@") + 1).replace(/^[\^~>=<\s]+/, "");
-  return version || void 0;
-}
-function ensureI18nextSingleton(root, dryRun) {
-  const pkgPath = join9(root, "package.json");
-  if (!existsSync8(pkgPath)) return void 0;
-  const pkg = JSON.parse(readFileSync6(pkgPath, "utf8"));
-  const want = declaredNativeTs(pkg);
-  if (!want) return void 0;
-  const have = pkg.pnpm?.overrides?.[OVERRIDE_KEY];
-  if (have === want) return void 0;
-  if (dryRun) return `would pin ${OVERRIDE_KEY} to ${want} (i18next singleton)`;
-  pkg.pnpm ??= {};
-  pkg.pnpm.overrides ??= {};
-  pkg.pnpm.overrides[OVERRIDE_KEY] = want;
-  writeFileSync(pkgPath, JSON.stringify(pkg, null, 2) + "\n");
-  return `pinned ${OVERRIDE_KEY} to ${want} in package.json (i18next singleton)`;
-}
-function ensureReleaseAgeAllowList(root, dryRun) {
-  const yamlPath = join9(root, WORKSPACE_YAML);
-  if (!existsSync8(yamlPath)) return void 0;
-  const own = readOwnPackage().name;
-  const lines = readFileSync6(yamlPath, "utf8").split("\n");
-  const keyIdx = lines.findIndex((line) => line.replace(/\s+$/, "") === `${RELEASE_AGE_KEY}:`);
-  if (keyIdx === -1) return void 0;
-  let lastItemIdx = keyIdx;
-  let indent = "  ";
-  for (let i = keyIdx + 1; i < lines.length; i++) {
-    const match = lines[i]?.match(LIST_ITEM);
-    if (!match) break;
-    indent = match[1] ?? indent;
-    lastItemIdx = i;
-    if ((match[2] ?? "").replace(/^['"]|['"]$/g, "") === own) return void 0;
-  }
-  if (dryRun) return `would allow-list ${own} under ${RELEASE_AGE_KEY}`;
-  lines.splice(lastItemIdx + 1, 0, `${indent}- '${own}'`);
-  writeFileSync(yamlPath, lines.join("\n"));
-  return `allow-listed ${own} under ${RELEASE_AGE_KEY} in ${WORKSPACE_YAML}`;
-}
-var PRETTIER_IGNORE = ".prettierignore";
-var EXCLUSION_HEADER = "# @hublo/sentinel: modules formatted by oxfmt, not by the root Prettier";
-var ROOT_PRETTIER_CONFIGS = [
-  ".prettierrc",
-  ".prettierrc.json",
-  ".prettierrc.json5",
-  ".prettierrc.yml",
-  ".prettierrc.yaml",
-  ".prettierrc.js",
-  ".prettierrc.cjs",
-  ".prettierrc.mjs",
-  "prettier.config.js",
-  "prettier.config.cjs",
-  "prettier.config.mjs"
-];
-function ensureFormatterExclusion(root, moduleDir, dryRun) {
-  const rel = relative2(root, moduleDir).replaceAll("\\", "/");
-  if (rel === "" || rel.startsWith("..")) return void 0;
-  const ignorePath = join9(root, PRETTIER_IGNORE);
-  const hasPrettier = existsSync8(ignorePath) || ROOT_PRETTIER_CONFIGS.some((name) => existsSync8(join9(root, name)));
-  if (!hasPrettier) return void 0;
-  const pattern = `/${rel}/`;
-  const existing = existsSync8(ignorePath) ? readFileSync6(ignorePath, "utf8") : "";
-  const lines = existing.split("\n");
-  if (lines.some((line) => line.trim().replace(/\/$/, "") === pattern.replace(/\/$/, ""))) {
-    return void 0;
-  }
-  if (dryRun) return `would exclude ${rel} from the root Prettier (${PRETTIER_IGNORE})`;
-  const headerIdx = lines.findIndex((line) => line.trim() === EXCLUSION_HEADER);
-  if (headerIdx === -1) {
-    const prefix = existing.trim() === "" ? "" : `${existing.replace(/\n*$/, "")}
-
-`;
-    writeFileSync(ignorePath, `${prefix}${EXCLUSION_HEADER}
-${pattern}
-`);
-  } else {
-    let end = headerIdx + 1;
-    while (end < lines.length && lines[end]?.trim().startsWith("/")) end += 1;
-    const managed = [...lines.slice(headerIdx + 1, end), pattern].sort();
-    writeFileSync(
-      ignorePath,
-      [...lines.slice(0, headerIdx + 1), ...managed, ...lines.slice(end)].join("\n")
-    );
-  }
-  return `excluded ${rel} from the root Prettier (${PRETTIER_IGNORE}): it formats itself now`;
-}
-function ensureWorkspacePrep(opts) {
-  const dryRun = Boolean(opts.dryRun);
-  return [
-    ensureI18nextSingleton(opts.root, dryRun),
-    ensureReleaseAgeAllowList(opts.root, dryRun),
-    opts.formattedModule === void 0 ? void 0 : ensureFormatterExclusion(opts.root, opts.formattedModule, dryRun)
-  ].filter((message) => message !== void 0);
-}
-function inspectWorkspacePrep(root) {
-  const entries = [];
-  let pkg = {};
-  const pkgPath = join9(root, "package.json");
-  if (existsSync8(pkgPath)) {
-    try {
-      pkg = JSON.parse(readFileSync6(pkgPath, "utf8"));
-    } catch {
-      pkg = {};
-    }
-  }
-  const pinned = pkg.pnpm?.overrides?.[OVERRIDE_KEY];
-  if (pinned !== void 0) {
-    const stillForks = declaredNativeTs(pkg);
-    entries.push({
-      rule: `package.json \u2192 pnpm.overrides.${OVERRIDE_KEY}`,
-      reason: stillForks === void 0 ? `pinned to ${pinned}, but the root no longer declares ${NATIVE_TS_ALIAS}, so nothing forks any more. This override is now dead config and can be removed.` : `pinned to ${pinned}, matching the second TypeScript the root declares (${NATIVE_TS_ALIAS}). It re-resolves i18next for EVERY module that depends on it, not only adopted ones. It retires with the second TypeScript.`
-    });
-  }
-  const own = readOwnPackage().name;
-  const yamlPath = join9(root, WORKSPACE_YAML);
-  if (existsSync8(yamlPath)) {
-    const yaml = readFileSync6(yamlPath, "utf8");
-    const listed = new RegExp(`^\\s*-\\s*['"]?${own.replace("/", "\\/")}['"]?\\s*$`, "m").test(yaml);
-    if (listed) {
-      const gated = new RegExp(`^\\s*minimumReleaseAge\\s*:`, "m").test(yaml);
-      entries.push({
-        rule: `${WORKSPACE_YAML} \u2192 ${RELEASE_AGE_KEY}: ${own}`,
-        reason: gated ? `${own} is exempt from this workspace's release-age gate, so a freshly published version installs instead of being held. That is a standing exemption from a supply-chain control: the exposure is one bump wide, since the version is pinned and the lockfile carries its integrity, so a re-publish of the same version does not pass. Retire it once a bump can simply wait out the window.` : `${own} is allow-listed, but this workspace no longer sets minimumReleaseAge, so there is no gate to be exempt from. This entry is now dead config and can be removed.`
-      });
-    }
-  }
-  return entries;
+function scopeFlags(paths, options = []) {
+  if (paths.length === 0 || options.includes(TOLERATE_EMPTY_FLAG)) return [];
+  return [TOLERATE_EMPTY_FLAG];
 }
 
 // src/roles/format/config-policy.ts
@@ -1388,8 +1669,8 @@ function writesWhenRewritten(name, command) {
 var CHECK_SCRIPT_NAMES = /* @__PURE__ */ new Set(["lint", "format", "check", "test", "typecheck", "verify"]);
 
 // src/roles/format/inherited-ignores.ts
-import { existsSync as existsSync9, readFileSync as readFileSync7 } from "fs";
-import { join as join10 } from "path";
+import { existsSync as existsSync12, readFileSync as readFileSync9 } from "fs";
+import { join as join13 } from "path";
 var ROOT_IGNORE_FILE = ".prettierignore";
 function isPattern(line) {
   const trimmed = line.trim();
@@ -1404,11 +1685,11 @@ function toModulePattern(pattern) {
 }
 function inheritedIgnorePatterns(workspaceRoot) {
   if (!workspaceRoot) return [];
-  const path = join10(workspaceRoot, ROOT_IGNORE_FILE);
-  if (!existsSync9(path)) return [];
+  const path = join13(workspaceRoot, ROOT_IGNORE_FILE);
+  if (!existsSync12(path)) return [];
   let contents;
   try {
-    contents = readFileSync7(path, "utf8");
+    contents = readFileSync9(path, "utf8");
   } catch {
     return [];
   }
@@ -1495,13 +1776,13 @@ function formatPresetFor(preset) {
 }
 
 // src/roles/format/prettier-config.ts
-import { existsSync as existsSync10, readFileSync as readFileSync9 } from "fs";
-import { join as join12 } from "path";
+import { existsSync as existsSync13, readFileSync as readFileSync11 } from "fs";
+import { join as join15 } from "path";
 
 // src/roles/format/resolve-oxfmt.ts
-import { readFileSync as readFileSync8 } from "fs";
+import { readFileSync as readFileSync10 } from "fs";
 import { createRequire as createRequire2 } from "module";
-import { dirname as dirname4, join as join11 } from "path";
+import { dirname as dirname4, join as join14 } from "path";
 function resolveOxfmt(cwd) {
   return resolveBin(cwd, "oxfmt") ?? binFromOwnInstall("oxfmt", "oxfmt");
 }
@@ -1530,8 +1811,8 @@ function configSchema() {
 function readConfigSchema() {
   try {
     const manifest = createRequire2(import.meta.url).resolve("oxfmt/package.json");
-    const schemaPath = join11(dirname4(manifest), "configuration_schema.json");
-    return JSON.parse(readFileSync8(schemaPath, "utf8"));
+    const schemaPath = join14(dirname4(manifest), "configuration_schema.json");
+    return JSON.parse(readFileSync10(schemaPath, "utf8"));
   } catch {
     return void 0;
   }
@@ -1562,14 +1843,14 @@ function toOxfmtOverrides(value) {
   return { overrides, unresolved };
 }
 function readPrettierSettings(cwd) {
-  const file = PRETTIER_CONFIG_FILES.find((name) => existsSync10(join12(cwd, name)));
+  const file = PRETTIER_CONFIG_FILES.find((name) => existsSync13(join15(cwd, name)));
   if (!file) return { options: {}, unresolved: [] };
   if (/\.(js|cjs|mjs)$/.test(file)) {
     return { options: {}, file, unresolved: [`${file} is JavaScript, so it was not executed`] };
   }
   let parsed;
   try {
-    parsed = parseJsonc(readFileSync9(join12(cwd, file), "utf8"), file);
+    parsed = parseJsonc(readFileSync11(join15(cwd, file), "utf8"), file);
   } catch {
     return { options: {}, file, unresolved: [`${file} could not be parsed`] };
   }
@@ -1599,8 +1880,8 @@ function readPrettierSettings(cwd) {
 }
 
 // src/roles/format/read-adoption.ts
-import { existsSync as existsSync11, readFileSync as readFileSync10 } from "fs";
-import { join as join13 } from "path";
+import { existsSync as existsSync14, readFileSync as readFileSync12 } from "fs";
+import { join as join16 } from "path";
 var NOT_ADOPTED2 = (configFile, unreadable = null) => ({
   configFile,
   preset: null,
@@ -1616,11 +1897,11 @@ function sameValue(a, b) {
   return JSON.stringify(a) === JSON.stringify(b);
 }
 function readFormatAdoption(cwd) {
-  const path = join13(cwd, FORMAT_CONFIG_FILE);
-  if (!existsSync11(path)) return NOT_ADOPTED2(null);
+  const path = join16(cwd, FORMAT_CONFIG_FILE);
+  if (!existsSync14(path)) return NOT_ADOPTED2(null);
   let parsed;
   try {
-    parsed = parseJsonc(readFileSync10(path, "utf8"), FORMAT_CONFIG_FILE);
+    parsed = parseJsonc(readFileSync12(path, "utf8"), FORMAT_CONFIG_FILE);
   } catch (error) {
     const reason = error instanceof Error ? error.message : String(error);
     return NOT_ADOPTED2(FORMAT_CONFIG_FILE, `${FORMAT_CONFIG_FILE} could not be parsed (${reason})`);
@@ -1745,7 +2026,7 @@ var OxfmtAdapter = class extends BaseAdapter {
       manifestOperation(context.cwd, this.formatScripts(context.cwd))
     ];
     const prettierConfigs = PRETTIER_CONFIG_FILES.filter(
-      (name) => existsSync12(join14(context.cwd, name))
+      (name) => existsSync15(join17(context.cwd, name))
     );
     for (const name of prettierConfigs) operations.push({ kind: "delete", path: name });
     const removableDeps = this.modulePrettierDependencies(context.cwd);
@@ -1869,7 +2150,7 @@ var OxfmtAdapter = class extends BaseAdapter {
     });
     const result = spawnSync3(
       oxfmt,
-      [mode, ...scopeFlags(paths), ...options, ...paths.length > 0 ? paths : ["."]],
+      [mode, ...scopeFlags(paths, options), ...options, ...paths.length > 0 ? paths : ["."]],
       {
         cwd: ctx.cwd,
         stdio: "inherit"
@@ -1985,7 +2266,7 @@ var OxfmtAdapter = class extends BaseAdapter {
   modulePrettierDependencies(cwd) {
     const isPrettierPackage = (name) => name === "prettier" || name.startsWith("prettier-plugin-") || name.startsWith("@prettier/");
     try {
-      const manifest = JSON.parse(readFileSync11(join14(cwd, "package.json"), "utf8"));
+      const manifest = JSON.parse(readFileSync13(join17(cwd, "package.json"), "utf8"));
       return Object.keys(manifest.devDependencies ?? {}).filter(isPrettierPackage).map((name) => ["devDependencies", name]);
     } catch {
       return [];
@@ -2067,8 +2348,8 @@ function registerFormat() {
 
 // src/roles/lint/adapters/oxlint/oxlint.adapter.ts
 import { spawnSync as spawnSync4 } from "child_process";
-import { existsSync as existsSync20, readFileSync as readFileSync19, rmSync, writeFileSync as writeFileSync2 } from "fs";
-import { join as join24 } from "path";
+import { existsSync as existsSync23, readFileSync as readFileSync21, rmSync, writeFileSync as writeFileSync2 } from "fs";
+import { join as join27 } from "path";
 
 // src/core/config/deferred-rules.ts
 function deferredRuleNames(rules) {
@@ -2076,8 +2357,8 @@ function deferredRuleNames(rules) {
 }
 
 // src/core/fix-report.ts
-import { statSync } from "fs";
-import { join as join15 } from "path";
+import { statSync as statSync2 } from "fs";
+import { join as join18 } from "path";
 var CONFIG_REFUSED = /failed to parse .*config|invalid config file/i;
 function readFailure(output) {
   const lines = output.split("\n").map((line2) => line2.trim());
@@ -2088,7 +2369,7 @@ function readFailure(output) {
 }
 function fingerprint(path) {
   try {
-    const stat = statSync(path);
+    const stat = statSync2(path);
     return `${stat.size}:${stat.mtimeMs}`;
   } catch {
     return void 0;
@@ -2097,7 +2378,7 @@ function fingerprint(path) {
 function snapshotFiles(cwd, extensions) {
   const snapshot = /* @__PURE__ */ new Map();
   for (const file of listSourceFiles(cwd, extensions)) {
-    const mark = fingerprint(join15(cwd, file));
+    const mark = fingerprint(join18(cwd, file));
     if (mark !== void 0) snapshot.set(file, mark);
   }
   return snapshot;
@@ -2105,7 +2386,7 @@ function snapshotFiles(cwd, extensions) {
 function changedSince(cwd, before, extensions) {
   const changed = [];
   for (const file of listSourceFiles(cwd, extensions)) {
-    const now = fingerprint(join15(cwd, file));
+    const now = fingerprint(join18(cwd, file));
     if (now === void 0) continue;
     if (before.get(file) !== now) changed.push(file);
   }
@@ -2124,8 +2405,8 @@ function describeFixOutcome(outcome, toolLabel) {
 }
 
 // src/roles/lint/module-baseline.ts
-import { existsSync as existsSync13, readFileSync as readFileSync12 } from "fs";
-import { join as join16 } from "path";
+import { existsSync as existsSync16, readFileSync as readFileSync14 } from "fs";
+import { join as join19 } from "path";
 var LINT_BASELINE_FILE = ".oxlintrc.baseline.json";
 var LINT_MEASURE_FILE = ".oxlintrc.measure.json";
 var LINT_BASELINE_SPECIFIER = `./${LINT_BASELINE_FILE}`;
@@ -2169,11 +2450,11 @@ function describeHolds(holds) {
   return `held ${holds.length} rule(s) at \`warn\` for this module, covering ${total} violation(s) that were already there: ${listed}${rest}. They are written to ${LINT_BASELINE_FILE}, they still report, and they return to \`error\` once fixed and re-initialized`;
 }
 function heldRules(cwd) {
-  const path = join16(cwd, LINT_BASELINE_FILE);
-  if (!existsSync13(path)) return [];
+  const path = join19(cwd, LINT_BASELINE_FILE);
+  if (!existsSync16(path)) return [];
   try {
     const parsed = parseJsonc(
-      readFileSync12(path, "utf8"),
+      readFileSync14(path, "utf8"),
       LINT_BASELINE_FILE
     );
     return Object.keys(parsed.rules ?? {});
@@ -3996,14 +4277,14 @@ function downgradedRulesFor(preset) {
 }
 
 // src/roles/lint/extra-layers.ts
-import { existsSync as existsSync14, readFileSync as readFileSync13 } from "fs";
-import { isAbsolute as isAbsolute2, join as join17, resolve as resolve3 } from "path";
+import { existsSync as existsSync17, readFileSync as readFileSync15 } from "fs";
+import { isAbsolute as isAbsolute2, join as join20, resolve as resolve3 } from "path";
 function ruleCount(cwd, specifier) {
   const path = isAbsolute2(specifier) ? specifier : resolve3(cwd, specifier);
-  if (!existsSync14(path)) return void 0;
+  if (!existsSync17(path)) return void 0;
   try {
     const parsed = parseJsonc(
-      readFileSync13(path, "utf8"),
+      readFileSync15(path, "utf8"),
       specifier
     );
     return Object.keys(parsed.rules ?? {}).length;
@@ -4023,7 +4304,7 @@ function extraLayers(cwd, extendsList) {
 function committedExtendsList(cwd, configFile) {
   try {
     const parsed = parseJsonc(
-      readFileSync13(join17(cwd, configFile), "utf8"),
+      readFileSync15(join20(cwd, configFile), "utf8"),
       configFile
     );
     return Array.isArray(parsed.extends) ? parsed.extends.filter((entry) => typeof entry === "string") : [];
@@ -4082,8 +4363,8 @@ function errorCountsByConfigRule(stdout) {
 }
 
 // src/core/config/read-adoption.ts
-import { existsSync as existsSync16, readFileSync as readFileSync15 } from "fs";
-import { join as join19 } from "path";
+import { existsSync as existsSync19, readFileSync as readFileSync17 } from "fs";
+import { join as join22 } from "path";
 
 // src/core/config/owned-keys.ts
 function presetOwnedKeys(config, permitted, presetSets) {
@@ -4098,12 +4379,12 @@ function localOnlyKeys(config, permitted, presetSets) {
 }
 
 // src/core/config/resolve-config-target.ts
-import { existsSync as existsSync15, readFileSync as readFileSync14 } from "fs";
-import { join as join18 } from "path";
+import { existsSync as existsSync18, readFileSync as readFileSync16 } from "fs";
+import { join as join21 } from "path";
 function readExtends(absolutePath) {
   let parsed;
   try {
-    parsed = parseJsonc(readFileSync14(absolutePath, "utf8"), absolutePath);
+    parsed = parseJsonc(readFileSync16(absolutePath, "utf8"), absolutePath);
   } catch {
     return [];
   }
@@ -4117,8 +4398,8 @@ function resolveConfigTarget(moduleDir, { candidates, markers, fallback }) {
   let existing;
   let existingExtendsSomething = false;
   for (const candidate of candidates) {
-    const absolutePath = join18(moduleDir, candidate);
-    if (!existsSync15(absolutePath)) continue;
+    const absolutePath = join21(moduleDir, candidate);
+    if (!existsSync18(absolutePath)) continue;
     const chain = readExtends(absolutePath);
     if (existing === void 0) {
       existing = candidate;
@@ -4151,12 +4432,12 @@ var NOT_ADOPTED3 = (configFile, unreadable = null) => ({
 });
 function readAdoption(cwd, options) {
   const target = resolveConfigTarget(cwd, options);
-  if (target.reason === "none" || !existsSync16(join19(cwd, target.path))) {
+  if (target.reason === "none" || !existsSync19(join22(cwd, target.path))) {
     return NOT_ADOPTED3(target.reason === "none" ? null : target.path);
   }
   let parsed;
   try {
-    parsed = parseJsonc(readFileSync15(join19(cwd, target.path), "utf8"), target.path);
+    parsed = parseJsonc(readFileSync17(join22(cwd, target.path), "utf8"), target.path);
   } catch (error) {
     const reason = error instanceof Error ? error.message : String(error);
     return NOT_ADOPTED3(target.path, `${target.path} could not be parsed (${reason})`);
@@ -4190,9 +4471,9 @@ function readLintAdoption(cwd) {
 }
 
 // src/roles/lint/resolve-oxlint.ts
-import { existsSync as existsSync17 } from "fs";
+import { existsSync as existsSync20 } from "fs";
 import { createRequire as createRequire3 } from "module";
-import { delimiter as delimiter2, dirname as dirname5, join as join20 } from "path";
+import { delimiter as delimiter2, dirname as dirname5, join as join23 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 var PACKAGE_OF = {
   oxlint: "oxlint",
@@ -4217,30 +4498,30 @@ function tsgolintShim(cwd) {
   for (const owner of ["oxlint-tsgolint", "oxlint"]) {
     try {
       const packageDir = dirname5(require3.resolve(`${owner}/package.json`));
-      candidates.push(join20(packageDir, "node_modules", ".bin", "tsgolint"));
-      candidates.push(join20(packageDir, "..", ".bin", "tsgolint"));
+      candidates.push(join23(packageDir, "node_modules", ".bin", "tsgolint"));
+      candidates.push(join23(packageDir, "..", ".bin", "tsgolint"));
     } catch {
     }
   }
   try {
     const ownRoot = dirname5(require3.resolve("@hublo/sentinel/package.json"));
-    candidates.push(join20(ownRoot, "node_modules", ".bin", "tsgolint"));
+    candidates.push(join23(ownRoot, "node_modules", ".bin", "tsgolint"));
   } catch {
     candidates.push(resolveBin(dirname5(fileURLToPath2(import.meta.url)), "tsgolint") ?? "");
   }
-  return candidates.find((candidate) => candidate !== "" && existsSync17(candidate));
+  return candidates.find((candidate) => candidate !== "" && existsSync20(candidate));
 }
 function oxlintSearchPath(cwd) {
   return binSearchPath(cwd);
 }
 
 // src/roles/lint/adapters/oxlint/plan.ts
-import { existsSync as existsSync19, readFileSync as readFileSync18 } from "fs";
-import { join as join23 } from "path";
+import { existsSync as existsSync22, readFileSync as readFileSync20 } from "fs";
+import { join as join26 } from "path";
 
 // src/roles/lint/eslint-ignores.ts
-import { existsSync as existsSync18, readFileSync as readFileSync16 } from "fs";
-import { join as join21 } from "path";
+import { existsSync as existsSync21, readFileSync as readFileSync18 } from "fs";
+import { join as join24 } from "path";
 import { parseSync as parseSync2 } from "oxc-parser";
 var OPAQUE_SOURCE = /\b(includeIgnoreFile)\s*\([^)]*\)/g;
 function toOxlintPattern(pattern) {
@@ -4252,11 +4533,11 @@ function readRootEslintIgnores(root) {
   return { patterns: patterns.filter((pattern) => pattern.startsWith("**/")), unresolved };
 }
 function readEslintIgnores(cwd) {
-  const config = ESLINT_CONFIG_FILES.map((name) => join21(cwd, name)).find((path) => existsSync18(path));
+  const config = ESLINT_CONFIG_FILES.map((name) => join24(cwd, name)).find((path) => existsSync21(path));
   if (!config) return { patterns: [], unresolved: [] };
   let source;
   try {
-    source = readFileSync16(config, "utf8");
+    source = readFileSync18(config, "utf8");
   } catch {
     return { patterns: [], unresolved: [] };
   }
@@ -4357,8 +4638,8 @@ function lintPresetFor(preset) {
 }
 
 // src/roles/lint/rename-suppressions.ts
-import { readdirSync as readdirSync2, readFileSync as readFileSync17, statSync as statSync2 } from "fs";
-import { join as join22, relative as relative3 } from "path";
+import { readdirSync as readdirSync2, readFileSync as readFileSync19, statSync as statSync3 } from "fs";
+import { join as join25, relative as relative4 } from "path";
 var SOURCE_EXTENSIONS = [
   ".ts",
   ".tsx",
@@ -4405,10 +4686,10 @@ function* sourceFiles(dir) {
     return;
   }
   for (const entry of entries) {
-    const full = join22(dir, entry);
+    const full = join25(dir, entry);
     let isDirectory;
     try {
-      isDirectory = statSync2(full).isDirectory();
+      isDirectory = statSync3(full).isDirectory();
     } catch {
       continue;
     }
@@ -4425,7 +4706,7 @@ function findSuppressionRenames(cwd, renames) {
   for (const file of sourceFiles(cwd)) {
     let content;
     try {
-      content = readFileSync17(file, "utf8");
+      content = readFileSync19(file, "utf8");
     } catch {
       continue;
     }
@@ -4449,7 +4730,7 @@ function findSuppressionRenames(cwd, renames) {
       }
       if (hits.length === 0) return;
       found.push({
-        file: relative3(cwd, file),
+        file: relative4(cwd, file),
         line: index + 1,
         from: line,
         to: line.replace(rules, renamed.join(", ")),
@@ -4553,7 +4834,7 @@ function plan2(context) {
       keys: removableDeps
     });
   }
-  const eslintConfigs = ESLINT_CONFIG_FILES.filter((name) => existsSync19(join23(context.cwd, name)));
+  const eslintConfigs = ESLINT_CONFIG_FILES.filter((name) => existsSync22(join26(context.cwd, name)));
   for (const name of eslintConfigs) operations.push({ kind: "delete", path: name });
   operations.push(
     ...nxTargetOperations({
@@ -4651,7 +4932,7 @@ function lintScripts(cwd) {
 function committedExtends(cwd) {
   try {
     const parsed = parseJsonc(
-      readFileSync18(join23(cwd, LINT_CONFIG_FILE), "utf8"),
+      readFileSync20(join26(cwd, LINT_CONFIG_FILE), "utf8"),
       LINT_CONFIG_FILE
     );
     return Array.isArray(parsed.extends) ? parsed.extends.filter((entry) => typeof entry === "string") : [];
@@ -4662,7 +4943,7 @@ function committedExtends(cwd) {
 function committedIgnorePatterns(cwd) {
   try {
     const parsed = parseJsonc(
-      readFileSync18(join23(cwd, LINT_CONFIG_FILE), "utf8"),
+      readFileSync20(join26(cwd, LINT_CONFIG_FILE), "utf8"),
       LINT_CONFIG_FILE
     );
     return Array.isArray(parsed.ignorePatterns) ? parsed.ignorePatterns.filter((entry) => typeof entry === "string") : [];
@@ -4674,7 +4955,7 @@ function moduleEslintDependencies(cwd) {
   const isEslintPackage = (name) => name === "eslint" || name === "@types/eslint" || name === "typescript-eslint" || name.startsWith("@typescript-eslint/") || name.startsWith("eslint-plugin-") || name.startsWith("eslint-config-") || name.startsWith("@eslint/");
   let manifest;
   try {
-    manifest = JSON.parse(readFileSync18(join23(cwd, "package.json"), "utf8"));
+    manifest = JSON.parse(readFileSync20(join26(cwd, "package.json"), "utf8"));
   } catch {
     return [];
   }
@@ -4808,20 +5089,20 @@ ${result.stderr ?? ""}`);
    * build the developer can see, rather than a silent half-adoption they cannot.
    */
   writeModuleBaseline(ctx, oxlint, env) {
-    const configPath = join24(ctx.cwd, LINT_CONFIG_FILE);
-    const baselinePath = join24(ctx.cwd, LINT_BASELINE_FILE);
-    if (!existsSync20(configPath)) return;
+    const configPath = join27(ctx.cwd, LINT_CONFIG_FILE);
+    const baselinePath = join27(ctx.cwd, LINT_BASELINE_FILE);
+    if (!existsSync23(configPath)) return;
     let config;
     try {
       config = parseJsonc(
-        readFileSync19(configPath, "utf8"),
+        readFileSync21(configPath, "utf8"),
         LINT_CONFIG_FILE
       );
     } catch {
       return;
     }
     const current = Array.isArray(config.extends) ? config.extends : [];
-    const measurePath = join24(ctx.cwd, LINT_MEASURE_FILE);
+    const measurePath = join27(ctx.cwd, LINT_MEASURE_FILE);
     let measured;
     try {
       writeFileSync2(
@@ -4869,7 +5150,7 @@ ${result.stderr ?? ""}`);
     }
   }
   async run(ctx) {
-    if (!existsSync20(join24(ctx.cwd, LINT_CONFIG_FILE))) {
+    if (!existsSync23(join27(ctx.cwd, LINT_CONFIG_FILE))) {
       process.stderr.write(
         `sentinel lint(oxlint): no ${LINT_CONFIG_FILE} in this module; run \`sentinel --init --lint\` to adopt.
 `
@@ -4914,7 +5195,7 @@ ${result.stderr ?? ""}`);
       valueFlags: OXLINT_VALUE_FLAGS
     });
     const targets = paths.length > 0 ? paths : ["."];
-    const emptyScope = scopeFlags(paths);
+    const emptyScope = scopeFlags(paths, passedOptions);
     const lint = (extra) => {
       const passed = [...extra, ...emptyScope, ...passedOptions];
       const result = spawnSync4(oxlint, ["-c", LINT_CONFIG_FILE, ...passed, ...targets], {
@@ -5017,7 +5298,7 @@ ${result.stderr ?? ""}`);
     let stub;
     try {
       stub = parseJsonc(
-        readFileSync19(join24(cwd, LINT_CONFIG_FILE), "utf8"),
+        readFileSync21(join27(cwd, LINT_CONFIG_FILE), "utf8"),
         LINT_CONFIG_FILE
       );
     } catch {
@@ -5027,7 +5308,7 @@ ${result.stderr ?? ""}`);
     for (const entry of stub.extends ?? []) {
       try {
         const preset = parseJsonc(
-          readFileSync19(join24(cwd, entry), "utf8"),
+          readFileSync21(join27(cwd, entry), "utf8"),
           entry
         );
         for (const rule of Object.keys(preset.rules ?? {})) names.add(rule);
@@ -5097,14 +5378,14 @@ ${result.stderr ?? ""}`);
     let parsed;
     try {
       parsed = parseJsonc(
-        readFileSync19(join24(cwd, LINT_CONFIG_FILE), "utf8"),
+        readFileSync21(join27(cwd, LINT_CONFIG_FILE), "utf8"),
         LINT_CONFIG_FILE
       );
     } catch {
       return void 0;
     }
     const targets = Array.isArray(parsed.extends) ? parsed.extends.filter((entry) => typeof entry === "string") : typeof parsed.extends === "string" ? [parsed.extends] : [];
-    return targets.find((target) => !existsSync20(join24(cwd, target)));
+    return targets.find((target) => !existsSync23(join27(cwd, target)));
   }
   /** Announce what is not enforced, so reduced coverage is never silent. */
   announceDisabled(preset) {
@@ -5136,9 +5417,9 @@ function registerLint() {
 
 // src/roles/typescript/adapters/tsc/tsc.adapter.ts
 import { spawnSync as spawnSync5 } from "child_process";
-import { existsSync as existsSync21, readFileSync as readFileSync21 } from "fs";
+import { existsSync as existsSync24, readFileSync as readFileSync23 } from "fs";
 import { createRequire as createRequire4 } from "module";
-import { join as join26 } from "path";
+import { join as join29 } from "path";
 
 // src/roles/typescript/presets/nest.json
 var nest_default2 = {
@@ -5319,8 +5600,8 @@ function readTsconfigAdoption(cwd) {
 }
 
 // src/roles/typescript/adapters/tsc/plan.ts
-import { readFileSync as readFileSync20 } from "fs";
-import { join as join25 } from "path";
+import { readFileSync as readFileSync22 } from "fs";
+import { join as join28 } from "path";
 
 // src/roles/typescript/typecheck-script.ts
 var SENTINEL_TYPECHECK_COMMAND = "sentinel --run --typescript";
@@ -5413,7 +5694,7 @@ function planAdoption(context) {
     };
   }
   const existing = parseJsonc(
-    readFileSync20(join25(context.cwd, target.path), "utf8"),
+    readFileSync22(join28(context.cwd, target.path), "utf8"),
     target.path
   );
   const extendsChain = composeExtends(existing.extends, preset);
@@ -5551,7 +5832,7 @@ var TscAdapter = class _TscAdapter extends BaseAdapter {
     let chain;
     try {
       const parsed = parseJsonc(
-        readFileSync21(join26(cwd, target.path), "utf8"),
+        readFileSync23(join29(cwd, target.path), "utf8"),
         target.path
       );
       chain = parsed.extends;
@@ -5564,7 +5845,7 @@ var TscAdapter = class _TscAdapter extends BaseAdapter {
     );
     if (preset === void 0) return void 0;
     try {
-      createRequire4(join26(cwd, "noop.js")).resolve(preset);
+      createRequire4(join29(cwd, "noop.js")).resolve(preset);
       return void 0;
     } catch {
       return preset;
@@ -5660,7 +5941,7 @@ var TscAdapter = class _TscAdapter extends BaseAdapter {
   referencedProjects(cwd, config) {
     try {
       const parsed = parseJsonc(
-        readFileSync21(join26(cwd, config), "utf8"),
+        readFileSync23(join29(cwd, config), "utf8"),
         config
       );
       const referenced = (parsed.references ?? []).map((reference) => reference.path).filter((path) => typeof path === "string" && path.length > 0);
@@ -5676,7 +5957,7 @@ var TscAdapter = class _TscAdapter extends BaseAdapter {
    * check.
    */
   typecheckTarget(cwd) {
-    if (existsSync21(join26(cwd, "tsconfig.json"))) return "tsconfig.json";
+    if (existsSync24(join29(cwd, "tsconfig.json"))) return "tsconfig.json";
     const target = resolveTsconfigTarget(cwd);
     return target.reason === "none" ? null : target.path;
   }
@@ -5880,7 +6161,7 @@ function replaceLines(current, replacements) {
 }
 
 // src/core/apply-plan.ts
-import { existsSync as existsSync22, readFileSync as readFileSync22, renameSync, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "fs";
+import { existsSync as existsSync25, readFileSync as readFileSync24, renameSync, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "fs";
 import { resolve as resolve4, sep } from "path";
 import { applyEdits, findNodeAtLocation, modify, parseTree } from "jsonc-parser";
 
@@ -5899,7 +6180,7 @@ function resolveWithinRoot(cwd, relativePath) {
   return absolutePath;
 }
 function readIfExists(absolutePath) {
-  return existsSync22(absolutePath) ? readFileSync22(absolutePath, "utf8") : void 0;
+  return existsSync25(absolutePath) ? readFileSync24(absolutePath, "utf8") : void 0;
 }
 function* leaves(value, prefix = []) {
   for (const [key, keyValue] of Object.entries(value)) {
@@ -6017,8 +6298,8 @@ function applyPlan(cwd, plan3) {
 }
 
 // src/core/config/preset-evidence.ts
-import { existsSync as existsSync23, readdirSync as readdirSync3, readFileSync as readFileSync23 } from "fs";
-import { join as join27 } from "path";
+import { existsSync as existsSync26, readdirSync as readdirSync3, readFileSync as readFileSync25 } from "fs";
+import { join as join30 } from "path";
 var PATH_SIGNALS = [
   {
     preset: "nest",
@@ -6032,11 +6313,11 @@ var DEPENDENCY_SIGNALS = [
   { preset: "nest", pattern: /^@nestjs\// }
 ];
 function dependencyNames(cwd) {
-  const path = join27(cwd, "package.json");
-  if (!existsSync23(path)) return [];
+  const path = join30(cwd, "package.json");
+  if (!existsSync26(path)) return [];
   try {
     const manifest = parseJsonc(
-      readFileSync23(path, "utf8"),
+      readFileSync25(path, "utf8"),
       path
     );
     return [
@@ -6059,7 +6340,7 @@ function declaresJsx(cwd) {
   for (const name of entries) {
     try {
       const config = parseJsonc(
-        readFileSync23(join27(cwd, name), "utf8"),
+        readFileSync25(join30(cwd, name), "utf8"),
         name
       );
       if (config.compilerOptions?.jsx !== void 0) return true;
@@ -6218,24 +6499,25 @@ export {
   declaredPresetFor,
   availableTargets,
   resolve,
-  BaseAdapter,
-  resolveBin,
   readOwnVersion,
   readProjectPackageJson,
-  readNxProjectName,
+  moduleName,
+  buildConfigFile,
+  BaseAdapter,
+  resolveBin,
+  WORKSPACE_ROOT_MARKER,
+  findWorkspaceRoot,
+  ensureWorkspacePrep,
+  inspectWorkspacePrep,
   VERBS,
   TARGETS,
   LONG_RUNNING_TARGETS,
   SWEEPABLE_TARGETS,
   PRESET_NAMES,
-  WORKSPACE_ROOT_MARKER,
-  findWorkspaceRoot,
-  ensureWorkspacePrep,
-  inspectWorkspacePrep,
   palette,
   registerAdapters,
   describeFramework,
   detectFramework,
   dispatch
 };
-//# sourceMappingURL=chunk-SA2RMTVI.js.map
+//# sourceMappingURL=chunk-RKVGZNJ7.js.map