@lenne.tech/cli 1.24.0 → 1.25.0

package/build/commands/dev/{migrate.js → init.js}

@@ -10,15 +10,25 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 const caddy_1 = require("../../lib/caddy");
+const dev_bootstrap_1 = require("../../lib/dev-bootstrap");
+const dev_install_helper_1 = require("../../lib/dev-install-helper");
 const dev_migrate_helper_1 = require("../../lib/dev-migrate-helper");
 const dev_project_1 = require("../../lib/dev-project");
+const dev_service_1 = require("../../lib/dev-service");
 /**
- * Register an existing project with `lt dev` and apply idempotent
- * env-aware patches.
+ * Initialize an existing project for `lt dev` and apply idempotent
+ * env-aware patches. (Formerly `lt dev migrate`; `migrate` stays as an
+ * alias for backwards compatibility.)
  *
  * Idempotent — re-running with no changes is a no-op. Safe to invoke
  * automatically after `lt fullstack init` or by developers manually.
  *
+ * Auto-chaining: if the machine has not been prepared yet (`lt dev
+ * install` never ran), it runs install FIRST, then initializes the
+ * project. The chain is one hop deep and cannot recurse, because this
+ * command calls the `runInstall` *helper* — never the install command
+ * (see `dev-bootstrap.ts`). Pass `--skip-install` to opt out.
+ *
  * Steps (delegated to `lib/dev-migrate-helper.ts#runMigrate`):
  * 1. Resolve workspace layout (api/app dirs, root)
  * 2. Build identity (slug + subdomains)
@@ -27,14 +37,12 @@ const dev_project_1 = require("../../lib/dev-project");
  * 4. Inject CLAUDE.md URL block (root + each subproject)
  * 5. Persist project to ~/.lenneTech/projects.json
  * 6. Add `.lt-dev/` to .gitignore
- *
- * Closes with a hint to run `lt dev install` if Caddy is missing.
  */
-const MigrateCommand = {
-    alias: ['m'],
-    description: 'Migrate an existing project to lt dev (idempotent)',
+const InitCommand = {
+    alias: ['migrate', 'm'],
+    description: 'Init project for lt dev (idempotent)',
     hidden: false,
-    name: 'migrate',
+    name: 'init',
     run: (toolbox) => __awaiter(void 0, void 0, void 0, function* () {
         const { filesystem, parameters, print: { colors, error, info, success, warning }, } = toolbox;
         const layout = (0, dev_project_1.resolveLayout)(filesystem.cwd(), filesystem);
@@ -42,55 +50,35 @@ const MigrateCommand = {
             error('No API (src/config.env.ts) or App (nuxt.config.ts) project detected at this path.');
             if (!parameters.options.fromGluegunMenu)
                 process.exit(1);
-            return 'dev migrate: not a project';
-        }
-        const result = (0, dev_migrate_helper_1.runMigrate)({ layout });
-        info('');
-        info(colors.bold(`Migrating "${result.identity.slug}"`));
-        info(colors.dim('─'.repeat(60)));
-        if (result.identity.subdomains.app)
-            info(`  App URL: https://${result.identity.subdomains.app.hostname}`);
-        if (result.identity.subdomains.api)
-            info(`  API URL: https://${result.identity.subdomains.api.hostname}`);
-        info(`  DB:      mongodb://127.0.0.1/${result.dbName}`);
-        info('');
-        // Code patches
-        if (result.codePatches.length > 0) {
-            for (const r of result.codePatches) {
-                if (r.patched)
-                    success(`patched ${r.replacements}× in ${r.file}`);
-                else
-                    info(colors.dim(`already patched: ${r.file}`));
-            }
-        }
-        else {
-            info(colors.dim('  patches: not needed (already env-aware)'));
+            return 'dev init: not a project';
         }
-        // CLAUDE.md
-        result.claudePatches.filter((r) => r.patched).forEach((r) => success(`updated CLAUDE.md URL block: ${r.file}`));
-        // Registry
-        if (result.registryUpdated) {
-            success(`registered in ${process.env.LT_DEV_REGISTRY_PATH || '~/.lenneTech/projects.json'}`);
-        }
-        // .gitignore
-        if (result.addedGitignoreEntry)
-            success('added `.lt-dev/` to .gitignore');
-        if (result.alreadyMigrated) {
-            info(colors.dim('  Project was already fully migrated — nothing changed.'));
+        // Auto-chain: prepare the machine first if `lt dev install` never ran.
+        // `--skip-install` opts out. Calling the runInstall HELPER (not the
+        // install command) makes infinite recursion structurally impossible.
+        const runInstallFirst = (0, dev_bootstrap_1.shouldRunInstallBeforeInit)({
+            machinePrepared: (0, dev_bootstrap_1.isMachinePrepared)(),
+            platformSupported: (0, dev_service_1.platformSupported)() !== 'unsupported',
+            skipInstall: parameters.options.skipInstall === true,
+        });
+        if (runInstallFirst) {
+            info(colors.dim('Machine not prepared for lt dev yet — running `lt dev install` first ...'));
+            yield (0, dev_install_helper_1.runInstall)(toolbox, { auto: true });
         }
+        const result = (0, dev_migrate_helper_1.runMigrate)({ layout });
+        (0, dev_migrate_helper_1.printMigrateResult)(toolbox, result);
         info('');
-        success('Migration complete.');
-        // Hint: Caddy installed?
+        success('Project initialized for lt dev.');
+        // Closing hint based on Caddy availability.
         const caddyOk = yield (0, caddy_1.caddyAvailable)();
         if (!caddyOk) {
-            warning('Caddy is not installed yet. Run `lt dev install` first, then `lt dev up`.');
+            warning('Caddy is not installed yet. Run `lt dev install` (installs caddy first), then `lt dev up`.');
         }
         else {
             info('Start the project with `lt dev up`.');
         }
         if (!parameters.options.fromGluegunMenu)
             process.exit();
-        return `dev migrate: ${result.identity.slug}`;
+        return `dev init: ${result.identity.slug}`;
     }),
 };
-module.exports = MigrateCommand;
+module.exports = InitCommand;

package/build/commands/dev/install.js

@@ -9,29 +9,24 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-const caddy_1 = require("../../lib/caddy");
-const dev_service_1 = require("../../lib/dev-service");
+const dev_bootstrap_1 = require("../../lib/dev-bootstrap");
+const dev_install_helper_1 = require("../../lib/dev-install-helper");
+const dev_migrate_helper_1 = require("../../lib/dev-migrate-helper");
+const dev_project_1 = require("../../lib/dev-project");
 /**
  * One-time per-machine setup for `lt dev`.
  *
  * Owns the full Caddy lifecycle through a dedicated LaunchAgent
- * (macOS) / systemd-user unit (Linux). This intentionally bypasses
- * `brew services caddy`, whose plist hardcodes
- * `--config /opt/homebrew/etc/Caddyfile` and would crash-loop against
- * our `~/.lenneTech/Caddyfile` location — which is the bug that
- * blocked the first real install.
+ * (macOS) / systemd-user unit (Linux), bypassing `brew services caddy`
+ * (whose plist hardcodes a different Caddyfile path and crash-loops).
+ * The actual steps live in `lib/dev-install-helper.ts#runInstall` so
+ * `lt dev init` can reuse them without a cross-command call.
  *
- * Steps (each idempotent — safe to re-run):
- *   1. Verify `caddy` is on PATH (suggest install instructions otherwise)
- *   2. Ensure `~/.lenneTech/Caddyfile` exists (stub written if missing)
- *   3. Detect conflicting `brew services caddy` and tell the user to
- *      stop it — it would fight us for ports 80/443
- *   4. Install + bootstrap our LaunchAgent/systemd unit
- *   5. Wait for the Caddy admin endpoint to respond
- *   6. Validate the Caddyfile
- *   7. Surface the `sudo -E HOME="$HOME" caddy trust` instruction for
- *      installing the local CA (HOME must survive sudo so caddy can
- *      find its CA files under the *user* profile, not /var/root)
+ * Auto-chaining: when run from inside an lt-dev-capable project that is
+ * not yet registered, it initializes that project afterwards (the same
+ * work `lt dev init` does). The chain is one hop deep and cannot recurse
+ * because it calls the `runMigrate` *helper* — never the init command
+ * (see `dev-bootstrap.ts`). Pass `--skip-init` to opt out.
  */
 const InstallCommand = {
     alias: ['i'],
@@ -39,134 +34,44 @@ const InstallCommand = {
     hidden: false,
     name: 'install',
     run: (toolbox) => __awaiter(void 0, void 0, void 0, function* () {
-        const { parameters, print: { colors, error, info, success, warning }, } = toolbox;
-        info('');
-        info(colors.bold('lt dev install — one-time per-machine setup'));
-        info(colors.dim('─'.repeat(60)));
-        const plat = (0, dev_service_1.platformSupported)();
-        if (plat === 'unsupported') {
-            error(`Service management is not supported on ${process.platform}. Only macOS and Linux are covered.`);
-            info(`  Workaround: run \`${colors.cyan(`caddy run --config ${caddy_1.paths.caddyfile}`)}\` manually.`);
+        const { filesystem, parameters, print: { colors, info, success, warning }, } = toolbox;
+        const result = yield (0, dev_install_helper_1.runInstall)(toolbox);
+        // Fatal preconditions — nothing more to do, and an auto-init would be
+        // premature (the user must install caddy / use a supported OS first).
+        if (result.unsupported) {
             if (!parameters.options.fromGluegunMenu)
                 process.exit(1);
             return 'dev install: unsupported platform';
         }
-        let blocked = false;
-        // 1. caddy on PATH
-        const hasCaddy = yield (0, caddy_1.caddyAvailable)();
-        if (hasCaddy) {
-            success('caddy is on PATH');
-        }
-        else {
-            warning('caddy is not installed.');
-            info(`  → macOS: ${colors.cyan('brew install caddy')}`);
-            info(`  → Linux: ${colors.cyan('https://caddyserver.com/docs/install')}`);
-            info('  (Do NOT start it via `brew services` — `lt dev install` runs its own service.)');
-            blocked = true;
-        }
-        // 2. Caddyfile stub
-        (0, caddy_1.writeCaddyfile)('# lt dev — managed Caddyfile\n# Add per-project blocks via `lt dev up`.\n');
-        success(`Caddyfile present at ${caddy_1.paths.caddyfile}`);
-        if (!hasCaddy) {
-            info('');
-            error('Cannot continue setup until Caddy is installed. Re-run `lt dev install` afterwards.');
+        if (result.caddyMissing) {
             if (!parameters.options.fromGluegunMenu)
-                process.exit(blocked ? 1 : 0);
+                process.exit(1);
             return 'dev install: caddy missing';
         }
-        // 3. brew services conflict warning
-        const brewConflict = yield detectBrewCaddyConflict();
-        if (brewConflict) {
-            warning('A `brew services caddy` instance is registered.');
-            info(`  Stop it (it crash-loops against our Caddyfile): ${colors.cyan('brew services stop caddy')}`);
-            info('  `lt dev install` runs its own service — the brew one is no longer needed.');
-        }
-        // 4. Install our LaunchAgent / systemd unit
-        const paths = (0, dev_service_1.getServicePaths)();
-        info('');
-        info(`Installing ${plat === 'darwin' ? 'LaunchAgent' : 'systemd-user unit'} at:`);
-        info(colors.dim(`  ${paths.unitFile}`));
-        const installResult = yield (0, dev_service_1.installService)();
-        if (!installResult.ok) {
-            error(installResult.message);
-            blocked = true;
-        }
-        else {
-            if (installResult.created)
-                success(installResult.message);
-            else
-                info(colors.dim(installResult.message));
-        }
-        // 5. Wait for admin endpoint
-        if (installResult.ok) {
-            info(colors.dim('Waiting for Caddy admin endpoint (:2019) ...'));
-            const ready = yield (0, dev_service_1.waitForServiceReady)(8000);
-            const status = yield (0, dev_service_1.getServiceStatus)();
-            if (ready && status.daemonReachable) {
-                success(`Caddy daemon ready${status.pid ? ` (pid ${status.pid})` : ''}.`);
-            }
-            else if (status.loaded && !status.daemonReachable) {
-                warning('Service is loaded but admin endpoint did not respond within 8s.');
-                info(colors.dim(`  Logs: ${paths.logFile} / ${paths.errFile}`));
-                blocked = true;
-            }
-            else {
-                warning('Caddy daemon did not start. See logs:');
-                info(colors.dim(`  ${paths.logFile}`));
-                info(colors.dim(`  ${paths.errFile}`));
-                blocked = true;
-            }
-        }
-        // 6. Validate Caddyfile
-        if (installResult.ok) {
-            const validation = yield (0, caddy_1.validateCaddyfile)();
-            if (validation.ok)
-                success('Caddyfile validates');
-            else
-                warning(`Caddyfile validation: ${validation.stderr.split('\n').slice(0, 2).join(' / ')}`);
+        // Auto-chain: if we're inside an un-initialized lt-dev project, run the
+        // project init now. Calling the runMigrate HELPER (not the init command)
+        // makes infinite recursion structurally impossible. `--skip-init` opts out.
+        const layout = (0, dev_project_1.resolveLayout)(filesystem.cwd(), filesystem);
+        const runInitAfter = (0, dev_bootstrap_1.shouldRunInitAfterInstall)({
+            isProject: (0, dev_bootstrap_1.isLtDevProject)(layout),
+            projectInitialized: (0, dev_bootstrap_1.isProjectInitialized)(layout),
+            skipInit: parameters.options.skipInit === true,
+        });
+        if (runInitAfter) {
+            info('');
+            info(colors.dim('Un-initialized lt dev project detected here — running `lt dev init` ...'));
+            (0, dev_migrate_helper_1.printMigrateResult)(toolbox, (0, dev_migrate_helper_1.runMigrate)({ layout }));
         }
-        // 7. CA trust
-        info('');
-        info(colors.bold('Local CA trust'));
-        info('  Caddy creates its local CA on first run. To trust it system-wide,');
-        info('  run this once (HOME must be preserved so sudo keeps the user-scoped');
-        info('  CA, otherwise caddy looks in /var/root and fails):');
-        info(`    ${colors.cyan('sudo -E HOME="$HOME" caddy trust')}`);
-        info(`  Browsers will then accept ${colors.cyan('https://*.localhost')} without warnings.`);
         info('');
-        if (blocked) {
+        if (result.blocked) {
             warning('Setup incomplete. Address the items above and re-run `lt dev install`.');
         }
         else {
-            success('Setup complete. Use `lt dev migrate` in a project, then `lt dev up`.');
+            success('Setup complete. Use `lt dev init` in a project, then `lt dev up`.');
         }
         if (!parameters.options.fromGluegunMenu)
-            process.exit(blocked ? 1 : 0);
-        return blocked ? 'dev install: incomplete' : 'dev install: ok';
+            process.exit(result.blocked ? 1 : 0);
+        return result.blocked ? 'dev install: incomplete' : 'dev install: ok';
     }),
 };
-/**
- * Quick `brew services list` scan for a registered caddy service.
- * Returns true on macOS if any entry contains "caddy" — error/started
- * alike, both are conflicts. Always returns false on non-darwin or
- * when `brew` is unavailable (no false positives).
- */
-function detectBrewCaddyConflict() {
-    return __awaiter(this, void 0, void 0, function* () {
-        if (process.platform !== 'darwin')
-            return false;
-        return new Promise((resolve) => {
-            var _a;
-            const { spawn } = require('child_process');
-            const child = spawn('brew', ['services', 'list'], { stdio: ['ignore', 'pipe', 'ignore'] });
-            let out = '';
-            (_a = child.stdout) === null || _a === void 0 ? void 0 : _a.on('data', (b) => (out += String(b)));
-            child.on('error', () => resolve(false));
-            child.on('close', () => {
-                const conflict = /\bcaddy\b/.test(out) && !/^caddy\s+none\b/m.test(out);
-                resolve(conflict);
-            });
-        });
-    });
-}
 module.exports = InstallCommand;

package/build/commands/dev/status.js

@@ -36,7 +36,7 @@ const StatusCommand = {
             info(colors.dim('─'.repeat(60)));
             const slugs = Object.keys(reg.projects).sort();
             if (slugs.length === 0) {
-                warning('No projects registered. Run `lt dev migrate` in a project.');
+                warning('No projects registered. Run `lt dev init` in a project.');
             }
             else {
                 for (const slug of slugs) {
@@ -62,7 +62,7 @@ const StatusCommand = {
         info(colors.bold(`lt dev status: ${identity.slug}`));
         info(colors.dim('─'.repeat(60)));
         if (!entry) {
-            warning('Not registered. Run `lt dev migrate` first.');
+            warning('Not registered. Run `lt dev init` first.');
             // Show what migrate would do (legacy code present?) so the user
             // can judge urgency before running it.
             const legacyFiles = [];
@@ -74,11 +74,11 @@ const StatusCommand = {
             if (layout.appDir)
                 legacyFiles.push(...(0, dev_project_1.appNeedsPortPatch)(layout.appDir));
             if (legacyFiles.length > 0) {
-                info(colors.dim('  Legacy hardcoded ports detected — `lt dev migrate` will patch:'));
+                info(colors.dim('  Legacy hardcoded ports detected — `lt dev init` will patch:'));
                 legacyFiles.forEach((f) => info(colors.dim(`    - ${f}`)));
             }
             else {
-                info(colors.dim('  Code is already env-aware; `lt dev migrate` will only register + patch CLAUDE.md.'));
+                info(colors.dim('  Code is already env-aware; `lt dev init` will only register + patch CLAUDE.md.'));
             }
             info('');
             if (!parameters.options.fromGluegunMenu)
@@ -104,7 +104,7 @@ const StatusCommand = {
             info('');
             warning('  Legacy hardcoded ports still present:');
             legacyFiles.forEach((f) => info(colors.dim(`    - ${f}`)));
-            info(colors.dim('  Run `lt dev migrate` to patch them; otherwise Caddy may proxy into the void.'));
+            info(colors.dim('  Run `lt dev init` to patch them; otherwise Caddy may proxy into the void.'));
         }
         // Caddy status — quick view whether the daemon is reachable.
         {

package/build/commands/dev/tunnel.js

@@ -49,7 +49,7 @@ const TunnelCommand = {
         const { filesystem, parameters, print: { colors, error, info, success, warning }, } = toolbox;
         const layout = (0, dev_project_1.resolveLayout)(filesystem.cwd(), filesystem);
         if (!layout.apiDir && !layout.appDir) {
-            error('No API or App project detected at this path. Run `lt dev migrate` first.');
+            error('No API or App project detected at this path. Run `lt dev init` first.');
             if (!parameters.options.fromGluegunMenu)
                 process.exit(1);
             return 'dev tunnel: not a project';

package/build/commands/dev/up.js

@@ -50,7 +50,7 @@ const UpCommand = {
         const { filesystem, parameters, print: { colors, error, info, success, warning }, } = toolbox;
         const layout = (0, dev_project_1.resolveLayout)(filesystem.cwd(), filesystem);
         if (!layout.apiDir && !layout.appDir) {
-            error('No API or App project detected at this path. Run `lt dev migrate` first.');
+            error('No API or App project detected at this path. Run `lt dev init` first.');
             if (!parameters.options.fromGluegunMenu)
                 process.exit(1);
             return 'dev up: not a project';
@@ -72,7 +72,7 @@ const UpCommand = {
         const dbName = (0, dev_project_1.deriveDbName)(layout.apiDir, identity.slug);
         // Sanft auto-migrate sichere Operationen (ohne Code-Modifikation):
         // CLAUDE.md-URL-Block einfügen + .gitignore ergänzen.
-        // Code-Patches (config.env.ts, nuxt.config.ts) bleiben explizit `lt dev migrate`.
+        // Code-Patches (config.env.ts, nuxt.config.ts) bleiben explizit `lt dev init`.
         {
             const claudeCandidates = [
                 (0, path_1.join)(layout.root, 'CLAUDE.md'),
@@ -98,7 +98,7 @@ const UpCommand = {
             if (layout.appDir)
                 legacyFiles.push(...(0, dev_project_1.appNeedsPortPatch)(layout.appDir));
             if (legacyFiles.length > 0) {
-                warning('Legacy hardcoded ports detected — Caddy will proxy correctly only after running `lt dev migrate`:');
+                warning('Legacy hardcoded ports detected — Caddy will proxy correctly only after running `lt dev init`:');
                 legacyFiles.forEach((f) => info(colors.dim(`  - ${f}`)));
                 info(colors.dim('  (Continuing — env-aware files will work; legacy files may bind on 3000/3001 and miss Caddy.)'));
             }

package/build/commands/fullstack/add-api.js

@@ -301,6 +301,18 @@ const NewCommand = {
             else {
                 renameSpinner.succeed(`Renamed nest-base → ${projectDir} in projects/api`);
             }
+            // Flip .claude/upstream.json from the template-self default to the
+            // downstream shape so `/upstream-pr` can contribute core fixes back
+            // to nest-base. Independent of the rename above — run it even if
+            // the rename failed. Non-fatal when the file is absent.
+            const upstreamResult = (0, workspace_integration_1.reconfigureUpstreamForDownstream)({
+                apiDir: apiDest,
+                filesystem,
+                upstreamBranch: apiBranch,
+            });
+            if (upstreamResult.updated) {
+                info('Configured .claude/upstream.json for downstream contributions');
+            }
         }
         // Persist apiMode + frameworkMode for downstream generators.
         if (apiResult.method !== 'link') {

package/build/commands/fullstack/init.js

@@ -17,6 +17,7 @@ const caddy_1 = require("../../lib/caddy");
 const dev_migrate_helper_1 = require("../../lib/dev-migrate-helper");
 const dev_project_1 = require("../../lib/dev-project");
 const hoist_workspace_pnpm_config_1 = require("../../lib/hoist-workspace-pnpm-config");
+const package_name_1 = require("../../lib/package-name");
 const workspace_integration_1 = require("../../lib/workspace-integration");
 const add_api_1 = __importDefault(require("./add-api"));
 const add_app_1 = __importDefault(require("./add-app"));
@@ -440,6 +441,11 @@ const NewCommand = {
                     .replace(/\{\{FRONTEND_FRAMEWORK\}\}/g, () => frontendName));
             }
         }
+        // Rename the cloned monorepo's root package so each project gets a unique
+        // `lt dev` slug. The slug is derived from package.json `name`; without
+        // this rename every lt-monorepo-based project would register as
+        // `lt-monorepo` and collide on `https://lt-monorepo.localhost`.
+        (0, package_name_1.setPackageName)({ filesystem, name: projectDir, packageJsonPath: `${projectDir}/package.json` });
         // Always initialize git
         try {
             yield system.run(`cd ${projectDir} && git init --initial-branch=dev`);
@@ -559,6 +565,18 @@ const NewCommand = {
                 catch (err) {
                     renameSpinner.warn(`Auto-rename failed (${err.message}). Run \`bun run rename ${projectDir}\` manually inside projects/api.`);
                 }
+                // Flip .claude/upstream.json from the template-self default to the
+                // downstream shape so `/upstream-pr` can contribute core fixes back
+                // to nest-base. Independent of the rename above — run it even if the
+                // rename failed. Non-fatal when the file is absent.
+                const upstreamResult = (0, workspace_integration_1.reconfigureUpstreamForDownstream)({
+                    apiDir: apiDest,
+                    filesystem,
+                    upstreamBranch: apiBranch,
+                });
+                if (upstreamResult.updated) {
+                    info('Configured .claude/upstream.json for downstream contributions');
+                }
             }
             // Create lt.config.json for API
             // Note: frameworkMode is persisted under meta so that subsequent `lt
@@ -641,7 +659,7 @@ const NewCommand = {
                     return;
                 }
             }
-            // Best-effort `lt dev migrate` so the workspace is ready for `lt dev up`
+            // Best-effort `lt dev init` so the workspace is ready for `lt dev up`
             // out-of-the-box: registers the slug in `~/.lenneTech/projects.json`,
             // injects the URL block into CLAUDE.md, adds `.lt-dev/` to .gitignore.
             // Failures here are non-fatal — `init` itself remains successful.

package/build/commands/server/create.js

@@ -376,6 +376,21 @@ const NewCommand = {
             }
             return `created server symlink ${name}`;
         }
+        // For the experimental nest-base template, flip .claude/upstream.json
+        // from the template-self default to the downstream shape so
+        // `/upstream-pr` can contribute core fixes back to nest-base. The
+        // standalone clone lands directly at `projectDir`. Non-fatal when the
+        // file is absent (older templates).
+        if (experimental) {
+            const upstreamResult = (0, workspace_integration_1.reconfigureUpstreamForDownstream)({
+                apiDir: projectDir,
+                filesystem,
+                upstreamBranch: branch,
+            });
+            if (upstreamResult.updated) {
+                info('Configured .claude/upstream.json for downstream contributions');
+            }
+        }
         // Git initialization (after npm install which is done in setupServer).
         // When cwd is not inside a repo, `git rev-parse` exits 128 — treat as false.
         if (git) {

package/build/lib/dev-bootstrap.js

@@ -0,0 +1,75 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isLtDevProject = isLtDevProject;
+exports.isMachinePrepared = isMachinePrepared;
+exports.isProjectInitialized = isProjectInitialized;
+exports.shouldRunInitAfterInstall = shouldRunInitAfterInstall;
+exports.shouldRunInstallBeforeInit = shouldRunInstallBeforeInit;
+/**
+ * Bootstrap-state checks that drive the mutual auto-chaining between
+ * `lt dev install` (per-machine setup) and `lt dev init` (per-project
+ * setup).
+ *
+ * These are pure, synchronous predicates so the chaining decision is
+ * trivially testable and cannot itself trigger side effects. The actual
+ * work is delegated to `runInstall` / `runMigrate`, which never call each
+ * other — so the install↔init chaining can never recurse infinitely:
+ *
+ *   - `lt dev init`   → if NOT machine-prepared, run install first, then init
+ *   - `lt dev install`→ if inside an un-initialized project, run init after
+ *
+ * Because each command calls the *helpers* (not the other command), the
+ * chain is at most one hop deep in either direction. The predicates below
+ * additionally make re-runs no-ops (nothing repeated unnecessarily).
+ */
+const fs_1 = require("fs");
+const dev_identity_1 = require("./dev-identity");
+const dev_service_1 = require("./dev-service");
+const dev_state_1 = require("./dev-state");
+/**
+ * True if this path is an lt-dev-capable project — i.e. `resolveLayout`
+ * found an API (`src/config.env.ts`) and/or App (`nuxt.config.ts`).
+ * Used by `lt dev install` to decide whether an auto-init makes sense.
+ */
+function isLtDevProject(layout) {
+    return !!(layout.apiDir || layout.appDir);
+}
+/**
+ * True once `lt dev install` has set up this machine — i.e. the
+ * LaunchAgent/systemd unit file exists. This is the durable marker that
+ * install has run; whether the daemon is currently *running* is a
+ * separate concern handled by `lt dev up` / `doctor`.
+ *
+ * Always false on unsupported platforms (no service model), so the
+ * chaining never tries to install where it cannot.
+ */
+function isMachinePrepared() {
+    const paths = (0, dev_service_1.getServicePaths)();
+    return paths.platform !== 'unsupported' && (0, fs_1.existsSync)(paths.unitFile);
+}
+/**
+ * True if this project is already registered with `lt dev` (present in
+ * `~/.lenneTech/projects.json` under its slug, pointing at this root).
+ * This is the durable marker that `lt dev init` has run for the project.
+ */
+function isProjectInitialized(layout) {
+    const slug = (0, dev_identity_1.buildIdentity)(layout.root).slug;
+    const entry = (0, dev_state_1.loadRegistry)().projects[slug];
+    return !!entry && entry.path === layout.root;
+}
+/**
+ * Pure decision: should `lt dev install` run `init` AFTERWARDS? Yes only
+ * when not opted out, we're inside an lt-dev-capable project, and that
+ * project isn't initialized yet. Re-runs become no-ops once initialized.
+ */
+function shouldRunInitAfterInstall(input) {
+    return !input.skipInit && input.isProject && !input.projectInitialized;
+}
+/**
+ * Pure decision: should `lt dev init` run `install` BEFORE initializing?
+ * Yes only when not opted out, the platform supports a service model, and
+ * the machine isn't prepared yet. Re-runs become no-ops once prepared.
+ */
+function shouldRunInstallBeforeInit(input) {
+    return !input.skipInstall && input.platformSupported && !input.machinePrepared;
+}

package/build/lib/dev-env.js

@@ -35,7 +35,12 @@ function buildDevEnv(input) {
     const apiUrl = apiSub ? `https://${apiSub.hostname}` : '';
     const appUrl = appSub ? `https://${appSub.hostname}` : '';
     const caPath = (0, dev_env_bridge_1.detectCaddyRootCa)();
-    const sharedKeys = Object.assign(Object.assign(Object.assign(Object.assign({}, (apiUrl ? { BASE_URL: apiUrl, NSC__BASE_URL: apiUrl } : {})), (appUrl ? { APP_URL: appUrl, NSC__APP_URL: appUrl } : {})), (dbName ? { DATABASE_URL: buildPostgresUrl(dbName), NSC__MONGOOSE__URI: `mongodb://127.0.0.1/${dbName}` } : {})), (caPath ? { NODE_EXTRA_CA_CERTS: caPath } : {}));
+    const sharedKeys = Object.assign(Object.assign(Object.assign(Object.assign({ 
+        // Marks the API + App processes as running under `lt dev`. Consumed by the
+        // backend to relax dev-only behaviour (rate limiting, Better-Auth
+        // user-cache) so E2E suites run without a separate VITEST/PLAYWRIGHT flag.
+        // (Also written to the .lt-dev/.env bridge for external test runners.)
+        LT_DEV_ACTIVE: 'true' }, (apiUrl ? { BASE_URL: apiUrl, NSC__BASE_URL: apiUrl } : {})), (appUrl ? { APP_URL: appUrl, NSC__APP_URL: appUrl } : {})), (dbName ? { DATABASE_URL: buildPostgresUrl(dbName), NSC__MONGOOSE__URI: `mongodb://127.0.0.1/${dbName}` } : {})), (caPath ? { NODE_EXTRA_CA_CERTS: caPath } : {}));
     return {
         api: {
             env: Object.assign(Object.assign(Object.assign({}, baseEnv), sharedKeys), {