@lukoweb/apitogo 0.2.10 → 0.2.12

package/dist/cli/cli.js

@@ -7489,6 +7489,157 @@ async function removeServicesFromManifest(state, names) {
   await writeManifest(state, { ...existing, services });
 }
 
+// src/config/v2/gateway-reference.ts
+import { readFile as readFile4 } from "node:fs/promises";
+import { parse } from "yaml";
+var DEFAULT_KEY_HEADER = "Ocp-Apim-Subscription-Key";
+var METHODS = [
+  "get",
+  "put",
+  "post",
+  "delete",
+  "options",
+  "head",
+  "patch",
+  "trace"
+];
+var isObject = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+function actionKey(method, path100) {
+  const trimmed = path100.trim();
+  const withSlash = trimmed.startsWith("/") ? trimmed : `/${trimmed}`;
+  const normalized = withSlash.length > 1 ? withSlash.replace(/\/+$/, "") || "/" : withSlash;
+  return `${method.trim().toLowerCase()}:${normalized}`;
+}
+function configActionKey(entry) {
+  const match = /^\s*([A-Za-z]+)\s+(\S+)\s*$/.exec(entry);
+  return match?.[1] && match[2] ? actionKey(match[1], match[2]) : void 0;
+}
+function referenceOptions(gateway, gatewayBaseUrl, keyHeaderName) {
+  const access16 = gateway.policies.access;
+  const jwt = access16?.jwt ?? gateway.auth !== void 0;
+  const keys = (list2) => new Set(
+    (list2 ?? []).flatMap((entry) => {
+      const key = configActionKey(entry);
+      return key ? [key] : [];
+    })
+  );
+  return {
+    gatewayBaseUrl,
+    originUrl: gateway.origin.url,
+    jwtRequired: jwt && gateway.auth !== void 0,
+    oidcMetadataUrl: jwt ? gateway.auth?.metadataUrl : void 0,
+    apiKeyRequired: access16?.apiKey ?? true,
+    apiKeyHeader: keyHeaderName ?? access16?.apiKeyHeader ?? DEFAULT_KEY_HEADER,
+    publicOperations: keys(gateway.policies.operations?.public),
+    deniedOperations: keys(gateway.policies.operations?.deny)
+  };
+}
+var ReferenceSpecError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "ReferenceSpecError";
+  }
+};
+function operationsOf(paths) {
+  return Object.entries(paths).flatMap(
+    ([path100, item]) => isObject(item) ? METHODS.filter((method) => isObject(item[method])).map(
+      (method) => [path100, item, method]
+    ) : []
+  );
+}
+function buildReferenceSpec(specText, options) {
+  let root;
+  try {
+    root = parse(specText);
+  } catch {
+    throw new ReferenceSpecError("The OpenAPI file could not be read.");
+  }
+  if (!isObject(root) || typeof root.openapi !== "string")
+    throw new ReferenceSpecError("The OpenAPI file could not be read.");
+  const doc = structuredClone(root);
+  const paths = isObject(doc.paths) ? doc.paths : {};
+  for (const [path100, item, method] of operationsOf(paths))
+    if (options.deniedOperations.has(actionKey(method, path100)))
+      delete item[method];
+  for (const [path100, item] of Object.entries(paths))
+    if (!isObject(item) || !METHODS.some((method) => method in item))
+      delete paths[path100];
+  for (const [path100, item, method] of operationsOf(paths))
+    if (options.publicOperations.has(actionKey(method, path100)))
+      item[method].security = [];
+  doc.servers = [{ url: options.gatewayBaseUrl.replace(/\/+$/, "") }];
+  for (const item of Object.values(paths)) {
+    if (!isObject(item)) continue;
+    delete item.servers;
+    for (const method of METHODS) {
+      const operation = item[method];
+      if (isObject(operation)) delete operation.servers;
+    }
+  }
+  const schemes = {};
+  const requirement = {};
+  if (options.jwtRequired) {
+    schemes.bearerAuth = {
+      type: "http",
+      scheme: "bearer",
+      bearerFormat: "JWT"
+    };
+    requirement.bearerAuth = [];
+  }
+  if (options.oidcMetadataUrl)
+    schemes.openIdAuth = {
+      type: "openIdConnect",
+      openIdConnectUrl: options.oidcMetadataUrl
+    };
+  if (options.apiKeyRequired) {
+    schemes.apiKeyAuth = {
+      type: "apiKey",
+      in: "header",
+      name: options.apiKeyHeader
+    };
+    requirement.apiKeyAuth = [];
+  }
+  const components = isObject(doc.components) ? doc.components : {};
+  if (Object.keys(schemes).length > 0) components.securitySchemes = schemes;
+  else delete components.securitySchemes;
+  if (Object.keys(components).length > 0) doc.components = components;
+  else delete doc.components;
+  doc.security = Object.keys(requirement).length > 0 ? [requirement] : [];
+  for (const [, item, method] of operationsOf(paths)) {
+    const operation = item[method];
+    if (Array.isArray(operation.security) && operation.security.length > 0)
+      delete operation.security;
+  }
+  return JSON.parse(hideOrigin(JSON.stringify(doc), options));
+}
+function hideOrigin(text, options) {
+  const origin = options.originUrl?.trim().replace(/\/+$/, "");
+  if (!origin) return text;
+  const gateway = options.gatewayBaseUrl.trim().replace(/\/+$/, "");
+  const pattern = new RegExp(
+    origin.replace(/[.*+?^${}()|[\]\\/]/g, "\\$&"),
+    "gi"
+  );
+  return text.replace(pattern, () => gateway);
+}
+async function renderReferenceSpec(gateway, gatewayBaseUrl, keyHeaderName) {
+  const file = gateway.specs[0];
+  if (!file)
+    throw new ReferenceSpecError("gateway.specs lists no OpenAPI file.");
+  let text;
+  try {
+    text = await readFile4(file, "utf8");
+  } catch {
+    throw new ReferenceSpecError(`Cannot read the OpenAPI file ${file}.`);
+  }
+  const spec = buildReferenceSpec(
+    text,
+    referenceOptions(gateway, gatewayBaseUrl, keyHeaderName)
+  );
+  return `${JSON.stringify(spec, null, 2)}
+`;
+}
+
 // src/config/v2/gateway-request.ts
 function derivedCorsSites(sites) {
   const originOf = (url2) => {
@@ -7548,7 +7699,7 @@ function stableJson(value) {
 }
 
 // src/config/v2/wrapper.ts
-import { mkdir as mkdir4, readFile as readFile4, rename as rename2, rm as rm2, writeFile as writeFile5 } from "node:fs/promises";
+import { mkdir as mkdir4, readFile as readFile5, rename as rename2, rm as rm2, writeFile as writeFile5 } from "node:fs/promises";
 import path11 from "node:path";
 var WRAPPER_FILE = "apitogo.config.tsx";
 var CONTENT_LINK = "content";
@@ -7613,16 +7764,30 @@ var DEFAULT_SCOPES = ["openid", "profile", "email"];
 function planPortal(profile, manifest) {
   const skipped = [];
   const skip = (piece, reason) => void skipped.push({ piece, reason });
-  const { identity, plans } = manifest.services;
+  const { identity, plans, gateway } = manifest.services;
   const plan2 = {
     docs: profile.modules.docs,
-    apiReference: profile.pipelines.openapi,
+    apiReference: false,
     userPanel: false,
     signup: false,
     skipped,
     preview: manifest.preview === true
   };
   if (!profile.enabled) return plan2;
+  if (profile.pipelines.openapi) {
+    if (!gateway) skip("api reference", "services.json has no gateway entry");
+    else if (!serviceReady(gateway))
+      skip("api reference", `gateway is ${gateway.status}, not ready`);
+    else if (!gateway.baseUrl)
+      skip("api reference", "the gateway entry has no base URL yet");
+    else {
+      plan2.apiReference = true;
+      plan2.gatewayReference = {
+        baseUrl: gateway.baseUrl,
+        keyHeaderName: gateway.keyHeaderName
+      };
+    }
+  }
   if (!profile.console.enabled) {
     skip("console", "portal.console.enabled is false");
     return plan2;
@@ -7663,6 +7828,8 @@ function planPortal(profile, manifest) {
   return plan2;
 }
 var SITE_CONFIG_FILE = "apitogo.config.json";
+var REFERENCE_SPEC_FILE = "openapi/gateway.json";
+var API_REFERENCE_PATH = "api";
 function buildSiteConfig(resolved, plan2, theme) {
   const portal = resolved.portal;
   return {
@@ -7681,6 +7848,22 @@ function buildSiteConfig(resolved, plan2, theme) {
         )
       }
     } : {},
+    ...plan2.apiReference ? {
+      apis: [
+        {
+          type: "file",
+          input: `./${REFERENCE_SPEC_FILE}`,
+          path: API_REFERENCE_PATH
+        }
+      ],
+      navigation: [
+        {
+          type: "link",
+          to: `/${API_REFERENCE_PATH}`,
+          label: "API Reference"
+        }
+      ]
+    } : {},
     ...theme !== void 0 ? { theme } : {},
     ...plan2.auth ? { authentication: { type: "openid", ...plan2.auth } } : {},
     ...plan2.preview ? { preview: true } : {}
@@ -7714,7 +7897,7 @@ async function readTheme(resolved) {
   const file = resolved.portal?.theme;
   if (!file) return void 0;
   try {
-    return JSON.parse(await readFile4(file, "utf8"));
+    return JSON.parse(await readFile5(file, "utf8"));
   } catch {
     return void 0;
   }
@@ -7754,6 +7937,24 @@ async function preparePortal(resolved, manifest, mode, options = {}) {
     effective = { ...effective, preview: void 0, services: {} };
   }
   const plan2 = planPortal(profile, effective);
+  let referenceSpec;
+  if (plan2.apiReference && plan2.gatewayReference && resolved.gateway) {
+    try {
+      referenceSpec = await renderReferenceSpec(
+        resolved.gateway,
+        plan2.gatewayReference.baseUrl,
+        plan2.gatewayReference.keyHeaderName
+      );
+    } catch (error) {
+      if (!(error instanceof ReferenceSpecError)) throw error;
+      plan2.apiReference = false;
+      plan2.gatewayReference = void 0;
+      plan2.skipped.push({
+        piece: "api reference",
+        reason: `${error.message} The API page is left out.`
+      });
+    }
+  }
   const siteConfig = buildSiteConfig(resolved, plan2, await readTheme(resolved));
   const wrapper = renderWrapper(plan2);
   const wrapperPath = path11.join(resolved.state.generatedDir, WRAPPER_FILE);
@@ -7764,6 +7965,16 @@ async function preparePortal(resolved, manifest, mode, options = {}) {
       `${JSON.stringify(siteConfig, null, 2)}
 `
     );
+    const referenceFile = path11.join(
+      path11.dirname(wrapperPath),
+      REFERENCE_SPEC_FILE
+    );
+    if (referenceSpec !== void 0) {
+      await mkdir4(path11.dirname(referenceFile), { recursive: true });
+      await writeFile5(referenceFile, referenceSpec);
+    } else {
+      await rm2(referenceFile, { force: true });
+    }
     const temporary = `${wrapperPath}.${process.pid}.tmp`;
     try {
       await writeFile5(temporary, wrapper, "utf8");
@@ -7778,6 +7989,7 @@ async function preparePortal(resolved, manifest, mode, options = {}) {
     plan: plan2,
     wrapper,
     siteConfig,
+    referenceSpec,
     // Without a console there are no console links to offer, so a docs-only portal ships no manifest.
     publishedManifest: manifestSource === "file" && profile.console.enabled ? publishedManifest(effective, plan2) : void 0,
     wrapperPath,
@@ -7787,7 +7999,7 @@ async function preparePortal(resolved, manifest, mode, options = {}) {
 
 // src/config/v2/workspace.ts
 import { createHash as createHash2 } from "node:crypto";
-import { access as access2, lstat, readFile as readFile5, rm as rm3, symlink } from "node:fs/promises";
+import { access as access2, lstat, readFile as readFile6, rm as rm3, symlink } from "node:fs/promises";
 import path12 from "node:path";
 import { glob as glob2 } from "glob";
 var exists2 = (file) => access2(file).then(
@@ -7816,7 +8028,7 @@ async function materializeWorkspace(resolved, prepared) {
   return root;
 }
 async function configFingerprint(configPath) {
-  const text = await readFile5(configPath, "utf8");
+  const text = await readFile6(configPath, "utf8");
   try {
     const raw = JSON.parse(text);
     if (raw.project) {
@@ -7865,7 +8077,7 @@ async function portalArtifactHash(resolved, manifestText, cliVersion, wrapper =
   for (const file of files) {
     hash2.update(`file:${path12.relative(resolved.configDir, file)}
 `);
-    hash2.update(await readFile5(file));
+    hash2.update(await readFile6(file));
   }
   return hash2.digest("hex");
 }
@@ -8332,7 +8544,7 @@ async function clearProjectId(dir, projectId) {
 
 // src/config/v2/ledger.ts
 init_invariant();
-import { mkdir as mkdir6, readFile as readFile6, rename as rename4, rm as rm5, writeFile as writeFile7 } from "node:fs/promises";
+import { mkdir as mkdir6, readFile as readFile7, rename as rename4, rm as rm5, writeFile as writeFile7 } from "node:fs/promises";
 import path14 from "node:path";
 var LEDGER_VERSION = 1;
 var LedgerError = class extends ApitogoError {
@@ -8349,7 +8561,7 @@ var emptyLedger = () => ({
 async function readLedger(state) {
   let text;
   try {
-    text = await readFile6(state.file, "utf8");
+    text = await readFile7(state.file, "utf8");
   } catch (error) {
     if (error.code === "ENOENT")
       return emptyLedger();
@@ -8480,7 +8692,7 @@ init_invariant();
 
 // src/cli/check/v2.ts
 init_apitogo_config_core();
-import { readFile as readFile12 } from "node:fs/promises";
+import { readFile as readFile13 } from "node:fs/promises";
 import path46 from "node:path";
 
 // src/cli/platform/client/platform-api.ts
@@ -9164,8 +9376,8 @@ var PlatformApiClient = class {
       `/api/v1/projects/${projectId}/gateway/actions?${query.toString()}`
     );
   }
-  setGatewayActionPublic(projectId, actionKey, isPublic) {
-    const encodedKey = encodeURIComponent(actionKey);
+  setGatewayActionPublic(projectId, actionKey2, isPublic) {
+    const encodedKey = encodeURIComponent(actionKey2);
     return this.request(
       "PATCH",
       `/api/v1/projects/${projectId}/gateway/actions/${encodedKey}`,
@@ -9196,8 +9408,8 @@ var PlatformApiClient = class {
   }
 };
 async function readFileBytes(filePath) {
-  const { readFile: readFile29 } = await import("node:fs/promises");
-  const buffer = await readFile29(filePath);
+  const { readFile: readFile30 } = await import("node:fs/promises");
+  const buffer = await readFile30(filePath);
   const arrayBuffer = new ArrayBuffer(buffer.byteLength);
   new Uint8Array(arrayBuffer).set(buffer);
   return arrayBuffer;
@@ -9294,7 +9506,7 @@ function resolveProjectId(explicit, config2) {
 import {
   access as access4,
   mkdir as mkdir12,
-  readFile as readFile10,
+  readFile as readFile11,
   rename as rename6,
   rm as rm8,
   writeFile as writeFile13
@@ -9303,7 +9515,7 @@ import { createRequire as createRequire2 } from "node:module";
 import path45 from "node:path";
 
 // src/vite/build.ts
-import { mkdir as mkdir11, readFile as readFile9, rename as rename5, rm as rm7, writeFile as writeFile12 } from "node:fs/promises";
+import { mkdir as mkdir11, readFile as readFile10, rename as rename5, rm as rm7, writeFile as writeFile12 } from "node:fs/promises";
 import path44 from "node:path";
 import { build as esbuild } from "esbuild";
 import { build as viteBuild, mergeConfig as mergeConfig3 } from "vite";
@@ -9451,7 +9663,7 @@ import {
 // package.json
 var package_default = {
   name: "@lukoweb/apitogo",
-  version: "0.2.10",
+  version: "0.2.12",
   type: "module",
   sideEffects: [
     "**/*.css",
@@ -11538,15 +11750,15 @@ import { mdxFromMarkdown } from "mdast-util-mdx";
 import { mdxjs } from "micromark-extension-mdxjs";
 
 // src/lib/util/readFrontmatter.ts
-import { readFile as readFile7 } from "node:fs/promises";
+import { readFile as readFile8 } from "node:fs/promises";
 import matter from "gray-matter";
-import { parse, stringify as stringify2 } from "yaml";
+import { parse as parse2, stringify as stringify2 } from "yaml";
 var yaml = {
-  parse: (input5) => parse(input5) ?? {},
+  parse: (input5) => parse2(input5) ?? {},
   stringify: (obj) => stringify2(obj)
 };
 var readFrontmatter = async (filePath) => {
-  const content = await readFile7(filePath, "utf-8");
+  const content = await readFile8(filePath, "utf-8");
   const normalizedContent = content.replace(/\r\n/g, "\n");
   return matter(normalizedContent, { engines: { yaml } });
 };
@@ -12857,7 +13069,7 @@ var remarkInjectFilepath = (rootDir) => (tree, vfile) => {
 import { spawnSync } from "node:child_process";
 import { stat as stat6 } from "node:fs/promises";
 import { visit as visit4 } from "unist-util-visit";
-import { parse as parse2, stringify as stringify4 } from "yaml";
+import { parse as parse3, stringify as stringify4 } from "yaml";
 var isGitAvailable;
 var hasWarnedShallowClone = false;
 var checkGitAvailable = () => {
@@ -12920,7 +13132,7 @@ var remarkLastModified = () => {
     let hasYaml = false;
     visit4(tree, "yaml", (node) => {
       hasYaml = true;
-      const data = parse2(node.value) ?? {};
+      const data = parse3(node.value) ?? {};
       if (!data.lastModifiedTime) {
         data.lastModifiedTime = lastModifiedISO;
         node.value = stringify4(data).trim();
@@ -13820,7 +14032,7 @@ async function writeOutput(dir, {
 // src/vite/prerender/prerender.ts
 init_logger();
 init_file_exists();
-import { readFile as readFile8, rm as rm6 } from "node:fs/promises";
+import { readFile as readFile9, rm as rm6 } from "node:fs/promises";
 import os from "node:os";
 import path43 from "node:path";
 import { pathToFileURL } from "node:url";
@@ -14096,7 +14308,7 @@ var prerender = async ({
     );
     let markdownFileInfos = [];
     if (await fileExists(markdownInfoPath)) {
-      const markdownInfoContent = await readFile8(markdownInfoPath, "utf-8");
+      const markdownInfoContent = await readFile9(markdownInfoPath, "utf-8");
       markdownFileInfos = JSON.parse(markdownInfoContent);
     }
     if (llmsConfig.llmsTxt || llmsConfig.llmsTxtFull) {
@@ -14247,7 +14459,7 @@ var bundleSSREntry = async (options) => {
   const { dir, adapter, serverOutDir, serverConfigFilename, html, basePath } = options;
   const tempEntryPath = path44.join(dir, "__ssr-entry.ts");
   const packageRoot = getZudokuRootDir();
-  const templateContent = await readFile9(
+  const templateContent = await readFile10(
     path44.join(packageRoot, "src/vite/ssr-templates", `${adapter}.ts`),
     "utf-8"
   );
@@ -14314,7 +14526,7 @@ async function portalBuildHash(resolved, prepared) {
     resolved,
     void 0,
     getZudokuPackageJson().version,
-    prepared.wrapper + JSON.stringify(prepared.siteConfig) + JSON.stringify(prepared.publishedManifest ?? null)
+    prepared.wrapper + JSON.stringify(prepared.siteConfig) + JSON.stringify(prepared.publishedManifest ?? null) + (prepared.referenceSpec ?? "")
   );
 }
 function portalBuildStep(context, options = {}, build2 = runBuild) {
@@ -14369,7 +14581,7 @@ async function buildV2(options) {
 }
 
 // src/cli/check/gateway-online.ts
-import { readFile as readFile11 } from "node:fs/promises";
+import { readFile as readFile12 } from "node:fs/promises";
 var SPEC_SEND_LIMIT = 5 * 1024 * 1024 + 64 * 1024;
 var issue2 = (code, path100, message, hint) => ({ code, path: path100, message, hint });
 function capabilityIssues(gateway, answer) {
@@ -14425,7 +14637,7 @@ async function onlineGatewayRules(gateway, projectId, api, derivedCors = []) {
   const specFile = gateway.specs[0];
   if (specFile) {
     try {
-      const text = await readFile11(specFile, "utf8");
+      const text = await readFile12(specFile, "utf8");
       if (text.length <= SPEC_SEND_LIMIT) spec = text;
     } catch {
     }
@@ -14455,7 +14667,7 @@ async function onlineGatewayRules(gateway, projectId, api, derivedCors = []) {
 async function isConfigV2(dir) {
   try {
     return /"version"\s*:\s*2\b/.test(
-      await readFile12(path46.join(dir, APITOGO_CONFIG_FILENAME), "utf8")
+      await readFile13(path46.join(dir, APITOGO_CONFIG_FILENAME), "utf8")
     );
   } catch {
     return false;
@@ -14514,6 +14726,19 @@ async function addGatewayOnlineRules(report, resolved, args, deps) {
     "online rules ran for the gateway only; the other services have none yet"
   );
 }
+async function addApiReferenceWarning(report, resolved) {
+  const portal = resolved.portal;
+  if (!portal?.enabled || !portal.docs.enabled || portal.docs.provider !== "apitogo" || resolved.gateway?.enabled !== true)
+    return;
+  const entry = (await readManifest(resolved.state))?.services.gateway;
+  if (entry?.baseUrl && (entry.status ?? "ready") === "ready") return;
+  report.warnings.push({
+    code: "PORTAL_API_REFERENCE_SKIPPED",
+    path: "portal.docs",
+    message: "the portal's API page is left out of the build because the gateway has no address yet.",
+    hint: "Run `apitogo deploy --only gateway`, then build the portal again."
+  });
+}
 async function validatePortalBuild(dir) {
   try {
     await buildV2({ dir, force: true, jsonOnly: true });
@@ -14553,6 +14778,7 @@ async function runCheckV2(dir, args = {}, deps = {}) {
     });
     if (online.failure) report.skipped.push(online.failure);
     await addGatewayOnlineRules(report, resolved, args, deps);
+    await addApiReferenceWarning(report, resolved);
   } catch (error) {
     if (!(error instanceof ConfigError)) throw error;
     report = {
@@ -15402,7 +15628,7 @@ function formatDevPortalBackendResponse(projectId, backend) {
 // src/cli/platform/helpers/dev-portal-manifest.ts
 init_gateway_limits();
 import { existsSync as existsSync6 } from "node:fs";
-import { access as access5, mkdir as mkdir13, readFile as readFile13, writeFile as writeFile14 } from "node:fs/promises";
+import { access as access5, mkdir as mkdir13, readFile as readFile14, writeFile as writeFile14 } from "node:fs/promises";
 import path53 from "node:path";
 
 // src/cli/make-config/json-config.ts
@@ -15455,7 +15681,7 @@ function ensureHeaderPricingNavigation(config2) {
 // src/cli/make-config/json-config.ts
 var APITOGO_JSON_FILENAME = "apitogo.config.json";
 var DOCUMENTATION_NAV_LABEL = "Documentation";
-var API_REFERENCE_PATH = "/api";
+var API_REFERENCE_PATH2 = "/api";
 var API_REFERENCE_LABEL = "API Reference";
 function isPlainObject3(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
@@ -15816,7 +16042,7 @@ function isDocumentationCategory(item) {
   return typeof item === "object" && item.type === "category" && item.label === DOCUMENTATION_NAV_LABEL;
 }
 function isApiReferenceLink(item) {
-  return typeof item === "object" && item.type === "link" && item.to === API_REFERENCE_PATH;
+  return typeof item === "object" && item.type === "link" && item.to === API_REFERENCE_PATH2;
 }
 function mergeDocumentationNavigation(navigation, docRoutePaths, options) {
   const existing = Array.isArray(navigation) ? navigation : [];
@@ -15858,14 +16084,14 @@ function applyOpenApiToJsonConfig(config2, input5) {
   if (!navigation.some(isApiReferenceLink)) {
     navigation.push({
       type: "link",
-      to: API_REFERENCE_PATH,
+      to: API_REFERENCE_PATH2,
       label: API_REFERENCE_LABEL
     });
   }
   next.navigation = navigation;
   return ensureHeaderApiReferenceNavigation(
     next,
-    API_REFERENCE_PATH,
+    API_REFERENCE_PATH2,
     API_REFERENCE_LABEL
   );
 }
@@ -16702,7 +16928,7 @@ function applyOpenApiToSiteConfig(config2, options) {
 async function readManifest2(siteDirectory) {
   const filePath = manifestFilePath(siteDirectory);
   if (await pathExists(filePath)) {
-    const raw = await readFile13(filePath, "utf8");
+    const raw = await readFile14(filePath, "utf8");
     const config2 = JSON.parse(raw);
     return extractManifestFromConfig(config2);
   }
@@ -16713,7 +16939,7 @@ async function writeManifest2(siteDirectory, manifest) {
   await mkdir13(path53.dirname(filePath), { recursive: true });
   let config2 = {};
   if (await pathExists(filePath)) {
-    const raw = await readFile13(filePath, "utf8");
+    const raw = await readFile14(filePath, "utf8");
     config2 = JSON.parse(raw);
   }
   const {
@@ -16732,7 +16958,7 @@ import {
   access as access6,
   appendFile,
   mkdir as mkdir14,
-  readFile as readFile14,
+  readFile as readFile15,
   unlink,
   writeFile as writeFile15
 } from "node:fs/promises";
@@ -16838,7 +17064,7 @@ function applyEnvOverrides2(config2, env) {
 }
 async function readEnvFile(filePath) {
   try {
-    const raw = await readFile14(filePath, "utf8");
+    const raw = await readFile15(filePath, "utf8");
     const env = {};
     for (const line2 of raw.split("\n")) {
       const trimmed = line2.trim();
@@ -17015,7 +17241,7 @@ async function writeScaffoldEnv(siteDirectory) {
   for (const legacyName of [".env.example"]) {
     const legacyPath = path54.join(resolvedDirectory, legacyName);
     try {
-      const legacy = await readFile14(legacyPath, "utf8");
+      const legacy = await readFile15(legacyPath, "utf8");
       if (!envFileHasActiveAssignments(legacy)) {
         await unlink(legacyPath);
         filesWritten.push(`removed:${legacyName}`);
@@ -17026,7 +17252,7 @@ async function writeScaffoldEnv(siteDirectory) {
   const gitignorePath = path54.join(resolvedDirectory, ".gitignore");
   let gitignore = "";
   try {
-    gitignore = await readFile14(gitignorePath, "utf8");
+    gitignore = await readFile15(gitignorePath, "utf8");
   } catch {
     gitignore = "";
   }
@@ -17058,7 +17284,7 @@ var SECRETS_COLLECTION_INSTRUCTION = "For go-live, plans must already be in apit
 
 // src/cli/platform/helpers/dev-portal-site-validation.ts
 init_gateway_limits();
-import { readFile as readFile15 } from "node:fs/promises";
+import { readFile as readFile16 } from "node:fs/promises";
 import { createRequire as createRequire3 } from "node:module";
 import path55 from "node:path";
 var cachedFallbackTs;
@@ -17236,7 +17462,7 @@ async function validateDevPortalSiteConfig(sourceDirectory, options) {
     let parsed;
     let parseFailed = false;
     try {
-      parsed = JSON.parse(await readFile15(jsonPath, "utf8"));
+      parsed = JSON.parse(await readFile16(jsonPath, "utf8"));
     } catch (error) {
       parseFailed = true;
       issues.push({
@@ -17275,7 +17501,7 @@ async function validateDevPortalSiteConfig(sourceDirectory, options) {
     } else {
       for (const relativeFile of existingTsxFiles) {
         checkedFiles.push(relativeFile);
-        const content = await readFile15(
+        const content = await readFile16(
           path55.join(resolvedDir, relativeFile),
           "utf8"
         );
@@ -17313,7 +17539,7 @@ function buildSiteValidationResponseFields(result) {
 
 // src/cli/platform/helpers/npm-build.ts
 import { spawn as spawn2 } from "node:child_process";
-import { access as access7, readFile as readFile16 } from "node:fs/promises";
+import { access as access7, readFile as readFile17 } from "node:fs/promises";
 import path56 from "node:path";
 var BUILD_LOG_TAIL_BYTES = 8192;
 var MIN_NODE_MAJOR = 20;
@@ -17950,7 +18176,7 @@ var check_default = {
 
 // src/cli/make-config/handler.ts
 import { constants as constants2 } from "node:fs";
-import { access as access12, mkdir as mkdir17, readFile as readFile21, writeFile as writeFile20 } from "node:fs/promises";
+import { access as access12, mkdir as mkdir17, readFile as readFile22, writeFile as writeFile20 } from "node:fs/promises";
 import path68 from "node:path";
 import { stdin as input2 } from "node:process";
 import { glob as glob7 } from "glob";
@@ -18090,7 +18316,7 @@ function withDefaultIncludedActionKeys(plan2, actionKeys) {
 }
 
 // src/cli/scaffold/dev-portal-config-pages.ts
-import { access as access8, readFile as readFile17, rename as rename7, rm as rm9, writeFile as writeFile16 } from "node:fs/promises";
+import { access as access8, readFile as readFile18, rename as rename7, rm as rm9, writeFile as writeFile16 } from "node:fs/promises";
 import path60 from "node:path";
 async function writeConfigAtomically(filePath, content) {
   const temporaryPath = `${filePath}.${process.pid}.${Date.now()}.tmp`;
@@ -18855,7 +19081,7 @@ async function wireNewDevPortalPageInConfig(sourceDirectory, slug, label) {
   if (!configPath) {
     return { updated: false };
   }
-  const original = await readFile17(configPath, "utf8");
+  const original = await readFile18(configPath, "utf8");
   const patched = patchApitogoConfigForNewPage(original, slug, label, {
     typescript: configPath.endsWith(".tsx")
   });
@@ -18867,7 +19093,7 @@ async function wireNewDevPortalPageInConfig(sourceDirectory, slug, label) {
 }
 
 // src/cli/scaffold/wire-openapi.ts
-import { access as access10, readFile as readFile19, writeFile as writeFile18 } from "node:fs/promises";
+import { access as access10, readFile as readFile20, writeFile as writeFile18 } from "node:fs/promises";
 import path65 from "node:path";
 
 // src/cli/platform/helpers/openapi.ts
@@ -19071,7 +19297,7 @@ async function validateOpenApiFile(filePath) {
 }
 
 // src/cli/scaffold/scaffold-dev-portal-site.ts
-import { mkdir as mkdir15, readFile as readFile18, writeFile as writeFile17 } from "node:fs/promises";
+import { mkdir as mkdir15, readFile as readFile19, writeFile as writeFile17 } from "node:fs/promises";
 import path64 from "node:path";
 
 // src/cli/scaffold/apitogo-npm-packages.ts
@@ -19479,7 +19705,7 @@ function patchDashboardPageConfig(content) {
 async function ensureAccountPlansPage(outputDirectory) {
   const pagePath = path64.join(outputDirectory, ACCOUNT_PLANS_PAGE_PATH);
   try {
-    await readFile18(pagePath, "utf8");
+    await readFile19(pagePath, "utf8");
     return void 0;
   } catch {
     await mkdir15(path64.dirname(pagePath), { recursive: true });
@@ -19490,7 +19716,7 @@ async function ensureAccountPlansPage(outputDirectory) {
 async function ensureDashboardPage(outputDirectory) {
   const pagePath = path64.join(outputDirectory, DASHBOARD_PAGE_PATH);
   try {
-    await readFile18(pagePath, "utf8");
+    await readFile19(pagePath, "utf8");
     return void 0;
   } catch {
     await mkdir15(path64.dirname(pagePath), { recursive: true });
@@ -19552,7 +19778,7 @@ async function patchScaffoldedSite(outputDirectory, options) {
   const filesWritten = [];
   const packageJsonPath = path64.join(outputDirectory, "package.json");
   if (options.patchPackageJson !== false) {
-    const packageJson3 = await readFile18(packageJsonPath, "utf8");
+    const packageJson3 = await readFile19(packageJsonPath, "utf8");
     await writeFile17(
       packageJsonPath,
       rewritePackageJson(packageJson3, {
@@ -19564,7 +19790,7 @@ async function patchScaffoldedSite(outputDirectory, options) {
     filesWritten.push("package.json");
   }
   const configPath = path64.join(outputDirectory, "apitogo.config.tsx");
-  const configContent = await readFile18(configPath, "utf8");
+  const configContent = await readFile19(configPath, "utf8");
   await writeFile17(
     configPath,
     patchDashboardPageConfig(
@@ -19671,7 +19897,7 @@ async function wireDevPortalOpenApi(sourceDirectory, openApiPath) {
   }
   const jsonConfigPath = manifestFilePath(resolvedSource);
   if (await pathExists4(jsonConfigPath)) {
-    const raw = await readFile19(jsonConfigPath, "utf8");
+    const raw = await readFile20(jsonConfigPath, "utf8");
     const siteConfig = JSON.parse(raw);
     const updated = applyOpenApiToSiteConfig(siteConfig, {
       input: input5,
@@ -19685,7 +19911,7 @@ async function wireDevPortalOpenApi(sourceDirectory, openApiPath) {
     );
   } else {
     const tsxConfigPath = path65.join(resolvedSource, "apitogo.config.tsx");
-    const configContent = await readFile19(tsxConfigPath, "utf8");
+    const configContent = await readFile20(tsxConfigPath, "utf8");
     try {
       const patched = patchApitogoConfigOpenApiToFile(configContent, input5);
       await writeFile18(tsxConfigPath, patched);
@@ -20041,7 +20267,7 @@ export default function ${componentName}() {
 // src/cli/make-config/scaffold-project.ts
 init_package_json();
 import { constants } from "node:fs";
-import { access as access11, mkdir as mkdir16, readFile as readFile20, writeFile as writeFile19 } from "node:fs/promises";
+import { access as access11, mkdir as mkdir16, readFile as readFile21, writeFile as writeFile19 } from "node:fs/promises";
 import path67 from "node:path";
 import { glob as glob6 } from "glob";
 
@@ -20123,7 +20349,7 @@ async function ensurePackageJson(dir) {
 `, "utf8");
     return true;
   }
-  const raw = await readFile20(pkgPath, "utf8");
+  const raw = await readFile21(pkgPath, "utf8");
   let pkg;
   try {
     pkg = JSON.parse(raw);
@@ -20252,7 +20478,7 @@ var fileExists3 = async (filePath) => {
   }
 };
 var readJsonConfig = async (filePath) => {
-  const raw = await readFile21(filePath, "utf8");
+  const raw = await readFile22(filePath, "utf8");
   const parsed = JSON.parse(raw);
   if (!isPlainObject3(parsed)) {
     throw new Error(`${APITOGO_JSON_FILENAME} must be a JSON object.`);
@@ -20302,7 +20528,7 @@ async function persistConfig(config2, ctx) {
 `, "utf8");
   const tsxPath = path68.join(ctx.dir, "apitogo.config.tsx");
   if (await fileExists3(tsxPath) && tsxRoutes.length > 0) {
-    const tsxSource = await readFile21(tsxPath, "utf8");
+    const tsxSource = await readFile22(tsxPath, "utf8");
     if (isManagedConfigWrapper(tsxSource)) {
       await writeFile20(
         tsxPath,
@@ -21202,8 +21428,8 @@ async function waitForGatewayEntraProvision(client, projectId, options) {
     await new Promise((resolve) => setTimeout(resolve, pollIntervalMs));
   }
 }
-function normalizeActionKey(actionKey) {
-  const trimmed = actionKey.trim();
+function normalizeActionKey(actionKey2) {
+  const trimmed = actionKey2.trim();
   if (trimmed.includes(":")) {
     const [method2, ...pathParts] = trimmed.split(":");
     const path101 = pathParts.join(":").trim();
@@ -21244,10 +21470,10 @@ async function applyGatewayPublicRoutes(client, projectId, routes, options) {
     }
   }
   for (const route of routes) {
-    let actionKey;
+    let actionKey2;
     try {
       const trimmed = route.trim();
-      actionKey = trimmed.startsWith("/") ? normalizeActionKey(`GET ${trimmed}`) : normalizeActionKey(trimmed);
+      actionKey2 = trimmed.startsWith("/") ? normalizeActionKey(`GET ${trimmed}`) : normalizeActionKey(trimmed);
     } catch (error) {
       unresolved.push({
         route,
@@ -21255,23 +21481,23 @@ async function applyGatewayPublicRoutes(client, projectId, routes, options) {
       });
       continue;
     }
-    if (knownKeys && !knownKeys.has(actionKey.toLowerCase())) {
-      const message = `Action '${actionKey}' not found in gateway actions.`;
-      unresolved.push({ route, actionKey, error: message });
+    if (knownKeys && !knownKeys.has(actionKey2.toLowerCase())) {
+      const message = `Action '${actionKey2}' not found in gateway actions.`;
+      unresolved.push({ route, actionKey: actionKey2, error: message });
       warnings.push(message);
       continue;
     }
     try {
       const action = await client.setGatewayActionPublic(
         projectId,
-        actionKey,
+        actionKey2,
         true
       );
       applied.push(action);
     } catch (error) {
       const message = error instanceof Error ? error.message : String(error);
-      unresolved.push({ route, actionKey, error: message });
-      warnings.push(`Failed to set public for '${actionKey}': ${message}`);
+      unresolved.push({ route, actionKey: actionKey2, error: message });
+      warnings.push(`Failed to set public for '${actionKey2}': ${message}`);
     }
   }
   return { applied, unresolved, warnings };
@@ -21695,7 +21921,7 @@ async function upsertGatewayPlansFromManifest(client, config2, projectId, plans,
 }
 
 // src/cli/platform/helpers/openapi-gateway-servers.ts
-import { mkdir as mkdir18, readFile as readFile22, writeFile as writeFile21 } from "node:fs/promises";
+import { mkdir as mkdir18, readFile as readFile23, writeFile as writeFile21 } from "node:fs/promises";
 import path71 from "node:path";
 import YAML3 from "yaml";
 var GATEWAY_URL_ENV_KEY = "APITOGO_GATEWAY_URL";
@@ -21727,7 +21953,7 @@ async function resolveProjectGatewayUrl(client, projectId) {
   return null;
 }
 async function readOpenApiDocument(filePath) {
-  const content = await readFile22(filePath, "utf8");
+  const content = await readFile23(filePath, "utf8");
   const ext = path71.extname(filePath).toLowerCase();
   const parsed = ext === ".json" ? JSON.parse(content) : YAML3.parse(content);
   if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
@@ -21756,7 +21982,7 @@ async function pointSiteApisAtPublishOpenApi(siteDirectory, relativeInput) {
     path71.resolve(siteDirectory),
     APITOGO_CONFIG_FILENAME2
   );
-  const raw = await readFile22(configPath, "utf8");
+  const raw = await readFile23(configPath, "utf8");
   const config2 = JSON.parse(raw);
   const previousApis = config2.apis;
   const previousBackend = config2.backend;
@@ -21773,7 +21999,7 @@ async function pointSiteApisAtPublishOpenApi(siteDirectory, relativeInput) {
 `, "utf8");
   return {
     restore: async () => {
-      const currentRaw = await readFile22(configPath, "utf8");
+      const currentRaw = await readFile23(configPath, "utf8");
       const current = JSON.parse(currentRaw);
       if (previousApis === void 0) {
         delete current.apis;
@@ -21808,7 +22034,7 @@ async function prepareOpenApiServersForGatewayBuild(options) {
   );
   if (!openApiPath) {
     try {
-      const raw = await readFile22(
+      const raw = await readFile23(
         path71.join(siteDirectory, APITOGO_CONFIG_FILENAME2),
         "utf8"
       );
@@ -21834,8 +22060,8 @@ async function prepareOpenApiServersForGatewayBuild(options) {
 }
 
 // src/cli/platform/helpers/public-routes.ts
-function normalizeActionKeyFormat(actionKey) {
-  const trimmed = actionKey.trim();
+function normalizeActionKeyFormat(actionKey2) {
+  const trimmed = actionKey2.trim();
   if (trimmed.includes(":")) {
     const [method2, ...pathParts] = trimmed.split(":");
     const path101 = pathParts.join(":").trim();
@@ -21882,7 +22108,7 @@ function collectManifestPublicActionKeys(gateway) {
 }
 
 // src/cli/platform/helpers/publish-ledger.ts
-import { mkdir as mkdir19, readFile as readFile23, writeFile as writeFile22 } from "node:fs/promises";
+import { mkdir as mkdir19, readFile as readFile24, writeFile as writeFile22 } from "node:fs/promises";
 import path72 from "node:path";
 var PUBLISH_LEDGER_RELATIVE_PATH = ".apitogo/publish-state.json";
 function publishLedgerPath(siteDirectory) {
@@ -21891,7 +22117,7 @@ function publishLedgerPath(siteDirectory) {
 async function readPublishLedger(siteDirectory) {
   const filePath = publishLedgerPath(siteDirectory);
   try {
-    const raw = await readFile23(filePath, "utf8");
+    const raw = await readFile24(filePath, "utf8");
     const parsed = JSON.parse(raw);
     if (parsed?.version !== 1 || !Array.isArray(parsed.steps)) {
       return null;
@@ -24063,7 +24289,7 @@ async function resolveProjectIdForPublish(client, config2, args, wait, progress,
 import path78 from "node:path";
 
 // src/cli/platform/helpers/dev-portal-site-api-url.ts
-import { readdir as readdir3, readFile as readFile24, writeFile as writeFile23 } from "node:fs/promises";
+import { readdir as readdir3, readFile as readFile25, writeFile as writeFile23 } from "node:fs/promises";
 import path75 from "node:path";
 var SITE_API_BASE_URL_ENV_KEY = "VITE_APITOGO_AUTHENTICATION_API_BASE_URL";
 var PLACEHOLDER_HOST_MARKERS = [
@@ -24088,7 +24314,7 @@ async function readSiteApiBaseUrl(sourceDirectory) {
   const resolved = path75.resolve(sourceDirectory);
   for (const envFile of [".env", ".env.production"]) {
     try {
-      const content = await readFile24(path75.join(resolved, envFile), "utf8");
+      const content = await readFile25(path75.join(resolved, envFile), "utf8");
       const lines = [...content.matchAll(ENV_LINE_GLOBAL_RE)];
       if (lines.length === 0) {
         continue;
@@ -24119,7 +24345,7 @@ async function patchSiteApiBaseUrl(sourceDirectory, apiBaseUrl) {
   for (const envFile of [".env.production", ".env"]) {
     const envPath = path75.join(resolved, envFile);
     try {
-      const content = await readFile24(envPath, "utf8");
+      const content = await readFile25(envPath, "utf8");
       const withoutAssignments = content.replace(ENV_LINE_GLOBAL_RE, "").replace(/\n{3,}/g, "\n\n").trimEnd();
       const patched = withoutAssignments ? `${withoutAssignments}
 ${line2}
@@ -24199,7 +24425,7 @@ async function assertDeployableDistHasLiveApiBaseUrl(distDirectory, expectedApiB
   let found = false;
   let foundPlaceholder = false;
   for await (const file of walkFiles(dist)) {
-    const content = await readFile24(file, "utf8");
+    const content = await readFile25(file, "utf8");
     if (content.includes(needle)) {
       found = true;
     }
@@ -26338,7 +26564,7 @@ import path80 from "node:path";
 
 // src/cli/deploy/gateway.ts
 import { createHash as createHash4 } from "node:crypto";
-import { readFile as readFile25 } from "node:fs/promises";
+import { readFile as readFile26 } from "node:fs/promises";
 init_invariant();
 var GatewayDeployError = class extends ApitogoError {
   constructor(code, message, developerHint) {
@@ -26378,7 +26604,7 @@ async function readSpec(gateway) {
       "Add one to gateway.specs in the config."
     );
   try {
-    return await readFile25(file);
+    return await readFile26(file);
   } catch {
     throw new GatewayDeployError(
       "GATEWAY_SPEC_UNREADABLE",
@@ -27384,11 +27610,11 @@ var export_default = {
 import path87 from "node:path";
 
 // src/cli/scaffold/run-scaffold-discovery.ts
-import { access as access15, readFile as readFile28, writeFile as writeFile26 } from "node:fs/promises";
+import { access as access15, readFile as readFile29, writeFile as writeFile26 } from "node:fs/promises";
 import path86 from "node:path";
 
 // src/cli/scaffold/detect-backend.ts
-import { readdir as readdir4, readFile as readFile26 } from "node:fs/promises";
+import { readdir as readdir4, readFile as readFile27 } from "node:fs/promises";
 import path84 from "node:path";
 var DEFAULT_RUNTIME_VERSION = {
   dotnet: "DOTNET_10",
@@ -27406,7 +27632,7 @@ async function listFiles(directory) {
 }
 async function readText(filePath) {
   try {
-    return await readFile26(filePath, "utf8");
+    return await readFile27(filePath, "utf8");
   } catch {
     return void 0;
   }
@@ -27492,7 +27718,7 @@ import {
   lstat as lstat2,
   mkdir as mkdir21,
   readdir as readdir5,
-  readFile as readFile27,
+  readFile as readFile28,
   readlink,
   symlink as symlink2,
   writeFile as writeFile25
@@ -27723,7 +27949,7 @@ async function applyDocsNavigation(siteDirectory, routes) {
   if (!await pathExists5(configPath)) {
     return;
   }
-  const raw = await readFile27(configPath, "utf8");
+  const raw = await readFile28(configPath, "utf8");
   const parsed = JSON.parse(raw);
   if (!isPlainObject5(parsed)) {
     return;
@@ -27908,7 +28134,7 @@ async function pathExists6(filePath) {
 async function wireOpenApiIntoJsonConfig(siteDirectory, openApiPath) {
   const input5 = toSiteRelativeOpenApiInput(siteDirectory, openApiPath);
   const jsonConfigPath = path86.join(siteDirectory, "apitogo.config.json");
-  const raw = await readFile28(jsonConfigPath, "utf8");
+  const raw = await readFile29(jsonConfigPath, "utf8");
   const siteConfig = JSON.parse(raw);
   const updated = applyOpenApiToSiteConfig(siteConfig, {
     input: input5,
@@ -27935,7 +28161,7 @@ async function discoverAndWireOpenApiLite(siteDirectory, mode) {
   const invalidCandidates = [];
   let selected;
   for (const candidate of search.candidates) {
-    const content = await readFile28(candidate, "utf8");
+    const content = await readFile29(candidate, "utf8");
     const parsed = liteParseOpenApi(content, candidate);
     if (parsed.valid) {
       selected = {
@@ -28015,7 +28241,7 @@ async function discoverAndWireBackend(siteDirectory, mode) {
   }
   try {
     const siteConfig = JSON.parse(
-      await readFile28(jsonConfigPath, "utf8")
+      await readFile29(jsonConfigPath, "utf8")
     );
     const existing = siteConfig.backend && typeof siteConfig.backend === "object" && !Array.isArray(siteConfig.backend) ? siteConfig.backend : {};
     if (typeof existing.sourceDirectory === "string" && existing.sourceDirectory.trim()) {
@@ -28595,7 +28821,7 @@ async function createProjectV2(options, deps) {
     modules,
     wait: options.wait !== false
   });
-  const outcome = parse3(raw);
+  const outcome = parse4(raw);
   if (outcome.requiresPlatformPlanSelection) {
     throw new ProjectCreateError(
       "PLAN_NOT_SELECTED",
@@ -28626,7 +28852,7 @@ async function createProjectV2(options, deps) {
     resumed: outcome.resumed === true
   };
 }
-function parse3(raw) {
+function parse4(raw) {
   try {
     return JSON.parse(raw);
   } catch {
@@ -29774,6 +30000,7 @@ Type the project name to confirm: `
     projectId,
     projectName: name,
     status: "removed",
+    scope: "gateway",
     cleared,
     message: "The gateway was removed. The project and your local files are kept."
   };
@@ -29827,7 +30054,7 @@ async function teardownProject(argv) {
       return;
     }
     printDiagnosticsToConsole(
-      `${result.status === "removed" ? "Deleted" : "Queued deletion of"} project ${result.projectName} (${result.projectId}).`
+      result.scope === "gateway" ? `Removed the gateway of project ${result.projectName} (${result.projectId}).` : `${result.status === "removed" ? "Deleted" : "Queued deletion of"} project ${result.projectName} (${result.projectId}).`
     );
     if (result.cleared.length > 0)
       printDiagnosticsToConsole(