@luxmargos/ensure-hosts 0.1.0

package/README.md

@@ -0,0 +1,285 @@
+# @luxmargos/ensure-hosts
+
+Manage local hosts-file entries on macOS, Linux, and Windows from small YAML profiles.
+
+`ensure-hosts` expands a YAML file into hosts-file records, removes stale records for the same domains when requested, and appends the current records. It is useful for local development domains such as `api.myapp.test`, `admin.myapp.test`, and other repeatable project setup.
+
+## Why use it?
+
+- Keep project hostnames in versioned YAML instead of editing `/etc/hosts` by hand.
+- Re-run the same command safely when project IPs or domains change.
+- Preview changes before writing with `--dry-run`.
+- Remove a profile's entries when you no longer need them.
+- Share one base config plus project-specific configs.
+
+## Requirements
+
+- Node.js 20 or newer
+- Permission to write the system hosts file when not using `--dry-run`
+
+Default hosts-file locations:
+
+- Linux/macOS: `/etc/hosts`
+- Windows: `%SystemRoot%\System32\drivers\etc\hosts`
+
+## Install
+
+```sh
+npm install -g @luxmargos/ensure-hosts
+```
+
+Then check the CLI is available:
+
+```sh
+ensure-hosts --version
+```
+
+## Quick start
+
+1. Create a config file, for example `hosts.local.yaml`:
+
+   ```yaml
+   profile: MYAPP_LOCAL
+   hosts:
+     - domain: myapp.test
+       address: 127.0.0.1
+       children:
+         - api
+         - admin
+   ```
+
+2. Preview what would be written:
+
+   ```sh
+   ensure-hosts --config ./hosts.local.yaml --dry-run
+   ```
+
+3. Apply the changes:
+
+   ```sh
+   ensure-hosts --config ./hosts.local.yaml
+   ```
+
+   On macOS and Windows, the CLI can prompt for administrator permission when needed. On Linux, run with `sudo` if your user cannot write `/etc/hosts`:
+
+   ```sh
+   sudo ensure-hosts --config ./hosts.local.yaml
+   ```
+
+The example above writes records like:
+
+```txt
+# MYAPP_LOCAL
+127.0.0.1 myapp.test
+# MYAPP_LOCAL
+127.0.0.1 api.myapp.test
+# MYAPP_LOCAL
+127.0.0.1 admin.myapp.test
+```
+
+## Common commands
+
+```sh
+# Use one config
+ensure-hosts --config ./hosts.local.yaml
+
+# Layer multiple configs
+ensure-hosts --config ./base.yaml --config ./project.yaml
+
+# Preview the final hosts file without writing
+ensure-hosts --config ./hosts.local.yaml --dry-run
+
+# Print the expanded records only
+ensure-hosts --config ./hosts.local.yaml --print-records
+
+# Remove entries managed by rewrite:true records
+ensure-hosts --config ./hosts.local.yaml --remove
+
+# Remove every domain listed by the config, including rewrite:false records
+ensure-hosts --config ./hosts.local.yaml --remove-force
+```
+
+## Configuration reference
+
+A config file must be `.yaml` or `.yml` and contain:
+
+```yaml
+profile: PROFILE_NAME
+hosts:
+  - domain: some.domain.test
+    address: 192.168.1.111
+    rewrite: true
+    skipSelf: false
+    children:
+      - sitea
+      - domain: siteb
+        address: ::1
+```
+
+Fields:
+
+| Field | Required? | Description |
+| --- | --- | --- |
+| `profile` | Yes | Label written as a comment above generated entries, for example `# MYAPP_LOCAL`. |
+| `hosts` | Yes | Array of host entries. |
+| `domain` | Yes | Domain name. Inside `children`, this can be a relative subdomain such as `api`. |
+| `address` | For records you want written | IPv4 or IPv6 address. Children inherit the parent address unless they set their own. |
+| `rewrite` | No | Whether existing entries for the same domain may be cleaned before appending. Defaults to `true`. Children inherit the parent value. |
+| `skipSelf` | No | Skip writing this node while still processing its children. Defaults to `false`. |
+| `children` | No | Nested subdomains as strings or full objects. |
+
+### Child domains
+
+Child strings inherit the parent address and `rewrite` value:
+
+```yaml
+profile: LOCAL
+hosts:
+  - domain: example.test
+    address: 127.0.0.1
+    children:
+      - api
+      - admin
+```
+
+This writes:
+
+- `example.test`
+- `api.example.test`
+- `admin.example.test`
+
+If a child already contains the full parent domain, it is not duplicated. For example, `api.example.test` stays `api.example.test`.
+
+### `skipSelf` example
+
+Use `skipSelf: true` when you only want child records:
+
+```yaml
+profile: LOCAL
+hosts:
+  - domain: example.test
+    address: 127.0.0.1
+    skipSelf: true
+    children:
+      - api
+      - admin
+```
+
+This writes `api.example.test` and `admin.example.test`, but not `example.test`.
+
+## How rewriting works
+
+By default, `rewrite` is `true`.
+
+With `rewrite: true`, `ensure-hosts`:
+
+1. Removes existing hosts entries for the same domain.
+2. Removes stale adjacent `# PROFILE_NAME` comments left by previous runs.
+3. Appends the current generated entry when an address is available.
+
+With `rewrite: false`, `ensure-hosts`:
+
+1. Leaves existing entries for the same domain untouched.
+2. Appends the generated entry only if that domain is not already present.
+
+Entries without an effective `address` are not written. If their effective `rewrite` value is `true`, matching existing entries can still be cleaned.
+
+## Remove mode
+
+Use remove mode when you want to uninstall entries from a profile instead of ensuring them.
+
+```sh
+ensure-hosts --config ./hosts.local.yaml --remove
+ensure-hosts --config ./hosts.local.yaml --remove-force
+ensure-hosts --config ./hosts.local.yaml --remove --dry-run
+```
+
+- `--remove` removes domains whose effective `rewrite` value is `true`. Domains marked `rewrite: false` are left untouched.
+- `--remove-force` removes every domain listed by the config, including `rewrite: false` domains.
+
+`--remove` and `--remove-force` cannot be used together, and neither can be combined with `--print-records`.
+
+## Environment variables
+
+The CLI automatically loads `.env` from the current working directory. Missing `.env` files and missing environment variables are ignored.
+
+You can provide config paths with `ENSURE_HOSTS_CONFIG` instead of `--config`:
+
+```dotenv
+ENSURE_HOSTS_CONFIG=./hosts.local.yaml,./another.yaml
+```
+
+You can also override the hosts file path, which is useful for tests or custom workflows:
+
+```dotenv
+ENSURE_HOSTS_HOSTS_FILE=./tmp-hosts
+```
+
+To disable macOS/Windows elevation prompts:
+
+```dotenv
+ENSURE_HOSTS_NO_ELEVATE=true
+```
+
+Use `--env-file <path>` if your dotenv file is not named `.env`.
+
+## CLI options
+
+```txt
+--config <path>      YAML/YML config file path (repeatable)
+--env-file <path>    dotenv file path (default: .env)
+--hosts-file <path>  override hosts file path
+--dry-run            print rewritten hosts content without writing
+--print-records      print expanded records and exit
+--remove             remove rewrite:true domains (respects rewrite:false)
+--remove-force       remove all listed domains, including rewrite:false
+--no-elevate         disable macOS/Windows privilege prompt
+--help               show help
+--version            show version
+```
+
+Notes:
+
+- On Linux, `--no-elevate` is effectively a no-op because Linux does not use an in-process elevation prompt. Run the command with `sudo` when needed.
+- Use `--hosts-file` or `ENSURE_HOSTS_HOSTS_FILE` to test against a temporary file instead of the real hosts file.
+
+## Development
+
+Install dependencies:
+
+```sh
+npm install
+```
+
+Run checks:
+
+```sh
+npm test
+npm run typecheck
+npm run build
+```
+
+The repository also includes a Docker-based Linux test harness (`Dockerfile.linux-test` and `compose.linux-test.yaml`). These files are for testing only, not production.
+
+```sh
+# Run the unit test suite in a Linux container
+docker compose -f compose.linux-test.yaml run --rm test
+
+# Typecheck and build
+docker compose -f compose.linux-test.yaml run --rm typecheck
+docker compose -f compose.linux-test.yaml run --rm build
+
+# Exercise CLI scenarios
+docker compose -f compose.linux-test.yaml run --rm dry-run
+docker compose -f compose.linux-test.yaml run --rm print-records
+docker compose -f compose.linux-test.yaml run --rm root-write
+docker compose -f compose.linux-test.yaml run --rm etc-hosts-write
+docker compose -f compose.linux-test.yaml run --rm non-root-fail
+docker compose -f compose.linux-test.yaml run --rm remove
+```
+
+The `root-write`, `non-root-fail`, and `remove` services use `--hosts-file /tmp/test-hosts`, so the real `/etc/hosts` is not modified. The `etc-hosts-write` service writes to the container's ephemeral `/etc/hosts`, not your host machine.
+
+## License
+
+MIT

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/cli.js

@@ -0,0 +1,144 @@
+#!/usr/bin/env node
+import { appendFileSync, readFileSync, writeFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { buildElevationArgs, loadDefaultEnv, loadProfiles, parseCliOptions, resolveConfigPaths, resolveHostsFileOverride, resolveNoElevate, } from './config.js';
+import { expandProfiles } from './domain-map.js';
+import { removeHostsContent, rewriteHostsContent } from './hosts.js';
+import { elevatedCommandHint, elevationHandled, notifyRootWrite, resolveDefaultHostsPath, tryElevate } from './platform.js';
+async function main() {
+    const options = parseCliOptions(process.argv.slice(2));
+    if (options.outputFile) {
+        redirectConsoleToFile(options.outputFile);
+    }
+    loadDefaultEnv(options.envFile);
+    const configPaths = resolveConfigPaths(options);
+    const profiles = loadProfiles(configPaths);
+    const expandedProfiles = expandProfiles(profiles);
+    if (options.printRecords) {
+        printRecords(expandedProfiles);
+        return;
+    }
+    if (options.remove || options.removeForce) {
+        return runRemove(options, configPaths, expandedProfiles);
+    }
+    const hostsFile = resolveHostsFileOverride(options) ?? resolveDefaultHostsPath();
+    const hostsContent = readFileSync(hostsFile, 'utf8');
+    const result = rewriteHostsContent(hostsContent, expandedProfiles);
+    if (options.dryRun) {
+        process.stdout.write(result.content);
+        return;
+    }
+    if (result.content === hostsContent) {
+        console.log('[ensure-hosts] hosts file is already up to date.');
+        return;
+    }
+    try {
+        notifyRootWrite(hostsFile);
+        writeFileSync(hostsFile, result.content, 'utf8');
+    }
+    catch (error) {
+        if (isPermissionError(error)) {
+            const elevated = tryElevate({
+                scriptPath: fileURLToPath(import.meta.url),
+                args: buildElevationArgs(options, configPaths),
+                cwd: process.cwd(),
+                noElevate: resolveNoElevate(options),
+                elevated: options.elevated,
+                dryRun: options.dryRun,
+                printRecords: options.printRecords,
+                filePath: hostsFile,
+                content: result.content,
+            });
+            if (elevationHandled(elevated)) {
+                return;
+            }
+            throw new Error([
+                `Permission denied while writing hosts file: ${hostsFile}`,
+                'Run again with administrator/root privileges.',
+                elevatedCommandHint(`ensure-hosts --config ${configPaths.join(' --config ')}`),
+            ].join('\n'));
+        }
+        throw error;
+    }
+    console.log(`[ensure-hosts] updated ${hostsFile}: appended ${result.appended.length}, cleaned ${result.removedDomains.length}.`);
+}
+function runRemove(options, configPaths, expandedProfiles) {
+    const force = options.removeForce;
+    const hostsFile = resolveHostsFileOverride(options) ?? resolveDefaultHostsPath();
+    const hostsContent = readFileSync(hostsFile, 'utf8');
+    const result = removeHostsContent(hostsContent, expandedProfiles, { force });
+    if (options.dryRun) {
+        process.stdout.write(result.content);
+        return;
+    }
+    if (result.content === hostsContent) {
+        console.log('[ensure-hosts] hosts file has no matching entries to remove.');
+        return;
+    }
+    try {
+        notifyRootWrite(hostsFile);
+        writeFileSync(hostsFile, result.content, 'utf8');
+    }
+    catch (error) {
+        if (isPermissionError(error)) {
+            const elevated = tryElevate({
+                scriptPath: fileURLToPath(import.meta.url),
+                args: buildElevationArgs(options, configPaths),
+                cwd: process.cwd(),
+                noElevate: resolveNoElevate(options),
+                elevated: options.elevated,
+                dryRun: options.dryRun,
+                printRecords: options.printRecords,
+                filePath: hostsFile,
+                content: result.content,
+            });
+            if (elevationHandled(elevated)) {
+                return;
+            }
+            const modeFlag = force ? '--remove-force' : '--remove';
+            throw new Error([
+                `Permission denied while writing hosts file: ${hostsFile}`,
+                'Run again with administrator/root privileges.',
+                elevatedCommandHint(`ensure-hosts --config ${configPaths.join(' --config ')} ${modeFlag}`),
+            ].join('\n'));
+        }
+        throw error;
+    }
+    const modeLabel = force ? ' (force)' : '';
+    console.log(`[ensure-hosts] removed ${result.removedDomains.length} domain(s) from ${hostsFile}${modeLabel}.`);
+}
+function printRecords(expandedProfiles) {
+    for (const profile of expandedProfiles) {
+        for (const record of profile.records) {
+            console.log(`${record.address}\t${record.domain}\t# ${record.profile}\trewrite=${record.rewrite}`);
+        }
+    }
+}
+function redirectConsoleToFile(filePath) {
+    const write = (text) => appendFileSync(filePath, text);
+    const line = (args) => `${args.map(arg => (typeof arg === 'string' ? arg : String(arg))).join(' ')}\n`;
+    console.log = (...args) => write(line(args));
+    console.info = console.log;
+    console.warn = (...args) => write(line(args));
+    console.error = (...args) => write(line(args));
+    process.stdout.write = ((chunk) => {
+        write(typeof chunk === 'string' ? chunk : chunk.toString());
+        return true;
+    });
+    process.stderr.write = ((chunk) => {
+        write(typeof chunk === 'string' ? chunk : chunk.toString());
+        return true;
+    });
+}
+function isPermissionError(error) {
+    return (typeof error === 'object' &&
+        error !== null &&
+        'code' in error &&
+        (error.code === 'EACCES' || error.code === 'EPERM'));
+}
+main().catch(error => {
+    const message = error instanceof Error ? error.message : String(error);
+    console.error(`[ensure-hosts] ${message}`);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,eAAe,EAAE,uBAAuB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAG5H,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,qBAAqB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC;IAED,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,gBAAgB,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAElD,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,YAAY,CAAC,gBAAgB,CAAC,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC,OAAO,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,SAAS,GAAG,wBAAwB,CAAC,OAAO,CAAC,IAAI,uBAAuB,EAAE,CAAC;IACjF,MAAM,YAAY,GAAG,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,mBAAmB,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;IAEnE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO;IACT,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;QAChE,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,eAAe,CAAC,SAAS,CAAC,CAAC;QAC3B,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,UAAU,CAAC;gBAC1B,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC1C,IAAI,EAAE,kBAAkB,CAAC,OAAO,EAAE,WAAW,CAAC;gBAC9C,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;gBAClB,SAAS,EAAE,gBAAgB,CAAC,OAAO,CAAC;gBACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC,CAAC;YACH,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,OAAO;YACT,CAAC;YACD,MAAM,IAAI,KAAK,CACb;gBACE,+CAA+C,SAAS,EAAE;gBAC1D,+CAA+C;gBAC/C,mBAAmB,CAAC,yBAAyB,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;aAC/E,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,0BAA0B,SAAS,cAAc,MAAM,CAAC,QAAQ,CAAC,MAAM,aAAa,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;AACnI,CAAC;AAED,SAAS,SAAS,CAAC,OAAmB,EAAE,WAAqB,EAAE,gBAAmD;IAChH,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC;IAClC,MAAM,SAAS,GAAG,wBAAwB,CAAC,OAAO,CAAC,IAAI,uBAAuB,EAAE,CAAC;IACjF,MAAM,YAAY,GAAG,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,kBAAkB,CAAC,YAAY,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAE7E,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO;IACT,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;QAC5E,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,eAAe,CAAC,SAAS,CAAC,CAAC;QAC3B,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,UAAU,CAAC;gBAC1B,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC1C,IAAI,EAAE,kBAAkB,CAAC,OAAO,EAAE,WAAW,CAAC;gBAC9C,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;gBAClB,SAAS,EAAE,gBAAgB,CAAC,OAAO,CAAC;gBACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC,CAAC;YACH,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC;YACvD,MAAM,IAAI,KAAK,CACb;gBACE,+CAA+C,SAAS,EAAE;gBAC1D,+CAA+C;gBAC/C,mBAAmB,CAAC,yBAAyB,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,QAAQ,EAAE,CAAC;aAC3F,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1C,OAAO,CAAC,GAAG,CACT,0BAA0B,MAAM,CAAC,cAAc,CAAC,MAAM,mBAAmB,SAAS,GAAG,SAAS,GAAG,CAClG,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,gBAAmD;IACvE,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,MAAM,OAAO,MAAM,CAAC,OAAO,aAAa,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,MAAM,KAAK,GAAG,CAAC,IAAY,EAAQ,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,CAAC,IAAe,EAAU,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;IAC1H,OAAO,CAAC,GAAG,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC;IAC3B,OAAO,CAAC,IAAI,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,KAAK,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAA0B,EAAW,EAAE;QAC9D,KAAK,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC,CAAgC,CAAC;IAClC,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAA0B,EAAW,EAAE;QAC9D,KAAK,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC,CAAgC,CAAC;AACpC,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACf,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CACpD,CAAC;AACJ,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;IACnB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,CAAC,KAAK,CAAC,kBAAkB,OAAO,EAAE,CAAC,CAAC;IAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,21 @@
+import type { CliOptions, ProfileConfig } from './types.js';
+export declare function parseCliOptions(argv: string[]): CliOptions;
+export declare function loadDefaultEnv(envFile: string): void;
+export declare function resolveConfigPaths(options: CliOptions, env?: NodeJS.ProcessEnv): string[];
+export declare function resolveHostsFileOverride(options: CliOptions, env?: NodeJS.ProcessEnv): string | undefined;
+export declare function resolveNoElevate(options: CliOptions, env?: NodeJS.ProcessEnv): boolean;
+/**
+ * Rebuild the CLI args for an elevated child process from already-resolved
+ * (absolute) paths. The elevated re-spawn runs in a different working
+ * directory than the parent (osascript's `do shell script` starts in `/`),
+ * so any relative path the user passed would fail to resolve in the child.
+ * Passing absolute paths fixes that without changing the public CLI surface.
+ *
+ * Elevation-only flags (`--no-elevate`, `--elevated`) and `--output-file`
+ * (Windows elevated-output plumbing) are intentionally omitted: the child is
+ * re-elevated/redirected by the elevation layer itself, not by these flags.
+ */
+export declare function buildElevationArgs(options: CliOptions, configPaths: string[]): string[];
+export declare function loadProfiles(configPaths: string[]): ProfileConfig[];
+export declare function loadProfile(configPath: string): ProfileConfig;
+export declare function usage(): string;