@mesh-tech/mesh-cli 0.1.0 → 0.12.0

package/dist/src/commands/dev-doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-doctor.js","sourceRoot":"","sources":["../../../src/commands/dev-doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEtC,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAkB,MAAM,YAAY,CAAC;AA6CnF,+EAA+E;AAC/E,4BAA4B;AAC5B,+EAA+E;AAE/E,+EAA+E;AAC/E,MAAM,UAAU,eAAe,CAAC,OAAsB;IACpD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9D,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC5D,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAkB,EAClB,KAAiB,EACjB,MAAe;IAEf,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,OAAO,OAAO,CAAC,GAAG,CAChB,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC7B,IAAI,CAAC;YACH,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO;gBACL,KAAK;gBACL,MAAM,EAAE;oBACN,MAAM,EAAE,OAAgB;oBACxB,OAAO,EAAE,UAAU,KAAK,CAAC,EAAE,YAAY,GAAG,EAAE;iBAC7C;aACF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,KAAK,GAAgC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAE9E,8EAA8E;AAC9E,MAAM,UAAU,WAAW,CACzB,OAAqD;IAErD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACzE,IAAI,MAAM,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACtD,IAAI,MAAM,CAAC,WAAW;YAAE,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,UAAU,CACxB,OAAqD;IAErD,OAAO,IAAI,CAAC,SAAS,CACnB;QACE,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;YAC1C,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,8DAA8D;YAC9D,qDAAqD;YACrD,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;YACvC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;SAC9B,CAAC,CAAC;KACJ,EACD,IAAI,EACJ,CAAC,CACF,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,mCAAmC;AACnC,+EAA+E;AAE/E,2EAA2E;AAC3E,SAAS,MAAM,CAAC,OAAe;IAC7B,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACnC,0EAA0E;IAC1E,mCAAmC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,QAAQ,GAAG,EAAE,CAAC;IACxB,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAClD,OAAO,GAAG,CAAC,GAAG,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAgB,EAChB,OAAe,EACf,QAAiB;IAEjB,MAAM,QAAQ,GAAG,cAAc,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACvE,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;QACpB,KAAK,IAAI;YACP,OAAO;gBACL,MAAM,EAAE,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;gBAC9C,OAAO,EAAE,wBAAwB,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACpG,MAAM,EAAE,WAAW,KAAK,CAAC,SAAS,EAAE;aACrC,CAAC;QACJ,KAAK,YAAY;YACf,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,0BAA0B,OAAO,EAAE;gBAC5C,WAAW,EAAE,QAAQ;aACtB,CAAC;QACJ,KAAK,iBAAiB;YACpB,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,uBAAuB,OAAO,gCAAgC;gBACvE,WAAW,EAAE,QAAQ;aACtB,CAAC;QACJ,KAAK,eAAe;YAClB,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,6DAA6D;gBACtE,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,WAAW,EAAE,2GAA2G,QAAQ,EAAE;aACnI,CAAC;QACJ,KAAK,oBAAoB;YACvB,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,OAAO,EACL,uEAAuE;gBACzE,WAAW,EACT,iEAAiE;aACpE,CAAC;IACN,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAU;IAC/B,EAAE,EAAE,OAAO;IACX,KAAK,EAAE,aAAa;IACpB,MAAM,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;IACjC,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,yEAAyE;QACzE,qEAAqE;QACrE,2EAA2E;QAC3E,+BAA+B;QAC/B,QAAQ,GAAG,CAAC,UAAU,EAAE,CAAC;YACvB,KAAK,KAAK;gBACR,OAAO;oBACL,MAAM,EAAE,IAAI;oBACZ,OAAO,EAAE,yDAAyD;iBACnE,CAAC;YACJ,KAAK,aAAa;gBAChB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;YAC7E,KAAK,SAAS;gBACZ,OAAO;oBACL,MAAM,EAAE,IAAI;oBACZ,OAAO,EACL,sEAAsE;iBACzE,CAAC;QACN,CAAC;QACD,uEAAuE;QACvE,kDAAkD;QAClD,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YAC9C,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,OAAO,EACL,mEAAmE;gBACrE,MAAM,EACJ,gFAAgF;aACnF,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;QAC5E,OAAO,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,eAAe,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAC9E,CAAC;CACF,CAAC;AAEF,+EAA+E;AAC/E,4DAA4D;AAC5D,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,aAAa,GAAU;IAClC,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,eAAe;IACtB,MAAM,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;IACjC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK;QAClB,iEAAiE;QACjE,kEAAkE;QAClE,gEAAgE;QAChE,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACjG,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;YACpB,KAAK,OAAO;gBACV,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,wDAAwD,EAAE,CAAC;YAC7F,KAAK,SAAS;gBACZ,OAAO;oBACL,MAAM,EAAE,MAAM;oBACd,OAAO,EACL,0FAA0F;oBAC5F,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,WAAW,EAAE,gBAAgB,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS,CAAC;iBAChE,CAAC;YACJ,KAAK,aAAa;gBAChB,OAAO;oBACL,MAAM,EAAE,IAAI;oBACZ,OAAO,EAAE,mEAAmE;oBAC5E,MAAM,EAAE,KAAK,CAAC,MAAM;iBACrB,CAAC;YACJ,KAAK,SAAS;gBACZ,OAAO,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC;oBACrC,CAAC,CAAC;wBACE,MAAM,EAAE,MAAM;wBACd,OAAO,EACL,kHAAkH;wBACpH,WAAW,EAAE,gBAAgB,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS,CAAC;qBAChE;oBACH,CAAC,CAAC;wBACE,MAAM,EAAE,IAAI;wBACZ,OAAO,EAAE,8EAA8E;qBACxF,CAAC;QACV,CAAC;IACH,CAAC;CACF,CAAC;AAEF,+EAA+E;AAC/E,gCAAgC;AAChC,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,KAAa;IAEb,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IACxD,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAC9B,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACjE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAC1B,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,kBAAkB,CAChC,UAAkB,EAClB,QAAgB;IAEhB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,OAAO,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;AACzD,CAAC;AAKD;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAClC,WAA0B,EAC1B,WAAgC;IAEhC,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IACxC,OAAO,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAkB,EAClB,KAAa;IAEb,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,SAAS;QAChE,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,EAAY,CAAC;QACpC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC9B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,6EAA6E;AAC7E,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE;YACrD,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAC/C,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,IAAI,EAAE,GAAG,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE;gBAClD,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;aACpC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,2DAA2D;QAC7D,CAAC;QACD,OAAO,iBAAiB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,WAAmB;IAC7C,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CACtB,MAAM,EACN,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,CAAC,EAC5D,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAC1D,CAAC;QACF,QAAQ,GAAG,GAAG;aACX,IAAI,EAAE;aACN,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;aAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC5C,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,CAAC;QACH,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE;YAChD,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,MAAM,SAAS,GAAU;IAC9B,EAAE,EAAE,MAAM;IACV,KAAK,EAAE,MAAM;IACb,MAAM,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;IACjC,KAAK,CAAC,GAAG;QACP,IAAI,CAAC;YACH,YAAY,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YACrD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,uBAAuB;gBAChC,WAAW,EAAE,mBAAmB;aACjC,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAU;IAC/B,EAAE,EAAE,OAAO;IACX,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;IACjC,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,QAAQ,CAAC;QACtD,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,yEAAyE;YACzE,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,mDAAmD;aAC7D,CAAC;QACJ,CAAC;QACD,sEAAsE;QACtE,4EAA4E;QAC5E,gEAAgE;QAChE,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,OAAO,GAAa,EAAE,CAAC,CAAC,wCAAwC;QACtE,MAAM,IAAI,GAAa,EAAE,CAAC,CAAC,4CAA4C;QACvE,MAAM,OAAO,GAAa,EAAE,CAAC,CAAC,8CAA8C;QAC5E,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,SAAS,GAAG,oBAAoB,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,EAAE,WAAW,CAAC,CAAC;YACtE,IAAI,SAAS,KAAK,OAAO;gBAAE,SAAS;YACpC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,GAAG,CAAC,IAAI,YAAY,GAAI,CAAC,OAAO,SAAS,GAAI,CAAC,GAAG,GAAG,CAAC,CAAC;gBAC/E,SAAS;YACX,CAAC;YACD,iEAAiE;YACjE,wEAAwE;YACxE,wBAAwB;YACxB,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,GAAG,CAAC,IAAI,gBAAgB,CAAC,CAAC;YAClD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,GAAG,CAAC,IAAI,yBAAyB,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;QAC3C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtE,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,OAAO,KAAK,wCAAwC;aAC9D,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,8BAA8B,CAAC,CAAC;QAChF,IAAI,IAAI,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,+BAA+B,CAAC,CAAC;QAC3E,IAAI,OAAO,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,oCAAoC,CAAC,CAAC;QACtF,MAAM,WAAW,GACf,OAAO,CAAC,MAAM,GAAG,CAAC;YAChB,CAAC,CAAC,+EAA+E;YACjF,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;gBACf,CAAC,CAAC,uDAAuD;gBACzD,CAAC,CAAC,4EAA4E,CAAC;QACrF,OAAO;YACL,8DAA8D;YAC9D,mDAAmD;YACnD,MAAM,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;YAChE,OAAO,EAAE,kBAAkB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC7C,MAAM,EAAE,CAAC,GAAG,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACpD,WAAW;SACZ,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,+EAA+E;AAC/E,6CAA6C;AAC7C,+EAA+E;AAE/E,8EAA8E;AAC9E,MAAM,UAAU,aAAa,CAC3B,aAAqB,EACrB,YAAoB;IAEpB,OAAO,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAU;IACzC,6EAA6E;IAC7E,uCAAuC;IACvC,EAAE,EAAE,kBAAkB;IACtB,KAAK,EAAE,kBAAkB;IACzB,MAAM,EAAE,CAAC,UAAU,CAAC;IACpB,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;QAC/E,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,GAAG,CAAC,KAAK,OAAO,CAAC,CAAC;QACtE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,aAAa,GAAG,CAAC,KAAK,kBAAkB;aAClD,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC;QAChD,IAAI,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5C,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,UAAU,GAAG,CAAC,KAAK,2DAA2D;gBACvF,MAAM,EAAE,gBAAgB,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,oBAAoB,KAAK,CAAC,SAAS,EAAE;gBAC5F,WAAW,EAAE,0BAA0B,GAAG,CAAC,KAAK,cAAc;aAC/D,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;IAC1E,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAU;IAClC,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;IACjC,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,QAAQ,CAAC;QACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;QAC9E,CAAC;QACD,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE;gBAC/D,GAAG,EAAE,GAAG,CAAC,OAAO;gBAChB,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;aACpC,CAAC,CAAC,IAAI,EAAE,CAAC;QACZ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,iDAAiD;aAC3D,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;aACrC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;aACtE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QAChD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,8BAA8B,QAAQ,EAAE;aAClD,CAAC;QACJ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,wFAAwF;YAClH,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1B,WAAW,EAAE,uEAAuE;SACrF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,+EAA+E;AAC/E,4CAA4C;AAC5C,+EAA+E;AAE/E,oFAAoF;AACpF,MAAM,UAAU,UAAU,CACxB,IAAY,EACZ,IAAY,EACZ,SAAS,GAAG,GAAG;IAEf,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAChC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,IAAI,GAAG,CAAC,EAAW,EAAE,EAAE;YAC3B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,EAAE,CAAC,CAAC;QACd,CAAC,CAAC;QACF,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAU;IACjC,0EAA0E;IAC1E,yEAAyE;IACzE,EAAE,EAAE,SAAS;IACb,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE,CAAC,UAAU,CAAC;IACpB,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,OAAO,CAAC;QACpD,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;QACjE,CAAC;QACD,4EAA4E;QAC5E,0EAA0E;QAC1E,+CAA+C;QAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,yCAAyC;aACjF,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,qBAAqB,EAAE,CAAC;QACzE,CAAC;QACD,OAAO;YACL,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,qBAAqB;YAC5C,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YACvB,WAAW,EAAE,8CAA8C;SAC5D,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAU;IAClC,yEAAyE;IACzE,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE,CAAC,UAAU,CAAC;IACpB,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC;QAC/B,MAAM,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC;YACjB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;QACzE,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACxC,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,oCAAoC,IAAI,EAAE;gBACnD,WAAW,EAAE,2CAA2C;aACzD,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC;QACnC,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACf,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,yBAAyB,IAAI,sBAAsB,EAAE,CAAC;QACxF,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YAC1D,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;gBAC1C,OAAO,EAAE,IAAI;gBACb,cAAc,EAAE,IAAI;aACrB,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,UAAU,CAAC,eAAe,CAAC,iBAAiB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;gBAClE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,iCAAiC,SAAS,UAAU,EAAE,CAAC;YACzF,CAAC;oBAAS,CAAC;gBACT,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAAyB,CAAC,IAAI,CAAC;YAC7C,qEAAqE;YACrE,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,OAAO;oBACL,MAAM,EAAE,OAAO;oBACf,OAAO,EAAE,aAAa,SAAS,0BAA0B;oBACzD,WAAW,EAAE,kEAAkE,GAAG,CAAC,KAAK,GAAG;iBAC5F,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;gBAC9B,OAAO;oBACL,MAAM,EAAE,IAAI;oBACZ,OAAO,EAAE,iCAAiC,SAAS,4BAA4B;iBAChF,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,gDAAgD;gBACzD,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACzD,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC;AAEF,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E,oCAAoC;AACpC,MAAM,CAAC,MAAM,UAAU,GAAY;IACjC,SAAS;IACT,UAAU;IACV,aAAa;IACb,oBAAoB;IACpB,UAAU;IACV,aAAa;IACb,YAAY;IACZ,aAAa;CACd,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAkB,EAClB,IAAuB;IAEvB,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IACnC,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,aAAa,MAAM,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/commands/dev-launch.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Helpers for launching `mesh dev` services via per-session env files.
+ *
+ * Background: `mesh dev` used to inline every env var into a single giant
+ * `env K1=V1 K2=V2 … <command>` string passed to `tmux send-keys`. With large
+ * values (system prompts, encoding keys, OAuth creds) tmux intermittently
+ * truncated the string — the service never started — and `mesh dev restart`
+ * re-derived the env from scratch, drifting from what the service was
+ * originally launched with (e.g. a different TEMPORAL_ENCODING_KEY).
+ *
+ * Instead, the full env is written once at launch to a 0600 file under the
+ * session state dir, and the send-keys command is just:
+ *
+ *   cd '<dir>' && source '<envfile>' && <command>
+ *
+ * Restart sources the SAME file, guaranteeing a byte-identical environment.
+ */
+/** Env files contain secrets — owner read/write only. */
+export declare const ENV_FILE_MODE = 384;
+/**
+ * Single-quote a value for POSIX shells (bash/zsh), escaping embedded
+ * single quotes via the standard `'\''` dance. Safe for newlines, spaces,
+ * `$`, backticks, etc.
+ */
+export declare function quoteShellValue(value: string): string;
+/**
+ * Render a sourceable env file: one `export K='V'` per line.
+ * Throws on env var names that aren't valid shell identifiers.
+ */
+export declare function renderEnvFile(env: Record<string, string>): string;
+/** Filesystem-safe env file name for a service. */
+export declare function envFileName(serviceName: string): string;
+/**
+ * Write the env file (creating parent dirs) with mode 0600.
+ * chmod is applied explicitly so a pre-existing file is tightened too.
+ */
+export declare function writeEnvFile(filePath: string, env: Record<string, string>): void;
+/**
+ * Build the short, untruncatable command sent to tmux:
+ *   cd '<dir>' && source '<envfile>' && <command>
+ *
+ * `command` is the service's dev command (already shell syntax) and is
+ * passed through verbatim.
+ *
+ * With `logShipper` (mesh dev --local: the path of assets/log-shipper.mjs),
+ * the service's combined stdout/stderr is piped through the shipper: raw
+ * bytes go to the pane (its stderr), ANSI-stripped lines ship to the local
+ * platform's OTel collector via OTLP — the same ingestion path instrumented
+ * apps use, carrying the OTEL_* resource attributes from the env file. Logs
+ * never cross the macOS Docker file mount (whose stale attribute caching
+ * hides appends from in-container tailers).
+ */
+export declare function buildLaunchCommand(envFilePath: string, dir: string, command: string, logShipper?: string): string;
+/**
+ * Poll until a TCP port accepts connections, or the timeout elapses.
+ * Returns true when the port accepted, false on timeout.
+ */
+export declare function waitForPort(host: string, port: number, timeoutMs: number, intervalMs?: number): Promise<boolean>;
+//# sourceMappingURL=dev-launch.d.ts.map

package/dist/src/commands/dev-launch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-launch.d.ts","sourceRoot":"","sources":["../../../src/commands/dev-launch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAMH,yDAAyD;AACzD,eAAO,MAAM,aAAa,MAAQ,CAAC;AAKnC;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAajE;AAED,mDAAmD;AACnD,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAIhF;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,MAAM,GAClB,MAAM,CAMR;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,UAAU,SAAM,GACf,OAAO,CAAC,OAAO,CAAC,CAWlB"}

package/dist/src/commands/dev-launch.js

@@ -0,0 +1,118 @@
+/**
+ * Helpers for launching `mesh dev` services via per-session env files.
+ *
+ * Background: `mesh dev` used to inline every env var into a single giant
+ * `env K1=V1 K2=V2 … <command>` string passed to `tmux send-keys`. With large
+ * values (system prompts, encoding keys, OAuth creds) tmux intermittently
+ * truncated the string — the service never started — and `mesh dev restart`
+ * re-derived the env from scratch, drifting from what the service was
+ * originally launched with (e.g. a different TEMPORAL_ENCODING_KEY).
+ *
+ * Instead, the full env is written once at launch to a 0600 file under the
+ * session state dir, and the send-keys command is just:
+ *
+ *   cd '<dir>' && source '<envfile>' && <command>
+ *
+ * Restart sources the SAME file, guaranteeing a byte-identical environment.
+ */
+import * as fs from 'fs';
+import * as net from 'net';
+import * as path from 'path';
+/** Env files contain secrets — owner read/write only. */
+export const ENV_FILE_MODE = 0o600;
+/** Valid POSIX env var name. Anything else is rejected to avoid shell injection. */
+const ENV_KEY_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
+/**
+ * Single-quote a value for POSIX shells (bash/zsh), escaping embedded
+ * single quotes via the standard `'\''` dance. Safe for newlines, spaces,
+ * `$`, backticks, etc.
+ */
+export function quoteShellValue(value) {
+    return `'${value.replace(/'/g, "'\\''")}'`;
+}
+/**
+ * Render a sourceable env file: one `export K='V'` per line.
+ * Throws on env var names that aren't valid shell identifiers.
+ */
+export function renderEnvFile(env) {
+    const lines = [
+        '# Auto-generated by mesh dev — do not edit.',
+        '# Sourced by service launch/restart commands; this file IS the',
+        "# session's env contract for the service (restart fidelity).",
+    ];
+    for (const [key, value] of Object.entries(env)) {
+        if (!ENV_KEY_RE.test(key)) {
+            throw new Error(`Invalid env var name for env file: ${JSON.stringify(key)}`);
+        }
+        lines.push(`export ${key}=${quoteShellValue(value)}`);
+    }
+    return lines.join('\n') + '\n';
+}
+/** Filesystem-safe env file name for a service. */
+export function envFileName(serviceName) {
+    return `${serviceName.replace(/[^A-Za-z0-9._-]/g, '-')}.env.sh`;
+}
+/**
+ * Write the env file (creating parent dirs) with mode 0600.
+ * chmod is applied explicitly so a pre-existing file is tightened too.
+ */
+export function writeEnvFile(filePath, env) {
+    fs.mkdirSync(path.dirname(filePath), { recursive: true });
+    fs.writeFileSync(filePath, renderEnvFile(env), { mode: ENV_FILE_MODE });
+    fs.chmodSync(filePath, ENV_FILE_MODE);
+}
+/**
+ * Build the short, untruncatable command sent to tmux:
+ *   cd '<dir>' && source '<envfile>' && <command>
+ *
+ * `command` is the service's dev command (already shell syntax) and is
+ * passed through verbatim.
+ *
+ * With `logShipper` (mesh dev --local: the path of assets/log-shipper.mjs),
+ * the service's combined stdout/stderr is piped through the shipper: raw
+ * bytes go to the pane (its stderr), ANSI-stripped lines ship to the local
+ * platform's OTel collector via OTLP — the same ingestion path instrumented
+ * apps use, carrying the OTEL_* resource attributes from the env file. Logs
+ * never cross the macOS Docker file mount (whose stale attribute caching
+ * hides appends from in-container tailers).
+ */
+export function buildLaunchCommand(envFilePath, dir, command, logShipper) {
+    const base = `cd ${quoteShellValue(dir)} && source ${quoteShellValue(envFilePath)} && `;
+    if (!logShipper)
+        return `${base}${command}`;
+    // NODE_OPTIONS= : the shipper must not inherit the service's OTel
+    // auto-instrumentation — its own OTLP POSTs would show up as traces.
+    return `${base}{ ${command}; } 2>&1 | NODE_OPTIONS= node ${quoteShellValue(logShipper)}`;
+}
+/**
+ * Poll until a TCP port accepts connections, or the timeout elapses.
+ * Returns true when the port accepted, false on timeout.
+ */
+export async function waitForPort(host, port, timeoutMs, intervalMs = 500) {
+    const deadline = Date.now() + timeoutMs;
+    // Always attempt at least once, even with a zero/negative timeout.
+    for (;;) {
+        const remaining = deadline - Date.now();
+        const attemptTimeout = Math.max(250, Math.min(1000, remaining));
+        if (await tryConnect(host, port, attemptTimeout))
+            return true;
+        if (Date.now() + intervalMs >= deadline)
+            return false;
+        await new Promise((resolve) => setTimeout(resolve, intervalMs));
+    }
+}
+function tryConnect(host, port, timeoutMs) {
+    return new Promise((resolve) => {
+        const socket = net.connect({ host, port });
+        const done = (ok) => {
+            socket.removeAllListeners();
+            socket.destroy();
+            resolve(ok);
+        };
+        socket.setTimeout(timeoutMs);
+        socket.once('connect', () => done(true));
+        socket.once('timeout', () => done(false));
+        socket.once('error', () => done(false));
+    });
+}
+//# sourceMappingURL=dev-launch.js.map

package/dist/src/commands/dev-launch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-launch.js","sourceRoot":"","sources":["../../../src/commands/dev-launch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;AAC3B,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,yDAAyD;AACzD,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,CAAC;AAEnC,oFAAoF;AACpF,MAAM,UAAU,GAAG,0BAA0B,CAAC;AAE9C;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC7C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,GAA2B;IACvD,MAAM,KAAK,GAAa;QACtB,6CAA6C;QAC7C,gEAAgE;QAChE,8DAA8D;KAC/D,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,WAAW,CAAC,WAAmB;IAC7C,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,SAAS,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,GAA2B;IACxE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IACxE,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB,CAChC,WAAmB,EACnB,GAAW,EACX,OAAe,EACf,UAAmB;IAEnB,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,cAAc,eAAe,CAAC,WAAW,CAAC,MAAM,CAAC;IACxF,IAAI,CAAC,UAAU;QAAE,OAAO,GAAG,IAAI,GAAG,OAAO,EAAE,CAAC;IAC5C,kEAAkE;IAClE,qEAAqE;IACrE,OAAO,GAAG,IAAI,KAAK,OAAO,iCAAiC,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC;AAC3F,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAY,EACZ,IAAY,EACZ,SAAiB,EACjB,UAAU,GAAG,GAAG;IAEhB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAExC,mEAAmE;IACnE,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACxC,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QAChE,IAAI,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9D,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,IAAI,QAAQ;YAAE,OAAO,KAAK,CAAC;QACtD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,IAAY,EAAE,SAAiB;IAC/D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,CAAC,EAAW,EAAE,EAAE;YAC3B,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC5B,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,EAAE,CAAC,CAAC;QACd,CAAC,CAAC;QACF,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/commands/dev-token-server.d.ts

@@ -0,0 +1,32 @@
+/**
+ * `mesh dev __token-server <port> <context>` — the producer side of the
+ * self-refreshing dev-user token seam (MESH-2039).
+ *
+ * `mesh dev` launches this in its own tmux window. On each GET it mints a
+ * currently-valid dev-user token (via the existing `getValidToken` refresh
+ * path, which silently re-mints from the refresh token and rewrites the shared
+ * cache) and returns it on loopback. Consumers poll it (agent-app-kit's
+ * dev-user-token provider) so local apps survive past the ~1h Zitadel horizon
+ * without a `mesh dev` restart. Bound to 127.0.0.1 only; dev-only.
+ */
+export interface TokenServerDeps {
+    getValidToken: (context: string) => Promise<string | null>;
+    readCredentials: (context: string) => {
+        accessToken: string;
+        expiresAt: string;
+        email?: string;
+    } | null;
+    decodeJwtPayload: (jwt: string) => Record<string, unknown>;
+}
+/**
+ * Pure request handler. 200 with the fresh token pair on success; 503 when the
+ * token can't be minted (refresh token lapsed — the MESH-2035 boundary), which
+ * consumers treat as "keep last good / fall back to the static env snapshot".
+ */
+export declare function handleTokenRequest(context: string, deps: TokenServerDeps): Promise<{
+    status: number;
+    body: unknown;
+}>;
+/** Start the loopback token server. Never resolves (runs until the window dies). */
+export declare function startTokenServer(port: number, context: string): Promise<void>;
+//# sourceMappingURL=dev-token-server.d.ts.map

package/dist/src/commands/dev-token-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-token-server.d.ts","sourceRoot":"","sources":["../../../src/commands/dev-token-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC3D,eAAe,EAAE,CACf,OAAO,EAAE,MAAM,KACZ;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACvE,gBAAgB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5D;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,CAe5C;AASD,oFAAoF;AACpF,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBnF"}

package/dist/src/commands/dev-token-server.js

@@ -0,0 +1,68 @@
+/**
+ * `mesh dev __token-server <port> <context>` — the producer side of the
+ * self-refreshing dev-user token seam (MESH-2039).
+ *
+ * `mesh dev` launches this in its own tmux window. On each GET it mints a
+ * currently-valid dev-user token (via the existing `getValidToken` refresh
+ * path, which silently re-mints from the refresh token and rewrites the shared
+ * cache) and returns it on loopback. Consumers poll it (agent-app-kit's
+ * dev-user-token provider) so local apps survive past the ~1h Zitadel horizon
+ * without a `mesh dev` restart. Bound to 127.0.0.1 only; dev-only.
+ */
+import * as http from "node:http";
+import { getValidToken, readCredentials, decodeJwtPayload } from "./login.js";
+import { logInfo, logWarn } from "../utils/log.js";
+/**
+ * Pure request handler. 200 with the fresh token pair on success; 503 when the
+ * token can't be minted (refresh token lapsed — the MESH-2035 boundary), which
+ * consumers treat as "keep last good / fall back to the static env snapshot".
+ */
+export async function handleTokenRequest(context, deps) {
+    const idToken = await deps.getValidToken(context);
+    const creds = idToken ? deps.readCredentials(context) : null;
+    if (!idToken || !creds)
+        return { status: 503, body: { error: "token-unavailable" } };
+    const payload = deps.decodeJwtPayload(idToken);
+    return {
+        status: 200,
+        body: {
+            idToken,
+            accessToken: creds.accessToken,
+            sub: payload.sub ?? undefined,
+            email: creds.email ?? payload.email ?? undefined,
+            expiresAt: creds.expiresAt,
+        },
+    };
+}
+/**
+ * Refresh the served token this far before it actually expires, so a consumer
+ * polling on its own cadence (~60s) always fetches a token that outlives its
+ * next poll — closing the ~once-per-hour self-healing 401 window.
+ */
+const REFRESH_MARGIN_MS = 120_000;
+/** Start the loopback token server. Never resolves (runs until the window dies). */
+export async function startTokenServer(port, context) {
+    const deps = {
+        getValidToken: (c) => getValidToken(c, { marginMs: REFRESH_MARGIN_MS }),
+        readCredentials,
+        decodeJwtPayload,
+    };
+    const server = http.createServer((_req, res) => {
+        void (async () => {
+            try {
+                const { status, body } = await handleTokenRequest(context, deps);
+                res.writeHead(status, { "content-type": "application/json" });
+                res.end(JSON.stringify(body));
+            }
+            catch (e) {
+                res.writeHead(500, { "content-type": "application/json" });
+                res.end(JSON.stringify({ error: e.message }));
+            }
+        })();
+    });
+    server.on("error", (e) => logWarn(`token-server error: ${e.message}`));
+    await new Promise((resolve) => server.listen(port, "127.0.0.1", resolve));
+    logInfo(`dev-user token-server on http://127.0.0.1:${port} (context ${context})`);
+    await new Promise(() => { }); // run forever
+}
+//# sourceMappingURL=dev-token-server.js.map

package/dist/src/commands/dev-token-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-token-server.js","sourceRoot":"","sources":["../../../src/commands/dev-token-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9E,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAUnD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAe,EACf,IAAqB;IAErB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,CAAC;IACrF,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC/C,OAAO;QACL,MAAM,EAAE,GAAG;QACX,IAAI,EAAE;YACJ,OAAO;YACP,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,GAAG,EAAG,OAAO,CAAC,GAAc,IAAI,SAAS;YACzC,KAAK,EAAE,KAAK,CAAC,KAAK,IAAK,OAAO,CAAC,KAAgB,IAAI,SAAS;YAC5D,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAElC,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,OAAe;IAClE,MAAM,IAAI,GAAoB;QAC5B,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;QACvE,eAAe;QACf,gBAAgB;KACjB,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC7C,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACjE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACvE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAChF,OAAO,CAAC,6CAA6C,IAAI,aAAa,OAAO,GAAG,CAAC,CAAC;IAClF,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,cAAc;AAC7C,CAAC"}

package/dist/src/commands/dev.d.ts

@@ -1,8 +1,9 @@
 /**
  * mesh dev — Pulumi-output-driven local development orchestrator
  *
- * Reads `pulumi stack output dev --json` to discover services and tunnels,
+ * Reads `pulumi stack output dev --json` to discover services and VPC endpoints,
  * then launches each service's dev command in a tmux window.
+ * Requires VPN connection for direct access to VPC resources.
  *
  * Usage:
  *   mesh dev                  Start all services, attach tmux
@@ -12,6 +13,292 @@
  *   mesh dev logs <service>   Tail a service's output
  *   mesh dev restart <svc>    Restart a single service
  */
-import { Command } from "commander";
+import { Command } from 'commander';
+import { type ResolvedAwsCreds } from '../utils/aws-auth.js';
+import { type ComposeExternalRef } from './local/mocks.js';
+interface DevEnvVar {
+    value: string;
+    /** If set, env var value uses the named tunnel's host:port */
+    tunnel?: string;
+}
+interface DevService {
+    src: string;
+    port: number;
+    command: string[];
+    env?: Record<string, DevEnvVar>;
+}
+/** VPC-accessible endpoint for VPN direct access */
+interface DevTunnel {
+    /** VPC hostname (RDS endpoint, NLB hostname, etc.) */
+    host: string;
+    /** Port number */
+    port: number;
+}
+interface DevSecret {
+    /** Secrets Manager secret name */
+    secretName: string;
+    /** Maps secret JSON keys → env var names to inject into services */
+    envMapping: Record<string, string>;
+}
+export interface DevOutput {
+    /**
+     * Platform context. `tenant` is the APP tenant (Temporal namespace auth +
+     * encoding key). `name` is the HUB platform name (bastion + headscale DNS,
+     * which live in the hub for shared tenants); falls back to "mesh".
+     */
+    platform?: {
+        tenant: string;
+        name?: string;
+        env: string;
+    };
+    /** App name (e.g., "hub") */
+    app?: string;
+    /** Pulumi stack name (e.g., "dev", "feature-xyz") */
+    stack?: string;
+    services: Record<string, DevService>;
+    tunnels: Record<string, DevTunnel>;
+    /** Secrets to resolve from Secrets Manager at dev startup */
+    secrets?: Record<string, DevSecret>;
+}
+export interface SessionState {
+    appRoot: string;
+    stack: string;
+    devOutput: DevOutput;
+    startedAt: string;
+    /** 'tmux' (default) or 'docker' (mesh dev --runner docker, local mode) */
+    runner?: 'tmux' | 'docker';
+    /** Compose-mode external services (mesh dev --externals) this session brought
+     * up — torn down (volumes kept) on `mesh dev --kill`. */
+    composeExternals?: ComposeExternalRef[];
+    /** Prometheus file_sd probe targets this session's externals registered —
+     * removed on `mesh dev --kill` so the Hub stops showing uptime for a
+     * session that isn't running. Recorded as paths so `--kill --session`
+     * works without resolving an app root. */
+    externalProbeFiles?: string[];
+    /**
+     * Content fingerprint of the workflow source (agent-sdk / interpreter /
+     * agent-contracts) at launch. Compared on relaunch/restart to warn before the
+     * worker replays in-flight conversations against changed workflow code
+     * (MESH-2017). Absent for sessions launched before this field existed.
+     */
+    workflowFingerprint?: string;
+}
+/**
+ * Relaunch safety (MESH-2017): if the workflow source changed since this session
+ * launched, restarting the worker replays any in-flight conversations against the
+ * NEW code — a replay-incompatible change strands them. Warn and require `--force`.
+ *
+ * Silent no-op when there's no prior session, no stored fingerprint (pre-feature
+ * session), or nothing changed — so a restart of unchanged code never nags.
+ * Returns `true` if the caller should ABORT (changed && !force).
+ */
+/** Pure: did the workflow source change since launch (→ risk of stranding)? */
+export declare function workflowChanged(prior: string | undefined, current: string): boolean;
+/**
+ * Check whether a TCP port is available — probing the way services actually bind.
+ *
+ * This used to bind `127.0.0.1` only, and that made it blind to exactly the
+ * processes it exists to find. Node's `listen(port)` (and `@hono/node-server`,
+ * which every agent-api uses) binds the WILDCARD address `::` in dual-stack mode,
+ * holding the port on every interface — yet a probe bound to `127.0.0.1` still
+ * succeeds against such a holder. So the check returned `true` for a port already
+ * held by a prior `mesh dev` service, `allocatePorts` kept the preferred port, and
+ * the service then died on `EADDRINUSE` at its real bind.
+ *
+ * Observed 2026-07-31: the `studio-api` pane died on `EADDRINUSE :::40161` while a
+ * stale agent-api from an earlier boot kept serving on the same port, so the Studio
+ * UI drove a process from a previous session's configuration and the conversation
+ * list came back empty. Reproduced in isolation — holder on `::`, loopback probe
+ * reports free, real bind fails (MESH-2590).
+ *
+ * Both addresses are probed: the wildcard catches all-interface holders, and the
+ * loopback probe still catches a loopback-only squatter. A false "busy" is cheap —
+ * `allocatePorts` simply picks another port — while a false "free" crashes the
+ * service, so this deliberately errs toward busy.
+ */
+export declare function isPortFree(port: number): Promise<boolean>;
+/**
+ * Rewrite a service's OWN listen-port env var(s) from `oldPort` to `newPort`
+ * when `allocatePorts` reassigns its port (e.g. a worktree block). Matches any
+ * port-ish var (`PORT` or `*_PORT`, e.g. `VCS_PORT`/`AGENT_API_PORT`) whose value
+ * is exactly the old port — so a service that reads its own env var still binds
+ * the reassigned port instead of its deploy-time default (which would collide
+ * with another worktree/session on that default). The name + exact-value match
+ * keeps this from touching cross-service references or unrelated vars.
+ * Mutates `service.env`. Pure otherwise — exported for unit testing. (MESH-2088)
+ */
+export declare function rewriteOwnServicePort(service: DevService, oldPort: number, newPort: number): void;
+/**
+ * Merge a session's PINNED ports/tunnels into a freshly-read DevOutput.
+ *
+ * `mesh dev restart <svc> --refresh-env` re-reads `pulumi stack output` to pick
+ * up config/deploy changes, but the running session already allocated local
+ * ports (`allocatePorts`) and opened SSM tunnels. Re-reading the raw stack
+ * output would carry the DEPLOYED (pre-allocation) ports, so writing those into
+ * the env file would point the service — and its peers — at the wrong ports and
+ * break the live tunnels.
+ *
+ * This returns `fresh` (so new/changed non-port env values win) but overrides:
+ *   - EVERY service present in both `fresh` and `pinned` keeps its pinned/
+ *     allocated PORT (both `service.port` and `service.env.PORT.value`) — not
+ *     just the refreshed one, so a regenerated service's peer references land on
+ *     the session-allocated ports, and
+ *   - every tunnel present in `pinned` with the pinned host:port (the live SSM
+ *     endpoints); tunnels that exist only in `fresh` survive untouched.
+ *
+ * It then re-applies BOTH of the peer-addressing rewrites `allocatePorts` does —
+ * there are two now, and naming only one here is how they drift apart:
+ *   - PORT: for each service whose port differs between `fresh` (preferred) and
+ *     `pinned` (allocated), `localhost:${freshPort}` → `localhost:${pinnedPort}`
+ *     across EVERY service's env (e.g. a `ui`'s `API_URL` pointing at `api`).
+ *   - HOST: an in-cluster address for a service running LOCALLY becomes its local
+ *     one. `pulumi stack output` carries cluster hosts verbatim, so a refresh
+ *     without this restores exactly the value MESH-2597 exists to remove.
+ *
+ * Pure: deep-clones and never mutates its arguments.
+ */
+export declare function mergePinnedPorts(fresh: DevOutput, pinned: DevOutput): DevOutput;
+/**
+ * Build the AWS env vars to hand to long-lived child services (ui, api,
+ * ai-assistant) and SSM tunnels.
+ *
+ * For the AWS SSO credential path, returns AWS_PROFILE + AWS_REGION only so
+ * the AWS SDK's default provider chain can auto-refresh credentials from the
+ * SSO cache (~8h session) as short-lived STS tokens expire. Without this,
+ * child processes inherit a frozen STS triple and start throwing
+ * ExpiredTokenException ~1h into a dev session.
+ *
+ * For the Zitadel web-identity path, when `opts` is supplied we write an AWS
+ * config file whose `credential_process` re-invokes `mesh login … --credential-process`,
+ * so the AWS SDK's default provider chain auto-refreshes the underlying STS
+ * triple (the `mesh login` process re-issues the Zitadel token as needed).
+ * This removes the ~1h forced `mesh dev` restart. When `opts` is absent we
+ * fall back to the frozen STS triple (used by CI/`environment` and any caller
+ * that doesn't thread the context/role through).
+ *
+ * For the remaining non-SSO paths (CI/CD env keys, or no deployer role),
+ * returns the explicit STS triple — there is no profile to refresh from. The
+ * user must restart `mesh dev` when those tokens expire.
+ */
+export declare function buildChildAwsEnv(awsEnv: Record<string, string>, method: ResolvedAwsCreds['method'] | 'ambient', profile: string | undefined, opts?: {
+    context: string;
+    roleArn: string;
+    sessionScratchDir: string;
+    meshBin: string;
+}): Record<string, string>;
+/**
+ * Reduce a service `src` to its monorepo-relative form (pure; no filesystem).
+ *   - relative (`./packages/x` or `packages/x`) → normalized `packages/x`
+ *   - legacy absolute (`/…/mesh-platform[/.worktrees/<name>]/packages/x`) →
+ *     `packages/x` (drops the repo root AND any deploying-worktree segment)
+ * Returns null when an absolute path has no recognizable monorepo marker.
+ */
+export declare function monorepoRelativeSrc(src: string): string | null;
+/**
+ * Build the client-facing `host:port` for an SSM tunnel.
+ *
+ * The `aws ssm start-session` port-forwarder binds IPv4 `127.0.0.1` only.
+ * Advertising `localhost` lets Node/grpc-js resolve to IPv6 `::1` first, which
+ * the tunnel isn't listening on — so e.g. the Temporal gRPC client fails with
+ * `ECONNREFUSED ::1:<port>` and the Hub's Automations/workflow lists never load.
+ * Maps the literal `localhost` (how tunnels are advertised today) to `127.0.0.1`
+ * so clients hit the bound listener. Any other host — VPN-direct VPC endpoints,
+ * or a different loopback literal like `::1`/`127.0.0.1` — passes through unchanged.
+ */
+export declare function tunnelClientAddress(tunnel: {
+    host: string;
+    port: number;
+}): string;
+/** One tunnel's live health, resolved by a TCP dial of its client address. */
+export interface TunnelHealth {
+    name: string;
+    /** Client-facing `host:port` (see {@link tunnelClientAddress}). */
+    address: string;
+    reachable: boolean;
+}
+/**
+ * Render the Connections section (live tunnel health) as status-window lines.
+ *
+ * The status window refreshes every ~2s, so this is where a mid-session tunnel
+ * death surfaces (MESH-2016): a dead tunnel shows `⚠ … DOWN` and a SINGLE
+ * remediation line explains the `ECONNREFUSED` retry spam the dependent service
+ * windows emit — instead of leaving the operator to decode that spam themselves.
+ * Returns `[]` when there are no tunnels (nothing to show).
+ */
+export declare function formatTunnelHealth(health: TunnelHealth[]): string[];
+/**
+ * Probe the routing-critical tunnel of a (Tailscale-rewritten) devOutput and
+ * return its name if the forwarder binds but does not ROUTE, else null.
+ *
+ * Only `temporal` is gated — it's the load-bearing VPC dependency (services die
+ * on a gRPC deadline when it's dead), and keying on it mirrors the vpn-direct
+ * reachability gate ({@link gateVpnDirectReachability}). A Tailscale forwarder
+ * accepts its local port even when its SOCKS upstream is dead or the joined
+ * tailnet doesn't route the VPC; such a forwarder tears the connection down
+ * within the grace window, so it fails the connection-HOLDS probe that a bare
+ * accept (the readiness gate's `waitForPort`) would pass (MESH-2169/MESH-2268).
+ */
+export declare function firstUnroutableTunnel(tunnels: Record<string, {
+    host: string;
+    port: number;
+}>): Promise<string | null>;
+/** Compute the preferred local port for an SSM tunnel. */
+/** Tunnel backing for a dev session. */
+export type Transport = "ssm" | "tailscale" | "vpn-direct";
+/** What `startServices` should do for VPC tunnels. */
+export interface TunnelPlan {
+    transport: Transport;
+    tailscale?: {
+        tenant: string;
+        env: string;
+        region: string;
+        loginServer: string;
+        socksPort: number;
+        preAuthKey?: string;
+    };
+    /** True when the user EXPLICITLY asked for this transport (`--transport <x>`),
+     *  vs an auto-resolved default. An explicit tailscale choice must NOT silently
+     *  fall back to SSM — surface the failure so the user can act (MESH-2098). */
+    explicit?: boolean;
+}
+/**
+ * Resolve which tunnel backing `mesh dev` should use.
+ *
+ * An explicit `--transport` flag wins. Both `auto` and the default (unset)
+ * prefer Tailscale when it's available (brew `tailscaled` present), else fall
+ * back to the VPN-direct/SSM choice: VPN-direct when the VPN is connected, else
+ * SSM when the session-manager plugin is present. Where Tailscale isn't
+ * available the behavior is unchanged from before this feature.
+ */
+export declare function resolveTransport(flag: string | undefined, ctx: {
+    vpnConnected: boolean;
+    hasSsmPlugin: boolean;
+    tailscaleAvailable: boolean;
+}): Transport;
+/** Outcome of the reachability gate — `transport` is what to use, `reason` drives the log. */
+export type ReachabilityDecision = {
+    transport: Transport;
+    reason: "not-vpn-direct" | "reachable" | "fallback-ssm" | "unreachable-no-plugin";
+};
+/**
+ * Correct an auto-selected `vpn-direct` transport against ACTUAL reachability of
+ * the Temporal VPC endpoint (MESH-2016). `resolveTransport` uses a presence check
+ * (any Tailscale/VPN up) that's tailnet-blind — Tailscale-for-SSH looks connected
+ * but doesn't route the mesh VPC. Only `vpn-direct` is reachability-gated (it's
+ * never an explicit choice); every other transport passes through unchanged.
+ *
+ * Pure so the fallback logic is testable independently of the TCP probe.
+ */
+export declare function reachabilityFallbackTransport(transport: Transport, temporalReachable: boolean, hasSsmPlugin: boolean): ReachabilityDecision;
+export declare function preferredSsmLocalPort(remotePort: number): number;
+/**
+ * Reserve a deterministic local-port candidate for an SSM tunnel.
+ *
+ * This prevents two tunnels with the same remote port (common for HTTPS
+ * endpoints) from being assigned the same localhost port before the AWS CLI
+ * has a chance to bind it.
+ */
+export declare function reserveSsmLocalPortCandidate(remotePort: number, reservedPorts: Set<number>, startAt?: number): number;
 export declare function registerDevCommand(program: Command): void;
+export {};
 //# sourceMappingURL=dev.d.ts.map