@moinulmoin/eden 0.1.5 → 0.2.0

package/dist/eve-packaging.js

@@ -34,6 +34,7 @@ const START_COMMAND = [
 const EVE_ENTRYPOINT = ".output/server/index.mjs";
 const EVE_EXCLUDED_DIRECTORY_NAMES = new Set([
     ".eden",
+    ".eve",
     ".git",
     ".hg",
     ".next",
@@ -98,7 +99,8 @@ function isPathExcluded(relativePath, runtimeEnvRelativePath) {
     if (excludedDirectory !== undefined) {
         return {
             excluded: true,
-            category: excludedDirectory === ".eden" || excludedDirectory === ".git"
+            category: excludedDirectory === ".eden" ||
+                excludedDirectory === ".eve" || excludedDirectory === ".git"
                 ? "generated-state"
                 : excludedDirectory === "node_modules"
                     ? "node_modules"
@@ -886,6 +888,34 @@ async function writeJson(path, value) {
         mode: 0o600,
     });
 }
+const EVE_GENERATED_SNAPSHOT_ROOTS = {
+    ".dockerignore": true,
+    ".output": true,
+    "node_modules": true,
+};
+/**
+ * The authored Eve project source the runtime stage must carry so `eve start`
+ * can resolve the project context (agent/, agents/ workspaces, flat layouts,
+ * and the manifest). Returns validated top-level snapshot entries with every
+ * capture-time exclusion still applied; generated roots are never source.
+ */
+export async function eveSnapshotSourceEntries(snapshotRoot) {
+    const entries = await readdir(snapshotRoot, { withFileTypes: true });
+    const names = [];
+    for (const entry of entries) {
+        if (!entry.isFile() && !entry.isDirectory())
+            continue;
+        if (entry.isSymbolicLink())
+            continue;
+        if (EVE_GENERATED_SNAPSHOT_ROOTS[entry.name] === true)
+            continue;
+        if (isPathExcluded(entry.name, undefined).excluded)
+            continue;
+        names.push(entry.name);
+    }
+    names.sort((left, right) => left.localeCompare(right));
+    return names;
+}
 async function writeDockerBuildFiles(options) {
     if (!/^sha256:[0-9a-f]{64}$/u.test(options.nodeImage.digest) ||
         !/^node:24\.17\.0(?:-[a-z0-9][a-z0-9._-]*)?$/u.test(options.nodeImage.reference)) {
@@ -897,10 +927,18 @@ async function writeDockerBuildFiles(options) {
         });
     }
     const image = `${options.nodeImage.reference}@${options.nodeImage.digest}`;
+    const installSources = ["package.json", "pnpm-lock.yaml"];
+    if ((await lstat(join(options.snapshotRoot, "pnpm-workspace.yaml"))
+        .catch(() => undefined))?.isFile() === true) {
+        installSources.push("pnpm-workspace.yaml");
+    }
+    const runtimeSourceCopies = (await eveSnapshotSourceEntries(options.snapshotRoot))
+        .map((name) => `COPY --from=builder ${JSON.stringify([`/workspace/${name}`, `/app/${name}`])}`)
+        .join("\n");
     const dockerfile = `# syntax=docker/dockerfile:1
 FROM --platform=linux/amd64 ${image} AS builder
 WORKDIR /workspace
-COPY package.json pnpm-lock.yaml ./
+COPY ${JSON.stringify([...installSources, "./"])}
 RUN corepack enable \\
   && corepack prepare pnpm@${options.packageManagerVersion} --activate \\
   && test "$(corepack pnpm --version)" = "${options.packageManagerVersion}" \\
@@ -924,6 +962,7 @@ ENV HOST=0.0.0.0 \\
     NITRO_PORT=8080 \\
     NODE_ENV=production
 COPY --from=builder /workspace/.output /app/.output
+${runtimeSourceCopies}
 COPY --from=runtime-deps /workspace/node_modules /app/node_modules
 EXPOSE 8080
 ENTRYPOINT ["./node_modules/.bin/eve", "start", "--host", "0.0.0.0", "--port", "8080"]
@@ -1257,6 +1296,80 @@ function safeError(error) {
         remediation: error.remediation,
     };
 }
+/**
+ * The reported BuildKit step decides the classification: an echoed
+ * `RUN corepack pnpm install --frozen-lockfile` line from an earlier cached
+ * step must not relabel a failing `eve build` step as a pnpm install failure.
+ */
+function failingDockerStepCommand(stderr) {
+    let command;
+    let position = -1;
+    for (const pattern of [
+        /process "([^"]+)" did not complete/gu,
+        /executor failed running \[([^\]]+)\]/gu,
+        /The command '([^']+)' returned a non-zero code/gu,
+    ]) {
+        for (const match of stderr.matchAll(pattern)) {
+            if (match.index >= position) {
+                position = match.index;
+                command = match[1];
+            }
+        }
+    }
+    return command;
+}
+function classifyPnpmInstallFailure(stderr) {
+    if (/ERR_PNPM_MINIMUM_RELEASE_AGE_VIOLATION/u.test(stderr)) {
+        return new EvePackagingError({
+            code: "DEPENDENCY_AMBIGUITY",
+            subject: "ERR_PNPM_MINIMUM_RELEASE_AGE_VIOLATION",
+            reason: "The isolated pinned pnpm install rejected a dependency that is newer than the project's minimumReleaseAge policy.",
+            remediation: "Wait until the release ages past the minimumReleaseAge cutoff, or name the exact pin in minimumReleaseAgeExclude inside the project pnpm-workspace.yaml.",
+        });
+    }
+    if (/ERR_PNPM_(?:OUTDATED_LOCKFILE|LOCKFILE_MISSING_DEPENDENCY)/u.test(stderr)) {
+        return new EvePackagingError({
+            code: "DEPENDENCY_AMBIGUITY",
+            subject: "frozen pnpm install",
+            reason: "The isolated pinned pnpm install could not complete without changing or bypassing the lockfile.",
+            remediation: "Regenerate pnpm-lock.yaml with the declared pnpm version and retry without relaxing frozen mode.",
+        });
+    }
+    if (/ERR_PNPM_IGNORED_BUILDS/u.test(stderr)) {
+        return new EvePackagingError({
+            code: "DEPENDENCY_AMBIGUITY",
+            subject: "ERR_PNPM_IGNORED_BUILDS",
+            reason: "The isolated pinned pnpm install refused dependency build scripts that the project pnpm policy neither allows nor ignores.",
+            remediation: "Name the dependency under allowBuilds or ignoredBuiltDependencies in the project pnpm-workspace.yaml and retry.",
+        });
+    }
+    const pnpmErrorCode = /ERR_PNPM_[A-Z0-9_]+/u.exec(stderr)?.[0];
+    if (pnpmErrorCode !== undefined) {
+        return new EvePackagingError({
+            code: "DEPENDENCY_AMBIGUITY",
+            subject: pnpmErrorCode,
+            reason: `The isolated pinned pnpm install failed with ${pnpmErrorCode}.`,
+            remediation: "Fix the pnpm failure reported by the isolated build without relaxing the frozen lockfile or the declared pnpm pin, then retry.",
+        });
+    }
+    return undefined;
+}
+function classifyEveBuildFailure(stderr) {
+    if (/\bjust-bash\b/u.test(stderr)) {
+        return new EvePackagingError({
+            code: "EVE_BUILD_FAILED",
+            subject: "eve build",
+            reason: "The project-local Eve build failed inside the isolated Linux/amd64 builder because Eve's default sandbox needs just-bash where no Docker daemon or /dev/kvm exists.",
+            remediation: "Declare just-bash as a production dependency of the Eve project, regenerate pnpm-lock.yaml, and retry.",
+        });
+    }
+    return new EvePackagingError({
+        code: "EVE_BUILD_FAILED",
+        subject: "eve build",
+        reason: "The project-local Eve build failed inside the isolated Linux/amd64 builder.",
+        remediation: "Fix the project-local Eve build and retry without changing the authored project during packaging.",
+    });
+}
 function classifyDockerBuildFailure(error) {
     const stderr = typeof error === "object" &&
         error !== null &&
@@ -1264,13 +1377,38 @@ function classifyDockerBuildFailure(error) {
         typeof error.stderr === "string"
         ? error.stderr
         : "";
-    if (/ERR_PNPM_(?:OUTDATED_LOCKFILE|LOCKFILE_MISSING_DEPENDENCY)/u.test(stderr) ||
-        /frozen-lockfile|pnpm --version/u.test(stderr)) {
+    const step = failingDockerStepCommand(stderr);
+    if (step !== undefined) {
+        if (/\beve\b/u.test(step) && /\bbuild\b/u.test(step)) {
+            return classifyEveBuildFailure(stderr);
+        }
+        if (/pnpm|corepack/u.test(step)) {
+            const pnpmFailure = classifyPnpmInstallFailure(stderr);
+            if (pnpmFailure !== undefined)
+                return pnpmFailure;
+            return new EvePackagingError({
+                code: "DEPENDENCY_AMBIGUITY",
+                subject: "frozen pnpm install",
+                reason: "The isolated pinned pnpm toolchain or install step did not complete inside the builder.",
+                remediation: "Keep the declared exact pnpm version and the frozen lockfile; fix the reported toolchain or install failure and retry.",
+            });
+        }
+    }
+    const pnpmFailure = classifyPnpmInstallFailure(stderr);
+    if (pnpmFailure !== undefined)
+        return pnpmFailure;
+    if (/\bjust-bash\b|Cannot find package/u.test(stderr)) {
+        return classifyEveBuildFailure(stderr);
+    }
+    if (/eve build/u.test(stderr)) {
+        return classifyEveBuildFailure(stderr);
+    }
+    if (/frozen-lockfile|pnpm --version/u.test(stderr)) {
         return new EvePackagingError({
             code: "DEPENDENCY_AMBIGUITY",
             subject: "frozen pnpm install",
-            reason: "The isolated pinned pnpm install could not complete without changing or bypassing the lockfile.",
-            remediation: "Regenerate pnpm-lock.yaml with the declared pnpm version and retry without relaxing frozen mode.",
+            reason: "The isolated pinned pnpm toolchain or install step did not complete inside the builder.",
+            remediation: "Keep the declared exact pnpm version and the frozen lockfile; fix the reported toolchain or install failure and retry.",
         });
     }
     if (/node_modules\/\.bin\/eve|test -x/u.test(stderr)) {
@@ -1281,14 +1419,6 @@ function classifyDockerBuildFailure(error) {
             remediation: "Declare Eve as a project dependency and retry with the frozen lockfile.",
         });
     }
-    if (/eve build/u.test(stderr)) {
-        return new EvePackagingError({
-            code: "EVE_BUILD_FAILED",
-            subject: "eve build",
-            reason: "The project-local Eve build failed inside the isolated Linux/amd64 builder.",
-            remediation: "Fix the project-local Eve build and retry without changing the authored project during packaging.",
-        });
-    }
     return new EvePackagingError({
         code: "DOCKER_PLATFORM_BLOCKED",
         subject: "Docker/OrbStack",

package/dist/eve-runtime-image.js

@@ -3,7 +3,7 @@ import { execFile, spawn, } from "node:child_process";
 import { cp, lstat, mkdir, readFile, readlink, readdir, realpath, rm, symlink, writeFile, } from "node:fs/promises";
 import { dirname, join, relative, resolve, } from "node:path";
 import { promisify, } from "node:util";
-import { EvePackagingError, } from "./eve-packaging.js";
+import { EvePackagingError, eveSnapshotSourceEntries, } from "./eve-packaging.js";
 const execFileAsync = promisify(execFile);
 const START_COMMAND = [
     "./node_modules/.bin/eve",
@@ -239,7 +239,6 @@ async function captureRuntimeTree(root, snapshotRoot, label) {
         }
     };
     await visit(canonicalRoot);
-    files.sort((left, right) => left.path.localeCompare(right.path));
     nativeModules.sort((left, right) => left.path.localeCompare(right.path));
     return {
         files,
@@ -421,8 +420,10 @@ async function writeRuntimeContext(candidate, nodeImage, closure) {
     try {
         await cp(join(candidate.snapshotRoot, ".output"), join(runtimeContextPath, ".output"), { recursive: true });
         await cp(join(candidate.snapshotRoot, "node_modules"), join(runtimeContextPath, "node_modules"), { recursive: true });
-        await cp(join(candidate.snapshotRoot, "agent"), join(runtimeContextPath, "agent"), { recursive: true });
-        await cp(join(candidate.snapshotRoot, "package.json"), join(runtimeContextPath, "package.json"));
+        const sourceEntries = await eveSnapshotSourceEntries(candidate.snapshotRoot);
+        for (const entry of sourceEntries) {
+            await cp(join(candidate.snapshotRoot, entry), join(runtimeContextPath, entry), { recursive: true });
+        }
         await rewriteContextLinks(join(candidate.snapshotRoot, "node_modules"), join(runtimeContextPath, "node_modules"));
         await rewriteContextLinks(join(candidate.snapshotRoot, ".output"), join(runtimeContextPath, ".output"));
         const copiedOutput = await captureRuntimeTree(join(runtimeContextPath, ".output"), runtimeContextPath, "output");
@@ -431,13 +432,15 @@ async function writeRuntimeContext(candidate, nodeImage, closure) {
             copiedDependencies.digest !== closure.dependencyDigest) {
             throw packagingError("SOURCE_RACE", "runtime context", "The copied runtime context does not match the validated immutable closure.", "Discard the mixed-generation runtime context and rebuild from a quiescent candidate.");
         }
+        const sourceCopyLines = sourceEntries
+            .map((entry) => `COPY --from=candidate ${JSON.stringify([`/candidate/${entry}`, `/workspace/${entry}`])}`)
+            .join("\n");
         const dockerfile = `# syntax=docker/dockerfile:1
 FROM --platform=linux/amd64 ${imageReference(nodeImage)} AS candidate
-WORKDIR /workspace
-COPY .output /workspace/.output
-COPY node_modules /workspace/node_modules
-COPY agent /workspace/agent
-COPY package.json /workspace/package.json
+WORKDIR /candidate
+COPY .output /candidate/.output
+COPY node_modules /candidate/node_modules
+${sourceEntries.map((entry) => `COPY ${JSON.stringify([entry, `/candidate/${entry}`])}`).join("\n")}
 
 FROM --platform=linux/amd64 ${imageReference(nodeImage)} AS runtime
 WORKDIR /workspace
@@ -446,10 +449,9 @@ ENV HOST=0.0.0.0 \\
     PORT=8080 \\
     NITRO_PORT=8080 \\
     NODE_ENV=production
-COPY --from=candidate /workspace/.output /workspace/.output
-COPY --from=candidate /workspace/node_modules /workspace/node_modules
-COPY --from=candidate /workspace/agent /workspace/agent
-COPY --from=candidate /workspace/package.json /workspace/package.json
+COPY --from=candidate /candidate/.output /workspace/.output
+COPY --from=candidate /candidate/node_modules /workspace/node_modules
+${sourceCopyLines}
 EXPOSE 8080
 ENTRYPOINT ["./node_modules/.bin/eve", "start", "--host", "0.0.0.0", "--port", "8080"]
 `;

package/dist/eve.d.ts

@@ -6,8 +6,14 @@ export interface EveCliInvocation {
     readonly command: EveCliCommand;
     readonly projectRoot: string;
     readonly environment: EveCliEnvironment;
-    readonly name: string;
+    /**
+     * Absent only on preflight/deploy preview invocations; index.ts derives a
+     * deterministic Worker name from the project before execution.
+     */
+    readonly name?: string;
     readonly envFile?: string;
+    /** When true the command prints the machine-readable result object. */
+    readonly json?: boolean;
 }
 export interface EveCliHelp {
     readonly kind: "help";
@@ -25,6 +31,8 @@ export interface EveCliExecutionRequest {
      * layer is the only owner allowed to open or parse its contents.
      */
     readonly envFile?: string;
+    /** When true the command prints the machine-readable result object. */
+    readonly json?: boolean;
 }
 export type EveCliRunner = (request: EveCliExecutionRequest) => void | Promise<void>;
 export interface EveCliDiagnostic {
@@ -43,7 +51,14 @@ export declare class EveCliError extends Error {
         readonly diagnostics?: readonly EveCliDiagnostic[];
     });
 }
-export declare const EVE_USAGE = "Usage: eden <preflight|deploy|destroy> [options]\n\nEden Deploy commands:\n  preflight  Build and inspect a local Eve candidate without remote mutation\n  deploy     Deploy the selected Eve project to the exact named target\n  destroy    Remove the exact owned Eve target\n\nEvery Deploy command requires --project, --env, and --name.\n--env accepts only preview or production.\n--env-file is accepted only by preflight and deploy.\nEden Agent authoring remains available through the separate eden agent namespace.\n\nOptions:\n  --help  Show this help\n";
+export declare const EVE_USAGE = "Usage: eden <preflight|deploy|destroy> [options]\n\nEden Deploy commands:\n  preflight  Build and inspect a local Eve candidate without remote mutation\n  deploy     Deploy the selected Eve project to the exact named target\n  destroy    Remove the exact owned Eve target\n\nWithout flags, preflight and deploy use the current directory, the preview\nenvironment, and a Worker name derived from the project's package.json name.\n--env accepts only preview or production; production and destroy always\nrequire an explicit --name. --env-file is accepted only by preflight and deploy.\nAll three commands print a human summary by default; --json prints the\nmachine-readable result object for scripts and CI.\n\nOptions:\n  --help  Show this help\n";
 export declare function eveHelpText(scope: EveCliHelp["scope"]): string;
 export declare function parseEveArguments(args: readonly string[]): ParsedEveInvocation;
+/**
+ * Derive a stable, collision-safe Cloudflare Worker name from a raw package
+ * name. The sanitized slug is combined with a short digest of the raw name so
+ * distinct package names that collide after sanitization stay distinct. The
+ * result is deterministic across runs and always satisfies EVE_NAME_PATTERN.
+ */
+export declare function deriveEveTargetName(rawPackageName: string): string;
 //# sourceMappingURL=eve.d.ts.map

package/dist/eve.js

@@ -1,3 +1,4 @@
+import { createHash } from "node:crypto";
 export const EVE_CLI_COMMANDS = [
     "preflight",
     "deploy",
@@ -23,45 +24,50 @@ Eden Deploy commands:
   deploy     Deploy the selected Eve project to the exact named target
   destroy    Remove the exact owned Eve target
 
-Every Deploy command requires --project, --env, and --name.
---env accepts only preview or production.
---env-file is accepted only by preflight and deploy.
-Eden Agent authoring remains available through the separate eden agent namespace.
+Without flags, preflight and deploy use the current directory, the preview
+environment, and a Worker name derived from the project's package.json name.
+--env accepts only preview or production; production and destroy always
+require an explicit --name. --env-file is accepted only by preflight and deploy.
+All three commands print a human summary by default; --json prints the
+machine-readable result object for scripts and CI.
 
 Options:
   --help  Show this help
 `;
 const EVE_COMMAND_USAGE = {
-    preflight: `Usage: eden preflight --project <path> --env <preview|production> --name <name> [--env-file <path>]
+    preflight: `Usage: eden preflight [--project <path>] [--env <preview|production>] [--name <name>] [--env-file <path>] [--json]
 
 Build and inspect an immutable local Eve candidate. Preflight is read-only toward remote resources.
 
 Options:
-  --project <path>     Required canonical Eve project root
-  --env <environment>  Required preview or production target
-  --name <name>        Required exact target name
+  --project <path>     Eve project root (default: current directory)
+  --env <environment>  preview or production target (default: preview)
+  --name <name>        Exact target name (default: derived from the project's package.json; required for production)
   --env-file <path>    Optional opaque runtime environment file
+  --json               Print the machine-readable result object (default: human summary)
   --help               Show this help
 `,
-    deploy: `Usage: eden deploy --project <path> --env <preview|production> --name <name> [--env-file <path>]
+    deploy: `Usage: eden deploy [--project <path>] [--env <preview|production>] [--name <name>] [--env-file <path>] [--json]
 
 Deploy the selected Eve project to one exact target after host checks pass.
 
 Options:
-  --project <path>     Required canonical Eve project root
-  --env <environment>  Required preview or production target
-  --name <name>        Required exact target name
+  --project <path>     Eve project root (default: current directory)
+  --env <environment>  preview or production target (default: preview)
+  --name <name>        Exact target name (default: derived from the project's package.json; required for production)
   --env-file <path>    Optional opaque runtime environment file
+  --json               Print the machine-readable result object (default: human summary)
   --help               Show this help
 `,
-    destroy: `Usage: eden destroy --project <path> --env <preview|production> --name <name>
+    destroy: `Usage: eden destroy --name <name> [--project <path>] [--env <preview|production>] [--json]
 
 Destroy only the exact owned Eve target after ownership verification.
 
 Options:
-  --project <path>     Required canonical Eve project root
-  --env <environment>  Required preview or production target
   --name <name>        Required exact target name
+  --project <path>     Eve project root (default: current directory)
+  --env <environment>  preview or production target (default: preview)
+  --json               Print the machine-readable result object (default: human summary)
   --help               Show this help
 `,
 };
@@ -126,6 +132,7 @@ export function parseEveArguments(args) {
     let name;
     let envFile;
     let help = false;
+    let json = false;
     for (let index = 1; index < args.length; index += 1) {
         const argument = args[index];
         if (argument === undefined) {
@@ -205,6 +212,10 @@ export function parseEveArguments(args) {
             envFile = parseEnvFileValue(argument.slice("--env-file=".length));
             continue;
         }
+        if (argument === "--json") {
+            json = true;
+            continue;
+        }
         if (argument.startsWith("-")) {
             throw eveError("EVE_OPTION_UNKNOWN", "The Eve command contains an unknown option.");
         }
@@ -213,22 +224,45 @@ export function parseEveArguments(args) {
     if (help) {
         return { kind: "help", scope: command };
     }
-    if (projectRoot === undefined) {
-        throw eveError("EVE_PROJECT_REQUIRED", "The --project option is required for every Eve command.");
-    }
-    if (environment === undefined) {
-        throw eveError("EVE_ENV_REQUIRED", "The --env option is required for every Eve command.");
-    }
-    if (name === undefined) {
-        throw eveError("EVE_NAME_REQUIRED", "The --name option is required for every Eve command.");
+    const resolvedEnvironment = environment ?? "preview";
+    const resolvedProjectRoot = projectRoot ?? ".";
+    if (name === undefined &&
+        (command === "destroy" || resolvedEnvironment === "production")) {
+        throw eveError("EVE_NAME_REQUIRED", "An explicit --name is required for destroy and for production targets.");
     }
     return {
         kind: "invocation",
         command,
-        projectRoot,
-        environment,
-        name,
+        projectRoot: resolvedProjectRoot,
+        environment: resolvedEnvironment,
+        ...(name === undefined ? {} : { name }),
         ...(envFile === undefined ? {} : { envFile }),
+        ...(json ? { json: true } : {}),
     };
 }
+const WORKER_NAME_LIMIT = 63;
+/**
+ * Derive a stable, collision-safe Cloudflare Worker name from a raw package
+ * name. The sanitized slug is combined with a short digest of the raw name so
+ * distinct package names that collide after sanitization stay distinct. The
+ * result is deterministic across runs and always satisfies EVE_NAME_PATTERN.
+ */
+export function deriveEveTargetName(rawPackageName) {
+    const slug = rawPackageName
+        .toLowerCase()
+        .replace(/[^a-z0-9-]+/gu, "-")
+        .replace(/-{2,}/gu, "-")
+        .replace(/^-+|-+$/gu, "");
+    if (slug.length === 0) {
+        throw eveError("EVE_NAME_DERIVATION_FAILED", "A target name could not be derived from the project package.json; pass an explicit --name.");
+    }
+    const digest = createHash("sha256")
+        .update(rawPackageName, "utf8")
+        .digest("hex")
+        .slice(0, 8);
+    const stem = slug
+        .slice(0, WORKER_NAME_LIMIT - digest.length - 1)
+        .replace(/-+$/u, "");
+    return `${stem}-${digest}`;
+}
 //# sourceMappingURL=eve.js.map