@moku-labs/web 1.12.3 → 1.13.0

package/dist/index.cjs

@@ -1,5 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_convention = require("./convention-BpDfzX7e.cjs");
+let _moku_labs_common = require("@moku-labs/common");
 let _moku_labs_core = require("@moku-labs/core");
 let node_fs = require("node:fs");
 let node_crypto = require("node:crypto");
@@ -14,6 +15,7 @@ let preact_render_to_string = require("preact-render-to-string");
 let node_child_process = require("node:child_process");
 let node_readline = require("node:readline");
 let node_url = require("node:url");
+let _moku_labs_common_cli = require("@moku-labs/common/cli");
 let gray_matter = require("gray-matter");
 gray_matter = require_convention.__toESM(gray_matter, 1);
 let _shikijs_rehype = require("@shikijs/rehype");
@@ -41,831 +43,6 @@ let hast_util_sanitize = require("hast-util-sanitize");
 let reading_time = require("reading-time");
 reading_time = require_convention.__toESM(reading_time, 1);
 let node_process = require("node:process");
-//#region src/plugins/env/api.ts
-/** Error prefix for all env API failures. */
-const ERROR_PREFIX$16 = "[web]";
-/**
-* Creates the env plugin API surface mounted at `ctx.env`. Closes over
-* `ctx.state` ({@link EnvState}) and reads the frozen `resolved` / `publicMap`
-* maps; closures never return a raw `ctx.state` reference.
-*
-* @param ctx - Core plugin context carrying the frozen env state.
-* @param ctx.state - The resolved + public {@link EnvState} maps.
-* @returns The {@link EnvApi} accessor surface mounted at `ctx.env`.
-* @example
-* ```ts
-* const api = createEnvApi(ctx);
-* api.get("PUBLIC_API_URL");
-* ```
-*/
-function createEnvApi(ctx) {
-	const { resolved, publicMap } = ctx.state;
-	return {
-		/**
-		* Reads a resolved variable.
-		*
-		* @param key - Variable name.
-		* @returns The value, or `undefined` if not present.
-		* @example
-		* ```ts
-		* api.get("PUBLIC_API_URL");
-		* ```
-		*/
-		get(key) {
-			return resolved.get(key);
-		},
-		/**
-		* Reads a variable that must exist.
-		*
-		* @param key - Variable name.
-		* @returns The value.
-		* @throws {Error} If the variable is undefined.
-		* @example
-		* ```ts
-		* api.require("DEPLOY_TOKEN");
-		* ```
-		*/
-		require(key) {
-			const value = resolved.get(key);
-			if (value === void 0) throw new Error(`${ERROR_PREFIX$16} env: required variable "${key}" is not defined.`);
-			return value;
-		},
-		/**
-		* Tests presence of a resolved variable.
-		*
-		* @param key - Variable name.
-		* @returns `true` if a value is present.
-		* @example
-		* ```ts
-		* api.has("PUBLIC_API_URL");
-		* ```
-		*/
-		has(key) {
-			return resolved.has(key);
-		},
-		/**
-		* Returns all public variables as a frozen plain object — a fresh copy,
-		* never the raw state map.
-		*
-		* @returns A frozen `Record` of public variable names to values.
-		* @example
-		* ```ts
-		* const payload = { ...api.getPublic() };
-		* ```
-		*/
-		getPublic() {
-			return Object.freeze(Object.fromEntries(publicMap));
-		},
-		/**
-		* Returns the already-frozen map of public variables.
-		*
-		* @returns The frozen public map.
-		* @example
-		* ```ts
-		* [...api.getPublicMap()];
-		* ```
-		*/
-		getPublicMap() {
-			return publicMap;
-		}
-	};
-}
-//#endregion
-//#region src/plugins/env/state.ts
-/**
-* Creates initial env plugin state: two empty, mutable maps that are populated
-* and frozen by `validateSchema` (the `onInit`) at `createApp` time.
-*
-* @returns A fresh `EnvState` with empty `resolved` and `publicMap` maps.
-* @example
-* ```ts
-* const state = createEnvState();
-* state.resolved.size; // 0
-* ```
-*/
-function createEnvState() {
-	return {
-		resolved: /* @__PURE__ */ new Map(),
-		publicMap: /* @__PURE__ */ new Map()
-	};
-}
-//#endregion
-//#region src/plugins/env/validate.ts
-/** Error message thrown by every frozen-map mutator. */
-const FROZEN_MESSAGE = "env: map is frozen and cannot be mutated";
-/** Error prefix for all resolution-pipeline failures. */
-const ERROR_PREFIX$15 = "[web]";
-/** The `Map` mutators redefined as throwers when a map is frozen. */
-const FROZEN_METHODS = [
-	"set",
-	"clear",
-	"delete"
-];
-/**
-* Throws the canonical frozen-map error; installed as a map's `set`/`clear`/`delete`.
-*
-* @throws {TypeError} Always, signalling the map is frozen.
-* @example
-* ```ts
-* frozenThrower(); // throws TypeError
-* ```
-*/
-function frozenThrower() {
-	throw new TypeError(FROZEN_MESSAGE);
-}
-/**
-* Coerces a raw provider value to its effective presence: an empty string counts
-* as "absent" so a `KEY=""` falls through to later providers.
-*
-* @param raw - The raw value a provider supplied for a key (possibly `undefined`).
-* @returns The value, or `undefined` when it is missing or an empty string.
-* @example
-* ```ts
-* coerceEmpty(""); // => undefined
-* coerceEmpty("3000"); // => "3000"
-* ```
-*/
-function coerceEmpty(raw) {
-	return raw === "" ? void 0 : raw;
-}
-/**
-* Merges providers in array order, coercing empty strings to `undefined` before
-* precedence so a `KEY=""` falls through to later providers. First non-empty
-* value wins.
-*
-* @param config - The resolved env config carrying the ordered providers.
-* @returns A flat record of the first defined value found per key.
-* @example
-* ```ts
-* mergeProviders({ providers: [a, b], schema: {}, publicPrefix: "PUBLIC_" });
-* ```
-*/
-function mergeProviders$1(config) {
-	const merged = {};
-	for (const provider of config.providers) for (const [key, raw] of Object.entries(provider.load())) {
-		const value = coerceEmpty(raw);
-		if (value !== void 0 && merged[key] === void 0) merged[key] = value;
-	}
-	return merged;
-}
-/**
-* Bidirectionally enforces the `PUBLIC_` naming convention against each schema
-* entry's `public` flag. Throws on either violation direction.
-*
-* @param config - The resolved env config carrying `schema` + `publicPrefix`.
-* @throws {Error} If a public var lacks the prefix, or a prefixed var is not public.
-* @example
-* ```ts
-* crossCheckPublicPrefix(config); // throws if PUBLIC_X is not public:true
-* ```
-*/
-function crossCheckPublicPrefix(config) {
-	const { schema, publicPrefix } = config;
-	for (const [key, spec] of Object.entries(schema)) {
-		const hasPrefix = key.startsWith(publicPrefix);
-		if (spec.public === true && !hasPrefix) throw new Error(`${ERROR_PREFIX$15} env: "${key}" is marked public but does not start with "${publicPrefix}".`);
-		if (hasPrefix && spec.public !== true) throw new Error(`${ERROR_PREFIX$15} env: "${key}" starts with "${publicPrefix}" but is not marked public:true.`);
-	}
-}
-/**
-* Seals a map so `set`, `clear`, and `delete` throw, then `Object.freeze`s it
-* for defense in depth. Closes the `Object.freeze`-on-`Map` mutability hole by
-* redefining the mutators as non-writable, non-configurable throwers.
-*
-* @param map - The map to freeze in place.
-* @example
-* ```ts
-* freezeMap(state.resolved); // resolved.set(...) now throws
-* ```
-*/
-function freezeMap(map) {
-	for (const method of FROZEN_METHODS) Object.defineProperty(map, method, {
-		value: frozenThrower,
-		writable: false,
-		configurable: false,
-		enumerable: false
-	});
-	Object.freeze(map);
-}
-/**
-* Populates `state.publicMap` with the schema-driven public subset: every
-* `public:true` schema key that resolved to a defined value. This map is the only
-* sanctioned input to a browser-facing `define`, so it stays schema-scoped (never
-* includes non-schema provider keys).
-*
-* @param schema - The per-variable schema from {@link EnvConfig}.
-* @param merged - The merged provider values keyed by variable name.
-* @param publicMap - The mutable public map to fill in place.
-* @example
-* ```ts
-* populatePublicMap(config.schema, merged, state.publicMap);
-* ```
-*/
-function populatePublicMap(schema, merged, publicMap) {
-	for (const [key, spec] of Object.entries(schema)) {
-		const value = merged[key];
-		if (spec.public === true && value !== void 0) publicMap.set(key, value);
-	}
-}
-/**
-* Populates `state.resolved` with EVERY merged key that carries a defined value
-* (spec/02 Lifecycle §5), including non-schema provider keys so
-* `ctx.env.require()` works for dynamic keys.
-*
-* @param merged - The merged provider values keyed by variable name.
-* @param resolved - The mutable resolved map to fill in place.
-* @example
-* ```ts
-* populateResolved(merged, state.resolved);
-* ```
-*/
-function populateResolved(merged, resolved) {
-	for (const [key, value] of Object.entries(merged)) resolved.set(key, value);
-}
-/**
-* Resolves, validates, and freezes the environment table at `onInit`.
-*
-* Pipeline order: merge providers (with empty-string → undefined coercion) →
-* `PUBLIC_` bidirectional cross-check → apply defaults → assert required →
-* populate `state.resolved` / `state.publicMap` → freeze both via
-* {@link freezeMap}. Fail-fast: any violation throws at `createApp` time.
-*
-* @param ctx - Core plugin context (`{ config, state }`).
-* @param ctx.config - The resolved {@link EnvConfig}.
-* @param ctx.state - The mutable {@link EnvState} to populate and freeze.
-* @throws {Error} On a `PUBLIC_` cross-check violation or a missing required variable.
-* @example
-* ```ts
-* validateSchema(ctx); // throws on missing required / PUBLIC_ violation
-* ```
-*/
-function validateSchema(ctx) {
-	const { config, state } = ctx;
-	const { schema } = config;
-	const merged = mergeProviders$1(config);
-	crossCheckPublicPrefix(config);
-	for (const [key, spec] of Object.entries(schema)) {
-		if (merged[key] === void 0 && spec.default !== void 0) merged[key] = spec.default;
-		if (merged[key] === void 0 && spec.required === true) throw new Error(`${ERROR_PREFIX$15} env: required variable "${key}" is not defined by any provider or default.`);
-	}
-	populatePublicMap(schema, merged, state.publicMap);
-	populateResolved(merged, state.resolved);
-	freezeMap(state.resolved);
-	freezeMap(state.publicMap);
-}
-//#endregion
-//#region src/plugins/env/providers.browser.ts
-/** Default `globalThis` property holding a runtime-injected public-env snapshot. */
-const DEFAULT_GLOBAL_KEY = "__ENV__";
-/**
-* A browser-safe {@link EnvProvider} that reads `import.meta.env` and an optional
-* `globalThis[globalKey]` snapshot, merging them with the runtime global winning.
-* Contains zero `node:*` imports, so it is safe to include in the client bundle.
-* Never throws on missing sources — each absent source resolves to `{}`.
-*
-* @param options - Optional settings.
-* @param options.globalKey - `globalThis` key to read a public-env snapshot from. Defaults to `"__ENV__"`.
-* @returns An {@link EnvProvider} named `browser-env`.
-* @example
-* ```ts
-* const provider = browserEnv();
-* provider.load(); // { PUBLIC_API_URL: "/api", ... }
-* ```
-*/
-function browserEnv(options) {
-	const globalKey = options?.globalKey ?? DEFAULT_GLOBAL_KEY;
-	return {
-		name: "browser-env",
-		/**
-		* Merges `import.meta.env` with `globalThis[globalKey]`, the runtime global
-		* winning. Each absent source resolves to `{}`; never throws.
-		*
-		* @returns The merged environment record.
-		* @example
-		* ```ts
-		* browserEnv().load();
-		* ```
-		*/
-		load() {
-			const importEnv = {}.env ?? {};
-			const globalObject = globalThis[globalKey] ?? {};
-			return {
-				...importEnv,
-				...globalObject
-			};
-		}
-	};
-}
-/**
-* Core plugin that resolves, validates, and freezes the environment at `onInit`,
-* exposing a read-only accessor at `ctx.env`. No `onStart`/`onStop` — holds no resource.
-*
-* @example
-* ```ts
-* createApp({ pluginConfigs: { env: { schema: { PUBLIC_API_URL: { public: true } } } } });
-* ```
-*/
-const envPlugin = (0, _moku_labs_core.createCorePlugin)("env", {
-	config: {
-		schema: {},
-		providers: [],
-		publicPrefix: "PUBLIC_"
-	},
-	createState: createEnvState,
-	api: createEnvApi,
-	onInit: validateSchema
-});
-//#endregion
-//#region src/plugins/log/expect.ts
-/**
-* Named error thrown by `expect()` assertions when a trace condition fails.
-*
-* @example
-* ```ts
-* throw new LogExpectAssertionError("missing event build:complete");
-* ```
-*/
-var LogExpectAssertionError = class extends Error {
-	/**
-	* Construct a new assertion error with a descriptive failure message.
-	*
-	* @param message - Descriptive failure message (event name, partial, index).
-	* @example
-	* ```ts
-	* throw new LogExpectAssertionError("missing event build:complete");
-	* ```
-	*/
-	constructor(message) {
-		super(message);
-		this.name = "LogExpectAssertionError";
-	}
-};
-/**
-* Tests whether a value is a non-null, non-array plain object.
-*
-* @param value - The value to test.
-* @returns `true` when `value` is a non-null object that is not an array.
-* @example
-* ```ts
-* isPlainObject({ a: 1 }); // true
-* isPlainObject([1]); // false
-* ```
-*/
-function isPlainObject$1(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-/**
-* Tests whether `actual` is an array that recursively matches every element of
-* the `partial` array (element-wise, with equal length).
-*
-* @param actual - The value to test against (must be an array of equal length).
-* @param partial - The expected partial array shape.
-* @returns `true` when `actual` is an equal-length array matching `partial` element-wise.
-* @example
-* ```ts
-* matchesPartialArray([1, 2], [1, 2]); // true
-* matchesPartialArray([1], [1, 2]); // false (length mismatch)
-* ```
-*/
-function matchesPartialArray(actual, partial) {
-	if (!Array.isArray(actual) || actual.length !== partial.length) return false;
-	return partial.every((value, index) => matchesPartial(actual[index], value));
-}
-/**
-* Tests whether `actual` is a plain object in which every `partial` key
-* recursively matches (extra `actual` keys are ignored).
-*
-* @param actual - The value to test against (must be a plain object).
-* @param partial - The expected partial object shape.
-* @returns `true` when every `partial` key exists in `actual` and matches recursively.
-* @example
-* ```ts
-* matchesPartialObject({ a: 1, b: 2 }, { a: 1 }); // true
-* matchesPartialObject({ a: 1 }, { b: 1 }); // false (missing key)
-* ```
-*/
-function matchesPartialObject(actual, partial) {
-	if (!isPlainObject$1(actual)) return false;
-	return Object.keys(partial).every((key) => key in actual && matchesPartial(actual[key], partial[key]));
-}
-/**
-* Subset-equality matcher: is `partial` a recursive subset of `actual`?
-*
-* Fast path via `Object.is` (covers identical primitives/references and
-* `null`/`NaN`); primitives compare with `Object.is`; arrays match element-wise
-* with equal length; plain objects require every `partial` key to recursively
-* match (extra `actual` keys ignored).
-*
-* @param actual - The value to test against (typically `entry.data`).
-* @param partial - The expected partial shape.
-* @returns `true` when `partial` is a recursive subset of `actual`.
-* @example
-* ```ts
-* matchesPartial({ a: 1, b: 2 }, { a: 1 }); // true
-* matchesPartial([1, 2], [1]); // false (length mismatch)
-* ```
-*/
-function matchesPartial(actual, partial) {
-	if (Object.is(actual, partial)) return true;
-	if (Array.isArray(partial)) return matchesPartialArray(actual, partial);
-	if (isPlainObject$1(partial)) return matchesPartialObject(actual, partial);
-	return false;
-}
-/**
-* Tests whether an entry matches `event` and (when provided) `partial`.
-*
-* @param entry - The candidate trace entry.
-* @param event - Required event name.
-* @param partial - Optional partial data shape (subset-matched against `entry.data`).
-* @returns `true` when the entry matches the event and optional partial.
-* @example
-* ```ts
-* entryMatches({ level: "info", event: "a", data: { x: 1 }, ts: 0 }, "a", { x: 1 }); // true
-* ```
-*/
-function entryMatches(entry, event, partial) {
-	if (entry.event !== event) return false;
-	return partial === void 0 ? true : matchesPartial(entry.data, partial);
-}
-/**
-* Render a `partial` for an error message, prefixed with a space when present.
-*
-* @param partial - Optional partial data shape.
-* @returns A ` matching <json>` suffix, or an empty string when absent.
-* @example
-* ```ts
-* describePartial({ ok: true }); // ' matching {"ok":true}'
-* ```
-*/
-function describePartial(partial) {
-	return partial === void 0 ? "" : ` matching ${JSON.stringify(partial)}`;
-}
-/**
-* Find the first entry with `event` at or after `startIndex`, scanning forward.
-*
-* @param entries - The trace array to scan.
-* @param event - Event name to find.
-* @param startIndex - Index to begin scanning from (inclusive).
-* @returns The index of the first match, or `-1` when none exists from `startIndex` on.
-* @example
-* ```ts
-* findEventAtOrAfter([{ event: "a" }, { event: "b" }] as LogEntry[], "b", 0); // 1
-* ```
-*/
-function findEventAtOrAfter(entries, event, startIndex) {
-	for (let index = startIndex; index < entries.length; index++) if (entries[index]?.event === event) return index;
-	return -1;
-}
-/**
-* Create a fluent assertion chain bound to the live `entries` array. Each method
-* reads `entries` at call time, so assertions reflect later logging.
-*
-* @param entries - The live trace array (read on each assertion call).
-* @returns A fresh {@link ExpectChain} backed by `entries`.
-* @example
-* ```ts
-* createExpectChain(state.entries).toHaveEvent("build:complete");
-* ```
-*/
-function createExpectChain(entries) {
-	const chain = {
-		/**
-		* Assert at least one entry has `event`, optionally matching `partial`.
-		*
-		* @param event - Event name to find.
-		* @param partial - Optional partial data shape (subset-matched).
-		* @returns The same chain for chaining.
-		* @throws {LogExpectAssertionError} When no matching entry exists.
-		* @example
-		* ```ts
-		* chain.toHaveEvent("build:phase", { status: "start" });
-		* ```
-		*/
-		toHaveEvent(event, partial) {
-			if (!entries.some((entry) => entryMatches(entry, event, partial))) throw new LogExpectAssertionError(`Expected trace to contain event "${event}"${describePartial(partial)}, but none was found.`);
-			return chain;
-		},
-		/**
-		* Assert all of `events` appear in the trace in the given relative order.
-		*
-		* @param events - Ordered list of event names (gaps allowed).
-		* @returns The same chain for chaining.
-		* @throws {LogExpectAssertionError} When the ordering cannot be satisfied.
-		* @example
-		* ```ts
-		* chain.toHaveEventInOrder(["build:phase", "build:complete"]);
-		* ```
-		*/
-		toHaveEventInOrder(events) {
-			let cursor = 0;
-			for (const [position, event] of events.entries()) {
-				const matchIndex = findEventAtOrAfter(entries, event, cursor);
-				if (matchIndex === -1) throw new LogExpectAssertionError(`Expected events in order ${JSON.stringify(events)}, but "${event}" (index ${position}) was not found at or after position ${cursor}.`);
-				cursor = matchIndex + 1;
-			}
-			return chain;
-		},
-		/**
-		* Assert NO entry has `event` (optionally narrowed by `partial`).
-		*
-		* @param event - Event name that must be absent.
-		* @param partial - Optional partial data shape; only matching entries violate.
-		* @returns The same chain for chaining.
-		* @throws {LogExpectAssertionError} When a matching entry exists.
-		* @example
-		* ```ts
-		* chain.toNotHaveEvent("deploy:failed");
-		* ```
-		*/
-		toNotHaveEvent(event, partial) {
-			const offending = entries.findIndex((entry) => entryMatches(entry, event, partial));
-			if (offending !== -1) throw new LogExpectAssertionError(`Expected trace to NOT contain event "${event}"${describePartial(partial)}, but found one at index ${offending}.`);
-			return chain;
-		}
-	};
-	return chain;
-}
-//#endregion
-//#region src/plugins/log/api.ts
-/**
-* @file log plugin — API factory.
-*
-* Builds the `LogApi` over the plugin's `{ config, state }` core context:
-* the leveled loggers (via a shared `append`), the frozen `trace()` snapshot,
-* the live `expect()` chain, `addSink`, and `reset`.
-*/
-/**
-* Append a new entry to the trace and fan it out to every sink in order.
-*
-* @param state - The mutable log state to append to.
-* @param level - Severity level for the entry.
-* @param event - Event identifier.
-* @param data - Optional structured payload.
-* @example
-* ```ts
-* append(state, "info", "content:ready", { count: 12 });
-* ```
-*/
-function append(state, level, event, data) {
-	const entry = {
-		level,
-		event,
-		data,
-		ts: Date.now()
-	};
-	state.entries.push(entry);
-	for (const sink of state.sinks) sink.write(entry);
-}
-/**
-* Tests whether a value is a non-null, non-array plain object.
-*
-* @param value - The value to test.
-* @returns `true` when `value` is a non-null object that is not an array.
-* @example
-* ```ts
-* isPlainObject({ a: 1 }); // true
-* isPlainObject([1]); // false
-* ```
-*/
-function isPlainObject(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-/**
-* Merge an `Error`'s `message`/`stack` into `data` under an `error` key. The
-* `error` field is always preserved; only a plain object `data` contributes its
-* keys. Non-plain-object `data` (arrays and primitives) is replaced by `{}` —
-* its original value is not retained — so the merge target is always a record.
-*
-* @param data - Original payload (any shape).
-* @param error - The originating error to merge.
-* @returns A new object carrying any plain-object keys plus the `error` field.
-* @example
-* ```ts
-* mergeError({ target: "cf" }, new Error("boom"));
-* // { target: "cf", error: { message: "boom", stack: "..." } }
-* ```
-*/
-function mergeError(data, error) {
-	return {
-		...isPlainObject(data) ? data : {},
-		error: {
-			message: error.message,
-			stack: error.stack
-		}
-	};
-}
-/**
-* Create the log plugin API surface injected as `ctx.log` / `app.log`.
-*
-* @param ctx - Core plugin context (`{ config, state }`).
-* @returns The {@link LogApi} bound to `ctx.state`.
-* @example
-* ```ts
-* const log = createLogApi(ctx);
-* log.info("content:ready", { articleCount: 12 });
-* ```
-*/
-function createLogApi(ctx) {
-	const { state } = ctx;
-	return {
-		/**
-		* Append an `info` entry and fan it out to every sink.
-		*
-		* @param event - Event identifier (convention: `domain:action`).
-		* @param data - Optional structured payload.
-		* @example
-		* ```ts
-		* log.info("content:ready", { count: 12 });
-		* ```
-		*/
-		info(event, data) {
-			append(state, "info", event, data);
-		},
-		/**
-		* Append a `debug` entry and fan it out to every sink.
-		*
-		* @param event - Event identifier (convention: `domain:action`).
-		* @param data - Optional structured payload.
-		* @example
-		* ```ts
-		* log.debug("router:match", { path: "/blog/" });
-		* ```
-		*/
-		debug(event, data) {
-			append(state, "debug", event, data);
-		},
-		/**
-		* Append a `warn` entry and fan it out to every sink.
-		*
-		* @param event - Event identifier (convention: `domain:action`).
-		* @param data - Optional structured payload.
-		* @example
-		* ```ts
-		* log.warn("build:skip", { reason: "no sitemap" });
-		* ```
-		*/
-		warn(event, data) {
-			append(state, "warn", event, data);
-		},
-		/**
-		* Append an `error` entry. When `error` is provided, its `message`/`stack`
-		* are merged into `data` under an `error` key (existing keys preserved);
-		* otherwise `data` is recorded as-is.
-		*
-		* @param event - Event identifier (convention: `domain:action`).
-		* @param data - Optional structured payload.
-		* @param error - Optional originating Error to merge into `data`.
-		* @example
-		* ```ts
-		* log.error("deploy:failed", { target: "cf" }, err);
-		* ```
-		*/
-		error(event, data, error) {
-			append(state, "error", event, error === void 0 ? data : mergeError(data, error));
-		},
-		/**
-		* Return a frozen snapshot (fresh copy) of the entries recorded so far.
-		*
-		* @returns A readonly, frozen copy of the recorded entries.
-		* @example
-		* ```ts
-		* const entries = log.trace();
-		* ```
-		*/
-		trace() {
-			return Object.freeze([...state.entries]);
-		},
-		/**
-		* Return a fluent assertion chain bound to the live entries array.
-		*
-		* @returns A fresh {@link ExpectChain} reading `state.entries` live.
-		* @example
-		* ```ts
-		* log.expect().toHaveEvent("build:complete");
-		* ```
-		*/
-		expect() {
-			return createExpectChain(state.entries);
-		},
-		/**
-		* Register an additional output sink at runtime.
-		*
-		* @param sink - The sink to add to the fan-out list.
-		* @example
-		* ```ts
-		* log.addSink({ write: (e) => stream.write(JSON.stringify(e)) });
-		* ```
-		*/
-		addSink(sink) {
-			state.sinks.push(sink);
-		},
-		/**
-		* Clear all recorded entries while keeping registered sinks.
-		*
-		* @example
-		* ```ts
-		* log.reset();
-		* ```
-		*/
-		reset() {
-			state.entries.length = 0;
-		}
-	};
-}
-//#endregion
-//#region src/plugins/log/sinks.ts
-/** Severity rank for threshold comparison (higher = more severe). */
-const LEVEL_RANK = {
-	debug: 10,
-	info: 20,
-	warn: 30,
-	error: 40
-};
-/**
-* Build the console sink: routes entries by channel — `error` → `console.error`,
-* `warn` → `console.warn`, and `debug`/`info` → `console.log`. The full entry
-* object is forwarded so the console serializes its `event` and `data`. Entries
-* below `minLevel` are dropped (the in-memory trace still records everything).
-*
-* @param minLevel - Lowest severity to print. Defaults to `"debug"` (print all).
-* @returns A {@link LogSink} that writes to the matching `console` channel.
-* @example
-* ```ts
-* state.sinks.push(consoleSink("info")); // suppress debug spam
-* ```
-*/
-function consoleSink(minLevel = "debug") {
-	const threshold = LEVEL_RANK[minLevel];
-	return { 
-	/**
-	* Route a single entry to the console channel matching its level.
-	*
-	* @param entry - The entry to emit.
-	* @example
-	* ```ts
-	* sink.write({ level: "warn", event: "build:skip", ts: Date.now() });
-	* ```
-	*/
-write(entry) {
-		if (LEVEL_RANK[entry.level] < threshold) return;
-		if (entry.level === "error") console.error(entry);
-		else if (entry.level === "warn") console.warn(entry);
-		else console.log(entry);
-	} };
-}
-/**
-* Install mode-selected default sinks at onInit. The in-memory trace is always
-* on (`state.entries`); the console sink is added only in dev/production. `dev`
-* prints everything (debug+); `production` prints `info`+ only, so the per-phase
-* `debug` events (build:bundle, build:pages, …) don't spam a prod build. Both
-* modes still record all levels in the in-memory trace.
-*
-* @param ctx - Core plugin context (`{ config, state }`).
-* @param ctx.config - Resolved log config (`{ mode }`).
-* @param ctx.state - Mutable log state (`{ entries, sinks }`).
-* @example
-* ```ts
-* // "dev" -> [consoleSink("debug")]; "production" -> [consoleSink("info")]; "test"/"silent" -> []
-* ```
-*/
-function installDefaultSinks(ctx) {
-	if (ctx.config.mode === "dev") ctx.state.sinks.push(consoleSink("debug"));
-	else if (ctx.config.mode === "production") ctx.state.sinks.push(consoleSink("info"));
-}
-//#endregion
-//#region src/plugins/log/state.ts
-/**
-* Create fresh log state: an empty append-only trace and an empty sink list.
-* No module-level singletons — guarantees per-`createApp` isolation (two
-* `createApp` calls never share `entries` or `sinks`).
-*
-* @param _ctx - Core plugin context (`{ config }`); unused at construction.
-* @returns A fresh `LogState` with empty `entries` and `sinks` arrays.
-* @example
-* ```ts
-* const state = createLogState({ config: { mode: "test" } }); // { entries: [], sinks: [] }
-* ```
-*/
-function createLogState(_ctx) {
-	return {
-		entries: [],
-		sinks: []
-	};
-}
-/**
-* Core logging plugin — always-on in-memory trace + `expect()` event-trace DSL.
-* API injected as `ctx.log` on every regular plugin and surfaced as `app.log`.
-* No depends / events / hooks (core plugin per spec/03 §5).
-*
-* @see README.md
-*/
-const logPlugin = (0, _moku_labs_core.createCorePlugin)("log", {
-	config: { mode: "production" },
-	createState: createLogState,
-	api: createLogApi,
-	onInit: installDefaultSinks
-});
-//#endregion
 //#region src/config.ts
 /**
 * @file Framework configuration — Config + Events types, core plugin registration.
@@ -887,7 +64,7 @@ const coreConfig = (0, _moku_labs_core.createCoreConfig)("web", {
 		stage: "production",
 		mode: "hybrid"
 	},
-	plugins: [logPlugin, envPlugin],
+	plugins: [_moku_labs_common.logPlugin, _moku_labs_common.envPlugin],
 	pluginConfigs: { log: { mode: "production" } }
 });
 /**
@@ -8859,312 +8036,17 @@ function networkUrl(port, source = node_os.networkInterfaces) {
 	return ip === null ? null : `http://${ip}:${port}`;
 }
 //#endregion
-//#region src/plugins/cli/render/ansi.ts
-/**
-* @file cli plugin — TTY/NO_COLOR-aware ANSI color + box-drawing helpers shared by
-* the Panel renderer. Modeled on the legacy `scripts/_log.ts`: color and box glyphs
-* are emitted only on a real TTY with `NO_COLOR` unset; otherwise plain ASCII so
-* CI logs and pipes stay readable.
-*/
-/** The ANSI escape byte (ESC, `0x1b`), built so no literal control char is in source. */
-const ESC = String.fromCodePoint(27);
-/** ANSI SGR codes used by the Panel renderer (each prefixed with the ESC byte). */
-const ANSI = {
-	reset: `${ESC}[0m`,
-	bold: `${ESC}[1m`,
-	dim: `${ESC}[2m`,
-	red: `${ESC}[31m`,
-	green: `${ESC}[32m`,
-	yellow: `${ESC}[33m`,
-	blue: `${ESC}[34m`,
-	magenta: `${ESC}[35m`,
-	cyan: `${ESC}[36m`,
-	gray: `${ESC}[90m`
-};
-/**
-* The Moku brand pink (`#FF1E6F`) as an RGB triple, used for 24-bit truecolor output.
-* Degrades to {@link ANSI.magenta} on a 16-color TTY and to plain text off a TTY.
-*/
-const BRAND_PINK = {
-	r: 255,
-	g: 30,
-	b: 111
-};
-/**
-* Build a 24-bit (truecolor) SGR foreground escape for the given RGB triple.
-*
-* @param r - Red channel (0–255).
-* @param g - Green channel (0–255).
-* @param b - Blue channel (0–255).
-* @returns The `ESC[38;2;r;g;bm` foreground sequence.
-* @example
-* fg24(255, 30, 111); // "\x1b[38;2;255;30;111m"
-*/
-function fg24(r, g, b) {
-	return `${ESC}[38;2;${r};${g};${b}m`;
-}
-/** ANSI: erase the entire current line, leaving the cursor where it is. */
-const CLEAR_LINE = `${ESC}[2K`;
-/** ANSI: erase from the cursor to the end of the screen (drops stale trailing rows). */
-const CLEAR_BELOW = `${ESC}[0J`;
-/**
-* Braille spinner frames for live "working…" indicators on a TTY (advance one per tick).
-* Off a TTY the Panel never animates, so this is unused in plain/CI output.
-*/
-const SPINNER_FRAMES = [
-	"⠋",
-	"⠙",
-	"⠹",
-	"⠸",
-	"⠼",
-	"⠴",
-	"⠦",
-	"⠧",
-	"⠇",
-	"⠏"
-];
-/**
-* The ANSI sequence to move the cursor up `n` lines (empty string for `n <= 0`). The
-* Panel uses it to repaint a live block in place — move up over the previous draw, then
-* rewrite each row — so progress updates a fixed region instead of scrolling new lines.
-*
-* @param n - Number of lines to move the cursor up.
-* @returns The cursor-up escape sequence, or `""` when `n <= 0`.
-* @example
-* cursorUp(3); // "\x1b[3A"
-*/
-function cursorUp(n) {
-	return n > 0 ? `${ESC}[${n}A` : "";
-}
-/** Unicode rounded box glyphs used when output is a color-capable TTY. */
-const UNICODE_BOX = {
-	topLeft: "╭",
-	topRight: "╮",
-	bottomLeft: "╰",
-	bottomRight: "╯",
-	horizontal: "─",
-	vertical: "│"
-};
-/** ASCII box glyphs used when output is piped/CI (plain mode). */
-const ASCII_BOX = {
-	topLeft: "+",
-	topRight: "+",
-	bottomLeft: "+",
-	bottomRight: "+",
-	horizontal: "-",
-	vertical: "|"
-};
-/**
-* Matches every ANSI SGR escape sequence (used to measure visible width). Built from
-* the {@link ESC} byte so no literal control character appears in the source regex.
-*/
-const ANSI_PATTERN = new RegExp(String.raw`${ESC}\[[0-9;]*m`, "g");
-/**
-* Whether ANSI color/box glyphs should be emitted: a TTY stream with `NO_COLOR`
-* unset. Reads `process.stdout.isTTY` and `process.env.NO_COLOR` by default so the
-* renderer auto-degrades in CI and pipes, exactly like the legacy logger.
-*
-* @param stream - Stream to probe for `isTTY` (defaults to `process.stdout`).
-* @param noColor - The `NO_COLOR` value (defaults to `process.env.NO_COLOR`).
-* @returns `true` when color should be used.
-* @example
-* supportsColor(); // true in an interactive terminal
-*/
-function supportsColor(stream = process.stdout, noColor = process.env.NO_COLOR) {
-	return stream.isTTY === true && noColor === void 0;
-}
-/**
-* Whether the terminal advertises 24-bit (truecolor) support via `COLORTERM`, so the
-* renderer may emit the exact brand pink ({@link BRAND_PINK}) instead of the 16-color
-* `magenta` approximation. Always layered on top of {@link supportsColor} — truecolor
-* is never used when color itself is disabled.
-*
-* @param colorTerm - The `COLORTERM` value (defaults to `process.env.COLORTERM`).
-* @returns `true` when `COLORTERM` is `truecolor` or `24bit`.
-* @example
-* supportsTruecolor("truecolor"); // true
-*/
-function supportsTruecolor(colorTerm = process.env.COLORTERM) {
-	return colorTerm === "truecolor" || colorTerm === "24bit";
-}
-/**
-* The braille spinner glyph for a given elapsed time, advancing one frame per
-* `frameMs`. Deriving the frame from wall-clock elapsed (rather than a tick counter)
-* keeps the spinner correct even when the animation ticker is briefly starved by a
-* synchronous build phase and several ticks coalesce — the glyph still reflects real
-* elapsed time instead of freezing on a stale frame.
-*
-* @param elapsedMs - Milliseconds since the live region opened.
-* @param frameMs - Milliseconds per frame (defaults to `80`).
-* @returns The active spinner glyph.
-* @example
-* spinnerFrameAt(240); // "⠹" (the 4th frame at 80ms/frame)
-*/
-function spinnerFrameAt(elapsedMs, frameMs = 80) {
-	return SPINNER_FRAMES[Math.floor(Math.max(0, elapsedMs) / frameMs) % SPINNER_FRAMES.length] ?? "⠋";
-}
-/**
-* Select the box glyph set for the given color mode (Unicode on a TTY, ASCII off it).
-*
-* @param color - Whether color/Unicode output is enabled.
-* @returns The matching {@link BoxGlyphs} set.
-* @example
-* const glyphs = boxGlyphs(supportsColor());
-*/
-function boxGlyphs(color) {
-	return color ? UNICODE_BOX : ASCII_BOX;
-}
-/**
-* The visible width of a string, ignoring any ANSI escape sequences it contains.
-*
-* @param text - The (possibly colorized) text to measure.
-* @returns The number of visible characters.
-* @example
-* visibleWidth(`${ANSI.red}hi${ANSI.reset}`); // 2
-*/
-function visibleWidth(text) {
-	return text.replaceAll(ANSI_PATTERN, "").length;
-}
-/**
-* Build a {@link Palette} bound to a fixed color mode. When `color` is `false` every
-* helper returns its input unchanged, so the same render code path produces plain
-* output in CI/pipes.
-*
-* @param color - Whether color is enabled (typically `supportsColor()`).
-* @param truecolor - Whether 24-bit output is enabled (typically `supportsTruecolor()`);
-*   only consulted by {@link Palette.pink}. Defaults to `false` (16-color magenta).
-* @returns The bound color palette.
-* @example
-* const palette = makePalette(supportsColor(), supportsTruecolor());
-* const line = palette.green("done");
-*/
-function makePalette(color, truecolor = false) {
-	return {
-		enabled: color,
-		/**
-		* Wrap text in the given ANSI code (returns it unchanged when color is off).
-		*
-		* @param code - The ANSI SGR code to apply.
-		* @param text - The text to colorize.
-		* @returns The colorized (or unchanged) text.
-		* @example
-		* palette.paint(ANSI.green, "ok");
-		*/
-		paint(code, text) {
-			return color ? `${code}${text}${ANSI.reset}` : text;
-		},
-		/**
-		* Bold the given text (no-op in plain mode).
-		*
-		* @param text - The text to embolden.
-		* @returns The bold (or unchanged) text.
-		* @example
-		* palette.bold("title");
-		*/
-		bold(text) {
-			return this.paint(ANSI.bold, text);
-		},
-		/**
-		* Dim the given text (no-op in plain mode).
-		*
-		* @param text - The text to dim.
-		* @returns The dim (or unchanged) text.
-		* @example
-		* palette.dim("· 84ms");
-		*/
-		dim(text) {
-			return this.paint(ANSI.dim, text);
-		},
-		/**
-		* Color the given text green (no-op in plain mode).
-		*
-		* @param text - The text to colorize.
-		* @returns The green (or unchanged) text.
-		* @example
-		* palette.green("✓");
-		*/
-		green(text) {
-			return this.paint(ANSI.green, text);
-		},
-		/**
-		* Color the given text yellow (no-op in plain mode).
-		*
-		* @param text - The text to colorize.
-		* @returns The yellow (or unchanged) text.
-		* @example
-		* palette.yellow("~");
-		*/
-		yellow(text) {
-			return this.paint(ANSI.yellow, text);
-		},
-		/**
-		* Color the given text red (no-op in plain mode).
-		*
-		* @param text - The text to colorize.
-		* @returns The red (or unchanged) text.
-		* @example
-		* palette.red("✗");
-		*/
-		red(text) {
-			return this.paint(ANSI.red, text);
-		},
-		/**
-		* Color the given text cyan (no-op in plain mode).
-		*
-		* @param text - The text to colorize.
-		* @returns The cyan (or unchanged) text.
-		* @example
-		* palette.cyan("http://localhost:4173");
-		*/
-		cyan(text) {
-			return this.paint(ANSI.cyan, text);
-		},
-		/**
-		* Color the given text the Moku brand pink: exact `#FF1E6F` (24-bit) when truecolor
-		* is enabled, the 16-color `magenta` approximation otherwise, unchanged in plain mode.
-		*
-		* @param text - The text to colorize.
-		* @returns The pink (or unchanged) text.
-		* @example
-		* palette.pink("▟▙ moku web");
-		*/
-		pink(text) {
-			if (!color) return text;
-			if (truecolor) return `${fg24(BRAND_PINK.r, BRAND_PINK.g, BRAND_PINK.b)}${text}${ANSI.reset}`;
-			return this.paint(ANSI.magenta, text);
-		}
-	};
-}
+//#region src/plugins/cli/render/panel.ts
 /**
-* Frame a list of already-rendered content lines in a box, padding each line to the
-* widest visible line (or `minInnerWidth`, whichever is larger — so several boxes can be
-* forced to a shared width). Uses Unicode borders when `color` is enabled and ASCII
-* otherwise. Visible width ignores embedded ANSI so colored lines align.
-*
-* @param lines - The content lines (may contain ANSI color codes).
-* @param color - Whether to use Unicode borders (and assume color-capable output).
-* @param minInnerWidth - Minimum inner (content) width to pad every row to. Defaults to `0`.
-* @returns The boxed lines (top border, content rows, bottom border).
-* @example
-* box(["Local:   http://localhost:4173"], true, 62);
+* @file cli plugin — the Panel renderer (the "Velocity Lockup" CLI identity). Produces
+* the `▟▙ moku web` lockup + version/runtime banner, the live phase tree with an
+* animated indeterminate build bar, the BUILD summary + throughput sparkline, the
+* server-ready rail with a persistent breathing `◍ live` idle pulse, the compact
+* rebuild line, the deploy result, and diagnostic heading/check rows. TTY/`NO_COLOR`-
+* aware via {@link makePalette} (24-bit brand pink when truecolor is available, the
+* 16-color magenta approximation otherwise, plain text off a TTY); every line is
+* written through an injectable sink so tests can capture it.
 */
-function box(lines, color, minInnerWidth = 0) {
-	const glyphs = boxGlyphs(color);
-	const inner = Math.max(0, minInnerWidth, ...lines.map((line) => visibleWidth(line)));
-	const horizontal = glyphs.horizontal.repeat(inner + 2);
-	const top = `${glyphs.topLeft}${horizontal}${glyphs.topRight}`;
-	const bottom = `${glyphs.bottomLeft}${horizontal}${glyphs.bottomRight}`;
-	return [
-		top,
-		...lines.map((line) => {
-			const pad = " ".repeat(inner - visibleWidth(line));
-			return `${glyphs.vertical} ${line}${pad} ${glyphs.vertical}`;
-		}),
-		bottom
-	];
-}
-//#endregion
-//#region src/plugins/cli/render/panel.ts
 /** Per-command label shown beside the lockup wordmark. */
 const COMMAND_LABEL = {
 	build: "build",
@@ -9254,7 +8136,7 @@ function durationSuffix(palette, durationMs) {
 * railLine("  ├─ ✓ pages", "· 12ms");
 */
 function railLine(left, right, width = RAIL_WIDTH) {
-	const gap = Math.max(1, width - visibleWidth(left) - visibleWidth(right));
+	const gap = Math.max(1, width - (0, _moku_labs_common_cli.visibleWidth)(left) - (0, _moku_labs_common_cli.visibleWidth)(right));
 	return `${left}${" ".repeat(gap)}${right}`;
 }
 /**
@@ -9295,8 +8177,8 @@ function createPanelRenderer(options = {}) {
 		process.stdout.write(chunk);
 	});
 	const now = options.now ?? Date.now;
-	const color = options.color ?? supportsColor();
-	const palette = makePalette(color, options.truecolor ?? (color && supportsTruecolor()));
+	const color = options.color ?? (0, _moku_labs_common_cli.supportsColor)();
+	const palette = (0, _moku_labs_common_cli.makePalette)(color, options.truecolor ?? (color && (0, _moku_labs_common_cli.supportsTruecolor)()));
 	const version = options.version ?? "dev";
 	const coreVersion = options.coreVersion;
 	const g = glyphSet(color);
@@ -9323,7 +8205,7 @@ function createPanelRenderer(options = {}) {
 	const renderPhaseRow = (row) => {
 		const branch = palette.dim(g.tree);
 		if (row.done) return railLine(`  ${branch} ${palette.green("✓")} ${row.name}`, palette.dim(`· ${row.durationMs}ms`));
-		return `  ${branch} ${palette.cyan(spinnerFrameAt(now() - blockStartedAt, SPIN_MS))} ${palette.dim(row.name)}`;
+		return `  ${branch} ${palette.cyan((0, _moku_labs_common_cli.spinnerFrameAt)(now() - blockStartedAt, SPIN_MS))} ${palette.dim(row.name)}`;
 	};
 	/**
 	* Render the indeterminate "comet" build bar — a short pink fill window sweeping across
@@ -9354,10 +8236,10 @@ function createPanelRenderer(options = {}) {
 	* paintPhaseBlock();
 	*/
 	const paintPhaseBlock = () => {
-		let frame = cursorUp(phaseDrawn);
-		for (const row of phaseRows) frame += `${CLEAR_LINE}${renderPhaseRow(row)}\n`;
-		frame += `${CLEAR_LINE}${renderBuildBar(now() - blockStartedAt)}\n`;
-		writeRaw(frame + CLEAR_BELOW);
+		let frame = (0, _moku_labs_common_cli.cursorUp)(phaseDrawn);
+		for (const row of phaseRows) frame += `${_moku_labs_common_cli.CLEAR_LINE}${renderPhaseRow(row)}\n`;
+		frame += `${_moku_labs_common_cli.CLEAR_LINE}${renderBuildBar(now() - blockStartedAt)}\n`;
+		writeRaw(frame + _moku_labs_common_cli.CLEAR_BELOW);
 		phaseDrawn = phaseRows.length + 1;
 	};
 	/**
@@ -9367,9 +8249,9 @@ function createPanelRenderer(options = {}) {
 	* paintRebuildLine();
 	*/
 	const paintRebuildLine = () => {
-		const spinner = palette.cyan(spinnerFrameAt(now() - rebuildStartedAt, SPIN_MS));
+		const spinner = palette.cyan((0, _moku_labs_common_cli.spinnerFrameAt)(now() - rebuildStartedAt, SPIN_MS));
 		const elapsed = palette.dim(`· ${((now() - rebuildStartedAt) / 1e3).toFixed(1)}s`);
-		writeRaw(`\r${CLEAR_LINE}  ${spinner} rebuilding ${rebuildLabel} ${elapsed}`);
+		writeRaw(`\r${_moku_labs_common_cli.CLEAR_LINE}  ${spinner} rebuilding ${rebuildLabel} ${elapsed}`);
 	};
 	/**
 	* Repaint the persistent in-place `◍ live` idle pulse beneath the serve panel — the
@@ -9380,7 +8262,7 @@ function createPanelRenderer(options = {}) {
 	* paintIdleLine();
 	*/
 	const paintIdleLine = () => {
-		writeRaw(`\r${CLEAR_LINE}  ${Math.floor((now() - idleStartedAt) / 450) % 2 === 0 ? palette.pink(g.liveOn) : palette.dim(g.liveOff)} ${palette.dim("live · waiting for changes…")}`);
+		writeRaw(`\r${_moku_labs_common_cli.CLEAR_LINE}  ${Math.floor((now() - idleStartedAt) / 450) % 2 === 0 ? palette.pink(g.liveOn) : palette.dim(g.liveOff)} ${palette.dim("live · waiting for changes…")}`);
 	};
 	/**
 	* Advance whichever live region is active by one frame (driven by the shared ticker).
@@ -9507,9 +8389,9 @@ function createPanelRenderer(options = {}) {
 		built(summary) {
 			if (rebuilding) return;
 			if (color && phaseOpen) {
-				let frame = cursorUp(phaseDrawn);
-				for (const row of phaseRows) frame += `${CLEAR_LINE}${renderPhaseRow(row)}\n`;
-				writeRaw(frame + CLEAR_BELOW);
+				let frame = (0, _moku_labs_common_cli.cursorUp)(phaseDrawn);
+				for (const row of phaseRows) frame += `${_moku_labs_common_cli.CLEAR_LINE}${renderPhaseRow(row)}\n`;
+				writeRaw(frame + _moku_labs_common_cli.CLEAR_BELOW);
 			}
 			const phaseDurations = phaseRows.map((row) => row.durationMs).filter((value) => value !== void 0);
 			phaseOpen = false;
@@ -9524,7 +8406,7 @@ function createPanelRenderer(options = {}) {
 				const rateLabel = palette.dim(`${rate} pages/s`);
 				lines.push(railLine(spark, rateLabel, BOX_INNER));
 			}
-			writeBlock(box(lines, color, BOX_INNER));
+			writeBlock((0, _moku_labs_common_cli.box)(lines, color, BOX_INNER));
 		},
 		/**
 		* Render the server-ready rail (Local / Network URLs + watched dirs) and, on a TTY,
@@ -9538,7 +8420,7 @@ function createPanelRenderer(options = {}) {
 			const network = info.network ? palette.cyan(info.network) : palette.dim("unavailable");
 			const lines = [`${palette.green("➜")} ${palette.bold("Local")}    ${palette.cyan(info.local)}`, `${palette.green("➜")} ${palette.bold("Network")}  ${network}`];
 			if (info.watching && info.watching.length > 0) lines.push(`${palette.dim("watching")}   ${palette.dim(info.watching.join(", "))}`);
-			writeBlock(box(lines, color, BOX_INNER));
+			writeBlock((0, _moku_labs_common_cli.box)(lines, color, BOX_INNER));
 			if (color) {
 				serveMode = true;
 				idle = true;
@@ -9584,7 +8466,7 @@ function createPanelRenderer(options = {}) {
 			rebuilding = false;
 			const line = `  ${palette.green("✓")} rebuilt ${palette.bold(String(info.pageCount))} pages ${palette.dim(`· ${info.durationMs}ms · reloaded`)}`;
 			if (settledRebuild && color) {
-				writeRaw(`\r${CLEAR_LINE}${line}\n`);
+				writeRaw(`\r${_moku_labs_common_cli.CLEAR_LINE}${line}\n`);
 				resumeIdle();
 				return;
 			}
@@ -9609,7 +8491,7 @@ function createPanelRenderer(options = {}) {
 				const id = result.deploymentId ? ` ${dot} ${palette.dim(result.deploymentId)}` : "";
 				lines.push(`${palette.dim("→")} ${palette.cyan(result.url)}${id}`);
 			} else if (result.deploymentId) lines.push(palette.dim(`id ${result.deploymentId}`));
-			writeBlock(box(lines, color, BOX_INNER));
+			writeBlock((0, _moku_labs_common_cli.box)(lines, color, BOX_INNER));
 		},
 		/**
 		* Render a neutral informational line.
@@ -9646,7 +8528,7 @@ function createPanelRenderer(options = {}) {
 			const wasRebuilding = rebuilding;
 			if (rebuilding) {
 				rebuilding = false;
-				if (color) writeRaw(`\r${CLEAR_LINE}`);
+				if (color) writeRaw(`\r${_moku_labs_common_cli.CLEAR_LINE}`);
 			}
 			writeError(`  ${palette.red("✗")} ${message}`);
 			if (cause !== void 0) writeError(String(cause));
@@ -9707,9 +8589,9 @@ const YES_PATTERN = /^y(es)?$/i;
 /** Prompt rail width — matches the renderer's `RAIL_WIDTH` so the hint aligns with other rows. */
 const PROMPT_WIDTH = 66;
 /** Whether the interactive prompts render with the MOKU marker styling (color/TTY only). */
-const PROMPT_COLOR = supportsColor();
+const PROMPT_COLOR = (0, _moku_labs_common_cli.supportsColor)();
 /** Shared palette for the interactive prompts (same brand colors as the Panel renderer). */
-const PROMPT_PALETTE = makePalette(PROMPT_COLOR, PROMPT_COLOR && supportsTruecolor());
+const PROMPT_PALETTE = (0, _moku_labs_common_cli.makePalette)(PROMPT_COLOR, PROMPT_COLOR && (0, _moku_labs_common_cli.supportsTruecolor)());
 /**
 * Build the styled y/N confirm prompt: a brand `◆` marker + the question on the left,
 * a dim `y / N` hint + cyan `›` caret right-aligned to {@link PROMPT_WIDTH}. Falls back
@@ -9724,7 +8606,7 @@ function confirmPrompt(question) {
 	if (!PROMPT_COLOR) return `${question} [y/N] `;
 	const left = `  ${PROMPT_PALETTE.pink("◆")} ${question}`;
 	const right = `${PROMPT_PALETTE.dim("y / N")} ${PROMPT_PALETTE.cyan("›")} `;
-	const gap = Math.max(1, PROMPT_WIDTH - visibleWidth(left) - visibleWidth(right));
+	const gap = Math.max(1, PROMPT_WIDTH - (0, _moku_labs_common_cli.visibleWidth)(left) - (0, _moku_labs_common_cli.visibleWidth)(right));
 	return `${left}${" ".repeat(gap)}${right}`;
 }
 /**
@@ -10148,7 +9030,7 @@ function spaEvents(register) {
 }
 //#endregion
 //#region src/plugins/spa/types.ts
-var types_exports$9 = /* @__PURE__ */ require_convention.__exportAll({ COMPONENT_HOOK_NAMES: () => COMPONENT_HOOK_NAMES });
+var types_exports$7 = /* @__PURE__ */ require_convention.__exportAll({ COMPONENT_HOOK_NAMES: () => COMPONENT_HOOK_NAMES });
 /** Allowed hook names — single source of truth for fail-fast validation. */
 const COMPONENT_HOOK_NAMES = [
 	"onCreate",
@@ -11484,176 +10366,11 @@ var types_exports$3 = /* @__PURE__ */ require_convention.__exportAll({});
 //#region src/plugins/deploy/types.ts
 var types_exports$4 = /* @__PURE__ */ require_convention.__exportAll({});
 //#endregion
-//#region src/plugins/env/types.ts
-var types_exports$5 = /* @__PURE__ */ require_convention.__exportAll({});
-//#endregion
 //#region src/plugins/head/types.ts
-var types_exports$6 = /* @__PURE__ */ require_convention.__exportAll({});
-//#endregion
-//#region src/plugins/log/types.ts
-var types_exports$7 = /* @__PURE__ */ require_convention.__exportAll({});
+var types_exports$5 = /* @__PURE__ */ require_convention.__exportAll({});
 //#endregion
 //#region src/plugins/router/types.ts
-var types_exports$8 = /* @__PURE__ */ require_convention.__exportAll({});
-//#endregion
-//#region src/plugins/env/providers.ts
-/**
-* @file env plugin — built-in providers: dotenv, processEnv, cloudflareBindings.
-*/
-/** Default dotenv file path: optional local overrides. */
-const DEFAULT_DOTENV_PATH = ".env.local";
-/** Property on `globalThis` that the consumer sets per Cloudflare request. */
-const CLOUDFLARE_GLOBAL = "__CLOUDFLARE_ENV__";
-/** `String.indexOf` sentinel meaning "no `=` separator on this line". */
-const NO_SEPARATOR = -1;
-/**
-* Strips a single matching pair of surrounding double or single quotes from a
-* value. Leaves unquoted values (and trailing inline comments) untouched.
-*
-* @param value - The already-trimmed raw value.
-* @returns The value with one outer quote pair removed, if present.
-* @example
-* ```ts
-* stripQuotes('"a"'); // "a"
-* stripQuotes("plain # c"); // "plain # c"
-* ```
-*/
-function stripQuotes(value) {
-	if (value.length < 2) return value;
-	const first = value[0];
-	const last = value.at(-1);
-	if ((first === "\"" || first === "'") && first === last) return value.slice(1, -1);
-	return value;
-}
-/**
-* Reports whether a trimmed line carries no assignment — a blank line or a
-* full-line `#` comment — and should be skipped by the parser.
-*
-* @param trimmed - A whitespace-trimmed line from the dotenv text.
-* @returns `true` when the line is empty or a comment.
-* @example
-* ```ts
-* isIgnoredLine(""); // true
-* isIgnoredLine("# note"); // true
-* isIgnoredLine("A=1"); // false
-* ```
-*/
-function isIgnoredLine(trimmed) {
-	return trimmed === "" || trimmed.startsWith("#");
-}
-/**
-* Parses `.env`-style text into a flat record. Handles CRLF/LF, blank lines,
-* full-line `#` comments, first-`=` splitting, key/value trimming, and a single
-* outer quote pair. Does not strip trailing inline comments on unquoted values.
-*
-* @param text - The raw file contents.
-* @returns A flat record of parsed key/value pairs.
-* @example
-* ```ts
-* parseDotenv('A=1\nB="two"'); // { A: "1", B: "two" }
-* ```
-*/
-function parseDotenv(text) {
-	const out = {};
-	for (const line of text.split(/\r?\n/)) {
-		const trimmed = line.trim();
-		if (isIgnoredLine(trimmed)) continue;
-		const eq = trimmed.indexOf("=");
-		if (eq === NO_SEPARATOR) continue;
-		const key = trimmed.slice(0, eq).trim();
-		out[key] = stripQuotes(trimmed.slice(eq + 1).trim());
-	}
-	return out;
-}
-/**
-* A zero-dependency `.env`-style provider that re-reads and re-parses the file
-* from disk on every `load()`. Missing file resolves to `{}` (optional
-* overrides). Strips a single outer quote pair; does not strip trailing inline
-* comments on unquoted values.
-*
-* @param path - Path to the dotenv file. Defaults to `.env.local`.
-* @returns An {@link EnvProvider} named `dotenv:<path>` that reads fresh per call.
-* @example
-* ```ts
-* const provider = dotenv(".env.local");
-* provider.load(); // { PUBLIC_API_URL: "/api", ... }
-* ```
-*/
-function dotenv(path = DEFAULT_DOTENV_PATH) {
-	return {
-		name: `dotenv:${path}`,
-		/**
-		* Reads and parses the dotenv file fresh from disk; `{}` if it is missing.
-		*
-		* @returns The parsed environment record, or `{}` when the file is absent.
-		* @example
-		* ```ts
-		* dotenv(".env.local").load();
-		* ```
-		*/
-		load() {
-			if (!(0, node_fs.existsSync)(path)) return {};
-			return parseDotenv((0, node_fs.readFileSync)(path, "utf8"));
-		}
-	};
-}
-/**
-* A provider that returns a shallow copy of `process.env` at `load()` time.
-*
-* @returns An {@link EnvProvider} named `process-env`.
-* @example
-* ```ts
-* const provider = processEnv();
-* provider.load().HOME; // current process value
-* ```
-*/
-function processEnv() {
-	return {
-		name: "process-env",
-		/**
-		* Returns a shallow copy of `process.env` at call time.
-		*
-		* @returns A fresh shallow copy of `process.env`.
-		* @example
-		* ```ts
-		* processEnv().load();
-		* ```
-		*/
-		load() {
-			return { ...process.env };
-		}
-	};
-}
-/**
-* A provider that reads live, per-request Cloudflare bindings from
-* `globalThis.__CLOUDFLARE_ENV__` at `load()` time (`?? {}` when absent). Never
-* caches the binding object; the consumer owns the global's request lifecycle.
-*
-* @returns An {@link EnvProvider} named `cloudflare`.
-* @example
-* ```ts
-* globalThis.__CLOUDFLARE_ENV__ = env; // set by the request handler
-* const provider = cloudflareBindings();
-* provider.load(); // reads the current request's bindings
-* ```
-*/
-function cloudflareBindings() {
-	return {
-		name: "cloudflare",
-		/**
-		* Reads `globalThis.__CLOUDFLARE_ENV__` fresh, never caching the bindings.
-		*
-		* @returns The current Cloudflare bindings, or `{}` when the global is unset.
-		* @example
-		* ```ts
-		* cloudflareBindings().load();
-		* ```
-		*/
-		load() {
-			return globalThis[CLOUDFLARE_GLOBAL] ?? {};
-		}
-	};
-}
+var types_exports$6 = /* @__PURE__ */ require_convention.__exportAll({});
 //#endregion
 //#region node_modules/unist-util-stringify-position/lib/index.js
 /**
@@ -13884,43 +12601,41 @@ Object.defineProperty(exports, "Deploy", {
 	}
 });
 exports.EmbedFacadeButton = EmbedFacadeButton;
-Object.defineProperty(exports, "Env", {
+exports.GalleryTrack = GalleryTrack;
+Object.defineProperty(exports, "Head", {
 	enumerable: true,
 	get: function() {
 		return types_exports$5;
 	}
 });
-exports.GalleryTrack = GalleryTrack;
-Object.defineProperty(exports, "Head", {
+Object.defineProperty(exports, "Router", {
 	enumerable: true,
 	get: function() {
 		return types_exports$6;
 	}
 });
-Object.defineProperty(exports, "Log", {
+Object.defineProperty(exports, "Spa", {
 	enumerable: true,
 	get: function() {
 		return types_exports$7;
 	}
 });
-Object.defineProperty(exports, "Router", {
-	enumerable: true,
-	get: function() {
-		return types_exports$8;
-	}
-});
-Object.defineProperty(exports, "Spa", {
+Object.defineProperty(exports, "browserEnv", {
 	enumerable: true,
 	get: function() {
-		return types_exports$9;
+		return _moku_labs_common.browserEnv;
 	}
 });
-exports.browserEnv = browserEnv;
 exports.buildArticleHead = buildArticleHead;
 exports.buildPlugin = buildPlugin;
 exports.canonical = canonical;
 exports.cliPlugin = cliPlugin;
-exports.cloudflareBindings = cloudflareBindings;
+Object.defineProperty(exports, "cloudflareBindings", {
+	enumerable: true,
+	get: function() {
+		return _moku_labs_common.cloudflareBindings;
+	}
+});
 exports.contentPlugin = contentPlugin;
 exports.createApp = createApp;
 exports.createComponent = createComponent;
@@ -13929,8 +12644,18 @@ exports.createUrls = createUrls;
 exports.dataPlugin = dataPlugin;
 exports.defineRoutes = defineRoutes;
 exports.deployPlugin = deployPlugin;
-exports.dotenv = dotenv;
-exports.envPlugin = envPlugin;
+Object.defineProperty(exports, "dotenv", {
+	enumerable: true,
+	get: function() {
+		return _moku_labs_common.dotenv;
+	}
+});
+Object.defineProperty(exports, "envPlugin", {
+	enumerable: true,
+	get: function() {
+		return _moku_labs_common.envPlugin;
+	}
+});
 exports.feedLink = feedLink;
 exports.fileSystemContent = fileSystemContent;
 exports.headPlugin = headPlugin;
@@ -13938,10 +12663,20 @@ exports.hreflang = hreflang;
 exports.i18nPlugin = i18nPlugin;
 exports.jsonLd = jsonLd;
 exports.lazyEmbed = lazyEmbed;
-exports.logPlugin = logPlugin;
+Object.defineProperty(exports, "logPlugin", {
+	enumerable: true,
+	get: function() {
+		return _moku_labs_common.logPlugin;
+	}
+});
 exports.meta = meta;
 exports.og = og;
-exports.processEnv = processEnv;
+Object.defineProperty(exports, "processEnv", {
+	enumerable: true,
+	get: function() {
+		return _moku_labs_common.processEnv;
+	}
+});
 exports.route = route;
 exports.routerPlugin = routerPlugin;
 exports.sitePlugin = sitePlugin;