@multiplatform.one/cli 7.28.0 → 7.29.0

package/lib/commands/scaffold.mjs

@@ -1,4 +1,5 @@
 import { cliRoot, readProvenance } from "./provenance.mjs";
+import { checkSourceAccess } from "../source.mjs";
 import { mkdtempSync, rmSync } from "node:fs";
 import { join } from "node:path";
 import spawn from "nano-spawn";
@@ -25,6 +26,7 @@ function reportKept(stdout) {
 }
 /** Run scaffold.sh and return the provenance it wrote. */
 async function runScaffold(request) {
+	await checkSourceAccess(request.source);
 	const args = [scaffoldScript()];
 	for (const app of request.apps) args.push("--app", app);
 	for (const service of request.services) args.push("--service", service);
@@ -75,6 +77,7 @@ async function scaffoldToTemp(request) {
 * templates of an older CLI version, for adopted-project merge bases).
 */
 async function archiveSubtree(source, ref, subtree, dest) {
+	await checkSourceAccess(source);
 	await spawn("sh", [
 		"-c",
 		[

package/lib/source.json

@@ -1,5 +1,5 @@
 {
-  "cliVersion": "7.28.0",
+  "cliVersion": "7.29.0",
   "url": "https://git.corp.bitspur.com/multiplatform.one/mpo.git",
-  "sha": "543e14badebf38e6411102e58922038e68f4f7fd"
+  "sha": "4d454d279e13a6a9f4e088663efefc161db4cb6d"
 }

package/lib/source.mjs

@@ -1,4 +1,5 @@
 import { cliRoot, cliVersion } from "./commands/provenance.mjs";
+import { spawn } from "node:child_process";
 import { existsSync, readFileSync } from "node:fs";
 import { join, resolve } from "node:path";
 
@@ -58,6 +59,100 @@ function resolveSource(flags = {}) {
 		warning: `this build of @multiplatform.one/cli carries no source commit (lib/source.json); scaffolding from ${ref} instead`
 	};
 }
+const authFailures = [
+	/access denied/i,
+	/authentication failed/i,
+	/could not read (username|password)/i,
+	/terminal prompts disabled/i,
+	/permission denied \(/i,
+	/host key verification failed/i,
+	/returned error: 40[13]/i,
+	/repository not found/i,
+	/you don't have permission/i
+];
+const networkFailures = [
+	/could not resolve (host|hostname|proxy)/i,
+	/failed to connect/i,
+	/couldn't connect/i,
+	/connection (refused|reset|timed out|closed)/i,
+	/operation timed out/i,
+	/network is unreachable/i,
+	/no route to host/i,
+	/ssl|certificate/i
+];
+/** What a failed `git ls-remote` says about why the source is unreadable. */
+function classifySourceFailure(stderr) {
+	if (authFailures.some((pattern) => pattern.test(stderr))) return "auth";
+	if (networkFailures.some((pattern) => pattern.test(stderr))) return "network";
+	return "unknown";
+}
+var SourceAccessError = class extends Error {
+	constructor(url, kind, gitOutput, reason) {
+		const host = /^[a-z]+:\/\/(?:[^@/]*@)?([^/:]+)/i.exec(url)?.[1] ?? /@([^:]+):/.exec(url)?.[1];
+		const lines = kind === "network" ? [`Cannot reach the source repository ${url}${reason ? `: ${reason}` : ""}.`, `The CLI scaffolds from this git repository, so it needs a network path to ${host ?? "its host"} (check the connection, proxy or VPN).`] : [`Cannot read the source repository ${url}${kind === "auth" ? ": access denied" : ""}.`, "The CLI scaffolds from this git repository, so it needs read access to it: an account that can clone it, and a credential git uses without asking (a token in a git credential helper for https, an SSH key for ssh)."];
+		lines.push(`Check with: git ls-remote ${url}`);
+		lines.push("Or scaffold from a copy you can read: --source <path|url>");
+		const detail = gitOutput.split("\n").map((line) => line.trim()).filter(Boolean).slice(-4);
+		if (detail.length) lines.push("git said:", ...detail.map((line) => `  ${line}`));
+		super(lines.join("\n"));
+		this.name = "SourceAccessError";
+		this.url = url;
+		this.kind = kind;
+		this.gitOutput = gitOutput;
+	}
+};
+const readableSources = /* @__PURE__ */ new Set();
+/**
+* Fail before cloning when a git url source cannot be read. The probe runs
+* with every prompt off and, on POSIX, in its own session with no terminal,
+* so a missing credential is an answer instead of a password prompt. The
+* timeout kills the whole process group: git's transport helper holds stderr
+* open after git itself exits.
+*/
+async function checkSourceAccess(source, { timeoutMs = 3e4 } = {}) {
+	if (!isGitUrl(source) || readableSources.has(source)) return;
+	const detached = process.platform !== "win32";
+	const child = spawn("git", [
+		"ls-remote",
+		source,
+		"HEAD"
+	], {
+		detached,
+		stdio: [
+			"ignore",
+			"ignore",
+			"pipe"
+		],
+		windowsHide: true,
+		env: {
+			...process.env,
+			GIT_TERMINAL_PROMPT: "0",
+			GIT_ASKPASS: "",
+			SSH_ASKPASS_REQUIRE: "never",
+			GCM_INTERACTIVE: "never",
+			LC_ALL: "C"
+		}
+	});
+	let stderr = "";
+	child.stderr.on("data", (chunk) => {
+		stderr += chunk.toString();
+	});
+	let timedOut = false;
+	const timer = setTimeout(() => {
+		timedOut = true;
+		try {
+			if (detached && child.pid) process.kill(-child.pid, "SIGKILL");
+			else child.kill("SIGKILL");
+		} catch {}
+	}, timeoutMs);
+	const code = await new Promise((resolveExit, reject) => {
+		child.on("error", (err) => reject(err.code === "ENOENT" ? /* @__PURE__ */ new Error(`git is required to scaffold from ${source}`) : err));
+		child.on("close", resolveExit);
+	}).finally(() => clearTimeout(timer));
+	if (timedOut) throw new SourceAccessError(source, "network", stderr, `no answer within ${Math.round(timeoutMs / 1e3)}s`);
+	if (code !== 0) throw new SourceAccessError(source, classifySourceFailure(stderr), stderr);
+	readableSources.add(source);
+}
 
 //#endregion
-export { isGitUrl, monorepoCheckout, monorepoUrl, readSourceStamp, resolveSource };
+export { SourceAccessError, checkSourceAccess, classifySourceFailure, isGitUrl, monorepoCheckout, monorepoUrl, readSourceStamp, resolveSource };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@multiplatform.one/cli",
-  "version": "7.28.0",
+  "version": "7.29.0",
   "description": "multiplatform.one cli — mpo init clones and prunes the monorepo, mpo update merges it back",
   "keywords": [
     "create-multiplatform-app",
@@ -56,7 +56,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@multiplatform.one/utils": "7.28.0",
+    "@multiplatform.one/utils": "7.29.0",
     "commander": "^14.0.3",
     "dotenv": "^17.4.2",
     "inquirer": "^13.4.2",

package/scripts/scaffold.sh

@@ -287,7 +287,7 @@ else
     # shellcheck disable=SC2086
     git -C "$REPO" archive --format=tar "$SHA" $PATHS | tar -xf - -C "$TREE"
 fi
-rm -rf "$TREE/apps/storybook/.lostpixel/baseline"
+rm -rf "$TREE/apps/storybook/.lostpixel/baseline" "$TREE/apps/storybook/.lostpixel/matrix-tier2/baseline"
 # patches/public/ patches packages only the published packages' build
 # installs; pnpm fails an install whose patch matches nothing.
 case " $REMOVED " in

package/src/commands/scaffold.ts

@@ -2,6 +2,7 @@ import { mkdtempSync, rmSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import spawn from "nano-spawn";
+import { checkSourceAccess } from "../source";
 import { cliRoot, readProvenance, type MpoProvenance } from "./provenance";
 
 /** The scaffold itself: POSIX sh, runs standalone. The TS commands only call it. */
@@ -32,11 +33,10 @@ export interface ScaffoldRequest {
 }
 
 export class ScaffoldError extends Error {
-  constructor(
-    message: string,
-    readonly request: ScaffoldRequest,
-  ) {
+  readonly request: ScaffoldRequest;
+  constructor(message: string, request: ScaffoldRequest) {
     super(message);
+    this.request = request;
   }
 }
 
@@ -54,6 +54,7 @@ function reportKept(stdout: string): void {
 
 /** Run scaffold.sh and return the provenance it wrote. */
 export async function runScaffold(request: ScaffoldRequest): Promise<MpoProvenance> {
+  await checkSourceAccess(request.source);
   const args = [scaffoldScript()];
   for (const app of request.apps) args.push("--app", app);
   for (const service of request.services) args.push("--service", service);
@@ -113,6 +114,7 @@ export async function archiveSubtree(
   subtree: string,
   dest: string,
 ): Promise<void> {
+  await checkSourceAccess(source);
   const script = [
     "set -eu",
     'SOURCE="$1"; REF="$2"; SUBTREE="$3"; DEST="$4"',

package/src/source.spec.ts

@@ -1,8 +1,20 @@
-import { existsSync } from "node:fs";
+import { spawn, spawnSync } from "node:child_process";
+import { chmodSync, existsSync, mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
+import { createServer, type Server } from "node:http";
+import { createRequire } from "node:module";
+import { type AddressInfo, createServer as createTcpServer, type Socket } from "node:net";
+import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { fileURLToPath } from "node:url";
-import { describe, expect, it } from "vitest";
-import { isGitUrl, monorepoCheckout, resolveSource } from "./source";
+import { afterAll, beforeAll, describe, expect, it, vi } from "vitest";
+import {
+  checkSourceAccess,
+  classifySourceFailure,
+  isGitUrl,
+  monorepoCheckout,
+  resolveSource,
+  SourceAccessError,
+} from "./source";
 
 const monorepo = fileURLToPath(new URL("../../..", import.meta.url)).replace(/\/$/, "");
 
@@ -43,3 +55,177 @@ describe("resolveSource", () => {
     }
   });
 });
+
+function listen(server: Server | ReturnType<typeof createTcpServer>): Promise<number> {
+  return new Promise((resolve) => {
+    server.listen(0, "127.0.0.1", () => resolve((server.address() as AddressInfo).port));
+  });
+}
+
+function close(server: Server | ReturnType<typeof createTcpServer>): Promise<void> {
+  return new Promise((resolve) => server.close(() => resolve()));
+}
+
+/**
+ * Sources the CLI cannot read: a server that answers every request the way
+ * GitLab answers an anonymous clone of a private project, a port nothing
+ * listens on, and a server that accepts and never answers. Git runs with no
+ * credential helper, no global or system config, and an askpass program that
+ * never answers, so any prompt it reaches hangs the run.
+ */
+describe("a source the CLI cannot read", () => {
+  const sandbox = mkdtempSync(join(tmpdir(), "mpo-source-access-"));
+  const home = join(sandbox, "home");
+  const prompt = join(sandbox, "prompt.sh");
+  const sockets = new Set<Socket>();
+  const denying = createServer((_request, response) => {
+    response.writeHead(401, {
+      "Content-Type": "text/plain",
+      "WWW-Authenticate": 'Basic realm="GitLab"',
+    });
+    response.end("HTTP Basic: Access denied\n");
+  });
+  const silent = createTcpServer((socket) => {
+    sockets.add(socket);
+  });
+  let deniedUrl = "";
+  let refusedUrl = "";
+  let silentUrl = "";
+  const env: Record<string, string> = {
+    HOME: home,
+    XDG_CONFIG_HOME: join(home, ".config"),
+    GIT_CONFIG_NOSYSTEM: "1",
+    GIT_ASKPASS: prompt,
+    SSH_ASKPASS: prompt,
+    no_proxy: "*",
+    NO_PROXY: "*",
+  };
+
+  beforeAll(async () => {
+    mkdirSync(home, { recursive: true });
+    writeFileSync(prompt, "#!/bin/sh\nsleep 300\n");
+    chmodSync(prompt, 0o755);
+    for (const [name, value] of Object.entries(env)) vi.stubEnv(name, value);
+    deniedUrl = `http://127.0.0.1:${await listen(denying)}/multiplatform.one/mpo.git`;
+    silentUrl = `http://127.0.0.1:${await listen(silent)}/multiplatform.one/mpo.git`;
+    const closed = createTcpServer();
+    const refusedPort = await listen(closed);
+    await close(closed);
+    refusedUrl = `http://127.0.0.1:${refusedPort}/multiplatform.one/mpo.git`;
+  });
+
+  afterAll(async () => {
+    vi.unstubAllEnvs();
+    for (const socket of sockets) socket.destroy();
+    await Promise.all([close(denying), close(silent)]);
+    rmSync(sandbox, { recursive: true, force: true });
+  });
+
+  it("an unauthorized source is an access error naming the url, without waiting on a prompt", async () => {
+    const started = Date.now();
+    const error = await checkSourceAccess(deniedUrl).catch((err: unknown) => err);
+    expect(Date.now() - started).toBeLessThan(15_000);
+    expect(error).toBeInstanceOf(SourceAccessError);
+    const { kind, url, message } = error as SourceAccessError;
+    expect(kind).toBe("auth");
+    expect(url).toBe(deniedUrl);
+    expect(message).toContain(deniedUrl);
+    expect(message).toMatch(/needs read access/);
+    expect(message).toContain("--source <path|url>");
+  }, 20_000);
+
+  it("an unreachable source is a network error naming the url", async () => {
+    const error = await checkSourceAccess(refusedUrl).catch((err: unknown) => err);
+    expect(error).toBeInstanceOf(SourceAccessError);
+    expect((error as SourceAccessError).kind).toBe("network");
+    expect((error as SourceAccessError).message).toContain(refusedUrl);
+    expect((error as SourceAccessError).message).toMatch(/cannot reach/i);
+  }, 20_000);
+
+  it("a source that never answers gives up at the timeout", async () => {
+    const started = Date.now();
+    const error = await checkSourceAccess(silentUrl, { timeoutMs: 1_000 }).catch(
+      (err: unknown) => err,
+    );
+    expect(Date.now() - started).toBeLessThan(10_000);
+    expect(error).toBeInstanceOf(SourceAccessError);
+    expect((error as SourceAccessError).kind).toBe("network");
+    expect((error as SourceAccessError).message).toContain(silentUrl);
+    expect((error as SourceAccessError).message).toMatch(/no answer within 1s/);
+  }, 20_000);
+
+  it("a readable url and a local path pass", async () => {
+    const bare = join(sandbox, "empty.git");
+    spawnSync("git", ["init", "--quiet", "--bare", bare]);
+    await expect(checkSourceAccess(`file://${bare}`)).resolves.toBeUndefined();
+    await expect(checkSourceAccess(join(sandbox, "no-such-clone"))).resolves.toBeUndefined();
+  }, 20_000);
+
+  it("mpo init exits nonzero with the message and creates nothing", async () => {
+    const cli = fileURLToPath(new URL("..", import.meta.url));
+    const tsx = createRequire(import.meta.url).resolve("tsx");
+    const child = spawn(
+      process.execPath,
+      [
+        "--import",
+        tsx,
+        join(cli, "src/bin/multiplatformOne.ts"),
+        "init",
+        "my-app",
+        "--source",
+        deniedUrl,
+        "--yes",
+        "--skip-install",
+        "--skip-git",
+      ],
+      {
+        cwd: sandbox,
+        env: { ...process.env, ...env, TSX_TSCONFIG_PATH: join(cli, "tsconfig.json") },
+        stdio: ["ignore", "pipe", "pipe"],
+      },
+    );
+    let stderr = "";
+    child.stderr.on("data", (chunk: Buffer) => {
+      stderr += chunk.toString();
+    });
+    child.stdout.resume();
+    const timer = setTimeout(() => child.kill("SIGKILL"), 45_000);
+    const [code, signal] = await new Promise<[number | null, NodeJS.Signals | null]>((resolve) =>
+      child.on("close", (exitCode, exitSignal) => resolve([exitCode, exitSignal])),
+    );
+    clearTimeout(timer);
+    expect(signal, stderr).toBeNull();
+    expect(code, stderr).toBe(1);
+    expect(stderr).toContain(deniedUrl);
+    expect(stderr).toMatch(/needs read access/);
+    expect(existsSync(join(sandbox, "my-app"))).toBe(false);
+  }, 60_000);
+});
+
+describe("classifySourceFailure", () => {
+  it("tells access failures from network failures", () => {
+    for (const text of [
+      "remote: HTTP Basic: Access denied. If a password was provided for Git authentication, the password was incorrect",
+      "fatal: Authentication failed for 'https://git.corp.bitspur.com/multiplatform.one/mpo.git/'",
+      "fatal: could not read Username for 'https://git.corp.bitspur.com': terminal prompts disabled",
+      "git@git.corp.bitspur.com: Permission denied (publickey).\nfatal: Could not read from remote repository.",
+      "remote: The project you were looking for could not be found or you don't have permission to view it.",
+      "remote: Repository not found.",
+      "fatal: unable to access 'https://host/repo.git/': The requested URL returned error: 403",
+      "Host key verification failed.\nfatal: Could not read from remote repository.",
+    ]) {
+      expect(classifySourceFailure(text), text).toBe("auth");
+    }
+    for (const text of [
+      "fatal: unable to access 'https://git.corp.bitspur.com/x.git/': Could not resolve host: git.corp.bitspur.com",
+      "ssh: Could not resolve hostname git.corp.bitspur.com: nodename nor servname provided\nfatal: Could not read from remote repository.",
+      "fatal: unable to access 'http://127.0.0.1:9/x.git/': Failed to connect to 127.0.0.1 port 9 after 0 ms: Couldn't connect to server",
+      "ssh: connect to host git.corp.bitspur.com port 22: Connection refused",
+      "ssh: connect to host git.corp.bitspur.com port 22: Operation timed out",
+      "fatal: unable to access 'https://host/x.git/': SSL certificate problem: unable to get local issuer certificate",
+    ]) {
+      expect(classifySourceFailure(text), text).toBe("network");
+    }
+    expect(classifySourceFailure("fatal: something else went wrong")).toBe("unknown");
+  });
+});

package/src/source.ts

@@ -1,3 +1,4 @@
+import { spawn } from "node:child_process";
 import { existsSync, readFileSync } from "node:fs";
 import { join, resolve } from "node:path";
 import { cliRoot, cliVersion } from "./commands/provenance";
@@ -86,3 +87,125 @@ export function resolveSource(flags: { source?: string; checkout?: string } = {}
       `scaffolding from ${ref} instead`,
   };
 }
+
+export type SourceFailure = "auth" | "network" | "unknown";
+
+const authFailures = [
+  /access denied/i,
+  /authentication failed/i,
+  /could not read (username|password)/i,
+  /terminal prompts disabled/i,
+  /permission denied \(/i,
+  /host key verification failed/i,
+  /returned error: 40[13]/i,
+  /repository not found/i,
+  /you don't have permission/i,
+];
+
+const networkFailures = [
+  /could not resolve (host|hostname|proxy)/i,
+  /failed to connect/i,
+  /couldn't connect/i,
+  /connection (refused|reset|timed out|closed)/i,
+  /operation timed out/i,
+  /network is unreachable/i,
+  /no route to host/i,
+  /ssl|certificate/i,
+];
+
+/** What a failed `git ls-remote` says about why the source is unreadable. */
+export function classifySourceFailure(stderr: string): SourceFailure {
+  if (authFailures.some((pattern) => pattern.test(stderr))) return "auth";
+  if (networkFailures.some((pattern) => pattern.test(stderr))) return "network";
+  return "unknown";
+}
+
+export class SourceAccessError extends Error {
+  readonly url: string;
+  readonly kind: SourceFailure;
+  readonly gitOutput: string;
+  constructor(url: string, kind: SourceFailure, gitOutput: string, reason?: string) {
+    const host = /^[a-z]+:\/\/(?:[^@/]*@)?([^/:]+)/i.exec(url)?.[1] ?? /@([^:]+):/.exec(url)?.[1];
+    const lines =
+      kind === "network"
+        ? [
+            `Cannot reach the source repository ${url}${reason ? `: ${reason}` : ""}.`,
+            `The CLI scaffolds from this git repository, so it needs a network path to ${host ?? "its host"} (check the connection, proxy or VPN).`,
+          ]
+        : [
+            `Cannot read the source repository ${url}${kind === "auth" ? ": access denied" : ""}.`,
+            "The CLI scaffolds from this git repository, so it needs read access to it: an account that can clone it, and a credential git uses without asking (a token in a git credential helper for https, an SSH key for ssh).",
+          ];
+    lines.push(`Check with: git ls-remote ${url}`);
+    lines.push("Or scaffold from a copy you can read: --source <path|url>");
+    const detail = gitOutput
+      .split("\n")
+      .map((line) => line.trim())
+      .filter(Boolean)
+      .slice(-4);
+    if (detail.length) lines.push("git said:", ...detail.map((line) => `  ${line}`));
+    super(lines.join("\n"));
+    this.name = "SourceAccessError";
+    this.url = url;
+    this.kind = kind;
+    this.gitOutput = gitOutput;
+  }
+}
+
+const readableSources = new Set<string>();
+
+/**
+ * Fail before cloning when a git url source cannot be read. The probe runs
+ * with every prompt off and, on POSIX, in its own session with no terminal,
+ * so a missing credential is an answer instead of a password prompt. The
+ * timeout kills the whole process group: git's transport helper holds stderr
+ * open after git itself exits.
+ */
+export async function checkSourceAccess(
+  source: string,
+  { timeoutMs = 30_000 }: { timeoutMs?: number } = {},
+): Promise<void> {
+  if (!isGitUrl(source) || readableSources.has(source)) return;
+  const detached = process.platform !== "win32";
+  const child = spawn("git", ["ls-remote", source, "HEAD"], {
+    detached,
+    stdio: ["ignore", "ignore", "pipe"],
+    windowsHide: true,
+    env: {
+      ...process.env,
+      GIT_TERMINAL_PROMPT: "0",
+      GIT_ASKPASS: "",
+      SSH_ASKPASS_REQUIRE: "never",
+      GCM_INTERACTIVE: "never",
+      LC_ALL: "C",
+    },
+  });
+  let stderr = "";
+  child.stderr.on("data", (chunk: Buffer) => {
+    stderr += chunk.toString();
+  });
+  let timedOut = false;
+  const timer = setTimeout(() => {
+    timedOut = true;
+    try {
+      if (detached && child.pid) process.kill(-child.pid, "SIGKILL");
+      else child.kill("SIGKILL");
+    } catch {}
+  }, timeoutMs);
+  const code = await new Promise<number | null>((resolveExit, reject) => {
+    child.on("error", (err: NodeJS.ErrnoException) =>
+      reject(err.code === "ENOENT" ? new Error(`git is required to scaffold from ${source}`) : err),
+    );
+    child.on("close", resolveExit);
+  }).finally(() => clearTimeout(timer));
+  if (timedOut) {
+    throw new SourceAccessError(
+      source,
+      "network",
+      stderr,
+      `no answer within ${Math.round(timeoutMs / 1000)}s`,
+    );
+  }
+  if (code !== 0) throw new SourceAccessError(source, classifySourceFailure(stderr), stderr);
+  readableSources.add(source);
+}

package/templates/AGENTS.md

@@ -41,15 +41,15 @@ stack-navigation seam (`@multiplatform.one/router/seam`).
 
 ## Which package for what
 
-| Package                         | Owns                                                                      |
-| ------------------------------- | ------------------------------------------------------------------------- |
-| `@multiplatform.one/theme`      | Knobs, presets, intents, recipes, `useResolvedKnobs`                      |
-| `@multiplatform.one/components` | Catalog UI (layouts, surfaces, feedback, …)                               |
-| `@multiplatform.one/forms`      | Fields, Form, InputParts, field contracts, form color ramps               |
-| `@multiplatform.one/table`      | DataTable, cells, filters, URL table state                                |
-| `@multiplatform.one/frappe-ui`  | Frappe adapters (`FrappeTable`, field registry)                           |
-| `@multiplatform.one/frappe`     | Frappe client / live query                                                |
-| `@multiplatform.one/backoffice` | Embeddable desk recreation (BackofficeProvider, shell/list/form surfaces) |
+| Package                         | Owns                                                                                     |
+| ------------------------------- | ---------------------------------------------------------------------------------------- |
+| `@multiplatform.one/theme`      | Knobs, presets, intents, recipes, `useResolvedKnobs`                                     |
+| `@multiplatform.one/components` | Catalog UI (layouts, surfaces, feedback, …)                                              |
+| `@multiplatform.one/forms`      | Fields, Form, InputParts, field contracts, form color ramps                              |
+| `@multiplatform.one/table`      | DataTable, cells, filters, URL table state                                               |
+| `@multiplatform.one/frappe-ui`  | Frappe adapters (`FrappeTable`, field registry, the query-report and report-view models) |
+| `@multiplatform.one/frappe`     | Frappe client / live query                                                               |
+| `@multiplatform.one/backoffice` | Embeddable desk recreation (BackofficeProvider, shell/list/form surfaces)                |
 
 `table` and `forms` know nothing of Frappe; Frappe integration belongs in
 `frappe-ui`. `features/backoffice` is a thin wrapper over

package/types/commands/scaffold.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scaffold.d.ts","sourceRoot":"","sources":["../../src/commands/scaffold.ts"],"names":[],"mappings":"AAIA,OAAO,EAA2B,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAE3E,oFAAoF;AACpF,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,MAAM,WAAW,eAAe;IAC9B,0CAA0C;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,6BAA6B;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,uCAAuC;IACvC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,mFAAmF;IACnF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kFAAkF;IAClF,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,qBAAa,aAAc,SAAQ,KAAK;IAGpC,QAAQ,CAAC,OAAO,EAAE,eAAe;gBADjC,OAAO,EAAE,MAAM,EACN,OAAO,EAAE,eAAe;CAIpC;AAcD,0DAA0D;AAC1D,wBAAsB,WAAW,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC,CA0BlF;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,aAAa,CAAC;IAC1B,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,kDAAkD;AAClD,wBAAsB,cAAc,CAClC,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,QAAQ,GAAG,MAAM,CAAC,GAChD,OAAO,CAAC,YAAY,CAAC,CAWvB;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CAgBf"}
+{"version":3,"file":"scaffold.d.ts","sourceRoot":"","sources":["../../src/commands/scaffold.ts"],"names":[],"mappings":"AAKA,OAAO,EAA2B,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAE3E,oFAAoF;AACpF,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,MAAM,WAAW,eAAe;IAC9B,0CAA0C;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,6BAA6B;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,uCAAuC;IACvC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,mFAAmF;IACnF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kFAAkF;IAClF,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;gBACtB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe;CAItD;AAcD,0DAA0D;AAC1D,wBAAsB,WAAW,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC,CA2BlF;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,aAAa,CAAC;IAC1B,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,kDAAkD;AAClD,wBAAsB,cAAc,CAClC,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,QAAQ,GAAG,MAAM,CAAC,GAChD,OAAO,CAAC,YAAY,CAAC,CAWvB;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CAiBf"}

package/types/source.d.ts

@@ -32,4 +32,23 @@ export declare function resolveSource(flags?: {
     source?: string;
     checkout?: string;
 }): SourceSpec;
+export type SourceFailure = "auth" | "network" | "unknown";
+/** What a failed `git ls-remote` says about why the source is unreadable. */
+export declare function classifySourceFailure(stderr: string): SourceFailure;
+export declare class SourceAccessError extends Error {
+    readonly url: string;
+    readonly kind: SourceFailure;
+    readonly gitOutput: string;
+    constructor(url: string, kind: SourceFailure, gitOutput: string, reason?: string);
+}
+/**
+ * Fail before cloning when a git url source cannot be read. The probe runs
+ * with every prompt off and, on POSIX, in its own session with no terminal,
+ * so a missing credential is an answer instead of a password prompt. The
+ * timeout kills the whole process group: git's transport helper holds stderr
+ * open after git itself exits.
+ */
+export declare function checkSourceAccess(source: string, { timeoutMs }?: {
+    timeoutMs?: number;
+}): Promise<void>;
 //# sourceMappingURL=source.d.ts.map

package/types/source.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"source.d.ts","sourceRoot":"","sources":["../src/source.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,WAAW,2DAA2D,CAAC;AAEpF,MAAM,WAAW,UAAU;IACzB,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;OAKG;IACH,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,GAAG,KAAK,CAAC;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEhD;AAED,6FAA6F;AAC7F,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,SAAS,CASrD;AAED,wBAAgB,eAAe,IAAI,WAAW,GAAG,SAAS,CAMzD;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,UAAU,CA8B5F"}
+{"version":3,"file":"source.d.ts","sourceRoot":"","sources":["../src/source.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,WAAW,2DAA2D,CAAC;AAEpF,MAAM,WAAW,UAAU;IACzB,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;OAKG;IACH,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,GAAG,KAAK,CAAC;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEhD;AAED,6FAA6F;AAC7F,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,SAAS,CASrD;AAED,wBAAgB,eAAe,IAAI,WAAW,GAAG,SAAS,CAMzD;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,UAAU,CA8B5F;AAED,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;AAyB3D,6EAA6E;AAC7E,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAInE;AAED,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBACf,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;CA0BjF;AAID;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,EAAE,SAAkB,EAAE,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAClD,OAAO,CAAC,IAAI,CAAC,CA4Cf"}