@ovrdev/cli 0.1.0-alpha.16 → 0.1.0-alpha.17

package/dist/cli/index.js

@@ -6,6 +6,7 @@ import {
   coerceEnv,
   collectRefTargets,
   configAsks,
+  defaultRoot,
   evalConfig,
   forkChain,
   forkTreeOrder,
@@ -32,14 +33,143 @@ import {
   serviceRefs,
   withLocalBins,
   workspaceOrder
-} from "../index-4m3gj5te.js";
+} from "../index-s6rge1qt.js";
 
 // src/cli/cmd.ts
 import * as clack2 from "@clack/prompts";
 import { execFileSync as execFileSync3 } from "node:child_process";
 import { appendFileSync, existsSync as existsSync7, mkdirSync as mkdirSync9, readFileSync as readFileSync7, writeFileSync as writeFileSync8 } from "node:fs";
 import { homedir } from "node:os";
-import { join as join9, resolve as resolve2 } from "node:path";
+import { basename as basename2, join as join9, resolve as resolve2 } from "node:path";
+
+// src/core/load.ts
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { createInterface } from "node:readline/promises";
+import { pathToFileURL } from "node:url";
+var CONFIG_FILES = ["ovr.config.mts", "ovr.config.ts", "ovr.config.js", "ovr.config.mjs"];
+var findConfigFile = (dir) => CONFIG_FILES.map((f) => join(dir, f)).find(existsSync);
+var answersPath = (dir) => join(dir, ".ovr", "answers.json");
+var readAnswers = (dir) => {
+  try {
+    return JSON.parse(readFileSync(answersPath(dir), "utf8"));
+  } catch {
+    return {};
+  }
+};
+var writeAnswers = (dir, a) => {
+  mkdirSync(join(dir, ".ovr"), { recursive: true });
+  writeFileSync(answersPath(dir), `${JSON.stringify(a, null, "\t")}
+`);
+};
+function coerceAnswer(spec, raw) {
+  if (spec.kind === "confirm") {
+    if (typeof raw === "boolean")
+      return raw;
+    if (raw === "true" || raw === "y" || raw === "yes" || raw === "1")
+      return true;
+    if (raw === "false" || raw === "n" || raw === "no" || raw === "0")
+      return false;
+    return;
+  }
+  return typeof raw === "string" && spec.options.includes(raw) ? raw : undefined;
+}
+async function resolveAsks(asks, opts) {
+  const answers = {};
+  let changed = false;
+  for (const [key, spec] of Object.entries(asks)) {
+    const flag = opts.overrides[key] !== undefined ? coerceAnswer(spec, opts.overrides[key]) : undefined;
+    if (flag !== undefined) {
+      answers[key] = flag;
+      changed ||= opts.saved[key] !== flag;
+      continue;
+    }
+    if (!opts.reask) {
+      const saved = coerceAnswer(spec, opts.saved[key]);
+      if (saved !== undefined) {
+        answers[key] = saved;
+        continue;
+      }
+    }
+    if (opts.prompt) {
+      answers[key] = coerceAnswer(spec, await opts.prompt(key, spec)) ?? spec.default;
+      changed = true;
+      continue;
+    }
+    if (spec.default !== undefined) {
+      answers[key] = spec.default;
+      changed = true;
+    }
+  }
+  return { answers, changed };
+}
+async function promptAsk(repo, key, spec) {
+  const rl = createInterface({ input: process.stdin, output: process.stderr });
+  try {
+    if (spec.kind === "confirm") {
+      const hint = spec.default === false ? "y/N" : spec.default === true ? "Y/n" : "y/n";
+      const raw = (await rl.question(`? ${repo}: ${spec.question} (${hint}) `)).trim().toLowerCase();
+      if (!raw && spec.default !== undefined)
+        return spec.default;
+      return raw === "y" || raw === "yes" || raw === "true" || raw === "1";
+    }
+    process.stderr.write(`? ${repo}: ${spec.question}
+`);
+    spec.options.forEach((o, i) => {
+      process.stderr.write(`  ${i + 1}) ${o}${o === spec.default ? "  (default)" : ""}
+`);
+    });
+    for (;; ) {
+      const raw = (await rl.question("> ")).trim();
+      if (!raw && spec.default !== undefined)
+        return spec.default;
+      const byNum = spec.options[Number.parseInt(raw, 10) - 1];
+      if (byNum)
+        return byNum;
+      if (spec.options.includes(raw))
+        return raw;
+      process.stderr.write(`  pick 1-${spec.options.length}
+`);
+    }
+  } finally {
+    rl.close();
+  }
+}
+async function loadRepoConfig(dir, workspace, repo, opts = {}) {
+  const file = findConfigFile(dir);
+  if (!file)
+    return null;
+  const mod = await import(pathToFileURL(file).href);
+  const config = mod.default ?? mod;
+  const asks = configAsks(config);
+  let answers;
+  if (Object.keys(asks).length) {
+    const interactive = process.stdin.isTTY && process.stderr.isTTY;
+    const resolved = await resolveAsks(asks, {
+      saved: readAnswers(dir),
+      overrides: opts.answers ?? {},
+      reask: opts.reask,
+      prompt: interactive ? (key, spec) => promptAsk(repo, key, spec) : undefined
+    });
+    answers = resolved.answers;
+    if (resolved.changed)
+      writeAnswers(dir, answers);
+  }
+  return evalConfig(config, workspace, repo, dir, answers);
+}
+function parseAskFlags(args) {
+  const answers = {};
+  for (let i = 0;i < args.length; i++) {
+    if (args[i] === "--mode" && args[i + 1])
+      answers.mode = args[++i];
+    else if (args[i] === "--answer" && args[i + 1]) {
+      const eq = args[++i].indexOf("=");
+      if (eq > 0)
+        answers[args[i].slice(0, eq)] = args[i].slice(eq + 1);
+    }
+  }
+  return { answers, reask: args.includes("--ask") };
+}
 
 // src/util/color.ts
 var useColor = process.stdout.isTTY && !process.env.NO_COLOR;
@@ -53,15 +183,15 @@ var magenta = (s) => paint("35", s);
 var blue = (s) => paint("34", s);
 
 // src/engine/ports.ts
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { createServer } from "node:net";
-import { dirname, join } from "node:path";
-var PORTS_PATH = join(CONFIG_DIR, "ports.json");
+import { dirname, join as join2 } from "node:path";
+var PORTS_PATH = join2(CONFIG_DIR, "ports.json");
 var loadFile = (file) => {
-  if (!existsSync(file))
+  if (!existsSync2(file))
     return {};
   try {
-    return JSON.parse(readFileSync(file, "utf8"));
+    return JSON.parse(readFileSync2(file, "utf8"));
   } catch {
     return {};
   }
@@ -87,7 +217,7 @@ function releasePorts(workspace, file = PORTS_PATH) {
   if (!(workspace in all))
     return;
   delete all[workspace];
-  writeFileSync(file, `${JSON.stringify(all, null, "\t")}
+  writeFileSync2(file, `${JSON.stringify(all, null, "\t")}
 `);
 }
 function createPortRegistry(workspace, file = PORTS_PATH) {
@@ -95,8 +225,8 @@ function createPortRegistry(workspace, file = PORTS_PATH) {
   const save = () => {
     const all = loadFile(file);
     all[workspace] = recorded;
-    mkdirSync(dirname(file), { recursive: true });
-    writeFileSync(file, `${JSON.stringify(all, null, "\t")}
+    mkdirSync2(dirname(file), { recursive: true });
+    writeFileSync2(file, `${JSON.stringify(all, null, "\t")}
 `);
   };
   const reservedElsewhere = (service, slot) => {
@@ -138,10 +268,10 @@ function createPortRegistry(workspace, file = PORTS_PATH) {
 }
 
 // src/engine/paths.ts
-import { mkdirSync as mkdirSync2, rmSync as rmSync2 } from "node:fs";
+import { mkdirSync as mkdirSync3, rmSync as rmSync2 } from "node:fs";
 import { tmpdir } from "node:os";
-import { join as join2 } from "node:path";
-var DATA_ROOT = join2(CONFIG_DIR, "data");
+import { join as join3 } from "node:path";
+var DATA_ROOT = join3(CONFIG_DIR, "data");
 function safeSegments(label) {
   const segs = label.split(/[/\\]+/).filter((s) => s && s !== ".");
   for (const s of segs)
@@ -150,14 +280,14 @@ function safeSegments(label) {
   return segs;
 }
 function releaseData(workspace, root = DATA_ROOT) {
-  rmSync2(join2(root, workspace), { recursive: true, force: true });
+  rmSync2(join3(root, workspace), { recursive: true, force: true });
 }
 function createPathRegistry(workspace, root = DATA_ROOT) {
   return {
     forService(service) {
       return (label) => {
-        const dir = join2(root, workspace, service, ...label ? safeSegments(label) : []);
-        mkdirSync2(dir, { recursive: true });
+        const dir = join3(root, workspace, service, ...label ? safeSegments(label) : []);
+        mkdirSync3(dir, { recursive: true });
         return dir;
       };
     },
@@ -166,15 +296,15 @@ function createPathRegistry(workspace, root = DATA_ROOT) {
     }
   };
 }
-var dataDirPath = (workspace, service, root = DATA_ROOT) => join2(root, workspace, service);
-var SCRATCH_ROOT = join2(tmpdir(), "ovr-scratch");
+var dataDirPath = (workspace, service, root = DATA_ROOT) => join3(root, workspace, service);
+var SCRATCH_ROOT = join3(tmpdir(), "ovr-scratch");
 function createScratchRegistry(workspace, root = SCRATCH_ROOT) {
-  rmSync2(join2(root, workspace), { recursive: true, force: true });
+  rmSync2(join3(root, workspace), { recursive: true, force: true });
   return {
     forService(service) {
       return (label) => {
-        const dir = join2(root, workspace, service, ...label ? safeSegments(label) : []);
-        mkdirSync2(dir, { recursive: true });
+        const dir = join3(root, workspace, service, ...label ? safeSegments(label) : []);
+        mkdirSync3(dir, { recursive: true });
         return dir;
       };
     }
@@ -183,8 +313,8 @@ function createScratchRegistry(workspace, root = SCRATCH_ROOT) {
 
 // src/engine/keys.ts
 import { createHash, createPublicKey, generateKeyPairSync } from "node:crypto";
-import { existsSync as existsSync2, mkdirSync as mkdirSync3, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";
-import { dirname as dirname2, join as join3 } from "node:path";
+import { existsSync as existsSync3, mkdirSync as mkdirSync4, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "node:fs";
+import { dirname as dirname2, join as join4 } from "node:path";
 var ALG = { ed25519: "EdDSA", rsa: "RS256", ec: "ES256" };
 function jwkThumbprint(jwk) {
   const members = jwk.kty === "RSA" ? ["e", "kty", "n"] : jwk.kty === "EC" ? ["crv", "kty", "x", "y"] : ["crv", "kty", "x"];
@@ -197,12 +327,12 @@ function sshField(v) {
   len.writeUInt32BE(b.length);
   return Buffer.concat([len, b]);
 }
-var KEYS_PATH = join3(CONFIG_DIR, "keys.json");
+var KEYS_PATH = join4(CONFIG_DIR, "keys.json");
 var loadFile2 = (file) => {
-  if (!existsSync2(file))
+  if (!existsSync3(file))
     return {};
   try {
-    return JSON.parse(readFileSync2(file, "utf8"));
+    return JSON.parse(readFileSync3(file, "utf8"));
   } catch {
     return {};
   }
@@ -216,7 +346,7 @@ function releaseKeys(workspace, file = KEYS_PATH) {
   if (!(workspace in all))
     return;
   delete all[workspace];
-  writeFileSync2(file, `${JSON.stringify(all, null, "\t")}
+  writeFileSync3(file, `${JSON.stringify(all, null, "\t")}
 `);
 }
 function createKeyRegistry(workspace, file = KEYS_PATH, dataRoot = DATA_ROOT) {
@@ -224,8 +354,8 @@ function createKeyRegistry(workspace, file = KEYS_PATH, dataRoot = DATA_ROOT) {
   const save = () => {
     const all = loadFile2(file);
     all[workspace] = recorded;
-    mkdirSync3(dirname2(file), { recursive: true });
-    writeFileSync2(file, `${JSON.stringify(all, null, "\t")}
+    mkdirSync4(dirname2(file), { recursive: true });
+    writeFileSync3(file, `${JSON.stringify(all, null, "\t")}
 `);
   };
   return {
@@ -258,13 +388,13 @@ function createKeyRegistry(workspace, file = KEYS_PATH, dataRoot = DATA_ROOT) {
               return { publicKey: `ssh-ed25519 ${wire.toString("base64")} ${sopts.comment ?? "ovr"}`, privateKey };
             },
             write(wopts = {}) {
-              const base = join3(dataDirPath(workspace, service, dataRoot), "keys");
-              mkdirSync3(base, { recursive: true });
+              const base = join4(dataDirPath(workspace, service, dataRoot), "keys");
+              mkdirSync4(base, { recursive: true });
               const nm = wopts.name ?? name;
-              const privateKeyPath = join3(base, `${nm}.key`);
-              const publicKeyPath = join3(base, `${nm}.pub`);
-              writeFileSync2(privateKeyPath, privateKey);
-              writeFileSync2(publicKeyPath, publicKey);
+              const privateKeyPath = join4(base, `${nm}.key`);
+              const publicKeyPath = join4(base, `${nm}.pub`);
+              writeFileSync3(privateKeyPath, privateKey);
+              writeFileSync3(publicKeyPath, publicKey);
               return { privateKeyPath, publicKeyPath };
             }
           };
@@ -279,21 +409,21 @@ function createKeyRegistry(workspace, file = KEYS_PATH, dataRoot = DATA_ROOT) {
 }
 
 // src/engine/running.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync4, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "node:fs";
-import { dirname as dirname3, join as join4 } from "node:path";
-var RUNNING_PATH = join4(CONFIG_DIR, "running.json");
+import { existsSync as existsSync4, mkdirSync as mkdirSync5, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "node:fs";
+import { dirname as dirname3, join as join5 } from "node:path";
+var RUNNING_PATH = join5(CONFIG_DIR, "running.json");
 var load = (file) => {
-  if (!existsSync3(file))
+  if (!existsSync4(file))
     return {};
   try {
-    return JSON.parse(readFileSync3(file, "utf8"));
+    return JSON.parse(readFileSync4(file, "utf8"));
   } catch {
     return {};
   }
 };
 var save = (file, data) => {
-  mkdirSync4(dirname3(file), { recursive: true });
-  writeFileSync3(file, `${JSON.stringify(data, null, "\t")}
+  mkdirSync5(dirname3(file), { recursive: true });
+  writeFileSync4(file, `${JSON.stringify(data, null, "\t")}
 `);
 };
 var pidAlive = (pid) => {
@@ -398,137 +528,6 @@ import { execSync } from "node:child_process";
 import { createHash as createHash2 } from "node:crypto";
 import { mkdirSync as mkdirSync6, readFileSync as readFileSync5, writeFileSync as writeFileSync5 } from "node:fs";
 import { join as join6 } from "node:path";
-
-// src/core/load.ts
-import { existsSync as existsSync4, mkdirSync as mkdirSync5, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "node:fs";
-import { join as join5 } from "node:path";
-import { createInterface } from "node:readline/promises";
-import { pathToFileURL } from "node:url";
-var CONFIG_FILES = ["ovr.config.mts", "ovr.config.ts", "ovr.config.js", "ovr.config.mjs"];
-var findConfigFile = (dir) => CONFIG_FILES.map((f) => join5(dir, f)).find(existsSync4);
-var answersPath = (dir) => join5(dir, ".ovr", "answers.json");
-var readAnswers = (dir) => {
-  try {
-    return JSON.parse(readFileSync4(answersPath(dir), "utf8"));
-  } catch {
-    return {};
-  }
-};
-var writeAnswers = (dir, a) => {
-  mkdirSync5(join5(dir, ".ovr"), { recursive: true });
-  writeFileSync4(answersPath(dir), `${JSON.stringify(a, null, "\t")}
-`);
-};
-function coerceAnswer(spec, raw) {
-  if (spec.kind === "confirm") {
-    if (typeof raw === "boolean")
-      return raw;
-    if (raw === "true" || raw === "y" || raw === "yes" || raw === "1")
-      return true;
-    if (raw === "false" || raw === "n" || raw === "no" || raw === "0")
-      return false;
-    return;
-  }
-  return typeof raw === "string" && spec.options.includes(raw) ? raw : undefined;
-}
-async function resolveAsks(asks, opts) {
-  const answers = {};
-  let changed = false;
-  for (const [key, spec] of Object.entries(asks)) {
-    const flag = opts.overrides[key] !== undefined ? coerceAnswer(spec, opts.overrides[key]) : undefined;
-    if (flag !== undefined) {
-      answers[key] = flag;
-      changed ||= opts.saved[key] !== flag;
-      continue;
-    }
-    if (!opts.reask) {
-      const saved = coerceAnswer(spec, opts.saved[key]);
-      if (saved !== undefined) {
-        answers[key] = saved;
-        continue;
-      }
-    }
-    if (opts.prompt) {
-      answers[key] = coerceAnswer(spec, await opts.prompt(key, spec)) ?? spec.default;
-      changed = true;
-      continue;
-    }
-    if (spec.default !== undefined) {
-      answers[key] = spec.default;
-      changed = true;
-    }
-  }
-  return { answers, changed };
-}
-async function promptAsk(repo, key, spec) {
-  const rl = createInterface({ input: process.stdin, output: process.stderr });
-  try {
-    if (spec.kind === "confirm") {
-      const hint = spec.default === false ? "y/N" : spec.default === true ? "Y/n" : "y/n";
-      const raw = (await rl.question(`? ${repo}: ${spec.question} (${hint}) `)).trim().toLowerCase();
-      if (!raw && spec.default !== undefined)
-        return spec.default;
-      return raw === "y" || raw === "yes" || raw === "true" || raw === "1";
-    }
-    process.stderr.write(`? ${repo}: ${spec.question}
-`);
-    spec.options.forEach((o, i) => {
-      process.stderr.write(`  ${i + 1}) ${o}${o === spec.default ? "  (default)" : ""}
-`);
-    });
-    for (;; ) {
-      const raw = (await rl.question("> ")).trim();
-      if (!raw && spec.default !== undefined)
-        return spec.default;
-      const byNum = spec.options[Number.parseInt(raw, 10) - 1];
-      if (byNum)
-        return byNum;
-      if (spec.options.includes(raw))
-        return raw;
-      process.stderr.write(`  pick 1-${spec.options.length}
-`);
-    }
-  } finally {
-    rl.close();
-  }
-}
-async function loadRepoConfig(dir, workspace, repo, opts = {}) {
-  const file = findConfigFile(dir);
-  if (!file)
-    return null;
-  const mod = await import(pathToFileURL(file).href);
-  const config = mod.default ?? mod;
-  const asks = configAsks(config);
-  let answers;
-  if (Object.keys(asks).length) {
-    const interactive = process.stdin.isTTY && process.stderr.isTTY;
-    const resolved = await resolveAsks(asks, {
-      saved: readAnswers(dir),
-      overrides: opts.answers ?? {},
-      reask: opts.reask,
-      prompt: interactive ? (key, spec) => promptAsk(repo, key, spec) : undefined
-    });
-    answers = resolved.answers;
-    if (resolved.changed)
-      writeAnswers(dir, answers);
-  }
-  return evalConfig(config, workspace, repo, dir, answers);
-}
-function parseAskFlags(args) {
-  const answers = {};
-  for (let i = 0;i < args.length; i++) {
-    if (args[i] === "--mode" && args[i + 1])
-      answers.mode = args[++i];
-    else if (args[i] === "--answer" && args[i + 1]) {
-      const eq = args[++i].indexOf("=");
-      if (eq > 0)
-        answers[args[i].slice(0, eq)] = args[i].slice(eq + 1);
-    }
-  }
-  return { answers, reask: args.includes("--ask") };
-}
-
-// src/core/setup.ts
 var markerPath = (dir) => join6(dir, ".ovr", "setup");
 var stepsHash = (steps) => createHash2("sha1").update(JSON.stringify(steps)).digest("hex").slice(0, 12);
 function provisioned(dir, hash) {
@@ -809,6 +808,11 @@ function seedServiceConfig(cfg, workspace, repo) {
       }
     }
   }
+  return seedStarterConfig(dir);
+}
+function seedStarterConfig(dir) {
+  if (CONFIG_NAMES.some((f) => existsSync6(join8(dir, f))))
+    return;
   writeFileSync7(join8(dir, "ovr.config.mts"), STARTER_CONFIG);
   return { file: "ovr.config.mts" };
 }
@@ -1517,9 +1521,6 @@ async function readSource(src) {
   }
   return readFileSync7(src, "utf8");
 }
-function defaultRoot() {
-  return join9(CONFIG_DIR, "workspaces");
-}
 async function cmdBootstrap(args) {
   const cfg = loadConfig();
   let methodFlag;
@@ -2021,22 +2022,34 @@ function cmdWorkspaceCreate(args) {
   console.log(dim("  add a repo:  ovr repo add <url|org/repo>   then   ovr run"));
 }
 async function cmdInit(args) {
-  const positional = args.filter((a) => !a.startsWith("-"));
-  const name = positional[0] || "dev";
-  const root = positional[1];
-  if (!/^[a-z0-9._-]+$/i.test(name))
-    throw new Error(`Invalid workspace name: ${name}`);
-  await cmdBootstrap([...root ? [root] : [], ...args.filter((a) => a.startsWith("-"))]);
   const cfg = loadConfig();
-  if (!cfg.root)
+  let methodFlag;
+  const positional = [];
+  for (let i = 0;i < args.length; i++) {
+    const a = args[i];
+    if (a === "--ssh")
+      methodFlag = "ssh";
+    else if (a === "--https")
+      methodFlag = "https";
+    else if (!a.startsWith("-"))
+      positional.push(a);
+  }
+  if (!cfg.root) {
+    const root = positional[0] ? resolve2(positional[0]) : defaultRoot();
+    cfg.root = root;
+    cfg.cloneMethod = methodFlag ?? cfg.cloneMethod ?? DEFAULT_CLONE_METHOD;
+    mkdirSync9(root, { recursive: true });
+    saveConfig(cfg);
+    console.log(`✓ bootstrapped — root → ${root} · clone → ${cfg.cloneMethod}`);
+  }
+  const cwd = process.cwd();
+  const existing = findConfigFile(cwd);
+  if (existing) {
+    console.log(`✓ already an ovr project (${basename2(existing)}) — run:  ${bold("ovr run")}`);
     return;
-  if (!cfg.workspaces[name])
-    cfg.workspaces[name] = { branch: "main" };
-  cfg.active = name;
-  saveConfig(cfg);
-  console.log(`
-✓ workspace '${name}' ready and active`);
-  console.log(dim("  next:  ovr repo add <url|org/repo>   ·   ovr run"));
+  }
+  const seeded = seedStarterConfig(cwd);
+  console.log(`✓ scaffolded ${green(seeded?.file ?? "ovr.config.mts")} — declare your services, then:  ${bold("ovr run")}`);
 }
 function cmdWorkspaceInfo(args, override, inferredRepo) {
   const cfg = loadConfig();
@@ -2396,7 +2409,7 @@ compdef _ovr ovr`;
 // src/engine/run.ts
 import { execFileSync as execFileSync6 } from "node:child_process";
 import { existsSync as existsSync11, readdirSync as readdirSync2, readFileSync as readFileSync12 } from "node:fs";
-import { basename as basename4, join as join14 } from "node:path";
+import { basename as basename5, join as join14 } from "node:path";
 
 // src/engine/envname.ts
 import { existsSync as existsSync8, mkdirSync as mkdirSync10, readFileSync as readFileSync8, writeFileSync as writeFileSync9 } from "node:fs";
@@ -2526,7 +2539,7 @@ function createSecretRegistry(workspace, file = SECRETS_PATH) {
 
 // src/engine/prepare-helpers.ts
 import { existsSync as existsSync10, mkdirSync as mkdirSync13, readFileSync as readFileSync10, writeFileSync as writeFileSync11 } from "node:fs";
-import { basename as basename2, dirname as dirname6, isAbsolute, join as join13 } from "node:path";
+import { basename as basename3, dirname as dirname6, isAbsolute, join as join13 } from "node:path";
 function makeEnv(base) {
   return {
     get: (key, fallback) => base[key] ?? fallback,
@@ -2547,7 +2560,7 @@ function makeFiles(repoDir2, dataDir) {
       if (typeof template === "object") {
         const src = isAbsolute(template.from) ? template.from : join13(repoDir2, template.from);
         text2 = readFileSync10(src, "utf8");
-        name = opts.name ?? basename2(src).replace(/\.(tmpl|hbs|mustache|template)$/, "");
+        name = opts.name ?? basename3(src).replace(/\.(tmpl|hbs|mustache|template)$/, "");
       } else {
         text2 = template;
       }
@@ -4980,8 +4993,8 @@ function createTui(services, handlers, options = {}) {
 
 // src/workspace/onboard.ts
 import { execFileSync as execFileSync5 } from "node:child_process";
-import { readFileSync as readFileSync11, realpathSync as realpathSync2 } from "node:fs";
-import { basename as basename3, resolve as resolve3 } from "node:path";
+import { mkdirSync as mkdirSync14, readFileSync as readFileSync11, realpathSync as realpathSync2 } from "node:fs";
+import { basename as basename4, resolve as resolve3 } from "node:path";
 import * as clack3 from "@clack/prompts";
 var real = (p) => {
   try {
@@ -5002,7 +5015,7 @@ function inferRepoName(dir) {
       return sanitizeName(base);
     }
   } catch {}
-  return sanitizeName(basename3(dir));
+  return sanitizeName(basename4(dir));
 }
 var git2 = (dir, args) => {
   try {
@@ -5039,6 +5052,10 @@ function freeName(cfg, base) {
       return `${base}-${i}`;
 }
 async function autoOnboard(cfg, cwd) {
+  if (!cfg.root) {
+    cfg.root = defaultRoot();
+    mkdirSync14(cfg.root, { recursive: true });
+  }
   const { repo, decl } = onboardDecl(cwd);
   const interactive = Boolean(process.stdin.isTTY && process.stderr.isTTY);
   let target = freeName(cfg, repo);
@@ -5814,7 +5831,7 @@ function cmdLogs(args = [], override) {
   }
   for (const p of paths) {
     if (paths.length > 1)
-      process.stdout.write(dim(`── ${basename4(p, ".log")} ──
+      process.stdout.write(dim(`── ${basename5(p, ".log")} ──
 `));
     process.stdout.write(readFileSync12(p, "utf8"));
   }
@@ -5841,8 +5858,8 @@ var tree = {
     },
     {
       name: "init",
-      summary: "Get started: set the workspaces root + create a first workspace",
-      usage: "ovr init [workspace] [root] [--ssh|--https]",
+      summary: "Make the current directory an ovr project (bootstrap if needed + scaffold a config)",
+      usage: "ovr init [root] [--ssh|--https]",
       run: (c) => cmdInit(c.args)
     },
     {

package/dist/core/config.d.ts

@@ -67,6 +67,12 @@ export type TeamConfig = {
 };
 export declare const CONFIG_DIR: string;
 export declare const CONFIG_PATH: string;
+/**
+ * The default workspaces root — holds ONLY fork worktrees (base repos run in place). Under the
+ * config folder so a fresh user owns nothing and chooses nothing. Used by the interactive
+ * bootstrap and by the silent bootstrap `init`/`run` do on first use.
+ */
+export declare const defaultRoot: () => string;
 /** Empty by default — nothing exists until you add it. */
 export declare const DEFAULT_CONFIG: GlobalConfig;
 export declare function loadConfig(): GlobalConfig;

package/dist/core/core.js

@@ -26,7 +26,7 @@ import {
   waitHttp,
   waitTcp,
   waitUntil
-} from "../index-4m3gj5te.js";
+} from "../index-s6rge1qt.js";
 export {
   waitUntil,
   waitTcp,

package/dist/index-s6rge1qt.js

@@ -0,0 +1,639 @@
+// src/plugins/shell.ts
+import { spawn } from "node:child_process";
+
+// src/util/ready.ts
+import { connect } from "node:net";
+var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+async function waitUntil(probe, opts = {}) {
+  const timeout = opts.timeoutMs ?? 60000;
+  const interval = opts.intervalMs ?? 500;
+  const deadline = Date.now() + timeout;
+  for (;; ) {
+    try {
+      if (await probe())
+        return;
+    } catch {}
+    if (Date.now() >= deadline) {
+      throw new Error(`readiness timed out after ${timeout}ms${opts.label ? `: ${opts.label}` : ""}`);
+    }
+    await sleep(interval);
+  }
+}
+function waitHttp(url, opts = {}) {
+  return waitUntil(async () => {
+    const res = await fetch(url, { redirect: "manual" }).catch(() => null);
+    if (!res)
+      return false;
+    return opts.status ? res.status === opts.status : res.status < 500;
+  }, { label: `GET ${url}`, ...opts });
+}
+function waitTcp(port, opts = {}) {
+  const host = opts.host ?? "127.0.0.1";
+  return waitUntil(() => new Promise((resolve) => {
+    const sock = connect({ host, port });
+    const done = (ok) => {
+      sock.destroy();
+      resolve(ok);
+    };
+    sock.once("connect", () => done(true));
+    sock.once("error", () => done(false));
+    sock.setTimeout(2000, () => done(false));
+  }), { label: `tcp ${host}:${port}`, ...opts });
+}
+// src/core/config.ts
+import { existsSync, mkdirSync, readFileSync, realpathSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { isAbsolute, join, relative, resolve, sep } from "node:path";
+var CONFIG_DIR = process.env.OVR_CONFIG_DIR || join(homedir(), ".config", "ovr");
+var CONFIG_PATH = join(CONFIG_DIR, "config.json");
+var defaultRoot = () => join(CONFIG_DIR, "workspaces");
+var DEFAULT_CONFIG = { workspaces: {} };
+function rename(obj, from, to) {
+  if (obj && from in obj) {
+    obj[to] = obj[from];
+    delete obj[from];
+  }
+}
+function mapKeys(cfg, kebabToCamel) {
+  const swap = (o, kebab, camel) => kebabToCamel ? rename(o, kebab, camel) : rename(o, camel, kebab);
+  swap(cfg, "clone-method", "cloneMethod");
+  swap(cfg, "infer-from-cwd", "inferFromCwd");
+  swap(cfg, "team-config", "teamConfig");
+  const tui = cfg.tui;
+  swap(tui, "tab-width", "tabWidth");
+  swap(tui, "buffer-lines", "bufferLines");
+  swap(tui, "history-lines", "historyLines");
+  swap(tui, "throttle-ms", "throttleMs");
+  swap(cfg.infisical, "project-id", "projectId");
+  const wss = cfg.workspaces ?? cfg.projects;
+  for (const p of Object.values(wss ?? {})) {
+    swap(p?.infisical, "project-id", "projectId");
+  }
+  return cfg;
+}
+function loadConfig() {
+  if (!existsSync(CONFIG_PATH))
+    return structuredClone(DEFAULT_CONFIG);
+  const raw = mapKeys(JSON.parse(readFileSync(CONFIG_PATH, "utf8")), true);
+  const { projects, ...rest } = raw;
+  return { ...DEFAULT_CONFIG, ...rest, workspaces: raw.workspaces ?? projects ?? {} };
+}
+function saveConfig(cfg) {
+  mkdirSync(CONFIG_DIR, { recursive: true });
+  const onDisk = mapKeys(structuredClone(cfg), false);
+  writeFileSync(CONFIG_PATH, `${JSON.stringify(onDisk, null, 2)}
+`);
+}
+function serializeTeam(cfg) {
+  const slice = { workspaces: cfg.workspaces };
+  if (cfg.infisical)
+    slice.infisical = cfg.infisical;
+  return `${JSON.stringify(mapKeys(structuredClone(slice), false), null, 2)}
+`;
+}
+function parseTeam(text) {
+  const raw = mapKeys(JSON.parse(text), true);
+  return {
+    infisical: raw.infisical,
+    workspaces: raw.workspaces
+  };
+}
+function mergeTeam(cfg, team) {
+  if (team.infisical)
+    cfg.infisical = { ...cfg.infisical, ...team.infisical };
+  const added = [];
+  const updated = [];
+  const conflicts = [];
+  for (const [name, incoming] of Object.entries(team.workspaces ?? {})) {
+    const local = cfg.workspaces[name];
+    if (!local) {
+      cfg.workspaces[name] = incoming;
+      added.push(name);
+      continue;
+    }
+    updated.push(name);
+    const localRepos = local.repos ?? {};
+    const repos = { ...localRepos };
+    for (const [r, decl] of Object.entries(incoming.repos ?? {})) {
+      if (!localRepos[r])
+        repos[r] = decl;
+      else if (JSON.stringify(localRepos[r]) !== JSON.stringify(decl)) {
+        conflicts.push({ workspace: name, repo: r, local: localRepos[r], incoming: decl });
+      }
+    }
+    const merged = { ...local, ...incoming };
+    if (Object.keys(repos).length)
+      merged.repos = repos;
+    else
+      delete merged.repos;
+    if (local.infisical || incoming.infisical) {
+      merged.infisical = { ...local.infisical, ...incoming.infisical };
+    }
+    cfg.workspaces[name] = merged;
+  }
+  return { added, updated, conflicts };
+}
+function getWorkspace(cfg, name) {
+  const p = cfg.workspaces[name];
+  if (!p) {
+    throw new Error(`Unknown workspace '${name}'. Known: ${Object.keys(cfg.workspaces).join(", ") || "(none)"}`);
+  }
+  return p;
+}
+var activeName = (cfg, override) => override || cfg.active;
+var DEFAULT_BRANCH = "main";
+var DEFAULT_HOST = "github.com";
+var DEFAULT_CLONE_METHOD = "ssh";
+function normalizeRemote(remote, defaultOrg) {
+  if (/^(git@|ssh:\/\/|https?:\/\/)/.test(remote))
+    return remote;
+  if (remote.includes("/"))
+    return remote;
+  return defaultOrg ? `${defaultOrg}/${remote}` : remote;
+}
+function repoUrl(remote, method = DEFAULT_CLONE_METHOD) {
+  if (/^(git@|ssh:\/\/|https?:\/\/|file:\/\/)/.test(remote) || /^[/.~]/.test(remote))
+    return remote;
+  const parts = remote.replace(/\.git$/, "").split("/");
+  const host = parts.length >= 3 ? parts[0] : DEFAULT_HOST;
+  const slug = (parts.length >= 3 ? parts.slice(1) : parts).join("/");
+  return method === "ssh" ? `git@${host}:${slug}.git` : `https://${host}/${slug}.git`;
+}
+function resolveRepoPath(p) {
+  if (p === "~" || p.startsWith("~/"))
+    return resolve(join(homedir(), p.slice(1)));
+  return resolve(p);
+}
+function forkChain(cfg, name) {
+  const chain = [];
+  const seen = new Set;
+  let cur = name;
+  while (cur && !seen.has(cur)) {
+    seen.add(cur);
+    getWorkspace(cfg, cur);
+    chain.push(cur);
+    cur = cfg.workspaces[cur].base;
+  }
+  return chain.reverse();
+}
+var workspaceOrder = (cfg) => (a, b) => (cfg.workspaces[a].protected ? 0 : 1) - (cfg.workspaces[b].protected ? 0 : 1) || a.localeCompare(b);
+function forkTreeOrder(cfg) {
+  const names = Object.keys(cfg.workspaces);
+  const cmp = workspaceOrder(cfg);
+  const childrenOf = (parent) => names.filter((n) => cfg.workspaces[n].base === parent).sort(cmp);
+  const roots = names.filter((n) => !cfg.workspaces[n].base || !cfg.workspaces[cfg.workspaces[n].base]).sort(cmp);
+  const out = [];
+  const seen = new Set;
+  const walk = (name) => {
+    if (seen.has(name))
+      return;
+    seen.add(name);
+    out.push(name);
+    for (const k of childrenOf(name))
+      walk(k);
+  };
+  roots.forEach(walk);
+  names.sort(cmp).forEach(walk);
+  return out;
+}
+function resolveRepos(cfg, name) {
+  const out = {};
+  for (const proj of forkChain(cfg, name)) {
+    Object.assign(out, cfg.workspaces[proj].repos ?? {});
+  }
+  return out;
+}
+function nearest(cfg, name, pick) {
+  for (const proj of forkChain(cfg, name).reverse()) {
+    const v = pick(cfg.workspaces[proj]);
+    if (v !== undefined)
+      return v;
+  }
+  return;
+}
+var resolveBranch = (cfg, name) => nearest(cfg, name, (p) => p.branch) ?? DEFAULT_BRANCH;
+function resolveInfisical(cfg, name) {
+  let out = { ...cfg.infisical ?? {} };
+  for (const proj of forkChain(cfg, name)) {
+    if (cfg.workspaces[proj].infisical)
+      out = { ...out, ...cfg.workspaces[proj].infisical };
+  }
+  return out;
+}
+var resolveEnvSlug = (cfg, name) => resolveInfisical(cfg, name).env;
+var repoBranch = (cfg, workspace, decl) => decl.branch ?? resolveBranch(cfg, workspace);
+function inferContext(cfg, cwd = process.cwd()) {
+  if (cfg.inferFromCwd === false || !cfg.root)
+    return {};
+  const real = (p) => {
+    try {
+      return realpathSync(p);
+    } catch {
+      return resolve(p);
+    }
+  };
+  const rel = relative(real(cfg.root), real(cwd));
+  if (!rel || rel.startsWith("..") || isAbsolute(rel))
+    return {};
+  const parts = rel.split(sep);
+  const workspace = cfg.workspaces[parts[0]] ? parts[0] : undefined;
+  const repo = workspace && parts[1] ? parts[1] : undefined;
+  return { workspace, repo };
+}
+// src/util/random.ts
+import { randomBytes } from "node:crypto";
+var ALNUM = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
+var SYMBOLS = "!#$%*+-_=?@.";
+function randomString(length = 24, alphabet = ALNUM) {
+  if (length <= 0 || alphabet.length === 0)
+    return "";
+  const max = Math.floor(256 / alphabet.length) * alphabet.length;
+  let out = "";
+  while (out.length < length) {
+    for (const byte of randomBytes(length * 2)) {
+      if (byte >= max)
+        continue;
+      out += alphabet[byte % alphabet.length];
+      if (out.length === length)
+        break;
+    }
+  }
+  return out;
+}
+function randomPassword(length = 24, opts = {}) {
+  return randomString(length, opts.symbols === false ? ALNUM : ALNUM + SYMBOLS);
+}
+function randomHex(bytes = 24) {
+  return randomBytes(bytes).toString("hex");
+}
+// src/util/dotenv.ts
+function parseDotenv(text) {
+  const out = {};
+  for (const line of text.split(`
+`)) {
+    if (line.trimStart().startsWith("#"))
+      continue;
+    const m = line.match(/^\s*([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)\s*$/);
+    if (!m)
+      continue;
+    let v = m[2].trim();
+    if (v.startsWith('"') && v.endsWith('"') || v.startsWith("'") && v.endsWith("'"))
+      v = v.slice(1, -1);
+    out[m[1]] = v;
+  }
+  return out;
+}
+// src/env/dotenv-plugin.ts
+import { existsSync as existsSync2, readFileSync as readFileSync2 } from "node:fs";
+import { join as join2 } from "node:path";
+function dotenv(opts = {}) {
+  return {
+    name: "dotenv",
+    envSource: {
+      name: "dotenv",
+      load({ dir, env }) {
+        const files = opts.files ?? [".env", ".env.local", ...env ? [`.env.${env}`, `.env.${env}.local`] : []];
+        let out = {};
+        for (const f of files) {
+          const p = join2(dir, f);
+          if (existsSync2(p))
+            out = { ...out, ...parseDotenv(readFileSync2(p, "utf8")) };
+        }
+        return out;
+      }
+    }
+  };
+}
+
+// src/core/core.ts
+var REF = Symbol.for("ovr.ref");
+var isRef = (v) => typeof v === "object" && v !== null && (REF in v);
+var refTarget = (r) => r[REF];
+var makeRef = (repo, service, key) => ({ [REF]: { repo, service, key } });
+function collectRefTargets(spec, out = []) {
+  if (isRef(spec)) {
+    out.push(refTarget(spec));
+    return out;
+  }
+  if (Array.isArray(spec)) {
+    for (const v of spec)
+      collectRefTargets(v, out);
+    return out;
+  }
+  if (spec && typeof spec === "object") {
+    for (const v of Object.values(spec))
+      collectRefTargets(v, out);
+  }
+  return out;
+}
+function resolveRefs(spec, resolve2) {
+  if (isRef(spec))
+    return resolve2(refTarget(spec));
+  if (Array.isArray(spec))
+    return spec.map((v) => resolveRefs(v, resolve2));
+  if (spec && typeof spec === "object") {
+    const out = {};
+    for (const [k, v] of Object.entries(spec)) {
+      if (isRef(v)) {
+        const r = resolve2(refTarget(v));
+        if (r !== undefined)
+          out[k] = r;
+      } else {
+        out[k] = resolveRefs(v, resolve2);
+      }
+    }
+    return out;
+  }
+  return spec;
+}
+function coerceEnv(obj) {
+  const out = {};
+  for (const [k, v] of Object.entries(obj)) {
+    if (v === undefined || v === null)
+      continue;
+    out[k] = typeof v === "object" ? JSON.stringify(v) : String(v);
+  }
+  return out;
+}
+var sym = (p) => typeof p === "symbol";
+function buildWorkspace(name, ownRepo, leaf) {
+  const serviceNode = (repo, s) => new Proxy({ [REF]: { repo, service: s, key: "" } }, {
+    get: (t, k) => {
+      if (k === REF)
+        return t[REF];
+      if (k === "announce")
+        return (payload) => ({ to: `${repo}.${s}`, payload });
+      return sym(k) ? undefined : leaf(repo, s, k);
+    }
+  });
+  const services = (repo) => new Proxy({}, { get: (_t, s) => sym(s) ? undefined : serviceNode(repo, s) });
+  const repos = new Proxy({}, { get: (_t, r) => sym(r) ? undefined : { services: services(r) } });
+  return { name, services: services(ownRepo), repos };
+}
+function makeContext(workspaceName, repo) {
+  return {
+    workspace: buildWorkspace(workspaceName, repo, (r, s, k) => makeRef(r, s, k)),
+    kind: buildKinds([])
+  };
+}
+function resolvingWorkspace(name, ownRepo, resolve2) {
+  return buildWorkspace(name, ownRepo, (repo, service, key) => resolve2({ repo, service, key }));
+}
+function recordingWorkspace(name, ownRepo) {
+  const rec = [];
+  const workspace = buildWorkspace(name, ownRepo, (repo, service, key) => {
+    rec.push({ repo, service, key });
+    return "";
+  });
+  return { workspace, taken: () => rec };
+}
+var input = {
+  text: (label, opts = {}) => ({
+    kind: "text",
+    label,
+    ...opts
+  }),
+  choice: (label, options, opts = {}) => ({
+    kind: "choice",
+    label,
+    options,
+    ...opts
+  }),
+  confirm: (label, opts = {}) => ({
+    kind: "confirm",
+    label,
+    ...opts
+  })
+};
+var ask = {
+  choice: (question, options, opts = {}) => ({
+    kind: "choice",
+    question,
+    options,
+    ...opts
+  }),
+  confirm: (question, opts = {}) => ({
+    kind: "confirm",
+    question,
+    ...opts
+  })
+};
+function applyAskDefaults(asks, answers, repo) {
+  const out = { ...answers };
+  for (const [key, spec] of Object.entries(asks)) {
+    if (out[key] !== undefined)
+      continue;
+    if (spec.default !== undefined) {
+      out[key] = spec.default;
+      continue;
+    }
+    const hint = spec.kind === "choice" ? spec.options.join("|") : "true|false";
+    throw new Error(`${repo}: '${key}' needs an answer — pass --answer ${key}=<${hint}> (or run interactively)`);
+  }
+  return out;
+}
+var FACTORY = Symbol.for("ovr.factory");
+var HEAD = Symbol.for("ovr.head");
+var configAsks = (mod) => isConfigModule(mod) ? mod[HEAD]?.asks ?? {} : {};
+function buildKinds(plugins) {
+  const kind = { shell };
+  for (const p of plugins)
+    if (p.kinds)
+      kind[p.name] = p.kinds;
+  return kind;
+}
+function buildActions(plugins) {
+  const out = { ...action };
+  for (const p of plugins)
+    if (p.actionKinds)
+      out[p.name] = p.actionKinds;
+  return out;
+}
+function defineConfig(a, b) {
+  if (b) {
+    const head = a;
+    const asks = { ...head.asks ?? {} };
+    if (head.modes?.length) {
+      asks.mode = {
+        kind: "choice",
+        question: "How should services run?",
+        options: head.modes,
+        ...head.defaultMode !== undefined ? { default: head.defaultMode } : {}
+      };
+    }
+    return {
+      [HEAD]: { asks },
+      [FACTORY]: ({ workspace, repo, dir, answers }) => {
+        const plugins = typeof head.plugins === "function" ? head.plugins({ workspace: { name: workspace }, repo, dir }) : head.plugins ?? [];
+        const resolved = applyAskDefaults(asks, answers ?? {}, repo);
+        const { workspace: proj } = makeContext(workspace, repo);
+        const body = b({
+          workspace: proj,
+          kind: buildKinds(plugins),
+          action: buildActions(plugins),
+          mode: resolved.mode ?? "default",
+          answers: resolved
+        });
+        return { ...body, plugins: [...plugins] };
+      }
+    };
+  }
+  const input2 = a;
+  const factory = typeof input2 === "function" ? input2 : () => input2;
+  return { [FACTORY]: ({ workspace, repo }) => factory(makeContext(workspace, repo)) };
+}
+var isConfigModule = (v) => typeof v === "object" && v !== null && (FACTORY in v);
+function evalConfig(mod, workspace, repo, dir = "", answers) {
+  if (isConfigModule(mod))
+    return mod[FACTORY]({ workspace, repo, dir, answers });
+  const isPlain = mod && typeof mod === "object" && (("services" in mod) || ("setup" in mod));
+  const factory = typeof mod === "function" ? mod : isPlain ? () => ({ services: {}, ...mod }) : null;
+  if (!factory)
+    throw new Error("config default export must be defineConfig(...) or { services: … }");
+  return factory(makeContext(workspace, repo));
+}
+var action = {
+  session: (spec) => ({ mode: "session", ...spec }),
+  fn: (spec) => ({ mode: "function", ...spec }),
+  handover: (spec) => ({ mode: "handover", ...spec })
+};
+async function serviceRefs(def, tools) {
+  return def.plugin.refs ? await def.plugin.refs(def.spec, tools) : collectRefTargets(def.spec);
+}
+
+// src/engine/localbin.ts
+import { existsSync as existsSync3 } from "node:fs";
+import { delimiter, join as join3 } from "node:path";
+var LOCAL_BIN_DIRS = [["node_modules", ".bin"]];
+function withLocalBins(dir, env) {
+  const bins = LOCAL_BIN_DIRS.map((p) => join3(dir, ...p)).filter(existsSync3);
+  if (!bins.length)
+    return env;
+  return { ...env, PATH: [...bins, env.PATH ?? ""].join(delimiter) };
+}
+
+// src/plugins/shell.ts
+var placeholderBag = () => new Proxy(() => {
+  return;
+}, {
+  get: (_t, p) => p === Symbol.toPrimitive ? () => "" : placeholderBag(),
+  apply: () => placeholderBag()
+});
+function spawnArgs(cmd) {
+  if (Array.isArray(cmd))
+    return { command: cmd[0], args: cmd.slice(1), shell: false };
+  return { command: cmd, args: [], shell: true };
+}
+var shellPlugin = {
+  name: "shell",
+  status(handle) {
+    const pid = handle?.pid;
+    if (!pid)
+      return "down";
+    try {
+      process.kill(pid, 0);
+      return "up";
+    } catch (e) {
+      return e.code === "EPERM" ? "up" : "down";
+    }
+  },
+  stop(handle) {
+    const pid = handle?.pid;
+    if (!pid)
+      return;
+    const sig = (s) => {
+      try {
+        process.kill(-pid, s);
+      } catch {
+        try {
+          process.kill(pid, s);
+        } catch {}
+      }
+    };
+    sig("SIGTERM");
+    const t = setTimeout(() => sig("SIGKILL"), 3000);
+    t.unref?.();
+  },
+  refs(spec) {
+    const env = typeof spec.env === "function" ? spec.env(placeholderBag()) : spec.env ?? {};
+    return collectRefTargets(env);
+  },
+  async plan(spec, ctx) {
+    const bag = spec.prepare ? await spec.prepare({
+      workspace: ctx.workspace,
+      scope: ctx.scope,
+      ports: { alloc: ctx.allocPort },
+      secrets: { get: ctx.secret },
+      paths: { get: ctx.path },
+      ...ctx.caps
+    }) : undefined;
+    const exp = spec.exports?.(bag) ?? {};
+    const clean = {};
+    for (const [k, v] of Object.entries(exp)) {
+      if (v !== undefined && !JSON.stringify(v).includes(ctx.pending))
+        clean[k] = v;
+    }
+    return clean;
+  },
+  async start(spec, ctx) {
+    const bag = ctx.bag;
+    const cmd = typeof spec.command === "function" ? spec.command(bag) : spec.command;
+    const { command, args, shell: useShell } = spawnArgs(cmd);
+    const rawEnv = typeof spec.env === "function" ? spec.env(bag) : spec.env ?? {};
+    const ownEnv = coerceEnv(resolveRefs(rawEnv, ctx.resolve));
+    const env = withLocalBins(ctx.scope.dir, { ...ctx.env, ...ownEnv });
+    const child = spawn(command, args, {
+      cwd: ctx.scope.dir,
+      env,
+      shell: useShell,
+      detached: true,
+      stdio: ["ignore", "pipe", "pipe"]
+    });
+    ctx.pipe(child.stdout);
+    ctx.pipe(child.stderr);
+    let killTimer = null;
+    const killGroup = (sig) => {
+      try {
+        if (child.pid)
+          process.kill(-child.pid, sig);
+      } catch {
+        try {
+          child.kill(sig);
+        } catch {}
+      }
+    };
+    child.on("exit", () => {
+      if (killTimer)
+        clearTimeout(killTimer);
+    });
+    const exports = spec.exports?.(bag) ?? {};
+    ctx.log(`▶ ${Array.isArray(cmd) ? cmd.join(" ") : cmd}${exports.url ? `  (${exports.url})` : ""}`);
+    const exited = new Promise((resolve2) => child.on("exit", () => resolve2()));
+    const ready = (spec.ready ? spec.ready(bag) : Promise.resolve()).then(() => spec.onReady?.(bag));
+    const actions = [
+      {
+        id: "shell",
+        label: "shell here (service env)",
+        command: process.env.SHELL || "/bin/sh",
+        cwd: ctx.scope.dir,
+        env
+      }
+    ];
+    return {
+      exports,
+      info: exports.url != null ? String(exports.url) : exports.port != null ? `:${exports.port}` : undefined,
+      actions,
+      ready,
+      exited,
+      handle: { pid: child.pid ?? 0 },
+      stop: () => {
+        killGroup("SIGTERM");
+        killTimer = setTimeout(() => killGroup("SIGKILL"), 3000);
+        killTimer.unref?.();
+      }
+    };
+  }
+};
+var shell = (spec) => ({ plugin: shellPlugin, spec });
+
+export { CONFIG_DIR, CONFIG_PATH, defaultRoot, loadConfig, saveConfig, serializeTeam, parseTeam, mergeTeam, getWorkspace, activeName, DEFAULT_CLONE_METHOD, normalizeRemote, repoUrl, resolveRepoPath, forkChain, workspaceOrder, forkTreeOrder, resolveRepos, resolveBranch, resolveInfisical, resolveEnvSlug, repoBranch, inferContext, withLocalBins, shellPlugin, shell, waitUntil, waitHttp, waitTcp, randomString, randomPassword, randomHex, parseDotenv, dotenv, isRef, refTarget, collectRefTargets, resolveRefs, coerceEnv, makeContext, resolvingWorkspace, recordingWorkspace, input, ask, applyAskDefaults, configAsks, defineConfig, isConfigModule, evalConfig, action, serviceRefs };

package/dist/plugins/shell.js

@@ -1,7 +1,7 @@
 import {
   shell,
   shellPlugin
-} from "../index-4m3gj5te.js";
+} from "../index-s6rge1qt.js";
 export {
   shellPlugin,
   shell

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ovrdev/cli",
-  "version": "0.1.0-alpha.16",
+  "version": "0.1.0-alpha.17",
   "description": "Override — the dev control plane: environments, repos, services, tasks",
   "type": "module",
   "bin": {
@@ -21,6 +21,13 @@
     },
     "./package.json": "./package.json"
   },
+  "scripts": {
+    "build": "bun build src/cli/index.ts src/core/core.ts src/plugins/shell.ts --root src --outdir=dist --target=node --splitting --format=esm --packages=external && tsc -p tsconfig.build.json && node scripts/fix-dts.mjs && bun build packages/plugin-portless/src/index.ts --outdir=packages/plugin-portless/dist --target=node --format=esm --packages=external && tsc -p packages/plugin-portless/tsconfig.build.json && node scripts/fix-dts.mjs packages/plugin-portless/dist && bun build packages/plugin-docker/src/index.ts --outdir=packages/plugin-docker/dist --target=node --format=esm --packages=external && tsc -p packages/plugin-docker/tsconfig.build.json && node scripts/fix-dts.mjs packages/plugin-docker/dist && bun build packages/plugin-infisical/src/index.ts --outdir=packages/plugin-infisical/dist --target=node --format=esm --packages=external && tsc -p packages/plugin-infisical/tsconfig.build.json && node scripts/fix-dts.mjs packages/plugin-infisical/dist && bun build packages/plugin-js/src/index.ts --outdir=packages/plugin-js/dist --target=node --format=esm --packages=external && tsc -p packages/plugin-js/tsconfig.build.json && node scripts/fix-dts.mjs packages/plugin-js/dist && bun build packages/plugin-postgres/src/index.ts --outdir=packages/plugin-postgres/dist --target=node --format=esm --packages=external && bun build packages/plugin-postgres/src/sql-runner.ts --outdir=packages/plugin-postgres/dist --target=node --format=esm && tsc -p packages/plugin-postgres/tsconfig.build.json && node scripts/fix-dts.mjs packages/plugin-postgres/dist && bun build packages/plugin-supabase/src/index.ts --outdir=packages/plugin-supabase/dist --target=node --format=esm --packages=external && tsc -p packages/plugin-supabase/tsconfig.build.json && node scripts/fix-dts.mjs packages/plugin-supabase/dist",
+    "dev": "bun build src/cli/index.ts src/core/core.ts src/plugins/shell.ts --root src --outdir=dist --target=node --splitting --format=esm --packages=external --watch",
+    "postinstall": "node scripts/postinstall.mjs",
+    "prepare": "bun run build",
+    "test": "bun run build && bun test"
+  },
   "engines": {
     "node": ">=22.6"
   },
@@ -35,11 +42,5 @@
     "@types/node": "^22.10.0",
     "@types/react": "^19.2.17",
     "typescript": "^5.7.2"
-  },
-  "scripts": {
-    "build": "bun build src/cli/index.ts src/core/core.ts src/plugins/shell.ts --root src --outdir=dist --target=node --splitting --format=esm --packages=external && tsc -p tsconfig.build.json && node scripts/fix-dts.mjs && bun build packages/plugin-portless/src/index.ts --outdir=packages/plugin-portless/dist --target=node --format=esm --packages=external && tsc -p packages/plugin-portless/tsconfig.build.json && node scripts/fix-dts.mjs packages/plugin-portless/dist && bun build packages/plugin-docker/src/index.ts --outdir=packages/plugin-docker/dist --target=node --format=esm --packages=external && tsc -p packages/plugin-docker/tsconfig.build.json && node scripts/fix-dts.mjs packages/plugin-docker/dist && bun build packages/plugin-infisical/src/index.ts --outdir=packages/plugin-infisical/dist --target=node --format=esm --packages=external && tsc -p packages/plugin-infisical/tsconfig.build.json && node scripts/fix-dts.mjs packages/plugin-infisical/dist && bun build packages/plugin-js/src/index.ts --outdir=packages/plugin-js/dist --target=node --format=esm --packages=external && tsc -p packages/plugin-js/tsconfig.build.json && node scripts/fix-dts.mjs packages/plugin-js/dist && bun build packages/plugin-postgres/src/index.ts --outdir=packages/plugin-postgres/dist --target=node --format=esm --packages=external && bun build packages/plugin-postgres/src/sql-runner.ts --outdir=packages/plugin-postgres/dist --target=node --format=esm && tsc -p packages/plugin-postgres/tsconfig.build.json && node scripts/fix-dts.mjs packages/plugin-postgres/dist && bun build packages/plugin-supabase/src/index.ts --outdir=packages/plugin-supabase/dist --target=node --format=esm --packages=external && tsc -p packages/plugin-supabase/tsconfig.build.json && node scripts/fix-dts.mjs packages/plugin-supabase/dist",
-    "dev": "bun build src/cli/index.ts src/core/core.ts src/plugins/shell.ts --root src --outdir=dist --target=node --splitting --format=esm --packages=external --watch",
-    "postinstall": "node scripts/postinstall.mjs",
-    "test": "bun run build && bun test"
   }
-}
+}