@tabbr/module-cli 0.1.0 → 0.3.0

package/src/build.js

@@ -1,91 +1,123 @@
-'use strict';
-
-const { execFileSync } = require('child_process');
-const fs = require('fs');
-const path = require('path');
-const archiver = require('archiver');
-
-/** Reads angular.json and resolves the browser output directory for the workspace's one project. */
-function resolveOutputDir(cwd) {
-  const angularJsonPath = path.join(cwd, 'angular.json');
-  if (!fs.existsSync(angularJsonPath)) {
-    throw new Error(`No angular.json found in ${cwd} - run this from an Angular workspace root (or pass --cwd).`);
-  }
-  const angularJson = JSON.parse(fs.readFileSync(angularJsonPath, 'utf-8'));
-  const projectName = Object.keys(angularJson.projects)[0];
-  const project = angularJson.projects[projectName];
-  // native-federation's build target wraps the real Angular application builder under
-  // "build-original" (see tabbr-ui/angular.json and tabbr-custom-module-poc/angular.json) -
-  // that's where the actual outputPath lives.
-  const buildTarget = project.architect['build-original'] || project.architect['build'];
-  const outputPath = buildTarget.options.outputPath;
-  const base = typeof outputPath === 'string' ? outputPath : outputPath.base;
-  // Angular's application builder always nests the actual browser bundle under a "browser/"
-  // subfolder of outputPath - confirmed empirically against this exact builder this session.
-  return path.join(cwd, base, 'browser');
-}
-
-/**
- * Runs `ng build` in `cwd` by invoking the workspace's own locally-installed Angular CLI entry
- * point directly with the current Node binary.
- *
- * Deliberately NOT `execFileSync('npx', ['ng', 'build'], { shell: true })`, which was the previous
- * implementation and had three problems at once:
- *   - Node's DEP0190 deprecation warning (passing an args array together with `shell: true`).
- *   - Passing args through a shell at all means they're re-parsed by the shell, so anything less
- *     trusted than a hardcoded literal would need manual escaping.
- *   - On Windows `npx` is `npx.cmd`, and since the CVE-2024-27980 fix Node refuses to spawn
- *     `.cmd`/`.bat` WITHOUT `shell: true` - so dropping the shell alone wasn't an option there.
- * Going straight to `node node_modules/@angular/cli/bin/ng.js` sidesteps all three: no shell, no
- * args re-parsing, no platform-specific launcher script, and it's faster (skips npx resolution).
- *
- * Explicitly `--configuration production`, not a bare `ng build`: a module workspace's
- * angular.json typically sets `defaultConfiguration: "development"` on the native-federation
- * build target (so a plain `ng build`/`ng serve` during local development doesn't need the flag
- * spelled out every time) - which a bare `ng build` here would silently inherit, publishing an
- * unoptimized dev build (unminified, `dev: true`, native-federation's build-notifications
- * live-reload hook baked in) to the club instead of the production one. The live-reload hook in
- * particular then 404s at runtime (it points at a dev server that doesn't exist once statically
- * published) and the unshared-per-pass token identities a dev build produces differently from
- * prod have caused real `NG0201: No provider found for ...` failures in published modules.
- */
-function runNgBuild(cwd) {
-  const ngJs = path.join(cwd, 'node_modules', '@angular', 'cli', 'bin', 'ng.js');
-  if (!fs.existsSync(ngJs)) {
-    throw new Error(
-      `No local Angular CLI found at ${ngJs} - run "npm install" in ${cwd} first.`
-    );
-  }
-  console.log(`Building in ${cwd} ...`);
-  execFileSync(process.execPath, [ngJs, 'build', '--configuration', 'production'], { cwd, stdio: 'inherit' });
-}
-
-/** Zips outputDir's contents flat (remoteEntry.json at the zip root) into a Buffer. */
-function zipDirectory(outputDir) {
-  return new Promise((resolve, reject) => {
-    const archive = archiver('zip', { zlib: { level: 9 } });
-    const chunks = [];
-    archive.on('data', chunk => chunks.push(chunk));
-    archive.on('end', () => resolve(Buffer.concat(chunks)));
-    archive.on('error', reject);
-    archive.directory(outputDir, false);
-    archive.finalize();
-  });
-}
-
-/** Builds the workspace at `cwd`, verifies remoteEntry.json exists, and returns a zip Buffer. */
-async function buildAndZip(cwd) {
-  runNgBuild(cwd);
-  const outputDir = resolveOutputDir(cwd);
-  const remoteEntryPath = path.join(outputDir, 'remoteEntry.json');
-  if (!fs.existsSync(remoteEntryPath)) {
-    throw new Error(
-      `Build output at ${outputDir} has no remoteEntry.json. ` +
-      `Is this workspace's federation.config.js missing an "exposes" entry?`
-    );
-  }
-  console.log(`Zipping ${outputDir} ...`);
-  return zipDirectory(outputDir);
-}
-
-module.exports = { buildAndZip, resolveOutputDir };
+'use strict';
+
+const { execFileSync } = require('child_process');
+const fs = require('fs');
+const path = require('path');
+const archiver = require('archiver');
+const { buildBackend } = require('./backend-build');
+
+/** Reads angular.json and resolves the browser output directory for the workspace's one project. */
+function resolveOutputDir(cwd) {
+  const angularJsonPath = path.join(cwd, 'angular.json');
+  if (!fs.existsSync(angularJsonPath)) {
+    throw new Error(`No angular.json found in ${cwd} - run this from an Angular workspace root (or pass --cwd).`);
+  }
+  const angularJson = JSON.parse(fs.readFileSync(angularJsonPath, 'utf-8'));
+  const projectName = Object.keys(angularJson.projects)[0];
+  const project = angularJson.projects[projectName];
+  // native-federation's build target wraps the real Angular application builder under
+  // "build-original" (see tabbr-ui/angular.json and tabbr-custom-module-poc/angular.json) -
+  // that's where the actual outputPath lives.
+  const buildTarget = project.architect['build-original'] || project.architect['build'];
+  const outputPath = buildTarget.options.outputPath;
+  const base = typeof outputPath === 'string' ? outputPath : outputPath.base;
+  // Angular's application builder always nests the actual browser bundle under a "browser/"
+  // subfolder of outputPath - confirmed empirically against this exact builder this session.
+  return path.join(cwd, base, 'browser');
+}
+
+/**
+ * Runs `ng build` in `cwd` by invoking the workspace's own locally-installed Angular CLI entry
+ * point directly with the current Node binary.
+ *
+ * Deliberately NOT `execFileSync('npx', ['ng', 'build'], { shell: true })`, which was the previous
+ * implementation and had three problems at once:
+ *   - Node's DEP0190 deprecation warning (passing an args array together with `shell: true`).
+ *   - Passing args through a shell at all means they're re-parsed by the shell, so anything less
+ *     trusted than a hardcoded literal would need manual escaping.
+ *   - On Windows `npx` is `npx.cmd`, and since the CVE-2024-27980 fix Node refuses to spawn
+ *     `.cmd`/`.bat` WITHOUT `shell: true` - so dropping the shell alone wasn't an option there.
+ * Going straight to `node node_modules/@angular/cli/bin/ng.js` sidesteps all three: no shell, no
+ * args re-parsing, no platform-specific launcher script, and it's faster (skips npx resolution).
+ *
+ * Explicitly `--configuration production`, not a bare `ng build`: a module workspace's
+ * angular.json typically sets `defaultConfiguration: "development"` on the native-federation
+ * build target (so a plain `ng build`/`ng serve` during local development doesn't need the flag
+ * spelled out every time) - which a bare `ng build` here would silently inherit, publishing an
+ * unoptimized dev build (unminified, `dev: true`, native-federation's build-notifications
+ * live-reload hook baked in) to the club instead of the production one. The live-reload hook in
+ * particular then 404s at runtime (it points at a dev server that doesn't exist once statically
+ * published) and the unshared-per-pass token identities a dev build produces differently from
+ * prod have caused real `NG0201: No provider found for ...` failures in published modules.
+ */
+function runNgBuild(cwd) {
+  const ngJs = path.join(cwd, 'node_modules', '@angular', 'cli', 'bin', 'ng.js');
+  if (!fs.existsSync(ngJs)) {
+    throw new Error(
+      `No local Angular CLI found at ${ngJs} - run "npm install" in ${cwd} first.`
+    );
+  }
+  console.log(`Building in ${cwd} ...`);
+  execFileSync(process.execPath, [ngJs, 'build', '--configuration', 'production'], { cwd, stdio: 'inherit' });
+}
+
+/**
+ * Zips frontendDir's contents flat at the zip root (remoteEntry.json at the root, as before) plus,
+ * when present, the backend bundle/manifest under a `backend/` prefix - one zip, one upload, no
+ * separate publish step per side (see `CustomModuleService#publish` on the server, which splits
+ * them back apart by that same prefix).
+ */
+function zipModule(frontendDir, backend) {
+  return new Promise((resolve, reject) => {
+    const archive = archiver('zip', { zlib: { level: 9 } });
+    const chunks = [];
+    archive.on('data', chunk => chunks.push(chunk));
+    archive.on('end', () => resolve(Buffer.concat(chunks)));
+    archive.on('error', reject);
+    if (frontendDir) {
+      archive.directory(frontendDir, false);
+    }
+    if (backend) {
+      if (backend.bundleJs != null) {
+        archive.append(backend.bundleJs, { name: 'backend/bundle.js' });
+      }
+      archive.append(backend.manifestJson, { name: 'backend/manifest.json' });
+    }
+    archive.finalize();
+  });
+}
+
+/**
+ * Builds whichever parts of the workspace at `cwd` are present - a frontend (an Angular project,
+ * i.e. angular.json exists) and/or a backend (`config.backend` set, see `backend-build.js`) - and
+ * returns a single zip Buffer with both. At least one part must be present.
+ */
+async function buildAndZip(cwd, config) {
+  const hasFrontend = fs.existsSync(path.join(cwd, 'angular.json'));
+  let frontendDir = null;
+  if (hasFrontend) {
+    runNgBuild(cwd);
+    frontendDir = resolveOutputDir(cwd);
+    const remoteEntryPath = path.join(frontendDir, 'remoteEntry.json');
+    if (!fs.existsSync(remoteEntryPath)) {
+      throw new Error(
+        `Build output at ${frontendDir} has no remoteEntry.json. ` +
+        `Is this workspace's federation.config.js missing an "exposes" entry?`
+      );
+    }
+  }
+
+  const backend = await buildBackend(cwd, config || {});
+
+  if (!hasFrontend && !backend) {
+    throw new Error(
+      `Nothing to build in ${cwd}: no angular.json (frontend) and no backend part configured ` +
+      `("backend" in tabbr.config.json, entry file missing).`
+    );
+  }
+
+  console.log('Zipping module ...');
+  return zipModule(frontendDir, backend);
+}
+
+module.exports = { buildAndZip, resolveOutputDir };

package/src/config.js

@@ -1,75 +1,75 @@
-'use strict';
-
-const fs = require('fs');
-const path = require('path');
-const readline = require('readline/promises');
-
-const CONFIG_FILE = 'tabbr.config.json';
-const DEFAULT_API_HOST = 'https://api.tabbr.be';
-
-/**
- * Reads the workspace's tabbr.config.json - the one place a module project records which club it
- * targets, its module id and so on. Both this CLI and the module's own dev-preview harness read it,
- * so they can't drift apart. Returns {} when there is no such file.
- */
-function readConfig(cwd) {
-  const file = path.join(cwd, CONFIG_FILE);
-  if (!fs.existsSync(file)) return {};
-  try {
-    return JSON.parse(fs.readFileSync(file, 'utf-8'));
-  } catch (err) {
-    throw new Error(`${file} is not valid JSON: ${err.message}`);
-  }
-}
-
-/** Uppercase club code, or throws with instructions when none is configured. */
-function requireClub(club) {
-  if (!club) {
-    throw new Error(`No club configured. Run "npx tabbr-module init" (or set "club" in ${CONFIG_FILE}).`);
-  }
-  return club.toUpperCase();
-}
-
-function slug(text) {
-  return text.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-|-$/g, '');
-}
-
-/**
- * Asks for the club code (and offers defaults for the rest) and writes tabbr.config.json, keeping
- * any values already in it as the defaults.
- */
-async function runInit(cwd, overrides) {
-  const file = path.join(cwd, CONFIG_FILE);
-  const current = readConfig(cwd);
-  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
-  const ask = async (question, fallback) => {
-    if (!process.stdin.isTTY) return fallback;
-    const answer = (await rl.question(fallback ? `${question} [${fallback}]: ` : `${question}: `)).trim();
-    return answer || fallback;
-  };
-
-  try {
-    const club = (overrides.club || await ask('Club code (the part before .tabbr.be, e.g. abc)', current.club))?.toUpperCase();
-    if (!club) throw new Error('A club code is required.');
-    const name = slug(path.basename(cwd)) || 'my-module';
-    const moduleId = overrides.moduleId
-      || await ask('Module id (unique within the club)', current.moduleId || `club.${club.toLowerCase()}.${name}`);
-    const title = overrides.title || await ask('Menu title', current.title || 'My module');
-
-    const config = {
-      ...current,
-      club,
-      apiHost: overrides.apiHost || current.apiHost || DEFAULT_API_HOST,
-      moduleId,
-      title,
-      exposedModule: current.exposedModule || './Module',
-      exportName: current.exportName || 'Module',
-    };
-    fs.writeFileSync(file, JSON.stringify(config, null, 2) + '\n');
-    console.log(`\nWrote ${file}. Next: "npm start" to preview, "npm run publish-module" to publish.`);
-  } finally {
-    rl.close();
-  }
-}
-
-module.exports = { CONFIG_FILE, DEFAULT_API_HOST, readConfig, requireClub, runInit };
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+const readline = require('readline/promises');
+
+const CONFIG_FILE = 'tabbr.config.json';
+const DEFAULT_API_HOST = 'https://api.tabbr.be';
+
+/**
+ * Reads the workspace's tabbr.config.json - the one place a module project records which club it
+ * targets, its module id and so on. Both this CLI and the module's own dev-preview harness read it,
+ * so they can't drift apart. Returns {} when there is no such file.
+ */
+function readConfig(cwd) {
+  const file = path.join(cwd, CONFIG_FILE);
+  if (!fs.existsSync(file)) return {};
+  try {
+    return JSON.parse(fs.readFileSync(file, 'utf-8'));
+  } catch (err) {
+    throw new Error(`${file} is not valid JSON: ${err.message}`);
+  }
+}
+
+/** Uppercase club code, or throws with instructions when none is configured. */
+function requireClub(club) {
+  if (!club) {
+    throw new Error(`No club configured. Run "npx tabbr-module init" (or set "club" in ${CONFIG_FILE}).`);
+  }
+  return club.toUpperCase();
+}
+
+function slug(text) {
+  return text.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-|-$/g, '');
+}
+
+/**
+ * Asks for the club code (and offers defaults for the rest) and writes tabbr.config.json, keeping
+ * any values already in it as the defaults.
+ */
+async function runInit(cwd, overrides) {
+  const file = path.join(cwd, CONFIG_FILE);
+  const current = readConfig(cwd);
+  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+  const ask = async (question, fallback) => {
+    if (!process.stdin.isTTY) return fallback;
+    const answer = (await rl.question(fallback ? `${question} [${fallback}]: ` : `${question}: `)).trim();
+    return answer || fallback;
+  };
+
+  try {
+    const club = (overrides.club || await ask('Club code (the part before .tabbr.be, e.g. abc)', current.club))?.toUpperCase();
+    if (!club) throw new Error('A club code is required.');
+    const name = slug(path.basename(cwd)) || 'my-module';
+    const moduleId = overrides.moduleId
+      || await ask('Module id (unique within the club)', current.moduleId || `club.${club.toLowerCase()}.${name}`);
+    const title = overrides.title || await ask('Fallback title (the translated one is module.title in your i18n bundle)', current.title || 'My module');
+
+    const config = {
+      ...current,
+      club,
+      apiHost: overrides.apiHost || current.apiHost || DEFAULT_API_HOST,
+      moduleId,
+      title,
+      exposedModule: current.exposedModule || './Module',
+      exportName: current.exportName || 'Module',
+    };
+    fs.writeFileSync(file, JSON.stringify(config, null, 2) + '\n');
+    console.log(`\nWrote ${file}. Next: "npm start" to preview, "npm run publish-module" to publish.`);
+  } finally {
+    rl.close();
+  }
+}
+
+module.exports = { CONFIG_FILE, DEFAULT_API_HOST, readConfig, requireClub, runInit };

package/src/fetch-types.js

@@ -1,49 +1,49 @@
-'use strict';
-
-// Mirrors ScriptTypeGenerator.ScriptKind (tabbr-api-server) - keep in sync if that enum changes.
-const VALID_KINDS = ['HOOK', 'CALCULATION', 'DEFAULT_CALCULATION', 'RELEVANT_CONDITION'];
-
-/**
- * Fetches the ambient .d.ts tabbr-ui's own script editor (Monaco, for club-configured hook/
- * calculation/default-value/relevancy-condition scripts) feeds itself, for a given club/entity/
- * kind - see ScriptTypeGenerator (tabbr-api-server) and ScriptEditorMonacoService (tabbr-ui).
- */
-async function fetchScriptTypes({ apiHost, club, entity, kind, accessToken }) {
-  if (!VALID_KINDS.includes(kind)) {
-    throw new Error(`Invalid --kind "${kind}". Must be one of: ${VALID_KINDS.join(', ')}`);
-  }
-
-  const url = `${apiHost}/api/${entity}/meta/script?kind=${kind}`;
-  console.log(`Fetching script types for entity "${entity}" (kind ${kind}) from ${url} ...`);
-  const response = await fetch(url, {
-    // X-club is required: CurrentClubFilter (tabbr-api-server) resolves the "current club" for
-    // this request from this header, not from any path variable - same pattern as publish.js.
-    headers: { Authorization: `Bearer ${accessToken}`, 'X-club': club.toUpperCase() },
-  });
-
-  if (!response.ok) {
-    throw new Error(`Fetching script types failed: ${response.status} ${await response.text()}`);
-  }
-  return response.text();
-}
-
-/**
- * Every entity this club has, as plain TypeScript data interfaces in ONE combined file - no
- * script-sandbox globals, so (unlike fetchScriptTypes) safe to fetch for every entity at once and
- * write to a single .d.ts. See ScriptTypeGenerator#generateAllEntityTypes (tabbr-api-server) for
- * why. For general club-data typing in module component code, not the script editor.
- */
-async function fetchAllEntityTypes({ apiHost, club, accessToken }) {
-  const url = `${apiHost}/api/club/${club.toUpperCase()}/entities/types`;
-  console.log(`Fetching all entity types for club ${club.toUpperCase()} from ${url} ...`);
-  const response = await fetch(url, {
-    headers: { Authorization: `Bearer ${accessToken}`, 'X-club': club.toUpperCase() },
-  });
-
-  if (!response.ok) {
-    throw new Error(`Fetching entity types failed: ${response.status} ${await response.text()}`);
-  }
-  return response.text();
-}
-
-module.exports = { fetchScriptTypes, fetchAllEntityTypes, VALID_KINDS };
+'use strict';
+
+// Mirrors ScriptTypeGenerator.ScriptKind (tabbr-api-server) - keep in sync if that enum changes.
+const VALID_KINDS = ['HOOK', 'CALCULATION', 'DEFAULT_CALCULATION', 'RELEVANT_CONDITION'];
+
+/**
+ * Fetches the ambient .d.ts tabbr-ui's own script editor (Monaco, for club-configured hook/
+ * calculation/default-value/relevancy-condition scripts) feeds itself, for a given club/entity/
+ * kind - see ScriptTypeGenerator (tabbr-api-server) and ScriptEditorMonacoService (tabbr-ui).
+ */
+async function fetchScriptTypes({ apiHost, club, entity, kind, accessToken }) {
+  if (!VALID_KINDS.includes(kind)) {
+    throw new Error(`Invalid --kind "${kind}". Must be one of: ${VALID_KINDS.join(', ')}`);
+  }
+
+  const url = `${apiHost}/api/${entity}/meta/script?kind=${kind}`;
+  console.log(`Fetching script types for entity "${entity}" (kind ${kind}) from ${url} ...`);
+  const response = await fetch(url, {
+    // X-club is required: CurrentClubFilter (tabbr-api-server) resolves the "current club" for
+    // this request from this header, not from any path variable - same pattern as publish.js.
+    headers: { Authorization: `Bearer ${accessToken}`, 'X-club': club.toUpperCase() },
+  });
+
+  if (!response.ok) {
+    throw new Error(`Fetching script types failed: ${response.status} ${await response.text()}`);
+  }
+  return response.text();
+}
+
+/**
+ * Every entity this club has, as plain TypeScript data interfaces in ONE combined file - no
+ * script-sandbox globals, so (unlike fetchScriptTypes) safe to fetch for every entity at once and
+ * write to a single .d.ts. See ScriptTypeGenerator#generateAllEntityTypes (tabbr-api-server) for
+ * why. For general club-data typing in module component code, not the script editor.
+ */
+async function fetchAllEntityTypes({ apiHost, club, accessToken }) {
+  const url = `${apiHost}/api/club/${club.toUpperCase()}/entities/types`;
+  console.log(`Fetching all entity types for club ${club.toUpperCase()} from ${url} ...`);
+  const response = await fetch(url, {
+    headers: { Authorization: `Bearer ${accessToken}`, 'X-club': club.toUpperCase() },
+  });
+
+  if (!response.ok) {
+    throw new Error(`Fetching entity types failed: ${response.status} ${await response.text()}`);
+  }
+  return response.text();
+}
+
+module.exports = { fetchScriptTypes, fetchAllEntityTypes, VALID_KINDS };

package/src/local.js

@@ -0,0 +1,62 @@
+'use strict';
+
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+const { spawnSync } = require('child_process');
+
+/** The developer's own backend, behind the local reverse proxy (see tabbr-ui's api-host.ts). */
+const DEFAULT_LOCAL_API_HOST = 'https://api.local.tabbr.be';
+
+const LOCAL_SUFFIX = '.local.tabbr.be';
+const RESPAWNED_MARKER = 'TABBR_CLI_LOCAL_TRUST_APPLIED';
+
+function isLocalApiHost(apiHost) {
+  try {
+    return new URL(apiHost).hostname.endsWith(LOCAL_SUFFIX);
+  } catch {
+    return false;
+  }
+}
+
+/** Where `mkcert -install` keeps its root CA, which signs the *.local.tabbr.be certificate. */
+function mkcertRootCa() {
+  const candidates = [];
+  if (process.env.CAROOT) candidates.push(path.join(process.env.CAROOT, 'rootCA.pem'));
+  if (process.platform === 'win32') {
+    candidates.push(path.join(process.env.LOCALAPPDATA || '', 'mkcert', 'rootCA.pem'));
+  } else if (process.platform === 'darwin') {
+    candidates.push(path.join(os.homedir(), 'Library', 'Application Support', 'mkcert', 'rootCA.pem'));
+  } else {
+    candidates.push(path.join(os.homedir(), '.local', 'share', 'mkcert', 'rootCA.pem'));
+  }
+  return candidates.find((candidate) => fs.existsSync(candidate));
+}
+
+/**
+ * Node ignores the OS trust store by default, so a local dev environment signed by mkcert's private
+ * root CA fails with a certificate error even though the browser trusts it. NODE_EXTRA_CA_CERTS is
+ * only read at process start, so when the target is a *.local.tabbr.be host this re-runs the CLI
+ * once as a child with it set (and exits with the child's status). No-op for any other host, when
+ * the variable is already set, or when mkcert's root CA can't be found.
+ */
+function trustLocalCertificateOrRespawn(apiHost) {
+  if (!isLocalApiHost(apiHost) || process.env.NODE_EXTRA_CA_CERTS || process.env[RESPAWNED_MARKER]) {
+    return;
+  }
+  const rootCa = mkcertRootCa();
+  if (!rootCa) {
+    console.warn(
+      `Publishing to ${apiHost} needs your mkcert root CA to be trusted, but it was not found. If the upload fails ` +
+      'with a certificate error, set NODE_EXTRA_CA_CERTS to the path of mkcert\'s rootCA.pem (see "mkcert -CAROOT").'
+    );
+    return;
+  }
+  const result = spawnSync(process.execPath, process.argv.slice(1), {
+    stdio: 'inherit',
+    env: { ...process.env, NODE_EXTRA_CA_CERTS: rootCa, [RESPAWNED_MARKER]: '1' },
+  });
+  process.exit(result.status === null ? 1 : result.status);
+}
+
+module.exports = { DEFAULT_LOCAL_API_HOST, isLocalApiHost, trustLocalCertificateOrRespawn };