@vendure/cloud 0.4.0 → 0.5.0-dev.20261016123507.ge07a06e

package/dist/dev/dashboard-vite-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dashboard-vite-config.d.ts","sourceRoot":"","sources":["../../src/dev/dashboard-vite-config.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;CACjB;AAWD,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE7D;AAKD,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,wBAAwB,GAAG,MAAM,CASvF;AAED,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,wBAAwB,EAC/B,mBAAmB,EAAE,MAAM,GAC1B,MAAM,CA4CR"}
+{"version":3,"file":"dashboard-vite-config.d.ts","sourceRoot":"","sources":["../../src/dev/dashboard-vite-config.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;CACjB;AAUD,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE7D;AAKD,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,wBAAwB,GAAG,MAAM,CASvF;AAED,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,wBAAwB,EAC/B,mBAAmB,EAAE,MAAM,GAC1B,MAAM,CA0CR"}

package/dist/dev/dashboard-vite-config.js

@@ -2,21 +2,20 @@ import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join, relative, sep } from "node:path";
 import { DEFAULT_VITE_DEV_SERVER_PORT } from "../local-dashboard-plugin.js";
 const MANAGED_DASHBOARD_DIRECTORY = ".cache/vendure-cloud-dashboard";
-// Where the GraphQL codegen step this config wires up writes `graphql.ts`. Shared with
-// `dev-command.ts`, which tells Core's supervisor not to restart the server and worker for changes
-// under this directory: the codegen step already reruns on the same source change that would have
-// triggered a restart, and a write into a watched directory should not cause a second one.
+// Where the GraphQL codegen step this config wires up writes `graphql.ts`. `dev-command.ts` tells
+// Core's supervisor not to restart the server and worker for changes under this directory, because
+// the codegen step already reruns on the same source change.
 //
 // The managed build generates the same two settings from `GQL_OUTPUT_SUBDIR` in
-// `apps/vc-builder/src/dashboard-vite-config.ts`, which cannot import this package. The two are held together
-// by `scripts/check-dashboard-gql-parity.ts` rather than by a shared module, and a change to this
-// directory or to the aliased filename has to be made in both.
+// `apps/vc-builder/src/dashboard-vite-config.ts`, which cannot import this package.
+// `scripts/check-dashboard-gql-parity.ts` holds the two together; change both when this
+// directory or the aliased filename changes.
 export function gqlOutputDirectory(projectDir) {
     return join(projectDir, "src", "gql");
 }
-// The standard Cloud project owns one configuration file. Vite still needs a configuration module,
-// so `vendure dev` writes this implementation detail beside the adapter the Dashboard compiler
-// generates and points Core's supervisor at it.
+// The standard Cloud project owns one configuration file. `vendure dev` writes this file beside the
+// adapter the Dashboard compiler generates, because Vite needs a configuration module, and points
+// Core's supervisor at it.
 export function writeManagedDashboardViteConfig(input) {
     const configPath = join(input.projectDir, MANAGED_DASHBOARD_DIRECTORY, "vite.config.mjs");
     const source = managedDashboardViteConfigSource(input, configPath);
@@ -46,17 +45,15 @@ export function managedDashboardViteConfigSource(input, generatedConfigPath) {
         "  plugins: [",
         "    vendureCloudDashboardPlugin({",
         "      vendureConfigPath: cloudConfigPath,",
-        // `auto` is `@vendure/dashboard`'s default for both fields. The Dashboard reads the scheme and
-        // host from `window.location`. The API binds 127.0.0.1, but loopback answers to `localhost` as
-        // well, so the page loads under either name. Core's default cookie auth sets
-        // `sameSite: "lax"`, which counts the two names as separate sites. A pinned host matches one
-        // of those names. The browser withholds the session cookie on the other, and every Admin API
-        // call is unauthenticated.
+        // `auto` is `@vendure/dashboard`'s default for both fields; the Dashboard reads the scheme
+        // and host from `window.location`. The API binds 127.0.0.1 but loopback also answers to
+        // `localhost`, and Core's default `sameSite: "lax"` cookie counts the two names as separate
+        // sites. A pinned host would match one name, and the browser would withhold the session
+        // cookie on the other, leaving every Admin API call unauthenticated.
         //
-        // The port is pinned because SameSite reads the host alone. A page on the Vite development
-        // server's port is the same site as the API's port, so the browser sends the session cookie
-        // to the API. `auto` would address the Vite development server's port, which serves no
-        // Admin API.
+        // The port is pinned because SameSite reads the host alone: a page on the Vite development
+        // server's port is the same site as the API's port. `auto` would address the Vite port, which
+        // serves no Admin API.
         `      api: { host: "auto", port: ${input.apiPort} },`,
         `      gqlOutputPath: ${JSON.stringify(gqlOutputDirectory(input.projectDir))},`,
         "    }),",

package/dist/dev/dashboard-vite-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"dashboard-vite-config.js","sourceRoot":"","sources":["../../src/dev/dashboard-vite-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAE5E,MAAM,2BAA2B,GAAG,gCAAgC,CAAC;AAQrE,uFAAuF;AACvF,mGAAmG;AACnG,kGAAkG;AAClG,2FAA2F;AAC3F,EAAE;AACF,gFAAgF;AAChF,8GAA8G;AAC9G,kGAAkG;AAClG,+DAA+D;AAC/D,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,OAAO,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AACxC,CAAC;AAED,mGAAmG;AACnG,+FAA+F;AAC/F,gDAAgD;AAChD,MAAM,UAAU,+BAA+B,CAAC,KAA+B;IAC7E,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,2BAA2B,EAAE,iBAAiB,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,gCAAgC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAEnE,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;QAC3E,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,KAA+B,EAC/B,mBAA2B;IAE3B,MAAM,oBAAoB,GAAG,eAAe,CAC1C,QAAQ,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,KAAK,CAAC,eAAe,CAAC,CAC9D,CAAC;IAEF,OAAO;QACL,sEAAsE;QACtE,oGAAoG;QACpG,oEAAoE;QACpE,sCAAsC;QACtC,sCAAsC,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,GAAG;QAC7E,EAAE;QACF,2BAA2B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG;QACnE,2EAA2E;QAC3E,6EAA6E;QAC7E,EAAE;QACF,+BAA+B;QAC/B,gCAAgC;QAChC,sBAAsB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,KAAK;QACtF,wCAAwC,4BAA4B,uBAAuB;QAC3F,cAAc;QACd,mCAAmC;QACnC,2CAA2C;QAC3C,+FAA+F;QAC/F,+FAA+F;QAC/F,6EAA6E;QAC7E,6FAA6F;QAC7F,6FAA6F;QAC7F,2BAA2B;QAC3B,EAAE;QACF,2FAA2F;QAC3F,4FAA4F;QAC5F,uFAAuF;QACvF,aAAa;QACb,oCAAoC,KAAK,CAAC,OAAO,KAAK;QACtD,wBAAwB,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG;QAC/E,SAAS;QACT,MAAM;QACN,cAAc;QACd,yBAAyB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC,CAAC,KAAK;QACtG,MAAM;QACN,KAAK;QACL,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;AACrE,CAAC"}
+{"version":3,"file":"dashboard-vite-config.js","sourceRoot":"","sources":["../../src/dev/dashboard-vite-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAE5E,MAAM,2BAA2B,GAAG,gCAAgC,CAAC;AAQrE,kGAAkG;AAClG,mGAAmG;AACnG,6DAA6D;AAC7D,EAAE;AACF,gFAAgF;AAChF,oFAAoF;AACpF,wFAAwF;AACxF,6CAA6C;AAC7C,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,OAAO,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AACxC,CAAC;AAED,oGAAoG;AACpG,kGAAkG;AAClG,2BAA2B;AAC3B,MAAM,UAAU,+BAA+B,CAAC,KAA+B;IAC7E,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,2BAA2B,EAAE,iBAAiB,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,gCAAgC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAEnE,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;QAC3E,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,KAA+B,EAC/B,mBAA2B;IAE3B,MAAM,oBAAoB,GAAG,eAAe,CAC1C,QAAQ,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,KAAK,CAAC,eAAe,CAAC,CAC9D,CAAC;IAEF,OAAO;QACL,sEAAsE;QACtE,oGAAoG;QACpG,oEAAoE;QACpE,sCAAsC;QACtC,sCAAsC,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,GAAG;QAC7E,EAAE;QACF,2BAA2B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG;QACnE,2EAA2E;QAC3E,6EAA6E;QAC7E,EAAE;QACF,+BAA+B;QAC/B,gCAAgC;QAChC,sBAAsB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,KAAK;QACtF,wCAAwC,4BAA4B,uBAAuB;QAC3F,cAAc;QACd,mCAAmC;QACnC,2CAA2C;QAC3C,2FAA2F;QAC3F,wFAAwF;QACxF,4FAA4F;QAC5F,wFAAwF;QACxF,qEAAqE;QACrE,EAAE;QACF,2FAA2F;QAC3F,8FAA8F;QAC9F,uBAAuB;QACvB,oCAAoC,KAAK,CAAC,OAAO,KAAK;QACtD,wBAAwB,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG;QAC/E,SAAS;QACT,MAAM;QACN,cAAc;QACd,yBAAyB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC,CAAC,KAAK;QACtG,MAAM;QACN,KAAK;QACL,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;AACrE,CAAC"}

package/dist/dev/dev-command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dev-command.d.ts","sourceRoot":"","sources":["../../src/dev/dev-command.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AA4B/D,MAAM,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAE/C,wBAAsB,WAAW,CAC/B,IAAI,EAAE,OAAO,EAAE,EACf,IAAI,EAAE,aAAa,GAElB,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,CA2ExB;AA+CD,qBAAa,uBAAwB,SAAQ,KAAK;;CAOjD"}
+{"version":3,"file":"dev-command.d.ts","sourceRoot":"","sources":["../../src/dev/dev-command.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAkB/D,MAAM,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAE/C,wBAAsB,WAAW,CAC/B,IAAI,EAAE,OAAO,EAAE,EACf,IAAI,EAAE,aAAa,GAElB,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,CAyExB;AA2ED,qBAAa,uBAAwB,SAAQ,KAAK;;CAOjD"}

package/dist/dev/dev-command.js

@@ -6,34 +6,25 @@ import { fileURLToPath } from "node:url";
 import { LOCAL_CACHE_URL_VAR } from "../local-cache.js";
 import { assertLocalCoreAvailable } from "../local-core.js";
 import { LOCAL_DATABASE_URL_VAR } from "../local-database.js";
-import { assertLocalRuntimeAllowed } from "../local-runtime-guard.js";
+import { assertLocalRuntimeAllowed, isLoopbackHost } from "../local-runtime-guard.js";
 import { readCommandOptions } from "./cli-host.js";
 import { gqlOutputDirectory, writeManagedDashboardViteConfig } from "./dashboard-vite-config.js";
 import { DEV_CONFIG_PATH_VAR } from "./dev-config.js";
 import { provisionLocalServices } from "./local-services.js";
 import { resolveCloudProjectLayout } from "./project-layout.js";
-// What `@vendure/cloud` adds to the `dev` command.
-//
-// It wraps the composed command rather than replacing it, so Core still supervises the processes
-// and any other plugin that wrapped `dev` still runs. Everything below happens before `next` and is
-// undone after it: the two servers the application needs are started, the migration chain is run to
-// completion, and the two entry points Core would have looked for in the customer's own repository
-// are pointed at this package instead.
-// The targets that run the application. Core's other target, `dashboard`, is a Vite process reading
-// the customer's source and reaches neither the database nor the cache.
+import { assertProjectScopedCloudPackage } from "./project-plugin-scope.js";
+// Core's other target, `dashboard`, is a Vite process that needs neither database nor cache.
 const DEV_TARGETS_NEEDING_SERVICES = new Set(["all", "server", "worker"]);
 const DEV_TARGETS_WITH_DASHBOARD = new Set(["all", "dashboard"]);
 export async function runCloudDev(args, next) {
-    // ADR-0043's fail-closed rule, applied before anything is started. A process carrying managed
-    // configuration must not reach local substitutes, and refusing here means it never gets as far as
-    // creating a database for a store that is supposed to be running on the platform's own.
+    // ADR-0043 fail-closed rule: a process carrying managed configuration must not reach local
+    // substitutes, so this runs before anything is started.
     assertLocalRuntimeAllowed(process.env);
-    // Left as the map the host handed over, rather than annotated with a shape nothing checked. Only
-    // one value is read out of it, and it is compared against `true` rather than trusted to be a
-    // boolean; the other two are written, which is the point of holding it.
+    refuseRemoteConnections(process.env);
     const options = readCommandOptions(args);
     const target = typeof args[0] === "string" ? args[0] : "all";
     const layout = resolveCloudProjectLayout(process.cwd());
+    assertProjectScopedCloudPackage(layout.projectDir);
     process.env[DEV_CONFIG_PATH_VAR] = layout.configPath;
     if (DEV_TARGETS_WITH_DASHBOARD.has(target) && options.viteConfig === undefined) {
         const viteConfigPath = writeManagedDashboardViteConfig({
@@ -43,35 +34,22 @@ export async function runCloudDev(args, next) {
         });
         options.viteConfig = relative(layout.projectDir, viteConfigPath);
     }
-    // The Dashboard is a Vite process reading the customer's source. It needs no database and no
-    // cache, so `vendure dev dashboard` starts neither and works on a machine with no container
-    // runtime at all.
+    // The Dashboard needs no database or cache, so `vendure dev dashboard` works without a container
+    // runtime.
     if (!DEV_TARGETS_NEEDING_SERVICES.has(target)) {
         return next(...args);
     }
-    // `local-runtime.js` imports `@vendure/core` statically, and the server, the worker and the
-    // migration step below all reach it. Checked here, before any of the three is spawned, so a
-    // missing dependency is this message rather than a raw module-resolution error from whichever one
-    // starts first — and rather than a migration failure, since this runs before `runMigrations`.
+    // `local-runtime.js` imports `@vendure/core` statically. Checking here gives a clear message
+    // before the server, worker or migration step fails with a module-resolution error.
     assertLocalCoreAvailable();
-    // `gqlOutputDirectory` is where the Dashboard's codegen writes regardless of which command wrote
-    // its Vite config — `scripts/check-dashboard-gql-parity.ts` is what keeps the managed build's own
-    // generated config agreeing — and the server and the worker supervisor watch for it whenever either is
-    // supervised — not only on a run that also started the Dashboard. Set unconditionally, so
-    // `vendure dev server` in one terminal is not left restarting on a Dashboard process's writes in
-    // another. Absolute, unlike `serverEntry`/`workerEntry`/`viteConfig` below: the supervisor resolves
-    // a relative entry against the project directory too, but `gqlOutputDirectory` already returns an
-    // absolute path and there is nothing to gain by relativising it.
-    //
-    // Depends on `@vendure/cli` publishing the `reloadIgnoredPaths` dev option (merged to `master` in
-    // vendurehq/vendure#5323, not yet in a published version as of `@vendure/cli@3.8.0-minor-202609090219`);
-    // until it is, the running host ignores an option it does not recognise, so this line is inert
-    // rather than a regression.
+    // Server and worker supervisors restart on writes to the Dashboard's codegen output, so a
+    // `vendure dev server` terminal would restart on another terminal's Dashboard process. Set for
+    // every supervised run. `scripts/check-dashboard-gql-parity.ts` keeps the managed build agreeing.
+    // Inert until `@vendure/cli` publishes the `reloadIgnoredPaths` dev option
+    // (vendurehq/vendure#5323).
     options.reloadIgnoredPaths = [gqlOutputDirectory(layout.projectDir)];
-    // Entry paths relative to the project directory, because that is what Core resolves them against
-    // — both when it checks that they exist and when it starts them. They point into this package
-    // rather than at anything the customer wrote, which is what makes an application with no entry
-    // point runnable.
+    // Core resolves entry paths against the project directory. They point into this package, so an
+    // application with no entry point of its own is runnable.
     const entryDir = dirname(fileURLToPath(import.meta.url));
     options.serverEntry = relative(layout.projectDir, join(entryDir, "dev-server.js"));
     options.workerEntry = relative(layout.projectDir, join(entryDir, "dev-worker.js"));
@@ -81,16 +59,29 @@ export async function runCloudDev(args, next) {
         announce: (message) => process.stdout.write(`${message}\n`),
     });
     applyConnections(services);
+    let result;
     try {
         await runMigrations(layout.projectDir, join(entryDir, "dev-migrate.js"));
-        return await next(...args);
+        result = await next(...args);
     }
-    finally {
-        // Reached on an ordinary shutdown, on a signal, and on a failure in any supervised process.
-        // Core's supervisor stops its children and returns before this runs, so by here the only things
-        // still up are the two servers this command started.
+    catch (error) {
+        try {
+            await services.stop();
+        }
+        catch (cleanupError) {
+            const messages = [error, cleanupError].map((failure) => failure instanceof Error ? failure.message : String(failure));
+            throw new AggregateError([error, cleanupError], messages.join("\n"), { cause: error });
+        }
+        throw error;
+    }
+    try {
         await services.stop();
     }
+    catch (error) {
+        process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
+        return typeof result === "number" && result !== 0 ? result : 1;
+    }
+    return result;
 }
 function applicationPort(value) {
     if (value === undefined)
@@ -100,9 +91,38 @@ function applicationPort(value) {
         return port;
     throw new Error(`Vendure Cloud: PORT must be an integer from 1 to 65535; received ${value}.`);
 }
-// Written onto this process's environment under the names `@vendure/cloud` already publishes for a
-// supplied connection, so the supervised processes resolve them the same way a process started any
-// other way resolves the ones a developer supplied.
+// A connection set before the command runs is replaced by the one it provisions. One naming another
+// machine is refused instead, so a deployed environment's URL left in a shell is reported rather
+// than silently replaced.
+function refuseRemoteConnections(environment) {
+    for (const [variable, capability] of [
+        [LOCAL_DATABASE_URL_VAR, "database"],
+        [LOCAL_CACHE_URL_VAR, "cache"],
+    ]) {
+        const host = urlHost(environment[variable]);
+        if (host === undefined || isLoopbackHost(host))
+            continue;
+        throw new Error([
+            `Vendure Cloud: ${variable} is set to a ${capability} on ${host}, which is not this machine. Refusing to start.`,
+            `  \`vendure dev\` connects only to the ${capability} it runs on this machine, so a connection that could reach a deployed environment is refused rather than replaced.`,
+            `  Unset ${variable} and run \`vendure dev\` again.`,
+            "",
+        ].join("\n"));
+    }
+}
+// An unparseable value names no host and is replaced like any other.
+function urlHost(value) {
+    if (value === undefined || value === "")
+        return undefined;
+    try {
+        return new URL(value).hostname || undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+// Written under the names `@vendure/cloud` publishes for a supplied connection, so supervised
+// processes resolve them like developer-supplied ones.
 function applyConnections(services) {
     process.env[LOCAL_DATABASE_URL_VAR] = databaseUrl(services.database);
     process.env[LOCAL_CACHE_URL_VAR] = cacheUrl(services.cache);
@@ -114,9 +134,8 @@ function databaseUrl(connection) {
 function cacheUrl(connection) {
     return `valkey://${connection.host}:${connection.port}`;
 }
-// The migration chain, run to completion before the supervisor starts anything. This is the order a
-// deploy uses, and locally it is also what makes the first run work at all: the database starts
-// empty, and a worker that reached it before the schema existed would take the whole run down.
+// Runs to completion before the supervisor starts anything, as a deploy does. The database starts
+// empty, and a worker reaching it before the schema exists takes the run down.
 async function runMigrations(projectDir, migrateEntry) {
     const exitCode = await new Promise((resolveExit, rejectExit) => {
         const child = spawn(process.execPath, [resolveTsNodeBin(projectDir), migrateEntry], {
@@ -128,8 +147,7 @@ async function runMigrations(projectDir, migrateEntry) {
         child.once("close", (code) => resolveExit(code ?? 1));
     });
     if (exitCode !== 0) {
-        // The migration process has already written why. Adding a second explanation here would put a
-        // sentence about the command in front of the one about the application.
+        // The migration process has already written why.
         throw new DevMigrationFailedError();
     }
 }
@@ -139,8 +157,7 @@ export class DevMigrationFailedError extends Error {
         this.name = "DevMigrationFailedError";
     }
 }
-// Resolved from the project rather than from this package, so the migration runs under the same
-// compiler the supervisor starts the server and the worker with.
+// Resolved from the project so the migration runs under the compiler the supervisor uses.
 function resolveTsNodeBin(projectDir) {
     const require = createRequire(join(projectDir, "package.json"));
     let packageJsonPath;

package/dist/dev/dev-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"dev-command.js","sourceRoot":"","sources":["../../src/dev/dev-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,mBAAmB,EAA6B,MAAM,mBAAmB,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAgC,MAAM,sBAAsB,CAAC;AAC5F,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,+BAA+B,EAAE,MAAM,4BAA4B,CAAC;AACjG,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAsB,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAEhE,mDAAmD;AACnD,EAAE;AACF,iGAAiG;AACjG,oGAAoG;AACpG,oGAAoG;AACpG,mGAAmG;AACnG,uCAAuC;AAEvC,oGAAoG;AACpG,wEAAwE;AACxE,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC1E,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;AAQjE,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAe,EACf,IAAmB;IAGnB,8FAA8F;IAC9F,kGAAkG;IAClG,wFAAwF;IACxF,yBAAyB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEvC,iGAAiG;IACjG,6FAA6F;IAC7F,wEAAwE;IACxE,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7D,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;IAErD,IAAI,0BAA0B,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC/E,MAAM,cAAc,GAAG,+BAA+B,CAAC;YACrD,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,eAAe,EAAE,MAAM,CAAC,UAAU;YAClC,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;SAC3C,CAAC,CAAC;QACH,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACnE,CAAC;IAED,6FAA6F;IAC7F,4FAA4F;IAC5F,kBAAkB;IAClB,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IACvB,CAAC;IAED,4FAA4F;IAC5F,4FAA4F;IAC5F,kGAAkG;IAClG,8FAA8F;IAC9F,wBAAwB,EAAE,CAAC;IAE3B,iGAAiG;IACjG,kGAAkG;IAClG,uGAAuG;IACvG,0FAA0F;IAC1F,iGAAiG;IACjG,oGAAoG;IACpG,kGAAkG;IAClG,iEAAiE;IACjE,EAAE;IACF,kGAAkG;IAClG,yGAAyG;IACzG,+FAA+F;IAC/F,4BAA4B;IAC5B,OAAO,CAAC,kBAAkB,GAAG,CAAC,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAErE,iGAAiG;IACjG,8FAA8F;IAC9F,+FAA+F;IAC/F,kBAAkB;IAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC;IACnF,OAAO,CAAC,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC;IAEnF,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC;QAC5C,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,OAAO,CAAC,cAAc,KAAK,IAAI;QAC1C,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC;KAC5D,CAAC,CAAC;IACH,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAE3B,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACzE,OAAO,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAC7B,CAAC;YAAS,CAAC;QACT,4FAA4F;QAC5F,gGAAgG;QAChG,qDAAqD;QACrD,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB;IAChD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,MAAM;QAAE,OAAO,IAAI,CAAC;IACtE,MAAM,IAAI,KAAK,CAAC,oEAAoE,KAAK,GAAG,CAAC,CAAC;AAChG,CAAC;AAED,mGAAmG;AACnG,mGAAmG;AACnG,oDAAoD;AACpD,SAAS,gBAAgB,CAAC,QAAuB;IAC/C,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,WAAW,CAAC,UAAmC;IACtD,MAAM,WAAW,GAAG,GAAG,kBAAkB,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC5G,OAAO,cAAc,WAAW,IAAI,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,IAAI,kBAAkB,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;AACtH,CAAC;AAED,SAAS,QAAQ,CAAC,UAAgC;IAChD,OAAO,YAAY,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;AAC1D,CAAC;AAED,oGAAoG;AACpG,gGAAgG;AAChG,+FAA+F;AAC/F,KAAK,UAAU,aAAa,CAAC,UAAkB,EAAE,YAAoB;IACnE,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,WAAW,EAAE,UAAU,EAAE,EAAE;QACrE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC,EAAE;YAClF,GAAG,EAAE,UAAU;YACf,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,8FAA8F;QAC9F,wEAAwE;QACxE,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;AACH,CAAC;AAED,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD;QACE,KAAK,CACH,kJAAkJ,CACnJ,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,gGAAgG;AAChG,iEAAiE;AACjE,SAAS,gBAAgB,CAAC,UAAkB;IAC1C,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC;IAChE,IAAI,eAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,sHAAsH,EACtH,EAAE,KAAK,EAAE,CACV,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAEpE,CAAC;IACF,MAAM,GAAG,GAAG,OAAO,WAAW,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACjG,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,mHAAmH,CACpH,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,GAAG,CAAC,CAAC;AAChD,CAAC"}
+{"version":3,"file":"dev-command.js","sourceRoot":"","sources":["../../src/dev/dev-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,mBAAmB,EAA6B,MAAM,mBAAmB,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAgC,MAAM,sBAAsB,CAAC;AAC5F,OAAO,EAAE,yBAAyB,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AACtF,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,+BAA+B,EAAE,MAAM,4BAA4B,CAAC;AACjG,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAsB,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAE5E,6FAA6F;AAC7F,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC1E,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;AAMjE,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAe,EACf,IAAmB;IAGnB,2FAA2F;IAC3F,wDAAwD;IACxD,yBAAyB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAErC,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7D,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACxD,+BAA+B,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;IAErD,IAAI,0BAA0B,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC/E,MAAM,cAAc,GAAG,+BAA+B,CAAC;YACrD,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,eAAe,EAAE,MAAM,CAAC,UAAU;YAClC,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;SAC3C,CAAC,CAAC;QACH,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACnE,CAAC;IAED,iGAAiG;IACjG,WAAW;IACX,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IACvB,CAAC;IAED,6FAA6F;IAC7F,oFAAoF;IACpF,wBAAwB,EAAE,CAAC;IAE3B,0FAA0F;IAC1F,+FAA+F;IAC/F,kGAAkG;IAClG,2EAA2E;IAC3E,4BAA4B;IAC5B,OAAO,CAAC,kBAAkB,GAAG,CAAC,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAErE,+FAA+F;IAC/F,0DAA0D;IAC1D,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC;IACnF,OAAO,CAAC,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC;IAEnF,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC;QAC5C,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,OAAO,CAAC,cAAc,KAAK,IAAI;QAC1C,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC;KAC5D,CAAC,CAAC;IACH,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAE3B,IAAI,MAA0C,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACzE,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxB,CAAC;QAAC,OAAO,YAAY,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACrD,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAC7D,CAAC;YACF,MAAM,IAAI,cAAc,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpF,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB;IAChD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,MAAM;QAAE,OAAO,IAAI,CAAC;IACtE,MAAM,IAAI,KAAK,CAAC,oEAAoE,KAAK,GAAG,CAAC,CAAC;AAChG,CAAC;AAED,oGAAoG;AACpG,iGAAiG;AACjG,0BAA0B;AAC1B,SAAS,uBAAuB,CAAC,WAA8B;IAC7D,KAAK,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI;QACnC,CAAC,sBAAsB,EAAE,UAAU,CAAC;QACpC,CAAC,mBAAmB,EAAE,OAAO,CAAC;KACtB,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5C,IAAI,IAAI,KAAK,SAAS,IAAI,cAAc,CAAC,IAAI,CAAC;YAAE,SAAS;QACzD,MAAM,IAAI,KAAK,CACb;YACE,kBAAkB,QAAQ,gBAAgB,UAAU,OAAO,IAAI,iDAAiD;YAChH,0CAA0C,UAAU,oHAAoH;YACxK,WAAW,QAAQ,iCAAiC;YACpD,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,SAAS,OAAO,CAAC,KAAyB;IACxC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1D,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,IAAI,SAAS,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,8FAA8F;AAC9F,uDAAuD;AACvD,SAAS,gBAAgB,CAAC,QAAuB;IAC/C,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,WAAW,CAAC,UAAmC;IACtD,MAAM,WAAW,GAAG,GAAG,kBAAkB,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC5G,OAAO,cAAc,WAAW,IAAI,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,IAAI,kBAAkB,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;AACtH,CAAC;AAED,SAAS,QAAQ,CAAC,UAAgC;IAChD,OAAO,YAAY,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;AAC1D,CAAC;AAED,kGAAkG;AAClG,+EAA+E;AAC/E,KAAK,UAAU,aAAa,CAAC,UAAkB,EAAE,YAAoB;IACnE,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,WAAW,EAAE,UAAU,EAAE,EAAE;QACrE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC,EAAE;YAClF,GAAG,EAAE,UAAU;YACf,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,iDAAiD;QACjD,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;AACH,CAAC;AAED,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD;QACE,KAAK,CACH,kJAAkJ,CACnJ,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,0FAA0F;AAC1F,SAAS,gBAAgB,CAAC,UAAkB;IAC1C,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC;IAChE,IAAI,eAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,sHAAsH,EACtH,EAAE,KAAK,EAAE,CACV,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAEpE,CAAC;IACF,MAAM,GAAG,GAAG,OAAO,WAAW,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACjG,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,mHAAmH,CACpH,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,GAAG,CAAC,CAAC;AAChD,CAAC"}

package/dist/dev/dev-config.d.ts

@@ -1,4 +1,7 @@
 import type { CloudConfigHandle } from "@vendure/cloud-config";
 export declare const DEV_CONFIG_PATH_VAR = "VENDURE_CLOUD_DEV_CONFIG";
 export declare function loadDevCloudConfig(): CloudConfigHandle;
+export declare class LocalMissingSecretsError extends Error {
+    constructor(names: readonly string[]);
+}
 //# sourceMappingURL=dev-config.d.ts.map

package/dist/dev/dev-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dev-config.d.ts","sourceRoot":"","sources":["../../src/dev/dev-config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAY/D,eAAO,MAAM,mBAAmB,6BAA6B,CAAC;AAE9D,wBAAgB,kBAAkB,IAAI,iBAAiB,CAkBtD"}
+{"version":3,"file":"dev-config.d.ts","sourceRoot":"","sources":["../../src/dev/dev-config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAM/D,eAAO,MAAM,mBAAmB,6BAA6B,CAAC;AAE9D,wBAAgB,kBAAkB,IAAI,iBAAiB,CAwBtD;AAYD,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,KAAK,EAAE,SAAS,MAAM,EAAE;CAgBrC"}

package/dist/dev/dev-config.js

@@ -1,13 +1,8 @@
 import { createRequire } from "node:module";
 import { readCloudConfigHandle } from "../cloud-config-module.js";
-// How the three processes `vendure dev` starts find the application they are running.
-//
-// The path is passed in rather than resolved again here. The command has already decided which file
-// is the Cloud Config, and a process that worked it out for itself could reach a different answer
-// in a repository holding more than one — so the command's answer is the only one.
-// Set by the `dev` command on the environment the supervisor passes to its children. The database
-// and cache connections travel the same way, under the names `@vendure/cloud` already publishes for
-// them, so nothing here has to know how they were provisioned.
+// The command chooses the Cloud Config file and passes its path to the processes it supervises, so
+// none of them can resolve a different file in a repository holding several. The database and
+// cache connections travel the same way, under the names `@vendure/cloud` publishes.
 export const DEV_CONFIG_PATH_VAR = "VENDURE_CLOUD_DEV_CONFIG";
 export function loadDevCloudConfig() {
     const configPath = process.env[DEV_CONFIG_PATH_VAR];
@@ -19,10 +14,45 @@ export function loadDevCloudConfig() {
             "",
         ].join("\n"));
     }
-    // `require` rather than `import`, because this is how the file gets compiled. The supervisor
-    // starts these processes through the project's TypeScript compiler hook, which registers itself
-    // against the CommonJS loader — so a dynamic `import()` of the same path would bypass it and ask
-    // Node to run TypeScript it cannot read.
-    return readCloudConfigHandle(createRequire(import.meta.url)(configPath), configPath);
+    // `require` because the supervisor starts these processes through the project's TypeScript hook,
+    // which registers on the CommonJS loader. A dynamic `import()` would bypass it.
+    let loaded;
+    try {
+        loaded = createRequire(import.meta.url)(configPath);
+    }
+    catch (error) {
+        const missing = missingSecretNames(error);
+        if (missing)
+            throw new LocalMissingSecretsError(missing);
+        throw error;
+    }
+    return readCloudConfigHandle(loaded, configPath);
+}
+// Matched by name: a project holding a second copy of `@vendure/cloud-config` throws that copy's
+// class.
+function missingSecretNames(error) {
+    if (!(error instanceof Error) || error.name !== "MissingSecretsError")
+        return undefined;
+    if (!("names" in error) || !Array.isArray(error.names))
+        return undefined;
+    return error.names.map(String);
+}
+// `MissingSecretsError` tells a deployed environment's owner to set the value there. Locally the
+// value comes from the terminal `vendure dev` runs in, and is never read from a deployed environment.
+export class LocalMissingSecretsError extends Error {
+    constructor(names) {
+        const one = names.length === 1;
+        super([
+            `Vendure Cloud: this configuration reads ${names.length} ${one ? "secret" : "secrets"} that ${one ? "is" : "are"} not set in the environment \`vendure dev\` was started from.`,
+            "",
+            ...names.map((name) => `  - ${name}`),
+            "",
+            `  Set ${one ? "it" : "each"} to a local or test value in that terminal, for example \`${names[0]}=<value> vendure dev\`.`,
+            "  `vendure dev` never reads values set on a deployed environment, so a plugin that connects to an external service needs a local or test account here.",
+            "  A value that is empty or only whitespace counts as unset.",
+            "",
+        ].join("\n"));
+        this.name = "LocalMissingSecretsError";
+    }
 }
 //# sourceMappingURL=dev-config.js.map

package/dist/dev/dev-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"dev-config.js","sourceRoot":"","sources":["../../src/dev/dev-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAElE,sFAAsF;AACtF,EAAE;AACF,oGAAoG;AACpG,kGAAkG;AAClG,mFAAmF;AAEnF,kGAAkG;AAClG,oGAAoG;AACpG,+DAA+D;AAC/D,MAAM,CAAC,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AAE9D,MAAM,UAAU,kBAAkB;IAChC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACpD,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb;YACE,yFAAyF;YACzF,kFAAkF;YAClF,gDAAgD;YAChD,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC;IAED,6FAA6F;IAC7F,gGAAgG;IAChG,iGAAiG;IACjG,yCAAyC;IACzC,OAAO,qBAAqB,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC;AACvF,CAAC"}
+{"version":3,"file":"dev-config.js","sourceRoot":"","sources":["../../src/dev/dev-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAElE,mGAAmG;AACnG,8FAA8F;AAC9F,qFAAqF;AACrF,MAAM,CAAC,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AAE9D,MAAM,UAAU,kBAAkB;IAChC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACpD,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb;YACE,yFAAyF;YACzF,kFAAkF;YAClF,gDAAgD;YAChD,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC;IAED,iGAAiG;IACjG,gFAAgF;IAChF,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,OAAO;YAAE,MAAM,IAAI,wBAAwB,CAAC,OAAO,CAAC,CAAC;QACzD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,qBAAqB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AACnD,CAAC;AAED,iGAAiG;AACjG,SAAS;AACT,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAqB;QAAE,OAAO,SAAS,CAAC;IACxF,IAAI,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzE,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,iGAAiG;AACjG,sGAAsG;AACtG,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACjD,YAAY,KAAwB;QAClC,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;QAC/B,KAAK,CACH;YACE,2CAA2C,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,+DAA+D;YAC/K,EAAE;YACF,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC;YACrC,EAAE;YACF,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,6DAA6D,KAAK,CAAC,CAAC,CAAC,yBAAyB;YAC1H,wJAAwJ;YACxJ,6DAA6D;YAC7D,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF"}

package/dist/dev/dev-migrate.js

@@ -1,18 +1,14 @@
+import { refuseOtherLocalDbosLaunchers } from "../local-durable-execution-plugin.js";
 import { runLocalMigrations } from "../local-runtime.js";
 import { loadDevCloudConfig } from "./dev-config.js";
 import { reportDevProcessFailure } from "./dev-process.js";
-// The migration step `vendure dev` runs to completion before it starts the server and the worker.
-//
-// It is a process of its own for the same reason a deploy runs `migrate` as its own run mode: the
-// schema has to be finished before anything serves against it. Running it inside the server instead
-// would leave the worker racing a schema that is still being built, and on a first run that race is
-// lost every time because the database starts empty.
-//
-// See `dev-server.ts` for why this assumes `@vendure/core` resolves.
+// Runs to completion before the server and worker start, as a separate process like a deploy's
+// `migrate` run mode. Inside the server, the worker would race a schema still being built, and
+// the empty database on a first run always loses that race.
 async function main() {
-    // Silent, because this process exists only to prepare the database. The server and the worker
-    // each name their own substitutes as they start, which is where a developer reads what is
-    // running; a third copy of that list from a process that has already exited is noise.
+    // Silent: the server and worker each announce their local substitutes.
+    // Before the Cloud Config loads, so a launch at a module's top level fails at its call.
+    refuseOtherLocalDbosLaunchers();
     await runLocalMigrations(loadDevCloudConfig(), { announce: () => undefined });
 }
 main().catch(reportDevProcessFailure);

package/dist/dev/dev-migrate.js.map

@@ -1 +1 @@
-{"version":3,"file":"dev-migrate.js","sourceRoot":"","sources":["../../src/dev/dev-migrate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,kGAAkG;AAClG,EAAE;AACF,kGAAkG;AAClG,oGAAoG;AACpG,oGAAoG;AACpG,qDAAqD;AACrD,EAAE;AACF,qEAAqE;AAErE,KAAK,UAAU,IAAI;IACjB,8FAA8F;IAC9F,0FAA0F;IAC1F,sFAAsF;IACtF,MAAM,kBAAkB,CAAC,kBAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC"}
+{"version":3,"file":"dev-migrate.js","sourceRoot":"","sources":["../../src/dev/dev-migrate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,+FAA+F;AAC/F,+FAA+F;AAC/F,4DAA4D;AAE5D,KAAK,UAAU,IAAI;IACjB,uEAAuE;IACvE,wFAAwF;IACxF,6BAA6B,EAAE,CAAC;IAChC,MAAM,kBAAkB,CAAC,kBAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC"}

package/dist/dev/dev-process.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dev-process.d.ts","sourceRoot":"","sources":["../../src/dev/dev-process.ts"],"names":[],"mappings":"AASA,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAG5D"}
+{"version":3,"file":"dev-process.d.ts","sourceRoot":"","sources":["../../src/dev/dev-process.ts"],"names":[],"mappings":"AAMA,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAI5D"}

package/dist/dev/dev-process.js

@@ -1,14 +1,10 @@
-// What the three supervised entry points do with a failure.
+// Writes the message without a stack trace, since these processes only raise errors this package
+// wrote for a developer. Core stops the sibling processes when one exits non-zero.
 //
-// The message alone, and a non-zero exit code. Every error these processes raise is one this
-// package wrote and addressed to a developer — a cache that refused a connection, an application
-// with no migrations, managed configuration in a process that must not use substitutes — and a
-// stack trace through the composer adds nothing a reader of those messages needs.
-//
-// The exit code is what the supervisor reads. Core stops the sibling processes when one of them
-// exits non-zero, so this is also what takes the rest of the run down.
+// Exits rather than setting `process.exitCode`: a server that failed after opening its database
+// connections, such as on a taken port, holds handles that would keep it running and its siblings
+// with it.
 export function reportDevProcessFailure(error) {
-    process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
-    process.exitCode = 1;
+    process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`, () => process.exit(1));
 }
 //# sourceMappingURL=dev-process.js.map

package/dist/dev/dev-process.js.map

@@ -1 +1 @@
-{"version":3,"file":"dev-process.js","sourceRoot":"","sources":["../../src/dev/dev-process.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,EAAE;AACF,6FAA6F;AAC7F,iGAAiG;AACjG,+FAA+F;AAC/F,kFAAkF;AAClF,EAAE;AACF,gGAAgG;AAChG,uEAAuE;AACvE,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC"}
+{"version":3,"file":"dev-process.js","sourceRoot":"","sources":["../../src/dev/dev-process.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,mFAAmF;AACnF,EAAE;AACF,gGAAgG;AAChG,kGAAkG;AAClG,WAAW;AACX,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,CACvF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAChB,CAAC;AACJ,CAAC"}

package/dist/dev/dev-server.js

@@ -1,17 +1,15 @@
+import { refuseOtherLocalDbosLaunchers } from "../local-durable-execution-plugin.js";
 import { bootstrapLocalServer } from "../local-runtime.js";
 import { loadDevCloudConfig } from "./dev-config.js";
 import { reportDevProcessFailure } from "./dev-process.js";
-// The server process `vendure dev` supervises, in place of the `src/index.ts` a self-hosted Vendure
-// project writes. ADR-0043 takes the entry point out of the application, so there is no customer
-// file for the supervisor to start and this stands in its place.
+// The server process `vendure dev` supervises, standing in for the customer's `src/index.ts`
+// (ADR-0043). Migrations run before it starts, so the worker never meets a half-built schema.
 //
-// It does not run migrations. `vendure dev` runs the migration chain to completion before it starts
-// anything, which is the order a deploy uses, and is what keeps the worker from reaching a database
-// whose schema the server has not finished building.
-//
-// `local-runtime.js` imports `@vendure/core` statically, so this process assumes it resolves.
-// `dev-command.ts` checks that before this process is ever spawned.
+// `local-runtime.js` imports `@vendure/core` statically; `dev-command.ts` checks it resolves
+// before spawning this process.
 async function main() {
+    // Before the Cloud Config loads, so a launch at a module's top level fails at its call.
+    refuseOtherLocalDbosLaunchers();
     await bootstrapLocalServer(loadDevCloudConfig());
 }
 main().catch(reportDevProcessFailure);

package/dist/dev/dev-server.js.map

@@ -1 +1 @@
-{"version":3,"file":"dev-server.js","sourceRoot":"","sources":["../../src/dev/dev-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,oGAAoG;AACpG,iGAAiG;AACjG,iEAAiE;AACjE,EAAE;AACF,oGAAoG;AACpG,oGAAoG;AACpG,qDAAqD;AACrD,EAAE;AACF,8FAA8F;AAC9F,oEAAoE;AAEpE,KAAK,UAAU,IAAI;IACjB,MAAM,oBAAoB,CAAC,kBAAkB,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC"}
+{"version":3,"file":"dev-server.js","sourceRoot":"","sources":["../../src/dev/dev-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,6FAA6F;AAC7F,8FAA8F;AAC9F,EAAE;AACF,6FAA6F;AAC7F,gCAAgC;AAEhC,KAAK,UAAU,IAAI;IACjB,wFAAwF;IACxF,6BAA6B,EAAE,CAAC;IAChC,MAAM,oBAAoB,CAAC,kBAAkB,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC"}

package/dist/dev/dev-worker.js

@@ -1,10 +1,12 @@
+import { refuseOtherLocalDbosLaunchers } from "../local-durable-execution-plugin.js";
 import { bootstrapLocalWorker } from "../local-runtime.js";
 import { loadDevCloudConfig } from "./dev-config.js";
 import { reportDevProcessFailure } from "./dev-process.js";
-// The worker process `vendure dev` supervises, in place of the `src/index-worker.ts` a self-hosted
-// Vendure project writes. See `dev-server.ts` for why there is no customer file to start, and for
-// why this assumes `@vendure/core` resolves.
+// The worker process `vendure dev` supervises, standing in for the customer's
+// `src/index-worker.ts`. See `dev-server.ts` for the `@vendure/core` assumption.
 async function main() {
+    // Before the Cloud Config loads, so a launch at a module's top level fails at its call.
+    refuseOtherLocalDbosLaunchers();
     const worker = await bootstrapLocalWorker(loadDevCloudConfig());
     await worker.startJobQueue();
 }

package/dist/dev/dev-worker.js.map

@@ -1 +1 @@
-{"version":3,"file":"dev-worker.js","sourceRoot":"","sources":["../../src/dev/dev-worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,mGAAmG;AACnG,kGAAkG;AAClG,6CAA6C;AAE7C,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAChE,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC;AAC/B,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC"}
+{"version":3,"file":"dev-worker.js","sourceRoot":"","sources":["../../src/dev/dev-worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,8EAA8E;AAC9E,iFAAiF;AAEjF,KAAK,UAAU,IAAI;IACjB,wFAAwF;IACxF,6BAA6B,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAChE,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC;AAC/B,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC"}

package/dist/dev/local-services.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local-services.d.ts","sourceRoot":"","sources":["../../src/dev/local-services.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,oBAAoB,EAG1B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,uBAAuB,EAE7B,MAAM,sBAAsB,CAAC;AA+B9B,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,uBAAuB,CAAC;IAClC,KAAK,EAAE,oBAAoB,CAAC;IAE5B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,CAAC;IAGnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACtC;AAED,qBAAa,gCAAiC,SAAQ,KAAK;gBAC7C,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAInD;AAKD,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM;;;;EAQ9C;AAED,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,6BAA6B,GACrC,OAAO,CAAC,aAAa,CAAC,CAmDxB"}
+{"version":3,"file":"local-services.d.ts","sourceRoot":"","sources":["../../src/dev/local-services.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,oBAAoB,EAG1B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,uBAAuB,EAE7B,MAAM,sBAAsB,CAAC;AAqB9B,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,uBAAuB,CAAC;IAClC,KAAK,EAAE,oBAAoB,CAAC;IAE5B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,CAAC;IAGnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACtC;AAED,qBAAa,gCAAiC,SAAQ,KAAK;gBAC7C,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAInD;AAID,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM;;;;EAO9C;AAED,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,6BAA6B,GACrC,OAAO,CAAC,aAAa,CAAC,CAoExB"}