@woodsportal/hubspot-kit 1.0.41 → 1.0.42-dev.0

package/examples/greenfield/module-monolith/src/config/starter-nav.ts

@@ -0,0 +1,9 @@
+import { ROUTES } from '@/config/routes'
+
+/** No-auth module navigation — edit once; StarterNav reads this file. */
+export const starterNavItems = [
+  { to: ROUTES.home, label: 'Home' },
+  { to: ROUTES.guide, label: 'Developer guide' },
+] as const
+
+export type StarterNavItem = (typeof starterNavItems)[number]

package/examples/greenfield/module-monolith/src/features/starter/components/starter-home.tsx

@@ -1,38 +1,34 @@
 import { useStarterPreview } from '../hooks/use-starter-preview'
 import { STARTER_FEATURES, WOODSCLI_ABOUT } from '../content/woodscli-guide-content'
 
-function heroClass(style: ReturnType<typeof useStarterPreview>['heroStyle']): string {
-  if (style === 'minimal') {
-    return 'bg-[var(--mc-bg-shell,#f5f8fa)] text-[var(--mc-text,#33475b)] border-b border-[var(--mc-border,#cbd6e2)]'
-  }
-  if (style === 'bold') {
-    return 'bg-[#1c1c1f] text-white'
-  }
-  return 'bg-gradient-to-br from-[var(--starter-accent,#0091ae)] to-[#ff7a59] text-white'
-}
-
 export function StarterHome() {
-  const { title, tagline, showFeatureCards, accentColor, heroStyle } = useStarterPreview()
+  const { title, tagline, showFeatureCards, heroStyle } = useStarterPreview()
 
   return (
     <>
-      <div style={{ ['--starter-accent' as string]: accentColor }}>
-        <section className={`px-6 py-14 sm:px-10 sm:py-16 ${heroClass(heroStyle)}`}>
-          <div className="mx-auto max-w-4xl">
-            <p className="mb-2 text-xs font-semibold uppercase tracking-widest opacity-80">
-              {WOODSCLI_ABOUT.package} · local dev
-            </p>
-            <h1 className="text-3xl font-semibold tracking-tight sm:text-4xl">{title}</h1>
-            <p className="mt-4 max-w-2xl text-base leading-relaxed opacity-90 sm:text-lg">{tagline}</p>
-            <p className="mt-6 text-sm opacity-75">
-              Module config overlay:{' '}
-              <kbd className="rounded bg-black/10 px-1.5 py-0.5 font-mono text-xs">Ctrl+Shift+Z</kbd>
-              {' · '}
-              Mac: <kbd className="rounded bg-black/10 px-1.5 py-0.5 font-mono text-xs">⌃⇧Z</kbd>
-            </p>
-          </div>
-        </section>
-      </div>
+      <section
+        className={
+          heroStyle === 'minimal'
+            ? 'px-6 py-14 sm:px-10 sm:py-16 bg-[var(--mc-bg-shell,#f5f8fa)] text-[var(--mc-text,#33475b)] border-b border-[var(--mc-border,#cbd6e2)]'
+            : heroStyle === 'bold'
+              ? 'px-6 py-14 sm:px-10 sm:py-16 bg-[#1c1c1f] text-white'
+              : 'px-6 py-14 sm:px-10 sm:py-16 bg-gradient-to-br from-[var(--primary-color,#FF7A59)] to-[var(--secondary-color,#2797AF)] text-white'
+        }
+      >
+        <div className="mx-auto max-w-4xl">
+          <p className="mb-2 text-xs font-semibold uppercase tracking-widest opacity-80">
+            {WOODSCLI_ABOUT.package} · local dev
+          </p>
+          <h1 className="text-3xl font-semibold tracking-tight sm:text-4xl">{title}</h1>
+          <p className="mt-4 max-w-2xl text-base leading-relaxed opacity-90 sm:text-lg">{tagline}</p>
+          <p className="mt-6 text-sm opacity-75">
+            Module config overlay:{' '}
+            <kbd className="rounded bg-black/10 px-1.5 py-0.5 font-mono text-xs">Ctrl+Shift+Z</kbd>
+            {' · '}
+            Mac: <kbd className="rounded bg-black/10 px-1.5 py-0.5 font-mono text-xs">⌃⇧Z</kbd>
+          </p>
+        </div>
+      </section>
 
       {showFeatureCards ? (
         <div className="mx-auto grid max-w-4xl gap-4 px-6 py-10 sm:grid-cols-3 sm:px-10">
@@ -41,7 +37,7 @@ export function StarterHome() {
               key={feature.title}
               className="rounded-lg border border-[#cbd6e2] bg-white p-5 shadow-sm"
             >
-              <h2 className="text-sm font-semibold text-[#0091ae]">{feature.title}</h2>
+              <h2 className="text-sm font-semibold text-[var(--primary-color,#FF7A59)]">{feature.title}</h2>
               <p className="mt-2 text-sm leading-relaxed text-[#516f90]">{feature.body}</p>
             </article>
           ))}

package/examples/greenfield/module-monolith/src/features/starter/hooks/starter-preview-values.ts

@@ -0,0 +1,60 @@
+export type StarterPreviewValues = {
+  title: string
+  tagline: string
+  showFeatureCards: boolean
+  heroStyle: 'gradient' | 'minimal' | 'bold'
+}
+
+function normalizeHeroStyle(raw: unknown): StarterPreviewValues['heroStyle'] {
+  const key = String(raw ?? 'gradient').toLowerCase()
+  if (key === 'minimal' || key === 'bold') return key
+  return 'gradient'
+}
+
+/** CONTENT-tab fields may live under a `content` group (fields.json) or flat legacy keys. */
+function readContentField(module: Record<string, unknown>, key: string): unknown {
+  const content = module.content
+  if (content && typeof content === 'object' && key in (content as Record<string, unknown>)) {
+    return (content as Record<string, unknown>)[key]
+  }
+  return module[key]
+}
+
+/** STYLE-tab fields may live under a `style` group (fields.json) or legacy `styles` / flat keys. */
+function readStyleField(module: Record<string, unknown>, key: string): unknown {
+  const style = module.style
+  if (style && typeof style === 'object' && key in (style as Record<string, unknown>)) {
+    return (style as Record<string, unknown>)[key]
+  }
+  const styles = module.styles
+  if (styles && typeof styles === 'object' && key in (styles as Record<string, unknown>)) {
+    return (styles as Record<string, unknown>)[key]
+  }
+  return module[key]
+}
+
+export function mapStarterPreviewValues(module: Record<string, unknown>): StarterPreviewValues {
+  return {
+    title: String(readContentField(module, 'title') ?? 'My HubSpot Portal'),
+    tagline: String(
+      readContentField(module, 'tagline') ??
+        'Customize this preview with Ctrl+Shift+Z, then replace this page with your portal app.',
+    ),
+    showFeatureCards: readContentField(module, 'show_feature_cards') !== false,
+    heroStyle: normalizeHeroStyle(readStyleField(module, 'hero_style')),
+  }
+}
+
+/** HubSpot module field blob on window (dev adapter + CMS runtime). */
+export function readStarterModuleFields(): Record<string, unknown> {
+  const win = window as Window & {
+    __WPHS_DATA__?: Record<string, unknown>
+    hubSpotData?: Record<string, unknown>
+  }
+  const blob = win.__WPHS_DATA__ ?? win.hubSpotData ?? {}
+  const nested = blob.module
+  if (nested && typeof nested === 'object') {
+    return nested as Record<string, unknown>
+  }
+  return blob
+}

package/examples/greenfield/module-monolith/src/features/starter/hooks/use-starter-preview.dev.ts

@@ -0,0 +1,18 @@
+import { MODULE_CONFIG_CHANGED } from '@/dev/module-config/schema/types'
+import { getModuleFieldValues } from '@/dev/module-config/runtime/module-config-runtime'
+
+import {
+  mapStarterPreviewValues,
+  type StarterPreviewValues,
+} from './starter-preview-values'
+
+/** Dev-only: refresh when module-config overlay applies changes. */
+export function subscribeStarterPreview(
+  onChange: (values: StarterPreviewValues) => void,
+): () => void {
+  const refresh = () => onChange(mapStarterPreviewValues(getModuleFieldValues()))
+
+  refresh()
+  window.addEventListener(MODULE_CONFIG_CHANGED, refresh)
+  return () => window.removeEventListener(MODULE_CONFIG_CHANGED, refresh)
+}

package/examples/greenfield/module-monolith/src/features/starter/hooks/use-starter-preview.ts

@@ -1,47 +1,30 @@
 import { useEffect, useState } from 'react'
 
-import { MODULE_CONFIG_CHANGED } from '@/dev/module-config/schema/types'
-import { getModuleFieldValues } from '@/dev/module-config/runtime/module-config-runtime'
-
-export type StarterPreviewValues = {
-  title: string
-  tagline: string
-  showFeatureCards: boolean
-  accentColor: string
-  heroStyle: 'gradient' | 'minimal' | 'bold'
-}
-
-function normalizeHeroStyle(raw: unknown): StarterPreviewValues['heroStyle'] {
-  const key = String(raw ?? 'gradient').toLowerCase()
-  if (key === 'minimal' || key === 'bold') return key
-  return 'gradient'
-}
-
-function readPreviewValues(): StarterPreviewValues {
-  const module = getModuleFieldValues()
-  const accent = module.accent_color as { color?: string } | undefined
-
-  return {
-    title: String(module.title ?? 'My HubSpot Portal'),
-    tagline: String(
-      module.tagline ??
-        'Customize this preview with Ctrl+Shift+Z, then replace this page with your portal app.',
-    ),
-    showFeatureCards: module.show_feature_cards !== false,
-    accentColor: accent?.color ?? '#0091ae',
-    heroStyle: normalizeHeroStyle(module.hero_style),
-  }
-}
+import {
+  mapStarterPreviewValues,
+  readStarterModuleFields,
+  type StarterPreviewValues,
+} from './starter-preview-values'
 
-/** Live module field values for the wp init starter preview. */
+/** Module field values for the starter preview (dev overlay + production window data). */
 export function useStarterPreview(): StarterPreviewValues {
-  const [values, setValues] = useState(readPreviewValues)
+  const [values, setValues] = useState(() => mapStarterPreviewValues(readStarterModuleFields()))
 
   useEffect(() => {
-    const refresh = () => setValues(readPreviewValues())
-    window.addEventListener(MODULE_CONFIG_CHANGED, refresh)
-    return () => window.removeEventListener(MODULE_CONFIG_CHANGED, refresh)
+    if (!import.meta.env.DEV) {
+      return
+    }
+
+    let unsubscribe = () => {}
+
+    void import('./use-starter-preview.dev').then(({ subscribeStarterPreview }) => {
+      unsubscribe = subscribeStarterPreview(setValues)
+    })
+
+    return () => unsubscribe()
   }, [])
 
   return values
 }
+
+export type { StarterPreviewValues } from './starter-preview-values'

package/examples/manifest.json

@@ -1,9 +1,13 @@
 {
   "version": 1,
   "scenarios": [
-    { "id": "greenfield-module-hybrid-cdn", "setup": "greenfield", "track": "module", "projectType": "module-hybrid-cdn", "smokeTier": "live", "fixture": "greenfield/module-hybrid-cdn", "checks": ["layout"] },
+    { "id": "greenfield-module-hybrid-cdn", "setup": "greenfield", "track": "module", "projectType": "module-hybrid-cdn", "smokeTier": "live", "fixture": "greenfield/module-hybrid-cdn", "checks": ["layout", "scaffold.auth=none", "file=src/config/starter-nav.ts"] },
     { "id": "greenfield-module-monolith", "setup": "greenfield", "track": "module", "projectType": "module-monolith", "smokeTier": "live", "fixture": "greenfield/module-monolith", "checks": ["layout"] },
     { "id": "greenfield-theme-starter", "setup": "greenfield", "track": "theme", "projectType": "theme-starter", "smokeTier": "live", "fixture": "greenfield/theme-starter", "checks": ["layout"] },
+    { "id": "greenfield-module-hybrid-cdn-auth-starter", "setup": "greenfield", "track": "module", "projectType": "module-hybrid-cdn", "smokeTier": "static", "fixture": "greenfield/module-hybrid-cdn-auth-starter", "checks": ["layout", "scaffold.auth=starter"] },
+    { "id": "greenfield-module-hybrid-cdn-auth-sso", "setup": "greenfield", "track": "module", "projectType": "module-hybrid-cdn", "smokeTier": "static", "fixture": "greenfield/module-hybrid-cdn-auth-sso", "checks": ["layout", "scaffold.auth=sso"] },
+    { "id": "greenfield-module-hybrid-cdn-auth-full", "setup": "greenfield", "track": "module", "projectType": "module-hybrid-cdn", "smokeTier": "static", "fixture": "greenfield/module-hybrid-cdn-auth-full", "checks": ["layout", "scaffold.auth=full"] },
+    { "id": "greenfield-module-hybrid-cdn-auth-starter-sidebar", "setup": "greenfield", "track": "module", "projectType": "module-hybrid-cdn", "smokeTier": "static", "fixture": "greenfield/module-hybrid-cdn-auth-starter-sidebar", "checks": ["layout", "scaffold.auth=starter", "scaffold.nav=sidebar"] },
     { "id": "existing-module-hybrid", "setup": "existing", "track": "module", "smokeTier": "static", "fixture": "fixtures/existing-module-hybrid" },
     { "id": "existing-theme-minimal", "setup": "existing", "track": "theme", "smokeTier": "static", "fixture": "fixtures/existing-theme-minimal" },
     { "id": "adopt-module-hybrid", "setup": "adopted", "track": "module", "projectType": "module-hybrid-cdn", "smokeTier": "static", "fixture": "fixtures/adopted-module-hybrid" },

package/examples/smoke/run-matrix.mjs

@@ -49,6 +49,43 @@ function runStaticScenario(scenario) {
     }
   }
 
+  for (const check of checks) {
+    if (check.startsWith('scaffold.auth=')) {
+      const expected = check.split('=')[1]
+      const root = scenario.fixture ? fixtureRoot(scenario.fixture) : kitRoot
+      const woodscliPath = join(root, 'woodscli.json')
+      if (!existsSync(woodscliPath)) {
+        throw new Error(`${scenario.id}: missing woodscli.json for ${check}`)
+      }
+      const config = JSON.parse(readFileSync(woodscliPath, 'utf8'))
+      const actual = config.scaffold?.auth ?? 'none'
+      if (actual !== expected) {
+        throw new Error(`${scenario.id}: expected scaffold.auth=${expected}, got ${actual}`)
+      }
+    }
+    if (check.startsWith('scaffold.nav=')) {
+      const expected = check.split('=')[1]
+      const root = scenario.fixture ? fixtureRoot(scenario.fixture) : kitRoot
+      const woodscliPath = join(root, 'woodscli.json')
+      if (!existsSync(woodscliPath)) {
+        throw new Error(`${scenario.id}: missing woodscli.json for ${check}`)
+      }
+      const config = JSON.parse(readFileSync(woodscliPath, 'utf8'))
+      const actual = config.scaffold?.nav ?? 'top'
+      if (actual !== expected) {
+        throw new Error(`${scenario.id}: expected scaffold.nav=${expected}, got ${actual}`)
+      }
+    }
+    if (check.startsWith('file=')) {
+      const relative = check.slice('file='.length)
+      const root = scenario.fixture ? fixtureRoot(scenario.fixture) : kitRoot
+      const filePath = join(root, relative)
+      if (!existsSync(filePath)) {
+        throw new Error(`${scenario.id}: expected file ${relative} at ${filePath}`)
+      }
+    }
+  }
+
   if (checks.includes('wphs.tree') || checks.includes('wphs.config.dir')) {
     const root = scenario.fixture ? fixtureRoot(scenario.fixture) : kitRoot
     const layout = detectProjectLayout(root)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@woodsportal/hubspot-kit",
-  "version": "1.0.41",
+  "version": "1.0.42-dev.0",
   "description": "WoodsCLI — HubSpot CMS dev kit by WoodsPortal. wp CLI, Vite presets, module-config overlay, and theme/module build pipelines.",
   "type": "module",
   "main": "./dist/index.js",
@@ -51,7 +51,7 @@
     "build": "tsup",
     "dev": "tsup --watch",
     "typecheck": "tsc --noEmit",
-    "test": "node --import tsx --test 'src/lib/**/*.test.ts' 'src/schema/**/*.test.ts' 'src/vite/**/*.test.ts' 'scripts/portal-build-id.test.mjs' 'scripts/resolve-consumer-dep.test.mjs' 'scripts/vite/ensure-dev-kit-shims.test.mjs' 'scripts/vite/consumer-react-aliases.test.mjs' 'scripts/vite/resolve-from-project-root.test.mjs' && vitest run src/dev-module-config/__tests__/normalize-repeater-items.test.ts src/dev-module-config/__tests__/module-config-transform.test.ts src/dev-module-config/__tests__/flatten-visible-fields.test.ts",
+    "test": "node --import tsx --test 'src/lib/**/*.test.ts' 'src/cli/**/*.test.ts' 'src/schema/**/*.test.ts' 'src/vite/**/*.test.ts' 'scripts/portal-build-id.test.mjs' 'scripts/resolve-consumer-dep.test.mjs' 'scripts/wp-cli-smoke.test.mjs' 'scripts/vite/ensure-dev-kit-shims.test.mjs' 'scripts/vite/consumer-react-aliases.test.mjs' 'scripts/vite/resolve-from-project-root.test.mjs' && vitest run src/dev-module-config/__tests__/normalize-repeater-items.test.ts src/dev-module-config/__tests__/module-config-transform.test.ts src/dev-module-config/__tests__/flatten-visible-fields.test.ts",
     "test:examples": "node examples/smoke/run-matrix.mjs --tier static",
     "lint": "eslint src",
     "verify": "npm run typecheck && npm run test && npm run test:examples && npm run build",
@@ -68,14 +68,16 @@
     "@clack/prompts": "^0.10.1",
     "commander": "^13.1.0",
     "picocolors": "^1.1.1",
+    "semver": "^7.8.4",
     "zod": "^3.24.2"
   },
   "devDependencies": {
     "@types/node": "^22.13.4",
-    "vitest": "^3.2.4",
-    "tsx": "^4.19.3",
+    "@types/semver": "^7.7.1",
     "tsup": "^8.4.0",
-    "typescript": "^5.7.3"
+    "tsx": "^4.19.3",
+    "typescript": "^5.7.3",
+    "vitest": "^3.2.4"
   },
   "peerDependencies": {
     "@tailwindcss/vite": "^4.0.0",
@@ -87,12 +89,26 @@
     "vite": "^6.0.0"
   },
   "peerDependenciesMeta": {
-    "@tailwindcss/vite": { "optional": true },
-    "@tanstack/router-plugin": { "optional": true },
-    "@vitejs/plugin-react": { "optional": true },
-    "babel-plugin-react-compiler": { "optional": true },
-    "react": { "optional": true },
-    "react-dom": { "optional": true },
-    "vite": { "optional": true }
+    "@tailwindcss/vite": {
+      "optional": true
+    },
+    "@tanstack/router-plugin": {
+      "optional": true
+    },
+    "@vitejs/plugin-react": {
+      "optional": true
+    },
+    "babel-plugin-react-compiler": {
+      "optional": true
+    },
+    "react": {
+      "optional": true
+    },
+    "react-dom": {
+      "optional": true
+    },
+    "vite": {
+      "optional": true
+    }
   }
 }

package/scripts/audit-tdz-split.mjs

@@ -3,19 +3,25 @@
  * Usage: node scripts/audit-tdz-split.mjs
  */
 import { defineConfig, build } from 'vite'
-import viteReact from '@vitejs/plugin-react'
-import { TanStackRouterVite } from '@tanstack/router-plugin/vite'
 import { resolve, dirname } from 'node:path'
 import { fileURLToPath } from 'node:url'
 import { execSync } from 'node:child_process'
 import { readFileSync, readdirSync, existsSync } from 'node:fs'
-import tailwindcss from '@tailwindcss/vite'
 import tailwindPrefixPlugin from './tailwind/prefix-plugin.js'
 import TailwindContentPlugin from './tailwind/tailwind-content-plugin.js'
 import isPrefix from './tailwind/prefix.env.js'
+import { findProjectRoot } from './project-root.mjs'
+import { importConsumerDep } from './resolve-consumer-dep.mjs'
+
+const [{ default: viteReact }, { TanStackRouterVite }, { default: tailwindcss }] =
+  await Promise.all([
+    importConsumerDep('@vitejs/plugin-react'),
+    importConsumerDep('@tanstack/router-plugin/vite'),
+    importConsumerDep('@tailwindcss/vite'),
+  ])
 
 const __dirname = dirname(fileURLToPath(import.meta.url))
-const root = resolve(__dirname, '..')
+const root = findProjectRoot()
 const outDir = resolve(root, 'dist/TdzAudit')
 const mode = 'production'
 
@@ -42,7 +48,7 @@ const config = defineConfig({
     copyPublicDir: false,
     cssCodeSplit: true,
     lib: {
-      entry: resolve(root, 'src/main.tsx'),
+      entry: resolve(root, 'src/cdn/app-entry.ts'),
       name: 'TdzAuditModule',
       fileName: () => 'module.js',
       formats: ['iife'],

package/scripts/check-cdn-size-regression.mjs

@@ -0,0 +1,49 @@
+#!/usr/bin/env node
+/**
+ * Fail when dist/cdn/app.*.js raw size grows more than PORTAL_CDN_APP_SIZE_REGRESSION_PCT vs baseline.
+ * Baseline: docs/audit/cdn-app-size-baseline.json (committed after intentional size changes).
+ */
+import { existsSync, readFileSync, readdirSync, writeFileSync } from 'node:fs'
+import { resolve } from 'node:path'
+import { findProjectRoot } from './project-root.mjs'
+
+const root = findProjectRoot()
+const cdnDir = resolve(root, 'dist/cdn')
+const baselinePath = resolve(root, 'docs/audit/cdn-app-size-baseline.json')
+const pctLimit = Number(process.env.PORTAL_CDN_APP_SIZE_REGRESSION_PCT ?? 5)
+
+function findAppJs() {
+  if (!existsSync(cdnDir)) return null
+  return readdirSync(cdnDir).find((f) => /^app\..*\.js$/.test(f)) ?? null
+}
+
+const appFile = findAppJs()
+if (!appFile) {
+  console.error('[cdn-regression] dist/cdn/app.*.js missing — run yarn build:cdn first')
+  process.exit(1)
+}
+
+const rawBytes = readFileSync(resolve(cdnDir, appFile)).length
+
+if (!existsSync(baselinePath)) {
+  const baseline = { file: appFile, rawBytes, updatedAt: new Date().toISOString() }
+  writeFileSync(baselinePath, JSON.stringify(baseline, null, 2))
+  console.log(`[cdn-regression] Wrote baseline ${(rawBytes / 1024).toFixed(1)} KiB → ${baselinePath}`)
+  process.exit(0)
+}
+
+const baseline = JSON.parse(readFileSync(baselinePath, 'utf8'))
+const growthPct = ((rawBytes - baseline.rawBytes) / baseline.rawBytes) * 100
+
+console.log(
+  `[cdn-regression] app shell ${(rawBytes / 1024).toFixed(1)} KiB raw (baseline ${(baseline.rawBytes / 1024).toFixed(1)} KiB, ${growthPct >= 0 ? '+' : ''}${growthPct.toFixed(1)}%)`,
+)
+
+if (growthPct > pctLimit) {
+  console.error(
+    `[cdn-regression] FAIL: grew ${growthPct.toFixed(1)}% > ${pctLimit}% limit. Update baseline intentionally or reduce bundle.`,
+  )
+  process.exit(1)
+}
+
+console.log('[cdn-regression] OK')

package/scripts/check-hubspot-bundle-size.mjs

@@ -17,9 +17,9 @@ const embedMode = isMonolith ? 'monolith' : (process.env.VITE_PORTAL_EMBED_MODE
 const HUBSPOT_FILE_LIMIT = Number(process.env.HUBSPOT_MODULE_RAW_LIMIT_BYTES ?? 1.5 * 1024 * 1024)
 const BOOTSTRAP_RAW_LIMIT = Number(process.env.HUBSPOT_BOOTSTRAP_RAW_LIMIT_BYTES ?? 200 * 1024)
 const CDN_CHUNK_RAW_LIMIT = Number(process.env.PORTAL_CDN_CHUNK_RAW_LIMIT_BYTES ?? 1.5 * 1024 * 1024)
-/** Phase 1 app chunk may exceed 1.5 MiB until ESM route splitting (Phase 2). */
+/** App entry chunk — stepped down as multi-chunk splits land (target 1.5 MiB). */
 const CDN_APP_RAW_LIMIT = Number(
-  process.env.PORTAL_CDN_APP_RAW_LIMIT_BYTES ?? 2.3 * 1024 * 1024,
+  process.env.PORTAL_CDN_APP_RAW_LIMIT_BYTES ?? 2.0 * 1024 * 1024,
 )
 
 function checkFile(label, path, rawLimit) {
@@ -52,8 +52,22 @@ if (embedMode === 'monolith') {
     console.error('FAIL: dist/cdn missing — run yarn build:cdn')
     process.exit(1)
   }
-  for (const file of readdirSync(cdnDir).filter((f) => f.endsWith('.js'))) {
-    const limit = file.startsWith('app.') ? CDN_APP_RAW_LIMIT : CDN_CHUNK_RAW_LIMIT
+  function walkJsFiles(dir, prefix = '') {
+    const paths = []
+    for (const entry of readdirSync(dir, { withFileTypes: true })) {
+      const rel = prefix ? `${prefix}/${entry.name}` : entry.name
+      if (entry.isDirectory()) {
+        paths.push(...walkJsFiles(resolve(dir, entry.name), rel))
+      } else if (entry.name.endsWith('.js')) {
+        paths.push(rel)
+      }
+    }
+    return paths
+  }
+
+  for (const file of walkJsFiles(cdnDir)) {
+    const base = file.split('/').pop() ?? file
+    const limit = base.startsWith('app.') ? CDN_APP_RAW_LIMIT : CDN_CHUNK_RAW_LIMIT
     checkFile(`cdn/${file}`, resolve(cdnDir, file), limit)
   }
 }

package/scripts/cli-smoke-helpers.mjs

@@ -0,0 +1,150 @@
+import { spawnSync } from 'node:child_process'
+import { cpSync, existsSync, mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+export const kitRoot = resolve(dirname(fileURLToPath(import.meta.url)), '..')
+export const cliEntry = join(kitRoot, 'src/cli/index.ts')
+
+const LEGACY_SHIM_SCRIPTS = [
+  'build-cdn.mjs',
+  'run-vite-build.mjs',
+  'run-hubspot-module-postbuild.mjs',
+  'watch-hubspot.mjs',
+]
+
+const FIXTURE_PATHS = {
+  'greenfield/module-hybrid-cdn': join(kitRoot, 'examples/greenfield/module-hybrid-cdn'),
+  'greenfield/module-hybrid-cdn-auth-starter': join(
+    kitRoot,
+    'examples/greenfield/module-hybrid-cdn-auth-starter',
+  ),
+  'fixtures/adopted-module-monolith': join(kitRoot, 'examples/fixtures/adopted-module-monolith'),
+}
+
+/**
+ * @param {string | null | undefined} projectRoot
+ * @param {string[]} args
+ * @param {{ skipProject?: boolean; cwd?: string; extraEnv?: Record<string, string> }} [opts]
+ */
+export function runWp(projectRoot, args, opts = {}) {
+  const globalFlags = opts.skipProject
+    ? ['--ci', '-y']
+    : ['--project', projectRoot, '--ci', '-y']
+
+  return spawnSync(
+    process.execPath,
+    ['--import', 'tsx', cliEntry, ...globalFlags, ...args],
+    {
+      cwd: opts.cwd ?? kitRoot,
+      encoding: 'utf8',
+      env: { ...process.env, NO_COLOR: '1', ...opts.extraEnv },
+    },
+  )
+}
+
+/**
+ * @param {string} stdout
+ */
+export function parseJsonLine(stdout) {
+  const lines = stdout
+    .split('\n')
+    .map((line) => line.trim())
+    .filter(Boolean)
+  for (let i = lines.length - 1; i >= 0; i -= 1) {
+    const line = lines[i]
+    if (!line.startsWith('{')) continue
+    try {
+      return JSON.parse(line)
+    } catch {
+      // continue
+    }
+  }
+  throw new Error(`No JSON line found in stdout:\n${stdout}`)
+}
+
+/**
+ * @param {string} fixtureKey
+ * @param {string} targetDir
+ */
+export function copyFixture(fixtureKey, targetDir) {
+  const source = FIXTURE_PATHS[fixtureKey]
+  if (!source || !existsSync(source)) {
+    throw new Error(`Unknown or missing fixture: ${fixtureKey}`)
+  }
+  cpSync(source, targetDir, { recursive: true })
+}
+
+/**
+ * @param {string} fixtureKey
+ * @param {(dir: string) => void | Promise<void>} fn
+ */
+export async function withTempFixture(fixtureKey, fn) {
+  const dir = mkdtempSync(join(tmpdir(), 'wphs-cli-fixture-'))
+  try {
+    copyFixture(fixtureKey, dir)
+    await fn(dir)
+  } finally {
+    rmSync(dir, { recursive: true, force: true })
+  }
+}
+
+/**
+ * @param {string} dir
+ */
+export function seedModuleBuildId(dir) {
+  writeFileSync(join(dir, '.module-build-id'), '# baseline\nv0.0.1-dev\n')
+}
+
+/**
+ * CDN build/deploy dry-runs need baseline + dev slug (no git user.name in CI).
+ * @param {string} dir
+ */
+export function seedCdnBuildPrereqs(dir) {
+  seedModuleBuildId(dir)
+  const configDir = join(dir, '.wphs', 'config')
+  mkdirSync(configDir, { recursive: true })
+  writeFileSync(join(configDir, 'developer.json'), `${JSON.stringify({ slug: 'cli-smoke' }, null, 2)}\n`)
+}
+
+/**
+ * @param {string} dir
+ */
+export function seedHubspotConfig(dir) {
+  writeFileSync(
+    join(dir, 'hubspot.config.yml'),
+    `defaultPortal: dev
+portals:
+  - name: dev
+    portalId: 12345
+`,
+  )
+}
+
+/**
+ * @param {string} dir
+ */
+export function seedRegressionShims(dir) {
+  const scriptsDir = join(dir, 'scripts')
+  mkdirSync(scriptsDir, { recursive: true })
+  for (const script of LEGACY_SHIM_SCRIPTS) {
+    cpSync(join(kitRoot, 'scripts', script), join(scriptsDir, script))
+  }
+}
+
+/**
+ * @param {number | number[]} expected
+ * @param {import('node:child_process').SpawnSyncReturns<string>} result
+ * @param {string} label
+ */
+export function assertExit(expected, result, label) {
+  const allowed = Array.isArray(expected) ? expected : [expected]
+  if (allowed.includes(result.status ?? -1)) {
+    return
+  }
+  const detail = [result.stderr, result.stdout].filter(Boolean).join('\n')
+  throw new Error(
+    `${label}: expected exit ${allowed.join(' or ')}, got ${result.status}\n${detail}`,
+  )
+}