create-nifra 2.2.0 → 2.3.0

package/dist/db.js

@@ -1,15 +1,15 @@
 /**
- * `--db <preset>` — wire a Drizzle data layer into a freshly scaffolded app, so a human (or a coding
+ * `--db <preset>` - wire a Drizzle data layer into a freshly scaffolded app, so a human (or a coding
  * agent) starts from a correct, production-grade DB setup instead of inventing one. nifra ships NO DB
- * abstraction (that belongs to Drizzle/libSQL, not a web framework) — this just bundles the existing
+ * abstraction (that belongs to Drizzle/libSQL, not a web framework) - this just bundles the existing
  * tool, the Redwood-style "batteries available" move: a starter schema, a typed client, a migration
  * config, scripts, and env, all rip-out-able.
  *
  * Three presets, by runtime fit:
- *   - drizzle-libsql   — SQLite that runs EVERYWHERE incl. the edge (local file, or Turso). The default
+ *   - drizzle-libsql   - SQLite that runs EVERYWHERE incl. the edge (local file, or Turso). The default
  *                        cross-runtime answer.
- *   - drizzle-postgres — Postgres (postgres.js) on Bun/Node/Deno.
- *   - drizzle-sqlite   — Bun's built-in `bun:sqlite` (sync, local file). Bun-only.
+ *   - drizzle-postgres - Postgres (postgres.js) on Bun/Node/Deno.
+ *   - drizzle-sqlite   - Bun's built-in `bun:sqlite` (sync, local file). Bun-only.
  *
  * The starter `notes` table follows the production-grade DB defaults for its dialect; what a dialect
  * can't express inline (CHECK constraints, RLS, uuidv7) is called out in a comment, per those rules.
@@ -50,12 +50,12 @@ export const notes = pgTable("notes", {
 export type Note = typeof notes.$inferSelect
 export type NewNote = typeof notes.$inferInsert
 `;
-// SQLite has no UUID/TIMESTAMPTZ/RLS — so: text id (app-generated UUID), millisecond-epoch timestamps
+// SQLite has no UUID/TIMESTAMPTZ/RLS - so: text id (app-generated UUID), millisecond-epoch timestamps
 // (timestamp_ms mode → JS Date), NOT NULL by default, soft-delete via deleted_at. Shared by the
 // bun:sqlite and libSQL presets (same dialect). CHECK constraints are deferred to the migration.
 const SQLITE_SCHEMA = `import { integer, sqliteTable, text } from "drizzle-orm/sqlite-core"
 
-// Production-grade starter table (SQLite dialect — see the comment in your DB defaults for what the
+// Production-grade starter table (SQLite dialect - see the comment in your DB defaults for what the
 // dialect can't enforce inline: CHECK constraints go in the generated migration).
 export const notes = sqliteTable("notes", {
   id: text("id")
@@ -77,12 +77,79 @@ export type NewNote = typeof notes.$inferInsert
 `;
 // --- typed clients (export \`db\` + re-export the schema) --------------------------------------------
 // Each prints the same usage header so an agent sees how to wire it (decorate) and query it.
-const WIRE_DOC = `// Wire it into your backend ONCE, then read \`c.db\` in handlers:
-//   import { server } from "@nifrajs/core/server"
-//   import { db, notes } from "./db"
-//   export const app = server().decorate("db", db)
-//     .get("/notes", async (c) => c.db.select().from(notes))
-// Never top-level-import this into a routes/ page file (server-only) — reach it via c.db / ctx.api.`;
+// The connection is not imported by route modules directly. \`read.ts\` and \`write.ts\` sit in front of
+// it, and routes import whichever one they need - which is what lets a GET route declare \`db.read\`
+// and nothing else. See the header those files carry for why the split is load-bearing.
+const WIRE_DOC = `// The connection. Route modules do NOT import this file: they import \`./read.ts\` or \`./write.ts\`, so
+// what a route can reach matches what it declares. \`db/read-routes.ts\` shows the shape, and merging it
+// is one line:
+//   import { notesRead } from "../db/read-routes.ts"
+//   export const app = server().merge(notesRead)
+// Never top-level-import any of this into a routes/ page file (server-only) - reach it via ctx.api.`;
+/**
+ * Why the seam is split by access rather than exported as one `db`.
+ *
+ * `nifra check` works out what a route can reach from the module that REGISTERS it, following its
+ * imports. A route may not reach further than it declares, and a GET route may not declare a domain
+ * write at all - so a GET registered in a module that can reach a write has no legal declaration and
+ * has to be moved. Splitting reads from writes at the seam, and again at the routes, is what keeps
+ * every route's reach equal to what it says about itself.
+ *
+ * The same shape is what makes the policy in `nifra.assurance.ts` bite: `db/write.ts` grants
+ * `db.write`, the `authenticated-write` rule demands authentication of anything holding it, and a POST
+ * that skips auth fails the check rather than shipping.
+ */
+const SEAM_DOC = (access) => `// The ${access} half of the database seam. Routes that ${access === "read" ? "only read" : "write"} import THIS, never \`./index.ts\` -
+// a module that can reach both is a module whose GET routes cannot declare what they reach. Keep the
+// two halves import-disjoint and every route's declaration stays honest.`;
+const DRIZZLE_READ = `${SEAM_DOC("read")}
+import { isNull } from "drizzle-orm"
+import { db } from "./index.ts"
+import { type Note, notes } from "./schema.ts"
+
+export const listNotes = async (): Promise<Note[]> =>
+  db.select().from(notes).where(isNull(notes.deletedAt))
+`;
+const DRIZZLE_WRITE = `${SEAM_DOC("write")}
+import { db } from "./index.ts"
+import { type NewNote, type Note, notes } from "./schema.ts"
+
+export const createNote = async (note: NewNote): Promise<Note | undefined> =>
+  (await db.insert(notes).values(note).returning())[0]
+`;
+const READ_ROUTES = `import { server } from "@nifrajs/core/server"
+import { t } from "@nifrajs/schema"
+import { listNotes } from "./read.ts"
+
+// Registered here rather than in your app module, because reach is per-module: this file can see the
+// read half of the seam and nothing else, so \`db.read\` is the whole truth about it. Merge it with
+// \`app.merge(notesRead)\`.
+//
+// The path is \`/db/notes\` rather than \`/notes\` on purpose. This module ships UNMERGED as a sample, and
+// \`nifra check\` associates modules with routes by matching the registered PATH across your source - so
+// a sample sharing a path with a route your template already registers would lend it this file's
+// capability reach and fail the check on a route that never touches the database. Rename it to
+// whatever you like once you merge it; just do not collide with a path already in the app.
+export const notesRead = server().get(
+  "/db/notes",
+  {
+    capabilities: ["db.read"],
+    response: t.array(t.object({ id: t.string(), title: t.string(), body: t.string() })),
+  },
+  async () => (await listNotes()).map(({ id, title, body }) => ({ id, title, body })),
+)
+
+// Writes go in a SIBLING file that imports \`./write.ts\`, never this one:
+//
+//   export const notesWrite = server().post(
+//     "/notes",
+//     { body: NoteInput, capabilities: ["db.write"] },
+//     async (c) => createNote(c.body),
+//   )
+//
+// Expect it to fail \`nifra assure\` until it is authenticated - the starter policy requires proof of
+// who asked before anything writes business state. Scaffold auth with \`--auth\`.
+`;
 const PG_CLIENT = `import { drizzle } from "drizzle-orm/postgres-js"
 import postgres from "postgres"
 import * as schema from "./schema.ts"
@@ -91,10 +158,10 @@ ${WIRE_DOC}
 
 const url = process.env.DATABASE_URL
 if (url === undefined || url === "") {
-  throw new Error("DATABASE_URL is not set — copy .env.example to .env and fill it in.")
+  throw new Error("DATABASE_URL is not set - copy .env.example to .env and fill it in.")
 }
 
-// One pooled client per process (per instance in a multi-instance deploy — fine for Postgres).
+// One pooled client per process (per instance in a multi-instance deploy - fine for Postgres).
 export const db = drizzle(postgres(url), { schema })
 export * from "./schema.ts"
 `;
@@ -104,7 +171,7 @@ import * as schema from "./schema.ts"
 
 ${WIRE_DOC}
 
-// Bun's built-in SQLite — sync + fast, local file. (Bun-only; for Node/Deno/edge use the libsql preset.)
+// Bun's built-in SQLite - sync + fast, local file. (Bun-only; for Node/Deno/edge use the libsql preset.)
 export const db = drizzle(new Database(process.env.DATABASE_URL ?? "local.db"), { schema })
 export * from "./schema.ts"
 `;
@@ -114,7 +181,7 @@ import * as schema from "./schema.ts"
 
 ${WIRE_DOC}
 
-// libSQL runs everywhere — a local file (file:local.db), a remote Turso URL (libsql://…) with an auth
+// libSQL runs everywhere - a local file (file:local.db), a remote Turso URL (libsql://…) with an auth
 // token, or an embedded replica. The one SQLite client that also works on the edge (Cloudflare Workers).
 const token = process.env.DATABASE_AUTH_TOKEN
 export const db = drizzle(
@@ -172,7 +239,7 @@ DATABASE_URL="file:local.db"
 # DATABASE_AUTH_TOKEN="your-token"
 `;
 // --- Prisma presets ---------------------------------------------------------------------------------
-// Prisma owns its schema DSL (prisma/schema.prisma), client codegen, and migration engine — so the
+// Prisma owns its schema DSL (prisma/schema.prisma), client codegen, and migration engine - so the
 // scaffold is schema + a singleton client + the prisma scripts (no drizzle-kit equivalent needed).
 const PRISMA_CLIENT_VERSION = "^6.5.0";
 const PRISMA_SCRIPTS = {
@@ -213,7 +280,7 @@ generator client {
   provider = "prisma-client-js"
 }
 
-// Production-grade starter model (SQLite dialect — no native UUID/TIMESTAMPTZ/RLS; Prisma stores the
+// Production-grade starter model (SQLite dialect - no native UUID/TIMESTAMPTZ/RLS; Prisma stores the
 // String id + DateTime stamps for you). NOT NULL by default, soft-delete via deletedAt. CHECK
 // constraints are deferred to the generated migration SQL.
 model Note {
@@ -227,14 +294,20 @@ model Note {
   @@map("notes")
 }
 `;
+const PRISMA_READ = `${SEAM_DOC("read")}
+import { db } from "./index.ts"
+
+export const listNotes = async () => db.note.findMany({ where: { deletedAt: null } })
+`;
+const PRISMA_WRITE = `${SEAM_DOC("write")}
+import { db } from "./index.ts"
+
+export const createNote = async (note: { title: string; body?: string }) =>
+  db.note.create({ data: note })
+`;
 const PRISMA_CLIENT = `import { PrismaClient } from "@prisma/client"
 
-// Wire it into your backend ONCE, then read \`c.db\` in handlers:
-//   import { server } from "@nifrajs/core/server"
-//   import { db } from "./db"
-//   export const app = server().decorate("db", db)
-//     .get("/notes", async (c) => c.db.note.findMany({ where: { deletedAt: null } }))
-// Never top-level-import this into a routes/ page file (server-only) — reach it via c.db / ctx.api.
+${WIRE_DOC}
 
 // One PrismaClient per process. The globalThis guard stops dev hot-reload from opening a new connection
 // pool on every reload (which exhausts the DB); production gets a single fresh instance.
@@ -274,24 +347,30 @@ export interface DB {
   notes: NotesTable
 }
 `;
+const KYSELY_READ = `${SEAM_DOC("read")}
+import { db } from "./index.ts"
+
+export const listNotes = async () =>
+  db.selectFrom("notes").selectAll().where("deleted_at", "is", null).execute()
+`;
+const KYSELY_WRITE = `${SEAM_DOC("write")}
+import { db } from "./index.ts"
+
+export const createNote = async (note: { title: string; body?: string }) =>
+  db.insertInto("notes").values(note).returningAll().executeTakeFirst()
+`;
 const KYSELY_PG_CLIENT = `import { Kysely, PostgresDialect } from "kysely"
 import { Pool } from "pg"
 import type { DB } from "./schema.ts"
 
-// Wire it into your backend ONCE, then read \`c.db\` in handlers:
-//   import { server } from "@nifrajs/core/server"
-//   import { db } from "./db"
-//   export const app = server().decorate("db", db)
-//     .get("/notes", async (c) =>
-//       c.db.selectFrom("notes").selectAll().where("deleted_at", "is", null).execute())
-// Never top-level-import this into a routes/ page file (server-only) — reach it via c.db / ctx.api.
+${WIRE_DOC}
 
 const url = process.env.DATABASE_URL
 if (url === undefined || url === "") {
-  throw new Error("DATABASE_URL is not set — copy .env.example to .env and fill it in.")
+  throw new Error("DATABASE_URL is not set - copy .env.example to .env and fill it in.")
 }
 
-// One pooled client per process (per instance in a multi-instance deploy — fine for Postgres).
+// One pooled client per process (per instance in a multi-instance deploy - fine for Postgres).
 export const db = new Kysely<DB>({
   dialect: new PostgresDialect({ pool: new Pool({ connectionString: url }) }),
 })
@@ -299,7 +378,7 @@ export type { DB } from "./schema.ts"
 `;
 const KYSELY_MIGRATION = `import { type Kysely, sql } from "kysely"
 
-// Production-grade starter table. Postgres: UUID PK (gen_random_uuid — swap to gen_uuidv7() for insert
+// Production-grade starter table. Postgres: UUID PK (gen_random_uuid - swap to gen_uuidv7() for insert
 // locality on hot tables once available), TIMESTAMPTZ stamps, NOT NULL by default, soft-delete via
 // deleted_at. Add CHECK constraints (e.g. length caps) and RLS here per your DB defaults.
 export async function up(db: Kysely<unknown>): Promise<void> {
@@ -356,6 +435,9 @@ export const DB_PRESETS = {
         files: {
             "db/schema.ts": SQLITE_SCHEMA,
             "db/index.ts": LIBSQL_CLIENT,
+            "db/read.ts": DRIZZLE_READ,
+            "db/write.ts": DRIZZLE_WRITE,
+            "db/read-routes.ts": READ_ROUTES,
             "drizzle.config.ts": LIBSQL_CONFIG,
             ".env.example": LIBSQL_ENV,
         },
@@ -364,13 +446,16 @@ export const DB_PRESETS = {
         label: "Drizzle + Postgres",
         orm: "drizzle",
         dialect: "postgres",
-        note: "Postgres (postgres.js) on Bun/Node/Deno — not the edge.",
+        note: "Postgres (postgres.js) on Bun/Node/Deno - not the edge.",
         deps: { "drizzle-orm": DRIZZLE_ORM, postgres: "^3.4.5" },
         devDeps: { "drizzle-kit": DRIZZLE_KIT },
         scripts: SCRIPTS,
         files: {
             "db/schema.ts": PG_SCHEMA,
             "db/index.ts": PG_CLIENT,
+            "db/read.ts": DRIZZLE_READ,
+            "db/write.ts": DRIZZLE_WRITE,
+            "db/read-routes.ts": READ_ROUTES,
             "drizzle.config.ts": PG_CONFIG,
             ".env.example": PG_ENV,
         },
@@ -379,13 +464,16 @@ export const DB_PRESETS = {
         label: "Drizzle + SQLite (bun:sqlite)",
         orm: "drizzle",
         dialect: "sqlite",
-        note: "Bun's built-in SQLite — local file, Bun-only.",
+        note: "Bun's built-in SQLite - local file, Bun-only.",
         deps: { "drizzle-orm": DRIZZLE_ORM },
         devDeps: { "drizzle-kit": DRIZZLE_KIT },
         scripts: SCRIPTS,
         files: {
             "db/schema.ts": SQLITE_SCHEMA,
             "db/index.ts": SQLITE_CLIENT,
+            "db/read.ts": DRIZZLE_READ,
+            "db/write.ts": DRIZZLE_WRITE,
+            "db/read-routes.ts": READ_ROUTES,
             "drizzle.config.ts": SQLITE_CONFIG,
             ".env.example": SQLITE_ENV,
         },
@@ -394,13 +482,16 @@ export const DB_PRESETS = {
         label: "Prisma + Postgres",
         orm: "prisma",
         dialect: "postgres",
-        note: "Prisma ORM on Postgres (Bun/Node/Deno) — own schema DSL, migrate engine, and Studio.",
+        note: "Prisma ORM on Postgres (Bun/Node/Deno) - own schema DSL, migrate engine, and Studio.",
         deps: { "@prisma/client": PRISMA_CLIENT_VERSION },
         devDeps: { prisma: PRISMA_CLIENT_VERSION },
         scripts: PRISMA_SCRIPTS,
         files: {
             "prisma/schema.prisma": PRISMA_PG_SCHEMA,
             "db/index.ts": PRISMA_CLIENT,
+            "db/read.ts": PRISMA_READ,
+            "db/write.ts": PRISMA_WRITE,
+            "db/read-routes.ts": READ_ROUTES,
             ".env.example": PRISMA_PG_ENV,
         },
     },
@@ -408,13 +499,16 @@ export const DB_PRESETS = {
         label: "Prisma + SQLite",
         orm: "prisma",
         dialect: "sqlite",
-        note: "Prisma ORM on a local SQLite file — fastest start; migrate to Postgres later by swapping the datasource.",
+        note: "Prisma ORM on a local SQLite file - fastest start; migrate to Postgres later by swapping the datasource.",
         deps: { "@prisma/client": PRISMA_CLIENT_VERSION },
         devDeps: { prisma: PRISMA_CLIENT_VERSION },
         scripts: PRISMA_SCRIPTS,
         files: {
             "prisma/schema.prisma": PRISMA_SQLITE_SCHEMA,
             "db/index.ts": PRISMA_CLIENT,
+            "db/read.ts": PRISMA_READ,
+            "db/write.ts": PRISMA_WRITE,
+            "db/read-routes.ts": READ_ROUTES,
             ".env.example": PRISMA_SQLITE_ENV,
         },
     },
@@ -422,13 +516,16 @@ export const DB_PRESETS = {
         label: "Kysely + Postgres",
         orm: "kysely",
         dialect: "postgres",
-        note: "Kysely typed query builder on Postgres (node-postgres) — you own the schema types + migrations.",
+        note: "Kysely typed query builder on Postgres (node-postgres) - you own the schema types + migrations.",
         deps: { kysely: KYSELY_VERSION, pg: "^8.13.1" },
         devDeps: { "@types/pg": "^8.11.10" },
         scripts: KYSELY_SCRIPTS,
         files: {
             "db/schema.ts": KYSELY_PG_SCHEMA,
             "db/index.ts": KYSELY_PG_CLIENT,
+            "db/read.ts": KYSELY_READ,
+            "db/write.ts": KYSELY_WRITE,
+            "db/read-routes.ts": READ_ROUTES,
             "db/migrate.ts": KYSELY_MIGRATE_RUNNER,
             "db/migrations/0001_create_notes.ts": KYSELY_MIGRATION,
             ".env.example": PG_ENV,
@@ -458,7 +555,7 @@ export async function writeDbFiles(target, choice) {
         current = await readFile(gitignorePath, "utf8");
     }
     catch {
-        // No .gitignore in this template — create one with just the DB block.
+        // No .gitignore in this template - create one with just the DB block.
     }
     if (!current.includes("local.db")) {
         await writeFile(gitignorePath, `${current}${GITIGNORE_BLOCK}`);

package/dist/db.js.map

@@ -1 +1 @@
-{"version":3,"file":"db.js","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC7D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEzC,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,gBAAgB;IAChB,kBAAkB;IAClB,gBAAgB;IAChB,iBAAiB;IACjB,eAAe;IACf,iBAAiB;CACT,CAAA;AAsBV,MAAM,WAAW,GAAG,SAAS,CAAA;AAC7B,MAAM,WAAW,GAAG,SAAS,CAAA;AAC7B,MAAM,OAAO,GAAqC;IAChD,aAAa,EAAE,sBAAsB;IACrC,YAAY,EAAE,qBAAqB;IACnC,WAAW,EAAE,oBAAoB;CAClC,CAAA;AAED,uGAAuG;AAEvG,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;CAiBjB,CAAA;AAED,sGAAsG;AACtG,gGAAgG;AAChG,iGAAiG;AACjG,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;CAqBrB,CAAA;AAED,wGAAwG;AACxG,6FAA6F;AAE7F,MAAM,QAAQ,GAAG;;;;;qGAKoF,CAAA;AAErG,MAAM,SAAS,GAAG;;;;EAIhB,QAAQ;;;;;;;;;;CAUT,CAAA;AAED,MAAM,aAAa,GAAG;;;;EAIpB,QAAQ;;;;;CAKT,CAAA;AAED,MAAM,aAAa,GAAG;;;;EAIpB,QAAQ;;;;;;;;;;;;;CAaT,CAAA;AAED,uGAAuG;AAEvG,MAAM,SAAS,GAAG;;;;;;;;;CASjB,CAAA;AAED,MAAM,aAAa,GAAG;;;;;;;;CAQrB,CAAA;AAED,MAAM,aAAa,GAAG;;;;;;;;;;;CAWrB,CAAA;AAED,uGAAuG;AAEvG,MAAM,MAAM,GAAG;;CAEd,CAAA;AACD,MAAM,UAAU,GAAG;;CAElB,CAAA;AACD,MAAM,UAAU,GAAG;;;;;CAKlB,CAAA;AAED,uGAAuG;AACvG,mGAAmG;AACnG,mGAAmG;AAEnG,MAAM,qBAAqB,GAAG,QAAQ,CAAA;AACtC,MAAM,cAAc,GAAqC;IACvD,aAAa,EAAE,iBAAiB;IAChC,YAAY,EAAE,oBAAoB;IAClC,WAAW,EAAE,eAAe;CAC7B,CAAA;AAED,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;;;CAuBxB,CAAA;AAED,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;;CAsB5B,CAAA;AAED,MAAM,aAAa,GAAG;;;;;;;;;;;;;;CAcrB,CAAA;AAED,MAAM,aAAa,GAAG;;CAErB,CAAA;AACD,MAAM,iBAAiB,GAAG;;CAEzB,CAAA;AAED,uGAAuG;AACvG,oGAAoG;AACpG,sGAAsG;AACtG,wEAAwE;AAExE,MAAM,cAAc,GAAG,SAAS,CAAA;AAChC,MAAM,cAAc,GAAqC;IACvD,YAAY,EAAE,uBAAuB;CACtC,CAAA;AAED,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;CAiBxB,CAAA;AAED,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;;CAsBxB,CAAA;AAED,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;CAoBxB,CAAA;AAED,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;CAyB7B,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAyC;IAC9D,gBAAgB,EAAE;QAChB,KAAK,EAAE,kBAAkB;QACzB,GAAG,EAAE,SAAS;QACd,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE,oEAAoE;QAC1E,IAAI,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE;QACjE,OAAO,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE;QACvC,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE;YACL,cAAc,EAAE,aAAa;YAC7B,aAAa,EAAE,aAAa;YAC5B,mBAAmB,EAAE,aAAa;YAClC,cAAc,EAAE,UAAU;SAC3B;KACF;IACD,kBAAkB,EAAE;QAClB,KAAK,EAAE,oBAAoB;QAC3B,GAAG,EAAE,SAAS;QACd,OAAO,EAAE,UAAU;QACnB,IAAI,EAAE,yDAAyD;QAC/D,IAAI,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE;QACxD,OAAO,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE;QACvC,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE;YACL,cAAc,EAAE,SAAS;YACzB,aAAa,EAAE,SAAS;YACxB,mBAAmB,EAAE,SAAS;YAC9B,cAAc,EAAE,MAAM;SACvB;KACF;IACD,gBAAgB,EAAE;QAChB,KAAK,EAAE,+BAA+B;QACtC,GAAG,EAAE,SAAS;QACd,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE,+CAA+C;QACrD,IAAI,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE;QACpC,OAAO,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE;QACvC,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE;YACL,cAAc,EAAE,aAAa;YAC7B,aAAa,EAAE,aAAa;YAC5B,mBAAmB,EAAE,aAAa;YAClC,cAAc,EAAE,UAAU;SAC3B;KACF;IACD,iBAAiB,EAAE;QACjB,KAAK,EAAE,mBAAmB;QAC1B,GAAG,EAAE,QAAQ;QACb,OAAO,EAAE,UAAU;QACnB,IAAI,EAAE,sFAAsF;QAC5F,IAAI,EAAE,EAAE,gBAAgB,EAAE,qBAAqB,EAAE;QACjD,OAAO,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE;QAC1C,OAAO,EAAE,cAAc;QACvB,KAAK,EAAE;YACL,sBAAsB,EAAE,gBAAgB;YACxC,aAAa,EAAE,aAAa;YAC5B,cAAc,EAAE,aAAa;SAC9B;KACF;IACD,eAAe,EAAE;QACf,KAAK,EAAE,iBAAiB;QACxB,GAAG,EAAE,QAAQ;QACb,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE,0GAA0G;QAChH,IAAI,EAAE,EAAE,gBAAgB,EAAE,qBAAqB,EAAE;QACjD,OAAO,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE;QAC1C,OAAO,EAAE,cAAc;QACvB,KAAK,EAAE;YACL,sBAAsB,EAAE,oBAAoB;YAC5C,aAAa,EAAE,aAAa;YAC5B,cAAc,EAAE,iBAAiB;SAClC;KACF;IACD,iBAAiB,EAAE;QACjB,KAAK,EAAE,mBAAmB;QAC1B,GAAG,EAAE,QAAQ;QACb,OAAO,EAAE,UAAU;QACnB,IAAI,EAAE,iGAAiG;QACvG,IAAI,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE;QAC/C,OAAO,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE;QACpC,OAAO,EAAE,cAAc;QACvB,KAAK,EAAE;YACL,cAAc,EAAE,gBAAgB;YAChC,aAAa,EAAE,gBAAgB;YAC/B,eAAe,EAAE,qBAAqB;YACtC,oCAAoC,EAAE,gBAAgB;YACtD,cAAc,EAAE,MAAM;SACvB;KACF;CACF,CAAA;AAED,MAAM,eAAe,GAAG;;;;;;;CAOvB,CAAA;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,MAAgB;IACjE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;IACjC,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAC9B,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/C,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAChC,CAAC;IACD,mGAAmG;IACnG,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;IAChD,IAAI,OAAO,GAAG,EAAE,CAAA;IAChB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;IACxE,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,MAAM,SAAS,CAAC,aAAa,EAAE,GAAG,OAAO,GAAG,eAAe,EAAE,CAAC,CAAA;IAChE,CAAC;AACH,CAAC"}
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC7D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEzC,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,gBAAgB;IAChB,kBAAkB;IAClB,gBAAgB;IAChB,iBAAiB;IACjB,eAAe;IACf,iBAAiB;CACT,CAAA;AAsBV,MAAM,WAAW,GAAG,SAAS,CAAA;AAC7B,MAAM,WAAW,GAAG,SAAS,CAAA;AAC7B,MAAM,OAAO,GAAqC;IAChD,aAAa,EAAE,sBAAsB;IACrC,YAAY,EAAE,qBAAqB;IACnC,WAAW,EAAE,oBAAoB;CAClC,CAAA;AAED,uGAAuG;AAEvG,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;CAiBjB,CAAA;AAED,sGAAsG;AACtG,gGAAgG;AAChG,iGAAiG;AACjG,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;CAqBrB,CAAA;AAED,wGAAwG;AACxG,6FAA6F;AAE7F,yGAAyG;AACzG,qGAAqG;AACrG,wFAAwF;AACxF,MAAM,QAAQ,GAAG;;;;;qGAKoF,CAAA;AAErG;;;;;;;;;;;;GAYG;AACH,MAAM,QAAQ,GAAG,CAAC,MAAwB,EAAU,EAAE,CACpD,UAAU,MAAM,2CAA2C,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO;;0EAE5B,CAAA;AAE1E,MAAM,YAAY,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC;;;;;;;CAOvC,CAAA;AAED,MAAM,aAAa,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC;;;;;;CAMzC,CAAA;AAED,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCnB,CAAA;AAED,MAAM,SAAS,GAAG;;;;EAIhB,QAAQ;;;;;;;;;;CAUT,CAAA;AAED,MAAM,aAAa,GAAG;;;;EAIpB,QAAQ;;;;;CAKT,CAAA;AAED,MAAM,aAAa,GAAG;;;;EAIpB,QAAQ;;;;;;;;;;;;;CAaT,CAAA;AAED,uGAAuG;AAEvG,MAAM,SAAS,GAAG;;;;;;;;;CASjB,CAAA;AAED,MAAM,aAAa,GAAG;;;;;;;;CAQrB,CAAA;AAED,MAAM,aAAa,GAAG;;;;;;;;;;;CAWrB,CAAA;AAED,uGAAuG;AAEvG,MAAM,MAAM,GAAG;;CAEd,CAAA;AACD,MAAM,UAAU,GAAG;;CAElB,CAAA;AACD,MAAM,UAAU,GAAG;;;;;CAKlB,CAAA;AAED,uGAAuG;AACvG,mGAAmG;AACnG,mGAAmG;AAEnG,MAAM,qBAAqB,GAAG,QAAQ,CAAA;AACtC,MAAM,cAAc,GAAqC;IACvD,aAAa,EAAE,iBAAiB;IAChC,YAAY,EAAE,oBAAoB;IAClC,WAAW,EAAE,eAAe;CAC7B,CAAA;AAED,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;;;CAuBxB,CAAA;AAED,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;;CAsB5B,CAAA;AAED,MAAM,WAAW,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC;;;;CAItC,CAAA;AAED,MAAM,YAAY,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC;;;;;CAKxC,CAAA;AAED,MAAM,aAAa,GAAG;;EAEpB,QAAQ;;;;;;;CAOT,CAAA;AAED,MAAM,aAAa,GAAG;;CAErB,CAAA;AACD,MAAM,iBAAiB,GAAG;;CAEzB,CAAA;AAED,uGAAuG;AACvG,oGAAoG;AACpG,sGAAsG;AACtG,wEAAwE;AAExE,MAAM,cAAc,GAAG,SAAS,CAAA;AAChC,MAAM,cAAc,GAAqC;IACvD,YAAY,EAAE,uBAAuB;CACtC,CAAA;AAED,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;CAiBxB,CAAA;AAED,MAAM,WAAW,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC;;;;;CAKtC,CAAA;AAED,MAAM,YAAY,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC;;;;;CAKxC,CAAA;AAED,MAAM,gBAAgB,GAAG;;;;EAIvB,QAAQ;;;;;;;;;;;;CAYT,CAAA;AAED,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;CAoBxB,CAAA;AAED,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;CAyB7B,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAyC;IAC9D,gBAAgB,EAAE;QAChB,KAAK,EAAE,kBAAkB;QACzB,GAAG,EAAE,SAAS;QACd,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE,oEAAoE;QAC1E,IAAI,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE;QACjE,OAAO,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE;QACvC,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE;YACL,cAAc,EAAE,aAAa;YAC7B,aAAa,EAAE,aAAa;YAC5B,YAAY,EAAE,YAAY;YAC1B,aAAa,EAAE,aAAa;YAC5B,mBAAmB,EAAE,WAAW;YAChC,mBAAmB,EAAE,aAAa;YAClC,cAAc,EAAE,UAAU;SAC3B;KACF;IACD,kBAAkB,EAAE;QAClB,KAAK,EAAE,oBAAoB;QAC3B,GAAG,EAAE,SAAS;QACd,OAAO,EAAE,UAAU;QACnB,IAAI,EAAE,yDAAyD;QAC/D,IAAI,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE;QACxD,OAAO,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE;QACvC,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE;YACL,cAAc,EAAE,SAAS;YACzB,aAAa,EAAE,SAAS;YACxB,YAAY,EAAE,YAAY;YAC1B,aAAa,EAAE,aAAa;YAC5B,mBAAmB,EAAE,WAAW;YAChC,mBAAmB,EAAE,SAAS;YAC9B,cAAc,EAAE,MAAM;SACvB;KACF;IACD,gBAAgB,EAAE;QAChB,KAAK,EAAE,+BAA+B;QACtC,GAAG,EAAE,SAAS;QACd,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE,+CAA+C;QACrD,IAAI,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE;QACpC,OAAO,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE;QACvC,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE;YACL,cAAc,EAAE,aAAa;YAC7B,aAAa,EAAE,aAAa;YAC5B,YAAY,EAAE,YAAY;YAC1B,aAAa,EAAE,aAAa;YAC5B,mBAAmB,EAAE,WAAW;YAChC,mBAAmB,EAAE,aAAa;YAClC,cAAc,EAAE,UAAU;SAC3B;KACF;IACD,iBAAiB,EAAE;QACjB,KAAK,EAAE,mBAAmB;QAC1B,GAAG,EAAE,QAAQ;QACb,OAAO,EAAE,UAAU;QACnB,IAAI,EAAE,sFAAsF;QAC5F,IAAI,EAAE,EAAE,gBAAgB,EAAE,qBAAqB,EAAE;QACjD,OAAO,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE;QAC1C,OAAO,EAAE,cAAc;QACvB,KAAK,EAAE;YACL,sBAAsB,EAAE,gBAAgB;YACxC,aAAa,EAAE,aAAa;YAE5B,YAAY,EAAE,WAAW;YAEzB,aAAa,EAAE,YAAY;YAE3B,mBAAmB,EAAE,WAAW;YAChC,cAAc,EAAE,aAAa;SAC9B;KACF;IACD,eAAe,EAAE;QACf,KAAK,EAAE,iBAAiB;QACxB,GAAG,EAAE,QAAQ;QACb,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE,0GAA0G;QAChH,IAAI,EAAE,EAAE,gBAAgB,EAAE,qBAAqB,EAAE;QACjD,OAAO,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE;QAC1C,OAAO,EAAE,cAAc;QACvB,KAAK,EAAE;YACL,sBAAsB,EAAE,oBAAoB;YAC5C,aAAa,EAAE,aAAa;YAE5B,YAAY,EAAE,WAAW;YAEzB,aAAa,EAAE,YAAY;YAE3B,mBAAmB,EAAE,WAAW;YAChC,cAAc,EAAE,iBAAiB;SAClC;KACF;IACD,iBAAiB,EAAE;QACjB,KAAK,EAAE,mBAAmB;QAC1B,GAAG,EAAE,QAAQ;QACb,OAAO,EAAE,UAAU;QACnB,IAAI,EAAE,iGAAiG;QACvG,IAAI,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE;QAC/C,OAAO,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE;QACpC,OAAO,EAAE,cAAc;QACvB,KAAK,EAAE;YACL,cAAc,EAAE,gBAAgB;YAChC,aAAa,EAAE,gBAAgB;YAE/B,YAAY,EAAE,WAAW;YAEzB,aAAa,EAAE,YAAY;YAE3B,mBAAmB,EAAE,WAAW;YAChC,eAAe,EAAE,qBAAqB;YACtC,oCAAoC,EAAE,gBAAgB;YACtD,cAAc,EAAE,MAAM;SACvB;KACF;CACF,CAAA;AAED,MAAM,eAAe,GAAG;;;;;;;CAOvB,CAAA;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,MAAgB;IACjE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;IACjC,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAC9B,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/C,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAChC,CAAC;IACD,mGAAmG;IACnG,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;IAChD,IAAI,OAAO,GAAG,EAAE,CAAA;IAChB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;IACxE,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,MAAM,SAAS,CAAC,aAAa,EAAE,GAAG,OAAO,GAAG,eAAe,EAAE,CAAC,CAAA;IAChE,CAAC;AACH,CAAC"}

package/dist/scaffold/features.d.ts

@@ -0,0 +1,41 @@
+/**
+ * What a feature adds to a scaffold's manifest, and the one place those additions are merged.
+ *
+ * `--db`, `--auth`, `--deploy` and `--ci` each used to reach into the parsed `package.json` and spread
+ * themselves over it, in an order fixed by the line they appeared on. That works until two of them
+ * want the same key: the later spread wins, silently, and a preset that shadowed the scaffold's own
+ * `check` script would remove the assurance gate from every project scaffolded with it. No preset does
+ * that today - all six were checked - which is exactly when to put the rail in.
+ *
+ * So a contribution says what it adds, and REPLACING an existing key has to be declared. A collision
+ * nobody declared is an error rather than a last-writer-wins race between two option handlers.
+ */
+export interface FeatureContribution {
+    /** How the feature names itself in a collision error, e.g. `--db drizzle-libsql`. */
+    readonly label: string;
+    readonly dependencies?: Readonly<Record<string, string>>;
+    readonly devDependencies?: Readonly<Record<string, string>>;
+    readonly scripts?: Readonly<Record<string, string>>;
+    /**
+     * Keys this feature intends to overwrite. `--deploy` repoints `build` and `deploy` at the chosen
+     * target, which is the whole point of the flag - so it says so, and every other collision stays an
+     * error. The distinction is the feature: declared replacement is a decision, silent replacement is
+     * the bug this exists to catch.
+     */
+    readonly replaces?: readonly string[];
+}
+export interface ScaffoldManifest {
+    name?: string;
+    scripts?: Record<string, string>;
+    dependencies?: Record<string, string>;
+    devDependencies?: Record<string, string>;
+}
+/**
+ * Merge every feature's contribution into the scaffold's manifest.
+ *
+ * Applied in order, but the order no longer decides anything: a key two features both want, or a key a
+ * feature would take from the scaffold without saying so, throws naming both sides. That turns a
+ * question you would have to reason about into one the scaffolder answers.
+ */
+export declare function applyFeatures(manifest: ScaffoldManifest, contributions: readonly FeatureContribution[]): void;
+//# sourceMappingURL=features.d.ts.map

package/dist/scaffold/features.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"features.d.ts","sourceRoot":"","sources":["../../src/scaffold/features.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,mBAAmB;IAClC,qFAAqF;IACrF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACxD,QAAQ,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAC3D,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACnD;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CACtC;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACrC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACzC;AAID;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,gBAAgB,EAC1B,aAAa,EAAE,SAAS,mBAAmB,EAAE,GAC5C,IAAI,CA4BN"}

package/dist/scaffold/features.js

@@ -0,0 +1,48 @@
+/**
+ * What a feature adds to a scaffold's manifest, and the one place those additions are merged.
+ *
+ * `--db`, `--auth`, `--deploy` and `--ci` each used to reach into the parsed `package.json` and spread
+ * themselves over it, in an order fixed by the line they appeared on. That works until two of them
+ * want the same key: the later spread wins, silently, and a preset that shadowed the scaffold's own
+ * `check` script would remove the assurance gate from every project scaffolded with it. No preset does
+ * that today - all six were checked - which is exactly when to put the rail in.
+ *
+ * So a contribution says what it adds, and REPLACING an existing key has to be declared. A collision
+ * nobody declared is an error rather than a last-writer-wins race between two option handlers.
+ */
+const SECTIONS = ["scripts", "dependencies", "devDependencies"];
+/**
+ * Merge every feature's contribution into the scaffold's manifest.
+ *
+ * Applied in order, but the order no longer decides anything: a key two features both want, or a key a
+ * feature would take from the scaffold without saying so, throws naming both sides. That turns a
+ * question you would have to reason about into one the scaffolder answers.
+ */
+export function applyFeatures(manifest, contributions) {
+    /** Who last wrote each key, so a collision can name the other side rather than just the winner. */
+    const owner = new Map();
+    for (const section of SECTIONS) {
+        for (const key of Object.keys(manifest[section] ?? {}))
+            owner.set(`${section}.${key}`, "the scaffold");
+    }
+    for (const contribution of contributions) {
+        const declared = new Set(contribution.replaces ?? []);
+        for (const section of SECTIONS) {
+            const additions = contribution[section];
+            if (additions === undefined)
+                continue;
+            manifest[section] ??= {};
+            const target = manifest[section];
+            for (const [key, value] of Object.entries(additions)) {
+                const previous = owner.get(`${section}.${key}`);
+                if (previous !== undefined && !declared.has(key) && target[key] !== value) {
+                    throw new Error(`${contribution.label} would overwrite ${section}.${key} from ${previous}. ` +
+                        "Declare it in `replaces` if that is intended.");
+                }
+                target[key] = value;
+                owner.set(`${section}.${key}`, contribution.label);
+            }
+        }
+    }
+}
+//# sourceMappingURL=features.js.map

package/dist/scaffold/features.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features.js","sourceRoot":"","sources":["../../src/scaffold/features.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAwBH,MAAM,QAAQ,GAAG,CAAC,SAAS,EAAE,cAAc,EAAE,iBAAiB,CAAU,CAAA;AAExE;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,QAA0B,EAC1B,aAA6C;IAE7C,mGAAmG;IACnG,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAA;IACvC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACpD,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,GAAG,EAAE,EAAE,cAAc,CAAC,CAAA;IAClD,CAAC;IAED,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAA;QACrD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;YACvC,IAAI,SAAS,KAAK,SAAS;gBAAE,SAAQ;YACrC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;YACxB,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAA;YAChC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,GAAG,EAAE,CAAC,CAAA;gBAC/C,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC;oBAC1E,MAAM,IAAI,KAAK,CACb,GAAG,YAAY,CAAC,KAAK,oBAAoB,OAAO,IAAI,GAAG,SAAS,QAAQ,IAAI;wBAC1E,+CAA+C,CAClD,CAAA;gBACH,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;gBACnB,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,GAAG,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC,CAAA;YACpD,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/scaffold/frameworks.d.ts

@@ -0,0 +1,73 @@
+/**
+ * What a frontend framework contributes to a site scaffold.
+ *
+ * The five site templates were five directories of 26 files each, and 13 of those 26 were
+ * byte-identical in all five - the Dockerfile, every server entry, the worker, the assurance config.
+ * Editing the runtime story meant editing it five times and hoping. This session made the same
+ * one-line `package.json` edit in eight files, which is the whole argument.
+ *
+ * So the runtime knowledge lives once (see `site.ts`), and a framework contributes only what is
+ * genuinely its own: an adapter, a bundler plugin, the resolve conditions and defines its compiler
+ * needs, and its dependency set. The prose a framework needs to explain ITSELF - why Solid wants a
+ * `"solid"` resolve condition, what `@preact/preset-vite` is - stays in a real file next to it. That
+ * is the line: mechanical differences are modelled, explanations are written.
+ */
+/** A `plugins: [x("dom")]` entry the framework's compiler needs in a Bun build. */
+export interface BunPluginSpec {
+    /** Module the plugin factory is imported from. */
+    readonly specifier: string;
+    /** The factory's exported name. */
+    readonly name: string;
+    /** Trailing comment on the call, when the framework has something to say about it. */
+    readonly note?: {
+        readonly dom: string;
+        readonly ssr: string;
+    };
+}
+export interface FrameworkSpec {
+    readonly id: string;
+    /** The adapter export, e.g. `reactAdapter`. */
+    readonly adapter: string;
+    /** The adapter's package, e.g. `@nifrajs/web-react`. */
+    readonly package: string;
+    /** Compiler plugin for `.vue`/`.svelte`/Solid JSX. Absent for the JSX-native frameworks. */
+    readonly bunPlugin?: BunPluginSpec;
+    /** Resolve conditions this framework adds beyond the runtime's own. */
+    readonly conditions?: {
+        readonly client?: readonly string[];
+        readonly ssr?: readonly string[];
+    };
+    /** Build-time defines beyond `process.env.NODE_ENV`, in emission order. */
+    readonly define?: Readonly<Record<string, string>>;
+    /** Comment above the hoisted `define`, when the framework's flags need explaining. */
+    readonly defineNote?: string;
+    /** Runtime dependencies beyond the shared Nifra set, in emission order. */
+    readonly runtimeDependencies: Readonly<Record<string, string>>;
+    /** Dev dependencies beyond `@nifrajs/cli`, `typescript` and `vite`, in emission order. */
+    readonly devDependencies: Readonly<Record<string, string>>;
+    /** What this framework needs from `tsconfig.json`. */
+    readonly typescript: {
+        readonly jsx?: string;
+        readonly jsxImportSource?: string;
+        readonly types?: readonly string[];
+        /** False when routes are not `.tsx` - Svelte's are `.svelte`, so the glob would match nothing. */
+        readonly includeTsx?: boolean;
+    };
+}
+/**
+ * The `@nifrajs/*` range a scaffolded site installs.
+ *
+ * One constant, because it used to be a regex sweep over eight `package.json` files in the release
+ * script with nothing checking the result - and the script's own comment warns that a missed bump
+ * ships templates installing the PREVIOUS release. `scaffold-version.test.ts` now fails when this
+ * drifts from what core is publishing, so the footgun is a red test rather than a silent regression.
+ */
+export declare const NIFRA_DEP_RANGE = "^2.3.0";
+/**
+ * React is first because it is the default (`--framework` omitted scaffolds it), and because the
+ * other four are most easily read as deltas from it.
+ */
+export declare const FRAMEWORK_SPECS: Readonly<Record<string, FrameworkSpec>>;
+export declare const FRAMEWORK_IDS: string[];
+export declare function frameworkSpec(id: string): FrameworkSpec;
+//# sourceMappingURL=frameworks.d.ts.map

package/dist/scaffold/frameworks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frameworks.d.ts","sourceRoot":"","sources":["../../src/scaffold/frameworks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,mFAAmF;AACnF,MAAM,WAAW,aAAa;IAC5B,kDAAkD;IAClD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,mCAAmC;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,sFAAsF;IACtF,QAAQ,CAAC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;CAC/D;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,+CAA+C;IAC/C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,wDAAwD;IACxD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,4FAA4F;IAC5F,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,CAAA;IAClC,uEAAuE;IACvE,QAAQ,CAAC,UAAU,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAA;IAC/F,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAClD,sFAAsF;IACtF,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,2EAA2E;IAC3E,QAAQ,CAAC,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAC9D,0FAA0F;IAC1F,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAC1D,sDAAsD;IACtD,QAAQ,CAAC,UAAU,EAAE;QACnB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;QACrB,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;QACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;QAClC,kGAAkG;QAClG,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAC9B,CAAA;CACF;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,WAAW,CAAA;AAEvC;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAgEnE,CAAA;AAED,eAAO,MAAM,aAAa,UAA+B,CAAA;AAEzD,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,aAAa,CAMvD"}