everything-dev 1.12.3 → 1.13.1

package/dist/cli/upgrade.mjs

@@ -24,7 +24,9 @@ const OBSOLETE_FILES = [
 	"ui/src/api-contract.gen.ts",
 	"ui/src/lib/auth-client.ts",
 	"ui/src/lib/session.ts",
-	"ui/scripts/generate-metadata.ts"
+	"ui/scripts/generate-metadata.ts",
+	".github/dependabot.yml",
+	".github/templates/dependabot.yml"
 ];
 async function fetchLatestNpmVersion(packageName) {
 	try {

package/dist/cli/upgrade.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"upgrade.mjs","names":[],"sources":["../../src/cli/upgrade.ts"],"sourcesContent":["import { existsSync, readFileSync, rmSync, statSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { glob } from \"glob\";\nimport type { UpgradeOptions, UpgradeResult } from \"../contract\";\nimport { readInstalledFrameworkVersion } from \"./framework-version\";\nimport { runBunInstall, runTypesGen } from \"./init\";\nimport { syncTemplate } from \"./sync\";\n\nconst FRAMEWORK_PACKAGES = [\"everything-dev\", \"every-plugin\"];\nconst LEGACY_UI_IMPORT_REWRITES = [\n  ['from \"@/auth\"', 'from \"@/app\"'],\n  [\"from '@/auth'\", \"from '@/app'\"],\n  ['from \"@/lib/use-api-client\"', 'from \"@/app\"'],\n  [\"from '@/lib/use-api-client'\", \"from '@/app'\"],\n  ['from \"@/lib/api-client\"', 'from \"@/app\"'],\n  [\"from '@/lib/api-client'\", \"from '@/app'\"],\n] as const;\nconst OBSOLETE_FILES = [\n  \"ui/src/auth.ts\",\n  \"ui/src/auth-types.gen.ts\",\n  \"ui/src/lib/api-client.ts\",\n  \"ui/src/lib/use-api-client.ts\",\n  \"ui/src/api-contract.ts\",\n  \"ui/src/api-contract.gen.ts\",\n  \"ui/src/lib/auth-client.ts\",\n  \"ui/src/lib/session.ts\",\n  \"ui/scripts/generate-metadata.ts\",\n];\n\ninterface NpmPackageInfo {\n  version: string;\n}\n\nasync function fetchLatestNpmVersion(packageName: string): Promise<string | null> {\n  try {\n    const response = await fetch(`https://registry.npmjs.org/${packageName}/latest`, {\n      headers: { Accept: \"application/json\" },\n      signal: AbortSignal.timeout(10_000),\n    });\n    if (!response.ok) return null;\n    const data = (await response.json()) as NpmPackageInfo;\n    return data.version;\n  } catch {\n    return null;\n  }\n}\n\nfunction readInstalledVersion(projectDir: string, packageName: string): string | undefined {\n  return readInstalledFrameworkVersion(projectDir, packageName);\n}\n\nfunction setCatalogRef(field: Record<string, string> | undefined, packageName: string): boolean {\n  if (!field || !(packageName in field)) return false;\n  if (field[packageName] === \"catalog:\" || field[packageName].startsWith(\"file:\")) return false;\n  field[packageName] = \"catalog:\";\n  return true;\n}\n\nfunction updateWorkspacePackageRefInFile(filePath: string, packageName: string): boolean {\n  const pkg = JSON.parse(readFileSync(filePath, \"utf-8\")) as Record<string, unknown>;\n  let modified = false;\n\n  for (const fieldName of [\"dependencies\", \"devDependencies\", \"peerDependencies\"] as const) {\n    const field = pkg[fieldName] as Record<string, string> | undefined;\n    if (setCatalogRef(field, packageName)) {\n      modified = true;\n    }\n  }\n\n  if (modified) {\n    writeFileSync(filePath, `${JSON.stringify(pkg, null, 2)}\\n`);\n  }\n  return modified;\n}\n\nfunction updateRootPackageVersion(\n  projectDir: string,\n  packageName: string,\n  newVersion: string,\n): boolean {\n  const pkgPath = join(projectDir, \"package.json\");\n  const pkg = JSON.parse(readFileSync(pkgPath, \"utf-8\")) as Record<string, unknown>;\n  let modified = false;\n\n  for (const fieldName of [\"dependencies\", \"devDependencies\", \"peerDependencies\"] as const) {\n    const field = pkg[fieldName] as Record<string, string> | undefined;\n    if (setCatalogRef(field, packageName)) {\n      modified = true;\n    }\n  }\n\n  if (!pkg.workspaces || typeof pkg.workspaces !== \"object\") {\n    pkg.workspaces = { packages: [], catalog: {} };\n    modified = true;\n  }\n\n  const workspaces = pkg.workspaces as { packages?: string[]; catalog?: Record<string, string> };\n  if (!workspaces.catalog || typeof workspaces.catalog !== \"object\") {\n    workspaces.catalog = {};\n    modified = true;\n  }\n\n  const nextVersion = `^${newVersion}`;\n  if (workspaces.catalog[packageName] !== nextVersion) {\n    workspaces.catalog[packageName] = nextVersion;\n    modified = true;\n  }\n\n  if (modified) {\n    writeFileSync(pkgPath, `${JSON.stringify(pkg, null, 2)}\\n`);\n  }\n\n  return modified;\n}\n\nasync function findWorkspacePackageJsons(projectDir: string): Promise<string[]> {\n  const rootPkgPath = join(projectDir, \"package.json\");\n  if (!existsSync(rootPkgPath)) return [];\n\n  const rootPkg = JSON.parse(readFileSync(rootPkgPath, \"utf-8\")) as Record<string, unknown>;\n  const workspaceConfig = rootPkg.workspaces as { packages?: string[] } | string[] | undefined;\n\n  const patterns: string[] = [];\n  if (Array.isArray(workspaceConfig)) {\n    patterns.push(...workspaceConfig);\n  } else if (workspaceConfig?.packages && Array.isArray(workspaceConfig.packages)) {\n    patterns.push(...workspaceConfig.packages);\n  }\n\n  if (patterns.length === 0) return [];\n\n  const pkgPaths: string[] = [];\n  for (const pattern of patterns) {\n    const matches = await glob(pattern, { cwd: projectDir, dot: false, absolute: false });\n    for (const match of matches) {\n      const pkgPath = join(projectDir, match, \"package.json\");\n      if (existsSync(pkgPath) && statSync(pkgPath).isFile()) {\n        pkgPaths.push(pkgPath);\n      }\n    }\n  }\n\n  return [...new Set(pkgPaths)];\n}\n\nfunction buildChangelogUrl(\n  oldVersion: string | undefined,\n  newVersion: string,\n  parentConfig: Record<string, unknown> | null,\n): string | undefined {\n  if (!oldVersion || oldVersion === newVersion) return undefined;\n  const repoUrl = parentConfig?.repository as string | undefined;\n  if (!repoUrl) return undefined;\n\n  const githubMatch = repoUrl.match(/^https?:\\/\\/github\\.com\\/([^/]+)\\/([^/]+?)(?:\\.git)?$/);\n  if (!githubMatch) return undefined;\n\n  const [, owner, repo] = githubMatch;\n  return `https://github.com/${owner}/${repo}/compare/v${oldVersion}...v${newVersion}`;\n}\n\nasync function rewriteLegacyUiImports(projectDir: string): Promise<string[]> {\n  const files = await glob(\"ui/src/**/*.{ts,tsx}\", {\n    cwd: projectDir,\n    nodir: true,\n    dot: false,\n    absolute: false,\n  });\n  const migrated: string[] = [];\n\n  for (const file of files) {\n    const filePath = join(projectDir, file);\n    const original = readFileSync(filePath, \"utf-8\");\n    let next = original;\n\n    for (const [from, to] of LEGACY_UI_IMPORT_REWRITES) {\n      next = next.replaceAll(from, to);\n    }\n\n    if (next !== original) {\n      writeFileSync(filePath, next);\n      migrated.push(file);\n    }\n  }\n\n  return migrated;\n}\n\nexport async function upgradeTemplate(\n  projectDir: string,\n  options: UpgradeOptions,\n): Promise<UpgradeResult> {\n  const pkgPath = join(projectDir, \"package.json\");\n  if (!existsSync(pkgPath)) {\n    return {\n      status: \"error\",\n      packages: [],\n      error: \"No package.json found in current directory\",\n    };\n  }\n\n  const packages: UpgradeResult[\"packages\"] = [];\n\n  for (const name of FRAMEWORK_PACKAGES) {\n    const installed = readInstalledVersion(projectDir, name);\n    const latest = await fetchLatestNpmVersion(name);\n\n    if (!latest) {\n      packages.push({ name, from: installed, to: installed ?? \"unknown\" });\n      continue;\n    }\n\n    packages.push({ name, from: installed, to: latest });\n  }\n\n  const hasUpdates = packages.some((p) => p.from !== p.to && p.from !== undefined);\n\n  if (options.dryRun) {\n    let changelogUrl: string | undefined;\n    if (hasUpdates) {\n      const configPath = join(projectDir, \"bos.config.json\");\n      let parentConfig: Record<string, unknown> | null = null;\n      if (existsSync(configPath)) {\n        try {\n          parentConfig = JSON.parse(readFileSync(configPath, \"utf-8\"));\n        } catch {}\n      }\n      const mainPkg = packages.find((p) => p.name === \"everything-dev\");\n      if (mainPkg?.from && mainPkg.from !== mainPkg.to) {\n        changelogUrl = buildChangelogUrl(mainPkg.from, mainPkg.to, parentConfig);\n      }\n    }\n\n    return {\n      status: \"dry-run\",\n      packages,\n      changelogUrl,\n    };\n  }\n\n  for (const pkg of packages) {\n    if (pkg.from !== undefined && pkg.from !== pkg.to) {\n      updateRootPackageVersion(projectDir, pkg.name, pkg.to);\n    }\n  }\n\n  const workspacePkgPaths = await findWorkspacePackageJsons(projectDir);\n  for (const pkgPath of workspacePkgPaths) {\n    for (const pkg of packages) {\n      if (pkg.from !== undefined && pkg.from !== pkg.to) {\n        updateWorkspacePackageRefInFile(pkgPath, pkg.name);\n      }\n    }\n  }\n\n  if (hasUpdates && !options.noInstall) {\n    await runBunInstall(projectDir);\n    await runTypesGen(projectDir);\n  }\n\n  let syncResult: UpgradeResult[\"sync\"];\n  if (!options.noSync) {\n    syncResult = await syncTemplate(projectDir, {\n      dryRun: false,\n      force: options.force,\n      noInstall: true,\n    });\n  }\n\n  const migratedFiles = await rewriteLegacyUiImports(projectDir);\n  for (const file of OBSOLETE_FILES) {\n    const filePath = join(projectDir, file);\n    if (existsSync(filePath)) {\n      rmSync(filePath);\n      migratedFiles.push(file);\n    }\n  }\n\n  let changelogUrl: string | undefined;\n  const mainPkg = packages.find((p) => p.name === \"everything-dev\");\n  if (mainPkg?.from && mainPkg.from !== mainPkg.to) {\n    const configPath = join(projectDir, \"bos.config.json\");\n    let parentConfig: Record<string, unknown> | null = null;\n    if (existsSync(configPath)) {\n      try {\n        parentConfig = JSON.parse(readFileSync(configPath, \"utf-8\"));\n      } catch {}\n    }\n    changelogUrl = buildChangelogUrl(mainPkg.from, mainPkg.to, parentConfig);\n  }\n\n  return {\n    status: \"upgraded\",\n    packages,\n    sync: syncResult,\n    migrated: migratedFiles.length > 0 ? migratedFiles : undefined,\n    changelogUrl,\n  };\n}\n"],"mappings":";;;;;;;;AAQA,MAAM,qBAAqB,CAAC,kBAAkB,eAAe;AAC7D,MAAM,4BAA4B;CAChC,CAAC,mBAAiB,iBAAe;CACjC,CAAC,iBAAiB,eAAe;CACjC,CAAC,iCAA+B,iBAAe;CAC/C,CAAC,+BAA+B,eAAe;CAC/C,CAAC,6BAA2B,iBAAe;CAC3C,CAAC,2BAA2B,eAAe;CAC5C;AACD,MAAM,iBAAiB;CACrB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;AAMD,eAAe,sBAAsB,aAA6C;AAChF,KAAI;EACF,MAAM,WAAW,MAAM,MAAM,8BAA8B,YAAY,UAAU;GAC/E,SAAS,EAAE,QAAQ,oBAAoB;GACvC,QAAQ,YAAY,QAAQ,IAAO;GACpC,CAAC;AACF,MAAI,CAAC,SAAS,GAAI,QAAO;AAEzB,UADc,MAAM,SAAS,MAAM,EACvB;SACN;AACN,SAAO;;;AAIX,SAAS,qBAAqB,YAAoB,aAAyC;AACzF,QAAO,8BAA8B,YAAY,YAAY;;AAG/D,SAAS,cAAc,OAA2C,aAA8B;AAC9F,KAAI,CAAC,SAAS,EAAE,eAAe,OAAQ,QAAO;AAC9C,KAAI,MAAM,iBAAiB,cAAc,MAAM,aAAa,WAAW,QAAQ,CAAE,QAAO;AACxF,OAAM,eAAe;AACrB,QAAO;;AAGT,SAAS,gCAAgC,UAAkB,aAA8B;CACvF,MAAM,MAAM,KAAK,MAAM,aAAa,UAAU,QAAQ,CAAC;CACvD,IAAI,WAAW;AAEf,MAAK,MAAM,aAAa;EAAC;EAAgB;EAAmB;EAAmB,EAAW;EACxF,MAAM,QAAQ,IAAI;AAClB,MAAI,cAAc,OAAO,YAAY,CACnC,YAAW;;AAIf,KAAI,SACF,eAAc,UAAU,GAAG,KAAK,UAAU,KAAK,MAAM,EAAE,CAAC,IAAI;AAE9D,QAAO;;AAGT,SAAS,yBACP,YACA,aACA,YACS;CACT,MAAM,UAAU,KAAK,YAAY,eAAe;CAChD,MAAM,MAAM,KAAK,MAAM,aAAa,SAAS,QAAQ,CAAC;CACtD,IAAI,WAAW;AAEf,MAAK,MAAM,aAAa;EAAC;EAAgB;EAAmB;EAAmB,EAAW;EACxF,MAAM,QAAQ,IAAI;AAClB,MAAI,cAAc,OAAO,YAAY,CACnC,YAAW;;AAIf,KAAI,CAAC,IAAI,cAAc,OAAO,IAAI,eAAe,UAAU;AACzD,MAAI,aAAa;GAAE,UAAU,EAAE;GAAE,SAAS,EAAE;GAAE;AAC9C,aAAW;;CAGb,MAAM,aAAa,IAAI;AACvB,KAAI,CAAC,WAAW,WAAW,OAAO,WAAW,YAAY,UAAU;AACjE,aAAW,UAAU,EAAE;AACvB,aAAW;;CAGb,MAAM,cAAc,IAAI;AACxB,KAAI,WAAW,QAAQ,iBAAiB,aAAa;AACnD,aAAW,QAAQ,eAAe;AAClC,aAAW;;AAGb,KAAI,SACF,eAAc,SAAS,GAAG,KAAK,UAAU,KAAK,MAAM,EAAE,CAAC,IAAI;AAG7D,QAAO;;AAGT,eAAe,0BAA0B,YAAuC;CAC9E,MAAM,cAAc,KAAK,YAAY,eAAe;AACpD,KAAI,CAAC,WAAW,YAAY,CAAE,QAAO,EAAE;CAGvC,MAAM,kBADU,KAAK,MAAM,aAAa,aAAa,QAAQ,CAAC,CAC9B;CAEhC,MAAM,WAAqB,EAAE;AAC7B,KAAI,MAAM,QAAQ,gBAAgB,CAChC,UAAS,KAAK,GAAG,gBAAgB;UACxB,iBAAiB,YAAY,MAAM,QAAQ,gBAAgB,SAAS,CAC7E,UAAS,KAAK,GAAG,gBAAgB,SAAS;AAG5C,KAAI,SAAS,WAAW,EAAG,QAAO,EAAE;CAEpC,MAAM,WAAqB,EAAE;AAC7B,MAAK,MAAM,WAAW,UAAU;EAC9B,MAAM,UAAU,MAAM,KAAK,SAAS;GAAE,KAAK;GAAY,KAAK;GAAO,UAAU;GAAO,CAAC;AACrF,OAAK,MAAM,SAAS,SAAS;GAC3B,MAAM,UAAU,KAAK,YAAY,OAAO,eAAe;AACvD,OAAI,WAAW,QAAQ,IAAI,SAAS,QAAQ,CAAC,QAAQ,CACnD,UAAS,KAAK,QAAQ;;;AAK5B,QAAO,CAAC,GAAG,IAAI,IAAI,SAAS,CAAC;;AAG/B,SAAS,kBACP,YACA,YACA,cACoB;AACpB,KAAI,CAAC,cAAc,eAAe,WAAY,QAAO;CACrD,MAAM,UAAU,cAAc;AAC9B,KAAI,CAAC,QAAS,QAAO;CAErB,MAAM,cAAc,QAAQ,MAAM,wDAAwD;AAC1F,KAAI,CAAC,YAAa,QAAO;CAEzB,MAAM,GAAG,OAAO,QAAQ;AACxB,QAAO,sBAAsB,MAAM,GAAG,KAAK,YAAY,WAAW,MAAM;;AAG1E,eAAe,uBAAuB,YAAuC;CAC3E,MAAM,QAAQ,MAAM,KAAK,wBAAwB;EAC/C,KAAK;EACL,OAAO;EACP,KAAK;EACL,UAAU;EACX,CAAC;CACF,MAAM,WAAqB,EAAE;AAE7B,MAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,WAAW,KAAK,YAAY,KAAK;EACvC,MAAM,WAAW,aAAa,UAAU,QAAQ;EAChD,IAAI,OAAO;AAEX,OAAK,MAAM,CAAC,MAAM,OAAO,0BACvB,QAAO,KAAK,WAAW,MAAM,GAAG;AAGlC,MAAI,SAAS,UAAU;AACrB,iBAAc,UAAU,KAAK;AAC7B,YAAS,KAAK,KAAK;;;AAIvB,QAAO;;AAGT,eAAsB,gBACpB,YACA,SACwB;AAExB,KAAI,CAAC,WADW,KAAK,YAAY,eAAe,CACxB,CACtB,QAAO;EACL,QAAQ;EACR,UAAU,EAAE;EACZ,OAAO;EACR;CAGH,MAAM,WAAsC,EAAE;AAE9C,MAAK,MAAM,QAAQ,oBAAoB;EACrC,MAAM,YAAY,qBAAqB,YAAY,KAAK;EACxD,MAAM,SAAS,MAAM,sBAAsB,KAAK;AAEhD,MAAI,CAAC,QAAQ;AACX,YAAS,KAAK;IAAE;IAAM,MAAM;IAAW,IAAI,aAAa;IAAW,CAAC;AACpE;;AAGF,WAAS,KAAK;GAAE;GAAM,MAAM;GAAW,IAAI;GAAQ,CAAC;;CAGtD,MAAM,aAAa,SAAS,MAAM,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,OAAU;AAEhF,KAAI,QAAQ,QAAQ;EAClB,IAAI;AACJ,MAAI,YAAY;GACd,MAAM,aAAa,KAAK,YAAY,kBAAkB;GACtD,IAAI,eAA+C;AACnD,OAAI,WAAW,WAAW,CACxB,KAAI;AACF,mBAAe,KAAK,MAAM,aAAa,YAAY,QAAQ,CAAC;WACtD;GAEV,MAAM,UAAU,SAAS,MAAM,MAAM,EAAE,SAAS,iBAAiB;AACjE,OAAI,SAAS,QAAQ,QAAQ,SAAS,QAAQ,GAC5C,gBAAe,kBAAkB,QAAQ,MAAM,QAAQ,IAAI,aAAa;;AAI5E,SAAO;GACL,QAAQ;GACR;GACA;GACD;;AAGH,MAAK,MAAM,OAAO,SAChB,KAAI,IAAI,SAAS,UAAa,IAAI,SAAS,IAAI,GAC7C,0BAAyB,YAAY,IAAI,MAAM,IAAI,GAAG;CAI1D,MAAM,oBAAoB,MAAM,0BAA0B,WAAW;AACrE,MAAK,MAAM,WAAW,kBACpB,MAAK,MAAM,OAAO,SAChB,KAAI,IAAI,SAAS,UAAa,IAAI,SAAS,IAAI,GAC7C,iCAAgC,SAAS,IAAI,KAAK;AAKxD,KAAI,cAAc,CAAC,QAAQ,WAAW;AACpC,QAAM,cAAc,WAAW;AAC/B,QAAM,YAAY,WAAW;;CAG/B,IAAI;AACJ,KAAI,CAAC,QAAQ,OACX,cAAa,MAAM,aAAa,YAAY;EAC1C,QAAQ;EACR,OAAO,QAAQ;EACf,WAAW;EACZ,CAAC;CAGJ,MAAM,gBAAgB,MAAM,uBAAuB,WAAW;AAC9D,MAAK,MAAM,QAAQ,gBAAgB;EACjC,MAAM,WAAW,KAAK,YAAY,KAAK;AACvC,MAAI,WAAW,SAAS,EAAE;AACxB,UAAO,SAAS;AAChB,iBAAc,KAAK,KAAK;;;CAI5B,IAAI;CACJ,MAAM,UAAU,SAAS,MAAM,MAAM,EAAE,SAAS,iBAAiB;AACjE,KAAI,SAAS,QAAQ,QAAQ,SAAS,QAAQ,IAAI;EAChD,MAAM,aAAa,KAAK,YAAY,kBAAkB;EACtD,IAAI,eAA+C;AACnD,MAAI,WAAW,WAAW,CACxB,KAAI;AACF,kBAAe,KAAK,MAAM,aAAa,YAAY,QAAQ,CAAC;UACtD;AAEV,iBAAe,kBAAkB,QAAQ,MAAM,QAAQ,IAAI,aAAa;;AAG1E,QAAO;EACL,QAAQ;EACR;EACA,MAAM;EACN,UAAU,cAAc,SAAS,IAAI,gBAAgB;EACrD;EACD"}
+{"version":3,"file":"upgrade.mjs","names":[],"sources":["../../src/cli/upgrade.ts"],"sourcesContent":["import { existsSync, readFileSync, rmSync, statSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { glob } from \"glob\";\nimport type { UpgradeOptions, UpgradeResult } from \"../contract\";\nimport { readInstalledFrameworkVersion } from \"./framework-version\";\nimport { runBunInstall, runTypesGen } from \"./init\";\nimport { syncTemplate } from \"./sync\";\n\nconst FRAMEWORK_PACKAGES = [\"everything-dev\", \"every-plugin\"];\nconst LEGACY_UI_IMPORT_REWRITES = [\n  ['from \"@/auth\"', 'from \"@/app\"'],\n  [\"from '@/auth'\", \"from '@/app'\"],\n  ['from \"@/lib/use-api-client\"', 'from \"@/app\"'],\n  [\"from '@/lib/use-api-client'\", \"from '@/app'\"],\n  ['from \"@/lib/api-client\"', 'from \"@/app\"'],\n  [\"from '@/lib/api-client'\", \"from '@/app'\"],\n] as const;\nconst OBSOLETE_FILES = [\n  \"ui/src/auth.ts\",\n  \"ui/src/auth-types.gen.ts\",\n  \"ui/src/lib/api-client.ts\",\n  \"ui/src/lib/use-api-client.ts\",\n  \"ui/src/api-contract.ts\",\n  \"ui/src/api-contract.gen.ts\",\n  \"ui/src/lib/auth-client.ts\",\n  \"ui/src/lib/session.ts\",\n  \"ui/scripts/generate-metadata.ts\",\n  \".github/dependabot.yml\",\n  \".github/templates/dependabot.yml\",\n];\n\ninterface NpmPackageInfo {\n  version: string;\n}\n\nasync function fetchLatestNpmVersion(packageName: string): Promise<string | null> {\n  try {\n    const response = await fetch(`https://registry.npmjs.org/${packageName}/latest`, {\n      headers: { Accept: \"application/json\" },\n      signal: AbortSignal.timeout(10_000),\n    });\n    if (!response.ok) return null;\n    const data = (await response.json()) as NpmPackageInfo;\n    return data.version;\n  } catch {\n    return null;\n  }\n}\n\nfunction readInstalledVersion(projectDir: string, packageName: string): string | undefined {\n  return readInstalledFrameworkVersion(projectDir, packageName);\n}\n\nfunction setCatalogRef(field: Record<string, string> | undefined, packageName: string): boolean {\n  if (!field || !(packageName in field)) return false;\n  if (field[packageName] === \"catalog:\" || field[packageName].startsWith(\"file:\")) return false;\n  field[packageName] = \"catalog:\";\n  return true;\n}\n\nfunction updateWorkspacePackageRefInFile(filePath: string, packageName: string): boolean {\n  const pkg = JSON.parse(readFileSync(filePath, \"utf-8\")) as Record<string, unknown>;\n  let modified = false;\n\n  for (const fieldName of [\"dependencies\", \"devDependencies\", \"peerDependencies\"] as const) {\n    const field = pkg[fieldName] as Record<string, string> | undefined;\n    if (setCatalogRef(field, packageName)) {\n      modified = true;\n    }\n  }\n\n  if (modified) {\n    writeFileSync(filePath, `${JSON.stringify(pkg, null, 2)}\\n`);\n  }\n  return modified;\n}\n\nfunction updateRootPackageVersion(\n  projectDir: string,\n  packageName: string,\n  newVersion: string,\n): boolean {\n  const pkgPath = join(projectDir, \"package.json\");\n  const pkg = JSON.parse(readFileSync(pkgPath, \"utf-8\")) as Record<string, unknown>;\n  let modified = false;\n\n  for (const fieldName of [\"dependencies\", \"devDependencies\", \"peerDependencies\"] as const) {\n    const field = pkg[fieldName] as Record<string, string> | undefined;\n    if (setCatalogRef(field, packageName)) {\n      modified = true;\n    }\n  }\n\n  if (!pkg.workspaces || typeof pkg.workspaces !== \"object\") {\n    pkg.workspaces = { packages: [], catalog: {} };\n    modified = true;\n  }\n\n  const workspaces = pkg.workspaces as { packages?: string[]; catalog?: Record<string, string> };\n  if (!workspaces.catalog || typeof workspaces.catalog !== \"object\") {\n    workspaces.catalog = {};\n    modified = true;\n  }\n\n  const nextVersion = `^${newVersion}`;\n  if (workspaces.catalog[packageName] !== nextVersion) {\n    workspaces.catalog[packageName] = nextVersion;\n    modified = true;\n  }\n\n  if (modified) {\n    writeFileSync(pkgPath, `${JSON.stringify(pkg, null, 2)}\\n`);\n  }\n\n  return modified;\n}\n\nasync function findWorkspacePackageJsons(projectDir: string): Promise<string[]> {\n  const rootPkgPath = join(projectDir, \"package.json\");\n  if (!existsSync(rootPkgPath)) return [];\n\n  const rootPkg = JSON.parse(readFileSync(rootPkgPath, \"utf-8\")) as Record<string, unknown>;\n  const workspaceConfig = rootPkg.workspaces as { packages?: string[] } | string[] | undefined;\n\n  const patterns: string[] = [];\n  if (Array.isArray(workspaceConfig)) {\n    patterns.push(...workspaceConfig);\n  } else if (workspaceConfig?.packages && Array.isArray(workspaceConfig.packages)) {\n    patterns.push(...workspaceConfig.packages);\n  }\n\n  if (patterns.length === 0) return [];\n\n  const pkgPaths: string[] = [];\n  for (const pattern of patterns) {\n    const matches = await glob(pattern, { cwd: projectDir, dot: false, absolute: false });\n    for (const match of matches) {\n      const pkgPath = join(projectDir, match, \"package.json\");\n      if (existsSync(pkgPath) && statSync(pkgPath).isFile()) {\n        pkgPaths.push(pkgPath);\n      }\n    }\n  }\n\n  return [...new Set(pkgPaths)];\n}\n\nfunction buildChangelogUrl(\n  oldVersion: string | undefined,\n  newVersion: string,\n  parentConfig: Record<string, unknown> | null,\n): string | undefined {\n  if (!oldVersion || oldVersion === newVersion) return undefined;\n  const repoUrl = parentConfig?.repository as string | undefined;\n  if (!repoUrl) return undefined;\n\n  const githubMatch = repoUrl.match(/^https?:\\/\\/github\\.com\\/([^/]+)\\/([^/]+?)(?:\\.git)?$/);\n  if (!githubMatch) return undefined;\n\n  const [, owner, repo] = githubMatch;\n  return `https://github.com/${owner}/${repo}/compare/v${oldVersion}...v${newVersion}`;\n}\n\nasync function rewriteLegacyUiImports(projectDir: string): Promise<string[]> {\n  const files = await glob(\"ui/src/**/*.{ts,tsx}\", {\n    cwd: projectDir,\n    nodir: true,\n    dot: false,\n    absolute: false,\n  });\n  const migrated: string[] = [];\n\n  for (const file of files) {\n    const filePath = join(projectDir, file);\n    const original = readFileSync(filePath, \"utf-8\");\n    let next = original;\n\n    for (const [from, to] of LEGACY_UI_IMPORT_REWRITES) {\n      next = next.replaceAll(from, to);\n    }\n\n    if (next !== original) {\n      writeFileSync(filePath, next);\n      migrated.push(file);\n    }\n  }\n\n  return migrated;\n}\n\nexport async function upgradeTemplate(\n  projectDir: string,\n  options: UpgradeOptions,\n): Promise<UpgradeResult> {\n  const pkgPath = join(projectDir, \"package.json\");\n  if (!existsSync(pkgPath)) {\n    return {\n      status: \"error\",\n      packages: [],\n      error: \"No package.json found in current directory\",\n    };\n  }\n\n  const packages: UpgradeResult[\"packages\"] = [];\n\n  for (const name of FRAMEWORK_PACKAGES) {\n    const installed = readInstalledVersion(projectDir, name);\n    const latest = await fetchLatestNpmVersion(name);\n\n    if (!latest) {\n      packages.push({ name, from: installed, to: installed ?? \"unknown\" });\n      continue;\n    }\n\n    packages.push({ name, from: installed, to: latest });\n  }\n\n  const hasUpdates = packages.some((p) => p.from !== p.to && p.from !== undefined);\n\n  if (options.dryRun) {\n    let changelogUrl: string | undefined;\n    if (hasUpdates) {\n      const configPath = join(projectDir, \"bos.config.json\");\n      let parentConfig: Record<string, unknown> | null = null;\n      if (existsSync(configPath)) {\n        try {\n          parentConfig = JSON.parse(readFileSync(configPath, \"utf-8\"));\n        } catch {}\n      }\n      const mainPkg = packages.find((p) => p.name === \"everything-dev\");\n      if (mainPkg?.from && mainPkg.from !== mainPkg.to) {\n        changelogUrl = buildChangelogUrl(mainPkg.from, mainPkg.to, parentConfig);\n      }\n    }\n\n    return {\n      status: \"dry-run\",\n      packages,\n      changelogUrl,\n    };\n  }\n\n  for (const pkg of packages) {\n    if (pkg.from !== undefined && pkg.from !== pkg.to) {\n      updateRootPackageVersion(projectDir, pkg.name, pkg.to);\n    }\n  }\n\n  const workspacePkgPaths = await findWorkspacePackageJsons(projectDir);\n  for (const pkgPath of workspacePkgPaths) {\n    for (const pkg of packages) {\n      if (pkg.from !== undefined && pkg.from !== pkg.to) {\n        updateWorkspacePackageRefInFile(pkgPath, pkg.name);\n      }\n    }\n  }\n\n  if (hasUpdates && !options.noInstall) {\n    await runBunInstall(projectDir);\n    await runTypesGen(projectDir);\n  }\n\n  let syncResult: UpgradeResult[\"sync\"];\n  if (!options.noSync) {\n    syncResult = await syncTemplate(projectDir, {\n      dryRun: false,\n      force: options.force,\n      noInstall: true,\n    });\n  }\n\n  const migratedFiles = await rewriteLegacyUiImports(projectDir);\n  for (const file of OBSOLETE_FILES) {\n    const filePath = join(projectDir, file);\n    if (existsSync(filePath)) {\n      rmSync(filePath);\n      migratedFiles.push(file);\n    }\n  }\n\n  let changelogUrl: string | undefined;\n  const mainPkg = packages.find((p) => p.name === \"everything-dev\");\n  if (mainPkg?.from && mainPkg.from !== mainPkg.to) {\n    const configPath = join(projectDir, \"bos.config.json\");\n    let parentConfig: Record<string, unknown> | null = null;\n    if (existsSync(configPath)) {\n      try {\n        parentConfig = JSON.parse(readFileSync(configPath, \"utf-8\"));\n      } catch {}\n    }\n    changelogUrl = buildChangelogUrl(mainPkg.from, mainPkg.to, parentConfig);\n  }\n\n  return {\n    status: \"upgraded\",\n    packages,\n    sync: syncResult,\n    migrated: migratedFiles.length > 0 ? migratedFiles : undefined,\n    changelogUrl,\n  };\n}\n"],"mappings":";;;;;;;;AAQA,MAAM,qBAAqB,CAAC,kBAAkB,eAAe;AAC7D,MAAM,4BAA4B;CAChC,CAAC,mBAAiB,iBAAe;CACjC,CAAC,iBAAiB,eAAe;CACjC,CAAC,iCAA+B,iBAAe;CAC/C,CAAC,+BAA+B,eAAe;CAC/C,CAAC,6BAA2B,iBAAe;CAC3C,CAAC,2BAA2B,eAAe;CAC5C;AACD,MAAM,iBAAiB;CACrB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;AAMD,eAAe,sBAAsB,aAA6C;AAChF,KAAI;EACF,MAAM,WAAW,MAAM,MAAM,8BAA8B,YAAY,UAAU;GAC/E,SAAS,EAAE,QAAQ,oBAAoB;GACvC,QAAQ,YAAY,QAAQ,IAAO;GACpC,CAAC;AACF,MAAI,CAAC,SAAS,GAAI,QAAO;AAEzB,UADc,MAAM,SAAS,MAAM,EACvB;SACN;AACN,SAAO;;;AAIX,SAAS,qBAAqB,YAAoB,aAAyC;AACzF,QAAO,8BAA8B,YAAY,YAAY;;AAG/D,SAAS,cAAc,OAA2C,aAA8B;AAC9F,KAAI,CAAC,SAAS,EAAE,eAAe,OAAQ,QAAO;AAC9C,KAAI,MAAM,iBAAiB,cAAc,MAAM,aAAa,WAAW,QAAQ,CAAE,QAAO;AACxF,OAAM,eAAe;AACrB,QAAO;;AAGT,SAAS,gCAAgC,UAAkB,aAA8B;CACvF,MAAM,MAAM,KAAK,MAAM,aAAa,UAAU,QAAQ,CAAC;CACvD,IAAI,WAAW;AAEf,MAAK,MAAM,aAAa;EAAC;EAAgB;EAAmB;EAAmB,EAAW;EACxF,MAAM,QAAQ,IAAI;AAClB,MAAI,cAAc,OAAO,YAAY,CACnC,YAAW;;AAIf,KAAI,SACF,eAAc,UAAU,GAAG,KAAK,UAAU,KAAK,MAAM,EAAE,CAAC,IAAI;AAE9D,QAAO;;AAGT,SAAS,yBACP,YACA,aACA,YACS;CACT,MAAM,UAAU,KAAK,YAAY,eAAe;CAChD,MAAM,MAAM,KAAK,MAAM,aAAa,SAAS,QAAQ,CAAC;CACtD,IAAI,WAAW;AAEf,MAAK,MAAM,aAAa;EAAC;EAAgB;EAAmB;EAAmB,EAAW;EACxF,MAAM,QAAQ,IAAI;AAClB,MAAI,cAAc,OAAO,YAAY,CACnC,YAAW;;AAIf,KAAI,CAAC,IAAI,cAAc,OAAO,IAAI,eAAe,UAAU;AACzD,MAAI,aAAa;GAAE,UAAU,EAAE;GAAE,SAAS,EAAE;GAAE;AAC9C,aAAW;;CAGb,MAAM,aAAa,IAAI;AACvB,KAAI,CAAC,WAAW,WAAW,OAAO,WAAW,YAAY,UAAU;AACjE,aAAW,UAAU,EAAE;AACvB,aAAW;;CAGb,MAAM,cAAc,IAAI;AACxB,KAAI,WAAW,QAAQ,iBAAiB,aAAa;AACnD,aAAW,QAAQ,eAAe;AAClC,aAAW;;AAGb,KAAI,SACF,eAAc,SAAS,GAAG,KAAK,UAAU,KAAK,MAAM,EAAE,CAAC,IAAI;AAG7D,QAAO;;AAGT,eAAe,0BAA0B,YAAuC;CAC9E,MAAM,cAAc,KAAK,YAAY,eAAe;AACpD,KAAI,CAAC,WAAW,YAAY,CAAE,QAAO,EAAE;CAGvC,MAAM,kBADU,KAAK,MAAM,aAAa,aAAa,QAAQ,CAAC,CAC9B;CAEhC,MAAM,WAAqB,EAAE;AAC7B,KAAI,MAAM,QAAQ,gBAAgB,CAChC,UAAS,KAAK,GAAG,gBAAgB;UACxB,iBAAiB,YAAY,MAAM,QAAQ,gBAAgB,SAAS,CAC7E,UAAS,KAAK,GAAG,gBAAgB,SAAS;AAG5C,KAAI,SAAS,WAAW,EAAG,QAAO,EAAE;CAEpC,MAAM,WAAqB,EAAE;AAC7B,MAAK,MAAM,WAAW,UAAU;EAC9B,MAAM,UAAU,MAAM,KAAK,SAAS;GAAE,KAAK;GAAY,KAAK;GAAO,UAAU;GAAO,CAAC;AACrF,OAAK,MAAM,SAAS,SAAS;GAC3B,MAAM,UAAU,KAAK,YAAY,OAAO,eAAe;AACvD,OAAI,WAAW,QAAQ,IAAI,SAAS,QAAQ,CAAC,QAAQ,CACnD,UAAS,KAAK,QAAQ;;;AAK5B,QAAO,CAAC,GAAG,IAAI,IAAI,SAAS,CAAC;;AAG/B,SAAS,kBACP,YACA,YACA,cACoB;AACpB,KAAI,CAAC,cAAc,eAAe,WAAY,QAAO;CACrD,MAAM,UAAU,cAAc;AAC9B,KAAI,CAAC,QAAS,QAAO;CAErB,MAAM,cAAc,QAAQ,MAAM,wDAAwD;AAC1F,KAAI,CAAC,YAAa,QAAO;CAEzB,MAAM,GAAG,OAAO,QAAQ;AACxB,QAAO,sBAAsB,MAAM,GAAG,KAAK,YAAY,WAAW,MAAM;;AAG1E,eAAe,uBAAuB,YAAuC;CAC3E,MAAM,QAAQ,MAAM,KAAK,wBAAwB;EAC/C,KAAK;EACL,OAAO;EACP,KAAK;EACL,UAAU;EACX,CAAC;CACF,MAAM,WAAqB,EAAE;AAE7B,MAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,WAAW,KAAK,YAAY,KAAK;EACvC,MAAM,WAAW,aAAa,UAAU,QAAQ;EAChD,IAAI,OAAO;AAEX,OAAK,MAAM,CAAC,MAAM,OAAO,0BACvB,QAAO,KAAK,WAAW,MAAM,GAAG;AAGlC,MAAI,SAAS,UAAU;AACrB,iBAAc,UAAU,KAAK;AAC7B,YAAS,KAAK,KAAK;;;AAIvB,QAAO;;AAGT,eAAsB,gBACpB,YACA,SACwB;AAExB,KAAI,CAAC,WADW,KAAK,YAAY,eAAe,CACxB,CACtB,QAAO;EACL,QAAQ;EACR,UAAU,EAAE;EACZ,OAAO;EACR;CAGH,MAAM,WAAsC,EAAE;AAE9C,MAAK,MAAM,QAAQ,oBAAoB;EACrC,MAAM,YAAY,qBAAqB,YAAY,KAAK;EACxD,MAAM,SAAS,MAAM,sBAAsB,KAAK;AAEhD,MAAI,CAAC,QAAQ;AACX,YAAS,KAAK;IAAE;IAAM,MAAM;IAAW,IAAI,aAAa;IAAW,CAAC;AACpE;;AAGF,WAAS,KAAK;GAAE;GAAM,MAAM;GAAW,IAAI;GAAQ,CAAC;;CAGtD,MAAM,aAAa,SAAS,MAAM,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,OAAU;AAEhF,KAAI,QAAQ,QAAQ;EAClB,IAAI;AACJ,MAAI,YAAY;GACd,MAAM,aAAa,KAAK,YAAY,kBAAkB;GACtD,IAAI,eAA+C;AACnD,OAAI,WAAW,WAAW,CACxB,KAAI;AACF,mBAAe,KAAK,MAAM,aAAa,YAAY,QAAQ,CAAC;WACtD;GAEV,MAAM,UAAU,SAAS,MAAM,MAAM,EAAE,SAAS,iBAAiB;AACjE,OAAI,SAAS,QAAQ,QAAQ,SAAS,QAAQ,GAC5C,gBAAe,kBAAkB,QAAQ,MAAM,QAAQ,IAAI,aAAa;;AAI5E,SAAO;GACL,QAAQ;GACR;GACA;GACD;;AAGH,MAAK,MAAM,OAAO,SAChB,KAAI,IAAI,SAAS,UAAa,IAAI,SAAS,IAAI,GAC7C,0BAAyB,YAAY,IAAI,MAAM,IAAI,GAAG;CAI1D,MAAM,oBAAoB,MAAM,0BAA0B,WAAW;AACrE,MAAK,MAAM,WAAW,kBACpB,MAAK,MAAM,OAAO,SAChB,KAAI,IAAI,SAAS,UAAa,IAAI,SAAS,IAAI,GAC7C,iCAAgC,SAAS,IAAI,KAAK;AAKxD,KAAI,cAAc,CAAC,QAAQ,WAAW;AACpC,QAAM,cAAc,WAAW;AAC/B,QAAM,YAAY,WAAW;;CAG/B,IAAI;AACJ,KAAI,CAAC,QAAQ,OACX,cAAa,MAAM,aAAa,YAAY;EAC1C,QAAQ;EACR,OAAO,QAAQ;EACf,WAAW;EACZ,CAAC;CAGJ,MAAM,gBAAgB,MAAM,uBAAuB,WAAW;AAC9D,MAAK,MAAM,QAAQ,gBAAgB;EACjC,MAAM,WAAW,KAAK,YAAY,KAAK;AACvC,MAAI,WAAW,SAAS,EAAE;AACxB,UAAO,SAAS;AAChB,iBAAc,KAAK,KAAK;;;CAI5B,IAAI;CACJ,MAAM,UAAU,SAAS,MAAM,MAAM,EAAE,SAAS,iBAAiB;AACjE,KAAI,SAAS,QAAQ,QAAQ,SAAS,QAAQ,IAAI;EAChD,MAAM,aAAa,KAAK,YAAY,kBAAkB;EACtD,IAAI,eAA+C;AACnD,MAAI,WAAW,WAAW,CACxB,KAAI;AACF,kBAAe,KAAK,MAAM,aAAa,YAAY,QAAQ,CAAC;UACtD;AAEV,iBAAe,kBAAkB,QAAQ,MAAM,QAAQ,IAAI,aAAa;;AAG1E,QAAO;EACL,QAAQ;EACR;EACA,MAAM;EACN,UAAU,cAAc,SAAS,IAAI,gBAAgB;EACrD;EACD"}

package/dist/config.cjs

@@ -1,6 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_runtime = require('./_virtual/_rolldown/runtime.cjs');
 const require_fastkv = require('./fastkv.cjs');
+const require_merge = require('./merge.cjs');
 const require_network = require('./network.cjs');
 const require_types = require('./types.cjs');
 let node_fs = require("node:fs");
@@ -9,6 +10,7 @@ let node_path = require("node:path");
 //#region src/config.ts
 const LOCAL_PREFIX = "local:";
 const DEFAULT_HOST_PORT = 3e3;
+const RESOLVED_CONFIG_FILENAME = "bos.resolved-config.json";
 let cachedConfig = null;
 let projectRoot = null;
 function clearConfigCache() {
@@ -38,16 +40,17 @@ async function loadConfig(options) {
 		return null;
 	}
 	const baseDir = (0, node_path.dirname)(configPath);
+	const env = options?.env ?? "development";
+	const runtimeEnv = env === "staging" ? "production" : env;
 	try {
 		const extendedChain = [];
-		const parsed = await resolveConfigWithExtends(configPath, baseDir, /* @__PURE__ */ new Set(), extendedChain);
+		const parsed = await resolveConfigWithExtends(configPath, baseDir, /* @__PURE__ */ new Set(), extendedChain, env);
 		const config = require_types.BosConfigSchema.parse(parsed);
 		cachedConfig = config;
 		projectRoot = baseDir;
-		const pluginRuntime = await resolveRuntimePlugins(config.plugins ?? {}, baseDir, options?.env ?? "development");
 		return {
 			config,
-			runtime: buildRuntimeConfig(config, baseDir, options?.env ?? "development", { plugins: pluginRuntime }),
+			runtime: buildRuntimeConfig(config, baseDir, runtimeEnv, { plugins: await resolveRuntimePlugins(config.plugins ?? {}, baseDir, runtimeEnv) }),
 			source: {
 				path: configPath,
 				extended: extendedChain.length > 0 ? extendedChain : void 0,
@@ -67,7 +70,60 @@ async function buildRuntimePluginsForConfig(config, baseDir, env) {
 	const plugins = await resolveRuntimePlugins(config.plugins ?? {}, baseDir, env);
 	return Object.keys(plugins).length > 0 ? plugins : void 0;
 }
-function resolveDevelopmentTarget(development, production, baseDir) {
+function getResolvedConfigPath(configDir) {
+	return (0, node_path.join)(configDir, ".bos", RESOLVED_CONFIG_FILENAME);
+}
+function loadResolvedConfig(configDir) {
+	const resolvedPath = getResolvedConfigPath(configDir);
+	if (!(0, node_fs.existsSync)(resolvedPath)) return null;
+	try {
+		const raw = JSON.parse((0, node_fs.readFileSync)(resolvedPath, "utf-8"));
+		if (!require_merge.isPlainObject(raw)) return null;
+		const { _resolved, ...configData } = raw;
+		return require_types.BosConfigSchema.parse(configData);
+	} catch {
+		return null;
+	}
+}
+function writeResolvedConfig(configDir, config, env, extendsChain, source) {
+	const resolvedPath = getResolvedConfigPath(configDir);
+	const resolvedDir = (0, node_path.dirname)(resolvedPath);
+	if (!(0, node_fs.existsSync)(resolvedDir)) (0, node_fs.mkdirSync)(resolvedDir, { recursive: true });
+	const ordered = require_merge.rebuildOrderedConfig(config);
+	const output = {
+		_resolved: {
+			env,
+			resolvedAt: (/* @__PURE__ */ new Date()).toISOString(),
+			extendsChain: extendsChain ?? [],
+			...source ? { source } : {}
+		},
+		...ordered
+	};
+	const content = `${JSON.stringify(output, null, 2)}\n`;
+	try {
+		if ((0, node_fs.readFileSync)(resolvedPath, "utf-8") === content) return;
+	} catch {}
+	(0, node_fs.writeFileSync)(resolvedPath, content);
+}
+function resolveBosConfigPath(configDir) {
+	const resolvedPath = getResolvedConfigPath(configDir);
+	if ((0, node_fs.existsSync)(resolvedPath)) return resolvedPath;
+	return (0, node_path.join)(configDir, "bos.config.json");
+}
+function readBosConfigForBuild(configDir) {
+	const resolvedPath = getResolvedConfigPath(configDir);
+	if ((0, node_fs.existsSync)(resolvedPath)) try {
+		const raw = JSON.parse((0, node_fs.readFileSync)(resolvedPath, "utf-8"));
+		if (require_merge.isPlainObject(raw)) {
+			const { _resolved, ...configData } = raw;
+			return configData;
+		}
+	} catch {}
+	const bosConfigPath = (0, node_path.join)(configDir, "bos.config.json");
+	return JSON.parse((0, node_fs.readFileSync)(bosConfigPath, "utf-8"));
+}
+function resolveDevelopmentTarget(development, production, baseDir, forceSource) {
+	if (forceSource === "remote") return resolveRuntimeTarget(production, baseDir, "remote");
 	const devTarget = resolveRuntimeTarget(development, baseDir);
 	if (devTarget.source === "local" && (!devTarget.localPath || !(0, node_fs.existsSync)(devTarget.localPath))) return resolveRuntimeTarget(production, baseDir, "remote");
 	return devTarget;
@@ -76,12 +132,15 @@ function buildRuntimeConfig(config, baseDir, env, options) {
 	const uiConfig = config.app.ui;
 	const apiConfig = config.app.api;
 	const authConfig = config.app.auth;
-	const uiRuntime = env === "development" ? resolveDevelopmentTarget(uiConfig.development, uiConfig.production, baseDir) : resolveRuntimeTarget(uiConfig.production, baseDir, "remote");
-	const apiRuntime = env === "development" ? resolveDevelopmentTarget(apiConfig.development, apiConfig.production, baseDir) : resolveRuntimeTarget(apiConfig.production, baseDir, "remote");
-	const authRuntime = authConfig ? env === "development" ? resolveDevelopmentTarget(authConfig.development, authConfig.production, baseDir) : resolveRuntimeTarget(authConfig.production, baseDir, "remote") : void 0;
+	const uiRuntime = env === "development" ? resolveDevelopmentTarget(uiConfig.development, uiConfig.production, baseDir, options?.uiSource) : resolveRuntimeTarget(uiConfig.production, baseDir, "remote");
+	const apiRuntime = env === "development" ? resolveDevelopmentTarget(apiConfig.development, apiConfig.production, baseDir, options?.apiSource) : resolveRuntimeTarget(apiConfig.production, baseDir, "remote");
+	const authRuntime = authConfig ? env === "development" ? resolveDevelopmentTarget(authConfig.development, authConfig.production, baseDir, options?.authSource) : resolveRuntimeTarget(authConfig.production, baseDir, "remote") : void 0;
 	const hostConfig = config.app.host;
-	const hostRuntime = env === "development" ? resolveDevelopmentTarget(hostConfig.development, hostConfig.production, baseDir) : resolveRuntimeTarget(hostConfig.production, baseDir, "remote");
-	const hostListeningUrl = resolveDevelopmentHostUrl(hostConfig.development);
+	const hostRuntime = env === "development" ? resolveDevelopmentTarget(hostConfig.development, hostConfig.production, baseDir, options?.hostSource) : resolveRuntimeTarget(hostConfig.production, baseDir, "remote");
+	const hostListeningUrl = env === "development" ? resolveDevelopmentHostUrl(hostConfig.development) : `http://localhost:${hostRuntime.port ?? DEFAULT_HOST_PORT}`;
+	const hostIsRemote = hostRuntime.source === "remote";
+	const uiIsRemote = uiRuntime.source === "remote";
+	const apiIsRemote = apiRuntime.source === "remote";
 	return {
 		env,
 		account: config.account,
@@ -95,9 +154,9 @@ function buildRuntimeConfig(config, baseDir, env, options) {
 			localPath: hostRuntime.localPath,
 			port: hostRuntime.port ?? DEFAULT_HOST_PORT,
 			secrets: hostConfig.secrets,
-			integrity: env === "production" ? hostConfig.integrity : void 0,
+			integrity: hostIsRemote ? hostConfig.integrity : void 0,
 			source: hostRuntime.source,
-			remoteUrl: hostRuntime.source === "remote" ? hostRuntime.url : void 0
+			remoteUrl: hostIsRemote ? hostRuntime.url : void 0
 		},
 		shared: config.shared,
 		ui: {
@@ -106,9 +165,9 @@ function buildRuntimeConfig(config, baseDir, env, options) {
 			entry: uiRuntime.url ? `${uiRuntime.url}/mf-manifest.json` : "/mf-manifest.json",
 			localPath: uiRuntime.localPath,
 			port: uiRuntime.port,
-			ssrUrl: uiConfig.ssr,
-			ssrIntegrity: env === "production" ? uiConfig.ssrIntegrity : void 0,
-			integrity: env === "production" ? uiConfig.integrity : void 0,
+			ssrUrl: uiIsRemote ? uiConfig.ssr : void 0,
+			ssrIntegrity: uiIsRemote ? uiConfig.ssrIntegrity : void 0,
+			integrity: uiIsRemote ? uiConfig.integrity : void 0,
 			source: uiRuntime.source
 		},
 		api: {
@@ -118,23 +177,31 @@ function buildRuntimeConfig(config, baseDir, env, options) {
 			localPath: apiRuntime.localPath,
 			port: apiRuntime.port,
 			source: apiRuntime.source,
-			proxy: apiConfig.proxy,
+			proxy: options?.proxy ?? apiConfig.proxy,
 			variables: apiConfig.variables,
 			secrets: apiConfig.secrets,
-			integrity: env === "production" ? apiConfig.integrity : void 0
+			integrity: apiIsRemote ? apiConfig.integrity : void 0
 		},
-		auth: authConfig ? {
-			name: resolvePluginRuntimeName(void 0, authRuntime.localPath, authConfig.name),
-			url: authRuntime.url,
-			entry: authRuntime.url ? `${authRuntime.url}/mf-manifest.json` : "/mf-manifest.json",
-			localPath: authRuntime.localPath,
-			port: authRuntime.port,
-			source: authRuntime.source,
-			proxy: authConfig.proxy,
-			variables: authConfig.variables,
-			secrets: authConfig.secrets,
-			integrity: env === "production" ? authConfig.integrity : void 0
-		} : void 0,
+		auth: (() => {
+			if (!authConfig || !authRuntime) return void 0;
+			return {
+				name: resolvePluginRuntimeName(void 0, authRuntime.localPath, authConfig.name),
+				url: authRuntime.url,
+				entry: authRuntime.url ? `${authRuntime.url}/mf-manifest.json` : "/mf-manifest.json",
+				localPath: authRuntime.localPath,
+				port: authRuntime.port,
+				source: authRuntime.source,
+				proxy: authConfig.proxy,
+				variables: authConfig.variables,
+				secrets: authConfig.secrets,
+				integrity: authRuntime.source === "remote" ? authConfig.integrity : void 0,
+				sidebar: authConfig.sidebar?.map((item) => ({
+					...item,
+					to: item.to ?? "/auth",
+					roleRequired: item.roleRequired ?? "member"
+				}))
+			};
+		})(),
 		plugins: options?.plugins && Object.keys(options.plugins).length > 0 ? options.plugins : void 0
 	};
 }
@@ -143,42 +210,89 @@ async function loadConfigFile(configPath, baseDir) {
 	const resolvedPath = (0, node_path.isAbsolute)(configPath) ? configPath : (0, node_path.resolve)(baseDir, configPath);
 	return JSON.parse((0, node_fs.readFileSync)(resolvedPath, "utf-8"));
 }
-async function resolveConfigWithExtends(configPath, baseDir, visited, chain) {
+async function resolveConfigWithExtends(configPath, baseDir, visited, chain, env = "development") {
 	if (visited.has(configPath)) throw new Error(`Circular extends detected: ${[...visited, configPath].join(" -> ")}`);
 	const config = await loadConfigFile(configPath, baseDir);
-	if (configPath.startsWith("bos://")) chain.push(configPath);
+	chain.push(configPath);
 	if (!config.extends) return config;
+	const extendsRef = require_merge.resolveExtendsRef(config.extends, env);
+	if (!extendsRef) return config;
 	const nextVisited = new Set(visited);
 	nextVisited.add(configPath);
-	const parentPath = config.extends;
-	return mergeConfigs(await resolveConfigWithExtends(parentPath, parentPath.startsWith("bos://") ? baseDir : (0, node_path.isAbsolute)(parentPath) ? (0, node_path.dirname)(parentPath) : baseDir, nextVisited, chain), config);
+	return require_merge.mergeBosConfigWithExtends(await resolveConfigWithExtends(extendsRef, extendsRef.startsWith("bos://") ? baseDir : (0, node_path.isAbsolute)(extendsRef) ? (0, node_path.dirname)(extendsRef) : baseDir, nextVisited, chain, env), config);
 }
-function mergeConfigs(parent, child) {
-	const result = mergeValues(parent, child);
-	if (child.plugins !== void 0) result.plugins = child.plugins;
-	return result;
+function normalizePluginEntry(raw) {
+	if (raw === null || raw === false) return raw;
+	if (typeof raw === "string") return { extends: raw };
+	return raw;
 }
-async function resolveRuntimePlugins(plugins, baseDir, env, prefix = []) {
+async function resolveRuntimePlugins(plugins, baseDir, env) {
 	const out = {};
-	for (const [pluginId, pluginInput] of Object.entries(plugins)) {
-		const runtimeKey = [...prefix, pluginId].join("/");
-		const { config: resolvedConfig, baseDir: pluginBaseDir } = await resolveBosConfigInput(pluginInput, baseDir, /* @__PURE__ */ new Set(), []);
-		const pluginRuntime = buildRuntimePluginConfig(runtimeKey, resolvedConfig, pluginBaseDir, env, pluginInput);
-		if (pluginInput.name && typeof pluginInput.name === "string" && !pluginRuntime.name.includes("/")) pluginRuntime.name = pluginInput.name;
-		const integrity = pluginInput.integrity;
-		if (env === "production" && integrity) pluginRuntime.integrity = integrity;
-		if (pluginRuntime.source === "remote" && pluginRuntime.url && !pluginRuntime.localPath && typeof resolvedConfig.app?.api?.name !== "string" && !pluginInput.name) pluginRuntime.name = await resolveRemotePluginRuntimeName(pluginRuntime.url, pluginRuntime.name);
-		out[runtimeKey] = pluginRuntime;
-		if (resolvedConfig.plugins && Object.keys(resolvedConfig.plugins).length > 0) {
-			const nested = await resolveRuntimePlugins(resolvedConfig.plugins, pluginBaseDir, env, [...prefix, pluginId]);
-			Object.assign(out, nested);
+	for (const [pluginId, rawInput] of Object.entries(plugins)) {
+		const normalized = normalizePluginEntry(rawInput);
+		if (normalized === null || normalized === false) continue;
+		let resolvedConfig = {};
+		let pluginBaseDir = baseDir;
+		if (normalized.extends) try {
+			const extendsUrl = require_merge.resolveExtendsRef(normalized.extends, env);
+			if (extendsUrl) resolvedConfig = await require_fastkv.fetchBosConfigFromFastKv(extendsUrl);
+		} catch {
+			resolvedConfig = {};
 		}
+		if (normalized.development?.startsWith(LOCAL_PREFIX)) {
+			const localPath = (0, node_path.resolve)(baseDir, normalized.development.slice(6).trim());
+			if ((0, node_fs.existsSync)(localPath)) {
+				const localConfigPath = (0, node_path.join)(localPath, "bos.config.json");
+				if ((0, node_fs.existsSync)(localConfigPath)) try {
+					const localRaw = JSON.parse((0, node_fs.readFileSync)(localConfigPath, "utf-8"));
+					resolvedConfig = require_merge.mergeBosConfigWithExtends(resolvedConfig, localRaw);
+					pluginBaseDir = localPath;
+				} catch {}
+			}
+		}
+		if (normalized.app && require_merge.isPlainObject(normalized.app)) {
+			const mergedApp = {
+				...resolvedConfig.app ?? {},
+				...normalized.app
+			};
+			resolvedConfig = {
+				...resolvedConfig,
+				app: mergedApp
+			};
+		}
+		if (normalized.shared && require_merge.isPlainObject(normalized.shared)) {
+			const mergedShared = {
+				...resolvedConfig.shared ?? {},
+				...normalized.shared
+			};
+			resolvedConfig = {
+				...resolvedConfig,
+				shared: mergedShared
+			};
+		}
+		if (normalized.sidebar) resolvedConfig = {
+			...resolvedConfig,
+			sidebar: normalized.sidebar
+		};
+		if (normalized.routes) resolvedConfig = {
+			...resolvedConfig,
+			routes: normalized.routes
+		};
+		const pluginRuntime = await buildRuntimePluginConfig(pluginId, resolvedConfig, pluginBaseDir, env, normalized);
+		if (normalized.name && typeof normalized.name === "string" && !pluginRuntime.name.includes("/")) pluginRuntime.name = normalized.name;
+		const integrity = normalized.integrity;
+		if (env === "production" && integrity) pluginRuntime.integrity = integrity;
+		if (pluginRuntime.source === "remote" && pluginRuntime.url && !pluginRuntime.localPath && typeof resolvedConfig.app?.api?.name !== "string" && !normalized.name) pluginRuntime.name = await resolveRemotePluginRuntimeName(pluginRuntime.url, pluginRuntime.name);
+		out[pluginId] = pluginRuntime;
 	}
 	return out;
 }
 async function resolveRemotePluginRuntimeName(baseUrl, fallback) {
 	try {
-		const response = await fetch(`${baseUrl.replace(/\/$/, "")}/plugin.manifest.json`);
+		const controller = new AbortController();
+		const timeout = setTimeout(() => controller.abort(), 5e3);
+		const response = await fetch(`${baseUrl.replace(/\/$/, "")}/plugin.manifest.json`, { signal: controller.signal });
+		clearTimeout(timeout);
 		if (!response.ok) return fallback;
 		const manifest = await response.json();
 		return typeof manifest.plugin?.name === "string" && manifest.plugin.name.length > 0 ? manifest.plugin.name : fallback;
@@ -186,7 +300,23 @@ async function resolveRemotePluginRuntimeName(baseUrl, fallback) {
 		return fallback;
 	}
 }
-function buildRuntimePluginConfig(pluginId, config, baseDir, env, source) {
+async function resolveBosPluginUrl(bosUrl) {
+	const parsed = require_fastkv.parsePluginBosUrl(bosUrl);
+	if (!parsed) return null;
+	try {
+		const entry = await require_fastkv.fetchPluginFromRegistry(parsed.accountId, parsed.pluginName);
+		if (!entry) return null;
+		const cdnUrl = entry.metadata.cdnUrl;
+		if (!cdnUrl) return null;
+		return {
+			url: cdnUrl,
+			integrity: entry.metadata.integrity ?? void 0
+		};
+	} catch {
+		return null;
+	}
+}
+async function buildRuntimePluginConfig(pluginId, config, baseDir, env, source) {
 	const apiConfig = config.app?.api ?? {};
 	const apiDevelopment = typeof apiConfig.development === "string" ? apiConfig.development : void 0;
 	const apiProduction = typeof apiConfig.production === "string" ? apiConfig.production : void 0;
@@ -194,10 +324,28 @@ function buildRuntimePluginConfig(pluginId, config, baseDir, env, source) {
 	const sourceProduction = typeof source.production === "string" ? source.production : void 0;
 	const proxy = typeof apiConfig.proxy === "string" ? apiConfig.proxy : void 0;
 	const development = apiDevelopment ?? sourceDevelopment;
-	const production = apiProduction ?? sourceProduction;
+	let production = apiProduction ?? sourceProduction;
+	if (production?.startsWith("bos://")) {
+		const resolved = await resolveBosPluginUrl(production);
+		if (resolved) {
+			production = resolved.url;
+			if (resolved.integrity && env === "production") source.integrity = resolved.integrity;
+		}
+	}
 	const runtimeTarget = env === "development" ? resolveDevelopmentTarget(development, production, baseDir) : resolveRuntimeTarget(production, baseDir, "remote");
+	const apiName = resolvePluginRuntimeName(typeof apiConfig.name === "string" ? apiConfig.name : void 0, runtimeTarget.localPath, pluginId);
+	const uiConfig = config.app?.ui;
+	const uiDevelopment = typeof uiConfig?.development === "string" ? uiConfig.development : void 0;
+	const uiProduction = typeof uiConfig?.production === "string" ? uiConfig.production : void 0;
+	const uiRuntime = uiConfig && (uiDevelopment || uiProduction) ? env === "development" ? resolveDevelopmentTarget(uiDevelopment, uiProduction, baseDir) : resolveRuntimeTarget(uiProduction, baseDir, "remote") : void 0;
+	const sidebar = (config.sidebar ?? source.sidebar)?.map((item) => ({
+		...item,
+		to: item.to ?? `/${pluginId}`,
+		roleRequired: item.roleRequired ?? "member"
+	}));
+	const routes = config.routes ?? source.routes;
 	return {
-		name: resolvePluginRuntimeName(typeof apiConfig.name === "string" ? apiConfig.name : void 0, runtimeTarget.localPath, pluginId),
+		name: apiName,
 		url: runtimeTarget.url,
 		entry: runtimeTarget.url ? `${runtimeTarget.url.replace(/\/$/, "")}/mf-manifest.json` : "/mf-manifest.json",
 		source: runtimeTarget.source,
@@ -205,7 +353,18 @@ function buildRuntimePluginConfig(pluginId, config, baseDir, env, source) {
 		port: runtimeTarget.port,
 		proxy: proxy ?? (typeof source.proxy === "string" ? source.proxy : void 0),
 		variables: normalizeStringRecord(apiConfig.variables ?? source.variables),
-		secrets: normalizeStringArray(apiConfig.secrets ?? source.secrets)
+		secrets: normalizeStringArray(apiConfig.secrets ?? source.secrets),
+		ui: uiRuntime ? {
+			name: typeof uiConfig?.name === "string" ? uiConfig.name : `${apiName}-ui`,
+			url: uiRuntime.url,
+			entry: uiRuntime.url ? `${uiRuntime.url.replace(/\/$/, "")}/mf-manifest.json` : "/mf-manifest.json",
+			source: uiRuntime.source,
+			localPath: uiRuntime.localPath,
+			port: uiRuntime.port,
+			integrity: uiRuntime.source === "remote" && typeof uiConfig?.integrity === "string" ? uiConfig.integrity : void 0
+		} : void 0,
+		sidebar,
+		routes
 	};
 }
 function resolvePluginRuntimeName(explicitName, localPath, fallback) {
@@ -218,33 +377,8 @@ function resolvePluginRuntimeName(explicitName, localPath, fallback) {
 	} catch {}
 	return fallback;
 }
-async function resolveBosConfigInput(input, baseDir, visited, chain) {
-	if (input.extends) {
-		const parentBaseDir = input.extends.startsWith("bos://") ? baseDir : (0, node_path.isAbsolute)(input.extends) ? (0, node_path.dirname)(input.extends) : baseDir;
-		return {
-			config: mergeConfigs(await resolveConfigWithExtends(input.extends, parentBaseDir, visited, chain), input),
-			baseDir: parentBaseDir
-		};
-	}
-	return {
-		config: input,
-		baseDir
-	};
-}
-function mergeValues(parent, child) {
-	if (Array.isArray(parent) && Array.isArray(child)) return child;
-	if (isPlainObject(parent) && isPlainObject(child)) {
-		const merged = { ...parent };
-		for (const [key, value] of Object.entries(child)) merged[key] = key in merged ? mergeValues(merged[key], value) : value;
-		return merged;
-	}
-	return child ?? parent;
-}
-function isPlainObject(value) {
-	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
-}
 function normalizeStringRecord(value) {
-	if (!isPlainObject(value)) return void 0;
+	if (!require_merge.isPlainObject(value)) return void 0;
 	const out = {};
 	for (const [key, raw] of Object.entries(value)) if (typeof raw === "string") out[key] = raw;
 	return Object.keys(out).length > 0 ? out : void 0;
@@ -260,7 +394,7 @@ function resolveRuntimeTarget(value, baseDir, defaultSource = "remote") {
 		url: ""
 	};
 	if (value.startsWith(LOCAL_PREFIX)) {
-		const localTarget = value.slice(6).trim();
+		const localTarget = value?.slice(6).trim();
 		if (!localTarget) throw new Error(`Invalid local development target: ${value}`);
 		const localPath = (0, node_path.resolve)(baseDir, localTarget);
 		if (!(0, node_fs.existsSync)(localPath)) return {
@@ -304,18 +438,26 @@ function parsePort(url) {
 }
 
 //#endregion
+exports.BOS_CONFIG_ORDER = require_merge.BOS_CONFIG_ORDER;
 exports.BosConfigSchema = require_types.BosConfigSchema;
+exports.buildRuntimeConfig = buildRuntimeConfig;
 exports.buildRuntimePluginsForConfig = buildRuntimePluginsForConfig;
 exports.clearConfigCache = clearConfigCache;
 exports.findConfigPath = findConfigPath;
 exports.getConfig = getConfig;
 exports.getHostDevelopmentPort = getHostDevelopmentPort;
 exports.getProjectRoot = getProjectRoot;
+exports.getResolvedConfigPath = getResolvedConfigPath;
 exports.isLocalDevelopmentTarget = isLocalDevelopmentTarget;
 exports.loadBosConfig = loadBosConfig;
 exports.loadConfig = loadConfig;
+exports.loadResolvedConfig = loadResolvedConfig;
 exports.parsePort = parsePort;
+exports.readBosConfigForBuild = readBosConfigForBuild;
+exports.rebuildOrderedConfig = require_merge.rebuildOrderedConfig;
+exports.resolveBosConfigPath = resolveBosConfigPath;
 exports.resolveDevelopmentHostUrl = resolveDevelopmentHostUrl;
 exports.resolveLocalDevelopmentPath = resolveLocalDevelopmentPath;
 exports.resolvePluginRuntimeName = resolvePluginRuntimeName;
+exports.writeResolvedConfig = writeResolvedConfig;
 //# sourceMappingURL=config.cjs.map