everything-dev 1.12.4 → 1.14.0

package/dist/utils/path-match.cjs

@@ -0,0 +1,18 @@
+
+//#region src/utils/path-match.ts
+function isPathExcluded(filePath, excludePatterns) {
+	if (excludePatterns.length === 0) return false;
+	for (const pattern of excludePatterns) if (pattern.endsWith("/**")) {
+		const prefix = pattern.slice(0, -3);
+		if (filePath.startsWith(`${prefix}/`) || filePath === prefix) return true;
+	} else if (pattern.endsWith("/*")) {
+		const prefix = pattern.slice(0, -2);
+		const slashIdx = filePath.indexOf("/", prefix.length + 1);
+		if (filePath.startsWith(`${prefix}/`) && slashIdx === -1) return true;
+	} else if (filePath === pattern || filePath.startsWith(`${pattern}/`)) return true;
+	return false;
+}
+
+//#endregion
+exports.isPathExcluded = isPathExcluded;
+//# sourceMappingURL=path-match.cjs.map

package/dist/utils/path-match.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-match.cjs","names":[],"sources":["../../src/utils/path-match.ts"],"sourcesContent":["export function isPathExcluded(filePath: string, excludePatterns: string[]): boolean {\n  if (excludePatterns.length === 0) return false;\n  for (const pattern of excludePatterns) {\n    if (pattern.endsWith(\"/**\")) {\n      const prefix = pattern.slice(0, -3);\n      if (filePath.startsWith(`${prefix}/`) || filePath === prefix) return true;\n    } else if (pattern.endsWith(\"/*\")) {\n      const prefix = pattern.slice(0, -2);\n      const slashIdx = filePath.indexOf(\"/\", prefix.length + 1);\n      if (filePath.startsWith(`${prefix}/`) && slashIdx === -1) return true;\n    } else if (filePath === pattern || filePath.startsWith(`${pattern}/`)) {\n      return true;\n    }\n  }\n  return false;\n}\n"],"mappings":";;AAAA,SAAgB,eAAe,UAAkB,iBAAoC;AACnF,KAAI,gBAAgB,WAAW,EAAG,QAAO;AACzC,MAAK,MAAM,WAAW,gBACpB,KAAI,QAAQ,SAAS,MAAM,EAAE;EAC3B,MAAM,SAAS,QAAQ,MAAM,GAAG,GAAG;AACnC,MAAI,SAAS,WAAW,GAAG,OAAO,GAAG,IAAI,aAAa,OAAQ,QAAO;YAC5D,QAAQ,SAAS,KAAK,EAAE;EACjC,MAAM,SAAS,QAAQ,MAAM,GAAG,GAAG;EACnC,MAAM,WAAW,SAAS,QAAQ,KAAK,OAAO,SAAS,EAAE;AACzD,MAAI,SAAS,WAAW,GAAG,OAAO,GAAG,IAAI,aAAa,GAAI,QAAO;YACxD,aAAa,WAAW,SAAS,WAAW,GAAG,QAAQ,GAAG,CACnE,QAAO;AAGX,QAAO"}

package/dist/utils/path-match.mjs

@@ -0,0 +1,17 @@
+//#region src/utils/path-match.ts
+function isPathExcluded(filePath, excludePatterns) {
+	if (excludePatterns.length === 0) return false;
+	for (const pattern of excludePatterns) if (pattern.endsWith("/**")) {
+		const prefix = pattern.slice(0, -3);
+		if (filePath.startsWith(`${prefix}/`) || filePath === prefix) return true;
+	} else if (pattern.endsWith("/*")) {
+		const prefix = pattern.slice(0, -2);
+		const slashIdx = filePath.indexOf("/", prefix.length + 1);
+		if (filePath.startsWith(`${prefix}/`) && slashIdx === -1) return true;
+	} else if (filePath === pattern || filePath.startsWith(`${pattern}/`)) return true;
+	return false;
+}
+
+//#endregion
+export { isPathExcluded };
+//# sourceMappingURL=path-match.mjs.map

package/dist/utils/path-match.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-match.mjs","names":[],"sources":["../../src/utils/path-match.ts"],"sourcesContent":["export function isPathExcluded(filePath: string, excludePatterns: string[]): boolean {\n  if (excludePatterns.length === 0) return false;\n  for (const pattern of excludePatterns) {\n    if (pattern.endsWith(\"/**\")) {\n      const prefix = pattern.slice(0, -3);\n      if (filePath.startsWith(`${prefix}/`) || filePath === prefix) return true;\n    } else if (pattern.endsWith(\"/*\")) {\n      const prefix = pattern.slice(0, -2);\n      const slashIdx = filePath.indexOf(\"/\", prefix.length + 1);\n      if (filePath.startsWith(`${prefix}/`) && slashIdx === -1) return true;\n    } else if (filePath === pattern || filePath.startsWith(`${pattern}/`)) {\n      return true;\n    }\n  }\n  return false;\n}\n"],"mappings":";AAAA,SAAgB,eAAe,UAAkB,iBAAoC;AACnF,KAAI,gBAAgB,WAAW,EAAG,QAAO;AACzC,MAAK,MAAM,WAAW,gBACpB,KAAI,QAAQ,SAAS,MAAM,EAAE;EAC3B,MAAM,SAAS,QAAQ,MAAM,GAAG,GAAG;AACnC,MAAI,SAAS,WAAW,GAAG,OAAO,GAAG,IAAI,aAAa,OAAQ,QAAO;YAC5D,QAAQ,SAAS,KAAK,EAAE;EACjC,MAAM,SAAS,QAAQ,MAAM,GAAG,GAAG;EACnC,MAAM,WAAW,SAAS,QAAQ,KAAK,OAAO,SAAS,EAAE;AACzD,MAAI,SAAS,WAAW,GAAG,OAAO,GAAG,IAAI,aAAa,GAAI,QAAO;YACxD,aAAa,WAAW,SAAS,WAAW,GAAG,QAAQ,GAAG,CACnE,QAAO;AAGX,QAAO"}

package/dist/utils/save-config.cjs

@@ -0,0 +1,19 @@
+const require_runtime = require('../_virtual/_rolldown/runtime.cjs');
+const require_merge = require('../merge.cjs');
+let node_fs = require("node:fs");
+let node_path = require("node:path");
+
+//#region src/utils/save-config.ts
+async function saveBosConfig(configDir, config) {
+	const filePath = (0, node_path.join)(configDir, "bos.config.json");
+	const ordered = require_merge.rebuildOrderedConfig(config);
+	const next = `${JSON.stringify(ordered, null, 2)}\n`;
+	try {
+		if ((0, node_fs.readFileSync)(filePath, "utf8") === next) return;
+	} catch {}
+	(0, node_fs.writeFileSync)(filePath, next);
+}
+
+//#endregion
+exports.saveBosConfig = saveBosConfig;
+//# sourceMappingURL=save-config.cjs.map

package/dist/utils/save-config.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"save-config.cjs","names":["rebuildOrderedConfig"],"sources":["../../src/utils/save-config.ts"],"sourcesContent":["import { readFileSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { rebuildOrderedConfig } from \"../merge\";\nimport type { BosConfig } from \"../types\";\n\nexport async function saveBosConfig(\n  configDir: string,\n  config: BosConfig | Record<string, unknown>,\n): Promise<void> {\n  const filePath = join(configDir, \"bos.config.json\");\n  const ordered = rebuildOrderedConfig(config as Record<string, unknown>);\n  const next = `${JSON.stringify(ordered, null, 2)}\\n`;\n  try {\n    if (readFileSync(filePath, \"utf8\") === next) return;\n  } catch {\n    // file does not exist yet\n  }\n\n  writeFileSync(filePath, next);\n}\n"],"mappings":";;;;;;AAKA,eAAsB,cACpB,WACA,QACe;CACf,MAAM,+BAAgB,WAAW,kBAAkB;CACnD,MAAM,UAAUA,mCAAqB,OAAkC;CACvE,MAAM,OAAO,GAAG,KAAK,UAAU,SAAS,MAAM,EAAE,CAAC;AACjD,KAAI;AACF,gCAAiB,UAAU,OAAO,KAAK,KAAM;SACvC;AAIR,4BAAc,UAAU,KAAK"}

package/dist/utils/save-config.mjs

@@ -0,0 +1,18 @@
+import { rebuildOrderedConfig } from "../merge.mjs";
+import { readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+
+//#region src/utils/save-config.ts
+async function saveBosConfig(configDir, config) {
+	const filePath = join(configDir, "bos.config.json");
+	const ordered = rebuildOrderedConfig(config);
+	const next = `${JSON.stringify(ordered, null, 2)}\n`;
+	try {
+		if (readFileSync(filePath, "utf8") === next) return;
+	} catch {}
+	writeFileSync(filePath, next);
+}
+
+//#endregion
+export { saveBosConfig };
+//# sourceMappingURL=save-config.mjs.map

package/dist/utils/save-config.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"save-config.mjs","names":[],"sources":["../../src/utils/save-config.ts"],"sourcesContent":["import { readFileSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { rebuildOrderedConfig } from \"../merge\";\nimport type { BosConfig } from \"../types\";\n\nexport async function saveBosConfig(\n  configDir: string,\n  config: BosConfig | Record<string, unknown>,\n): Promise<void> {\n  const filePath = join(configDir, \"bos.config.json\");\n  const ordered = rebuildOrderedConfig(config as Record<string, unknown>);\n  const next = `${JSON.stringify(ordered, null, 2)}\\n`;\n  try {\n    if (readFileSync(filePath, \"utf8\") === next) return;\n  } catch {\n    // file does not exist yet\n  }\n\n  writeFileSync(filePath, next);\n}\n"],"mappings":";;;;;AAKA,eAAsB,cACpB,WACA,QACe;CACf,MAAM,WAAW,KAAK,WAAW,kBAAkB;CACnD,MAAM,UAAU,qBAAqB,OAAkC;CACvE,MAAM,OAAO,GAAG,KAAK,UAAU,SAAS,MAAM,EAAE,CAAC;AACjD,KAAI;AACF,MAAI,aAAa,UAAU,OAAO,KAAK,KAAM;SACvC;AAIR,eAAc,UAAU,KAAK"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "everything-dev",
-  "version": "1.12.4",
+  "version": "1.14.0",
   "type": "module",
   "publishConfig": {
     "access": "public"
@@ -116,13 +116,12 @@
   "files": [
     "dist",
     "src",
-    "cli.js",
     "skills",
     "!skills/_artifacts"
   ],
   "bin": {
-    "everything-dev": "./cli.js",
-    "bos": "./cli.js"
+    "everything-dev": "./dist/cli.mjs",
+    "bos": "./dist/cli.mjs"
   },
   "keywords": [
     "tanstack-intent"
@@ -154,11 +153,12 @@
     "@orpc/server": "^1.13.4",
     "@orpc/zod": "^1.13.4",
     "chalk": "^5.6.2",
+    "defu": "^6.1.7",
     "effect": "^3.21.0",
-    "every-plugin": "^2.5.8",
+    "every-plugin": "^2.5.9",
     "glob": "^13.0.6",
     "gradient-string": "^3.0.0",
-    "hono": "^4.7.11",
+    "hono": "^4.12.18",
     "ink": "^6.8.0",
     "tar": "^7.4.3"
   },

package/skills/dev-workflow/SKILL.md

@@ -86,6 +86,14 @@ On page refresh:
 
 This means a new deployment requires a host restart to pick up new URLs.
 
+### Resolved Config (`.bos/bos.resolved-config.json`)
+
+`bos dev` and `bos build` write the fully-merged config to `.bos/bos.resolved-config.json` (gitignored). This file includes `_resolved` metadata with env, timestamp, and extends chain.
+
+**`bos.config.json` is NOT modified during dev.** Only `bos publish --deploy`, `bos plugin publish/add/remove`, and `bos sync` write to `bos.config.json`.
+
+Build configs (rsbuild/rspack) read from `.bos/bos.resolved-config.json` first, falling back to `bos.config.json`. This allows slim child configs with `extends` to work correctly — the merged parent+child config is what the build sees.
+
 ## Debugging
 
 ```bash

package/skills/extends-config/SKILL.md

@@ -0,0 +1,132 @@
+---
+name: extends-config
+description: How bos.config.json extends chains work, deep merge semantics, resolved config lifecycle, env-specific extends, and canonical field ordering. Use when debugging extends inheritance, configuring per-environment parents, understanding what dev writes vs publish writes, or reasoning about config merging.
+metadata:
+  sources: "src/merge.ts,src/config.ts,src/shared.ts,src/types.ts"
+---
+
+# extends & Config Merging
+
+## extends Field
+
+The `extends` field in `bos.config.json` specifies a parent config to inherit from. Supports two forms:
+
+### String (all environments use same parent)
+```json
+{ "extends": "bos://dev.everything.near/everything.dev" }
+```
+
+### Object (per-environment parent)
+```json
+{
+  "extends": {
+    "development": "bos://dev.everything.near/everything.dev",
+    "production": "bos://dev.everything.near/everything.dev",
+    "staging": "bos://staging.everything.near/everything.dev"
+  }
+}
+```
+
+Fallback chain: requested env → `production` → first defined value.
+
+## Deep Merge Semantics
+
+Uses `defu` (with `createDefu` for custom merge rules):
+
+| Field type | Merge behavior |
+|-----------|---------------|
+| Scalars (account, domain, repository) | Child overrides parent; parent inherited when child omits |
+| `shared.ui.*` dep entries | Deep merged — child overrides specific keys, parent deps preserved |
+| `plugins` | Deep merged — child overrides per-key, parent plugins preserved unless removed |
+| `secrets` arrays | Unioned (deduplicated) |
+| `routes` arrays | Child replaces parent |
+| `variables` | Deep merged per-key |
+
+### Null Sentinel Removal
+
+Set a plugin to `null` to explicitly remove an inherited plugin:
+```json
+{
+  "plugins": {
+    "template": null
+  }
+}
+```
+
+## Resolved Config: `.bos/bos.resolved-config.json`
+
+**Generated by**: `bos dev`, `bos build`, `syncAndGenerateSharedUi()`  
+**Gitignored**: Yes (inside `.bos/`)
+
+When `bos dev` or `bos build` runs:
+1. The full extends chain is resolved in memory
+2. The merged config is written to `.bos/bos.resolved-config.json`
+3. **`bos.config.json` is NOT modified** during dev
+
+Structure:
+```json
+{
+  "_resolved": {
+    "env": "development",
+    "resolvedAt": "2026-05-11T...",
+    "extendsChain": ["bos://dev.everything.near/everything.dev"]
+  },
+  "account": "me.near",
+  "domain": "my.dev",
+  "shared": { ... },
+  "app": { ... },
+  "plugins": { ... }
+}
+```
+
+### Build configs read resolved config first
+
+All build configs (ui/rsbuild.config.ts, host/rsbuild.config.ts, api/rspack.config.js, plugins/*/rspack.config.js) try `.bos/bos.resolved-config.json` first, falling back to `bos.config.json`.
+
+The `_resolved` metadata is stripped before use.
+
+### When bos.config.json IS written
+
+| Command | Writes bos.config.json? | Why |
+|---------|------------------------|-----|
+| `bos dev` | No | Uses resolved config |
+| `bos build` | No | Uses resolved config |
+| `bos publish --deploy` | Yes | Snapshot moment — pins production URLs + versions |
+| `bos plugin publish` | Yes | Records production URL + integrity |
+| `bos plugin add/remove` | Yes | Changes project's own plugin list |
+| `bos sync` | Yes | Merges template updates into local config |
+
+### Remote host mode (bos->catalog)
+
+When host is remote, `syncAndGenerateSharedUi()` reads versions from `bos.config.json` and writes them into `package.json` catalog. No resolved config is written — the remote host reads `bos.config.json` directly.
+
+## Canonical Field Ordering
+
+`BOS_CONFIG_ORDER` enforces consistent key order:
+
+1. `extends` — always first
+2. `account`
+3. `domain`
+4. `testnet`
+5. `staging`
+6. `repository`
+7. `app`
+8. `plugins`
+9. `shared`
+
+Unknown keys go after known keys. `rebuildOrderedConfig()` is applied before every write.
+
+## API
+
+From `src/config.ts`:
+- `writeResolvedConfig(configDir, config, env, extendsChain?)` — writes `.bos/bos.resolved-config.json`
+- `loadResolvedConfig(configDir)` — reads resolved config, returns `BosConfig | null`
+- `resolveBosConfigPath(configDir)` — returns resolved config path if exists, else `bos.config.json`
+- `readBosConfigForBuild(configDir)` — reads resolved config stripping `_resolved`, falls back to `bos.config.json`
+
+From `src/merge.ts`:
+- `mergeBosConfigWithExtends(parent, child)` — deep merge for extends chain
+- `mergeBosConfigWithTemplate(local, template)` — merge for sync (local wins)
+- `resolveExtendsRef(extendsField, env)` — resolve string|object extends for a given env
+- `rebuildOrderedConfig(config)` — enforce canonical ordering
+- `BOS_CONFIG_ORDER` — ordered field names

package/skills/init-upgrade/SKILL.md

@@ -0,0 +1,128 @@
+---
+name: init-upgrade
+description: bos init, bos sync, and bos upgrade workflows — template download, snapshot-based conflict detection, package version bumps, and what .templatekeep/.templatesync-exclude control. Use when scaffolding new projects, syncing upstream changes, or upgrading framework packages.
+metadata:
+  sources: "src/cli/init.ts,src/cli/sync.ts,src/cli/upgrade.ts,src/cli/snapshot.ts"
+---
+
+# bos init, sync, upgrade
+
+## bos init
+
+Creates a new project from a published template:
+
+```bash
+bos init                              # Interactive
+bos init -a my.near --domain my.dev   # Skip prompts
+bos init --with-host                  # Include host in workspace
+```
+
+### Flow
+1. Fetch parent config from FastKV (`bos://account/gateway`)
+2. Download template tarball from parent's `repository` URL
+3. Copy files matching `.templatekeep` patterns
+4. Filter plugins: only included plugins + their routes are copied
+5. `personalizeConfig()` — sets `extends`, `account`, `domain`, removes production URLs
+6. `resolveWorkspaceRefs()` — normalizes package manifests, sets catalog refs
+7. Write initial snapshot (`.bos/sync-snapshot.json`)
+8. `bun install` + `bos types gen`
+
+### .templatekeep
+
+Lists glob patterns for files that should be copied from template:
+- Scaffold runtime files (bos.config.json, package.json, biome.json, rsbuild configs)
+- UI structure (routes/__root.tsx, components/index.ts, providers, hooks, lib)
+- API structure (contract.ts, index.ts, db/, drizzle.config.ts)
+- Plugin template (`plugins/_template/**`)
+- GitHub workflows (`.github/templates/**` → `.github/`)
+
+### .templatesync-exclude
+
+Files copied on init but **never overwritten** on sync:
+- `ui/src/components/**` — user-owned after init
+- `ui/src/styles.css` — user-owned
+- `ui/src/routes/_layout/**` — user-owned routes
+- `api/src/contract.ts`, `api/src/index.ts`, `api/src/db/schema.ts` — user-owned business logic
+- Generated files (`*.gen.ts`) — always regenerated
+
+## bos sync
+
+Pulls updates from the parent template:
+
+```bash
+bos sync                 # Sync from extends reference
+bos sync --force         # Overwrite even locally modified files
+bos sync --files         # Also sync template files
+```
+
+### Snapshot-based conflict detection
+
+Uses `.bos/sync-snapshot.json` to track which files came from the template and their hashes:
+
+| Local state | Template changed? | Action |
+|------------|-------------------|--------|
+| No local file | Yes | Add |
+| Matches snapshot | Yes | Update (safe) |
+| Modified since snapshot | Yes | Skip (unless `--force`) |
+| Matches template | No | Skip |
+
+Framework-owned files (from `FRAMEWORK_OWNED_SYNC_FILES`) are always updated when changed.
+
+### What gets synced
+
+From parent template → local:
+- `app.*.production` — Zephyr URLs
+- `shared` — dependency versions
+- Framework-owned files (rsbuild configs, routers, etc.)
+
+What stays local:
+- `account`, `testnet` — your NEAR accounts
+- `app.*.development` — local dev paths
+
+### extends handling
+
+Sync reads the `extends` field (string or object form) to find the parent. For object extends, uses the `production` URL to locate the template source.
+
+## bos upgrade
+
+Bumps `everything-dev` and `every-plugin` across all workspaces:
+
+```bash
+bos upgrade              # Check for new versions, update, then sync
+bos upgrade --dry-run    # Preview without making changes
+```
+
+### Flow
+1. Check npm registry for latest versions of `everything-dev` and `every-plugin`
+2. Update root `package.json` workspaces.catalog
+3. Update all workspace `package.json` to use `catalog:` references
+4. `bun install` + `bos types gen`
+5. Run `bos sync` to pull template updates matching new version
+6. Rewrite legacy UI imports (e.g., `from "@/auth"` → `from "@/app"`)
+7. Remove obsolete files
+
+### Package ref strategy
+
+Workspace packages use `catalog:` refs so a single version bump in root catalog propagates everywhere. Skips `workspace:*` and `file:` refs.
+
+## bos publish
+
+```bash
+bos publish                  # Publish config to FastKV
+bos publish --deploy         # Build, deploy to CDN, then publish
+```
+
+On `--deploy`:
+1. Build all workspace targets
+2. Deploy to Zephyr CDN → auto-updates `bos.config.json` with production URLs + integrity
+3. Re-read config to pick up deploy updates
+4. Publish full config to FastKV registry
+
+**This is the only time `bos dev`-style writes touch `bos.config.json`** — it's the snapshot moment.
+
+## Canonical Ordering
+
+All writes to `bos.config.json` enforce `BOS_CONFIG_ORDER`:
+`extends` → `account` → `domain` → `testnet` → `staging` → `repository` → `app` → `plugins` → `shared`
+
+Unknown keys go after known keys.

package/skills/publish-sync/SKILL.md

@@ -114,6 +114,36 @@ All runtime config lives in `bos.config.json`. Key sections:
 - `plugins.{key}` — Plugin configs with variables, secrets, routes
 - `shared.ui`, `shared.api` — Module Federation shared dependency versions
 
+### extends
+
+Config can inherit from a parent via `extends`:
+```json
+{ "extends": "bos://dev.everything.near/everything.dev" }
+```
+
+Or per-environment:
+```json
+{
+  "extends": {
+    "development": "bos://dev.everything.near/everything.dev",
+    "production": "bos://dev.everything.near/everything.dev",
+    "staging": "bos://staging.everything.near/everything.dev"
+  }
+}
+```
+
+Deep merge: child overrides parent. Plugins are deep-merged (set to `null` to remove). `secrets` arrays are unioned. See the `extends-config` skill for full details.
+
+### What bos dev writes vs bos publish writes
+
+| Mode | Writes to | File |
+|------|-----------|------|
+| `bos dev` | `.bos/bos.resolved-config.json` | Full merged config (gitignored) |
+| `bos build` | `.bos/bos.resolved-config.json` | Full merged config |
+| `bos publish --deploy` | `bos.config.json` | Snapshot with pinned production URLs |
+| `bos plugin publish` | `bos.config.json` | Records production URL + integrity |
+| `bos sync` | `bos.config.json` | Merges template updates |
+
 ## Troubleshooting
 
 ```bash

package/src/app.ts

@@ -51,6 +51,9 @@ export function detectLocalPackages(
     if (pluginConfig.localPath && existsSync(join(pluginConfig.localPath, "package.json"))) {
       packages.push(`plugin:${pluginId}`);
     }
+    if (pluginConfig.ui?.localPath && existsSync(join(pluginConfig.ui.localPath, "package.json"))) {
+      packages.push(`plugin-ui:${pluginId}`);
+    }
   }
 
   const authLocalPath =
@@ -169,13 +172,20 @@ export async function prepareDevelopmentRuntimeConfig(
     let pluginBasePort = DEFAULT_PLUGIN_PORT_START;
 
     for (const [pluginId, plugin] of entries) {
-      if (plugin.source !== "local" || !plugin.localPath) {
-        continue;
+      if (plugin.source === "local" && plugin.localPath) {
+        const pluginPort = await pickAvailablePort(plugin.port ?? pluginBasePort, usedPorts);
+        next.plugins[pluginId] = withLocalRuntimeUrl(plugin, pluginPort);
+        pluginBasePort = pluginPort + 1;
       }
 
-      const pluginPort = await pickAvailablePort(plugin.port ?? pluginBasePort, usedPorts);
-      next.plugins[pluginId] = withLocalRuntimeUrl(plugin, pluginPort);
-      pluginBasePort = pluginPort + 1;
+      if (plugin.ui?.source === "local" && plugin.ui.localPath) {
+        const uiPort = await pickAvailablePort(plugin.ui.port ?? pluginBasePort, usedPorts);
+        next.plugins[pluginId] = {
+          ...next.plugins[pluginId]!,
+          ui: withLocalRuntimeUrl(plugin.ui, uiPort),
+        };
+        pluginBasePort = uiPort + 1;
+      }
     }
   }