everything-dev 1.33.6 → 1.35.1

package/dist/shared-deps.cjs

@@ -0,0 +1,201 @@
+const require_runtime = require('./_virtual/_rolldown/runtime.cjs');
+const require_merge = require('./merge.cjs');
+const require_types = require('./types.cjs');
+let node_fs = require("node:fs");
+let node_path = require("node:path");
+let node_crypto = require("node:crypto");
+
+//#region src/shared-deps.ts
+function sha256(input) {
+	return (0, node_crypto.createHash)("sha256").update(input).digest("hex");
+}
+function extractSemverExact(input) {
+	if (typeof input !== "string") return null;
+	const match = input.match(/\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?/);
+	return match ? match[0] : null;
+}
+function caretRange(version) {
+	return `^${version}`;
+}
+function stableDepsObject(deps) {
+	const keys = Object.keys(deps).sort((a, b) => a.localeCompare(b));
+	const out = {};
+	for (const key of keys) out[key] = deps[key];
+	return out;
+}
+function normalizeSharedDepConfig(config) {
+	return {
+		version: config.version,
+		requiredVersion: config.requiredVersion ?? false,
+		singleton: config.singleton ?? false,
+		eager: config.eager ?? false,
+		strictVersion: config.strictVersion ?? false,
+		shareScope: config.shareScope ?? "default"
+	};
+}
+function getObject(value) {
+	return require_merge.isPlainObject(value) ? value : void 0;
+}
+function getSharedDepsMap(value, source) {
+	if (value === void 0) return void 0;
+	if (!require_types.SharedDepMapSchema.safeParse(value).success) throw new Error(`Invalid shared dependency map at ${source}`);
+	return value;
+}
+function writeFileIfChanged(filePath, nextContent) {
+	try {
+		if ((0, node_fs.readFileSync)(filePath, "utf-8") === nextContent) return false;
+	} catch {}
+	(0, node_fs.writeFileSync)(filePath, nextContent);
+	return true;
+}
+function fingerprintResolved(deps) {
+	return sha256(JSON.stringify(stableDepsObject(deps)));
+}
+function isSameSharedDepConfig(a, b) {
+	const left = normalizeSharedDepConfig(a);
+	const right = normalizeSharedDepConfig(b);
+	return left.version === right.version && left.requiredVersion === right.requiredVersion && left.singleton === right.singleton && left.eager === right.eager && left.strictVersion === right.strictVersion && left.shareScope === right.shareScope;
+}
+function collectSharedDepRefs(bosConfig) {
+	const refs = /* @__PURE__ */ new Map();
+	const app = getObject(bosConfig.app);
+	const appUi = getObject(app?.ui);
+	const appApi = getObject(app?.api);
+	const appAuth = getObject(app?.auth);
+	const plugins = getObject(bosConfig.plugins);
+	if (appUi && "shared" in appUi) throw new Error("app.ui.shared is no longer supported. Move shared deps to app.api.shared, app.auth.shared, or plugins.*.shared.");
+	const append = (source, shared) => {
+		if (!shared) return;
+		for (const [name, config] of Object.entries(shared)) {
+			const existing = refs.get(name);
+			if (!existing) {
+				refs.set(name, [{
+					source,
+					config
+				}]);
+				continue;
+			}
+			if (!isSameSharedDepConfig(existing[0].config, config)) {
+				const previous = existing.map((ref) => ref.source).join(", ");
+				throw new Error(`Conflicting shared dependency "${name}" between ${previous} and ${source}`);
+			}
+			existing.push({
+				source,
+				config
+			});
+		}
+	};
+	append("app.api", getSharedDepsMap(appApi?.shared, "app.api.shared"));
+	append("app.auth", getSharedDepsMap(appAuth?.shared, "app.auth.shared"));
+	for (const [pluginId, plugin] of Object.entries(plugins ?? {})) {
+		const pluginRecord = getObject(plugin);
+		if (!pluginRecord) continue;
+		const pluginUi = getObject(getObject(pluginRecord.app)?.ui);
+		if (pluginUi && "shared" in pluginUi) throw new Error(`app.ui.shared is no longer supported in plugins.${pluginId}. Move shared deps to app.api.shared, app.auth.shared, or plugins.*.shared.`);
+		append(`plugins.${pluginId}`, getSharedDepsMap(pluginRecord.shared, `plugins.${pluginId}.shared`));
+	}
+	return Object.fromEntries(refs);
+}
+async function syncResolvedSharedDeps(opts) {
+	const bosConfigPath = (0, node_path.join)(opts.configDir, "bos.config.json");
+	const resolvedConfigPath = (0, node_path.join)(opts.configDir, ".bos", "bos.resolved-config.json");
+	const packageJsonPath = (0, node_path.join)(opts.configDir, "package.json");
+	const generatedPath = (0, node_path.join)(opts.configDir, ".bos", "generated", "shared-deps.json");
+	const bosConfig = opts.bosConfig ?? JSON.parse((0, node_fs.readFileSync)(bosConfigPath, "utf-8"));
+	if (!require_merge.isPlainObject(bosConfig)) throw new Error("bos.config.json must be an object");
+	const pkgJson = (0, node_fs.existsSync)(packageJsonPath) ? JSON.parse((0, node_fs.readFileSync)(packageJsonPath, "utf-8")) : {};
+	const originalBos = JSON.stringify(bosConfig);
+	const originalPkg = JSON.stringify(pkgJson);
+	const mode = opts.hostMode === "local" ? "catalog->bos" : "bos->catalog";
+	const refsByName = collectSharedDepRefs(bosConfig);
+	const catalog = pkgJson.workspaces?.catalog ?? {};
+	const resolvedDeps = {};
+	for (const [name, refs] of Object.entries(refsByName)) {
+		const first = refs[0];
+		if (!first) continue;
+		const exactFromConfig = extractSemverExact(first.config.version) ?? extractSemverExact(first.config.requiredVersion);
+		const exactFromCatalog = extractSemverExact(catalog[name]);
+		const version = mode === "catalog->bos" ? exactFromCatalog ?? exactFromConfig : exactFromConfig ?? exactFromCatalog;
+		if (!version) {
+			const sources = refs.map((ref) => ref.source).join(", ");
+			throw new Error(`Could not resolve exact version for shared dependency "${name}" from ${sources}`);
+		}
+		if (mode === "catalog->bos" && exactFromCatalog === null && exactFromConfig) catalog[name] = exactFromConfig;
+		if (mode === "bos->catalog" && catalog[name] !== version) catalog[name] = version;
+		for (const ref of refs) {
+			ref.config.version = version;
+			ref.config.requiredVersion = caretRange(version);
+			ref.config.shareScope = ref.config.shareScope ?? "default";
+		}
+		resolvedDeps[name] = {
+			name,
+			version,
+			requiredVersion: caretRange(version),
+			shareScope: first.config.shareScope ?? "default",
+			singleton: first.config.singleton ?? false,
+			eager: first.config.eager ?? false,
+			strictVersion: first.config.strictVersion ?? false,
+			sources: refs.map((ref) => ref.source).sort((a, b) => a.localeCompare(b))
+		};
+	}
+	if (!pkgJson.workspaces) pkgJson.workspaces = {
+		packages: [],
+		catalog: {}
+	};
+	pkgJson.workspaces.catalog = catalog;
+	const nextBos = JSON.stringify(bosConfig);
+	const nextPkg = JSON.stringify(pkgJson);
+	const bosConfigChanged = nextBos !== originalBos;
+	const catalogChanged = nextPkg !== originalPkg;
+	if (bosConfigChanged) {
+		const resolvedDir = (0, node_path.dirname)(resolvedConfigPath);
+		if (!(0, node_fs.existsSync)(resolvedDir)) (0, node_fs.mkdirSync)(resolvedDir, { recursive: true });
+		const ordered = require_merge.rebuildOrderedConfig(bosConfig);
+		const resolvedOutput = {
+			_resolved: {
+				env: opts.env ?? "development",
+				resolvedAt: (/* @__PURE__ */ new Date()).toISOString(),
+				extendsChain: opts.extendsChain ?? [],
+				source: "shared-sync"
+			},
+			...ordered
+		};
+		writeFileIfChanged(resolvedConfigPath, `${JSON.stringify(resolvedOutput, null, 2)}\n`);
+	}
+	if (catalogChanged) writeFileIfChanged(packageJsonPath, `${JSON.stringify(pkgJson, null, 2)}\n`);
+	const stableResolvedDeps = stableDepsObject(resolvedDeps);
+	const resolved = {
+		deps: stableResolvedDeps,
+		fingerprintSha256: fingerprintResolved(stableResolvedDeps)
+	};
+	const nextGenerated = {
+		schemaVersion: 1,
+		kind: "everything-dev/shared-deps",
+		generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+		deps: stableResolvedDeps,
+		fingerprintSha256: resolved.fingerprintSha256,
+		inputs: {
+			mode,
+			hostMode: opts.hostMode
+		}
+	};
+	let prevFingerprint = null;
+	try {
+		prevFingerprint = JSON.parse((0, node_fs.readFileSync)(generatedPath, "utf-8"))?.fingerprintSha256 ?? null;
+	} catch {}
+	(0, node_fs.mkdirSync)((0, node_path.dirname)(generatedPath), { recursive: true });
+	writeFileIfChanged(generatedPath, `${JSON.stringify(nextGenerated, null, 2)}\n`);
+	const generatedChanged = prevFingerprint !== nextGenerated.fingerprintSha256;
+	return {
+		mode,
+		hostMode: opts.hostMode,
+		bosConfigChanged,
+		catalogChanged,
+		generatedChanged,
+		resolved
+	};
+}
+
+//#endregion
+exports.syncResolvedSharedDeps = syncResolvedSharedDeps;
+//# sourceMappingURL=shared-deps.cjs.map

package/dist/shared-deps.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-deps.cjs","names":["isPlainObject","SharedDepMapSchema","rebuildOrderedConfig"],"sources":["../src/shared-deps.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { type BosEnv, isPlainObject, type ResolvedConfigMeta, rebuildOrderedConfig } from \"./merge\";\nimport { type SharedDepConfig, SharedDepMapSchema } from \"./types\";\n\ninterface PackageJson {\n  workspaces?: {\n    packages?: string[];\n    catalog?: Record<string, string>;\n  };\n}\n\ninterface SharedDepRef {\n  source: string;\n  config: SharedDepConfig;\n}\n\ntype SharedDepsConfig = Record<string, unknown>;\n\ninterface NormalizedSharedDepConfig {\n  version: string;\n  requiredVersion: string | false;\n  singleton: boolean;\n  eager: boolean;\n  strictVersion: boolean;\n  shareScope: string;\n}\n\nexport interface ResolvedSharedDep {\n  name: string;\n  version: string;\n  requiredVersion: string;\n  shareScope: string;\n  singleton: boolean;\n  eager: boolean;\n  strictVersion: boolean;\n  sources: string[];\n}\n\nexport interface ResolvedSharedDeps {\n  deps: Record<string, ResolvedSharedDep>;\n  fingerprintSha256: string;\n}\n\nexport interface SharedDepsSyncResult {\n  mode: \"catalog->bos\" | \"bos->catalog\";\n  hostMode: \"local\" | \"remote\";\n  bosConfigChanged: boolean;\n  catalogChanged: boolean;\n  generatedChanged: boolean;\n  resolved: ResolvedSharedDeps;\n}\n\nfunction sha256(input: string): string {\n  return createHash(\"sha256\").update(input).digest(\"hex\");\n}\n\nfunction extractSemverExact(input: unknown): string | null {\n  if (typeof input !== \"string\") return null;\n  const match = input.match(/\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?/);\n  return match ? match[0] : null;\n}\n\nfunction caretRange(version: string): string {\n  return `^${version}`;\n}\n\nfunction stableDepsObject(\n  deps: Record<string, ResolvedSharedDep>,\n): Record<string, ResolvedSharedDep> {\n  const keys = Object.keys(deps).sort((a, b) => a.localeCompare(b));\n  const out: Record<string, ResolvedSharedDep> = {};\n  for (const key of keys) {\n    out[key] = deps[key]!;\n  }\n  return out;\n}\n\nfunction normalizeSharedDepConfig(config: SharedDepConfig): NormalizedSharedDepConfig {\n  return {\n    version: config.version,\n    requiredVersion: config.requiredVersion ?? false,\n    singleton: config.singleton ?? false,\n    eager: config.eager ?? false,\n    strictVersion: config.strictVersion ?? false,\n    shareScope: config.shareScope ?? \"default\",\n  };\n}\n\nfunction getObject(value: unknown): Record<string, unknown> | undefined {\n  return isPlainObject(value) ? value : undefined;\n}\n\nfunction getSharedDepsMap(\n  value: unknown,\n  source: string,\n): Record<string, SharedDepConfig> | undefined {\n  if (value === undefined) return undefined;\n  const parsed = SharedDepMapSchema.safeParse(value);\n  if (!parsed.success) {\n    throw new Error(`Invalid shared dependency map at ${source}`);\n  }\n  return value as Record<string, SharedDepConfig>;\n}\n\nfunction writeFileIfChanged(filePath: string, nextContent: string): boolean {\n  try {\n    const current = readFileSync(filePath, \"utf-8\");\n    if (current === nextContent) return false;\n  } catch {\n    // file does not exist yet\n  }\n\n  writeFileSync(filePath, nextContent);\n  return true;\n}\n\nfunction fingerprintResolved(deps: Record<string, ResolvedSharedDep>): string {\n  return sha256(JSON.stringify(stableDepsObject(deps)));\n}\n\nfunction isSameSharedDepConfig(a: SharedDepConfig, b: SharedDepConfig): boolean {\n  const left = normalizeSharedDepConfig(a);\n  const right = normalizeSharedDepConfig(b);\n\n  return (\n    left.version === right.version &&\n    left.requiredVersion === right.requiredVersion &&\n    left.singleton === right.singleton &&\n    left.eager === right.eager &&\n    left.strictVersion === right.strictVersion &&\n    left.shareScope === right.shareScope\n  );\n}\n\nfunction collectSharedDepRefs(bosConfig: SharedDepsConfig): Record<string, SharedDepRef[]> {\n  const refs = new Map<string, SharedDepRef[]>();\n\n  const app = getObject(bosConfig.app);\n  const appUi = getObject(app?.ui);\n  const appApi = getObject(app?.api);\n  const appAuth = getObject(app?.auth);\n  const plugins = getObject(bosConfig.plugins);\n\n  if (appUi && \"shared\" in appUi) {\n    throw new Error(\n      \"app.ui.shared is no longer supported. Move shared deps to app.api.shared, app.auth.shared, or plugins.*.shared.\",\n    );\n  }\n\n  const append = (source: string, shared: Record<string, SharedDepConfig> | undefined) => {\n    if (!shared) return;\n\n    for (const [name, config] of Object.entries(shared)) {\n      const existing = refs.get(name);\n      if (!existing) {\n        refs.set(name, [{ source, config }]);\n        continue;\n      }\n\n      if (!isSameSharedDepConfig(existing[0]!.config, config)) {\n        const previous = existing.map((ref) => ref.source).join(\", \");\n        throw new Error(\n          `Conflicting shared dependency \"${name}\" between ${previous} and ${source}`,\n        );\n      }\n\n      existing.push({ source, config });\n    }\n  };\n\n  append(\"app.api\", getSharedDepsMap(appApi?.shared, \"app.api.shared\"));\n  append(\"app.auth\", getSharedDepsMap(appAuth?.shared, \"app.auth.shared\"));\n\n  for (const [pluginId, plugin] of Object.entries(plugins ?? {})) {\n    const pluginRecord = getObject(plugin);\n    if (!pluginRecord) continue;\n\n    const pluginApp = getObject(pluginRecord.app);\n    const pluginUi = getObject(pluginApp?.ui);\n    if (pluginUi && \"shared\" in pluginUi) {\n      throw new Error(\n        `app.ui.shared is no longer supported in plugins.${pluginId}. Move shared deps to app.api.shared, app.auth.shared, or plugins.*.shared.`,\n      );\n    }\n    append(\n      `plugins.${pluginId}`,\n      getSharedDepsMap(pluginRecord.shared, `plugins.${pluginId}.shared`),\n    );\n  }\n\n  return Object.fromEntries(refs);\n}\n\nexport async function syncResolvedSharedDeps(opts: {\n  configDir: string;\n  hostMode: \"local\" | \"remote\";\n  bosConfig?: SharedDepsConfig;\n  env?: BosEnv;\n  extendsChain?: string[];\n}): Promise<SharedDepsSyncResult> {\n  const bosConfigPath = join(opts.configDir, \"bos.config.json\");\n  const resolvedConfigPath = join(opts.configDir, \".bos\", \"bos.resolved-config.json\");\n  const packageJsonPath = join(opts.configDir, \"package.json\");\n  const generatedPath = join(opts.configDir, \".bos\", \"generated\", \"shared-deps.json\");\n\n  const bosConfig: unknown = opts.bosConfig ?? JSON.parse(readFileSync(bosConfigPath, \"utf-8\"));\n  if (!isPlainObject(bosConfig)) {\n    throw new Error(\"bos.config.json must be an object\");\n  }\n\n  const pkgJson = existsSync(packageJsonPath)\n    ? (JSON.parse(readFileSync(packageJsonPath, \"utf-8\")) as PackageJson)\n    : {};\n\n  const originalBos = JSON.stringify(bosConfig);\n  const originalPkg = JSON.stringify(pkgJson);\n\n  const mode = opts.hostMode === \"local\" ? \"catalog->bos\" : \"bos->catalog\";\n  const refsByName = collectSharedDepRefs(bosConfig);\n  const catalog = pkgJson.workspaces?.catalog ?? {};\n\n  const resolvedDeps: Record<string, ResolvedSharedDep> = {};\n\n  for (const [name, refs] of Object.entries(refsByName)) {\n    const first = refs[0];\n    if (!first) continue;\n\n    const exactFromConfig =\n      extractSemverExact(first.config.version) ?? extractSemverExact(first.config.requiredVersion);\n    const exactFromCatalog = extractSemverExact(catalog[name]);\n    const version =\n      mode === \"catalog->bos\"\n        ? (exactFromCatalog ?? exactFromConfig)\n        : (exactFromConfig ?? exactFromCatalog);\n\n    if (!version) {\n      const sources = refs.map((ref) => ref.source).join(\", \");\n      throw new Error(\n        `Could not resolve exact version for shared dependency \"${name}\" from ${sources}`,\n      );\n    }\n\n    if (mode === \"catalog->bos\" && exactFromCatalog === null && exactFromConfig) {\n      catalog[name] = exactFromConfig;\n    }\n\n    if (mode === \"bos->catalog\" && catalog[name] !== version) {\n      catalog[name] = version;\n    }\n\n    for (const ref of refs) {\n      ref.config.version = version;\n      ref.config.requiredVersion = caretRange(version);\n      ref.config.shareScope = ref.config.shareScope ?? \"default\";\n    }\n\n    resolvedDeps[name] = {\n      name,\n      version,\n      requiredVersion: caretRange(version),\n      shareScope: first.config.shareScope ?? \"default\",\n      singleton: first.config.singleton ?? false,\n      eager: first.config.eager ?? false,\n      strictVersion: first.config.strictVersion ?? false,\n      sources: refs.map((ref) => ref.source).sort((a, b) => a.localeCompare(b)),\n    };\n  }\n\n  if (!pkgJson.workspaces) {\n    pkgJson.workspaces = { packages: [], catalog: {} };\n  }\n  pkgJson.workspaces.catalog = catalog;\n\n  const nextBos = JSON.stringify(bosConfig);\n  const nextPkg = JSON.stringify(pkgJson);\n  const bosConfigChanged = nextBos !== originalBos;\n  const catalogChanged = nextPkg !== originalPkg;\n\n  if (bosConfigChanged) {\n    const resolvedDir = dirname(resolvedConfigPath);\n    if (!existsSync(resolvedDir)) {\n      mkdirSync(resolvedDir, { recursive: true });\n    }\n\n    const ordered = rebuildOrderedConfig(bosConfig);\n    const meta: ResolvedConfigMeta = {\n      env: opts.env ?? \"development\",\n      resolvedAt: new Date().toISOString(),\n      extendsChain: opts.extendsChain ?? [],\n      source: \"shared-sync\",\n    };\n    const resolvedOutput = {\n      _resolved: meta,\n      ...ordered,\n    };\n\n    writeFileIfChanged(resolvedConfigPath, `${JSON.stringify(resolvedOutput, null, 2)}\\n`);\n  }\n\n  if (catalogChanged) {\n    writeFileIfChanged(packageJsonPath, `${JSON.stringify(pkgJson, null, 2)}\\n`);\n  }\n\n  const stableResolvedDeps = stableDepsObject(resolvedDeps);\n  const resolved: ResolvedSharedDeps = {\n    deps: stableResolvedDeps,\n    fingerprintSha256: fingerprintResolved(stableResolvedDeps),\n  };\n\n  const nextGenerated = {\n    schemaVersion: 1,\n    kind: \"everything-dev/shared-deps\",\n    generatedAt: new Date().toISOString(),\n    deps: stableResolvedDeps,\n    fingerprintSha256: resolved.fingerprintSha256,\n    inputs: {\n      mode,\n      hostMode: opts.hostMode,\n    },\n  };\n\n  let prevFingerprint: string | null = null;\n  try {\n    const prev = JSON.parse(readFileSync(generatedPath, \"utf-8\"));\n    prevFingerprint = prev?.fingerprintSha256 ?? null;\n  } catch {\n    // ignore\n  }\n\n  mkdirSync(dirname(generatedPath), { recursive: true });\n  writeFileIfChanged(generatedPath, `${JSON.stringify(nextGenerated, null, 2)}\\n`);\n\n  const generatedChanged = prevFingerprint !== nextGenerated.fingerprintSha256;\n\n  return {\n    mode,\n    hostMode: opts.hostMode,\n    bosConfigChanged,\n    catalogChanged,\n    generatedChanged,\n    resolved,\n  };\n}\n"],"mappings":";;;;;;;;AAsDA,SAAS,OAAO,OAAuB;AACrC,oCAAkB,SAAS,CAAC,OAAO,MAAM,CAAC,OAAO,MAAM;;AAGzD,SAAS,mBAAmB,OAA+B;AACzD,KAAI,OAAO,UAAU,SAAU,QAAO;CACtC,MAAM,QAAQ,MAAM,MAAM,oCAAoC;AAC9D,QAAO,QAAQ,MAAM,KAAK;;AAG5B,SAAS,WAAW,SAAyB;AAC3C,QAAO,IAAI;;AAGb,SAAS,iBACP,MACmC;CACnC,MAAM,OAAO,OAAO,KAAK,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC;CACjE,MAAM,MAAyC,EAAE;AACjD,MAAK,MAAM,OAAO,KAChB,KAAI,OAAO,KAAK;AAElB,QAAO;;AAGT,SAAS,yBAAyB,QAAoD;AACpF,QAAO;EACL,SAAS,OAAO;EAChB,iBAAiB,OAAO,mBAAmB;EAC3C,WAAW,OAAO,aAAa;EAC/B,OAAO,OAAO,SAAS;EACvB,eAAe,OAAO,iBAAiB;EACvC,YAAY,OAAO,cAAc;EAClC;;AAGH,SAAS,UAAU,OAAqD;AACtE,QAAOA,4BAAc,MAAM,GAAG,QAAQ;;AAGxC,SAAS,iBACP,OACA,QAC6C;AAC7C,KAAI,UAAU,OAAW,QAAO;AAEhC,KAAI,CADWC,iCAAmB,UAAU,MACjC,CAAC,QACV,OAAM,IAAI,MAAM,oCAAoC,SAAS;AAE/D,QAAO;;AAGT,SAAS,mBAAmB,UAAkB,aAA8B;AAC1E,KAAI;AAEF,gCAD6B,UAAU,QAC5B,KAAK,YAAa,QAAO;SAC9B;AAIR,4BAAc,UAAU,YAAY;AACpC,QAAO;;AAGT,SAAS,oBAAoB,MAAiD;AAC5E,QAAO,OAAO,KAAK,UAAU,iBAAiB,KAAK,CAAC,CAAC;;AAGvD,SAAS,sBAAsB,GAAoB,GAA6B;CAC9E,MAAM,OAAO,yBAAyB,EAAE;CACxC,MAAM,QAAQ,yBAAyB,EAAE;AAEzC,QACE,KAAK,YAAY,MAAM,WACvB,KAAK,oBAAoB,MAAM,mBAC/B,KAAK,cAAc,MAAM,aACzB,KAAK,UAAU,MAAM,SACrB,KAAK,kBAAkB,MAAM,iBAC7B,KAAK,eAAe,MAAM;;AAI9B,SAAS,qBAAqB,WAA6D;CACzF,MAAM,uBAAO,IAAI,KAA6B;CAE9C,MAAM,MAAM,UAAU,UAAU,IAAI;CACpC,MAAM,QAAQ,UAAU,KAAK,GAAG;CAChC,MAAM,SAAS,UAAU,KAAK,IAAI;CAClC,MAAM,UAAU,UAAU,KAAK,KAAK;CACpC,MAAM,UAAU,UAAU,UAAU,QAAQ;AAE5C,KAAI,SAAS,YAAY,MACvB,OAAM,IAAI,MACR,kHACD;CAGH,MAAM,UAAU,QAAgB,WAAwD;AACtF,MAAI,CAAC,OAAQ;AAEb,OAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,OAAO,EAAE;GACnD,MAAM,WAAW,KAAK,IAAI,KAAK;AAC/B,OAAI,CAAC,UAAU;AACb,SAAK,IAAI,MAAM,CAAC;KAAE;KAAQ;KAAQ,CAAC,CAAC;AACpC;;AAGF,OAAI,CAAC,sBAAsB,SAAS,GAAI,QAAQ,OAAO,EAAE;IACvD,MAAM,WAAW,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,KAAK;AAC7D,UAAM,IAAI,MACR,kCAAkC,KAAK,YAAY,SAAS,OAAO,SACpE;;AAGH,YAAS,KAAK;IAAE;IAAQ;IAAQ,CAAC;;;AAIrC,QAAO,WAAW,iBAAiB,QAAQ,QAAQ,iBAAiB,CAAC;AACrE,QAAO,YAAY,iBAAiB,SAAS,QAAQ,kBAAkB,CAAC;AAExE,MAAK,MAAM,CAAC,UAAU,WAAW,OAAO,QAAQ,WAAW,EAAE,CAAC,EAAE;EAC9D,MAAM,eAAe,UAAU,OAAO;AACtC,MAAI,CAAC,aAAc;EAGnB,MAAM,WAAW,UADC,UAAU,aAAa,IACL,EAAE,GAAG;AACzC,MAAI,YAAY,YAAY,SAC1B,OAAM,IAAI,MACR,mDAAmD,SAAS,6EAC7D;AAEH,SACE,WAAW,YACX,iBAAiB,aAAa,QAAQ,WAAW,SAAS,SAAS,CACpE;;AAGH,QAAO,OAAO,YAAY,KAAK;;AAGjC,eAAsB,uBAAuB,MAMX;CAChC,MAAM,oCAAqB,KAAK,WAAW,kBAAkB;CAC7D,MAAM,yCAA0B,KAAK,WAAW,QAAQ,2BAA2B;CACnF,MAAM,sCAAuB,KAAK,WAAW,eAAe;CAC5D,MAAM,oCAAqB,KAAK,WAAW,QAAQ,aAAa,mBAAmB;CAEnF,MAAM,YAAqB,KAAK,aAAa,KAAK,gCAAmB,eAAe,QAAQ,CAAC;AAC7F,KAAI,CAACD,4BAAc,UAAU,CAC3B,OAAM,IAAI,MAAM,oCAAoC;CAGtD,MAAM,kCAAqB,gBAAgB,GACtC,KAAK,gCAAmB,iBAAiB,QAAQ,CAAC,GACnD,EAAE;CAEN,MAAM,cAAc,KAAK,UAAU,UAAU;CAC7C,MAAM,cAAc,KAAK,UAAU,QAAQ;CAE3C,MAAM,OAAO,KAAK,aAAa,UAAU,iBAAiB;CAC1D,MAAM,aAAa,qBAAqB,UAAU;CAClD,MAAM,UAAU,QAAQ,YAAY,WAAW,EAAE;CAEjD,MAAM,eAAkD,EAAE;AAE1D,MAAK,MAAM,CAAC,MAAM,SAAS,OAAO,QAAQ,WAAW,EAAE;EACrD,MAAM,QAAQ,KAAK;AACnB,MAAI,CAAC,MAAO;EAEZ,MAAM,kBACJ,mBAAmB,MAAM,OAAO,QAAQ,IAAI,mBAAmB,MAAM,OAAO,gBAAgB;EAC9F,MAAM,mBAAmB,mBAAmB,QAAQ,MAAM;EAC1D,MAAM,UACJ,SAAS,iBACJ,oBAAoB,kBACpB,mBAAmB;AAE1B,MAAI,CAAC,SAAS;GACZ,MAAM,UAAU,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,KAAK;AACxD,SAAM,IAAI,MACR,0DAA0D,KAAK,SAAS,UACzE;;AAGH,MAAI,SAAS,kBAAkB,qBAAqB,QAAQ,gBAC1D,SAAQ,QAAQ;AAGlB,MAAI,SAAS,kBAAkB,QAAQ,UAAU,QAC/C,SAAQ,QAAQ;AAGlB,OAAK,MAAM,OAAO,MAAM;AACtB,OAAI,OAAO,UAAU;AACrB,OAAI,OAAO,kBAAkB,WAAW,QAAQ;AAChD,OAAI,OAAO,aAAa,IAAI,OAAO,cAAc;;AAGnD,eAAa,QAAQ;GACnB;GACA;GACA,iBAAiB,WAAW,QAAQ;GACpC,YAAY,MAAM,OAAO,cAAc;GACvC,WAAW,MAAM,OAAO,aAAa;GACrC,OAAO,MAAM,OAAO,SAAS;GAC7B,eAAe,MAAM,OAAO,iBAAiB;GAC7C,SAAS,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC;GAC1E;;AAGH,KAAI,CAAC,QAAQ,WACX,SAAQ,aAAa;EAAE,UAAU,EAAE;EAAE,SAAS,EAAE;EAAE;AAEpD,SAAQ,WAAW,UAAU;CAE7B,MAAM,UAAU,KAAK,UAAU,UAAU;CACzC,MAAM,UAAU,KAAK,UAAU,QAAQ;CACvC,MAAM,mBAAmB,YAAY;CACrC,MAAM,iBAAiB,YAAY;AAEnC,KAAI,kBAAkB;EACpB,MAAM,qCAAsB,mBAAmB;AAC/C,MAAI,yBAAY,YAAY,CAC1B,wBAAU,aAAa,EAAE,WAAW,MAAM,CAAC;EAG7C,MAAM,UAAUE,mCAAqB,UAAU;EAO/C,MAAM,iBAAiB;GACrB,WAAW;IANX,KAAK,KAAK,OAAO;IACjB,6BAAY,IAAI,MAAM,EAAC,aAAa;IACpC,cAAc,KAAK,gBAAgB,EAAE;IACrC,QAAQ;IAGO;GACf,GAAG;GACJ;AAED,qBAAmB,oBAAoB,GAAG,KAAK,UAAU,gBAAgB,MAAM,EAAE,CAAC,IAAI;;AAGxF,KAAI,eACF,oBAAmB,iBAAiB,GAAG,KAAK,UAAU,SAAS,MAAM,EAAE,CAAC,IAAI;CAG9E,MAAM,qBAAqB,iBAAiB,aAAa;CACzD,MAAM,WAA+B;EACnC,MAAM;EACN,mBAAmB,oBAAoB,mBAAmB;EAC3D;CAED,MAAM,gBAAgB;EACpB,eAAe;EACf,MAAM;EACN,8BAAa,IAAI,MAAM,EAAC,aAAa;EACrC,MAAM;EACN,mBAAmB,SAAS;EAC5B,QAAQ;GACN;GACA,UAAU,KAAK;GAChB;EACF;CAED,IAAI,kBAAiC;AACrC,KAAI;AAEF,oBADa,KAAK,gCAAmB,eAAe,QAAQ,CACtC,EAAE,qBAAqB;SACvC;AAIR,+CAAkB,cAAc,EAAE,EAAE,WAAW,MAAM,CAAC;AACtD,oBAAmB,eAAe,GAAG,KAAK,UAAU,eAAe,MAAM,EAAE,CAAC,IAAI;CAEhF,MAAM,mBAAmB,oBAAoB,cAAc;AAE3D,QAAO;EACL;EACA,UAAU,KAAK;EACf;EACA;EACA;EACA;EACD"}

package/dist/shared-deps.mjs

@@ -0,0 +1,200 @@
+import { isPlainObject, rebuildOrderedConfig } from "./merge.mjs";
+import { SharedDepMapSchema } from "./types.mjs";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { createHash } from "node:crypto";
+
+//#region src/shared-deps.ts
+function sha256(input) {
+	return createHash("sha256").update(input).digest("hex");
+}
+function extractSemverExact(input) {
+	if (typeof input !== "string") return null;
+	const match = input.match(/\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?/);
+	return match ? match[0] : null;
+}
+function caretRange(version) {
+	return `^${version}`;
+}
+function stableDepsObject(deps) {
+	const keys = Object.keys(deps).sort((a, b) => a.localeCompare(b));
+	const out = {};
+	for (const key of keys) out[key] = deps[key];
+	return out;
+}
+function normalizeSharedDepConfig(config) {
+	return {
+		version: config.version,
+		requiredVersion: config.requiredVersion ?? false,
+		singleton: config.singleton ?? false,
+		eager: config.eager ?? false,
+		strictVersion: config.strictVersion ?? false,
+		shareScope: config.shareScope ?? "default"
+	};
+}
+function getObject(value) {
+	return isPlainObject(value) ? value : void 0;
+}
+function getSharedDepsMap(value, source) {
+	if (value === void 0) return void 0;
+	if (!SharedDepMapSchema.safeParse(value).success) throw new Error(`Invalid shared dependency map at ${source}`);
+	return value;
+}
+function writeFileIfChanged(filePath, nextContent) {
+	try {
+		if (readFileSync(filePath, "utf-8") === nextContent) return false;
+	} catch {}
+	writeFileSync(filePath, nextContent);
+	return true;
+}
+function fingerprintResolved(deps) {
+	return sha256(JSON.stringify(stableDepsObject(deps)));
+}
+function isSameSharedDepConfig(a, b) {
+	const left = normalizeSharedDepConfig(a);
+	const right = normalizeSharedDepConfig(b);
+	return left.version === right.version && left.requiredVersion === right.requiredVersion && left.singleton === right.singleton && left.eager === right.eager && left.strictVersion === right.strictVersion && left.shareScope === right.shareScope;
+}
+function collectSharedDepRefs(bosConfig) {
+	const refs = /* @__PURE__ */ new Map();
+	const app = getObject(bosConfig.app);
+	const appUi = getObject(app?.ui);
+	const appApi = getObject(app?.api);
+	const appAuth = getObject(app?.auth);
+	const plugins = getObject(bosConfig.plugins);
+	if (appUi && "shared" in appUi) throw new Error("app.ui.shared is no longer supported. Move shared deps to app.api.shared, app.auth.shared, or plugins.*.shared.");
+	const append = (source, shared) => {
+		if (!shared) return;
+		for (const [name, config] of Object.entries(shared)) {
+			const existing = refs.get(name);
+			if (!existing) {
+				refs.set(name, [{
+					source,
+					config
+				}]);
+				continue;
+			}
+			if (!isSameSharedDepConfig(existing[0].config, config)) {
+				const previous = existing.map((ref) => ref.source).join(", ");
+				throw new Error(`Conflicting shared dependency "${name}" between ${previous} and ${source}`);
+			}
+			existing.push({
+				source,
+				config
+			});
+		}
+	};
+	append("app.api", getSharedDepsMap(appApi?.shared, "app.api.shared"));
+	append("app.auth", getSharedDepsMap(appAuth?.shared, "app.auth.shared"));
+	for (const [pluginId, plugin] of Object.entries(plugins ?? {})) {
+		const pluginRecord = getObject(plugin);
+		if (!pluginRecord) continue;
+		const pluginUi = getObject(getObject(pluginRecord.app)?.ui);
+		if (pluginUi && "shared" in pluginUi) throw new Error(`app.ui.shared is no longer supported in plugins.${pluginId}. Move shared deps to app.api.shared, app.auth.shared, or plugins.*.shared.`);
+		append(`plugins.${pluginId}`, getSharedDepsMap(pluginRecord.shared, `plugins.${pluginId}.shared`));
+	}
+	return Object.fromEntries(refs);
+}
+async function syncResolvedSharedDeps(opts) {
+	const bosConfigPath = join(opts.configDir, "bos.config.json");
+	const resolvedConfigPath = join(opts.configDir, ".bos", "bos.resolved-config.json");
+	const packageJsonPath = join(opts.configDir, "package.json");
+	const generatedPath = join(opts.configDir, ".bos", "generated", "shared-deps.json");
+	const bosConfig = opts.bosConfig ?? JSON.parse(readFileSync(bosConfigPath, "utf-8"));
+	if (!isPlainObject(bosConfig)) throw new Error("bos.config.json must be an object");
+	const pkgJson = existsSync(packageJsonPath) ? JSON.parse(readFileSync(packageJsonPath, "utf-8")) : {};
+	const originalBos = JSON.stringify(bosConfig);
+	const originalPkg = JSON.stringify(pkgJson);
+	const mode = opts.hostMode === "local" ? "catalog->bos" : "bos->catalog";
+	const refsByName = collectSharedDepRefs(bosConfig);
+	const catalog = pkgJson.workspaces?.catalog ?? {};
+	const resolvedDeps = {};
+	for (const [name, refs] of Object.entries(refsByName)) {
+		const first = refs[0];
+		if (!first) continue;
+		const exactFromConfig = extractSemverExact(first.config.version) ?? extractSemverExact(first.config.requiredVersion);
+		const exactFromCatalog = extractSemverExact(catalog[name]);
+		const version = mode === "catalog->bos" ? exactFromCatalog ?? exactFromConfig : exactFromConfig ?? exactFromCatalog;
+		if (!version) {
+			const sources = refs.map((ref) => ref.source).join(", ");
+			throw new Error(`Could not resolve exact version for shared dependency "${name}" from ${sources}`);
+		}
+		if (mode === "catalog->bos" && exactFromCatalog === null && exactFromConfig) catalog[name] = exactFromConfig;
+		if (mode === "bos->catalog" && catalog[name] !== version) catalog[name] = version;
+		for (const ref of refs) {
+			ref.config.version = version;
+			ref.config.requiredVersion = caretRange(version);
+			ref.config.shareScope = ref.config.shareScope ?? "default";
+		}
+		resolvedDeps[name] = {
+			name,
+			version,
+			requiredVersion: caretRange(version),
+			shareScope: first.config.shareScope ?? "default",
+			singleton: first.config.singleton ?? false,
+			eager: first.config.eager ?? false,
+			strictVersion: first.config.strictVersion ?? false,
+			sources: refs.map((ref) => ref.source).sort((a, b) => a.localeCompare(b))
+		};
+	}
+	if (!pkgJson.workspaces) pkgJson.workspaces = {
+		packages: [],
+		catalog: {}
+	};
+	pkgJson.workspaces.catalog = catalog;
+	const nextBos = JSON.stringify(bosConfig);
+	const nextPkg = JSON.stringify(pkgJson);
+	const bosConfigChanged = nextBos !== originalBos;
+	const catalogChanged = nextPkg !== originalPkg;
+	if (bosConfigChanged) {
+		const resolvedDir = dirname(resolvedConfigPath);
+		if (!existsSync(resolvedDir)) mkdirSync(resolvedDir, { recursive: true });
+		const ordered = rebuildOrderedConfig(bosConfig);
+		const resolvedOutput = {
+			_resolved: {
+				env: opts.env ?? "development",
+				resolvedAt: (/* @__PURE__ */ new Date()).toISOString(),
+				extendsChain: opts.extendsChain ?? [],
+				source: "shared-sync"
+			},
+			...ordered
+		};
+		writeFileIfChanged(resolvedConfigPath, `${JSON.stringify(resolvedOutput, null, 2)}\n`);
+	}
+	if (catalogChanged) writeFileIfChanged(packageJsonPath, `${JSON.stringify(pkgJson, null, 2)}\n`);
+	const stableResolvedDeps = stableDepsObject(resolvedDeps);
+	const resolved = {
+		deps: stableResolvedDeps,
+		fingerprintSha256: fingerprintResolved(stableResolvedDeps)
+	};
+	const nextGenerated = {
+		schemaVersion: 1,
+		kind: "everything-dev/shared-deps",
+		generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+		deps: stableResolvedDeps,
+		fingerprintSha256: resolved.fingerprintSha256,
+		inputs: {
+			mode,
+			hostMode: opts.hostMode
+		}
+	};
+	let prevFingerprint = null;
+	try {
+		prevFingerprint = JSON.parse(readFileSync(generatedPath, "utf-8"))?.fingerprintSha256 ?? null;
+	} catch {}
+	mkdirSync(dirname(generatedPath), { recursive: true });
+	writeFileIfChanged(generatedPath, `${JSON.stringify(nextGenerated, null, 2)}\n`);
+	const generatedChanged = prevFingerprint !== nextGenerated.fingerprintSha256;
+	return {
+		mode,
+		hostMode: opts.hostMode,
+		bosConfigChanged,
+		catalogChanged,
+		generatedChanged,
+		resolved
+	};
+}
+
+//#endregion
+export { syncResolvedSharedDeps };
+//# sourceMappingURL=shared-deps.mjs.map

package/dist/shared-deps.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-deps.mjs","names":[],"sources":["../src/shared-deps.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { type BosEnv, isPlainObject, type ResolvedConfigMeta, rebuildOrderedConfig } from \"./merge\";\nimport { type SharedDepConfig, SharedDepMapSchema } from \"./types\";\n\ninterface PackageJson {\n  workspaces?: {\n    packages?: string[];\n    catalog?: Record<string, string>;\n  };\n}\n\ninterface SharedDepRef {\n  source: string;\n  config: SharedDepConfig;\n}\n\ntype SharedDepsConfig = Record<string, unknown>;\n\ninterface NormalizedSharedDepConfig {\n  version: string;\n  requiredVersion: string | false;\n  singleton: boolean;\n  eager: boolean;\n  strictVersion: boolean;\n  shareScope: string;\n}\n\nexport interface ResolvedSharedDep {\n  name: string;\n  version: string;\n  requiredVersion: string;\n  shareScope: string;\n  singleton: boolean;\n  eager: boolean;\n  strictVersion: boolean;\n  sources: string[];\n}\n\nexport interface ResolvedSharedDeps {\n  deps: Record<string, ResolvedSharedDep>;\n  fingerprintSha256: string;\n}\n\nexport interface SharedDepsSyncResult {\n  mode: \"catalog->bos\" | \"bos->catalog\";\n  hostMode: \"local\" | \"remote\";\n  bosConfigChanged: boolean;\n  catalogChanged: boolean;\n  generatedChanged: boolean;\n  resolved: ResolvedSharedDeps;\n}\n\nfunction sha256(input: string): string {\n  return createHash(\"sha256\").update(input).digest(\"hex\");\n}\n\nfunction extractSemverExact(input: unknown): string | null {\n  if (typeof input !== \"string\") return null;\n  const match = input.match(/\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?/);\n  return match ? match[0] : null;\n}\n\nfunction caretRange(version: string): string {\n  return `^${version}`;\n}\n\nfunction stableDepsObject(\n  deps: Record<string, ResolvedSharedDep>,\n): Record<string, ResolvedSharedDep> {\n  const keys = Object.keys(deps).sort((a, b) => a.localeCompare(b));\n  const out: Record<string, ResolvedSharedDep> = {};\n  for (const key of keys) {\n    out[key] = deps[key]!;\n  }\n  return out;\n}\n\nfunction normalizeSharedDepConfig(config: SharedDepConfig): NormalizedSharedDepConfig {\n  return {\n    version: config.version,\n    requiredVersion: config.requiredVersion ?? false,\n    singleton: config.singleton ?? false,\n    eager: config.eager ?? false,\n    strictVersion: config.strictVersion ?? false,\n    shareScope: config.shareScope ?? \"default\",\n  };\n}\n\nfunction getObject(value: unknown): Record<string, unknown> | undefined {\n  return isPlainObject(value) ? value : undefined;\n}\n\nfunction getSharedDepsMap(\n  value: unknown,\n  source: string,\n): Record<string, SharedDepConfig> | undefined {\n  if (value === undefined) return undefined;\n  const parsed = SharedDepMapSchema.safeParse(value);\n  if (!parsed.success) {\n    throw new Error(`Invalid shared dependency map at ${source}`);\n  }\n  return value as Record<string, SharedDepConfig>;\n}\n\nfunction writeFileIfChanged(filePath: string, nextContent: string): boolean {\n  try {\n    const current = readFileSync(filePath, \"utf-8\");\n    if (current === nextContent) return false;\n  } catch {\n    // file does not exist yet\n  }\n\n  writeFileSync(filePath, nextContent);\n  return true;\n}\n\nfunction fingerprintResolved(deps: Record<string, ResolvedSharedDep>): string {\n  return sha256(JSON.stringify(stableDepsObject(deps)));\n}\n\nfunction isSameSharedDepConfig(a: SharedDepConfig, b: SharedDepConfig): boolean {\n  const left = normalizeSharedDepConfig(a);\n  const right = normalizeSharedDepConfig(b);\n\n  return (\n    left.version === right.version &&\n    left.requiredVersion === right.requiredVersion &&\n    left.singleton === right.singleton &&\n    left.eager === right.eager &&\n    left.strictVersion === right.strictVersion &&\n    left.shareScope === right.shareScope\n  );\n}\n\nfunction collectSharedDepRefs(bosConfig: SharedDepsConfig): Record<string, SharedDepRef[]> {\n  const refs = new Map<string, SharedDepRef[]>();\n\n  const app = getObject(bosConfig.app);\n  const appUi = getObject(app?.ui);\n  const appApi = getObject(app?.api);\n  const appAuth = getObject(app?.auth);\n  const plugins = getObject(bosConfig.plugins);\n\n  if (appUi && \"shared\" in appUi) {\n    throw new Error(\n      \"app.ui.shared is no longer supported. Move shared deps to app.api.shared, app.auth.shared, or plugins.*.shared.\",\n    );\n  }\n\n  const append = (source: string, shared: Record<string, SharedDepConfig> | undefined) => {\n    if (!shared) return;\n\n    for (const [name, config] of Object.entries(shared)) {\n      const existing = refs.get(name);\n      if (!existing) {\n        refs.set(name, [{ source, config }]);\n        continue;\n      }\n\n      if (!isSameSharedDepConfig(existing[0]!.config, config)) {\n        const previous = existing.map((ref) => ref.source).join(\", \");\n        throw new Error(\n          `Conflicting shared dependency \"${name}\" between ${previous} and ${source}`,\n        );\n      }\n\n      existing.push({ source, config });\n    }\n  };\n\n  append(\"app.api\", getSharedDepsMap(appApi?.shared, \"app.api.shared\"));\n  append(\"app.auth\", getSharedDepsMap(appAuth?.shared, \"app.auth.shared\"));\n\n  for (const [pluginId, plugin] of Object.entries(plugins ?? {})) {\n    const pluginRecord = getObject(plugin);\n    if (!pluginRecord) continue;\n\n    const pluginApp = getObject(pluginRecord.app);\n    const pluginUi = getObject(pluginApp?.ui);\n    if (pluginUi && \"shared\" in pluginUi) {\n      throw new Error(\n        `app.ui.shared is no longer supported in plugins.${pluginId}. Move shared deps to app.api.shared, app.auth.shared, or plugins.*.shared.`,\n      );\n    }\n    append(\n      `plugins.${pluginId}`,\n      getSharedDepsMap(pluginRecord.shared, `plugins.${pluginId}.shared`),\n    );\n  }\n\n  return Object.fromEntries(refs);\n}\n\nexport async function syncResolvedSharedDeps(opts: {\n  configDir: string;\n  hostMode: \"local\" | \"remote\";\n  bosConfig?: SharedDepsConfig;\n  env?: BosEnv;\n  extendsChain?: string[];\n}): Promise<SharedDepsSyncResult> {\n  const bosConfigPath = join(opts.configDir, \"bos.config.json\");\n  const resolvedConfigPath = join(opts.configDir, \".bos\", \"bos.resolved-config.json\");\n  const packageJsonPath = join(opts.configDir, \"package.json\");\n  const generatedPath = join(opts.configDir, \".bos\", \"generated\", \"shared-deps.json\");\n\n  const bosConfig: unknown = opts.bosConfig ?? JSON.parse(readFileSync(bosConfigPath, \"utf-8\"));\n  if (!isPlainObject(bosConfig)) {\n    throw new Error(\"bos.config.json must be an object\");\n  }\n\n  const pkgJson = existsSync(packageJsonPath)\n    ? (JSON.parse(readFileSync(packageJsonPath, \"utf-8\")) as PackageJson)\n    : {};\n\n  const originalBos = JSON.stringify(bosConfig);\n  const originalPkg = JSON.stringify(pkgJson);\n\n  const mode = opts.hostMode === \"local\" ? \"catalog->bos\" : \"bos->catalog\";\n  const refsByName = collectSharedDepRefs(bosConfig);\n  const catalog = pkgJson.workspaces?.catalog ?? {};\n\n  const resolvedDeps: Record<string, ResolvedSharedDep> = {};\n\n  for (const [name, refs] of Object.entries(refsByName)) {\n    const first = refs[0];\n    if (!first) continue;\n\n    const exactFromConfig =\n      extractSemverExact(first.config.version) ?? extractSemverExact(first.config.requiredVersion);\n    const exactFromCatalog = extractSemverExact(catalog[name]);\n    const version =\n      mode === \"catalog->bos\"\n        ? (exactFromCatalog ?? exactFromConfig)\n        : (exactFromConfig ?? exactFromCatalog);\n\n    if (!version) {\n      const sources = refs.map((ref) => ref.source).join(\", \");\n      throw new Error(\n        `Could not resolve exact version for shared dependency \"${name}\" from ${sources}`,\n      );\n    }\n\n    if (mode === \"catalog->bos\" && exactFromCatalog === null && exactFromConfig) {\n      catalog[name] = exactFromConfig;\n    }\n\n    if (mode === \"bos->catalog\" && catalog[name] !== version) {\n      catalog[name] = version;\n    }\n\n    for (const ref of refs) {\n      ref.config.version = version;\n      ref.config.requiredVersion = caretRange(version);\n      ref.config.shareScope = ref.config.shareScope ?? \"default\";\n    }\n\n    resolvedDeps[name] = {\n      name,\n      version,\n      requiredVersion: caretRange(version),\n      shareScope: first.config.shareScope ?? \"default\",\n      singleton: first.config.singleton ?? false,\n      eager: first.config.eager ?? false,\n      strictVersion: first.config.strictVersion ?? false,\n      sources: refs.map((ref) => ref.source).sort((a, b) => a.localeCompare(b)),\n    };\n  }\n\n  if (!pkgJson.workspaces) {\n    pkgJson.workspaces = { packages: [], catalog: {} };\n  }\n  pkgJson.workspaces.catalog = catalog;\n\n  const nextBos = JSON.stringify(bosConfig);\n  const nextPkg = JSON.stringify(pkgJson);\n  const bosConfigChanged = nextBos !== originalBos;\n  const catalogChanged = nextPkg !== originalPkg;\n\n  if (bosConfigChanged) {\n    const resolvedDir = dirname(resolvedConfigPath);\n    if (!existsSync(resolvedDir)) {\n      mkdirSync(resolvedDir, { recursive: true });\n    }\n\n    const ordered = rebuildOrderedConfig(bosConfig);\n    const meta: ResolvedConfigMeta = {\n      env: opts.env ?? \"development\",\n      resolvedAt: new Date().toISOString(),\n      extendsChain: opts.extendsChain ?? [],\n      source: \"shared-sync\",\n    };\n    const resolvedOutput = {\n      _resolved: meta,\n      ...ordered,\n    };\n\n    writeFileIfChanged(resolvedConfigPath, `${JSON.stringify(resolvedOutput, null, 2)}\\n`);\n  }\n\n  if (catalogChanged) {\n    writeFileIfChanged(packageJsonPath, `${JSON.stringify(pkgJson, null, 2)}\\n`);\n  }\n\n  const stableResolvedDeps = stableDepsObject(resolvedDeps);\n  const resolved: ResolvedSharedDeps = {\n    deps: stableResolvedDeps,\n    fingerprintSha256: fingerprintResolved(stableResolvedDeps),\n  };\n\n  const nextGenerated = {\n    schemaVersion: 1,\n    kind: \"everything-dev/shared-deps\",\n    generatedAt: new Date().toISOString(),\n    deps: stableResolvedDeps,\n    fingerprintSha256: resolved.fingerprintSha256,\n    inputs: {\n      mode,\n      hostMode: opts.hostMode,\n    },\n  };\n\n  let prevFingerprint: string | null = null;\n  try {\n    const prev = JSON.parse(readFileSync(generatedPath, \"utf-8\"));\n    prevFingerprint = prev?.fingerprintSha256 ?? null;\n  } catch {\n    // ignore\n  }\n\n  mkdirSync(dirname(generatedPath), { recursive: true });\n  writeFileIfChanged(generatedPath, `${JSON.stringify(nextGenerated, null, 2)}\\n`);\n\n  const generatedChanged = prevFingerprint !== nextGenerated.fingerprintSha256;\n\n  return {\n    mode,\n    hostMode: opts.hostMode,\n    bosConfigChanged,\n    catalogChanged,\n    generatedChanged,\n    resolved,\n  };\n}\n"],"mappings":";;;;;;;AAsDA,SAAS,OAAO,OAAuB;AACrC,QAAO,WAAW,SAAS,CAAC,OAAO,MAAM,CAAC,OAAO,MAAM;;AAGzD,SAAS,mBAAmB,OAA+B;AACzD,KAAI,OAAO,UAAU,SAAU,QAAO;CACtC,MAAM,QAAQ,MAAM,MAAM,oCAAoC;AAC9D,QAAO,QAAQ,MAAM,KAAK;;AAG5B,SAAS,WAAW,SAAyB;AAC3C,QAAO,IAAI;;AAGb,SAAS,iBACP,MACmC;CACnC,MAAM,OAAO,OAAO,KAAK,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC;CACjE,MAAM,MAAyC,EAAE;AACjD,MAAK,MAAM,OAAO,KAChB,KAAI,OAAO,KAAK;AAElB,QAAO;;AAGT,SAAS,yBAAyB,QAAoD;AACpF,QAAO;EACL,SAAS,OAAO;EAChB,iBAAiB,OAAO,mBAAmB;EAC3C,WAAW,OAAO,aAAa;EAC/B,OAAO,OAAO,SAAS;EACvB,eAAe,OAAO,iBAAiB;EACvC,YAAY,OAAO,cAAc;EAClC;;AAGH,SAAS,UAAU,OAAqD;AACtE,QAAO,cAAc,MAAM,GAAG,QAAQ;;AAGxC,SAAS,iBACP,OACA,QAC6C;AAC7C,KAAI,UAAU,OAAW,QAAO;AAEhC,KAAI,CADW,mBAAmB,UAAU,MACjC,CAAC,QACV,OAAM,IAAI,MAAM,oCAAoC,SAAS;AAE/D,QAAO;;AAGT,SAAS,mBAAmB,UAAkB,aAA8B;AAC1E,KAAI;AAEF,MADgB,aAAa,UAAU,QAC5B,KAAK,YAAa,QAAO;SAC9B;AAIR,eAAc,UAAU,YAAY;AACpC,QAAO;;AAGT,SAAS,oBAAoB,MAAiD;AAC5E,QAAO,OAAO,KAAK,UAAU,iBAAiB,KAAK,CAAC,CAAC;;AAGvD,SAAS,sBAAsB,GAAoB,GAA6B;CAC9E,MAAM,OAAO,yBAAyB,EAAE;CACxC,MAAM,QAAQ,yBAAyB,EAAE;AAEzC,QACE,KAAK,YAAY,MAAM,WACvB,KAAK,oBAAoB,MAAM,mBAC/B,KAAK,cAAc,MAAM,aACzB,KAAK,UAAU,MAAM,SACrB,KAAK,kBAAkB,MAAM,iBAC7B,KAAK,eAAe,MAAM;;AAI9B,SAAS,qBAAqB,WAA6D;CACzF,MAAM,uBAAO,IAAI,KAA6B;CAE9C,MAAM,MAAM,UAAU,UAAU,IAAI;CACpC,MAAM,QAAQ,UAAU,KAAK,GAAG;CAChC,MAAM,SAAS,UAAU,KAAK,IAAI;CAClC,MAAM,UAAU,UAAU,KAAK,KAAK;CACpC,MAAM,UAAU,UAAU,UAAU,QAAQ;AAE5C,KAAI,SAAS,YAAY,MACvB,OAAM,IAAI,MACR,kHACD;CAGH,MAAM,UAAU,QAAgB,WAAwD;AACtF,MAAI,CAAC,OAAQ;AAEb,OAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,OAAO,EAAE;GACnD,MAAM,WAAW,KAAK,IAAI,KAAK;AAC/B,OAAI,CAAC,UAAU;AACb,SAAK,IAAI,MAAM,CAAC;KAAE;KAAQ;KAAQ,CAAC,CAAC;AACpC;;AAGF,OAAI,CAAC,sBAAsB,SAAS,GAAI,QAAQ,OAAO,EAAE;IACvD,MAAM,WAAW,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,KAAK;AAC7D,UAAM,IAAI,MACR,kCAAkC,KAAK,YAAY,SAAS,OAAO,SACpE;;AAGH,YAAS,KAAK;IAAE;IAAQ;IAAQ,CAAC;;;AAIrC,QAAO,WAAW,iBAAiB,QAAQ,QAAQ,iBAAiB,CAAC;AACrE,QAAO,YAAY,iBAAiB,SAAS,QAAQ,kBAAkB,CAAC;AAExE,MAAK,MAAM,CAAC,UAAU,WAAW,OAAO,QAAQ,WAAW,EAAE,CAAC,EAAE;EAC9D,MAAM,eAAe,UAAU,OAAO;AACtC,MAAI,CAAC,aAAc;EAGnB,MAAM,WAAW,UADC,UAAU,aAAa,IACL,EAAE,GAAG;AACzC,MAAI,YAAY,YAAY,SAC1B,OAAM,IAAI,MACR,mDAAmD,SAAS,6EAC7D;AAEH,SACE,WAAW,YACX,iBAAiB,aAAa,QAAQ,WAAW,SAAS,SAAS,CACpE;;AAGH,QAAO,OAAO,YAAY,KAAK;;AAGjC,eAAsB,uBAAuB,MAMX;CAChC,MAAM,gBAAgB,KAAK,KAAK,WAAW,kBAAkB;CAC7D,MAAM,qBAAqB,KAAK,KAAK,WAAW,QAAQ,2BAA2B;CACnF,MAAM,kBAAkB,KAAK,KAAK,WAAW,eAAe;CAC5D,MAAM,gBAAgB,KAAK,KAAK,WAAW,QAAQ,aAAa,mBAAmB;CAEnF,MAAM,YAAqB,KAAK,aAAa,KAAK,MAAM,aAAa,eAAe,QAAQ,CAAC;AAC7F,KAAI,CAAC,cAAc,UAAU,CAC3B,OAAM,IAAI,MAAM,oCAAoC;CAGtD,MAAM,UAAU,WAAW,gBAAgB,GACtC,KAAK,MAAM,aAAa,iBAAiB,QAAQ,CAAC,GACnD,EAAE;CAEN,MAAM,cAAc,KAAK,UAAU,UAAU;CAC7C,MAAM,cAAc,KAAK,UAAU,QAAQ;CAE3C,MAAM,OAAO,KAAK,aAAa,UAAU,iBAAiB;CAC1D,MAAM,aAAa,qBAAqB,UAAU;CAClD,MAAM,UAAU,QAAQ,YAAY,WAAW,EAAE;CAEjD,MAAM,eAAkD,EAAE;AAE1D,MAAK,MAAM,CAAC,MAAM,SAAS,OAAO,QAAQ,WAAW,EAAE;EACrD,MAAM,QAAQ,KAAK;AACnB,MAAI,CAAC,MAAO;EAEZ,MAAM,kBACJ,mBAAmB,MAAM,OAAO,QAAQ,IAAI,mBAAmB,MAAM,OAAO,gBAAgB;EAC9F,MAAM,mBAAmB,mBAAmB,QAAQ,MAAM;EAC1D,MAAM,UACJ,SAAS,iBACJ,oBAAoB,kBACpB,mBAAmB;AAE1B,MAAI,CAAC,SAAS;GACZ,MAAM,UAAU,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,KAAK;AACxD,SAAM,IAAI,MACR,0DAA0D,KAAK,SAAS,UACzE;;AAGH,MAAI,SAAS,kBAAkB,qBAAqB,QAAQ,gBAC1D,SAAQ,QAAQ;AAGlB,MAAI,SAAS,kBAAkB,QAAQ,UAAU,QAC/C,SAAQ,QAAQ;AAGlB,OAAK,MAAM,OAAO,MAAM;AACtB,OAAI,OAAO,UAAU;AACrB,OAAI,OAAO,kBAAkB,WAAW,QAAQ;AAChD,OAAI,OAAO,aAAa,IAAI,OAAO,cAAc;;AAGnD,eAAa,QAAQ;GACnB;GACA;GACA,iBAAiB,WAAW,QAAQ;GACpC,YAAY,MAAM,OAAO,cAAc;GACvC,WAAW,MAAM,OAAO,aAAa;GACrC,OAAO,MAAM,OAAO,SAAS;GAC7B,eAAe,MAAM,OAAO,iBAAiB;GAC7C,SAAS,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC;GAC1E;;AAGH,KAAI,CAAC,QAAQ,WACX,SAAQ,aAAa;EAAE,UAAU,EAAE;EAAE,SAAS,EAAE;EAAE;AAEpD,SAAQ,WAAW,UAAU;CAE7B,MAAM,UAAU,KAAK,UAAU,UAAU;CACzC,MAAM,UAAU,KAAK,UAAU,QAAQ;CACvC,MAAM,mBAAmB,YAAY;CACrC,MAAM,iBAAiB,YAAY;AAEnC,KAAI,kBAAkB;EACpB,MAAM,cAAc,QAAQ,mBAAmB;AAC/C,MAAI,CAAC,WAAW,YAAY,CAC1B,WAAU,aAAa,EAAE,WAAW,MAAM,CAAC;EAG7C,MAAM,UAAU,qBAAqB,UAAU;EAO/C,MAAM,iBAAiB;GACrB,WAAW;IANX,KAAK,KAAK,OAAO;IACjB,6BAAY,IAAI,MAAM,EAAC,aAAa;IACpC,cAAc,KAAK,gBAAgB,EAAE;IACrC,QAAQ;IAGO;GACf,GAAG;GACJ;AAED,qBAAmB,oBAAoB,GAAG,KAAK,UAAU,gBAAgB,MAAM,EAAE,CAAC,IAAI;;AAGxF,KAAI,eACF,oBAAmB,iBAAiB,GAAG,KAAK,UAAU,SAAS,MAAM,EAAE,CAAC,IAAI;CAG9E,MAAM,qBAAqB,iBAAiB,aAAa;CACzD,MAAM,WAA+B;EACnC,MAAM;EACN,mBAAmB,oBAAoB,mBAAmB;EAC3D;CAED,MAAM,gBAAgB;EACpB,eAAe;EACf,MAAM;EACN,8BAAa,IAAI,MAAM,EAAC,aAAa;EACrC,MAAM;EACN,mBAAmB,SAAS;EAC5B,QAAQ;GACN;GACA,UAAU,KAAK;GAChB;EACF;CAED,IAAI,kBAAiC;AACrC,KAAI;AAEF,oBADa,KAAK,MAAM,aAAa,eAAe,QAAQ,CACtC,EAAE,qBAAqB;SACvC;AAIR,WAAU,QAAQ,cAAc,EAAE,EAAE,WAAW,MAAM,CAAC;AACtD,oBAAmB,eAAe,GAAG,KAAK,UAAU,eAAe,MAAM,EAAE,CAAC,IAAI;CAEhF,MAAM,mBAAmB,oBAAoB,cAAc;AAE3D,QAAO;EACL;EACA,UAAU,KAAK;EACf;EACA;EACA;EACA;EACD"}

package/dist/types.cjs

@@ -28,6 +28,7 @@ const SharedConfigSchema = zod.object({
 	shareScope: zod.string().optional()
 });
 const SharedDepConfigSchema = SharedConfigSchema;
+const SharedDepMapSchema = zod.record(zod.string(), SharedConfigSchema);
 const FederationEntrySchema = zod.object({
 	name: zod.string(),
 	url: zod.string(),
@@ -56,7 +57,8 @@ const ComposableAppEntrySchema = zod.object({
 	variables: JsonObjectSchema.optional(),
 	secrets: zod.array(zod.string()).optional(),
 	sidebar: zod.array(SidebarItemSchema).optional(),
-	routes: zod.array(zod.string()).optional()
+	routes: zod.array(zod.string()).optional(),
+	shared: SharedDepMapSchema.optional()
 });
 const ApiPluginConfigSchema = ComposableAppEntrySchema;
 const PluginUiConfigSchema = zod.object({
@@ -68,7 +70,6 @@ const PluginUiConfigSchema = zod.object({
 const BosPluginRefSchema = ComposableAppEntrySchema.extend({
 	version: zod.string().optional(),
 	app: zod.record(zod.string(), zod.unknown()).optional(),
-	shared: zod.record(zod.string(), zod.record(zod.string(), SharedConfigSchema)).optional(),
 	plugins: zod.record(zod.string(), zod.unknown()).optional()
 });
 const PluginRuntimeUiSchema = zod.object({
@@ -91,6 +92,7 @@ const RuntimePluginConfigSchema = zod.object({
 	variables: JsonObjectSchema.optional(),
 	secrets: zod.array(zod.string()).optional(),
 	integrity: zod.string().optional(),
+	shared: SharedDepMapSchema.optional(),
 	ui: PluginRuntimeUiSchema.optional(),
 	sidebar: zod.array(SidebarItemSchema).optional(),
 	routes: zod.array(zod.string()).optional()
@@ -102,7 +104,7 @@ const UiConfigSchema = zod.object({
 	integrity: zod.string().optional(),
 	ssr: zod.string().optional(),
 	ssrIntegrity: zod.string().optional()
-});
+}).strict();
 const HostConfigSchema = zod.object({
 	development: zod.string(),
 	production: zod.string(),
@@ -147,7 +149,6 @@ const BosConfigInputSchema = zod.lazy(() => zod.object({
 	routes: zod.array(zod.string()).optional(),
 	sidebar: zod.array(SidebarItemSchema).optional(),
 	app: zod.record(zod.string(), BosConfigInputAppEntrySchema).optional(),
-	shared: zod.record(zod.string(), zod.record(zod.string(), SharedConfigSchema)).optional(),
 	plugins: zod.record(zod.string(), zod.union([zod.string(), BosConfigInputSchema])).optional(),
 	ci: CiConfigSchema.optional()
 }));
@@ -163,7 +164,6 @@ const BosConfigSchema = zod.object({
 	staging: BosStagingSchema.optional(),
 	repository: zod.string().optional(),
 	ci: CiConfigSchema.optional(),
-	shared: zod.record(zod.string(), zod.record(zod.string(), SharedConfigSchema)).optional(),
 	plugins: zod.record(zod.string(), zod.union([zod.string(), BosPluginRefSchema])).optional(),
 	app: zod.object({
 		host: HostConfigSchema,
@@ -190,10 +190,6 @@ const RuntimeConfigSchema = zod.object({
 		secrets: zod.array(zod.string()).optional(),
 		remoteUrl: zod.string().optional()
 	}),
-	shared: zod.object({
-		ui: zod.record(zod.string(), SharedConfigSchema).optional(),
-		plugins: zod.record(zod.string(), SharedConfigSchema).optional()
-	}).optional(),
 	ui: FederationEntrySchema.extend({
 		localPath: zod.string().optional(),
 		port: zod.number().optional(),
@@ -205,7 +201,8 @@ const RuntimeConfigSchema = zod.object({
 		port: zod.number().optional(),
 		proxy: zod.string().optional(),
 		variables: JsonObjectSchema.optional(),
-		secrets: zod.array(zod.string()).optional()
+		secrets: zod.array(zod.string()).optional(),
+		shared: SharedDepMapSchema.optional()
 	}),
 	auth: FederationEntrySchema.extend({
 		localPath: zod.string().optional(),
@@ -213,7 +210,8 @@ const RuntimeConfigSchema = zod.object({
 		proxy: zod.string().optional(),
 		variables: JsonObjectSchema.optional(),
 		secrets: zod.array(zod.string()).optional(),
-		sidebar: zod.array(SidebarItemSchema).optional()
+		sidebar: zod.array(SidebarItemSchema).optional(),
+		shared: SharedDepMapSchema.optional()
 	}).optional(),
 	plugins: zod.record(zod.string(), RuntimePluginConfigSchema).optional()
 });
@@ -242,13 +240,15 @@ const ClientRuntimeConfigSchema = zod.object({
 		name: zod.string(),
 		url: zod.string(),
 		entry: zod.string(),
-		integrity: zod.string().optional()
+		integrity: zod.string().optional(),
+		variables: JsonObjectSchema.optional()
 	}).optional(),
 	auth: zod.object({
 		name: zod.string(),
 		url: zod.string(),
 		entry: zod.string(),
 		integrity: zod.string().optional(),
+		variables: JsonObjectSchema.optional(),
 		sidebar: zod.array(SidebarItemSchema).optional()
 	}).optional(),
 	plugins: zod.record(zod.string(), zod.object({
@@ -256,6 +256,7 @@ const ClientRuntimeConfigSchema = zod.object({
 		url: zod.string(),
 		entry: zod.string(),
 		integrity: zod.string().optional(),
+		variables: JsonObjectSchema.optional(),
 		ui: zod.object({
 			name: zod.string(),
 			url: zod.string(),
@@ -289,6 +290,7 @@ exports.RuntimeLineageSchema = RuntimeLineageSchema;
 exports.RuntimePluginConfigSchema = RuntimePluginConfigSchema;
 exports.SharedConfigSchema = SharedConfigSchema;
 exports.SharedDepConfigSchema = SharedDepConfigSchema;
+exports.SharedDepMapSchema = SharedDepMapSchema;
 exports.SidebarItemSchema = SidebarItemSchema;
 exports.SidebarRoleSchema = SidebarRoleSchema;
 exports.SourceModeSchema = SourceModeSchema;