everything-dev 1.52.0 → 1.53.1

package/dist/api-contract.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"api-contract.mjs","names":[],"sources":["../src/api-contract.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join, relative } from \"node:path\";\nimport { fetchJsonOrNull, fetchResponse } from \"./http-client\";\nimport type { JsonObject, RuntimeConfig, RuntimePluginConfig } from \"./types\";\n\nexport interface ApiPluginManifest {\n  schemaVersion: 1;\n  kind: \"every-plugin/manifest\";\n  plugin: {\n    name: string;\n    version: string;\n  };\n  runtime: {\n    remoteEntry: string;\n  };\n  contract?: {\n    kind: \"orpc\";\n    types: {\n      path: string;\n      exportName: string;\n      typeName: string;\n      sha256?: string;\n    };\n  };\n  additionalExports?: Array<{\n    path: string;\n    exports: string[];\n    sha256?: string;\n  }>;\n  plugins?: Array<{\n    key: string;\n    name: string;\n    url: string;\n    dependsOn?: string[];\n    secrets?: string[];\n    variables?: JsonObject;\n  }>;\n  dependsOn?: string[];\n}\n\ninterface ContractSource {\n  key: string;\n  importName: string;\n  sourceFilePath: string;\n  generatedPath?: string;\n}\n\nfunction sha256(input: string): string {\n  return createHash(\"sha256\").update(input).digest(\"hex\");\n}\n\nfunction trimTrailingSlash(input: string): string {\n  return input.replace(/\\/$/, \"\");\n}\n\nfunction sanitizeIdentifier(input: string): string {\n  return input.replace(/[^A-Za-z0-9_]/g, \"_\").replace(/^[^A-Za-z_]+/, \"_\");\n}\n\nfunction toImportPath(fromFile: string, targetFile: string): string {\n  const rel = relative(dirname(fromFile), targetFile).replace(/\\\\/g, \"/\");\n  return rel.startsWith(\".\") ? rel : `./${rel}`;\n}\n\nfunction writeFileIfChanged(filePath: string, content: string) {\n  try {\n    if (readFileSync(filePath, \"utf8\") === content) return false;\n  } catch {\n    // file does not exist yet\n  }\n\n  writeFileSync(filePath, content);\n  return true;\n}\n\nfunction getApiPluginManifestUrl(apiBaseUrl: string): string {\n  return `${trimTrailingSlash(apiBaseUrl)}/plugin.manifest.json`;\n}\n\nexport async function fetchApiPluginManifest(apiBaseUrl: string): Promise<ApiPluginManifest> {\n  const url = getApiPluginManifestUrl(apiBaseUrl);\n  const manifest = await fetchJsonOrNull<ApiPluginManifest>(url, { retries: 0 });\n  if (!manifest) {\n    throw new Error(`Failed to fetch API plugin manifest from ${url}`);\n  }\n  if (manifest.schemaVersion !== 1 || manifest.kind !== \"every-plugin/manifest\") {\n    throw new Error(\"Unsupported API plugin manifest format\");\n  }\n\n  return manifest;\n}\n\nfunction localApiContractSource(configDir: string): ContractSource {\n  const sourcePath = join(configDir, \"api\", \"src\", \"contract.ts\");\n  return {\n    key: \"api\",\n    importName: \"BaseApiContract\",\n    sourceFilePath: sourcePath,\n  };\n}\n\nfunction localAuthContractSource(configDir: string): ContractSource {\n  const sourcePath = join(configDir, \"plugins\", \"auth\", \"src\", \"contract.ts\");\n  return {\n    key: \"auth\",\n    importName: \"authContract\",\n    sourceFilePath: sourcePath,\n  };\n}\n\nasync function remoteContractSource(opts: {\n  configDir: string;\n  runtimeDir: string;\n  name: string;\n  baseUrl: string;\n  generatedSubdir: string;\n}): Promise<ContractSource> {\n  const manifest = await fetchApiPluginManifest(opts.baseUrl);\n  if (!manifest.contract) {\n    throw new Error(\n      `Plugin manifest for ${manifest.plugin.name} does not advertise contract types`,\n    );\n  }\n\n  const contractUrl = `${trimTrailingSlash(opts.baseUrl)}/${manifest.contract.types.path.replace(/^\\.\\//, \"\")}`;\n  const contractResponse = await fetchResponse(contractUrl);\n  if (!contractResponse.ok) {\n    throw new Error(\n      `Failed to fetch contract types from ${contractUrl}: ${contractResponse.status} ${contractResponse.statusText}`,\n    );\n  }\n\n  const contractTypes = await contractResponse.text();\n  if (manifest.contract.types.sha256 && manifest.contract.types.sha256 !== sha256(contractTypes)) {\n    throw new Error(\"Fetched contract types failed checksum verification\");\n  }\n\n  const generatedPath = join(opts.runtimeDir, opts.generatedSubdir, \"contract.d.ts\");\n  mkdirSync(dirname(generatedPath), { recursive: true });\n  writeFileIfChanged(generatedPath, contractTypes);\n\n  return {\n    key: opts.name,\n    importName: `${sanitizeIdentifier(opts.name)}Contract`,\n    sourceFilePath: generatedPath,\n    generatedPath,\n  };\n}\n\nasync function fetchAuthExportTypes(opts: {\n  baseUrl: string;\n  runtimeDir: string;\n  manifest: ApiPluginManifest;\n}): Promise<string | null> {\n  if (!opts.manifest.additionalExports || opts.manifest.additionalExports.length === 0) {\n    return null;\n  }\n\n  const authExportEntry = opts.manifest.additionalExports.find(\n    (entry) => entry.path.includes(\"auth-export\") || entry.path.endsWith(\"auth-export.d.ts\"),\n  );\n\n  if (!authExportEntry) {\n    return null;\n  }\n\n  const exportUrl = `${trimTrailingSlash(opts.baseUrl)}/${authExportEntry.path.replace(/^\\.\\//, \"\")}`;\n  const response = await fetchResponse(exportUrl);\n  if (!response.ok) {\n    console.warn(\n      `[API Contract] Failed to fetch auth export types from ${exportUrl}: ${response.status}`,\n    );\n    return null;\n  }\n\n  const content = await response.text();\n  if (authExportEntry.sha256 && authExportEntry.sha256 !== sha256(content)) {\n    console.warn(`[API Contract] Auth export types checksum mismatch for ${exportUrl}`);\n    return null;\n  }\n\n  const generatedPath = join(opts.runtimeDir, \"auth\", \"auth-export.d.ts\");\n  mkdirSync(dirname(generatedPath), { recursive: true });\n  writeFileIfChanged(generatedPath, content);\n\n  return generatedPath;\n}\n\nfunction writeAuthTypesGen(targetPath: string, authExportPath: string) {\n  const exportImportPath = toImportPath(targetPath, authExportPath);\n  const content = [\n    `export type {`,\n    `  Auth,`,\n    `  AuthOrganizationContext,`,\n    `  AuthOrganization,`,\n    `  AuthOrganizationSummary,`,\n    `  AuthOrganizationMember,`,\n    `  AuthApiKey,`,\n    `  AuthInvitation,`,\n    `  GetActiveMemberInput,`,\n    `  GetOrganizationInput,`,\n    `  ListMembersInput,`,\n    `  ListInvitationsInput,`,\n    `  ListApiKeysInput,`,\n    `  AuthServices,`,\n    `  createAuthInstance,`,\n    `} from \"${exportImportPath}\";`,\n    `import type { InferOutput, ContractType as AuthContract } from \"${toImportPath(targetPath, join(dirname(authExportPath), \"contract.d.ts\"))}\";`,\n    `import type { Auth as BaseAuth } from \"${exportImportPath}\";`,\n    \"\",\n    'type RawAuthSession = InferOutput<\"getSession\">;',\n    'type RawAuthRequestContext = InferOutput<\"getContext\">;',\n    'type RawAuthActiveMember = InferOutput<\"getActiveMember\">;',\n    \"\",\n    'export type AuthSessionUser = NonNullable<RawAuthSession[\"user\"]>;',\n    'export type AuthSessionData = NonNullable<RawAuthSession[\"session\"]>;',\n    \"export type AuthSession = {\",\n    \"  user: AuthSessionUser | null;\",\n    \"  session: AuthSessionData | null;\",\n    \"};\",\n    \"export type AuthRequestContext = RawAuthRequestContext;\",\n    \"export type AuthPluginContext = Partial<AuthRequestContext> & {\",\n    \"  reqHeaders?: Headers;\",\n    \"  getRawBody?: () => Promise<string>;\",\n    \"};\",\n    \"export type AuthActiveMember = RawAuthActiveMember;\",\n    'export type AuthBaseSession = BaseAuth[\"$Infer\"][\"Session\"];',\n    \"export type AuthContractType = AuthContract;\",\n    \"\",\n  ].join(\"\\n\");\n  mkdirSync(dirname(targetPath), { recursive: true });\n  writeFileIfChanged(targetPath, content);\n}\n\nfunction writeContractBasedAuthTypesGen(targetPath: string, configDir: string) {\n  const authExportRel = toImportPath(\n    targetPath,\n    join(configDir, \".bos\", \"generated\", \"auth\", \"auth-export.d.ts\"),\n  );\n  const contractRel = toImportPath(\n    targetPath,\n    join(configDir, \".bos\", \"generated\", \"auth\", \"contract.d.ts\"),\n  );\n\n  const content = [\n    `export type {`,\n    `  Auth,`,\n    `  AuthOrganizationContext,`,\n    `  AuthOrganization,`,\n    `  AuthOrganizationSummary,`,\n    `  AuthOrganizationMember,`,\n    `  AuthApiKey,`,\n    `  AuthInvitation,`,\n    `  GetActiveMemberInput,`,\n    `  GetOrganizationInput,`,\n    `  ListMembersInput,`,\n    `  ListInvitationsInput,`,\n    `  ListApiKeysInput,`,\n    `  AuthServices,`,\n    `  createAuthInstance,`,\n    `} from \"${authExportRel}\";`,\n    `import type { InferOutput, ContractType as AuthContract } from \"${contractRel}\";`,\n    `import type { Auth as BaseAuth } from \"${authExportRel}\";`,\n    \"\",\n    'type RawAuthSession = InferOutput<\"getSession\">;',\n    'type RawAuthRequestContext = InferOutput<\"getContext\">;',\n    'type RawAuthActiveMember = InferOutput<\"getActiveMember\">;',\n    \"\",\n    'export type AuthSessionUser = NonNullable<RawAuthSession[\"user\"]>;',\n    'export type AuthSessionData = NonNullable<RawAuthSession[\"session\"]>;',\n    \"export type AuthSession = {\",\n    \"  user: AuthSessionUser | null;\",\n    \"  session: AuthSessionData | null;\",\n    \"};\",\n    \"export type AuthRequestContext = RawAuthRequestContext;\",\n    \"export type AuthPluginContext = Partial<AuthRequestContext> & {\",\n    \"  reqHeaders?: Headers;\",\n    \"  getRawBody?: () => Promise<string>;\",\n    \"};\",\n    \"export type AuthActiveMember = RawAuthActiveMember;\",\n    'export type AuthBaseSession = BaseAuth[\"$Infer\"][\"Session\"];',\n    \"export type AuthContractType = AuthContract;\",\n    \"\",\n  ].join(\"\\n\");\n  mkdirSync(dirname(targetPath), { recursive: true });\n  writeFileIfChanged(targetPath, content);\n}\n\nasync function resolveContractSource(opts: {\n  configDir: string;\n  runtimeDir: string;\n  key: string;\n  source: RuntimePluginConfig | { url: string; localPath?: string; name: string } | null;\n  baseUrl: string;\n  generatedSubdir: string;\n  localSourceFactory?: (configDir: string) => ContractSource;\n}): Promise<ContractSource> {\n  if (opts.key === \"api\") {\n    const localPath = opts.source && \"localPath\" in opts.source ? opts.source.localPath : undefined;\n    if (localPath != null && localPath !== \"\") {\n      return {\n        key: opts.key,\n        importName: \"BaseApiContract\",\n        sourceFilePath: join(localPath, \"src\", \"contract.ts\"),\n      };\n    }\n\n    if (!opts.baseUrl) {\n      return localApiContractSource(opts.configDir);\n    }\n  }\n\n  if (opts.key === \"auth\" && opts.localSourceFactory) {\n    const localPath = opts.source && \"localPath\" in opts.source ? opts.source.localPath : undefined;\n    if (localPath != null && localPath !== \"\") {\n      return {\n        key: opts.key,\n        importName: \"authContract\",\n        sourceFilePath: join(localPath, \"src\", \"contract.ts\"),\n      };\n    }\n\n    if (!opts.baseUrl) {\n      return opts.localSourceFactory(opts.configDir);\n    }\n  }\n\n  if (\n    opts.source &&\n    \"localPath\" in opts.source &&\n    opts.source.localPath != null &&\n    opts.source.localPath !== \"\"\n  ) {\n    return {\n      key: opts.key,\n      importName: `${sanitizeIdentifier(opts.key)}Contract`,\n      sourceFilePath: join(opts.source.localPath, \"src\", \"contract.ts\"),\n    };\n  }\n\n  return remoteContractSource({\n    configDir: opts.configDir,\n    runtimeDir: opts.runtimeDir,\n    name: opts.key,\n    baseUrl: opts.baseUrl,\n    generatedSubdir: opts.generatedSubdir,\n  });\n}\n\nfunction writePluginClientGen(opts: {\n  configDir: string;\n  pluginKey: string;\n  depSources: ContractSource[];\n}) {\n  const pluginSrcDir = join(opts.configDir, \"plugins\", opts.pluginKey, \"src\");\n  if (!existsSync(pluginSrcDir)) return;\n\n  const targetPath = join(pluginSrcDir, \"lib\", \"plugins-client.gen.ts\");\n  const lines: string[] = [];\n\n  for (const source of opts.depSources) {\n    const importPath = toImportPath(targetPath, source.sourceFilePath);\n    lines.push(`import type { ContractType as ${source.importName} } from \"${importPath}\";`);\n  }\n\n  lines.push('import type { ContractRouterClient, AnyContractRouter } from \"@orpc/contract\";');\n  lines.push(\n    \"type ClientFactory<C extends AnyContractRouter> = (context?: Record<string, unknown>) => ContractRouterClient<C>;\",\n  );\n  lines.push(\"\");\n\n  if (opts.depSources.length === 0) {\n    lines.push(\"export type PluginsClient = Record<string, never>;\");\n  } else {\n    lines.push(\"export type PluginsClient = {\");\n    for (const source of opts.depSources) {\n      const key = /^[$A-Z_][0-9A-Z_$]*$/i.test(source.key)\n        ? source.key\n        : JSON.stringify(source.key);\n      lines.push(`  ${key}: ClientFactory<${source.importName}>;`);\n    }\n    lines.push(\"};\");\n  }\n\n  mkdirSync(dirname(targetPath), { recursive: true });\n  writeFileIfChanged(targetPath, `${lines.join(\"\\n\")}\\n`);\n}\n\nexport function writeGeneratedFiles(opts: {\n  configDir: string;\n  sources: ContractSource[];\n  pluginKeys: string[];\n  authSource: ContractSource | null;\n  authExportPath?: string | null;\n  apiDependsOn?: string[];\n  pluginDependsOn?: Record<string, string[]>;\n}) {\n  const hasLocalApiWorkspace = existsSync(join(opts.configDir, \"api\", \"src\"));\n  const baseSource = opts.sources.find((source) => source.key === \"api\");\n  const pluginSources = opts.pluginKeys\n    .map((key) => opts.sources.find((entry) => entry.key === key))\n    .filter((source): source is ContractSource => Boolean(source));\n\n  if (!baseSource) {\n    throw new Error(\"API contract source is required to generate the aggregate contract\");\n  }\n\n  // --- Generate ui/src/lib/api-types.gen.ts ---\n  const uiContractPath = join(opts.configDir, \"ui\", \"src\", \"lib\", \"api-types.gen.ts\");\n  const uiLines: string[] = [];\n\n  for (const source of opts.sources) {\n    const importPath = toImportPath(uiContractPath, source.sourceFilePath);\n    uiLines.push(`import type { ContractType as ${source.importName} } from \"${importPath}\";`);\n  }\n\n  uiLines.push(\"\");\n\n  const compositeParts: string[] = [];\n  if (opts.authSource) {\n    compositeParts.push(`auth: ${opts.authSource.importName}`);\n  }\n  for (const source of pluginSources) {\n    const key = /^[$A-Z_][0-9A-Z_$]*$/i.test(source.key) ? source.key : JSON.stringify(source.key);\n    compositeParts.push(`${key}: ${source.importName}`);\n  }\n\n  if (compositeParts.length === 0) {\n    uiLines.push(`export type ApiContract = ${baseSource.importName};`);\n  } else {\n    uiLines.push(`export type ApiContract = ${baseSource.importName} & {`);\n    for (const part of compositeParts) {\n      uiLines.push(`  ${part};`);\n    }\n    uiLines.push(\"};\");\n  }\n  mkdirSync(dirname(uiContractPath), { recursive: true });\n  writeFileIfChanged(uiContractPath, `${uiLines.join(\"\\n\")}\\n`);\n\n  // --- Generate api/src/lib/plugins-types.gen.ts ---\n  // Filtered by apiDependsOn when explicit; includes all plugins + auth when implicit\n  if (hasLocalApiWorkspace) {\n    const pluginsClientPath = join(opts.configDir, \"api\", \"src\", \"lib\", \"plugins-types.gen.ts\");\n    const pluginsClientLines: string[] = [];\n\n    const allPluginSources = [...pluginSources];\n    if (opts.authSource) {\n      allPluginSources.push({ ...opts.authSource, key: \"auth\" });\n    }\n\n    const apiDepSources = opts.apiDependsOn?.length\n      ? allPluginSources.filter((s) => opts.apiDependsOn!.includes(s.key))\n      : allPluginSources;\n\n    for (const source of apiDepSources) {\n      const importPath = toImportPath(pluginsClientPath, source.sourceFilePath);\n      pluginsClientLines.push(\n        `import type { ContractType as ${source.importName} } from \"${importPath}\";`,\n      );\n    }\n\n    pluginsClientLines.push(\n      'import type { ContractRouterClient, AnyContractRouter } from \"@orpc/contract\";',\n    );\n    pluginsClientLines.push(\n      \"type ClientFactory<C extends AnyContractRouter> = (context?: Record<string, unknown>) => ContractRouterClient<C>;\",\n    );\n    pluginsClientLines.push(\"\");\n\n    if (apiDepSources.length === 0) {\n      pluginsClientLines.push(\"export type PluginsClient = Record<string, never>;\");\n    } else {\n      pluginsClientLines.push(\"export type PluginsClient = {\");\n      for (const source of apiDepSources) {\n        const key = /^[$A-Z_][0-9A-Z_$]*$/i.test(source.key)\n          ? source.key\n          : JSON.stringify(source.key);\n        pluginsClientLines.push(`  ${key}: ClientFactory<${source.importName}>;`);\n      }\n      pluginsClientLines.push(\"};\");\n    }\n\n    mkdirSync(dirname(pluginsClientPath), { recursive: true });\n    writeFileIfChanged(pluginsClientPath, `${pluginsClientLines.join(\"\\n\")}\\n`);\n  }\n\n  // --- Generate per-plugin plugins-client.gen.ts ---\n  const allSourcesForLookup = [...pluginSources];\n  if (opts.authSource) {\n    allSourcesForLookup.push({ ...opts.authSource, key: \"auth\" });\n  }\n\n  for (const pluginKey of opts.pluginKeys) {\n    const deps = opts.pluginDependsOn?.[pluginKey];\n    if (!deps?.length) continue;\n\n    const depSources = deps\n      .map((depKey) => allSourcesForLookup.find((s) => s.key === depKey))\n      .filter((s): s is ContractSource => Boolean(s));\n\n    writePluginClientGen({\n      configDir: opts.configDir,\n      pluginKey,\n      depSources,\n    });\n  }\n\n  // --- Generate */src/lib/auth-types.gen.ts ---\n  const authTypeTargets = [join(opts.configDir, \"ui\", \"src\", \"lib\", \"auth-types.gen.ts\")];\n  const apiLibDir = join(opts.configDir, \"api\", \"src\", \"lib\");\n  if (existsSync(apiLibDir)) {\n    authTypeTargets.push(join(apiLibDir, \"auth-types.gen.ts\"));\n  }\n  const hostLibDir = join(opts.configDir, \"host\", \"src\", \"lib\");\n  if (existsSync(join(opts.configDir, \"host\", \"src\"))) {\n    authTypeTargets.push(join(hostLibDir, \"auth-types.gen.ts\"));\n  }\n\n  // Per-plugin auth-types.gen.ts\n  for (const key of opts.pluginKeys) {\n    const pluginLibDir = join(opts.configDir, \"plugins\", key, \"src\", \"lib\");\n    if (existsSync(join(opts.configDir, \"plugins\", key, \"src\"))) {\n      authTypeTargets.push(join(pluginLibDir, \"auth-types.gen.ts\"));\n    }\n  }\n\n  if (opts.authExportPath) {\n    for (const authTypesPath of authTypeTargets) {\n      writeAuthTypesGen(authTypesPath, opts.authExportPath);\n    }\n  } else if (opts.authSource) {\n    for (const authTypesPath of authTypeTargets) {\n      writeContractBasedAuthTypesGen(authTypesPath, opts.configDir);\n    }\n  }\n\n  return uiContractPath;\n}\n\nexport interface ContractBridgeStatus {\n  key: string;\n  source: \"local\" | \"remote\" | \"skipped\" | \"failed\";\n  url?: string;\n  localPath?: string;\n  error?: string;\n}\n\nexport async function syncApiContractBridge(opts: {\n  configDir: string;\n  runtimeConfig: RuntimeConfig;\n  apiBaseUrl: string;\n}): Promise<{\n  bridgePath: string;\n  generatedPath: string | null;\n  manifest: ApiPluginManifest | null;\n  source: \"local\" | \"remote\";\n  status: ContractBridgeStatus[];\n}> {\n  const runtimeDir = join(opts.configDir, \".bos\", \"generated\");\n  const pluginEntries = Object.entries(opts.runtimeConfig.plugins ?? {}).sort(([a], [b]) =>\n    a.localeCompare(b),\n  );\n  const sources: ContractSource[] = [];\n  const status: ContractBridgeStatus[] = [];\n  let manifest: ApiPluginManifest | null = null;\n  let generatedPath: string | null = null;\n  let authSource: ContractSource | null = null;\n  let authExportPath: string | null = null;\n  const excludedPluginKeys = new Set<string>();\n\n  try {\n    const baseSource = await resolveContractSource({\n      configDir: opts.configDir,\n      runtimeDir,\n      key: \"api\",\n      source: opts.runtimeConfig.api,\n      baseUrl: opts.apiBaseUrl,\n      generatedSubdir: \"api\",\n    });\n    sources.push(baseSource);\n    status.push({\n      key: \"api\",\n      source: opts.runtimeConfig.api.source,\n      url: opts.runtimeConfig.api.source !== \"local\" ? opts.apiBaseUrl : undefined,\n      localPath:\n        opts.runtimeConfig.api.source === \"local\" ? opts.runtimeConfig.api.localPath : undefined,\n    });\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    console.warn(`[API Contract] Failed to resolve api contract: ${message}`);\n    status.push({\n      key: \"api\",\n      source: \"failed\",\n      url: opts.apiBaseUrl || undefined,\n      error: message,\n    });\n  }\n\n  if (opts.runtimeConfig.auth) {\n    try {\n      authSource = await resolveContractSource({\n        configDir: opts.configDir,\n        runtimeDir,\n        key: \"auth\",\n        source: opts.runtimeConfig.auth,\n        baseUrl: opts.runtimeConfig.auth.url,\n        generatedSubdir: \"auth\",\n        localSourceFactory: localAuthContractSource,\n      });\n      sources.push(authSource);\n      status.push({\n        key: \"auth\",\n        source: opts.runtimeConfig.auth.source,\n        url: opts.runtimeConfig.auth.source !== \"local\" ? opts.runtimeConfig.auth.url : undefined,\n        localPath:\n          opts.runtimeConfig.auth.source === \"local\"\n            ? opts.runtimeConfig.auth.localPath\n            : undefined,\n      });\n      if (authSource.generatedPath) {\n        generatedPath = authSource.generatedPath;\n      }\n\n      if (opts.runtimeConfig.auth.url && opts.runtimeConfig.auth.source !== \"local\") {\n        try {\n          const authManifest = await fetchApiPluginManifest(opts.runtimeConfig.auth.url);\n          const fetchedAuthExportPath = await fetchAuthExportTypes({\n            baseUrl: opts.runtimeConfig.auth.url,\n            runtimeDir,\n            manifest: authManifest,\n          });\n          if (fetchedAuthExportPath) {\n            authExportPath = fetchedAuthExportPath;\n          }\n        } catch (error) {\n          console.warn(\n            `[API Contract] Failed to fetch auth additional exports: ${error instanceof Error ? error.message : String(error)}`,\n          );\n        }\n      }\n\n      if (!authExportPath) {\n        const localAuthExport = join(opts.configDir, \"plugins\", \"auth\", \"src\", \"auth-export.ts\");\n        if (existsSync(localAuthExport)) {\n          authExportPath = localAuthExport;\n        } else {\n          const generatedAuthExport = join(runtimeDir, \"auth\", \"auth-export.d.ts\");\n          if (existsSync(generatedAuthExport)) {\n            authExportPath = generatedAuthExport;\n          }\n        }\n      }\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error);\n      console.warn(`[API Contract] Failed to resolve auth contract: ${message}`);\n      status.push({\n        key: \"auth\",\n        source: \"failed\",\n        url: opts.runtimeConfig.auth.url || undefined,\n        error: message,\n      });\n    }\n  }\n\n  for (const [key, plugin] of pluginEntries) {\n    if (!plugin.url && !plugin.localPath) {\n      console.warn(\n        `[API Contract] Skipping plugin \"${key}\" — no URL resolved (local path missing and no production URL configured)`,\n      );\n      status.push({ key, source: \"skipped\" });\n      excludedPluginKeys.add(key);\n    }\n  }\n\n  const resolvablePlugins = pluginEntries.filter(([key]) => !excludedPluginKeys.has(key));\n\n  const pluginResults = await Promise.allSettled(\n    resolvablePlugins.map(async ([key, plugin]) => {\n      const source = await resolveContractSource({\n        configDir: opts.configDir,\n        runtimeDir,\n        key,\n        source: plugin,\n        baseUrl: plugin.url,\n        generatedSubdir: `plugins/${key}`,\n      });\n      return {\n        key,\n        source,\n        plugin,\n      };\n    }),\n  );\n\n  pluginResults.forEach((result, index) => {\n    const [key, plugin] = resolvablePlugins[index];\n    if (result.status === \"fulfilled\") {\n      sources.push(result.value.source);\n      status.push({\n        key,\n        source: plugin.source,\n        url: plugin.source !== \"local\" ? plugin.url : undefined,\n        localPath: plugin.source === \"local\" ? plugin.localPath : undefined,\n      });\n      if (result.value.source.generatedPath) {\n        generatedPath = result.value.source.generatedPath;\n      }\n    } else {\n      const message =\n        result.reason instanceof Error ? result.reason.message : String(result.reason);\n      console.warn(`[API Contract] Failed to resolve plugin \"${key}\": ${message}`);\n      status.push({ key, source: \"failed\", url: plugin.url || undefined, error: message });\n      excludedPluginKeys.add(key);\n    }\n  });\n\n  const apiStatus = status.find((s) => s.key === \"api\");\n  if (apiStatus?.source === \"failed\") {\n    throw new Error(\n      `Cannot generate contract types without api contract: ${apiStatus.error ?? \"unknown error\"}`,\n    );\n  }\n\n  const allPluginKeys = pluginEntries\n    .filter(([key]) => !excludedPluginKeys.has(key))\n    .map(([key]) => key);\n\n  const pluginDependsOn: Record<string, string[]> = {};\n  for (const [key, plugin] of pluginEntries) {\n    if (!excludedPluginKeys.has(key) && plugin.dependsOn?.length) {\n      pluginDependsOn[key] = plugin.dependsOn;\n    }\n  }\n\n  writeGeneratedFiles({\n    configDir: opts.configDir,\n    sources,\n    pluginKeys: allPluginKeys,\n    authSource,\n    authExportPath,\n    apiDependsOn: opts.runtimeConfig.api.dependsOn,\n    pluginDependsOn,\n  });\n\n  if (opts.runtimeConfig.api.source !== \"local\") {\n    manifest = await fetchApiPluginManifest(opts.apiBaseUrl);\n  }\n\n  return {\n    bridgePath: join(opts.configDir, \"ui\", \"src\", \"lib\", \"api-types.gen.ts\"),\n    generatedPath,\n    manifest,\n    source: opts.runtimeConfig.api.source,\n    status,\n  };\n}\n"],"mappings":";;;;;;AAgDA,SAAS,OAAO,OAAuB;CACrC,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK;AACxD;AAEA,SAAS,kBAAkB,OAAuB;CAChD,OAAO,MAAM,QAAQ,OAAO,EAAE;AAChC;AAEA,SAAS,mBAAmB,OAAuB;CACjD,OAAO,MAAM,QAAQ,kBAAkB,GAAG,CAAC,CAAC,QAAQ,gBAAgB,GAAG;AACzE;AAEA,SAAS,aAAa,UAAkB,YAA4B;CAClE,MAAM,MAAM,SAAS,QAAQ,QAAQ,GAAG,UAAU,CAAC,CAAC,QAAQ,OAAO,GAAG;CACtE,OAAO,IAAI,WAAW,GAAG,IAAI,MAAM,KAAK;AAC1C;AAEA,SAAS,mBAAmB,UAAkB,SAAiB;CAC7D,IAAI;EACF,IAAI,aAAa,UAAU,MAAM,MAAM,SAAS,OAAO;CACzD,QAAQ,CAER;CAEA,cAAc,UAAU,OAAO;CAC/B,OAAO;AACT;AAEA,SAAS,wBAAwB,YAA4B;CAC3D,OAAO,GAAG,kBAAkB,UAAU,EAAE;AAC1C;AAEA,eAAsB,uBAAuB,YAAgD;CAC3F,MAAM,MAAM,wBAAwB,UAAU;CAC9C,MAAM,WAAW,MAAM,gBAAmC,KAAK,EAAE,SAAS,EAAE,CAAC;CAC7E,IAAI,CAAC,UACH,MAAM,IAAI,MAAM,4CAA4C,KAAK;CAEnE,IAAI,SAAS,kBAAkB,KAAK,SAAS,SAAS,yBACpD,MAAM,IAAI,MAAM,wCAAwC;CAG1D,OAAO;AACT;AAEA,SAAS,uBAAuB,WAAmC;CAEjE,OAAO;EACL,KAAK;EACL,YAAY;EACZ,gBAJiB,KAAK,WAAW,OAAO,OAAO,aAItB;CAC3B;AACF;AAEA,SAAS,wBAAwB,WAAmC;CAElE,OAAO;EACL,KAAK;EACL,YAAY;EACZ,gBAJiB,KAAK,WAAW,WAAW,QAAQ,OAAO,aAIlC;CAC3B;AACF;AAEA,eAAe,qBAAqB,MAMR;CAC1B,MAAM,WAAW,MAAM,uBAAuB,KAAK,OAAO;CAC1D,IAAI,CAAC,SAAS,UACZ,MAAM,IAAI,MACR,uBAAuB,SAAS,OAAO,KAAK,mCAC9C;CAGF,MAAM,cAAc,GAAG,kBAAkB,KAAK,OAAO,EAAE,GAAG,SAAS,SAAS,MAAM,KAAK,QAAQ,SAAS,EAAE;CAC1G,MAAM,mBAAmB,MAAM,cAAc,WAAW;CACxD,IAAI,CAAC,iBAAiB,IACpB,MAAM,IAAI,MACR,uCAAuC,YAAY,IAAI,iBAAiB,OAAO,GAAG,iBAAiB,YACrG;CAGF,MAAM,gBAAgB,MAAM,iBAAiB,KAAK;CAClD,IAAI,SAAS,SAAS,MAAM,UAAU,SAAS,SAAS,MAAM,WAAW,OAAO,aAAa,GAC3F,MAAM,IAAI,MAAM,qDAAqD;CAGvE,MAAM,gBAAgB,KAAK,KAAK,YAAY,KAAK,iBAAiB,eAAe;CACjF,UAAU,QAAQ,aAAa,GAAG,EAAE,WAAW,KAAK,CAAC;CACrD,mBAAmB,eAAe,aAAa;CAE/C,OAAO;EACL,KAAK,KAAK;EACV,YAAY,GAAG,mBAAmB,KAAK,IAAI,EAAE;EAC7C,gBAAgB;EAChB;CACF;AACF;AAEA,eAAe,qBAAqB,MAIT;CACzB,IAAI,CAAC,KAAK,SAAS,qBAAqB,KAAK,SAAS,kBAAkB,WAAW,GACjF,OAAO;CAGT,MAAM,kBAAkB,KAAK,SAAS,kBAAkB,MACrD,UAAU,MAAM,KAAK,SAAS,aAAa,KAAK,MAAM,KAAK,SAAS,kBAAkB,CACzF;CAEA,IAAI,CAAC,iBACH,OAAO;CAGT,MAAM,YAAY,GAAG,kBAAkB,KAAK,OAAO,EAAE,GAAG,gBAAgB,KAAK,QAAQ,SAAS,EAAE;CAChG,MAAM,WAAW,MAAM,cAAc,SAAS;CAC9C,IAAI,CAAC,SAAS,IAAI;EAChB,QAAQ,KACN,yDAAyD,UAAU,IAAI,SAAS,QAClF;EACA,OAAO;CACT;CAEA,MAAM,UAAU,MAAM,SAAS,KAAK;CACpC,IAAI,gBAAgB,UAAU,gBAAgB,WAAW,OAAO,OAAO,GAAG;EACxE,QAAQ,KAAK,0DAA0D,WAAW;EAClF,OAAO;CACT;CAEA,MAAM,gBAAgB,KAAK,KAAK,YAAY,QAAQ,kBAAkB;CACtE,UAAU,QAAQ,aAAa,GAAG,EAAE,WAAW,KAAK,CAAC;CACrD,mBAAmB,eAAe,OAAO;CAEzC,OAAO;AACT;AAEA,SAAS,kBAAkB,YAAoB,gBAAwB;CACrE,MAAM,mBAAmB,aAAa,YAAY,cAAc;CAChE,MAAM,UAAU;EACd;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,WAAW,iBAAiB;EAC5B,mEAAmE,aAAa,YAAY,KAAK,QAAQ,cAAc,GAAG,eAAe,CAAC,EAAE;EAC5I,0CAA0C,iBAAiB;EAC3D;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAC,CAAC,KAAK,IAAI;CACX,UAAU,QAAQ,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;CAClD,mBAAmB,YAAY,OAAO;AACxC;AAEA,SAAS,+BAA+B,YAAoB,WAAmB;CAC7E,MAAM,gBAAgB,aACpB,YACA,KAAK,WAAW,QAAQ,aAAa,QAAQ,kBAAkB,CACjE;CACA,MAAM,cAAc,aAClB,YACA,KAAK,WAAW,QAAQ,aAAa,QAAQ,eAAe,CAC9D;CAEA,MAAM,UAAU;EACd;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,WAAW,cAAc;EACzB,mEAAmE,YAAY;EAC/E,0CAA0C,cAAc;EACxD;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAC,CAAC,KAAK,IAAI;CACX,UAAU,QAAQ,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;CAClD,mBAAmB,YAAY,OAAO;AACxC;AAEA,eAAe,sBAAsB,MAQT;CAC1B,IAAI,KAAK,QAAQ,OAAO;EACtB,MAAM,YAAY,KAAK,UAAU,eAAe,KAAK,SAAS,KAAK,OAAO,YAAY;EACtF,IAAI,aAAa,QAAQ,cAAc,IACrC,OAAO;GACL,KAAK,KAAK;GACV,YAAY;GACZ,gBAAgB,KAAK,WAAW,OAAO,aAAa;EACtD;EAGF,IAAI,CAAC,KAAK,SACR,OAAO,uBAAuB,KAAK,SAAS;CAEhD;CAEA,IAAI,KAAK,QAAQ,UAAU,KAAK,oBAAoB;EAClD,MAAM,YAAY,KAAK,UAAU,eAAe,KAAK,SAAS,KAAK,OAAO,YAAY;EACtF,IAAI,aAAa,QAAQ,cAAc,IACrC,OAAO;GACL,KAAK,KAAK;GACV,YAAY;GACZ,gBAAgB,KAAK,WAAW,OAAO,aAAa;EACtD;EAGF,IAAI,CAAC,KAAK,SACR,OAAO,KAAK,mBAAmB,KAAK,SAAS;CAEjD;CAEA,IACE,KAAK,UACL,eAAe,KAAK,UACpB,KAAK,OAAO,aAAa,QACzB,KAAK,OAAO,cAAc,IAE1B,OAAO;EACL,KAAK,KAAK;EACV,YAAY,GAAG,mBAAmB,KAAK,GAAG,EAAE;EAC5C,gBAAgB,KAAK,KAAK,OAAO,WAAW,OAAO,aAAa;CAClE;CAGF,OAAO,qBAAqB;EAC1B,WAAW,KAAK;EAChB,YAAY,KAAK;EACjB,MAAM,KAAK;EACX,SAAS,KAAK;EACd,iBAAiB,KAAK;CACxB,CAAC;AACH;AAEA,SAAS,qBAAqB,MAI3B;CACD,MAAM,eAAe,KAAK,KAAK,WAAW,WAAW,KAAK,WAAW,KAAK;CAC1E,IAAI,CAAC,WAAW,YAAY,GAAG;CAE/B,MAAM,aAAa,KAAK,cAAc,OAAO,uBAAuB;CACpE,MAAM,QAAkB,CAAC;CAEzB,KAAK,MAAM,UAAU,KAAK,YAAY;EACpC,MAAM,aAAa,aAAa,YAAY,OAAO,cAAc;EACjE,MAAM,KAAK,iCAAiC,OAAO,WAAW,WAAW,WAAW,GAAG;CACzF;CAEA,MAAM,KAAK,kFAAgF;CAC3F,MAAM,KACJ,mHACF;CACA,MAAM,KAAK,EAAE;CAEb,IAAI,KAAK,WAAW,WAAW,GAC7B,MAAM,KAAK,oDAAoD;MAC1D;EACL,MAAM,KAAK,+BAA+B;EAC1C,KAAK,MAAM,UAAU,KAAK,YAAY;GACpC,MAAM,MAAM,wBAAwB,KAAK,OAAO,GAAG,IAC/C,OAAO,MACP,KAAK,UAAU,OAAO,GAAG;GAC7B,MAAM,KAAK,KAAK,IAAI,kBAAkB,OAAO,WAAW,GAAG;EAC7D;EACA,MAAM,KAAK,IAAI;CACjB;CAEA,UAAU,QAAQ,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;CAClD,mBAAmB,YAAY,GAAG,MAAM,KAAK,IAAI,EAAE,GAAG;AACxD;AAEA,SAAgB,oBAAoB,MAQjC;CACD,MAAM,uBAAuB,WAAW,KAAK,KAAK,WAAW,OAAO,KAAK,CAAC;CAC1E,MAAM,aAAa,KAAK,QAAQ,MAAM,WAAW,OAAO,QAAQ,KAAK;CACrE,MAAM,gBAAgB,KAAK,WACxB,KAAK,QAAQ,KAAK,QAAQ,MAAM,UAAU,MAAM,QAAQ,GAAG,CAAC,CAAC,CAC7D,QAAQ,WAAqC,QAAQ,MAAM,CAAC;CAE/D,IAAI,CAAC,YACH,MAAM,IAAI,MAAM,oEAAoE;CAItF,MAAM,iBAAiB,KAAK,KAAK,WAAW,MAAM,OAAO,OAAO,kBAAkB;CAClF,MAAM,UAAoB,CAAC;CAE3B,KAAK,MAAM,UAAU,KAAK,SAAS;EACjC,MAAM,aAAa,aAAa,gBAAgB,OAAO,cAAc;EACrE,QAAQ,KAAK,iCAAiC,OAAO,WAAW,WAAW,WAAW,GAAG;CAC3F;CAEA,QAAQ,KAAK,EAAE;CAEf,MAAM,iBAA2B,CAAC;CAClC,IAAI,KAAK,YACP,eAAe,KAAK,SAAS,KAAK,WAAW,YAAY;CAE3D,KAAK,MAAM,UAAU,eAAe;EAClC,MAAM,MAAM,wBAAwB,KAAK,OAAO,GAAG,IAAI,OAAO,MAAM,KAAK,UAAU,OAAO,GAAG;EAC7F,eAAe,KAAK,GAAG,IAAI,IAAI,OAAO,YAAY;CACpD;CAEA,IAAI,eAAe,WAAW,GAC5B,QAAQ,KAAK,6BAA6B,WAAW,WAAW,EAAE;MAC7D;EACL,QAAQ,KAAK,6BAA6B,WAAW,WAAW,KAAK;EACrE,KAAK,MAAM,QAAQ,gBACjB,QAAQ,KAAK,KAAK,KAAK,EAAE;EAE3B,QAAQ,KAAK,IAAI;CACnB;CACA,UAAU,QAAQ,cAAc,GAAG,EAAE,WAAW,KAAK,CAAC;CACtD,mBAAmB,gBAAgB,GAAG,QAAQ,KAAK,IAAI,EAAE,GAAG;CAI5D,IAAI,sBAAsB;EACxB,MAAM,oBAAoB,KAAK,KAAK,WAAW,OAAO,OAAO,OAAO,sBAAsB;EAC1F,MAAM,qBAA+B,CAAC;EAEtC,MAAM,mBAAmB,CAAC,GAAG,aAAa;EAC1C,IAAI,KAAK,YACP,iBAAiB,KAAK;GAAE,GAAG,KAAK;GAAY,KAAK;EAAO,CAAC;EAG3D,MAAM,gBAAgB,KAAK,cAAc,SACrC,iBAAiB,QAAQ,MAAM,KAAK,aAAc,SAAS,EAAE,GAAG,CAAC,IACjE;EAEJ,KAAK,MAAM,UAAU,eAAe;GAClC,MAAM,aAAa,aAAa,mBAAmB,OAAO,cAAc;GACxE,mBAAmB,KACjB,iCAAiC,OAAO,WAAW,WAAW,WAAW,GAC3E;EACF;EAEA,mBAAmB,KACjB,kFACF;EACA,mBAAmB,KACjB,mHACF;EACA,mBAAmB,KAAK,EAAE;EAE1B,IAAI,cAAc,WAAW,GAC3B,mBAAmB,KAAK,oDAAoD;OACvE;GACL,mBAAmB,KAAK,+BAA+B;GACvD,KAAK,MAAM,UAAU,eAAe;IAClC,MAAM,MAAM,wBAAwB,KAAK,OAAO,GAAG,IAC/C,OAAO,MACP,KAAK,UAAU,OAAO,GAAG;IAC7B,mBAAmB,KAAK,KAAK,IAAI,kBAAkB,OAAO,WAAW,GAAG;GAC1E;GACA,mBAAmB,KAAK,IAAI;EAC9B;EAEA,UAAU,QAAQ,iBAAiB,GAAG,EAAE,WAAW,KAAK,CAAC;EACzD,mBAAmB,mBAAmB,GAAG,mBAAmB,KAAK,IAAI,EAAE,GAAG;CAC5E;CAGA,MAAM,sBAAsB,CAAC,GAAG,aAAa;CAC7C,IAAI,KAAK,YACP,oBAAoB,KAAK;EAAE,GAAG,KAAK;EAAY,KAAK;CAAO,CAAC;CAG9D,KAAK,MAAM,aAAa,KAAK,YAAY;EACvC,MAAM,OAAO,KAAK,kBAAkB;EACpC,IAAI,CAAC,MAAM,QAAQ;EAEnB,MAAM,aAAa,KAChB,KAAK,WAAW,oBAAoB,MAAM,MAAM,EAAE,QAAQ,MAAM,CAAC,CAAC,CAClE,QAAQ,MAA2B,QAAQ,CAAC,CAAC;EAEhD,qBAAqB;GACnB,WAAW,KAAK;GAChB;GACA;EACF,CAAC;CACH;CAGA,MAAM,kBAAkB,CAAC,KAAK,KAAK,WAAW,MAAM,OAAO,OAAO,mBAAmB,CAAC;CACtF,MAAM,YAAY,KAAK,KAAK,WAAW,OAAO,OAAO,KAAK;CAC1D,IAAI,WAAW,SAAS,GACtB,gBAAgB,KAAK,KAAK,WAAW,mBAAmB,CAAC;CAE3D,MAAM,aAAa,KAAK,KAAK,WAAW,QAAQ,OAAO,KAAK;CAC5D,IAAI,WAAW,KAAK,KAAK,WAAW,QAAQ,KAAK,CAAC,GAChD,gBAAgB,KAAK,KAAK,YAAY,mBAAmB,CAAC;CAI5D,KAAK,MAAM,OAAO,KAAK,YAAY;EACjC,MAAM,eAAe,KAAK,KAAK,WAAW,WAAW,KAAK,OAAO,KAAK;EACtE,IAAI,WAAW,KAAK,KAAK,WAAW,WAAW,KAAK,KAAK,CAAC,GACxD,gBAAgB,KAAK,KAAK,cAAc,mBAAmB,CAAC;CAEhE;CAEA,IAAI,KAAK,gBACP,KAAK,MAAM,iBAAiB,iBAC1B,kBAAkB,eAAe,KAAK,cAAc;MAEjD,IAAI,KAAK,YACd,KAAK,MAAM,iBAAiB,iBAC1B,+BAA+B,eAAe,KAAK,SAAS;CAIhE,OAAO;AACT;AAUA,eAAsB,sBAAsB,MAUzC;CACD,MAAM,aAAa,KAAK,KAAK,WAAW,QAAQ,WAAW;CAC3D,MAAM,gBAAgB,OAAO,QAAQ,KAAK,cAAc,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OACjF,EAAE,cAAc,CAAC,CACnB;CACA,MAAM,UAA4B,CAAC;CACnC,MAAM,SAAiC,CAAC;CACxC,IAAI,WAAqC;CACzC,IAAI,gBAA+B;CACnC,IAAI,aAAoC;CACxC,IAAI,iBAAgC;CACpC,MAAM,qCAAqB,IAAI,IAAY;CAE3C,IAAI;EACF,MAAM,aAAa,MAAM,sBAAsB;GAC7C,WAAW,KAAK;GAChB;GACA,KAAK;GACL,QAAQ,KAAK,cAAc;GAC3B,SAAS,KAAK;GACd,iBAAiB;EACnB,CAAC;EACD,QAAQ,KAAK,UAAU;EACvB,OAAO,KAAK;GACV,KAAK;GACL,QAAQ,KAAK,cAAc,IAAI;GAC/B,KAAK,KAAK,cAAc,IAAI,WAAW,UAAU,KAAK,aAAa;GACnE,WACE,KAAK,cAAc,IAAI,WAAW,UAAU,KAAK,cAAc,IAAI,YAAY;EACnF,CAAC;CACH,SAAS,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EACrE,QAAQ,KAAK,kDAAkD,SAAS;EACxE,OAAO,KAAK;GACV,KAAK;GACL,QAAQ;GACR,KAAK,KAAK,cAAc;GACxB,OAAO;EACT,CAAC;CACH;CAEA,IAAI,KAAK,cAAc,MACrB,IAAI;EACF,aAAa,MAAM,sBAAsB;GACvC,WAAW,KAAK;GAChB;GACA,KAAK;GACL,QAAQ,KAAK,cAAc;GAC3B,SAAS,KAAK,cAAc,KAAK;GACjC,iBAAiB;GACjB,oBAAoB;EACtB,CAAC;EACD,QAAQ,KAAK,UAAU;EACvB,OAAO,KAAK;GACV,KAAK;GACL,QAAQ,KAAK,cAAc,KAAK;GAChC,KAAK,KAAK,cAAc,KAAK,WAAW,UAAU,KAAK,cAAc,KAAK,MAAM;GAChF,WACE,KAAK,cAAc,KAAK,WAAW,UAC/B,KAAK,cAAc,KAAK,YACxB;EACR,CAAC;EACD,IAAI,WAAW,eACb,gBAAgB,WAAW;EAG7B,IAAI,KAAK,cAAc,KAAK,OAAO,KAAK,cAAc,KAAK,WAAW,SACpE,IAAI;GACF,MAAM,eAAe,MAAM,uBAAuB,KAAK,cAAc,KAAK,GAAG;GAC7E,MAAM,wBAAwB,MAAM,qBAAqB;IACvD,SAAS,KAAK,cAAc,KAAK;IACjC;IACA,UAAU;GACZ,CAAC;GACD,IAAI,uBACF,iBAAiB;EAErB,SAAS,OAAO;GACd,QAAQ,KACN,2DAA2D,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAClH;EACF;EAGF,IAAI,CAAC,gBAAgB;GACnB,MAAM,kBAAkB,KAAK,KAAK,WAAW,WAAW,QAAQ,OAAO,gBAAgB;GACvF,IAAI,WAAW,eAAe,GAC5B,iBAAiB;QACZ;IACL,MAAM,sBAAsB,KAAK,YAAY,QAAQ,kBAAkB;IACvE,IAAI,WAAW,mBAAmB,GAChC,iBAAiB;GAErB;EACF;CACF,SAAS,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EACrE,QAAQ,KAAK,mDAAmD,SAAS;EACzE,OAAO,KAAK;GACV,KAAK;GACL,QAAQ;GACR,KAAK,KAAK,cAAc,KAAK,OAAO;GACpC,OAAO;EACT,CAAC;CACH;CAGF,KAAK,MAAM,CAAC,KAAK,WAAW,eAC1B,IAAI,CAAC,OAAO,OAAO,CAAC,OAAO,WAAW;EACpC,QAAQ,KACN,mCAAmC,IAAI,0EACzC;EACA,OAAO,KAAK;GAAE;GAAK,QAAQ;EAAU,CAAC;EACtC,mBAAmB,IAAI,GAAG;CAC5B;CAGF,MAAM,oBAAoB,cAAc,QAAQ,CAAC,SAAS,CAAC,mBAAmB,IAAI,GAAG,CAAC;CAoBtF,OAlB4B,QAAQ,WAClC,kBAAkB,IAAI,OAAO,CAAC,KAAK,YAAY;EAS7C,OAAO;GACL;GACA,cAVmB,sBAAsB;IACzC,WAAW,KAAK;IAChB;IACA;IACA,QAAQ;IACR,SAAS,OAAO;IAChB,iBAAiB,WAAW;GAC9B,CAAC;GAIC;EACF;CACF,CAAC,CACH,EAEa,CAAC,SAAS,QAAQ,UAAU;EACvC,MAAM,CAAC,KAAK,UAAU,kBAAkB;EACxC,IAAI,OAAO,WAAW,aAAa;GACjC,QAAQ,KAAK,OAAO,MAAM,MAAM;GAChC,OAAO,KAAK;IACV;IACA,QAAQ,OAAO;IACf,KAAK,OAAO,WAAW,UAAU,OAAO,MAAM;IAC9C,WAAW,OAAO,WAAW,UAAU,OAAO,YAAY;GAC5D,CAAC;GACD,IAAI,OAAO,MAAM,OAAO,eACtB,gBAAgB,OAAO,MAAM,OAAO;EAExC,OAAO;GACL,MAAM,UACJ,OAAO,kBAAkB,QAAQ,OAAO,OAAO,UAAU,OAAO,OAAO,MAAM;GAC/E,QAAQ,KAAK,4CAA4C,IAAI,KAAK,SAAS;GAC3E,OAAO,KAAK;IAAE;IAAK,QAAQ;IAAU,KAAK,OAAO,OAAO;IAAW,OAAO;GAAQ,CAAC;GACnF,mBAAmB,IAAI,GAAG;EAC5B;CACF,CAAC;CAED,MAAM,YAAY,OAAO,MAAM,MAAM,EAAE,QAAQ,KAAK;CACpD,IAAI,WAAW,WAAW,UACxB,MAAM,IAAI,MACR,wDAAwD,UAAU,SAAS,iBAC7E;CAGF,MAAM,gBAAgB,cACnB,QAAQ,CAAC,SAAS,CAAC,mBAAmB,IAAI,GAAG,CAAC,CAAC,CAC/C,KAAK,CAAC,SAAS,GAAG;CAErB,MAAM,kBAA4C,CAAC;CACnD,KAAK,MAAM,CAAC,KAAK,WAAW,eAC1B,IAAI,CAAC,mBAAmB,IAAI,GAAG,KAAK,OAAO,WAAW,QACpD,gBAAgB,OAAO,OAAO;CAIlC,oBAAoB;EAClB,WAAW,KAAK;EAChB;EACA,YAAY;EACZ;EACA;EACA,cAAc,KAAK,cAAc,IAAI;EACrC;CACF,CAAC;CAED,IAAI,KAAK,cAAc,IAAI,WAAW,SACpC,WAAW,MAAM,uBAAuB,KAAK,UAAU;CAGzD,OAAO;EACL,YAAY,KAAK,KAAK,WAAW,MAAM,OAAO,OAAO,kBAAkB;EACvE;EACA;EACA,QAAQ,KAAK,cAAc,IAAI;EAC/B;CACF;AACF"}
+{"version":3,"file":"api-contract.mjs","names":[],"sources":["../src/api-contract.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join, relative } from \"node:path\";\nimport { buildAuthTypesGenContent } from \"./auth-types-gen\";\nimport { fetchJsonOrNull, fetchResponse } from \"./http-client\";\nimport type { JsonObject, RuntimeConfig, RuntimePluginConfig } from \"./types\";\n\nexport interface ApiPluginManifest {\n  schemaVersion: 1;\n  kind: \"every-plugin/manifest\";\n  plugin: {\n    name: string;\n    version: string;\n  };\n  runtime: {\n    remoteEntry: string;\n  };\n  contract?: {\n    kind: \"orpc\";\n    types: {\n      path: string;\n      exportName: string;\n      typeName: string;\n      sha256?: string;\n    };\n  };\n  additionalExports?: Array<{\n    path: string;\n    exports: string[];\n    sha256?: string;\n  }>;\n  plugins?: Array<{\n    key: string;\n    name: string;\n    url: string;\n    dependsOn?: string[];\n    secrets?: string[];\n    variables?: JsonObject;\n  }>;\n  dependsOn?: string[];\n}\n\ninterface ContractSource {\n  key: string;\n  importName: string;\n  sourceFilePath: string;\n  generatedPath?: string;\n}\n\nfunction sha256(input: string): string {\n  return createHash(\"sha256\").update(input).digest(\"hex\");\n}\n\nfunction trimTrailingSlash(input: string): string {\n  return input.replace(/\\/$/, \"\");\n}\n\nfunction sanitizeIdentifier(input: string): string {\n  return input.replace(/[^A-Za-z0-9_]/g, \"_\").replace(/^[^A-Za-z_]+/, \"_\");\n}\n\nfunction toImportPath(fromFile: string, targetFile: string): string {\n  const rel = relative(dirname(fromFile), targetFile).replace(/\\\\/g, \"/\");\n  return rel.startsWith(\".\") ? rel : `./${rel}`;\n}\n\nfunction writeFileIfChanged(filePath: string, content: string) {\n  try {\n    if (readFileSync(filePath, \"utf8\") === content) return false;\n  } catch {\n    // file does not exist yet\n  }\n\n  writeFileSync(filePath, content);\n  return true;\n}\n\nfunction getApiPluginManifestUrl(apiBaseUrl: string): string {\n  return `${trimTrailingSlash(apiBaseUrl)}/plugin.manifest.json`;\n}\n\nexport async function fetchApiPluginManifest(apiBaseUrl: string): Promise<ApiPluginManifest> {\n  const url = getApiPluginManifestUrl(apiBaseUrl);\n  const manifest = await fetchJsonOrNull<ApiPluginManifest>(url, { retries: 0 });\n  if (!manifest) {\n    throw new Error(`Failed to fetch API plugin manifest from ${url}`);\n  }\n  if (manifest.schemaVersion !== 1 || manifest.kind !== \"every-plugin/manifest\") {\n    throw new Error(\"Unsupported API plugin manifest format\");\n  }\n\n  return manifest;\n}\n\nfunction localApiContractSource(configDir: string): ContractSource {\n  const sourcePath = join(configDir, \"api\", \"src\", \"contract.ts\");\n  return {\n    key: \"api\",\n    importName: \"BaseApiContract\",\n    sourceFilePath: sourcePath,\n  };\n}\n\nfunction localAuthContractSource(configDir: string): ContractSource {\n  const sourcePath = join(configDir, \"plugins\", \"auth\", \"src\", \"contract.ts\");\n  return {\n    key: \"auth\",\n    importName: \"authContract\",\n    sourceFilePath: sourcePath,\n  };\n}\n\nasync function remoteContractSource(opts: {\n  configDir: string;\n  runtimeDir: string;\n  name: string;\n  baseUrl: string;\n  generatedSubdir: string;\n}): Promise<ContractSource> {\n  const manifest = await fetchApiPluginManifest(opts.baseUrl);\n  if (!manifest.contract) {\n    throw new Error(\n      `Plugin manifest for ${manifest.plugin.name} does not advertise contract types`,\n    );\n  }\n\n  const contractUrl = `${trimTrailingSlash(opts.baseUrl)}/${manifest.contract.types.path.replace(/^\\.\\//, \"\")}`;\n  const contractResponse = await fetchResponse(contractUrl);\n  if (!contractResponse.ok) {\n    throw new Error(\n      `Failed to fetch contract types from ${contractUrl}: ${contractResponse.status} ${contractResponse.statusText}`,\n    );\n  }\n\n  const contractTypes = await contractResponse.text();\n  if (manifest.contract.types.sha256 && manifest.contract.types.sha256 !== sha256(contractTypes)) {\n    throw new Error(\"Fetched contract types failed checksum verification\");\n  }\n\n  const generatedPath = join(opts.runtimeDir, opts.generatedSubdir, \"contract.d.ts\");\n  mkdirSync(dirname(generatedPath), { recursive: true });\n  writeFileIfChanged(generatedPath, contractTypes);\n\n  return {\n    key: opts.name,\n    importName: `${sanitizeIdentifier(opts.name)}Contract`,\n    sourceFilePath: generatedPath,\n    generatedPath,\n  };\n}\n\nasync function fetchAuthExportTypes(opts: {\n  baseUrl: string;\n  runtimeDir: string;\n  manifest: ApiPluginManifest;\n}): Promise<string | null> {\n  if (!opts.manifest.additionalExports || opts.manifest.additionalExports.length === 0) {\n    return null;\n  }\n\n  const authExportEntry = opts.manifest.additionalExports.find(\n    (entry) => entry.path.includes(\"auth-export\") || entry.path.endsWith(\"auth-export.d.ts\"),\n  );\n\n  if (!authExportEntry) {\n    return null;\n  }\n\n  const exportUrl = `${trimTrailingSlash(opts.baseUrl)}/${authExportEntry.path.replace(/^\\.\\//, \"\")}`;\n  const response = await fetchResponse(exportUrl);\n  if (!response.ok) {\n    console.warn(\n      `[API Contract] Failed to fetch auth export types from ${exportUrl}: ${response.status}`,\n    );\n    return null;\n  }\n\n  const content = await response.text();\n  if (authExportEntry.sha256 && authExportEntry.sha256 !== sha256(content)) {\n    console.warn(`[API Contract] Auth export types checksum mismatch for ${exportUrl}`);\n    return null;\n  }\n\n  const generatedPath = join(opts.runtimeDir, \"auth\", \"auth-export.d.ts\");\n  mkdirSync(dirname(generatedPath), { recursive: true });\n  writeFileIfChanged(generatedPath, content);\n\n  return generatedPath;\n}\n\nasync function resolveContractSource(opts: {\n  configDir: string;\n  runtimeDir: string;\n  key: string;\n  source: RuntimePluginConfig | { url: string; localPath?: string; name: string } | null;\n  baseUrl: string;\n  generatedSubdir: string;\n  localSourceFactory?: (configDir: string) => ContractSource;\n}): Promise<ContractSource> {\n  if (opts.key === \"api\") {\n    const localPath = opts.source && \"localPath\" in opts.source ? opts.source.localPath : undefined;\n    if (localPath != null && localPath !== \"\") {\n      return {\n        key: opts.key,\n        importName: \"BaseApiContract\",\n        sourceFilePath: join(localPath, \"src\", \"contract.ts\"),\n      };\n    }\n\n    if (!opts.baseUrl) {\n      return localApiContractSource(opts.configDir);\n    }\n  }\n\n  if (opts.key === \"auth\" && opts.localSourceFactory) {\n    const localPath = opts.source && \"localPath\" in opts.source ? opts.source.localPath : undefined;\n    if (localPath != null && localPath !== \"\") {\n      return {\n        key: opts.key,\n        importName: \"authContract\",\n        sourceFilePath: join(localPath, \"src\", \"contract.ts\"),\n      };\n    }\n\n    if (!opts.baseUrl) {\n      return opts.localSourceFactory(opts.configDir);\n    }\n  }\n\n  if (\n    opts.source &&\n    \"localPath\" in opts.source &&\n    opts.source.localPath != null &&\n    opts.source.localPath !== \"\"\n  ) {\n    return {\n      key: opts.key,\n      importName: `${sanitizeIdentifier(opts.key)}Contract`,\n      sourceFilePath: join(opts.source.localPath, \"src\", \"contract.ts\"),\n    };\n  }\n\n  return remoteContractSource({\n    configDir: opts.configDir,\n    runtimeDir: opts.runtimeDir,\n    name: opts.key,\n    baseUrl: opts.baseUrl,\n    generatedSubdir: opts.generatedSubdir,\n  });\n}\n\nfunction writePluginClientGen(opts: {\n  configDir: string;\n  pluginKey: string;\n  depSources: ContractSource[];\n}) {\n  const pluginSrcDir = join(opts.configDir, \"plugins\", opts.pluginKey, \"src\");\n  if (!existsSync(pluginSrcDir)) return;\n\n  const targetPath = join(pluginSrcDir, \"lib\", \"plugins-client.gen.ts\");\n  const lines: string[] = [];\n\n  for (const source of opts.depSources) {\n    const importPath = toImportPath(targetPath, source.sourceFilePath);\n    lines.push(`import type { ContractType as ${source.importName} } from \"${importPath}\";`);\n  }\n\n  lines.push('import type { ContractRouterClient, AnyContractRouter } from \"@orpc/contract\";');\n  lines.push(\n    \"type ClientFactory<C extends AnyContractRouter> = (context?: Record<string, unknown>) => ContractRouterClient<C>;\",\n  );\n  lines.push(\"\");\n\n  if (opts.depSources.length === 0) {\n    lines.push(\"export type PluginsClient = Record<string, never>;\");\n  } else {\n    lines.push(\"export type PluginsClient = {\");\n    for (const source of opts.depSources) {\n      const key = /^[$A-Z_][0-9A-Z_$]*$/i.test(source.key)\n        ? source.key\n        : JSON.stringify(source.key);\n      lines.push(`  ${key}: ClientFactory<${source.importName}>;`);\n    }\n    lines.push(\"};\");\n  }\n\n  mkdirSync(dirname(targetPath), { recursive: true });\n  writeFileIfChanged(targetPath, `${lines.join(\"\\n\")}\\n`);\n}\n\nexport function writeGeneratedFiles(opts: {\n  configDir: string;\n  sources: ContractSource[];\n  pluginKeys: string[];\n  authSource: ContractSource | null;\n  authExportPath?: string | null;\n  apiDependsOn?: string[];\n  pluginDependsOn?: Record<string, string[]>;\n}) {\n  const hasLocalApiWorkspace = existsSync(join(opts.configDir, \"api\", \"src\"));\n  const baseSource = opts.sources.find((source) => source.key === \"api\");\n  const pluginSources = opts.pluginKeys\n    .map((key) => opts.sources.find((entry) => entry.key === key))\n    .filter((source): source is ContractSource => Boolean(source));\n\n  if (!baseSource) {\n    throw new Error(\"API contract source is required to generate the aggregate contract\");\n  }\n\n  // --- Generate ui/src/lib/api-types.gen.ts ---\n  const uiContractPath = join(opts.configDir, \"ui\", \"src\", \"lib\", \"api-types.gen.ts\");\n  const uiLines: string[] = [];\n\n  for (const source of opts.sources) {\n    const importPath = toImportPath(uiContractPath, source.sourceFilePath);\n    uiLines.push(`import type { ContractType as ${source.importName} } from \"${importPath}\";`);\n  }\n\n  uiLines.push(\"\");\n\n  const compositeParts: string[] = [];\n  if (opts.authSource) {\n    compositeParts.push(`auth: ${opts.authSource.importName}`);\n  }\n  for (const source of pluginSources) {\n    const key = /^[$A-Z_][0-9A-Z_$]*$/i.test(source.key) ? source.key : JSON.stringify(source.key);\n    compositeParts.push(`${key}: ${source.importName}`);\n  }\n\n  if (compositeParts.length === 0) {\n    uiLines.push(`export type ApiContract = ${baseSource.importName};`);\n  } else {\n    uiLines.push(`export type ApiContract = ${baseSource.importName} & {`);\n    for (const part of compositeParts) {\n      uiLines.push(`  ${part};`);\n    }\n    uiLines.push(\"};\");\n  }\n  mkdirSync(dirname(uiContractPath), { recursive: true });\n  writeFileIfChanged(uiContractPath, `${uiLines.join(\"\\n\")}\\n`);\n\n  // --- Generate api/src/lib/plugins-types.gen.ts ---\n  // Filtered by apiDependsOn when explicit; includes all plugins + auth when implicit\n  if (hasLocalApiWorkspace) {\n    const pluginsClientPath = join(opts.configDir, \"api\", \"src\", \"lib\", \"plugins-types.gen.ts\");\n    const pluginsClientLines: string[] = [];\n\n    const allPluginSources = [...pluginSources];\n    if (opts.authSource) {\n      allPluginSources.push({ ...opts.authSource, key: \"auth\" });\n    }\n\n    const apiDepSources = opts.apiDependsOn?.length\n      ? allPluginSources.filter((s) => opts.apiDependsOn!.includes(s.key))\n      : allPluginSources;\n\n    const unresolvedDepKeys =\n      opts.apiDependsOn?.filter((depKey) => !allPluginSources.some((s) => s.key === depKey)) ?? [];\n\n    for (const source of apiDepSources) {\n      const importPath = toImportPath(pluginsClientPath, source.sourceFilePath);\n      pluginsClientLines.push(\n        `import type { ContractType as ${source.importName} } from \"${importPath}\";`,\n      );\n    }\n\n    pluginsClientLines.push(\n      'import type { ContractRouterClient, AnyContractRouter } from \"@orpc/contract\";',\n    );\n    pluginsClientLines.push(\n      \"type ClientFactory<C extends AnyContractRouter> = (context?: Record<string, unknown>) => ContractRouterClient<C>;\",\n    );\n    pluginsClientLines.push(\"\");\n\n    if (apiDepSources.length === 0 && unresolvedDepKeys.length === 0) {\n      pluginsClientLines.push(\"export type PluginsClient = Record<string, never>;\");\n    } else {\n      pluginsClientLines.push(\"export type PluginsClient = {\");\n      for (const source of apiDepSources) {\n        const key = /^[$A-Z_][0-9A-Z_$]*$/i.test(source.key)\n          ? source.key\n          : JSON.stringify(source.key);\n        pluginsClientLines.push(`  ${key}: ClientFactory<${source.importName}>;`);\n      }\n      for (const key of unresolvedDepKeys) {\n        const keyStr = /^[$A-Z_][0-9A-Z_$]*$/i.test(key) ? key : JSON.stringify(key);\n        pluginsClientLines.push(`  ${keyStr}?: ClientFactory<AnyContractRouter>;`);\n      }\n      pluginsClientLines.push(\"};\");\n    }\n\n    mkdirSync(dirname(pluginsClientPath), { recursive: true });\n    writeFileIfChanged(pluginsClientPath, `${pluginsClientLines.join(\"\\n\")}\\n`);\n  }\n\n  // --- Generate per-plugin plugins-client.gen.ts ---\n  const allSourcesForLookup = [...pluginSources];\n  if (opts.authSource) {\n    allSourcesForLookup.push({ ...opts.authSource, key: \"auth\" });\n  }\n\n  for (const pluginKey of opts.pluginKeys) {\n    const deps = opts.pluginDependsOn?.[pluginKey];\n    if (!deps?.length) continue;\n\n    const depSources = deps\n      .map((depKey) => allSourcesForLookup.find((s) => s.key === depKey))\n      .filter((s): s is ContractSource => Boolean(s));\n\n    writePluginClientGen({\n      configDir: opts.configDir,\n      pluginKey,\n      depSources,\n    });\n  }\n\n  // --- Generate */src/lib/auth-types.gen.ts ---\n  const authTypeTargets = [join(opts.configDir, \"ui\", \"src\", \"lib\", \"auth-types.gen.ts\")];\n  const apiLibDir = join(opts.configDir, \"api\", \"src\", \"lib\");\n  if (existsSync(apiLibDir)) {\n    authTypeTargets.push(join(apiLibDir, \"auth-types.gen.ts\"));\n  }\n  const hostLibDir = join(opts.configDir, \"host\", \"src\", \"lib\");\n  if (existsSync(join(opts.configDir, \"host\", \"src\"))) {\n    authTypeTargets.push(join(hostLibDir, \"auth-types.gen.ts\"));\n  }\n\n  // Per-plugin auth-types.gen.ts\n  for (const key of opts.pluginKeys) {\n    const pluginLibDir = join(opts.configDir, \"plugins\", key, \"src\", \"lib\");\n    if (existsSync(join(opts.configDir, \"plugins\", key, \"src\"))) {\n      authTypeTargets.push(join(pluginLibDir, \"auth-types.gen.ts\"));\n    }\n  }\n\n  if (opts.authExportPath) {\n    for (const authTypesPath of authTypeTargets) {\n      const exportImportPath = toImportPath(authTypesPath, opts.authExportPath);\n      const contractImportPath = toImportPath(\n        authTypesPath,\n        join(dirname(opts.authExportPath), \"contract.d.ts\"),\n      );\n      mkdirSync(dirname(authTypesPath), { recursive: true });\n      writeFileIfChanged(\n        authTypesPath,\n        buildAuthTypesGenContent(exportImportPath, contractImportPath),\n      );\n    }\n  } else if (opts.authSource) {\n    for (const authTypesPath of authTypeTargets) {\n      const exportImportPath = toImportPath(\n        authTypesPath,\n        join(opts.configDir, \".bos\", \"generated\", \"auth\", \"auth-export.d.ts\"),\n      );\n      const contractImportPath = toImportPath(\n        authTypesPath,\n        join(opts.configDir, \".bos\", \"generated\", \"auth\", \"contract.d.ts\"),\n      );\n      mkdirSync(dirname(authTypesPath), { recursive: true });\n      writeFileIfChanged(\n        authTypesPath,\n        buildAuthTypesGenContent(exportImportPath, contractImportPath),\n      );\n    }\n  }\n\n  return uiContractPath;\n}\n\nexport interface ContractBridgeStatus {\n  key: string;\n  source: \"local\" | \"remote\" | \"skipped\" | \"failed\";\n  url?: string;\n  localPath?: string;\n  error?: string;\n}\n\nexport async function syncApiContractBridge(opts: {\n  configDir: string;\n  runtimeConfig: RuntimeConfig;\n  apiBaseUrl: string;\n}): Promise<{\n  bridgePath: string;\n  generatedPath: string | null;\n  manifest: ApiPluginManifest | null;\n  source: \"local\" | \"remote\";\n  status: ContractBridgeStatus[];\n}> {\n  const runtimeDir = join(opts.configDir, \".bos\", \"generated\");\n  const pluginEntries = Object.entries(opts.runtimeConfig.plugins ?? {}).sort(([a], [b]) =>\n    a.localeCompare(b),\n  );\n  const sources: ContractSource[] = [];\n  const status: ContractBridgeStatus[] = [];\n  let manifest: ApiPluginManifest | null = null;\n  let generatedPath: string | null = null;\n  let authSource: ContractSource | null = null;\n  let authExportPath: string | null = null;\n  const excludedPluginKeys = new Set<string>();\n\n  try {\n    const baseSource = await resolveContractSource({\n      configDir: opts.configDir,\n      runtimeDir,\n      key: \"api\",\n      source: opts.runtimeConfig.api,\n      baseUrl: opts.apiBaseUrl,\n      generatedSubdir: \"api\",\n    });\n    sources.push(baseSource);\n    status.push({\n      key: \"api\",\n      source: opts.runtimeConfig.api.source,\n      url: opts.runtimeConfig.api.source !== \"local\" ? opts.apiBaseUrl : undefined,\n      localPath:\n        opts.runtimeConfig.api.source === \"local\" ? opts.runtimeConfig.api.localPath : undefined,\n    });\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    console.warn(`[API Contract] Failed to resolve api contract: ${message}`);\n    status.push({\n      key: \"api\",\n      source: \"failed\",\n      url: opts.apiBaseUrl || undefined,\n      error: message,\n    });\n  }\n\n  if (opts.runtimeConfig.auth) {\n    try {\n      authSource = await resolveContractSource({\n        configDir: opts.configDir,\n        runtimeDir,\n        key: \"auth\",\n        source: opts.runtimeConfig.auth,\n        baseUrl: opts.runtimeConfig.auth.url,\n        generatedSubdir: \"auth\",\n        localSourceFactory: localAuthContractSource,\n      });\n      sources.push(authSource);\n      status.push({\n        key: \"auth\",\n        source: opts.runtimeConfig.auth.source,\n        url: opts.runtimeConfig.auth.source !== \"local\" ? opts.runtimeConfig.auth.url : undefined,\n        localPath:\n          opts.runtimeConfig.auth.source === \"local\"\n            ? opts.runtimeConfig.auth.localPath\n            : undefined,\n      });\n      if (authSource.generatedPath) {\n        generatedPath = authSource.generatedPath;\n      }\n\n      if (opts.runtimeConfig.auth.url && opts.runtimeConfig.auth.source !== \"local\") {\n        try {\n          const authManifest = await fetchApiPluginManifest(opts.runtimeConfig.auth.url);\n          const fetchedAuthExportPath = await fetchAuthExportTypes({\n            baseUrl: opts.runtimeConfig.auth.url,\n            runtimeDir,\n            manifest: authManifest,\n          });\n          if (fetchedAuthExportPath) {\n            authExportPath = fetchedAuthExportPath;\n          }\n        } catch (error) {\n          console.warn(\n            `[API Contract] Failed to fetch auth additional exports: ${error instanceof Error ? error.message : String(error)}`,\n          );\n        }\n      }\n\n      if (!authExportPath) {\n        const localAuthExport = join(opts.configDir, \"plugins\", \"auth\", \"src\", \"auth-export.ts\");\n        if (existsSync(localAuthExport)) {\n          authExportPath = localAuthExport;\n        } else {\n          const generatedAuthExport = join(runtimeDir, \"auth\", \"auth-export.d.ts\");\n          if (existsSync(generatedAuthExport)) {\n            authExportPath = generatedAuthExport;\n          }\n        }\n      }\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error);\n      console.warn(`[API Contract] Failed to resolve auth contract: ${message}`);\n      status.push({\n        key: \"auth\",\n        source: \"failed\",\n        url: opts.runtimeConfig.auth.url || undefined,\n        error: message,\n      });\n    }\n  }\n\n  for (const [key, plugin] of pluginEntries) {\n    if (!plugin.url && !plugin.localPath) {\n      console.warn(\n        `[API Contract] Skipping plugin \"${key}\" — no URL resolved (local path missing and no production URL configured)`,\n      );\n      status.push({ key, source: \"skipped\" });\n      excludedPluginKeys.add(key);\n    }\n  }\n\n  const resolvablePlugins = pluginEntries.filter(([key]) => !excludedPluginKeys.has(key));\n\n  const pluginResults = await Promise.allSettled(\n    resolvablePlugins.map(async ([key, plugin]) => {\n      const source = await resolveContractSource({\n        configDir: opts.configDir,\n        runtimeDir,\n        key,\n        source: plugin,\n        baseUrl: plugin.url,\n        generatedSubdir: `plugins/${key}`,\n      });\n      return {\n        key,\n        source,\n        plugin,\n      };\n    }),\n  );\n\n  pluginResults.forEach((result, index) => {\n    const [key, plugin] = resolvablePlugins[index];\n    if (result.status === \"fulfilled\") {\n      sources.push(result.value.source);\n      status.push({\n        key,\n        source: plugin.source,\n        url: plugin.source !== \"local\" ? plugin.url : undefined,\n        localPath: plugin.source === \"local\" ? plugin.localPath : undefined,\n      });\n      if (result.value.source.generatedPath) {\n        generatedPath = result.value.source.generatedPath;\n      }\n    } else {\n      const message =\n        result.reason instanceof Error ? result.reason.message : String(result.reason);\n      console.warn(`[API Contract] Failed to resolve plugin \"${key}\": ${message}`);\n      status.push({ key, source: \"failed\", url: plugin.url || undefined, error: message });\n      excludedPluginKeys.add(key);\n    }\n  });\n\n  const apiStatus = status.find((s) => s.key === \"api\");\n  if (apiStatus?.source === \"failed\") {\n    throw new Error(\n      `Cannot generate contract types without api contract: ${apiStatus.error ?? \"unknown error\"}`,\n    );\n  }\n\n  const allPluginKeys = pluginEntries\n    .filter(([key]) => !excludedPluginKeys.has(key))\n    .map(([key]) => key);\n\n  const pluginDependsOn: Record<string, string[]> = {};\n  for (const [key, plugin] of pluginEntries) {\n    if (!excludedPluginKeys.has(key) && plugin.dependsOn?.length) {\n      pluginDependsOn[key] = plugin.dependsOn;\n    }\n  }\n\n  writeGeneratedFiles({\n    configDir: opts.configDir,\n    sources,\n    pluginKeys: allPluginKeys,\n    authSource,\n    authExportPath,\n    apiDependsOn: opts.runtimeConfig.api.dependsOn,\n    pluginDependsOn,\n  });\n\n  if (opts.runtimeConfig.api.source !== \"local\") {\n    manifest = await fetchApiPluginManifest(opts.apiBaseUrl);\n  }\n\n  return {\n    bridgePath: join(opts.configDir, \"ui\", \"src\", \"lib\", \"api-types.gen.ts\"),\n    generatedPath,\n    manifest,\n    source: opts.runtimeConfig.api.source,\n    status,\n  };\n}\n"],"mappings":";;;;;;;AAiDA,SAAS,OAAO,OAAuB;CACrC,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK;AACxD;AAEA,SAAS,kBAAkB,OAAuB;CAChD,OAAO,MAAM,QAAQ,OAAO,EAAE;AAChC;AAEA,SAAS,mBAAmB,OAAuB;CACjD,OAAO,MAAM,QAAQ,kBAAkB,GAAG,CAAC,CAAC,QAAQ,gBAAgB,GAAG;AACzE;AAEA,SAAS,aAAa,UAAkB,YAA4B;CAClE,MAAM,MAAM,SAAS,QAAQ,QAAQ,GAAG,UAAU,CAAC,CAAC,QAAQ,OAAO,GAAG;CACtE,OAAO,IAAI,WAAW,GAAG,IAAI,MAAM,KAAK;AAC1C;AAEA,SAAS,mBAAmB,UAAkB,SAAiB;CAC7D,IAAI;EACF,IAAI,aAAa,UAAU,MAAM,MAAM,SAAS,OAAO;CACzD,QAAQ,CAER;CAEA,cAAc,UAAU,OAAO;CAC/B,OAAO;AACT;AAEA,SAAS,wBAAwB,YAA4B;CAC3D,OAAO,GAAG,kBAAkB,UAAU,EAAE;AAC1C;AAEA,eAAsB,uBAAuB,YAAgD;CAC3F,MAAM,MAAM,wBAAwB,UAAU;CAC9C,MAAM,WAAW,MAAM,gBAAmC,KAAK,EAAE,SAAS,EAAE,CAAC;CAC7E,IAAI,CAAC,UACH,MAAM,IAAI,MAAM,4CAA4C,KAAK;CAEnE,IAAI,SAAS,kBAAkB,KAAK,SAAS,SAAS,yBACpD,MAAM,IAAI,MAAM,wCAAwC;CAG1D,OAAO;AACT;AAEA,SAAS,uBAAuB,WAAmC;CAEjE,OAAO;EACL,KAAK;EACL,YAAY;EACZ,gBAJiB,KAAK,WAAW,OAAO,OAAO,aAItB;CAC3B;AACF;AAEA,SAAS,wBAAwB,WAAmC;CAElE,OAAO;EACL,KAAK;EACL,YAAY;EACZ,gBAJiB,KAAK,WAAW,WAAW,QAAQ,OAAO,aAIlC;CAC3B;AACF;AAEA,eAAe,qBAAqB,MAMR;CAC1B,MAAM,WAAW,MAAM,uBAAuB,KAAK,OAAO;CAC1D,IAAI,CAAC,SAAS,UACZ,MAAM,IAAI,MACR,uBAAuB,SAAS,OAAO,KAAK,mCAC9C;CAGF,MAAM,cAAc,GAAG,kBAAkB,KAAK,OAAO,EAAE,GAAG,SAAS,SAAS,MAAM,KAAK,QAAQ,SAAS,EAAE;CAC1G,MAAM,mBAAmB,MAAM,cAAc,WAAW;CACxD,IAAI,CAAC,iBAAiB,IACpB,MAAM,IAAI,MACR,uCAAuC,YAAY,IAAI,iBAAiB,OAAO,GAAG,iBAAiB,YACrG;CAGF,MAAM,gBAAgB,MAAM,iBAAiB,KAAK;CAClD,IAAI,SAAS,SAAS,MAAM,UAAU,SAAS,SAAS,MAAM,WAAW,OAAO,aAAa,GAC3F,MAAM,IAAI,MAAM,qDAAqD;CAGvE,MAAM,gBAAgB,KAAK,KAAK,YAAY,KAAK,iBAAiB,eAAe;CACjF,UAAU,QAAQ,aAAa,GAAG,EAAE,WAAW,KAAK,CAAC;CACrD,mBAAmB,eAAe,aAAa;CAE/C,OAAO;EACL,KAAK,KAAK;EACV,YAAY,GAAG,mBAAmB,KAAK,IAAI,EAAE;EAC7C,gBAAgB;EAChB;CACF;AACF;AAEA,eAAe,qBAAqB,MAIT;CACzB,IAAI,CAAC,KAAK,SAAS,qBAAqB,KAAK,SAAS,kBAAkB,WAAW,GACjF,OAAO;CAGT,MAAM,kBAAkB,KAAK,SAAS,kBAAkB,MACrD,UAAU,MAAM,KAAK,SAAS,aAAa,KAAK,MAAM,KAAK,SAAS,kBAAkB,CACzF;CAEA,IAAI,CAAC,iBACH,OAAO;CAGT,MAAM,YAAY,GAAG,kBAAkB,KAAK,OAAO,EAAE,GAAG,gBAAgB,KAAK,QAAQ,SAAS,EAAE;CAChG,MAAM,WAAW,MAAM,cAAc,SAAS;CAC9C,IAAI,CAAC,SAAS,IAAI;EAChB,QAAQ,KACN,yDAAyD,UAAU,IAAI,SAAS,QAClF;EACA,OAAO;CACT;CAEA,MAAM,UAAU,MAAM,SAAS,KAAK;CACpC,IAAI,gBAAgB,UAAU,gBAAgB,WAAW,OAAO,OAAO,GAAG;EACxE,QAAQ,KAAK,0DAA0D,WAAW;EAClF,OAAO;CACT;CAEA,MAAM,gBAAgB,KAAK,KAAK,YAAY,QAAQ,kBAAkB;CACtE,UAAU,QAAQ,aAAa,GAAG,EAAE,WAAW,KAAK,CAAC;CACrD,mBAAmB,eAAe,OAAO;CAEzC,OAAO;AACT;AAEA,eAAe,sBAAsB,MAQT;CAC1B,IAAI,KAAK,QAAQ,OAAO;EACtB,MAAM,YAAY,KAAK,UAAU,eAAe,KAAK,SAAS,KAAK,OAAO,YAAY;EACtF,IAAI,aAAa,QAAQ,cAAc,IACrC,OAAO;GACL,KAAK,KAAK;GACV,YAAY;GACZ,gBAAgB,KAAK,WAAW,OAAO,aAAa;EACtD;EAGF,IAAI,CAAC,KAAK,SACR,OAAO,uBAAuB,KAAK,SAAS;CAEhD;CAEA,IAAI,KAAK,QAAQ,UAAU,KAAK,oBAAoB;EAClD,MAAM,YAAY,KAAK,UAAU,eAAe,KAAK,SAAS,KAAK,OAAO,YAAY;EACtF,IAAI,aAAa,QAAQ,cAAc,IACrC,OAAO;GACL,KAAK,KAAK;GACV,YAAY;GACZ,gBAAgB,KAAK,WAAW,OAAO,aAAa;EACtD;EAGF,IAAI,CAAC,KAAK,SACR,OAAO,KAAK,mBAAmB,KAAK,SAAS;CAEjD;CAEA,IACE,KAAK,UACL,eAAe,KAAK,UACpB,KAAK,OAAO,aAAa,QACzB,KAAK,OAAO,cAAc,IAE1B,OAAO;EACL,KAAK,KAAK;EACV,YAAY,GAAG,mBAAmB,KAAK,GAAG,EAAE;EAC5C,gBAAgB,KAAK,KAAK,OAAO,WAAW,OAAO,aAAa;CAClE;CAGF,OAAO,qBAAqB;EAC1B,WAAW,KAAK;EAChB,YAAY,KAAK;EACjB,MAAM,KAAK;EACX,SAAS,KAAK;EACd,iBAAiB,KAAK;CACxB,CAAC;AACH;AAEA,SAAS,qBAAqB,MAI3B;CACD,MAAM,eAAe,KAAK,KAAK,WAAW,WAAW,KAAK,WAAW,KAAK;CAC1E,IAAI,CAAC,WAAW,YAAY,GAAG;CAE/B,MAAM,aAAa,KAAK,cAAc,OAAO,uBAAuB;CACpE,MAAM,QAAkB,CAAC;CAEzB,KAAK,MAAM,UAAU,KAAK,YAAY;EACpC,MAAM,aAAa,aAAa,YAAY,OAAO,cAAc;EACjE,MAAM,KAAK,iCAAiC,OAAO,WAAW,WAAW,WAAW,GAAG;CACzF;CAEA,MAAM,KAAK,kFAAgF;CAC3F,MAAM,KACJ,mHACF;CACA,MAAM,KAAK,EAAE;CAEb,IAAI,KAAK,WAAW,WAAW,GAC7B,MAAM,KAAK,oDAAoD;MAC1D;EACL,MAAM,KAAK,+BAA+B;EAC1C,KAAK,MAAM,UAAU,KAAK,YAAY;GACpC,MAAM,MAAM,wBAAwB,KAAK,OAAO,GAAG,IAC/C,OAAO,MACP,KAAK,UAAU,OAAO,GAAG;GAC7B,MAAM,KAAK,KAAK,IAAI,kBAAkB,OAAO,WAAW,GAAG;EAC7D;EACA,MAAM,KAAK,IAAI;CACjB;CAEA,UAAU,QAAQ,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;CAClD,mBAAmB,YAAY,GAAG,MAAM,KAAK,IAAI,EAAE,GAAG;AACxD;AAEA,SAAgB,oBAAoB,MAQjC;CACD,MAAM,uBAAuB,WAAW,KAAK,KAAK,WAAW,OAAO,KAAK,CAAC;CAC1E,MAAM,aAAa,KAAK,QAAQ,MAAM,WAAW,OAAO,QAAQ,KAAK;CACrE,MAAM,gBAAgB,KAAK,WACxB,KAAK,QAAQ,KAAK,QAAQ,MAAM,UAAU,MAAM,QAAQ,GAAG,CAAC,CAAC,CAC7D,QAAQ,WAAqC,QAAQ,MAAM,CAAC;CAE/D,IAAI,CAAC,YACH,MAAM,IAAI,MAAM,oEAAoE;CAItF,MAAM,iBAAiB,KAAK,KAAK,WAAW,MAAM,OAAO,OAAO,kBAAkB;CAClF,MAAM,UAAoB,CAAC;CAE3B,KAAK,MAAM,UAAU,KAAK,SAAS;EACjC,MAAM,aAAa,aAAa,gBAAgB,OAAO,cAAc;EACrE,QAAQ,KAAK,iCAAiC,OAAO,WAAW,WAAW,WAAW,GAAG;CAC3F;CAEA,QAAQ,KAAK,EAAE;CAEf,MAAM,iBAA2B,CAAC;CAClC,IAAI,KAAK,YACP,eAAe,KAAK,SAAS,KAAK,WAAW,YAAY;CAE3D,KAAK,MAAM,UAAU,eAAe;EAClC,MAAM,MAAM,wBAAwB,KAAK,OAAO,GAAG,IAAI,OAAO,MAAM,KAAK,UAAU,OAAO,GAAG;EAC7F,eAAe,KAAK,GAAG,IAAI,IAAI,OAAO,YAAY;CACpD;CAEA,IAAI,eAAe,WAAW,GAC5B,QAAQ,KAAK,6BAA6B,WAAW,WAAW,EAAE;MAC7D;EACL,QAAQ,KAAK,6BAA6B,WAAW,WAAW,KAAK;EACrE,KAAK,MAAM,QAAQ,gBACjB,QAAQ,KAAK,KAAK,KAAK,EAAE;EAE3B,QAAQ,KAAK,IAAI;CACnB;CACA,UAAU,QAAQ,cAAc,GAAG,EAAE,WAAW,KAAK,CAAC;CACtD,mBAAmB,gBAAgB,GAAG,QAAQ,KAAK,IAAI,EAAE,GAAG;CAI5D,IAAI,sBAAsB;EACxB,MAAM,oBAAoB,KAAK,KAAK,WAAW,OAAO,OAAO,OAAO,sBAAsB;EAC1F,MAAM,qBAA+B,CAAC;EAEtC,MAAM,mBAAmB,CAAC,GAAG,aAAa;EAC1C,IAAI,KAAK,YACP,iBAAiB,KAAK;GAAE,GAAG,KAAK;GAAY,KAAK;EAAO,CAAC;EAG3D,MAAM,gBAAgB,KAAK,cAAc,SACrC,iBAAiB,QAAQ,MAAM,KAAK,aAAc,SAAS,EAAE,GAAG,CAAC,IACjE;EAEJ,MAAM,oBACJ,KAAK,cAAc,QAAQ,WAAW,CAAC,iBAAiB,MAAM,MAAM,EAAE,QAAQ,MAAM,CAAC,KAAK,CAAC;EAE7F,KAAK,MAAM,UAAU,eAAe;GAClC,MAAM,aAAa,aAAa,mBAAmB,OAAO,cAAc;GACxE,mBAAmB,KACjB,iCAAiC,OAAO,WAAW,WAAW,WAAW,GAC3E;EACF;EAEA,mBAAmB,KACjB,kFACF;EACA,mBAAmB,KACjB,mHACF;EACA,mBAAmB,KAAK,EAAE;EAE1B,IAAI,cAAc,WAAW,KAAK,kBAAkB,WAAW,GAC7D,mBAAmB,KAAK,oDAAoD;OACvE;GACL,mBAAmB,KAAK,+BAA+B;GACvD,KAAK,MAAM,UAAU,eAAe;IAClC,MAAM,MAAM,wBAAwB,KAAK,OAAO,GAAG,IAC/C,OAAO,MACP,KAAK,UAAU,OAAO,GAAG;IAC7B,mBAAmB,KAAK,KAAK,IAAI,kBAAkB,OAAO,WAAW,GAAG;GAC1E;GACA,KAAK,MAAM,OAAO,mBAAmB;IACnC,MAAM,SAAS,wBAAwB,KAAK,GAAG,IAAI,MAAM,KAAK,UAAU,GAAG;IAC3E,mBAAmB,KAAK,KAAK,OAAO,qCAAqC;GAC3E;GACA,mBAAmB,KAAK,IAAI;EAC9B;EAEA,UAAU,QAAQ,iBAAiB,GAAG,EAAE,WAAW,KAAK,CAAC;EACzD,mBAAmB,mBAAmB,GAAG,mBAAmB,KAAK,IAAI,EAAE,GAAG;CAC5E;CAGA,MAAM,sBAAsB,CAAC,GAAG,aAAa;CAC7C,IAAI,KAAK,YACP,oBAAoB,KAAK;EAAE,GAAG,KAAK;EAAY,KAAK;CAAO,CAAC;CAG9D,KAAK,MAAM,aAAa,KAAK,YAAY;EACvC,MAAM,OAAO,KAAK,kBAAkB;EACpC,IAAI,CAAC,MAAM,QAAQ;EAEnB,MAAM,aAAa,KAChB,KAAK,WAAW,oBAAoB,MAAM,MAAM,EAAE,QAAQ,MAAM,CAAC,CAAC,CAClE,QAAQ,MAA2B,QAAQ,CAAC,CAAC;EAEhD,qBAAqB;GACnB,WAAW,KAAK;GAChB;GACA;EACF,CAAC;CACH;CAGA,MAAM,kBAAkB,CAAC,KAAK,KAAK,WAAW,MAAM,OAAO,OAAO,mBAAmB,CAAC;CACtF,MAAM,YAAY,KAAK,KAAK,WAAW,OAAO,OAAO,KAAK;CAC1D,IAAI,WAAW,SAAS,GACtB,gBAAgB,KAAK,KAAK,WAAW,mBAAmB,CAAC;CAE3D,MAAM,aAAa,KAAK,KAAK,WAAW,QAAQ,OAAO,KAAK;CAC5D,IAAI,WAAW,KAAK,KAAK,WAAW,QAAQ,KAAK,CAAC,GAChD,gBAAgB,KAAK,KAAK,YAAY,mBAAmB,CAAC;CAI5D,KAAK,MAAM,OAAO,KAAK,YAAY;EACjC,MAAM,eAAe,KAAK,KAAK,WAAW,WAAW,KAAK,OAAO,KAAK;EACtE,IAAI,WAAW,KAAK,KAAK,WAAW,WAAW,KAAK,KAAK,CAAC,GACxD,gBAAgB,KAAK,KAAK,cAAc,mBAAmB,CAAC;CAEhE;CAEA,IAAI,KAAK,gBACP,KAAK,MAAM,iBAAiB,iBAAiB;EAC3C,MAAM,mBAAmB,aAAa,eAAe,KAAK,cAAc;EACxE,MAAM,qBAAqB,aACzB,eACA,KAAK,QAAQ,KAAK,cAAc,GAAG,eAAe,CACpD;EACA,UAAU,QAAQ,aAAa,GAAG,EAAE,WAAW,KAAK,CAAC;EACrD,mBACE,eACA,yBAAyB,kBAAkB,kBAAkB,CAC/D;CACF;MACK,IAAI,KAAK,YACd,KAAK,MAAM,iBAAiB,iBAAiB;EAC3C,MAAM,mBAAmB,aACvB,eACA,KAAK,KAAK,WAAW,QAAQ,aAAa,QAAQ,kBAAkB,CACtE;EACA,MAAM,qBAAqB,aACzB,eACA,KAAK,KAAK,WAAW,QAAQ,aAAa,QAAQ,eAAe,CACnE;EACA,UAAU,QAAQ,aAAa,GAAG,EAAE,WAAW,KAAK,CAAC;EACrD,mBACE,eACA,yBAAyB,kBAAkB,kBAAkB,CAC/D;CACF;CAGF,OAAO;AACT;AAUA,eAAsB,sBAAsB,MAUzC;CACD,MAAM,aAAa,KAAK,KAAK,WAAW,QAAQ,WAAW;CAC3D,MAAM,gBAAgB,OAAO,QAAQ,KAAK,cAAc,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OACjF,EAAE,cAAc,CAAC,CACnB;CACA,MAAM,UAA4B,CAAC;CACnC,MAAM,SAAiC,CAAC;CACxC,IAAI,WAAqC;CACzC,IAAI,gBAA+B;CACnC,IAAI,aAAoC;CACxC,IAAI,iBAAgC;CACpC,MAAM,qCAAqB,IAAI,IAAY;CAE3C,IAAI;EACF,MAAM,aAAa,MAAM,sBAAsB;GAC7C,WAAW,KAAK;GAChB;GACA,KAAK;GACL,QAAQ,KAAK,cAAc;GAC3B,SAAS,KAAK;GACd,iBAAiB;EACnB,CAAC;EACD,QAAQ,KAAK,UAAU;EACvB,OAAO,KAAK;GACV,KAAK;GACL,QAAQ,KAAK,cAAc,IAAI;GAC/B,KAAK,KAAK,cAAc,IAAI,WAAW,UAAU,KAAK,aAAa;GACnE,WACE,KAAK,cAAc,IAAI,WAAW,UAAU,KAAK,cAAc,IAAI,YAAY;EACnF,CAAC;CACH,SAAS,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EACrE,QAAQ,KAAK,kDAAkD,SAAS;EACxE,OAAO,KAAK;GACV,KAAK;GACL,QAAQ;GACR,KAAK,KAAK,cAAc;GACxB,OAAO;EACT,CAAC;CACH;CAEA,IAAI,KAAK,cAAc,MACrB,IAAI;EACF,aAAa,MAAM,sBAAsB;GACvC,WAAW,KAAK;GAChB;GACA,KAAK;GACL,QAAQ,KAAK,cAAc;GAC3B,SAAS,KAAK,cAAc,KAAK;GACjC,iBAAiB;GACjB,oBAAoB;EACtB,CAAC;EACD,QAAQ,KAAK,UAAU;EACvB,OAAO,KAAK;GACV,KAAK;GACL,QAAQ,KAAK,cAAc,KAAK;GAChC,KAAK,KAAK,cAAc,KAAK,WAAW,UAAU,KAAK,cAAc,KAAK,MAAM;GAChF,WACE,KAAK,cAAc,KAAK,WAAW,UAC/B,KAAK,cAAc,KAAK,YACxB;EACR,CAAC;EACD,IAAI,WAAW,eACb,gBAAgB,WAAW;EAG7B,IAAI,KAAK,cAAc,KAAK,OAAO,KAAK,cAAc,KAAK,WAAW,SACpE,IAAI;GACF,MAAM,eAAe,MAAM,uBAAuB,KAAK,cAAc,KAAK,GAAG;GAC7E,MAAM,wBAAwB,MAAM,qBAAqB;IACvD,SAAS,KAAK,cAAc,KAAK;IACjC;IACA,UAAU;GACZ,CAAC;GACD,IAAI,uBACF,iBAAiB;EAErB,SAAS,OAAO;GACd,QAAQ,KACN,2DAA2D,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAClH;EACF;EAGF,IAAI,CAAC,gBAAgB;GACnB,MAAM,kBAAkB,KAAK,KAAK,WAAW,WAAW,QAAQ,OAAO,gBAAgB;GACvF,IAAI,WAAW,eAAe,GAC5B,iBAAiB;QACZ;IACL,MAAM,sBAAsB,KAAK,YAAY,QAAQ,kBAAkB;IACvE,IAAI,WAAW,mBAAmB,GAChC,iBAAiB;GAErB;EACF;CACF,SAAS,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EACrE,QAAQ,KAAK,mDAAmD,SAAS;EACzE,OAAO,KAAK;GACV,KAAK;GACL,QAAQ;GACR,KAAK,KAAK,cAAc,KAAK,OAAO;GACpC,OAAO;EACT,CAAC;CACH;CAGF,KAAK,MAAM,CAAC,KAAK,WAAW,eAC1B,IAAI,CAAC,OAAO,OAAO,CAAC,OAAO,WAAW;EACpC,QAAQ,KACN,mCAAmC,IAAI,0EACzC;EACA,OAAO,KAAK;GAAE;GAAK,QAAQ;EAAU,CAAC;EACtC,mBAAmB,IAAI,GAAG;CAC5B;CAGF,MAAM,oBAAoB,cAAc,QAAQ,CAAC,SAAS,CAAC,mBAAmB,IAAI,GAAG,CAAC;CAoBtF,OAlB4B,QAAQ,WAClC,kBAAkB,IAAI,OAAO,CAAC,KAAK,YAAY;EAS7C,OAAO;GACL;GACA,cAVmB,sBAAsB;IACzC,WAAW,KAAK;IAChB;IACA;IACA,QAAQ;IACR,SAAS,OAAO;IAChB,iBAAiB,WAAW;GAC9B,CAAC;GAIC;EACF;CACF,CAAC,CACH,EAEa,CAAC,SAAS,QAAQ,UAAU;EACvC,MAAM,CAAC,KAAK,UAAU,kBAAkB;EACxC,IAAI,OAAO,WAAW,aAAa;GACjC,QAAQ,KAAK,OAAO,MAAM,MAAM;GAChC,OAAO,KAAK;IACV;IACA,QAAQ,OAAO;IACf,KAAK,OAAO,WAAW,UAAU,OAAO,MAAM;IAC9C,WAAW,OAAO,WAAW,UAAU,OAAO,YAAY;GAC5D,CAAC;GACD,IAAI,OAAO,MAAM,OAAO,eACtB,gBAAgB,OAAO,MAAM,OAAO;EAExC,OAAO;GACL,MAAM,UACJ,OAAO,kBAAkB,QAAQ,OAAO,OAAO,UAAU,OAAO,OAAO,MAAM;GAC/E,QAAQ,KAAK,4CAA4C,IAAI,KAAK,SAAS;GAC3E,OAAO,KAAK;IAAE;IAAK,QAAQ;IAAU,KAAK,OAAO,OAAO;IAAW,OAAO;GAAQ,CAAC;GACnF,mBAAmB,IAAI,GAAG;EAC5B;CACF,CAAC;CAED,MAAM,YAAY,OAAO,MAAM,MAAM,EAAE,QAAQ,KAAK;CACpD,IAAI,WAAW,WAAW,UACxB,MAAM,IAAI,MACR,wDAAwD,UAAU,SAAS,iBAC7E;CAGF,MAAM,gBAAgB,cACnB,QAAQ,CAAC,SAAS,CAAC,mBAAmB,IAAI,GAAG,CAAC,CAAC,CAC/C,KAAK,CAAC,SAAS,GAAG;CAErB,MAAM,kBAA4C,CAAC;CACnD,KAAK,MAAM,CAAC,KAAK,WAAW,eAC1B,IAAI,CAAC,mBAAmB,IAAI,GAAG,KAAK,OAAO,WAAW,QACpD,gBAAgB,OAAO,OAAO;CAIlC,oBAAoB;EAClB,WAAW,KAAK;EAChB;EACA,YAAY;EACZ;EACA;EACA,cAAc,KAAK,cAAc,IAAI;EACrC;CACF,CAAC;CAED,IAAI,KAAK,cAAc,IAAI,WAAW,SACpC,WAAW,MAAM,uBAAuB,KAAK,UAAU;CAGzD,OAAO;EACL,YAAY,KAAK,KAAK,WAAW,MAAM,OAAO,OAAO,kBAAkB;EACvE;EACA;EACA,QAAQ,KAAK,cAAc,IAAI;EAC/B;CACF;AACF"}

package/dist/auth-types-gen.cjs

@@ -0,0 +1,51 @@
+
+//#region src/auth-types-gen.ts
+const AUTH_DERIVED_TYPES_BODY = `
+export type AuthSessionUser = NonNullable<InferOutput<"getSession">["user"]>;
+export type AuthSessionData = NonNullable<InferOutput<"getSession">["session"]>;
+export type AuthSession = {
+  user: AuthSessionUser | null;
+  session: AuthSessionData | null;
+};
+export type AuthRequestContext = InferOutput<"getContext">;
+export type AuthPluginContext = Partial<AuthRequestContext> & {
+  reqHeaders?: Headers;
+  getRawBody?: () => Promise<string>;
+};
+`;
+function buildAuthTypesGenContent(authExportImportPath, contractImportPath) {
+	return `export type * from "${authExportImportPath}";
+import type { InferOutput } from "${contractImportPath}";
+${AUTH_DERIVED_TYPES_BODY}
+`;
+}
+function buildAuthExportStub() {
+	return `export type Auth = any;
+export type AuthOrganizationContext = any;
+export type AuthOrganization = any;
+export type AuthOrganizationSummary = any;
+export type AuthOrganizationMember = any;
+export type AuthApiKey = any;
+export type AuthInvitation = any;
+export type AuthTeam = any;
+export type GetActiveMemberInput = any;
+export type GetFullOrganizationInput = any;
+export type ListMembersInput = any;
+export type ListInvitationsInput = any;
+export type ListApiKeysInput = any;
+export type AuthServices = any;
+export type createAuthInstance = any;
+`;
+}
+function buildAuthContractStub() {
+	return `export type ContractType = any;
+export type InferOutput<_TRoute extends string> = any;
+`;
+}
+
+//#endregion
+exports.AUTH_DERIVED_TYPES_BODY = AUTH_DERIVED_TYPES_BODY;
+exports.buildAuthContractStub = buildAuthContractStub;
+exports.buildAuthExportStub = buildAuthExportStub;
+exports.buildAuthTypesGenContent = buildAuthTypesGenContent;
+//# sourceMappingURL=auth-types-gen.cjs.map

package/dist/auth-types-gen.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-types-gen.cjs","names":[],"sources":["../src/auth-types-gen.ts"],"sourcesContent":["export const AUTH_DERIVED_TYPES_BODY = `\nexport type AuthSessionUser = NonNullable<InferOutput<\"getSession\">[\"user\"]>;\nexport type AuthSessionData = NonNullable<InferOutput<\"getSession\">[\"session\"]>;\nexport type AuthSession = {\n  user: AuthSessionUser | null;\n  session: AuthSessionData | null;\n};\nexport type AuthRequestContext = InferOutput<\"getContext\">;\nexport type AuthPluginContext = Partial<AuthRequestContext> & {\n  reqHeaders?: Headers;\n  getRawBody?: () => Promise<string>;\n};\n`;\n\nexport function buildAuthTypesGenContent(\n  authExportImportPath: string,\n  contractImportPath: string,\n): string {\n  return `export type * from \"${authExportImportPath}\";\nimport type { InferOutput } from \"${contractImportPath}\";\n${AUTH_DERIVED_TYPES_BODY}\n`;\n}\n\nexport function buildAuthExportStub(): string {\n  return `export type Auth = any;\nexport type AuthOrganizationContext = any;\nexport type AuthOrganization = any;\nexport type AuthOrganizationSummary = any;\nexport type AuthOrganizationMember = any;\nexport type AuthApiKey = any;\nexport type AuthInvitation = any;\nexport type AuthTeam = any;\nexport type GetActiveMemberInput = any;\nexport type GetFullOrganizationInput = any;\nexport type ListMembersInput = any;\nexport type ListInvitationsInput = any;\nexport type ListApiKeysInput = any;\nexport type AuthServices = any;\nexport type createAuthInstance = any;\n`;\n}\n\nexport function buildAuthContractStub(): string {\n  return `export type ContractType = any;\nexport type InferOutput<_TRoute extends string> = any;\n`;\n}\n"],"mappings":";;AAAA,MAAa,0BAA0B;;;;;;;;;;;;;AAcvC,SAAgB,yBACd,sBACA,oBACQ;CACR,OAAO,uBAAuB,qBAAqB;oCACjB,mBAAmB;EACrD,wBAAwB;;AAE1B;AAEA,SAAgB,sBAA8B;CAC5C,OAAO;;;;;;;;;;;;;;;;AAgBT;AAEA,SAAgB,wBAAgC;CAC9C,OAAO;;;AAGT"}

package/dist/auth-types-gen.mjs

@@ -0,0 +1,47 @@
+//#region src/auth-types-gen.ts
+const AUTH_DERIVED_TYPES_BODY = `
+export type AuthSessionUser = NonNullable<InferOutput<"getSession">["user"]>;
+export type AuthSessionData = NonNullable<InferOutput<"getSession">["session"]>;
+export type AuthSession = {
+  user: AuthSessionUser | null;
+  session: AuthSessionData | null;
+};
+export type AuthRequestContext = InferOutput<"getContext">;
+export type AuthPluginContext = Partial<AuthRequestContext> & {
+  reqHeaders?: Headers;
+  getRawBody?: () => Promise<string>;
+};
+`;
+function buildAuthTypesGenContent(authExportImportPath, contractImportPath) {
+	return `export type * from "${authExportImportPath}";
+import type { InferOutput } from "${contractImportPath}";
+${AUTH_DERIVED_TYPES_BODY}
+`;
+}
+function buildAuthExportStub() {
+	return `export type Auth = any;
+export type AuthOrganizationContext = any;
+export type AuthOrganization = any;
+export type AuthOrganizationSummary = any;
+export type AuthOrganizationMember = any;
+export type AuthApiKey = any;
+export type AuthInvitation = any;
+export type AuthTeam = any;
+export type GetActiveMemberInput = any;
+export type GetFullOrganizationInput = any;
+export type ListMembersInput = any;
+export type ListInvitationsInput = any;
+export type ListApiKeysInput = any;
+export type AuthServices = any;
+export type createAuthInstance = any;
+`;
+}
+function buildAuthContractStub() {
+	return `export type ContractType = any;
+export type InferOutput<_TRoute extends string> = any;
+`;
+}
+
+//#endregion
+export { AUTH_DERIVED_TYPES_BODY, buildAuthContractStub, buildAuthExportStub, buildAuthTypesGenContent };
+//# sourceMappingURL=auth-types-gen.mjs.map

package/dist/auth-types-gen.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-types-gen.mjs","names":[],"sources":["../src/auth-types-gen.ts"],"sourcesContent":["export const AUTH_DERIVED_TYPES_BODY = `\nexport type AuthSessionUser = NonNullable<InferOutput<\"getSession\">[\"user\"]>;\nexport type AuthSessionData = NonNullable<InferOutput<\"getSession\">[\"session\"]>;\nexport type AuthSession = {\n  user: AuthSessionUser | null;\n  session: AuthSessionData | null;\n};\nexport type AuthRequestContext = InferOutput<\"getContext\">;\nexport type AuthPluginContext = Partial<AuthRequestContext> & {\n  reqHeaders?: Headers;\n  getRawBody?: () => Promise<string>;\n};\n`;\n\nexport function buildAuthTypesGenContent(\n  authExportImportPath: string,\n  contractImportPath: string,\n): string {\n  return `export type * from \"${authExportImportPath}\";\nimport type { InferOutput } from \"${contractImportPath}\";\n${AUTH_DERIVED_TYPES_BODY}\n`;\n}\n\nexport function buildAuthExportStub(): string {\n  return `export type Auth = any;\nexport type AuthOrganizationContext = any;\nexport type AuthOrganization = any;\nexport type AuthOrganizationSummary = any;\nexport type AuthOrganizationMember = any;\nexport type AuthApiKey = any;\nexport type AuthInvitation = any;\nexport type AuthTeam = any;\nexport type GetActiveMemberInput = any;\nexport type GetFullOrganizationInput = any;\nexport type ListMembersInput = any;\nexport type ListInvitationsInput = any;\nexport type ListApiKeysInput = any;\nexport type AuthServices = any;\nexport type createAuthInstance = any;\n`;\n}\n\nexport function buildAuthContractStub(): string {\n  return `export type ContractType = any;\nexport type InferOutput<_TRoute extends string> = any;\n`;\n}\n"],"mappings":";AAAA,MAAa,0BAA0B;;;;;;;;;;;;;AAcvC,SAAgB,yBACd,sBACA,oBACQ;CACR,OAAO,uBAAuB,qBAAqB;oCACjB,mBAAmB;EACrD,wBAAwB;;AAE1B;AAEA,SAAgB,sBAA8B;CAC5C,OAAO;;;;;;;;;;;;;;;;AAgBT;AAEA,SAAgB,wBAAgC;CAC9C,OAAO;;;AAGT"}

package/dist/cli/infra.cjs

@@ -256,70 +256,6 @@ function renderDockerCompose(databases, redisConfigs, projectName) {
 	}
 	return `${lines.join("\n")}\n`;
 }
-function renderEnvFileFromPlan(env, devHostPort) {
-	const lines = [
-		"# Generated from bos dev infra plan",
-		"# Update values as needed for your local environment",
-		""
-	];
-	const sortedKeys = Object.keys(env).sort();
-	for (const key of sortedKeys) {
-		let value = env[key];
-		if (key === "CORS_ORIGIN" && devHostPort && !value) value = `http://localhost:${devHostPort}`;
-		lines.push(`${key}=${value}`);
-	}
-	lines.push("");
-	return `${lines.join("\n")}\n`;
-}
-function renderDockerComposeFromPlan(databases, redis, projectName) {
-	const lines = [`name: ${projectName}`, ""];
-	if (databases.length > 0) lines.push("x-pg-common: &pg-common", "  image: postgres:17-alpine", "  environment: &pg-env", `    POSTGRES_USER: ${POSTGRES_USER}`, `    POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}`, "  healthcheck:", "    test: [\"CMD-SHELL\", \"pg_isready -U everythingdev\"]", "    interval: 3s", "    timeout: 3s", "    retries: 5", "");
-	if (redis.length > 0) lines.push("x-redis-common: &redis-common", "  image: redis:7-alpine", "  command: redis-server --appendonly yes", "  healthcheck:", "    test: [\"CMD\", \"redis-cli\", \"ping\"]", "    interval: 3s", "    timeout: 3s", "    retries: 5", "");
-	lines.push("services:");
-	for (const db of databases) {
-		lines.push(`  ${db.serviceName}:`);
-		lines.push("    <<: *pg-common");
-		lines.push(`    container_name: ${db.containerName}`);
-		lines.push("    environment:");
-		lines.push("      <<: *pg-env");
-		lines.push(`      POSTGRES_DB: ${db.databaseName}`);
-		lines.push("    ports:");
-		lines.push(`      - "${db.port}:5432"`);
-		lines.push("    volumes:");
-		lines.push(`      - ${db.volumeName}:/var/lib/postgresql/data`);
-		lines.push("");
-	}
-	for (const r of redis) {
-		lines.push(`  ${r.serviceName}:`);
-		lines.push("    <<: *redis-common");
-		lines.push(`    container_name: ${r.containerName}`);
-		lines.push("    ports:");
-		lines.push(`      - "${r.port}:6379"`);
-		lines.push("    volumes:");
-		lines.push(`      - ${r.volumeName}:/data`);
-		lines.push("");
-	}
-	lines.push("volumes:");
-	for (const db of databases) {
-		lines.push(`  ${db.volumeName}:`);
-		lines.push(`    name: ${db.volumeName}`);
-	}
-	for (const r of redis) {
-		lines.push(`  ${r.volumeName}:`);
-		lines.push(`    name: ${r.volumeName}`);
-	}
-	return `${lines.join("\n")}\n`;
-}
-function materializeInfraPlan(configDir, planEnv, planDatabases, planRedis, projectName, devHostPort) {
-	const envContent = renderEnvFileFromPlan(planEnv, devHostPort);
-	const dockerContent = renderDockerComposeFromPlan(planDatabases, planRedis, projectName);
-	const envExamplePath = (0, node_path.join)(configDir, ".env.example");
-	const dockerComposePath = (0, node_path.join)(configDir, "docker-compose.yml");
-	return {
-		envExampleChanged: syncTextFile(envExamplePath, envContent),
-		dockerComposeChanged: syncTextFile(dockerComposePath, dockerContent)
-	};
-}
 function syncTextFile(filePath, nextContent) {
 	if ((0, node_fs.existsSync)(filePath) && (0, node_fs.readFileSync)(filePath, "utf-8") === nextContent) return false;
 	(0, node_fs.writeFileSync)(filePath, nextContent);
@@ -410,11 +346,8 @@ exports.ensureEnvFile = ensureEnvFile;
 exports.getSecretGroups = getSecretGroups;
 exports.loadPortState = loadPortState;
 exports.loadProjectEnv = loadProjectEnv;
-exports.materializeInfraPlan = materializeInfraPlan;
 exports.normalizeDatabaseSlug = normalizeDatabaseSlug;
 exports.normalizeRedisSlug = normalizeRedisSlug;
-exports.renderDockerComposeFromPlan = renderDockerComposeFromPlan;
-exports.renderEnvFileFromPlan = renderEnvFileFromPlan;
 exports.savePortState = savePortState;
 exports.syncGeneratedInfra = syncGeneratedInfra;
 exports.writeGeneratedInfra = writeGeneratedInfra;

package/dist/cli/infra.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"infra.cjs","names":[],"sources":["../../src/cli/infra.ts"],"sourcesContent":["import { randomBytes } from \"node:crypto\";\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport * as p from \"@clack/prompts\";\nimport { config as loadDotenv } from \"dotenv\";\nimport type { RuntimeConfig } from \"../types\";\n\nconst POSTGRES_USER = \"everythingdev\";\nconst POSTGRES_PASSWORD = \"everythingdev\";\nconst API_DATABASE_SECRET = \"API_DATABASE_URL\";\nconst AUTH_DATABASE_SECRET = \"AUTH_DATABASE_URL\";\nconst HOST_SECRET = \"CORS_ORIGIN\";\nconst BASE_POSTGRES_PORT = 5434;\nconst BASE_REDIS_PORT = 6379;\n\nexport interface DatabaseSecretConfig {\n  secret: string;\n  slug: string;\n  fromKey: string;\n  port: number;\n  serviceName: string;\n  containerName: string;\n  databaseName: string;\n  volumeName: string;\n  url: string;\n}\n\nexport interface RedisSecretConfig {\n  secret: string;\n  slug: string;\n  fromKey: string;\n  port: number;\n  serviceName: string;\n  containerName: string;\n  volumeName: string;\n  url: string;\n}\n\nexport interface SecretGroup {\n  section: string;\n  secrets: string[];\n}\n\ninterface DevPortState {\n  host?: number;\n  api?: number;\n  ui?: number;\n  auth?: number;\n  pluginPortStart?: number;\n}\n\nexport interface PortState {\n  postgresPorts: Record<string, number>;\n  redisPorts: Record<string, number>;\n  devPorts?: DevPortState;\n}\n\nexport interface GeneratedInfraSpec {\n  groups: SecretGroup[];\n  databases: DatabaseSecretConfig[];\n  redis: RedisSecretConfig[];\n}\n\ninterface SyncGeneratedInfraResult {\n  secrets: string[];\n  envExampleChanged: boolean;\n  dockerComposeChanged: boolean;\n  staleEnvWarnings: string[];\n}\n\nfunction uniqueSecrets(values: Array<string | undefined>): string[] {\n  const secrets: string[] = [];\n  const seen = new Set<string>();\n\n  for (const value of values) {\n    if (!value || seen.has(value)) continue;\n    seen.add(value);\n    secrets.push(value);\n  }\n\n  return secrets;\n}\n\nexport function loadPortState(configDir?: string): PortState {\n  if (!configDir) return { postgresPorts: {}, redisPorts: {} };\n  const statePath = join(configDir, \".bos\", \"infra-state.json\");\n  if (!existsSync(statePath)) return { postgresPorts: {}, redisPorts: {} };\n  try {\n    const raw = JSON.parse(readFileSync(statePath, \"utf-8\")) as Partial<PortState>;\n    return {\n      postgresPorts: raw.postgresPorts ?? {},\n      redisPorts: raw.redisPorts ?? {},\n      devPorts: raw.devPorts,\n    };\n  } catch {\n    return { postgresPorts: {}, redisPorts: {} };\n  }\n}\n\nexport function savePortState(configDir: string, state: PortState): void {\n  const statePath = join(configDir, \".bos\", \"infra-state.json\");\n  mkdirSync(dirname(statePath), { recursive: true });\n  writeFileSync(statePath, `${JSON.stringify(state, null, 2)}\\n`);\n}\n\nexport type { DevPortState };\n\nfunction resolvePort(slug: string, portMap: Record<string, number>, basePort: number): number {\n  if (portMap[slug] !== undefined) return portMap[slug];\n  const assigned = Object.values(portMap);\n  const maxAssigned = assigned.length > 0 ? Math.max(...assigned) : basePort - 1;\n  const next = Math.max(maxAssigned + 1, basePort);\n  portMap[slug] = next;\n  return next;\n}\n\nexport function normalizeRedisSlug(secret: string): string {\n  return secret.replace(/_REDIS_URL$/, \"\").toLowerCase();\n}\n\nexport function getSecretGroups(runtimeConfig: RuntimeConfig): SecretGroup[] {\n  const groups: SecretGroup[] = [];\n  const seen = new Set<string>();\n\n  const addGroup = (section: string, secrets: string[]) => {\n    const filtered = secrets.filter((s) => {\n      if (seen.has(s)) return false;\n      seen.add(s);\n      return true;\n    });\n    if (filtered.length > 0) {\n      groups.push({ section, secrets: filtered });\n    }\n  };\n\n  addGroup(\"app.host\", uniqueSecrets([...(runtimeConfig.host.secrets ?? []), HOST_SECRET]));\n\n  addGroup(\"app.api\", uniqueSecrets(runtimeConfig.api.secrets ?? []));\n\n  if (runtimeConfig.auth) {\n    addGroup(\"app.auth\", uniqueSecrets(runtimeConfig.auth.secrets ?? []));\n  }\n\n  if (runtimeConfig.plugins) {\n    for (const [pluginKey, plugin] of Object.entries(runtimeConfig.plugins)) {\n      if (plugin.secrets && plugin.secrets.length > 0) {\n        addGroup(`plugins.${pluginKey}`, plugin.secrets);\n      }\n    }\n  }\n\n  return groups;\n}\n\nfunction buildGeneratedInfraSpec(\n  runtimeConfig: RuntimeConfig,\n  configDir?: string,\n): { spec: GeneratedInfraSpec; portState: PortState } {\n  const groups = getSecretGroups(runtimeConfig);\n  const allSecrets = groups.flatMap((group) => group.secrets);\n  const originMap = configDir ? buildOriginMap(configDir, runtimeConfig) : new Map();\n  const portState = loadPortState(configDir);\n\n  const databases = buildDatabaseConfigs(allSecrets, originMap, portState.postgresPorts);\n  const redis = buildRedisConfigs(allSecrets, originMap, portState.redisPorts);\n\n  return { spec: { groups, databases, redis }, portState };\n}\n\nexport function normalizeDatabaseSlug(secret: string): string {\n  return secret.replace(/_DATABASE_URL$/, \"\").toLowerCase();\n}\n\nexport function buildOriginMap(\n  configDir: string,\n  runtimeConfig: RuntimeConfig,\n): Map<string, string> {\n  const configPath = join(configDir, \"bos.config.json\");\n\n  const originMap = new Map<string, string>();\n  const account = runtimeConfig.account;\n\n  const resolveOrigin = (extendsRef: unknown): string | null => {\n    if (typeof extendsRef === \"string\") {\n      const match = extendsRef.match(/^bos:\\/\\/([^/]+)\\//);\n      return match?.[1] ?? null;\n    }\n    return null;\n  };\n\n  const rawConfig = existsSync(configPath)\n    ? (JSON.parse(readFileSync(configPath, \"utf-8\")) as Record<string, unknown>)\n    : null;\n  const rawPlugins = rawConfig?.plugins as Record<string, unknown> | undefined;\n\n  for (const secret of runtimeConfig.api.secrets ?? []) {\n    if (!originMap.has(secret)) originMap.set(secret, account);\n  }\n\n  const rawApp = rawConfig?.app as Record<string, unknown> | undefined;\n  const authExtends = (rawApp?.auth as Record<string, unknown> | undefined)?.extends;\n  const authOrigin = resolveOrigin(authExtends) ?? account;\n  for (const secret of runtimeConfig.auth?.secrets ?? []) {\n    if (!originMap.has(secret)) originMap.set(secret, authOrigin);\n  }\n\n  for (const [pluginKey, pluginEntry] of Object.entries(runtimeConfig.plugins ?? {})) {\n    const rawPlugin = rawPlugins?.[pluginKey];\n    let pluginOrigin: string;\n    if (typeof rawPlugin === \"string\") {\n      pluginOrigin = resolveOrigin(rawPlugin) ?? account;\n    } else if (rawPlugin && typeof rawPlugin === \"object\") {\n      pluginOrigin = resolveOrigin((rawPlugin as Record<string, unknown>).extends) ?? account;\n    } else {\n      pluginOrigin = account;\n    }\n    for (const secret of pluginEntry.secrets ?? []) {\n      if (!originMap.has(secret)) originMap.set(secret, pluginOrigin);\n    }\n  }\n\n  for (const secret of runtimeConfig.host.secrets ?? []) {\n    if (!originMap.has(secret)) originMap.set(secret, account);\n  }\n\n  return originMap;\n}\n\nexport function buildDatabaseConfigs(\n  secrets: string[],\n  originMap: Map<string, string>,\n  portMap: Record<string, number>,\n): DatabaseSecretConfig[] {\n  const databaseSecrets = uniqueSecrets(\n    secrets.filter((secret) => secret.endsWith(\"_DATABASE_URL\")),\n  );\n\n  const orderedSecrets = [...databaseSecrets];\n\n  // Prune stale entries from removed plugins\n  const currentSlugs = new Set(orderedSecrets.map(normalizeDatabaseSlug));\n  for (const slug of Object.keys(portMap)) {\n    if (!currentSlugs.has(slug)) delete portMap[slug];\n  }\n\n  // Sort by slug for deterministic assignment order\n  orderedSecrets.sort((a, b) => normalizeDatabaseSlug(a).localeCompare(normalizeDatabaseSlug(b)));\n\n  for (const secret of orderedSecrets) {\n    const slug = normalizeDatabaseSlug(secret);\n    if (secret === API_DATABASE_SECRET) {\n      portMap[slug] = 5432;\n    } else if (secret === AUTH_DATABASE_SECRET) {\n      portMap[slug] = 5433;\n    } else {\n      resolvePort(slug, portMap, BASE_POSTGRES_PORT);\n    }\n  }\n\n  return orderedSecrets.map((secret) => {\n    const slug = normalizeDatabaseSlug(secret);\n    const fromKey = originMap.get(secret) ?? \"\";\n    const port = portMap[slug];\n\n    const volumeName = fromKey\n      ? `${fromKey.replace(/\\./g, \"_\")}_postgres_${slug}_data`\n      : `postgres_${slug}_data`;\n\n    const containerName = fromKey ? `${fromKey}-postgres-${slug}` : `postgres-${slug}`;\n\n    return {\n      secret,\n      slug,\n      fromKey,\n      port,\n      serviceName: `postgres-${slug.replace(/_/g, \"-\")}`,\n      containerName,\n      databaseName: `${slug}_db`,\n      volumeName,\n      url: `postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@localhost:${port}/${slug}_db`,\n    };\n  });\n}\n\nexport function buildRedisConfigs(\n  secrets: string[],\n  originMap: Map<string, string>,\n  portMap: Record<string, number>,\n): RedisSecretConfig[] {\n  const redisSecrets = uniqueSecrets(secrets.filter((secret) => secret.endsWith(\"_REDIS_URL\")));\n  const orderedSecrets = [...redisSecrets];\n\n  // Prune stale entries from removed plugins\n  const currentSlugs = new Set(orderedSecrets.map(normalizeRedisSlug));\n  for (const slug of Object.keys(portMap)) {\n    if (!currentSlugs.has(slug)) delete portMap[slug];\n  }\n\n  // Sort by slug for deterministic assignment order\n  orderedSecrets.sort((a, b) => normalizeRedisSlug(a).localeCompare(normalizeRedisSlug(b)));\n\n  for (const secret of orderedSecrets) {\n    const slug = normalizeRedisSlug(secret);\n    resolvePort(slug, portMap, BASE_REDIS_PORT);\n  }\n\n  return orderedSecrets.map((secret) => {\n    const slug = normalizeRedisSlug(secret);\n    const fromKey = originMap.get(secret) ?? \"\";\n    const port = portMap[slug];\n\n    const volumeName = fromKey\n      ? `${fromKey.replace(/\\./g, \"_\")}_redis_${slug}_data`\n      : `redis_${slug}_data`;\n\n    const containerName = fromKey ? `${fromKey}-redis-${slug}` : `redis-${slug}`;\n\n    return {\n      secret,\n      slug,\n      fromKey,\n      port,\n      serviceName: `redis-${slug.replace(/_/g, \"-\")}`,\n      containerName,\n      volumeName,\n      url: `redis://localhost:${port}`,\n    };\n  });\n}\n\nfunction extractPortFromUrl(url: string): string | null {\n  const match = url.match(/:(\\d{4,5})(?:\\/|$)/);\n  return match?.[1] ?? null;\n}\n\nfunction resolveDevHostPort(runtimeConfig: RuntimeConfig): number {\n  if (typeof runtimeConfig.host?.port === \"number\") return runtimeConfig.host.port;\n  const fromUrl = runtimeConfig.host?.url ? extractPortFromUrl(runtimeConfig.host.url) : null;\n  if (fromUrl) {\n    const parsed = Number.parseInt(fromUrl, 10);\n    if (!Number.isNaN(parsed)) return parsed;\n  }\n  return 3000;\n}\n\nfunction defaultSecretValue(\n  secret: string,\n  databases: Map<string, DatabaseSecretConfig>,\n  redisConfigs: Map<string, RedisSecretConfig>,\n  options: { forExample: boolean; devHostPort?: number },\n): string {\n  if (secret === \"BETTER_AUTH_SECRET\") {\n    return options.forExample ? \"\" : randomBytes(32).toString(\"base64url\");\n  }\n\n  if (secret === \"CORS_ORIGIN\") {\n    if (typeof options.devHostPort === \"number\") {\n      return `http://localhost:${options.devHostPort}`;\n    }\n    return \"http://localhost:3000\";\n  }\n\n  return databases.get(secret)?.url ?? redisConfigs.get(secret)?.url ?? \"\";\n}\n\nfunction renderEnvFile(\n  groups: SecretGroup[],\n  databases: DatabaseSecretConfig[],\n  redisConfigs: RedisSecretConfig[],\n  options: { forExample: boolean; devHostPort?: number },\n): string {\n  const databaseMap = new Map(databases.map((entry) => [entry.secret, entry]));\n  const redisMap = new Map(redisConfigs.map((entry) => [entry.secret, entry]));\n  const lines: string[] = [\n    \"# Generated from configured bos secrets\",\n    \"# Update values as needed for your local environment\",\n    \"\",\n  ];\n\n  for (const group of groups) {\n    lines.push(`# ${group.section}`);\n    for (const secret of group.secrets) {\n      lines.push(`${secret}=${defaultSecretValue(secret, databaseMap, redisMap, options)}`);\n    }\n    lines.push(\"\");\n  }\n\n  return `${lines.join(\"\\n\")}\\n`;\n}\n\nfunction renderDockerCompose(\n  databases: DatabaseSecretConfig[],\n  redisConfigs: RedisSecretConfig[],\n  projectName: string,\n): string {\n  const lines = [`name: ${projectName}`, \"\"];\n\n  if (databases.length > 0) {\n    lines.push(\n      \"x-pg-common: &pg-common\",\n      \"  image: postgres:17-alpine\",\n      \"  environment: &pg-env\",\n      `    POSTGRES_USER: ${POSTGRES_USER}`,\n      `    POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}`,\n      \"  healthcheck:\",\n      '    test: [\"CMD-SHELL\", \"pg_isready -U everythingdev\"]',\n      \"    interval: 3s\",\n      \"    timeout: 3s\",\n      \"    retries: 5\",\n      \"\",\n    );\n  }\n\n  if (redisConfigs.length > 0) {\n    lines.push(\n      \"x-redis-common: &redis-common\",\n      \"  image: redis:7-alpine\",\n      \"  command: redis-server --appendonly yes\",\n      \"  healthcheck:\",\n      '    test: [\"CMD\", \"redis-cli\", \"ping\"]',\n      \"    interval: 3s\",\n      \"    timeout: 3s\",\n      \"    retries: 5\",\n      \"\",\n    );\n  }\n\n  lines.push(\"services:\");\n\n  for (const database of databases) {\n    lines.push(`  ${database.serviceName}:`);\n    lines.push(\"    <<: *pg-common\");\n    lines.push(`    container_name: ${database.containerName}`);\n    lines.push(\"    environment:\");\n    lines.push(\"      <<: *pg-env\");\n    lines.push(`      POSTGRES_DB: ${database.databaseName}`);\n    lines.push(\"    ports:\");\n    lines.push(`      - \"${database.port}:5432\"`);\n    lines.push(\"    volumes:\");\n    lines.push(`      - ${database.volumeName}:/var/lib/postgresql/data`);\n    lines.push(\"\");\n  }\n\n  for (const redis of redisConfigs) {\n    lines.push(`  ${redis.serviceName}:`);\n    lines.push(\"    <<: *redis-common\");\n    lines.push(`    container_name: ${redis.containerName}`);\n    lines.push(\"    ports:\");\n    lines.push(`      - \"${redis.port}:6379\"`);\n    lines.push(\"    volumes:\");\n    lines.push(`      - ${redis.volumeName}:/data`);\n    lines.push(\"\");\n  }\n\n  lines.push(\"volumes:\");\n  for (const database of databases) {\n    lines.push(`  ${database.volumeName}:`);\n    lines.push(`    name: ${database.volumeName}`);\n  }\n  for (const redis of redisConfigs) {\n    lines.push(`  ${redis.volumeName}:`);\n    lines.push(`    name: ${redis.volumeName}`);\n  }\n\n  return `${lines.join(\"\\n\")}\\n`;\n}\n\nexport function renderEnvFileFromPlan(env: Record<string, string>, devHostPort?: number): string {\n  const lines: string[] = [\n    \"# Generated from bos dev infra plan\",\n    \"# Update values as needed for your local environment\",\n    \"\",\n  ];\n  const sortedKeys = Object.keys(env).sort();\n  for (const key of sortedKeys) {\n    let value = env[key];\n    if (key === \"CORS_ORIGIN\" && devHostPort && !value) {\n      value = `http://localhost:${devHostPort}`;\n    }\n    lines.push(`${key}=${value}`);\n  }\n  lines.push(\"\");\n  return `${lines.join(\"\\n\")}\\n`;\n}\n\nexport function renderDockerComposeFromPlan(\n  databases: {\n    serviceName: string;\n    containerName: string;\n    port: number;\n    volumeName: string;\n    databaseName: string;\n  }[],\n  redis: { serviceName: string; containerName: string; port: number; volumeName: string }[],\n  projectName: string,\n): string {\n  const lines = [`name: ${projectName}`, \"\"];\n\n  if (databases.length > 0) {\n    lines.push(\n      \"x-pg-common: &pg-common\",\n      \"  image: postgres:17-alpine\",\n      \"  environment: &pg-env\",\n      `    POSTGRES_USER: ${POSTGRES_USER}`,\n      `    POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}`,\n      \"  healthcheck:\",\n      '    test: [\"CMD-SHELL\", \"pg_isready -U everythingdev\"]',\n      \"    interval: 3s\",\n      \"    timeout: 3s\",\n      \"    retries: 5\",\n      \"\",\n    );\n  }\n\n  if (redis.length > 0) {\n    lines.push(\n      \"x-redis-common: &redis-common\",\n      \"  image: redis:7-alpine\",\n      \"  command: redis-server --appendonly yes\",\n      \"  healthcheck:\",\n      '    test: [\"CMD\", \"redis-cli\", \"ping\"]',\n      \"    interval: 3s\",\n      \"    timeout: 3s\",\n      \"    retries: 5\",\n      \"\",\n    );\n  }\n\n  lines.push(\"services:\");\n\n  for (const db of databases) {\n    lines.push(`  ${db.serviceName}:`);\n    lines.push(\"    <<: *pg-common\");\n    lines.push(`    container_name: ${db.containerName}`);\n    lines.push(\"    environment:\");\n    lines.push(\"      <<: *pg-env\");\n    lines.push(`      POSTGRES_DB: ${db.databaseName}`);\n    lines.push(\"    ports:\");\n    lines.push(`      - \"${db.port}:5432\"`);\n    lines.push(\"    volumes:\");\n    lines.push(`      - ${db.volumeName}:/var/lib/postgresql/data`);\n    lines.push(\"\");\n  }\n\n  for (const r of redis) {\n    lines.push(`  ${r.serviceName}:`);\n    lines.push(\"    <<: *redis-common\");\n    lines.push(`    container_name: ${r.containerName}`);\n    lines.push(\"    ports:\");\n    lines.push(`      - \"${r.port}:6379\"`);\n    lines.push(\"    volumes:\");\n    lines.push(`      - ${r.volumeName}:/data`);\n    lines.push(\"\");\n  }\n\n  lines.push(\"volumes:\");\n  for (const db of databases) {\n    lines.push(`  ${db.volumeName}:`);\n    lines.push(`    name: ${db.volumeName}`);\n  }\n  for (const r of redis) {\n    lines.push(`  ${r.volumeName}:`);\n    lines.push(`    name: ${r.volumeName}`);\n  }\n\n  return `${lines.join(\"\\n\")}\\n`;\n}\n\nexport function materializeInfraPlan(\n  configDir: string,\n  planEnv: Record<string, string>,\n  planDatabases: {\n    serviceName: string;\n    containerName: string;\n    port: number;\n    volumeName: string;\n    databaseName: string;\n  }[],\n  planRedis: { serviceName: string; containerName: string; port: number; volumeName: string }[],\n  projectName: string,\n  devHostPort?: number,\n): { envExampleChanged: boolean; dockerComposeChanged: boolean } {\n  const envContent = renderEnvFileFromPlan(planEnv, devHostPort);\n  const dockerContent = renderDockerComposeFromPlan(planDatabases, planRedis, projectName);\n\n  const envExamplePath = join(configDir, \".env.example\");\n  const dockerComposePath = join(configDir, \"docker-compose.yml\");\n\n  return {\n    envExampleChanged: syncTextFile(envExamplePath, envContent),\n    dockerComposeChanged: syncTextFile(dockerComposePath, dockerContent),\n  };\n}\n\nfunction syncTextFile(filePath: string, nextContent: string): boolean {\n  if (existsSync(filePath) && readFileSync(filePath, \"utf-8\") === nextContent) {\n    return false;\n  }\n\n  writeFileSync(filePath, nextContent);\n  return true;\n}\n\nexport function writeGeneratedInfra(configDir: string, runtimeConfig: RuntimeConfig): string[] {\n  const result = syncGeneratedInfra(configDir, runtimeConfig);\n\n  if (result.staleEnvWarnings.length > 0) {\n    p.log.warn(\n      `.env has ${result.staleEnvWarnings.length} stale value(s) compared to .env.example:`,\n    );\n    for (const warning of result.staleEnvWarnings) {\n      p.log.message(`  ${warning}`);\n    }\n  }\n\n  return result.secrets;\n}\n\nexport function syncGeneratedInfra(\n  configDir: string,\n  runtimeConfig: RuntimeConfig,\n): SyncGeneratedInfraResult {\n  const { spec, portState } = buildGeneratedInfraSpec(runtimeConfig, configDir);\n  const secrets = spec.groups.flatMap((group) => group.secrets);\n  const envOptions: { forExample: true; devHostPort?: number } = { forExample: true };\n  if (runtimeConfig.env === \"development\") {\n    envOptions.devHostPort = resolveDevHostPort(runtimeConfig);\n  }\n  const newEnvContent = renderEnvFile(spec.groups, spec.databases, spec.redis, envOptions);\n  const newDockerContent = renderDockerCompose(spec.databases, spec.redis, runtimeConfig.account);\n\n  const envExamplePath = join(configDir, \".env.example\");\n  const dockerComposePath = join(configDir, \"docker-compose.yml\");\n\n  const staleWarnings = checkEnvStaleness(configDir, spec.databases, spec.redis);\n\n  if (configDir) {\n    savePortState(configDir, portState);\n  }\n\n  return {\n    secrets,\n    envExampleChanged: syncTextFile(envExamplePath, newEnvContent),\n    dockerComposeChanged: syncTextFile(dockerComposePath, newDockerContent),\n    staleEnvWarnings: staleWarnings,\n  };\n}\n\nfunction checkEnvStaleness(\n  configDir: string,\n  databases: DatabaseSecretConfig[],\n  redisConfigs: RedisSecretConfig[],\n): string[] {\n  const envPath = join(configDir, \".env\");\n  if (!existsSync(envPath)) return [];\n\n  const existingEnv = readFileSync(envPath, \"utf-8\");\n  const envMap = new Map<string, string>();\n  for (const line of existingEnv.split(\"\\n\")) {\n    const match = line.match(/^([A-Z_]+)=(.*)$/);\n    if (match) envMap.set(match[1], match[2]);\n  }\n\n  const stale: string[] = [];\n\n  for (const db of databases) {\n    const existing = envMap.get(db.secret);\n    if (existing && existing !== db.url) {\n      const oldPort = extractPortFromUrl(existing) ?? \"?\";\n      stale.push(`${db.secret}: port ${oldPort} → ${db.port}`);\n    }\n  }\n\n  for (const redis of redisConfigs) {\n    const existing = envMap.get(redis.secret);\n    if (existing && existing !== redis.url) {\n      const oldPort = extractPortFromUrl(existing) ?? \"?\";\n      stale.push(`${redis.secret}: port ${oldPort} → ${redis.port}`);\n    }\n  }\n\n  return stale;\n}\n\nexport function ensureEnvFile(configDir: string): void {\n  const envPath = join(configDir, \".env\");\n  const examplePath = join(configDir, \".env.example\");\n\n  if (existsSync(envPath) || !existsSync(examplePath)) return;\n\n  const content = readFileSync(examplePath, \"utf-8\");\n  const lines = content.split(\"\\n\");\n  const secret = randomBytes(32).toString(\"base64url\");\n  const updated = lines\n    .map((line) => {\n      if (/^BETTER_AUTH_SECRET=/.test(line)) {\n        return `BETTER_AUTH_SECRET=${secret}`;\n      }\n      return line;\n    })\n    .join(\"\\n\");\n\n  writeFileSync(envPath, updated);\n  p.log.info(\"Created .env from generated .env.example with generated BETTER_AUTH_SECRET\");\n}\n\nlet envLoadedDir: string | null = null;\n\nexport function loadProjectEnv(configDir: string): void {\n  if (envLoadedDir === configDir) return;\n  const envPath = join(configDir, \".env\");\n  if (!existsSync(envPath)) return;\n\n  loadDotenv({ path: envPath, processEnv: process.env, quiet: true });\n  envLoadedDir = configDir;\n}\n"],"mappings":";;;;;;;;;AAOA,MAAM,gBAAgB;AACtB,MAAM,oBAAoB;AAC1B,MAAM,sBAAsB;AAC5B,MAAM,uBAAuB;AAC7B,MAAM,cAAc;AACpB,MAAM,qBAAqB;AAC3B,MAAM,kBAAkB;AAyDxB,SAAS,cAAc,QAA6C;CAClE,MAAM,UAAoB,CAAC;CAC3B,MAAM,uBAAO,IAAI,IAAY;CAE7B,KAAK,MAAM,SAAS,QAAQ;EAC1B,IAAI,CAAC,SAAS,KAAK,IAAI,KAAK,GAAG;EAC/B,KAAK,IAAI,KAAK;EACd,QAAQ,KAAK,KAAK;CACpB;CAEA,OAAO;AACT;AAEA,SAAgB,cAAc,WAA+B;CAC3D,IAAI,CAAC,WAAW,OAAO;EAAE,eAAe,CAAC;EAAG,YAAY,CAAC;CAAE;CAC3D,MAAM,gCAAiB,WAAW,QAAQ,kBAAkB;CAC5D,IAAI,yBAAY,SAAS,GAAG,OAAO;EAAE,eAAe,CAAC;EAAG,YAAY,CAAC;CAAE;CACvE,IAAI;EACF,MAAM,MAAM,KAAK,gCAAmB,WAAW,OAAO,CAAC;EACvD,OAAO;GACL,eAAe,IAAI,iBAAiB,CAAC;GACrC,YAAY,IAAI,cAAc,CAAC;GAC/B,UAAU,IAAI;EAChB;CACF,QAAQ;EACN,OAAO;GAAE,eAAe,CAAC;GAAG,YAAY,CAAC;EAAE;CAC7C;AACF;AAEA,SAAgB,cAAc,WAAmB,OAAwB;CACvE,MAAM,gCAAiB,WAAW,QAAQ,kBAAkB;CAC5D,8CAAkB,SAAS,GAAG,EAAE,WAAW,KAAK,CAAC;CACjD,2BAAc,WAAW,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,EAAE,GAAG;AAChE;AAIA,SAAS,YAAY,MAAc,SAAiC,UAA0B;CAC5F,IAAI,QAAQ,UAAU,QAAW,OAAO,QAAQ;CAChD,MAAM,WAAW,OAAO,OAAO,OAAO;CACtC,MAAM,cAAc,SAAS,SAAS,IAAI,KAAK,IAAI,GAAG,QAAQ,IAAI,WAAW;CAC7E,MAAM,OAAO,KAAK,IAAI,cAAc,GAAG,QAAQ;CAC/C,QAAQ,QAAQ;CAChB,OAAO;AACT;AAEA,SAAgB,mBAAmB,QAAwB;CACzD,OAAO,OAAO,QAAQ,eAAe,EAAE,CAAC,CAAC,YAAY;AACvD;AAEA,SAAgB,gBAAgB,eAA6C;CAC3E,MAAM,SAAwB,CAAC;CAC/B,MAAM,uBAAO,IAAI,IAAY;CAE7B,MAAM,YAAY,SAAiB,YAAsB;EACvD,MAAM,WAAW,QAAQ,QAAQ,MAAM;GACrC,IAAI,KAAK,IAAI,CAAC,GAAG,OAAO;GACxB,KAAK,IAAI,CAAC;GACV,OAAO;EACT,CAAC;EACD,IAAI,SAAS,SAAS,GACpB,OAAO,KAAK;GAAE;GAAS,SAAS;EAAS,CAAC;CAE9C;CAEA,SAAS,YAAY,cAAc,CAAC,GAAI,cAAc,KAAK,WAAW,CAAC,GAAI,WAAW,CAAC,CAAC;CAExF,SAAS,WAAW,cAAc,cAAc,IAAI,WAAW,CAAC,CAAC,CAAC;CAElE,IAAI,cAAc,MAChB,SAAS,YAAY,cAAc,cAAc,KAAK,WAAW,CAAC,CAAC,CAAC;CAGtE,IAAI,cAAc,SAChB;OAAK,MAAM,CAAC,WAAW,WAAW,OAAO,QAAQ,cAAc,OAAO,GACpE,IAAI,OAAO,WAAW,OAAO,QAAQ,SAAS,GAC5C,SAAS,WAAW,aAAa,OAAO,OAAO;CAEnD;CAGF,OAAO;AACT;AAEA,SAAS,wBACP,eACA,WACoD;CACpD,MAAM,SAAS,gBAAgB,aAAa;CAC5C,MAAM,aAAa,OAAO,SAAS,UAAU,MAAM,OAAO;CAC1D,MAAM,YAAY,YAAY,eAAe,WAAW,aAAa,oBAAI,IAAI,IAAI;CACjF,MAAM,YAAY,cAAc,SAAS;CAKzC,OAAO;EAAE,MAAM;GAAE;GAAQ,WAHP,qBAAqB,YAAY,WAAW,UAAU,aAGvC;GAAG,OAFtB,kBAAkB,YAAY,WAAW,UAAU,UAEzB;EAAE;EAAG;CAAU;AACzD;AAEA,SAAgB,sBAAsB,QAAwB;CAC5D,OAAO,OAAO,QAAQ,kBAAkB,EAAE,CAAC,CAAC,YAAY;AAC1D;AAEA,SAAgB,eACd,WACA,eACqB;CACrB,MAAM,iCAAkB,WAAW,iBAAiB;CAEpD,MAAM,4BAAY,IAAI,IAAoB;CAC1C,MAAM,UAAU,cAAc;CAE9B,MAAM,iBAAiB,eAAuC;EAC5D,IAAI,OAAO,eAAe,UAExB,OADc,WAAW,MAAM,oBACpB,CAAC,GAAG,MAAM;EAEvB,OAAO;CACT;CAEA,MAAM,oCAAuB,UAAU,IAClC,KAAK,gCAAmB,YAAY,OAAO,CAAC,IAC7C;CACJ,MAAM,aAAa,WAAW;CAE9B,KAAK,MAAM,UAAU,cAAc,IAAI,WAAW,CAAC,GACjD,IAAI,CAAC,UAAU,IAAI,MAAM,GAAG,UAAU,IAAI,QAAQ,OAAO;CAI3D,MAAM,gBADS,WAAW,IACC,EAAE,KAAI,EAA0C;CAC3E,MAAM,aAAa,cAAc,WAAW,KAAK;CACjD,KAAK,MAAM,UAAU,cAAc,MAAM,WAAW,CAAC,GACnD,IAAI,CAAC,UAAU,IAAI,MAAM,GAAG,UAAU,IAAI,QAAQ,UAAU;CAG9D,KAAK,MAAM,CAAC,WAAW,gBAAgB,OAAO,QAAQ,cAAc,WAAW,CAAC,CAAC,GAAG;EAClF,MAAM,YAAY,aAAa;EAC/B,IAAI;EACJ,IAAI,OAAO,cAAc,UACvB,eAAe,cAAc,SAAS,KAAK;OACtC,IAAI,aAAa,OAAO,cAAc,UAC3C,eAAe,cAAe,UAAsC,OAAO,KAAK;OAEhF,eAAe;EAEjB,KAAK,MAAM,UAAU,YAAY,WAAW,CAAC,GAC3C,IAAI,CAAC,UAAU,IAAI,MAAM,GAAG,UAAU,IAAI,QAAQ,YAAY;CAElE;CAEA,KAAK,MAAM,UAAU,cAAc,KAAK,WAAW,CAAC,GAClD,IAAI,CAAC,UAAU,IAAI,MAAM,GAAG,UAAU,IAAI,QAAQ,OAAO;CAG3D,OAAO;AACT;AAEA,SAAgB,qBACd,SACA,WACA,SACwB;CAKxB,MAAM,iBAAiB,CAAC,GAJA,cACtB,QAAQ,QAAQ,WAAW,OAAO,SAAS,eAAe,CAAC,CAGpB,CAAC;CAG1C,MAAM,eAAe,IAAI,IAAI,eAAe,IAAI,qBAAqB,CAAC;CACtE,KAAK,MAAM,QAAQ,OAAO,KAAK,OAAO,GACpC,IAAI,CAAC,aAAa,IAAI,IAAI,GAAG,OAAO,QAAQ;CAI9C,eAAe,MAAM,GAAG,MAAM,sBAAsB,CAAC,CAAC,CAAC,cAAc,sBAAsB,CAAC,CAAC,CAAC;CAE9F,KAAK,MAAM,UAAU,gBAAgB;EACnC,MAAM,OAAO,sBAAsB,MAAM;EACzC,IAAI,WAAW,qBACb,QAAQ,QAAQ;OACX,IAAI,WAAW,sBACpB,QAAQ,QAAQ;OAEhB,YAAY,MAAM,SAAS,kBAAkB;CAEjD;CAEA,OAAO,eAAe,KAAK,WAAW;EACpC,MAAM,OAAO,sBAAsB,MAAM;EACzC,MAAM,UAAU,UAAU,IAAI,MAAM,KAAK;EACzC,MAAM,OAAO,QAAQ;EAErB,MAAM,aAAa,UACf,GAAG,QAAQ,QAAQ,OAAO,GAAG,EAAE,YAAY,KAAK,SAChD,YAAY,KAAK;EAErB,MAAM,gBAAgB,UAAU,GAAG,QAAQ,YAAY,SAAS,YAAY;EAE5E,OAAO;GACL;GACA;GACA;GACA;GACA,aAAa,YAAY,KAAK,QAAQ,MAAM,GAAG;GAC/C;GACA,cAAc,GAAG,KAAK;GACtB;GACA,KAAK,cAAc,cAAc,GAAG,kBAAkB,aAAa,KAAK,GAAG,KAAK;EAClF;CACF,CAAC;AACH;AAEA,SAAgB,kBACd,SACA,WACA,SACqB;CAErB,MAAM,iBAAiB,CAAC,GADH,cAAc,QAAQ,QAAQ,WAAW,OAAO,SAAS,YAAY,CAAC,CACrD,CAAC;CAGvC,MAAM,eAAe,IAAI,IAAI,eAAe,IAAI,kBAAkB,CAAC;CACnE,KAAK,MAAM,QAAQ,OAAO,KAAK,OAAO,GACpC,IAAI,CAAC,aAAa,IAAI,IAAI,GAAG,OAAO,QAAQ;CAI9C,eAAe,MAAM,GAAG,MAAM,mBAAmB,CAAC,CAAC,CAAC,cAAc,mBAAmB,CAAC,CAAC,CAAC;CAExF,KAAK,MAAM,UAAU,gBAEnB,YADa,mBAAmB,MACjB,GAAG,SAAS,eAAe;CAG5C,OAAO,eAAe,KAAK,WAAW;EACpC,MAAM,OAAO,mBAAmB,MAAM;EACtC,MAAM,UAAU,UAAU,IAAI,MAAM,KAAK;EACzC,MAAM,OAAO,QAAQ;EAErB,MAAM,aAAa,UACf,GAAG,QAAQ,QAAQ,OAAO,GAAG,EAAE,SAAS,KAAK,SAC7C,SAAS,KAAK;EAElB,MAAM,gBAAgB,UAAU,GAAG,QAAQ,SAAS,SAAS,SAAS;EAEtE,OAAO;GACL;GACA;GACA;GACA;GACA,aAAa,SAAS,KAAK,QAAQ,MAAM,GAAG;GAC5C;GACA;GACA,KAAK,qBAAqB;EAC5B;CACF,CAAC;AACH;AAEA,SAAS,mBAAmB,KAA4B;CAEtD,OADc,IAAI,MAAM,oBACb,CAAC,GAAG,MAAM;AACvB;AAEA,SAAS,mBAAmB,eAAsC;CAChE,IAAI,OAAO,cAAc,MAAM,SAAS,UAAU,OAAO,cAAc,KAAK;CAC5E,MAAM,UAAU,cAAc,MAAM,MAAM,mBAAmB,cAAc,KAAK,GAAG,IAAI;CACvF,IAAI,SAAS;EACX,MAAM,SAAS,OAAO,SAAS,SAAS,EAAE;EAC1C,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,OAAO;CACpC;CACA,OAAO;AACT;AAEA,SAAS,mBACP,QACA,WACA,cACA,SACQ;CACR,IAAI,WAAW,sBACb,OAAO,QAAQ,aAAa,kCAAiB,EAAE,CAAC,CAAC,SAAS,WAAW;CAGvE,IAAI,WAAW,eAAe;EAC5B,IAAI,OAAO,QAAQ,gBAAgB,UACjC,OAAO,oBAAoB,QAAQ;EAErC,OAAO;CACT;CAEA,OAAO,UAAU,IAAI,MAAM,CAAC,EAAE,OAAO,aAAa,IAAI,MAAM,CAAC,EAAE,OAAO;AACxE;AAEA,SAAS,cACP,QACA,WACA,cACA,SACQ;CACR,MAAM,cAAc,IAAI,IAAI,UAAU,KAAK,UAAU,CAAC,MAAM,QAAQ,KAAK,CAAC,CAAC;CAC3E,MAAM,WAAW,IAAI,IAAI,aAAa,KAAK,UAAU,CAAC,MAAM,QAAQ,KAAK,CAAC,CAAC;CAC3E,MAAM,QAAkB;EACtB;EACA;EACA;CACF;CAEA,KAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,KAAK,KAAK,MAAM,SAAS;EAC/B,KAAK,MAAM,UAAU,MAAM,SACzB,MAAM,KAAK,GAAG,OAAO,GAAG,mBAAmB,QAAQ,aAAa,UAAU,OAAO,GAAG;EAEtF,MAAM,KAAK,EAAE;CACf;CAEA,OAAO,GAAG,MAAM,KAAK,IAAI,EAAE;AAC7B;AAEA,SAAS,oBACP,WACA,cACA,aACQ;CACR,MAAM,QAAQ,CAAC,SAAS,eAAe,EAAE;CAEzC,IAAI,UAAU,SAAS,GACrB,MAAM,KACJ,2BACA,+BACA,0BACA,sBAAsB,iBACtB,0BAA0B,qBAC1B,kBACA,8DACA,oBACA,mBACA,kBACA,EACF;CAGF,IAAI,aAAa,SAAS,GACxB,MAAM,KACJ,iCACA,2BACA,4CACA,kBACA,gDACA,oBACA,mBACA,kBACA,EACF;CAGF,MAAM,KAAK,WAAW;CAEtB,KAAK,MAAM,YAAY,WAAW;EAChC,MAAM,KAAK,KAAK,SAAS,YAAY,EAAE;EACvC,MAAM,KAAK,oBAAoB;EAC/B,MAAM,KAAK,uBAAuB,SAAS,eAAe;EAC1D,MAAM,KAAK,kBAAkB;EAC7B,MAAM,KAAK,mBAAmB;EAC9B,MAAM,KAAK,sBAAsB,SAAS,cAAc;EACxD,MAAM,KAAK,YAAY;EACvB,MAAM,KAAK,YAAY,SAAS,KAAK,OAAO;EAC5C,MAAM,KAAK,cAAc;EACzB,MAAM,KAAK,WAAW,SAAS,WAAW,0BAA0B;EACpE,MAAM,KAAK,EAAE;CACf;CAEA,KAAK,MAAM,SAAS,cAAc;EAChC,MAAM,KAAK,KAAK,MAAM,YAAY,EAAE;EACpC,MAAM,KAAK,uBAAuB;EAClC,MAAM,KAAK,uBAAuB,MAAM,eAAe;EACvD,MAAM,KAAK,YAAY;EACvB,MAAM,KAAK,YAAY,MAAM,KAAK,OAAO;EACzC,MAAM,KAAK,cAAc;EACzB,MAAM,KAAK,WAAW,MAAM,WAAW,OAAO;EAC9C,MAAM,KAAK,EAAE;CACf;CAEA,MAAM,KAAK,UAAU;CACrB,KAAK,MAAM,YAAY,WAAW;EAChC,MAAM,KAAK,KAAK,SAAS,WAAW,EAAE;EACtC,MAAM,KAAK,aAAa,SAAS,YAAY;CAC/C;CACA,KAAK,MAAM,SAAS,cAAc;EAChC,MAAM,KAAK,KAAK,MAAM,WAAW,EAAE;EACnC,MAAM,KAAK,aAAa,MAAM,YAAY;CAC5C;CAEA,OAAO,GAAG,MAAM,KAAK,IAAI,EAAE;AAC7B;AAEA,SAAgB,sBAAsB,KAA6B,aAA8B;CAC/F,MAAM,QAAkB;EACtB;EACA;EACA;CACF;CACA,MAAM,aAAa,OAAO,KAAK,GAAG,CAAC,CAAC,KAAK;CACzC,KAAK,MAAM,OAAO,YAAY;EAC5B,IAAI,QAAQ,IAAI;EAChB,IAAI,QAAQ,iBAAiB,eAAe,CAAC,OAC3C,QAAQ,oBAAoB;EAE9B,MAAM,KAAK,GAAG,IAAI,GAAG,OAAO;CAC9B;CACA,MAAM,KAAK,EAAE;CACb,OAAO,GAAG,MAAM,KAAK,IAAI,EAAE;AAC7B;AAEA,SAAgB,4BACd,WAOA,OACA,aACQ;CACR,MAAM,QAAQ,CAAC,SAAS,eAAe,EAAE;CAEzC,IAAI,UAAU,SAAS,GACrB,MAAM,KACJ,2BACA,+BACA,0BACA,sBAAsB,iBACtB,0BAA0B,qBAC1B,kBACA,8DACA,oBACA,mBACA,kBACA,EACF;CAGF,IAAI,MAAM,SAAS,GACjB,MAAM,KACJ,iCACA,2BACA,4CACA,kBACA,gDACA,oBACA,mBACA,kBACA,EACF;CAGF,MAAM,KAAK,WAAW;CAEtB,KAAK,MAAM,MAAM,WAAW;EAC1B,MAAM,KAAK,KAAK,GAAG,YAAY,EAAE;EACjC,MAAM,KAAK,oBAAoB;EAC/B,MAAM,KAAK,uBAAuB,GAAG,eAAe;EACpD,MAAM,KAAK,kBAAkB;EAC7B,MAAM,KAAK,mBAAmB;EAC9B,MAAM,KAAK,sBAAsB,GAAG,cAAc;EAClD,MAAM,KAAK,YAAY;EACvB,MAAM,KAAK,YAAY,GAAG,KAAK,OAAO;EACtC,MAAM,KAAK,cAAc;EACzB,MAAM,KAAK,WAAW,GAAG,WAAW,0BAA0B;EAC9D,MAAM,KAAK,EAAE;CACf;CAEA,KAAK,MAAM,KAAK,OAAO;EACrB,MAAM,KAAK,KAAK,EAAE,YAAY,EAAE;EAChC,MAAM,KAAK,uBAAuB;EAClC,MAAM,KAAK,uBAAuB,EAAE,eAAe;EACnD,MAAM,KAAK,YAAY;EACvB,MAAM,KAAK,YAAY,EAAE,KAAK,OAAO;EACrC,MAAM,KAAK,cAAc;EACzB,MAAM,KAAK,WAAW,EAAE,WAAW,OAAO;EAC1C,MAAM,KAAK,EAAE;CACf;CAEA,MAAM,KAAK,UAAU;CACrB,KAAK,MAAM,MAAM,WAAW;EAC1B,MAAM,KAAK,KAAK,GAAG,WAAW,EAAE;EAChC,MAAM,KAAK,aAAa,GAAG,YAAY;CACzC;CACA,KAAK,MAAM,KAAK,OAAO;EACrB,MAAM,KAAK,KAAK,EAAE,WAAW,EAAE;EAC/B,MAAM,KAAK,aAAa,EAAE,YAAY;CACxC;CAEA,OAAO,GAAG,MAAM,KAAK,IAAI,EAAE;AAC7B;AAEA,SAAgB,qBACd,WACA,SACA,eAOA,WACA,aACA,aAC+D;CAC/D,MAAM,aAAa,sBAAsB,SAAS,WAAW;CAC7D,MAAM,gBAAgB,4BAA4B,eAAe,WAAW,WAAW;CAEvF,MAAM,qCAAsB,WAAW,cAAc;CACrD,MAAM,wCAAyB,WAAW,oBAAoB;CAE9D,OAAO;EACL,mBAAmB,aAAa,gBAAgB,UAAU;EAC1D,sBAAsB,aAAa,mBAAmB,aAAa;CACrE;AACF;AAEA,SAAS,aAAa,UAAkB,aAA8B;CACpE,4BAAe,QAAQ,+BAAkB,UAAU,OAAO,MAAM,aAC9D,OAAO;CAGT,2BAAc,UAAU,WAAW;CACnC,OAAO;AACT;AAEA,SAAgB,oBAAoB,WAAmB,eAAwC;CAC7F,MAAM,SAAS,mBAAmB,WAAW,aAAa;CAE1D,IAAI,OAAO,iBAAiB,SAAS,GAAG;EACtC,eAAE,IAAI,KACJ,YAAY,OAAO,iBAAiB,OAAO,0CAC7C;EACA,KAAK,MAAM,WAAW,OAAO,kBAC3B,eAAE,IAAI,QAAQ,KAAK,SAAS;CAEhC;CAEA,OAAO,OAAO;AAChB;AAEA,SAAgB,mBACd,WACA,eAC0B;CAC1B,MAAM,EAAE,MAAM,cAAc,wBAAwB,eAAe,SAAS;CAC5E,MAAM,UAAU,KAAK,OAAO,SAAS,UAAU,MAAM,OAAO;CAC5D,MAAM,aAAyD,EAAE,YAAY,KAAK;CAClF,IAAI,cAAc,QAAQ,eACxB,WAAW,cAAc,mBAAmB,aAAa;CAE3D,MAAM,gBAAgB,cAAc,KAAK,QAAQ,KAAK,WAAW,KAAK,OAAO,UAAU;CACvF,MAAM,mBAAmB,oBAAoB,KAAK,WAAW,KAAK,OAAO,cAAc,OAAO;CAE9F,MAAM,qCAAsB,WAAW,cAAc;CACrD,MAAM,wCAAyB,WAAW,oBAAoB;CAE9D,MAAM,gBAAgB,kBAAkB,WAAW,KAAK,WAAW,KAAK,KAAK;CAE7E,IAAI,WACF,cAAc,WAAW,SAAS;CAGpC,OAAO;EACL;EACA,mBAAmB,aAAa,gBAAgB,aAAa;EAC7D,sBAAsB,aAAa,mBAAmB,gBAAgB;EACtE,kBAAkB;CACpB;AACF;AAEA,SAAS,kBACP,WACA,WACA,cACU;CACV,MAAM,8BAAe,WAAW,MAAM;CACtC,IAAI,yBAAY,OAAO,GAAG,OAAO,CAAC;CAElC,MAAM,wCAA2B,SAAS,OAAO;CACjD,MAAM,yBAAS,IAAI,IAAoB;CACvC,KAAK,MAAM,QAAQ,YAAY,MAAM,IAAI,GAAG;EAC1C,MAAM,QAAQ,KAAK,MAAM,kBAAkB;EAC3C,IAAI,OAAO,OAAO,IAAI,MAAM,IAAI,MAAM,EAAE;CAC1C;CAEA,MAAM,QAAkB,CAAC;CAEzB,KAAK,MAAM,MAAM,WAAW;EAC1B,MAAM,WAAW,OAAO,IAAI,GAAG,MAAM;EACrC,IAAI,YAAY,aAAa,GAAG,KAAK;GACnC,MAAM,UAAU,mBAAmB,QAAQ,KAAK;GAChD,MAAM,KAAK,GAAG,GAAG,OAAO,SAAS,QAAQ,KAAK,GAAG,MAAM;EACzD;CACF;CAEA,KAAK,MAAM,SAAS,cAAc;EAChC,MAAM,WAAW,OAAO,IAAI,MAAM,MAAM;EACxC,IAAI,YAAY,aAAa,MAAM,KAAK;GACtC,MAAM,UAAU,mBAAmB,QAAQ,KAAK;GAChD,MAAM,KAAK,GAAG,MAAM,OAAO,SAAS,QAAQ,KAAK,MAAM,MAAM;EAC/D;CACF;CAEA,OAAO;AACT;AAEA,SAAgB,cAAc,WAAyB;CACrD,MAAM,8BAAe,WAAW,MAAM;CACtC,MAAM,kCAAmB,WAAW,cAAc;CAElD,4BAAe,OAAO,KAAK,yBAAY,WAAW,GAAG;CAGrD,MAAM,kCADuB,aAAa,OACtB,CAAC,CAAC,MAAM,IAAI;CAChC,MAAM,sCAAqB,EAAE,CAAC,CAAC,SAAS,WAAW;CAUnD,2BAAc,SATE,MACb,KAAK,SAAS;EACb,IAAI,uBAAuB,KAAK,IAAI,GAClC,OAAO,sBAAsB;EAE/B,OAAO;CACT,CAAC,CAAC,CACD,KAAK,IAEqB,CAAC;CAC9B,eAAE,IAAI,KAAK,4EAA4E;AACzF;AAEA,IAAI,eAA8B;AAElC,SAAgB,eAAe,WAAyB;CACtD,IAAI,iBAAiB,WAAW;CAChC,MAAM,8BAAe,WAAW,MAAM;CACtC,IAAI,yBAAY,OAAO,GAAG;CAE1B,mBAAW;EAAE,MAAM;EAAS,YAAY,QAAQ;EAAK,OAAO;CAAK,CAAC;CAClE,eAAe;AACjB"}
+{"version":3,"file":"infra.cjs","names":[],"sources":["../../src/cli/infra.ts"],"sourcesContent":["import { randomBytes } from \"node:crypto\";\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport * as p from \"@clack/prompts\";\nimport { config as loadDotenv } from \"dotenv\";\nimport type { RuntimeConfig } from \"../types\";\n\nconst POSTGRES_USER = \"everythingdev\";\nconst POSTGRES_PASSWORD = \"everythingdev\";\nconst API_DATABASE_SECRET = \"API_DATABASE_URL\";\nconst AUTH_DATABASE_SECRET = \"AUTH_DATABASE_URL\";\nconst HOST_SECRET = \"CORS_ORIGIN\";\nconst BASE_POSTGRES_PORT = 5434;\nconst BASE_REDIS_PORT = 6379;\n\nexport interface DatabaseSecretConfig {\n  secret: string;\n  slug: string;\n  fromKey: string;\n  port: number;\n  serviceName: string;\n  containerName: string;\n  databaseName: string;\n  volumeName: string;\n  url: string;\n}\n\nexport interface RedisSecretConfig {\n  secret: string;\n  slug: string;\n  fromKey: string;\n  port: number;\n  serviceName: string;\n  containerName: string;\n  volumeName: string;\n  url: string;\n}\n\nexport interface SecretGroup {\n  section: string;\n  secrets: string[];\n}\n\ninterface DevPortState {\n  host?: number;\n  api?: number;\n  ui?: number;\n  auth?: number;\n  pluginPortStart?: number;\n}\n\nexport interface PortState {\n  postgresPorts: Record<string, number>;\n  redisPorts: Record<string, number>;\n  devPorts?: DevPortState;\n}\n\nexport interface GeneratedInfraSpec {\n  groups: SecretGroup[];\n  databases: DatabaseSecretConfig[];\n  redis: RedisSecretConfig[];\n}\n\ninterface SyncGeneratedInfraResult {\n  secrets: string[];\n  envExampleChanged: boolean;\n  dockerComposeChanged: boolean;\n  staleEnvWarnings: string[];\n}\n\nfunction uniqueSecrets(values: Array<string | undefined>): string[] {\n  const secrets: string[] = [];\n  const seen = new Set<string>();\n\n  for (const value of values) {\n    if (!value || seen.has(value)) continue;\n    seen.add(value);\n    secrets.push(value);\n  }\n\n  return secrets;\n}\n\nexport function loadPortState(configDir?: string): PortState {\n  if (!configDir) return { postgresPorts: {}, redisPorts: {} };\n  const statePath = join(configDir, \".bos\", \"infra-state.json\");\n  if (!existsSync(statePath)) return { postgresPorts: {}, redisPorts: {} };\n  try {\n    const raw = JSON.parse(readFileSync(statePath, \"utf-8\")) as Partial<PortState>;\n    return {\n      postgresPorts: raw.postgresPorts ?? {},\n      redisPorts: raw.redisPorts ?? {},\n      devPorts: raw.devPorts,\n    };\n  } catch {\n    return { postgresPorts: {}, redisPorts: {} };\n  }\n}\n\nexport function savePortState(configDir: string, state: PortState): void {\n  const statePath = join(configDir, \".bos\", \"infra-state.json\");\n  mkdirSync(dirname(statePath), { recursive: true });\n  writeFileSync(statePath, `${JSON.stringify(state, null, 2)}\\n`);\n}\n\nexport type { DevPortState };\n\nfunction resolvePort(slug: string, portMap: Record<string, number>, basePort: number): number {\n  if (portMap[slug] !== undefined) return portMap[slug];\n  const assigned = Object.values(portMap);\n  const maxAssigned = assigned.length > 0 ? Math.max(...assigned) : basePort - 1;\n  const next = Math.max(maxAssigned + 1, basePort);\n  portMap[slug] = next;\n  return next;\n}\n\nexport function normalizeRedisSlug(secret: string): string {\n  return secret.replace(/_REDIS_URL$/, \"\").toLowerCase();\n}\n\nexport function getSecretGroups(runtimeConfig: RuntimeConfig): SecretGroup[] {\n  const groups: SecretGroup[] = [];\n  const seen = new Set<string>();\n\n  const addGroup = (section: string, secrets: string[]) => {\n    const filtered = secrets.filter((s) => {\n      if (seen.has(s)) return false;\n      seen.add(s);\n      return true;\n    });\n    if (filtered.length > 0) {\n      groups.push({ section, secrets: filtered });\n    }\n  };\n\n  addGroup(\"app.host\", uniqueSecrets([...(runtimeConfig.host.secrets ?? []), HOST_SECRET]));\n\n  addGroup(\"app.api\", uniqueSecrets(runtimeConfig.api.secrets ?? []));\n\n  if (runtimeConfig.auth) {\n    addGroup(\"app.auth\", uniqueSecrets(runtimeConfig.auth.secrets ?? []));\n  }\n\n  if (runtimeConfig.plugins) {\n    for (const [pluginKey, plugin] of Object.entries(runtimeConfig.plugins)) {\n      if (plugin.secrets && plugin.secrets.length > 0) {\n        addGroup(`plugins.${pluginKey}`, plugin.secrets);\n      }\n    }\n  }\n\n  return groups;\n}\n\nfunction buildGeneratedInfraSpec(\n  runtimeConfig: RuntimeConfig,\n  configDir?: string,\n): { spec: GeneratedInfraSpec; portState: PortState } {\n  const groups = getSecretGroups(runtimeConfig);\n  const allSecrets = groups.flatMap((group) => group.secrets);\n  const originMap = configDir ? buildOriginMap(configDir, runtimeConfig) : new Map();\n  const portState = loadPortState(configDir);\n\n  const databases = buildDatabaseConfigs(allSecrets, originMap, portState.postgresPorts);\n  const redis = buildRedisConfigs(allSecrets, originMap, portState.redisPorts);\n\n  return { spec: { groups, databases, redis }, portState };\n}\n\nexport function normalizeDatabaseSlug(secret: string): string {\n  return secret.replace(/_DATABASE_URL$/, \"\").toLowerCase();\n}\n\nexport function buildOriginMap(\n  configDir: string,\n  runtimeConfig: RuntimeConfig,\n): Map<string, string> {\n  const configPath = join(configDir, \"bos.config.json\");\n\n  const originMap = new Map<string, string>();\n  const account = runtimeConfig.account;\n\n  const resolveOrigin = (extendsRef: unknown): string | null => {\n    if (typeof extendsRef === \"string\") {\n      const match = extendsRef.match(/^bos:\\/\\/([^/]+)\\//);\n      return match?.[1] ?? null;\n    }\n    return null;\n  };\n\n  const rawConfig = existsSync(configPath)\n    ? (JSON.parse(readFileSync(configPath, \"utf-8\")) as Record<string, unknown>)\n    : null;\n  const rawPlugins = rawConfig?.plugins as Record<string, unknown> | undefined;\n\n  for (const secret of runtimeConfig.api.secrets ?? []) {\n    if (!originMap.has(secret)) originMap.set(secret, account);\n  }\n\n  const rawApp = rawConfig?.app as Record<string, unknown> | undefined;\n  const authExtends = (rawApp?.auth as Record<string, unknown> | undefined)?.extends;\n  const authOrigin = resolveOrigin(authExtends) ?? account;\n  for (const secret of runtimeConfig.auth?.secrets ?? []) {\n    if (!originMap.has(secret)) originMap.set(secret, authOrigin);\n  }\n\n  for (const [pluginKey, pluginEntry] of Object.entries(runtimeConfig.plugins ?? {})) {\n    const rawPlugin = rawPlugins?.[pluginKey];\n    let pluginOrigin: string;\n    if (typeof rawPlugin === \"string\") {\n      pluginOrigin = resolveOrigin(rawPlugin) ?? account;\n    } else if (rawPlugin && typeof rawPlugin === \"object\") {\n      pluginOrigin = resolveOrigin((rawPlugin as Record<string, unknown>).extends) ?? account;\n    } else {\n      pluginOrigin = account;\n    }\n    for (const secret of pluginEntry.secrets ?? []) {\n      if (!originMap.has(secret)) originMap.set(secret, pluginOrigin);\n    }\n  }\n\n  for (const secret of runtimeConfig.host.secrets ?? []) {\n    if (!originMap.has(secret)) originMap.set(secret, account);\n  }\n\n  return originMap;\n}\n\nexport function buildDatabaseConfigs(\n  secrets: string[],\n  originMap: Map<string, string>,\n  portMap: Record<string, number>,\n): DatabaseSecretConfig[] {\n  const databaseSecrets = uniqueSecrets(\n    secrets.filter((secret) => secret.endsWith(\"_DATABASE_URL\")),\n  );\n\n  const orderedSecrets = [...databaseSecrets];\n\n  // Prune stale entries from removed plugins\n  const currentSlugs = new Set(orderedSecrets.map(normalizeDatabaseSlug));\n  for (const slug of Object.keys(portMap)) {\n    if (!currentSlugs.has(slug)) delete portMap[slug];\n  }\n\n  // Sort by slug for deterministic assignment order\n  orderedSecrets.sort((a, b) => normalizeDatabaseSlug(a).localeCompare(normalizeDatabaseSlug(b)));\n\n  for (const secret of orderedSecrets) {\n    const slug = normalizeDatabaseSlug(secret);\n    if (secret === API_DATABASE_SECRET) {\n      portMap[slug] = 5432;\n    } else if (secret === AUTH_DATABASE_SECRET) {\n      portMap[slug] = 5433;\n    } else {\n      resolvePort(slug, portMap, BASE_POSTGRES_PORT);\n    }\n  }\n\n  return orderedSecrets.map((secret) => {\n    const slug = normalizeDatabaseSlug(secret);\n    const fromKey = originMap.get(secret) ?? \"\";\n    const port = portMap[slug];\n\n    const volumeName = fromKey\n      ? `${fromKey.replace(/\\./g, \"_\")}_postgres_${slug}_data`\n      : `postgres_${slug}_data`;\n\n    const containerName = fromKey ? `${fromKey}-postgres-${slug}` : `postgres-${slug}`;\n\n    return {\n      secret,\n      slug,\n      fromKey,\n      port,\n      serviceName: `postgres-${slug.replace(/_/g, \"-\")}`,\n      containerName,\n      databaseName: `${slug}_db`,\n      volumeName,\n      url: `postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@localhost:${port}/${slug}_db`,\n    };\n  });\n}\n\nexport function buildRedisConfigs(\n  secrets: string[],\n  originMap: Map<string, string>,\n  portMap: Record<string, number>,\n): RedisSecretConfig[] {\n  const redisSecrets = uniqueSecrets(secrets.filter((secret) => secret.endsWith(\"_REDIS_URL\")));\n  const orderedSecrets = [...redisSecrets];\n\n  // Prune stale entries from removed plugins\n  const currentSlugs = new Set(orderedSecrets.map(normalizeRedisSlug));\n  for (const slug of Object.keys(portMap)) {\n    if (!currentSlugs.has(slug)) delete portMap[slug];\n  }\n\n  // Sort by slug for deterministic assignment order\n  orderedSecrets.sort((a, b) => normalizeRedisSlug(a).localeCompare(normalizeRedisSlug(b)));\n\n  for (const secret of orderedSecrets) {\n    const slug = normalizeRedisSlug(secret);\n    resolvePort(slug, portMap, BASE_REDIS_PORT);\n  }\n\n  return orderedSecrets.map((secret) => {\n    const slug = normalizeRedisSlug(secret);\n    const fromKey = originMap.get(secret) ?? \"\";\n    const port = portMap[slug];\n\n    const volumeName = fromKey\n      ? `${fromKey.replace(/\\./g, \"_\")}_redis_${slug}_data`\n      : `redis_${slug}_data`;\n\n    const containerName = fromKey ? `${fromKey}-redis-${slug}` : `redis-${slug}`;\n\n    return {\n      secret,\n      slug,\n      fromKey,\n      port,\n      serviceName: `redis-${slug.replace(/_/g, \"-\")}`,\n      containerName,\n      volumeName,\n      url: `redis://localhost:${port}`,\n    };\n  });\n}\n\nfunction extractPortFromUrl(url: string): string | null {\n  const match = url.match(/:(\\d{4,5})(?:\\/|$)/);\n  return match?.[1] ?? null;\n}\n\nfunction resolveDevHostPort(runtimeConfig: RuntimeConfig): number {\n  if (typeof runtimeConfig.host?.port === \"number\") return runtimeConfig.host.port;\n  const fromUrl = runtimeConfig.host?.url ? extractPortFromUrl(runtimeConfig.host.url) : null;\n  if (fromUrl) {\n    const parsed = Number.parseInt(fromUrl, 10);\n    if (!Number.isNaN(parsed)) return parsed;\n  }\n  return 3000;\n}\n\nfunction defaultSecretValue(\n  secret: string,\n  databases: Map<string, DatabaseSecretConfig>,\n  redisConfigs: Map<string, RedisSecretConfig>,\n  options: { forExample: boolean; devHostPort?: number },\n): string {\n  if (secret === \"BETTER_AUTH_SECRET\") {\n    return options.forExample ? \"\" : randomBytes(32).toString(\"base64url\");\n  }\n\n  if (secret === \"CORS_ORIGIN\") {\n    if (typeof options.devHostPort === \"number\") {\n      return `http://localhost:${options.devHostPort}`;\n    }\n    return \"http://localhost:3000\";\n  }\n\n  return databases.get(secret)?.url ?? redisConfigs.get(secret)?.url ?? \"\";\n}\n\nfunction renderEnvFile(\n  groups: SecretGroup[],\n  databases: DatabaseSecretConfig[],\n  redisConfigs: RedisSecretConfig[],\n  options: { forExample: boolean; devHostPort?: number },\n): string {\n  const databaseMap = new Map(databases.map((entry) => [entry.secret, entry]));\n  const redisMap = new Map(redisConfigs.map((entry) => [entry.secret, entry]));\n  const lines: string[] = [\n    \"# Generated from configured bos secrets\",\n    \"# Update values as needed for your local environment\",\n    \"\",\n  ];\n\n  for (const group of groups) {\n    lines.push(`# ${group.section}`);\n    for (const secret of group.secrets) {\n      lines.push(`${secret}=${defaultSecretValue(secret, databaseMap, redisMap, options)}`);\n    }\n    lines.push(\"\");\n  }\n\n  return `${lines.join(\"\\n\")}\\n`;\n}\n\nfunction renderDockerCompose(\n  databases: DatabaseSecretConfig[],\n  redisConfigs: RedisSecretConfig[],\n  projectName: string,\n): string {\n  const lines = [`name: ${projectName}`, \"\"];\n\n  if (databases.length > 0) {\n    lines.push(\n      \"x-pg-common: &pg-common\",\n      \"  image: postgres:17-alpine\",\n      \"  environment: &pg-env\",\n      `    POSTGRES_USER: ${POSTGRES_USER}`,\n      `    POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}`,\n      \"  healthcheck:\",\n      '    test: [\"CMD-SHELL\", \"pg_isready -U everythingdev\"]',\n      \"    interval: 3s\",\n      \"    timeout: 3s\",\n      \"    retries: 5\",\n      \"\",\n    );\n  }\n\n  if (redisConfigs.length > 0) {\n    lines.push(\n      \"x-redis-common: &redis-common\",\n      \"  image: redis:7-alpine\",\n      \"  command: redis-server --appendonly yes\",\n      \"  healthcheck:\",\n      '    test: [\"CMD\", \"redis-cli\", \"ping\"]',\n      \"    interval: 3s\",\n      \"    timeout: 3s\",\n      \"    retries: 5\",\n      \"\",\n    );\n  }\n\n  lines.push(\"services:\");\n\n  for (const database of databases) {\n    lines.push(`  ${database.serviceName}:`);\n    lines.push(\"    <<: *pg-common\");\n    lines.push(`    container_name: ${database.containerName}`);\n    lines.push(\"    environment:\");\n    lines.push(\"      <<: *pg-env\");\n    lines.push(`      POSTGRES_DB: ${database.databaseName}`);\n    lines.push(\"    ports:\");\n    lines.push(`      - \"${database.port}:5432\"`);\n    lines.push(\"    volumes:\");\n    lines.push(`      - ${database.volumeName}:/var/lib/postgresql/data`);\n    lines.push(\"\");\n  }\n\n  for (const redis of redisConfigs) {\n    lines.push(`  ${redis.serviceName}:`);\n    lines.push(\"    <<: *redis-common\");\n    lines.push(`    container_name: ${redis.containerName}`);\n    lines.push(\"    ports:\");\n    lines.push(`      - \"${redis.port}:6379\"`);\n    lines.push(\"    volumes:\");\n    lines.push(`      - ${redis.volumeName}:/data`);\n    lines.push(\"\");\n  }\n\n  lines.push(\"volumes:\");\n  for (const database of databases) {\n    lines.push(`  ${database.volumeName}:`);\n    lines.push(`    name: ${database.volumeName}`);\n  }\n  for (const redis of redisConfigs) {\n    lines.push(`  ${redis.volumeName}:`);\n    lines.push(`    name: ${redis.volumeName}`);\n  }\n\n  return `${lines.join(\"\\n\")}\\n`;\n}\n\nexport function renderEnvFileFromPlan(env: Record<string, string>, devHostPort?: number): string {\n  const lines: string[] = [\n    \"# Generated from bos dev infra plan\",\n    \"# Update values as needed for your local environment\",\n    \"\",\n  ];\n  const sortedKeys = Object.keys(env).sort();\n  for (const key of sortedKeys) {\n    let value = env[key];\n    if (key === \"CORS_ORIGIN\" && devHostPort && !value) {\n      value = `http://localhost:${devHostPort}`;\n    }\n    lines.push(`${key}=${value}`);\n  }\n  lines.push(\"\");\n  return `${lines.join(\"\\n\")}\\n`;\n}\n\nexport function renderDockerComposeFromPlan(\n  databases: {\n    serviceName: string;\n    containerName: string;\n    port: number;\n    volumeName: string;\n    databaseName: string;\n  }[],\n  redis: { serviceName: string; containerName: string; port: number; volumeName: string }[],\n  projectName: string,\n): string {\n  const lines = [`name: ${projectName}`, \"\"];\n\n  if (databases.length > 0) {\n    lines.push(\n      \"x-pg-common: &pg-common\",\n      \"  image: postgres:17-alpine\",\n      \"  environment: &pg-env\",\n      `    POSTGRES_USER: ${POSTGRES_USER}`,\n      `    POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}`,\n      \"  healthcheck:\",\n      '    test: [\"CMD-SHELL\", \"pg_isready -U everythingdev\"]',\n      \"    interval: 3s\",\n      \"    timeout: 3s\",\n      \"    retries: 5\",\n      \"\",\n    );\n  }\n\n  if (redis.length > 0) {\n    lines.push(\n      \"x-redis-common: &redis-common\",\n      \"  image: redis:7-alpine\",\n      \"  command: redis-server --appendonly yes\",\n      \"  healthcheck:\",\n      '    test: [\"CMD\", \"redis-cli\", \"ping\"]',\n      \"    interval: 3s\",\n      \"    timeout: 3s\",\n      \"    retries: 5\",\n      \"\",\n    );\n  }\n\n  lines.push(\"services:\");\n\n  for (const db of databases) {\n    lines.push(`  ${db.serviceName}:`);\n    lines.push(\"    <<: *pg-common\");\n    lines.push(`    container_name: ${db.containerName}`);\n    lines.push(\"    environment:\");\n    lines.push(\"      <<: *pg-env\");\n    lines.push(`      POSTGRES_DB: ${db.databaseName}`);\n    lines.push(\"    ports:\");\n    lines.push(`      - \"${db.port}:5432\"`);\n    lines.push(\"    volumes:\");\n    lines.push(`      - ${db.volumeName}:/var/lib/postgresql/data`);\n    lines.push(\"\");\n  }\n\n  for (const r of redis) {\n    lines.push(`  ${r.serviceName}:`);\n    lines.push(\"    <<: *redis-common\");\n    lines.push(`    container_name: ${r.containerName}`);\n    lines.push(\"    ports:\");\n    lines.push(`      - \"${r.port}:6379\"`);\n    lines.push(\"    volumes:\");\n    lines.push(`      - ${r.volumeName}:/data`);\n    lines.push(\"\");\n  }\n\n  lines.push(\"volumes:\");\n  for (const db of databases) {\n    lines.push(`  ${db.volumeName}:`);\n    lines.push(`    name: ${db.volumeName}`);\n  }\n  for (const r of redis) {\n    lines.push(`  ${r.volumeName}:`);\n    lines.push(`    name: ${r.volumeName}`);\n  }\n\n  return `${lines.join(\"\\n\")}\\n`;\n}\n\nexport function materializeInfraPlan(\n  configDir: string,\n  planEnv: Record<string, string>,\n  planDatabases: {\n    serviceName: string;\n    containerName: string;\n    port: number;\n    volumeName: string;\n    databaseName: string;\n  }[],\n  planRedis: { serviceName: string; containerName: string; port: number; volumeName: string }[],\n  projectName: string,\n  devHostPort?: number,\n): { envExampleChanged: boolean; dockerComposeChanged: boolean } {\n  const envContent = renderEnvFileFromPlan(planEnv, devHostPort);\n  const dockerContent = renderDockerComposeFromPlan(planDatabases, planRedis, projectName);\n\n  const envExamplePath = join(configDir, \".env.example\");\n  const dockerComposePath = join(configDir, \"docker-compose.yml\");\n\n  return {\n    envExampleChanged: syncTextFile(envExamplePath, envContent),\n    dockerComposeChanged: syncTextFile(dockerComposePath, dockerContent),\n  };\n}\n\nfunction syncTextFile(filePath: string, nextContent: string): boolean {\n  if (existsSync(filePath) && readFileSync(filePath, \"utf-8\") === nextContent) {\n    return false;\n  }\n\n  writeFileSync(filePath, nextContent);\n  return true;\n}\n\nexport function writeGeneratedInfra(configDir: string, runtimeConfig: RuntimeConfig): string[] {\n  const result = syncGeneratedInfra(configDir, runtimeConfig);\n\n  if (result.staleEnvWarnings.length > 0) {\n    p.log.warn(\n      `.env has ${result.staleEnvWarnings.length} stale value(s) compared to .env.example:`,\n    );\n    for (const warning of result.staleEnvWarnings) {\n      p.log.message(`  ${warning}`);\n    }\n  }\n\n  return result.secrets;\n}\n\nexport function syncGeneratedInfra(\n  configDir: string,\n  runtimeConfig: RuntimeConfig,\n): SyncGeneratedInfraResult {\n  const { spec, portState } = buildGeneratedInfraSpec(runtimeConfig, configDir);\n  const secrets = spec.groups.flatMap((group) => group.secrets);\n  const envOptions: { forExample: true; devHostPort?: number } = { forExample: true };\n  if (runtimeConfig.env === \"development\") {\n    envOptions.devHostPort = resolveDevHostPort(runtimeConfig);\n  }\n  const newEnvContent = renderEnvFile(spec.groups, spec.databases, spec.redis, envOptions);\n  const newDockerContent = renderDockerCompose(spec.databases, spec.redis, runtimeConfig.account);\n\n  const envExamplePath = join(configDir, \".env.example\");\n  const dockerComposePath = join(configDir, \"docker-compose.yml\");\n\n  const staleWarnings = checkEnvStaleness(configDir, spec.databases, spec.redis);\n\n  if (configDir) {\n    savePortState(configDir, portState);\n  }\n\n  return {\n    secrets,\n    envExampleChanged: syncTextFile(envExamplePath, newEnvContent),\n    dockerComposeChanged: syncTextFile(dockerComposePath, newDockerContent),\n    staleEnvWarnings: staleWarnings,\n  };\n}\n\nfunction checkEnvStaleness(\n  configDir: string,\n  databases: DatabaseSecretConfig[],\n  redisConfigs: RedisSecretConfig[],\n): string[] {\n  const envPath = join(configDir, \".env\");\n  if (!existsSync(envPath)) return [];\n\n  const existingEnv = readFileSync(envPath, \"utf-8\");\n  const envMap = new Map<string, string>();\n  for (const line of existingEnv.split(\"\\n\")) {\n    const match = line.match(/^([A-Z_]+)=(.*)$/);\n    if (match) envMap.set(match[1], match[2]);\n  }\n\n  const stale: string[] = [];\n\n  for (const db of databases) {\n    const existing = envMap.get(db.secret);\n    if (existing && existing !== db.url) {\n      const oldPort = extractPortFromUrl(existing) ?? \"?\";\n      stale.push(`${db.secret}: port ${oldPort} → ${db.port}`);\n    }\n  }\n\n  for (const redis of redisConfigs) {\n    const existing = envMap.get(redis.secret);\n    if (existing && existing !== redis.url) {\n      const oldPort = extractPortFromUrl(existing) ?? \"?\";\n      stale.push(`${redis.secret}: port ${oldPort} → ${redis.port}`);\n    }\n  }\n\n  return stale;\n}\n\nexport function ensureEnvFile(configDir: string): void {\n  const envPath = join(configDir, \".env\");\n  const examplePath = join(configDir, \".env.example\");\n\n  if (existsSync(envPath) || !existsSync(examplePath)) return;\n\n  const content = readFileSync(examplePath, \"utf-8\");\n  const lines = content.split(\"\\n\");\n  const secret = randomBytes(32).toString(\"base64url\");\n  const updated = lines\n    .map((line) => {\n      if (/^BETTER_AUTH_SECRET=/.test(line)) {\n        return `BETTER_AUTH_SECRET=${secret}`;\n      }\n      return line;\n    })\n    .join(\"\\n\");\n\n  writeFileSync(envPath, updated);\n  p.log.info(\"Created .env from generated .env.example with generated BETTER_AUTH_SECRET\");\n}\n\nlet envLoadedDir: string | null = null;\n\nexport function loadProjectEnv(configDir: string): void {\n  if (envLoadedDir === configDir) return;\n  const envPath = join(configDir, \".env\");\n  if (!existsSync(envPath)) return;\n\n  loadDotenv({ path: envPath, processEnv: process.env, quiet: true });\n  envLoadedDir = configDir;\n}\n"],"mappings":";;;;;;;;;AAOA,MAAM,gBAAgB;AACtB,MAAM,oBAAoB;AAC1B,MAAM,sBAAsB;AAC5B,MAAM,uBAAuB;AAC7B,MAAM,cAAc;AACpB,MAAM,qBAAqB;AAC3B,MAAM,kBAAkB;AAyDxB,SAAS,cAAc,QAA6C;CAClE,MAAM,UAAoB,CAAC;CAC3B,MAAM,uBAAO,IAAI,IAAY;CAE7B,KAAK,MAAM,SAAS,QAAQ;EAC1B,IAAI,CAAC,SAAS,KAAK,IAAI,KAAK,GAAG;EAC/B,KAAK,IAAI,KAAK;EACd,QAAQ,KAAK,KAAK;CACpB;CAEA,OAAO;AACT;AAEA,SAAgB,cAAc,WAA+B;CAC3D,IAAI,CAAC,WAAW,OAAO;EAAE,eAAe,CAAC;EAAG,YAAY,CAAC;CAAE;CAC3D,MAAM,gCAAiB,WAAW,QAAQ,kBAAkB;CAC5D,IAAI,yBAAY,SAAS,GAAG,OAAO;EAAE,eAAe,CAAC;EAAG,YAAY,CAAC;CAAE;CACvE,IAAI;EACF,MAAM,MAAM,KAAK,gCAAmB,WAAW,OAAO,CAAC;EACvD,OAAO;GACL,eAAe,IAAI,iBAAiB,CAAC;GACrC,YAAY,IAAI,cAAc,CAAC;GAC/B,UAAU,IAAI;EAChB;CACF,QAAQ;EACN,OAAO;GAAE,eAAe,CAAC;GAAG,YAAY,CAAC;EAAE;CAC7C;AACF;AAEA,SAAgB,cAAc,WAAmB,OAAwB;CACvE,MAAM,gCAAiB,WAAW,QAAQ,kBAAkB;CAC5D,8CAAkB,SAAS,GAAG,EAAE,WAAW,KAAK,CAAC;CACjD,2BAAc,WAAW,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,EAAE,GAAG;AAChE;AAIA,SAAS,YAAY,MAAc,SAAiC,UAA0B;CAC5F,IAAI,QAAQ,UAAU,QAAW,OAAO,QAAQ;CAChD,MAAM,WAAW,OAAO,OAAO,OAAO;CACtC,MAAM,cAAc,SAAS,SAAS,IAAI,KAAK,IAAI,GAAG,QAAQ,IAAI,WAAW;CAC7E,MAAM,OAAO,KAAK,IAAI,cAAc,GAAG,QAAQ;CAC/C,QAAQ,QAAQ;CAChB,OAAO;AACT;AAEA,SAAgB,mBAAmB,QAAwB;CACzD,OAAO,OAAO,QAAQ,eAAe,EAAE,CAAC,CAAC,YAAY;AACvD;AAEA,SAAgB,gBAAgB,eAA6C;CAC3E,MAAM,SAAwB,CAAC;CAC/B,MAAM,uBAAO,IAAI,IAAY;CAE7B,MAAM,YAAY,SAAiB,YAAsB;EACvD,MAAM,WAAW,QAAQ,QAAQ,MAAM;GACrC,IAAI,KAAK,IAAI,CAAC,GAAG,OAAO;GACxB,KAAK,IAAI,CAAC;GACV,OAAO;EACT,CAAC;EACD,IAAI,SAAS,SAAS,GACpB,OAAO,KAAK;GAAE;GAAS,SAAS;EAAS,CAAC;CAE9C;CAEA,SAAS,YAAY,cAAc,CAAC,GAAI,cAAc,KAAK,WAAW,CAAC,GAAI,WAAW,CAAC,CAAC;CAExF,SAAS,WAAW,cAAc,cAAc,IAAI,WAAW,CAAC,CAAC,CAAC;CAElE,IAAI,cAAc,MAChB,SAAS,YAAY,cAAc,cAAc,KAAK,WAAW,CAAC,CAAC,CAAC;CAGtE,IAAI,cAAc,SAChB;OAAK,MAAM,CAAC,WAAW,WAAW,OAAO,QAAQ,cAAc,OAAO,GACpE,IAAI,OAAO,WAAW,OAAO,QAAQ,SAAS,GAC5C,SAAS,WAAW,aAAa,OAAO,OAAO;CAEnD;CAGF,OAAO;AACT;AAEA,SAAS,wBACP,eACA,WACoD;CACpD,MAAM,SAAS,gBAAgB,aAAa;CAC5C,MAAM,aAAa,OAAO,SAAS,UAAU,MAAM,OAAO;CAC1D,MAAM,YAAY,YAAY,eAAe,WAAW,aAAa,oBAAI,IAAI,IAAI;CACjF,MAAM,YAAY,cAAc,SAAS;CAKzC,OAAO;EAAE,MAAM;GAAE;GAAQ,WAHP,qBAAqB,YAAY,WAAW,UAAU,aAGvC;GAAG,OAFtB,kBAAkB,YAAY,WAAW,UAAU,UAEzB;EAAE;EAAG;CAAU;AACzD;AAEA,SAAgB,sBAAsB,QAAwB;CAC5D,OAAO,OAAO,QAAQ,kBAAkB,EAAE,CAAC,CAAC,YAAY;AAC1D;AAEA,SAAgB,eACd,WACA,eACqB;CACrB,MAAM,iCAAkB,WAAW,iBAAiB;CAEpD,MAAM,4BAAY,IAAI,IAAoB;CAC1C,MAAM,UAAU,cAAc;CAE9B,MAAM,iBAAiB,eAAuC;EAC5D,IAAI,OAAO,eAAe,UAExB,OADc,WAAW,MAAM,oBACpB,CAAC,GAAG,MAAM;EAEvB,OAAO;CACT;CAEA,MAAM,oCAAuB,UAAU,IAClC,KAAK,gCAAmB,YAAY,OAAO,CAAC,IAC7C;CACJ,MAAM,aAAa,WAAW;CAE9B,KAAK,MAAM,UAAU,cAAc,IAAI,WAAW,CAAC,GACjD,IAAI,CAAC,UAAU,IAAI,MAAM,GAAG,UAAU,IAAI,QAAQ,OAAO;CAI3D,MAAM,gBADS,WAAW,IACC,EAAE,KAAI,EAA0C;CAC3E,MAAM,aAAa,cAAc,WAAW,KAAK;CACjD,KAAK,MAAM,UAAU,cAAc,MAAM,WAAW,CAAC,GACnD,IAAI,CAAC,UAAU,IAAI,MAAM,GAAG,UAAU,IAAI,QAAQ,UAAU;CAG9D,KAAK,MAAM,CAAC,WAAW,gBAAgB,OAAO,QAAQ,cAAc,WAAW,CAAC,CAAC,GAAG;EAClF,MAAM,YAAY,aAAa;EAC/B,IAAI;EACJ,IAAI,OAAO,cAAc,UACvB,eAAe,cAAc,SAAS,KAAK;OACtC,IAAI,aAAa,OAAO,cAAc,UAC3C,eAAe,cAAe,UAAsC,OAAO,KAAK;OAEhF,eAAe;EAEjB,KAAK,MAAM,UAAU,YAAY,WAAW,CAAC,GAC3C,IAAI,CAAC,UAAU,IAAI,MAAM,GAAG,UAAU,IAAI,QAAQ,YAAY;CAElE;CAEA,KAAK,MAAM,UAAU,cAAc,KAAK,WAAW,CAAC,GAClD,IAAI,CAAC,UAAU,IAAI,MAAM,GAAG,UAAU,IAAI,QAAQ,OAAO;CAG3D,OAAO;AACT;AAEA,SAAgB,qBACd,SACA,WACA,SACwB;CAKxB,MAAM,iBAAiB,CAAC,GAJA,cACtB,QAAQ,QAAQ,WAAW,OAAO,SAAS,eAAe,CAAC,CAGpB,CAAC;CAG1C,MAAM,eAAe,IAAI,IAAI,eAAe,IAAI,qBAAqB,CAAC;CACtE,KAAK,MAAM,QAAQ,OAAO,KAAK,OAAO,GACpC,IAAI,CAAC,aAAa,IAAI,IAAI,GAAG,OAAO,QAAQ;CAI9C,eAAe,MAAM,GAAG,MAAM,sBAAsB,CAAC,CAAC,CAAC,cAAc,sBAAsB,CAAC,CAAC,CAAC;CAE9F,KAAK,MAAM,UAAU,gBAAgB;EACnC,MAAM,OAAO,sBAAsB,MAAM;EACzC,IAAI,WAAW,qBACb,QAAQ,QAAQ;OACX,IAAI,WAAW,sBACpB,QAAQ,QAAQ;OAEhB,YAAY,MAAM,SAAS,kBAAkB;CAEjD;CAEA,OAAO,eAAe,KAAK,WAAW;EACpC,MAAM,OAAO,sBAAsB,MAAM;EACzC,MAAM,UAAU,UAAU,IAAI,MAAM,KAAK;EACzC,MAAM,OAAO,QAAQ;EAErB,MAAM,aAAa,UACf,GAAG,QAAQ,QAAQ,OAAO,GAAG,EAAE,YAAY,KAAK,SAChD,YAAY,KAAK;EAErB,MAAM,gBAAgB,UAAU,GAAG,QAAQ,YAAY,SAAS,YAAY;EAE5E,OAAO;GACL;GACA;GACA;GACA;GACA,aAAa,YAAY,KAAK,QAAQ,MAAM,GAAG;GAC/C;GACA,cAAc,GAAG,KAAK;GACtB;GACA,KAAK,cAAc,cAAc,GAAG,kBAAkB,aAAa,KAAK,GAAG,KAAK;EAClF;CACF,CAAC;AACH;AAEA,SAAgB,kBACd,SACA,WACA,SACqB;CAErB,MAAM,iBAAiB,CAAC,GADH,cAAc,QAAQ,QAAQ,WAAW,OAAO,SAAS,YAAY,CAAC,CACrD,CAAC;CAGvC,MAAM,eAAe,IAAI,IAAI,eAAe,IAAI,kBAAkB,CAAC;CACnE,KAAK,MAAM,QAAQ,OAAO,KAAK,OAAO,GACpC,IAAI,CAAC,aAAa,IAAI,IAAI,GAAG,OAAO,QAAQ;CAI9C,eAAe,MAAM,GAAG,MAAM,mBAAmB,CAAC,CAAC,CAAC,cAAc,mBAAmB,CAAC,CAAC,CAAC;CAExF,KAAK,MAAM,UAAU,gBAEnB,YADa,mBAAmB,MACjB,GAAG,SAAS,eAAe;CAG5C,OAAO,eAAe,KAAK,WAAW;EACpC,MAAM,OAAO,mBAAmB,MAAM;EACtC,MAAM,UAAU,UAAU,IAAI,MAAM,KAAK;EACzC,MAAM,OAAO,QAAQ;EAErB,MAAM,aAAa,UACf,GAAG,QAAQ,QAAQ,OAAO,GAAG,EAAE,SAAS,KAAK,SAC7C,SAAS,KAAK;EAElB,MAAM,gBAAgB,UAAU,GAAG,QAAQ,SAAS,SAAS,SAAS;EAEtE,OAAO;GACL;GACA;GACA;GACA;GACA,aAAa,SAAS,KAAK,QAAQ,MAAM,GAAG;GAC5C;GACA;GACA,KAAK,qBAAqB;EAC5B;CACF,CAAC;AACH;AAEA,SAAS,mBAAmB,KAA4B;CAEtD,OADc,IAAI,MAAM,oBACb,CAAC,GAAG,MAAM;AACvB;AAEA,SAAS,mBAAmB,eAAsC;CAChE,IAAI,OAAO,cAAc,MAAM,SAAS,UAAU,OAAO,cAAc,KAAK;CAC5E,MAAM,UAAU,cAAc,MAAM,MAAM,mBAAmB,cAAc,KAAK,GAAG,IAAI;CACvF,IAAI,SAAS;EACX,MAAM,SAAS,OAAO,SAAS,SAAS,EAAE;EAC1C,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,OAAO;CACpC;CACA,OAAO;AACT;AAEA,SAAS,mBACP,QACA,WACA,cACA,SACQ;CACR,IAAI,WAAW,sBACb,OAAO,QAAQ,aAAa,kCAAiB,EAAE,CAAC,CAAC,SAAS,WAAW;CAGvE,IAAI,WAAW,eAAe;EAC5B,IAAI,OAAO,QAAQ,gBAAgB,UACjC,OAAO,oBAAoB,QAAQ;EAErC,OAAO;CACT;CAEA,OAAO,UAAU,IAAI,MAAM,CAAC,EAAE,OAAO,aAAa,IAAI,MAAM,CAAC,EAAE,OAAO;AACxE;AAEA,SAAS,cACP,QACA,WACA,cACA,SACQ;CACR,MAAM,cAAc,IAAI,IAAI,UAAU,KAAK,UAAU,CAAC,MAAM,QAAQ,KAAK,CAAC,CAAC;CAC3E,MAAM,WAAW,IAAI,IAAI,aAAa,KAAK,UAAU,CAAC,MAAM,QAAQ,KAAK,CAAC,CAAC;CAC3E,MAAM,QAAkB;EACtB;EACA;EACA;CACF;CAEA,KAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,KAAK,KAAK,MAAM,SAAS;EAC/B,KAAK,MAAM,UAAU,MAAM,SACzB,MAAM,KAAK,GAAG,OAAO,GAAG,mBAAmB,QAAQ,aAAa,UAAU,OAAO,GAAG;EAEtF,MAAM,KAAK,EAAE;CACf;CAEA,OAAO,GAAG,MAAM,KAAK,IAAI,EAAE;AAC7B;AAEA,SAAS,oBACP,WACA,cACA,aACQ;CACR,MAAM,QAAQ,CAAC,SAAS,eAAe,EAAE;CAEzC,IAAI,UAAU,SAAS,GACrB,MAAM,KACJ,2BACA,+BACA,0BACA,sBAAsB,iBACtB,0BAA0B,qBAC1B,kBACA,8DACA,oBACA,mBACA,kBACA,EACF;CAGF,IAAI,aAAa,SAAS,GACxB,MAAM,KACJ,iCACA,2BACA,4CACA,kBACA,gDACA,oBACA,mBACA,kBACA,EACF;CAGF,MAAM,KAAK,WAAW;CAEtB,KAAK,MAAM,YAAY,WAAW;EAChC,MAAM,KAAK,KAAK,SAAS,YAAY,EAAE;EACvC,MAAM,KAAK,oBAAoB;EAC/B,MAAM,KAAK,uBAAuB,SAAS,eAAe;EAC1D,MAAM,KAAK,kBAAkB;EAC7B,MAAM,KAAK,mBAAmB;EAC9B,MAAM,KAAK,sBAAsB,SAAS,cAAc;EACxD,MAAM,KAAK,YAAY;EACvB,MAAM,KAAK,YAAY,SAAS,KAAK,OAAO;EAC5C,MAAM,KAAK,cAAc;EACzB,MAAM,KAAK,WAAW,SAAS,WAAW,0BAA0B;EACpE,MAAM,KAAK,EAAE;CACf;CAEA,KAAK,MAAM,SAAS,cAAc;EAChC,MAAM,KAAK,KAAK,MAAM,YAAY,EAAE;EACpC,MAAM,KAAK,uBAAuB;EAClC,MAAM,KAAK,uBAAuB,MAAM,eAAe;EACvD,MAAM,KAAK,YAAY;EACvB,MAAM,KAAK,YAAY,MAAM,KAAK,OAAO;EACzC,MAAM,KAAK,cAAc;EACzB,MAAM,KAAK,WAAW,MAAM,WAAW,OAAO;EAC9C,MAAM,KAAK,EAAE;CACf;CAEA,MAAM,KAAK,UAAU;CACrB,KAAK,MAAM,YAAY,WAAW;EAChC,MAAM,KAAK,KAAK,SAAS,WAAW,EAAE;EACtC,MAAM,KAAK,aAAa,SAAS,YAAY;CAC/C;CACA,KAAK,MAAM,SAAS,cAAc;EAChC,MAAM,KAAK,KAAK,MAAM,WAAW,EAAE;EACnC,MAAM,KAAK,aAAa,MAAM,YAAY;CAC5C;CAEA,OAAO,GAAG,MAAM,KAAK,IAAI,EAAE;AAC7B;AAiIA,SAAS,aAAa,UAAkB,aAA8B;CACpE,4BAAe,QAAQ,+BAAkB,UAAU,OAAO,MAAM,aAC9D,OAAO;CAGT,2BAAc,UAAU,WAAW;CACnC,OAAO;AACT;AAEA,SAAgB,oBAAoB,WAAmB,eAAwC;CAC7F,MAAM,SAAS,mBAAmB,WAAW,aAAa;CAE1D,IAAI,OAAO,iBAAiB,SAAS,GAAG;EACtC,eAAE,IAAI,KACJ,YAAY,OAAO,iBAAiB,OAAO,0CAC7C;EACA,KAAK,MAAM,WAAW,OAAO,kBAC3B,eAAE,IAAI,QAAQ,KAAK,SAAS;CAEhC;CAEA,OAAO,OAAO;AAChB;AAEA,SAAgB,mBACd,WACA,eAC0B;CAC1B,MAAM,EAAE,MAAM,cAAc,wBAAwB,eAAe,SAAS;CAC5E,MAAM,UAAU,KAAK,OAAO,SAAS,UAAU,MAAM,OAAO;CAC5D,MAAM,aAAyD,EAAE,YAAY,KAAK;CAClF,IAAI,cAAc,QAAQ,eACxB,WAAW,cAAc,mBAAmB,aAAa;CAE3D,MAAM,gBAAgB,cAAc,KAAK,QAAQ,KAAK,WAAW,KAAK,OAAO,UAAU;CACvF,MAAM,mBAAmB,oBAAoB,KAAK,WAAW,KAAK,OAAO,cAAc,OAAO;CAE9F,MAAM,qCAAsB,WAAW,cAAc;CACrD,MAAM,wCAAyB,WAAW,oBAAoB;CAE9D,MAAM,gBAAgB,kBAAkB,WAAW,KAAK,WAAW,KAAK,KAAK;CAE7E,IAAI,WACF,cAAc,WAAW,SAAS;CAGpC,OAAO;EACL;EACA,mBAAmB,aAAa,gBAAgB,aAAa;EAC7D,sBAAsB,aAAa,mBAAmB,gBAAgB;EACtE,kBAAkB;CACpB;AACF;AAEA,SAAS,kBACP,WACA,WACA,cACU;CACV,MAAM,8BAAe,WAAW,MAAM;CACtC,IAAI,yBAAY,OAAO,GAAG,OAAO,CAAC;CAElC,MAAM,wCAA2B,SAAS,OAAO;CACjD,MAAM,yBAAS,IAAI,IAAoB;CACvC,KAAK,MAAM,QAAQ,YAAY,MAAM,IAAI,GAAG;EAC1C,MAAM,QAAQ,KAAK,MAAM,kBAAkB;EAC3C,IAAI,OAAO,OAAO,IAAI,MAAM,IAAI,MAAM,EAAE;CAC1C;CAEA,MAAM,QAAkB,CAAC;CAEzB,KAAK,MAAM,MAAM,WAAW;EAC1B,MAAM,WAAW,OAAO,IAAI,GAAG,MAAM;EACrC,IAAI,YAAY,aAAa,GAAG,KAAK;GACnC,MAAM,UAAU,mBAAmB,QAAQ,KAAK;GAChD,MAAM,KAAK,GAAG,GAAG,OAAO,SAAS,QAAQ,KAAK,GAAG,MAAM;EACzD;CACF;CAEA,KAAK,MAAM,SAAS,cAAc;EAChC,MAAM,WAAW,OAAO,IAAI,MAAM,MAAM;EACxC,IAAI,YAAY,aAAa,MAAM,KAAK;GACtC,MAAM,UAAU,mBAAmB,QAAQ,KAAK;GAChD,MAAM,KAAK,GAAG,MAAM,OAAO,SAAS,QAAQ,KAAK,MAAM,MAAM;EAC/D;CACF;CAEA,OAAO;AACT;AAEA,SAAgB,cAAc,WAAyB;CACrD,MAAM,8BAAe,WAAW,MAAM;CACtC,MAAM,kCAAmB,WAAW,cAAc;CAElD,4BAAe,OAAO,KAAK,yBAAY,WAAW,GAAG;CAGrD,MAAM,kCADuB,aAAa,OACtB,CAAC,CAAC,MAAM,IAAI;CAChC,MAAM,sCAAqB,EAAE,CAAC,CAAC,SAAS,WAAW;CAUnD,2BAAc,SATE,MACb,KAAK,SAAS;EACb,IAAI,uBAAuB,KAAK,IAAI,GAClC,OAAO,sBAAsB;EAE/B,OAAO;CACT,CAAC,CAAC,CACD,KAAK,IAEqB,CAAC;CAC9B,eAAE,IAAI,KAAK,4EAA4E;AACzF;AAEA,IAAI,eAA8B;AAElC,SAAgB,eAAe,WAAyB;CACtD,IAAI,iBAAiB,WAAW;CAChC,MAAM,8BAAe,WAAW,MAAM;CACtC,IAAI,yBAAY,OAAO,GAAG;CAE1B,mBAAW;EAAE,MAAM;EAAS,YAAY,QAAQ;EAAK,OAAO;CAAK,CAAC;CAClE,eAAe;AACjB"}

package/dist/cli/infra.mjs

@@ -254,70 +254,6 @@ function renderDockerCompose(databases, redisConfigs, projectName) {
 	}
 	return `${lines.join("\n")}\n`;
 }
-function renderEnvFileFromPlan(env, devHostPort) {
-	const lines = [
-		"# Generated from bos dev infra plan",
-		"# Update values as needed for your local environment",
-		""
-	];
-	const sortedKeys = Object.keys(env).sort();
-	for (const key of sortedKeys) {
-		let value = env[key];
-		if (key === "CORS_ORIGIN" && devHostPort && !value) value = `http://localhost:${devHostPort}`;
-		lines.push(`${key}=${value}`);
-	}
-	lines.push("");
-	return `${lines.join("\n")}\n`;
-}
-function renderDockerComposeFromPlan(databases, redis, projectName) {
-	const lines = [`name: ${projectName}`, ""];
-	if (databases.length > 0) lines.push("x-pg-common: &pg-common", "  image: postgres:17-alpine", "  environment: &pg-env", `    POSTGRES_USER: ${POSTGRES_USER}`, `    POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}`, "  healthcheck:", "    test: [\"CMD-SHELL\", \"pg_isready -U everythingdev\"]", "    interval: 3s", "    timeout: 3s", "    retries: 5", "");
-	if (redis.length > 0) lines.push("x-redis-common: &redis-common", "  image: redis:7-alpine", "  command: redis-server --appendonly yes", "  healthcheck:", "    test: [\"CMD\", \"redis-cli\", \"ping\"]", "    interval: 3s", "    timeout: 3s", "    retries: 5", "");
-	lines.push("services:");
-	for (const db of databases) {
-		lines.push(`  ${db.serviceName}:`);
-		lines.push("    <<: *pg-common");
-		lines.push(`    container_name: ${db.containerName}`);
-		lines.push("    environment:");
-		lines.push("      <<: *pg-env");
-		lines.push(`      POSTGRES_DB: ${db.databaseName}`);
-		lines.push("    ports:");
-		lines.push(`      - "${db.port}:5432"`);
-		lines.push("    volumes:");
-		lines.push(`      - ${db.volumeName}:/var/lib/postgresql/data`);
-		lines.push("");
-	}
-	for (const r of redis) {
-		lines.push(`  ${r.serviceName}:`);
-		lines.push("    <<: *redis-common");
-		lines.push(`    container_name: ${r.containerName}`);
-		lines.push("    ports:");
-		lines.push(`      - "${r.port}:6379"`);
-		lines.push("    volumes:");
-		lines.push(`      - ${r.volumeName}:/data`);
-		lines.push("");
-	}
-	lines.push("volumes:");
-	for (const db of databases) {
-		lines.push(`  ${db.volumeName}:`);
-		lines.push(`    name: ${db.volumeName}`);
-	}
-	for (const r of redis) {
-		lines.push(`  ${r.volumeName}:`);
-		lines.push(`    name: ${r.volumeName}`);
-	}
-	return `${lines.join("\n")}\n`;
-}
-function materializeInfraPlan(configDir, planEnv, planDatabases, planRedis, projectName, devHostPort) {
-	const envContent = renderEnvFileFromPlan(planEnv, devHostPort);
-	const dockerContent = renderDockerComposeFromPlan(planDatabases, planRedis, projectName);
-	const envExamplePath = join(configDir, ".env.example");
-	const dockerComposePath = join(configDir, "docker-compose.yml");
-	return {
-		envExampleChanged: syncTextFile(envExamplePath, envContent),
-		dockerComposeChanged: syncTextFile(dockerComposePath, dockerContent)
-	};
-}
 function syncTextFile(filePath, nextContent) {
 	if (existsSync(filePath) && readFileSync(filePath, "utf-8") === nextContent) return false;
 	writeFileSync(filePath, nextContent);
@@ -401,5 +337,5 @@ function loadProjectEnv(configDir) {
 }
 
 //#endregion
-export { buildDatabaseConfigs, buildOriginMap, buildRedisConfigs, ensureEnvFile, getSecretGroups, loadPortState, loadProjectEnv, materializeInfraPlan, normalizeDatabaseSlug, normalizeRedisSlug, renderDockerComposeFromPlan, renderEnvFileFromPlan, savePortState, syncGeneratedInfra, writeGeneratedInfra };
+export { buildDatabaseConfigs, buildOriginMap, buildRedisConfigs, ensureEnvFile, getSecretGroups, loadPortState, loadProjectEnv, normalizeDatabaseSlug, normalizeRedisSlug, savePortState, syncGeneratedInfra, writeGeneratedInfra };
 //# sourceMappingURL=infra.mjs.map