everything-dev 1.53.1 → 2.0.0-rc.0

package/dist/plugin.mjs

@@ -1,1401 +1,67 @@
-import { buildRegistryConfigUrl, fetchBosConfigFromFastKv, fetchRemotePluginManifest, getRegistryNamespaceForAccount, parseBosUrl } from "./fastkv.mjs";
-import { mergeBosConfigWithExtends, resolveExtendsRef } from "./merge.mjs";
-import { getNetworkIdForAccount } from "./network.mjs";
-import { BosConfigSchema } from "./types.mjs";
-import { buildRuntimePluginsForConfig, drainConfigWarnings, findConfigPath, getHostDevelopmentPort, getProjectRoot, loadLocalConfig, loadResolvedConfig, resolveConfigComposableEntries, resumeWarnings, suppressWarnings } from "./config.mjs";
 import { createPlugin, z } from "./sdk.mjs";
 import { bosContract } from "./contract.mjs";
-import { computeSriHashForUrl, parseDeployLines } from "./integrity.mjs";
-import { pruneDeadEffect, readRegistry, unregisterPid } from "./process-registry.mjs";
-import { PortAllocatorLive, buildRuntimeConfig, detectLocalPackages } from "./app.mjs";
-import { syncResolvedSharedDeps } from "./shared-deps.mjs";
-import { run } from "./utils/run.mjs";
-import { colors } from "./utils/theme.mjs";
-import { buildEveryPluginQuietly, buildEverythingDevQuietly, buildWorkspaceTargets, fileExists, getPluginRef, readJsonFile, selectWorkspaceTargets } from "./build.mjs";
-import { ensureEnvFile, loadProjectEnv, syncGeneratedInfra, writeGeneratedInfra } from "./cli/infra.mjs";
-import { saveBosConfig } from "./utils/save-config.mjs";
-import { buildInitPatterns, buildPluginRouteExclusions, copyFilteredFiles, detectGitRemoteUrl, fetchParentConfig, generateDatabaseMigrations, personalizeAgentsMd, personalizeConfig, removeInitLockfile, resolveSourceDir, runBunInstall, runTypesGen, scaffoldMinimalProject, stripOrphanedWorkspacesFromLockfile, writeInitSnapshot } from "./cli/init.mjs";
-import { getStatus } from "./cli/status.mjs";
-import { syncTemplate } from "./cli/sync.mjs";
-import { upgradeTemplate } from "./cli/upgrade.mjs";
-import { generateCodeArtifacts } from "./code-artifacts.mjs";
-import { buildDescription, buildServiceDescriptorMap, buildServiceDescriptorMapFromPlan } from "./service-descriptor.mjs";
-import { planInfra } from "./infra/planner.mjs";
-import { preflightLocalInfra } from "./infra/preflight.mjs";
-import { addFunctionCallAccessKey, deleteAccessKeys, ensureNearCli, listPublishKeys } from "./near-cli.mjs";
-import { extractPublishedUrl, publishToFastKv } from "./publish.mjs";
-import { existsSync, readFileSync, writeFileSync } from "node:fs";
-import { basename, dirname, join, relative, resolve } from "node:path";
-import { Effect } from "effect";
-import { EventEmitter } from "node:events";
+import { openResolution } from "./resolution/session.mjs";
+import { DatabaseBindings, makeDatabaseBindings } from "./db/bindings.mjs";
+import { DrizzleKit, makeDrizzleKitLive } from "./db/drizzle-kit.mjs";
+import { BosDepsTag } from "./commands/shared.mjs";
+import { registerBuild } from "./commands/build.mjs";
+import { registerConfig, resolveRemoteConfigChain } from "./commands/config.mjs";
+import { registerDb } from "./commands/db.mjs";
+import { registerDeploy } from "./commands/deploy.mjs";
+import { ProjectEnv, ProjectEnvLive } from "./env/project-env.mjs";
+import { pluginEvents } from "./progress.mjs";
+import { registerDev } from "./commands/dev.mjs";
+import { registerInit } from "./commands/init.mjs";
+import { registerKeys } from "./commands/keys.mjs";
+import { registerOps } from "./commands/ops.mjs";
+import { registerPlugins } from "./commands/plugins.mjs";
+import { registerUpgrade } from "./commands/upgrade.mjs";
+import { Context, Effect, Layer } from "effect";
+import { buildScoped, buildScopedContext } from "every-plugin";
 import process from "node:process";
-import { createInterface } from "node:readline/promises";
+import * as p from "@clack/prompts";
 
 //#region src/plugin.ts
-const pluginEvents = new EventEmitter();
-let pendingSession = null;
-let pendingStartSummary = null;
-function consumeDevSession() {
-	const data = pendingSession;
-	const summary = pendingStartSummary;
-	pendingSession = null;
-	pendingStartSummary = null;
-	if (!data) return null;
-	return summary ? {
-		...data,
-		summary
-	} : data;
-}
-async function timePhase(timings, name, fn) {
-	pluginEvents.emit("progress", {
-		phase: name,
-		status: "running"
-	});
-	const startedAt = Date.now();
-	try {
-		const result = await fn();
-		timings.push({
-			name,
-			durationMs: Date.now() - startedAt
-		});
-		pluginEvents.emit("progress", {
-			phase: name,
-			status: "done",
-			durationMs: Date.now() - startedAt
-		});
-		return result;
-	} catch (error) {
-		pluginEvents.emit("progress", {
-			phase: name,
-			status: "error",
-			durationMs: Date.now() - startedAt
-		});
-		throw error;
-	}
-}
-const PUBLISH_FUNCTION_NAMES = ["__fastdata_kv"];
-function parseSourceMode(value, defaultValue) {
-	if (value === "local" || value === "remote") return value;
-	return defaultValue;
-}
-function buildConfigResult(bosConfig, full = false) {
-	const packages = bosConfig?.app && typeof bosConfig.app === "object" ? Object.keys(bosConfig.app) : [];
-	const remotes = packages.filter((name) => name !== "host");
-	return {
-		config: bosConfig ?? null,
-		packages,
-		remotes,
-		full
-	};
-}
-function isValidProxyUrl(url) {
-	try {
-		const parsed = new URL(url);
-		return parsed.protocol === "http:" || parsed.protocol === "https:";
-	} catch {
-		return false;
-	}
-}
-function resolveProxyUrl(bosConfig) {
-	if (!bosConfig) return null;
-	const apiConfig = bosConfig.app.api;
-	if (!apiConfig) return null;
-	if (apiConfig.proxy && isValidProxyUrl(apiConfig.proxy)) return apiConfig.proxy;
-	if (apiConfig.production && isValidProxyUrl(apiConfig.production)) return apiConfig.production;
-	return null;
-}
-function sanitizePluginKey(value) {
-	return value.replace(/[^A-Za-z0-9/_-]/g, "-").replace(/\/+/g, "/").split("/").filter(Boolean).map((segment) => segment.replace(/[^A-Za-z0-9_-]/g, "-")).join("/").replace(/^\/+|\/+$/g, "");
-}
-function defaultPluginKey(source) {
-	const normalized = source.replace(/^local:/, "").replace(/\/$/, "");
-	if (source.startsWith("local:")) return sanitizePluginKey(basename(normalized)) || "plugin";
-	try {
-		const url = new URL(source);
-		return sanitizePluginKey(basename(url.pathname) || url.hostname) || "plugin";
-	} catch {
-		return sanitizePluginKey(source) || "plugin";
-	}
-}
-function pluginLocalPath(configDir, attachment) {
-	const ref = getPluginRef(attachment);
-	const source = ref?.development ?? ref?.production;
-	if (!source?.startsWith("local:")) return null;
-	return join(configDir, source.slice(6));
-}
-function listPluginAttachments(config) {
-	return Object.entries(config?.plugins ?? {}).map(([key, attachment]) => {
-		const ref = getPluginRef(attachment);
-		return {
-			key,
-			development: ref?.development,
-			production: ref?.production,
-			localPath: ref?.development?.startsWith("local:") ? ref.development.slice(6) : void 0,
-			source: ref?.development?.startsWith("local:") ? "local" : "remote",
-			integrity: ref?.integrity,
-			version: ref?.version,
-			name: ref?.name
-		};
-	}).sort((a, b) => a.key.localeCompare(b.key));
-}
-async function resolveRemoteConfigChain(accountId, gatewayId, visited) {
-	const selfRef = `bos://${accountId}/${gatewayId}`;
-	if (visited.has(selfRef)) throw new Error(`Circular extends detected: ${selfRef}`);
-	const nextVisited = new Set(visited);
-	nextVisited.add(selfRef);
-	const config = await fetchBosConfigFromFastKv(selfRef);
-	const parentRef = config.extends ? resolveExtendsRef(config.extends, "production") : void 0;
-	let merged;
-	if (!parentRef) merged = config;
-	else {
-		const { accountId: parentAccountId, gatewayId: parentGatewayId } = parseBosUrl(parentRef);
-		merged = mergeBosConfigWithExtends(await resolveRemoteConfigChain(parentAccountId, parentGatewayId, nextVisited), config);
-	}
-	return resolveConfigComposableEntries(BosConfigSchema.parse(merged), process.cwd(), "production");
-}
-async function fetchPublishedConfig(accountId, gatewayId) {
-	try {
-		return await resolveRemoteConfigChain(accountId, gatewayId, /* @__PURE__ */ new Set());
-	} catch (error) {
-		if (error instanceof Error && error.message.startsWith("No config found")) return null;
-		throw error;
-	}
-}
 var plugin_default = createPlugin({
-	variables: z.object({ configPath: z.string().optional() }),
+	variables: z.object({
+		configPath: z.string().optional(),
+		configDir: z.string().optional()
+	}),
 	secrets: z.object({}),
 	contract: bosContract,
-	initialize: (config) => Effect.promise(async () => {
-		const configResult = await loadResolvedConfig({ path: config.variables.configPath });
-		return {
-			bosConfig: configResult?.config ?? null,
-			runtimeConfig: configResult?.runtime ?? null,
-			configDir: getProjectRoot()
-		};
+	initialize: (config, _plugins) => Effect.gen(function* () {
+		const session = yield* Effect.promise(() => openResolution({ path: config.variables.configPath }));
+		const projectEnv = yield* buildScoped(ProjectEnv, ProjectEnvLive);
+		const effectContext = yield* Effect.context();
+		const configDir = config.variables.configDir ?? session?.root ?? process.cwd();
+		const services = yield* buildScopedContext(Layer.mergeAll(makeDatabaseBindings({
+			projectDir: configDir,
+			loadRuntimeConfig: async () => await session?.buildRuntime() ?? null,
+			loadEnv: () => Effect.runPromiseWith(effectContext)(projectEnv.load(configDir))
+		}), makeDrizzleKitLive({
+			projectDir: configDir,
+			onLog: (message) => p.log.info(message)
+		})));
+		return Layer.succeed(BosDepsTag, {
+			session,
+			databaseBindings: Context.get(services, DatabaseBindings),
+			drizzleKit: Context.get(services, DrizzleKit)
+		});
 	}),
-	shutdown: () => Effect.void,
-	createRouter: (deps, builder) => ({
-		config: builder.config.handler(async ({ input }) => {
-			if (input.full) return buildConfigResult(deps.bosConfig, true);
-			return buildConfigResult((await loadLocalConfig({ cwd: deps.configDir }))?.config ?? null, false);
-		}),
-		pluginAdd: builder.pluginAdd.handler(async ({ input }) => {
-			if (!deps.bosConfig) return {
-				status: "error",
-				key: "",
-				error: "No bos.config.json found"
-			};
-			const isBosRef = input.source.startsWith("bos://");
-			const isLocal = input.source.startsWith("local:");
-			const key = sanitizePluginKey(input.as ?? (isBosRef ? input.source.split("/").pop() ?? "plugin" : defaultPluginKey(input.source)));
-			const existing = deps.bosConfig.plugins?.[key];
-			const existingEntry = existing && typeof existing === "object" ? existing : {};
-			const nextPlugins = { ...deps.bosConfig.plugins ?? {} };
-			if (isBosRef) nextPlugins[key] = {
-				...existingEntry,
-				extends: input.source
-			};
-			else if (isLocal) nextPlugins[key] = {
-				...existingEntry,
-				development: input.source,
-				...existingEntry.extends ? {} : {}
-			};
-			else nextPlugins[key] = {
-				...existingEntry,
-				production: input.production ?? input.source
-			};
-			deps.bosConfig = {
-				...deps.bosConfig,
-				plugins: nextPlugins
-			};
-			await saveBosConfig(deps.configDir, deps.bosConfig);
-			await generateCodeArtifacts(deps.configDir, deps.bosConfig);
-			const stored = deps.bosConfig.plugins?.[key];
-			const storedObj = stored && typeof stored === "object" ? stored : {};
-			return {
-				status: "added",
-				key,
-				development: storedObj.development,
-				production: storedObj.production,
-				integrity: storedObj.integrity,
-				version: storedObj.version
-			};
-		}),
-		pluginRemove: builder.pluginRemove.handler(async ({ input }) => {
-			if (!deps.bosConfig) return {
-				status: "error",
-				key: input.key,
-				error: "No bos.config.json found"
-			};
-			if (!deps.bosConfig.plugins?.[input.key]) return {
-				status: "error",
-				key: input.key,
-				error: `Plugin '${input.key}' is not configured`
-			};
-			const nextPlugins = { ...deps.bosConfig.plugins ?? {} };
-			delete nextPlugins[input.key];
-			deps.bosConfig = {
-				...deps.bosConfig,
-				plugins: Object.keys(nextPlugins).length > 0 ? nextPlugins : void 0
-			};
-			await saveBosConfig(deps.configDir, deps.bosConfig);
-			await generateCodeArtifacts(deps.configDir, deps.bosConfig);
-			return {
-				status: "removed",
-				key: input.key
-			};
-		}),
-		pluginList: builder.pluginList.handler(async () => {
-			return {
-				status: "listed",
-				plugins: listPluginAttachments(deps.bosConfig)
-			};
-		}),
-		pluginPublish: builder.pluginPublish.handler(async ({ input }) => {
-			if (!deps.bosConfig) return {
-				status: "error",
-				key: input.key,
-				error: "No bos.config.json found"
-			};
-			const attachment = deps.bosConfig.plugins?.[input.key];
-			if (!attachment) return {
-				status: "error",
-				key: input.key,
-				error: `Plugin '${input.key}' is not configured`
-			};
-			const attachmentRef = getPluginRef(attachment);
-			const localPath = pluginLocalPath(deps.configDir, attachment);
-			if (!localPath) return {
-				status: "error",
-				key: input.key,
-				error: `Plugin '${input.key}' does not have a local development path`
-			};
-			const pkgPath = join(localPath, "package.json");
-			if (!await fileExists(pkgPath)) return {
-				status: "error",
-				key: input.key,
-				error: `Missing package.json at ${localPath}`
-			};
-			const pkgJson = await readJsonFile(pkgPath);
-			const script = pkgJson.scripts?.deploy ? "deploy" : "build";
-			const { stdout, stderr, exitCode } = await run("bun", ["run", script], {
-				cwd: localPath,
-				capture: true
-			});
-			if (exitCode !== 0) {
-				if (stdout.trim()) process.stdout.write(stdout);
-				if (stderr.trim()) process.stderr.write(stderr);
-				return {
-					status: "error",
-					key: input.key,
-					error: `Publish failed with exit code ${exitCode}`
-				};
-			}
-			if (stdout.trim()) process.stdout.write(stdout);
-			if (stderr.trim()) process.stderr.write(stderr);
-			const output = `${stdout}\n${stderr}`;
-			const deployEntry = parseDeployLines(output).find((e) => e.urlField === `plugins.${input.key}.production`);
-			let publishedUrl;
-			let integrity;
-			if (deployEntry) {
-				publishedUrl = deployEntry.url;
-				integrity = deployEntry.integrity;
-			} else {
-				publishedUrl = extractPublishedUrl(output) ?? void 0;
-				integrity = publishedUrl ? await computeSriHashForUrl(publishedUrl) ?? void 0 : void 0;
-			}
-			let manifest = null;
-			if (publishedUrl) manifest = await fetchRemotePluginManifest(publishedUrl);
-			else if (attachmentRef?.production) {
-				manifest = await fetchRemotePluginManifest(attachmentRef.production);
-				if (manifest) publishedUrl = attachmentRef.production;
-			}
-			const version = manifest?.plugin.version ?? pkgJson.version;
-			if (publishedUrl) {
-				const rootConfigPath = join(deps.configDir, "bos.config.json");
-				try {
-					const rootConfig = JSON.parse(readFileSync(rootConfigPath, "utf-8"));
-					if (!rootConfig.plugins || typeof rootConfig.plugins !== "object") rootConfig.plugins = {};
-					const plugins = rootConfig.plugins;
-					if (!plugins[input.key] || typeof plugins[input.key] !== "object") plugins[input.key] = {};
-					const entry = plugins[input.key];
-					entry.production = publishedUrl;
-					if (integrity) entry.integrity = integrity;
-					else delete entry.integrity;
-					writeFileSync(rootConfigPath, `${JSON.stringify(rootConfig, null, 2)}\n`);
-					console.log(`   ✅ Updated bos.config.json: plugins.${input.key}.production`);
-				} catch (err) {
-					console.error(`   ❌ Failed to update bos.config.json:`, err instanceof Error ? err.message : err);
-				}
-				await generateCodeArtifacts(deps.configDir, deps.bosConfig);
-			}
-			return {
-				status: "published",
-				key: input.key,
-				path: localPath,
-				script,
-				production: publishedUrl ?? attachmentRef?.production,
-				integrity: integrity ?? void 0,
-				version: version ?? void 0
-			};
-		}),
-		dev: builder.dev.handler(async ({ input }) => {
-			const devTimings = [];
-			ensureEnvFile(deps.configDir);
-			loadProjectEnv(deps.configDir);
-			const localPackages = detectLocalPackages(deps.bosConfig ?? void 0, deps.runtimeConfig ?? void 0);
-			const hostSource = localPackages.includes("host") ? parseSourceMode(input.host, "local") : "remote";
-			const uiSource = localPackages.includes("ui") ? parseSourceMode(input.ui, "local") : "remote";
-			const apiSource = localPackages.includes("api") ? parseSourceMode(input.api, "local") : "remote";
-			const authSource = localPackages.includes("auth") ? parseSourceMode(input.auth, "local") : "remote";
-			const ssr = input.ssr ?? false;
-			const proxy = input.proxy ?? false;
-			const sharedSync = await timePhase(devTimings, "shared deps", () => syncResolvedSharedDeps({
-				configDir: deps.configDir,
-				hostMode: hostSource,
-				bosConfig: deps.bosConfig ?? void 0,
-				extendsChain: []
-			}));
-			let configMayHaveChanged = false;
-			if (sharedSync.catalogChanged) {
-				await timePhase(devTimings, "install", () => run("bun", ["install"], { cwd: deps.configDir }));
-				configMayHaveChanged = true;
-			}
-			const shouldBuildPlugin = apiSource === "local" && !proxy || localPackages.some((pkg) => pkg.startsWith("plugin:"));
-			await timePhase(devTimings, "build", async () => {
-				const buildTasks = [buildEverythingDevQuietly(deps.configDir)];
-				if (shouldBuildPlugin) buildTasks.push(buildEveryPluginQuietly(deps.configDir));
-				await Promise.all(buildTasks);
-			});
-			let devExtendsChain;
-			if (configMayHaveChanged || input.remotePlugins !== void 0) {
-				const refreshed = await timePhase(devTimings, "resolve config", () => loadResolvedConfig({
-					cwd: deps.configDir,
-					remotePlugins: input.remotePlugins
-				}));
-				deps.bosConfig = refreshed?.config ?? deps.bosConfig;
-				deps.runtimeConfig = refreshed?.runtime ?? deps.runtimeConfig;
-				devExtendsChain = refreshed?.source.extended;
-			}
-			if (!deps.bosConfig) return {
-				status: "error",
-				description: "No bos.config.json found",
-				processes: [],
-				timings: devTimings
-			};
-			if (proxy && !resolveProxyUrl(deps.bosConfig)) return {
-				status: "error",
-				description: "No valid proxy URL configured in bos.config.json",
-				processes: [],
-				timings: devTimings
-			};
-			suppressWarnings();
-			const developmentRuntime = await buildRuntimeConfig(deps.bosConfig, {
-				uiSource,
-				apiSource,
-				authSource,
-				hostSource,
-				env: "development",
-				plugins: deps.runtimeConfig?.plugins
-			});
-			drainConfigWarnings();
-			resumeWarnings();
-			const plan = await timePhase(devTimings, "ports", () => Effect.runPromise(planInfra({
-				configDir: deps.configDir,
-				bosConfig: developmentRuntime,
-				cli: {
-					port: input.port,
-					apiPort: input.apiPort,
-					authPort: input.authPort,
-					uiPort: input.uiPort,
-					pluginPortStart: input.pluginPortStart,
-					ssr,
-					proxy,
-					hostSource,
-					uiSource,
-					apiSource,
-					authSource,
-					interactive: input.interactive
-				}
-			}).pipe(Effect.provide(PortAllocatorLive))));
-			const mergedEnv = { ...plan.envGenerated };
-			for (const [k, v] of Object.entries(process.env)) if (v != null && !(k in plan.envGenerated)) mergedEnv[k] = v;
-			const preflightFailures = await Effect.runPromise(preflightLocalInfra(plan.envGenerated, mergedEnv));
-			if (preflightFailures.length > 0) return {
-				status: "error",
-				description: `Infra preflight failed: ${preflightFailures.map((f) => f.error).join("; ")}`,
-				processes: [],
-				timings: devTimings
-			};
-			const services = buildServiceDescriptorMapFromPlan(plan, {
-				ssr,
-				proxy
-			});
-			writeGeneratedInfra(deps.configDir, plan.runtimeConfig);
-			ensureEnvFile(deps.configDir);
-			loadProjectEnv(deps.configDir);
-			const packages = [...plan.serviceDescriptors.keys()];
-			if (process.env.DEBUG === "true" || process.env.DEBUG === "1") console.error("[DEBUG dev] services keys:", packages.join(", "));
-			if (services.get("api")?.proxy) {
-				const proxyUrl = resolveProxyUrl(deps.bosConfig);
-				if (proxyUrl) plan.orchestrator.env.API_PROXY = proxyUrl;
-			}
-			pendingSession = {
-				orchestrator: plan.orchestrator,
-				services,
-				runtimeConfig: plan.runtimeConfig
-			};
-			await timePhase(devTimings, "generate artifacts", () => generateCodeArtifacts(deps.configDir, deps.bosConfig, {
-				env: "development",
-				extendsChain: devExtendsChain,
-				runtimeConfig: plan.runtimeConfig
-			}));
-			return {
-				status: "started",
-				description: buildDescription(services) || plan.description,
-				processes: packages,
-				timings: devTimings
-			};
-		}),
-		start: builder.start.handler(async ({ input }) => {
-			ensureEnvFile(deps.configDir);
-			loadProjectEnv(deps.configDir);
-			pluginEvents.emit("progress", {
-				phase: "config",
-				status: "running"
-			});
-			const bosEnv = input.env ?? (process.env.BOS_ENV === "staging" ? "staging" : "production");
-			const account = input.account ?? process.env.BOS_ACCOUNT;
-			const domain = input.domain ?? process.env.BOS_GATEWAY;
-			let config = null;
-			let remoteConfig = null;
-			if (account && domain) try {
-				remoteConfig = await fetchPublishedConfig(account, domain);
-				if (remoteConfig) config = remoteConfig;
-				else return {
-					status: "error",
-					url: "",
-					error: `No config found at bos://${account}/${domain}. Verify the account and gateway are correct and the config has been published.\nExpected URL: ${buildRegistryConfigUrl(account, domain)}`
-				};
-			} catch (error) {
-				return {
-					status: "error",
-					url: "",
-					error: `Failed to fetch config for bos://${account}/${domain}: ${error instanceof Error ? error.message : "Unknown error"}\nExpected URL: ${buildRegistryConfigUrl(account, domain)}`
-				};
-			}
-			else config = deps.bosConfig;
-			if (!config) return {
-				status: "error",
-				url: "",
-				error: "No configuration found. Provide --account and --gateway flags, or create a local bos.config.json."
-			};
-			if (account) config = {
-				...config,
-				account
-			};
-			if (domain) config = {
-				...config,
-				domain
-			};
-			const port = input.port ?? getHostDevelopmentPort(config.app.host.development);
-			const isStaging = bosEnv === "staging";
-			const runtimePlugins = await buildRuntimePluginsForConfig(config, deps.configDir, "production");
-			suppressWarnings();
-			const runtimeConfig = await buildRuntimeConfig(config, {
-				uiSource: "remote",
-				apiSource: "remote",
-				authSource: "remote",
-				hostSource: "remote",
-				env: "production",
-				plugins: runtimePlugins
-			});
-			drainConfigWarnings();
-			resumeWarnings();
-			if (isStaging && config.staging?.domain) runtimeConfig.domain = config.staging.domain;
-			if (isStaging) runtimeConfig.env = "staging";
-			syncGeneratedInfra(deps.configDir, runtimeConfig);
-			ensureEnvFile(deps.configDir);
-			loadProjectEnv(deps.configDir);
-			pluginEvents.emit("progress", {
-				phase: "generate artifacts",
-				status: "running"
-			});
-			await generateCodeArtifacts(deps.configDir, config, {
-				env: "production",
-				runtimeConfig
-			});
-			pluginEvents.emit("progress", {
-				phase: "generate artifacts",
-				status: "done"
-			});
-			const productionEnv = {};
-			const warnings = [];
-			if (!process.env.CORS_ORIGIN && config.domain) {
-				const defaultOrigin = `https://${isStaging ? config.staging?.domain ?? config.domain : config.domain}`;
-				productionEnv.CORS_ORIGIN = defaultOrigin;
-				warnings.push(`CORS_ORIGIN defaulting to ${defaultOrigin}`);
-			}
-			const requiredSecrets = /* @__PURE__ */ new Set();
-			const missingSecrets = [];
-			if (runtimeConfig.host.secrets) for (const s of runtimeConfig.host.secrets) requiredSecrets.add(s);
-			if (runtimeConfig.auth?.secrets) for (const s of runtimeConfig.auth.secrets) requiredSecrets.add(s);
-			if (runtimeConfig.api?.secrets) for (const s of runtimeConfig.api.secrets) requiredSecrets.add(s);
-			for (const plugin of Object.values(runtimeConfig.plugins ?? {})) if (plugin.secrets) for (const s of plugin.secrets) requiredSecrets.add(s);
-			for (const secret of requiredSecrets) {
-				const value = process.env[secret];
-				if (!value || value.length === 0) missingSecrets.push(secret);
-			}
-			if (missingSecrets.length > 0) warnings.push(`Missing ${missingSecrets.length} secret(s): ${missingSecrets.join(", ")}`);
-			const stagingEnvVars = isStaging ? { BOS_GATEWAY: config.staging?.domain ?? config.domain ?? "" } : {};
-			const plan = await Effect.runPromise(planInfra({
-				configDir: deps.configDir,
-				bosConfig: runtimeConfig,
-				cli: {
-					port: input.port,
-					ssr: false,
-					proxy: false,
-					hostSource: "remote",
-					uiSource: "remote",
-					apiSource: "remote",
-					authSource: "remote",
-					interactive: input.interactive
-				}
-			}).pipe(Effect.provide(PortAllocatorLive)));
-			const services = buildServiceDescriptorMap(plan.runtimeConfig);
-			const summary = {
-				configSource: remoteConfig ? `bos://${account}/${domain}` : findConfigPath() ?? "bos.config.json",
-				configSourceHttp: remoteConfig && account && domain ? buildRegistryConfigUrl(account, domain) : void 0,
-				account: config.account,
-				domain: config.domain ?? void 0,
-				modules: {
-					host: plan.runtimeConfig.host.remoteUrl ?? plan.runtimeConfig.host.url ?? "local",
-					ui: plan.runtimeConfig.ui.url ?? "local",
-					api: plan.runtimeConfig.api.url ?? "local",
-					auth: plan.runtimeConfig.auth?.url ?? void 0
-				},
-				warnings
-			};
-			pendingSession = {
-				orchestrator: {
-					packages: ["host"],
-					env: {
-						NODE_ENV: "production",
-						...productionEnv,
-						...stagingEnvVars,
-						...plan.launch.env
-					},
-					description: `${isStaging ? "Staging" : "Production"} Mode (${config.account})`,
-					port: plan.resolvedPorts.host ?? port,
-					interactive: input.interactive,
-					noLogs: true
-				},
-				services,
-				runtimeConfig: plan.runtimeConfig
-			};
-			pendingStartSummary = summary;
-			pluginEvents.emit("progress", {
-				phase: "config",
-				status: "done"
-			});
-			return {
-				status: "running",
-				url: plan.launch.hostUrl ?? `http://localhost:${plan.resolvedPorts.host ?? port}`
-			};
-		}),
-		build: builder.build.handler(async ({ input }) => {
-			if (!deps.bosConfig) return {
-				status: "error",
-				built: [],
-				skipped: []
-			};
-			const buildEnv = input.deploy ? "production" : "development";
-			const targets = selectWorkspaceTargets(input.packages, deps.bosConfig);
-			if (targets.length === 0) return {
-				status: "error",
-				built: [],
-				skipped: []
-			};
-			suppressWarnings();
-			const runtimeConfig = await buildRuntimeConfig(deps.bosConfig, {
-				uiSource: deps.bosConfig.app.ui?.development ? "local" : "remote",
-				apiSource: deps.bosConfig.app.api?.development ? "local" : "remote",
-				authSource: deps.bosConfig.app.auth?.development ? "local" : "remote",
-				hostSource: deps.bosConfig.app.host?.development ? "local" : "remote",
-				env: buildEnv,
-				plugins: deps.runtimeConfig?.plugins
-			});
-			drainConfigWarnings();
-			resumeWarnings();
-			await generateCodeArtifacts(deps.configDir, deps.bosConfig, {
-				env: buildEnv,
-				runtimeConfig
-			});
-			const { built, skipped } = await buildWorkspaceTargets({
-				configDir: deps.configDir,
-				bosConfig: deps.bosConfig,
-				runtimeConfig,
-				targets,
-				deploy: input.deploy
-			});
-			if (built.length === 0) return {
-				status: "error",
-				built: [],
-				skipped
-			};
-			return {
-				status: "success",
-				built,
-				skipped,
-				deployed: input.deploy
-			};
-		}),
-		publish: builder.publish.handler(async ({ input }) => {
-			if (!deps.bosConfig) return {
-				status: "error",
-				registryUrl: "",
-				error: "No bos.config.json found"
-			};
-			const result = await publishToFastKv({
-				bosConfig: deps.bosConfig,
-				runtimeConfig: deps.runtimeConfig,
-				configDir: deps.configDir,
-				env: input.env,
-				build: input.deploy,
-				dryRun: input.dryRun,
-				verbose: input.verbose,
-				packages: input.packages,
-				network: input.network,
-				privateKey: input.privateKey
-			});
-			if (result.publishConfig) {
-				const refreshed = await loadResolvedConfig({ cwd: deps.configDir });
-				if (refreshed?.config) {
-					deps.bosConfig = refreshed.config;
-					deps.runtimeConfig = refreshed.runtime;
-				}
-			}
-			return {
-				status: result.status,
-				registryUrl: result.registryUrl,
-				txHash: result.txHash,
-				error: result.error,
-				built: result.built,
-				skipped: result.skipped,
-				deployResults: result.deployResults
-			};
-		}),
-		deploy: builder.deploy.handler(async ({ input }) => {
-			if (!deps.bosConfig) return {
-				status: "error",
-				registryUrl: "",
-				redeployed: false,
-				error: "No bos.config.json found"
-			};
-			const result = await publishToFastKv({
-				bosConfig: deps.bosConfig,
-				runtimeConfig: deps.runtimeConfig,
-				configDir: deps.configDir,
-				env: input.env,
-				build: input.build,
-				dryRun: input.dryRun,
-				verbose: input.verbose,
-				packages: input.packages,
-				network: input.network,
-				privateKey: input.privateKey
-			});
-			if (result.status === "error") return {
-				status: "error",
-				registryUrl: result.registryUrl,
-				txHash: result.txHash,
-				built: result.built,
-				skipped: result.skipped,
-				redeployed: false,
-				error: result.error,
-				deployResults: result.deployResults
-			};
-			if (result.status === "dry-run") return {
-				status: "dry-run",
-				registryUrl: result.registryUrl,
-				built: result.built,
-				skipped: result.skipped,
-				redeployed: false
-			};
-			if (result.publishConfig) {
-				const refreshed = await loadResolvedConfig({ cwd: deps.configDir });
-				if (refreshed?.config) {
-					deps.bosConfig = refreshed.config;
-					deps.runtimeConfig = refreshed.runtime;
-				}
-			}
-			let redeployed = false;
-			let service;
-			if (process.env.RAILWAY_TOKEN) {
-				const railwayService = input.service ?? deps.bosConfig.ci?.railway?.service;
-				if (!railwayService) {
-					console.log();
-					console.log(colors.yellow("  Railway redeploy skipped: ci.railway.service is not configured in bos.config.json"));
-					return {
-						status: "published",
-						registryUrl: result.registryUrl,
-						txHash: result.txHash,
-						built: result.built,
-						skipped: result.skipped,
-						redeployed: false,
-						deployResults: result.deployResults,
-						error: "Config published but Railway redeploy failed: ci.railway.service is not configured in bos.config.json"
-					};
-				}
-				service = railwayService;
-				console.log();
-				console.log(`  Redeploying Railway service ${colors.cyan(railwayService)}...`);
-				try {
-					const railResult = await run("railway", [
-						"redeploy",
-						"--service",
-						railwayService,
-						"--yes"
-					], { capture: true });
-					if (railResult?.stdout) {
-						for (const line of railResult.stdout.split("\n")) if (line.trim()) console.log(`  ${colors.dim(line.trim())}`);
-					}
-					redeployed = true;
-					console.log(colors.green(`  Railway redeploy complete`));
-				} catch (error) {
-					const message = error instanceof Error ? error.message : String(error);
-					const railError = message.includes("not found") || message.includes("ENOENT") ? "Railway CLI not found. Install it: npm i -g @railway/cli" : `Railway redeploy failed: ${message}`;
-					console.log(colors.yellow(`  ${railError}`));
-					return {
-						status: "published",
-						registryUrl: result.registryUrl,
-						txHash: result.txHash,
-						built: result.built,
-						skipped: result.skipped,
-						redeployed: false,
-						service,
-						deployResults: result.deployResults,
-						error: `Config published but ${railError}`
-					};
-				}
-			} else {
-				console.log();
-				console.log(colors.yellow("  Railway redeploy skipped (RAILWAY_TOKEN not set)"));
-			}
-			return {
-				status: "deployed",
-				registryUrl: result.registryUrl,
-				txHash: result.txHash,
-				built: result.built,
-				skipped: result.skipped,
-				redeployed,
-				service,
-				deployResults: result.deployResults
-			};
-		}),
-		keyPublish: builder.keyPublish.handler(async ({ input }) => {
-			if (!deps.bosConfig) return {
-				status: "error",
-				account: "",
-				network: "mainnet",
-				contract: "",
-				allowance: input.allowance,
-				functionNames: PUBLISH_FUNCTION_NAMES,
-				error: "No bos.config.json found"
-			};
-			const account = deps.bosConfig.account;
-			const network = getNetworkIdForAccount(account);
-			const contract = getRegistryNamespaceForAccount(account);
-			try {
-				await Effect.runPromise(ensureNearCli);
-				const oldKeys = await listPublishKeys({
-					account,
-					contract,
-					network
-				});
-				const keyPair = await addFunctionCallAccessKey({
-					account,
-					contract,
-					allowance: input.allowance,
-					functionNames: PUBLISH_FUNCTION_NAMES,
-					network
-				});
-				if (oldKeys.length > 0) {
-					console.log();
-					console.log(`  Found ${oldKeys.length} existing publish key${oldKeys.length > 1 ? "s" : ""}:`);
-					for (const k of oldKeys) console.log(`    ${colors.dim(k)}`);
-					const rl = createInterface({
-						input: process.stdin,
-						output: process.stdout
-					});
-					const answer = await rl.question("  Remove old key(s)? [Y/n] ");
-					rl.close();
-					if (answer.toLowerCase() !== "n" && answer.toLowerCase() !== "no") try {
-						await deleteAccessKeys(account, oldKeys, network);
-						console.log(`  ${colors.green("✓")} Removed ${oldKeys.length} old key${oldKeys.length > 1 ? "s" : ""}`);
-					} catch {
-						console.log(`  ${colors.yellow("⚠")} Failed to remove old key${oldKeys.length > 1 ? "s" : ""} (new key still active)`);
-					}
-					else console.log(`  ${colors.dim("Old key(s) retained.")}`);
-				}
-				return {
-					status: "published",
-					account,
-					network,
-					contract,
-					allowance: input.allowance,
-					functionNames: PUBLISH_FUNCTION_NAMES,
-					publicKey: keyPair.publicKey,
-					privateKey: keyPair.privateKey
-				};
-			} catch (error) {
-				return {
-					status: "error",
-					account,
-					network,
-					contract,
-					allowance: input.allowance,
-					functionNames: PUBLISH_FUNCTION_NAMES,
-					error: error instanceof Error ? error.message : "Unknown error"
-				};
-			}
-		}),
-		init: builder.init.handler(async ({ input }) => {
-			try {
-				const timings = [];
-				let extendsAccount = "";
-				let extendsGateway = "";
-				let directory = input.directory;
-				const account = input.account;
-				const domain = input.domain;
-				let overrides = input.overrides;
-				let plugins = input.plugins;
-				if (input.extends) {
-					const match = (input.extends.startsWith("bos://") ? input.extends : `bos://${input.extends}`).match(/^bos:\/\/([^/]+)\/(.+)$/);
-					if (match) {
-						extendsAccount = match[1];
-						extendsGateway = match[2];
-					}
-				}
-				extendsAccount = extendsAccount || "dev.everything.near";
-				extendsGateway = extendsGateway || "everything.dev";
-				let parentPluginKeys = [];
-				let parentConfig = null;
-				try {
-					parentConfig = await timePhase(timings, "parent config", () => fetchParentConfig(extendsAccount, extendsGateway));
-					if (parentConfig?.plugins && typeof parentConfig.plugins === "object") parentPluginKeys = Object.keys(parentConfig.plugins);
-				} catch (e) {
-					console.warn(`[init] Failed to fetch parent config from ${extendsAccount}/${extendsGateway}: ${e instanceof Error ? e.message : e}`);
-				}
-				overrides = overrides?.length ? overrides : ["ui", "api"];
-				if (overrides.includes("plugins") && plugins === void 0) plugins = parentPluginKeys;
-				plugins = plugins ?? [];
-				const pluginDirMap = {};
-				if (parentConfig?.plugins) for (const plugin of plugins) {
-					const entry = parentConfig.plugins?.[plugin];
-					if (entry && typeof entry === "object") {
-						const dev = entry.development;
-						if (typeof dev === "string") {
-							const match = dev.match(/^local:plugins\/(.+)$/);
-							if (match?.[1] && match[1] !== plugin) pluginDirMap[plugin] = match[1];
-						}
-					}
-				}
-				directory = directory || domain || extendsGateway;
-				const targetDir = resolve(directory);
-				const extendsRef = `bos://${extendsAccount}/${extendsGateway}`;
-				const repository = await detectGitRemoteUrl(process.cwd()).catch(() => void 0) ?? parentConfig?.repository;
-				if (!parentConfig) try {
-					parentConfig = await timePhase(timings, "parent config", () => fetchParentConfig(extendsAccount, extendsGateway));
-				} catch {
-					return {
-						status: "error",
-						directory,
-						extendsRef,
-						account,
-						domain,
-						extends: extendsRef,
-						plugins,
-						overrides,
-						filesCopied: 0,
-						timings,
-						error: `No config found at ${extendsRef} — are you sure this is the right parent?`
-					};
-				}
-				const { sourceDir, parentConfig: resolvedParentConfig, cleanup } = await timePhase(timings, "template source", () => resolveSourceDir({
-					extendsAccount,
-					extendsGateway,
-					source: input.source
-				}));
-				parentConfig = resolvedParentConfig;
-				const isMinimalScaffold = sourceDir === "";
-				try {
-					let filesCopied;
-					if (isMinimalScaffold) {
-						filesCopied = await timePhase(timings, "scaffold project", () => scaffoldMinimalProject(targetDir, parentConfig, {
-							extendsAccount,
-							extendsGateway,
-							account: account || extendsAccount,
-							domain,
-							plugins,
-							overrides,
-							repository,
-							title: parentConfig?.title,
-							description: parentConfig?.description
-						}));
-						await timePhase(timings, "personalize config", () => personalizeConfig(targetDir, {
-							extendsAccount,
-							extendsGateway,
-							account: account || extendsAccount,
-							domain: domain || extendsGateway,
-							plugins,
-							overrides,
-							mode: "init",
-							repository,
-							title: parentConfig?.title,
-							description: parentConfig?.description,
-							testnet: parentConfig?.testnet,
-							staging: parentConfig?.staging
-						}));
-					} else {
-						const patterns = buildInitPatterns(overrides, plugins, pluginDirMap);
-						const routeExclusions = overrides.includes("ui") ? buildPluginRouteExclusions(parentConfig, plugins) : [];
-						filesCopied = await timePhase(timings, "copy files", () => copyFilteredFiles(sourceDir, targetDir, patterns, {
-							overrides,
-							plugins,
-							ignore: routeExclusions
-						}));
-						await timePhase(timings, "personalize config", () => personalizeConfig(targetDir, {
-							extendsAccount,
-							extendsGateway,
-							account: account || extendsAccount,
-							domain: domain || extendsGateway,
-							plugins,
-							overrides,
-							workspaceOpts: { sourceDir },
-							repository,
-							title: parentConfig?.title,
-							description: parentConfig?.description,
-							testnet: parentConfig?.testnet,
-							staging: parentConfig?.staging
-						}));
-						await timePhase(timings, "write snapshot", () => writeInitSnapshot(targetDir, extendsAccount, extendsGateway, sourceDir, patterns, {
-							overrides,
-							plugins,
-							ignore: routeExclusions
-						}));
-						await timePhase(timings, "personalize agents", () => personalizeAgentsMd(targetDir, {
-							overrides,
-							plugins
-						}));
-					}
-					await timePhase(timings, "sync shared deps", () => syncResolvedSharedDeps({
-						configDir: targetDir,
-						hostMode: "local"
-					}));
-					const lockfilePath = join(targetDir, "bun.lock");
-					stripOrphanedWorkspacesFromLockfile(lockfilePath, computeAllowedWorkspaces(overrides, plugins));
-					removeInitLockfile(lockfilePath);
-					const initConfig = await timePhase(timings, "resolve config", () => loadResolvedConfig({ cwd: targetDir }));
-					if (initConfig?.runtime) await timePhase(timings, "generate env/docker", async () => {
-						writeGeneratedInfra(targetDir, initConfig.runtime);
-					});
-					await timePhase(timings, "create env file", async () => {
-						ensureEnvFile(targetDir);
-					});
-					if (!input.noInstall) {
-						await timePhase(timings, "install dependencies", () => runBunInstall(targetDir));
-						await timePhase(timings, "generate types", () => runTypesGen(targetDir));
-						await timePhase(timings, "generate migrations", () => generateDatabaseMigrations(targetDir));
-					}
-					if (input.noInstall && initConfig?.config) await timePhase(timings, "generate code artifacts", () => generateCodeArtifacts(targetDir, initConfig.config));
-					return {
-						status: "initialized",
-						directory,
-						extendsRef,
-						account,
-						domain,
-						extends: extendsRef,
-						plugins,
-						overrides,
-						filesCopied,
-						timings,
-						targetDir
-					};
-				} finally {
-					await cleanup();
-				}
-			} catch (error) {
-				const extendsRef = input.extends ? input.extends.startsWith("bos://") ? input.extends : `bos://${input.extends}` : "bos://dev.everything.near/everything.dev";
-				return {
-					status: "error",
-					directory: input.directory ?? "",
-					extendsRef,
-					account: input.account,
-					domain: input.domain,
-					extends: extendsRef,
-					plugins: input.plugins ?? [],
-					overrides: input.overrides,
-					filesCopied: 0,
-					timings: [],
-					error: error instanceof Error ? error.message : "Unknown error"
-				};
-			}
-		}),
-		sync: builder.sync.handler(async ({ input }) => {
-			try {
-				const configPath = findConfigPath();
-				if (!configPath) return {
-					status: "error",
-					updated: [],
-					skipped: [],
-					added: [],
-					error: "No bos.config.json found in current directory"
-				};
-				const projectDir = resolve(dirname(configPath));
-				const result = await syncTemplate(projectDir, input);
-				if (result.status === "synced" || result.status === "dry-run") {
-					const syncedConfig = await loadResolvedConfig({ cwd: projectDir });
-					if (syncedConfig?.config) await generateCodeArtifacts(projectDir, syncedConfig.config);
-				}
-				return result;
-			} catch (error) {
-				return {
-					status: "error",
-					updated: [],
-					skipped: [],
-					added: [],
-					error: error instanceof Error ? error.message : "Unknown error"
-				};
-			}
-		}),
-		upgrade: builder.upgrade.handler(async ({ input }) => {
-			try {
-				const configPath = findConfigPath();
-				if (!configPath) return {
-					status: "error",
-					packages: [],
-					error: "No bos.config.json found in current directory"
-				};
-				return await upgradeTemplate(resolve(dirname(configPath)), input);
-			} catch (error) {
-				return {
-					status: "error",
-					packages: [],
-					error: error instanceof Error ? error.message : "Unknown error"
-				};
-			}
-		}),
-		typesGen: builder.typesGen.handler(async ({ input }) => {
-			try {
-				const configPath = findConfigPath();
-				if (!configPath) return {
-					status: "error",
-					generated: [],
-					fetched: [],
-					skipped: [],
-					failed: [],
-					error: "No bos.config.json found in current directory"
-				};
-				const projectDir = resolve(dirname(configPath));
-				const refreshed = await loadResolvedConfig({
-					cwd: projectDir,
-					env: input.env ?? (process.env.NODE_ENV === "production" ? "production" : "development"),
-					remotePlugins: input.remotePlugins
-				});
-				if (!refreshed) return {
-					status: "error",
-					generated: [],
-					fetched: [],
-					skipped: [],
-					failed: [],
-					error: "Failed to load bos.config.json"
-				};
-				if (input.dryRun) {
-					const pluginEntries = Object.entries(refreshed.runtime.plugins ?? {});
-					const fetched = [];
-					const skipped = [];
-					const hasLocalApiWorkspace = existsSync(join(projectDir, "api", "src"));
-					if (refreshed.runtime.api.source !== "local") fetched.push(`api remote (${refreshed.runtime.api.url})`);
-					else {
-						const path = refreshed.runtime.api.localPath ? ` (${relative(projectDir, refreshed.runtime.api.localPath)})` : "";
-						skipped.push(`api local${path}`);
-					}
-					if (refreshed.runtime.auth) if (refreshed.runtime.auth.source !== "local") fetched.push(`auth remote (${refreshed.runtime.auth.url})`);
-					else {
-						const path = refreshed.runtime.auth.localPath ? ` (${relative(projectDir, refreshed.runtime.auth.localPath)})` : "";
-						skipped.push(`auth local${path}`);
-					}
-					for (const [key, plugin] of pluginEntries) if (plugin.url && plugin.source !== "local") fetched.push(`${key} remote (${plugin.url})`);
-					else if (plugin.localPath) skipped.push(`${key} local (${relative(projectDir, plugin.localPath)})`);
-					else skipped.push(`${key} no URL resolved`);
-					const generated = ["ui/src/lib/api-types.gen.ts", "ui/src/lib/auth-types.gen.ts"];
-					if (hasLocalApiWorkspace) generated.push("api/src/lib/plugins-types.gen.ts", "api/src/lib/auth-types.gen.ts");
-					if (existsSync(join(projectDir, "host", "src"))) generated.push("host/src/lib/auth-types.gen.ts");
-					for (const [key, _plugin] of pluginEntries) if (existsSync(join(projectDir, "plugins", key, "src", "lib", "plugins-client.gen.ts"))) generated.push(`plugins/${key}/src/lib/plugins-client.gen.ts`);
-					return {
-						status: "success",
-						generated,
-						fetched,
-						skipped,
-						failed: []
-					};
-				}
-				const artifacts = await generateCodeArtifacts(projectDir, refreshed.config, { runtimeConfig: refreshed.runtime });
-				const hasLocalApiWorkspace = existsSync(join(projectDir, "api", "src"));
-				const generated = ["ui/src/lib/api-types.gen.ts"];
-				if (hasLocalApiWorkspace) generated.push("api/src/lib/plugins-types.gen.ts", "api/src/lib/auth-types.gen.ts");
-				if (refreshed.runtime.auth && (refreshed.runtime.auth.source !== "local" || refreshed.runtime.auth.localPath)) generated.push("ui/src/lib/auth-types.gen.ts");
-				if (existsSync(join(projectDir, "host", "src"))) generated.push("host/src/lib/auth-types.gen.ts");
-				for (const [key, _plugin] of Object.entries(refreshed.runtime.plugins ?? {})) if (existsSync(join(projectDir, "plugins", key, "src", "lib", "plugins-client.gen.ts"))) generated.push(`plugins/${key}/src/lib/plugins-client.gen.ts`);
-				const contractStatus = artifacts?.contractStatus ?? [];
-				const fetched = [];
-				const skipped = [];
-				const failed = [];
-				for (const entry of contractStatus) if (entry.source === "remote") fetched.push(entry.url ? `${entry.key} remote (${entry.url})` : entry.key);
-				else if (entry.source === "local") {
-					const path = entry.localPath ? ` (${relative(projectDir, entry.localPath)})` : "";
-					skipped.push(`${entry.key} local${path}`);
-				} else if (entry.source === "skipped") skipped.push(`${entry.key} no URL resolved`);
-				else if (entry.source === "failed") {
-					const detail = entry.error ? `: ${entry.error}` : "";
-					failed.push(`${entry.key}${detail}`);
-				}
-				return {
-					status: "success",
-					generated,
-					fetched,
-					skipped,
-					failed
-				};
-			} catch (error) {
-				return {
-					status: "error",
-					generated: [],
-					fetched: [],
-					skipped: [],
-					failed: [],
-					error: error instanceof Error ? error.message : "Unknown error"
-				};
-			}
-		}),
-		dbStudio: builder.dbStudio.handler(async ({ input }) => {
-			try {
-				const configPath = findConfigPath();
-				if (!configPath) return {
-					status: "error",
-					plugin: input.plugin,
-					source: "remote",
-					section: "",
-					error: "No bos.config.json found in current directory"
-				};
-				const projectDir = resolve(dirname(configPath));
-				loadProjectEnv(projectDir);
-				const refreshed = await loadResolvedConfig({ cwd: projectDir });
-				if (!refreshed) return {
-					status: "error",
-					plugin: input.plugin,
-					source: "remote",
-					section: "",
-					error: "Failed to load bos.config.json"
-				};
-				const { resolvePluginDbInfo } = await import("./cli/db-studio.mjs");
-				const info = resolvePluginDbInfo(input.plugin, refreshed.runtime, projectDir);
-				return {
-					status: "success",
-					plugin: info.key,
-					source: info.source,
-					section: info.section,
-					databaseSecret: info.databaseSecret,
-					databaseUrl: info.databaseUrl,
-					workspaceDir: info.workspaceDir
-				};
-			} catch (error) {
-				return {
-					status: "error",
-					plugin: input.plugin,
-					source: "remote",
-					section: "",
-					error: error instanceof Error ? error.message : "Unknown error"
-				};
-			}
-		}),
-		dbDoctor: builder.dbDoctor.handler(async ({ input }) => {
-			try {
-				const configPath = findConfigPath();
-				if (!configPath) return {
-					status: "error",
-					plugin: input.plugin,
-					slug: "",
-					journalTable: "",
-					journalSchema: "",
-					diagnosis: "error",
-					localMigrationCount: 0,
-					appliedHashCount: 0,
-					expectedTables: [],
-					missingTables: [],
-					error: "No bos.config.json"
-				};
-				const projectDir = resolve(dirname(configPath));
-				loadProjectEnv(projectDir);
-				const refreshed = await loadResolvedConfig({ cwd: projectDir });
-				if (!refreshed) return {
-					status: "error",
-					plugin: input.plugin,
-					slug: "",
-					journalTable: "",
-					journalSchema: "",
-					diagnosis: "error",
-					localMigrationCount: 0,
-					appliedHashCount: 0,
-					expectedTables: [],
-					missingTables: [],
-					error: "Failed to load config"
-				};
-				const { resolvePluginDbInfo } = await import("./cli/db-studio.mjs");
-				const info = resolvePluginDbInfo(input.plugin, refreshed.runtime, projectDir);
-				const { diagnosePlugin } = await import("./cli/db-doctor.mjs");
-				return {
-					status: "success",
-					...await diagnosePlugin(info)
-				};
-			} catch (error) {
-				return {
-					status: "error",
-					plugin: input.plugin,
-					slug: "",
-					journalTable: "",
-					journalSchema: "",
-					diagnosis: "error",
-					localMigrationCount: 0,
-					appliedHashCount: 0,
-					expectedTables: [],
-					missingTables: [],
-					error: error instanceof Error ? error.message : "Unknown error"
-				};
-			}
-		}),
-		dbRepair: builder.dbRepair.handler(async ({ input }) => {
-			try {
-				const configPath = findConfigPath();
-				if (!configPath) return {
-					status: "error",
-					message: "No bos.config.json found",
-					diagnosis: null,
-					error: "No config"
-				};
-				const projectDir = resolve(dirname(configPath));
-				loadProjectEnv(projectDir);
-				const refreshed = await loadResolvedConfig({ cwd: projectDir });
-				if (!refreshed) return {
-					status: "error",
-					message: "Failed to load config",
-					diagnosis: null,
-					error: "Config load failed"
-				};
-				const { resolvePluginDbInfo } = await import("./cli/db-studio.mjs");
-				const info = resolvePluginDbInfo(input.plugin, refreshed.runtime, projectDir);
-				const { repairPlugin } = await import("./cli/db-repair.mjs");
-				const result = await repairPlugin(info, input.mode ?? "history-reset");
-				return {
-					...result,
-					error: result.status === "error" ? result.message : void 0
-				};
-			} catch (error) {
-				return {
-					status: "error",
-					message: error instanceof Error ? error.message : "Unknown error",
-					diagnosis: null,
-					error: error instanceof Error ? error.message : "Unknown error"
-				};
-			}
-		}),
-		status: builder.status.handler(async () => {
-			try {
-				const configPath = findConfigPath();
-				if (!configPath) return {
-					status: "error",
-					packages: [],
-					envFile: "missing",
-					error: "No bos.config.json found in current directory"
-				};
-				return await getStatus(resolve(dirname(configPath)));
-			} catch (error) {
-				return {
-					status: "error",
-					packages: [],
-					envFile: "missing",
-					error: error instanceof Error ? error.message : "Unknown error"
-				};
-			}
-		}),
-		ps: builder.ps.handler(async () => {
-			try {
-				return {
-					status: "ok",
-					entries: await Effect.runPromise(pruneDeadEffect(readRegistry()))
-				};
-			} catch (error) {
-				return {
-					status: "error",
-					entries: [],
-					error: error instanceof Error ? error.message : "Unknown error"
-				};
-			}
-		}),
-		kill: builder.kill.handler(async ({ input }) => {
-			try {
-				const entries = await Effect.runPromise(pruneDeadEffect(readRegistry()));
-				const configPath = findConfigPath();
-				const targetConfigDir = input.all ? void 0 : input.configDir ?? (configPath ? resolve(dirname(configPath)) : void 0);
-				const targets = targetConfigDir ? entries.filter((entry) => entry.configDir === targetConfigDir) : entries;
-				const killed = [];
-				const skipped = [];
-				for (const entry of targets) try {
-					process.kill(entry.pid, input.signal === "SIGKILL" ? "SIGKILL" : "SIGTERM");
-					killed.push({
-						pid: entry.pid,
-						configDir: entry.configDir
-					});
-					unregisterPid(entry.pid);
-				} catch (err) {
-					if (err.code === "ESRCH") {
-						skipped.push({
-							pid: entry.pid,
-							reason: "process already exited"
-						});
-						unregisterPid(entry.pid);
-					} else skipped.push({
-						pid: entry.pid,
-						reason: err.message ?? "kill failed"
-					});
-				}
-				return {
-					status: "killed",
-					killed,
-					skipped
-				};
-			} catch (error) {
-				return {
-					status: "error",
-					killed: [],
-					skipped: [],
-					error: error instanceof Error ? error.message : "Unknown error"
-				};
-			}
-		})
+	createRouter: (builder) => ({
+		...registerConfig(builder),
+		...registerPlugins(builder),
+		...registerDev(builder),
+		...registerBuild(builder),
+		...registerDeploy(builder),
+		...registerKeys(builder),
+		...registerInit(builder),
+		...registerUpgrade(builder),
+		...registerDb(builder),
+		...registerOps(builder)
 	})
 });
-function computeAllowedWorkspaces(overrides, plugins) {
-	const workspaces = [];
-	for (const section of overrides) {
-		if (section === "host") workspaces.push("host");
-		if (section === "ui") workspaces.push("ui");
-		if (section === "api") workspaces.push("api");
-	}
-	if (plugins && plugins.length > 0) workspaces.push("plugins/*");
-	return workspaces;
-}
 
 //#endregion
-export { consumeDevSession, plugin_default as default, pluginEvents, resolveRemoteConfigChain };
+export { plugin_default as default, pluginEvents, resolveRemoteConfigChain };
 //# sourceMappingURL=plugin.mjs.map