everything-dev 2.0.0-rc.7 → 2.0.0-rc.8

package/dist/commands/keys.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"keys.mjs","names":[],"sources":["../../src/commands/keys.ts"],"sourcesContent":["import { join } from \"node:path\";\nimport process from \"node:process\";\nimport { Context, Effect } from \"effect\";\nimport { type KeyPair, parseKey } from \"near-kit\";\nimport { openInBrowser, startDeviceLogin } from \"../auth-login\";\nimport {\n  deleteSessionHandle,\n  nearCredentialsPath,\n  readSessionHandle,\n  removePublishedKeyFile,\n  type SessionCredential,\n  writeSessionHandle,\n} from \"../auth-session\";\nimport { MISSING_CONFIG_MESSAGE } from \"../config\";\nimport type { LoginResult } from \"../contract\";\nimport { getRegistryNamespaceForAccount } from \"../fastkv\";\nimport {\n  addFunctionCallAccessKey,\n  deleteAccessKeys,\n  ensureNearCli,\n  generateNearKeyPair,\n  listPublishKeys,\n} from \"../near-cli\";\nimport { getNetworkIdForAccount } from \"../network\";\nimport type { ResolutionSession } from \"../resolution/session\";\nimport { colors } from \"../utils/theme\";\nimport { type BosBuilder, BosDepsTag } from \"./shared\";\n\nconst PUBLISH_FUNCTION_NAMES = [\"__fastdata_kv\"];\n\nexport function registerKeys(builder: BosBuilder) {\n  return {\n    keyPublish: builder.keyPublish.handler(async ({ input, context }) => {\n      const deps = Context.get(context[\"effect/context\"], BosDepsTag);\n      const session = deps.session;\n      if (!session?.config) {\n        return {\n          status: \"error\" as const,\n          account: \"\",\n          network: \"mainnet\" as const,\n          env: input.env,\n          contract: \"\",\n          allowance: input.allowance,\n          functionNames: PUBLISH_FUNCTION_NAMES,\n          error: MISSING_CONFIG_MESSAGE,\n        };\n      }\n\n      const account =\n        input.env === \"staging\"\n          ? (session.config.staging?.account ?? session.config.account)\n          : session.config.account;\n      const network = getNetworkIdForAccount(account);\n      const contract = getRegistryNamespaceForAccount(account, input.registry);\n      try {\n        await Effect.runPromise(ensureNearCli);\n\n        const oldKeys = await listPublishKeys({ account, contract, network });\n\n        const keyPair = await addFunctionCallAccessKey({\n          account,\n          contract,\n          allowance: input.allowance,\n          functionNames: PUBLISH_FUNCTION_NAMES,\n          network,\n        });\n\n        if (oldKeys.length > 0) {\n          console.log();\n          console.log(\n            `  Found ${oldKeys.length} existing publish key${oldKeys.length > 1 ? \"s\" : \"\"}:`,\n          );\n          for (const k of oldKeys) {\n            console.log(`    ${colors.dim(k)}`);\n          }\n\n          if (input.removeOldKeys !== false) {\n            try {\n              await deleteAccessKeys(account, oldKeys, network);\n              console.log(\n                `  ${colors.green(\"✓\")} Removed ${oldKeys.length} old key${\n                  oldKeys.length > 1 ? \"s\" : \"\"\n                }`,\n              );\n            } catch {\n              console.log(\n                `  ${colors.yellow(\"⚠\")} Failed to remove old key${\n                  oldKeys.length > 1 ? \"s\" : \"\"\n                } (new key still active)`,\n              );\n            }\n          } else {\n            console.log(`  ${colors.dim(\"Old key(s) retained.\")}`);\n          }\n        }\n\n        return {\n          status: \"published\" as const,\n          account,\n          network,\n          env: input.env,\n          contract,\n          allowance: input.allowance,\n          functionNames: PUBLISH_FUNCTION_NAMES,\n          publicKey: keyPair.publicKey,\n          privateKey: keyPair.privateKey,\n        };\n      } catch (error) {\n        return {\n          status: \"error\" as const,\n          account,\n          network,\n          env: input.env,\n          contract,\n          allowance: input.allowance,\n          functionNames: PUBLISH_FUNCTION_NAMES,\n          error: error instanceof Error ? error.message : \"Unknown error\",\n        };\n      }\n    }),\n\n    login: builder.login.handler(async ({ input, context }) => {\n      const deps = Context.get(context[\"effect/context\"], BosDepsTag);\n      const staging = input.env === \"staging\";\n      const account = staging\n        ? (deps.session?.config?.staging?.account ?? deps.session?.config?.account ?? \"\")\n        : (deps.session?.config?.account ?? \"\");\n\n      try {\n        const siteUrl = resolveLoginSiteUrl(input.site, deps.session, staging);\n        const login = await startDeviceLogin({\n          siteUrl,\n          device: input.device,\n          account: account || undefined,\n          expiresIn: input.expiresIn,\n        });\n\n        console.log();\n        console.log(`  One-time code: ${colors.cyan(login.userCode)}`);\n        await openInBrowser(login.verificationUrl).catch((error: unknown) => {\n          console.log(colors.yellow(`  ⚠ ${(error as Error).message}`));\n        });\n        console.log();\n        console.log(`  Waiting for approval at ${colors.dim(login.verificationUrl)}…`);\n\n        const approval = await login.waitForApproval();\n\n        if (!approval.apiKey) {\n          return {\n            status: \"error\" as const,\n            siteUrl,\n            loginUrl: login.verificationUrl,\n            error: \"Login approved but no CLI credential was created\",\n          };\n        }\n\n        const expiresAt = new Date(Date.now() + input.expiresIn * 1000).toISOString();\n        writeSessionHandle(deps.session?.root ?? process.cwd(), {\n          version: 1,\n          credential: {\n            kind: \"session\",\n            apiKey: approval.apiKey.key,\n            apiKeyId: approval.apiKey.id,\n            accountId: approval.accountId,\n            label: input.device ?? siteUrl,\n            siteUrl,\n            createdAt: new Date().toISOString(),\n            expiresAt,\n          },\n          publishKey: null,\n          delegateKey: null,\n        });\n\n        let warning: string | null = null;\n        if (account && approval.accountId && approval.accountId !== account) {\n          warning = `Logged in as ${approval.accountId}, but the authored config account is ${account}. Publishes will use the configured account.`;\n        }\n\n        let publishKey: LoginResult[\"publishKey\"] = null;\n        if (input.key) {\n          try {\n            publishKey = await exportPublishKey(account, input.registry);\n          } catch (error) {\n            warning = `Session stored, but publish-key export failed: ${\n              error instanceof Error ? error.message : \"unknown error\"\n            }`;\n          }\n        }\n\n        return {\n          status: \"logged-in\" as const,\n          siteUrl,\n          accountId: approval.accountId,\n          expiresAt,\n          loginUrl: login.verificationUrl,\n          publishKey,\n          warning,\n        };\n      } catch (error) {\n        return {\n          status: \"error\" as const,\n          siteUrl: input.site ?? \"\",\n          error: error instanceof Error ? error.message : \"Unknown error\",\n        };\n      }\n    }),\n\n    logout: builder.logout.handler(async ({ input, context }) => {\n      const deps = Context.get(context[\"effect/context\"], BosDepsTag);\n      const configDir = input.configDir ?? deps.session?.root ?? process.cwd();\n\n      try {\n        const session = readSessionHandle(configDir);\n        let revokedApiKey = false;\n        let removedPublishKey = false;\n        let warning: string | null = null;\n\n        if (session?.credential) {\n          revokedApiKey = await revokeApiKey(session.credential).catch(() => false);\n          if (!revokedApiKey) {\n            warning =\n              \"Could not revoke the API key remotely — revoke it manually under Settings → API keys.\";\n          }\n        }\n\n        if (session?.publishKey) {\n          const account = session.credential?.accountId ?? deps.session?.config?.account ?? \"\";\n          removePublishedKeyFile(session.publishKey.network, account, session.publishKey.publicKey);\n          removedPublishKey = true;\n          warning = warning\n            ? `${warning} Re-run ${colors.cyan(\"bos login --key\")} to re-export a publish key.`\n            : \"Removed the exported publish key. Re-run bos login --key to re-export one.\";\n        }\n\n        deleteSessionHandle(configDir);\n        return {\n          status: \"logged-out\" as const,\n          revokedApiKey,\n          removedPublishKey,\n          warning,\n        };\n      } catch (error) {\n        return {\n          status: \"error\" as const,\n          revokedApiKey: false,\n          removedPublishKey: false,\n          error: error instanceof Error ? error.message : \"Unknown error\",\n        };\n      }\n    }),\n  };\n}\n\nfunction resolveLoginSiteUrl(\n  siteInput: string | undefined,\n  session: ResolutionSession | null,\n  staging: boolean,\n): string {\n  if (siteInput) {\n    return siteInput.replace(/\\/+$/, \"\");\n  }\n  if (staging) {\n    const stagingDomain = session?.config?.staging?.domain ?? session?.config?.domain;\n    return stagingDomain ? `https://${stagingDomain}` : (session?.runtime?.ui?.url ?? \"\");\n  }\n  const devUiUrl = session?.runtime?.ui?.url;\n  if (devUiUrl && /^https?:\\/\\/(localhost|127\\.0\\.0\\.1)/.test(devUiUrl)) {\n    return devUiUrl.replace(/\\/+$/, \"\");\n  }\n  const domain = session?.config?.domain;\n  return domain ? `https://${domain}` : \"\";\n}\n\nasync function exportPublishKey(\n  account: string,\n  registry: string | undefined,\n): Promise<NonNullable<LoginResult[\"publishKey\"]>> {\n  if (!account) {\n    throw new Error(\"the authored config has no account to export a publish key for\");\n  }\n\n  await Effect.runPromise(ensureNearCli);\n\n  const network = getNetworkIdForAccount(account);\n  const contract = getRegistryNamespaceForAccount(account, registry);\n  await listPublishKeys({ account, contract, network });\n\n  const keyPair = generateNearKeyPair();\n  await addFunctionCallAccessKey({\n    account,\n    contract,\n    allowance: \"1NEAR\",\n    functionNames: PUBLISH_FUNCTION_NAMES,\n    network,\n    keyPair,\n  });\n\n  const { FileKeyStore } = await import(\"near-kit/keys/file\");\n  const keyStore = new FileKeyStore(\"~/.near-credentials\", network);\n  await keyStore.add(account, parseNearPrivateKey(keyPair.privateKey));\n  try {\n    const { statSync, chmodSync } = await import(\"node:fs\");\n    const { homedir } = await import(\"node:os\");\n    const credentialPath = join(\n      homedir(),\n      \".near-credentials\",\n      network === \"mainnet\" ? \"mainnet\" : network,\n      `${account}.json`,\n    );\n    if (statSync(credentialPath).mode & 0o077) {\n      chmodSync(credentialPath, 0o600);\n    }\n  } catch {}\n\n  return {\n    publicKey: keyPair.publicKey,\n    network,\n    contract,\n    exportedTo: nearCredentialsPath(network, account),\n  };\n}\nfunction parseNearPrivateKey(privateKey: string): KeyPair {\n  return parseKey(privateKey) as KeyPair;\n}\n\nasync function revokeApiKey(credential: SessionCredential): Promise<boolean> {\n  if (!credential.apiKey || !credential.siteUrl) return false;\n  try {\n    const response = await fetch(`${credential.siteUrl}/api/auth/api-key/delete`, {\n      method: \"POST\",\n      headers: {\n        \"x-api-key\": credential.apiKey,\n        \"content-type\": \"application/json\",\n      },\n      body: JSON.stringify({ keyId: credential.apiKeyId }),\n      signal: AbortSignal.timeout(10_000),\n    });\n    return response.ok;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AA4BA,MAAM,yBAAyB,CAAC,eAAe;AAE/C,SAAgB,aAAa,SAAqB;CAChD,OAAO;EACL,YAAY,QAAQ,WAAW,QAAQ,OAAO,EAAE,OAAO,cAAc;GAEnE,MAAM,UADO,QAAQ,IAAI,QAAQ,mBAAmB,UACjC,CAAC,CAAC;GACrB,IAAI,CAAC,SAAS,QACZ,OAAO;IACL,QAAQ;IACR,SAAS;IACT,SAAS;IACT,KAAK,MAAM;IACX,UAAU;IACV,WAAW,MAAM;IACjB,eAAe;IACf,OAAO;GACT;GAGF,MAAM,UACJ,MAAM,QAAQ,YACT,QAAQ,OAAO,SAAS,WAAW,QAAQ,OAAO,UACnD,QAAQ,OAAO;GACrB,MAAM,UAAU,uBAAuB,OAAO;GAC9C,MAAM,WAAW,+BAA+B,SAAS,MAAM,QAAQ;GACvE,IAAI;IACF,MAAM,OAAO,WAAW,aAAa;IAErC,MAAM,UAAU,MAAM,gBAAgB;KAAE;KAAS;KAAU;IAAQ,CAAC;IAEpE,MAAM,UAAU,MAAM,yBAAyB;KAC7C;KACA;KACA,WAAW,MAAM;KACjB,eAAe;KACf;IACF,CAAC;IAED,IAAI,QAAQ,SAAS,GAAG;KACtB,QAAQ,IAAI;KACZ,QAAQ,IACN,WAAW,QAAQ,OAAO,uBAAuB,QAAQ,SAAS,IAAI,MAAM,GAAG,EACjF;KACA,KAAK,MAAM,KAAK,SACd,QAAQ,IAAI,OAAO,OAAO,IAAI,CAAC,GAAG;KAGpC,IAAI,MAAM,kBAAkB,OAC1B,IAAI;MACF,MAAM,iBAAiB,SAAS,SAAS,OAAO;MAChD,QAAQ,IACN,KAAK,OAAO,MAAM,GAAG,EAAE,WAAW,QAAQ,OAAO,UAC/C,QAAQ,SAAS,IAAI,MAAM,IAE/B;KACF,QAAQ;MACN,QAAQ,IACN,KAAK,OAAO,OAAO,GAAG,EAAE,2BACtB,QAAQ,SAAS,IAAI,MAAM,GAC5B,wBACH;KACF;UAEA,QAAQ,IAAI,KAAK,OAAO,IAAI,sBAAsB,GAAG;IAEzD;IAEA,OAAO;KACL,QAAQ;KACR;KACA;KACA,KAAK,MAAM;KACX;KACA,WAAW,MAAM;KACjB,eAAe;KACf,WAAW,QAAQ;KACnB,YAAY,QAAQ;IACtB;GACF,SAAS,OAAO;IACd,OAAO;KACL,QAAQ;KACR;KACA;KACA,KAAK,MAAM;KACX;KACA,WAAW,MAAM;KACjB,eAAe;KACf,OAAO,iBAAiB,QAAQ,MAAM,UAAU;IAClD;GACF;EACF,CAAC;EAED,OAAO,QAAQ,MAAM,QAAQ,OAAO,EAAE,OAAO,cAAc;GACzD,MAAM,OAAO,QAAQ,IAAI,QAAQ,mBAAmB,UAAU;GAC9D,MAAM,UAAU,MAAM,QAAQ;GAC9B,MAAM,UAAU,UACX,KAAK,SAAS,QAAQ,SAAS,WAAW,KAAK,SAAS,QAAQ,WAAW,KAC3E,KAAK,SAAS,QAAQ,WAAW;GAEtC,IAAI;IACF,MAAM,UAAU,oBAAoB,MAAM,MAAM,KAAK,SAAS,OAAO;IACrE,MAAM,QAAQ,MAAM,iBAAiB;KACnC;KACA,QAAQ,MAAM;KACd,SAAS,WAAW;KACpB,WAAW,MAAM;IACnB,CAAC;IAED,QAAQ,IAAI;IACZ,QAAQ,IAAI,oBAAoB,OAAO,KAAK,MAAM,QAAQ,GAAG;IAC7D,MAAM,cAAc,MAAM,eAAe,CAAC,CAAC,OAAO,UAAmB;KACnE,QAAQ,IAAI,OAAO,OAAO,OAAQ,MAAgB,SAAS,CAAC;IAC9D,CAAC;IACD,QAAQ,IAAI;IACZ,QAAQ,IAAI,6BAA6B,OAAO,IAAI,MAAM,eAAe,EAAE,EAAE;IAE7E,MAAM,WAAW,MAAM,MAAM,gBAAgB;IAE7C,IAAI,CAAC,SAAS,QACZ,OAAO;KACL,QAAQ;KACR;KACA,UAAU,MAAM;KAChB,OAAO;IACT;IAGF,MAAM,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,YAAY,GAAI,CAAC,CAAC,YAAY;IAC5E,mBAAmB,KAAK,SAAS,QAAQ,QAAQ,IAAI,GAAG;KACtD,SAAS;KACT,YAAY;MACV,MAAM;MACN,QAAQ,SAAS,OAAO;MACxB,UAAU,SAAS,OAAO;MAC1B,WAAW,SAAS;MACpB,OAAO,MAAM,UAAU;MACvB;MACA,4BAAW,IAAI,KAAK,EAAC,CAAC,YAAY;MAClC;KACF;KACA,YAAY;KACZ,aAAa;IACf,CAAC;IAED,IAAI,UAAyB;IAC7B,IAAI,WAAW,SAAS,aAAa,SAAS,cAAc,SAC1D,UAAU,gBAAgB,SAAS,UAAU,uCAAuC,QAAQ;IAG9F,IAAI,aAAwC;IAC5C,IAAI,MAAM,KACR,IAAI;KACF,aAAa,MAAM,iBAAiB,SAAS,MAAM,QAAQ;IAC7D,SAAS,OAAO;KACd,UAAU,kDACR,iBAAiB,QAAQ,MAAM,UAAU;IAE7C;IAGF,OAAO;KACL,QAAQ;KACR;KACA,WAAW,SAAS;KACpB;KACA,UAAU,MAAM;KAChB;KACA;IACF;GACF,SAAS,OAAO;IACd,OAAO;KACL,QAAQ;KACR,SAAS,MAAM,QAAQ;KACvB,OAAO,iBAAiB,QAAQ,MAAM,UAAU;IAClD;GACF;EACF,CAAC;EAED,QAAQ,QAAQ,OAAO,QAAQ,OAAO,EAAE,OAAO,cAAc;GAC3D,MAAM,OAAO,QAAQ,IAAI,QAAQ,mBAAmB,UAAU;GAC9D,MAAM,YAAY,MAAM,aAAa,KAAK,SAAS,QAAQ,QAAQ,IAAI;GAEvE,IAAI;IACF,MAAM,UAAU,kBAAkB,SAAS;IAC3C,IAAI,gBAAgB;IACpB,IAAI,oBAAoB;IACxB,IAAI,UAAyB;IAE7B,IAAI,SAAS,YAAY;KACvB,gBAAgB,MAAM,aAAa,QAAQ,UAAU,CAAC,CAAC,YAAY,KAAK;KACxE,IAAI,CAAC,eACH,UACE;IAEN;IAEA,IAAI,SAAS,YAAY;KACvB,MAAM,UAAU,QAAQ,YAAY,aAAa,KAAK,SAAS,QAAQ,WAAW;KAClF,uBAAuB,QAAQ,WAAW,SAAS,SAAS,QAAQ,WAAW,SAAS;KACxF,oBAAoB;KACpB,UAAU,UACN,GAAG,QAAQ,UAAU,OAAO,KAAK,iBAAiB,EAAE,gCACpD;IACN;IAEA,oBAAoB,SAAS;IAC7B,OAAO;KACL,QAAQ;KACR;KACA;KACA;IACF;GACF,SAAS,OAAO;IACd,OAAO;KACL,QAAQ;KACR,eAAe;KACf,mBAAmB;KACnB,OAAO,iBAAiB,QAAQ,MAAM,UAAU;IAClD;GACF;EACF,CAAC;CACH;AACF;AAEA,SAAS,oBACP,WACA,SACA,SACQ;CACR,IAAI,WACF,OAAO,UAAU,QAAQ,QAAQ,EAAE;CAErC,IAAI,SAAS;EACX,MAAM,gBAAgB,SAAS,QAAQ,SAAS,UAAU,SAAS,QAAQ;EAC3E,OAAO,gBAAgB,WAAW,kBAAmB,SAAS,SAAS,IAAI,OAAO;CACpF;CACA,MAAM,WAAW,SAAS,SAAS,IAAI;CACvC,IAAI,YAAY,uCAAuC,KAAK,QAAQ,GAClE,OAAO,SAAS,QAAQ,QAAQ,EAAE;CAEpC,MAAM,SAAS,SAAS,QAAQ;CAChC,OAAO,SAAS,WAAW,WAAW;AACxC;AAEA,eAAe,iBACb,SACA,UACiD;CACjD,IAAI,CAAC,SACH,MAAM,IAAI,MAAM,gEAAgE;CAGlF,MAAM,OAAO,WAAW,aAAa;CAErC,MAAM,UAAU,uBAAuB,OAAO;CAC9C,MAAM,WAAW,+BAA+B,SAAS,QAAQ;CACjE,MAAM,gBAAgB;EAAE;EAAS;EAAU;CAAQ,CAAC;CAEpD,MAAM,UAAU,oBAAoB;CACpC,MAAM,yBAAyB;EAC7B;EACA;EACA,WAAW;EACX,eAAe;EACf;EACA;CACF,CAAC;CAED,MAAM,EAAE,iBAAiB,MAAM,OAAO;CAEtC,MAAM,IADe,aAAa,uBAAuB,OAC5C,CAAC,CAAC,IAAI,SAAS,oBAAoB,QAAQ,UAAU,CAAC;CACnE,IAAI;EACF,MAAM,EAAE,UAAU,cAAc,MAAM,OAAO;EAC7C,MAAM,EAAE,YAAY,MAAM,OAAO;EACjC,MAAM,iBAAiB,KACrB,QAAQ,GACR,qBACA,YAAY,YAAY,YAAY,SACpC,GAAG,QAAQ,MACb;EACA,IAAI,SAAS,cAAc,CAAC,CAAC,OAAO,IAClC,UAAU,gBAAgB,GAAK;CAEnC,QAAQ,CAAC;CAET,OAAO;EACL,WAAW,QAAQ;EACnB;EACA;EACA,YAAY,oBAAoB,SAAS,OAAO;CAClD;AACF;AACA,SAAS,oBAAoB,YAA6B;CACxD,OAAO,SAAS,UAAU;AAC5B;AAEA,eAAe,aAAa,YAAiD;CAC3E,IAAI,CAAC,WAAW,UAAU,CAAC,WAAW,SAAS,OAAO;CACtD,IAAI;EAUF,QAAO,MATgB,MAAM,GAAG,WAAW,QAAQ,2BAA2B;GAC5E,QAAQ;GACR,SAAS;IACP,aAAa,WAAW;IACxB,gBAAgB;GAClB;GACA,MAAM,KAAK,UAAU,EAAE,OAAO,WAAW,SAAS,CAAC;GACnD,QAAQ,YAAY,QAAQ,GAAM;EACpC,CAAC,EACc,CAAC;CAClB,QAAQ;EACN,OAAO;CACT;AACF"}
+{"version":3,"file":"keys.mjs","names":[],"sources":["../../src/commands/keys.ts"],"sourcesContent":["import { join } from \"node:path\";\nimport process from \"node:process\";\nimport { Context, Effect } from \"effect\";\nimport { type KeyPair, parseKey } from \"near-kit\";\nimport { openInBrowser, startDeviceLogin } from \"../auth-login\";\nimport {\n  deleteSessionHandle,\n  nearCredentialsPath,\n  readSessionHandle,\n  removePublishedKeyFile,\n  type SessionCredential,\n  writeSessionHandle,\n} from \"../auth-session\";\nimport { MISSING_CONFIG_MESSAGE } from \"../config\";\nimport type { LoginResult } from \"../contract\";\nimport { getRegistryNamespaceForAccount } from \"../fastkv\";\nimport {\n  addFunctionCallAccessKey,\n  deleteAccessKeys,\n  ensureNearCli,\n  generateNearKeyPair,\n  listPublishKeys,\n} from \"../near-cli\";\nimport { getNetworkIdForAccount } from \"../network\";\nimport type { ResolutionSession } from \"../resolution/session\";\nimport { colors } from \"../utils/theme\";\nimport { type BosBuilder, BosDepsTag } from \"./shared\";\n\nconst PUBLISH_FUNCTION_NAMES = [\"__fastdata_kv\"];\n\nexport function registerKeys(builder: BosBuilder) {\n  return {\n    keyPublish: builder.keyPublish.handler(async ({ input, context }) => {\n      const deps = Context.get(context[\"effect/context\"], BosDepsTag);\n      const session = deps.session;\n      if (!session?.config) {\n        return {\n          status: \"error\" as const,\n          account: \"\",\n          network: \"mainnet\" as const,\n          env: input.env,\n          contract: \"\",\n          allowance: input.allowance,\n          functionNames: PUBLISH_FUNCTION_NAMES,\n          error: MISSING_CONFIG_MESSAGE,\n        };\n      }\n\n      const account =\n        input.env === \"staging\"\n          ? (session.config.staging?.account ?? session.config.account)\n          : session.config.account;\n      const network = getNetworkIdForAccount(account);\n      const contract = getRegistryNamespaceForAccount(account, input.registry);\n      try {\n        await Effect.runPromise(ensureNearCli);\n\n        const oldKeys = await listPublishKeys({ account, contract, network });\n\n        const keyPair = await addFunctionCallAccessKey({\n          account,\n          contract,\n          allowance: input.allowance,\n          functionNames: PUBLISH_FUNCTION_NAMES,\n          network,\n        });\n\n        if (oldKeys.length > 0) {\n          console.log();\n          console.log(\n            `  Found ${oldKeys.length} existing publish key${oldKeys.length > 1 ? \"s\" : \"\"}:`,\n          );\n          for (const k of oldKeys) {\n            console.log(`    ${colors.dim(k)}`);\n          }\n\n          if (input.removeOldKeys === true) {\n            try {\n              await deleteAccessKeys(account, oldKeys, network);\n              console.log(\n                `  ${colors.green(\"✓\")} Removed ${oldKeys.length} old key${\n                  oldKeys.length > 1 ? \"s\" : \"\"\n                }`,\n              );\n            } catch {\n              console.log(\n                `  ${colors.yellow(\"⚠\")} Failed to remove old key${\n                  oldKeys.length > 1 ? \"s\" : \"\"\n                } (new key still active)`,\n              );\n            }\n          } else {\n            console.log(`  ${colors.dim(\"Old key(s) retained.\")}`);\n          }\n        }\n\n        return {\n          status: \"published\" as const,\n          account,\n          network,\n          env: input.env,\n          contract,\n          allowance: input.allowance,\n          functionNames: PUBLISH_FUNCTION_NAMES,\n          publicKey: keyPair.publicKey,\n          privateKey: keyPair.privateKey,\n        };\n      } catch (error) {\n        return {\n          status: \"error\" as const,\n          account,\n          network,\n          env: input.env,\n          contract,\n          allowance: input.allowance,\n          functionNames: PUBLISH_FUNCTION_NAMES,\n          error: error instanceof Error ? error.message : \"Unknown error\",\n        };\n      }\n    }),\n\n    login: builder.login.handler(async ({ input, context }) => {\n      const deps = Context.get(context[\"effect/context\"], BosDepsTag);\n      const staging = input.env === \"staging\";\n      const account = staging\n        ? (deps.session?.config?.staging?.account ?? deps.session?.config?.account ?? \"\")\n        : (deps.session?.config?.account ?? \"\");\n\n      try {\n        const siteUrl = resolveLoginSiteUrl(input.site, deps.session, staging);\n        const login = await startDeviceLogin({\n          siteUrl,\n          device: input.device,\n          account: account || undefined,\n          expiresIn: input.expiresIn,\n        });\n\n        console.log();\n        console.log(`  One-time code: ${colors.cyan(login.userCode)}`);\n        await openInBrowser(login.verificationUrl).catch((error: unknown) => {\n          console.log(colors.yellow(`  ⚠ ${(error as Error).message}`));\n        });\n        console.log();\n        console.log(`  Waiting for approval at ${colors.dim(login.verificationUrl)}…`);\n\n        const approval = await login.waitForApproval();\n\n        if (!approval.apiKey) {\n          return {\n            status: \"error\" as const,\n            siteUrl,\n            loginUrl: login.verificationUrl,\n            error: \"Login approved but no CLI credential was created\",\n          };\n        }\n\n        const expiresAt = new Date(Date.now() + input.expiresIn * 1000).toISOString();\n        writeSessionHandle(deps.session?.root ?? process.cwd(), {\n          version: 1,\n          credential: {\n            kind: \"session\",\n            apiKey: approval.apiKey.key,\n            apiKeyId: approval.apiKey.id,\n            accountId: approval.accountId,\n            label: input.device ?? siteUrl,\n            siteUrl,\n            createdAt: new Date().toISOString(),\n            expiresAt,\n          },\n          publishKey: null,\n          delegateKey: null,\n        });\n\n        let warning: string | null = null;\n        if (account && approval.accountId && approval.accountId !== account) {\n          warning = `Logged in as ${approval.accountId}, but the authored config account is ${account}. Publishes will use the configured account.`;\n        }\n\n        let publishKey: LoginResult[\"publishKey\"] = null;\n        if (input.key) {\n          try {\n            publishKey = await exportPublishKey(account, input.registry);\n          } catch (error) {\n            warning = `Session stored, but publish-key export failed: ${\n              error instanceof Error ? error.message : \"unknown error\"\n            }`;\n          }\n        }\n\n        return {\n          status: \"logged-in\" as const,\n          siteUrl,\n          accountId: approval.accountId,\n          expiresAt,\n          loginUrl: login.verificationUrl,\n          publishKey,\n          warning,\n        };\n      } catch (error) {\n        return {\n          status: \"error\" as const,\n          siteUrl: input.site ?? \"\",\n          error: error instanceof Error ? error.message : \"Unknown error\",\n        };\n      }\n    }),\n\n    logout: builder.logout.handler(async ({ input, context }) => {\n      const deps = Context.get(context[\"effect/context\"], BosDepsTag);\n      const configDir = input.configDir ?? deps.session?.root ?? process.cwd();\n\n      try {\n        const session = readSessionHandle(configDir);\n        let revokedApiKey = false;\n        let removedPublishKey = false;\n        let warning: string | null = null;\n\n        if (session?.credential) {\n          revokedApiKey = await revokeApiKey(session.credential).catch(() => false);\n          if (!revokedApiKey) {\n            warning =\n              \"Could not revoke the API key remotely — revoke it manually under Settings → API keys.\";\n          }\n        }\n\n        if (session?.publishKey) {\n          const account = session.credential?.accountId ?? deps.session?.config?.account ?? \"\";\n          removePublishedKeyFile(session.publishKey.network, account, session.publishKey.publicKey);\n          removedPublishKey = true;\n          warning = warning\n            ? `${warning} Re-run ${colors.cyan(\"bos login --key\")} to re-export a publish key.`\n            : \"Removed the exported publish key. Re-run bos login --key to re-export one.\";\n        }\n\n        deleteSessionHandle(configDir);\n        return {\n          status: \"logged-out\" as const,\n          revokedApiKey,\n          removedPublishKey,\n          warning,\n        };\n      } catch (error) {\n        return {\n          status: \"error\" as const,\n          revokedApiKey: false,\n          removedPublishKey: false,\n          error: error instanceof Error ? error.message : \"Unknown error\",\n        };\n      }\n    }),\n  };\n}\n\nfunction resolveLoginSiteUrl(\n  siteInput: string | undefined,\n  session: ResolutionSession | null,\n  staging: boolean,\n): string {\n  if (siteInput) {\n    return siteInput.replace(/\\/+$/, \"\");\n  }\n  if (staging) {\n    const stagingDomain = session?.config?.staging?.domain ?? session?.config?.domain;\n    return stagingDomain ? `https://${stagingDomain}` : (session?.runtime?.ui?.url ?? \"\");\n  }\n  const devUiUrl = session?.runtime?.ui?.url;\n  if (devUiUrl && /^https?:\\/\\/(localhost|127\\.0\\.0\\.1)/.test(devUiUrl)) {\n    return devUiUrl.replace(/\\/+$/, \"\");\n  }\n  const domain = session?.config?.domain;\n  return domain ? `https://${domain}` : \"\";\n}\n\nasync function exportPublishKey(\n  account: string,\n  registry: string | undefined,\n): Promise<NonNullable<LoginResult[\"publishKey\"]>> {\n  if (!account) {\n    throw new Error(\"the authored config has no account to export a publish key for\");\n  }\n\n  await Effect.runPromise(ensureNearCli);\n\n  const network = getNetworkIdForAccount(account);\n  const contract = getRegistryNamespaceForAccount(account, registry);\n  await listPublishKeys({ account, contract, network });\n\n  const keyPair = generateNearKeyPair();\n  await addFunctionCallAccessKey({\n    account,\n    contract,\n    allowance: \"1NEAR\",\n    functionNames: PUBLISH_FUNCTION_NAMES,\n    network,\n    keyPair,\n  });\n\n  const { FileKeyStore } = await import(\"near-kit/keys/file\");\n  const keyStore = new FileKeyStore(\"~/.near-credentials\", network);\n  await keyStore.add(account, parseNearPrivateKey(keyPair.privateKey));\n  try {\n    const { statSync, chmodSync } = await import(\"node:fs\");\n    const { homedir } = await import(\"node:os\");\n    const credentialPath = join(\n      homedir(),\n      \".near-credentials\",\n      network === \"mainnet\" ? \"mainnet\" : network,\n      `${account}.json`,\n    );\n    if (statSync(credentialPath).mode & 0o077) {\n      chmodSync(credentialPath, 0o600);\n    }\n  } catch {}\n\n  return {\n    publicKey: keyPair.publicKey,\n    network,\n    contract,\n    exportedTo: nearCredentialsPath(network, account),\n  };\n}\nfunction parseNearPrivateKey(privateKey: string): KeyPair {\n  return parseKey(privateKey) as KeyPair;\n}\n\nasync function revokeApiKey(credential: SessionCredential): Promise<boolean> {\n  if (!credential.apiKey || !credential.siteUrl) return false;\n  try {\n    const response = await fetch(`${credential.siteUrl}/api/auth/api-key/delete`, {\n      method: \"POST\",\n      headers: {\n        \"x-api-key\": credential.apiKey,\n        \"content-type\": \"application/json\",\n      },\n      body: JSON.stringify({ keyId: credential.apiKeyId }),\n      signal: AbortSignal.timeout(10_000),\n    });\n    return response.ok;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AA4BA,MAAM,yBAAyB,CAAC,eAAe;AAE/C,SAAgB,aAAa,SAAqB;CAChD,OAAO;EACL,YAAY,QAAQ,WAAW,QAAQ,OAAO,EAAE,OAAO,cAAc;GAEnE,MAAM,UADO,QAAQ,IAAI,QAAQ,mBAAmB,UACjC,CAAC,CAAC;GACrB,IAAI,CAAC,SAAS,QACZ,OAAO;IACL,QAAQ;IACR,SAAS;IACT,SAAS;IACT,KAAK,MAAM;IACX,UAAU;IACV,WAAW,MAAM;IACjB,eAAe;IACf,OAAO;GACT;GAGF,MAAM,UACJ,MAAM,QAAQ,YACT,QAAQ,OAAO,SAAS,WAAW,QAAQ,OAAO,UACnD,QAAQ,OAAO;GACrB,MAAM,UAAU,uBAAuB,OAAO;GAC9C,MAAM,WAAW,+BAA+B,SAAS,MAAM,QAAQ;GACvE,IAAI;IACF,MAAM,OAAO,WAAW,aAAa;IAErC,MAAM,UAAU,MAAM,gBAAgB;KAAE;KAAS;KAAU;IAAQ,CAAC;IAEpE,MAAM,UAAU,MAAM,yBAAyB;KAC7C;KACA;KACA,WAAW,MAAM;KACjB,eAAe;KACf;IACF,CAAC;IAED,IAAI,QAAQ,SAAS,GAAG;KACtB,QAAQ,IAAI;KACZ,QAAQ,IACN,WAAW,QAAQ,OAAO,uBAAuB,QAAQ,SAAS,IAAI,MAAM,GAAG,EACjF;KACA,KAAK,MAAM,KAAK,SACd,QAAQ,IAAI,OAAO,OAAO,IAAI,CAAC,GAAG;KAGpC,IAAI,MAAM,kBAAkB,MAC1B,IAAI;MACF,MAAM,iBAAiB,SAAS,SAAS,OAAO;MAChD,QAAQ,IACN,KAAK,OAAO,MAAM,GAAG,EAAE,WAAW,QAAQ,OAAO,UAC/C,QAAQ,SAAS,IAAI,MAAM,IAE/B;KACF,QAAQ;MACN,QAAQ,IACN,KAAK,OAAO,OAAO,GAAG,EAAE,2BACtB,QAAQ,SAAS,IAAI,MAAM,GAC5B,wBACH;KACF;UAEA,QAAQ,IAAI,KAAK,OAAO,IAAI,sBAAsB,GAAG;IAEzD;IAEA,OAAO;KACL,QAAQ;KACR;KACA;KACA,KAAK,MAAM;KACX;KACA,WAAW,MAAM;KACjB,eAAe;KACf,WAAW,QAAQ;KACnB,YAAY,QAAQ;IACtB;GACF,SAAS,OAAO;IACd,OAAO;KACL,QAAQ;KACR;KACA;KACA,KAAK,MAAM;KACX;KACA,WAAW,MAAM;KACjB,eAAe;KACf,OAAO,iBAAiB,QAAQ,MAAM,UAAU;IAClD;GACF;EACF,CAAC;EAED,OAAO,QAAQ,MAAM,QAAQ,OAAO,EAAE,OAAO,cAAc;GACzD,MAAM,OAAO,QAAQ,IAAI,QAAQ,mBAAmB,UAAU;GAC9D,MAAM,UAAU,MAAM,QAAQ;GAC9B,MAAM,UAAU,UACX,KAAK,SAAS,QAAQ,SAAS,WAAW,KAAK,SAAS,QAAQ,WAAW,KAC3E,KAAK,SAAS,QAAQ,WAAW;GAEtC,IAAI;IACF,MAAM,UAAU,oBAAoB,MAAM,MAAM,KAAK,SAAS,OAAO;IACrE,MAAM,QAAQ,MAAM,iBAAiB;KACnC;KACA,QAAQ,MAAM;KACd,SAAS,WAAW;KACpB,WAAW,MAAM;IACnB,CAAC;IAED,QAAQ,IAAI;IACZ,QAAQ,IAAI,oBAAoB,OAAO,KAAK,MAAM,QAAQ,GAAG;IAC7D,MAAM,cAAc,MAAM,eAAe,CAAC,CAAC,OAAO,UAAmB;KACnE,QAAQ,IAAI,OAAO,OAAO,OAAQ,MAAgB,SAAS,CAAC;IAC9D,CAAC;IACD,QAAQ,IAAI;IACZ,QAAQ,IAAI,6BAA6B,OAAO,IAAI,MAAM,eAAe,EAAE,EAAE;IAE7E,MAAM,WAAW,MAAM,MAAM,gBAAgB;IAE7C,IAAI,CAAC,SAAS,QACZ,OAAO;KACL,QAAQ;KACR;KACA,UAAU,MAAM;KAChB,OAAO;IACT;IAGF,MAAM,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,YAAY,GAAI,CAAC,CAAC,YAAY;IAC5E,mBAAmB,KAAK,SAAS,QAAQ,QAAQ,IAAI,GAAG;KACtD,SAAS;KACT,YAAY;MACV,MAAM;MACN,QAAQ,SAAS,OAAO;MACxB,UAAU,SAAS,OAAO;MAC1B,WAAW,SAAS;MACpB,OAAO,MAAM,UAAU;MACvB;MACA,4BAAW,IAAI,KAAK,EAAC,CAAC,YAAY;MAClC;KACF;KACA,YAAY;KACZ,aAAa;IACf,CAAC;IAED,IAAI,UAAyB;IAC7B,IAAI,WAAW,SAAS,aAAa,SAAS,cAAc,SAC1D,UAAU,gBAAgB,SAAS,UAAU,uCAAuC,QAAQ;IAG9F,IAAI,aAAwC;IAC5C,IAAI,MAAM,KACR,IAAI;KACF,aAAa,MAAM,iBAAiB,SAAS,MAAM,QAAQ;IAC7D,SAAS,OAAO;KACd,UAAU,kDACR,iBAAiB,QAAQ,MAAM,UAAU;IAE7C;IAGF,OAAO;KACL,QAAQ;KACR;KACA,WAAW,SAAS;KACpB;KACA,UAAU,MAAM;KAChB;KACA;IACF;GACF,SAAS,OAAO;IACd,OAAO;KACL,QAAQ;KACR,SAAS,MAAM,QAAQ;KACvB,OAAO,iBAAiB,QAAQ,MAAM,UAAU;IAClD;GACF;EACF,CAAC;EAED,QAAQ,QAAQ,OAAO,QAAQ,OAAO,EAAE,OAAO,cAAc;GAC3D,MAAM,OAAO,QAAQ,IAAI,QAAQ,mBAAmB,UAAU;GAC9D,MAAM,YAAY,MAAM,aAAa,KAAK,SAAS,QAAQ,QAAQ,IAAI;GAEvE,IAAI;IACF,MAAM,UAAU,kBAAkB,SAAS;IAC3C,IAAI,gBAAgB;IACpB,IAAI,oBAAoB;IACxB,IAAI,UAAyB;IAE7B,IAAI,SAAS,YAAY;KACvB,gBAAgB,MAAM,aAAa,QAAQ,UAAU,CAAC,CAAC,YAAY,KAAK;KACxE,IAAI,CAAC,eACH,UACE;IAEN;IAEA,IAAI,SAAS,YAAY;KACvB,MAAM,UAAU,QAAQ,YAAY,aAAa,KAAK,SAAS,QAAQ,WAAW;KAClF,uBAAuB,QAAQ,WAAW,SAAS,SAAS,QAAQ,WAAW,SAAS;KACxF,oBAAoB;KACpB,UAAU,UACN,GAAG,QAAQ,UAAU,OAAO,KAAK,iBAAiB,EAAE,gCACpD;IACN;IAEA,oBAAoB,SAAS;IAC7B,OAAO;KACL,QAAQ;KACR;KACA;KACA;IACF;GACF,SAAS,OAAO;IACd,OAAO;KACL,QAAQ;KACR,eAAe;KACf,mBAAmB;KACnB,OAAO,iBAAiB,QAAQ,MAAM,UAAU;IAClD;GACF;EACF,CAAC;CACH;AACF;AAEA,SAAS,oBACP,WACA,SACA,SACQ;CACR,IAAI,WACF,OAAO,UAAU,QAAQ,QAAQ,EAAE;CAErC,IAAI,SAAS;EACX,MAAM,gBAAgB,SAAS,QAAQ,SAAS,UAAU,SAAS,QAAQ;EAC3E,OAAO,gBAAgB,WAAW,kBAAmB,SAAS,SAAS,IAAI,OAAO;CACpF;CACA,MAAM,WAAW,SAAS,SAAS,IAAI;CACvC,IAAI,YAAY,uCAAuC,KAAK,QAAQ,GAClE,OAAO,SAAS,QAAQ,QAAQ,EAAE;CAEpC,MAAM,SAAS,SAAS,QAAQ;CAChC,OAAO,SAAS,WAAW,WAAW;AACxC;AAEA,eAAe,iBACb,SACA,UACiD;CACjD,IAAI,CAAC,SACH,MAAM,IAAI,MAAM,gEAAgE;CAGlF,MAAM,OAAO,WAAW,aAAa;CAErC,MAAM,UAAU,uBAAuB,OAAO;CAC9C,MAAM,WAAW,+BAA+B,SAAS,QAAQ;CACjE,MAAM,gBAAgB;EAAE;EAAS;EAAU;CAAQ,CAAC;CAEpD,MAAM,UAAU,oBAAoB;CACpC,MAAM,yBAAyB;EAC7B;EACA;EACA,WAAW;EACX,eAAe;EACf;EACA;CACF,CAAC;CAED,MAAM,EAAE,iBAAiB,MAAM,OAAO;CAEtC,MAAM,IADe,aAAa,uBAAuB,OAC5C,CAAC,CAAC,IAAI,SAAS,oBAAoB,QAAQ,UAAU,CAAC;CACnE,IAAI;EACF,MAAM,EAAE,UAAU,cAAc,MAAM,OAAO;EAC7C,MAAM,EAAE,YAAY,MAAM,OAAO;EACjC,MAAM,iBAAiB,KACrB,QAAQ,GACR,qBACA,YAAY,YAAY,YAAY,SACpC,GAAG,QAAQ,MACb;EACA,IAAI,SAAS,cAAc,CAAC,CAAC,OAAO,IAClC,UAAU,gBAAgB,GAAK;CAEnC,QAAQ,CAAC;CAET,OAAO;EACL,WAAW,QAAQ;EACnB;EACA;EACA,YAAY,oBAAoB,SAAS,OAAO;CAClD;AACF;AACA,SAAS,oBAAoB,YAA6B;CACxD,OAAO,SAAS,UAAU;AAC5B;AAEA,eAAe,aAAa,YAAiD;CAC3E,IAAI,CAAC,WAAW,UAAU,CAAC,WAAW,SAAS,OAAO;CACtD,IAAI;EAUF,QAAO,MATgB,MAAM,GAAG,WAAW,QAAQ,2BAA2B;GAC5E,QAAQ;GACR,SAAS;IACP,aAAa,WAAW;IACxB,gBAAgB;GAClB;GACA,MAAM,KAAK,UAAU,EAAE,OAAO,WAAW,SAAS,CAAC;GACnD,QAAQ,YAAY,QAAQ,GAAM;EACpC,CAAC,EACc,CAAC;CAClB,QAAQ;EACN,OAAO;CACT;AACF"}

package/dist/contract.meta.cjs

@@ -165,7 +165,7 @@ const cliCommandMeta = {
 		fields: {
 			env: { description: "Environment: production or staging" },
 			allowance: { description: "NEAR allowance for the key (default: 1NEAR, min: 0.3NEAR)" },
-			removeOldKeys: { description: "Remove existing publish key(s) without prompting (default: ask on a TTY, yes when non-interactive)" },
+			removeOldKeys: { description: "Remove existing publish key(s) without prompting (default: ask on a TTY, defaulting to keep; keep when non-interactive — pass --remove-old-keys to remove)" },
 			registry: { description: "Override FastKV registry contract account (defaults: dev.everything.near / dev.allthethings.testnet)" }
 		}
 	},

package/dist/contract.meta.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"contract.meta.cjs","names":[],"sources":["../src/contract.meta.ts"],"sourcesContent":["export type CliCommandMeta = {\n  commandPath?: string[];\n  summary: string;\n  description?: string;\n  examples?: string[];\n  interactive?: boolean;\n  longRunning?: boolean;\n  fields?: Record<string, { positional?: boolean; description?: string }>;\n};\n\nexport const cliCommandMeta = {\n  dev: {\n    commandPath: [\"dev\"],\n    summary: \"Start a development session\",\n    interactive: true,\n    longRunning: true,\n    fields: {\n      remotePlugins: {\n        description:\n          \"Comma-separated plugin IDs to force remote (e.g. --remote-plugins auth,registry)\",\n      },\n      logLevel: {\n        description:\n          \"Log tail level: error, warn (default), info, or debug (overrides BOS_LOG_LEVEL; the file always gets everything)\",\n      },\n    },\n  },\n  start: {\n    commandPath: [\"start\"],\n    summary: \"Start the production host\",\n    interactive: false,\n    longRunning: true,\n    fields: {\n      env: { description: \"Environment: production or staging\" },\n      registry: {\n        description:\n          \"Override FastKV registry contract account (defaults: dev.everything.near / dev.allthethings.testnet)\",\n      },\n      configPath: {\n        description:\n          \"Boot from a local bos config file — skips FastKV resolution and SRI integrity verification\",\n      },\n    },\n  },\n  build: {\n    commandPath: [\"build\"],\n    summary: \"Build selected workspaces\",\n    interactive: false,\n    fields: {\n      packages: { positional: true, description: \"Comma-separated package list\" },\n    },\n  },\n  config: {\n    commandPath: [\"config\"],\n    summary: \"Print the loaded BOS configuration\",\n    interactive: false,\n    fields: {\n      full: { description: \"Print the fully resolved configuration\" },\n    },\n  },\n  registryUse: {\n    commandPath: [\"registry\", \"use\"],\n    summary:\n      \"Compose app.ui/app.host/app.api/plugins.<key> sections from a published runtime into bos.config.json\",\n    interactive: false,\n    fields: {\n      from: {\n        positional: true,\n        description:\n          \"Published runtime (account/gateway or bos:// URL), e.g. v1.citynode.near/citynode.app\",\n      },\n      sections: {\n        description: \"Comma-separated sections to compose, e.g. app.ui,plugins.apps\",\n      },\n      dryRun: { description: \"Preview the merged config without writing\" },\n    },\n  },\n  pluginAdd: {\n    commandPath: [\"plugin\", \"add\"],\n    summary: \"Add a plugin attachment\",\n    interactive: false,\n    fields: {\n      source: {\n        positional: true,\n        description: \"Plugin source (local:path, bos://account/domain, or URL)\",\n      },\n      as: { description: \"Plugin alias\" },\n      production: { description: \"Production URL override\" },\n    },\n  },\n  pluginRemove: {\n    commandPath: [\"plugin\", \"remove\"],\n    summary: \"Remove a plugin attachment\",\n    interactive: false,\n    fields: { key: { positional: true, description: \"Plugin key\" } },\n  },\n  pluginList: {\n    commandPath: [\"plugin\", \"list\"],\n    summary: \"List configured plugins\",\n    interactive: false,\n  },\n  pluginPublish: {\n    commandPath: [\"plugin\", \"publish\"],\n    summary: \"Publish a single plugin\",\n    interactive: false,\n    fields: { key: { positional: true, description: \"Plugin key\" } },\n  },\n  publish: {\n    commandPath: [\"publish\"],\n    summary:\n      \"Publish the current workspace configuration (no build — use bos deploy for the full train)\",\n    interactive: false,\n    fields: {\n      dryRun: { description: \"Preview what would be published without writing\" },\n      verbose: { description: \"Show full build output instead of clean summary\" },\n      env: { description: \"Environment: production or staging\" },\n      network: { description: \"NEAR network: mainnet or testnet\" },\n      wallet: {\n        description:\n          \"Publish gaslessly with a one-time wallet approval (NEP-366 delegate action relayed by the platform relayer)\",\n      },\n      registry: {\n        description:\n          \"Override FastKV registry contract account (defaults: dev.everything.near / dev.allthethings.testnet)\",\n      },\n    },\n  },\n  rollback: {\n    commandPath: [\"rollback\"],\n    summary: \"Republish an earlier config snapshot from the registry publish history\",\n    interactive: true,\n    fields: {\n      version: { description: \"Block height (or timestamp) of the snapshot from the listing\" },\n      previous: { description: \"Roll back to the write immediately before the current one\" },\n      force: {\n        description:\n          \"Allow pre-Phase-A snapshots without verifiable manifest pins (their bytes were overwritten in place)\",\n      },\n      limit: { description: \"Listing depth (1-200, default 20)\" },\n      dryRun: { description: \"Preview the rollback without publishing\" },\n      env: { description: \"Environment: production or staging\" },\n      network: { description: \"NEAR network: mainnet or testnet\" },\n      wallet: {\n        description:\n          \"Publish gaslessly with a one-time wallet approval (NEP-366 delegate action relayed by the platform relayer)\",\n      },\n      registry: {\n        description:\n          \"Override FastKV registry contract account (defaults: dev.everything.near / dev.allthethings.testnet)\",\n      },\n    },\n  },\n  deploy: {\n    commandPath: [\"deploy\"],\n    summary:\n      \"Deploy train: preflight → build → upload bundles → publish config → runtime image (pre-pushed digest or local docker build) → post-publish smoke (optional) → Railway (image-backed, no build)\",\n    interactive: false,\n    fields: {\n      env: { description: \"Environment: production or staging\" },\n      build: { description: \"Build and deploy workspaces before publish (default: true)\" },\n      dryRun: { description: \"Preview what would be deployed without writing\" },\n      verbose: { description: \"Show full build output instead of clean summary\" },\n      service: { description: \"Override Railway service name from config\" },\n      imageDigest: {\n        description:\n          \"Digest of a pre-pushed runtime image (sha256:…) — skips the local image build/push; Railway pins this digest\",\n      },\n      smoke: {\n        description:\n          \"Gate the Railway promotion on a post-publish boot smoke of the runtime image — a red smoke rolls the config back\",\n      },\n      registry: {\n        description:\n          \"Override FastKV registry contract account (defaults: dev.everything.near / dev.allthethings.testnet)\",\n      },\n    },\n  },\n  smoke: {\n    commandPath: [\"smoke\"],\n    summary:\n      \"Boot a runtime image the way production boots (identity-driven, published config) and assert the boot surface: /health, SSR, OpenAPI spec, in-image mf check\",\n    interactive: false,\n    fields: {\n      image: { description: \"Runtime image ref to boot (required)\" },\n      port: { description: \"Host port to publish the container on (default: 3000)\" },\n      keep: { description: \"Keep the container after the run (debugging)\" },\n      account: { description: \"Registry identity — defaults to the resolved session config\" },\n    },\n  },\n  login: {\n    commandPath: [\"login\"],\n    summary:\n      \"Sign in with your NEAR account via the hosted site (wallet, passkey, or social login)\",\n    interactive: true,\n    fields: {\n      key: { description: \"Also mint and export a scoped publish key for headless/CI use\" },\n      site: { description: \"Override site URL hosting the CLI login page\" },\n      device: { description: \"Device label recorded on the credential (default: hostname)\" },\n      expiresIn: { description: \"Session lifetime in seconds (default: 90 days)\" },\n      env: { description: \"Environment: production (default) or staging\" },\n    },\n  },\n  logout: {\n    commandPath: [\"logout\"],\n    summary: \"Revoke the stored CLI session and delete the exported publish key\",\n    interactive: false,\n  },\n  keyPublish: {\n    commandPath: [\"key\", \"generate\"],\n    summary: \"Generate a publish access key\",\n    interactive: true,\n    fields: {\n      env: { description: \"Environment: production or staging\" },\n      allowance: { description: \"NEAR allowance for the key (default: 1NEAR, min: 0.3NEAR)\" },\n      removeOldKeys: {\n        description:\n          \"Remove existing publish key(s) without prompting (default: ask on a TTY, yes when non-interactive)\",\n      },\n      registry: {\n        description:\n          \"Override FastKV registry contract account (defaults: dev.everything.near / dev.allthethings.testnet)\",\n      },\n    },\n  },\n  init: {\n    commandPath: [\"init\"],\n    summary: \"Scaffold a new project by extending a deployed app or template\",\n    interactive: true,\n    fields: {\n      domain: {\n        positional: true,\n        description: \"New project domain (e.g. myapp.everything.dev)\",\n      },\n      extends: {\n        description: \"Parent to extend from (e.g. bos://account/gateway or account/gateway)\",\n      },\n      account: { description: \"New project NEAR account (auto-derived from extends)\" },\n      directory: { description: \"Target directory (auto-derived from domain)\" },\n      source: { description: \"Local source dir (skips GitHub download)\" },\n      plugins: {\n        description: \"Comma-separated plugin keys to include (requires --overrides=plugins)\",\n      },\n      overrides: {\n        description: \"Comma-separated sections to customize locally: ui,api,host,plugins\",\n      },\n      level: {\n        description:\n          \"Starter complexity: simple (public shell) or advanced (adds dashboard, orgs, admin)\",\n      },\n      noInteractive: { description: \"Skip prompts, use flags only\" },\n      noInstall: { description: \"Skip pnpm install\" },\n    },\n  },\n  sync: {\n    commandPath: [\"sync\"],\n    summary: \"Sync template files from parent project\",\n    interactive: false,\n    fields: {\n      dryRun: { description: \"Preview changes without writing files\" },\n      noInstall: { description: \"Skip pnpm install\" },\n    },\n  },\n  upgrade: {\n    commandPath: [\"upgrade\"],\n    summary: \"Upgrade framework packages and sync template files\",\n    interactive: true,\n    fields: {\n      dryRun: { description: \"Preview changes without writing\" },\n      noInstall: { description: \"Skip pnpm install\" },\n      noSync: { description: \"Only upgrade packages, skip template sync\" },\n    },\n  },\n  typesGen: {\n    commandPath: [\"types\", \"gen\"],\n    summary: \"Generate type definitions from configured API and plugin contracts\",\n    interactive: false,\n    fields: {\n      env: { description: \"Environment: development (default) or production\" },\n      dryRun: { description: \"Preview what would be fetched without writing files\" },\n      remotePlugins: {\n        description:\n          \"Comma-separated plugin IDs to fetch contract types remotely (e.g. --remote-plugins auth,registry)\",\n      },\n    },\n  },\n  typecheck: {\n    commandPath: [\"typecheck\"],\n    summary: \"Run TypeScript type checking across all local workspaces\",\n    interactive: false,\n    fields: {\n      packages: {\n        positional: true,\n        description: \"Comma-separated workspace list (default: all)\",\n      },\n    },\n  },\n  mfCheck: {\n    commandPath: [\"mf\", \"check\"],\n    summary:\n      \"Verify Module Federation runtime compatibility across published host + plugin bundles\",\n    interactive: false,\n  },\n  dbStudio: {\n    commandPath: [\"db\", \"studio\"],\n    summary: \"Open Drizzle Studio for a plugin's database\",\n    fields: {\n      plugin: {\n        positional: true,\n        description: \"Plugin key: api, auth, or a plugin name (default: api)\",\n      },\n    },\n  },\n  dbDoctor: {\n    commandPath: [\"db\", \"doctor\"],\n    summary: \"Diagnose migration health for a plugin's database\",\n    fields: {\n      plugin: {\n        positional: true,\n        description: \"Plugin key: api, auth, or a plugin name\",\n      },\n    },\n  },\n  dbRepair: {\n    commandPath: [\"db\", \"repair\"],\n    summary: \"Reset migration history and reapply migrations for a plugin\",\n    fields: {\n      plugin: {\n        positional: true,\n        description: \"Plugin key: api, auth, or a plugin name\",\n      },\n      mode: {\n        description: \"Repair mode: history-reset (default) or recreate (not yet supported)\",\n      },\n      yes: {\n        description: \"Skip confirmation prompt\",\n      },\n    },\n  },\n  status: {\n    commandPath: [\"status\"],\n    summary: \"Show project health, versions, and update availability\",\n    interactive: false,\n  },\n  ps: {\n    commandPath: [\"ps\"],\n    summary: \"List tracked development processes\",\n    interactive: false,\n  },\n  logs: {\n    commandPath: [\"logs\"],\n    summary: \"Read dev session logs (.bos/logs/dev-latest.log)\",\n    interactive: false,\n    fields: {\n      service: {\n        description: \"Filter by service name (e.g. host, api, auth, ui, plugin:votes)\",\n      },\n      tail: { description: \"Show only the last N lines\" },\n      follow: { description: \"Stream the log as lines are appended\" },\n    },\n  },\n  kill: {\n    commandPath: [\"kill\"],\n    summary: \"Stop tracked development processes\",\n    interactive: false,\n    fields: {\n      configDir: { description: \"Kill processes owned by a config directory (defaults to cwd)\" },\n      signal: { description: \"Signal: SIGTERM (default) or SIGKILL\" },\n      all: { description: \"Kill processes across all config directories\" },\n    },\n  },\n  infraExport: {\n    commandPath: [\"infra\", \"export\"],\n    summary: \"Emit the resolved CI infra plan (env + services) for the current runtime\",\n    interactive: false,\n    fields: {\n      target: { description: \"Export target: ci (default) or local\" },\n      network: { description: \"NEAR network: mainnet or testnet\" },\n      configDir: { description: \"Override config directory\" },\n    },\n  },\n} as const satisfies Record<string, CliCommandMeta>;\n"],"mappings":";;AAUA,MAAa,iBAAiB;CAC5B,KAAK;EACH,aAAa,CAAC,KAAK;EACnB,SAAS;EACT,aAAa;EACb,aAAa;EACb,QAAQ;GACN,eAAe,EACb,aACE,mFACJ;GACA,UAAU,EACR,aACE,mHACJ;EACF;CACF;CACA,OAAO;EACL,aAAa,CAAC,OAAO;EACrB,SAAS;EACT,aAAa;EACb,aAAa;EACb,QAAQ;GACN,KAAK,EAAE,aAAa,qCAAqC;GACzD,UAAU,EACR,aACE,uGACJ;GACA,YAAY,EACV,aACE,6FACJ;EACF;CACF;CACA,OAAO;EACL,aAAa,CAAC,OAAO;EACrB,SAAS;EACT,aAAa;EACb,QAAQ,EACN,UAAU;GAAE,YAAY;GAAM,aAAa;EAA+B,EAC5E;CACF;CACA,QAAQ;EACN,aAAa,CAAC,QAAQ;EACtB,SAAS;EACT,aAAa;EACb,QAAQ,EACN,MAAM,EAAE,aAAa,yCAAyC,EAChE;CACF;CACA,aAAa;EACX,aAAa,CAAC,YAAY,KAAK;EAC/B,SACE;EACF,aAAa;EACb,QAAQ;GACN,MAAM;IACJ,YAAY;IACZ,aACE;GACJ;GACA,UAAU,EACR,aAAa,gEACf;GACA,QAAQ,EAAE,aAAa,4CAA4C;EACrE;CACF;CACA,WAAW;EACT,aAAa,CAAC,UAAU,KAAK;EAC7B,SAAS;EACT,aAAa;EACb,QAAQ;GACN,QAAQ;IACN,YAAY;IACZ,aAAa;GACf;GACA,IAAI,EAAE,aAAa,eAAe;GAClC,YAAY,EAAE,aAAa,0BAA0B;EACvD;CACF;CACA,cAAc;EACZ,aAAa,CAAC,UAAU,QAAQ;EAChC,SAAS;EACT,aAAa;EACb,QAAQ,EAAE,KAAK;GAAE,YAAY;GAAM,aAAa;EAAa,EAAE;CACjE;CACA,YAAY;EACV,aAAa,CAAC,UAAU,MAAM;EAC9B,SAAS;EACT,aAAa;CACf;CACA,eAAe;EACb,aAAa,CAAC,UAAU,SAAS;EACjC,SAAS;EACT,aAAa;EACb,QAAQ,EAAE,KAAK;GAAE,YAAY;GAAM,aAAa;EAAa,EAAE;CACjE;CACA,SAAS;EACP,aAAa,CAAC,SAAS;EACvB,SACE;EACF,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,aAAa,kDAAkD;GACzE,SAAS,EAAE,aAAa,kDAAkD;GAC1E,KAAK,EAAE,aAAa,qCAAqC;GACzD,SAAS,EAAE,aAAa,mCAAmC;GAC3D,QAAQ,EACN,aACE,8GACJ;GACA,UAAU,EACR,aACE,uGACJ;EACF;CACF;CACA,UAAU;EACR,aAAa,CAAC,UAAU;EACxB,SAAS;EACT,aAAa;EACb,QAAQ;GACN,SAAS,EAAE,aAAa,+DAA+D;GACvF,UAAU,EAAE,aAAa,4DAA4D;GACrF,OAAO,EACL,aACE,uGACJ;GACA,OAAO,EAAE,aAAa,oCAAoC;GAC1D,QAAQ,EAAE,aAAa,0CAA0C;GACjE,KAAK,EAAE,aAAa,qCAAqC;GACzD,SAAS,EAAE,aAAa,mCAAmC;GAC3D,QAAQ,EACN,aACE,8GACJ;GACA,UAAU,EACR,aACE,uGACJ;EACF;CACF;CACA,QAAQ;EACN,aAAa,CAAC,QAAQ;EACtB,SACE;EACF,aAAa;EACb,QAAQ;GACN,KAAK,EAAE,aAAa,qCAAqC;GACzD,OAAO,EAAE,aAAa,6DAA6D;GACnF,QAAQ,EAAE,aAAa,iDAAiD;GACxE,SAAS,EAAE,aAAa,kDAAkD;GAC1E,SAAS,EAAE,aAAa,4CAA4C;GACpE,aAAa,EACX,aACE,+GACJ;GACA,OAAO,EACL,aACE,mHACJ;GACA,UAAU,EACR,aACE,uGACJ;EACF;CACF;CACA,OAAO;EACL,aAAa,CAAC,OAAO;EACrB,SACE;EACF,aAAa;EACb,QAAQ;GACN,OAAO,EAAE,aAAa,uCAAuC;GAC7D,MAAM,EAAE,aAAa,wDAAwD;GAC7E,MAAM,EAAE,aAAa,+CAA+C;GACpE,SAAS,EAAE,aAAa,8DAA8D;EACxF;CACF;CACA,OAAO;EACL,aAAa,CAAC,OAAO;EACrB,SACE;EACF,aAAa;EACb,QAAQ;GACN,KAAK,EAAE,aAAa,gEAAgE;GACpF,MAAM,EAAE,aAAa,+CAA+C;GACpE,QAAQ,EAAE,aAAa,8DAA8D;GACrF,WAAW,EAAE,aAAa,iDAAiD;GAC3E,KAAK,EAAE,aAAa,+CAA+C;EACrE;CACF;CACA,QAAQ;EACN,aAAa,CAAC,QAAQ;EACtB,SAAS;EACT,aAAa;CACf;CACA,YAAY;EACV,aAAa,CAAC,OAAO,UAAU;EAC/B,SAAS;EACT,aAAa;EACb,QAAQ;GACN,KAAK,EAAE,aAAa,qCAAqC;GACzD,WAAW,EAAE,aAAa,4DAA4D;GACtF,eAAe,EACb,aACE,qGACJ;GACA,UAAU,EACR,aACE,uGACJ;EACF;CACF;CACA,MAAM;EACJ,aAAa,CAAC,MAAM;EACpB,SAAS;EACT,aAAa;EACb,QAAQ;GACN,QAAQ;IACN,YAAY;IACZ,aAAa;GACf;GACA,SAAS,EACP,aAAa,wEACf;GACA,SAAS,EAAE,aAAa,uDAAuD;GAC/E,WAAW,EAAE,aAAa,8CAA8C;GACxE,QAAQ,EAAE,aAAa,2CAA2C;GAClE,SAAS,EACP,aAAa,wEACf;GACA,WAAW,EACT,aAAa,qEACf;GACA,OAAO,EACL,aACE,sFACJ;GACA,eAAe,EAAE,aAAa,+BAA+B;GAC7D,WAAW,EAAE,aAAa,oBAAoB;EAChD;CACF;CACA,MAAM;EACJ,aAAa,CAAC,MAAM;EACpB,SAAS;EACT,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,aAAa,wCAAwC;GAC/D,WAAW,EAAE,aAAa,oBAAoB;EAChD;CACF;CACA,SAAS;EACP,aAAa,CAAC,SAAS;EACvB,SAAS;EACT,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,aAAa,kCAAkC;GACzD,WAAW,EAAE,aAAa,oBAAoB;GAC9C,QAAQ,EAAE,aAAa,4CAA4C;EACrE;CACF;CACA,UAAU;EACR,aAAa,CAAC,SAAS,KAAK;EAC5B,SAAS;EACT,aAAa;EACb,QAAQ;GACN,KAAK,EAAE,aAAa,mDAAmD;GACvE,QAAQ,EAAE,aAAa,sDAAsD;GAC7E,eAAe,EACb,aACE,oGACJ;EACF;CACF;CACA,WAAW;EACT,aAAa,CAAC,WAAW;EACzB,SAAS;EACT,aAAa;EACb,QAAQ,EACN,UAAU;GACR,YAAY;GACZ,aAAa;EACf,EACF;CACF;CACA,SAAS;EACP,aAAa,CAAC,MAAM,OAAO;EAC3B,SACE;EACF,aAAa;CACf;CACA,UAAU;EACR,aAAa,CAAC,MAAM,QAAQ;EAC5B,SAAS;EACT,QAAQ,EACN,QAAQ;GACN,YAAY;GACZ,aAAa;EACf,EACF;CACF;CACA,UAAU;EACR,aAAa,CAAC,MAAM,QAAQ;EAC5B,SAAS;EACT,QAAQ,EACN,QAAQ;GACN,YAAY;GACZ,aAAa;EACf,EACF;CACF;CACA,UAAU;EACR,aAAa,CAAC,MAAM,QAAQ;EAC5B,SAAS;EACT,QAAQ;GACN,QAAQ;IACN,YAAY;IACZ,aAAa;GACf;GACA,MAAM,EACJ,aAAa,uEACf;GACA,KAAK,EACH,aAAa,2BACf;EACF;CACF;CACA,QAAQ;EACN,aAAa,CAAC,QAAQ;EACtB,SAAS;EACT,aAAa;CACf;CACA,IAAI;EACF,aAAa,CAAC,IAAI;EAClB,SAAS;EACT,aAAa;CACf;CACA,MAAM;EACJ,aAAa,CAAC,MAAM;EACpB,SAAS;EACT,aAAa;EACb,QAAQ;GACN,SAAS,EACP,aAAa,kEACf;GACA,MAAM,EAAE,aAAa,6BAA6B;GAClD,QAAQ,EAAE,aAAa,uCAAuC;EAChE;CACF;CACA,MAAM;EACJ,aAAa,CAAC,MAAM;EACpB,SAAS;EACT,aAAa;EACb,QAAQ;GACN,WAAW,EAAE,aAAa,+DAA+D;GACzF,QAAQ,EAAE,aAAa,uCAAuC;GAC9D,KAAK,EAAE,aAAa,+CAA+C;EACrE;CACF;CACA,aAAa;EACX,aAAa,CAAC,SAAS,QAAQ;EAC/B,SAAS;EACT,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,aAAa,uCAAuC;GAC9D,SAAS,EAAE,aAAa,mCAAmC;GAC3D,WAAW,EAAE,aAAa,4BAA4B;EACxD;CACF;AACF"}
+{"version":3,"file":"contract.meta.cjs","names":[],"sources":["../src/contract.meta.ts"],"sourcesContent":["export type CliCommandMeta = {\n  commandPath?: string[];\n  summary: string;\n  description?: string;\n  examples?: string[];\n  interactive?: boolean;\n  longRunning?: boolean;\n  fields?: Record<string, { positional?: boolean; description?: string }>;\n};\n\nexport const cliCommandMeta = {\n  dev: {\n    commandPath: [\"dev\"],\n    summary: \"Start a development session\",\n    interactive: true,\n    longRunning: true,\n    fields: {\n      remotePlugins: {\n        description:\n          \"Comma-separated plugin IDs to force remote (e.g. --remote-plugins auth,registry)\",\n      },\n      logLevel: {\n        description:\n          \"Log tail level: error, warn (default), info, or debug (overrides BOS_LOG_LEVEL; the file always gets everything)\",\n      },\n    },\n  },\n  start: {\n    commandPath: [\"start\"],\n    summary: \"Start the production host\",\n    interactive: false,\n    longRunning: true,\n    fields: {\n      env: { description: \"Environment: production or staging\" },\n      registry: {\n        description:\n          \"Override FastKV registry contract account (defaults: dev.everything.near / dev.allthethings.testnet)\",\n      },\n      configPath: {\n        description:\n          \"Boot from a local bos config file — skips FastKV resolution and SRI integrity verification\",\n      },\n    },\n  },\n  build: {\n    commandPath: [\"build\"],\n    summary: \"Build selected workspaces\",\n    interactive: false,\n    fields: {\n      packages: { positional: true, description: \"Comma-separated package list\" },\n    },\n  },\n  config: {\n    commandPath: [\"config\"],\n    summary: \"Print the loaded BOS configuration\",\n    interactive: false,\n    fields: {\n      full: { description: \"Print the fully resolved configuration\" },\n    },\n  },\n  registryUse: {\n    commandPath: [\"registry\", \"use\"],\n    summary:\n      \"Compose app.ui/app.host/app.api/plugins.<key> sections from a published runtime into bos.config.json\",\n    interactive: false,\n    fields: {\n      from: {\n        positional: true,\n        description:\n          \"Published runtime (account/gateway or bos:// URL), e.g. v1.citynode.near/citynode.app\",\n      },\n      sections: {\n        description: \"Comma-separated sections to compose, e.g. app.ui,plugins.apps\",\n      },\n      dryRun: { description: \"Preview the merged config without writing\" },\n    },\n  },\n  pluginAdd: {\n    commandPath: [\"plugin\", \"add\"],\n    summary: \"Add a plugin attachment\",\n    interactive: false,\n    fields: {\n      source: {\n        positional: true,\n        description: \"Plugin source (local:path, bos://account/domain, or URL)\",\n      },\n      as: { description: \"Plugin alias\" },\n      production: { description: \"Production URL override\" },\n    },\n  },\n  pluginRemove: {\n    commandPath: [\"plugin\", \"remove\"],\n    summary: \"Remove a plugin attachment\",\n    interactive: false,\n    fields: { key: { positional: true, description: \"Plugin key\" } },\n  },\n  pluginList: {\n    commandPath: [\"plugin\", \"list\"],\n    summary: \"List configured plugins\",\n    interactive: false,\n  },\n  pluginPublish: {\n    commandPath: [\"plugin\", \"publish\"],\n    summary: \"Publish a single plugin\",\n    interactive: false,\n    fields: { key: { positional: true, description: \"Plugin key\" } },\n  },\n  publish: {\n    commandPath: [\"publish\"],\n    summary:\n      \"Publish the current workspace configuration (no build — use bos deploy for the full train)\",\n    interactive: false,\n    fields: {\n      dryRun: { description: \"Preview what would be published without writing\" },\n      verbose: { description: \"Show full build output instead of clean summary\" },\n      env: { description: \"Environment: production or staging\" },\n      network: { description: \"NEAR network: mainnet or testnet\" },\n      wallet: {\n        description:\n          \"Publish gaslessly with a one-time wallet approval (NEP-366 delegate action relayed by the platform relayer)\",\n      },\n      registry: {\n        description:\n          \"Override FastKV registry contract account (defaults: dev.everything.near / dev.allthethings.testnet)\",\n      },\n    },\n  },\n  rollback: {\n    commandPath: [\"rollback\"],\n    summary: \"Republish an earlier config snapshot from the registry publish history\",\n    interactive: true,\n    fields: {\n      version: { description: \"Block height (or timestamp) of the snapshot from the listing\" },\n      previous: { description: \"Roll back to the write immediately before the current one\" },\n      force: {\n        description:\n          \"Allow pre-Phase-A snapshots without verifiable manifest pins (their bytes were overwritten in place)\",\n      },\n      limit: { description: \"Listing depth (1-200, default 20)\" },\n      dryRun: { description: \"Preview the rollback without publishing\" },\n      env: { description: \"Environment: production or staging\" },\n      network: { description: \"NEAR network: mainnet or testnet\" },\n      wallet: {\n        description:\n          \"Publish gaslessly with a one-time wallet approval (NEP-366 delegate action relayed by the platform relayer)\",\n      },\n      registry: {\n        description:\n          \"Override FastKV registry contract account (defaults: dev.everything.near / dev.allthethings.testnet)\",\n      },\n    },\n  },\n  deploy: {\n    commandPath: [\"deploy\"],\n    summary:\n      \"Deploy train: preflight → build → upload bundles → publish config → runtime image (pre-pushed digest or local docker build) → post-publish smoke (optional) → Railway (image-backed, no build)\",\n    interactive: false,\n    fields: {\n      env: { description: \"Environment: production or staging\" },\n      build: { description: \"Build and deploy workspaces before publish (default: true)\" },\n      dryRun: { description: \"Preview what would be deployed without writing\" },\n      verbose: { description: \"Show full build output instead of clean summary\" },\n      service: { description: \"Override Railway service name from config\" },\n      imageDigest: {\n        description:\n          \"Digest of a pre-pushed runtime image (sha256:…) — skips the local image build/push; Railway pins this digest\",\n      },\n      smoke: {\n        description:\n          \"Gate the Railway promotion on a post-publish boot smoke of the runtime image — a red smoke rolls the config back\",\n      },\n      registry: {\n        description:\n          \"Override FastKV registry contract account (defaults: dev.everything.near / dev.allthethings.testnet)\",\n      },\n    },\n  },\n  smoke: {\n    commandPath: [\"smoke\"],\n    summary:\n      \"Boot a runtime image the way production boots (identity-driven, published config) and assert the boot surface: /health, SSR, OpenAPI spec, in-image mf check\",\n    interactive: false,\n    fields: {\n      image: { description: \"Runtime image ref to boot (required)\" },\n      port: { description: \"Host port to publish the container on (default: 3000)\" },\n      keep: { description: \"Keep the container after the run (debugging)\" },\n      account: { description: \"Registry identity — defaults to the resolved session config\" },\n    },\n  },\n  login: {\n    commandPath: [\"login\"],\n    summary:\n      \"Sign in with your NEAR account via the hosted site (wallet, passkey, or social login)\",\n    interactive: true,\n    fields: {\n      key: { description: \"Also mint and export a scoped publish key for headless/CI use\" },\n      site: { description: \"Override site URL hosting the CLI login page\" },\n      device: { description: \"Device label recorded on the credential (default: hostname)\" },\n      expiresIn: { description: \"Session lifetime in seconds (default: 90 days)\" },\n      env: { description: \"Environment: production (default) or staging\" },\n    },\n  },\n  logout: {\n    commandPath: [\"logout\"],\n    summary: \"Revoke the stored CLI session and delete the exported publish key\",\n    interactive: false,\n  },\n  keyPublish: {\n    commandPath: [\"key\", \"generate\"],\n    summary: \"Generate a publish access key\",\n    interactive: true,\n    fields: {\n      env: { description: \"Environment: production or staging\" },\n      allowance: { description: \"NEAR allowance for the key (default: 1NEAR, min: 0.3NEAR)\" },\n      removeOldKeys: {\n        description:\n          \"Remove existing publish key(s) without prompting (default: ask on a TTY, defaulting to keep; keep when non-interactive — pass --remove-old-keys to remove)\",\n      },\n      registry: {\n        description:\n          \"Override FastKV registry contract account (defaults: dev.everything.near / dev.allthethings.testnet)\",\n      },\n    },\n  },\n  init: {\n    commandPath: [\"init\"],\n    summary: \"Scaffold a new project by extending a deployed app or template\",\n    interactive: true,\n    fields: {\n      domain: {\n        positional: true,\n        description: \"New project domain (e.g. myapp.everything.dev)\",\n      },\n      extends: {\n        description: \"Parent to extend from (e.g. bos://account/gateway or account/gateway)\",\n      },\n      account: { description: \"New project NEAR account (auto-derived from extends)\" },\n      directory: { description: \"Target directory (auto-derived from domain)\" },\n      source: { description: \"Local source dir (skips GitHub download)\" },\n      plugins: {\n        description: \"Comma-separated plugin keys to include (requires --overrides=plugins)\",\n      },\n      overrides: {\n        description: \"Comma-separated sections to customize locally: ui,api,host,plugins\",\n      },\n      level: {\n        description:\n          \"Starter complexity: simple (public shell) or advanced (adds dashboard, orgs, admin)\",\n      },\n      noInteractive: { description: \"Skip prompts, use flags only\" },\n      noInstall: { description: \"Skip pnpm install\" },\n    },\n  },\n  sync: {\n    commandPath: [\"sync\"],\n    summary: \"Sync template files from parent project\",\n    interactive: false,\n    fields: {\n      dryRun: { description: \"Preview changes without writing files\" },\n      noInstall: { description: \"Skip pnpm install\" },\n    },\n  },\n  upgrade: {\n    commandPath: [\"upgrade\"],\n    summary: \"Upgrade framework packages and sync template files\",\n    interactive: true,\n    fields: {\n      dryRun: { description: \"Preview changes without writing\" },\n      noInstall: { description: \"Skip pnpm install\" },\n      noSync: { description: \"Only upgrade packages, skip template sync\" },\n    },\n  },\n  typesGen: {\n    commandPath: [\"types\", \"gen\"],\n    summary: \"Generate type definitions from configured API and plugin contracts\",\n    interactive: false,\n    fields: {\n      env: { description: \"Environment: development (default) or production\" },\n      dryRun: { description: \"Preview what would be fetched without writing files\" },\n      remotePlugins: {\n        description:\n          \"Comma-separated plugin IDs to fetch contract types remotely (e.g. --remote-plugins auth,registry)\",\n      },\n    },\n  },\n  typecheck: {\n    commandPath: [\"typecheck\"],\n    summary: \"Run TypeScript type checking across all local workspaces\",\n    interactive: false,\n    fields: {\n      packages: {\n        positional: true,\n        description: \"Comma-separated workspace list (default: all)\",\n      },\n    },\n  },\n  mfCheck: {\n    commandPath: [\"mf\", \"check\"],\n    summary:\n      \"Verify Module Federation runtime compatibility across published host + plugin bundles\",\n    interactive: false,\n  },\n  dbStudio: {\n    commandPath: [\"db\", \"studio\"],\n    summary: \"Open Drizzle Studio for a plugin's database\",\n    fields: {\n      plugin: {\n        positional: true,\n        description: \"Plugin key: api, auth, or a plugin name (default: api)\",\n      },\n    },\n  },\n  dbDoctor: {\n    commandPath: [\"db\", \"doctor\"],\n    summary: \"Diagnose migration health for a plugin's database\",\n    fields: {\n      plugin: {\n        positional: true,\n        description: \"Plugin key: api, auth, or a plugin name\",\n      },\n    },\n  },\n  dbRepair: {\n    commandPath: [\"db\", \"repair\"],\n    summary: \"Reset migration history and reapply migrations for a plugin\",\n    fields: {\n      plugin: {\n        positional: true,\n        description: \"Plugin key: api, auth, or a plugin name\",\n      },\n      mode: {\n        description: \"Repair mode: history-reset (default) or recreate (not yet supported)\",\n      },\n      yes: {\n        description: \"Skip confirmation prompt\",\n      },\n    },\n  },\n  status: {\n    commandPath: [\"status\"],\n    summary: \"Show project health, versions, and update availability\",\n    interactive: false,\n  },\n  ps: {\n    commandPath: [\"ps\"],\n    summary: \"List tracked development processes\",\n    interactive: false,\n  },\n  logs: {\n    commandPath: [\"logs\"],\n    summary: \"Read dev session logs (.bos/logs/dev-latest.log)\",\n    interactive: false,\n    fields: {\n      service: {\n        description: \"Filter by service name (e.g. host, api, auth, ui, plugin:votes)\",\n      },\n      tail: { description: \"Show only the last N lines\" },\n      follow: { description: \"Stream the log as lines are appended\" },\n    },\n  },\n  kill: {\n    commandPath: [\"kill\"],\n    summary: \"Stop tracked development processes\",\n    interactive: false,\n    fields: {\n      configDir: { description: \"Kill processes owned by a config directory (defaults to cwd)\" },\n      signal: { description: \"Signal: SIGTERM (default) or SIGKILL\" },\n      all: { description: \"Kill processes across all config directories\" },\n    },\n  },\n  infraExport: {\n    commandPath: [\"infra\", \"export\"],\n    summary: \"Emit the resolved CI infra plan (env + services) for the current runtime\",\n    interactive: false,\n    fields: {\n      target: { description: \"Export target: ci (default) or local\" },\n      network: { description: \"NEAR network: mainnet or testnet\" },\n      configDir: { description: \"Override config directory\" },\n    },\n  },\n} as const satisfies Record<string, CliCommandMeta>;\n"],"mappings":";;AAUA,MAAa,iBAAiB;CAC5B,KAAK;EACH,aAAa,CAAC,KAAK;EACnB,SAAS;EACT,aAAa;EACb,aAAa;EACb,QAAQ;GACN,eAAe,EACb,aACE,mFACJ;GACA,UAAU,EACR,aACE,mHACJ;EACF;CACF;CACA,OAAO;EACL,aAAa,CAAC,OAAO;EACrB,SAAS;EACT,aAAa;EACb,aAAa;EACb,QAAQ;GACN,KAAK,EAAE,aAAa,qCAAqC;GACzD,UAAU,EACR,aACE,uGACJ;GACA,YAAY,EACV,aACE,6FACJ;EACF;CACF;CACA,OAAO;EACL,aAAa,CAAC,OAAO;EACrB,SAAS;EACT,aAAa;EACb,QAAQ,EACN,UAAU;GAAE,YAAY;GAAM,aAAa;EAA+B,EAC5E;CACF;CACA,QAAQ;EACN,aAAa,CAAC,QAAQ;EACtB,SAAS;EACT,aAAa;EACb,QAAQ,EACN,MAAM,EAAE,aAAa,yCAAyC,EAChE;CACF;CACA,aAAa;EACX,aAAa,CAAC,YAAY,KAAK;EAC/B,SACE;EACF,aAAa;EACb,QAAQ;GACN,MAAM;IACJ,YAAY;IACZ,aACE;GACJ;GACA,UAAU,EACR,aAAa,gEACf;GACA,QAAQ,EAAE,aAAa,4CAA4C;EACrE;CACF;CACA,WAAW;EACT,aAAa,CAAC,UAAU,KAAK;EAC7B,SAAS;EACT,aAAa;EACb,QAAQ;GACN,QAAQ;IACN,YAAY;IACZ,aAAa;GACf;GACA,IAAI,EAAE,aAAa,eAAe;GAClC,YAAY,EAAE,aAAa,0BAA0B;EACvD;CACF;CACA,cAAc;EACZ,aAAa,CAAC,UAAU,QAAQ;EAChC,SAAS;EACT,aAAa;EACb,QAAQ,EAAE,KAAK;GAAE,YAAY;GAAM,aAAa;EAAa,EAAE;CACjE;CACA,YAAY;EACV,aAAa,CAAC,UAAU,MAAM;EAC9B,SAAS;EACT,aAAa;CACf;CACA,eAAe;EACb,aAAa,CAAC,UAAU,SAAS;EACjC,SAAS;EACT,aAAa;EACb,QAAQ,EAAE,KAAK;GAAE,YAAY;GAAM,aAAa;EAAa,EAAE;CACjE;CACA,SAAS;EACP,aAAa,CAAC,SAAS;EACvB,SACE;EACF,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,aAAa,kDAAkD;GACzE,SAAS,EAAE,aAAa,kDAAkD;GAC1E,KAAK,EAAE,aAAa,qCAAqC;GACzD,SAAS,EAAE,aAAa,mCAAmC;GAC3D,QAAQ,EACN,aACE,8GACJ;GACA,UAAU,EACR,aACE,uGACJ;EACF;CACF;CACA,UAAU;EACR,aAAa,CAAC,UAAU;EACxB,SAAS;EACT,aAAa;EACb,QAAQ;GACN,SAAS,EAAE,aAAa,+DAA+D;GACvF,UAAU,EAAE,aAAa,4DAA4D;GACrF,OAAO,EACL,aACE,uGACJ;GACA,OAAO,EAAE,aAAa,oCAAoC;GAC1D,QAAQ,EAAE,aAAa,0CAA0C;GACjE,KAAK,EAAE,aAAa,qCAAqC;GACzD,SAAS,EAAE,aAAa,mCAAmC;GAC3D,QAAQ,EACN,aACE,8GACJ;GACA,UAAU,EACR,aACE,uGACJ;EACF;CACF;CACA,QAAQ;EACN,aAAa,CAAC,QAAQ;EACtB,SACE;EACF,aAAa;EACb,QAAQ;GACN,KAAK,EAAE,aAAa,qCAAqC;GACzD,OAAO,EAAE,aAAa,6DAA6D;GACnF,QAAQ,EAAE,aAAa,iDAAiD;GACxE,SAAS,EAAE,aAAa,kDAAkD;GAC1E,SAAS,EAAE,aAAa,4CAA4C;GACpE,aAAa,EACX,aACE,+GACJ;GACA,OAAO,EACL,aACE,mHACJ;GACA,UAAU,EACR,aACE,uGACJ;EACF;CACF;CACA,OAAO;EACL,aAAa,CAAC,OAAO;EACrB,SACE;EACF,aAAa;EACb,QAAQ;GACN,OAAO,EAAE,aAAa,uCAAuC;GAC7D,MAAM,EAAE,aAAa,wDAAwD;GAC7E,MAAM,EAAE,aAAa,+CAA+C;GACpE,SAAS,EAAE,aAAa,8DAA8D;EACxF;CACF;CACA,OAAO;EACL,aAAa,CAAC,OAAO;EACrB,SACE;EACF,aAAa;EACb,QAAQ;GACN,KAAK,EAAE,aAAa,gEAAgE;GACpF,MAAM,EAAE,aAAa,+CAA+C;GACpE,QAAQ,EAAE,aAAa,8DAA8D;GACrF,WAAW,EAAE,aAAa,iDAAiD;GAC3E,KAAK,EAAE,aAAa,+CAA+C;EACrE;CACF;CACA,QAAQ;EACN,aAAa,CAAC,QAAQ;EACtB,SAAS;EACT,aAAa;CACf;CACA,YAAY;EACV,aAAa,CAAC,OAAO,UAAU;EAC/B,SAAS;EACT,aAAa;EACb,QAAQ;GACN,KAAK,EAAE,aAAa,qCAAqC;GACzD,WAAW,EAAE,aAAa,4DAA4D;GACtF,eAAe,EACb,aACE,6JACJ;GACA,UAAU,EACR,aACE,uGACJ;EACF;CACF;CACA,MAAM;EACJ,aAAa,CAAC,MAAM;EACpB,SAAS;EACT,aAAa;EACb,QAAQ;GACN,QAAQ;IACN,YAAY;IACZ,aAAa;GACf;GACA,SAAS,EACP,aAAa,wEACf;GACA,SAAS,EAAE,aAAa,uDAAuD;GAC/E,WAAW,EAAE,aAAa,8CAA8C;GACxE,QAAQ,EAAE,aAAa,2CAA2C;GAClE,SAAS,EACP,aAAa,wEACf;GACA,WAAW,EACT,aAAa,qEACf;GACA,OAAO,EACL,aACE,sFACJ;GACA,eAAe,EAAE,aAAa,+BAA+B;GAC7D,WAAW,EAAE,aAAa,oBAAoB;EAChD;CACF;CACA,MAAM;EACJ,aAAa,CAAC,MAAM;EACpB,SAAS;EACT,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,aAAa,wCAAwC;GAC/D,WAAW,EAAE,aAAa,oBAAoB;EAChD;CACF;CACA,SAAS;EACP,aAAa,CAAC,SAAS;EACvB,SAAS;EACT,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,aAAa,kCAAkC;GACzD,WAAW,EAAE,aAAa,oBAAoB;GAC9C,QAAQ,EAAE,aAAa,4CAA4C;EACrE;CACF;CACA,UAAU;EACR,aAAa,CAAC,SAAS,KAAK;EAC5B,SAAS;EACT,aAAa;EACb,QAAQ;GACN,KAAK,EAAE,aAAa,mDAAmD;GACvE,QAAQ,EAAE,aAAa,sDAAsD;GAC7E,eAAe,EACb,aACE,oGACJ;EACF;CACF;CACA,WAAW;EACT,aAAa,CAAC,WAAW;EACzB,SAAS;EACT,aAAa;EACb,QAAQ,EACN,UAAU;GACR,YAAY;GACZ,aAAa;EACf,EACF;CACF;CACA,SAAS;EACP,aAAa,CAAC,MAAM,OAAO;EAC3B,SACE;EACF,aAAa;CACf;CACA,UAAU;EACR,aAAa,CAAC,MAAM,QAAQ;EAC5B,SAAS;EACT,QAAQ,EACN,QAAQ;GACN,YAAY;GACZ,aAAa;EACf,EACF;CACF;CACA,UAAU;EACR,aAAa,CAAC,MAAM,QAAQ;EAC5B,SAAS;EACT,QAAQ,EACN,QAAQ;GACN,YAAY;GACZ,aAAa;EACf,EACF;CACF;CACA,UAAU;EACR,aAAa,CAAC,MAAM,QAAQ;EAC5B,SAAS;EACT,QAAQ;GACN,QAAQ;IACN,YAAY;IACZ,aAAa;GACf;GACA,MAAM,EACJ,aAAa,uEACf;GACA,KAAK,EACH,aAAa,2BACf;EACF;CACF;CACA,QAAQ;EACN,aAAa,CAAC,QAAQ;EACtB,SAAS;EACT,aAAa;CACf;CACA,IAAI;EACF,aAAa,CAAC,IAAI;EAClB,SAAS;EACT,aAAa;CACf;CACA,MAAM;EACJ,aAAa,CAAC,MAAM;EACpB,SAAS;EACT,aAAa;EACb,QAAQ;GACN,SAAS,EACP,aAAa,kEACf;GACA,MAAM,EAAE,aAAa,6BAA6B;GAClD,QAAQ,EAAE,aAAa,uCAAuC;EAChE;CACF;CACA,MAAM;EACJ,aAAa,CAAC,MAAM;EACpB,SAAS;EACT,aAAa;EACb,QAAQ;GACN,WAAW,EAAE,aAAa,+DAA+D;GACzF,QAAQ,EAAE,aAAa,uCAAuC;GAC9D,KAAK,EAAE,aAAa,+CAA+C;EACrE;CACF;CACA,aAAa;EACX,aAAa,CAAC,SAAS,QAAQ;EAC/B,SAAS;EACT,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,aAAa,uCAAuC;GAC9D,SAAS,EAAE,aAAa,mCAAmC;GAC3D,WAAW,EAAE,aAAa,4BAA4B;EACxD;CACF;AACF"}

package/dist/contract.meta.d.cts

@@ -273,7 +273,7 @@ declare const cliCommandMeta: {
         readonly description: "NEAR allowance for the key (default: 1NEAR, min: 0.3NEAR)";
       };
       readonly removeOldKeys: {
-        readonly description: "Remove existing publish key(s) without prompting (default: ask on a TTY, yes when non-interactive)";
+        readonly description: "Remove existing publish key(s) without prompting (default: ask on a TTY, defaulting to keep; keep when non-interactive — pass --remove-old-keys to remove)";
       };
       readonly registry: {
         readonly description: "Override FastKV registry contract account (defaults: dev.everything.near / dev.allthethings.testnet)";

package/dist/contract.meta.d.mts

@@ -273,7 +273,7 @@ declare const cliCommandMeta: {
         readonly description: "NEAR allowance for the key (default: 1NEAR, min: 0.3NEAR)";
       };
       readonly removeOldKeys: {
-        readonly description: "Remove existing publish key(s) without prompting (default: ask on a TTY, yes when non-interactive)";
+        readonly description: "Remove existing publish key(s) without prompting (default: ask on a TTY, defaulting to keep; keep when non-interactive — pass --remove-old-keys to remove)";
       };
       readonly registry: {
         readonly description: "Override FastKV registry contract account (defaults: dev.everything.near / dev.allthethings.testnet)";

package/dist/contract.meta.mjs

@@ -164,7 +164,7 @@ const cliCommandMeta = {
 		fields: {
 			env: { description: "Environment: production or staging" },
 			allowance: { description: "NEAR allowance for the key (default: 1NEAR, min: 0.3NEAR)" },
-			removeOldKeys: { description: "Remove existing publish key(s) without prompting (default: ask on a TTY, yes when non-interactive)" },
+			removeOldKeys: { description: "Remove existing publish key(s) without prompting (default: ask on a TTY, defaulting to keep; keep when non-interactive — pass --remove-old-keys to remove)" },
 			registry: { description: "Override FastKV registry contract account (defaults: dev.everything.near / dev.allthethings.testnet)" }
 		}
 	},

package/dist/contract.meta.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"contract.meta.mjs","names":[],"sources":["../src/contract.meta.ts"],"sourcesContent":["export type CliCommandMeta = {\n  commandPath?: string[];\n  summary: string;\n  description?: string;\n  examples?: string[];\n  interactive?: boolean;\n  longRunning?: boolean;\n  fields?: Record<string, { positional?: boolean; description?: string }>;\n};\n\nexport const cliCommandMeta = {\n  dev: {\n    commandPath: [\"dev\"],\n    summary: \"Start a development session\",\n    interactive: true,\n    longRunning: true,\n    fields: {\n      remotePlugins: {\n        description:\n          \"Comma-separated plugin IDs to force remote (e.g. --remote-plugins auth,registry)\",\n      },\n      logLevel: {\n        description:\n          \"Log tail level: error, warn (default), info, or debug (overrides BOS_LOG_LEVEL; the file always gets everything)\",\n      },\n    },\n  },\n  start: {\n    commandPath: [\"start\"],\n    summary: \"Start the production host\",\n    interactive: false,\n    longRunning: true,\n    fields: {\n      env: { description: \"Environment: production or staging\" },\n      registry: {\n        description:\n          \"Override FastKV registry contract account (defaults: dev.everything.near / dev.allthethings.testnet)\",\n      },\n      configPath: {\n        description:\n          \"Boot from a local bos config file — skips FastKV resolution and SRI integrity verification\",\n      },\n    },\n  },\n  build: {\n    commandPath: [\"build\"],\n    summary: \"Build selected workspaces\",\n    interactive: false,\n    fields: {\n      packages: { positional: true, description: \"Comma-separated package list\" },\n    },\n  },\n  config: {\n    commandPath: [\"config\"],\n    summary: \"Print the loaded BOS configuration\",\n    interactive: false,\n    fields: {\n      full: { description: \"Print the fully resolved configuration\" },\n    },\n  },\n  registryUse: {\n    commandPath: [\"registry\", \"use\"],\n    summary:\n      \"Compose app.ui/app.host/app.api/plugins.<key> sections from a published runtime into bos.config.json\",\n    interactive: false,\n    fields: {\n      from: {\n        positional: true,\n        description:\n          \"Published runtime (account/gateway or bos:// URL), e.g. v1.citynode.near/citynode.app\",\n      },\n      sections: {\n        description: \"Comma-separated sections to compose, e.g. app.ui,plugins.apps\",\n      },\n      dryRun: { description: \"Preview the merged config without writing\" },\n    },\n  },\n  pluginAdd: {\n    commandPath: [\"plugin\", \"add\"],\n    summary: \"Add a plugin attachment\",\n    interactive: false,\n    fields: {\n      source: {\n        positional: true,\n        description: \"Plugin source (local:path, bos://account/domain, or URL)\",\n      },\n      as: { description: \"Plugin alias\" },\n      production: { description: \"Production URL override\" },\n    },\n  },\n  pluginRemove: {\n    commandPath: [\"plugin\", \"remove\"],\n    summary: \"Remove a plugin attachment\",\n    interactive: false,\n    fields: { key: { positional: true, description: \"Plugin key\" } },\n  },\n  pluginList: {\n    commandPath: [\"plugin\", \"list\"],\n    summary: \"List configured plugins\",\n    interactive: false,\n  },\n  pluginPublish: {\n    commandPath: [\"plugin\", \"publish\"],\n    summary: \"Publish a single plugin\",\n    interactive: false,\n    fields: { key: { positional: true, description: \"Plugin key\" } },\n  },\n  publish: {\n    commandPath: [\"publish\"],\n    summary:\n      \"Publish the current workspace configuration (no build — use bos deploy for the full train)\",\n    interactive: false,\n    fields: {\n      dryRun: { description: \"Preview what would be published without writing\" },\n      verbose: { description: \"Show full build output instead of clean summary\" },\n      env: { description: \"Environment: production or staging\" },\n      network: { description: \"NEAR network: mainnet or testnet\" },\n      wallet: {\n        description:\n          \"Publish gaslessly with a one-time wallet approval (NEP-366 delegate action relayed by the platform relayer)\",\n      },\n      registry: {\n        description:\n          \"Override FastKV registry contract account (defaults: dev.everything.near / dev.allthethings.testnet)\",\n      },\n    },\n  },\n  rollback: {\n    commandPath: [\"rollback\"],\n    summary: \"Republish an earlier config snapshot from the registry publish history\",\n    interactive: true,\n    fields: {\n      version: { description: \"Block height (or timestamp) of the snapshot from the listing\" },\n      previous: { description: \"Roll back to the write immediately before the current one\" },\n      force: {\n        description:\n          \"Allow pre-Phase-A snapshots without verifiable manifest pins (their bytes were overwritten in place)\",\n      },\n      limit: { description: \"Listing depth (1-200, default 20)\" },\n      dryRun: { description: \"Preview the rollback without publishing\" },\n      env: { description: \"Environment: production or staging\" },\n      network: { description: \"NEAR network: mainnet or testnet\" },\n      wallet: {\n        description:\n          \"Publish gaslessly with a one-time wallet approval (NEP-366 delegate action relayed by the platform relayer)\",\n      },\n      registry: {\n        description:\n          \"Override FastKV registry contract account (defaults: dev.everything.near / dev.allthethings.testnet)\",\n      },\n    },\n  },\n  deploy: {\n    commandPath: [\"deploy\"],\n    summary:\n      \"Deploy train: preflight → build → upload bundles → publish config → runtime image (pre-pushed digest or local docker build) → post-publish smoke (optional) → Railway (image-backed, no build)\",\n    interactive: false,\n    fields: {\n      env: { description: \"Environment: production or staging\" },\n      build: { description: \"Build and deploy workspaces before publish (default: true)\" },\n      dryRun: { description: \"Preview what would be deployed without writing\" },\n      verbose: { description: \"Show full build output instead of clean summary\" },\n      service: { description: \"Override Railway service name from config\" },\n      imageDigest: {\n        description:\n          \"Digest of a pre-pushed runtime image (sha256:…) — skips the local image build/push; Railway pins this digest\",\n      },\n      smoke: {\n        description:\n          \"Gate the Railway promotion on a post-publish boot smoke of the runtime image — a red smoke rolls the config back\",\n      },\n      registry: {\n        description:\n          \"Override FastKV registry contract account (defaults: dev.everything.near / dev.allthethings.testnet)\",\n      },\n    },\n  },\n  smoke: {\n    commandPath: [\"smoke\"],\n    summary:\n      \"Boot a runtime image the way production boots (identity-driven, published config) and assert the boot surface: /health, SSR, OpenAPI spec, in-image mf check\",\n    interactive: false,\n    fields: {\n      image: { description: \"Runtime image ref to boot (required)\" },\n      port: { description: \"Host port to publish the container on (default: 3000)\" },\n      keep: { description: \"Keep the container after the run (debugging)\" },\n      account: { description: \"Registry identity — defaults to the resolved session config\" },\n    },\n  },\n  login: {\n    commandPath: [\"login\"],\n    summary:\n      \"Sign in with your NEAR account via the hosted site (wallet, passkey, or social login)\",\n    interactive: true,\n    fields: {\n      key: { description: \"Also mint and export a scoped publish key for headless/CI use\" },\n      site: { description: \"Override site URL hosting the CLI login page\" },\n      device: { description: \"Device label recorded on the credential (default: hostname)\" },\n      expiresIn: { description: \"Session lifetime in seconds (default: 90 days)\" },\n      env: { description: \"Environment: production (default) or staging\" },\n    },\n  },\n  logout: {\n    commandPath: [\"logout\"],\n    summary: \"Revoke the stored CLI session and delete the exported publish key\",\n    interactive: false,\n  },\n  keyPublish: {\n    commandPath: [\"key\", \"generate\"],\n    summary: \"Generate a publish access key\",\n    interactive: true,\n    fields: {\n      env: { description: \"Environment: production or staging\" },\n      allowance: { description: \"NEAR allowance for the key (default: 1NEAR, min: 0.3NEAR)\" },\n      removeOldKeys: {\n        description:\n          \"Remove existing publish key(s) without prompting (default: ask on a TTY, yes when non-interactive)\",\n      },\n      registry: {\n        description:\n          \"Override FastKV registry contract account (defaults: dev.everything.near / dev.allthethings.testnet)\",\n      },\n    },\n  },\n  init: {\n    commandPath: [\"init\"],\n    summary: \"Scaffold a new project by extending a deployed app or template\",\n    interactive: true,\n    fields: {\n      domain: {\n        positional: true,\n        description: \"New project domain (e.g. myapp.everything.dev)\",\n      },\n      extends: {\n        description: \"Parent to extend from (e.g. bos://account/gateway or account/gateway)\",\n      },\n      account: { description: \"New project NEAR account (auto-derived from extends)\" },\n      directory: { description: \"Target directory (auto-derived from domain)\" },\n      source: { description: \"Local source dir (skips GitHub download)\" },\n      plugins: {\n        description: \"Comma-separated plugin keys to include (requires --overrides=plugins)\",\n      },\n      overrides: {\n        description: \"Comma-separated sections to customize locally: ui,api,host,plugins\",\n      },\n      level: {\n        description:\n          \"Starter complexity: simple (public shell) or advanced (adds dashboard, orgs, admin)\",\n      },\n      noInteractive: { description: \"Skip prompts, use flags only\" },\n      noInstall: { description: \"Skip pnpm install\" },\n    },\n  },\n  sync: {\n    commandPath: [\"sync\"],\n    summary: \"Sync template files from parent project\",\n    interactive: false,\n    fields: {\n      dryRun: { description: \"Preview changes without writing files\" },\n      noInstall: { description: \"Skip pnpm install\" },\n    },\n  },\n  upgrade: {\n    commandPath: [\"upgrade\"],\n    summary: \"Upgrade framework packages and sync template files\",\n    interactive: true,\n    fields: {\n      dryRun: { description: \"Preview changes without writing\" },\n      noInstall: { description: \"Skip pnpm install\" },\n      noSync: { description: \"Only upgrade packages, skip template sync\" },\n    },\n  },\n  typesGen: {\n    commandPath: [\"types\", \"gen\"],\n    summary: \"Generate type definitions from configured API and plugin contracts\",\n    interactive: false,\n    fields: {\n      env: { description: \"Environment: development (default) or production\" },\n      dryRun: { description: \"Preview what would be fetched without writing files\" },\n      remotePlugins: {\n        description:\n          \"Comma-separated plugin IDs to fetch contract types remotely (e.g. --remote-plugins auth,registry)\",\n      },\n    },\n  },\n  typecheck: {\n    commandPath: [\"typecheck\"],\n    summary: \"Run TypeScript type checking across all local workspaces\",\n    interactive: false,\n    fields: {\n      packages: {\n        positional: true,\n        description: \"Comma-separated workspace list (default: all)\",\n      },\n    },\n  },\n  mfCheck: {\n    commandPath: [\"mf\", \"check\"],\n    summary:\n      \"Verify Module Federation runtime compatibility across published host + plugin bundles\",\n    interactive: false,\n  },\n  dbStudio: {\n    commandPath: [\"db\", \"studio\"],\n    summary: \"Open Drizzle Studio for a plugin's database\",\n    fields: {\n      plugin: {\n        positional: true,\n        description: \"Plugin key: api, auth, or a plugin name (default: api)\",\n      },\n    },\n  },\n  dbDoctor: {\n    commandPath: [\"db\", \"doctor\"],\n    summary: \"Diagnose migration health for a plugin's database\",\n    fields: {\n      plugin: {\n        positional: true,\n        description: \"Plugin key: api, auth, or a plugin name\",\n      },\n    },\n  },\n  dbRepair: {\n    commandPath: [\"db\", \"repair\"],\n    summary: \"Reset migration history and reapply migrations for a plugin\",\n    fields: {\n      plugin: {\n        positional: true,\n        description: \"Plugin key: api, auth, or a plugin name\",\n      },\n      mode: {\n        description: \"Repair mode: history-reset (default) or recreate (not yet supported)\",\n      },\n      yes: {\n        description: \"Skip confirmation prompt\",\n      },\n    },\n  },\n  status: {\n    commandPath: [\"status\"],\n    summary: \"Show project health, versions, and update availability\",\n    interactive: false,\n  },\n  ps: {\n    commandPath: [\"ps\"],\n    summary: \"List tracked development processes\",\n    interactive: false,\n  },\n  logs: {\n    commandPath: [\"logs\"],\n    summary: \"Read dev session logs (.bos/logs/dev-latest.log)\",\n    interactive: false,\n    fields: {\n      service: {\n        description: \"Filter by service name (e.g. host, api, auth, ui, plugin:votes)\",\n      },\n      tail: { description: \"Show only the last N lines\" },\n      follow: { description: \"Stream the log as lines are appended\" },\n    },\n  },\n  kill: {\n    commandPath: [\"kill\"],\n    summary: \"Stop tracked development processes\",\n    interactive: false,\n    fields: {\n      configDir: { description: \"Kill processes owned by a config directory (defaults to cwd)\" },\n      signal: { description: \"Signal: SIGTERM (default) or SIGKILL\" },\n      all: { description: \"Kill processes across all config directories\" },\n    },\n  },\n  infraExport: {\n    commandPath: [\"infra\", \"export\"],\n    summary: \"Emit the resolved CI infra plan (env + services) for the current runtime\",\n    interactive: false,\n    fields: {\n      target: { description: \"Export target: ci (default) or local\" },\n      network: { description: \"NEAR network: mainnet or testnet\" },\n      configDir: { description: \"Override config directory\" },\n    },\n  },\n} as const satisfies Record<string, CliCommandMeta>;\n"],"mappings":";AAUA,MAAa,iBAAiB;CAC5B,KAAK;EACH,aAAa,CAAC,KAAK;EACnB,SAAS;EACT,aAAa;EACb,aAAa;EACb,QAAQ;GACN,eAAe,EACb,aACE,mFACJ;GACA,UAAU,EACR,aACE,mHACJ;EACF;CACF;CACA,OAAO;EACL,aAAa,CAAC,OAAO;EACrB,SAAS;EACT,aAAa;EACb,aAAa;EACb,QAAQ;GACN,KAAK,EAAE,aAAa,qCAAqC;GACzD,UAAU,EACR,aACE,uGACJ;GACA,YAAY,EACV,aACE,6FACJ;EACF;CACF;CACA,OAAO;EACL,aAAa,CAAC,OAAO;EACrB,SAAS;EACT,aAAa;EACb,QAAQ,EACN,UAAU;GAAE,YAAY;GAAM,aAAa;EAA+B,EAC5E;CACF;CACA,QAAQ;EACN,aAAa,CAAC,QAAQ;EACtB,SAAS;EACT,aAAa;EACb,QAAQ,EACN,MAAM,EAAE,aAAa,yCAAyC,EAChE;CACF;CACA,aAAa;EACX,aAAa,CAAC,YAAY,KAAK;EAC/B,SACE;EACF,aAAa;EACb,QAAQ;GACN,MAAM;IACJ,YAAY;IACZ,aACE;GACJ;GACA,UAAU,EACR,aAAa,gEACf;GACA,QAAQ,EAAE,aAAa,4CAA4C;EACrE;CACF;CACA,WAAW;EACT,aAAa,CAAC,UAAU,KAAK;EAC7B,SAAS;EACT,aAAa;EACb,QAAQ;GACN,QAAQ;IACN,YAAY;IACZ,aAAa;GACf;GACA,IAAI,EAAE,aAAa,eAAe;GAClC,YAAY,EAAE,aAAa,0BAA0B;EACvD;CACF;CACA,cAAc;EACZ,aAAa,CAAC,UAAU,QAAQ;EAChC,SAAS;EACT,aAAa;EACb,QAAQ,EAAE,KAAK;GAAE,YAAY;GAAM,aAAa;EAAa,EAAE;CACjE;CACA,YAAY;EACV,aAAa,CAAC,UAAU,MAAM;EAC9B,SAAS;EACT,aAAa;CACf;CACA,eAAe;EACb,aAAa,CAAC,UAAU,SAAS;EACjC,SAAS;EACT,aAAa;EACb,QAAQ,EAAE,KAAK;GAAE,YAAY;GAAM,aAAa;EAAa,EAAE;CACjE;CACA,SAAS;EACP,aAAa,CAAC,SAAS;EACvB,SACE;EACF,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,aAAa,kDAAkD;GACzE,SAAS,EAAE,aAAa,kDAAkD;GAC1E,KAAK,EAAE,aAAa,qCAAqC;GACzD,SAAS,EAAE,aAAa,mCAAmC;GAC3D,QAAQ,EACN,aACE,8GACJ;GACA,UAAU,EACR,aACE,uGACJ;EACF;CACF;CACA,UAAU;EACR,aAAa,CAAC,UAAU;EACxB,SAAS;EACT,aAAa;EACb,QAAQ;GACN,SAAS,EAAE,aAAa,+DAA+D;GACvF,UAAU,EAAE,aAAa,4DAA4D;GACrF,OAAO,EACL,aACE,uGACJ;GACA,OAAO,EAAE,aAAa,oCAAoC;GAC1D,QAAQ,EAAE,aAAa,0CAA0C;GACjE,KAAK,EAAE,aAAa,qCAAqC;GACzD,SAAS,EAAE,aAAa,mCAAmC;GAC3D,QAAQ,EACN,aACE,8GACJ;GACA,UAAU,EACR,aACE,uGACJ;EACF;CACF;CACA,QAAQ;EACN,aAAa,CAAC,QAAQ;EACtB,SACE;EACF,aAAa;EACb,QAAQ;GACN,KAAK,EAAE,aAAa,qCAAqC;GACzD,OAAO,EAAE,aAAa,6DAA6D;GACnF,QAAQ,EAAE,aAAa,iDAAiD;GACxE,SAAS,EAAE,aAAa,kDAAkD;GAC1E,SAAS,EAAE,aAAa,4CAA4C;GACpE,aAAa,EACX,aACE,+GACJ;GACA,OAAO,EACL,aACE,mHACJ;GACA,UAAU,EACR,aACE,uGACJ;EACF;CACF;CACA,OAAO;EACL,aAAa,CAAC,OAAO;EACrB,SACE;EACF,aAAa;EACb,QAAQ;GACN,OAAO,EAAE,aAAa,uCAAuC;GAC7D,MAAM,EAAE,aAAa,wDAAwD;GAC7E,MAAM,EAAE,aAAa,+CAA+C;GACpE,SAAS,EAAE,aAAa,8DAA8D;EACxF;CACF;CACA,OAAO;EACL,aAAa,CAAC,OAAO;EACrB,SACE;EACF,aAAa;EACb,QAAQ;GACN,KAAK,EAAE,aAAa,gEAAgE;GACpF,MAAM,EAAE,aAAa,+CAA+C;GACpE,QAAQ,EAAE,aAAa,8DAA8D;GACrF,WAAW,EAAE,aAAa,iDAAiD;GAC3E,KAAK,EAAE,aAAa,+CAA+C;EACrE;CACF;CACA,QAAQ;EACN,aAAa,CAAC,QAAQ;EACtB,SAAS;EACT,aAAa;CACf;CACA,YAAY;EACV,aAAa,CAAC,OAAO,UAAU;EAC/B,SAAS;EACT,aAAa;EACb,QAAQ;GACN,KAAK,EAAE,aAAa,qCAAqC;GACzD,WAAW,EAAE,aAAa,4DAA4D;GACtF,eAAe,EACb,aACE,qGACJ;GACA,UAAU,EACR,aACE,uGACJ;EACF;CACF;CACA,MAAM;EACJ,aAAa,CAAC,MAAM;EACpB,SAAS;EACT,aAAa;EACb,QAAQ;GACN,QAAQ;IACN,YAAY;IACZ,aAAa;GACf;GACA,SAAS,EACP,aAAa,wEACf;GACA,SAAS,EAAE,aAAa,uDAAuD;GAC/E,WAAW,EAAE,aAAa,8CAA8C;GACxE,QAAQ,EAAE,aAAa,2CAA2C;GAClE,SAAS,EACP,aAAa,wEACf;GACA,WAAW,EACT,aAAa,qEACf;GACA,OAAO,EACL,aACE,sFACJ;GACA,eAAe,EAAE,aAAa,+BAA+B;GAC7D,WAAW,EAAE,aAAa,oBAAoB;EAChD;CACF;CACA,MAAM;EACJ,aAAa,CAAC,MAAM;EACpB,SAAS;EACT,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,aAAa,wCAAwC;GAC/D,WAAW,EAAE,aAAa,oBAAoB;EAChD;CACF;CACA,SAAS;EACP,aAAa,CAAC,SAAS;EACvB,SAAS;EACT,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,aAAa,kCAAkC;GACzD,WAAW,EAAE,aAAa,oBAAoB;GAC9C,QAAQ,EAAE,aAAa,4CAA4C;EACrE;CACF;CACA,UAAU;EACR,aAAa,CAAC,SAAS,KAAK;EAC5B,SAAS;EACT,aAAa;EACb,QAAQ;GACN,KAAK,EAAE,aAAa,mDAAmD;GACvE,QAAQ,EAAE,aAAa,sDAAsD;GAC7E,eAAe,EACb,aACE,oGACJ;EACF;CACF;CACA,WAAW;EACT,aAAa,CAAC,WAAW;EACzB,SAAS;EACT,aAAa;EACb,QAAQ,EACN,UAAU;GACR,YAAY;GACZ,aAAa;EACf,EACF;CACF;CACA,SAAS;EACP,aAAa,CAAC,MAAM,OAAO;EAC3B,SACE;EACF,aAAa;CACf;CACA,UAAU;EACR,aAAa,CAAC,MAAM,QAAQ;EAC5B,SAAS;EACT,QAAQ,EACN,QAAQ;GACN,YAAY;GACZ,aAAa;EACf,EACF;CACF;CACA,UAAU;EACR,aAAa,CAAC,MAAM,QAAQ;EAC5B,SAAS;EACT,QAAQ,EACN,QAAQ;GACN,YAAY;GACZ,aAAa;EACf,EACF;CACF;CACA,UAAU;EACR,aAAa,CAAC,MAAM,QAAQ;EAC5B,SAAS;EACT,QAAQ;GACN,QAAQ;IACN,YAAY;IACZ,aAAa;GACf;GACA,MAAM,EACJ,aAAa,uEACf;GACA,KAAK,EACH,aAAa,2BACf;EACF;CACF;CACA,QAAQ;EACN,aAAa,CAAC,QAAQ;EACtB,SAAS;EACT,aAAa;CACf;CACA,IAAI;EACF,aAAa,CAAC,IAAI;EAClB,SAAS;EACT,aAAa;CACf;CACA,MAAM;EACJ,aAAa,CAAC,MAAM;EACpB,SAAS;EACT,aAAa;EACb,QAAQ;GACN,SAAS,EACP,aAAa,kEACf;GACA,MAAM,EAAE,aAAa,6BAA6B;GAClD,QAAQ,EAAE,aAAa,uCAAuC;EAChE;CACF;CACA,MAAM;EACJ,aAAa,CAAC,MAAM;EACpB,SAAS;EACT,aAAa;EACb,QAAQ;GACN,WAAW,EAAE,aAAa,+DAA+D;GACzF,QAAQ,EAAE,aAAa,uCAAuC;GAC9D,KAAK,EAAE,aAAa,+CAA+C;EACrE;CACF;CACA,aAAa;EACX,aAAa,CAAC,SAAS,QAAQ;EAC/B,SAAS;EACT,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,aAAa,uCAAuC;GAC9D,SAAS,EAAE,aAAa,mCAAmC;GAC3D,WAAW,EAAE,aAAa,4BAA4B;EACxD;CACF;AACF"}
+{"version":3,"file":"contract.meta.mjs","names":[],"sources":["../src/contract.meta.ts"],"sourcesContent":["export type CliCommandMeta = {\n  commandPath?: string[];\n  summary: string;\n  description?: string;\n  examples?: string[];\n  interactive?: boolean;\n  longRunning?: boolean;\n  fields?: Record<string, { positional?: boolean; description?: string }>;\n};\n\nexport const cliCommandMeta = {\n  dev: {\n    commandPath: [\"dev\"],\n    summary: \"Start a development session\",\n    interactive: true,\n    longRunning: true,\n    fields: {\n      remotePlugins: {\n        description:\n          \"Comma-separated plugin IDs to force remote (e.g. --remote-plugins auth,registry)\",\n      },\n      logLevel: {\n        description:\n          \"Log tail level: error, warn (default), info, or debug (overrides BOS_LOG_LEVEL; the file always gets everything)\",\n      },\n    },\n  },\n  start: {\n    commandPath: [\"start\"],\n    summary: \"Start the production host\",\n    interactive: false,\n    longRunning: true,\n    fields: {\n      env: { description: \"Environment: production or staging\" },\n      registry: {\n        description:\n          \"Override FastKV registry contract account (defaults: dev.everything.near / dev.allthethings.testnet)\",\n      },\n      configPath: {\n        description:\n          \"Boot from a local bos config file — skips FastKV resolution and SRI integrity verification\",\n      },\n    },\n  },\n  build: {\n    commandPath: [\"build\"],\n    summary: \"Build selected workspaces\",\n    interactive: false,\n    fields: {\n      packages: { positional: true, description: \"Comma-separated package list\" },\n    },\n  },\n  config: {\n    commandPath: [\"config\"],\n    summary: \"Print the loaded BOS configuration\",\n    interactive: false,\n    fields: {\n      full: { description: \"Print the fully resolved configuration\" },\n    },\n  },\n  registryUse: {\n    commandPath: [\"registry\", \"use\"],\n    summary:\n      \"Compose app.ui/app.host/app.api/plugins.<key> sections from a published runtime into bos.config.json\",\n    interactive: false,\n    fields: {\n      from: {\n        positional: true,\n        description:\n          \"Published runtime (account/gateway or bos:// URL), e.g. v1.citynode.near/citynode.app\",\n      },\n      sections: {\n        description: \"Comma-separated sections to compose, e.g. app.ui,plugins.apps\",\n      },\n      dryRun: { description: \"Preview the merged config without writing\" },\n    },\n  },\n  pluginAdd: {\n    commandPath: [\"plugin\", \"add\"],\n    summary: \"Add a plugin attachment\",\n    interactive: false,\n    fields: {\n      source: {\n        positional: true,\n        description: \"Plugin source (local:path, bos://account/domain, or URL)\",\n      },\n      as: { description: \"Plugin alias\" },\n      production: { description: \"Production URL override\" },\n    },\n  },\n  pluginRemove: {\n    commandPath: [\"plugin\", \"remove\"],\n    summary: \"Remove a plugin attachment\",\n    interactive: false,\n    fields: { key: { positional: true, description: \"Plugin key\" } },\n  },\n  pluginList: {\n    commandPath: [\"plugin\", \"list\"],\n    summary: \"List configured plugins\",\n    interactive: false,\n  },\n  pluginPublish: {\n    commandPath: [\"plugin\", \"publish\"],\n    summary: \"Publish a single plugin\",\n    interactive: false,\n    fields: { key: { positional: true, description: \"Plugin key\" } },\n  },\n  publish: {\n    commandPath: [\"publish\"],\n    summary:\n      \"Publish the current workspace configuration (no build — use bos deploy for the full train)\",\n    interactive: false,\n    fields: {\n      dryRun: { description: \"Preview what would be published without writing\" },\n      verbose: { description: \"Show full build output instead of clean summary\" },\n      env: { description: \"Environment: production or staging\" },\n      network: { description: \"NEAR network: mainnet or testnet\" },\n      wallet: {\n        description:\n          \"Publish gaslessly with a one-time wallet approval (NEP-366 delegate action relayed by the platform relayer)\",\n      },\n      registry: {\n        description:\n          \"Override FastKV registry contract account (defaults: dev.everything.near / dev.allthethings.testnet)\",\n      },\n    },\n  },\n  rollback: {\n    commandPath: [\"rollback\"],\n    summary: \"Republish an earlier config snapshot from the registry publish history\",\n    interactive: true,\n    fields: {\n      version: { description: \"Block height (or timestamp) of the snapshot from the listing\" },\n      previous: { description: \"Roll back to the write immediately before the current one\" },\n      force: {\n        description:\n          \"Allow pre-Phase-A snapshots without verifiable manifest pins (their bytes were overwritten in place)\",\n      },\n      limit: { description: \"Listing depth (1-200, default 20)\" },\n      dryRun: { description: \"Preview the rollback without publishing\" },\n      env: { description: \"Environment: production or staging\" },\n      network: { description: \"NEAR network: mainnet or testnet\" },\n      wallet: {\n        description:\n          \"Publish gaslessly with a one-time wallet approval (NEP-366 delegate action relayed by the platform relayer)\",\n      },\n      registry: {\n        description:\n          \"Override FastKV registry contract account (defaults: dev.everything.near / dev.allthethings.testnet)\",\n      },\n    },\n  },\n  deploy: {\n    commandPath: [\"deploy\"],\n    summary:\n      \"Deploy train: preflight → build → upload bundles → publish config → runtime image (pre-pushed digest or local docker build) → post-publish smoke (optional) → Railway (image-backed, no build)\",\n    interactive: false,\n    fields: {\n      env: { description: \"Environment: production or staging\" },\n      build: { description: \"Build and deploy workspaces before publish (default: true)\" },\n      dryRun: { description: \"Preview what would be deployed without writing\" },\n      verbose: { description: \"Show full build output instead of clean summary\" },\n      service: { description: \"Override Railway service name from config\" },\n      imageDigest: {\n        description:\n          \"Digest of a pre-pushed runtime image (sha256:…) — skips the local image build/push; Railway pins this digest\",\n      },\n      smoke: {\n        description:\n          \"Gate the Railway promotion on a post-publish boot smoke of the runtime image — a red smoke rolls the config back\",\n      },\n      registry: {\n        description:\n          \"Override FastKV registry contract account (defaults: dev.everything.near / dev.allthethings.testnet)\",\n      },\n    },\n  },\n  smoke: {\n    commandPath: [\"smoke\"],\n    summary:\n      \"Boot a runtime image the way production boots (identity-driven, published config) and assert the boot surface: /health, SSR, OpenAPI spec, in-image mf check\",\n    interactive: false,\n    fields: {\n      image: { description: \"Runtime image ref to boot (required)\" },\n      port: { description: \"Host port to publish the container on (default: 3000)\" },\n      keep: { description: \"Keep the container after the run (debugging)\" },\n      account: { description: \"Registry identity — defaults to the resolved session config\" },\n    },\n  },\n  login: {\n    commandPath: [\"login\"],\n    summary:\n      \"Sign in with your NEAR account via the hosted site (wallet, passkey, or social login)\",\n    interactive: true,\n    fields: {\n      key: { description: \"Also mint and export a scoped publish key for headless/CI use\" },\n      site: { description: \"Override site URL hosting the CLI login page\" },\n      device: { description: \"Device label recorded on the credential (default: hostname)\" },\n      expiresIn: { description: \"Session lifetime in seconds (default: 90 days)\" },\n      env: { description: \"Environment: production (default) or staging\" },\n    },\n  },\n  logout: {\n    commandPath: [\"logout\"],\n    summary: \"Revoke the stored CLI session and delete the exported publish key\",\n    interactive: false,\n  },\n  keyPublish: {\n    commandPath: [\"key\", \"generate\"],\n    summary: \"Generate a publish access key\",\n    interactive: true,\n    fields: {\n      env: { description: \"Environment: production or staging\" },\n      allowance: { description: \"NEAR allowance for the key (default: 1NEAR, min: 0.3NEAR)\" },\n      removeOldKeys: {\n        description:\n          \"Remove existing publish key(s) without prompting (default: ask on a TTY, defaulting to keep; keep when non-interactive — pass --remove-old-keys to remove)\",\n      },\n      registry: {\n        description:\n          \"Override FastKV registry contract account (defaults: dev.everything.near / dev.allthethings.testnet)\",\n      },\n    },\n  },\n  init: {\n    commandPath: [\"init\"],\n    summary: \"Scaffold a new project by extending a deployed app or template\",\n    interactive: true,\n    fields: {\n      domain: {\n        positional: true,\n        description: \"New project domain (e.g. myapp.everything.dev)\",\n      },\n      extends: {\n        description: \"Parent to extend from (e.g. bos://account/gateway or account/gateway)\",\n      },\n      account: { description: \"New project NEAR account (auto-derived from extends)\" },\n      directory: { description: \"Target directory (auto-derived from domain)\" },\n      source: { description: \"Local source dir (skips GitHub download)\" },\n      plugins: {\n        description: \"Comma-separated plugin keys to include (requires --overrides=plugins)\",\n      },\n      overrides: {\n        description: \"Comma-separated sections to customize locally: ui,api,host,plugins\",\n      },\n      level: {\n        description:\n          \"Starter complexity: simple (public shell) or advanced (adds dashboard, orgs, admin)\",\n      },\n      noInteractive: { description: \"Skip prompts, use flags only\" },\n      noInstall: { description: \"Skip pnpm install\" },\n    },\n  },\n  sync: {\n    commandPath: [\"sync\"],\n    summary: \"Sync template files from parent project\",\n    interactive: false,\n    fields: {\n      dryRun: { description: \"Preview changes without writing files\" },\n      noInstall: { description: \"Skip pnpm install\" },\n    },\n  },\n  upgrade: {\n    commandPath: [\"upgrade\"],\n    summary: \"Upgrade framework packages and sync template files\",\n    interactive: true,\n    fields: {\n      dryRun: { description: \"Preview changes without writing\" },\n      noInstall: { description: \"Skip pnpm install\" },\n      noSync: { description: \"Only upgrade packages, skip template sync\" },\n    },\n  },\n  typesGen: {\n    commandPath: [\"types\", \"gen\"],\n    summary: \"Generate type definitions from configured API and plugin contracts\",\n    interactive: false,\n    fields: {\n      env: { description: \"Environment: development (default) or production\" },\n      dryRun: { description: \"Preview what would be fetched without writing files\" },\n      remotePlugins: {\n        description:\n          \"Comma-separated plugin IDs to fetch contract types remotely (e.g. --remote-plugins auth,registry)\",\n      },\n    },\n  },\n  typecheck: {\n    commandPath: [\"typecheck\"],\n    summary: \"Run TypeScript type checking across all local workspaces\",\n    interactive: false,\n    fields: {\n      packages: {\n        positional: true,\n        description: \"Comma-separated workspace list (default: all)\",\n      },\n    },\n  },\n  mfCheck: {\n    commandPath: [\"mf\", \"check\"],\n    summary:\n      \"Verify Module Federation runtime compatibility across published host + plugin bundles\",\n    interactive: false,\n  },\n  dbStudio: {\n    commandPath: [\"db\", \"studio\"],\n    summary: \"Open Drizzle Studio for a plugin's database\",\n    fields: {\n      plugin: {\n        positional: true,\n        description: \"Plugin key: api, auth, or a plugin name (default: api)\",\n      },\n    },\n  },\n  dbDoctor: {\n    commandPath: [\"db\", \"doctor\"],\n    summary: \"Diagnose migration health for a plugin's database\",\n    fields: {\n      plugin: {\n        positional: true,\n        description: \"Plugin key: api, auth, or a plugin name\",\n      },\n    },\n  },\n  dbRepair: {\n    commandPath: [\"db\", \"repair\"],\n    summary: \"Reset migration history and reapply migrations for a plugin\",\n    fields: {\n      plugin: {\n        positional: true,\n        description: \"Plugin key: api, auth, or a plugin name\",\n      },\n      mode: {\n        description: \"Repair mode: history-reset (default) or recreate (not yet supported)\",\n      },\n      yes: {\n        description: \"Skip confirmation prompt\",\n      },\n    },\n  },\n  status: {\n    commandPath: [\"status\"],\n    summary: \"Show project health, versions, and update availability\",\n    interactive: false,\n  },\n  ps: {\n    commandPath: [\"ps\"],\n    summary: \"List tracked development processes\",\n    interactive: false,\n  },\n  logs: {\n    commandPath: [\"logs\"],\n    summary: \"Read dev session logs (.bos/logs/dev-latest.log)\",\n    interactive: false,\n    fields: {\n      service: {\n        description: \"Filter by service name (e.g. host, api, auth, ui, plugin:votes)\",\n      },\n      tail: { description: \"Show only the last N lines\" },\n      follow: { description: \"Stream the log as lines are appended\" },\n    },\n  },\n  kill: {\n    commandPath: [\"kill\"],\n    summary: \"Stop tracked development processes\",\n    interactive: false,\n    fields: {\n      configDir: { description: \"Kill processes owned by a config directory (defaults to cwd)\" },\n      signal: { description: \"Signal: SIGTERM (default) or SIGKILL\" },\n      all: { description: \"Kill processes across all config directories\" },\n    },\n  },\n  infraExport: {\n    commandPath: [\"infra\", \"export\"],\n    summary: \"Emit the resolved CI infra plan (env + services) for the current runtime\",\n    interactive: false,\n    fields: {\n      target: { description: \"Export target: ci (default) or local\" },\n      network: { description: \"NEAR network: mainnet or testnet\" },\n      configDir: { description: \"Override config directory\" },\n    },\n  },\n} as const satisfies Record<string, CliCommandMeta>;\n"],"mappings":";AAUA,MAAa,iBAAiB;CAC5B,KAAK;EACH,aAAa,CAAC,KAAK;EACnB,SAAS;EACT,aAAa;EACb,aAAa;EACb,QAAQ;GACN,eAAe,EACb,aACE,mFACJ;GACA,UAAU,EACR,aACE,mHACJ;EACF;CACF;CACA,OAAO;EACL,aAAa,CAAC,OAAO;EACrB,SAAS;EACT,aAAa;EACb,aAAa;EACb,QAAQ;GACN,KAAK,EAAE,aAAa,qCAAqC;GACzD,UAAU,EACR,aACE,uGACJ;GACA,YAAY,EACV,aACE,6FACJ;EACF;CACF;CACA,OAAO;EACL,aAAa,CAAC,OAAO;EACrB,SAAS;EACT,aAAa;EACb,QAAQ,EACN,UAAU;GAAE,YAAY;GAAM,aAAa;EAA+B,EAC5E;CACF;CACA,QAAQ;EACN,aAAa,CAAC,QAAQ;EACtB,SAAS;EACT,aAAa;EACb,QAAQ,EACN,MAAM,EAAE,aAAa,yCAAyC,EAChE;CACF;CACA,aAAa;EACX,aAAa,CAAC,YAAY,KAAK;EAC/B,SACE;EACF,aAAa;EACb,QAAQ;GACN,MAAM;IACJ,YAAY;IACZ,aACE;GACJ;GACA,UAAU,EACR,aAAa,gEACf;GACA,QAAQ,EAAE,aAAa,4CAA4C;EACrE;CACF;CACA,WAAW;EACT,aAAa,CAAC,UAAU,KAAK;EAC7B,SAAS;EACT,aAAa;EACb,QAAQ;GACN,QAAQ;IACN,YAAY;IACZ,aAAa;GACf;GACA,IAAI,EAAE,aAAa,eAAe;GAClC,YAAY,EAAE,aAAa,0BAA0B;EACvD;CACF;CACA,cAAc;EACZ,aAAa,CAAC,UAAU,QAAQ;EAChC,SAAS;EACT,aAAa;EACb,QAAQ,EAAE,KAAK;GAAE,YAAY;GAAM,aAAa;EAAa,EAAE;CACjE;CACA,YAAY;EACV,aAAa,CAAC,UAAU,MAAM;EAC9B,SAAS;EACT,aAAa;CACf;CACA,eAAe;EACb,aAAa,CAAC,UAAU,SAAS;EACjC,SAAS;EACT,aAAa;EACb,QAAQ,EAAE,KAAK;GAAE,YAAY;GAAM,aAAa;EAAa,EAAE;CACjE;CACA,SAAS;EACP,aAAa,CAAC,SAAS;EACvB,SACE;EACF,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,aAAa,kDAAkD;GACzE,SAAS,EAAE,aAAa,kDAAkD;GAC1E,KAAK,EAAE,aAAa,qCAAqC;GACzD,SAAS,EAAE,aAAa,mCAAmC;GAC3D,QAAQ,EACN,aACE,8GACJ;GACA,UAAU,EACR,aACE,uGACJ;EACF;CACF;CACA,UAAU;EACR,aAAa,CAAC,UAAU;EACxB,SAAS;EACT,aAAa;EACb,QAAQ;GACN,SAAS,EAAE,aAAa,+DAA+D;GACvF,UAAU,EAAE,aAAa,4DAA4D;GACrF,OAAO,EACL,aACE,uGACJ;GACA,OAAO,EAAE,aAAa,oCAAoC;GAC1D,QAAQ,EAAE,aAAa,0CAA0C;GACjE,KAAK,EAAE,aAAa,qCAAqC;GACzD,SAAS,EAAE,aAAa,mCAAmC;GAC3D,QAAQ,EACN,aACE,8GACJ;GACA,UAAU,EACR,aACE,uGACJ;EACF;CACF;CACA,QAAQ;EACN,aAAa,CAAC,QAAQ;EACtB,SACE;EACF,aAAa;EACb,QAAQ;GACN,KAAK,EAAE,aAAa,qCAAqC;GACzD,OAAO,EAAE,aAAa,6DAA6D;GACnF,QAAQ,EAAE,aAAa,iDAAiD;GACxE,SAAS,EAAE,aAAa,kDAAkD;GAC1E,SAAS,EAAE,aAAa,4CAA4C;GACpE,aAAa,EACX,aACE,+GACJ;GACA,OAAO,EACL,aACE,mHACJ;GACA,UAAU,EACR,aACE,uGACJ;EACF;CACF;CACA,OAAO;EACL,aAAa,CAAC,OAAO;EACrB,SACE;EACF,aAAa;EACb,QAAQ;GACN,OAAO,EAAE,aAAa,uCAAuC;GAC7D,MAAM,EAAE,aAAa,wDAAwD;GAC7E,MAAM,EAAE,aAAa,+CAA+C;GACpE,SAAS,EAAE,aAAa,8DAA8D;EACxF;CACF;CACA,OAAO;EACL,aAAa,CAAC,OAAO;EACrB,SACE;EACF,aAAa;EACb,QAAQ;GACN,KAAK,EAAE,aAAa,gEAAgE;GACpF,MAAM,EAAE,aAAa,+CAA+C;GACpE,QAAQ,EAAE,aAAa,8DAA8D;GACrF,WAAW,EAAE,aAAa,iDAAiD;GAC3E,KAAK,EAAE,aAAa,+CAA+C;EACrE;CACF;CACA,QAAQ;EACN,aAAa,CAAC,QAAQ;EACtB,SAAS;EACT,aAAa;CACf;CACA,YAAY;EACV,aAAa,CAAC,OAAO,UAAU;EAC/B,SAAS;EACT,aAAa;EACb,QAAQ;GACN,KAAK,EAAE,aAAa,qCAAqC;GACzD,WAAW,EAAE,aAAa,4DAA4D;GACtF,eAAe,EACb,aACE,6JACJ;GACA,UAAU,EACR,aACE,uGACJ;EACF;CACF;CACA,MAAM;EACJ,aAAa,CAAC,MAAM;EACpB,SAAS;EACT,aAAa;EACb,QAAQ;GACN,QAAQ;IACN,YAAY;IACZ,aAAa;GACf;GACA,SAAS,EACP,aAAa,wEACf;GACA,SAAS,EAAE,aAAa,uDAAuD;GAC/E,WAAW,EAAE,aAAa,8CAA8C;GACxE,QAAQ,EAAE,aAAa,2CAA2C;GAClE,SAAS,EACP,aAAa,wEACf;GACA,WAAW,EACT,aAAa,qEACf;GACA,OAAO,EACL,aACE,sFACJ;GACA,eAAe,EAAE,aAAa,+BAA+B;GAC7D,WAAW,EAAE,aAAa,oBAAoB;EAChD;CACF;CACA,MAAM;EACJ,aAAa,CAAC,MAAM;EACpB,SAAS;EACT,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,aAAa,wCAAwC;GAC/D,WAAW,EAAE,aAAa,oBAAoB;EAChD;CACF;CACA,SAAS;EACP,aAAa,CAAC,SAAS;EACvB,SAAS;EACT,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,aAAa,kCAAkC;GACzD,WAAW,EAAE,aAAa,oBAAoB;GAC9C,QAAQ,EAAE,aAAa,4CAA4C;EACrE;CACF;CACA,UAAU;EACR,aAAa,CAAC,SAAS,KAAK;EAC5B,SAAS;EACT,aAAa;EACb,QAAQ;GACN,KAAK,EAAE,aAAa,mDAAmD;GACvE,QAAQ,EAAE,aAAa,sDAAsD;GAC7E,eAAe,EACb,aACE,oGACJ;EACF;CACF;CACA,WAAW;EACT,aAAa,CAAC,WAAW;EACzB,SAAS;EACT,aAAa;EACb,QAAQ,EACN,UAAU;GACR,YAAY;GACZ,aAAa;EACf,EACF;CACF;CACA,SAAS;EACP,aAAa,CAAC,MAAM,OAAO;EAC3B,SACE;EACF,aAAa;CACf;CACA,UAAU;EACR,aAAa,CAAC,MAAM,QAAQ;EAC5B,SAAS;EACT,QAAQ,EACN,QAAQ;GACN,YAAY;GACZ,aAAa;EACf,EACF;CACF;CACA,UAAU;EACR,aAAa,CAAC,MAAM,QAAQ;EAC5B,SAAS;EACT,QAAQ,EACN,QAAQ;GACN,YAAY;GACZ,aAAa;EACf,EACF;CACF;CACA,UAAU;EACR,aAAa,CAAC,MAAM,QAAQ;EAC5B,SAAS;EACT,QAAQ;GACN,QAAQ;IACN,YAAY;IACZ,aAAa;GACf;GACA,MAAM,EACJ,aAAa,uEACf;GACA,KAAK,EACH,aAAa,2BACf;EACF;CACF;CACA,QAAQ;EACN,aAAa,CAAC,QAAQ;EACtB,SAAS;EACT,aAAa;CACf;CACA,IAAI;EACF,aAAa,CAAC,IAAI;EAClB,SAAS;EACT,aAAa;CACf;CACA,MAAM;EACJ,aAAa,CAAC,MAAM;EACpB,SAAS;EACT,aAAa;EACb,QAAQ;GACN,SAAS,EACP,aAAa,kEACf;GACA,MAAM,EAAE,aAAa,6BAA6B;GAClD,QAAQ,EAAE,aAAa,uCAAuC;EAChE;CACF;CACA,MAAM;EACJ,aAAa,CAAC,MAAM;EACpB,SAAS;EACT,aAAa;EACb,QAAQ;GACN,WAAW,EAAE,aAAa,+DAA+D;GACzF,QAAQ,EAAE,aAAa,uCAAuC;GAC9D,KAAK,EAAE,aAAa,+CAA+C;EACrE;CACF;CACA,aAAa;EACX,aAAa,CAAC,SAAS,QAAQ;EAC/B,SAAS;EACT,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,aAAa,uCAAuC;GAC9D,SAAS,EAAE,aAAa,mCAAmC;GAC3D,WAAW,EAAE,aAAa,4BAA4B;EACxD;CACF;AACF"}

package/dist/db/core.cjs

@@ -179,10 +179,28 @@ function suppressPgQueryQueueDeprecation() {
 }
 function extractExpectedTables(migrations) {
 	const tables = /* @__PURE__ */ new Set();
-	const re = /CREATE\s+TABLE\s+(?:IF\s+NOT\s+EXISTS\s+)?(?:"([^"]+)"\.)?"([^"]+)"/gi;
-	for (const migration of migrations) for (const stmt of migration.sql) for (const match of stmt.matchAll(re)) {
-		const tableName = match[2];
-		if (tableName) tables.add(tableName);
+	const ident = String.raw`(?:"([^"]+)"|(\w+))`;
+	const qualified = String.raw`(?:${ident}\.)?`;
+	const createRe = new RegExp(String.raw`CREATE\s+TABLE\s+(?:IF\s+NOT\s+EXISTS\s+)?${qualified}${ident}`, "gi");
+	const dropRe = new RegExp(String.raw`DROP\s+TABLE\s+(?:IF\s+EXISTS\s+)?${qualified}${ident}`, "gi");
+	const renameRe = new RegExp(String.raw`ALTER\s+TABLE\s+(?:IF\s+EXISTS\s+)?${qualified}${ident}${String.raw`\s+RENAME\s+TO\s+`}${ident}`, "gi");
+	for (const migration of migrations) for (const stmt of migration.sql) {
+		for (const match of stmt.matchAll(createRe)) {
+			const tableName = match[3] ?? match[4];
+			if (tableName) tables.add(tableName);
+		}
+		for (const match of stmt.matchAll(dropRe)) {
+			const tableName = match[3] ?? match[4];
+			if (tableName) tables.delete(tableName);
+		}
+		for (const match of stmt.matchAll(renameRe)) {
+			const from = match[3] ?? match[4];
+			const to = match[5] ?? match[6];
+			if (from && to) {
+				tables.delete(from);
+				tables.add(to);
+			}
+		}
 	}
 	return [...tables];
 }

package/dist/db/core.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"core.cjs","names":["join","existsSync","readFileSync","dirname"],"sources":["../../src/db/core.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\n\nexport interface MigrationStorage {\n  schema: string;\n  table: string;\n  slug: string;\n}\n\nconst DEFAULT_MIGRATION_JOURNAL = {\n  schema: \"drizzle\",\n  table: \"__drizzle_migrations\",\n} as const;\n\nconst PER_PLUGIN_ISOLATION = false;\n\nexport function normalizeSlug(name: string): string {\n  const basename = name.split(\"/\").pop() ?? name;\n  return basename\n    .replace(/^@/, \"\")\n    .replace(/[^a-zA-Z0-9_-]/g, \"_\")\n    .replace(/-plugin$/i, \"\")\n    .replace(/-/g, \"_\")\n    .toLowerCase();\n}\n\nexport function getMigrationSlug(dir?: string): string {\n  if (!dir) return normalizeSlug(process.env.npm_package_name ?? \"unknown\");\n  let current = dir;\n  for (let i = 0; i < 10; i++) {\n    const pkgPath = join(current, \"package.json\");\n    if (existsSync(pkgPath)) {\n      try {\n        const pkg = JSON.parse(readFileSync(pkgPath, \"utf-8\")) as { name?: string };\n        return normalizeSlug(pkg.name ?? current);\n      } catch {\n        return normalizeSlug(current);\n      }\n    }\n    const parent = dirname(current);\n    if (parent === current) break;\n    current = parent;\n  }\n  return normalizeSlug(dir);\n}\n\nexport function getMigrationStorage(\n  slug?: string,\n  options?: { isolated?: boolean },\n): MigrationStorage {\n  const s = normalizeSlug(slug ?? getMigrationSlug());\n  const isolated = options?.isolated ?? PER_PLUGIN_ISOLATION;\n  if (isolated) {\n    return {\n      schema: DEFAULT_MIGRATION_JOURNAL.schema,\n      table: `__drizzle_migrations_${s}`,\n      slug: s,\n    };\n  }\n  return {\n    schema: DEFAULT_MIGRATION_JOURNAL.schema,\n    table: DEFAULT_MIGRATION_JOURNAL.table,\n    slug: s,\n  };\n}\n\n/**\n * Format a JavaScript string array as a PostgreSQL text array literal for use\n * with Drizzle's `sql` tag. Example return:\n *   `'{\"h1\",\"h2\"}'::text[]`\n *\n * Usage: sql`WHERE col = ANY(${toSqlArray(values)})`\n *\n * Drizzle's default parameter binding does not handle array types correctly\n * with the pg driver (it emits `ANY(($1))` with a single string, which\n * Postgres rejects as a malformed array literal).\n */\nexport function toSqlArray(arr: string[]): string {\n  if (arr.length === 0) return `'{}'::text[]`;\n  const escaped = arr.map((v) => v.replace(/\\\\/g, \"\\\\\\\\\").replace(/\"/g, '\\\\\"'));\n  return `'{${escaped.map((v) => `\"${v}\"`).join(\",\")}}'::text[]`;\n}\n\nexport function pluginMigrationSlug(key: string): string {\n  return normalizeSlug(key);\n}\n\nexport function getDatabaseUrlSecretName(slug: string): string {\n  return `${slug.toUpperCase().replace(/-/g, \"_\")}_DATABASE_URL`;\n}\n\nexport const DUPLICATE_OBJECT_SQLSTATES: readonly string[] = [\"42710\", \"42701\", \"42P07\"];\n\n/**\n * Walk `error` and its `cause` chain (bounded), invoking `visit` on each link.\n * Postgres driver errors arrive wrapped by drizzle/Effect at varying depths,\n * so every error-shape predicate below shares this traversal.\n */\nexport function visitCauses(\n  error: unknown,\n  depth: number,\n  visit: (link: object) => boolean,\n): boolean {\n  let current: unknown = error;\n  for (let i = 0; i < depth && current; i++) {\n    if (typeof current === \"object\" && current !== null && visit(current)) return true;\n    current = (current as { cause?: unknown })?.cause;\n  }\n  return false;\n}\n\n/**\n * pg_catalog unique indexes that can surface a concurrent-DDL race as SQLSTATE\n * 23505 instead of a duplicate-object class. When two connections run\n * `CREATE TABLE <name>` at the same time, the loser fails its insert into\n * `pg_type` (\"duplicate key value violates unique constraint\n * `pg_type_typname_nsp_index`\") rather than seeing 42P07, because the winner's\n * table is not yet committed. The same shape exists for schemas and other\n * relations.\n */\nconst CONCURRENT_DDL_CONSTRAINTS: ReadonlySet<string> = new Set([\n  \"pg_type_typname_nsp_index\",\n  \"pg_namespace_nspname_index\",\n  \"pg_class_relname_nsp_index\",\n]);\n\n/**\n * Whether a SQLSTATE 23505 unique violation is the concurrent-DDL catalog\n * collision signature rather than a data-level constraint on a user table.\n * Data-level violations must keep failing loudly; only the pg_catalog indexes\n * above are treated as duplicate-DDL tolerance candidates.\n */\nexport function isConcurrentDdlUniqueViolation(error: unknown): boolean {\n  return visitCauses(error, 6, (link) => {\n    const { code, constraint, message } = link as {\n      code?: unknown;\n      constraint?: unknown;\n      message?: unknown;\n    };\n    if (code !== \"23505\") return false;\n    if (typeof constraint === \"string\" && CONCURRENT_DDL_CONSTRAINTS.has(constraint)) return true;\n    if (typeof message !== \"string\") return false;\n    for (const name of CONCURRENT_DDL_CONSTRAINTS) {\n      if (message.includes(name)) return true;\n    }\n    return false;\n  });\n}\n\nconst RETRYABLE_SQLSTATES: ReadonlySet<string> = new Set([\n  \"42P06\",\n  \"42710\",\n  \"42701\",\n  \"42P07\",\n  \"23505\",\n  \"40001\",\n  \"40P01\",\n  \"55P03\",\n]);\n\nconst RETRYABLE_DRIVER_CODES: ReadonlySet<string> = new Set([\n  \"ECONNREFUSED\",\n  \"ECONNRESET\",\n  \"EPIPE\",\n  \"ETIMEDOUT\",\n  \"ENOTFOUND\",\n  \"EAI_AGAIN\",\n]);\n\nfunction matchesRetryableStates(error: unknown, states: ReadonlySet<string>): boolean {\n  return visitCauses(error, 6, (link) => {\n    const code = (link as { code?: unknown }).code;\n    if (typeof code !== \"string\") return false;\n    return states.has(code) || code.startsWith(\"08\") || RETRYABLE_DRIVER_CODES.has(code);\n  });\n}\n\n/**\n * Decide whether a failed migration-init statement (schema/journal creation)\n * is worth retrying. Covers the concurrent `CREATE SCHEMA IF NOT EXISTS`\n * race (unique violation on `pg_namespace`, duplicate-object errors),\n * serialization/deadlock errors, and transient connection failures.\n */\nexport function isRetryableMigrationError(error: unknown): boolean {\n  return matchesRetryableStates(error, RETRYABLE_SQLSTATES);\n}\n\nconst RETRYABLE_STATEMENT_SQLSTATES: ReadonlySet<string> = new Set([\n  \"40001\", // serialization_failure\n  \"40P01\", // deadlock_detected\n  \"55P03\", // lock_not_available\n]);\n\n/**\n * Decide whether a failed migration *statement* (inside its transaction) is\n * worth retrying. Deliberately narrower than `isRetryableMigrationError`:\n * duplicate-object classes are tolerated at the SAVEPOINT level, and a 23505\n * is either the concurrent-DDL catalog collision (also tolerated) or a\n * deterministic data-level violation (retrying is pointless) — so only\n * lock/serialization/transient-connection states justify re-running the\n * transaction.\n */\nexport function isRetryableMigrationExecutionError(error: unknown): boolean {\n  return matchesRetryableStates(error, RETRYABLE_STATEMENT_SQLSTATES);\n}\n\nconst PG_QUERY_QUEUE_DEPRECATION = \"client.query() when the client is already executing a query\";\n\nlet pgWarningFilterInstalled = false;\n\n/**\n * Silence pg's query-queue deprecation warning (fires once per process from\n * pg-pool's internal dispatch under concurrent boot load — node-postgres#3612,\n * #3617). Node's default warning handler prints even when user listeners are\n * attached, so it is removed first; every other warning is re-printed here.\n */\nexport function suppressPgQueryQueueDeprecation(): void {\n  if (pgWarningFilterInstalled) return;\n  if (typeof process === \"undefined\" || typeof process.on !== \"function\") return;\n  pgWarningFilterInstalled = true;\n  process.removeAllListeners(\"warning\");\n  process.on(\"warning\", (warning) => {\n    if (\n      warning.name === \"DeprecationWarning\" &&\n      warning.message.includes(PG_QUERY_QUEUE_DEPRECATION)\n    ) {\n      return;\n    }\n    console.error(warning.stack || `${warning.name}: ${warning.message}`);\n  });\n}\n\nexport function extractExpectedTables(migrations: { sql: string[] }[]): string[] {\n  const tables = new Set<string>();\n  const re = /CREATE\\s+TABLE\\s+(?:IF\\s+NOT\\s+EXISTS\\s+)?(?:\"([^\"]+)\"\\.)?\"([^\"]+)\"/gi;\n  for (const migration of migrations) {\n    for (const stmt of migration.sql) {\n      for (const match of stmt.matchAll(re)) {\n        const tableName = match[2];\n        if (tableName) {\n          tables.add(tableName);\n        }\n      }\n    }\n  }\n  return [...tables];\n}\n"],"mappings":";;;;AASA,MAAM,4BAA4B;CAChC,QAAQ;CACR,OAAO;AACT;AAEA,MAAM,uBAAuB;AAE7B,SAAgB,cAAc,MAAsB;CAElD,QADiB,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,KAC3B,CACZ,QAAQ,MAAM,EAAE,CAAC,CACjB,QAAQ,mBAAmB,GAAG,CAAC,CAC/B,QAAQ,aAAa,EAAE,CAAC,CACxB,QAAQ,MAAM,GAAG,CAAC,CAClB,YAAY;AACjB;AAEA,SAAgB,iBAAiB,KAAsB;CACrD,IAAI,CAAC,KAAK,OAAO,cAAc,QAAQ,IAAI,oBAAoB,SAAS;CACxE,IAAI,UAAU;CACd,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,KAAK;EAC3B,MAAM,cAAUA,gBAAK,SAAS,cAAc;EAC5C,QAAIC,oBAAW,OAAO,GACpB,IAAI;GAEF,OAAO,cADK,KAAK,UAAMC,sBAAa,SAAS,OAAO,CAC7B,CAAC,CAAC,QAAQ,OAAO;EAC1C,QAAQ;GACN,OAAO,cAAc,OAAO;EAC9B;EAEF,MAAM,aAASC,mBAAQ,OAAO;EAC9B,IAAI,WAAW,SAAS;EACxB,UAAU;CACZ;CACA,OAAO,cAAc,GAAG;AAC1B;AAEA,SAAgB,oBACd,MACA,SACkB;CAClB,MAAM,IAAI,cAAc,QAAQ,iBAAiB,CAAC;CAElD,IADiB,SAAS,YAAY,sBAEpC,OAAO;EACL,QAAQ,0BAA0B;EAClC,OAAO,wBAAwB;EAC/B,MAAM;CACR;CAEF,OAAO;EACL,QAAQ,0BAA0B;EAClC,OAAO,0BAA0B;EACjC,MAAM;CACR;AACF;;;;;;;;;;;;AAaA,SAAgB,WAAW,KAAuB;CAChD,IAAI,IAAI,WAAW,GAAG,OAAO;CAE7B,OAAO,KADS,IAAI,KAAK,MAAM,EAAE,QAAQ,OAAO,MAAM,CAAC,CAAC,QAAQ,MAAM,MAAK,CACzD,CAAC,CAAC,KAAK,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,EAAE;AACrD;AAEA,SAAgB,oBAAoB,KAAqB;CACvD,OAAO,cAAc,GAAG;AAC1B;AAEA,SAAgB,yBAAyB,MAAsB;CAC7D,OAAO,GAAG,KAAK,YAAY,CAAC,CAAC,QAAQ,MAAM,GAAG,EAAE;AAClD;AAEA,MAAa,6BAAgD;CAAC;CAAS;CAAS;AAAO;;;;;;AAOvF,SAAgB,YACd,OACA,OACA,OACS;CACT,IAAI,UAAmB;CACvB,KAAK,IAAI,IAAI,GAAG,IAAI,SAAS,SAAS,KAAK;EACzC,IAAI,OAAO,YAAY,YAAY,YAAY,QAAQ,MAAM,OAAO,GAAG,OAAO;EAC9E,UAAW,SAAiC;CAC9C;CACA,OAAO;AACT;;;;;;;;;;AAWA,MAAM,6CAAkD,IAAI,IAAI;CAC9D;CACA;CACA;AACF,CAAC;;;;;;;AAQD,SAAgB,+BAA+B,OAAyB;CACtE,OAAO,YAAY,OAAO,IAAI,SAAS;EACrC,MAAM,EAAE,MAAM,YAAY,YAAY;EAKtC,IAAI,SAAS,SAAS,OAAO;EAC7B,IAAI,OAAO,eAAe,YAAY,2BAA2B,IAAI,UAAU,GAAG,OAAO;EACzF,IAAI,OAAO,YAAY,UAAU,OAAO;EACxC,KAAK,MAAM,QAAQ,4BACjB,IAAI,QAAQ,SAAS,IAAI,GAAG,OAAO;EAErC,OAAO;CACT,CAAC;AACH;AAEA,MAAM,sCAA2C,IAAI,IAAI;CACvD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,yCAA8C,IAAI,IAAI;CAC1D;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,SAAS,uBAAuB,OAAgB,QAAsC;CACpF,OAAO,YAAY,OAAO,IAAI,SAAS;EACrC,MAAM,OAAQ,KAA4B;EAC1C,IAAI,OAAO,SAAS,UAAU,OAAO;EACrC,OAAO,OAAO,IAAI,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,uBAAuB,IAAI,IAAI;CACrF,CAAC;AACH;;;;;;;AAQA,SAAgB,0BAA0B,OAAyB;CACjE,OAAO,uBAAuB,OAAO,mBAAmB;AAC1D;AAEA,MAAM,gDAAqD,IAAI,IAAI;CACjE;CACA;CACA;AACF,CAAC;;;;;;;;;;AAWD,SAAgB,mCAAmC,OAAyB;CAC1E,OAAO,uBAAuB,OAAO,6BAA6B;AACpE;AAEA,MAAM,6BAA6B;AAEnC,IAAI,2BAA2B;;;;;;;AAQ/B,SAAgB,kCAAwC;CACtD,IAAI,0BAA0B;CAC9B,IAAI,OAAO,YAAY,eAAe,OAAO,QAAQ,OAAO,YAAY;CACxE,2BAA2B;CAC3B,QAAQ,mBAAmB,SAAS;CACpC,QAAQ,GAAG,YAAY,YAAY;EACjC,IACE,QAAQ,SAAS,wBACjB,QAAQ,QAAQ,SAAS,0BAA0B,GAEnD;EAEF,QAAQ,MAAM,QAAQ,SAAS,GAAG,QAAQ,KAAK,IAAI,QAAQ,SAAS;CACtE,CAAC;AACH;AAEA,SAAgB,sBAAsB,YAA2C;CAC/E,MAAM,yBAAS,IAAI,IAAY;CAC/B,MAAM,KAAK;CACX,KAAK,MAAM,aAAa,YACtB,KAAK,MAAM,QAAQ,UAAU,KAC3B,KAAK,MAAM,SAAS,KAAK,SAAS,EAAE,GAAG;EACrC,MAAM,YAAY,MAAM;EACxB,IAAI,WACF,OAAO,IAAI,SAAS;CAExB;CAGJ,OAAO,CAAC,GAAG,MAAM;AACnB"}
+{"version":3,"file":"core.cjs","names":["join","existsSync","readFileSync","dirname"],"sources":["../../src/db/core.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\n\nexport interface MigrationStorage {\n  schema: string;\n  table: string;\n  slug: string;\n}\n\nconst DEFAULT_MIGRATION_JOURNAL = {\n  schema: \"drizzle\",\n  table: \"__drizzle_migrations\",\n} as const;\n\nconst PER_PLUGIN_ISOLATION = false;\n\nexport function normalizeSlug(name: string): string {\n  const basename = name.split(\"/\").pop() ?? name;\n  return basename\n    .replace(/^@/, \"\")\n    .replace(/[^a-zA-Z0-9_-]/g, \"_\")\n    .replace(/-plugin$/i, \"\")\n    .replace(/-/g, \"_\")\n    .toLowerCase();\n}\n\nexport function getMigrationSlug(dir?: string): string {\n  if (!dir) return normalizeSlug(process.env.npm_package_name ?? \"unknown\");\n  let current = dir;\n  for (let i = 0; i < 10; i++) {\n    const pkgPath = join(current, \"package.json\");\n    if (existsSync(pkgPath)) {\n      try {\n        const pkg = JSON.parse(readFileSync(pkgPath, \"utf-8\")) as { name?: string };\n        return normalizeSlug(pkg.name ?? current);\n      } catch {\n        return normalizeSlug(current);\n      }\n    }\n    const parent = dirname(current);\n    if (parent === current) break;\n    current = parent;\n  }\n  return normalizeSlug(dir);\n}\n\nexport function getMigrationStorage(\n  slug?: string,\n  options?: { isolated?: boolean },\n): MigrationStorage {\n  const s = normalizeSlug(slug ?? getMigrationSlug());\n  const isolated = options?.isolated ?? PER_PLUGIN_ISOLATION;\n  if (isolated) {\n    return {\n      schema: DEFAULT_MIGRATION_JOURNAL.schema,\n      table: `__drizzle_migrations_${s}`,\n      slug: s,\n    };\n  }\n  return {\n    schema: DEFAULT_MIGRATION_JOURNAL.schema,\n    table: DEFAULT_MIGRATION_JOURNAL.table,\n    slug: s,\n  };\n}\n\n/**\n * Format a JavaScript string array as a PostgreSQL text array literal for use\n * with Drizzle's `sql` tag. Example return:\n *   `'{\"h1\",\"h2\"}'::text[]`\n *\n * Usage: sql`WHERE col = ANY(${toSqlArray(values)})`\n *\n * Drizzle's default parameter binding does not handle array types correctly\n * with the pg driver (it emits `ANY(($1))` with a single string, which\n * Postgres rejects as a malformed array literal).\n */\nexport function toSqlArray(arr: string[]): string {\n  if (arr.length === 0) return `'{}'::text[]`;\n  const escaped = arr.map((v) => v.replace(/\\\\/g, \"\\\\\\\\\").replace(/\"/g, '\\\\\"'));\n  return `'{${escaped.map((v) => `\"${v}\"`).join(\",\")}}'::text[]`;\n}\n\nexport function pluginMigrationSlug(key: string): string {\n  return normalizeSlug(key);\n}\n\nexport function getDatabaseUrlSecretName(slug: string): string {\n  return `${slug.toUpperCase().replace(/-/g, \"_\")}_DATABASE_URL`;\n}\n\nexport const DUPLICATE_OBJECT_SQLSTATES: readonly string[] = [\"42710\", \"42701\", \"42P07\"];\n\n/**\n * Walk `error` and its `cause` chain (bounded), invoking `visit` on each link.\n * Postgres driver errors arrive wrapped by drizzle/Effect at varying depths,\n * so every error-shape predicate below shares this traversal.\n */\nexport function visitCauses(\n  error: unknown,\n  depth: number,\n  visit: (link: object) => boolean,\n): boolean {\n  let current: unknown = error;\n  for (let i = 0; i < depth && current; i++) {\n    if (typeof current === \"object\" && current !== null && visit(current)) return true;\n    current = (current as { cause?: unknown })?.cause;\n  }\n  return false;\n}\n\n/**\n * pg_catalog unique indexes that can surface a concurrent-DDL race as SQLSTATE\n * 23505 instead of a duplicate-object class. When two connections run\n * `CREATE TABLE <name>` at the same time, the loser fails its insert into\n * `pg_type` (\"duplicate key value violates unique constraint\n * `pg_type_typname_nsp_index`\") rather than seeing 42P07, because the winner's\n * table is not yet committed. The same shape exists for schemas and other\n * relations.\n */\nconst CONCURRENT_DDL_CONSTRAINTS: ReadonlySet<string> = new Set([\n  \"pg_type_typname_nsp_index\",\n  \"pg_namespace_nspname_index\",\n  \"pg_class_relname_nsp_index\",\n]);\n\n/**\n * Whether a SQLSTATE 23505 unique violation is the concurrent-DDL catalog\n * collision signature rather than a data-level constraint on a user table.\n * Data-level violations must keep failing loudly; only the pg_catalog indexes\n * above are treated as duplicate-DDL tolerance candidates.\n */\nexport function isConcurrentDdlUniqueViolation(error: unknown): boolean {\n  return visitCauses(error, 6, (link) => {\n    const { code, constraint, message } = link as {\n      code?: unknown;\n      constraint?: unknown;\n      message?: unknown;\n    };\n    if (code !== \"23505\") return false;\n    if (typeof constraint === \"string\" && CONCURRENT_DDL_CONSTRAINTS.has(constraint)) return true;\n    if (typeof message !== \"string\") return false;\n    for (const name of CONCURRENT_DDL_CONSTRAINTS) {\n      if (message.includes(name)) return true;\n    }\n    return false;\n  });\n}\n\nconst RETRYABLE_SQLSTATES: ReadonlySet<string> = new Set([\n  \"42P06\",\n  \"42710\",\n  \"42701\",\n  \"42P07\",\n  \"23505\",\n  \"40001\",\n  \"40P01\",\n  \"55P03\",\n]);\n\nconst RETRYABLE_DRIVER_CODES: ReadonlySet<string> = new Set([\n  \"ECONNREFUSED\",\n  \"ECONNRESET\",\n  \"EPIPE\",\n  \"ETIMEDOUT\",\n  \"ENOTFOUND\",\n  \"EAI_AGAIN\",\n]);\n\nfunction matchesRetryableStates(error: unknown, states: ReadonlySet<string>): boolean {\n  return visitCauses(error, 6, (link) => {\n    const code = (link as { code?: unknown }).code;\n    if (typeof code !== \"string\") return false;\n    return states.has(code) || code.startsWith(\"08\") || RETRYABLE_DRIVER_CODES.has(code);\n  });\n}\n\n/**\n * Decide whether a failed migration-init statement (schema/journal creation)\n * is worth retrying. Covers the concurrent `CREATE SCHEMA IF NOT EXISTS`\n * race (unique violation on `pg_namespace`, duplicate-object errors),\n * serialization/deadlock errors, and transient connection failures.\n */\nexport function isRetryableMigrationError(error: unknown): boolean {\n  return matchesRetryableStates(error, RETRYABLE_SQLSTATES);\n}\n\nconst RETRYABLE_STATEMENT_SQLSTATES: ReadonlySet<string> = new Set([\n  \"40001\", // serialization_failure\n  \"40P01\", // deadlock_detected\n  \"55P03\", // lock_not_available\n]);\n\n/**\n * Decide whether a failed migration *statement* (inside its transaction) is\n * worth retrying. Deliberately narrower than `isRetryableMigrationError`:\n * duplicate-object classes are tolerated at the SAVEPOINT level, and a 23505\n * is either the concurrent-DDL catalog collision (also tolerated) or a\n * deterministic data-level violation (retrying is pointless) — so only\n * lock/serialization/transient-connection states justify re-running the\n * transaction.\n */\nexport function isRetryableMigrationExecutionError(error: unknown): boolean {\n  return matchesRetryableStates(error, RETRYABLE_STATEMENT_SQLSTATES);\n}\n\nconst PG_QUERY_QUEUE_DEPRECATION = \"client.query() when the client is already executing a query\";\n\nlet pgWarningFilterInstalled = false;\n\n/**\n * Silence pg's query-queue deprecation warning (fires once per process from\n * pg-pool's internal dispatch under concurrent boot load — node-postgres#3612,\n * #3617). Node's default warning handler prints even when user listeners are\n * attached, so it is removed first; every other warning is re-printed here.\n */\nexport function suppressPgQueryQueueDeprecation(): void {\n  if (pgWarningFilterInstalled) return;\n  if (typeof process === \"undefined\" || typeof process.on !== \"function\") return;\n  pgWarningFilterInstalled = true;\n  process.removeAllListeners(\"warning\");\n  process.on(\"warning\", (warning) => {\n    if (\n      warning.name === \"DeprecationWarning\" &&\n      warning.message.includes(PG_QUERY_QUEUE_DEPRECATION)\n    ) {\n      return;\n    }\n    console.error(warning.stack || `${warning.name}: ${warning.message}`);\n  });\n}\n\nexport function extractExpectedTables(migrations: { sql: string[] }[]): string[] {\n  const tables = new Set<string>();\n  const ident = String.raw`(?:\"([^\"]+)\"|(\\w+))`;\n  const qualified = String.raw`(?:${ident}\\.)?`;\n  const createRe = new RegExp(\n    String.raw`CREATE\\s+TABLE\\s+(?:IF\\s+NOT\\s+EXISTS\\s+)?${qualified}${ident}`,\n    \"gi\",\n  );\n  const dropRe = new RegExp(\n    String.raw`DROP\\s+TABLE\\s+(?:IF\\s+EXISTS\\s+)?${qualified}${ident}`,\n    \"gi\",\n  );\n  const renameRe = new RegExp(\n    String.raw`ALTER\\s+TABLE\\s+(?:IF\\s+EXISTS\\s+)?${qualified}${ident}${String.raw`\\s+RENAME\\s+TO\\s+`}${ident}`,\n    \"gi\",\n  );\n  for (const migration of migrations) {\n    for (const stmt of migration.sql) {\n      for (const match of stmt.matchAll(createRe)) {\n        const tableName = match[3] ?? match[4];\n        if (tableName) {\n          tables.add(tableName);\n        }\n      }\n      for (const match of stmt.matchAll(dropRe)) {\n        const tableName = match[3] ?? match[4];\n        if (tableName) {\n          tables.delete(tableName);\n        }\n      }\n      for (const match of stmt.matchAll(renameRe)) {\n        const from = match[3] ?? match[4];\n        const to = match[5] ?? match[6];\n        if (from && to) {\n          tables.delete(from);\n          tables.add(to);\n        }\n      }\n    }\n  }\n  return [...tables];\n}\n"],"mappings":";;;;AASA,MAAM,4BAA4B;CAChC,QAAQ;CACR,OAAO;AACT;AAEA,MAAM,uBAAuB;AAE7B,SAAgB,cAAc,MAAsB;CAElD,QADiB,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,KAC3B,CACZ,QAAQ,MAAM,EAAE,CAAC,CACjB,QAAQ,mBAAmB,GAAG,CAAC,CAC/B,QAAQ,aAAa,EAAE,CAAC,CACxB,QAAQ,MAAM,GAAG,CAAC,CAClB,YAAY;AACjB;AAEA,SAAgB,iBAAiB,KAAsB;CACrD,IAAI,CAAC,KAAK,OAAO,cAAc,QAAQ,IAAI,oBAAoB,SAAS;CACxE,IAAI,UAAU;CACd,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,KAAK;EAC3B,MAAM,cAAUA,gBAAK,SAAS,cAAc;EAC5C,QAAIC,oBAAW,OAAO,GACpB,IAAI;GAEF,OAAO,cADK,KAAK,UAAMC,sBAAa,SAAS,OAAO,CAC7B,CAAC,CAAC,QAAQ,OAAO;EAC1C,QAAQ;GACN,OAAO,cAAc,OAAO;EAC9B;EAEF,MAAM,aAASC,mBAAQ,OAAO;EAC9B,IAAI,WAAW,SAAS;EACxB,UAAU;CACZ;CACA,OAAO,cAAc,GAAG;AAC1B;AAEA,SAAgB,oBACd,MACA,SACkB;CAClB,MAAM,IAAI,cAAc,QAAQ,iBAAiB,CAAC;CAElD,IADiB,SAAS,YAAY,sBAEpC,OAAO;EACL,QAAQ,0BAA0B;EAClC,OAAO,wBAAwB;EAC/B,MAAM;CACR;CAEF,OAAO;EACL,QAAQ,0BAA0B;EAClC,OAAO,0BAA0B;EACjC,MAAM;CACR;AACF;;;;;;;;;;;;AAaA,SAAgB,WAAW,KAAuB;CAChD,IAAI,IAAI,WAAW,GAAG,OAAO;CAE7B,OAAO,KADS,IAAI,KAAK,MAAM,EAAE,QAAQ,OAAO,MAAM,CAAC,CAAC,QAAQ,MAAM,MAAK,CACzD,CAAC,CAAC,KAAK,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,EAAE;AACrD;AAEA,SAAgB,oBAAoB,KAAqB;CACvD,OAAO,cAAc,GAAG;AAC1B;AAEA,SAAgB,yBAAyB,MAAsB;CAC7D,OAAO,GAAG,KAAK,YAAY,CAAC,CAAC,QAAQ,MAAM,GAAG,EAAE;AAClD;AAEA,MAAa,6BAAgD;CAAC;CAAS;CAAS;AAAO;;;;;;AAOvF,SAAgB,YACd,OACA,OACA,OACS;CACT,IAAI,UAAmB;CACvB,KAAK,IAAI,IAAI,GAAG,IAAI,SAAS,SAAS,KAAK;EACzC,IAAI,OAAO,YAAY,YAAY,YAAY,QAAQ,MAAM,OAAO,GAAG,OAAO;EAC9E,UAAW,SAAiC;CAC9C;CACA,OAAO;AACT;;;;;;;;;;AAWA,MAAM,6CAAkD,IAAI,IAAI;CAC9D;CACA;CACA;AACF,CAAC;;;;;;;AAQD,SAAgB,+BAA+B,OAAyB;CACtE,OAAO,YAAY,OAAO,IAAI,SAAS;EACrC,MAAM,EAAE,MAAM,YAAY,YAAY;EAKtC,IAAI,SAAS,SAAS,OAAO;EAC7B,IAAI,OAAO,eAAe,YAAY,2BAA2B,IAAI,UAAU,GAAG,OAAO;EACzF,IAAI,OAAO,YAAY,UAAU,OAAO;EACxC,KAAK,MAAM,QAAQ,4BACjB,IAAI,QAAQ,SAAS,IAAI,GAAG,OAAO;EAErC,OAAO;CACT,CAAC;AACH;AAEA,MAAM,sCAA2C,IAAI,IAAI;CACvD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,yCAA8C,IAAI,IAAI;CAC1D;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,SAAS,uBAAuB,OAAgB,QAAsC;CACpF,OAAO,YAAY,OAAO,IAAI,SAAS;EACrC,MAAM,OAAQ,KAA4B;EAC1C,IAAI,OAAO,SAAS,UAAU,OAAO;EACrC,OAAO,OAAO,IAAI,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,uBAAuB,IAAI,IAAI;CACrF,CAAC;AACH;;;;;;;AAQA,SAAgB,0BAA0B,OAAyB;CACjE,OAAO,uBAAuB,OAAO,mBAAmB;AAC1D;AAEA,MAAM,gDAAqD,IAAI,IAAI;CACjE;CACA;CACA;AACF,CAAC;;;;;;;;;;AAWD,SAAgB,mCAAmC,OAAyB;CAC1E,OAAO,uBAAuB,OAAO,6BAA6B;AACpE;AAEA,MAAM,6BAA6B;AAEnC,IAAI,2BAA2B;;;;;;;AAQ/B,SAAgB,kCAAwC;CACtD,IAAI,0BAA0B;CAC9B,IAAI,OAAO,YAAY,eAAe,OAAO,QAAQ,OAAO,YAAY;CACxE,2BAA2B;CAC3B,QAAQ,mBAAmB,SAAS;CACpC,QAAQ,GAAG,YAAY,YAAY;EACjC,IACE,QAAQ,SAAS,wBACjB,QAAQ,QAAQ,SAAS,0BAA0B,GAEnD;EAEF,QAAQ,MAAM,QAAQ,SAAS,GAAG,QAAQ,KAAK,IAAI,QAAQ,SAAS;CACtE,CAAC;AACH;AAEA,SAAgB,sBAAsB,YAA2C;CAC/E,MAAM,yBAAS,IAAI,IAAY;CAC/B,MAAM,QAAQ,OAAO,GAAG;CACxB,MAAM,YAAY,OAAO,GAAG,MAAM,MAAM;CACxC,MAAM,WAAW,IAAI,OACnB,OAAO,GAAG,6CAA6C,YAAY,SACnE,IACF;CACA,MAAM,SAAS,IAAI,OACjB,OAAO,GAAG,qCAAqC,YAAY,SAC3D,IACF;CACA,MAAM,WAAW,IAAI,OACnB,OAAO,GAAG,sCAAsC,YAAY,QAAQ,OAAO,GAAG,sBAAsB,SACpG,IACF;CACA,KAAK,MAAM,aAAa,YACtB,KAAK,MAAM,QAAQ,UAAU,KAAK;EAChC,KAAK,MAAM,SAAS,KAAK,SAAS,QAAQ,GAAG;GAC3C,MAAM,YAAY,MAAM,MAAM,MAAM;GACpC,IAAI,WACF,OAAO,IAAI,SAAS;EAExB;EACA,KAAK,MAAM,SAAS,KAAK,SAAS,MAAM,GAAG;GACzC,MAAM,YAAY,MAAM,MAAM,MAAM;GACpC,IAAI,WACF,OAAO,OAAO,SAAS;EAE3B;EACA,KAAK,MAAM,SAAS,KAAK,SAAS,QAAQ,GAAG;GAC3C,MAAM,OAAO,MAAM,MAAM,MAAM;GAC/B,MAAM,KAAK,MAAM,MAAM,MAAM;GAC7B,IAAI,QAAQ,IAAI;IACd,OAAO,OAAO,IAAI;IAClB,OAAO,IAAI,EAAE;GACf;EACF;CACF;CAEF,OAAO,CAAC,GAAG,MAAM;AACnB"}

package/dist/db/core.mjs

@@ -179,10 +179,28 @@ function suppressPgQueryQueueDeprecation() {
 }
 function extractExpectedTables(migrations) {
 	const tables = /* @__PURE__ */ new Set();
-	const re = /CREATE\s+TABLE\s+(?:IF\s+NOT\s+EXISTS\s+)?(?:"([^"]+)"\.)?"([^"]+)"/gi;
-	for (const migration of migrations) for (const stmt of migration.sql) for (const match of stmt.matchAll(re)) {
-		const tableName = match[2];
-		if (tableName) tables.add(tableName);
+	const ident = String.raw`(?:"([^"]+)"|(\w+))`;
+	const qualified = String.raw`(?:${ident}\.)?`;
+	const createRe = new RegExp(String.raw`CREATE\s+TABLE\s+(?:IF\s+NOT\s+EXISTS\s+)?${qualified}${ident}`, "gi");
+	const dropRe = new RegExp(String.raw`DROP\s+TABLE\s+(?:IF\s+EXISTS\s+)?${qualified}${ident}`, "gi");
+	const renameRe = new RegExp(String.raw`ALTER\s+TABLE\s+(?:IF\s+EXISTS\s+)?${qualified}${ident}${String.raw`\s+RENAME\s+TO\s+`}${ident}`, "gi");
+	for (const migration of migrations) for (const stmt of migration.sql) {
+		for (const match of stmt.matchAll(createRe)) {
+			const tableName = match[3] ?? match[4];
+			if (tableName) tables.add(tableName);
+		}
+		for (const match of stmt.matchAll(dropRe)) {
+			const tableName = match[3] ?? match[4];
+			if (tableName) tables.delete(tableName);
+		}
+		for (const match of stmt.matchAll(renameRe)) {
+			const from = match[3] ?? match[4];
+			const to = match[5] ?? match[6];
+			if (from && to) {
+				tables.delete(from);
+				tables.add(to);
+			}
+		}
 	}
 	return [...tables];
 }

package/dist/db/core.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"core.mjs","names":[],"sources":["../../src/db/core.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\n\nexport interface MigrationStorage {\n  schema: string;\n  table: string;\n  slug: string;\n}\n\nconst DEFAULT_MIGRATION_JOURNAL = {\n  schema: \"drizzle\",\n  table: \"__drizzle_migrations\",\n} as const;\n\nconst PER_PLUGIN_ISOLATION = false;\n\nexport function normalizeSlug(name: string): string {\n  const basename = name.split(\"/\").pop() ?? name;\n  return basename\n    .replace(/^@/, \"\")\n    .replace(/[^a-zA-Z0-9_-]/g, \"_\")\n    .replace(/-plugin$/i, \"\")\n    .replace(/-/g, \"_\")\n    .toLowerCase();\n}\n\nexport function getMigrationSlug(dir?: string): string {\n  if (!dir) return normalizeSlug(process.env.npm_package_name ?? \"unknown\");\n  let current = dir;\n  for (let i = 0; i < 10; i++) {\n    const pkgPath = join(current, \"package.json\");\n    if (existsSync(pkgPath)) {\n      try {\n        const pkg = JSON.parse(readFileSync(pkgPath, \"utf-8\")) as { name?: string };\n        return normalizeSlug(pkg.name ?? current);\n      } catch {\n        return normalizeSlug(current);\n      }\n    }\n    const parent = dirname(current);\n    if (parent === current) break;\n    current = parent;\n  }\n  return normalizeSlug(dir);\n}\n\nexport function getMigrationStorage(\n  slug?: string,\n  options?: { isolated?: boolean },\n): MigrationStorage {\n  const s = normalizeSlug(slug ?? getMigrationSlug());\n  const isolated = options?.isolated ?? PER_PLUGIN_ISOLATION;\n  if (isolated) {\n    return {\n      schema: DEFAULT_MIGRATION_JOURNAL.schema,\n      table: `__drizzle_migrations_${s}`,\n      slug: s,\n    };\n  }\n  return {\n    schema: DEFAULT_MIGRATION_JOURNAL.schema,\n    table: DEFAULT_MIGRATION_JOURNAL.table,\n    slug: s,\n  };\n}\n\n/**\n * Format a JavaScript string array as a PostgreSQL text array literal for use\n * with Drizzle's `sql` tag. Example return:\n *   `'{\"h1\",\"h2\"}'::text[]`\n *\n * Usage: sql`WHERE col = ANY(${toSqlArray(values)})`\n *\n * Drizzle's default parameter binding does not handle array types correctly\n * with the pg driver (it emits `ANY(($1))` with a single string, which\n * Postgres rejects as a malformed array literal).\n */\nexport function toSqlArray(arr: string[]): string {\n  if (arr.length === 0) return `'{}'::text[]`;\n  const escaped = arr.map((v) => v.replace(/\\\\/g, \"\\\\\\\\\").replace(/\"/g, '\\\\\"'));\n  return `'{${escaped.map((v) => `\"${v}\"`).join(\",\")}}'::text[]`;\n}\n\nexport function pluginMigrationSlug(key: string): string {\n  return normalizeSlug(key);\n}\n\nexport function getDatabaseUrlSecretName(slug: string): string {\n  return `${slug.toUpperCase().replace(/-/g, \"_\")}_DATABASE_URL`;\n}\n\nexport const DUPLICATE_OBJECT_SQLSTATES: readonly string[] = [\"42710\", \"42701\", \"42P07\"];\n\n/**\n * Walk `error` and its `cause` chain (bounded), invoking `visit` on each link.\n * Postgres driver errors arrive wrapped by drizzle/Effect at varying depths,\n * so every error-shape predicate below shares this traversal.\n */\nexport function visitCauses(\n  error: unknown,\n  depth: number,\n  visit: (link: object) => boolean,\n): boolean {\n  let current: unknown = error;\n  for (let i = 0; i < depth && current; i++) {\n    if (typeof current === \"object\" && current !== null && visit(current)) return true;\n    current = (current as { cause?: unknown })?.cause;\n  }\n  return false;\n}\n\n/**\n * pg_catalog unique indexes that can surface a concurrent-DDL race as SQLSTATE\n * 23505 instead of a duplicate-object class. When two connections run\n * `CREATE TABLE <name>` at the same time, the loser fails its insert into\n * `pg_type` (\"duplicate key value violates unique constraint\n * `pg_type_typname_nsp_index`\") rather than seeing 42P07, because the winner's\n * table is not yet committed. The same shape exists for schemas and other\n * relations.\n */\nconst CONCURRENT_DDL_CONSTRAINTS: ReadonlySet<string> = new Set([\n  \"pg_type_typname_nsp_index\",\n  \"pg_namespace_nspname_index\",\n  \"pg_class_relname_nsp_index\",\n]);\n\n/**\n * Whether a SQLSTATE 23505 unique violation is the concurrent-DDL catalog\n * collision signature rather than a data-level constraint on a user table.\n * Data-level violations must keep failing loudly; only the pg_catalog indexes\n * above are treated as duplicate-DDL tolerance candidates.\n */\nexport function isConcurrentDdlUniqueViolation(error: unknown): boolean {\n  return visitCauses(error, 6, (link) => {\n    const { code, constraint, message } = link as {\n      code?: unknown;\n      constraint?: unknown;\n      message?: unknown;\n    };\n    if (code !== \"23505\") return false;\n    if (typeof constraint === \"string\" && CONCURRENT_DDL_CONSTRAINTS.has(constraint)) return true;\n    if (typeof message !== \"string\") return false;\n    for (const name of CONCURRENT_DDL_CONSTRAINTS) {\n      if (message.includes(name)) return true;\n    }\n    return false;\n  });\n}\n\nconst RETRYABLE_SQLSTATES: ReadonlySet<string> = new Set([\n  \"42P06\",\n  \"42710\",\n  \"42701\",\n  \"42P07\",\n  \"23505\",\n  \"40001\",\n  \"40P01\",\n  \"55P03\",\n]);\n\nconst RETRYABLE_DRIVER_CODES: ReadonlySet<string> = new Set([\n  \"ECONNREFUSED\",\n  \"ECONNRESET\",\n  \"EPIPE\",\n  \"ETIMEDOUT\",\n  \"ENOTFOUND\",\n  \"EAI_AGAIN\",\n]);\n\nfunction matchesRetryableStates(error: unknown, states: ReadonlySet<string>): boolean {\n  return visitCauses(error, 6, (link) => {\n    const code = (link as { code?: unknown }).code;\n    if (typeof code !== \"string\") return false;\n    return states.has(code) || code.startsWith(\"08\") || RETRYABLE_DRIVER_CODES.has(code);\n  });\n}\n\n/**\n * Decide whether a failed migration-init statement (schema/journal creation)\n * is worth retrying. Covers the concurrent `CREATE SCHEMA IF NOT EXISTS`\n * race (unique violation on `pg_namespace`, duplicate-object errors),\n * serialization/deadlock errors, and transient connection failures.\n */\nexport function isRetryableMigrationError(error: unknown): boolean {\n  return matchesRetryableStates(error, RETRYABLE_SQLSTATES);\n}\n\nconst RETRYABLE_STATEMENT_SQLSTATES: ReadonlySet<string> = new Set([\n  \"40001\", // serialization_failure\n  \"40P01\", // deadlock_detected\n  \"55P03\", // lock_not_available\n]);\n\n/**\n * Decide whether a failed migration *statement* (inside its transaction) is\n * worth retrying. Deliberately narrower than `isRetryableMigrationError`:\n * duplicate-object classes are tolerated at the SAVEPOINT level, and a 23505\n * is either the concurrent-DDL catalog collision (also tolerated) or a\n * deterministic data-level violation (retrying is pointless) — so only\n * lock/serialization/transient-connection states justify re-running the\n * transaction.\n */\nexport function isRetryableMigrationExecutionError(error: unknown): boolean {\n  return matchesRetryableStates(error, RETRYABLE_STATEMENT_SQLSTATES);\n}\n\nconst PG_QUERY_QUEUE_DEPRECATION = \"client.query() when the client is already executing a query\";\n\nlet pgWarningFilterInstalled = false;\n\n/**\n * Silence pg's query-queue deprecation warning (fires once per process from\n * pg-pool's internal dispatch under concurrent boot load — node-postgres#3612,\n * #3617). Node's default warning handler prints even when user listeners are\n * attached, so it is removed first; every other warning is re-printed here.\n */\nexport function suppressPgQueryQueueDeprecation(): void {\n  if (pgWarningFilterInstalled) return;\n  if (typeof process === \"undefined\" || typeof process.on !== \"function\") return;\n  pgWarningFilterInstalled = true;\n  process.removeAllListeners(\"warning\");\n  process.on(\"warning\", (warning) => {\n    if (\n      warning.name === \"DeprecationWarning\" &&\n      warning.message.includes(PG_QUERY_QUEUE_DEPRECATION)\n    ) {\n      return;\n    }\n    console.error(warning.stack || `${warning.name}: ${warning.message}`);\n  });\n}\n\nexport function extractExpectedTables(migrations: { sql: string[] }[]): string[] {\n  const tables = new Set<string>();\n  const re = /CREATE\\s+TABLE\\s+(?:IF\\s+NOT\\s+EXISTS\\s+)?(?:\"([^\"]+)\"\\.)?\"([^\"]+)\"/gi;\n  for (const migration of migrations) {\n    for (const stmt of migration.sql) {\n      for (const match of stmt.matchAll(re)) {\n        const tableName = match[2];\n        if (tableName) {\n          tables.add(tableName);\n        }\n      }\n    }\n  }\n  return [...tables];\n}\n"],"mappings":";;;;AASA,MAAM,4BAA4B;CAChC,QAAQ;CACR,OAAO;AACT;AAEA,MAAM,uBAAuB;AAE7B,SAAgB,cAAc,MAAsB;CAElD,QADiB,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,KAC3B,CACZ,QAAQ,MAAM,EAAE,CAAC,CACjB,QAAQ,mBAAmB,GAAG,CAAC,CAC/B,QAAQ,aAAa,EAAE,CAAC,CACxB,QAAQ,MAAM,GAAG,CAAC,CAClB,YAAY;AACjB;AAEA,SAAgB,iBAAiB,KAAsB;CACrD,IAAI,CAAC,KAAK,OAAO,cAAc,QAAQ,IAAI,oBAAoB,SAAS;CACxE,IAAI,UAAU;CACd,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,KAAK;EAC3B,MAAM,UAAU,KAAK,SAAS,cAAc;EAC5C,IAAI,WAAW,OAAO,GACpB,IAAI;GAEF,OAAO,cADK,KAAK,MAAM,aAAa,SAAS,OAAO,CAC7B,CAAC,CAAC,QAAQ,OAAO;EAC1C,QAAQ;GACN,OAAO,cAAc,OAAO;EAC9B;EAEF,MAAM,SAAS,QAAQ,OAAO;EAC9B,IAAI,WAAW,SAAS;EACxB,UAAU;CACZ;CACA,OAAO,cAAc,GAAG;AAC1B;AAEA,SAAgB,oBACd,MACA,SACkB;CAClB,MAAM,IAAI,cAAc,QAAQ,iBAAiB,CAAC;CAElD,IADiB,SAAS,YAAY,sBAEpC,OAAO;EACL,QAAQ,0BAA0B;EAClC,OAAO,wBAAwB;EAC/B,MAAM;CACR;CAEF,OAAO;EACL,QAAQ,0BAA0B;EAClC,OAAO,0BAA0B;EACjC,MAAM;CACR;AACF;;;;;;;;;;;;AAaA,SAAgB,WAAW,KAAuB;CAChD,IAAI,IAAI,WAAW,GAAG,OAAO;CAE7B,OAAO,KADS,IAAI,KAAK,MAAM,EAAE,QAAQ,OAAO,MAAM,CAAC,CAAC,QAAQ,MAAM,MAAK,CACzD,CAAC,CAAC,KAAK,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,EAAE;AACrD;AAEA,SAAgB,oBAAoB,KAAqB;CACvD,OAAO,cAAc,GAAG;AAC1B;AAEA,SAAgB,yBAAyB,MAAsB;CAC7D,OAAO,GAAG,KAAK,YAAY,CAAC,CAAC,QAAQ,MAAM,GAAG,EAAE;AAClD;AAEA,MAAa,6BAAgD;CAAC;CAAS;CAAS;AAAO;;;;;;AAOvF,SAAgB,YACd,OACA,OACA,OACS;CACT,IAAI,UAAmB;CACvB,KAAK,IAAI,IAAI,GAAG,IAAI,SAAS,SAAS,KAAK;EACzC,IAAI,OAAO,YAAY,YAAY,YAAY,QAAQ,MAAM,OAAO,GAAG,OAAO;EAC9E,UAAW,SAAiC;CAC9C;CACA,OAAO;AACT;;;;;;;;;;AAWA,MAAM,6CAAkD,IAAI,IAAI;CAC9D;CACA;CACA;AACF,CAAC;;;;;;;AAQD,SAAgB,+BAA+B,OAAyB;CACtE,OAAO,YAAY,OAAO,IAAI,SAAS;EACrC,MAAM,EAAE,MAAM,YAAY,YAAY;EAKtC,IAAI,SAAS,SAAS,OAAO;EAC7B,IAAI,OAAO,eAAe,YAAY,2BAA2B,IAAI,UAAU,GAAG,OAAO;EACzF,IAAI,OAAO,YAAY,UAAU,OAAO;EACxC,KAAK,MAAM,QAAQ,4BACjB,IAAI,QAAQ,SAAS,IAAI,GAAG,OAAO;EAErC,OAAO;CACT,CAAC;AACH;AAEA,MAAM,sCAA2C,IAAI,IAAI;CACvD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,yCAA8C,IAAI,IAAI;CAC1D;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,SAAS,uBAAuB,OAAgB,QAAsC;CACpF,OAAO,YAAY,OAAO,IAAI,SAAS;EACrC,MAAM,OAAQ,KAA4B;EAC1C,IAAI,OAAO,SAAS,UAAU,OAAO;EACrC,OAAO,OAAO,IAAI,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,uBAAuB,IAAI,IAAI;CACrF,CAAC;AACH;;;;;;;AAQA,SAAgB,0BAA0B,OAAyB;CACjE,OAAO,uBAAuB,OAAO,mBAAmB;AAC1D;AAEA,MAAM,gDAAqD,IAAI,IAAI;CACjE;CACA;CACA;AACF,CAAC;;;;;;;;;;AAWD,SAAgB,mCAAmC,OAAyB;CAC1E,OAAO,uBAAuB,OAAO,6BAA6B;AACpE;AAEA,MAAM,6BAA6B;AAEnC,IAAI,2BAA2B;;;;;;;AAQ/B,SAAgB,kCAAwC;CACtD,IAAI,0BAA0B;CAC9B,IAAI,OAAO,YAAY,eAAe,OAAO,QAAQ,OAAO,YAAY;CACxE,2BAA2B;CAC3B,QAAQ,mBAAmB,SAAS;CACpC,QAAQ,GAAG,YAAY,YAAY;EACjC,IACE,QAAQ,SAAS,wBACjB,QAAQ,QAAQ,SAAS,0BAA0B,GAEnD;EAEF,QAAQ,MAAM,QAAQ,SAAS,GAAG,QAAQ,KAAK,IAAI,QAAQ,SAAS;CACtE,CAAC;AACH;AAEA,SAAgB,sBAAsB,YAA2C;CAC/E,MAAM,yBAAS,IAAI,IAAY;CAC/B,MAAM,KAAK;CACX,KAAK,MAAM,aAAa,YACtB,KAAK,MAAM,QAAQ,UAAU,KAC3B,KAAK,MAAM,SAAS,KAAK,SAAS,EAAE,GAAG;EACrC,MAAM,YAAY,MAAM;EACxB,IAAI,WACF,OAAO,IAAI,SAAS;CAExB;CAGJ,OAAO,CAAC,GAAG,MAAM;AACnB"}
+{"version":3,"file":"core.mjs","names":[],"sources":["../../src/db/core.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\n\nexport interface MigrationStorage {\n  schema: string;\n  table: string;\n  slug: string;\n}\n\nconst DEFAULT_MIGRATION_JOURNAL = {\n  schema: \"drizzle\",\n  table: \"__drizzle_migrations\",\n} as const;\n\nconst PER_PLUGIN_ISOLATION = false;\n\nexport function normalizeSlug(name: string): string {\n  const basename = name.split(\"/\").pop() ?? name;\n  return basename\n    .replace(/^@/, \"\")\n    .replace(/[^a-zA-Z0-9_-]/g, \"_\")\n    .replace(/-plugin$/i, \"\")\n    .replace(/-/g, \"_\")\n    .toLowerCase();\n}\n\nexport function getMigrationSlug(dir?: string): string {\n  if (!dir) return normalizeSlug(process.env.npm_package_name ?? \"unknown\");\n  let current = dir;\n  for (let i = 0; i < 10; i++) {\n    const pkgPath = join(current, \"package.json\");\n    if (existsSync(pkgPath)) {\n      try {\n        const pkg = JSON.parse(readFileSync(pkgPath, \"utf-8\")) as { name?: string };\n        return normalizeSlug(pkg.name ?? current);\n      } catch {\n        return normalizeSlug(current);\n      }\n    }\n    const parent = dirname(current);\n    if (parent === current) break;\n    current = parent;\n  }\n  return normalizeSlug(dir);\n}\n\nexport function getMigrationStorage(\n  slug?: string,\n  options?: { isolated?: boolean },\n): MigrationStorage {\n  const s = normalizeSlug(slug ?? getMigrationSlug());\n  const isolated = options?.isolated ?? PER_PLUGIN_ISOLATION;\n  if (isolated) {\n    return {\n      schema: DEFAULT_MIGRATION_JOURNAL.schema,\n      table: `__drizzle_migrations_${s}`,\n      slug: s,\n    };\n  }\n  return {\n    schema: DEFAULT_MIGRATION_JOURNAL.schema,\n    table: DEFAULT_MIGRATION_JOURNAL.table,\n    slug: s,\n  };\n}\n\n/**\n * Format a JavaScript string array as a PostgreSQL text array literal for use\n * with Drizzle's `sql` tag. Example return:\n *   `'{\"h1\",\"h2\"}'::text[]`\n *\n * Usage: sql`WHERE col = ANY(${toSqlArray(values)})`\n *\n * Drizzle's default parameter binding does not handle array types correctly\n * with the pg driver (it emits `ANY(($1))` with a single string, which\n * Postgres rejects as a malformed array literal).\n */\nexport function toSqlArray(arr: string[]): string {\n  if (arr.length === 0) return `'{}'::text[]`;\n  const escaped = arr.map((v) => v.replace(/\\\\/g, \"\\\\\\\\\").replace(/\"/g, '\\\\\"'));\n  return `'{${escaped.map((v) => `\"${v}\"`).join(\",\")}}'::text[]`;\n}\n\nexport function pluginMigrationSlug(key: string): string {\n  return normalizeSlug(key);\n}\n\nexport function getDatabaseUrlSecretName(slug: string): string {\n  return `${slug.toUpperCase().replace(/-/g, \"_\")}_DATABASE_URL`;\n}\n\nexport const DUPLICATE_OBJECT_SQLSTATES: readonly string[] = [\"42710\", \"42701\", \"42P07\"];\n\n/**\n * Walk `error` and its `cause` chain (bounded), invoking `visit` on each link.\n * Postgres driver errors arrive wrapped by drizzle/Effect at varying depths,\n * so every error-shape predicate below shares this traversal.\n */\nexport function visitCauses(\n  error: unknown,\n  depth: number,\n  visit: (link: object) => boolean,\n): boolean {\n  let current: unknown = error;\n  for (let i = 0; i < depth && current; i++) {\n    if (typeof current === \"object\" && current !== null && visit(current)) return true;\n    current = (current as { cause?: unknown })?.cause;\n  }\n  return false;\n}\n\n/**\n * pg_catalog unique indexes that can surface a concurrent-DDL race as SQLSTATE\n * 23505 instead of a duplicate-object class. When two connections run\n * `CREATE TABLE <name>` at the same time, the loser fails its insert into\n * `pg_type` (\"duplicate key value violates unique constraint\n * `pg_type_typname_nsp_index`\") rather than seeing 42P07, because the winner's\n * table is not yet committed. The same shape exists for schemas and other\n * relations.\n */\nconst CONCURRENT_DDL_CONSTRAINTS: ReadonlySet<string> = new Set([\n  \"pg_type_typname_nsp_index\",\n  \"pg_namespace_nspname_index\",\n  \"pg_class_relname_nsp_index\",\n]);\n\n/**\n * Whether a SQLSTATE 23505 unique violation is the concurrent-DDL catalog\n * collision signature rather than a data-level constraint on a user table.\n * Data-level violations must keep failing loudly; only the pg_catalog indexes\n * above are treated as duplicate-DDL tolerance candidates.\n */\nexport function isConcurrentDdlUniqueViolation(error: unknown): boolean {\n  return visitCauses(error, 6, (link) => {\n    const { code, constraint, message } = link as {\n      code?: unknown;\n      constraint?: unknown;\n      message?: unknown;\n    };\n    if (code !== \"23505\") return false;\n    if (typeof constraint === \"string\" && CONCURRENT_DDL_CONSTRAINTS.has(constraint)) return true;\n    if (typeof message !== \"string\") return false;\n    for (const name of CONCURRENT_DDL_CONSTRAINTS) {\n      if (message.includes(name)) return true;\n    }\n    return false;\n  });\n}\n\nconst RETRYABLE_SQLSTATES: ReadonlySet<string> = new Set([\n  \"42P06\",\n  \"42710\",\n  \"42701\",\n  \"42P07\",\n  \"23505\",\n  \"40001\",\n  \"40P01\",\n  \"55P03\",\n]);\n\nconst RETRYABLE_DRIVER_CODES: ReadonlySet<string> = new Set([\n  \"ECONNREFUSED\",\n  \"ECONNRESET\",\n  \"EPIPE\",\n  \"ETIMEDOUT\",\n  \"ENOTFOUND\",\n  \"EAI_AGAIN\",\n]);\n\nfunction matchesRetryableStates(error: unknown, states: ReadonlySet<string>): boolean {\n  return visitCauses(error, 6, (link) => {\n    const code = (link as { code?: unknown }).code;\n    if (typeof code !== \"string\") return false;\n    return states.has(code) || code.startsWith(\"08\") || RETRYABLE_DRIVER_CODES.has(code);\n  });\n}\n\n/**\n * Decide whether a failed migration-init statement (schema/journal creation)\n * is worth retrying. Covers the concurrent `CREATE SCHEMA IF NOT EXISTS`\n * race (unique violation on `pg_namespace`, duplicate-object errors),\n * serialization/deadlock errors, and transient connection failures.\n */\nexport function isRetryableMigrationError(error: unknown): boolean {\n  return matchesRetryableStates(error, RETRYABLE_SQLSTATES);\n}\n\nconst RETRYABLE_STATEMENT_SQLSTATES: ReadonlySet<string> = new Set([\n  \"40001\", // serialization_failure\n  \"40P01\", // deadlock_detected\n  \"55P03\", // lock_not_available\n]);\n\n/**\n * Decide whether a failed migration *statement* (inside its transaction) is\n * worth retrying. Deliberately narrower than `isRetryableMigrationError`:\n * duplicate-object classes are tolerated at the SAVEPOINT level, and a 23505\n * is either the concurrent-DDL catalog collision (also tolerated) or a\n * deterministic data-level violation (retrying is pointless) — so only\n * lock/serialization/transient-connection states justify re-running the\n * transaction.\n */\nexport function isRetryableMigrationExecutionError(error: unknown): boolean {\n  return matchesRetryableStates(error, RETRYABLE_STATEMENT_SQLSTATES);\n}\n\nconst PG_QUERY_QUEUE_DEPRECATION = \"client.query() when the client is already executing a query\";\n\nlet pgWarningFilterInstalled = false;\n\n/**\n * Silence pg's query-queue deprecation warning (fires once per process from\n * pg-pool's internal dispatch under concurrent boot load — node-postgres#3612,\n * #3617). Node's default warning handler prints even when user listeners are\n * attached, so it is removed first; every other warning is re-printed here.\n */\nexport function suppressPgQueryQueueDeprecation(): void {\n  if (pgWarningFilterInstalled) return;\n  if (typeof process === \"undefined\" || typeof process.on !== \"function\") return;\n  pgWarningFilterInstalled = true;\n  process.removeAllListeners(\"warning\");\n  process.on(\"warning\", (warning) => {\n    if (\n      warning.name === \"DeprecationWarning\" &&\n      warning.message.includes(PG_QUERY_QUEUE_DEPRECATION)\n    ) {\n      return;\n    }\n    console.error(warning.stack || `${warning.name}: ${warning.message}`);\n  });\n}\n\nexport function extractExpectedTables(migrations: { sql: string[] }[]): string[] {\n  const tables = new Set<string>();\n  const ident = String.raw`(?:\"([^\"]+)\"|(\\w+))`;\n  const qualified = String.raw`(?:${ident}\\.)?`;\n  const createRe = new RegExp(\n    String.raw`CREATE\\s+TABLE\\s+(?:IF\\s+NOT\\s+EXISTS\\s+)?${qualified}${ident}`,\n    \"gi\",\n  );\n  const dropRe = new RegExp(\n    String.raw`DROP\\s+TABLE\\s+(?:IF\\s+EXISTS\\s+)?${qualified}${ident}`,\n    \"gi\",\n  );\n  const renameRe = new RegExp(\n    String.raw`ALTER\\s+TABLE\\s+(?:IF\\s+EXISTS\\s+)?${qualified}${ident}${String.raw`\\s+RENAME\\s+TO\\s+`}${ident}`,\n    \"gi\",\n  );\n  for (const migration of migrations) {\n    for (const stmt of migration.sql) {\n      for (const match of stmt.matchAll(createRe)) {\n        const tableName = match[3] ?? match[4];\n        if (tableName) {\n          tables.add(tableName);\n        }\n      }\n      for (const match of stmt.matchAll(dropRe)) {\n        const tableName = match[3] ?? match[4];\n        if (tableName) {\n          tables.delete(tableName);\n        }\n      }\n      for (const match of stmt.matchAll(renameRe)) {\n        const from = match[3] ?? match[4];\n        const to = match[5] ?? match[6];\n        if (from && to) {\n          tables.delete(from);\n          tables.add(to);\n        }\n      }\n    }\n  }\n  return [...tables];\n}\n"],"mappings":";;;;AASA,MAAM,4BAA4B;CAChC,QAAQ;CACR,OAAO;AACT;AAEA,MAAM,uBAAuB;AAE7B,SAAgB,cAAc,MAAsB;CAElD,QADiB,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,KAC3B,CACZ,QAAQ,MAAM,EAAE,CAAC,CACjB,QAAQ,mBAAmB,GAAG,CAAC,CAC/B,QAAQ,aAAa,EAAE,CAAC,CACxB,QAAQ,MAAM,GAAG,CAAC,CAClB,YAAY;AACjB;AAEA,SAAgB,iBAAiB,KAAsB;CACrD,IAAI,CAAC,KAAK,OAAO,cAAc,QAAQ,IAAI,oBAAoB,SAAS;CACxE,IAAI,UAAU;CACd,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,KAAK;EAC3B,MAAM,UAAU,KAAK,SAAS,cAAc;EAC5C,IAAI,WAAW,OAAO,GACpB,IAAI;GAEF,OAAO,cADK,KAAK,MAAM,aAAa,SAAS,OAAO,CAC7B,CAAC,CAAC,QAAQ,OAAO;EAC1C,QAAQ;GACN,OAAO,cAAc,OAAO;EAC9B;EAEF,MAAM,SAAS,QAAQ,OAAO;EAC9B,IAAI,WAAW,SAAS;EACxB,UAAU;CACZ;CACA,OAAO,cAAc,GAAG;AAC1B;AAEA,SAAgB,oBACd,MACA,SACkB;CAClB,MAAM,IAAI,cAAc,QAAQ,iBAAiB,CAAC;CAElD,IADiB,SAAS,YAAY,sBAEpC,OAAO;EACL,QAAQ,0BAA0B;EAClC,OAAO,wBAAwB;EAC/B,MAAM;CACR;CAEF,OAAO;EACL,QAAQ,0BAA0B;EAClC,OAAO,0BAA0B;EACjC,MAAM;CACR;AACF;;;;;;;;;;;;AAaA,SAAgB,WAAW,KAAuB;CAChD,IAAI,IAAI,WAAW,GAAG,OAAO;CAE7B,OAAO,KADS,IAAI,KAAK,MAAM,EAAE,QAAQ,OAAO,MAAM,CAAC,CAAC,QAAQ,MAAM,MAAK,CACzD,CAAC,CAAC,KAAK,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,EAAE;AACrD;AAEA,SAAgB,oBAAoB,KAAqB;CACvD,OAAO,cAAc,GAAG;AAC1B;AAEA,SAAgB,yBAAyB,MAAsB;CAC7D,OAAO,GAAG,KAAK,YAAY,CAAC,CAAC,QAAQ,MAAM,GAAG,EAAE;AAClD;AAEA,MAAa,6BAAgD;CAAC;CAAS;CAAS;AAAO;;;;;;AAOvF,SAAgB,YACd,OACA,OACA,OACS;CACT,IAAI,UAAmB;CACvB,KAAK,IAAI,IAAI,GAAG,IAAI,SAAS,SAAS,KAAK;EACzC,IAAI,OAAO,YAAY,YAAY,YAAY,QAAQ,MAAM,OAAO,GAAG,OAAO;EAC9E,UAAW,SAAiC;CAC9C;CACA,OAAO;AACT;;;;;;;;;;AAWA,MAAM,6CAAkD,IAAI,IAAI;CAC9D;CACA;CACA;AACF,CAAC;;;;;;;AAQD,SAAgB,+BAA+B,OAAyB;CACtE,OAAO,YAAY,OAAO,IAAI,SAAS;EACrC,MAAM,EAAE,MAAM,YAAY,YAAY;EAKtC,IAAI,SAAS,SAAS,OAAO;EAC7B,IAAI,OAAO,eAAe,YAAY,2BAA2B,IAAI,UAAU,GAAG,OAAO;EACzF,IAAI,OAAO,YAAY,UAAU,OAAO;EACxC,KAAK,MAAM,QAAQ,4BACjB,IAAI,QAAQ,SAAS,IAAI,GAAG,OAAO;EAErC,OAAO;CACT,CAAC;AACH;AAEA,MAAM,sCAA2C,IAAI,IAAI;CACvD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,yCAA8C,IAAI,IAAI;CAC1D;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,SAAS,uBAAuB,OAAgB,QAAsC;CACpF,OAAO,YAAY,OAAO,IAAI,SAAS;EACrC,MAAM,OAAQ,KAA4B;EAC1C,IAAI,OAAO,SAAS,UAAU,OAAO;EACrC,OAAO,OAAO,IAAI,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,uBAAuB,IAAI,IAAI;CACrF,CAAC;AACH;;;;;;;AAQA,SAAgB,0BAA0B,OAAyB;CACjE,OAAO,uBAAuB,OAAO,mBAAmB;AAC1D;AAEA,MAAM,gDAAqD,IAAI,IAAI;CACjE;CACA;CACA;AACF,CAAC;;;;;;;;;;AAWD,SAAgB,mCAAmC,OAAyB;CAC1E,OAAO,uBAAuB,OAAO,6BAA6B;AACpE;AAEA,MAAM,6BAA6B;AAEnC,IAAI,2BAA2B;;;;;;;AAQ/B,SAAgB,kCAAwC;CACtD,IAAI,0BAA0B;CAC9B,IAAI,OAAO,YAAY,eAAe,OAAO,QAAQ,OAAO,YAAY;CACxE,2BAA2B;CAC3B,QAAQ,mBAAmB,SAAS;CACpC,QAAQ,GAAG,YAAY,YAAY;EACjC,IACE,QAAQ,SAAS,wBACjB,QAAQ,QAAQ,SAAS,0BAA0B,GAEnD;EAEF,QAAQ,MAAM,QAAQ,SAAS,GAAG,QAAQ,KAAK,IAAI,QAAQ,SAAS;CACtE,CAAC;AACH;AAEA,SAAgB,sBAAsB,YAA2C;CAC/E,MAAM,yBAAS,IAAI,IAAY;CAC/B,MAAM,QAAQ,OAAO,GAAG;CACxB,MAAM,YAAY,OAAO,GAAG,MAAM,MAAM;CACxC,MAAM,WAAW,IAAI,OACnB,OAAO,GAAG,6CAA6C,YAAY,SACnE,IACF;CACA,MAAM,SAAS,IAAI,OACjB,OAAO,GAAG,qCAAqC,YAAY,SAC3D,IACF;CACA,MAAM,WAAW,IAAI,OACnB,OAAO,GAAG,sCAAsC,YAAY,QAAQ,OAAO,GAAG,sBAAsB,SACpG,IACF;CACA,KAAK,MAAM,aAAa,YACtB,KAAK,MAAM,QAAQ,UAAU,KAAK;EAChC,KAAK,MAAM,SAAS,KAAK,SAAS,QAAQ,GAAG;GAC3C,MAAM,YAAY,MAAM,MAAM,MAAM;GACpC,IAAI,WACF,OAAO,IAAI,SAAS;EAExB;EACA,KAAK,MAAM,SAAS,KAAK,SAAS,MAAM,GAAG;GACzC,MAAM,YAAY,MAAM,MAAM,MAAM;GACpC,IAAI,WACF,OAAO,OAAO,SAAS;EAE3B;EACA,KAAK,MAAM,SAAS,KAAK,SAAS,QAAQ,GAAG;GAC3C,MAAM,OAAO,MAAM,MAAM,MAAM;GAC/B,MAAM,KAAK,MAAM,MAAM,MAAM;GAC7B,IAAI,QAAQ,IAAI;IACd,OAAO,OAAO,IAAI;IAClB,OAAO,IAAI,EAAE;GACf;EACF;CACF;CAEF,OAAO,CAAC,GAAG,MAAM;AACnB"}

package/dist/http-client.cjs

@@ -72,6 +72,19 @@ var HttpFetch = class HttpFetch extends effect.Context.Service()("everything-dev
 };
 const getCache = /* @__PURE__ */ new Map();
 const GET_CACHE_TTL_MS = 3e4;
+const GET_CACHE_MAX_ENTRIES = 128;
+function setCached(url, data) {
+	const now = Date.now();
+	for (const [key, entry] of getCache) if (entry.expiresAt <= now) getCache.delete(key);
+	if (getCache.size >= GET_CACHE_MAX_ENTRIES) for (const key of getCache.keys()) {
+		getCache.delete(key);
+		if (getCache.size < GET_CACHE_MAX_ENTRIES) break;
+	}
+	getCache.set(url, {
+		data,
+		expiresAt: now + GET_CACHE_TTL_MS
+	});
+}
 function isCacheable(_url, options) {
 	if (options?.method && options.method !== "GET") return false;
 	if (options?.body) return false;
@@ -99,10 +112,7 @@ const fetchJsonOrNull = async (url, options) => {
 	}
 	try {
 		const data = await (await effect.Effect.runPromise(defaultHttpFetch.get(url, options))).json();
-		if (isCacheable(url, options)) getCache.set(url, {
-			data,
-			expiresAt: Date.now() + GET_CACHE_TTL_MS
-		});
+		if (isCacheable(url, options)) setCached(url, data);
 		return data;
 	} catch (error) {
 		const msg = error instanceof FetchNetworkError ? `[http] Network error: ${error.url} — ${String(error.cause)}` : error instanceof FetchTimeoutError ? `[http] Timeout: ${error.url}` : error instanceof FetchHttpError ? `[http] HTTP ${error.status}: ${error.url}` : `[http] Unknown error while fetching ${url}`;