frontmcp 1.2.1 → 1.3.0

package/src/config/frontmcp-config.loader.js

@@ -7,13 +7,13 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.loadFrontMcpConfig = loadFrontMcpConfig;
+exports.loadFrontMcpConfigFromFile = loadFrontMcpConfigFromFile;
+exports.findConfigDir = findConfigDir;
 exports.tryLoadFrontMcpConfig = tryLoadFrontMcpConfig;
+exports.tryLoadFrontMcpConfigFromFile = tryLoadFrontMcpConfigFromFile;
 exports.validateConfig = validateConfig;
 exports.findDeployment = findDeployment;
 exports.getDeploymentTargets = getDeploymentTargets;
-const tslib_1 = require("tslib");
-const fs = tslib_1.__importStar(require("fs"));
-const path = tslib_1.__importStar(require("path"));
 const utils_1 = require("@frontmcp/utils");
 const frontmcp_config_schema_1 = require("./frontmcp-config.schema");
 const CONFIG_FILENAMES = [
@@ -38,6 +38,48 @@ async function loadFrontMcpConfig(cwd) {
     const raw = await loadRawConfig(cwd);
     return validateConfig(raw);
 }
+/**
+ * Load a specific config file by absolute or cwd-relative path. Used by the
+ * `--config <path>` flag and the `FRONTMCP_CONFIG` env var (issue #400).
+ *
+ * Unlike `loadFrontMcpConfig`, this doesn't search `CONFIG_FILENAMES` — the
+ * caller already named the file, so a missing-file error is a hard failure
+ * (no silent fallback to `deriveFromPackageJson`).
+ */
+async function loadFrontMcpConfigFromFile(configPath) {
+    const absolutePath = (0, utils_1.isAbsolute)(configPath) ? configPath : (0, utils_1.pathResolve)(process.cwd(), configPath);
+    if (!(await (0, utils_1.fileExists)(absolutePath))) {
+        throw new Error(`Config file not found: ${configPath}`);
+    }
+    const filename = (0, utils_1.basename)(absolutePath);
+    const raw = await loadRawFileAtPath(absolutePath, filename);
+    return validateConfig(raw);
+}
+/**
+ * Locate the nearest `frontmcp.config.*` file by walking upward from `cwd`.
+ *
+ * Issue #400 — monorepo nested apps no longer require `cd <repo-root>`
+ * before invoking the CLI. The walk caps at 10 levels to avoid pathological
+ * symlink loops.
+ *
+ * Returns the directory containing the config (so callers can pass it to
+ * `loadFrontMcpConfig(dir)`), or `undefined` if nothing was found.
+ */
+async function findConfigDir(startDir, maxLevels = 10) {
+    let current = (0, utils_1.pathResolve)(startDir);
+    for (let i = 0; i <= maxLevels; i++) {
+        for (const filename of CONFIG_FILENAMES) {
+            if (await (0, utils_1.fileExists)((0, utils_1.pathJoin)(current, filename))) {
+                return current;
+            }
+        }
+        const parent = (0, utils_1.dirname)(current);
+        if (parent === current)
+            return undefined;
+        current = parent;
+    }
+    return undefined;
+}
 /**
  * Variant that load-errors propagate (parse failures in `frontmcp.config.ts`,
  * missing dependencies, etc.) but schema-validation errors return `undefined`.
@@ -70,6 +112,32 @@ async function tryLoadFrontMcpConfig(cwd) {
         }
         throw err;
     }
+    return parseRawOrLegacy(raw);
+}
+/**
+ * Explicit-path counterpart of {@link tryLoadFrontMcpConfig}. Used by
+ * `resolveConfig` for the `--config <path>` / `FRONTMCP_CONFIG` branch so a
+ * legacy exec-only config passed via explicit path resolves the same way
+ * an auto-discovered one does: `config: undefined`, no throw, callers fall
+ * back to `loadExecConfig`. Real parse failures still propagate.
+ */
+async function tryLoadFrontMcpConfigFromFile(configPath) {
+    const absolutePath = (0, utils_1.isAbsolute)(configPath) ? configPath : (0, utils_1.pathResolve)(process.cwd(), configPath);
+    if (!(await (0, utils_1.fileExists)(absolutePath))) {
+        throw new Error(`Config file not found: ${configPath}`);
+    }
+    const filename = (0, utils_1.basename)(absolutePath);
+    const raw = await loadRawFileAtPath(absolutePath, filename);
+    return parseRawOrLegacy(raw);
+}
+/**
+ * Schema-validate a raw config payload, returning `undefined` when it
+ * matches the legacy exec-only shape (top-level `cli` / `sea` / `esbuild`,
+ * no `deployments`) and throwing on every other parse failure. Shared
+ * between the cwd-search and explicit-path soft loaders so they agree on
+ * what "legacy" means.
+ */
+function parseRawOrLegacy(raw) {
     const result = frontmcp_config_schema_1.frontmcpConfigSchema.safeParse(raw);
     if (!result.success) {
         // Distinguish two failure shapes:
@@ -94,76 +162,87 @@ async function tryLoadFrontMcpConfig(cwd) {
  */
 async function loadRawConfig(cwd) {
     for (const filename of CONFIG_FILENAMES) {
-        const configPath = path.join(cwd, filename);
-        if (!fs.existsSync(configPath))
+        const configPath = (0, utils_1.pathJoin)(cwd, filename);
+        if (!(await (0, utils_1.fileExists)(configPath)))
             continue;
-        if (filename.endsWith('.json')) {
-            const content = fs.readFileSync(configPath, 'utf-8');
-            return JSON.parse(content);
-        }
-        if (filename.endsWith('.ts')) {
-            // #365 — Loading `.ts` under `"type": "commonjs"` (the default) is a
-            // minefield across Node versions:
-            //   - Node 20: `require()` throws on TS syntax, `await import()` errors
-            //     with "Make sure to set type: module".
-            //   - Node 22+: `require(esm)` may succeed but return partial data, OR
-            //     emit a warning on `await import()` even when the load succeeds.
-            //   - Node 24: type-stripping may swallow `import { x } from ...`
-            //     statements, returning `{}` instead of the user's exports — the
-            //     1.1.2-beta.1 silent-defaults regression.
-            // Round 3: under CJS, ALWAYS transpile via esbuild. It's the only path
-            // that produces a deterministic, fully-typed result. ESM projects can
-            // still use Node's runtime loaders since they're well-behaved there.
-            const isCjsProject = await isCommonJsProject(cwd);
-            if (isCjsProject) {
-                try {
-                    return await loadTsConfigViaEsbuild(configPath);
-                }
-                catch (esbuildErr) {
-                    throw new Error(`Failed to load ${filename} via esbuild.\n` +
-                        `  ${esbuildErr.message}\n` +
-                        `Hint: ensure the file exports a default config (e.g., ` +
-                        `\`export default defineConfig({...})\`) and that all imports resolve.`);
-                }
-            }
-            // ESM project ("type": "module"): try Node's loaders first (faster,
-            // no transpile cost), fall back to esbuild on failure.
-            let requireErr;
-            try {
-                const mod = require(configPath);
-                return mod.default ?? mod;
-            }
-            catch (e) {
-                requireErr = e;
-            }
-            try {
-                const mod = await import(configPath);
-                return mod.default ?? mod;
-            }
-            catch {
-                // Fall through to esbuild.
-            }
+        return loadRawFileAtPath(configPath, filename);
+    }
+    // Fallback: derive from package.json
+    return deriveFromPackageJson(cwd);
+}
+/**
+ * Load a single config file by absolute path (no search). Shared by
+ * `loadRawConfig` (search-then-load) and `loadFrontMcpConfigFromFile`
+ * (explicit-path).
+ */
+async function loadRawFileAtPath(configPath, filename) {
+    if (filename.endsWith('.json')) {
+        const content = await (0, utils_1.readFile)(configPath);
+        return JSON.parse(content);
+    }
+    if (filename.endsWith('.ts')) {
+        const cwd = (0, utils_1.dirname)(configPath);
+        // #365 — Loading `.ts` under `"type": "commonjs"` (the default) is a
+        // minefield across Node versions:
+        //   - Node 20: `require()` throws on TS syntax, `await import()` errors
+        //     with "Make sure to set type: module".
+        //   - Node 22+: `require(esm)` may succeed but return partial data, OR
+        //     emit a warning on `await import()` even when the load succeeds.
+        //   - Node 24: type-stripping may swallow `import { x } from ...`
+        //     statements, returning `{}` instead of the user's exports — the
+        //     1.1.2-beta.1 silent-defaults regression.
+        // Round 3: under CJS, ALWAYS transpile via esbuild. It's the only path
+        // that produces a deterministic, fully-typed result. ESM projects can
+        // still use Node's runtime loaders since they're well-behaved there.
+        const isCjsProject = await isCommonJsProject(cwd);
+        if (isCjsProject) {
             try {
                 return await loadTsConfigViaEsbuild(configPath);
             }
             catch (esbuildErr) {
-                throw new Error(`Failed to load ${filename}.\n` +
-                    `  require() error: ${requireErr?.message ?? '(skipped)'}\n` +
-                    `  esbuild error:   ${esbuildErr.message}\n` +
+                throw new Error(`Failed to load ${filename} via esbuild.\n` +
+                    `  ${esbuildErr.message}\n` +
                     `Hint: ensure the file exports a default config (e.g., ` +
                     `\`export default defineConfig({...})\`) and that all imports resolve.`);
             }
         }
-        // JS/MJS/CJS
-        if (filename.endsWith('.mjs')) {
-            const mod = await import(configPath);
+        // ESM project ("type": "module"): try Node's loaders first (faster,
+        // no transpile cost), fall back to esbuild on failure.
+        let requireErr;
+        try {
+            const mod = require(configPath);
+            return mod.default ?? mod;
+        }
+        catch (e) {
+            requireErr = e;
+        }
+        try {
+            // pathToFileURL — Windows absolute paths (e.g. `C:\…\frontmcp.config.ts`)
+            // are not valid ESM specifiers; Node requires a `file://` URL.
+            const mod = await import((0, utils_1.pathToFileURL)(configPath).href);
             return mod.default ?? mod;
         }
-        const mod = require(configPath);
+        catch {
+            // Fall through to esbuild.
+        }
+        try {
+            return await loadTsConfigViaEsbuild(configPath);
+        }
+        catch (esbuildErr) {
+            throw new Error(`Failed to load ${filename}.\n` +
+                `  require() error: ${requireErr?.message ?? '(skipped)'}\n` +
+                `  esbuild error:   ${esbuildErr.message}\n` +
+                `Hint: ensure the file exports a default config (e.g., ` +
+                `\`export default defineConfig({...})\`) and that all imports resolve.`);
+        }
+    }
+    // JS/MJS/CJS
+    if (filename.endsWith('.mjs')) {
+        const mod = await import((0, utils_1.pathToFileURL)(configPath).href);
         return mod.default ?? mod;
     }
-    // Fallback: derive from package.json
-    return deriveFromPackageJson(cwd);
+    const mod = require(configPath);
+    return mod.default ?? mod;
 }
 /**
  * Read the host project's `package.json.type` to decide whether `await import()`
@@ -179,7 +258,7 @@ async function loadRawConfig(cwd) {
  */
 async function isCommonJsProject(cwd) {
     try {
-        const pkgPath = path.join(cwd, 'package.json');
+        const pkgPath = (0, utils_1.pathJoin)(cwd, 'package.json');
         const contents = await (0, utils_1.readFile)(pkgPath);
         const pkg = JSON.parse(contents);
         return pkg.type !== 'module';
@@ -226,7 +305,7 @@ async function loadTsConfigViaEsbuild(configPath) {
     // Make the loaded module's `require` resolve relative to the config dir
     // so user `import { defineConfig } from 'frontmcp'` keeps working.
     m.filename = configPath;
-    m.paths = Module._nodeModulePaths(path.dirname(configPath));
+    m.paths = Module._nodeModulePaths((0, utils_1.dirname)(configPath));
     m._compile(code, configPath);
     const exported = m.exports;
     return exported?.default ?? exported;
@@ -234,14 +313,14 @@ async function loadTsConfigViaEsbuild(configPath) {
 /**
  * Derive minimal config from package.json.
  */
-function deriveFromPackageJson(cwd) {
-    const pkgPath = path.join(cwd, 'package.json');
-    if (!fs.existsSync(pkgPath)) {
+async function deriveFromPackageJson(cwd) {
+    const pkgPath = (0, utils_1.pathJoin)(cwd, 'package.json');
+    if (!(await (0, utils_1.fileExists)(pkgPath))) {
         throw new Error('No frontmcp.config found and no package.json. Create a frontmcp.config.ts to configure build targets.');
     }
-    const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf-8'));
+    const pkg = JSON.parse(await (0, utils_1.readFile)(pkgPath));
     return {
-        name: pkg.name?.replace(/^@[^/]+\//, '') || path.basename(cwd),
+        name: pkg.name?.replace(/^@[^/]+\//, '') || (0, utils_1.basename)(cwd),
         version: pkg.version || '1.0.0',
         entry: pkg.main,
         deployments: [{ target: 'node' }],

package/src/config/frontmcp-config.loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"frontmcp-config.loader.js","sourceRoot":"","sources":["../../../src/config/frontmcp-config.loader.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AA6BH,gDAGC;AAqBD,sDA8BC;AAgLD,wCAOC;AAKD,wCAEC;AAKD,oDAEC;;AAtRD,+CAAyB;AACzB,mDAA6B;AAE7B,2CAA2C;AAE3C,qEAA2F;AAG3F,MAAM,gBAAgB,GAAG;IACvB,oBAAoB;IACpB,oBAAoB;IACpB,sBAAsB;IACtB,qBAAqB;IACrB,qBAAqB;CACtB,CAAC;AAEF;;;;;;;;;;GAUG;AACI,KAAK,UAAU,kBAAkB,CAAC,GAAW;IAClD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACI,KAAK,UAAU,qBAAqB,CAAC,GAAW;IACrD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,uEAAuE;QACvE,+EAA+E;QAC/E,IAAK,GAAa,CAAC,OAAO,EAAE,UAAU,CAAC,0BAA0B,CAAC,EAAE,CAAC;YACnE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAG,6CAAoB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,kCAAkC;QAClC,sEAAsE;QACtE,wEAAwE;QACxE,8DAA8D;QAC9D,uEAAuE;QACvE,oEAAoE;QACpE,uEAAuE;QACvE,4DAA4D;QAC5D,MAAM,GAAG,GAAG,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAE,GAA+B,CAAC,CAAC,CAAC,SAAS,CAAC;QACnG,MAAM,qBAAqB,GACzB,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,aAAa,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,IAAI,KAAK,IAAI,GAAG,IAAI,SAAS,IAAI,GAAG,CAAC,CAAC;QACzF,IAAI,qBAAqB;YAAE,OAAO,SAAS,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClG,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,aAAa,CAAC,GAAW;IACtC,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,SAAS;QAEzC,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACrD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QAED,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,qEAAqE;YACrE,kCAAkC;YAClC,wEAAwE;YACxE,4CAA4C;YAC5C,uEAAuE;YACvE,sEAAsE;YACtE,kEAAkE;YAClE,qEAAqE;YACrE,+CAA+C;YAC/C,uEAAuE;YACvE,sEAAsE;YACtE,qEAAqE;YACrE,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;YAClD,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,CAAC;oBACH,OAAO,MAAM,sBAAsB,CAAC,UAAU,CAAC,CAAC;gBAClD,CAAC;gBAAC,OAAO,UAAU,EAAE,CAAC;oBACpB,MAAM,IAAI,KAAK,CACb,kBAAkB,QAAQ,iBAAiB;wBACzC,KAAM,UAAoB,CAAC,OAAO,IAAI;wBACtC,wDAAwD;wBACxD,uEAAuE,CAC1E,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,oEAAoE;YACpE,uDAAuD;YACvD,IAAI,UAA6B,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;gBAChC,OAAO,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC;YAC5B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,UAAU,GAAG,CAAU,CAAC;YAC1B,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;gBACrC,OAAO,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,2BAA2B;YAC7B,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,MAAM,sBAAsB,CAAC,UAAU,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CACb,kBAAkB,QAAQ,KAAK;oBAC7B,sBAAsB,UAAU,EAAE,OAAO,IAAI,WAAW,IAAI;oBAC5D,sBAAuB,UAAoB,CAAC,OAAO,IAAI;oBACvD,wDAAwD;oBACxD,uEAAuE,CAC1E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,aAAa;QACb,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;YACrC,OAAO,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC;QAC5B,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QAChC,OAAO,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC;IAC5B,CAAC;IAED,qCAAqC;IACrC,OAAO,qBAAqB,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,iBAAiB,CAAC,GAAW;IAC1C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,IAAA,gBAAQ,EAAC,OAAO,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAsB,CAAC;QACtD,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,KAAK,UAAU,sBAAsB,CAAC,UAAkB;IACtD,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAA6B,CAAC;IAC/D,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC;QAChC,WAAW,EAAE,CAAC,UAAU,CAAC;QACzB,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,UAAU;QACpB,SAAS,EAAE,QAAQ;QACnB,QAAQ,EAAE,QAAQ;KACnB,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,UAAU,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEvC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAA4B,CAAC;IAC5D,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACzC,wEAAwE;IACxE,mEAAmE;IACnE,CAAC,CAAC,QAAQ,GAAG,UAAU,CAAC;IACxB,CAAC,CAAC,KAAK,GAAI,MAA+D,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IAErH,CAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAEtC,MAAM,QAAQ,GAAI,CAAS,CAAC,OAAgC,CAAC;IAC7D,OAAO,QAAQ,EAAE,OAAO,IAAI,QAAQ,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,GAAW;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC/C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,uGAAuG,CACxG,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1D,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC9D,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,OAAO;QAC/B,KAAK,EAAE,GAAG,CAAC,IAAI;QACf,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;KAClC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,GAAY;IACzC,MAAM,MAAM,GAAG,6CAAoB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClG,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,MAA4B,EAAE,MAAc;IACzE,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;AAC7D,CAAC;AAED;;GAEG;AACH,SAAgB,oBAAoB,CAAC,MAA4B;IAC/D,OAAO,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACjD,CAAC","sourcesContent":["/**\n * FrontMCP Config Loader\n *\n * Loads `frontmcp.config.(json|js|ts|mjs|cjs)` from a directory.\n * Falls back to deriving minimal config from package.json.\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\n\nimport { readFile } from '@frontmcp/utils';\n\nimport { frontmcpConfigSchema, type FrontMcpConfigParsed } from './frontmcp-config.schema';\nimport type { DeploymentTarget, FrontMcpConfig } from './frontmcp-config.types';\n\nconst CONFIG_FILENAMES = [\n  'frontmcp.config.ts',\n  'frontmcp.config.js',\n  'frontmcp.config.json',\n  'frontmcp.config.mjs',\n  'frontmcp.config.cjs',\n];\n\n/**\n * Load and validate a frontmcp.config file from the given directory.\n *\n * Resolution order:\n * 1. frontmcp.config.ts\n * 2. frontmcp.config.js\n * 3. frontmcp.config.json\n * 4. frontmcp.config.mjs\n * 5. frontmcp.config.cjs\n * 6. Derive from package.json (minimal config with 'node' target)\n */\nexport async function loadFrontMcpConfig(cwd: string): Promise<FrontMcpConfigParsed> {\n  const raw = await loadRawConfig(cwd);\n  return validateConfig(raw);\n}\n\n/**\n * Variant that load-errors propagate (parse failures in `frontmcp.config.ts`,\n * missing dependencies, etc.) but schema-validation errors return `undefined`.\n *\n * Used by `runBuild` to support both shapes: the new top-level\n * `frontmcpConfigSchema` (with `deployments`) and the older exec-only shape\n * (top-level `cli`, `sea`, `esbuild`) that `loadExecConfig` consumes\n * directly. A user with the old shape should still get a successful build\n * — the exec-loader picks the file up from disk by itself.\n *\n * Returns `undefined` when:\n *  - no config file is present (caller falls back to CLI flags), or\n *  - the file loads but doesn't match the new schema (legacy shape).\n *\n * Throws when:\n *  - the file exists but can't be parsed (TS syntax error, ESM/CJS mismatch\n *    that even esbuild can't recover from, etc.) — i.e., #365 silent-default\n *    regressions.\n */\nexport async function tryLoadFrontMcpConfig(cwd: string): Promise<FrontMcpConfigParsed | undefined> {\n  let raw: unknown;\n  try {\n    raw = await loadRawConfig(cwd);\n  } catch (err) {\n    // Distinguish \"no config and no package.json\" from real load failures.\n    // `deriveFromPackageJson` throws this exact message — treat it as \"no config\".\n    if ((err as Error).message?.startsWith('No frontmcp.config found')) {\n      return undefined;\n    }\n    throw err;\n  }\n  const result = frontmcpConfigSchema.safeParse(raw);\n  if (!result.success) {\n    // Distinguish two failure shapes:\n    //   1. Legacy exec-only config — top-level `cli` / `sea` / `esbuild`,\n    //      no `deployments` key. Return undefined so `loadExecConfig` picks\n    //      it up directly. Pre-v1.1 fixtures live in this branch.\n    //   2. Anything else — looks like the user attempted a v1.1 config and\n    //      got it wrong (typo'd `deployments`, invalid `target`, etc.).\n    //      Throw so we don't silently fall back to defaults — that was the\n    //      silent-corruption mode #365 was trying to eliminate.\n    const obj = typeof raw === 'object' && raw !== null ? (raw as Record<string, unknown>) : undefined;\n    const isLegacyExecOnlyShape =\n      !!obj && !('deployments' in obj) && ('cli' in obj || 'sea' in obj || 'esbuild' in obj);\n    if (isLegacyExecOnlyShape) return undefined;\n    const issues = result.error.issues.map((i) => `  - ${i.path.join('.')}: ${i.message}`).join('\\n');\n    throw new Error(`Invalid frontmcp.config:\\n${issues}`);\n  }\n  return result.data;\n}\n\n/**\n * Load raw config without validation.\n */\nasync function loadRawConfig(cwd: string): Promise<unknown> {\n  for (const filename of CONFIG_FILENAMES) {\n    const configPath = path.join(cwd, filename);\n    if (!fs.existsSync(configPath)) continue;\n\n    if (filename.endsWith('.json')) {\n      const content = fs.readFileSync(configPath, 'utf-8');\n      return JSON.parse(content);\n    }\n\n    if (filename.endsWith('.ts')) {\n      // #365 — Loading `.ts` under `\"type\": \"commonjs\"` (the default) is a\n      // minefield across Node versions:\n      //   - Node 20: `require()` throws on TS syntax, `await import()` errors\n      //     with \"Make sure to set type: module\".\n      //   - Node 22+: `require(esm)` may succeed but return partial data, OR\n      //     emit a warning on `await import()` even when the load succeeds.\n      //   - Node 24: type-stripping may swallow `import { x } from ...`\n      //     statements, returning `{}` instead of the user's exports — the\n      //     1.1.2-beta.1 silent-defaults regression.\n      // Round 3: under CJS, ALWAYS transpile via esbuild. It's the only path\n      // that produces a deterministic, fully-typed result. ESM projects can\n      // still use Node's runtime loaders since they're well-behaved there.\n      const isCjsProject = await isCommonJsProject(cwd);\n      if (isCjsProject) {\n        try {\n          return await loadTsConfigViaEsbuild(configPath);\n        } catch (esbuildErr) {\n          throw new Error(\n            `Failed to load ${filename} via esbuild.\\n` +\n              `  ${(esbuildErr as Error).message}\\n` +\n              `Hint: ensure the file exports a default config (e.g., ` +\n              `\\`export default defineConfig({...})\\`) and that all imports resolve.`,\n          );\n        }\n      }\n      // ESM project (\"type\": \"module\"): try Node's loaders first (faster,\n      // no transpile cost), fall back to esbuild on failure.\n      let requireErr: Error | undefined;\n      try {\n        const mod = require(configPath);\n        return mod.default ?? mod;\n      } catch (e) {\n        requireErr = e as Error;\n      }\n      try {\n        const mod = await import(configPath);\n        return mod.default ?? mod;\n      } catch {\n        // Fall through to esbuild.\n      }\n      try {\n        return await loadTsConfigViaEsbuild(configPath);\n      } catch (esbuildErr) {\n        throw new Error(\n          `Failed to load ${filename}.\\n` +\n            `  require() error: ${requireErr?.message ?? '(skipped)'}\\n` +\n            `  esbuild error:   ${(esbuildErr as Error).message}\\n` +\n            `Hint: ensure the file exports a default config (e.g., ` +\n            `\\`export default defineConfig({...})\\`) and that all imports resolve.`,\n        );\n      }\n    }\n\n    // JS/MJS/CJS\n    if (filename.endsWith('.mjs')) {\n      const mod = await import(configPath);\n      return mod.default ?? mod;\n    }\n\n    const mod = require(configPath);\n    return mod.default ?? mod;\n  }\n\n  // Fallback: derive from package.json\n  return deriveFromPackageJson(cwd);\n}\n\n/**\n * Read the host project's `package.json.type` to decide whether `await import()`\n * of a `.ts` file is worth attempting. Returns true when the project is\n * declared `\"type\": \"commonjs\"` or omits the field entirely (Node's default).\n *\n * Read errors (no package.json, malformed JSON) are treated as \"CJS\" — that's\n * the safer default for the loader because it routes us through esbuild\n * transpilation rather than relying on Node's experimental TS handling.\n *\n * Routed through `@frontmcp/utils` per repo convention so this module\n * doesn't reach into `node:fs` for an ad-hoc package.json read.\n */\nasync function isCommonJsProject(cwd: string): Promise<boolean> {\n  try {\n    const pkgPath = path.join(cwd, 'package.json');\n    const contents = await readFile(pkgPath);\n    const pkg = JSON.parse(contents) as { type?: string };\n    return pkg.type !== 'module';\n  } catch {\n    return true;\n  }\n}\n\n/**\n * Transpile a TypeScript config file with esbuild (CJS target) and eval the\n * result via Module-via-vm. Used as a last-resort path when neither `require()`\n * (no ts-node hook) nor `await import()` (project is `\"type\": \"commonjs\"`)\n * can load the file directly.\n *\n * Uses `esbuild.build({ bundle: true, packages: 'external' })` rather than\n * `transformSync` so a config that imports a sibling helper TS file\n * (`import { foo } from './helpers'`) gets the helper inlined into the\n * compiled output. Without bundling, the resulting CJS would emit\n * `require('./helpers')` which Node can't resolve under `\"type\": \"commonjs\"`.\n *\n * `packages: 'external'` keeps node_modules dependencies as runtime\n * `require()` calls so `import { defineConfig } from 'frontmcp'` still\n * resolves against the project's installed copy of the SDK.\n */\nasync function loadTsConfigViaEsbuild(configPath: string): Promise<unknown> {\n  const esbuild = require('esbuild') as typeof import('esbuild');\n  const built = await esbuild.build({\n    entryPoints: [configPath],\n    bundle: true,\n    write: false,\n    platform: 'node',\n    format: 'cjs',\n    target: 'es2022',\n    packages: 'external',\n    sourcemap: 'inline',\n    logLevel: 'silent',\n  });\n  if (!built.outputFiles || built.outputFiles.length === 0) {\n    throw new Error('esbuild produced no output for ' + configPath);\n  }\n  const code = built.outputFiles[0].text;\n\n  const Module = require('module') as typeof import('module');\n  const m = new Module(configPath, module);\n  // Make the loaded module's `require` resolve relative to the config dir\n  // so user `import { defineConfig } from 'frontmcp'` keeps working.\n  m.filename = configPath;\n  m.paths = (Module as unknown as { _nodeModulePaths(p: string): string[] })._nodeModulePaths(path.dirname(configPath));\n\n  (m as any)._compile(code, configPath);\n\n  const exported = (m as any).exports as { default?: unknown };\n  return exported?.default ?? exported;\n}\n\n/**\n * Derive minimal config from package.json.\n */\nfunction deriveFromPackageJson(cwd: string): FrontMcpConfig {\n  const pkgPath = path.join(cwd, 'package.json');\n  if (!fs.existsSync(pkgPath)) {\n    throw new Error(\n      'No frontmcp.config found and no package.json. Create a frontmcp.config.ts to configure build targets.',\n    );\n  }\n\n  const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf-8'));\n  return {\n    name: pkg.name?.replace(/^@[^/]+\\//, '') || path.basename(cwd),\n    version: pkg.version || '1.0.0',\n    entry: pkg.main,\n    deployments: [{ target: 'node' }],\n  };\n}\n\n/**\n * Validate raw config against the Zod schema.\n */\nexport function validateConfig(raw: unknown): FrontMcpConfigParsed {\n  const result = frontmcpConfigSchema.safeParse(raw);\n  if (!result.success) {\n    const issues = result.error.issues.map((i) => `  - ${i.path.join('.')}: ${i.message}`).join('\\n');\n    throw new Error(`Invalid frontmcp.config:\\n${issues}`);\n  }\n  return result.data;\n}\n\n/**\n * Find a deployment target by type.\n */\nexport function findDeployment(config: FrontMcpConfigParsed, target: string): DeploymentTarget | undefined {\n  return config.deployments.find((d) => d.target === target);\n}\n\n/**\n * Get all deployment target types from the config.\n */\nexport function getDeploymentTargets(config: FrontMcpConfigParsed): string[] {\n  return config.deployments.map((d) => d.target);\n}\n"]}
+{"version":3,"file":"frontmcp-config.loader.js","sourceRoot":"","sources":["../../../src/config/frontmcp-config.loader.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAmCH,gDAGC;AAUD,gEAQC;AAYD,sCAaC;AAqBD,sDAaC;AASD,sEAQC;AAuND,wCAOC;AAKD,wCAEC;AAKD,oDAEC;AA9WD,2CASyB;AAEzB,qEAA2F;AAG3F,MAAM,gBAAgB,GAAG;IACvB,oBAAoB;IACpB,oBAAoB;IACpB,sBAAsB;IACtB,qBAAqB;IACrB,qBAAqB;CACtB,CAAC;AAEF;;;;;;;;;;GAUG;AACI,KAAK,UAAU,kBAAkB,CAAC,GAAW;IAClD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,0BAA0B,CAAC,UAAkB;IACjE,MAAM,YAAY,GAAG,IAAA,kBAAU,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAA,mBAAW,EAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,CAAC;IAClG,IAAI,CAAC,CAAC,MAAM,IAAA,kBAAU,EAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,0BAA0B,UAAU,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,QAAQ,GAAG,IAAA,gBAAQ,EAAC,YAAY,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC5D,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;;;;GASG;AACI,KAAK,UAAU,aAAa,CAAC,QAAgB,EAAE,SAAS,GAAG,EAAE;IAClE,IAAI,OAAO,GAAG,IAAA,mBAAW,EAAC,QAAQ,CAAC,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;YACxC,IAAI,MAAM,IAAA,kBAAU,EAAC,IAAA,gBAAQ,EAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;gBAClD,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,eAAO,EAAC,OAAO,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,SAAS,CAAC;QACzC,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACI,KAAK,UAAU,qBAAqB,CAAC,GAAW;IACrD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,uEAAuE;QACvE,+EAA+E;QAC/E,IAAK,GAAa,CAAC,OAAO,EAAE,UAAU,CAAC,0BAA0B,CAAC,EAAE,CAAC;YACnE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,6BAA6B,CAAC,UAAkB;IACpE,MAAM,YAAY,GAAG,IAAA,kBAAU,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAA,mBAAW,EAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,CAAC;IAClG,IAAI,CAAC,CAAC,MAAM,IAAA,kBAAU,EAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,0BAA0B,UAAU,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,QAAQ,GAAG,IAAA,gBAAQ,EAAC,YAAY,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC5D,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,GAAY;IACpC,MAAM,MAAM,GAAG,6CAAoB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,kCAAkC;QAClC,sEAAsE;QACtE,wEAAwE;QACxE,8DAA8D;QAC9D,uEAAuE;QACvE,oEAAoE;QACpE,uEAAuE;QACvE,4DAA4D;QAC5D,MAAM,GAAG,GAAG,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAE,GAA+B,CAAC,CAAC,CAAC,SAAS,CAAC;QACnG,MAAM,qBAAqB,GACzB,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,aAAa,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,IAAI,KAAK,IAAI,GAAG,IAAI,SAAS,IAAI,GAAG,CAAC,CAAC;QACzF,IAAI,qBAAqB;YAAE,OAAO,SAAS,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClG,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,aAAa,CAAC,GAAW;IACtC,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,IAAA,gBAAQ,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,CAAC,MAAM,IAAA,kBAAU,EAAC,UAAU,CAAC,CAAC;YAAE,SAAS;QAC9C,OAAO,iBAAiB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACjD,CAAC;IAED,qCAAqC;IACrC,OAAO,qBAAqB,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAAC,UAAkB,EAAE,QAAgB;IACnE,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,IAAA,gBAAQ,EAAC,UAAU,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAA,eAAO,EAAC,UAAU,CAAC,CAAC;QAChC,qEAAqE;QACrE,kCAAkC;QAClC,wEAAwE;QACxE,4CAA4C;QAC5C,uEAAuE;QACvE,sEAAsE;QACtE,kEAAkE;QAClE,qEAAqE;QACrE,+CAA+C;QAC/C,uEAAuE;QACvE,sEAAsE;QACtE,qEAAqE;QACrE,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,OAAO,MAAM,sBAAsB,CAAC,UAAU,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CACb,kBAAkB,QAAQ,iBAAiB;oBACzC,KAAM,UAAoB,CAAC,OAAO,IAAI;oBACtC,wDAAwD;oBACxD,uEAAuE,CAC1E,CAAC;YACJ,CAAC;QACH,CAAC;QACD,oEAAoE;QACpE,uDAAuD;QACvD,IAAI,UAA6B,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;YAChC,OAAO,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,UAAU,GAAG,CAAU,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC;YACH,0EAA0E;YAC1E,+DAA+D;YAC/D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAA,qBAAa,EAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC;YACzD,OAAO,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,sBAAsB,CAAC,UAAU,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,kBAAkB,QAAQ,KAAK;gBAC7B,sBAAsB,UAAU,EAAE,OAAO,IAAI,WAAW,IAAI;gBAC5D,sBAAuB,UAAoB,CAAC,OAAO,IAAI;gBACvD,wDAAwD;gBACxD,uEAAuE,CAC1E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,aAAa;IACb,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAA,qBAAa,EAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC;QACzD,OAAO,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC;IAC5B,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAChC,OAAO,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC;AAC5B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,iBAAiB,CAAC,GAAW;IAC1C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAA,gBAAQ,EAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,MAAM,IAAA,gBAAQ,EAAC,OAAO,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAsB,CAAC;QACtD,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,KAAK,UAAU,sBAAsB,CAAC,UAAkB;IACtD,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAA6B,CAAC;IAC/D,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC;QAChC,WAAW,EAAE,CAAC,UAAU,CAAC;QACzB,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,UAAU;QACpB,SAAS,EAAE,QAAQ;QACnB,QAAQ,EAAE,QAAQ;KACnB,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,UAAU,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEvC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAA4B,CAAC;IAC5D,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACzC,wEAAwE;IACxE,mEAAmE;IACnE,CAAC,CAAC,QAAQ,GAAG,UAAU,CAAC;IACxB,CAAC,CAAC,KAAK,GAAI,MAA+D,CAAC,gBAAgB,CAAC,IAAA,eAAO,EAAC,UAAU,CAAC,CAAC,CAAC;IAEhH,CAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAEtC,MAAM,QAAQ,GAAI,CAAS,CAAC,OAAgC,CAAC;IAC7D,OAAO,QAAQ,EAAE,OAAO,IAAI,QAAQ,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,qBAAqB,CAAC,GAAW;IAC9C,MAAM,OAAO,GAAG,IAAA,gBAAQ,EAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC9C,IAAI,CAAC,CAAC,MAAM,IAAA,kBAAU,EAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,uGAAuG,CACxG,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAA,gBAAQ,EAAC,OAAO,CAAC,CAAC,CAAC;IAChD,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,IAAA,gBAAQ,EAAC,GAAG,CAAC;QACzD,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,OAAO;QAC/B,KAAK,EAAE,GAAG,CAAC,IAAI;QACf,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;KAClC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,GAAY;IACzC,MAAM,MAAM,GAAG,6CAAoB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClG,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,MAA4B,EAAE,MAAc;IACzE,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;AAC7D,CAAC;AAED;;GAEG;AACH,SAAgB,oBAAoB,CAAC,MAA4B;IAC/D,OAAO,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACjD,CAAC","sourcesContent":["/**\n * FrontMCP Config Loader\n *\n * Loads `frontmcp.config.(json|js|ts|mjs|cjs)` from a directory.\n * Falls back to deriving minimal config from package.json.\n */\n\nimport {\n  basename,\n  dirname,\n  fileExists,\n  isAbsolute,\n  pathJoin,\n  pathResolve,\n  pathToFileURL,\n  readFile,\n} from '@frontmcp/utils';\n\nimport { frontmcpConfigSchema, type FrontMcpConfigParsed } from './frontmcp-config.schema';\nimport type { DeploymentTarget, FrontMcpConfig } from './frontmcp-config.types';\n\nconst CONFIG_FILENAMES = [\n  'frontmcp.config.ts',\n  'frontmcp.config.js',\n  'frontmcp.config.json',\n  'frontmcp.config.mjs',\n  'frontmcp.config.cjs',\n];\n\n/**\n * Load and validate a frontmcp.config file from the given directory.\n *\n * Resolution order:\n * 1. frontmcp.config.ts\n * 2. frontmcp.config.js\n * 3. frontmcp.config.json\n * 4. frontmcp.config.mjs\n * 5. frontmcp.config.cjs\n * 6. Derive from package.json (minimal config with 'node' target)\n */\nexport async function loadFrontMcpConfig(cwd: string): Promise<FrontMcpConfigParsed> {\n  const raw = await loadRawConfig(cwd);\n  return validateConfig(raw);\n}\n\n/**\n * Load a specific config file by absolute or cwd-relative path. Used by the\n * `--config <path>` flag and the `FRONTMCP_CONFIG` env var (issue #400).\n *\n * Unlike `loadFrontMcpConfig`, this doesn't search `CONFIG_FILENAMES` — the\n * caller already named the file, so a missing-file error is a hard failure\n * (no silent fallback to `deriveFromPackageJson`).\n */\nexport async function loadFrontMcpConfigFromFile(configPath: string): Promise<FrontMcpConfigParsed> {\n  const absolutePath = isAbsolute(configPath) ? configPath : pathResolve(process.cwd(), configPath);\n  if (!(await fileExists(absolutePath))) {\n    throw new Error(`Config file not found: ${configPath}`);\n  }\n  const filename = basename(absolutePath);\n  const raw = await loadRawFileAtPath(absolutePath, filename);\n  return validateConfig(raw);\n}\n\n/**\n * Locate the nearest `frontmcp.config.*` file by walking upward from `cwd`.\n *\n * Issue #400 — monorepo nested apps no longer require `cd <repo-root>`\n * before invoking the CLI. The walk caps at 10 levels to avoid pathological\n * symlink loops.\n *\n * Returns the directory containing the config (so callers can pass it to\n * `loadFrontMcpConfig(dir)`), or `undefined` if nothing was found.\n */\nexport async function findConfigDir(startDir: string, maxLevels = 10): Promise<string | undefined> {\n  let current = pathResolve(startDir);\n  for (let i = 0; i <= maxLevels; i++) {\n    for (const filename of CONFIG_FILENAMES) {\n      if (await fileExists(pathJoin(current, filename))) {\n        return current;\n      }\n    }\n    const parent = dirname(current);\n    if (parent === current) return undefined;\n    current = parent;\n  }\n  return undefined;\n}\n\n/**\n * Variant that load-errors propagate (parse failures in `frontmcp.config.ts`,\n * missing dependencies, etc.) but schema-validation errors return `undefined`.\n *\n * Used by `runBuild` to support both shapes: the new top-level\n * `frontmcpConfigSchema` (with `deployments`) and the older exec-only shape\n * (top-level `cli`, `sea`, `esbuild`) that `loadExecConfig` consumes\n * directly. A user with the old shape should still get a successful build\n * — the exec-loader picks the file up from disk by itself.\n *\n * Returns `undefined` when:\n *  - no config file is present (caller falls back to CLI flags), or\n *  - the file loads but doesn't match the new schema (legacy shape).\n *\n * Throws when:\n *  - the file exists but can't be parsed (TS syntax error, ESM/CJS mismatch\n *    that even esbuild can't recover from, etc.) — i.e., #365 silent-default\n *    regressions.\n */\nexport async function tryLoadFrontMcpConfig(cwd: string): Promise<FrontMcpConfigParsed | undefined> {\n  let raw: unknown;\n  try {\n    raw = await loadRawConfig(cwd);\n  } catch (err) {\n    // Distinguish \"no config and no package.json\" from real load failures.\n    // `deriveFromPackageJson` throws this exact message — treat it as \"no config\".\n    if ((err as Error).message?.startsWith('No frontmcp.config found')) {\n      return undefined;\n    }\n    throw err;\n  }\n  return parseRawOrLegacy(raw);\n}\n\n/**\n * Explicit-path counterpart of {@link tryLoadFrontMcpConfig}. Used by\n * `resolveConfig` for the `--config <path>` / `FRONTMCP_CONFIG` branch so a\n * legacy exec-only config passed via explicit path resolves the same way\n * an auto-discovered one does: `config: undefined`, no throw, callers fall\n * back to `loadExecConfig`. Real parse failures still propagate.\n */\nexport async function tryLoadFrontMcpConfigFromFile(configPath: string): Promise<FrontMcpConfigParsed | undefined> {\n  const absolutePath = isAbsolute(configPath) ? configPath : pathResolve(process.cwd(), configPath);\n  if (!(await fileExists(absolutePath))) {\n    throw new Error(`Config file not found: ${configPath}`);\n  }\n  const filename = basename(absolutePath);\n  const raw = await loadRawFileAtPath(absolutePath, filename);\n  return parseRawOrLegacy(raw);\n}\n\n/**\n * Schema-validate a raw config payload, returning `undefined` when it\n * matches the legacy exec-only shape (top-level `cli` / `sea` / `esbuild`,\n * no `deployments`) and throwing on every other parse failure. Shared\n * between the cwd-search and explicit-path soft loaders so they agree on\n * what \"legacy\" means.\n */\nfunction parseRawOrLegacy(raw: unknown): FrontMcpConfigParsed | undefined {\n  const result = frontmcpConfigSchema.safeParse(raw);\n  if (!result.success) {\n    // Distinguish two failure shapes:\n    //   1. Legacy exec-only config — top-level `cli` / `sea` / `esbuild`,\n    //      no `deployments` key. Return undefined so `loadExecConfig` picks\n    //      it up directly. Pre-v1.1 fixtures live in this branch.\n    //   2. Anything else — looks like the user attempted a v1.1 config and\n    //      got it wrong (typo'd `deployments`, invalid `target`, etc.).\n    //      Throw so we don't silently fall back to defaults — that was the\n    //      silent-corruption mode #365 was trying to eliminate.\n    const obj = typeof raw === 'object' && raw !== null ? (raw as Record<string, unknown>) : undefined;\n    const isLegacyExecOnlyShape =\n      !!obj && !('deployments' in obj) && ('cli' in obj || 'sea' in obj || 'esbuild' in obj);\n    if (isLegacyExecOnlyShape) return undefined;\n    const issues = result.error.issues.map((i) => `  - ${i.path.join('.')}: ${i.message}`).join('\\n');\n    throw new Error(`Invalid frontmcp.config:\\n${issues}`);\n  }\n  return result.data;\n}\n\n/**\n * Load raw config without validation.\n */\nasync function loadRawConfig(cwd: string): Promise<unknown> {\n  for (const filename of CONFIG_FILENAMES) {\n    const configPath = pathJoin(cwd, filename);\n    if (!(await fileExists(configPath))) continue;\n    return loadRawFileAtPath(configPath, filename);\n  }\n\n  // Fallback: derive from package.json\n  return deriveFromPackageJson(cwd);\n}\n\n/**\n * Load a single config file by absolute path (no search). Shared by\n * `loadRawConfig` (search-then-load) and `loadFrontMcpConfigFromFile`\n * (explicit-path).\n */\nasync function loadRawFileAtPath(configPath: string, filename: string): Promise<unknown> {\n  if (filename.endsWith('.json')) {\n    const content = await readFile(configPath);\n    return JSON.parse(content);\n  }\n\n  if (filename.endsWith('.ts')) {\n    const cwd = dirname(configPath);\n    // #365 — Loading `.ts` under `\"type\": \"commonjs\"` (the default) is a\n    // minefield across Node versions:\n    //   - Node 20: `require()` throws on TS syntax, `await import()` errors\n    //     with \"Make sure to set type: module\".\n    //   - Node 22+: `require(esm)` may succeed but return partial data, OR\n    //     emit a warning on `await import()` even when the load succeeds.\n    //   - Node 24: type-stripping may swallow `import { x } from ...`\n    //     statements, returning `{}` instead of the user's exports — the\n    //     1.1.2-beta.1 silent-defaults regression.\n    // Round 3: under CJS, ALWAYS transpile via esbuild. It's the only path\n    // that produces a deterministic, fully-typed result. ESM projects can\n    // still use Node's runtime loaders since they're well-behaved there.\n    const isCjsProject = await isCommonJsProject(cwd);\n    if (isCjsProject) {\n      try {\n        return await loadTsConfigViaEsbuild(configPath);\n      } catch (esbuildErr) {\n        throw new Error(\n          `Failed to load ${filename} via esbuild.\\n` +\n            `  ${(esbuildErr as Error).message}\\n` +\n            `Hint: ensure the file exports a default config (e.g., ` +\n            `\\`export default defineConfig({...})\\`) and that all imports resolve.`,\n        );\n      }\n    }\n    // ESM project (\"type\": \"module\"): try Node's loaders first (faster,\n    // no transpile cost), fall back to esbuild on failure.\n    let requireErr: Error | undefined;\n    try {\n      const mod = require(configPath);\n      return mod.default ?? mod;\n    } catch (e) {\n      requireErr = e as Error;\n    }\n    try {\n      // pathToFileURL — Windows absolute paths (e.g. `C:\\…\\frontmcp.config.ts`)\n      // are not valid ESM specifiers; Node requires a `file://` URL.\n      const mod = await import(pathToFileURL(configPath).href);\n      return mod.default ?? mod;\n    } catch {\n      // Fall through to esbuild.\n    }\n    try {\n      return await loadTsConfigViaEsbuild(configPath);\n    } catch (esbuildErr) {\n      throw new Error(\n        `Failed to load ${filename}.\\n` +\n          `  require() error: ${requireErr?.message ?? '(skipped)'}\\n` +\n          `  esbuild error:   ${(esbuildErr as Error).message}\\n` +\n          `Hint: ensure the file exports a default config (e.g., ` +\n          `\\`export default defineConfig({...})\\`) and that all imports resolve.`,\n      );\n    }\n  }\n\n  // JS/MJS/CJS\n  if (filename.endsWith('.mjs')) {\n    const mod = await import(pathToFileURL(configPath).href);\n    return mod.default ?? mod;\n  }\n\n  const mod = require(configPath);\n  return mod.default ?? mod;\n}\n\n/**\n * Read the host project's `package.json.type` to decide whether `await import()`\n * of a `.ts` file is worth attempting. Returns true when the project is\n * declared `\"type\": \"commonjs\"` or omits the field entirely (Node's default).\n *\n * Read errors (no package.json, malformed JSON) are treated as \"CJS\" — that's\n * the safer default for the loader because it routes us through esbuild\n * transpilation rather than relying on Node's experimental TS handling.\n *\n * Routed through `@frontmcp/utils` per repo convention so this module\n * doesn't reach into `node:fs` for an ad-hoc package.json read.\n */\nasync function isCommonJsProject(cwd: string): Promise<boolean> {\n  try {\n    const pkgPath = pathJoin(cwd, 'package.json');\n    const contents = await readFile(pkgPath);\n    const pkg = JSON.parse(contents) as { type?: string };\n    return pkg.type !== 'module';\n  } catch {\n    return true;\n  }\n}\n\n/**\n * Transpile a TypeScript config file with esbuild (CJS target) and eval the\n * result via Module-via-vm. Used as a last-resort path when neither `require()`\n * (no ts-node hook) nor `await import()` (project is `\"type\": \"commonjs\"`)\n * can load the file directly.\n *\n * Uses `esbuild.build({ bundle: true, packages: 'external' })` rather than\n * `transformSync` so a config that imports a sibling helper TS file\n * (`import { foo } from './helpers'`) gets the helper inlined into the\n * compiled output. Without bundling, the resulting CJS would emit\n * `require('./helpers')` which Node can't resolve under `\"type\": \"commonjs\"`.\n *\n * `packages: 'external'` keeps node_modules dependencies as runtime\n * `require()` calls so `import { defineConfig } from 'frontmcp'` still\n * resolves against the project's installed copy of the SDK.\n */\nasync function loadTsConfigViaEsbuild(configPath: string): Promise<unknown> {\n  const esbuild = require('esbuild') as typeof import('esbuild');\n  const built = await esbuild.build({\n    entryPoints: [configPath],\n    bundle: true,\n    write: false,\n    platform: 'node',\n    format: 'cjs',\n    target: 'es2022',\n    packages: 'external',\n    sourcemap: 'inline',\n    logLevel: 'silent',\n  });\n  if (!built.outputFiles || built.outputFiles.length === 0) {\n    throw new Error('esbuild produced no output for ' + configPath);\n  }\n  const code = built.outputFiles[0].text;\n\n  const Module = require('module') as typeof import('module');\n  const m = new Module(configPath, module);\n  // Make the loaded module's `require` resolve relative to the config dir\n  // so user `import { defineConfig } from 'frontmcp'` keeps working.\n  m.filename = configPath;\n  m.paths = (Module as unknown as { _nodeModulePaths(p: string): string[] })._nodeModulePaths(dirname(configPath));\n\n  (m as any)._compile(code, configPath);\n\n  const exported = (m as any).exports as { default?: unknown };\n  return exported?.default ?? exported;\n}\n\n/**\n * Derive minimal config from package.json.\n */\nasync function deriveFromPackageJson(cwd: string): Promise<FrontMcpConfig> {\n  const pkgPath = pathJoin(cwd, 'package.json');\n  if (!(await fileExists(pkgPath))) {\n    throw new Error(\n      'No frontmcp.config found and no package.json. Create a frontmcp.config.ts to configure build targets.',\n    );\n  }\n\n  const pkg = JSON.parse(await readFile(pkgPath));\n  return {\n    name: pkg.name?.replace(/^@[^/]+\\//, '') || basename(cwd),\n    version: pkg.version || '1.0.0',\n    entry: pkg.main,\n    deployments: [{ target: 'node' }],\n  };\n}\n\n/**\n * Validate raw config against the Zod schema.\n */\nexport function validateConfig(raw: unknown): FrontMcpConfigParsed {\n  const result = frontmcpConfigSchema.safeParse(raw);\n  if (!result.success) {\n    const issues = result.error.issues.map((i) => `  - ${i.path.join('.')}: ${i.message}`).join('\\n');\n    throw new Error(`Invalid frontmcp.config:\\n${issues}`);\n  }\n  return result.data;\n}\n\n/**\n * Find a deployment target by type.\n */\nexport function findDeployment(config: FrontMcpConfigParsed, target: string): DeploymentTarget | undefined {\n  return config.deployments.find((d) => d.target === target);\n}\n\n/**\n * Get all deployment target types from the config.\n */\nexport function getDeploymentTargets(config: FrontMcpConfigParsed): string[] {\n  return config.deployments.map((d) => d.target);\n}\n"]}

package/src/config/frontmcp-config.resolve.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Unified config resolver (issue #400).
+ *
+ * Single entry point each CLI command calls. Applies the precedence rules:
+ *
+ *   explicit CLI flag  >  FRONTMCP_<NAME> env var  >  frontmcp.config field  >  built-in default
+ *
+ * and returns a `ResolvedFrontMcpConfig` with all defaults applied, the
+ * chosen deployment merged in, env overlays composed, and per-command
+ * fields surfaced.
+ *
+ * Config-file resolution order (matches the plan's Phase 2):
+ *   1. Explicit `--config <path>` CLI flag.
+ *   2. `FRONTMCP_CONFIG` env var.
+ *   3. Upward walk from `cwd` to the nearest `frontmcp.config.*`.
+ *   4. None — caller uses defaults / falls back to package.json (handled
+ *      by the existing `loadFrontMcpConfig` for the `build` command).
+ *
+ * Notes:
+ *   - Resolve never throws when no config is present — it returns
+ *     `{ config: undefined, ... }` with the merged env / transport values
+ *     it could compute from CLI options.
+ *   - The legacy exec-only config shape (top-level `cli` / `sea` /
+ *     `esbuild`, no `deployments`) is still resolvable but produces a
+ *     `config: undefined` so `loadExecConfig` can pick the file up.
+ */
+import { type FrontMcpConfigParsed } from './frontmcp-config.schema';
+/** Modes per command — used to choose which env overlay to apply. */
+export type ResolveMode = 'build:cli' | 'build:ship' | 'dev' | 'test' | 'inspector' | 'pm:start' | 'pm:socket' | 'skills';
+export interface ResolveConfigOptions {
+    /** Working directory the command was invoked from. */
+    cwd: string;
+    /** Effective command (drives env-overlay selection). */
+    mode: ResolveMode;
+    /** Explicit `--config <path>` from the CLI. */
+    configPath?: string;
+    /** Environment vars at invocation time (defaults to `process.env`). */
+    env?: NodeJS.ProcessEnv;
+    /** Already-parsed CLI options — values here win over the config. */
+    cliOptions?: Record<string, unknown>;
+}
+export interface ResolvedFrontMcpConfig {
+    /**
+     * Parsed config when one was located + matched the schema. `undefined`
+     * means "no config file found" or "file matched the legacy exec-only
+     * shape" — callers must fall back to CLI/built-in defaults.
+     */
+    config?: FrontMcpConfigParsed;
+    /** Directory that contained the resolved config. */
+    configDir?: string;
+    /** Absolute path to the resolved config file. */
+    configPath?: string;
+    /**
+     * `process.env` ⊕ `config.env.shared` ⊕ `config.env.<mode>` ⊕
+     * `cliOptions.env` (later wins). `.env`/`.env.local` are NOT applied
+     * here — `dev`/`test` load those separately so they win for parity
+     * with existing behavior.
+     */
+    effectiveEnv: Record<string, string>;
+}
+/**
+ * Resolve the config + env for the current command.
+ *
+ * Side-effect-free — call sites apply the returned `effectiveEnv` to the
+ * spawned child themselves (`dev` adds `.env`/`.env.local` on top, etc.).
+ */
+export declare function resolveConfig(options: ResolveConfigOptions): Promise<ResolvedFrontMcpConfig>;

package/src/config/frontmcp-config.resolve.js

@@ -0,0 +1,118 @@
+"use strict";
+/**
+ * Unified config resolver (issue #400).
+ *
+ * Single entry point each CLI command calls. Applies the precedence rules:
+ *
+ *   explicit CLI flag  >  FRONTMCP_<NAME> env var  >  frontmcp.config field  >  built-in default
+ *
+ * and returns a `ResolvedFrontMcpConfig` with all defaults applied, the
+ * chosen deployment merged in, env overlays composed, and per-command
+ * fields surfaced.
+ *
+ * Config-file resolution order (matches the plan's Phase 2):
+ *   1. Explicit `--config <path>` CLI flag.
+ *   2. `FRONTMCP_CONFIG` env var.
+ *   3. Upward walk from `cwd` to the nearest `frontmcp.config.*`.
+ *   4. None — caller uses defaults / falls back to package.json (handled
+ *      by the existing `loadFrontMcpConfig` for the `build` command).
+ *
+ * Notes:
+ *   - Resolve never throws when no config is present — it returns
+ *     `{ config: undefined, ... }` with the merged env / transport values
+ *     it could compute from CLI options.
+ *   - The legacy exec-only config shape (top-level `cli` / `sea` /
+ *     `esbuild`, no `deployments`) is still resolvable but produces a
+ *     `config: undefined` so `loadExecConfig` can pick the file up.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveConfig = resolveConfig;
+const utils_1 = require("@frontmcp/utils");
+const frontmcp_config_loader_1 = require("./frontmcp-config.loader");
+/** Map a `ResolveMode` to the env-overlay key (`'dev'`, `'test'`, `'ship'`). */
+function modeToEnvKey(mode) {
+    switch (mode) {
+        case 'dev':
+        case 'inspector':
+            return 'dev';
+        case 'test':
+            return 'test';
+        case 'build:ship':
+        case 'pm:start':
+        case 'pm:socket':
+            return 'ship';
+        case 'build:cli':
+        case 'skills':
+            return undefined;
+    }
+}
+/**
+ * Resolve the config + env for the current command.
+ *
+ * Side-effect-free — call sites apply the returned `effectiveEnv` to the
+ * spawned child themselves (`dev` adds `.env`/`.env.local` on top, etc.).
+ */
+async function resolveConfig(options) {
+    const env = options.env ?? process.env;
+    // Only string values flow into the spawned child's env — non-strings
+    // here mean a misconfigured `cliOptions.env`, so we silently drop them
+    // rather than corrupting the merged record with `Object`/`number`/etc.
+    const cliEnvRaw = options.cliOptions?.['env'];
+    const cliEnv = typeof cliEnvRaw === 'object' && cliEnvRaw !== null
+        ? Object.fromEntries(Object.entries(cliEnvRaw).filter((entry) => typeof entry[1] === 'string'))
+        : {};
+    // ── Locate the config file ──
+    const explicitPath = options.configPath ?? env['FRONTMCP_CONFIG'];
+    let config;
+    let configPath;
+    let configDir;
+    if (explicitPath) {
+        // Normalize to an absolute path so callers always see canonical metadata
+        // regardless of how the caller-supplied path was spelt (relative, absolute,
+        // or env-var-derived). `configDir` mirrors the auto-discovery branch.
+        configPath = (0, utils_1.isAbsolute)(explicitPath) ? explicitPath : (0, utils_1.pathResolve)(options.cwd, explicitPath);
+        configDir = (0, utils_1.dirname)(configPath);
+        try {
+            // Soft variant: legacy exec-only configs (top-level `cli` / `sea` /
+            // `esbuild`, no `deployments`) resolve to `config: undefined` so
+            // `loadExecConfig` can still pick them up — same behaviour as the
+            // auto-discovery branch below, per the file-header contract. Real
+            // parse/schema failures still propagate as a hard error.
+            config = await (0, frontmcp_config_loader_1.tryLoadFrontMcpConfigFromFile)(configPath);
+        }
+        catch (err) {
+            throw new Error(`Failed to load config from "${explicitPath}": ${err.message}`);
+        }
+    }
+    else {
+        configDir = await (0, frontmcp_config_loader_1.findConfigDir)(options.cwd);
+        if (configDir) {
+            try {
+                config = await (0, frontmcp_config_loader_1.tryLoadFrontMcpConfig)(configDir);
+            }
+            catch (err) {
+                // Surface schema/load errors — silent fallback was the corruption
+                // mode #365 worked to eliminate. The legacy-shape branch inside
+                // `tryLoadFrontMcpConfig` already returns `undefined` for old
+                // exec-only configs, so anything reaching this catch is a real
+                // parse failure that the caller needs to see.
+                throw new Error(`Failed to load frontmcp.config in ${configDir}: ${err.message}`);
+            }
+        }
+    }
+    // ── Compose effective env ──
+    const overlay = config?.env;
+    const modeKey = modeToEnvKey(options.mode);
+    const fromShared = overlay?.shared ?? {};
+    const fromMode = (modeKey && overlay?.[modeKey]) ?? {};
+    // Start from `process.env` so OS / CI / shell env still apply, then layer
+    // shared + mode overlays + CLI-supplied env (later wins).
+    const effectiveEnv = {};
+    for (const [key, value] of Object.entries(env)) {
+        if (typeof value === 'string')
+            effectiveEnv[key] = value;
+    }
+    Object.assign(effectiveEnv, fromShared, fromMode, cliEnv);
+    return { config, configDir, configPath, effectiveEnv };
+}
+//# sourceMappingURL=frontmcp-config.resolve.js.map

package/src/config/frontmcp-config.resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontmcp-config.resolve.js","sourceRoot":"","sources":["../../../src/config/frontmcp-config.resolve.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;;AA2EH,sCAmEC;AA5ID,2CAAmE;AAEnE,qEAA+G;AA+C/G,gFAAgF;AAChF,SAAS,YAAY,CAAC,IAAiB;IACrC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,KAAK,CAAC;QACX,KAAK,WAAW;YACd,OAAO,KAAK,CAAC;QACf,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;QAChB,KAAK,YAAY,CAAC;QAClB,KAAK,UAAU,CAAC;QAChB,KAAK,WAAW;YACd,OAAO,MAAM,CAAC;QAChB,KAAK,WAAW,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,aAAa,CAAC,OAA6B;IAC/D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,qEAAqE;IACrE,uEAAuE;IACvE,uEAAuE;IACvE,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,MAAM,GACV,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI;QACjD,CAAC,CAAC,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,SAAoC,CAAC,CAAC,MAAM,CACzD,CAAC,KAAK,EAA6B,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CACnE,CACF;QACH,CAAC,CAAC,EAAE,CAAC;IAET,+BAA+B;IAC/B,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAClE,IAAI,MAAwC,CAAC;IAC7C,IAAI,UAA8B,CAAC;IACnC,IAAI,SAA6B,CAAC;IAElC,IAAI,YAAY,EAAE,CAAC;QACjB,yEAAyE;QACzE,4EAA4E;QAC5E,sEAAsE;QACtE,UAAU,GAAG,IAAA,kBAAU,EAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAA,mBAAW,EAAC,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAC9F,SAAS,GAAG,IAAA,eAAO,EAAC,UAAU,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,oEAAoE;YACpE,iEAAiE;YACjE,kEAAkE;YAClE,kEAAkE;YAClE,yDAAyD;YACzD,MAAM,GAAG,MAAM,IAAA,sDAA6B,EAAC,UAAU,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,+BAA+B,YAAY,MAAO,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;SAAM,CAAC;QACN,SAAS,GAAG,MAAM,IAAA,sCAAa,EAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,IAAA,8CAAqB,EAAC,SAAS,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,kEAAkE;gBAClE,gEAAgE;gBAChE,8DAA8D;gBAC9D,+DAA+D;gBAC/D,8CAA8C;gBAC9C,MAAM,IAAI,KAAK,CAAC,qCAAqC,SAAS,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/F,CAAC;QACH,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,MAAM,OAAO,GAAG,MAAM,EAAE,GAAG,CAAC;IAC5B,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,OAAO,EAAE,MAAM,IAAI,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,0EAA0E;IAC1E,0DAA0D;IAC1D,MAAM,YAAY,GAA2B,EAAE,CAAC;IAChD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,YAAY,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC3D,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAE1D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;AACzD,CAAC","sourcesContent":["/**\n * Unified config resolver (issue #400).\n *\n * Single entry point each CLI command calls. Applies the precedence rules:\n *\n *   explicit CLI flag  >  FRONTMCP_<NAME> env var  >  frontmcp.config field  >  built-in default\n *\n * and returns a `ResolvedFrontMcpConfig` with all defaults applied, the\n * chosen deployment merged in, env overlays composed, and per-command\n * fields surfaced.\n *\n * Config-file resolution order (matches the plan's Phase 2):\n *   1. Explicit `--config <path>` CLI flag.\n *   2. `FRONTMCP_CONFIG` env var.\n *   3. Upward walk from `cwd` to the nearest `frontmcp.config.*`.\n *   4. None — caller uses defaults / falls back to package.json (handled\n *      by the existing `loadFrontMcpConfig` for the `build` command).\n *\n * Notes:\n *   - Resolve never throws when no config is present — it returns\n *     `{ config: undefined, ... }` with the merged env / transport values\n *     it could compute from CLI options.\n *   - The legacy exec-only config shape (top-level `cli` / `sea` /\n *     `esbuild`, no `deployments`) is still resolvable but produces a\n *     `config: undefined` so `loadExecConfig` can pick the file up.\n */\n\nimport { dirname, isAbsolute, pathResolve } from '@frontmcp/utils';\n\nimport { findConfigDir, tryLoadFrontMcpConfig, tryLoadFrontMcpConfigFromFile } from './frontmcp-config.loader';\nimport { type FrontMcpConfigParsed } from './frontmcp-config.schema';\n\n/** Modes per command — used to choose which env overlay to apply. */\nexport type ResolveMode =\n  | 'build:cli'\n  | 'build:ship'\n  | 'dev'\n  | 'test'\n  | 'inspector'\n  | 'pm:start'\n  | 'pm:socket'\n  | 'skills';\n\nexport interface ResolveConfigOptions {\n  /** Working directory the command was invoked from. */\n  cwd: string;\n  /** Effective command (drives env-overlay selection). */\n  mode: ResolveMode;\n  /** Explicit `--config <path>` from the CLI. */\n  configPath?: string;\n  /** Environment vars at invocation time (defaults to `process.env`). */\n  env?: NodeJS.ProcessEnv;\n  /** Already-parsed CLI options — values here win over the config. */\n  cliOptions?: Record<string, unknown>;\n}\n\nexport interface ResolvedFrontMcpConfig {\n  /**\n   * Parsed config when one was located + matched the schema. `undefined`\n   * means \"no config file found\" or \"file matched the legacy exec-only\n   * shape\" — callers must fall back to CLI/built-in defaults.\n   */\n  config?: FrontMcpConfigParsed;\n  /** Directory that contained the resolved config. */\n  configDir?: string;\n  /** Absolute path to the resolved config file. */\n  configPath?: string;\n  /**\n   * `process.env` ⊕ `config.env.shared` ⊕ `config.env.<mode>` ⊕\n   * `cliOptions.env` (later wins). `.env`/`.env.local` are NOT applied\n   * here — `dev`/`test` load those separately so they win for parity\n   * with existing behavior.\n   */\n  effectiveEnv: Record<string, string>;\n}\n\n/** Map a `ResolveMode` to the env-overlay key (`'dev'`, `'test'`, `'ship'`). */\nfunction modeToEnvKey(mode: ResolveMode): 'dev' | 'test' | 'ship' | undefined {\n  switch (mode) {\n    case 'dev':\n    case 'inspector':\n      return 'dev';\n    case 'test':\n      return 'test';\n    case 'build:ship':\n    case 'pm:start':\n    case 'pm:socket':\n      return 'ship';\n    case 'build:cli':\n    case 'skills':\n      return undefined;\n  }\n}\n\n/**\n * Resolve the config + env for the current command.\n *\n * Side-effect-free — call sites apply the returned `effectiveEnv` to the\n * spawned child themselves (`dev` adds `.env`/`.env.local` on top, etc.).\n */\nexport async function resolveConfig(options: ResolveConfigOptions): Promise<ResolvedFrontMcpConfig> {\n  const env = options.env ?? process.env;\n  // Only string values flow into the spawned child's env — non-strings\n  // here mean a misconfigured `cliOptions.env`, so we silently drop them\n  // rather than corrupting the merged record with `Object`/`number`/etc.\n  const cliEnvRaw = options.cliOptions?.['env'];\n  const cliEnv: Record<string, string> =\n    typeof cliEnvRaw === 'object' && cliEnvRaw !== null\n      ? Object.fromEntries(\n          Object.entries(cliEnvRaw as Record<string, unknown>).filter(\n            (entry): entry is [string, string] => typeof entry[1] === 'string',\n          ),\n        )\n      : {};\n\n  // ── Locate the config file ──\n  const explicitPath = options.configPath ?? env['FRONTMCP_CONFIG'];\n  let config: FrontMcpConfigParsed | undefined;\n  let configPath: string | undefined;\n  let configDir: string | undefined;\n\n  if (explicitPath) {\n    // Normalize to an absolute path so callers always see canonical metadata\n    // regardless of how the caller-supplied path was spelt (relative, absolute,\n    // or env-var-derived). `configDir` mirrors the auto-discovery branch.\n    configPath = isAbsolute(explicitPath) ? explicitPath : pathResolve(options.cwd, explicitPath);\n    configDir = dirname(configPath);\n    try {\n      // Soft variant: legacy exec-only configs (top-level `cli` / `sea` /\n      // `esbuild`, no `deployments`) resolve to `config: undefined` so\n      // `loadExecConfig` can still pick them up — same behaviour as the\n      // auto-discovery branch below, per the file-header contract. Real\n      // parse/schema failures still propagate as a hard error.\n      config = await tryLoadFrontMcpConfigFromFile(configPath);\n    } catch (err) {\n      throw new Error(`Failed to load config from \"${explicitPath}\": ${(err as Error).message}`);\n    }\n  } else {\n    configDir = await findConfigDir(options.cwd);\n    if (configDir) {\n      try {\n        config = await tryLoadFrontMcpConfig(configDir);\n      } catch (err) {\n        // Surface schema/load errors — silent fallback was the corruption\n        // mode #365 worked to eliminate. The legacy-shape branch inside\n        // `tryLoadFrontMcpConfig` already returns `undefined` for old\n        // exec-only configs, so anything reaching this catch is a real\n        // parse failure that the caller needs to see.\n        throw new Error(`Failed to load frontmcp.config in ${configDir}: ${(err as Error).message}`);\n      }\n    }\n  }\n\n  // ── Compose effective env ──\n  const overlay = config?.env;\n  const modeKey = modeToEnvKey(options.mode);\n  const fromShared = overlay?.shared ?? {};\n  const fromMode = (modeKey && overlay?.[modeKey]) ?? {};\n  // Start from `process.env` so OS / CI / shell env still apply, then layer\n  // shared + mode overlays + CLI-supplied env (later wins).\n  const effectiveEnv: Record<string, string> = {};\n  for (const [key, value] of Object.entries(env)) {\n    if (typeof value === 'string') effectiveEnv[key] = value;\n  }\n  Object.assign(effectiveEnv, fromShared, fromMode, cliEnv);\n\n  return { config, configDir, configPath, effectiveEnv };\n}\n"]}